<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="6470">
<package pkgid="c6ed76b67809c944c936ad5ff962104cca00602f70f7c623f1d7abd71b6895c4" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.29" rel="lp150.3.12.1"/>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
</package>
<package pkgid="99950f17b95f8db5c099a51bd0f75115c7dd4dec1594f4ae46d366d12b5dcda6" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.12.1"/>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
</package>
<package pkgid="aee37993acad430740c57847ae54f6d759665f0622ffcf367ddc0ae8955e4721" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.29" rel="lp150.3.15.1"/>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
</package>
<package pkgid="d8f55ee27446b494aab05989ecf680934f112a2e7c4c053716bf40b1c4894bbf" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.15.1"/>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
</package>
<package pkgid="37f0000507f499646c66b46fd58d43e3a03099af548d3452a233dbbcfec74f71" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.29" rel="lp150.3.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
</package>
<package pkgid="2f7ded7d0993faa584576aa2c4c2cfac2ddbba497722897ee12ed05630d94ebe" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
</package>
<package pkgid="b3fb685d6bcecdc1241b66f6cc11a3bc9e226b9b078ce54f9a5f5827131c286c" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.29" rel="lp150.3.6.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
</package>
<package pkgid="4ccf0d1f535bacb73bde2278b5ee99575d8693822b67326b53e2407442d7dd1a" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.6.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
</package>
<package pkgid="e3560e8473a0e1d8555710ff9613f58c8265b36388aebabc67913785e8e94955" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.29" rel="lp150.3.9.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
</package>
<package pkgid="5bcc2ecf0dd4aca3c4abb7381954a9c1692b16b939cd856cb3cdf5c0fcecfa48" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.9.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
</package>
<package pkgid="60d00ec1cfd720e4c7d99dc0d5756eca5b1bf26e0b6f7ae2a79e7110a4719dca" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.12.1"/>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
</package>
<package pkgid="14c081aba0cc8a4d4571f9c6e6e6cd95aa3be0edcc6ae70b92f956a908e1b85c" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.15.1"/>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
</package>
<package pkgid="3c8c97fddd1674819955ec6d3015a35203b1b04c200e0f97633d699dfd03b6fe" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
</package>
<package pkgid="23c806e6fda185e9a42324e80b9c281aa5f81928d90a83abefc8278c61d6472d" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.6.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
</package>
<package pkgid="3cd0294ee798c1f387d4ae51810132edfa3f8457fb827809c320b1136eb7a168" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.9.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
</package>
<package pkgid="115c1304cd3dbaf006f0006b0c4d64ecbadf57b0927baea9efe74d0e48a7a691" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="66a592933984874374716eaa397cf20770180b33a2eef266d366f82cfc889c13" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="b5ad98226d03d09b0d9504f20b169be7b52ef3535f6ce27dea2dcf7ae7983522" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
</package>
<package pkgid="1bbdf3cf115e1b3457703b9e3d0ec387746eabd1f7609793bef8f64d393ab2b9" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
</package>
<package pkgid="51b440ce5cf9051effa2f0fd7bb8ea363666b144d1c63e4bbe7f98e9011ca105" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
</package>
<package pkgid="fc124bb9fe028510991bfc039b135681449f192208496a073c24d970f272fd6c" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
</package>
<package pkgid="e110ff447a00ba6cd11b25daa0adb0a663c99e311a1117cb15b6cafa34285f22" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
</package>
<package pkgid="e1a24f0561a592067a1743f87e7241f6a4a356757f6bdb326b95a269d2408931" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
</package>
<package pkgid="c765f34dd57d37dc99d3b8b6b2e27eacf95808dd0a93b90a681f36981013069d" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="5b2e527bf7bd1623187fdfe985c3dcc96b83f1941d14c03003f36e4bc2b8354b" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="4c49c25e54741618064a9d5ba5225704bcedcddeae32489c053feb838aba3bee" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="83fbf9f5f139876d1fb2d47d5816202f3463cb611264cfb3677b47e662f4fc47" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="ec7c7a49b1390e43581e88d23f1025236b0ac012f18376f09b377072c39bfa92" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="db8fd1fbc395e12395ec1233995bffcd5d8b84dc32e2dcace572a14c500025c0" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="916af31aa3545dc5cb993cd538b8b45199c0efcdcf1ab25749c98cd87a26708e" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="dfd9db918528b5669041c83a28ebeae48519189bd919d6edfa5b4c44aead4ae5" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
</package>
<package pkgid="32c044a22015813685bce5944a5b6c569703c2150af3a640dabc0f48439210b7" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
</package>
<package pkgid="ad7b5451048fb472e2d177b384dee2175873ab724b4d593b86872025c387d939" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
</package>
<package pkgid="e5d75b560237016bd3398f307843e0a3a653bb160226cd8b43687039e9ac45da" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="df5b23dfdd6165f1912f5ec09893d43bc01ca10f5dd673a58b71f1d572eff935" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="18b5fc06d2377bdbe62dd92ca6ac6b8ee4a2c9b7ec11e82a5f85eda8076e805c" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="b15616391c79330d76f20908f983e045a291c3e0fc18ebf3d58668c300e5864b" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="c127a1674114c77ac3be8749ead7b6556a63f26366d877f68d8ab8a4ea63485a" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
</package>
<package pkgid="2834a8435986acc2475015005534c0c57ef2cedaa1546653df8f7d50f475e966" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
</package>
<package pkgid="08d7535b7bdf4ef2914cedae976197423cac50d6166358b379e251c8968a8d9f" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
</package>
<package pkgid="09b028d6af35a95994c7c95633f5c121e13d66045d1b8a7dae5146ca66ee3e96" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="e2471ca198b11ce98c99d0fb8324cf079a937b278bed71ec8248af89f8a76069" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="9a518e787fa9e4a7e54690237f3b0815222d18106fa25c59b51d17a9c011813d" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="e3658048366c0afb6e9f10c05e80e5fd3e7417c19366e227bb20f84f51299e22" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="5f2b6b31c35a8ce68905d6604d339420945bde4b5e82f1096e49e72802820215" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
</package>
<package pkgid="9f425b2f84f6b5000b02df38c4e944711e6444f4d5012a565cbb533eedfb144c" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
</package>
<package pkgid="3aac291d31044087d1dcabb10ffc08cd64f72982e3c8cd5d332ec42980c60123" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
</package>
<package pkgid="5a8063c3de7ed15627b1c3f4b2768cc7d3b1f108e1def9157cda6c4b99581b91" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="a9250be90c255c506f95af8299489a0be36a3104d1f1f8d2a490acfd9e3761ee" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="a656d0281c6ce6517322398b85dfd23be2e6ac2db840e9edbcc9019faf3e101e" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="3ebb6f0182fb740bf9a298020cf5c1b4ca059f060618d14834ff17e9b2a5653a" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="d687fc4f77b57ee4d0b42cf56c81a097b98dc3ec4ed8dc4cf9dce90883aaca84" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
</package>
<package pkgid="b1f3fb47f94a7982192c5ede021e81a6e3199bdac97ea697253097db08d478e4" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
</package>
<package pkgid="7825e8dc89c2425f04f85f9a1f16d8fa380d6ea4c2d95be16adc77bffd1c249f" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
</package>
<package pkgid="15447586d5d6e249e5bc8ee4989734663fb8da1035def6bea9ae7b8fbe428941" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="ba95ab8649ca07ed373c3e61743e22f6e3d634bdbb220a30389bd7f8cc79ccb8" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="5b795b321dfe8a5bc6ae8d4524dcd56bdc92fb1f8566e77b5aa84a678da11de0" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="90bc2a7a8cce33316db5c77d887ddbd13b6c53315ad3d6b36b474993d18c771b" name="Mesa" arch="src">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="b4d79ef9eeab4bbf768480d47a7fdba7e6b1cf76e779d6eb51dc5463871dfe80" name="Mesa" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="e4f24228b8076efaaed5b41491851aa4725371e9b3568d7f0ca241e90aed9a77" name="Mesa-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="77b025f768ea1eda4ad6ebac210493a6f4d3a44931b10464853f68537df11bbc" name="Mesa-devel" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="ebb0bfe7e0e5aa70aad972b9d78f0d7f70c8ec63cb9a207daf402d875d936891" name="Mesa-dri" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="1811fc967855bfaad9c598813d9651120e3cbbc37f1f8de2cbcb555a3c70db67" name="Mesa-dri-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="a765be937c8f7f8a499512622430bc84b01ea422aed850097589a400b75e63da" name="Mesa-dri-devel" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="b68626cce97fc863f5f5ab9964ba23a231a3df112a147c9fb3378c5bc72eb02f" name="Mesa-dri-nouveau" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="e49132b1da6e6768ef3036a329a9cc9cdb1fda947752559d952accd24d0cc652" name="Mesa-dri-nouveau-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="c6def79a995673cb05d1d52b295e7e18e2ac90338d69401130b6fecbbdc63dbf" name="Mesa-drivers" arch="src">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="c31a8879d5a571a0d4f4d762614d48caa37d70b0aab6c0330f34daebe556c898" name="Mesa-gallium" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="b2f290f6bd1f589848e0d6e9a582848c4cd42b8f25eabc1d32601b1f58261e35" name="Mesa-gallium-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="f9d03f6549f6b6d7c647d864780cc61c6fb6b570e40baf685b0c133d4dd4cc6e" name="Mesa-libEGL-devel" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="5ebde80453c10eed4272d08a3e339eefaa8ecce26c58f2556e96946317cbab9c" name="Mesa-libEGL1" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="a5fe81acda130cfa698d2b9d0cddcb33e29205dcba96d4d172096728b60e4311" name="Mesa-libEGL1-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="d8c5f74abe0a9b56c5f80ed562511ea76574bca472ba0448f5a35fea176d52a2" name="Mesa-libGL-devel" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="bc34ce1cb03607b0bf80c0e31551efe9b5511fee2750ad3e590bf01b1311b693" name="Mesa-libGL1" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="2ec2888a1c1251fc8182b92eae7874fbe4dca472b231c6eb4280c87b6723e6c5" name="Mesa-libGL1-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="dd2fc9fb953d7bf2d2af12774b4324b8600bb447b062f04331e3a05135a4025e" name="Mesa-libGLESv1_CM-devel" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="6b35e1f76c73647d6a50b4a0b0d13fef830ca9761b760c070b7c3eede45ff781" name="Mesa-libGLESv1_CM1" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="81219cd9557cfa33525bbd09ac7ddbd293c2789535eebe998900d873aecf24ac" name="Mesa-libGLESv2-2" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="41e4e2cf2d27542b379787a6198db0aebba86e80464737304bef0b7bbdb437fb" name="Mesa-libGLESv2-devel" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="f9db208297daf93e980386fc0487077e866a4ef834be0e5ac3ce67290531f3a0" name="Mesa-libGLESv3-devel" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="ce8d5f29148c71779ee9c9b124a82788091eaf876d9e91bbadec6ca466c53c70" name="Mesa-libOpenCL" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="2c7ba26ab2e8745b69986eab52e1b69ef3a2dbdf973be6e890feacb30c1203d1" name="Mesa-libVulkan-devel" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="259d705b060f534d43abb9b8cc03fea09f7dabaf97a0cf378223bc6a59195063" name="Mesa-libd3d" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="c3267547b594534b5f56c7ecf487708fd3c4cf47d3de8b1683410f7b6ad5c5c7" name="Mesa-libd3d-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="681e9e3ba43fdcce2a0d6c78ad38d31c2d4b15ab57ec4ce4c8395e30ea68c9bd" name="Mesa-libd3d-devel" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="c4bf6e3489ca0a7a1a5eb171565d2380881861e7dab7592ec67ac98246919201" name="Mesa-libd3d-devel-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="fe4d1053f62e826c97245433096423275646b17348ffcc9d99d692453802a840" name="Mesa-libglapi-devel" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="5f45a09ee636b48ff63b8c8d9b4fc34a0cff72b64a2df06438ae651fdac887b9" name="Mesa-libglapi-devel-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="865d5a9a7b3c763c2d8d62f9863bdc10223b71f3e98d7d891b7797f7d364e995" name="Mesa-libglapi0" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="b975d283fa96d2b847b5969bc8848eed239815616c336409eddef5caed597525" name="Mesa-libglapi0-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="4b03b22691947d26d6fd9d6a0b0b3a9ef47d8a79347f2b3dc22f47d88d6f4add" name="Mesa-libva" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="2dbbbd7559697488ab3ac6541d2b6e59bc7881d0ef1e25b0538e5db3886945e5" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.0.1" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
</package>
<package pkgid="19788e9d9bebf45ba319c928ae6f1c67944727e24db062ed83e3abc8e1c46704" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.0.1" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
</package>
<package pkgid="aded07a84e650a0ac32b75c595cd66eda051c98b2f774125e96dedf7a0bee14c" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.0.2" rel="lp150.3.6.1"/>
  <changelog author="astieger@suse.com" date="1518177600">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
</package>
<package pkgid="510fc3916ecb186429ad0d4f6eea1b975ef45a688d6d43ea4f54dbdaff82d105" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.0.2" rel="lp150.3.6.1"/>
  <changelog author="astieger@suse.com" date="1518177600">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
</package>
<package pkgid="7a41baf89f4b312a77e67600d77c9fa84b5f73e785de303e96c8e4636b762401" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.1.0" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
</package>
<package pkgid="8a358c3c9b7fb2e92f4a7758bb29db843400d7713bcc179b5b3dfe37e9beedbc" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.1.0" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
</package>
<package pkgid="97a534ac92f30ff584d7d197f8e24d497497cb318d155f00a06efc80157fe47a" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.2.0" rel="lp150.3.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
</package>
<package pkgid="48472c2ad5cafd4918cb71f844b5e8d979ab0088c07a0fd56b137a3018ec7bf6" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.2.0" rel="lp150.3.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
</package>
<package pkgid="8c5258c63ce05622e9de8b4d4c69683ef429a7581870dba26f075455b09bc818" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.2.1" rel="lp150.3.17.1"/>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
</package>
<package pkgid="12d407090b12787a4f3877c17cd0bbf57d80fefb88dedd0e919f624a3c435bc2" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.17.1"/>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
</package>
<package pkgid="1586e327b4174390e19fa9e309d5d1ada8073c1b5e348716be1658200a8773ad" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.2.1" rel="lp150.3.20.1"/>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
</package>
<package pkgid="f1d56b0fc27bed7100969eaf2f60b24c2c990bc3117204faab96b3ca5942313a" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.20.1"/>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
</package>
<package pkgid="967dcde6c169fc35330235050cca21812c428d5f914a48447591fe7d0f22785e" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.2.2" rel="lp150.3.23.1"/>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
</package>
<package pkgid="2e1917b0473bf9cbd511450dab8b4fb7304eefcfa6599d7b83e1fd17ef3879aa" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.2.2" rel="lp150.3.23.1"/>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
</package>
<package pkgid="d75ec14a15da70b0bde7fd3b053f45bf54f398c3fdda3424bc0b715401048840" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.3.0" rel="lp150.3.27.2"/>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="8a9d8f048ef9e1de203a1d12aaabcdf9bc2875fa47db2a28884e1c4282e29b4b" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.3.0" rel="lp150.3.27.2"/>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="59c3b548738955733a63d0425911def09d1c4e1c4dcba4d9c700089dbe76de76" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.0.1" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
</package>
<package pkgid="ba3719c1b3179a7cb1c857eda239d4ee00d121f82082799dfc92f2d4a5d7bfe6" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.0.2" rel="lp150.3.6.1"/>
  <changelog author="astieger@suse.com" date="1518177600">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
</package>
<package pkgid="2c43a21c10f849f3c0567dacefc1b2a037ae8f825c9c4c13d68e43d8651aa940" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.1.0" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
</package>
<package pkgid="d460697d6accfa786b318c8d613e97376af35ce2d481dcffaccbf4d288266a41" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.2.0" rel="lp150.3.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
</package>
<package pkgid="2d15665545f7c65ad78fca227a6b7e4f9bed01a28414305f7d3a2a5ccf1a83d4" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.17.1"/>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
</package>
<package pkgid="93e29a81a87e39931b4b12e622033583eeac7b5edb4a4d5297ba3710242f44eb" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.20.1"/>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
</package>
<package pkgid="aaceabca2e01e7f2281d2320a59ff0d3d5361a4b83cafc314d93e6a80f17bf95" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.2.2" rel="lp150.3.23.1"/>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
</package>
<package pkgid="b538dcda81782085b615b26bf5d9aea21e543b34e96ae50ec396e3919e5b698b" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.3.0" rel="lp150.3.27.2"/>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="337df21d31ffadc26c0e84ce8fe73bdd8ee35514e448fd954499def1c12c1393" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.0.1" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
</package>
<package pkgid="c0def2f6dbb68e33cd01abb0354980f439de8542a60c20256b20c745b1b001f1" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.0.2" rel="lp150.3.6.1"/>
  <changelog author="astieger@suse.com" date="1518177600">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
</package>
<package pkgid="dc67e9baaed65ab66f1ac8b098e3129d2d74971953d6af58aa0ddc3b4fe3cd85" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.1.0" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
</package>
<package pkgid="0bf687c219c7ea9e58053851484e6aec70d67b5e3036d8f3c685bee20e9d1244" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.2.0" rel="lp150.3.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
</package>
<package pkgid="824d1963bdbaec1b2a5b1cdb03357252531ff77aae244ffcf9c6d2d28ad71b74" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.17.1"/>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
</package>
<package pkgid="45a7d383e79e47c19f4f09521b2eb437e25803a478c0c1ae5fc9e7722a54d82b" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.20.1"/>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
</package>
<package pkgid="8cb88877fa79a0c56ab0183440b1a83c4e17b007bb19dabf77a5e5a693533724" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.2.2" rel="lp150.3.23.1"/>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
</package>
<package pkgid="9e4e6a56e6062d9fb78d1b3c77babb20297fd40c257777428d3c9c889310ba68" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.3.0" rel="lp150.3.27.2"/>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="26642300a624b4fa3427db5e0f2a6f54d506b369fc90480e858fe96c71b21411" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.0.1" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
</package>
<package pkgid="d3832526e4ce9a46a83c125da0a30ef4b0192e69b530bfaa28926a9612f52086" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.0.2" rel="lp150.3.6.1"/>
  <changelog author="astieger@suse.com" date="1518177600">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
</package>
<package pkgid="fd48455cc4e3e911920526d28e8a32cc65cff1b312b0bbb26465ca2c6440852d" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.1.0" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
</package>
<package pkgid="78dc7b400191dd99fa93594baee2718d70464b465aa42c68cc60721e1a70ad15" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.2.0" rel="lp150.3.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
</package>
<package pkgid="7d8a728a467c5cbdb1b6d8855b38001fe6460de193817b4685cdc82dff8f6d55" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.17.1"/>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
</package>
<package pkgid="46ca4644ede10cb5b23cf1335fb9e6f53e4f9f052a834a3cc25a0503835a2194" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.20.1"/>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
</package>
<package pkgid="1a7e2acc589bb22bf553a9f56e57e61b3fc35c633f7146c27fd86c05075937e0" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.2.2" rel="lp150.3.23.1"/>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
</package>
<package pkgid="c88978a6b5a6d6946b5d5a91910860699f8bf6298d4ea31dc7327eac05cda808" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.3.0" rel="lp150.3.27.2"/>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="e5f6c69a497ecfdfb0adb33a7ef4f4c06c07b63f2381874e90602a1d19e6e1c9" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.0.1" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
</package>
<package pkgid="cc95dab4b31abd350a4d0b7acd75a38e8db97bc1e76f513a97f95620ed769389" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.0.2" rel="lp150.3.6.1"/>
  <changelog author="astieger@suse.com" date="1518177600">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
</package>
<package pkgid="f0440d67c697941ade04f1de140b88767ab2e83cd731bbc6626eeca9a79d812e" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.1.0" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
</package>
<package pkgid="b1b4b76b8274e1b430e3205dc0e86bb5f97e0ac93d330ae4fd0bf7cbc0fe6ee2" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.2.0" rel="lp150.3.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
</package>
<package pkgid="41f6d8545202260bb8c710597898f21236c4cd1f9917b4f0314622cfd3a037bf" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.17.1"/>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
</package>
<package pkgid="ad8ad7ffcbbd16fb1c80b79d9ae7dbd223c668d845ae58097564296e117845f8" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.20.1"/>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
</package>
<package pkgid="e53691688668c9e15d84298ef1b041906e59eb4250b6939dbfe9773e873b6f57" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.2.2" rel="lp150.3.23.1"/>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
</package>
<package pkgid="4b5422a617ac759d64d42aebe897b5097c3fdceda27daa2cf3c32e09b674ecfb" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.3.0" rel="lp150.3.27.2"/>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="127a2f83e48ecf12d9146acf51d1de5e5b93e07e0b91ad8f707d1d9fee2fa912" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.0.1" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
</package>
<package pkgid="7ecd0d4e51104ac572ec5c8b1c12ea606f2ce6f95e515461d9bd74528a667ab0" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.0.2" rel="lp150.3.6.1"/>
  <changelog author="astieger@suse.com" date="1518177600">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
</package>
<package pkgid="68d371eb4e2bc2a3e8ae6a76d5bf1788412f795996dab0c1d1e55daa55dd2cf5" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.1.0" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
</package>
<package pkgid="b7ad3a3d953ce7217efe6867004d7182166e39ad5221247c36b7681550197748" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.2.0" rel="lp150.3.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
</package>
<package pkgid="b2910406ae14db208e3f38c8518492eba57eec9c1fcf29ccd33e8b8f966ca90a" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.17.1"/>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
</package>
<package pkgid="8735804458d37132ec050eb551bc4544bec8547607b648d113a01735bf15e354" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.20.1"/>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
</package>
<package pkgid="911a8374651f041c636998086f3e4b45438937c2fea53e8c41d83cf6d38ddec9" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.2.2" rel="lp150.3.23.1"/>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
</package>
<package pkgid="fd4552e9903698a90e6e022871a11c5eaa5b5a159152bf29f895114d167877b6" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.3.0" rel="lp150.3.27.2"/>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="278b797f74cce0933f447de5fdce6e2507ce92fb9a33d214ec71ee6e7d57d655" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="52.8" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
</package>
<package pkgid="e95e4371ccad689bb04d7059c67a0d520d62516af467d0cc479d5222e74a7514" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="52.8" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
</package>
<package pkgid="4f89c61ce6e0c920e9ddc73aca1e294d82bf46cc62de29b9ab59ff1f4b705e39" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="52.9.0" rel="lp150.3.8.1"/>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
</package>
<package pkgid="c2a5cf9e4e2d8bd6afe7297bcb1480707896270b53637df45be5cae342a0248e" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="52.9.0" rel="lp150.3.8.1"/>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
</package>
<package pkgid="60328c43d43a1c759228ff350cf419f78967dbe01e8c3cb50b71e5484104dd45" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="52.9.1" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
</package>
<package pkgid="a3006d76c12428bdb9b4018cf05f6ea6f3a90bb74b04fc631ed81e13f2f5f3d3" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="52.9.1" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
</package>
<package pkgid="44133180ec08259886c288c55bebd49eba5307ceb25c9817bbff4f4f62c16af8" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="60.0" rel="lp150.3.14.1"/>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
</package>
<package pkgid="dbacbe11d06641c69cc304497178cd41e57abc3768a9a2f9b3d11869defbc49a" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="60.0" rel="lp150.3.14.1"/>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
</package>
<package pkgid="62da0f0a8c8901231a582ac4ce532b7d24f7508ce7015bf55d4d62d1ceb8595d" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="60.2.1" rel="lp150.3.19.1"/>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
</package>
<package pkgid="72d7431e20f475b45d706151b811c486f471ee6ce7210869c3d715ae15d2fbd3" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.19.1"/>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
</package>
<package pkgid="8280a4e66d38437a6b9b5c4b10ba4610fb0ca7f6ad693984eb73a1a83b963cfd" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="60.3.0" rel="lp150.3.25.1"/>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="e7aa584f3feb0fd1b9934ff8166bf7781a0626ebd8093fe1e877e1a62a4d6477" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="60.3.0" rel="lp150.3.25.1"/>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="7e3e0ed32126a5b9a92ec317edd561c44dd3f27b643d1ed317af89355d407d66" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="52.8" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
</package>
<package pkgid="aadbadeb323437e06da578b5fcbbf49fb064d3e7bbbc59ed87dcd4caf7060f8a" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="52.9.0" rel="lp150.3.8.1"/>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
</package>
<package pkgid="f6fdfc364699874f695c4a66e4fc59d655b9aedbce4745b3590ccfc3a57440e7" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="52.9.1" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
</package>
<package pkgid="d082935e4395e298e0b3856e06551fb91ea9cc741c5e87261e31e8da90741fe3" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.0" rel="lp150.3.14.1"/>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
</package>
<package pkgid="601782d07b7dbbe291b82e1e5353ba487a1b2f529370d837ec60298db72c4870" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.19.1"/>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
</package>
<package pkgid="aee76a67defe4ea7b738085a99215ac3b4bea73ac3c9ea7026bc4589276b0044" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.3.0" rel="lp150.3.25.1"/>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="eb0ae6db16045cde92b66bf3780214b1c9a080bc79274a85c91fa3fecf947ddb" name="MozillaThunderbird-devel" arch="x86_64">
  <version epoch="0" ver="52.8" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
</package>
<package pkgid="55f6eed609fc3f4bdaf313cd6a988562614dd0fac26de46e7e542ff4ae53657d" name="MozillaThunderbird-devel" arch="x86_64">
  <version epoch="0" ver="52.9.0" rel="lp150.3.8.1"/>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
</package>
<package pkgid="9e813b3f6f758aa5b917bb4db8372a2746cbb968ba2c84ae66a252427403bbc5" name="MozillaThunderbird-devel" arch="x86_64">
  <version epoch="0" ver="52.9.1" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
</package>
<package pkgid="6e31247f1982b4bf56c8ed6f26122880777493045bfe40b9f142edb0711d065b" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="52.8" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
</package>
<package pkgid="62cac9bd5dd0b86636283bafd563d44a549c95b5da09c52b32488ecb087ca995" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="52.9.0" rel="lp150.3.8.1"/>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
</package>
<package pkgid="24741df7fcf32f3859e6e2c96c30bdeeda08154922191cfe126d9c92946d1aae" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="52.9.1" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
</package>
<package pkgid="07040fb934a367b6f7d16620c18746e0ad3c6ae9649303b0103dcd0627d2b695" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="60.0" rel="lp150.3.14.1"/>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
</package>
<package pkgid="d3c268e0021e24a40377bd168ecb2511f9e0d9704f57c9afa42b3b4c3663fa7b" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.19.1"/>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
</package>
<package pkgid="5891de7a5b163baecb42111f07527fc20596224e3ed2c463e5eb110eca50ef45" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="60.3.0" rel="lp150.3.25.1"/>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="3cb5b9fcfae39f53f374ae439b239d45bed8b6d6969c4ced94aed10043735728" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="52.8" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
</package>
<package pkgid="009a51702bee2c8a81cd6c816dca2be31f2dcfa18721bce3a4ea9b8b562d4870" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="52.9.0" rel="lp150.3.8.1"/>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
</package>
<package pkgid="c8e98242dadf611327abf0e2a20d2c647cd482e4646b5156c086ba3380de0526" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="52.9.1" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
</package>
<package pkgid="821e54ad150aff2373133ff5e9bbea5889ee1dc620ed36143c82c9711a4d943a" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="60.0" rel="lp150.3.14.1"/>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
</package>
<package pkgid="c008e60b1d5cc2ae02e55b954e55e7fd4d86c555dd3dff6e3032ca44e0394ee3" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.19.1"/>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
</package>
<package pkgid="5754c01303b65fddf4796aca66a6f8c6b98d3eaceefa477c508a99722a9d7723" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="60.3.0" rel="lp150.3.25.1"/>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="40a575dcfc63ef23250c5ec9388345ed9dfc54b332c6a9b9a4fd4b267cb3f140" name="PackageKit" arch="src">
  <version epoch="0" ver="1.1.10" rel="lp150.3.3.1"/>
  <changelog author="sckang@suse.com" date="1496318400">- Add PackageKit-avoid-stack-smashing-on-i586.patch: Fix PackageKit
  stack smashing when running "pkcon get-updates" on 32-bit system
  (fdo#101267, bsc#1020028).</changelog>
  <changelog author="dimstar@opensuse.org" date="1496836800">- Update to version 1.1.6:
  + New Feature: Add new status "Running hooks".
  + Bugfixes:
  - Checks NULL strings inside pk_progress_bar_start.
  - Fix segfault when config file is not found.
  - Return success to avoid reboot in pk-offline-update.
  - Use g_printerr() for errors instead g_print().
  - Various tweaks to the offline-updates service file.
  + Backends: fixes for alpm, aptcc and dnf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Explicitly call autoreconf, as one of the patches touches the
  build system. As long as the version of automake available is the
  same as was used to bootstrap the tarball, there is no issue, but
  if the version changes, the call must be explicit.
- Add autoconf-archive BuildRequires in order to actually be able
  to successfully bootstrap.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
</package>
<package pkgid="781cdd13ae5a544d25be7105852b93ba74628314056680d2e46af0f158e48455" name="PackageKit" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp150.3.3.1"/>
  <changelog author="sckang@suse.com" date="1496318400">- Add PackageKit-avoid-stack-smashing-on-i586.patch: Fix PackageKit
  stack smashing when running "pkcon get-updates" on 32-bit system
  (fdo#101267, bsc#1020028).</changelog>
  <changelog author="dimstar@opensuse.org" date="1496836800">- Update to version 1.1.6:
  + New Feature: Add new status "Running hooks".
  + Bugfixes:
  - Checks NULL strings inside pk_progress_bar_start.
  - Fix segfault when config file is not found.
  - Return success to avoid reboot in pk-offline-update.
  - Use g_printerr() for errors instead g_print().
  - Various tweaks to the offline-updates service file.
  + Backends: fixes for alpm, aptcc and dnf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Explicitly call autoreconf, as one of the patches touches the
  build system. As long as the version of automake available is the
  same as was used to bootstrap the tarball, there is no issue, but
  if the version changes, the call must be explicit.
- Add autoconf-archive BuildRequires in order to actually be able
  to successfully bootstrap.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
</package>
<package pkgid="7f7077153c8776f14ba31d878daee54d6b01a604e4ff8bd0249d112057655631" name="PackageKit-backend-zypp" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp150.3.3.1"/>
  <changelog author="sckang@suse.com" date="1496318400">- Add PackageKit-avoid-stack-smashing-on-i586.patch: Fix PackageKit
  stack smashing when running "pkcon get-updates" on 32-bit system
  (fdo#101267, bsc#1020028).</changelog>
  <changelog author="dimstar@opensuse.org" date="1496836800">- Update to version 1.1.6:
  + New Feature: Add new status "Running hooks".
  + Bugfixes:
  - Checks NULL strings inside pk_progress_bar_start.
  - Fix segfault when config file is not found.
  - Return success to avoid reboot in pk-offline-update.
  - Use g_printerr() for errors instead g_print().
  - Various tweaks to the offline-updates service file.
  + Backends: fixes for alpm, aptcc and dnf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Explicitly call autoreconf, as one of the patches touches the
  build system. As long as the version of automake available is the
  same as was used to bootstrap the tarball, there is no issue, but
  if the version changes, the call must be explicit.
- Add autoconf-archive BuildRequires in order to actually be able
  to successfully bootstrap.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
</package>
<package pkgid="8da07742953efb1e271a7c22f77f5cbbe8e245cb78665a37e070a6127e595daf" name="PackageKit-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.1.10" rel="lp150.3.3.1"/>
  <changelog author="sckang@suse.com" date="1496318400">- Add PackageKit-avoid-stack-smashing-on-i586.patch: Fix PackageKit
  stack smashing when running "pkcon get-updates" on 32-bit system
  (fdo#101267, bsc#1020028).</changelog>
  <changelog author="dimstar@opensuse.org" date="1496836800">- Update to version 1.1.6:
  + New Feature: Add new status "Running hooks".
  + Bugfixes:
  - Checks NULL strings inside pk_progress_bar_start.
  - Fix segfault when config file is not found.
  - Return success to avoid reboot in pk-offline-update.
  - Use g_printerr() for errors instead g_print().
  - Various tweaks to the offline-updates service file.
  + Backends: fixes for alpm, aptcc and dnf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Explicitly call autoreconf, as one of the patches touches the
  build system. As long as the version of automake available is the
  same as was used to bootstrap the tarball, there is no issue, but
  if the version changes, the call must be explicit.
- Add autoconf-archive BuildRequires in order to actually be able
  to successfully bootstrap.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
</package>
<package pkgid="4e6d116ffd3f74df0f397517eebe5d1b839e97427631856c1d63f51a38ece5ea" name="PackageKit-devel" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp150.3.3.1"/>
  <changelog author="sckang@suse.com" date="1496318400">- Add PackageKit-avoid-stack-smashing-on-i586.patch: Fix PackageKit
  stack smashing when running "pkcon get-updates" on 32-bit system
  (fdo#101267, bsc#1020028).</changelog>
  <changelog author="dimstar@opensuse.org" date="1496836800">- Update to version 1.1.6:
  + New Feature: Add new status "Running hooks".
  + Bugfixes:
  - Checks NULL strings inside pk_progress_bar_start.
  - Fix segfault when config file is not found.
  - Return success to avoid reboot in pk-offline-update.
  - Use g_printerr() for errors instead g_print().
  - Various tweaks to the offline-updates service file.
  + Backends: fixes for alpm, aptcc and dnf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Explicitly call autoreconf, as one of the patches touches the
  build system. As long as the version of automake available is the
  same as was used to bootstrap the tarball, there is no issue, but
  if the version changes, the call must be explicit.
- Add autoconf-archive BuildRequires in order to actually be able
  to successfully bootstrap.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
</package>
<package pkgid="22d94a40c10f7f97043ff644aa93c4bb2294675273f7fd7f23930f658b5a12ec" name="PackageKit-gstreamer-plugin" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp150.3.3.1"/>
  <changelog author="sckang@suse.com" date="1496318400">- Add PackageKit-avoid-stack-smashing-on-i586.patch: Fix PackageKit
  stack smashing when running "pkcon get-updates" on 32-bit system
  (fdo#101267, bsc#1020028).</changelog>
  <changelog author="dimstar@opensuse.org" date="1496836800">- Update to version 1.1.6:
  + New Feature: Add new status "Running hooks".
  + Bugfixes:
  - Checks NULL strings inside pk_progress_bar_start.
  - Fix segfault when config file is not found.
  - Return success to avoid reboot in pk-offline-update.
  - Use g_printerr() for errors instead g_print().
  - Various tweaks to the offline-updates service file.
  + Backends: fixes for alpm, aptcc and dnf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Explicitly call autoreconf, as one of the patches touches the
  build system. As long as the version of automake available is the
  same as was used to bootstrap the tarball, there is no issue, but
  if the version changes, the call must be explicit.
- Add autoconf-archive BuildRequires in order to actually be able
  to successfully bootstrap.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
</package>
<package pkgid="a05d3f25bd07c094fa70f84cab7e40fd16f3719cd9f599e3f8b5536dfb16cef8" name="PackageKit-gtk3-module" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp150.3.3.1"/>
  <changelog author="sckang@suse.com" date="1496318400">- Add PackageKit-avoid-stack-smashing-on-i586.patch: Fix PackageKit
  stack smashing when running "pkcon get-updates" on 32-bit system
  (fdo#101267, bsc#1020028).</changelog>
  <changelog author="dimstar@opensuse.org" date="1496836800">- Update to version 1.1.6:
  + New Feature: Add new status "Running hooks".
  + Bugfixes:
  - Checks NULL strings inside pk_progress_bar_start.
  - Fix segfault when config file is not found.
  - Return success to avoid reboot in pk-offline-update.
  - Use g_printerr() for errors instead g_print().
  - Various tweaks to the offline-updates service file.
  + Backends: fixes for alpm, aptcc and dnf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Explicitly call autoreconf, as one of the patches touches the
  build system. As long as the version of automake available is the
  same as was used to bootstrap the tarball, there is no issue, but
  if the version changes, the call must be explicit.
- Add autoconf-archive BuildRequires in order to actually be able
  to successfully bootstrap.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
</package>
<package pkgid="b8f689c1fbf53fffc9bbf2a44635b8405bae9ea38a30c14c7284ddaa3cebe222" name="PackageKit-lang" arch="noarch">
  <version epoch="0" ver="1.1.10" rel="lp150.3.3.1"/>
  <changelog author="sckang@suse.com" date="1496318400">- Add PackageKit-avoid-stack-smashing-on-i586.patch: Fix PackageKit
  stack smashing when running "pkcon get-updates" on 32-bit system
  (fdo#101267, bsc#1020028).</changelog>
  <changelog author="dimstar@opensuse.org" date="1496836800">- Update to version 1.1.6:
  + New Feature: Add new status "Running hooks".
  + Bugfixes:
  - Checks NULL strings inside pk_progress_bar_start.
  - Fix segfault when config file is not found.
  - Return success to avoid reboot in pk-offline-update.
  - Use g_printerr() for errors instead g_print().
  - Various tweaks to the offline-updates service file.
  + Backends: fixes for alpm, aptcc and dnf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Explicitly call autoreconf, as one of the patches touches the
  build system. As long as the version of automake available is the
  same as was used to bootstrap the tarball, there is no issue, but
  if the version changes, the call must be explicit.
- Add autoconf-archive BuildRequires in order to actually be able
  to successfully bootstrap.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
</package>
<package pkgid="af5fd7b0ed9afab9498f038bb9e05ee1981afb35b641dd14066e79e3ff8565ad" name="Photini" arch="noarch">
  <version epoch="0" ver="2018.5.0" rel="lp150.2.3.1"/>
  <changelog author="aloisio@gmx.com" date="1487592000">- Initial package (version 2016.12.0)</changelog>
  <changelog author="aloisio@gmx.com" date="1487592001">- Minor change</changelog>
  <changelog author="adam.reichold@t-online.de" date="1493640000">- Bump to latest upstream version</changelog>
  <changelog author="aloisio@gmx.com" date="1493726400">- Update to version 2017.5
  * Migrate Bing map from v7 to v8 of Bing API.
  * Many other map improvements.
  * Time adjustment offset now includes time zone.</changelog>
  <changelog author="aloisio@gmx.com" date="1493726401">- Added multiple icon sizes</changelog>
  <changelog author="jengelh@inai.de" date="1493985600">- Remove redundant filler words from description.</changelog>
  <changelog author="aloisio@gmx.com" date="1496404800">- Update to version 2017.6
  * Add location address metadata to map tabs.
  * Fix bug in Flickr uploader if user hasn't set a "buddy" icon.
  * Use OpenCage Data for OSM map search and address lookup.</changelog>
  <changelog author="aloisio@gmx.com" date="1502280000">- Update to version 2017.8
  * Use Exif/Xmp thumbnails instead of computing from image data.
  * Improved video file metadata reading.
  * Added context menu to choose one of them.
  * Added context menu to image selector.
  * Can regenerate thumbnail, including from video files.
- Disabled tests (none was actually being performed)</changelog>
  <changelog author="aloisio@gmx.com" date="1503057600">- Update to 2017.08.1
  * Added option to preserve file timestamps.
  * Added option to change copyright boilerplate text.
  * Added config file option to change application style.
  * Fix bug with importing files with spaces in their names.
  * Changed importer template marker from () to {}.</changelog>
  <changelog author="aloisio@gmx.com" date="1507032000">- Update to 2017.10.0
  * Use timezone metadata from some Canon cameras.
  * Make thumbnails 160x120 as specified by DCF.
  * Fix bug in localisation of uploader tabs.
  * Substantial rewrite of metadata handling.</changelog>
  <changelog author="aloisio@gmx.com" date="1512129600">- Update to 2017.12.0
  * Add 'rating' to descriptive tab.
  * Don't try to upload files over 1 GByte to Flickr.
  * Fix bug with thembnails of portrait format images.
- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1518264000">- Update to 2018.2.0
  * All maps are faster and less buggy.</changelog>
  <changelog author="aloisio@gmx.com" date="1524657600">- Added Photini-PyQt5-libGL.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1524657601">- Added Photini-Bing-map.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1525176000">- Update to version 2018.5.0:
  * Improved calculation of "35mm equivalent" focal length.
  * Migrate spell check from PyEnchant to Gspell.
  * Use environment variable to set location of config file.
  * Copy more metadata to sidecar when it is created.
  * Fix problem with QtWebEngine and some PyQt versions.
  * Many other bug fixes and minor improvements.
- Dropped Photini-PyQt5-libGL.patch and Photini-Bing-map.patch
  (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1533643200">- Added missing runtime dependency (fixes boo#1103804)</changelog>
</package>
<package pkgid="3a4b865d91e33ff62629a77f5e2a6dc11bc97aab3fc7d45578e9c25786f5a4c5" name="Photini" arch="src">
  <version epoch="0" ver="2018.5.0" rel="lp150.2.3.1"/>
  <changelog author="aloisio@gmx.com" date="1487592000">- Initial package (version 2016.12.0)</changelog>
  <changelog author="aloisio@gmx.com" date="1487592001">- Minor change</changelog>
  <changelog author="adam.reichold@t-online.de" date="1493640000">- Bump to latest upstream version</changelog>
  <changelog author="aloisio@gmx.com" date="1493726400">- Update to version 2017.5
  * Migrate Bing map from v7 to v8 of Bing API.
  * Many other map improvements.
  * Time adjustment offset now includes time zone.</changelog>
  <changelog author="aloisio@gmx.com" date="1493726401">- Added multiple icon sizes</changelog>
  <changelog author="jengelh@inai.de" date="1493985600">- Remove redundant filler words from description.</changelog>
  <changelog author="aloisio@gmx.com" date="1496404800">- Update to version 2017.6
  * Add location address metadata to map tabs.
  * Fix bug in Flickr uploader if user hasn't set a "buddy" icon.
  * Use OpenCage Data for OSM map search and address lookup.</changelog>
  <changelog author="aloisio@gmx.com" date="1502280000">- Update to version 2017.8
  * Use Exif/Xmp thumbnails instead of computing from image data.
  * Improved video file metadata reading.
  * Added context menu to choose one of them.
  * Added context menu to image selector.
  * Can regenerate thumbnail, including from video files.
- Disabled tests (none was actually being performed)</changelog>
  <changelog author="aloisio@gmx.com" date="1503057600">- Update to 2017.08.1
  * Added option to preserve file timestamps.
  * Added option to change copyright boilerplate text.
  * Added config file option to change application style.
  * Fix bug with importing files with spaces in their names.
  * Changed importer template marker from () to {}.</changelog>
  <changelog author="aloisio@gmx.com" date="1507032000">- Update to 2017.10.0
  * Use timezone metadata from some Canon cameras.
  * Make thumbnails 160x120 as specified by DCF.
  * Fix bug in localisation of uploader tabs.
  * Substantial rewrite of metadata handling.</changelog>
  <changelog author="aloisio@gmx.com" date="1512129600">- Update to 2017.12.0
  * Add 'rating' to descriptive tab.
  * Don't try to upload files over 1 GByte to Flickr.
  * Fix bug with thembnails of portrait format images.
- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1518264000">- Update to 2018.2.0
  * All maps are faster and less buggy.</changelog>
  <changelog author="aloisio@gmx.com" date="1524657600">- Added Photini-PyQt5-libGL.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1524657601">- Added Photini-Bing-map.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1525176000">- Update to version 2018.5.0:
  * Improved calculation of "35mm equivalent" focal length.
  * Migrate spell check from PyEnchant to Gspell.
  * Use environment variable to set location of config file.
  * Copy more metadata to sidecar when it is created.
  * Fix problem with QtWebEngine and some PyQt versions.
  * Many other bug fixes and minor improvements.
- Dropped Photini-PyQt5-libGL.patch and Photini-Bing-map.patch
  (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1533643200">- Added missing runtime dependency (fixes boo#1103804)</changelog>
</package>
<package pkgid="e080ba99ce9768f456e4b53f569ccb36c7ad881228acc23103eb763907bc6e8c" name="Regina-REXX" arch="src">
  <version epoch="0" ver="3.9.1" rel="lp150.2.3.1"/>
  <changelog author="ro@suse.de" date="968932800">- update to 2.1
- fix for alpha</changelog>
  <changelog author="schwab@suse.de" date="969278400">- Use alpha patch on ia64 and lower opt level.</changelog>
  <changelog author="mfabian@suse.de" date="989409600">- bzip2 sources</changelog>
  <changelog author="schwab@suse.de" date="992606400">- Fix for new autoconf.</changelog>
  <changelog author="coolo@suse.de" date="1021982400">- use %_libdir</changelog>
  <changelog author="mge@suse.de" date="1029412800">- update to 3.0</changelog>
  <changelog author="mge@suse.de" date="1029499200">- fix building on 64bit</changelog>
  <changelog author="mge@suse.de" date="1029844800">- fix dependencies (remove BuildRoot from installed scripts)</changelog>
  <changelog author="ro@suse.de" date="1032264000">- removed bogus self-provides</changelog>
  <changelog author="mmj@suse.de" date="1055678400">- Package all dirs</changelog>
  <changelog author="mge@suse.de" date="1060084800">- update to 3.2</changelog>
  <changelog author="mge@suse.de" date="1076328000">- added SONAME (libregina.so) to library</changelog>
  <changelog author="mge@suse.de" date="1092312000">- update to 3.3</changelog>
  <changelog author="dmueller@suse.de" date="1130760000">- don't build as root</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="cthiel@suse.de" date="1219924800">- fix init script</changelog>
  <changelog author="mpost@suse.com" date="1461153600">- Upgraded to version 3.9.1
- Added Regina-REXX-regutil-3.9.1-doc.pdf
- Removed regina-rxstack-lsb.init.d and added a systemd unit file
  for rxstack.
- Converted all hardcoded paths to RPM macros.
- Removed obsolete regina-rpmlintrc file
- Removed the following obsolete patches:
  regina-3.3-configure.diff
  regina-3.3-Makefile.in.diff
- Removed deprecated Authors section
- Broke the documentation out into a separate package.
- Removed redundant changelog entries from the spec file.</changelog>
  <changelog author="mpluskal@suse.com" date="1462190400">- Rename package to Regina-REXX</changelog>
  <changelog author="mpluskal@suse.com" date="1496923200">- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1521115200">- Modernise spec file with spec-cleaner
- Allow alternative rexx implementations to be installed in
  parallel (bsc#1083875)</changelog>
</package>
<package pkgid="2e9783c440e084d1286e93900dc47d3ca2ed78fee1e3e9ffa11abeb240be080c" name="Regina-REXX" arch="x86_64">
  <version epoch="0" ver="3.9.1" rel="lp150.2.3.1"/>
  <changelog author="mge@suse.de" date="1060084800">- update to 3.2</changelog>
  <changelog author="mge@suse.de" date="1076328000">- added SONAME (libregina.so) to library</changelog>
  <changelog author="mge@suse.de" date="1092312000">- update to 3.3</changelog>
  <changelog author="dmueller@suse.de" date="1130760000">- don't build as root</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="cthiel@suse.de" date="1219924800">- fix init script</changelog>
  <changelog author="mpost@suse.com" date="1461153600">- Upgraded to version 3.9.1
- Added Regina-REXX-regutil-3.9.1-doc.pdf
- Removed regina-rxstack-lsb.init.d and added a systemd unit file
  for rxstack.
- Converted all hardcoded paths to RPM macros.
- Removed obsolete regina-rpmlintrc file
- Removed the following obsolete patches:
  regina-3.3-configure.diff
  regina-3.3-Makefile.in.diff
- Removed deprecated Authors section
- Broke the documentation out into a separate package.
- Removed redundant changelog entries from the spec file.</changelog>
  <changelog author="mpluskal@suse.com" date="1462190400">- Rename package to Regina-REXX</changelog>
  <changelog author="mpluskal@suse.com" date="1496923200">- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1521115200">- Modernise spec file with spec-cleaner
- Allow alternative rexx implementations to be installed in
  parallel (bsc#1083875)</changelog>
</package>
<package pkgid="03af0e0885c84c5dc6ba553ccd40304de8f48e0579f1ad24c28e227258d4821e" name="Regina-REXX-devel" arch="x86_64">
  <version epoch="0" ver="3.9.1" rel="lp150.2.3.1"/>
  <changelog author="mge@suse.de" date="1060084800">- update to 3.2</changelog>
  <changelog author="mge@suse.de" date="1076328000">- added SONAME (libregina.so) to library</changelog>
  <changelog author="mge@suse.de" date="1092312000">- update to 3.3</changelog>
  <changelog author="dmueller@suse.de" date="1130760000">- don't build as root</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="cthiel@suse.de" date="1219924800">- fix init script</changelog>
  <changelog author="mpost@suse.com" date="1461153600">- Upgraded to version 3.9.1
- Added Regina-REXX-regutil-3.9.1-doc.pdf
- Removed regina-rxstack-lsb.init.d and added a systemd unit file
  for rxstack.
- Converted all hardcoded paths to RPM macros.
- Removed obsolete regina-rpmlintrc file
- Removed the following obsolete patches:
  regina-3.3-configure.diff
  regina-3.3-Makefile.in.diff
- Removed deprecated Authors section
- Broke the documentation out into a separate package.
- Removed redundant changelog entries from the spec file.</changelog>
  <changelog author="mpluskal@suse.com" date="1462190400">- Rename package to Regina-REXX</changelog>
  <changelog author="mpluskal@suse.com" date="1496923200">- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1521115200">- Modernise spec file with spec-cleaner
- Allow alternative rexx implementations to be installed in
  parallel (bsc#1083875)</changelog>
</package>
<package pkgid="161e01e19ee7b5a9e0266d680430033375efafa70842358c599b10d14c1f5dfc" name="Regina-REXX-doc" arch="x86_64">
  <version epoch="0" ver="3.9.1" rel="lp150.2.3.1"/>
  <changelog author="mge@suse.de" date="1060084800">- update to 3.2</changelog>
  <changelog author="mge@suse.de" date="1076328000">- added SONAME (libregina.so) to library</changelog>
  <changelog author="mge@suse.de" date="1092312000">- update to 3.3</changelog>
  <changelog author="dmueller@suse.de" date="1130760000">- don't build as root</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="cthiel@suse.de" date="1219924800">- fix init script</changelog>
  <changelog author="mpost@suse.com" date="1461153600">- Upgraded to version 3.9.1
- Added Regina-REXX-regutil-3.9.1-doc.pdf
- Removed regina-rxstack-lsb.init.d and added a systemd unit file
  for rxstack.
- Converted all hardcoded paths to RPM macros.
- Removed obsolete regina-rpmlintrc file
- Removed the following obsolete patches:
  regina-3.3-configure.diff
  regina-3.3-Makefile.in.diff
- Removed deprecated Authors section
- Broke the documentation out into a separate package.
- Removed redundant changelog entries from the spec file.</changelog>
  <changelog author="mpluskal@suse.com" date="1462190400">- Rename package to Regina-REXX</changelog>
  <changelog author="mpluskal@suse.com" date="1496923200">- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1521115200">- Modernise spec file with spec-cleaner
- Allow alternative rexx implementations to be installed in
  parallel (bsc#1083875)</changelog>
</package>
<package pkgid="a8ee364948e84ecb589557a6546b194f850f5a19d43020564dc5172e2695c6c0" name="SDL2_image" arch="src">
  <version epoch="0" ver="2.0.4" rel="lp150.2.3.1"/>
  <changelog author="prusnak@opensuse.org" date="1376395200">- created package (version 2.0.0) - based on SDL_image package</changelog>
  <changelog author="jengelh@inai.de" date="1376395201">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list, more robust make install call</changelog>
  <changelog author="dvaleev@suse.com" date="1378987200">- Fix undefined s on BigEndian platforms (bigendian_undefined_s.patch)</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway, remove redundant Requires.</changelog>
  <changelog author="mailaender@opensuse.org" date="1452427200">- Update to version 2.0.1
  * Fixed support for transparency in XPM files
  * Fixed memory leak in webp image loading
  * Fixed loading BMP files with large BITMAPINFOHEADER structures
  * Fixed building with libpng 1.4
- Removed bigendian_undefined_s.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518177600">- Update to new upstream release 2.0.2
  * Added simple SVG image support based on Nano SVG
  * Fixed security vulnerability in XCF image loader
    [boo#1062777, CVE-2017-2887]
  * Added optional support for loading images using Windows
    Imaging Component
  * Added libpng save support for much smaller 8-bit images
  * Added JPG save support: IMG_SaveJPG() and IMG_SaveJPG_RW()</changelog>
  <changelog author="jengelh@inai.de" date="1518523200">- Update BuildRequires</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.3
  * Fixed a number of security issues:
  * TALOS-2017-0488/CVE-2017-12122/boo#1084256:
    IMG_LoadLBM_RW code execution vulnerability
  * TALOS-2017-0489/CVE-2017-14440/boo#1084257:
    ILBM CMAP parsing code execution vulnerability
  * TALOS-2017-0490/CVE-2017-14441/boo#1084282:
    ICO pitch handling code execution vulnerability
  * TALOS-2017-0491/CVE-2017-14442/boo#1084304:
    Image palette population code execution vulnerability
  * TALOS-2017-0497/CVE-2017-14448/boo#1084303:
    load_xcf_tile_rle decompression code execution
  * TALOS-2017-0498/CVE-2017-14449/boo#1084297:
    do_layer_surface double free vulnerability
  * TALOS-2017-0499/CVE-2017-14450/boo#1084288:
    LWZ decompression buffer overflow vulnerability</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541592000">- Update to new upstream release 2.0.4
  * Fixed memory issues in the XCF loader:
  * CVE-2018-3839 boo#1089087 TALOS-2018-0521
  * CVE-2018-3977 boo#1114519 TALOS-2018-0645</changelog>
</package>
<package pkgid="d6e9eacd0384f76cedf10e2725e7def196c69a8684889950cab1304d149cb7ec" name="SUSEConnect" arch="src">
  <version epoch="0" ver="0.3.11" rel="lp150.2.3.1"/>
  <changelog author="hschmidt@suse.com" date="1473768000">- Update to 0.2.40:
  - Update man page to include the --list-extensions option (bsc#998583)</changelog>
  <changelog author="thutterer@suse.com" date="1475755200">- Update to 0.2.41:
  - Better error message for --list-extensions on unregistered systems</changelog>
  <changelog author="thutterer@suse.com" date="1488542400">- Update to 0.2.42:
  - Better error message for network request failure (bsc#982630)
  - Fix error message for --product with malformed identifier (bsc#1018190)
  - Fix some errors and formatting in manpages and help output</changelog>
  <changelog author="ashaidurov@suse.com" date="1490097600">- Update to 0.2.43:
  - RPM spec fix for openSUSE:Factory rpmlint compliance (bsc#1028660)</changelog>
  <changelog author="andrei.shaidurov@suse.com" date="1493985600">- Update to 0.3.0:
  - Single product deactivation feature (fate#320572)</changelog>
  <changelog author="thutterer@suse.com" date="1496923200">- Update to 0.3.1:
  - Fix license auto-agree issue (bsc#1037783)
  - Add missing archs to SLE 12 SP3 build target</changelog>
  <changelog author="kpimenov@suse.com" date="1498478400">- Update to 0.3.2:
  - Fix --namespace parameter persistence (bsc#1044493)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1508155200">- Properly refresh zypper services when deactivating a product on SMT (bsc#1047153)</changelog>
  <changelog author="tschmidt@suse.com" date="1512648000">- Update to version 0.3.3:
  - Fix SLE15 build</changelog>
  <changelog author="tschmidt@suse.com" date="1513252800">- Update to version 0.3.4:
  - Packaging improvements (bsc#964013)</changelog>
  <changelog author="hschmidt@suse.com" date="1513598400">- Update to 0.3.5
  - Add YaST.system_offline_migrations</changelog>
  <changelog author="hschmidt@suse.com" date="1514462400">- Update to 0.3.6
  - Make target_base_product parameter mandatory.</changelog>
  <changelog author="fschueller@suse.com" date="1516276800">- Update to 0.3.7
  - virt-create-rootfs connects to SMT server without breaking (bsc#914297)</changelog>
  <changelog author="fschueller@suse.com" date="1516708800">- Remove unnecessary .gz files</changelog>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script.</changelog>
</package>
<package pkgid="72528b0ab110353750ecd41e2674fea9fdbf62ceaedf7e8ecada5afbd802479e" name="SUSEConnect" arch="x86_64">
  <version epoch="0" ver="0.3.11" rel="lp150.2.3.1"/>
  <changelog author="hschmidt@suse.com" date="1473768000">- Update to 0.2.40:
  - Update man page to include the --list-extensions option (bsc#998583)</changelog>
  <changelog author="thutterer@suse.com" date="1475755200">- Update to 0.2.41:
  - Better error message for --list-extensions on unregistered systems</changelog>
  <changelog author="thutterer@suse.com" date="1488542400">- Update to 0.2.42:
  - Better error message for network request failure (bsc#982630)
  - Fix error message for --product with malformed identifier (bsc#1018190)
  - Fix some errors and formatting in manpages and help output</changelog>
  <changelog author="ashaidurov@suse.com" date="1490097600">- Update to 0.2.43:
  - RPM spec fix for openSUSE:Factory rpmlint compliance (bsc#1028660)</changelog>
  <changelog author="andrei.shaidurov@suse.com" date="1493985600">- Update to 0.3.0:
  - Single product deactivation feature (fate#320572)</changelog>
  <changelog author="thutterer@suse.com" date="1496923200">- Update to 0.3.1:
  - Fix license auto-agree issue (bsc#1037783)
  - Add missing archs to SLE 12 SP3 build target</changelog>
  <changelog author="kpimenov@suse.com" date="1498478400">- Update to 0.3.2:
  - Fix --namespace parameter persistence (bsc#1044493)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1508155200">- Properly refresh zypper services when deactivating a product on SMT (bsc#1047153)</changelog>
  <changelog author="tschmidt@suse.com" date="1512648000">- Update to version 0.3.3:
  - Fix SLE15 build</changelog>
  <changelog author="tschmidt@suse.com" date="1513252800">- Update to version 0.3.4:
  - Packaging improvements (bsc#964013)</changelog>
  <changelog author="hschmidt@suse.com" date="1513598400">- Update to 0.3.5
  - Add YaST.system_offline_migrations</changelog>
  <changelog author="hschmidt@suse.com" date="1514462400">- Update to 0.3.6
  - Make target_base_product parameter mandatory.</changelog>
  <changelog author="fschueller@suse.com" date="1516276800">- Update to 0.3.7
  - virt-create-rootfs connects to SMT server without breaking (bsc#914297)</changelog>
  <changelog author="fschueller@suse.com" date="1516708800">- Remove unnecessary .gz files</changelog>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script.</changelog>
</package>
<package pkgid="fca87ccf3c479c5bf8e91e3a02bf2fb804157f289ffda259991cb4bfa30a6bfd" name="SUSEConnect" arch="src">
  <version epoch="0" ver="0.3.11" rel="lp150.2.6.1"/>
  <changelog author="thutterer@suse.com" date="1475755200">- Update to 0.2.41:
  - Better error message for --list-extensions on unregistered systems</changelog>
  <changelog author="thutterer@suse.com" date="1488542400">- Update to 0.2.42:
  - Better error message for network request failure (bsc#982630)
  - Fix error message for --product with malformed identifier (bsc#1018190)
  - Fix some errors and formatting in manpages and help output</changelog>
  <changelog author="ashaidurov@suse.com" date="1490097600">- Update to 0.2.43:
  - RPM spec fix for openSUSE:Factory rpmlint compliance (bsc#1028660)</changelog>
  <changelog author="andrei.shaidurov@suse.com" date="1493985600">- Update to 0.3.0:
  - Single product deactivation feature (fate#320572)</changelog>
  <changelog author="thutterer@suse.com" date="1496923200">- Update to 0.3.1:
  - Fix license auto-agree issue (bsc#1037783)
  - Add missing archs to SLE 12 SP3 build target</changelog>
  <changelog author="kpimenov@suse.com" date="1498478400">- Update to 0.3.2:
  - Fix --namespace parameter persistence (bsc#1044493)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1508155200">- Properly refresh zypper services when deactivating a product on SMT (bsc#1047153)</changelog>
  <changelog author="tschmidt@suse.com" date="1512648000">- Update to version 0.3.3:
  - Fix SLE15 build</changelog>
  <changelog author="tschmidt@suse.com" date="1513252800">- Update to version 0.3.4:
  - Packaging improvements (bsc#964013)</changelog>
  <changelog author="hschmidt@suse.com" date="1513598400">- Update to 0.3.5
  - Add YaST.system_offline_migrations</changelog>
  <changelog author="hschmidt@suse.com" date="1514462400">- Update to 0.3.6
  - Make target_base_product parameter mandatory.</changelog>
  <changelog author="fschueller@suse.com" date="1516276800">- Update to 0.3.7
  - virt-create-rootfs connects to SMT server without breaking (bsc#914297)</changelog>
  <changelog author="fschueller@suse.com" date="1516708800">- Remove unnecessary .gz files</changelog>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
</package>
<package pkgid="d860adf1c5a4c5e0425068406b323551d3fada6360fd7f91e0a9cc05174491b6" name="SUSEConnect" arch="x86_64">
  <version epoch="0" ver="0.3.11" rel="lp150.2.6.1"/>
  <changelog author="thutterer@suse.com" date="1475755200">- Update to 0.2.41:
  - Better error message for --list-extensions on unregistered systems</changelog>
  <changelog author="thutterer@suse.com" date="1488542400">- Update to 0.2.42:
  - Better error message for network request failure (bsc#982630)
  - Fix error message for --product with malformed identifier (bsc#1018190)
  - Fix some errors and formatting in manpages and help output</changelog>
  <changelog author="ashaidurov@suse.com" date="1490097600">- Update to 0.2.43:
  - RPM spec fix for openSUSE:Factory rpmlint compliance (bsc#1028660)</changelog>
  <changelog author="andrei.shaidurov@suse.com" date="1493985600">- Update to 0.3.0:
  - Single product deactivation feature (fate#320572)</changelog>
  <changelog author="thutterer@suse.com" date="1496923200">- Update to 0.3.1:
  - Fix license auto-agree issue (bsc#1037783)
  - Add missing archs to SLE 12 SP3 build target</changelog>
  <changelog author="kpimenov@suse.com" date="1498478400">- Update to 0.3.2:
  - Fix --namespace parameter persistence (bsc#1044493)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1508155200">- Properly refresh zypper services when deactivating a product on SMT (bsc#1047153)</changelog>
  <changelog author="tschmidt@suse.com" date="1512648000">- Update to version 0.3.3:
  - Fix SLE15 build</changelog>
  <changelog author="tschmidt@suse.com" date="1513252800">- Update to version 0.3.4:
  - Packaging improvements (bsc#964013)</changelog>
  <changelog author="hschmidt@suse.com" date="1513598400">- Update to 0.3.5
  - Add YaST.system_offline_migrations</changelog>
  <changelog author="hschmidt@suse.com" date="1514462400">- Update to 0.3.6
  - Make target_base_product parameter mandatory.</changelog>
  <changelog author="fschueller@suse.com" date="1516276800">- Update to 0.3.7
  - virt-create-rootfs connects to SMT server without breaking (bsc#914297)</changelog>
  <changelog author="fschueller@suse.com" date="1516708800">- Remove unnecessary .gz files</changelog>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
</package>
<package pkgid="e0920ec398023f9782797b235cfbc7bb554ef628e15cb28bd2a246dc3a7138ea" name="SUSEConnect" arch="src">
  <version epoch="0" ver="0.3.12" rel="lp150.2.9.1"/>
  <changelog author="andrei.shaidurov@suse.com" date="1493985600">- Update to 0.3.0:
  - Single product deactivation feature (fate#320572)</changelog>
  <changelog author="thutterer@suse.com" date="1496923200">- Update to 0.3.1:
  - Fix license auto-agree issue (bsc#1037783)
  - Add missing archs to SLE 12 SP3 build target</changelog>
  <changelog author="kpimenov@suse.com" date="1498478400">- Update to 0.3.2:
  - Fix --namespace parameter persistence (bsc#1044493)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1508155200">- Properly refresh zypper services when deactivating a product on SMT (bsc#1047153)</changelog>
  <changelog author="tschmidt@suse.com" date="1512648000">- Update to version 0.3.3:
  - Fix SLE15 build</changelog>
  <changelog author="tschmidt@suse.com" date="1513252800">- Update to version 0.3.4:
  - Packaging improvements (bsc#964013)</changelog>
  <changelog author="hschmidt@suse.com" date="1513598400">- Update to 0.3.5
  - Add YaST.system_offline_migrations</changelog>
  <changelog author="hschmidt@suse.com" date="1514462400">- Update to 0.3.6
  - Make target_base_product parameter mandatory.</changelog>
  <changelog author="fschueller@suse.com" date="1516276800">- Update to 0.3.7
  - virt-create-rootfs connects to SMT server without breaking (bsc#914297)</changelog>
  <changelog author="fschueller@suse.com" date="1516708800">- Remove unnecessary .gz files</changelog>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
  <changelog author="tschmidt@suse.com" date="1529409600">- Fix .spec file for running SUSEConnect on Fedora28</changelog>
  <changelog author="tmuntaner@suse.com" date="1536148800">- Update to 0.3.12
  - Detect if system is in cloud provider (AWS/Google/Azure)
    (fate#320935)
  - Don't fail when trying to parse an empty body. Fixes bsc#1098220
  - Don't install release packages if they are already present</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
</package>
<package pkgid="84f0f94d76ae15f1526a1847d9d0c444223681d5ba62d654ea9017b647b59a60" name="SUSEConnect" arch="x86_64">
  <version epoch="0" ver="0.3.12" rel="lp150.2.9.1"/>
  <changelog author="andrei.shaidurov@suse.com" date="1493985600">- Update to 0.3.0:
  - Single product deactivation feature (fate#320572)</changelog>
  <changelog author="thutterer@suse.com" date="1496923200">- Update to 0.3.1:
  - Fix license auto-agree issue (bsc#1037783)
  - Add missing archs to SLE 12 SP3 build target</changelog>
  <changelog author="kpimenov@suse.com" date="1498478400">- Update to 0.3.2:
  - Fix --namespace parameter persistence (bsc#1044493)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1508155200">- Properly refresh zypper services when deactivating a product on SMT (bsc#1047153)</changelog>
  <changelog author="tschmidt@suse.com" date="1512648000">- Update to version 0.3.3:
  - Fix SLE15 build</changelog>
  <changelog author="tschmidt@suse.com" date="1513252800">- Update to version 0.3.4:
  - Packaging improvements (bsc#964013)</changelog>
  <changelog author="hschmidt@suse.com" date="1513598400">- Update to 0.3.5
  - Add YaST.system_offline_migrations</changelog>
  <changelog author="hschmidt@suse.com" date="1514462400">- Update to 0.3.6
  - Make target_base_product parameter mandatory.</changelog>
  <changelog author="fschueller@suse.com" date="1516276800">- Update to 0.3.7
  - virt-create-rootfs connects to SMT server without breaking (bsc#914297)</changelog>
  <changelog author="fschueller@suse.com" date="1516708800">- Remove unnecessary .gz files</changelog>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
  <changelog author="tschmidt@suse.com" date="1529409600">- Fix .spec file for running SUSEConnect on Fedora28</changelog>
  <changelog author="tmuntaner@suse.com" date="1536148800">- Update to 0.3.12
  - Detect if system is in cloud provider (AWS/Google/Azure)
    (fate#320935)
  - Don't fail when trying to parse an empty body. Fixes bsc#1098220
  - Don't install release packages if they are already present</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
</package>
<package pkgid="3a3e16856e7a3b19eed998c06259cf6cccc25a715a10f55fe752fe06ca4fa655" name="VirtualGL" arch="src">
  <version epoch="0" ver="2.5.2" rel="lp150.2.3.1"/>
  <changelog author="bumblebee-project@hotmail.com" date="1310385600">- Initial package</changelog>
  <changelog author="bumblebee-project@hotmail.com" date="1325246400">- Update to 2.3</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1346932800">- Update to 2.3.1</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1351512000">- Update to 2.3.2</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1385553600">- Update to 2.3.3</changelog>
  <changelog author="tchvatal@suse.com" date="1391774400">- Use baselibs.conf
- Cleanup the spec to use suse macros
- Sort out dependencies and use system shared libjpeg-turbo</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- No need to have different name for glxspheres on 64 and 32b.</changelog>
  <changelog author="tchvatal@suse.com" date="1392033600">- Require 32b libturbojpeg0 on the 32bit binary.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Update license to WXwindows</changelog>
  <changelog author="tchvatal@suse.com" date="1404216001">- Mention baselibs.conf in spec file</changelog>
  <changelog author="dvaleev@suse.com" date="1408622400">- Extend 64bit conditions to s390x ppc64 ppc64le aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1409313600">- Version bump to beta1 of 2.4 (2.3.90)
- Fix building with -Wl,-z,now and no-undefined
  * VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1440763200">- Update to 2.4.1:
  * Various bugfixes not mentioned on changes
  * Refresh VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Add proper wxwidgets license string</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466078400">- new gcc6_literal_suffixes.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1466078401">- Version update to 2.5 release
  * See upstream changelog for details
  * Mostly removal of compat for pre-VirtualGL namespace
- Refresh patch VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Fix bnc#993645 as-needed eating symbols needed by this lib
  * virtualgl-nodl.patch
- Use system xcb headers
- Rename glxinfo2 to vglxinfo, sounds bit better and more descriptive</changelog>
  <changelog author="tchvatal@suse.com" date="1512388800">- Version update 2.5.2:
  * Various compat fixes all around
- Remove merged gcc6_literal_suffixes.patch
- Refresh VirtualGL-link-libs.patch and virtualgl-nodl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1512388801">- Disable ssl feature as we can tunnel via ssh and the openssl-1.1
  is not compatible at all currently</changelog>
  <changelog author="tchvatal@suse.com" date="1529409600">- Do not provide the env files which change the preload order
  bsc#1097210</changelog>
</package>
<package pkgid="694ef90c5bcf5e161524b9fccf6d0fc04b7b1ad8b7639ab8a6b253e7a5cfca0c" name="VirtualGL" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="lp150.2.3.1"/>
  <changelog author="bumblebee-project@hotmail.com" date="1310385600">- Initial package</changelog>
  <changelog author="bumblebee-project@hotmail.com" date="1325246400">- Update to 2.3</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1346932800">- Update to 2.3.1</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1351512000">- Update to 2.3.2</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1385553600">- Update to 2.3.3</changelog>
  <changelog author="tchvatal@suse.com" date="1391774400">- Use baselibs.conf
- Cleanup the spec to use suse macros
- Sort out dependencies and use system shared libjpeg-turbo</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- No need to have different name for glxspheres on 64 and 32b.</changelog>
  <changelog author="tchvatal@suse.com" date="1392033600">- Require 32b libturbojpeg0 on the 32bit binary.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Update license to WXwindows</changelog>
  <changelog author="tchvatal@suse.com" date="1404216001">- Mention baselibs.conf in spec file</changelog>
  <changelog author="dvaleev@suse.com" date="1408622400">- Extend 64bit conditions to s390x ppc64 ppc64le aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1409313600">- Version bump to beta1 of 2.4 (2.3.90)
- Fix building with -Wl,-z,now and no-undefined
  * VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1440763200">- Update to 2.4.1:
  * Various bugfixes not mentioned on changes
  * Refresh VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Add proper wxwidgets license string</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466078400">- new gcc6_literal_suffixes.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1466078401">- Version update to 2.5 release
  * See upstream changelog for details
  * Mostly removal of compat for pre-VirtualGL namespace
- Refresh patch VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Fix bnc#993645 as-needed eating symbols needed by this lib
  * virtualgl-nodl.patch
- Use system xcb headers
- Rename glxinfo2 to vglxinfo, sounds bit better and more descriptive</changelog>
  <changelog author="tchvatal@suse.com" date="1512388800">- Version update 2.5.2:
  * Various compat fixes all around
- Remove merged gcc6_literal_suffixes.patch
- Refresh VirtualGL-link-libs.patch and virtualgl-nodl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1512388801">- Disable ssl feature as we can tunnel via ssh and the openssl-1.1
  is not compatible at all currently</changelog>
  <changelog author="tchvatal@suse.com" date="1529409600">- Do not provide the env files which change the preload order
  bsc#1097210</changelog>
</package>
<package pkgid="3d361535995972eadd99bccff7e7a882fd76df4e928ec6ac135c82eac549fafd" name="VirtualGL-32bit" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="lp150.2.3.1"/>
  <changelog author="bumblebee-project@hotmail.com" date="1310385600">- Initial package</changelog>
  <changelog author="bumblebee-project@hotmail.com" date="1325246400">- Update to 2.3</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1346932800">- Update to 2.3.1</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1351512000">- Update to 2.3.2</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1385553600">- Update to 2.3.3</changelog>
  <changelog author="tchvatal@suse.com" date="1391774400">- Use baselibs.conf
- Cleanup the spec to use suse macros
- Sort out dependencies and use system shared libjpeg-turbo</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- No need to have different name for glxspheres on 64 and 32b.</changelog>
  <changelog author="tchvatal@suse.com" date="1392033600">- Require 32b libturbojpeg0 on the 32bit binary.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Update license to WXwindows</changelog>
  <changelog author="tchvatal@suse.com" date="1404216001">- Mention baselibs.conf in spec file</changelog>
  <changelog author="dvaleev@suse.com" date="1408622400">- Extend 64bit conditions to s390x ppc64 ppc64le aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1409313600">- Version bump to beta1 of 2.4 (2.3.90)
- Fix building with -Wl,-z,now and no-undefined
  * VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1440763200">- Update to 2.4.1:
  * Various bugfixes not mentioned on changes
  * Refresh VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Add proper wxwidgets license string</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466078400">- new gcc6_literal_suffixes.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1466078401">- Version update to 2.5 release
  * See upstream changelog for details
  * Mostly removal of compat for pre-VirtualGL namespace
- Refresh patch VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Fix bnc#993645 as-needed eating symbols needed by this lib
  * virtualgl-nodl.patch
- Use system xcb headers
- Rename glxinfo2 to vglxinfo, sounds bit better and more descriptive</changelog>
  <changelog author="tchvatal@suse.com" date="1512388800">- Version update 2.5.2:
  * Various compat fixes all around
- Remove merged gcc6_literal_suffixes.patch
- Refresh VirtualGL-link-libs.patch and virtualgl-nodl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1512388801">- Disable ssl feature as we can tunnel via ssh and the openssl-1.1
  is not compatible at all currently</changelog>
  <changelog author="tchvatal@suse.com" date="1529409600">- Do not provide the env files which change the preload order
  bsc#1097210</changelog>
</package>
<package pkgid="a92982e8fa20991ecb188ca07a0676389ad45a0c5e52f7d8a8dc307559d13372" name="VirtualGL-devel" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="lp150.2.3.1"/>
  <changelog author="bumblebee-project@hotmail.com" date="1310385600">- Initial package</changelog>
  <changelog author="bumblebee-project@hotmail.com" date="1325246400">- Update to 2.3</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1346932800">- Update to 2.3.1</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1351512000">- Update to 2.3.2</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1385553600">- Update to 2.3.3</changelog>
  <changelog author="tchvatal@suse.com" date="1391774400">- Use baselibs.conf
- Cleanup the spec to use suse macros
- Sort out dependencies and use system shared libjpeg-turbo</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- No need to have different name for glxspheres on 64 and 32b.</changelog>
  <changelog author="tchvatal@suse.com" date="1392033600">- Require 32b libturbojpeg0 on the 32bit binary.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Update license to WXwindows</changelog>
  <changelog author="tchvatal@suse.com" date="1404216001">- Mention baselibs.conf in spec file</changelog>
  <changelog author="dvaleev@suse.com" date="1408622400">- Extend 64bit conditions to s390x ppc64 ppc64le aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1409313600">- Version bump to beta1 of 2.4 (2.3.90)
- Fix building with -Wl,-z,now and no-undefined
  * VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1440763200">- Update to 2.4.1:
  * Various bugfixes not mentioned on changes
  * Refresh VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Add proper wxwidgets license string</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466078400">- new gcc6_literal_suffixes.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1466078401">- Version update to 2.5 release
  * See upstream changelog for details
  * Mostly removal of compat for pre-VirtualGL namespace
- Refresh patch VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Fix bnc#993645 as-needed eating symbols needed by this lib
  * virtualgl-nodl.patch
- Use system xcb headers
- Rename glxinfo2 to vglxinfo, sounds bit better and more descriptive</changelog>
  <changelog author="tchvatal@suse.com" date="1512388800">- Version update 2.5.2:
  * Various compat fixes all around
- Remove merged gcc6_literal_suffixes.patch
- Refresh VirtualGL-link-libs.patch and virtualgl-nodl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1512388801">- Disable ssl feature as we can tunnel via ssh and the openssl-1.1
  is not compatible at all currently</changelog>
  <changelog author="tchvatal@suse.com" date="1529409600">- Do not provide the env files which change the preload order
  bsc#1097210</changelog>
</package>
<package pkgid="e49cef5fdd8b95a24ba0ffaf30945b7444d9e89dc486d92de83bdaae287739a7" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp150.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511784000">- Fix installation of fillup-templates.</changelog>
  <changelog author="lnussel@suse.de" date="1511870400">- Update to version 84.87+git20171128.17ae554:
  * Check for /proc/version before using it
  * Remove legacy code for /proc/iSeries
  * Move fillup-templates to /usr/share (boo#1069468)</changelog>
  <changelog author="werner@suse.de" date="1511870401">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870404">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
</package>
<package pkgid="be49efb6b6fbab070d09b7f3709b1ebdf2b4c602a75331347c380d1a962f02c9" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp150.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511784000">- Fix installation of fillup-templates.</changelog>
  <changelog author="lnussel@suse.de" date="1511870400">- Update to version 84.87+git20171128.17ae554:
  * Check for /proc/version before using it
  * Remove legacy code for /proc/iSeries
  * Move fillup-templates to /usr/share (boo#1069468)</changelog>
  <changelog author="werner@suse.de" date="1511870401">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870404">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
</package>
<package pkgid="fe66492a59052e8662b7eed13a8bb162b9c4c435ed816201893998292a1a69b4" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp150.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511784000">- Fix installation of fillup-templates.</changelog>
  <changelog author="lnussel@suse.de" date="1511870400">- Update to version 84.87+git20171128.17ae554:
  * Check for /proc/version before using it
  * Remove legacy code for /proc/iSeries
  * Move fillup-templates to /usr/share (boo#1069468)</changelog>
  <changelog author="werner@suse.de" date="1511870401">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870404">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
</package>
<package pkgid="1bfac0ea6e4ae2080943097abcbbfb3d7029fb2d4d64f1bb887195b5e64c0f8b" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp150.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511784000">- Fix installation of fillup-templates.</changelog>
  <changelog author="lnussel@suse.de" date="1511870400">- Update to version 84.87+git20171128.17ae554:
  * Check for /proc/version before using it
  * Remove legacy code for /proc/iSeries
  * Move fillup-templates to /usr/share (boo#1069468)</changelog>
  <changelog author="werner@suse.de" date="1511870401">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870404">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
</package>
<package pkgid="9b546c6b98030bf2b94ebb282ef2196345ea81ac88f1ac438b25e92cadcc02a1" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp150.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511784000">- Fix installation of fillup-templates.</changelog>
  <changelog author="lnussel@suse.de" date="1511870400">- Update to version 84.87+git20171128.17ae554:
  * Check for /proc/version before using it
  * Remove legacy code for /proc/iSeries
  * Move fillup-templates to /usr/share (boo#1069468)</changelog>
  <changelog author="werner@suse.de" date="1511870401">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870404">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
</package>
<package pkgid="dbbeb4d4fb79ad98953f74b77b8e37a31e26e8481165b6a32a81ca5245b3fb28" name="accountsservice" arch="src">
  <version epoch="0" ver="0.6.45" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1412510400">- Pass --enable-user-heuristics to configure to ensure that legacy
  users are still shown in GDM facebrowser.</changelog>
  <changelog author="zaitor@opensuse.org" date="1413720000">- Update to version 0.6.39:
  + Fix ListCachedUsers race at startup.
  + Add new api for uncaching user.
  + Fix memory corruption bug.
  + Build goo changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422360000">- Update to version 0.6.40:
  + Support large UIDs better.
  + Don't require X11 display to fetch user with X11 session.
  + Ensure accountsservice doesn't start before NSS works.</changelog>
  <changelog author="dliang@suse.com" date="1433419200">- Add accountsservice-933083-load-root-setting.patch (bnc#933083)
  Load settings of an account which is not 'human' but can still be
  able to login to the system. (like 'root')</changelog>
  <changelog author="michael@stroeder.com" date="1452513600">- Updated Url.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Rebased accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add as-fate318433-prevent-same-account-multi-logins.patch
  (fate#318433):
  Prevent multiple simultaneous logins.</changelog>
  <changelog author="zaitor@opensuse.org" date="1465992000">- Update to version 0.6.42:
  + Wtmp fixes on solaris.
  + Allow a user to change his own data even if he's remote.
  + Add way to set password hint independent of password.
  + Conform to modern systemd library naming scheme.
  + Disable GVFS support in service, since it's not needed and has
    bad side effects.
- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires following upstream changes.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-daemon). Nowadays
  pkgconfig(libsystemd) is enough and replaces all libsystemd-*
  libs which are obsolete.</changelog>
  <changelog author="fezhang@suse.com" date="1472040000">- Enable as-fate318433-prevent-same-account-multi-logins.patch for
  Leap as requested by the Leap Release Manager (boo#994876).</changelog>
  <changelog author="fezhang@suse.com" date="1473595200">- Update accountsservice-sysconfig.patch:
  Flush the buffer before shut down the GIOChannel, otherwise we
  get a truncated setting file. The problem has caused the
  switching autologin in gnome-control-center breaking
  /etc/sysconfig/displaymanager (bsc#998107).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Update to version 0.6.43:
  + Fix logout times in login-history.
  + Increase performance in large deployments.
  + Memory leak fix.
  + Exclude nologin users from user list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480507200">- Rebase accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493121600">- Update to version 0.6.45:
  + Wrap password expiration info in libaccountsservice api.
- Changes from version 0.6.44:
  + Export password expiration info from shadow file.
  + Fix user classification logic.
  + Don't lose track of users when /etc/passwd is reloaded.
- Drop accountsservice-933083-load-root-setting.patch:
  fixed upstream (177509 edac45).</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Remove redundant %clean section; use %_smp_mflags for build.</changelog>
  <changelog author="yfjiang@suse.com" date="1502366400">- Update specfile to build
  as-fate318433-prevent-same-account-multi-logins.patch on SLE15.</changelog>
  <changelog author="qzheng@suse.com" date="1513944000">- Add remove-no-longer-used-system-accounts.patch:
  Drop operator, nobody4 and noaccess from the blacklist
  (bsc#1063794, fdo#103879).</changelog>
  <changelog author="fezhang@suse.com" date="1528891200">- Add accountsservice-missing-users-on-gdm-login.patch: Don't abort
  loading users when an /etc/shadow entry found missing
  (boo#1090003 fdo#106904).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Add accountsservice-lib-treat-session-type-wayland-as-graphical-session.patch:
  When user session type is wayland, act_user_is_logged_in can
  return TRUE if the user is logged in (boo#1095918 fdo#106855).</changelog>
  <changelog author="qzheng@suse.com" date="1537876800">- Add CVE-2018-14036.patch to canonicalize the input path for the
  prefix comparison (CVE-2018-14036, bsc#1099699).</changelog>
</package>
<package pkgid="345b0e022541d4c14b67da7b95d37db4d08e28a3a5aec3573fe89053fc5fcbe6" name="accountsservice" arch="x86_64">
  <version epoch="0" ver="0.6.45" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1412510400">- Pass --enable-user-heuristics to configure to ensure that legacy
  users are still shown in GDM facebrowser.</changelog>
  <changelog author="zaitor@opensuse.org" date="1413720000">- Update to version 0.6.39:
  + Fix ListCachedUsers race at startup.
  + Add new api for uncaching user.
  + Fix memory corruption bug.
  + Build goo changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422360000">- Update to version 0.6.40:
  + Support large UIDs better.
  + Don't require X11 display to fetch user with X11 session.
  + Ensure accountsservice doesn't start before NSS works.</changelog>
  <changelog author="dliang@suse.com" date="1433419200">- Add accountsservice-933083-load-root-setting.patch (bnc#933083)
  Load settings of an account which is not 'human' but can still be
  able to login to the system. (like 'root')</changelog>
  <changelog author="michael@stroeder.com" date="1452513600">- Updated Url.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Rebased accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add as-fate318433-prevent-same-account-multi-logins.patch
  (fate#318433):
  Prevent multiple simultaneous logins.</changelog>
  <changelog author="zaitor@opensuse.org" date="1465992000">- Update to version 0.6.42:
  + Wtmp fixes on solaris.
  + Allow a user to change his own data even if he's remote.
  + Add way to set password hint independent of password.
  + Conform to modern systemd library naming scheme.
  + Disable GVFS support in service, since it's not needed and has
    bad side effects.
- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires following upstream changes.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-daemon). Nowadays
  pkgconfig(libsystemd) is enough and replaces all libsystemd-*
  libs which are obsolete.</changelog>
  <changelog author="fezhang@suse.com" date="1472040000">- Enable as-fate318433-prevent-same-account-multi-logins.patch for
  Leap as requested by the Leap Release Manager (boo#994876).</changelog>
  <changelog author="fezhang@suse.com" date="1473595200">- Update accountsservice-sysconfig.patch:
  Flush the buffer before shut down the GIOChannel, otherwise we
  get a truncated setting file. The problem has caused the
  switching autologin in gnome-control-center breaking
  /etc/sysconfig/displaymanager (bsc#998107).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Update to version 0.6.43:
  + Fix logout times in login-history.
  + Increase performance in large deployments.
  + Memory leak fix.
  + Exclude nologin users from user list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480507200">- Rebase accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493121600">- Update to version 0.6.45:
  + Wrap password expiration info in libaccountsservice api.
- Changes from version 0.6.44:
  + Export password expiration info from shadow file.
  + Fix user classification logic.
  + Don't lose track of users when /etc/passwd is reloaded.
- Drop accountsservice-933083-load-root-setting.patch:
  fixed upstream (177509 edac45).</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Remove redundant %clean section; use %_smp_mflags for build.</changelog>
  <changelog author="yfjiang@suse.com" date="1502366400">- Update specfile to build
  as-fate318433-prevent-same-account-multi-logins.patch on SLE15.</changelog>
  <changelog author="qzheng@suse.com" date="1513944000">- Add remove-no-longer-used-system-accounts.patch:
  Drop operator, nobody4 and noaccess from the blacklist
  (bsc#1063794, fdo#103879).</changelog>
  <changelog author="fezhang@suse.com" date="1528891200">- Add accountsservice-missing-users-on-gdm-login.patch: Don't abort
  loading users when an /etc/shadow entry found missing
  (boo#1090003 fdo#106904).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Add accountsservice-lib-treat-session-type-wayland-as-graphical-session.patch:
  When user session type is wayland, act_user_is_logged_in can
  return TRUE if the user is logged in (boo#1095918 fdo#106855).</changelog>
  <changelog author="qzheng@suse.com" date="1537876800">- Add CVE-2018-14036.patch to canonicalize the input path for the
  prefix comparison (CVE-2018-14036, bsc#1099699).</changelog>
</package>
<package pkgid="21fa2ebf1bca393a5568c24e254445cb5c86f6c8c00d13aee5c498d72e92dd67" name="accountsservice-devel" arch="x86_64">
  <version epoch="0" ver="0.6.45" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1412510400">- Pass --enable-user-heuristics to configure to ensure that legacy
  users are still shown in GDM facebrowser.</changelog>
  <changelog author="zaitor@opensuse.org" date="1413720000">- Update to version 0.6.39:
  + Fix ListCachedUsers race at startup.
  + Add new api for uncaching user.
  + Fix memory corruption bug.
  + Build goo changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422360000">- Update to version 0.6.40:
  + Support large UIDs better.
  + Don't require X11 display to fetch user with X11 session.
  + Ensure accountsservice doesn't start before NSS works.</changelog>
  <changelog author="dliang@suse.com" date="1433419200">- Add accountsservice-933083-load-root-setting.patch (bnc#933083)
  Load settings of an account which is not 'human' but can still be
  able to login to the system. (like 'root')</changelog>
  <changelog author="michael@stroeder.com" date="1452513600">- Updated Url.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Rebased accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add as-fate318433-prevent-same-account-multi-logins.patch
  (fate#318433):
  Prevent multiple simultaneous logins.</changelog>
  <changelog author="zaitor@opensuse.org" date="1465992000">- Update to version 0.6.42:
  + Wtmp fixes on solaris.
  + Allow a user to change his own data even if he's remote.
  + Add way to set password hint independent of password.
  + Conform to modern systemd library naming scheme.
  + Disable GVFS support in service, since it's not needed and has
    bad side effects.
- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires following upstream changes.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-daemon). Nowadays
  pkgconfig(libsystemd) is enough and replaces all libsystemd-*
  libs which are obsolete.</changelog>
  <changelog author="fezhang@suse.com" date="1472040000">- Enable as-fate318433-prevent-same-account-multi-logins.patch for
  Leap as requested by the Leap Release Manager (boo#994876).</changelog>
  <changelog author="fezhang@suse.com" date="1473595200">- Update accountsservice-sysconfig.patch:
  Flush the buffer before shut down the GIOChannel, otherwise we
  get a truncated setting file. The problem has caused the
  switching autologin in gnome-control-center breaking
  /etc/sysconfig/displaymanager (bsc#998107).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Update to version 0.6.43:
  + Fix logout times in login-history.
  + Increase performance in large deployments.
  + Memory leak fix.
  + Exclude nologin users from user list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480507200">- Rebase accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493121600">- Update to version 0.6.45:
  + Wrap password expiration info in libaccountsservice api.
- Changes from version 0.6.44:
  + Export password expiration info from shadow file.
  + Fix user classification logic.
  + Don't lose track of users when /etc/passwd is reloaded.
- Drop accountsservice-933083-load-root-setting.patch:
  fixed upstream (177509 edac45).</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Remove redundant %clean section; use %_smp_mflags for build.</changelog>
  <changelog author="yfjiang@suse.com" date="1502366400">- Update specfile to build
  as-fate318433-prevent-same-account-multi-logins.patch on SLE15.</changelog>
  <changelog author="qzheng@suse.com" date="1513944000">- Add remove-no-longer-used-system-accounts.patch:
  Drop operator, nobody4 and noaccess from the blacklist
  (bsc#1063794, fdo#103879).</changelog>
  <changelog author="fezhang@suse.com" date="1528891200">- Add accountsservice-missing-users-on-gdm-login.patch: Don't abort
  loading users when an /etc/shadow entry found missing
  (boo#1090003 fdo#106904).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Add accountsservice-lib-treat-session-type-wayland-as-graphical-session.patch:
  When user session type is wayland, act_user_is_logged_in can
  return TRUE if the user is logged in (boo#1095918 fdo#106855).</changelog>
  <changelog author="qzheng@suse.com" date="1537876800">- Add CVE-2018-14036.patch to canonicalize the input path for the
  prefix comparison (CVE-2018-14036, bsc#1099699).</changelog>
</package>
<package pkgid="a40b485cf16875a67562a6161d2c4634ff9e8b9c01198592b405d117dc521f9d" name="accountsservice-lang" arch="noarch">
  <version epoch="0" ver="0.6.45" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1412510400">- Pass --enable-user-heuristics to configure to ensure that legacy
  users are still shown in GDM facebrowser.</changelog>
  <changelog author="zaitor@opensuse.org" date="1413720000">- Update to version 0.6.39:
  + Fix ListCachedUsers race at startup.
  + Add new api for uncaching user.
  + Fix memory corruption bug.
  + Build goo changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422360000">- Update to version 0.6.40:
  + Support large UIDs better.
  + Don't require X11 display to fetch user with X11 session.
  + Ensure accountsservice doesn't start before NSS works.</changelog>
  <changelog author="dliang@suse.com" date="1433419200">- Add accountsservice-933083-load-root-setting.patch (bnc#933083)
  Load settings of an account which is not 'human' but can still be
  able to login to the system. (like 'root')</changelog>
  <changelog author="michael@stroeder.com" date="1452513600">- Updated Url.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Rebased accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add as-fate318433-prevent-same-account-multi-logins.patch
  (fate#318433):
  Prevent multiple simultaneous logins.</changelog>
  <changelog author="zaitor@opensuse.org" date="1465992000">- Update to version 0.6.42:
  + Wtmp fixes on solaris.
  + Allow a user to change his own data even if he's remote.
  + Add way to set password hint independent of password.
  + Conform to modern systemd library naming scheme.
  + Disable GVFS support in service, since it's not needed and has
    bad side effects.
- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires following upstream changes.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-daemon). Nowadays
  pkgconfig(libsystemd) is enough and replaces all libsystemd-*
  libs which are obsolete.</changelog>
  <changelog author="fezhang@suse.com" date="1472040000">- Enable as-fate318433-prevent-same-account-multi-logins.patch for
  Leap as requested by the Leap Release Manager (boo#994876).</changelog>
  <changelog author="fezhang@suse.com" date="1473595200">- Update accountsservice-sysconfig.patch:
  Flush the buffer before shut down the GIOChannel, otherwise we
  get a truncated setting file. The problem has caused the
  switching autologin in gnome-control-center breaking
  /etc/sysconfig/displaymanager (bsc#998107).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Update to version 0.6.43:
  + Fix logout times in login-history.
  + Increase performance in large deployments.
  + Memory leak fix.
  + Exclude nologin users from user list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480507200">- Rebase accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493121600">- Update to version 0.6.45:
  + Wrap password expiration info in libaccountsservice api.
- Changes from version 0.6.44:
  + Export password expiration info from shadow file.
  + Fix user classification logic.
  + Don't lose track of users when /etc/passwd is reloaded.
- Drop accountsservice-933083-load-root-setting.patch:
  fixed upstream (177509 edac45).</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Remove redundant %clean section; use %_smp_mflags for build.</changelog>
  <changelog author="yfjiang@suse.com" date="1502366400">- Update specfile to build
  as-fate318433-prevent-same-account-multi-logins.patch on SLE15.</changelog>
  <changelog author="qzheng@suse.com" date="1513944000">- Add remove-no-longer-used-system-accounts.patch:
  Drop operator, nobody4 and noaccess from the blacklist
  (bsc#1063794, fdo#103879).</changelog>
  <changelog author="fezhang@suse.com" date="1528891200">- Add accountsservice-missing-users-on-gdm-login.patch: Don't abort
  loading users when an /etc/shadow entry found missing
  (boo#1090003 fdo#106904).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Add accountsservice-lib-treat-session-type-wayland-as-graphical-session.patch:
  When user session type is wayland, act_user_is_logged_in can
  return TRUE if the user is logged in (boo#1095918 fdo#106855).</changelog>
  <changelog author="qzheng@suse.com" date="1537876800">- Add CVE-2018-14036.patch to canonicalize the input path for the
  prefix comparison (CVE-2018-14036, bsc#1099699).</changelog>
</package>
<package pkgid="5a312e19c08a4c095ab29d353e65a43d02444aa42c59c05bae0b60ffef21b404" name="alsa" arch="src">
  <version epoch="0" ver="1.1.5" rel="lp150.5.3.1"/>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-lib 1.1.1:
  * including previous fixes
  * a few more fixes/cleanup of control API
  * BSD compatibility changes
  * sync with 4.6 kernel ABI
  * provide API for sequencer sound card number / pid
  * fix races at dmix/dsnoop plugin
  * a few topology API updates
- Drop the obsoleted patches:
  0001-topology-Add-missing-include-sys-stat.h.patch
  0002-pcm-simple-Fix-asserts.patch
  0003-topology-open-topology-files-with-O_TRUNC.patch
  0004-topology-Remove-unused-function-write_data_block.patch
  0005-topology-Remove-unused-variables.patch
  0006-topology-Fix-comparison-of-unsigned-expression-0.patch
  0007-topology-Not-compare-a-for-loop-iterator-with-ABI-__.patch
  0008-topology-Quit-and-show-error-message-on-big-endian-m.patch
  0009-config-files-do-not-include-ucm-topology-configurati.patch
  0010-control-add-missing-asserts-to-ctl_elem_set-function.patch
  0011-pcm_hw-fix-possible-memory-leak-coverity.patch
  0012-coverity-fixes.patch
  0013-topology-fix-debug-output-to-print-correct-max-value.patch</changelog>
  <changelog author="tiwai@suse.de" date="1463054400">- Backport various upstream fixes for PCM (bnc#979702):
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch</changelog>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
</package>
<package pkgid="bf0ae62abac9230a0925968e3fb7516ceca1725d6d2a27effb3ebd8d850355e9" name="alsa" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp150.5.3.1"/>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-lib 1.1.1:
  * including previous fixes
  * a few more fixes/cleanup of control API
  * BSD compatibility changes
  * sync with 4.6 kernel ABI
  * provide API for sequencer sound card number / pid
  * fix races at dmix/dsnoop plugin
  * a few topology API updates
- Drop the obsoleted patches:
  0001-topology-Add-missing-include-sys-stat.h.patch
  0002-pcm-simple-Fix-asserts.patch
  0003-topology-open-topology-files-with-O_TRUNC.patch
  0004-topology-Remove-unused-function-write_data_block.patch
  0005-topology-Remove-unused-variables.patch
  0006-topology-Fix-comparison-of-unsigned-expression-0.patch
  0007-topology-Not-compare-a-for-loop-iterator-with-ABI-__.patch
  0008-topology-Quit-and-show-error-message-on-big-endian-m.patch
  0009-config-files-do-not-include-ucm-topology-configurati.patch
  0010-control-add-missing-asserts-to-ctl_elem_set-function.patch
  0011-pcm_hw-fix-possible-memory-leak-coverity.patch
  0012-coverity-fixes.patch
  0013-topology-fix-debug-output-to-print-correct-max-value.patch</changelog>
  <changelog author="tiwai@suse.de" date="1463054400">- Backport various upstream fixes for PCM (bnc#979702):
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch</changelog>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
</package>
<package pkgid="57d774cb0cde08e77fcaa2ed283f7e8793b296ba4a1c4da81e76ab61a3c4223a" name="alsa" arch="src">
  <version epoch="0" ver="1.1.5" rel="lp150.5.6.1"/>
  <changelog author="tiwai@suse.de" date="1463054400">- Backport various upstream fixes for PCM (bnc#979702):
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch</changelog>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539864000">- Fix UCM profile for Dell WD15 dock (bsc#1112292):
  0104-conf-ucm-Dell-WD15-Dock-Fix-incorrect-device-names.patch</changelog>
</package>
<package pkgid="c9f00d249e95732a3714310cb06be47ad2388fb8180a0e034204bef7be5d2a8d" name="alsa" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp150.5.6.1"/>
  <changelog author="tiwai@suse.de" date="1463054400">- Backport various upstream fixes for PCM (bnc#979702):
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch</changelog>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539864000">- Fix UCM profile for Dell WD15 dock (bsc#1112292):
  0104-conf-ucm-Dell-WD15-Dock-Fix-incorrect-device-names.patch</changelog>
</package>
<package pkgid="862348c6fc2dfd673301f220ffc4221eda7797609fbc87f8f74fe4b453b2da7b" name="alsa-devel" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp150.5.3.1"/>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-lib 1.1.1:
  * including previous fixes
  * a few more fixes/cleanup of control API
  * BSD compatibility changes
  * sync with 4.6 kernel ABI
  * provide API for sequencer sound card number / pid
  * fix races at dmix/dsnoop plugin
  * a few topology API updates
- Drop the obsoleted patches:
  0001-topology-Add-missing-include-sys-stat.h.patch
  0002-pcm-simple-Fix-asserts.patch
  0003-topology-open-topology-files-with-O_TRUNC.patch
  0004-topology-Remove-unused-function-write_data_block.patch
  0005-topology-Remove-unused-variables.patch
  0006-topology-Fix-comparison-of-unsigned-expression-0.patch
  0007-topology-Not-compare-a-for-loop-iterator-with-ABI-__.patch
  0008-topology-Quit-and-show-error-message-on-big-endian-m.patch
  0009-config-files-do-not-include-ucm-topology-configurati.patch
  0010-control-add-missing-asserts-to-ctl_elem_set-function.patch
  0011-pcm_hw-fix-possible-memory-leak-coverity.patch
  0012-coverity-fixes.patch
  0013-topology-fix-debug-output-to-print-correct-max-value.patch</changelog>
  <changelog author="tiwai@suse.de" date="1463054400">- Backport various upstream fixes for PCM (bnc#979702):
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch</changelog>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
</package>
<package pkgid="9dfe6cf4b2779f075d6ac2d0e8b5900989aa8ff26f119b5721d3117abef2f149" name="alsa-devel" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp150.5.6.1"/>
  <changelog author="tiwai@suse.de" date="1463054400">- Backport various upstream fixes for PCM (bnc#979702):
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch</changelog>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539864000">- Fix UCM profile for Dell WD15 dock (bsc#1112292):
  0104-conf-ucm-Dell-WD15-Dock-Fix-incorrect-device-names.patch</changelog>
</package>
<package pkgid="f57233a3eacbaea61dc5891dcca2e445457ad34a68da6d7857321807e607a579" name="alsa-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp150.5.3.1"/>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-lib 1.1.1:
  * including previous fixes
  * a few more fixes/cleanup of control API
  * BSD compatibility changes
  * sync with 4.6 kernel ABI
  * provide API for sequencer sound card number / pid
  * fix races at dmix/dsnoop plugin
  * a few topology API updates
- Drop the obsoleted patches:
  0001-topology-Add-missing-include-sys-stat.h.patch
  0002-pcm-simple-Fix-asserts.patch
  0003-topology-open-topology-files-with-O_TRUNC.patch
  0004-topology-Remove-unused-function-write_data_block.patch
  0005-topology-Remove-unused-variables.patch
  0006-topology-Fix-comparison-of-unsigned-expression-0.patch
  0007-topology-Not-compare-a-for-loop-iterator-with-ABI-__.patch
  0008-topology-Quit-and-show-error-message-on-big-endian-m.patch
  0009-config-files-do-not-include-ucm-topology-configurati.patch
  0010-control-add-missing-asserts-to-ctl_elem_set-function.patch
  0011-pcm_hw-fix-possible-memory-leak-coverity.patch
  0012-coverity-fixes.patch
  0013-topology-fix-debug-output-to-print-correct-max-value.patch</changelog>
  <changelog author="tiwai@suse.de" date="1463054400">- Backport various upstream fixes for PCM (bnc#979702):
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch</changelog>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
</package>
<package pkgid="783688e6dbcab4e686ada54a7a2edbcb0c9c5122fd14124cbc9baa9012ae6b36" name="alsa-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp150.5.6.1"/>
  <changelog author="tiwai@suse.de" date="1463054400">- Backport various upstream fixes for PCM (bnc#979702):
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch</changelog>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539864000">- Fix UCM profile for Dell WD15 dock (bsc#1112292):
  0104-conf-ucm-Dell-WD15-Dock-Fix-incorrect-device-names.patch</changelog>
</package>
<package pkgid="9bc0581254674ebda78272559c287f1c1ae540684102cbc79e382b99ab7f8f9b" name="alsa-docs" arch="noarch">
  <version epoch="0" ver="1.1.5" rel="lp150.5.3.1"/>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-lib 1.1.1:
  * including previous fixes
  * a few more fixes/cleanup of control API
  * BSD compatibility changes
  * sync with 4.6 kernel ABI
  * provide API for sequencer sound card number / pid
  * fix races at dmix/dsnoop plugin
  * a few topology API updates
- Drop the obsoleted patches:
  0001-topology-Add-missing-include-sys-stat.h.patch
  0002-pcm-simple-Fix-asserts.patch
  0003-topology-open-topology-files-with-O_TRUNC.patch
  0004-topology-Remove-unused-function-write_data_block.patch
  0005-topology-Remove-unused-variables.patch
  0006-topology-Fix-comparison-of-unsigned-expression-0.patch
  0007-topology-Not-compare-a-for-loop-iterator-with-ABI-__.patch
  0008-topology-Quit-and-show-error-message-on-big-endian-m.patch
  0009-config-files-do-not-include-ucm-topology-configurati.patch
  0010-control-add-missing-asserts-to-ctl_elem_set-function.patch
  0011-pcm_hw-fix-possible-memory-leak-coverity.patch
  0012-coverity-fixes.patch
  0013-topology-fix-debug-output-to-print-correct-max-value.patch</changelog>
  <changelog author="tiwai@suse.de" date="1463054400">- Backport various upstream fixes for PCM (bnc#979702):
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch</changelog>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
</package>
<package pkgid="d8b877285efd05f987c56fd8ad9254406d47605ee85eb6ea4350346856fb0ea9" name="alsa-docs" arch="noarch">
  <version epoch="0" ver="1.1.5" rel="lp150.5.6.1"/>
  <changelog author="tiwai@suse.de" date="1463054400">- Backport various upstream fixes for PCM (bnc#979702):
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch</changelog>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539864000">- Fix UCM profile for Dell WD15 dock (bsc#1112292):
  0104-conf-ucm-Dell-WD15-Dock-Fix-incorrect-device-names.patch</changelog>
</package>
<package pkgid="e029c037507dc490e6840e1a1ec86640e804b4b2eeb52ab733e0d17b0daef868" name="ant" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
</package>
<package pkgid="d510d1e0dc5922dca0d7f0ce697eec6346fbfca6a62350e0c5f41e226404de7b" name="ant" arch="src">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
</package>
<package pkgid="ae0295f31c5a75f8e0a505ec8e89e938d470b673f43ffa3907d878e33c521ab7" name="ant-antlr" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="dd1792efe745da78f4b573120a6c5bd674e5cbd60e2d277658d3d7771b3a6943" name="ant-antlr" arch="src">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="9b7b5fabe99cb5d0bd56e5234fa8fa60e540dd3c4d34b4893e77510f863dd873" name="ant-apache-bcel" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="1f454be8741cbe27bd08017c7c2dfdda8e4523a1f250d19f373a64ba90ca10d7" name="ant-apache-bsf" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="79c0cf975ff68c2f63488a01aad6698c11a177485d1902c2f0465a772cfb00ae" name="ant-apache-log4j" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="ef490cfa1a8e96d5767634e6ce5f1471bd781218162bfa7567f9e954cd1ac970" name="ant-apache-oro" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="2f1cf778639dd448f1e1cc7bc155791bea193d587ff458eb063368d6d4b44ec9" name="ant-apache-regexp" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="b4a5c7df0f20ab97eea7a559b1db76456443b3dee622639191177b877e930926" name="ant-apache-resolver" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="2bfed0307344cf79b5c15f8458943710c23507e7cd5bfcd14b6f7647a9785cf7" name="ant-apache-xalan2" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="1e0f908f1f9202dd95a8b7549d28ced643d6e5dd8c0038fa420d9360d97f4ccf" name="ant-commons-logging" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="55eac9ad46045800a56e4ef664b864cfbde62c8bbbcd112305e3d86812b58c49" name="ant-commons-net" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="c937170659061b0d45c15e7df3c58196b15198d31bc4f3474f5f8735ee1cc45e" name="ant-javamail" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="64a35933181fc381ef487b6e4c9f88529b760be5528bec35a608ce327c0e6f35" name="ant-jdepend" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="d5cfbbdc6a788d1e65be121ba181872494e1eb025c1c953a6989ac94296603fd" name="ant-jmf" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
</package>
<package pkgid="051b9815af78cf9f108fc72a2e1ccf0b38deb6603050b9fd64b6a22a4e7aa361" name="ant-jsch" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="4da9d6f59e1e88719b17b39f9afa48f362f864e22aec21fa48e104580580fb13" name="ant-junit" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="09c178cae32131f3133108089e09fa4330a88218949c3b61a27f0a9cf4db9708" name="ant-junit" arch="src">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="0996eaf26e8eb59a5ad391151ed63b2564be37abdda3219bd31ffc1e4a5bdede" name="ant-manual" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="716ed284ce533d28822f6feafdd66633a3bb292858aaadfe87dbd08e1bcc6035" name="ant-scripts" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
</package>
<package pkgid="d04a06101e7e9daaa4c6a6004b10e550633569fbe3fe03a2a365e71916f9c51c" name="ant-swing" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
</package>
<package pkgid="e2a7c09bed330910bfbb89a47642d24e09f156682778f4069da94822442761cc" name="ant-testutil" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="bcd7c975fce67863541cbc0923ca27817b0171ecde6e56257de68aeb29f8fc8a" name="apache-pdfbox" arch="noarch">
  <version epoch="0" ver="1.8.12" rel="lp150.4.3.1"/>
  <changelog author="fvogt@suse.com" date="1457006400">- Initial package
- Only fontbox and jempbox are built</changelog>
  <changelog author="fvogt@suse.com" date="1457352000">- Enable javadoc building and packaging</changelog>
  <changelog author="fvogt@suse.com" date="1457352001">- Drop junit and javapackages-tools Requires</changelog>
  <changelog author="fvogt@suse.com" date="1466078400">- Update to version 1.8.12
  - CVE-2016-2175 (pdfbox only, which isn't build by this spec)</changelog>
  <changelog author="sknorr@suse.com" date="1488801600">- Switch between maven-metadata/maven-fragments as appropriate
  for SLE/openSUSE (FATE#322405)</changelog>
  <changelog author="sknorr@suse.com" date="1490011200">- Needed as a dependency for FOP 2.1 (FATE#322405)</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Added patches:
  * pdfbox-1.8.12-bouncycastle.patch
    + Fix build of javadoc against bouncycastle API &gt;= 1.4.7
  * pdfbox-1.8.12-sourcetarget.patch
    + Make java source and target level ant properties
    + Leave the default 1.5
- Specify java source and target level 1.6 in order to allow
  building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fvogt@suse.com" date="1530532800">- Add patch to fix infinite loop while parsing files, leading to OOM
  (CVE-2018-8036,bsc#1099721):
  * fix-infinite-loop.patch
- Use %license</changelog>
</package>
<package pkgid="2f265a36446e564198d4b35440389fda057489849e213407999772c13f215325" name="apache-pdfbox" arch="src">
  <version epoch="0" ver="1.8.12" rel="lp150.4.3.1"/>
  <changelog author="fvogt@suse.com" date="1457006400">- Initial package
- Only fontbox and jempbox are built</changelog>
  <changelog author="fvogt@suse.com" date="1457352000">- Enable javadoc building and packaging</changelog>
  <changelog author="fvogt@suse.com" date="1457352001">- Drop junit and javapackages-tools Requires</changelog>
  <changelog author="fvogt@suse.com" date="1466078400">- Update to version 1.8.12
  - CVE-2016-2175 (pdfbox only, which isn't build by this spec)</changelog>
  <changelog author="sknorr@suse.com" date="1488801600">- Switch between maven-metadata/maven-fragments as appropriate
  for SLE/openSUSE (FATE#322405)</changelog>
  <changelog author="sknorr@suse.com" date="1490011200">- Needed as a dependency for FOP 2.1 (FATE#322405)</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Added patches:
  * pdfbox-1.8.12-bouncycastle.patch
    + Fix build of javadoc against bouncycastle API &gt;= 1.4.7
  * pdfbox-1.8.12-sourcetarget.patch
    + Make java source and target level ant properties
    + Leave the default 1.5
- Specify java source and target level 1.6 in order to allow
  building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fvogt@suse.com" date="1530532800">- Add patch to fix infinite loop while parsing files, leading to OOM
  (CVE-2018-8036,bsc#1099721):
  * fix-infinite-loop.patch
- Use %license</changelog>
</package>
<package pkgid="d32cb8077f6d1c581ea36fb9b85a85c300e7fdb2a333f8d7183119c8361a0635" name="apache-pdfbox" arch="noarch">
  <version epoch="0" ver="1.8.12" rel="lp150.4.6.1"/>
  <changelog author="fvogt@suse.com" date="1457006400">- Initial package
- Only fontbox and jempbox are built</changelog>
  <changelog author="fvogt@suse.com" date="1457352000">- Enable javadoc building and packaging</changelog>
  <changelog author="fvogt@suse.com" date="1457352001">- Drop junit and javapackages-tools Requires</changelog>
  <changelog author="fvogt@suse.com" date="1466078400">- Update to version 1.8.12
  - CVE-2016-2175 (pdfbox only, which isn't build by this spec)</changelog>
  <changelog author="sknorr@suse.com" date="1488801600">- Switch between maven-metadata/maven-fragments as appropriate
  for SLE/openSUSE (FATE#322405)</changelog>
  <changelog author="sknorr@suse.com" date="1490011200">- Needed as a dependency for FOP 2.1 (FATE#322405)</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Added patches:
  * pdfbox-1.8.12-bouncycastle.patch
    + Fix build of javadoc against bouncycastle API &gt;= 1.4.7
  * pdfbox-1.8.12-sourcetarget.patch
    + Make java source and target level ant properties
    + Leave the default 1.5
- Specify java source and target level 1.6 in order to allow
  building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fvogt@suse.com" date="1530532800">- Add patch to fix infinite loop while parsing files, leading to OOM
  (CVE-2018-8036,bsc#1099721):
  * fix-infinite-loop.patch
- Use %license</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1539000000">- Add patch to fix CVE-2018-11797 (bsc#1111009):
  * improve-skip-duplicates.patch</changelog>
</package>
<package pkgid="e94552cb5511e5a1bf92a4b71837b8e9110907ce8f5bc2cc7bf9e8b95a53a614" name="apache-pdfbox" arch="src">
  <version epoch="0" ver="1.8.12" rel="lp150.4.6.1"/>
  <changelog author="fvogt@suse.com" date="1457006400">- Initial package
- Only fontbox and jempbox are built</changelog>
  <changelog author="fvogt@suse.com" date="1457352000">- Enable javadoc building and packaging</changelog>
  <changelog author="fvogt@suse.com" date="1457352001">- Drop junit and javapackages-tools Requires</changelog>
  <changelog author="fvogt@suse.com" date="1466078400">- Update to version 1.8.12
  - CVE-2016-2175 (pdfbox only, which isn't build by this spec)</changelog>
  <changelog author="sknorr@suse.com" date="1488801600">- Switch between maven-metadata/maven-fragments as appropriate
  for SLE/openSUSE (FATE#322405)</changelog>
  <changelog author="sknorr@suse.com" date="1490011200">- Needed as a dependency for FOP 2.1 (FATE#322405)</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Added patches:
  * pdfbox-1.8.12-bouncycastle.patch
    + Fix build of javadoc against bouncycastle API &gt;= 1.4.7
  * pdfbox-1.8.12-sourcetarget.patch
    + Make java source and target level ant properties
    + Leave the default 1.5
- Specify java source and target level 1.6 in order to allow
  building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fvogt@suse.com" date="1530532800">- Add patch to fix infinite loop while parsing files, leading to OOM
  (CVE-2018-8036,bsc#1099721):
  * fix-infinite-loop.patch
- Use %license</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1539000000">- Add patch to fix CVE-2018-11797 (bsc#1111009):
  * improve-skip-duplicates.patch</changelog>
</package>
<package pkgid="a59f720645b3cac109a8011c434e03e512fb32b330a06751d0126883358c4337" name="apache-pdfbox-javadoc" arch="noarch">
  <version epoch="0" ver="1.8.12" rel="lp150.4.3.1"/>
  <changelog author="fvogt@suse.com" date="1457006400">- Initial package
- Only fontbox and jempbox are built</changelog>
  <changelog author="fvogt@suse.com" date="1457352000">- Enable javadoc building and packaging</changelog>
  <changelog author="fvogt@suse.com" date="1457352001">- Drop junit and javapackages-tools Requires</changelog>
  <changelog author="fvogt@suse.com" date="1466078400">- Update to version 1.8.12
  - CVE-2016-2175 (pdfbox only, which isn't build by this spec)</changelog>
  <changelog author="sknorr@suse.com" date="1488801600">- Switch between maven-metadata/maven-fragments as appropriate
  for SLE/openSUSE (FATE#322405)</changelog>
  <changelog author="sknorr@suse.com" date="1490011200">- Needed as a dependency for FOP 2.1 (FATE#322405)</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Added patches:
  * pdfbox-1.8.12-bouncycastle.patch
    + Fix build of javadoc against bouncycastle API &gt;= 1.4.7
  * pdfbox-1.8.12-sourcetarget.patch
    + Make java source and target level ant properties
    + Leave the default 1.5
- Specify java source and target level 1.6 in order to allow
  building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fvogt@suse.com" date="1530532800">- Add patch to fix infinite loop while parsing files, leading to OOM
  (CVE-2018-8036,bsc#1099721):
  * fix-infinite-loop.patch
- Use %license</changelog>
</package>
<package pkgid="18bbc8699af9e14bc3322ee9746929aacd9cade883a92f4ddff4f55ed7597e13" name="apache-pdfbox-javadoc" arch="noarch">
  <version epoch="0" ver="1.8.12" rel="lp150.4.6.1"/>
  <changelog author="fvogt@suse.com" date="1457006400">- Initial package
- Only fontbox and jempbox are built</changelog>
  <changelog author="fvogt@suse.com" date="1457352000">- Enable javadoc building and packaging</changelog>
  <changelog author="fvogt@suse.com" date="1457352001">- Drop junit and javapackages-tools Requires</changelog>
  <changelog author="fvogt@suse.com" date="1466078400">- Update to version 1.8.12
  - CVE-2016-2175 (pdfbox only, which isn't build by this spec)</changelog>
  <changelog author="sknorr@suse.com" date="1488801600">- Switch between maven-metadata/maven-fragments as appropriate
  for SLE/openSUSE (FATE#322405)</changelog>
  <changelog author="sknorr@suse.com" date="1490011200">- Needed as a dependency for FOP 2.1 (FATE#322405)</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Added patches:
  * pdfbox-1.8.12-bouncycastle.patch
    + Fix build of javadoc against bouncycastle API &gt;= 1.4.7
  * pdfbox-1.8.12-sourcetarget.patch
    + Make java source and target level ant properties
    + Leave the default 1.5
- Specify java source and target level 1.6 in order to allow
  building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fvogt@suse.com" date="1530532800">- Add patch to fix infinite loop while parsing files, leading to OOM
  (CVE-2018-8036,bsc#1099721):
  * fix-infinite-loop.patch
- Use %license</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1539000000">- Add patch to fix CVE-2018-11797 (bsc#1111009):
  * improve-skip-duplicates.patch</changelog>
</package>
<package pkgid="a228c9e9abfa113542a4efe6560e8b80a2b664ac489d06cab2c578a2333324d3" name="apache2" arch="src">
  <version epoch="0" ver="2.4.33" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1507204800">- suexec binary moved to main package [bsc#1054741]</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- updated to 2.4.28:
  * ) SECURITY: CVE-2017-9798 (cve.mitre.org)
    Corrupted or freed memory access. &lt;Limit[Except]&gt; must now be used in the
    main configuration file (httpd.conf) to register HTTP methods before the
    .htaccess files.  [Yann Ylavic]
  * ) event: Avoid possible blocking in the listener thread when shutting down
    connections. PR 60956.  [Yann Ylavic]
  * ) mod_speling: Don't embed referer data in a link in error page.
    PR 38923 [Nick Kew]
  * ) htdigest: prevent a buffer overflow when a string exceeds the allowed max
    length in a password file.
    [Luca Toscano, Hanno Böck &lt;hanno hboeck de&gt;]
  * ) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25).
    [Jim Jagielski]
  * ) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically.
    PR 61142.
  * ) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified
    down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond),
    's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski]
  * ) mod_http2: Fix for stalling when more than 32KB are written to a
    suspended stream.  [Stefan Eissing]
  * ) build: allow configuration without APR sources.  [Jacob Champion]
  * ) mod_ssl, ab: Fix compatibility with LibreSSL.  PR 61184.
    [Bernard Spil &lt;brnrd freebsd.org&gt;, Michael Schlenker &lt;msc contact.de&gt;,
    Yann Ylavic]
  * ) core/log: Support use of optional "tag" in syslog entries.
    PR 60525. [Ben Rubson &lt;ben.rubson gmail.com&gt;, Jim Jagielski]
  * ) mod_proxy: Fix ProxyAddHeaders merging.  [Joe Orton]
  * ) core: Disallow multiple Listen on the same IP:port when listener buckets
    are configured (ListenCoresBucketsRatio &gt; 0), consistently with the single
    bucket case (default), thus avoiding the leak of the corresponding socket
    descriptors on graceful restart.  [Yann Ylavic]
  * ) event: Avoid listener periodic wake ups by using the pollset wake-ability
    when available.  PR 57399.  [Yann Ylavic, Luca Toscano]
  * ) mod_proxy_wstunnel: Fix detection of unresponded request which could have
    led to spurious HTTP 502 error messages sent on upgrade connections.
    PR 61283.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
</package>
<package pkgid="8602c2c7971194be1856fcd4b15d1723a0d4c23f786d2531568444b1b8b16bb0" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1507204800">- suexec binary moved to main package [bsc#1054741]</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- updated to 2.4.28:
  * ) SECURITY: CVE-2017-9798 (cve.mitre.org)
    Corrupted or freed memory access. &lt;Limit[Except]&gt; must now be used in the
    main configuration file (httpd.conf) to register HTTP methods before the
    .htaccess files.  [Yann Ylavic]
  * ) event: Avoid possible blocking in the listener thread when shutting down
    connections. PR 60956.  [Yann Ylavic]
  * ) mod_speling: Don't embed referer data in a link in error page.
    PR 38923 [Nick Kew]
  * ) htdigest: prevent a buffer overflow when a string exceeds the allowed max
    length in a password file.
    [Luca Toscano, Hanno Böck &lt;hanno hboeck de&gt;]
  * ) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25).
    [Jim Jagielski]
  * ) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically.
    PR 61142.
  * ) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified
    down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond),
    's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski]
  * ) mod_http2: Fix for stalling when more than 32KB are written to a
    suspended stream.  [Stefan Eissing]
  * ) build: allow configuration without APR sources.  [Jacob Champion]
  * ) mod_ssl, ab: Fix compatibility with LibreSSL.  PR 61184.
    [Bernard Spil &lt;brnrd freebsd.org&gt;, Michael Schlenker &lt;msc contact.de&gt;,
    Yann Ylavic]
  * ) core/log: Support use of optional "tag" in syslog entries.
    PR 60525. [Ben Rubson &lt;ben.rubson gmail.com&gt;, Jim Jagielski]
  * ) mod_proxy: Fix ProxyAddHeaders merging.  [Joe Orton]
  * ) core: Disallow multiple Listen on the same IP:port when listener buckets
    are configured (ListenCoresBucketsRatio &gt; 0), consistently with the single
    bucket case (default), thus avoiding the leak of the corresponding socket
    descriptors on graceful restart.  [Yann Ylavic]
  * ) event: Avoid listener periodic wake ups by using the pollset wake-ability
    when available.  PR 57399.  [Yann Ylavic, Luca Toscano]
  * ) mod_proxy_wstunnel: Fix detection of unresponded request which could have
    led to spurious HTTP 502 error messages sent on upgrade connections.
    PR 61283.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
</package>
<package pkgid="1e0b43940bce76f3d080a400f8a32f35f4c5637c01412cf56257ccd6850979d3" name="apache2" arch="src">
  <version epoch="0" ver="2.4.33" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
</package>
<package pkgid="4f78fd5c06be5cebfb8303ccbdd5f601fa11483f5113a181fdc0d9d1ed1b84c2" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
</package>
<package pkgid="654300d749bd3422af854e71fbc6a0d0600040e31b6f36b273a971cbf65866ef" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1507204800">- suexec binary moved to main package [bsc#1054741]</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- updated to 2.4.28:
  * ) SECURITY: CVE-2017-9798 (cve.mitre.org)
    Corrupted or freed memory access. &lt;Limit[Except]&gt; must now be used in the
    main configuration file (httpd.conf) to register HTTP methods before the
    .htaccess files.  [Yann Ylavic]
  * ) event: Avoid possible blocking in the listener thread when shutting down
    connections. PR 60956.  [Yann Ylavic]
  * ) mod_speling: Don't embed referer data in a link in error page.
    PR 38923 [Nick Kew]
  * ) htdigest: prevent a buffer overflow when a string exceeds the allowed max
    length in a password file.
    [Luca Toscano, Hanno Böck &lt;hanno hboeck de&gt;]
  * ) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25).
    [Jim Jagielski]
  * ) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically.
    PR 61142.
  * ) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified
    down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond),
    's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski]
  * ) mod_http2: Fix for stalling when more than 32KB are written to a
    suspended stream.  [Stefan Eissing]
  * ) build: allow configuration without APR sources.  [Jacob Champion]
  * ) mod_ssl, ab: Fix compatibility with LibreSSL.  PR 61184.
    [Bernard Spil &lt;brnrd freebsd.org&gt;, Michael Schlenker &lt;msc contact.de&gt;,
    Yann Ylavic]
  * ) core/log: Support use of optional "tag" in syslog entries.
    PR 60525. [Ben Rubson &lt;ben.rubson gmail.com&gt;, Jim Jagielski]
  * ) mod_proxy: Fix ProxyAddHeaders merging.  [Joe Orton]
  * ) core: Disallow multiple Listen on the same IP:port when listener buckets
    are configured (ListenCoresBucketsRatio &gt; 0), consistently with the single
    bucket case (default), thus avoiding the leak of the corresponding socket
    descriptors on graceful restart.  [Yann Ylavic]
  * ) event: Avoid listener periodic wake ups by using the pollset wake-ability
    when available.  PR 57399.  [Yann Ylavic, Luca Toscano]
  * ) mod_proxy_wstunnel: Fix detection of unresponded request which could have
    led to spurious HTTP 502 error messages sent on upgrade connections.
    PR 61283.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
</package>
<package pkgid="ab4c641b9ac913ad30e306b92ebed2da8345a9102e5e18fb3ff076c19eea0e52" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
</package>
<package pkgid="079b02ba05a4591cd3d1ad76240e11bfb542e9ef636cf65f8fb9d95359cf2e57" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.33" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1507204800">- suexec binary moved to main package [bsc#1054741]</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- updated to 2.4.28:
  * ) SECURITY: CVE-2017-9798 (cve.mitre.org)
    Corrupted or freed memory access. &lt;Limit[Except]&gt; must now be used in the
    main configuration file (httpd.conf) to register HTTP methods before the
    .htaccess files.  [Yann Ylavic]
  * ) event: Avoid possible blocking in the listener thread when shutting down
    connections. PR 60956.  [Yann Ylavic]
  * ) mod_speling: Don't embed referer data in a link in error page.
    PR 38923 [Nick Kew]
  * ) htdigest: prevent a buffer overflow when a string exceeds the allowed max
    length in a password file.
    [Luca Toscano, Hanno Böck &lt;hanno hboeck de&gt;]
  * ) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25).
    [Jim Jagielski]
  * ) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically.
    PR 61142.
  * ) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified
    down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond),
    's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski]
  * ) mod_http2: Fix for stalling when more than 32KB are written to a
    suspended stream.  [Stefan Eissing]
  * ) build: allow configuration without APR sources.  [Jacob Champion]
  * ) mod_ssl, ab: Fix compatibility with LibreSSL.  PR 61184.
    [Bernard Spil &lt;brnrd freebsd.org&gt;, Michael Schlenker &lt;msc contact.de&gt;,
    Yann Ylavic]
  * ) core/log: Support use of optional "tag" in syslog entries.
    PR 60525. [Ben Rubson &lt;ben.rubson gmail.com&gt;, Jim Jagielski]
  * ) mod_proxy: Fix ProxyAddHeaders merging.  [Joe Orton]
  * ) core: Disallow multiple Listen on the same IP:port when listener buckets
    are configured (ListenCoresBucketsRatio &gt; 0), consistently with the single
    bucket case (default), thus avoiding the leak of the corresponding socket
    descriptors on graceful restart.  [Yann Ylavic]
  * ) event: Avoid listener periodic wake ups by using the pollset wake-ability
    when available.  PR 57399.  [Yann Ylavic, Luca Toscano]
  * ) mod_proxy_wstunnel: Fix detection of unresponded request which could have
    led to spurious HTTP 502 error messages sent on upgrade connections.
    PR 61283.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
</package>
<package pkgid="287da5f1d5554fed336cd5751b23f8503858b835df8268fe2a3cfd2862f671ed" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.33" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
</package>
<package pkgid="1371ea2d0d57201fb01f403f4e6ae9df68aa7d915930822f095fc351f3a40151" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1507204800">- suexec binary moved to main package [bsc#1054741]</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- updated to 2.4.28:
  * ) SECURITY: CVE-2017-9798 (cve.mitre.org)
    Corrupted or freed memory access. &lt;Limit[Except]&gt; must now be used in the
    main configuration file (httpd.conf) to register HTTP methods before the
    .htaccess files.  [Yann Ylavic]
  * ) event: Avoid possible blocking in the listener thread when shutting down
    connections. PR 60956.  [Yann Ylavic]
  * ) mod_speling: Don't embed referer data in a link in error page.
    PR 38923 [Nick Kew]
  * ) htdigest: prevent a buffer overflow when a string exceeds the allowed max
    length in a password file.
    [Luca Toscano, Hanno Böck &lt;hanno hboeck de&gt;]
  * ) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25).
    [Jim Jagielski]
  * ) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically.
    PR 61142.
  * ) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified
    down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond),
    's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski]
  * ) mod_http2: Fix for stalling when more than 32KB are written to a
    suspended stream.  [Stefan Eissing]
  * ) build: allow configuration without APR sources.  [Jacob Champion]
  * ) mod_ssl, ab: Fix compatibility with LibreSSL.  PR 61184.
    [Bernard Spil &lt;brnrd freebsd.org&gt;, Michael Schlenker &lt;msc contact.de&gt;,
    Yann Ylavic]
  * ) core/log: Support use of optional "tag" in syslog entries.
    PR 60525. [Ben Rubson &lt;ben.rubson gmail.com&gt;, Jim Jagielski]
  * ) mod_proxy: Fix ProxyAddHeaders merging.  [Joe Orton]
  * ) core: Disallow multiple Listen on the same IP:port when listener buckets
    are configured (ListenCoresBucketsRatio &gt; 0), consistently with the single
    bucket case (default), thus avoiding the leak of the corresponding socket
    descriptors on graceful restart.  [Yann Ylavic]
  * ) event: Avoid listener periodic wake ups by using the pollset wake-ability
    when available.  PR 57399.  [Yann Ylavic, Luca Toscano]
  * ) mod_proxy_wstunnel: Fix detection of unresponded request which could have
    led to spurious HTTP 502 error messages sent on upgrade connections.
    PR 61283.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
</package>
<package pkgid="ec2b2bf7438c0b47927607e6661d0886ff644883c9914e96ba14fb7a2520dc35" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
</package>
<package pkgid="e1e75bfb639e24d83b89933ae948fb161ee7b624ec29332cdda6f86d67bb3b27" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1507204800">- suexec binary moved to main package [bsc#1054741]</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- updated to 2.4.28:
  * ) SECURITY: CVE-2017-9798 (cve.mitre.org)
    Corrupted or freed memory access. &lt;Limit[Except]&gt; must now be used in the
    main configuration file (httpd.conf) to register HTTP methods before the
    .htaccess files.  [Yann Ylavic]
  * ) event: Avoid possible blocking in the listener thread when shutting down
    connections. PR 60956.  [Yann Ylavic]
  * ) mod_speling: Don't embed referer data in a link in error page.
    PR 38923 [Nick Kew]
  * ) htdigest: prevent a buffer overflow when a string exceeds the allowed max
    length in a password file.
    [Luca Toscano, Hanno Böck &lt;hanno hboeck de&gt;]
  * ) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25).
    [Jim Jagielski]
  * ) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically.
    PR 61142.
  * ) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified
    down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond),
    's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski]
  * ) mod_http2: Fix for stalling when more than 32KB are written to a
    suspended stream.  [Stefan Eissing]
  * ) build: allow configuration without APR sources.  [Jacob Champion]
  * ) mod_ssl, ab: Fix compatibility with LibreSSL.  PR 61184.
    [Bernard Spil &lt;brnrd freebsd.org&gt;, Michael Schlenker &lt;msc contact.de&gt;,
    Yann Ylavic]
  * ) core/log: Support use of optional "tag" in syslog entries.
    PR 60525. [Ben Rubson &lt;ben.rubson gmail.com&gt;, Jim Jagielski]
  * ) mod_proxy: Fix ProxyAddHeaders merging.  [Joe Orton]
  * ) core: Disallow multiple Listen on the same IP:port when listener buckets
    are configured (ListenCoresBucketsRatio &gt; 0), consistently with the single
    bucket case (default), thus avoiding the leak of the corresponding socket
    descriptors on graceful restart.  [Yann Ylavic]
  * ) event: Avoid listener periodic wake ups by using the pollset wake-ability
    when available.  PR 57399.  [Yann Ylavic, Luca Toscano]
  * ) mod_proxy_wstunnel: Fix detection of unresponded request which could have
    led to spurious HTTP 502 error messages sent on upgrade connections.
    PR 61283.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
</package>
<package pkgid="7a1b9d86fa3f81fe83d25c5bb02a596053518b00bbbfecfd7c9a795619ad4848" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
</package>
<package pkgid="27d550ed0ef32a03c28c342bd902c2558ef12f4c6bf66199084de9d47c24320b" name="apache2-mod_apparmor" arch="x86_64">
  <version epoch="0" ver="2.12" rel="lp150.6.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485604800">- split libapparmor into separate spec to get rid of build loop
  involving mariadb, systemd, apparmor, libapr and mariadb again
  (see the discussion in SR 448871 for details)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add upstream-changes-r3616..3628.diff:
  - update abstractions/base, abstractions/apache2-common and dovecot profiles
  - merge ask_the_questions() of aa-logprof and aa-mergeprof
  - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914)</changelog>
  <changelog author="jmatejek@suse.com" date="1487246400">- add python3-drop-re-locale.patch: remove deprecated re.LOCALE
  flag in Python UI as it was dropped from Python 3.6 (lp#1661766)</changelog>
  <changelog author="kukuk@suse.com" date="1489665600">- Cleanup spec file:
  - don't use insserv if we afterwards call systemd, this can
    have bad side effects
  - remove dead code
  - remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490443200">- add upstream-changes-r3629..3648.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - update nvidia abstraction for newer nvidia drivers
  - don't enforce ordering of dbus rule attributes in utils (lp#1628286)
  - add --parser, --base and --Include option to aa-easyprof to allow
    non-standard paths (useful for tests) (lp#1521031)
  - move initialization code in apparmor.aa to init_aa(). This allows to
    run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
    don't exist.
  - several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
  parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1499860800">- add JSON support. Required for FATE#323380.
  (apparmor-yast-cleanup.patch, apparmor-json-support.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1500033600">- don't rely on implementation details for reload in %post</changelog>
  <changelog author="jmatejek@suse.com" date="1502452800">- do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
</package>
<package pkgid="0afbbd47451f338e6f8860df04fde4feba6b4e8f8b15c674e15c42546e7e593d" name="apache2-mod_jk" arch="src">
  <version epoch="0" ver="1.2.43" rel="lp150.2.3.1"/>
  <changelog author="gaboo@gaboo.org" date="1280836800">- Update to version 1.2.30
  * Apache: Improve compatibility with Apache 2.3. (rjung)
  * AJP: Improve socket shutdown handling. (mturk)
  * AJP: Ensure we never reuse a non reusable socket. (mturk)
  * AJP: Tolerate a single excess packet when waiting for cpong. (mturk)
  * AJP: Check protocol correctness more strictly. (mturk)
  * other bug fixes and improvements
  * http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html</changelog>
  <changelog author="vlado.paskov@gmail.com" date="1307448000">- Update of README.SUSE file: now reflects configuration steps for
  mod_jk with tomcat6 server. It was refering tomcat5 configuration.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="dimstar@opensuse.org" date="1359374400">- Update to version 1.2.37:
  + Fix compatibility with apache 2.4
- Introduce apxs variable, based on apache_branch. With apache 2.4,
  apxs2 moved from %{_sbindir} to %{_bindir}.</changelog>
  <changelog author="tchvatal@suse.com" date="1401710400">- Version bump to 1.2.40 fixes bnc#880798:
  * Fix forwarding of chunked requests, which is broken in version 1.2.39. (rjung)
  * 56352: Fix regression in memory release. (mturk)
  * Fix status worker display of worker IP address after name or port was changed. (rjung)
  * 56297: Improve key hash function. Copied from APR. (rjung)
  * 55683: Remove quotes from quoted session cookies. (rjung)
  * 53542: ISAPI: Fix grammar in 503 error page. (rjung)
  * 55696: Crash on Mac OS X 10.9 during config parsing. (rjung)
  * Deprecate nt_service from Tomcat Connectors. (mturk)
  * 56133: Fix possible crash when a request fails during request body transfer to the back end and reply_timeout was set. Patch contributed by Hiroto Shimizu. (rjung)
  * Fix status worker not updating parameters for all members. (mturk)
  * 55853: HTTPD: Use the correct API for setting Content-Length. Patch contributed by areese yahoo-inc.com. (rjung)
  * Add IPV6 support for connection to webserver. New directive prefer_ipv6 has been added to control the hostname resolution and preserve backward compatibility. (mturk)
  * Add --disable-sock-cloexec to configure to disable use of SOCK_CLOEXEC (using FD_CLOEXEC + fnctl instead) so built modules will work with Linux kernels prior to 2.6.27. (timw)
  * Clean up config file parsing. Worker names are now restricted to 60 bytes. (rjung)
  * Allow to set a stickyness cookie in case a web framework breaks Tomcat's adding of the routing ID to the end of the JSESSIONID cookie. (rjung)
  * Use max_packet_size also for request body forwarding. (rjung)
  * Apache 2.4: By default forward logical client address as provided by mod_remoteip. When setting JkOptions ForwardPhysicalAddress mod_jk will instead forward the physical peer address. (rjung)
  * Minor documentation improvements. (rjung)</changelog>
  <changelog author="tchvatal@suse.com" date="1401710401">- Cleanup with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1415016000">- use apache rpm macros</changelog>
  <changelog author="pgajdos@suse.com" date="1416830400">- fix tomcat paths in jk.conf [bnc#742618]</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Add asc signature file.
- Fix URL for homepage</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Drop the asc again to make dimstar happy</changelog>
  <changelog author="pgajdos@suse.com" date="1433419200">- access configuration conditional in jk.conf example</changelog>
  <changelog author="tchvatal@suse.com" date="1433419201">- Apply patch to fix bnc#927845 CVE-2014-8111 VUL-1: apache2-mod_jk: Tomcat
  mod_jk information leak due to incorrect JkMount/JkUnmount directives
  processing:
  * apache2-mod_jk-CVE-2014-8111.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="pgajdos@suse.com" date="1441800000">- test package with %apache_test_module_load</changelog>
  <changelog author="tchvatal@suse.com" date="1453291200">- Version update to 1.2.41:
  * remove merged patch apache2-mod_jk-CVE-2014-8111.patch
  * many small bugfixes all around:
    + http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Just depend on java-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1517486400">- Version update to 1.2.42:
  * Many small fixes
  * Optimalization for new gccs
  * Minor code cleanups</changelog>
  <changelog author="tchvatal@suse.com" date="1518523200">- Disable tests for now as the default profile is not working
  properly to load up and upstream should update the sample</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521115200">- Update to version 1.2.43 [bsc#1085220, CVE-2018-1323]
  * LB: Propagate load factor changes applied by the status worker
    to a load balancer sub worker correctly to all processes.
  * ISAPI: Align the make files for 32-bit and 64-bit builds.
  * Update config.guess and config.sub
  * Update PCRE bundled with the ISAPI redirector to 8.41.
  * Update the ISAPI redirector installation documentation to
    reflect the currently supported versions of Windows.
  * Align the normalization performed by the ISAPI redirector with
    that implemented by Tomcat.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1542283200">- Security fix: [bsc#1114612, CVE-2018-11759]
  * connector path traversal due to mishandled HTTP requests in httpd
  * Added patches:
  - apache2-mod_jk-1.2.43-lb_retries.patch (to introduce lb_retries)
  - apache2-mod_jk-1.2.43-CVE-2018-11759.patch</changelog>
</package>
<package pkgid="583369e62b95930fb996e0c4d975481132429672e5bb1297ec41fb18236ace4a" name="apache2-mod_jk" arch="x86_64">
  <version epoch="0" ver="1.2.43" rel="lp150.2.3.1"/>
  <changelog author="gaboo@gaboo.org" date="1280836800">- Update to version 1.2.30
  * Apache: Improve compatibility with Apache 2.3. (rjung)
  * AJP: Improve socket shutdown handling. (mturk)
  * AJP: Ensure we never reuse a non reusable socket. (mturk)
  * AJP: Tolerate a single excess packet when waiting for cpong. (mturk)
  * AJP: Check protocol correctness more strictly. (mturk)
  * other bug fixes and improvements
  * http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html</changelog>
  <changelog author="vlado.paskov@gmail.com" date="1307448000">- Update of README.SUSE file: now reflects configuration steps for
  mod_jk with tomcat6 server. It was refering tomcat5 configuration.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="dimstar@opensuse.org" date="1359374400">- Update to version 1.2.37:
  + Fix compatibility with apache 2.4
- Introduce apxs variable, based on apache_branch. With apache 2.4,
  apxs2 moved from %{_sbindir} to %{_bindir}.</changelog>
  <changelog author="tchvatal@suse.com" date="1401710400">- Version bump to 1.2.40 fixes bnc#880798:
  * Fix forwarding of chunked requests, which is broken in version 1.2.39. (rjung)
  * 56352: Fix regression in memory release. (mturk)
  * Fix status worker display of worker IP address after name or port was changed. (rjung)
  * 56297: Improve key hash function. Copied from APR. (rjung)
  * 55683: Remove quotes from quoted session cookies. (rjung)
  * 53542: ISAPI: Fix grammar in 503 error page. (rjung)
  * 55696: Crash on Mac OS X 10.9 during config parsing. (rjung)
  * Deprecate nt_service from Tomcat Connectors. (mturk)
  * 56133: Fix possible crash when a request fails during request body transfer to the back end and reply_timeout was set. Patch contributed by Hiroto Shimizu. (rjung)
  * Fix status worker not updating parameters for all members. (mturk)
  * 55853: HTTPD: Use the correct API for setting Content-Length. Patch contributed by areese yahoo-inc.com. (rjung)
  * Add IPV6 support for connection to webserver. New directive prefer_ipv6 has been added to control the hostname resolution and preserve backward compatibility. (mturk)
  * Add --disable-sock-cloexec to configure to disable use of SOCK_CLOEXEC (using FD_CLOEXEC + fnctl instead) so built modules will work with Linux kernels prior to 2.6.27. (timw)
  * Clean up config file parsing. Worker names are now restricted to 60 bytes. (rjung)
  * Allow to set a stickyness cookie in case a web framework breaks Tomcat's adding of the routing ID to the end of the JSESSIONID cookie. (rjung)
  * Use max_packet_size also for request body forwarding. (rjung)
  * Apache 2.4: By default forward logical client address as provided by mod_remoteip. When setting JkOptions ForwardPhysicalAddress mod_jk will instead forward the physical peer address. (rjung)
  * Minor documentation improvements. (rjung)</changelog>
  <changelog author="tchvatal@suse.com" date="1401710401">- Cleanup with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1415016000">- use apache rpm macros</changelog>
  <changelog author="pgajdos@suse.com" date="1416830400">- fix tomcat paths in jk.conf [bnc#742618]</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Add asc signature file.
- Fix URL for homepage</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Drop the asc again to make dimstar happy</changelog>
  <changelog author="pgajdos@suse.com" date="1433419200">- access configuration conditional in jk.conf example</changelog>
  <changelog author="tchvatal@suse.com" date="1433419201">- Apply patch to fix bnc#927845 CVE-2014-8111 VUL-1: apache2-mod_jk: Tomcat
  mod_jk information leak due to incorrect JkMount/JkUnmount directives
  processing:
  * apache2-mod_jk-CVE-2014-8111.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="pgajdos@suse.com" date="1441800000">- test package with %apache_test_module_load</changelog>
  <changelog author="tchvatal@suse.com" date="1453291200">- Version update to 1.2.41:
  * remove merged patch apache2-mod_jk-CVE-2014-8111.patch
  * many small bugfixes all around:
    + http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Just depend on java-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1517486400">- Version update to 1.2.42:
  * Many small fixes
  * Optimalization for new gccs
  * Minor code cleanups</changelog>
  <changelog author="tchvatal@suse.com" date="1518523200">- Disable tests for now as the default profile is not working
  properly to load up and upstream should update the sample</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521115200">- Update to version 1.2.43 [bsc#1085220, CVE-2018-1323]
  * LB: Propagate load factor changes applied by the status worker
    to a load balancer sub worker correctly to all processes.
  * ISAPI: Align the make files for 32-bit and 64-bit builds.
  * Update config.guess and config.sub
  * Update PCRE bundled with the ISAPI redirector to 8.41.
  * Update the ISAPI redirector installation documentation to
    reflect the currently supported versions of Windows.
  * Align the normalization performed by the ISAPI redirector with
    that implemented by Tomcat.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1542283200">- Security fix: [bsc#1114612, CVE-2018-11759]
  * connector path traversal due to mishandled HTTP requests in httpd
  * Added patches:
  - apache2-mod_jk-1.2.43-lb_retries.patch (to introduce lb_retries)
  - apache2-mod_jk-1.2.43-CVE-2018-11759.patch</changelog>
</package>
<package pkgid="ae4e8930fb88ce3bccf11111b8702bfe93501a44dd295236fc8e4cc5f74bb4db" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="add651c77d2fe5a9fa8d461b8c3234072372837f1016f8a467ed96aa884643b1" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
</package>
<package pkgid="9b68f8fdb789bbe5714170b7d832e8d71454fc07228762348c01cc510d0725c6" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="6aad8b22696f9e5190c19714278693f2b32e4d4d55cbaaedf24ad00ce9f2296b" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="b8dfae147a9df2c774e7e52f8cc3f4f009986176b39b8b282b3451e5a45c967b" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="f624c88c6b6a49fb9b6e18becef053ca3e0347e72a5a5fd88ccd911880379dcd" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1507204800">- suexec binary moved to main package [bsc#1054741]</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- updated to 2.4.28:
  * ) SECURITY: CVE-2017-9798 (cve.mitre.org)
    Corrupted or freed memory access. &lt;Limit[Except]&gt; must now be used in the
    main configuration file (httpd.conf) to register HTTP methods before the
    .htaccess files.  [Yann Ylavic]
  * ) event: Avoid possible blocking in the listener thread when shutting down
    connections. PR 60956.  [Yann Ylavic]
  * ) mod_speling: Don't embed referer data in a link in error page.
    PR 38923 [Nick Kew]
  * ) htdigest: prevent a buffer overflow when a string exceeds the allowed max
    length in a password file.
    [Luca Toscano, Hanno Böck &lt;hanno hboeck de&gt;]
  * ) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25).
    [Jim Jagielski]
  * ) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically.
    PR 61142.
  * ) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified
    down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond),
    's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski]
  * ) mod_http2: Fix for stalling when more than 32KB are written to a
    suspended stream.  [Stefan Eissing]
  * ) build: allow configuration without APR sources.  [Jacob Champion]
  * ) mod_ssl, ab: Fix compatibility with LibreSSL.  PR 61184.
    [Bernard Spil &lt;brnrd freebsd.org&gt;, Michael Schlenker &lt;msc contact.de&gt;,
    Yann Ylavic]
  * ) core/log: Support use of optional "tag" in syslog entries.
    PR 60525. [Ben Rubson &lt;ben.rubson gmail.com&gt;, Jim Jagielski]
  * ) mod_proxy: Fix ProxyAddHeaders merging.  [Joe Orton]
  * ) core: Disallow multiple Listen on the same IP:port when listener buckets
    are configured (ListenCoresBucketsRatio &gt; 0), consistently with the single
    bucket case (default), thus avoiding the leak of the corresponding socket
    descriptors on graceful restart.  [Yann Ylavic]
  * ) event: Avoid listener periodic wake ups by using the pollset wake-ability
    when available.  PR 57399.  [Yann Ylavic, Luca Toscano]
  * ) mod_proxy_wstunnel: Fix detection of unresponded request which could have
    led to spurious HTTP 502 error messages sent on upgrade connections.
    PR 61283.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
</package>
<package pkgid="85d7840dd68cd1e89e43420f9d32e11528487b920161ff54ecfedd821ebeff4a" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
</package>
<package pkgid="5664db4cb7e65dc0c6419d83a1b8f2c70de4d925671042a5eaa0a4d2029932f2" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1507204800">- suexec binary moved to main package [bsc#1054741]</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- updated to 2.4.28:
  * ) SECURITY: CVE-2017-9798 (cve.mitre.org)
    Corrupted or freed memory access. &lt;Limit[Except]&gt; must now be used in the
    main configuration file (httpd.conf) to register HTTP methods before the
    .htaccess files.  [Yann Ylavic]
  * ) event: Avoid possible blocking in the listener thread when shutting down
    connections. PR 60956.  [Yann Ylavic]
  * ) mod_speling: Don't embed referer data in a link in error page.
    PR 38923 [Nick Kew]
  * ) htdigest: prevent a buffer overflow when a string exceeds the allowed max
    length in a password file.
    [Luca Toscano, Hanno Böck &lt;hanno hboeck de&gt;]
  * ) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25).
    [Jim Jagielski]
  * ) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically.
    PR 61142.
  * ) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified
    down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond),
    's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski]
  * ) mod_http2: Fix for stalling when more than 32KB are written to a
    suspended stream.  [Stefan Eissing]
  * ) build: allow configuration without APR sources.  [Jacob Champion]
  * ) mod_ssl, ab: Fix compatibility with LibreSSL.  PR 61184.
    [Bernard Spil &lt;brnrd freebsd.org&gt;, Michael Schlenker &lt;msc contact.de&gt;,
    Yann Ylavic]
  * ) core/log: Support use of optional "tag" in syslog entries.
    PR 60525. [Ben Rubson &lt;ben.rubson gmail.com&gt;, Jim Jagielski]
  * ) mod_proxy: Fix ProxyAddHeaders merging.  [Joe Orton]
  * ) core: Disallow multiple Listen on the same IP:port when listener buckets
    are configured (ListenCoresBucketsRatio &gt; 0), consistently with the single
    bucket case (default), thus avoiding the leak of the corresponding socket
    descriptors on graceful restart.  [Yann Ylavic]
  * ) event: Avoid listener periodic wake ups by using the pollset wake-ability
    when available.  PR 57399.  [Yann Ylavic, Luca Toscano]
  * ) mod_proxy_wstunnel: Fix detection of unresponded request which could have
    led to spurious HTTP 502 error messages sent on upgrade connections.
    PR 61283.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
</package>
<package pkgid="45222b3efc6988576c304d61ab48af5da524e13801fd9a30a17cda31d9906adb" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
</package>
<package pkgid="1aea06d977e1baa97b3fe27bdde3aade6886ab79f4a7e8738de2749a66318cfb" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1507204800">- suexec binary moved to main package [bsc#1054741]</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- updated to 2.4.28:
  * ) SECURITY: CVE-2017-9798 (cve.mitre.org)
    Corrupted or freed memory access. &lt;Limit[Except]&gt; must now be used in the
    main configuration file (httpd.conf) to register HTTP methods before the
    .htaccess files.  [Yann Ylavic]
  * ) event: Avoid possible blocking in the listener thread when shutting down
    connections. PR 60956.  [Yann Ylavic]
  * ) mod_speling: Don't embed referer data in a link in error page.
    PR 38923 [Nick Kew]
  * ) htdigest: prevent a buffer overflow when a string exceeds the allowed max
    length in a password file.
    [Luca Toscano, Hanno Böck &lt;hanno hboeck de&gt;]
  * ) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25).
    [Jim Jagielski]
  * ) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically.
    PR 61142.
  * ) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified
    down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond),
    's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski]
  * ) mod_http2: Fix for stalling when more than 32KB are written to a
    suspended stream.  [Stefan Eissing]
  * ) build: allow configuration without APR sources.  [Jacob Champion]
  * ) mod_ssl, ab: Fix compatibility with LibreSSL.  PR 61184.
    [Bernard Spil &lt;brnrd freebsd.org&gt;, Michael Schlenker &lt;msc contact.de&gt;,
    Yann Ylavic]
  * ) core/log: Support use of optional "tag" in syslog entries.
    PR 60525. [Ben Rubson &lt;ben.rubson gmail.com&gt;, Jim Jagielski]
  * ) mod_proxy: Fix ProxyAddHeaders merging.  [Joe Orton]
  * ) core: Disallow multiple Listen on the same IP:port when listener buckets
    are configured (ListenCoresBucketsRatio &gt; 0), consistently with the single
    bucket case (default), thus avoiding the leak of the corresponding socket
    descriptors on graceful restart.  [Yann Ylavic]
  * ) event: Avoid listener periodic wake ups by using the pollset wake-ability
    when available.  PR 57399.  [Yann Ylavic, Luca Toscano]
  * ) mod_proxy_wstunnel: Fix detection of unresponded request which could have
    led to spurious HTTP 502 error messages sent on upgrade connections.
    PR 61283.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
</package>
<package pkgid="6ce7f284ed4fc519e50faa3f70ff9b48593a67e4806ffb19af9e69820cdcc49e" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
</package>
<package pkgid="eadb0695f9ee56a0bad49154ce8c4198b1c41b3d819f717a0dc8e4105442af4a" name="apparmor" arch="src">
  <version epoch="0" ver="2.12" rel="lp150.6.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485604800">- split libapparmor into separate spec to get rid of build loop
  involving mariadb, systemd, apparmor, libapr and mariadb again
  (see the discussion in SR 448871 for details)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add upstream-changes-r3616..3628.diff:
  - update abstractions/base, abstractions/apache2-common and dovecot profiles
  - merge ask_the_questions() of aa-logprof and aa-mergeprof
  - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914)</changelog>
  <changelog author="jmatejek@suse.com" date="1487246400">- add python3-drop-re-locale.patch: remove deprecated re.LOCALE
  flag in Python UI as it was dropped from Python 3.6 (lp#1661766)</changelog>
  <changelog author="kukuk@suse.com" date="1489665600">- Cleanup spec file:
  - don't use insserv if we afterwards call systemd, this can
    have bad side effects
  - remove dead code
  - remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490443200">- add upstream-changes-r3629..3648.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - update nvidia abstraction for newer nvidia drivers
  - don't enforce ordering of dbus rule attributes in utils (lp#1628286)
  - add --parser, --base and --Include option to aa-easyprof to allow
    non-standard paths (useful for tests) (lp#1521031)
  - move initialization code in apparmor.aa to init_aa(). This allows to
    run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
    don't exist.
  - several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
  parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1499860800">- add JSON support. Required for FATE#323380.
  (apparmor-yast-cleanup.patch, apparmor-json-support.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1500033600">- don't rely on implementation details for reload in %post</changelog>
  <changelog author="jmatejek@suse.com" date="1502452800">- do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
</package>
<package pkgid="6c8d5f7165b8da273f56e189361cfab660db7c752ff8d981e5bc68f1d89ffe34" name="apparmor-abstractions" arch="noarch">
  <version epoch="0" ver="2.12" rel="lp150.6.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485604800">- split libapparmor into separate spec to get rid of build loop
  involving mariadb, systemd, apparmor, libapr and mariadb again
  (see the discussion in SR 448871 for details)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add upstream-changes-r3616..3628.diff:
  - update abstractions/base, abstractions/apache2-common and dovecot profiles
  - merge ask_the_questions() of aa-logprof and aa-mergeprof
  - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914)</changelog>
  <changelog author="jmatejek@suse.com" date="1487246400">- add python3-drop-re-locale.patch: remove deprecated re.LOCALE
  flag in Python UI as it was dropped from Python 3.6 (lp#1661766)</changelog>
  <changelog author="kukuk@suse.com" date="1489665600">- Cleanup spec file:
  - don't use insserv if we afterwards call systemd, this can
    have bad side effects
  - remove dead code
  - remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490443200">- add upstream-changes-r3629..3648.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - update nvidia abstraction for newer nvidia drivers
  - don't enforce ordering of dbus rule attributes in utils (lp#1628286)
  - add --parser, --base and --Include option to aa-easyprof to allow
    non-standard paths (useful for tests) (lp#1521031)
  - move initialization code in apparmor.aa to init_aa(). This allows to
    run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
    don't exist.
  - several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
  parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1499860800">- add JSON support. Required for FATE#323380.
  (apparmor-yast-cleanup.patch, apparmor-json-support.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1500033600">- don't rely on implementation details for reload in %post</changelog>
  <changelog author="jmatejek@suse.com" date="1502452800">- do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
</package>
<package pkgid="98e4b5a51565fddfae998dd75821807ef481ef894946f7b4db31d6719e709d44" name="apparmor-docs" arch="noarch">
  <version epoch="0" ver="2.12" rel="lp150.6.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485604800">- split libapparmor into separate spec to get rid of build loop
  involving mariadb, systemd, apparmor, libapr and mariadb again
  (see the discussion in SR 448871 for details)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add upstream-changes-r3616..3628.diff:
  - update abstractions/base, abstractions/apache2-common and dovecot profiles
  - merge ask_the_questions() of aa-logprof and aa-mergeprof
  - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914)</changelog>
  <changelog author="jmatejek@suse.com" date="1487246400">- add python3-drop-re-locale.patch: remove deprecated re.LOCALE
  flag in Python UI as it was dropped from Python 3.6 (lp#1661766)</changelog>
  <changelog author="kukuk@suse.com" date="1489665600">- Cleanup spec file:
  - don't use insserv if we afterwards call systemd, this can
    have bad side effects
  - remove dead code
  - remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490443200">- add upstream-changes-r3629..3648.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - update nvidia abstraction for newer nvidia drivers
  - don't enforce ordering of dbus rule attributes in utils (lp#1628286)
  - add --parser, --base and --Include option to aa-easyprof to allow
    non-standard paths (useful for tests) (lp#1521031)
  - move initialization code in apparmor.aa to init_aa(). This allows to
    run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
    don't exist.
  - several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
  parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1499860800">- add JSON support. Required for FATE#323380.
  (apparmor-yast-cleanup.patch, apparmor-json-support.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1500033600">- don't rely on implementation details for reload in %post</changelog>
  <changelog author="jmatejek@suse.com" date="1502452800">- do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
</package>
<package pkgid="c059b0abb0e6e0bf5a44b393a068369cb97de002e95db56303ca5c03c5d86e24" name="apparmor-parser" arch="x86_64">
  <version epoch="0" ver="2.12" rel="lp150.6.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485604800">- split libapparmor into separate spec to get rid of build loop
  involving mariadb, systemd, apparmor, libapr and mariadb again
  (see the discussion in SR 448871 for details)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add upstream-changes-r3616..3628.diff:
  - update abstractions/base, abstractions/apache2-common and dovecot profiles
  - merge ask_the_questions() of aa-logprof and aa-mergeprof
  - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914)</changelog>
  <changelog author="jmatejek@suse.com" date="1487246400">- add python3-drop-re-locale.patch: remove deprecated re.LOCALE
  flag in Python UI as it was dropped from Python 3.6 (lp#1661766)</changelog>
  <changelog author="kukuk@suse.com" date="1489665600">- Cleanup spec file:
  - don't use insserv if we afterwards call systemd, this can
    have bad side effects
  - remove dead code
  - remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490443200">- add upstream-changes-r3629..3648.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - update nvidia abstraction for newer nvidia drivers
  - don't enforce ordering of dbus rule attributes in utils (lp#1628286)
  - add --parser, --base and --Include option to aa-easyprof to allow
    non-standard paths (useful for tests) (lp#1521031)
  - move initialization code in apparmor.aa to init_aa(). This allows to
    run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
    don't exist.
  - several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
  parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1499860800">- add JSON support. Required for FATE#323380.
  (apparmor-yast-cleanup.patch, apparmor-json-support.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1500033600">- don't rely on implementation details for reload in %post</changelog>
  <changelog author="jmatejek@suse.com" date="1502452800">- do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
</package>
<package pkgid="9b25465826edf0b32f3fc2642836fa1a9f88bdfe425c649d67486b0aeb0fd82e" name="apparmor-parser-lang" arch="noarch">
  <version epoch="0" ver="2.12" rel="lp150.6.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485604800">- split libapparmor into separate spec to get rid of build loop
  involving mariadb, systemd, apparmor, libapr and mariadb again
  (see the discussion in SR 448871 for details)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add upstream-changes-r3616..3628.diff:
  - update abstractions/base, abstractions/apache2-common and dovecot profiles
  - merge ask_the_questions() of aa-logprof and aa-mergeprof
  - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914)</changelog>
  <changelog author="jmatejek@suse.com" date="1487246400">- add python3-drop-re-locale.patch: remove deprecated re.LOCALE
  flag in Python UI as it was dropped from Python 3.6 (lp#1661766)</changelog>
  <changelog author="kukuk@suse.com" date="1489665600">- Cleanup spec file:
  - don't use insserv if we afterwards call systemd, this can
    have bad side effects
  - remove dead code
  - remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490443200">- add upstream-changes-r3629..3648.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - update nvidia abstraction for newer nvidia drivers
  - don't enforce ordering of dbus rule attributes in utils (lp#1628286)
  - add --parser, --base and --Include option to aa-easyprof to allow
    non-standard paths (useful for tests) (lp#1521031)
  - move initialization code in apparmor.aa to init_aa(). This allows to
    run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
    don't exist.
  - several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
  parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1499860800">- add JSON support. Required for FATE#323380.
  (apparmor-yast-cleanup.patch, apparmor-json-support.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1500033600">- don't rely on implementation details for reload in %post</changelog>
  <changelog author="jmatejek@suse.com" date="1502452800">- do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
</package>
<package pkgid="1160f48bca78ba4e3caa46b901a2dd578f81c1a83b91c87035a791709a8d04b9" name="apparmor-profiles" arch="noarch">
  <version epoch="0" ver="2.12" rel="lp150.6.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485604800">- split libapparmor into separate spec to get rid of build loop
  involving mariadb, systemd, apparmor, libapr and mariadb again
  (see the discussion in SR 448871 for details)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add upstream-changes-r3616..3628.diff:
  - update abstractions/base, abstractions/apache2-common and dovecot profiles
  - merge ask_the_questions() of aa-logprof and aa-mergeprof
  - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914)</changelog>
  <changelog author="jmatejek@suse.com" date="1487246400">- add python3-drop-re-locale.patch: remove deprecated re.LOCALE
  flag in Python UI as it was dropped from Python 3.6 (lp#1661766)</changelog>
  <changelog author="kukuk@suse.com" date="1489665600">- Cleanup spec file:
  - don't use insserv if we afterwards call systemd, this can
    have bad side effects
  - remove dead code
  - remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490443200">- add upstream-changes-r3629..3648.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - update nvidia abstraction for newer nvidia drivers
  - don't enforce ordering of dbus rule attributes in utils (lp#1628286)
  - add --parser, --base and --Include option to aa-easyprof to allow
    non-standard paths (useful for tests) (lp#1521031)
  - move initialization code in apparmor.aa to init_aa(). This allows to
    run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
    don't exist.
  - several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
  parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1499860800">- add JSON support. Required for FATE#323380.
  (apparmor-yast-cleanup.patch, apparmor-json-support.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1500033600">- don't rely on implementation details for reload in %post</changelog>
  <changelog author="jmatejek@suse.com" date="1502452800">- do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
</package>
<package pkgid="8cf2a78375a6ea9015e77e3dc2550515235927abbb1330ec8349117d11b859f4" name="apparmor-utils" arch="noarch">
  <version epoch="0" ver="2.12" rel="lp150.6.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485604800">- split libapparmor into separate spec to get rid of build loop
  involving mariadb, systemd, apparmor, libapr and mariadb again
  (see the discussion in SR 448871 for details)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add upstream-changes-r3616..3628.diff:
  - update abstractions/base, abstractions/apache2-common and dovecot profiles
  - merge ask_the_questions() of aa-logprof and aa-mergeprof
  - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914)</changelog>
  <changelog author="jmatejek@suse.com" date="1487246400">- add python3-drop-re-locale.patch: remove deprecated re.LOCALE
  flag in Python UI as it was dropped from Python 3.6 (lp#1661766)</changelog>
  <changelog author="kukuk@suse.com" date="1489665600">- Cleanup spec file:
  - don't use insserv if we afterwards call systemd, this can
    have bad side effects
  - remove dead code
  - remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490443200">- add upstream-changes-r3629..3648.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - update nvidia abstraction for newer nvidia drivers
  - don't enforce ordering of dbus rule attributes in utils (lp#1628286)
  - add --parser, --base and --Include option to aa-easyprof to allow
    non-standard paths (useful for tests) (lp#1521031)
  - move initialization code in apparmor.aa to init_aa(). This allows to
    run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
    don't exist.
  - several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
  parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1499860800">- add JSON support. Required for FATE#323380.
  (apparmor-yast-cleanup.patch, apparmor-json-support.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1500033600">- don't rely on implementation details for reload in %post</changelog>
  <changelog author="jmatejek@suse.com" date="1502452800">- do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
</package>
<package pkgid="af5cf2e0ac333f9fa237675230f17f1d2df4a41324955351f93e84d8ef76f2d9" name="apparmor-utils-lang" arch="noarch">
  <version epoch="0" ver="2.12" rel="lp150.6.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485604800">- split libapparmor into separate spec to get rid of build loop
  involving mariadb, systemd, apparmor, libapr and mariadb again
  (see the discussion in SR 448871 for details)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add upstream-changes-r3616..3628.diff:
  - update abstractions/base, abstractions/apache2-common and dovecot profiles
  - merge ask_the_questions() of aa-logprof and aa-mergeprof
  - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914)</changelog>
  <changelog author="jmatejek@suse.com" date="1487246400">- add python3-drop-re-locale.patch: remove deprecated re.LOCALE
  flag in Python UI as it was dropped from Python 3.6 (lp#1661766)</changelog>
  <changelog author="kukuk@suse.com" date="1489665600">- Cleanup spec file:
  - don't use insserv if we afterwards call systemd, this can
    have bad side effects
  - remove dead code
  - remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490443200">- add upstream-changes-r3629..3648.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - update nvidia abstraction for newer nvidia drivers
  - don't enforce ordering of dbus rule attributes in utils (lp#1628286)
  - add --parser, --base and --Include option to aa-easyprof to allow
    non-standard paths (useful for tests) (lp#1521031)
  - move initialization code in apparmor.aa to init_aa(). This allows to
    run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
    don't exist.
  - several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
  parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1499860800">- add JSON support. Required for FATE#323380.
  (apparmor-yast-cleanup.patch, apparmor-json-support.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1500033600">- don't rely on implementation details for reload in %post</changelog>
  <changelog author="jmatejek@suse.com" date="1502452800">- do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
</package>
<package pkgid="99adccb9b9eccf3e31eded8c11298a4711f93dc41edc36d69e1b5444d793720c" name="apr-util" arch="src">
  <version epoch="0" ver="1.6.1" rel="lp150.3.3.1"/>
  <changelog author="poeml@cmdline.net" date="1329566400">- updated to 1.4.1
- fixed crash in memtest testcase. Patch sent upstreams
  https://issues.apache.org/bugzilla/show_bug.cgi?id=52705
  apr-util-1.4.1-testmemcache-initialize-values-array.patch
- removed obsolete libapr-util1-1.3.12-gcc46.patch
- Changes with 1.4.1:
  * ) Apply Windows build fixes for the apr_crypto API.
  Changes with 1.4.0:
  * ) apr_ldap_init: Pass secure=1 to ldapssl_init() with Solaris LDAP SDK.  PR: 42682
  * ) apr_memcache_server_create: Fix possible segfault. PR 51064.
  * ) apr_thread_pool: Fix thread unsafe pool usage.
  * ) Do not include apr.h and apr_errno.h from system search path in
    apu_errno.h. PR 46487
  * ) Add optional dbm, openssl and nss subpackages to the RPM spec file.
  * ) apr_dbd_freetds: The sybdb.h header file might be freetds/sybdb.h
    or sybdb.h.
  * ) Add apr_crypto implementations for OpenSSL and Mozilla NSS. Add a unit
    test to verify the interoperability of the two modules. Builds default
    to disabled unless explicitly enabled.
  * ) Add the apr_crypto interface, a rewrite of the earlier apr_ssl code,
    based on the modular dso interface used for dbd and ldap. Initially,
    the interface supports symmetrical encryption and decryption. The
    purpose of the interface is to offer portable and interoperable
    access to basic crypto using the native crypto libraries present on
    each platform.
  * ) Add trace probes to hooks, making it easier to inspect APR Hook based
    applications with DTrace or other such mechanisms.
  * ) Implement resource list when threads are unavailable. PR 24325
  Changes with 1.3.13:
  * ) Fix a failure of configure to detect ldap_set_rebind_proc(),
    encountered on Fedora 15 with gcc 4.6.
  * ) apr_thread_pool: Fix thread unsafe pool usage.
  * ) Improve platform detection for bundled expat by updating
    config.guess and config.sub.
  * ) Sync libtool handling of bundled expat from APR.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1343822400">- Apache 2.4.x complains "Your APR does not include SSL/EVP support."
  Indeed, that's the case, fix it.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1345204800">- Needs libuud-devel now</changelog>
  <changelog author="mls@suse.de" date="1373976000">- get rid of --parents in doc section</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to apr-util 1.5.2
  * apr_uri_parse(): Do not accept invalid characters in the scheme.
  * Fix memory leak in hook sorting function.
  * Fix password validation failure for all crypt and crypt_r based
  * Fix potential data corruption in apr_brigade_write()
  * Fixes for ap_crypto,memcache etc.. see
  https://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.5</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1377691200">- Use compiler symbol visibility
- libapr1 does not have symbol *versioning* so requires_ge it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1385035200">- version 1.5.3
  * Add support to apr_memcache for unix domain sockets.
  * Add support for Berkeley DB 6.0.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1410955200">- version 1.5.4
  * MySQL driver: Fix incorrect handling of bad parameter.
  * apr_crypto_get_driver(): Fix invalid storage reference on error path.
- docs: Tell doxygen not to store timestamps in files.</changelog>
  <changelog author="tchvatal@suse.com" date="1413460800">- Clean up with spec-cleaner
- Kill support of sle10 and sle9
- Remove unused configure switches</changelog>
  <changelog author="coolo@suse.com" date="1413633600">- fix requires after spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1444737600">- require postgresql-devel version at least 9.1.0 to fix build for
  SLE-11-SP4</changelog>
  <changelog author="pgajdos@suse.com" date="1454587200">- require postgresql-devel less then 9.4 to fix build on SLE_12
  and SLE_12_SP1</changelog>
  <changelog author="pgajdos@suse.com" date="1460030400">- require just posgresql-devel everywhere, it seems to work now</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1497873600">- APR-util 1.6.0
  * Update MySQL build to stop using libmysqlclient_r
  * apr_siphash: Implement keyed hash function SipHash
  * apr_buckets: Add apr_bucket_file_set_buf_size()
  * apr_crypto: avoid excessive iteration in bcrypt hash.
  * apr_xml_to_text: Add style APR_XML_X2T_PARSED.
  * see http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.6 for
  extra details</changelog>
  <changelog author="mpluskal@suse.com" date="1499860800">- Rename package to apr-util
- Drop baselib.conf as it does not target any supported
  architecture</changelog>
  <changelog author="jengelh@inai.de" date="1500292800">- Replace unusual *.?a match by *.la.
- Fix RPM groups, diversify summaries.</changelog>
  <changelog author="mpluskal@suse.com" date="1508241600">- We need to obsolete same version of package (bsc#1063305)</changelog>
  <changelog author="kstreitova@suse.com" date="1510056000">- APR-util 1.6.1
  * apr_crypto: Fix compatibility with LibreSSL. PR 61596.
  * sdbm: better database/page validation to fail cleanly when
    corrupted [bsc#1064990], CVE-2017-12618</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Add apr-util-mariadb-10.2.patch: Fix detection / build with
  MariaDB 10.2.</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- extend apr-util-mariadb-10.2.patch: Fix detection / build with
  MariaDB 10.2. [bsc#1094754]</changelog>
</package>
<package pkgid="efb817ed235f04a2eaf52d77567bf1708f6e22f4f040c8d8fe2b993c4f321d33" name="apr-util-devel" arch="x86_64">
  <version epoch="0" ver="1.6.1" rel="lp150.3.3.1"/>
  <changelog author="poeml@cmdline.net" date="1329566400">- updated to 1.4.1
- fixed crash in memtest testcase. Patch sent upstreams
  https://issues.apache.org/bugzilla/show_bug.cgi?id=52705
  apr-util-1.4.1-testmemcache-initialize-values-array.patch
- removed obsolete libapr-util1-1.3.12-gcc46.patch
- Changes with 1.4.1:
  * ) Apply Windows build fixes for the apr_crypto API.
  Changes with 1.4.0:
  * ) apr_ldap_init: Pass secure=1 to ldapssl_init() with Solaris LDAP SDK.  PR: 42682
  * ) apr_memcache_server_create: Fix possible segfault. PR 51064.
  * ) apr_thread_pool: Fix thread unsafe pool usage.
  * ) Do not include apr.h and apr_errno.h from system search path in
    apu_errno.h. PR 46487
  * ) Add optional dbm, openssl and nss subpackages to the RPM spec file.
  * ) apr_dbd_freetds: The sybdb.h header file might be freetds/sybdb.h
    or sybdb.h.
  * ) Add apr_crypto implementations for OpenSSL and Mozilla NSS. Add a unit
    test to verify the interoperability of the two modules. Builds default
    to disabled unless explicitly enabled.
  * ) Add the apr_crypto interface, a rewrite of the earlier apr_ssl code,
    based on the modular dso interface used for dbd and ldap. Initially,
    the interface supports symmetrical encryption and decryption. The
    purpose of the interface is to offer portable and interoperable
    access to basic crypto using the native crypto libraries present on
    each platform.
  * ) Add trace probes to hooks, making it easier to inspect APR Hook based
    applications with DTrace or other such mechanisms.
  * ) Implement resource list when threads are unavailable. PR 24325
  Changes with 1.3.13:
  * ) Fix a failure of configure to detect ldap_set_rebind_proc(),
    encountered on Fedora 15 with gcc 4.6.
  * ) apr_thread_pool: Fix thread unsafe pool usage.
  * ) Improve platform detection for bundled expat by updating
    config.guess and config.sub.
  * ) Sync libtool handling of bundled expat from APR.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1343822400">- Apache 2.4.x complains "Your APR does not include SSL/EVP support."
  Indeed, that's the case, fix it.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1345204800">- Needs libuud-devel now</changelog>
  <changelog author="mls@suse.de" date="1373976000">- get rid of --parents in doc section</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to apr-util 1.5.2
  * apr_uri_parse(): Do not accept invalid characters in the scheme.
  * Fix memory leak in hook sorting function.
  * Fix password validation failure for all crypt and crypt_r based
  * Fix potential data corruption in apr_brigade_write()
  * Fixes for ap_crypto,memcache etc.. see
  https://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.5</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1377691200">- Use compiler symbol visibility
- libapr1 does not have symbol *versioning* so requires_ge it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1385035200">- version 1.5.3
  * Add support to apr_memcache for unix domain sockets.
  * Add support for Berkeley DB 6.0.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1410955200">- version 1.5.4
  * MySQL driver: Fix incorrect handling of bad parameter.
  * apr_crypto_get_driver(): Fix invalid storage reference on error path.
- docs: Tell doxygen not to store timestamps in files.</changelog>
  <changelog author="tchvatal@suse.com" date="1413460800">- Clean up with spec-cleaner
- Kill support of sle10 and sle9
- Remove unused configure switches</changelog>
  <changelog author="coolo@suse.com" date="1413633600">- fix requires after spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1444737600">- require postgresql-devel version at least 9.1.0 to fix build for
  SLE-11-SP4</changelog>
  <changelog author="pgajdos@suse.com" date="1454587200">- require postgresql-devel less then 9.4 to fix build on SLE_12
  and SLE_12_SP1</changelog>
  <changelog author="pgajdos@suse.com" date="1460030400">- require just posgresql-devel everywhere, it seems to work now</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1497873600">- APR-util 1.6.0
  * Update MySQL build to stop using libmysqlclient_r
  * apr_siphash: Implement keyed hash function SipHash
  * apr_buckets: Add apr_bucket_file_set_buf_size()
  * apr_crypto: avoid excessive iteration in bcrypt hash.
  * apr_xml_to_text: Add style APR_XML_X2T_PARSED.
  * see http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.6 for
  extra details</changelog>
  <changelog author="mpluskal@suse.com" date="1499860800">- Rename package to apr-util
- Drop baselib.conf as it does not target any supported
  architecture</changelog>
  <changelog author="jengelh@inai.de" date="1500292800">- Replace unusual *.?a match by *.la.
- Fix RPM groups, diversify summaries.</changelog>
  <changelog author="mpluskal@suse.com" date="1508241600">- We need to obsolete same version of package (bsc#1063305)</changelog>
  <changelog author="kstreitova@suse.com" date="1510056000">- APR-util 1.6.1
  * apr_crypto: Fix compatibility with LibreSSL. PR 61596.
  * sdbm: better database/page validation to fail cleanly when
    corrupted [bsc#1064990], CVE-2017-12618</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Add apr-util-mariadb-10.2.patch: Fix detection / build with
  MariaDB 10.2.</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- extend apr-util-mariadb-10.2.patch: Fix detection / build with
  MariaDB 10.2. [bsc#1094754]</changelog>
</package>
<package pkgid="62ab55c68dbf49618e07ffa94e26ba0524cabd4569182e22f028d50a9acbc63b" name="aubio" arch="src">
  <version epoch="0" ver="0.4.6" rel="lp150.3.3.1"/>
  <changelog author="tiwai@suse.de" date="1216209600">- initial version: 0.3.2</changelog>
  <changelog author="ro@suse.de" date="1217592000">- fix requires for debuginfo package</changelog>
  <changelog author="mrueckert@suse.de" date="1224676800">- fix debug_packages_requires define</changelog>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
</package>
<package pkgid="a7f6f3392e3432f8772d543b9acd379d979f00895c75be4223a0b88bfef0b5b3" name="aubio" arch="src">
  <version epoch="0" ver="0.4.6" rel="lp150.3.6.1"/>
  <changelog author="tiwai@suse.de" date="1216209600">- initial version: 0.3.2</changelog>
  <changelog author="ro@suse.de" date="1217592000">- fix requires for debuginfo package</changelog>
  <changelog author="mrueckert@suse.de" date="1224676800">- fix debug_packages_requires define</changelog>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
</package>
<package pkgid="b8aea381966e5d096fa492c7d86a2ad95b2b31b706adb878961e282fbc1a1910" name="aubio-tools" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp150.3.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
</package>
<package pkgid="2fb43b577e041d7a24c15a0f961fac31d59f9c4bbf5b10f8c2de631ea15bdf24" name="aubio-tools" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp150.3.6.1"/>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
</package>
<package pkgid="2a85898a874c8a825ff03750dcbe5a8e32d22d00b96ca31494298624da13420d" name="audiofile" arch="src">
  <version epoch="0" ver="0.3.6" rel="lp150.2.3.1"/>
  <changelog author="mboman@suse.de" date="1235304000">- Don't use -fno-strict-aliasing for build. Not needed
- Remove CFLAGS, CXXFLAGS and FFLAGS since it only contains
  $RPM_OPT_FLAGS which is default</changelog>
  <changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
  <changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
  <changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
  <changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
  <changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
  <changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
  <changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
  <changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
  <changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>
  <changelog author="rguenther@suse.com" date="1454068800">- Add audiofile-gcc6.patch to fix compile errors with GCC 6.</changelog>
  <changelog author="alarrosa@suse.com" date="1489060800">- Add 0001-Always-check-the-number-of-coefficients.patch to put in code
  an assert that was removed when building the code for a release
  which checks the number of coeficients in WAVE.cpp .
- Add 0002-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch
  to check for a multiplication overflow in MSADPCM.cpp .
- Add 0003-Check-for-multiplication-overflow-in-sfconvert.patch to
  check that a multiplication doesn't overflow when calculating a
  buffer size and reduce it if necessary.
- Add 0004-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch
  to clamp index values to fix an index overflow in IMA.cpp .
- Add 0005-Actually-fail-when-error-occurs-in-parseFormat.patch
  so when there's an unsupported number of bits per sample or an invalid
  number of samples per block, don't only print an error message using
  the error handler, but actually stop parsing the file.
- Add 0006-Check-for-division-by-zero-in-BlockCodec-runPull.patch to
  check for division by zero in BlockCodec::runPull
- These patches fix boo#1026978 (CVE-2017-6837, CVE-2017-6838,
  CVE-2017-6839), boo#1026979 (CVE-2017-6827),
  boo#1026980 (CVE-2017-6828), boo#1026981 (CVE-2017-6829),
  boo#1026982 (CVE-2017-6830), boo#1026983 (CVE-2017-6831),
  boo#1026984 (CVE-2017-6832), boo#1026985 (CVE-2017-6833),
  boo#1026986 (CVE-2017-6834), boo#1026987 (CVE-2017-6836),
  boo#1026988 (CVE-2017-6835).</changelog>
  <changelog author="qzheng@suse.com" date="1539864000">- Add 0007-set-the-output-chunk-to-the-amount-of-frames.patch to
  set the output chunk to the amount of frames we pulled so that
  the next module in the chain has the correct frame count (
  boo#1111586, CVE-2018-17095 ).</changelog>
</package>
<package pkgid="1abdc2aedb2c709f338b011015338c2aa1bd49ac791a9d42725bd99f31494c6f" name="audiofile" arch="x86_64">
  <version epoch="0" ver="0.3.6" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
  <changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
  <changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
  <changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
  <changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
  <changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
  <changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
  <changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
  <changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>
  <changelog author="rguenther@suse.com" date="1454068800">- Add audiofile-gcc6.patch to fix compile errors with GCC 6.</changelog>
  <changelog author="alarrosa@suse.com" date="1489060800">- Add 0001-Always-check-the-number-of-coefficients.patch to put in code
  an assert that was removed when building the code for a release
  which checks the number of coeficients in WAVE.cpp .
- Add 0002-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch
  to check for a multiplication overflow in MSADPCM.cpp .
- Add 0003-Check-for-multiplication-overflow-in-sfconvert.patch to
  check that a multiplication doesn't overflow when calculating a
  buffer size and reduce it if necessary.
- Add 0004-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch
  to clamp index values to fix an index overflow in IMA.cpp .
- Add 0005-Actually-fail-when-error-occurs-in-parseFormat.patch
  so when there's an unsupported number of bits per sample or an invalid
  number of samples per block, don't only print an error message using
  the error handler, but actually stop parsing the file.
- Add 0006-Check-for-division-by-zero-in-BlockCodec-runPull.patch to
  check for division by zero in BlockCodec::runPull
- These patches fix boo#1026978 (CVE-2017-6837, CVE-2017-6838,
  CVE-2017-6839), boo#1026979 (CVE-2017-6827),
  boo#1026980 (CVE-2017-6828), boo#1026981 (CVE-2017-6829),
  boo#1026982 (CVE-2017-6830), boo#1026983 (CVE-2017-6831),
  boo#1026984 (CVE-2017-6832), boo#1026985 (CVE-2017-6833),
  boo#1026986 (CVE-2017-6834), boo#1026987 (CVE-2017-6836),
  boo#1026988 (CVE-2017-6835).</changelog>
  <changelog author="qzheng@suse.com" date="1539864000">- Add 0007-set-the-output-chunk-to-the-amount-of-frames.patch to
  set the output chunk to the amount of frames we pulled so that
  the next module in the chain has the correct frame count (
  boo#1111586, CVE-2018-17095 ).</changelog>
</package>
<package pkgid="e493891db185da82dab322286475388aeb5897f1d8807d1d0ba83dde1d48a5d6" name="audiofile-devel" arch="x86_64">
  <version epoch="0" ver="0.3.6" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
  <changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
  <changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
  <changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
  <changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
  <changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
  <changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
  <changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
  <changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>
  <changelog author="rguenther@suse.com" date="1454068800">- Add audiofile-gcc6.patch to fix compile errors with GCC 6.</changelog>
  <changelog author="alarrosa@suse.com" date="1489060800">- Add 0001-Always-check-the-number-of-coefficients.patch to put in code
  an assert that was removed when building the code for a release
  which checks the number of coeficients in WAVE.cpp .
- Add 0002-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch
  to check for a multiplication overflow in MSADPCM.cpp .
- Add 0003-Check-for-multiplication-overflow-in-sfconvert.patch to
  check that a multiplication doesn't overflow when calculating a
  buffer size and reduce it if necessary.
- Add 0004-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch
  to clamp index values to fix an index overflow in IMA.cpp .
- Add 0005-Actually-fail-when-error-occurs-in-parseFormat.patch
  so when there's an unsupported number of bits per sample or an invalid
  number of samples per block, don't only print an error message using
  the error handler, but actually stop parsing the file.
- Add 0006-Check-for-division-by-zero-in-BlockCodec-runPull.patch to
  check for division by zero in BlockCodec::runPull
- These patches fix boo#1026978 (CVE-2017-6837, CVE-2017-6838,
  CVE-2017-6839), boo#1026979 (CVE-2017-6827),
  boo#1026980 (CVE-2017-6828), boo#1026981 (CVE-2017-6829),
  boo#1026982 (CVE-2017-6830), boo#1026983 (CVE-2017-6831),
  boo#1026984 (CVE-2017-6832), boo#1026985 (CVE-2017-6833),
  boo#1026986 (CVE-2017-6834), boo#1026987 (CVE-2017-6836),
  boo#1026988 (CVE-2017-6835).</changelog>
  <changelog author="qzheng@suse.com" date="1539864000">- Add 0007-set-the-output-chunk-to-the-amount-of-frames.patch to
  set the output chunk to the amount of frames we pulled so that
  the next module in the chain has the correct frame count (
  boo#1111586, CVE-2018-17095 ).</changelog>
</package>
<package pkgid="254b217558717ab82966e5841b83d02f28a4d094866044022befefa52f93a66f" name="audiofile-devel-32bit" arch="x86_64">
  <version epoch="0" ver="0.3.6" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
  <changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
  <changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
  <changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
  <changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
  <changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
  <changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
  <changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
  <changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>
  <changelog author="rguenther@suse.com" date="1454068800">- Add audiofile-gcc6.patch to fix compile errors with GCC 6.</changelog>
  <changelog author="alarrosa@suse.com" date="1489060800">- Add 0001-Always-check-the-number-of-coefficients.patch to put in code
  an assert that was removed when building the code for a release
  which checks the number of coeficients in WAVE.cpp .
- Add 0002-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch
  to check for a multiplication overflow in MSADPCM.cpp .
- Add 0003-Check-for-multiplication-overflow-in-sfconvert.patch to
  check that a multiplication doesn't overflow when calculating a
  buffer size and reduce it if necessary.
- Add 0004-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch
  to clamp index values to fix an index overflow in IMA.cpp .
- Add 0005-Actually-fail-when-error-occurs-in-parseFormat.patch
  so when there's an unsupported number of bits per sample or an invalid
  number of samples per block, don't only print an error message using
  the error handler, but actually stop parsing the file.
- Add 0006-Check-for-division-by-zero-in-BlockCodec-runPull.patch to
  check for division by zero in BlockCodec::runPull
- These patches fix boo#1026978 (CVE-2017-6837, CVE-2017-6838,
  CVE-2017-6839), boo#1026979 (CVE-2017-6827),
  boo#1026980 (CVE-2017-6828), boo#1026981 (CVE-2017-6829),
  boo#1026982 (CVE-2017-6830), boo#1026983 (CVE-2017-6831),
  boo#1026984 (CVE-2017-6832), boo#1026985 (CVE-2017-6833),
  boo#1026986 (CVE-2017-6834), boo#1026987 (CVE-2017-6836),
  boo#1026988 (CVE-2017-6835).</changelog>
  <changelog author="qzheng@suse.com" date="1539864000">- Add 0007-set-the-output-chunk-to-the-amount-of-frames.patch to
  set the output chunk to the amount of frames we pulled so that
  the next module in the chain has the correct frame count (
  boo#1111586, CVE-2018-17095 ).</changelog>
</package>
<package pkgid="8b61c320009159d4c184240ca8e333a5a0155b7ca6df350d43eaf90ca9d780dc" name="audiofile-doc" arch="x86_64">
  <version epoch="0" ver="0.3.6" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
  <changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
  <changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
  <changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
  <changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
  <changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
  <changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
  <changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
  <changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>
  <changelog author="rguenther@suse.com" date="1454068800">- Add audiofile-gcc6.patch to fix compile errors with GCC 6.</changelog>
  <changelog author="alarrosa@suse.com" date="1489060800">- Add 0001-Always-check-the-number-of-coefficients.patch to put in code
  an assert that was removed when building the code for a release
  which checks the number of coeficients in WAVE.cpp .
- Add 0002-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch
  to check for a multiplication overflow in MSADPCM.cpp .
- Add 0003-Check-for-multiplication-overflow-in-sfconvert.patch to
  check that a multiplication doesn't overflow when calculating a
  buffer size and reduce it if necessary.
- Add 0004-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch
  to clamp index values to fix an index overflow in IMA.cpp .
- Add 0005-Actually-fail-when-error-occurs-in-parseFormat.patch
  so when there's an unsupported number of bits per sample or an invalid
  number of samples per block, don't only print an error message using
  the error handler, but actually stop parsing the file.
- Add 0006-Check-for-division-by-zero-in-BlockCodec-runPull.patch to
  check for division by zero in BlockCodec::runPull
- These patches fix boo#1026978 (CVE-2017-6837, CVE-2017-6838,
  CVE-2017-6839), boo#1026979 (CVE-2017-6827),
  boo#1026980 (CVE-2017-6828), boo#1026981 (CVE-2017-6829),
  boo#1026982 (CVE-2017-6830), boo#1026983 (CVE-2017-6831),
  boo#1026984 (CVE-2017-6832), boo#1026985 (CVE-2017-6833),
  boo#1026986 (CVE-2017-6834), boo#1026987 (CVE-2017-6836),
  boo#1026988 (CVE-2017-6835).</changelog>
  <changelog author="qzheng@suse.com" date="1539864000">- Add 0007-set-the-output-chunk-to-the-amount-of-frames.patch to
  set the output chunk to the amount of frames we pulled so that
  the next module in the chain has the correct frame count (
  boo#1111586, CVE-2018-17095 ).</changelog>
</package>
<package pkgid="1d75bbf5af2953089862d57b7e82ca857b0a23508286b3f9b6ea53ace6020991" name="autofs" arch="src">
  <version epoch="0" ver="5.1.3" rel="lp150.6.3.1"/>
  <changelog author="lchiquitto@suse.com" date="1422964800">- Fix autofs.service so that multiple options passed through
  sysconfig AUTOFS_OPTIONS work correctly (bsc#909472)</changelog>
  <changelog author="mszeredi@suse.cz" date="1424174400">- add autofs-5.1.0-dont-pass-sloppy-option-for-other-than-nfs-mounts.patch
  (bsc#911720)</changelog>
  <changelog author="mszeredi@suse.cz" date="1425384000">- prevent potential privilege escalation via interpreter load path
  for program-based automount maps, add the following patches:
  autofs-5.1.0-add-a-prefix-to-program-map-stdvars.patch
  autofs-5.1.0-add-config-option-to-force-use-of-program-map-stdvars.patch
  (bnc#917977 CVE-2014-8169)</changelog>
  <changelog author="dmueller@suse.com" date="1430913600">- add autofs-5.1.0-gcc5-fixes.patch: Fix build against gcc 5.x</changelog>
  <changelog author="lchiquitto@suse.com" date="1431864000">- update to version 5.1.1:
  * fix compile error in defaults.c
  * add serialization to sasl init
  * dont allocate dev_ctl_ops too early
  * fix incorrect round robin host detection
  * fix race accessing qdn in get_query_dn()
  * fix leak in cache_push_mapent()
  * fix config entry read buffer not checked
  * fix FILE pointer check in defaults_read_config()
  * fix memory leak in conf_amd_get_log_options()
  * fix signed comparison in inet_fill_net()
  * fix buffer size checks in get_network_proximity()
  * fix leak in get_network_proximity()
  * fix buffer size checks in merge_options()
  * check amd lex buffer len before copy
  * add return check in ldap check_map_indirect()
  * check host macro is set before use
  * check options length before use in parse_amd.c
  * fix some out of order evaluations in parse_amd.c
  * fix copy and paste error in dup_defaults_entry()
  * fix leak in parse_mount()
  * add mutex call return check in defaults.c
  * force disable browse mode for amd format maps
  * fix hosts map options check in lookup_amd_instance()
  * fix memory leak in create_client()
  * fix memory leak in get_exports()
  * fix memory leak in get_defaults_entry()
  * fix out of order clearing of options buffer
  * fix reset amd lexer scan buffer
  * ignore multiple commas in options strings
  * fix typo in flagdir configure option
  * clarify multiple mounts description
  * gaurd against incorrect umount return
  * update man page autofs(8) for systemd
  * dont pass sloppy option for other than nfs mounts
  * make service want network-online
  * fix fix master map type check
  * init qdn before use in get_query_dn()
  * fix typo in update_hosts_mounts()
  * fix hosts map update on reload
  * make negative cache update consistent for all lookup modules
  * ensure negative cache isn't updated on remount
  * dont add wildcard to negative cache
  * add a prefix to program map stdvars
  * add config option to force use of program map stdvars
  * fix incorrect check in parse_mount()
  * handle duplicates in multi mounts
  * revert special case cifs escapes
  * fix map option parsing for 'strictatime'
  * fix showmount search in auto.net
  * remove obsolete comment in auto.net
  * fix macro usage in lookup_program.c
  * fix gcc5 complaints
  * remove unused offset handling code
  * fix mount as you go offset selection
  * link daemon with pthread library (Debian patch)
  * manpage corrections (Debian patch)
  * fix manpages hyphenation (Debian patch).
- ported patches:
  * autofs-5.1.0-dbus-udisks-monitor.patch -&gt;
    autofs-5.1.1-dbus-udisks-monitor.patch
  * autofs-debuginfo-fix.patch -&gt; autofs-5.1.1-debuginfo-fix.patch
  * autofs-5.0.9-suse-auto_master_default.patch -&gt;
    autofs-5.1.1-suse-auto_master_default.patch
  * autofs-5.0.9-task-use-after-free.patch -&gt;
    autofs-5.1.1-task-use-after-free.patch
- remove patches that are now upstream:
  * autofs-5.1.0-dont-pass-sloppy-option-for-other-than-nfs-mounts.patch
  * autofs-5.1.0-add-a-prefix-to-program-map-stdvars.patch
  * autofs-5.1.0-add-config-option-to-force-use-of-program-map-stdvars.patch
  * autofs-5.1.0-gcc5-fixes.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233600">- autofs.service: Use KillMode=mixed so "KillSignal" (SIGTERM) is
  only sent to the main process and if still does not exit after
  "TimeoutStopSec" then "SendSIGKILL" is sent to all remaining
  processes of the unit's control group.
  This is the desired behaviour for almost all daemons that
  execute foreign programs.</changelog>
  <changelog author="ro@suse.de" date="1449576000">- add patch autofs-5.1.1-leave_auth_destroy.patch (bnc#958410)
  do not redefined auth_destroy, the reason for this has long
  been fixed in libtirpc (version 0.2.1 is already fine)</changelog>
  <changelog author="jeffm@suse.com" date="1458820800">- improve scalability of direct mount path component creation (bsc#966573).
  * Added autofs-improve-scalability-of-direct-mount-path-comp.patch
  * Refreshed autofs-5.1.1-dbus-udisks-monitor.patch
- Use libldap_r instead of libldap for thread safety (bsc#955477).
  * Added autofs-use-libldap_r-instead-of-libldap-for-thread-safety.patch</changelog>
  <changelog author="jeffm@suse.com" date="1470830400">- Fix spurious ELOOP on certain kinds of failures (bsc#968918):
  * autofs: fix yp map age not updated in s/_/./g case
  * autofs: properly handle errors in lookup_nss_mount
  * Added patches:
    autofs-5.1.1-properly-handle-errors-in-lookup_nss_mount.patch
    autofs-5.1.1-fix-yp-map-age-not-updated-during-map-lookup.patch</changelog>
  <changelog author="astieger@suse.com" date="1491480000">- remove rpmlintrc, review was boo#782691</changelog>
  <changelog author="jeffm@suse.com" date="1502280000">- update to version 5.1.3:
  * limit getgrgid_r() buffer size
  * increase worker thread per-thread stack size
  * fix offset mount location multiple expansion
  * use malloc for expanded map location
  * fix invalid reference in remount_active_mount()
  * fix work around sss startup delay
  * fix possible NULL derefernce
  * use autofs_point to store expire timeout where possibe
  * add config option to use mount request log id
  * factor out set_thread_mount_request_log_id()
  * log functions to prefix messages with attempt_id if available
  * create thread-local ID for mount attempts
  * add the mount requestor's pid to pending_args
  * delay submount exit for amd submounts
  * fix bogus check in expire_cleanup()
  * handle amd cache option all in amd type auto mounts
  * handle map_option cache for top level mounts
  * capture cache option and its settings during parsing
  * add function conf_amd_get_map_options()
  * check for conflicting amd section mounts
  * include amd mount section mounts in master mounts list
  * add function conf_amd_get_mount_paths()
  * add function conf_amd_get_map_name()
  * add support for amd browsable option
  * add ref counting to struct map_source
  * fix typos in README.amd-maps
  * honor last rw in mount options when doing a bind mount
  * set autofs mounts catatonic at exit
  * make set_direct_mount_catatonic() more general
  * check NFS server availability on local mount fallback
  * make lookup_nss_read_master() return nss status
  * don't return until after master map retry read
  * set sane default master read wait timeout
  * dont exit on master map read fail timeout
  * fix included master map not found return
  * fix quoted key handling in sanitize_path()
  * add sss master map wait config option
  * work around sss startup delay
  * add master read wait option
  * wait for master map available at start
  * update and add README for old autofs schema
  * fix create_client() RPC client handling
  * fix _strncmp() usage
  * fix argc off by one in mount_autofs.c
  * fix cachefs parse message not being logged
  * fix typo in MOUNT_FLAG_GHOST comment
  * Avoid local variable name shadowing another
  * configure: add cache variable for Linux proc filesystem check
  * fix count_mounts() function
  * fix short memory allocation in lookup_amd_instance()
  * Fix fgets(3) size argument (another one)
  * Fix typos in error messages
  * Remove unused local 2KB buffer
  * fix file map changed check
  * Change .requestor to .requester for consistency
  * Fix a typo in CREDITS
  * fix libtirpc detection with -Wl,--as-needed
  * Fix size arg of fgets(3)
  * Drop redundant \n in logerr()
  * Fix compiler warning in try_remount()
  * build: check for clock_gettime in librt
  * fix possible memory leak in nfs mount
  * add config option to suppress not found log message
  * properly handle errors in lookup_nss_mount
  * fix yp map age not updated during map lookup
  * fix 'nameing' typo in autofs.conf
  * add remote-fs.target systemd dependency
  * add autofs(5) note of IPv6 libtirpc requirement
  * fix autofs(5) description of supported map sources
  * fix modules make clean target
  * fix Makefile linking dependencies
  * fix handle_mounts() termination condition check
  * log pipe read errors
  * fix use-after-free in st_queue_handler()
  * always set direct mounts catatonic at exit
  * improve scalability of direct mount path component
  * fix use after free in match_my_name()
  * fix memory leak in get_network_proximity()
  * fix typo in autofs_sasl_bind()
  * fix use after free in open_lookup()
  * fix use after free in sun parser parse_init()
  * fix memory leak in ldap do_init()
  * fix memory leak in nisplus lookup_reinit()
  * fix sasl connection concurrancy problem
  * fix unbind sasl external mech
  * remove unused function elapsed()
  * change time() to use monotonic_clock()
  * change remaining gettimeofday() to use clock_gettime()
  * use monotonic clock for indirect mount condition
  * use monotonic clock for direct mount condition
  * define pending condition init helper function
  * use monotonic clock for alarm thread condition wait
  * define monotonic clock helper functions
  * Add a mode option for master map entries
  * fix error handling of is_mounted()
  * fix out of order call in program map lookup
  * add configuration option to use fqdn in mounts
  * update map_hash_table_size description
  * change lookup to use reinit instead of reopen
  * implement reinit in multi lookup module
  * fix map format check in nss_open_lookup() multi map module
  * factor out alloc multi map context
  * factor out free multi map context
  * add type to struct lookup_mod
  * implement reinit in yp lookup module
  * implement reinit in sss lookup module
  * implement reinit in program lookup module
  * implement reinit in nisplus lookup module
  * implement reinit in ldap lookup module
  * implement reinit in hosts lookup module
  * implement reinit in hesiod lookup module
  * implement reinit in file lookup module
  * implement reinit in dir lookup module
  * implement reinit in parse modules
  * add reinit entry point to modules
  * fix nsswitch handling when opening multi map
  * make open_lookup() return nss status
  * move check_nss_result() to nsswitchr.c
  * fix update_hosts_mounts() return
  * fix missing source sss in multi map lookup
  * fix direct map expire not set for initial empty map
  * fix direct mount stale instance flag reset
  * fix error handling on ldap bind fail
  * fix config old name lookup
  * fix rwlock unlock crash
  * fix return handling of do_reconnect() in ldap module
  * make find_server() return a status
  * make find_dc_server() return a status
  * make connect_to_server() return a status
  * make do_connect() return a status
  * move query dn calculation from do_bind() to do_connect()
  * fix return handling in sss lookup module
  * fix left mount count return from umount_multi_triggers()
  * revert fix libtirpc name clash
  * update libtirpc workaround for new soname
  * fix fix gcc5 complaints
  * Removed patches:
    autofs-5.1.1-task-use-after-free.patch
    autofs-improve-scalability-of-direct-mount-path-comp.patch
    autofs-5.1.1-properly-handle-errors-in-lookup_nss_mount.patch
    autofs-5.1.1-fix-yp-map-age-not-updated-during-map-lookup.patch
    autofs-5.1.1-leave_auth_destroy.patch
  * Updated patches for context:
    autofs-5.1.1-dbus-udisks-monitor.patch</changelog>
  <changelog author="jeffm@suse.com" date="1502280001">- Update URL to use www.kernel.org now that ftp is gone.</changelog>
  <changelog author="jeffm@suse.com" date="1502798400">- Add gpg signature</changelog>
  <changelog author="kukuk@suse.de" date="1502798401">- Add libnsl-devel as build require in preparation of libnsl
  removal from glibc</changelog>
  <changelog author="jeffm@suse.com" date="1508328000">- fix ordering of seteuid/setegid in do_spawn (bsc#1062482).
- fix unset tsd group name handling (bsc#1062482).
- fix possible map instance memory leak (bsc#1038198).
- check map instances for staleness on map update (bsc#1038198).
- Added patches:
  - autofs-5-1-3-check-map-instances-for-staleness-on-map-update.patch
  - autofs-5-1-3-fix-ordering-of-seteuid-setegid-in-do_spawn.patch
  - autofs-5-1-3-fix-possible-map-instance-memory-leak.patch
  - autofs-5-1-3-fix-unset-tsd-group-name-handling.patch</changelog>
  <changelog author="kukuk@suse.de" date="1510488000">- Add build require for rpcgen (preparation for removing it from
  glibc)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="nfbrown@suse.com" date="1517745600">- 0001-use_hostname_for_mounts-shouldn-t-prevent-selection-.patch
  Fix handling of replicated NFS server so that
  selection between servers still works sensibly when
  use_hostname_for_mounts is in effect.
  (bsc#1066720)
- 0002-Fix-monotonic_elapsed.patch
  Fix bug introduced with monotonic-time patches which
  causes nanoseconds to be ignored and effectively
  disables sorting based on response time and/or weight.
  (bsc#1066720)</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- BuildRequire pkgconfig(udisks2) instead of udisks2-devel: let's
  be flexible on possible package name changes.
- Package COPYRIGHT as %license instead of %doc.</changelog>
  <changelog author="nfbrown@suse.com" date="1526472000">- 0003-autofs-5.1.4-fix-fd-leak-in-rpc_do_create_client.patch
  Fix filedescriptor leak (bsc#1093436)</changelog>
</package>
<package pkgid="b4a2b61c2044e737d24e3872d9a4dda7ce5671816323032332c3fed86338a6fb" name="autofs" arch="x86_64">
  <version epoch="0" ver="5.1.3" rel="lp150.6.3.1"/>
  <changelog author="lchiquitto@suse.com" date="1422964800">- Fix autofs.service so that multiple options passed through
  sysconfig AUTOFS_OPTIONS work correctly (bsc#909472)</changelog>
  <changelog author="mszeredi@suse.cz" date="1424174400">- add autofs-5.1.0-dont-pass-sloppy-option-for-other-than-nfs-mounts.patch
  (bsc#911720)</changelog>
  <changelog author="mszeredi@suse.cz" date="1425384000">- prevent potential privilege escalation via interpreter load path
  for program-based automount maps, add the following patches:
  autofs-5.1.0-add-a-prefix-to-program-map-stdvars.patch
  autofs-5.1.0-add-config-option-to-force-use-of-program-map-stdvars.patch
  (bnc#917977 CVE-2014-8169)</changelog>
  <changelog author="dmueller@suse.com" date="1430913600">- add autofs-5.1.0-gcc5-fixes.patch: Fix build against gcc 5.x</changelog>
  <changelog author="lchiquitto@suse.com" date="1431864000">- update to version 5.1.1:
  * fix compile error in defaults.c
  * add serialization to sasl init
  * dont allocate dev_ctl_ops too early
  * fix incorrect round robin host detection
  * fix race accessing qdn in get_query_dn()
  * fix leak in cache_push_mapent()
  * fix config entry read buffer not checked
  * fix FILE pointer check in defaults_read_config()
  * fix memory leak in conf_amd_get_log_options()
  * fix signed comparison in inet_fill_net()
  * fix buffer size checks in get_network_proximity()
  * fix leak in get_network_proximity()
  * fix buffer size checks in merge_options()
  * check amd lex buffer len before copy
  * add return check in ldap check_map_indirect()
  * check host macro is set before use
  * check options length before use in parse_amd.c
  * fix some out of order evaluations in parse_amd.c
  * fix copy and paste error in dup_defaults_entry()
  * fix leak in parse_mount()
  * add mutex call return check in defaults.c
  * force disable browse mode for amd format maps
  * fix hosts map options check in lookup_amd_instance()
  * fix memory leak in create_client()
  * fix memory leak in get_exports()
  * fix memory leak in get_defaults_entry()
  * fix out of order clearing of options buffer
  * fix reset amd lexer scan buffer
  * ignore multiple commas in options strings
  * fix typo in flagdir configure option
  * clarify multiple mounts description
  * gaurd against incorrect umount return
  * update man page autofs(8) for systemd
  * dont pass sloppy option for other than nfs mounts
  * make service want network-online
  * fix fix master map type check
  * init qdn before use in get_query_dn()
  * fix typo in update_hosts_mounts()
  * fix hosts map update on reload
  * make negative cache update consistent for all lookup modules
  * ensure negative cache isn't updated on remount
  * dont add wildcard to negative cache
  * add a prefix to program map stdvars
  * add config option to force use of program map stdvars
  * fix incorrect check in parse_mount()
  * handle duplicates in multi mounts
  * revert special case cifs escapes
  * fix map option parsing for 'strictatime'
  * fix showmount search in auto.net
  * remove obsolete comment in auto.net
  * fix macro usage in lookup_program.c
  * fix gcc5 complaints
  * remove unused offset handling code
  * fix mount as you go offset selection
  * link daemon with pthread library (Debian patch)
  * manpage corrections (Debian patch)
  * fix manpages hyphenation (Debian patch).
- ported patches:
  * autofs-5.1.0-dbus-udisks-monitor.patch -&gt;
    autofs-5.1.1-dbus-udisks-monitor.patch
  * autofs-debuginfo-fix.patch -&gt; autofs-5.1.1-debuginfo-fix.patch
  * autofs-5.0.9-suse-auto_master_default.patch -&gt;
    autofs-5.1.1-suse-auto_master_default.patch
  * autofs-5.0.9-task-use-after-free.patch -&gt;
    autofs-5.1.1-task-use-after-free.patch
- remove patches that are now upstream:
  * autofs-5.1.0-dont-pass-sloppy-option-for-other-than-nfs-mounts.patch
  * autofs-5.1.0-add-a-prefix-to-program-map-stdvars.patch
  * autofs-5.1.0-add-config-option-to-force-use-of-program-map-stdvars.patch
  * autofs-5.1.0-gcc5-fixes.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233600">- autofs.service: Use KillMode=mixed so "KillSignal" (SIGTERM) is
  only sent to the main process and if still does not exit after
  "TimeoutStopSec" then "SendSIGKILL" is sent to all remaining
  processes of the unit's control group.
  This is the desired behaviour for almost all daemons that
  execute foreign programs.</changelog>
  <changelog author="ro@suse.de" date="1449576000">- add patch autofs-5.1.1-leave_auth_destroy.patch (bnc#958410)
  do not redefined auth_destroy, the reason for this has long
  been fixed in libtirpc (version 0.2.1 is already fine)</changelog>
  <changelog author="jeffm@suse.com" date="1458820800">- improve scalability of direct mount path component creation (bsc#966573).
  * Added autofs-improve-scalability-of-direct-mount-path-comp.patch
  * Refreshed autofs-5.1.1-dbus-udisks-monitor.patch
- Use libldap_r instead of libldap for thread safety (bsc#955477).
  * Added autofs-use-libldap_r-instead-of-libldap-for-thread-safety.patch</changelog>
  <changelog author="jeffm@suse.com" date="1470830400">- Fix spurious ELOOP on certain kinds of failures (bsc#968918):
  * autofs: fix yp map age not updated in s/_/./g case
  * autofs: properly handle errors in lookup_nss_mount
  * Added patches:
    autofs-5.1.1-properly-handle-errors-in-lookup_nss_mount.patch
    autofs-5.1.1-fix-yp-map-age-not-updated-during-map-lookup.patch</changelog>
  <changelog author="astieger@suse.com" date="1491480000">- remove rpmlintrc, review was boo#782691</changelog>
  <changelog author="jeffm@suse.com" date="1502280000">- update to version 5.1.3:
  * limit getgrgid_r() buffer size
  * increase worker thread per-thread stack size
  * fix offset mount location multiple expansion
  * use malloc for expanded map location
  * fix invalid reference in remount_active_mount()
  * fix work around sss startup delay
  * fix possible NULL derefernce
  * use autofs_point to store expire timeout where possibe
  * add config option to use mount request log id
  * factor out set_thread_mount_request_log_id()
  * log functions to prefix messages with attempt_id if available
  * create thread-local ID for mount attempts
  * add the mount requestor's pid to pending_args
  * delay submount exit for amd submounts
  * fix bogus check in expire_cleanup()
  * handle amd cache option all in amd type auto mounts
  * handle map_option cache for top level mounts
  * capture cache option and its settings during parsing
  * add function conf_amd_get_map_options()
  * check for conflicting amd section mounts
  * include amd mount section mounts in master mounts list
  * add function conf_amd_get_mount_paths()
  * add function conf_amd_get_map_name()
  * add support for amd browsable option
  * add ref counting to struct map_source
  * fix typos in README.amd-maps
  * honor last rw in mount options when doing a bind mount
  * set autofs mounts catatonic at exit
  * make set_direct_mount_catatonic() more general
  * check NFS server availability on local mount fallback
  * make lookup_nss_read_master() return nss status
  * don't return until after master map retry read
  * set sane default master read wait timeout
  * dont exit on master map read fail timeout
  * fix included master map not found return
  * fix quoted key handling in sanitize_path()
  * add sss master map wait config option
  * work around sss startup delay
  * add master read wait option
  * wait for master map available at start
  * update and add README for old autofs schema
  * fix create_client() RPC client handling
  * fix _strncmp() usage
  * fix argc off by one in mount_autofs.c
  * fix cachefs parse message not being logged
  * fix typo in MOUNT_FLAG_GHOST comment
  * Avoid local variable name shadowing another
  * configure: add cache variable for Linux proc filesystem check
  * fix count_mounts() function
  * fix short memory allocation in lookup_amd_instance()
  * Fix fgets(3) size argument (another one)
  * Fix typos in error messages
  * Remove unused local 2KB buffer
  * fix file map changed check
  * Change .requestor to .requester for consistency
  * Fix a typo in CREDITS
  * fix libtirpc detection with -Wl,--as-needed
  * Fix size arg of fgets(3)
  * Drop redundant \n in logerr()
  * Fix compiler warning in try_remount()
  * build: check for clock_gettime in librt
  * fix possible memory leak in nfs mount
  * add config option to suppress not found log message
  * properly handle errors in lookup_nss_mount
  * fix yp map age not updated during map lookup
  * fix 'nameing' typo in autofs.conf
  * add remote-fs.target systemd dependency
  * add autofs(5) note of IPv6 libtirpc requirement
  * fix autofs(5) description of supported map sources
  * fix modules make clean target
  * fix Makefile linking dependencies
  * fix handle_mounts() termination condition check
  * log pipe read errors
  * fix use-after-free in st_queue_handler()
  * always set direct mounts catatonic at exit
  * improve scalability of direct mount path component
  * fix use after free in match_my_name()
  * fix memory leak in get_network_proximity()
  * fix typo in autofs_sasl_bind()
  * fix use after free in open_lookup()
  * fix use after free in sun parser parse_init()
  * fix memory leak in ldap do_init()
  * fix memory leak in nisplus lookup_reinit()
  * fix sasl connection concurrancy problem
  * fix unbind sasl external mech
  * remove unused function elapsed()
  * change time() to use monotonic_clock()
  * change remaining gettimeofday() to use clock_gettime()
  * use monotonic clock for indirect mount condition
  * use monotonic clock for direct mount condition
  * define pending condition init helper function
  * use monotonic clock for alarm thread condition wait
  * define monotonic clock helper functions
  * Add a mode option for master map entries
  * fix error handling of is_mounted()
  * fix out of order call in program map lookup
  * add configuration option to use fqdn in mounts
  * update map_hash_table_size description
  * change lookup to use reinit instead of reopen
  * implement reinit in multi lookup module
  * fix map format check in nss_open_lookup() multi map module
  * factor out alloc multi map context
  * factor out free multi map context
  * add type to struct lookup_mod
  * implement reinit in yp lookup module
  * implement reinit in sss lookup module
  * implement reinit in program lookup module
  * implement reinit in nisplus lookup module
  * implement reinit in ldap lookup module
  * implement reinit in hosts lookup module
  * implement reinit in hesiod lookup module
  * implement reinit in file lookup module
  * implement reinit in dir lookup module
  * implement reinit in parse modules
  * add reinit entry point to modules
  * fix nsswitch handling when opening multi map
  * make open_lookup() return nss status
  * move check_nss_result() to nsswitchr.c
  * fix update_hosts_mounts() return
  * fix missing source sss in multi map lookup
  * fix direct map expire not set for initial empty map
  * fix direct mount stale instance flag reset
  * fix error handling on ldap bind fail
  * fix config old name lookup
  * fix rwlock unlock crash
  * fix return handling of do_reconnect() in ldap module
  * make find_server() return a status
  * make find_dc_server() return a status
  * make connect_to_server() return a status
  * make do_connect() return a status
  * move query dn calculation from do_bind() to do_connect()
  * fix return handling in sss lookup module
  * fix left mount count return from umount_multi_triggers()
  * revert fix libtirpc name clash
  * update libtirpc workaround for new soname
  * fix fix gcc5 complaints
  * Removed patches:
    autofs-5.1.1-task-use-after-free.patch
    autofs-improve-scalability-of-direct-mount-path-comp.patch
    autofs-5.1.1-properly-handle-errors-in-lookup_nss_mount.patch
    autofs-5.1.1-fix-yp-map-age-not-updated-during-map-lookup.patch
    autofs-5.1.1-leave_auth_destroy.patch
  * Updated patches for context:
    autofs-5.1.1-dbus-udisks-monitor.patch</changelog>
  <changelog author="jeffm@suse.com" date="1502280001">- Update URL to use www.kernel.org now that ftp is gone.</changelog>
  <changelog author="jeffm@suse.com" date="1502798400">- Add gpg signature</changelog>
  <changelog author="kukuk@suse.de" date="1502798401">- Add libnsl-devel as build require in preparation of libnsl
  removal from glibc</changelog>
  <changelog author="jeffm@suse.com" date="1508328000">- fix ordering of seteuid/setegid in do_spawn (bsc#1062482).
- fix unset tsd group name handling (bsc#1062482).
- fix possible map instance memory leak (bsc#1038198).
- check map instances for staleness on map update (bsc#1038198).
- Added patches:
  - autofs-5-1-3-check-map-instances-for-staleness-on-map-update.patch
  - autofs-5-1-3-fix-ordering-of-seteuid-setegid-in-do_spawn.patch
  - autofs-5-1-3-fix-possible-map-instance-memory-leak.patch
  - autofs-5-1-3-fix-unset-tsd-group-name-handling.patch</changelog>
  <changelog author="kukuk@suse.de" date="1510488000">- Add build require for rpcgen (preparation for removing it from
  glibc)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="nfbrown@suse.com" date="1517745600">- 0001-use_hostname_for_mounts-shouldn-t-prevent-selection-.patch
  Fix handling of replicated NFS server so that
  selection between servers still works sensibly when
  use_hostname_for_mounts is in effect.
  (bsc#1066720)
- 0002-Fix-monotonic_elapsed.patch
  Fix bug introduced with monotonic-time patches which
  causes nanoseconds to be ignored and effectively
  disables sorting based on response time and/or weight.
  (bsc#1066720)</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- BuildRequire pkgconfig(udisks2) instead of udisks2-devel: let's
  be flexible on possible package name changes.
- Package COPYRIGHT as %license instead of %doc.</changelog>
  <changelog author="nfbrown@suse.com" date="1526472000">- 0003-autofs-5.1.4-fix-fd-leak-in-rpc_do_create_client.patch
  Fix filedescriptor leak (bsc#1093436)</changelog>
</package>
<package pkgid="70df0a885fa2c2040cdc7834fda8078cd5fbd723672ecbcca0abf427759a7492" name="autoyast2" arch="noarch">
  <version epoch="0" ver="4.0.55" rel="lp150.2.3.1"/>
  <changelog author="schubi@suse.de" date="1520251200">- Fix in showing/accepting base licenses: Using
  inst_product_license module instead of
  ProductLicense.AskLicenseAgreement (bnc#1073324)
- 4.0.37</changelog>
  <changelog author="lslezak@suse.cz" date="1520424000">- Fixed cloning of the base product name (bsc#1084259)
- 4.0.38</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1521115200">- Reuse encrypted devices when required (bsc#1085439).
- 4.0.39</changelog>
  <changelog author="schubi@suse.de" date="1521547200">- Improved error message if the base product cannot be found.
  (follow up of bnc#1084820)
- 4.0.40</changelog>
  <changelog author="knut.anderssen@suse.com" date="1521633600">- Added more entries to be used instead of the listentry tag when
  cloning the system (bsc#1013047)
- 4.0.41</changelog>
  <changelog author="knut.anderssen@suse.com" date="1521720000">- Permitted the use of 'listentry' element in all the software
  AutoYaST schema list entries (bsc#1013047)
- 4.0.42</changelog>
  <changelog author="schubi@suse.de" date="1521720001">- Add-On-Products: Handling error popup for wrong settings.
  (bnc#1084596)
- 4.0.43</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1521806400">- Do not export an &lt;id/&gt; element in the partitioning section
  (bsc#1013047)</changelog>
  <changelog author="jlopez@suse.com" date="1521806401">- Properly abort when probing devices fails (part of bsc#1083672).
- 4.0.44</changelog>
  <changelog author="jlopez@suse.com" date="1522756800">- Fix tests to use correct storage instance (part of fate#318196).
- 4.0.45</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523620800">- Honor partitioning settings from product (bsc#1085755).
- 4.0.46</changelog>
  <changelog author="lslezak@suse.cz" date="1523880000">- Install the module products also in AutoYaST autoupgrade
  (related to bsc#1086818 and bsc#1087206)
- 4.0.47</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
</package>
<package pkgid="61f484e5017688a7ee6ed6ac485121d8613c739f397c6041019b9f15685feedf" name="autoyast2" arch="src">
  <version epoch="0" ver="4.0.55" rel="lp150.2.3.1"/>
  <changelog author="schubi@suse.de" date="1520251200">- Fix in showing/accepting base licenses: Using
  inst_product_license module instead of
  ProductLicense.AskLicenseAgreement (bnc#1073324)
- 4.0.37</changelog>
  <changelog author="lslezak@suse.cz" date="1520424000">- Fixed cloning of the base product name (bsc#1084259)
- 4.0.38</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1521115200">- Reuse encrypted devices when required (bsc#1085439).
- 4.0.39</changelog>
  <changelog author="schubi@suse.de" date="1521547200">- Improved error message if the base product cannot be found.
  (follow up of bnc#1084820)
- 4.0.40</changelog>
  <changelog author="knut.anderssen@suse.com" date="1521633600">- Added more entries to be used instead of the listentry tag when
  cloning the system (bsc#1013047)
- 4.0.41</changelog>
  <changelog author="knut.anderssen@suse.com" date="1521720000">- Permitted the use of 'listentry' element in all the software
  AutoYaST schema list entries (bsc#1013047)
- 4.0.42</changelog>
  <changelog author="schubi@suse.de" date="1521720001">- Add-On-Products: Handling error popup for wrong settings.
  (bnc#1084596)
- 4.0.43</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1521806400">- Do not export an &lt;id/&gt; element in the partitioning section
  (bsc#1013047)</changelog>
  <changelog author="jlopez@suse.com" date="1521806401">- Properly abort when probing devices fails (part of bsc#1083672).
- 4.0.44</changelog>
  <changelog author="jlopez@suse.com" date="1522756800">- Fix tests to use correct storage instance (part of fate#318196).
- 4.0.45</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523620800">- Honor partitioning settings from product (bsc#1085755).
- 4.0.46</changelog>
  <changelog author="lslezak@suse.cz" date="1523880000">- Install the module products also in AutoYaST autoupgrade
  (related to bsc#1086818 and bsc#1087206)
- 4.0.47</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
</package>
<package pkgid="75511a9dccff45e47b86edbd374e2f6cbf9eedc5ff6a30ce5890500c7cc36789" name="autoyast2" arch="noarch">
  <version epoch="0" ver="4.0.61" rel="lp150.2.6.1"/>
  <changelog author="schubi@suse.de" date="1521720000">- Add-On-Products: Handling error popup for wrong settings.
  (bnc#1084596)
- 4.0.43</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1521806400">- Do not export an &lt;id/&gt; element in the partitioning section
  (bsc#1013047)</changelog>
  <changelog author="jlopez@suse.com" date="1521806401">- Properly abort when probing devices fails (part of bsc#1083672).
- 4.0.44</changelog>
  <changelog author="jlopez@suse.com" date="1522756800">- Fix tests to use correct storage instance (part of fate#318196).
- 4.0.45</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523620800">- Honor partitioning settings from product (bsc#1085755).
- 4.0.46</changelog>
  <changelog author="lslezak@suse.cz" date="1523880000">- Install the module products also in AutoYaST autoupgrade
  (related to bsc#1086818 and bsc#1087206)
- 4.0.47</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
  <changelog author="schubi@suse.de" date="1528804800">- Showing AutoYaST configuration file errors onetime only.
  (needed for bnc#1095113)
- 4.0.56</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.57</changelog>
  <changelog author="schubi@suse.de" date="1534248000">- AY configuration module: Report XML errors while reading an
  AY configuration file (bsc#1098794)
- 4.0.58</changelog>
  <changelog author="schubi@suse.de" date="1534507200">- Installation/Update: Do not call registration if module
  yast2-registraion is not available in inst-sys (bsc#1098794).
- 4.0.59</changelog>
  <changelog author="knut.anderssen@suse.com" date="1534507201">- AutoInstallRules: increased default maxdepth for not crashing
  with a big software package list (bsc#1104655)
- 4.0.60</changelog>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
</package>
<package pkgid="0bdb90360885f23cb2aaac4b815b0c3fa5088dc1b012edd498178bbb20d8fd7e" name="autoyast2" arch="src">
  <version epoch="0" ver="4.0.61" rel="lp150.2.6.1"/>
  <changelog author="schubi@suse.de" date="1521720000">- Add-On-Products: Handling error popup for wrong settings.
  (bnc#1084596)
- 4.0.43</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1521806400">- Do not export an &lt;id/&gt; element in the partitioning section
  (bsc#1013047)</changelog>
  <changelog author="jlopez@suse.com" date="1521806401">- Properly abort when probing devices fails (part of bsc#1083672).
- 4.0.44</changelog>
  <changelog author="jlopez@suse.com" date="1522756800">- Fix tests to use correct storage instance (part of fate#318196).
- 4.0.45</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523620800">- Honor partitioning settings from product (bsc#1085755).
- 4.0.46</changelog>
  <changelog author="lslezak@suse.cz" date="1523880000">- Install the module products also in AutoYaST autoupgrade
  (related to bsc#1086818 and bsc#1087206)
- 4.0.47</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
  <changelog author="schubi@suse.de" date="1528804800">- Showing AutoYaST configuration file errors onetime only.
  (needed for bnc#1095113)
- 4.0.56</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.57</changelog>
  <changelog author="schubi@suse.de" date="1534248000">- AY configuration module: Report XML errors while reading an
  AY configuration file (bsc#1098794)
- 4.0.58</changelog>
  <changelog author="schubi@suse.de" date="1534507200">- Installation/Update: Do not call registration if module
  yast2-registraion is not available in inst-sys (bsc#1098794).
- 4.0.59</changelog>
  <changelog author="knut.anderssen@suse.com" date="1534507201">- AutoInstallRules: increased default maxdepth for not crashing
  with a big software package list (bsc#1104655)
- 4.0.60</changelog>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
</package>
<package pkgid="a59362946822f4a437379ea16210d3769aefb749fa5c5acfc7891b02baee33b1" name="autoyast2" arch="noarch">
  <version epoch="0" ver="4.0.63" rel="lp150.2.9.1"/>
  <changelog author="jlopez@suse.com" date="1521806400">- Properly abort when probing devices fails (part of bsc#1083672).
- 4.0.44</changelog>
  <changelog author="jlopez@suse.com" date="1522756800">- Fix tests to use correct storage instance (part of fate#318196).
- 4.0.45</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523620800">- Honor partitioning settings from product (bsc#1085755).
- 4.0.46</changelog>
  <changelog author="lslezak@suse.cz" date="1523880000">- Install the module products also in AutoYaST autoupgrade
  (related to bsc#1086818 and bsc#1087206)
- 4.0.47</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
  <changelog author="schubi@suse.de" date="1528804800">- Showing AutoYaST configuration file errors onetime only.
  (needed for bnc#1095113)
- 4.0.56</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.57</changelog>
  <changelog author="schubi@suse.de" date="1534248000">- AY configuration module: Report XML errors while reading an
  AY configuration file (bsc#1098794)
- 4.0.58</changelog>
  <changelog author="schubi@suse.de" date="1534507200">- Installation/Update: Do not call registration if module
  yast2-registraion is not available in inst-sys (bsc#1098794).
- 4.0.59</changelog>
  <changelog author="knut.anderssen@suse.com" date="1534507201">- AutoInstallRules: increased default maxdepth for not crashing
  with a big software package list (bsc#1104655)
- 4.0.60</changelog>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
  <changelog author="knut.anderssen@suse.com" date="1538136000">- AutoYaST configuration module: Enable edit action for firewall
  module (fate#324662).
- 4.0.62</changelog>
  <changelog author="knut.anderssen@suse.com" date="1539259200">- AutoInstallRules:  Do a cleanup of the profile being merged with
  (bsc#1108933).
- 4.0.63</changelog>
</package>
<package pkgid="6e2118fda1505d2d6496be40daf9226e00007f019919c3400fc5e3041c67d92b" name="autoyast2" arch="src">
  <version epoch="0" ver="4.0.63" rel="lp150.2.9.1"/>
  <changelog author="jlopez@suse.com" date="1521806400">- Properly abort when probing devices fails (part of bsc#1083672).
- 4.0.44</changelog>
  <changelog author="jlopez@suse.com" date="1522756800">- Fix tests to use correct storage instance (part of fate#318196).
- 4.0.45</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523620800">- Honor partitioning settings from product (bsc#1085755).
- 4.0.46</changelog>
  <changelog author="lslezak@suse.cz" date="1523880000">- Install the module products also in AutoYaST autoupgrade
  (related to bsc#1086818 and bsc#1087206)
- 4.0.47</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
  <changelog author="schubi@suse.de" date="1528804800">- Showing AutoYaST configuration file errors onetime only.
  (needed for bnc#1095113)
- 4.0.56</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.57</changelog>
  <changelog author="schubi@suse.de" date="1534248000">- AY configuration module: Report XML errors while reading an
  AY configuration file (bsc#1098794)
- 4.0.58</changelog>
  <changelog author="schubi@suse.de" date="1534507200">- Installation/Update: Do not call registration if module
  yast2-registraion is not available in inst-sys (bsc#1098794).
- 4.0.59</changelog>
  <changelog author="knut.anderssen@suse.com" date="1534507201">- AutoInstallRules: increased default maxdepth for not crashing
  with a big software package list (bsc#1104655)
- 4.0.60</changelog>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
  <changelog author="knut.anderssen@suse.com" date="1538136000">- AutoYaST configuration module: Enable edit action for firewall
  module (fate#324662).
- 4.0.62</changelog>
  <changelog author="knut.anderssen@suse.com" date="1539259200">- AutoInstallRules:  Do a cleanup of the profile being merged with
  (bsc#1108933).
- 4.0.63</changelog>
</package>
<package pkgid="1fbf085966b6a31120fdc2951fed688bac523401b8e941bbc89764718a8acf0b" name="autoyast2" arch="noarch">
  <version epoch="0" ver="4.0.66" rel="lp150.2.12.1"/>
  <changelog author="lslezak@suse.cz" date="1523880000">- Install the module products also in AutoYaST autoupgrade
  (related to bsc#1086818 and bsc#1087206)
- 4.0.47</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
  <changelog author="schubi@suse.de" date="1528804800">- Showing AutoYaST configuration file errors onetime only.
  (needed for bnc#1095113)
- 4.0.56</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.57</changelog>
  <changelog author="schubi@suse.de" date="1534248000">- AY configuration module: Report XML errors while reading an
  AY configuration file (bsc#1098794)
- 4.0.58</changelog>
  <changelog author="schubi@suse.de" date="1534507200">- Installation/Update: Do not call registration if module
  yast2-registraion is not available in inst-sys (bsc#1098794).
- 4.0.59</changelog>
  <changelog author="knut.anderssen@suse.com" date="1534507201">- AutoInstallRules: increased default maxdepth for not crashing
  with a big software package list (bsc#1104655)
- 4.0.60</changelog>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
  <changelog author="knut.anderssen@suse.com" date="1538136000">- AutoYaST configuration module: Enable edit action for firewall
  module (fate#324662).
- 4.0.62</changelog>
  <changelog author="knut.anderssen@suse.com" date="1539259200">- AutoInstallRules:  Do a cleanup of the profile being merged with
  (bsc#1108933).
- 4.0.63</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1540209600">- Adapt schema to support the new way of defining a software
  RAID (fate#326573).
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1541160000">- Writing security settings in first AY installation stage.
  So other modules (e.g. users) can rely on these settings now.
  (bnc#1112769)
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1542110400">- Removed unneeded flag network_needed in script section.
  (bsc#1094822)
- 4.0.66</changelog>
</package>
<package pkgid="2a76c367c3505032135f29819d110b44beb0cf2ed5fd5b56b9606f0acfca84d6" name="autoyast2" arch="src">
  <version epoch="0" ver="4.0.66" rel="lp150.2.12.1"/>
  <changelog author="lslezak@suse.cz" date="1523880000">- Install the module products also in AutoYaST autoupgrade
  (related to bsc#1086818 and bsc#1087206)
- 4.0.47</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
  <changelog author="schubi@suse.de" date="1528804800">- Showing AutoYaST configuration file errors onetime only.
  (needed for bnc#1095113)
- 4.0.56</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.57</changelog>
  <changelog author="schubi@suse.de" date="1534248000">- AY configuration module: Report XML errors while reading an
  AY configuration file (bsc#1098794)
- 4.0.58</changelog>
  <changelog author="schubi@suse.de" date="1534507200">- Installation/Update: Do not call registration if module
  yast2-registraion is not available in inst-sys (bsc#1098794).
- 4.0.59</changelog>
  <changelog author="knut.anderssen@suse.com" date="1534507201">- AutoInstallRules: increased default maxdepth for not crashing
  with a big software package list (bsc#1104655)
- 4.0.60</changelog>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
  <changelog author="knut.anderssen@suse.com" date="1538136000">- AutoYaST configuration module: Enable edit action for firewall
  module (fate#324662).
- 4.0.62</changelog>
  <changelog author="knut.anderssen@suse.com" date="1539259200">- AutoInstallRules:  Do a cleanup of the profile being merged with
  (bsc#1108933).
- 4.0.63</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1540209600">- Adapt schema to support the new way of defining a software
  RAID (fate#326573).
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1541160000">- Writing security settings in first AY installation stage.
  So other modules (e.g. users) can rely on these settings now.
  (bnc#1112769)
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1542110400">- Removed unneeded flag network_needed in script section.
  (bsc#1094822)
- 4.0.66</changelog>
</package>
<package pkgid="aa4aa75c2351f38a5bde64ab73ef522592b75a686de4d778b1f81fd5c671181d" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="4.0.55" rel="lp150.2.3.1"/>
  <changelog author="schubi@suse.de" date="1520251200">- Fix in showing/accepting base licenses: Using
  inst_product_license module instead of
  ProductLicense.AskLicenseAgreement (bnc#1073324)
- 4.0.37</changelog>
  <changelog author="lslezak@suse.cz" date="1520424000">- Fixed cloning of the base product name (bsc#1084259)
- 4.0.38</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1521115200">- Reuse encrypted devices when required (bsc#1085439).
- 4.0.39</changelog>
  <changelog author="schubi@suse.de" date="1521547200">- Improved error message if the base product cannot be found.
  (follow up of bnc#1084820)
- 4.0.40</changelog>
  <changelog author="knut.anderssen@suse.com" date="1521633600">- Added more entries to be used instead of the listentry tag when
  cloning the system (bsc#1013047)
- 4.0.41</changelog>
  <changelog author="knut.anderssen@suse.com" date="1521720000">- Permitted the use of 'listentry' element in all the software
  AutoYaST schema list entries (bsc#1013047)
- 4.0.42</changelog>
  <changelog author="schubi@suse.de" date="1521720001">- Add-On-Products: Handling error popup for wrong settings.
  (bnc#1084596)
- 4.0.43</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1521806400">- Do not export an &lt;id/&gt; element in the partitioning section
  (bsc#1013047)</changelog>
  <changelog author="jlopez@suse.com" date="1521806401">- Properly abort when probing devices fails (part of bsc#1083672).
- 4.0.44</changelog>
  <changelog author="jlopez@suse.com" date="1522756800">- Fix tests to use correct storage instance (part of fate#318196).
- 4.0.45</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523620800">- Honor partitioning settings from product (bsc#1085755).
- 4.0.46</changelog>
  <changelog author="lslezak@suse.cz" date="1523880000">- Install the module products also in AutoYaST autoupgrade
  (related to bsc#1086818 and bsc#1087206)
- 4.0.47</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
</package>
<package pkgid="3ca2398d0dc0451ce4ec8557d70e720017af81cc11702924bde6345e3ee2e99e" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="4.0.61" rel="lp150.2.6.1"/>
  <changelog author="schubi@suse.de" date="1521720000">- Add-On-Products: Handling error popup for wrong settings.
  (bnc#1084596)
- 4.0.43</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1521806400">- Do not export an &lt;id/&gt; element in the partitioning section
  (bsc#1013047)</changelog>
  <changelog author="jlopez@suse.com" date="1521806401">- Properly abort when probing devices fails (part of bsc#1083672).
- 4.0.44</changelog>
  <changelog author="jlopez@suse.com" date="1522756800">- Fix tests to use correct storage instance (part of fate#318196).
- 4.0.45</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523620800">- Honor partitioning settings from product (bsc#1085755).
- 4.0.46</changelog>
  <changelog author="lslezak@suse.cz" date="1523880000">- Install the module products also in AutoYaST autoupgrade
  (related to bsc#1086818 and bsc#1087206)
- 4.0.47</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
  <changelog author="schubi@suse.de" date="1528804800">- Showing AutoYaST configuration file errors onetime only.
  (needed for bnc#1095113)
- 4.0.56</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.57</changelog>
  <changelog author="schubi@suse.de" date="1534248000">- AY configuration module: Report XML errors while reading an
  AY configuration file (bsc#1098794)
- 4.0.58</changelog>
  <changelog author="schubi@suse.de" date="1534507200">- Installation/Update: Do not call registration if module
  yast2-registraion is not available in inst-sys (bsc#1098794).
- 4.0.59</changelog>
  <changelog author="knut.anderssen@suse.com" date="1534507201">- AutoInstallRules: increased default maxdepth for not crashing
  with a big software package list (bsc#1104655)
- 4.0.60</changelog>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
</package>
<package pkgid="93559f76430bd9818967b1856e68d1c7edc01b468c5e36cd474eb01d309b1490" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="4.0.63" rel="lp150.2.9.1"/>
  <changelog author="jlopez@suse.com" date="1521806400">- Properly abort when probing devices fails (part of bsc#1083672).
- 4.0.44</changelog>
  <changelog author="jlopez@suse.com" date="1522756800">- Fix tests to use correct storage instance (part of fate#318196).
- 4.0.45</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523620800">- Honor partitioning settings from product (bsc#1085755).
- 4.0.46</changelog>
  <changelog author="lslezak@suse.cz" date="1523880000">- Install the module products also in AutoYaST autoupgrade
  (related to bsc#1086818 and bsc#1087206)
- 4.0.47</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
  <changelog author="schubi@suse.de" date="1528804800">- Showing AutoYaST configuration file errors onetime only.
  (needed for bnc#1095113)
- 4.0.56</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.57</changelog>
  <changelog author="schubi@suse.de" date="1534248000">- AY configuration module: Report XML errors while reading an
  AY configuration file (bsc#1098794)
- 4.0.58</changelog>
  <changelog author="schubi@suse.de" date="1534507200">- Installation/Update: Do not call registration if module
  yast2-registraion is not available in inst-sys (bsc#1098794).
- 4.0.59</changelog>
  <changelog author="knut.anderssen@suse.com" date="1534507201">- AutoInstallRules: increased default maxdepth for not crashing
  with a big software package list (bsc#1104655)
- 4.0.60</changelog>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
  <changelog author="knut.anderssen@suse.com" date="1538136000">- AutoYaST configuration module: Enable edit action for firewall
  module (fate#324662).
- 4.0.62</changelog>
  <changelog author="knut.anderssen@suse.com" date="1539259200">- AutoInstallRules:  Do a cleanup of the profile being merged with
  (bsc#1108933).
- 4.0.63</changelog>
</package>
<package pkgid="5d9c5139002c124dc0cf9bd170c5573b2658b793edd94897a65f8678ff53b7cd" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="4.0.66" rel="lp150.2.12.1"/>
  <changelog author="lslezak@suse.cz" date="1523880000">- Install the module products also in AutoYaST autoupgrade
  (related to bsc#1086818 and bsc#1087206)
- 4.0.47</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
  <changelog author="schubi@suse.de" date="1528804800">- Showing AutoYaST configuration file errors onetime only.
  (needed for bnc#1095113)
- 4.0.56</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.57</changelog>
  <changelog author="schubi@suse.de" date="1534248000">- AY configuration module: Report XML errors while reading an
  AY configuration file (bsc#1098794)
- 4.0.58</changelog>
  <changelog author="schubi@suse.de" date="1534507200">- Installation/Update: Do not call registration if module
  yast2-registraion is not available in inst-sys (bsc#1098794).
- 4.0.59</changelog>
  <changelog author="knut.anderssen@suse.com" date="1534507201">- AutoInstallRules: increased default maxdepth for not crashing
  with a big software package list (bsc#1104655)
- 4.0.60</changelog>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
  <changelog author="knut.anderssen@suse.com" date="1538136000">- AutoYaST configuration module: Enable edit action for firewall
  module (fate#324662).
- 4.0.62</changelog>
  <changelog author="knut.anderssen@suse.com" date="1539259200">- AutoInstallRules:  Do a cleanup of the profile being merged with
  (bsc#1108933).
- 4.0.63</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1540209600">- Adapt schema to support the new way of defining a software
  RAID (fate#326573).
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1541160000">- Writing security settings in first AY installation stage.
  So other modules (e.g. users) can rely on these settings now.
  (bnc#1112769)
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1542110400">- Removed unneeded flag network_needed in script section.
  (bsc#1094822)
- 4.0.66</changelog>
</package>
<package pkgid="a3491674af78f101c4d963532122bf887704686b7836a6cdcb979989ea0fc8a0" name="aws-vpc-move-ip" arch="noarch">
  <version epoch="0" ver="0.2.20171113" rel="lp150.2.3.1"/>
  <changelog author="ro@suse.de" date="1443787200">- created package, version 0.1</changelog>
  <changelog author="hguo@suse.com" date="1454414400">- Catch up with the latest progress from upstream repository and
  Introduce manual page ofc_suse_aws-vpc-move-ip.8
  Implements fate#319009</changelog>
  <changelog author="tchvatal@suse.com" date="1467288000">- Do not compress the manpage manualy, the rpm does it for us</changelog>
  <changelog author="kgronlund@suse.com" date="1510574400">- Update to version from resource-agents#ac94d575 (bsc#1059165)
  * Monitoring via AWS API call can be turned on/off
  * New parameter monapi (bool ? true/false) enables
    or disables Enhanced monitoring using AWS API
    call to check route table content
  * ocf_log / debugger: only relevant output for
    each level is sent to log
  * now correctly checks return code of ?ip addr delete? (bsc#1053193)</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1536840000">- Included the latest fixes available Upstream (bsc#1106707)
  * Enforces the awscli text output call
  * Includes the address param backward compatibility
  * Includes the new ip param.
  * Improves the monitor action when is on probe.</changelog>
</package>
<package pkgid="33f8f60dbf4223df640c9be7ea05b5edd937e38424b7afed69f577c7b5b62e24" name="aws-vpc-move-ip" arch="src">
  <version epoch="0" ver="0.2.20171113" rel="lp150.2.3.1"/>
  <changelog author="ro@suse.de" date="1443787200">- created package, version 0.1</changelog>
  <changelog author="hguo@suse.com" date="1454414400">- Catch up with the latest progress from upstream repository and
  Introduce manual page ofc_suse_aws-vpc-move-ip.8
  Implements fate#319009</changelog>
  <changelog author="tchvatal@suse.com" date="1467288000">- Do not compress the manpage manualy, the rpm does it for us</changelog>
  <changelog author="kgronlund@suse.com" date="1510574400">- Update to version from resource-agents#ac94d575 (bsc#1059165)
  * Monitoring via AWS API call can be turned on/off
  * New parameter monapi (bool ? true/false) enables
    or disables Enhanced monitoring using AWS API
    call to check route table content
  * ocf_log / debugger: only relevant output for
    each level is sent to log
  * now correctly checks return code of ?ip addr delete? (bsc#1053193)</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1536840000">- Included the latest fixes available Upstream (bsc#1106707)
  * Enforces the awscli text output call
  * Includes the address param backward compatibility
  * Includes the new ip param.
  * Improves the monitor action when is on probe.</changelog>
</package>
<package pkgid="7bd0efafef52d677a23bc89107b8918e9ea5d3d7629003d0790329c2b15944bf" name="axis" arch="noarch">
  <version epoch="0" ver="1.4" rel="lp150.4.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1242907200">- fixed build with new gcj44</changelog>
  <changelog author="mvyskocil@suse.cz" date="1299844800">- build using openjdk, use ant.build.javac.target and source 1.4
  to prevent javadoc fail, clean up BuildRequires</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="mvyskocil@suse.cz" date="1330430400">- strip the jakarta- from classpath to be ready for jakarta-&gt;apache-commons
  renaming
- added some pms and manifest files</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1403870400">- Depend on proper apache pkgs</changelog>
  <changelog author="tchvatal@suse.com" date="1403870401">- Fix back javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495022400">- Disable javadoc
- Fix build with new ant 1.9.8+
  * axis-ant-build.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix build with new javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1505044800">- Requires for build java-devel = 1.8.0 since it is the last
  version able to build with source and target levels 1.3</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- BuildRequires: java-devel &gt;= 1.6
- BuildConflicts: java-devel &gt;= 1.9
  * Allow building with wider range of java compilers
- Clean spec file</changelog>
  <changelog author="fstrba@suse.com" date="1507204800">- Remove the 3 deprecated classes from package org.apache.axis.enum
  * allows building with java source and target &gt;= 1.5
- Added patches:
  * axis-encoding.patch
    + Specify file encoding ISO-8859-1 in order to avoid compiler
    errors with characters unmappable in ASCII
  * axis-enum.patch
    + Rename variable enum to emun to avoid clash with reserved
    word in java5+
  * axis-compareto.patch
    + Rewrite the UnsignedInt::compareTo and
    UnsignedLong::compareTo to check first that the Object we
    compare with is instance of the respective class</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536321600">- Security fix: [bsc#1103658, CVE-2018-8032]
  * Apache Axis 1.x up to and including 1.4 is vulnerable to a
    cross-site scripting (XSS) attack in the default
    servlet/services.
  * Added axis-CVE-2018-8032.patch</changelog>
</package>
<package pkgid="0d25b10ce49dac913d96d47f297d657d0a9aa244ad0e31c51f709fd890a1a8cc" name="axis" arch="src">
  <version epoch="0" ver="1.4" rel="lp150.4.3.1"/>
  <changelog author="dbornkessel@suse.de" date="1136462400">- Current version 1.2.3 from JPackage.org</changelog>
  <changelog author="dbornkessel@suse.de" date="1178107200">- added unzip to BuildRequires</changelog>
  <changelog author="skh@suse.de" date="1200571200">- remove glibj from build-classpath call as we don't have classpath
  packages</changelog>
  <changelog author="mvyskocil@suse.cz" date="1208865600">- fixed build with new gcj (memory consupmtion limit)</changelog>
  <changelog author="coolo@suse.de" date="1216209600">- avoid another build cycle</changelog>
  <changelog author="mvyskocil@suse.cz" date="1217505600">- replace gnu-javamail dependency to classpathx-mail [bnc#411839]
  - the classpathx-foo is consistent with jpackage.org project</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242907200">- fixed build with new gcj44</changelog>
  <changelog author="mvyskocil@suse.cz" date="1299844800">- build using openjdk, use ant.build.javac.target and source 1.4
  to prevent javadoc fail, clean up BuildRequires</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="mvyskocil@suse.cz" date="1330430400">- strip the jakarta- from classpath to be ready for jakarta-&gt;apache-commons
  renaming
- added some pms and manifest files</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1403870400">- Depend on proper apache pkgs</changelog>
  <changelog author="tchvatal@suse.com" date="1403870401">- Fix back javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495022400">- Disable javadoc
- Fix build with new ant 1.9.8+
  * axis-ant-build.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix build with new javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1505044800">- Requires for build java-devel = 1.8.0 since it is the last
  version able to build with source and target levels 1.3</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- BuildRequires: java-devel &gt;= 1.6
- BuildConflicts: java-devel &gt;= 1.9
  * Allow building with wider range of java compilers
- Clean spec file</changelog>
  <changelog author="fstrba@suse.com" date="1507204800">- Remove the 3 deprecated classes from package org.apache.axis.enum
  * allows building with java source and target &gt;= 1.5
- Added patches:
  * axis-encoding.patch
    + Specify file encoding ISO-8859-1 in order to avoid compiler
    errors with characters unmappable in ASCII
  * axis-enum.patch
    + Rename variable enum to emun to avoid clash with reserved
    word in java5+
  * axis-compareto.patch
    + Rewrite the UnsignedInt::compareTo and
    UnsignedLong::compareTo to check first that the Object we
    compare with is instance of the respective class</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536321600">- Security fix: [bsc#1103658, CVE-2018-8032]
  * Apache Axis 1.x up to and including 1.4 is vulnerable to a
    cross-site scripting (XSS) attack in the default
    servlet/services.
  * Added axis-CVE-2018-8032.patch</changelog>
</package>
<package pkgid="2d54ff4ddaa4a2f905f72762a25c4aaef1a03692e0a96bd3c66f89906fd510e4" name="axis-manual" arch="noarch">
  <version epoch="0" ver="1.4" rel="lp150.4.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1242907200">- fixed build with new gcj44</changelog>
  <changelog author="mvyskocil@suse.cz" date="1299844800">- build using openjdk, use ant.build.javac.target and source 1.4
  to prevent javadoc fail, clean up BuildRequires</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="mvyskocil@suse.cz" date="1330430400">- strip the jakarta- from classpath to be ready for jakarta-&gt;apache-commons
  renaming
- added some pms and manifest files</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1403870400">- Depend on proper apache pkgs</changelog>
  <changelog author="tchvatal@suse.com" date="1403870401">- Fix back javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495022400">- Disable javadoc
- Fix build with new ant 1.9.8+
  * axis-ant-build.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix build with new javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1505044800">- Requires for build java-devel = 1.8.0 since it is the last
  version able to build with source and target levels 1.3</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- BuildRequires: java-devel &gt;= 1.6
- BuildConflicts: java-devel &gt;= 1.9
  * Allow building with wider range of java compilers
- Clean spec file</changelog>
  <changelog author="fstrba@suse.com" date="1507204800">- Remove the 3 deprecated classes from package org.apache.axis.enum
  * allows building with java source and target &gt;= 1.5
- Added patches:
  * axis-encoding.patch
    + Specify file encoding ISO-8859-1 in order to avoid compiler
    errors with characters unmappable in ASCII
  * axis-enum.patch
    + Rename variable enum to emun to avoid clash with reserved
    word in java5+
  * axis-compareto.patch
    + Rewrite the UnsignedInt::compareTo and
    UnsignedLong::compareTo to check first that the Object we
    compare with is instance of the respective class</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536321600">- Security fix: [bsc#1103658, CVE-2018-8032]
  * Apache Axis 1.x up to and including 1.4 is vulnerable to a
    cross-site scripting (XSS) attack in the default
    servlet/services.
  * Added axis-CVE-2018-8032.patch</changelog>
</package>
<package pkgid="00efc09729561056850f48e9591b38f1d8a77e946395ac6d06f4989216ebc548" name="bash" arch="src">
  <version epoch="0" ver="4.4" rel="lp150.8.3.1"/>
  <changelog author="werner@suse.de" date="1485518400">- Add upstream patch bash44-006
  Out-of-range negative offsets to popd can cause the shell to crash
  attempting to free an invalid memory block.
- Remove patch popd-offset-overflow.patch to use bash44-006
- Add upstream patch bash44-007
  When performing filename completion, bash dequotes the directory
  name being completed, which can result in match failures and
  potential unwanted expansion.
- Duplicate bash44-007 as readline70-002 as it seems to be missed
- Add upstream patch bash44-008
  Under certain circumstances, bash will evaluate arithmetic
  expressions as part of reading an expression token even when
  evaluation is suppressed. This happens while evaluating a
  conditional expression and skipping over the failed branch of the
  expression.
- Add upstream patch bash44-009
  There is a race condition in add_history() that can be triggered
  by a fatal signal arriving between the time the history length
  is updated and the time the history list update is completed.
  A later attempt to reference an invalid history entry can cause
  a crash.
- Add upstream patch bash44-010
  Depending on compiler optimizations and behavior, the `read'
  builtin may not save partial input when a timeout occurs.
- Add upstream patch bash44-011
  Subshells begun to run command and process substitutions may
  attempt to set the terminal's process group to an incorrect
  value if they receive a fatal signal.  This depends on the
  behavior of the process that starts the shell.
- Add upstream patch bash44-012
  When -N is used, the input is not supposed to be split using
  $IFS, but leading and trailing IFS whitespace was still removed.</changelog>
  <changelog author="werner@suse.de" date="1485777600">- Add upstream patch readline70-002 which replace old one
  There is a race condition in add_history() that can be triggered by a fatal
  signal arriving between the time the history length is updated and the time
  the history list update is completed. A later attempt to reference an
  invalid history entry can cause a crash.
- Add upstream patch readline70-003
  Readline-7.0 uses pselect(2) to allow readline to handle signals that do not
  interrupt read(2), such as SIGALRM, before reading another character.  The
  signal mask used in the pselect call did not take into account signals the
  calling application blocked before calling readline().</changelog>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
</package>
<package pkgid="608ee277f9d15bbb79da4ace8ec3bc7472ae8440dca010dfd489b8937371eaab" name="bash" arch="x86_64">
  <version epoch="0" ver="4.4" rel="lp150.8.3.1"/>
  <changelog author="werner@suse.de" date="1485518400">- Add upstream patch bash44-006
  Out-of-range negative offsets to popd can cause the shell to crash
  attempting to free an invalid memory block.
- Remove patch popd-offset-overflow.patch to use bash44-006
- Add upstream patch bash44-007
  When performing filename completion, bash dequotes the directory
  name being completed, which can result in match failures and
  potential unwanted expansion.
- Duplicate bash44-007 as readline70-002 as it seems to be missed
- Add upstream patch bash44-008
  Under certain circumstances, bash will evaluate arithmetic
  expressions as part of reading an expression token even when
  evaluation is suppressed. This happens while evaluating a
  conditional expression and skipping over the failed branch of the
  expression.
- Add upstream patch bash44-009
  There is a race condition in add_history() that can be triggered
  by a fatal signal arriving between the time the history length
  is updated and the time the history list update is completed.
  A later attempt to reference an invalid history entry can cause
  a crash.
- Add upstream patch bash44-010
  Depending on compiler optimizations and behavior, the `read'
  builtin may not save partial input when a timeout occurs.
- Add upstream patch bash44-011
  Subshells begun to run command and process substitutions may
  attempt to set the terminal's process group to an incorrect
  value if they receive a fatal signal.  This depends on the
  behavior of the process that starts the shell.
- Add upstream patch bash44-012
  When -N is used, the input is not supposed to be split using
  $IFS, but leading and trailing IFS whitespace was still removed.</changelog>
  <changelog author="werner@suse.de" date="1485777600">- Add upstream patch readline70-002 which replace old one
  There is a race condition in add_history() that can be triggered by a fatal
  signal arriving between the time the history length is updated and the time
  the history list update is completed. A later attempt to reference an
  invalid history entry can cause a crash.
- Add upstream patch readline70-003
  Readline-7.0 uses pselect(2) to allow readline to handle signals that do not
  interrupt read(2), such as SIGALRM, before reading another character.  The
  signal mask used in the pselect call did not take into account signals the
  calling application blocked before calling readline().</changelog>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
</package>
<package pkgid="34fc57612a18e26a6054b61b2dc6061356ba82456ccc71fd06447f074e2971fc" name="bash-completion" arch="noarch">
  <version epoch="0" ver="2.7" rel="lp150.3.3.1"/>
  <changelog author="werner@suse.de" date="1434369600">- Add patch ls-completion-boo889319.patch to make ls completion
  more smart (boo#889319)</changelog>
  <changelog author="werner@suse.de" date="1439380800">- Correct typo in patch ls-completion-boo889319.patch</changelog>
  <changelog author="werner@suse.de" date="1439467200">- Add patch backtick-completion-boo940835.patch to allow correct
  backtick completion (boo#940835)</changelog>
  <changelog author="werner@suse.de" date="1443009600">- Add patch LVM-completion-bsc946875.patch to make LVM comands
  work even without any scan happen (bsc#946875)</changelog>
  <changelog author="werner@suse.de" date="1450440000">- Add patch respect-variables-boo940837.patch to avoid completions
  which results in e.g. ls \$HO
- Add patch rm-completion-smart-boo958462.patch to allow completions
  list e.g. rm prefix*.jpg&lt;TAB&gt;&lt;TAB&gt;
- Modify patch LVM-completion-bsc946875.patch that is add the
  new patch from Liuhua Wang</changelog>
  <changelog author="werner@suse.de" date="1453896000">- Add patch backticks-bsc963140.patch to handle sub commands
  which will be expanded by backticks (bsc#963140)</changelog>
  <changelog author="werner@suse.de" date="1461758400">- Add documentation for this packages below to get the reference
  of the e.g. the variable COMP_FILEDIR_FALLBACK (boo#977336)</changelog>
  <changelog author="werner@suse.de" date="1461758401">- Add patch sh-script-completion-boo977336.patch to make _filedir
  work with COMP_FILEDIR_FALLBACK even if local directries exists
  this is for bug boo##977336</changelog>
  <changelog author="sbrabec@suse.com" date="1461758402">- Remove completions conflicting with util-linux (boo#977259#c3).</changelog>
  <changelog author="werner@suse.de" date="1463572800">- Split off sub packages devel and doc to avoid dependency cycles</changelog>
  <changelog author="sbrabec@suse.com" date="1463572801">- Split doc build into a separate spec file. It makes possible to
  build package in two stages and prevent build loop.</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Mark the documentation as noarch</changelog>
  <changelog author="werner@suse.de" date="1481716800">- Change upstream home to https://github.com/scop/bash-completion
- Update to version 2.4
  * xetex, xelatex, luatex, lualatex: Associate with tex files
  * Support pod document files for perldoc (#39)
  * tipc: add tipc completions
  * rpm: Offer --filetriggers with -q
  * javadoc: Add bunch of option arg (non)completions
  * lrzip: Add -m arg noncompletion
  * pypy*: Add basic --jit arg completion
  * pypy3: Alias to python
  * hcitool,svcadm,tar: Spelling fixes
  * tipc: Invoke ls with "command"
  * tipc: Indentation fix
  * abook: Parse long options from command including full path
  * pyvenv: New completion
  * chroot: New (generic long options) completion, see #38
  * aptitude: List packages using _apt_cache_packages, fixes #33
  * vncviewer: Cleanup shopt use, drop an eval
  * make: Avoid a grep
  * rpm: Fix --whatenhances arg completion
  * aspell, minicom, mysql: Replace use of ls with printf
  * The BitKeeper completion used the wrong set of commands
  * Completion for python zip archives
  * lvm: pvcreate should be able to use all block devcices
  * lvm: fix all commands that should get all PVs
  * tar: Detect GNU/other from --version only once per session
  * tar: Remove unused variable
  * tar: Fix GNU tar help output parsing regex, fixes #15
  * tar: Don't write to /tmp/jetel
  * python: Simplify code
  * python: Complete all files also after -m
  * python: Don't offer options after -c
  * python: Complete all files only if -c is before current word
  * unzip, zipinfo: Complete on *.pyz
  * _lvm: using a single-pattern case and invoking function according
    to words[1]
  * lvm: _lvm_count_args parameter must be quoted in order to failglob
    not to complain
  * gendiff: Quoting suffix pattern to avoid triggering failglob
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (Alioth:
    [#314709])
  * Refactor bts and uscan, since they use common functions
  * uscan: New completion, thanks to Federico Ceratto
  * bts: New completion, thanks to Federico Ceratto.
  * nmcli completion was integrated upstream
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (take 2)
    (Alioth: #314709)
  * umount: Fix mount points escaping/unescaping with Bash-4.3
  * slapt-src: Handle --config=FILE option properly
  * sbopkg, slapt-{get,src}: expand tilde in config file name
  * slapt-{get,src}: Fix issue with sed not being able to handle some
    characters
  * slapt-src: split options from their arguments
  * psql: Tell psql to not load .psqlrc as it may change output format
    (Alioth: #314636)
  * mplayer: -dvd-devices takes dvd devices, dirs and .iso files as
    argument
  * 7z: Improve completion
  * f77, f95: Use the same completion as for g77, g95 if they are
    links to gfortran
  * make: Use only posix basic regexps with sed (Alioth: #314345)
  * perl: -d/-dt option argument is optional (Alioth: #314242)
  * Add config for cmake to bash-completion.
  * kcov: Add new sort types, complete --replace-src-path arguments
  * feh: Add new sort type
  * man: Use -w instead of --path
  * chronyc: Update help text parsing
  * chronyc: Add missing subcommands
  * chronyc: Add -6 option
  * minicom: Recognize user ~/.minirc.* as config files
  * rpmbuild: Complete *.spec on --clean (RedHat: #1132959)
  * tar: rework the completion completely
  * portsnap: New completion.
  * modprobe: fix params with multi-line descriptions
  * gdb: support --args style completion (Alioth: #314664)
  * make: Fix basic regex for portability (Alioth: #314345)
  * gnokii: New completion
  * xmllint, xmlwf, xsltproc: Complete on Mallard *.page files
  * pypy: New completion identical to python (Alioth: #314501)
  * make: Don't pick up variables when makefile is reloaded
  * make: Offer hidden targets when it is clear that the user is
    trying to complete one of them
  * make: Fix detection of intermediate targets where make has changed
    its database whitespace
  * make: completion shouldn't be confused by the output of $(info
    confuse: make)
  * zopflipng: New completion
  * ssh: Extract duplicate code to _ssh_configfile
  * gnokii, minicom: Use grep through "command"
  * Update URLs and various instructions to GitHub
  * ssh: Avoid completing commands before hostname
  * chronyc: Parse command args from help output
  * chronyc: Wrap long lines
  * Load completions also from $XDG_DATA_DIRS (RedHat: #1264094)
  * (testsuite) Ignore files generated by complete-ant-cmd.pl
  * scp, sftp: Complete -S on commands
  * scp, sftp: Fix querying ssh options
  * sftp: Add -l arg non-completion
  * ssh-copy-id: Offer only *.pub to -i
  * mpv: Remove mplayer-aliased completion
  * modplug*: Associate *.oct and *.okt
  * rpm: Add --whatenhances/recommends/suggests/supplements and
  - -recommends/supplements completions
  * pgrep, pidof, pkill, pwdx, vmstat: Add support for procps-ng
  * pdftotext: New completion
  * checksec: New completion
  * ssh: Complete HostbasedKeyTypes,HostKeyAlgorithms,KexAlgorithms
    values
  * ssh: Query ciphers and macs from ssh before hardcoded fallback
  * ssh: Add -Q argument completion
  * sysctl: Return early on --help, --version
  * sysctl: Try parsing options from help before usage
  * eog: Complete on *.ppm (RedHat: #1090481)
  * tar: Plug $line var leak
  * tar: Style tweaks
  * bsdtar, tar: Remove symlinks from git, have make create them
  * jshint: New completion
  * gnokii: Include and install it
  * gnokii: Fix completions of options that are prefixes for others
  * gnokii: Drop dead code
  * (testsuite): Add basic gnokii test case
  * gnokii: Various minor and cosmetic fixes
  * Load user completions from $BASH_COMPLETION_USER_DIR/completions
  * synclient: New completion
  * tune2fs: Add missing return in -M arg completion
  * reptyr: Rename file to _reptyr to avoid conflict with upstreamed
    completion
  * dropuser: New completion
  * createuser: New completion
  * createdb, dropdb: Drop -o default, it does not appear to do
    anything good here
  * tshark: Simplify cut usage
  * mcrypt: Simplify -m arg completion
  * strings: Fix -T/--target arg completion with non-English locale
  * chrome, firefox etc: Complete on *.pdf
  * ccache: Add -o/--set-config arg name completion
  * gphoto2: Replace tail with awk
  * gphoto2: Fix split argument handing, and colon treatment in --port
    args
  * Actually install the lz4 completion
  * _pnames: Add -s for producing (possibly) truncated names (RedHat:
    [#744406])
  * (testsuite) Add cd in dir without subdirs or CDPATH test case
  * Protect various compgen invocations from -* leakage (Debian:
    [#766163])
  * pigz, unpigz: Handle *.zz
  * rpmbuild: Complete *.spec on --nobuild
  * mplayer, *xine: Complete on *.mts (Debian: #759219)
  * ant: Support buildfile set in $ANT_ARGS (Alioth: #314735)
  * ant: Don't offer more completions after options that exit
  * 7z, adb: Trivial cleanups
  * python(3): Add -X argument non-completion
  * xsltproc. TODO fix for previous commit
  * xmllint, xmlwf, xsltproc: Complete on *.dbk and *.docbook (Alioth:
    [#314770])
  * xz: Complete -T/--threads argument
  * adb: New completion
  * modprobe: Try parsing help before using hardcoding option list
  * mpv: New completion alias + adjustments for mplayer (Debian:
    [#749115])
  * hostname: New completion
  * nslookup: complete on hosts (Alioth: #314673)
  * eog: Complete on *.pgm (RedHat: #1090481)
  * pngfix: New completion
  * qemu: Fix -balloon arg completion
  * qemu: Apply completion to qemu-kvm/-system-i386/-system-x86_64 too
  * xrandr: Use the invoked command internally, not hardcoded "xrandr"
  * xrandr: Add (some) --setprovider* arg completion support
  * ri: Fix class completion with ri &gt;= 3.
  * ri: Fix colon handling in class completion.
  * flake8: New completion
  * pyflakes: New completion
  * cal,chfn,chsh,dmesg,eject,hexdump,look,newgrp,renice,runuser,su,wr
    ite: Deprecate on Linux in favor of util-linux ones (Debian:
    [#737672])
  * hwclock,ionice,rtcwake: Deprecate in favor of util-linux ones
    (Debian: #737672)
  * ssh-keygen: New completion
  * jpegoptim: New completion
  * ip: Add some addr, addrlabel, and route arg completions
  * aptitude, dpkg: Replace some grep+cuts with awk
  * gcc, lintian, make, pkgadd, slackpkg: grep -&gt; "command grep"
    (Debian: #734095)
  * lintian: Replace some grep+cuts with awk
  * lz4: New completion.
  * optipng: New completion.
  * cppcheck: Include - in --file-list completions.
  * wtf: Look for acronym db from /usr/share/games/bsdgames/acronyms
    too.
  * wtf: Don't offer -f if it was already specified.
  * wtf: Hush stderr when db file doesn't exist.
  * appdata-validate: New completion.
  * timeout: New completion.
  * abook, kldunload: Pre-expand \t instead of relying on sed
    supporting it.
  * dict: Trivial regex cleanup.
  * zopfli: New completion.
  * bzip2, gzip, lzma: Cleanups.
  * 2to3: New completion.
  * file-roller: Reuse unzip's xspec.
  * 7z: New completion.
  * hcitool, rfcomm, ciptool, hciconfig: Don't leak $args.
  * perl: Fix -dt: completion.
  * perl*: Fix handling of relative paths in @INC.
  * wget: Add --accept-regex/--reject-regex/--regex-type arg
    (non)completions.
  * wget: Drop incorrect -nv arg completion.
  * wget: Stop completing after --help/--version.
  * Clean up/compact various globs.
  * cvs: Fix checkout -j non-completion.
  * sh: Complete script arguments with all filenames (Alioth:
    [#314226]).
  * nmcli: Deprecate our completion, upstream has one in 0.9.8.0.
  * cvs rm: Don't filter existing files with -f (RedHat: #949479).
- Drop patches now upstream
  init-completion-boo922758.patch
  pushd-completion-bnc818365.patch
- Rename patches
  bash-completion-2.1.patch becomes bash-completion-2.4.patch
- Port the patches to newer version 2.4
  FOO-dir-completion-boo905348.patch
  LVM-completion-bsc946875.patch
  PS1-completion-boo903362.patch
  backtick-completion-boo940835.patch
  backticks-bsc963140.patch
  ls-completion-boo889319.patch
  respect-variables-boo940837.patch
  rm-completion-smart-boo958462.patch
  sh-script-completion-boo977336.patch
- Only remove completion for umount/mount for older SUSE versions (boo#995045)</changelog>
  <changelog author="werner@suse.de" date="1481716801">- Add patch tar-completion.patch to allow mixed options with long
  and short options (boo#1012212)</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Fix cut&amp;paste error in final ls completion</changelog>
  <changelog author="werner@suse.de" date="1481803201">- Detect if the completions for mount/umount have to be removed
  for modern util-linux package but without using suse_version</changelog>
  <changelog author="nico.kruber@gmail.com" date="1496145600">- Update to version 2.5
  * Support for python gui source files (#91)
  * mr: New completion
  * ssh-keygen: support ed25519 keys (#79)
  * Add sidedoor to _ssh() completion (#106)
  * .ipa is just a zip file and we should let unzip handle it (#71)
  * ant: parse targets in imported buildfiles (#84)
  * Add more tests for ccache
  * ccache: fix completing compiler's flags
  * test suite: Add java/javac non-completion fixture
  * javac: Complete -cp like -classpath
  * travis: Skip bluez and nis for now due to post-install script
    issues
  * test/config/*: Delete trailing whitespace
  * (test suite): Avoid loading user's ~/.bash_completion, fixes #87
  * ip: Recognize a as alias for address and l for link
  * ip: Recognize address in addition to addr
  * mr: Disable "clean" test case, command N/A before mr 1.20141023
  * ssh-keygen: Parse switches with _parse_usage, not _parse_help
  * mplayer: Associate with *.mjpg, *.mjpeg (Debian: #837779)
  * dd: Sync completions with coreutils 8.24
  * travis: Add mr
  * perl: Remove full path to cat in PERLDOC_PAGER call
  * deja-dup: New completion
  * CONTRIBUTING: Reorder sections
  * *: Move indentation settings to .editorconfig
  * make: Declare _make_target_extract_script like other functions
  * Travis: zopfli is AWOL?
  * *: Whitespace fixes
  * Minor edits to README.md (mostly formatting) (#110)
  * Fix bug in 'make' completion when using BSD sed (#108)
  * Add support for Include in ssh config (#70) (#80)
- adapt LVM-completion-bsc946875.patch</changelog>
  <changelog author="werner@suse.de" date="1499169600">- Update to version 2.7
  * Makefile: update default compatdir (#132)
  * Make user completion file configurable, disable in tests
  * test suite: Generalize xspec completion install check
  * pyflakes: Remove redundant xspec completion
  * test suite: Fix __expand_tilde_by_ref test expectation output
  * pdfunite: New *.pdf completion
  + bash-completion (2.6)
  * Add missing sidedoor to .gitignore (#114)
  * test suite: Mark expected centos6 CI _filedir failures as such
  * Expose version in BASH_COMPLETION_VERSINFO, use it in profile.d
    script
  * test suite: Skip an expected make test case failure in centos6 CI
  * test suite: Fix ifdown and ifup CI test skipping
  * test suite: Ignore env var pulled in by use of scp in tests
  * test suite: If colon trim doesn't do anything, trim as usual
  * tar: Comment spelling fixes
  * test suite: Mark dpkg -L test case untested if no packages
    installed
  * test suite: Cosmetic tweaks
  * dpkg: Fix dpkg -i home dir completion
  * test suite: Improve ls home dir test descriptions
  * python: Split module completion to separate helper
  * micropython: New completion, aliased from python
  * test suite: Add Python module completion test case
  * python: Fix traceback avoidance on module completion error
  * openssl: Parse available digests from dgst -h
  * openssl: Add sha2 commands
  * gm: New completion, commands only for now
  * (test suite): Test screen -T completions
  * (test suite): Set TERM to dumb, not dummy
  * Revert "(test suite): Fix alias and cd cursor position tests"
  * mplayer: Remove duplicate *.m4a and *.m4v associations
  * mplayer, xine, etc: Associate *.mp4a and *.mp4v
  * xine etc: Fix *.m4a association
  * bind: Add option and argument (non-)completions
  * _user_at_host: Set nospace only when completing username part
  * _user_at_host: Append @ suffix to username part completions
  * man: Don't check OSTYPE or GNU userland, just enable on all
    systems
  * (test suite): Set dcop result to untested if dcop server is not
    running
  * (test suite): Don't insist on loading all completions dynamically
  * _configured_interfaces: Parse from /etc/network/interfaces.d/* on
    Debian
  * py.test: New completion
  * oowriter: Associate with *.pdf
  * Don't define BASH_COMPLETION_COMPAT_DIR
  * ri: Add option and arg completions
  * (test suite): Add our own dummy ri test fixture
  * (test suite): Info test needs docs, don't exclude from CentOS
  * (test suite): Fix CentOS 6 tcllib setup
  * (test suite): Simplify renice test, fix with only one completion
  * (test suite): Don't assume configured interfaces in CI setups
  * Don't offer * as configured interface when there are none
  * (test suite): Add basic CentOS 6 container for bash 4.1 coverage
  * (test suite): Ignore runtime loaded env function changes
  * (test suite): Add mailman bin dir to PATH for arch test
  * arch: Parse options from --help
  * (test suite): Load tested completions dynamically
  * (test suite): Accept non-whitespace single word in
    assert_complete_any
  * (test suite): Avoid interference from user and system dirs (#87)
  * (test suite): Install some things N/A in ubuntu14 to fedoradev
  * (test suite): Add unrar to ubuntu14 container
  * (test suite): Fix alias and cd cursor position tests
  * (test suite): Add basic alpine test case
  * alpine: Parse opts from -h output, add some opt arg completions
  * (test suite): Install jshint globally in ubuntu14
  * (test suite): Add mailman bin dir to PATH for some mailman tools
  * (test suite): Install jshint to ubuntu14 container with npm
  * unshunt: Parse options from --help
  * (test suite): Test lsof on ubuntu14
  * (test suite): Add basic hping3 test case
  * (test suite): Add our ./configure to PATH to test it, test opts
  * (test suite): Add bunch of packages to ubuntu14 container
  * (test suite): Ensure /usr/(local/)games is in $PATH
  * (test suite): Fix perl -d* test cases with no Devel::* installed
  * (test suite): curl has lots of options, add more test prefix
  * (test suite): Fix tar test case for ones having --owner-map
  * (test suite): Unsupport various kill, renice cases if ps is N/A
  * (test suite): Make chkconfig test behave better in container
  * (test suite): Don't assume mounted filesystems in quota* tests
  * newlist: Parse options from --help, add some arg non-completions
  * (test suite): Delete trailing whitespace
  * (test suite): Don't assume lists set up in newlist test cases
  * (docker): Pull in missing fedoradev xvfb-run which dependency
  * mr: Avoid stderr trash and test suite failure if man is N/A
  * (test suite): Fix mmsitepass completion test
  * tshark -G: Avoid stderr noise when running as superuser
  * (docker): Run completion tests with xvfb-run, e.g. for gkrellm
  * ssh-keygen: Make option parsing work with OpenSSH &lt; 7
  * synclient, udevadm: Avoid use of posix char classes for awk
  * test suite: Add WIP Fedora dev config
  * Travis: Switch tests to docker, update to Ubuntu 14
  * xv: Associate with *.j2c, *.j2k, *.jp2, *.jpf, and *.jpg2 (Debian:
    [#859774])
  * eog: Associate with *.j2c and *.jpg2
  * Bump copyright years
  * xine etc: Associate uppercase *.WM[AV]
  * mplayer: Associate *.weba (#112)
  * xine etc: Associate *.webm and *.weba (#112)
- Modify patches
  * FOO-dir-completion-boo905348.patch
  * PS1-completion-boo903362.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion.changes
  * bash-completion.spec
  * ls-completion-boo889319.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * sh-script-completion-boo977336.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Remove rfkill conflicting with util-linux-2.31.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1540209600">- Modify patch PS1-completion-boo903362.patch to make it work with
  mksh as well (boo#1104531)</changelog>
</package>
<package pkgid="6558da4c01f311523dd20af540e783786931e1180da41978283b618284acf499" name="bash-completion" arch="src">
  <version epoch="0" ver="2.7" rel="lp150.3.3.1"/>
  <changelog author="werner@suse.de" date="1434369600">- Add patch ls-completion-boo889319.patch to make ls completion
  more smart (boo#889319)</changelog>
  <changelog author="werner@suse.de" date="1439380800">- Correct typo in patch ls-completion-boo889319.patch</changelog>
  <changelog author="werner@suse.de" date="1439467200">- Add patch backtick-completion-boo940835.patch to allow correct
  backtick completion (boo#940835)</changelog>
  <changelog author="werner@suse.de" date="1443009600">- Add patch LVM-completion-bsc946875.patch to make LVM comands
  work even without any scan happen (bsc#946875)</changelog>
  <changelog author="werner@suse.de" date="1450440000">- Add patch respect-variables-boo940837.patch to avoid completions
  which results in e.g. ls \$HO
- Add patch rm-completion-smart-boo958462.patch to allow completions
  list e.g. rm prefix*.jpg&lt;TAB&gt;&lt;TAB&gt;
- Modify patch LVM-completion-bsc946875.patch that is add the
  new patch from Liuhua Wang</changelog>
  <changelog author="werner@suse.de" date="1453896000">- Add patch backticks-bsc963140.patch to handle sub commands
  which will be expanded by backticks (bsc#963140)</changelog>
  <changelog author="werner@suse.de" date="1461758400">- Add documentation for this packages below to get the reference
  of the e.g. the variable COMP_FILEDIR_FALLBACK (boo#977336)</changelog>
  <changelog author="werner@suse.de" date="1461758401">- Add patch sh-script-completion-boo977336.patch to make _filedir
  work with COMP_FILEDIR_FALLBACK even if local directries exists
  this is for bug boo##977336</changelog>
  <changelog author="sbrabec@suse.com" date="1461758402">- Remove completions conflicting with util-linux (boo#977259#c3).</changelog>
  <changelog author="werner@suse.de" date="1463572800">- Split off sub packages devel and doc to avoid dependency cycles</changelog>
  <changelog author="sbrabec@suse.com" date="1463572801">- Split doc build into a separate spec file. It makes possible to
  build package in two stages and prevent build loop.</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Mark the documentation as noarch</changelog>
  <changelog author="werner@suse.de" date="1481716800">- Change upstream home to https://github.com/scop/bash-completion
- Update to version 2.4
  * xetex, xelatex, luatex, lualatex: Associate with tex files
  * Support pod document files for perldoc (#39)
  * tipc: add tipc completions
  * rpm: Offer --filetriggers with -q
  * javadoc: Add bunch of option arg (non)completions
  * lrzip: Add -m arg noncompletion
  * pypy*: Add basic --jit arg completion
  * pypy3: Alias to python
  * hcitool,svcadm,tar: Spelling fixes
  * tipc: Invoke ls with "command"
  * tipc: Indentation fix
  * abook: Parse long options from command including full path
  * pyvenv: New completion
  * chroot: New (generic long options) completion, see #38
  * aptitude: List packages using _apt_cache_packages, fixes #33
  * vncviewer: Cleanup shopt use, drop an eval
  * make: Avoid a grep
  * rpm: Fix --whatenhances arg completion
  * aspell, minicom, mysql: Replace use of ls with printf
  * The BitKeeper completion used the wrong set of commands
  * Completion for python zip archives
  * lvm: pvcreate should be able to use all block devcices
  * lvm: fix all commands that should get all PVs
  * tar: Detect GNU/other from --version only once per session
  * tar: Remove unused variable
  * tar: Fix GNU tar help output parsing regex, fixes #15
  * tar: Don't write to /tmp/jetel
  * python: Simplify code
  * python: Complete all files also after -m
  * python: Don't offer options after -c
  * python: Complete all files only if -c is before current word
  * unzip, zipinfo: Complete on *.pyz
  * _lvm: using a single-pattern case and invoking function according
    to words[1]
  * lvm: _lvm_count_args parameter must be quoted in order to failglob
    not to complain
  * gendiff: Quoting suffix pattern to avoid triggering failglob
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (Alioth:
    [#314709])
  * Refactor bts and uscan, since they use common functions
  * uscan: New completion, thanks to Federico Ceratto
  * bts: New completion, thanks to Federico Ceratto.
  * nmcli completion was integrated upstream
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (take 2)
    (Alioth: #314709)
  * umount: Fix mount points escaping/unescaping with Bash-4.3
  * slapt-src: Handle --config=FILE option properly
  * sbopkg, slapt-{get,src}: expand tilde in config file name
  * slapt-{get,src}: Fix issue with sed not being able to handle some
    characters
  * slapt-src: split options from their arguments
  * psql: Tell psql to not load .psqlrc as it may change output format
    (Alioth: #314636)
  * mplayer: -dvd-devices takes dvd devices, dirs and .iso files as
    argument
  * 7z: Improve completion
  * f77, f95: Use the same completion as for g77, g95 if they are
    links to gfortran
  * make: Use only posix basic regexps with sed (Alioth: #314345)
  * perl: -d/-dt option argument is optional (Alioth: #314242)
  * Add config for cmake to bash-completion.
  * kcov: Add new sort types, complete --replace-src-path arguments
  * feh: Add new sort type
  * man: Use -w instead of --path
  * chronyc: Update help text parsing
  * chronyc: Add missing subcommands
  * chronyc: Add -6 option
  * minicom: Recognize user ~/.minirc.* as config files
  * rpmbuild: Complete *.spec on --clean (RedHat: #1132959)
  * tar: rework the completion completely
  * portsnap: New completion.
  * modprobe: fix params with multi-line descriptions
  * gdb: support --args style completion (Alioth: #314664)
  * make: Fix basic regex for portability (Alioth: #314345)
  * gnokii: New completion
  * xmllint, xmlwf, xsltproc: Complete on Mallard *.page files
  * pypy: New completion identical to python (Alioth: #314501)
  * make: Don't pick up variables when makefile is reloaded
  * make: Offer hidden targets when it is clear that the user is
    trying to complete one of them
  * make: Fix detection of intermediate targets where make has changed
    its database whitespace
  * make: completion shouldn't be confused by the output of $(info
    confuse: make)
  * zopflipng: New completion
  * ssh: Extract duplicate code to _ssh_configfile
  * gnokii, minicom: Use grep through "command"
  * Update URLs and various instructions to GitHub
  * ssh: Avoid completing commands before hostname
  * chronyc: Parse command args from help output
  * chronyc: Wrap long lines
  * Load completions also from $XDG_DATA_DIRS (RedHat: #1264094)
  * (testsuite) Ignore files generated by complete-ant-cmd.pl
  * scp, sftp: Complete -S on commands
  * scp, sftp: Fix querying ssh options
  * sftp: Add -l arg non-completion
  * ssh-copy-id: Offer only *.pub to -i
  * mpv: Remove mplayer-aliased completion
  * modplug*: Associate *.oct and *.okt
  * rpm: Add --whatenhances/recommends/suggests/supplements and
  - -recommends/supplements completions
  * pgrep, pidof, pkill, pwdx, vmstat: Add support for procps-ng
  * pdftotext: New completion
  * checksec: New completion
  * ssh: Complete HostbasedKeyTypes,HostKeyAlgorithms,KexAlgorithms
    values
  * ssh: Query ciphers and macs from ssh before hardcoded fallback
  * ssh: Add -Q argument completion
  * sysctl: Return early on --help, --version
  * sysctl: Try parsing options from help before usage
  * eog: Complete on *.ppm (RedHat: #1090481)
  * tar: Plug $line var leak
  * tar: Style tweaks
  * bsdtar, tar: Remove symlinks from git, have make create them
  * jshint: New completion
  * gnokii: Include and install it
  * gnokii: Fix completions of options that are prefixes for others
  * gnokii: Drop dead code
  * (testsuite): Add basic gnokii test case
  * gnokii: Various minor and cosmetic fixes
  * Load user completions from $BASH_COMPLETION_USER_DIR/completions
  * synclient: New completion
  * tune2fs: Add missing return in -M arg completion
  * reptyr: Rename file to _reptyr to avoid conflict with upstreamed
    completion
  * dropuser: New completion
  * createuser: New completion
  * createdb, dropdb: Drop -o default, it does not appear to do
    anything good here
  * tshark: Simplify cut usage
  * mcrypt: Simplify -m arg completion
  * strings: Fix -T/--target arg completion with non-English locale
  * chrome, firefox etc: Complete on *.pdf
  * ccache: Add -o/--set-config arg name completion
  * gphoto2: Replace tail with awk
  * gphoto2: Fix split argument handing, and colon treatment in --port
    args
  * Actually install the lz4 completion
  * _pnames: Add -s for producing (possibly) truncated names (RedHat:
    [#744406])
  * (testsuite) Add cd in dir without subdirs or CDPATH test case
  * Protect various compgen invocations from -* leakage (Debian:
    [#766163])
  * pigz, unpigz: Handle *.zz
  * rpmbuild: Complete *.spec on --nobuild
  * mplayer, *xine: Complete on *.mts (Debian: #759219)
  * ant: Support buildfile set in $ANT_ARGS (Alioth: #314735)
  * ant: Don't offer more completions after options that exit
  * 7z, adb: Trivial cleanups
  * python(3): Add -X argument non-completion
  * xsltproc. TODO fix for previous commit
  * xmllint, xmlwf, xsltproc: Complete on *.dbk and *.docbook (Alioth:
    [#314770])
  * xz: Complete -T/--threads argument
  * adb: New completion
  * modprobe: Try parsing help before using hardcoding option list
  * mpv: New completion alias + adjustments for mplayer (Debian:
    [#749115])
  * hostname: New completion
  * nslookup: complete on hosts (Alioth: #314673)
  * eog: Complete on *.pgm (RedHat: #1090481)
  * pngfix: New completion
  * qemu: Fix -balloon arg completion
  * qemu: Apply completion to qemu-kvm/-system-i386/-system-x86_64 too
  * xrandr: Use the invoked command internally, not hardcoded "xrandr"
  * xrandr: Add (some) --setprovider* arg completion support
  * ri: Fix class completion with ri &gt;= 3.
  * ri: Fix colon handling in class completion.
  * flake8: New completion
  * pyflakes: New completion
  * cal,chfn,chsh,dmesg,eject,hexdump,look,newgrp,renice,runuser,su,wr
    ite: Deprecate on Linux in favor of util-linux ones (Debian:
    [#737672])
  * hwclock,ionice,rtcwake: Deprecate in favor of util-linux ones
    (Debian: #737672)
  * ssh-keygen: New completion
  * jpegoptim: New completion
  * ip: Add some addr, addrlabel, and route arg completions
  * aptitude, dpkg: Replace some grep+cuts with awk
  * gcc, lintian, make, pkgadd, slackpkg: grep -&gt; "command grep"
    (Debian: #734095)
  * lintian: Replace some grep+cuts with awk
  * lz4: New completion.
  * optipng: New completion.
  * cppcheck: Include - in --file-list completions.
  * wtf: Look for acronym db from /usr/share/games/bsdgames/acronyms
    too.
  * wtf: Don't offer -f if it was already specified.
  * wtf: Hush stderr when db file doesn't exist.
  * appdata-validate: New completion.
  * timeout: New completion.
  * abook, kldunload: Pre-expand \t instead of relying on sed
    supporting it.
  * dict: Trivial regex cleanup.
  * zopfli: New completion.
  * bzip2, gzip, lzma: Cleanups.
  * 2to3: New completion.
  * file-roller: Reuse unzip's xspec.
  * 7z: New completion.
  * hcitool, rfcomm, ciptool, hciconfig: Don't leak $args.
  * perl: Fix -dt: completion.
  * perl*: Fix handling of relative paths in @INC.
  * wget: Add --accept-regex/--reject-regex/--regex-type arg
    (non)completions.
  * wget: Drop incorrect -nv arg completion.
  * wget: Stop completing after --help/--version.
  * Clean up/compact various globs.
  * cvs: Fix checkout -j non-completion.
  * sh: Complete script arguments with all filenames (Alioth:
    [#314226]).
  * nmcli: Deprecate our completion, upstream has one in 0.9.8.0.
  * cvs rm: Don't filter existing files with -f (RedHat: #949479).
- Drop patches now upstream
  init-completion-boo922758.patch
  pushd-completion-bnc818365.patch
- Rename patches
  bash-completion-2.1.patch becomes bash-completion-2.4.patch
- Port the patches to newer version 2.4
  FOO-dir-completion-boo905348.patch
  LVM-completion-bsc946875.patch
  PS1-completion-boo903362.patch
  backtick-completion-boo940835.patch
  backticks-bsc963140.patch
  ls-completion-boo889319.patch
  respect-variables-boo940837.patch
  rm-completion-smart-boo958462.patch
  sh-script-completion-boo977336.patch
- Only remove completion for umount/mount for older SUSE versions (boo#995045)</changelog>
  <changelog author="werner@suse.de" date="1481716801">- Add patch tar-completion.patch to allow mixed options with long
  and short options (boo#1012212)</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Fix cut&amp;paste error in final ls completion</changelog>
  <changelog author="werner@suse.de" date="1481803201">- Detect if the completions for mount/umount have to be removed
  for modern util-linux package but without using suse_version</changelog>
  <changelog author="nico.kruber@gmail.com" date="1496145600">- Update to version 2.5
  * Support for python gui source files (#91)
  * mr: New completion
  * ssh-keygen: support ed25519 keys (#79)
  * Add sidedoor to _ssh() completion (#106)
  * .ipa is just a zip file and we should let unzip handle it (#71)
  * ant: parse targets in imported buildfiles (#84)
  * Add more tests for ccache
  * ccache: fix completing compiler's flags
  * test suite: Add java/javac non-completion fixture
  * javac: Complete -cp like -classpath
  * travis: Skip bluez and nis for now due to post-install script
    issues
  * test/config/*: Delete trailing whitespace
  * (test suite): Avoid loading user's ~/.bash_completion, fixes #87
  * ip: Recognize a as alias for address and l for link
  * ip: Recognize address in addition to addr
  * mr: Disable "clean" test case, command N/A before mr 1.20141023
  * ssh-keygen: Parse switches with _parse_usage, not _parse_help
  * mplayer: Associate with *.mjpg, *.mjpeg (Debian: #837779)
  * dd: Sync completions with coreutils 8.24
  * travis: Add mr
  * perl: Remove full path to cat in PERLDOC_PAGER call
  * deja-dup: New completion
  * CONTRIBUTING: Reorder sections
  * *: Move indentation settings to .editorconfig
  * make: Declare _make_target_extract_script like other functions
  * Travis: zopfli is AWOL?
  * *: Whitespace fixes
  * Minor edits to README.md (mostly formatting) (#110)
  * Fix bug in 'make' completion when using BSD sed (#108)
  * Add support for Include in ssh config (#70) (#80)
- adapt LVM-completion-bsc946875.patch</changelog>
  <changelog author="werner@suse.de" date="1499169600">- Update to version 2.7
  * Makefile: update default compatdir (#132)
  * Make user completion file configurable, disable in tests
  * test suite: Generalize xspec completion install check
  * pyflakes: Remove redundant xspec completion
  * test suite: Fix __expand_tilde_by_ref test expectation output
  * pdfunite: New *.pdf completion
  + bash-completion (2.6)
  * Add missing sidedoor to .gitignore (#114)
  * test suite: Mark expected centos6 CI _filedir failures as such
  * Expose version in BASH_COMPLETION_VERSINFO, use it in profile.d
    script
  * test suite: Skip an expected make test case failure in centos6 CI
  * test suite: Fix ifdown and ifup CI test skipping
  * test suite: Ignore env var pulled in by use of scp in tests
  * test suite: If colon trim doesn't do anything, trim as usual
  * tar: Comment spelling fixes
  * test suite: Mark dpkg -L test case untested if no packages
    installed
  * test suite: Cosmetic tweaks
  * dpkg: Fix dpkg -i home dir completion
  * test suite: Improve ls home dir test descriptions
  * python: Split module completion to separate helper
  * micropython: New completion, aliased from python
  * test suite: Add Python module completion test case
  * python: Fix traceback avoidance on module completion error
  * openssl: Parse available digests from dgst -h
  * openssl: Add sha2 commands
  * gm: New completion, commands only for now
  * (test suite): Test screen -T completions
  * (test suite): Set TERM to dumb, not dummy
  * Revert "(test suite): Fix alias and cd cursor position tests"
  * mplayer: Remove duplicate *.m4a and *.m4v associations
  * mplayer, xine, etc: Associate *.mp4a and *.mp4v
  * xine etc: Fix *.m4a association
  * bind: Add option and argument (non-)completions
  * _user_at_host: Set nospace only when completing username part
  * _user_at_host: Append @ suffix to username part completions
  * man: Don't check OSTYPE or GNU userland, just enable on all
    systems
  * (test suite): Set dcop result to untested if dcop server is not
    running
  * (test suite): Don't insist on loading all completions dynamically
  * _configured_interfaces: Parse from /etc/network/interfaces.d/* on
    Debian
  * py.test: New completion
  * oowriter: Associate with *.pdf
  * Don't define BASH_COMPLETION_COMPAT_DIR
  * ri: Add option and arg completions
  * (test suite): Add our own dummy ri test fixture
  * (test suite): Info test needs docs, don't exclude from CentOS
  * (test suite): Fix CentOS 6 tcllib setup
  * (test suite): Simplify renice test, fix with only one completion
  * (test suite): Don't assume configured interfaces in CI setups
  * Don't offer * as configured interface when there are none
  * (test suite): Add basic CentOS 6 container for bash 4.1 coverage
  * (test suite): Ignore runtime loaded env function changes
  * (test suite): Add mailman bin dir to PATH for arch test
  * arch: Parse options from --help
  * (test suite): Load tested completions dynamically
  * (test suite): Accept non-whitespace single word in
    assert_complete_any
  * (test suite): Avoid interference from user and system dirs (#87)
  * (test suite): Install some things N/A in ubuntu14 to fedoradev
  * (test suite): Add unrar to ubuntu14 container
  * (test suite): Fix alias and cd cursor position tests
  * (test suite): Add basic alpine test case
  * alpine: Parse opts from -h output, add some opt arg completions
  * (test suite): Install jshint globally in ubuntu14
  * (test suite): Add mailman bin dir to PATH for some mailman tools
  * (test suite): Install jshint to ubuntu14 container with npm
  * unshunt: Parse options from --help
  * (test suite): Test lsof on ubuntu14
  * (test suite): Add basic hping3 test case
  * (test suite): Add our ./configure to PATH to test it, test opts
  * (test suite): Add bunch of packages to ubuntu14 container
  * (test suite): Ensure /usr/(local/)games is in $PATH
  * (test suite): Fix perl -d* test cases with no Devel::* installed
  * (test suite): curl has lots of options, add more test prefix
  * (test suite): Fix tar test case for ones having --owner-map
  * (test suite): Unsupport various kill, renice cases if ps is N/A
  * (test suite): Make chkconfig test behave better in container
  * (test suite): Don't assume mounted filesystems in quota* tests
  * newlist: Parse options from --help, add some arg non-completions
  * (test suite): Delete trailing whitespace
  * (test suite): Don't assume lists set up in newlist test cases
  * (docker): Pull in missing fedoradev xvfb-run which dependency
  * mr: Avoid stderr trash and test suite failure if man is N/A
  * (test suite): Fix mmsitepass completion test
  * tshark -G: Avoid stderr noise when running as superuser
  * (docker): Run completion tests with xvfb-run, e.g. for gkrellm
  * ssh-keygen: Make option parsing work with OpenSSH &lt; 7
  * synclient, udevadm: Avoid use of posix char classes for awk
  * test suite: Add WIP Fedora dev config
  * Travis: Switch tests to docker, update to Ubuntu 14
  * xv: Associate with *.j2c, *.j2k, *.jp2, *.jpf, and *.jpg2 (Debian:
    [#859774])
  * eog: Associate with *.j2c and *.jpg2
  * Bump copyright years
  * xine etc: Associate uppercase *.WM[AV]
  * mplayer: Associate *.weba (#112)
  * xine etc: Associate *.webm and *.weba (#112)
- Modify patches
  * FOO-dir-completion-boo905348.patch
  * PS1-completion-boo903362.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion.changes
  * bash-completion.spec
  * ls-completion-boo889319.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * sh-script-completion-boo977336.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Remove rfkill conflicting with util-linux-2.31.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1540209600">- Modify patch PS1-completion-boo903362.patch to make it work with
  mksh as well (boo#1104531)</changelog>
</package>
<package pkgid="c30a32dfc4e033319c1675d1a87d591c2fc7e21c5bced79daf62a7cd2a57fb88" name="bash-completion-devel" arch="noarch">
  <version epoch="0" ver="2.7" rel="lp150.3.3.1"/>
  <changelog author="werner@suse.de" date="1434369600">- Add patch ls-completion-boo889319.patch to make ls completion
  more smart (boo#889319)</changelog>
  <changelog author="werner@suse.de" date="1439380800">- Correct typo in patch ls-completion-boo889319.patch</changelog>
  <changelog author="werner@suse.de" date="1439467200">- Add patch backtick-completion-boo940835.patch to allow correct
  backtick completion (boo#940835)</changelog>
  <changelog author="werner@suse.de" date="1443009600">- Add patch LVM-completion-bsc946875.patch to make LVM comands
  work even without any scan happen (bsc#946875)</changelog>
  <changelog author="werner@suse.de" date="1450440000">- Add patch respect-variables-boo940837.patch to avoid completions
  which results in e.g. ls \$HO
- Add patch rm-completion-smart-boo958462.patch to allow completions
  list e.g. rm prefix*.jpg&lt;TAB&gt;&lt;TAB&gt;
- Modify patch LVM-completion-bsc946875.patch that is add the
  new patch from Liuhua Wang</changelog>
  <changelog author="werner@suse.de" date="1453896000">- Add patch backticks-bsc963140.patch to handle sub commands
  which will be expanded by backticks (bsc#963140)</changelog>
  <changelog author="werner@suse.de" date="1461758400">- Add documentation for this packages below to get the reference
  of the e.g. the variable COMP_FILEDIR_FALLBACK (boo#977336)</changelog>
  <changelog author="werner@suse.de" date="1461758401">- Add patch sh-script-completion-boo977336.patch to make _filedir
  work with COMP_FILEDIR_FALLBACK even if local directries exists
  this is for bug boo##977336</changelog>
  <changelog author="sbrabec@suse.com" date="1461758402">- Remove completions conflicting with util-linux (boo#977259#c3).</changelog>
  <changelog author="werner@suse.de" date="1463572800">- Split off sub packages devel and doc to avoid dependency cycles</changelog>
  <changelog author="sbrabec@suse.com" date="1463572801">- Split doc build into a separate spec file. It makes possible to
  build package in two stages and prevent build loop.</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Mark the documentation as noarch</changelog>
  <changelog author="werner@suse.de" date="1481716800">- Change upstream home to https://github.com/scop/bash-completion
- Update to version 2.4
  * xetex, xelatex, luatex, lualatex: Associate with tex files
  * Support pod document files for perldoc (#39)
  * tipc: add tipc completions
  * rpm: Offer --filetriggers with -q
  * javadoc: Add bunch of option arg (non)completions
  * lrzip: Add -m arg noncompletion
  * pypy*: Add basic --jit arg completion
  * pypy3: Alias to python
  * hcitool,svcadm,tar: Spelling fixes
  * tipc: Invoke ls with "command"
  * tipc: Indentation fix
  * abook: Parse long options from command including full path
  * pyvenv: New completion
  * chroot: New (generic long options) completion, see #38
  * aptitude: List packages using _apt_cache_packages, fixes #33
  * vncviewer: Cleanup shopt use, drop an eval
  * make: Avoid a grep
  * rpm: Fix --whatenhances arg completion
  * aspell, minicom, mysql: Replace use of ls with printf
  * The BitKeeper completion used the wrong set of commands
  * Completion for python zip archives
  * lvm: pvcreate should be able to use all block devcices
  * lvm: fix all commands that should get all PVs
  * tar: Detect GNU/other from --version only once per session
  * tar: Remove unused variable
  * tar: Fix GNU tar help output parsing regex, fixes #15
  * tar: Don't write to /tmp/jetel
  * python: Simplify code
  * python: Complete all files also after -m
  * python: Don't offer options after -c
  * python: Complete all files only if -c is before current word
  * unzip, zipinfo: Complete on *.pyz
  * _lvm: using a single-pattern case and invoking function according
    to words[1]
  * lvm: _lvm_count_args parameter must be quoted in order to failglob
    not to complain
  * gendiff: Quoting suffix pattern to avoid triggering failglob
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (Alioth:
    [#314709])
  * Refactor bts and uscan, since they use common functions
  * uscan: New completion, thanks to Federico Ceratto
  * bts: New completion, thanks to Federico Ceratto.
  * nmcli completion was integrated upstream
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (take 2)
    (Alioth: #314709)
  * umount: Fix mount points escaping/unescaping with Bash-4.3
  * slapt-src: Handle --config=FILE option properly
  * sbopkg, slapt-{get,src}: expand tilde in config file name
  * slapt-{get,src}: Fix issue with sed not being able to handle some
    characters
  * slapt-src: split options from their arguments
  * psql: Tell psql to not load .psqlrc as it may change output format
    (Alioth: #314636)
  * mplayer: -dvd-devices takes dvd devices, dirs and .iso files as
    argument
  * 7z: Improve completion
  * f77, f95: Use the same completion as for g77, g95 if they are
    links to gfortran
  * make: Use only posix basic regexps with sed (Alioth: #314345)
  * perl: -d/-dt option argument is optional (Alioth: #314242)
  * Add config for cmake to bash-completion.
  * kcov: Add new sort types, complete --replace-src-path arguments
  * feh: Add new sort type
  * man: Use -w instead of --path
  * chronyc: Update help text parsing
  * chronyc: Add missing subcommands
  * chronyc: Add -6 option
  * minicom: Recognize user ~/.minirc.* as config files
  * rpmbuild: Complete *.spec on --clean (RedHat: #1132959)
  * tar: rework the completion completely
  * portsnap: New completion.
  * modprobe: fix params with multi-line descriptions
  * gdb: support --args style completion (Alioth: #314664)
  * make: Fix basic regex for portability (Alioth: #314345)
  * gnokii: New completion
  * xmllint, xmlwf, xsltproc: Complete on Mallard *.page files
  * pypy: New completion identical to python (Alioth: #314501)
  * make: Don't pick up variables when makefile is reloaded
  * make: Offer hidden targets when it is clear that the user is
    trying to complete one of them
  * make: Fix detection of intermediate targets where make has changed
    its database whitespace
  * make: completion shouldn't be confused by the output of $(info
    confuse: make)
  * zopflipng: New completion
  * ssh: Extract duplicate code to _ssh_configfile
  * gnokii, minicom: Use grep through "command"
  * Update URLs and various instructions to GitHub
  * ssh: Avoid completing commands before hostname
  * chronyc: Parse command args from help output
  * chronyc: Wrap long lines
  * Load completions also from $XDG_DATA_DIRS (RedHat: #1264094)
  * (testsuite) Ignore files generated by complete-ant-cmd.pl
  * scp, sftp: Complete -S on commands
  * scp, sftp: Fix querying ssh options
  * sftp: Add -l arg non-completion
  * ssh-copy-id: Offer only *.pub to -i
  * mpv: Remove mplayer-aliased completion
  * modplug*: Associate *.oct and *.okt
  * rpm: Add --whatenhances/recommends/suggests/supplements and
  - -recommends/supplements completions
  * pgrep, pidof, pkill, pwdx, vmstat: Add support for procps-ng
  * pdftotext: New completion
  * checksec: New completion
  * ssh: Complete HostbasedKeyTypes,HostKeyAlgorithms,KexAlgorithms
    values
  * ssh: Query ciphers and macs from ssh before hardcoded fallback
  * ssh: Add -Q argument completion
  * sysctl: Return early on --help, --version
  * sysctl: Try parsing options from help before usage
  * eog: Complete on *.ppm (RedHat: #1090481)
  * tar: Plug $line var leak
  * tar: Style tweaks
  * bsdtar, tar: Remove symlinks from git, have make create them
  * jshint: New completion
  * gnokii: Include and install it
  * gnokii: Fix completions of options that are prefixes for others
  * gnokii: Drop dead code
  * (testsuite): Add basic gnokii test case
  * gnokii: Various minor and cosmetic fixes
  * Load user completions from $BASH_COMPLETION_USER_DIR/completions
  * synclient: New completion
  * tune2fs: Add missing return in -M arg completion
  * reptyr: Rename file to _reptyr to avoid conflict with upstreamed
    completion
  * dropuser: New completion
  * createuser: New completion
  * createdb, dropdb: Drop -o default, it does not appear to do
    anything good here
  * tshark: Simplify cut usage
  * mcrypt: Simplify -m arg completion
  * strings: Fix -T/--target arg completion with non-English locale
  * chrome, firefox etc: Complete on *.pdf
  * ccache: Add -o/--set-config arg name completion
  * gphoto2: Replace tail with awk
  * gphoto2: Fix split argument handing, and colon treatment in --port
    args
  * Actually install the lz4 completion
  * _pnames: Add -s for producing (possibly) truncated names (RedHat:
    [#744406])
  * (testsuite) Add cd in dir without subdirs or CDPATH test case
  * Protect various compgen invocations from -* leakage (Debian:
    [#766163])
  * pigz, unpigz: Handle *.zz
  * rpmbuild: Complete *.spec on --nobuild
  * mplayer, *xine: Complete on *.mts (Debian: #759219)
  * ant: Support buildfile set in $ANT_ARGS (Alioth: #314735)
  * ant: Don't offer more completions after options that exit
  * 7z, adb: Trivial cleanups
  * python(3): Add -X argument non-completion
  * xsltproc. TODO fix for previous commit
  * xmllint, xmlwf, xsltproc: Complete on *.dbk and *.docbook (Alioth:
    [#314770])
  * xz: Complete -T/--threads argument
  * adb: New completion
  * modprobe: Try parsing help before using hardcoding option list
  * mpv: New completion alias + adjustments for mplayer (Debian:
    [#749115])
  * hostname: New completion
  * nslookup: complete on hosts (Alioth: #314673)
  * eog: Complete on *.pgm (RedHat: #1090481)
  * pngfix: New completion
  * qemu: Fix -balloon arg completion
  * qemu: Apply completion to qemu-kvm/-system-i386/-system-x86_64 too
  * xrandr: Use the invoked command internally, not hardcoded "xrandr"
  * xrandr: Add (some) --setprovider* arg completion support
  * ri: Fix class completion with ri &gt;= 3.
  * ri: Fix colon handling in class completion.
  * flake8: New completion
  * pyflakes: New completion
  * cal,chfn,chsh,dmesg,eject,hexdump,look,newgrp,renice,runuser,su,wr
    ite: Deprecate on Linux in favor of util-linux ones (Debian:
    [#737672])
  * hwclock,ionice,rtcwake: Deprecate in favor of util-linux ones
    (Debian: #737672)
  * ssh-keygen: New completion
  * jpegoptim: New completion
  * ip: Add some addr, addrlabel, and route arg completions
  * aptitude, dpkg: Replace some grep+cuts with awk
  * gcc, lintian, make, pkgadd, slackpkg: grep -&gt; "command grep"
    (Debian: #734095)
  * lintian: Replace some grep+cuts with awk
  * lz4: New completion.
  * optipng: New completion.
  * cppcheck: Include - in --file-list completions.
  * wtf: Look for acronym db from /usr/share/games/bsdgames/acronyms
    too.
  * wtf: Don't offer -f if it was already specified.
  * wtf: Hush stderr when db file doesn't exist.
  * appdata-validate: New completion.
  * timeout: New completion.
  * abook, kldunload: Pre-expand \t instead of relying on sed
    supporting it.
  * dict: Trivial regex cleanup.
  * zopfli: New completion.
  * bzip2, gzip, lzma: Cleanups.
  * 2to3: New completion.
  * file-roller: Reuse unzip's xspec.
  * 7z: New completion.
  * hcitool, rfcomm, ciptool, hciconfig: Don't leak $args.
  * perl: Fix -dt: completion.
  * perl*: Fix handling of relative paths in @INC.
  * wget: Add --accept-regex/--reject-regex/--regex-type arg
    (non)completions.
  * wget: Drop incorrect -nv arg completion.
  * wget: Stop completing after --help/--version.
  * Clean up/compact various globs.
  * cvs: Fix checkout -j non-completion.
  * sh: Complete script arguments with all filenames (Alioth:
    [#314226]).
  * nmcli: Deprecate our completion, upstream has one in 0.9.8.0.
  * cvs rm: Don't filter existing files with -f (RedHat: #949479).
- Drop patches now upstream
  init-completion-boo922758.patch
  pushd-completion-bnc818365.patch
- Rename patches
  bash-completion-2.1.patch becomes bash-completion-2.4.patch
- Port the patches to newer version 2.4
  FOO-dir-completion-boo905348.patch
  LVM-completion-bsc946875.patch
  PS1-completion-boo903362.patch
  backtick-completion-boo940835.patch
  backticks-bsc963140.patch
  ls-completion-boo889319.patch
  respect-variables-boo940837.patch
  rm-completion-smart-boo958462.patch
  sh-script-completion-boo977336.patch
- Only remove completion for umount/mount for older SUSE versions (boo#995045)</changelog>
  <changelog author="werner@suse.de" date="1481716801">- Add patch tar-completion.patch to allow mixed options with long
  and short options (boo#1012212)</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Fix cut&amp;paste error in final ls completion</changelog>
  <changelog author="werner@suse.de" date="1481803201">- Detect if the completions for mount/umount have to be removed
  for modern util-linux package but without using suse_version</changelog>
  <changelog author="nico.kruber@gmail.com" date="1496145600">- Update to version 2.5
  * Support for python gui source files (#91)
  * mr: New completion
  * ssh-keygen: support ed25519 keys (#79)
  * Add sidedoor to _ssh() completion (#106)
  * .ipa is just a zip file and we should let unzip handle it (#71)
  * ant: parse targets in imported buildfiles (#84)
  * Add more tests for ccache
  * ccache: fix completing compiler's flags
  * test suite: Add java/javac non-completion fixture
  * javac: Complete -cp like -classpath
  * travis: Skip bluez and nis for now due to post-install script
    issues
  * test/config/*: Delete trailing whitespace
  * (test suite): Avoid loading user's ~/.bash_completion, fixes #87
  * ip: Recognize a as alias for address and l for link
  * ip: Recognize address in addition to addr
  * mr: Disable "clean" test case, command N/A before mr 1.20141023
  * ssh-keygen: Parse switches with _parse_usage, not _parse_help
  * mplayer: Associate with *.mjpg, *.mjpeg (Debian: #837779)
  * dd: Sync completions with coreutils 8.24
  * travis: Add mr
  * perl: Remove full path to cat in PERLDOC_PAGER call
  * deja-dup: New completion
  * CONTRIBUTING: Reorder sections
  * *: Move indentation settings to .editorconfig
  * make: Declare _make_target_extract_script like other functions
  * Travis: zopfli is AWOL?
  * *: Whitespace fixes
  * Minor edits to README.md (mostly formatting) (#110)
  * Fix bug in 'make' completion when using BSD sed (#108)
  * Add support for Include in ssh config (#70) (#80)
- adapt LVM-completion-bsc946875.patch</changelog>
  <changelog author="werner@suse.de" date="1499169600">- Update to version 2.7
  * Makefile: update default compatdir (#132)
  * Make user completion file configurable, disable in tests
  * test suite: Generalize xspec completion install check
  * pyflakes: Remove redundant xspec completion
  * test suite: Fix __expand_tilde_by_ref test expectation output
  * pdfunite: New *.pdf completion
  + bash-completion (2.6)
  * Add missing sidedoor to .gitignore (#114)
  * test suite: Mark expected centos6 CI _filedir failures as such
  * Expose version in BASH_COMPLETION_VERSINFO, use it in profile.d
    script
  * test suite: Skip an expected make test case failure in centos6 CI
  * test suite: Fix ifdown and ifup CI test skipping
  * test suite: Ignore env var pulled in by use of scp in tests
  * test suite: If colon trim doesn't do anything, trim as usual
  * tar: Comment spelling fixes
  * test suite: Mark dpkg -L test case untested if no packages
    installed
  * test suite: Cosmetic tweaks
  * dpkg: Fix dpkg -i home dir completion
  * test suite: Improve ls home dir test descriptions
  * python: Split module completion to separate helper
  * micropython: New completion, aliased from python
  * test suite: Add Python module completion test case
  * python: Fix traceback avoidance on module completion error
  * openssl: Parse available digests from dgst -h
  * openssl: Add sha2 commands
  * gm: New completion, commands only for now
  * (test suite): Test screen -T completions
  * (test suite): Set TERM to dumb, not dummy
  * Revert "(test suite): Fix alias and cd cursor position tests"
  * mplayer: Remove duplicate *.m4a and *.m4v associations
  * mplayer, xine, etc: Associate *.mp4a and *.mp4v
  * xine etc: Fix *.m4a association
  * bind: Add option and argument (non-)completions
  * _user_at_host: Set nospace only when completing username part
  * _user_at_host: Append @ suffix to username part completions
  * man: Don't check OSTYPE or GNU userland, just enable on all
    systems
  * (test suite): Set dcop result to untested if dcop server is not
    running
  * (test suite): Don't insist on loading all completions dynamically
  * _configured_interfaces: Parse from /etc/network/interfaces.d/* on
    Debian
  * py.test: New completion
  * oowriter: Associate with *.pdf
  * Don't define BASH_COMPLETION_COMPAT_DIR
  * ri: Add option and arg completions
  * (test suite): Add our own dummy ri test fixture
  * (test suite): Info test needs docs, don't exclude from CentOS
  * (test suite): Fix CentOS 6 tcllib setup
  * (test suite): Simplify renice test, fix with only one completion
  * (test suite): Don't assume configured interfaces in CI setups
  * Don't offer * as configured interface when there are none
  * (test suite): Add basic CentOS 6 container for bash 4.1 coverage
  * (test suite): Ignore runtime loaded env function changes
  * (test suite): Add mailman bin dir to PATH for arch test
  * arch: Parse options from --help
  * (test suite): Load tested completions dynamically
  * (test suite): Accept non-whitespace single word in
    assert_complete_any
  * (test suite): Avoid interference from user and system dirs (#87)
  * (test suite): Install some things N/A in ubuntu14 to fedoradev
  * (test suite): Add unrar to ubuntu14 container
  * (test suite): Fix alias and cd cursor position tests
  * (test suite): Add basic alpine test case
  * alpine: Parse opts from -h output, add some opt arg completions
  * (test suite): Install jshint globally in ubuntu14
  * (test suite): Add mailman bin dir to PATH for some mailman tools
  * (test suite): Install jshint to ubuntu14 container with npm
  * unshunt: Parse options from --help
  * (test suite): Test lsof on ubuntu14
  * (test suite): Add basic hping3 test case
  * (test suite): Add our ./configure to PATH to test it, test opts
  * (test suite): Add bunch of packages to ubuntu14 container
  * (test suite): Ensure /usr/(local/)games is in $PATH
  * (test suite): Fix perl -d* test cases with no Devel::* installed
  * (test suite): curl has lots of options, add more test prefix
  * (test suite): Fix tar test case for ones having --owner-map
  * (test suite): Unsupport various kill, renice cases if ps is N/A
  * (test suite): Make chkconfig test behave better in container
  * (test suite): Don't assume mounted filesystems in quota* tests
  * newlist: Parse options from --help, add some arg non-completions
  * (test suite): Delete trailing whitespace
  * (test suite): Don't assume lists set up in newlist test cases
  * (docker): Pull in missing fedoradev xvfb-run which dependency
  * mr: Avoid stderr trash and test suite failure if man is N/A
  * (test suite): Fix mmsitepass completion test
  * tshark -G: Avoid stderr noise when running as superuser
  * (docker): Run completion tests with xvfb-run, e.g. for gkrellm
  * ssh-keygen: Make option parsing work with OpenSSH &lt; 7
  * synclient, udevadm: Avoid use of posix char classes for awk
  * test suite: Add WIP Fedora dev config
  * Travis: Switch tests to docker, update to Ubuntu 14
  * xv: Associate with *.j2c, *.j2k, *.jp2, *.jpf, and *.jpg2 (Debian:
    [#859774])
  * eog: Associate with *.j2c and *.jpg2
  * Bump copyright years
  * xine etc: Associate uppercase *.WM[AV]
  * mplayer: Associate *.weba (#112)
  * xine etc: Associate *.webm and *.weba (#112)
- Modify patches
  * FOO-dir-completion-boo905348.patch
  * PS1-completion-boo903362.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion.changes
  * bash-completion.spec
  * ls-completion-boo889319.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * sh-script-completion-boo977336.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Remove rfkill conflicting with util-linux-2.31.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1540209600">- Modify patch PS1-completion-boo903362.patch to make it work with
  mksh as well (boo#1104531)</changelog>
</package>
<package pkgid="9fbef75be8ac4c8e1681d6604620300fc3f5fe94ee16eef9e41f7f44114151b4" name="bash-completion-doc" arch="noarch">
  <version epoch="0" ver="2.7" rel="lp150.3.3.1"/>
  <changelog author="werner@suse.de" date="1416225600">- Add patch PS1-completion-boo903362.patch to avoid trouble if
  restricted characters of the shell are used in PS1 like
  exclamation mark (boo#903362).
- Add patch FOO-dir-completion-boo905348.patch to expand variables
  which value is actual a directory to avoid excaped dollar sign
  (boo#905348).</changelog>
  <changelog author="werner@suse.de" date="1426680000">- Port my dollar completion from /etc/profile.d/completion.bash to
  bash_completion which modifies FOO-dir-completion-boo905348.patch
- Avoid negative cword position counter (boo#922758), this adds
  the patch init-completion-boo922758.patch</changelog>
  <changelog author="werner@suse.de" date="1434369600">- Add patch ls-completion-boo889319.patch to make ls completion
  more smart (boo#889319)</changelog>
  <changelog author="werner@suse.de" date="1439380800">- Correct typo in patch ls-completion-boo889319.patch</changelog>
  <changelog author="werner@suse.de" date="1439467200">- Add patch backtick-completion-boo940835.patch to allow correct
  backtick completion (boo#940835)</changelog>
  <changelog author="werner@suse.de" date="1443009600">- Add patch LVM-completion-bsc946875.patch to make LVM comands
  work even without any scan happen (bsc#946875)</changelog>
  <changelog author="werner@suse.de" date="1450440000">- Add patch respect-variables-boo940837.patch to avoid completions
  which results in e.g. ls \$HO
- Add patch rm-completion-smart-boo958462.patch to allow completions
  list e.g. rm prefix*.jpg&lt;TAB&gt;&lt;TAB&gt;
- Modify patch LVM-completion-bsc946875.patch that is add the
  new patch from Liuhua Wang</changelog>
  <changelog author="werner@suse.de" date="1453896000">- Add patch backticks-bsc963140.patch to handle sub commands
  which will be expanded by backticks (bsc#963140)</changelog>
  <changelog author="werner@suse.de" date="1461758400">- Add documentation for this packages below to get the reference
  of the e.g. the variable COMP_FILEDIR_FALLBACK (boo#977336)</changelog>
  <changelog author="werner@suse.de" date="1461758401">- Add patch sh-script-completion-boo977336.patch to make _filedir
  work with COMP_FILEDIR_FALLBACK even if local directries exists
  this is for bug boo##977336</changelog>
  <changelog author="sbrabec@suse.com" date="1461758402">- Remove completions conflicting with util-linux (boo#977259#c3).</changelog>
  <changelog author="werner@suse.de" date="1463572800">- Split off sub packages devel and doc to avoid dependency cycles</changelog>
  <changelog author="sbrabec@suse.com" date="1463572801">- Split doc build into a separate spec file. It makes possible to
  build package in two stages and prevent build loop.</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Mark the documentation as noarch</changelog>
  <changelog author="werner@suse.de" date="1481716800">- Change upstream home to https://github.com/scop/bash-completion
- Update to version 2.4
  * xetex, xelatex, luatex, lualatex: Associate with tex files
  * Support pod document files for perldoc (#39)
  * tipc: add tipc completions
  * rpm: Offer --filetriggers with -q
  * javadoc: Add bunch of option arg (non)completions
  * lrzip: Add -m arg noncompletion
  * pypy*: Add basic --jit arg completion
  * pypy3: Alias to python
  * hcitool,svcadm,tar: Spelling fixes
  * tipc: Invoke ls with "command"
  * tipc: Indentation fix
  * abook: Parse long options from command including full path
  * pyvenv: New completion
  * chroot: New (generic long options) completion, see #38
  * aptitude: List packages using _apt_cache_packages, fixes #33
  * vncviewer: Cleanup shopt use, drop an eval
  * make: Avoid a grep
  * rpm: Fix --whatenhances arg completion
  * aspell, minicom, mysql: Replace use of ls with printf
  * The BitKeeper completion used the wrong set of commands
  * Completion for python zip archives
  * lvm: pvcreate should be able to use all block devcices
  * lvm: fix all commands that should get all PVs
  * tar: Detect GNU/other from --version only once per session
  * tar: Remove unused variable
  * tar: Fix GNU tar help output parsing regex, fixes #15
  * tar: Don't write to /tmp/jetel
  * python: Simplify code
  * python: Complete all files also after -m
  * python: Don't offer options after -c
  * python: Complete all files only if -c is before current word
  * unzip, zipinfo: Complete on *.pyz
  * _lvm: using a single-pattern case and invoking function according
    to words[1]
  * lvm: _lvm_count_args parameter must be quoted in order to failglob
    not to complain
  * gendiff: Quoting suffix pattern to avoid triggering failglob
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (Alioth:
    [#314709])
  * Refactor bts and uscan, since they use common functions
  * uscan: New completion, thanks to Federico Ceratto
  * bts: New completion, thanks to Federico Ceratto.
  * nmcli completion was integrated upstream
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (take 2)
    (Alioth: #314709)
  * umount: Fix mount points escaping/unescaping with Bash-4.3
  * slapt-src: Handle --config=FILE option properly
  * sbopkg, slapt-{get,src}: expand tilde in config file name
  * slapt-{get,src}: Fix issue with sed not being able to handle some
    characters
  * slapt-src: split options from their arguments
  * psql: Tell psql to not load .psqlrc as it may change output format
    (Alioth: #314636)
  * mplayer: -dvd-devices takes dvd devices, dirs and .iso files as
    argument
  * 7z: Improve completion
  * f77, f95: Use the same completion as for g77, g95 if they are
    links to gfortran
  * make: Use only posix basic regexps with sed (Alioth: #314345)
  * perl: -d/-dt option argument is optional (Alioth: #314242)
  * Add config for cmake to bash-completion.
  * kcov: Add new sort types, complete --replace-src-path arguments
  * feh: Add new sort type
  * man: Use -w instead of --path
  * chronyc: Update help text parsing
  * chronyc: Add missing subcommands
  * chronyc: Add -6 option
  * minicom: Recognize user ~/.minirc.* as config files
  * rpmbuild: Complete *.spec on --clean (RedHat: #1132959)
  * tar: rework the completion completely
  * portsnap: New completion.
  * modprobe: fix params with multi-line descriptions
  * gdb: support --args style completion (Alioth: #314664)
  * make: Fix basic regex for portability (Alioth: #314345)
  * gnokii: New completion
  * xmllint, xmlwf, xsltproc: Complete on Mallard *.page files
  * pypy: New completion identical to python (Alioth: #314501)
  * make: Don't pick up variables when makefile is reloaded
  * make: Offer hidden targets when it is clear that the user is
    trying to complete one of them
  * make: Fix detection of intermediate targets where make has changed
    its database whitespace
  * make: completion shouldn't be confused by the output of $(info
    confuse: make)
  * zopflipng: New completion
  * ssh: Extract duplicate code to _ssh_configfile
  * gnokii, minicom: Use grep through "command"
  * Update URLs and various instructions to GitHub
  * ssh: Avoid completing commands before hostname
  * chronyc: Parse command args from help output
  * chronyc: Wrap long lines
  * Load completions also from $XDG_DATA_DIRS (RedHat: #1264094)
  * (testsuite) Ignore files generated by complete-ant-cmd.pl
  * scp, sftp: Complete -S on commands
  * scp, sftp: Fix querying ssh options
  * sftp: Add -l arg non-completion
  * ssh-copy-id: Offer only *.pub to -i
  * mpv: Remove mplayer-aliased completion
  * modplug*: Associate *.oct and *.okt
  * rpm: Add --whatenhances/recommends/suggests/supplements and
  - -recommends/supplements completions
  * pgrep, pidof, pkill, pwdx, vmstat: Add support for procps-ng
  * pdftotext: New completion
  * checksec: New completion
  * ssh: Complete HostbasedKeyTypes,HostKeyAlgorithms,KexAlgorithms
    values
  * ssh: Query ciphers and macs from ssh before hardcoded fallback
  * ssh: Add -Q argument completion
  * sysctl: Return early on --help, --version
  * sysctl: Try parsing options from help before usage
  * eog: Complete on *.ppm (RedHat: #1090481)
  * tar: Plug $line var leak
  * tar: Style tweaks
  * bsdtar, tar: Remove symlinks from git, have make create them
  * jshint: New completion
  * gnokii: Include and install it
  * gnokii: Fix completions of options that are prefixes for others
  * gnokii: Drop dead code
  * (testsuite): Add basic gnokii test case
  * gnokii: Various minor and cosmetic fixes
  * Load user completions from $BASH_COMPLETION_USER_DIR/completions
  * synclient: New completion
  * tune2fs: Add missing return in -M arg completion
  * reptyr: Rename file to _reptyr to avoid conflict with upstreamed
    completion
  * dropuser: New completion
  * createuser: New completion
  * createdb, dropdb: Drop -o default, it does not appear to do
    anything good here
  * tshark: Simplify cut usage
  * mcrypt: Simplify -m arg completion
  * strings: Fix -T/--target arg completion with non-English locale
  * chrome, firefox etc: Complete on *.pdf
  * ccache: Add -o/--set-config arg name completion
  * gphoto2: Replace tail with awk
  * gphoto2: Fix split argument handing, and colon treatment in --port
    args
  * Actually install the lz4 completion
  * _pnames: Add -s for producing (possibly) truncated names (RedHat:
    [#744406])
  * (testsuite) Add cd in dir without subdirs or CDPATH test case
  * Protect various compgen invocations from -* leakage (Debian:
    [#766163])
  * pigz, unpigz: Handle *.zz
  * rpmbuild: Complete *.spec on --nobuild
  * mplayer, *xine: Complete on *.mts (Debian: #759219)
  * ant: Support buildfile set in $ANT_ARGS (Alioth: #314735)
  * ant: Don't offer more completions after options that exit
  * 7z, adb: Trivial cleanups
  * python(3): Add -X argument non-completion
  * xsltproc. TODO fix for previous commit
  * xmllint, xmlwf, xsltproc: Complete on *.dbk and *.docbook (Alioth:
    [#314770])
  * xz: Complete -T/--threads argument
  * adb: New completion
  * modprobe: Try parsing help before using hardcoding option list
  * mpv: New completion alias + adjustments for mplayer (Debian:
    [#749115])
  * hostname: New completion
  * nslookup: complete on hosts (Alioth: #314673)
  * eog: Complete on *.pgm (RedHat: #1090481)
  * pngfix: New completion
  * qemu: Fix -balloon arg completion
  * qemu: Apply completion to qemu-kvm/-system-i386/-system-x86_64 too
  * xrandr: Use the invoked command internally, not hardcoded "xrandr"
  * xrandr: Add (some) --setprovider* arg completion support
  * ri: Fix class completion with ri &gt;= 3.
  * ri: Fix colon handling in class completion.
  * flake8: New completion
  * pyflakes: New completion
  * cal,chfn,chsh,dmesg,eject,hexdump,look,newgrp,renice,runuser,su,wr
    ite: Deprecate on Linux in favor of util-linux ones (Debian:
    [#737672])
  * hwclock,ionice,rtcwake: Deprecate in favor of util-linux ones
    (Debian: #737672)
  * ssh-keygen: New completion
  * jpegoptim: New completion
  * ip: Add some addr, addrlabel, and route arg completions
  * aptitude, dpkg: Replace some grep+cuts with awk
  * gcc, lintian, make, pkgadd, slackpkg: grep -&gt; "command grep"
    (Debian: #734095)
  * lintian: Replace some grep+cuts with awk
  * lz4: New completion.
  * optipng: New completion.
  * cppcheck: Include - in --file-list completions.
  * wtf: Look for acronym db from /usr/share/games/bsdgames/acronyms
    too.
  * wtf: Don't offer -f if it was already specified.
  * wtf: Hush stderr when db file doesn't exist.
  * appdata-validate: New completion.
  * timeout: New completion.
  * abook, kldunload: Pre-expand \t instead of relying on sed
    supporting it.
  * dict: Trivial regex cleanup.
  * zopfli: New completion.
  * bzip2, gzip, lzma: Cleanups.
  * 2to3: New completion.
  * file-roller: Reuse unzip's xspec.
  * 7z: New completion.
  * hcitool, rfcomm, ciptool, hciconfig: Don't leak $args.
  * perl: Fix -dt: completion.
  * perl*: Fix handling of relative paths in @INC.
  * wget: Add --accept-regex/--reject-regex/--regex-type arg
    (non)completions.
  * wget: Drop incorrect -nv arg completion.
  * wget: Stop completing after --help/--version.
  * Clean up/compact various globs.
  * cvs: Fix checkout -j non-completion.
  * sh: Complete script arguments with all filenames (Alioth:
    [#314226]).
  * nmcli: Deprecate our completion, upstream has one in 0.9.8.0.
  * cvs rm: Don't filter existing files with -f (RedHat: #949479).
- Drop patches now upstream
  init-completion-boo922758.patch
  pushd-completion-bnc818365.patch
- Rename patches
  bash-completion-2.1.patch becomes bash-completion-2.4.patch
- Port the patches to newer version 2.4
  FOO-dir-completion-boo905348.patch
  LVM-completion-bsc946875.patch
  PS1-completion-boo903362.patch
  backtick-completion-boo940835.patch
  backticks-bsc963140.patch
  ls-completion-boo889319.patch
  respect-variables-boo940837.patch
  rm-completion-smart-boo958462.patch
  sh-script-completion-boo977336.patch
- Only remove completion for umount/mount for older SUSE versions (boo#995045)</changelog>
  <changelog author="werner@suse.de" date="1481716801">- Add patch tar-completion.patch to allow mixed options with long
  and short options (boo#1012212)</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Fix cut&amp;paste error in final ls completion</changelog>
  <changelog author="werner@suse.de" date="1481803201">- Detect if the completions for mount/umount have to be removed
  for modern util-linux package but without using suse_version</changelog>
  <changelog author="nico.kruber@gmail.com" date="1496145600">- Update to version 2.5
  * Support for python gui source files (#91)
  * mr: New completion
  * ssh-keygen: support ed25519 keys (#79)
  * Add sidedoor to _ssh() completion (#106)
  * .ipa is just a zip file and we should let unzip handle it (#71)
  * ant: parse targets in imported buildfiles (#84)
  * Add more tests for ccache
  * ccache: fix completing compiler's flags
  * test suite: Add java/javac non-completion fixture
  * javac: Complete -cp like -classpath
  * travis: Skip bluez and nis for now due to post-install script
    issues
  * test/config/*: Delete trailing whitespace
  * (test suite): Avoid loading user's ~/.bash_completion, fixes #87
  * ip: Recognize a as alias for address and l for link
  * ip: Recognize address in addition to addr
  * mr: Disable "clean" test case, command N/A before mr 1.20141023
  * ssh-keygen: Parse switches with _parse_usage, not _parse_help
  * mplayer: Associate with *.mjpg, *.mjpeg (Debian: #837779)
  * dd: Sync completions with coreutils 8.24
  * travis: Add mr
  * perl: Remove full path to cat in PERLDOC_PAGER call
  * deja-dup: New completion
  * CONTRIBUTING: Reorder sections
  * *: Move indentation settings to .editorconfig
  * make: Declare _make_target_extract_script like other functions
  * Travis: zopfli is AWOL?
  * *: Whitespace fixes
  * Minor edits to README.md (mostly formatting) (#110)
  * Fix bug in 'make' completion when using BSD sed (#108)
  * Add support for Include in ssh config (#70) (#80)
- adapt LVM-completion-bsc946875.patch</changelog>
  <changelog author="werner@suse.de" date="1499169600">- Update to version 2.7
  * Makefile: update default compatdir (#132)
  * Make user completion file configurable, disable in tests
  * test suite: Generalize xspec completion install check
  * pyflakes: Remove redundant xspec completion
  * test suite: Fix __expand_tilde_by_ref test expectation output
  * pdfunite: New *.pdf completion
  + bash-completion (2.6)
  * Add missing sidedoor to .gitignore (#114)
  * test suite: Mark expected centos6 CI _filedir failures as such
  * Expose version in BASH_COMPLETION_VERSINFO, use it in profile.d
    script
  * test suite: Skip an expected make test case failure in centos6 CI
  * test suite: Fix ifdown and ifup CI test skipping
  * test suite: Ignore env var pulled in by use of scp in tests
  * test suite: If colon trim doesn't do anything, trim as usual
  * tar: Comment spelling fixes
  * test suite: Mark dpkg -L test case untested if no packages
    installed
  * test suite: Cosmetic tweaks
  * dpkg: Fix dpkg -i home dir completion
  * test suite: Improve ls home dir test descriptions
  * python: Split module completion to separate helper
  * micropython: New completion, aliased from python
  * test suite: Add Python module completion test case
  * python: Fix traceback avoidance on module completion error
  * openssl: Parse available digests from dgst -h
  * openssl: Add sha2 commands
  * gm: New completion, commands only for now
  * (test suite): Test screen -T completions
  * (test suite): Set TERM to dumb, not dummy
  * Revert "(test suite): Fix alias and cd cursor position tests"
  * mplayer: Remove duplicate *.m4a and *.m4v associations
  * mplayer, xine, etc: Associate *.mp4a and *.mp4v
  * xine etc: Fix *.m4a association
  * bind: Add option and argument (non-)completions
  * _user_at_host: Set nospace only when completing username part
  * _user_at_host: Append @ suffix to username part completions
  * man: Don't check OSTYPE or GNU userland, just enable on all
    systems
  * (test suite): Set dcop result to untested if dcop server is not
    running
  * (test suite): Don't insist on loading all completions dynamically
  * _configured_interfaces: Parse from /etc/network/interfaces.d/* on
    Debian
  * py.test: New completion
  * oowriter: Associate with *.pdf
  * Don't define BASH_COMPLETION_COMPAT_DIR
  * ri: Add option and arg completions
  * (test suite): Add our own dummy ri test fixture
  * (test suite): Info test needs docs, don't exclude from CentOS
  * (test suite): Fix CentOS 6 tcllib setup
  * (test suite): Simplify renice test, fix with only one completion
  * (test suite): Don't assume configured interfaces in CI setups
  * Don't offer * as configured interface when there are none
  * (test suite): Add basic CentOS 6 container for bash 4.1 coverage
  * (test suite): Ignore runtime loaded env function changes
  * (test suite): Add mailman bin dir to PATH for arch test
  * arch: Parse options from --help
  * (test suite): Load tested completions dynamically
  * (test suite): Accept non-whitespace single word in
    assert_complete_any
  * (test suite): Avoid interference from user and system dirs (#87)
  * (test suite): Install some things N/A in ubuntu14 to fedoradev
  * (test suite): Add unrar to ubuntu14 container
  * (test suite): Fix alias and cd cursor position tests
  * (test suite): Add basic alpine test case
  * alpine: Parse opts from -h output, add some opt arg completions
  * (test suite): Install jshint globally in ubuntu14
  * (test suite): Add mailman bin dir to PATH for some mailman tools
  * (test suite): Install jshint to ubuntu14 container with npm
  * unshunt: Parse options from --help
  * (test suite): Test lsof on ubuntu14
  * (test suite): Add basic hping3 test case
  * (test suite): Add our ./configure to PATH to test it, test opts
  * (test suite): Add bunch of packages to ubuntu14 container
  * (test suite): Ensure /usr/(local/)games is in $PATH
  * (test suite): Fix perl -d* test cases with no Devel::* installed
  * (test suite): curl has lots of options, add more test prefix
  * (test suite): Fix tar test case for ones having --owner-map
  * (test suite): Unsupport various kill, renice cases if ps is N/A
  * (test suite): Make chkconfig test behave better in container
  * (test suite): Don't assume mounted filesystems in quota* tests
  * newlist: Parse options from --help, add some arg non-completions
  * (test suite): Delete trailing whitespace
  * (test suite): Don't assume lists set up in newlist test cases
  * (docker): Pull in missing fedoradev xvfb-run which dependency
  * mr: Avoid stderr trash and test suite failure if man is N/A
  * (test suite): Fix mmsitepass completion test
  * tshark -G: Avoid stderr noise when running as superuser
  * (docker): Run completion tests with xvfb-run, e.g. for gkrellm
  * ssh-keygen: Make option parsing work with OpenSSH &lt; 7
  * synclient, udevadm: Avoid use of posix char classes for awk
  * test suite: Add WIP Fedora dev config
  * Travis: Switch tests to docker, update to Ubuntu 14
  * xv: Associate with *.j2c, *.j2k, *.jp2, *.jpf, and *.jpg2 (Debian:
    [#859774])
  * eog: Associate with *.j2c and *.jpg2
  * Bump copyright years
  * xine etc: Associate uppercase *.WM[AV]
  * mplayer: Associate *.weba (#112)
  * xine etc: Associate *.webm and *.weba (#112)
- Modify patches
  * FOO-dir-completion-boo905348.patch
  * PS1-completion-boo903362.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion.changes
  * bash-completion.spec
  * ls-completion-boo889319.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * sh-script-completion-boo977336.patch</changelog>
</package>
<package pkgid="dc494d906e42e700b970485cad696fef0e197a10890c44bd1ad9939fc1e4fa7e" name="bash-completion-doc" arch="src">
  <version epoch="0" ver="2.7" rel="lp150.3.3.1"/>
  <changelog author="werner@suse.de" date="1416225600">- Add patch PS1-completion-boo903362.patch to avoid trouble if
  restricted characters of the shell are used in PS1 like
  exclamation mark (boo#903362).
- Add patch FOO-dir-completion-boo905348.patch to expand variables
  which value is actual a directory to avoid excaped dollar sign
  (boo#905348).</changelog>
  <changelog author="werner@suse.de" date="1426680000">- Port my dollar completion from /etc/profile.d/completion.bash to
  bash_completion which modifies FOO-dir-completion-boo905348.patch
- Avoid negative cword position counter (boo#922758), this adds
  the patch init-completion-boo922758.patch</changelog>
  <changelog author="werner@suse.de" date="1434369600">- Add patch ls-completion-boo889319.patch to make ls completion
  more smart (boo#889319)</changelog>
  <changelog author="werner@suse.de" date="1439380800">- Correct typo in patch ls-completion-boo889319.patch</changelog>
  <changelog author="werner@suse.de" date="1439467200">- Add patch backtick-completion-boo940835.patch to allow correct
  backtick completion (boo#940835)</changelog>
  <changelog author="werner@suse.de" date="1443009600">- Add patch LVM-completion-bsc946875.patch to make LVM comands
  work even without any scan happen (bsc#946875)</changelog>
  <changelog author="werner@suse.de" date="1450440000">- Add patch respect-variables-boo940837.patch to avoid completions
  which results in e.g. ls \$HO
- Add patch rm-completion-smart-boo958462.patch to allow completions
  list e.g. rm prefix*.jpg&lt;TAB&gt;&lt;TAB&gt;
- Modify patch LVM-completion-bsc946875.patch that is add the
  new patch from Liuhua Wang</changelog>
  <changelog author="werner@suse.de" date="1453896000">- Add patch backticks-bsc963140.patch to handle sub commands
  which will be expanded by backticks (bsc#963140)</changelog>
  <changelog author="werner@suse.de" date="1461758400">- Add documentation for this packages below to get the reference
  of the e.g. the variable COMP_FILEDIR_FALLBACK (boo#977336)</changelog>
  <changelog author="werner@suse.de" date="1461758401">- Add patch sh-script-completion-boo977336.patch to make _filedir
  work with COMP_FILEDIR_FALLBACK even if local directries exists
  this is for bug boo##977336</changelog>
  <changelog author="sbrabec@suse.com" date="1461758402">- Remove completions conflicting with util-linux (boo#977259#c3).</changelog>
  <changelog author="werner@suse.de" date="1463572800">- Split off sub packages devel and doc to avoid dependency cycles</changelog>
  <changelog author="sbrabec@suse.com" date="1463572801">- Split doc build into a separate spec file. It makes possible to
  build package in two stages and prevent build loop.</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Mark the documentation as noarch</changelog>
  <changelog author="werner@suse.de" date="1481716800">- Change upstream home to https://github.com/scop/bash-completion
- Update to version 2.4
  * xetex, xelatex, luatex, lualatex: Associate with tex files
  * Support pod document files for perldoc (#39)
  * tipc: add tipc completions
  * rpm: Offer --filetriggers with -q
  * javadoc: Add bunch of option arg (non)completions
  * lrzip: Add -m arg noncompletion
  * pypy*: Add basic --jit arg completion
  * pypy3: Alias to python
  * hcitool,svcadm,tar: Spelling fixes
  * tipc: Invoke ls with "command"
  * tipc: Indentation fix
  * abook: Parse long options from command including full path
  * pyvenv: New completion
  * chroot: New (generic long options) completion, see #38
  * aptitude: List packages using _apt_cache_packages, fixes #33
  * vncviewer: Cleanup shopt use, drop an eval
  * make: Avoid a grep
  * rpm: Fix --whatenhances arg completion
  * aspell, minicom, mysql: Replace use of ls with printf
  * The BitKeeper completion used the wrong set of commands
  * Completion for python zip archives
  * lvm: pvcreate should be able to use all block devcices
  * lvm: fix all commands that should get all PVs
  * tar: Detect GNU/other from --version only once per session
  * tar: Remove unused variable
  * tar: Fix GNU tar help output parsing regex, fixes #15
  * tar: Don't write to /tmp/jetel
  * python: Simplify code
  * python: Complete all files also after -m
  * python: Don't offer options after -c
  * python: Complete all files only if -c is before current word
  * unzip, zipinfo: Complete on *.pyz
  * _lvm: using a single-pattern case and invoking function according
    to words[1]
  * lvm: _lvm_count_args parameter must be quoted in order to failglob
    not to complain
  * gendiff: Quoting suffix pattern to avoid triggering failglob
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (Alioth:
    [#314709])
  * Refactor bts and uscan, since they use common functions
  * uscan: New completion, thanks to Federico Ceratto
  * bts: New completion, thanks to Federico Ceratto.
  * nmcli completion was integrated upstream
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (take 2)
    (Alioth: #314709)
  * umount: Fix mount points escaping/unescaping with Bash-4.3
  * slapt-src: Handle --config=FILE option properly
  * sbopkg, slapt-{get,src}: expand tilde in config file name
  * slapt-{get,src}: Fix issue with sed not being able to handle some
    characters
  * slapt-src: split options from their arguments
  * psql: Tell psql to not load .psqlrc as it may change output format
    (Alioth: #314636)
  * mplayer: -dvd-devices takes dvd devices, dirs and .iso files as
    argument
  * 7z: Improve completion
  * f77, f95: Use the same completion as for g77, g95 if they are
    links to gfortran
  * make: Use only posix basic regexps with sed (Alioth: #314345)
  * perl: -d/-dt option argument is optional (Alioth: #314242)
  * Add config for cmake to bash-completion.
  * kcov: Add new sort types, complete --replace-src-path arguments
  * feh: Add new sort type
  * man: Use -w instead of --path
  * chronyc: Update help text parsing
  * chronyc: Add missing subcommands
  * chronyc: Add -6 option
  * minicom: Recognize user ~/.minirc.* as config files
  * rpmbuild: Complete *.spec on --clean (RedHat: #1132959)
  * tar: rework the completion completely
  * portsnap: New completion.
  * modprobe: fix params with multi-line descriptions
  * gdb: support --args style completion (Alioth: #314664)
  * make: Fix basic regex for portability (Alioth: #314345)
  * gnokii: New completion
  * xmllint, xmlwf, xsltproc: Complete on Mallard *.page files
  * pypy: New completion identical to python (Alioth: #314501)
  * make: Don't pick up variables when makefile is reloaded
  * make: Offer hidden targets when it is clear that the user is
    trying to complete one of them
  * make: Fix detection of intermediate targets where make has changed
    its database whitespace
  * make: completion shouldn't be confused by the output of $(info
    confuse: make)
  * zopflipng: New completion
  * ssh: Extract duplicate code to _ssh_configfile
  * gnokii, minicom: Use grep through "command"
  * Update URLs and various instructions to GitHub
  * ssh: Avoid completing commands before hostname
  * chronyc: Parse command args from help output
  * chronyc: Wrap long lines
  * Load completions also from $XDG_DATA_DIRS (RedHat: #1264094)
  * (testsuite) Ignore files generated by complete-ant-cmd.pl
  * scp, sftp: Complete -S on commands
  * scp, sftp: Fix querying ssh options
  * sftp: Add -l arg non-completion
  * ssh-copy-id: Offer only *.pub to -i
  * mpv: Remove mplayer-aliased completion
  * modplug*: Associate *.oct and *.okt
  * rpm: Add --whatenhances/recommends/suggests/supplements and
  - -recommends/supplements completions
  * pgrep, pidof, pkill, pwdx, vmstat: Add support for procps-ng
  * pdftotext: New completion
  * checksec: New completion
  * ssh: Complete HostbasedKeyTypes,HostKeyAlgorithms,KexAlgorithms
    values
  * ssh: Query ciphers and macs from ssh before hardcoded fallback
  * ssh: Add -Q argument completion
  * sysctl: Return early on --help, --version
  * sysctl: Try parsing options from help before usage
  * eog: Complete on *.ppm (RedHat: #1090481)
  * tar: Plug $line var leak
  * tar: Style tweaks
  * bsdtar, tar: Remove symlinks from git, have make create them
  * jshint: New completion
  * gnokii: Include and install it
  * gnokii: Fix completions of options that are prefixes for others
  * gnokii: Drop dead code
  * (testsuite): Add basic gnokii test case
  * gnokii: Various minor and cosmetic fixes
  * Load user completions from $BASH_COMPLETION_USER_DIR/completions
  * synclient: New completion
  * tune2fs: Add missing return in -M arg completion
  * reptyr: Rename file to _reptyr to avoid conflict with upstreamed
    completion
  * dropuser: New completion
  * createuser: New completion
  * createdb, dropdb: Drop -o default, it does not appear to do
    anything good here
  * tshark: Simplify cut usage
  * mcrypt: Simplify -m arg completion
  * strings: Fix -T/--target arg completion with non-English locale
  * chrome, firefox etc: Complete on *.pdf
  * ccache: Add -o/--set-config arg name completion
  * gphoto2: Replace tail with awk
  * gphoto2: Fix split argument handing, and colon treatment in --port
    args
  * Actually install the lz4 completion
  * _pnames: Add -s for producing (possibly) truncated names (RedHat:
    [#744406])
  * (testsuite) Add cd in dir without subdirs or CDPATH test case
  * Protect various compgen invocations from -* leakage (Debian:
    [#766163])
  * pigz, unpigz: Handle *.zz
  * rpmbuild: Complete *.spec on --nobuild
  * mplayer, *xine: Complete on *.mts (Debian: #759219)
  * ant: Support buildfile set in $ANT_ARGS (Alioth: #314735)
  * ant: Don't offer more completions after options that exit
  * 7z, adb: Trivial cleanups
  * python(3): Add -X argument non-completion
  * xsltproc. TODO fix for previous commit
  * xmllint, xmlwf, xsltproc: Complete on *.dbk and *.docbook (Alioth:
    [#314770])
  * xz: Complete -T/--threads argument
  * adb: New completion
  * modprobe: Try parsing help before using hardcoding option list
  * mpv: New completion alias + adjustments for mplayer (Debian:
    [#749115])
  * hostname: New completion
  * nslookup: complete on hosts (Alioth: #314673)
  * eog: Complete on *.pgm (RedHat: #1090481)
  * pngfix: New completion
  * qemu: Fix -balloon arg completion
  * qemu: Apply completion to qemu-kvm/-system-i386/-system-x86_64 too
  * xrandr: Use the invoked command internally, not hardcoded "xrandr"
  * xrandr: Add (some) --setprovider* arg completion support
  * ri: Fix class completion with ri &gt;= 3.
  * ri: Fix colon handling in class completion.
  * flake8: New completion
  * pyflakes: New completion
  * cal,chfn,chsh,dmesg,eject,hexdump,look,newgrp,renice,runuser,su,wr
    ite: Deprecate on Linux in favor of util-linux ones (Debian:
    [#737672])
  * hwclock,ionice,rtcwake: Deprecate in favor of util-linux ones
    (Debian: #737672)
  * ssh-keygen: New completion
  * jpegoptim: New completion
  * ip: Add some addr, addrlabel, and route arg completions
  * aptitude, dpkg: Replace some grep+cuts with awk
  * gcc, lintian, make, pkgadd, slackpkg: grep -&gt; "command grep"
    (Debian: #734095)
  * lintian: Replace some grep+cuts with awk
  * lz4: New completion.
  * optipng: New completion.
  * cppcheck: Include - in --file-list completions.
  * wtf: Look for acronym db from /usr/share/games/bsdgames/acronyms
    too.
  * wtf: Don't offer -f if it was already specified.
  * wtf: Hush stderr when db file doesn't exist.
  * appdata-validate: New completion.
  * timeout: New completion.
  * abook, kldunload: Pre-expand \t instead of relying on sed
    supporting it.
  * dict: Trivial regex cleanup.
  * zopfli: New completion.
  * bzip2, gzip, lzma: Cleanups.
  * 2to3: New completion.
  * file-roller: Reuse unzip's xspec.
  * 7z: New completion.
  * hcitool, rfcomm, ciptool, hciconfig: Don't leak $args.
  * perl: Fix -dt: completion.
  * perl*: Fix handling of relative paths in @INC.
  * wget: Add --accept-regex/--reject-regex/--regex-type arg
    (non)completions.
  * wget: Drop incorrect -nv arg completion.
  * wget: Stop completing after --help/--version.
  * Clean up/compact various globs.
  * cvs: Fix checkout -j non-completion.
  * sh: Complete script arguments with all filenames (Alioth:
    [#314226]).
  * nmcli: Deprecate our completion, upstream has one in 0.9.8.0.
  * cvs rm: Don't filter existing files with -f (RedHat: #949479).
- Drop patches now upstream
  init-completion-boo922758.patch
  pushd-completion-bnc818365.patch
- Rename patches
  bash-completion-2.1.patch becomes bash-completion-2.4.patch
- Port the patches to newer version 2.4
  FOO-dir-completion-boo905348.patch
  LVM-completion-bsc946875.patch
  PS1-completion-boo903362.patch
  backtick-completion-boo940835.patch
  backticks-bsc963140.patch
  ls-completion-boo889319.patch
  respect-variables-boo940837.patch
  rm-completion-smart-boo958462.patch
  sh-script-completion-boo977336.patch
- Only remove completion for umount/mount for older SUSE versions (boo#995045)</changelog>
  <changelog author="werner@suse.de" date="1481716801">- Add patch tar-completion.patch to allow mixed options with long
  and short options (boo#1012212)</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Fix cut&amp;paste error in final ls completion</changelog>
  <changelog author="werner@suse.de" date="1481803201">- Detect if the completions for mount/umount have to be removed
  for modern util-linux package but without using suse_version</changelog>
  <changelog author="nico.kruber@gmail.com" date="1496145600">- Update to version 2.5
  * Support for python gui source files (#91)
  * mr: New completion
  * ssh-keygen: support ed25519 keys (#79)
  * Add sidedoor to _ssh() completion (#106)
  * .ipa is just a zip file and we should let unzip handle it (#71)
  * ant: parse targets in imported buildfiles (#84)
  * Add more tests for ccache
  * ccache: fix completing compiler's flags
  * test suite: Add java/javac non-completion fixture
  * javac: Complete -cp like -classpath
  * travis: Skip bluez and nis for now due to post-install script
    issues
  * test/config/*: Delete trailing whitespace
  * (test suite): Avoid loading user's ~/.bash_completion, fixes #87
  * ip: Recognize a as alias for address and l for link
  * ip: Recognize address in addition to addr
  * mr: Disable "clean" test case, command N/A before mr 1.20141023
  * ssh-keygen: Parse switches with _parse_usage, not _parse_help
  * mplayer: Associate with *.mjpg, *.mjpeg (Debian: #837779)
  * dd: Sync completions with coreutils 8.24
  * travis: Add mr
  * perl: Remove full path to cat in PERLDOC_PAGER call
  * deja-dup: New completion
  * CONTRIBUTING: Reorder sections
  * *: Move indentation settings to .editorconfig
  * make: Declare _make_target_extract_script like other functions
  * Travis: zopfli is AWOL?
  * *: Whitespace fixes
  * Minor edits to README.md (mostly formatting) (#110)
  * Fix bug in 'make' completion when using BSD sed (#108)
  * Add support for Include in ssh config (#70) (#80)
- adapt LVM-completion-bsc946875.patch</changelog>
  <changelog author="werner@suse.de" date="1499169600">- Update to version 2.7
  * Makefile: update default compatdir (#132)
  * Make user completion file configurable, disable in tests
  * test suite: Generalize xspec completion install check
  * pyflakes: Remove redundant xspec completion
  * test suite: Fix __expand_tilde_by_ref test expectation output
  * pdfunite: New *.pdf completion
  + bash-completion (2.6)
  * Add missing sidedoor to .gitignore (#114)
  * test suite: Mark expected centos6 CI _filedir failures as such
  * Expose version in BASH_COMPLETION_VERSINFO, use it in profile.d
    script
  * test suite: Skip an expected make test case failure in centos6 CI
  * test suite: Fix ifdown and ifup CI test skipping
  * test suite: Ignore env var pulled in by use of scp in tests
  * test suite: If colon trim doesn't do anything, trim as usual
  * tar: Comment spelling fixes
  * test suite: Mark dpkg -L test case untested if no packages
    installed
  * test suite: Cosmetic tweaks
  * dpkg: Fix dpkg -i home dir completion
  * test suite: Improve ls home dir test descriptions
  * python: Split module completion to separate helper
  * micropython: New completion, aliased from python
  * test suite: Add Python module completion test case
  * python: Fix traceback avoidance on module completion error
  * openssl: Parse available digests from dgst -h
  * openssl: Add sha2 commands
  * gm: New completion, commands only for now
  * (test suite): Test screen -T completions
  * (test suite): Set TERM to dumb, not dummy
  * Revert "(test suite): Fix alias and cd cursor position tests"
  * mplayer: Remove duplicate *.m4a and *.m4v associations
  * mplayer, xine, etc: Associate *.mp4a and *.mp4v
  * xine etc: Fix *.m4a association
  * bind: Add option and argument (non-)completions
  * _user_at_host: Set nospace only when completing username part
  * _user_at_host: Append @ suffix to username part completions
  * man: Don't check OSTYPE or GNU userland, just enable on all
    systems
  * (test suite): Set dcop result to untested if dcop server is not
    running
  * (test suite): Don't insist on loading all completions dynamically
  * _configured_interfaces: Parse from /etc/network/interfaces.d/* on
    Debian
  * py.test: New completion
  * oowriter: Associate with *.pdf
  * Don't define BASH_COMPLETION_COMPAT_DIR
  * ri: Add option and arg completions
  * (test suite): Add our own dummy ri test fixture
  * (test suite): Info test needs docs, don't exclude from CentOS
  * (test suite): Fix CentOS 6 tcllib setup
  * (test suite): Simplify renice test, fix with only one completion
  * (test suite): Don't assume configured interfaces in CI setups
  * Don't offer * as configured interface when there are none
  * (test suite): Add basic CentOS 6 container for bash 4.1 coverage
  * (test suite): Ignore runtime loaded env function changes
  * (test suite): Add mailman bin dir to PATH for arch test
  * arch: Parse options from --help
  * (test suite): Load tested completions dynamically
  * (test suite): Accept non-whitespace single word in
    assert_complete_any
  * (test suite): Avoid interference from user and system dirs (#87)
  * (test suite): Install some things N/A in ubuntu14 to fedoradev
  * (test suite): Add unrar to ubuntu14 container
  * (test suite): Fix alias and cd cursor position tests
  * (test suite): Add basic alpine test case
  * alpine: Parse opts from -h output, add some opt arg completions
  * (test suite): Install jshint globally in ubuntu14
  * (test suite): Add mailman bin dir to PATH for some mailman tools
  * (test suite): Install jshint to ubuntu14 container with npm
  * unshunt: Parse options from --help
  * (test suite): Test lsof on ubuntu14
  * (test suite): Add basic hping3 test case
  * (test suite): Add our ./configure to PATH to test it, test opts
  * (test suite): Add bunch of packages to ubuntu14 container
  * (test suite): Ensure /usr/(local/)games is in $PATH
  * (test suite): Fix perl -d* test cases with no Devel::* installed
  * (test suite): curl has lots of options, add more test prefix
  * (test suite): Fix tar test case for ones having --owner-map
  * (test suite): Unsupport various kill, renice cases if ps is N/A
  * (test suite): Make chkconfig test behave better in container
  * (test suite): Don't assume mounted filesystems in quota* tests
  * newlist: Parse options from --help, add some arg non-completions
  * (test suite): Delete trailing whitespace
  * (test suite): Don't assume lists set up in newlist test cases
  * (docker): Pull in missing fedoradev xvfb-run which dependency
  * mr: Avoid stderr trash and test suite failure if man is N/A
  * (test suite): Fix mmsitepass completion test
  * tshark -G: Avoid stderr noise when running as superuser
  * (docker): Run completion tests with xvfb-run, e.g. for gkrellm
  * ssh-keygen: Make option parsing work with OpenSSH &lt; 7
  * synclient, udevadm: Avoid use of posix char classes for awk
  * test suite: Add WIP Fedora dev config
  * Travis: Switch tests to docker, update to Ubuntu 14
  * xv: Associate with *.j2c, *.j2k, *.jp2, *.jpf, and *.jpg2 (Debian:
    [#859774])
  * eog: Associate with *.j2c and *.jpg2
  * Bump copyright years
  * xine etc: Associate uppercase *.WM[AV]
  * mplayer: Associate *.weba (#112)
  * xine etc: Associate *.webm and *.weba (#112)
- Modify patches
  * FOO-dir-completion-boo905348.patch
  * PS1-completion-boo903362.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion.changes
  * bash-completion.spec
  * ls-completion-boo889319.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * sh-script-completion-boo977336.patch</changelog>
</package>
<package pkgid="09d161027f0ee0f7c6e528ec7dd56e70d3c3fe84ae58a822a5ab302a992ebd78" name="bash-devel" arch="x86_64">
  <version epoch="0" ver="4.4" rel="lp150.8.3.1"/>
  <changelog author="werner@suse.de" date="1485518400">- Add upstream patch bash44-006
  Out-of-range negative offsets to popd can cause the shell to crash
  attempting to free an invalid memory block.
- Remove patch popd-offset-overflow.patch to use bash44-006
- Add upstream patch bash44-007
  When performing filename completion, bash dequotes the directory
  name being completed, which can result in match failures and
  potential unwanted expansion.
- Duplicate bash44-007 as readline70-002 as it seems to be missed
- Add upstream patch bash44-008
  Under certain circumstances, bash will evaluate arithmetic
  expressions as part of reading an expression token even when
  evaluation is suppressed. This happens while evaluating a
  conditional expression and skipping over the failed branch of the
  expression.
- Add upstream patch bash44-009
  There is a race condition in add_history() that can be triggered
  by a fatal signal arriving between the time the history length
  is updated and the time the history list update is completed.
  A later attempt to reference an invalid history entry can cause
  a crash.
- Add upstream patch bash44-010
  Depending on compiler optimizations and behavior, the `read'
  builtin may not save partial input when a timeout occurs.
- Add upstream patch bash44-011
  Subshells begun to run command and process substitutions may
  attempt to set the terminal's process group to an incorrect
  value if they receive a fatal signal.  This depends on the
  behavior of the process that starts the shell.
- Add upstream patch bash44-012
  When -N is used, the input is not supposed to be split using
  $IFS, but leading and trailing IFS whitespace was still removed.</changelog>
  <changelog author="werner@suse.de" date="1485777600">- Add upstream patch readline70-002 which replace old one
  There is a race condition in add_history() that can be triggered by a fatal
  signal arriving between the time the history length is updated and the time
  the history list update is completed. A later attempt to reference an
  invalid history entry can cause a crash.
- Add upstream patch readline70-003
  Readline-7.0 uses pselect(2) to allow readline to handle signals that do not
  interrupt read(2), such as SIGALRM, before reading another character.  The
  signal mask used in the pselect call did not take into account signals the
  calling application blocked before calling readline().</changelog>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
</package>
<package pkgid="34ddc38515a49f4a0eea62b6de1a83c7fb3779e9c464552a2dc451e5da16c5f5" name="bash-doc" arch="noarch">
  <version epoch="0" ver="4.4" rel="lp150.8.3.1"/>
  <changelog author="werner@suse.de" date="1485518400">- Add upstream patch bash44-006
  Out-of-range negative offsets to popd can cause the shell to crash
  attempting to free an invalid memory block.
- Remove patch popd-offset-overflow.patch to use bash44-006
- Add upstream patch bash44-007
  When performing filename completion, bash dequotes the directory
  name being completed, which can result in match failures and
  potential unwanted expansion.
- Duplicate bash44-007 as readline70-002 as it seems to be missed
- Add upstream patch bash44-008
  Under certain circumstances, bash will evaluate arithmetic
  expressions as part of reading an expression token even when
  evaluation is suppressed. This happens while evaluating a
  conditional expression and skipping over the failed branch of the
  expression.
- Add upstream patch bash44-009
  There is a race condition in add_history() that can be triggered
  by a fatal signal arriving between the time the history length
  is updated and the time the history list update is completed.
  A later attempt to reference an invalid history entry can cause
  a crash.
- Add upstream patch bash44-010
  Depending on compiler optimizations and behavior, the `read'
  builtin may not save partial input when a timeout occurs.
- Add upstream patch bash44-011
  Subshells begun to run command and process substitutions may
  attempt to set the terminal's process group to an incorrect
  value if they receive a fatal signal.  This depends on the
  behavior of the process that starts the shell.
- Add upstream patch bash44-012
  When -N is used, the input is not supposed to be split using
  $IFS, but leading and trailing IFS whitespace was still removed.</changelog>
  <changelog author="werner@suse.de" date="1485777600">- Add upstream patch readline70-002 which replace old one
  There is a race condition in add_history() that can be triggered by a fatal
  signal arriving between the time the history length is updated and the time
  the history list update is completed. A later attempt to reference an
  invalid history entry can cause a crash.
- Add upstream patch readline70-003
  Readline-7.0 uses pselect(2) to allow readline to handle signals that do not
  interrupt read(2), such as SIGALRM, before reading another character.  The
  signal mask used in the pselect call did not take into account signals the
  calling application blocked before calling readline().</changelog>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
</package>
<package pkgid="f415061bf38eaf7301380d1decff9342d807feeba45ac7f7d1c2b6d43b48720f" name="bash-lang" arch="noarch">
  <version epoch="0" ver="4.4" rel="lp150.8.3.1"/>
  <changelog author="werner@suse.de" date="1485518400">- Add upstream patch bash44-006
  Out-of-range negative offsets to popd can cause the shell to crash
  attempting to free an invalid memory block.
- Remove patch popd-offset-overflow.patch to use bash44-006
- Add upstream patch bash44-007
  When performing filename completion, bash dequotes the directory
  name being completed, which can result in match failures and
  potential unwanted expansion.
- Duplicate bash44-007 as readline70-002 as it seems to be missed
- Add upstream patch bash44-008
  Under certain circumstances, bash will evaluate arithmetic
  expressions as part of reading an expression token even when
  evaluation is suppressed. This happens while evaluating a
  conditional expression and skipping over the failed branch of the
  expression.
- Add upstream patch bash44-009
  There is a race condition in add_history() that can be triggered
  by a fatal signal arriving between the time the history length
  is updated and the time the history list update is completed.
  A later attempt to reference an invalid history entry can cause
  a crash.
- Add upstream patch bash44-010
  Depending on compiler optimizations and behavior, the `read'
  builtin may not save partial input when a timeout occurs.
- Add upstream patch bash44-011
  Subshells begun to run command and process substitutions may
  attempt to set the terminal's process group to an incorrect
  value if they receive a fatal signal.  This depends on the
  behavior of the process that starts the shell.
- Add upstream patch bash44-012
  When -N is used, the input is not supposed to be split using
  $IFS, but leading and trailing IFS whitespace was still removed.</changelog>
  <changelog author="werner@suse.de" date="1485777600">- Add upstream patch readline70-002 which replace old one
  There is a race condition in add_history() that can be triggered by a fatal
  signal arriving between the time the history length is updated and the time
  the history list update is completed. A later attempt to reference an
  invalid history entry can cause a crash.
- Add upstream patch readline70-003
  Readline-7.0 uses pselect(2) to allow readline to handle signals that do not
  interrupt read(2), such as SIGALRM, before reading another character.  The
  signal mask used in the pselect call did not take into account signals the
  calling application blocked before calling readline().</changelog>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
</package>
<package pkgid="d3d82341ee88bf0349d2ed03e3b1896b7c08638e169a44df60197d89389f5a09" name="bash-loadables" arch="x86_64">
  <version epoch="0" ver="4.4" rel="lp150.8.3.1"/>
  <changelog author="werner@suse.de" date="1485518400">- Add upstream patch bash44-006
  Out-of-range negative offsets to popd can cause the shell to crash
  attempting to free an invalid memory block.
- Remove patch popd-offset-overflow.patch to use bash44-006
- Add upstream patch bash44-007
  When performing filename completion, bash dequotes the directory
  name being completed, which can result in match failures and
  potential unwanted expansion.
- Duplicate bash44-007 as readline70-002 as it seems to be missed
- Add upstream patch bash44-008
  Under certain circumstances, bash will evaluate arithmetic
  expressions as part of reading an expression token even when
  evaluation is suppressed. This happens while evaluating a
  conditional expression and skipping over the failed branch of the
  expression.
- Add upstream patch bash44-009
  There is a race condition in add_history() that can be triggered
  by a fatal signal arriving between the time the history length
  is updated and the time the history list update is completed.
  A later attempt to reference an invalid history entry can cause
  a crash.
- Add upstream patch bash44-010
  Depending on compiler optimizations and behavior, the `read'
  builtin may not save partial input when a timeout occurs.
- Add upstream patch bash44-011
  Subshells begun to run command and process substitutions may
  attempt to set the terminal's process group to an incorrect
  value if they receive a fatal signal.  This depends on the
  behavior of the process that starts the shell.
- Add upstream patch bash44-012
  When -N is used, the input is not supposed to be split using
  $IFS, but leading and trailing IFS whitespace was still removed.</changelog>
  <changelog author="werner@suse.de" date="1485777600">- Add upstream patch readline70-002 which replace old one
  There is a race condition in add_history() that can be triggered by a fatal
  signal arriving between the time the history length is updated and the time
  the history list update is completed. A later attempt to reference an
  invalid history entry can cause a crash.
- Add upstream patch readline70-003
  Readline-7.0 uses pselect(2) to allow readline to handle signals that do not
  interrupt read(2), such as SIGALRM, before reading another character.  The
  signal mask used in the pselect call did not take into account signals the
  calling application blocked before calling readline().</changelog>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
</package>
<package pkgid="5debbfa5d7769c47efb1bff5e6482719bf3d846f6ec6d8bca7eadbc11657e064" name="bbswitch" arch="src">
  <version epoch="0" ver="0.8" rel="lp150.2.2.1"/>
  <changelog author="tchvatal@suse.com" date="1389700800">- Create proper changelog with osc vc</changelog>
  <changelog author="tchvatal@suse.com" date="1389700801">- Cleanup the spec to adhere official formatting rules.</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- Add kernel word to the description</changelog>
  <changelog author="tchvatal@suse.com" date="1401883200">- Add the modules autoloading for the package.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883201">- Provide bbswitch-dkms for time being to allow migration.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883202">- Say goodbye to bbswitch-dkms and use just the direct bbswitch.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883203">- Name the modprobe.d file like the others.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Install copying file</changelog>
  <changelog author="dvlaeev@suse.com" date="1408622400">- Make architecture exclusive to x86 platform</changelog>
  <changelog author="tchvatal@suse.com" date="1444478400">- Add %dir for %{_libexecdir}/modules_load.d as it is owned by systemd
  and there is no reason to have that in deps</changelog>
  <changelog author="tchvatal@suse.com" date="1510488000">- Depend on libelf to build correctly on tumbleweed</changelog>
</package>
<package pkgid="722a55fb8d522d22486b8910ded261c0574ba34787175b27cf8ce259254472ef" name="bbswitch" arch="x86_64">
  <version epoch="0" ver="0.8" rel="lp150.2.2.1"/>
  <changelog author="tchvatal@suse.com" date="1389700800">- Create proper changelog with osc vc</changelog>
  <changelog author="tchvatal@suse.com" date="1389700801">- Cleanup the spec to adhere official formatting rules.</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- Add kernel word to the description</changelog>
  <changelog author="tchvatal@suse.com" date="1401883200">- Add the modules autoloading for the package.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883201">- Provide bbswitch-dkms for time being to allow migration.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883202">- Say goodbye to bbswitch-dkms and use just the direct bbswitch.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883203">- Name the modprobe.d file like the others.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Install copying file</changelog>
  <changelog author="dvlaeev@suse.com" date="1408622400">- Make architecture exclusive to x86 platform</changelog>
  <changelog author="tchvatal@suse.com" date="1444478400">- Add %dir for %{_libexecdir}/modules_load.d as it is owned by systemd
  and there is no reason to have that in deps</changelog>
  <changelog author="tchvatal@suse.com" date="1510488000">- Depend on libelf to build correctly on tumbleweed</changelog>
</package>
<package pkgid="a309550c7284521fd7ab5a5c1370b6ff7930d7973103470bff644ebd15b3a1b9" name="bbswitch-kmp-default" arch="x86_64">
  <version epoch="0" ver="0.8_k4.12.14_lp150.12.13" rel="lp150.2.2.1"/>
  <changelog author="tchvatal@suse.com" date="1389700800">- Create proper changelog with osc vc</changelog>
  <changelog author="tchvatal@suse.com" date="1389700801">- Cleanup the spec to adhere official formatting rules.</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- Add kernel word to the description</changelog>
  <changelog author="tchvatal@suse.com" date="1401883200">- Add the modules autoloading for the package.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883201">- Provide bbswitch-dkms for time being to allow migration.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883202">- Say goodbye to bbswitch-dkms and use just the direct bbswitch.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883203">- Name the modprobe.d file like the others.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Install copying file</changelog>
  <changelog author="dvlaeev@suse.com" date="1408622400">- Make architecture exclusive to x86 platform</changelog>
  <changelog author="tchvatal@suse.com" date="1444478400">- Add %dir for %{_libexecdir}/modules_load.d as it is owned by systemd
  and there is no reason to have that in deps</changelog>
  <changelog author="tchvatal@suse.com" date="1510488000">- Depend on libelf to build correctly on tumbleweed</changelog>
</package>
<package pkgid="91d9c56e19b0793a2971e3dc9d0ba83323be0fa60c55fa490fadf1185d710151" name="bcache-tools" arch="src">
  <version epoch="0" ver="1.0.9" rel="lp150.2.3.1"/>
  <changelog author="ro@suse.de" date="1298289600">- create package</changelog>
  <changelog author="jengelh@inai.de" date="1361880000">- Update to new current snapshot
  42c182c6ab1530b5e3b18893f284da3eaec46e74 (0.1.g45)</changelog>
  <changelog author="jengelh@inai.de" date="1372248000">- Move udev rules to /usr/lib/udev/rules.d</changelog>
  <changelog author="jengelh@inai.de" date="1375876800">- Update to new snapshot 0.1.g71
  * Support for superblocks up to version 4</changelog>
  <changelog author="oneukum@suse.com" date="1395230400">- Move bcache rule from position 61 to position 74
  (bnc#868938)</changelog>
  <changelog author="jengelh@inai.de" date="1396612800">- Update to new upstream release 0.9
  * Run probe-bcache a little later in the udev rule sequence
  (moving from position 61 to 69), fixing a machine hang on
  bcache reassemble (bnc#868938)
- Add 0001-build-remove-inline-keyword-from-crc64.patch, this is
  a build fix.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of another patch from 0001- to 1001- to indicate this
  is specific patch for SUSE,
  - 1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
</package>
<package pkgid="20d41176dcdc52156f59a355f8620c39aa96f835ef53e4cfd243283259f87801" name="bcache-tools" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="lp150.2.3.1"/>
  <changelog author="ro@suse.de" date="1298289600">- create package</changelog>
  <changelog author="jengelh@inai.de" date="1361880000">- Update to new current snapshot
  42c182c6ab1530b5e3b18893f284da3eaec46e74 (0.1.g45)</changelog>
  <changelog author="jengelh@inai.de" date="1372248000">- Move udev rules to /usr/lib/udev/rules.d</changelog>
  <changelog author="jengelh@inai.de" date="1375876800">- Update to new snapshot 0.1.g71
  * Support for superblocks up to version 4</changelog>
  <changelog author="oneukum@suse.com" date="1395230400">- Move bcache rule from position 61 to position 74
  (bnc#868938)</changelog>
  <changelog author="jengelh@inai.de" date="1396612800">- Update to new upstream release 0.9
  * Run probe-bcache a little later in the udev rule sequence
  (moving from position 61 to 69), fixing a machine hang on
  bcache reassemble (bnc#868938)
- Add 0001-build-remove-inline-keyword-from-crc64.patch, this is
  a build fix.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of another patch from 0001- to 1001- to indicate this
  is specific patch for SUSE,
  - 1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
</package>
<package pkgid="989dd1dac697704aae34906550e95e305b6f899a93aa9bccc73eb653dd4b429e" name="bcm43xx-firmware" arch="noarch">
  <version epoch="0" ver="20180314" rel="lp150.2.3.1"/>
  <changelog author="fvogt@suse.com" date="1472126400">- Add initial package</changelog>
  <changelog author="fvogt@suse.com" date="1472472000">- Make Source: URLs absolute
- Update brcmfmac43430-sdio.bin to 7.45.41.26</changelog>
  <changelog author="afaerber@suse.de" date="1472558400">- Renamed package from brcm43430-firmware to bcm43430-firmware</changelog>
  <changelog author="afaerber@suse.de" date="1472904000">- Renamed package from bcm43430-firmware to bcm43xx-firmware (duwe)
- Renamed brcmfmac43430-sdio.txt to brcmfmac43430-sdio-rpi3.txt and
  added post-install script to symlink
  * Added brcmfmac43362-sdio-{cubietruck,bananapi-{m1+,m2}}.txt</changelog>
  <changelog author="afaerber@suse.de" date="1473249600">- Move %post script to install-brcmfmac.sh, add 50-brcmfmac.conf.
  This avoids workarounds for Kiwi images. (tiwai)</changelog>
  <changelog author="afaerber@suse.de" date="1476792000">- Dropped brcmfmac43430-sdio.bin (in kernel-firmware now)</changelog>
  <changelog author="tbechtold@suse.com" date="1483444800">- Add brcmfmac4329-sdio-cubox-i.txt and brcmfmac4330-sdio-cubox-i.txt.</changelog>
  <changelog author="afaerber@suse.de" date="1483876800">- Add vendor prefix for CuBox-i compatible string
- Reorder by board name</changelog>
  <changelog author="afaerber@suse.de" date="1484568000">- Add brcmfmac4339-sdio-vega-s95-telos.txt</changelog>
  <changelog author="afaerber@suse.de" date="1491825600">- Require kernel-firmware, suggested by fvogt. (bsc#1033137)
  Don't require version 20161005 or later, to remain compatible
  with older distributions.
- Bump version to today's date. This will allow other packages
  such as kernel-firmware to conflict against our older version.</changelog>
  <changelog author="afaerber@suse.de" date="1497268800">- Add Supplements for Raspberry Pi 3 (bsc#1041823)
- Resolve NUL char warning on modprobe for Tumbleweed by properly
  iterating over zero-separated DT compatible strings</changelog>
  <changelog author="agraf@suse.com" date="1521028800">- Add support for RPi 3 B+ (bcm43455, bsc#1085262)</changelog>
  <changelog author="tiwai@suse.de" date="1530014400">- Add brcmfmac4356-pcie.txt for BCM 4356 PCI (bsc#1099149)</changelog>
</package>
<package pkgid="463b5218fab5672082eb8f39fcefcbcc66f3d3507c4520ac706dc1d769b4bcde" name="bcm43xx-firmware" arch="src">
  <version epoch="0" ver="20180314" rel="lp150.2.3.1"/>
  <changelog author="fvogt@suse.com" date="1472126400">- Add initial package</changelog>
  <changelog author="fvogt@suse.com" date="1472472000">- Make Source: URLs absolute
- Update brcmfmac43430-sdio.bin to 7.45.41.26</changelog>
  <changelog author="afaerber@suse.de" date="1472558400">- Renamed package from brcm43430-firmware to bcm43430-firmware</changelog>
  <changelog author="afaerber@suse.de" date="1472904000">- Renamed package from bcm43430-firmware to bcm43xx-firmware (duwe)
- Renamed brcmfmac43430-sdio.txt to brcmfmac43430-sdio-rpi3.txt and
  added post-install script to symlink
  * Added brcmfmac43362-sdio-{cubietruck,bananapi-{m1+,m2}}.txt</changelog>
  <changelog author="afaerber@suse.de" date="1473249600">- Move %post script to install-brcmfmac.sh, add 50-brcmfmac.conf.
  This avoids workarounds for Kiwi images. (tiwai)</changelog>
  <changelog author="afaerber@suse.de" date="1476792000">- Dropped brcmfmac43430-sdio.bin (in kernel-firmware now)</changelog>
  <changelog author="tbechtold@suse.com" date="1483444800">- Add brcmfmac4329-sdio-cubox-i.txt and brcmfmac4330-sdio-cubox-i.txt.</changelog>
  <changelog author="afaerber@suse.de" date="1483876800">- Add vendor prefix for CuBox-i compatible string
- Reorder by board name</changelog>
  <changelog author="afaerber@suse.de" date="1484568000">- Add brcmfmac4339-sdio-vega-s95-telos.txt</changelog>
  <changelog author="afaerber@suse.de" date="1491825600">- Require kernel-firmware, suggested by fvogt. (bsc#1033137)
  Don't require version 20161005 or later, to remain compatible
  with older distributions.
- Bump version to today's date. This will allow other packages
  such as kernel-firmware to conflict against our older version.</changelog>
  <changelog author="afaerber@suse.de" date="1497268800">- Add Supplements for Raspberry Pi 3 (bsc#1041823)
- Resolve NUL char warning on modprobe for Tumbleweed by properly
  iterating over zero-separated DT compatible strings</changelog>
  <changelog author="agraf@suse.com" date="1521028800">- Add support for RPi 3 B+ (bcm43455, bsc#1085262)</changelog>
  <changelog author="tiwai@suse.de" date="1530014400">- Add brcmfmac4356-pcie.txt for BCM 4356 PCI (bsc#1099149)</changelog>
</package>
<package pkgid="28627a2166fb890750e795dbd95e8579156d7ca78c4254d48a7ee5f57b5dbf6a" name="bind" arch="src">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="2b8cc4d1c8a9b254679537cf6980d75ebeae83bc8d60b1e5087248ded54282c6" name="bind" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="b98d1ab4c872c9d07febf00b7987e2528281de38cff4786e9fac6e8b528326dc" name="bind" arch="src">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="6ab082a94169bfb77ae1f3f316400a1946400327ac64de92f56e76267083ab9c" name="bind" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="76e81b5809595f95f6e806233d32d4314dc1a94f98cf8e8267d2fbe5fdf51096" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="bfe6f708346e36f17ce1d03e799ed3f153bb5ebb84dd7fa33e3e68dc30268ca6" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="14ff7004f55361c2e28bf36a8956e2986aa5a163e418aa178c7b4563f9b78749" name="bind-devel-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="d96976a61a1a2af7b98df850990aa21f0185fc96876ae417e5eff4a87b973f89" name="bind-devel-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="f69d4172007f37817132d460fbb6d1ce2210f984307ccfbdd8f705720150fd6c" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="6fc9a2a921667b0101dfc08404a6e50c7699966f1748d6b1572cb692e6eb88e6" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="3aab50f16097e623622010cdbe6c44a345bcb1b9f551d3b8c50bf3816140c2d3" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="79fcf013a9a7060b3aaf961f2f832c872c5a24f73f4549f958c8d16374e46f84" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="b6423e962c5013e4198ef69e33180701e738e62f0df796ba89d9b8b437ddcf77" name="bind-lwresd" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="f3308295628cbf64aaa7e49b8d1d3136f6dc9ad6f1adfc72afe377235a816ae1" name="bind-lwresd" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="c7d621c078512d93ff0a30f5090f797c089cf36aee2863f029ed6cd91357ea0b" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="5c2795a1f1550120e40e844079cf2b81cf8e13b9fe0fde7c06013942a7a08d60" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="8421fff36cbfcce70b98c7511bca83ac8b35ff95c6f8369392c170383f2fd0e4" name="binutils" arch="src">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="bdc89244df8eccb535b98a9cf04bb0868f78872ca1853a33b4561d18926931fa" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="0894dfa08a18affe0f52eff386325e47f8d653067911c517a91b8ac100fcce43" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="75c570ca14f9bb6ef5fa6b18bc248ed600f3bdb69a02d5e69ca5152034a8801d" name="binutils-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="934893d24ddb0b765a1edfd31159b3988c6ea504d29e53211686f61225f7bd64" name="binutils-gold" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="976b6add0e93ea0a13ac85930675edd354560823a3b83fb958393d530542469f" name="biosdevname" arch="src">
  <version epoch="0" ver="0.7.3" rel="lp150.3.3.1"/>
  <changelog author="trenn@suse.de" date="1399550400">- Provide Supplements:    modalias(dmi:*svnDell*)
  so that the package gets autoinstalled on all Dell platforms
  bnc#876733</changelog>
  <changelog author="trenn@suse.de" date="1400241600">- Revert biosdevname calling with different parameters introduced
  with the change from the 22th of April as suggested by Dell.
  Modified: biosdevname_udevrule_rename_all_network_devices.patch</changelog>
  <changelog author="trenn@suse.de" date="1402660800">- For some reason /usr/lib/udev/rules.d/99-systemd.rules seem not to exist
  anymore. This is used to determine which udev rules.d to use.
  Use 95-udev-late.rules instead.
  Modified: udev-rule-path.patch</changelog>
  <changelog author="trenn@suse.de" date="1402660801">- Fix missing %posttrans section</changelog>
  <changelog author="trenn@suse.de" date="1407844800">- Add mainline commit: 51b8cdb0b60df3baa
  With this patch, the info can be showed correctly if there are two or more
  PCI root ports in the same Bus ID/Device ID (bnc#890562)
  Add: fix_several_PCI_root_ports_in_one_bus.patch</changelog>
  <changelog author="trenn@suse.de" date="1421928000">- Update to version 0.6.1
- Do not disable rule via perl script in .spec file, better use a patch
  (biosdevname_udevrule_rename_all_network_devices.patch)
- Modify configure.ac via sed to make use of %{_udevruledir} from .spec file
- Remove already integrated patches in latest source code:
  Delete biosdevname_v0.5.0_to_git_c140ce659a204d67e4cc.patch
  Delete biosdevname_udevrule_rename_all_network_devices.patch
  Delete fix_several_PCI_root_ports_in_one_bus.patch
  Modify udev-rule-path.patch
  Modify whitelist-dell</changelog>
  <changelog author="meissner@suse.com" date="1424520000">- biosdevname-pic.patch: make cpuid() not expose %ebx out of
  assembler, so we can build it with -fPIE.</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="zaitor@opensuse.org" date="1428667200">- Fix fault in ignore-broken-BIOSes patch (boo#920054).</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 0.6.2
  * no upstream changelog provided</changelog>
  <changelog author="werner@suse.de" date="1436788800">- Add missed build require on pkgconfig udev</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.7.1
  * no upstream changelog provided</changelog>
  <changelog author="trenn@suse.de" date="1457092800">- Update to latest 0.7.2 version (fate#319998)</changelog>
  <changelog author="olaf@aepfle.de" date="1471348800">- Detect dom0 via xenfs instead of cpuid to compensate for ABI
  change in xen-4.7 on AMD systems. (bnc#974257)
  biosdevname-dom0.patch</changelog>
  <changelog author="felix.gerling@suse.com" date="1484827200">-  Update to HEAD 66eab208d3c2abe947ba0a793094ee856e8fb3ee
  * Fix use-after-free of fd</changelog>
  <changelog author="fschnizlein@suse.com" date="1497009600">- Update to latest HEAD to 02811d5165c2eeecf8797fe9b5088d6e78bd25db
  * Changed source to github
  * Ignore naming of non-Ethernet network interfaces
  * Prevent reading of VPD-DCM strings for SRIOV-vfs
  - removed patch v0.7.2_to_HEAD_66eab208.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506081600">- Update to version 0.7.3
  * Shipping and future Dell EMC systems support consistent network
    device naming feature.
  [fate#332490]</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="josef.moellers@suse.com" date="1528113600">- Prevent infinite recursion in dmidecode.c::smbios_setslot by
  checking that subordinate bus has a number greater than the
  current bus.
  [bsc#1093625, dmidecode-prevent-infinite-recursion.patch]</changelog>
</package>
<package pkgid="9596a9d707e2da4b64752b5d06e75d3e845104319abfd60c053aaf9d9dcf41fd" name="biosdevname" arch="x86_64">
  <version epoch="0" ver="0.7.3" rel="lp150.3.3.1"/>
  <changelog author="trenn@suse.de" date="1399550400">- Provide Supplements:    modalias(dmi:*svnDell*)
  so that the package gets autoinstalled on all Dell platforms
  bnc#876733</changelog>
  <changelog author="trenn@suse.de" date="1400241600">- Revert biosdevname calling with different parameters introduced
  with the change from the 22th of April as suggested by Dell.
  Modified: biosdevname_udevrule_rename_all_network_devices.patch</changelog>
  <changelog author="trenn@suse.de" date="1402660800">- For some reason /usr/lib/udev/rules.d/99-systemd.rules seem not to exist
  anymore. This is used to determine which udev rules.d to use.
  Use 95-udev-late.rules instead.
  Modified: udev-rule-path.patch</changelog>
  <changelog author="trenn@suse.de" date="1402660801">- Fix missing %posttrans section</changelog>
  <changelog author="trenn@suse.de" date="1407844800">- Add mainline commit: 51b8cdb0b60df3baa
  With this patch, the info can be showed correctly if there are two or more
  PCI root ports in the same Bus ID/Device ID (bnc#890562)
  Add: fix_several_PCI_root_ports_in_one_bus.patch</changelog>
  <changelog author="trenn@suse.de" date="1421928000">- Update to version 0.6.1
- Do not disable rule via perl script in .spec file, better use a patch
  (biosdevname_udevrule_rename_all_network_devices.patch)
- Modify configure.ac via sed to make use of %{_udevruledir} from .spec file
- Remove already integrated patches in latest source code:
  Delete biosdevname_v0.5.0_to_git_c140ce659a204d67e4cc.patch
  Delete biosdevname_udevrule_rename_all_network_devices.patch
  Delete fix_several_PCI_root_ports_in_one_bus.patch
  Modify udev-rule-path.patch
  Modify whitelist-dell</changelog>
  <changelog author="meissner@suse.com" date="1424520000">- biosdevname-pic.patch: make cpuid() not expose %ebx out of
  assembler, so we can build it with -fPIE.</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="zaitor@opensuse.org" date="1428667200">- Fix fault in ignore-broken-BIOSes patch (boo#920054).</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 0.6.2
  * no upstream changelog provided</changelog>
  <changelog author="werner@suse.de" date="1436788800">- Add missed build require on pkgconfig udev</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.7.1
  * no upstream changelog provided</changelog>
  <changelog author="trenn@suse.de" date="1457092800">- Update to latest 0.7.2 version (fate#319998)</changelog>
  <changelog author="olaf@aepfle.de" date="1471348800">- Detect dom0 via xenfs instead of cpuid to compensate for ABI
  change in xen-4.7 on AMD systems. (bnc#974257)
  biosdevname-dom0.patch</changelog>
  <changelog author="felix.gerling@suse.com" date="1484827200">-  Update to HEAD 66eab208d3c2abe947ba0a793094ee856e8fb3ee
  * Fix use-after-free of fd</changelog>
  <changelog author="fschnizlein@suse.com" date="1497009600">- Update to latest HEAD to 02811d5165c2eeecf8797fe9b5088d6e78bd25db
  * Changed source to github
  * Ignore naming of non-Ethernet network interfaces
  * Prevent reading of VPD-DCM strings for SRIOV-vfs
  - removed patch v0.7.2_to_HEAD_66eab208.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506081600">- Update to version 0.7.3
  * Shipping and future Dell EMC systems support consistent network
    device naming feature.
  [fate#332490]</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="josef.moellers@suse.com" date="1528113600">- Prevent infinite recursion in dmidecode.c::smbios_setslot by
  checking that subordinate bus has a number greater than the
  current bus.
  [bsc#1093625, dmidecode-prevent-infinite-recursion.patch]</changelog>
</package>
<package pkgid="6fb61ce803a474411af83bd417dcd9ce891436f2e5bb9f579a5a18841604ab05" name="bitcoin" arch="src">
  <version epoch="0" ver="0.16.3" rel="lp150.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1456056000">- Update to 0.12.0
  * For a complete list of changes see provided release-notes
- Small spec file cleanups
  * remove old obsole/provides
  * move icon handling scriplets to correct subpackage</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Use pretty name for tarball
- Update describtion in .firewall</changelog>
  <changelog author="mpluskal@suse.com" date="1462017600">- Update to 0.12.1
  * For a complete list of changes see provided release-notes
- Drop no longer needed patch
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Small spec file polishing</changelog>
  <changelog author="mpluskal@suse.com" date="1464350400">- Remove unnecessary build dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update test dependencies
- Build with safer ldflags</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466424000">- put back still need patch for ppc64le
  bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
  (subset of upstream commit id cf5c786)</changelog>
  <changelog author="mpluskal@suse.com" date="1472040000">- Update to version 0.13.0:
  * For a complete list of changes see provided release-notes
- Drop upstreamed patch:
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Fail build on testsuite failure</changelog>
  <changelog author="mpluskal@suse.com" date="1474200000">- Speedup build/reduce it's memory consumption by using gold linker</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 0.13.1:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Update to version 0.14.0:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 0.14.1:
  * For a complete list of changes see provided release-notes
- Update unit file</changelog>
  <changelog author="mpluskal@suse.com" date="1497873600">- Update to version 0.14.2
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1505217600">- Update to version 0.15.0
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1507550400">- Update to version 0.15.0.1:
  * Some clients may have crashed at startup because a custom fee
    setting was configured that no longer exists in the GUI
  * Small translation updates
  * update manpages, forgotten in 0.15.0
- Small specfile cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1514808000">- Update to version 0.15.1:
  * Network fork safety enhancements
  * Miner block size limiting deprecated
  * GUI settings backed up on reset
  * Duplicate wallets disallowed
  * Debug -minimumchainwork argument added
  * Low-level RPC changes
- Fix building with current boost:
  * bitcoin-boost_1_66.patch</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Trim redundant wording from description.</changelog>
  <changelog author="develop7@develop7.info" date="1520596800">- Update to version 0.16.0
  * Segwit Wallet
  * BIP173 (Bech32) Address support ("bc1..." addresses)
  * HD-wallets by default
  * Replace-By-Fee by default in GUI
  * Wallets directory configuration (`-walletdir`)
  * Build: Minimum GCC bumped to 4.8.x
  * Support for signalling pruned nodes (BIP159)
  * Performance: SHA256 assembly enabled by default
  * GUI changes
  * RPC changes
- Remove bitcoin-boost_1_66.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1529323200">- Update to version 0.16.1:
  * For complete list of changes see release-notes-0.16.1.md</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537963200">- Update to version 0.16.3:
  * For complete list of changes see:
    + release-notes-0.16.3.md
    + release-notes-0.16.2.md
- Resolves bsc#1108992 CVE-2018-17144</changelog>
</package>
<package pkgid="b3176f58a6e45dd09e566e84991657febeb61138352dbf350ed3b965fbcdd723" name="bitcoin-qt5" arch="x86_64">
  <version epoch="0" ver="0.16.3" rel="lp150.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1456056000">- Update to 0.12.0
  * For a complete list of changes see provided release-notes
- Small spec file cleanups
  * remove old obsole/provides
  * move icon handling scriplets to correct subpackage</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Use pretty name for tarball
- Update describtion in .firewall</changelog>
  <changelog author="mpluskal@suse.com" date="1462017600">- Update to 0.12.1
  * For a complete list of changes see provided release-notes
- Drop no longer needed patch
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Small spec file polishing</changelog>
  <changelog author="mpluskal@suse.com" date="1464350400">- Remove unnecessary build dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update test dependencies
- Build with safer ldflags</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466424000">- put back still need patch for ppc64le
  bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
  (subset of upstream commit id cf5c786)</changelog>
  <changelog author="mpluskal@suse.com" date="1472040000">- Update to version 0.13.0:
  * For a complete list of changes see provided release-notes
- Drop upstreamed patch:
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Fail build on testsuite failure</changelog>
  <changelog author="mpluskal@suse.com" date="1474200000">- Speedup build/reduce it's memory consumption by using gold linker</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 0.13.1:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Update to version 0.14.0:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 0.14.1:
  * For a complete list of changes see provided release-notes
- Update unit file</changelog>
  <changelog author="mpluskal@suse.com" date="1497873600">- Update to version 0.14.2
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1505217600">- Update to version 0.15.0
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1507550400">- Update to version 0.15.0.1:
  * Some clients may have crashed at startup because a custom fee
    setting was configured that no longer exists in the GUI
  * Small translation updates
  * update manpages, forgotten in 0.15.0
- Small specfile cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1514808000">- Update to version 0.15.1:
  * Network fork safety enhancements
  * Miner block size limiting deprecated
  * GUI settings backed up on reset
  * Duplicate wallets disallowed
  * Debug -minimumchainwork argument added
  * Low-level RPC changes
- Fix building with current boost:
  * bitcoin-boost_1_66.patch</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Trim redundant wording from description.</changelog>
  <changelog author="develop7@develop7.info" date="1520596800">- Update to version 0.16.0
  * Segwit Wallet
  * BIP173 (Bech32) Address support ("bc1..." addresses)
  * HD-wallets by default
  * Replace-By-Fee by default in GUI
  * Wallets directory configuration (`-walletdir`)
  * Build: Minimum GCC bumped to 4.8.x
  * Support for signalling pruned nodes (BIP159)
  * Performance: SHA256 assembly enabled by default
  * GUI changes
  * RPC changes
- Remove bitcoin-boost_1_66.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1529323200">- Update to version 0.16.1:
  * For complete list of changes see release-notes-0.16.1.md</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537963200">- Update to version 0.16.3:
  * For complete list of changes see:
    + release-notes-0.16.3.md
    + release-notes-0.16.2.md
- Resolves bsc#1108992 CVE-2018-17144</changelog>
</package>
<package pkgid="913825bee8409ece24e29ada58277db9c99042c34e2134e114b134860b089926" name="bitcoin-test" arch="x86_64">
  <version epoch="0" ver="0.16.3" rel="lp150.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1456056000">- Update to 0.12.0
  * For a complete list of changes see provided release-notes
- Small spec file cleanups
  * remove old obsole/provides
  * move icon handling scriplets to correct subpackage</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Use pretty name for tarball
- Update describtion in .firewall</changelog>
  <changelog author="mpluskal@suse.com" date="1462017600">- Update to 0.12.1
  * For a complete list of changes see provided release-notes
- Drop no longer needed patch
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Small spec file polishing</changelog>
  <changelog author="mpluskal@suse.com" date="1464350400">- Remove unnecessary build dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update test dependencies
- Build with safer ldflags</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466424000">- put back still need patch for ppc64le
  bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
  (subset of upstream commit id cf5c786)</changelog>
  <changelog author="mpluskal@suse.com" date="1472040000">- Update to version 0.13.0:
  * For a complete list of changes see provided release-notes
- Drop upstreamed patch:
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Fail build on testsuite failure</changelog>
  <changelog author="mpluskal@suse.com" date="1474200000">- Speedup build/reduce it's memory consumption by using gold linker</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 0.13.1:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Update to version 0.14.0:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 0.14.1:
  * For a complete list of changes see provided release-notes
- Update unit file</changelog>
  <changelog author="mpluskal@suse.com" date="1497873600">- Update to version 0.14.2
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1505217600">- Update to version 0.15.0
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1507550400">- Update to version 0.15.0.1:
  * Some clients may have crashed at startup because a custom fee
    setting was configured that no longer exists in the GUI
  * Small translation updates
  * update manpages, forgotten in 0.15.0
- Small specfile cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1514808000">- Update to version 0.15.1:
  * Network fork safety enhancements
  * Miner block size limiting deprecated
  * GUI settings backed up on reset
  * Duplicate wallets disallowed
  * Debug -minimumchainwork argument added
  * Low-level RPC changes
- Fix building with current boost:
  * bitcoin-boost_1_66.patch</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Trim redundant wording from description.</changelog>
  <changelog author="develop7@develop7.info" date="1520596800">- Update to version 0.16.0
  * Segwit Wallet
  * BIP173 (Bech32) Address support ("bc1..." addresses)
  * HD-wallets by default
  * Replace-By-Fee by default in GUI
  * Wallets directory configuration (`-walletdir`)
  * Build: Minimum GCC bumped to 4.8.x
  * Support for signalling pruned nodes (BIP159)
  * Performance: SHA256 assembly enabled by default
  * GUI changes
  * RPC changes
- Remove bitcoin-boost_1_66.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1529323200">- Update to version 0.16.1:
  * For complete list of changes see release-notes-0.16.1.md</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537963200">- Update to version 0.16.3:
  * For complete list of changes see:
    + release-notes-0.16.3.md
    + release-notes-0.16.2.md
- Resolves bsc#1108992 CVE-2018-17144</changelog>
</package>
<package pkgid="e5c4b18abc3d63b7f4057c2f9a6fe867056fcfb36920b2730be1e68ed8d8dd71" name="bitcoin-utils" arch="x86_64">
  <version epoch="0" ver="0.16.3" rel="lp150.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1456056000">- Update to 0.12.0
  * For a complete list of changes see provided release-notes
- Small spec file cleanups
  * remove old obsole/provides
  * move icon handling scriplets to correct subpackage</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Use pretty name for tarball
- Update describtion in .firewall</changelog>
  <changelog author="mpluskal@suse.com" date="1462017600">- Update to 0.12.1
  * For a complete list of changes see provided release-notes
- Drop no longer needed patch
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Small spec file polishing</changelog>
  <changelog author="mpluskal@suse.com" date="1464350400">- Remove unnecessary build dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update test dependencies
- Build with safer ldflags</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466424000">- put back still need patch for ppc64le
  bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
  (subset of upstream commit id cf5c786)</changelog>
  <changelog author="mpluskal@suse.com" date="1472040000">- Update to version 0.13.0:
  * For a complete list of changes see provided release-notes
- Drop upstreamed patch:
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Fail build on testsuite failure</changelog>
  <changelog author="mpluskal@suse.com" date="1474200000">- Speedup build/reduce it's memory consumption by using gold linker</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 0.13.1:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Update to version 0.14.0:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 0.14.1:
  * For a complete list of changes see provided release-notes
- Update unit file</changelog>
  <changelog author="mpluskal@suse.com" date="1497873600">- Update to version 0.14.2
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1505217600">- Update to version 0.15.0
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1507550400">- Update to version 0.15.0.1:
  * Some clients may have crashed at startup because a custom fee
    setting was configured that no longer exists in the GUI
  * Small translation updates
  * update manpages, forgotten in 0.15.0
- Small specfile cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1514808000">- Update to version 0.15.1:
  * Network fork safety enhancements
  * Miner block size limiting deprecated
  * GUI settings backed up on reset
  * Duplicate wallets disallowed
  * Debug -minimumchainwork argument added
  * Low-level RPC changes
- Fix building with current boost:
  * bitcoin-boost_1_66.patch</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Trim redundant wording from description.</changelog>
  <changelog author="develop7@develop7.info" date="1520596800">- Update to version 0.16.0
  * Segwit Wallet
  * BIP173 (Bech32) Address support ("bc1..." addresses)
  * HD-wallets by default
  * Replace-By-Fee by default in GUI
  * Wallets directory configuration (`-walletdir`)
  * Build: Minimum GCC bumped to 4.8.x
  * Support for signalling pruned nodes (BIP159)
  * Performance: SHA256 assembly enabled by default
  * GUI changes
  * RPC changes
- Remove bitcoin-boost_1_66.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1529323200">- Update to version 0.16.1:
  * For complete list of changes see release-notes-0.16.1.md</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537963200">- Update to version 0.16.3:
  * For complete list of changes see:
    + release-notes-0.16.3.md
    + release-notes-0.16.2.md
- Resolves bsc#1108992 CVE-2018-17144</changelog>
</package>
<package pkgid="f33446d0975072d0355a2bd35a0fb68d5acdee883cc88b609123f87a33227c95" name="bitcoind" arch="x86_64">
  <version epoch="0" ver="0.16.3" rel="lp150.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1456056000">- Update to 0.12.0
  * For a complete list of changes see provided release-notes
- Small spec file cleanups
  * remove old obsole/provides
  * move icon handling scriplets to correct subpackage</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Use pretty name for tarball
- Update describtion in .firewall</changelog>
  <changelog author="mpluskal@suse.com" date="1462017600">- Update to 0.12.1
  * For a complete list of changes see provided release-notes
- Drop no longer needed patch
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Small spec file polishing</changelog>
  <changelog author="mpluskal@suse.com" date="1464350400">- Remove unnecessary build dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update test dependencies
- Build with safer ldflags</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466424000">- put back still need patch for ppc64le
  bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
  (subset of upstream commit id cf5c786)</changelog>
  <changelog author="mpluskal@suse.com" date="1472040000">- Update to version 0.13.0:
  * For a complete list of changes see provided release-notes
- Drop upstreamed patch:
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Fail build on testsuite failure</changelog>
  <changelog author="mpluskal@suse.com" date="1474200000">- Speedup build/reduce it's memory consumption by using gold linker</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 0.13.1:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Update to version 0.14.0:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 0.14.1:
  * For a complete list of changes see provided release-notes
- Update unit file</changelog>
  <changelog author="mpluskal@suse.com" date="1497873600">- Update to version 0.14.2
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1505217600">- Update to version 0.15.0
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1507550400">- Update to version 0.15.0.1:
  * Some clients may have crashed at startup because a custom fee
    setting was configured that no longer exists in the GUI
  * Small translation updates
  * update manpages, forgotten in 0.15.0
- Small specfile cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1514808000">- Update to version 0.15.1:
  * Network fork safety enhancements
  * Miner block size limiting deprecated
  * GUI settings backed up on reset
  * Duplicate wallets disallowed
  * Debug -minimumchainwork argument added
  * Low-level RPC changes
- Fix building with current boost:
  * bitcoin-boost_1_66.patch</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Trim redundant wording from description.</changelog>
  <changelog author="develop7@develop7.info" date="1520596800">- Update to version 0.16.0
  * Segwit Wallet
  * BIP173 (Bech32) Address support ("bc1..." addresses)
  * HD-wallets by default
  * Replace-By-Fee by default in GUI
  * Wallets directory configuration (`-walletdir`)
  * Build: Minimum GCC bumped to 4.8.x
  * Support for signalling pruned nodes (BIP159)
  * Performance: SHA256 assembly enabled by default
  * GUI changes
  * RPC changes
- Remove bitcoin-boost_1_66.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1529323200">- Update to version 0.16.1:
  * For complete list of changes see release-notes-0.16.1.md</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537963200">- Update to version 0.16.3:
  * For complete list of changes see:
    + release-notes-0.16.3.md
    + release-notes-0.16.2.md
- Resolves bsc#1108992 CVE-2018-17144</changelog>
</package>
<package pkgid="6fa057cb161c8f5786797558a762be122cf3934206577bb44e0c3ff5b70103e2" name="blas-devel" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="55c4594a26ba05deef488b402c70b02469e1739943ebcfa4c4b216a1313c3d6b" name="blas-devel-32bit" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="40755516dae2c7975594216ad8940b660caedb08edee87451f4e72ca2e50ee50" name="blas-devel-static" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="aa2e4cf3d8bb35cf9e385db6bf91e18d91c9dac1428f76d5824364911110afe0" name="blas-man" arch="noarch">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1333108800">- Fixed building on openSUSE 11.4 by fixing defattr
- Made the package groups consistent: Development/Libraries/Parallel
- Cleaned up spec file formatting
- Made all requires use the new package naming</changelog>
  <changelog author="rguenther@suse.com" date="1333368000">- Undo spec file obfuscation</changelog>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
</package>
<package pkgid="e4ef4c1afd7252bcc3394aa8be29a69ae40c611a108f72308ef9490673da6c5f" name="bleachbit" arch="noarch">
  <version epoch="0" ver="2.0" rel="lp150.2.3.1"/>
  <changelog author="Sascha.Manns@open-slx.de" date="1321358400">- updated to version 0.9.1
- These are the changes since version 0.9.0:
  + Clean segments and segment_usage in Google Chrome History
  + Clean favicons on Chromium, Google Chrome
  + Clean "History Provider Cache" on Chromium and Google Chrome
  + Clean download history in Chromium, Google Chrome
  + Fix rare "ZeroDivisionError: float division" bug while cleaning free disk space.</changelog>
  <changelog author="Sascha.Manns@open-slx.de" date="1331985600">- updated to version 0.9.2
- These are the changes since version 0.9.1
  These are the changes since version 0.9.1:
  * Clean Firefox crash reports.
  * Clean more Google Chrome and Chromium history: omnibox shortcuts,
    Network Action Predictor, and keywords_backup.
  * Clean LibreOffice.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1344081600">- Update to 0.9.3.
  * The new application icon looks better ? especially on a black
    background.
  * Google Chrome and Chromium: clean some more SQLite database
    journals.
  * Google Chrome and Chromium: clean Favicons on new browser
    release (instead of giving an error about the database
    version).
  * Google Chrome, Chromium: find more bookmarks to avoid affecting
    history and favicons related to bookmarks, and avoid the error
    "KeyError: 'url'".
  * Be quiet about "Unsupported special file type" error message
    (lp#1012930).
  * Do not try to launch GUI if X is not available (lp#1004923).
  * Be quiet about "[Errno 39] Directory not empty" error message
    (lp#1012930).
- Build requires python-distribute instead of python-devel.
- Remove bleachbit.desktop from additional source: have it in
  tarball.
- Recommends language package.
- Clean up spec.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1345291200">- Fix runtime dependencies: really needs python-gnomevfs only.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1354795200">- Update to 0.9.4.
  * Add feature for user-defined custom cleaners. In the
    preferences, easily choose files and folders you regularly want
    to clean, and then select them from cleaning under System -
    Custom.
  * Google Chrome and Chromium: Fix error "Favicons is version 23"
    with Google Chrome 23.
  * Google Chrome and Chromium: Delete many more history files.
  * Google Chrome and Chromium: If bookmark files does not exist,
    do not throw an error.
  * Clean FAT32 partitions with more than 4GB free space.
  * Do not delete /usr/share/kde4/apps/ksgmltools2/customization
    required by kdelibs.
- Add cleaner example to docs.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1358164800">- Update to 0.9.5.
  * Google Chrome, Chromium: separate cleaning of passwords out of
    history into its own option.
  * Google Chrome: delete Flash cookies in Pepper Flash.
  * Google Chrome: delete more history.
  * Thunderbird: delete folder index files (.msf).
  * Clean out obsolete data (hashpath) in bleachbit.ini to reduce
    file size and improve privacy.
  * Improve compatibility of memory wiping with 64-bit systems.
  * Improve ability to run headless.
  * Support newer Linux kernels in memory cleaner by using new
    out-of-memory score adjustment /proc/pid/oom_score_adj.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1373630400">- Update to 0.9.6.
  * Improve wiping of free disk space.
  * Google Chrome: Fix error message no such table: keywords_backup:
    /home/foobar/.config/google-chrome/Default/Web Data.
  * Google Chrome: Fix error message Favicons is version 25.
  * Google Chrome: Delete more cache.
  * Clean Apache OpenOffice.org 3.4.1.
  * Clean LibreOffice 4.
  * OpenOffice.org: if history file has not changed, do not save
    it.
  * Adobe Acrobat: use wildcards to generically support more
    versions.
  * Do not clean VLC while it is running.
  * Thunderbird: clean indexes on Fedora.
  * Firefox: clean minidumps (crash information).
  * Clean more IcedTea (Java) cache.
  * Update Basque, Brazilian Portuguese, Croatian, English (United
    Kingdom), Esperanto, Estonian, French, German, Indonesian,
    Kirghiz, Lietuvi?, Polish, Russian, Slovak translations.
- Use full URL as a source.</changelog>
  <changelog author="saigkill@opensuse.org" date="1385294400">- updated to 1.0
- Changes:
  o The command line option --shred now shreds arbitrary files.
  o Add Octave cleaner
  o Add Warzone 2100 cleaner
  o Clean recently played in VLC (thanks to nolme/Vincent DUVERNET - Nolmë
    Informatique)
  o Google Chrome: Fix errors "Favicons is version 26" and "DatabaseError:
    no such column: full_path"
  o Google Chrome: delete more cache
  o Remove auto-hide option. (Before, it was a default.)
  o Specific to Linux
  * Coming soon: .deb package for Ubuntu 13.10 (Saucy Salamander).
  * Coming soon: .rpm package for openSUSE 11.4.
  * Add SQLite3 cleaner
  * Adobe Flash: clean NativeCache</changelog>
  <changelog author="saigkill@opensuse.org" date="1400155200">- Added patch to change KDE's Cleaning Path from .kde to .kde4
  * bleachbit-kde-patch.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1403006400">- Version bump to 1.2 with various small fixes.</changelog>
  <changelog author="ecsos@opensuse.org" date="1410350400">- Update to 1.4
  * Firefox: Fix DatabaseError: no such table: moz_hosts
  * Firefox: Purge the table moz_hosts in places.sqlite for the
    option url_history
  * Firefox: Delete Necko Predictive Network Actions
  * Firefox: Delete more session restore files
  * Google Chrome: fix error cleaning autofill_dates
  * Adobe Reader: use wildcards instead of specific versions
  (thanks to theatre-x)
  * Clean netMRL history in VLC media player (thanks to tiemay)
  * Clean GIMP version 2.8 (thanks to tiemay)
  * Improve support for Liferea (thanks to Lars Windolf)
  * Specific to Linux
  - Pass control of the ~/.cache/mozilla directory from the
    System - Cache cleaner to the Firefox - Cache cleaner
    (LP#1295826)
  - Clean additional locale directories (thanks to tstenner)
  - Clean .mask files in Easytag (thanks to tiemay)
  - Clean more history in the Links web browser (thanks to tiemay)
  - Add packages for CentOS 7 and RHEL 7</changelog>
  <changelog author="ecsos@opensuse.org" date="1417521600">- Update to 1.6
  * Google Chrome: fix error "Favicons is version 29"
  * Google Chrome: clean application cache directory.
  * Google Chrome and Chromium: in the Preferences (JSON) file
    clean a list of HTTP servers that used SPDY, which can be used
    to track servers to which the browser was connected
  * Firefox: clean more session restore files
  * Firefox: clean bookmark backups using a new option called
    Backup.
  * The auto-hide option, which was removed in version 1.0,
    is available again.
  * Specific to Linux
  - Google Chrome: delete Sync Data Backup
  - Chromium: delete application cache directory
  - Print a message when root account is being cleaned to avoid
    confusion
  - Whitelist more KDE IPC files under /tmp/ to fix problem
    launching BleachBit as root</changelog>
  <changelog author="p.drouand@gmail.com" date="1446379200">- Update to version 1.8
  * In Preferences, there is a new option "Confirm before delete"
    that disables the confirmation.
  * When BleachBit starts, the window is centered.
  * The tool "Shred Settings and Quit" in the File menu is fixed.
  * Added cleaning for Opera passwords.
  * Shrink storage size of BleachBit icon.
  * Add descriptions to many cleaners).
  * Add a new command line option --debug-log that logs debug messages
    to a file.
  * Replace hard-coded localizations cleaning system with CleanerML entries.
  * Whitelist /tmp/fsa for FSArchiver.
  * Suppress GTK+ warning in console.
  * Add packages for Debian 8, Fedora 21, and Ubuntu 15.04.
  * Remove packages for Fedora 19 and Ubuntu 13.10.
  * In CleanerML, a cleaner description can have a translation hint.
  * Set up Travis CI for better testing.
  * Improve unit tests.</changelog>
  <changelog author="mailaender@opensuse.org" date="1458475200">- Update to 1.10
  * Speed up identification of files using regular expressions by 5% to 50%
  * Allow relative paths with --shred command line argument (reported by Eva Putnam).
  * Add descriptions for cleaners (thanks to theatre-x).
  * Fix resizing of preference dialog (thanks to Anton Bobov).
  * Warn when deleting passwords on Firefox (reported by Theatre-X).
  * Accept abbreviations T and F in bleachbit.ini configuration (reported by Ken Wallace).
  * Show a user-friendly error message when checking for updates fails because of a network error (reported by Gary).
  * Improve logging of errors. Some errors are more informative, and on Windows, errors are unlikely to cause a popup message about bleachbit.exe.log.
  * Add an option to show file sizes as IEC units (1 KiB = 1024 bytes) instead of SI units (1 kB = 1000 bytes; thanks to Tristan Stenner).
  * Clean passwords on Firefox version 32+.
  * Clean Google Chrome cookies for non-default profiles.
  * Clean more autofill on Google Chrome (reported by pcdoctor01). If you are logged in to Google Chrome, it may automatically restore some of these values from your online Google account unless you disable the option Show addresses and credit cards from Google Payments in the autofill page of Google Chrome settings.
  * Add size column to side tree control (thanks to Ivor Hewitt).
  * Clean more localizations (thanks to Tristan Stenner).
  * Add localization codes (thanks to Tristan Stenner).
  * Fix memory cleaning on Ubuntu 15.10 and other distributions (reported by Richard Pearse).
  * Fix harmless error that localizations.xml is unusable (thanks to Tristan Stenner).
  * Do not show localizations at the base level (reported by BBUser).
  * Do not show Windows Explorer cleaner on Linux (reported by Tomás F. L.).
  * Fulfill Fedora license file location change.
  * Do not delete xauth under KDE (reported by mike).
  * Remove deprecated key encoding in bleachbit.desktop.
  * Drop support for Mandriva, which is dead.
  * Do not show cleaner is unusable message in the console (except when debug mode is enabled or in non-final releases).</changelog>
  <changelog author="mailaender@opensuse.org" date="1467547200">- Update to 1.12
  * Fix error Favicons is version 32 with Google Chrome 51 (reported by Holger)
  * Fix cleaning of Thumbnails in new Chromium and Google Chrome (reported by ineuw, patrick)
  * Fix crash with corrupt BleachBit.ini (reported by BitBleacher)
  * Fix error UNIQUE constraint failed error cleaning Firefox (reported by danjackson1 and gravy45)
  * Update EasyTAG cleaner (thanks to devmapper0)
  * Update Epiphany cleaner (thanks to devmapper0)
  * Update Evolution cleaner (thanks to skquinn)
  * Update GNOME cleaner (thanks to devmapper0)
  * Update KDE cleaner for KDE 4 on openSUSE (thanks to Mailaender)
  * Remove bleachbit-kde-patch.patch
  * Update Rhythmbox cleaner (thanks to devmapper0)
  * Update Thumbnails cleaner (thanks to devmapper0)
  * Update Transmission cleaner (thanks to devmapper0)
  * Update X11 cleaner (thanks to devmapper0)
  * Switch from GnomeVFS, which is deprecated, to GIO (reported by MM)
  * Do not repeat Google Chrome cache in preview (reported by Daniel Che)
  * Fix retention of translations for Chinese
  * Whitelist iBus Pinyin (reported by Josiah Hunter)</changelog>
  <changelog author="mailaender@opensuse.org" date="1473508800">- Add appdata.patch for https://en.opensuse.org/openSUSE:AppStore</changelog>
  <changelog author="jmatejek@suse.com" date="1499774400">- drop obsolete requirements on python-gnome and python-gobject2</changelog>
  <changelog author="aavindraa@gmail.com" date="1505908800">- Update to 1.17
  * There is a fix for handling special characters in usernames (LP#1347644).
  * Files can be dragged dropped onto the BleachBit window for shredding.
  * Enable "overwrite contents" and clean SQLite databases.
  * Clean HexChat (X-Chat).
  * 19 cleaners now use the XDG directory specification.
  * AppData information in the GNOME and KDE Software centers.
  * Clean journald.
  * Clean apt - autoremove.
  * Whitelisting should protect both the link source and target (LP#1455959).
- Drop appdata.patch, accepted upstream</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1519992000">- Update to version 2.0:
  * Add drag-and-drop support (thanks to contractor Pavel). Try dropping files onto the main application window.
  * Fix preservation of thumbnails on Google Chrome and Chromium .
  * Fix error Favicons is version 36 or 38 when cleaning Google Chrome and Chromium.
  * Fix DatabaseError: no such table: moz_favicons for some Firefox profiles.
  * Use HTTPS encryption when automatically checking for software updates.
  * Add software categories to bleachbit.desktop (thanks to Hugo Lefeuvre).
  * Whitelist Bluetooth daemon (reported by Timo Ollech).
  * Fix purging of GTK recently used resources list.
  * Improve Liferea cleaner (reported by Theatre-X).</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1533643200">- add missing dependency python-xml (boo#1104093).</changelog>
</package>
<package pkgid="e54c237ab21fef7c555a5c997fb526ff9bc38b595185408137be65f8d032a05a" name="bleachbit" arch="src">
  <version epoch="0" ver="2.0" rel="lp150.2.3.1"/>
  <changelog author="Sascha.Manns@open-slx.de" date="1321358400">- updated to version 0.9.1
- These are the changes since version 0.9.0:
  + Clean segments and segment_usage in Google Chrome History
  + Clean favicons on Chromium, Google Chrome
  + Clean "History Provider Cache" on Chromium and Google Chrome
  + Clean download history in Chromium, Google Chrome
  + Fix rare "ZeroDivisionError: float division" bug while cleaning free disk space.</changelog>
  <changelog author="Sascha.Manns@open-slx.de" date="1331985600">- updated to version 0.9.2
- These are the changes since version 0.9.1
  These are the changes since version 0.9.1:
  * Clean Firefox crash reports.
  * Clean more Google Chrome and Chromium history: omnibox shortcuts,
    Network Action Predictor, and keywords_backup.
  * Clean LibreOffice.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1344081600">- Update to 0.9.3.
  * The new application icon looks better ? especially on a black
    background.
  * Google Chrome and Chromium: clean some more SQLite database
    journals.
  * Google Chrome and Chromium: clean Favicons on new browser
    release (instead of giving an error about the database
    version).
  * Google Chrome, Chromium: find more bookmarks to avoid affecting
    history and favicons related to bookmarks, and avoid the error
    "KeyError: 'url'".
  * Be quiet about "Unsupported special file type" error message
    (lp#1012930).
  * Do not try to launch GUI if X is not available (lp#1004923).
  * Be quiet about "[Errno 39] Directory not empty" error message
    (lp#1012930).
- Build requires python-distribute instead of python-devel.
- Remove bleachbit.desktop from additional source: have it in
  tarball.
- Recommends language package.
- Clean up spec.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1345291200">- Fix runtime dependencies: really needs python-gnomevfs only.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1354795200">- Update to 0.9.4.
  * Add feature for user-defined custom cleaners. In the
    preferences, easily choose files and folders you regularly want
    to clean, and then select them from cleaning under System -
    Custom.
  * Google Chrome and Chromium: Fix error "Favicons is version 23"
    with Google Chrome 23.
  * Google Chrome and Chromium: Delete many more history files.
  * Google Chrome and Chromium: If bookmark files does not exist,
    do not throw an error.
  * Clean FAT32 partitions with more than 4GB free space.
  * Do not delete /usr/share/kde4/apps/ksgmltools2/customization
    required by kdelibs.
- Add cleaner example to docs.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1358164800">- Update to 0.9.5.
  * Google Chrome, Chromium: separate cleaning of passwords out of
    history into its own option.
  * Google Chrome: delete Flash cookies in Pepper Flash.
  * Google Chrome: delete more history.
  * Thunderbird: delete folder index files (.msf).
  * Clean out obsolete data (hashpath) in bleachbit.ini to reduce
    file size and improve privacy.
  * Improve compatibility of memory wiping with 64-bit systems.
  * Improve ability to run headless.
  * Support newer Linux kernels in memory cleaner by using new
    out-of-memory score adjustment /proc/pid/oom_score_adj.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1373630400">- Update to 0.9.6.
  * Improve wiping of free disk space.
  * Google Chrome: Fix error message no such table: keywords_backup:
    /home/foobar/.config/google-chrome/Default/Web Data.
  * Google Chrome: Fix error message Favicons is version 25.
  * Google Chrome: Delete more cache.
  * Clean Apache OpenOffice.org 3.4.1.
  * Clean LibreOffice 4.
  * OpenOffice.org: if history file has not changed, do not save
    it.
  * Adobe Acrobat: use wildcards to generically support more
    versions.
  * Do not clean VLC while it is running.
  * Thunderbird: clean indexes on Fedora.
  * Firefox: clean minidumps (crash information).
  * Clean more IcedTea (Java) cache.
  * Update Basque, Brazilian Portuguese, Croatian, English (United
    Kingdom), Esperanto, Estonian, French, German, Indonesian,
    Kirghiz, Lietuvi?, Polish, Russian, Slovak translations.
- Use full URL as a source.</changelog>
  <changelog author="saigkill@opensuse.org" date="1385294400">- updated to 1.0
- Changes:
  o The command line option --shred now shreds arbitrary files.
  o Add Octave cleaner
  o Add Warzone 2100 cleaner
  o Clean recently played in VLC (thanks to nolme/Vincent DUVERNET - Nolmë
    Informatique)
  o Google Chrome: Fix errors "Favicons is version 26" and "DatabaseError:
    no such column: full_path"
  o Google Chrome: delete more cache
  o Remove auto-hide option. (Before, it was a default.)
  o Specific to Linux
  * Coming soon: .deb package for Ubuntu 13.10 (Saucy Salamander).
  * Coming soon: .rpm package for openSUSE 11.4.
  * Add SQLite3 cleaner
  * Adobe Flash: clean NativeCache</changelog>
  <changelog author="saigkill@opensuse.org" date="1400155200">- Added patch to change KDE's Cleaning Path from .kde to .kde4
  * bleachbit-kde-patch.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1403006400">- Version bump to 1.2 with various small fixes.</changelog>
  <changelog author="ecsos@opensuse.org" date="1410350400">- Update to 1.4
  * Firefox: Fix DatabaseError: no such table: moz_hosts
  * Firefox: Purge the table moz_hosts in places.sqlite for the
    option url_history
  * Firefox: Delete Necko Predictive Network Actions
  * Firefox: Delete more session restore files
  * Google Chrome: fix error cleaning autofill_dates
  * Adobe Reader: use wildcards instead of specific versions
  (thanks to theatre-x)
  * Clean netMRL history in VLC media player (thanks to tiemay)
  * Clean GIMP version 2.8 (thanks to tiemay)
  * Improve support for Liferea (thanks to Lars Windolf)
  * Specific to Linux
  - Pass control of the ~/.cache/mozilla directory from the
    System - Cache cleaner to the Firefox - Cache cleaner
    (LP#1295826)
  - Clean additional locale directories (thanks to tstenner)
  - Clean .mask files in Easytag (thanks to tiemay)
  - Clean more history in the Links web browser (thanks to tiemay)
  - Add packages for CentOS 7 and RHEL 7</changelog>
  <changelog author="ecsos@opensuse.org" date="1417521600">- Update to 1.6
  * Google Chrome: fix error "Favicons is version 29"
  * Google Chrome: clean application cache directory.
  * Google Chrome and Chromium: in the Preferences (JSON) file
    clean a list of HTTP servers that used SPDY, which can be used
    to track servers to which the browser was connected
  * Firefox: clean more session restore files
  * Firefox: clean bookmark backups using a new option called
    Backup.
  * The auto-hide option, which was removed in version 1.0,
    is available again.
  * Specific to Linux
  - Google Chrome: delete Sync Data Backup
  - Chromium: delete application cache directory
  - Print a message when root account is being cleaned to avoid
    confusion
  - Whitelist more KDE IPC files under /tmp/ to fix problem
    launching BleachBit as root</changelog>
  <changelog author="p.drouand@gmail.com" date="1446379200">- Update to version 1.8
  * In Preferences, there is a new option "Confirm before delete"
    that disables the confirmation.
  * When BleachBit starts, the window is centered.
  * The tool "Shred Settings and Quit" in the File menu is fixed.
  * Added cleaning for Opera passwords.
  * Shrink storage size of BleachBit icon.
  * Add descriptions to many cleaners).
  * Add a new command line option --debug-log that logs debug messages
    to a file.
  * Replace hard-coded localizations cleaning system with CleanerML entries.
  * Whitelist /tmp/fsa for FSArchiver.
  * Suppress GTK+ warning in console.
  * Add packages for Debian 8, Fedora 21, and Ubuntu 15.04.
  * Remove packages for Fedora 19 and Ubuntu 13.10.
  * In CleanerML, a cleaner description can have a translation hint.
  * Set up Travis CI for better testing.
  * Improve unit tests.</changelog>
  <changelog author="mailaender@opensuse.org" date="1458475200">- Update to 1.10
  * Speed up identification of files using regular expressions by 5% to 50%
  * Allow relative paths with --shred command line argument (reported by Eva Putnam).
  * Add descriptions for cleaners (thanks to theatre-x).
  * Fix resizing of preference dialog (thanks to Anton Bobov).
  * Warn when deleting passwords on Firefox (reported by Theatre-X).
  * Accept abbreviations T and F in bleachbit.ini configuration (reported by Ken Wallace).
  * Show a user-friendly error message when checking for updates fails because of a network error (reported by Gary).
  * Improve logging of errors. Some errors are more informative, and on Windows, errors are unlikely to cause a popup message about bleachbit.exe.log.
  * Add an option to show file sizes as IEC units (1 KiB = 1024 bytes) instead of SI units (1 kB = 1000 bytes; thanks to Tristan Stenner).
  * Clean passwords on Firefox version 32+.
  * Clean Google Chrome cookies for non-default profiles.
  * Clean more autofill on Google Chrome (reported by pcdoctor01). If you are logged in to Google Chrome, it may automatically restore some of these values from your online Google account unless you disable the option Show addresses and credit cards from Google Payments in the autofill page of Google Chrome settings.
  * Add size column to side tree control (thanks to Ivor Hewitt).
  * Clean more localizations (thanks to Tristan Stenner).
  * Add localization codes (thanks to Tristan Stenner).
  * Fix memory cleaning on Ubuntu 15.10 and other distributions (reported by Richard Pearse).
  * Fix harmless error that localizations.xml is unusable (thanks to Tristan Stenner).
  * Do not show localizations at the base level (reported by BBUser).
  * Do not show Windows Explorer cleaner on Linux (reported by Tomás F. L.).
  * Fulfill Fedora license file location change.
  * Do not delete xauth under KDE (reported by mike).
  * Remove deprecated key encoding in bleachbit.desktop.
  * Drop support for Mandriva, which is dead.
  * Do not show cleaner is unusable message in the console (except when debug mode is enabled or in non-final releases).</changelog>
  <changelog author="mailaender@opensuse.org" date="1467547200">- Update to 1.12
  * Fix error Favicons is version 32 with Google Chrome 51 (reported by Holger)
  * Fix cleaning of Thumbnails in new Chromium and Google Chrome (reported by ineuw, patrick)
  * Fix crash with corrupt BleachBit.ini (reported by BitBleacher)
  * Fix error UNIQUE constraint failed error cleaning Firefox (reported by danjackson1 and gravy45)
  * Update EasyTAG cleaner (thanks to devmapper0)
  * Update Epiphany cleaner (thanks to devmapper0)
  * Update Evolution cleaner (thanks to skquinn)
  * Update GNOME cleaner (thanks to devmapper0)
  * Update KDE cleaner for KDE 4 on openSUSE (thanks to Mailaender)
  * Remove bleachbit-kde-patch.patch
  * Update Rhythmbox cleaner (thanks to devmapper0)
  * Update Thumbnails cleaner (thanks to devmapper0)
  * Update Transmission cleaner (thanks to devmapper0)
  * Update X11 cleaner (thanks to devmapper0)
  * Switch from GnomeVFS, which is deprecated, to GIO (reported by MM)
  * Do not repeat Google Chrome cache in preview (reported by Daniel Che)
  * Fix retention of translations for Chinese
  * Whitelist iBus Pinyin (reported by Josiah Hunter)</changelog>
  <changelog author="mailaender@opensuse.org" date="1473508800">- Add appdata.patch for https://en.opensuse.org/openSUSE:AppStore</changelog>
  <changelog author="jmatejek@suse.com" date="1499774400">- drop obsolete requirements on python-gnome and python-gobject2</changelog>
  <changelog author="aavindraa@gmail.com" date="1505908800">- Update to 1.17
  * There is a fix for handling special characters in usernames (LP#1347644).
  * Files can be dragged dropped onto the BleachBit window for shredding.
  * Enable "overwrite contents" and clean SQLite databases.
  * Clean HexChat (X-Chat).
  * 19 cleaners now use the XDG directory specification.
  * AppData information in the GNOME and KDE Software centers.
  * Clean journald.
  * Clean apt - autoremove.
  * Whitelisting should protect both the link source and target (LP#1455959).
- Drop appdata.patch, accepted upstream</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1519992000">- Update to version 2.0:
  * Add drag-and-drop support (thanks to contractor Pavel). Try dropping files onto the main application window.
  * Fix preservation of thumbnails on Google Chrome and Chromium .
  * Fix error Favicons is version 36 or 38 when cleaning Google Chrome and Chromium.
  * Fix DatabaseError: no such table: moz_favicons for some Firefox profiles.
  * Use HTTPS encryption when automatically checking for software updates.
  * Add software categories to bleachbit.desktop (thanks to Hugo Lefeuvre).
  * Whitelist Bluetooth daemon (reported by Timo Ollech).
  * Fix purging of GTK recently used resources list.
  * Improve Liferea cleaner (reported by Theatre-X).</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1533643200">- add missing dependency python-xml (boo#1104093).</changelog>
</package>
<package pkgid="ce33ad3d8d5358e8d795dfba0f8bb785a5e7eb17ba2686afd73df4608f827205" name="bleachbit-lang" arch="noarch">
  <version epoch="0" ver="2.0" rel="lp150.2.3.1"/>
  <changelog author="Sascha.Manns@open-slx.de" date="1321358400">- updated to version 0.9.1
- These are the changes since version 0.9.0:
  + Clean segments and segment_usage in Google Chrome History
  + Clean favicons on Chromium, Google Chrome
  + Clean "History Provider Cache" on Chromium and Google Chrome
  + Clean download history in Chromium, Google Chrome
  + Fix rare "ZeroDivisionError: float division" bug while cleaning free disk space.</changelog>
  <changelog author="Sascha.Manns@open-slx.de" date="1331985600">- updated to version 0.9.2
- These are the changes since version 0.9.1
  These are the changes since version 0.9.1:
  * Clean Firefox crash reports.
  * Clean more Google Chrome and Chromium history: omnibox shortcuts,
    Network Action Predictor, and keywords_backup.
  * Clean LibreOffice.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1344081600">- Update to 0.9.3.
  * The new application icon looks better ? especially on a black
    background.
  * Google Chrome and Chromium: clean some more SQLite database
    journals.
  * Google Chrome and Chromium: clean Favicons on new browser
    release (instead of giving an error about the database
    version).
  * Google Chrome, Chromium: find more bookmarks to avoid affecting
    history and favicons related to bookmarks, and avoid the error
    "KeyError: 'url'".
  * Be quiet about "Unsupported special file type" error message
    (lp#1012930).
  * Do not try to launch GUI if X is not available (lp#1004923).
  * Be quiet about "[Errno 39] Directory not empty" error message
    (lp#1012930).
- Build requires python-distribute instead of python-devel.
- Remove bleachbit.desktop from additional source: have it in
  tarball.
- Recommends language package.
- Clean up spec.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1345291200">- Fix runtime dependencies: really needs python-gnomevfs only.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1354795200">- Update to 0.9.4.
  * Add feature for user-defined custom cleaners. In the
    preferences, easily choose files and folders you regularly want
    to clean, and then select them from cleaning under System -
    Custom.
  * Google Chrome and Chromium: Fix error "Favicons is version 23"
    with Google Chrome 23.
  * Google Chrome and Chromium: Delete many more history files.
  * Google Chrome and Chromium: If bookmark files does not exist,
    do not throw an error.
  * Clean FAT32 partitions with more than 4GB free space.
  * Do not delete /usr/share/kde4/apps/ksgmltools2/customization
    required by kdelibs.
- Add cleaner example to docs.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1358164800">- Update to 0.9.5.
  * Google Chrome, Chromium: separate cleaning of passwords out of
    history into its own option.
  * Google Chrome: delete Flash cookies in Pepper Flash.
  * Google Chrome: delete more history.
  * Thunderbird: delete folder index files (.msf).
  * Clean out obsolete data (hashpath) in bleachbit.ini to reduce
    file size and improve privacy.
  * Improve compatibility of memory wiping with 64-bit systems.
  * Improve ability to run headless.
  * Support newer Linux kernels in memory cleaner by using new
    out-of-memory score adjustment /proc/pid/oom_score_adj.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1373630400">- Update to 0.9.6.
  * Improve wiping of free disk space.
  * Google Chrome: Fix error message no such table: keywords_backup:
    /home/foobar/.config/google-chrome/Default/Web Data.
  * Google Chrome: Fix error message Favicons is version 25.
  * Google Chrome: Delete more cache.
  * Clean Apache OpenOffice.org 3.4.1.
  * Clean LibreOffice 4.
  * OpenOffice.org: if history file has not changed, do not save
    it.
  * Adobe Acrobat: use wildcards to generically support more
    versions.
  * Do not clean VLC while it is running.
  * Thunderbird: clean indexes on Fedora.
  * Firefox: clean minidumps (crash information).
  * Clean more IcedTea (Java) cache.
  * Update Basque, Brazilian Portuguese, Croatian, English (United
    Kingdom), Esperanto, Estonian, French, German, Indonesian,
    Kirghiz, Lietuvi?, Polish, Russian, Slovak translations.
- Use full URL as a source.</changelog>
  <changelog author="saigkill@opensuse.org" date="1385294400">- updated to 1.0
- Changes:
  o The command line option --shred now shreds arbitrary files.
  o Add Octave cleaner
  o Add Warzone 2100 cleaner
  o Clean recently played in VLC (thanks to nolme/Vincent DUVERNET - Nolmë
    Informatique)
  o Google Chrome: Fix errors "Favicons is version 26" and "DatabaseError:
    no such column: full_path"
  o Google Chrome: delete more cache
  o Remove auto-hide option. (Before, it was a default.)
  o Specific to Linux
  * Coming soon: .deb package for Ubuntu 13.10 (Saucy Salamander).
  * Coming soon: .rpm package for openSUSE 11.4.
  * Add SQLite3 cleaner
  * Adobe Flash: clean NativeCache</changelog>
  <changelog author="saigkill@opensuse.org" date="1400155200">- Added patch to change KDE's Cleaning Path from .kde to .kde4
  * bleachbit-kde-patch.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1403006400">- Version bump to 1.2 with various small fixes.</changelog>
  <changelog author="ecsos@opensuse.org" date="1410350400">- Update to 1.4
  * Firefox: Fix DatabaseError: no such table: moz_hosts
  * Firefox: Purge the table moz_hosts in places.sqlite for the
    option url_history
  * Firefox: Delete Necko Predictive Network Actions
  * Firefox: Delete more session restore files
  * Google Chrome: fix error cleaning autofill_dates
  * Adobe Reader: use wildcards instead of specific versions
  (thanks to theatre-x)
  * Clean netMRL history in VLC media player (thanks to tiemay)
  * Clean GIMP version 2.8 (thanks to tiemay)
  * Improve support for Liferea (thanks to Lars Windolf)
  * Specific to Linux
  - Pass control of the ~/.cache/mozilla directory from the
    System - Cache cleaner to the Firefox - Cache cleaner
    (LP#1295826)
  - Clean additional locale directories (thanks to tstenner)
  - Clean .mask files in Easytag (thanks to tiemay)
  - Clean more history in the Links web browser (thanks to tiemay)
  - Add packages for CentOS 7 and RHEL 7</changelog>
  <changelog author="ecsos@opensuse.org" date="1417521600">- Update to 1.6
  * Google Chrome: fix error "Favicons is version 29"
  * Google Chrome: clean application cache directory.
  * Google Chrome and Chromium: in the Preferences (JSON) file
    clean a list of HTTP servers that used SPDY, which can be used
    to track servers to which the browser was connected
  * Firefox: clean more session restore files
  * Firefox: clean bookmark backups using a new option called
    Backup.
  * The auto-hide option, which was removed in version 1.0,
    is available again.
  * Specific to Linux
  - Google Chrome: delete Sync Data Backup
  - Chromium: delete application cache directory
  - Print a message when root account is being cleaned to avoid
    confusion
  - Whitelist more KDE IPC files under /tmp/ to fix problem
    launching BleachBit as root</changelog>
  <changelog author="p.drouand@gmail.com" date="1446379200">- Update to version 1.8
  * In Preferences, there is a new option "Confirm before delete"
    that disables the confirmation.
  * When BleachBit starts, the window is centered.
  * The tool "Shred Settings and Quit" in the File menu is fixed.
  * Added cleaning for Opera passwords.
  * Shrink storage size of BleachBit icon.
  * Add descriptions to many cleaners).
  * Add a new command line option --debug-log that logs debug messages
    to a file.
  * Replace hard-coded localizations cleaning system with CleanerML entries.
  * Whitelist /tmp/fsa for FSArchiver.
  * Suppress GTK+ warning in console.
  * Add packages for Debian 8, Fedora 21, and Ubuntu 15.04.
  * Remove packages for Fedora 19 and Ubuntu 13.10.
  * In CleanerML, a cleaner description can have a translation hint.
  * Set up Travis CI for better testing.
  * Improve unit tests.</changelog>
  <changelog author="mailaender@opensuse.org" date="1458475200">- Update to 1.10
  * Speed up identification of files using regular expressions by 5% to 50%
  * Allow relative paths with --shred command line argument (reported by Eva Putnam).
  * Add descriptions for cleaners (thanks to theatre-x).
  * Fix resizing of preference dialog (thanks to Anton Bobov).
  * Warn when deleting passwords on Firefox (reported by Theatre-X).
  * Accept abbreviations T and F in bleachbit.ini configuration (reported by Ken Wallace).
  * Show a user-friendly error message when checking for updates fails because of a network error (reported by Gary).
  * Improve logging of errors. Some errors are more informative, and on Windows, errors are unlikely to cause a popup message about bleachbit.exe.log.
  * Add an option to show file sizes as IEC units (1 KiB = 1024 bytes) instead of SI units (1 kB = 1000 bytes; thanks to Tristan Stenner).
  * Clean passwords on Firefox version 32+.
  * Clean Google Chrome cookies for non-default profiles.
  * Clean more autofill on Google Chrome (reported by pcdoctor01). If you are logged in to Google Chrome, it may automatically restore some of these values from your online Google account unless you disable the option Show addresses and credit cards from Google Payments in the autofill page of Google Chrome settings.
  * Add size column to side tree control (thanks to Ivor Hewitt).
  * Clean more localizations (thanks to Tristan Stenner).
  * Add localization codes (thanks to Tristan Stenner).
  * Fix memory cleaning on Ubuntu 15.10 and other distributions (reported by Richard Pearse).
  * Fix harmless error that localizations.xml is unusable (thanks to Tristan Stenner).
  * Do not show localizations at the base level (reported by BBUser).
  * Do not show Windows Explorer cleaner on Linux (reported by Tomás F. L.).
  * Fulfill Fedora license file location change.
  * Do not delete xauth under KDE (reported by mike).
  * Remove deprecated key encoding in bleachbit.desktop.
  * Drop support for Mandriva, which is dead.
  * Do not show cleaner is unusable message in the console (except when debug mode is enabled or in non-final releases).</changelog>
  <changelog author="mailaender@opensuse.org" date="1467547200">- Update to 1.12
  * Fix error Favicons is version 32 with Google Chrome 51 (reported by Holger)
  * Fix cleaning of Thumbnails in new Chromium and Google Chrome (reported by ineuw, patrick)
  * Fix crash with corrupt BleachBit.ini (reported by BitBleacher)
  * Fix error UNIQUE constraint failed error cleaning Firefox (reported by danjackson1 and gravy45)
  * Update EasyTAG cleaner (thanks to devmapper0)
  * Update Epiphany cleaner (thanks to devmapper0)
  * Update Evolution cleaner (thanks to skquinn)
  * Update GNOME cleaner (thanks to devmapper0)
  * Update KDE cleaner for KDE 4 on openSUSE (thanks to Mailaender)
  * Remove bleachbit-kde-patch.patch
  * Update Rhythmbox cleaner (thanks to devmapper0)
  * Update Thumbnails cleaner (thanks to devmapper0)
  * Update Transmission cleaner (thanks to devmapper0)
  * Update X11 cleaner (thanks to devmapper0)
  * Switch from GnomeVFS, which is deprecated, to GIO (reported by MM)
  * Do not repeat Google Chrome cache in preview (reported by Daniel Che)
  * Fix retention of translations for Chinese
  * Whitelist iBus Pinyin (reported by Josiah Hunter)</changelog>
  <changelog author="mailaender@opensuse.org" date="1473508800">- Add appdata.patch for https://en.opensuse.org/openSUSE:AppStore</changelog>
  <changelog author="jmatejek@suse.com" date="1499774400">- drop obsolete requirements on python-gnome and python-gobject2</changelog>
  <changelog author="aavindraa@gmail.com" date="1505908800">- Update to 1.17
  * There is a fix for handling special characters in usernames (LP#1347644).
  * Files can be dragged dropped onto the BleachBit window for shredding.
  * Enable "overwrite contents" and clean SQLite databases.
  * Clean HexChat (X-Chat).
  * 19 cleaners now use the XDG directory specification.
  * AppData information in the GNOME and KDE Software centers.
  * Clean journald.
  * Clean apt - autoremove.
  * Whitelisting should protect both the link source and target (LP#1455959).
- Drop appdata.patch, accepted upstream</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1519992000">- Update to version 2.0:
  * Add drag-and-drop support (thanks to contractor Pavel). Try dropping files onto the main application window.
  * Fix preservation of thumbnails on Google Chrome and Chromium .
  * Fix error Favicons is version 36 or 38 when cleaning Google Chrome and Chromium.
  * Fix DatabaseError: no such table: moz_favicons for some Firefox profiles.
  * Use HTTPS encryption when automatically checking for software updates.
  * Add software categories to bleachbit.desktop (thanks to Hugo Lefeuvre).
  * Whitelist Bluetooth daemon (reported by Timo Ollech).
  * Fix purging of GTK recently used resources list.
  * Improve Liferea cleaner (reported by Theatre-X).</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1533643200">- add missing dependency python-xml (boo#1104093).</changelog>
</package>
<package pkgid="64433feb87c06e20653af408c3a0ea4ad6c7b14b69e5402d4f5f073b0158903a" name="blender" arch="src">
  <version epoch="0" ver="2.79b" rel="lp150.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1470830400">- Add blender.appdata.xml as a source file and install it to
  %{_datadir}/appdata/. This makes blender show up in appstores
  like GNOME Software and KDE Discover, making it more easily
  discoverable and installable.</changelog>
  <changelog author="davejplater@gmail.com" date="1475409600">- Update to release 2.78
- Removed blender-2.58-python_include.patch, no longer relevant.
- Upstream changes:
  The Blender Foundation and online developer community are proud
  to present Blender 2.78, released September 30th 2016!
  This release aims to be a very stable one, so that developers
  can focus better on Blender 2.8 work. Some of the highlights:
    Spherical Stereo images rendering support for VR
    Grease Pencil is now a full 2D drawing &amp; animation tool!
    Viewport Rendering improvements
    New Freehand curves drawing over surfaces!
    Bendy Bones, powerful new options for B-Bones
    Alembic support: import/export basic operators
    Cloth Physics: new Dynamic Base Mesh and Simulation Speed
    option
    New Add-ons, individual preferences, Python APIs changes, and a
    lot of new &amp; updated add-ons!
    For more details see:
    https://www.blender.org/features/2-78/
  Bugfixes, too many for this changelog, see:
  https://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.78/Bug_Fixes</changelog>
  <changelog author="davejplater@gmail.com" date="1478088000">- Update to version 2.78a.
- Upstream changes:
  * For 2.78a, 69 bugs were fixed,the two outstanding points being:
  * Cycles is now using Cuda8 for all GPUs, performances issues with
  ?old? ones have been fixed.
  * Several issues were fixed in new data-blocks management code,
  including some crashers, and bad ?append? behaviors.
  * Fix T49629: Graph editor normalize function doesn't work on
  f-curves with a constant key value (rB8ebc7565e7).
  * Fix T49571: 2d stabilize keys not visible in the Graph Editor
  and Dope Sheet (rBd1f5c0fe48).
  * Fix T49622: Grease pencil not rendering out of VSE
  (rB9d4e3b0e63).
  * Fix unreported: Fix: Grease Pencil palettes were missing a RNA
  path callback (rB0b734f0b59).
  * Fix unreported: Fix export image generated by export UV layout
  (rB3bf9cbe7a2).
  * Fix T49471: Vertex Connect randomly broken (rB949b23d29b).
  * Fix T49478: triangulate of face hangs Blender (rB08e4846540).
  * Fix unreported: Fix assert in the wrong place, should be moved
  earlier to do anything (rB8030c4832a).
  * Fix T49464: Data Transfer modifier slows down redraw of window
  (rBff27b58b4c).
  * Fix T49595: bpy - negative skin_vertices radius crashes Blender
  (rB02eec191fb).
  * Fix unreported: Normal edit modifier: Fix relation builder for
  the new dependency graph (rB106ff0df99).
  * Fix T49548: Entering Cycles Rendered Viewport Unlinks Material
  from Objects (rB4640bf890e).
  * Fix T49827: L Crash linking material while in Material viewport
  shading mode (rB452d43b1c8).
  * Fix unreported: Fix mistake in BKE_mesh_new_from_object handling
  of materials in MetaBall case (rB602b2dbd8c).
  * Fix T49460: Particle group instance 'Use Count' value gets reset
  on file-load (rB8aa04160ba).
  * Fix T49608: runtime-only particle's boid-&gt;ground Object pointer
  was left dangling to invalid value in read code (rB29fdcbbf9f).
  * Fix T49738: Hair Add Brush doesn't work (rB50751d62e9).
  * Fix unreported: Ammend torB00dc0666b3fe: forgot to fix
  boid-&gt;ground of first particle (rB7ab972fd63).
  * Fix T49461: Dynamic paint wetmap flickers (rBa88af3e576).
  * Fix T49636: material draw mode crash with displacement and
  missing group input node (rBc9b5253cfc).
  * Fix T49789: Compositor mix node interpolation bug
  (rBe1cf002ee6).
  * Fix T49523: very slow normal map tangent computation for
  rendering in 2.78 (rB0d1bc587fa).
  * Fix T49609: Point density textures: vertex colors are not
  properly averaged in BI (rB880ebfff58).
  * Fix T49623: Immediately crash trying to render attached file in
  Cycles (rBbe254b52dc).
  * Fix T49640: Cycles constant folding incorrect for texture
  coordinates (rB10598c084e).
  * Fix T49750: Cycles wrong ray differentials for perspective and
  stereo cameras (rB4c94e327a2).
  * Fix T49818: Crash when rendering with motion blur
  (rB66ed7d7566).
  * Fix unreported: Cycles: Fix typo in shader cancel routines
  (rB08d21ff582).
  * Fix unreported: Fix wrong Cycles GLSL pointiness, still not
  supported but should be neutral 0.5 (rB4da266f48c).
  * Fix unreported: Fix Cycles CUDA performance on CUDA 8.0
  (rBfd0dea585c).
  * Fix unreported: Cycles: Fix OpenCL split kernel compilation
  after recent CUDA 8 performance fix (rB117329ae6d).
  * Fix unreported: Cycles: Fix use of uninitialized variable in SSS
  (rBb42e4c3c40).
  * Fix unreported: Cycles: Fix uninitialized variable from the
  previous commit (rBf55221e0a1).
  * Fix unreported: Cycles: Fix static initialization order fiasco
  (rBf0adb875cf).
  * Fix unreported: Fix Cycles address space OpenCL error after
  recent fix (rB759b5fb2a6).
  * Fix unreported: Cycles: Fix shadowing variable which also causes
  use of uninitialized variable (rB21bf863934).
  * Fix unreported: Fix missing outliner redraw when adding VSE
  strip (rB00d08c909d).
  * Fix T49534: 2.78 Wrong texture scaling in material viewport
  (rB3fb0c1b8e7).
  * Fix unreported: Fix missing properties editor update when
  changing 3D View camera (rB483b4f0567).
  * Fix unreported: UPBGE: Fix crash when calling shade_light
  texture when mtex has no tex (rBf978deddf8).
  * Fix unreported: Fix viewport camera gets out of sync in certain
  cases (rBcdedd082f3).
  * Fix T49506: Remove unused File Browser theme settings
  (rB11120c2981).
  * Fix T49631: radial control operators not using DPI properly
  (rB97bba76e8c).
  * Fix T49635: column_flow Layout - last column is too small
  (rB03f935961a).
  * Fix T49646: Switching from large to small image can get stuck
  zoom at max zoom distance (rBe6d9b15ab3).
  * Fix T49601: Material menu length problem (rBdacb53ff71).
  * Fix T49746: crash loading user preferences with missing
  operators (rBa6220f459b).
  * Fix unreported: Fix missing new eyedropper keymap entry in
  keyconfig_utils.py (rB07508c8b93).
  * Fix unreported: Fix memory leak caused by unknown opeartor of
  keymap item (rB4d14bd10c0).
  * Fix unreported: Fix wrong separator line width after drawing vec
  icon (rB2525c4e129).
  * Fix T49520: broken vertex colors in the game engine
  (rBe96e66b05b).
  * Fix T49764: Audio strips crackle when animating the volume
  (rB1bcddea00e).
  * Fix T49656: Crash when starting playback while using JACK audio
  with A/V sync (rB7b311c07ee).
  * Fix T49423: Data Preview of group containing only group
  instances is empty (rBa05f9bef3f).
  * Fix T49502: file browser on OS X not highlighting system folders
  and bookmarks (rB9fea90ba36).
  * Fix T49501: Animations imported via alembic render with wrong or
  no motion blur (rBe65e5045de).
  * Fix T49502: file browser on OS X not highlighting external
  drives (rB4736664da6).
  * Fix unreported: Fix missing operator-type registration
  (rBe145990fdd).
  * Fix T49466: Stupid typo in logicbricks new copy code
  fromrB776a8548f03a (rBd78a4b0c62).
  * Fix T49489: Pose marker in camera action + marker bound to
  camera -&gt; crash (rB7b43307508).
  * Fix T49553: Blender 2.78 crashes when File-&gt;Data Previews
  - &gt;Refresh Datablock Previews (rBb8194a52a0).
  * Fix T49722: Appending Bug (Groups) (rB44372d6441).
  * Fix T49775: Appending data with internal dependency cycles
  prevents correct clearing of linked data-blocks (rB3da4560143).
  * Fix unreported: Fix Scene datablocks being created with a real
  user while never having any real datablock user (rBcb9d010421).
  * Fix unreported: Fix OLD pre-git links in the API, add missing
  factory-startup option to blender executions (rBfd9aa06440).
  * Fix T49797: Exception from scene update handler might leak
  external engine descriptors (rBdac53963a8).
  * Fix unreported: BLI_task: fix case were some pool could work in
  more threads than allowed (rB4dbcbf5ba9).
  * Fix unreported: Fix a few compile errors with C++11 on macOS
  (rBcb6c43b61c).</changelog>
  <changelog author="davejplater@gmail.com" date="1479038400">- Use %mime_database_post macro instead of calling direct.</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="davejplater@gmail.com" date="1486728000">- Update to version 2.78b
- Bugfix version</changelog>
  <changelog author="davejplater@gmail.com" date="1486728001">- Build with system audaspace.</changelog>
  <changelog author="davejplater@gmail.com" date="1488369600">- Update to 2.78c
- Upstream changes:
  Port all changes for automated Cycles testing.
  Fix for wrong render result of hair with BVH motion steps.
  Fix compilation error of GLSL viewport when using Light Path node.
  Fix wrong Brick texture in material viewport.
  Fix crash with material preview and image sequences.
  Fix T50512: Linked Backround scene with animation not updating
  with new depsgraph.
  Fix T50687: Cycles baking time estimate and progress bar doesn't
  work / progress when baking with high samples.
  Fix T50748: Render Time incorrect when refreshing rendered preview
  in GPU mode.
  Fix wrong render results with texture limit and half-float
  textures.
  Fix Cycles still saving render output when error happened.</changelog>
  <changelog author="davejplater@gmail.com" date="1488715200">- Disabled system audaspace due to email crash report.</changelog>
  <changelog author="davejplater@gmail.com" date="1491566400">- Enabled system audaspace with blender-system-audaspace.patch
  which fixes the crash. see boo#1027923 and github audaspace #7</changelog>
  <changelog author="ideasman42@gmail.com" date="1495022400">- Remove extern paths which no longer exist, also epydoc which
  isn't used since 2.4x.</changelog>
  <changelog author="ideasman42@gmail.com" date="1495108800">- Remove yasm (was only needed for extern/ codecs) now removed.
- Remove ruby (Blender doesn't use Ruby).</changelog>
  <changelog author="ideasman42@gmail.com" date="1495108801">- Remove doxygen (only documents internal source code, not
  public / scripting API's).</changelog>
  <changelog author="davejplater@gmail.com" date="1505908800">- Update to release 2.79
- Remove blender-system-audaspace.patch incorporated in this version
- Now build with ffmpeg and cyles unconditionaly.
- Added blender-2.78-C++11-build-fix.patch for future openvdb build.
- Specifically require audaspace-plugins to fix boo#1057965.
- Add Compatibility_Warning.txt to warn about 2.78/2.79 compatibility
  problems on installation.
- Upstream changes:
  * Cycles: Built-in Denoising, Shadow catcher,Principled shader,
    AMD OpenCL optimizations.
  * Grease Pencil: New frame interpolation tools, per-layer onion
    skinning.
  * Alembic: Improvements to compatibility, stability and support.
  * User Interface: Initial support for reusable custom
    configurations, automatic DPI scaling.
  * Twenty Three new and several updated add-ons.
  * 100s of bug fixes and other improvements!
  * Compatibility Warning
    Due to various issues with drivers for AMD GCN 1.0 architecture
    , those cards are no longer supported for Cycles rendering
    When using add-ons in Blender 2.79 that take advantage of the
    new data-block pointer properties, the resulting .blend files
    can't be opened in earlier versions of Blender. Attempting to
    open such .blend files in Blender 2.78c and earlier may crash.
    Some Interface Themes may need to be reloaded to work properly.
    The text color contained in a layout.box() is now defined in
    User Preferences » Themes » User Interface » Box section
    Rig compatibility:
    Changes to IK snapping may affect rigs that use non-uniform
    IK scaling. (rigs created in the 2.78 builds.)
    During the 2.78 series: IK snapping was partly broken.
    This has been fixed for Blender 2.79
    Rigs created in Blender 2.78 may not be compatible with
    2.79.
    Rigs created in Blender 2.77 may still work.
    When using the add-on Rigify, please note:
    Compatibility is broken for this release. There's no
    guarantee rigs created in previous Blender versions will
    work correctly.
    Rigs created in Blender 2.78 may not be compatible with 2.79.
    Rigs created in Blender 2.77 may still work.
    Save your work before attempting upgrading your rigs.
- See:https://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.79
  For a comprehensive list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507032000">- Do not BuildRequire openSUSE-release: in TW, this is a daily
  changing package, invalidating blender daily. There is no
  information a package would require, which is not also available
  in distribution-release (which exists for this very purpose and
  can be used across SUSE distributions, incl. Leap/SLE).</changelog>
  <changelog author="davejplater@gmail.com" date="1519992000">- Update to release 2.79a
- Upstream changes:
  Blender 2.79a features a new Denoiser, PBR Shader, Shadow Catcher,
  Filmic Color Management, AMD OpenCL improvements and much more.
  All of that plus over a massive 900 bug fixes!</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1522152000">- Remove xorg-x11-devel from buildrequires.
- Reorder/rework buildrequires, packages libao-devel,
  libdrm-devel, libexpat-devel,libvorbis-devel,openssl-devel,
  libsamplerate-devel are not required and were removed.
- Build using -DWITH_SYSTEM_LZO so lzo-devel is actually
  used.</changelog>
  <changelog author="davejplater@gmail.com" date="1522152001">- Update to release 2.79b.
- Upstream changes:
  This is a bug fix release.</changelog>
  <changelog author="davejplater@gmail.com" date="1527854400">- Package blender cycles headers in blender-devel sub package to
  fix boo#1094777.
- Remove Compatibility_Warning.txt.</changelog>
  <changelog author="davejplater@gmail.com" date="1527940800">- Only allow headers for x86_64 arch.</changelog>
</package>
<package pkgid="6a7856e45091dda9c345e3492e4134d7954ea4459bd481e31069cc067e44fc31" name="blender" arch="x86_64">
  <version epoch="0" ver="2.79b" rel="lp150.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1470830400">- Add blender.appdata.xml as a source file and install it to
  %{_datadir}/appdata/. This makes blender show up in appstores
  like GNOME Software and KDE Discover, making it more easily
  discoverable and installable.</changelog>
  <changelog author="davejplater@gmail.com" date="1475409600">- Update to release 2.78
- Removed blender-2.58-python_include.patch, no longer relevant.
- Upstream changes:
  The Blender Foundation and online developer community are proud
  to present Blender 2.78, released September 30th 2016!
  This release aims to be a very stable one, so that developers
  can focus better on Blender 2.8 work. Some of the highlights:
    Spherical Stereo images rendering support for VR
    Grease Pencil is now a full 2D drawing &amp; animation tool!
    Viewport Rendering improvements
    New Freehand curves drawing over surfaces!
    Bendy Bones, powerful new options for B-Bones
    Alembic support: import/export basic operators
    Cloth Physics: new Dynamic Base Mesh and Simulation Speed
    option
    New Add-ons, individual preferences, Python APIs changes, and a
    lot of new &amp; updated add-ons!
    For more details see:
    https://www.blender.org/features/2-78/
  Bugfixes, too many for this changelog, see:
  https://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.78/Bug_Fixes</changelog>
  <changelog author="davejplater@gmail.com" date="1478088000">- Update to version 2.78a.
- Upstream changes:
  * For 2.78a, 69 bugs were fixed,the two outstanding points being:
  * Cycles is now using Cuda8 for all GPUs, performances issues with
  ?old? ones have been fixed.
  * Several issues were fixed in new data-blocks management code,
  including some crashers, and bad ?append? behaviors.
  * Fix T49629: Graph editor normalize function doesn't work on
  f-curves with a constant key value (rB8ebc7565e7).
  * Fix T49571: 2d stabilize keys not visible in the Graph Editor
  and Dope Sheet (rBd1f5c0fe48).
  * Fix T49622: Grease pencil not rendering out of VSE
  (rB9d4e3b0e63).
  * Fix unreported: Fix: Grease Pencil palettes were missing a RNA
  path callback (rB0b734f0b59).
  * Fix unreported: Fix export image generated by export UV layout
  (rB3bf9cbe7a2).
  * Fix T49471: Vertex Connect randomly broken (rB949b23d29b).
  * Fix T49478: triangulate of face hangs Blender (rB08e4846540).
  * Fix unreported: Fix assert in the wrong place, should be moved
  earlier to do anything (rB8030c4832a).
  * Fix T49464: Data Transfer modifier slows down redraw of window
  (rBff27b58b4c).
  * Fix T49595: bpy - negative skin_vertices radius crashes Blender
  (rB02eec191fb).
  * Fix unreported: Normal edit modifier: Fix relation builder for
  the new dependency graph (rB106ff0df99).
  * Fix T49548: Entering Cycles Rendered Viewport Unlinks Material
  from Objects (rB4640bf890e).
  * Fix T49827: L Crash linking material while in Material viewport
  shading mode (rB452d43b1c8).
  * Fix unreported: Fix mistake in BKE_mesh_new_from_object handling
  of materials in MetaBall case (rB602b2dbd8c).
  * Fix T49460: Particle group instance 'Use Count' value gets reset
  on file-load (rB8aa04160ba).
  * Fix T49608: runtime-only particle's boid-&gt;ground Object pointer
  was left dangling to invalid value in read code (rB29fdcbbf9f).
  * Fix T49738: Hair Add Brush doesn't work (rB50751d62e9).
  * Fix unreported: Ammend torB00dc0666b3fe: forgot to fix
  boid-&gt;ground of first particle (rB7ab972fd63).
  * Fix T49461: Dynamic paint wetmap flickers (rBa88af3e576).
  * Fix T49636: material draw mode crash with displacement and
  missing group input node (rBc9b5253cfc).
  * Fix T49789: Compositor mix node interpolation bug
  (rBe1cf002ee6).
  * Fix T49523: very slow normal map tangent computation for
  rendering in 2.78 (rB0d1bc587fa).
  * Fix T49609: Point density textures: vertex colors are not
  properly averaged in BI (rB880ebfff58).
  * Fix T49623: Immediately crash trying to render attached file in
  Cycles (rBbe254b52dc).
  * Fix T49640: Cycles constant folding incorrect for texture
  coordinates (rB10598c084e).
  * Fix T49750: Cycles wrong ray differentials for perspective and
  stereo cameras (rB4c94e327a2).
  * Fix T49818: Crash when rendering with motion blur
  (rB66ed7d7566).
  * Fix unreported: Cycles: Fix typo in shader cancel routines
  (rB08d21ff582).
  * Fix unreported: Fix wrong Cycles GLSL pointiness, still not
  supported but should be neutral 0.5 (rB4da266f48c).
  * Fix unreported: Fix Cycles CUDA performance on CUDA 8.0
  (rBfd0dea585c).
  * Fix unreported: Cycles: Fix OpenCL split kernel compilation
  after recent CUDA 8 performance fix (rB117329ae6d).
  * Fix unreported: Cycles: Fix use of uninitialized variable in SSS
  (rBb42e4c3c40).
  * Fix unreported: Cycles: Fix uninitialized variable from the
  previous commit (rBf55221e0a1).
  * Fix unreported: Cycles: Fix static initialization order fiasco
  (rBf0adb875cf).
  * Fix unreported: Fix Cycles address space OpenCL error after
  recent fix (rB759b5fb2a6).
  * Fix unreported: Cycles: Fix shadowing variable which also causes
  use of uninitialized variable (rB21bf863934).
  * Fix unreported: Fix missing outliner redraw when adding VSE
  strip (rB00d08c909d).
  * Fix T49534: 2.78 Wrong texture scaling in material viewport
  (rB3fb0c1b8e7).
  * Fix unreported: Fix missing properties editor update when
  changing 3D View camera (rB483b4f0567).
  * Fix unreported: UPBGE: Fix crash when calling shade_light
  texture when mtex has no tex (rBf978deddf8).
  * Fix unreported: Fix viewport camera gets out of sync in certain
  cases (rBcdedd082f3).
  * Fix T49506: Remove unused File Browser theme settings
  (rB11120c2981).
  * Fix T49631: radial control operators not using DPI properly
  (rB97bba76e8c).
  * Fix T49635: column_flow Layout - last column is too small
  (rB03f935961a).
  * Fix T49646: Switching from large to small image can get stuck
  zoom at max zoom distance (rBe6d9b15ab3).
  * Fix T49601: Material menu length problem (rBdacb53ff71).
  * Fix T49746: crash loading user preferences with missing
  operators (rBa6220f459b).
  * Fix unreported: Fix missing new eyedropper keymap entry in
  keyconfig_utils.py (rB07508c8b93).
  * Fix unreported: Fix memory leak caused by unknown opeartor of
  keymap item (rB4d14bd10c0).
  * Fix unreported: Fix wrong separator line width after drawing vec
  icon (rB2525c4e129).
  * Fix T49520: broken vertex colors in the game engine
  (rBe96e66b05b).
  * Fix T49764: Audio strips crackle when animating the volume
  (rB1bcddea00e).
  * Fix T49656: Crash when starting playback while using JACK audio
  with A/V sync (rB7b311c07ee).
  * Fix T49423: Data Preview of group containing only group
  instances is empty (rBa05f9bef3f).
  * Fix T49502: file browser on OS X not highlighting system folders
  and bookmarks (rB9fea90ba36).
  * Fix T49501: Animations imported via alembic render with wrong or
  no motion blur (rBe65e5045de).
  * Fix T49502: file browser on OS X not highlighting external
  drives (rB4736664da6).
  * Fix unreported: Fix missing operator-type registration
  (rBe145990fdd).
  * Fix T49466: Stupid typo in logicbricks new copy code
  fromrB776a8548f03a (rBd78a4b0c62).
  * Fix T49489: Pose marker in camera action + marker bound to
  camera -&gt; crash (rB7b43307508).
  * Fix T49553: Blender 2.78 crashes when File-&gt;Data Previews
  - &gt;Refresh Datablock Previews (rBb8194a52a0).
  * Fix T49722: Appending Bug (Groups) (rB44372d6441).
  * Fix T49775: Appending data with internal dependency cycles
  prevents correct clearing of linked data-blocks (rB3da4560143).
  * Fix unreported: Fix Scene datablocks being created with a real
  user while never having any real datablock user (rBcb9d010421).
  * Fix unreported: Fix OLD pre-git links in the API, add missing
  factory-startup option to blender executions (rBfd9aa06440).
  * Fix T49797: Exception from scene update handler might leak
  external engine descriptors (rBdac53963a8).
  * Fix unreported: BLI_task: fix case were some pool could work in
  more threads than allowed (rB4dbcbf5ba9).
  * Fix unreported: Fix a few compile errors with C++11 on macOS
  (rBcb6c43b61c).</changelog>
  <changelog author="davejplater@gmail.com" date="1479038400">- Use %mime_database_post macro instead of calling direct.</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="davejplater@gmail.com" date="1486728000">- Update to version 2.78b
- Bugfix version</changelog>
  <changelog author="davejplater@gmail.com" date="1486728001">- Build with system audaspace.</changelog>
  <changelog author="davejplater@gmail.com" date="1488369600">- Update to 2.78c
- Upstream changes:
  Port all changes for automated Cycles testing.
  Fix for wrong render result of hair with BVH motion steps.
  Fix compilation error of GLSL viewport when using Light Path node.
  Fix wrong Brick texture in material viewport.
  Fix crash with material preview and image sequences.
  Fix T50512: Linked Backround scene with animation not updating
  with new depsgraph.
  Fix T50687: Cycles baking time estimate and progress bar doesn't
  work / progress when baking with high samples.
  Fix T50748: Render Time incorrect when refreshing rendered preview
  in GPU mode.
  Fix wrong render results with texture limit and half-float
  textures.
  Fix Cycles still saving render output when error happened.</changelog>
  <changelog author="davejplater@gmail.com" date="1488715200">- Disabled system audaspace due to email crash report.</changelog>
  <changelog author="davejplater@gmail.com" date="1491566400">- Enabled system audaspace with blender-system-audaspace.patch
  which fixes the crash. see boo#1027923 and github audaspace #7</changelog>
  <changelog author="ideasman42@gmail.com" date="1495022400">- Remove extern paths which no longer exist, also epydoc which
  isn't used since 2.4x.</changelog>
  <changelog author="ideasman42@gmail.com" date="1495108800">- Remove yasm (was only needed for extern/ codecs) now removed.
- Remove ruby (Blender doesn't use Ruby).</changelog>
  <changelog author="ideasman42@gmail.com" date="1495108801">- Remove doxygen (only documents internal source code, not
  public / scripting API's).</changelog>
  <changelog author="davejplater@gmail.com" date="1505908800">- Update to release 2.79
- Remove blender-system-audaspace.patch incorporated in this version
- Now build with ffmpeg and cyles unconditionaly.
- Added blender-2.78-C++11-build-fix.patch for future openvdb build.
- Specifically require audaspace-plugins to fix boo#1057965.
- Add Compatibility_Warning.txt to warn about 2.78/2.79 compatibility
  problems on installation.
- Upstream changes:
  * Cycles: Built-in Denoising, Shadow catcher,Principled shader,
    AMD OpenCL optimizations.
  * Grease Pencil: New frame interpolation tools, per-layer onion
    skinning.
  * Alembic: Improvements to compatibility, stability and support.
  * User Interface: Initial support for reusable custom
    configurations, automatic DPI scaling.
  * Twenty Three new and several updated add-ons.
  * 100s of bug fixes and other improvements!
  * Compatibility Warning
    Due to various issues with drivers for AMD GCN 1.0 architecture
    , those cards are no longer supported for Cycles rendering
    When using add-ons in Blender 2.79 that take advantage of the
    new data-block pointer properties, the resulting .blend files
    can't be opened in earlier versions of Blender. Attempting to
    open such .blend files in Blender 2.78c and earlier may crash.
    Some Interface Themes may need to be reloaded to work properly.
    The text color contained in a layout.box() is now defined in
    User Preferences » Themes » User Interface » Box section
    Rig compatibility:
    Changes to IK snapping may affect rigs that use non-uniform
    IK scaling. (rigs created in the 2.78 builds.)
    During the 2.78 series: IK snapping was partly broken.
    This has been fixed for Blender 2.79
    Rigs created in Blender 2.78 may not be compatible with
    2.79.
    Rigs created in Blender 2.77 may still work.
    When using the add-on Rigify, please note:
    Compatibility is broken for this release. There's no
    guarantee rigs created in previous Blender versions will
    work correctly.
    Rigs created in Blender 2.78 may not be compatible with 2.79.
    Rigs created in Blender 2.77 may still work.
    Save your work before attempting upgrading your rigs.
- See:https://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.79
  For a comprehensive list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507032000">- Do not BuildRequire openSUSE-release: in TW, this is a daily
  changing package, invalidating blender daily. There is no
  information a package would require, which is not also available
  in distribution-release (which exists for this very purpose and
  can be used across SUSE distributions, incl. Leap/SLE).</changelog>
  <changelog author="davejplater@gmail.com" date="1519992000">- Update to release 2.79a
- Upstream changes:
  Blender 2.79a features a new Denoiser, PBR Shader, Shadow Catcher,
  Filmic Color Management, AMD OpenCL improvements and much more.
  All of that plus over a massive 900 bug fixes!</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1522152000">- Remove xorg-x11-devel from buildrequires.
- Reorder/rework buildrequires, packages libao-devel,
  libdrm-devel, libexpat-devel,libvorbis-devel,openssl-devel,
  libsamplerate-devel are not required and were removed.
- Build using -DWITH_SYSTEM_LZO so lzo-devel is actually
  used.</changelog>
  <changelog author="davejplater@gmail.com" date="1522152001">- Update to release 2.79b.
- Upstream changes:
  This is a bug fix release.</changelog>
  <changelog author="davejplater@gmail.com" date="1527854400">- Package blender cycles headers in blender-devel sub package to
  fix boo#1094777.
- Remove Compatibility_Warning.txt.</changelog>
  <changelog author="davejplater@gmail.com" date="1527940800">- Only allow headers for x86_64 arch.</changelog>
</package>
<package pkgid="e10c1254cecf9dc09d589070ea5c77029acb30608445e43079b1ff8ea11de159" name="blender-devel" arch="noarch">
  <version epoch="0" ver="2.79b" rel="lp150.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1470830400">- Add blender.appdata.xml as a source file and install it to
  %{_datadir}/appdata/. This makes blender show up in appstores
  like GNOME Software and KDE Discover, making it more easily
  discoverable and installable.</changelog>
  <changelog author="davejplater@gmail.com" date="1475409600">- Update to release 2.78
- Removed blender-2.58-python_include.patch, no longer relevant.
- Upstream changes:
  The Blender Foundation and online developer community are proud
  to present Blender 2.78, released September 30th 2016!
  This release aims to be a very stable one, so that developers
  can focus better on Blender 2.8 work. Some of the highlights:
    Spherical Stereo images rendering support for VR
    Grease Pencil is now a full 2D drawing &amp; animation tool!
    Viewport Rendering improvements
    New Freehand curves drawing over surfaces!
    Bendy Bones, powerful new options for B-Bones
    Alembic support: import/export basic operators
    Cloth Physics: new Dynamic Base Mesh and Simulation Speed
    option
    New Add-ons, individual preferences, Python APIs changes, and a
    lot of new &amp; updated add-ons!
    For more details see:
    https://www.blender.org/features/2-78/
  Bugfixes, too many for this changelog, see:
  https://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.78/Bug_Fixes</changelog>
  <changelog author="davejplater@gmail.com" date="1478088000">- Update to version 2.78a.
- Upstream changes:
  * For 2.78a, 69 bugs were fixed,the two outstanding points being:
  * Cycles is now using Cuda8 for all GPUs, performances issues with
  ?old? ones have been fixed.
  * Several issues were fixed in new data-blocks management code,
  including some crashers, and bad ?append? behaviors.
  * Fix T49629: Graph editor normalize function doesn't work on
  f-curves with a constant key value (rB8ebc7565e7).
  * Fix T49571: 2d stabilize keys not visible in the Graph Editor
  and Dope Sheet (rBd1f5c0fe48).
  * Fix T49622: Grease pencil not rendering out of VSE
  (rB9d4e3b0e63).
  * Fix unreported: Fix: Grease Pencil palettes were missing a RNA
  path callback (rB0b734f0b59).
  * Fix unreported: Fix export image generated by export UV layout
  (rB3bf9cbe7a2).
  * Fix T49471: Vertex Connect randomly broken (rB949b23d29b).
  * Fix T49478: triangulate of face hangs Blender (rB08e4846540).
  * Fix unreported: Fix assert in the wrong place, should be moved
  earlier to do anything (rB8030c4832a).
  * Fix T49464: Data Transfer modifier slows down redraw of window
  (rBff27b58b4c).
  * Fix T49595: bpy - negative skin_vertices radius crashes Blender
  (rB02eec191fb).
  * Fix unreported: Normal edit modifier: Fix relation builder for
  the new dependency graph (rB106ff0df99).
  * Fix T49548: Entering Cycles Rendered Viewport Unlinks Material
  from Objects (rB4640bf890e).
  * Fix T49827: L Crash linking material while in Material viewport
  shading mode (rB452d43b1c8).
  * Fix unreported: Fix mistake in BKE_mesh_new_from_object handling
  of materials in MetaBall case (rB602b2dbd8c).
  * Fix T49460: Particle group instance 'Use Count' value gets reset
  on file-load (rB8aa04160ba).
  * Fix T49608: runtime-only particle's boid-&gt;ground Object pointer
  was left dangling to invalid value in read code (rB29fdcbbf9f).
  * Fix T49738: Hair Add Brush doesn't work (rB50751d62e9).
  * Fix unreported: Ammend torB00dc0666b3fe: forgot to fix
  boid-&gt;ground of first particle (rB7ab972fd63).
  * Fix T49461: Dynamic paint wetmap flickers (rBa88af3e576).
  * Fix T49636: material draw mode crash with displacement and
  missing group input node (rBc9b5253cfc).
  * Fix T49789: Compositor mix node interpolation bug
  (rBe1cf002ee6).
  * Fix T49523: very slow normal map tangent computation for
  rendering in 2.78 (rB0d1bc587fa).
  * Fix T49609: Point density textures: vertex colors are not
  properly averaged in BI (rB880ebfff58).
  * Fix T49623: Immediately crash trying to render attached file in
  Cycles (rBbe254b52dc).
  * Fix T49640: Cycles constant folding incorrect for texture
  coordinates (rB10598c084e).
  * Fix T49750: Cycles wrong ray differentials for perspective and
  stereo cameras (rB4c94e327a2).
  * Fix T49818: Crash when rendering with motion blur
  (rB66ed7d7566).
  * Fix unreported: Cycles: Fix typo in shader cancel routines
  (rB08d21ff582).
  * Fix unreported: Fix wrong Cycles GLSL pointiness, still not
  supported but should be neutral 0.5 (rB4da266f48c).
  * Fix unreported: Fix Cycles CUDA performance on CUDA 8.0
  (rBfd0dea585c).
  * Fix unreported: Cycles: Fix OpenCL split kernel compilation
  after recent CUDA 8 performance fix (rB117329ae6d).
  * Fix unreported: Cycles: Fix use of uninitialized variable in SSS
  (rBb42e4c3c40).
  * Fix unreported: Cycles: Fix uninitialized variable from the
  previous commit (rBf55221e0a1).
  * Fix unreported: Cycles: Fix static initialization order fiasco
  (rBf0adb875cf).
  * Fix unreported: Fix Cycles address space OpenCL error after
  recent fix (rB759b5fb2a6).
  * Fix unreported: Cycles: Fix shadowing variable which also causes
  use of uninitialized variable (rB21bf863934).
  * Fix unreported: Fix missing outliner redraw when adding VSE
  strip (rB00d08c909d).
  * Fix T49534: 2.78 Wrong texture scaling in material viewport
  (rB3fb0c1b8e7).
  * Fix unreported: Fix missing properties editor update when
  changing 3D View camera (rB483b4f0567).
  * Fix unreported: UPBGE: Fix crash when calling shade_light
  texture when mtex has no tex (rBf978deddf8).
  * Fix unreported: Fix viewport camera gets out of sync in certain
  cases (rBcdedd082f3).
  * Fix T49506: Remove unused File Browser theme settings
  (rB11120c2981).
  * Fix T49631: radial control operators not using DPI properly
  (rB97bba76e8c).
  * Fix T49635: column_flow Layout - last column is too small
  (rB03f935961a).
  * Fix T49646: Switching from large to small image can get stuck
  zoom at max zoom distance (rBe6d9b15ab3).
  * Fix T49601: Material menu length problem (rBdacb53ff71).
  * Fix T49746: crash loading user preferences with missing
  operators (rBa6220f459b).
  * Fix unreported: Fix missing new eyedropper keymap entry in
  keyconfig_utils.py (rB07508c8b93).
  * Fix unreported: Fix memory leak caused by unknown opeartor of
  keymap item (rB4d14bd10c0).
  * Fix unreported: Fix wrong separator line width after drawing vec
  icon (rB2525c4e129).
  * Fix T49520: broken vertex colors in the game engine
  (rBe96e66b05b).
  * Fix T49764: Audio strips crackle when animating the volume
  (rB1bcddea00e).
  * Fix T49656: Crash when starting playback while using JACK audio
  with A/V sync (rB7b311c07ee).
  * Fix T49423: Data Preview of group containing only group
  instances is empty (rBa05f9bef3f).
  * Fix T49502: file browser on OS X not highlighting system folders
  and bookmarks (rB9fea90ba36).
  * Fix T49501: Animations imported via alembic render with wrong or
  no motion blur (rBe65e5045de).
  * Fix T49502: file browser on OS X not highlighting external
  drives (rB4736664da6).
  * Fix unreported: Fix missing operator-type registration
  (rBe145990fdd).
  * Fix T49466: Stupid typo in logicbricks new copy code
  fromrB776a8548f03a (rBd78a4b0c62).
  * Fix T49489: Pose marker in camera action + marker bound to
  camera -&gt; crash (rB7b43307508).
  * Fix T49553: Blender 2.78 crashes when File-&gt;Data Previews
  - &gt;Refresh Datablock Previews (rBb8194a52a0).
  * Fix T49722: Appending Bug (Groups) (rB44372d6441).
  * Fix T49775: Appending data with internal dependency cycles
  prevents correct clearing of linked data-blocks (rB3da4560143).
  * Fix unreported: Fix Scene datablocks being created with a real
  user while never having any real datablock user (rBcb9d010421).
  * Fix unreported: Fix OLD pre-git links in the API, add missing
  factory-startup option to blender executions (rBfd9aa06440).
  * Fix T49797: Exception from scene update handler might leak
  external engine descriptors (rBdac53963a8).
  * Fix unreported: BLI_task: fix case were some pool could work in
  more threads than allowed (rB4dbcbf5ba9).
  * Fix unreported: Fix a few compile errors with C++11 on macOS
  (rBcb6c43b61c).</changelog>
  <changelog author="davejplater@gmail.com" date="1479038400">- Use %mime_database_post macro instead of calling direct.</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="davejplater@gmail.com" date="1486728000">- Update to version 2.78b
- Bugfix version</changelog>
  <changelog author="davejplater@gmail.com" date="1486728001">- Build with system audaspace.</changelog>
  <changelog author="davejplater@gmail.com" date="1488369600">- Update to 2.78c
- Upstream changes:
  Port all changes for automated Cycles testing.
  Fix for wrong render result of hair with BVH motion steps.
  Fix compilation error of GLSL viewport when using Light Path node.
  Fix wrong Brick texture in material viewport.
  Fix crash with material preview and image sequences.
  Fix T50512: Linked Backround scene with animation not updating
  with new depsgraph.
  Fix T50687: Cycles baking time estimate and progress bar doesn't
  work / progress when baking with high samples.
  Fix T50748: Render Time incorrect when refreshing rendered preview
  in GPU mode.
  Fix wrong render results with texture limit and half-float
  textures.
  Fix Cycles still saving render output when error happened.</changelog>
  <changelog author="davejplater@gmail.com" date="1488715200">- Disabled system audaspace due to email crash report.</changelog>
  <changelog author="davejplater@gmail.com" date="1491566400">- Enabled system audaspace with blender-system-audaspace.patch
  which fixes the crash. see boo#1027923 and github audaspace #7</changelog>
  <changelog author="ideasman42@gmail.com" date="1495022400">- Remove extern paths which no longer exist, also epydoc which
  isn't used since 2.4x.</changelog>
  <changelog author="ideasman42@gmail.com" date="1495108800">- Remove yasm (was only needed for extern/ codecs) now removed.
- Remove ruby (Blender doesn't use Ruby).</changelog>
  <changelog author="ideasman42@gmail.com" date="1495108801">- Remove doxygen (only documents internal source code, not
  public / scripting API's).</changelog>
  <changelog author="davejplater@gmail.com" date="1505908800">- Update to release 2.79
- Remove blender-system-audaspace.patch incorporated in this version
- Now build with ffmpeg and cyles unconditionaly.
- Added blender-2.78-C++11-build-fix.patch for future openvdb build.
- Specifically require audaspace-plugins to fix boo#1057965.
- Add Compatibility_Warning.txt to warn about 2.78/2.79 compatibility
  problems on installation.
- Upstream changes:
  * Cycles: Built-in Denoising, Shadow catcher,Principled shader,
    AMD OpenCL optimizations.
  * Grease Pencil: New frame interpolation tools, per-layer onion
    skinning.
  * Alembic: Improvements to compatibility, stability and support.
  * User Interface: Initial support for reusable custom
    configurations, automatic DPI scaling.
  * Twenty Three new and several updated add-ons.
  * 100s of bug fixes and other improvements!
  * Compatibility Warning
    Due to various issues with drivers for AMD GCN 1.0 architecture
    , those cards are no longer supported for Cycles rendering
    When using add-ons in Blender 2.79 that take advantage of the
    new data-block pointer properties, the resulting .blend files
    can't be opened in earlier versions of Blender. Attempting to
    open such .blend files in Blender 2.78c and earlier may crash.
    Some Interface Themes may need to be reloaded to work properly.
    The text color contained in a layout.box() is now defined in
    User Preferences » Themes » User Interface » Box section
    Rig compatibility:
    Changes to IK snapping may affect rigs that use non-uniform
    IK scaling. (rigs created in the 2.78 builds.)
    During the 2.78 series: IK snapping was partly broken.
    This has been fixed for Blender 2.79
    Rigs created in Blender 2.78 may not be compatible with
    2.79.
    Rigs created in Blender 2.77 may still work.
    When using the add-on Rigify, please note:
    Compatibility is broken for this release. There's no
    guarantee rigs created in previous Blender versions will
    work correctly.
    Rigs created in Blender 2.78 may not be compatible with 2.79.
    Rigs created in Blender 2.77 may still work.
    Save your work before attempting upgrading your rigs.
- See:https://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.79
  For a comprehensive list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507032000">- Do not BuildRequire openSUSE-release: in TW, this is a daily
  changing package, invalidating blender daily. There is no
  information a package would require, which is not also available
  in distribution-release (which exists for this very purpose and
  can be used across SUSE distributions, incl. Leap/SLE).</changelog>
  <changelog author="davejplater@gmail.com" date="1519992000">- Update to release 2.79a
- Upstream changes:
  Blender 2.79a features a new Denoiser, PBR Shader, Shadow Catcher,
  Filmic Color Management, AMD OpenCL improvements and much more.
  All of that plus over a massive 900 bug fixes!</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1522152000">- Remove xorg-x11-devel from buildrequires.
- Reorder/rework buildrequires, packages libao-devel,
  libdrm-devel, libexpat-devel,libvorbis-devel,openssl-devel,
  libsamplerate-devel are not required and were removed.
- Build using -DWITH_SYSTEM_LZO so lzo-devel is actually
  used.</changelog>
  <changelog author="davejplater@gmail.com" date="1522152001">- Update to release 2.79b.
- Upstream changes:
  This is a bug fix release.</changelog>
  <changelog author="davejplater@gmail.com" date="1527854400">- Package blender cycles headers in blender-devel sub package to
  fix boo#1094777.
- Remove Compatibility_Warning.txt.</changelog>
  <changelog author="davejplater@gmail.com" date="1527940800">- Only allow headers for x86_64 arch.</changelog>
</package>
<package pkgid="f37da43fbefa639b8846e8674ef719d538026c5a8782fbe54b35f590599c8660" name="blender-lang" arch="noarch">
  <version epoch="0" ver="2.79b" rel="lp150.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1470830400">- Add blender.appdata.xml as a source file and install it to
  %{_datadir}/appdata/. This makes blender show up in appstores
  like GNOME Software and KDE Discover, making it more easily
  discoverable and installable.</changelog>
  <changelog author="davejplater@gmail.com" date="1475409600">- Update to release 2.78
- Removed blender-2.58-python_include.patch, no longer relevant.
- Upstream changes:
  The Blender Foundation and online developer community are proud
  to present Blender 2.78, released September 30th 2016!
  This release aims to be a very stable one, so that developers
  can focus better on Blender 2.8 work. Some of the highlights:
    Spherical Stereo images rendering support for VR
    Grease Pencil is now a full 2D drawing &amp; animation tool!
    Viewport Rendering improvements
    New Freehand curves drawing over surfaces!
    Bendy Bones, powerful new options for B-Bones
    Alembic support: import/export basic operators
    Cloth Physics: new Dynamic Base Mesh and Simulation Speed
    option
    New Add-ons, individual preferences, Python APIs changes, and a
    lot of new &amp; updated add-ons!
    For more details see:
    https://www.blender.org/features/2-78/
  Bugfixes, too many for this changelog, see:
  https://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.78/Bug_Fixes</changelog>
  <changelog author="davejplater@gmail.com" date="1478088000">- Update to version 2.78a.
- Upstream changes:
  * For 2.78a, 69 bugs were fixed,the two outstanding points being:
  * Cycles is now using Cuda8 for all GPUs, performances issues with
  ?old? ones have been fixed.
  * Several issues were fixed in new data-blocks management code,
  including some crashers, and bad ?append? behaviors.
  * Fix T49629: Graph editor normalize function doesn't work on
  f-curves with a constant key value (rB8ebc7565e7).
  * Fix T49571: 2d stabilize keys not visible in the Graph Editor
  and Dope Sheet (rBd1f5c0fe48).
  * Fix T49622: Grease pencil not rendering out of VSE
  (rB9d4e3b0e63).
  * Fix unreported: Fix: Grease Pencil palettes were missing a RNA
  path callback (rB0b734f0b59).
  * Fix unreported: Fix export image generated by export UV layout
  (rB3bf9cbe7a2).
  * Fix T49471: Vertex Connect randomly broken (rB949b23d29b).
  * Fix T49478: triangulate of face hangs Blender (rB08e4846540).
  * Fix unreported: Fix assert in the wrong place, should be moved
  earlier to do anything (rB8030c4832a).
  * Fix T49464: Data Transfer modifier slows down redraw of window
  (rBff27b58b4c).
  * Fix T49595: bpy - negative skin_vertices radius crashes Blender
  (rB02eec191fb).
  * Fix unreported: Normal edit modifier: Fix relation builder for
  the new dependency graph (rB106ff0df99).
  * Fix T49548: Entering Cycles Rendered Viewport Unlinks Material
  from Objects (rB4640bf890e).
  * Fix T49827: L Crash linking material while in Material viewport
  shading mode (rB452d43b1c8).
  * Fix unreported: Fix mistake in BKE_mesh_new_from_object handling
  of materials in MetaBall case (rB602b2dbd8c).
  * Fix T49460: Particle group instance 'Use Count' value gets reset
  on file-load (rB8aa04160ba).
  * Fix T49608: runtime-only particle's boid-&gt;ground Object pointer
  was left dangling to invalid value in read code (rB29fdcbbf9f).
  * Fix T49738: Hair Add Brush doesn't work (rB50751d62e9).
  * Fix unreported: Ammend torB00dc0666b3fe: forgot to fix
  boid-&gt;ground of first particle (rB7ab972fd63).
  * Fix T49461: Dynamic paint wetmap flickers (rBa88af3e576).
  * Fix T49636: material draw mode crash with displacement and
  missing group input node (rBc9b5253cfc).
  * Fix T49789: Compositor mix node interpolation bug
  (rBe1cf002ee6).
  * Fix T49523: very slow normal map tangent computation for
  rendering in 2.78 (rB0d1bc587fa).
  * Fix T49609: Point density textures: vertex colors are not
  properly averaged in BI (rB880ebfff58).
  * Fix T49623: Immediately crash trying to render attached file in
  Cycles (rBbe254b52dc).
  * Fix T49640: Cycles constant folding incorrect for texture
  coordinates (rB10598c084e).
  * Fix T49750: Cycles wrong ray differentials for perspective and
  stereo cameras (rB4c94e327a2).
  * Fix T49818: Crash when rendering with motion blur
  (rB66ed7d7566).
  * Fix unreported: Cycles: Fix typo in shader cancel routines
  (rB08d21ff582).
  * Fix unreported: Fix wrong Cycles GLSL pointiness, still not
  supported but should be neutral 0.5 (rB4da266f48c).
  * Fix unreported: Fix Cycles CUDA performance on CUDA 8.0
  (rBfd0dea585c).
  * Fix unreported: Cycles: Fix OpenCL split kernel compilation
  after recent CUDA 8 performance fix (rB117329ae6d).
  * Fix unreported: Cycles: Fix use of uninitialized variable in SSS
  (rBb42e4c3c40).
  * Fix unreported: Cycles: Fix uninitialized variable from the
  previous commit (rBf55221e0a1).
  * Fix unreported: Cycles: Fix static initialization order fiasco
  (rBf0adb875cf).
  * Fix unreported: Fix Cycles address space OpenCL error after
  recent fix (rB759b5fb2a6).
  * Fix unreported: Cycles: Fix shadowing variable which also causes
  use of uninitialized variable (rB21bf863934).
  * Fix unreported: Fix missing outliner redraw when adding VSE
  strip (rB00d08c909d).
  * Fix T49534: 2.78 Wrong texture scaling in material viewport
  (rB3fb0c1b8e7).
  * Fix unreported: Fix missing properties editor update when
  changing 3D View camera (rB483b4f0567).
  * Fix unreported: UPBGE: Fix crash when calling shade_light
  texture when mtex has no tex (rBf978deddf8).
  * Fix unreported: Fix viewport camera gets out of sync in certain
  cases (rBcdedd082f3).
  * Fix T49506: Remove unused File Browser theme settings
  (rB11120c2981).
  * Fix T49631: radial control operators not using DPI properly
  (rB97bba76e8c).
  * Fix T49635: column_flow Layout - last column is too small
  (rB03f935961a).
  * Fix T49646: Switching from large to small image can get stuck
  zoom at max zoom distance (rBe6d9b15ab3).
  * Fix T49601: Material menu length problem (rBdacb53ff71).
  * Fix T49746: crash loading user preferences with missing
  operators (rBa6220f459b).
  * Fix unreported: Fix missing new eyedropper keymap entry in
  keyconfig_utils.py (rB07508c8b93).
  * Fix unreported: Fix memory leak caused by unknown opeartor of
  keymap item (rB4d14bd10c0).
  * Fix unreported: Fix wrong separator line width after drawing vec
  icon (rB2525c4e129).
  * Fix T49520: broken vertex colors in the game engine
  (rBe96e66b05b).
  * Fix T49764: Audio strips crackle when animating the volume
  (rB1bcddea00e).
  * Fix T49656: Crash when starting playback while using JACK audio
  with A/V sync (rB7b311c07ee).
  * Fix T49423: Data Preview of group containing only group
  instances is empty (rBa05f9bef3f).
  * Fix T49502: file browser on OS X not highlighting system folders
  and bookmarks (rB9fea90ba36).
  * Fix T49501: Animations imported via alembic render with wrong or
  no motion blur (rBe65e5045de).
  * Fix T49502: file browser on OS X not highlighting external
  drives (rB4736664da6).
  * Fix unreported: Fix missing operator-type registration
  (rBe145990fdd).
  * Fix T49466: Stupid typo in logicbricks new copy code
  fromrB776a8548f03a (rBd78a4b0c62).
  * Fix T49489: Pose marker in camera action + marker bound to
  camera -&gt; crash (rB7b43307508).
  * Fix T49553: Blender 2.78 crashes when File-&gt;Data Previews
  - &gt;Refresh Datablock Previews (rBb8194a52a0).
  * Fix T49722: Appending Bug (Groups) (rB44372d6441).
  * Fix T49775: Appending data with internal dependency cycles
  prevents correct clearing of linked data-blocks (rB3da4560143).
  * Fix unreported: Fix Scene datablocks being created with a real
  user while never having any real datablock user (rBcb9d010421).
  * Fix unreported: Fix OLD pre-git links in the API, add missing
  factory-startup option to blender executions (rBfd9aa06440).
  * Fix T49797: Exception from scene update handler might leak
  external engine descriptors (rBdac53963a8).
  * Fix unreported: BLI_task: fix case were some pool could work in
  more threads than allowed (rB4dbcbf5ba9).
  * Fix unreported: Fix a few compile errors with C++11 on macOS
  (rBcb6c43b61c).</changelog>
  <changelog author="davejplater@gmail.com" date="1479038400">- Use %mime_database_post macro instead of calling direct.</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="davejplater@gmail.com" date="1486728000">- Update to version 2.78b
- Bugfix version</changelog>
  <changelog author="davejplater@gmail.com" date="1486728001">- Build with system audaspace.</changelog>
  <changelog author="davejplater@gmail.com" date="1488369600">- Update to 2.78c
- Upstream changes:
  Port all changes for automated Cycles testing.
  Fix for wrong render result of hair with BVH motion steps.
  Fix compilation error of GLSL viewport when using Light Path node.
  Fix wrong Brick texture in material viewport.
  Fix crash with material preview and image sequences.
  Fix T50512: Linked Backround scene with animation not updating
  with new depsgraph.
  Fix T50687: Cycles baking time estimate and progress bar doesn't
  work / progress when baking with high samples.
  Fix T50748: Render Time incorrect when refreshing rendered preview
  in GPU mode.
  Fix wrong render results with texture limit and half-float
  textures.
  Fix Cycles still saving render output when error happened.</changelog>
  <changelog author="davejplater@gmail.com" date="1488715200">- Disabled system audaspace due to email crash report.</changelog>
  <changelog author="davejplater@gmail.com" date="1491566400">- Enabled system audaspace with blender-system-audaspace.patch
  which fixes the crash. see boo#1027923 and github audaspace #7</changelog>
  <changelog author="ideasman42@gmail.com" date="1495022400">- Remove extern paths which no longer exist, also epydoc which
  isn't used since 2.4x.</changelog>
  <changelog author="ideasman42@gmail.com" date="1495108800">- Remove yasm (was only needed for extern/ codecs) now removed.
- Remove ruby (Blender doesn't use Ruby).</changelog>
  <changelog author="ideasman42@gmail.com" date="1495108801">- Remove doxygen (only documents internal source code, not
  public / scripting API's).</changelog>
  <changelog author="davejplater@gmail.com" date="1505908800">- Update to release 2.79
- Remove blender-system-audaspace.patch incorporated in this version
- Now build with ffmpeg and cyles unconditionaly.
- Added blender-2.78-C++11-build-fix.patch for future openvdb build.
- Specifically require audaspace-plugins to fix boo#1057965.
- Add Compatibility_Warning.txt to warn about 2.78/2.79 compatibility
  problems on installation.
- Upstream changes:
  * Cycles: Built-in Denoising, Shadow catcher,Principled shader,
    AMD OpenCL optimizations.
  * Grease Pencil: New frame interpolation tools, per-layer onion
    skinning.
  * Alembic: Improvements to compatibility, stability and support.
  * User Interface: Initial support for reusable custom
    configurations, automatic DPI scaling.
  * Twenty Three new and several updated add-ons.
  * 100s of bug fixes and other improvements!
  * Compatibility Warning
    Due to various issues with drivers for AMD GCN 1.0 architecture
    , those cards are no longer supported for Cycles rendering
    When using add-ons in Blender 2.79 that take advantage of the
    new data-block pointer properties, the resulting .blend files
    can't be opened in earlier versions of Blender. Attempting to
    open such .blend files in Blender 2.78c and earlier may crash.
    Some Interface Themes may need to be reloaded to work properly.
    The text color contained in a layout.box() is now defined in
    User Preferences » Themes » User Interface » Box section
    Rig compatibility:
    Changes to IK snapping may affect rigs that use non-uniform
    IK scaling. (rigs created in the 2.78 builds.)
    During the 2.78 series: IK snapping was partly broken.
    This has been fixed for Blender 2.79
    Rigs created in Blender 2.78 may not be compatible with
    2.79.
    Rigs created in Blender 2.77 may still work.
    When using the add-on Rigify, please note:
    Compatibility is broken for this release. There's no
    guarantee rigs created in previous Blender versions will
    work correctly.
    Rigs created in Blender 2.78 may not be compatible with 2.79.
    Rigs created in Blender 2.77 may still work.
    Save your work before attempting upgrading your rigs.
- See:https://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.79
  For a comprehensive list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507032000">- Do not BuildRequire openSUSE-release: in TW, this is a daily
  changing package, invalidating blender daily. There is no
  information a package would require, which is not also available
  in distribution-release (which exists for this very purpose and
  can be used across SUSE distributions, incl. Leap/SLE).</changelog>
  <changelog author="davejplater@gmail.com" date="1519992000">- Update to release 2.79a
- Upstream changes:
  Blender 2.79a features a new Denoiser, PBR Shader, Shadow Catcher,
  Filmic Color Management, AMD OpenCL improvements and much more.
  All of that plus over a massive 900 bug fixes!</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1522152000">- Remove xorg-x11-devel from buildrequires.
- Reorder/rework buildrequires, packages libao-devel,
  libdrm-devel, libexpat-devel,libvorbis-devel,openssl-devel,
  libsamplerate-devel are not required and were removed.
- Build using -DWITH_SYSTEM_LZO so lzo-devel is actually
  used.</changelog>
  <changelog author="davejplater@gmail.com" date="1522152001">- Update to release 2.79b.
- Upstream changes:
  This is a bug fix release.</changelog>
  <changelog author="davejplater@gmail.com" date="1527854400">- Package blender cycles headers in blender-devel sub package to
  fix boo#1094777.
- Remove Compatibility_Warning.txt.</changelog>
  <changelog author="davejplater@gmail.com" date="1527940800">- Only allow headers for x86_64 arch.</changelog>
</package>
<package pkgid="698e76c66bdb06f0bee86e19d092f6786fac272e6c28810fc16f6776c2ecdffa" name="blueman" arch="src">
  <version epoch="0" ver="2.0.6" rel="lp150.3.3.1"/>
  <changelog author="and.november@opensuse.org" date="1434283200">- build with python3</changelog>
  <changelog author="and.november@opensuse.org" date="1444392000">- update to version 2.0.1</changelog>
  <changelog author="and.november@opensuse.org" date="1450353600">- update to version 2.0.2</changelog>
  <changelog author="and.november@opensuse.org" date="1451649600">- update to version 2.0.3</changelog>
  <changelog author="and.november@opensuse.org" date="1459944000">- update to version 2.0.4</changelog>
  <changelog author="meissner@suse.com" date="1493294400">- removed rpmlintrc</changelog>
  <changelog author="bosim@opensuse.org" date="1493294401">- ran spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Ensure neutrality of description</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 2.0.5
  * Bugs fixed
    + PPPSupport: Correct binary name for ModemManager
    + PPPSupport: Exclude grep process from process list
    + GameControllerWakeLock: Check for Class property before using it
    + SerialManager: Properly check for None
    + NetConf: Treat UnicodeDecodeError as if there was no file
    + Notification: Also check if notification daemon supports body
    + Correct bold tag in portugese translation (thanks @andreyluiz)
    + Properly check for None in SerialManager
    + GameControllerWakeLock: Check for Class property first
    + Fix bugs in NetworkService ui
    + NetConf: fix writing PID file for dhcpd(3)
    + Notification: Make sure x and y hint are in screen geometry
- ran spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1524744000">- Switch adwaita-icon-theme for gnome-icon-theme in BuildRequires.
- Run sed to change env-based hashbangs to ones depending directly
  on the system python3 binary.
- Only run post(un) scripts for openSUSE &lt; 1500; rpm file triggers
  takes care of these for newer versions.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1533297600">- update to version 2.0.6: This fixes the security of the polkit authorization
  checks in blueman (bsc#1083066). Previously any user with access to the
  D-Bus system bus could trigger certain network configuration logic in
  blueman without authentication.</changelog>
</package>
<package pkgid="74bffb59fc119f0a8a9849b517f7479fffc52dab90e4e9f883777e42d35eb95f" name="blueman" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="lp150.3.3.1"/>
  <changelog author="and.november@opensuse.org" date="1434283200">- build with python3</changelog>
  <changelog author="and.november@opensuse.org" date="1444392000">- update to version 2.0.1</changelog>
  <changelog author="and.november@opensuse.org" date="1450353600">- update to version 2.0.2</changelog>
  <changelog author="and.november@opensuse.org" date="1451649600">- update to version 2.0.3</changelog>
  <changelog author="and.november@opensuse.org" date="1459944000">- update to version 2.0.4</changelog>
  <changelog author="meissner@suse.com" date="1493294400">- removed rpmlintrc</changelog>
  <changelog author="bosim@opensuse.org" date="1493294401">- ran spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Ensure neutrality of description</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 2.0.5
  * Bugs fixed
    + PPPSupport: Correct binary name for ModemManager
    + PPPSupport: Exclude grep process from process list
    + GameControllerWakeLock: Check for Class property before using it
    + SerialManager: Properly check for None
    + NetConf: Treat UnicodeDecodeError as if there was no file
    + Notification: Also check if notification daemon supports body
    + Correct bold tag in portugese translation (thanks @andreyluiz)
    + Properly check for None in SerialManager
    + GameControllerWakeLock: Check for Class property first
    + Fix bugs in NetworkService ui
    + NetConf: fix writing PID file for dhcpd(3)
    + Notification: Make sure x and y hint are in screen geometry
- ran spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1524744000">- Switch adwaita-icon-theme for gnome-icon-theme in BuildRequires.
- Run sed to change env-based hashbangs to ones depending directly
  on the system python3 binary.
- Only run post(un) scripts for openSUSE &lt; 1500; rpm file triggers
  takes care of these for newer versions.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1533297600">- update to version 2.0.6: This fixes the security of the polkit authorization
  checks in blueman (bsc#1083066). Previously any user with access to the
  D-Bus system bus could trigger certain network configuration logic in
  blueman without authentication.</changelog>
</package>
<package pkgid="c4ceaeb657f40c402e1def97c1d2071a22ac4a004032f376abd8207b2d1ca096" name="blueman-lang" arch="noarch">
  <version epoch="0" ver="2.0.6" rel="lp150.3.3.1"/>
  <changelog author="and.november@opensuse.org" date="1434283200">- build with python3</changelog>
  <changelog author="and.november@opensuse.org" date="1444392000">- update to version 2.0.1</changelog>
  <changelog author="and.november@opensuse.org" date="1450353600">- update to version 2.0.2</changelog>
  <changelog author="and.november@opensuse.org" date="1451649600">- update to version 2.0.3</changelog>
  <changelog author="and.november@opensuse.org" date="1459944000">- update to version 2.0.4</changelog>
  <changelog author="meissner@suse.com" date="1493294400">- removed rpmlintrc</changelog>
  <changelog author="bosim@opensuse.org" date="1493294401">- ran spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Ensure neutrality of description</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 2.0.5
  * Bugs fixed
    + PPPSupport: Correct binary name for ModemManager
    + PPPSupport: Exclude grep process from process list
    + GameControllerWakeLock: Check for Class property before using it
    + SerialManager: Properly check for None
    + NetConf: Treat UnicodeDecodeError as if there was no file
    + Notification: Also check if notification daemon supports body
    + Correct bold tag in portugese translation (thanks @andreyluiz)
    + Properly check for None in SerialManager
    + GameControllerWakeLock: Check for Class property first
    + Fix bugs in NetworkService ui
    + NetConf: fix writing PID file for dhcpd(3)
    + Notification: Make sure x and y hint are in screen geometry
- ran spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1524744000">- Switch adwaita-icon-theme for gnome-icon-theme in BuildRequires.
- Run sed to change env-based hashbangs to ones depending directly
  on the system python3 binary.
- Only run post(un) scripts for openSUSE &lt; 1500; rpm file triggers
  takes care of these for newer versions.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1533297600">- update to version 2.0.6: This fixes the security of the polkit authorization
  checks in blueman (bsc#1083066). Previously any user with access to the
  D-Bus system bus could trigger certain network configuration logic in
  blueman without authentication.</changelog>
</package>
<package pkgid="96b65190286a4a9d6b0b74666352d9ca131872b41a7522d2dd7bcc6ecf358e90" name="bluez" arch="src">
  <version epoch="0" ver="5.48" rel="lp150.4.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
</package>
<package pkgid="2dea82da2f832f4c619fc341daa96671a93066778474efa86706ae88625a0213" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
</package>
<package pkgid="06fc5479d84f272aa919a4494c0a0d329b60e9c320ebaca7ed6621705c98c57e" name="bluez-auto-enable-devices" arch="noarch">
  <version epoch="0" ver="5.48" rel="lp150.4.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
</package>
<package pkgid="f5c19392c2011594cea8af7325eb03b972bd7b3ed48c1b95a85324868b3c957d" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
</package>
<package pkgid="d18ae61288b98ff85d7a59618c8979f3397c9f003054c7ac395e9bd56a053509" name="bluez-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
</package>
<package pkgid="55b69ed9db30210eb8e13d32f4afc470a3c0338de92c136d35a08c48b1ae3b4d" name="bluez-devel" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
</package>
<package pkgid="4e9d62858323843e4fa22f7d6de70918357960be64f36ab5a5c218adc352f244" name="bluez-qt" arch="src">
  <version epoch="0" ver="5.45.0" rel="lp150.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1479124800">- Specify the file to be included in bluez-qt-udev instead of
  owning the /lib/udev/ directory.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1479124801">- (Build)Require udev so udevrulesdir gets owned</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Provide device type for Low Energy devices
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * Pass an explicit list of arguments. This prevents QProcess from trying to handle our space containing path through a shell
  * Fix property changes being missed immediately after an obejct is added (kde#377405)</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * API dox: note CamelCase includes by @class tag
  * API dox: add namespace to classes named in README.md
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * Autotests: repair finding helper binary in current setup
  * autotests: fix running with CTEST_PARALLEL_LEVEL=8
  * autotests: prepare for CMAKE_RUNTIME_OUTPUT_DIRECTORY being set</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * autotests: remove now unnecessary compat code
  * autotests: fix failure to find fakebluez in the bin dir.
  * Autotests: Fix finding fakebluez binary (kde#383453)</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Do not leak rfkill file descriptors. (kde#386886)</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Autogenerate debug file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * No need to initialize m_usableAdapterwith nullptr</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * None</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539950400">- Fix install directory for udev rules (boo#1112598)</changelog>
</package>
<package pkgid="685d52fb6c083bb8a5fd1603e8d3bc8a00e54fc25e5a2058df86a28e41a8934d" name="bluez-qt-devel" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1479124800">- Specify the file to be included in bluez-qt-udev instead of
  owning the /lib/udev/ directory.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1479124801">- (Build)Require udev so udevrulesdir gets owned</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Provide device type for Low Energy devices
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * Pass an explicit list of arguments. This prevents QProcess from trying to handle our space containing path through a shell
  * Fix property changes being missed immediately after an obejct is added (kde#377405)</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * API dox: note CamelCase includes by @class tag
  * API dox: add namespace to classes named in README.md
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * Autotests: repair finding helper binary in current setup
  * autotests: fix running with CTEST_PARALLEL_LEVEL=8
  * autotests: prepare for CMAKE_RUNTIME_OUTPUT_DIRECTORY being set</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * autotests: remove now unnecessary compat code
  * autotests: fix failure to find fakebluez in the bin dir.
  * Autotests: Fix finding fakebluez binary (kde#383453)</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Do not leak rfkill file descriptors. (kde#386886)</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Autogenerate debug file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * No need to initialize m_usableAdapterwith nullptr</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * None</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539950400">- Fix install directory for udev rules (boo#1112598)</changelog>
</package>
<package pkgid="ecfe81da2b127a1b0935d40839ab98af4a0371666f7564f2f29bca2fa6d1f4a5" name="bluez-qt-imports" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1479124800">- Specify the file to be included in bluez-qt-udev instead of
  owning the /lib/udev/ directory.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1479124801">- (Build)Require udev so udevrulesdir gets owned</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Provide device type for Low Energy devices
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * Pass an explicit list of arguments. This prevents QProcess from trying to handle our space containing path through a shell
  * Fix property changes being missed immediately after an obejct is added (kde#377405)</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * API dox: note CamelCase includes by @class tag
  * API dox: add namespace to classes named in README.md
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * Autotests: repair finding helper binary in current setup
  * autotests: fix running with CTEST_PARALLEL_LEVEL=8
  * autotests: prepare for CMAKE_RUNTIME_OUTPUT_DIRECTORY being set</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * autotests: remove now unnecessary compat code
  * autotests: fix failure to find fakebluez in the bin dir.
  * Autotests: Fix finding fakebluez binary (kde#383453)</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Do not leak rfkill file descriptors. (kde#386886)</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Autogenerate debug file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * No need to initialize m_usableAdapterwith nullptr</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * None</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539950400">- Fix install directory for udev rules (boo#1112598)</changelog>
</package>
<package pkgid="fef308359a1031ac0bce68cbfa793cfd2000e4206e36e67aca9b7071b4577e7a" name="bluez-qt-udev" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1479124800">- Specify the file to be included in bluez-qt-udev instead of
  owning the /lib/udev/ directory.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1479124801">- (Build)Require udev so udevrulesdir gets owned</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Provide device type for Low Energy devices
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * Pass an explicit list of arguments. This prevents QProcess from trying to handle our space containing path through a shell
  * Fix property changes being missed immediately after an obejct is added (kde#377405)</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * API dox: note CamelCase includes by @class tag
  * API dox: add namespace to classes named in README.md
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * Autotests: repair finding helper binary in current setup
  * autotests: fix running with CTEST_PARALLEL_LEVEL=8
  * autotests: prepare for CMAKE_RUNTIME_OUTPUT_DIRECTORY being set</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * autotests: remove now unnecessary compat code
  * autotests: fix failure to find fakebluez in the bin dir.
  * Autotests: Fix finding fakebluez binary (kde#383453)</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Do not leak rfkill file descriptors. (kde#386886)</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Autogenerate debug file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * No need to initialize m_usableAdapterwith nullptr</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * None</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539950400">- Fix install directory for udev rules (boo#1112598)</changelog>
</package>
<package pkgid="14f5ce660471afdd5c2cb147d3407231701fbe11c61a9bbb8002fca325caba6d" name="bluez-test" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
</package>
<package pkgid="fcbc646236c613ca4280d468fe8845862e11f017e4da62aa6964b2705cb3d168" name="bouncycastle" arch="noarch">
  <version epoch="0" ver="1.60" rel="lp150.2.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1326715200">- Initial packaging for SUSE
  from Fedora's bouncycastle 1.46</changelog>
  <changelog author="mvyskocil@suse.cz" date="1337342400">- bumb target to 1.6</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from recent javapackages-tools
- temporary mozilla-nss to BT: in order to pass a tests</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1384430400">- Don't own /etc/java/security to not clash with javapackages-tools
- Don't mark random files as config</changelog>
  <changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Depend on junit not junit4</changelog>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Set java source and target to 1.6 to allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Version update to 1.58
- Added patch:
  * ambiguous-reseed.patch
    + Upstream fix for an ambiguous overload</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="abergmann@suse.com" date="1528718400">- Version update to 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
</package>
<package pkgid="f7e278770074fcb904aa07371c6007fd64a6d6b9cd7e9834ccb513d387c18e83" name="bouncycastle" arch="src">
  <version epoch="0" ver="1.60" rel="lp150.2.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1326715200">- Initial packaging for SUSE
  from Fedora's bouncycastle 1.46</changelog>
  <changelog author="mvyskocil@suse.cz" date="1337342400">- bumb target to 1.6</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from recent javapackages-tools
- temporary mozilla-nss to BT: in order to pass a tests</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1384430400">- Don't own /etc/java/security to not clash with javapackages-tools
- Don't mark random files as config</changelog>
  <changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Depend on junit not junit4</changelog>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Set java source and target to 1.6 to allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Version update to 1.58
- Added patch:
  * ambiguous-reseed.patch
    + Upstream fix for an ambiguous overload</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="abergmann@suse.com" date="1528718400">- Version update to 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
</package>
<package pkgid="6fa9a9494191f36a22bce4d4f23c46ccda008a82eb97abec8488b09745ff5bcd" name="bouncycastle-javadoc" arch="noarch">
  <version epoch="0" ver="1.60" rel="lp150.2.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1326715200">- Initial packaging for SUSE
  from Fedora's bouncycastle 1.46</changelog>
  <changelog author="mvyskocil@suse.cz" date="1337342400">- bumb target to 1.6</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from recent javapackages-tools
- temporary mozilla-nss to BT: in order to pass a tests</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1384430400">- Don't own /etc/java/security to not clash with javapackages-tools
- Don't mark random files as config</changelog>
  <changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Depend on junit not junit4</changelog>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Set java source and target to 1.6 to allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Version update to 1.58
- Added patch:
  * ambiguous-reseed.patch
    + Upstream fix for an ambiguous overload</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="abergmann@suse.com" date="1528718400">- Version update to 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
</package>
<package pkgid="80b93e417daaa8be2edaab57a8f79ee9f2c8b21013effb15d6898ba4407240cd" name="breeze-gtk" arch="src">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Adjusted Scrollbars so now they fit the Qt theme</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Fix background-image warning
  * Don't show scrollbar steppers</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Properly check for Breeze GTK 3 theme existence in kconf_update
  * Fixup install paths
  * Move the 3.0 directory to 3.18 to ensure builds will not fail (kde#388018)
  * Revert "Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally""
  * Revert "Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions"
  * Modify theme generator to match scrollbar updates
  * Add preliminary theme generation script for authoring assets
  * Add GTK 3.18 theme back to support LTS distributions
  * Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions
  * Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally" This commit causes the build to fail as gtk-3.18/ does not exist as a directory in the source tree
  * Apply text contrast changes to GTK 2 theme
  * Increase text contrast for consistency with default Breeze color scheme
  * Rename 3.20 theme to be used for all GTK 3 versions
  * Remove obsolete GTK versions' themes to improve maintainability
  * Update scrollbar assets (kde#385627)
  * Adjust client-side decorations to look correct in both CSD and forced SSD environments
  * Add support for gtk3 theme variant feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Add additional fixes:
  * 0001-kconf_update-Add-gtk-primary-button-warps-slider-0-t.patch (kde#379773</changelog>
</package>
<package pkgid="edcbc040ca8bf39723681278ddd0a04654a4f24c10093d42bdad18243f748e31" name="breeze-gtk" arch="src">
  <version epoch="0" ver="5.12.7" rel="lp150.2.6.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Adjusted Scrollbars so now they fit the Qt theme</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Fix background-image warning
  * Don't show scrollbar steppers</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Properly check for Breeze GTK 3 theme existence in kconf_update
  * Fixup install paths
  * Move the 3.0 directory to 3.18 to ensure builds will not fail (kde#388018)
  * Revert "Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally""
  * Revert "Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions"
  * Modify theme generator to match scrollbar updates
  * Add preliminary theme generation script for authoring assets
  * Add GTK 3.18 theme back to support LTS distributions
  * Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions
  * Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally" This commit causes the build to fail as gtk-3.18/ does not exist as a directory in the source tree
  * Apply text contrast changes to GTK 2 theme
  * Increase text contrast for consistency with default Breeze color scheme
  * Rename 3.20 theme to be used for all GTK 3 versions
  * Remove obsolete GTK versions' themes to improve maintainability
  * Update scrollbar assets (kde#385627)
  * Adjust client-side decorations to look correct in both CSD and forced SSD environments
  * Add support for gtk3 theme variant feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Add additional fixes:
  * 0001-kconf_update-Add-gtk-primary-button-warps-slider-0-t.patch (kde#379773)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1537876800">- Update to 5.12.7
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.7.php
- Changes since 5.12.6:
  * Fix scrollbars in LibreOffice (kde#389709, boo#1116859)
  * [kconf_update] Add "gtk-primary-button-warps-slider=0" to generated GTK3 config (kde#379773)
- Remove patches, now upstream:
  * 0001-kconf_update-Add-gtk-primary-button-warps-slider-0-t.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1542801600">- Add patch to fix GTK treeviews:
  * 0001-GTK-theme-treeview-style-typo-bug-fix.patch</changelog>
</package>
<package pkgid="a9c75f84fe04e00e73777766433ccd0d5e8a9a6ee379e5aa4b7195816a9e3a03" name="bsdtar" arch="x86_64">
  <version epoch="0" ver="3.3.2" rel="lp150.2.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1376654400">- update to 3.1.2
  This is a maintenance update to fix issues with the new RAR
  seeking feature.
- libarchive's new website moved to http://www.libarchive.org.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1376913600">- libarchive-openssl.patch: Call OPENSSL_config where needed,
  otherwise on systems configured to use openSSL engines such
  as via-padlock wont benefit from hardware acceleration.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1377000000">- remove artificial dependencies on libacl-devel, libbz2-devel,
  zlib-devel from libarchive-devel.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1385294400">- add optional -static-devel library package, intended to publish pixz
  for CentOS / RHEL, default off
- skip some dependencies not required for pixz on CentOS / RHEL</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401278400">- libarchive-xattr.patch, fix subtle wrong library check
  that causes this package to depend on libattr when it should
  be using glibc.</changelog>
  <changelog author="jsegitz@novell.com" date="1415707200">- Added CVE-2013-0211.patch to fix CVE-2013-0211 (bnc#800024)</changelog>
  <changelog author="adrian@suse.com" date="1425556800">- fix a directory traversal in cpio tool (bnc#920870)
  directory-traversal-fix.patch CVE-2015-2304</changelog>
  <changelog author="astieger@suse.com" date="1426420800">- add CVE for previous change</changelog>
  <changelog author="astieger@suse.com" date="1427025600">- RHEL/CentOS build fix, skipping autoreconf</changelog>
  <changelog author="astieger@suse.com" date="1442664000">- build static lib on RHEL 7</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1462536000">- add _constraints memory 4096MB to avoid ppc64le build failure</changelog>
  <changelog author="adrian@suse.de" date="1462795200">- 4GB _constraints for ppc64le only, it would break other archs
- update to version 3.2.0
  * Fixes CVE-2016-1541
  * Fixes CVE-2015-8928
  * changes are only documented in git history
  * updated openssl patch
  * new bsdcat utility
- removed obsolete patches for:
  * CVE-2013-0211.patch
  * directory-traversal-fix.patch
  * libarchive-xattr.patch</changelog>
  <changelog author="adrian@suse.de" date="1466078400">- limit size of symlinks in cpio archives (CVE-2016-4809, boo#984990)
  CVE-2016-4809.patch</changelog>
  <changelog author="adrian@suse.de" date="1466424000">- update to version 3.2.1
  Fixes a number of security issues:
    CVE-2015-8934, CVE-2015-8933, CVE-2015-8917, CVE-2016-4301, CVE-2016-4300
- and fixing the build (fix-build.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1469275200">- make bsdtar require a matching libarchive version to avoid
  missing symbol errors</changelog>
  <changelog author="adrian@suse.com" date="1477483200">- update to version 3.2.2
  Unspecified security fixes, but at least:
  * CVE-2016-8687
  * CVE-2016-8689
  * CVE-2016-8688
  * CVE-2016-5844
  * CVE-2016-6250
  * CVE-2016-5418
- obsoletes fix-build.patch</changelog>
  <changelog author="adrian@suse.com" date="1480680000">- fix extracting over symlinks: fix-extract-over-links.patch
  the problem is solved upstream different, but git master
  is too different atm.</changelog>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1539172800">- CVE-2017-14502.patch: bsc#1059100
  CVE-2017-14501.patch: CVE-2017-14503 bsc#1057514 bsc#1059139</changelog>
</package>
<package pkgid="5a4406913cbc4ad5b94e1e88555988eeadb9874cc57efc70a4b3ec760a791d35" name="ca-certificates" arch="noarch">
  <version epoch="0" ver="2+git20170807.10b2785" rel="lp150.6.3.1"/>
  <changelog author="lnussel@suse.de" date="1396612800">- package correct permissions of generated  directories (bnc#871639)</changelog>
  <changelog author="lnussel@suse.de" date="1396872000">- Fix typo in man page</changelog>
  <changelog author="lnussel@suse.de" date="1399550400">- copy custom pem files in /etc/ssl/certs to /etc/pki/anchors on
  update (bnc#875647)</changelog>
  <changelog author="lnussel@suse.de" date="1401883200">- don't keep certificates with marker (bnc#875647)</changelog>
  <changelog author="lnussel@suse.de" date="1403524800">- fix directory permissions for real this time (bnc#871639)</changelog>
  <changelog author="meissner@suse.com" date="1405598400">- clarify the start order of the generators, as certbundle.run
  semi-depends on etc_ssl.run via a timestamp. (bnc#883386)</changelog>
  <changelog author="lnussel@suse.de" date="1406721600">- removed the version in the Obsoletes. The package in SLE11 got
  version updated (bnc#887099).</changelog>
  <changelog author="lnussel@suse.de" date="1407153600">- add p11 kit header to set label of migrated certificates to the
  file name of the previous one (bnc#890205)</changelog>
  <changelog author="lnussel@suse.de" date="1407240000">- use rpm -qf to determine if a ssl cert is owned by some other
  package and therefore doesn't need to be migrated (related to
  bnc#890205).</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415448000">- fix bashism in postun script</changelog>
  <changelog author="lnussel@suse.de" date="1427198400">- Update to version 2+git20150324.e3ee392:
  + p11-kit 0.23.1 supports pem-directory-hash now
- use service file to generate tarball</changelog>
  <changelog author="lnussel@suse.de" date="1427284800">- require p11-kit-tools &gt;= 0.23.1</changelog>
  <changelog author="lnussel@suse.de" date="1447243200">- Update to version 2+git20151110.c15593c:
  + set proper umask (boo#948724)</changelog>
  <changelog author="kukuk@suse.de" date="1497873600">- Run update-ca-certificate by systemd unit when the content of
  one of the paths changes. Needed for read-only root and/or
  transactional updates.</changelog>
  <changelog author="lnussel@suse.de" date="1502107200">- Update to version 2+git20170807.10b2785:
  * Check TRANSACTIONAL_UPDATE is set (boo#1045942)
  * Add systemd units</changelog>
  <changelog author="kukuk@suse.de" date="1511438400">- Don't require systemd, since we could be used in environments
  like container images, where we don't have systemd. If systemd
  is installed the systemd units will be used, else they are not
  needed.</changelog>
  <changelog author="kukuk@suse.com" date="1512734400">- Re-add systemd requires, else package will be installed to early
  and services never enabled [bsc#1071776].</changelog>
  <changelog author="kukuk@suse.de" date="1513252800">- Revert last change since we fixed systemd-preset-branding and
  this requires is no longer needed.</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
</package>
<package pkgid="765c29d1088261e62541ead7b2a72260a819b62dc6afffa6217836d3a274d241" name="ca-certificates" arch="src">
  <version epoch="0" ver="2+git20170807.10b2785" rel="lp150.6.3.1"/>
  <changelog author="lnussel@suse.de" date="1396612800">- package correct permissions of generated  directories (bnc#871639)</changelog>
  <changelog author="lnussel@suse.de" date="1396872000">- Fix typo in man page</changelog>
  <changelog author="lnussel@suse.de" date="1399550400">- copy custom pem files in /etc/ssl/certs to /etc/pki/anchors on
  update (bnc#875647)</changelog>
  <changelog author="lnussel@suse.de" date="1401883200">- don't keep certificates with marker (bnc#875647)</changelog>
  <changelog author="lnussel@suse.de" date="1403524800">- fix directory permissions for real this time (bnc#871639)</changelog>
  <changelog author="meissner@suse.com" date="1405598400">- clarify the start order of the generators, as certbundle.run
  semi-depends on etc_ssl.run via a timestamp. (bnc#883386)</changelog>
  <changelog author="lnussel@suse.de" date="1406721600">- removed the version in the Obsoletes. The package in SLE11 got
  version updated (bnc#887099).</changelog>
  <changelog author="lnussel@suse.de" date="1407153600">- add p11 kit header to set label of migrated certificates to the
  file name of the previous one (bnc#890205)</changelog>
  <changelog author="lnussel@suse.de" date="1407240000">- use rpm -qf to determine if a ssl cert is owned by some other
  package and therefore doesn't need to be migrated (related to
  bnc#890205).</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415448000">- fix bashism in postun script</changelog>
  <changelog author="lnussel@suse.de" date="1427198400">- Update to version 2+git20150324.e3ee392:
  + p11-kit 0.23.1 supports pem-directory-hash now
- use service file to generate tarball</changelog>
  <changelog author="lnussel@suse.de" date="1427284800">- require p11-kit-tools &gt;= 0.23.1</changelog>
  <changelog author="lnussel@suse.de" date="1447243200">- Update to version 2+git20151110.c15593c:
  + set proper umask (boo#948724)</changelog>
  <changelog author="kukuk@suse.de" date="1497873600">- Run update-ca-certificate by systemd unit when the content of
  one of the paths changes. Needed for read-only root and/or
  transactional updates.</changelog>
  <changelog author="lnussel@suse.de" date="1502107200">- Update to version 2+git20170807.10b2785:
  * Check TRANSACTIONAL_UPDATE is set (boo#1045942)
  * Add systemd units</changelog>
  <changelog author="kukuk@suse.de" date="1511438400">- Don't require systemd, since we could be used in environments
  like container images, where we don't have systemd. If systemd
  is installed the systemd units will be used, else they are not
  needed.</changelog>
  <changelog author="kukuk@suse.com" date="1512734400">- Re-add systemd requires, else package will be installed to early
  and services never enabled [bsc#1071776].</changelog>
  <changelog author="kukuk@suse.de" date="1513252800">- Revert last change since we fixed systemd-preset-branding and
  this requires is no longer needed.</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
</package>
<package pkgid="9ce5a206a9b7e3285398095a9b088f89edb062d9d745477345b62e3e6957dbf4" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.24" rel="lp150.3.3.1"/>
  <changelog author="lnussel@suse.de" date="1374667200">- add fake basic contraints to Entrust root so p11-kit export the cert
  (bnc#829471)
- add nssckbi.h that matches certdata.txt; make sure package has the
  correct version number which is currently 1.93. No actual content
  change in certdata.txt compared to 1.85, it's just that the
  versioning scheme changed.</changelog>
  <changelog author="lnussel@suse.de" date="1374667201">- remove superfluous double quotes from certificate names</changelog>
  <changelog author="lnussel@suse.de" date="1376913600">- update Entrust root attributes to new format used by p11-kit</changelog>
  <changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
  <changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
  <changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
  <changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>
  <changelog author="lnussel@suse.de" date="1401883200">- updated certificates to revision 1.97 (bnc#881241)
  new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)</changelog>
  <changelog author="meissner@suse.com" date="1402401600">- in sle11 we bumped openssl-certs version to match the NSS version,
  so provide/obsolete the current version.</changelog>
  <changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7.
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store.
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
</package>
<package pkgid="60827af7ed19c9afdc890b1fb748834e97bccdc256b0b5fd34b604e399f5e6e8" name="ca-certificates-mozilla" arch="src">
  <version epoch="0" ver="2.24" rel="lp150.3.3.1"/>
  <changelog author="lnussel@suse.de" date="1374667200">- add fake basic contraints to Entrust root so p11-kit export the cert
  (bnc#829471)
- add nssckbi.h that matches certdata.txt; make sure package has the
  correct version number which is currently 1.93. No actual content
  change in certdata.txt compared to 1.85, it's just that the
  versioning scheme changed.</changelog>
  <changelog author="lnussel@suse.de" date="1374667201">- remove superfluous double quotes from certificate names</changelog>
  <changelog author="lnussel@suse.de" date="1376913600">- update Entrust root attributes to new format used by p11-kit</changelog>
  <changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
  <changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
  <changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
  <changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>
  <changelog author="lnussel@suse.de" date="1401883200">- updated certificates to revision 1.97 (bnc#881241)
  new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)</changelog>
  <changelog author="meissner@suse.com" date="1402401600">- in sle11 we bumped openssl-certs version to match the NSS version,
  so provide/obsolete the current version.</changelog>
  <changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7.
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store.
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
</package>
<package pkgid="5451c511887cc2152424d7c246188b02284b86db1d61804e3e755dc202d19b57" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.3.6.1"/>
  <changelog author="lnussel@suse.de" date="1374667200">- remove superfluous double quotes from certificate names</changelog>
  <changelog author="lnussel@suse.de" date="1376913600">- update Entrust root attributes to new format used by p11-kit</changelog>
  <changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
  <changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
  <changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
  <changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>
  <changelog author="lnussel@suse.de" date="1401883200">- updated certificates to revision 1.97 (bnc#881241)
  new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)</changelog>
  <changelog author="meissner@suse.com" date="1402401600">- in sle11 we bumped openssl-certs version to match the NSS version,
  so provide/obsolete the current version.</changelog>
  <changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7.
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store.
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
</package>
<package pkgid="daf318625066c01ee360fab498c892aa8da83ec047adf83a32fa0dd02cd0e995" name="ca-certificates-mozilla" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.3.6.1"/>
  <changelog author="lnussel@suse.de" date="1374667200">- remove superfluous double quotes from certificate names</changelog>
  <changelog author="lnussel@suse.de" date="1376913600">- update Entrust root attributes to new format used by p11-kit</changelog>
  <changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
  <changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
  <changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
  <changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>
  <changelog author="lnussel@suse.de" date="1401883200">- updated certificates to revision 1.97 (bnc#881241)
  new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)</changelog>
  <changelog author="meissner@suse.com" date="1402401600">- in sle11 we bumped openssl-certs version to match the NSS version,
  so provide/obsolete the current version.</changelog>
  <changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7.
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store.
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
</package>
<package pkgid="159d6d717e8eaae83ff8b8030c43e6e99643c6438505837a6a1916eb52e1370e" name="cairo" arch="src">
  <version epoch="0" ver="1.15.10" rel="lp150.3.3.1"/>
  <changelog author="ro@suse.de" date="1431777600">- drop cairo-disable-lto.patch: lto was dropped upstream</changelog>
  <changelog author="zaitor@opensuse.org" date="1446465600">- Update to version 1.14.4:
  + Avoid appending empty slots to user data arrays. Fixes a memory
    consumption regression since commit 9341c254a.
  + Return a better error (file-not-found) when setting up pango on
    devices where the font files don't have read permissions.
  + Fix regression in the font size of canvas text in Inkscape when
    compiled with the Quartz backend (fdo#84324).
  + Fix _cairo_gl_shader_bind_matrix() to maintain compatibility
    with OpenGL ES 2.0. Manually transpose the matrix.
  + Fix incorrect font descriptor conversion when the font matrix
    yy is negative (fdo#90538).
  + Fix crash when using a complex path for clip and stroke due to
    discarding the intersection exactly at the top edge
    (fdo#74779).
  + Fix cairo_get_locale_decimal_point() on Android.
  + Fix compilation problem on AIX due to conflicting usage of
    symbol 'jmpbuf' (fdo#89339).
  + Fix broken rendering with XCB due to snapshotting of uploaded
    part of surfaces (fdo#67505).
  + Fix loss of alpha when copying a mask for a cairo recording
    surface, resulting in a double copy (fdo#73038, fdo#73901).
  + Fix incorrect recording of certain paths with script surfaces
    (fdo#91054).
  + Fix typo in definition of MAYBE_WARN in configure script
    (fdo#89750).
  + Fix use of filename variable after it's been freed (fdo#91206).
  + Fix out of bounds access when printing pattern (fdo#91266).
  + Fix incorrect size calculation in glyph cache unlocking for
    Cairo GL compositor (fdo#91321).
  + Fix memory leak in _cairo_gl_pattern_texture_setup()
    (fdo#91537).
  + Fix transparent images in win32-print (fdo#91835).
  + Fix _put_shm_image_boxes and _put_image_boxes when no SHM
    available with XCB.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008000">- Update to version 1.14.6:
  + Simple bugfix release to fix one Windows issue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008001">- Update to version 1.15.2:
  + Fix xcb/xlib compilation and calls. Make image boxes behave
    when SHM is not available.
  + Fix various issues with printing and transparent images on
    Win32.
  + Fix thin lines that don't show up when printing in Inkscape due
    to overly aggressive culling (fdo#77298).
  + Fix broken printing via pdf when glyph 0 is used for rendering,
    resulting in missing spaces and letters (fdo#89082).
  + Fix crash for certain glyphs in opentype fonts (fdo#91902).
  + Fix incorrect rendering of SVG paths with more than one
    subpath. If more than one trap is passed in then it's
    guaranteed that the returned traps will have their left edge to
    the left of their right edge, but if only one trap is passed in
    then the function always returns without doing anything
    (fdo#90984).
  + Improve rendering with Quarts to better match pixman's blending
    and filtering behavior.
- Drop cairo-render-thin-lines.patch: Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1450699200">- Add cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  to fix mutex deadlocks on certain documents (bsc#958844).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove patch:
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch.</changelog>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="zaitor@opensuse.org" date="1481457600">- Update to version 1.15.4:
  + The PDF backend has gained support for a range of widely used
    features, including thumbnails, page labels, metadata, document
    outlines, structured text, hyperlinks, and tags. Tags permit
    adding logical info such as headings, tables, figures, etc.
    that facilitates indexing, accessibility, text reflow,
    searching, and extraction of the tagged items to other
    software.
  + API Changes:
  - Added a cairo API to set up Win32 surfaces for HDC with alpha
    channels.
  - New API for added PDF functionality (see above), and new
    error status item for problems relating to PDF tagging.
  - New error status items for handling of GDI, libfreetype, and
    libpng errors, respectively.
  + Fix playback of recording surfaces into PDF surfaces, where
    objects with negative coordinates were not getting drawn. To
    address this, the coordinate systems for PDF and PS have been
    changed to match cairo's coordinate system. This allows
    recording surfaces to be emitted in cairo coordinates, and
    results in the same origin being used for all operations when
    using the recording surface XObject. Test cases for PDF and PS
    have also been updated accordingly (fdo#89232).
  + Fix "invalidfont" error on some printers when printing PDFs
    with embedded fonts that have glyphs (such as spaces) with
    num_contours == 0 (fdo#79897).
  + Fix missing glyphs such as thin dashes, which get scaled to 0
    in userspace and thus have their drawing operations culled
    (fdo#94615).
  + Fix other oddities caused by variously idiosyncratic fonts.
  + Fix deadlock when destruction of a scaled font indirectly
    triggers destruction of a second scaled font, causing the
    global cache to be locked twice (fdo#93891).
  + Fix X errors reported to applications when shmdt() is called
    before the Attach request is processed, due to missing xcb and
    xlib calls.
  + Fix random failure in record-paint-alpha-clip-mast test case,
    caused by an incorrect assumption that a deferred clear can be
    skipped (fdo#84330).
  + Fix crash when dealing with an XShmGetImage() failure, caused
    by a double free in _get_image_surface() (fdo#91967).
  + Fix invalid execution of ASCII85 data by the PS interpreter
    that the image operator didn't use, by flushing the extraneous
    data after drawing the image (fdo#84811).
  + Fix decoding of Adobe Photoshop's inverted CMYK JPEG files in
    PDF export.
  + Fix unbounded surface assertion in win32-print code.
  + Fix a data race in freed_pool discovered by Firefox's cairo
    usage. The patch adads atomic int load and store functions,
    with relaxed memory ordering (fdo#90318).
  + Cleanup debugging text sent to stdout instead of log
    (fdo#95227).
  + Fix build issue when using non-GNU strings utility (fdo#88639).
  + Fix build of cairo modules as regular modules, not as versioned
    shared libaries (fdo#29319).
  + Fix build on win32 using gcc 5.4.
  + Fix build of script backend to require zlib.
  + Update test suite reference images using Debian Jessie 64-bit
    and poppler current as of June, 2016.
  + Various improvements to documentation and tests, compiler
    warning fixes, and an assortment of code refactoring and
    cleanup.
- Drop cairo-modules-no-version.patch,
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch and
  cairo-xlib-double-free.patch: Fixed upstream.
- Drop libtool BuildRequires and stop passing autoreconf, we no
  longer have any patches touching the buildsystem.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="qzheng@suse.com" date="1529409600">- Add cairo-CVE-2017-9814.patch: Replace malloc with_cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
</package>
<package pkgid="5b64608a0ed55841936a5f0325464fdc6c152e0e2d7c7a260e86b7f7bf2eb7d9" name="cairo-devel" arch="x86_64">
  <version epoch="0" ver="1.15.10" rel="lp150.3.3.1"/>
  <changelog author="ro@suse.de" date="1431777600">- drop cairo-disable-lto.patch: lto was dropped upstream</changelog>
  <changelog author="zaitor@opensuse.org" date="1446465600">- Update to version 1.14.4:
  + Avoid appending empty slots to user data arrays. Fixes a memory
    consumption regression since commit 9341c254a.
  + Return a better error (file-not-found) when setting up pango on
    devices where the font files don't have read permissions.
  + Fix regression in the font size of canvas text in Inkscape when
    compiled with the Quartz backend (fdo#84324).
  + Fix _cairo_gl_shader_bind_matrix() to maintain compatibility
    with OpenGL ES 2.0. Manually transpose the matrix.
  + Fix incorrect font descriptor conversion when the font matrix
    yy is negative (fdo#90538).
  + Fix crash when using a complex path for clip and stroke due to
    discarding the intersection exactly at the top edge
    (fdo#74779).
  + Fix cairo_get_locale_decimal_point() on Android.
  + Fix compilation problem on AIX due to conflicting usage of
    symbol 'jmpbuf' (fdo#89339).
  + Fix broken rendering with XCB due to snapshotting of uploaded
    part of surfaces (fdo#67505).
  + Fix loss of alpha when copying a mask for a cairo recording
    surface, resulting in a double copy (fdo#73038, fdo#73901).
  + Fix incorrect recording of certain paths with script surfaces
    (fdo#91054).
  + Fix typo in definition of MAYBE_WARN in configure script
    (fdo#89750).
  + Fix use of filename variable after it's been freed (fdo#91206).
  + Fix out of bounds access when printing pattern (fdo#91266).
  + Fix incorrect size calculation in glyph cache unlocking for
    Cairo GL compositor (fdo#91321).
  + Fix memory leak in _cairo_gl_pattern_texture_setup()
    (fdo#91537).
  + Fix transparent images in win32-print (fdo#91835).
  + Fix _put_shm_image_boxes and _put_image_boxes when no SHM
    available with XCB.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008000">- Update to version 1.14.6:
  + Simple bugfix release to fix one Windows issue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008001">- Update to version 1.15.2:
  + Fix xcb/xlib compilation and calls. Make image boxes behave
    when SHM is not available.
  + Fix various issues with printing and transparent images on
    Win32.
  + Fix thin lines that don't show up when printing in Inkscape due
    to overly aggressive culling (fdo#77298).
  + Fix broken printing via pdf when glyph 0 is used for rendering,
    resulting in missing spaces and letters (fdo#89082).
  + Fix crash for certain glyphs in opentype fonts (fdo#91902).
  + Fix incorrect rendering of SVG paths with more than one
    subpath. If more than one trap is passed in then it's
    guaranteed that the returned traps will have their left edge to
    the left of their right edge, but if only one trap is passed in
    then the function always returns without doing anything
    (fdo#90984).
  + Improve rendering with Quarts to better match pixman's blending
    and filtering behavior.
- Drop cairo-render-thin-lines.patch: Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1450699200">- Add cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  to fix mutex deadlocks on certain documents (bsc#958844).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove patch:
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch.</changelog>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="zaitor@opensuse.org" date="1481457600">- Update to version 1.15.4:
  + The PDF backend has gained support for a range of widely used
    features, including thumbnails, page labels, metadata, document
    outlines, structured text, hyperlinks, and tags. Tags permit
    adding logical info such as headings, tables, figures, etc.
    that facilitates indexing, accessibility, text reflow,
    searching, and extraction of the tagged items to other
    software.
  + API Changes:
  - Added a cairo API to set up Win32 surfaces for HDC with alpha
    channels.
  - New API for added PDF functionality (see above), and new
    error status item for problems relating to PDF tagging.
  - New error status items for handling of GDI, libfreetype, and
    libpng errors, respectively.
  + Fix playback of recording surfaces into PDF surfaces, where
    objects with negative coordinates were not getting drawn. To
    address this, the coordinate systems for PDF and PS have been
    changed to match cairo's coordinate system. This allows
    recording surfaces to be emitted in cairo coordinates, and
    results in the same origin being used for all operations when
    using the recording surface XObject. Test cases for PDF and PS
    have also been updated accordingly (fdo#89232).
  + Fix "invalidfont" error on some printers when printing PDFs
    with embedded fonts that have glyphs (such as spaces) with
    num_contours == 0 (fdo#79897).
  + Fix missing glyphs such as thin dashes, which get scaled to 0
    in userspace and thus have their drawing operations culled
    (fdo#94615).
  + Fix other oddities caused by variously idiosyncratic fonts.
  + Fix deadlock when destruction of a scaled font indirectly
    triggers destruction of a second scaled font, causing the
    global cache to be locked twice (fdo#93891).
  + Fix X errors reported to applications when shmdt() is called
    before the Attach request is processed, due to missing xcb and
    xlib calls.
  + Fix random failure in record-paint-alpha-clip-mast test case,
    caused by an incorrect assumption that a deferred clear can be
    skipped (fdo#84330).
  + Fix crash when dealing with an XShmGetImage() failure, caused
    by a double free in _get_image_surface() (fdo#91967).
  + Fix invalid execution of ASCII85 data by the PS interpreter
    that the image operator didn't use, by flushing the extraneous
    data after drawing the image (fdo#84811).
  + Fix decoding of Adobe Photoshop's inverted CMYK JPEG files in
    PDF export.
  + Fix unbounded surface assertion in win32-print code.
  + Fix a data race in freed_pool discovered by Firefox's cairo
    usage. The patch adads atomic int load and store functions,
    with relaxed memory ordering (fdo#90318).
  + Cleanup debugging text sent to stdout instead of log
    (fdo#95227).
  + Fix build issue when using non-GNU strings utility (fdo#88639).
  + Fix build of cairo modules as regular modules, not as versioned
    shared libaries (fdo#29319).
  + Fix build on win32 using gcc 5.4.
  + Fix build of script backend to require zlib.
  + Update test suite reference images using Debian Jessie 64-bit
    and poppler current as of June, 2016.
  + Various improvements to documentation and tests, compiler
    warning fixes, and an assortment of code refactoring and
    cleanup.
- Drop cairo-modules-no-version.patch,
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch and
  cairo-xlib-double-free.patch: Fixed upstream.
- Drop libtool BuildRequires and stop passing autoreconf, we no
  longer have any patches touching the buildsystem.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="qzheng@suse.com" date="1529409600">- Add cairo-CVE-2017-9814.patch: Replace malloc with_cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
</package>
<package pkgid="8a55ba610798f260d1848b841b4ff2c98091b2ed056357b09ed6e01a2217530c" name="cairo-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.15.10" rel="lp150.3.3.1"/>
  <changelog author="ro@suse.de" date="1431777600">- drop cairo-disable-lto.patch: lto was dropped upstream</changelog>
  <changelog author="zaitor@opensuse.org" date="1446465600">- Update to version 1.14.4:
  + Avoid appending empty slots to user data arrays. Fixes a memory
    consumption regression since commit 9341c254a.
  + Return a better error (file-not-found) when setting up pango on
    devices where the font files don't have read permissions.
  + Fix regression in the font size of canvas text in Inkscape when
    compiled with the Quartz backend (fdo#84324).
  + Fix _cairo_gl_shader_bind_matrix() to maintain compatibility
    with OpenGL ES 2.0. Manually transpose the matrix.
  + Fix incorrect font descriptor conversion when the font matrix
    yy is negative (fdo#90538).
  + Fix crash when using a complex path for clip and stroke due to
    discarding the intersection exactly at the top edge
    (fdo#74779).
  + Fix cairo_get_locale_decimal_point() on Android.
  + Fix compilation problem on AIX due to conflicting usage of
    symbol 'jmpbuf' (fdo#89339).
  + Fix broken rendering with XCB due to snapshotting of uploaded
    part of surfaces (fdo#67505).
  + Fix loss of alpha when copying a mask for a cairo recording
    surface, resulting in a double copy (fdo#73038, fdo#73901).
  + Fix incorrect recording of certain paths with script surfaces
    (fdo#91054).
  + Fix typo in definition of MAYBE_WARN in configure script
    (fdo#89750).
  + Fix use of filename variable after it's been freed (fdo#91206).
  + Fix out of bounds access when printing pattern (fdo#91266).
  + Fix incorrect size calculation in glyph cache unlocking for
    Cairo GL compositor (fdo#91321).
  + Fix memory leak in _cairo_gl_pattern_texture_setup()
    (fdo#91537).
  + Fix transparent images in win32-print (fdo#91835).
  + Fix _put_shm_image_boxes and _put_image_boxes when no SHM
    available with XCB.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008000">- Update to version 1.14.6:
  + Simple bugfix release to fix one Windows issue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008001">- Update to version 1.15.2:
  + Fix xcb/xlib compilation and calls. Make image boxes behave
    when SHM is not available.
  + Fix various issues with printing and transparent images on
    Win32.
  + Fix thin lines that don't show up when printing in Inkscape due
    to overly aggressive culling (fdo#77298).
  + Fix broken printing via pdf when glyph 0 is used for rendering,
    resulting in missing spaces and letters (fdo#89082).
  + Fix crash for certain glyphs in opentype fonts (fdo#91902).
  + Fix incorrect rendering of SVG paths with more than one
    subpath. If more than one trap is passed in then it's
    guaranteed that the returned traps will have their left edge to
    the left of their right edge, but if only one trap is passed in
    then the function always returns without doing anything
    (fdo#90984).
  + Improve rendering with Quarts to better match pixman's blending
    and filtering behavior.
- Drop cairo-render-thin-lines.patch: Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1450699200">- Add cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  to fix mutex deadlocks on certain documents (bsc#958844).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove patch:
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch.</changelog>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="zaitor@opensuse.org" date="1481457600">- Update to version 1.15.4:
  + The PDF backend has gained support for a range of widely used
    features, including thumbnails, page labels, metadata, document
    outlines, structured text, hyperlinks, and tags. Tags permit
    adding logical info such as headings, tables, figures, etc.
    that facilitates indexing, accessibility, text reflow,
    searching, and extraction of the tagged items to other
    software.
  + API Changes:
  - Added a cairo API to set up Win32 surfaces for HDC with alpha
    channels.
  - New API for added PDF functionality (see above), and new
    error status item for problems relating to PDF tagging.
  - New error status items for handling of GDI, libfreetype, and
    libpng errors, respectively.
  + Fix playback of recording surfaces into PDF surfaces, where
    objects with negative coordinates were not getting drawn. To
    address this, the coordinate systems for PDF and PS have been
    changed to match cairo's coordinate system. This allows
    recording surfaces to be emitted in cairo coordinates, and
    results in the same origin being used for all operations when
    using the recording surface XObject. Test cases for PDF and PS
    have also been updated accordingly (fdo#89232).
  + Fix "invalidfont" error on some printers when printing PDFs
    with embedded fonts that have glyphs (such as spaces) with
    num_contours == 0 (fdo#79897).
  + Fix missing glyphs such as thin dashes, which get scaled to 0
    in userspace and thus have their drawing operations culled
    (fdo#94615).
  + Fix other oddities caused by variously idiosyncratic fonts.
  + Fix deadlock when destruction of a scaled font indirectly
    triggers destruction of a second scaled font, causing the
    global cache to be locked twice (fdo#93891).
  + Fix X errors reported to applications when shmdt() is called
    before the Attach request is processed, due to missing xcb and
    xlib calls.
  + Fix random failure in record-paint-alpha-clip-mast test case,
    caused by an incorrect assumption that a deferred clear can be
    skipped (fdo#84330).
  + Fix crash when dealing with an XShmGetImage() failure, caused
    by a double free in _get_image_surface() (fdo#91967).
  + Fix invalid execution of ASCII85 data by the PS interpreter
    that the image operator didn't use, by flushing the extraneous
    data after drawing the image (fdo#84811).
  + Fix decoding of Adobe Photoshop's inverted CMYK JPEG files in
    PDF export.
  + Fix unbounded surface assertion in win32-print code.
  + Fix a data race in freed_pool discovered by Firefox's cairo
    usage. The patch adads atomic int load and store functions,
    with relaxed memory ordering (fdo#90318).
  + Cleanup debugging text sent to stdout instead of log
    (fdo#95227).
  + Fix build issue when using non-GNU strings utility (fdo#88639).
  + Fix build of cairo modules as regular modules, not as versioned
    shared libaries (fdo#29319).
  + Fix build on win32 using gcc 5.4.
  + Fix build of script backend to require zlib.
  + Update test suite reference images using Debian Jessie 64-bit
    and poppler current as of June, 2016.
  + Various improvements to documentation and tests, compiler
    warning fixes, and an assortment of code refactoring and
    cleanup.
- Drop cairo-modules-no-version.patch,
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch and
  cairo-xlib-double-free.patch: Fixed upstream.
- Drop libtool BuildRequires and stop passing autoreconf, we no
  longer have any patches touching the buildsystem.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="qzheng@suse.com" date="1529409600">- Add cairo-CVE-2017-9814.patch: Replace malloc with_cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
</package>
<package pkgid="40242fe3d07d77bf9d4d85fe5aa7af07a00874b20205e68189e0cebd67c19f28" name="cairo-tools" arch="x86_64">
  <version epoch="0" ver="1.15.10" rel="lp150.3.3.1"/>
  <changelog author="ro@suse.de" date="1431777600">- drop cairo-disable-lto.patch: lto was dropped upstream</changelog>
  <changelog author="zaitor@opensuse.org" date="1446465600">- Update to version 1.14.4:
  + Avoid appending empty slots to user data arrays. Fixes a memory
    consumption regression since commit 9341c254a.
  + Return a better error (file-not-found) when setting up pango on
    devices where the font files don't have read permissions.
  + Fix regression in the font size of canvas text in Inkscape when
    compiled with the Quartz backend (fdo#84324).
  + Fix _cairo_gl_shader_bind_matrix() to maintain compatibility
    with OpenGL ES 2.0. Manually transpose the matrix.
  + Fix incorrect font descriptor conversion when the font matrix
    yy is negative (fdo#90538).
  + Fix crash when using a complex path for clip and stroke due to
    discarding the intersection exactly at the top edge
    (fdo#74779).
  + Fix cairo_get_locale_decimal_point() on Android.
  + Fix compilation problem on AIX due to conflicting usage of
    symbol 'jmpbuf' (fdo#89339).
  + Fix broken rendering with XCB due to snapshotting of uploaded
    part of surfaces (fdo#67505).
  + Fix loss of alpha when copying a mask for a cairo recording
    surface, resulting in a double copy (fdo#73038, fdo#73901).
  + Fix incorrect recording of certain paths with script surfaces
    (fdo#91054).
  + Fix typo in definition of MAYBE_WARN in configure script
    (fdo#89750).
  + Fix use of filename variable after it's been freed (fdo#91206).
  + Fix out of bounds access when printing pattern (fdo#91266).
  + Fix incorrect size calculation in glyph cache unlocking for
    Cairo GL compositor (fdo#91321).
  + Fix memory leak in _cairo_gl_pattern_texture_setup()
    (fdo#91537).
  + Fix transparent images in win32-print (fdo#91835).
  + Fix _put_shm_image_boxes and _put_image_boxes when no SHM
    available with XCB.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008000">- Update to version 1.14.6:
  + Simple bugfix release to fix one Windows issue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008001">- Update to version 1.15.2:
  + Fix xcb/xlib compilation and calls. Make image boxes behave
    when SHM is not available.
  + Fix various issues with printing and transparent images on
    Win32.
  + Fix thin lines that don't show up when printing in Inkscape due
    to overly aggressive culling (fdo#77298).
  + Fix broken printing via pdf when glyph 0 is used for rendering,
    resulting in missing spaces and letters (fdo#89082).
  + Fix crash for certain glyphs in opentype fonts (fdo#91902).
  + Fix incorrect rendering of SVG paths with more than one
    subpath. If more than one trap is passed in then it's
    guaranteed that the returned traps will have their left edge to
    the left of their right edge, but if only one trap is passed in
    then the function always returns without doing anything
    (fdo#90984).
  + Improve rendering with Quarts to better match pixman's blending
    and filtering behavior.
- Drop cairo-render-thin-lines.patch: Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1450699200">- Add cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  to fix mutex deadlocks on certain documents (bsc#958844).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove patch:
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch.</changelog>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="zaitor@opensuse.org" date="1481457600">- Update to version 1.15.4:
  + The PDF backend has gained support for a range of widely used
    features, including thumbnails, page labels, metadata, document
    outlines, structured text, hyperlinks, and tags. Tags permit
    adding logical info such as headings, tables, figures, etc.
    that facilitates indexing, accessibility, text reflow,
    searching, and extraction of the tagged items to other
    software.
  + API Changes:
  - Added a cairo API to set up Win32 surfaces for HDC with alpha
    channels.
  - New API for added PDF functionality (see above), and new
    error status item for problems relating to PDF tagging.
  - New error status items for handling of GDI, libfreetype, and
    libpng errors, respectively.
  + Fix playback of recording surfaces into PDF surfaces, where
    objects with negative coordinates were not getting drawn. To
    address this, the coordinate systems for PDF and PS have been
    changed to match cairo's coordinate system. This allows
    recording surfaces to be emitted in cairo coordinates, and
    results in the same origin being used for all operations when
    using the recording surface XObject. Test cases for PDF and PS
    have also been updated accordingly (fdo#89232).
  + Fix "invalidfont" error on some printers when printing PDFs
    with embedded fonts that have glyphs (such as spaces) with
    num_contours == 0 (fdo#79897).
  + Fix missing glyphs such as thin dashes, which get scaled to 0
    in userspace and thus have their drawing operations culled
    (fdo#94615).
  + Fix other oddities caused by variously idiosyncratic fonts.
  + Fix deadlock when destruction of a scaled font indirectly
    triggers destruction of a second scaled font, causing the
    global cache to be locked twice (fdo#93891).
  + Fix X errors reported to applications when shmdt() is called
    before the Attach request is processed, due to missing xcb and
    xlib calls.
  + Fix random failure in record-paint-alpha-clip-mast test case,
    caused by an incorrect assumption that a deferred clear can be
    skipped (fdo#84330).
  + Fix crash when dealing with an XShmGetImage() failure, caused
    by a double free in _get_image_surface() (fdo#91967).
  + Fix invalid execution of ASCII85 data by the PS interpreter
    that the image operator didn't use, by flushing the extraneous
    data after drawing the image (fdo#84811).
  + Fix decoding of Adobe Photoshop's inverted CMYK JPEG files in
    PDF export.
  + Fix unbounded surface assertion in win32-print code.
  + Fix a data race in freed_pool discovered by Firefox's cairo
    usage. The patch adads atomic int load and store functions,
    with relaxed memory ordering (fdo#90318).
  + Cleanup debugging text sent to stdout instead of log
    (fdo#95227).
  + Fix build issue when using non-GNU strings utility (fdo#88639).
  + Fix build of cairo modules as regular modules, not as versioned
    shared libaries (fdo#29319).
  + Fix build on win32 using gcc 5.4.
  + Fix build of script backend to require zlib.
  + Update test suite reference images using Debian Jessie 64-bit
    and poppler current as of June, 2016.
  + Various improvements to documentation and tests, compiler
    warning fixes, and an assortment of code refactoring and
    cleanup.
- Drop cairo-modules-no-version.patch,
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch and
  cairo-xlib-double-free.patch: Fixed upstream.
- Drop libtool BuildRequires and stop passing autoreconf, we no
  longer have any patches touching the buildsystem.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="qzheng@suse.com" date="1529409600">- Add cairo-CVE-2017-9814.patch: Replace malloc with_cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
</package>
<package pkgid="8caeec324ad775bf6880af8b9a372c9fe0ec10e7ac4234086c16b9bd356bc254" name="calibre" arch="src">
  <version epoch="0" ver="3.25.0" rel="lp150.3.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1510401600">- update to 3.12.0
  New Features
  - Driver for the new Nook Glowlight 3
  - Allow configuring the metadata fields displayed in the popup
    book details window. To configure, simply click the 'Configure'
    link at the bottom of the window.
  - Wireless driver: Allow specifying extra file formats
    (unknown to calibre) to send
  Bug Fixes
  - Fix a regression that caused clicking the clear button in the
    main search bar to not unapply the current search until enter
    is pressed.
  - Linux: Fix a regression causing calibre to fail to start on
    systems with no DBUS session bus
  - Browser viewer: Fix body font being forced to sans-serif,
    overriding in book and user stylesheet settings
  - Fix sending email failing of the computer's FQDN is set
    to a single period.</changelog>
  <changelog author="ecsos@opensuse.org" date="1512129600">- update to 3.13.0
  New Features
  - Driver for the new Bq Cervantes 4
  - Edit book: Auto-generate links to existing stylesheets when
    adding a new HTML file.
  - Add a button to easily clear server logs in
    Preferences-&gt;Sharing over the net-&gt;Show server logs.
  - Catalog generation: Store the list of fields to be used in
    generating CSV/XML catalogs per library.
  - Bulk metadata edit: Make the custom series controls similar to
    the builtin series ones, with the same set of features
  - Edit book: Pre-select existing cover image (if any) in add
    cover dialog
  - Make the Manage saved searches dialog a little easier for new
    users.
  - Add a tweak to control behavior of Enter on the book list
  - Content server: Fix random book button on book details page
    multiplying.
  - Edit Book: Bulk file rename dialog: Remember last used prefix
    for renaming files
  Bug Fixes
  - Tag browser: Fix use of the tweak to control order of items in
    the Tag browser causing unexpected expansion of items after
    editing metadata.
  - Content server: Improve rendering of tags/categories with long
    words on small screens.
  - Fix first added saved search not appearing in Tag browser until
    calibre restart.
  - When checking added books for duplicates, also check on the
    language field. So books with the same title/authors but
    different languages are not considered duplicates.
  - Edit Book: Spell check should not fail if there are non-HTML
    files in the spine
  - Conversion: Fix an error when using the embed_all_fonts option
    with certain books
  - Save to disk: Dont error out if the user deletes all formats
    to be saved.
  - Linux binary: Fix calibre not starting on systems where
    QT_QPA_PLATFORM is set to use wayland</changelog>
  <changelog author="ecsos@opensuse.org" date="1513425600">- update to 3.14.0
  New Features
  - User manual: A new quick reference primer for regular
    expression syntax
    https://manual.calibre-ebook.com/regexp_quick_reference.html
  - Content server: Allow viewing the book metadata while reading
    a book. In the viewer controls, tap Goto and then Metadata to
    see the metadata.
  - Kobo driver: Add support for new firmware
  - Bulk metadata edit: Allow choosing the algorithm used for
    changing the case of titles
  - Get books: The koobe.pl store plugin has now become the
    Swiat Ebookow store plugin
  - Allow Copy/paste of book metadata from the main book list.
    Right click the Edit metadata button to access these actions.
  - Allow disabling the confirmation popup when opening the
    containing folder of many books at once.
  Bug Fixes
  - Nook driver: Fix books sent via calibre not appearing under
    My Files on the Glowlight 3 Plus
  - Get Books: Update Mills &amp; Boon, publio, empik, legimi, woblink
    and beam-ebooks.de plugins for website changes
  - Book polishing: Do not scan book for font usage when subsetting
    if no embedded fonts are available.
  - Content server: Open links in the comments section from the
    book details page in new windows.
  - Choose English as the User interface language when a locale
    related environment variable is set to the C locale
  - Linux installer: A nicer error message if the user tries to run
    the installer on an ARM machine</changelog>
  <changelog author="ecsos@opensuse.org" date="1515153600">- update to 3.15.0
  New Features
  - Browser viewer: Allow customizing what information is displayed
    in the header and footer areas. Access Preferences from the
    viewer controls to change.
  - Add support for MTP devices on FreeBSD
  - ToC editor: Add more case changing operations to the right
    click menu
  - Content server: Redirect pre 2.x book URLs to new 3.x URLs via
    a JavaScript redirect
  - Content server: Allow opening entries in the book list in a new
    tab via middle click/right click
  - Add a tweak in Preferences-&gt;Tweaks to exclude some fields when
    using the Edit metadata-&gt;Copy/paste actions
  - Linux: Allow using calibre-tray.png in the calibre resources
    folder to override the system tray icon.
  Bug Fixes
  - Browser viewer: Fix goto next/previous section actions not
    working when the sections are in different individual HTML
    files.
  - Edit book/Book polishing: When compressing images and the
    compressed image is larger thant he original, use the original
    image.
  - PDF input: Fix conversion of multi-level PDF Outline causing
    duplicate entries in the Table of Contents.
  - Edit book: Fix incorrect EPUB 3 declarations being added to the
    OPF file when adding covers to an EPUB 2 book
  - Edit book: Fix backspace key un-indenting instead of deleting
    even when text is selected if the cursor is at the start of the
    line
  - Tag browser: Fix position not bing preserved when deleting
    books.
  - Edit Book: Use the cache directory rather than the temp
    directory to store working files. Hopefully prevents temp file
    cleaners from destroying books.
  - EPUB input: Handle books that erroneously set the mimetype for
    font files to text/plain
  - AZW3 input: Do not fail to process files with invalid internal
    flow references.
  - When updating plugins, do not show the dialog asking which
    toolbar to put the plugin, even if the user has removed the
    plugin for all toolbars.
  - Content server: Fix using the Clear logs button preventing the
    server from restarting until calibre itself is restarted.</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Drop useless build requirement on poppler to make it build again.
  Such a package doesn't exist since ages, libpoppler provided
  "poppler" until recently but there should be no need to
  explicitly BuildRequire that anyway.</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- do not require liberation2-fonts, it is dead [bsc#1077375]
  [rh#856239]</changelog>
  <changelog author="ecsos@opensuse.org" date="1517054400">- update to 3.16.0
  New Features
  - Content server: Allow adding and deleting of books using
    the web interface
  - Allow removing the close button from tabs in the Virtual
    library tab bar. Right click the tab bar and choose 'Lock tabs'
    to do that.
  - calibredb export: Add --progress option
  - Bulk metadata editing: Show progress bars to track progress of
    the operation
  - Content server: When downloading books from the server send
    both the ASCII and full Unicode file names. Browsers that
    support RFC 6266 can make use of the unicode file name.
  - Content server: Show a warning popup on Apple devices when
    the user tries to search with an expression containing smart
    quotes, since Apple devices now automatically replace quotes
    with smart quotes when typing.
  Bug Fixes
  - DOCX Output: Fix links without anchors in the input document
    not being converted correctly.
  - calibredb: Fix a regression that broke reading of passwords
    from stdin
  - Edit book: Fix an error when saving files with filenames that
    cannot be encoded using the system codepage on Windows
  - Pasting metadata: Fix excluding title and authors not working</changelog>
  <changelog author="ecsos@opensuse.org" date="1518177600">- update to 3.17.0
  New Features
  - Allow splitting the book list, by right clicking on the column
    headers and choosing 'Split the book list'
  - Store temporary files used by the editor and viewer in the
    cache directory to try to prevent errors caused by
    'file cleaner' programs deleting temporary files still in use
  Bug Fixes
  - EPUB3 Input: Fix HTML covers and titlepages that are marked
    using the deprecated element not being recognized.
  - Bulk metadata edit: Fix regression in 3.13 that made it
    impossible to use the Force numbering checkbox for custom
    series
  - Conversion: Fix the valign attribute on tags not being honored
  - E-book viewer: Fix the 'Copy' keyboard shortcut/context menu
    action not working on some Windows systems
  - E-book viewer: Make the semi-transparent background for viewing
    metadata a little more opaque.</changelog>
  <changelog author="ecsos@opensuse.org" date="1519473600">- update to 3.18.0
  New Features
  - Browser viewer: Allow long tapping a word to look it up in
    a dictionary or search the internet for it.
  Bug Fixes
  - Conversion: Handle the deprecated type attribute on tags.
  - Fix metadata download from amazon stopped working because of
    a website change
  - Fix re-ordering of columns causing split book splitter state
    not being restored on restart
  - Fix errors when using strftime with unicode strings on
    non-utf-8 windows systems.
  - Split book view: Fix vertical scroll position of the two views
    getting out of sync after doing some searches.
  - Fix some edit widget appearing in the wrong place when editing
    in the right hand panel of the new split book list.
  - Portable build: Fix cache directory not always being
    auto-created
  - Workaround for Qt 5.10 on Linux resetting the global font,
    preventing custom interface font settings from working</changelog>
  <changelog author="ecsos@opensuse.org" date="1520596800">- update to 3.19.0
  New Features
  - Driver for the new PocketBook 740
  - Allow using relative URLs in comments type metadata.
    The relative URLs are interpreted relative to the book folder
    in the calibre library
  - Edit book: Reports: Do not show characters from the HTML markup
    in the characters report.
  - Allow adding the Virtual library button to any toolbar/menu via
    Preferences-&gt;Toolbars &amp; menus
  Bug Fixes
  - Server: Fix server becoming unresponsive if a client sends
    invalid SSL data at exactly the right moment
  - Conversion heuristics: Make unwrapping recognize Georgian
    letters as well.
  - Make de-serialization of stored conversion options safe against
    maliciously crafted input
  - E-book viewer: Change the file format used to import/export
    bookmarks to use JSON. This prevents malicious bookmarks files
    from causing code execution.
  - Make the history completion for the search and replace edit box
    case-sensitive.
  - PDF Output: When the input document contains multiple anchors
    with the same value, use the first anchor rather than the last.
    This follows browser behavior.
  - FB2 Input: Add to content to silence the useless epubcheck</changelog>
  <changelog author="ecsos@opensuse.org" date="1521892800">- update to 3.20.0
  New Features
  - Content server: Allow editing the metadata of books from the
    book details page
  - Kobo driver: Recognize Kobo Aura 2 with new firmware
    (4.6.10188)
  Bug Fixes
  - When reading metadata from HTML also recognize as being
    comments</changelog>
  <changelog author="ecsos@opensuse.org" date="1523188800">- update to 3.21.0
  New Features
  - Browser viewer: Allow showing the time left in the current
    chapter/book in the header and footer areas of the book.
  - Manage tags dialog: Searching now shows all matching tags and
    there is an undo button to undo changes.
  - Add an output profile for the Kindle Oasis 2017
  Bug Fixes
  - Content server: Fix adding/deleting books and editing metadata
    not updating the main calibre book list automatically.
  - Viewer: When doing a dictionary lookup, remove soft hyphens
    from the word, if any are present.
  - Edit metadata dialog: Fix tab order for buttons to the left
    of the title and author
  - Trim cover dialog: Remove the redundant Trim &amp; OK button,
    instead have the OK button trim automatically if there is
    a selection.
  - Update Amazon metadata plugin for a website change
  - Content server: Fix translations not being updated without
    clearing the browser cache
  - Content server: Fix switching from translations to no
    translations not working
  - Content server: When updating interface data do not transmit
    translations if they have not been changed. Saves ~30-60KB
    bandwidth when using non-English interface language.</changelog>
  <changelog author="ecsos@opensuse.org" date="1524312000">- update to 3.22.1
  New Features
  - Edit book: Add a tool to upgrade books from EPUB 2 to EPUB 3
    (Tools-&gt;Upgrade book internals)
  - Add support for the FBZ format (zipped FB2)
  - Kindle driver: Change the height of generated thumbnails to
    500px, needed for the Oasis 2017
  - Edit book: When bulk renaming files add an option to rename by
    the order in which the files appear in the book.
  - Polishing: Recognize titlepages that are marked as covers in
    the EPUB 3 landmarks section
  - Edit Book: Automatically updated the modified timestamp in the
    OPF when saving EPUB 3 books.
  - Remove the ISBNDB metadata plugin as ISBNDB no longer allows
    free lookups.
  Bug Fixes
  - EPUB 3 metadata: If the book defines more than one author sort
    value for an author use the first instead of the last
  - Check Book: Dont warn for nav document not in spine in EPUB 3
    books
  - Linux installer: Fix umask question not working with the
    recommended install command because stdin is a pipe
  - Browser viewer: Show an error message when trying to use the
    Sync function without being logged in
  - When setting cover from a PDF file and the user clicks cancel,
    do not delete the existing cover</changelog>
  <changelog author="ecsos@opensuse.org" date="1525435200">- update to 3.23.0
  New Features
  - Kobo driver: Add support for new firmware
  - Book polishing: Add an option to upgrade EPUB 2 to EPUB 3
  - DOCX Input: Convert text written with dingbat fonts such as
    Wingding or Symbol correctly.
  - When choosing the page to use as a cover from a PDF file,
    add a button to render more pages, if needed
  - TXT Input: Add support for embedded images that use relative
    URLs when converting markdown or textile. Note that this will
    only work if you are - converting using the ebook-convert
    command line tool as the main calibre program moves files
    around, so relative references will not be valid.
  - Edit book: Insert special character: Add an option to select
    if searching should match all words or any of the words
  - Edit book: Insert special character: When searching by name
    match prefixes in addition to whole words. So you can now type
    "horiz" to match "horizontal".
  - Linux installer: Simplify the command used to install calibre
    and add support for Ubuntu 18.04 which is missing a default
    python executable
  - When upgrading EPUB 2 to EPUB 3 add the 'epub' namespace to
    all HTML files, for convenience.
  Bug Fixes
  - Edit Book: Fix an error caused by a landmark entry in EPUB 3
    files that has an tag without an href attribute.
  - Edit Book: Fix names for some control characters not being
    displayed in the status bar
  - Searching: Fix A (B) not being treated as A AND (B)
  - Kobo driver: Add an option to not maintain bookmarks/read
    status/etc. when resending a book already on the device.
  - DOCX Input: Ignore complex script font styles. Fixes conversion
    of documents that specify only complex script styles and no
    simple script styles.
  - When updating EPUB 2 to EPUB 3 ensure only a single dc:date
    element is present in the OPF</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- Drop dependency on python-pypdf as we remove this package
  * The calibre does not depend on it since 2014 anyway</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signature provided upstream
- Added source to calibre.keyring, which contains the key from the author
- Used https for all URLs in the specfile</changelog>
  <changelog author="ecsos@opensuse.org" date="1527249600">- update to 3.24.0
  New Features
  - Conversion: EPUB Output: Add an option to output EPUB 3 files.
  - PDF Output: Add an option to break long words at the ends of
    lines.
  - PDF Output: Allow using images in the header/footer templates
  - Add an option to use two lines for the text under the toolbar
    button in Preferences-&gt;Look &amp; feel
  - Edit book: Spell check: Update the number of misspelled
    words/total words displayed when correcting/ignoring words.
  - Edit book: Fix HTML: Automatically resolve private entities
  - Improve formatting of help in Preferences-&gt;Tweaks
  - ToC Editor: Allow undo for renaming single items as well.
  Bug Fixes
  - PDF Output: Strip zero-width space characters from the text as
    their presence prevents searching from working
  - DOCX Output: Fix tags not being converted correctly.
  - DOCX Input: Fix incorrect conversion of a framed block that
    contains a list.
  - Conversion: Fix private entities that use the same name as an
    HTML entity not being handled correctly
  - Viewer: Fix HTML files with private entities displaying an
    artifact at the top
  - Edit book: Check book: Show an error for HTML files with
    private entities
  - EPUB3 Input: Fix titlepage being referred to in the nav causing
    two titlepage entries in the final book.
  - Fix throbber buttons not being perfectly aligned inside
    toolbars
  - Quickview: Fix sizes not being displayed.
  - Edit book: Compress images tool: Do not mark the book as
    changed if no images could be further compressed.
  - Book list split-view: Fix horizontal scroll position of split
    view can change when changing the current column in one view.
  - Fix Bookeen Saga not being recognized on macOS/Linux.
  - Edit metadata dialog: Fix undo last trim not working for
    automatic trims.
  - Content server: Fix series field blank in Italian translation
  - BeautifulSoup: Port fix from upstream for outputting bare
    ampersands in strings.
  - calibredb add: Run the input plugins before reading metadata
    instead of after.</changelog>
  <changelog author="ecsos@opensuse.org" date="1527336000">- update to 3.24.1
  - Version 3.24.1 fixes a regression in the 3.24 in the editor
    that caused syncing between the editor and the Preview
    panel/Live CSS panel to not work correctly</changelog>
  <changelog author="ecsos@opensuse.org" date="1527508800">- update to 3.24.2
  - Version 3.24.2 fixes a bug in the new EPUB 3 output
    functionality that prevented conversion of non-EPUB 3 books
    to EPUB 3</changelog>
  <changelog author="ecsos@opensuse.org" date="1527854400">- update to 3.25.0
  New Features
  - Kobo driver: Support the new Clara HD
  - PDF Output: Add an option to use page margins from the input
    document, specified via @page CSS rules.
  Bug Fixes
  - Fix option to "show text under buttons only if there is
    enough space" not working well with the option to use
    "two lines for the text under the buttons".
  - Update notification: When both calibre and plugin updates are
    available and the user updates only the plugins, fix the
    restart calibre button not working.
  - E-book viewer: Fix printing of comics (cbz/cbr files) not
    working.
  - EPUB3 Input: Fix Table of Contents not being recognized for
    some EPUB 3 books that placed their nav document in-side
    a sub-folder.</changelog>
</package>
<package pkgid="6b37c90d6afe001ba083129876d08d1d64efb77be69dfbde5ef53ce3253f2f12" name="calibre" arch="x86_64">
  <version epoch="0" ver="3.25.0" rel="lp150.3.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1510401600">- update to 3.12.0
  New Features
  - Driver for the new Nook Glowlight 3
  - Allow configuring the metadata fields displayed in the popup
    book details window. To configure, simply click the 'Configure'
    link at the bottom of the window.
  - Wireless driver: Allow specifying extra file formats
    (unknown to calibre) to send
  Bug Fixes
  - Fix a regression that caused clicking the clear button in the
    main search bar to not unapply the current search until enter
    is pressed.
  - Linux: Fix a regression causing calibre to fail to start on
    systems with no DBUS session bus
  - Browser viewer: Fix body font being forced to sans-serif,
    overriding in book and user stylesheet settings
  - Fix sending email failing of the computer's FQDN is set
    to a single period.</changelog>
  <changelog author="ecsos@opensuse.org" date="1512129600">- update to 3.13.0
  New Features
  - Driver for the new Bq Cervantes 4
  - Edit book: Auto-generate links to existing stylesheets when
    adding a new HTML file.
  - Add a button to easily clear server logs in
    Preferences-&gt;Sharing over the net-&gt;Show server logs.
  - Catalog generation: Store the list of fields to be used in
    generating CSV/XML catalogs per library.
  - Bulk metadata edit: Make the custom series controls similar to
    the builtin series ones, with the same set of features
  - Edit book: Pre-select existing cover image (if any) in add
    cover dialog
  - Make the Manage saved searches dialog a little easier for new
    users.
  - Add a tweak to control behavior of Enter on the book list
  - Content server: Fix random book button on book details page
    multiplying.
  - Edit Book: Bulk file rename dialog: Remember last used prefix
    for renaming files
  Bug Fixes
  - Tag browser: Fix use of the tweak to control order of items in
    the Tag browser causing unexpected expansion of items after
    editing metadata.
  - Content server: Improve rendering of tags/categories with long
    words on small screens.
  - Fix first added saved search not appearing in Tag browser until
    calibre restart.
  - When checking added books for duplicates, also check on the
    language field. So books with the same title/authors but
    different languages are not considered duplicates.
  - Edit Book: Spell check should not fail if there are non-HTML
    files in the spine
  - Conversion: Fix an error when using the embed_all_fonts option
    with certain books
  - Save to disk: Dont error out if the user deletes all formats
    to be saved.
  - Linux binary: Fix calibre not starting on systems where
    QT_QPA_PLATFORM is set to use wayland</changelog>
  <changelog author="ecsos@opensuse.org" date="1513425600">- update to 3.14.0
  New Features
  - User manual: A new quick reference primer for regular
    expression syntax
    https://manual.calibre-ebook.com/regexp_quick_reference.html
  - Content server: Allow viewing the book metadata while reading
    a book. In the viewer controls, tap Goto and then Metadata to
    see the metadata.
  - Kobo driver: Add support for new firmware
  - Bulk metadata edit: Allow choosing the algorithm used for
    changing the case of titles
  - Get books: The koobe.pl store plugin has now become the
    Swiat Ebookow store plugin
  - Allow Copy/paste of book metadata from the main book list.
    Right click the Edit metadata button to access these actions.
  - Allow disabling the confirmation popup when opening the
    containing folder of many books at once.
  Bug Fixes
  - Nook driver: Fix books sent via calibre not appearing under
    My Files on the Glowlight 3 Plus
  - Get Books: Update Mills &amp; Boon, publio, empik, legimi, woblink
    and beam-ebooks.de plugins for website changes
  - Book polishing: Do not scan book for font usage when subsetting
    if no embedded fonts are available.
  - Content server: Open links in the comments section from the
    book details page in new windows.
  - Choose English as the User interface language when a locale
    related environment variable is set to the C locale
  - Linux installer: A nicer error message if the user tries to run
    the installer on an ARM machine</changelog>
  <changelog author="ecsos@opensuse.org" date="1515153600">- update to 3.15.0
  New Features
  - Browser viewer: Allow customizing what information is displayed
    in the header and footer areas. Access Preferences from the
    viewer controls to change.
  - Add support for MTP devices on FreeBSD
  - ToC editor: Add more case changing operations to the right
    click menu
  - Content server: Redirect pre 2.x book URLs to new 3.x URLs via
    a JavaScript redirect
  - Content server: Allow opening entries in the book list in a new
    tab via middle click/right click
  - Add a tweak in Preferences-&gt;Tweaks to exclude some fields when
    using the Edit metadata-&gt;Copy/paste actions
  - Linux: Allow using calibre-tray.png in the calibre resources
    folder to override the system tray icon.
  Bug Fixes
  - Browser viewer: Fix goto next/previous section actions not
    working when the sections are in different individual HTML
    files.
  - Edit book/Book polishing: When compressing images and the
    compressed image is larger thant he original, use the original
    image.
  - PDF input: Fix conversion of multi-level PDF Outline causing
    duplicate entries in the Table of Contents.
  - Edit book: Fix incorrect EPUB 3 declarations being added to the
    OPF file when adding covers to an EPUB 2 book
  - Edit book: Fix backspace key un-indenting instead of deleting
    even when text is selected if the cursor is at the start of the
    line
  - Tag browser: Fix position not bing preserved when deleting
    books.
  - Edit Book: Use the cache directory rather than the temp
    directory to store working files. Hopefully prevents temp file
    cleaners from destroying books.
  - EPUB input: Handle books that erroneously set the mimetype for
    font files to text/plain
  - AZW3 input: Do not fail to process files with invalid internal
    flow references.
  - When updating plugins, do not show the dialog asking which
    toolbar to put the plugin, even if the user has removed the
    plugin for all toolbars.
  - Content server: Fix using the Clear logs button preventing the
    server from restarting until calibre itself is restarted.</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Drop useless build requirement on poppler to make it build again.
  Such a package doesn't exist since ages, libpoppler provided
  "poppler" until recently but there should be no need to
  explicitly BuildRequire that anyway.</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- do not require liberation2-fonts, it is dead [bsc#1077375]
  [rh#856239]</changelog>
  <changelog author="ecsos@opensuse.org" date="1517054400">- update to 3.16.0
  New Features
  - Content server: Allow adding and deleting of books using
    the web interface
  - Allow removing the close button from tabs in the Virtual
    library tab bar. Right click the tab bar and choose 'Lock tabs'
    to do that.
  - calibredb export: Add --progress option
  - Bulk metadata editing: Show progress bars to track progress of
    the operation
  - Content server: When downloading books from the server send
    both the ASCII and full Unicode file names. Browsers that
    support RFC 6266 can make use of the unicode file name.
  - Content server: Show a warning popup on Apple devices when
    the user tries to search with an expression containing smart
    quotes, since Apple devices now automatically replace quotes
    with smart quotes when typing.
  Bug Fixes
  - DOCX Output: Fix links without anchors in the input document
    not being converted correctly.
  - calibredb: Fix a regression that broke reading of passwords
    from stdin
  - Edit book: Fix an error when saving files with filenames that
    cannot be encoded using the system codepage on Windows
  - Pasting metadata: Fix excluding title and authors not working</changelog>
  <changelog author="ecsos@opensuse.org" date="1518177600">- update to 3.17.0
  New Features
  - Allow splitting the book list, by right clicking on the column
    headers and choosing 'Split the book list'
  - Store temporary files used by the editor and viewer in the
    cache directory to try to prevent errors caused by
    'file cleaner' programs deleting temporary files still in use
  Bug Fixes
  - EPUB3 Input: Fix HTML covers and titlepages that are marked
    using the deprecated element not being recognized.
  - Bulk metadata edit: Fix regression in 3.13 that made it
    impossible to use the Force numbering checkbox for custom
    series
  - Conversion: Fix the valign attribute on tags not being honored
  - E-book viewer: Fix the 'Copy' keyboard shortcut/context menu
    action not working on some Windows systems
  - E-book viewer: Make the semi-transparent background for viewing
    metadata a little more opaque.</changelog>
  <changelog author="ecsos@opensuse.org" date="1519473600">- update to 3.18.0
  New Features
  - Browser viewer: Allow long tapping a word to look it up in
    a dictionary or search the internet for it.
  Bug Fixes
  - Conversion: Handle the deprecated type attribute on tags.
  - Fix metadata download from amazon stopped working because of
    a website change
  - Fix re-ordering of columns causing split book splitter state
    not being restored on restart
  - Fix errors when using strftime with unicode strings on
    non-utf-8 windows systems.
  - Split book view: Fix vertical scroll position of the two views
    getting out of sync after doing some searches.
  - Fix some edit widget appearing in the wrong place when editing
    in the right hand panel of the new split book list.
  - Portable build: Fix cache directory not always being
    auto-created
  - Workaround for Qt 5.10 on Linux resetting the global font,
    preventing custom interface font settings from working</changelog>
  <changelog author="ecsos@opensuse.org" date="1520596800">- update to 3.19.0
  New Features
  - Driver for the new PocketBook 740
  - Allow using relative URLs in comments type metadata.
    The relative URLs are interpreted relative to the book folder
    in the calibre library
  - Edit book: Reports: Do not show characters from the HTML markup
    in the characters report.
  - Allow adding the Virtual library button to any toolbar/menu via
    Preferences-&gt;Toolbars &amp; menus
  Bug Fixes
  - Server: Fix server becoming unresponsive if a client sends
    invalid SSL data at exactly the right moment
  - Conversion heuristics: Make unwrapping recognize Georgian
    letters as well.
  - Make de-serialization of stored conversion options safe against
    maliciously crafted input
  - E-book viewer: Change the file format used to import/export
    bookmarks to use JSON. This prevents malicious bookmarks files
    from causing code execution.
  - Make the history completion for the search and replace edit box
    case-sensitive.
  - PDF Output: When the input document contains multiple anchors
    with the same value, use the first anchor rather than the last.
    This follows browser behavior.
  - FB2 Input: Add to content to silence the useless epubcheck</changelog>
  <changelog author="ecsos@opensuse.org" date="1521892800">- update to 3.20.0
  New Features
  - Content server: Allow editing the metadata of books from the
    book details page
  - Kobo driver: Recognize Kobo Aura 2 with new firmware
    (4.6.10188)
  Bug Fixes
  - When reading metadata from HTML also recognize as being
    comments</changelog>
  <changelog author="ecsos@opensuse.org" date="1523188800">- update to 3.21.0
  New Features
  - Browser viewer: Allow showing the time left in the current
    chapter/book in the header and footer areas of the book.
  - Manage tags dialog: Searching now shows all matching tags and
    there is an undo button to undo changes.
  - Add an output profile for the Kindle Oasis 2017
  Bug Fixes
  - Content server: Fix adding/deleting books and editing metadata
    not updating the main calibre book list automatically.
  - Viewer: When doing a dictionary lookup, remove soft hyphens
    from the word, if any are present.
  - Edit metadata dialog: Fix tab order for buttons to the left
    of the title and author
  - Trim cover dialog: Remove the redundant Trim &amp; OK button,
    instead have the OK button trim automatically if there is
    a selection.
  - Update Amazon metadata plugin for a website change
  - Content server: Fix translations not being updated without
    clearing the browser cache
  - Content server: Fix switching from translations to no
    translations not working
  - Content server: When updating interface data do not transmit
    translations if they have not been changed. Saves ~30-60KB
    bandwidth when using non-English interface language.</changelog>
  <changelog author="ecsos@opensuse.org" date="1524312000">- update to 3.22.1
  New Features
  - Edit book: Add a tool to upgrade books from EPUB 2 to EPUB 3
    (Tools-&gt;Upgrade book internals)
  - Add support for the FBZ format (zipped FB2)
  - Kindle driver: Change the height of generated thumbnails to
    500px, needed for the Oasis 2017
  - Edit book: When bulk renaming files add an option to rename by
    the order in which the files appear in the book.
  - Polishing: Recognize titlepages that are marked as covers in
    the EPUB 3 landmarks section
  - Edit Book: Automatically updated the modified timestamp in the
    OPF when saving EPUB 3 books.
  - Remove the ISBNDB metadata plugin as ISBNDB no longer allows
    free lookups.
  Bug Fixes
  - EPUB 3 metadata: If the book defines more than one author sort
    value for an author use the first instead of the last
  - Check Book: Dont warn for nav document not in spine in EPUB 3
    books
  - Linux installer: Fix umask question not working with the
    recommended install command because stdin is a pipe
  - Browser viewer: Show an error message when trying to use the
    Sync function without being logged in
  - When setting cover from a PDF file and the user clicks cancel,
    do not delete the existing cover</changelog>
  <changelog author="ecsos@opensuse.org" date="1525435200">- update to 3.23.0
  New Features
  - Kobo driver: Add support for new firmware
  - Book polishing: Add an option to upgrade EPUB 2 to EPUB 3
  - DOCX Input: Convert text written with dingbat fonts such as
    Wingding or Symbol correctly.
  - When choosing the page to use as a cover from a PDF file,
    add a button to render more pages, if needed
  - TXT Input: Add support for embedded images that use relative
    URLs when converting markdown or textile. Note that this will
    only work if you are - converting using the ebook-convert
    command line tool as the main calibre program moves files
    around, so relative references will not be valid.
  - Edit book: Insert special character: Add an option to select
    if searching should match all words or any of the words
  - Edit book: Insert special character: When searching by name
    match prefixes in addition to whole words. So you can now type
    "horiz" to match "horizontal".
  - Linux installer: Simplify the command used to install calibre
    and add support for Ubuntu 18.04 which is missing a default
    python executable
  - When upgrading EPUB 2 to EPUB 3 add the 'epub' namespace to
    all HTML files, for convenience.
  Bug Fixes
  - Edit Book: Fix an error caused by a landmark entry in EPUB 3
    files that has an tag without an href attribute.
  - Edit Book: Fix names for some control characters not being
    displayed in the status bar
  - Searching: Fix A (B) not being treated as A AND (B)
  - Kobo driver: Add an option to not maintain bookmarks/read
    status/etc. when resending a book already on the device.
  - DOCX Input: Ignore complex script font styles. Fixes conversion
    of documents that specify only complex script styles and no
    simple script styles.
  - When updating EPUB 2 to EPUB 3 ensure only a single dc:date
    element is present in the OPF</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- Drop dependency on python-pypdf as we remove this package
  * The calibre does not depend on it since 2014 anyway</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signature provided upstream
- Added source to calibre.keyring, which contains the key from the author
- Used https for all URLs in the specfile</changelog>
  <changelog author="ecsos@opensuse.org" date="1527249600">- update to 3.24.0
  New Features
  - Conversion: EPUB Output: Add an option to output EPUB 3 files.
  - PDF Output: Add an option to break long words at the ends of
    lines.
  - PDF Output: Allow using images in the header/footer templates
  - Add an option to use two lines for the text under the toolbar
    button in Preferences-&gt;Look &amp; feel
  - Edit book: Spell check: Update the number of misspelled
    words/total words displayed when correcting/ignoring words.
  - Edit book: Fix HTML: Automatically resolve private entities
  - Improve formatting of help in Preferences-&gt;Tweaks
  - ToC Editor: Allow undo for renaming single items as well.
  Bug Fixes
  - PDF Output: Strip zero-width space characters from the text as
    their presence prevents searching from working
  - DOCX Output: Fix tags not being converted correctly.
  - DOCX Input: Fix incorrect conversion of a framed block that
    contains a list.
  - Conversion: Fix private entities that use the same name as an
    HTML entity not being handled correctly
  - Viewer: Fix HTML files with private entities displaying an
    artifact at the top
  - Edit book: Check book: Show an error for HTML files with
    private entities
  - EPUB3 Input: Fix titlepage being referred to in the nav causing
    two titlepage entries in the final book.
  - Fix throbber buttons not being perfectly aligned inside
    toolbars
  - Quickview: Fix sizes not being displayed.
  - Edit book: Compress images tool: Do not mark the book as
    changed if no images could be further compressed.
  - Book list split-view: Fix horizontal scroll position of split
    view can change when changing the current column in one view.
  - Fix Bookeen Saga not being recognized on macOS/Linux.
  - Edit metadata dialog: Fix undo last trim not working for
    automatic trims.
  - Content server: Fix series field blank in Italian translation
  - BeautifulSoup: Port fix from upstream for outputting bare
    ampersands in strings.
  - calibredb add: Run the input plugins before reading metadata
    instead of after.</changelog>
  <changelog author="ecsos@opensuse.org" date="1527336000">- update to 3.24.1
  - Version 3.24.1 fixes a regression in the 3.24 in the editor
    that caused syncing between the editor and the Preview
    panel/Live CSS panel to not work correctly</changelog>
  <changelog author="ecsos@opensuse.org" date="1527508800">- update to 3.24.2
  - Version 3.24.2 fixes a bug in the new EPUB 3 output
    functionality that prevented conversion of non-EPUB 3 books
    to EPUB 3</changelog>
  <changelog author="ecsos@opensuse.org" date="1527854400">- update to 3.25.0
  New Features
  - Kobo driver: Support the new Clara HD
  - PDF Output: Add an option to use page margins from the input
    document, specified via @page CSS rules.
  Bug Fixes
  - Fix option to "show text under buttons only if there is
    enough space" not working well with the option to use
    "two lines for the text under the buttons".
  - Update notification: When both calibre and plugin updates are
    available and the user updates only the plugins, fix the
    restart calibre button not working.
  - E-book viewer: Fix printing of comics (cbz/cbr files) not
    working.
  - EPUB3 Input: Fix Table of Contents not being recognized for
    some EPUB 3 books that placed their nav document in-side
    a sub-folder.</changelog>
</package>
<package pkgid="0ded6faaefb44444c02743c4b873bcbda2cd94ee66328b682348ac003e5288c7" name="calibre" arch="src">
  <version epoch="0" ver="3.27.1" rel="lp150.3.12.1"/>
  <changelog author="wbauer@tmo.at" date="1515844800">- Drop useless build requirement on poppler to make it build again.
  Such a package doesn't exist since ages, libpoppler provided
  "poppler" until recently but there should be no need to
  explicitly BuildRequire that anyway.</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- do not require liberation2-fonts, it is dead [bsc#1077375]
  [rh#856239]</changelog>
  <changelog author="ecsos@opensuse.org" date="1517054400">- update to 3.16.0
  New Features
  - Content server: Allow adding and deleting of books using
    the web interface
  - Allow removing the close button from tabs in the Virtual
    library tab bar. Right click the tab bar and choose 'Lock tabs'
    to do that.
  - calibredb export: Add --progress option
  - Bulk metadata editing: Show progress bars to track progress of
    the operation
  - Content server: When downloading books from the server send
    both the ASCII and full Unicode file names. Browsers that
    support RFC 6266 can make use of the unicode file name.
  - Content server: Show a warning popup on Apple devices when
    the user tries to search with an expression containing smart
    quotes, since Apple devices now automatically replace quotes
    with smart quotes when typing.
  Bug Fixes
  - DOCX Output: Fix links without anchors in the input document
    not being converted correctly.
  - calibredb: Fix a regression that broke reading of passwords
    from stdin
  - Edit book: Fix an error when saving files with filenames that
    cannot be encoded using the system codepage on Windows
  - Pasting metadata: Fix excluding title and authors not working</changelog>
  <changelog author="ecsos@opensuse.org" date="1518177600">- update to 3.17.0
  New Features
  - Allow splitting the book list, by right clicking on the column
    headers and choosing 'Split the book list'
  - Store temporary files used by the editor and viewer in the
    cache directory to try to prevent errors caused by
    'file cleaner' programs deleting temporary files still in use
  Bug Fixes
  - EPUB3 Input: Fix HTML covers and titlepages that are marked
    using the deprecated element not being recognized.
  - Bulk metadata edit: Fix regression in 3.13 that made it
    impossible to use the Force numbering checkbox for custom
    series
  - Conversion: Fix the valign attribute on tags not being honored
  - E-book viewer: Fix the 'Copy' keyboard shortcut/context menu
    action not working on some Windows systems
  - E-book viewer: Make the semi-transparent background for viewing
    metadata a little more opaque.</changelog>
  <changelog author="ecsos@opensuse.org" date="1519473600">- update to 3.18.0
  New Features
  - Browser viewer: Allow long tapping a word to look it up in
    a dictionary or search the internet for it.
  Bug Fixes
  - Conversion: Handle the deprecated type attribute on tags.
  - Fix metadata download from amazon stopped working because of
    a website change
  - Fix re-ordering of columns causing split book splitter state
    not being restored on restart
  - Fix errors when using strftime with unicode strings on
    non-utf-8 windows systems.
  - Split book view: Fix vertical scroll position of the two views
    getting out of sync after doing some searches.
  - Fix some edit widget appearing in the wrong place when editing
    in the right hand panel of the new split book list.
  - Portable build: Fix cache directory not always being
    auto-created
  - Workaround for Qt 5.10 on Linux resetting the global font,
    preventing custom interface font settings from working</changelog>
  <changelog author="ecsos@opensuse.org" date="1520596800">- update to 3.19.0
  New Features
  - Driver for the new PocketBook 740
  - Allow using relative URLs in comments type metadata.
    The relative URLs are interpreted relative to the book folder
    in the calibre library
  - Edit book: Reports: Do not show characters from the HTML markup
    in the characters report.
  - Allow adding the Virtual library button to any toolbar/menu via
    Preferences-&gt;Toolbars &amp; menus
  Bug Fixes
  - Server: Fix server becoming unresponsive if a client sends
    invalid SSL data at exactly the right moment
  - Conversion heuristics: Make unwrapping recognize Georgian
    letters as well.
  - Make de-serialization of stored conversion options safe against
    maliciously crafted input
  - E-book viewer: Change the file format used to import/export
    bookmarks to use JSON. This prevents malicious bookmarks files
    from causing code execution.
  - Make the history completion for the search and replace edit box
    case-sensitive.
  - PDF Output: When the input document contains multiple anchors
    with the same value, use the first anchor rather than the last.
    This follows browser behavior.
  - FB2 Input: Add to content to silence the useless epubcheck</changelog>
  <changelog author="ecsos@opensuse.org" date="1521892800">- update to 3.20.0
  New Features
  - Content server: Allow editing the metadata of books from the
    book details page
  - Kobo driver: Recognize Kobo Aura 2 with new firmware
    (4.6.10188)
  Bug Fixes
  - When reading metadata from HTML also recognize as being
    comments</changelog>
  <changelog author="ecsos@opensuse.org" date="1523188800">- update to 3.21.0
  New Features
  - Browser viewer: Allow showing the time left in the current
    chapter/book in the header and footer areas of the book.
  - Manage tags dialog: Searching now shows all matching tags and
    there is an undo button to undo changes.
  - Add an output profile for the Kindle Oasis 2017
  Bug Fixes
  - Content server: Fix adding/deleting books and editing metadata
    not updating the main calibre book list automatically.
  - Viewer: When doing a dictionary lookup, remove soft hyphens
    from the word, if any are present.
  - Edit metadata dialog: Fix tab order for buttons to the left
    of the title and author
  - Trim cover dialog: Remove the redundant Trim &amp; OK button,
    instead have the OK button trim automatically if there is
    a selection.
  - Update Amazon metadata plugin for a website change
  - Content server: Fix translations not being updated without
    clearing the browser cache
  - Content server: Fix switching from translations to no
    translations not working
  - Content server: When updating interface data do not transmit
    translations if they have not been changed. Saves ~30-60KB
    bandwidth when using non-English interface language.</changelog>
  <changelog author="ecsos@opensuse.org" date="1524312000">- update to 3.22.1
  New Features
  - Edit book: Add a tool to upgrade books from EPUB 2 to EPUB 3
    (Tools-&gt;Upgrade book internals)
  - Add support for the FBZ format (zipped FB2)
  - Kindle driver: Change the height of generated thumbnails to
    500px, needed for the Oasis 2017
  - Edit book: When bulk renaming files add an option to rename by
    the order in which the files appear in the book.
  - Polishing: Recognize titlepages that are marked as covers in
    the EPUB 3 landmarks section
  - Edit Book: Automatically updated the modified timestamp in the
    OPF when saving EPUB 3 books.
  - Remove the ISBNDB metadata plugin as ISBNDB no longer allows
    free lookups.
  Bug Fixes
  - EPUB 3 metadata: If the book defines more than one author sort
    value for an author use the first instead of the last
  - Check Book: Dont warn for nav document not in spine in EPUB 3
    books
  - Linux installer: Fix umask question not working with the
    recommended install command because stdin is a pipe
  - Browser viewer: Show an error message when trying to use the
    Sync function without being logged in
  - When setting cover from a PDF file and the user clicks cancel,
    do not delete the existing cover</changelog>
  <changelog author="ecsos@opensuse.org" date="1525435200">- update to 3.23.0
  New Features
  - Kobo driver: Add support for new firmware
  - Book polishing: Add an option to upgrade EPUB 2 to EPUB 3
  - DOCX Input: Convert text written with dingbat fonts such as
    Wingding or Symbol correctly.
  - When choosing the page to use as a cover from a PDF file,
    add a button to render more pages, if needed
  - TXT Input: Add support for embedded images that use relative
    URLs when converting markdown or textile. Note that this will
    only work if you are - converting using the ebook-convert
    command line tool as the main calibre program moves files
    around, so relative references will not be valid.
  - Edit book: Insert special character: Add an option to select
    if searching should match all words or any of the words
  - Edit book: Insert special character: When searching by name
    match prefixes in addition to whole words. So you can now type
    "horiz" to match "horizontal".
  - Linux installer: Simplify the command used to install calibre
    and add support for Ubuntu 18.04 which is missing a default
    python executable
  - When upgrading EPUB 2 to EPUB 3 add the 'epub' namespace to
    all HTML files, for convenience.
  Bug Fixes
  - Edit Book: Fix an error caused by a landmark entry in EPUB 3
    files that has an tag without an href attribute.
  - Edit Book: Fix names for some control characters not being
    displayed in the status bar
  - Searching: Fix A (B) not being treated as A AND (B)
  - Kobo driver: Add an option to not maintain bookmarks/read
    status/etc. when resending a book already on the device.
  - DOCX Input: Ignore complex script font styles. Fixes conversion
    of documents that specify only complex script styles and no
    simple script styles.
  - When updating EPUB 2 to EPUB 3 ensure only a single dc:date
    element is present in the OPF</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- Drop dependency on python-pypdf as we remove this package
  * The calibre does not depend on it since 2014 anyway</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signature provided upstream
- Added source to calibre.keyring, which contains the key from the author
- Used https for all URLs in the specfile</changelog>
  <changelog author="ecsos@opensuse.org" date="1527249600">- update to 3.24.0
  New Features
  - Conversion: EPUB Output: Add an option to output EPUB 3 files.
  - PDF Output: Add an option to break long words at the ends of
    lines.
  - PDF Output: Allow using images in the header/footer templates
  - Add an option to use two lines for the text under the toolbar
    button in Preferences-&gt;Look &amp; feel
  - Edit book: Spell check: Update the number of misspelled
    words/total words displayed when correcting/ignoring words.
  - Edit book: Fix HTML: Automatically resolve private entities
  - Improve formatting of help in Preferences-&gt;Tweaks
  - ToC Editor: Allow undo for renaming single items as well.
  Bug Fixes
  - PDF Output: Strip zero-width space characters from the text as
    their presence prevents searching from working
  - DOCX Output: Fix tags not being converted correctly.
  - DOCX Input: Fix incorrect conversion of a framed block that
    contains a list.
  - Conversion: Fix private entities that use the same name as an
    HTML entity not being handled correctly
  - Viewer: Fix HTML files with private entities displaying an
    artifact at the top
  - Edit book: Check book: Show an error for HTML files with
    private entities
  - EPUB3 Input: Fix titlepage being referred to in the nav causing
    two titlepage entries in the final book.
  - Fix throbber buttons not being perfectly aligned inside
    toolbars
  - Quickview: Fix sizes not being displayed.
  - Edit book: Compress images tool: Do not mark the book as
    changed if no images could be further compressed.
  - Book list split-view: Fix horizontal scroll position of split
    view can change when changing the current column in one view.
  - Fix Bookeen Saga not being recognized on macOS/Linux.
  - Edit metadata dialog: Fix undo last trim not working for
    automatic trims.
  - Content server: Fix series field blank in Italian translation
  - BeautifulSoup: Port fix from upstream for outputting bare
    ampersands in strings.
  - calibredb add: Run the input plugins before reading metadata
    instead of after.</changelog>
  <changelog author="ecsos@opensuse.org" date="1527336000">- update to 3.24.1
  - Version 3.24.1 fixes a regression in the 3.24 in the editor
    that caused syncing between the editor and the Preview
    panel/Live CSS panel to not work correctly</changelog>
  <changelog author="ecsos@opensuse.org" date="1527508800">- update to 3.24.2
  - Version 3.24.2 fixes a bug in the new EPUB 3 output
    functionality that prevented conversion of non-EPUB 3 books
    to EPUB 3</changelog>
  <changelog author="ecsos@opensuse.org" date="1527854400">- update to 3.25.0
  New Features
  - Kobo driver: Support the new Clara HD
  - PDF Output: Add an option to use page margins from the input
    document, specified via @page CSS rules.
  Bug Fixes
  - Fix option to "show text under buttons only if there is
    enough space" not working well with the option to use
    "two lines for the text under the buttons".
  - Update notification: When both calibre and plugin updates are
    available and the user updates only the plugins, fix the
    restart calibre button not working.
  - E-book viewer: Fix printing of comics (cbz/cbr files) not
    working.
  - EPUB3 Input: Fix Table of Contents not being recognized for
    some EPUB 3 books that placed their nav document in-side
    a sub-folder.</changelog>
  <changelog author="ecsos@opensuse.org" date="1529064000">- update to 3.26.1
  New Features
  - Book list: Allow drag and drop of books onto other books to
    merge the book records.
  - Check Book: External link checker: Also check HTML anchors
    (the part after the # in the link). Can be turned off via
    a checkbox at the bottom of the link checker window.
  - Edit Book: Preview panel: Show previews when editing SVG files
  - Edit book: When downloading external resources, also convert
    data URLs into files.
  - E-book viewer: When the controls are hidden show the progress
    in the window title.
  - Library Quick switch menu: Highlight the previously switched
    from library in bold.
  Bug Fixes
  - PDF Input: Fix a regression in 3.24 that caused conversion of
    PDF to be significantly worse.
  - E-book viewer: Fix very slow loading for HTML files with
    very many images on Linux.
  - Content server: Fix a regression in 3.14 that removed
    the separator between books in the detailed list view mode.
  - Edit book: Fix SVG files not being beautified by the Beautify
    all files tool
  - Edit book: Fix searching in selected files not searching SVG
    files
  - Fix Tweaks help string not being displayed translated
  - Edit metadata dialog: Fix distorted rendering of some labels
    in the custom metadata tab in rare circumstances.
  - version 3.26.1 prevents dropping of a book onto itself from
    triggering the merge dialog, which should reduce accidental
    triggers</changelog>
  <changelog author="ecsos@opensuse.org" date="1530878400">- update to 3.27.1
  New Features
  - Content server: Allow conversion of books
  - Kobo driver: Add support for new firmware
  - Bulk metadata edit dialog: Add an "edit tags" button for tags
    like custom columns.
  - Add an option in Preferences-&gt;Look &amp; feel to disable the new
    'drag and drop to merge books feature'
  - E-book viewer: Add a shortcut (Ctrl+Alt+B) to toggle the
    bookmarks panel.
  - Edit book: Add a copy to clipboard button on the various report
    dialogs
  - Edit book: Add a shortcut (Ctrl+Alt+Down) to edit the next file
    in the book spine.
  - calibre-smtp: Verify relay server TLS certificates by default.
    New option --dont-verify-server-certificate to restore old
    behavior.
  Bug Fixes
  - Version 3.27.1 fixes a build error in 3.27.0 that caused
    calibre not to start on macOS older than High Sierra
  - Conversion: Fix a regression in the previous release that
    caused conversion of EPUB 3 to EPUB 3 to fail.
  - Fix detection of the Bookeen NolimbookXL on macOS and Linux
  - Fix a regression that broke the fetching of annotations from
    Kobo and Kindle devices.
  - DOCX Input: Fix failure to convert some DOCX files that use
    Symbol fonts.
  - When exporting very large libraries fix failures due to busy
    errors.
  - Fix commas not working in identifiers that are transformed
    to URLs via rules.
  - Review downloaded metadata: Fix cancel button on the confirm
    reject all dialog not working.
  - Kindle Fire driver: Send books by default to the "kindle"
    folder instead of the "Books" folder to workaround a change in
    the Fire firmware that causes the Kindle to not recognize files
    in the Books folder.
  - Linux installer: Also fix the execute bits in the umask if the
    user runs the installer with a umask that prevents files from
    being world executable.
  - Sort the entries in the show column menu alphabetically.</changelog>
  <changelog author="cornelis@solcon.nl" date="1535112000">- Fixes for boo#1105930:
  * Added update_kobo_driver.patch to add support for Kobo firmware
    4.10.11586
  * Added update_kindle_driver.patch to add support for cover images
    for the KFX format</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1539950400">- Add the following patches to add support for the Kobo Forma (boo#1112569):
  * kobo_forma.patch
  * remove_debugging_lines.patch
  * update_kokbo_driver_1.patch</changelog>
</package>
<package pkgid="5236b26d76211fe9c8bd78136eb0e1214aa38b6d8bf046f151890f68732f80e3" name="calibre" arch="x86_64">
  <version epoch="0" ver="3.27.1" rel="lp150.3.12.1"/>
  <changelog author="wbauer@tmo.at" date="1515844800">- Drop useless build requirement on poppler to make it build again.
  Such a package doesn't exist since ages, libpoppler provided
  "poppler" until recently but there should be no need to
  explicitly BuildRequire that anyway.</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- do not require liberation2-fonts, it is dead [bsc#1077375]
  [rh#856239]</changelog>
  <changelog author="ecsos@opensuse.org" date="1517054400">- update to 3.16.0
  New Features
  - Content server: Allow adding and deleting of books using
    the web interface
  - Allow removing the close button from tabs in the Virtual
    library tab bar. Right click the tab bar and choose 'Lock tabs'
    to do that.
  - calibredb export: Add --progress option
  - Bulk metadata editing: Show progress bars to track progress of
    the operation
  - Content server: When downloading books from the server send
    both the ASCII and full Unicode file names. Browsers that
    support RFC 6266 can make use of the unicode file name.
  - Content server: Show a warning popup on Apple devices when
    the user tries to search with an expression containing smart
    quotes, since Apple devices now automatically replace quotes
    with smart quotes when typing.
  Bug Fixes
  - DOCX Output: Fix links without anchors in the input document
    not being converted correctly.
  - calibredb: Fix a regression that broke reading of passwords
    from stdin
  - Edit book: Fix an error when saving files with filenames that
    cannot be encoded using the system codepage on Windows
  - Pasting metadata: Fix excluding title and authors not working</changelog>
  <changelog author="ecsos@opensuse.org" date="1518177600">- update to 3.17.0
  New Features
  - Allow splitting the book list, by right clicking on the column
    headers and choosing 'Split the book list'
  - Store temporary files used by the editor and viewer in the
    cache directory to try to prevent errors caused by
    'file cleaner' programs deleting temporary files still in use
  Bug Fixes
  - EPUB3 Input: Fix HTML covers and titlepages that are marked
    using the deprecated element not being recognized.
  - Bulk metadata edit: Fix regression in 3.13 that made it
    impossible to use the Force numbering checkbox for custom
    series
  - Conversion: Fix the valign attribute on tags not being honored
  - E-book viewer: Fix the 'Copy' keyboard shortcut/context menu
    action not working on some Windows systems
  - E-book viewer: Make the semi-transparent background for viewing
    metadata a little more opaque.</changelog>
  <changelog author="ecsos@opensuse.org" date="1519473600">- update to 3.18.0
  New Features
  - Browser viewer: Allow long tapping a word to look it up in
    a dictionary or search the internet for it.
  Bug Fixes
  - Conversion: Handle the deprecated type attribute on tags.
  - Fix metadata download from amazon stopped working because of
    a website change
  - Fix re-ordering of columns causing split book splitter state
    not being restored on restart
  - Fix errors when using strftime with unicode strings on
    non-utf-8 windows systems.
  - Split book view: Fix vertical scroll position of the two views
    getting out of sync after doing some searches.
  - Fix some edit widget appearing in the wrong place when editing
    in the right hand panel of the new split book list.
  - Portable build: Fix cache directory not always being
    auto-created
  - Workaround for Qt 5.10 on Linux resetting the global font,
    preventing custom interface font settings from working</changelog>
  <changelog author="ecsos@opensuse.org" date="1520596800">- update to 3.19.0
  New Features
  - Driver for the new PocketBook 740
  - Allow using relative URLs in comments type metadata.
    The relative URLs are interpreted relative to the book folder
    in the calibre library
  - Edit book: Reports: Do not show characters from the HTML markup
    in the characters report.
  - Allow adding the Virtual library button to any toolbar/menu via
    Preferences-&gt;Toolbars &amp; menus
  Bug Fixes
  - Server: Fix server becoming unresponsive if a client sends
    invalid SSL data at exactly the right moment
  - Conversion heuristics: Make unwrapping recognize Georgian
    letters as well.
  - Make de-serialization of stored conversion options safe against
    maliciously crafted input
  - E-book viewer: Change the file format used to import/export
    bookmarks to use JSON. This prevents malicious bookmarks files
    from causing code execution.
  - Make the history completion for the search and replace edit box
    case-sensitive.
  - PDF Output: When the input document contains multiple anchors
    with the same value, use the first anchor rather than the last.
    This follows browser behavior.
  - FB2 Input: Add to content to silence the useless epubcheck</changelog>
  <changelog author="ecsos@opensuse.org" date="1521892800">- update to 3.20.0
  New Features
  - Content server: Allow editing the metadata of books from the
    book details page
  - Kobo driver: Recognize Kobo Aura 2 with new firmware
    (4.6.10188)
  Bug Fixes
  - When reading metadata from HTML also recognize as being
    comments</changelog>
  <changelog author="ecsos@opensuse.org" date="1523188800">- update to 3.21.0
  New Features
  - Browser viewer: Allow showing the time left in the current
    chapter/book in the header and footer areas of the book.
  - Manage tags dialog: Searching now shows all matching tags and
    there is an undo button to undo changes.
  - Add an output profile for the Kindle Oasis 2017
  Bug Fixes
  - Content server: Fix adding/deleting books and editing metadata
    not updating the main calibre book list automatically.
  - Viewer: When doing a dictionary lookup, remove soft hyphens
    from the word, if any are present.
  - Edit metadata dialog: Fix tab order for buttons to the left
    of the title and author
  - Trim cover dialog: Remove the redundant Trim &amp; OK button,
    instead have the OK button trim automatically if there is
    a selection.
  - Update Amazon metadata plugin for a website change
  - Content server: Fix translations not being updated without
    clearing the browser cache
  - Content server: Fix switching from translations to no
    translations not working
  - Content server: When updating interface data do not transmit
    translations if they have not been changed. Saves ~30-60KB
    bandwidth when using non-English interface language.</changelog>
  <changelog author="ecsos@opensuse.org" date="1524312000">- update to 3.22.1
  New Features
  - Edit book: Add a tool to upgrade books from EPUB 2 to EPUB 3
    (Tools-&gt;Upgrade book internals)
  - Add support for the FBZ format (zipped FB2)
  - Kindle driver: Change the height of generated thumbnails to
    500px, needed for the Oasis 2017
  - Edit book: When bulk renaming files add an option to rename by
    the order in which the files appear in the book.
  - Polishing: Recognize titlepages that are marked as covers in
    the EPUB 3 landmarks section
  - Edit Book: Automatically updated the modified timestamp in the
    OPF when saving EPUB 3 books.
  - Remove the ISBNDB metadata plugin as ISBNDB no longer allows
    free lookups.
  Bug Fixes
  - EPUB 3 metadata: If the book defines more than one author sort
    value for an author use the first instead of the last
  - Check Book: Dont warn for nav document not in spine in EPUB 3
    books
  - Linux installer: Fix umask question not working with the
    recommended install command because stdin is a pipe
  - Browser viewer: Show an error message when trying to use the
    Sync function without being logged in
  - When setting cover from a PDF file and the user clicks cancel,
    do not delete the existing cover</changelog>
  <changelog author="ecsos@opensuse.org" date="1525435200">- update to 3.23.0
  New Features
  - Kobo driver: Add support for new firmware
  - Book polishing: Add an option to upgrade EPUB 2 to EPUB 3
  - DOCX Input: Convert text written with dingbat fonts such as
    Wingding or Symbol correctly.
  - When choosing the page to use as a cover from a PDF file,
    add a button to render more pages, if needed
  - TXT Input: Add support for embedded images that use relative
    URLs when converting markdown or textile. Note that this will
    only work if you are - converting using the ebook-convert
    command line tool as the main calibre program moves files
    around, so relative references will not be valid.
  - Edit book: Insert special character: Add an option to select
    if searching should match all words or any of the words
  - Edit book: Insert special character: When searching by name
    match prefixes in addition to whole words. So you can now type
    "horiz" to match "horizontal".
  - Linux installer: Simplify the command used to install calibre
    and add support for Ubuntu 18.04 which is missing a default
    python executable
  - When upgrading EPUB 2 to EPUB 3 add the 'epub' namespace to
    all HTML files, for convenience.
  Bug Fixes
  - Edit Book: Fix an error caused by a landmark entry in EPUB 3
    files that has an tag without an href attribute.
  - Edit Book: Fix names for some control characters not being
    displayed in the status bar
  - Searching: Fix A (B) not being treated as A AND (B)
  - Kobo driver: Add an option to not maintain bookmarks/read
    status/etc. when resending a book already on the device.
  - DOCX Input: Ignore complex script font styles. Fixes conversion
    of documents that specify only complex script styles and no
    simple script styles.
  - When updating EPUB 2 to EPUB 3 ensure only a single dc:date
    element is present in the OPF</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- Drop dependency on python-pypdf as we remove this package
  * The calibre does not depend on it since 2014 anyway</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signature provided upstream
- Added source to calibre.keyring, which contains the key from the author
- Used https for all URLs in the specfile</changelog>
  <changelog author="ecsos@opensuse.org" date="1527249600">- update to 3.24.0
  New Features
  - Conversion: EPUB Output: Add an option to output EPUB 3 files.
  - PDF Output: Add an option to break long words at the ends of
    lines.
  - PDF Output: Allow using images in the header/footer templates
  - Add an option to use two lines for the text under the toolbar
    button in Preferences-&gt;Look &amp; feel
  - Edit book: Spell check: Update the number of misspelled
    words/total words displayed when correcting/ignoring words.
  - Edit book: Fix HTML: Automatically resolve private entities
  - Improve formatting of help in Preferences-&gt;Tweaks
  - ToC Editor: Allow undo for renaming single items as well.
  Bug Fixes
  - PDF Output: Strip zero-width space characters from the text as
    their presence prevents searching from working
  - DOCX Output: Fix tags not being converted correctly.
  - DOCX Input: Fix incorrect conversion of a framed block that
    contains a list.
  - Conversion: Fix private entities that use the same name as an
    HTML entity not being handled correctly
  - Viewer: Fix HTML files with private entities displaying an
    artifact at the top
  - Edit book: Check book: Show an error for HTML files with
    private entities
  - EPUB3 Input: Fix titlepage being referred to in the nav causing
    two titlepage entries in the final book.
  - Fix throbber buttons not being perfectly aligned inside
    toolbars
  - Quickview: Fix sizes not being displayed.
  - Edit book: Compress images tool: Do not mark the book as
    changed if no images could be further compressed.
  - Book list split-view: Fix horizontal scroll position of split
    view can change when changing the current column in one view.
  - Fix Bookeen Saga not being recognized on macOS/Linux.
  - Edit metadata dialog: Fix undo last trim not working for
    automatic trims.
  - Content server: Fix series field blank in Italian translation
  - BeautifulSoup: Port fix from upstream for outputting bare
    ampersands in strings.
  - calibredb add: Run the input plugins before reading metadata
    instead of after.</changelog>
  <changelog author="ecsos@opensuse.org" date="1527336000">- update to 3.24.1
  - Version 3.24.1 fixes a regression in the 3.24 in the editor
    that caused syncing between the editor and the Preview
    panel/Live CSS panel to not work correctly</changelog>
  <changelog author="ecsos@opensuse.org" date="1527508800">- update to 3.24.2
  - Version 3.24.2 fixes a bug in the new EPUB 3 output
    functionality that prevented conversion of non-EPUB 3 books
    to EPUB 3</changelog>
  <changelog author="ecsos@opensuse.org" date="1527854400">- update to 3.25.0
  New Features
  - Kobo driver: Support the new Clara HD
  - PDF Output: Add an option to use page margins from the input
    document, specified via @page CSS rules.
  Bug Fixes
  - Fix option to "show text under buttons only if there is
    enough space" not working well with the option to use
    "two lines for the text under the buttons".
  - Update notification: When both calibre and plugin updates are
    available and the user updates only the plugins, fix the
    restart calibre button not working.
  - E-book viewer: Fix printing of comics (cbz/cbr files) not
    working.
  - EPUB3 Input: Fix Table of Contents not being recognized for
    some EPUB 3 books that placed their nav document in-side
    a sub-folder.</changelog>
  <changelog author="ecsos@opensuse.org" date="1529064000">- update to 3.26.1
  New Features
  - Book list: Allow drag and drop of books onto other books to
    merge the book records.
  - Check Book: External link checker: Also check HTML anchors
    (the part after the # in the link). Can be turned off via
    a checkbox at the bottom of the link checker window.
  - Edit Book: Preview panel: Show previews when editing SVG files
  - Edit book: When downloading external resources, also convert
    data URLs into files.
  - E-book viewer: When the controls are hidden show the progress
    in the window title.
  - Library Quick switch menu: Highlight the previously switched
    from library in bold.
  Bug Fixes
  - PDF Input: Fix a regression in 3.24 that caused conversion of
    PDF to be significantly worse.
  - E-book viewer: Fix very slow loading for HTML files with
    very many images on Linux.
  - Content server: Fix a regression in 3.14 that removed
    the separator between books in the detailed list view mode.
  - Edit book: Fix SVG files not being beautified by the Beautify
    all files tool
  - Edit book: Fix searching in selected files not searching SVG
    files
  - Fix Tweaks help string not being displayed translated
  - Edit metadata dialog: Fix distorted rendering of some labels
    in the custom metadata tab in rare circumstances.
  - version 3.26.1 prevents dropping of a book onto itself from
    triggering the merge dialog, which should reduce accidental
    triggers</changelog>
  <changelog author="ecsos@opensuse.org" date="1530878400">- update to 3.27.1
  New Features
  - Content server: Allow conversion of books
  - Kobo driver: Add support for new firmware
  - Bulk metadata edit dialog: Add an "edit tags" button for tags
    like custom columns.
  - Add an option in Preferences-&gt;Look &amp; feel to disable the new
    'drag and drop to merge books feature'
  - E-book viewer: Add a shortcut (Ctrl+Alt+B) to toggle the
    bookmarks panel.
  - Edit book: Add a copy to clipboard button on the various report
    dialogs
  - Edit book: Add a shortcut (Ctrl+Alt+Down) to edit the next file
    in the book spine.
  - calibre-smtp: Verify relay server TLS certificates by default.
    New option --dont-verify-server-certificate to restore old
    behavior.
  Bug Fixes
  - Version 3.27.1 fixes a build error in 3.27.0 that caused
    calibre not to start on macOS older than High Sierra
  - Conversion: Fix a regression in the previous release that
    caused conversion of EPUB 3 to EPUB 3 to fail.
  - Fix detection of the Bookeen NolimbookXL on macOS and Linux
  - Fix a regression that broke the fetching of annotations from
    Kobo and Kindle devices.
  - DOCX Input: Fix failure to convert some DOCX files that use
    Symbol fonts.
  - When exporting very large libraries fix failures due to busy
    errors.
  - Fix commas not working in identifiers that are transformed
    to URLs via rules.
  - Review downloaded metadata: Fix cancel button on the confirm
    reject all dialog not working.
  - Kindle Fire driver: Send books by default to the "kindle"
    folder instead of the "Books" folder to workaround a change in
    the Fire firmware that causes the Kindle to not recognize files
    in the Books folder.
  - Linux installer: Also fix the execute bits in the umask if the
    user runs the installer with a umask that prevents files from
    being world executable.
  - Sort the entries in the show column menu alphabetically.</changelog>
  <changelog author="cornelis@solcon.nl" date="1535112000">- Fixes for boo#1105930:
  * Added update_kobo_driver.patch to add support for Kobo firmware
    4.10.11586
  * Added update_kindle_driver.patch to add support for cover images
    for the KFX format</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1539950400">- Add the following patches to add support for the Kobo Forma (boo#1112569):
  * kobo_forma.patch
  * remove_debugging_lines.patch
  * update_kokbo_driver_1.patch</changelog>
</package>
<package pkgid="70705aa2dfbdc945c8ecea6ce5fc3329a5f3bc6ff9dd04219c0239d46328954a" name="calibre" arch="src">
  <version epoch="0" ver="3.27.1" rel="lp150.3.15.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- do not require liberation2-fonts, it is dead [bsc#1077375]
  [rh#856239]</changelog>
  <changelog author="ecsos@opensuse.org" date="1517054400">- update to 3.16.0
  New Features
  - Content server: Allow adding and deleting of books using
    the web interface
  - Allow removing the close button from tabs in the Virtual
    library tab bar. Right click the tab bar and choose 'Lock tabs'
    to do that.
  - calibredb export: Add --progress option
  - Bulk metadata editing: Show progress bars to track progress of
    the operation
  - Content server: When downloading books from the server send
    both the ASCII and full Unicode file names. Browsers that
    support RFC 6266 can make use of the unicode file name.
  - Content server: Show a warning popup on Apple devices when
    the user tries to search with an expression containing smart
    quotes, since Apple devices now automatically replace quotes
    with smart quotes when typing.
  Bug Fixes
  - DOCX Output: Fix links without anchors in the input document
    not being converted correctly.
  - calibredb: Fix a regression that broke reading of passwords
    from stdin
  - Edit book: Fix an error when saving files with filenames that
    cannot be encoded using the system codepage on Windows
  - Pasting metadata: Fix excluding title and authors not working</changelog>
  <changelog author="ecsos@opensuse.org" date="1518177600">- update to 3.17.0
  New Features
  - Allow splitting the book list, by right clicking on the column
    headers and choosing 'Split the book list'
  - Store temporary files used by the editor and viewer in the
    cache directory to try to prevent errors caused by
    'file cleaner' programs deleting temporary files still in use
  Bug Fixes
  - EPUB3 Input: Fix HTML covers and titlepages that are marked
    using the deprecated element not being recognized.
  - Bulk metadata edit: Fix regression in 3.13 that made it
    impossible to use the Force numbering checkbox for custom
    series
  - Conversion: Fix the valign attribute on tags not being honored
  - E-book viewer: Fix the 'Copy' keyboard shortcut/context menu
    action not working on some Windows systems
  - E-book viewer: Make the semi-transparent background for viewing
    metadata a little more opaque.</changelog>
  <changelog author="ecsos@opensuse.org" date="1519473600">- update to 3.18.0
  New Features
  - Browser viewer: Allow long tapping a word to look it up in
    a dictionary or search the internet for it.
  Bug Fixes
  - Conversion: Handle the deprecated type attribute on tags.
  - Fix metadata download from amazon stopped working because of
    a website change
  - Fix re-ordering of columns causing split book splitter state
    not being restored on restart
  - Fix errors when using strftime with unicode strings on
    non-utf-8 windows systems.
  - Split book view: Fix vertical scroll position of the two views
    getting out of sync after doing some searches.
  - Fix some edit widget appearing in the wrong place when editing
    in the right hand panel of the new split book list.
  - Portable build: Fix cache directory not always being
    auto-created
  - Workaround for Qt 5.10 on Linux resetting the global font,
    preventing custom interface font settings from working</changelog>
  <changelog author="ecsos@opensuse.org" date="1520596800">- update to 3.19.0
  New Features
  - Driver for the new PocketBook 740
  - Allow using relative URLs in comments type metadata.
    The relative URLs are interpreted relative to the book folder
    in the calibre library
  - Edit book: Reports: Do not show characters from the HTML markup
    in the characters report.
  - Allow adding the Virtual library button to any toolbar/menu via
    Preferences-&gt;Toolbars &amp; menus
  Bug Fixes
  - Server: Fix server becoming unresponsive if a client sends
    invalid SSL data at exactly the right moment
  - Conversion heuristics: Make unwrapping recognize Georgian
    letters as well.
  - Make de-serialization of stored conversion options safe against
    maliciously crafted input
  - E-book viewer: Change the file format used to import/export
    bookmarks to use JSON. This prevents malicious bookmarks files
    from causing code execution.
  - Make the history completion for the search and replace edit box
    case-sensitive.
  - PDF Output: When the input document contains multiple anchors
    with the same value, use the first anchor rather than the last.
    This follows browser behavior.
  - FB2 Input: Add to content to silence the useless epubcheck</changelog>
  <changelog author="ecsos@opensuse.org" date="1521892800">- update to 3.20.0
  New Features
  - Content server: Allow editing the metadata of books from the
    book details page
  - Kobo driver: Recognize Kobo Aura 2 with new firmware
    (4.6.10188)
  Bug Fixes
  - When reading metadata from HTML also recognize as being
    comments</changelog>
  <changelog author="ecsos@opensuse.org" date="1523188800">- update to 3.21.0
  New Features
  - Browser viewer: Allow showing the time left in the current
    chapter/book in the header and footer areas of the book.
  - Manage tags dialog: Searching now shows all matching tags and
    there is an undo button to undo changes.
  - Add an output profile for the Kindle Oasis 2017
  Bug Fixes
  - Content server: Fix adding/deleting books and editing metadata
    not updating the main calibre book list automatically.
  - Viewer: When doing a dictionary lookup, remove soft hyphens
    from the word, if any are present.
  - Edit metadata dialog: Fix tab order for buttons to the left
    of the title and author
  - Trim cover dialog: Remove the redundant Trim &amp; OK button,
    instead have the OK button trim automatically if there is
    a selection.
  - Update Amazon metadata plugin for a website change
  - Content server: Fix translations not being updated without
    clearing the browser cache
  - Content server: Fix switching from translations to no
    translations not working
  - Content server: When updating interface data do not transmit
    translations if they have not been changed. Saves ~30-60KB
    bandwidth when using non-English interface language.</changelog>
  <changelog author="ecsos@opensuse.org" date="1524312000">- update to 3.22.1
  New Features
  - Edit book: Add a tool to upgrade books from EPUB 2 to EPUB 3
    (Tools-&gt;Upgrade book internals)
  - Add support for the FBZ format (zipped FB2)
  - Kindle driver: Change the height of generated thumbnails to
    500px, needed for the Oasis 2017
  - Edit book: When bulk renaming files add an option to rename by
    the order in which the files appear in the book.
  - Polishing: Recognize titlepages that are marked as covers in
    the EPUB 3 landmarks section
  - Edit Book: Automatically updated the modified timestamp in the
    OPF when saving EPUB 3 books.
  - Remove the ISBNDB metadata plugin as ISBNDB no longer allows
    free lookups.
  Bug Fixes
  - EPUB 3 metadata: If the book defines more than one author sort
    value for an author use the first instead of the last
  - Check Book: Dont warn for nav document not in spine in EPUB 3
    books
  - Linux installer: Fix umask question not working with the
    recommended install command because stdin is a pipe
  - Browser viewer: Show an error message when trying to use the
    Sync function without being logged in
  - When setting cover from a PDF file and the user clicks cancel,
    do not delete the existing cover</changelog>
  <changelog author="ecsos@opensuse.org" date="1525435200">- update to 3.23.0
  New Features
  - Kobo driver: Add support for new firmware
  - Book polishing: Add an option to upgrade EPUB 2 to EPUB 3
  - DOCX Input: Convert text written with dingbat fonts such as
    Wingding or Symbol correctly.
  - When choosing the page to use as a cover from a PDF file,
    add a button to render more pages, if needed
  - TXT Input: Add support for embedded images that use relative
    URLs when converting markdown or textile. Note that this will
    only work if you are - converting using the ebook-convert
    command line tool as the main calibre program moves files
    around, so relative references will not be valid.
  - Edit book: Insert special character: Add an option to select
    if searching should match all words or any of the words
  - Edit book: Insert special character: When searching by name
    match prefixes in addition to whole words. So you can now type
    "horiz" to match "horizontal".
  - Linux installer: Simplify the command used to install calibre
    and add support for Ubuntu 18.04 which is missing a default
    python executable
  - When upgrading EPUB 2 to EPUB 3 add the 'epub' namespace to
    all HTML files, for convenience.
  Bug Fixes
  - Edit Book: Fix an error caused by a landmark entry in EPUB 3
    files that has an tag without an href attribute.
  - Edit Book: Fix names for some control characters not being
    displayed in the status bar
  - Searching: Fix A (B) not being treated as A AND (B)
  - Kobo driver: Add an option to not maintain bookmarks/read
    status/etc. when resending a book already on the device.
  - DOCX Input: Ignore complex script font styles. Fixes conversion
    of documents that specify only complex script styles and no
    simple script styles.
  - When updating EPUB 2 to EPUB 3 ensure only a single dc:date
    element is present in the OPF</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- Drop dependency on python-pypdf as we remove this package
  * The calibre does not depend on it since 2014 anyway</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signature provided upstream
- Added source to calibre.keyring, which contains the key from the author
- Used https for all URLs in the specfile</changelog>
  <changelog author="ecsos@opensuse.org" date="1527249600">- update to 3.24.0
  New Features
  - Conversion: EPUB Output: Add an option to output EPUB 3 files.
  - PDF Output: Add an option to break long words at the ends of
    lines.
  - PDF Output: Allow using images in the header/footer templates
  - Add an option to use two lines for the text under the toolbar
    button in Preferences-&gt;Look &amp; feel
  - Edit book: Spell check: Update the number of misspelled
    words/total words displayed when correcting/ignoring words.
  - Edit book: Fix HTML: Automatically resolve private entities
  - Improve formatting of help in Preferences-&gt;Tweaks
  - ToC Editor: Allow undo for renaming single items as well.
  Bug Fixes
  - PDF Output: Strip zero-width space characters from the text as
    their presence prevents searching from working
  - DOCX Output: Fix tags not being converted correctly.
  - DOCX Input: Fix incorrect conversion of a framed block that
    contains a list.
  - Conversion: Fix private entities that use the same name as an
    HTML entity not being handled correctly
  - Viewer: Fix HTML files with private entities displaying an
    artifact at the top
  - Edit book: Check book: Show an error for HTML files with
    private entities
  - EPUB3 Input: Fix titlepage being referred to in the nav causing
    two titlepage entries in the final book.
  - Fix throbber buttons not being perfectly aligned inside
    toolbars
  - Quickview: Fix sizes not being displayed.
  - Edit book: Compress images tool: Do not mark the book as
    changed if no images could be further compressed.
  - Book list split-view: Fix horizontal scroll position of split
    view can change when changing the current column in one view.
  - Fix Bookeen Saga not being recognized on macOS/Linux.
  - Edit metadata dialog: Fix undo last trim not working for
    automatic trims.
  - Content server: Fix series field blank in Italian translation
  - BeautifulSoup: Port fix from upstream for outputting bare
    ampersands in strings.
  - calibredb add: Run the input plugins before reading metadata
    instead of after.</changelog>
  <changelog author="ecsos@opensuse.org" date="1527336000">- update to 3.24.1
  - Version 3.24.1 fixes a regression in the 3.24 in the editor
    that caused syncing between the editor and the Preview
    panel/Live CSS panel to not work correctly</changelog>
  <changelog author="ecsos@opensuse.org" date="1527508800">- update to 3.24.2
  - Version 3.24.2 fixes a bug in the new EPUB 3 output
    functionality that prevented conversion of non-EPUB 3 books
    to EPUB 3</changelog>
  <changelog author="ecsos@opensuse.org" date="1527854400">- update to 3.25.0
  New Features
  - Kobo driver: Support the new Clara HD
  - PDF Output: Add an option to use page margins from the input
    document, specified via @page CSS rules.
  Bug Fixes
  - Fix option to "show text under buttons only if there is
    enough space" not working well with the option to use
    "two lines for the text under the buttons".
  - Update notification: When both calibre and plugin updates are
    available and the user updates only the plugins, fix the
    restart calibre button not working.
  - E-book viewer: Fix printing of comics (cbz/cbr files) not
    working.
  - EPUB3 Input: Fix Table of Contents not being recognized for
    some EPUB 3 books that placed their nav document in-side
    a sub-folder.</changelog>
  <changelog author="ecsos@opensuse.org" date="1529064000">- update to 3.26.1
  New Features
  - Book list: Allow drag and drop of books onto other books to
    merge the book records.
  - Check Book: External link checker: Also check HTML anchors
    (the part after the # in the link). Can be turned off via
    a checkbox at the bottom of the link checker window.
  - Edit Book: Preview panel: Show previews when editing SVG files
  - Edit book: When downloading external resources, also convert
    data URLs into files.
  - E-book viewer: When the controls are hidden show the progress
    in the window title.
  - Library Quick switch menu: Highlight the previously switched
    from library in bold.
  Bug Fixes
  - PDF Input: Fix a regression in 3.24 that caused conversion of
    PDF to be significantly worse.
  - E-book viewer: Fix very slow loading for HTML files with
    very many images on Linux.
  - Content server: Fix a regression in 3.14 that removed
    the separator between books in the detailed list view mode.
  - Edit book: Fix SVG files not being beautified by the Beautify
    all files tool
  - Edit book: Fix searching in selected files not searching SVG
    files
  - Fix Tweaks help string not being displayed translated
  - Edit metadata dialog: Fix distorted rendering of some labels
    in the custom metadata tab in rare circumstances.
  - version 3.26.1 prevents dropping of a book onto itself from
    triggering the merge dialog, which should reduce accidental
    triggers</changelog>
  <changelog author="ecsos@opensuse.org" date="1530878400">- update to 3.27.1
  New Features
  - Content server: Allow conversion of books
  - Kobo driver: Add support for new firmware
  - Bulk metadata edit dialog: Add an "edit tags" button for tags
    like custom columns.
  - Add an option in Preferences-&gt;Look &amp; feel to disable the new
    'drag and drop to merge books feature'
  - E-book viewer: Add a shortcut (Ctrl+Alt+B) to toggle the
    bookmarks panel.
  - Edit book: Add a copy to clipboard button on the various report
    dialogs
  - Edit book: Add a shortcut (Ctrl+Alt+Down) to edit the next file
    in the book spine.
  - calibre-smtp: Verify relay server TLS certificates by default.
    New option --dont-verify-server-certificate to restore old
    behavior.
  Bug Fixes
  - Version 3.27.1 fixes a build error in 3.27.0 that caused
    calibre not to start on macOS older than High Sierra
  - Conversion: Fix a regression in the previous release that
    caused conversion of EPUB 3 to EPUB 3 to fail.
  - Fix detection of the Bookeen NolimbookXL on macOS and Linux
  - Fix a regression that broke the fetching of annotations from
    Kobo and Kindle devices.
  - DOCX Input: Fix failure to convert some DOCX files that use
    Symbol fonts.
  - When exporting very large libraries fix failures due to busy
    errors.
  - Fix commas not working in identifiers that are transformed
    to URLs via rules.
  - Review downloaded metadata: Fix cancel button on the confirm
    reject all dialog not working.
  - Kindle Fire driver: Send books by default to the "kindle"
    folder instead of the "Books" folder to workaround a change in
    the Fire firmware that causes the Kindle to not recognize files
    in the Books folder.
  - Linux installer: Also fix the execute bits in the umask if the
    user runs the installer with a umask that prevents files from
    being world executable.
  - Sort the entries in the show column menu alphabetically.</changelog>
  <changelog author="cornelis@solcon.nl" date="1535112000">- Fixes for boo#1105930:
  * Added update_kobo_driver.patch to add support for Kobo firmware
    4.10.11586
  * Added update_kindle_driver.patch to add support for cover images
    for the KFX format</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1539950400">- Add the following patches to add support for the Kobo Forma (boo#1112569):
  * kobo_forma.patch
  * remove_debugging_lines.patch
  * update_kokbo_driver_1.patch</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1541764800">- Add Kindle-paperwhite-2018.patch to add support for the new Kindle
  Paperwhite 2018 (boo#1115506)</changelog>
</package>
<package pkgid="0d1ff3261668a0e6b950ae7153810cc64b55466b5905e3ee5c7daac176300e05" name="calibre" arch="x86_64">
  <version epoch="0" ver="3.27.1" rel="lp150.3.15.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- do not require liberation2-fonts, it is dead [bsc#1077375]
  [rh#856239]</changelog>
  <changelog author="ecsos@opensuse.org" date="1517054400">- update to 3.16.0
  New Features
  - Content server: Allow adding and deleting of books using
    the web interface
  - Allow removing the close button from tabs in the Virtual
    library tab bar. Right click the tab bar and choose 'Lock tabs'
    to do that.
  - calibredb export: Add --progress option
  - Bulk metadata editing: Show progress bars to track progress of
    the operation
  - Content server: When downloading books from the server send
    both the ASCII and full Unicode file names. Browsers that
    support RFC 6266 can make use of the unicode file name.
  - Content server: Show a warning popup on Apple devices when
    the user tries to search with an expression containing smart
    quotes, since Apple devices now automatically replace quotes
    with smart quotes when typing.
  Bug Fixes
  - DOCX Output: Fix links without anchors in the input document
    not being converted correctly.
  - calibredb: Fix a regression that broke reading of passwords
    from stdin
  - Edit book: Fix an error when saving files with filenames that
    cannot be encoded using the system codepage on Windows
  - Pasting metadata: Fix excluding title and authors not working</changelog>
  <changelog author="ecsos@opensuse.org" date="1518177600">- update to 3.17.0
  New Features
  - Allow splitting the book list, by right clicking on the column
    headers and choosing 'Split the book list'
  - Store temporary files used by the editor and viewer in the
    cache directory to try to prevent errors caused by
    'file cleaner' programs deleting temporary files still in use
  Bug Fixes
  - EPUB3 Input: Fix HTML covers and titlepages that are marked
    using the deprecated element not being recognized.
  - Bulk metadata edit: Fix regression in 3.13 that made it
    impossible to use the Force numbering checkbox for custom
    series
  - Conversion: Fix the valign attribute on tags not being honored
  - E-book viewer: Fix the 'Copy' keyboard shortcut/context menu
    action not working on some Windows systems
  - E-book viewer: Make the semi-transparent background for viewing
    metadata a little more opaque.</changelog>
  <changelog author="ecsos@opensuse.org" date="1519473600">- update to 3.18.0
  New Features
  - Browser viewer: Allow long tapping a word to look it up in
    a dictionary or search the internet for it.
  Bug Fixes
  - Conversion: Handle the deprecated type attribute on tags.
  - Fix metadata download from amazon stopped working because of
    a website change
  - Fix re-ordering of columns causing split book splitter state
    not being restored on restart
  - Fix errors when using strftime with unicode strings on
    non-utf-8 windows systems.
  - Split book view: Fix vertical scroll position of the two views
    getting out of sync after doing some searches.
  - Fix some edit widget appearing in the wrong place when editing
    in the right hand panel of the new split book list.
  - Portable build: Fix cache directory not always being
    auto-created
  - Workaround for Qt 5.10 on Linux resetting the global font,
    preventing custom interface font settings from working</changelog>
  <changelog author="ecsos@opensuse.org" date="1520596800">- update to 3.19.0
  New Features
  - Driver for the new PocketBook 740
  - Allow using relative URLs in comments type metadata.
    The relative URLs are interpreted relative to the book folder
    in the calibre library
  - Edit book: Reports: Do not show characters from the HTML markup
    in the characters report.
  - Allow adding the Virtual library button to any toolbar/menu via
    Preferences-&gt;Toolbars &amp; menus
  Bug Fixes
  - Server: Fix server becoming unresponsive if a client sends
    invalid SSL data at exactly the right moment
  - Conversion heuristics: Make unwrapping recognize Georgian
    letters as well.
  - Make de-serialization of stored conversion options safe against
    maliciously crafted input
  - E-book viewer: Change the file format used to import/export
    bookmarks to use JSON. This prevents malicious bookmarks files
    from causing code execution.
  - Make the history completion for the search and replace edit box
    case-sensitive.
  - PDF Output: When the input document contains multiple anchors
    with the same value, use the first anchor rather than the last.
    This follows browser behavior.
  - FB2 Input: Add to content to silence the useless epubcheck</changelog>
  <changelog author="ecsos@opensuse.org" date="1521892800">- update to 3.20.0
  New Features
  - Content server: Allow editing the metadata of books from the
    book details page
  - Kobo driver: Recognize Kobo Aura 2 with new firmware
    (4.6.10188)
  Bug Fixes
  - When reading metadata from HTML also recognize as being
    comments</changelog>
  <changelog author="ecsos@opensuse.org" date="1523188800">- update to 3.21.0
  New Features
  - Browser viewer: Allow showing the time left in the current
    chapter/book in the header and footer areas of the book.
  - Manage tags dialog: Searching now shows all matching tags and
    there is an undo button to undo changes.
  - Add an output profile for the Kindle Oasis 2017
  Bug Fixes
  - Content server: Fix adding/deleting books and editing metadata
    not updating the main calibre book list automatically.
  - Viewer: When doing a dictionary lookup, remove soft hyphens
    from the word, if any are present.
  - Edit metadata dialog: Fix tab order for buttons to the left
    of the title and author
  - Trim cover dialog: Remove the redundant Trim &amp; OK button,
    instead have the OK button trim automatically if there is
    a selection.
  - Update Amazon metadata plugin for a website change
  - Content server: Fix translations not being updated without
    clearing the browser cache
  - Content server: Fix switching from translations to no
    translations not working
  - Content server: When updating interface data do not transmit
    translations if they have not been changed. Saves ~30-60KB
    bandwidth when using non-English interface language.</changelog>
  <changelog author="ecsos@opensuse.org" date="1524312000">- update to 3.22.1
  New Features
  - Edit book: Add a tool to upgrade books from EPUB 2 to EPUB 3
    (Tools-&gt;Upgrade book internals)
  - Add support for the FBZ format (zipped FB2)
  - Kindle driver: Change the height of generated thumbnails to
    500px, needed for the Oasis 2017
  - Edit book: When bulk renaming files add an option to rename by
    the order in which the files appear in the book.
  - Polishing: Recognize titlepages that are marked as covers in
    the EPUB 3 landmarks section
  - Edit Book: Automatically updated the modified timestamp in the
    OPF when saving EPUB 3 books.
  - Remove the ISBNDB metadata plugin as ISBNDB no longer allows
    free lookups.
  Bug Fixes
  - EPUB 3 metadata: If the book defines more than one author sort
    value for an author use the first instead of the last
  - Check Book: Dont warn for nav document not in spine in EPUB 3
    books
  - Linux installer: Fix umask question not working with the
    recommended install command because stdin is a pipe
  - Browser viewer: Show an error message when trying to use the
    Sync function without being logged in
  - When setting cover from a PDF file and the user clicks cancel,
    do not delete the existing cover</changelog>
  <changelog author="ecsos@opensuse.org" date="1525435200">- update to 3.23.0
  New Features
  - Kobo driver: Add support for new firmware
  - Book polishing: Add an option to upgrade EPUB 2 to EPUB 3
  - DOCX Input: Convert text written with dingbat fonts such as
    Wingding or Symbol correctly.
  - When choosing the page to use as a cover from a PDF file,
    add a button to render more pages, if needed
  - TXT Input: Add support for embedded images that use relative
    URLs when converting markdown or textile. Note that this will
    only work if you are - converting using the ebook-convert
    command line tool as the main calibre program moves files
    around, so relative references will not be valid.
  - Edit book: Insert special character: Add an option to select
    if searching should match all words or any of the words
  - Edit book: Insert special character: When searching by name
    match prefixes in addition to whole words. So you can now type
    "horiz" to match "horizontal".
  - Linux installer: Simplify the command used to install calibre
    and add support for Ubuntu 18.04 which is missing a default
    python executable
  - When upgrading EPUB 2 to EPUB 3 add the 'epub' namespace to
    all HTML files, for convenience.
  Bug Fixes
  - Edit Book: Fix an error caused by a landmark entry in EPUB 3
    files that has an tag without an href attribute.
  - Edit Book: Fix names for some control characters not being
    displayed in the status bar
  - Searching: Fix A (B) not being treated as A AND (B)
  - Kobo driver: Add an option to not maintain bookmarks/read
    status/etc. when resending a book already on the device.
  - DOCX Input: Ignore complex script font styles. Fixes conversion
    of documents that specify only complex script styles and no
    simple script styles.
  - When updating EPUB 2 to EPUB 3 ensure only a single dc:date
    element is present in the OPF</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- Drop dependency on python-pypdf as we remove this package
  * The calibre does not depend on it since 2014 anyway</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signature provided upstream
- Added source to calibre.keyring, which contains the key from the author
- Used https for all URLs in the specfile</changelog>
  <changelog author="ecsos@opensuse.org" date="1527249600">- update to 3.24.0
  New Features
  - Conversion: EPUB Output: Add an option to output EPUB 3 files.
  - PDF Output: Add an option to break long words at the ends of
    lines.
  - PDF Output: Allow using images in the header/footer templates
  - Add an option to use two lines for the text under the toolbar
    button in Preferences-&gt;Look &amp; feel
  - Edit book: Spell check: Update the number of misspelled
    words/total words displayed when correcting/ignoring words.
  - Edit book: Fix HTML: Automatically resolve private entities
  - Improve formatting of help in Preferences-&gt;Tweaks
  - ToC Editor: Allow undo for renaming single items as well.
  Bug Fixes
  - PDF Output: Strip zero-width space characters from the text as
    their presence prevents searching from working
  - DOCX Output: Fix tags not being converted correctly.
  - DOCX Input: Fix incorrect conversion of a framed block that
    contains a list.
  - Conversion: Fix private entities that use the same name as an
    HTML entity not being handled correctly
  - Viewer: Fix HTML files with private entities displaying an
    artifact at the top
  - Edit book: Check book: Show an error for HTML files with
    private entities
  - EPUB3 Input: Fix titlepage being referred to in the nav causing
    two titlepage entries in the final book.
  - Fix throbber buttons not being perfectly aligned inside
    toolbars
  - Quickview: Fix sizes not being displayed.
  - Edit book: Compress images tool: Do not mark the book as
    changed if no images could be further compressed.
  - Book list split-view: Fix horizontal scroll position of split
    view can change when changing the current column in one view.
  - Fix Bookeen Saga not being recognized on macOS/Linux.
  - Edit metadata dialog: Fix undo last trim not working for
    automatic trims.
  - Content server: Fix series field blank in Italian translation
  - BeautifulSoup: Port fix from upstream for outputting bare
    ampersands in strings.
  - calibredb add: Run the input plugins before reading metadata
    instead of after.</changelog>
  <changelog author="ecsos@opensuse.org" date="1527336000">- update to 3.24.1
  - Version 3.24.1 fixes a regression in the 3.24 in the editor
    that caused syncing between the editor and the Preview
    panel/Live CSS panel to not work correctly</changelog>
  <changelog author="ecsos@opensuse.org" date="1527508800">- update to 3.24.2
  - Version 3.24.2 fixes a bug in the new EPUB 3 output
    functionality that prevented conversion of non-EPUB 3 books
    to EPUB 3</changelog>
  <changelog author="ecsos@opensuse.org" date="1527854400">- update to 3.25.0
  New Features
  - Kobo driver: Support the new Clara HD
  - PDF Output: Add an option to use page margins from the input
    document, specified via @page CSS rules.
  Bug Fixes
  - Fix option to "show text under buttons only if there is
    enough space" not working well with the option to use
    "two lines for the text under the buttons".
  - Update notification: When both calibre and plugin updates are
    available and the user updates only the plugins, fix the
    restart calibre button not working.
  - E-book viewer: Fix printing of comics (cbz/cbr files) not
    working.
  - EPUB3 Input: Fix Table of Contents not being recognized for
    some EPUB 3 books that placed their nav document in-side
    a sub-folder.</changelog>
  <changelog author="ecsos@opensuse.org" date="1529064000">- update to 3.26.1
  New Features
  - Book list: Allow drag and drop of books onto other books to
    merge the book records.
  - Check Book: External link checker: Also check HTML anchors
    (the part after the # in the link). Can be turned off via
    a checkbox at the bottom of the link checker window.
  - Edit Book: Preview panel: Show previews when editing SVG files
  - Edit book: When downloading external resources, also convert
    data URLs into files.
  - E-book viewer: When the controls are hidden show the progress
    in the window title.
  - Library Quick switch menu: Highlight the previously switched
    from library in bold.
  Bug Fixes
  - PDF Input: Fix a regression in 3.24 that caused conversion of
    PDF to be significantly worse.
  - E-book viewer: Fix very slow loading for HTML files with
    very many images on Linux.
  - Content server: Fix a regression in 3.14 that removed
    the separator between books in the detailed list view mode.
  - Edit book: Fix SVG files not being beautified by the Beautify
    all files tool
  - Edit book: Fix searching in selected files not searching SVG
    files
  - Fix Tweaks help string not being displayed translated
  - Edit metadata dialog: Fix distorted rendering of some labels
    in the custom metadata tab in rare circumstances.
  - version 3.26.1 prevents dropping of a book onto itself from
    triggering the merge dialog, which should reduce accidental
    triggers</changelog>
  <changelog author="ecsos@opensuse.org" date="1530878400">- update to 3.27.1
  New Features
  - Content server: Allow conversion of books
  - Kobo driver: Add support for new firmware
  - Bulk metadata edit dialog: Add an "edit tags" button for tags
    like custom columns.
  - Add an option in Preferences-&gt;Look &amp; feel to disable the new
    'drag and drop to merge books feature'
  - E-book viewer: Add a shortcut (Ctrl+Alt+B) to toggle the
    bookmarks panel.
  - Edit book: Add a copy to clipboard button on the various report
    dialogs
  - Edit book: Add a shortcut (Ctrl+Alt+Down) to edit the next file
    in the book spine.
  - calibre-smtp: Verify relay server TLS certificates by default.
    New option --dont-verify-server-certificate to restore old
    behavior.
  Bug Fixes
  - Version 3.27.1 fixes a build error in 3.27.0 that caused
    calibre not to start on macOS older than High Sierra
  - Conversion: Fix a regression in the previous release that
    caused conversion of EPUB 3 to EPUB 3 to fail.
  - Fix detection of the Bookeen NolimbookXL on macOS and Linux
  - Fix a regression that broke the fetching of annotations from
    Kobo and Kindle devices.
  - DOCX Input: Fix failure to convert some DOCX files that use
    Symbol fonts.
  - When exporting very large libraries fix failures due to busy
    errors.
  - Fix commas not working in identifiers that are transformed
    to URLs via rules.
  - Review downloaded metadata: Fix cancel button on the confirm
    reject all dialog not working.
  - Kindle Fire driver: Send books by default to the "kindle"
    folder instead of the "Books" folder to workaround a change in
    the Fire firmware that causes the Kindle to not recognize files
    in the Books folder.
  - Linux installer: Also fix the execute bits in the umask if the
    user runs the installer with a umask that prevents files from
    being world executable.
  - Sort the entries in the show column menu alphabetically.</changelog>
  <changelog author="cornelis@solcon.nl" date="1535112000">- Fixes for boo#1105930:
  * Added update_kobo_driver.patch to add support for Kobo firmware
    4.10.11586
  * Added update_kindle_driver.patch to add support for cover images
    for the KFX format</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1539950400">- Add the following patches to add support for the Kobo Forma (boo#1112569):
  * kobo_forma.patch
  * remove_debugging_lines.patch
  * update_kokbo_driver_1.patch</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1541764800">- Add Kindle-paperwhite-2018.patch to add support for the new Kindle
  Paperwhite 2018 (boo#1115506)</changelog>
</package>
<package pkgid="8f7df0c303b5706ca250621f30bc334be21b9a4d65407362607211cb5c6abccc" name="calibre" arch="src">
  <version epoch="0" ver="3.27.1" rel="lp150.3.6.1"/>
  <changelog author="ecsos@opensuse.org" date="1513425600">- update to 3.14.0
  New Features
  - User manual: A new quick reference primer for regular
    expression syntax
    https://manual.calibre-ebook.com/regexp_quick_reference.html
  - Content server: Allow viewing the book metadata while reading
    a book. In the viewer controls, tap Goto and then Metadata to
    see the metadata.
  - Kobo driver: Add support for new firmware
  - Bulk metadata edit: Allow choosing the algorithm used for
    changing the case of titles
  - Get books: The koobe.pl store plugin has now become the
    Swiat Ebookow store plugin
  - Allow Copy/paste of book metadata from the main book list.
    Right click the Edit metadata button to access these actions.
  - Allow disabling the confirmation popup when opening the
    containing folder of many books at once.
  Bug Fixes
  - Nook driver: Fix books sent via calibre not appearing under
    My Files on the Glowlight 3 Plus
  - Get Books: Update Mills &amp; Boon, publio, empik, legimi, woblink
    and beam-ebooks.de plugins for website changes
  - Book polishing: Do not scan book for font usage when subsetting
    if no embedded fonts are available.
  - Content server: Open links in the comments section from the
    book details page in new windows.
  - Choose English as the User interface language when a locale
    related environment variable is set to the C locale
  - Linux installer: A nicer error message if the user tries to run
    the installer on an ARM machine</changelog>
  <changelog author="ecsos@opensuse.org" date="1515153600">- update to 3.15.0
  New Features
  - Browser viewer: Allow customizing what information is displayed
    in the header and footer areas. Access Preferences from the
    viewer controls to change.
  - Add support for MTP devices on FreeBSD
  - ToC editor: Add more case changing operations to the right
    click menu
  - Content server: Redirect pre 2.x book URLs to new 3.x URLs via
    a JavaScript redirect
  - Content server: Allow opening entries in the book list in a new
    tab via middle click/right click
  - Add a tweak in Preferences-&gt;Tweaks to exclude some fields when
    using the Edit metadata-&gt;Copy/paste actions
  - Linux: Allow using calibre-tray.png in the calibre resources
    folder to override the system tray icon.
  Bug Fixes
  - Browser viewer: Fix goto next/previous section actions not
    working when the sections are in different individual HTML
    files.
  - Edit book/Book polishing: When compressing images and the
    compressed image is larger thant he original, use the original
    image.
  - PDF input: Fix conversion of multi-level PDF Outline causing
    duplicate entries in the Table of Contents.
  - Edit book: Fix incorrect EPUB 3 declarations being added to the
    OPF file when adding covers to an EPUB 2 book
  - Edit book: Fix backspace key un-indenting instead of deleting
    even when text is selected if the cursor is at the start of the
    line
  - Tag browser: Fix position not bing preserved when deleting
    books.
  - Edit Book: Use the cache directory rather than the temp
    directory to store working files. Hopefully prevents temp file
    cleaners from destroying books.
  - EPUB input: Handle books that erroneously set the mimetype for
    font files to text/plain
  - AZW3 input: Do not fail to process files with invalid internal
    flow references.
  - When updating plugins, do not show the dialog asking which
    toolbar to put the plugin, even if the user has removed the
    plugin for all toolbars.
  - Content server: Fix using the Clear logs button preventing the
    server from restarting until calibre itself is restarted.</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Drop useless build requirement on poppler to make it build again.
  Such a package doesn't exist since ages, libpoppler provided
  "poppler" until recently but there should be no need to
  explicitly BuildRequire that anyway.</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- do not require liberation2-fonts, it is dead [bsc#1077375]
  [rh#856239]</changelog>
  <changelog author="ecsos@opensuse.org" date="1517054400">- update to 3.16.0
  New Features
  - Content server: Allow adding and deleting of books using
    the web interface
  - Allow removing the close button from tabs in the Virtual
    library tab bar. Right click the tab bar and choose 'Lock tabs'
    to do that.
  - calibredb export: Add --progress option
  - Bulk metadata editing: Show progress bars to track progress of
    the operation
  - Content server: When downloading books from the server send
    both the ASCII and full Unicode file names. Browsers that
    support RFC 6266 can make use of the unicode file name.
  - Content server: Show a warning popup on Apple devices when
    the user tries to search with an expression containing smart
    quotes, since Apple devices now automatically replace quotes
    with smart quotes when typing.
  Bug Fixes
  - DOCX Output: Fix links without anchors in the input document
    not being converted correctly.
  - calibredb: Fix a regression that broke reading of passwords
    from stdin
  - Edit book: Fix an error when saving files with filenames that
    cannot be encoded using the system codepage on Windows
  - Pasting metadata: Fix excluding title and authors not working</changelog>
  <changelog author="ecsos@opensuse.org" date="1518177600">- update to 3.17.0
  New Features
  - Allow splitting the book list, by right clicking on the column
    headers and choosing 'Split the book list'
  - Store temporary files used by the editor and viewer in the
    cache directory to try to prevent errors caused by
    'file cleaner' programs deleting temporary files still in use
  Bug Fixes
  - EPUB3 Input: Fix HTML covers and titlepages that are marked
    using the deprecated element not being recognized.
  - Bulk metadata edit: Fix regression in 3.13 that made it
    impossible to use the Force numbering checkbox for custom
    series
  - Conversion: Fix the valign attribute on tags not being honored
  - E-book viewer: Fix the 'Copy' keyboard shortcut/context menu
    action not working on some Windows systems
  - E-book viewer: Make the semi-transparent background for viewing
    metadata a little more opaque.</changelog>
  <changelog author="ecsos@opensuse.org" date="1519473600">- update to 3.18.0
  New Features
  - Browser viewer: Allow long tapping a word to look it up in
    a dictionary or search the internet for it.
  Bug Fixes
  - Conversion: Handle the deprecated type attribute on tags.
  - Fix metadata download from amazon stopped working because of
    a website change
  - Fix re-ordering of columns causing split book splitter state
    not being restored on restart
  - Fix errors when using strftime with unicode strings on
    non-utf-8 windows systems.
  - Split book view: Fix vertical scroll position of the two views
    getting out of sync after doing some searches.
  - Fix some edit widget appearing in the wrong place when editing
    in the right hand panel of the new split book list.
  - Portable build: Fix cache directory not always being
    auto-created
  - Workaround for Qt 5.10 on Linux resetting the global font,
    preventing custom interface font settings from working</changelog>
  <changelog author="ecsos@opensuse.org" date="1520596800">- update to 3.19.0
  New Features
  - Driver for the new PocketBook 740
  - Allow using relative URLs in comments type metadata.
    The relative URLs are interpreted relative to the book folder
    in the calibre library
  - Edit book: Reports: Do not show characters from the HTML markup
    in the characters report.
  - Allow adding the Virtual library button to any toolbar/menu via
    Preferences-&gt;Toolbars &amp; menus
  Bug Fixes
  - Server: Fix server becoming unresponsive if a client sends
    invalid SSL data at exactly the right moment
  - Conversion heuristics: Make unwrapping recognize Georgian
    letters as well.
  - Make de-serialization of stored conversion options safe against
    maliciously crafted input
  - E-book viewer: Change the file format used to import/export
    bookmarks to use JSON. This prevents malicious bookmarks files
    from causing code execution.
  - Make the history completion for the search and replace edit box
    case-sensitive.
  - PDF Output: When the input document contains multiple anchors
    with the same value, use the first anchor rather than the last.
    This follows browser behavior.
  - FB2 Input: Add to content to silence the useless epubcheck</changelog>
  <changelog author="ecsos@opensuse.org" date="1521892800">- update to 3.20.0
  New Features
  - Content server: Allow editing the metadata of books from the
    book details page
  - Kobo driver: Recognize Kobo Aura 2 with new firmware
    (4.6.10188)
  Bug Fixes
  - When reading metadata from HTML also recognize as being
    comments</changelog>
  <changelog author="ecsos@opensuse.org" date="1523188800">- update to 3.21.0
  New Features
  - Browser viewer: Allow showing the time left in the current
    chapter/book in the header and footer areas of the book.
  - Manage tags dialog: Searching now shows all matching tags and
    there is an undo button to undo changes.
  - Add an output profile for the Kindle Oasis 2017
  Bug Fixes
  - Content server: Fix adding/deleting books and editing metadata
    not updating the main calibre book list automatically.
  - Viewer: When doing a dictionary lookup, remove soft hyphens
    from the word, if any are present.
  - Edit metadata dialog: Fix tab order for buttons to the left
    of the title and author
  - Trim cover dialog: Remove the redundant Trim &amp; OK button,
    instead have the OK button trim automatically if there is
    a selection.
  - Update Amazon metadata plugin for a website change
  - Content server: Fix translations not being updated without
    clearing the browser cache
  - Content server: Fix switching from translations to no
    translations not working
  - Content server: When updating interface data do not transmit
    translations if they have not been changed. Saves ~30-60KB
    bandwidth when using non-English interface language.</changelog>
  <changelog author="ecsos@opensuse.org" date="1524312000">- update to 3.22.1
  New Features
  - Edit book: Add a tool to upgrade books from EPUB 2 to EPUB 3
    (Tools-&gt;Upgrade book internals)
  - Add support for the FBZ format (zipped FB2)
  - Kindle driver: Change the height of generated thumbnails to
    500px, needed for the Oasis 2017
  - Edit book: When bulk renaming files add an option to rename by
    the order in which the files appear in the book.
  - Polishing: Recognize titlepages that are marked as covers in
    the EPUB 3 landmarks section
  - Edit Book: Automatically updated the modified timestamp in the
    OPF when saving EPUB 3 books.
  - Remove the ISBNDB metadata plugin as ISBNDB no longer allows
    free lookups.
  Bug Fixes
  - EPUB 3 metadata: If the book defines more than one author sort
    value for an author use the first instead of the last
  - Check Book: Dont warn for nav document not in spine in EPUB 3
    books
  - Linux installer: Fix umask question not working with the
    recommended install command because stdin is a pipe
  - Browser viewer: Show an error message when trying to use the
    Sync function without being logged in
  - When setting cover from a PDF file and the user clicks cancel,
    do not delete the existing cover</changelog>
  <changelog author="ecsos@opensuse.org" date="1525435200">- update to 3.23.0
  New Features
  - Kobo driver: Add support for new firmware
  - Book polishing: Add an option to upgrade EPUB 2 to EPUB 3
  - DOCX Input: Convert text written with dingbat fonts such as
    Wingding or Symbol correctly.
  - When choosing the page to use as a cover from a PDF file,
    add a button to render more pages, if needed
  - TXT Input: Add support for embedded images that use relative
    URLs when converting markdown or textile. Note that this will
    only work if you are - converting using the ebook-convert
    command line tool as the main calibre program moves files
    around, so relative references will not be valid.
  - Edit book: Insert special character: Add an option to select
    if searching should match all words or any of the words
  - Edit book: Insert special character: When searching by name
    match prefixes in addition to whole words. So you can now type
    "horiz" to match "horizontal".
  - Linux installer: Simplify the command used to install calibre
    and add support for Ubuntu 18.04 which is missing a default
    python executable
  - When upgrading EPUB 2 to EPUB 3 add the 'epub' namespace to
    all HTML files, for convenience.
  Bug Fixes
  - Edit Book: Fix an error caused by a landmark entry in EPUB 3
    files that has an tag without an href attribute.
  - Edit Book: Fix names for some control characters not being
    displayed in the status bar
  - Searching: Fix A (B) not being treated as A AND (B)
  - Kobo driver: Add an option to not maintain bookmarks/read
    status/etc. when resending a book already on the device.
  - DOCX Input: Ignore complex script font styles. Fixes conversion
    of documents that specify only complex script styles and no
    simple script styles.
  - When updating EPUB 2 to EPUB 3 ensure only a single dc:date
    element is present in the OPF</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- Drop dependency on python-pypdf as we remove this package
  * The calibre does not depend on it since 2014 anyway</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signature provided upstream
- Added source to calibre.keyring, which contains the key from the author
- Used https for all URLs in the specfile</changelog>
  <changelog author="ecsos@opensuse.org" date="1527249600">- update to 3.24.0
  New Features
  - Conversion: EPUB Output: Add an option to output EPUB 3 files.
  - PDF Output: Add an option to break long words at the ends of
    lines.
  - PDF Output: Allow using images in the header/footer templates
  - Add an option to use two lines for the text under the toolbar
    button in Preferences-&gt;Look &amp; feel
  - Edit book: Spell check: Update the number of misspelled
    words/total words displayed when correcting/ignoring words.
  - Edit book: Fix HTML: Automatically resolve private entities
  - Improve formatting of help in Preferences-&gt;Tweaks
  - ToC Editor: Allow undo for renaming single items as well.
  Bug Fixes
  - PDF Output: Strip zero-width space characters from the text as
    their presence prevents searching from working
  - DOCX Output: Fix tags not being converted correctly.
  - DOCX Input: Fix incorrect conversion of a framed block that
    contains a list.
  - Conversion: Fix private entities that use the same name as an
    HTML entity not being handled correctly
  - Viewer: Fix HTML files with private entities displaying an
    artifact at the top
  - Edit book: Check book: Show an error for HTML files with
    private entities
  - EPUB3 Input: Fix titlepage being referred to in the nav causing
    two titlepage entries in the final book.
  - Fix throbber buttons not being perfectly aligned inside
    toolbars
  - Quickview: Fix sizes not being displayed.
  - Edit book: Compress images tool: Do not mark the book as
    changed if no images could be further compressed.
  - Book list split-view: Fix horizontal scroll position of split
    view can change when changing the current column in one view.
  - Fix Bookeen Saga not being recognized on macOS/Linux.
  - Edit metadata dialog: Fix undo last trim not working for
    automatic trims.
  - Content server: Fix series field blank in Italian translation
  - BeautifulSoup: Port fix from upstream for outputting bare
    ampersands in strings.
  - calibredb add: Run the input plugins before reading metadata
    instead of after.</changelog>
  <changelog author="ecsos@opensuse.org" date="1527336000">- update to 3.24.1
  - Version 3.24.1 fixes a regression in the 3.24 in the editor
    that caused syncing between the editor and the Preview
    panel/Live CSS panel to not work correctly</changelog>
  <changelog author="ecsos@opensuse.org" date="1527508800">- update to 3.24.2
  - Version 3.24.2 fixes a bug in the new EPUB 3 output
    functionality that prevented conversion of non-EPUB 3 books
    to EPUB 3</changelog>
  <changelog author="ecsos@opensuse.org" date="1527854400">- update to 3.25.0
  New Features
  - Kobo driver: Support the new Clara HD
  - PDF Output: Add an option to use page margins from the input
    document, specified via @page CSS rules.
  Bug Fixes
  - Fix option to "show text under buttons only if there is
    enough space" not working well with the option to use
    "two lines for the text under the buttons".
  - Update notification: When both calibre and plugin updates are
    available and the user updates only the plugins, fix the
    restart calibre button not working.
  - E-book viewer: Fix printing of comics (cbz/cbr files) not
    working.
  - EPUB3 Input: Fix Table of Contents not being recognized for
    some EPUB 3 books that placed their nav document in-side
    a sub-folder.</changelog>
  <changelog author="ecsos@opensuse.org" date="1529064000">- update to 3.26.1
  New Features
  - Book list: Allow drag and drop of books onto other books to
    merge the book records.
  - Check Book: External link checker: Also check HTML anchors
    (the part after the # in the link). Can be turned off via
    a checkbox at the bottom of the link checker window.
  - Edit Book: Preview panel: Show previews when editing SVG files
  - Edit book: When downloading external resources, also convert
    data URLs into files.
  - E-book viewer: When the controls are hidden show the progress
    in the window title.
  - Library Quick switch menu: Highlight the previously switched
    from library in bold.
  Bug Fixes
  - PDF Input: Fix a regression in 3.24 that caused conversion of
    PDF to be significantly worse.
  - E-book viewer: Fix very slow loading for HTML files with
    very many images on Linux.
  - Content server: Fix a regression in 3.14 that removed
    the separator between books in the detailed list view mode.
  - Edit book: Fix SVG files not being beautified by the Beautify
    all files tool
  - Edit book: Fix searching in selected files not searching SVG
    files
  - Fix Tweaks help string not being displayed translated
  - Edit metadata dialog: Fix distorted rendering of some labels
    in the custom metadata tab in rare circumstances.
  - version 3.26.1 prevents dropping of a book onto itself from
    triggering the merge dialog, which should reduce accidental
    triggers</changelog>
  <changelog author="ecsos@opensuse.org" date="1530878400">- update to 3.27.1
  New Features
  - Content server: Allow conversion of books
  - Kobo driver: Add support for new firmware
  - Bulk metadata edit dialog: Add an "edit tags" button for tags
    like custom columns.
  - Add an option in Preferences-&gt;Look &amp; feel to disable the new
    'drag and drop to merge books feature'
  - E-book viewer: Add a shortcut (Ctrl+Alt+B) to toggle the
    bookmarks panel.
  - Edit book: Add a copy to clipboard button on the various report
    dialogs
  - Edit book: Add a shortcut (Ctrl+Alt+Down) to edit the next file
    in the book spine.
  - calibre-smtp: Verify relay server TLS certificates by default.
    New option --dont-verify-server-certificate to restore old
    behavior.
  Bug Fixes
  - Version 3.27.1 fixes a build error in 3.27.0 that caused
    calibre not to start on macOS older than High Sierra
  - Conversion: Fix a regression in the previous release that
    caused conversion of EPUB 3 to EPUB 3 to fail.
  - Fix detection of the Bookeen NolimbookXL on macOS and Linux
  - Fix a regression that broke the fetching of annotations from
    Kobo and Kindle devices.
  - DOCX Input: Fix failure to convert some DOCX files that use
    Symbol fonts.
  - When exporting very large libraries fix failures due to busy
    errors.
  - Fix commas not working in identifiers that are transformed
    to URLs via rules.
  - Review downloaded metadata: Fix cancel button on the confirm
    reject all dialog not working.
  - Kindle Fire driver: Send books by default to the "kindle"
    folder instead of the "Books" folder to workaround a change in
    the Fire firmware that causes the Kindle to not recognize files
    in the Books folder.
  - Linux installer: Also fix the execute bits in the umask if the
    user runs the installer with a umask that prevents files from
    being world executable.
  - Sort the entries in the show column menu alphabetically.</changelog>
</package>
<package pkgid="b89a9a5d97b4646aad9d06168a12be18441bdfe29ce6b979700dac1ebafefb87" name="calibre" arch="x86_64">
  <version epoch="0" ver="3.27.1" rel="lp150.3.6.1"/>
  <changelog author="ecsos@opensuse.org" date="1513425600">- update to 3.14.0
  New Features
  - User manual: A new quick reference primer for regular
    expression syntax
    https://manual.calibre-ebook.com/regexp_quick_reference.html
  - Content server: Allow viewing the book metadata while reading
    a book. In the viewer controls, tap Goto and then Metadata to
    see the metadata.
  - Kobo driver: Add support for new firmware
  - Bulk metadata edit: Allow choosing the algorithm used for
    changing the case of titles
  - Get books: The koobe.pl store plugin has now become the
    Swiat Ebookow store plugin
  - Allow Copy/paste of book metadata from the main book list.
    Right click the Edit metadata button to access these actions.
  - Allow disabling the confirmation popup when opening the
    containing folder of many books at once.
  Bug Fixes
  - Nook driver: Fix books sent via calibre not appearing under
    My Files on the Glowlight 3 Plus
  - Get Books: Update Mills &amp; Boon, publio, empik, legimi, woblink
    and beam-ebooks.de plugins for website changes
  - Book polishing: Do not scan book for font usage when subsetting
    if no embedded fonts are available.
  - Content server: Open links in the comments section from the
    book details page in new windows.
  - Choose English as the User interface language when a locale
    related environment variable is set to the C locale
  - Linux installer: A nicer error message if the user tries to run
    the installer on an ARM machine</changelog>
  <changelog author="ecsos@opensuse.org" date="1515153600">- update to 3.15.0
  New Features
  - Browser viewer: Allow customizing what information is displayed
    in the header and footer areas. Access Preferences from the
    viewer controls to change.
  - Add support for MTP devices on FreeBSD
  - ToC editor: Add more case changing operations to the right
    click menu
  - Content server: Redirect pre 2.x book URLs to new 3.x URLs via
    a JavaScript redirect
  - Content server: Allow opening entries in the book list in a new
    tab via middle click/right click
  - Add a tweak in Preferences-&gt;Tweaks to exclude some fields when
    using the Edit metadata-&gt;Copy/paste actions
  - Linux: Allow using calibre-tray.png in the calibre resources
    folder to override the system tray icon.
  Bug Fixes
  - Browser viewer: Fix goto next/previous section actions not
    working when the sections are in different individual HTML
    files.
  - Edit book/Book polishing: When compressing images and the
    compressed image is larger thant he original, use the original
    image.
  - PDF input: Fix conversion of multi-level PDF Outline causing
    duplicate entries in the Table of Contents.
  - Edit book: Fix incorrect EPUB 3 declarations being added to the
    OPF file when adding covers to an EPUB 2 book
  - Edit book: Fix backspace key un-indenting instead of deleting
    even when text is selected if the cursor is at the start of the
    line
  - Tag browser: Fix position not bing preserved when deleting
    books.
  - Edit Book: Use the cache directory rather than the temp
    directory to store working files. Hopefully prevents temp file
    cleaners from destroying books.
  - EPUB input: Handle books that erroneously set the mimetype for
    font files to text/plain
  - AZW3 input: Do not fail to process files with invalid internal
    flow references.
  - When updating plugins, do not show the dialog asking which
    toolbar to put the plugin, even if the user has removed the
    plugin for all toolbars.
  - Content server: Fix using the Clear logs button preventing the
    server from restarting until calibre itself is restarted.</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Drop useless build requirement on poppler to make it build again.
  Such a package doesn't exist since ages, libpoppler provided
  "poppler" until recently but there should be no need to
  explicitly BuildRequire that anyway.</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- do not require liberation2-fonts, it is dead [bsc#1077375]
  [rh#856239]</changelog>
  <changelog author="ecsos@opensuse.org" date="1517054400">- update to 3.16.0
  New Features
  - Content server: Allow adding and deleting of books using
    the web interface
  - Allow removing the close button from tabs in the Virtual
    library tab bar. Right click the tab bar and choose 'Lock tabs'
    to do that.
  - calibredb export: Add --progress option
  - Bulk metadata editing: Show progress bars to track progress of
    the operation
  - Content server: When downloading books from the server send
    both the ASCII and full Unicode file names. Browsers that
    support RFC 6266 can make use of the unicode file name.
  - Content server: Show a warning popup on Apple devices when
    the user tries to search with an expression containing smart
    quotes, since Apple devices now automatically replace quotes
    with smart quotes when typing.
  Bug Fixes
  - DOCX Output: Fix links without anchors in the input document
    not being converted correctly.
  - calibredb: Fix a regression that broke reading of passwords
    from stdin
  - Edit book: Fix an error when saving files with filenames that
    cannot be encoded using the system codepage on Windows
  - Pasting metadata: Fix excluding title and authors not working</changelog>
  <changelog author="ecsos@opensuse.org" date="1518177600">- update to 3.17.0
  New Features
  - Allow splitting the book list, by right clicking on the column
    headers and choosing 'Split the book list'
  - Store temporary files used by the editor and viewer in the
    cache directory to try to prevent errors caused by
    'file cleaner' programs deleting temporary files still in use
  Bug Fixes
  - EPUB3 Input: Fix HTML covers and titlepages that are marked
    using the deprecated element not being recognized.
  - Bulk metadata edit: Fix regression in 3.13 that made it
    impossible to use the Force numbering checkbox for custom
    series
  - Conversion: Fix the valign attribute on tags not being honored
  - E-book viewer: Fix the 'Copy' keyboard shortcut/context menu
    action not working on some Windows systems
  - E-book viewer: Make the semi-transparent background for viewing
    metadata a little more opaque.</changelog>
  <changelog author="ecsos@opensuse.org" date="1519473600">- update to 3.18.0
  New Features
  - Browser viewer: Allow long tapping a word to look it up in
    a dictionary or search the internet for it.
  Bug Fixes
  - Conversion: Handle the deprecated type attribute on tags.
  - Fix metadata download from amazon stopped working because of
    a website change
  - Fix re-ordering of columns causing split book splitter state
    not being restored on restart
  - Fix errors when using strftime with unicode strings on
    non-utf-8 windows systems.
  - Split book view: Fix vertical scroll position of the two views
    getting out of sync after doing some searches.
  - Fix some edit widget appearing in the wrong place when editing
    in the right hand panel of the new split book list.
  - Portable build: Fix cache directory not always being
    auto-created
  - Workaround for Qt 5.10 on Linux resetting the global font,
    preventing custom interface font settings from working</changelog>
  <changelog author="ecsos@opensuse.org" date="1520596800">- update to 3.19.0
  New Features
  - Driver for the new PocketBook 740
  - Allow using relative URLs in comments type metadata.
    The relative URLs are interpreted relative to the book folder
    in the calibre library
  - Edit book: Reports: Do not show characters from the HTML markup
    in the characters report.
  - Allow adding the Virtual library button to any toolbar/menu via
    Preferences-&gt;Toolbars &amp; menus
  Bug Fixes
  - Server: Fix server becoming unresponsive if a client sends
    invalid SSL data at exactly the right moment
  - Conversion heuristics: Make unwrapping recognize Georgian
    letters as well.
  - Make de-serialization of stored conversion options safe against
    maliciously crafted input
  - E-book viewer: Change the file format used to import/export
    bookmarks to use JSON. This prevents malicious bookmarks files
    from causing code execution.
  - Make the history completion for the search and replace edit box
    case-sensitive.
  - PDF Output: When the input document contains multiple anchors
    with the same value, use the first anchor rather than the last.
    This follows browser behavior.
  - FB2 Input: Add to content to silence the useless epubcheck</changelog>
  <changelog author="ecsos@opensuse.org" date="1521892800">- update to 3.20.0
  New Features
  - Content server: Allow editing the metadata of books from the
    book details page
  - Kobo driver: Recognize Kobo Aura 2 with new firmware
    (4.6.10188)
  Bug Fixes
  - When reading metadata from HTML also recognize as being
    comments</changelog>
  <changelog author="ecsos@opensuse.org" date="1523188800">- update to 3.21.0
  New Features
  - Browser viewer: Allow showing the time left in the current
    chapter/book in the header and footer areas of the book.
  - Manage tags dialog: Searching now shows all matching tags and
    there is an undo button to undo changes.
  - Add an output profile for the Kindle Oasis 2017
  Bug Fixes
  - Content server: Fix adding/deleting books and editing metadata
    not updating the main calibre book list automatically.
  - Viewer: When doing a dictionary lookup, remove soft hyphens
    from the word, if any are present.
  - Edit metadata dialog: Fix tab order for buttons to the left
    of the title and author
  - Trim cover dialog: Remove the redundant Trim &amp; OK button,
    instead have the OK button trim automatically if there is
    a selection.
  - Update Amazon metadata plugin for a website change
  - Content server: Fix translations not being updated without
    clearing the browser cache
  - Content server: Fix switching from translations to no
    translations not working
  - Content server: When updating interface data do not transmit
    translations if they have not been changed. Saves ~30-60KB
    bandwidth when using non-English interface language.</changelog>
  <changelog author="ecsos@opensuse.org" date="1524312000">- update to 3.22.1
  New Features
  - Edit book: Add a tool to upgrade books from EPUB 2 to EPUB 3
    (Tools-&gt;Upgrade book internals)
  - Add support for the FBZ format (zipped FB2)
  - Kindle driver: Change the height of generated thumbnails to
    500px, needed for the Oasis 2017
  - Edit book: When bulk renaming files add an option to rename by
    the order in which the files appear in the book.
  - Polishing: Recognize titlepages that are marked as covers in
    the EPUB 3 landmarks section
  - Edit Book: Automatically updated the modified timestamp in the
    OPF when saving EPUB 3 books.
  - Remove the ISBNDB metadata plugin as ISBNDB no longer allows
    free lookups.
  Bug Fixes
  - EPUB 3 metadata: If the book defines more than one author sort
    value for an author use the first instead of the last
  - Check Book: Dont warn for nav document not in spine in EPUB 3
    books
  - Linux installer: Fix umask question not working with the
    recommended install command because stdin is a pipe
  - Browser viewer: Show an error message when trying to use the
    Sync function without being logged in
  - When setting cover from a PDF file and the user clicks cancel,
    do not delete the existing cover</changelog>
  <changelog author="ecsos@opensuse.org" date="1525435200">- update to 3.23.0
  New Features
  - Kobo driver: Add support for new firmware
  - Book polishing: Add an option to upgrade EPUB 2 to EPUB 3
  - DOCX Input: Convert text written with dingbat fonts such as
    Wingding or Symbol correctly.
  - When choosing the page to use as a cover from a PDF file,
    add a button to render more pages, if needed
  - TXT Input: Add support for embedded images that use relative
    URLs when converting markdown or textile. Note that this will
    only work if you are - converting using the ebook-convert
    command line tool as the main calibre program moves files
    around, so relative references will not be valid.
  - Edit book: Insert special character: Add an option to select
    if searching should match all words or any of the words
  - Edit book: Insert special character: When searching by name
    match prefixes in addition to whole words. So you can now type
    "horiz" to match "horizontal".
  - Linux installer: Simplify the command used to install calibre
    and add support for Ubuntu 18.04 which is missing a default
    python executable
  - When upgrading EPUB 2 to EPUB 3 add the 'epub' namespace to
    all HTML files, for convenience.
  Bug Fixes
  - Edit Book: Fix an error caused by a landmark entry in EPUB 3
    files that has an tag without an href attribute.
  - Edit Book: Fix names for some control characters not being
    displayed in the status bar
  - Searching: Fix A (B) not being treated as A AND (B)
  - Kobo driver: Add an option to not maintain bookmarks/read
    status/etc. when resending a book already on the device.
  - DOCX Input: Ignore complex script font styles. Fixes conversion
    of documents that specify only complex script styles and no
    simple script styles.
  - When updating EPUB 2 to EPUB 3 ensure only a single dc:date
    element is present in the OPF</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- Drop dependency on python-pypdf as we remove this package
  * The calibre does not depend on it since 2014 anyway</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signature provided upstream
- Added source to calibre.keyring, which contains the key from the author
- Used https for all URLs in the specfile</changelog>
  <changelog author="ecsos@opensuse.org" date="1527249600">- update to 3.24.0
  New Features
  - Conversion: EPUB Output: Add an option to output EPUB 3 files.
  - PDF Output: Add an option to break long words at the ends of
    lines.
  - PDF Output: Allow using images in the header/footer templates
  - Add an option to use two lines for the text under the toolbar
    button in Preferences-&gt;Look &amp; feel
  - Edit book: Spell check: Update the number of misspelled
    words/total words displayed when correcting/ignoring words.
  - Edit book: Fix HTML: Automatically resolve private entities
  - Improve formatting of help in Preferences-&gt;Tweaks
  - ToC Editor: Allow undo for renaming single items as well.
  Bug Fixes
  - PDF Output: Strip zero-width space characters from the text as
    their presence prevents searching from working
  - DOCX Output: Fix tags not being converted correctly.
  - DOCX Input: Fix incorrect conversion of a framed block that
    contains a list.
  - Conversion: Fix private entities that use the same name as an
    HTML entity not being handled correctly
  - Viewer: Fix HTML files with private entities displaying an
    artifact at the top
  - Edit book: Check book: Show an error for HTML files with
    private entities
  - EPUB3 Input: Fix titlepage being referred to in the nav causing
    two titlepage entries in the final book.
  - Fix throbber buttons not being perfectly aligned inside
    toolbars
  - Quickview: Fix sizes not being displayed.
  - Edit book: Compress images tool: Do not mark the book as
    changed if no images could be further compressed.
  - Book list split-view: Fix horizontal scroll position of split
    view can change when changing the current column in one view.
  - Fix Bookeen Saga not being recognized on macOS/Linux.
  - Edit metadata dialog: Fix undo last trim not working for
    automatic trims.
  - Content server: Fix series field blank in Italian translation
  - BeautifulSoup: Port fix from upstream for outputting bare
    ampersands in strings.
  - calibredb add: Run the input plugins before reading metadata
    instead of after.</changelog>
  <changelog author="ecsos@opensuse.org" date="1527336000">- update to 3.24.1
  - Version 3.24.1 fixes a regression in the 3.24 in the editor
    that caused syncing between the editor and the Preview
    panel/Live CSS panel to not work correctly</changelog>
  <changelog author="ecsos@opensuse.org" date="1527508800">- update to 3.24.2
  - Version 3.24.2 fixes a bug in the new EPUB 3 output
    functionality that prevented conversion of non-EPUB 3 books
    to EPUB 3</changelog>
  <changelog author="ecsos@opensuse.org" date="1527854400">- update to 3.25.0
  New Features
  - Kobo driver: Support the new Clara HD
  - PDF Output: Add an option to use page margins from the input
    document, specified via @page CSS rules.
  Bug Fixes
  - Fix option to "show text under buttons only if there is
    enough space" not working well with the option to use
    "two lines for the text under the buttons".
  - Update notification: When both calibre and plugin updates are
    available and the user updates only the plugins, fix the
    restart calibre button not working.
  - E-book viewer: Fix printing of comics (cbz/cbr files) not
    working.
  - EPUB3 Input: Fix Table of Contents not being recognized for
    some EPUB 3 books that placed their nav document in-side
    a sub-folder.</changelog>
  <changelog author="ecsos@opensuse.org" date="1529064000">- update to 3.26.1
  New Features
  - Book list: Allow drag and drop of books onto other books to
    merge the book records.
  - Check Book: External link checker: Also check HTML anchors
    (the part after the # in the link). Can be turned off via
    a checkbox at the bottom of the link checker window.
  - Edit Book: Preview panel: Show previews when editing SVG files
  - Edit book: When downloading external resources, also convert
    data URLs into files.
  - E-book viewer: When the controls are hidden show the progress
    in the window title.
  - Library Quick switch menu: Highlight the previously switched
    from library in bold.
  Bug Fixes
  - PDF Input: Fix a regression in 3.24 that caused conversion of
    PDF to be significantly worse.
  - E-book viewer: Fix very slow loading for HTML files with
    very many images on Linux.
  - Content server: Fix a regression in 3.14 that removed
    the separator between books in the detailed list view mode.
  - Edit book: Fix SVG files not being beautified by the Beautify
    all files tool
  - Edit book: Fix searching in selected files not searching SVG
    files
  - Fix Tweaks help string not being displayed translated
  - Edit metadata dialog: Fix distorted rendering of some labels
    in the custom metadata tab in rare circumstances.
  - version 3.26.1 prevents dropping of a book onto itself from
    triggering the merge dialog, which should reduce accidental
    triggers</changelog>
  <changelog author="ecsos@opensuse.org" date="1530878400">- update to 3.27.1
  New Features
  - Content server: Allow conversion of books
  - Kobo driver: Add support for new firmware
  - Bulk metadata edit dialog: Add an "edit tags" button for tags
    like custom columns.
  - Add an option in Preferences-&gt;Look &amp; feel to disable the new
    'drag and drop to merge books feature'
  - E-book viewer: Add a shortcut (Ctrl+Alt+B) to toggle the
    bookmarks panel.
  - Edit book: Add a copy to clipboard button on the various report
    dialogs
  - Edit book: Add a shortcut (Ctrl+Alt+Down) to edit the next file
    in the book spine.
  - calibre-smtp: Verify relay server TLS certificates by default.
    New option --dont-verify-server-certificate to restore old
    behavior.
  Bug Fixes
  - Version 3.27.1 fixes a build error in 3.27.0 that caused
    calibre not to start on macOS older than High Sierra
  - Conversion: Fix a regression in the previous release that
    caused conversion of EPUB 3 to EPUB 3 to fail.
  - Fix detection of the Bookeen NolimbookXL on macOS and Linux
  - Fix a regression that broke the fetching of annotations from
    Kobo and Kindle devices.
  - DOCX Input: Fix failure to convert some DOCX files that use
    Symbol fonts.
  - When exporting very large libraries fix failures due to busy
    errors.
  - Fix commas not working in identifiers that are transformed
    to URLs via rules.
  - Review downloaded metadata: Fix cancel button on the confirm
    reject all dialog not working.
  - Kindle Fire driver: Send books by default to the "kindle"
    folder instead of the "Books" folder to workaround a change in
    the Fire firmware that causes the Kindle to not recognize files
    in the Books folder.
  - Linux installer: Also fix the execute bits in the umask if the
    user runs the installer with a umask that prevents files from
    being world executable.
  - Sort the entries in the show column menu alphabetically.</changelog>
</package>
<package pkgid="dce64667544180e559e42b3b53df655934c4793d10e8dcb91dcf7173c61c6763" name="calibre" arch="src">
  <version epoch="0" ver="3.27.1" rel="lp150.3.9.1"/>
  <changelog author="ecsos@opensuse.org" date="1515153600">- update to 3.15.0
  New Features
  - Browser viewer: Allow customizing what information is displayed
    in the header and footer areas. Access Preferences from the
    viewer controls to change.
  - Add support for MTP devices on FreeBSD
  - ToC editor: Add more case changing operations to the right
    click menu
  - Content server: Redirect pre 2.x book URLs to new 3.x URLs via
    a JavaScript redirect
  - Content server: Allow opening entries in the book list in a new
    tab via middle click/right click
  - Add a tweak in Preferences-&gt;Tweaks to exclude some fields when
    using the Edit metadata-&gt;Copy/paste actions
  - Linux: Allow using calibre-tray.png in the calibre resources
    folder to override the system tray icon.
  Bug Fixes
  - Browser viewer: Fix goto next/previous section actions not
    working when the sections are in different individual HTML
    files.
  - Edit book/Book polishing: When compressing images and the
    compressed image is larger thant he original, use the original
    image.
  - PDF input: Fix conversion of multi-level PDF Outline causing
    duplicate entries in the Table of Contents.
  - Edit book: Fix incorrect EPUB 3 declarations being added to the
    OPF file when adding covers to an EPUB 2 book
  - Edit book: Fix backspace key un-indenting instead of deleting
    even when text is selected if the cursor is at the start of the
    line
  - Tag browser: Fix position not bing preserved when deleting
    books.
  - Edit Book: Use the cache directory rather than the temp
    directory to store working files. Hopefully prevents temp file
    cleaners from destroying books.
  - EPUB input: Handle books that erroneously set the mimetype for
    font files to text/plain
  - AZW3 input: Do not fail to process files with invalid internal
    flow references.
  - When updating plugins, do not show the dialog asking which
    toolbar to put the plugin, even if the user has removed the
    plugin for all toolbars.
  - Content server: Fix using the Clear logs button preventing the
    server from restarting until calibre itself is restarted.</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Drop useless build requirement on poppler to make it build again.
  Such a package doesn't exist since ages, libpoppler provided
  "poppler" until recently but there should be no need to
  explicitly BuildRequire that anyway.</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- do not require liberation2-fonts, it is dead [bsc#1077375]
  [rh#856239]</changelog>
  <changelog author="ecsos@opensuse.org" date="1517054400">- update to 3.16.0
  New Features
  - Content server: Allow adding and deleting of books using
    the web interface
  - Allow removing the close button from tabs in the Virtual
    library tab bar. Right click the tab bar and choose 'Lock tabs'
    to do that.
  - calibredb export: Add --progress option
  - Bulk metadata editing: Show progress bars to track progress of
    the operation
  - Content server: When downloading books from the server send
    both the ASCII and full Unicode file names. Browsers that
    support RFC 6266 can make use of the unicode file name.
  - Content server: Show a warning popup on Apple devices when
    the user tries to search with an expression containing smart
    quotes, since Apple devices now automatically replace quotes
    with smart quotes when typing.
  Bug Fixes
  - DOCX Output: Fix links without anchors in the input document
    not being converted correctly.
  - calibredb: Fix a regression that broke reading of passwords
    from stdin
  - Edit book: Fix an error when saving files with filenames that
    cannot be encoded using the system codepage on Windows
  - Pasting metadata: Fix excluding title and authors not working</changelog>
  <changelog author="ecsos@opensuse.org" date="1518177600">- update to 3.17.0
  New Features
  - Allow splitting the book list, by right clicking on the column
    headers and choosing 'Split the book list'
  - Store temporary files used by the editor and viewer in the
    cache directory to try to prevent errors caused by
    'file cleaner' programs deleting temporary files still in use
  Bug Fixes
  - EPUB3 Input: Fix HTML covers and titlepages that are marked
    using the deprecated element not being recognized.
  - Bulk metadata edit: Fix regression in 3.13 that made it
    impossible to use the Force numbering checkbox for custom
    series
  - Conversion: Fix the valign attribute on tags not being honored
  - E-book viewer: Fix the 'Copy' keyboard shortcut/context menu
    action not working on some Windows systems
  - E-book viewer: Make the semi-transparent background for viewing
    metadata a little more opaque.</changelog>
  <changelog author="ecsos@opensuse.org" date="1519473600">- update to 3.18.0
  New Features
  - Browser viewer: Allow long tapping a word to look it up in
    a dictionary or search the internet for it.
  Bug Fixes
  - Conversion: Handle the deprecated type attribute on tags.
  - Fix metadata download from amazon stopped working because of
    a website change
  - Fix re-ordering of columns causing split book splitter state
    not being restored on restart
  - Fix errors when using strftime with unicode strings on
    non-utf-8 windows systems.
  - Split book view: Fix vertical scroll position of the two views
    getting out of sync after doing some searches.
  - Fix some edit widget appearing in the wrong place when editing
    in the right hand panel of the new split book list.
  - Portable build: Fix cache directory not always being
    auto-created
  - Workaround for Qt 5.10 on Linux resetting the global font,
    preventing custom interface font settings from working</changelog>
  <changelog author="ecsos@opensuse.org" date="1520596800">- update to 3.19.0
  New Features
  - Driver for the new PocketBook 740
  - Allow using relative URLs in comments type metadata.
    The relative URLs are interpreted relative to the book folder
    in the calibre library
  - Edit book: Reports: Do not show characters from the HTML markup
    in the characters report.
  - Allow adding the Virtual library button to any toolbar/menu via
    Preferences-&gt;Toolbars &amp; menus
  Bug Fixes
  - Server: Fix server becoming unresponsive if a client sends
    invalid SSL data at exactly the right moment
  - Conversion heuristics: Make unwrapping recognize Georgian
    letters as well.
  - Make de-serialization of stored conversion options safe against
    maliciously crafted input
  - E-book viewer: Change the file format used to import/export
    bookmarks to use JSON. This prevents malicious bookmarks files
    from causing code execution.
  - Make the history completion for the search and replace edit box
    case-sensitive.
  - PDF Output: When the input document contains multiple anchors
    with the same value, use the first anchor rather than the last.
    This follows browser behavior.
  - FB2 Input: Add to content to silence the useless epubcheck</changelog>
  <changelog author="ecsos@opensuse.org" date="1521892800">- update to 3.20.0
  New Features
  - Content server: Allow editing the metadata of books from the
    book details page
  - Kobo driver: Recognize Kobo Aura 2 with new firmware
    (4.6.10188)
  Bug Fixes
  - When reading metadata from HTML also recognize as being
    comments</changelog>
  <changelog author="ecsos@opensuse.org" date="1523188800">- update to 3.21.0
  New Features
  - Browser viewer: Allow showing the time left in the current
    chapter/book in the header and footer areas of the book.
  - Manage tags dialog: Searching now shows all matching tags and
    there is an undo button to undo changes.
  - Add an output profile for the Kindle Oasis 2017
  Bug Fixes
  - Content server: Fix adding/deleting books and editing metadata
    not updating the main calibre book list automatically.
  - Viewer: When doing a dictionary lookup, remove soft hyphens
    from the word, if any are present.
  - Edit metadata dialog: Fix tab order for buttons to the left
    of the title and author
  - Trim cover dialog: Remove the redundant Trim &amp; OK button,
    instead have the OK button trim automatically if there is
    a selection.
  - Update Amazon metadata plugin for a website change
  - Content server: Fix translations not being updated without
    clearing the browser cache
  - Content server: Fix switching from translations to no
    translations not working
  - Content server: When updating interface data do not transmit
    translations if they have not been changed. Saves ~30-60KB
    bandwidth when using non-English interface language.</changelog>
  <changelog author="ecsos@opensuse.org" date="1524312000">- update to 3.22.1
  New Features
  - Edit book: Add a tool to upgrade books from EPUB 2 to EPUB 3
    (Tools-&gt;Upgrade book internals)
  - Add support for the FBZ format (zipped FB2)
  - Kindle driver: Change the height of generated thumbnails to
    500px, needed for the Oasis 2017
  - Edit book: When bulk renaming files add an option to rename by
    the order in which the files appear in the book.
  - Polishing: Recognize titlepages that are marked as covers in
    the EPUB 3 landmarks section
  - Edit Book: Automatically updated the modified timestamp in the
    OPF when saving EPUB 3 books.
  - Remove the ISBNDB metadata plugin as ISBNDB no longer allows
    free lookups.
  Bug Fixes
  - EPUB 3 metadata: If the book defines more than one author sort
    value for an author use the first instead of the last
  - Check Book: Dont warn for nav document not in spine in EPUB 3
    books
  - Linux installer: Fix umask question not working with the
    recommended install command because stdin is a pipe
  - Browser viewer: Show an error message when trying to use the
    Sync function without being logged in
  - When setting cover from a PDF file and the user clicks cancel,
    do not delete the existing cover</changelog>
  <changelog author="ecsos@opensuse.org" date="1525435200">- update to 3.23.0
  New Features
  - Kobo driver: Add support for new firmware
  - Book polishing: Add an option to upgrade EPUB 2 to EPUB 3
  - DOCX Input: Convert text written with dingbat fonts such as
    Wingding or Symbol correctly.
  - When choosing the page to use as a cover from a PDF file,
    add a button to render more pages, if needed
  - TXT Input: Add support for embedded images that use relative
    URLs when converting markdown or textile. Note that this will
    only work if you are - converting using the ebook-convert
    command line tool as the main calibre program moves files
    around, so relative references will not be valid.
  - Edit book: Insert special character: Add an option to select
    if searching should match all words or any of the words
  - Edit book: Insert special character: When searching by name
    match prefixes in addition to whole words. So you can now type
    "horiz" to match "horizontal".
  - Linux installer: Simplify the command used to install calibre
    and add support for Ubuntu 18.04 which is missing a default
    python executable
  - When upgrading EPUB 2 to EPUB 3 add the 'epub' namespace to
    all HTML files, for convenience.
  Bug Fixes
  - Edit Book: Fix an error caused by a landmark entry in EPUB 3
    files that has an tag without an href attribute.
  - Edit Book: Fix names for some control characters not being
    displayed in the status bar
  - Searching: Fix A (B) not being treated as A AND (B)
  - Kobo driver: Add an option to not maintain bookmarks/read
    status/etc. when resending a book already on the device.
  - DOCX Input: Ignore complex script font styles. Fixes conversion
    of documents that specify only complex script styles and no
    simple script styles.
  - When updating EPUB 2 to EPUB 3 ensure only a single dc:date
    element is present in the OPF</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- Drop dependency on python-pypdf as we remove this package
  * The calibre does not depend on it since 2014 anyway</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signature provided upstream
- Added source to calibre.keyring, which contains the key from the author
- Used https for all URLs in the specfile</changelog>
  <changelog author="ecsos@opensuse.org" date="1527249600">- update to 3.24.0
  New Features
  - Conversion: EPUB Output: Add an option to output EPUB 3 files.
  - PDF Output: Add an option to break long words at the ends of
    lines.
  - PDF Output: Allow using images in the header/footer templates
  - Add an option to use two lines for the text under the toolbar
    button in Preferences-&gt;Look &amp; feel
  - Edit book: Spell check: Update the number of misspelled
    words/total words displayed when correcting/ignoring words.
  - Edit book: Fix HTML: Automatically resolve private entities
  - Improve formatting of help in Preferences-&gt;Tweaks
  - ToC Editor: Allow undo for renaming single items as well.
  Bug Fixes
  - PDF Output: Strip zero-width space characters from the text as
    their presence prevents searching from working
  - DOCX Output: Fix tags not being converted correctly.
  - DOCX Input: Fix incorrect conversion of a framed block that
    contains a list.
  - Conversion: Fix private entities that use the same name as an
    HTML entity not being handled correctly
  - Viewer: Fix HTML files with private entities displaying an
    artifact at the top
  - Edit book: Check book: Show an error for HTML files with
    private entities
  - EPUB3 Input: Fix titlepage being referred to in the nav causing
    two titlepage entries in the final book.
  - Fix throbber buttons not being perfectly aligned inside
    toolbars
  - Quickview: Fix sizes not being displayed.
  - Edit book: Compress images tool: Do not mark the book as
    changed if no images could be further compressed.
  - Book list split-view: Fix horizontal scroll position of split
    view can change when changing the current column in one view.
  - Fix Bookeen Saga not being recognized on macOS/Linux.
  - Edit metadata dialog: Fix undo last trim not working for
    automatic trims.
  - Content server: Fix series field blank in Italian translation
  - BeautifulSoup: Port fix from upstream for outputting bare
    ampersands in strings.
  - calibredb add: Run the input plugins before reading metadata
    instead of after.</changelog>
  <changelog author="ecsos@opensuse.org" date="1527336000">- update to 3.24.1
  - Version 3.24.1 fixes a regression in the 3.24 in the editor
    that caused syncing between the editor and the Preview
    panel/Live CSS panel to not work correctly</changelog>
  <changelog author="ecsos@opensuse.org" date="1527508800">- update to 3.24.2
  - Version 3.24.2 fixes a bug in the new EPUB 3 output
    functionality that prevented conversion of non-EPUB 3 books
    to EPUB 3</changelog>
  <changelog author="ecsos@opensuse.org" date="1527854400">- update to 3.25.0
  New Features
  - Kobo driver: Support the new Clara HD
  - PDF Output: Add an option to use page margins from the input
    document, specified via @page CSS rules.
  Bug Fixes
  - Fix option to "show text under buttons only if there is
    enough space" not working well with the option to use
    "two lines for the text under the buttons".
  - Update notification: When both calibre and plugin updates are
    available and the user updates only the plugins, fix the
    restart calibre button not working.
  - E-book viewer: Fix printing of comics (cbz/cbr files) not
    working.
  - EPUB3 Input: Fix Table of Contents not being recognized for
    some EPUB 3 books that placed their nav document in-side
    a sub-folder.</changelog>
  <changelog author="ecsos@opensuse.org" date="1529064000">- update to 3.26.1
  New Features
  - Book list: Allow drag and drop of books onto other books to
    merge the book records.
  - Check Book: External link checker: Also check HTML anchors
    (the part after the # in the link). Can be turned off via
    a checkbox at the bottom of the link checker window.
  - Edit Book: Preview panel: Show previews when editing SVG files
  - Edit book: When downloading external resources, also convert
    data URLs into files.
  - E-book viewer: When the controls are hidden show the progress
    in the window title.
  - Library Quick switch menu: Highlight the previously switched
    from library in bold.
  Bug Fixes
  - PDF Input: Fix a regression in 3.24 that caused conversion of
    PDF to be significantly worse.
  - E-book viewer: Fix very slow loading for HTML files with
    very many images on Linux.
  - Content server: Fix a regression in 3.14 that removed
    the separator between books in the detailed list view mode.
  - Edit book: Fix SVG files not being beautified by the Beautify
    all files tool
  - Edit book: Fix searching in selected files not searching SVG
    files
  - Fix Tweaks help string not being displayed translated
  - Edit metadata dialog: Fix distorted rendering of some labels
    in the custom metadata tab in rare circumstances.
  - version 3.26.1 prevents dropping of a book onto itself from
    triggering the merge dialog, which should reduce accidental
    triggers</changelog>
  <changelog author="ecsos@opensuse.org" date="1530878400">- update to 3.27.1
  New Features
  - Content server: Allow conversion of books
  - Kobo driver: Add support for new firmware
  - Bulk metadata edit dialog: Add an "edit tags" button for tags
    like custom columns.
  - Add an option in Preferences-&gt;Look &amp; feel to disable the new
    'drag and drop to merge books feature'
  - E-book viewer: Add a shortcut (Ctrl+Alt+B) to toggle the
    bookmarks panel.
  - Edit book: Add a copy to clipboard button on the various report
    dialogs
  - Edit book: Add a shortcut (Ctrl+Alt+Down) to edit the next file
    in the book spine.
  - calibre-smtp: Verify relay server TLS certificates by default.
    New option --dont-verify-server-certificate to restore old
    behavior.
  Bug Fixes
  - Version 3.27.1 fixes a build error in 3.27.0 that caused
    calibre not to start on macOS older than High Sierra
  - Conversion: Fix a regression in the previous release that
    caused conversion of EPUB 3 to EPUB 3 to fail.
  - Fix detection of the Bookeen NolimbookXL on macOS and Linux
  - Fix a regression that broke the fetching of annotations from
    Kobo and Kindle devices.
  - DOCX Input: Fix failure to convert some DOCX files that use
    Symbol fonts.
  - When exporting very large libraries fix failures due to busy
    errors.
  - Fix commas not working in identifiers that are transformed
    to URLs via rules.
  - Review downloaded metadata: Fix cancel button on the confirm
    reject all dialog not working.
  - Kindle Fire driver: Send books by default to the "kindle"
    folder instead of the "Books" folder to workaround a change in
    the Fire firmware that causes the Kindle to not recognize files
    in the Books folder.
  - Linux installer: Also fix the execute bits in the umask if the
    user runs the installer with a umask that prevents files from
    being world executable.
  - Sort the entries in the show column menu alphabetically.</changelog>
  <changelog author="cornelis@solcon.nl" date="1535112000">- Fixes for boo#1105930:
  * Added update_kobo_driver.patch to add support for Kobo firmware
    4.10.11586
  * Added update_kindle_driver.patch to add support for cover images
    for the KFX format</changelog>
</package>
<package pkgid="124ecab9b0cfe1a450a78efb498e8675438a46c6042cd9cef364eec5c1e2d6b4" name="calibre" arch="x86_64">
  <version epoch="0" ver="3.27.1" rel="lp150.3.9.1"/>
  <changelog author="ecsos@opensuse.org" date="1515153600">- update to 3.15.0
  New Features
  - Browser viewer: Allow customizing what information is displayed
    in the header and footer areas. Access Preferences from the
    viewer controls to change.
  - Add support for MTP devices on FreeBSD
  - ToC editor: Add more case changing operations to the right
    click menu
  - Content server: Redirect pre 2.x book URLs to new 3.x URLs via
    a JavaScript redirect
  - Content server: Allow opening entries in the book list in a new
    tab via middle click/right click
  - Add a tweak in Preferences-&gt;Tweaks to exclude some fields when
    using the Edit metadata-&gt;Copy/paste actions
  - Linux: Allow using calibre-tray.png in the calibre resources
    folder to override the system tray icon.
  Bug Fixes
  - Browser viewer: Fix goto next/previous section actions not
    working when the sections are in different individual HTML
    files.
  - Edit book/Book polishing: When compressing images and the
    compressed image is larger thant he original, use the original
    image.
  - PDF input: Fix conversion of multi-level PDF Outline causing
    duplicate entries in the Table of Contents.
  - Edit book: Fix incorrect EPUB 3 declarations being added to the
    OPF file when adding covers to an EPUB 2 book
  - Edit book: Fix backspace key un-indenting instead of deleting
    even when text is selected if the cursor is at the start of the
    line
  - Tag browser: Fix position not bing preserved when deleting
    books.
  - Edit Book: Use the cache directory rather than the temp
    directory to store working files. Hopefully prevents temp file
    cleaners from destroying books.
  - EPUB input: Handle books that erroneously set the mimetype for
    font files to text/plain
  - AZW3 input: Do not fail to process files with invalid internal
    flow references.
  - When updating plugins, do not show the dialog asking which
    toolbar to put the plugin, even if the user has removed the
    plugin for all toolbars.
  - Content server: Fix using the Clear logs button preventing the
    server from restarting until calibre itself is restarted.</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Drop useless build requirement on poppler to make it build again.
  Such a package doesn't exist since ages, libpoppler provided
  "poppler" until recently but there should be no need to
  explicitly BuildRequire that anyway.</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- do not require liberation2-fonts, it is dead [bsc#1077375]
  [rh#856239]</changelog>
  <changelog author="ecsos@opensuse.org" date="1517054400">- update to 3.16.0
  New Features
  - Content server: Allow adding and deleting of books using
    the web interface
  - Allow removing the close button from tabs in the Virtual
    library tab bar. Right click the tab bar and choose 'Lock tabs'
    to do that.
  - calibredb export: Add --progress option
  - Bulk metadata editing: Show progress bars to track progress of
    the operation
  - Content server: When downloading books from the server send
    both the ASCII and full Unicode file names. Browsers that
    support RFC 6266 can make use of the unicode file name.
  - Content server: Show a warning popup on Apple devices when
    the user tries to search with an expression containing smart
    quotes, since Apple devices now automatically replace quotes
    with smart quotes when typing.
  Bug Fixes
  - DOCX Output: Fix links without anchors in the input document
    not being converted correctly.
  - calibredb: Fix a regression that broke reading of passwords
    from stdin
  - Edit book: Fix an error when saving files with filenames that
    cannot be encoded using the system codepage on Windows
  - Pasting metadata: Fix excluding title and authors not working</changelog>
  <changelog author="ecsos@opensuse.org" date="1518177600">- update to 3.17.0
  New Features
  - Allow splitting the book list, by right clicking on the column
    headers and choosing 'Split the book list'
  - Store temporary files used by the editor and viewer in the
    cache directory to try to prevent errors caused by
    'file cleaner' programs deleting temporary files still in use
  Bug Fixes
  - EPUB3 Input: Fix HTML covers and titlepages that are marked
    using the deprecated element not being recognized.
  - Bulk metadata edit: Fix regression in 3.13 that made it
    impossible to use the Force numbering checkbox for custom
    series
  - Conversion: Fix the valign attribute on tags not being honored
  - E-book viewer: Fix the 'Copy' keyboard shortcut/context menu
    action not working on some Windows systems
  - E-book viewer: Make the semi-transparent background for viewing
    metadata a little more opaque.</changelog>
  <changelog author="ecsos@opensuse.org" date="1519473600">- update to 3.18.0
  New Features
  - Browser viewer: Allow long tapping a word to look it up in
    a dictionary or search the internet for it.
  Bug Fixes
  - Conversion: Handle the deprecated type attribute on tags.
  - Fix metadata download from amazon stopped working because of
    a website change
  - Fix re-ordering of columns causing split book splitter state
    not being restored on restart
  - Fix errors when using strftime with unicode strings on
    non-utf-8 windows systems.
  - Split book view: Fix vertical scroll position of the two views
    getting out of sync after doing some searches.
  - Fix some edit widget appearing in the wrong place when editing
    in the right hand panel of the new split book list.
  - Portable build: Fix cache directory not always being
    auto-created
  - Workaround for Qt 5.10 on Linux resetting the global font,
    preventing custom interface font settings from working</changelog>
  <changelog author="ecsos@opensuse.org" date="1520596800">- update to 3.19.0
  New Features
  - Driver for the new PocketBook 740
  - Allow using relative URLs in comments type metadata.
    The relative URLs are interpreted relative to the book folder
    in the calibre library
  - Edit book: Reports: Do not show characters from the HTML markup
    in the characters report.
  - Allow adding the Virtual library button to any toolbar/menu via
    Preferences-&gt;Toolbars &amp; menus
  Bug Fixes
  - Server: Fix server becoming unresponsive if a client sends
    invalid SSL data at exactly the right moment
  - Conversion heuristics: Make unwrapping recognize Georgian
    letters as well.
  - Make de-serialization of stored conversion options safe against
    maliciously crafted input
  - E-book viewer: Change the file format used to import/export
    bookmarks to use JSON. This prevents malicious bookmarks files
    from causing code execution.
  - Make the history completion for the search and replace edit box
    case-sensitive.
  - PDF Output: When the input document contains multiple anchors
    with the same value, use the first anchor rather than the last.
    This follows browser behavior.
  - FB2 Input: Add to content to silence the useless epubcheck</changelog>
  <changelog author="ecsos@opensuse.org" date="1521892800">- update to 3.20.0
  New Features
  - Content server: Allow editing the metadata of books from the
    book details page
  - Kobo driver: Recognize Kobo Aura 2 with new firmware
    (4.6.10188)
  Bug Fixes
  - When reading metadata from HTML also recognize as being
    comments</changelog>
  <changelog author="ecsos@opensuse.org" date="1523188800">- update to 3.21.0
  New Features
  - Browser viewer: Allow showing the time left in the current
    chapter/book in the header and footer areas of the book.
  - Manage tags dialog: Searching now shows all matching tags and
    there is an undo button to undo changes.
  - Add an output profile for the Kindle Oasis 2017
  Bug Fixes
  - Content server: Fix adding/deleting books and editing metadata
    not updating the main calibre book list automatically.
  - Viewer: When doing a dictionary lookup, remove soft hyphens
    from the word, if any are present.
  - Edit metadata dialog: Fix tab order for buttons to the left
    of the title and author
  - Trim cover dialog: Remove the redundant Trim &amp; OK button,
    instead have the OK button trim automatically if there is
    a selection.
  - Update Amazon metadata plugin for a website change
  - Content server: Fix translations not being updated without
    clearing the browser cache
  - Content server: Fix switching from translations to no
    translations not working
  - Content server: When updating interface data do not transmit
    translations if they have not been changed. Saves ~30-60KB
    bandwidth when using non-English interface language.</changelog>
  <changelog author="ecsos@opensuse.org" date="1524312000">- update to 3.22.1
  New Features
  - Edit book: Add a tool to upgrade books from EPUB 2 to EPUB 3
    (Tools-&gt;Upgrade book internals)
  - Add support for the FBZ format (zipped FB2)
  - Kindle driver: Change the height of generated thumbnails to
    500px, needed for the Oasis 2017
  - Edit book: When bulk renaming files add an option to rename by
    the order in which the files appear in the book.
  - Polishing: Recognize titlepages that are marked as covers in
    the EPUB 3 landmarks section
  - Edit Book: Automatically updated the modified timestamp in the
    OPF when saving EPUB 3 books.
  - Remove the ISBNDB metadata plugin as ISBNDB no longer allows
    free lookups.
  Bug Fixes
  - EPUB 3 metadata: If the book defines more than one author sort
    value for an author use the first instead of the last
  - Check Book: Dont warn for nav document not in spine in EPUB 3
    books
  - Linux installer: Fix umask question not working with the
    recommended install command because stdin is a pipe
  - Browser viewer: Show an error message when trying to use the
    Sync function without being logged in
  - When setting cover from a PDF file and the user clicks cancel,
    do not delete the existing cover</changelog>
  <changelog author="ecsos@opensuse.org" date="1525435200">- update to 3.23.0
  New Features
  - Kobo driver: Add support for new firmware
  - Book polishing: Add an option to upgrade EPUB 2 to EPUB 3
  - DOCX Input: Convert text written with dingbat fonts such as
    Wingding or Symbol correctly.
  - When choosing the page to use as a cover from a PDF file,
    add a button to render more pages, if needed
  - TXT Input: Add support for embedded images that use relative
    URLs when converting markdown or textile. Note that this will
    only work if you are - converting using the ebook-convert
    command line tool as the main calibre program moves files
    around, so relative references will not be valid.
  - Edit book: Insert special character: Add an option to select
    if searching should match all words or any of the words
  - Edit book: Insert special character: When searching by name
    match prefixes in addition to whole words. So you can now type
    "horiz" to match "horizontal".
  - Linux installer: Simplify the command used to install calibre
    and add support for Ubuntu 18.04 which is missing a default
    python executable
  - When upgrading EPUB 2 to EPUB 3 add the 'epub' namespace to
    all HTML files, for convenience.
  Bug Fixes
  - Edit Book: Fix an error caused by a landmark entry in EPUB 3
    files that has an tag without an href attribute.
  - Edit Book: Fix names for some control characters not being
    displayed in the status bar
  - Searching: Fix A (B) not being treated as A AND (B)
  - Kobo driver: Add an option to not maintain bookmarks/read
    status/etc. when resending a book already on the device.
  - DOCX Input: Ignore complex script font styles. Fixes conversion
    of documents that specify only complex script styles and no
    simple script styles.
  - When updating EPUB 2 to EPUB 3 ensure only a single dc:date
    element is present in the OPF</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- Drop dependency on python-pypdf as we remove this package
  * The calibre does not depend on it since 2014 anyway</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signature provided upstream
- Added source to calibre.keyring, which contains the key from the author
- Used https for all URLs in the specfile</changelog>
  <changelog author="ecsos@opensuse.org" date="1527249600">- update to 3.24.0
  New Features
  - Conversion: EPUB Output: Add an option to output EPUB 3 files.
  - PDF Output: Add an option to break long words at the ends of
    lines.
  - PDF Output: Allow using images in the header/footer templates
  - Add an option to use two lines for the text under the toolbar
    button in Preferences-&gt;Look &amp; feel
  - Edit book: Spell check: Update the number of misspelled
    words/total words displayed when correcting/ignoring words.
  - Edit book: Fix HTML: Automatically resolve private entities
  - Improve formatting of help in Preferences-&gt;Tweaks
  - ToC Editor: Allow undo for renaming single items as well.
  Bug Fixes
  - PDF Output: Strip zero-width space characters from the text as
    their presence prevents searching from working
  - DOCX Output: Fix tags not being converted correctly.
  - DOCX Input: Fix incorrect conversion of a framed block that
    contains a list.
  - Conversion: Fix private entities that use the same name as an
    HTML entity not being handled correctly
  - Viewer: Fix HTML files with private entities displaying an
    artifact at the top
  - Edit book: Check book: Show an error for HTML files with
    private entities
  - EPUB3 Input: Fix titlepage being referred to in the nav causing
    two titlepage entries in the final book.
  - Fix throbber buttons not being perfectly aligned inside
    toolbars
  - Quickview: Fix sizes not being displayed.
  - Edit book: Compress images tool: Do not mark the book as
    changed if no images could be further compressed.
  - Book list split-view: Fix horizontal scroll position of split
    view can change when changing the current column in one view.
  - Fix Bookeen Saga not being recognized on macOS/Linux.
  - Edit metadata dialog: Fix undo last trim not working for
    automatic trims.
  - Content server: Fix series field blank in Italian translation
  - BeautifulSoup: Port fix from upstream for outputting bare
    ampersands in strings.
  - calibredb add: Run the input plugins before reading metadata
    instead of after.</changelog>
  <changelog author="ecsos@opensuse.org" date="1527336000">- update to 3.24.1
  - Version 3.24.1 fixes a regression in the 3.24 in the editor
    that caused syncing between the editor and the Preview
    panel/Live CSS panel to not work correctly</changelog>
  <changelog author="ecsos@opensuse.org" date="1527508800">- update to 3.24.2
  - Version 3.24.2 fixes a bug in the new EPUB 3 output
    functionality that prevented conversion of non-EPUB 3 books
    to EPUB 3</changelog>
  <changelog author="ecsos@opensuse.org" date="1527854400">- update to 3.25.0
  New Features
  - Kobo driver: Support the new Clara HD
  - PDF Output: Add an option to use page margins from the input
    document, specified via @page CSS rules.
  Bug Fixes
  - Fix option to "show text under buttons only if there is
    enough space" not working well with the option to use
    "two lines for the text under the buttons".
  - Update notification: When both calibre and plugin updates are
    available and the user updates only the plugins, fix the
    restart calibre button not working.
  - E-book viewer: Fix printing of comics (cbz/cbr files) not
    working.
  - EPUB3 Input: Fix Table of Contents not being recognized for
    some EPUB 3 books that placed their nav document in-side
    a sub-folder.</changelog>
  <changelog author="ecsos@opensuse.org" date="1529064000">- update to 3.26.1
  New Features
  - Book list: Allow drag and drop of books onto other books to
    merge the book records.
  - Check Book: External link checker: Also check HTML anchors
    (the part after the # in the link). Can be turned off via
    a checkbox at the bottom of the link checker window.
  - Edit Book: Preview panel: Show previews when editing SVG files
  - Edit book: When downloading external resources, also convert
    data URLs into files.
  - E-book viewer: When the controls are hidden show the progress
    in the window title.
  - Library Quick switch menu: Highlight the previously switched
    from library in bold.
  Bug Fixes
  - PDF Input: Fix a regression in 3.24 that caused conversion of
    PDF to be significantly worse.
  - E-book viewer: Fix very slow loading for HTML files with
    very many images on Linux.
  - Content server: Fix a regression in 3.14 that removed
    the separator between books in the detailed list view mode.
  - Edit book: Fix SVG files not being beautified by the Beautify
    all files tool
  - Edit book: Fix searching in selected files not searching SVG
    files
  - Fix Tweaks help string not being displayed translated
  - Edit metadata dialog: Fix distorted rendering of some labels
    in the custom metadata tab in rare circumstances.
  - version 3.26.1 prevents dropping of a book onto itself from
    triggering the merge dialog, which should reduce accidental
    triggers</changelog>
  <changelog author="ecsos@opensuse.org" date="1530878400">- update to 3.27.1
  New Features
  - Content server: Allow conversion of books
  - Kobo driver: Add support for new firmware
  - Bulk metadata edit dialog: Add an "edit tags" button for tags
    like custom columns.
  - Add an option in Preferences-&gt;Look &amp; feel to disable the new
    'drag and drop to merge books feature'
  - E-book viewer: Add a shortcut (Ctrl+Alt+B) to toggle the
    bookmarks panel.
  - Edit book: Add a copy to clipboard button on the various report
    dialogs
  - Edit book: Add a shortcut (Ctrl+Alt+Down) to edit the next file
    in the book spine.
  - calibre-smtp: Verify relay server TLS certificates by default.
    New option --dont-verify-server-certificate to restore old
    behavior.
  Bug Fixes
  - Version 3.27.1 fixes a build error in 3.27.0 that caused
    calibre not to start on macOS older than High Sierra
  - Conversion: Fix a regression in the previous release that
    caused conversion of EPUB 3 to EPUB 3 to fail.
  - Fix detection of the Bookeen NolimbookXL on macOS and Linux
  - Fix a regression that broke the fetching of annotations from
    Kobo and Kindle devices.
  - DOCX Input: Fix failure to convert some DOCX files that use
    Symbol fonts.
  - When exporting very large libraries fix failures due to busy
    errors.
  - Fix commas not working in identifiers that are transformed
    to URLs via rules.
  - Review downloaded metadata: Fix cancel button on the confirm
    reject all dialog not working.
  - Kindle Fire driver: Send books by default to the "kindle"
    folder instead of the "Books" folder to workaround a change in
    the Fire firmware that causes the Kindle to not recognize files
    in the Books folder.
  - Linux installer: Also fix the execute bits in the umask if the
    user runs the installer with a umask that prevents files from
    being world executable.
  - Sort the entries in the show column menu alphabetically.</changelog>
  <changelog author="cornelis@solcon.nl" date="1535112000">- Fixes for boo#1105930:
  * Added update_kobo_driver.patch to add support for Kobo firmware
    4.10.11586
  * Added update_kindle_driver.patch to add support for cover images
    for the KFX format</changelog>
</package>
<package pkgid="1b57226b50e534b0935fda62af2b8033743e5ce0ae825aaa27a822e0bce45dde" name="cargo" arch="src">
  <version epoch="0" ver="0.26.0" rel="lp150.2.3.4"/>
  <changelog author="luke.nukem.jones@gmail.com" date="1489752000">- Update to 0.17.0
  * [The `cargo check` command does a type check of a project without
  building it][cargo/3296]
  * [crates.io will display CI badges from Travis and AppVeyor, if
  specified in Cargo.toml][cargo/3546]
  * [crates.io will display categories listed in Cargo.toml][cargo/3301]
  * [Compilation profiles accept integer values for `debug`, in addition
  to `true` and `false`. These are passed to `rustc` as the value to
  `-C debuginfo`][cargo/3534]
  * [Implement `cargo --version --verbose`][cargo/3604]
  * [All builds now output 'dep-info' build dependencies compatible with
  make and ninja][cargo/3557]
  * [Build all workspace members with `build --all`][cargo/3511]
  * [Document all workspace members with `doc --all`][cargo/3515]
  * [Path deps outside workspace are not members][cargo/3443]</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1489752001">- Remove reproducible.patch - has been upstreamed.</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1493380800">- Update to 0.18.0
  * [The `cargo check` command does a type check of a project without
  building it][cargo/3296]
  * [crates.io will display CI badges from Travis and AppVeyor, if
  specified in Cargo.toml][cargo/3546]
  * [crates.io will display categories listed in Cargo.toml][cargo/3301]
  * [Compilation profiles accept integer values for `debug`, in addition
  to `true` and `false`. These are passed to `rustc` as the value to
  `-C debuginfo`][cargo/3534]
  * [Implement `cargo --version --verbose`][cargo/3604]
  * [All builds now output 'dep-info' build dependencies compatible with
  make and ninja][cargo/3557]
  * [Build all workspace members with `build --all`][cargo/3511]
  * [Document all workspace members with `doc --all`][cargo/3515]
  * [Path deps outside workspace are not members][cargo/3443]
- Restrict version required for building</changelog>
  <changelog author="mimi.vx@gmail.com" date="1496923200">- require rust
- use system libgit2
- use pkgconfig deps</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1497009600">- Update to version 0.19.0
    + [Added partial Pijul support][cargo/3842] Pijul is a version control system in Rust.
    You can now create new cargo projects with Pijul using `cargo new --vcs pijul`
    + [Now always emits build script warnings for crates that fail to build][cargo/3847]
    + [Added Android build support][cargo/3885]
    + [Added `--bins` and `--tests` flags][cargo/3901] now you can build all programs
    of a certain type, for example `cargo build --bins` will build all
    binaries.
    + [Added support for haiku][cargo/3952]</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1504526400">- Cleans up rust_triple and adds rust compiler args
- Removes i586 from buildable targets</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1504526401">- Update to 0.21.0
  + [Cargo API token location moved from `~/.cargo/config` to
    `~/.cargo/credentials`.][cargo/3978]
  + [Cargo will now build `main.rs` binaries that are in sub-directories of
    `src/bin`.][cargo/4214] ie. Having `src/bin/server/main.rs` and
    `src/bin/client/main.rs` generates `target/debug/server` and `target/debug/client`
  + [You can now specify version of a binary when installed through
    `cargo install` using `--vers`.][cargo/4229]
  + [Added `--no-fail-fast` flag to cargo to run all benchmarks regardless of
    failure.][cargo/4248]
  + [Changed the convention around which file is the crate root.][cargo/4259]
  + [The `include`/`exclude` property in `Cargo.toml` now accepts gitignore paths
    instead of glob patterns][cargo/4270]. Glob patterns are now deprecated.
- Version 0.20.0
  + [Build scripts can now add environment variables to the environment
    the crate is being compiled in.
    Example: `println!("cargo:rustc-env=FOO=bar");`][cargo/3929]
  + [Subcommands now replace the current process rather than spawning a new
    child process][cargo/3970]
  + [Workspace members can now accept glob file patterns][cargo/3979]
  + [Added `--all` flag to the `cargo bench` subcommand to run benchmarks of all
    the members in a given workspace.][cargo/3988]
  + [Updated `libssh2-sys` to 0.2.6][cargo/4008]
  + [Target directory path is now in the cargo metadata][cargo/4022]
  + [Cargo no longer checks out a local working directory for the
    crates.io index][cargo/4026] This should provide smaller file size for the
    registry, and improve cloning times, especially on Windows machines.
  + [Added an `--exclude` option for excluding certain packages when using the
  ` --all` option][cargo/4031]
  + [Cargo will now automatically retry when receiving a 5xx error
    from crates.io][cargo/4032]
  + [The `--features` option now accepts multiple comma or space
    delimited values.][cargo/4084]
  + [Added support for custom target specific runners][cargo/3954]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1505908800">- adapt cargo bootstrap version to 0.20 and gitlib2 requirement to 0.23</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1508241600">- Restrict x86 version to build i686 only</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1508241601">- Update to 0.22.0
  + You can now call cargo install with multiple package names
  + Cargo commands inside a virtual workspace will now implicitly pass --all
  + Added a [patch] section to Cargo.toml to handle prepublication dependencies RFC 1969
  + include &amp; exclude fields in Cargo.toml now accept gitignore like patterns
  + Added the --all-targets option
  + Using required dependencies as a feature is now deprecated and emits a warning</changelog>
  <changelog author="mmanu84@outlook.de" date="1511179200">- adapt cargo bootstrap version to 0.22
- adapt rustc bootstrap version to 1.21
- add armv6 support</changelog>
  <changelog author="mmanu84@outlook.de" date="1511524800">- adapt cargo bootstrap version to 0.23
- adapt rustc bootstrap version to 1.22.1</changelog>
  <changelog author="jones_ld@protonmail.com" date="1515067200">- update to 0.24.0
  + Cargo now supports alternative registries[cargo/4506]
  + Cargo now supports uninstallation of multiple packages[cargo/4561]
    eg. `cargo uninstall foo bar` uninstalls `foo` and `bar`.
  + Added unit test checking to `cargo check`[cargo/4592]
  + Cargo now lets you install a specific version
    using `cargo install --version`[cargo/4637]
- version 0.23.0
  + Cargo will now build multi file examples in subdirectories of the `examples`
    folder that have a `main.rs` file.[cargo/4496]
  + Changed `[root]` to `[package]` in `Cargo.lock`[cargo/4571] Packages with
    the old format will continue to work and can be updated with `cargo update`.
  + Now supports vendoring git repositories[cargo/3992]</changelog>
  <changelog author="mmanu84@outlook.de" date="1516104000">- adapt cargo bootstrap version to 0.24</changelog>
  <changelog author="coolo@suse.com" date="1519128000">- add update-config-guess.patch to update config.* from GNU to
  support riscv64 without rpm patching it - as the patch also
  updates the checksums while rpm does not</changelog>
  <changelog author="mmanu84@outlook.de" date="1519819200">- adapt cargo bootstrap version to 0.25.0
- adapt rustc bootstrap version to 1.24.0</changelog>
  <changelog author="mmanu84@outlook.de" date="1521806400">- adapt rustc to 1.24.1</changelog>
  <changelog author="mmanu84@outlook.de" date="1525176000">- update to 0.25.0
  + Added a workspace.default-members config that overrides implied --all in virtual workspaces.
  + Enable incremental by default on development builds. Also added configuration keys to Cargo.toml
    and .cargo/config to disable on a per-project or global basis respectively.
- Patch disabled
  * update-config-guess.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1525953600">- Update to version 0.26.0:
  + No longer removes rust or rs prefixs/suffixs.
  + Now defaults to creating a binary crate, instead of a library
    crate.</changelog>
  <changelog author="mmanu84@outlook.de" date="1526040000">- adapt cargo bootstrap version to 0.26.0
- adapt rustc bootstrap version to 1.25.0
- adapt rustc to 1.25.0</changelog>
</package>
<package pkgid="ff8ff176a300c5efa0321b6067b022eb1dc1c5160b51d1247e7cca308f545797" name="cargo" arch="x86_64">
  <version epoch="0" ver="0.26.0" rel="lp150.2.3.4"/>
  <changelog author="luke.nukem.jones@gmail.com" date="1489752000">- Update to 0.17.0
  * [The `cargo check` command does a type check of a project without
  building it][cargo/3296]
  * [crates.io will display CI badges from Travis and AppVeyor, if
  specified in Cargo.toml][cargo/3546]
  * [crates.io will display categories listed in Cargo.toml][cargo/3301]
  * [Compilation profiles accept integer values for `debug`, in addition
  to `true` and `false`. These are passed to `rustc` as the value to
  `-C debuginfo`][cargo/3534]
  * [Implement `cargo --version --verbose`][cargo/3604]
  * [All builds now output 'dep-info' build dependencies compatible with
  make and ninja][cargo/3557]
  * [Build all workspace members with `build --all`][cargo/3511]
  * [Document all workspace members with `doc --all`][cargo/3515]
  * [Path deps outside workspace are not members][cargo/3443]</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1489752001">- Remove reproducible.patch - has been upstreamed.</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1493380800">- Update to 0.18.0
  * [The `cargo check` command does a type check of a project without
  building it][cargo/3296]
  * [crates.io will display CI badges from Travis and AppVeyor, if
  specified in Cargo.toml][cargo/3546]
  * [crates.io will display categories listed in Cargo.toml][cargo/3301]
  * [Compilation profiles accept integer values for `debug`, in addition
  to `true` and `false`. These are passed to `rustc` as the value to
  `-C debuginfo`][cargo/3534]
  * [Implement `cargo --version --verbose`][cargo/3604]
  * [All builds now output 'dep-info' build dependencies compatible with
  make and ninja][cargo/3557]
  * [Build all workspace members with `build --all`][cargo/3511]
  * [Document all workspace members with `doc --all`][cargo/3515]
  * [Path deps outside workspace are not members][cargo/3443]
- Restrict version required for building</changelog>
  <changelog author="mimi.vx@gmail.com" date="1496923200">- require rust
- use system libgit2
- use pkgconfig deps</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1497009600">- Update to version 0.19.0
    + [Added partial Pijul support][cargo/3842] Pijul is a version control system in Rust.
    You can now create new cargo projects with Pijul using `cargo new --vcs pijul`
    + [Now always emits build script warnings for crates that fail to build][cargo/3847]
    + [Added Android build support][cargo/3885]
    + [Added `--bins` and `--tests` flags][cargo/3901] now you can build all programs
    of a certain type, for example `cargo build --bins` will build all
    binaries.
    + [Added support for haiku][cargo/3952]</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1504526400">- Cleans up rust_triple and adds rust compiler args
- Removes i586 from buildable targets</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1504526401">- Update to 0.21.0
  + [Cargo API token location moved from `~/.cargo/config` to
    `~/.cargo/credentials`.][cargo/3978]
  + [Cargo will now build `main.rs` binaries that are in sub-directories of
    `src/bin`.][cargo/4214] ie. Having `src/bin/server/main.rs` and
    `src/bin/client/main.rs` generates `target/debug/server` and `target/debug/client`
  + [You can now specify version of a binary when installed through
    `cargo install` using `--vers`.][cargo/4229]
  + [Added `--no-fail-fast` flag to cargo to run all benchmarks regardless of
    failure.][cargo/4248]
  + [Changed the convention around which file is the crate root.][cargo/4259]
  + [The `include`/`exclude` property in `Cargo.toml` now accepts gitignore paths
    instead of glob patterns][cargo/4270]. Glob patterns are now deprecated.
- Version 0.20.0
  + [Build scripts can now add environment variables to the environment
    the crate is being compiled in.
    Example: `println!("cargo:rustc-env=FOO=bar");`][cargo/3929]
  + [Subcommands now replace the current process rather than spawning a new
    child process][cargo/3970]
  + [Workspace members can now accept glob file patterns][cargo/3979]
  + [Added `--all` flag to the `cargo bench` subcommand to run benchmarks of all
    the members in a given workspace.][cargo/3988]
  + [Updated `libssh2-sys` to 0.2.6][cargo/4008]
  + [Target directory path is now in the cargo metadata][cargo/4022]
  + [Cargo no longer checks out a local working directory for the
    crates.io index][cargo/4026] This should provide smaller file size for the
    registry, and improve cloning times, especially on Windows machines.
  + [Added an `--exclude` option for excluding certain packages when using the
  ` --all` option][cargo/4031]
  + [Cargo will now automatically retry when receiving a 5xx error
    from crates.io][cargo/4032]
  + [The `--features` option now accepts multiple comma or space
    delimited values.][cargo/4084]
  + [Added support for custom target specific runners][cargo/3954]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1505908800">- adapt cargo bootstrap version to 0.20 and gitlib2 requirement to 0.23</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1508241600">- Restrict x86 version to build i686 only</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1508241601">- Update to 0.22.0
  + You can now call cargo install with multiple package names
  + Cargo commands inside a virtual workspace will now implicitly pass --all
  + Added a [patch] section to Cargo.toml to handle prepublication dependencies RFC 1969
  + include &amp; exclude fields in Cargo.toml now accept gitignore like patterns
  + Added the --all-targets option
  + Using required dependencies as a feature is now deprecated and emits a warning</changelog>
  <changelog author="mmanu84@outlook.de" date="1511179200">- adapt cargo bootstrap version to 0.22
- adapt rustc bootstrap version to 1.21
- add armv6 support</changelog>
  <changelog author="mmanu84@outlook.de" date="1511524800">- adapt cargo bootstrap version to 0.23
- adapt rustc bootstrap version to 1.22.1</changelog>
  <changelog author="jones_ld@protonmail.com" date="1515067200">- update to 0.24.0
  + Cargo now supports alternative registries[cargo/4506]
  + Cargo now supports uninstallation of multiple packages[cargo/4561]
    eg. `cargo uninstall foo bar` uninstalls `foo` and `bar`.
  + Added unit test checking to `cargo check`[cargo/4592]
  + Cargo now lets you install a specific version
    using `cargo install --version`[cargo/4637]
- version 0.23.0
  + Cargo will now build multi file examples in subdirectories of the `examples`
    folder that have a `main.rs` file.[cargo/4496]
  + Changed `[root]` to `[package]` in `Cargo.lock`[cargo/4571] Packages with
    the old format will continue to work and can be updated with `cargo update`.
  + Now supports vendoring git repositories[cargo/3992]</changelog>
  <changelog author="mmanu84@outlook.de" date="1516104000">- adapt cargo bootstrap version to 0.24</changelog>
  <changelog author="coolo@suse.com" date="1519128000">- add update-config-guess.patch to update config.* from GNU to
  support riscv64 without rpm patching it - as the patch also
  updates the checksums while rpm does not</changelog>
  <changelog author="mmanu84@outlook.de" date="1519819200">- adapt cargo bootstrap version to 0.25.0
- adapt rustc bootstrap version to 1.24.0</changelog>
  <changelog author="mmanu84@outlook.de" date="1521806400">- adapt rustc to 1.24.1</changelog>
  <changelog author="mmanu84@outlook.de" date="1525176000">- update to 0.25.0
  + Added a workspace.default-members config that overrides implied --all in virtual workspaces.
  + Enable incremental by default on development builds. Also added configuration keys to Cargo.toml
    and .cargo/config to disable on a per-project or global basis respectively.
- Patch disabled
  * update-config-guess.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1525953600">- Update to version 0.26.0:
  + No longer removes rust or rs prefixs/suffixs.
  + Now defaults to creating a binary crate, instead of a library
    crate.</changelog>
  <changelog author="mmanu84@outlook.de" date="1526040000">- adapt cargo bootstrap version to 0.26.0
- adapt rustc bootstrap version to 1.25.0
- adapt rustc to 1.25.0</changelog>
</package>
<package pkgid="9e227cff0352a2fd2631b7c1a183daec56f7ed373965e1441bbd634e77319e0b" name="cdio-utils" arch="src">
  <version epoch="0" ver="0.94" rel="lp150.5.3.1"/>
  <changelog author="olh@suse.de" date="1231329600">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1249560000">- Updated to version 0.81:
  * license of manual now GFDL 1.2 or later
  * Nero image handling more complete.
  * ISRC query for image files.
  * Allow reading pregap of a track via get_track_pregap_lsn().
  * Fixes of iso9660 time setting/getting routines, making them
    reentrant.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="ro@suse.de" date="1272283200">- add build-ignore for libcdio-mini-devel</changelog>
  <changelog author="sagiben@gmail.com" date="1296388800">- Updated to version 0.82
- Upstream changes :
  * Remove all uses of CDIO_MIN_DRIVER,
  CDIO_MAX_DRIVER, CDIO_MIN_DEVICE_DRIVER or CDIO_MAX_DEVICE_DRIVER.
  * FreeBSD get_media_changed fixes
  * MingGW/Msys compilation issues
  * Add OS/2 driver
  * Cross compilations fixes and uclinix is like GNU/Linux
  * Numerous other bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1297166400">- Rename Shared Object package to libcdio12, conforming the
  libraries name.
- Adjust rpmlintrc to only ignore shared lib names of the -mini
  packages. This avoids missing shlib renames for the 'main'
  package.</changelog>
  <changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- one less _service file for factory</changelog>
  <changelog author="coolo@suse.com" date="1321185601">- add libtool as buildrequire</changelog>
  <changelog author="davejplater@gmail.com" date="1333713600">- Update to libcdio-0.83, removed need for libcdio-mini by adding
  linker library paths to sources in the spec file build section.
- Upstream changes:
  * Add retrieval SCSI sense reply from the most-recent MMC command.
  * Add exclusive read/write access for devices which is used for
  experimental writing/burning. Currently only on GNU/Linux and FreeBSD.
  * MMC bug fixes
  * FreeBSD drive list now shows empty drives.
  * Add ability to retrieve SCSI tuple for a name and/or fake one up for
  programs that wanto to cd-record compatible.
  * Tolerance for OS's without timezone in their struct tm (e.g. Solaris)
  added iso9660_set_{d,l}time_with_timezone
  * Add mmc_get_disk_erasable
  * Update MMC Feature Profile list, DVD Book types
  * Reduce range of seek in paranoia_seek to be int32_t
  * Remove some potential flaws found by Coverty's static analysis tool
  * Add ISRC track info to cd-info output.
  * Don't wrap-around volume adjustment for cdda-player.
  * Handle double-byte strings in CD-text
  * --no-header on cd-info omits copyright and warranty</changelog>
  <changelog author="davejplater@gmail.com" date="1334491200">- Update to 0.83.git from 14/04/2012 git head.
- libcdio-paranoia separated from libcdio due to license issues
  see bnc#756564</changelog>
  <changelog author="davejplater@gmail.com" date="1337342400">- Created seperate linked package cdio-utils to prevent cycles.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Change description to reflect the package content.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
</package>
<package pkgid="f5802d5d208923dc21d05b20418c100a84ecd6ced333402b0ae0ac4b25f3d652" name="cdio-utils" arch="x86_64">
  <version epoch="0" ver="0.94" rel="lp150.5.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1249560000">- Updated to version 0.81:
  * license of manual now GFDL 1.2 or later
  * Nero image handling more complete.
  * ISRC query for image files.
  * Allow reading pregap of a track via get_track_pregap_lsn().
  * Fixes of iso9660 time setting/getting routines, making them
    reentrant.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="ro@suse.de" date="1272283200">- add build-ignore for libcdio-mini-devel</changelog>
  <changelog author="sagiben@gmail.com" date="1296388800">- Updated to version 0.82
- Upstream changes :
  * Remove all uses of CDIO_MIN_DRIVER,
  CDIO_MAX_DRIVER, CDIO_MIN_DEVICE_DRIVER or CDIO_MAX_DEVICE_DRIVER.
  * FreeBSD get_media_changed fixes
  * MingGW/Msys compilation issues
  * Add OS/2 driver
  * Cross compilations fixes and uclinix is like GNU/Linux
  * Numerous other bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1297166400">- Rename Shared Object package to libcdio12, conforming the
  libraries name.
- Adjust rpmlintrc to only ignore shared lib names of the -mini
  packages. This avoids missing shlib renames for the 'main'
  package.</changelog>
  <changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- one less _service file for factory</changelog>
  <changelog author="coolo@suse.com" date="1321185601">- add libtool as buildrequire</changelog>
  <changelog author="davejplater@gmail.com" date="1333713600">- Update to libcdio-0.83, removed need for libcdio-mini by adding
  linker library paths to sources in the spec file build section.
- Upstream changes:
  * Add retrieval SCSI sense reply from the most-recent MMC command.
  * Add exclusive read/write access for devices which is used for
  experimental writing/burning. Currently only on GNU/Linux and FreeBSD.
  * MMC bug fixes
  * FreeBSD drive list now shows empty drives.
  * Add ability to retrieve SCSI tuple for a name and/or fake one up for
  programs that wanto to cd-record compatible.
  * Tolerance for OS's without timezone in their struct tm (e.g. Solaris)
  added iso9660_set_{d,l}time_with_timezone
  * Add mmc_get_disk_erasable
  * Update MMC Feature Profile list, DVD Book types
  * Reduce range of seek in paranoia_seek to be int32_t
  * Remove some potential flaws found by Coverty's static analysis tool
  * Add ISRC track info to cd-info output.
  * Don't wrap-around volume adjustment for cdda-player.
  * Handle double-byte strings in CD-text
  * --no-header on cd-info omits copyright and warranty</changelog>
  <changelog author="davejplater@gmail.com" date="1334491200">- Update to 0.83.git from 14/04/2012 git head.
- libcdio-paranoia separated from libcdio due to license issues
  see bnc#756564</changelog>
  <changelog author="davejplater@gmail.com" date="1337342400">- Created seperate linked package cdio-utils to prevent cycles.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Change description to reflect the package content.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
</package>
<package pkgid="aac8ff1c50a68ee333421807f0de0bf4d2d7d3855e6094065314579c613d491e" name="cgit" arch="src">
  <version epoch="0" ver="1.2.1" rel="lp150.2.3.1"/>
  <changelog author="zooey@hirschkaefer.de" date="1322481600">- Add patch cgit-fix-more-read_tree_recursive-invocations.diff:
    There are more incorrect invocations of read_tree_recursive(),
    one example can be seen when visiting one of the 'plain' links
    in the tree view (contents of the wrong file are shown).
    This time I did what I should have done last time and checked
    and adjusted all invocations of read_tree_recursive().</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="tiwai@suse.de" date="1349870400">- Fix VUL-0: specially-crafted commits can trigger a heap-based
  buffer overflow (CVE-2012-4465, bnc#783012)</changelog>
  <changelog author="tiwai@suse.de" date="1351512000">- cgit-CVE-2012-4548-fix.diff:
  Fix VUL-0: cgit: arbitrary code / command execution via
  improperly quoted arguments (CVE-2012-4548, bnc#787074)</changelog>
  <changelog author="tiwai@suse.de" date="1353412800">- updated to cgit-0.9.1:
  Enhancements:
  - path-selected submodule links
  - intelligent default branch guessing
  - /etc/mime.types lookup
  - gitweb.* and cgit.* git-config support
  - case insensitive sorting and age sorting
  - commit, repository, and section sorting
  - bold currently viewed page in pagination
  - support BSDs in makefile
  Security:
  - CVE-2012-4465: heap-buffer overflow in parsing.c
  - CVE-2012-4548: syntax highlighting command injection
  Bug Fixes:
  - transition maintainer to Jason Donenfeld (zx2c4)
  - download git snapshot from github instead of Lars' old server
  - css fixes
  - stablization of tests
  - more compatible default highlight script
  - suppress gzip timestamp so that tarballs only use tar timestamps
  - treat ctags as target in makefile
  - do not let global variables override certain local repo settings
  - print ampersand as proper html entity
  - use placeholder for empty commit subject
  - format diff view for addition and removal of files
  - point links at correct blob from ssdiff
- drop obsoleted patches
  cgit-CVE-2011-2711-fix.diff
  cgit-CVE-2012-4465-fix.diff
  cgit-CVE-2012-4548-fix.diff</changelog>
  <changelog author="vjt@openssl.it" date="1353412801">- BuildRequire xz</changelog>
  <changelog author="tiwai@suse.de" date="1373025600">- Fix VUL-0: cgit: remote file disclosure flaw (CVE-2013-2117,
  bnc#822166)</changelog>
  <changelog author="jengelh@inai.de" date="1412596800">- Remove ancient specfile tags/sections
- Enable parallel build</changelog>
  <changelog author="guillaume@opensuse.org" date="1416830400">- Fix css and logo path in cgitrc file (replace /git by /cgit)</changelog>
  <changelog author="jengelh@inai.de" date="1430740800">- Update to new upstream release 0.11.2
  * addition of a Lua scripting engine
  * fine-grained authentication support through the new Lua
  scripting system
  * support for the "rawdiff" command was added
  * sendfile() is now used when available (Linux systems) instead
  of a loop of read() and write(). This should significantly
  increase performance for high volume sites which make heavy use
  of the caching feature, as it saves copies to and from
  user-space.
  * Caching granularity is now improved with the introduction of
  the cache-snapshot-ttl option, which allows configuration of
  the ttl for tarball and zip snapshots of repositories.
  * When filtering in the index, make the sorting links point to
  the same filtered page of results
  * Take into account leading slashes when comptuing links
- Avoid double %setup (messes with quilt). Simplify filelist.
  %doc for man is implicit.
- Drop cgit-git-1.7.6_build_fix.patch,
  cgit-fix-print-tree.diff,
  cgit-fix-more-read_tree_recursive-invocations.diff,
  cgit-CVE-2013-2117-disallow-directory-traversal.patch
- Add signature for the git core tarball.</changelog>
  <changelog author="jengelh@inai.de" date="1433851200">- Update bundled git tarball to 2.4.3</changelog>
  <changelog author="jengelh@inai.de" date="1443096000">- Update bundled git tarball to 2.5.3</changelog>
  <changelog author="jengelh@inai.de" date="1444132800">- Update bundled git tarball to 2.6.1 [bnc#948969]</changelog>
  <changelog author="jengelh@inai.de" date="1452772800">- Update to new upstream release 0.12
  * Show remote refs in branch switcher combobox.
  * Add sample post-receive hook in /contrib.
  * Add HTML escaping to filters.
  * Add "enable-follow-links" option to have the log UI
  behave the same way as "git log --follow", as well
  as updating the diffand commit UIs.
  * Errors are now cached under the dynamic-ttl setting.
  * Simplified filters and converters.
  * Add "enable-html-serving" to turn on serving of HTML mimetypes
  from the /plain handler, to prevent against stored XSS.
  * /blob no longer takes a mimetype query string parameter.
- Resolve: Reflected Cross Site Scripting &amp; Header Injection in
  Mimetype Query String; Stored Cross Site Scripting &amp; Header
  Injection in Filename Parameter; Stored Cross Site Scripting in
  Git Repo Files; Integer Overflow resulting in Buffer Overflow
  [boo#961916 CVE-2016-1899 CVE-2016-1900 CVE-2016-1901]
- Update bundled git tarball to 2.7.0 (build-time requirement)</changelog>
  <changelog author="tiwai@suse.de" date="1458129600">- Fix remote code execution via buffer overflow (CVE-2016-2315,
  CVE-2016-2324, bsc#971328):
  0012-http-push-stop-using-name_path.patch
  0013-show_object_with_name-simplify-by-using-path_name.patch
  0014-list-objects-convert-name_path-to-a-strbuf.patch
  0015-list-objects-drop-name_path-entirely.patch
  0016-list-objects-pass-full-pathname-to-callbacks.patch</changelog>
  <changelog author="astieger@suse.com" date="1465819200">- cgit 1.0:
  * Add repo.homepage/gitweb.homepage setting and homepage tab.
  * Considerable internal cleanups.
  * Show reverse paths in title bar so that browser tab shows
    filename.
  * Add syntax highlighting to md2html.
  * Allow redirects even when caching is turned on.
  * Fix empty PATH_INFO on redirect.
  * Better HTML5 compliance.
  * Simplified decorations.
  * Show repo's root directory in plain view.
  * Date printing and timezone normalization.
  * Unicode issues in syntax highlighting.
  * Account for caches with empty key.
  * Use size_t for all lengths.
  * More gracefully deal with unparsable commits.
- with git 2.8.3
- the following patches are now included upstream git 2.8.3:
  0012-http-push-stop-using-name_path.patch
  0013-show_object_with_name-simplify-by-using-path_name.patch
  0014-list-objects-convert-name_path-to-a-strbuf.patch
  0015-list-objects-drop-name_path-entirely.patch
  0016-list-objects-pass-full-pathname-to-callbacks.patch</changelog>
  <changelog author="vcizek@suse.com" date="1483617600">- remove redundant gnu-crypto BuildRequires</changelog>
  <changelog author="vsvecova@suse.com" date="1484827200">- Version bump to v1.1:
  * For more information see complete changelog at
    https://git.zx2c4.com/cgit/log/
- Add cgit-built-with-git-v2.11.0.patch</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Update bundled git to 2.11.1</changelog>
  <changelog author="jengelh@inai.de" date="1533470400">- Update to new upstream release 1.2.1
  * fixes CVE-2018-14912 directory traversal vulnerability
    [boo#1103799]
  * syntax-highlighting: replace invalid unicode with '?'
  * ui-repolist: properly sort by age
  * ui-patch: fix crash when using path limit
- Remove cgit-built-with-git-v2.11.0.patch (merged upstream)</changelog>
</package>
<package pkgid="51f565e045c905957121fac6f526ebcd9d486edc3a11d5969f080b420f0d9a90" name="cgit" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="lp150.2.3.1"/>
  <changelog author="zooey@hirschkaefer.de" date="1322481600">- Add patch cgit-fix-more-read_tree_recursive-invocations.diff:
    There are more incorrect invocations of read_tree_recursive(),
    one example can be seen when visiting one of the 'plain' links
    in the tree view (contents of the wrong file are shown).
    This time I did what I should have done last time and checked
    and adjusted all invocations of read_tree_recursive().</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="tiwai@suse.de" date="1349870400">- Fix VUL-0: specially-crafted commits can trigger a heap-based
  buffer overflow (CVE-2012-4465, bnc#783012)</changelog>
  <changelog author="tiwai@suse.de" date="1351512000">- cgit-CVE-2012-4548-fix.diff:
  Fix VUL-0: cgit: arbitrary code / command execution via
  improperly quoted arguments (CVE-2012-4548, bnc#787074)</changelog>
  <changelog author="tiwai@suse.de" date="1353412800">- updated to cgit-0.9.1:
  Enhancements:
  - path-selected submodule links
  - intelligent default branch guessing
  - /etc/mime.types lookup
  - gitweb.* and cgit.* git-config support
  - case insensitive sorting and age sorting
  - commit, repository, and section sorting
  - bold currently viewed page in pagination
  - support BSDs in makefile
  Security:
  - CVE-2012-4465: heap-buffer overflow in parsing.c
  - CVE-2012-4548: syntax highlighting command injection
  Bug Fixes:
  - transition maintainer to Jason Donenfeld (zx2c4)
  - download git snapshot from github instead of Lars' old server
  - css fixes
  - stablization of tests
  - more compatible default highlight script
  - suppress gzip timestamp so that tarballs only use tar timestamps
  - treat ctags as target in makefile
  - do not let global variables override certain local repo settings
  - print ampersand as proper html entity
  - use placeholder for empty commit subject
  - format diff view for addition and removal of files
  - point links at correct blob from ssdiff
- drop obsoleted patches
  cgit-CVE-2011-2711-fix.diff
  cgit-CVE-2012-4465-fix.diff
  cgit-CVE-2012-4548-fix.diff</changelog>
  <changelog author="vjt@openssl.it" date="1353412801">- BuildRequire xz</changelog>
  <changelog author="tiwai@suse.de" date="1373025600">- Fix VUL-0: cgit: remote file disclosure flaw (CVE-2013-2117,
  bnc#822166)</changelog>
  <changelog author="jengelh@inai.de" date="1412596800">- Remove ancient specfile tags/sections
- Enable parallel build</changelog>
  <changelog author="guillaume@opensuse.org" date="1416830400">- Fix css and logo path in cgitrc file (replace /git by /cgit)</changelog>
  <changelog author="jengelh@inai.de" date="1430740800">- Update to new upstream release 0.11.2
  * addition of a Lua scripting engine
  * fine-grained authentication support through the new Lua
  scripting system
  * support for the "rawdiff" command was added
  * sendfile() is now used when available (Linux systems) instead
  of a loop of read() and write(). This should significantly
  increase performance for high volume sites which make heavy use
  of the caching feature, as it saves copies to and from
  user-space.
  * Caching granularity is now improved with the introduction of
  the cache-snapshot-ttl option, which allows configuration of
  the ttl for tarball and zip snapshots of repositories.
  * When filtering in the index, make the sorting links point to
  the same filtered page of results
  * Take into account leading slashes when comptuing links
- Avoid double %setup (messes with quilt). Simplify filelist.
  %doc for man is implicit.
- Drop cgit-git-1.7.6_build_fix.patch,
  cgit-fix-print-tree.diff,
  cgit-fix-more-read_tree_recursive-invocations.diff,
  cgit-CVE-2013-2117-disallow-directory-traversal.patch
- Add signature for the git core tarball.</changelog>
  <changelog author="jengelh@inai.de" date="1433851200">- Update bundled git tarball to 2.4.3</changelog>
  <changelog author="jengelh@inai.de" date="1443096000">- Update bundled git tarball to 2.5.3</changelog>
  <changelog author="jengelh@inai.de" date="1444132800">- Update bundled git tarball to 2.6.1 [bnc#948969]</changelog>
  <changelog author="jengelh@inai.de" date="1452772800">- Update to new upstream release 0.12
  * Show remote refs in branch switcher combobox.
  * Add sample post-receive hook in /contrib.
  * Add HTML escaping to filters.
  * Add "enable-follow-links" option to have the log UI
  behave the same way as "git log --follow", as well
  as updating the diffand commit UIs.
  * Errors are now cached under the dynamic-ttl setting.
  * Simplified filters and converters.
  * Add "enable-html-serving" to turn on serving of HTML mimetypes
  from the /plain handler, to prevent against stored XSS.
  * /blob no longer takes a mimetype query string parameter.
- Resolve: Reflected Cross Site Scripting &amp; Header Injection in
  Mimetype Query String; Stored Cross Site Scripting &amp; Header
  Injection in Filename Parameter; Stored Cross Site Scripting in
  Git Repo Files; Integer Overflow resulting in Buffer Overflow
  [boo#961916 CVE-2016-1899 CVE-2016-1900 CVE-2016-1901]
- Update bundled git tarball to 2.7.0 (build-time requirement)</changelog>
  <changelog author="tiwai@suse.de" date="1458129600">- Fix remote code execution via buffer overflow (CVE-2016-2315,
  CVE-2016-2324, bsc#971328):
  0012-http-push-stop-using-name_path.patch
  0013-show_object_with_name-simplify-by-using-path_name.patch
  0014-list-objects-convert-name_path-to-a-strbuf.patch
  0015-list-objects-drop-name_path-entirely.patch
  0016-list-objects-pass-full-pathname-to-callbacks.patch</changelog>
  <changelog author="astieger@suse.com" date="1465819200">- cgit 1.0:
  * Add repo.homepage/gitweb.homepage setting and homepage tab.
  * Considerable internal cleanups.
  * Show reverse paths in title bar so that browser tab shows
    filename.
  * Add syntax highlighting to md2html.
  * Allow redirects even when caching is turned on.
  * Fix empty PATH_INFO on redirect.
  * Better HTML5 compliance.
  * Simplified decorations.
  * Show repo's root directory in plain view.
  * Date printing and timezone normalization.
  * Unicode issues in syntax highlighting.
  * Account for caches with empty key.
  * Use size_t for all lengths.
  * More gracefully deal with unparsable commits.
- with git 2.8.3
- the following patches are now included upstream git 2.8.3:
  0012-http-push-stop-using-name_path.patch
  0013-show_object_with_name-simplify-by-using-path_name.patch
  0014-list-objects-convert-name_path-to-a-strbuf.patch
  0015-list-objects-drop-name_path-entirely.patch
  0016-list-objects-pass-full-pathname-to-callbacks.patch</changelog>
  <changelog author="vcizek@suse.com" date="1483617600">- remove redundant gnu-crypto BuildRequires</changelog>
  <changelog author="vsvecova@suse.com" date="1484827200">- Version bump to v1.1:
  * For more information see complete changelog at
    https://git.zx2c4.com/cgit/log/
- Add cgit-built-with-git-v2.11.0.patch</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Update bundled git to 2.11.1</changelog>
  <changelog author="jengelh@inai.de" date="1533470400">- Update to new upstream release 1.2.1
  * fixes CVE-2018-14912 directory traversal vulnerability
    [boo#1103799]
  * syntax-highlighting: replace invalid unicode with '?'
  * ui-repolist: properly sort by age
  * ui-patch: fix crash when using path limit
- Remove cgit-built-with-git-v2.11.0.patch (merged upstream)</changelog>
</package>
<package pkgid="de9859d4cb063904ae9261321899e9a832f1da2ea3059cb738baef8e7abd1ea0" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="67.0.3396.99" rel="lp150.2.3.3"/>
  <changelog author="tchvatal@suse.com" date="1521028800">- Bundle the harfbuzz on &lt; 15.0 release as we would have to
  use requires_ge for the library itself later on otherwise</changelog>
  <changelog author="tchvatal@suse.com" date="1521028801">- Version update to 65.0.3325.162:
  * Various stability fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Use both freetype and harfbuzz either bundled or system</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- Update to Chromium 65.0.3325.181:
  * Various security relevant fixes from internal audits, fuzzing
    and other initiatives (boo#1086124)</changelog>
  <changelog author="tchvatal@suse.com" date="1523016000">- Use memory-constraints package to limit threads as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1523188800">- Add vaapi patches:
  * chromium-vaapi-init.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version bump to chromium 66.0.3359.117 bsc#1090000:
  * CVE-2018-6085: Use after free in Disk Cache
  * CVE-2018-6086: Use after free in Disk Cache
  * CVE-2018-6087: Use after free in WebAssembly
  * CVE-2018-6088: Use after free in PDFium
  * CVE-2018-6089: Same origin policy bypass in Service Worker
  * CVE-2018-6090: Heap buffer overflow in Skia
  * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  * CVE-2018-6092: Integer overflow in WebAssembly
  * CVE-2018-6093: Same origin bypass in Service Worker
  * CVE-2018-6094: Exploit hardening regression in Oilpan
  * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  * CVE-2018-6096: Fullscreen UI spoof
  * CVE-2018-6097: Fullscreen UI spoof
  * CVE-2018-6098: URL spoof in Omnibox
  * CVE-2018-6099: CORS bypass in ServiceWorker
  * CVE-2018-6100: URL spoof in Omnibox
  * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  * CVE-2018-6102: URL spoof in Omnibox
  * CVE-2018-6103: UI spoof in Permissions
  * CVE-2018-6104: URL spoof in Omnibox
  * CVE-2018-6105: URL spoof in Omnibox
  * CVE-2018-6106: Incorrect handling of promises in V8
  * CVE-2018-6107: URL spoof in Omnibox
  * CVE-2018-6108: URL spoof in Omnibox
  * CVE-2018-6109: Incorrect handling of files by FileAPI
  * CVE-2018-6110: Incorrect handling of plaintext files via file://
  * CVE-2018-6111: Heap-use-after-free in DevTools
  * CVE-2018-6112: Incorrect URL handling in DevTools
  * CVE-2018-6113: URL spoof in Navigation
  * CVE-2018-6114: CSP bypass
  * CVE-2018-6115: SmartScreen bypass in downloads
  * CVE-2018-6116: Incorrect low memory handling in WebAssembly
  * CVE-2018-6117: Confusing autofill settings
  * Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * chromium-vaapi-init.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff
  * fix_network_api_crash.patch
  * mojo.patch
- Add new patches:
  * chromium-ffmpeg.patch
  * chromium-gcc7.patch
  * exclude_ymp.patch
  * fix-gn-bootstrap.patch
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
  * add-missing-blink-tools.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524830400">- chromium 66.0.3359.139:
  * CVE-2018-6118: Use after free in Media Cache (bsc#1091288)
  * drop add-missing-blink-tools.patch, now in tarball again</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Enable build on AArch64
- Fix build on AArch64:
  * set target_cpu to arm64
  * disable tcmalloc and swiftshader for aarch64
  * Add new patches:
  - chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  - chromium-skia-neon.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
</package>
<package pkgid="364b375a5d9b32d1364da1375a41861e3bdd59423aeeec7f3cabdee533885d99" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="68.0.3440.75" rel="lp150.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1523016000">- Use memory-constraints package to limit threads as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1523188800">- Add vaapi patches:
  * chromium-vaapi-init.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version bump to chromium 66.0.3359.117 bsc#1090000:
  * CVE-2018-6085: Use after free in Disk Cache
  * CVE-2018-6086: Use after free in Disk Cache
  * CVE-2018-6087: Use after free in WebAssembly
  * CVE-2018-6088: Use after free in PDFium
  * CVE-2018-6089: Same origin policy bypass in Service Worker
  * CVE-2018-6090: Heap buffer overflow in Skia
  * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  * CVE-2018-6092: Integer overflow in WebAssembly
  * CVE-2018-6093: Same origin bypass in Service Worker
  * CVE-2018-6094: Exploit hardening regression in Oilpan
  * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  * CVE-2018-6096: Fullscreen UI spoof
  * CVE-2018-6097: Fullscreen UI spoof
  * CVE-2018-6098: URL spoof in Omnibox
  * CVE-2018-6099: CORS bypass in ServiceWorker
  * CVE-2018-6100: URL spoof in Omnibox
  * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  * CVE-2018-6102: URL spoof in Omnibox
  * CVE-2018-6103: UI spoof in Permissions
  * CVE-2018-6104: URL spoof in Omnibox
  * CVE-2018-6105: URL spoof in Omnibox
  * CVE-2018-6106: Incorrect handling of promises in V8
  * CVE-2018-6107: URL spoof in Omnibox
  * CVE-2018-6108: URL spoof in Omnibox
  * CVE-2018-6109: Incorrect handling of files by FileAPI
  * CVE-2018-6110: Incorrect handling of plaintext files via file://
  * CVE-2018-6111: Heap-use-after-free in DevTools
  * CVE-2018-6112: Incorrect URL handling in DevTools
  * CVE-2018-6113: URL spoof in Navigation
  * CVE-2018-6114: CSP bypass
  * CVE-2018-6115: SmartScreen bypass in downloads
  * CVE-2018-6116: Incorrect low memory handling in WebAssembly
  * CVE-2018-6117: Confusing autofill settings
  * Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * chromium-vaapi-init.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff
  * fix_network_api_crash.patch
  * mojo.patch
- Add new patches:
  * chromium-ffmpeg.patch
  * chromium-gcc7.patch
  * exclude_ymp.patch
  * fix-gn-bootstrap.patch
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
  * add-missing-blink-tools.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524830400">- chromium 66.0.3359.139:
  * CVE-2018-6118: Use after free in Media Cache (bsc#1091288)
  * drop add-missing-blink-tools.patch, now in tarball again</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Enable build on AArch64
- Fix build on AArch64:
  * set target_cpu to arm64
  * disable tcmalloc and swiftshader for aarch64
  * Add new patches:
  - chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  - chromium-skia-neon.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
</package>
<package pkgid="ba6e4bcccded81aec481b71965571a331d8a8b3c08429e357a16abc70b208c6a" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="69.0.3497.100" rel="lp150.2.16.1"/>
  <changelog author="astieger@suse.com" date="1527336000">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
</package>
<package pkgid="a92ad37637fba7d25ed25db654bf3d362d3a39f56fe9490b1ec308b580457011" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="69.0.3497.81" rel="lp150.2.10.1"/>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
</package>
<package pkgid="519abe56620e8aa5022ea937233293d1fd5878fe1c4c140d49032843b0573f98" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="69.0.3497.92" rel="lp150.2.13.1"/>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
</package>
<package pkgid="c5087f0b38337790d39c23e1b00af98bddd66cbdfc3864fa96cf7a63c2410483" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="70.0.3538.102" rel="lp150.2.23.2"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
</package>
<package pkgid="78346c74ec8a31745795356d05a2fe1954a66f042357e00816efbea269e3fa15" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="70.0.3538.110" rel="lp150.2.26.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520002">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
</package>
<package pkgid="52fcb8b227965199c076f5c3b7ba9f1053c5b454efdbee6e679720f7e5fcd5e3" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="70.0.3538.67" rel="lp150.2.20.1"/>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
</package>
<package pkgid="cceec512b85dcb7293420f2f02b3facca5c78c07e8f173d476e8a6fedacdca1b" name="chromium" arch="src">
  <version epoch="0" ver="67.0.3396.99" rel="lp150.2.3.3"/>
  <changelog author="tchvatal@suse.com" date="1521028800">- Bundle the harfbuzz on &lt; 15.0 release as we would have to
  use requires_ge for the library itself later on otherwise</changelog>
  <changelog author="tchvatal@suse.com" date="1521028801">- Version update to 65.0.3325.162:
  * Various stability fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Use both freetype and harfbuzz either bundled or system</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- Update to Chromium 65.0.3325.181:
  * Various security relevant fixes from internal audits, fuzzing
    and other initiatives (boo#1086124)</changelog>
  <changelog author="tchvatal@suse.com" date="1523016000">- Use memory-constraints package to limit threads as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1523188800">- Add vaapi patches:
  * chromium-vaapi-init.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version bump to chromium 66.0.3359.117 bsc#1090000:
  * CVE-2018-6085: Use after free in Disk Cache
  * CVE-2018-6086: Use after free in Disk Cache
  * CVE-2018-6087: Use after free in WebAssembly
  * CVE-2018-6088: Use after free in PDFium
  * CVE-2018-6089: Same origin policy bypass in Service Worker
  * CVE-2018-6090: Heap buffer overflow in Skia
  * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  * CVE-2018-6092: Integer overflow in WebAssembly
  * CVE-2018-6093: Same origin bypass in Service Worker
  * CVE-2018-6094: Exploit hardening regression in Oilpan
  * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  * CVE-2018-6096: Fullscreen UI spoof
  * CVE-2018-6097: Fullscreen UI spoof
  * CVE-2018-6098: URL spoof in Omnibox
  * CVE-2018-6099: CORS bypass in ServiceWorker
  * CVE-2018-6100: URL spoof in Omnibox
  * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  * CVE-2018-6102: URL spoof in Omnibox
  * CVE-2018-6103: UI spoof in Permissions
  * CVE-2018-6104: URL spoof in Omnibox
  * CVE-2018-6105: URL spoof in Omnibox
  * CVE-2018-6106: Incorrect handling of promises in V8
  * CVE-2018-6107: URL spoof in Omnibox
  * CVE-2018-6108: URL spoof in Omnibox
  * CVE-2018-6109: Incorrect handling of files by FileAPI
  * CVE-2018-6110: Incorrect handling of plaintext files via file://
  * CVE-2018-6111: Heap-use-after-free in DevTools
  * CVE-2018-6112: Incorrect URL handling in DevTools
  * CVE-2018-6113: URL spoof in Navigation
  * CVE-2018-6114: CSP bypass
  * CVE-2018-6115: SmartScreen bypass in downloads
  * CVE-2018-6116: Incorrect low memory handling in WebAssembly
  * CVE-2018-6117: Confusing autofill settings
  * Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * chromium-vaapi-init.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff
  * fix_network_api_crash.patch
  * mojo.patch
- Add new patches:
  * chromium-ffmpeg.patch
  * chromium-gcc7.patch
  * exclude_ymp.patch
  * fix-gn-bootstrap.patch
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
  * add-missing-blink-tools.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524830400">- chromium 66.0.3359.139:
  * CVE-2018-6118: Use after free in Media Cache (bsc#1091288)
  * drop add-missing-blink-tools.patch, now in tarball again</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Enable build on AArch64
- Fix build on AArch64:
  * set target_cpu to arm64
  * disable tcmalloc and swiftshader for aarch64
  * Add new patches:
  - chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  - chromium-skia-neon.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
</package>
<package pkgid="81c46496a045bd91cb4aec01e885157c9baa09efc4aa60d8272cb56cd0a7cbbf" name="chromium" arch="x86_64">
  <version epoch="0" ver="67.0.3396.99" rel="lp150.2.3.3"/>
  <changelog author="tchvatal@suse.com" date="1521028800">- Bundle the harfbuzz on &lt; 15.0 release as we would have to
  use requires_ge for the library itself later on otherwise</changelog>
  <changelog author="tchvatal@suse.com" date="1521028801">- Version update to 65.0.3325.162:
  * Various stability fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Use both freetype and harfbuzz either bundled or system</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- Update to Chromium 65.0.3325.181:
  * Various security relevant fixes from internal audits, fuzzing
    and other initiatives (boo#1086124)</changelog>
  <changelog author="tchvatal@suse.com" date="1523016000">- Use memory-constraints package to limit threads as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1523188800">- Add vaapi patches:
  * chromium-vaapi-init.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version bump to chromium 66.0.3359.117 bsc#1090000:
  * CVE-2018-6085: Use after free in Disk Cache
  * CVE-2018-6086: Use after free in Disk Cache
  * CVE-2018-6087: Use after free in WebAssembly
  * CVE-2018-6088: Use after free in PDFium
  * CVE-2018-6089: Same origin policy bypass in Service Worker
  * CVE-2018-6090: Heap buffer overflow in Skia
  * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  * CVE-2018-6092: Integer overflow in WebAssembly
  * CVE-2018-6093: Same origin bypass in Service Worker
  * CVE-2018-6094: Exploit hardening regression in Oilpan
  * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  * CVE-2018-6096: Fullscreen UI spoof
  * CVE-2018-6097: Fullscreen UI spoof
  * CVE-2018-6098: URL spoof in Omnibox
  * CVE-2018-6099: CORS bypass in ServiceWorker
  * CVE-2018-6100: URL spoof in Omnibox
  * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  * CVE-2018-6102: URL spoof in Omnibox
  * CVE-2018-6103: UI spoof in Permissions
  * CVE-2018-6104: URL spoof in Omnibox
  * CVE-2018-6105: URL spoof in Omnibox
  * CVE-2018-6106: Incorrect handling of promises in V8
  * CVE-2018-6107: URL spoof in Omnibox
  * CVE-2018-6108: URL spoof in Omnibox
  * CVE-2018-6109: Incorrect handling of files by FileAPI
  * CVE-2018-6110: Incorrect handling of plaintext files via file://
  * CVE-2018-6111: Heap-use-after-free in DevTools
  * CVE-2018-6112: Incorrect URL handling in DevTools
  * CVE-2018-6113: URL spoof in Navigation
  * CVE-2018-6114: CSP bypass
  * CVE-2018-6115: SmartScreen bypass in downloads
  * CVE-2018-6116: Incorrect low memory handling in WebAssembly
  * CVE-2018-6117: Confusing autofill settings
  * Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * chromium-vaapi-init.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff
  * fix_network_api_crash.patch
  * mojo.patch
- Add new patches:
  * chromium-ffmpeg.patch
  * chromium-gcc7.patch
  * exclude_ymp.patch
  * fix-gn-bootstrap.patch
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
  * add-missing-blink-tools.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524830400">- chromium 66.0.3359.139:
  * CVE-2018-6118: Use after free in Media Cache (bsc#1091288)
  * drop add-missing-blink-tools.patch, now in tarball again</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Enable build on AArch64
- Fix build on AArch64:
  * set target_cpu to arm64
  * disable tcmalloc and swiftshader for aarch64
  * Add new patches:
  - chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  - chromium-skia-neon.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
</package>
<package pkgid="0a83f4b9759a638fe4053d710ad6f75e36839aaa2a259129c2826cdb7f6eca24" name="chromium" arch="src">
  <version epoch="0" ver="68.0.3440.75" rel="lp150.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1523016000">- Use memory-constraints package to limit threads as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1523188800">- Add vaapi patches:
  * chromium-vaapi-init.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version bump to chromium 66.0.3359.117 bsc#1090000:
  * CVE-2018-6085: Use after free in Disk Cache
  * CVE-2018-6086: Use after free in Disk Cache
  * CVE-2018-6087: Use after free in WebAssembly
  * CVE-2018-6088: Use after free in PDFium
  * CVE-2018-6089: Same origin policy bypass in Service Worker
  * CVE-2018-6090: Heap buffer overflow in Skia
  * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  * CVE-2018-6092: Integer overflow in WebAssembly
  * CVE-2018-6093: Same origin bypass in Service Worker
  * CVE-2018-6094: Exploit hardening regression in Oilpan
  * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  * CVE-2018-6096: Fullscreen UI spoof
  * CVE-2018-6097: Fullscreen UI spoof
  * CVE-2018-6098: URL spoof in Omnibox
  * CVE-2018-6099: CORS bypass in ServiceWorker
  * CVE-2018-6100: URL spoof in Omnibox
  * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  * CVE-2018-6102: URL spoof in Omnibox
  * CVE-2018-6103: UI spoof in Permissions
  * CVE-2018-6104: URL spoof in Omnibox
  * CVE-2018-6105: URL spoof in Omnibox
  * CVE-2018-6106: Incorrect handling of promises in V8
  * CVE-2018-6107: URL spoof in Omnibox
  * CVE-2018-6108: URL spoof in Omnibox
  * CVE-2018-6109: Incorrect handling of files by FileAPI
  * CVE-2018-6110: Incorrect handling of plaintext files via file://
  * CVE-2018-6111: Heap-use-after-free in DevTools
  * CVE-2018-6112: Incorrect URL handling in DevTools
  * CVE-2018-6113: URL spoof in Navigation
  * CVE-2018-6114: CSP bypass
  * CVE-2018-6115: SmartScreen bypass in downloads
  * CVE-2018-6116: Incorrect low memory handling in WebAssembly
  * CVE-2018-6117: Confusing autofill settings
  * Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * chromium-vaapi-init.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff
  * fix_network_api_crash.patch
  * mojo.patch
- Add new patches:
  * chromium-ffmpeg.patch
  * chromium-gcc7.patch
  * exclude_ymp.patch
  * fix-gn-bootstrap.patch
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
  * add-missing-blink-tools.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524830400">- chromium 66.0.3359.139:
  * CVE-2018-6118: Use after free in Media Cache (bsc#1091288)
  * drop add-missing-blink-tools.patch, now in tarball again</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Enable build on AArch64
- Fix build on AArch64:
  * set target_cpu to arm64
  * disable tcmalloc and swiftshader for aarch64
  * Add new patches:
  - chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  - chromium-skia-neon.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
</package>
<package pkgid="92ca8760f2505e7949af8877d6cb548239516d3837f4c0ec28a7c323ca0bcd07" name="chromium" arch="x86_64">
  <version epoch="0" ver="68.0.3440.75" rel="lp150.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1523016000">- Use memory-constraints package to limit threads as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1523188800">- Add vaapi patches:
  * chromium-vaapi-init.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version bump to chromium 66.0.3359.117 bsc#1090000:
  * CVE-2018-6085: Use after free in Disk Cache
  * CVE-2018-6086: Use after free in Disk Cache
  * CVE-2018-6087: Use after free in WebAssembly
  * CVE-2018-6088: Use after free in PDFium
  * CVE-2018-6089: Same origin policy bypass in Service Worker
  * CVE-2018-6090: Heap buffer overflow in Skia
  * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  * CVE-2018-6092: Integer overflow in WebAssembly
  * CVE-2018-6093: Same origin bypass in Service Worker
  * CVE-2018-6094: Exploit hardening regression in Oilpan
  * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  * CVE-2018-6096: Fullscreen UI spoof
  * CVE-2018-6097: Fullscreen UI spoof
  * CVE-2018-6098: URL spoof in Omnibox
  * CVE-2018-6099: CORS bypass in ServiceWorker
  * CVE-2018-6100: URL spoof in Omnibox
  * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  * CVE-2018-6102: URL spoof in Omnibox
  * CVE-2018-6103: UI spoof in Permissions
  * CVE-2018-6104: URL spoof in Omnibox
  * CVE-2018-6105: URL spoof in Omnibox
  * CVE-2018-6106: Incorrect handling of promises in V8
  * CVE-2018-6107: URL spoof in Omnibox
  * CVE-2018-6108: URL spoof in Omnibox
  * CVE-2018-6109: Incorrect handling of files by FileAPI
  * CVE-2018-6110: Incorrect handling of plaintext files via file://
  * CVE-2018-6111: Heap-use-after-free in DevTools
  * CVE-2018-6112: Incorrect URL handling in DevTools
  * CVE-2018-6113: URL spoof in Navigation
  * CVE-2018-6114: CSP bypass
  * CVE-2018-6115: SmartScreen bypass in downloads
  * CVE-2018-6116: Incorrect low memory handling in WebAssembly
  * CVE-2018-6117: Confusing autofill settings
  * Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * chromium-vaapi-init.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff
  * fix_network_api_crash.patch
  * mojo.patch
- Add new patches:
  * chromium-ffmpeg.patch
  * chromium-gcc7.patch
  * exclude_ymp.patch
  * fix-gn-bootstrap.patch
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
  * add-missing-blink-tools.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524830400">- chromium 66.0.3359.139:
  * CVE-2018-6118: Use after free in Media Cache (bsc#1091288)
  * drop add-missing-blink-tools.patch, now in tarball again</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Enable build on AArch64
- Fix build on AArch64:
  * set target_cpu to arm64
  * disable tcmalloc and swiftshader for aarch64
  * Add new patches:
  - chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  - chromium-skia-neon.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
</package>
<package pkgid="a4b5b5e415f6bdfe9af51264179cf99982377805b4f12f5c0e49666df4c8cf8a" name="chromium" arch="src">
  <version epoch="0" ver="69.0.3497.100" rel="lp150.2.16.1"/>
  <changelog author="astieger@suse.com" date="1527336000">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
</package>
<package pkgid="20bacab8a82dfe330ba4ad10d2564dc64fd1bb02d706f9d7835d08490ff905ec" name="chromium" arch="x86_64">
  <version epoch="0" ver="69.0.3497.100" rel="lp150.2.16.1"/>
  <changelog author="astieger@suse.com" date="1527336000">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
</package>
<package pkgid="1a0441ffbc005d5c5e7db77916f51333dd2b01c98d3c590774a378fa33f91f70" name="chromium" arch="src">
  <version epoch="0" ver="69.0.3497.81" rel="lp150.2.10.1"/>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
</package>
<package pkgid="3df7f55de44ef660fc1354221d01cb04914c67e4d514cd4d196c223b4675aeb9" name="chromium" arch="x86_64">
  <version epoch="0" ver="69.0.3497.81" rel="lp150.2.10.1"/>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
</package>
<package pkgid="aa67edac3865dd9454792c103ffd3d92ba8c6a65041fd02d8fd8cc761db869a0" name="chromium" arch="src">
  <version epoch="0" ver="69.0.3497.92" rel="lp150.2.13.1"/>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
</package>
<package pkgid="f0a7f495f0c72efdc3a8fc5700e3013e4b7257f05e3d1e8ee7ad0077c9cba14f" name="chromium" arch="x86_64">
  <version epoch="0" ver="69.0.3497.92" rel="lp150.2.13.1"/>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
</package>
<package pkgid="d61fa538d29679409eab8e9e7ce6ede48215d1c6ab92ed590de88f029ca27e59" name="chromium" arch="src">
  <version epoch="0" ver="70.0.3538.102" rel="lp150.2.23.2"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
</package>
<package pkgid="410a76036c605b85fffd470c07ad58b36a7451e2bcb714c8d5cf11ae1ae027d9" name="chromium" arch="x86_64">
  <version epoch="0" ver="70.0.3538.102" rel="lp150.2.23.2"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
</package>
<package pkgid="a9dac05519b06e5c5292712ffcc58273c6b8dd032c02fd7c6719ea8b54264bf7" name="chromium" arch="src">
  <version epoch="0" ver="70.0.3538.110" rel="lp150.2.26.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520002">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
</package>
<package pkgid="75186e24ae5db527a753fee86ba99f9e96dfedfd7942e7b94c789bff8b1ef5a8" name="chromium" arch="x86_64">
  <version epoch="0" ver="70.0.3538.110" rel="lp150.2.26.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520002">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
</package>
<package pkgid="815d5b2d78bbdd3bb6b57fd79043d36c41088e2a191dfda8fde5645f18d793bd" name="chromium" arch="src">
  <version epoch="0" ver="70.0.3538.67" rel="lp150.2.20.1"/>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
</package>
<package pkgid="291c96e467bf9a731fa5486765b8888cd528fd90a9125b7f26dc614ef7bff451" name="chromium" arch="x86_64">
  <version epoch="0" ver="70.0.3538.67" rel="lp150.2.20.1"/>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
</package>
<package pkgid="56061c88e1e37db61f41277cd36205fc85615e900e5a0f82c84b3d32d3eeeecd" name="cinnamon" arch="src">
  <version epoch="0" ver="3.6.7" rel="lp150.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1481803200">- Update to version 3.2.6:
  * See /usr/share/doc/packages/cinnamon/changelog
- Rebase cinnamon-settings-xscreensaver-path.patch,
  cinnamon-no-gksu-requirement.patch, cinnamon-fallback-icewm.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1482494400">- Update to version 3.2.7:
  * cinnamon-settings: Do a better job of handling long labels.
  * Update polling frequency to make the mouse tracking smoother.
  * Layout: Ignore NaN numbers when updating regions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1483876800">- Update to version 3.2.8:
  * menu applet: Only construct one context menu for recent files,
    and re-use it.
  * menu applet: Don't reconstruct recent files, just re-order,
    add, remove as required.
  * menu applet: Fix a couple of minor leaks (actors created but
    never added to a container - being GInitiallyUnowned, they
    never get their floating ref sunk, and so can't be unreffed.
    Fix a prototype mismatch, and just rename GenericButton to
    NoRecentDocsButton, since that's the only user of it.
  * Fix tuples for Python 3.6.
  * tooltips.js: Add a hide timer to check if a tooltip should hide
    itself, but for various reasons never got to act on a
    leave-event (due to vagaries in event reporting).
  * recent applet: Rework to be non-destructive when updating the
    recent list (this brings a lot of the recent changes to the
    menu applet over to this one).
  * recents, applets: Couple of warning clean ups.
  * network applet: Remove a useless log warning. At some point
    more than a year ago we started getting these (possibly a
    change to NetworkManager), they have no value whatsoever, but
    fill up the log.
- Rebase cinnamon-network-user-connections.patch,
  cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485432000">- Fix password changing in cinnamon-wheel-and-sbin-path.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494158400">- Update to version 3.4.0:
  * Fix gnome terminal losing desktop file association during
    Cinnamon restart.
  * cinnamon-json-makepot: Add support to scan for JS files inside
    sub-dirs.
  * Start systray applet first
  * Use generic marshaller.
  * Pull functions out of loops in _refreshPlaces, _refreshApps...
  * Move uri assignment in _refreshRecent's while loop into new...
  * Use let instead of var in new handler functions.
  * panel: Rework allocation logic to avoid looping in edit mode
    this was causing the context menu animation to fail to complete
    causing the user not to be able to exit edit mode.
  * theme-node: Fix leak on stylesheet change.
  * cinnamon_dbus_acquire_name: Don't leak the result.
  * cinnamon_dbus_acquire_name: Don't leak error.
  * keyboard: Destroy the key's boxpointe.
  * Fix hotcorner hover delay timeout removal. This fixes a
    "Invalid or null source id used when attempting to run
    Mainloop.source_remove()" when leaving a hotcorner. The timeout
    is already destroyed by returning false in the callback, but we
    still knew about the timeout id and tried to remove the
    non-existing timeout.
  * st-box-layout: Don't report a paint volume when we have no
    allocation.
  * window-tracker: Fix a memory leak.
  * tooltips.js: Remove leftover logging.
  * Add cinnamon-stap-monitor utility.
  * panel.js: Couple fixes to previous commit. Let the panel
    sections cover the entire panel in edit mode. Clean up
    _allocate a bit - since we always have the centre zone occupied
    (artificially or naturally,) we don't ever need to handle cases
    where it isn't.
  * panel.js: Fix dnd pseudo-class style application for vertical
    panels.
  * panel: Allow right and left panel zones to naturally fill space.
    Fix vertical allocate calculations in st-box-layout (align_end
    was only working for horizontal box layouts).
  * panel.js: Clean actor and style class names up, simplify some
    code that no longer needs to differentiate between vertical and
    horizontal panels.
  * cs_screensaver.py: Expose setting for floating widgets.
  * panel.js: Restore the "important" style flag, accidentally
    removed from panel zones.
  * expoThumbnail.js: Don't reposition thumbnails on
    position-changed.
  * cs_screensaver.py: Use a stack to switch between default
    screensaver and plugin previews.
  * panel.js: Restore some allocation code mistakenly removed in a
    previous commit. This restores the behavior of allowing
    left/right panels to occupy more than half the panel if the
    centre zone is empty.
  * Sound applet: Fix a segmentation fault that happened when menu
    animations were disabled (gh#linuxmint/Cinnamon#5977).
  * cinnamon-desktop-editor: Use the default icon when file is
    nonexistent.
  * st-theme-node: Improve error reporting.
  * St: Support CSS margin property.
  * Fix cursor black background when taking screenshot.
  * JS API misc/util.js: Add spawnCommandLineAsync.
  * recent-applet: Fix wrong menu placement.
  * Cinnamon Tutorial: Add instructions for xlet l10n.
  * windowManager: Move handling of workspace switch effects to one
    place.
  * window-list: Don't lose our focus style class when opening the
    context menu.
  * Settings widgets range: Add an optional argument to show the
    current value of on the scale widget. This was originally the
    way it worked in the xlet settings, but with the rework, that
    functionality wasn't reimplemented. This rendered the settings
    of several applets less usefull.
  * Show desktop applet: Fix preview being stuck by
    keyboard-triggered menu open.
  * settings.js: Rebuild the settings file if it becomes corrupted.
    If the settings have already been loaded, we use the latest
    version we have, otherwise we restore from defaults.
  * vertical-panels: Make proper calculations for panel intellihide.
  * Keyboard applet: Always show something in panel edit mode.
  * Power applet: Always show something in panel edit mode
  * JS API util.js: Add doNotReap parameter to trySpawn ct. itzexor
  * util.js: Add documentation for spawn_async.
  * Add support to manage the systemd services available on the
    system.
  * cs_startup.py: Add a "Run now" button for when a row is selected.
  * Make sure applets that don't support vertical panels don't get
    dropped on a vertical panel. This was happening with at least
    some applets, causing them to "disappear", and could only be
    recovered by removing them from applet settings and re-adding
    them again.
  * cinnamon-settings: Fix some sliders being drawn backwards.
  * settings.js: Handle corrupt settings the right way. Fixes
    several issues with the previous implementation.
  * xlet settings: Add a list widget.
  * xlet settings: Fix the reference to new option added to wrong
    element.
  * Settings: Add support for lightdm-settings.
  * xlets-about-dialog: Show timestamp if exists else show version
    &amp; show "more info" button.
  * spawn_async: Clean the callbacks up after we're done.
  * looking-glass: Use bracket notation for property accessors when
    inspecting.
  * Environment: Don't fail in toString().
  * looking-glass: Set null results' value to "[null]".
  * Fix panel timeout spinbuttons jumping around
    (gh#linuxmint/Cinnamon#6374).
  * Add Manjaro Support in System Info (gh#linuxmint/Cinnamon#6387).
  * systray: Add CSS class to permit theming.
  * systray-applet: Don't crash in on_applet_removed_from_panel.
  * st-theme-node: Remove a double declaration that gives a
    compiler warning.
  * Start inode/directory application instead unregistered
    x-scheme-handler/file in case of unmounted bookmarks.
  * st-entry: Change the variable type to avoid a compiler warning.
  * Add a chooser for "inode/directory" to be able to choose the
    default file manager.
  * xlet-settings: Add a missing string for l10n.
  * st-box-layout: Remove an unused variable.
  * panel.js: Refactor Panel._showPanel and Panel._hidePanel.
  * panel.js: Don't clip the panel box shadow when showing after
    hide.
  * cs_accessibility: Restore previous theme when disabling
    High Contrast.
  * Remove panelMenu.js, which is unused but for 2 applets.
    There are a bunch of applets that import it but don't use it,
    all of which can be fixed now.
  * hotcorners: Remove the icon option.
  * cinnamon-looking-glass.py: Handle the numpad entering in entry.
  * Remove aclocal from autogen.sh as autoreconf runs it.
  * Fix for non translated applet names on Remove context menu items.
  * [Xlets] Expose config deletion request to xlet.
  * modalDialog: Avoid a js warning.
  * utils: Add check-js, to scan for runtime-breaking javascript
    syntax errors.
  * Adjustments after enabling margin for st.
  * cs_user.py: Save appropriately sized .face for
    cinnamon-screensaver.
  * cs_mouse: Add new settings to control acceleration/sensitivity.
  * power-applet: Add support for warning and error style classes.
  * cs_panel.py: Rework individual panel page to simplify code, fix
    some bugy behaviour, and improve readability.
  * Update keybindings.js.
  * Adapt Cinnamon to multi-process CSD.
  * messageTray: Show critical notifications in fullscreen.
  * cs_panel.py: Replace panel widgets with backended ones.
    This will hopefully ensure that the widgets are consistent with
    the rest of Cinnamon in terms of behaviour and appearance, as
    well as easier to maintain.
  * panel.js: Keep track of panelPosition and monitor changes.
  * panel.js: Refactor _moveResizePanel.
  * layout.js: Don't include clipped off areas in input region.
  * README file to reStructuredText file.
  * St: Margin: Remove margin:auto from menu applet and default
    theme. This avoids warning messages as margin:auto is not
    supported. And it also means third party theme developers will
    not copy non-functional CSS. The warning messages for the
    programmatic insertion of margin:auto in the menu applet were
    particularly cryptic.
  * st: Fix a couple icon/text-shadow bugs.
  * cinnamon-json-makepot: Fix for undefined global name.
  * Update cs_power.py.
  * Use St.Icon instead of fetching icons from St.TextureCache.
  * all: Adapt to changes for the new cjs (gjs 1.48/mozjs38).
  * panel.js warning fix.
  * osdWindow: Fix the level bar display.
  * Remove memory info stuff from looking glass, cinnamon-global.
  * control: Adjust version reqs for libcjs.
  * all: Some additional warning fixes due to gjs 1.48.0-&gt;1.48.2
    changes.
  * panel-launchers: Fix the panel launcher animation.
  * melange: don't freeze on quit with custom log watchers.
  * desklet.js: Ignore an extra argument to setContent().
  * js/ui/tooltip.js: Check if this.mousePosition is defined.
  * Move this.mousePosition initial assignment to TooltipBase.
  * Supress CJS mozjs38 warnings in applet, dbusMenu, indicator...
  * Correct indentation.
  * main.js: Improve logging of GLib.Errors and objects
    (gh#linuxmint/Cinnamon#6486).
  * menu-applet &amp; panel-launchers: Add new mouse cursors while.
    dragging applications (gh#linuxmint/Cinnamon#5859)
  * l10n: Update POT file.
  * l10n: Generate additional files.
- Rebase cinnamon-settings-native.patch.
- Add cinnamon-fix-gtk-3.14.patch: Add GTK+ 3.14 compatibility.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1495627200">- Update to version 3.4.1:
  * Remove usage of GTK_POLICY_EXTERNAL.
  * checkBox.js: Remove extra unused argument which was causing a
    warning with new cjs/mozjs.
  * st-bin.c: Fix y_fill setter (it was setting x_fill to the value
    of the existing y_fill, before it is set in the same call).
  * menu applet: Fix keyboard navigation of recent context menu.
    Fix closing of same menu when switching to another category.
    Also fix closing when opening another recent's context menu.
  * menu applet: Notify when a recent file is activated that can't
    be accessed.
  * menu applet: Make missing file notification transient.
  * menu applet (vector box): Partially revert c0d37dd: there is
    flickering as events go from a button to the vector box and
    back. Remove the idle callback, and directly react to the enter
    even once more. To compensate, increase our
    maybeUpdateVectorBox delay timeout, which more or less fixes
    the original problem the above commit was attempting to fix.
  * menu applet: _select_category - only call displayButtons if the
    category has really changed.
  * menu applet: Fix keyboard navigation when a second recent
    context menu is toggled open.
  * Sound settings: Fix device icons.
  * xlet-settings.py: Ignore files and directories in the config
    directory that aren't created by our settings api as well as
    instances that no longer exist.
  * ExtensionCore.py: Don't scrub the config directory on load.
    This is no longer necessary since xlet settings now ignores
    anything that isn't an active instance, and some applets need a
    place to store extra files so they get cleaned up on uninstall.
  * cs_panel.py: Fix a crash when there are no panels.
  * sound-applet: Remove extraneous arguments on add_actor calls.
  * radioButton.js: Remove an extra argument to add_actor.
  * window-list-applet: Fix undefined reference warning.
  * cinnamon-json-makepot: Add support to extract "title" and
    "units" keys on list elements.
  * User applet: Remove the ability to switch to guest with LightDM.
  * runDialog.js: Fix undefined variable warning.
  * Reorganise the default applets in the panel.
  * User applet: Remove trailing spaces.
  * Applets: Make TextIconApplet smarter and adapt to vertical
    panels.
  * menu applet: Use _select_category to select recents and places,
    so we can cache the current selection more accurately and
    prevent needless calls to _displayButtons.
  * window list: Add a missing dependency to settings.
- Remove cinnamon-fix-gtk-3.14.patch.
- Rebase cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498046400">- Update to version 3.4.2:
  * st-texture-cache.c: Do not cache st_texture_cache_load_from_raw.
    Its only user is the Notification Daemon. These are transient
    images that were being stored in the cache that would never be
    evicted during theme changes (this does not just mean times
    when the user changed the icon theme).
  * l10n: Translate hardcoded string for settings reset
    confirmation dialogue.
  * Silence a few more warnings, new warnings.
  * expo, overview: Unreference actors that we destroy whenever the
    respective view closes.
  * cinnamon-slideshow.py: Only allow a single instance to run.
  * Sound applet: Avoid spacing problem in vertical panel.
  * photoframe-desklet: Fix a few issues.
  * notificationDaemon.js: Silence an occasional warning.
  * SettingsWidgets.py: Make switch widgets use "center" vertical
    alignment instead of "fill," to prevent the switch growing in
    height when the label text gets ellipsised (either through
    resizing of the window, or localisation).
  * Progress bar text initialises and resets.
  * cinnamon-settings-users: Restrict the size of user images, as
    they are displayed in the right view when a user is selected.
    If the image at /var/lib/AccountsService/icons/&lt;user&gt; is set to
    a ridiculously-sized image, it won't break the ui.
  * cs_user: Don't let large images break the ui - make sure we
    scale the selected image to an appropriate size.
    Also, don't crop user-selected images (but keep cropping webcam
    images) - it's strange to select an image file and have the
    ends of it cut off.
  * cinnamon-settings-users.py: Fix picture preview in file
    selector to maintain a reasonable size.
  * cs_user.py: Handle image previews better in the face chooser
    dialogue.
  * ChooserButtonWidgets.py: Fix a Python 3 error.
  * window-list: Bring space around preview down and correct a
    calculation problem.
  * StScrollView: Queue redraws whenever the adjustments change, to
    prevent artifacts outside of the view itself.
  * StScrollView: More effective way of fixing the graphical
    artefacts generated during scrolling. This also appears to fix
    some unrelated tearing issues I was seeing in the menu while
    testing.
  * main.c: Own onboard's dbus name to prevent it starting when
    gnome's a11y keyboard settings key is active
    (org.gnome.desktop.a11y.applications screen-keyboard-enabled).
    Also own caribou's daemon. Caribou's OSK won't interfere in a
    Cinnamon session, but its daemon will run needlessly in the
    background otherwise.
  * panel: Avoid cjs giving a warning that dummyPanels[i][j] is
    undefined.
  * systray applet: Make sure an icon actually got parented to
    this.manager_container before calling remove_child.
    This issue can occur during session startup.
  * spacer applet: Use a unique style class in the theme to prevent
    the applet from appearing active when hovered.
  * theme: Add applet-spacer class for spacer applet.
  * spacer applet: Use track_hover instead of a new style to
    prevent highlighting.
  * osdWindow: get the correct child allocation when calculating
    the width of the level bar. If a padding or margin is added to
    the level-bar style class, it was causing the parent bin to
    expand to accomodate the child's width plus its required
    padding.
- Rebase cinnamon-wheel-and-sbin-path.patch,
  cinnamon-no-gksu-requirement.patch,
  cinnamon-favourite-applications.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498651200">- Update to version 3.4.3:
  * panel-launchers: Put individual launcher actions back in the
    main popup, having an options and preferences submenu was a
    bit ambiguous.
  * panel-launchers: Remove an undeclared variable warning.
  * deskletManager: Correct a call to file.delete.
  * Add a menu item to toggle the on-screen keyboard.
- Use update-alternatives to create the default.desktop xsession.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1499601600">- Update to version 3.4.4:
  * classicSwitcher.js: Fix hidpi issues.
  * KeybindingWidgets.py: Fix parsing of accelerators that are
    shifted but not alpha-numeric characters.
  * xlet-settings.py: Do not crash when an invalid xlet id is
    provided.
  * window-list applet: Fix argument warning.
  * Add an issue template.
  * ui/settings: Handle undefined old settings values.
  * hotCorner.js: Fix hover delay callback.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1499860800">- Require NetworkManager-gnome on openSUSE older than Leap 15.x
  still (boo#1047540).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1503230400">- Update to version 3.4.6 (changes since 3.4.4):
  * osdWindow.js: Always check the theme node on first showing - an
    actor's width isn't necessarily filled if it hasn't been
    explicitly set, causing the first few activations of the OSD to not show an accurate level bar.
  * cs_default: Fix an incorrect button label (but preserve
    translations).
  * main.js: Remove an obsolete Meta enum member reference.
  * workspace.js: Use our normal prototype init method.
  * workspace.js: Initalise WindowClone._zoomStep to 0.
  * slideshow-applet: Fix a translation.
  * cs_themes.py: Create the file "~/.icons/default/index.theme" and
    set the selected cursor theme inside of it. This ensures other
    (non-gtk) applications end up using the same theme (though they
    are required to be restarted for these changes to take effect).
  * keyboard-applet: Applet icon vanishes when moved in edit mode.
  * cinnamon-json-makepot: Add keyword option, change language used
    by xgettext to JavaScript.
  * expoThumbnail: Correct a couple of calls with mismatched
    argument counts.
  * window-list: Set AppMenuButtons unreactive during panel edit
    mode.
  * panel-launchers: Set PanelAppLaunchers unreactive during panel
    edit mode.
  * windows-quick-list: Fix argument warning.
  * Fix a reference to undefined actor._delegate warning.
  * ui/environment: Handle undefined actors in
    containerClass.prototype.add.
  * ui/cinnamonDBus: Handle null xlet objects in
    CinnamonDBus.highlightXlet.
  * deskletManager: Initialise some variables and remove the
    variables that were initialised, probable typo</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509192000">- Update to version 3.6.0:
  * See /usr/share/doc/packages/cinnamon/changelog
- Rebase cinnamon-network-user-connections.patch,
  cinnamon-settings-native.patch, cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510228800">- Update to version 3.6.1:
  * Fix blurry and off-centred arrow in pop up submenus.
  * cinnamon-settings: Remove an ui file that is no longer used
    since the extension-settings-rework.
  * Spices.py: Fix xlets not installing if a file without an
    extension is in the po directory.
  * TreeListWidgets.py: Edit elements with double click.
  * Fix Gtk-Message when running a dialogue.
  * window-list: Account for hidden items during DnD repositioning.
  * Spices: Don't fail if the spice directory is missing.
- Rebase cinnamon-wheel-and-sbin-path.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510488000">- Update to version 3.6.2:
  * st-texture-cache: Avoid potential null pointer dereference.
- Rebase cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511006400">- Update to version 3.6.3:
  * Show-desktop: Disable peek-at-desktop by default.
  * menu applet: Recalculate applications list box height when the
    menu's allocation changes.
  * Applets: When setting an icon, make sure it's actually an
    St.Icon. Some applets (such as the keyboard applet) set
    _applet_icon to something other than an St.Icon, so it causes
    an error when trying to set the icon using one of the api
    functions. This was causing the keyboard applet not to show in
    the panel edit mode after a keyboard layout was added and
    removed.
  * applet settings: Fix panel switch buttons not being hidden when
    there is only one panel.
  * Add Adwaita-dark thumbnails.
  * extension settings: Scan the system directory for extensions.
  * Initialise applet position to avoid drag and drop errors in
    edit mode occasionally the null applet position was being
    carried through to the writing of the new applet causing
    apparent drop failures, and to the disappearance of the
    highlighted drop box. Much visible weirdness with a very simple
    solution.
  * workspace switcher: Fix an undeclared variable warning.
  * applet settings: Improve the logic for highlighting the panel.
    The panel is now only highlighted when there is more than one
    panel, and it's better about selecting and highlighting the
    correct panel when one is added or removed.
  * Fixed spacing. Add a missing semicolon.
  * popupMenu: Prevent a warning of this._triangle.
  * Clock applet: Respect a 12h/24h choice in the vertical mode.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511265600">- Update to version 3.6.5 (changes since 3.6.3):
  * calendar applet: Just listen to the gsetting key for 24h to
    make sure the vertical panel default clock obeys global
    date/time settings.
  * st-theme.c: st_theme_resolve_url could assert with a theme
    issue.
  * cinnamon-settings: Use icon buttons in the xlet management
    pages.
  * Fixes crash if device.get_icon_name() is Null.
  * Allow showing seconds on a vertical panel.
  * cs_sound.py: Replace tabs with spaces.
  * calendar applet: Fix formatting.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511524800">- Update to version 3.6.6:
  * Sound settings: Assign the selected device to the profile
    selector.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514116800">- Update to version 3.6.7:
  * Online Accounts: Use translations.
  * cinnamonDBus.js: Have GetMonitors throw an error back to GDBus
    if something goes wrong.
  * menu-applet: Rework vectorBox.
  * Fix power applet spamming the log file with error messages on
    laptops (gh#linuxmint/Cinnamon#7114).
  * Spices description: Do not cut off the letter "n".
  * Xlets: Fix shown info for overwritten xlets.</changelog>
  <changelog author="sb56637@geckolinux.github.io" date="1517659200">- Changed dependency from python-pam to python2-python-pam</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1530792000">- Add cinnamon-settings-fix-symlink-vuln.patch by Matthias Gerstner
  to fix a symlink attack vulnerability (CVE-2018-13054,
  bsc#1083067, commit 66e54f4).
- Minor spec clean-up.</changelog>
</package>
<package pkgid="91b0206bb20d38a3c9815aa65f856954bac6a1c2e3554fdde3351dcc2134c1eb" name="cinnamon" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp150.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1481803200">- Update to version 3.2.6:
  * See /usr/share/doc/packages/cinnamon/changelog
- Rebase cinnamon-settings-xscreensaver-path.patch,
  cinnamon-no-gksu-requirement.patch, cinnamon-fallback-icewm.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1482494400">- Update to version 3.2.7:
  * cinnamon-settings: Do a better job of handling long labels.
  * Update polling frequency to make the mouse tracking smoother.
  * Layout: Ignore NaN numbers when updating regions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1483876800">- Update to version 3.2.8:
  * menu applet: Only construct one context menu for recent files,
    and re-use it.
  * menu applet: Don't reconstruct recent files, just re-order,
    add, remove as required.
  * menu applet: Fix a couple of minor leaks (actors created but
    never added to a container - being GInitiallyUnowned, they
    never get their floating ref sunk, and so can't be unreffed.
    Fix a prototype mismatch, and just rename GenericButton to
    NoRecentDocsButton, since that's the only user of it.
  * Fix tuples for Python 3.6.
  * tooltips.js: Add a hide timer to check if a tooltip should hide
    itself, but for various reasons never got to act on a
    leave-event (due to vagaries in event reporting).
  * recent applet: Rework to be non-destructive when updating the
    recent list (this brings a lot of the recent changes to the
    menu applet over to this one).
  * recents, applets: Couple of warning clean ups.
  * network applet: Remove a useless log warning. At some point
    more than a year ago we started getting these (possibly a
    change to NetworkManager), they have no value whatsoever, but
    fill up the log.
- Rebase cinnamon-network-user-connections.patch,
  cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485432000">- Fix password changing in cinnamon-wheel-and-sbin-path.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494158400">- Update to version 3.4.0:
  * Fix gnome terminal losing desktop file association during
    Cinnamon restart.
  * cinnamon-json-makepot: Add support to scan for JS files inside
    sub-dirs.
  * Start systray applet first
  * Use generic marshaller.
  * Pull functions out of loops in _refreshPlaces, _refreshApps...
  * Move uri assignment in _refreshRecent's while loop into new...
  * Use let instead of var in new handler functions.
  * panel: Rework allocation logic to avoid looping in edit mode
    this was causing the context menu animation to fail to complete
    causing the user not to be able to exit edit mode.
  * theme-node: Fix leak on stylesheet change.
  * cinnamon_dbus_acquire_name: Don't leak the result.
  * cinnamon_dbus_acquire_name: Don't leak error.
  * keyboard: Destroy the key's boxpointe.
  * Fix hotcorner hover delay timeout removal. This fixes a
    "Invalid or null source id used when attempting to run
    Mainloop.source_remove()" when leaving a hotcorner. The timeout
    is already destroyed by returning false in the callback, but we
    still knew about the timeout id and tried to remove the
    non-existing timeout.
  * st-box-layout: Don't report a paint volume when we have no
    allocation.
  * window-tracker: Fix a memory leak.
  * tooltips.js: Remove leftover logging.
  * Add cinnamon-stap-monitor utility.
  * panel.js: Couple fixes to previous commit. Let the panel
    sections cover the entire panel in edit mode. Clean up
    _allocate a bit - since we always have the centre zone occupied
    (artificially or naturally,) we don't ever need to handle cases
    where it isn't.
  * panel.js: Fix dnd pseudo-class style application for vertical
    panels.
  * panel: Allow right and left panel zones to naturally fill space.
    Fix vertical allocate calculations in st-box-layout (align_end
    was only working for horizontal box layouts).
  * panel.js: Clean actor and style class names up, simplify some
    code that no longer needs to differentiate between vertical and
    horizontal panels.
  * cs_screensaver.py: Expose setting for floating widgets.
  * panel.js: Restore the "important" style flag, accidentally
    removed from panel zones.
  * expoThumbnail.js: Don't reposition thumbnails on
    position-changed.
  * cs_screensaver.py: Use a stack to switch between default
    screensaver and plugin previews.
  * panel.js: Restore some allocation code mistakenly removed in a
    previous commit. This restores the behavior of allowing
    left/right panels to occupy more than half the panel if the
    centre zone is empty.
  * Sound applet: Fix a segmentation fault that happened when menu
    animations were disabled (gh#linuxmint/Cinnamon#5977).
  * cinnamon-desktop-editor: Use the default icon when file is
    nonexistent.
  * st-theme-node: Improve error reporting.
  * St: Support CSS margin property.
  * Fix cursor black background when taking screenshot.
  * JS API misc/util.js: Add spawnCommandLineAsync.
  * recent-applet: Fix wrong menu placement.
  * Cinnamon Tutorial: Add instructions for xlet l10n.
  * windowManager: Move handling of workspace switch effects to one
    place.
  * window-list: Don't lose our focus style class when opening the
    context menu.
  * Settings widgets range: Add an optional argument to show the
    current value of on the scale widget. This was originally the
    way it worked in the xlet settings, but with the rework, that
    functionality wasn't reimplemented. This rendered the settings
    of several applets less usefull.
  * Show desktop applet: Fix preview being stuck by
    keyboard-triggered menu open.
  * settings.js: Rebuild the settings file if it becomes corrupted.
    If the settings have already been loaded, we use the latest
    version we have, otherwise we restore from defaults.
  * vertical-panels: Make proper calculations for panel intellihide.
  * Keyboard applet: Always show something in panel edit mode.
  * Power applet: Always show something in panel edit mode
  * JS API util.js: Add doNotReap parameter to trySpawn ct. itzexor
  * util.js: Add documentation for spawn_async.
  * Add support to manage the systemd services available on the
    system.
  * cs_startup.py: Add a "Run now" button for when a row is selected.
  * Make sure applets that don't support vertical panels don't get
    dropped on a vertical panel. This was happening with at least
    some applets, causing them to "disappear", and could only be
    recovered by removing them from applet settings and re-adding
    them again.
  * cinnamon-settings: Fix some sliders being drawn backwards.
  * settings.js: Handle corrupt settings the right way. Fixes
    several issues with the previous implementation.
  * xlet settings: Add a list widget.
  * xlet settings: Fix the reference to new option added to wrong
    element.
  * Settings: Add support for lightdm-settings.
  * xlets-about-dialog: Show timestamp if exists else show version
    &amp; show "more info" button.
  * spawn_async: Clean the callbacks up after we're done.
  * looking-glass: Use bracket notation for property accessors when
    inspecting.
  * Environment: Don't fail in toString().
  * looking-glass: Set null results' value to "[null]".
  * Fix panel timeout spinbuttons jumping around
    (gh#linuxmint/Cinnamon#6374).
  * Add Manjaro Support in System Info (gh#linuxmint/Cinnamon#6387).
  * systray: Add CSS class to permit theming.
  * systray-applet: Don't crash in on_applet_removed_from_panel.
  * st-theme-node: Remove a double declaration that gives a
    compiler warning.
  * Start inode/directory application instead unregistered
    x-scheme-handler/file in case of unmounted bookmarks.
  * st-entry: Change the variable type to avoid a compiler warning.
  * Add a chooser for "inode/directory" to be able to choose the
    default file manager.
  * xlet-settings: Add a missing string for l10n.
  * st-box-layout: Remove an unused variable.
  * panel.js: Refactor Panel._showPanel and Panel._hidePanel.
  * panel.js: Don't clip the panel box shadow when showing after
    hide.
  * cs_accessibility: Restore previous theme when disabling
    High Contrast.
  * Remove panelMenu.js, which is unused but for 2 applets.
    There are a bunch of applets that import it but don't use it,
    all of which can be fixed now.
  * hotcorners: Remove the icon option.
  * cinnamon-looking-glass.py: Handle the numpad entering in entry.
  * Remove aclocal from autogen.sh as autoreconf runs it.
  * Fix for non translated applet names on Remove context menu items.
  * [Xlets] Expose config deletion request to xlet.
  * modalDialog: Avoid a js warning.
  * utils: Add check-js, to scan for runtime-breaking javascript
    syntax errors.
  * Adjustments after enabling margin for st.
  * cs_user.py: Save appropriately sized .face for
    cinnamon-screensaver.
  * cs_mouse: Add new settings to control acceleration/sensitivity.
  * power-applet: Add support for warning and error style classes.
  * cs_panel.py: Rework individual panel page to simplify code, fix
    some bugy behaviour, and improve readability.
  * Update keybindings.js.
  * Adapt Cinnamon to multi-process CSD.
  * messageTray: Show critical notifications in fullscreen.
  * cs_panel.py: Replace panel widgets with backended ones.
    This will hopefully ensure that the widgets are consistent with
    the rest of Cinnamon in terms of behaviour and appearance, as
    well as easier to maintain.
  * panel.js: Keep track of panelPosition and monitor changes.
  * panel.js: Refactor _moveResizePanel.
  * layout.js: Don't include clipped off areas in input region.
  * README file to reStructuredText file.
  * St: Margin: Remove margin:auto from menu applet and default
    theme. This avoids warning messages as margin:auto is not
    supported. And it also means third party theme developers will
    not copy non-functional CSS. The warning messages for the
    programmatic insertion of margin:auto in the menu applet were
    particularly cryptic.
  * st: Fix a couple icon/text-shadow bugs.
  * cinnamon-json-makepot: Fix for undefined global name.
  * Update cs_power.py.
  * Use St.Icon instead of fetching icons from St.TextureCache.
  * all: Adapt to changes for the new cjs (gjs 1.48/mozjs38).
  * panel.js warning fix.
  * osdWindow: Fix the level bar display.
  * Remove memory info stuff from looking glass, cinnamon-global.
  * control: Adjust version reqs for libcjs.
  * all: Some additional warning fixes due to gjs 1.48.0-&gt;1.48.2
    changes.
  * panel-launchers: Fix the panel launcher animation.
  * melange: don't freeze on quit with custom log watchers.
  * desklet.js: Ignore an extra argument to setContent().
  * js/ui/tooltip.js: Check if this.mousePosition is defined.
  * Move this.mousePosition initial assignment to TooltipBase.
  * Supress CJS mozjs38 warnings in applet, dbusMenu, indicator...
  * Correct indentation.
  * main.js: Improve logging of GLib.Errors and objects
    (gh#linuxmint/Cinnamon#6486).
  * menu-applet &amp; panel-launchers: Add new mouse cursors while.
    dragging applications (gh#linuxmint/Cinnamon#5859)
  * l10n: Update POT file.
  * l10n: Generate additional files.
- Rebase cinnamon-settings-native.patch.
- Add cinnamon-fix-gtk-3.14.patch: Add GTK+ 3.14 compatibility.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1495627200">- Update to version 3.4.1:
  * Remove usage of GTK_POLICY_EXTERNAL.
  * checkBox.js: Remove extra unused argument which was causing a
    warning with new cjs/mozjs.
  * st-bin.c: Fix y_fill setter (it was setting x_fill to the value
    of the existing y_fill, before it is set in the same call).
  * menu applet: Fix keyboard navigation of recent context menu.
    Fix closing of same menu when switching to another category.
    Also fix closing when opening another recent's context menu.
  * menu applet: Notify when a recent file is activated that can't
    be accessed.
  * menu applet: Make missing file notification transient.
  * menu applet (vector box): Partially revert c0d37dd: there is
    flickering as events go from a button to the vector box and
    back. Remove the idle callback, and directly react to the enter
    even once more. To compensate, increase our
    maybeUpdateVectorBox delay timeout, which more or less fixes
    the original problem the above commit was attempting to fix.
  * menu applet: _select_category - only call displayButtons if the
    category has really changed.
  * menu applet: Fix keyboard navigation when a second recent
    context menu is toggled open.
  * Sound settings: Fix device icons.
  * xlet-settings.py: Ignore files and directories in the config
    directory that aren't created by our settings api as well as
    instances that no longer exist.
  * ExtensionCore.py: Don't scrub the config directory on load.
    This is no longer necessary since xlet settings now ignores
    anything that isn't an active instance, and some applets need a
    place to store extra files so they get cleaned up on uninstall.
  * cs_panel.py: Fix a crash when there are no panels.
  * sound-applet: Remove extraneous arguments on add_actor calls.
  * radioButton.js: Remove an extra argument to add_actor.
  * window-list-applet: Fix undefined reference warning.
  * cinnamon-json-makepot: Add support to extract "title" and
    "units" keys on list elements.
  * User applet: Remove the ability to switch to guest with LightDM.
  * runDialog.js: Fix undefined variable warning.
  * Reorganise the default applets in the panel.
  * User applet: Remove trailing spaces.
  * Applets: Make TextIconApplet smarter and adapt to vertical
    panels.
  * menu applet: Use _select_category to select recents and places,
    so we can cache the current selection more accurately and
    prevent needless calls to _displayButtons.
  * window list: Add a missing dependency to settings.
- Remove cinnamon-fix-gtk-3.14.patch.
- Rebase cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498046400">- Update to version 3.4.2:
  * st-texture-cache.c: Do not cache st_texture_cache_load_from_raw.
    Its only user is the Notification Daemon. These are transient
    images that were being stored in the cache that would never be
    evicted during theme changes (this does not just mean times
    when the user changed the icon theme).
  * l10n: Translate hardcoded string for settings reset
    confirmation dialogue.
  * Silence a few more warnings, new warnings.
  * expo, overview: Unreference actors that we destroy whenever the
    respective view closes.
  * cinnamon-slideshow.py: Only allow a single instance to run.
  * Sound applet: Avoid spacing problem in vertical panel.
  * photoframe-desklet: Fix a few issues.
  * notificationDaemon.js: Silence an occasional warning.
  * SettingsWidgets.py: Make switch widgets use "center" vertical
    alignment instead of "fill," to prevent the switch growing in
    height when the label text gets ellipsised (either through
    resizing of the window, or localisation).
  * Progress bar text initialises and resets.
  * cinnamon-settings-users: Restrict the size of user images, as
    they are displayed in the right view when a user is selected.
    If the image at /var/lib/AccountsService/icons/&lt;user&gt; is set to
    a ridiculously-sized image, it won't break the ui.
  * cs_user: Don't let large images break the ui - make sure we
    scale the selected image to an appropriate size.
    Also, don't crop user-selected images (but keep cropping webcam
    images) - it's strange to select an image file and have the
    ends of it cut off.
  * cinnamon-settings-users.py: Fix picture preview in file
    selector to maintain a reasonable size.
  * cs_user.py: Handle image previews better in the face chooser
    dialogue.
  * ChooserButtonWidgets.py: Fix a Python 3 error.
  * window-list: Bring space around preview down and correct a
    calculation problem.
  * StScrollView: Queue redraws whenever the adjustments change, to
    prevent artifacts outside of the view itself.
  * StScrollView: More effective way of fixing the graphical
    artefacts generated during scrolling. This also appears to fix
    some unrelated tearing issues I was seeing in the menu while
    testing.
  * main.c: Own onboard's dbus name to prevent it starting when
    gnome's a11y keyboard settings key is active
    (org.gnome.desktop.a11y.applications screen-keyboard-enabled).
    Also own caribou's daemon. Caribou's OSK won't interfere in a
    Cinnamon session, but its daemon will run needlessly in the
    background otherwise.
  * panel: Avoid cjs giving a warning that dummyPanels[i][j] is
    undefined.
  * systray applet: Make sure an icon actually got parented to
    this.manager_container before calling remove_child.
    This issue can occur during session startup.
  * spacer applet: Use a unique style class in the theme to prevent
    the applet from appearing active when hovered.
  * theme: Add applet-spacer class for spacer applet.
  * spacer applet: Use track_hover instead of a new style to
    prevent highlighting.
  * osdWindow: get the correct child allocation when calculating
    the width of the level bar. If a padding or margin is added to
    the level-bar style class, it was causing the parent bin to
    expand to accomodate the child's width plus its required
    padding.
- Rebase cinnamon-wheel-and-sbin-path.patch,
  cinnamon-no-gksu-requirement.patch,
  cinnamon-favourite-applications.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498651200">- Update to version 3.4.3:
  * panel-launchers: Put individual launcher actions back in the
    main popup, having an options and preferences submenu was a
    bit ambiguous.
  * panel-launchers: Remove an undeclared variable warning.
  * deskletManager: Correct a call to file.delete.
  * Add a menu item to toggle the on-screen keyboard.
- Use update-alternatives to create the default.desktop xsession.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1499601600">- Update to version 3.4.4:
  * classicSwitcher.js: Fix hidpi issues.
  * KeybindingWidgets.py: Fix parsing of accelerators that are
    shifted but not alpha-numeric characters.
  * xlet-settings.py: Do not crash when an invalid xlet id is
    provided.
  * window-list applet: Fix argument warning.
  * Add an issue template.
  * ui/settings: Handle undefined old settings values.
  * hotCorner.js: Fix hover delay callback.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1499860800">- Require NetworkManager-gnome on openSUSE older than Leap 15.x
  still (boo#1047540).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1503230400">- Update to version 3.4.6 (changes since 3.4.4):
  * osdWindow.js: Always check the theme node on first showing - an
    actor's width isn't necessarily filled if it hasn't been
    explicitly set, causing the first few activations of the OSD to not show an accurate level bar.
  * cs_default: Fix an incorrect button label (but preserve
    translations).
  * main.js: Remove an obsolete Meta enum member reference.
  * workspace.js: Use our normal prototype init method.
  * workspace.js: Initalise WindowClone._zoomStep to 0.
  * slideshow-applet: Fix a translation.
  * cs_themes.py: Create the file "~/.icons/default/index.theme" and
    set the selected cursor theme inside of it. This ensures other
    (non-gtk) applications end up using the same theme (though they
    are required to be restarted for these changes to take effect).
  * keyboard-applet: Applet icon vanishes when moved in edit mode.
  * cinnamon-json-makepot: Add keyword option, change language used
    by xgettext to JavaScript.
  * expoThumbnail: Correct a couple of calls with mismatched
    argument counts.
  * window-list: Set AppMenuButtons unreactive during panel edit
    mode.
  * panel-launchers: Set PanelAppLaunchers unreactive during panel
    edit mode.
  * windows-quick-list: Fix argument warning.
  * Fix a reference to undefined actor._delegate warning.
  * ui/environment: Handle undefined actors in
    containerClass.prototype.add.
  * ui/cinnamonDBus: Handle null xlet objects in
    CinnamonDBus.highlightXlet.
  * deskletManager: Initialise some variables and remove the
    variables that were initialised, probable typo</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509192000">- Update to version 3.6.0:
  * See /usr/share/doc/packages/cinnamon/changelog
- Rebase cinnamon-network-user-connections.patch,
  cinnamon-settings-native.patch, cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510228800">- Update to version 3.6.1:
  * Fix blurry and off-centred arrow in pop up submenus.
  * cinnamon-settings: Remove an ui file that is no longer used
    since the extension-settings-rework.
  * Spices.py: Fix xlets not installing if a file without an
    extension is in the po directory.
  * TreeListWidgets.py: Edit elements with double click.
  * Fix Gtk-Message when running a dialogue.
  * window-list: Account for hidden items during DnD repositioning.
  * Spices: Don't fail if the spice directory is missing.
- Rebase cinnamon-wheel-and-sbin-path.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510488000">- Update to version 3.6.2:
  * st-texture-cache: Avoid potential null pointer dereference.
- Rebase cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511006400">- Update to version 3.6.3:
  * Show-desktop: Disable peek-at-desktop by default.
  * menu applet: Recalculate applications list box height when the
    menu's allocation changes.
  * Applets: When setting an icon, make sure it's actually an
    St.Icon. Some applets (such as the keyboard applet) set
    _applet_icon to something other than an St.Icon, so it causes
    an error when trying to set the icon using one of the api
    functions. This was causing the keyboard applet not to show in
    the panel edit mode after a keyboard layout was added and
    removed.
  * applet settings: Fix panel switch buttons not being hidden when
    there is only one panel.
  * Add Adwaita-dark thumbnails.
  * extension settings: Scan the system directory for extensions.
  * Initialise applet position to avoid drag and drop errors in
    edit mode occasionally the null applet position was being
    carried through to the writing of the new applet causing
    apparent drop failures, and to the disappearance of the
    highlighted drop box. Much visible weirdness with a very simple
    solution.
  * workspace switcher: Fix an undeclared variable warning.
  * applet settings: Improve the logic for highlighting the panel.
    The panel is now only highlighted when there is more than one
    panel, and it's better about selecting and highlighting the
    correct panel when one is added or removed.
  * Fixed spacing. Add a missing semicolon.
  * popupMenu: Prevent a warning of this._triangle.
  * Clock applet: Respect a 12h/24h choice in the vertical mode.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511265600">- Update to version 3.6.5 (changes since 3.6.3):
  * calendar applet: Just listen to the gsetting key for 24h to
    make sure the vertical panel default clock obeys global
    date/time settings.
  * st-theme.c: st_theme_resolve_url could assert with a theme
    issue.
  * cinnamon-settings: Use icon buttons in the xlet management
    pages.
  * Fixes crash if device.get_icon_name() is Null.
  * Allow showing seconds on a vertical panel.
  * cs_sound.py: Replace tabs with spaces.
  * calendar applet: Fix formatting.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511524800">- Update to version 3.6.6:
  * Sound settings: Assign the selected device to the profile
    selector.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514116800">- Update to version 3.6.7:
  * Online Accounts: Use translations.
  * cinnamonDBus.js: Have GetMonitors throw an error back to GDBus
    if something goes wrong.
  * menu-applet: Rework vectorBox.
  * Fix power applet spamming the log file with error messages on
    laptops (gh#linuxmint/Cinnamon#7114).
  * Spices description: Do not cut off the letter "n".
  * Xlets: Fix shown info for overwritten xlets.</changelog>
  <changelog author="sb56637@geckolinux.github.io" date="1517659200">- Changed dependency from python-pam to python2-python-pam</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1530792000">- Add cinnamon-settings-fix-symlink-vuln.patch by Matthias Gerstner
  to fix a symlink attack vulnerability (CVE-2018-13054,
  bsc#1083067, commit 66e54f4).
- Minor spec clean-up.</changelog>
</package>
<package pkgid="2f60ffcade5bbabcf1b913038c6faa10cbf9f65ad7fa3d4e04da293ddb3c8026" name="cinnamon-gschemas" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp150.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1481803200">- Update to version 3.2.6:
  * See /usr/share/doc/packages/cinnamon/changelog
- Rebase cinnamon-settings-xscreensaver-path.patch,
  cinnamon-no-gksu-requirement.patch, cinnamon-fallback-icewm.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1482494400">- Update to version 3.2.7:
  * cinnamon-settings: Do a better job of handling long labels.
  * Update polling frequency to make the mouse tracking smoother.
  * Layout: Ignore NaN numbers when updating regions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1483876800">- Update to version 3.2.8:
  * menu applet: Only construct one context menu for recent files,
    and re-use it.
  * menu applet: Don't reconstruct recent files, just re-order,
    add, remove as required.
  * menu applet: Fix a couple of minor leaks (actors created but
    never added to a container - being GInitiallyUnowned, they
    never get their floating ref sunk, and so can't be unreffed.
    Fix a prototype mismatch, and just rename GenericButton to
    NoRecentDocsButton, since that's the only user of it.
  * Fix tuples for Python 3.6.
  * tooltips.js: Add a hide timer to check if a tooltip should hide
    itself, but for various reasons never got to act on a
    leave-event (due to vagaries in event reporting).
  * recent applet: Rework to be non-destructive when updating the
    recent list (this brings a lot of the recent changes to the
    menu applet over to this one).
  * recents, applets: Couple of warning clean ups.
  * network applet: Remove a useless log warning. At some point
    more than a year ago we started getting these (possibly a
    change to NetworkManager), they have no value whatsoever, but
    fill up the log.
- Rebase cinnamon-network-user-connections.patch,
  cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485432000">- Fix password changing in cinnamon-wheel-and-sbin-path.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494158400">- Update to version 3.4.0:
  * Fix gnome terminal losing desktop file association during
    Cinnamon restart.
  * cinnamon-json-makepot: Add support to scan for JS files inside
    sub-dirs.
  * Start systray applet first
  * Use generic marshaller.
  * Pull functions out of loops in _refreshPlaces, _refreshApps...
  * Move uri assignment in _refreshRecent's while loop into new...
  * Use let instead of var in new handler functions.
  * panel: Rework allocation logic to avoid looping in edit mode
    this was causing the context menu animation to fail to complete
    causing the user not to be able to exit edit mode.
  * theme-node: Fix leak on stylesheet change.
  * cinnamon_dbus_acquire_name: Don't leak the result.
  * cinnamon_dbus_acquire_name: Don't leak error.
  * keyboard: Destroy the key's boxpointe.
  * Fix hotcorner hover delay timeout removal. This fixes a
    "Invalid or null source id used when attempting to run
    Mainloop.source_remove()" when leaving a hotcorner. The timeout
    is already destroyed by returning false in the callback, but we
    still knew about the timeout id and tried to remove the
    non-existing timeout.
  * st-box-layout: Don't report a paint volume when we have no
    allocation.
  * window-tracker: Fix a memory leak.
  * tooltips.js: Remove leftover logging.
  * Add cinnamon-stap-monitor utility.
  * panel.js: Couple fixes to previous commit. Let the panel
    sections cover the entire panel in edit mode. Clean up
    _allocate a bit - since we always have the centre zone occupied
    (artificially or naturally,) we don't ever need to handle cases
    where it isn't.
  * panel.js: Fix dnd pseudo-class style application for vertical
    panels.
  * panel: Allow right and left panel zones to naturally fill space.
    Fix vertical allocate calculations in st-box-layout (align_end
    was only working for horizontal box layouts).
  * panel.js: Clean actor and style class names up, simplify some
    code that no longer needs to differentiate between vertical and
    horizontal panels.
  * cs_screensaver.py: Expose setting for floating widgets.
  * panel.js: Restore the "important" style flag, accidentally
    removed from panel zones.
  * expoThumbnail.js: Don't reposition thumbnails on
    position-changed.
  * cs_screensaver.py: Use a stack to switch between default
    screensaver and plugin previews.
  * panel.js: Restore some allocation code mistakenly removed in a
    previous commit. This restores the behavior of allowing
    left/right panels to occupy more than half the panel if the
    centre zone is empty.
  * Sound applet: Fix a segmentation fault that happened when menu
    animations were disabled (gh#linuxmint/Cinnamon#5977).
  * cinnamon-desktop-editor: Use the default icon when file is
    nonexistent.
  * st-theme-node: Improve error reporting.
  * St: Support CSS margin property.
  * Fix cursor black background when taking screenshot.
  * JS API misc/util.js: Add spawnCommandLineAsync.
  * recent-applet: Fix wrong menu placement.
  * Cinnamon Tutorial: Add instructions for xlet l10n.
  * windowManager: Move handling of workspace switch effects to one
    place.
  * window-list: Don't lose our focus style class when opening the
    context menu.
  * Settings widgets range: Add an optional argument to show the
    current value of on the scale widget. This was originally the
    way it worked in the xlet settings, but with the rework, that
    functionality wasn't reimplemented. This rendered the settings
    of several applets less usefull.
  * Show desktop applet: Fix preview being stuck by
    keyboard-triggered menu open.
  * settings.js: Rebuild the settings file if it becomes corrupted.
    If the settings have already been loaded, we use the latest
    version we have, otherwise we restore from defaults.
  * vertical-panels: Make proper calculations for panel intellihide.
  * Keyboard applet: Always show something in panel edit mode.
  * Power applet: Always show something in panel edit mode
  * JS API util.js: Add doNotReap parameter to trySpawn ct. itzexor
  * util.js: Add documentation for spawn_async.
  * Add support to manage the systemd services available on the
    system.
  * cs_startup.py: Add a "Run now" button for when a row is selected.
  * Make sure applets that don't support vertical panels don't get
    dropped on a vertical panel. This was happening with at least
    some applets, causing them to "disappear", and could only be
    recovered by removing them from applet settings and re-adding
    them again.
  * cinnamon-settings: Fix some sliders being drawn backwards.
  * settings.js: Handle corrupt settings the right way. Fixes
    several issues with the previous implementation.
  * xlet settings: Add a list widget.
  * xlet settings: Fix the reference to new option added to wrong
    element.
  * Settings: Add support for lightdm-settings.
  * xlets-about-dialog: Show timestamp if exists else show version
    &amp; show "more info" button.
  * spawn_async: Clean the callbacks up after we're done.
  * looking-glass: Use bracket notation for property accessors when
    inspecting.
  * Environment: Don't fail in toString().
  * looking-glass: Set null results' value to "[null]".
  * Fix panel timeout spinbuttons jumping around
    (gh#linuxmint/Cinnamon#6374).
  * Add Manjaro Support in System Info (gh#linuxmint/Cinnamon#6387).
  * systray: Add CSS class to permit theming.
  * systray-applet: Don't crash in on_applet_removed_from_panel.
  * st-theme-node: Remove a double declaration that gives a
    compiler warning.
  * Start inode/directory application instead unregistered
    x-scheme-handler/file in case of unmounted bookmarks.
  * st-entry: Change the variable type to avoid a compiler warning.
  * Add a chooser for "inode/directory" to be able to choose the
    default file manager.
  * xlet-settings: Add a missing string for l10n.
  * st-box-layout: Remove an unused variable.
  * panel.js: Refactor Panel._showPanel and Panel._hidePanel.
  * panel.js: Don't clip the panel box shadow when showing after
    hide.
  * cs_accessibility: Restore previous theme when disabling
    High Contrast.
  * Remove panelMenu.js, which is unused but for 2 applets.
    There are a bunch of applets that import it but don't use it,
    all of which can be fixed now.
  * hotcorners: Remove the icon option.
  * cinnamon-looking-glass.py: Handle the numpad entering in entry.
  * Remove aclocal from autogen.sh as autoreconf runs it.
  * Fix for non translated applet names on Remove context menu items.
  * [Xlets] Expose config deletion request to xlet.
  * modalDialog: Avoid a js warning.
  * utils: Add check-js, to scan for runtime-breaking javascript
    syntax errors.
  * Adjustments after enabling margin for st.
  * cs_user.py: Save appropriately sized .face for
    cinnamon-screensaver.
  * cs_mouse: Add new settings to control acceleration/sensitivity.
  * power-applet: Add support for warning and error style classes.
  * cs_panel.py: Rework individual panel page to simplify code, fix
    some bugy behaviour, and improve readability.
  * Update keybindings.js.
  * Adapt Cinnamon to multi-process CSD.
  * messageTray: Show critical notifications in fullscreen.
  * cs_panel.py: Replace panel widgets with backended ones.
    This will hopefully ensure that the widgets are consistent with
    the rest of Cinnamon in terms of behaviour and appearance, as
    well as easier to maintain.
  * panel.js: Keep track of panelPosition and monitor changes.
  * panel.js: Refactor _moveResizePanel.
  * layout.js: Don't include clipped off areas in input region.
  * README file to reStructuredText file.
  * St: Margin: Remove margin:auto from menu applet and default
    theme. This avoids warning messages as margin:auto is not
    supported. And it also means third party theme developers will
    not copy non-functional CSS. The warning messages for the
    programmatic insertion of margin:auto in the menu applet were
    particularly cryptic.
  * st: Fix a couple icon/text-shadow bugs.
  * cinnamon-json-makepot: Fix for undefined global name.
  * Update cs_power.py.
  * Use St.Icon instead of fetching icons from St.TextureCache.
  * all: Adapt to changes for the new cjs (gjs 1.48/mozjs38).
  * panel.js warning fix.
  * osdWindow: Fix the level bar display.
  * Remove memory info stuff from looking glass, cinnamon-global.
  * control: Adjust version reqs for libcjs.
  * all: Some additional warning fixes due to gjs 1.48.0-&gt;1.48.2
    changes.
  * panel-launchers: Fix the panel launcher animation.
  * melange: don't freeze on quit with custom log watchers.
  * desklet.js: Ignore an extra argument to setContent().
  * js/ui/tooltip.js: Check if this.mousePosition is defined.
  * Move this.mousePosition initial assignment to TooltipBase.
  * Supress CJS mozjs38 warnings in applet, dbusMenu, indicator...
  * Correct indentation.
  * main.js: Improve logging of GLib.Errors and objects
    (gh#linuxmint/Cinnamon#6486).
  * menu-applet &amp; panel-launchers: Add new mouse cursors while.
    dragging applications (gh#linuxmint/Cinnamon#5859)
  * l10n: Update POT file.
  * l10n: Generate additional files.
- Rebase cinnamon-settings-native.patch.
- Add cinnamon-fix-gtk-3.14.patch: Add GTK+ 3.14 compatibility.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1495627200">- Update to version 3.4.1:
  * Remove usage of GTK_POLICY_EXTERNAL.
  * checkBox.js: Remove extra unused argument which was causing a
    warning with new cjs/mozjs.
  * st-bin.c: Fix y_fill setter (it was setting x_fill to the value
    of the existing y_fill, before it is set in the same call).
  * menu applet: Fix keyboard navigation of recent context menu.
    Fix closing of same menu when switching to another category.
    Also fix closing when opening another recent's context menu.
  * menu applet: Notify when a recent file is activated that can't
    be accessed.
  * menu applet: Make missing file notification transient.
  * menu applet (vector box): Partially revert c0d37dd: there is
    flickering as events go from a button to the vector box and
    back. Remove the idle callback, and directly react to the enter
    even once more. To compensate, increase our
    maybeUpdateVectorBox delay timeout, which more or less fixes
    the original problem the above commit was attempting to fix.
  * menu applet: _select_category - only call displayButtons if the
    category has really changed.
  * menu applet: Fix keyboard navigation when a second recent
    context menu is toggled open.
  * Sound settings: Fix device icons.
  * xlet-settings.py: Ignore files and directories in the config
    directory that aren't created by our settings api as well as
    instances that no longer exist.
  * ExtensionCore.py: Don't scrub the config directory on load.
    This is no longer necessary since xlet settings now ignores
    anything that isn't an active instance, and some applets need a
    place to store extra files so they get cleaned up on uninstall.
  * cs_panel.py: Fix a crash when there are no panels.
  * sound-applet: Remove extraneous arguments on add_actor calls.
  * radioButton.js: Remove an extra argument to add_actor.
  * window-list-applet: Fix undefined reference warning.
  * cinnamon-json-makepot: Add support to extract "title" and
    "units" keys on list elements.
  * User applet: Remove the ability to switch to guest with LightDM.
  * runDialog.js: Fix undefined variable warning.
  * Reorganise the default applets in the panel.
  * User applet: Remove trailing spaces.
  * Applets: Make TextIconApplet smarter and adapt to vertical
    panels.
  * menu applet: Use _select_category to select recents and places,
    so we can cache the current selection more accurately and
    prevent needless calls to _displayButtons.
  * window list: Add a missing dependency to settings.
- Remove cinnamon-fix-gtk-3.14.patch.
- Rebase cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498046400">- Update to version 3.4.2:
  * st-texture-cache.c: Do not cache st_texture_cache_load_from_raw.
    Its only user is the Notification Daemon. These are transient
    images that were being stored in the cache that would never be
    evicted during theme changes (this does not just mean times
    when the user changed the icon theme).
  * l10n: Translate hardcoded string for settings reset
    confirmation dialogue.
  * Silence a few more warnings, new warnings.
  * expo, overview: Unreference actors that we destroy whenever the
    respective view closes.
  * cinnamon-slideshow.py: Only allow a single instance to run.
  * Sound applet: Avoid spacing problem in vertical panel.
  * photoframe-desklet: Fix a few issues.
  * notificationDaemon.js: Silence an occasional warning.
  * SettingsWidgets.py: Make switch widgets use "center" vertical
    alignment instead of "fill," to prevent the switch growing in
    height when the label text gets ellipsised (either through
    resizing of the window, or localisation).
  * Progress bar text initialises and resets.
  * cinnamon-settings-users: Restrict the size of user images, as
    they are displayed in the right view when a user is selected.
    If the image at /var/lib/AccountsService/icons/&lt;user&gt; is set to
    a ridiculously-sized image, it won't break the ui.
  * cs_user: Don't let large images break the ui - make sure we
    scale the selected image to an appropriate size.
    Also, don't crop user-selected images (but keep cropping webcam
    images) - it's strange to select an image file and have the
    ends of it cut off.
  * cinnamon-settings-users.py: Fix picture preview in file
    selector to maintain a reasonable size.
  * cs_user.py: Handle image previews better in the face chooser
    dialogue.
  * ChooserButtonWidgets.py: Fix a Python 3 error.
  * window-list: Bring space around preview down and correct a
    calculation problem.
  * StScrollView: Queue redraws whenever the adjustments change, to
    prevent artifacts outside of the view itself.
  * StScrollView: More effective way of fixing the graphical
    artefacts generated during scrolling. This also appears to fix
    some unrelated tearing issues I was seeing in the menu while
    testing.
  * main.c: Own onboard's dbus name to prevent it starting when
    gnome's a11y keyboard settings key is active
    (org.gnome.desktop.a11y.applications screen-keyboard-enabled).
    Also own caribou's daemon. Caribou's OSK won't interfere in a
    Cinnamon session, but its daemon will run needlessly in the
    background otherwise.
  * panel: Avoid cjs giving a warning that dummyPanels[i][j] is
    undefined.
  * systray applet: Make sure an icon actually got parented to
    this.manager_container before calling remove_child.
    This issue can occur during session startup.
  * spacer applet: Use a unique style class in the theme to prevent
    the applet from appearing active when hovered.
  * theme: Add applet-spacer class for spacer applet.
  * spacer applet: Use track_hover instead of a new style to
    prevent highlighting.
  * osdWindow: get the correct child allocation when calculating
    the width of the level bar. If a padding or margin is added to
    the level-bar style class, it was causing the parent bin to
    expand to accomodate the child's width plus its required
    padding.
- Rebase cinnamon-wheel-and-sbin-path.patch,
  cinnamon-no-gksu-requirement.patch,
  cinnamon-favourite-applications.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498651200">- Update to version 3.4.3:
  * panel-launchers: Put individual launcher actions back in the
    main popup, having an options and preferences submenu was a
    bit ambiguous.
  * panel-launchers: Remove an undeclared variable warning.
  * deskletManager: Correct a call to file.delete.
  * Add a menu item to toggle the on-screen keyboard.
- Use update-alternatives to create the default.desktop xsession.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1499601600">- Update to version 3.4.4:
  * classicSwitcher.js: Fix hidpi issues.
  * KeybindingWidgets.py: Fix parsing of accelerators that are
    shifted but not alpha-numeric characters.
  * xlet-settings.py: Do not crash when an invalid xlet id is
    provided.
  * window-list applet: Fix argument warning.
  * Add an issue template.
  * ui/settings: Handle undefined old settings values.
  * hotCorner.js: Fix hover delay callback.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1499860800">- Require NetworkManager-gnome on openSUSE older than Leap 15.x
  still (boo#1047540).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1503230400">- Update to version 3.4.6 (changes since 3.4.4):
  * osdWindow.js: Always check the theme node on first showing - an
    actor's width isn't necessarily filled if it hasn't been
    explicitly set, causing the first few activations of the OSD to not show an accurate level bar.
  * cs_default: Fix an incorrect button label (but preserve
    translations).
  * main.js: Remove an obsolete Meta enum member reference.
  * workspace.js: Use our normal prototype init method.
  * workspace.js: Initalise WindowClone._zoomStep to 0.
  * slideshow-applet: Fix a translation.
  * cs_themes.py: Create the file "~/.icons/default/index.theme" and
    set the selected cursor theme inside of it. This ensures other
    (non-gtk) applications end up using the same theme (though they
    are required to be restarted for these changes to take effect).
  * keyboard-applet: Applet icon vanishes when moved in edit mode.
  * cinnamon-json-makepot: Add keyword option, change language used
    by xgettext to JavaScript.
  * expoThumbnail: Correct a couple of calls with mismatched
    argument counts.
  * window-list: Set AppMenuButtons unreactive during panel edit
    mode.
  * panel-launchers: Set PanelAppLaunchers unreactive during panel
    edit mode.
  * windows-quick-list: Fix argument warning.
  * Fix a reference to undefined actor._delegate warning.
  * ui/environment: Handle undefined actors in
    containerClass.prototype.add.
  * ui/cinnamonDBus: Handle null xlet objects in
    CinnamonDBus.highlightXlet.
  * deskletManager: Initialise some variables and remove the
    variables that were initialised, probable typo</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509192000">- Update to version 3.6.0:
  * See /usr/share/doc/packages/cinnamon/changelog
- Rebase cinnamon-network-user-connections.patch,
  cinnamon-settings-native.patch, cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510228800">- Update to version 3.6.1:
  * Fix blurry and off-centred arrow in pop up submenus.
  * cinnamon-settings: Remove an ui file that is no longer used
    since the extension-settings-rework.
  * Spices.py: Fix xlets not installing if a file without an
    extension is in the po directory.
  * TreeListWidgets.py: Edit elements with double click.
  * Fix Gtk-Message when running a dialogue.
  * window-list: Account for hidden items during DnD repositioning.
  * Spices: Don't fail if the spice directory is missing.
- Rebase cinnamon-wheel-and-sbin-path.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510488000">- Update to version 3.6.2:
  * st-texture-cache: Avoid potential null pointer dereference.
- Rebase cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511006400">- Update to version 3.6.3:
  * Show-desktop: Disable peek-at-desktop by default.
  * menu applet: Recalculate applications list box height when the
    menu's allocation changes.
  * Applets: When setting an icon, make sure it's actually an
    St.Icon. Some applets (such as the keyboard applet) set
    _applet_icon to something other than an St.Icon, so it causes
    an error when trying to set the icon using one of the api
    functions. This was causing the keyboard applet not to show in
    the panel edit mode after a keyboard layout was added and
    removed.
  * applet settings: Fix panel switch buttons not being hidden when
    there is only one panel.
  * Add Adwaita-dark thumbnails.
  * extension settings: Scan the system directory for extensions.
  * Initialise applet position to avoid drag and drop errors in
    edit mode occasionally the null applet position was being
    carried through to the writing of the new applet causing
    apparent drop failures, and to the disappearance of the
    highlighted drop box. Much visible weirdness with a very simple
    solution.
  * workspace switcher: Fix an undeclared variable warning.
  * applet settings: Improve the logic for highlighting the panel.
    The panel is now only highlighted when there is more than one
    panel, and it's better about selecting and highlighting the
    correct panel when one is added or removed.
  * Fixed spacing. Add a missing semicolon.
  * popupMenu: Prevent a warning of this._triangle.
  * Clock applet: Respect a 12h/24h choice in the vertical mode.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511265600">- Update to version 3.6.5 (changes since 3.6.3):
  * calendar applet: Just listen to the gsetting key for 24h to
    make sure the vertical panel default clock obeys global
    date/time settings.
  * st-theme.c: st_theme_resolve_url could assert with a theme
    issue.
  * cinnamon-settings: Use icon buttons in the xlet management
    pages.
  * Fixes crash if device.get_icon_name() is Null.
  * Allow showing seconds on a vertical panel.
  * cs_sound.py: Replace tabs with spaces.
  * calendar applet: Fix formatting.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511524800">- Update to version 3.6.6:
  * Sound settings: Assign the selected device to the profile
    selector.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514116800">- Update to version 3.6.7:
  * Online Accounts: Use translations.
  * cinnamonDBus.js: Have GetMonitors throw an error back to GDBus
    if something goes wrong.
  * menu-applet: Rework vectorBox.
  * Fix power applet spamming the log file with error messages on
    laptops (gh#linuxmint/Cinnamon#7114).
  * Spices description: Do not cut off the letter "n".
  * Xlets: Fix shown info for overwritten xlets.</changelog>
  <changelog author="sb56637@geckolinux.github.io" date="1517659200">- Changed dependency from python-pam to python2-python-pam</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1530792000">- Add cinnamon-settings-fix-symlink-vuln.patch by Matthias Gerstner
  to fix a symlink attack vulnerability (CVE-2018-13054,
  bsc#1083067, commit 66e54f4).
- Minor spec clean-up.</changelog>
</package>
<package pkgid="56fbd2da6cc269ff7c309ce53acef4c45cb1cf14dcec3972757deffb22517b3a" name="cinnamon-gschemas-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.6.7" rel="lp150.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1481803200">- Update to version 3.2.6:
  * See /usr/share/doc/packages/cinnamon/changelog
- Rebase cinnamon-settings-xscreensaver-path.patch,
  cinnamon-no-gksu-requirement.patch, cinnamon-fallback-icewm.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1482494400">- Update to version 3.2.7:
  * cinnamon-settings: Do a better job of handling long labels.
  * Update polling frequency to make the mouse tracking smoother.
  * Layout: Ignore NaN numbers when updating regions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1483876800">- Update to version 3.2.8:
  * menu applet: Only construct one context menu for recent files,
    and re-use it.
  * menu applet: Don't reconstruct recent files, just re-order,
    add, remove as required.
  * menu applet: Fix a couple of minor leaks (actors created but
    never added to a container - being GInitiallyUnowned, they
    never get their floating ref sunk, and so can't be unreffed.
    Fix a prototype mismatch, and just rename GenericButton to
    NoRecentDocsButton, since that's the only user of it.
  * Fix tuples for Python 3.6.
  * tooltips.js: Add a hide timer to check if a tooltip should hide
    itself, but for various reasons never got to act on a
    leave-event (due to vagaries in event reporting).
  * recent applet: Rework to be non-destructive when updating the
    recent list (this brings a lot of the recent changes to the
    menu applet over to this one).
  * recents, applets: Couple of warning clean ups.
  * network applet: Remove a useless log warning. At some point
    more than a year ago we started getting these (possibly a
    change to NetworkManager), they have no value whatsoever, but
    fill up the log.
- Rebase cinnamon-network-user-connections.patch,
  cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485432000">- Fix password changing in cinnamon-wheel-and-sbin-path.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494158400">- Update to version 3.4.0:
  * Fix gnome terminal losing desktop file association during
    Cinnamon restart.
  * cinnamon-json-makepot: Add support to scan for JS files inside
    sub-dirs.
  * Start systray applet first
  * Use generic marshaller.
  * Pull functions out of loops in _refreshPlaces, _refreshApps...
  * Move uri assignment in _refreshRecent's while loop into new...
  * Use let instead of var in new handler functions.
  * panel: Rework allocation logic to avoid looping in edit mode
    this was causing the context menu animation to fail to complete
    causing the user not to be able to exit edit mode.
  * theme-node: Fix leak on stylesheet change.
  * cinnamon_dbus_acquire_name: Don't leak the result.
  * cinnamon_dbus_acquire_name: Don't leak error.
  * keyboard: Destroy the key's boxpointe.
  * Fix hotcorner hover delay timeout removal. This fixes a
    "Invalid or null source id used when attempting to run
    Mainloop.source_remove()" when leaving a hotcorner. The timeout
    is already destroyed by returning false in the callback, but we
    still knew about the timeout id and tried to remove the
    non-existing timeout.
  * st-box-layout: Don't report a paint volume when we have no
    allocation.
  * window-tracker: Fix a memory leak.
  * tooltips.js: Remove leftover logging.
  * Add cinnamon-stap-monitor utility.
  * panel.js: Couple fixes to previous commit. Let the panel
    sections cover the entire panel in edit mode. Clean up
    _allocate a bit - since we always have the centre zone occupied
    (artificially or naturally,) we don't ever need to handle cases
    where it isn't.
  * panel.js: Fix dnd pseudo-class style application for vertical
    panels.
  * panel: Allow right and left panel zones to naturally fill space.
    Fix vertical allocate calculations in st-box-layout (align_end
    was only working for horizontal box layouts).
  * panel.js: Clean actor and style class names up, simplify some
    code that no longer needs to differentiate between vertical and
    horizontal panels.
  * cs_screensaver.py: Expose setting for floating widgets.
  * panel.js: Restore the "important" style flag, accidentally
    removed from panel zones.
  * expoThumbnail.js: Don't reposition thumbnails on
    position-changed.
  * cs_screensaver.py: Use a stack to switch between default
    screensaver and plugin previews.
  * panel.js: Restore some allocation code mistakenly removed in a
    previous commit. This restores the behavior of allowing
    left/right panels to occupy more than half the panel if the
    centre zone is empty.
  * Sound applet: Fix a segmentation fault that happened when menu
    animations were disabled (gh#linuxmint/Cinnamon#5977).
  * cinnamon-desktop-editor: Use the default icon when file is
    nonexistent.
  * st-theme-node: Improve error reporting.
  * St: Support CSS margin property.
  * Fix cursor black background when taking screenshot.
  * JS API misc/util.js: Add spawnCommandLineAsync.
  * recent-applet: Fix wrong menu placement.
  * Cinnamon Tutorial: Add instructions for xlet l10n.
  * windowManager: Move handling of workspace switch effects to one
    place.
  * window-list: Don't lose our focus style class when opening the
    context menu.
  * Settings widgets range: Add an optional argument to show the
    current value of on the scale widget. This was originally the
    way it worked in the xlet settings, but with the rework, that
    functionality wasn't reimplemented. This rendered the settings
    of several applets less usefull.
  * Show desktop applet: Fix preview being stuck by
    keyboard-triggered menu open.
  * settings.js: Rebuild the settings file if it becomes corrupted.
    If the settings have already been loaded, we use the latest
    version we have, otherwise we restore from defaults.
  * vertical-panels: Make proper calculations for panel intellihide.
  * Keyboard applet: Always show something in panel edit mode.
  * Power applet: Always show something in panel edit mode
  * JS API util.js: Add doNotReap parameter to trySpawn ct. itzexor
  * util.js: Add documentation for spawn_async.
  * Add support to manage the systemd services available on the
    system.
  * cs_startup.py: Add a "Run now" button for when a row is selected.
  * Make sure applets that don't support vertical panels don't get
    dropped on a vertical panel. This was happening with at least
    some applets, causing them to "disappear", and could only be
    recovered by removing them from applet settings and re-adding
    them again.
  * cinnamon-settings: Fix some sliders being drawn backwards.
  * settings.js: Handle corrupt settings the right way. Fixes
    several issues with the previous implementation.
  * xlet settings: Add a list widget.
  * xlet settings: Fix the reference to new option added to wrong
    element.
  * Settings: Add support for lightdm-settings.
  * xlets-about-dialog: Show timestamp if exists else show version
    &amp; show "more info" button.
  * spawn_async: Clean the callbacks up after we're done.
  * looking-glass: Use bracket notation for property accessors when
    inspecting.
  * Environment: Don't fail in toString().
  * looking-glass: Set null results' value to "[null]".
  * Fix panel timeout spinbuttons jumping around
    (gh#linuxmint/Cinnamon#6374).
  * Add Manjaro Support in System Info (gh#linuxmint/Cinnamon#6387).
  * systray: Add CSS class to permit theming.
  * systray-applet: Don't crash in on_applet_removed_from_panel.
  * st-theme-node: Remove a double declaration that gives a
    compiler warning.
  * Start inode/directory application instead unregistered
    x-scheme-handler/file in case of unmounted bookmarks.
  * st-entry: Change the variable type to avoid a compiler warning.
  * Add a chooser for "inode/directory" to be able to choose the
    default file manager.
  * xlet-settings: Add a missing string for l10n.
  * st-box-layout: Remove an unused variable.
  * panel.js: Refactor Panel._showPanel and Panel._hidePanel.
  * panel.js: Don't clip the panel box shadow when showing after
    hide.
  * cs_accessibility: Restore previous theme when disabling
    High Contrast.
  * Remove panelMenu.js, which is unused but for 2 applets.
    There are a bunch of applets that import it but don't use it,
    all of which can be fixed now.
  * hotcorners: Remove the icon option.
  * cinnamon-looking-glass.py: Handle the numpad entering in entry.
  * Remove aclocal from autogen.sh as autoreconf runs it.
  * Fix for non translated applet names on Remove context menu items.
  * [Xlets] Expose config deletion request to xlet.
  * modalDialog: Avoid a js warning.
  * utils: Add check-js, to scan for runtime-breaking javascript
    syntax errors.
  * Adjustments after enabling margin for st.
  * cs_user.py: Save appropriately sized .face for
    cinnamon-screensaver.
  * cs_mouse: Add new settings to control acceleration/sensitivity.
  * power-applet: Add support for warning and error style classes.
  * cs_panel.py: Rework individual panel page to simplify code, fix
    some bugy behaviour, and improve readability.
  * Update keybindings.js.
  * Adapt Cinnamon to multi-process CSD.
  * messageTray: Show critical notifications in fullscreen.
  * cs_panel.py: Replace panel widgets with backended ones.
    This will hopefully ensure that the widgets are consistent with
    the rest of Cinnamon in terms of behaviour and appearance, as
    well as easier to maintain.
  * panel.js: Keep track of panelPosition and monitor changes.
  * panel.js: Refactor _moveResizePanel.
  * layout.js: Don't include clipped off areas in input region.
  * README file to reStructuredText file.
  * St: Margin: Remove margin:auto from menu applet and default
    theme. This avoids warning messages as margin:auto is not
    supported. And it also means third party theme developers will
    not copy non-functional CSS. The warning messages for the
    programmatic insertion of margin:auto in the menu applet were
    particularly cryptic.
  * st: Fix a couple icon/text-shadow bugs.
  * cinnamon-json-makepot: Fix for undefined global name.
  * Update cs_power.py.
  * Use St.Icon instead of fetching icons from St.TextureCache.
  * all: Adapt to changes for the new cjs (gjs 1.48/mozjs38).
  * panel.js warning fix.
  * osdWindow: Fix the level bar display.
  * Remove memory info stuff from looking glass, cinnamon-global.
  * control: Adjust version reqs for libcjs.
  * all: Some additional warning fixes due to gjs 1.48.0-&gt;1.48.2
    changes.
  * panel-launchers: Fix the panel launcher animation.
  * melange: don't freeze on quit with custom log watchers.
  * desklet.js: Ignore an extra argument to setContent().
  * js/ui/tooltip.js: Check if this.mousePosition is defined.
  * Move this.mousePosition initial assignment to TooltipBase.
  * Supress CJS mozjs38 warnings in applet, dbusMenu, indicator...
  * Correct indentation.
  * main.js: Improve logging of GLib.Errors and objects
    (gh#linuxmint/Cinnamon#6486).
  * menu-applet &amp; panel-launchers: Add new mouse cursors while.
    dragging applications (gh#linuxmint/Cinnamon#5859)
  * l10n: Update POT file.
  * l10n: Generate additional files.
- Rebase cinnamon-settings-native.patch.
- Add cinnamon-fix-gtk-3.14.patch: Add GTK+ 3.14 compatibility.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1495627200">- Update to version 3.4.1:
  * Remove usage of GTK_POLICY_EXTERNAL.
  * checkBox.js: Remove extra unused argument which was causing a
    warning with new cjs/mozjs.
  * st-bin.c: Fix y_fill setter (it was setting x_fill to the value
    of the existing y_fill, before it is set in the same call).
  * menu applet: Fix keyboard navigation of recent context menu.
    Fix closing of same menu when switching to another category.
    Also fix closing when opening another recent's context menu.
  * menu applet: Notify when a recent file is activated that can't
    be accessed.
  * menu applet: Make missing file notification transient.
  * menu applet (vector box): Partially revert c0d37dd: there is
    flickering as events go from a button to the vector box and
    back. Remove the idle callback, and directly react to the enter
    even once more. To compensate, increase our
    maybeUpdateVectorBox delay timeout, which more or less fixes
    the original problem the above commit was attempting to fix.
  * menu applet: _select_category - only call displayButtons if the
    category has really changed.
  * menu applet: Fix keyboard navigation when a second recent
    context menu is toggled open.
  * Sound settings: Fix device icons.
  * xlet-settings.py: Ignore files and directories in the config
    directory that aren't created by our settings api as well as
    instances that no longer exist.
  * ExtensionCore.py: Don't scrub the config directory on load.
    This is no longer necessary since xlet settings now ignores
    anything that isn't an active instance, and some applets need a
    place to store extra files so they get cleaned up on uninstall.
  * cs_panel.py: Fix a crash when there are no panels.
  * sound-applet: Remove extraneous arguments on add_actor calls.
  * radioButton.js: Remove an extra argument to add_actor.
  * window-list-applet: Fix undefined reference warning.
  * cinnamon-json-makepot: Add support to extract "title" and
    "units" keys on list elements.
  * User applet: Remove the ability to switch to guest with LightDM.
  * runDialog.js: Fix undefined variable warning.
  * Reorganise the default applets in the panel.
  * User applet: Remove trailing spaces.
  * Applets: Make TextIconApplet smarter and adapt to vertical
    panels.
  * menu applet: Use _select_category to select recents and places,
    so we can cache the current selection more accurately and
    prevent needless calls to _displayButtons.
  * window list: Add a missing dependency to settings.
- Remove cinnamon-fix-gtk-3.14.patch.
- Rebase cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498046400">- Update to version 3.4.2:
  * st-texture-cache.c: Do not cache st_texture_cache_load_from_raw.
    Its only user is the Notification Daemon. These are transient
    images that were being stored in the cache that would never be
    evicted during theme changes (this does not just mean times
    when the user changed the icon theme).
  * l10n: Translate hardcoded string for settings reset
    confirmation dialogue.
  * Silence a few more warnings, new warnings.
  * expo, overview: Unreference actors that we destroy whenever the
    respective view closes.
  * cinnamon-slideshow.py: Only allow a single instance to run.
  * Sound applet: Avoid spacing problem in vertical panel.
  * photoframe-desklet: Fix a few issues.
  * notificationDaemon.js: Silence an occasional warning.
  * SettingsWidgets.py: Make switch widgets use "center" vertical
    alignment instead of "fill," to prevent the switch growing in
    height when the label text gets ellipsised (either through
    resizing of the window, or localisation).
  * Progress bar text initialises and resets.
  * cinnamon-settings-users: Restrict the size of user images, as
    they are displayed in the right view when a user is selected.
    If the image at /var/lib/AccountsService/icons/&lt;user&gt; is set to
    a ridiculously-sized image, it won't break the ui.
  * cs_user: Don't let large images break the ui - make sure we
    scale the selected image to an appropriate size.
    Also, don't crop user-selected images (but keep cropping webcam
    images) - it's strange to select an image file and have the
    ends of it cut off.
  * cinnamon-settings-users.py: Fix picture preview in file
    selector to maintain a reasonable size.
  * cs_user.py: Handle image previews better in the face chooser
    dialogue.
  * ChooserButtonWidgets.py: Fix a Python 3 error.
  * window-list: Bring space around preview down and correct a
    calculation problem.
  * StScrollView: Queue redraws whenever the adjustments change, to
    prevent artifacts outside of the view itself.
  * StScrollView: More effective way of fixing the graphical
    artefacts generated during scrolling. This also appears to fix
    some unrelated tearing issues I was seeing in the menu while
    testing.
  * main.c: Own onboard's dbus name to prevent it starting when
    gnome's a11y keyboard settings key is active
    (org.gnome.desktop.a11y.applications screen-keyboard-enabled).
    Also own caribou's daemon. Caribou's OSK won't interfere in a
    Cinnamon session, but its daemon will run needlessly in the
    background otherwise.
  * panel: Avoid cjs giving a warning that dummyPanels[i][j] is
    undefined.
  * systray applet: Make sure an icon actually got parented to
    this.manager_container before calling remove_child.
    This issue can occur during session startup.
  * spacer applet: Use a unique style class in the theme to prevent
    the applet from appearing active when hovered.
  * theme: Add applet-spacer class for spacer applet.
  * spacer applet: Use track_hover instead of a new style to
    prevent highlighting.
  * osdWindow: get the correct child allocation when calculating
    the width of the level bar. If a padding or margin is added to
    the level-bar style class, it was causing the parent bin to
    expand to accomodate the child's width plus its required
    padding.
- Rebase cinnamon-wheel-and-sbin-path.patch,
  cinnamon-no-gksu-requirement.patch,
  cinnamon-favourite-applications.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498651200">- Update to version 3.4.3:
  * panel-launchers: Put individual launcher actions back in the
    main popup, having an options and preferences submenu was a
    bit ambiguous.
  * panel-launchers: Remove an undeclared variable warning.
  * deskletManager: Correct a call to file.delete.
  * Add a menu item to toggle the on-screen keyboard.
- Use update-alternatives to create the default.desktop xsession.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1499601600">- Update to version 3.4.4:
  * classicSwitcher.js: Fix hidpi issues.
  * KeybindingWidgets.py: Fix parsing of accelerators that are
    shifted but not alpha-numeric characters.
  * xlet-settings.py: Do not crash when an invalid xlet id is
    provided.
  * window-list applet: Fix argument warning.
  * Add an issue template.
  * ui/settings: Handle undefined old settings values.
  * hotCorner.js: Fix hover delay callback.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1499860800">- Require NetworkManager-gnome on openSUSE older than Leap 15.x
  still (boo#1047540).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1503230400">- Update to version 3.4.6 (changes since 3.4.4):
  * osdWindow.js: Always check the theme node on first showing - an
    actor's width isn't necessarily filled if it hasn't been
    explicitly set, causing the first few activations of the OSD to not show an accurate level bar.
  * cs_default: Fix an incorrect button label (but preserve
    translations).
  * main.js: Remove an obsolete Meta enum member reference.
  * workspace.js: Use our normal prototype init method.
  * workspace.js: Initalise WindowClone._zoomStep to 0.
  * slideshow-applet: Fix a translation.
  * cs_themes.py: Create the file "~/.icons/default/index.theme" and
    set the selected cursor theme inside of it. This ensures other
    (non-gtk) applications end up using the same theme (though they
    are required to be restarted for these changes to take effect).
  * keyboard-applet: Applet icon vanishes when moved in edit mode.
  * cinnamon-json-makepot: Add keyword option, change language used
    by xgettext to JavaScript.
  * expoThumbnail: Correct a couple of calls with mismatched
    argument counts.
  * window-list: Set AppMenuButtons unreactive during panel edit
    mode.
  * panel-launchers: Set PanelAppLaunchers unreactive during panel
    edit mode.
  * windows-quick-list: Fix argument warning.
  * Fix a reference to undefined actor._delegate warning.
  * ui/environment: Handle undefined actors in
    containerClass.prototype.add.
  * ui/cinnamonDBus: Handle null xlet objects in
    CinnamonDBus.highlightXlet.
  * deskletManager: Initialise some variables and remove the
    variables that were initialised, probable typo</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509192000">- Update to version 3.6.0:
  * See /usr/share/doc/packages/cinnamon/changelog
- Rebase cinnamon-network-user-connections.patch,
  cinnamon-settings-native.patch, cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510228800">- Update to version 3.6.1:
  * Fix blurry and off-centred arrow in pop up submenus.
  * cinnamon-settings: Remove an ui file that is no longer used
    since the extension-settings-rework.
  * Spices.py: Fix xlets not installing if a file without an
    extension is in the po directory.
  * TreeListWidgets.py: Edit elements with double click.
  * Fix Gtk-Message when running a dialogue.
  * window-list: Account for hidden items during DnD repositioning.
  * Spices: Don't fail if the spice directory is missing.
- Rebase cinnamon-wheel-and-sbin-path.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510488000">- Update to version 3.6.2:
  * st-texture-cache: Avoid potential null pointer dereference.
- Rebase cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511006400">- Update to version 3.6.3:
  * Show-desktop: Disable peek-at-desktop by default.
  * menu applet: Recalculate applications list box height when the
    menu's allocation changes.
  * Applets: When setting an icon, make sure it's actually an
    St.Icon. Some applets (such as the keyboard applet) set
    _applet_icon to something other than an St.Icon, so it causes
    an error when trying to set the icon using one of the api
    functions. This was causing the keyboard applet not to show in
    the panel edit mode after a keyboard layout was added and
    removed.
  * applet settings: Fix panel switch buttons not being hidden when
    there is only one panel.
  * Add Adwaita-dark thumbnails.
  * extension settings: Scan the system directory for extensions.
  * Initialise applet position to avoid drag and drop errors in
    edit mode occasionally the null applet position was being
    carried through to the writing of the new applet causing
    apparent drop failures, and to the disappearance of the
    highlighted drop box. Much visible weirdness with a very simple
    solution.
  * workspace switcher: Fix an undeclared variable warning.
  * applet settings: Improve the logic for highlighting the panel.
    The panel is now only highlighted when there is more than one
    panel, and it's better about selecting and highlighting the
    correct panel when one is added or removed.
  * Fixed spacing. Add a missing semicolon.
  * popupMenu: Prevent a warning of this._triangle.
  * Clock applet: Respect a 12h/24h choice in the vertical mode.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511265600">- Update to version 3.6.5 (changes since 3.6.3):
  * calendar applet: Just listen to the gsetting key for 24h to
    make sure the vertical panel default clock obeys global
    date/time settings.
  * st-theme.c: st_theme_resolve_url could assert with a theme
    issue.
  * cinnamon-settings: Use icon buttons in the xlet management
    pages.
  * Fixes crash if device.get_icon_name() is Null.
  * Allow showing seconds on a vertical panel.
  * cs_sound.py: Replace tabs with spaces.
  * calendar applet: Fix formatting.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511524800">- Update to version 3.6.6:
  * Sound settings: Assign the selected device to the profile
    selector.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514116800">- Update to version 3.6.7:
  * Online Accounts: Use translations.
  * cinnamonDBus.js: Have GetMonitors throw an error back to GDBus
    if something goes wrong.
  * menu-applet: Rework vectorBox.
  * Fix power applet spamming the log file with error messages on
    laptops (gh#linuxmint/Cinnamon#7114).
  * Spices description: Do not cut off the letter "n".
  * Xlets: Fix shown info for overwritten xlets.</changelog>
  <changelog author="sb56637@geckolinux.github.io" date="1517659200">- Changed dependency from python-pam to python2-python-pam</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1530792000">- Add cinnamon-settings-fix-symlink-vuln.patch by Matthias Gerstner
  to fix a symlink attack vulnerability (CVE-2018-13054,
  bsc#1083067, commit 66e54f4).
- Minor spec clean-up.</changelog>
</package>
<package pkgid="af621a29f8033cce49d40204a5bc050e6c9582d63788b44215a29358e4dfc7df" name="clamav" arch="src">
  <version epoch="0" ver="0.100.1" rel="lp150.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1457006400">- Update to version 0.99.1
  * hwp5.x: fix for streams without names
  * libclamav: yara: avoid unaliged access to 64bit variable
  * patch by Mark Allan to add show-progress option to freshclam.
  * added 'CustomXML' as trigger for likely OOXML
  * ClamAV 0.99.1 beta1 release.
  * add scanning options for scanning xml-based documents
  (MSXML, OOXML, HWPML) and HWP3
  * add dconfs for XDP, MBR, GPT, APM, OOXML, MSXML, and HWP formats
  * hwp: scan decompressed data on limits exceeded
  * Fix for signature name length&lt;3 in .ign &amp; .ign2 CVD files.
  * Change RTF file magic from '{\rtf' to '{\rt'
  * zeroing out buffer at allocation to avoid writing uninitialized
  bytes to a file
  * adding check for compressed input stream
  * clean up and boost accuracy to detecting OOXML documents
  * Fix crash when using pcre statistics due to inconsistent memory
  management function calls
  * adding check to verify a valid number of rounds for rijndael aes
  encryption/decryption
  * fixing edge case revealed by unit testing
  * let html be scanned raw when --scan-html=no is in effect.
  * fix crash due to memory overlay with crafted 7z files.
  * fixing off by one OOB write in htmlnorm
  * fixing autoit OOB bufferread
  * sigtool: adding support for decoding cdb sigs
  * fix embedded http links.
  * fix regression crash on sid 1005597703 due to uninitialzed
  (i.e., garbage initialized) structure.
  * corrects mso stream prefix value for big endian processors.
  * ooxml_hwp: add support for filetyping and preclassification
  * hwpole2: new filetype and handler for hwp embedded ole2 files
  * fixing possible oob dereference when parsing mbox files
  * adding explicit wwunpack oob checks
  * fixing edge case where a null terminator was unintentionally
  written into an adjacent buffer.
  * hwpml: use msxml_parser callback scanner for binary data
  * msxml_parser: add callback-based scanning mechanism
  * HWPML: added hwpml_keys for hwpml parsing
  * add HMPML filetype, tab fixes in filetype.c
  * Hwp3.x: inflate compressed segment and offset tracking
  * Hwp3.x file header parsing and preclass
  * pcre: fixed minimum pcre version check
  * fix detection of libcheck without pkg-config file
  * add HWP5 filetype tracking to preclassification
  * add HWP 3.x internal filetypes
  * add hwp5 contents to preclass set
  * proper identification of HWP file format
  * strengthen file typing for OOXML.
  * normalization of whitelist signatures
  * github issue #9 - wrong length &amp; offset.</changelog>
  <changelog author="martin.liska@suse.com" date="1466164800">- Change default C++ std to -std=gnu++98.</changelog>
  <changelog author="fweiss@suse.com" date="1466683200">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged manually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="jengelh@inai.de" date="1469102400">- Trim useless words from description and fix spellos.
  Test for user/group existence before adding and always show
  errors when they occur.</changelog>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
</package>
<package pkgid="1edfa540ec6c7e400e4616c3fc0bccacbef15b2dc994d83abd5dd6e679b35409" name="clamav" arch="x86_64">
  <version epoch="0" ver="0.100.1" rel="lp150.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1457006400">- Update to version 0.99.1
  * hwp5.x: fix for streams without names
  * libclamav: yara: avoid unaliged access to 64bit variable
  * patch by Mark Allan to add show-progress option to freshclam.
  * added 'CustomXML' as trigger for likely OOXML
  * ClamAV 0.99.1 beta1 release.
  * add scanning options for scanning xml-based documents
  (MSXML, OOXML, HWPML) and HWP3
  * add dconfs for XDP, MBR, GPT, APM, OOXML, MSXML, and HWP formats
  * hwp: scan decompressed data on limits exceeded
  * Fix for signature name length&lt;3 in .ign &amp; .ign2 CVD files.
  * Change RTF file magic from '{\rtf' to '{\rt'
  * zeroing out buffer at allocation to avoid writing uninitialized
  bytes to a file
  * adding check for compressed input stream
  * clean up and boost accuracy to detecting OOXML documents
  * Fix crash when using pcre statistics due to inconsistent memory
  management function calls
  * adding check to verify a valid number of rounds for rijndael aes
  encryption/decryption
  * fixing edge case revealed by unit testing
  * let html be scanned raw when --scan-html=no is in effect.
  * fix crash due to memory overlay with crafted 7z files.
  * fixing off by one OOB write in htmlnorm
  * fixing autoit OOB bufferread
  * sigtool: adding support for decoding cdb sigs
  * fix embedded http links.
  * fix regression crash on sid 1005597703 due to uninitialzed
  (i.e., garbage initialized) structure.
  * corrects mso stream prefix value for big endian processors.
  * ooxml_hwp: add support for filetyping and preclassification
  * hwpole2: new filetype and handler for hwp embedded ole2 files
  * fixing possible oob dereference when parsing mbox files
  * adding explicit wwunpack oob checks
  * fixing edge case where a null terminator was unintentionally
  written into an adjacent buffer.
  * hwpml: use msxml_parser callback scanner for binary data
  * msxml_parser: add callback-based scanning mechanism
  * HWPML: added hwpml_keys for hwpml parsing
  * add HMPML filetype, tab fixes in filetype.c
  * Hwp3.x: inflate compressed segment and offset tracking
  * Hwp3.x file header parsing and preclass
  * pcre: fixed minimum pcre version check
  * fix detection of libcheck without pkg-config file
  * add HWP5 filetype tracking to preclassification
  * add HWP 3.x internal filetypes
  * add hwp5 contents to preclass set
  * proper identification of HWP file format
  * strengthen file typing for OOXML.
  * normalization of whitelist signatures
  * github issue #9 - wrong length &amp; offset.</changelog>
  <changelog author="martin.liska@suse.com" date="1466164800">- Change default C++ std to -std=gnu++98.</changelog>
  <changelog author="fweiss@suse.com" date="1466683200">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged manually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="jengelh@inai.de" date="1469102400">- Trim useless words from description and fix spellos.
  Test for user/group existence before adding and always show
  errors when they occur.</changelog>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
</package>
<package pkgid="24e29788b4dab0a42c5333c2171fb8f81463bcbf089e81d0471b0691fb7ffe78" name="clamav" arch="src">
  <version epoch="0" ver="0.100.2" rel="lp150.2.6.1"/>
  <changelog author="martin.liska@suse.com" date="1466164800">- Change default C++ std to -std=gnu++98.</changelog>
  <changelog author="fweiss@suse.com" date="1466683200">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged manually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="jengelh@inai.de" date="1469102400">- Trim useless words from description and fix spellos.
  Test for user/group existence before adding and always show
  errors when they occur.</changelog>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
</package>
<package pkgid="576364ec693ba34c148b71d4516f0b2255bebd36e3493712d419746e5ed7b687" name="clamav" arch="x86_64">
  <version epoch="0" ver="0.100.2" rel="lp150.2.6.1"/>
  <changelog author="martin.liska@suse.com" date="1466164800">- Change default C++ std to -std=gnu++98.</changelog>
  <changelog author="fweiss@suse.com" date="1466683200">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged manually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="jengelh@inai.de" date="1469102400">- Trim useless words from description and fix spellos.
  Test for user/group existence before adding and always show
  errors when they occur.</changelog>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
</package>
<package pkgid="f9f92530b6d20c1de88f8fbc663b75668aea57b3ebf705990b47f16a07cae16c" name="clamav-devel" arch="x86_64">
  <version epoch="0" ver="0.100.1" rel="lp150.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1457006400">- Update to version 0.99.1
  * hwp5.x: fix for streams without names
  * libclamav: yara: avoid unaliged access to 64bit variable
  * patch by Mark Allan to add show-progress option to freshclam.
  * added 'CustomXML' as trigger for likely OOXML
  * ClamAV 0.99.1 beta1 release.
  * add scanning options for scanning xml-based documents
  (MSXML, OOXML, HWPML) and HWP3
  * add dconfs for XDP, MBR, GPT, APM, OOXML, MSXML, and HWP formats
  * hwp: scan decompressed data on limits exceeded
  * Fix for signature name length&lt;3 in .ign &amp; .ign2 CVD files.
  * Change RTF file magic from '{\rtf' to '{\rt'
  * zeroing out buffer at allocation to avoid writing uninitialized
  bytes to a file
  * adding check for compressed input stream
  * clean up and boost accuracy to detecting OOXML documents
  * Fix crash when using pcre statistics due to inconsistent memory
  management function calls
  * adding check to verify a valid number of rounds for rijndael aes
  encryption/decryption
  * fixing edge case revealed by unit testing
  * let html be scanned raw when --scan-html=no is in effect.
  * fix crash due to memory overlay with crafted 7z files.
  * fixing off by one OOB write in htmlnorm
  * fixing autoit OOB bufferread
  * sigtool: adding support for decoding cdb sigs
  * fix embedded http links.
  * fix regression crash on sid 1005597703 due to uninitialzed
  (i.e., garbage initialized) structure.
  * corrects mso stream prefix value for big endian processors.
  * ooxml_hwp: add support for filetyping and preclassification
  * hwpole2: new filetype and handler for hwp embedded ole2 files
  * fixing possible oob dereference when parsing mbox files
  * adding explicit wwunpack oob checks
  * fixing edge case where a null terminator was unintentionally
  written into an adjacent buffer.
  * hwpml: use msxml_parser callback scanner for binary data
  * msxml_parser: add callback-based scanning mechanism
  * HWPML: added hwpml_keys for hwpml parsing
  * add HMPML filetype, tab fixes in filetype.c
  * Hwp3.x: inflate compressed segment and offset tracking
  * Hwp3.x file header parsing and preclass
  * pcre: fixed minimum pcre version check
  * fix detection of libcheck without pkg-config file
  * add HWP5 filetype tracking to preclassification
  * add HWP 3.x internal filetypes
  * add hwp5 contents to preclass set
  * proper identification of HWP file format
  * strengthen file typing for OOXML.
  * normalization of whitelist signatures
  * github issue #9 - wrong length &amp; offset.</changelog>
  <changelog author="martin.liska@suse.com" date="1466164800">- Change default C++ std to -std=gnu++98.</changelog>
  <changelog author="fweiss@suse.com" date="1466683200">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged manually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="jengelh@inai.de" date="1469102400">- Trim useless words from description and fix spellos.
  Test for user/group existence before adding and always show
  errors when they occur.</changelog>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
</package>
<package pkgid="791d74a8cb98060a73ae743b0bf230365e69d68cb80fe1cc05be23c56c26c177" name="clamav-devel" arch="x86_64">
  <version epoch="0" ver="0.100.2" rel="lp150.2.6.1"/>
  <changelog author="martin.liska@suse.com" date="1466164800">- Change default C++ std to -std=gnu++98.</changelog>
  <changelog author="fweiss@suse.com" date="1466683200">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged manually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="jengelh@inai.de" date="1469102400">- Trim useless words from description and fix spellos.
  Test for user/group existence before adding and always show
  errors when they occur.</changelog>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
</package>
<package pkgid="28bbe334d5237cd3e4d344ea5d52abd2ad1c2e9396ce21e5baf332cf61ed2849" name="clang" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.4.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1469707200">- for ppc64le set memory to 4GB in _constraints file
  (failure in Factory:PowerPC)</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Start conversion to use cmake macros with now introduced
  compatibility for ninja
- Reduce number of threads if we don't have enough memory
- Add patch for the nonvoid returns:
  * llvm-nonvoid-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1472644800">- Update to llvm 3.8.1
  * See http://llvm.org/releases/3.8.1/docs/ReleaseNotes.html and
    http://llvm.org/releases/3.8.1/tools/docs/ReleaseNotes.html
- Use versioned libLLVM (to libLLVM3_8) and libclang (to libclang3_8)
- Change versioning of liblldb3_8 to liblldb-3_8 and use a variable
  to control the name instead of hard-coding it.
- Use bcond_with and bcond_without to enable/disable build options
  instead of hard-coding them.
- Put buildrequires as requires in -devel packages to avoid linker errors
  when building packages against the -devel packages.
- Add ffi support (disabled by default).
- Add oprofile support (disabled by default).
- Add valgrind support (disabled by default).
- Link cmake files to the normal cmake file directory to allow autodetection
  of cmake interfaces.
- Remove unused lldb components from main spec file.
- Split llvm python bindings into own subpackage.
- Split emacs plugin into own subpackage
- Move additional vim plugins into vim plugins package
- Split libc++, libLTO, LLVMgold, libomp, clang-chekers into own subpackages
- Make python-clang, llvm-vim-plugins, and llvm-emacs-plugins noarch since
  they aren't architecture-specific.
- Make packages besides llvm, llvm-clang, and the shared libraries conflict
  with other versions.  This will be important when multiple LLVM versions
  are supported.
- Various spec file cleanups
- Rebase patches:
  * arm_suse_support.diff
  * assume-opensuse.patch
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * glibc-2.23-libcxx.patch
  * glibc-2.24-libcxx.patch
  * lldb-add-pthread-dl-libs.patch
  * lldb-cmake.patch
  * llvm-fix-find-gcc5-install.patch
  * llvm-nonvoid-return.patch
  * llvm-remove-clang-only-flags.patch
  * revert-cmake-soname.patch
  * set-revision.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Sort a bit with spec-cleaner
- Remove the latest switch for now, things should be either coinstallable
  or not, we don't need to bother around with compilation like this</changelog>
  <changelog author="toddrme2178@gmail.com" date="1473422400">- Split out llvm and lldb into a version-specific package.
- Turn this package into a wrapper around the version-specific
  packages.
- Remove patches:
  * default-to-i586.patch
  * assume-opensuse.patch
  * glibc-2.23-libcxx.patch
  * arm_suse_support.diff
  * llvm-remove-clang-only-flags.patch
  * clang-resourcedirs.patch
  * lldb-add-pthread-dl-libs.patch
  * llvm-nonvoid-return.patch
  * glibc-2.24-libcxx.patch
  * revert-cmake-soname.patch
  * set-revision.patch
  * lldb-cmake.patch
  * D15067.id41365.diff
  * llvm-fix-find-gcc5-install.patch</changelog>
  <changelog author="idonmez@suse.com" date="1475668800">- BuildIgnore emacs and vim to avoid cycles.</changelog>
  <changelog author="idonmez@suse.com" date="1475755200">- Remove unneeded emacs-nox dependency.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475841600">- Improve README.packaging.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1480680000">- Update to version 3.9.0
  * See:
    + http://llvm.org/releases/3.9.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  * Fix the following patches:
    + arm_suse_support.diff
    + assume-opensuse.patch
    + clang-resourcedirs.patch
    + default-to-i586.patch
    + glibc-2.23-libcxx.patch
    + glibc-2.24-libcxx.patch
    + lldb-add-pthread-dl-libs.patch
    + lldb-cmake.patch
    + llvm-fix-find-gcc5-install.patch
    + llvm-remove-clang-only-flags.patch
    + revert-cmake-soname.patch
    + set-revision.patch
  * Remove upstream-included patch:
    + llvm-nonvoid-return.patch
  * Remove patch for removed files:
    + glibc-2.23-libcxx.patch
- Backport upstream patches:
  * clang-fix-substitutions-abi_tag.patch
  * clang-incomplete-field-types.patch
  * llvm-install-CheckAtomic.patch
- Add clang%{_sonum}-include-fixer subpackage and associated
  libfindAllSymbols%{_sonum} and libfindAllSymbols%{_sonum}-devel
  subpackages.
- Add sanstats to llvm binary list.</changelog>
  <changelog author="idonmez@suse.com" date="1482321600">- Update to version 3.9.1
  * See:
    + http://llvm.org/releases/3.9.1/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1490788800">- Update to version 4.0.0
  * See:
    + http://llvm.org/releases/4.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1498564800">- Update to version 4.0.1
  * Minor bugfixes</changelog>
  <changelog author="msrb@suse.com" date="1507550400">- Add clang-devel-static package.
  * Requires clang4-devel-static that was added to llvm4 package.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Update to version 5.0.0
  * See:
    + http://llvm.org/releases/5.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="msrb@suse.com" date="1513166401">- Rename python-lldb to python3-lldb to match the renamed package
  in llvm4 and llvm5 after switch to python3. Fix its dependency.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Add lld package.
  * LLD is new since llvm5.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Update to version 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Add missing %files for lld.</changelog>
  <changelog author="msrb@suse.com" date="1516795200">- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1531915200">- Add ExcludeArch mirroring the ones in llvm5. (bnc#1101598)</changelog>
</package>
<package pkgid="8b2a07b3f61cb8b23cf663b8bac33950b7e1bf5566dfc758a1c9b1770854e047" name="clang-checker" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.4.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1469707200">- for ppc64le set memory to 4GB in _constraints file
  (failure in Factory:PowerPC)</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Start conversion to use cmake macros with now introduced
  compatibility for ninja
- Reduce number of threads if we don't have enough memory
- Add patch for the nonvoid returns:
  * llvm-nonvoid-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1472644800">- Update to llvm 3.8.1
  * See http://llvm.org/releases/3.8.1/docs/ReleaseNotes.html and
    http://llvm.org/releases/3.8.1/tools/docs/ReleaseNotes.html
- Use versioned libLLVM (to libLLVM3_8) and libclang (to libclang3_8)
- Change versioning of liblldb3_8 to liblldb-3_8 and use a variable
  to control the name instead of hard-coding it.
- Use bcond_with and bcond_without to enable/disable build options
  instead of hard-coding them.
- Put buildrequires as requires in -devel packages to avoid linker errors
  when building packages against the -devel packages.
- Add ffi support (disabled by default).
- Add oprofile support (disabled by default).
- Add valgrind support (disabled by default).
- Link cmake files to the normal cmake file directory to allow autodetection
  of cmake interfaces.
- Remove unused lldb components from main spec file.
- Split llvm python bindings into own subpackage.
- Split emacs plugin into own subpackage
- Move additional vim plugins into vim plugins package
- Split libc++, libLTO, LLVMgold, libomp, clang-chekers into own subpackages
- Make python-clang, llvm-vim-plugins, and llvm-emacs-plugins noarch since
  they aren't architecture-specific.
- Make packages besides llvm, llvm-clang, and the shared libraries conflict
  with other versions.  This will be important when multiple LLVM versions
  are supported.
- Various spec file cleanups
- Rebase patches:
  * arm_suse_support.diff
  * assume-opensuse.patch
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * glibc-2.23-libcxx.patch
  * glibc-2.24-libcxx.patch
  * lldb-add-pthread-dl-libs.patch
  * lldb-cmake.patch
  * llvm-fix-find-gcc5-install.patch
  * llvm-nonvoid-return.patch
  * llvm-remove-clang-only-flags.patch
  * revert-cmake-soname.patch
  * set-revision.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Sort a bit with spec-cleaner
- Remove the latest switch for now, things should be either coinstallable
  or not, we don't need to bother around with compilation like this</changelog>
  <changelog author="toddrme2178@gmail.com" date="1473422400">- Split out llvm and lldb into a version-specific package.
- Turn this package into a wrapper around the version-specific
  packages.
- Remove patches:
  * default-to-i586.patch
  * assume-opensuse.patch
  * glibc-2.23-libcxx.patch
  * arm_suse_support.diff
  * llvm-remove-clang-only-flags.patch
  * clang-resourcedirs.patch
  * lldb-add-pthread-dl-libs.patch
  * llvm-nonvoid-return.patch
  * glibc-2.24-libcxx.patch
  * revert-cmake-soname.patch
  * set-revision.patch
  * lldb-cmake.patch
  * D15067.id41365.diff
  * llvm-fix-find-gcc5-install.patch</changelog>
  <changelog author="idonmez@suse.com" date="1475668800">- BuildIgnore emacs and vim to avoid cycles.</changelog>
  <changelog author="idonmez@suse.com" date="1475755200">- Remove unneeded emacs-nox dependency.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475841600">- Improve README.packaging.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1480680000">- Update to version 3.9.0
  * See:
    + http://llvm.org/releases/3.9.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  * Fix the following patches:
    + arm_suse_support.diff
    + assume-opensuse.patch
    + clang-resourcedirs.patch
    + default-to-i586.patch
    + glibc-2.23-libcxx.patch
    + glibc-2.24-libcxx.patch
    + lldb-add-pthread-dl-libs.patch
    + lldb-cmake.patch
    + llvm-fix-find-gcc5-install.patch
    + llvm-remove-clang-only-flags.patch
    + revert-cmake-soname.patch
    + set-revision.patch
  * Remove upstream-included patch:
    + llvm-nonvoid-return.patch
  * Remove patch for removed files:
    + glibc-2.23-libcxx.patch
- Backport upstream patches:
  * clang-fix-substitutions-abi_tag.patch
  * clang-incomplete-field-types.patch
  * llvm-install-CheckAtomic.patch
- Add clang%{_sonum}-include-fixer subpackage and associated
  libfindAllSymbols%{_sonum} and libfindAllSymbols%{_sonum}-devel
  subpackages.
- Add sanstats to llvm binary list.</changelog>
  <changelog author="idonmez@suse.com" date="1482321600">- Update to version 3.9.1
  * See:
    + http://llvm.org/releases/3.9.1/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1490788800">- Update to version 4.0.0
  * See:
    + http://llvm.org/releases/4.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1498564800">- Update to version 4.0.1
  * Minor bugfixes</changelog>
  <changelog author="msrb@suse.com" date="1507550400">- Add clang-devel-static package.
  * Requires clang4-devel-static that was added to llvm4 package.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Update to version 5.0.0
  * See:
    + http://llvm.org/releases/5.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="msrb@suse.com" date="1513166401">- Rename python-lldb to python3-lldb to match the renamed package
  in llvm4 and llvm5 after switch to python3. Fix its dependency.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Add lld package.
  * LLD is new since llvm5.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Update to version 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Add missing %files for lld.</changelog>
  <changelog author="msrb@suse.com" date="1516795200">- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1531915200">- Add ExcludeArch mirroring the ones in llvm5. (bnc#1101598)</changelog>
</package>
<package pkgid="7232094f9589dd95deaa009a67305b195a8bc128cf1417e36b6d9548bfef7422" name="clang-devel" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.4.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1469707200">- for ppc64le set memory to 4GB in _constraints file
  (failure in Factory:PowerPC)</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Start conversion to use cmake macros with now introduced
  compatibility for ninja
- Reduce number of threads if we don't have enough memory
- Add patch for the nonvoid returns:
  * llvm-nonvoid-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1472644800">- Update to llvm 3.8.1
  * See http://llvm.org/releases/3.8.1/docs/ReleaseNotes.html and
    http://llvm.org/releases/3.8.1/tools/docs/ReleaseNotes.html
- Use versioned libLLVM (to libLLVM3_8) and libclang (to libclang3_8)
- Change versioning of liblldb3_8 to liblldb-3_8 and use a variable
  to control the name instead of hard-coding it.
- Use bcond_with and bcond_without to enable/disable build options
  instead of hard-coding them.
- Put buildrequires as requires in -devel packages to avoid linker errors
  when building packages against the -devel packages.
- Add ffi support (disabled by default).
- Add oprofile support (disabled by default).
- Add valgrind support (disabled by default).
- Link cmake files to the normal cmake file directory to allow autodetection
  of cmake interfaces.
- Remove unused lldb components from main spec file.
- Split llvm python bindings into own subpackage.
- Split emacs plugin into own subpackage
- Move additional vim plugins into vim plugins package
- Split libc++, libLTO, LLVMgold, libomp, clang-chekers into own subpackages
- Make python-clang, llvm-vim-plugins, and llvm-emacs-plugins noarch since
  they aren't architecture-specific.
- Make packages besides llvm, llvm-clang, and the shared libraries conflict
  with other versions.  This will be important when multiple LLVM versions
  are supported.
- Various spec file cleanups
- Rebase patches:
  * arm_suse_support.diff
  * assume-opensuse.patch
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * glibc-2.23-libcxx.patch
  * glibc-2.24-libcxx.patch
  * lldb-add-pthread-dl-libs.patch
  * lldb-cmake.patch
  * llvm-fix-find-gcc5-install.patch
  * llvm-nonvoid-return.patch
  * llvm-remove-clang-only-flags.patch
  * revert-cmake-soname.patch
  * set-revision.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Sort a bit with spec-cleaner
- Remove the latest switch for now, things should be either coinstallable
  or not, we don't need to bother around with compilation like this</changelog>
  <changelog author="toddrme2178@gmail.com" date="1473422400">- Split out llvm and lldb into a version-specific package.
- Turn this package into a wrapper around the version-specific
  packages.
- Remove patches:
  * default-to-i586.patch
  * assume-opensuse.patch
  * glibc-2.23-libcxx.patch
  * arm_suse_support.diff
  * llvm-remove-clang-only-flags.patch
  * clang-resourcedirs.patch
  * lldb-add-pthread-dl-libs.patch
  * llvm-nonvoid-return.patch
  * glibc-2.24-libcxx.patch
  * revert-cmake-soname.patch
  * set-revision.patch
  * lldb-cmake.patch
  * D15067.id41365.diff
  * llvm-fix-find-gcc5-install.patch</changelog>
  <changelog author="idonmez@suse.com" date="1475668800">- BuildIgnore emacs and vim to avoid cycles.</changelog>
  <changelog author="idonmez@suse.com" date="1475755200">- Remove unneeded emacs-nox dependency.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475841600">- Improve README.packaging.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1480680000">- Update to version 3.9.0
  * See:
    + http://llvm.org/releases/3.9.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  * Fix the following patches:
    + arm_suse_support.diff
    + assume-opensuse.patch
    + clang-resourcedirs.patch
    + default-to-i586.patch
    + glibc-2.23-libcxx.patch
    + glibc-2.24-libcxx.patch
    + lldb-add-pthread-dl-libs.patch
    + lldb-cmake.patch
    + llvm-fix-find-gcc5-install.patch
    + llvm-remove-clang-only-flags.patch
    + revert-cmake-soname.patch
    + set-revision.patch
  * Remove upstream-included patch:
    + llvm-nonvoid-return.patch
  * Remove patch for removed files:
    + glibc-2.23-libcxx.patch
- Backport upstream patches:
  * clang-fix-substitutions-abi_tag.patch
  * clang-incomplete-field-types.patch
  * llvm-install-CheckAtomic.patch
- Add clang%{_sonum}-include-fixer subpackage and associated
  libfindAllSymbols%{_sonum} and libfindAllSymbols%{_sonum}-devel
  subpackages.
- Add sanstats to llvm binary list.</changelog>
  <changelog author="idonmez@suse.com" date="1482321600">- Update to version 3.9.1
  * See:
    + http://llvm.org/releases/3.9.1/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1490788800">- Update to version 4.0.0
  * See:
    + http://llvm.org/releases/4.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1498564800">- Update to version 4.0.1
  * Minor bugfixes</changelog>
  <changelog author="msrb@suse.com" date="1507550400">- Add clang-devel-static package.
  * Requires clang4-devel-static that was added to llvm4 package.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Update to version 5.0.0
  * See:
    + http://llvm.org/releases/5.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="msrb@suse.com" date="1513166401">- Rename python-lldb to python3-lldb to match the renamed package
  in llvm4 and llvm5 after switch to python3. Fix its dependency.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Add lld package.
  * LLD is new since llvm5.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Update to version 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Add missing %files for lld.</changelog>
  <changelog author="msrb@suse.com" date="1516795200">- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1531915200">- Add ExcludeArch mirroring the ones in llvm5. (bnc#1101598)</changelog>
</package>
<package pkgid="902f776829fc2fe1d400376b7545703a9fc502a0131d39557048e221f8157589" name="clang5" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="98d4c9139d63ec7977a762b3de3cb28f4f748e42ecc6bb51bb8f9bd019dd5bb8" name="clang5-checker" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="20cfa77930a35756264c8e2d511c76f8f23159f2fe51ad050d48fb36eb0a76fd" name="clang5-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="cf4cf01b37ca8cb4415dcae892e9d50490dfb06bd268daa94d3e4518c53799d2" name="clang5-devel" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="59ce65185d529f5ad0eaab84aa9f5e68a0c1e48c17a9c52c689335e8719a99a5" name="claws-mail" arch="src">
  <version epoch="0" ver="3.16.0" rel="lp150.2.3.1"/>
  <changelog author="lchiquitto@suse.com" date="1413979200">- New build requirement: intltool.</changelog>
  <changelog author="lchiquitto@suse.com" date="1413979201">- Pass --enable-appdata to %configure.</changelog>
  <changelog author="kieltux@gmail.com" date="1414584000">- Add libexpat-devel BuildRequires: new dependency for the RSSyl
  plugin, which was completely rewritten in 3.11.0.</changelog>
  <changelog author="kieltux@gmail.com" date="1414843200">- Update to version 3.11.1:
  + Use 'gnutls_priority' hidden account preference for POP3 and
    STARTTLS connections, in addition to SMTP.
  + RSSyl plugin: Enable use of .netrc to store network
    credentials.
  + Remove dependency on intltool.
  + Remove appdata.
  + Updated translations: Norwegian Bokmål.
  + Bug fixed: claws#3306, claws#3308
- Removed intltool BuildRequires: no longer needed.
- Removed --enable-appdata from %configure (dropped in upstream).
- Add fix_categories_and_recover_keywords_in_desktop_file.patch
  from upstream git to fix categories and recover keywords in
  desktop file.
- Add recover_desktop_file_installation.patch from bugzilla
  (claws#3320) and recover_desktop_file_installation_part2.patch
  from upstream git to recover desktop file installation.</changelog>
  <changelog author="kieltux@gmail.com" date="1437652800">- Update to version 3.12.0:
  + New plugin: ManageSieve. Manage sieve filters on a server using
    the ManageSieve protocol.
  + Filtering/Processing:
  - Increase range for age matcher condition.
  - 'mark_as_spam' now only marks as spam, it does not do an
    additional move.
  + Compose window:
  - From line gets its own label with mnemonic.
  - More intuitive right-click behaviour in attachments list.
  + QuickSearch: 'Cc' added to the mixed search:
    From/To/Cc/Subject/Tag.
  + Folder list: Added 'Mark all read recursively' to context menu.
  + Support for Mac-cyrillic encoding.
  + IMAP: Support for SCRAM-SHA-1 authentication mechanism.
  + PGP plugins: Display validity of signatures.
  + Bogofilter plugin: 3rd spam handling option, 'Only mark as
    spam'.
  + RSSyl plugin: Per-feed support for HTTP basic auth.
  + Several layout improvements to preferences pages.
  + Updated user manual.
  + Updated man page.
  + Bugs fixed: claws#1769, claws#1901, claws#2435, claws#2577,
    claws#2601, claws#2965, claws#2981, claws#3211, claws#3321,
    claws#3345, claws#3349, claws#3351, claws#3354, claws#3364,
    claws#3365, claws#3380, claws#3389, claws#3407, claws#3419,
    claws#3421, claws#3432, claws#3438, claws#3466, deb#771360,
    deb#771737, deb#779824.
  + CVE fixed: CVE 2010-5109.
  + Misc bugs fixed:
  - Fix LDAP access using TLS protocol.
  - claws-mail.desktop installation.
  - Compose window Subject mnemonic.
  - Archiver plguin: compatibility with libarchive 2.8.x.
  - Remove draft when cancelling a message written with an
    external editor.
  - Remove superfluous dynamic link against libarchive.
  - Fix labels referring to 'SSL' instead of 'TLS'.
  - Allow single-click to select mailboxes in the mailbox order
    dialog.
  - tbird2claws.py: set encoding to UTF-8.
  + Updated translations.
- Dropped fix_categories_and_recover_keywords_in_desktop_file.patch
  as fixed in upstream
- Dropped recover_desktop_file_installation.patch: fixed upstream.
- Dropped recover_desktop_file_installation_part2.patch: fixed
  upstream.
- Set pkgconfig(libgdata) BuildRequires: conditionally for 1330 and
  newer as the needed version is an unstable branch. Due to this,
  conditionally pass --enable-gdata-plugin to configure. As a
  result, libgdata is not beeing built for any current version of
  openSUSE.</changelog>
  <changelog author="kieltux@gmail.com" date="1444910400">- update to version 3.13.0:
  + Preferences are now saved to disk immediately on pressing OK or
    Apply.
  + New preferences have been added for default sorting of the
    message lists. They are found in the 'Message list' frame of
    the Display/Summaries page of the general preferences. These
    options only apply to newly created folders.
  + The menu item 'Delete thread' has been moved to the Message
    menu. Previously clicking it would not delete the thread, but
    just move it to the Trash folder. Now it will delete the
    thread. An additional menu item has been added, 'Move thread to
    trash', which implements the original behaviour.
  + Compose window: By default it is no longer possible to add
    user-defined headers, with only those pre-defined in the drop
    down menus being possible. To restore the old behaviour, a new
    hidden preference has been added: 'type_any_header', setting
    this to 1 restores the old behaviour.
  + Automatic account selection is now also applied when you reply
    to one of your own messages, e.g. from the Sent folder.
  + Folder list: The Left and Right cursor keys now collapse or
    expand the currently selected folder tree item. The Left cursor
    key also moves the selection to parent folder, if current
    folder is within a collapsed tree.
  + Folder list: The Home and End keys now move the selection to
    the first folder and last folder in the tree.
  + Account Auto-configuration: when errors occur, a more detailed
    error message is shown.
  + GnuPG plugins:
  - An option has been added to specify the location of the GnuPG
    executable.
  - A new hidden preference has been added which limits the
    number of results returned when using your keyring for
    address auto-completion: 'autocompletion_limit'. The default
    value is 0, which means there is no limit, any other number
    will limit the results to that number.
  + Python plugin: Folder has been added to MessageInfo objects.
  + The GeoLocation plugin is no longer included.
  + The user manual has been updated.
  + The man page has been updated.
  + Misc bugs fixed:
  - make 'date' (not thread date) the default sort when
    clicking column header to switch to date sort.
  - Several memory leaks in RSSyl.
  - IPv6 now works on Windows, for connections not handled by
  libetpan.
  - GPG preferences initialization.
  - Possible crash when gpg is upgraded to gpg-v21
  - Save temporary file in mime temporary directory when using
  right-click/Open image instead of saving in current working
  directory.
  - Crash in address completion when matching group name.
  - Correct handling of RFC3339 timestamp format with second
  fraction.
  - Building on GLib older than 2.25.
  + Bugs fixed: claws#2115, claws#3209, claws#3253, claws#3263,
    claws#3296, claws#3352, claws#3454, claws#3473, claws#3475,
    claws#3483, claws#3507, claws#3516, claws#3524, claws#3531.
  + Updated translations.
- Dropped gdata-plugin requirements: gdata-plugin dropped upstream.</changelog>
  <changelog author="kieltux@gmail.com" date="1450699200">- update to version 3.13.1 (CVE-2015-8614, boo#959993):
  + When attaching files with no suffix, e.g. Makefile, the correct
    mime type is now found.
  + Added support for a whole range of extra TLDs.
  + '?' is used instead of '--&gt;' in the Message List when sender is
    yourself. (Only visible if the hidden pref 'enable_swap_from'
    is set to 0.)
  + An external editor can now be embedded in the Compose window.
    This depends upon the 'Text editor' option (/Configuration/
    Preferences/Message View/External Programs) having a suitable
    value, such as 'gvim -f --socketid %w %s'.
  + Address Book: address books can now be searched.
  + A hidden pref has been added, 'next_on_delete'. This controls
    the message selection when a message is deleted. A setting of
    '0' which cause the previous, older message to be selected,
    a setting of '1' will cause the next, newer message to be
    selected.
  + PDF Viewer plugin: Support for encrypted (password protected)
    PDFs.
  + RSSyl plugin: The feed preferences window appearance has been
    improved.
  + The --enable-new-addrbook configure option has been renamed to
  - -enable-alternate-addressbook.
  + Windows: Re-enabled regexps.
  + Updated man page.
  + Misc bugs fixed:
  - better fix for crash after broken pgp keyring update, and
    bogus EOF message on verifying sigs of missing keys
  - building on OpenBSD
  - libetpan version test
  - folder renaming for IMAP on Windows.
  + Bug fixes:
    claws#1959, claws#2490, claws#3151, claws#3375,
    claws#3557, claws#3454, claws#3480, claws#3513,
    claws#3541, claws#3559, claws#3561, claws#3562,
    claws#3563, claws#3566. deb#01375.
  + Updated translations.</changelog>
  <changelog author="kieltux@gmail.com" date="1453464000">- Update to version 3.13.2 (CVE-2015-8708):
  + Bugs fixed: claws#2358, claws#3557, claws#3584.
  + Updated translations.</changelog>
  <changelog author="kieltux@gmail.com" date="1470657600">- Update to version 3.14.0:
  + Passwords can now be secured with a Master Passphrase.
  + Passwords: The password storage method has changed. All
    passwords are now stored in a separate file,
    (~/.claws-mail/passwordstorerc),
    and use a stronger encryption than previously. Existing
    passwords are moved to the new file automatically, in the old
    format. The new format will be used whenever old passwords are
    changed or when a Master Passphrase is used. All new passwords
    are saved using the new format, irrespective of whether a
    Master Passphrase is used or not. Further information can be
    found here:
    http://www.claws-mail.org/doc/password_encryption.txt
  + Compose window: Removed the outer scrollbar from header area.
  + Message view: The HTML to plain text converter now indicates
    list items with a hyphen (-), adds a line break after ,
    and indents text within blockquotes.
  + Main window: Changed default /View/Show or hide/Menubar
    shortcut to Ctrl+F12.
  + SSL certificates list: Added automatic scrollbar.
  + Address book: Double-clicking datasources now opens the edit
    dialogue.
  + Forwarding: The external editor is now automatically used when
    forwarding as attachment, if the preference is set.
  + Preferences: Automatic mail checking can now be configured in
    hours, minutes and seconds.
  + Preferences: The 'next_on_delete' hidden preference now
    applies to trashing or moving, in addition to deleting, a
    message.
  + Command line: Added -geometry to set geometry for main window.
  + IMAP: Added SASL 'PLAIN' and 'LOGIN' authentication methods
    for accounts. Renamed the old plaintext 'LOGIN' to
    'plaintext'.
  + IMAP: The acccount preference, 'Move deleted mails to trash
    and expunge immediately' has been removed.
  + Notification plugin: Added 'Get mail from account...' to the
    SysTray module's menu.
  + Notification plugin: Focus the widget between
    iconify/deiconify events.
  + Tools: Added tools/cm-reparent.pl, which can be used to fix
    thread parenting for two or more messages.
  + Documentation: Updated man page and manual.
  + Updated translations.
  + Bug fixes:
    claws#2518, claws#2781, claws#3028, claws#3213,
    claws#3573, claws#3581, claws#3603, claws#3610,
    claws#3616, claws#3623, claws#3629, claws#3652,
    claws#3653, claws#3658</changelog>
  <changelog author="mrueckert@suse.de" date="1479297600">- Update to version 3.14.1:
  * 'hide_timezone', a new hidden preference that sets the timezone
    of date fields sent over the network to the unknown timezone
    value as specified in RFC 5322 3.3.  Default value is false
    (i.e., send available timezone information).
  * 'rewrite_first_from', a new hidden preference which  works
    around a limitation of some servers with 'overly-liberal
    parsers'. When this is turned on and the
    Content-Transfer-Encoding is set to 8bit or 7bit, in a message
    body starting with 'From ' the 'From ' will become '=46rom '
    (i,e, encoded form of 'F') and the Content- Transfer-Encoding
    will be changed to Quoted-Printable. When it is turned off no
    such modification will be made but it is very likely that an
    MTA will convert the 'From ' to '&gt;From '. See RFC 4155 for
    further details. Default value is '1', turned on.
  * Templates: it is now possible to attach a file, using
    '|attach_output{sub_expr}' or '|A{sub_expr}', 'sub_expr' is
    evaluated as a command-line to get the filename name from,
    using an absolute /path/to/filename.
  * IMAP mailboxes which show subscribed folders only are now
    indicated by a green folder icon.
  * The Icon Legend has had the missing folder icons added and
    also has an improved layout.
  * Drafted messages: Do not add Message-ID for draft, unless the
    message already has one. A Message-ID header is now only added
    when queuing a message, and any existing Message-ID and
    References headers in drafts, if there are any, are kept.
  * Disable hiding threads and messages in draft folders.
  * The /View/Go to/... actions now respect the 'Open message when
    selected' option.
  * In the UI 'POP' is used instead of 'POP3', 'IMAP' instead of
    'IMAP4', 'SSL/TLS' instead of 'SSL'.
  * GnuTLS: Enforce "strong enough" Diffie-Hellman prime even when
    using older versions of GnuTLS library.
    Since GnuTLS 3.1.7, this minimum size is dictated by the
    priority string, and currently (GnuTLS 3.3.0) the "safe-enough"
    value is 1008 bits. We set this minimum size explicitly for
    older GnuTLS versions.
    Users who are affected by this (their servers use DH prime
    smaller than 1008 bits) can override this by using a priority
    string starting with the keyword "LEGACY". However, this
    keyword only works with GnuTLS 3.3.0 or newer.
  * RSSyl plugin: Enable keeping old items by default.
  * vCalendar plugin: The ics file name is now used for the WebCal
    subscription folder name.
  * vCalendar plugin: Use hours/minutes for vcalendar alert time.
  * Notification plugin: Add support for unity/messaging menu.
  * PDF Viewer plugin: The icons are now themeable.
  * Updated manual in English and Spanish.
  * Updated translations: Brazilian Portuguese, Catalan, Czech,
    Danish, Dutch, Finnish, French, Hebrew, Indonesian, Italian,
    Norwegian Bokmål, Russian, Slovak, Spanish, Swedish,
    Traditional Chinese, and Turkish.
  * Bug fixes:
  - bug 2918, 'Notification Popup icon is hardcoded'
  - bug 3207, 'Claws segfaults when closing LDAP-enabled address
    book'
  - bug 3515, 'Ctrl-Shift-X opens multiple external editors'
  - bug 3638, 'GData Plugin fails after initial Google handshake'
  - bug 3665, 'Fix config script for macOS'
  - bug 3666, 'Typos in Turkish translation'
  - bug 3667, 'segfault in imap_session_authenticate'
  - bug 3675, 'RSSyl crash when opening Atom feed'
  - bug 3676, 'RSSyl crash when opening Atom feed with XML depth
    &gt;= 3'
  - bug 3678, 'Segfault when trying to add new account'
  - bug 3684, 'Socket error with POP3 using TLS client
    certificate'
  - bug 3697, 'Export to mbox' causes crash'
  - bug 3705, 'active account Mail Address corrupted when address
    in Message-ID is used'
  - bug 3711, 'Usage of (s)'
  - bug 3712, 'Name of the example domain in the translation'
  - fix non-resizeable Icon Legend dialogue
  - Fix a potential bug in vcalendar's libical
  - Fix potential crash in vcalendar's icalcomponent_vanew() on
    64-bit archs.
  - Fix regression: show simple text/calendar with plugin.
  - Fix crash in vcalendar passwords handling on prefs save.
  - Few miscellaneous fixes for RSSyl.
  - several memory leaks.
  - Don't check for encrypt() on FreeBSD.
  - Add OpenBSD CA cert path.
  - Do not process folder marks when just refreshing summaryview</changelog>
  <changelog author="olaf@aepfle.de" date="1487246400">- Use xdg-open (instead of gedit) as default mime_open_command
  use-xdg-open-as-default-mime_open_command.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1488456000">- Compface support requires the devel pkg, not just the main pkg</changelog>
  <changelog author="mrueckert@suse.de" date="1492776000">- update to 3.15.0
  * More granular options on when to open a selected message have
    been added. There are now several checkboxes on the
    Display/Summaries page of the Preferences which allow a greater
    flexibility.
  * Compose window: Show the total size of attachments on the
    Attachments tab.
  * Compose window: Bcc has been added to the headers drop-down
    list.
  * Folder list: Top-level folders can now be copied.  They are
    created as regular folders in the target mailbox.
  * Folder selection dialogue: Left/right keys collapse/expand
    rows.  Further keypress will move the cursor to parent or first
    child, respectively.
  * Menu items: 'Mark all unread [recursively]' has been added to
    the folder context menu, message list menu, and the main window
    menu and toolbar.
  * Toolbar actions: Mark, Unmark, Lock, Unlock, Mark [all] read,
    Mark [all] unread, Ignore Thread, Watch Thread, and Delete
    Duplicate Messages have been added to the main window toolbar's
    Actions list.
  * Account compose signature: The value of the signature file now
    takes a path relative to the user's home directory in addition
    to a full path.
  * Icon Themes: Support for SVG themes with icon scaling
    capabilities has been added. This requires libRSVG 2.40.5 or
    newer.
  * Hidden preferences: colours for specifying Tags, QuickSearch,
    and auto-filled header values have been added, both foreground
    and background. Respectively, tags_color, tags_bgcolor,
    qs_active_color, qs_active_bgcolor, qs_error_color,
    qs_error_bgcolor, default_header_color, and
    default_header_bgcolor.
  * Hidden preferences: warn_sending_many_recipients_num, if
    greater than zero, a warning dialogue is shown when the number
    of recipients exceeds the number given.
  * GData plugin: This plugin now requires libgdata version 0.17.2
    or newer.
  * TNEF parser plugin: This plugin now uses an external libytnef.
  * vCalendar plugin: This plugin now uses an external libical,
    version 2.0.0 or newer is required.
  * Mail Archiver plugin: - updated to support some of the
    compression formats up to libarchive 3.2.2
  * Several minor UI improvements.
  * Updated manual in English and Spanish.
  * Updated man page.
  * Updated translations: Brazilian Portuguese, Catalan, Danish,
    Dutch, French, German, Hungarian, Italian, Norwegian Bokmål,
    Russian, Spanish, Swedish, Traditional Chinese, and Turkish.
  * Bug fixes:
    o bug 3251, 'A translated In-Reply-To header is sent
    translated'
    o bug 3571, 'recipient list lost and truncated'
    o bug 3574, 'Template addressing'
    o bug 3582, 'Select folder dialogue does not tell what is
    selecting for'
    o bug 3673, 'Be more friendly instead of "configure: error:
    'encrypt'-function not found."'
    o bug 3734, 'undefined symbol error with flex-2.6.2'
    o bug 3740, 'Templates information dialog can't be closed
    with WM button'
    0 bug 3741, 'Deleting an account doesn't delete imapcache'
    o bug 3742, 'Attaching file with plus sign in filename via
    drag and drop doesn't work'
    o bug 3762, 'redirect fails'
    o bug 3764, 'Use external libical instead of the internal
    copy'
    o bug 3775, 'Error in string at src/mainwindow.c:4726?'
    o bug 3777, 'Weird news dates for some RSS feeds'
    o Debian bug 846170, 'incorrect IMAP UID handling'
    o Allow sending empty messages in Session (just \r\n).
    o fix some main window menu sensitivity issues
    o make up/down key navigation obey 'always_show_msg'
    o fix text selection when double-clicking quoted text and
    'collapse quoted text on double click' is turned off
    o fix 'Go to' moving off current, unopened msg, and dialogue
    to go to next folder
    o obey 'always_show_msg' on "no more [...] msgs. go to next
    folder?"
    o make Go to/[Next|Prev] sort order aware
    o don't ignore auto-account selection when forwarding on IMAP
    and NNTP accounts
    o on first run, use --alternate-config-dir (if set) on prefs
    migration. prevents useless creation of ~/.claws-mail
    directory
    o fix colouring of auto-filled headers
    o don't remove the To when changing account
    o Honour autosave_encrypted preference when using external
    editor.
    o Fix 'search folder' not working in some cases
    o Fix build on OSX.
    o fix memory leaks
    o when renaming folder, only update summaryview folder name
    if the current folder is being renamed
    o sensitise trayicon's 'get mail' and 'exit'
    o Handle timezones correctly in vCalendar.
    o Do not hardcode resolv.conf location
    o fix building with --disable-deprecated
- added BR to enable more features:
  - libical-devel (vcalendar plugin)
  - libgdata-devel (google data plugin)
  - librsvg-devel (scalabable icons support)
  - libcanberra-gtk{,3}-devel enhanced notifications support
- disable the tnef_parse as we are lacking the required library
- drop use-xdg-open-as-default-mime_open_command.patch:
  included upstream
- added claws-mail-3.15.0_libcanberra-gtk3.patch:
  allow finding the gtk3 version of the library if we build with
  gtk3</changelog>
  <changelog author="mrueckert@suse.de" date="1492776001">- add conditional handling for vcalendar plugins to only build on
  distros which still support it
- also prepared conditional build support for tnef</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Ensure neutrality of descriptions.
  Trim instructions and redundant mentions of license.</changelog>
  <changelog author="olaf@aepfle.de" date="1493812800">- Fix bug in imap_session_authenticate with imap-Fix-use-after-free.patch</changelog>
  <changelog author="psychonaut@nothingisreal.com" date="1504094400">- update to 3.15.1
  * Bug fixes:
    o bug 3348, 'Contact pictures not deleted when contact is
    deleted'
    o bug 3721, 'Fails to build in Debian kfreebsd-*'
    o bug 3744, 'Crash upon deleting tags.'
    o bug 3822, 'AttRemover deletes message and fails to create
    new one when disk is full'
    o bug 3828, '"Re-edit" should not recycle the Message-ID
    header'
    o bug 3835, 'autogen.sh fails with invalid test on line 33'
    o bug 3855, 'segfault at startup with old profile and IMAP
    account'
    o bug 3866, 'slibtool causes compile failure'
    o fix crash in sieve manager window when no account has sieve
    enabled.
    o fix incorrect labels in folder selection dialog.
    o fix RSSyl feeds getting renamed to "Untitled feed".
    o fix Resent-Date value.
    o Fix typo around libarchive in configure.ac.
- rename claws-mail-3.15.0_libcanberra-gtk3.patch to
  libcanberra-gtk3.patch
- refreshed libcanberra-gtk3.patch and imap-Fix-use-after-free.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1510056000">- Disable fancy (HTML messages) plugin and drop build requires on
  libwebkit, this can be re-enabled when code is updated to later
  releases of libwebkit, see claws#3763.</changelog>
  <changelog author="mvetter@suse.com" date="1513771200">- Drop imap-Fix-use-after-free.patch: upstreamed
- Update to 3.16.0:
  * Reworked Preferences dialogs, adding new options
  * Compose: more UTF-8 list-item characters have been added
  * GPG: full key/signature fingerprints are now shown instead of the
    short versions
  * SSL Certificate Manager: added support for ipv6 addresses
  * CLI: the --insert option has been added to --compose, to allow
    inserting files from the command line
  * The HTML parser now supports all entities
  * Tools: a simple bash completion helper has been added,
    tools/bash_completion/claws-mail
  * Updated and added translations
  * Many bug fixes. For complete list please view ChangeLog file</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1542801600">- Fix Reply to all replying to random people (claws#3889, boo#1116917)
  Fix-bug-3889-Address-and-quoted-message-inconsistent.patch
- Fix license warning</changelog>
</package>
<package pkgid="bfb46fe2f37acabb7a8c728c65de021021f507cfc9665f44b42a81ecd1453874" name="claws-mail" arch="x86_64">
  <version epoch="0" ver="3.16.0" rel="lp150.2.3.1"/>
  <changelog author="lchiquitto@suse.com" date="1413979200">- New build requirement: intltool.</changelog>
  <changelog author="lchiquitto@suse.com" date="1413979201">- Pass --enable-appdata to %configure.</changelog>
  <changelog author="kieltux@gmail.com" date="1414584000">- Add libexpat-devel BuildRequires: new dependency for the RSSyl
  plugin, which was completely rewritten in 3.11.0.</changelog>
  <changelog author="kieltux@gmail.com" date="1414843200">- Update to version 3.11.1:
  + Use 'gnutls_priority' hidden account preference for POP3 and
    STARTTLS connections, in addition to SMTP.
  + RSSyl plugin: Enable use of .netrc to store network
    credentials.
  + Remove dependency on intltool.
  + Remove appdata.
  + Updated translations: Norwegian Bokmål.
  + Bug fixed: claws#3306, claws#3308
- Removed intltool BuildRequires: no longer needed.
- Removed --enable-appdata from %configure (dropped in upstream).
- Add fix_categories_and_recover_keywords_in_desktop_file.patch
  from upstream git to fix categories and recover keywords in
  desktop file.
- Add recover_desktop_file_installation.patch from bugzilla
  (claws#3320) and recover_desktop_file_installation_part2.patch
  from upstream git to recover desktop file installation.</changelog>
  <changelog author="kieltux@gmail.com" date="1437652800">- Update to version 3.12.0:
  + New plugin: ManageSieve. Manage sieve filters on a server using
    the ManageSieve protocol.
  + Filtering/Processing:
  - Increase range for age matcher condition.
  - 'mark_as_spam' now only marks as spam, it does not do an
    additional move.
  + Compose window:
  - From line gets its own label with mnemonic.
  - More intuitive right-click behaviour in attachments list.
  + QuickSearch: 'Cc' added to the mixed search:
    From/To/Cc/Subject/Tag.
  + Folder list: Added 'Mark all read recursively' to context menu.
  + Support for Mac-cyrillic encoding.
  + IMAP: Support for SCRAM-SHA-1 authentication mechanism.
  + PGP plugins: Display validity of signatures.
  + Bogofilter plugin: 3rd spam handling option, 'Only mark as
    spam'.
  + RSSyl plugin: Per-feed support for HTTP basic auth.
  + Several layout improvements to preferences pages.
  + Updated user manual.
  + Updated man page.
  + Bugs fixed: claws#1769, claws#1901, claws#2435, claws#2577,
    claws#2601, claws#2965, claws#2981, claws#3211, claws#3321,
    claws#3345, claws#3349, claws#3351, claws#3354, claws#3364,
    claws#3365, claws#3380, claws#3389, claws#3407, claws#3419,
    claws#3421, claws#3432, claws#3438, claws#3466, deb#771360,
    deb#771737, deb#779824.
  + CVE fixed: CVE 2010-5109.
  + Misc bugs fixed:
  - Fix LDAP access using TLS protocol.
  - claws-mail.desktop installation.
  - Compose window Subject mnemonic.
  - Archiver plguin: compatibility with libarchive 2.8.x.
  - Remove draft when cancelling a message written with an
    external editor.
  - Remove superfluous dynamic link against libarchive.
  - Fix labels referring to 'SSL' instead of 'TLS'.
  - Allow single-click to select mailboxes in the mailbox order
    dialog.
  - tbird2claws.py: set encoding to UTF-8.
  + Updated translations.
- Dropped fix_categories_and_recover_keywords_in_desktop_file.patch
  as fixed in upstream
- Dropped recover_desktop_file_installation.patch: fixed upstream.
- Dropped recover_desktop_file_installation_part2.patch: fixed
  upstream.
- Set pkgconfig(libgdata) BuildRequires: conditionally for 1330 and
  newer as the needed version is an unstable branch. Due to this,
  conditionally pass --enable-gdata-plugin to configure. As a
  result, libgdata is not beeing built for any current version of
  openSUSE.</changelog>
  <changelog author="kieltux@gmail.com" date="1444910400">- update to version 3.13.0:
  + Preferences are now saved to disk immediately on pressing OK or
    Apply.
  + New preferences have been added for default sorting of the
    message lists. They are found in the 'Message list' frame of
    the Display/Summaries page of the general preferences. These
    options only apply to newly created folders.
  + The menu item 'Delete thread' has been moved to the Message
    menu. Previously clicking it would not delete the thread, but
    just move it to the Trash folder. Now it will delete the
    thread. An additional menu item has been added, 'Move thread to
    trash', which implements the original behaviour.
  + Compose window: By default it is no longer possible to add
    user-defined headers, with only those pre-defined in the drop
    down menus being possible. To restore the old behaviour, a new
    hidden preference has been added: 'type_any_header', setting
    this to 1 restores the old behaviour.
  + Automatic account selection is now also applied when you reply
    to one of your own messages, e.g. from the Sent folder.
  + Folder list: The Left and Right cursor keys now collapse or
    expand the currently selected folder tree item. The Left cursor
    key also moves the selection to parent folder, if current
    folder is within a collapsed tree.
  + Folder list: The Home and End keys now move the selection to
    the first folder and last folder in the tree.
  + Account Auto-configuration: when errors occur, a more detailed
    error message is shown.
  + GnuPG plugins:
  - An option has been added to specify the location of the GnuPG
    executable.
  - A new hidden preference has been added which limits the
    number of results returned when using your keyring for
    address auto-completion: 'autocompletion_limit'. The default
    value is 0, which means there is no limit, any other number
    will limit the results to that number.
  + Python plugin: Folder has been added to MessageInfo objects.
  + The GeoLocation plugin is no longer included.
  + The user manual has been updated.
  + The man page has been updated.
  + Misc bugs fixed:
  - make 'date' (not thread date) the default sort when
    clicking column header to switch to date sort.
  - Several memory leaks in RSSyl.
  - IPv6 now works on Windows, for connections not handled by
  libetpan.
  - GPG preferences initialization.
  - Possible crash when gpg is upgraded to gpg-v21
  - Save temporary file in mime temporary directory when using
  right-click/Open image instead of saving in current working
  directory.
  - Crash in address completion when matching group name.
  - Correct handling of RFC3339 timestamp format with second
  fraction.
  - Building on GLib older than 2.25.
  + Bugs fixed: claws#2115, claws#3209, claws#3253, claws#3263,
    claws#3296, claws#3352, claws#3454, claws#3473, claws#3475,
    claws#3483, claws#3507, claws#3516, claws#3524, claws#3531.
  + Updated translations.
- Dropped gdata-plugin requirements: gdata-plugin dropped upstream.</changelog>
  <changelog author="kieltux@gmail.com" date="1450699200">- update to version 3.13.1 (CVE-2015-8614, boo#959993):
  + When attaching files with no suffix, e.g. Makefile, the correct
    mime type is now found.
  + Added support for a whole range of extra TLDs.
  + '?' is used instead of '--&gt;' in the Message List when sender is
    yourself. (Only visible if the hidden pref 'enable_swap_from'
    is set to 0.)
  + An external editor can now be embedded in the Compose window.
    This depends upon the 'Text editor' option (/Configuration/
    Preferences/Message View/External Programs) having a suitable
    value, such as 'gvim -f --socketid %w %s'.
  + Address Book: address books can now be searched.
  + A hidden pref has been added, 'next_on_delete'. This controls
    the message selection when a message is deleted. A setting of
    '0' which cause the previous, older message to be selected,
    a setting of '1' will cause the next, newer message to be
    selected.
  + PDF Viewer plugin: Support for encrypted (password protected)
    PDFs.
  + RSSyl plugin: The feed preferences window appearance has been
    improved.
  + The --enable-new-addrbook configure option has been renamed to
  - -enable-alternate-addressbook.
  + Windows: Re-enabled regexps.
  + Updated man page.
  + Misc bugs fixed:
  - better fix for crash after broken pgp keyring update, and
    bogus EOF message on verifying sigs of missing keys
  - building on OpenBSD
  - libetpan version test
  - folder renaming for IMAP on Windows.
  + Bug fixes:
    claws#1959, claws#2490, claws#3151, claws#3375,
    claws#3557, claws#3454, claws#3480, claws#3513,
    claws#3541, claws#3559, claws#3561, claws#3562,
    claws#3563, claws#3566. deb#01375.
  + Updated translations.</changelog>
  <changelog author="kieltux@gmail.com" date="1453464000">- Update to version 3.13.2 (CVE-2015-8708):
  + Bugs fixed: claws#2358, claws#3557, claws#3584.
  + Updated translations.</changelog>
  <changelog author="kieltux@gmail.com" date="1470657600">- Update to version 3.14.0:
  + Passwords can now be secured with a Master Passphrase.
  + Passwords: The password storage method has changed. All
    passwords are now stored in a separate file,
    (~/.claws-mail/passwordstorerc),
    and use a stronger encryption than previously. Existing
    passwords are moved to the new file automatically, in the old
    format. The new format will be used whenever old passwords are
    changed or when a Master Passphrase is used. All new passwords
    are saved using the new format, irrespective of whether a
    Master Passphrase is used or not. Further information can be
    found here:
    http://www.claws-mail.org/doc/password_encryption.txt
  + Compose window: Removed the outer scrollbar from header area.
  + Message view: The HTML to plain text converter now indicates
    list items with a hyphen (-), adds a line break after ,
    and indents text within blockquotes.
  + Main window: Changed default /View/Show or hide/Menubar
    shortcut to Ctrl+F12.
  + SSL certificates list: Added automatic scrollbar.
  + Address book: Double-clicking datasources now opens the edit
    dialogue.
  + Forwarding: The external editor is now automatically used when
    forwarding as attachment, if the preference is set.
  + Preferences: Automatic mail checking can now be configured in
    hours, minutes and seconds.
  + Preferences: The 'next_on_delete' hidden preference now
    applies to trashing or moving, in addition to deleting, a
    message.
  + Command line: Added -geometry to set geometry for main window.
  + IMAP: Added SASL 'PLAIN' and 'LOGIN' authentication methods
    for accounts. Renamed the old plaintext 'LOGIN' to
    'plaintext'.
  + IMAP: The acccount preference, 'Move deleted mails to trash
    and expunge immediately' has been removed.
  + Notification plugin: Added 'Get mail from account...' to the
    SysTray module's menu.
  + Notification plugin: Focus the widget between
    iconify/deiconify events.
  + Tools: Added tools/cm-reparent.pl, which can be used to fix
    thread parenting for two or more messages.
  + Documentation: Updated man page and manual.
  + Updated translations.
  + Bug fixes:
    claws#2518, claws#2781, claws#3028, claws#3213,
    claws#3573, claws#3581, claws#3603, claws#3610,
    claws#3616, claws#3623, claws#3629, claws#3652,
    claws#3653, claws#3658</changelog>
  <changelog author="mrueckert@suse.de" date="1479297600">- Update to version 3.14.1:
  * 'hide_timezone', a new hidden preference that sets the timezone
    of date fields sent over the network to the unknown timezone
    value as specified in RFC 5322 3.3.  Default value is false
    (i.e., send available timezone information).
  * 'rewrite_first_from', a new hidden preference which  works
    around a limitation of some servers with 'overly-liberal
    parsers'. When this is turned on and the
    Content-Transfer-Encoding is set to 8bit or 7bit, in a message
    body starting with 'From ' the 'From ' will become '=46rom '
    (i,e, encoded form of 'F') and the Content- Transfer-Encoding
    will be changed to Quoted-Printable. When it is turned off no
    such modification will be made but it is very likely that an
    MTA will convert the 'From ' to '&gt;From '. See RFC 4155 for
    further details. Default value is '1', turned on.
  * Templates: it is now possible to attach a file, using
    '|attach_output{sub_expr}' or '|A{sub_expr}', 'sub_expr' is
    evaluated as a command-line to get the filename name from,
    using an absolute /path/to/filename.
  * IMAP mailboxes which show subscribed folders only are now
    indicated by a green folder icon.
  * The Icon Legend has had the missing folder icons added and
    also has an improved layout.
  * Drafted messages: Do not add Message-ID for draft, unless the
    message already has one. A Message-ID header is now only added
    when queuing a message, and any existing Message-ID and
    References headers in drafts, if there are any, are kept.
  * Disable hiding threads and messages in draft folders.
  * The /View/Go to/... actions now respect the 'Open message when
    selected' option.
  * In the UI 'POP' is used instead of 'POP3', 'IMAP' instead of
    'IMAP4', 'SSL/TLS' instead of 'SSL'.
  * GnuTLS: Enforce "strong enough" Diffie-Hellman prime even when
    using older versions of GnuTLS library.
    Since GnuTLS 3.1.7, this minimum size is dictated by the
    priority string, and currently (GnuTLS 3.3.0) the "safe-enough"
    value is 1008 bits. We set this minimum size explicitly for
    older GnuTLS versions.
    Users who are affected by this (their servers use DH prime
    smaller than 1008 bits) can override this by using a priority
    string starting with the keyword "LEGACY". However, this
    keyword only works with GnuTLS 3.3.0 or newer.
  * RSSyl plugin: Enable keeping old items by default.
  * vCalendar plugin: The ics file name is now used for the WebCal
    subscription folder name.
  * vCalendar plugin: Use hours/minutes for vcalendar alert time.
  * Notification plugin: Add support for unity/messaging menu.
  * PDF Viewer plugin: The icons are now themeable.
  * Updated manual in English and Spanish.
  * Updated translations: Brazilian Portuguese, Catalan, Czech,
    Danish, Dutch, Finnish, French, Hebrew, Indonesian, Italian,
    Norwegian Bokmål, Russian, Slovak, Spanish, Swedish,
    Traditional Chinese, and Turkish.
  * Bug fixes:
  - bug 2918, 'Notification Popup icon is hardcoded'
  - bug 3207, 'Claws segfaults when closing LDAP-enabled address
    book'
  - bug 3515, 'Ctrl-Shift-X opens multiple external editors'
  - bug 3638, 'GData Plugin fails after initial Google handshake'
  - bug 3665, 'Fix config script for macOS'
  - bug 3666, 'Typos in Turkish translation'
  - bug 3667, 'segfault in imap_session_authenticate'
  - bug 3675, 'RSSyl crash when opening Atom feed'
  - bug 3676, 'RSSyl crash when opening Atom feed with XML depth
    &gt;= 3'
  - bug 3678, 'Segfault when trying to add new account'
  - bug 3684, 'Socket error with POP3 using TLS client
    certificate'
  - bug 3697, 'Export to mbox' causes crash'
  - bug 3705, 'active account Mail Address corrupted when address
    in Message-ID is used'
  - bug 3711, 'Usage of (s)'
  - bug 3712, 'Name of the example domain in the translation'
  - fix non-resizeable Icon Legend dialogue
  - Fix a potential bug in vcalendar's libical
  - Fix potential crash in vcalendar's icalcomponent_vanew() on
    64-bit archs.
  - Fix regression: show simple text/calendar with plugin.
  - Fix crash in vcalendar passwords handling on prefs save.
  - Few miscellaneous fixes for RSSyl.
  - several memory leaks.
  - Don't check for encrypt() on FreeBSD.
  - Add OpenBSD CA cert path.
  - Do not process folder marks when just refreshing summaryview</changelog>
  <changelog author="olaf@aepfle.de" date="1487246400">- Use xdg-open (instead of gedit) as default mime_open_command
  use-xdg-open-as-default-mime_open_command.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1488456000">- Compface support requires the devel pkg, not just the main pkg</changelog>
  <changelog author="mrueckert@suse.de" date="1492776000">- update to 3.15.0
  * More granular options on when to open a selected message have
    been added. There are now several checkboxes on the
    Display/Summaries page of the Preferences which allow a greater
    flexibility.
  * Compose window: Show the total size of attachments on the
    Attachments tab.
  * Compose window: Bcc has been added to the headers drop-down
    list.
  * Folder list: Top-level folders can now be copied.  They are
    created as regular folders in the target mailbox.
  * Folder selection dialogue: Left/right keys collapse/expand
    rows.  Further keypress will move the cursor to parent or first
    child, respectively.
  * Menu items: 'Mark all unread [recursively]' has been added to
    the folder context menu, message list menu, and the main window
    menu and toolbar.
  * Toolbar actions: Mark, Unmark, Lock, Unlock, Mark [all] read,
    Mark [all] unread, Ignore Thread, Watch Thread, and Delete
    Duplicate Messages have been added to the main window toolbar's
    Actions list.
  * Account compose signature: The value of the signature file now
    takes a path relative to the user's home directory in addition
    to a full path.
  * Icon Themes: Support for SVG themes with icon scaling
    capabilities has been added. This requires libRSVG 2.40.5 or
    newer.
  * Hidden preferences: colours for specifying Tags, QuickSearch,
    and auto-filled header values have been added, both foreground
    and background. Respectively, tags_color, tags_bgcolor,
    qs_active_color, qs_active_bgcolor, qs_error_color,
    qs_error_bgcolor, default_header_color, and
    default_header_bgcolor.
  * Hidden preferences: warn_sending_many_recipients_num, if
    greater than zero, a warning dialogue is shown when the number
    of recipients exceeds the number given.
  * GData plugin: This plugin now requires libgdata version 0.17.2
    or newer.
  * TNEF parser plugin: This plugin now uses an external libytnef.
  * vCalendar plugin: This plugin now uses an external libical,
    version 2.0.0 or newer is required.
  * Mail Archiver plugin: - updated to support some of the
    compression formats up to libarchive 3.2.2
  * Several minor UI improvements.
  * Updated manual in English and Spanish.
  * Updated man page.
  * Updated translations: Brazilian Portuguese, Catalan, Danish,
    Dutch, French, German, Hungarian, Italian, Norwegian Bokmål,
    Russian, Spanish, Swedish, Traditional Chinese, and Turkish.
  * Bug fixes:
    o bug 3251, 'A translated In-Reply-To header is sent
    translated'
    o bug 3571, 'recipient list lost and truncated'
    o bug 3574, 'Template addressing'
    o bug 3582, 'Select folder dialogue does not tell what is
    selecting for'
    o bug 3673, 'Be more friendly instead of "configure: error:
    'encrypt'-function not found."'
    o bug 3734, 'undefined symbol error with flex-2.6.2'
    o bug 3740, 'Templates information dialog can't be closed
    with WM button'
    0 bug 3741, 'Deleting an account doesn't delete imapcache'
    o bug 3742, 'Attaching file with plus sign in filename via
    drag and drop doesn't work'
    o bug 3762, 'redirect fails'
    o bug 3764, 'Use external libical instead of the internal
    copy'
    o bug 3775, 'Error in string at src/mainwindow.c:4726?'
    o bug 3777, 'Weird news dates for some RSS feeds'
    o Debian bug 846170, 'incorrect IMAP UID handling'
    o Allow sending empty messages in Session (just \r\n).
    o fix some main window menu sensitivity issues
    o make up/down key navigation obey 'always_show_msg'
    o fix text selection when double-clicking quoted text and
    'collapse quoted text on double click' is turned off
    o fix 'Go to' moving off current, unopened msg, and dialogue
    to go to next folder
    o obey 'always_show_msg' on "no more [...] msgs. go to next
    folder?"
    o make Go to/[Next|Prev] sort order aware
    o don't ignore auto-account selection when forwarding on IMAP
    and NNTP accounts
    o on first run, use --alternate-config-dir (if set) on prefs
    migration. prevents useless creation of ~/.claws-mail
    directory
    o fix colouring of auto-filled headers
    o don't remove the To when changing account
    o Honour autosave_encrypted preference when using external
    editor.
    o Fix 'search folder' not working in some cases
    o Fix build on OSX.
    o fix memory leaks
    o when renaming folder, only update summaryview folder name
    if the current folder is being renamed
    o sensitise trayicon's 'get mail' and 'exit'
    o Handle timezones correctly in vCalendar.
    o Do not hardcode resolv.conf location
    o fix building with --disable-deprecated
- added BR to enable more features:
  - libical-devel (vcalendar plugin)
  - libgdata-devel (google data plugin)
  - librsvg-devel (scalabable icons support)
  - libcanberra-gtk{,3}-devel enhanced notifications support
- disable the tnef_parse as we are lacking the required library
- drop use-xdg-open-as-default-mime_open_command.patch:
  included upstream
- added claws-mail-3.15.0_libcanberra-gtk3.patch:
  allow finding the gtk3 version of the library if we build with
  gtk3</changelog>
  <changelog author="mrueckert@suse.de" date="1492776001">- add conditional handling for vcalendar plugins to only build on
  distros which still support it
- also prepared conditional build support for tnef</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Ensure neutrality of descriptions.
  Trim instructions and redundant mentions of license.</changelog>
  <changelog author="olaf@aepfle.de" date="1493812800">- Fix bug in imap_session_authenticate with imap-Fix-use-after-free.patch</changelog>
  <changelog author="psychonaut@nothingisreal.com" date="1504094400">- update to 3.15.1
  * Bug fixes:
    o bug 3348, 'Contact pictures not deleted when contact is
    deleted'
    o bug 3721, 'Fails to build in Debian kfreebsd-*'
    o bug 3744, 'Crash upon deleting tags.'
    o bug 3822, 'AttRemover deletes message and fails to create
    new one when disk is full'
    o bug 3828, '"Re-edit" should not recycle the Message-ID
    header'
    o bug 3835, 'autogen.sh fails with invalid test on line 33'
    o bug 3855, 'segfault at startup with old profile and IMAP
    account'
    o bug 3866, 'slibtool causes compile failure'
    o fix crash in sieve manager window when no account has sieve
    enabled.
    o fix incorrect labels in folder selection dialog.
    o fix RSSyl feeds getting renamed to "Untitled feed".
    o fix Resent-Date value.
    o Fix typo around libarchive in configure.ac.
- rename claws-mail-3.15.0_libcanberra-gtk3.patch to
  libcanberra-gtk3.patch
- refreshed libcanberra-gtk3.patch and imap-Fix-use-after-free.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1510056000">- Disable fancy (HTML messages) plugin and drop build requires on
  libwebkit, this can be re-enabled when code is updated to later
  releases of libwebkit, see claws#3763.</changelog>
  <changelog author="mvetter@suse.com" date="1513771200">- Drop imap-Fix-use-after-free.patch: upstreamed
- Update to 3.16.0:
  * Reworked Preferences dialogs, adding new options
  * Compose: more UTF-8 list-item characters have been added
  * GPG: full key/signature fingerprints are now shown instead of the
    short versions
  * SSL Certificate Manager: added support for ipv6 addresses
  * CLI: the --insert option has been added to --compose, to allow
    inserting files from the command line
  * The HTML parser now supports all entities
  * Tools: a simple bash completion helper has been added,
    tools/bash_completion/claws-mail
  * Updated and added translations
  * Many bug fixes. For complete list please view ChangeLog file</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1542801600">- Fix Reply to all replying to random people (claws#3889, boo#1116917)
  Fix-bug-3889-Address-and-quoted-message-inconsistent.patch
- Fix license warning</changelog>
</package>
<package pkgid="8335bc7c39c8611962f73a1dd1bcf044c67902dde692dac15bf3ee4bb175a72d" name="claws-mail-devel" arch="x86_64">
  <version epoch="0" ver="3.16.0" rel="lp150.2.3.1"/>
  <changelog author="lchiquitto@suse.com" date="1413979200">- New build requirement: intltool.</changelog>
  <changelog author="lchiquitto@suse.com" date="1413979201">- Pass --enable-appdata to %configure.</changelog>
  <changelog author="kieltux@gmail.com" date="1414584000">- Add libexpat-devel BuildRequires: new dependency for the RSSyl
  plugin, which was completely rewritten in 3.11.0.</changelog>
  <changelog author="kieltux@gmail.com" date="1414843200">- Update to version 3.11.1:
  + Use 'gnutls_priority' hidden account preference for POP3 and
    STARTTLS connections, in addition to SMTP.
  + RSSyl plugin: Enable use of .netrc to store network
    credentials.
  + Remove dependency on intltool.
  + Remove appdata.
  + Updated translations: Norwegian Bokmål.
  + Bug fixed: claws#3306, claws#3308
- Removed intltool BuildRequires: no longer needed.
- Removed --enable-appdata from %configure (dropped in upstream).
- Add fix_categories_and_recover_keywords_in_desktop_file.patch
  from upstream git to fix categories and recover keywords in
  desktop file.
- Add recover_desktop_file_installation.patch from bugzilla
  (claws#3320) and recover_desktop_file_installation_part2.patch
  from upstream git to recover desktop file installation.</changelog>
  <changelog author="kieltux@gmail.com" date="1437652800">- Update to version 3.12.0:
  + New plugin: ManageSieve. Manage sieve filters on a server using
    the ManageSieve protocol.
  + Filtering/Processing:
  - Increase range for age matcher condition.
  - 'mark_as_spam' now only marks as spam, it does not do an
    additional move.
  + Compose window:
  - From line gets its own label with mnemonic.
  - More intuitive right-click behaviour in attachments list.
  + QuickSearch: 'Cc' added to the mixed search:
    From/To/Cc/Subject/Tag.
  + Folder list: Added 'Mark all read recursively' to context menu.
  + Support for Mac-cyrillic encoding.
  + IMAP: Support for SCRAM-SHA-1 authentication mechanism.
  + PGP plugins: Display validity of signatures.
  + Bogofilter plugin: 3rd spam handling option, 'Only mark as
    spam'.
  + RSSyl plugin: Per-feed support for HTTP basic auth.
  + Several layout improvements to preferences pages.
  + Updated user manual.
  + Updated man page.
  + Bugs fixed: claws#1769, claws#1901, claws#2435, claws#2577,
    claws#2601, claws#2965, claws#2981, claws#3211, claws#3321,
    claws#3345, claws#3349, claws#3351, claws#3354, claws#3364,
    claws#3365, claws#3380, claws#3389, claws#3407, claws#3419,
    claws#3421, claws#3432, claws#3438, claws#3466, deb#771360,
    deb#771737, deb#779824.
  + CVE fixed: CVE 2010-5109.
  + Misc bugs fixed:
  - Fix LDAP access using TLS protocol.
  - claws-mail.desktop installation.
  - Compose window Subject mnemonic.
  - Archiver plguin: compatibility with libarchive 2.8.x.
  - Remove draft when cancelling a message written with an
    external editor.
  - Remove superfluous dynamic link against libarchive.
  - Fix labels referring to 'SSL' instead of 'TLS'.
  - Allow single-click to select mailboxes in the mailbox order
    dialog.
  - tbird2claws.py: set encoding to UTF-8.
  + Updated translations.
- Dropped fix_categories_and_recover_keywords_in_desktop_file.patch
  as fixed in upstream
- Dropped recover_desktop_file_installation.patch: fixed upstream.
- Dropped recover_desktop_file_installation_part2.patch: fixed
  upstream.
- Set pkgconfig(libgdata) BuildRequires: conditionally for 1330 and
  newer as the needed version is an unstable branch. Due to this,
  conditionally pass --enable-gdata-plugin to configure. As a
  result, libgdata is not beeing built for any current version of
  openSUSE.</changelog>
  <changelog author="kieltux@gmail.com" date="1444910400">- update to version 3.13.0:
  + Preferences are now saved to disk immediately on pressing OK or
    Apply.
  + New preferences have been added for default sorting of the
    message lists. They are found in the 'Message list' frame of
    the Display/Summaries page of the general preferences. These
    options only apply to newly created folders.
  + The menu item 'Delete thread' has been moved to the Message
    menu. Previously clicking it would not delete the thread, but
    just move it to the Trash folder. Now it will delete the
    thread. An additional menu item has been added, 'Move thread to
    trash', which implements the original behaviour.
  + Compose window: By default it is no longer possible to add
    user-defined headers, with only those pre-defined in the drop
    down menus being possible. To restore the old behaviour, a new
    hidden preference has been added: 'type_any_header', setting
    this to 1 restores the old behaviour.
  + Automatic account selection is now also applied when you reply
    to one of your own messages, e.g. from the Sent folder.
  + Folder list: The Left and Right cursor keys now collapse or
    expand the currently selected folder tree item. The Left cursor
    key also moves the selection to parent folder, if current
    folder is within a collapsed tree.
  + Folder list: The Home and End keys now move the selection to
    the first folder and last folder in the tree.
  + Account Auto-configuration: when errors occur, a more detailed
    error message is shown.
  + GnuPG plugins:
  - An option has been added to specify the location of the GnuPG
    executable.
  - A new hidden preference has been added which limits the
    number of results returned when using your keyring for
    address auto-completion: 'autocompletion_limit'. The default
    value is 0, which means there is no limit, any other number
    will limit the results to that number.
  + Python plugin: Folder has been added to MessageInfo objects.
  + The GeoLocation plugin is no longer included.
  + The user manual has been updated.
  + The man page has been updated.
  + Misc bugs fixed:
  - make 'date' (not thread date) the default sort when
    clicking column header to switch to date sort.
  - Several memory leaks in RSSyl.
  - IPv6 now works on Windows, for connections not handled by
  libetpan.
  - GPG preferences initialization.
  - Possible crash when gpg is upgraded to gpg-v21
  - Save temporary file in mime temporary directory when using
  right-click/Open image instead of saving in current working
  directory.
  - Crash in address completion when matching group name.
  - Correct handling of RFC3339 timestamp format with second
  fraction.
  - Building on GLib older than 2.25.
  + Bugs fixed: claws#2115, claws#3209, claws#3253, claws#3263,
    claws#3296, claws#3352, claws#3454, claws#3473, claws#3475,
    claws#3483, claws#3507, claws#3516, claws#3524, claws#3531.
  + Updated translations.
- Dropped gdata-plugin requirements: gdata-plugin dropped upstream.</changelog>
  <changelog author="kieltux@gmail.com" date="1450699200">- update to version 3.13.1 (CVE-2015-8614, boo#959993):
  + When attaching files with no suffix, e.g. Makefile, the correct
    mime type is now found.
  + Added support for a whole range of extra TLDs.
  + '?' is used instead of '--&gt;' in the Message List when sender is
    yourself. (Only visible if the hidden pref 'enable_swap_from'
    is set to 0.)
  + An external editor can now be embedded in the Compose window.
    This depends upon the 'Text editor' option (/Configuration/
    Preferences/Message View/External Programs) having a suitable
    value, such as 'gvim -f --socketid %w %s'.
  + Address Book: address books can now be searched.
  + A hidden pref has been added, 'next_on_delete'. This controls
    the message selection when a message is deleted. A setting of
    '0' which cause the previous, older message to be selected,
    a setting of '1' will cause the next, newer message to be
    selected.
  + PDF Viewer plugin: Support for encrypted (password protected)
    PDFs.
  + RSSyl plugin: The feed preferences window appearance has been
    improved.
  + The --enable-new-addrbook configure option has been renamed to
  - -enable-alternate-addressbook.
  + Windows: Re-enabled regexps.
  + Updated man page.
  + Misc bugs fixed:
  - better fix for crash after broken pgp keyring update, and
    bogus EOF message on verifying sigs of missing keys
  - building on OpenBSD
  - libetpan version test
  - folder renaming for IMAP on Windows.
  + Bug fixes:
    claws#1959, claws#2490, claws#3151, claws#3375,
    claws#3557, claws#3454, claws#3480, claws#3513,
    claws#3541, claws#3559, claws#3561, claws#3562,
    claws#3563, claws#3566. deb#01375.
  + Updated translations.</changelog>
  <changelog author="kieltux@gmail.com" date="1453464000">- Update to version 3.13.2 (CVE-2015-8708):
  + Bugs fixed: claws#2358, claws#3557, claws#3584.
  + Updated translations.</changelog>
  <changelog author="kieltux@gmail.com" date="1470657600">- Update to version 3.14.0:
  + Passwords can now be secured with a Master Passphrase.
  + Passwords: The password storage method has changed. All
    passwords are now stored in a separate file,
    (~/.claws-mail/passwordstorerc),
    and use a stronger encryption than previously. Existing
    passwords are moved to the new file automatically, in the old
    format. The new format will be used whenever old passwords are
    changed or when a Master Passphrase is used. All new passwords
    are saved using the new format, irrespective of whether a
    Master Passphrase is used or not. Further information can be
    found here:
    http://www.claws-mail.org/doc/password_encryption.txt
  + Compose window: Removed the outer scrollbar from header area.
  + Message view: The HTML to plain text converter now indicates
    list items with a hyphen (-), adds a line break after ,
    and indents text within blockquotes.
  + Main window: Changed default /View/Show or hide/Menubar
    shortcut to Ctrl+F12.
  + SSL certificates list: Added automatic scrollbar.
  + Address book: Double-clicking datasources now opens the edit
    dialogue.
  + Forwarding: The external editor is now automatically used when
    forwarding as attachment, if the preference is set.
  + Preferences: Automatic mail checking can now be configured in
    hours, minutes and seconds.
  + Preferences: The 'next_on_delete' hidden preference now
    applies to trashing or moving, in addition to deleting, a
    message.
  + Command line: Added -geometry to set geometry for main window.
  + IMAP: Added SASL 'PLAIN' and 'LOGIN' authentication methods
    for accounts. Renamed the old plaintext 'LOGIN' to
    'plaintext'.
  + IMAP: The acccount preference, 'Move deleted mails to trash
    and expunge immediately' has been removed.
  + Notification plugin: Added 'Get mail from account...' to the
    SysTray module's menu.
  + Notification plugin: Focus the widget between
    iconify/deiconify events.
  + Tools: Added tools/cm-reparent.pl, which can be used to fix
    thread parenting for two or more messages.
  + Documentation: Updated man page and manual.
  + Updated translations.
  + Bug fixes:
    claws#2518, claws#2781, claws#3028, claws#3213,
    claws#3573, claws#3581, claws#3603, claws#3610,
    claws#3616, claws#3623, claws#3629, claws#3652,
    claws#3653, claws#3658</changelog>
  <changelog author="mrueckert@suse.de" date="1479297600">- Update to version 3.14.1:
  * 'hide_timezone', a new hidden preference that sets the timezone
    of date fields sent over the network to the unknown timezone
    value as specified in RFC 5322 3.3.  Default value is false
    (i.e., send available timezone information).
  * 'rewrite_first_from', a new hidden preference which  works
    around a limitation of some servers with 'overly-liberal
    parsers'. When this is turned on and the
    Content-Transfer-Encoding is set to 8bit or 7bit, in a message
    body starting with 'From ' the 'From ' will become '=46rom '
    (i,e, encoded form of 'F') and the Content- Transfer-Encoding
    will be changed to Quoted-Printable. When it is turned off no
    such modification will be made but it is very likely that an
    MTA will convert the 'From ' to '&gt;From '. See RFC 4155 for
    further details. Default value is '1', turned on.
  * Templates: it is now possible to attach a file, using
    '|attach_output{sub_expr}' or '|A{sub_expr}', 'sub_expr' is
    evaluated as a command-line to get the filename name from,
    using an absolute /path/to/filename.
  * IMAP mailboxes which show subscribed folders only are now
    indicated by a green folder icon.
  * The Icon Legend has had the missing folder icons added and
    also has an improved layout.
  * Drafted messages: Do not add Message-ID for draft, unless the
    message already has one. A Message-ID header is now only added
    when queuing a message, and any existing Message-ID and
    References headers in drafts, if there are any, are kept.
  * Disable hiding threads and messages in draft folders.
  * The /View/Go to/... actions now respect the 'Open message when
    selected' option.
  * In the UI 'POP' is used instead of 'POP3', 'IMAP' instead of
    'IMAP4', 'SSL/TLS' instead of 'SSL'.
  * GnuTLS: Enforce "strong enough" Diffie-Hellman prime even when
    using older versions of GnuTLS library.
    Since GnuTLS 3.1.7, this minimum size is dictated by the
    priority string, and currently (GnuTLS 3.3.0) the "safe-enough"
    value is 1008 bits. We set this minimum size explicitly for
    older GnuTLS versions.
    Users who are affected by this (their servers use DH prime
    smaller than 1008 bits) can override this by using a priority
    string starting with the keyword "LEGACY". However, this
    keyword only works with GnuTLS 3.3.0 or newer.
  * RSSyl plugin: Enable keeping old items by default.
  * vCalendar plugin: The ics file name is now used for the WebCal
    subscription folder name.
  * vCalendar plugin: Use hours/minutes for vcalendar alert time.
  * Notification plugin: Add support for unity/messaging menu.
  * PDF Viewer plugin: The icons are now themeable.
  * Updated manual in English and Spanish.
  * Updated translations: Brazilian Portuguese, Catalan, Czech,
    Danish, Dutch, Finnish, French, Hebrew, Indonesian, Italian,
    Norwegian Bokmål, Russian, Slovak, Spanish, Swedish,
    Traditional Chinese, and Turkish.
  * Bug fixes:
  - bug 2918, 'Notification Popup icon is hardcoded'
  - bug 3207, 'Claws segfaults when closing LDAP-enabled address
    book'
  - bug 3515, 'Ctrl-Shift-X opens multiple external editors'
  - bug 3638, 'GData Plugin fails after initial Google handshake'
  - bug 3665, 'Fix config script for macOS'
  - bug 3666, 'Typos in Turkish translation'
  - bug 3667, 'segfault in imap_session_authenticate'
  - bug 3675, 'RSSyl crash when opening Atom feed'
  - bug 3676, 'RSSyl crash when opening Atom feed with XML depth
    &gt;= 3'
  - bug 3678, 'Segfault when trying to add new account'
  - bug 3684, 'Socket error with POP3 using TLS client
    certificate'
  - bug 3697, 'Export to mbox' causes crash'
  - bug 3705, 'active account Mail Address corrupted when address
    in Message-ID is used'
  - bug 3711, 'Usage of (s)'
  - bug 3712, 'Name of the example domain in the translation'
  - fix non-resizeable Icon Legend dialogue
  - Fix a potential bug in vcalendar's libical
  - Fix potential crash in vcalendar's icalcomponent_vanew() on
    64-bit archs.
  - Fix regression: show simple text/calendar with plugin.
  - Fix crash in vcalendar passwords handling on prefs save.
  - Few miscellaneous fixes for RSSyl.
  - several memory leaks.
  - Don't check for encrypt() on FreeBSD.
  - Add OpenBSD CA cert path.
  - Do not process folder marks when just refreshing summaryview</changelog>
  <changelog author="olaf@aepfle.de" date="1487246400">- Use xdg-open (instead of gedit) as default mime_open_command
  use-xdg-open-as-default-mime_open_command.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1488456000">- Compface support requires the devel pkg, not just the main pkg</changelog>
  <changelog author="mrueckert@suse.de" date="1492776000">- update to 3.15.0
  * More granular options on when to open a selected message have
    been added. There are now several checkboxes on the
    Display/Summaries page of the Preferences which allow a greater
    flexibility.
  * Compose window: Show the total size of attachments on the
    Attachments tab.
  * Compose window: Bcc has been added to the headers drop-down
    list.
  * Folder list: Top-level folders can now be copied.  They are
    created as regular folders in the target mailbox.
  * Folder selection dialogue: Left/right keys collapse/expand
    rows.  Further keypress will move the cursor to parent or first
    child, respectively.
  * Menu items: 'Mark all unread [recursively]' has been added to
    the folder context menu, message list menu, and the main window
    menu and toolbar.
  * Toolbar actions: Mark, Unmark, Lock, Unlock, Mark [all] read,
    Mark [all] unread, Ignore Thread, Watch Thread, and Delete
    Duplicate Messages have been added to the main window toolbar's
    Actions list.
  * Account compose signature: The value of the signature file now
    takes a path relative to the user's home directory in addition
    to a full path.
  * Icon Themes: Support for SVG themes with icon scaling
    capabilities has been added. This requires libRSVG 2.40.5 or
    newer.
  * Hidden preferences: colours for specifying Tags, QuickSearch,
    and auto-filled header values have been added, both foreground
    and background. Respectively, tags_color, tags_bgcolor,
    qs_active_color, qs_active_bgcolor, qs_error_color,
    qs_error_bgcolor, default_header_color, and
    default_header_bgcolor.
  * Hidden preferences: warn_sending_many_recipients_num, if
    greater than zero, a warning dialogue is shown when the number
    of recipients exceeds the number given.
  * GData plugin: This plugin now requires libgdata version 0.17.2
    or newer.
  * TNEF parser plugin: This plugin now uses an external libytnef.
  * vCalendar plugin: This plugin now uses an external libical,
    version 2.0.0 or newer is required.
  * Mail Archiver plugin: - updated to support some of the
    compression formats up to libarchive 3.2.2
  * Several minor UI improvements.
  * Updated manual in English and Spanish.
  * Updated man page.
  * Updated translations: Brazilian Portuguese, Catalan, Danish,
    Dutch, French, German, Hungarian, Italian, Norwegian Bokmål,
    Russian, Spanish, Swedish, Traditional Chinese, and Turkish.
  * Bug fixes:
    o bug 3251, 'A translated In-Reply-To header is sent
    translated'
    o bug 3571, 'recipient list lost and truncated'
    o bug 3574, 'Template addressing'
    o bug 3582, 'Select folder dialogue does not tell what is
    selecting for'
    o bug 3673, 'Be more friendly instead of "configure: error:
    'encrypt'-function not found."'
    o bug 3734, 'undefined symbol error with flex-2.6.2'
    o bug 3740, 'Templates information dialog can't be closed
    with WM button'
    0 bug 3741, 'Deleting an account doesn't delete imapcache'
    o bug 3742, 'Attaching file with plus sign in filename via
    drag and drop doesn't work'
    o bug 3762, 'redirect fails'
    o bug 3764, 'Use external libical instead of the internal
    copy'
    o bug 3775, 'Error in string at src/mainwindow.c:4726?'
    o bug 3777, 'Weird news dates for some RSS feeds'
    o Debian bug 846170, 'incorrect IMAP UID handling'
    o Allow sending empty messages in Session (just \r\n).
    o fix some main window menu sensitivity issues
    o make up/down key navigation obey 'always_show_msg'
    o fix text selection when double-clicking quoted text and
    'collapse quoted text on double click' is turned off
    o fix 'Go to' moving off current, unopened msg, and dialogue
    to go to next folder
    o obey 'always_show_msg' on "no more [...] msgs. go to next
    folder?"
    o make Go to/[Next|Prev] sort order aware
    o don't ignore auto-account selection when forwarding on IMAP
    and NNTP accounts
    o on first run, use --alternate-config-dir (if set) on prefs
    migration. prevents useless creation of ~/.claws-mail
    directory
    o fix colouring of auto-filled headers
    o don't remove the To when changing account
    o Honour autosave_encrypted preference when using external
    editor.
    o Fix 'search folder' not working in some cases
    o Fix build on OSX.
    o fix memory leaks
    o when renaming folder, only update summaryview folder name
    if the current folder is being renamed
    o sensitise trayicon's 'get mail' and 'exit'
    o Handle timezones correctly in vCalendar.
    o Do not hardcode resolv.conf location
    o fix building with --disable-deprecated
- added BR to enable more features:
  - libical-devel (vcalendar plugin)
  - libgdata-devel (google data plugin)
  - librsvg-devel (scalabable icons support)
  - libcanberra-gtk{,3}-devel enhanced notifications support
- disable the tnef_parse as we are lacking the required library
- drop use-xdg-open-as-default-mime_open_command.patch:
  included upstream
- added claws-mail-3.15.0_libcanberra-gtk3.patch:
  allow finding the gtk3 version of the library if we build with
  gtk3</changelog>
  <changelog author="mrueckert@suse.de" date="1492776001">- add conditional handling for vcalendar plugins to only build on
  distros which still support it
- also prepared conditional build support for tnef</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Ensure neutrality of descriptions.
  Trim instructions and redundant mentions of license.</changelog>
  <changelog author="olaf@aepfle.de" date="1493812800">- Fix bug in imap_session_authenticate with imap-Fix-use-after-free.patch</changelog>
  <changelog author="psychonaut@nothingisreal.com" date="1504094400">- update to 3.15.1
  * Bug fixes:
    o bug 3348, 'Contact pictures not deleted when contact is
    deleted'
    o bug 3721, 'Fails to build in Debian kfreebsd-*'
    o bug 3744, 'Crash upon deleting tags.'
    o bug 3822, 'AttRemover deletes message and fails to create
    new one when disk is full'
    o bug 3828, '"Re-edit" should not recycle the Message-ID
    header'
    o bug 3835, 'autogen.sh fails with invalid test on line 33'
    o bug 3855, 'segfault at startup with old profile and IMAP
    account'
    o bug 3866, 'slibtool causes compile failure'
    o fix crash in sieve manager window when no account has sieve
    enabled.
    o fix incorrect labels in folder selection dialog.
    o fix RSSyl feeds getting renamed to "Untitled feed".
    o fix Resent-Date value.
    o Fix typo around libarchive in configure.ac.
- rename claws-mail-3.15.0_libcanberra-gtk3.patch to
  libcanberra-gtk3.patch
- refreshed libcanberra-gtk3.patch and imap-Fix-use-after-free.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1510056000">- Disable fancy (HTML messages) plugin and drop build requires on
  libwebkit, this can be re-enabled when code is updated to later
  releases of libwebkit, see claws#3763.</changelog>
  <changelog author="mvetter@suse.com" date="1513771200">- Drop imap-Fix-use-after-free.patch: upstreamed
- Update to 3.16.0:
  * Reworked Preferences dialogs, adding new options
  * Compose: more UTF-8 list-item characters have been added
  * GPG: full key/signature fingerprints are now shown instead of the
    short versions
  * SSL Certificate Manager: added support for ipv6 addresses
  * CLI: the --insert option has been added to --compose, to allow
    inserting files from the command line
  * The HTML parser now supports all entities
  * Tools: a simple bash completion helper has been added,
    tools/bash_completion/claws-mail
  * Updated and added translations
  * Many bug fixes. For complete list please view ChangeLog file</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1542801600">- Fix Reply to all replying to random people (claws#3889, boo#1116917)
  Fix-bug-3889-Address-and-quoted-message-inconsistent.patch
- Fix license warning</changelog>
</package>
<package pkgid="bba598c57bf71f729dd2a091125f720fb76e6f4084f6a8deef86c3783af52678" name="claws-mail-lang" arch="noarch">
  <version epoch="0" ver="3.16.0" rel="lp150.2.3.1"/>
  <changelog author="lchiquitto@suse.com" date="1413979200">- New build requirement: intltool.</changelog>
  <changelog author="lchiquitto@suse.com" date="1413979201">- Pass --enable-appdata to %configure.</changelog>
  <changelog author="kieltux@gmail.com" date="1414584000">- Add libexpat-devel BuildRequires: new dependency for the RSSyl
  plugin, which was completely rewritten in 3.11.0.</changelog>
  <changelog author="kieltux@gmail.com" date="1414843200">- Update to version 3.11.1:
  + Use 'gnutls_priority' hidden account preference for POP3 and
    STARTTLS connections, in addition to SMTP.
  + RSSyl plugin: Enable use of .netrc to store network
    credentials.
  + Remove dependency on intltool.
  + Remove appdata.
  + Updated translations: Norwegian Bokmål.
  + Bug fixed: claws#3306, claws#3308
- Removed intltool BuildRequires: no longer needed.
- Removed --enable-appdata from %configure (dropped in upstream).
- Add fix_categories_and_recover_keywords_in_desktop_file.patch
  from upstream git to fix categories and recover keywords in
  desktop file.
- Add recover_desktop_file_installation.patch from bugzilla
  (claws#3320) and recover_desktop_file_installation_part2.patch
  from upstream git to recover desktop file installation.</changelog>
  <changelog author="kieltux@gmail.com" date="1437652800">- Update to version 3.12.0:
  + New plugin: ManageSieve. Manage sieve filters on a server using
    the ManageSieve protocol.
  + Filtering/Processing:
  - Increase range for age matcher condition.
  - 'mark_as_spam' now only marks as spam, it does not do an
    additional move.
  + Compose window:
  - From line gets its own label with mnemonic.
  - More intuitive right-click behaviour in attachments list.
  + QuickSearch: 'Cc' added to the mixed search:
    From/To/Cc/Subject/Tag.
  + Folder list: Added 'Mark all read recursively' to context menu.
  + Support for Mac-cyrillic encoding.
  + IMAP: Support for SCRAM-SHA-1 authentication mechanism.
  + PGP plugins: Display validity of signatures.
  + Bogofilter plugin: 3rd spam handling option, 'Only mark as
    spam'.
  + RSSyl plugin: Per-feed support for HTTP basic auth.
  + Several layout improvements to preferences pages.
  + Updated user manual.
  + Updated man page.
  + Bugs fixed: claws#1769, claws#1901, claws#2435, claws#2577,
    claws#2601, claws#2965, claws#2981, claws#3211, claws#3321,
    claws#3345, claws#3349, claws#3351, claws#3354, claws#3364,
    claws#3365, claws#3380, claws#3389, claws#3407, claws#3419,
    claws#3421, claws#3432, claws#3438, claws#3466, deb#771360,
    deb#771737, deb#779824.
  + CVE fixed: CVE 2010-5109.
  + Misc bugs fixed:
  - Fix LDAP access using TLS protocol.
  - claws-mail.desktop installation.
  - Compose window Subject mnemonic.
  - Archiver plguin: compatibility with libarchive 2.8.x.
  - Remove draft when cancelling a message written with an
    external editor.
  - Remove superfluous dynamic link against libarchive.
  - Fix labels referring to 'SSL' instead of 'TLS'.
  - Allow single-click to select mailboxes in the mailbox order
    dialog.
  - tbird2claws.py: set encoding to UTF-8.
  + Updated translations.
- Dropped fix_categories_and_recover_keywords_in_desktop_file.patch
  as fixed in upstream
- Dropped recover_desktop_file_installation.patch: fixed upstream.
- Dropped recover_desktop_file_installation_part2.patch: fixed
  upstream.
- Set pkgconfig(libgdata) BuildRequires: conditionally for 1330 and
  newer as the needed version is an unstable branch. Due to this,
  conditionally pass --enable-gdata-plugin to configure. As a
  result, libgdata is not beeing built for any current version of
  openSUSE.</changelog>
  <changelog author="kieltux@gmail.com" date="1444910400">- update to version 3.13.0:
  + Preferences are now saved to disk immediately on pressing OK or
    Apply.
  + New preferences have been added for default sorting of the
    message lists. They are found in the 'Message list' frame of
    the Display/Summaries page of the general preferences. These
    options only apply to newly created folders.
  + The menu item 'Delete thread' has been moved to the Message
    menu. Previously clicking it would not delete the thread, but
    just move it to the Trash folder. Now it will delete the
    thread. An additional menu item has been added, 'Move thread to
    trash', which implements the original behaviour.
  + Compose window: By default it is no longer possible to add
    user-defined headers, with only those pre-defined in the drop
    down menus being possible. To restore the old behaviour, a new
    hidden preference has been added: 'type_any_header', setting
    this to 1 restores the old behaviour.
  + Automatic account selection is now also applied when you reply
    to one of your own messages, e.g. from the Sent folder.
  + Folder list: The Left and Right cursor keys now collapse or
    expand the currently selected folder tree item. The Left cursor
    key also moves the selection to parent folder, if current
    folder is within a collapsed tree.
  + Folder list: The Home and End keys now move the selection to
    the first folder and last folder in the tree.
  + Account Auto-configuration: when errors occur, a more detailed
    error message is shown.
  + GnuPG plugins:
  - An option has been added to specify the location of the GnuPG
    executable.
  - A new hidden preference has been added which limits the
    number of results returned when using your keyring for
    address auto-completion: 'autocompletion_limit'. The default
    value is 0, which means there is no limit, any other number
    will limit the results to that number.
  + Python plugin: Folder has been added to MessageInfo objects.
  + The GeoLocation plugin is no longer included.
  + The user manual has been updated.
  + The man page has been updated.
  + Misc bugs fixed:
  - make 'date' (not thread date) the default sort when
    clicking column header to switch to date sort.
  - Several memory leaks in RSSyl.
  - IPv6 now works on Windows, for connections not handled by
  libetpan.
  - GPG preferences initialization.
  - Possible crash when gpg is upgraded to gpg-v21
  - Save temporary file in mime temporary directory when using
  right-click/Open image instead of saving in current working
  directory.
  - Crash in address completion when matching group name.
  - Correct handling of RFC3339 timestamp format with second
  fraction.
  - Building on GLib older than 2.25.
  + Bugs fixed: claws#2115, claws#3209, claws#3253, claws#3263,
    claws#3296, claws#3352, claws#3454, claws#3473, claws#3475,
    claws#3483, claws#3507, claws#3516, claws#3524, claws#3531.
  + Updated translations.
- Dropped gdata-plugin requirements: gdata-plugin dropped upstream.</changelog>
  <changelog author="kieltux@gmail.com" date="1450699200">- update to version 3.13.1 (CVE-2015-8614, boo#959993):
  + When attaching files with no suffix, e.g. Makefile, the correct
    mime type is now found.
  + Added support for a whole range of extra TLDs.
  + '?' is used instead of '--&gt;' in the Message List when sender is
    yourself. (Only visible if the hidden pref 'enable_swap_from'
    is set to 0.)
  + An external editor can now be embedded in the Compose window.
    This depends upon the 'Text editor' option (/Configuration/
    Preferences/Message View/External Programs) having a suitable
    value, such as 'gvim -f --socketid %w %s'.
  + Address Book: address books can now be searched.
  + A hidden pref has been added, 'next_on_delete'. This controls
    the message selection when a message is deleted. A setting of
    '0' which cause the previous, older message to be selected,
    a setting of '1' will cause the next, newer message to be
    selected.
  + PDF Viewer plugin: Support for encrypted (password protected)
    PDFs.
  + RSSyl plugin: The feed preferences window appearance has been
    improved.
  + The --enable-new-addrbook configure option has been renamed to
  - -enable-alternate-addressbook.
  + Windows: Re-enabled regexps.
  + Updated man page.
  + Misc bugs fixed:
  - better fix for crash after broken pgp keyring update, and
    bogus EOF message on verifying sigs of missing keys
  - building on OpenBSD
  - libetpan version test
  - folder renaming for IMAP on Windows.
  + Bug fixes:
    claws#1959, claws#2490, claws#3151, claws#3375,
    claws#3557, claws#3454, claws#3480, claws#3513,
    claws#3541, claws#3559, claws#3561, claws#3562,
    claws#3563, claws#3566. deb#01375.
  + Updated translations.</changelog>
  <changelog author="kieltux@gmail.com" date="1453464000">- Update to version 3.13.2 (CVE-2015-8708):
  + Bugs fixed: claws#2358, claws#3557, claws#3584.
  + Updated translations.</changelog>
  <changelog author="kieltux@gmail.com" date="1470657600">- Update to version 3.14.0:
  + Passwords can now be secured with a Master Passphrase.
  + Passwords: The password storage method has changed. All
    passwords are now stored in a separate file,
    (~/.claws-mail/passwordstorerc),
    and use a stronger encryption than previously. Existing
    passwords are moved to the new file automatically, in the old
    format. The new format will be used whenever old passwords are
    changed or when a Master Passphrase is used. All new passwords
    are saved using the new format, irrespective of whether a
    Master Passphrase is used or not. Further information can be
    found here:
    http://www.claws-mail.org/doc/password_encryption.txt
  + Compose window: Removed the outer scrollbar from header area.
  + Message view: The HTML to plain text converter now indicates
    list items with a hyphen (-), adds a line break after ,
    and indents text within blockquotes.
  + Main window: Changed default /View/Show or hide/Menubar
    shortcut to Ctrl+F12.
  + SSL certificates list: Added automatic scrollbar.
  + Address book: Double-clicking datasources now opens the edit
    dialogue.
  + Forwarding: The external editor is now automatically used when
    forwarding as attachment, if the preference is set.
  + Preferences: Automatic mail checking can now be configured in
    hours, minutes and seconds.
  + Preferences: The 'next_on_delete' hidden preference now
    applies to trashing or moving, in addition to deleting, a
    message.
  + Command line: Added -geometry to set geometry for main window.
  + IMAP: Added SASL 'PLAIN' and 'LOGIN' authentication methods
    for accounts. Renamed the old plaintext 'LOGIN' to
    'plaintext'.
  + IMAP: The acccount preference, 'Move deleted mails to trash
    and expunge immediately' has been removed.
  + Notification plugin: Added 'Get mail from account...' to the
    SysTray module's menu.
  + Notification plugin: Focus the widget between
    iconify/deiconify events.
  + Tools: Added tools/cm-reparent.pl, which can be used to fix
    thread parenting for two or more messages.
  + Documentation: Updated man page and manual.
  + Updated translations.
  + Bug fixes:
    claws#2518, claws#2781, claws#3028, claws#3213,
    claws#3573, claws#3581, claws#3603, claws#3610,
    claws#3616, claws#3623, claws#3629, claws#3652,
    claws#3653, claws#3658</changelog>
  <changelog author="mrueckert@suse.de" date="1479297600">- Update to version 3.14.1:
  * 'hide_timezone', a new hidden preference that sets the timezone
    of date fields sent over the network to the unknown timezone
    value as specified in RFC 5322 3.3.  Default value is false
    (i.e., send available timezone information).
  * 'rewrite_first_from', a new hidden preference which  works
    around a limitation of some servers with 'overly-liberal
    parsers'. When this is turned on and the
    Content-Transfer-Encoding is set to 8bit or 7bit, in a message
    body starting with 'From ' the 'From ' will become '=46rom '
    (i,e, encoded form of 'F') and the Content- Transfer-Encoding
    will be changed to Quoted-Printable. When it is turned off no
    such modification will be made but it is very likely that an
    MTA will convert the 'From ' to '&gt;From '. See RFC 4155 for
    further details. Default value is '1', turned on.
  * Templates: it is now possible to attach a file, using
    '|attach_output{sub_expr}' or '|A{sub_expr}', 'sub_expr' is
    evaluated as a command-line to get the filename name from,
    using an absolute /path/to/filename.
  * IMAP mailboxes which show subscribed folders only are now
    indicated by a green folder icon.
  * The Icon Legend has had the missing folder icons added and
    also has an improved layout.
  * Drafted messages: Do not add Message-ID for draft, unless the
    message already has one. A Message-ID header is now only added
    when queuing a message, and any existing Message-ID and
    References headers in drafts, if there are any, are kept.
  * Disable hiding threads and messages in draft folders.
  * The /View/Go to/... actions now respect the 'Open message when
    selected' option.
  * In the UI 'POP' is used instead of 'POP3', 'IMAP' instead of
    'IMAP4', 'SSL/TLS' instead of 'SSL'.
  * GnuTLS: Enforce "strong enough" Diffie-Hellman prime even when
    using older versions of GnuTLS library.
    Since GnuTLS 3.1.7, this minimum size is dictated by the
    priority string, and currently (GnuTLS 3.3.0) the "safe-enough"
    value is 1008 bits. We set this minimum size explicitly for
    older GnuTLS versions.
    Users who are affected by this (their servers use DH prime
    smaller than 1008 bits) can override this by using a priority
    string starting with the keyword "LEGACY". However, this
    keyword only works with GnuTLS 3.3.0 or newer.
  * RSSyl plugin: Enable keeping old items by default.
  * vCalendar plugin: The ics file name is now used for the WebCal
    subscription folder name.
  * vCalendar plugin: Use hours/minutes for vcalendar alert time.
  * Notification plugin: Add support for unity/messaging menu.
  * PDF Viewer plugin: The icons are now themeable.
  * Updated manual in English and Spanish.
  * Updated translations: Brazilian Portuguese, Catalan, Czech,
    Danish, Dutch, Finnish, French, Hebrew, Indonesian, Italian,
    Norwegian Bokmål, Russian, Slovak, Spanish, Swedish,
    Traditional Chinese, and Turkish.
  * Bug fixes:
  - bug 2918, 'Notification Popup icon is hardcoded'
  - bug 3207, 'Claws segfaults when closing LDAP-enabled address
    book'
  - bug 3515, 'Ctrl-Shift-X opens multiple external editors'
  - bug 3638, 'GData Plugin fails after initial Google handshake'
  - bug 3665, 'Fix config script for macOS'
  - bug 3666, 'Typos in Turkish translation'
  - bug 3667, 'segfault in imap_session_authenticate'
  - bug 3675, 'RSSyl crash when opening Atom feed'
  - bug 3676, 'RSSyl crash when opening Atom feed with XML depth
    &gt;= 3'
  - bug 3678, 'Segfault when trying to add new account'
  - bug 3684, 'Socket error with POP3 using TLS client
    certificate'
  - bug 3697, 'Export to mbox' causes crash'
  - bug 3705, 'active account Mail Address corrupted when address
    in Message-ID is used'
  - bug 3711, 'Usage of (s)'
  - bug 3712, 'Name of the example domain in the translation'
  - fix non-resizeable Icon Legend dialogue
  - Fix a potential bug in vcalendar's libical
  - Fix potential crash in vcalendar's icalcomponent_vanew() on
    64-bit archs.
  - Fix regression: show simple text/calendar with plugin.
  - Fix crash in vcalendar passwords handling on prefs save.
  - Few miscellaneous fixes for RSSyl.
  - several memory leaks.
  - Don't check for encrypt() on FreeBSD.
  - Add OpenBSD CA cert path.
  - Do not process folder marks when just refreshing summaryview</changelog>
  <changelog author="olaf@aepfle.de" date="1487246400">- Use xdg-open (instead of gedit) as default mime_open_command
  use-xdg-open-as-default-mime_open_command.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1488456000">- Compface support requires the devel pkg, not just the main pkg</changelog>
  <changelog author="mrueckert@suse.de" date="1492776000">- update to 3.15.0
  * More granular options on when to open a selected message have
    been added. There are now several checkboxes on the
    Display/Summaries page of the Preferences which allow a greater
    flexibility.
  * Compose window: Show the total size of attachments on the
    Attachments tab.
  * Compose window: Bcc has been added to the headers drop-down
    list.
  * Folder list: Top-level folders can now be copied.  They are
    created as regular folders in the target mailbox.
  * Folder selection dialogue: Left/right keys collapse/expand
    rows.  Further keypress will move the cursor to parent or first
    child, respectively.
  * Menu items: 'Mark all unread [recursively]' has been added to
    the folder context menu, message list menu, and the main window
    menu and toolbar.
  * Toolbar actions: Mark, Unmark, Lock, Unlock, Mark [all] read,
    Mark [all] unread, Ignore Thread, Watch Thread, and Delete
    Duplicate Messages have been added to the main window toolbar's
    Actions list.
  * Account compose signature: The value of the signature file now
    takes a path relative to the user's home directory in addition
    to a full path.
  * Icon Themes: Support for SVG themes with icon scaling
    capabilities has been added. This requires libRSVG 2.40.5 or
    newer.
  * Hidden preferences: colours for specifying Tags, QuickSearch,
    and auto-filled header values have been added, both foreground
    and background. Respectively, tags_color, tags_bgcolor,
    qs_active_color, qs_active_bgcolor, qs_error_color,
    qs_error_bgcolor, default_header_color, and
    default_header_bgcolor.
  * Hidden preferences: warn_sending_many_recipients_num, if
    greater than zero, a warning dialogue is shown when the number
    of recipients exceeds the number given.
  * GData plugin: This plugin now requires libgdata version 0.17.2
    or newer.
  * TNEF parser plugin: This plugin now uses an external libytnef.
  * vCalendar plugin: This plugin now uses an external libical,
    version 2.0.0 or newer is required.
  * Mail Archiver plugin: - updated to support some of the
    compression formats up to libarchive 3.2.2
  * Several minor UI improvements.
  * Updated manual in English and Spanish.
  * Updated man page.
  * Updated translations: Brazilian Portuguese, Catalan, Danish,
    Dutch, French, German, Hungarian, Italian, Norwegian Bokmål,
    Russian, Spanish, Swedish, Traditional Chinese, and Turkish.
  * Bug fixes:
    o bug 3251, 'A translated In-Reply-To header is sent
    translated'
    o bug 3571, 'recipient list lost and truncated'
    o bug 3574, 'Template addressing'
    o bug 3582, 'Select folder dialogue does not tell what is
    selecting for'
    o bug 3673, 'Be more friendly instead of "configure: error:
    'encrypt'-function not found."'
    o bug 3734, 'undefined symbol error with flex-2.6.2'
    o bug 3740, 'Templates information dialog can't be closed
    with WM button'
    0 bug 3741, 'Deleting an account doesn't delete imapcache'
    o bug 3742, 'Attaching file with plus sign in filename via
    drag and drop doesn't work'
    o bug 3762, 'redirect fails'
    o bug 3764, 'Use external libical instead of the internal
    copy'
    o bug 3775, 'Error in string at src/mainwindow.c:4726?'
    o bug 3777, 'Weird news dates for some RSS feeds'
    o Debian bug 846170, 'incorrect IMAP UID handling'
    o Allow sending empty messages in Session (just \r\n).
    o fix some main window menu sensitivity issues
    o make up/down key navigation obey 'always_show_msg'
    o fix text selection when double-clicking quoted text and
    'collapse quoted text on double click' is turned off
    o fix 'Go to' moving off current, unopened msg, and dialogue
    to go to next folder
    o obey 'always_show_msg' on "no more [...] msgs. go to next
    folder?"
    o make Go to/[Next|Prev] sort order aware
    o don't ignore auto-account selection when forwarding on IMAP
    and NNTP accounts
    o on first run, use --alternate-config-dir (if set) on prefs
    migration. prevents useless creation of ~/.claws-mail
    directory
    o fix colouring of auto-filled headers
    o don't remove the To when changing account
    o Honour autosave_encrypted preference when using external
    editor.
    o Fix 'search folder' not working in some cases
    o Fix build on OSX.
    o fix memory leaks
    o when renaming folder, only update summaryview folder name
    if the current folder is being renamed
    o sensitise trayicon's 'get mail' and 'exit'
    o Handle timezones correctly in vCalendar.
    o Do not hardcode resolv.conf location
    o fix building with --disable-deprecated
- added BR to enable more features:
  - libical-devel (vcalendar plugin)
  - libgdata-devel (google data plugin)
  - librsvg-devel (scalabable icons support)
  - libcanberra-gtk{,3}-devel enhanced notifications support
- disable the tnef_parse as we are lacking the required library
- drop use-xdg-open-as-default-mime_open_command.patch:
  included upstream
- added claws-mail-3.15.0_libcanberra-gtk3.patch:
  allow finding the gtk3 version of the library if we build with
  gtk3</changelog>
  <changelog author="mrueckert@suse.de" date="1492776001">- add conditional handling for vcalendar plugins to only build on
  distros which still support it
- also prepared conditional build support for tnef</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Ensure neutrality of descriptions.
  Trim instructions and redundant mentions of license.</changelog>
  <changelog author="olaf@aepfle.de" date="1493812800">- Fix bug in imap_session_authenticate with imap-Fix-use-after-free.patch</changelog>
  <changelog author="psychonaut@nothingisreal.com" date="1504094400">- update to 3.15.1
  * Bug fixes:
    o bug 3348, 'Contact pictures not deleted when contact is
    deleted'
    o bug 3721, 'Fails to build in Debian kfreebsd-*'
    o bug 3744, 'Crash upon deleting tags.'
    o bug 3822, 'AttRemover deletes message and fails to create
    new one when disk is full'
    o bug 3828, '"Re-edit" should not recycle the Message-ID
    header'
    o bug 3835, 'autogen.sh fails with invalid test on line 33'
    o bug 3855, 'segfault at startup with old profile and IMAP
    account'
    o bug 3866, 'slibtool causes compile failure'
    o fix crash in sieve manager window when no account has sieve
    enabled.
    o fix incorrect labels in folder selection dialog.
    o fix RSSyl feeds getting renamed to "Untitled feed".
    o fix Resent-Date value.
    o Fix typo around libarchive in configure.ac.
- rename claws-mail-3.15.0_libcanberra-gtk3.patch to
  libcanberra-gtk3.patch
- refreshed libcanberra-gtk3.patch and imap-Fix-use-after-free.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1510056000">- Disable fancy (HTML messages) plugin and drop build requires on
  libwebkit, this can be re-enabled when code is updated to later
  releases of libwebkit, see claws#3763.</changelog>
  <changelog author="mvetter@suse.com" date="1513771200">- Drop imap-Fix-use-after-free.patch: upstreamed
- Update to 3.16.0:
  * Reworked Preferences dialogs, adding new options
  * Compose: more UTF-8 list-item characters have been added
  * GPG: full key/signature fingerprints are now shown instead of the
    short versions
  * SSL Certificate Manager: added support for ipv6 addresses
  * CLI: the --insert option has been added to --compose, to allow
    inserting files from the command line
  * The HTML parser now supports all entities
  * Tools: a simple bash completion helper has been added,
    tools/bash_completion/claws-mail
  * Updated and added translations
  * Many bug fixes. For complete list please view ChangeLog file</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1542801600">- Fix Reply to all replying to random people (claws#3889, boo#1116917)
  Fix-bug-3889-Address-and-quoted-message-inconsistent.patch
- Fix license warning</changelog>
</package>
<package pkgid="243ea6066c2af50bcc82c7b471fb2be9db49e44f993562cfa27c4e593980d567" name="cloud-init" arch="src">
  <version epoch="0" ver="18.2" rel="lp150.2.3.1"/>
  <changelog author="kukuk@suse.de" date="1505736000">- python_sitelib does not seem to exist for non single-spec
  python modules, use python2_sitelib and python3_sitelib instead.</changelog>
  <changelog author="dmueller@suse.com" date="1505908800">- add skip-argparse-on-python3.patch: don't depend on argparse
  for python3, it is builtin there (as of python 3.2, so the
  patch should be good enough)</changelog>
  <changelog author="rjschwei@suse.com" date="1505995200">- Update to version 17.1 (bsc#1035106)
  + Version numbering scheme change now YY.NUMBER_OF_RELESE_THAT_YEAR
  + Remove cloud.cfg.suse, use generated default config file
  + Remove addopenSUSEBase.patch, included upstream
  + Remove suseIntegratedHandler.patch, included upstream
  + Remove openSUSEhostsTemplate.diff, included upstream
  + Remove cloud-init-handle-no-carrier.patch, included upstream
  + Remove cloud-init-digital-ocean-datasource.patch,
    use upstream implementation
  + Remove cloud-init-digital-ocean-datasource-enable-by-default.patch,
    use upstream implementation
  + Remove cloud-init-fix-unicode-handling-binarydecode.patch,
    included upstream
  + Remove cloud-init-no-dmidecode-on-ppc64.patch, included upstream
  + Remove dataSourceOpenNebula.patch, use upstream implementation
  + Remove setupSUSEsysVInit.diff, included upstream
  + Remove suseSysVInit.diff, included upstream
  + Remove cloud-init-finalbeforelogin.patch, don't block login
  + Remove cloud-init-handle-not-implemented-query.patch, query option removed
  + Remove cloud-init-spceandtabs-clean.patch, indentation fixed upstream
  + Remove dynamicInitCmd.diff, different solution from upstream
  + Added cloud-init-more-tasks.patch, (bsc#1047363)
    replace cloud-init-finalbeforelogin.patch
  + Forward port cloud-init-python2-sigpipe.patch
  + Remove cloud-init-net-eni.patch, included upstream
  + Remove cloud-init-service.patch, included upstream
  + Forward port cloud-init-sysconfig-netpathfix.patch
  + Remove cloud-init-net-sysconfig-lp1665441.patch, included upstream
  + Remove cloud-init-python26.patch, included upstream
  + Remove skip-argparse-on-python3.patch
  + Add cloud-init-tests-set-exec.patch
  + Add cloud-init-final-no-apt.patch
  + Add zypp_add_repo_test.patch
  + doc: document GCE datasource. [Arnd Hannemann]
  + suse: updates to templates to support openSUSE and SLES.
  + [Robert Schweikert] (LP: #1718640)
  + suse: Copy sysvinit files from redhat with slight changes.
  + [Robert Schweikert] (LP: #1718649)
  + docs: fix sphinx module schema documentation [Chad Smith]
  + tests: Add cloudinit package to all test targets [Chad Smith]
  + Makefile: No longer look for yaml files in obsolete ./bin/.
  + tests: fix ds-identify unit tests to set EC2_STRICT_ID_DEFAULT.
  + ec2: Fix maybe_perform_dhcp_discovery to use /var/tmp as a tmpdir
  + [Chad Smith] (LP: #1717627)
  + Azure: wait longer for SSH pub keys to arrive.
  + [Paul Meyer] (LP: #1717611)
  + GCE: Fix usage of user-data. (LP: #1717598)
  + cmdline: add collect-logs subcommand. [Chad Smith] (LP: #1607345)
  + CloudStack: consider dhclient lease files named with a hyphen.
  + (LP: #1717147)
  + resizefs: Drop check for read-only device file, do not warn on
  + overlayroot. [Chad Smith]
  + Do not provide systemd-fsck drop-in which could cause ordering cycles.
  + [Balint Reczey] (LP: #1717477)
  + tests: Enable the NoCloud KVM platform [Joshua Powers]
  + resizefs: pass mount point to xfs_growfs [Dusty Mabe]
  + vmware: Enable nics before sending the SUCCESS event. [Sankar Tanguturi]
  + cloud-config modules: honor distros definitions in each module
  + [Chad Smith] (LP: #1715738, #1715690)
  + chef: Add option to pin chef omnibus install version
  + [Ethan Apodaca] (LP: #1462693)
  + tests: execute: support command as string [Joshua Powers]
  + schema and docs: Add jsonschema to resizefs and bootcmd modules
  + [Chad Smith]
  + tools: Add xkvm script, wrapper around qemu-system [Joshua Powers]
  + vmware customization: return network config format
  + [Sankar Tanguturi] (LP: #1675063)
  + Ec2: only attempt to operate at local mode on known platforms.
  + (LP: #1715128)
  + Use /run/cloud-init for tempfile operations. (LP: #1707222)
  + ds-identify: Make OpenStack return maybe on arch other than intel.
  + (LP: #1715241)
  + tests: mock missed openstack metadata uri network_data.json
  + [Chad Smith] (LP: #1714376)
  + relocate tests/unittests/helpers.py to cloudinit/tests
  + [Lars Kellogg-Stedman]
  + tox: add nose timer output [Joshua Powers]
  + upstart: do not package upstart jobs, drop ubuntu-init-switch module.
  + tests: Stop leaking calls through unmocked metadata addresses
  + [Chad Smith] (LP: #1714117)
  + distro: allow distro to specify a default locale [Ryan Harper]
  + tests: fix two recently added tests for sles distro.
  + url_helper: dynamically import oauthlib import from inside oauth_headers
  + [Chad Smith]
  + tox: make xenial environment run with python3.6
  + suse: Add support for openSUSE and return SLES to a working state.
  + [Robert Schweikert]
  + GCE: Add a main to the GCE Datasource.
  + ec2: Add IPv6 dhcp support to Ec2DataSource. [Chad Smith] (LP: #1639030)
  + url_helper: fail gracefully if oauthlib is not available
  + [Lars Kellogg-Stedman] (LP: #1713760)
  + cloud-init analyze: fix issues running under python 2. [Andrew Jorgensen]
  + Configure logging module to always use UTC time.
  + [Ryan Harper] (LP: #1713158)
  + Log a helpful message if a user script does not include shebang.
  + [Andrew Jorgensen]
  + cli: Fix command line parsing of coniditionally loaded subcommands.
  + [Chad Smith] (LP: #1712676)
  + doc: Explain error behavior in user data include file format.
  + [Jason Butz]
  + cc_landscape &amp; cc_puppet: Fix six.StringIO use in writing configs
  + [Chad Smith] (LP: #1699282, #1710932)
  + schema cli: Add schema subcommand to cloud-init cli and cc_runcmd schema
  + [Chad Smith]
  + Debian: Remove non-free repositories from apt sources template.
  + [Joonas Kylmälä] (LP: #1700091)
  + tools: Add tooling for basic cloud-init performance analysis.
  + [Chad Smith] (LP: #1709761)
  + network: add v2 passthrough and fix parsing v2 config with bonds/bridge
  + params [Ryan Harper] (LP: #1709180)
  + doc: update capabilities with features available, link doc reference,
  + cli example [Ryan Harper]
  + vcloud directory: Guest Customization support for passwords
  + [Maitreyee Saikia]
  + ec2: Allow Ec2 to run in init-local using dhclient in a sandbox.
  + [Chad Smith] (LP: #1709772)
  + cc_ntp: fallback on timesyncd configuration if ntp is not installable
  + [Ryan Harper] (LP: #1686485)
  + net: Reduce duplicate code. Have get_interfaces_by_mac use
  + get_interfaces.
  + tests: Fix build tree integration tests [Joshua Powers]
  + sysconfig: Dont repeat header when rendering resolv.conf
  + [Ryan Harper] (LP: #1701420)
  + archlinux: Fix bug with empty dns, do not render 'lo' devices.
  + (LP: #1663045, #1706593)
  + cloudinit.net: add initialize_network_device function and tests
  + [Chad Smith]
  + makefile: fix ci-deps-ubuntu target [Chad Smith]
  + tests: adjust locale integration test to parse default locale.
  + tests: remove 'yakkety' from releases as it is EOL.
  + tests: Add initial tests for EC2 and improve a docstring.
  + locale: Do not re-run locale-gen if provided locale is system default.
  + archlinux: fix set hostname usage of write_file.
  + [Joshua Powers] (LP: #1705306)
  + sysconfig: support subnet type of 'manual'.
  + tools/run-centos: make running with no argument show help.
  + Drop rand_str() usage in DNS redirection detection
  + [Bob Aman] (LP: #1088611)
  + sysconfig: use MACADDR on bonds/bridges to configure mac_address
  + [Ryan Harper] (LP: #1701417)
  + net: eni route rendering missed ipv6 default route config
  + [Ryan Harper] (LP: #1701097)
  + sysconfig: enable mtu set per subnet, including ipv6 mtu
  + [Ryan Harper] (LP: #1702513)
  + sysconfig: handle manual type subnets [Ryan Harper] (LP: #1687725)
  + sysconfig: fix ipv6 gateway routes [Ryan Harper] (LP: #1694801)
  + sysconfig: fix rendering of bond, bridge and vlan types.
  + [Ryan Harper] (LP: #1695092)
  + Templatize systemd unit files for cross distro deltas. [Ryan Harper]
  + sysconfig: ipv6 and default gateway fixes. [Ryan Harper] (LP: #1704872)
  + net: fix renaming of nics to support mac addresses written in upper
  + case. (LP: #1705147)
  + tests: fixes for issues uncovered when moving to python 3.6.
  + (LP: #1703697)
  + sysconfig: include GATEWAY value if set in subnet
  + [Ryan Harper] (LP: #1686856)
  + Scaleway: add datasource with user and vendor data for Scaleway.
  + [Julien Castets]
  + Support comments in content read by load_shell_content.
  + cloudinitlocal fail to run during boot [Hongjiang Zhang]
  + doc: fix disk setup example table_type options
  + [Sandor Zeestraten] (LP: #1703789)
  + tools: Fix exception handling. [Joonas Kylmälä] (LP: #1701527)
  + tests: fix usage of mock in GCE test.
  + test_gce: Fix invalid mock of platform_reports_gce to return False
  + [Chad Smith]
  + test: fix incorrect keyid for apt repository.
  + [Joshua Powers] (LP: #1702717)
  + tests: Update version of pylxd [Joshua Powers]
  + write_files: Remove log from helper function signatures.
  + [Andrew Jorgensen]
  + doc: document the cmdline options to NoCloud [Brian Candler]
  + read_dmi_data: always return None when inside a container. (LP: #1701325)
  + requirements.txt: remove trailing white space.
  + Azure: Add network-config, Refactor net layer to handle duplicate macs.
  + [Ryan Harper]
  + Tests: Simplify the check on ssh-import-id [Joshua Powers]
  + tests: update ntp tests after sntp added [Joshua Powers]
  + FreeBSD: Make freebsd a variant, fix unittests and
  + tools/build-on-freebsd.
  + FreeBSD: fix test failure
  + FreeBSD: replace ifdown/ifup with "ifconfig down" and "ifconfig up".
  + [Hongjiang Zhang] (LP: #1697815)
  + FreeBSD: fix cdrom mounting failure if /mnt/cdrom/secure did not exist.
  + [Hongjiang Zhang] (LP: #1696295)
  + main: Don't use templater to format the welcome message
  + [Andrew Jorgensen]
  + docs: Automatically generate module docs form schema if present.
  + [Chad Smith]
  + debian: fix path comment in /etc/hosts template.
  + [Jens Sandmann] (LP: #1606406)
  + suse: add hostname and fully qualified domain to template.
  + [Jens Sandmann]
  + write_file(s): Print permissions as octal, not decimal [Andrew Jorgensen]
  + ci deps: Add --test-distro to read-dependencies to install all deps
  + [Chad Smith]
  + tools/run-centos: cleanups and move to using read-dependencies
  + pkg build ci: Add make ci-deps-&lt;distro&gt; target to install pkgs
  + [Chad Smith]
  + systemd: make cloud-final.service run before apt daily services.
  + (LP: #1693361)
  + selinux: Allow restorecon to be non-fatal. [Ryan Harper] (LP: #1686751)
  + net: Allow netinfo subprocesses to return 0 or 1.
  + [Ryan Harper] (LP: #1686751)
  + net: Allow for NetworkManager configuration [Ryan McCabe] (LP: #1693251)
  + Use distro release version to determine if we use systemd in redhat spec
  + [Ryan Harper]
  + net: normalize data in network_state object
  + Integration Testing: tox env, pyxld 2.2.3, and revamp framework
  + [Wesley Wiedenmeier]
  + Chef: Update omnibus url to chef.io, minor doc changes. [JJ Asghar]
  + tools: add centos scripts to build and test [Joshua Powers]
  + Drop cheetah python module as it is not needed by trunk [Ryan Harper]
  + rhel/centos spec cleanups.
  + cloud.cfg: move to a template.  setup.py changes along the way.
  + Makefile: add deb-src and srpm targets. use PYVER more places.
  + makefile: fix python 2/3 detection in the Makefile [Chad Smith]
  + snap: Removing snapcraft plug line [Joshua Powers] (LP: #1695333)
  + RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1696176)
  + test: Fix pyflakes complaint of unused import.
  + [Joshua Powers] (LP: #1695918)
  + NoCloud: support seed of nocloud from smbios information
  + [Vladimir Pouzanov] (LP: #1691772)
  + net: when selecting a network device, use natural sort order
  + [Marc-Aurèle Brothier]
  + fix typos and remove whitespace in various docs [Stephan Telling]
  + systemd: Fix typo in comment in cloud-init.target. [Chen-Han Hsiao]
  + Tests: Skip jsonschema related unit tests when dependency is absent.
  + [Chad Smith] (LP: #1695318)
  + azure: remove accidental duplicate line in merge.
  + azure: identify platform by well known value in chassis asset tag.
  + [Chad Smith] (LP: #1693939)
  + tools/net-convert.py: support old cloudinit versions by using kwargs.
  + ntp: Add schema definition and passive schema validation.
  + [Chad Smith] (LP: #1692916)
  + Fix eni rendering for bridge params that require repeated key for
  + values. [Ryan Harper]
  + net: remove systemd link file writing from eni renderer [Ryan Harper]
  + AliYun: Enable platform identification and enable by default.
  + [Junjie Wang] (LP: #1638931)
  + net: fix reading and rendering addresses in cidr format.
  + [Dimitri John Ledkov] (LP: #1689346, #1684349)
  + disk_setup: udev settle before attempting partitioning or fs creation.
  + (LP: #1692093)
  + GCE: Update the attribute used to find instance SSH keys.
  + [Daniel Watkins] (LP: #1693582)
  + nplan: For bonds, allow dashed or underscore names of keys.
  + [Dimitri John Ledkov] (LP: #1690480)
  + python2.6: fix unit tests usage of assertNone and format.
  + test: update docstring on test_configured_list_with_none
  + fix tools/ds-identify to not write None twice.
  + tox/build: do not package depend on style requirements.
  + cc_ntp: Restructure cc_ntp unit tests. [Chad Smith] (LP: #1692794)
  + flake8: move the pinned version of flake8 up to 3.3.0
  + tests: Apply workaround for snapd bug in test case. [Joshua Powers]
  + RHEL/CentOS: Fix dual stack IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1679817, #1685534, #1685532)
  + disk_setup: fix several issues with gpt disk partitions. (LP: #1692087)
  + function spelling &amp; docstring update [Joshua Powers]
  + Fixing wrong file name regression. [Joshua Powers]
  + tox: move pylint target to 1.7.1
  + Fix get_interfaces_by_mac for empty macs (LP: #1692028)
  + DigitalOcean: remove routes except for the public interface.
  + [Ben Howard] (LP: #1681531.)
  + netplan: pass macaddress, when specified, for vlans
  + [Dimitri John Ledkov] (LP: #1690388)
  + doc: various improvements for the docs on cc_users_groups.
  + [Felix Dreissig]
  + cc_ntp: write template before installing and add service restart
  + [Ryan Harper] (LP: #1645644)
  + cloudstack: fix tests to avoid accessing /var/lib/NetworkManager
  + [Lars Kellogg-Stedman]
  + tests: fix hardcoded path to mkfs.ext4 [Joshua Powers] (LP: #1691517)
  + Actually skip warnings when .skip file is present.
  + [Chris Brinker] (LP: #1691551)
  + netplan: fix netplan render_network_state signature.
  + [Dimitri John Ledkov] (LP: #1685944)
  + Azure: fix reformatting of ephemeral disks on resize to large types.
  + (LP: #1686514)
  + Revert "tools/net-convert: fix argument order for render_network_state"
  + make deb: Add devscripts dependency for make deb. Cleanup
  + packages/bddeb. [Chad Smith] (LP: #1685935)
  + tools/net-convert: fix argument order for render_network_state
  + [Ryan Harper] (LP: #1685944)
  + openstack: fix log message copy/paste typo in _get_url_settings
  + [Lars Kellogg-Stedman]
  + unittests: fix unittests run on centos [Joshua Powers]
  + Improve detection of snappy to include os-release and kernel cmdline.
  + (LP: #1689944)
  + Add address to config entry generated by _klibc_to_config_entry.
  + [Julien Castets] (LP: #1691135)
  + sysconfig: Raise ValueError when multiple default gateways are present.
  + [Chad Smith] (LP: #1687485)
  + FreeBSD: improvements and fixes for use on Azure
  + [Hongjiang Zhang] (LP: #1636345)
  + Add unit tests for ds-identify, fix Ec2 bug found.
  + fs_setup: if cmd is specified, use shell interpretation.
  + [Paul Meyer] (LP: #1687712)
  + doc: document network configuration defaults policy and formats.
  + [Ryan Harper]
  + Fix name of "uri" key in docs for "cc_apt_configure" module
  + [Felix Dreissig]
  + tests: Enable artful [Joshua Powers]
  + nova-lxd: read product_name from environment, not platform.
  + (LP: #1685810)
  + Fix yum repo config where keys contain array values
  + [Dylan Perry] (LP: #1592150)
  + template: Update debian backports template [Joshua Powers] (LP: #1627293)
  + rsyslog: replace ~ with stop [Joshua Powers] (LP: #1367899)
  + Doc: add additional RTD examples [Joshua Powers] (LP: #1459604)
  + Fix growpart for some cases when booted with root=PARTUUID.
  + (LP: #1684869)
  + pylint: update output style to parseable [Joshua Powers]
  + pylint: fix all logging warnings [Joshua Powers]
  + CloudStack: Add NetworkManager to list of supported DHCP lease dirs.
  + [Syed]
  + net: kernel lies about vlans not stealing mac addresses, when they do
  + [Dimitri John Ledkov] (LP: #1682871)
  + ds-identify: Check correct path for "latest" config drive
  + [Daniel Watkins] (LP: #1673637)
  + doc: Fix example for resolve.conf configuration.
  + [Jon Grimm] (LP: #1531582)
  + Fix examples that reference upstream chef repository.
  + [Jon Grimm] (LP: #1678145)
  + doc: correct grammar and improve clarity in merging documentation.
  + [David Tagatac]
  + doc: Add missing doc link to snap-config module. [Ryan Harper]
  + snap: allows for creating cloud-init snap [Joshua Powers]
  + DigitalOcean: assign IPv4ll address to lowest indexed interface.
  + [Ben Howard]
  + DigitalOcean: configure all NICs presented in meta-data. [Ben Howard]
  + Remove (and/or fix) URL shortener references [Jon Grimm] (LP: #1669727)
  + HACKING.rst: more info on filling out contributors agreement.
  + util: teach write_file about copy_mode option
  + [Lars Kellogg-Stedman] (LP: #1644064)
  + DigitalOcean: bind resolvers to loopback interface. [Ben Howard]
  + tests: fix AltCloud tests to not rely on blkid (LP: #1636531)
  + OpenStack: add 'dvs' to the list of physical link types. (LP: #1674946)
  + Fix bug that resulted in an attempt to rename bonds or vlans.
  + (LP: #1669860)
  + tests: update OpenNebula and Digital Ocean to not rely on host
  + interfaces.
  + net: in netplan renderer delete known image-builtin content.
  + (LP: #1675576)
  + doc: correct grammar in capabilities.rst [David Tagatac]
  + ds-identify: fix detecting of maas datasource. (LP: #1677710)
  + netplan: remove debugging prints, add debug logging [Ryan Harper]
  + ds-identify: do not write None twice to datasource_list.
  + support resizing partition and rootfs on system booted without
  + initramfs. [Steve Langasek] (LP: #1677376)
  + apt_configure: run only when needed. (LP: #1675185)
  + OpenStack: identify OpenStack by product 'OpenStack Compute'.
  + (LP: #1675349)
  + GCE: Search GCE in ds-identify, consider serial number in check.
  + (LP: #1674861)
  + Add support for setting hashed passwords [Tore S. Lonoy] (LP: #1570325)
  + Fix filesystem creation when using "partition: auto"
  + [Jonathan Ballet] (LP: #1634678)
  + ConfigDrive: support reading config drive data from /config-drive.
  + (LP: #1673411)
  + ds-identify: fix detection of Bigstep datasource. (LP: #1674766)
  + test: add running of pylint [Joshua Powers]
  + ds-identify: fix bug where filename expansion was left on.
  + advertise network config v2 support (NETWORK_CONFIG_V2) in features.
  + Bigstep: fix bug when executing in python3. [root]
  + Fix unit test when running in a system deployed with cloud-init.
  + Bounce network interface for Azure when using the built-in path.
  + [Brent Baude] (LP: #1674685)
  + cloudinit.net: add network config v2 parsing and rendering [Ryan Harper]
  + net: Fix incorrect call to isfile [Joshua Powers] (LP: #1674317)
  + net: add renderers for automatically selecting the renderer.
  + doc: fix config drive doc with regard to unpartitioned disks.
  + (LP: #1673818)
  + test: Adding integratiron test for password as list [Joshua Powers]
  + render_network_state: switch arguments around, do not require target
  + support 'loopback' as a device type.
  + Integration Testing: improve testcase subclassing [Wesley Wiedenmeier]
  + gitignore: adding doc/rtd_html [Joshua Powers]
  + doc: add instructions for running integration tests via tox.
  + [Joshua Powers]
  + test: avoid differences in 'date' output due to daylight savings.
  + Fix chef config module in omnibus install. [Jeremy Melvin] (LP: #1583837)
  + Add feature flags to cloudinit.version. [Wesley Wiedenmeier]
  + tox: add a citest environment
  + Further fix regression to support 'password' for default user.
  + fix regression when no chpasswd/list was provided.
  + Support chpasswd/list being a list in addition to a string.
  + [Sergio Lystopad] (LP: #1665694)
  + doc: Fix configuration example for cc_set_passwords module.
  + [Sergio Lystopad] (LP: #1665773)
  + net: support both ipv4 and ipv6 gateways in sysconfig.
  + [Lars Kellogg-Stedman] (LP: #1669504)
  + net: do not raise exception for &gt; 3 nameservers
  + [Lars Kellogg-Stedman] (LP: #1670052)
  + ds-identify: report cleanups for config and exit value. (LP: #1669949)
  + ds-identify: move default setting for Ec2/strict_id to a global.
  + ds-identify: record not found in cloud.cfg and always add None.
  + Support warning if the used datasource is not in ds-identify's list.
  + tools/ds-identify: make report mode write namespaced results.
  + Move warning functionality to cloudinit/warnings.py
  + Add profile.d script for showing warnings on login.
  + Z99-cloud-locale-test.sh: install and make consistent.
  + tools/ds-identify: look at cloud.cfg when looking for ec2 strict_id.
  + tools/ds-identify: disable vmware_guest_customization by default.
  + tools/ds-identify: ovf identify vmware guest customization.
  + Identify Brightbox as an Ec2 datasource user. (LP: #1661693)
  + DatasourceEc2: add warning message when not on AWS.
  + ds-identify: add reading of datasource/Ec2/strict_id
  + tools/ds-identify: add support for found or maybe contributing config.
  + tools/ds-identify: read the seed directory on Ec2
  + tools/ds-identify: use quotes in local declarations.
  + tools/ds-identify: fix documentation of policy setting in a comment.
  + ds-identify: only run once per boot unless --force is given.
  + flake8: fix flake8 complaints in previous commit.
  + net: correct errors in cloudinit/net/sysconfig.py
  + [Lars Kellogg-Stedman] (LP: #1665441)
  + ec2_utils: fix MetadataLeafDecoder that returned bytes on empty
  + apply the runtime configuration written by ds-identify.
  + ds-identify: fix checking for filesystem label (LP: #1663735)
  + ds-identify: read ds=nocloud properly (LP: #1663723)
  + support nova-lxd by reading platform from environment of pid 1.
  + (LP: #1661797)
  + ds-identify: change aarch64 to use the default for non-dmi systems.
  + Remove style checking during build and add latest style checks to tox
  + [Joshua Powers] (LP: #1652329)
  + code-style: make master pass pycodestyle (2.3.1) cleanly, currently:
  + [Joshua Powers]
  + manual_cache_clean: When manually cleaning touch a file in instance dir.
  + Add tools/ds-identify to identify datasources available.
  + Fix small typo and change iso-filename for consistency [Robin Naundorf]
  + Fix eni rendering of multiple IPs per interface
  + [Ryan Harper] (LP: #1657940)
  + tools/mock-meta: support python2 or python3 and ipv6 in both.
  + tests: remove executable bit on test_net, so it runs, and fix it.
  + tests: No longer monkey patch httpretty for python 3.4.2
  + Add 3 ecdsa-sha2-nistp* ssh key types now that they are standardized
  + [Lars Kellogg-Stedman] (LP: #1658174)
  + reset httppretty for each test [Lars Kellogg-Stedman] (LP: #1658200)
  + build: fix running Make on a branch with tags other than master
  + EC2: Do not cache security credentials on disk
  + [Andrew Jorgensen] (LP: #1638312)
  + doc: Fix typos and clarify some aspects of the part-handler
  + [Erik M. Bray]
  + doc: add some documentation on OpenStack datasource.
  + OpenStack: Use timeout and retries from config in get_data.
  + [Lars Kellogg-Stedman] (LP: #1657130)
  + Fixed Misc issues related to VMware customization. [Sankar Tanguturi]
  + Fix minor docs typo: perserve &gt; preserve [Jeremy Bicha]
  + Use dnf instead of yum when available
  + [Lars Kellogg-Stedman] (LP: #1647118)
  + validate-yaml: use python rather than explicitly python3
  + Get early logging logged, including failures of cmdline url.
- From 0.7.9
  + doc: adjust headers in tests documentation for consistency.
  + pep8: fix issue found in zesty build with pycodestyle.
  + integration test: initial commit of integration test framework
  + [Wesley Wiedenmeier]
  + LICENSE: Allow dual licensing GPL-3 or Apache 2.0 [Jon Grimm]
  + Fix config order of precedence, putting kernel command line over system.
  + [Wesley Wiedenmeier] (LP: #1582323)
  + pep8: whitespace fix
  + Update the list of valid ssh keys. [Michael Felt]
  + network: add ENI unit test for statically rendered routes.
  + set_hostname: avoid erroneously appending domain to fqdn
  + [Lars Kellogg-Stedman] (LP: #1647910)
  + doc: change 'nobootwait' to 'nofail' in docs [Anhad Jai Singh]
  + Replace an expired bit.ly link in code comment.
  + user-groups: fix bug when groups was provided as string and had spaces
  + (LP: #1354694)
  + mounts: use mount -a again to accomplish mounts (LP: #1647708)
  + CloudSigma: Fix bug where datasource was not loaded in local search.
  + (LP: #1648380)
  + when adding a user, strip whitespace from group list [Lars Kellogg-Stedman]
  + (LP: #1354694)
  + fix decoding of utf-8 chars in yaml test
  + Replace usage of sys_netdev_info with read_sys_net (LP: #1625766)
  + fix problems found in python2.6 test.
  + OpenStack: extend physical types to include hyperv, hw_veb, vhost_user.
  + (LP: #1642679)
  + tests: fix assumptions that expected no eth0 in system. (LP: #1644043)
  + net/cmdline: Consider ip= or ip6= on command line not only ip=
  + (LP: #1639930)
  + Just use file logging by default (LP: #1643990)
  + Improve formatting for ProcessExecutionError [Wesley Wiedenmeier]
  + flake8: fix trailing white space
  + Doc: various documentation fixes [Sean Bright]
  + cloudinit/config/cc_rh_subscription.py: Remove repos before adding
  + [Brent Baude]
  + packages/redhat: fix rpm spec file.
  + main: set TZ in environment if not already set. [Ryan Harper]
  + Azure: No longer rely on walinux agent. (LP: #1538522)
  + disk_setup: Use sectors as unit when formatting MBR disks with sfdisk.
  + [Daniel Watkins] (LP: #1460715)
  + Add activate_datasource, for datasource specific code paths. (LP: #1611074)
  + systemd: cloud-init-local use RequiresMountsFor=/var/lib/cloud
  + (LP: #1642062)
  + systemd: cloud-init remove After=systemd-networkd-wait-online
  + systemd: cloud-init-local change Before basic to sysinit
  + pep8: fix style errors reported by pycodestyle 2.1.0
  + systemd: drop both Wants and After local-fs.target
  + systemd: networking service adjustments. (LP: #1636912)
  + systemd: replace Before=basic.target, dbus.target with sysinit.target
  + (LP: #1629797)
  + doc: Add documentation on stages of boot.
  + doc: make the RST files consistently formated and other improvements.
  + Ec2: fix syntax and tox in previous commit.
  + Ec2: protect against non-dictionary in block-device-mapping.
  + doc: fixed example to not overwrite /etc/hosts [Chris Glass]
  + Doc: fix spelling / typos in ca_certs and scripts_vendor.
  + pyflakes: fix issue with pyflakes 1.3 found in ubuntu zesty-proposed.
  + net/cmdline: Further adjustments to ipv6 support [LaMont Jones]
  + (LP: #1621615)
  + Add coverage dependency to bddeb to fix package build.
  + doc: improve HACKING.rst file
  + dmidecode: Allow dmidecode to be used on aarch64 [Robert Schweikert]
  + AliYun: Add new datasource for Ali-Cloud ECS [kaihuan.pkh]
  + Add coverage collection to tox unit tests. [Joshua Powers]
  + cc_users_groups: fix remaing call to ds.normalize_user_groups [Ryan Harper]
  + disk-config: udev settle after partitioning in gpt format. (LP: #1626243)
  + unittests: do not read system /etc/cloud/cloud.cfg.d (LP: #1635350)
  + Add documentation for logging features. [Wesley Wiedenmeier]
  + Add support for snap create-user on Ubuntu Core images. [Ryan Harper]
  + Fix sshd restarts for rhel distros. [Jim Gorz]
  + OpenNebula: replace 'ip' parsing with cloudinit.net usage.
  + Fix python2.6 things found running in centos 6.
  + Move user/group functions to new ug_util file
  + DigitalOcean: enable usage of data source by default.
  + update Gentoo initscripts to run in the correct order [Matthew Thode]
  + MAAS: improve the main of datasource to look at kernel cmdline config.
  + tests: silence the Cheetah UserWarning about NameMapper C version.
  + systemd: Run cloud-init.service Before dbus.socket not dbus.target
  + [Daniel Watkins] (LP: #1629797)
  + systemd: run cloud-init.service Before dbus.service (LP: #1629797)
  + unittests: fix use of mock 2.0 'assert_called' when running make check
  + [Ryan Harper]
  + Improve module documentation and doc cleanup. [Wesley Wiedenmeier]
  + lxd: Update network config for LXD 2.3 [Stéphane Graber]
  + DigitalOcean: use meta-data for network configruation [Ben Howard]
  + ntp: move to run after apt configuration (LP: #1628337)
  + Decode unicode types in decode_binary [Robert Schweikert]
  + systemd: Ensure that cloud-init-local happens before NetworkManager
  + Allow ephemeral drive to be unpartitioned [Paul Meyer]
  + subp: add 'update_env' argument
  + net: support reading ipv6 dhcp config from initramfs [LaMont Jones]
  + (LP: #1621615, #1621507)
  + Adjust mounts and disk configuration for systemd. (LP: #1611074)
  + dmidecode: run dmidecode only on i?86 or x86_64 arch. [Robert Schweikert]
  + systemd: put cloud-init.target After multi-user.target (LP: #1623868)</changelog>
  <changelog author="rjschwei@suse.com" date="1509624000">- Fix sed expression to set distro properly (boo#1063716)</changelog>
  <changelog author="rjschwei@suse.com" date="1510142400">- Add cloud-init-hosts-template.patch (bsc#1064594)
  + Properly expand the /etc/hosst file when manage_etc_hosts is set</changelog>
  <changelog author="rjschwei@suse.com" date="1510401600">- Add cloud-init-ntp-conf-suse.patch
  + ntp configuration was broken on sles and opensuse lp#1726572</changelog>
  <changelog author="rjschwei@suse.com" date="1510833600">- Add cloud-init-translate-netconf-ipv4-keep-gw.patch (boo#1064854)
  + Properly insert the gateway information for v1 json network config data</changelog>
  <changelog author="rjschwei@suse.com" date="1510920000">- Fix variable name in cloud-init-translate-netconf-ipv4-keep-gw.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
  <changelog author="rjschwei@suse.com" date="1512561600">- Add cloud-init-reproduce-build.patch (boo#1069635)
  + Make builds reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Fix usage of fdupes macro: there is no '-n' parameter to the
  macro (there would be to fdupes, the command, though).</changelog>
  <changelog author="gmoro@suse.com" date="1516276800">- patch distribution detection until a fix is delivered to python3 (bsc#997614)
  add cloud-init-add-variant-cloudcfg.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1517227200">- Update to version 17.2 (boo#1069635, bsc#1072811)
  + Add cloud-init-skip-ovf-tests.patch
  + Add cloud-init-no-python-linux-dist.patch
  + Add 0001-switch-to-using-iproute2-tools.patch
  + Add 0001-Support-chrony-configuration-lp-1731619.patch
  + Add 0002-Disable-method-deprecation-warning-for-pylint.patch
  + Add 0003-Distro-dependent-chrony-config-file.patch
  + removed cloud-init-add-variant-cloudcfg.patch replaced by
    cloud-init-no-python-linux-dist.patch
  + removed zypp_add_repos.diff included upstream
  + removed zypp_add_repo_test.patch included upstream
  + removed cloud-init-hosts-template.patch included upstream
  + removed cloud-init-more-tasks.patch included upstream
  + removed cloud-init-final-no-apt.patch included upstream
  + removed cloud-init-ntp-conf-suse.patch included upstream
  + removed cloud-init-break-cycle-local-service.patch included upstream
  + removed cloud-init-reproduce-build.patch included upstream
  + For the complete changelog see https://launchpad.net/cloud-init/trunk/17.2</changelog>
  <changelog author="dmueller@suse.com" date="1517313600">- drop dependency on boto (only used in examples, and
  should really be ported to botocore/boto3 instead)</changelog>
  <changelog author="rjschwei@suse.com" date="1518523200">- Fix logfile permission settings (bsc#1080595)
  + Add 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch</changelog>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
</package>
<package pkgid="ed5ed36d5570cc2985143dad88d10fefbce158e4115f18ace7d19f66e524c88a" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="18.2" rel="lp150.2.3.1"/>
  <changelog author="kukuk@suse.de" date="1505736000">- python_sitelib does not seem to exist for non single-spec
  python modules, use python2_sitelib and python3_sitelib instead.</changelog>
  <changelog author="dmueller@suse.com" date="1505908800">- add skip-argparse-on-python3.patch: don't depend on argparse
  for python3, it is builtin there (as of python 3.2, so the
  patch should be good enough)</changelog>
  <changelog author="rjschwei@suse.com" date="1505995200">- Update to version 17.1 (bsc#1035106)
  + Version numbering scheme change now YY.NUMBER_OF_RELESE_THAT_YEAR
  + Remove cloud.cfg.suse, use generated default config file
  + Remove addopenSUSEBase.patch, included upstream
  + Remove suseIntegratedHandler.patch, included upstream
  + Remove openSUSEhostsTemplate.diff, included upstream
  + Remove cloud-init-handle-no-carrier.patch, included upstream
  + Remove cloud-init-digital-ocean-datasource.patch,
    use upstream implementation
  + Remove cloud-init-digital-ocean-datasource-enable-by-default.patch,
    use upstream implementation
  + Remove cloud-init-fix-unicode-handling-binarydecode.patch,
    included upstream
  + Remove cloud-init-no-dmidecode-on-ppc64.patch, included upstream
  + Remove dataSourceOpenNebula.patch, use upstream implementation
  + Remove setupSUSEsysVInit.diff, included upstream
  + Remove suseSysVInit.diff, included upstream
  + Remove cloud-init-finalbeforelogin.patch, don't block login
  + Remove cloud-init-handle-not-implemented-query.patch, query option removed
  + Remove cloud-init-spceandtabs-clean.patch, indentation fixed upstream
  + Remove dynamicInitCmd.diff, different solution from upstream
  + Added cloud-init-more-tasks.patch, (bsc#1047363)
    replace cloud-init-finalbeforelogin.patch
  + Forward port cloud-init-python2-sigpipe.patch
  + Remove cloud-init-net-eni.patch, included upstream
  + Remove cloud-init-service.patch, included upstream
  + Forward port cloud-init-sysconfig-netpathfix.patch
  + Remove cloud-init-net-sysconfig-lp1665441.patch, included upstream
  + Remove cloud-init-python26.patch, included upstream
  + Remove skip-argparse-on-python3.patch
  + Add cloud-init-tests-set-exec.patch
  + Add cloud-init-final-no-apt.patch
  + Add zypp_add_repo_test.patch
  + doc: document GCE datasource. [Arnd Hannemann]
  + suse: updates to templates to support openSUSE and SLES.
  + [Robert Schweikert] (LP: #1718640)
  + suse: Copy sysvinit files from redhat with slight changes.
  + [Robert Schweikert] (LP: #1718649)
  + docs: fix sphinx module schema documentation [Chad Smith]
  + tests: Add cloudinit package to all test targets [Chad Smith]
  + Makefile: No longer look for yaml files in obsolete ./bin/.
  + tests: fix ds-identify unit tests to set EC2_STRICT_ID_DEFAULT.
  + ec2: Fix maybe_perform_dhcp_discovery to use /var/tmp as a tmpdir
  + [Chad Smith] (LP: #1717627)
  + Azure: wait longer for SSH pub keys to arrive.
  + [Paul Meyer] (LP: #1717611)
  + GCE: Fix usage of user-data. (LP: #1717598)
  + cmdline: add collect-logs subcommand. [Chad Smith] (LP: #1607345)
  + CloudStack: consider dhclient lease files named with a hyphen.
  + (LP: #1717147)
  + resizefs: Drop check for read-only device file, do not warn on
  + overlayroot. [Chad Smith]
  + Do not provide systemd-fsck drop-in which could cause ordering cycles.
  + [Balint Reczey] (LP: #1717477)
  + tests: Enable the NoCloud KVM platform [Joshua Powers]
  + resizefs: pass mount point to xfs_growfs [Dusty Mabe]
  + vmware: Enable nics before sending the SUCCESS event. [Sankar Tanguturi]
  + cloud-config modules: honor distros definitions in each module
  + [Chad Smith] (LP: #1715738, #1715690)
  + chef: Add option to pin chef omnibus install version
  + [Ethan Apodaca] (LP: #1462693)
  + tests: execute: support command as string [Joshua Powers]
  + schema and docs: Add jsonschema to resizefs and bootcmd modules
  + [Chad Smith]
  + tools: Add xkvm script, wrapper around qemu-system [Joshua Powers]
  + vmware customization: return network config format
  + [Sankar Tanguturi] (LP: #1675063)
  + Ec2: only attempt to operate at local mode on known platforms.
  + (LP: #1715128)
  + Use /run/cloud-init for tempfile operations. (LP: #1707222)
  + ds-identify: Make OpenStack return maybe on arch other than intel.
  + (LP: #1715241)
  + tests: mock missed openstack metadata uri network_data.json
  + [Chad Smith] (LP: #1714376)
  + relocate tests/unittests/helpers.py to cloudinit/tests
  + [Lars Kellogg-Stedman]
  + tox: add nose timer output [Joshua Powers]
  + upstart: do not package upstart jobs, drop ubuntu-init-switch module.
  + tests: Stop leaking calls through unmocked metadata addresses
  + [Chad Smith] (LP: #1714117)
  + distro: allow distro to specify a default locale [Ryan Harper]
  + tests: fix two recently added tests for sles distro.
  + url_helper: dynamically import oauthlib import from inside oauth_headers
  + [Chad Smith]
  + tox: make xenial environment run with python3.6
  + suse: Add support for openSUSE and return SLES to a working state.
  + [Robert Schweikert]
  + GCE: Add a main to the GCE Datasource.
  + ec2: Add IPv6 dhcp support to Ec2DataSource. [Chad Smith] (LP: #1639030)
  + url_helper: fail gracefully if oauthlib is not available
  + [Lars Kellogg-Stedman] (LP: #1713760)
  + cloud-init analyze: fix issues running under python 2. [Andrew Jorgensen]
  + Configure logging module to always use UTC time.
  + [Ryan Harper] (LP: #1713158)
  + Log a helpful message if a user script does not include shebang.
  + [Andrew Jorgensen]
  + cli: Fix command line parsing of coniditionally loaded subcommands.
  + [Chad Smith] (LP: #1712676)
  + doc: Explain error behavior in user data include file format.
  + [Jason Butz]
  + cc_landscape &amp; cc_puppet: Fix six.StringIO use in writing configs
  + [Chad Smith] (LP: #1699282, #1710932)
  + schema cli: Add schema subcommand to cloud-init cli and cc_runcmd schema
  + [Chad Smith]
  + Debian: Remove non-free repositories from apt sources template.
  + [Joonas Kylmälä] (LP: #1700091)
  + tools: Add tooling for basic cloud-init performance analysis.
  + [Chad Smith] (LP: #1709761)
  + network: add v2 passthrough and fix parsing v2 config with bonds/bridge
  + params [Ryan Harper] (LP: #1709180)
  + doc: update capabilities with features available, link doc reference,
  + cli example [Ryan Harper]
  + vcloud directory: Guest Customization support for passwords
  + [Maitreyee Saikia]
  + ec2: Allow Ec2 to run in init-local using dhclient in a sandbox.
  + [Chad Smith] (LP: #1709772)
  + cc_ntp: fallback on timesyncd configuration if ntp is not installable
  + [Ryan Harper] (LP: #1686485)
  + net: Reduce duplicate code. Have get_interfaces_by_mac use
  + get_interfaces.
  + tests: Fix build tree integration tests [Joshua Powers]
  + sysconfig: Dont repeat header when rendering resolv.conf
  + [Ryan Harper] (LP: #1701420)
  + archlinux: Fix bug with empty dns, do not render 'lo' devices.
  + (LP: #1663045, #1706593)
  + cloudinit.net: add initialize_network_device function and tests
  + [Chad Smith]
  + makefile: fix ci-deps-ubuntu target [Chad Smith]
  + tests: adjust locale integration test to parse default locale.
  + tests: remove 'yakkety' from releases as it is EOL.
  + tests: Add initial tests for EC2 and improve a docstring.
  + locale: Do not re-run locale-gen if provided locale is system default.
  + archlinux: fix set hostname usage of write_file.
  + [Joshua Powers] (LP: #1705306)
  + sysconfig: support subnet type of 'manual'.
  + tools/run-centos: make running with no argument show help.
  + Drop rand_str() usage in DNS redirection detection
  + [Bob Aman] (LP: #1088611)
  + sysconfig: use MACADDR on bonds/bridges to configure mac_address
  + [Ryan Harper] (LP: #1701417)
  + net: eni route rendering missed ipv6 default route config
  + [Ryan Harper] (LP: #1701097)
  + sysconfig: enable mtu set per subnet, including ipv6 mtu
  + [Ryan Harper] (LP: #1702513)
  + sysconfig: handle manual type subnets [Ryan Harper] (LP: #1687725)
  + sysconfig: fix ipv6 gateway routes [Ryan Harper] (LP: #1694801)
  + sysconfig: fix rendering of bond, bridge and vlan types.
  + [Ryan Harper] (LP: #1695092)
  + Templatize systemd unit files for cross distro deltas. [Ryan Harper]
  + sysconfig: ipv6 and default gateway fixes. [Ryan Harper] (LP: #1704872)
  + net: fix renaming of nics to support mac addresses written in upper
  + case. (LP: #1705147)
  + tests: fixes for issues uncovered when moving to python 3.6.
  + (LP: #1703697)
  + sysconfig: include GATEWAY value if set in subnet
  + [Ryan Harper] (LP: #1686856)
  + Scaleway: add datasource with user and vendor data for Scaleway.
  + [Julien Castets]
  + Support comments in content read by load_shell_content.
  + cloudinitlocal fail to run during boot [Hongjiang Zhang]
  + doc: fix disk setup example table_type options
  + [Sandor Zeestraten] (LP: #1703789)
  + tools: Fix exception handling. [Joonas Kylmälä] (LP: #1701527)
  + tests: fix usage of mock in GCE test.
  + test_gce: Fix invalid mock of platform_reports_gce to return False
  + [Chad Smith]
  + test: fix incorrect keyid for apt repository.
  + [Joshua Powers] (LP: #1702717)
  + tests: Update version of pylxd [Joshua Powers]
  + write_files: Remove log from helper function signatures.
  + [Andrew Jorgensen]
  + doc: document the cmdline options to NoCloud [Brian Candler]
  + read_dmi_data: always return None when inside a container. (LP: #1701325)
  + requirements.txt: remove trailing white space.
  + Azure: Add network-config, Refactor net layer to handle duplicate macs.
  + [Ryan Harper]
  + Tests: Simplify the check on ssh-import-id [Joshua Powers]
  + tests: update ntp tests after sntp added [Joshua Powers]
  + FreeBSD: Make freebsd a variant, fix unittests and
  + tools/build-on-freebsd.
  + FreeBSD: fix test failure
  + FreeBSD: replace ifdown/ifup with "ifconfig down" and "ifconfig up".
  + [Hongjiang Zhang] (LP: #1697815)
  + FreeBSD: fix cdrom mounting failure if /mnt/cdrom/secure did not exist.
  + [Hongjiang Zhang] (LP: #1696295)
  + main: Don't use templater to format the welcome message
  + [Andrew Jorgensen]
  + docs: Automatically generate module docs form schema if present.
  + [Chad Smith]
  + debian: fix path comment in /etc/hosts template.
  + [Jens Sandmann] (LP: #1606406)
  + suse: add hostname and fully qualified domain to template.
  + [Jens Sandmann]
  + write_file(s): Print permissions as octal, not decimal [Andrew Jorgensen]
  + ci deps: Add --test-distro to read-dependencies to install all deps
  + [Chad Smith]
  + tools/run-centos: cleanups and move to using read-dependencies
  + pkg build ci: Add make ci-deps-&lt;distro&gt; target to install pkgs
  + [Chad Smith]
  + systemd: make cloud-final.service run before apt daily services.
  + (LP: #1693361)
  + selinux: Allow restorecon to be non-fatal. [Ryan Harper] (LP: #1686751)
  + net: Allow netinfo subprocesses to return 0 or 1.
  + [Ryan Harper] (LP: #1686751)
  + net: Allow for NetworkManager configuration [Ryan McCabe] (LP: #1693251)
  + Use distro release version to determine if we use systemd in redhat spec
  + [Ryan Harper]
  + net: normalize data in network_state object
  + Integration Testing: tox env, pyxld 2.2.3, and revamp framework
  + [Wesley Wiedenmeier]
  + Chef: Update omnibus url to chef.io, minor doc changes. [JJ Asghar]
  + tools: add centos scripts to build and test [Joshua Powers]
  + Drop cheetah python module as it is not needed by trunk [Ryan Harper]
  + rhel/centos spec cleanups.
  + cloud.cfg: move to a template.  setup.py changes along the way.
  + Makefile: add deb-src and srpm targets. use PYVER more places.
  + makefile: fix python 2/3 detection in the Makefile [Chad Smith]
  + snap: Removing snapcraft plug line [Joshua Powers] (LP: #1695333)
  + RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1696176)
  + test: Fix pyflakes complaint of unused import.
  + [Joshua Powers] (LP: #1695918)
  + NoCloud: support seed of nocloud from smbios information
  + [Vladimir Pouzanov] (LP: #1691772)
  + net: when selecting a network device, use natural sort order
  + [Marc-Aurèle Brothier]
  + fix typos and remove whitespace in various docs [Stephan Telling]
  + systemd: Fix typo in comment in cloud-init.target. [Chen-Han Hsiao]
  + Tests: Skip jsonschema related unit tests when dependency is absent.
  + [Chad Smith] (LP: #1695318)
  + azure: remove accidental duplicate line in merge.
  + azure: identify platform by well known value in chassis asset tag.
  + [Chad Smith] (LP: #1693939)
  + tools/net-convert.py: support old cloudinit versions by using kwargs.
  + ntp: Add schema definition and passive schema validation.
  + [Chad Smith] (LP: #1692916)
  + Fix eni rendering for bridge params that require repeated key for
  + values. [Ryan Harper]
  + net: remove systemd link file writing from eni renderer [Ryan Harper]
  + AliYun: Enable platform identification and enable by default.
  + [Junjie Wang] (LP: #1638931)
  + net: fix reading and rendering addresses in cidr format.
  + [Dimitri John Ledkov] (LP: #1689346, #1684349)
  + disk_setup: udev settle before attempting partitioning or fs creation.
  + (LP: #1692093)
  + GCE: Update the attribute used to find instance SSH keys.
  + [Daniel Watkins] (LP: #1693582)
  + nplan: For bonds, allow dashed or underscore names of keys.
  + [Dimitri John Ledkov] (LP: #1690480)
  + python2.6: fix unit tests usage of assertNone and format.
  + test: update docstring on test_configured_list_with_none
  + fix tools/ds-identify to not write None twice.
  + tox/build: do not package depend on style requirements.
  + cc_ntp: Restructure cc_ntp unit tests. [Chad Smith] (LP: #1692794)
  + flake8: move the pinned version of flake8 up to 3.3.0
  + tests: Apply workaround for snapd bug in test case. [Joshua Powers]
  + RHEL/CentOS: Fix dual stack IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1679817, #1685534, #1685532)
  + disk_setup: fix several issues with gpt disk partitions. (LP: #1692087)
  + function spelling &amp; docstring update [Joshua Powers]
  + Fixing wrong file name regression. [Joshua Powers]
  + tox: move pylint target to 1.7.1
  + Fix get_interfaces_by_mac for empty macs (LP: #1692028)
  + DigitalOcean: remove routes except for the public interface.
  + [Ben Howard] (LP: #1681531.)
  + netplan: pass macaddress, when specified, for vlans
  + [Dimitri John Ledkov] (LP: #1690388)
  + doc: various improvements for the docs on cc_users_groups.
  + [Felix Dreissig]
  + cc_ntp: write template before installing and add service restart
  + [Ryan Harper] (LP: #1645644)
  + cloudstack: fix tests to avoid accessing /var/lib/NetworkManager
  + [Lars Kellogg-Stedman]
  + tests: fix hardcoded path to mkfs.ext4 [Joshua Powers] (LP: #1691517)
  + Actually skip warnings when .skip file is present.
  + [Chris Brinker] (LP: #1691551)
  + netplan: fix netplan render_network_state signature.
  + [Dimitri John Ledkov] (LP: #1685944)
  + Azure: fix reformatting of ephemeral disks on resize to large types.
  + (LP: #1686514)
  + Revert "tools/net-convert: fix argument order for render_network_state"
  + make deb: Add devscripts dependency for make deb. Cleanup
  + packages/bddeb. [Chad Smith] (LP: #1685935)
  + tools/net-convert: fix argument order for render_network_state
  + [Ryan Harper] (LP: #1685944)
  + openstack: fix log message copy/paste typo in _get_url_settings
  + [Lars Kellogg-Stedman]
  + unittests: fix unittests run on centos [Joshua Powers]
  + Improve detection of snappy to include os-release and kernel cmdline.
  + (LP: #1689944)
  + Add address to config entry generated by _klibc_to_config_entry.
  + [Julien Castets] (LP: #1691135)
  + sysconfig: Raise ValueError when multiple default gateways are present.
  + [Chad Smith] (LP: #1687485)
  + FreeBSD: improvements and fixes for use on Azure
  + [Hongjiang Zhang] (LP: #1636345)
  + Add unit tests for ds-identify, fix Ec2 bug found.
  + fs_setup: if cmd is specified, use shell interpretation.
  + [Paul Meyer] (LP: #1687712)
  + doc: document network configuration defaults policy and formats.
  + [Ryan Harper]
  + Fix name of "uri" key in docs for "cc_apt_configure" module
  + [Felix Dreissig]
  + tests: Enable artful [Joshua Powers]
  + nova-lxd: read product_name from environment, not platform.
  + (LP: #1685810)
  + Fix yum repo config where keys contain array values
  + [Dylan Perry] (LP: #1592150)
  + template: Update debian backports template [Joshua Powers] (LP: #1627293)
  + rsyslog: replace ~ with stop [Joshua Powers] (LP: #1367899)
  + Doc: add additional RTD examples [Joshua Powers] (LP: #1459604)
  + Fix growpart for some cases when booted with root=PARTUUID.
  + (LP: #1684869)
  + pylint: update output style to parseable [Joshua Powers]
  + pylint: fix all logging warnings [Joshua Powers]
  + CloudStack: Add NetworkManager to list of supported DHCP lease dirs.
  + [Syed]
  + net: kernel lies about vlans not stealing mac addresses, when they do
  + [Dimitri John Ledkov] (LP: #1682871)
  + ds-identify: Check correct path for "latest" config drive
  + [Daniel Watkins] (LP: #1673637)
  + doc: Fix example for resolve.conf configuration.
  + [Jon Grimm] (LP: #1531582)
  + Fix examples that reference upstream chef repository.
  + [Jon Grimm] (LP: #1678145)
  + doc: correct grammar and improve clarity in merging documentation.
  + [David Tagatac]
  + doc: Add missing doc link to snap-config module. [Ryan Harper]
  + snap: allows for creating cloud-init snap [Joshua Powers]
  + DigitalOcean: assign IPv4ll address to lowest indexed interface.
  + [Ben Howard]
  + DigitalOcean: configure all NICs presented in meta-data. [Ben Howard]
  + Remove (and/or fix) URL shortener references [Jon Grimm] (LP: #1669727)
  + HACKING.rst: more info on filling out contributors agreement.
  + util: teach write_file about copy_mode option
  + [Lars Kellogg-Stedman] (LP: #1644064)
  + DigitalOcean: bind resolvers to loopback interface. [Ben Howard]
  + tests: fix AltCloud tests to not rely on blkid (LP: #1636531)
  + OpenStack: add 'dvs' to the list of physical link types. (LP: #1674946)
  + Fix bug that resulted in an attempt to rename bonds or vlans.
  + (LP: #1669860)
  + tests: update OpenNebula and Digital Ocean to not rely on host
  + interfaces.
  + net: in netplan renderer delete known image-builtin content.
  + (LP: #1675576)
  + doc: correct grammar in capabilities.rst [David Tagatac]
  + ds-identify: fix detecting of maas datasource. (LP: #1677710)
  + netplan: remove debugging prints, add debug logging [Ryan Harper]
  + ds-identify: do not write None twice to datasource_list.
  + support resizing partition and rootfs on system booted without
  + initramfs. [Steve Langasek] (LP: #1677376)
  + apt_configure: run only when needed. (LP: #1675185)
  + OpenStack: identify OpenStack by product 'OpenStack Compute'.
  + (LP: #1675349)
  + GCE: Search GCE in ds-identify, consider serial number in check.
  + (LP: #1674861)
  + Add support for setting hashed passwords [Tore S. Lonoy] (LP: #1570325)
  + Fix filesystem creation when using "partition: auto"
  + [Jonathan Ballet] (LP: #1634678)
  + ConfigDrive: support reading config drive data from /config-drive.
  + (LP: #1673411)
  + ds-identify: fix detection of Bigstep datasource. (LP: #1674766)
  + test: add running of pylint [Joshua Powers]
  + ds-identify: fix bug where filename expansion was left on.
  + advertise network config v2 support (NETWORK_CONFIG_V2) in features.
  + Bigstep: fix bug when executing in python3. [root]
  + Fix unit test when running in a system deployed with cloud-init.
  + Bounce network interface for Azure when using the built-in path.
  + [Brent Baude] (LP: #1674685)
  + cloudinit.net: add network config v2 parsing and rendering [Ryan Harper]
  + net: Fix incorrect call to isfile [Joshua Powers] (LP: #1674317)
  + net: add renderers for automatically selecting the renderer.
  + doc: fix config drive doc with regard to unpartitioned disks.
  + (LP: #1673818)
  + test: Adding integratiron test for password as list [Joshua Powers]
  + render_network_state: switch arguments around, do not require target
  + support 'loopback' as a device type.
  + Integration Testing: improve testcase subclassing [Wesley Wiedenmeier]
  + gitignore: adding doc/rtd_html [Joshua Powers]
  + doc: add instructions for running integration tests via tox.
  + [Joshua Powers]
  + test: avoid differences in 'date' output due to daylight savings.
  + Fix chef config module in omnibus install. [Jeremy Melvin] (LP: #1583837)
  + Add feature flags to cloudinit.version. [Wesley Wiedenmeier]
  + tox: add a citest environment
  + Further fix regression to support 'password' for default user.
  + fix regression when no chpasswd/list was provided.
  + Support chpasswd/list being a list in addition to a string.
  + [Sergio Lystopad] (LP: #1665694)
  + doc: Fix configuration example for cc_set_passwords module.
  + [Sergio Lystopad] (LP: #1665773)
  + net: support both ipv4 and ipv6 gateways in sysconfig.
  + [Lars Kellogg-Stedman] (LP: #1669504)
  + net: do not raise exception for &gt; 3 nameservers
  + [Lars Kellogg-Stedman] (LP: #1670052)
  + ds-identify: report cleanups for config and exit value. (LP: #1669949)
  + ds-identify: move default setting for Ec2/strict_id to a global.
  + ds-identify: record not found in cloud.cfg and always add None.
  + Support warning if the used datasource is not in ds-identify's list.
  + tools/ds-identify: make report mode write namespaced results.
  + Move warning functionality to cloudinit/warnings.py
  + Add profile.d script for showing warnings on login.
  + Z99-cloud-locale-test.sh: install and make consistent.
  + tools/ds-identify: look at cloud.cfg when looking for ec2 strict_id.
  + tools/ds-identify: disable vmware_guest_customization by default.
  + tools/ds-identify: ovf identify vmware guest customization.
  + Identify Brightbox as an Ec2 datasource user. (LP: #1661693)
  + DatasourceEc2: add warning message when not on AWS.
  + ds-identify: add reading of datasource/Ec2/strict_id
  + tools/ds-identify: add support for found or maybe contributing config.
  + tools/ds-identify: read the seed directory on Ec2
  + tools/ds-identify: use quotes in local declarations.
  + tools/ds-identify: fix documentation of policy setting in a comment.
  + ds-identify: only run once per boot unless --force is given.
  + flake8: fix flake8 complaints in previous commit.
  + net: correct errors in cloudinit/net/sysconfig.py
  + [Lars Kellogg-Stedman] (LP: #1665441)
  + ec2_utils: fix MetadataLeafDecoder that returned bytes on empty
  + apply the runtime configuration written by ds-identify.
  + ds-identify: fix checking for filesystem label (LP: #1663735)
  + ds-identify: read ds=nocloud properly (LP: #1663723)
  + support nova-lxd by reading platform from environment of pid 1.
  + (LP: #1661797)
  + ds-identify: change aarch64 to use the default for non-dmi systems.
  + Remove style checking during build and add latest style checks to tox
  + [Joshua Powers] (LP: #1652329)
  + code-style: make master pass pycodestyle (2.3.1) cleanly, currently:
  + [Joshua Powers]
  + manual_cache_clean: When manually cleaning touch a file in instance dir.
  + Add tools/ds-identify to identify datasources available.
  + Fix small typo and change iso-filename for consistency [Robin Naundorf]
  + Fix eni rendering of multiple IPs per interface
  + [Ryan Harper] (LP: #1657940)
  + tools/mock-meta: support python2 or python3 and ipv6 in both.
  + tests: remove executable bit on test_net, so it runs, and fix it.
  + tests: No longer monkey patch httpretty for python 3.4.2
  + Add 3 ecdsa-sha2-nistp* ssh key types now that they are standardized
  + [Lars Kellogg-Stedman] (LP: #1658174)
  + reset httppretty for each test [Lars Kellogg-Stedman] (LP: #1658200)
  + build: fix running Make on a branch with tags other than master
  + EC2: Do not cache security credentials on disk
  + [Andrew Jorgensen] (LP: #1638312)
  + doc: Fix typos and clarify some aspects of the part-handler
  + [Erik M. Bray]
  + doc: add some documentation on OpenStack datasource.
  + OpenStack: Use timeout and retries from config in get_data.
  + [Lars Kellogg-Stedman] (LP: #1657130)
  + Fixed Misc issues related to VMware customization. [Sankar Tanguturi]
  + Fix minor docs typo: perserve &gt; preserve [Jeremy Bicha]
  + Use dnf instead of yum when available
  + [Lars Kellogg-Stedman] (LP: #1647118)
  + validate-yaml: use python rather than explicitly python3
  + Get early logging logged, including failures of cmdline url.
- From 0.7.9
  + doc: adjust headers in tests documentation for consistency.
  + pep8: fix issue found in zesty build with pycodestyle.
  + integration test: initial commit of integration test framework
  + [Wesley Wiedenmeier]
  + LICENSE: Allow dual licensing GPL-3 or Apache 2.0 [Jon Grimm]
  + Fix config order of precedence, putting kernel command line over system.
  + [Wesley Wiedenmeier] (LP: #1582323)
  + pep8: whitespace fix
  + Update the list of valid ssh keys. [Michael Felt]
  + network: add ENI unit test for statically rendered routes.
  + set_hostname: avoid erroneously appending domain to fqdn
  + [Lars Kellogg-Stedman] (LP: #1647910)
  + doc: change 'nobootwait' to 'nofail' in docs [Anhad Jai Singh]
  + Replace an expired bit.ly link in code comment.
  + user-groups: fix bug when groups was provided as string and had spaces
  + (LP: #1354694)
  + mounts: use mount -a again to accomplish mounts (LP: #1647708)
  + CloudSigma: Fix bug where datasource was not loaded in local search.
  + (LP: #1648380)
  + when adding a user, strip whitespace from group list [Lars Kellogg-Stedman]
  + (LP: #1354694)
  + fix decoding of utf-8 chars in yaml test
  + Replace usage of sys_netdev_info with read_sys_net (LP: #1625766)
  + fix problems found in python2.6 test.
  + OpenStack: extend physical types to include hyperv, hw_veb, vhost_user.
  + (LP: #1642679)
  + tests: fix assumptions that expected no eth0 in system. (LP: #1644043)
  + net/cmdline: Consider ip= or ip6= on command line not only ip=
  + (LP: #1639930)
  + Just use file logging by default (LP: #1643990)
  + Improve formatting for ProcessExecutionError [Wesley Wiedenmeier]
  + flake8: fix trailing white space
  + Doc: various documentation fixes [Sean Bright]
  + cloudinit/config/cc_rh_subscription.py: Remove repos before adding
  + [Brent Baude]
  + packages/redhat: fix rpm spec file.
  + main: set TZ in environment if not already set. [Ryan Harper]
  + Azure: No longer rely on walinux agent. (LP: #1538522)
  + disk_setup: Use sectors as unit when formatting MBR disks with sfdisk.
  + [Daniel Watkins] (LP: #1460715)
  + Add activate_datasource, for datasource specific code paths. (LP: #1611074)
  + systemd: cloud-init-local use RequiresMountsFor=/var/lib/cloud
  + (LP: #1642062)
  + systemd: cloud-init remove After=systemd-networkd-wait-online
  + systemd: cloud-init-local change Before basic to sysinit
  + pep8: fix style errors reported by pycodestyle 2.1.0
  + systemd: drop both Wants and After local-fs.target
  + systemd: networking service adjustments. (LP: #1636912)
  + systemd: replace Before=basic.target, dbus.target with sysinit.target
  + (LP: #1629797)
  + doc: Add documentation on stages of boot.
  + doc: make the RST files consistently formated and other improvements.
  + Ec2: fix syntax and tox in previous commit.
  + Ec2: protect against non-dictionary in block-device-mapping.
  + doc: fixed example to not overwrite /etc/hosts [Chris Glass]
  + Doc: fix spelling / typos in ca_certs and scripts_vendor.
  + pyflakes: fix issue with pyflakes 1.3 found in ubuntu zesty-proposed.
  + net/cmdline: Further adjustments to ipv6 support [LaMont Jones]
  + (LP: #1621615)
  + Add coverage dependency to bddeb to fix package build.
  + doc: improve HACKING.rst file
  + dmidecode: Allow dmidecode to be used on aarch64 [Robert Schweikert]
  + AliYun: Add new datasource for Ali-Cloud ECS [kaihuan.pkh]
  + Add coverage collection to tox unit tests. [Joshua Powers]
  + cc_users_groups: fix remaing call to ds.normalize_user_groups [Ryan Harper]
  + disk-config: udev settle after partitioning in gpt format. (LP: #1626243)
  + unittests: do not read system /etc/cloud/cloud.cfg.d (LP: #1635350)
  + Add documentation for logging features. [Wesley Wiedenmeier]
  + Add support for snap create-user on Ubuntu Core images. [Ryan Harper]
  + Fix sshd restarts for rhel distros. [Jim Gorz]
  + OpenNebula: replace 'ip' parsing with cloudinit.net usage.
  + Fix python2.6 things found running in centos 6.
  + Move user/group functions to new ug_util file
  + DigitalOcean: enable usage of data source by default.
  + update Gentoo initscripts to run in the correct order [Matthew Thode]
  + MAAS: improve the main of datasource to look at kernel cmdline config.
  + tests: silence the Cheetah UserWarning about NameMapper C version.
  + systemd: Run cloud-init.service Before dbus.socket not dbus.target
  + [Daniel Watkins] (LP: #1629797)
  + systemd: run cloud-init.service Before dbus.service (LP: #1629797)
  + unittests: fix use of mock 2.0 'assert_called' when running make check
  + [Ryan Harper]
  + Improve module documentation and doc cleanup. [Wesley Wiedenmeier]
  + lxd: Update network config for LXD 2.3 [Stéphane Graber]
  + DigitalOcean: use meta-data for network configruation [Ben Howard]
  + ntp: move to run after apt configuration (LP: #1628337)
  + Decode unicode types in decode_binary [Robert Schweikert]
  + systemd: Ensure that cloud-init-local happens before NetworkManager
  + Allow ephemeral drive to be unpartitioned [Paul Meyer]
  + subp: add 'update_env' argument
  + net: support reading ipv6 dhcp config from initramfs [LaMont Jones]
  + (LP: #1621615, #1621507)
  + Adjust mounts and disk configuration for systemd. (LP: #1611074)
  + dmidecode: run dmidecode only on i?86 or x86_64 arch. [Robert Schweikert]
  + systemd: put cloud-init.target After multi-user.target (LP: #1623868)</changelog>
  <changelog author="rjschwei@suse.com" date="1509624000">- Fix sed expression to set distro properly (boo#1063716)</changelog>
  <changelog author="rjschwei@suse.com" date="1510142400">- Add cloud-init-hosts-template.patch (bsc#1064594)
  + Properly expand the /etc/hosst file when manage_etc_hosts is set</changelog>
  <changelog author="rjschwei@suse.com" date="1510401600">- Add cloud-init-ntp-conf-suse.patch
  + ntp configuration was broken on sles and opensuse lp#1726572</changelog>
  <changelog author="rjschwei@suse.com" date="1510833600">- Add cloud-init-translate-netconf-ipv4-keep-gw.patch (boo#1064854)
  + Properly insert the gateway information for v1 json network config data</changelog>
  <changelog author="rjschwei@suse.com" date="1510920000">- Fix variable name in cloud-init-translate-netconf-ipv4-keep-gw.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
  <changelog author="rjschwei@suse.com" date="1512561600">- Add cloud-init-reproduce-build.patch (boo#1069635)
  + Make builds reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Fix usage of fdupes macro: there is no '-n' parameter to the
  macro (there would be to fdupes, the command, though).</changelog>
  <changelog author="gmoro@suse.com" date="1516276800">- patch distribution detection until a fix is delivered to python3 (bsc#997614)
  add cloud-init-add-variant-cloudcfg.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1517227200">- Update to version 17.2 (boo#1069635, bsc#1072811)
  + Add cloud-init-skip-ovf-tests.patch
  + Add cloud-init-no-python-linux-dist.patch
  + Add 0001-switch-to-using-iproute2-tools.patch
  + Add 0001-Support-chrony-configuration-lp-1731619.patch
  + Add 0002-Disable-method-deprecation-warning-for-pylint.patch
  + Add 0003-Distro-dependent-chrony-config-file.patch
  + removed cloud-init-add-variant-cloudcfg.patch replaced by
    cloud-init-no-python-linux-dist.patch
  + removed zypp_add_repos.diff included upstream
  + removed zypp_add_repo_test.patch included upstream
  + removed cloud-init-hosts-template.patch included upstream
  + removed cloud-init-more-tasks.patch included upstream
  + removed cloud-init-final-no-apt.patch included upstream
  + removed cloud-init-ntp-conf-suse.patch included upstream
  + removed cloud-init-break-cycle-local-service.patch included upstream
  + removed cloud-init-reproduce-build.patch included upstream
  + For the complete changelog see https://launchpad.net/cloud-init/trunk/17.2</changelog>
  <changelog author="dmueller@suse.com" date="1517313600">- drop dependency on boto (only used in examples, and
  should really be ported to botocore/boto3 instead)</changelog>
  <changelog author="rjschwei@suse.com" date="1518523200">- Fix logfile permission settings (bsc#1080595)
  + Add 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch</changelog>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
</package>
<package pkgid="85ec4bf3cbaab740738a45da60061b62856b9bb55ca88050a00066b0fb2a4acd" name="cloud-init" arch="src">
  <version epoch="0" ver="18.2" rel="lp150.2.6.1"/>
  <changelog author="dmueller@suse.com" date="1505908800">- add skip-argparse-on-python3.patch: don't depend on argparse
  for python3, it is builtin there (as of python 3.2, so the
  patch should be good enough)</changelog>
  <changelog author="rjschwei@suse.com" date="1505995200">- Update to version 17.1 (bsc#1035106)
  + Version numbering scheme change now YY.NUMBER_OF_RELESE_THAT_YEAR
  + Remove cloud.cfg.suse, use generated default config file
  + Remove addopenSUSEBase.patch, included upstream
  + Remove suseIntegratedHandler.patch, included upstream
  + Remove openSUSEhostsTemplate.diff, included upstream
  + Remove cloud-init-handle-no-carrier.patch, included upstream
  + Remove cloud-init-digital-ocean-datasource.patch,
    use upstream implementation
  + Remove cloud-init-digital-ocean-datasource-enable-by-default.patch,
    use upstream implementation
  + Remove cloud-init-fix-unicode-handling-binarydecode.patch,
    included upstream
  + Remove cloud-init-no-dmidecode-on-ppc64.patch, included upstream
  + Remove dataSourceOpenNebula.patch, use upstream implementation
  + Remove setupSUSEsysVInit.diff, included upstream
  + Remove suseSysVInit.diff, included upstream
  + Remove cloud-init-finalbeforelogin.patch, don't block login
  + Remove cloud-init-handle-not-implemented-query.patch, query option removed
  + Remove cloud-init-spceandtabs-clean.patch, indentation fixed upstream
  + Remove dynamicInitCmd.diff, different solution from upstream
  + Added cloud-init-more-tasks.patch, (bsc#1047363)
    replace cloud-init-finalbeforelogin.patch
  + Forward port cloud-init-python2-sigpipe.patch
  + Remove cloud-init-net-eni.patch, included upstream
  + Remove cloud-init-service.patch, included upstream
  + Forward port cloud-init-sysconfig-netpathfix.patch
  + Remove cloud-init-net-sysconfig-lp1665441.patch, included upstream
  + Remove cloud-init-python26.patch, included upstream
  + Remove skip-argparse-on-python3.patch
  + Add cloud-init-tests-set-exec.patch
  + Add cloud-init-final-no-apt.patch
  + Add zypp_add_repo_test.patch
  + doc: document GCE datasource. [Arnd Hannemann]
  + suse: updates to templates to support openSUSE and SLES.
  + [Robert Schweikert] (LP: #1718640)
  + suse: Copy sysvinit files from redhat with slight changes.
  + [Robert Schweikert] (LP: #1718649)
  + docs: fix sphinx module schema documentation [Chad Smith]
  + tests: Add cloudinit package to all test targets [Chad Smith]
  + Makefile: No longer look for yaml files in obsolete ./bin/.
  + tests: fix ds-identify unit tests to set EC2_STRICT_ID_DEFAULT.
  + ec2: Fix maybe_perform_dhcp_discovery to use /var/tmp as a tmpdir
  + [Chad Smith] (LP: #1717627)
  + Azure: wait longer for SSH pub keys to arrive.
  + [Paul Meyer] (LP: #1717611)
  + GCE: Fix usage of user-data. (LP: #1717598)
  + cmdline: add collect-logs subcommand. [Chad Smith] (LP: #1607345)
  + CloudStack: consider dhclient lease files named with a hyphen.
  + (LP: #1717147)
  + resizefs: Drop check for read-only device file, do not warn on
  + overlayroot. [Chad Smith]
  + Do not provide systemd-fsck drop-in which could cause ordering cycles.
  + [Balint Reczey] (LP: #1717477)
  + tests: Enable the NoCloud KVM platform [Joshua Powers]
  + resizefs: pass mount point to xfs_growfs [Dusty Mabe]
  + vmware: Enable nics before sending the SUCCESS event. [Sankar Tanguturi]
  + cloud-config modules: honor distros definitions in each module
  + [Chad Smith] (LP: #1715738, #1715690)
  + chef: Add option to pin chef omnibus install version
  + [Ethan Apodaca] (LP: #1462693)
  + tests: execute: support command as string [Joshua Powers]
  + schema and docs: Add jsonschema to resizefs and bootcmd modules
  + [Chad Smith]
  + tools: Add xkvm script, wrapper around qemu-system [Joshua Powers]
  + vmware customization: return network config format
  + [Sankar Tanguturi] (LP: #1675063)
  + Ec2: only attempt to operate at local mode on known platforms.
  + (LP: #1715128)
  + Use /run/cloud-init for tempfile operations. (LP: #1707222)
  + ds-identify: Make OpenStack return maybe on arch other than intel.
  + (LP: #1715241)
  + tests: mock missed openstack metadata uri network_data.json
  + [Chad Smith] (LP: #1714376)
  + relocate tests/unittests/helpers.py to cloudinit/tests
  + [Lars Kellogg-Stedman]
  + tox: add nose timer output [Joshua Powers]
  + upstart: do not package upstart jobs, drop ubuntu-init-switch module.
  + tests: Stop leaking calls through unmocked metadata addresses
  + [Chad Smith] (LP: #1714117)
  + distro: allow distro to specify a default locale [Ryan Harper]
  + tests: fix two recently added tests for sles distro.
  + url_helper: dynamically import oauthlib import from inside oauth_headers
  + [Chad Smith]
  + tox: make xenial environment run with python3.6
  + suse: Add support for openSUSE and return SLES to a working state.
  + [Robert Schweikert]
  + GCE: Add a main to the GCE Datasource.
  + ec2: Add IPv6 dhcp support to Ec2DataSource. [Chad Smith] (LP: #1639030)
  + url_helper: fail gracefully if oauthlib is not available
  + [Lars Kellogg-Stedman] (LP: #1713760)
  + cloud-init analyze: fix issues running under python 2. [Andrew Jorgensen]
  + Configure logging module to always use UTC time.
  + [Ryan Harper] (LP: #1713158)
  + Log a helpful message if a user script does not include shebang.
  + [Andrew Jorgensen]
  + cli: Fix command line parsing of coniditionally loaded subcommands.
  + [Chad Smith] (LP: #1712676)
  + doc: Explain error behavior in user data include file format.
  + [Jason Butz]
  + cc_landscape &amp; cc_puppet: Fix six.StringIO use in writing configs
  + [Chad Smith] (LP: #1699282, #1710932)
  + schema cli: Add schema subcommand to cloud-init cli and cc_runcmd schema
  + [Chad Smith]
  + Debian: Remove non-free repositories from apt sources template.
  + [Joonas Kylmälä] (LP: #1700091)
  + tools: Add tooling for basic cloud-init performance analysis.
  + [Chad Smith] (LP: #1709761)
  + network: add v2 passthrough and fix parsing v2 config with bonds/bridge
  + params [Ryan Harper] (LP: #1709180)
  + doc: update capabilities with features available, link doc reference,
  + cli example [Ryan Harper]
  + vcloud directory: Guest Customization support for passwords
  + [Maitreyee Saikia]
  + ec2: Allow Ec2 to run in init-local using dhclient in a sandbox.
  + [Chad Smith] (LP: #1709772)
  + cc_ntp: fallback on timesyncd configuration if ntp is not installable
  + [Ryan Harper] (LP: #1686485)
  + net: Reduce duplicate code. Have get_interfaces_by_mac use
  + get_interfaces.
  + tests: Fix build tree integration tests [Joshua Powers]
  + sysconfig: Dont repeat header when rendering resolv.conf
  + [Ryan Harper] (LP: #1701420)
  + archlinux: Fix bug with empty dns, do not render 'lo' devices.
  + (LP: #1663045, #1706593)
  + cloudinit.net: add initialize_network_device function and tests
  + [Chad Smith]
  + makefile: fix ci-deps-ubuntu target [Chad Smith]
  + tests: adjust locale integration test to parse default locale.
  + tests: remove 'yakkety' from releases as it is EOL.
  + tests: Add initial tests for EC2 and improve a docstring.
  + locale: Do not re-run locale-gen if provided locale is system default.
  + archlinux: fix set hostname usage of write_file.
  + [Joshua Powers] (LP: #1705306)
  + sysconfig: support subnet type of 'manual'.
  + tools/run-centos: make running with no argument show help.
  + Drop rand_str() usage in DNS redirection detection
  + [Bob Aman] (LP: #1088611)
  + sysconfig: use MACADDR on bonds/bridges to configure mac_address
  + [Ryan Harper] (LP: #1701417)
  + net: eni route rendering missed ipv6 default route config
  + [Ryan Harper] (LP: #1701097)
  + sysconfig: enable mtu set per subnet, including ipv6 mtu
  + [Ryan Harper] (LP: #1702513)
  + sysconfig: handle manual type subnets [Ryan Harper] (LP: #1687725)
  + sysconfig: fix ipv6 gateway routes [Ryan Harper] (LP: #1694801)
  + sysconfig: fix rendering of bond, bridge and vlan types.
  + [Ryan Harper] (LP: #1695092)
  + Templatize systemd unit files for cross distro deltas. [Ryan Harper]
  + sysconfig: ipv6 and default gateway fixes. [Ryan Harper] (LP: #1704872)
  + net: fix renaming of nics to support mac addresses written in upper
  + case. (LP: #1705147)
  + tests: fixes for issues uncovered when moving to python 3.6.
  + (LP: #1703697)
  + sysconfig: include GATEWAY value if set in subnet
  + [Ryan Harper] (LP: #1686856)
  + Scaleway: add datasource with user and vendor data for Scaleway.
  + [Julien Castets]
  + Support comments in content read by load_shell_content.
  + cloudinitlocal fail to run during boot [Hongjiang Zhang]
  + doc: fix disk setup example table_type options
  + [Sandor Zeestraten] (LP: #1703789)
  + tools: Fix exception handling. [Joonas Kylmälä] (LP: #1701527)
  + tests: fix usage of mock in GCE test.
  + test_gce: Fix invalid mock of platform_reports_gce to return False
  + [Chad Smith]
  + test: fix incorrect keyid for apt repository.
  + [Joshua Powers] (LP: #1702717)
  + tests: Update version of pylxd [Joshua Powers]
  + write_files: Remove log from helper function signatures.
  + [Andrew Jorgensen]
  + doc: document the cmdline options to NoCloud [Brian Candler]
  + read_dmi_data: always return None when inside a container. (LP: #1701325)
  + requirements.txt: remove trailing white space.
  + Azure: Add network-config, Refactor net layer to handle duplicate macs.
  + [Ryan Harper]
  + Tests: Simplify the check on ssh-import-id [Joshua Powers]
  + tests: update ntp tests after sntp added [Joshua Powers]
  + FreeBSD: Make freebsd a variant, fix unittests and
  + tools/build-on-freebsd.
  + FreeBSD: fix test failure
  + FreeBSD: replace ifdown/ifup with "ifconfig down" and "ifconfig up".
  + [Hongjiang Zhang] (LP: #1697815)
  + FreeBSD: fix cdrom mounting failure if /mnt/cdrom/secure did not exist.
  + [Hongjiang Zhang] (LP: #1696295)
  + main: Don't use templater to format the welcome message
  + [Andrew Jorgensen]
  + docs: Automatically generate module docs form schema if present.
  + [Chad Smith]
  + debian: fix path comment in /etc/hosts template.
  + [Jens Sandmann] (LP: #1606406)
  + suse: add hostname and fully qualified domain to template.
  + [Jens Sandmann]
  + write_file(s): Print permissions as octal, not decimal [Andrew Jorgensen]
  + ci deps: Add --test-distro to read-dependencies to install all deps
  + [Chad Smith]
  + tools/run-centos: cleanups and move to using read-dependencies
  + pkg build ci: Add make ci-deps-&lt;distro&gt; target to install pkgs
  + [Chad Smith]
  + systemd: make cloud-final.service run before apt daily services.
  + (LP: #1693361)
  + selinux: Allow restorecon to be non-fatal. [Ryan Harper] (LP: #1686751)
  + net: Allow netinfo subprocesses to return 0 or 1.
  + [Ryan Harper] (LP: #1686751)
  + net: Allow for NetworkManager configuration [Ryan McCabe] (LP: #1693251)
  + Use distro release version to determine if we use systemd in redhat spec
  + [Ryan Harper]
  + net: normalize data in network_state object
  + Integration Testing: tox env, pyxld 2.2.3, and revamp framework
  + [Wesley Wiedenmeier]
  + Chef: Update omnibus url to chef.io, minor doc changes. [JJ Asghar]
  + tools: add centos scripts to build and test [Joshua Powers]
  + Drop cheetah python module as it is not needed by trunk [Ryan Harper]
  + rhel/centos spec cleanups.
  + cloud.cfg: move to a template.  setup.py changes along the way.
  + Makefile: add deb-src and srpm targets. use PYVER more places.
  + makefile: fix python 2/3 detection in the Makefile [Chad Smith]
  + snap: Removing snapcraft plug line [Joshua Powers] (LP: #1695333)
  + RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1696176)
  + test: Fix pyflakes complaint of unused import.
  + [Joshua Powers] (LP: #1695918)
  + NoCloud: support seed of nocloud from smbios information
  + [Vladimir Pouzanov] (LP: #1691772)
  + net: when selecting a network device, use natural sort order
  + [Marc-Aurèle Brothier]
  + fix typos and remove whitespace in various docs [Stephan Telling]
  + systemd: Fix typo in comment in cloud-init.target. [Chen-Han Hsiao]
  + Tests: Skip jsonschema related unit tests when dependency is absent.
  + [Chad Smith] (LP: #1695318)
  + azure: remove accidental duplicate line in merge.
  + azure: identify platform by well known value in chassis asset tag.
  + [Chad Smith] (LP: #1693939)
  + tools/net-convert.py: support old cloudinit versions by using kwargs.
  + ntp: Add schema definition and passive schema validation.
  + [Chad Smith] (LP: #1692916)
  + Fix eni rendering for bridge params that require repeated key for
  + values. [Ryan Harper]
  + net: remove systemd link file writing from eni renderer [Ryan Harper]
  + AliYun: Enable platform identification and enable by default.
  + [Junjie Wang] (LP: #1638931)
  + net: fix reading and rendering addresses in cidr format.
  + [Dimitri John Ledkov] (LP: #1689346, #1684349)
  + disk_setup: udev settle before attempting partitioning or fs creation.
  + (LP: #1692093)
  + GCE: Update the attribute used to find instance SSH keys.
  + [Daniel Watkins] (LP: #1693582)
  + nplan: For bonds, allow dashed or underscore names of keys.
  + [Dimitri John Ledkov] (LP: #1690480)
  + python2.6: fix unit tests usage of assertNone and format.
  + test: update docstring on test_configured_list_with_none
  + fix tools/ds-identify to not write None twice.
  + tox/build: do not package depend on style requirements.
  + cc_ntp: Restructure cc_ntp unit tests. [Chad Smith] (LP: #1692794)
  + flake8: move the pinned version of flake8 up to 3.3.0
  + tests: Apply workaround for snapd bug in test case. [Joshua Powers]
  + RHEL/CentOS: Fix dual stack IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1679817, #1685534, #1685532)
  + disk_setup: fix several issues with gpt disk partitions. (LP: #1692087)
  + function spelling &amp; docstring update [Joshua Powers]
  + Fixing wrong file name regression. [Joshua Powers]
  + tox: move pylint target to 1.7.1
  + Fix get_interfaces_by_mac for empty macs (LP: #1692028)
  + DigitalOcean: remove routes except for the public interface.
  + [Ben Howard] (LP: #1681531.)
  + netplan: pass macaddress, when specified, for vlans
  + [Dimitri John Ledkov] (LP: #1690388)
  + doc: various improvements for the docs on cc_users_groups.
  + [Felix Dreissig]
  + cc_ntp: write template before installing and add service restart
  + [Ryan Harper] (LP: #1645644)
  + cloudstack: fix tests to avoid accessing /var/lib/NetworkManager
  + [Lars Kellogg-Stedman]
  + tests: fix hardcoded path to mkfs.ext4 [Joshua Powers] (LP: #1691517)
  + Actually skip warnings when .skip file is present.
  + [Chris Brinker] (LP: #1691551)
  + netplan: fix netplan render_network_state signature.
  + [Dimitri John Ledkov] (LP: #1685944)
  + Azure: fix reformatting of ephemeral disks on resize to large types.
  + (LP: #1686514)
  + Revert "tools/net-convert: fix argument order for render_network_state"
  + make deb: Add devscripts dependency for make deb. Cleanup
  + packages/bddeb. [Chad Smith] (LP: #1685935)
  + tools/net-convert: fix argument order for render_network_state
  + [Ryan Harper] (LP: #1685944)
  + openstack: fix log message copy/paste typo in _get_url_settings
  + [Lars Kellogg-Stedman]
  + unittests: fix unittests run on centos [Joshua Powers]
  + Improve detection of snappy to include os-release and kernel cmdline.
  + (LP: #1689944)
  + Add address to config entry generated by _klibc_to_config_entry.
  + [Julien Castets] (LP: #1691135)
  + sysconfig: Raise ValueError when multiple default gateways are present.
  + [Chad Smith] (LP: #1687485)
  + FreeBSD: improvements and fixes for use on Azure
  + [Hongjiang Zhang] (LP: #1636345)
  + Add unit tests for ds-identify, fix Ec2 bug found.
  + fs_setup: if cmd is specified, use shell interpretation.
  + [Paul Meyer] (LP: #1687712)
  + doc: document network configuration defaults policy and formats.
  + [Ryan Harper]
  + Fix name of "uri" key in docs for "cc_apt_configure" module
  + [Felix Dreissig]
  + tests: Enable artful [Joshua Powers]
  + nova-lxd: read product_name from environment, not platform.
  + (LP: #1685810)
  + Fix yum repo config where keys contain array values
  + [Dylan Perry] (LP: #1592150)
  + template: Update debian backports template [Joshua Powers] (LP: #1627293)
  + rsyslog: replace ~ with stop [Joshua Powers] (LP: #1367899)
  + Doc: add additional RTD examples [Joshua Powers] (LP: #1459604)
  + Fix growpart for some cases when booted with root=PARTUUID.
  + (LP: #1684869)
  + pylint: update output style to parseable [Joshua Powers]
  + pylint: fix all logging warnings [Joshua Powers]
  + CloudStack: Add NetworkManager to list of supported DHCP lease dirs.
  + [Syed]
  + net: kernel lies about vlans not stealing mac addresses, when they do
  + [Dimitri John Ledkov] (LP: #1682871)
  + ds-identify: Check correct path for "latest" config drive
  + [Daniel Watkins] (LP: #1673637)
  + doc: Fix example for resolve.conf configuration.
  + [Jon Grimm] (LP: #1531582)
  + Fix examples that reference upstream chef repository.
  + [Jon Grimm] (LP: #1678145)
  + doc: correct grammar and improve clarity in merging documentation.
  + [David Tagatac]
  + doc: Add missing doc link to snap-config module. [Ryan Harper]
  + snap: allows for creating cloud-init snap [Joshua Powers]
  + DigitalOcean: assign IPv4ll address to lowest indexed interface.
  + [Ben Howard]
  + DigitalOcean: configure all NICs presented in meta-data. [Ben Howard]
  + Remove (and/or fix) URL shortener references [Jon Grimm] (LP: #1669727)
  + HACKING.rst: more info on filling out contributors agreement.
  + util: teach write_file about copy_mode option
  + [Lars Kellogg-Stedman] (LP: #1644064)
  + DigitalOcean: bind resolvers to loopback interface. [Ben Howard]
  + tests: fix AltCloud tests to not rely on blkid (LP: #1636531)
  + OpenStack: add 'dvs' to the list of physical link types. (LP: #1674946)
  + Fix bug that resulted in an attempt to rename bonds or vlans.
  + (LP: #1669860)
  + tests: update OpenNebula and Digital Ocean to not rely on host
  + interfaces.
  + net: in netplan renderer delete known image-builtin content.
  + (LP: #1675576)
  + doc: correct grammar in capabilities.rst [David Tagatac]
  + ds-identify: fix detecting of maas datasource. (LP: #1677710)
  + netplan: remove debugging prints, add debug logging [Ryan Harper]
  + ds-identify: do not write None twice to datasource_list.
  + support resizing partition and rootfs on system booted without
  + initramfs. [Steve Langasek] (LP: #1677376)
  + apt_configure: run only when needed. (LP: #1675185)
  + OpenStack: identify OpenStack by product 'OpenStack Compute'.
  + (LP: #1675349)
  + GCE: Search GCE in ds-identify, consider serial number in check.
  + (LP: #1674861)
  + Add support for setting hashed passwords [Tore S. Lonoy] (LP: #1570325)
  + Fix filesystem creation when using "partition: auto"
  + [Jonathan Ballet] (LP: #1634678)
  + ConfigDrive: support reading config drive data from /config-drive.
  + (LP: #1673411)
  + ds-identify: fix detection of Bigstep datasource. (LP: #1674766)
  + test: add running of pylint [Joshua Powers]
  + ds-identify: fix bug where filename expansion was left on.
  + advertise network config v2 support (NETWORK_CONFIG_V2) in features.
  + Bigstep: fix bug when executing in python3. [root]
  + Fix unit test when running in a system deployed with cloud-init.
  + Bounce network interface for Azure when using the built-in path.
  + [Brent Baude] (LP: #1674685)
  + cloudinit.net: add network config v2 parsing and rendering [Ryan Harper]
  + net: Fix incorrect call to isfile [Joshua Powers] (LP: #1674317)
  + net: add renderers for automatically selecting the renderer.
  + doc: fix config drive doc with regard to unpartitioned disks.
  + (LP: #1673818)
  + test: Adding integratiron test for password as list [Joshua Powers]
  + render_network_state: switch arguments around, do not require target
  + support 'loopback' as a device type.
  + Integration Testing: improve testcase subclassing [Wesley Wiedenmeier]
  + gitignore: adding doc/rtd_html [Joshua Powers]
  + doc: add instructions for running integration tests via tox.
  + [Joshua Powers]
  + test: avoid differences in 'date' output due to daylight savings.
  + Fix chef config module in omnibus install. [Jeremy Melvin] (LP: #1583837)
  + Add feature flags to cloudinit.version. [Wesley Wiedenmeier]
  + tox: add a citest environment
  + Further fix regression to support 'password' for default user.
  + fix regression when no chpasswd/list was provided.
  + Support chpasswd/list being a list in addition to a string.
  + [Sergio Lystopad] (LP: #1665694)
  + doc: Fix configuration example for cc_set_passwords module.
  + [Sergio Lystopad] (LP: #1665773)
  + net: support both ipv4 and ipv6 gateways in sysconfig.
  + [Lars Kellogg-Stedman] (LP: #1669504)
  + net: do not raise exception for &gt; 3 nameservers
  + [Lars Kellogg-Stedman] (LP: #1670052)
  + ds-identify: report cleanups for config and exit value. (LP: #1669949)
  + ds-identify: move default setting for Ec2/strict_id to a global.
  + ds-identify: record not found in cloud.cfg and always add None.
  + Support warning if the used datasource is not in ds-identify's list.
  + tools/ds-identify: make report mode write namespaced results.
  + Move warning functionality to cloudinit/warnings.py
  + Add profile.d script for showing warnings on login.
  + Z99-cloud-locale-test.sh: install and make consistent.
  + tools/ds-identify: look at cloud.cfg when looking for ec2 strict_id.
  + tools/ds-identify: disable vmware_guest_customization by default.
  + tools/ds-identify: ovf identify vmware guest customization.
  + Identify Brightbox as an Ec2 datasource user. (LP: #1661693)
  + DatasourceEc2: add warning message when not on AWS.
  + ds-identify: add reading of datasource/Ec2/strict_id
  + tools/ds-identify: add support for found or maybe contributing config.
  + tools/ds-identify: read the seed directory on Ec2
  + tools/ds-identify: use quotes in local declarations.
  + tools/ds-identify: fix documentation of policy setting in a comment.
  + ds-identify: only run once per boot unless --force is given.
  + flake8: fix flake8 complaints in previous commit.
  + net: correct errors in cloudinit/net/sysconfig.py
  + [Lars Kellogg-Stedman] (LP: #1665441)
  + ec2_utils: fix MetadataLeafDecoder that returned bytes on empty
  + apply the runtime configuration written by ds-identify.
  + ds-identify: fix checking for filesystem label (LP: #1663735)
  + ds-identify: read ds=nocloud properly (LP: #1663723)
  + support nova-lxd by reading platform from environment of pid 1.
  + (LP: #1661797)
  + ds-identify: change aarch64 to use the default for non-dmi systems.
  + Remove style checking during build and add latest style checks to tox
  + [Joshua Powers] (LP: #1652329)
  + code-style: make master pass pycodestyle (2.3.1) cleanly, currently:
  + [Joshua Powers]
  + manual_cache_clean: When manually cleaning touch a file in instance dir.
  + Add tools/ds-identify to identify datasources available.
  + Fix small typo and change iso-filename for consistency [Robin Naundorf]
  + Fix eni rendering of multiple IPs per interface
  + [Ryan Harper] (LP: #1657940)
  + tools/mock-meta: support python2 or python3 and ipv6 in both.
  + tests: remove executable bit on test_net, so it runs, and fix it.
  + tests: No longer monkey patch httpretty for python 3.4.2
  + Add 3 ecdsa-sha2-nistp* ssh key types now that they are standardized
  + [Lars Kellogg-Stedman] (LP: #1658174)
  + reset httppretty for each test [Lars Kellogg-Stedman] (LP: #1658200)
  + build: fix running Make on a branch with tags other than master
  + EC2: Do not cache security credentials on disk
  + [Andrew Jorgensen] (LP: #1638312)
  + doc: Fix typos and clarify some aspects of the part-handler
  + [Erik M. Bray]
  + doc: add some documentation on OpenStack datasource.
  + OpenStack: Use timeout and retries from config in get_data.
  + [Lars Kellogg-Stedman] (LP: #1657130)
  + Fixed Misc issues related to VMware customization. [Sankar Tanguturi]
  + Fix minor docs typo: perserve &gt; preserve [Jeremy Bicha]
  + Use dnf instead of yum when available
  + [Lars Kellogg-Stedman] (LP: #1647118)
  + validate-yaml: use python rather than explicitly python3
  + Get early logging logged, including failures of cmdline url.
- From 0.7.9
  + doc: adjust headers in tests documentation for consistency.
  + pep8: fix issue found in zesty build with pycodestyle.
  + integration test: initial commit of integration test framework
  + [Wesley Wiedenmeier]
  + LICENSE: Allow dual licensing GPL-3 or Apache 2.0 [Jon Grimm]
  + Fix config order of precedence, putting kernel command line over system.
  + [Wesley Wiedenmeier] (LP: #1582323)
  + pep8: whitespace fix
  + Update the list of valid ssh keys. [Michael Felt]
  + network: add ENI unit test for statically rendered routes.
  + set_hostname: avoid erroneously appending domain to fqdn
  + [Lars Kellogg-Stedman] (LP: #1647910)
  + doc: change 'nobootwait' to 'nofail' in docs [Anhad Jai Singh]
  + Replace an expired bit.ly link in code comment.
  + user-groups: fix bug when groups was provided as string and had spaces
  + (LP: #1354694)
  + mounts: use mount -a again to accomplish mounts (LP: #1647708)
  + CloudSigma: Fix bug where datasource was not loaded in local search.
  + (LP: #1648380)
  + when adding a user, strip whitespace from group list [Lars Kellogg-Stedman]
  + (LP: #1354694)
  + fix decoding of utf-8 chars in yaml test
  + Replace usage of sys_netdev_info with read_sys_net (LP: #1625766)
  + fix problems found in python2.6 test.
  + OpenStack: extend physical types to include hyperv, hw_veb, vhost_user.
  + (LP: #1642679)
  + tests: fix assumptions that expected no eth0 in system. (LP: #1644043)
  + net/cmdline: Consider ip= or ip6= on command line not only ip=
  + (LP: #1639930)
  + Just use file logging by default (LP: #1643990)
  + Improve formatting for ProcessExecutionError [Wesley Wiedenmeier]
  + flake8: fix trailing white space
  + Doc: various documentation fixes [Sean Bright]
  + cloudinit/config/cc_rh_subscription.py: Remove repos before adding
  + [Brent Baude]
  + packages/redhat: fix rpm spec file.
  + main: set TZ in environment if not already set. [Ryan Harper]
  + Azure: No longer rely on walinux agent. (LP: #1538522)
  + disk_setup: Use sectors as unit when formatting MBR disks with sfdisk.
  + [Daniel Watkins] (LP: #1460715)
  + Add activate_datasource, for datasource specific code paths. (LP: #1611074)
  + systemd: cloud-init-local use RequiresMountsFor=/var/lib/cloud
  + (LP: #1642062)
  + systemd: cloud-init remove After=systemd-networkd-wait-online
  + systemd: cloud-init-local change Before basic to sysinit
  + pep8: fix style errors reported by pycodestyle 2.1.0
  + systemd: drop both Wants and After local-fs.target
  + systemd: networking service adjustments. (LP: #1636912)
  + systemd: replace Before=basic.target, dbus.target with sysinit.target
  + (LP: #1629797)
  + doc: Add documentation on stages of boot.
  + doc: make the RST files consistently formated and other improvements.
  + Ec2: fix syntax and tox in previous commit.
  + Ec2: protect against non-dictionary in block-device-mapping.
  + doc: fixed example to not overwrite /etc/hosts [Chris Glass]
  + Doc: fix spelling / typos in ca_certs and scripts_vendor.
  + pyflakes: fix issue with pyflakes 1.3 found in ubuntu zesty-proposed.
  + net/cmdline: Further adjustments to ipv6 support [LaMont Jones]
  + (LP: #1621615)
  + Add coverage dependency to bddeb to fix package build.
  + doc: improve HACKING.rst file
  + dmidecode: Allow dmidecode to be used on aarch64 [Robert Schweikert]
  + AliYun: Add new datasource for Ali-Cloud ECS [kaihuan.pkh]
  + Add coverage collection to tox unit tests. [Joshua Powers]
  + cc_users_groups: fix remaing call to ds.normalize_user_groups [Ryan Harper]
  + disk-config: udev settle after partitioning in gpt format. (LP: #1626243)
  + unittests: do not read system /etc/cloud/cloud.cfg.d (LP: #1635350)
  + Add documentation for logging features. [Wesley Wiedenmeier]
  + Add support for snap create-user on Ubuntu Core images. [Ryan Harper]
  + Fix sshd restarts for rhel distros. [Jim Gorz]
  + OpenNebula: replace 'ip' parsing with cloudinit.net usage.
  + Fix python2.6 things found running in centos 6.
  + Move user/group functions to new ug_util file
  + DigitalOcean: enable usage of data source by default.
  + update Gentoo initscripts to run in the correct order [Matthew Thode]
  + MAAS: improve the main of datasource to look at kernel cmdline config.
  + tests: silence the Cheetah UserWarning about NameMapper C version.
  + systemd: Run cloud-init.service Before dbus.socket not dbus.target
  + [Daniel Watkins] (LP: #1629797)
  + systemd: run cloud-init.service Before dbus.service (LP: #1629797)
  + unittests: fix use of mock 2.0 'assert_called' when running make check
  + [Ryan Harper]
  + Improve module documentation and doc cleanup. [Wesley Wiedenmeier]
  + lxd: Update network config for LXD 2.3 [Stéphane Graber]
  + DigitalOcean: use meta-data for network configruation [Ben Howard]
  + ntp: move to run after apt configuration (LP: #1628337)
  + Decode unicode types in decode_binary [Robert Schweikert]
  + systemd: Ensure that cloud-init-local happens before NetworkManager
  + Allow ephemeral drive to be unpartitioned [Paul Meyer]
  + subp: add 'update_env' argument
  + net: support reading ipv6 dhcp config from initramfs [LaMont Jones]
  + (LP: #1621615, #1621507)
  + Adjust mounts and disk configuration for systemd. (LP: #1611074)
  + dmidecode: run dmidecode only on i?86 or x86_64 arch. [Robert Schweikert]
  + systemd: put cloud-init.target After multi-user.target (LP: #1623868)</changelog>
  <changelog author="rjschwei@suse.com" date="1509624000">- Fix sed expression to set distro properly (boo#1063716)</changelog>
  <changelog author="rjschwei@suse.com" date="1510142400">- Add cloud-init-hosts-template.patch (bsc#1064594)
  + Properly expand the /etc/hosst file when manage_etc_hosts is set</changelog>
  <changelog author="rjschwei@suse.com" date="1510401600">- Add cloud-init-ntp-conf-suse.patch
  + ntp configuration was broken on sles and opensuse lp#1726572</changelog>
  <changelog author="rjschwei@suse.com" date="1510833600">- Add cloud-init-translate-netconf-ipv4-keep-gw.patch (boo#1064854)
  + Properly insert the gateway information for v1 json network config data</changelog>
  <changelog author="rjschwei@suse.com" date="1510920000">- Fix variable name in cloud-init-translate-netconf-ipv4-keep-gw.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
  <changelog author="rjschwei@suse.com" date="1512561600">- Add cloud-init-reproduce-build.patch (boo#1069635)
  + Make builds reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Fix usage of fdupes macro: there is no '-n' parameter to the
  macro (there would be to fdupes, the command, though).</changelog>
  <changelog author="gmoro@suse.com" date="1516276800">- patch distribution detection until a fix is delivered to python3 (bsc#997614)
  add cloud-init-add-variant-cloudcfg.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1517227200">- Update to version 17.2 (boo#1069635, bsc#1072811)
  + Add cloud-init-skip-ovf-tests.patch
  + Add cloud-init-no-python-linux-dist.patch
  + Add 0001-switch-to-using-iproute2-tools.patch
  + Add 0001-Support-chrony-configuration-lp-1731619.patch
  + Add 0002-Disable-method-deprecation-warning-for-pylint.patch
  + Add 0003-Distro-dependent-chrony-config-file.patch
  + removed cloud-init-add-variant-cloudcfg.patch replaced by
    cloud-init-no-python-linux-dist.patch
  + removed zypp_add_repos.diff included upstream
  + removed zypp_add_repo_test.patch included upstream
  + removed cloud-init-hosts-template.patch included upstream
  + removed cloud-init-more-tasks.patch included upstream
  + removed cloud-init-final-no-apt.patch included upstream
  + removed cloud-init-ntp-conf-suse.patch included upstream
  + removed cloud-init-break-cycle-local-service.patch included upstream
  + removed cloud-init-reproduce-build.patch included upstream
  + For the complete changelog see https://launchpad.net/cloud-init/trunk/17.2</changelog>
  <changelog author="dmueller@suse.com" date="1517313600">- drop dependency on boto (only used in examples, and
  should really be ported to botocore/boto3 instead)</changelog>
  <changelog author="rjschwei@suse.com" date="1518523200">- Fix logfile permission settings (bsc#1080595)
  + Add 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch</changelog>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
</package>
<package pkgid="92a13ad30d71a296ce65c3189cd175bc55b010d702889d1207622aeea0c6737f" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="18.2" rel="lp150.2.6.1"/>
  <changelog author="dmueller@suse.com" date="1505908800">- add skip-argparse-on-python3.patch: don't depend on argparse
  for python3, it is builtin there (as of python 3.2, so the
  patch should be good enough)</changelog>
  <changelog author="rjschwei@suse.com" date="1505995200">- Update to version 17.1 (bsc#1035106)
  + Version numbering scheme change now YY.NUMBER_OF_RELESE_THAT_YEAR
  + Remove cloud.cfg.suse, use generated default config file
  + Remove addopenSUSEBase.patch, included upstream
  + Remove suseIntegratedHandler.patch, included upstream
  + Remove openSUSEhostsTemplate.diff, included upstream
  + Remove cloud-init-handle-no-carrier.patch, included upstream
  + Remove cloud-init-digital-ocean-datasource.patch,
    use upstream implementation
  + Remove cloud-init-digital-ocean-datasource-enable-by-default.patch,
    use upstream implementation
  + Remove cloud-init-fix-unicode-handling-binarydecode.patch,
    included upstream
  + Remove cloud-init-no-dmidecode-on-ppc64.patch, included upstream
  + Remove dataSourceOpenNebula.patch, use upstream implementation
  + Remove setupSUSEsysVInit.diff, included upstream
  + Remove suseSysVInit.diff, included upstream
  + Remove cloud-init-finalbeforelogin.patch, don't block login
  + Remove cloud-init-handle-not-implemented-query.patch, query option removed
  + Remove cloud-init-spceandtabs-clean.patch, indentation fixed upstream
  + Remove dynamicInitCmd.diff, different solution from upstream
  + Added cloud-init-more-tasks.patch, (bsc#1047363)
    replace cloud-init-finalbeforelogin.patch
  + Forward port cloud-init-python2-sigpipe.patch
  + Remove cloud-init-net-eni.patch, included upstream
  + Remove cloud-init-service.patch, included upstream
  + Forward port cloud-init-sysconfig-netpathfix.patch
  + Remove cloud-init-net-sysconfig-lp1665441.patch, included upstream
  + Remove cloud-init-python26.patch, included upstream
  + Remove skip-argparse-on-python3.patch
  + Add cloud-init-tests-set-exec.patch
  + Add cloud-init-final-no-apt.patch
  + Add zypp_add_repo_test.patch
  + doc: document GCE datasource. [Arnd Hannemann]
  + suse: updates to templates to support openSUSE and SLES.
  + [Robert Schweikert] (LP: #1718640)
  + suse: Copy sysvinit files from redhat with slight changes.
  + [Robert Schweikert] (LP: #1718649)
  + docs: fix sphinx module schema documentation [Chad Smith]
  + tests: Add cloudinit package to all test targets [Chad Smith]
  + Makefile: No longer look for yaml files in obsolete ./bin/.
  + tests: fix ds-identify unit tests to set EC2_STRICT_ID_DEFAULT.
  + ec2: Fix maybe_perform_dhcp_discovery to use /var/tmp as a tmpdir
  + [Chad Smith] (LP: #1717627)
  + Azure: wait longer for SSH pub keys to arrive.
  + [Paul Meyer] (LP: #1717611)
  + GCE: Fix usage of user-data. (LP: #1717598)
  + cmdline: add collect-logs subcommand. [Chad Smith] (LP: #1607345)
  + CloudStack: consider dhclient lease files named with a hyphen.
  + (LP: #1717147)
  + resizefs: Drop check for read-only device file, do not warn on
  + overlayroot. [Chad Smith]
  + Do not provide systemd-fsck drop-in which could cause ordering cycles.
  + [Balint Reczey] (LP: #1717477)
  + tests: Enable the NoCloud KVM platform [Joshua Powers]
  + resizefs: pass mount point to xfs_growfs [Dusty Mabe]
  + vmware: Enable nics before sending the SUCCESS event. [Sankar Tanguturi]
  + cloud-config modules: honor distros definitions in each module
  + [Chad Smith] (LP: #1715738, #1715690)
  + chef: Add option to pin chef omnibus install version
  + [Ethan Apodaca] (LP: #1462693)
  + tests: execute: support command as string [Joshua Powers]
  + schema and docs: Add jsonschema to resizefs and bootcmd modules
  + [Chad Smith]
  + tools: Add xkvm script, wrapper around qemu-system [Joshua Powers]
  + vmware customization: return network config format
  + [Sankar Tanguturi] (LP: #1675063)
  + Ec2: only attempt to operate at local mode on known platforms.
  + (LP: #1715128)
  + Use /run/cloud-init for tempfile operations. (LP: #1707222)
  + ds-identify: Make OpenStack return maybe on arch other than intel.
  + (LP: #1715241)
  + tests: mock missed openstack metadata uri network_data.json
  + [Chad Smith] (LP: #1714376)
  + relocate tests/unittests/helpers.py to cloudinit/tests
  + [Lars Kellogg-Stedman]
  + tox: add nose timer output [Joshua Powers]
  + upstart: do not package upstart jobs, drop ubuntu-init-switch module.
  + tests: Stop leaking calls through unmocked metadata addresses
  + [Chad Smith] (LP: #1714117)
  + distro: allow distro to specify a default locale [Ryan Harper]
  + tests: fix two recently added tests for sles distro.
  + url_helper: dynamically import oauthlib import from inside oauth_headers
  + [Chad Smith]
  + tox: make xenial environment run with python3.6
  + suse: Add support for openSUSE and return SLES to a working state.
  + [Robert Schweikert]
  + GCE: Add a main to the GCE Datasource.
  + ec2: Add IPv6 dhcp support to Ec2DataSource. [Chad Smith] (LP: #1639030)
  + url_helper: fail gracefully if oauthlib is not available
  + [Lars Kellogg-Stedman] (LP: #1713760)
  + cloud-init analyze: fix issues running under python 2. [Andrew Jorgensen]
  + Configure logging module to always use UTC time.
  + [Ryan Harper] (LP: #1713158)
  + Log a helpful message if a user script does not include shebang.
  + [Andrew Jorgensen]
  + cli: Fix command line parsing of coniditionally loaded subcommands.
  + [Chad Smith] (LP: #1712676)
  + doc: Explain error behavior in user data include file format.
  + [Jason Butz]
  + cc_landscape &amp; cc_puppet: Fix six.StringIO use in writing configs
  + [Chad Smith] (LP: #1699282, #1710932)
  + schema cli: Add schema subcommand to cloud-init cli and cc_runcmd schema
  + [Chad Smith]
  + Debian: Remove non-free repositories from apt sources template.
  + [Joonas Kylmälä] (LP: #1700091)
  + tools: Add tooling for basic cloud-init performance analysis.
  + [Chad Smith] (LP: #1709761)
  + network: add v2 passthrough and fix parsing v2 config with bonds/bridge
  + params [Ryan Harper] (LP: #1709180)
  + doc: update capabilities with features available, link doc reference,
  + cli example [Ryan Harper]
  + vcloud directory: Guest Customization support for passwords
  + [Maitreyee Saikia]
  + ec2: Allow Ec2 to run in init-local using dhclient in a sandbox.
  + [Chad Smith] (LP: #1709772)
  + cc_ntp: fallback on timesyncd configuration if ntp is not installable
  + [Ryan Harper] (LP: #1686485)
  + net: Reduce duplicate code. Have get_interfaces_by_mac use
  + get_interfaces.
  + tests: Fix build tree integration tests [Joshua Powers]
  + sysconfig: Dont repeat header when rendering resolv.conf
  + [Ryan Harper] (LP: #1701420)
  + archlinux: Fix bug with empty dns, do not render 'lo' devices.
  + (LP: #1663045, #1706593)
  + cloudinit.net: add initialize_network_device function and tests
  + [Chad Smith]
  + makefile: fix ci-deps-ubuntu target [Chad Smith]
  + tests: adjust locale integration test to parse default locale.
  + tests: remove 'yakkety' from releases as it is EOL.
  + tests: Add initial tests for EC2 and improve a docstring.
  + locale: Do not re-run locale-gen if provided locale is system default.
  + archlinux: fix set hostname usage of write_file.
  + [Joshua Powers] (LP: #1705306)
  + sysconfig: support subnet type of 'manual'.
  + tools/run-centos: make running with no argument show help.
  + Drop rand_str() usage in DNS redirection detection
  + [Bob Aman] (LP: #1088611)
  + sysconfig: use MACADDR on bonds/bridges to configure mac_address
  + [Ryan Harper] (LP: #1701417)
  + net: eni route rendering missed ipv6 default route config
  + [Ryan Harper] (LP: #1701097)
  + sysconfig: enable mtu set per subnet, including ipv6 mtu
  + [Ryan Harper] (LP: #1702513)
  + sysconfig: handle manual type subnets [Ryan Harper] (LP: #1687725)
  + sysconfig: fix ipv6 gateway routes [Ryan Harper] (LP: #1694801)
  + sysconfig: fix rendering of bond, bridge and vlan types.
  + [Ryan Harper] (LP: #1695092)
  + Templatize systemd unit files for cross distro deltas. [Ryan Harper]
  + sysconfig: ipv6 and default gateway fixes. [Ryan Harper] (LP: #1704872)
  + net: fix renaming of nics to support mac addresses written in upper
  + case. (LP: #1705147)
  + tests: fixes for issues uncovered when moving to python 3.6.
  + (LP: #1703697)
  + sysconfig: include GATEWAY value if set in subnet
  + [Ryan Harper] (LP: #1686856)
  + Scaleway: add datasource with user and vendor data for Scaleway.
  + [Julien Castets]
  + Support comments in content read by load_shell_content.
  + cloudinitlocal fail to run during boot [Hongjiang Zhang]
  + doc: fix disk setup example table_type options
  + [Sandor Zeestraten] (LP: #1703789)
  + tools: Fix exception handling. [Joonas Kylmälä] (LP: #1701527)
  + tests: fix usage of mock in GCE test.
  + test_gce: Fix invalid mock of platform_reports_gce to return False
  + [Chad Smith]
  + test: fix incorrect keyid for apt repository.
  + [Joshua Powers] (LP: #1702717)
  + tests: Update version of pylxd [Joshua Powers]
  + write_files: Remove log from helper function signatures.
  + [Andrew Jorgensen]
  + doc: document the cmdline options to NoCloud [Brian Candler]
  + read_dmi_data: always return None when inside a container. (LP: #1701325)
  + requirements.txt: remove trailing white space.
  + Azure: Add network-config, Refactor net layer to handle duplicate macs.
  + [Ryan Harper]
  + Tests: Simplify the check on ssh-import-id [Joshua Powers]
  + tests: update ntp tests after sntp added [Joshua Powers]
  + FreeBSD: Make freebsd a variant, fix unittests and
  + tools/build-on-freebsd.
  + FreeBSD: fix test failure
  + FreeBSD: replace ifdown/ifup with "ifconfig down" and "ifconfig up".
  + [Hongjiang Zhang] (LP: #1697815)
  + FreeBSD: fix cdrom mounting failure if /mnt/cdrom/secure did not exist.
  + [Hongjiang Zhang] (LP: #1696295)
  + main: Don't use templater to format the welcome message
  + [Andrew Jorgensen]
  + docs: Automatically generate module docs form schema if present.
  + [Chad Smith]
  + debian: fix path comment in /etc/hosts template.
  + [Jens Sandmann] (LP: #1606406)
  + suse: add hostname and fully qualified domain to template.
  + [Jens Sandmann]
  + write_file(s): Print permissions as octal, not decimal [Andrew Jorgensen]
  + ci deps: Add --test-distro to read-dependencies to install all deps
  + [Chad Smith]
  + tools/run-centos: cleanups and move to using read-dependencies
  + pkg build ci: Add make ci-deps-&lt;distro&gt; target to install pkgs
  + [Chad Smith]
  + systemd: make cloud-final.service run before apt daily services.
  + (LP: #1693361)
  + selinux: Allow restorecon to be non-fatal. [Ryan Harper] (LP: #1686751)
  + net: Allow netinfo subprocesses to return 0 or 1.
  + [Ryan Harper] (LP: #1686751)
  + net: Allow for NetworkManager configuration [Ryan McCabe] (LP: #1693251)
  + Use distro release version to determine if we use systemd in redhat spec
  + [Ryan Harper]
  + net: normalize data in network_state object
  + Integration Testing: tox env, pyxld 2.2.3, and revamp framework
  + [Wesley Wiedenmeier]
  + Chef: Update omnibus url to chef.io, minor doc changes. [JJ Asghar]
  + tools: add centos scripts to build and test [Joshua Powers]
  + Drop cheetah python module as it is not needed by trunk [Ryan Harper]
  + rhel/centos spec cleanups.
  + cloud.cfg: move to a template.  setup.py changes along the way.
  + Makefile: add deb-src and srpm targets. use PYVER more places.
  + makefile: fix python 2/3 detection in the Makefile [Chad Smith]
  + snap: Removing snapcraft plug line [Joshua Powers] (LP: #1695333)
  + RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1696176)
  + test: Fix pyflakes complaint of unused import.
  + [Joshua Powers] (LP: #1695918)
  + NoCloud: support seed of nocloud from smbios information
  + [Vladimir Pouzanov] (LP: #1691772)
  + net: when selecting a network device, use natural sort order
  + [Marc-Aurèle Brothier]
  + fix typos and remove whitespace in various docs [Stephan Telling]
  + systemd: Fix typo in comment in cloud-init.target. [Chen-Han Hsiao]
  + Tests: Skip jsonschema related unit tests when dependency is absent.
  + [Chad Smith] (LP: #1695318)
  + azure: remove accidental duplicate line in merge.
  + azure: identify platform by well known value in chassis asset tag.
  + [Chad Smith] (LP: #1693939)
  + tools/net-convert.py: support old cloudinit versions by using kwargs.
  + ntp: Add schema definition and passive schema validation.
  + [Chad Smith] (LP: #1692916)
  + Fix eni rendering for bridge params that require repeated key for
  + values. [Ryan Harper]
  + net: remove systemd link file writing from eni renderer [Ryan Harper]
  + AliYun: Enable platform identification and enable by default.
  + [Junjie Wang] (LP: #1638931)
  + net: fix reading and rendering addresses in cidr format.
  + [Dimitri John Ledkov] (LP: #1689346, #1684349)
  + disk_setup: udev settle before attempting partitioning or fs creation.
  + (LP: #1692093)
  + GCE: Update the attribute used to find instance SSH keys.
  + [Daniel Watkins] (LP: #1693582)
  + nplan: For bonds, allow dashed or underscore names of keys.
  + [Dimitri John Ledkov] (LP: #1690480)
  + python2.6: fix unit tests usage of assertNone and format.
  + test: update docstring on test_configured_list_with_none
  + fix tools/ds-identify to not write None twice.
  + tox/build: do not package depend on style requirements.
  + cc_ntp: Restructure cc_ntp unit tests. [Chad Smith] (LP: #1692794)
  + flake8: move the pinned version of flake8 up to 3.3.0
  + tests: Apply workaround for snapd bug in test case. [Joshua Powers]
  + RHEL/CentOS: Fix dual stack IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1679817, #1685534, #1685532)
  + disk_setup: fix several issues with gpt disk partitions. (LP: #1692087)
  + function spelling &amp; docstring update [Joshua Powers]
  + Fixing wrong file name regression. [Joshua Powers]
  + tox: move pylint target to 1.7.1
  + Fix get_interfaces_by_mac for empty macs (LP: #1692028)
  + DigitalOcean: remove routes except for the public interface.
  + [Ben Howard] (LP: #1681531.)
  + netplan: pass macaddress, when specified, for vlans
  + [Dimitri John Ledkov] (LP: #1690388)
  + doc: various improvements for the docs on cc_users_groups.
  + [Felix Dreissig]
  + cc_ntp: write template before installing and add service restart
  + [Ryan Harper] (LP: #1645644)
  + cloudstack: fix tests to avoid accessing /var/lib/NetworkManager
  + [Lars Kellogg-Stedman]
  + tests: fix hardcoded path to mkfs.ext4 [Joshua Powers] (LP: #1691517)
  + Actually skip warnings when .skip file is present.
  + [Chris Brinker] (LP: #1691551)
  + netplan: fix netplan render_network_state signature.
  + [Dimitri John Ledkov] (LP: #1685944)
  + Azure: fix reformatting of ephemeral disks on resize to large types.
  + (LP: #1686514)
  + Revert "tools/net-convert: fix argument order for render_network_state"
  + make deb: Add devscripts dependency for make deb. Cleanup
  + packages/bddeb. [Chad Smith] (LP: #1685935)
  + tools/net-convert: fix argument order for render_network_state
  + [Ryan Harper] (LP: #1685944)
  + openstack: fix log message copy/paste typo in _get_url_settings
  + [Lars Kellogg-Stedman]
  + unittests: fix unittests run on centos [Joshua Powers]
  + Improve detection of snappy to include os-release and kernel cmdline.
  + (LP: #1689944)
  + Add address to config entry generated by _klibc_to_config_entry.
  + [Julien Castets] (LP: #1691135)
  + sysconfig: Raise ValueError when multiple default gateways are present.
  + [Chad Smith] (LP: #1687485)
  + FreeBSD: improvements and fixes for use on Azure
  + [Hongjiang Zhang] (LP: #1636345)
  + Add unit tests for ds-identify, fix Ec2 bug found.
  + fs_setup: if cmd is specified, use shell interpretation.
  + [Paul Meyer] (LP: #1687712)
  + doc: document network configuration defaults policy and formats.
  + [Ryan Harper]
  + Fix name of "uri" key in docs for "cc_apt_configure" module
  + [Felix Dreissig]
  + tests: Enable artful [Joshua Powers]
  + nova-lxd: read product_name from environment, not platform.
  + (LP: #1685810)
  + Fix yum repo config where keys contain array values
  + [Dylan Perry] (LP: #1592150)
  + template: Update debian backports template [Joshua Powers] (LP: #1627293)
  + rsyslog: replace ~ with stop [Joshua Powers] (LP: #1367899)
  + Doc: add additional RTD examples [Joshua Powers] (LP: #1459604)
  + Fix growpart for some cases when booted with root=PARTUUID.
  + (LP: #1684869)
  + pylint: update output style to parseable [Joshua Powers]
  + pylint: fix all logging warnings [Joshua Powers]
  + CloudStack: Add NetworkManager to list of supported DHCP lease dirs.
  + [Syed]
  + net: kernel lies about vlans not stealing mac addresses, when they do
  + [Dimitri John Ledkov] (LP: #1682871)
  + ds-identify: Check correct path for "latest" config drive
  + [Daniel Watkins] (LP: #1673637)
  + doc: Fix example for resolve.conf configuration.
  + [Jon Grimm] (LP: #1531582)
  + Fix examples that reference upstream chef repository.
  + [Jon Grimm] (LP: #1678145)
  + doc: correct grammar and improve clarity in merging documentation.
  + [David Tagatac]
  + doc: Add missing doc link to snap-config module. [Ryan Harper]
  + snap: allows for creating cloud-init snap [Joshua Powers]
  + DigitalOcean: assign IPv4ll address to lowest indexed interface.
  + [Ben Howard]
  + DigitalOcean: configure all NICs presented in meta-data. [Ben Howard]
  + Remove (and/or fix) URL shortener references [Jon Grimm] (LP: #1669727)
  + HACKING.rst: more info on filling out contributors agreement.
  + util: teach write_file about copy_mode option
  + [Lars Kellogg-Stedman] (LP: #1644064)
  + DigitalOcean: bind resolvers to loopback interface. [Ben Howard]
  + tests: fix AltCloud tests to not rely on blkid (LP: #1636531)
  + OpenStack: add 'dvs' to the list of physical link types. (LP: #1674946)
  + Fix bug that resulted in an attempt to rename bonds or vlans.
  + (LP: #1669860)
  + tests: update OpenNebula and Digital Ocean to not rely on host
  + interfaces.
  + net: in netplan renderer delete known image-builtin content.
  + (LP: #1675576)
  + doc: correct grammar in capabilities.rst [David Tagatac]
  + ds-identify: fix detecting of maas datasource. (LP: #1677710)
  + netplan: remove debugging prints, add debug logging [Ryan Harper]
  + ds-identify: do not write None twice to datasource_list.
  + support resizing partition and rootfs on system booted without
  + initramfs. [Steve Langasek] (LP: #1677376)
  + apt_configure: run only when needed. (LP: #1675185)
  + OpenStack: identify OpenStack by product 'OpenStack Compute'.
  + (LP: #1675349)
  + GCE: Search GCE in ds-identify, consider serial number in check.
  + (LP: #1674861)
  + Add support for setting hashed passwords [Tore S. Lonoy] (LP: #1570325)
  + Fix filesystem creation when using "partition: auto"
  + [Jonathan Ballet] (LP: #1634678)
  + ConfigDrive: support reading config drive data from /config-drive.
  + (LP: #1673411)
  + ds-identify: fix detection of Bigstep datasource. (LP: #1674766)
  + test: add running of pylint [Joshua Powers]
  + ds-identify: fix bug where filename expansion was left on.
  + advertise network config v2 support (NETWORK_CONFIG_V2) in features.
  + Bigstep: fix bug when executing in python3. [root]
  + Fix unit test when running in a system deployed with cloud-init.
  + Bounce network interface for Azure when using the built-in path.
  + [Brent Baude] (LP: #1674685)
  + cloudinit.net: add network config v2 parsing and rendering [Ryan Harper]
  + net: Fix incorrect call to isfile [Joshua Powers] (LP: #1674317)
  + net: add renderers for automatically selecting the renderer.
  + doc: fix config drive doc with regard to unpartitioned disks.
  + (LP: #1673818)
  + test: Adding integratiron test for password as list [Joshua Powers]
  + render_network_state: switch arguments around, do not require target
  + support 'loopback' as a device type.
  + Integration Testing: improve testcase subclassing [Wesley Wiedenmeier]
  + gitignore: adding doc/rtd_html [Joshua Powers]
  + doc: add instructions for running integration tests via tox.
  + [Joshua Powers]
  + test: avoid differences in 'date' output due to daylight savings.
  + Fix chef config module in omnibus install. [Jeremy Melvin] (LP: #1583837)
  + Add feature flags to cloudinit.version. [Wesley Wiedenmeier]
  + tox: add a citest environment
  + Further fix regression to support 'password' for default user.
  + fix regression when no chpasswd/list was provided.
  + Support chpasswd/list being a list in addition to a string.
  + [Sergio Lystopad] (LP: #1665694)
  + doc: Fix configuration example for cc_set_passwords module.
  + [Sergio Lystopad] (LP: #1665773)
  + net: support both ipv4 and ipv6 gateways in sysconfig.
  + [Lars Kellogg-Stedman] (LP: #1669504)
  + net: do not raise exception for &gt; 3 nameservers
  + [Lars Kellogg-Stedman] (LP: #1670052)
  + ds-identify: report cleanups for config and exit value. (LP: #1669949)
  + ds-identify: move default setting for Ec2/strict_id to a global.
  + ds-identify: record not found in cloud.cfg and always add None.
  + Support warning if the used datasource is not in ds-identify's list.
  + tools/ds-identify: make report mode write namespaced results.
  + Move warning functionality to cloudinit/warnings.py
  + Add profile.d script for showing warnings on login.
  + Z99-cloud-locale-test.sh: install and make consistent.
  + tools/ds-identify: look at cloud.cfg when looking for ec2 strict_id.
  + tools/ds-identify: disable vmware_guest_customization by default.
  + tools/ds-identify: ovf identify vmware guest customization.
  + Identify Brightbox as an Ec2 datasource user. (LP: #1661693)
  + DatasourceEc2: add warning message when not on AWS.
  + ds-identify: add reading of datasource/Ec2/strict_id
  + tools/ds-identify: add support for found or maybe contributing config.
  + tools/ds-identify: read the seed directory on Ec2
  + tools/ds-identify: use quotes in local declarations.
  + tools/ds-identify: fix documentation of policy setting in a comment.
  + ds-identify: only run once per boot unless --force is given.
  + flake8: fix flake8 complaints in previous commit.
  + net: correct errors in cloudinit/net/sysconfig.py
  + [Lars Kellogg-Stedman] (LP: #1665441)
  + ec2_utils: fix MetadataLeafDecoder that returned bytes on empty
  + apply the runtime configuration written by ds-identify.
  + ds-identify: fix checking for filesystem label (LP: #1663735)
  + ds-identify: read ds=nocloud properly (LP: #1663723)
  + support nova-lxd by reading platform from environment of pid 1.
  + (LP: #1661797)
  + ds-identify: change aarch64 to use the default for non-dmi systems.
  + Remove style checking during build and add latest style checks to tox
  + [Joshua Powers] (LP: #1652329)
  + code-style: make master pass pycodestyle (2.3.1) cleanly, currently:
  + [Joshua Powers]
  + manual_cache_clean: When manually cleaning touch a file in instance dir.
  + Add tools/ds-identify to identify datasources available.
  + Fix small typo and change iso-filename for consistency [Robin Naundorf]
  + Fix eni rendering of multiple IPs per interface
  + [Ryan Harper] (LP: #1657940)
  + tools/mock-meta: support python2 or python3 and ipv6 in both.
  + tests: remove executable bit on test_net, so it runs, and fix it.
  + tests: No longer monkey patch httpretty for python 3.4.2
  + Add 3 ecdsa-sha2-nistp* ssh key types now that they are standardized
  + [Lars Kellogg-Stedman] (LP: #1658174)
  + reset httppretty for each test [Lars Kellogg-Stedman] (LP: #1658200)
  + build: fix running Make on a branch with tags other than master
  + EC2: Do not cache security credentials on disk
  + [Andrew Jorgensen] (LP: #1638312)
  + doc: Fix typos and clarify some aspects of the part-handler
  + [Erik M. Bray]
  + doc: add some documentation on OpenStack datasource.
  + OpenStack: Use timeout and retries from config in get_data.
  + [Lars Kellogg-Stedman] (LP: #1657130)
  + Fixed Misc issues related to VMware customization. [Sankar Tanguturi]
  + Fix minor docs typo: perserve &gt; preserve [Jeremy Bicha]
  + Use dnf instead of yum when available
  + [Lars Kellogg-Stedman] (LP: #1647118)
  + validate-yaml: use python rather than explicitly python3
  + Get early logging logged, including failures of cmdline url.
- From 0.7.9
  + doc: adjust headers in tests documentation for consistency.
  + pep8: fix issue found in zesty build with pycodestyle.
  + integration test: initial commit of integration test framework
  + [Wesley Wiedenmeier]
  + LICENSE: Allow dual licensing GPL-3 or Apache 2.0 [Jon Grimm]
  + Fix config order of precedence, putting kernel command line over system.
  + [Wesley Wiedenmeier] (LP: #1582323)
  + pep8: whitespace fix
  + Update the list of valid ssh keys. [Michael Felt]
  + network: add ENI unit test for statically rendered routes.
  + set_hostname: avoid erroneously appending domain to fqdn
  + [Lars Kellogg-Stedman] (LP: #1647910)
  + doc: change 'nobootwait' to 'nofail' in docs [Anhad Jai Singh]
  + Replace an expired bit.ly link in code comment.
  + user-groups: fix bug when groups was provided as string and had spaces
  + (LP: #1354694)
  + mounts: use mount -a again to accomplish mounts (LP: #1647708)
  + CloudSigma: Fix bug where datasource was not loaded in local search.
  + (LP: #1648380)
  + when adding a user, strip whitespace from group list [Lars Kellogg-Stedman]
  + (LP: #1354694)
  + fix decoding of utf-8 chars in yaml test
  + Replace usage of sys_netdev_info with read_sys_net (LP: #1625766)
  + fix problems found in python2.6 test.
  + OpenStack: extend physical types to include hyperv, hw_veb, vhost_user.
  + (LP: #1642679)
  + tests: fix assumptions that expected no eth0 in system. (LP: #1644043)
  + net/cmdline: Consider ip= or ip6= on command line not only ip=
  + (LP: #1639930)
  + Just use file logging by default (LP: #1643990)
  + Improve formatting for ProcessExecutionError [Wesley Wiedenmeier]
  + flake8: fix trailing white space
  + Doc: various documentation fixes [Sean Bright]
  + cloudinit/config/cc_rh_subscription.py: Remove repos before adding
  + [Brent Baude]
  + packages/redhat: fix rpm spec file.
  + main: set TZ in environment if not already set. [Ryan Harper]
  + Azure: No longer rely on walinux agent. (LP: #1538522)
  + disk_setup: Use sectors as unit when formatting MBR disks with sfdisk.
  + [Daniel Watkins] (LP: #1460715)
  + Add activate_datasource, for datasource specific code paths. (LP: #1611074)
  + systemd: cloud-init-local use RequiresMountsFor=/var/lib/cloud
  + (LP: #1642062)
  + systemd: cloud-init remove After=systemd-networkd-wait-online
  + systemd: cloud-init-local change Before basic to sysinit
  + pep8: fix style errors reported by pycodestyle 2.1.0
  + systemd: drop both Wants and After local-fs.target
  + systemd: networking service adjustments. (LP: #1636912)
  + systemd: replace Before=basic.target, dbus.target with sysinit.target
  + (LP: #1629797)
  + doc: Add documentation on stages of boot.
  + doc: make the RST files consistently formated and other improvements.
  + Ec2: fix syntax and tox in previous commit.
  + Ec2: protect against non-dictionary in block-device-mapping.
  + doc: fixed example to not overwrite /etc/hosts [Chris Glass]
  + Doc: fix spelling / typos in ca_certs and scripts_vendor.
  + pyflakes: fix issue with pyflakes 1.3 found in ubuntu zesty-proposed.
  + net/cmdline: Further adjustments to ipv6 support [LaMont Jones]
  + (LP: #1621615)
  + Add coverage dependency to bddeb to fix package build.
  + doc: improve HACKING.rst file
  + dmidecode: Allow dmidecode to be used on aarch64 [Robert Schweikert]
  + AliYun: Add new datasource for Ali-Cloud ECS [kaihuan.pkh]
  + Add coverage collection to tox unit tests. [Joshua Powers]
  + cc_users_groups: fix remaing call to ds.normalize_user_groups [Ryan Harper]
  + disk-config: udev settle after partitioning in gpt format. (LP: #1626243)
  + unittests: do not read system /etc/cloud/cloud.cfg.d (LP: #1635350)
  + Add documentation for logging features. [Wesley Wiedenmeier]
  + Add support for snap create-user on Ubuntu Core images. [Ryan Harper]
  + Fix sshd restarts for rhel distros. [Jim Gorz]
  + OpenNebula: replace 'ip' parsing with cloudinit.net usage.
  + Fix python2.6 things found running in centos 6.
  + Move user/group functions to new ug_util file
  + DigitalOcean: enable usage of data source by default.
  + update Gentoo initscripts to run in the correct order [Matthew Thode]
  + MAAS: improve the main of datasource to look at kernel cmdline config.
  + tests: silence the Cheetah UserWarning about NameMapper C version.
  + systemd: Run cloud-init.service Before dbus.socket not dbus.target
  + [Daniel Watkins] (LP: #1629797)
  + systemd: run cloud-init.service Before dbus.service (LP: #1629797)
  + unittests: fix use of mock 2.0 'assert_called' when running make check
  + [Ryan Harper]
  + Improve module documentation and doc cleanup. [Wesley Wiedenmeier]
  + lxd: Update network config for LXD 2.3 [Stéphane Graber]
  + DigitalOcean: use meta-data for network configruation [Ben Howard]
  + ntp: move to run after apt configuration (LP: #1628337)
  + Decode unicode types in decode_binary [Robert Schweikert]
  + systemd: Ensure that cloud-init-local happens before NetworkManager
  + Allow ephemeral drive to be unpartitioned [Paul Meyer]
  + subp: add 'update_env' argument
  + net: support reading ipv6 dhcp config from initramfs [LaMont Jones]
  + (LP: #1621615, #1621507)
  + Adjust mounts and disk configuration for systemd. (LP: #1611074)
  + dmidecode: run dmidecode only on i?86 or x86_64 arch. [Robert Schweikert]
  + systemd: put cloud-init.target After multi-user.target (LP: #1623868)</changelog>
  <changelog author="rjschwei@suse.com" date="1509624000">- Fix sed expression to set distro properly (boo#1063716)</changelog>
  <changelog author="rjschwei@suse.com" date="1510142400">- Add cloud-init-hosts-template.patch (bsc#1064594)
  + Properly expand the /etc/hosst file when manage_etc_hosts is set</changelog>
  <changelog author="rjschwei@suse.com" date="1510401600">- Add cloud-init-ntp-conf-suse.patch
  + ntp configuration was broken on sles and opensuse lp#1726572</changelog>
  <changelog author="rjschwei@suse.com" date="1510833600">- Add cloud-init-translate-netconf-ipv4-keep-gw.patch (boo#1064854)
  + Properly insert the gateway information for v1 json network config data</changelog>
  <changelog author="rjschwei@suse.com" date="1510920000">- Fix variable name in cloud-init-translate-netconf-ipv4-keep-gw.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
  <changelog author="rjschwei@suse.com" date="1512561600">- Add cloud-init-reproduce-build.patch (boo#1069635)
  + Make builds reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Fix usage of fdupes macro: there is no '-n' parameter to the
  macro (there would be to fdupes, the command, though).</changelog>
  <changelog author="gmoro@suse.com" date="1516276800">- patch distribution detection until a fix is delivered to python3 (bsc#997614)
  add cloud-init-add-variant-cloudcfg.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1517227200">- Update to version 17.2 (boo#1069635, bsc#1072811)
  + Add cloud-init-skip-ovf-tests.patch
  + Add cloud-init-no-python-linux-dist.patch
  + Add 0001-switch-to-using-iproute2-tools.patch
  + Add 0001-Support-chrony-configuration-lp-1731619.patch
  + Add 0002-Disable-method-deprecation-warning-for-pylint.patch
  + Add 0003-Distro-dependent-chrony-config-file.patch
  + removed cloud-init-add-variant-cloudcfg.patch replaced by
    cloud-init-no-python-linux-dist.patch
  + removed zypp_add_repos.diff included upstream
  + removed zypp_add_repo_test.patch included upstream
  + removed cloud-init-hosts-template.patch included upstream
  + removed cloud-init-more-tasks.patch included upstream
  + removed cloud-init-final-no-apt.patch included upstream
  + removed cloud-init-ntp-conf-suse.patch included upstream
  + removed cloud-init-break-cycle-local-service.patch included upstream
  + removed cloud-init-reproduce-build.patch included upstream
  + For the complete changelog see https://launchpad.net/cloud-init/trunk/17.2</changelog>
  <changelog author="dmueller@suse.com" date="1517313600">- drop dependency on boto (only used in examples, and
  should really be ported to botocore/boto3 instead)</changelog>
  <changelog author="rjschwei@suse.com" date="1518523200">- Fix logfile permission settings (bsc#1080595)
  + Add 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch</changelog>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
</package>
<package pkgid="a3fae38d82340c225a0d316cf932fbab3ebff1a5916d3931abc0991b02a67d2e" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="18.2" rel="lp150.2.3.1"/>
  <changelog author="kukuk@suse.de" date="1505736000">- python_sitelib does not seem to exist for non single-spec
  python modules, use python2_sitelib and python3_sitelib instead.</changelog>
  <changelog author="dmueller@suse.com" date="1505908800">- add skip-argparse-on-python3.patch: don't depend on argparse
  for python3, it is builtin there (as of python 3.2, so the
  patch should be good enough)</changelog>
  <changelog author="rjschwei@suse.com" date="1505995200">- Update to version 17.1 (bsc#1035106)
  + Version numbering scheme change now YY.NUMBER_OF_RELESE_THAT_YEAR
  + Remove cloud.cfg.suse, use generated default config file
  + Remove addopenSUSEBase.patch, included upstream
  + Remove suseIntegratedHandler.patch, included upstream
  + Remove openSUSEhostsTemplate.diff, included upstream
  + Remove cloud-init-handle-no-carrier.patch, included upstream
  + Remove cloud-init-digital-ocean-datasource.patch,
    use upstream implementation
  + Remove cloud-init-digital-ocean-datasource-enable-by-default.patch,
    use upstream implementation
  + Remove cloud-init-fix-unicode-handling-binarydecode.patch,
    included upstream
  + Remove cloud-init-no-dmidecode-on-ppc64.patch, included upstream
  + Remove dataSourceOpenNebula.patch, use upstream implementation
  + Remove setupSUSEsysVInit.diff, included upstream
  + Remove suseSysVInit.diff, included upstream
  + Remove cloud-init-finalbeforelogin.patch, don't block login
  + Remove cloud-init-handle-not-implemented-query.patch, query option removed
  + Remove cloud-init-spceandtabs-clean.patch, indentation fixed upstream
  + Remove dynamicInitCmd.diff, different solution from upstream
  + Added cloud-init-more-tasks.patch, (bsc#1047363)
    replace cloud-init-finalbeforelogin.patch
  + Forward port cloud-init-python2-sigpipe.patch
  + Remove cloud-init-net-eni.patch, included upstream
  + Remove cloud-init-service.patch, included upstream
  + Forward port cloud-init-sysconfig-netpathfix.patch
  + Remove cloud-init-net-sysconfig-lp1665441.patch, included upstream
  + Remove cloud-init-python26.patch, included upstream
  + Remove skip-argparse-on-python3.patch
  + Add cloud-init-tests-set-exec.patch
  + Add cloud-init-final-no-apt.patch
  + Add zypp_add_repo_test.patch
  + doc: document GCE datasource. [Arnd Hannemann]
  + suse: updates to templates to support openSUSE and SLES.
  + [Robert Schweikert] (LP: #1718640)
  + suse: Copy sysvinit files from redhat with slight changes.
  + [Robert Schweikert] (LP: #1718649)
  + docs: fix sphinx module schema documentation [Chad Smith]
  + tests: Add cloudinit package to all test targets [Chad Smith]
  + Makefile: No longer look for yaml files in obsolete ./bin/.
  + tests: fix ds-identify unit tests to set EC2_STRICT_ID_DEFAULT.
  + ec2: Fix maybe_perform_dhcp_discovery to use /var/tmp as a tmpdir
  + [Chad Smith] (LP: #1717627)
  + Azure: wait longer for SSH pub keys to arrive.
  + [Paul Meyer] (LP: #1717611)
  + GCE: Fix usage of user-data. (LP: #1717598)
  + cmdline: add collect-logs subcommand. [Chad Smith] (LP: #1607345)
  + CloudStack: consider dhclient lease files named with a hyphen.
  + (LP: #1717147)
  + resizefs: Drop check for read-only device file, do not warn on
  + overlayroot. [Chad Smith]
  + Do not provide systemd-fsck drop-in which could cause ordering cycles.
  + [Balint Reczey] (LP: #1717477)
  + tests: Enable the NoCloud KVM platform [Joshua Powers]
  + resizefs: pass mount point to xfs_growfs [Dusty Mabe]
  + vmware: Enable nics before sending the SUCCESS event. [Sankar Tanguturi]
  + cloud-config modules: honor distros definitions in each module
  + [Chad Smith] (LP: #1715738, #1715690)
  + chef: Add option to pin chef omnibus install version
  + [Ethan Apodaca] (LP: #1462693)
  + tests: execute: support command as string [Joshua Powers]
  + schema and docs: Add jsonschema to resizefs and bootcmd modules
  + [Chad Smith]
  + tools: Add xkvm script, wrapper around qemu-system [Joshua Powers]
  + vmware customization: return network config format
  + [Sankar Tanguturi] (LP: #1675063)
  + Ec2: only attempt to operate at local mode on known platforms.
  + (LP: #1715128)
  + Use /run/cloud-init for tempfile operations. (LP: #1707222)
  + ds-identify: Make OpenStack return maybe on arch other than intel.
  + (LP: #1715241)
  + tests: mock missed openstack metadata uri network_data.json
  + [Chad Smith] (LP: #1714376)
  + relocate tests/unittests/helpers.py to cloudinit/tests
  + [Lars Kellogg-Stedman]
  + tox: add nose timer output [Joshua Powers]
  + upstart: do not package upstart jobs, drop ubuntu-init-switch module.
  + tests: Stop leaking calls through unmocked metadata addresses
  + [Chad Smith] (LP: #1714117)
  + distro: allow distro to specify a default locale [Ryan Harper]
  + tests: fix two recently added tests for sles distro.
  + url_helper: dynamically import oauthlib import from inside oauth_headers
  + [Chad Smith]
  + tox: make xenial environment run with python3.6
  + suse: Add support for openSUSE and return SLES to a working state.
  + [Robert Schweikert]
  + GCE: Add a main to the GCE Datasource.
  + ec2: Add IPv6 dhcp support to Ec2DataSource. [Chad Smith] (LP: #1639030)
  + url_helper: fail gracefully if oauthlib is not available
  + [Lars Kellogg-Stedman] (LP: #1713760)
  + cloud-init analyze: fix issues running under python 2. [Andrew Jorgensen]
  + Configure logging module to always use UTC time.
  + [Ryan Harper] (LP: #1713158)
  + Log a helpful message if a user script does not include shebang.
  + [Andrew Jorgensen]
  + cli: Fix command line parsing of coniditionally loaded subcommands.
  + [Chad Smith] (LP: #1712676)
  + doc: Explain error behavior in user data include file format.
  + [Jason Butz]
  + cc_landscape &amp; cc_puppet: Fix six.StringIO use in writing configs
  + [Chad Smith] (LP: #1699282, #1710932)
  + schema cli: Add schema subcommand to cloud-init cli and cc_runcmd schema
  + [Chad Smith]
  + Debian: Remove non-free repositories from apt sources template.
  + [Joonas Kylmälä] (LP: #1700091)
  + tools: Add tooling for basic cloud-init performance analysis.
  + [Chad Smith] (LP: #1709761)
  + network: add v2 passthrough and fix parsing v2 config with bonds/bridge
  + params [Ryan Harper] (LP: #1709180)
  + doc: update capabilities with features available, link doc reference,
  + cli example [Ryan Harper]
  + vcloud directory: Guest Customization support for passwords
  + [Maitreyee Saikia]
  + ec2: Allow Ec2 to run in init-local using dhclient in a sandbox.
  + [Chad Smith] (LP: #1709772)
  + cc_ntp: fallback on timesyncd configuration if ntp is not installable
  + [Ryan Harper] (LP: #1686485)
  + net: Reduce duplicate code. Have get_interfaces_by_mac use
  + get_interfaces.
  + tests: Fix build tree integration tests [Joshua Powers]
  + sysconfig: Dont repeat header when rendering resolv.conf
  + [Ryan Harper] (LP: #1701420)
  + archlinux: Fix bug with empty dns, do not render 'lo' devices.
  + (LP: #1663045, #1706593)
  + cloudinit.net: add initialize_network_device function and tests
  + [Chad Smith]
  + makefile: fix ci-deps-ubuntu target [Chad Smith]
  + tests: adjust locale integration test to parse default locale.
  + tests: remove 'yakkety' from releases as it is EOL.
  + tests: Add initial tests for EC2 and improve a docstring.
  + locale: Do not re-run locale-gen if provided locale is system default.
  + archlinux: fix set hostname usage of write_file.
  + [Joshua Powers] (LP: #1705306)
  + sysconfig: support subnet type of 'manual'.
  + tools/run-centos: make running with no argument show help.
  + Drop rand_str() usage in DNS redirection detection
  + [Bob Aman] (LP: #1088611)
  + sysconfig: use MACADDR on bonds/bridges to configure mac_address
  + [Ryan Harper] (LP: #1701417)
  + net: eni route rendering missed ipv6 default route config
  + [Ryan Harper] (LP: #1701097)
  + sysconfig: enable mtu set per subnet, including ipv6 mtu
  + [Ryan Harper] (LP: #1702513)
  + sysconfig: handle manual type subnets [Ryan Harper] (LP: #1687725)
  + sysconfig: fix ipv6 gateway routes [Ryan Harper] (LP: #1694801)
  + sysconfig: fix rendering of bond, bridge and vlan types.
  + [Ryan Harper] (LP: #1695092)
  + Templatize systemd unit files for cross distro deltas. [Ryan Harper]
  + sysconfig: ipv6 and default gateway fixes. [Ryan Harper] (LP: #1704872)
  + net: fix renaming of nics to support mac addresses written in upper
  + case. (LP: #1705147)
  + tests: fixes for issues uncovered when moving to python 3.6.
  + (LP: #1703697)
  + sysconfig: include GATEWAY value if set in subnet
  + [Ryan Harper] (LP: #1686856)
  + Scaleway: add datasource with user and vendor data for Scaleway.
  + [Julien Castets]
  + Support comments in content read by load_shell_content.
  + cloudinitlocal fail to run during boot [Hongjiang Zhang]
  + doc: fix disk setup example table_type options
  + [Sandor Zeestraten] (LP: #1703789)
  + tools: Fix exception handling. [Joonas Kylmälä] (LP: #1701527)
  + tests: fix usage of mock in GCE test.
  + test_gce: Fix invalid mock of platform_reports_gce to return False
  + [Chad Smith]
  + test: fix incorrect keyid for apt repository.
  + [Joshua Powers] (LP: #1702717)
  + tests: Update version of pylxd [Joshua Powers]
  + write_files: Remove log from helper function signatures.
  + [Andrew Jorgensen]
  + doc: document the cmdline options to NoCloud [Brian Candler]
  + read_dmi_data: always return None when inside a container. (LP: #1701325)
  + requirements.txt: remove trailing white space.
  + Azure: Add network-config, Refactor net layer to handle duplicate macs.
  + [Ryan Harper]
  + Tests: Simplify the check on ssh-import-id [Joshua Powers]
  + tests: update ntp tests after sntp added [Joshua Powers]
  + FreeBSD: Make freebsd a variant, fix unittests and
  + tools/build-on-freebsd.
  + FreeBSD: fix test failure
  + FreeBSD: replace ifdown/ifup with "ifconfig down" and "ifconfig up".
  + [Hongjiang Zhang] (LP: #1697815)
  + FreeBSD: fix cdrom mounting failure if /mnt/cdrom/secure did not exist.
  + [Hongjiang Zhang] (LP: #1696295)
  + main: Don't use templater to format the welcome message
  + [Andrew Jorgensen]
  + docs: Automatically generate module docs form schema if present.
  + [Chad Smith]
  + debian: fix path comment in /etc/hosts template.
  + [Jens Sandmann] (LP: #1606406)
  + suse: add hostname and fully qualified domain to template.
  + [Jens Sandmann]
  + write_file(s): Print permissions as octal, not decimal [Andrew Jorgensen]
  + ci deps: Add --test-distro to read-dependencies to install all deps
  + [Chad Smith]
  + tools/run-centos: cleanups and move to using read-dependencies
  + pkg build ci: Add make ci-deps-&lt;distro&gt; target to install pkgs
  + [Chad Smith]
  + systemd: make cloud-final.service run before apt daily services.
  + (LP: #1693361)
  + selinux: Allow restorecon to be non-fatal. [Ryan Harper] (LP: #1686751)
  + net: Allow netinfo subprocesses to return 0 or 1.
  + [Ryan Harper] (LP: #1686751)
  + net: Allow for NetworkManager configuration [Ryan McCabe] (LP: #1693251)
  + Use distro release version to determine if we use systemd in redhat spec
  + [Ryan Harper]
  + net: normalize data in network_state object
  + Integration Testing: tox env, pyxld 2.2.3, and revamp framework
  + [Wesley Wiedenmeier]
  + Chef: Update omnibus url to chef.io, minor doc changes. [JJ Asghar]
  + tools: add centos scripts to build and test [Joshua Powers]
  + Drop cheetah python module as it is not needed by trunk [Ryan Harper]
  + rhel/centos spec cleanups.
  + cloud.cfg: move to a template.  setup.py changes along the way.
  + Makefile: add deb-src and srpm targets. use PYVER more places.
  + makefile: fix python 2/3 detection in the Makefile [Chad Smith]
  + snap: Removing snapcraft plug line [Joshua Powers] (LP: #1695333)
  + RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1696176)
  + test: Fix pyflakes complaint of unused import.
  + [Joshua Powers] (LP: #1695918)
  + NoCloud: support seed of nocloud from smbios information
  + [Vladimir Pouzanov] (LP: #1691772)
  + net: when selecting a network device, use natural sort order
  + [Marc-Aurèle Brothier]
  + fix typos and remove whitespace in various docs [Stephan Telling]
  + systemd: Fix typo in comment in cloud-init.target. [Chen-Han Hsiao]
  + Tests: Skip jsonschema related unit tests when dependency is absent.
  + [Chad Smith] (LP: #1695318)
  + azure: remove accidental duplicate line in merge.
  + azure: identify platform by well known value in chassis asset tag.
  + [Chad Smith] (LP: #1693939)
  + tools/net-convert.py: support old cloudinit versions by using kwargs.
  + ntp: Add schema definition and passive schema validation.
  + [Chad Smith] (LP: #1692916)
  + Fix eni rendering for bridge params that require repeated key for
  + values. [Ryan Harper]
  + net: remove systemd link file writing from eni renderer [Ryan Harper]
  + AliYun: Enable platform identification and enable by default.
  + [Junjie Wang] (LP: #1638931)
  + net: fix reading and rendering addresses in cidr format.
  + [Dimitri John Ledkov] (LP: #1689346, #1684349)
  + disk_setup: udev settle before attempting partitioning or fs creation.
  + (LP: #1692093)
  + GCE: Update the attribute used to find instance SSH keys.
  + [Daniel Watkins] (LP: #1693582)
  + nplan: For bonds, allow dashed or underscore names of keys.
  + [Dimitri John Ledkov] (LP: #1690480)
  + python2.6: fix unit tests usage of assertNone and format.
  + test: update docstring on test_configured_list_with_none
  + fix tools/ds-identify to not write None twice.
  + tox/build: do not package depend on style requirements.
  + cc_ntp: Restructure cc_ntp unit tests. [Chad Smith] (LP: #1692794)
  + flake8: move the pinned version of flake8 up to 3.3.0
  + tests: Apply workaround for snapd bug in test case. [Joshua Powers]
  + RHEL/CentOS: Fix dual stack IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1679817, #1685534, #1685532)
  + disk_setup: fix several issues with gpt disk partitions. (LP: #1692087)
  + function spelling &amp; docstring update [Joshua Powers]
  + Fixing wrong file name regression. [Joshua Powers]
  + tox: move pylint target to 1.7.1
  + Fix get_interfaces_by_mac for empty macs (LP: #1692028)
  + DigitalOcean: remove routes except for the public interface.
  + [Ben Howard] (LP: #1681531.)
  + netplan: pass macaddress, when specified, for vlans
  + [Dimitri John Ledkov] (LP: #1690388)
  + doc: various improvements for the docs on cc_users_groups.
  + [Felix Dreissig]
  + cc_ntp: write template before installing and add service restart
  + [Ryan Harper] (LP: #1645644)
  + cloudstack: fix tests to avoid accessing /var/lib/NetworkManager
  + [Lars Kellogg-Stedman]
  + tests: fix hardcoded path to mkfs.ext4 [Joshua Powers] (LP: #1691517)
  + Actually skip warnings when .skip file is present.
  + [Chris Brinker] (LP: #1691551)
  + netplan: fix netplan render_network_state signature.
  + [Dimitri John Ledkov] (LP: #1685944)
  + Azure: fix reformatting of ephemeral disks on resize to large types.
  + (LP: #1686514)
  + Revert "tools/net-convert: fix argument order for render_network_state"
  + make deb: Add devscripts dependency for make deb. Cleanup
  + packages/bddeb. [Chad Smith] (LP: #1685935)
  + tools/net-convert: fix argument order for render_network_state
  + [Ryan Harper] (LP: #1685944)
  + openstack: fix log message copy/paste typo in _get_url_settings
  + [Lars Kellogg-Stedman]
  + unittests: fix unittests run on centos [Joshua Powers]
  + Improve detection of snappy to include os-release and kernel cmdline.
  + (LP: #1689944)
  + Add address to config entry generated by _klibc_to_config_entry.
  + [Julien Castets] (LP: #1691135)
  + sysconfig: Raise ValueError when multiple default gateways are present.
  + [Chad Smith] (LP: #1687485)
  + FreeBSD: improvements and fixes for use on Azure
  + [Hongjiang Zhang] (LP: #1636345)
  + Add unit tests for ds-identify, fix Ec2 bug found.
  + fs_setup: if cmd is specified, use shell interpretation.
  + [Paul Meyer] (LP: #1687712)
  + doc: document network configuration defaults policy and formats.
  + [Ryan Harper]
  + Fix name of "uri" key in docs for "cc_apt_configure" module
  + [Felix Dreissig]
  + tests: Enable artful [Joshua Powers]
  + nova-lxd: read product_name from environment, not platform.
  + (LP: #1685810)
  + Fix yum repo config where keys contain array values
  + [Dylan Perry] (LP: #1592150)
  + template: Update debian backports template [Joshua Powers] (LP: #1627293)
  + rsyslog: replace ~ with stop [Joshua Powers] (LP: #1367899)
  + Doc: add additional RTD examples [Joshua Powers] (LP: #1459604)
  + Fix growpart for some cases when booted with root=PARTUUID.
  + (LP: #1684869)
  + pylint: update output style to parseable [Joshua Powers]
  + pylint: fix all logging warnings [Joshua Powers]
  + CloudStack: Add NetworkManager to list of supported DHCP lease dirs.
  + [Syed]
  + net: kernel lies about vlans not stealing mac addresses, when they do
  + [Dimitri John Ledkov] (LP: #1682871)
  + ds-identify: Check correct path for "latest" config drive
  + [Daniel Watkins] (LP: #1673637)
  + doc: Fix example for resolve.conf configuration.
  + [Jon Grimm] (LP: #1531582)
  + Fix examples that reference upstream chef repository.
  + [Jon Grimm] (LP: #1678145)
  + doc: correct grammar and improve clarity in merging documentation.
  + [David Tagatac]
  + doc: Add missing doc link to snap-config module. [Ryan Harper]
  + snap: allows for creating cloud-init snap [Joshua Powers]
  + DigitalOcean: assign IPv4ll address to lowest indexed interface.
  + [Ben Howard]
  + DigitalOcean: configure all NICs presented in meta-data. [Ben Howard]
  + Remove (and/or fix) URL shortener references [Jon Grimm] (LP: #1669727)
  + HACKING.rst: more info on filling out contributors agreement.
  + util: teach write_file about copy_mode option
  + [Lars Kellogg-Stedman] (LP: #1644064)
  + DigitalOcean: bind resolvers to loopback interface. [Ben Howard]
  + tests: fix AltCloud tests to not rely on blkid (LP: #1636531)
  + OpenStack: add 'dvs' to the list of physical link types. (LP: #1674946)
  + Fix bug that resulted in an attempt to rename bonds or vlans.
  + (LP: #1669860)
  + tests: update OpenNebula and Digital Ocean to not rely on host
  + interfaces.
  + net: in netplan renderer delete known image-builtin content.
  + (LP: #1675576)
  + doc: correct grammar in capabilities.rst [David Tagatac]
  + ds-identify: fix detecting of maas datasource. (LP: #1677710)
  + netplan: remove debugging prints, add debug logging [Ryan Harper]
  + ds-identify: do not write None twice to datasource_list.
  + support resizing partition and rootfs on system booted without
  + initramfs. [Steve Langasek] (LP: #1677376)
  + apt_configure: run only when needed. (LP: #1675185)
  + OpenStack: identify OpenStack by product 'OpenStack Compute'.
  + (LP: #1675349)
  + GCE: Search GCE in ds-identify, consider serial number in check.
  + (LP: #1674861)
  + Add support for setting hashed passwords [Tore S. Lonoy] (LP: #1570325)
  + Fix filesystem creation when using "partition: auto"
  + [Jonathan Ballet] (LP: #1634678)
  + ConfigDrive: support reading config drive data from /config-drive.
  + (LP: #1673411)
  + ds-identify: fix detection of Bigstep datasource. (LP: #1674766)
  + test: add running of pylint [Joshua Powers]
  + ds-identify: fix bug where filename expansion was left on.
  + advertise network config v2 support (NETWORK_CONFIG_V2) in features.
  + Bigstep: fix bug when executing in python3. [root]
  + Fix unit test when running in a system deployed with cloud-init.
  + Bounce network interface for Azure when using the built-in path.
  + [Brent Baude] (LP: #1674685)
  + cloudinit.net: add network config v2 parsing and rendering [Ryan Harper]
  + net: Fix incorrect call to isfile [Joshua Powers] (LP: #1674317)
  + net: add renderers for automatically selecting the renderer.
  + doc: fix config drive doc with regard to unpartitioned disks.
  + (LP: #1673818)
  + test: Adding integratiron test for password as list [Joshua Powers]
  + render_network_state: switch arguments around, do not require target
  + support 'loopback' as a device type.
  + Integration Testing: improve testcase subclassing [Wesley Wiedenmeier]
  + gitignore: adding doc/rtd_html [Joshua Powers]
  + doc: add instructions for running integration tests via tox.
  + [Joshua Powers]
  + test: avoid differences in 'date' output due to daylight savings.
  + Fix chef config module in omnibus install. [Jeremy Melvin] (LP: #1583837)
  + Add feature flags to cloudinit.version. [Wesley Wiedenmeier]
  + tox: add a citest environment
  + Further fix regression to support 'password' for default user.
  + fix regression when no chpasswd/list was provided.
  + Support chpasswd/list being a list in addition to a string.
  + [Sergio Lystopad] (LP: #1665694)
  + doc: Fix configuration example for cc_set_passwords module.
  + [Sergio Lystopad] (LP: #1665773)
  + net: support both ipv4 and ipv6 gateways in sysconfig.
  + [Lars Kellogg-Stedman] (LP: #1669504)
  + net: do not raise exception for &gt; 3 nameservers
  + [Lars Kellogg-Stedman] (LP: #1670052)
  + ds-identify: report cleanups for config and exit value. (LP: #1669949)
  + ds-identify: move default setting for Ec2/strict_id to a global.
  + ds-identify: record not found in cloud.cfg and always add None.
  + Support warning if the used datasource is not in ds-identify's list.
  + tools/ds-identify: make report mode write namespaced results.
  + Move warning functionality to cloudinit/warnings.py
  + Add profile.d script for showing warnings on login.
  + Z99-cloud-locale-test.sh: install and make consistent.
  + tools/ds-identify: look at cloud.cfg when looking for ec2 strict_id.
  + tools/ds-identify: disable vmware_guest_customization by default.
  + tools/ds-identify: ovf identify vmware guest customization.
  + Identify Brightbox as an Ec2 datasource user. (LP: #1661693)
  + DatasourceEc2: add warning message when not on AWS.
  + ds-identify: add reading of datasource/Ec2/strict_id
  + tools/ds-identify: add support for found or maybe contributing config.
  + tools/ds-identify: read the seed directory on Ec2
  + tools/ds-identify: use quotes in local declarations.
  + tools/ds-identify: fix documentation of policy setting in a comment.
  + ds-identify: only run once per boot unless --force is given.
  + flake8: fix flake8 complaints in previous commit.
  + net: correct errors in cloudinit/net/sysconfig.py
  + [Lars Kellogg-Stedman] (LP: #1665441)
  + ec2_utils: fix MetadataLeafDecoder that returned bytes on empty
  + apply the runtime configuration written by ds-identify.
  + ds-identify: fix checking for filesystem label (LP: #1663735)
  + ds-identify: read ds=nocloud properly (LP: #1663723)
  + support nova-lxd by reading platform from environment of pid 1.
  + (LP: #1661797)
  + ds-identify: change aarch64 to use the default for non-dmi systems.
  + Remove style checking during build and add latest style checks to tox
  + [Joshua Powers] (LP: #1652329)
  + code-style: make master pass pycodestyle (2.3.1) cleanly, currently:
  + [Joshua Powers]
  + manual_cache_clean: When manually cleaning touch a file in instance dir.
  + Add tools/ds-identify to identify datasources available.
  + Fix small typo and change iso-filename for consistency [Robin Naundorf]
  + Fix eni rendering of multiple IPs per interface
  + [Ryan Harper] (LP: #1657940)
  + tools/mock-meta: support python2 or python3 and ipv6 in both.
  + tests: remove executable bit on test_net, so it runs, and fix it.
  + tests: No longer monkey patch httpretty for python 3.4.2
  + Add 3 ecdsa-sha2-nistp* ssh key types now that they are standardized
  + [Lars Kellogg-Stedman] (LP: #1658174)
  + reset httppretty for each test [Lars Kellogg-Stedman] (LP: #1658200)
  + build: fix running Make on a branch with tags other than master
  + EC2: Do not cache security credentials on disk
  + [Andrew Jorgensen] (LP: #1638312)
  + doc: Fix typos and clarify some aspects of the part-handler
  + [Erik M. Bray]
  + doc: add some documentation on OpenStack datasource.
  + OpenStack: Use timeout and retries from config in get_data.
  + [Lars Kellogg-Stedman] (LP: #1657130)
  + Fixed Misc issues related to VMware customization. [Sankar Tanguturi]
  + Fix minor docs typo: perserve &gt; preserve [Jeremy Bicha]
  + Use dnf instead of yum when available
  + [Lars Kellogg-Stedman] (LP: #1647118)
  + validate-yaml: use python rather than explicitly python3
  + Get early logging logged, including failures of cmdline url.
- From 0.7.9
  + doc: adjust headers in tests documentation for consistency.
  + pep8: fix issue found in zesty build with pycodestyle.
  + integration test: initial commit of integration test framework
  + [Wesley Wiedenmeier]
  + LICENSE: Allow dual licensing GPL-3 or Apache 2.0 [Jon Grimm]
  + Fix config order of precedence, putting kernel command line over system.
  + [Wesley Wiedenmeier] (LP: #1582323)
  + pep8: whitespace fix
  + Update the list of valid ssh keys. [Michael Felt]
  + network: add ENI unit test for statically rendered routes.
  + set_hostname: avoid erroneously appending domain to fqdn
  + [Lars Kellogg-Stedman] (LP: #1647910)
  + doc: change 'nobootwait' to 'nofail' in docs [Anhad Jai Singh]
  + Replace an expired bit.ly link in code comment.
  + user-groups: fix bug when groups was provided as string and had spaces
  + (LP: #1354694)
  + mounts: use mount -a again to accomplish mounts (LP: #1647708)
  + CloudSigma: Fix bug where datasource was not loaded in local search.
  + (LP: #1648380)
  + when adding a user, strip whitespace from group list [Lars Kellogg-Stedman]
  + (LP: #1354694)
  + fix decoding of utf-8 chars in yaml test
  + Replace usage of sys_netdev_info with read_sys_net (LP: #1625766)
  + fix problems found in python2.6 test.
  + OpenStack: extend physical types to include hyperv, hw_veb, vhost_user.
  + (LP: #1642679)
  + tests: fix assumptions that expected no eth0 in system. (LP: #1644043)
  + net/cmdline: Consider ip= or ip6= on command line not only ip=
  + (LP: #1639930)
  + Just use file logging by default (LP: #1643990)
  + Improve formatting for ProcessExecutionError [Wesley Wiedenmeier]
  + flake8: fix trailing white space
  + Doc: various documentation fixes [Sean Bright]
  + cloudinit/config/cc_rh_subscription.py: Remove repos before adding
  + [Brent Baude]
  + packages/redhat: fix rpm spec file.
  + main: set TZ in environment if not already set. [Ryan Harper]
  + Azure: No longer rely on walinux agent. (LP: #1538522)
  + disk_setup: Use sectors as unit when formatting MBR disks with sfdisk.
  + [Daniel Watkins] (LP: #1460715)
  + Add activate_datasource, for datasource specific code paths. (LP: #1611074)
  + systemd: cloud-init-local use RequiresMountsFor=/var/lib/cloud
  + (LP: #1642062)
  + systemd: cloud-init remove After=systemd-networkd-wait-online
  + systemd: cloud-init-local change Before basic to sysinit
  + pep8: fix style errors reported by pycodestyle 2.1.0
  + systemd: drop both Wants and After local-fs.target
  + systemd: networking service adjustments. (LP: #1636912)
  + systemd: replace Before=basic.target, dbus.target with sysinit.target
  + (LP: #1629797)
  + doc: Add documentation on stages of boot.
  + doc: make the RST files consistently formated and other improvements.
  + Ec2: fix syntax and tox in previous commit.
  + Ec2: protect against non-dictionary in block-device-mapping.
  + doc: fixed example to not overwrite /etc/hosts [Chris Glass]
  + Doc: fix spelling / typos in ca_certs and scripts_vendor.
  + pyflakes: fix issue with pyflakes 1.3 found in ubuntu zesty-proposed.
  + net/cmdline: Further adjustments to ipv6 support [LaMont Jones]
  + (LP: #1621615)
  + Add coverage dependency to bddeb to fix package build.
  + doc: improve HACKING.rst file
  + dmidecode: Allow dmidecode to be used on aarch64 [Robert Schweikert]
  + AliYun: Add new datasource for Ali-Cloud ECS [kaihuan.pkh]
  + Add coverage collection to tox unit tests. [Joshua Powers]
  + cc_users_groups: fix remaing call to ds.normalize_user_groups [Ryan Harper]
  + disk-config: udev settle after partitioning in gpt format. (LP: #1626243)
  + unittests: do not read system /etc/cloud/cloud.cfg.d (LP: #1635350)
  + Add documentation for logging features. [Wesley Wiedenmeier]
  + Add support for snap create-user on Ubuntu Core images. [Ryan Harper]
  + Fix sshd restarts for rhel distros. [Jim Gorz]
  + OpenNebula: replace 'ip' parsing with cloudinit.net usage.
  + Fix python2.6 things found running in centos 6.
  + Move user/group functions to new ug_util file
  + DigitalOcean: enable usage of data source by default.
  + update Gentoo initscripts to run in the correct order [Matthew Thode]
  + MAAS: improve the main of datasource to look at kernel cmdline config.
  + tests: silence the Cheetah UserWarning about NameMapper C version.
  + systemd: Run cloud-init.service Before dbus.socket not dbus.target
  + [Daniel Watkins] (LP: #1629797)
  + systemd: run cloud-init.service Before dbus.service (LP: #1629797)
  + unittests: fix use of mock 2.0 'assert_called' when running make check
  + [Ryan Harper]
  + Improve module documentation and doc cleanup. [Wesley Wiedenmeier]
  + lxd: Update network config for LXD 2.3 [Stéphane Graber]
  + DigitalOcean: use meta-data for network configruation [Ben Howard]
  + ntp: move to run after apt configuration (LP: #1628337)
  + Decode unicode types in decode_binary [Robert Schweikert]
  + systemd: Ensure that cloud-init-local happens before NetworkManager
  + Allow ephemeral drive to be unpartitioned [Paul Meyer]
  + subp: add 'update_env' argument
  + net: support reading ipv6 dhcp config from initramfs [LaMont Jones]
  + (LP: #1621615, #1621507)
  + Adjust mounts and disk configuration for systemd. (LP: #1611074)
  + dmidecode: run dmidecode only on i?86 or x86_64 arch. [Robert Schweikert]
  + systemd: put cloud-init.target After multi-user.target (LP: #1623868)</changelog>
  <changelog author="rjschwei@suse.com" date="1509624000">- Fix sed expression to set distro properly (boo#1063716)</changelog>
  <changelog author="rjschwei@suse.com" date="1510142400">- Add cloud-init-hosts-template.patch (bsc#1064594)
  + Properly expand the /etc/hosst file when manage_etc_hosts is set</changelog>
  <changelog author="rjschwei@suse.com" date="1510401600">- Add cloud-init-ntp-conf-suse.patch
  + ntp configuration was broken on sles and opensuse lp#1726572</changelog>
  <changelog author="rjschwei@suse.com" date="1510833600">- Add cloud-init-translate-netconf-ipv4-keep-gw.patch (boo#1064854)
  + Properly insert the gateway information for v1 json network config data</changelog>
  <changelog author="rjschwei@suse.com" date="1510920000">- Fix variable name in cloud-init-translate-netconf-ipv4-keep-gw.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
  <changelog author="rjschwei@suse.com" date="1512561600">- Add cloud-init-reproduce-build.patch (boo#1069635)
  + Make builds reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Fix usage of fdupes macro: there is no '-n' parameter to the
  macro (there would be to fdupes, the command, though).</changelog>
  <changelog author="gmoro@suse.com" date="1516276800">- patch distribution detection until a fix is delivered to python3 (bsc#997614)
  add cloud-init-add-variant-cloudcfg.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1517227200">- Update to version 17.2 (boo#1069635, bsc#1072811)
  + Add cloud-init-skip-ovf-tests.patch
  + Add cloud-init-no-python-linux-dist.patch
  + Add 0001-switch-to-using-iproute2-tools.patch
  + Add 0001-Support-chrony-configuration-lp-1731619.patch
  + Add 0002-Disable-method-deprecation-warning-for-pylint.patch
  + Add 0003-Distro-dependent-chrony-config-file.patch
  + removed cloud-init-add-variant-cloudcfg.patch replaced by
    cloud-init-no-python-linux-dist.patch
  + removed zypp_add_repos.diff included upstream
  + removed zypp_add_repo_test.patch included upstream
  + removed cloud-init-hosts-template.patch included upstream
  + removed cloud-init-more-tasks.patch included upstream
  + removed cloud-init-final-no-apt.patch included upstream
  + removed cloud-init-ntp-conf-suse.patch included upstream
  + removed cloud-init-break-cycle-local-service.patch included upstream
  + removed cloud-init-reproduce-build.patch included upstream
  + For the complete changelog see https://launchpad.net/cloud-init/trunk/17.2</changelog>
  <changelog author="dmueller@suse.com" date="1517313600">- drop dependency on boto (only used in examples, and
  should really be ported to botocore/boto3 instead)</changelog>
  <changelog author="rjschwei@suse.com" date="1518523200">- Fix logfile permission settings (bsc#1080595)
  + Add 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch</changelog>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
</package>
<package pkgid="6b64c650ce13bf384c12b3df00406088727102be7293921a34b7da2fb3af9886" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="18.2" rel="lp150.2.6.1"/>
  <changelog author="dmueller@suse.com" date="1505908800">- add skip-argparse-on-python3.patch: don't depend on argparse
  for python3, it is builtin there (as of python 3.2, so the
  patch should be good enough)</changelog>
  <changelog author="rjschwei@suse.com" date="1505995200">- Update to version 17.1 (bsc#1035106)
  + Version numbering scheme change now YY.NUMBER_OF_RELESE_THAT_YEAR
  + Remove cloud.cfg.suse, use generated default config file
  + Remove addopenSUSEBase.patch, included upstream
  + Remove suseIntegratedHandler.patch, included upstream
  + Remove openSUSEhostsTemplate.diff, included upstream
  + Remove cloud-init-handle-no-carrier.patch, included upstream
  + Remove cloud-init-digital-ocean-datasource.patch,
    use upstream implementation
  + Remove cloud-init-digital-ocean-datasource-enable-by-default.patch,
    use upstream implementation
  + Remove cloud-init-fix-unicode-handling-binarydecode.patch,
    included upstream
  + Remove cloud-init-no-dmidecode-on-ppc64.patch, included upstream
  + Remove dataSourceOpenNebula.patch, use upstream implementation
  + Remove setupSUSEsysVInit.diff, included upstream
  + Remove suseSysVInit.diff, included upstream
  + Remove cloud-init-finalbeforelogin.patch, don't block login
  + Remove cloud-init-handle-not-implemented-query.patch, query option removed
  + Remove cloud-init-spceandtabs-clean.patch, indentation fixed upstream
  + Remove dynamicInitCmd.diff, different solution from upstream
  + Added cloud-init-more-tasks.patch, (bsc#1047363)
    replace cloud-init-finalbeforelogin.patch
  + Forward port cloud-init-python2-sigpipe.patch
  + Remove cloud-init-net-eni.patch, included upstream
  + Remove cloud-init-service.patch, included upstream
  + Forward port cloud-init-sysconfig-netpathfix.patch
  + Remove cloud-init-net-sysconfig-lp1665441.patch, included upstream
  + Remove cloud-init-python26.patch, included upstream
  + Remove skip-argparse-on-python3.patch
  + Add cloud-init-tests-set-exec.patch
  + Add cloud-init-final-no-apt.patch
  + Add zypp_add_repo_test.patch
  + doc: document GCE datasource. [Arnd Hannemann]
  + suse: updates to templates to support openSUSE and SLES.
  + [Robert Schweikert] (LP: #1718640)
  + suse: Copy sysvinit files from redhat with slight changes.
  + [Robert Schweikert] (LP: #1718649)
  + docs: fix sphinx module schema documentation [Chad Smith]
  + tests: Add cloudinit package to all test targets [Chad Smith]
  + Makefile: No longer look for yaml files in obsolete ./bin/.
  + tests: fix ds-identify unit tests to set EC2_STRICT_ID_DEFAULT.
  + ec2: Fix maybe_perform_dhcp_discovery to use /var/tmp as a tmpdir
  + [Chad Smith] (LP: #1717627)
  + Azure: wait longer for SSH pub keys to arrive.
  + [Paul Meyer] (LP: #1717611)
  + GCE: Fix usage of user-data. (LP: #1717598)
  + cmdline: add collect-logs subcommand. [Chad Smith] (LP: #1607345)
  + CloudStack: consider dhclient lease files named with a hyphen.
  + (LP: #1717147)
  + resizefs: Drop check for read-only device file, do not warn on
  + overlayroot. [Chad Smith]
  + Do not provide systemd-fsck drop-in which could cause ordering cycles.
  + [Balint Reczey] (LP: #1717477)
  + tests: Enable the NoCloud KVM platform [Joshua Powers]
  + resizefs: pass mount point to xfs_growfs [Dusty Mabe]
  + vmware: Enable nics before sending the SUCCESS event. [Sankar Tanguturi]
  + cloud-config modules: honor distros definitions in each module
  + [Chad Smith] (LP: #1715738, #1715690)
  + chef: Add option to pin chef omnibus install version
  + [Ethan Apodaca] (LP: #1462693)
  + tests: execute: support command as string [Joshua Powers]
  + schema and docs: Add jsonschema to resizefs and bootcmd modules
  + [Chad Smith]
  + tools: Add xkvm script, wrapper around qemu-system [Joshua Powers]
  + vmware customization: return network config format
  + [Sankar Tanguturi] (LP: #1675063)
  + Ec2: only attempt to operate at local mode on known platforms.
  + (LP: #1715128)
  + Use /run/cloud-init for tempfile operations. (LP: #1707222)
  + ds-identify: Make OpenStack return maybe on arch other than intel.
  + (LP: #1715241)
  + tests: mock missed openstack metadata uri network_data.json
  + [Chad Smith] (LP: #1714376)
  + relocate tests/unittests/helpers.py to cloudinit/tests
  + [Lars Kellogg-Stedman]
  + tox: add nose timer output [Joshua Powers]
  + upstart: do not package upstart jobs, drop ubuntu-init-switch module.
  + tests: Stop leaking calls through unmocked metadata addresses
  + [Chad Smith] (LP: #1714117)
  + distro: allow distro to specify a default locale [Ryan Harper]
  + tests: fix two recently added tests for sles distro.
  + url_helper: dynamically import oauthlib import from inside oauth_headers
  + [Chad Smith]
  + tox: make xenial environment run with python3.6
  + suse: Add support for openSUSE and return SLES to a working state.
  + [Robert Schweikert]
  + GCE: Add a main to the GCE Datasource.
  + ec2: Add IPv6 dhcp support to Ec2DataSource. [Chad Smith] (LP: #1639030)
  + url_helper: fail gracefully if oauthlib is not available
  + [Lars Kellogg-Stedman] (LP: #1713760)
  + cloud-init analyze: fix issues running under python 2. [Andrew Jorgensen]
  + Configure logging module to always use UTC time.
  + [Ryan Harper] (LP: #1713158)
  + Log a helpful message if a user script does not include shebang.
  + [Andrew Jorgensen]
  + cli: Fix command line parsing of coniditionally loaded subcommands.
  + [Chad Smith] (LP: #1712676)
  + doc: Explain error behavior in user data include file format.
  + [Jason Butz]
  + cc_landscape &amp; cc_puppet: Fix six.StringIO use in writing configs
  + [Chad Smith] (LP: #1699282, #1710932)
  + schema cli: Add schema subcommand to cloud-init cli and cc_runcmd schema
  + [Chad Smith]
  + Debian: Remove non-free repositories from apt sources template.
  + [Joonas Kylmälä] (LP: #1700091)
  + tools: Add tooling for basic cloud-init performance analysis.
  + [Chad Smith] (LP: #1709761)
  + network: add v2 passthrough and fix parsing v2 config with bonds/bridge
  + params [Ryan Harper] (LP: #1709180)
  + doc: update capabilities with features available, link doc reference,
  + cli example [Ryan Harper]
  + vcloud directory: Guest Customization support for passwords
  + [Maitreyee Saikia]
  + ec2: Allow Ec2 to run in init-local using dhclient in a sandbox.
  + [Chad Smith] (LP: #1709772)
  + cc_ntp: fallback on timesyncd configuration if ntp is not installable
  + [Ryan Harper] (LP: #1686485)
  + net: Reduce duplicate code. Have get_interfaces_by_mac use
  + get_interfaces.
  + tests: Fix build tree integration tests [Joshua Powers]
  + sysconfig: Dont repeat header when rendering resolv.conf
  + [Ryan Harper] (LP: #1701420)
  + archlinux: Fix bug with empty dns, do not render 'lo' devices.
  + (LP: #1663045, #1706593)
  + cloudinit.net: add initialize_network_device function and tests
  + [Chad Smith]
  + makefile: fix ci-deps-ubuntu target [Chad Smith]
  + tests: adjust locale integration test to parse default locale.
  + tests: remove 'yakkety' from releases as it is EOL.
  + tests: Add initial tests for EC2 and improve a docstring.
  + locale: Do not re-run locale-gen if provided locale is system default.
  + archlinux: fix set hostname usage of write_file.
  + [Joshua Powers] (LP: #1705306)
  + sysconfig: support subnet type of 'manual'.
  + tools/run-centos: make running with no argument show help.
  + Drop rand_str() usage in DNS redirection detection
  + [Bob Aman] (LP: #1088611)
  + sysconfig: use MACADDR on bonds/bridges to configure mac_address
  + [Ryan Harper] (LP: #1701417)
  + net: eni route rendering missed ipv6 default route config
  + [Ryan Harper] (LP: #1701097)
  + sysconfig: enable mtu set per subnet, including ipv6 mtu
  + [Ryan Harper] (LP: #1702513)
  + sysconfig: handle manual type subnets [Ryan Harper] (LP: #1687725)
  + sysconfig: fix ipv6 gateway routes [Ryan Harper] (LP: #1694801)
  + sysconfig: fix rendering of bond, bridge and vlan types.
  + [Ryan Harper] (LP: #1695092)
  + Templatize systemd unit files for cross distro deltas. [Ryan Harper]
  + sysconfig: ipv6 and default gateway fixes. [Ryan Harper] (LP: #1704872)
  + net: fix renaming of nics to support mac addresses written in upper
  + case. (LP: #1705147)
  + tests: fixes for issues uncovered when moving to python 3.6.
  + (LP: #1703697)
  + sysconfig: include GATEWAY value if set in subnet
  + [Ryan Harper] (LP: #1686856)
  + Scaleway: add datasource with user and vendor data for Scaleway.
  + [Julien Castets]
  + Support comments in content read by load_shell_content.
  + cloudinitlocal fail to run during boot [Hongjiang Zhang]
  + doc: fix disk setup example table_type options
  + [Sandor Zeestraten] (LP: #1703789)
  + tools: Fix exception handling. [Joonas Kylmälä] (LP: #1701527)
  + tests: fix usage of mock in GCE test.
  + test_gce: Fix invalid mock of platform_reports_gce to return False
  + [Chad Smith]
  + test: fix incorrect keyid for apt repository.
  + [Joshua Powers] (LP: #1702717)
  + tests: Update version of pylxd [Joshua Powers]
  + write_files: Remove log from helper function signatures.
  + [Andrew Jorgensen]
  + doc: document the cmdline options to NoCloud [Brian Candler]
  + read_dmi_data: always return None when inside a container. (LP: #1701325)
  + requirements.txt: remove trailing white space.
  + Azure: Add network-config, Refactor net layer to handle duplicate macs.
  + [Ryan Harper]
  + Tests: Simplify the check on ssh-import-id [Joshua Powers]
  + tests: update ntp tests after sntp added [Joshua Powers]
  + FreeBSD: Make freebsd a variant, fix unittests and
  + tools/build-on-freebsd.
  + FreeBSD: fix test failure
  + FreeBSD: replace ifdown/ifup with "ifconfig down" and "ifconfig up".
  + [Hongjiang Zhang] (LP: #1697815)
  + FreeBSD: fix cdrom mounting failure if /mnt/cdrom/secure did not exist.
  + [Hongjiang Zhang] (LP: #1696295)
  + main: Don't use templater to format the welcome message
  + [Andrew Jorgensen]
  + docs: Automatically generate module docs form schema if present.
  + [Chad Smith]
  + debian: fix path comment in /etc/hosts template.
  + [Jens Sandmann] (LP: #1606406)
  + suse: add hostname and fully qualified domain to template.
  + [Jens Sandmann]
  + write_file(s): Print permissions as octal, not decimal [Andrew Jorgensen]
  + ci deps: Add --test-distro to read-dependencies to install all deps
  + [Chad Smith]
  + tools/run-centos: cleanups and move to using read-dependencies
  + pkg build ci: Add make ci-deps-&lt;distro&gt; target to install pkgs
  + [Chad Smith]
  + systemd: make cloud-final.service run before apt daily services.
  + (LP: #1693361)
  + selinux: Allow restorecon to be non-fatal. [Ryan Harper] (LP: #1686751)
  + net: Allow netinfo subprocesses to return 0 or 1.
  + [Ryan Harper] (LP: #1686751)
  + net: Allow for NetworkManager configuration [Ryan McCabe] (LP: #1693251)
  + Use distro release version to determine if we use systemd in redhat spec
  + [Ryan Harper]
  + net: normalize data in network_state object
  + Integration Testing: tox env, pyxld 2.2.3, and revamp framework
  + [Wesley Wiedenmeier]
  + Chef: Update omnibus url to chef.io, minor doc changes. [JJ Asghar]
  + tools: add centos scripts to build and test [Joshua Powers]
  + Drop cheetah python module as it is not needed by trunk [Ryan Harper]
  + rhel/centos spec cleanups.
  + cloud.cfg: move to a template.  setup.py changes along the way.
  + Makefile: add deb-src and srpm targets. use PYVER more places.
  + makefile: fix python 2/3 detection in the Makefile [Chad Smith]
  + snap: Removing snapcraft plug line [Joshua Powers] (LP: #1695333)
  + RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1696176)
  + test: Fix pyflakes complaint of unused import.
  + [Joshua Powers] (LP: #1695918)
  + NoCloud: support seed of nocloud from smbios information
  + [Vladimir Pouzanov] (LP: #1691772)
  + net: when selecting a network device, use natural sort order
  + [Marc-Aurèle Brothier]
  + fix typos and remove whitespace in various docs [Stephan Telling]
  + systemd: Fix typo in comment in cloud-init.target. [Chen-Han Hsiao]
  + Tests: Skip jsonschema related unit tests when dependency is absent.
  + [Chad Smith] (LP: #1695318)
  + azure: remove accidental duplicate line in merge.
  + azure: identify platform by well known value in chassis asset tag.
  + [Chad Smith] (LP: #1693939)
  + tools/net-convert.py: support old cloudinit versions by using kwargs.
  + ntp: Add schema definition and passive schema validation.
  + [Chad Smith] (LP: #1692916)
  + Fix eni rendering for bridge params that require repeated key for
  + values. [Ryan Harper]
  + net: remove systemd link file writing from eni renderer [Ryan Harper]
  + AliYun: Enable platform identification and enable by default.
  + [Junjie Wang] (LP: #1638931)
  + net: fix reading and rendering addresses in cidr format.
  + [Dimitri John Ledkov] (LP: #1689346, #1684349)
  + disk_setup: udev settle before attempting partitioning or fs creation.
  + (LP: #1692093)
  + GCE: Update the attribute used to find instance SSH keys.
  + [Daniel Watkins] (LP: #1693582)
  + nplan: For bonds, allow dashed or underscore names of keys.
  + [Dimitri John Ledkov] (LP: #1690480)
  + python2.6: fix unit tests usage of assertNone and format.
  + test: update docstring on test_configured_list_with_none
  + fix tools/ds-identify to not write None twice.
  + tox/build: do not package depend on style requirements.
  + cc_ntp: Restructure cc_ntp unit tests. [Chad Smith] (LP: #1692794)
  + flake8: move the pinned version of flake8 up to 3.3.0
  + tests: Apply workaround for snapd bug in test case. [Joshua Powers]
  + RHEL/CentOS: Fix dual stack IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1679817, #1685534, #1685532)
  + disk_setup: fix several issues with gpt disk partitions. (LP: #1692087)
  + function spelling &amp; docstring update [Joshua Powers]
  + Fixing wrong file name regression. [Joshua Powers]
  + tox: move pylint target to 1.7.1
  + Fix get_interfaces_by_mac for empty macs (LP: #1692028)
  + DigitalOcean: remove routes except for the public interface.
  + [Ben Howard] (LP: #1681531.)
  + netplan: pass macaddress, when specified, for vlans
  + [Dimitri John Ledkov] (LP: #1690388)
  + doc: various improvements for the docs on cc_users_groups.
  + [Felix Dreissig]
  + cc_ntp: write template before installing and add service restart
  + [Ryan Harper] (LP: #1645644)
  + cloudstack: fix tests to avoid accessing /var/lib/NetworkManager
  + [Lars Kellogg-Stedman]
  + tests: fix hardcoded path to mkfs.ext4 [Joshua Powers] (LP: #1691517)
  + Actually skip warnings when .skip file is present.
  + [Chris Brinker] (LP: #1691551)
  + netplan: fix netplan render_network_state signature.
  + [Dimitri John Ledkov] (LP: #1685944)
  + Azure: fix reformatting of ephemeral disks on resize to large types.
  + (LP: #1686514)
  + Revert "tools/net-convert: fix argument order for render_network_state"
  + make deb: Add devscripts dependency for make deb. Cleanup
  + packages/bddeb. [Chad Smith] (LP: #1685935)
  + tools/net-convert: fix argument order for render_network_state
  + [Ryan Harper] (LP: #1685944)
  + openstack: fix log message copy/paste typo in _get_url_settings
  + [Lars Kellogg-Stedman]
  + unittests: fix unittests run on centos [Joshua Powers]
  + Improve detection of snappy to include os-release and kernel cmdline.
  + (LP: #1689944)
  + Add address to config entry generated by _klibc_to_config_entry.
  + [Julien Castets] (LP: #1691135)
  + sysconfig: Raise ValueError when multiple default gateways are present.
  + [Chad Smith] (LP: #1687485)
  + FreeBSD: improvements and fixes for use on Azure
  + [Hongjiang Zhang] (LP: #1636345)
  + Add unit tests for ds-identify, fix Ec2 bug found.
  + fs_setup: if cmd is specified, use shell interpretation.
  + [Paul Meyer] (LP: #1687712)
  + doc: document network configuration defaults policy and formats.
  + [Ryan Harper]
  + Fix name of "uri" key in docs for "cc_apt_configure" module
  + [Felix Dreissig]
  + tests: Enable artful [Joshua Powers]
  + nova-lxd: read product_name from environment, not platform.
  + (LP: #1685810)
  + Fix yum repo config where keys contain array values
  + [Dylan Perry] (LP: #1592150)
  + template: Update debian backports template [Joshua Powers] (LP: #1627293)
  + rsyslog: replace ~ with stop [Joshua Powers] (LP: #1367899)
  + Doc: add additional RTD examples [Joshua Powers] (LP: #1459604)
  + Fix growpart for some cases when booted with root=PARTUUID.
  + (LP: #1684869)
  + pylint: update output style to parseable [Joshua Powers]
  + pylint: fix all logging warnings [Joshua Powers]
  + CloudStack: Add NetworkManager to list of supported DHCP lease dirs.
  + [Syed]
  + net: kernel lies about vlans not stealing mac addresses, when they do
  + [Dimitri John Ledkov] (LP: #1682871)
  + ds-identify: Check correct path for "latest" config drive
  + [Daniel Watkins] (LP: #1673637)
  + doc: Fix example for resolve.conf configuration.
  + [Jon Grimm] (LP: #1531582)
  + Fix examples that reference upstream chef repository.
  + [Jon Grimm] (LP: #1678145)
  + doc: correct grammar and improve clarity in merging documentation.
  + [David Tagatac]
  + doc: Add missing doc link to snap-config module. [Ryan Harper]
  + snap: allows for creating cloud-init snap [Joshua Powers]
  + DigitalOcean: assign IPv4ll address to lowest indexed interface.
  + [Ben Howard]
  + DigitalOcean: configure all NICs presented in meta-data. [Ben Howard]
  + Remove (and/or fix) URL shortener references [Jon Grimm] (LP: #1669727)
  + HACKING.rst: more info on filling out contributors agreement.
  + util: teach write_file about copy_mode option
  + [Lars Kellogg-Stedman] (LP: #1644064)
  + DigitalOcean: bind resolvers to loopback interface. [Ben Howard]
  + tests: fix AltCloud tests to not rely on blkid (LP: #1636531)
  + OpenStack: add 'dvs' to the list of physical link types. (LP: #1674946)
  + Fix bug that resulted in an attempt to rename bonds or vlans.
  + (LP: #1669860)
  + tests: update OpenNebula and Digital Ocean to not rely on host
  + interfaces.
  + net: in netplan renderer delete known image-builtin content.
  + (LP: #1675576)
  + doc: correct grammar in capabilities.rst [David Tagatac]
  + ds-identify: fix detecting of maas datasource. (LP: #1677710)
  + netplan: remove debugging prints, add debug logging [Ryan Harper]
  + ds-identify: do not write None twice to datasource_list.
  + support resizing partition and rootfs on system booted without
  + initramfs. [Steve Langasek] (LP: #1677376)
  + apt_configure: run only when needed. (LP: #1675185)
  + OpenStack: identify OpenStack by product 'OpenStack Compute'.
  + (LP: #1675349)
  + GCE: Search GCE in ds-identify, consider serial number in check.
  + (LP: #1674861)
  + Add support for setting hashed passwords [Tore S. Lonoy] (LP: #1570325)
  + Fix filesystem creation when using "partition: auto"
  + [Jonathan Ballet] (LP: #1634678)
  + ConfigDrive: support reading config drive data from /config-drive.
  + (LP: #1673411)
  + ds-identify: fix detection of Bigstep datasource. (LP: #1674766)
  + test: add running of pylint [Joshua Powers]
  + ds-identify: fix bug where filename expansion was left on.
  + advertise network config v2 support (NETWORK_CONFIG_V2) in features.
  + Bigstep: fix bug when executing in python3. [root]
  + Fix unit test when running in a system deployed with cloud-init.
  + Bounce network interface for Azure when using the built-in path.
  + [Brent Baude] (LP: #1674685)
  + cloudinit.net: add network config v2 parsing and rendering [Ryan Harper]
  + net: Fix incorrect call to isfile [Joshua Powers] (LP: #1674317)
  + net: add renderers for automatically selecting the renderer.
  + doc: fix config drive doc with regard to unpartitioned disks.
  + (LP: #1673818)
  + test: Adding integratiron test for password as list [Joshua Powers]
  + render_network_state: switch arguments around, do not require target
  + support 'loopback' as a device type.
  + Integration Testing: improve testcase subclassing [Wesley Wiedenmeier]
  + gitignore: adding doc/rtd_html [Joshua Powers]
  + doc: add instructions for running integration tests via tox.
  + [Joshua Powers]
  + test: avoid differences in 'date' output due to daylight savings.
  + Fix chef config module in omnibus install. [Jeremy Melvin] (LP: #1583837)
  + Add feature flags to cloudinit.version. [Wesley Wiedenmeier]
  + tox: add a citest environment
  + Further fix regression to support 'password' for default user.
  + fix regression when no chpasswd/list was provided.
  + Support chpasswd/list being a list in addition to a string.
  + [Sergio Lystopad] (LP: #1665694)
  + doc: Fix configuration example for cc_set_passwords module.
  + [Sergio Lystopad] (LP: #1665773)
  + net: support both ipv4 and ipv6 gateways in sysconfig.
  + [Lars Kellogg-Stedman] (LP: #1669504)
  + net: do not raise exception for &gt; 3 nameservers
  + [Lars Kellogg-Stedman] (LP: #1670052)
  + ds-identify: report cleanups for config and exit value. (LP: #1669949)
  + ds-identify: move default setting for Ec2/strict_id to a global.
  + ds-identify: record not found in cloud.cfg and always add None.
  + Support warning if the used datasource is not in ds-identify's list.
  + tools/ds-identify: make report mode write namespaced results.
  + Move warning functionality to cloudinit/warnings.py
  + Add profile.d script for showing warnings on login.
  + Z99-cloud-locale-test.sh: install and make consistent.
  + tools/ds-identify: look at cloud.cfg when looking for ec2 strict_id.
  + tools/ds-identify: disable vmware_guest_customization by default.
  + tools/ds-identify: ovf identify vmware guest customization.
  + Identify Brightbox as an Ec2 datasource user. (LP: #1661693)
  + DatasourceEc2: add warning message when not on AWS.
  + ds-identify: add reading of datasource/Ec2/strict_id
  + tools/ds-identify: add support for found or maybe contributing config.
  + tools/ds-identify: read the seed directory on Ec2
  + tools/ds-identify: use quotes in local declarations.
  + tools/ds-identify: fix documentation of policy setting in a comment.
  + ds-identify: only run once per boot unless --force is given.
  + flake8: fix flake8 complaints in previous commit.
  + net: correct errors in cloudinit/net/sysconfig.py
  + [Lars Kellogg-Stedman] (LP: #1665441)
  + ec2_utils: fix MetadataLeafDecoder that returned bytes on empty
  + apply the runtime configuration written by ds-identify.
  + ds-identify: fix checking for filesystem label (LP: #1663735)
  + ds-identify: read ds=nocloud properly (LP: #1663723)
  + support nova-lxd by reading platform from environment of pid 1.
  + (LP: #1661797)
  + ds-identify: change aarch64 to use the default for non-dmi systems.
  + Remove style checking during build and add latest style checks to tox
  + [Joshua Powers] (LP: #1652329)
  + code-style: make master pass pycodestyle (2.3.1) cleanly, currently:
  + [Joshua Powers]
  + manual_cache_clean: When manually cleaning touch a file in instance dir.
  + Add tools/ds-identify to identify datasources available.
  + Fix small typo and change iso-filename for consistency [Robin Naundorf]
  + Fix eni rendering of multiple IPs per interface
  + [Ryan Harper] (LP: #1657940)
  + tools/mock-meta: support python2 or python3 and ipv6 in both.
  + tests: remove executable bit on test_net, so it runs, and fix it.
  + tests: No longer monkey patch httpretty for python 3.4.2
  + Add 3 ecdsa-sha2-nistp* ssh key types now that they are standardized
  + [Lars Kellogg-Stedman] (LP: #1658174)
  + reset httppretty for each test [Lars Kellogg-Stedman] (LP: #1658200)
  + build: fix running Make on a branch with tags other than master
  + EC2: Do not cache security credentials on disk
  + [Andrew Jorgensen] (LP: #1638312)
  + doc: Fix typos and clarify some aspects of the part-handler
  + [Erik M. Bray]
  + doc: add some documentation on OpenStack datasource.
  + OpenStack: Use timeout and retries from config in get_data.
  + [Lars Kellogg-Stedman] (LP: #1657130)
  + Fixed Misc issues related to VMware customization. [Sankar Tanguturi]
  + Fix minor docs typo: perserve &gt; preserve [Jeremy Bicha]
  + Use dnf instead of yum when available
  + [Lars Kellogg-Stedman] (LP: #1647118)
  + validate-yaml: use python rather than explicitly python3
  + Get early logging logged, including failures of cmdline url.
- From 0.7.9
  + doc: adjust headers in tests documentation for consistency.
  + pep8: fix issue found in zesty build with pycodestyle.
  + integration test: initial commit of integration test framework
  + [Wesley Wiedenmeier]
  + LICENSE: Allow dual licensing GPL-3 or Apache 2.0 [Jon Grimm]
  + Fix config order of precedence, putting kernel command line over system.
  + [Wesley Wiedenmeier] (LP: #1582323)
  + pep8: whitespace fix
  + Update the list of valid ssh keys. [Michael Felt]
  + network: add ENI unit test for statically rendered routes.
  + set_hostname: avoid erroneously appending domain to fqdn
  + [Lars Kellogg-Stedman] (LP: #1647910)
  + doc: change 'nobootwait' to 'nofail' in docs [Anhad Jai Singh]
  + Replace an expired bit.ly link in code comment.
  + user-groups: fix bug when groups was provided as string and had spaces
  + (LP: #1354694)
  + mounts: use mount -a again to accomplish mounts (LP: #1647708)
  + CloudSigma: Fix bug where datasource was not loaded in local search.
  + (LP: #1648380)
  + when adding a user, strip whitespace from group list [Lars Kellogg-Stedman]
  + (LP: #1354694)
  + fix decoding of utf-8 chars in yaml test
  + Replace usage of sys_netdev_info with read_sys_net (LP: #1625766)
  + fix problems found in python2.6 test.
  + OpenStack: extend physical types to include hyperv, hw_veb, vhost_user.
  + (LP: #1642679)
  + tests: fix assumptions that expected no eth0 in system. (LP: #1644043)
  + net/cmdline: Consider ip= or ip6= on command line not only ip=
  + (LP: #1639930)
  + Just use file logging by default (LP: #1643990)
  + Improve formatting for ProcessExecutionError [Wesley Wiedenmeier]
  + flake8: fix trailing white space
  + Doc: various documentation fixes [Sean Bright]
  + cloudinit/config/cc_rh_subscription.py: Remove repos before adding
  + [Brent Baude]
  + packages/redhat: fix rpm spec file.
  + main: set TZ in environment if not already set. [Ryan Harper]
  + Azure: No longer rely on walinux agent. (LP: #1538522)
  + disk_setup: Use sectors as unit when formatting MBR disks with sfdisk.
  + [Daniel Watkins] (LP: #1460715)
  + Add activate_datasource, for datasource specific code paths. (LP: #1611074)
  + systemd: cloud-init-local use RequiresMountsFor=/var/lib/cloud
  + (LP: #1642062)
  + systemd: cloud-init remove After=systemd-networkd-wait-online
  + systemd: cloud-init-local change Before basic to sysinit
  + pep8: fix style errors reported by pycodestyle 2.1.0
  + systemd: drop both Wants and After local-fs.target
  + systemd: networking service adjustments. (LP: #1636912)
  + systemd: replace Before=basic.target, dbus.target with sysinit.target
  + (LP: #1629797)
  + doc: Add documentation on stages of boot.
  + doc: make the RST files consistently formated and other improvements.
  + Ec2: fix syntax and tox in previous commit.
  + Ec2: protect against non-dictionary in block-device-mapping.
  + doc: fixed example to not overwrite /etc/hosts [Chris Glass]
  + Doc: fix spelling / typos in ca_certs and scripts_vendor.
  + pyflakes: fix issue with pyflakes 1.3 found in ubuntu zesty-proposed.
  + net/cmdline: Further adjustments to ipv6 support [LaMont Jones]
  + (LP: #1621615)
  + Add coverage dependency to bddeb to fix package build.
  + doc: improve HACKING.rst file
  + dmidecode: Allow dmidecode to be used on aarch64 [Robert Schweikert]
  + AliYun: Add new datasource for Ali-Cloud ECS [kaihuan.pkh]
  + Add coverage collection to tox unit tests. [Joshua Powers]
  + cc_users_groups: fix remaing call to ds.normalize_user_groups [Ryan Harper]
  + disk-config: udev settle after partitioning in gpt format. (LP: #1626243)
  + unittests: do not read system /etc/cloud/cloud.cfg.d (LP: #1635350)
  + Add documentation for logging features. [Wesley Wiedenmeier]
  + Add support for snap create-user on Ubuntu Core images. [Ryan Harper]
  + Fix sshd restarts for rhel distros. [Jim Gorz]
  + OpenNebula: replace 'ip' parsing with cloudinit.net usage.
  + Fix python2.6 things found running in centos 6.
  + Move user/group functions to new ug_util file
  + DigitalOcean: enable usage of data source by default.
  + update Gentoo initscripts to run in the correct order [Matthew Thode]
  + MAAS: improve the main of datasource to look at kernel cmdline config.
  + tests: silence the Cheetah UserWarning about NameMapper C version.
  + systemd: Run cloud-init.service Before dbus.socket not dbus.target
  + [Daniel Watkins] (LP: #1629797)
  + systemd: run cloud-init.service Before dbus.service (LP: #1629797)
  + unittests: fix use of mock 2.0 'assert_called' when running make check
  + [Ryan Harper]
  + Improve module documentation and doc cleanup. [Wesley Wiedenmeier]
  + lxd: Update network config for LXD 2.3 [Stéphane Graber]
  + DigitalOcean: use meta-data for network configruation [Ben Howard]
  + ntp: move to run after apt configuration (LP: #1628337)
  + Decode unicode types in decode_binary [Robert Schweikert]
  + systemd: Ensure that cloud-init-local happens before NetworkManager
  + Allow ephemeral drive to be unpartitioned [Paul Meyer]
  + subp: add 'update_env' argument
  + net: support reading ipv6 dhcp config from initramfs [LaMont Jones]
  + (LP: #1621615, #1621507)
  + Adjust mounts and disk configuration for systemd. (LP: #1611074)
  + dmidecode: run dmidecode only on i?86 or x86_64 arch. [Robert Schweikert]
  + systemd: put cloud-init.target After multi-user.target (LP: #1623868)</changelog>
  <changelog author="rjschwei@suse.com" date="1509624000">- Fix sed expression to set distro properly (boo#1063716)</changelog>
  <changelog author="rjschwei@suse.com" date="1510142400">- Add cloud-init-hosts-template.patch (bsc#1064594)
  + Properly expand the /etc/hosst file when manage_etc_hosts is set</changelog>
  <changelog author="rjschwei@suse.com" date="1510401600">- Add cloud-init-ntp-conf-suse.patch
  + ntp configuration was broken on sles and opensuse lp#1726572</changelog>
  <changelog author="rjschwei@suse.com" date="1510833600">- Add cloud-init-translate-netconf-ipv4-keep-gw.patch (boo#1064854)
  + Properly insert the gateway information for v1 json network config data</changelog>
  <changelog author="rjschwei@suse.com" date="1510920000">- Fix variable name in cloud-init-translate-netconf-ipv4-keep-gw.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
  <changelog author="rjschwei@suse.com" date="1512561600">- Add cloud-init-reproduce-build.patch (boo#1069635)
  + Make builds reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Fix usage of fdupes macro: there is no '-n' parameter to the
  macro (there would be to fdupes, the command, though).</changelog>
  <changelog author="gmoro@suse.com" date="1516276800">- patch distribution detection until a fix is delivered to python3 (bsc#997614)
  add cloud-init-add-variant-cloudcfg.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1517227200">- Update to version 17.2 (boo#1069635, bsc#1072811)
  + Add cloud-init-skip-ovf-tests.patch
  + Add cloud-init-no-python-linux-dist.patch
  + Add 0001-switch-to-using-iproute2-tools.patch
  + Add 0001-Support-chrony-configuration-lp-1731619.patch
  + Add 0002-Disable-method-deprecation-warning-for-pylint.patch
  + Add 0003-Distro-dependent-chrony-config-file.patch
  + removed cloud-init-add-variant-cloudcfg.patch replaced by
    cloud-init-no-python-linux-dist.patch
  + removed zypp_add_repos.diff included upstream
  + removed zypp_add_repo_test.patch included upstream
  + removed cloud-init-hosts-template.patch included upstream
  + removed cloud-init-more-tasks.patch included upstream
  + removed cloud-init-final-no-apt.patch included upstream
  + removed cloud-init-ntp-conf-suse.patch included upstream
  + removed cloud-init-break-cycle-local-service.patch included upstream
  + removed cloud-init-reproduce-build.patch included upstream
  + For the complete changelog see https://launchpad.net/cloud-init/trunk/17.2</changelog>
  <changelog author="dmueller@suse.com" date="1517313600">- drop dependency on boto (only used in examples, and
  should really be ported to botocore/boto3 instead)</changelog>
  <changelog author="rjschwei@suse.com" date="1518523200">- Fix logfile permission settings (bsc#1080595)
  + Add 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch</changelog>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
</package>
<package pkgid="e083d549a3083e8b90af19ad442c21ce4f8650b300b8ae788030727884e93db6" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="18.2" rel="lp150.2.3.1"/>
  <changelog author="kukuk@suse.de" date="1505736000">- python_sitelib does not seem to exist for non single-spec
  python modules, use python2_sitelib and python3_sitelib instead.</changelog>
  <changelog author="dmueller@suse.com" date="1505908800">- add skip-argparse-on-python3.patch: don't depend on argparse
  for python3, it is builtin there (as of python 3.2, so the
  patch should be good enough)</changelog>
  <changelog author="rjschwei@suse.com" date="1505995200">- Update to version 17.1 (bsc#1035106)
  + Version numbering scheme change now YY.NUMBER_OF_RELESE_THAT_YEAR
  + Remove cloud.cfg.suse, use generated default config file
  + Remove addopenSUSEBase.patch, included upstream
  + Remove suseIntegratedHandler.patch, included upstream
  + Remove openSUSEhostsTemplate.diff, included upstream
  + Remove cloud-init-handle-no-carrier.patch, included upstream
  + Remove cloud-init-digital-ocean-datasource.patch,
    use upstream implementation
  + Remove cloud-init-digital-ocean-datasource-enable-by-default.patch,
    use upstream implementation
  + Remove cloud-init-fix-unicode-handling-binarydecode.patch,
    included upstream
  + Remove cloud-init-no-dmidecode-on-ppc64.patch, included upstream
  + Remove dataSourceOpenNebula.patch, use upstream implementation
  + Remove setupSUSEsysVInit.diff, included upstream
  + Remove suseSysVInit.diff, included upstream
  + Remove cloud-init-finalbeforelogin.patch, don't block login
  + Remove cloud-init-handle-not-implemented-query.patch, query option removed
  + Remove cloud-init-spceandtabs-clean.patch, indentation fixed upstream
  + Remove dynamicInitCmd.diff, different solution from upstream
  + Added cloud-init-more-tasks.patch, (bsc#1047363)
    replace cloud-init-finalbeforelogin.patch
  + Forward port cloud-init-python2-sigpipe.patch
  + Remove cloud-init-net-eni.patch, included upstream
  + Remove cloud-init-service.patch, included upstream
  + Forward port cloud-init-sysconfig-netpathfix.patch
  + Remove cloud-init-net-sysconfig-lp1665441.patch, included upstream
  + Remove cloud-init-python26.patch, included upstream
  + Remove skip-argparse-on-python3.patch
  + Add cloud-init-tests-set-exec.patch
  + Add cloud-init-final-no-apt.patch
  + Add zypp_add_repo_test.patch
  + doc: document GCE datasource. [Arnd Hannemann]
  + suse: updates to templates to support openSUSE and SLES.
  + [Robert Schweikert] (LP: #1718640)
  + suse: Copy sysvinit files from redhat with slight changes.
  + [Robert Schweikert] (LP: #1718649)
  + docs: fix sphinx module schema documentation [Chad Smith]
  + tests: Add cloudinit package to all test targets [Chad Smith]
  + Makefile: No longer look for yaml files in obsolete ./bin/.
  + tests: fix ds-identify unit tests to set EC2_STRICT_ID_DEFAULT.
  + ec2: Fix maybe_perform_dhcp_discovery to use /var/tmp as a tmpdir
  + [Chad Smith] (LP: #1717627)
  + Azure: wait longer for SSH pub keys to arrive.
  + [Paul Meyer] (LP: #1717611)
  + GCE: Fix usage of user-data. (LP: #1717598)
  + cmdline: add collect-logs subcommand. [Chad Smith] (LP: #1607345)
  + CloudStack: consider dhclient lease files named with a hyphen.
  + (LP: #1717147)
  + resizefs: Drop check for read-only device file, do not warn on
  + overlayroot. [Chad Smith]
  + Do not provide systemd-fsck drop-in which could cause ordering cycles.
  + [Balint Reczey] (LP: #1717477)
  + tests: Enable the NoCloud KVM platform [Joshua Powers]
  + resizefs: pass mount point to xfs_growfs [Dusty Mabe]
  + vmware: Enable nics before sending the SUCCESS event. [Sankar Tanguturi]
  + cloud-config modules: honor distros definitions in each module
  + [Chad Smith] (LP: #1715738, #1715690)
  + chef: Add option to pin chef omnibus install version
  + [Ethan Apodaca] (LP: #1462693)
  + tests: execute: support command as string [Joshua Powers]
  + schema and docs: Add jsonschema to resizefs and bootcmd modules
  + [Chad Smith]
  + tools: Add xkvm script, wrapper around qemu-system [Joshua Powers]
  + vmware customization: return network config format
  + [Sankar Tanguturi] (LP: #1675063)
  + Ec2: only attempt to operate at local mode on known platforms.
  + (LP: #1715128)
  + Use /run/cloud-init for tempfile operations. (LP: #1707222)
  + ds-identify: Make OpenStack return maybe on arch other than intel.
  + (LP: #1715241)
  + tests: mock missed openstack metadata uri network_data.json
  + [Chad Smith] (LP: #1714376)
  + relocate tests/unittests/helpers.py to cloudinit/tests
  + [Lars Kellogg-Stedman]
  + tox: add nose timer output [Joshua Powers]
  + upstart: do not package upstart jobs, drop ubuntu-init-switch module.
  + tests: Stop leaking calls through unmocked metadata addresses
  + [Chad Smith] (LP: #1714117)
  + distro: allow distro to specify a default locale [Ryan Harper]
  + tests: fix two recently added tests for sles distro.
  + url_helper: dynamically import oauthlib import from inside oauth_headers
  + [Chad Smith]
  + tox: make xenial environment run with python3.6
  + suse: Add support for openSUSE and return SLES to a working state.
  + [Robert Schweikert]
  + GCE: Add a main to the GCE Datasource.
  + ec2: Add IPv6 dhcp support to Ec2DataSource. [Chad Smith] (LP: #1639030)
  + url_helper: fail gracefully if oauthlib is not available
  + [Lars Kellogg-Stedman] (LP: #1713760)
  + cloud-init analyze: fix issues running under python 2. [Andrew Jorgensen]
  + Configure logging module to always use UTC time.
  + [Ryan Harper] (LP: #1713158)
  + Log a helpful message if a user script does not include shebang.
  + [Andrew Jorgensen]
  + cli: Fix command line parsing of coniditionally loaded subcommands.
  + [Chad Smith] (LP: #1712676)
  + doc: Explain error behavior in user data include file format.
  + [Jason Butz]
  + cc_landscape &amp; cc_puppet: Fix six.StringIO use in writing configs
  + [Chad Smith] (LP: #1699282, #1710932)
  + schema cli: Add schema subcommand to cloud-init cli and cc_runcmd schema
  + [Chad Smith]
  + Debian: Remove non-free repositories from apt sources template.
  + [Joonas Kylmälä] (LP: #1700091)
  + tools: Add tooling for basic cloud-init performance analysis.
  + [Chad Smith] (LP: #1709761)
  + network: add v2 passthrough and fix parsing v2 config with bonds/bridge
  + params [Ryan Harper] (LP: #1709180)
  + doc: update capabilities with features available, link doc reference,
  + cli example [Ryan Harper]
  + vcloud directory: Guest Customization support for passwords
  + [Maitreyee Saikia]
  + ec2: Allow Ec2 to run in init-local using dhclient in a sandbox.
  + [Chad Smith] (LP: #1709772)
  + cc_ntp: fallback on timesyncd configuration if ntp is not installable
  + [Ryan Harper] (LP: #1686485)
  + net: Reduce duplicate code. Have get_interfaces_by_mac use
  + get_interfaces.
  + tests: Fix build tree integration tests [Joshua Powers]
  + sysconfig: Dont repeat header when rendering resolv.conf
  + [Ryan Harper] (LP: #1701420)
  + archlinux: Fix bug with empty dns, do not render 'lo' devices.
  + (LP: #1663045, #1706593)
  + cloudinit.net: add initialize_network_device function and tests
  + [Chad Smith]
  + makefile: fix ci-deps-ubuntu target [Chad Smith]
  + tests: adjust locale integration test to parse default locale.
  + tests: remove 'yakkety' from releases as it is EOL.
  + tests: Add initial tests for EC2 and improve a docstring.
  + locale: Do not re-run locale-gen if provided locale is system default.
  + archlinux: fix set hostname usage of write_file.
  + [Joshua Powers] (LP: #1705306)
  + sysconfig: support subnet type of 'manual'.
  + tools/run-centos: make running with no argument show help.
  + Drop rand_str() usage in DNS redirection detection
  + [Bob Aman] (LP: #1088611)
  + sysconfig: use MACADDR on bonds/bridges to configure mac_address
  + [Ryan Harper] (LP: #1701417)
  + net: eni route rendering missed ipv6 default route config
  + [Ryan Harper] (LP: #1701097)
  + sysconfig: enable mtu set per subnet, including ipv6 mtu
  + [Ryan Harper] (LP: #1702513)
  + sysconfig: handle manual type subnets [Ryan Harper] (LP: #1687725)
  + sysconfig: fix ipv6 gateway routes [Ryan Harper] (LP: #1694801)
  + sysconfig: fix rendering of bond, bridge and vlan types.
  + [Ryan Harper] (LP: #1695092)
  + Templatize systemd unit files for cross distro deltas. [Ryan Harper]
  + sysconfig: ipv6 and default gateway fixes. [Ryan Harper] (LP: #1704872)
  + net: fix renaming of nics to support mac addresses written in upper
  + case. (LP: #1705147)
  + tests: fixes for issues uncovered when moving to python 3.6.
  + (LP: #1703697)
  + sysconfig: include GATEWAY value if set in subnet
  + [Ryan Harper] (LP: #1686856)
  + Scaleway: add datasource with user and vendor data for Scaleway.
  + [Julien Castets]
  + Support comments in content read by load_shell_content.
  + cloudinitlocal fail to run during boot [Hongjiang Zhang]
  + doc: fix disk setup example table_type options
  + [Sandor Zeestraten] (LP: #1703789)
  + tools: Fix exception handling. [Joonas Kylmälä] (LP: #1701527)
  + tests: fix usage of mock in GCE test.
  + test_gce: Fix invalid mock of platform_reports_gce to return False
  + [Chad Smith]
  + test: fix incorrect keyid for apt repository.
  + [Joshua Powers] (LP: #1702717)
  + tests: Update version of pylxd [Joshua Powers]
  + write_files: Remove log from helper function signatures.
  + [Andrew Jorgensen]
  + doc: document the cmdline options to NoCloud [Brian Candler]
  + read_dmi_data: always return None when inside a container. (LP: #1701325)
  + requirements.txt: remove trailing white space.
  + Azure: Add network-config, Refactor net layer to handle duplicate macs.
  + [Ryan Harper]
  + Tests: Simplify the check on ssh-import-id [Joshua Powers]
  + tests: update ntp tests after sntp added [Joshua Powers]
  + FreeBSD: Make freebsd a variant, fix unittests and
  + tools/build-on-freebsd.
  + FreeBSD: fix test failure
  + FreeBSD: replace ifdown/ifup with "ifconfig down" and "ifconfig up".
  + [Hongjiang Zhang] (LP: #1697815)
  + FreeBSD: fix cdrom mounting failure if /mnt/cdrom/secure did not exist.
  + [Hongjiang Zhang] (LP: #1696295)
  + main: Don't use templater to format the welcome message
  + [Andrew Jorgensen]
  + docs: Automatically generate module docs form schema if present.
  + [Chad Smith]
  + debian: fix path comment in /etc/hosts template.
  + [Jens Sandmann] (LP: #1606406)
  + suse: add hostname and fully qualified domain to template.
  + [Jens Sandmann]
  + write_file(s): Print permissions as octal, not decimal [Andrew Jorgensen]
  + ci deps: Add --test-distro to read-dependencies to install all deps
  + [Chad Smith]
  + tools/run-centos: cleanups and move to using read-dependencies
  + pkg build ci: Add make ci-deps-&lt;distro&gt; target to install pkgs
  + [Chad Smith]
  + systemd: make cloud-final.service run before apt daily services.
  + (LP: #1693361)
  + selinux: Allow restorecon to be non-fatal. [Ryan Harper] (LP: #1686751)
  + net: Allow netinfo subprocesses to return 0 or 1.
  + [Ryan Harper] (LP: #1686751)
  + net: Allow for NetworkManager configuration [Ryan McCabe] (LP: #1693251)
  + Use distro release version to determine if we use systemd in redhat spec
  + [Ryan Harper]
  + net: normalize data in network_state object
  + Integration Testing: tox env, pyxld 2.2.3, and revamp framework
  + [Wesley Wiedenmeier]
  + Chef: Update omnibus url to chef.io, minor doc changes. [JJ Asghar]
  + tools: add centos scripts to build and test [Joshua Powers]
  + Drop cheetah python module as it is not needed by trunk [Ryan Harper]
  + rhel/centos spec cleanups.
  + cloud.cfg: move to a template.  setup.py changes along the way.
  + Makefile: add deb-src and srpm targets. use PYVER more places.
  + makefile: fix python 2/3 detection in the Makefile [Chad Smith]
  + snap: Removing snapcraft plug line [Joshua Powers] (LP: #1695333)
  + RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1696176)
  + test: Fix pyflakes complaint of unused import.
  + [Joshua Powers] (LP: #1695918)
  + NoCloud: support seed of nocloud from smbios information
  + [Vladimir Pouzanov] (LP: #1691772)
  + net: when selecting a network device, use natural sort order
  + [Marc-Aurèle Brothier]
  + fix typos and remove whitespace in various docs [Stephan Telling]
  + systemd: Fix typo in comment in cloud-init.target. [Chen-Han Hsiao]
  + Tests: Skip jsonschema related unit tests when dependency is absent.
  + [Chad Smith] (LP: #1695318)
  + azure: remove accidental duplicate line in merge.
  + azure: identify platform by well known value in chassis asset tag.
  + [Chad Smith] (LP: #1693939)
  + tools/net-convert.py: support old cloudinit versions by using kwargs.
  + ntp: Add schema definition and passive schema validation.
  + [Chad Smith] (LP: #1692916)
  + Fix eni rendering for bridge params that require repeated key for
  + values. [Ryan Harper]
  + net: remove systemd link file writing from eni renderer [Ryan Harper]
  + AliYun: Enable platform identification and enable by default.
  + [Junjie Wang] (LP: #1638931)
  + net: fix reading and rendering addresses in cidr format.
  + [Dimitri John Ledkov] (LP: #1689346, #1684349)
  + disk_setup: udev settle before attempting partitioning or fs creation.
  + (LP: #1692093)
  + GCE: Update the attribute used to find instance SSH keys.
  + [Daniel Watkins] (LP: #1693582)
  + nplan: For bonds, allow dashed or underscore names of keys.
  + [Dimitri John Ledkov] (LP: #1690480)
  + python2.6: fix unit tests usage of assertNone and format.
  + test: update docstring on test_configured_list_with_none
  + fix tools/ds-identify to not write None twice.
  + tox/build: do not package depend on style requirements.
  + cc_ntp: Restructure cc_ntp unit tests. [Chad Smith] (LP: #1692794)
  + flake8: move the pinned version of flake8 up to 3.3.0
  + tests: Apply workaround for snapd bug in test case. [Joshua Powers]
  + RHEL/CentOS: Fix dual stack IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1679817, #1685534, #1685532)
  + disk_setup: fix several issues with gpt disk partitions. (LP: #1692087)
  + function spelling &amp; docstring update [Joshua Powers]
  + Fixing wrong file name regression. [Joshua Powers]
  + tox: move pylint target to 1.7.1
  + Fix get_interfaces_by_mac for empty macs (LP: #1692028)
  + DigitalOcean: remove routes except for the public interface.
  + [Ben Howard] (LP: #1681531.)
  + netplan: pass macaddress, when specified, for vlans
  + [Dimitri John Ledkov] (LP: #1690388)
  + doc: various improvements for the docs on cc_users_groups.
  + [Felix Dreissig]
  + cc_ntp: write template before installing and add service restart
  + [Ryan Harper] (LP: #1645644)
  + cloudstack: fix tests to avoid accessing /var/lib/NetworkManager
  + [Lars Kellogg-Stedman]
  + tests: fix hardcoded path to mkfs.ext4 [Joshua Powers] (LP: #1691517)
  + Actually skip warnings when .skip file is present.
  + [Chris Brinker] (LP: #1691551)
  + netplan: fix netplan render_network_state signature.
  + [Dimitri John Ledkov] (LP: #1685944)
  + Azure: fix reformatting of ephemeral disks on resize to large types.
  + (LP: #1686514)
  + Revert "tools/net-convert: fix argument order for render_network_state"
  + make deb: Add devscripts dependency for make deb. Cleanup
  + packages/bddeb. [Chad Smith] (LP: #1685935)
  + tools/net-convert: fix argument order for render_network_state
  + [Ryan Harper] (LP: #1685944)
  + openstack: fix log message copy/paste typo in _get_url_settings
  + [Lars Kellogg-Stedman]
  + unittests: fix unittests run on centos [Joshua Powers]
  + Improve detection of snappy to include os-release and kernel cmdline.
  + (LP: #1689944)
  + Add address to config entry generated by _klibc_to_config_entry.
  + [Julien Castets] (LP: #1691135)
  + sysconfig: Raise ValueError when multiple default gateways are present.
  + [Chad Smith] (LP: #1687485)
  + FreeBSD: improvements and fixes for use on Azure
  + [Hongjiang Zhang] (LP: #1636345)
  + Add unit tests for ds-identify, fix Ec2 bug found.
  + fs_setup: if cmd is specified, use shell interpretation.
  + [Paul Meyer] (LP: #1687712)
  + doc: document network configuration defaults policy and formats.
  + [Ryan Harper]
  + Fix name of "uri" key in docs for "cc_apt_configure" module
  + [Felix Dreissig]
  + tests: Enable artful [Joshua Powers]
  + nova-lxd: read product_name from environment, not platform.
  + (LP: #1685810)
  + Fix yum repo config where keys contain array values
  + [Dylan Perry] (LP: #1592150)
  + template: Update debian backports template [Joshua Powers] (LP: #1627293)
  + rsyslog: replace ~ with stop [Joshua Powers] (LP: #1367899)
  + Doc: add additional RTD examples [Joshua Powers] (LP: #1459604)
  + Fix growpart for some cases when booted with root=PARTUUID.
  + (LP: #1684869)
  + pylint: update output style to parseable [Joshua Powers]
  + pylint: fix all logging warnings [Joshua Powers]
  + CloudStack: Add NetworkManager to list of supported DHCP lease dirs.
  + [Syed]
  + net: kernel lies about vlans not stealing mac addresses, when they do
  + [Dimitri John Ledkov] (LP: #1682871)
  + ds-identify: Check correct path for "latest" config drive
  + [Daniel Watkins] (LP: #1673637)
  + doc: Fix example for resolve.conf configuration.
  + [Jon Grimm] (LP: #1531582)
  + Fix examples that reference upstream chef repository.
  + [Jon Grimm] (LP: #1678145)
  + doc: correct grammar and improve clarity in merging documentation.
  + [David Tagatac]
  + doc: Add missing doc link to snap-config module. [Ryan Harper]
  + snap: allows for creating cloud-init snap [Joshua Powers]
  + DigitalOcean: assign IPv4ll address to lowest indexed interface.
  + [Ben Howard]
  + DigitalOcean: configure all NICs presented in meta-data. [Ben Howard]
  + Remove (and/or fix) URL shortener references [Jon Grimm] (LP: #1669727)
  + HACKING.rst: more info on filling out contributors agreement.
  + util: teach write_file about copy_mode option
  + [Lars Kellogg-Stedman] (LP: #1644064)
  + DigitalOcean: bind resolvers to loopback interface. [Ben Howard]
  + tests: fix AltCloud tests to not rely on blkid (LP: #1636531)
  + OpenStack: add 'dvs' to the list of physical link types. (LP: #1674946)
  + Fix bug that resulted in an attempt to rename bonds or vlans.
  + (LP: #1669860)
  + tests: update OpenNebula and Digital Ocean to not rely on host
  + interfaces.
  + net: in netplan renderer delete known image-builtin content.
  + (LP: #1675576)
  + doc: correct grammar in capabilities.rst [David Tagatac]
  + ds-identify: fix detecting of maas datasource. (LP: #1677710)
  + netplan: remove debugging prints, add debug logging [Ryan Harper]
  + ds-identify: do not write None twice to datasource_list.
  + support resizing partition and rootfs on system booted without
  + initramfs. [Steve Langasek] (LP: #1677376)
  + apt_configure: run only when needed. (LP: #1675185)
  + OpenStack: identify OpenStack by product 'OpenStack Compute'.
  + (LP: #1675349)
  + GCE: Search GCE in ds-identify, consider serial number in check.
  + (LP: #1674861)
  + Add support for setting hashed passwords [Tore S. Lonoy] (LP: #1570325)
  + Fix filesystem creation when using "partition: auto"
  + [Jonathan Ballet] (LP: #1634678)
  + ConfigDrive: support reading config drive data from /config-drive.
  + (LP: #1673411)
  + ds-identify: fix detection of Bigstep datasource. (LP: #1674766)
  + test: add running of pylint [Joshua Powers]
  + ds-identify: fix bug where filename expansion was left on.
  + advertise network config v2 support (NETWORK_CONFIG_V2) in features.
  + Bigstep: fix bug when executing in python3. [root]
  + Fix unit test when running in a system deployed with cloud-init.
  + Bounce network interface for Azure when using the built-in path.
  + [Brent Baude] (LP: #1674685)
  + cloudinit.net: add network config v2 parsing and rendering [Ryan Harper]
  + net: Fix incorrect call to isfile [Joshua Powers] (LP: #1674317)
  + net: add renderers for automatically selecting the renderer.
  + doc: fix config drive doc with regard to unpartitioned disks.
  + (LP: #1673818)
  + test: Adding integratiron test for password as list [Joshua Powers]
  + render_network_state: switch arguments around, do not require target
  + support 'loopback' as a device type.
  + Integration Testing: improve testcase subclassing [Wesley Wiedenmeier]
  + gitignore: adding doc/rtd_html [Joshua Powers]
  + doc: add instructions for running integration tests via tox.
  + [Joshua Powers]
  + test: avoid differences in 'date' output due to daylight savings.
  + Fix chef config module in omnibus install. [Jeremy Melvin] (LP: #1583837)
  + Add feature flags to cloudinit.version. [Wesley Wiedenmeier]
  + tox: add a citest environment
  + Further fix regression to support 'password' for default user.
  + fix regression when no chpasswd/list was provided.
  + Support chpasswd/list being a list in addition to a string.
  + [Sergio Lystopad] (LP: #1665694)
  + doc: Fix configuration example for cc_set_passwords module.
  + [Sergio Lystopad] (LP: #1665773)
  + net: support both ipv4 and ipv6 gateways in sysconfig.
  + [Lars Kellogg-Stedman] (LP: #1669504)
  + net: do not raise exception for &gt; 3 nameservers
  + [Lars Kellogg-Stedman] (LP: #1670052)
  + ds-identify: report cleanups for config and exit value. (LP: #1669949)
  + ds-identify: move default setting for Ec2/strict_id to a global.
  + ds-identify: record not found in cloud.cfg and always add None.
  + Support warning if the used datasource is not in ds-identify's list.
  + tools/ds-identify: make report mode write namespaced results.
  + Move warning functionality to cloudinit/warnings.py
  + Add profile.d script for showing warnings on login.
  + Z99-cloud-locale-test.sh: install and make consistent.
  + tools/ds-identify: look at cloud.cfg when looking for ec2 strict_id.
  + tools/ds-identify: disable vmware_guest_customization by default.
  + tools/ds-identify: ovf identify vmware guest customization.
  + Identify Brightbox as an Ec2 datasource user. (LP: #1661693)
  + DatasourceEc2: add warning message when not on AWS.
  + ds-identify: add reading of datasource/Ec2/strict_id
  + tools/ds-identify: add support for found or maybe contributing config.
  + tools/ds-identify: read the seed directory on Ec2
  + tools/ds-identify: use quotes in local declarations.
  + tools/ds-identify: fix documentation of policy setting in a comment.
  + ds-identify: only run once per boot unless --force is given.
  + flake8: fix flake8 complaints in previous commit.
  + net: correct errors in cloudinit/net/sysconfig.py
  + [Lars Kellogg-Stedman] (LP: #1665441)
  + ec2_utils: fix MetadataLeafDecoder that returned bytes on empty
  + apply the runtime configuration written by ds-identify.
  + ds-identify: fix checking for filesystem label (LP: #1663735)
  + ds-identify: read ds=nocloud properly (LP: #1663723)
  + support nova-lxd by reading platform from environment of pid 1.
  + (LP: #1661797)
  + ds-identify: change aarch64 to use the default for non-dmi systems.
  + Remove style checking during build and add latest style checks to tox
  + [Joshua Powers] (LP: #1652329)
  + code-style: make master pass pycodestyle (2.3.1) cleanly, currently:
  + [Joshua Powers]
  + manual_cache_clean: When manually cleaning touch a file in instance dir.
  + Add tools/ds-identify to identify datasources available.
  + Fix small typo and change iso-filename for consistency [Robin Naundorf]
  + Fix eni rendering of multiple IPs per interface
  + [Ryan Harper] (LP: #1657940)
  + tools/mock-meta: support python2 or python3 and ipv6 in both.
  + tests: remove executable bit on test_net, so it runs, and fix it.
  + tests: No longer monkey patch httpretty for python 3.4.2
  + Add 3 ecdsa-sha2-nistp* ssh key types now that they are standardized
  + [Lars Kellogg-Stedman] (LP: #1658174)
  + reset httppretty for each test [Lars Kellogg-Stedman] (LP: #1658200)
  + build: fix running Make on a branch with tags other than master
  + EC2: Do not cache security credentials on disk
  + [Andrew Jorgensen] (LP: #1638312)
  + doc: Fix typos and clarify some aspects of the part-handler
  + [Erik M. Bray]
  + doc: add some documentation on OpenStack datasource.
  + OpenStack: Use timeout and retries from config in get_data.
  + [Lars Kellogg-Stedman] (LP: #1657130)
  + Fixed Misc issues related to VMware customization. [Sankar Tanguturi]
  + Fix minor docs typo: perserve &gt; preserve [Jeremy Bicha]
  + Use dnf instead of yum when available
  + [Lars Kellogg-Stedman] (LP: #1647118)
  + validate-yaml: use python rather than explicitly python3
  + Get early logging logged, including failures of cmdline url.
- From 0.7.9
  + doc: adjust headers in tests documentation for consistency.
  + pep8: fix issue found in zesty build with pycodestyle.
  + integration test: initial commit of integration test framework
  + [Wesley Wiedenmeier]
  + LICENSE: Allow dual licensing GPL-3 or Apache 2.0 [Jon Grimm]
  + Fix config order of precedence, putting kernel command line over system.
  + [Wesley Wiedenmeier] (LP: #1582323)
  + pep8: whitespace fix
  + Update the list of valid ssh keys. [Michael Felt]
  + network: add ENI unit test for statically rendered routes.
  + set_hostname: avoid erroneously appending domain to fqdn
  + [Lars Kellogg-Stedman] (LP: #1647910)
  + doc: change 'nobootwait' to 'nofail' in docs [Anhad Jai Singh]
  + Replace an expired bit.ly link in code comment.
  + user-groups: fix bug when groups was provided as string and had spaces
  + (LP: #1354694)
  + mounts: use mount -a again to accomplish mounts (LP: #1647708)
  + CloudSigma: Fix bug where datasource was not loaded in local search.
  + (LP: #1648380)
  + when adding a user, strip whitespace from group list [Lars Kellogg-Stedman]
  + (LP: #1354694)
  + fix decoding of utf-8 chars in yaml test
  + Replace usage of sys_netdev_info with read_sys_net (LP: #1625766)
  + fix problems found in python2.6 test.
  + OpenStack: extend physical types to include hyperv, hw_veb, vhost_user.
  + (LP: #1642679)
  + tests: fix assumptions that expected no eth0 in system. (LP: #1644043)
  + net/cmdline: Consider ip= or ip6= on command line not only ip=
  + (LP: #1639930)
  + Just use file logging by default (LP: #1643990)
  + Improve formatting for ProcessExecutionError [Wesley Wiedenmeier]
  + flake8: fix trailing white space
  + Doc: various documentation fixes [Sean Bright]
  + cloudinit/config/cc_rh_subscription.py: Remove repos before adding
  + [Brent Baude]
  + packages/redhat: fix rpm spec file.
  + main: set TZ in environment if not already set. [Ryan Harper]
  + Azure: No longer rely on walinux agent. (LP: #1538522)
  + disk_setup: Use sectors as unit when formatting MBR disks with sfdisk.
  + [Daniel Watkins] (LP: #1460715)
  + Add activate_datasource, for datasource specific code paths. (LP: #1611074)
  + systemd: cloud-init-local use RequiresMountsFor=/var/lib/cloud
  + (LP: #1642062)
  + systemd: cloud-init remove After=systemd-networkd-wait-online
  + systemd: cloud-init-local change Before basic to sysinit
  + pep8: fix style errors reported by pycodestyle 2.1.0
  + systemd: drop both Wants and After local-fs.target
  + systemd: networking service adjustments. (LP: #1636912)
  + systemd: replace Before=basic.target, dbus.target with sysinit.target
  + (LP: #1629797)
  + doc: Add documentation on stages of boot.
  + doc: make the RST files consistently formated and other improvements.
  + Ec2: fix syntax and tox in previous commit.
  + Ec2: protect against non-dictionary in block-device-mapping.
  + doc: fixed example to not overwrite /etc/hosts [Chris Glass]
  + Doc: fix spelling / typos in ca_certs and scripts_vendor.
  + pyflakes: fix issue with pyflakes 1.3 found in ubuntu zesty-proposed.
  + net/cmdline: Further adjustments to ipv6 support [LaMont Jones]
  + (LP: #1621615)
  + Add coverage dependency to bddeb to fix package build.
  + doc: improve HACKING.rst file
  + dmidecode: Allow dmidecode to be used on aarch64 [Robert Schweikert]
  + AliYun: Add new datasource for Ali-Cloud ECS [kaihuan.pkh]
  + Add coverage collection to tox unit tests. [Joshua Powers]
  + cc_users_groups: fix remaing call to ds.normalize_user_groups [Ryan Harper]
  + disk-config: udev settle after partitioning in gpt format. (LP: #1626243)
  + unittests: do not read system /etc/cloud/cloud.cfg.d (LP: #1635350)
  + Add documentation for logging features. [Wesley Wiedenmeier]
  + Add support for snap create-user on Ubuntu Core images. [Ryan Harper]
  + Fix sshd restarts for rhel distros. [Jim Gorz]
  + OpenNebula: replace 'ip' parsing with cloudinit.net usage.
  + Fix python2.6 things found running in centos 6.
  + Move user/group functions to new ug_util file
  + DigitalOcean: enable usage of data source by default.
  + update Gentoo initscripts to run in the correct order [Matthew Thode]
  + MAAS: improve the main of datasource to look at kernel cmdline config.
  + tests: silence the Cheetah UserWarning about NameMapper C version.
  + systemd: Run cloud-init.service Before dbus.socket not dbus.target
  + [Daniel Watkins] (LP: #1629797)
  + systemd: run cloud-init.service Before dbus.service (LP: #1629797)
  + unittests: fix use of mock 2.0 'assert_called' when running make check
  + [Ryan Harper]
  + Improve module documentation and doc cleanup. [Wesley Wiedenmeier]
  + lxd: Update network config for LXD 2.3 [Stéphane Graber]
  + DigitalOcean: use meta-data for network configruation [Ben Howard]
  + ntp: move to run after apt configuration (LP: #1628337)
  + Decode unicode types in decode_binary [Robert Schweikert]
  + systemd: Ensure that cloud-init-local happens before NetworkManager
  + Allow ephemeral drive to be unpartitioned [Paul Meyer]
  + subp: add 'update_env' argument
  + net: support reading ipv6 dhcp config from initramfs [LaMont Jones]
  + (LP: #1621615, #1621507)
  + Adjust mounts and disk configuration for systemd. (LP: #1611074)
  + dmidecode: run dmidecode only on i?86 or x86_64 arch. [Robert Schweikert]
  + systemd: put cloud-init.target After multi-user.target (LP: #1623868)</changelog>
  <changelog author="rjschwei@suse.com" date="1509624000">- Fix sed expression to set distro properly (boo#1063716)</changelog>
  <changelog author="rjschwei@suse.com" date="1510142400">- Add cloud-init-hosts-template.patch (bsc#1064594)
  + Properly expand the /etc/hosst file when manage_etc_hosts is set</changelog>
  <changelog author="rjschwei@suse.com" date="1510401600">- Add cloud-init-ntp-conf-suse.patch
  + ntp configuration was broken on sles and opensuse lp#1726572</changelog>
  <changelog author="rjschwei@suse.com" date="1510833600">- Add cloud-init-translate-netconf-ipv4-keep-gw.patch (boo#1064854)
  + Properly insert the gateway information for v1 json network config data</changelog>
  <changelog author="rjschwei@suse.com" date="1510920000">- Fix variable name in cloud-init-translate-netconf-ipv4-keep-gw.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
  <changelog author="rjschwei@suse.com" date="1512561600">- Add cloud-init-reproduce-build.patch (boo#1069635)
  + Make builds reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Fix usage of fdupes macro: there is no '-n' parameter to the
  macro (there would be to fdupes, the command, though).</changelog>
  <changelog author="gmoro@suse.com" date="1516276800">- patch distribution detection until a fix is delivered to python3 (bsc#997614)
  add cloud-init-add-variant-cloudcfg.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1517227200">- Update to version 17.2 (boo#1069635, bsc#1072811)
  + Add cloud-init-skip-ovf-tests.patch
  + Add cloud-init-no-python-linux-dist.patch
  + Add 0001-switch-to-using-iproute2-tools.patch
  + Add 0001-Support-chrony-configuration-lp-1731619.patch
  + Add 0002-Disable-method-deprecation-warning-for-pylint.patch
  + Add 0003-Distro-dependent-chrony-config-file.patch
  + removed cloud-init-add-variant-cloudcfg.patch replaced by
    cloud-init-no-python-linux-dist.patch
  + removed zypp_add_repos.diff included upstream
  + removed zypp_add_repo_test.patch included upstream
  + removed cloud-init-hosts-template.patch included upstream
  + removed cloud-init-more-tasks.patch included upstream
  + removed cloud-init-final-no-apt.patch included upstream
  + removed cloud-init-ntp-conf-suse.patch included upstream
  + removed cloud-init-break-cycle-local-service.patch included upstream
  + removed cloud-init-reproduce-build.patch included upstream
  + For the complete changelog see https://launchpad.net/cloud-init/trunk/17.2</changelog>
  <changelog author="dmueller@suse.com" date="1517313600">- drop dependency on boto (only used in examples, and
  should really be ported to botocore/boto3 instead)</changelog>
  <changelog author="rjschwei@suse.com" date="1518523200">- Fix logfile permission settings (bsc#1080595)
  + Add 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch</changelog>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
</package>
<package pkgid="8448e6290155110df48960ce33906014fb964f709e2b6d7d47ae168ab1b719ea" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="18.2" rel="lp150.2.6.1"/>
  <changelog author="dmueller@suse.com" date="1505908800">- add skip-argparse-on-python3.patch: don't depend on argparse
  for python3, it is builtin there (as of python 3.2, so the
  patch should be good enough)</changelog>
  <changelog author="rjschwei@suse.com" date="1505995200">- Update to version 17.1 (bsc#1035106)
  + Version numbering scheme change now YY.NUMBER_OF_RELESE_THAT_YEAR
  + Remove cloud.cfg.suse, use generated default config file
  + Remove addopenSUSEBase.patch, included upstream
  + Remove suseIntegratedHandler.patch, included upstream
  + Remove openSUSEhostsTemplate.diff, included upstream
  + Remove cloud-init-handle-no-carrier.patch, included upstream
  + Remove cloud-init-digital-ocean-datasource.patch,
    use upstream implementation
  + Remove cloud-init-digital-ocean-datasource-enable-by-default.patch,
    use upstream implementation
  + Remove cloud-init-fix-unicode-handling-binarydecode.patch,
    included upstream
  + Remove cloud-init-no-dmidecode-on-ppc64.patch, included upstream
  + Remove dataSourceOpenNebula.patch, use upstream implementation
  + Remove setupSUSEsysVInit.diff, included upstream
  + Remove suseSysVInit.diff, included upstream
  + Remove cloud-init-finalbeforelogin.patch, don't block login
  + Remove cloud-init-handle-not-implemented-query.patch, query option removed
  + Remove cloud-init-spceandtabs-clean.patch, indentation fixed upstream
  + Remove dynamicInitCmd.diff, different solution from upstream
  + Added cloud-init-more-tasks.patch, (bsc#1047363)
    replace cloud-init-finalbeforelogin.patch
  + Forward port cloud-init-python2-sigpipe.patch
  + Remove cloud-init-net-eni.patch, included upstream
  + Remove cloud-init-service.patch, included upstream
  + Forward port cloud-init-sysconfig-netpathfix.patch
  + Remove cloud-init-net-sysconfig-lp1665441.patch, included upstream
  + Remove cloud-init-python26.patch, included upstream
  + Remove skip-argparse-on-python3.patch
  + Add cloud-init-tests-set-exec.patch
  + Add cloud-init-final-no-apt.patch
  + Add zypp_add_repo_test.patch
  + doc: document GCE datasource. [Arnd Hannemann]
  + suse: updates to templates to support openSUSE and SLES.
  + [Robert Schweikert] (LP: #1718640)
  + suse: Copy sysvinit files from redhat with slight changes.
  + [Robert Schweikert] (LP: #1718649)
  + docs: fix sphinx module schema documentation [Chad Smith]
  + tests: Add cloudinit package to all test targets [Chad Smith]
  + Makefile: No longer look for yaml files in obsolete ./bin/.
  + tests: fix ds-identify unit tests to set EC2_STRICT_ID_DEFAULT.
  + ec2: Fix maybe_perform_dhcp_discovery to use /var/tmp as a tmpdir
  + [Chad Smith] (LP: #1717627)
  + Azure: wait longer for SSH pub keys to arrive.
  + [Paul Meyer] (LP: #1717611)
  + GCE: Fix usage of user-data. (LP: #1717598)
  + cmdline: add collect-logs subcommand. [Chad Smith] (LP: #1607345)
  + CloudStack: consider dhclient lease files named with a hyphen.
  + (LP: #1717147)
  + resizefs: Drop check for read-only device file, do not warn on
  + overlayroot. [Chad Smith]
  + Do not provide systemd-fsck drop-in which could cause ordering cycles.
  + [Balint Reczey] (LP: #1717477)
  + tests: Enable the NoCloud KVM platform [Joshua Powers]
  + resizefs: pass mount point to xfs_growfs [Dusty Mabe]
  + vmware: Enable nics before sending the SUCCESS event. [Sankar Tanguturi]
  + cloud-config modules: honor distros definitions in each module
  + [Chad Smith] (LP: #1715738, #1715690)
  + chef: Add option to pin chef omnibus install version
  + [Ethan Apodaca] (LP: #1462693)
  + tests: execute: support command as string [Joshua Powers]
  + schema and docs: Add jsonschema to resizefs and bootcmd modules
  + [Chad Smith]
  + tools: Add xkvm script, wrapper around qemu-system [Joshua Powers]
  + vmware customization: return network config format
  + [Sankar Tanguturi] (LP: #1675063)
  + Ec2: only attempt to operate at local mode on known platforms.
  + (LP: #1715128)
  + Use /run/cloud-init for tempfile operations. (LP: #1707222)
  + ds-identify: Make OpenStack return maybe on arch other than intel.
  + (LP: #1715241)
  + tests: mock missed openstack metadata uri network_data.json
  + [Chad Smith] (LP: #1714376)
  + relocate tests/unittests/helpers.py to cloudinit/tests
  + [Lars Kellogg-Stedman]
  + tox: add nose timer output [Joshua Powers]
  + upstart: do not package upstart jobs, drop ubuntu-init-switch module.
  + tests: Stop leaking calls through unmocked metadata addresses
  + [Chad Smith] (LP: #1714117)
  + distro: allow distro to specify a default locale [Ryan Harper]
  + tests: fix two recently added tests for sles distro.
  + url_helper: dynamically import oauthlib import from inside oauth_headers
  + [Chad Smith]
  + tox: make xenial environment run with python3.6
  + suse: Add support for openSUSE and return SLES to a working state.
  + [Robert Schweikert]
  + GCE: Add a main to the GCE Datasource.
  + ec2: Add IPv6 dhcp support to Ec2DataSource. [Chad Smith] (LP: #1639030)
  + url_helper: fail gracefully if oauthlib is not available
  + [Lars Kellogg-Stedman] (LP: #1713760)
  + cloud-init analyze: fix issues running under python 2. [Andrew Jorgensen]
  + Configure logging module to always use UTC time.
  + [Ryan Harper] (LP: #1713158)
  + Log a helpful message if a user script does not include shebang.
  + [Andrew Jorgensen]
  + cli: Fix command line parsing of coniditionally loaded subcommands.
  + [Chad Smith] (LP: #1712676)
  + doc: Explain error behavior in user data include file format.
  + [Jason Butz]
  + cc_landscape &amp; cc_puppet: Fix six.StringIO use in writing configs
  + [Chad Smith] (LP: #1699282, #1710932)
  + schema cli: Add schema subcommand to cloud-init cli and cc_runcmd schema
  + [Chad Smith]
  + Debian: Remove non-free repositories from apt sources template.
  + [Joonas Kylmälä] (LP: #1700091)
  + tools: Add tooling for basic cloud-init performance analysis.
  + [Chad Smith] (LP: #1709761)
  + network: add v2 passthrough and fix parsing v2 config with bonds/bridge
  + params [Ryan Harper] (LP: #1709180)
  + doc: update capabilities with features available, link doc reference,
  + cli example [Ryan Harper]
  + vcloud directory: Guest Customization support for passwords
  + [Maitreyee Saikia]
  + ec2: Allow Ec2 to run in init-local using dhclient in a sandbox.
  + [Chad Smith] (LP: #1709772)
  + cc_ntp: fallback on timesyncd configuration if ntp is not installable
  + [Ryan Harper] (LP: #1686485)
  + net: Reduce duplicate code. Have get_interfaces_by_mac use
  + get_interfaces.
  + tests: Fix build tree integration tests [Joshua Powers]
  + sysconfig: Dont repeat header when rendering resolv.conf
  + [Ryan Harper] (LP: #1701420)
  + archlinux: Fix bug with empty dns, do not render 'lo' devices.
  + (LP: #1663045, #1706593)
  + cloudinit.net: add initialize_network_device function and tests
  + [Chad Smith]
  + makefile: fix ci-deps-ubuntu target [Chad Smith]
  + tests: adjust locale integration test to parse default locale.
  + tests: remove 'yakkety' from releases as it is EOL.
  + tests: Add initial tests for EC2 and improve a docstring.
  + locale: Do not re-run locale-gen if provided locale is system default.
  + archlinux: fix set hostname usage of write_file.
  + [Joshua Powers] (LP: #1705306)
  + sysconfig: support subnet type of 'manual'.
  + tools/run-centos: make running with no argument show help.
  + Drop rand_str() usage in DNS redirection detection
  + [Bob Aman] (LP: #1088611)
  + sysconfig: use MACADDR on bonds/bridges to configure mac_address
  + [Ryan Harper] (LP: #1701417)
  + net: eni route rendering missed ipv6 default route config
  + [Ryan Harper] (LP: #1701097)
  + sysconfig: enable mtu set per subnet, including ipv6 mtu
  + [Ryan Harper] (LP: #1702513)
  + sysconfig: handle manual type subnets [Ryan Harper] (LP: #1687725)
  + sysconfig: fix ipv6 gateway routes [Ryan Harper] (LP: #1694801)
  + sysconfig: fix rendering of bond, bridge and vlan types.
  + [Ryan Harper] (LP: #1695092)
  + Templatize systemd unit files for cross distro deltas. [Ryan Harper]
  + sysconfig: ipv6 and default gateway fixes. [Ryan Harper] (LP: #1704872)
  + net: fix renaming of nics to support mac addresses written in upper
  + case. (LP: #1705147)
  + tests: fixes for issues uncovered when moving to python 3.6.
  + (LP: #1703697)
  + sysconfig: include GATEWAY value if set in subnet
  + [Ryan Harper] (LP: #1686856)
  + Scaleway: add datasource with user and vendor data for Scaleway.
  + [Julien Castets]
  + Support comments in content read by load_shell_content.
  + cloudinitlocal fail to run during boot [Hongjiang Zhang]
  + doc: fix disk setup example table_type options
  + [Sandor Zeestraten] (LP: #1703789)
  + tools: Fix exception handling. [Joonas Kylmälä] (LP: #1701527)
  + tests: fix usage of mock in GCE test.
  + test_gce: Fix invalid mock of platform_reports_gce to return False
  + [Chad Smith]
  + test: fix incorrect keyid for apt repository.
  + [Joshua Powers] (LP: #1702717)
  + tests: Update version of pylxd [Joshua Powers]
  + write_files: Remove log from helper function signatures.
  + [Andrew Jorgensen]
  + doc: document the cmdline options to NoCloud [Brian Candler]
  + read_dmi_data: always return None when inside a container. (LP: #1701325)
  + requirements.txt: remove trailing white space.
  + Azure: Add network-config, Refactor net layer to handle duplicate macs.
  + [Ryan Harper]
  + Tests: Simplify the check on ssh-import-id [Joshua Powers]
  + tests: update ntp tests after sntp added [Joshua Powers]
  + FreeBSD: Make freebsd a variant, fix unittests and
  + tools/build-on-freebsd.
  + FreeBSD: fix test failure
  + FreeBSD: replace ifdown/ifup with "ifconfig down" and "ifconfig up".
  + [Hongjiang Zhang] (LP: #1697815)
  + FreeBSD: fix cdrom mounting failure if /mnt/cdrom/secure did not exist.
  + [Hongjiang Zhang] (LP: #1696295)
  + main: Don't use templater to format the welcome message
  + [Andrew Jorgensen]
  + docs: Automatically generate module docs form schema if present.
  + [Chad Smith]
  + debian: fix path comment in /etc/hosts template.
  + [Jens Sandmann] (LP: #1606406)
  + suse: add hostname and fully qualified domain to template.
  + [Jens Sandmann]
  + write_file(s): Print permissions as octal, not decimal [Andrew Jorgensen]
  + ci deps: Add --test-distro to read-dependencies to install all deps
  + [Chad Smith]
  + tools/run-centos: cleanups and move to using read-dependencies
  + pkg build ci: Add make ci-deps-&lt;distro&gt; target to install pkgs
  + [Chad Smith]
  + systemd: make cloud-final.service run before apt daily services.
  + (LP: #1693361)
  + selinux: Allow restorecon to be non-fatal. [Ryan Harper] (LP: #1686751)
  + net: Allow netinfo subprocesses to return 0 or 1.
  + [Ryan Harper] (LP: #1686751)
  + net: Allow for NetworkManager configuration [Ryan McCabe] (LP: #1693251)
  + Use distro release version to determine if we use systemd in redhat spec
  + [Ryan Harper]
  + net: normalize data in network_state object
  + Integration Testing: tox env, pyxld 2.2.3, and revamp framework
  + [Wesley Wiedenmeier]
  + Chef: Update omnibus url to chef.io, minor doc changes. [JJ Asghar]
  + tools: add centos scripts to build and test [Joshua Powers]
  + Drop cheetah python module as it is not needed by trunk [Ryan Harper]
  + rhel/centos spec cleanups.
  + cloud.cfg: move to a template.  setup.py changes along the way.
  + Makefile: add deb-src and srpm targets. use PYVER more places.
  + makefile: fix python 2/3 detection in the Makefile [Chad Smith]
  + snap: Removing snapcraft plug line [Joshua Powers] (LP: #1695333)
  + RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1696176)
  + test: Fix pyflakes complaint of unused import.
  + [Joshua Powers] (LP: #1695918)
  + NoCloud: support seed of nocloud from smbios information
  + [Vladimir Pouzanov] (LP: #1691772)
  + net: when selecting a network device, use natural sort order
  + [Marc-Aurèle Brothier]
  + fix typos and remove whitespace in various docs [Stephan Telling]
  + systemd: Fix typo in comment in cloud-init.target. [Chen-Han Hsiao]
  + Tests: Skip jsonschema related unit tests when dependency is absent.
  + [Chad Smith] (LP: #1695318)
  + azure: remove accidental duplicate line in merge.
  + azure: identify platform by well known value in chassis asset tag.
  + [Chad Smith] (LP: #1693939)
  + tools/net-convert.py: support old cloudinit versions by using kwargs.
  + ntp: Add schema definition and passive schema validation.
  + [Chad Smith] (LP: #1692916)
  + Fix eni rendering for bridge params that require repeated key for
  + values. [Ryan Harper]
  + net: remove systemd link file writing from eni renderer [Ryan Harper]
  + AliYun: Enable platform identification and enable by default.
  + [Junjie Wang] (LP: #1638931)
  + net: fix reading and rendering addresses in cidr format.
  + [Dimitri John Ledkov] (LP: #1689346, #1684349)
  + disk_setup: udev settle before attempting partitioning or fs creation.
  + (LP: #1692093)
  + GCE: Update the attribute used to find instance SSH keys.
  + [Daniel Watkins] (LP: #1693582)
  + nplan: For bonds, allow dashed or underscore names of keys.
  + [Dimitri John Ledkov] (LP: #1690480)
  + python2.6: fix unit tests usage of assertNone and format.
  + test: update docstring on test_configured_list_with_none
  + fix tools/ds-identify to not write None twice.
  + tox/build: do not package depend on style requirements.
  + cc_ntp: Restructure cc_ntp unit tests. [Chad Smith] (LP: #1692794)
  + flake8: move the pinned version of flake8 up to 3.3.0
  + tests: Apply workaround for snapd bug in test case. [Joshua Powers]
  + RHEL/CentOS: Fix dual stack IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1679817, #1685534, #1685532)
  + disk_setup: fix several issues with gpt disk partitions. (LP: #1692087)
  + function spelling &amp; docstring update [Joshua Powers]
  + Fixing wrong file name regression. [Joshua Powers]
  + tox: move pylint target to 1.7.1
  + Fix get_interfaces_by_mac for empty macs (LP: #1692028)
  + DigitalOcean: remove routes except for the public interface.
  + [Ben Howard] (LP: #1681531.)
  + netplan: pass macaddress, when specified, for vlans
  + [Dimitri John Ledkov] (LP: #1690388)
  + doc: various improvements for the docs on cc_users_groups.
  + [Felix Dreissig]
  + cc_ntp: write template before installing and add service restart
  + [Ryan Harper] (LP: #1645644)
  + cloudstack: fix tests to avoid accessing /var/lib/NetworkManager
  + [Lars Kellogg-Stedman]
  + tests: fix hardcoded path to mkfs.ext4 [Joshua Powers] (LP: #1691517)
  + Actually skip warnings when .skip file is present.
  + [Chris Brinker] (LP: #1691551)
  + netplan: fix netplan render_network_state signature.
  + [Dimitri John Ledkov] (LP: #1685944)
  + Azure: fix reformatting of ephemeral disks on resize to large types.
  + (LP: #1686514)
  + Revert "tools/net-convert: fix argument order for render_network_state"
  + make deb: Add devscripts dependency for make deb. Cleanup
  + packages/bddeb. [Chad Smith] (LP: #1685935)
  + tools/net-convert: fix argument order for render_network_state
  + [Ryan Harper] (LP: #1685944)
  + openstack: fix log message copy/paste typo in _get_url_settings
  + [Lars Kellogg-Stedman]
  + unittests: fix unittests run on centos [Joshua Powers]
  + Improve detection of snappy to include os-release and kernel cmdline.
  + (LP: #1689944)
  + Add address to config entry generated by _klibc_to_config_entry.
  + [Julien Castets] (LP: #1691135)
  + sysconfig: Raise ValueError when multiple default gateways are present.
  + [Chad Smith] (LP: #1687485)
  + FreeBSD: improvements and fixes for use on Azure
  + [Hongjiang Zhang] (LP: #1636345)
  + Add unit tests for ds-identify, fix Ec2 bug found.
  + fs_setup: if cmd is specified, use shell interpretation.
  + [Paul Meyer] (LP: #1687712)
  + doc: document network configuration defaults policy and formats.
  + [Ryan Harper]
  + Fix name of "uri" key in docs for "cc_apt_configure" module
  + [Felix Dreissig]
  + tests: Enable artful [Joshua Powers]
  + nova-lxd: read product_name from environment, not platform.
  + (LP: #1685810)
  + Fix yum repo config where keys contain array values
  + [Dylan Perry] (LP: #1592150)
  + template: Update debian backports template [Joshua Powers] (LP: #1627293)
  + rsyslog: replace ~ with stop [Joshua Powers] (LP: #1367899)
  + Doc: add additional RTD examples [Joshua Powers] (LP: #1459604)
  + Fix growpart for some cases when booted with root=PARTUUID.
  + (LP: #1684869)
  + pylint: update output style to parseable [Joshua Powers]
  + pylint: fix all logging warnings [Joshua Powers]
  + CloudStack: Add NetworkManager to list of supported DHCP lease dirs.
  + [Syed]
  + net: kernel lies about vlans not stealing mac addresses, when they do
  + [Dimitri John Ledkov] (LP: #1682871)
  + ds-identify: Check correct path for "latest" config drive
  + [Daniel Watkins] (LP: #1673637)
  + doc: Fix example for resolve.conf configuration.
  + [Jon Grimm] (LP: #1531582)
  + Fix examples that reference upstream chef repository.
  + [Jon Grimm] (LP: #1678145)
  + doc: correct grammar and improve clarity in merging documentation.
  + [David Tagatac]
  + doc: Add missing doc link to snap-config module. [Ryan Harper]
  + snap: allows for creating cloud-init snap [Joshua Powers]
  + DigitalOcean: assign IPv4ll address to lowest indexed interface.
  + [Ben Howard]
  + DigitalOcean: configure all NICs presented in meta-data. [Ben Howard]
  + Remove (and/or fix) URL shortener references [Jon Grimm] (LP: #1669727)
  + HACKING.rst: more info on filling out contributors agreement.
  + util: teach write_file about copy_mode option
  + [Lars Kellogg-Stedman] (LP: #1644064)
  + DigitalOcean: bind resolvers to loopback interface. [Ben Howard]
  + tests: fix AltCloud tests to not rely on blkid (LP: #1636531)
  + OpenStack: add 'dvs' to the list of physical link types. (LP: #1674946)
  + Fix bug that resulted in an attempt to rename bonds or vlans.
  + (LP: #1669860)
  + tests: update OpenNebula and Digital Ocean to not rely on host
  + interfaces.
  + net: in netplan renderer delete known image-builtin content.
  + (LP: #1675576)
  + doc: correct grammar in capabilities.rst [David Tagatac]
  + ds-identify: fix detecting of maas datasource. (LP: #1677710)
  + netplan: remove debugging prints, add debug logging [Ryan Harper]
  + ds-identify: do not write None twice to datasource_list.
  + support resizing partition and rootfs on system booted without
  + initramfs. [Steve Langasek] (LP: #1677376)
  + apt_configure: run only when needed. (LP: #1675185)
  + OpenStack: identify OpenStack by product 'OpenStack Compute'.
  + (LP: #1675349)
  + GCE: Search GCE in ds-identify, consider serial number in check.
  + (LP: #1674861)
  + Add support for setting hashed passwords [Tore S. Lonoy] (LP: #1570325)
  + Fix filesystem creation when using "partition: auto"
  + [Jonathan Ballet] (LP: #1634678)
  + ConfigDrive: support reading config drive data from /config-drive.
  + (LP: #1673411)
  + ds-identify: fix detection of Bigstep datasource. (LP: #1674766)
  + test: add running of pylint [Joshua Powers]
  + ds-identify: fix bug where filename expansion was left on.
  + advertise network config v2 support (NETWORK_CONFIG_V2) in features.
  + Bigstep: fix bug when executing in python3. [root]
  + Fix unit test when running in a system deployed with cloud-init.
  + Bounce network interface for Azure when using the built-in path.
  + [Brent Baude] (LP: #1674685)
  + cloudinit.net: add network config v2 parsing and rendering [Ryan Harper]
  + net: Fix incorrect call to isfile [Joshua Powers] (LP: #1674317)
  + net: add renderers for automatically selecting the renderer.
  + doc: fix config drive doc with regard to unpartitioned disks.
  + (LP: #1673818)
  + test: Adding integratiron test for password as list [Joshua Powers]
  + render_network_state: switch arguments around, do not require target
  + support 'loopback' as a device type.
  + Integration Testing: improve testcase subclassing [Wesley Wiedenmeier]
  + gitignore: adding doc/rtd_html [Joshua Powers]
  + doc: add instructions for running integration tests via tox.
  + [Joshua Powers]
  + test: avoid differences in 'date' output due to daylight savings.
  + Fix chef config module in omnibus install. [Jeremy Melvin] (LP: #1583837)
  + Add feature flags to cloudinit.version. [Wesley Wiedenmeier]
  + tox: add a citest environment
  + Further fix regression to support 'password' for default user.
  + fix regression when no chpasswd/list was provided.
  + Support chpasswd/list being a list in addition to a string.
  + [Sergio Lystopad] (LP: #1665694)
  + doc: Fix configuration example for cc_set_passwords module.
  + [Sergio Lystopad] (LP: #1665773)
  + net: support both ipv4 and ipv6 gateways in sysconfig.
  + [Lars Kellogg-Stedman] (LP: #1669504)
  + net: do not raise exception for &gt; 3 nameservers
  + [Lars Kellogg-Stedman] (LP: #1670052)
  + ds-identify: report cleanups for config and exit value. (LP: #1669949)
  + ds-identify: move default setting for Ec2/strict_id to a global.
  + ds-identify: record not found in cloud.cfg and always add None.
  + Support warning if the used datasource is not in ds-identify's list.
  + tools/ds-identify: make report mode write namespaced results.
  + Move warning functionality to cloudinit/warnings.py
  + Add profile.d script for showing warnings on login.
  + Z99-cloud-locale-test.sh: install and make consistent.
  + tools/ds-identify: look at cloud.cfg when looking for ec2 strict_id.
  + tools/ds-identify: disable vmware_guest_customization by default.
  + tools/ds-identify: ovf identify vmware guest customization.
  + Identify Brightbox as an Ec2 datasource user. (LP: #1661693)
  + DatasourceEc2: add warning message when not on AWS.
  + ds-identify: add reading of datasource/Ec2/strict_id
  + tools/ds-identify: add support for found or maybe contributing config.
  + tools/ds-identify: read the seed directory on Ec2
  + tools/ds-identify: use quotes in local declarations.
  + tools/ds-identify: fix documentation of policy setting in a comment.
  + ds-identify: only run once per boot unless --force is given.
  + flake8: fix flake8 complaints in previous commit.
  + net: correct errors in cloudinit/net/sysconfig.py
  + [Lars Kellogg-Stedman] (LP: #1665441)
  + ec2_utils: fix MetadataLeafDecoder that returned bytes on empty
  + apply the runtime configuration written by ds-identify.
  + ds-identify: fix checking for filesystem label (LP: #1663735)
  + ds-identify: read ds=nocloud properly (LP: #1663723)
  + support nova-lxd by reading platform from environment of pid 1.
  + (LP: #1661797)
  + ds-identify: change aarch64 to use the default for non-dmi systems.
  + Remove style checking during build and add latest style checks to tox
  + [Joshua Powers] (LP: #1652329)
  + code-style: make master pass pycodestyle (2.3.1) cleanly, currently:
  + [Joshua Powers]
  + manual_cache_clean: When manually cleaning touch a file in instance dir.
  + Add tools/ds-identify to identify datasources available.
  + Fix small typo and change iso-filename for consistency [Robin Naundorf]
  + Fix eni rendering of multiple IPs per interface
  + [Ryan Harper] (LP: #1657940)
  + tools/mock-meta: support python2 or python3 and ipv6 in both.
  + tests: remove executable bit on test_net, so it runs, and fix it.
  + tests: No longer monkey patch httpretty for python 3.4.2
  + Add 3 ecdsa-sha2-nistp* ssh key types now that they are standardized
  + [Lars Kellogg-Stedman] (LP: #1658174)
  + reset httppretty for each test [Lars Kellogg-Stedman] (LP: #1658200)
  + build: fix running Make on a branch with tags other than master
  + EC2: Do not cache security credentials on disk
  + [Andrew Jorgensen] (LP: #1638312)
  + doc: Fix typos and clarify some aspects of the part-handler
  + [Erik M. Bray]
  + doc: add some documentation on OpenStack datasource.
  + OpenStack: Use timeout and retries from config in get_data.
  + [Lars Kellogg-Stedman] (LP: #1657130)
  + Fixed Misc issues related to VMware customization. [Sankar Tanguturi]
  + Fix minor docs typo: perserve &gt; preserve [Jeremy Bicha]
  + Use dnf instead of yum when available
  + [Lars Kellogg-Stedman] (LP: #1647118)
  + validate-yaml: use python rather than explicitly python3
  + Get early logging logged, including failures of cmdline url.
- From 0.7.9
  + doc: adjust headers in tests documentation for consistency.
  + pep8: fix issue found in zesty build with pycodestyle.
  + integration test: initial commit of integration test framework
  + [Wesley Wiedenmeier]
  + LICENSE: Allow dual licensing GPL-3 or Apache 2.0 [Jon Grimm]
  + Fix config order of precedence, putting kernel command line over system.
  + [Wesley Wiedenmeier] (LP: #1582323)
  + pep8: whitespace fix
  + Update the list of valid ssh keys. [Michael Felt]
  + network: add ENI unit test for statically rendered routes.
  + set_hostname: avoid erroneously appending domain to fqdn
  + [Lars Kellogg-Stedman] (LP: #1647910)
  + doc: change 'nobootwait' to 'nofail' in docs [Anhad Jai Singh]
  + Replace an expired bit.ly link in code comment.
  + user-groups: fix bug when groups was provided as string and had spaces
  + (LP: #1354694)
  + mounts: use mount -a again to accomplish mounts (LP: #1647708)
  + CloudSigma: Fix bug where datasource was not loaded in local search.
  + (LP: #1648380)
  + when adding a user, strip whitespace from group list [Lars Kellogg-Stedman]
  + (LP: #1354694)
  + fix decoding of utf-8 chars in yaml test
  + Replace usage of sys_netdev_info with read_sys_net (LP: #1625766)
  + fix problems found in python2.6 test.
  + OpenStack: extend physical types to include hyperv, hw_veb, vhost_user.
  + (LP: #1642679)
  + tests: fix assumptions that expected no eth0 in system. (LP: #1644043)
  + net/cmdline: Consider ip= or ip6= on command line not only ip=
  + (LP: #1639930)
  + Just use file logging by default (LP: #1643990)
  + Improve formatting for ProcessExecutionError [Wesley Wiedenmeier]
  + flake8: fix trailing white space
  + Doc: various documentation fixes [Sean Bright]
  + cloudinit/config/cc_rh_subscription.py: Remove repos before adding
  + [Brent Baude]
  + packages/redhat: fix rpm spec file.
  + main: set TZ in environment if not already set. [Ryan Harper]
  + Azure: No longer rely on walinux agent. (LP: #1538522)
  + disk_setup: Use sectors as unit when formatting MBR disks with sfdisk.
  + [Daniel Watkins] (LP: #1460715)
  + Add activate_datasource, for datasource specific code paths. (LP: #1611074)
  + systemd: cloud-init-local use RequiresMountsFor=/var/lib/cloud
  + (LP: #1642062)
  + systemd: cloud-init remove After=systemd-networkd-wait-online
  + systemd: cloud-init-local change Before basic to sysinit
  + pep8: fix style errors reported by pycodestyle 2.1.0
  + systemd: drop both Wants and After local-fs.target
  + systemd: networking service adjustments. (LP: #1636912)
  + systemd: replace Before=basic.target, dbus.target with sysinit.target
  + (LP: #1629797)
  + doc: Add documentation on stages of boot.
  + doc: make the RST files consistently formated and other improvements.
  + Ec2: fix syntax and tox in previous commit.
  + Ec2: protect against non-dictionary in block-device-mapping.
  + doc: fixed example to not overwrite /etc/hosts [Chris Glass]
  + Doc: fix spelling / typos in ca_certs and scripts_vendor.
  + pyflakes: fix issue with pyflakes 1.3 found in ubuntu zesty-proposed.
  + net/cmdline: Further adjustments to ipv6 support [LaMont Jones]
  + (LP: #1621615)
  + Add coverage dependency to bddeb to fix package build.
  + doc: improve HACKING.rst file
  + dmidecode: Allow dmidecode to be used on aarch64 [Robert Schweikert]
  + AliYun: Add new datasource for Ali-Cloud ECS [kaihuan.pkh]
  + Add coverage collection to tox unit tests. [Joshua Powers]
  + cc_users_groups: fix remaing call to ds.normalize_user_groups [Ryan Harper]
  + disk-config: udev settle after partitioning in gpt format. (LP: #1626243)
  + unittests: do not read system /etc/cloud/cloud.cfg.d (LP: #1635350)
  + Add documentation for logging features. [Wesley Wiedenmeier]
  + Add support for snap create-user on Ubuntu Core images. [Ryan Harper]
  + Fix sshd restarts for rhel distros. [Jim Gorz]
  + OpenNebula: replace 'ip' parsing with cloudinit.net usage.
  + Fix python2.6 things found running in centos 6.
  + Move user/group functions to new ug_util file
  + DigitalOcean: enable usage of data source by default.
  + update Gentoo initscripts to run in the correct order [Matthew Thode]
  + MAAS: improve the main of datasource to look at kernel cmdline config.
  + tests: silence the Cheetah UserWarning about NameMapper C version.
  + systemd: Run cloud-init.service Before dbus.socket not dbus.target
  + [Daniel Watkins] (LP: #1629797)
  + systemd: run cloud-init.service Before dbus.service (LP: #1629797)
  + unittests: fix use of mock 2.0 'assert_called' when running make check
  + [Ryan Harper]
  + Improve module documentation and doc cleanup. [Wesley Wiedenmeier]
  + lxd: Update network config for LXD 2.3 [Stéphane Graber]
  + DigitalOcean: use meta-data for network configruation [Ben Howard]
  + ntp: move to run after apt configuration (LP: #1628337)
  + Decode unicode types in decode_binary [Robert Schweikert]
  + systemd: Ensure that cloud-init-local happens before NetworkManager
  + Allow ephemeral drive to be unpartitioned [Paul Meyer]
  + subp: add 'update_env' argument
  + net: support reading ipv6 dhcp config from initramfs [LaMont Jones]
  + (LP: #1621615, #1621507)
  + Adjust mounts and disk configuration for systemd. (LP: #1611074)
  + dmidecode: run dmidecode only on i?86 or x86_64 arch. [Robert Schweikert]
  + systemd: put cloud-init.target After multi-user.target (LP: #1623868)</changelog>
  <changelog author="rjschwei@suse.com" date="1509624000">- Fix sed expression to set distro properly (boo#1063716)</changelog>
  <changelog author="rjschwei@suse.com" date="1510142400">- Add cloud-init-hosts-template.patch (bsc#1064594)
  + Properly expand the /etc/hosst file when manage_etc_hosts is set</changelog>
  <changelog author="rjschwei@suse.com" date="1510401600">- Add cloud-init-ntp-conf-suse.patch
  + ntp configuration was broken on sles and opensuse lp#1726572</changelog>
  <changelog author="rjschwei@suse.com" date="1510833600">- Add cloud-init-translate-netconf-ipv4-keep-gw.patch (boo#1064854)
  + Properly insert the gateway information for v1 json network config data</changelog>
  <changelog author="rjschwei@suse.com" date="1510920000">- Fix variable name in cloud-init-translate-netconf-ipv4-keep-gw.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
  <changelog author="rjschwei@suse.com" date="1512561600">- Add cloud-init-reproduce-build.patch (boo#1069635)
  + Make builds reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Fix usage of fdupes macro: there is no '-n' parameter to the
  macro (there would be to fdupes, the command, though).</changelog>
  <changelog author="gmoro@suse.com" date="1516276800">- patch distribution detection until a fix is delivered to python3 (bsc#997614)
  add cloud-init-add-variant-cloudcfg.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1517227200">- Update to version 17.2 (boo#1069635, bsc#1072811)
  + Add cloud-init-skip-ovf-tests.patch
  + Add cloud-init-no-python-linux-dist.patch
  + Add 0001-switch-to-using-iproute2-tools.patch
  + Add 0001-Support-chrony-configuration-lp-1731619.patch
  + Add 0002-Disable-method-deprecation-warning-for-pylint.patch
  + Add 0003-Distro-dependent-chrony-config-file.patch
  + removed cloud-init-add-variant-cloudcfg.patch replaced by
    cloud-init-no-python-linux-dist.patch
  + removed zypp_add_repos.diff included upstream
  + removed zypp_add_repo_test.patch included upstream
  + removed cloud-init-hosts-template.patch included upstream
  + removed cloud-init-more-tasks.patch included upstream
  + removed cloud-init-final-no-apt.patch included upstream
  + removed cloud-init-ntp-conf-suse.patch included upstream
  + removed cloud-init-break-cycle-local-service.patch included upstream
  + removed cloud-init-reproduce-build.patch included upstream
  + For the complete changelog see https://launchpad.net/cloud-init/trunk/17.2</changelog>
  <changelog author="dmueller@suse.com" date="1517313600">- drop dependency on boto (only used in examples, and
  should really be ported to botocore/boto3 instead)</changelog>
  <changelog author="rjschwei@suse.com" date="1518523200">- Fix logfile permission settings (bsc#1080595)
  + Add 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch</changelog>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
</package>
<package pkgid="e58666310f3cbb36c867c5763b4b40ae98768f4c91c6afb245890c2002e2de80" name="cloud-netconfig-azure" arch="noarch">
  <version epoch="0" ver="0.7" rel="lp150.4.3.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
</package>
<package pkgid="3e4896a720b3aadaf2ae223e4813547ab0619f438577861ce9bcee8497b8f151" name="cloud-netconfig-azure" arch="src">
  <version epoch="0" ver="0.7" rel="lp150.4.3.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
</package>
<package pkgid="085ad6a3a8693b976ddfa537ce02d949c092ab7f0ef33ffd44d5e4ce6f983f78" name="cloud-netconfig-ec2" arch="noarch">
  <version epoch="0" ver="0.7" rel="lp150.4.3.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
</package>
<package pkgid="97833bc7c46c62d53cae7c7418f7a6f1da1cedf6791be8c9df8a129ea7a4c8bf" name="cloud-netconfig-ec2" arch="src">
  <version epoch="0" ver="0.7" rel="lp150.4.3.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
</package>
<package pkgid="1a191c1c1b2a90e28fdc2d773e69dd6b33f4e614651ea04387533608d05d32df" name="codec2" arch="src">
  <version epoch="0" ver="0.6" rel="lp150.2.3.2"/>
  <changelog author="dl8fcl@darc.de" date="1367236800">- first try</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1424001600">- version 0.3svn1917
- mods based on Fedora package</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899200">- version 0.4</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899201">- patch to install copm_prim.h needed by freedv2</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1442577600">- version 0.4.1</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1444564800">- version 0.5</changelog>
  <changelog author="aloisio@gmx.com" date="1484395200">- Version 0.5.1
  * Updated golay
- Spec cleanup
- Added codec2-rpmlintrc</changelog>
  <changelog author="dl8fcl@darc.de" date="1484654400">- Copyrigth information of spec file removed</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1489579200">- Update description with new bit rates from homepage.</changelog>
  <changelog author="mardnh@gmx.de" date="1492344000">- Update to version 0.6:
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1496145600">- Update licensing information</changelog>
  <changelog author="mpluskal@suse.com" date="1531828800">- Add baselibs.conf</changelog>
</package>
<package pkgid="a056481571bcb90c0d756cd594cdca7c3d7c6a37dc11fa22c7904ea08530d907" name="codec2" arch="x86_64">
  <version epoch="0" ver="0.6" rel="lp150.2.3.2"/>
  <changelog author="dl8fcl@darc.de" date="1367236800">- first try</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1424001600">- version 0.3svn1917
- mods based on Fedora package</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899200">- version 0.4</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899201">- patch to install copm_prim.h needed by freedv2</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1442577600">- version 0.4.1</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1444564800">- version 0.5</changelog>
  <changelog author="aloisio@gmx.com" date="1484395200">- Version 0.5.1
  * Updated golay
- Spec cleanup
- Added codec2-rpmlintrc</changelog>
  <changelog author="dl8fcl@darc.de" date="1484654400">- Copyrigth information of spec file removed</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1489579200">- Update description with new bit rates from homepage.</changelog>
  <changelog author="mardnh@gmx.de" date="1492344000">- Update to version 0.6:
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1496145600">- Update licensing information</changelog>
  <changelog author="mpluskal@suse.com" date="1531828800">- Add baselibs.conf</changelog>
</package>
<package pkgid="f343442230652430158d88aeaf96ac7981025d74052b43d587345124c040814c" name="codec2-devel" arch="x86_64">
  <version epoch="0" ver="0.6" rel="lp150.2.3.2"/>
  <changelog author="dl8fcl@darc.de" date="1367236800">- first try</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1424001600">- version 0.3svn1917
- mods based on Fedora package</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899200">- version 0.4</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899201">- patch to install copm_prim.h needed by freedv2</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1442577600">- version 0.4.1</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1444564800">- version 0.5</changelog>
  <changelog author="aloisio@gmx.com" date="1484395200">- Version 0.5.1
  * Updated golay
- Spec cleanup
- Added codec2-rpmlintrc</changelog>
  <changelog author="dl8fcl@darc.de" date="1484654400">- Copyrigth information of spec file removed</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1489579200">- Update description with new bit rates from homepage.</changelog>
  <changelog author="mardnh@gmx.de" date="1492344000">- Update to version 0.6:
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1496145600">- Update licensing information</changelog>
  <changelog author="mpluskal@suse.com" date="1531828800">- Add baselibs.conf</changelog>
</package>
<package pkgid="5cbc305f5cbadff166559d8d38d3f1d88b7bd0923095d0f2499e7c5d2f416b51" name="codec2-examples" arch="noarch">
  <version epoch="0" ver="0.6" rel="lp150.2.3.2"/>
  <changelog author="dl8fcl@darc.de" date="1367236800">- first try</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1424001600">- version 0.3svn1917
- mods based on Fedora package</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899200">- version 0.4</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899201">- patch to install copm_prim.h needed by freedv2</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1442577600">- version 0.4.1</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1444564800">- version 0.5</changelog>
  <changelog author="aloisio@gmx.com" date="1484395200">- Version 0.5.1
  * Updated golay
- Spec cleanup
- Added codec2-rpmlintrc</changelog>
  <changelog author="dl8fcl@darc.de" date="1484654400">- Copyrigth information of spec file removed</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1489579200">- Update description with new bit rates from homepage.</changelog>
  <changelog author="mardnh@gmx.de" date="1492344000">- Update to version 0.6:
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1496145600">- Update licensing information</changelog>
  <changelog author="mpluskal@suse.com" date="1531828800">- Add baselibs.conf</changelog>
</package>
<package pkgid="3b978abdfde0ae1879538e37bc45ee3e435ac8781dcdd557be615664173ad534" name="collectl" arch="noarch">
  <version epoch="0" ver="4.1.3" rel="lp150.3.3.1"/>
  <changelog author="hvogel@novell.com" date="1270555200">- Update to version 3.4.1
  * new switch --umask for setting mode to files collectl creates
  * support for Fusion-IO disks
  * Support for OFED 1.5
  * Improved performance of playback
  * Added LSB headers to all start scripts
  * New data collection/reporting API
  * New export: gexpr, for exporting data to ganglia
  * Added NFS V4 support and collection
  * Expanded contents of verbose memory output
  * Added Power to environmental monitoring
  * Allow multiple clients to connect when is server mode
  * Added fields to --top for monitoring slabs
  * Expanded --top functionality.
  * Enhanced MDS stats to support lustre 1.6.5
  * Added --grep switch to allow searching/reporting data in raw files
  * A couple of switch names changed to be more consistent
  * Improved help</changelog>
  <changelog author="hvogel@novell.com" date="1288958400">- Update to version 3.4.3
  * when errors detected during initialization not skipping subsequent checks
  * added --dskfilt
  * added check for client-side OST uuid status 'DEACTIVATED'
  * support for CPUs dynamically changing stats and going off/on-line
  * new feature: select process by UID range
  * do not issue 'stty' if !PC, running on terminal and !background.
  * added --netfilt
  * changed disk details to use 'cvt()' for reporting number of I/Os since DM
    numbers
  * 2 new process sort fields: pid and cpu
  * only look at $cpuDisabledFlag when processing CPU data</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="tabraham@suse.com" date="1354708800">- bug-793027.patch: fix for collectl init script (bnc #793027)</changelog>
  <changelog author="coolo@suse.com" date="1362484800">- update license to new format</changelog>
  <changelog author="tabraham@suse.com" date="1370520000">- deleted bug-793027.patch : deprecated
- init-cleanup.patch : init script cleanup
- see RELEASE-collectl for list of changes between 3.4.3 and 3.6.7</changelog>
  <changelog author="p.drouand@gmail.com" date="1382788800">- Drop sysvinit support; none of target distributions use sysvinit
  anymore
- Add systemd support
- Install collectl in /usr/bin to get it launchable with systemd and
  link it in /usr/sbin
- Add a sysconfig file</changelog>
  <changelog author="p.drouand@gmail.com" date="1386849600">- Update to version 3.6.9
  + Typo in network plot header loop resulted in infinite loop
  + remove $int/secs from numa hit rate calc AND add more precision
    to its output
- Changes from 3.6.8
  + new flag $exportComm must be set in gexpr/ganglia so that they won't
    generate an error if run without -f or -A
  + new switch: --intfilt allows filtering of interrupts
  + always log messages of type F/E to syslog in daemon mode even if
  - m is not set
  + wasn't dealing correctly with missing whitespace after network name in
    /proc/dev/net in initRecord()
  + updated init.d script for suse per the maintainer's instructions
  + extra spaces were being printed in plot mode for tpc stats
  + added entry to envrules.std to deal with intel Phi Co-Processor
  + debian init.d script now does 'exit 1' if status reports 'not running'
  + rawnetignore switch wasn't working correctly
  + found/fixed some subtle problems with --procanalyze as well as some cleanup
  - need to ignore first sample after initializing summary arrays
  - need to init summary hashes for thrutime and accumT because get uninit var
    in print routine is only a single process entry
  - found a typo in procAnalyze() to a $usecs which wasn't being used!
  - added error check to make sure --procanalyze with -P requires -s
  + added a little more debugging output for -d128
  + discovered dynamic disk/network detail names for interactive mode were not
    being reported correctly.  sounds a lot worse than it is because this is
    typically not done very often nor are disks/networks very dynamic except in
    large, virtualized environments such as clouds
  + add to list of devices to exlude from network summary data: tap, dp and nl,
    which are associated with openstack cinder.  remember you can always add
    more to that list with --netfilt
  + $lastHour was never referenced and dayInit() called every time a log was
    created so fix logic to update $lastHour correctly AND call initDay() one
    time and do it before newLog() called.
  + closed a couple of file handles that were left open and reportedly
    causing some defunct processes with -sx.
  + fixed bug in lustre stats recording
  + clarified --showsubopts text about disk and network filters in that they
    apply to both summary and detail data output
  + fixed problem with --import and --stats
  + --statsopt a didn't work because when changed some internal logic missed
    changing a test of $timestampFlag to $timestampCounter[$rawPFlag] and so
    now $timestampCount can be removed entirely
  + clear $firstpass after 1st pass during playback
  + make sure filename initialized before calling loadConfig so if there is
    an error logsys() doesn't get an undefined var warning
  + to be safe, remove any quotes on net/dsk filters in case included by
    mistake in DaemonCommands string
  + tightened up tests to see if daemonized collectl already running
  + if no hiRes::Time, fudge the value of $microInterval based on -i
  + new --procOpt k, removes known shells from process listing with -sZ,
    currently set to /bin.sh, /usr/bin/perl, /usr/bin/python and python
  + fixed varname in lexpr: $debug should have been $lexDebug
- Remove init-cleanup.patch; merged on upstream release</changelog>
  <changelog author="tabraham@suse.com" date="1411560000">- Update to version 3.7.4
  See RELEASE-collectl for changes</changelog>
  <changelog author="mpluskal@suse.com" date="1429531200">- Update to 4.0.0
  * for a complete list of changes see RELEASE-collectl
- Cleanup spec-file with spec-cleaner
- Use url for source
- Fix broken rcservice symlink
- Add ommited systemd service pre macro</changelog>
  <changelog author="tabraham@suse.com" date="1432814400">- Update to 4.0.2
  * add /bin/bash to list of 'known shells' excluded from output with
  - -procopt k
  * generalize ethernet network device name to include ALL names
    matching type 'p\dp' so we pick up p2p, p3p, p4p... [thanks Matt]
  * collect nr_shmem so we can track shared memory, apparently something
    I thought of but never acted on [thanks Christian]
  * do not include guest cpu metrics in totals since already accounted
    for in user time</changelog>
  <changelog author="tabraham@suse.com" date="1462363200">- Update to 4.0.4
  + if you try to playback a file with --stats and it has recorded
    processes or slabs, ignore them be removing from $subsys
  + playback of process data with -P was not skipping first interval and so
    stats for first entry we not rates but rather raw numbers
  + change 'yikes' message to something more meaningful
  + fixed problem with -sZ -P printing all 0s for thread count
  + added /usr/lib/systemd/system/collectl.service, per sourceforge help
    discussion on 2015-12-28
  + added disk read/write wait timing for disk detail in terminal, plot
    and lexpr format
  + new switch dskremap allows one to change disk names on the fly because
    in some cases such as etherd disks, the names are messy for use with
    other tools like ganlia
  + removed access to disk name remapping file
  + the rawdskfilt has been enhanced to allow a preceding + which will
    cause the following string to be appended to the default filter
- Changes from 4.0.3
  + add AnonHuge memory to memory stats, both verbose and detailed as
    well as lexpr
  + if lexpr called with --import, throw an error
  + tighten divide-by-zero test for -sM because it looks like in some cases
    when misses &gt;0 we're getting occasional errors.  could hits be somehow
    negative?</changelog>
  <changelog author="tabraham@suse.com" date="1468497600">- Update to 4.0.5
  + rawdskfilt has been enhanced to allow a preceding + which will
    cause the following string to be appended to the default filter
  + needed to initialized anonH for numa stats [thanks andy]
  + added 'hed' to known ethernet devices, used by HP Helion</changelog>
  <changelog author="tabraham@suse.com" date="1476187200">- Update to 4.1.0
  + allow lexpr to pass formatting information for strings and numbers
    [thanks Guy]
  + modify the way misc.ph reports uptime to thousandths of a day [thanks, seb]
  + added OPA interface support for -sx reporting and cleaned up some very
    old code, like quadrics support! [thanks fred]</changelog>
  <changelog author="tabraham@suse.com" date="1488542400">- Update to 4.1.2
  + incorrectly requiring a + with --rawdskfilt to be at beginning
  + when added support for 64bit IB counters it looks like I was only
    saving 3 of the 4 values (loop only went to 3 instead of 4)
    around line 4403. [thanks seb]
- Changes from 4.1.1
  + added packet loss and fast restransmissions to TCP Extended versbose
    output and renamed AkNoPy and PreAck to PurAck and HPAcks to be
    consistent with earlier versions [thanks Sophie]
  + add support for nvme disks [thanks fred]
  + it turns out some people re-enable lustre support for the sake of
    monitoring clients and to support that I had to add a check for
    the lustre-client module which is now in a differetn location than
    others [thanks fred]</changelog>
  <changelog author="tabraham@suse.com" date="1491912000">- include colmux
- Update to 4.1.3
  + correct use of uninitialized variable on output of distro info
    on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1523448000">- Cleanup spec file with spec-cleaner
- Use correct systemd build dependency
- Reduce duplicities in package via fdupes</changelog>
  <changelog author="glin@suse.com" date="1535544000">- Specify the type of service as "forking" (boo#1106366)
- Remove the execution bit from collectl.service
- Create the collectl directory in /var/log</changelog>
</package>
<package pkgid="2bfe4f5ab74e30eeead108e24c666f01a7570a1fa1ea5453d52bf8974213ebbc" name="collectl" arch="src">
  <version epoch="0" ver="4.1.3" rel="lp150.3.3.1"/>
  <changelog author="hvogel@suse.de" date="1215086400">- Initial package, Version 2.6.4</changelog>
  <changelog author="hvogel@novell.com" date="1270555200">- Update to version 3.4.1
  * new switch --umask for setting mode to files collectl creates
  * support for Fusion-IO disks
  * Support for OFED 1.5
  * Improved performance of playback
  * Added LSB headers to all start scripts
  * New data collection/reporting API
  * New export: gexpr, for exporting data to ganglia
  * Added NFS V4 support and collection
  * Expanded contents of verbose memory output
  * Added Power to environmental monitoring
  * Allow multiple clients to connect when is server mode
  * Added fields to --top for monitoring slabs
  * Expanded --top functionality.
  * Enhanced MDS stats to support lustre 1.6.5
  * Added --grep switch to allow searching/reporting data in raw files
  * A couple of switch names changed to be more consistent
  * Improved help</changelog>
  <changelog author="hvogel@novell.com" date="1288958400">- Update to version 3.4.3
  * when errors detected during initialization not skipping subsequent checks
  * added --dskfilt
  * added check for client-side OST uuid status 'DEACTIVATED'
  * support for CPUs dynamically changing stats and going off/on-line
  * new feature: select process by UID range
  * do not issue 'stty' if !PC, running on terminal and !background.
  * added --netfilt
  * changed disk details to use 'cvt()' for reporting number of I/Os since DM
    numbers
  * 2 new process sort fields: pid and cpu
  * only look at $cpuDisabledFlag when processing CPU data</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="tabraham@suse.com" date="1354708800">- bug-793027.patch: fix for collectl init script (bnc #793027)</changelog>
  <changelog author="coolo@suse.com" date="1362484800">- update license to new format</changelog>
  <changelog author="tabraham@suse.com" date="1370520000">- deleted bug-793027.patch : deprecated
- init-cleanup.patch : init script cleanup
- see RELEASE-collectl for list of changes between 3.4.3 and 3.6.7</changelog>
  <changelog author="p.drouand@gmail.com" date="1382788800">- Drop sysvinit support; none of target distributions use sysvinit
  anymore
- Add systemd support
- Install collectl in /usr/bin to get it launchable with systemd and
  link it in /usr/sbin
- Add a sysconfig file</changelog>
  <changelog author="p.drouand@gmail.com" date="1386849600">- Update to version 3.6.9
  + Typo in network plot header loop resulted in infinite loop
  + remove $int/secs from numa hit rate calc AND add more precision
    to its output
- Changes from 3.6.8
  + new flag $exportComm must be set in gexpr/ganglia so that they won't
    generate an error if run without -f or -A
  + new switch: --intfilt allows filtering of interrupts
  + always log messages of type F/E to syslog in daemon mode even if
  - m is not set
  + wasn't dealing correctly with missing whitespace after network name in
    /proc/dev/net in initRecord()
  + updated init.d script for suse per the maintainer's instructions
  + extra spaces were being printed in plot mode for tpc stats
  + added entry to envrules.std to deal with intel Phi Co-Processor
  + debian init.d script now does 'exit 1' if status reports 'not running'
  + rawnetignore switch wasn't working correctly
  + found/fixed some subtle problems with --procanalyze as well as some cleanup
  - need to ignore first sample after initializing summary arrays
  - need to init summary hashes for thrutime and accumT because get uninit var
    in print routine is only a single process entry
  - found a typo in procAnalyze() to a $usecs which wasn't being used!
  - added error check to make sure --procanalyze with -P requires -s
  + added a little more debugging output for -d128
  + discovered dynamic disk/network detail names for interactive mode were not
    being reported correctly.  sounds a lot worse than it is because this is
    typically not done very often nor are disks/networks very dynamic except in
    large, virtualized environments such as clouds
  + add to list of devices to exlude from network summary data: tap, dp and nl,
    which are associated with openstack cinder.  remember you can always add
    more to that list with --netfilt
  + $lastHour was never referenced and dayInit() called every time a log was
    created so fix logic to update $lastHour correctly AND call initDay() one
    time and do it before newLog() called.
  + closed a couple of file handles that were left open and reportedly
    causing some defunct processes with -sx.
  + fixed bug in lustre stats recording
  + clarified --showsubopts text about disk and network filters in that they
    apply to both summary and detail data output
  + fixed problem with --import and --stats
  + --statsopt a didn't work because when changed some internal logic missed
    changing a test of $timestampFlag to $timestampCounter[$rawPFlag] and so
    now $timestampCount can be removed entirely
  + clear $firstpass after 1st pass during playback
  + make sure filename initialized before calling loadConfig so if there is
    an error logsys() doesn't get an undefined var warning
  + to be safe, remove any quotes on net/dsk filters in case included by
    mistake in DaemonCommands string
  + tightened up tests to see if daemonized collectl already running
  + if no hiRes::Time, fudge the value of $microInterval based on -i
  + new --procOpt k, removes known shells from process listing with -sZ,
    currently set to /bin.sh, /usr/bin/perl, /usr/bin/python and python
  + fixed varname in lexpr: $debug should have been $lexDebug
- Remove init-cleanup.patch; merged on upstream release</changelog>
  <changelog author="tabraham@suse.com" date="1411560000">- Update to version 3.7.4
  See RELEASE-collectl for changes</changelog>
  <changelog author="mpluskal@suse.com" date="1429531200">- Update to 4.0.0
  * for a complete list of changes see RELEASE-collectl
- Cleanup spec-file with spec-cleaner
- Use url for source
- Fix broken rcservice symlink
- Add ommited systemd service pre macro</changelog>
  <changelog author="tabraham@suse.com" date="1432814400">- Update to 4.0.2
  * add /bin/bash to list of 'known shells' excluded from output with
  - -procopt k
  * generalize ethernet network device name to include ALL names
    matching type 'p\dp' so we pick up p2p, p3p, p4p... [thanks Matt]
  * collect nr_shmem so we can track shared memory, apparently something
    I thought of but never acted on [thanks Christian]
  * do not include guest cpu metrics in totals since already accounted
    for in user time</changelog>
  <changelog author="tabraham@suse.com" date="1462363200">- Update to 4.0.4
  + if you try to playback a file with --stats and it has recorded
    processes or slabs, ignore them be removing from $subsys
  + playback of process data with -P was not skipping first interval and so
    stats for first entry we not rates but rather raw numbers
  + change 'yikes' message to something more meaningful
  + fixed problem with -sZ -P printing all 0s for thread count
  + added /usr/lib/systemd/system/collectl.service, per sourceforge help
    discussion on 2015-12-28
  + added disk read/write wait timing for disk detail in terminal, plot
    and lexpr format
  + new switch dskremap allows one to change disk names on the fly because
    in some cases such as etherd disks, the names are messy for use with
    other tools like ganlia
  + removed access to disk name remapping file
  + the rawdskfilt has been enhanced to allow a preceding + which will
    cause the following string to be appended to the default filter
- Changes from 4.0.3
  + add AnonHuge memory to memory stats, both verbose and detailed as
    well as lexpr
  + if lexpr called with --import, throw an error
  + tighten divide-by-zero test for -sM because it looks like in some cases
    when misses &gt;0 we're getting occasional errors.  could hits be somehow
    negative?</changelog>
  <changelog author="tabraham@suse.com" date="1468497600">- Update to 4.0.5
  + rawdskfilt has been enhanced to allow a preceding + which will
    cause the following string to be appended to the default filter
  + needed to initialized anonH for numa stats [thanks andy]
  + added 'hed' to known ethernet devices, used by HP Helion</changelog>
  <changelog author="tabraham@suse.com" date="1476187200">- Update to 4.1.0
  + allow lexpr to pass formatting information for strings and numbers
    [thanks Guy]
  + modify the way misc.ph reports uptime to thousandths of a day [thanks, seb]
  + added OPA interface support for -sx reporting and cleaned up some very
    old code, like quadrics support! [thanks fred]</changelog>
  <changelog author="tabraham@suse.com" date="1488542400">- Update to 4.1.2
  + incorrectly requiring a + with --rawdskfilt to be at beginning
  + when added support for 64bit IB counters it looks like I was only
    saving 3 of the 4 values (loop only went to 3 instead of 4)
    around line 4403. [thanks seb]
- Changes from 4.1.1
  + added packet loss and fast restransmissions to TCP Extended versbose
    output and renamed AkNoPy and PreAck to PurAck and HPAcks to be
    consistent with earlier versions [thanks Sophie]
  + add support for nvme disks [thanks fred]
  + it turns out some people re-enable lustre support for the sake of
    monitoring clients and to support that I had to add a check for
    the lustre-client module which is now in a differetn location than
    others [thanks fred]</changelog>
  <changelog author="tabraham@suse.com" date="1491912000">- include colmux
- Update to 4.1.3
  + correct use of uninitialized variable on output of distro info
    on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1523448000">- Cleanup spec file with spec-cleaner
- Use correct systemd build dependency
- Reduce duplicities in package via fdupes</changelog>
  <changelog author="glin@suse.com" date="1535544000">- Specify the type of service as "forking" (boo#1106366)
- Remove the execution bit from collectl.service
- Create the collectl directory in /var/log</changelog>
</package>
<package pkgid="d7ca8d83fce2c5376af5315a0d0f24535e834309eecf852ef1649e210d912c27" name="conman" arch="src">
  <version epoch="0" ver="0.2.9" rel="lp150.5.3.1"/>
  <changelog author="eich@suse.com" date="1478520000">- Initial packaging of conman v 0.2.7.</changelog>
  <changelog author="pmladek@suse.com" date="1479124800">- Call %fillup_only without -d parameter. Otherwise, it installed
  the file into /etc/sysconfig/%{2}/conman because none subdir was
  not defined.</changelog>
  <changelog author="eich@suse.com" date="1479729600">- List directories under /lib explicitely to avoid conflicts
  with directories for debuginfo.</changelog>
  <changelog author="eich@suse.com" date="1483531200">- Removed %clean section.</changelog>
  <changelog author="eich@suse.com" date="1484654400">- Removed stray file.
- Conditionalized support for freeipmi to distro version.
- Set use of tcpwrappers to 'off' by default.
- Fixed build for pre-systemd versions.</changelog>
  <changelog author="eich@suse.com" date="1487160000">- Cleaned up spec file: add generic defines to the top.</changelog>
  <changelog author="jengelh@inai.de" date="1487419200">- Replace unnecessary %__ macro indirections</changelog>
  <changelog author="eich@suse.com" date="1494244800">- conman.conf: make differences between openSUSE and SLES explicit.</changelog>
  <changelog author="jjolly@suse.com" date="1496404800">- conman-suse-fix-expect-scripts.patch:
  Fixed ssh expect script for SUSE-specific output.</changelog>
  <changelog author="jjolly@suse.com" date="1496491200">- conman service configured to start as conman:conman user</changelog>
  <changelog author="eich@suse.com" date="1502712000">- Enable tcpwrappers on all platforms by default.
- Fix systemd-specific conditionals in spec file.
- Remove Provides: group/user(): these are only
  used by conman, there is no intention to provide
  them to other packages.</changelog>
  <changelog author="eich@suse.com" date="1507291200">- Updated to version 0.2.8:
  * Changed project homepage to &lt;https://dun.github.io/conman/&gt;. (#21)
  * Changed conman.conf default loopback setting to ON.
  * Changed rpm spec file from sysvinit to systemd.
  * Added 'server nofile' config directive to increase NOFILE limit. (#17)
  * Added '-P' cmdline opt to daemon for specifying pidfile. (#20)
  * Added test console device to aid in development and testing.
  * Fixed telnet option negotiation loop. (#9)
  * Fixed arbitrary limit on number of IPMI SOL consoles. (#15)
  * Fixed 4-character limit on timezones. (#16)
  * Fixed 1-second delay when connecting the client to a console.
  * Fixed UDS console reconnect delay to use exponential timeout.
  * Fixed UDS console reconnect delay to require min connect time before reset.
  * Fixed UDS console resource leak of pathname during config processing.
  * Fixed all gcc, clang, and Coverity Scan warnings.
  * Improved scalability of daemon.
  (FATE#324170).</changelog>
  <changelog author="eich@suse.com" date="1507550400">- Set usr/group for conman to root/root on SLE12 for backward
  compatibility.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="eich@suse.com" date="1515585600">- Fix conman for non-root user:
  * create rundir
  * create logdir
  * set user/group only when set to non-root
  * fix rundir and logdir in config file on update (boo#1081217).</changelog>
  <changelog author="eich@suse.com" date="1518782400">- Add the conman user to the group of the ttyS* devices
  (boo#1081217).
- Only update config file for new user once, save backup
  copy.</changelog>
  <changelog author="eich@suse.com" date="1520510400">- Do not look for the ttyS* group - it should be dialout
  always (boo#1084571).
- Fix shebang - remove /usr/bin/env.</changelog>
  <changelog author="eich@suse.com" date="1531915200">- If-connect-fails-let-other-side-accept-connection-and-come-back.patch:
  Make sure conmand connects to a newly created UNIX socket with
  minimal delay. The implementation uses inotify, however this triggers
  when the other side bind()s to the socket, however a connection is
  not possible until the other side calls listen().
  Thus if the connection fails, reset the poll() timeout to return to
  connect() as soon as possible (bsc#1101647).
- Support %license in a backward compatible way.</changelog>
  <changelog author="eich@suse.com" date="1535025600">- Replace
  If-connect-fails-let-other-side-accept-connection-and-come-back.patch
  by:
  Reset-delay-for-unixsock-connect-from-inotify.patch:
  Upstream chose to fix bsc#1101647 slightly differently.</changelog>
  <changelog author="eich@suse.com" date="1535025601">- Update to version 0.2.9:
  - Allowed IPMI defaults to be overridden via libipmiconsole.conf. (#27)
  - Updated recognized strings for IPMI workaround-flags (FATE#326641).</changelog>
</package>
<package pkgid="78096cb7dd271eac25e579cc1e8be2271ca680f88eecfa71ba400f05c2524d19" name="conman" arch="x86_64">
  <version epoch="0" ver="0.2.9" rel="lp150.5.3.1"/>
  <changelog author="eich@suse.com" date="1478520000">- Initial packaging of conman v 0.2.7.</changelog>
  <changelog author="pmladek@suse.com" date="1479124800">- Call %fillup_only without -d parameter. Otherwise, it installed
  the file into /etc/sysconfig/%{2}/conman because none subdir was
  not defined.</changelog>
  <changelog author="eich@suse.com" date="1479729600">- List directories under /lib explicitely to avoid conflicts
  with directories for debuginfo.</changelog>
  <changelog author="eich@suse.com" date="1483531200">- Removed %clean section.</changelog>
  <changelog author="eich@suse.com" date="1484654400">- Removed stray file.
- Conditionalized support for freeipmi to distro version.
- Set use of tcpwrappers to 'off' by default.
- Fixed build for pre-systemd versions.</changelog>
  <changelog author="eich@suse.com" date="1487160000">- Cleaned up spec file: add generic defines to the top.</changelog>
  <changelog author="jengelh@inai.de" date="1487419200">- Replace unnecessary %__ macro indirections</changelog>
  <changelog author="eich@suse.com" date="1494244800">- conman.conf: make differences between openSUSE and SLES explicit.</changelog>
  <changelog author="jjolly@suse.com" date="1496404800">- conman-suse-fix-expect-scripts.patch:
  Fixed ssh expect script for SUSE-specific output.</changelog>
  <changelog author="jjolly@suse.com" date="1496491200">- conman service configured to start as conman:conman user</changelog>
  <changelog author="eich@suse.com" date="1502712000">- Enable tcpwrappers on all platforms by default.
- Fix systemd-specific conditionals in spec file.
- Remove Provides: group/user(): these are only
  used by conman, there is no intention to provide
  them to other packages.</changelog>
  <changelog author="eich@suse.com" date="1507291200">- Updated to version 0.2.8:
  * Changed project homepage to &lt;https://dun.github.io/conman/&gt;. (#21)
  * Changed conman.conf default loopback setting to ON.
  * Changed rpm spec file from sysvinit to systemd.
  * Added 'server nofile' config directive to increase NOFILE limit. (#17)
  * Added '-P' cmdline opt to daemon for specifying pidfile. (#20)
  * Added test console device to aid in development and testing.
  * Fixed telnet option negotiation loop. (#9)
  * Fixed arbitrary limit on number of IPMI SOL consoles. (#15)
  * Fixed 4-character limit on timezones. (#16)
  * Fixed 1-second delay when connecting the client to a console.
  * Fixed UDS console reconnect delay to use exponential timeout.
  * Fixed UDS console reconnect delay to require min connect time before reset.
  * Fixed UDS console resource leak of pathname during config processing.
  * Fixed all gcc, clang, and Coverity Scan warnings.
  * Improved scalability of daemon.
  (FATE#324170).</changelog>
  <changelog author="eich@suse.com" date="1507550400">- Set usr/group for conman to root/root on SLE12 for backward
  compatibility.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="eich@suse.com" date="1515585600">- Fix conman for non-root user:
  * create rundir
  * create logdir
  * set user/group only when set to non-root
  * fix rundir and logdir in config file on update (boo#1081217).</changelog>
  <changelog author="eich@suse.com" date="1518782400">- Add the conman user to the group of the ttyS* devices
  (boo#1081217).
- Only update config file for new user once, save backup
  copy.</changelog>
  <changelog author="eich@suse.com" date="1520510400">- Do not look for the ttyS* group - it should be dialout
  always (boo#1084571).
- Fix shebang - remove /usr/bin/env.</changelog>
  <changelog author="eich@suse.com" date="1531915200">- If-connect-fails-let-other-side-accept-connection-and-come-back.patch:
  Make sure conmand connects to a newly created UNIX socket with
  minimal delay. The implementation uses inotify, however this triggers
  when the other side bind()s to the socket, however a connection is
  not possible until the other side calls listen().
  Thus if the connection fails, reset the poll() timeout to return to
  connect() as soon as possible (bsc#1101647).
- Support %license in a backward compatible way.</changelog>
  <changelog author="eich@suse.com" date="1535025600">- Replace
  If-connect-fails-let-other-side-accept-connection-and-come-back.patch
  by:
  Reset-delay-for-unixsock-connect-from-inotify.patch:
  Upstream chose to fix bsc#1101647 slightly differently.</changelog>
  <changelog author="eich@suse.com" date="1535025601">- Update to version 0.2.9:
  - Allowed IPMI defaults to be overridden via libipmiconsole.conf. (#27)
  - Updated recognized strings for IPMI workaround-flags (FATE#326641).</changelog>
</package>
<package pkgid="fc5b6075479130ad0b9d21b59d4f64e589b5fd6ad43fcde63496530bf85e04eb" name="cpupower" arch="src">
  <version epoch="0" ver="4.15" rel="lp150.2.3.1"/>
  <changelog author="trenn@suse.de" date="1396008000">- Update to latest turbostat version (git 2d6e532279ddf30188d5fbd)
  bnc#866862, bnc#869071, bnc#869809
- Adjust MSR include path
  add make_header_file_passable_from_outside.patch</changelog>
  <changelog author="trenn@suse.de" date="1396267200">- If root, try to load msr driver on x86 if /dev/cpu/0/msr is not avail
  Add cpupower-always_try_to_load_msr_driver_as_root.patch</changelog>
  <changelog author="trenn@suse.de" date="1396353600">- Do return 0 if cpupower info -b is called instead of the perf bias value
  which is already printed to stdout.
  Add cpupower-return_zero_on_success.patch
- Remove mc and smt scheduler knobs. These do not exist anymore in latest
  kernels for quite a while now.
  Add cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1407844800">- Update turbostat to latest 3.17 kernel version (in fact it is 3.16-rc7)
  This fixes bnc#891523</changelog>
  <changelog author="trenn@suse.de" date="1407931200">- Fix cpupower_export_tarball_from_git.sh script and make sure msr-index.h
  is included in the turbostat tarball.</changelog>
  <changelog author="trenn@suse.de" date="1422446400">- Update cpupower and turbostat to latest git kernel HEAD version
  this currently is 3.19-rc6, but it is expected that there are no
  changes anymore and the version gets named 3.19 already.
  The patches are already included mainline and get removed from osc:
    cpupower_disable_by_latency.patch
    add_idle_manpages_in_Makefile.patch
    cpupower-always_try_to_load_msr_driver_as_root.patch
    cpupower-return_zero_on_success.patch
    cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1422446401">- Make sources also build against 13.1 and older by providing
  asm-index.h which is included in linux-glibc-devel in newer
  distributions
  * Add turbostat_set_asm_header_fixed.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1452081600">- Drop dead link.
- Fix Obsoletes statement, cpufrequtils package versions were
  greater than cpupower package versions so we must obsolete all
  versions of cpufrequtils.</changelog>
  <changelog author="trenn@suse.de" date="1453809600">- Move from kernel version to turbostat internal version for turbostat
- Add latest turbostat sources (latest git commit: 30f05309bde492)
- Adds Skylake, Broadwell and Knights Landing support for turbostat
  (fate#319798, fate#319183, fate#319516)</changelog>
  <changelog author="trenn@suse.de" date="1461153600">- Add cpuidle functions to public libcpupower
  * Add library_cleanup.patch</changelog>
  <changelog author="trenn@suse.de" date="1461844800">- Update turbostat to version 4.12
- Update cpupower to latest sources
- Let turbostat only build against a local msr-index.h
  Also add the msr-index.h export to the tarball from git repo script
  * Delete make_header_file_passable_from_outside.patch</changelog>
  <changelog author="trenn@suse.de" date="1490184000">- Update cpupower and turbostat to latest kernel v4.10 sources
  D library_cleanup.patch
- Change .c file header file modification, modify in Makefile instead:
  D turbostat_set_asm_header_fixed.patch
  A turbostat_makefile_fix_asm_header.patch
- fate #320908: KBL: Turbostat for KBL H/S &amp; U/Y
- fate #321191: [KNL] turbostat reports to report corect MSR_TURBO_RATIO_LIMIT
  information
- fate #321193: [KNL] turbostat should report correct cpu clock values for
  Knights Landing
- fate #321285: turbostat support for Skylake-SP server
- fate #321286: turbostat support for Harrisonville (Denverton SoC)
- fate #321925: [HPC, KNM, kernel] turbostat support</changelog>
  <changelog author="trenn@suse.de" date="1493812800">- Update to latest mainline sources
- turbostat changed versioning scheme (we now have version 17.04.12)</changelog>
  <changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>
  <changelog author="jengelh@inai.de" date="1507204801">- Rectify RPM groups. Replace old $RPM_ shell variables by macros.
  Apply consistent styling to macros.</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041332,bsc#996052,bsc#976983]</changelog>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
- By that fix a sysfs read bug missing the final '\0' (bsc#1103294)
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
</package>
<package pkgid="07adafc6c5eb2556241f4e0db35b763e627d7c1dae2cbe286dd66452484ff765" name="cpupower" arch="x86_64">
  <version epoch="0" ver="4.15" rel="lp150.2.3.1"/>
  <changelog author="trenn@suse.de" date="1396008000">- Update to latest turbostat version (git 2d6e532279ddf30188d5fbd)
  bnc#866862, bnc#869071, bnc#869809
- Adjust MSR include path
  add make_header_file_passable_from_outside.patch</changelog>
  <changelog author="trenn@suse.de" date="1396267200">- If root, try to load msr driver on x86 if /dev/cpu/0/msr is not avail
  Add cpupower-always_try_to_load_msr_driver_as_root.patch</changelog>
  <changelog author="trenn@suse.de" date="1396353600">- Do return 0 if cpupower info -b is called instead of the perf bias value
  which is already printed to stdout.
  Add cpupower-return_zero_on_success.patch
- Remove mc and smt scheduler knobs. These do not exist anymore in latest
  kernels for quite a while now.
  Add cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1407844800">- Update turbostat to latest 3.17 kernel version (in fact it is 3.16-rc7)
  This fixes bnc#891523</changelog>
  <changelog author="trenn@suse.de" date="1407931200">- Fix cpupower_export_tarball_from_git.sh script and make sure msr-index.h
  is included in the turbostat tarball.</changelog>
  <changelog author="trenn@suse.de" date="1422446400">- Update cpupower and turbostat to latest git kernel HEAD version
  this currently is 3.19-rc6, but it is expected that there are no
  changes anymore and the version gets named 3.19 already.
  The patches are already included mainline and get removed from osc:
    cpupower_disable_by_latency.patch
    add_idle_manpages_in_Makefile.patch
    cpupower-always_try_to_load_msr_driver_as_root.patch
    cpupower-return_zero_on_success.patch
    cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1422446401">- Make sources also build against 13.1 and older by providing
  asm-index.h which is included in linux-glibc-devel in newer
  distributions
  * Add turbostat_set_asm_header_fixed.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1452081600">- Drop dead link.
- Fix Obsoletes statement, cpufrequtils package versions were
  greater than cpupower package versions so we must obsolete all
  versions of cpufrequtils.</changelog>
  <changelog author="trenn@suse.de" date="1453809600">- Move from kernel version to turbostat internal version for turbostat
- Add latest turbostat sources (latest git commit: 30f05309bde492)
- Adds Skylake, Broadwell and Knights Landing support for turbostat
  (fate#319798, fate#319183, fate#319516)</changelog>
  <changelog author="trenn@suse.de" date="1461153600">- Add cpuidle functions to public libcpupower
  * Add library_cleanup.patch</changelog>
  <changelog author="trenn@suse.de" date="1461844800">- Update turbostat to version 4.12
- Update cpupower to latest sources
- Let turbostat only build against a local msr-index.h
  Also add the msr-index.h export to the tarball from git repo script
  * Delete make_header_file_passable_from_outside.patch</changelog>
  <changelog author="trenn@suse.de" date="1490184000">- Update cpupower and turbostat to latest kernel v4.10 sources
  D library_cleanup.patch
- Change .c file header file modification, modify in Makefile instead:
  D turbostat_set_asm_header_fixed.patch
  A turbostat_makefile_fix_asm_header.patch
- fate #320908: KBL: Turbostat for KBL H/S &amp; U/Y
- fate #321191: [KNL] turbostat reports to report corect MSR_TURBO_RATIO_LIMIT
  information
- fate #321193: [KNL] turbostat should report correct cpu clock values for
  Knights Landing
- fate #321285: turbostat support for Skylake-SP server
- fate #321286: turbostat support for Harrisonville (Denverton SoC)
- fate #321925: [HPC, KNM, kernel] turbostat support</changelog>
  <changelog author="trenn@suse.de" date="1493812800">- Update to latest mainline sources
- turbostat changed versioning scheme (we now have version 17.04.12)</changelog>
  <changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>
  <changelog author="jengelh@inai.de" date="1507204801">- Rectify RPM groups. Replace old $RPM_ shell variables by macros.
  Apply consistent styling to macros.</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041332,bsc#996052,bsc#976983]</changelog>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
- By that fix a sysfs read bug missing the final '\0' (bsc#1103294)
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
</package>
<package pkgid="dfb12ec4a62b6df35d185b529cfc51d22d456a9048a90314a4c1b7430615312a" name="cpupower-bench" arch="x86_64">
  <version epoch="0" ver="4.15" rel="lp150.2.3.1"/>
  <changelog author="trenn@suse.de" date="1396008000">- Update to latest turbostat version (git 2d6e532279ddf30188d5fbd)
  bnc#866862, bnc#869071, bnc#869809
- Adjust MSR include path
  add make_header_file_passable_from_outside.patch</changelog>
  <changelog author="trenn@suse.de" date="1396267200">- If root, try to load msr driver on x86 if /dev/cpu/0/msr is not avail
  Add cpupower-always_try_to_load_msr_driver_as_root.patch</changelog>
  <changelog author="trenn@suse.de" date="1396353600">- Do return 0 if cpupower info -b is called instead of the perf bias value
  which is already printed to stdout.
  Add cpupower-return_zero_on_success.patch
- Remove mc and smt scheduler knobs. These do not exist anymore in latest
  kernels for quite a while now.
  Add cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1407844800">- Update turbostat to latest 3.17 kernel version (in fact it is 3.16-rc7)
  This fixes bnc#891523</changelog>
  <changelog author="trenn@suse.de" date="1407931200">- Fix cpupower_export_tarball_from_git.sh script and make sure msr-index.h
  is included in the turbostat tarball.</changelog>
  <changelog author="trenn@suse.de" date="1422446400">- Update cpupower and turbostat to latest git kernel HEAD version
  this currently is 3.19-rc6, but it is expected that there are no
  changes anymore and the version gets named 3.19 already.
  The patches are already included mainline and get removed from osc:
    cpupower_disable_by_latency.patch
    add_idle_manpages_in_Makefile.patch
    cpupower-always_try_to_load_msr_driver_as_root.patch
    cpupower-return_zero_on_success.patch
    cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1422446401">- Make sources also build against 13.1 and older by providing
  asm-index.h which is included in linux-glibc-devel in newer
  distributions
  * Add turbostat_set_asm_header_fixed.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1452081600">- Drop dead link.
- Fix Obsoletes statement, cpufrequtils package versions were
  greater than cpupower package versions so we must obsolete all
  versions of cpufrequtils.</changelog>
  <changelog author="trenn@suse.de" date="1453809600">- Move from kernel version to turbostat internal version for turbostat
- Add latest turbostat sources (latest git commit: 30f05309bde492)
- Adds Skylake, Broadwell and Knights Landing support for turbostat
  (fate#319798, fate#319183, fate#319516)</changelog>
  <changelog author="trenn@suse.de" date="1461153600">- Add cpuidle functions to public libcpupower
  * Add library_cleanup.patch</changelog>
  <changelog author="trenn@suse.de" date="1461844800">- Update turbostat to version 4.12
- Update cpupower to latest sources
- Let turbostat only build against a local msr-index.h
  Also add the msr-index.h export to the tarball from git repo script
  * Delete make_header_file_passable_from_outside.patch</changelog>
  <changelog author="trenn@suse.de" date="1490184000">- Update cpupower and turbostat to latest kernel v4.10 sources
  D library_cleanup.patch
- Change .c file header file modification, modify in Makefile instead:
  D turbostat_set_asm_header_fixed.patch
  A turbostat_makefile_fix_asm_header.patch
- fate #320908: KBL: Turbostat for KBL H/S &amp; U/Y
- fate #321191: [KNL] turbostat reports to report corect MSR_TURBO_RATIO_LIMIT
  information
- fate #321193: [KNL] turbostat should report correct cpu clock values for
  Knights Landing
- fate #321285: turbostat support for Skylake-SP server
- fate #321286: turbostat support for Harrisonville (Denverton SoC)
- fate #321925: [HPC, KNM, kernel] turbostat support</changelog>
  <changelog author="trenn@suse.de" date="1493812800">- Update to latest mainline sources
- turbostat changed versioning scheme (we now have version 17.04.12)</changelog>
  <changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>
  <changelog author="jengelh@inai.de" date="1507204801">- Rectify RPM groups. Replace old $RPM_ shell variables by macros.
  Apply consistent styling to macros.</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041332,bsc#996052,bsc#976983]</changelog>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
- By that fix a sysfs read bug missing the final '\0' (bsc#1103294)
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
</package>
<package pkgid="23c94ea28613991662404c099a8e8a1acb540e3c0f838443177d9931d0581e85" name="cpupower-devel" arch="x86_64">
  <version epoch="0" ver="4.15" rel="lp150.2.3.1"/>
  <changelog author="trenn@suse.de" date="1396008000">- Update to latest turbostat version (git 2d6e532279ddf30188d5fbd)
  bnc#866862, bnc#869071, bnc#869809
- Adjust MSR include path
  add make_header_file_passable_from_outside.patch</changelog>
  <changelog author="trenn@suse.de" date="1396267200">- If root, try to load msr driver on x86 if /dev/cpu/0/msr is not avail
  Add cpupower-always_try_to_load_msr_driver_as_root.patch</changelog>
  <changelog author="trenn@suse.de" date="1396353600">- Do return 0 if cpupower info -b is called instead of the perf bias value
  which is already printed to stdout.
  Add cpupower-return_zero_on_success.patch
- Remove mc and smt scheduler knobs. These do not exist anymore in latest
  kernels for quite a while now.
  Add cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1407844800">- Update turbostat to latest 3.17 kernel version (in fact it is 3.16-rc7)
  This fixes bnc#891523</changelog>
  <changelog author="trenn@suse.de" date="1407931200">- Fix cpupower_export_tarball_from_git.sh script and make sure msr-index.h
  is included in the turbostat tarball.</changelog>
  <changelog author="trenn@suse.de" date="1422446400">- Update cpupower and turbostat to latest git kernel HEAD version
  this currently is 3.19-rc6, but it is expected that there are no
  changes anymore and the version gets named 3.19 already.
  The patches are already included mainline and get removed from osc:
    cpupower_disable_by_latency.patch
    add_idle_manpages_in_Makefile.patch
    cpupower-always_try_to_load_msr_driver_as_root.patch
    cpupower-return_zero_on_success.patch
    cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1422446401">- Make sources also build against 13.1 and older by providing
  asm-index.h which is included in linux-glibc-devel in newer
  distributions
  * Add turbostat_set_asm_header_fixed.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1452081600">- Drop dead link.
- Fix Obsoletes statement, cpufrequtils package versions were
  greater than cpupower package versions so we must obsolete all
  versions of cpufrequtils.</changelog>
  <changelog author="trenn@suse.de" date="1453809600">- Move from kernel version to turbostat internal version for turbostat
- Add latest turbostat sources (latest git commit: 30f05309bde492)
- Adds Skylake, Broadwell and Knights Landing support for turbostat
  (fate#319798, fate#319183, fate#319516)</changelog>
  <changelog author="trenn@suse.de" date="1461153600">- Add cpuidle functions to public libcpupower
  * Add library_cleanup.patch</changelog>
  <changelog author="trenn@suse.de" date="1461844800">- Update turbostat to version 4.12
- Update cpupower to latest sources
- Let turbostat only build against a local msr-index.h
  Also add the msr-index.h export to the tarball from git repo script
  * Delete make_header_file_passable_from_outside.patch</changelog>
  <changelog author="trenn@suse.de" date="1490184000">- Update cpupower and turbostat to latest kernel v4.10 sources
  D library_cleanup.patch
- Change .c file header file modification, modify in Makefile instead:
  D turbostat_set_asm_header_fixed.patch
  A turbostat_makefile_fix_asm_header.patch
- fate #320908: KBL: Turbostat for KBL H/S &amp; U/Y
- fate #321191: [KNL] turbostat reports to report corect MSR_TURBO_RATIO_LIMIT
  information
- fate #321193: [KNL] turbostat should report correct cpu clock values for
  Knights Landing
- fate #321285: turbostat support for Skylake-SP server
- fate #321286: turbostat support for Harrisonville (Denverton SoC)
- fate #321925: [HPC, KNM, kernel] turbostat support</changelog>
  <changelog author="trenn@suse.de" date="1493812800">- Update to latest mainline sources
- turbostat changed versioning scheme (we now have version 17.04.12)</changelog>
  <changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>
  <changelog author="jengelh@inai.de" date="1507204801">- Rectify RPM groups. Replace old $RPM_ shell variables by macros.
  Apply consistent styling to macros.</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041332,bsc#996052,bsc#976983]</changelog>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
- By that fix a sysfs read bug missing the final '\0' (bsc#1103294)
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
</package>
<package pkgid="a5fffde17dad88bde401bcb2e90757d9788957fd8a6139cceed44c4988829922" name="crash" arch="src">
  <version epoch="0" ver="7.2.1" rel="lp150.2.2.1"/>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
</package>
<package pkgid="b0189f367657d0d4e3bd1407a93a7a9a4037cd9794cb822fd2eba07074642dbe" name="crash" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.2.1"/>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
</package>
<package pkgid="ec6552bee60007c584e2eaffdd23fce98ba89e299dcb7ffeedf7c935e37a63be" name="crash" arch="src">
  <version epoch="0" ver="7.2.1" rel="lp150.2.5.1"/>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
</package>
<package pkgid="482f056a647a52bad468d5f3214bd7939cb7b2367d3480a12e144f81d20abf80" name="crash" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.5.1"/>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
</package>
<package pkgid="2674ca76f9b3cca80eef8648b15fd5dd6eb7fbc4a671c8390ac606f6bae5c8b0" name="crash-devel" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.2.1"/>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
</package>
<package pkgid="1da80344b590e4c4398dbce062a4fdf1ff3a9a1172ae560539364d15c812160b" name="crash-devel" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.5.1"/>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
</package>
<package pkgid="739b881279a545277e2147860a344691b9203c295f2d4e561ad767c82660ac81" name="crash-doc" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.2.1"/>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
</package>
<package pkgid="6b6186640fb43b7884523131782d5a3d11c26b369e4f631b40bdb155e45baafc" name="crash-doc" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.5.1"/>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
</package>
<package pkgid="d68db6334c6a71a89914ecdbd19d9925190d97b4485a90b8a52d82dec7978eb9" name="crash-eppic" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.2.1"/>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
</package>
<package pkgid="c5af43f152a61be964e26a47dee35db90e05369d1e9205a17d484a7d29b002f6" name="crash-eppic" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.5.1"/>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
</package>
<package pkgid="cb383ccbdd1ef46d1f7fd0cbb17ce8e10a23a017a1989fbfdaae80b8cc81ba71" name="crash-gcore" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.2.1"/>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
</package>
<package pkgid="945523c6ba3e8835cdf94856e454988897184e3417d098d73d317091fe3838f6" name="crash-gcore" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.5.1"/>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
</package>
<package pkgid="95080f7cef46d8ff03cb6ed7bf150b68e5a6e6c74d7356cc1f518435ce81c3c3" name="crash-kmp-default" arch="x86_64">
  <version epoch="0" ver="7.2.1_k4.12.14_lp150.12.13" rel="lp150.2.2.1"/>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
</package>
<package pkgid="a5243b8e4213afdbf8b3f0dcbe4211b5f645b093ae62c1bd0aa58c75df7cc480" name="crash-kmp-default" arch="x86_64">
  <version epoch="0" ver="7.2.1_k4.12.14_lp150.12.16" rel="lp150.2.5.1"/>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
</package>
<package pkgid="d9f6ef0125445ccd2cacf81f135aa421f72ec78f5bdaeebbc93c32ce756512ec" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.0.0+git.1526547258.54aafa1d" rel="lp150.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1510228800">- Update to version 4.0.0+git.1510233955.43c72bf7:
  * high: bootstrap: Fix readline error in cluster remove (bsc#1067424)
  * low: bootstrap: Clarify removal warning
  * low: bootstrap: Avoid printing None instead of NTP service name (bsc#1060602)</changelog>
  <changelog author="kgronlund@suse.com" date="1510574400">- Update to version 4.0.0+git.1510563824.1aecfa01:
  * high: utils: Use python3 in util scripts (bsc#1067823)
  * high: bootstrap: Use firewall-offline-cmd for firewalld (bsc#1067498)
  * medium: hb_report: Verify corosync.conf exists before opening it (bsc#1067456)
  * low: config: Collect /var/log/ha-cluster-bootstrap.log (bsc#1067438)
  * medium: bootstrap: Avoid SSH to localhost (bsc#1067324)</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Update to version 4.0.0+git.1511256861.18b44cfa:
  * high: bootstrap: Use default IP address for ring0 (bsc#1069142)
  * medium: scripts: make sure gfs2 can be configured using hawk (bsc#1067123)
  * medium: bootstrap: fix init vgfs crash if no "-o device" option
  * medium: bootstrap: fix init storage crash if no value input
  * medium: ui_configure: fix crash when no args given
  * medium: filter exist args
  * low: utils: convert bytes to str (bsc#1067823)
  * low: ui_context: Continue completing when input is an alias
  * low: bootstrap: Change error/confirm message with specific device name</changelog>
  <changelog author="kgronlund@suse.com" date="1511784000">- Update to version 4.0.0+git.1511604050.816cb0f5:
  * high: crm_rpmcheck: Fix bytes to str encoding error (bsc#1069294)
  * medium: bootstrap: Missing dmidecode on ppc64le (bsc#1069802)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388800">- Update to version 4.0.0+git.1512385350.d06aa847:
  * Fix writing non-ascii chars to log (bsc#1070344)
  * Fix is_program(dmidecode) error (bsc#1070344)
  * low: ui_configure: fix for 309d2e, remove "id=" in a save way
  * low: ra: Don't require deprecated parameters (#321)
  * low: cibconfig: use refresh instead of reset after commit</changelog>
  <changelog author="kgronlund@suse.com" date="1512388801">- Update to version 4.0.0+git.1512395407.e65870b4:
  * high: bootstrap: Encode, not decode (bsc#1070344)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388802">- Update to version 4.0.0+git.1512406036.adc26906:
  * high: bootstrap: Fix firewall reload command invocation (bsc#1071108)</changelog>
  <changelog author="kgronlund@suse.com" date="1513080000">- Update to version 4.0.0+git.1513011384.5aebf8a4:
  * high: parse: Support new alert syntax (#280) (bsc#1069129)
  * high: parse: Support new container bundles (fate#323415)
  * low: hb_report: return "" to avoid TypeError
  * low: ui_configure: use filter_keys replace any_startswith</changelog>
  <changelog author="kgronlund@suse.com" date="1513166400">- Update to version 4.0.0+git.1513179435.e1d17d7b:
  * high: scripts: Fix Python 3 migration issues in health, check-uptime (bsc#1071519)</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.0.0+git.1515511613.5ee0eb23:
  * high: scripts: Enable complex expressions in when: (bsc#1074835)
  * medium: hb_report: Support new pacemaker.log location (fate#324508)
  * low: ui_configure: Complete rsc template correctly
  * fix: ra: Convert bytes to str
  * fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.0.0+git.1515767348.9561209c:
  * medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  * medium: bootstrap: Don't try to remove full nodes from remote nodes
  * medium: clvm-vg: update to use LVM-activate RA (bsc#1074835)
  * medium: clvm: update to use lvmlockd instead of clvmd (bsc#1074835)
  * low: ui_node: normal is deprecated in favor of member (fate#324508)
  * low: ui_configure: no complete for rename new_id
  * low: bootstrap: Don't ssh to localhost in remove
  * low: ui_configure: improve do_group completer</changelog>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
</package>
<package pkgid="6055555da75ff6ddcf0800e0710f83328c3377f8c2f55b9769e958bfe3b7a48b" name="crmsh" arch="src">
  <version epoch="0" ver="4.0.0+git.1526547258.54aafa1d" rel="lp150.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1510228800">- Update to version 4.0.0+git.1510233955.43c72bf7:
  * high: bootstrap: Fix readline error in cluster remove (bsc#1067424)
  * low: bootstrap: Clarify removal warning
  * low: bootstrap: Avoid printing None instead of NTP service name (bsc#1060602)</changelog>
  <changelog author="kgronlund@suse.com" date="1510574400">- Update to version 4.0.0+git.1510563824.1aecfa01:
  * high: utils: Use python3 in util scripts (bsc#1067823)
  * high: bootstrap: Use firewall-offline-cmd for firewalld (bsc#1067498)
  * medium: hb_report: Verify corosync.conf exists before opening it (bsc#1067456)
  * low: config: Collect /var/log/ha-cluster-bootstrap.log (bsc#1067438)
  * medium: bootstrap: Avoid SSH to localhost (bsc#1067324)</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Update to version 4.0.0+git.1511256861.18b44cfa:
  * high: bootstrap: Use default IP address for ring0 (bsc#1069142)
  * medium: scripts: make sure gfs2 can be configured using hawk (bsc#1067123)
  * medium: bootstrap: fix init vgfs crash if no "-o device" option
  * medium: bootstrap: fix init storage crash if no value input
  * medium: ui_configure: fix crash when no args given
  * medium: filter exist args
  * low: utils: convert bytes to str (bsc#1067823)
  * low: ui_context: Continue completing when input is an alias
  * low: bootstrap: Change error/confirm message with specific device name</changelog>
  <changelog author="kgronlund@suse.com" date="1511784000">- Update to version 4.0.0+git.1511604050.816cb0f5:
  * high: crm_rpmcheck: Fix bytes to str encoding error (bsc#1069294)
  * medium: bootstrap: Missing dmidecode on ppc64le (bsc#1069802)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388800">- Update to version 4.0.0+git.1512385350.d06aa847:
  * Fix writing non-ascii chars to log (bsc#1070344)
  * Fix is_program(dmidecode) error (bsc#1070344)
  * low: ui_configure: fix for 309d2e, remove "id=" in a save way
  * low: ra: Don't require deprecated parameters (#321)
  * low: cibconfig: use refresh instead of reset after commit</changelog>
  <changelog author="kgronlund@suse.com" date="1512388801">- Update to version 4.0.0+git.1512395407.e65870b4:
  * high: bootstrap: Encode, not decode (bsc#1070344)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388802">- Update to version 4.0.0+git.1512406036.adc26906:
  * high: bootstrap: Fix firewall reload command invocation (bsc#1071108)</changelog>
  <changelog author="kgronlund@suse.com" date="1513080000">- Update to version 4.0.0+git.1513011384.5aebf8a4:
  * high: parse: Support new alert syntax (#280) (bsc#1069129)
  * high: parse: Support new container bundles (fate#323415)
  * low: hb_report: return "" to avoid TypeError
  * low: ui_configure: use filter_keys replace any_startswith</changelog>
  <changelog author="kgronlund@suse.com" date="1513166400">- Update to version 4.0.0+git.1513179435.e1d17d7b:
  * high: scripts: Fix Python 3 migration issues in health, check-uptime (bsc#1071519)</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.0.0+git.1515511613.5ee0eb23:
  * high: scripts: Enable complex expressions in when: (bsc#1074835)
  * medium: hb_report: Support new pacemaker.log location (fate#324508)
  * low: ui_configure: Complete rsc template correctly
  * fix: ra: Convert bytes to str
  * fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.0.0+git.1515767348.9561209c:
  * medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  * medium: bootstrap: Don't try to remove full nodes from remote nodes
  * medium: clvm-vg: update to use LVM-activate RA (bsc#1074835)
  * medium: clvm: update to use lvmlockd instead of clvmd (bsc#1074835)
  * low: ui_node: normal is deprecated in favor of member (fate#324508)
  * low: ui_configure: no complete for rename new_id
  * low: bootstrap: Don't ssh to localhost in remove
  * low: ui_configure: improve do_group completer</changelog>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
</package>
<package pkgid="5d40b073c7f2af103f1736268f0f30a862366a4be52d1d16919e90e019cb6d2f" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.0.0+git.1537967262.68a0bd1e" rel="lp150.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1511784000">- Update to version 4.0.0+git.1511604050.816cb0f5:
  * high: crm_rpmcheck: Fix bytes to str encoding error (bsc#1069294)
  * medium: bootstrap: Missing dmidecode on ppc64le (bsc#1069802)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388800">- Update to version 4.0.0+git.1512385350.d06aa847:
  * Fix writing non-ascii chars to log (bsc#1070344)
  * Fix is_program(dmidecode) error (bsc#1070344)
  * low: ui_configure: fix for 309d2e, remove "id=" in a save way
  * low: ra: Don't require deprecated parameters (#321)
  * low: cibconfig: use refresh instead of reset after commit</changelog>
  <changelog author="kgronlund@suse.com" date="1512388801">- Update to version 4.0.0+git.1512395407.e65870b4:
  * high: bootstrap: Encode, not decode (bsc#1070344)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388802">- Update to version 4.0.0+git.1512406036.adc26906:
  * high: bootstrap: Fix firewall reload command invocation (bsc#1071108)</changelog>
  <changelog author="kgronlund@suse.com" date="1513080000">- Update to version 4.0.0+git.1513011384.5aebf8a4:
  * high: parse: Support new alert syntax (#280) (bsc#1069129)
  * high: parse: Support new container bundles (fate#323415)
  * low: hb_report: return "" to avoid TypeError
  * low: ui_configure: use filter_keys replace any_startswith</changelog>
  <changelog author="kgronlund@suse.com" date="1513166400">- Update to version 4.0.0+git.1513179435.e1d17d7b:
  * high: scripts: Fix Python 3 migration issues in health, check-uptime (bsc#1071519)</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.0.0+git.1515511613.5ee0eb23:
  * high: scripts: Enable complex expressions in when: (bsc#1074835)
  * medium: hb_report: Support new pacemaker.log location (fate#324508)
  * low: ui_configure: Complete rsc template correctly
  * fix: ra: Convert bytes to str
  * fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.0.0+git.1515767348.9561209c:
  * medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  * medium: bootstrap: Don't try to remove full nodes from remote nodes
  * medium: clvm-vg: update to use LVM-activate RA (bsc#1074835)
  * medium: clvm: update to use lvmlockd instead of clvmd (bsc#1074835)
  * low: ui_node: normal is deprecated in favor of member (fate#324508)
  * low: ui_configure: no complete for rename new_id
  * low: bootstrap: Don't ssh to localhost in remove
  * low: ui_configure: improve do_group completer</changelog>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
</package>
<package pkgid="fd53672d2682c07edfcaa2d9567cd72c8c417e9d56f0d54ccab8e5f68b21a485" name="crmsh" arch="src">
  <version epoch="0" ver="4.0.0+git.1537967262.68a0bd1e" rel="lp150.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1511784000">- Update to version 4.0.0+git.1511604050.816cb0f5:
  * high: crm_rpmcheck: Fix bytes to str encoding error (bsc#1069294)
  * medium: bootstrap: Missing dmidecode on ppc64le (bsc#1069802)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388800">- Update to version 4.0.0+git.1512385350.d06aa847:
  * Fix writing non-ascii chars to log (bsc#1070344)
  * Fix is_program(dmidecode) error (bsc#1070344)
  * low: ui_configure: fix for 309d2e, remove "id=" in a save way
  * low: ra: Don't require deprecated parameters (#321)
  * low: cibconfig: use refresh instead of reset after commit</changelog>
  <changelog author="kgronlund@suse.com" date="1512388801">- Update to version 4.0.0+git.1512395407.e65870b4:
  * high: bootstrap: Encode, not decode (bsc#1070344)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388802">- Update to version 4.0.0+git.1512406036.adc26906:
  * high: bootstrap: Fix firewall reload command invocation (bsc#1071108)</changelog>
  <changelog author="kgronlund@suse.com" date="1513080000">- Update to version 4.0.0+git.1513011384.5aebf8a4:
  * high: parse: Support new alert syntax (#280) (bsc#1069129)
  * high: parse: Support new container bundles (fate#323415)
  * low: hb_report: return "" to avoid TypeError
  * low: ui_configure: use filter_keys replace any_startswith</changelog>
  <changelog author="kgronlund@suse.com" date="1513166400">- Update to version 4.0.0+git.1513179435.e1d17d7b:
  * high: scripts: Fix Python 3 migration issues in health, check-uptime (bsc#1071519)</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.0.0+git.1515511613.5ee0eb23:
  * high: scripts: Enable complex expressions in when: (bsc#1074835)
  * medium: hb_report: Support new pacemaker.log location (fate#324508)
  * low: ui_configure: Complete rsc template correctly
  * fix: ra: Convert bytes to str
  * fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.0.0+git.1515767348.9561209c:
  * medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  * medium: bootstrap: Don't try to remove full nodes from remote nodes
  * medium: clvm-vg: update to use LVM-activate RA (bsc#1074835)
  * medium: clvm: update to use lvmlockd instead of clvmd (bsc#1074835)
  * low: ui_node: normal is deprecated in favor of member (fate#324508)
  * low: ui_configure: no complete for rename new_id
  * low: bootstrap: Don't ssh to localhost in remove
  * low: ui_configure: improve do_group completer</changelog>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
</package>
<package pkgid="fe11f69ad482b54d3b33ca9d110e7ead38e5df4a2b392bc2db9ecd0dabb144a0" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.0.0+git.1542103310.dd114188" rel="lp150.2.9.1"/>
  <changelog author="kgronlund@suse.com" date="1513080000">- Update to version 4.0.0+git.1513011384.5aebf8a4:
  * high: parse: Support new alert syntax (#280) (bsc#1069129)
  * high: parse: Support new container bundles (fate#323415)
  * low: hb_report: return "" to avoid TypeError
  * low: ui_configure: use filter_keys replace any_startswith</changelog>
  <changelog author="kgronlund@suse.com" date="1513166400">- Update to version 4.0.0+git.1513179435.e1d17d7b:
  * high: scripts: Fix Python 3 migration issues in health, check-uptime (bsc#1071519)</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.0.0+git.1515511613.5ee0eb23:
  * high: scripts: Enable complex expressions in when: (bsc#1074835)
  * medium: hb_report: Support new pacemaker.log location (fate#324508)
  * low: ui_configure: Complete rsc template correctly
  * fix: ra: Convert bytes to str
  * fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.0.0+git.1515767348.9561209c:
  * medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  * medium: bootstrap: Don't try to remove full nodes from remote nodes
  * medium: clvm-vg: update to use LVM-activate RA (bsc#1074835)
  * medium: clvm: update to use lvmlockd instead of clvmd (bsc#1074835)
  * low: ui_node: normal is deprecated in favor of member (fate#324508)
  * low: ui_configure: no complete for rename new_id
  * low: bootstrap: Don't ssh to localhost in remove
  * low: ui_configure: improve do_group completer</changelog>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
</package>
<package pkgid="369bfc68018081c8d00c499e85ee5930c20ad189423d037e896b3e8a4682315c" name="crmsh" arch="src">
  <version epoch="0" ver="4.0.0+git.1542103310.dd114188" rel="lp150.2.9.1"/>
  <changelog author="kgronlund@suse.com" date="1513080000">- Update to version 4.0.0+git.1513011384.5aebf8a4:
  * high: parse: Support new alert syntax (#280) (bsc#1069129)
  * high: parse: Support new container bundles (fate#323415)
  * low: hb_report: return "" to avoid TypeError
  * low: ui_configure: use filter_keys replace any_startswith</changelog>
  <changelog author="kgronlund@suse.com" date="1513166400">- Update to version 4.0.0+git.1513179435.e1d17d7b:
  * high: scripts: Fix Python 3 migration issues in health, check-uptime (bsc#1071519)</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.0.0+git.1515511613.5ee0eb23:
  * high: scripts: Enable complex expressions in when: (bsc#1074835)
  * medium: hb_report: Support new pacemaker.log location (fate#324508)
  * low: ui_configure: Complete rsc template correctly
  * fix: ra: Convert bytes to str
  * fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.0.0+git.1515767348.9561209c:
  * medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  * medium: bootstrap: Don't try to remove full nodes from remote nodes
  * medium: clvm-vg: update to use LVM-activate RA (bsc#1074835)
  * medium: clvm: update to use lvmlockd instead of clvmd (bsc#1074835)
  * low: ui_node: normal is deprecated in favor of member (fate#324508)
  * low: ui_configure: no complete for rename new_id
  * low: bootstrap: Don't ssh to localhost in remove
  * low: ui_configure: improve do_group completer</changelog>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
</package>
<package pkgid="da311b681204cc54b7ec7cb6489ca603c5e9b562971a3326df79a7b13c3c351a" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.0.0+git.1526547258.54aafa1d" rel="lp150.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1510228800">- Update to version 4.0.0+git.1510233955.43c72bf7:
  * high: bootstrap: Fix readline error in cluster remove (bsc#1067424)
  * low: bootstrap: Clarify removal warning
  * low: bootstrap: Avoid printing None instead of NTP service name (bsc#1060602)</changelog>
  <changelog author="kgronlund@suse.com" date="1510574400">- Update to version 4.0.0+git.1510563824.1aecfa01:
  * high: utils: Use python3 in util scripts (bsc#1067823)
  * high: bootstrap: Use firewall-offline-cmd for firewalld (bsc#1067498)
  * medium: hb_report: Verify corosync.conf exists before opening it (bsc#1067456)
  * low: config: Collect /var/log/ha-cluster-bootstrap.log (bsc#1067438)
  * medium: bootstrap: Avoid SSH to localhost (bsc#1067324)</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Update to version 4.0.0+git.1511256861.18b44cfa:
  * high: bootstrap: Use default IP address for ring0 (bsc#1069142)
  * medium: scripts: make sure gfs2 can be configured using hawk (bsc#1067123)
  * medium: bootstrap: fix init vgfs crash if no "-o device" option
  * medium: bootstrap: fix init storage crash if no value input
  * medium: ui_configure: fix crash when no args given
  * medium: filter exist args
  * low: utils: convert bytes to str (bsc#1067823)
  * low: ui_context: Continue completing when input is an alias
  * low: bootstrap: Change error/confirm message with specific device name</changelog>
  <changelog author="kgronlund@suse.com" date="1511784000">- Update to version 4.0.0+git.1511604050.816cb0f5:
  * high: crm_rpmcheck: Fix bytes to str encoding error (bsc#1069294)
  * medium: bootstrap: Missing dmidecode on ppc64le (bsc#1069802)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388800">- Update to version 4.0.0+git.1512385350.d06aa847:
  * Fix writing non-ascii chars to log (bsc#1070344)
  * Fix is_program(dmidecode) error (bsc#1070344)
  * low: ui_configure: fix for 309d2e, remove "id=" in a save way
  * low: ra: Don't require deprecated parameters (#321)
  * low: cibconfig: use refresh instead of reset after commit</changelog>
  <changelog author="kgronlund@suse.com" date="1512388801">- Update to version 4.0.0+git.1512395407.e65870b4:
  * high: bootstrap: Encode, not decode (bsc#1070344)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388802">- Update to version 4.0.0+git.1512406036.adc26906:
  * high: bootstrap: Fix firewall reload command invocation (bsc#1071108)</changelog>
  <changelog author="kgronlund@suse.com" date="1513080000">- Update to version 4.0.0+git.1513011384.5aebf8a4:
  * high: parse: Support new alert syntax (#280) (bsc#1069129)
  * high: parse: Support new container bundles (fate#323415)
  * low: hb_report: return "" to avoid TypeError
  * low: ui_configure: use filter_keys replace any_startswith</changelog>
  <changelog author="kgronlund@suse.com" date="1513166400">- Update to version 4.0.0+git.1513179435.e1d17d7b:
  * high: scripts: Fix Python 3 migration issues in health, check-uptime (bsc#1071519)</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.0.0+git.1515511613.5ee0eb23:
  * high: scripts: Enable complex expressions in when: (bsc#1074835)
  * medium: hb_report: Support new pacemaker.log location (fate#324508)
  * low: ui_configure: Complete rsc template correctly
  * fix: ra: Convert bytes to str
  * fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.0.0+git.1515767348.9561209c:
  * medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  * medium: bootstrap: Don't try to remove full nodes from remote nodes
  * medium: clvm-vg: update to use LVM-activate RA (bsc#1074835)
  * medium: clvm: update to use lvmlockd instead of clvmd (bsc#1074835)
  * low: ui_node: normal is deprecated in favor of member (fate#324508)
  * low: ui_configure: no complete for rename new_id
  * low: bootstrap: Don't ssh to localhost in remove
  * low: ui_configure: improve do_group completer</changelog>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
</package>
<package pkgid="11d79a596d00e51745aa489fff4ce81900341910f59b156f28e175a15b224228" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.0.0+git.1537967262.68a0bd1e" rel="lp150.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1511784000">- Update to version 4.0.0+git.1511604050.816cb0f5:
  * high: crm_rpmcheck: Fix bytes to str encoding error (bsc#1069294)
  * medium: bootstrap: Missing dmidecode on ppc64le (bsc#1069802)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388800">- Update to version 4.0.0+git.1512385350.d06aa847:
  * Fix writing non-ascii chars to log (bsc#1070344)
  * Fix is_program(dmidecode) error (bsc#1070344)
  * low: ui_configure: fix for 309d2e, remove "id=" in a save way
  * low: ra: Don't require deprecated parameters (#321)
  * low: cibconfig: use refresh instead of reset after commit</changelog>
  <changelog author="kgronlund@suse.com" date="1512388801">- Update to version 4.0.0+git.1512395407.e65870b4:
  * high: bootstrap: Encode, not decode (bsc#1070344)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388802">- Update to version 4.0.0+git.1512406036.adc26906:
  * high: bootstrap: Fix firewall reload command invocation (bsc#1071108)</changelog>
  <changelog author="kgronlund@suse.com" date="1513080000">- Update to version 4.0.0+git.1513011384.5aebf8a4:
  * high: parse: Support new alert syntax (#280) (bsc#1069129)
  * high: parse: Support new container bundles (fate#323415)
  * low: hb_report: return "" to avoid TypeError
  * low: ui_configure: use filter_keys replace any_startswith</changelog>
  <changelog author="kgronlund@suse.com" date="1513166400">- Update to version 4.0.0+git.1513179435.e1d17d7b:
  * high: scripts: Fix Python 3 migration issues in health, check-uptime (bsc#1071519)</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.0.0+git.1515511613.5ee0eb23:
  * high: scripts: Enable complex expressions in when: (bsc#1074835)
  * medium: hb_report: Support new pacemaker.log location (fate#324508)
  * low: ui_configure: Complete rsc template correctly
  * fix: ra: Convert bytes to str
  * fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.0.0+git.1515767348.9561209c:
  * medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  * medium: bootstrap: Don't try to remove full nodes from remote nodes
  * medium: clvm-vg: update to use LVM-activate RA (bsc#1074835)
  * medium: clvm: update to use lvmlockd instead of clvmd (bsc#1074835)
  * low: ui_node: normal is deprecated in favor of member (fate#324508)
  * low: ui_configure: no complete for rename new_id
  * low: bootstrap: Don't ssh to localhost in remove
  * low: ui_configure: improve do_group completer</changelog>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
</package>
<package pkgid="d322aad5456ac7979b5d7a20dfda57586bf8c8a187402c00af1a96e4576b8d98" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.0.0+git.1542103310.dd114188" rel="lp150.2.9.1"/>
  <changelog author="kgronlund@suse.com" date="1513080000">- Update to version 4.0.0+git.1513011384.5aebf8a4:
  * high: parse: Support new alert syntax (#280) (bsc#1069129)
  * high: parse: Support new container bundles (fate#323415)
  * low: hb_report: return "" to avoid TypeError
  * low: ui_configure: use filter_keys replace any_startswith</changelog>
  <changelog author="kgronlund@suse.com" date="1513166400">- Update to version 4.0.0+git.1513179435.e1d17d7b:
  * high: scripts: Fix Python 3 migration issues in health, check-uptime (bsc#1071519)</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.0.0+git.1515511613.5ee0eb23:
  * high: scripts: Enable complex expressions in when: (bsc#1074835)
  * medium: hb_report: Support new pacemaker.log location (fate#324508)
  * low: ui_configure: Complete rsc template correctly
  * fix: ra: Convert bytes to str
  * fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.0.0+git.1515767348.9561209c:
  * medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  * medium: bootstrap: Don't try to remove full nodes from remote nodes
  * medium: clvm-vg: update to use LVM-activate RA (bsc#1074835)
  * medium: clvm: update to use lvmlockd instead of clvmd (bsc#1074835)
  * low: ui_node: normal is deprecated in favor of member (fate#324508)
  * low: ui_configure: no complete for rename new_id
  * low: bootstrap: Don't ssh to localhost in remove
  * low: ui_configure: improve do_group completer</changelog>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
</package>
<package pkgid="2589fe8b11b08f20b4c492c56e235427a674636974bc014c1673eb4dddf9ab7b" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.0.0+git.1526547258.54aafa1d" rel="lp150.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1510228800">- Update to version 4.0.0+git.1510233955.43c72bf7:
  * high: bootstrap: Fix readline error in cluster remove (bsc#1067424)
  * low: bootstrap: Clarify removal warning
  * low: bootstrap: Avoid printing None instead of NTP service name (bsc#1060602)</changelog>
  <changelog author="kgronlund@suse.com" date="1510574400">- Update to version 4.0.0+git.1510563824.1aecfa01:
  * high: utils: Use python3 in util scripts (bsc#1067823)
  * high: bootstrap: Use firewall-offline-cmd for firewalld (bsc#1067498)
  * medium: hb_report: Verify corosync.conf exists before opening it (bsc#1067456)
  * low: config: Collect /var/log/ha-cluster-bootstrap.log (bsc#1067438)
  * medium: bootstrap: Avoid SSH to localhost (bsc#1067324)</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Update to version 4.0.0+git.1511256861.18b44cfa:
  * high: bootstrap: Use default IP address for ring0 (bsc#1069142)
  * medium: scripts: make sure gfs2 can be configured using hawk (bsc#1067123)
  * medium: bootstrap: fix init vgfs crash if no "-o device" option
  * medium: bootstrap: fix init storage crash if no value input
  * medium: ui_configure: fix crash when no args given
  * medium: filter exist args
  * low: utils: convert bytes to str (bsc#1067823)
  * low: ui_context: Continue completing when input is an alias
  * low: bootstrap: Change error/confirm message with specific device name</changelog>
  <changelog author="kgronlund@suse.com" date="1511784000">- Update to version 4.0.0+git.1511604050.816cb0f5:
  * high: crm_rpmcheck: Fix bytes to str encoding error (bsc#1069294)
  * medium: bootstrap: Missing dmidecode on ppc64le (bsc#1069802)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388800">- Update to version 4.0.0+git.1512385350.d06aa847:
  * Fix writing non-ascii chars to log (bsc#1070344)
  * Fix is_program(dmidecode) error (bsc#1070344)
  * low: ui_configure: fix for 309d2e, remove "id=" in a save way
  * low: ra: Don't require deprecated parameters (#321)
  * low: cibconfig: use refresh instead of reset after commit</changelog>
  <changelog author="kgronlund@suse.com" date="1512388801">- Update to version 4.0.0+git.1512395407.e65870b4:
  * high: bootstrap: Encode, not decode (bsc#1070344)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388802">- Update to version 4.0.0+git.1512406036.adc26906:
  * high: bootstrap: Fix firewall reload command invocation (bsc#1071108)</changelog>
  <changelog author="kgronlund@suse.com" date="1513080000">- Update to version 4.0.0+git.1513011384.5aebf8a4:
  * high: parse: Support new alert syntax (#280) (bsc#1069129)
  * high: parse: Support new container bundles (fate#323415)
  * low: hb_report: return "" to avoid TypeError
  * low: ui_configure: use filter_keys replace any_startswith</changelog>
  <changelog author="kgronlund@suse.com" date="1513166400">- Update to version 4.0.0+git.1513179435.e1d17d7b:
  * high: scripts: Fix Python 3 migration issues in health, check-uptime (bsc#1071519)</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.0.0+git.1515511613.5ee0eb23:
  * high: scripts: Enable complex expressions in when: (bsc#1074835)
  * medium: hb_report: Support new pacemaker.log location (fate#324508)
  * low: ui_configure: Complete rsc template correctly
  * fix: ra: Convert bytes to str
  * fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.0.0+git.1515767348.9561209c:
  * medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  * medium: bootstrap: Don't try to remove full nodes from remote nodes
  * medium: clvm-vg: update to use LVM-activate RA (bsc#1074835)
  * medium: clvm: update to use lvmlockd instead of clvmd (bsc#1074835)
  * low: ui_node: normal is deprecated in favor of member (fate#324508)
  * low: ui_configure: no complete for rename new_id
  * low: bootstrap: Don't ssh to localhost in remove
  * low: ui_configure: improve do_group completer</changelog>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
</package>
<package pkgid="d2b9887198daad0294f4ec6f604a910236c1e2cebe00982eb7c0a16d5568d6e4" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.0.0+git.1537967262.68a0bd1e" rel="lp150.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1511784000">- Update to version 4.0.0+git.1511604050.816cb0f5:
  * high: crm_rpmcheck: Fix bytes to str encoding error (bsc#1069294)
  * medium: bootstrap: Missing dmidecode on ppc64le (bsc#1069802)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388800">- Update to version 4.0.0+git.1512385350.d06aa847:
  * Fix writing non-ascii chars to log (bsc#1070344)
  * Fix is_program(dmidecode) error (bsc#1070344)
  * low: ui_configure: fix for 309d2e, remove "id=" in a save way
  * low: ra: Don't require deprecated parameters (#321)
  * low: cibconfig: use refresh instead of reset after commit</changelog>
  <changelog author="kgronlund@suse.com" date="1512388801">- Update to version 4.0.0+git.1512395407.e65870b4:
  * high: bootstrap: Encode, not decode (bsc#1070344)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388802">- Update to version 4.0.0+git.1512406036.adc26906:
  * high: bootstrap: Fix firewall reload command invocation (bsc#1071108)</changelog>
  <changelog author="kgronlund@suse.com" date="1513080000">- Update to version 4.0.0+git.1513011384.5aebf8a4:
  * high: parse: Support new alert syntax (#280) (bsc#1069129)
  * high: parse: Support new container bundles (fate#323415)
  * low: hb_report: return "" to avoid TypeError
  * low: ui_configure: use filter_keys replace any_startswith</changelog>
  <changelog author="kgronlund@suse.com" date="1513166400">- Update to version 4.0.0+git.1513179435.e1d17d7b:
  * high: scripts: Fix Python 3 migration issues in health, check-uptime (bsc#1071519)</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.0.0+git.1515511613.5ee0eb23:
  * high: scripts: Enable complex expressions in when: (bsc#1074835)
  * medium: hb_report: Support new pacemaker.log location (fate#324508)
  * low: ui_configure: Complete rsc template correctly
  * fix: ra: Convert bytes to str
  * fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.0.0+git.1515767348.9561209c:
  * medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  * medium: bootstrap: Don't try to remove full nodes from remote nodes
  * medium: clvm-vg: update to use LVM-activate RA (bsc#1074835)
  * medium: clvm: update to use lvmlockd instead of clvmd (bsc#1074835)
  * low: ui_node: normal is deprecated in favor of member (fate#324508)
  * low: ui_configure: no complete for rename new_id
  * low: bootstrap: Don't ssh to localhost in remove
  * low: ui_configure: improve do_group completer</changelog>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
</package>
<package pkgid="cae9536886077a561447ad4b3901af998aca77ea46ef5c9ac880ddb1ad93e93f" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.0.0+git.1542103310.dd114188" rel="lp150.2.9.1"/>
  <changelog author="kgronlund@suse.com" date="1513080000">- Update to version 4.0.0+git.1513011384.5aebf8a4:
  * high: parse: Support new alert syntax (#280) (bsc#1069129)
  * high: parse: Support new container bundles (fate#323415)
  * low: hb_report: return "" to avoid TypeError
  * low: ui_configure: use filter_keys replace any_startswith</changelog>
  <changelog author="kgronlund@suse.com" date="1513166400">- Update to version 4.0.0+git.1513179435.e1d17d7b:
  * high: scripts: Fix Python 3 migration issues in health, check-uptime (bsc#1071519)</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.0.0+git.1515511613.5ee0eb23:
  * high: scripts: Enable complex expressions in when: (bsc#1074835)
  * medium: hb_report: Support new pacemaker.log location (fate#324508)
  * low: ui_configure: Complete rsc template correctly
  * fix: ra: Convert bytes to str
  * fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.0.0+git.1515767348.9561209c:
  * medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  * medium: bootstrap: Don't try to remove full nodes from remote nodes
  * medium: clvm-vg: update to use LVM-activate RA (bsc#1074835)
  * medium: clvm: update to use lvmlockd instead of clvmd (bsc#1074835)
  * low: ui_node: normal is deprecated in favor of member (fate#324508)
  * low: ui_configure: no complete for rename new_id
  * low: bootstrap: Don't ssh to localhost in remove
  * low: ui_configure: improve do_group completer</changelog>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
</package>
<package pkgid="d8a7f5b77606540ddf4d420205aca35809e3708a35c8552f967af4f8b9aa15c0" name="cross-aarch64-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="987ac309d298001f12ecbdc5de89e60ebb57c8f87c7c88fd6a5ef090159eadda" name="cross-aarch64-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="e0bc035b2a1ff7c98b88aee812f3a3e1e1ca9a65b45563e97f6c4f2e9475d439" name="cross-arm-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="fdb5b3a07b09c7f397f3ba851ed5cb1c706e9d9776c0d50ce35d286e3ed16cc9" name="cross-arm-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="635b5b37464b81a80228761eaab31bca3e16106885d177b65f7859354f823a4b" name="cross-avr-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="6ac084db0dfa4d8540c5a45c412c39ca905db9df8076fa970e37cf3c6879cb35" name="cross-avr-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="1138216e8b711196e18866c2b2f8e4db73f751d58eed87228d39f14a7278c039" name="cross-epiphany-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="e078ff2dbf9e5888cb955b0d026d43e129db354ef0222aa07628bb8dd11ecc46" name="cross-epiphany-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="1d9b8cdfe795d2cba375656fc380667c15cb41ec84cf3a0c50208026fa5a59dd" name="cross-hppa-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="6dd23fa4c639b0eb1c7283f5f91f3d707a15191d9d8409d7022dd7666fe681d9" name="cross-hppa-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="cb61b93d1767895cd9e92274aa22fcf3bf5218ca273f872044ab8224fd6810ed" name="cross-hppa64-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="b1008d61121774a32d9d445de7b0a4482a269fd6ed9685333d254c52724f7ecf" name="cross-hppa64-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="c8dffb97d17fcc3f99cdfba0fb4942105daf71588007fb831d13094fed5f14b1" name="cross-i386-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="a60738a4ee4a19fc2b6bc46cf6e23bf40e2bc0dae4c8123fda5e5847eeeb2f96" name="cross-i386-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="6c7545acc814ff0063ff6c01338e93101d1c301e75c714a148943cde533c4495" name="cross-ia64-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="29a115007baa1fb540c0b87d3435a07f4c2973f24cc6318394a53e0f59642c6c" name="cross-ia64-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="934cf0595661bb88c60eebdd015263d930c54a6acb5dccb9341d06e5cd56a895" name="cross-m68k-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="61fcc6142ff70115f0dea54be21f526fc432e888dee40b7c65168c7215c8e6da" name="cross-m68k-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="f1b477a69b1c32eefd1dec51e729af888a645342b6150e9a8a5d8fcd07efe8f7" name="cross-mips-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="362e51cf156b2498c639148511909862f26f12171951aa981e15b92d981c403c" name="cross-mips-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="8a30c024899692ae5e50a73d32a5a199a6d4a42f69f5a4043e5871b7eb0952c4" name="cross-ppc-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="5b676d09f26b56dfd4faaeeda6e2f659aa136494a47a0151bd630c4cca730f04" name="cross-ppc-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="f8993409afd1fb4ec6e375cf179d2716632412e13b72c904dd264c1e7ff275e5" name="cross-ppc64-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="16b1e9ea455c785cdd1164928d39e7da6c65199aa6f58d0420d36fbf87b71dcc" name="cross-ppc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="af5d2f3207ecd492b9d253395ccb90d9e12dfd2b324fb621ff625e6bb69c1525" name="cross-ppc64le-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="1bbab8d937668ce729f31499886163e13edfa2704760260d64dae5d9257c8c44" name="cross-ppc64le-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="de8bc94d5d6bb513778b0d9bf7deeb06b4ea94027f3df23ea84b40f4f0c51634" name="cross-riscv64-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="2b62133c6c22a483c32c8002fd32490dfc90e5b68d396829fa952c9033df2d2a" name="cross-riscv64-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="9aef6f8c792cc2555010db8acdcd76a79e0330b91aa12d25492c51bdee5d3d11" name="cross-rx-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="a384dc217a7b73e0e019c6e706e3e82ceda1fb52578a1afb690a915f703435c5" name="cross-rx-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="54929169691028207ee7d2d09d6812194bd340c076f17d311d5f80c8c59c085e" name="cross-s390-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="63f747ae9e5d49fe2b555feeb6af89a08487bce33c5afbeb101374cfa65c8969" name="cross-s390-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="8b6b29d957bcda39114faea381330790edc50407090928e31713558feb34e301" name="cross-s390x-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="cf45fc12ffc83433dcb49a3ec4e13af6bcf9dea51ca1c8414422efa7c3983042" name="cross-s390x-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="4f17767f6c96ac5de273668f588e07eb771e978ba55412e3eaf9d9e09475349e" name="cross-sparc-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="bbc25ab4760a742116dad04026a7cc4375f98eaeb37adbf106c9f1753054de4a" name="cross-sparc-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="6997de40d17b25e5eac091dc0aa8e322e5c6f9e15fda6cc23477336b925394ab" name="cross-sparc64-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="2ec77193824ba5e3473c1dcc843b434abacfd8c1b4f643e08e67e4073d48cbe5" name="cross-sparc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="b1f52c75ff9fcf70339172ff23f648e13d11b1dcfbc79e736c004789d12f8d38" name="cross-spu-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="c0680bc1a24333c9119004717071ba8a2684d6660e6c12f132b30929bcf37d89" name="cross-spu-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="c7aa832a82e777b2781e3b94632e367a78c7834b5ff303462583856ae33bcbaa" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="77ab1464f05a09a1eef7f0252b4dd3a7453e1f9492c6ff6a613c3c3eb35d50ad" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="c2a69be467a3ca9467b9ea1ebcd1229494117e7674b5d4831194d0623778cbe9" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="5c60b098a13a9ada96dcb32a38e95e6fb7e0b33536f6fa51b2773aebe375ff46" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="2e6c842b610f0b93786613754d6cb9cada1df315ae54b528ee7895acf5d9d78b" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="82d92e6462bb844906ad82bcf2640fe8e106c44f31ed979a519cb27fa228e082" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="f320002e4985348c6f295d02085a30e5147756d423c930635f8da64018c540f9" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="8d121d826ac9bbed348fe3ab5075b989e29c5331c4c996cf955c557f9851e325" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="fa37d5deabd6bd8e508dbd39cfd354c231e4ca8951c913e0063eda8f3c216035" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="fa7b1ecdebd60624d484764a80338e7da0755919814167fece0407bf8c46d8c2" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="72e0ed5629a094b2814e6b29e8ab6eaba1991e013621a43a499c802ee5926b20" name="cups" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="8e0ba17e1f5ceaa8bfc7176d4234fd32d17b8749830599d32b688b3c7910a903" name="cups-client" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="1d6173ac318c67616b30f5c4408455aef6a1048fd710aa680015f5d75e51d8ff" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="5e6794990c86db49cc993bdaf60d81814de8e505f9ea326af58a9c9cd8e6c6cc" name="cups-ddk" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="a605d965e34bfd022de862ff3deb5dd6bb76a9d71b4a01ffd0c973b3946d71c5" name="cups-devel" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="3a2df2c6650d02cb32c6964b2097f406b888ede875d48577d0626911bf0c1a22" name="cups-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="d43e2ef6d3df731950a34ac7624adbb1f7507dbf93c37f664505b3b7568c49ba" name="curl" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
</package>
<package pkgid="9510ace316cae985150f2c91d9ee05ce6d14cc11840ec2a270f0a65878452b58" name="curl" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
</package>
<package pkgid="3fe240f9653e29ec5bd3a3d13d4b09f1e820cc8db8382a11ae0f7678a720845c" name="curl" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.15.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1112758, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
</package>
<package pkgid="39e4804f9accd81a390f98e629ee96c7ba6f46ce626e37fc82049510cb1e82fc" name="curl" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.15.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1112758, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
</package>
<package pkgid="bd01815943b2e58c84cb2de613cf614995a02d99b51b9584c7b0dfc7ec4c62ad" name="curl" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.3.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="df8bc3350530b8690998ce669f28bcee411640140ef50c3fc58d1d888ae6fde2" name="curl" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.3.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="0d91ea281432f93d65cd9d76d21d476096cc8442b7d72cf15dd86861fd0c50d4" name="curl" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.6.1"/>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
</package>
<package pkgid="8f2debadd40120ab611a899869b448d2bc3833904dd02a5e0c61021c896f6e9a" name="curl" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.6.1"/>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
</package>
<package pkgid="1971e7a7f352c46c0ba2773c1f78a6b554b4acec1372f5cd4356c3493efdd1de" name="curl" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
</package>
<package pkgid="3e4d9a5484f67d82cee488b190223b56919cb97f1be54d5f823cc518bf506408" name="curl" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
</package>
<package pkgid="342f5e87d7b3fc2b3dc4ae215274166d3711f5e67d57d6c13d3add6451f044f9" name="curl-mini" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
</package>
<package pkgid="5e033a4da46050898fb95405095db53c05994b35a62a80c10c313a2d483b3cdb" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
</package>
<package pkgid="22b6f30323924c4fc4150b3263963accbb1dcc1929d0deddd5e1d32b3ba209fb" name="curl-mini" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.15.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1112758, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
</package>
<package pkgid="38c454c86c96e0e403111feb0f053d785f1c238014d18fa13532849f3b4f06fe" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.15.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1112758, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
</package>
<package pkgid="133ae8de811720ca774160ae098f1096726d0b5b5eccd0b8be448fab2951fd06" name="curl-mini" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.3.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="3f845e46e4e9ca859775481ba59cf49aae4ad6819d473ae6318c3545b59a731b" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.3.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="fb16c2f04b687ef1c819ebf138d1defab79a782b7d584aa8fb247cb94aaf16b4" name="curl-mini" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.6.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="d454761b312f6a59865c714b68bcc26a1734874799cfb3d00903175f49178bda" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.6.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="4ce08bde493b2a5e77e7625d41ca679a403072d670f63c22bdc4e6c5f41c382b" name="curl-mini" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.9.1"/>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
</package>
<package pkgid="b6ab7a2d89daef85280726f453b4135d431d2d5d0e0fe7aba0e8f2e9c3c8bd03" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.9.1"/>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
</package>
<package pkgid="091085b1e8fb88599cd3658fcb65096b25e299c342f050c0bfad55f71b71bf00" name="dapl" arch="src">
  <version epoch="0" ver="2.1.10" rel="lp150.2.3.1"/>
  <changelog author="pth@suse.de" date="1400587200">- Fix typo in dapl_test.c.</changelog>
  <changelog author="pth@suse.de" date="1403697600">- Provide full source URL</changelog>
  <changelog author="pth@suse.de" date="1403697601">- Remove dapl-2.0.13-build_error.patch as it isn't needed anymore.</changelog>
  <changelog author="pth@suse.de" date="1403870400">- Add baselibs.conf and dapl-rpmlintrc as source.
- Fix dapl-fix_type_punning.patch.
- Fix type punning in cm.c</changelog>
  <changelog author="pth@suse.de" date="1407153600">- Remove s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407412800">- Readd s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407499200">- Add dapl-rename_dtest.patch to rename dtest to dpltest because
  of name clash with dateutils.
- Also rename the man  page for dtest.
- Make dapl-devel and dapl-debug-devel obsolete each other.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- dapl-debug can't obsolete dapl or zypper will switch between the versions
  all the time. They do conflict though</changelog>
  <changelog author="dimstar@opensuse.org" date="1423051200">- Also have dapl-utils conflict with dapl-debug-utils.
- Fix baselibs.conf to build libdat2-2-32bit.</changelog>
  <changelog author="pth@suse.de" date="1439294400">- Replace dapl-s390_support.patch with
  dapl-add-s390x-platform-support.patch (bsc#934683).
- Fix library name in baselibs.conf.
- Tag baselibs.conf and dapl-rpmlintrc as source.
- libdapl*.so work like plugins, hence they do not get a separate
  subpackage. So shut up rpmlint complaining about the package
  name.
- Drop the dapl-doc sub package and move the man pages to the
  packages containing the files/programs they describe.</changelog>
  <changelog author="pth@suse.de" date="1440504000">- Exclude aarch64 as there is currently no assembler code for this
  architecture.</changelog>
  <changelog author="dmueller@suse.com" date="1441886400">- add dapl-add-aarch64-platform-support.patch (fate#318444)
- revert last change</changelog>
  <changelog author="pth@suse.de" date="1457611200">- Update to 2.1.8 git version (bsc#970668).
  List of changes is too long so please see the included ChangeLog.
- Patches removed because the fixes are included upstream:
  dapl-fix_type_punning.patch
  dapl-autotools.patch
  dapl-add-s390x-platform-support.patch
  dapl-add-aarch64-platform-support.patch
  dapl-add-s390x-platform-support.patch
- Add dapl-s390.patch so that the defines are also valid for s390</changelog>
  <changelog author="pth@suse.de" date="1490788800">- Make dependencies on libs now coming from rdma-core versioned.
- Remove unused patch dapl-rename_dtest.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1495022400">- Disable dapl on armv7hl</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Restore description of libdapl. Fix some grammar errors.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Add conflicts between dapl and dapl-debug packages for devel
  and utils
- Rename dapl-utils tests to avoid conflicts with other packages (dateutils)
  * dapltest =&gt; dapl-test
  * dtest    =&gt; dapl-utest
  * dtestcm  =&gt; dapl-testcm
  * dtestsrq =&gt; dapl-testsrq
  * dtestx   =&gt; dapl-testx
- Remove librdmacm and libibverbs version dependencies</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1497268800">- Merge .changes files with SLE12-SP3 (bsc#1041579)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1500552000">- Update to 2.1.10
  * dtest_suite: add option to pause the test.
  * dtestcm: add client retry, give server time to queue up all listens
  * dtest: Add new man pages. (dtestx dtestcm dtestsrq)
  * cma: fix open_query mode, initialize attributes
  * ucm: up level CM timer logging, increase drep time at scale
  * dtest: fix return value check on do_rdma_write_with_msg
  * dtestx: check device capabilities and do atomic tests only if supported by HW
  * common: set atomic attributes based on provider/device capabilities
  * build: dtest_suite.sh was moved to test/scripts
  * mpxyd: let TX thread sleep if no open devices are referenced
  * mcm: when mmap req from MIC return with fail stat print WARN.
  * dtest_suite: remove duplicate dtest_suite.sh
  * dtest: enable -D option (data check) to work with scif provider
  * dtest_suite: fix typo in user_string var
  * mcm: remove logs from post send speed path
  * mcm proxy: push WR from MIC to host with scif mmap memory instead of scif_send.
  * dtest: the default size in pingpong test is set to 1 byte regardless to user input.
  * dtest: cleanup 4 printfs from the middle of performance test, may reduce performance.
- Refresh patches against 2.1.10</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527595200">- Add ucm-mcm-fix-backlog-parameter-for-socket.patch to fix
  a "deadlock" that causes socket connection to timeout when
  net.ipv4.tcp_syncookies=0. (bsc#1094657)</changelog>
</package>
<package pkgid="63f52de8cdabce4978e2fb0a001e8b23aa340a324907f56aac4582bb7bf9bb5a" name="dapl" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="lp150.2.3.1"/>
  <changelog author="pth@suse.de" date="1400587200">- Fix typo in dapl_test.c.</changelog>
  <changelog author="pth@suse.de" date="1403697600">- Provide full source URL</changelog>
  <changelog author="pth@suse.de" date="1403697601">- Remove dapl-2.0.13-build_error.patch as it isn't needed anymore.</changelog>
  <changelog author="pth@suse.de" date="1403870400">- Add baselibs.conf and dapl-rpmlintrc as source.
- Fix dapl-fix_type_punning.patch.
- Fix type punning in cm.c</changelog>
  <changelog author="pth@suse.de" date="1407153600">- Remove s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407412800">- Readd s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407499200">- Add dapl-rename_dtest.patch to rename dtest to dpltest because
  of name clash with dateutils.
- Also rename the man  page for dtest.
- Make dapl-devel and dapl-debug-devel obsolete each other.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- dapl-debug can't obsolete dapl or zypper will switch between the versions
  all the time. They do conflict though</changelog>
  <changelog author="dimstar@opensuse.org" date="1423051200">- Also have dapl-utils conflict with dapl-debug-utils.
- Fix baselibs.conf to build libdat2-2-32bit.</changelog>
  <changelog author="pth@suse.de" date="1439294400">- Replace dapl-s390_support.patch with
  dapl-add-s390x-platform-support.patch (bsc#934683).
- Fix library name in baselibs.conf.
- Tag baselibs.conf and dapl-rpmlintrc as source.
- libdapl*.so work like plugins, hence they do not get a separate
  subpackage. So shut up rpmlint complaining about the package
  name.
- Drop the dapl-doc sub package and move the man pages to the
  packages containing the files/programs they describe.</changelog>
  <changelog author="pth@suse.de" date="1440504000">- Exclude aarch64 as there is currently no assembler code for this
  architecture.</changelog>
  <changelog author="dmueller@suse.com" date="1441886400">- add dapl-add-aarch64-platform-support.patch (fate#318444)
- revert last change</changelog>
  <changelog author="pth@suse.de" date="1457611200">- Update to 2.1.8 git version (bsc#970668).
  List of changes is too long so please see the included ChangeLog.
- Patches removed because the fixes are included upstream:
  dapl-fix_type_punning.patch
  dapl-autotools.patch
  dapl-add-s390x-platform-support.patch
  dapl-add-aarch64-platform-support.patch
  dapl-add-s390x-platform-support.patch
- Add dapl-s390.patch so that the defines are also valid for s390</changelog>
  <changelog author="pth@suse.de" date="1490788800">- Make dependencies on libs now coming from rdma-core versioned.
- Remove unused patch dapl-rename_dtest.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1495022400">- Disable dapl on armv7hl</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Restore description of libdapl. Fix some grammar errors.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Add conflicts between dapl and dapl-debug packages for devel
  and utils
- Rename dapl-utils tests to avoid conflicts with other packages (dateutils)
  * dapltest =&gt; dapl-test
  * dtest    =&gt; dapl-utest
  * dtestcm  =&gt; dapl-testcm
  * dtestsrq =&gt; dapl-testsrq
  * dtestx   =&gt; dapl-testx
- Remove librdmacm and libibverbs version dependencies</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1497268800">- Merge .changes files with SLE12-SP3 (bsc#1041579)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1500552000">- Update to 2.1.10
  * dtest_suite: add option to pause the test.
  * dtestcm: add client retry, give server time to queue up all listens
  * dtest: Add new man pages. (dtestx dtestcm dtestsrq)
  * cma: fix open_query mode, initialize attributes
  * ucm: up level CM timer logging, increase drep time at scale
  * dtest: fix return value check on do_rdma_write_with_msg
  * dtestx: check device capabilities and do atomic tests only if supported by HW
  * common: set atomic attributes based on provider/device capabilities
  * build: dtest_suite.sh was moved to test/scripts
  * mpxyd: let TX thread sleep if no open devices are referenced
  * mcm: when mmap req from MIC return with fail stat print WARN.
  * dtest_suite: remove duplicate dtest_suite.sh
  * dtest: enable -D option (data check) to work with scif provider
  * dtest_suite: fix typo in user_string var
  * mcm: remove logs from post send speed path
  * mcm proxy: push WR from MIC to host with scif mmap memory instead of scif_send.
  * dtest: the default size in pingpong test is set to 1 byte regardless to user input.
  * dtest: cleanup 4 printfs from the middle of performance test, may reduce performance.
- Refresh patches against 2.1.10</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527595200">- Add ucm-mcm-fix-backlog-parameter-for-socket.patch to fix
  a "deadlock" that causes socket connection to timeout when
  net.ipv4.tcp_syncookies=0. (bsc#1094657)</changelog>
</package>
<package pkgid="3269b6c6f1d52848470cb5bce6fb9590ba798dcd4df5d8bf67430f8194bd3131" name="dapl-debug" arch="src">
  <version epoch="0" ver="2.1.10" rel="lp150.2.3.1"/>
  <changelog author="pth@suse.de" date="1400587200">- Fix typo in dapl_test.c.</changelog>
  <changelog author="pth@suse.de" date="1403697600">- Provide full source URL</changelog>
  <changelog author="pth@suse.de" date="1403697601">- Remove dapl-2.0.13-build_error.patch as it isn't needed anymore.</changelog>
  <changelog author="pth@suse.de" date="1403870400">- Add baselibs.conf and dapl-rpmlintrc as source.
- Fix dapl-fix_type_punning.patch.
- Fix type punning in cm.c</changelog>
  <changelog author="pth@suse.de" date="1407153600">- Remove s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407412800">- Readd s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407499200">- Add dapl-rename_dtest.patch to rename dtest to dpltest because
  of name clash with dateutils.
- Also rename the man  page for dtest.
- Make dapl-devel and dapl-debug-devel obsolete each other.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- dapl-debug can't obsolete dapl or zypper will switch between the versions
  all the time. They do conflict though</changelog>
  <changelog author="dimstar@opensuse.org" date="1423051200">- Also have dapl-utils conflict with dapl-debug-utils.
- Fix baselibs.conf to build libdat2-2-32bit.</changelog>
  <changelog author="pth@suse.de" date="1439294400">- Replace dapl-s390_support.patch with
  dapl-add-s390x-platform-support.patch (bsc#934683).
- Fix library name in baselibs.conf.
- Tag baselibs.conf and dapl-rpmlintrc as source.
- libdapl*.so work like plugins, hence they do not get a separate
  subpackage. So shut up rpmlint complaining about the package
  name.
- Drop the dapl-doc sub package and move the man pages to the
  packages containing the files/programs they describe.</changelog>
  <changelog author="pth@suse.de" date="1440504000">- Exclude aarch64 as there is currently no assembler code for this
  architecture.</changelog>
  <changelog author="dmueller@suse.com" date="1441886400">- add dapl-add-aarch64-platform-support.patch (fate#318444)
- revert last change</changelog>
  <changelog author="pth@suse.de" date="1457611200">- Update to 2.1.8 git version (bsc#970668).
  List of changes is too long so please see the included ChangeLog.
- Patches removed because the fixes are included upstream:
  dapl-fix_type_punning.patch
  dapl-autotools.patch
  dapl-add-s390x-platform-support.patch
  dapl-add-aarch64-platform-support.patch
  dapl-add-s390x-platform-support.patch
- Add dapl-s390.patch so that the defines are also valid for s390</changelog>
  <changelog author="pth@suse.de" date="1490788800">- Make dependencies on libs now coming from rdma-core versioned.
- Remove unused patch dapl-rename_dtest.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1495022400">- Disable dapl on armv7hl</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Restore description of libdapl. Fix some grammar errors.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Add conflicts between dapl and dapl-debug packages for devel
  and utils
- Rename dapl-utils tests to avoid conflicts with other packages (dateutils)
  * dapltest =&gt; dapl-test
  * dtest    =&gt; dapl-utest
  * dtestcm  =&gt; dapl-testcm
  * dtestsrq =&gt; dapl-testsrq
  * dtestx   =&gt; dapl-testx
- Remove librdmacm and libibverbs version dependencies</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1497268800">- Merge .changes files with SLE12-SP3 (bsc#1041579)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1500552000">- Update to 2.1.10
  * dtest_suite: add option to pause the test.
  * dtestcm: add client retry, give server time to queue up all listens
  * dtest: Add new man pages. (dtestx dtestcm dtestsrq)
  * cma: fix open_query mode, initialize attributes
  * ucm: up level CM timer logging, increase drep time at scale
  * dtest: fix return value check on do_rdma_write_with_msg
  * dtestx: check device capabilities and do atomic tests only if supported by HW
  * common: set atomic attributes based on provider/device capabilities
  * build: dtest_suite.sh was moved to test/scripts
  * mpxyd: let TX thread sleep if no open devices are referenced
  * mcm: when mmap req from MIC return with fail stat print WARN.
  * dtest_suite: remove duplicate dtest_suite.sh
  * dtest: enable -D option (data check) to work with scif provider
  * dtest_suite: fix typo in user_string var
  * mcm: remove logs from post send speed path
  * mcm proxy: push WR from MIC to host with scif mmap memory instead of scif_send.
  * dtest: the default size in pingpong test is set to 1 byte regardless to user input.
  * dtest: cleanup 4 printfs from the middle of performance test, may reduce performance.
- Refresh patches against 2.1.10</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527595200">- Add ucm-mcm-fix-backlog-parameter-for-socket.patch to fix
  a "deadlock" that causes socket connection to timeout when
  net.ipv4.tcp_syncookies=0. (bsc#1094657)</changelog>
</package>
<package pkgid="a7bba91098eff9984c16a7bd532af0a0ac042aa6ce33c7c7aa8406b1a8762d3d" name="dapl-debug" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="lp150.2.3.1"/>
  <changelog author="pth@suse.de" date="1400587200">- Fix typo in dapl_test.c.</changelog>
  <changelog author="pth@suse.de" date="1403697600">- Provide full source URL</changelog>
  <changelog author="pth@suse.de" date="1403697601">- Remove dapl-2.0.13-build_error.patch as it isn't needed anymore.</changelog>
  <changelog author="pth@suse.de" date="1403870400">- Add baselibs.conf and dapl-rpmlintrc as source.
- Fix dapl-fix_type_punning.patch.
- Fix type punning in cm.c</changelog>
  <changelog author="pth@suse.de" date="1407153600">- Remove s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407412800">- Readd s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407499200">- Add dapl-rename_dtest.patch to rename dtest to dpltest because
  of name clash with dateutils.
- Also rename the man  page for dtest.
- Make dapl-devel and dapl-debug-devel obsolete each other.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- dapl-debug can't obsolete dapl or zypper will switch between the versions
  all the time. They do conflict though</changelog>
  <changelog author="dimstar@opensuse.org" date="1423051200">- Also have dapl-utils conflict with dapl-debug-utils.
- Fix baselibs.conf to build libdat2-2-32bit.</changelog>
  <changelog author="pth@suse.de" date="1439294400">- Replace dapl-s390_support.patch with
  dapl-add-s390x-platform-support.patch (bsc#934683).
- Fix library name in baselibs.conf.
- Tag baselibs.conf and dapl-rpmlintrc as source.
- libdapl*.so work like plugins, hence they do not get a separate
  subpackage. So shut up rpmlint complaining about the package
  name.
- Drop the dapl-doc sub package and move the man pages to the
  packages containing the files/programs they describe.</changelog>
  <changelog author="pth@suse.de" date="1440504000">- Exclude aarch64 as there is currently no assembler code for this
  architecture.</changelog>
  <changelog author="dmueller@suse.com" date="1441886400">- add dapl-add-aarch64-platform-support.patch (fate#318444)
- revert last change</changelog>
  <changelog author="pth@suse.de" date="1457611200">- Update to 2.1.8 git version (bsc#970668).
  List of changes is too long so please see the included ChangeLog.
- Patches removed because the fixes are included upstream:
  dapl-fix_type_punning.patch
  dapl-autotools.patch
  dapl-add-s390x-platform-support.patch
  dapl-add-aarch64-platform-support.patch
  dapl-add-s390x-platform-support.patch
- Add dapl-s390.patch so that the defines are also valid for s390</changelog>
  <changelog author="pth@suse.de" date="1490788800">- Make dependencies on libs now coming from rdma-core versioned.
- Remove unused patch dapl-rename_dtest.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1495022400">- Disable dapl on armv7hl</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Restore description of libdapl. Fix some grammar errors.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Add conflicts between dapl and dapl-debug packages for devel
  and utils
- Rename dapl-utils tests to avoid conflicts with other packages (dateutils)
  * dapltest =&gt; dapl-test
  * dtest    =&gt; dapl-utest
  * dtestcm  =&gt; dapl-testcm
  * dtestsrq =&gt; dapl-testsrq
  * dtestx   =&gt; dapl-testx
- Remove librdmacm and libibverbs version dependencies</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1497268800">- Merge .changes files with SLE12-SP3 (bsc#1041579)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1500552000">- Update to 2.1.10
  * dtest_suite: add option to pause the test.
  * dtestcm: add client retry, give server time to queue up all listens
  * dtest: Add new man pages. (dtestx dtestcm dtestsrq)
  * cma: fix open_query mode, initialize attributes
  * ucm: up level CM timer logging, increase drep time at scale
  * dtest: fix return value check on do_rdma_write_with_msg
  * dtestx: check device capabilities and do atomic tests only if supported by HW
  * common: set atomic attributes based on provider/device capabilities
  * build: dtest_suite.sh was moved to test/scripts
  * mpxyd: let TX thread sleep if no open devices are referenced
  * mcm: when mmap req from MIC return with fail stat print WARN.
  * dtest_suite: remove duplicate dtest_suite.sh
  * dtest: enable -D option (data check) to work with scif provider
  * dtest_suite: fix typo in user_string var
  * mcm: remove logs from post send speed path
  * mcm proxy: push WR from MIC to host with scif mmap memory instead of scif_send.
  * dtest: the default size in pingpong test is set to 1 byte regardless to user input.
  * dtest: cleanup 4 printfs from the middle of performance test, may reduce performance.
- Refresh patches against 2.1.10</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527595200">- Add ucm-mcm-fix-backlog-parameter-for-socket.patch to fix
  a "deadlock" that causes socket connection to timeout when
  net.ipv4.tcp_syncookies=0. (bsc#1094657)</changelog>
</package>
<package pkgid="17e8f288de90d60be2dde19ca3db746bb8b157bfe008d62257185d5a2c912a9f" name="dapl-debug-devel" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="lp150.2.3.1"/>
  <changelog author="pth@suse.de" date="1400587200">- Fix typo in dapl_test.c.</changelog>
  <changelog author="pth@suse.de" date="1403697600">- Provide full source URL</changelog>
  <changelog author="pth@suse.de" date="1403697601">- Remove dapl-2.0.13-build_error.patch as it isn't needed anymore.</changelog>
  <changelog author="pth@suse.de" date="1403870400">- Add baselibs.conf and dapl-rpmlintrc as source.
- Fix dapl-fix_type_punning.patch.
- Fix type punning in cm.c</changelog>
  <changelog author="pth@suse.de" date="1407153600">- Remove s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407412800">- Readd s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407499200">- Add dapl-rename_dtest.patch to rename dtest to dpltest because
  of name clash with dateutils.
- Also rename the man  page for dtest.
- Make dapl-devel and dapl-debug-devel obsolete each other.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- dapl-debug can't obsolete dapl or zypper will switch between the versions
  all the time. They do conflict though</changelog>
  <changelog author="dimstar@opensuse.org" date="1423051200">- Also have dapl-utils conflict with dapl-debug-utils.
- Fix baselibs.conf to build libdat2-2-32bit.</changelog>
  <changelog author="pth@suse.de" date="1439294400">- Replace dapl-s390_support.patch with
  dapl-add-s390x-platform-support.patch (bsc#934683).
- Fix library name in baselibs.conf.
- Tag baselibs.conf and dapl-rpmlintrc as source.
- libdapl*.so work like plugins, hence they do not get a separate
  subpackage. So shut up rpmlint complaining about the package
  name.
- Drop the dapl-doc sub package and move the man pages to the
  packages containing the files/programs they describe.</changelog>
  <changelog author="pth@suse.de" date="1440504000">- Exclude aarch64 as there is currently no assembler code for this
  architecture.</changelog>
  <changelog author="dmueller@suse.com" date="1441886400">- add dapl-add-aarch64-platform-support.patch (fate#318444)
- revert last change</changelog>
  <changelog author="pth@suse.de" date="1457611200">- Update to 2.1.8 git version (bsc#970668).
  List of changes is too long so please see the included ChangeLog.
- Patches removed because the fixes are included upstream:
  dapl-fix_type_punning.patch
  dapl-autotools.patch
  dapl-add-s390x-platform-support.patch
  dapl-add-aarch64-platform-support.patch
  dapl-add-s390x-platform-support.patch
- Add dapl-s390.patch so that the defines are also valid for s390</changelog>
  <changelog author="pth@suse.de" date="1490788800">- Make dependencies on libs now coming from rdma-core versioned.
- Remove unused patch dapl-rename_dtest.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1495022400">- Disable dapl on armv7hl</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Restore description of libdapl. Fix some grammar errors.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Add conflicts between dapl and dapl-debug packages for devel
  and utils
- Rename dapl-utils tests to avoid conflicts with other packages (dateutils)
  * dapltest =&gt; dapl-test
  * dtest    =&gt; dapl-utest
  * dtestcm  =&gt; dapl-testcm
  * dtestsrq =&gt; dapl-testsrq
  * dtestx   =&gt; dapl-testx
- Remove librdmacm and libibverbs version dependencies</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1497268800">- Merge .changes files with SLE12-SP3 (bsc#1041579)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1500552000">- Update to 2.1.10
  * dtest_suite: add option to pause the test.
  * dtestcm: add client retry, give server time to queue up all listens
  * dtest: Add new man pages. (dtestx dtestcm dtestsrq)
  * cma: fix open_query mode, initialize attributes
  * ucm: up level CM timer logging, increase drep time at scale
  * dtest: fix return value check on do_rdma_write_with_msg
  * dtestx: check device capabilities and do atomic tests only if supported by HW
  * common: set atomic attributes based on provider/device capabilities
  * build: dtest_suite.sh was moved to test/scripts
  * mpxyd: let TX thread sleep if no open devices are referenced
  * mcm: when mmap req from MIC return with fail stat print WARN.
  * dtest_suite: remove duplicate dtest_suite.sh
  * dtest: enable -D option (data check) to work with scif provider
  * dtest_suite: fix typo in user_string var
  * mcm: remove logs from post send speed path
  * mcm proxy: push WR from MIC to host with scif mmap memory instead of scif_send.
  * dtest: the default size in pingpong test is set to 1 byte regardless to user input.
  * dtest: cleanup 4 printfs from the middle of performance test, may reduce performance.
- Refresh patches against 2.1.10</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527595200">- Add ucm-mcm-fix-backlog-parameter-for-socket.patch to fix
  a "deadlock" that causes socket connection to timeout when
  net.ipv4.tcp_syncookies=0. (bsc#1094657)</changelog>
</package>
<package pkgid="ab107dde994ed77dbdbd6d0e8d4a6e7438c3366d87f8c8a0c0eed8e5cfabbcf9" name="dapl-debug-libs" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="lp150.2.3.1"/>
  <changelog author="pth@suse.de" date="1400587200">- Fix typo in dapl_test.c.</changelog>
  <changelog author="pth@suse.de" date="1403697600">- Provide full source URL</changelog>
  <changelog author="pth@suse.de" date="1403697601">- Remove dapl-2.0.13-build_error.patch as it isn't needed anymore.</changelog>
  <changelog author="pth@suse.de" date="1403870400">- Add baselibs.conf and dapl-rpmlintrc as source.
- Fix dapl-fix_type_punning.patch.
- Fix type punning in cm.c</changelog>
  <changelog author="pth@suse.de" date="1407153600">- Remove s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407412800">- Readd s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407499200">- Add dapl-rename_dtest.patch to rename dtest to dpltest because
  of name clash with dateutils.
- Also rename the man  page for dtest.
- Make dapl-devel and dapl-debug-devel obsolete each other.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- dapl-debug can't obsolete dapl or zypper will switch between the versions
  all the time. They do conflict though</changelog>
  <changelog author="dimstar@opensuse.org" date="1423051200">- Also have dapl-utils conflict with dapl-debug-utils.
- Fix baselibs.conf to build libdat2-2-32bit.</changelog>
  <changelog author="pth@suse.de" date="1439294400">- Replace dapl-s390_support.patch with
  dapl-add-s390x-platform-support.patch (bsc#934683).
- Fix library name in baselibs.conf.
- Tag baselibs.conf and dapl-rpmlintrc as source.
- libdapl*.so work like plugins, hence they do not get a separate
  subpackage. So shut up rpmlint complaining about the package
  name.
- Drop the dapl-doc sub package and move the man pages to the
  packages containing the files/programs they describe.</changelog>
  <changelog author="pth@suse.de" date="1440504000">- Exclude aarch64 as there is currently no assembler code for this
  architecture.</changelog>
  <changelog author="dmueller@suse.com" date="1441886400">- add dapl-add-aarch64-platform-support.patch (fate#318444)
- revert last change</changelog>
  <changelog author="pth@suse.de" date="1457611200">- Update to 2.1.8 git version (bsc#970668).
  List of changes is too long so please see the included ChangeLog.
- Patches removed because the fixes are included upstream:
  dapl-fix_type_punning.patch
  dapl-autotools.patch
  dapl-add-s390x-platform-support.patch
  dapl-add-aarch64-platform-support.patch
  dapl-add-s390x-platform-support.patch
- Add dapl-s390.patch so that the defines are also valid for s390</changelog>
  <changelog author="pth@suse.de" date="1490788800">- Make dependencies on libs now coming from rdma-core versioned.
- Remove unused patch dapl-rename_dtest.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1495022400">- Disable dapl on armv7hl</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Restore description of libdapl. Fix some grammar errors.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Add conflicts between dapl and dapl-debug packages for devel
  and utils
- Rename dapl-utils tests to avoid conflicts with other packages (dateutils)
  * dapltest =&gt; dapl-test
  * dtest    =&gt; dapl-utest
  * dtestcm  =&gt; dapl-testcm
  * dtestsrq =&gt; dapl-testsrq
  * dtestx   =&gt; dapl-testx
- Remove librdmacm and libibverbs version dependencies</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1497268800">- Merge .changes files with SLE12-SP3 (bsc#1041579)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1500552000">- Update to 2.1.10
  * dtest_suite: add option to pause the test.
  * dtestcm: add client retry, give server time to queue up all listens
  * dtest: Add new man pages. (dtestx dtestcm dtestsrq)
  * cma: fix open_query mode, initialize attributes
  * ucm: up level CM timer logging, increase drep time at scale
  * dtest: fix return value check on do_rdma_write_with_msg
  * dtestx: check device capabilities and do atomic tests only if supported by HW
  * common: set atomic attributes based on provider/device capabilities
  * build: dtest_suite.sh was moved to test/scripts
  * mpxyd: let TX thread sleep if no open devices are referenced
  * mcm: when mmap req from MIC return with fail stat print WARN.
  * dtest_suite: remove duplicate dtest_suite.sh
  * dtest: enable -D option (data check) to work with scif provider
  * dtest_suite: fix typo in user_string var
  * mcm: remove logs from post send speed path
  * mcm proxy: push WR from MIC to host with scif mmap memory instead of scif_send.
  * dtest: the default size in pingpong test is set to 1 byte regardless to user input.
  * dtest: cleanup 4 printfs from the middle of performance test, may reduce performance.
- Refresh patches against 2.1.10</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527595200">- Add ucm-mcm-fix-backlog-parameter-for-socket.patch to fix
  a "deadlock" that causes socket connection to timeout when
  net.ipv4.tcp_syncookies=0. (bsc#1094657)</changelog>
</package>
<package pkgid="53132fc9f78f5670cac0b44485de52678b60763acaf8a01d3ecf24139cebb4f7" name="dapl-debug-utils" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="lp150.2.3.1"/>
  <changelog author="pth@suse.de" date="1400587200">- Fix typo in dapl_test.c.</changelog>
  <changelog author="pth@suse.de" date="1403697600">- Provide full source URL</changelog>
  <changelog author="pth@suse.de" date="1403697601">- Remove dapl-2.0.13-build_error.patch as it isn't needed anymore.</changelog>
  <changelog author="pth@suse.de" date="1403870400">- Add baselibs.conf and dapl-rpmlintrc as source.
- Fix dapl-fix_type_punning.patch.
- Fix type punning in cm.c</changelog>
  <changelog author="pth@suse.de" date="1407153600">- Remove s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407412800">- Readd s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407499200">- Add dapl-rename_dtest.patch to rename dtest to dpltest because
  of name clash with dateutils.
- Also rename the man  page for dtest.
- Make dapl-devel and dapl-debug-devel obsolete each other.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- dapl-debug can't obsolete dapl or zypper will switch between the versions
  all the time. They do conflict though</changelog>
  <changelog author="dimstar@opensuse.org" date="1423051200">- Also have dapl-utils conflict with dapl-debug-utils.
- Fix baselibs.conf to build libdat2-2-32bit.</changelog>
  <changelog author="pth@suse.de" date="1439294400">- Replace dapl-s390_support.patch with
  dapl-add-s390x-platform-support.patch (bsc#934683).
- Fix library name in baselibs.conf.
- Tag baselibs.conf and dapl-rpmlintrc as source.
- libdapl*.so work like plugins, hence they do not get a separate
  subpackage. So shut up rpmlint complaining about the package
  name.
- Drop the dapl-doc sub package and move the man pages to the
  packages containing the files/programs they describe.</changelog>
  <changelog author="pth@suse.de" date="1440504000">- Exclude aarch64 as there is currently no assembler code for this
  architecture.</changelog>
  <changelog author="dmueller@suse.com" date="1441886400">- add dapl-add-aarch64-platform-support.patch (fate#318444)
- revert last change</changelog>
  <changelog author="pth@suse.de" date="1457611200">- Update to 2.1.8 git version (bsc#970668).
  List of changes is too long so please see the included ChangeLog.
- Patches removed because the fixes are included upstream:
  dapl-fix_type_punning.patch
  dapl-autotools.patch
  dapl-add-s390x-platform-support.patch
  dapl-add-aarch64-platform-support.patch
  dapl-add-s390x-platform-support.patch
- Add dapl-s390.patch so that the defines are also valid for s390</changelog>
  <changelog author="pth@suse.de" date="1490788800">- Make dependencies on libs now coming from rdma-core versioned.
- Remove unused patch dapl-rename_dtest.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1495022400">- Disable dapl on armv7hl</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Restore description of libdapl. Fix some grammar errors.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Add conflicts between dapl and dapl-debug packages for devel
  and utils
- Rename dapl-utils tests to avoid conflicts with other packages (dateutils)
  * dapltest =&gt; dapl-test
  * dtest    =&gt; dapl-utest
  * dtestcm  =&gt; dapl-testcm
  * dtestsrq =&gt; dapl-testsrq
  * dtestx   =&gt; dapl-testx
- Remove librdmacm and libibverbs version dependencies</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1497268800">- Merge .changes files with SLE12-SP3 (bsc#1041579)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1500552000">- Update to 2.1.10
  * dtest_suite: add option to pause the test.
  * dtestcm: add client retry, give server time to queue up all listens
  * dtest: Add new man pages. (dtestx dtestcm dtestsrq)
  * cma: fix open_query mode, initialize attributes
  * ucm: up level CM timer logging, increase drep time at scale
  * dtest: fix return value check on do_rdma_write_with_msg
  * dtestx: check device capabilities and do atomic tests only if supported by HW
  * common: set atomic attributes based on provider/device capabilities
  * build: dtest_suite.sh was moved to test/scripts
  * mpxyd: let TX thread sleep if no open devices are referenced
  * mcm: when mmap req from MIC return with fail stat print WARN.
  * dtest_suite: remove duplicate dtest_suite.sh
  * dtest: enable -D option (data check) to work with scif provider
  * dtest_suite: fix typo in user_string var
  * mcm: remove logs from post send speed path
  * mcm proxy: push WR from MIC to host with scif mmap memory instead of scif_send.
  * dtest: the default size in pingpong test is set to 1 byte regardless to user input.
  * dtest: cleanup 4 printfs from the middle of performance test, may reduce performance.
- Refresh patches against 2.1.10</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527595200">- Add ucm-mcm-fix-backlog-parameter-for-socket.patch to fix
  a "deadlock" that causes socket connection to timeout when
  net.ipv4.tcp_syncookies=0. (bsc#1094657)</changelog>
</package>
<package pkgid="76965639f778b416fffceeab959e170a6c9f2794ee44005034532e083d3d69f3" name="dapl-devel" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="lp150.2.3.1"/>
  <changelog author="pth@suse.de" date="1400587200">- Fix typo in dapl_test.c.</changelog>
  <changelog author="pth@suse.de" date="1403697600">- Provide full source URL</changelog>
  <changelog author="pth@suse.de" date="1403697601">- Remove dapl-2.0.13-build_error.patch as it isn't needed anymore.</changelog>
  <changelog author="pth@suse.de" date="1403870400">- Add baselibs.conf and dapl-rpmlintrc as source.
- Fix dapl-fix_type_punning.patch.
- Fix type punning in cm.c</changelog>
  <changelog author="pth@suse.de" date="1407153600">- Remove s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407412800">- Readd s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407499200">- Add dapl-rename_dtest.patch to rename dtest to dpltest because
  of name clash with dateutils.
- Also rename the man  page for dtest.
- Make dapl-devel and dapl-debug-devel obsolete each other.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- dapl-debug can't obsolete dapl or zypper will switch between the versions
  all the time. They do conflict though</changelog>
  <changelog author="dimstar@opensuse.org" date="1423051200">- Also have dapl-utils conflict with dapl-debug-utils.
- Fix baselibs.conf to build libdat2-2-32bit.</changelog>
  <changelog author="pth@suse.de" date="1439294400">- Replace dapl-s390_support.patch with
  dapl-add-s390x-platform-support.patch (bsc#934683).
- Fix library name in baselibs.conf.
- Tag baselibs.conf and dapl-rpmlintrc as source.
- libdapl*.so work like plugins, hence they do not get a separate
  subpackage. So shut up rpmlint complaining about the package
  name.
- Drop the dapl-doc sub package and move the man pages to the
  packages containing the files/programs they describe.</changelog>
  <changelog author="pth@suse.de" date="1440504000">- Exclude aarch64 as there is currently no assembler code for this
  architecture.</changelog>
  <changelog author="dmueller@suse.com" date="1441886400">- add dapl-add-aarch64-platform-support.patch (fate#318444)
- revert last change</changelog>
  <changelog author="pth@suse.de" date="1457611200">- Update to 2.1.8 git version (bsc#970668).
  List of changes is too long so please see the included ChangeLog.
- Patches removed because the fixes are included upstream:
  dapl-fix_type_punning.patch
  dapl-autotools.patch
  dapl-add-s390x-platform-support.patch
  dapl-add-aarch64-platform-support.patch
  dapl-add-s390x-platform-support.patch
- Add dapl-s390.patch so that the defines are also valid for s390</changelog>
  <changelog author="pth@suse.de" date="1490788800">- Make dependencies on libs now coming from rdma-core versioned.
- Remove unused patch dapl-rename_dtest.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1495022400">- Disable dapl on armv7hl</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Restore description of libdapl. Fix some grammar errors.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Add conflicts between dapl and dapl-debug packages for devel
  and utils
- Rename dapl-utils tests to avoid conflicts with other packages (dateutils)
  * dapltest =&gt; dapl-test
  * dtest    =&gt; dapl-utest
  * dtestcm  =&gt; dapl-testcm
  * dtestsrq =&gt; dapl-testsrq
  * dtestx   =&gt; dapl-testx
- Remove librdmacm and libibverbs version dependencies</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1497268800">- Merge .changes files with SLE12-SP3 (bsc#1041579)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1500552000">- Update to 2.1.10
  * dtest_suite: add option to pause the test.
  * dtestcm: add client retry, give server time to queue up all listens
  * dtest: Add new man pages. (dtestx dtestcm dtestsrq)
  * cma: fix open_query mode, initialize attributes
  * ucm: up level CM timer logging, increase drep time at scale
  * dtest: fix return value check on do_rdma_write_with_msg
  * dtestx: check device capabilities and do atomic tests only if supported by HW
  * common: set atomic attributes based on provider/device capabilities
  * build: dtest_suite.sh was moved to test/scripts
  * mpxyd: let TX thread sleep if no open devices are referenced
  * mcm: when mmap req from MIC return with fail stat print WARN.
  * dtest_suite: remove duplicate dtest_suite.sh
  * dtest: enable -D option (data check) to work with scif provider
  * dtest_suite: fix typo in user_string var
  * mcm: remove logs from post send speed path
  * mcm proxy: push WR from MIC to host with scif mmap memory instead of scif_send.
  * dtest: the default size in pingpong test is set to 1 byte regardless to user input.
  * dtest: cleanup 4 printfs from the middle of performance test, may reduce performance.
- Refresh patches against 2.1.10</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527595200">- Add ucm-mcm-fix-backlog-parameter-for-socket.patch to fix
  a "deadlock" that causes socket connection to timeout when
  net.ipv4.tcp_syncookies=0. (bsc#1094657)</changelog>
</package>
<package pkgid="6fb610e9b067928f2413af681464f8fdccbf919cef206f215e2b53a0fa630b77" name="dapl-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="lp150.2.3.1"/>
  <changelog author="pth@suse.de" date="1400587200">- Fix typo in dapl_test.c.</changelog>
  <changelog author="pth@suse.de" date="1403697600">- Provide full source URL</changelog>
  <changelog author="pth@suse.de" date="1403697601">- Remove dapl-2.0.13-build_error.patch as it isn't needed anymore.</changelog>
  <changelog author="pth@suse.de" date="1403870400">- Add baselibs.conf and dapl-rpmlintrc as source.
- Fix dapl-fix_type_punning.patch.
- Fix type punning in cm.c</changelog>
  <changelog author="pth@suse.de" date="1407153600">- Remove s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407412800">- Readd s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407499200">- Add dapl-rename_dtest.patch to rename dtest to dpltest because
  of name clash with dateutils.
- Also rename the man  page for dtest.
- Make dapl-devel and dapl-debug-devel obsolete each other.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- dapl-debug can't obsolete dapl or zypper will switch between the versions
  all the time. They do conflict though</changelog>
  <changelog author="dimstar@opensuse.org" date="1423051200">- Also have dapl-utils conflict with dapl-debug-utils.
- Fix baselibs.conf to build libdat2-2-32bit.</changelog>
  <changelog author="pth@suse.de" date="1439294400">- Replace dapl-s390_support.patch with
  dapl-add-s390x-platform-support.patch (bsc#934683).
- Fix library name in baselibs.conf.
- Tag baselibs.conf and dapl-rpmlintrc as source.
- libdapl*.so work like plugins, hence they do not get a separate
  subpackage. So shut up rpmlint complaining about the package
  name.
- Drop the dapl-doc sub package and move the man pages to the
  packages containing the files/programs they describe.</changelog>
  <changelog author="pth@suse.de" date="1440504000">- Exclude aarch64 as there is currently no assembler code for this
  architecture.</changelog>
  <changelog author="dmueller@suse.com" date="1441886400">- add dapl-add-aarch64-platform-support.patch (fate#318444)
- revert last change</changelog>
  <changelog author="pth@suse.de" date="1457611200">- Update to 2.1.8 git version (bsc#970668).
  List of changes is too long so please see the included ChangeLog.
- Patches removed because the fixes are included upstream:
  dapl-fix_type_punning.patch
  dapl-autotools.patch
  dapl-add-s390x-platform-support.patch
  dapl-add-aarch64-platform-support.patch
  dapl-add-s390x-platform-support.patch
- Add dapl-s390.patch so that the defines are also valid for s390</changelog>
  <changelog author="pth@suse.de" date="1490788800">- Make dependencies on libs now coming from rdma-core versioned.
- Remove unused patch dapl-rename_dtest.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1495022400">- Disable dapl on armv7hl</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Restore description of libdapl. Fix some grammar errors.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Add conflicts between dapl and dapl-debug packages for devel
  and utils
- Rename dapl-utils tests to avoid conflicts with other packages (dateutils)
  * dapltest =&gt; dapl-test
  * dtest    =&gt; dapl-utest
  * dtestcm  =&gt; dapl-testcm
  * dtestsrq =&gt; dapl-testsrq
  * dtestx   =&gt; dapl-testx
- Remove librdmacm and libibverbs version dependencies</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1497268800">- Merge .changes files with SLE12-SP3 (bsc#1041579)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1500552000">- Update to 2.1.10
  * dtest_suite: add option to pause the test.
  * dtestcm: add client retry, give server time to queue up all listens
  * dtest: Add new man pages. (dtestx dtestcm dtestsrq)
  * cma: fix open_query mode, initialize attributes
  * ucm: up level CM timer logging, increase drep time at scale
  * dtest: fix return value check on do_rdma_write_with_msg
  * dtestx: check device capabilities and do atomic tests only if supported by HW
  * common: set atomic attributes based on provider/device capabilities
  * build: dtest_suite.sh was moved to test/scripts
  * mpxyd: let TX thread sleep if no open devices are referenced
  * mcm: when mmap req from MIC return with fail stat print WARN.
  * dtest_suite: remove duplicate dtest_suite.sh
  * dtest: enable -D option (data check) to work with scif provider
  * dtest_suite: fix typo in user_string var
  * mcm: remove logs from post send speed path
  * mcm proxy: push WR from MIC to host with scif mmap memory instead of scif_send.
  * dtest: the default size in pingpong test is set to 1 byte regardless to user input.
  * dtest: cleanup 4 printfs from the middle of performance test, may reduce performance.
- Refresh patches against 2.1.10</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527595200">- Add ucm-mcm-fix-backlog-parameter-for-socket.patch to fix
  a "deadlock" that causes socket connection to timeout when
  net.ipv4.tcp_syncookies=0. (bsc#1094657)</changelog>
</package>
<package pkgid="b7eea0bc7eebb34b9484154a01347e94c615e996866ca9113dea373dd4c03332" name="dapl-utils" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="lp150.2.3.1"/>
  <changelog author="pth@suse.de" date="1400587200">- Fix typo in dapl_test.c.</changelog>
  <changelog author="pth@suse.de" date="1403697600">- Provide full source URL</changelog>
  <changelog author="pth@suse.de" date="1403697601">- Remove dapl-2.0.13-build_error.patch as it isn't needed anymore.</changelog>
  <changelog author="pth@suse.de" date="1403870400">- Add baselibs.conf and dapl-rpmlintrc as source.
- Fix dapl-fix_type_punning.patch.
- Fix type punning in cm.c</changelog>
  <changelog author="pth@suse.de" date="1407153600">- Remove s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407412800">- Readd s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407499200">- Add dapl-rename_dtest.patch to rename dtest to dpltest because
  of name clash with dateutils.
- Also rename the man  page for dtest.
- Make dapl-devel and dapl-debug-devel obsolete each other.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- dapl-debug can't obsolete dapl or zypper will switch between the versions
  all the time. They do conflict though</changelog>
  <changelog author="dimstar@opensuse.org" date="1423051200">- Also have dapl-utils conflict with dapl-debug-utils.
- Fix baselibs.conf to build libdat2-2-32bit.</changelog>
  <changelog author="pth@suse.de" date="1439294400">- Replace dapl-s390_support.patch with
  dapl-add-s390x-platform-support.patch (bsc#934683).
- Fix library name in baselibs.conf.
- Tag baselibs.conf and dapl-rpmlintrc as source.
- libdapl*.so work like plugins, hence they do not get a separate
  subpackage. So shut up rpmlint complaining about the package
  name.
- Drop the dapl-doc sub package and move the man pages to the
  packages containing the files/programs they describe.</changelog>
  <changelog author="pth@suse.de" date="1440504000">- Exclude aarch64 as there is currently no assembler code for this
  architecture.</changelog>
  <changelog author="dmueller@suse.com" date="1441886400">- add dapl-add-aarch64-platform-support.patch (fate#318444)
- revert last change</changelog>
  <changelog author="pth@suse.de" date="1457611200">- Update to 2.1.8 git version (bsc#970668).
  List of changes is too long so please see the included ChangeLog.
- Patches removed because the fixes are included upstream:
  dapl-fix_type_punning.patch
  dapl-autotools.patch
  dapl-add-s390x-platform-support.patch
  dapl-add-aarch64-platform-support.patch
  dapl-add-s390x-platform-support.patch
- Add dapl-s390.patch so that the defines are also valid for s390</changelog>
  <changelog author="pth@suse.de" date="1490788800">- Make dependencies on libs now coming from rdma-core versioned.
- Remove unused patch dapl-rename_dtest.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1495022400">- Disable dapl on armv7hl</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Restore description of libdapl. Fix some grammar errors.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Add conflicts between dapl and dapl-debug packages for devel
  and utils
- Rename dapl-utils tests to avoid conflicts with other packages (dateutils)
  * dapltest =&gt; dapl-test
  * dtest    =&gt; dapl-utest
  * dtestcm  =&gt; dapl-testcm
  * dtestsrq =&gt; dapl-testsrq
  * dtestx   =&gt; dapl-testx
- Remove librdmacm and libibverbs version dependencies</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1497268800">- Merge .changes files with SLE12-SP3 (bsc#1041579)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1500552000">- Update to 2.1.10
  * dtest_suite: add option to pause the test.
  * dtestcm: add client retry, give server time to queue up all listens
  * dtest: Add new man pages. (dtestx dtestcm dtestsrq)
  * cma: fix open_query mode, initialize attributes
  * ucm: up level CM timer logging, increase drep time at scale
  * dtest: fix return value check on do_rdma_write_with_msg
  * dtestx: check device capabilities and do atomic tests only if supported by HW
  * common: set atomic attributes based on provider/device capabilities
  * build: dtest_suite.sh was moved to test/scripts
  * mpxyd: let TX thread sleep if no open devices are referenced
  * mcm: when mmap req from MIC return with fail stat print WARN.
  * dtest_suite: remove duplicate dtest_suite.sh
  * dtest: enable -D option (data check) to work with scif provider
  * dtest_suite: fix typo in user_string var
  * mcm: remove logs from post send speed path
  * mcm proxy: push WR from MIC to host with scif mmap memory instead of scif_send.
  * dtest: the default size in pingpong test is set to 1 byte regardless to user input.
  * dtest: cleanup 4 printfs from the middle of performance test, may reduce performance.
- Refresh patches against 2.1.10</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527595200">- Add ucm-mcm-fix-backlog-parameter-for-socket.patch to fix
  a "deadlock" that causes socket connection to timeout when
  net.ipv4.tcp_syncookies=0. (bsc#1094657)</changelog>
</package>
<package pkgid="525ab6029a5e925d7f7997a2bdea181b2f59493e43eac0e6d4029bc46d26277a" name="datovka" arch="src">
  <version epoch="0" ver="4.10.3" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1444651200">- Version update to 4.4.0:
  * Various bugfixes all around. See ChangeLog file</changelog>
  <changelog author="tchvatal@suse.com" date="1451995200">- Version update to 4.4.3:
  * Various bugfixes. See ChangeLog file
  * Fixed broken expired password swap</changelog>
  <changelog author="tchvatal@suse.com" date="1455624000">- Version update to 4.5.0:
  * various backend updates
  * various bugs fixed
  * qt 5.3 required now
- Rebase patch:
  * datovka-fix-pro.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1459512000">- Update to 4.5.3
  * Fixed problems with HOTP authorisation on Windows. There have
    been problems with the bundled libisds. MinGW does not handle
    POSIX extensions of printf formatting strings properly. Patch
    for libisds has been added.
  * Fixed a non-working PRAGMA statement when asking for a database
    integrity check.
  * The --version command-line argument now also prints the version
    of libraries which Datovka depends on.
  * Automatic background downloads didn't cause the deactivation of
    download buttons that could still be triggered. Triggering those
    buttons in this situation could cause the application to crash.
  * Adding new account caused the account tree to collapse. This has
    been fixed.
- Changes for 4.5.2
  * NLS of bundled libisds (OS X, Windows) has been disabled.
  * The logging of libisds actions has been restricted on Windows
    because there are discrepancies from standard-defined behaviour
    of some functions on Windows.
  * Improved behaviour when message download fails. The error
    dialogue is only shown when an explicit message download fails.
  * A message in the notification area appears when the download
    has been triggered by downloading message list. This should
    reduce the amount of error dialogues generated.
  * Improved behaviour when downloading messages on accounts with
    restricted privileges. Received messages are not automatically
    downloaded when the user has no privileges to do that.
- Changes for 4.5.1
  * Fixed bug in action logging causing the application to crash
    occasionally.
  * Fixed bug where message line was not deleted when deleting from
    ISDS failed.
  * New account model internals.
- Build with optflags
- Use macros for desktop file and icon handling</changelog>
  <changelog author="tchvatal@suse.com" date="1463227200">- Version update to 4.6.0:
  * Added support for tags. These can be locally assigned to the messages.
  * Message information are shown in separate window when double-clicking the
    message in message list or when hitting the Return/Enter key.
  * When composing a message, the recipient can be added to the recipient list
    by double clicking it in the recently-used recipient list.
  * Information about personal delivery are shown in message description field.
  * Fixed problem where account entry has not been updated after message
    deletion.
  * Fixed encoding issue when exporting correspondence overview in HTML.
  * Fixed a bug causing the create message button not to activate when first
    account was created.</changelog>
  <changelog author="jslaby@suse.com" date="1476100800">- Version update to 4.6.1:
  * Message envelope can be exported to a PDF file along with other message
    attachments.
  * Fixed issue when the sending of a new message lasted too long. In such case
    the application could occasionally crash.
  * Patched bundled libisds to fix wrong sender identification. This fix
    affects only Windows and OS X users. Linux users should update to latest
    libisds version (0.10.4).
  * Fixed version string shown in notification dialogue.</changelog>
  <changelog author="tchvatal@suse.com" date="1476878400">- Version update to 4.7.0:
  * openssl 1.1.0 support
  * Various small fixes</changelog>
  <changelog author="jslaby@suse.com" date="1487160000">- Version update to 4.7.1:
  * User is notified about existent files when storing all attachments.
  * Added forward message action.
  * Fixed problem in which the main window was placed slightly off-screen when
  run for the first time.
  * When composing messages, attachment files can be rearranged using drag and
  drop actions.
  * Fixed bug. Message model is updated after tags have been edited.
  * Fixes errors in application localisation.</changelog>
  <changelog author="mpluskal@suse.com" date="1487246400">- Use qmake macros</changelog>
  <changelog author="tchvatal@suse.com" date="1488974400">- Fix license to be GPL-3.0+ as per COPYING file</changelog>
  <changelog author="tchvatal@suse.com" date="1490702400">- Drop dejavu dependency as it is now using fontconfig and not hardcoded
  paths in the code</changelog>
  <changelog author="tchvatal@suse.com" date="1490875200">- Version update to 4.8.0:
  * Added full-text data box search which is now the default method to search
    for data boxes.
  * Fixed problems with placing the main application window when starting the
    application on a smaller screen than it has been closed before.
  * Refactoring of code related to message imports and exports.
  * Reduced the amount of code in main application window.</changelog>
  <changelog author="jslaby@suse.com" date="1495540800">- Version update to 4.8.1:
  * Fixed problem with disappearing splitters on application start.
- add checksum to sources, so that OBS can check consistency</changelog>
  <changelog author="jslaby@suse.com" date="1500465600">- Version update to 4.9.0:
  * Added API and support for sending messages into records management
    services.
  * Removed explicit clear buttons from filter fields.
  * Fixed problems with remembering location of saved attachment files.
  * Directory structure can be created when exporting correspondence overview.
  * Line height of account list and message table has been adjusted to be the
    same.
  * Fixed confusion between the terms of delivery (dodani) and acceptance
    (doruceni) in Czech localisation.
  * Process of exporting multiple selected messages can be aborted by clicking
    Cancel button.
  * Tags can be stored into HTML correspondence overview.
  * HTML correspondence overview now contains both delivery and acceptance
    times.
  * Fixed problems with sending messages from accounts that cannot search for
    data boxes.
  * Fixed tag ordering. Tag sorting is now locale-aware.
- disable -Wdate-time -- unrecognized e.g. with gcc 4.8</changelog>
  <changelog author="jengelh@inai.de" date="1500465601">- Remove odd backslashes from description.</changelog>
  <changelog author="jslaby@suse.com" date="1508673600">- Update Version update to 4.9.3
  * Fixed a problem when message list was not updated after account
    synchronisation when a message was selected.
  * Fixed a bug when database location may have been saved even though the
    databases reside in default location. This problem was visible especially
    on Windows.
- Update Version update to 4.9.2
  * Changed tag dialogue to contain two views when editing tag assignment.
  * Using the prefix 'ODZ_' for sent and 'DDZ_' for received data messages
    when uploading them into records management service.
  * Default documentation location can be changed when running qmake using the
    TEXT_FILES_INST_DIR variable.
  * Full-text data-box search does not block the search dialogue.
  * Full-text data-box search can be interrupted and restarted again without
    closing the dialogue.
  * Separated core and GUI code. Removed models from database interface.
  * Added new CLI option '--get-msg-ids'.
  * Command-line application without GUI can be built separately. This
    executable is going to be distributed in Windows packages together with
    the GUI application.
- Update Version update to 4.9.1
  * Added experimental support for new data-box and user types that are going
    to be introduced into the ISDS production environment and which are
    already present in the ISDS testing environment.
    Version 0.10.7 of libisds is required to build the application.
  * Updated building scripts for the Windows application to automatically pull
    Qt dependencies into the package.
  * Fixed issue when records management data have not been erased from message
    model after the service has been deactivated.
  * Fixed issues with records management logo not being displayed in message
    list immediately after the service has been set up.
  * Alphabetically sorting nodes of records management hierarchy.
  * Sub-nodes of matching element are also displayed when filtering hierarchy
    of records management service.
  * Removed inactive mojeid-datovka code from the sources.</changelog>
  <changelog author="tchvatal@suse.com" date="1512129600">- Version update to 4.10.0:
  * Can now encrypt passwords via master password
  * Better support for screen readers</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Update to 4.10.1:
  * Few small fixes
  * MSI installer tweaks
- Refresh patch datovka-fix-pro.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- Update to 4.10.3 bsc#1104620:
  * Added classes based on Qt types encapsulating various ISDS data types and
    structures. Sharing this code with mobile application.
  * Added per-account locking of communication contexts.
  * Modified database interface to accommodate new data types.
  * Explicitly specifying tab order for most windows and dialogues. It is also
    possible (on Windows and Linux) to cycle through actions in top tool bar.
  * Asking users for confirmation before deleting tags which are still assigned
    to some messages.
  * Added tooltip description of message state value in sent message list.
  * Added button to view account password when editing account credentials and
    PIN (master password) is enabled.
  * Added DigiCert Global Root G2 certificate.
  * Improved keyboard-based control of main and other dialogue windows. All
    important elements should be navigable only by keyboard (on Windows and
    Linux).
  * Fixed a problem with wrong conversion of obtained ISDS error statuses into
    readable text. This may have caused the programme to crash.
  * Fixed scaling of some icon-based control elements when using enlarged fonts
    on Windows.
  * Fixed message list sorting and filtering according to assigned tags.
  * Displaying busy cursor when switching between entries in account list.
  * New version notification can be blocked on Windows in runtime by setting
    specific registry values. It can also be blocked at compile time
    by using a configuration option when running qmake.
  * Extended resource information for the generated Windows executable.
  * Fixed project file include paths in order not to interfere with user-defined
    compiler flags.
  * Fixed problem with unpredictable construction order of global object
    instances.
  * Added missing conversion strings to some unknown message types.
  * Fixed issue causing the application to crash on macOS when switching
    between accounts and when having some text in the message filter field.
  * Fixed issue causing the application to crash on macOS when updating
    information about messages without a valid delivery time.
  * Re-enabled logging of transferred message on Windows data when setting
    debug verbosity to 3.
  * Code shared with mobile application has been placed into separate
    directory.
- Rebase patch datovka-fix-pro.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1534507200">- Update datovka-fix-pro.patch to contain fix for Leap 42.3 build</changelog>
</package>
<package pkgid="1f43f5fc4c684665a6b80dc51ef423c5b1a7e5225fde42de3cdbef5dec95a2de" name="datovka" arch="x86_64">
  <version epoch="0" ver="4.10.3" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1444651200">- Version update to 4.4.0:
  * Various bugfixes all around. See ChangeLog file</changelog>
  <changelog author="tchvatal@suse.com" date="1451995200">- Version update to 4.4.3:
  * Various bugfixes. See ChangeLog file
  * Fixed broken expired password swap</changelog>
  <changelog author="tchvatal@suse.com" date="1455624000">- Version update to 4.5.0:
  * various backend updates
  * various bugs fixed
  * qt 5.3 required now
- Rebase patch:
  * datovka-fix-pro.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1459512000">- Update to 4.5.3
  * Fixed problems with HOTP authorisation on Windows. There have
    been problems with the bundled libisds. MinGW does not handle
    POSIX extensions of printf formatting strings properly. Patch
    for libisds has been added.
  * Fixed a non-working PRAGMA statement when asking for a database
    integrity check.
  * The --version command-line argument now also prints the version
    of libraries which Datovka depends on.
  * Automatic background downloads didn't cause the deactivation of
    download buttons that could still be triggered. Triggering those
    buttons in this situation could cause the application to crash.
  * Adding new account caused the account tree to collapse. This has
    been fixed.
- Changes for 4.5.2
  * NLS of bundled libisds (OS X, Windows) has been disabled.
  * The logging of libisds actions has been restricted on Windows
    because there are discrepancies from standard-defined behaviour
    of some functions on Windows.
  * Improved behaviour when message download fails. The error
    dialogue is only shown when an explicit message download fails.
  * A message in the notification area appears when the download
    has been triggered by downloading message list. This should
    reduce the amount of error dialogues generated.
  * Improved behaviour when downloading messages on accounts with
    restricted privileges. Received messages are not automatically
    downloaded when the user has no privileges to do that.
- Changes for 4.5.1
  * Fixed bug in action logging causing the application to crash
    occasionally.
  * Fixed bug where message line was not deleted when deleting from
    ISDS failed.
  * New account model internals.
- Build with optflags
- Use macros for desktop file and icon handling</changelog>
  <changelog author="tchvatal@suse.com" date="1463227200">- Version update to 4.6.0:
  * Added support for tags. These can be locally assigned to the messages.
  * Message information are shown in separate window when double-clicking the
    message in message list or when hitting the Return/Enter key.
  * When composing a message, the recipient can be added to the recipient list
    by double clicking it in the recently-used recipient list.
  * Information about personal delivery are shown in message description field.
  * Fixed problem where account entry has not been updated after message
    deletion.
  * Fixed encoding issue when exporting correspondence overview in HTML.
  * Fixed a bug causing the create message button not to activate when first
    account was created.</changelog>
  <changelog author="jslaby@suse.com" date="1476100800">- Version update to 4.6.1:
  * Message envelope can be exported to a PDF file along with other message
    attachments.
  * Fixed issue when the sending of a new message lasted too long. In such case
    the application could occasionally crash.
  * Patched bundled libisds to fix wrong sender identification. This fix
    affects only Windows and OS X users. Linux users should update to latest
    libisds version (0.10.4).
  * Fixed version string shown in notification dialogue.</changelog>
  <changelog author="tchvatal@suse.com" date="1476878400">- Version update to 4.7.0:
  * openssl 1.1.0 support
  * Various small fixes</changelog>
  <changelog author="jslaby@suse.com" date="1487160000">- Version update to 4.7.1:
  * User is notified about existent files when storing all attachments.
  * Added forward message action.
  * Fixed problem in which the main window was placed slightly off-screen when
  run for the first time.
  * When composing messages, attachment files can be rearranged using drag and
  drop actions.
  * Fixed bug. Message model is updated after tags have been edited.
  * Fixes errors in application localisation.</changelog>
  <changelog author="mpluskal@suse.com" date="1487246400">- Use qmake macros</changelog>
  <changelog author="tchvatal@suse.com" date="1488974400">- Fix license to be GPL-3.0+ as per COPYING file</changelog>
  <changelog author="tchvatal@suse.com" date="1490702400">- Drop dejavu dependency as it is now using fontconfig and not hardcoded
  paths in the code</changelog>
  <changelog author="tchvatal@suse.com" date="1490875200">- Version update to 4.8.0:
  * Added full-text data box search which is now the default method to search
    for data boxes.
  * Fixed problems with placing the main application window when starting the
    application on a smaller screen than it has been closed before.
  * Refactoring of code related to message imports and exports.
  * Reduced the amount of code in main application window.</changelog>
  <changelog author="jslaby@suse.com" date="1495540800">- Version update to 4.8.1:
  * Fixed problem with disappearing splitters on application start.
- add checksum to sources, so that OBS can check consistency</changelog>
  <changelog author="jslaby@suse.com" date="1500465600">- Version update to 4.9.0:
  * Added API and support for sending messages into records management
    services.
  * Removed explicit clear buttons from filter fields.
  * Fixed problems with remembering location of saved attachment files.
  * Directory structure can be created when exporting correspondence overview.
  * Line height of account list and message table has been adjusted to be the
    same.
  * Fixed confusion between the terms of delivery (dodani) and acceptance
    (doruceni) in Czech localisation.
  * Process of exporting multiple selected messages can be aborted by clicking
    Cancel button.
  * Tags can be stored into HTML correspondence overview.
  * HTML correspondence overview now contains both delivery and acceptance
    times.
  * Fixed problems with sending messages from accounts that cannot search for
    data boxes.
  * Fixed tag ordering. Tag sorting is now locale-aware.
- disable -Wdate-time -- unrecognized e.g. with gcc 4.8</changelog>
  <changelog author="jengelh@inai.de" date="1500465601">- Remove odd backslashes from description.</changelog>
  <changelog author="jslaby@suse.com" date="1508673600">- Update Version update to 4.9.3
  * Fixed a problem when message list was not updated after account
    synchronisation when a message was selected.
  * Fixed a bug when database location may have been saved even though the
    databases reside in default location. This problem was visible especially
    on Windows.
- Update Version update to 4.9.2
  * Changed tag dialogue to contain two views when editing tag assignment.
  * Using the prefix 'ODZ_' for sent and 'DDZ_' for received data messages
    when uploading them into records management service.
  * Default documentation location can be changed when running qmake using the
    TEXT_FILES_INST_DIR variable.
  * Full-text data-box search does not block the search dialogue.
  * Full-text data-box search can be interrupted and restarted again without
    closing the dialogue.
  * Separated core and GUI code. Removed models from database interface.
  * Added new CLI option '--get-msg-ids'.
  * Command-line application without GUI can be built separately. This
    executable is going to be distributed in Windows packages together with
    the GUI application.
- Update Version update to 4.9.1
  * Added experimental support for new data-box and user types that are going
    to be introduced into the ISDS production environment and which are
    already present in the ISDS testing environment.
    Version 0.10.7 of libisds is required to build the application.
  * Updated building scripts for the Windows application to automatically pull
    Qt dependencies into the package.
  * Fixed issue when records management data have not been erased from message
    model after the service has been deactivated.
  * Fixed issues with records management logo not being displayed in message
    list immediately after the service has been set up.
  * Alphabetically sorting nodes of records management hierarchy.
  * Sub-nodes of matching element are also displayed when filtering hierarchy
    of records management service.
  * Removed inactive mojeid-datovka code from the sources.</changelog>
  <changelog author="tchvatal@suse.com" date="1512129600">- Version update to 4.10.0:
  * Can now encrypt passwords via master password
  * Better support for screen readers</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Update to 4.10.1:
  * Few small fixes
  * MSI installer tweaks
- Refresh patch datovka-fix-pro.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- Update to 4.10.3 bsc#1104620:
  * Added classes based on Qt types encapsulating various ISDS data types and
    structures. Sharing this code with mobile application.
  * Added per-account locking of communication contexts.
  * Modified database interface to accommodate new data types.
  * Explicitly specifying tab order for most windows and dialogues. It is also
    possible (on Windows and Linux) to cycle through actions in top tool bar.
  * Asking users for confirmation before deleting tags which are still assigned
    to some messages.
  * Added tooltip description of message state value in sent message list.
  * Added button to view account password when editing account credentials and
    PIN (master password) is enabled.
  * Added DigiCert Global Root G2 certificate.
  * Improved keyboard-based control of main and other dialogue windows. All
    important elements should be navigable only by keyboard (on Windows and
    Linux).
  * Fixed a problem with wrong conversion of obtained ISDS error statuses into
    readable text. This may have caused the programme to crash.
  * Fixed scaling of some icon-based control elements when using enlarged fonts
    on Windows.
  * Fixed message list sorting and filtering according to assigned tags.
  * Displaying busy cursor when switching between entries in account list.
  * New version notification can be blocked on Windows in runtime by setting
    specific registry values. It can also be blocked at compile time
    by using a configuration option when running qmake.
  * Extended resource information for the generated Windows executable.
  * Fixed project file include paths in order not to interfere with user-defined
    compiler flags.
  * Fixed problem with unpredictable construction order of global object
    instances.
  * Added missing conversion strings to some unknown message types.
  * Fixed issue causing the application to crash on macOS when switching
    between accounts and when having some text in the message filter field.
  * Fixed issue causing the application to crash on macOS when updating
    information about messages without a valid delivery time.
  * Re-enabled logging of transferred message on Windows data when setting
    debug verbosity to 3.
  * Code shared with mobile application has been placed into separate
    directory.
- Rebase patch datovka-fix-pro.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1534507200">- Update datovka-fix-pro.patch to contain fix for Leap 42.3 build</changelog>
</package>
<package pkgid="896bb555b2d0911c213ba932223fcc6a4ef6c0fcd70c759601095f1361c7bb33" name="ddd" arch="src">
  <version epoch="0" ver="3.3.12" rel="lp150.2.3.1"/>
  <changelog author="anosek@suse.cz" date="1179748800">- added README.SUSE explaning workaround for [#254472]</changelog>
  <changelog author="anosek@suse.cz" date="1180440000">- added wrapper to workaround [#254472]
- updated README.SUSE</changelog>
  <changelog author="bwalle@suse.de" date="1188129600">- execute with argv[0] == ddd so that X ressources with
  ddd.???? still apply (#304021)</changelog>
  <changelog author="bwalle@suse.de" date="1207483200">- Add ghostscript-library to BuildRequires.</changelog>
  <changelog author="bwalle@suse.de" date="1220616000">- Fix UTF-8 warning to fit in a terminal with 80 characters wide.
- Don't print the warning if ~/.ddd/suse_no_utf8_warning exists.</changelog>
  <changelog author="mseben@suse.cz" date="1235131200">- updated to 3.3.12
  - Consolidated support for pydb, bashdb and remake.
- changes in 3.3.12-rc2
  - DDD can once more locate its own core file when it crashes, even on
  Linux systems where the core file may not be named "core".
- changes in 3.3.12-rc1
  - Fixed several segmentation faults.
  - Fixed a few regressions affecting gdb support after merging the pydb
    code.
- changes in 3.3.12-test6
  - Remove pydb in this directory. Use
    http://bashdb.sourceforge.net/pydb instead
  - fixed continue button for pydb
  - Start informing ddd that bash and pydb now have (or will have in the
    next release) "commands", and "display".
  - LynxOS support via Olli Savia
  - Add x86 theme for changing display expressions to x86 registers and
    flag-bits. Change Data/Memory examine behavior when used on Intel
    registers so that %reg is the same as $reg.
    Contributed by Zarko Zivanov.
- changes in 3.3.12-test5
  - Had broken gdb support
  - Add vsllib/DEMOS into distribution
  - Changes Makefiles to make "distcheck" or VPATH, or building outside
    of source tree work better (It's still not complete though).
  - GNU Make, Python pydb and bashdb support improved:
  * command completion for bashdb and pydb (via gdb "complete")
  * possibly a better test for debuggers using "bashdb" (vs. "bash")
    and "remake" (vs. "make")
  * pydb and bashdb also now have built-in "cd" and "pwd" commands - use
    them.
  * deal with bogus file name &lt;string&gt; that comes up in
    tracebacks. Require a "run" to get pydb stack set correctly.
- changes in 3.3.12-test4
  - Minor bug fixes, mostly for Python support.
- changes in 3.3.12-test3
  - Extended python debugger support. Sort of a merge of pdb.py, ddd's old
    pydb.py and new things.
- changes in 3.3.12-test2
  - GNU Make (mdb) support.
- changes in 3.3.12-test
  - Fixed a bug parsing the gdb annotations -- this should improve
    the source code tracking accuracy.
  - Fixed a bug where gdb annotations were sent to the command window.
  - GNU Make debugger support
  - Fixes to Bash debugger (remove stack movement crashes, show
    breakpoints), better word parsing, e.g ${foo[@]}
  - Fixed a couple of warnings.
  - DDD now starts up much faster, and exits more cleanly (Doug Graham)
  - DDD now builds and runs on LynxOS (Olli Savia)
- splitted into two packages : ddd and ddd-doc</changelog>
  <changelog author="crrodriguez@suse.de" date="1235649600">- fix build with GCC44</changelog>
  <changelog author="aj@suse.de" date="1252324800">- Build doc subpackage as noarch to save 6 MB on media.</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1321358400">- don't build html in parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1321963200">- compile against libtinfo</changelog>
  <changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memcpy call</changelog>
  <changelog author="pgajdos@suse.com" date="1329825600">- buildrequire xorg-x11</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1359892800">- added makeinfo to BuildRequires</changelog>
  <changelog author="coolo@suse.com" date="1374321600">- fix license to be in spdx.org format</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1413720000">- fix shebang of ddd.wrapper</changelog>
  <changelog author="dimstar@opensuse.org" date="1424779200">- Add ddd-texinfo-5.0.patch: Fix HTML generation with texinfo 5.0.</changelog>
  <changelog author="olaf@aepfle.de" date="1457352000">- Remove timestamps from binaries
  ddd-buildcompare.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1490184000">- fix color names in xpm files
  + ddd-imagemagick-xpm-colors.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- allow PS decoder for build [bsc#1109976]
- build with -j1, otherwise build fails</changelog>
</package>
<package pkgid="ec8e8b18e38068a9cd08616ae796707a4c6549d93faa5f2da89bb6084544f9ed" name="ddd" arch="x86_64">
  <version epoch="0" ver="3.3.12" rel="lp150.2.3.1"/>
  <changelog author="aj@suse.de" date="1252324800">- Build doc subpackage as noarch to save 6 MB on media.</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1321358400">- don't build html in parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1321963200">- compile against libtinfo</changelog>
  <changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memcpy call</changelog>
  <changelog author="pgajdos@suse.com" date="1329825600">- buildrequire xorg-x11</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1359892800">- added makeinfo to BuildRequires</changelog>
  <changelog author="coolo@suse.com" date="1374321600">- fix license to be in spdx.org format</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1413720000">- fix shebang of ddd.wrapper</changelog>
  <changelog author="dimstar@opensuse.org" date="1424779200">- Add ddd-texinfo-5.0.patch: Fix HTML generation with texinfo 5.0.</changelog>
  <changelog author="olaf@aepfle.de" date="1457352000">- Remove timestamps from binaries
  ddd-buildcompare.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1490184000">- fix color names in xpm files
  + ddd-imagemagick-xpm-colors.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- allow PS decoder for build [bsc#1109976]
- build with -j1, otherwise build fails</changelog>
</package>
<package pkgid="474946a441c74f9baf9b8a0df0b7279293a152276ee08571b34536ca1e7d9190" name="ddd-doc" arch="noarch">
  <version epoch="0" ver="3.3.12" rel="lp150.2.3.1"/>
  <changelog author="aj@suse.de" date="1252324800">- Build doc subpackage as noarch to save 6 MB on media.</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1321358400">- don't build html in parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1321963200">- compile against libtinfo</changelog>
  <changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memcpy call</changelog>
  <changelog author="pgajdos@suse.com" date="1329825600">- buildrequire xorg-x11</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1359892800">- added makeinfo to BuildRequires</changelog>
  <changelog author="coolo@suse.com" date="1374321600">- fix license to be in spdx.org format</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1413720000">- fix shebang of ddd.wrapper</changelog>
  <changelog author="dimstar@opensuse.org" date="1424779200">- Add ddd-texinfo-5.0.patch: Fix HTML generation with texinfo 5.0.</changelog>
  <changelog author="olaf@aepfle.de" date="1457352000">- Remove timestamps from binaries
  ddd-buildcompare.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1490184000">- fix color names in xpm files
  + ddd-imagemagick-xpm-colors.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- allow PS decoder for build [bsc#1109976]
- build with -j1, otherwise build fails</changelog>
</package>
<package pkgid="11f16a3541d833098b3a556cd592d699676bc6ac733ea1d51fae6d34b5cb86d6" name="dejagnu" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@medozas.de" date="1260187200">- enable parallel building</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="coolo@suse.com" date="1357905600">- remove suse_update_config macro</changelog>
  <changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="schwab@suse.de" date="1396958400">- Update to dejagnu 1.5.1
  1. The runtest.1 man page has been brought up to date.
  2. The Docbook/SGML documentation files were removed in favour of the
    Docbook/XML documentation.  The Texinfo source for the Info pages is
    now automatically generated from the Docbook source.
  3. The Makefile structure has been substantially simplified.  There
    is now a single top-level Makefile.am.  The use of recursive make
    has been eliminated.
  4. lib/mondfe.exp and lib/xsh.exp have been removed.  Users requiring
    these communication modes can still use the DejaGnu 1.4 branch or
    can contact dejagnu@gnu.org to discuss reinstating these files.
  5. The configure script now ensures that Expect is installed and that
    it is linked against Tcl 8.3 or greater.
  6. The runtest program now gracefully handles the possibility of the
    expect binary vanishing after DejaGnu has been installed (for
    example, by the user altering their PATH).
  7. The user-visible utility procedures `absolute', `prune', `psource'
    and `slay' are deprecated and will be removed in the next release.
    If a testsuite uses any of these procedures, a copy of the
    procedure should be made and placed in the lib directory of the
    testsuite.
- dejagnu-ignore-libwarning.patch: Removed
- dejagnu-make_doc.patch: Removed
- Build as noarch</changelog>
  <changelog author="schwab@suse.de" date="1423483200">- Update to dejagnu 1.5.2
  * New boards and bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1426334400">- Add gpg signature
- Add dependencies for macros dealing with info files
- Use fdupes to avoid duplicate files
- Small spec file cleanup by spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1427889600">- Update to dejagnu 1.5.3
  * More bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1460808000">- Update to 1.6
  * Proper support for target communication via SSH has been added.
  * A large number of very old config and baseboard files have been
    removed.  If you need to resurrect these, you can get them from
    version 1.5.3.  If you can show that a board is still in use,
    it can be put back in the distribution.
  * The --status command line option is now the default. This means
    that any error in the testsuite Tcl scripts will cause runtest
    to abort with exit status code 2.  The --status option has been
    removed from the documentation, but will continue to be
    accepted for backward compatibility.
  * runtest now exits with exit code 0 if the testsuite "passed",
    1 if something unexpected happened (eg, FAIL, XPASS or
    UNRESOLVED), and 2 if an exception is raised by the Tcl
    interpreter.
  * runtest now exits with the standard exit codes of programs that
    are terminated by the SIGINT, SIGTERM and SIGQUIT signals.
  * The user-visible utility procedures `absolute', `psource' and
    `slay' have been removed.  If a testsuite uses any of these
    procedures, a copy of the procedure should be made and placed
    in the lib directory of the testsuite.
  * Support was added for testing the D compiler.
  * ~/.dejagnurc is now loaded last, not first. This allows the
    user to have the ability to override anything in their
    environment (even the site.exp file specified by $DEJAGNU).
  * The user-visible utility procedure `unsetenv' is deprecated
    and will be removed in the next release.  If a testsuite uses
    any of these procedures, a copy of the procedure should be made
    and placed in the lib directory of the testsuite.
- Run tests during build
- Small spec-file polishing</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- Update to 1.6.1
  * Minor bug fixes, no major changes</changelog>
  <changelog author="schwab@suse.de" date="1531828800">- close-wait-program.patch: Use separate kill command for each pid
  (bsc#1100206)
- Use %license.</changelog>
</package>
<package pkgid="cbe03932b3401360483f30fe20ff8505889aa86e355a12648770f920a4ea4c02" name="dejagnu" arch="src">
  <version epoch="0" ver="1.6.1" rel="lp150.2.3.1"/>
  <changelog author="kukuk@suse.de" date="1065009600">- Don't regenerate documentation</changelog>
  <changelog author="mcihar@suse.cz" date="1079611200">- remove backup files</changelog>
  <changelog author="mcihar@suse.cz" date="1086004800">- update to 1.4.4</changelog>
  <changelog author="schwab@suse.de" date="1090843200">- Rerun autoreconf in example directories.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="mmarek@suse.cz" date="1150286400">- remove more backup files (autoreconf leftovers)</changelog>
  <changelog author="aj@suse.de" date="1171195200">- Fix install of manpage.</changelog>
  <changelog author="rguenther@suse.de" date="1179316800">- Remove files from correct place.</changelog>
  <changelog author="jengelh@medozas.de" date="1260187200">- enable parallel building</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="coolo@suse.com" date="1357905600">- remove suse_update_config macro</changelog>
  <changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="schwab@suse.de" date="1396958400">- Update to dejagnu 1.5.1
  1. The runtest.1 man page has been brought up to date.
  2. The Docbook/SGML documentation files were removed in favour of the
    Docbook/XML documentation.  The Texinfo source for the Info pages is
    now automatically generated from the Docbook source.
  3. The Makefile structure has been substantially simplified.  There
    is now a single top-level Makefile.am.  The use of recursive make
    has been eliminated.
  4. lib/mondfe.exp and lib/xsh.exp have been removed.  Users requiring
    these communication modes can still use the DejaGnu 1.4 branch or
    can contact dejagnu@gnu.org to discuss reinstating these files.
  5. The configure script now ensures that Expect is installed and that
    it is linked against Tcl 8.3 or greater.
  6. The runtest program now gracefully handles the possibility of the
    expect binary vanishing after DejaGnu has been installed (for
    example, by the user altering their PATH).
  7. The user-visible utility procedures `absolute', `prune', `psource'
    and `slay' are deprecated and will be removed in the next release.
    If a testsuite uses any of these procedures, a copy of the
    procedure should be made and placed in the lib directory of the
    testsuite.
- dejagnu-ignore-libwarning.patch: Removed
- dejagnu-make_doc.patch: Removed
- Build as noarch</changelog>
  <changelog author="schwab@suse.de" date="1423483200">- Update to dejagnu 1.5.2
  * New boards and bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1426334400">- Add gpg signature
- Add dependencies for macros dealing with info files
- Use fdupes to avoid duplicate files
- Small spec file cleanup by spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1427889600">- Update to dejagnu 1.5.3
  * More bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1460808000">- Update to 1.6
  * Proper support for target communication via SSH has been added.
  * A large number of very old config and baseboard files have been
    removed.  If you need to resurrect these, you can get them from
    version 1.5.3.  If you can show that a board is still in use,
    it can be put back in the distribution.
  * The --status command line option is now the default. This means
    that any error in the testsuite Tcl scripts will cause runtest
    to abort with exit status code 2.  The --status option has been
    removed from the documentation, but will continue to be
    accepted for backward compatibility.
  * runtest now exits with exit code 0 if the testsuite "passed",
    1 if something unexpected happened (eg, FAIL, XPASS or
    UNRESOLVED), and 2 if an exception is raised by the Tcl
    interpreter.
  * runtest now exits with the standard exit codes of programs that
    are terminated by the SIGINT, SIGTERM and SIGQUIT signals.
  * The user-visible utility procedures `absolute', `psource' and
    `slay' have been removed.  If a testsuite uses any of these
    procedures, a copy of the procedure should be made and placed
    in the lib directory of the testsuite.
  * Support was added for testing the D compiler.
  * ~/.dejagnurc is now loaded last, not first. This allows the
    user to have the ability to override anything in their
    environment (even the site.exp file specified by $DEJAGNU).
  * The user-visible utility procedure `unsetenv' is deprecated
    and will be removed in the next release.  If a testsuite uses
    any of these procedures, a copy of the procedure should be made
    and placed in the lib directory of the testsuite.
- Run tests during build
- Small spec-file polishing</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- Update to 1.6.1
  * Minor bug fixes, no major changes</changelog>
  <changelog author="schwab@suse.de" date="1531828800">- close-wait-program.patch: Use separate kill command for each pid
  (bsc#1100206)
- Use %license.</changelog>
</package>
<package pkgid="d1ded2443bb7d1917164983f1721abe57c33324db6c2e7f6212941f9e005deaf" name="dialog" arch="src">
  <version epoch="0" ver="1.3" rel="lp150.2.3.1"/>
  <changelog author="werner@suse.de" date="1277985600">- Added korean po translation file (bnc#614248)</changelog>
  <changelog author="werner@suse.de" date="1283947200">- Disable gpm as it is not used for long time</changelog>
  <changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1359288000">- Build with libtool using
- Add devel package</changelog>
  <changelog author="cfarrell@suse.com" date="1359633600">- license update: LGPL-2.1
  See e.g. editbox.c</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1361534400">- Fix libraries
  * dialog-libs.patch</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1361534401">- Update to version 1.2-20121230
  * See included CHANGES file for detailes</changelog>
  <changelog author="werner@suse.de" date="1362052800">- Re-add patch dialog-1.2-20121230.dif: Fix problem with moving
  shadows during terminal resize
- Use a /etc/dialogrc for openSUSE default coloring/shadow defaults
- Re-add Korean language message file</changelog>
  <changelog author="werner@suse.de" date="1371816000">- Require terminfo-base and suggest terminfo to have on many or on
  mostly all terminals valid line graphics (bnc#826171)</changelog>
  <changelog author="p.drouand@gmail.com" date="1386849600">- Update to version 1.2-20130928
  + fix a regression in gauge widget from 1.2-20130928 changes;
    dlg_reallocate_gauge() failed when no --title option was given
- Changes from 1.2-20130923
  + fix samples/inputbox6-utf8, which had depended unnecessarily on bash.
  + improve memory caching for wide-character manipulation in gauge
    widget
  + add dlg_reallocate_gauge
  + updated configure macros to use msys changes from ncurses.
  + update config.guess, config.sub
- Changes from 1.2-20130902
  + modify makefile rule to make the ".png" filenames created by groff
    predictable.
  + add option --help-tags to allow scripts to get the item's tag field
    consistently from help- and help-item button results rather than
    getting the item's text for the latter
  + correct manpage discussion of DIALOG_ITEM_HELP versus --item-help,
    as well as --help-button return status
  + correct limit used for --hline option
  + do not print empty "[]" if a --hline option was given with an empty
    value
  + miscellaneous configure script fixes/updates.  In particular, add
    option --with-shared which builds shared libraries without a libtool
    dependency.
  + add FreeBSD port-files for test-builds.
  + update lt.po, add fa.po from
    http://translationproject.org/latest/dialog/
  + update config.guess, config.sub
- Changes from 1.2-20130523
  + modify ifdef in arrows.c to work around packages which use the
    wide-character ncursesw headers with the ncurses library
  + correct workaround for xterm alternate-screen to work with/without
    the fix made in ncurses that makes putp() always write to the
    standard output (Debian #708829).
  + improve limit-checks for checklist, in case the dialog is resized
  + add --last-key option ( Debian #697607).
- Changes from 2013/03/15
  + update zh_TW.po, add an.po from
    http://translationproject.org/latest/dialog/
- Remove dialog-libs.patch; fixed on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1420372800">- Update to version 1.2-20140911
  + correct malloc-size for change to prgbox.</changelog>
  <changelog author="werner@suse.de" date="1425470400">- Update to version 1.2-20150225
  + modify gauge widget to keep from erasing a second gauge widget, e.g.,
    via the "--and-widget" option.  This is a cosmetic change to match
    behavior of dialog 1.0 (report by Jason Orendorf).
  + add configure option "--with-man2html"
  + add configure options for versioned symbols, from ongoing work on
    ncurses.
  + update configure macros, e.g., for shared libraries
- Changes from 1.2- 20150125
  + suppress highlighting of character which denotes an abbreviation or
    shortcut for the OK/Cancel and other buttons for these widgets, which
    use abbreviations for the list shown on the screen:  buildlist,
    checklist/radiobox, menubox, treeview (Debian #775295).
  + add grid up/left and down/right bindings in editbox.c as synonyms for
    field prev and next, respectively when handling the OK/Cancel buttons
    (Debian #775294).</changelog>
  <changelog author="werner@suse.de" date="1425556800">- Hack around bug in libtool as it seems to be broken in shell
  function func_lalib_unsafe_p() as this does only work if a
  file descriptor 0 exists.</changelog>
  <changelog author="mpluskal@suse.com" date="1432296000">- Add gpg signature
- Update to 1.2-20150513
  + add configure option --with-install-prefix, like ncurses.
  + add --with-screen and related configure options from ncurses-examples
    to allow building with ncurses6 test-packages.
  + update configure macros for improved coding style from lynx changes.
  + updated ro.po from
    http://translationproject.org/latest/dialog/
  + update config.guess, config.sub
  &gt; patches by Florent Rougon:
  + fix two bugs in the "--file" option.
    + When the number of arguments read from the included file is 0, the
    code used to just skip over '--file' and its argument instead of
    removing them from the argument list, causing "Error:  Unknown
    option --file" later on.
    + In the alternative case (at least one argument read from the file),
    the previous code used to do '--j;' in order to "force rescan" of
    the inserted arguments.  However, control then flowed to outer
    blocks where a '++j;' counteracted this measure, causing "Error:
    Unknown option --msgbox" (for instance) later on.
  + modify escaping in argv.c to be more uniform, whether or not the
    backslash is found within a parameter.</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 1.2-20150920
  * decrease table value for minimum number of arguments for the
    widgets which use --no-items option
  * update configure macros:
    + use $SHELL consistently, deprecate non-POSIX shell
    + PKG_CONFIG may simply be unset - fix
    + add option to allow changing ABI version, from ncurses6.
  * fixes for two autoconf macros, CF_ADD_INCDIR and
    CF_NCURSES_CONFIG from work on ncurses.
  * build-fix for NetBSD curses
- Fix typo in previous changelog entry</changelog>
  <changelog author="mpluskal@suse.com" date="1457697600">- Update to 1.3-20160209
  * modify editbox widget to add a trailing newline if the text
    has none to ensure the last line is not ignored (report by
    Florent Rougon).
  * change mouse initialization to look for button-presses rather
    than button-clicks, for better response.
  * modify dump_curses_key() to show mouse-coding in readable form.
  * correct mapping of mouse-clicks on the day-grid in calendar
    widget when "--week-start" is used to set the start of the week
    (report by Stefan Vogtner).
  * integrated changes from Stefan Vogtner:
  * use Gregorian algorithm for leap year
  * use mktime if available; calendar was written just as it became
    standard.
- Changes for version 1.3
  * correct --infobox documentation, which said it shows an OK
    button.
  * fix a couple of place in test-scripts which referred to
    $SIG_TRAP rather than $SIG_QUIT
  * reorganize dialog.3, to use subsections for generating navigation
    pane, using man2html
  * add "--week-start" option for calendar widget (prompted by
    discussion with Stefan Vogtner).
  * add a limit-check in editbox.c to ensure that mouse-clicks
    outside the filled-in text area do not access past the end of
    the array (report by Stefan Vogtner).
  * update configure macros from ncurses changes.
  * update config.guess, config.sub</changelog>
  <changelog author="p.drouand@gmail.com" date="1488888000">- Update to version 1.3-20170131
  * use DLG_TRACE macro consistently to make "--disable-trace" configure
  option work.
  * modify buildlist widget to support option "--reorder" for to allow
    user to reorder the data based on the sequence of selections
    (discussion with Paraic O'Ceallaigh).
  * fill background color on unused parts of buildlist.
  * fix a minor error in buildlist which let pageup switch columns.
  * change several calls to dlg_trace_msg to prefix with "#" to make
    the trace logs more consistent for parsing.
  * add samples/run_test.sh
  * further improve performance with very long command-lines by changes
    to howmany_tags().
  * modify dlg_string_to_argv() to convert escaped double-quotes to
    plain double-quotes when within a double-quoted string.
  * modify makefile to apply CFLAGS to linking
  * modify dlg_string_to_argv() to ignore escaped newlines except when
    quoted, fixing a problem with samples/checklist9.
  * interpret $DIALOGOPTS before expanding "--file", etc., to allow
    the environment variable to turn on tracing in that process.
  * improve performance when processing very long command lines, e.g.,
    using "--file" by changing dialog_opts[] to an array of pointers to
    the expanded argv[] (discussion with Lars Tauber).
  * modified autoconf macros
    + CF_CC_ENV_FLAGS amend the last change to move only the
    preprocessor, optimization and warning flags to CPPFLAGS and
    CFLAGS, leaving the residue in CC.  That happens to work for gcc's
    various "model" options, but may require tuning for other compilers
    + CF_LARGEFILE workaround for clang exit-code vs warnings
    + CF_MATH_LIB quiet strict gcc warning
    + CF_WITH_LIBTOOL fix a few places in configure/build scripts where
    DESTDIR and rpath were combined
    + CF_XOPEN_SOURCE add "uclinux" to list of Linux's
  * update config.guess, config.sub</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Update to version 1.3-20170509:
  * improved configure macros CF_ADD_CFLAGS, CF_CC_ENV_FLAGS, and
  CF_SHARED_OPTS.
  * updated hu.po and tr.po from
  http://translationproject.org/latest/dialog/
  * update config.guess, config.sub</changelog>
  <changelog author="werner@suse.de" date="1527595200">- Update to version 1.3-20171209
  + update ftp url in test-packages.
  + modify test-packages to use recommended compiler/linker flags.
  + improved configure macros AM_WITH_NLS, CF_CC_ENV_FLAGS,
    CF_CURSES_LIBS, CF_NCURSES_CONFIG, CF_SHARED_OPTS, CF_WITH_LIBTOOL,
    CF__INTL_BODY.
  + update config.guess, config.sub
- Add patch textbox-file_size.patch to fix bug bsc#1094836</changelog>
</package>
<package pkgid="fdad475e383631892efc15fe4b513ae2f221b089964ce5e482bb36d4da59a67b" name="dialog" arch="x86_64">
  <version epoch="0" ver="1.3" rel="lp150.2.3.1"/>
  <changelog author="werner@suse.de" date="1277985600">- Added korean po translation file (bnc#614248)</changelog>
  <changelog author="werner@suse.de" date="1283947200">- Disable gpm as it is not used for long time</changelog>
  <changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1359288000">- Build with libtool using
- Add devel package</changelog>
  <changelog author="cfarrell@suse.com" date="1359633600">- license update: LGPL-2.1
  See e.g. editbox.c</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1361534400">- Fix libraries
  * dialog-libs.patch</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1361534401">- Update to version 1.2-20121230
  * See included CHANGES file for detailes</changelog>
  <changelog author="werner@suse.de" date="1362052800">- Re-add patch dialog-1.2-20121230.dif: Fix problem with moving
  shadows during terminal resize
- Use a /etc/dialogrc for openSUSE default coloring/shadow defaults
- Re-add Korean language message file</changelog>
  <changelog author="werner@suse.de" date="1371816000">- Require terminfo-base and suggest terminfo to have on many or on
  mostly all terminals valid line graphics (bnc#826171)</changelog>
  <changelog author="p.drouand@gmail.com" date="1386849600">- Update to version 1.2-20130928
  + fix a regression in gauge widget from 1.2-20130928 changes;
    dlg_reallocate_gauge() failed when no --title option was given
- Changes from 1.2-20130923
  + fix samples/inputbox6-utf8, which had depended unnecessarily on bash.
  + improve memory caching for wide-character manipulation in gauge
    widget
  + add dlg_reallocate_gauge
  + updated configure macros to use msys changes from ncurses.
  + update config.guess, config.sub
- Changes from 1.2-20130902
  + modify makefile rule to make the ".png" filenames created by groff
    predictable.
  + add option --help-tags to allow scripts to get the item's tag field
    consistently from help- and help-item button results rather than
    getting the item's text for the latter
  + correct manpage discussion of DIALOG_ITEM_HELP versus --item-help,
    as well as --help-button return status
  + correct limit used for --hline option
  + do not print empty "[]" if a --hline option was given with an empty
    value
  + miscellaneous configure script fixes/updates.  In particular, add
    option --with-shared which builds shared libraries without a libtool
    dependency.
  + add FreeBSD port-files for test-builds.
  + update lt.po, add fa.po from
    http://translationproject.org/latest/dialog/
  + update config.guess, config.sub
- Changes from 1.2-20130523
  + modify ifdef in arrows.c to work around packages which use the
    wide-character ncursesw headers with the ncurses library
  + correct workaround for xterm alternate-screen to work with/without
    the fix made in ncurses that makes putp() always write to the
    standard output (Debian #708829).
  + improve limit-checks for checklist, in case the dialog is resized
  + add --last-key option ( Debian #697607).
- Changes from 2013/03/15
  + update zh_TW.po, add an.po from
    http://translationproject.org/latest/dialog/
- Remove dialog-libs.patch; fixed on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1420372800">- Update to version 1.2-20140911
  + correct malloc-size for change to prgbox.</changelog>
  <changelog author="werner@suse.de" date="1425470400">- Update to version 1.2-20150225
  + modify gauge widget to keep from erasing a second gauge widget, e.g.,
    via the "--and-widget" option.  This is a cosmetic change to match
    behavior of dialog 1.0 (report by Jason Orendorf).
  + add configure option "--with-man2html"
  + add configure options for versioned symbols, from ongoing work on
    ncurses.
  + update configure macros, e.g., for shared libraries
- Changes from 1.2- 20150125
  + suppress highlighting of character which denotes an abbreviation or
    shortcut for the OK/Cancel and other buttons for these widgets, which
    use abbreviations for the list shown on the screen:  buildlist,
    checklist/radiobox, menubox, treeview (Debian #775295).
  + add grid up/left and down/right bindings in editbox.c as synonyms for
    field prev and next, respectively when handling the OK/Cancel buttons
    (Debian #775294).</changelog>
  <changelog author="werner@suse.de" date="1425556800">- Hack around bug in libtool as it seems to be broken in shell
  function func_lalib_unsafe_p() as this does only work if a
  file descriptor 0 exists.</changelog>
  <changelog author="mpluskal@suse.com" date="1432296000">- Add gpg signature
- Update to 1.2-20150513
  + add configure option --with-install-prefix, like ncurses.
  + add --with-screen and related configure options from ncurses-examples
    to allow building with ncurses6 test-packages.
  + update configure macros for improved coding style from lynx changes.
  + updated ro.po from
    http://translationproject.org/latest/dialog/
  + update config.guess, config.sub
  &gt; patches by Florent Rougon:
  + fix two bugs in the "--file" option.
    + When the number of arguments read from the included file is 0, the
    code used to just skip over '--file' and its argument instead of
    removing them from the argument list, causing "Error:  Unknown
    option --file" later on.
    + In the alternative case (at least one argument read from the file),
    the previous code used to do '--j;' in order to "force rescan" of
    the inserted arguments.  However, control then flowed to outer
    blocks where a '++j;' counteracted this measure, causing "Error:
    Unknown option --msgbox" (for instance) later on.
  + modify escaping in argv.c to be more uniform, whether or not the
    backslash is found within a parameter.</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 1.2-20150920
  * decrease table value for minimum number of arguments for the
    widgets which use --no-items option
  * update configure macros:
    + use $SHELL consistently, deprecate non-POSIX shell
    + PKG_CONFIG may simply be unset - fix
    + add option to allow changing ABI version, from ncurses6.
  * fixes for two autoconf macros, CF_ADD_INCDIR and
    CF_NCURSES_CONFIG from work on ncurses.
  * build-fix for NetBSD curses
- Fix typo in previous changelog entry</changelog>
  <changelog author="mpluskal@suse.com" date="1457697600">- Update to 1.3-20160209
  * modify editbox widget to add a trailing newline if the text
    has none to ensure the last line is not ignored (report by
    Florent Rougon).
  * change mouse initialization to look for button-presses rather
    than button-clicks, for better response.
  * modify dump_curses_key() to show mouse-coding in readable form.
  * correct mapping of mouse-clicks on the day-grid in calendar
    widget when "--week-start" is used to set the start of the week
    (report by Stefan Vogtner).
  * integrated changes from Stefan Vogtner:
  * use Gregorian algorithm for leap year
  * use mktime if available; calendar was written just as it became
    standard.
- Changes for version 1.3
  * correct --infobox documentation, which said it shows an OK
    button.
  * fix a couple of place in test-scripts which referred to
    $SIG_TRAP rather than $SIG_QUIT
  * reorganize dialog.3, to use subsections for generating navigation
    pane, using man2html
  * add "--week-start" option for calendar widget (prompted by
    discussion with Stefan Vogtner).
  * add a limit-check in editbox.c to ensure that mouse-clicks
    outside the filled-in text area do not access past the end of
    the array (report by Stefan Vogtner).
  * update configure macros from ncurses changes.
  * update config.guess, config.sub</changelog>
  <changelog author="p.drouand@gmail.com" date="1488888000">- Update to version 1.3-20170131
  * use DLG_TRACE macro consistently to make "--disable-trace" configure
  option work.
  * modify buildlist widget to support option "--reorder" for to allow
    user to reorder the data based on the sequence of selections
    (discussion with Paraic O'Ceallaigh).
  * fill background color on unused parts of buildlist.
  * fix a minor error in buildlist which let pageup switch columns.
  * change several calls to dlg_trace_msg to prefix with "#" to make
    the trace logs more consistent for parsing.
  * add samples/run_test.sh
  * further improve performance with very long command-lines by changes
    to howmany_tags().
  * modify dlg_string_to_argv() to convert escaped double-quotes to
    plain double-quotes when within a double-quoted string.
  * modify makefile to apply CFLAGS to linking
  * modify dlg_string_to_argv() to ignore escaped newlines except when
    quoted, fixing a problem with samples/checklist9.
  * interpret $DIALOGOPTS before expanding "--file", etc., to allow
    the environment variable to turn on tracing in that process.
  * improve performance when processing very long command lines, e.g.,
    using "--file" by changing dialog_opts[] to an array of pointers to
    the expanded argv[] (discussion with Lars Tauber).
  * modified autoconf macros
    + CF_CC_ENV_FLAGS amend the last change to move only the
    preprocessor, optimization and warning flags to CPPFLAGS and
    CFLAGS, leaving the residue in CC.  That happens to work for gcc's
    various "model" options, but may require tuning for other compilers
    + CF_LARGEFILE workaround for clang exit-code vs warnings
    + CF_MATH_LIB quiet strict gcc warning
    + CF_WITH_LIBTOOL fix a few places in configure/build scripts where
    DESTDIR and rpath were combined
    + CF_XOPEN_SOURCE add "uclinux" to list of Linux's
  * update config.guess, config.sub</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Update to version 1.3-20170509:
  * improved configure macros CF_ADD_CFLAGS, CF_CC_ENV_FLAGS, and
  CF_SHARED_OPTS.
  * updated hu.po and tr.po from
  http://translationproject.org/latest/dialog/
  * update config.guess, config.sub</changelog>
  <changelog author="werner@suse.de" date="1527595200">- Update to version 1.3-20171209
  + update ftp url in test-packages.
  + modify test-packages to use recommended compiler/linker flags.
  + improved configure macros AM_WITH_NLS, CF_CC_ENV_FLAGS,
    CF_CURSES_LIBS, CF_NCURSES_CONFIG, CF_SHARED_OPTS, CF_WITH_LIBTOOL,
    CF__INTL_BODY.
  + update config.guess, config.sub
- Add patch textbox-file_size.patch to fix bug bsc#1094836</changelog>
</package>
<package pkgid="baedba8477bb18d679b1bdefbda7d38118aaa6ad849feedb988c1c7665502973" name="dialog-devel" arch="x86_64">
  <version epoch="0" ver="1.3" rel="lp150.2.3.1"/>
  <changelog author="werner@suse.de" date="1277985600">- Added korean po translation file (bnc#614248)</changelog>
  <changelog author="werner@suse.de" date="1283947200">- Disable gpm as it is not used for long time</changelog>
  <changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1359288000">- Build with libtool using
- Add devel package</changelog>
  <changelog author="cfarrell@suse.com" date="1359633600">- license update: LGPL-2.1
  See e.g. editbox.c</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1361534400">- Fix libraries
  * dialog-libs.patch</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1361534401">- Update to version 1.2-20121230
  * See included CHANGES file for detailes</changelog>
  <changelog author="werner@suse.de" date="1362052800">- Re-add patch dialog-1.2-20121230.dif: Fix problem with moving
  shadows during terminal resize
- Use a /etc/dialogrc for openSUSE default coloring/shadow defaults
- Re-add Korean language message file</changelog>
  <changelog author="werner@suse.de" date="1371816000">- Require terminfo-base and suggest terminfo to have on many or on
  mostly all terminals valid line graphics (bnc#826171)</changelog>
  <changelog author="p.drouand@gmail.com" date="1386849600">- Update to version 1.2-20130928
  + fix a regression in gauge widget from 1.2-20130928 changes;
    dlg_reallocate_gauge() failed when no --title option was given
- Changes from 1.2-20130923
  + fix samples/inputbox6-utf8, which had depended unnecessarily on bash.
  + improve memory caching for wide-character manipulation in gauge
    widget
  + add dlg_reallocate_gauge
  + updated configure macros to use msys changes from ncurses.
  + update config.guess, config.sub
- Changes from 1.2-20130902
  + modify makefile rule to make the ".png" filenames created by groff
    predictable.
  + add option --help-tags to allow scripts to get the item's tag field
    consistently from help- and help-item button results rather than
    getting the item's text for the latter
  + correct manpage discussion of DIALOG_ITEM_HELP versus --item-help,
    as well as --help-button return status
  + correct limit used for --hline option
  + do not print empty "[]" if a --hline option was given with an empty
    value
  + miscellaneous configure script fixes/updates.  In particular, add
    option --with-shared which builds shared libraries without a libtool
    dependency.
  + add FreeBSD port-files for test-builds.
  + update lt.po, add fa.po from
    http://translationproject.org/latest/dialog/
  + update config.guess, config.sub
- Changes from 1.2-20130523
  + modify ifdef in arrows.c to work around packages which use the
    wide-character ncursesw headers with the ncurses library
  + correct workaround for xterm alternate-screen to work with/without
    the fix made in ncurses that makes putp() always write to the
    standard output (Debian #708829).
  + improve limit-checks for checklist, in case the dialog is resized
  + add --last-key option ( Debian #697607).
- Changes from 2013/03/15
  + update zh_TW.po, add an.po from
    http://translationproject.org/latest/dialog/
- Remove dialog-libs.patch; fixed on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1420372800">- Update to version 1.2-20140911
  + correct malloc-size for change to prgbox.</changelog>
  <changelog author="werner@suse.de" date="1425470400">- Update to version 1.2-20150225
  + modify gauge widget to keep from erasing a second gauge widget, e.g.,
    via the "--and-widget" option.  This is a cosmetic change to match
    behavior of dialog 1.0 (report by Jason Orendorf).
  + add configure option "--with-man2html"
  + add configure options for versioned symbols, from ongoing work on
    ncurses.
  + update configure macros, e.g., for shared libraries
- Changes from 1.2- 20150125
  + suppress highlighting of character which denotes an abbreviation or
    shortcut for the OK/Cancel and other buttons for these widgets, which
    use abbreviations for the list shown on the screen:  buildlist,
    checklist/radiobox, menubox, treeview (Debian #775295).
  + add grid up/left and down/right bindings in editbox.c as synonyms for
    field prev and next, respectively when handling the OK/Cancel buttons
    (Debian #775294).</changelog>
  <changelog author="werner@suse.de" date="1425556800">- Hack around bug in libtool as it seems to be broken in shell
  function func_lalib_unsafe_p() as this does only work if a
  file descriptor 0 exists.</changelog>
  <changelog author="mpluskal@suse.com" date="1432296000">- Add gpg signature
- Update to 1.2-20150513
  + add configure option --with-install-prefix, like ncurses.
  + add --with-screen and related configure options from ncurses-examples
    to allow building with ncurses6 test-packages.
  + update configure macros for improved coding style from lynx changes.
  + updated ro.po from
    http://translationproject.org/latest/dialog/
  + update config.guess, config.sub
  &gt; patches by Florent Rougon:
  + fix two bugs in the "--file" option.
    + When the number of arguments read from the included file is 0, the
    code used to just skip over '--file' and its argument instead of
    removing them from the argument list, causing "Error:  Unknown
    option --file" later on.
    + In the alternative case (at least one argument read from the file),
    the previous code used to do '--j;' in order to "force rescan" of
    the inserted arguments.  However, control then flowed to outer
    blocks where a '++j;' counteracted this measure, causing "Error:
    Unknown option --msgbox" (for instance) later on.
  + modify escaping in argv.c to be more uniform, whether or not the
    backslash is found within a parameter.</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 1.2-20150920
  * decrease table value for minimum number of arguments for the
    widgets which use --no-items option
  * update configure macros:
    + use $SHELL consistently, deprecate non-POSIX shell
    + PKG_CONFIG may simply be unset - fix
    + add option to allow changing ABI version, from ncurses6.
  * fixes for two autoconf macros, CF_ADD_INCDIR and
    CF_NCURSES_CONFIG from work on ncurses.
  * build-fix for NetBSD curses
- Fix typo in previous changelog entry</changelog>
  <changelog author="mpluskal@suse.com" date="1457697600">- Update to 1.3-20160209
  * modify editbox widget to add a trailing newline if the text
    has none to ensure the last line is not ignored (report by
    Florent Rougon).
  * change mouse initialization to look for button-presses rather
    than button-clicks, for better response.
  * modify dump_curses_key() to show mouse-coding in readable form.
  * correct mapping of mouse-clicks on the day-grid in calendar
    widget when "--week-start" is used to set the start of the week
    (report by Stefan Vogtner).
  * integrated changes from Stefan Vogtner:
  * use Gregorian algorithm for leap year
  * use mktime if available; calendar was written just as it became
    standard.
- Changes for version 1.3
  * correct --infobox documentation, which said it shows an OK
    button.
  * fix a couple of place in test-scripts which referred to
    $SIG_TRAP rather than $SIG_QUIT
  * reorganize dialog.3, to use subsections for generating navigation
    pane, using man2html
  * add "--week-start" option for calendar widget (prompted by
    discussion with Stefan Vogtner).
  * add a limit-check in editbox.c to ensure that mouse-clicks
    outside the filled-in text area do not access past the end of
    the array (report by Stefan Vogtner).
  * update configure macros from ncurses changes.
  * update config.guess, config.sub</changelog>
  <changelog author="p.drouand@gmail.com" date="1488888000">- Update to version 1.3-20170131
  * use DLG_TRACE macro consistently to make "--disable-trace" configure
  option work.
  * modify buildlist widget to support option "--reorder" for to allow
    user to reorder the data based on the sequence of selections
    (discussion with Paraic O'Ceallaigh).
  * fill background color on unused parts of buildlist.
  * fix a minor error in buildlist which let pageup switch columns.
  * change several calls to dlg_trace_msg to prefix with "#" to make
    the trace logs more consistent for parsing.
  * add samples/run_test.sh
  * further improve performance with very long command-lines by changes
    to howmany_tags().
  * modify dlg_string_to_argv() to convert escaped double-quotes to
    plain double-quotes when within a double-quoted string.
  * modify makefile to apply CFLAGS to linking
  * modify dlg_string_to_argv() to ignore escaped newlines except when
    quoted, fixing a problem with samples/checklist9.
  * interpret $DIALOGOPTS before expanding "--file", etc., to allow
    the environment variable to turn on tracing in that process.
  * improve performance when processing very long command lines, e.g.,
    using "--file" by changing dialog_opts[] to an array of pointers to
    the expanded argv[] (discussion with Lars Tauber).
  * modified autoconf macros
    + CF_CC_ENV_FLAGS amend the last change to move only the
    preprocessor, optimization and warning flags to CPPFLAGS and
    CFLAGS, leaving the residue in CC.  That happens to work for gcc's
    various "model" options, but may require tuning for other compilers
    + CF_LARGEFILE workaround for clang exit-code vs warnings
    + CF_MATH_LIB quiet strict gcc warning
    + CF_WITH_LIBTOOL fix a few places in configure/build scripts where
    DESTDIR and rpath were combined
    + CF_XOPEN_SOURCE add "uclinux" to list of Linux's
  * update config.guess, config.sub</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Update to version 1.3-20170509:
  * improved configure macros CF_ADD_CFLAGS, CF_CC_ENV_FLAGS, and
  CF_SHARED_OPTS.
  * updated hu.po and tr.po from
  http://translationproject.org/latest/dialog/
  * update config.guess, config.sub</changelog>
  <changelog author="werner@suse.de" date="1527595200">- Update to version 1.3-20171209
  + update ftp url in test-packages.
  + modify test-packages to use recommended compiler/linker flags.
  + improved configure macros AM_WITH_NLS, CF_CC_ENV_FLAGS,
    CF_CURSES_LIBS, CF_NCURSES_CONFIG, CF_SHARED_OPTS, CF_WITH_LIBTOOL,
    CF__INTL_BODY.
  + update config.guess, config.sub
- Add patch textbox-file_size.patch to fix bug bsc#1094836</changelog>
</package>
<package pkgid="81c25da0f1f8a6a8347bae164e74aa30a63be2feb1cb72a78b1f975520dcdfe3" name="dialog-examples" arch="noarch">
  <version epoch="0" ver="1.3" rel="lp150.2.3.1"/>
  <changelog author="werner@suse.de" date="1277985600">- Added korean po translation file (bnc#614248)</changelog>
  <changelog author="werner@suse.de" date="1283947200">- Disable gpm as it is not used for long time</changelog>
  <changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1359288000">- Build with libtool using
- Add devel package</changelog>
  <changelog author="cfarrell@suse.com" date="1359633600">- license update: LGPL-2.1
  See e.g. editbox.c</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1361534400">- Fix libraries
  * dialog-libs.patch</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1361534401">- Update to version 1.2-20121230
  * See included CHANGES file for detailes</changelog>
  <changelog author="werner@suse.de" date="1362052800">- Re-add patch dialog-1.2-20121230.dif: Fix problem with moving
  shadows during terminal resize
- Use a /etc/dialogrc for openSUSE default coloring/shadow defaults
- Re-add Korean language message file</changelog>
  <changelog author="werner@suse.de" date="1371816000">- Require terminfo-base and suggest terminfo to have on many or on
  mostly all terminals valid line graphics (bnc#826171)</changelog>
  <changelog author="p.drouand@gmail.com" date="1386849600">- Update to version 1.2-20130928
  + fix a regression in gauge widget from 1.2-20130928 changes;
    dlg_reallocate_gauge() failed when no --title option was given
- Changes from 1.2-20130923
  + fix samples/inputbox6-utf8, which had depended unnecessarily on bash.
  + improve memory caching for wide-character manipulation in gauge
    widget
  + add dlg_reallocate_gauge
  + updated configure macros to use msys changes from ncurses.
  + update config.guess, config.sub
- Changes from 1.2-20130902
  + modify makefile rule to make the ".png" filenames created by groff
    predictable.
  + add option --help-tags to allow scripts to get the item's tag field
    consistently from help- and help-item button results rather than
    getting the item's text for the latter
  + correct manpage discussion of DIALOG_ITEM_HELP versus --item-help,
    as well as --help-button return status
  + correct limit used for --hline option
  + do not print empty "[]" if a --hline option was given with an empty
    value
  + miscellaneous configure script fixes/updates.  In particular, add
    option --with-shared which builds shared libraries without a libtool
    dependency.
  + add FreeBSD port-files for test-builds.
  + update lt.po, add fa.po from
    http://translationproject.org/latest/dialog/
  + update config.guess, config.sub
- Changes from 1.2-20130523
  + modify ifdef in arrows.c to work around packages which use the
    wide-character ncursesw headers with the ncurses library
  + correct workaround for xterm alternate-screen to work with/without
    the fix made in ncurses that makes putp() always write to the
    standard output (Debian #708829).
  + improve limit-checks for checklist, in case the dialog is resized
  + add --last-key option ( Debian #697607).
- Changes from 2013/03/15
  + update zh_TW.po, add an.po from
    http://translationproject.org/latest/dialog/
- Remove dialog-libs.patch; fixed on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1420372800">- Update to version 1.2-20140911
  + correct malloc-size for change to prgbox.</changelog>
  <changelog author="werner@suse.de" date="1425470400">- Update to version 1.2-20150225
  + modify gauge widget to keep from erasing a second gauge widget, e.g.,
    via the "--and-widget" option.  This is a cosmetic change to match
    behavior of dialog 1.0 (report by Jason Orendorf).
  + add configure option "--with-man2html"
  + add configure options for versioned symbols, from ongoing work on
    ncurses.
  + update configure macros, e.g., for shared libraries
- Changes from 1.2- 20150125
  + suppress highlighting of character which denotes an abbreviation or
    shortcut for the OK/Cancel and other buttons for these widgets, which
    use abbreviations for the list shown on the screen:  buildlist,
    checklist/radiobox, menubox, treeview (Debian #775295).
  + add grid up/left and down/right bindings in editbox.c as synonyms for
    field prev and next, respectively when handling the OK/Cancel buttons
    (Debian #775294).</changelog>
  <changelog author="werner@suse.de" date="1425556800">- Hack around bug in libtool as it seems to be broken in shell
  function func_lalib_unsafe_p() as this does only work if a
  file descriptor 0 exists.</changelog>
  <changelog author="mpluskal@suse.com" date="1432296000">- Add gpg signature
- Update to 1.2-20150513
  + add configure option --with-install-prefix, like ncurses.
  + add --with-screen and related configure options from ncurses-examples
    to allow building with ncurses6 test-packages.
  + update configure macros for improved coding style from lynx changes.
  + updated ro.po from
    http://translationproject.org/latest/dialog/
  + update config.guess, config.sub
  &gt; patches by Florent Rougon:
  + fix two bugs in the "--file" option.
    + When the number of arguments read from the included file is 0, the
    code used to just skip over '--file' and its argument instead of
    removing them from the argument list, causing "Error:  Unknown
    option --file" later on.
    + In the alternative case (at least one argument read from the file),
    the previous code used to do '--j;' in order to "force rescan" of
    the inserted arguments.  However, control then flowed to outer
    blocks where a '++j;' counteracted this measure, causing "Error:
    Unknown option --msgbox" (for instance) later on.
  + modify escaping in argv.c to be more uniform, whether or not the
    backslash is found within a parameter.</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 1.2-20150920
  * decrease table value for minimum number of arguments for the
    widgets which use --no-items option
  * update configure macros:
    + use $SHELL consistently, deprecate non-POSIX shell
    + PKG_CONFIG may simply be unset - fix
    + add option to allow changing ABI version, from ncurses6.
  * fixes for two autoconf macros, CF_ADD_INCDIR and
    CF_NCURSES_CONFIG from work on ncurses.
  * build-fix for NetBSD curses
- Fix typo in previous changelog entry</changelog>
  <changelog author="mpluskal@suse.com" date="1457697600">- Update to 1.3-20160209
  * modify editbox widget to add a trailing newline if the text
    has none to ensure the last line is not ignored (report by
    Florent Rougon).
  * change mouse initialization to look for button-presses rather
    than button-clicks, for better response.
  * modify dump_curses_key() to show mouse-coding in readable form.
  * correct mapping of mouse-clicks on the day-grid in calendar
    widget when "--week-start" is used to set the start of the week
    (report by Stefan Vogtner).
  * integrated changes from Stefan Vogtner:
  * use Gregorian algorithm for leap year
  * use mktime if available; calendar was written just as it became
    standard.
- Changes for version 1.3
  * correct --infobox documentation, which said it shows an OK
    button.
  * fix a couple of place in test-scripts which referred to
    $SIG_TRAP rather than $SIG_QUIT
  * reorganize dialog.3, to use subsections for generating navigation
    pane, using man2html
  * add "--week-start" option for calendar widget (prompted by
    discussion with Stefan Vogtner).
  * add a limit-check in editbox.c to ensure that mouse-clicks
    outside the filled-in text area do not access past the end of
    the array (report by Stefan Vogtner).
  * update configure macros from ncurses changes.
  * update config.guess, config.sub</changelog>
  <changelog author="p.drouand@gmail.com" date="1488888000">- Update to version 1.3-20170131
  * use DLG_TRACE macro consistently to make "--disable-trace" configure
  option work.
  * modify buildlist widget to support option "--reorder" for to allow
    user to reorder the data based on the sequence of selections
    (discussion with Paraic O'Ceallaigh).
  * fill background color on unused parts of buildlist.
  * fix a minor error in buildlist which let pageup switch columns.
  * change several calls to dlg_trace_msg to prefix with "#" to make
    the trace logs more consistent for parsing.
  * add samples/run_test.sh
  * further improve performance with very long command-lines by changes
    to howmany_tags().
  * modify dlg_string_to_argv() to convert escaped double-quotes to
    plain double-quotes when within a double-quoted string.
  * modify makefile to apply CFLAGS to linking
  * modify dlg_string_to_argv() to ignore escaped newlines except when
    quoted, fixing a problem with samples/checklist9.
  * interpret $DIALOGOPTS before expanding "--file", etc., to allow
    the environment variable to turn on tracing in that process.
  * improve performance when processing very long command lines, e.g.,
    using "--file" by changing dialog_opts[] to an array of pointers to
    the expanded argv[] (discussion with Lars Tauber).
  * modified autoconf macros
    + CF_CC_ENV_FLAGS amend the last change to move only the
    preprocessor, optimization and warning flags to CPPFLAGS and
    CFLAGS, leaving the residue in CC.  That happens to work for gcc's
    various "model" options, but may require tuning for other compilers
    + CF_LARGEFILE workaround for clang exit-code vs warnings
    + CF_MATH_LIB quiet strict gcc warning
    + CF_WITH_LIBTOOL fix a few places in configure/build scripts where
    DESTDIR and rpath were combined
    + CF_XOPEN_SOURCE add "uclinux" to list of Linux's
  * update config.guess, config.sub</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Update to version 1.3-20170509:
  * improved configure macros CF_ADD_CFLAGS, CF_CC_ENV_FLAGS, and
  CF_SHARED_OPTS.
  * updated hu.po and tr.po from
  http://translationproject.org/latest/dialog/
  * update config.guess, config.sub</changelog>
  <changelog author="werner@suse.de" date="1527595200">- Update to version 1.3-20171209
  + update ftp url in test-packages.
  + modify test-packages to use recommended compiler/linker flags.
  + improved configure macros AM_WITH_NLS, CF_CC_ENV_FLAGS,
    CF_CURSES_LIBS, CF_NCURSES_CONFIG, CF_SHARED_OPTS, CF_WITH_LIBTOOL,
    CF__INTL_BODY.
  + update config.guess, config.sub
- Add patch textbox-file_size.patch to fix bug bsc#1094836</changelog>
</package>
<package pkgid="8c4ff56ad5a36739833c6f202f79228aa9f907229a66344e5e1b156fa3ac202a" name="dialog-lang" arch="noarch">
  <version epoch="0" ver="1.3" rel="lp150.2.3.1"/>
  <changelog author="werner@suse.de" date="1277985600">- Added korean po translation file (bnc#614248)</changelog>
  <changelog author="werner@suse.de" date="1283947200">- Disable gpm as it is not used for long time</changelog>
  <changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1359288000">- Build with libtool using
- Add devel package</changelog>
  <changelog author="cfarrell@suse.com" date="1359633600">- license update: LGPL-2.1
  See e.g. editbox.c</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1361534400">- Fix libraries
  * dialog-libs.patch</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1361534401">- Update to version 1.2-20121230
  * See included CHANGES file for detailes</changelog>
  <changelog author="werner@suse.de" date="1362052800">- Re-add patch dialog-1.2-20121230.dif: Fix problem with moving
  shadows during terminal resize
- Use a /etc/dialogrc for openSUSE default coloring/shadow defaults
- Re-add Korean language message file</changelog>
  <changelog author="werner@suse.de" date="1371816000">- Require terminfo-base and suggest terminfo to have on many or on
  mostly all terminals valid line graphics (bnc#826171)</changelog>
  <changelog author="p.drouand@gmail.com" date="1386849600">- Update to version 1.2-20130928
  + fix a regression in gauge widget from 1.2-20130928 changes;
    dlg_reallocate_gauge() failed when no --title option was given
- Changes from 1.2-20130923
  + fix samples/inputbox6-utf8, which had depended unnecessarily on bash.
  + improve memory caching for wide-character manipulation in gauge
    widget
  + add dlg_reallocate_gauge
  + updated configure macros to use msys changes from ncurses.
  + update config.guess, config.sub
- Changes from 1.2-20130902
  + modify makefile rule to make the ".png" filenames created by groff
    predictable.
  + add option --help-tags to allow scripts to get the item's tag field
    consistently from help- and help-item button results rather than
    getting the item's text for the latter
  + correct manpage discussion of DIALOG_ITEM_HELP versus --item-help,
    as well as --help-button return status
  + correct limit used for --hline option
  + do not print empty "[]" if a --hline option was given with an empty
    value
  + miscellaneous configure script fixes/updates.  In particular, add
    option --with-shared which builds shared libraries without a libtool
    dependency.
  + add FreeBSD port-files for test-builds.
  + update lt.po, add fa.po from
    http://translationproject.org/latest/dialog/
  + update config.guess, config.sub
- Changes from 1.2-20130523
  + modify ifdef in arrows.c to work around packages which use the
    wide-character ncursesw headers with the ncurses library
  + correct workaround for xterm alternate-screen to work with/without
    the fix made in ncurses that makes putp() always write to the
    standard output (Debian #708829).
  + improve limit-checks for checklist, in case the dialog is resized
  + add --last-key option ( Debian #697607).
- Changes from 2013/03/15
  + update zh_TW.po, add an.po from
    http://translationproject.org/latest/dialog/
- Remove dialog-libs.patch; fixed on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1420372800">- Update to version 1.2-20140911
  + correct malloc-size for change to prgbox.</changelog>
  <changelog author="werner@suse.de" date="1425470400">- Update to version 1.2-20150225
  + modify gauge widget to keep from erasing a second gauge widget, e.g.,
    via the "--and-widget" option.  This is a cosmetic change to match
    behavior of dialog 1.0 (report by Jason Orendorf).
  + add configure option "--with-man2html"
  + add configure options for versioned symbols, from ongoing work on
    ncurses.
  + update configure macros, e.g., for shared libraries
- Changes from 1.2- 20150125
  + suppress highlighting of character which denotes an abbreviation or
    shortcut for the OK/Cancel and other buttons for these widgets, which
    use abbreviations for the list shown on the screen:  buildlist,
    checklist/radiobox, menubox, treeview (Debian #775295).
  + add grid up/left and down/right bindings in editbox.c as synonyms for
    field prev and next, respectively when handling the OK/Cancel buttons
    (Debian #775294).</changelog>
  <changelog author="werner@suse.de" date="1425556800">- Hack around bug in libtool as it seems to be broken in shell
  function func_lalib_unsafe_p() as this does only work if a
  file descriptor 0 exists.</changelog>
  <changelog author="mpluskal@suse.com" date="1432296000">- Add gpg signature
- Update to 1.2-20150513
  + add configure option --with-install-prefix, like ncurses.
  + add --with-screen and related configure options from ncurses-examples
    to allow building with ncurses6 test-packages.
  + update configure macros for improved coding style from lynx changes.
  + updated ro.po from
    http://translationproject.org/latest/dialog/
  + update config.guess, config.sub
  &gt; patches by Florent Rougon:
  + fix two bugs in the "--file" option.
    + When the number of arguments read from the included file is 0, the
    code used to just skip over '--file' and its argument instead of
    removing them from the argument list, causing "Error:  Unknown
    option --file" later on.
    + In the alternative case (at least one argument read from the file),
    the previous code used to do '--j;' in order to "force rescan" of
    the inserted arguments.  However, control then flowed to outer
    blocks where a '++j;' counteracted this measure, causing "Error:
    Unknown option --msgbox" (for instance) later on.
  + modify escaping in argv.c to be more uniform, whether or not the
    backslash is found within a parameter.</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 1.2-20150920
  * decrease table value for minimum number of arguments for the
    widgets which use --no-items option
  * update configure macros:
    + use $SHELL consistently, deprecate non-POSIX shell
    + PKG_CONFIG may simply be unset - fix
    + add option to allow changing ABI version, from ncurses6.
  * fixes for two autoconf macros, CF_ADD_INCDIR and
    CF_NCURSES_CONFIG from work on ncurses.
  * build-fix for NetBSD curses
- Fix typo in previous changelog entry</changelog>
  <changelog author="mpluskal@suse.com" date="1457697600">- Update to 1.3-20160209
  * modify editbox widget to add a trailing newline if the text
    has none to ensure the last line is not ignored (report by
    Florent Rougon).
  * change mouse initialization to look for button-presses rather
    than button-clicks, for better response.
  * modify dump_curses_key() to show mouse-coding in readable form.
  * correct mapping of mouse-clicks on the day-grid in calendar
    widget when "--week-start" is used to set the start of the week
    (report by Stefan Vogtner).
  * integrated changes from Stefan Vogtner:
  * use Gregorian algorithm for leap year
  * use mktime if available; calendar was written just as it became
    standard.
- Changes for version 1.3
  * correct --infobox documentation, which said it shows an OK
    button.
  * fix a couple of place in test-scripts which referred to
    $SIG_TRAP rather than $SIG_QUIT
  * reorganize dialog.3, to use subsections for generating navigation
    pane, using man2html
  * add "--week-start" option for calendar widget (prompted by
    discussion with Stefan Vogtner).
  * add a limit-check in editbox.c to ensure that mouse-clicks
    outside the filled-in text area do not access past the end of
    the array (report by Stefan Vogtner).
  * update configure macros from ncurses changes.
  * update config.guess, config.sub</changelog>
  <changelog author="p.drouand@gmail.com" date="1488888000">- Update to version 1.3-20170131
  * use DLG_TRACE macro consistently to make "--disable-trace" configure
  option work.
  * modify buildlist widget to support option "--reorder" for to allow
    user to reorder the data based on the sequence of selections
    (discussion with Paraic O'Ceallaigh).
  * fill background color on unused parts of buildlist.
  * fix a minor error in buildlist which let pageup switch columns.
  * change several calls to dlg_trace_msg to prefix with "#" to make
    the trace logs more consistent for parsing.
  * add samples/run_test.sh
  * further improve performance with very long command-lines by changes
    to howmany_tags().
  * modify dlg_string_to_argv() to convert escaped double-quotes to
    plain double-quotes when within a double-quoted string.
  * modify makefile to apply CFLAGS to linking
  * modify dlg_string_to_argv() to ignore escaped newlines except when
    quoted, fixing a problem with samples/checklist9.
  * interpret $DIALOGOPTS before expanding "--file", etc., to allow
    the environment variable to turn on tracing in that process.
  * improve performance when processing very long command lines, e.g.,
    using "--file" by changing dialog_opts[] to an array of pointers to
    the expanded argv[] (discussion with Lars Tauber).
  * modified autoconf macros
    + CF_CC_ENV_FLAGS amend the last change to move only the
    preprocessor, optimization and warning flags to CPPFLAGS and
    CFLAGS, leaving the residue in CC.  That happens to work for gcc's
    various "model" options, but may require tuning for other compilers
    + CF_LARGEFILE workaround for clang exit-code vs warnings
    + CF_MATH_LIB quiet strict gcc warning
    + CF_WITH_LIBTOOL fix a few places in configure/build scripts where
    DESTDIR and rpath were combined
    + CF_XOPEN_SOURCE add "uclinux" to list of Linux's
  * update config.guess, config.sub</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Update to version 1.3-20170509:
  * improved configure macros CF_ADD_CFLAGS, CF_CC_ENV_FLAGS, and
  CF_SHARED_OPTS.
  * updated hu.po and tr.po from
  http://translationproject.org/latest/dialog/
  * update config.guess, config.sub</changelog>
  <changelog author="werner@suse.de" date="1527595200">- Update to version 1.3-20171209
  + update ftp url in test-packages.
  + modify test-packages to use recommended compiler/linker flags.
  + improved configure macros AM_WITH_NLS, CF_CC_ENV_FLAGS,
    CF_CURSES_LIBS, CF_NCURSES_CONFIG, CF_SHARED_OPTS, CF_WITH_LIBTOOL,
    CF__INTL_BODY.
  + update config.guess, config.sub
- Add patch textbox-file_size.patch to fix bug bsc#1094836</changelog>
</package>
<package pkgid="319b013faa725e6d647b5f9bbf82b0bfc8debc4712d1839fb0b54a272054b7e8" name="discover" arch="src">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * auto generate desktop file for url handling
  * Revert "auto generate desktop file for url handling"
  * auto generate desktop file for url handling
  * Remove the navigationEnabled concept (kde#383294)
  * Fix license, comply with our naming scheme
  * Don't disable the updates action when there are no updates (kde#383294)
  * Some elements aren't reporting a big preview
  * Fallback to the package icon if there isn't a stock icon as well
  * Prevent memory leak
  * Make sure we don't crash when opening flatpakrepo files
  * Make it possible to prevent some resources from being Reviewed
  * Don't show the version if there's none on the ApplicationPage (kde#383036)
  * Make sure we don't render HTML on the Discover page header</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503921600">- Adjust License tag</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Use the right update icon when there's no updates
  * When the delegate is compact, don't show the longDescription at all
  * Fix featured filtering
  * Fix listing several sources in an application
  * Fix warnings
  * Optimize adding resources to the model (kde#383743)
  * make for better debug output
  * Don't go through categories more than necessary
  * Properly traverse a hash with iterators
  * Use flatpak_installation_list_installed_refs for listing installed flatpaks</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Fix under Qt 5.10
  * Fix tests
  * Remove our isCompact concept and use Kirigami's</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Include the progress of transactions (kde#384038)
  * Fix adding remote sources
  * list items should be lighter than normal background
  * Use QQC2.Popup instead of Kirigami.OverlaySheet for screenshots (kde#385115)
  * Don't open a null application from the progress view (update transaction)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Don't refresh invalid backends (kde#386045)
  * Remove unused class
  * Don't delete resources whenever asked to clear the view
  * Extend the resetModel until the model is ready to be fetched again
  * Make sure we set the page size
  * Unneeded dependency in the library
  * Fix warning
  * Remove unused code
  * --warning: don't capture unused variable
  * Properly listen to ODRS replies
  * Assert on ODRS reviews fetched
  * Don't leak QNetworkAccessManager instances
  * Recover the right delegate background color
  * Improve global updates progress reporting
  * Improve progress reporting in some PackageKit updates
  * Show errors from refreshing (kde#386244)
  * Include the progress of transactions (kde#384038)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Flatpak: Make sure we don't degrade resources' state
  * If it's busy, try again in a second
  * Group updater refreshes
  * StandardUpdater: Only refresh when it's going to make a difference
  * Narrow down the scope of a variable
  * Make it possible for updaters to show notifications at any time
  * Remove unused code
  * Remove hidden styling from the delegate's comment (kde#387221)
  * No need to explicitly notify
  * Make sure we remove the Transaction before it's destroyed
  * Revert "Install related ref instead attempting to upgrade it"
  * Install related ref instead attempting to upgrade it
  * Link to a url that still exists
  * Don't fetch updates while the updater is working
  * Remove weirdly long timer to display notifications (kde#381812)
  * Simplify notifier logic
  * Don't crash if we get into a weird state (kde#385637)
  * Remove unneeded declaration
  * Make sure we never search on an invalid KNS backend</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Keep track of the kns entries status internally
  * Revert "Make sure m_isFetching is initialized when we use it"
  * Make sure m_isFetching is initialized when we use it
  * Make it possible to navigate screenshots from the overlay (kde#387402)
  * Hide reviews page when opening the review dialog (kde#386902)
  * Revert "Improve error message when review dialog contents are wrong"
  * Improve error message when review dialog contents are wrong (kde#387261)
  * Usually applications won't be compulsory for a desktop
  * Don't show packages tightly coupled to other desktops by default
  * Readability
  * PK: Use the stream to store the information rather than the transaction (kde#386992)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1516795200">- Build with gcc7 on Leap 42.3, gcc6 no longer works because of a
  change to the default compiler flags in openSUSE:Leap:42.3:Update
  (boo#1077345)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Update copyright year (kde#390358)
  * Notify about the backend (kde#390339)
  * Don't notify when the number of updates becomes smaller (kde#390322)
  * Remove commented out code
  * Forgot to add file
  * Fix freeze when showing the ApplicationPage (kde#390123)
  * Only report changes when they actually happen
  * Fix binding loop when showing the update description
  * Disable Review button for resources that aren't installed (kde#390053)
  * Show a beautiful disabled icon for updates (kde#390076)
  * Make sure we mark as busy before clearling the list (kde#390114)
  * Add some paddings to the Review button (kde#390030)
  * Make it possible to specify a fallback appstream id (kde#390016)
  * Use the default passive notification amount (kde#388087)
  * Remove redundant action (kde#389767)
  * Fix tests, now we don't show a list from a URL
  * Only show the description for PackageKit sources (kde#389715)
  * Print a warning when a remote can't be removed
  * Fix dummy build
  * Address source by id look-up in Flatpak source
  * Fix source removal
  * Make it possible for the source id to be different from the display string
  * Fix warnings
  * Reduce duplication in flatpak sources display
  * Flatpak: don't show full url, just the hostname (kde#389714)</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Fix checking if the package is already on the ResProxyModel
  * Add multimedia sub-categories
  * Put all systemwide add-ons in Plasma Addons category (kde#390594)
  * Sort by sortable rating
  * Make it possible to debug sorting
  * Make sure sortableRating is initialised
  * Don't let the user write the first review for apps they haven't installed
  * Fix warning
  * Only instantiate the ProgressView sheet when it's to be displayed
  * Fix placement of the BusyIndicator over loading screenshots (kde#390391)
  * Update copyright year (kde#390358)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521806400">- Add patch to show an informative warning when adding FlatHub:
  * 0001-Warning-for-FlatHub.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * Simplify the tasks view (kde#391760)
  * Remove unneeded includes
  * Fix dbus path
  * Include a test for cancelling flatpak installations
  * Improve status of FlatpakTransaction
  * Remove pointless i18n call
  * KNS: Only indicate that it's fetching if already fetching reviews
  * Include a test that makes sure we can list origins
  * Solve some inconsistencies found when testing flatpak
  * Introduce a flatpak test
  * No need to pass the extra arguments on the Update Action (kde#391801)
  * Add Qt5::Xml
  * Simplify KNSTransaction creation (kde#390236)
  * Fix test
  * Add a test to make sure we don't add resources with the wrong URL
  * kns: Fix logic for adding screenshots (kde#391190)
  * Add debug information when the searched URI is wrong</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * Improve display of Progress element (kde#393323)
  * More elegant syntax for qrc files in cmake
  * Make sure we update the checkability of all delegates when one changes
  * PK: Improve information on resources that extend others
  * Report 0% update progress when not progressing
  * Infer cancellability of the StandardBackendUpdater (kde#390319)
  * Forward action enabled state into the button
  * Don't change the resources while updating (kde#391262)
  * Remove unused variable
  * Fix typo
  * Fix notifier button placement
  * Fix warning on Qt 5.11
  * Remove wrongly commented code
  * Report when root categories change
  * Readability
  * Properly concatenate strings
  * Fix crash when installing flatpak files
  * Remove unneeded dependency
  * Don't crash when cancelling flatpak jobs (kde#391941)
  * Remove unused imports
  * --debug
  * Make sure we don't crash automatically (kde#392082)
  * Fix sorting when the actual comparison matches
  * Fix warning in Qt 5.11</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="68e978b2c3994e3db81fa37efaaa6585a5ee72e8e5dc38304d5e25837d4e51a0" name="discover" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * auto generate desktop file for url handling
  * Revert "auto generate desktop file for url handling"
  * auto generate desktop file for url handling
  * Remove the navigationEnabled concept (kde#383294)
  * Fix license, comply with our naming scheme
  * Don't disable the updates action when there are no updates (kde#383294)
  * Some elements aren't reporting a big preview
  * Fallback to the package icon if there isn't a stock icon as well
  * Prevent memory leak
  * Make sure we don't crash when opening flatpakrepo files
  * Make it possible to prevent some resources from being Reviewed
  * Don't show the version if there's none on the ApplicationPage (kde#383036)
  * Make sure we don't render HTML on the Discover page header</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503921600">- Adjust License tag</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Use the right update icon when there's no updates
  * When the delegate is compact, don't show the longDescription at all
  * Fix featured filtering
  * Fix listing several sources in an application
  * Fix warnings
  * Optimize adding resources to the model (kde#383743)
  * make for better debug output
  * Don't go through categories more than necessary
  * Properly traverse a hash with iterators
  * Use flatpak_installation_list_installed_refs for listing installed flatpaks</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Fix under Qt 5.10
  * Fix tests
  * Remove our isCompact concept and use Kirigami's</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Include the progress of transactions (kde#384038)
  * Fix adding remote sources
  * list items should be lighter than normal background
  * Use QQC2.Popup instead of Kirigami.OverlaySheet for screenshots (kde#385115)
  * Don't open a null application from the progress view (update transaction)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Don't refresh invalid backends (kde#386045)
  * Remove unused class
  * Don't delete resources whenever asked to clear the view
  * Extend the resetModel until the model is ready to be fetched again
  * Make sure we set the page size
  * Unneeded dependency in the library
  * Fix warning
  * Remove unused code
  * --warning: don't capture unused variable
  * Properly listen to ODRS replies
  * Assert on ODRS reviews fetched
  * Don't leak QNetworkAccessManager instances
  * Recover the right delegate background color
  * Improve global updates progress reporting
  * Improve progress reporting in some PackageKit updates
  * Show errors from refreshing (kde#386244)
  * Include the progress of transactions (kde#384038)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Flatpak: Make sure we don't degrade resources' state
  * If it's busy, try again in a second
  * Group updater refreshes
  * StandardUpdater: Only refresh when it's going to make a difference
  * Narrow down the scope of a variable
  * Make it possible for updaters to show notifications at any time
  * Remove unused code
  * Remove hidden styling from the delegate's comment (kde#387221)
  * No need to explicitly notify
  * Make sure we remove the Transaction before it's destroyed
  * Revert "Install related ref instead attempting to upgrade it"
  * Install related ref instead attempting to upgrade it
  * Link to a url that still exists
  * Don't fetch updates while the updater is working
  * Remove weirdly long timer to display notifications (kde#381812)
  * Simplify notifier logic
  * Don't crash if we get into a weird state (kde#385637)
  * Remove unneeded declaration
  * Make sure we never search on an invalid KNS backend</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Keep track of the kns entries status internally
  * Revert "Make sure m_isFetching is initialized when we use it"
  * Make sure m_isFetching is initialized when we use it
  * Make it possible to navigate screenshots from the overlay (kde#387402)
  * Hide reviews page when opening the review dialog (kde#386902)
  * Revert "Improve error message when review dialog contents are wrong"
  * Improve error message when review dialog contents are wrong (kde#387261)
  * Usually applications won't be compulsory for a desktop
  * Don't show packages tightly coupled to other desktops by default
  * Readability
  * PK: Use the stream to store the information rather than the transaction (kde#386992)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1516795200">- Build with gcc7 on Leap 42.3, gcc6 no longer works because of a
  change to the default compiler flags in openSUSE:Leap:42.3:Update
  (boo#1077345)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Update copyright year (kde#390358)
  * Notify about the backend (kde#390339)
  * Don't notify when the number of updates becomes smaller (kde#390322)
  * Remove commented out code
  * Forgot to add file
  * Fix freeze when showing the ApplicationPage (kde#390123)
  * Only report changes when they actually happen
  * Fix binding loop when showing the update description
  * Disable Review button for resources that aren't installed (kde#390053)
  * Show a beautiful disabled icon for updates (kde#390076)
  * Make sure we mark as busy before clearling the list (kde#390114)
  * Add some paddings to the Review button (kde#390030)
  * Make it possible to specify a fallback appstream id (kde#390016)
  * Use the default passive notification amount (kde#388087)
  * Remove redundant action (kde#389767)
  * Fix tests, now we don't show a list from a URL
  * Only show the description for PackageKit sources (kde#389715)
  * Print a warning when a remote can't be removed
  * Fix dummy build
  * Address source by id look-up in Flatpak source
  * Fix source removal
  * Make it possible for the source id to be different from the display string
  * Fix warnings
  * Reduce duplication in flatpak sources display
  * Flatpak: don't show full url, just the hostname (kde#389714)</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Fix checking if the package is already on the ResProxyModel
  * Add multimedia sub-categories
  * Put all systemwide add-ons in Plasma Addons category (kde#390594)
  * Sort by sortable rating
  * Make it possible to debug sorting
  * Make sure sortableRating is initialised
  * Don't let the user write the first review for apps they haven't installed
  * Fix warning
  * Only instantiate the ProgressView sheet when it's to be displayed
  * Fix placement of the BusyIndicator over loading screenshots (kde#390391)
  * Update copyright year (kde#390358)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521806400">- Add patch to show an informative warning when adding FlatHub:
  * 0001-Warning-for-FlatHub.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * Simplify the tasks view (kde#391760)
  * Remove unneeded includes
  * Fix dbus path
  * Include a test for cancelling flatpak installations
  * Improve status of FlatpakTransaction
  * Remove pointless i18n call
  * KNS: Only indicate that it's fetching if already fetching reviews
  * Include a test that makes sure we can list origins
  * Solve some inconsistencies found when testing flatpak
  * Introduce a flatpak test
  * No need to pass the extra arguments on the Update Action (kde#391801)
  * Add Qt5::Xml
  * Simplify KNSTransaction creation (kde#390236)
  * Fix test
  * Add a test to make sure we don't add resources with the wrong URL
  * kns: Fix logic for adding screenshots (kde#391190)
  * Add debug information when the searched URI is wrong</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * Improve display of Progress element (kde#393323)
  * More elegant syntax for qrc files in cmake
  * Make sure we update the checkability of all delegates when one changes
  * PK: Improve information on resources that extend others
  * Report 0% update progress when not progressing
  * Infer cancellability of the StandardBackendUpdater (kde#390319)
  * Forward action enabled state into the button
  * Don't change the resources while updating (kde#391262)
  * Remove unused variable
  * Fix typo
  * Fix notifier button placement
  * Fix warning on Qt 5.11
  * Remove wrongly commented code
  * Report when root categories change
  * Readability
  * Properly concatenate strings
  * Fix crash when installing flatpak files
  * Remove unneeded dependency
  * Don't crash when cancelling flatpak jobs (kde#391941)
  * Remove unused imports
  * --debug
  * Make sure we don't crash automatically (kde#392082)
  * Fix sorting when the actual comparison matches
  * Fix warning in Qt 5.11</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="2784c181bc29255423bd9bb4f224974ef6835e23a72efc4b4eb36e7f600fc289" name="discover-lang" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * auto generate desktop file for url handling
  * Revert "auto generate desktop file for url handling"
  * auto generate desktop file for url handling
  * Remove the navigationEnabled concept (kde#383294)
  * Fix license, comply with our naming scheme
  * Don't disable the updates action when there are no updates (kde#383294)
  * Some elements aren't reporting a big preview
  * Fallback to the package icon if there isn't a stock icon as well
  * Prevent memory leak
  * Make sure we don't crash when opening flatpakrepo files
  * Make it possible to prevent some resources from being Reviewed
  * Don't show the version if there's none on the ApplicationPage (kde#383036)
  * Make sure we don't render HTML on the Discover page header</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503921600">- Adjust License tag</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Use the right update icon when there's no updates
  * When the delegate is compact, don't show the longDescription at all
  * Fix featured filtering
  * Fix listing several sources in an application
  * Fix warnings
  * Optimize adding resources to the model (kde#383743)
  * make for better debug output
  * Don't go through categories more than necessary
  * Properly traverse a hash with iterators
  * Use flatpak_installation_list_installed_refs for listing installed flatpaks</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Fix under Qt 5.10
  * Fix tests
  * Remove our isCompact concept and use Kirigami's</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Include the progress of transactions (kde#384038)
  * Fix adding remote sources
  * list items should be lighter than normal background
  * Use QQC2.Popup instead of Kirigami.OverlaySheet for screenshots (kde#385115)
  * Don't open a null application from the progress view (update transaction)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Don't refresh invalid backends (kde#386045)
  * Remove unused class
  * Don't delete resources whenever asked to clear the view
  * Extend the resetModel until the model is ready to be fetched again
  * Make sure we set the page size
  * Unneeded dependency in the library
  * Fix warning
  * Remove unused code
  * --warning: don't capture unused variable
  * Properly listen to ODRS replies
  * Assert on ODRS reviews fetched
  * Don't leak QNetworkAccessManager instances
  * Recover the right delegate background color
  * Improve global updates progress reporting
  * Improve progress reporting in some PackageKit updates
  * Show errors from refreshing (kde#386244)
  * Include the progress of transactions (kde#384038)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Flatpak: Make sure we don't degrade resources' state
  * If it's busy, try again in a second
  * Group updater refreshes
  * StandardUpdater: Only refresh when it's going to make a difference
  * Narrow down the scope of a variable
  * Make it possible for updaters to show notifications at any time
  * Remove unused code
  * Remove hidden styling from the delegate's comment (kde#387221)
  * No need to explicitly notify
  * Make sure we remove the Transaction before it's destroyed
  * Revert "Install related ref instead attempting to upgrade it"
  * Install related ref instead attempting to upgrade it
  * Link to a url that still exists
  * Don't fetch updates while the updater is working
  * Remove weirdly long timer to display notifications (kde#381812)
  * Simplify notifier logic
  * Don't crash if we get into a weird state (kde#385637)
  * Remove unneeded declaration
  * Make sure we never search on an invalid KNS backend</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Keep track of the kns entries status internally
  * Revert "Make sure m_isFetching is initialized when we use it"
  * Make sure m_isFetching is initialized when we use it
  * Make it possible to navigate screenshots from the overlay (kde#387402)
  * Hide reviews page when opening the review dialog (kde#386902)
  * Revert "Improve error message when review dialog contents are wrong"
  * Improve error message when review dialog contents are wrong (kde#387261)
  * Usually applications won't be compulsory for a desktop
  * Don't show packages tightly coupled to other desktops by default
  * Readability
  * PK: Use the stream to store the information rather than the transaction (kde#386992)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1516795200">- Build with gcc7 on Leap 42.3, gcc6 no longer works because of a
  change to the default compiler flags in openSUSE:Leap:42.3:Update
  (boo#1077345)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Update copyright year (kde#390358)
  * Notify about the backend (kde#390339)
  * Don't notify when the number of updates becomes smaller (kde#390322)
  * Remove commented out code
  * Forgot to add file
  * Fix freeze when showing the ApplicationPage (kde#390123)
  * Only report changes when they actually happen
  * Fix binding loop when showing the update description
  * Disable Review button for resources that aren't installed (kde#390053)
  * Show a beautiful disabled icon for updates (kde#390076)
  * Make sure we mark as busy before clearling the list (kde#390114)
  * Add some paddings to the Review button (kde#390030)
  * Make it possible to specify a fallback appstream id (kde#390016)
  * Use the default passive notification amount (kde#388087)
  * Remove redundant action (kde#389767)
  * Fix tests, now we don't show a list from a URL
  * Only show the description for PackageKit sources (kde#389715)
  * Print a warning when a remote can't be removed
  * Fix dummy build
  * Address source by id look-up in Flatpak source
  * Fix source removal
  * Make it possible for the source id to be different from the display string
  * Fix warnings
  * Reduce duplication in flatpak sources display
  * Flatpak: don't show full url, just the hostname (kde#389714)</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Fix checking if the package is already on the ResProxyModel
  * Add multimedia sub-categories
  * Put all systemwide add-ons in Plasma Addons category (kde#390594)
  * Sort by sortable rating
  * Make it possible to debug sorting
  * Make sure sortableRating is initialised
  * Don't let the user write the first review for apps they haven't installed
  * Fix warning
  * Only instantiate the ProgressView sheet when it's to be displayed
  * Fix placement of the BusyIndicator over loading screenshots (kde#390391)
  * Update copyright year (kde#390358)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521806400">- Add patch to show an informative warning when adding FlatHub:
  * 0001-Warning-for-FlatHub.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * Simplify the tasks view (kde#391760)
  * Remove unneeded includes
  * Fix dbus path
  * Include a test for cancelling flatpak installations
  * Improve status of FlatpakTransaction
  * Remove pointless i18n call
  * KNS: Only indicate that it's fetching if already fetching reviews
  * Include a test that makes sure we can list origins
  * Solve some inconsistencies found when testing flatpak
  * Introduce a flatpak test
  * No need to pass the extra arguments on the Update Action (kde#391801)
  * Add Qt5::Xml
  * Simplify KNSTransaction creation (kde#390236)
  * Fix test
  * Add a test to make sure we don't add resources with the wrong URL
  * kns: Fix logic for adding screenshots (kde#391190)
  * Add debug information when the searched URI is wrong</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * Improve display of Progress element (kde#393323)
  * More elegant syntax for qrc files in cmake
  * Make sure we update the checkability of all delegates when one changes
  * PK: Improve information on resources that extend others
  * Report 0% update progress when not progressing
  * Infer cancellability of the StandardBackendUpdater (kde#390319)
  * Forward action enabled state into the button
  * Don't change the resources while updating (kde#391262)
  * Remove unused variable
  * Fix typo
  * Fix notifier button placement
  * Fix warning on Qt 5.11
  * Remove wrongly commented code
  * Report when root categories change
  * Readability
  * Properly concatenate strings
  * Fix crash when installing flatpak files
  * Remove unneeded dependency
  * Don't crash when cancelling flatpak jobs (kde#391941)
  * Remove unused imports
  * --debug
  * Make sure we don't crash automatically (kde#392082)
  * Fix sorting when the actual comparison matches
  * Fix warning in Qt 5.11</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="75256d9cf2ddd0b085c227c88577a160c9d61a01f1f6c78c75d2df3b66e56f94" name="discover-plasmoid" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * auto generate desktop file for url handling
  * Revert "auto generate desktop file for url handling"
  * auto generate desktop file for url handling
  * Remove the navigationEnabled concept (kde#383294)
  * Fix license, comply with our naming scheme
  * Don't disable the updates action when there are no updates (kde#383294)
  * Some elements aren't reporting a big preview
  * Fallback to the package icon if there isn't a stock icon as well
  * Prevent memory leak
  * Make sure we don't crash when opening flatpakrepo files
  * Make it possible to prevent some resources from being Reviewed
  * Don't show the version if there's none on the ApplicationPage (kde#383036)
  * Make sure we don't render HTML on the Discover page header</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503921600">- Adjust License tag</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Use the right update icon when there's no updates
  * When the delegate is compact, don't show the longDescription at all
  * Fix featured filtering
  * Fix listing several sources in an application
  * Fix warnings
  * Optimize adding resources to the model (kde#383743)
  * make for better debug output
  * Don't go through categories more than necessary
  * Properly traverse a hash with iterators
  * Use flatpak_installation_list_installed_refs for listing installed flatpaks</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Fix under Qt 5.10
  * Fix tests
  * Remove our isCompact concept and use Kirigami's</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Include the progress of transactions (kde#384038)
  * Fix adding remote sources
  * list items should be lighter than normal background
  * Use QQC2.Popup instead of Kirigami.OverlaySheet for screenshots (kde#385115)
  * Don't open a null application from the progress view (update transaction)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Don't refresh invalid backends (kde#386045)
  * Remove unused class
  * Don't delete resources whenever asked to clear the view
  * Extend the resetModel until the model is ready to be fetched again
  * Make sure we set the page size
  * Unneeded dependency in the library
  * Fix warning
  * Remove unused code
  * --warning: don't capture unused variable
  * Properly listen to ODRS replies
  * Assert on ODRS reviews fetched
  * Don't leak QNetworkAccessManager instances
  * Recover the right delegate background color
  * Improve global updates progress reporting
  * Improve progress reporting in some PackageKit updates
  * Show errors from refreshing (kde#386244)
  * Include the progress of transactions (kde#384038)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Flatpak: Make sure we don't degrade resources' state
  * If it's busy, try again in a second
  * Group updater refreshes
  * StandardUpdater: Only refresh when it's going to make a difference
  * Narrow down the scope of a variable
  * Make it possible for updaters to show notifications at any time
  * Remove unused code
  * Remove hidden styling from the delegate's comment (kde#387221)
  * No need to explicitly notify
  * Make sure we remove the Transaction before it's destroyed
  * Revert "Install related ref instead attempting to upgrade it"
  * Install related ref instead attempting to upgrade it
  * Link to a url that still exists
  * Don't fetch updates while the updater is working
  * Remove weirdly long timer to display notifications (kde#381812)
  * Simplify notifier logic
  * Don't crash if we get into a weird state (kde#385637)
  * Remove unneeded declaration
  * Make sure we never search on an invalid KNS backend</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Keep track of the kns entries status internally
  * Revert "Make sure m_isFetching is initialized when we use it"
  * Make sure m_isFetching is initialized when we use it
  * Make it possible to navigate screenshots from the overlay (kde#387402)
  * Hide reviews page when opening the review dialog (kde#386902)
  * Revert "Improve error message when review dialog contents are wrong"
  * Improve error message when review dialog contents are wrong (kde#387261)
  * Usually applications won't be compulsory for a desktop
  * Don't show packages tightly coupled to other desktops by default
  * Readability
  * PK: Use the stream to store the information rather than the transaction (kde#386992)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1516795200">- Build with gcc7 on Leap 42.3, gcc6 no longer works because of a
  change to the default compiler flags in openSUSE:Leap:42.3:Update
  (boo#1077345)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Update copyright year (kde#390358)
  * Notify about the backend (kde#390339)
  * Don't notify when the number of updates becomes smaller (kde#390322)
  * Remove commented out code
  * Forgot to add file
  * Fix freeze when showing the ApplicationPage (kde#390123)
  * Only report changes when they actually happen
  * Fix binding loop when showing the update description
  * Disable Review button for resources that aren't installed (kde#390053)
  * Show a beautiful disabled icon for updates (kde#390076)
  * Make sure we mark as busy before clearling the list (kde#390114)
  * Add some paddings to the Review button (kde#390030)
  * Make it possible to specify a fallback appstream id (kde#390016)
  * Use the default passive notification amount (kde#388087)
  * Remove redundant action (kde#389767)
  * Fix tests, now we don't show a list from a URL
  * Only show the description for PackageKit sources (kde#389715)
  * Print a warning when a remote can't be removed
  * Fix dummy build
  * Address source by id look-up in Flatpak source
  * Fix source removal
  * Make it possible for the source id to be different from the display string
  * Fix warnings
  * Reduce duplication in flatpak sources display
  * Flatpak: don't show full url, just the hostname (kde#389714)</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Fix checking if the package is already on the ResProxyModel
  * Add multimedia sub-categories
  * Put all systemwide add-ons in Plasma Addons category (kde#390594)
  * Sort by sortable rating
  * Make it possible to debug sorting
  * Make sure sortableRating is initialised
  * Don't let the user write the first review for apps they haven't installed
  * Fix warning
  * Only instantiate the ProgressView sheet when it's to be displayed
  * Fix placement of the BusyIndicator over loading screenshots (kde#390391)
  * Update copyright year (kde#390358)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521806400">- Add patch to show an informative warning when adding FlatHub:
  * 0001-Warning-for-FlatHub.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * Simplify the tasks view (kde#391760)
  * Remove unneeded includes
  * Fix dbus path
  * Include a test for cancelling flatpak installations
  * Improve status of FlatpakTransaction
  * Remove pointless i18n call
  * KNS: Only indicate that it's fetching if already fetching reviews
  * Include a test that makes sure we can list origins
  * Solve some inconsistencies found when testing flatpak
  * Introduce a flatpak test
  * No need to pass the extra arguments on the Update Action (kde#391801)
  * Add Qt5::Xml
  * Simplify KNSTransaction creation (kde#390236)
  * Fix test
  * Add a test to make sure we don't add resources with the wrong URL
  * kns: Fix logic for adding screenshots (kde#391190)
  * Add debug information when the searched URI is wrong</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * Improve display of Progress element (kde#393323)
  * More elegant syntax for qrc files in cmake
  * Make sure we update the checkability of all delegates when one changes
  * PK: Improve information on resources that extend others
  * Report 0% update progress when not progressing
  * Infer cancellability of the StandardBackendUpdater (kde#390319)
  * Forward action enabled state into the button
  * Don't change the resources while updating (kde#391262)
  * Remove unused variable
  * Fix typo
  * Fix notifier button placement
  * Fix warning on Qt 5.11
  * Remove wrongly commented code
  * Report when root categories change
  * Readability
  * Properly concatenate strings
  * Fix crash when installing flatpak files
  * Remove unneeded dependency
  * Don't crash when cancelling flatpak jobs (kde#391941)
  * Remove unused imports
  * --debug
  * Make sure we don't crash automatically (kde#392082)
  * Fix sorting when the actual comparison matches
  * Fix warning in Qt 5.11</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="0286ef71781450649a7193ea3bea5adb5d0991a176655f4862a02e3e05fc3e43" name="diskimage-builder" arch="noarch">
  <version epoch="0" ver="2.15.1" rel="lp150.2.3.1"/>
  <changelog author="mchandras@suse.de" date="1476705600">- Initial commit. Taken from the Cloud OBS project
  * diskimage-builder-rpmlintrc: Add rpmlint file to prevent build
    failures due to the 'wrong-script-interpreter' check. It's a
    spurious warning since the interpreter is only used within the
    generated image and it does not affect the host or the package
    itself.
  * 0001-lib-Drop-shebang-from-library-scripts.patch: Add patch to
    drop the shebang from the lib/* files which are meant to be
    sourced instead of executed (fixes: 'non-executable-script')
  * 0002-elements-Drop-executable-bits-from-environment-files.patch:
    Add patch to drop the executable bit from files which are meant to
    be sourced instead of executed. (fixes: 'script-without-shebang')</changelog>
  <changelog author="mchandras@suse.de" date="1476792000">- Use addFilter instead of setBadness in the rpmlintrc file.</changelog>
  <changelog author="mchandras@suse.de" date="1480939200">- Update to version 1.24.0
  * elements: pip-and-virtualenv: Add python-xml dependency
  * Trace package install in package-installs-v2
  * elements: zypper-minimal: Add ca-certificates-mozilla package
  * Improve checksum performance for images
  * Perform package install outside of debootstrap
  * Remove obsolete patches for the time being
  - 0001-lib-Drop-shebang-from-library-scripts.patch
  - 0002-elements-Drop-executable-bits-from-environment-files.patch</changelog>
  <changelog author="mchandras@suse.de" date="1482408000">- Update to version 1.26.1
  * Generate ssh-hostkeys on boot for ironic agent
  * add option to configure cloud-init to allow password authentication
  * elements: Drop unneeded DIB_INIT_SYSTEM usage
  * Replace six.iteritems() with .items()
  * Catch errors in DIB_INIT_SYSTEM export
  * DIB element to support cinder local attach/detach functionality
  * elements: Drop executable bits from environment files
  * Update sysctl-write-value to do conflict checking
  * Put MKFS_OPTS after filesystem type
  * Make dib-python use the default python for distro
  * Don't set the executable bit on dhcp-interface@.service
  * Move pip-and-virtualenv source install to 10-
  * Add install-types as pip-and-virtualenv dep
  * Allow package-installs to parse DIB_PYTHON_VERSION
  * Fix pip-and-virtualenv to work with python3
  * elements: dib-python: Add python2 as the default version for openSUSE
  * Support sysv init system used by Debian Wheezy
  * Pip install as 10- incompatible with 05-heat-cfntools
  * Recreate initramfs within loopback image
  * Fix bootloader element on ppc
  * Add ubuntu-precise support to dib-python
  * FIx the DIB_CLOUD_INIT_ALLOW_SSH_PWAUTH variable name in README file
  * Switch to openSUSE Leap 42.2 release by default
  * Install dracut-generic-config package
  * Add output image format tgz support
  * Add squashfs output image format
  * set default DIB_PYTHON_VERSION=2 for rhel7
  * Set grub timeout default
  * Dont run with VIRTUAL_ENV set</changelog>
  <changelog author="mchandras@suse.de" date="1487246400">- Update to version 1.27.0
  * Add DIB_IPA_COMPRESS_CMD option
  * ironic-agent: use /sbin for modprobe
  * move post-install.d to finalize.d
  * Bump fedora release to 25
  * Fix dhcp-all-interfaces for ubuntu-minimal xenial
  * Don't set base element path in run_functests.sh
  * Use %i instead of %I in dhcp-interface@.service
  * Remove hardcoded components
  * Set grub device in /etc/default/grub
  * Replace yaml.load() with yaml.safe_load()
  * Unify tidy up logs in lib/img-functions
  * Also check bin/ for tabs
  * Handle failure of carrier check in dhcp-all-interfaces.sh
  * Make DHCP timeout configurable
  * Run dhcp-interface@.service after network.target
  * update pkg-map entries for python3
  * dib-lint: python3 compatibility fixes
  * debootstrap: avoid duplicate network configuration
  * Remove yum chroot caching
  * Speed up chroot checking loop
  * Allow disto-specific mirror settings
  * Update hpssacli to ssacli in proliant-tools element</changelog>
  <changelog author="mchandras@suse.de" date="1488542400">- Update to version 1.28.0
  * [suse] Handle pip-and-virtualenv install for opensuse
  * pip-and-virtualenv: also handle rhel distros
  * [suse] remove --no-confirm from zypper invocation
  * gentoo: do not manually clean /tmp
  * Fix requirements update
  * Fix up doc errors
  * python-brickclient: accommodate python2/3 changes
  * Move Ubuntu specific use_tempaddr setting to ubuntu-common element
  * Fix typo in README.rst
  * yum/install-packages output cleanup
  * Preinstall pyOpenSSL
  * Target map-packages deprecation message
  * Turn down some low-value tracing output
  * Move generation of dib_[environment|args] to manifest element
  * Use strings in package-installs follow output</changelog>
  <changelog author="mchandras@suse.de" date="1489406400">- Update to version 2.0.0
  * Add 2.0.0 release notes
  * Run indent checks in diskimage_builder/lib
  * Use OrderedDict for partitions instead of simple dictionary
  * Refactor: block-device partitioning cleanup
  * fix grub2 element for ubuntu xenial [lp##1627402]
  * Semi-automatic doc generation of element dependency
  * Fix up element doc generation
  * Check return of _load_state
  * block-device: change top level config from dict to list
  * Handle blank lines in element-deps
  * Don't run unit tests from run_functests.sh
  * Refactor: block-device handling (partitioning)
  * Add get_elements; preserve backwards compat for expand_dependencies
  * Fix --version display
  * Activate virtualenv in disk-image-create
  * Remove execute perm from disk-image-create
  * Move dib-run-parts into diskimage-builder
  * Move diskimage-image-create to an entry point
  * Move elements &amp; lib relative to diskimage_builder package
  * Fail on element-info error
  * Remove deploy element
  * Remove deprecated deploy-ironic element
  * Remove deprecated ironic-discoverd-ramdisk
  * Remove deprecated expand-dependencies arg
  * Remove deprecated serial-console element
  * Remove deprecated map-services
  * Add release notes for block device handling.
  * Move element-info to a standard entry-point
  * Refactor: block-device handling (local loop)
  * Convert pkg-map and svc-map copies to explicit variables
  * Add IMAGE_ELEMENT_YAML and get_image_element_array
  * Making element overriding explicit
  * For developer and low-level oriented changes please read the following thread
  - http://lists.openstack.org/pipermail/openstack-dev/2017-February/111833.html</changelog>
  <changelog author="mchandras@suse.de" date="1492776000">- Update to version 2.3.3
  * Add yum-utils as EPEL dependency
  * Skip python3-virtualenv on &lt;= trusty
  * pip-and-virtualenv : install python2 &amp; 3, and default to 2
  * Install pip with python interpreter
  * Move do_extra_package_install to run in install phase
  * Updated from global requirements
  * Unify and fix doc of several Debian and Ubuntu elements
  * Fix package-installs-v2 output
  * Basic logging for package-installs-squash
  * Use DIB_PYTHON_EXEC to run commands
  * Fix typo in pip-and-virtualenv
  * Ignore missing path in unmount_dir
  * Run dib-run-parts out of /tmp
  * Don't provide dib-run-parts
  * Add flag to disable EPEL
  * Fix code-block in README of rhel7 element
  * Fix opensuse-minimal element on non-SUSE hosts
  * Use stevedore for plugin config of block device
  * Adding aarch64 support for CentOS7
  * Have simple-init enable network.service
  * Use correct Ubuntu distro url on non-x86 arches
  * Typo fix: curent =&gt; current
  * functests: skip qcow2 generically but add specific test
  * Add default PPC block-device layout
  * Capture output in _exec_sudo
  * Fix typo in CMDLINE env var for bootloader
  * Allow ELEMENTS_DIR to be configurable
  * Use sphinx warning-is-error
  * Updated from global requirements
  * squash-package-install to use the correct python
  * Make our virtualenv source py3 safe
  * blockdevice.py: python3 fixes
  * Fix dib-init-system for Debian Jessie and Debian Stretch
  * Send custom parameters in bootloader to GRUB_CMDLINE</changelog>
  <changelog author="mchandras@suse.de" date="1495022400">- Version bump to 2.4.0
  * Refactor: block-device filesystem creation, mount and fstab
  * Take --params from environment
  * Refactor documentation on image creation
  * Add a test to validate we can build debian vms
  * Introduce exec_sudo command
  * Fix py3 error in block-device
  * Refactor block-device base functions.
  * Add bzip2 to test install
  * Add refactor of tree-like vs graph
  * Set LC_ALL in disk-image-create
  * Improve documentation for image creation
  * Refactor block_device: isolate the getval call
  * Refactor block_device: passing command line parameters
  * Make Gentoo package updates work more often
  * Turn off strict_id mode for Ec2 datasource
  * Clean out apt index caches at end of image build</changelog>
  <changelog author="mchandras@suse.de" date="1495713600">- Version bump to 2.4.1
  * Set manifest permissions in the image
  * Move parts of Partition creation into object
  * Split partition into it's own file
  * Move exception to it's own file (again)
  * Add weights to digraph
  * Switch debian to deb.debian.org
  * Add dracut-regenerate elements
  * Set manifests to mode 600 and owner root
  * Only unmount directories that are mounted
  * Apply setfiles on all mountpoints</changelog>
  <changelog author="mchandras@suse.de" date="1497182400">- Version bump 2.5.0
  * Disable recommended package installations for zypper-minimal
  * Use networkx for digraph
  * Various internal fixes
  * Adding unit testing for configuration
  * Produce API documentation</changelog>
  <changelog author="mchandras@suse.de" date="1497355200">- Version bump to 2.6.0
  * PPC bootloader; install to boot partition
  * Pass all blockdevices to bootloader
  * Move global mount tracking into state
  * Use global state to check for duplicate fs labels
  * Remove 'state' argument from later cmd_* calls
  * Use picked nodes for later cmd_* calls
  * Don't make image &amp; loopdev functions static
  * Add env var to dump config graph
  * Move ppc block-device default to right $ARCH
  * Update tracing in block_device_create_config_file
  * Pad state dump
  * Adjust package mapping for SUSE family
  * Drop support for Ubuntu precise
  * Adjust package installation for openSUSE
  * Refactor mount-point sorting
  * Remove dracut-network element
  * Remove ccache
  * Test openSUSE 42.2/42.3 image builds
  * Add state object, rename "results", add unit tests
  * allow uninstalls to fail on gentoo
  * Refactor: use lazy logging
  * drop deprecated map-services/packages from zypper element
  * dhcp-all-interfaces.sh - Add support for InfiniBand interface DHCP</changelog>
  <changelog author="mchandras@suse.de" date="1500033600">- Version bump to 2.6.1
  * On suse the python2 dev package is python-devel
  * Move ironic-agent test to fedora-minimal
  * Start at using CI mirrors for fedora/centos
  * Use local mirror for ubuntu-minimal jobs
  * Move apt-sources to ubuntu-minimal / move debian to skip list
  * Sync after writing partition table
  * Install systemd earlier for Stretch
  * Fix mkfs failure when loop device is not ready</changelog>
  <changelog author="mchandras@suse.de" date="1500897600">- Version bump to 2.7.0
  * Move setfiles to outside chroot with runcon
  * doc: supported_distros: Add openSUSE Leap 42.2/3 and Tumbleweed
  * Add -m flag to setfiles for Fedora 26
  * yum-minimal: pre-install coreutils
  * Force install during pip-and-virtualenv
  * Fix latest-limit command line
  * opensuse-minimal: install glibc-locale
  * elements: openstack-ci-mirrors: Use openSUSE mirrors for gating jobs
  * Remove DIB_[DISTRO]_DISTRIBUTION_MIRROR
  * doc: Switch from oslosphinx to openstackdocstheme
  * The correct option for label name in fat and vfat is '-n'
  * zypper-minimal: No point in preserving the environment here
  * Remove additional Bumblebee repository for opensuse element
  * Enable console during kernel boot on Power
  * fix readme.rst to reflect correct environment variable
  * Add symlink test for resolv.conf restore
  * pip-and-virtualenv: Install python3 on openSUSE
  * Support for Cloud Images on ppc64le for rhel7 and centos7
  * bindep.txt: Exclude gnupg2 package on openSUSE
  * Avoid hanging endlessly on unreachable cache urls
  * elements: pip-and-virtualenv: Use common packages for openSUSE
  * Remove mirror create
  * Remove centos and rhel elements
  * Updated from global requirements
  * dib-lint: Ignore editor temp files for linting run
  * Fix mkfs use wrong label option for vfat
  * Use the dib python to do cleanup
  * Replace architecture-emulation-binaries with qemu-debootstrap</changelog>
  <changelog author="mchandras@suse.de" date="1501070400">- Version bump to 2.7.1
  * elements: zypper-minimal: Install tar package
  * zypper: Clean caches and don't cache packages locally</changelog>
  <changelog author="mchandras@suse.de" date="1502712000">- Version bump to 2.8.0
  * Move selinux packages to redhat-common
  * Use SELinuxfs to check selinux status
  * Switch openSUSE to 42.3 by default</changelog>
  <changelog author="mchandras@suse.de" date="1512388800">- Version bump to 2.9.0
  * Add initramfs-tools for ubuntu-minimal
  * Create /etc/machine-id for fedora
  * Use latest Fedora .qcow URL
  * Updated from global requirements
  * Add missing package dependency for yaml
  * Mention the need of dracut-regenerate element
  * Move the ordering of the dracut regenerate command
  * Fix cylical systemd config for dhcp-all-interfaces
  * LVM support for dib-block-device
  * Increase timeout for removal
  * Add netbase to ensure /etc/protocols is placed for debian
  * Add kpartx as a requirement to build images
  * Clear up debian element documentation
  * Bump fedora/fedora-minimal DIB_RELEASE 26
  * Allow users to specify partition type in the MBR PTE
- Fix env-script-interpreter rpmlint warnings.</changelog>
  <changelog author="mchandras@suse.de" date="1520596800">- Version bump to 2.11.0
  * Install systemd earlier for Ubuntu Bionic
  * update gentoo vars for new profile and python
  * Set default label for XFS disks
  * Don't install dmidecode on Fedora ppc64le
  * Updated from global requirements
  * Add support for Fedora 27, remove EOL Fedora 25
  * Don't fstrim vfat partitions
  * Remove RH1 check OVB jobs from configuration
  * upgrade pip before using -c option
  * Correct link address
  * Updated from global requirements
  * Add SUSE Mapping
  * Revert "Dont install python-pip for py3k"
  * Adding mapping for SUSE package
  * Check source-repository-* files for trailing newline
  * ironic-agent: don't remove make
  * Remove architecture rules on lshw dependency in ironic-agent
  * zypper: fix package removal
  * Avoid tox_install.sh for constraints support
  * Fix wrong epel-release-7* package URL
  * Add the groundwork for musl profile support
  * Enable support for Gentoo overlays
  * Pre-install curl
  * Install fedora-gpg-keys for F27
  * Make preinstall.d more deterministic
  * Use EPEL for debootstrap on centos
  * Fix /dev/pts mount options handling
  * Make python changes more reliable
  * Remove setting of version/release from releasenotes
  * elements: zypper-minimal: Refresh repositories where necessary
  * Updated from global requirements
  * elements: Respect devpts mount options
  * Dont install python-pip for py3k
  * Enable gentoo in pip-and-virtualenv element
  * Add zipl element as s390x architecture bootloader
  * diskimage_builder: lib: common-functions: Fix options for devpts mount
  * Move to a common lock-file directory
  * Create rescue user on ironic agent
  * Use -t devpts for /dev/pts mounts
  * Dont install python-virtualenv for py3k in deb
  * Import legacy playbooks
  * Add debian minimal requirement for arm64
  * Fix grub2 dependency on arm64
  * Remove dd from LVM element
  * Update Gentoo element for element changes
  * Update proliant-tools to support Gen10 Proliant servers
  * Move fstrim to block device layer
  * Actually sort mount-point list
  * Change to install a package in 'proliant-tools'
  * Clear /etc/machine-id to avoid duplicate machine-ids
  * Add timestamp output filter</changelog>
  <changelog author="mchandras@suse.de" date="1525089600">- Version bump to 2.14.1
  * Fix epel element for centos-minimal
  * Revert "debootstrap: Call update-initramfs explicitly"
  * Remove installed packages before pip install
  * Don't only install python3-virtualenv
  * Don't use -e to test for what might be broken symlink
  * add lower-constraints job
  * Set the dhclient timeout to match DIB_DHCP_TIMEOUT
  * Formalise saving of /etc/resolv.conf
  * Restore tracing on exit points of block_device_create_config_file
  * delete unused module
  * debootstrap: Call update-initramfs explicitly
  * Change the GENTOO_PORTAGE_CLEANUP variable default
  * Fix element-provides in debian element
  * Revert "Remove tripleo jobs"
  * enable systemd profile for Gentoo
  * install sudo in the devuser element
  * Fix default partition type
  * Remove tripleo jobs
  * remove portage git directory
  * Updated from global requirements
  * Updated from global requirements
  * proliant-tools: add net-tools package to support hpsum utility
  * Make the build reproducible
  * Updated from global requirements
  * secondary architectures use different url
  * Fix for rhel7 iso image creation.
  * Fix for passing user defined value for satellite cert for rhel-common.
  * arm64: use HWE kernel and fix console
  * Choose appropriate bootloader for block-device
  * Add block-device defaults
  * Fail if two elements provide the same thing
  * GPT partitioning support
  * update Gentoo Hardened profiles (now stable)
  * Checking link status according to DIB_DHCP_TIMEOUT
  * Remove some redundant indents
  * Update Fedora defaults to 27
  * zypper-minimal: Set default locale env to C.UTF-8
  * Clean up dib-python symlink</changelog>
  <changelog author="mchandras@suse.de" date="1528372800">- Version bump to 2.15.1 (bsc#1097115)
  * elements: pip-and-virtualenv: Handle openSUSE Leap 15
  * Allow to rebuild arbitrary images
  * Replace the ubuntu-minimal trusty test with a bionic one
  * Remove non-maintained ubuntu-core element
  * elements: zypper-minimal: Add support for openSUSE Leap 15.X
  * Add Ubuntu 18.04 support
  * Remove duplicate GRUB command line entry
  * rpm-distro: set the contentdir yum var
  * Trivial: update url to new url
  * Fixes add-apt-keys in dpkg element
  * Add pip cache cleanup to pip-and-virtualenv
  * pip-and-virtualenv: fix install-pip when centos-release-openstack is enabled
  * Stop using slave_scripts/install-distro-packages.sh</changelog>
</package>
<package pkgid="c33cc2dd6ab700f7aaefd9b409c0b3f13ace678d090f09950c89cd016114b100" name="diskimage-builder" arch="src">
  <version epoch="0" ver="2.15.1" rel="lp150.2.3.1"/>
  <changelog author="mchandras@suse.de" date="1476705600">- Initial commit. Taken from the Cloud OBS project
  * diskimage-builder-rpmlintrc: Add rpmlint file to prevent build
    failures due to the 'wrong-script-interpreter' check. It's a
    spurious warning since the interpreter is only used within the
    generated image and it does not affect the host or the package
    itself.
  * 0001-lib-Drop-shebang-from-library-scripts.patch: Add patch to
    drop the shebang from the lib/* files which are meant to be
    sourced instead of executed (fixes: 'non-executable-script')
  * 0002-elements-Drop-executable-bits-from-environment-files.patch:
    Add patch to drop the executable bit from files which are meant to
    be sourced instead of executed. (fixes: 'script-without-shebang')</changelog>
  <changelog author="mchandras@suse.de" date="1476792000">- Use addFilter instead of setBadness in the rpmlintrc file.</changelog>
  <changelog author="mchandras@suse.de" date="1480939200">- Update to version 1.24.0
  * elements: pip-and-virtualenv: Add python-xml dependency
  * Trace package install in package-installs-v2
  * elements: zypper-minimal: Add ca-certificates-mozilla package
  * Improve checksum performance for images
  * Perform package install outside of debootstrap
  * Remove obsolete patches for the time being
  - 0001-lib-Drop-shebang-from-library-scripts.patch
  - 0002-elements-Drop-executable-bits-from-environment-files.patch</changelog>
  <changelog author="mchandras@suse.de" date="1482408000">- Update to version 1.26.1
  * Generate ssh-hostkeys on boot for ironic agent
  * add option to configure cloud-init to allow password authentication
  * elements: Drop unneeded DIB_INIT_SYSTEM usage
  * Replace six.iteritems() with .items()
  * Catch errors in DIB_INIT_SYSTEM export
  * DIB element to support cinder local attach/detach functionality
  * elements: Drop executable bits from environment files
  * Update sysctl-write-value to do conflict checking
  * Put MKFS_OPTS after filesystem type
  * Make dib-python use the default python for distro
  * Don't set the executable bit on dhcp-interface@.service
  * Move pip-and-virtualenv source install to 10-
  * Add install-types as pip-and-virtualenv dep
  * Allow package-installs to parse DIB_PYTHON_VERSION
  * Fix pip-and-virtualenv to work with python3
  * elements: dib-python: Add python2 as the default version for openSUSE
  * Support sysv init system used by Debian Wheezy
  * Pip install as 10- incompatible with 05-heat-cfntools
  * Recreate initramfs within loopback image
  * Fix bootloader element on ppc
  * Add ubuntu-precise support to dib-python
  * FIx the DIB_CLOUD_INIT_ALLOW_SSH_PWAUTH variable name in README file
  * Switch to openSUSE Leap 42.2 release by default
  * Install dracut-generic-config package
  * Add output image format tgz support
  * Add squashfs output image format
  * set default DIB_PYTHON_VERSION=2 for rhel7
  * Set grub timeout default
  * Dont run with VIRTUAL_ENV set</changelog>
  <changelog author="mchandras@suse.de" date="1487246400">- Update to version 1.27.0
  * Add DIB_IPA_COMPRESS_CMD option
  * ironic-agent: use /sbin for modprobe
  * move post-install.d to finalize.d
  * Bump fedora release to 25
  * Fix dhcp-all-interfaces for ubuntu-minimal xenial
  * Don't set base element path in run_functests.sh
  * Use %i instead of %I in dhcp-interface@.service
  * Remove hardcoded components
  * Set grub device in /etc/default/grub
  * Replace yaml.load() with yaml.safe_load()
  * Unify tidy up logs in lib/img-functions
  * Also check bin/ for tabs
  * Handle failure of carrier check in dhcp-all-interfaces.sh
  * Make DHCP timeout configurable
  * Run dhcp-interface@.service after network.target
  * update pkg-map entries for python3
  * dib-lint: python3 compatibility fixes
  * debootstrap: avoid duplicate network configuration
  * Remove yum chroot caching
  * Speed up chroot checking loop
  * Allow disto-specific mirror settings
  * Update hpssacli to ssacli in proliant-tools element</changelog>
  <changelog author="mchandras@suse.de" date="1488542400">- Update to version 1.28.0
  * [suse] Handle pip-and-virtualenv install for opensuse
  * pip-and-virtualenv: also handle rhel distros
  * [suse] remove --no-confirm from zypper invocation
  * gentoo: do not manually clean /tmp
  * Fix requirements update
  * Fix up doc errors
  * python-brickclient: accommodate python2/3 changes
  * Move Ubuntu specific use_tempaddr setting to ubuntu-common element
  * Fix typo in README.rst
  * yum/install-packages output cleanup
  * Preinstall pyOpenSSL
  * Target map-packages deprecation message
  * Turn down some low-value tracing output
  * Move generation of dib_[environment|args] to manifest element
  * Use strings in package-installs follow output</changelog>
  <changelog author="mchandras@suse.de" date="1489406400">- Update to version 2.0.0
  * Add 2.0.0 release notes
  * Run indent checks in diskimage_builder/lib
  * Use OrderedDict for partitions instead of simple dictionary
  * Refactor: block-device partitioning cleanup
  * fix grub2 element for ubuntu xenial [lp##1627402]
  * Semi-automatic doc generation of element dependency
  * Fix up element doc generation
  * Check return of _load_state
  * block-device: change top level config from dict to list
  * Handle blank lines in element-deps
  * Don't run unit tests from run_functests.sh
  * Refactor: block-device handling (partitioning)
  * Add get_elements; preserve backwards compat for expand_dependencies
  * Fix --version display
  * Activate virtualenv in disk-image-create
  * Remove execute perm from disk-image-create
  * Move dib-run-parts into diskimage-builder
  * Move diskimage-image-create to an entry point
  * Move elements &amp; lib relative to diskimage_builder package
  * Fail on element-info error
  * Remove deploy element
  * Remove deprecated deploy-ironic element
  * Remove deprecated ironic-discoverd-ramdisk
  * Remove deprecated expand-dependencies arg
  * Remove deprecated serial-console element
  * Remove deprecated map-services
  * Add release notes for block device handling.
  * Move element-info to a standard entry-point
  * Refactor: block-device handling (local loop)
  * Convert pkg-map and svc-map copies to explicit variables
  * Add IMAGE_ELEMENT_YAML and get_image_element_array
  * Making element overriding explicit
  * For developer and low-level oriented changes please read the following thread
  - http://lists.openstack.org/pipermail/openstack-dev/2017-February/111833.html</changelog>
  <changelog author="mchandras@suse.de" date="1492776000">- Update to version 2.3.3
  * Add yum-utils as EPEL dependency
  * Skip python3-virtualenv on &lt;= trusty
  * pip-and-virtualenv : install python2 &amp; 3, and default to 2
  * Install pip with python interpreter
  * Move do_extra_package_install to run in install phase
  * Updated from global requirements
  * Unify and fix doc of several Debian and Ubuntu elements
  * Fix package-installs-v2 output
  * Basic logging for package-installs-squash
  * Use DIB_PYTHON_EXEC to run commands
  * Fix typo in pip-and-virtualenv
  * Ignore missing path in unmount_dir
  * Run dib-run-parts out of /tmp
  * Don't provide dib-run-parts
  * Add flag to disable EPEL
  * Fix code-block in README of rhel7 element
  * Fix opensuse-minimal element on non-SUSE hosts
  * Use stevedore for plugin config of block device
  * Adding aarch64 support for CentOS7
  * Have simple-init enable network.service
  * Use correct Ubuntu distro url on non-x86 arches
  * Typo fix: curent =&gt; current
  * functests: skip qcow2 generically but add specific test
  * Add default PPC block-device layout
  * Capture output in _exec_sudo
  * Fix typo in CMDLINE env var for bootloader
  * Allow ELEMENTS_DIR to be configurable
  * Use sphinx warning-is-error
  * Updated from global requirements
  * squash-package-install to use the correct python
  * Make our virtualenv source py3 safe
  * blockdevice.py: python3 fixes
  * Fix dib-init-system for Debian Jessie and Debian Stretch
  * Send custom parameters in bootloader to GRUB_CMDLINE</changelog>
  <changelog author="mchandras@suse.de" date="1495022400">- Version bump to 2.4.0
  * Refactor: block-device filesystem creation, mount and fstab
  * Take --params from environment
  * Refactor documentation on image creation
  * Add a test to validate we can build debian vms
  * Introduce exec_sudo command
  * Fix py3 error in block-device
  * Refactor block-device base functions.
  * Add bzip2 to test install
  * Add refactor of tree-like vs graph
  * Set LC_ALL in disk-image-create
  * Improve documentation for image creation
  * Refactor block_device: isolate the getval call
  * Refactor block_device: passing command line parameters
  * Make Gentoo package updates work more often
  * Turn off strict_id mode for Ec2 datasource
  * Clean out apt index caches at end of image build</changelog>
  <changelog author="mchandras@suse.de" date="1495713600">- Version bump to 2.4.1
  * Set manifest permissions in the image
  * Move parts of Partition creation into object
  * Split partition into it's own file
  * Move exception to it's own file (again)
  * Add weights to digraph
  * Switch debian to deb.debian.org
  * Add dracut-regenerate elements
  * Set manifests to mode 600 and owner root
  * Only unmount directories that are mounted
  * Apply setfiles on all mountpoints</changelog>
  <changelog author="mchandras@suse.de" date="1497182400">- Version bump 2.5.0
  * Disable recommended package installations for zypper-minimal
  * Use networkx for digraph
  * Various internal fixes
  * Adding unit testing for configuration
  * Produce API documentation</changelog>
  <changelog author="mchandras@suse.de" date="1497355200">- Version bump to 2.6.0
  * PPC bootloader; install to boot partition
  * Pass all blockdevices to bootloader
  * Move global mount tracking into state
  * Use global state to check for duplicate fs labels
  * Remove 'state' argument from later cmd_* calls
  * Use picked nodes for later cmd_* calls
  * Don't make image &amp; loopdev functions static
  * Add env var to dump config graph
  * Move ppc block-device default to right $ARCH
  * Update tracing in block_device_create_config_file
  * Pad state dump
  * Adjust package mapping for SUSE family
  * Drop support for Ubuntu precise
  * Adjust package installation for openSUSE
  * Refactor mount-point sorting
  * Remove dracut-network element
  * Remove ccache
  * Test openSUSE 42.2/42.3 image builds
  * Add state object, rename "results", add unit tests
  * allow uninstalls to fail on gentoo
  * Refactor: use lazy logging
  * drop deprecated map-services/packages from zypper element
  * dhcp-all-interfaces.sh - Add support for InfiniBand interface DHCP</changelog>
  <changelog author="mchandras@suse.de" date="1500033600">- Version bump to 2.6.1
  * On suse the python2 dev package is python-devel
  * Move ironic-agent test to fedora-minimal
  * Start at using CI mirrors for fedora/centos
  * Use local mirror for ubuntu-minimal jobs
  * Move apt-sources to ubuntu-minimal / move debian to skip list
  * Sync after writing partition table
  * Install systemd earlier for Stretch
  * Fix mkfs failure when loop device is not ready</changelog>
  <changelog author="mchandras@suse.de" date="1500897600">- Version bump to 2.7.0
  * Move setfiles to outside chroot with runcon
  * doc: supported_distros: Add openSUSE Leap 42.2/3 and Tumbleweed
  * Add -m flag to setfiles for Fedora 26
  * yum-minimal: pre-install coreutils
  * Force install during pip-and-virtualenv
  * Fix latest-limit command line
  * opensuse-minimal: install glibc-locale
  * elements: openstack-ci-mirrors: Use openSUSE mirrors for gating jobs
  * Remove DIB_[DISTRO]_DISTRIBUTION_MIRROR
  * doc: Switch from oslosphinx to openstackdocstheme
  * The correct option for label name in fat and vfat is '-n'
  * zypper-minimal: No point in preserving the environment here
  * Remove additional Bumblebee repository for opensuse element
  * Enable console during kernel boot on Power
  * fix readme.rst to reflect correct environment variable
  * Add symlink test for resolv.conf restore
  * pip-and-virtualenv: Install python3 on openSUSE
  * Support for Cloud Images on ppc64le for rhel7 and centos7
  * bindep.txt: Exclude gnupg2 package on openSUSE
  * Avoid hanging endlessly on unreachable cache urls
  * elements: pip-and-virtualenv: Use common packages for openSUSE
  * Remove mirror create
  * Remove centos and rhel elements
  * Updated from global requirements
  * dib-lint: Ignore editor temp files for linting run
  * Fix mkfs use wrong label option for vfat
  * Use the dib python to do cleanup
  * Replace architecture-emulation-binaries with qemu-debootstrap</changelog>
  <changelog author="mchandras@suse.de" date="1501070400">- Version bump to 2.7.1
  * elements: zypper-minimal: Install tar package
  * zypper: Clean caches and don't cache packages locally</changelog>
  <changelog author="mchandras@suse.de" date="1502712000">- Version bump to 2.8.0
  * Move selinux packages to redhat-common
  * Use SELinuxfs to check selinux status
  * Switch openSUSE to 42.3 by default</changelog>
  <changelog author="mchandras@suse.de" date="1512388800">- Version bump to 2.9.0
  * Add initramfs-tools for ubuntu-minimal
  * Create /etc/machine-id for fedora
  * Use latest Fedora .qcow URL
  * Updated from global requirements
  * Add missing package dependency for yaml
  * Mention the need of dracut-regenerate element
  * Move the ordering of the dracut regenerate command
  * Fix cylical systemd config for dhcp-all-interfaces
  * LVM support for dib-block-device
  * Increase timeout for removal
  * Add netbase to ensure /etc/protocols is placed for debian
  * Add kpartx as a requirement to build images
  * Clear up debian element documentation
  * Bump fedora/fedora-minimal DIB_RELEASE 26
  * Allow users to specify partition type in the MBR PTE
- Fix env-script-interpreter rpmlint warnings.</changelog>
  <changelog author="mchandras@suse.de" date="1520596800">- Version bump to 2.11.0
  * Install systemd earlier for Ubuntu Bionic
  * update gentoo vars for new profile and python
  * Set default label for XFS disks
  * Don't install dmidecode on Fedora ppc64le
  * Updated from global requirements
  * Add support for Fedora 27, remove EOL Fedora 25
  * Don't fstrim vfat partitions
  * Remove RH1 check OVB jobs from configuration
  * upgrade pip before using -c option
  * Correct link address
  * Updated from global requirements
  * Add SUSE Mapping
  * Revert "Dont install python-pip for py3k"
  * Adding mapping for SUSE package
  * Check source-repository-* files for trailing newline
  * ironic-agent: don't remove make
  * Remove architecture rules on lshw dependency in ironic-agent
  * zypper: fix package removal
  * Avoid tox_install.sh for constraints support
  * Fix wrong epel-release-7* package URL
  * Add the groundwork for musl profile support
  * Enable support for Gentoo overlays
  * Pre-install curl
  * Install fedora-gpg-keys for F27
  * Make preinstall.d more deterministic
  * Use EPEL for debootstrap on centos
  * Fix /dev/pts mount options handling
  * Make python changes more reliable
  * Remove setting of version/release from releasenotes
  * elements: zypper-minimal: Refresh repositories where necessary
  * Updated from global requirements
  * elements: Respect devpts mount options
  * Dont install python-pip for py3k
  * Enable gentoo in pip-and-virtualenv element
  * Add zipl element as s390x architecture bootloader
  * diskimage_builder: lib: common-functions: Fix options for devpts mount
  * Move to a common lock-file directory
  * Create rescue user on ironic agent
  * Use -t devpts for /dev/pts mounts
  * Dont install python-virtualenv for py3k in deb
  * Import legacy playbooks
  * Add debian minimal requirement for arm64
  * Fix grub2 dependency on arm64
  * Remove dd from LVM element
  * Update Gentoo element for element changes
  * Update proliant-tools to support Gen10 Proliant servers
  * Move fstrim to block device layer
  * Actually sort mount-point list
  * Change to install a package in 'proliant-tools'
  * Clear /etc/machine-id to avoid duplicate machine-ids
  * Add timestamp output filter</changelog>
  <changelog author="mchandras@suse.de" date="1525089600">- Version bump to 2.14.1
  * Fix epel element for centos-minimal
  * Revert "debootstrap: Call update-initramfs explicitly"
  * Remove installed packages before pip install
  * Don't only install python3-virtualenv
  * Don't use -e to test for what might be broken symlink
  * add lower-constraints job
  * Set the dhclient timeout to match DIB_DHCP_TIMEOUT
  * Formalise saving of /etc/resolv.conf
  * Restore tracing on exit points of block_device_create_config_file
  * delete unused module
  * debootstrap: Call update-initramfs explicitly
  * Change the GENTOO_PORTAGE_CLEANUP variable default
  * Fix element-provides in debian element
  * Revert "Remove tripleo jobs"
  * enable systemd profile for Gentoo
  * install sudo in the devuser element
  * Fix default partition type
  * Remove tripleo jobs
  * remove portage git directory
  * Updated from global requirements
  * Updated from global requirements
  * proliant-tools: add net-tools package to support hpsum utility
  * Make the build reproducible
  * Updated from global requirements
  * secondary architectures use different url
  * Fix for rhel7 iso image creation.
  * Fix for passing user defined value for satellite cert for rhel-common.
  * arm64: use HWE kernel and fix console
  * Choose appropriate bootloader for block-device
  * Add block-device defaults
  * Fail if two elements provide the same thing
  * GPT partitioning support
  * update Gentoo Hardened profiles (now stable)
  * Checking link status according to DIB_DHCP_TIMEOUT
  * Remove some redundant indents
  * Update Fedora defaults to 27
  * zypper-minimal: Set default locale env to C.UTF-8
  * Clean up dib-python symlink</changelog>
  <changelog author="mchandras@suse.de" date="1528372800">- Version bump to 2.15.1 (bsc#1097115)
  * elements: pip-and-virtualenv: Handle openSUSE Leap 15
  * Allow to rebuild arbitrary images
  * Replace the ubuntu-minimal trusty test with a bionic one
  * Remove non-maintained ubuntu-core element
  * elements: zypper-minimal: Add support for openSUSE Leap 15.X
  * Add Ubuntu 18.04 support
  * Remove duplicate GRUB command line entry
  * rpm-distro: set the contentdir yum var
  * Trivial: update url to new url
  * Fixes add-apt-keys in dpkg element
  * Add pip cache cleanup to pip-and-virtualenv
  * pip-and-virtualenv: fix install-pip when centos-release-openstack is enabled
  * Stop using slave_scripts/install-distro-packages.sh</changelog>
</package>
<package pkgid="24e74b1c1eb378a7cd196dbfa21314be68d536a5a5124d929208ac02e7da699f" name="dnsmasq" arch="src">
  <version epoch="0" ver="2.78" rel="lp150.2.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1415534400">- fix logging, PrivateDevices=yes kills it (bnc#902511, bnc#904537)</changelog>
  <changelog author="nemysis@gmx.ch" date="1419422400">- Update to 2.72, announce message:
    Add ra-advrouter mode, for RFC-3775 mobile IPv6 support.
    Add support for "ipsets" in *BSD, using pf. Thanks to
    Sven Falempim for the patch.
    Fix race condition which could lock up dnsmasq when an
    interface goes down and up rapidly. Thanks to Conrad
    Kostecki for helping to chase this down.
    Add DBus methods SetFilterWin2KOption and SetBogusPrivOption
    Thanks to the Smoothwall project for the patch.
    Fix failure to build against Nettle-3.0. Thanks to Steven
    Barth for spotting this and finding the fix.
    When assigning existing DHCP leases to intefaces by comparing
    networks, handle the case that two or more interfaces have the
    same network part, but different prefix lengths (favour the
    longer prefix length.) Thanks to Lung-Pin Chang for the
    patch.
    Add a mode which detects and removes DNS forwarding loops, ie
    a query sent to an upstream server returns as a new query to
    dnsmasq, and would therefore be forwarded again, resulting in
    a query which loops many times before being dropped. Upstream
    servers which loop back are disabled and this event is logged.
    Thanks to Smoothwall for their sponsorship of this feature.
    Extend --conf-dir to allow filtering of files. So
  - -conf-dir=/etc/dnsmasq.d,\*.conf
    will load all the files in /etc/dnsmasq.d which end in .conf
    Fix bug when resulted in NXDOMAIN answers instead of NODATA in
    some circumstances.
    Fix bug which caused dnsmasq to become unresponsive if it
    failed to send packets due to a network interface disappearing.
    Thanks to Niels Peen for spotting this.
    Fix problem with --local-service option on big-endian platforms
    Thanks to Richard Genoud for the patch.
- Add dnsmasq-rpmlintrc, for false positive scripts and symlink
- Add BuildRequires for dos2unix
- Use sed instead of simple patch group_and_isc.patch</changelog>
  <changelog author="nemysis@gmx.ch" date="1419508800">- Remove from spec group_and_isc.patch, forgotten in previous commit</changelog>
  <changelog author="dimstar@opensuse.org" date="1419854400">- Fix symlink of rcFOO to /usr/sbin/service, resolving a dangling
  symlink lint warning (and remove the same from rpmlintrc).</changelog>
  <changelog author="jslaby@suse.com" date="1420545600">- The change from Wed Dec 24 messed group w/ user IDs. Switch them
  back and be more careful w/ what is changed.</changelog>
  <changelog author="abergmann@suse.com" date="1429531200">- Move trust-anchors.conf into /etc/dnsmasq.d to be AppArmor conform.
  (bnc#908137)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434542400">- dnsmasq.service: Order Before=nss-lookup.target  and
  Wants=nss-lookup.target as this service may provide
  name resolution even for the localhost.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1439294400">- Update to 2.75, announce message:
    Fix reversion on 2.74 which caused 100% CPU use when a
    dhcp-script is configured. Thanks to Adrian Davey for
    reporting the bug and testing the fix.
- Update to 2.74, announce message:
    Fix reversion in 2.73 where --conf-file would attempt to
    read the default file, rather than no file.
    Fix inotify code to handle dangling symlinks better and
    not SEGV in some circumstances.
    DNSSEC fix. In the case of a signed CNAME generated by a
    wildcard which pointed to an unsigned domain, the wrong
    status would be logged, and some necessary checks omitted.
- Update to 2.73, announce message:
    Fix crash at startup when an empty suffix is supplied to
  - -conf-dir, also trivial memory leak. Thanks to
    Tomas Hozza for spotting this.
    Remove floor of 4096 on advertised EDNS0 packet size when
    DNSSEC in use, the original rationale for this has long gone.
    Thanks to Anders Kaseorg for spotting this.
    Use inotify for checking on updates to /etc/resolv.conf and
    friends under Linux. This fixes race conditions when the files are
    updated rapidly and saves CPU by noy polling. To build
    a binary that runs on old Linux kernels without inotify,
    use make COPTS=-DNO_INOTIFY
    Fix breakage of --domain=&lt;domain&gt;,&lt;subnet&gt;,local - only reverse
    queries were intercepted. THis appears to have been broken
    since 2.69. Thanks to Josh Stone for finding the bug.
    Eliminate IPv6 privacy addresses and deprecated addresses from
    the answers given by --interface-name. Note that reverse queries
    (ie looking for names, given addresses) are not affected.
    Thanks to Michael Gorbach for the suggestion.
    Fix crash in DNSSEC code with long RRs. Thanks to Marco Davids
    for the bug report.
    Add --ignore-address option. Ignore replies to A-record
    queries which include the specified address. No error is
    generated, dnsmasq simply continues to listen for another
    reply. This is useful to defeat blocking strategies which
    rely on quickly supplying a forged answer to a DNS
    request for certain domains, before the correct answer can
    arrive. Thanks to Glen Huang for the patch.
    Revisit the part of DNSSEC validation which determines if an
    unsigned answer is legit, or is in some part of the DNS
    tree which should be signed. Dnsmasq now works from the
    DNS root downward looking for the limit of signed
    delegations, rather than working bottom up. This is
    both more correct, and less likely to trip over broken
    nameservers in the unsigned parts of the DNS tree
    which don't respond well to DNSSEC queries.
    Add --log-queries=extra option, which makes logs easier
    to search automatically.
    Add --min-cache-ttl option. I've resisted this for a long
    time, on the grounds that disbelieving TTLs is never a
    good idea, but I've been persuaded that there are
    sometimes reasons to do it. (Step forward, GFW).
    To avoid misuse, there's a hard limit on the TTL
    floor of one hour. Thansk to RinSatsuki for the patch.
    Cope with multiple interfaces with the same link-local
    address. (IPv6 addresses are scoped, so this is allowed.)
    Thanks to Cory Benfield for help with this.
    Add --dhcp-hostsdir. This allows addition of new host
    configurations to a running dnsmasq instance much more
    cheaply than having dnsmasq re-read all its existing
    configuration each time.
    Don't reply to DHCPv6 SOLICIT messages if we're not
    configured to do stateful DHCPv6. Thanks to Win King Wan
    for the patch.
    Fix broken DNSSEC validation of ECDSA signatures.
    Add --dnssec-timestamp option, which provides an automatic
    way to detect when the system time becomes valid after
    boot on systems without an RTC, whilst allowing DNS
    queries before the clock is valid so that NTP can run.
    Thanks to Kevin Darbyshire-Bryant for developing this idea.
    Add --tftp-no-fail option. Thanks to Stefan Tomanek for
    the patch.
    Fix crash caused by looking up servers.bind, CHAOS text
    record, when more than about five --servers= lines are
    in the dnsmasq config. This causes memory corruption
    which causes a crash later. Thanks to Matt Coddington for
    sterling work chasing this down.
    Fix crash on receipt of certain malformed DNS requests.
    Thanks to Nick Sampanis for spotting the problem.
    Note that this is could allow the dnsmasq process's
    memory to be read by an attacker under certain
    circumstances, so it has a CVE, CVE-2015-3294
    Fix crash in authoritative DNS code, if a .arpa zone
    is declared as authoritative, and then a PTR query which
    is not to be treated as authoritative arrived. Normally,
    directly declaring .arpa zone as authoritative is not
    done, so this crash wouldn't be seen. Instead the
    relevant .arpa zone should be specified as a subnet
    in the auth-zone declaration. Thanks to Johnny S. Lee
    for the bugreport and initial patch.
    Fix authoritative DNS code to correctly reply to NS
    and SOA queries for .arpa zones for which we are
    declared authoritative by means of a subnet in auth-zone.
    Previously we provided correct answers to PTR queries
    in such zones (including NS and SOA) but not direct
    NS and SOA queries. Thanks to Johnny S. Lee for
    pointing out the problem.
    Fix logging of DHCPREPLY which should be suppressed
    by quiet-dhcp6. Thanks to J. Pablo Abonia for
    spotting the problem.
    Try and handle net connections with broken fragmentation
    that lose large UDP packets. If a server times out,
    reduce the maximum UDP packet size field in the EDNS0
    header to 1280 bytes. If it then answers, make that
    change permanent.
    Check IPv4-mapped IPv6 addresses when --stop-rebind
    is active. Thanks to Jordan Milne for spotting this.
    Allow DHCPv4 options T1 and T2 to be set using --dhcp-option.
    Thanks to Kevin Benton for patches and work on this.
    Fix code for DHCPCONFIRM DHCPv6 messages to confirm addresses
    in the correct subnet, even of not in dynamic address
    allocation range. Thanks to Steve Hirsch for spotting
    the problem.
    Add AddDhcpLease and DeleteDhcpLease DBus methods. Thanks
    to Nicolas Cavallari for the patch.
    Allow configuration of router advertisements without the
    "on-link" bit set. Thanks to Neil Jerram for the patch.
    Extend --bridge-interface to DHCPv6 and router
    advertisements. Thanks to Neil Jerram for the patch.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1440417600">- spec file cleanup, get rid of redifinition warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1454414400">- Add gpg signature</changelog>
  <changelog author="max@suse.com" date="1466078400">- dnsmasq-groups.patch: Initialize the supplementary groups of the
  dnsmasq user (bsc#859298).</changelog>
  <changelog author="max@suse.com" date="1470225600">- Update to 2.76:
  * Include 0.0.0.0/8 in DNS rebind checks.
  * Enhance --add-subnet to allow arbitrary subnet addresses.
  * Respect the --no-resolv flag in inotify code. Fixes bug
    which caused dnsmasq to fail to start if a resolv-file
    was a dangling symbolic link, even of --no-resolv set.
  * Fix crash when an A or AAAA record is defined locally,
    in a hosts file, and an upstream server sends a reply
    that the same name is empty (CVE-2015-8899, bsc#983273).
  * Fix failure to correctly calculate cache-size when reading a
    hosts-file fails.
  * Fix wrong answer to simple name query when --domain-needed
    set, but no upstream servers configured.
  * Return REFUSED when running out of forwarding table slots,
    not SERVFAIL.
  * Add --max-port configuration.
  * Add --script-arp and two new functions for the dhcp-script.
  * Extend --add-mac to allow a new encoding of the MAC address
    as base64, by configurting --add-mac=base64
  * Add --add-cpe-id option.
  * Don't crash with divide-by-zero if an IPv6 dhcp-range is
    declared as a whole /64.
    (ie xx::0 to xx::ffff:ffff:ffff:ffff)
  * Add support for a TTL parameter in --host-record and --cname.
  * Add --dhcp-ttl option.
  * Add --tftp-mtu option.
  * Check return-code of inet_pton() when parsing dhcp-option.
  * Fix wrong value for EDNS UDP packet size when using
  - -servers-file to define upstream DNS servers.
  * Add dhcp_release6 to contrib/lease-tools.</changelog>
  <changelog author="martin.wilck@suse.com" date="1483531200">- Handle binding upstream servers to an interface if interface
  is destroyed and recreated (boo#1018160)
  Added two patches from upstream:
  * added Handle-binding-upstream-servers-to-an-interface.patch
  * added Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch</changelog>
  <changelog author="dmueller@suse.com" date="1503057600">- reload system dbus to pick up policy change on install (bsc#1054429)</changelog>
  <changelog author="tchvatal@suse.com" date="1505217600">- Fix /srv/tftpboot permissions wrt bsc#940608</changelog>
  <changelog author="max@suse.com" date="1506945600">- Security update to version 2.78:
  * bsc#1060354, CVE-2017-14491: 2 byte heap based overflow.
  * bsc#1060355, CVE-2017-14492: heap based overflow.
  * bsc#1060360, CVE-2017-14493: stack based overflow.
  * bsc#1060361, CVE-2017-14494: DHCP - info leak.
  * bsc#1060362, CVE-2017-14495: DNS - OOM DoS.
  * bsc#1060364, CVE-2017-14496: DNS - DoS Integer underflow.
  * Fix DHCP relaying, broken in 2.76 and 2.77.
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
- Obsoleted patches:
  * Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch
  * Handle-binding-upstream-servers-to-an-interface.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Get rid of python dependency due to examples. (fate#323526)</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Update keyring</changelog>
  <changelog author="kukuk@suse.de" date="1531742400">- Don't require systemd explicit, fix spec file to handle both
  cases correct. In containers we don't have systemd.
- Adjust pre/post install for transactional updates.
- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="dmueller@suse.com" date="1535544000">- add missing prereq on the group to be created (bsc#1106446)</changelog>
</package>
<package pkgid="8ea69eb7b92de1572a8eea2d4ace8afefdccfff9200e6b8f86e49f9efc86cac0" name="dnsmasq" arch="x86_64">
  <version epoch="0" ver="2.78" rel="lp150.2.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1415534400">- fix logging, PrivateDevices=yes kills it (bnc#902511, bnc#904537)</changelog>
  <changelog author="nemysis@gmx.ch" date="1419422400">- Update to 2.72, announce message:
    Add ra-advrouter mode, for RFC-3775 mobile IPv6 support.
    Add support for "ipsets" in *BSD, using pf. Thanks to
    Sven Falempim for the patch.
    Fix race condition which could lock up dnsmasq when an
    interface goes down and up rapidly. Thanks to Conrad
    Kostecki for helping to chase this down.
    Add DBus methods SetFilterWin2KOption and SetBogusPrivOption
    Thanks to the Smoothwall project for the patch.
    Fix failure to build against Nettle-3.0. Thanks to Steven
    Barth for spotting this and finding the fix.
    When assigning existing DHCP leases to intefaces by comparing
    networks, handle the case that two or more interfaces have the
    same network part, but different prefix lengths (favour the
    longer prefix length.) Thanks to Lung-Pin Chang for the
    patch.
    Add a mode which detects and removes DNS forwarding loops, ie
    a query sent to an upstream server returns as a new query to
    dnsmasq, and would therefore be forwarded again, resulting in
    a query which loops many times before being dropped. Upstream
    servers which loop back are disabled and this event is logged.
    Thanks to Smoothwall for their sponsorship of this feature.
    Extend --conf-dir to allow filtering of files. So
  - -conf-dir=/etc/dnsmasq.d,\*.conf
    will load all the files in /etc/dnsmasq.d which end in .conf
    Fix bug when resulted in NXDOMAIN answers instead of NODATA in
    some circumstances.
    Fix bug which caused dnsmasq to become unresponsive if it
    failed to send packets due to a network interface disappearing.
    Thanks to Niels Peen for spotting this.
    Fix problem with --local-service option on big-endian platforms
    Thanks to Richard Genoud for the patch.
- Add dnsmasq-rpmlintrc, for false positive scripts and symlink
- Add BuildRequires for dos2unix
- Use sed instead of simple patch group_and_isc.patch</changelog>
  <changelog author="nemysis@gmx.ch" date="1419508800">- Remove from spec group_and_isc.patch, forgotten in previous commit</changelog>
  <changelog author="dimstar@opensuse.org" date="1419854400">- Fix symlink of rcFOO to /usr/sbin/service, resolving a dangling
  symlink lint warning (and remove the same from rpmlintrc).</changelog>
  <changelog author="jslaby@suse.com" date="1420545600">- The change from Wed Dec 24 messed group w/ user IDs. Switch them
  back and be more careful w/ what is changed.</changelog>
  <changelog author="abergmann@suse.com" date="1429531200">- Move trust-anchors.conf into /etc/dnsmasq.d to be AppArmor conform.
  (bnc#908137)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434542400">- dnsmasq.service: Order Before=nss-lookup.target  and
  Wants=nss-lookup.target as this service may provide
  name resolution even for the localhost.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1439294400">- Update to 2.75, announce message:
    Fix reversion on 2.74 which caused 100% CPU use when a
    dhcp-script is configured. Thanks to Adrian Davey for
    reporting the bug and testing the fix.
- Update to 2.74, announce message:
    Fix reversion in 2.73 where --conf-file would attempt to
    read the default file, rather than no file.
    Fix inotify code to handle dangling symlinks better and
    not SEGV in some circumstances.
    DNSSEC fix. In the case of a signed CNAME generated by a
    wildcard which pointed to an unsigned domain, the wrong
    status would be logged, and some necessary checks omitted.
- Update to 2.73, announce message:
    Fix crash at startup when an empty suffix is supplied to
  - -conf-dir, also trivial memory leak. Thanks to
    Tomas Hozza for spotting this.
    Remove floor of 4096 on advertised EDNS0 packet size when
    DNSSEC in use, the original rationale for this has long gone.
    Thanks to Anders Kaseorg for spotting this.
    Use inotify for checking on updates to /etc/resolv.conf and
    friends under Linux. This fixes race conditions when the files are
    updated rapidly and saves CPU by noy polling. To build
    a binary that runs on old Linux kernels without inotify,
    use make COPTS=-DNO_INOTIFY
    Fix breakage of --domain=&lt;domain&gt;,&lt;subnet&gt;,local - only reverse
    queries were intercepted. THis appears to have been broken
    since 2.69. Thanks to Josh Stone for finding the bug.
    Eliminate IPv6 privacy addresses and deprecated addresses from
    the answers given by --interface-name. Note that reverse queries
    (ie looking for names, given addresses) are not affected.
    Thanks to Michael Gorbach for the suggestion.
    Fix crash in DNSSEC code with long RRs. Thanks to Marco Davids
    for the bug report.
    Add --ignore-address option. Ignore replies to A-record
    queries which include the specified address. No error is
    generated, dnsmasq simply continues to listen for another
    reply. This is useful to defeat blocking strategies which
    rely on quickly supplying a forged answer to a DNS
    request for certain domains, before the correct answer can
    arrive. Thanks to Glen Huang for the patch.
    Revisit the part of DNSSEC validation which determines if an
    unsigned answer is legit, or is in some part of the DNS
    tree which should be signed. Dnsmasq now works from the
    DNS root downward looking for the limit of signed
    delegations, rather than working bottom up. This is
    both more correct, and less likely to trip over broken
    nameservers in the unsigned parts of the DNS tree
    which don't respond well to DNSSEC queries.
    Add --log-queries=extra option, which makes logs easier
    to search automatically.
    Add --min-cache-ttl option. I've resisted this for a long
    time, on the grounds that disbelieving TTLs is never a
    good idea, but I've been persuaded that there are
    sometimes reasons to do it. (Step forward, GFW).
    To avoid misuse, there's a hard limit on the TTL
    floor of one hour. Thansk to RinSatsuki for the patch.
    Cope with multiple interfaces with the same link-local
    address. (IPv6 addresses are scoped, so this is allowed.)
    Thanks to Cory Benfield for help with this.
    Add --dhcp-hostsdir. This allows addition of new host
    configurations to a running dnsmasq instance much more
    cheaply than having dnsmasq re-read all its existing
    configuration each time.
    Don't reply to DHCPv6 SOLICIT messages if we're not
    configured to do stateful DHCPv6. Thanks to Win King Wan
    for the patch.
    Fix broken DNSSEC validation of ECDSA signatures.
    Add --dnssec-timestamp option, which provides an automatic
    way to detect when the system time becomes valid after
    boot on systems without an RTC, whilst allowing DNS
    queries before the clock is valid so that NTP can run.
    Thanks to Kevin Darbyshire-Bryant for developing this idea.
    Add --tftp-no-fail option. Thanks to Stefan Tomanek for
    the patch.
    Fix crash caused by looking up servers.bind, CHAOS text
    record, when more than about five --servers= lines are
    in the dnsmasq config. This causes memory corruption
    which causes a crash later. Thanks to Matt Coddington for
    sterling work chasing this down.
    Fix crash on receipt of certain malformed DNS requests.
    Thanks to Nick Sampanis for spotting the problem.
    Note that this is could allow the dnsmasq process's
    memory to be read by an attacker under certain
    circumstances, so it has a CVE, CVE-2015-3294
    Fix crash in authoritative DNS code, if a .arpa zone
    is declared as authoritative, and then a PTR query which
    is not to be treated as authoritative arrived. Normally,
    directly declaring .arpa zone as authoritative is not
    done, so this crash wouldn't be seen. Instead the
    relevant .arpa zone should be specified as a subnet
    in the auth-zone declaration. Thanks to Johnny S. Lee
    for the bugreport and initial patch.
    Fix authoritative DNS code to correctly reply to NS
    and SOA queries for .arpa zones for which we are
    declared authoritative by means of a subnet in auth-zone.
    Previously we provided correct answers to PTR queries
    in such zones (including NS and SOA) but not direct
    NS and SOA queries. Thanks to Johnny S. Lee for
    pointing out the problem.
    Fix logging of DHCPREPLY which should be suppressed
    by quiet-dhcp6. Thanks to J. Pablo Abonia for
    spotting the problem.
    Try and handle net connections with broken fragmentation
    that lose large UDP packets. If a server times out,
    reduce the maximum UDP packet size field in the EDNS0
    header to 1280 bytes. If it then answers, make that
    change permanent.
    Check IPv4-mapped IPv6 addresses when --stop-rebind
    is active. Thanks to Jordan Milne for spotting this.
    Allow DHCPv4 options T1 and T2 to be set using --dhcp-option.
    Thanks to Kevin Benton for patches and work on this.
    Fix code for DHCPCONFIRM DHCPv6 messages to confirm addresses
    in the correct subnet, even of not in dynamic address
    allocation range. Thanks to Steve Hirsch for spotting
    the problem.
    Add AddDhcpLease and DeleteDhcpLease DBus methods. Thanks
    to Nicolas Cavallari for the patch.
    Allow configuration of router advertisements without the
    "on-link" bit set. Thanks to Neil Jerram for the patch.
    Extend --bridge-interface to DHCPv6 and router
    advertisements. Thanks to Neil Jerram for the patch.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1440417600">- spec file cleanup, get rid of redifinition warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1454414400">- Add gpg signature</changelog>
  <changelog author="max@suse.com" date="1466078400">- dnsmasq-groups.patch: Initialize the supplementary groups of the
  dnsmasq user (bsc#859298).</changelog>
  <changelog author="max@suse.com" date="1470225600">- Update to 2.76:
  * Include 0.0.0.0/8 in DNS rebind checks.
  * Enhance --add-subnet to allow arbitrary subnet addresses.
  * Respect the --no-resolv flag in inotify code. Fixes bug
    which caused dnsmasq to fail to start if a resolv-file
    was a dangling symbolic link, even of --no-resolv set.
  * Fix crash when an A or AAAA record is defined locally,
    in a hosts file, and an upstream server sends a reply
    that the same name is empty (CVE-2015-8899, bsc#983273).
  * Fix failure to correctly calculate cache-size when reading a
    hosts-file fails.
  * Fix wrong answer to simple name query when --domain-needed
    set, but no upstream servers configured.
  * Return REFUSED when running out of forwarding table slots,
    not SERVFAIL.
  * Add --max-port configuration.
  * Add --script-arp and two new functions for the dhcp-script.
  * Extend --add-mac to allow a new encoding of the MAC address
    as base64, by configurting --add-mac=base64
  * Add --add-cpe-id option.
  * Don't crash with divide-by-zero if an IPv6 dhcp-range is
    declared as a whole /64.
    (ie xx::0 to xx::ffff:ffff:ffff:ffff)
  * Add support for a TTL parameter in --host-record and --cname.
  * Add --dhcp-ttl option.
  * Add --tftp-mtu option.
  * Check return-code of inet_pton() when parsing dhcp-option.
  * Fix wrong value for EDNS UDP packet size when using
  - -servers-file to define upstream DNS servers.
  * Add dhcp_release6 to contrib/lease-tools.</changelog>
  <changelog author="martin.wilck@suse.com" date="1483531200">- Handle binding upstream servers to an interface if interface
  is destroyed and recreated (boo#1018160)
  Added two patches from upstream:
  * added Handle-binding-upstream-servers-to-an-interface.patch
  * added Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch</changelog>
  <changelog author="dmueller@suse.com" date="1503057600">- reload system dbus to pick up policy change on install (bsc#1054429)</changelog>
  <changelog author="tchvatal@suse.com" date="1505217600">- Fix /srv/tftpboot permissions wrt bsc#940608</changelog>
  <changelog author="max@suse.com" date="1506945600">- Security update to version 2.78:
  * bsc#1060354, CVE-2017-14491: 2 byte heap based overflow.
  * bsc#1060355, CVE-2017-14492: heap based overflow.
  * bsc#1060360, CVE-2017-14493: stack based overflow.
  * bsc#1060361, CVE-2017-14494: DHCP - info leak.
  * bsc#1060362, CVE-2017-14495: DNS - OOM DoS.
  * bsc#1060364, CVE-2017-14496: DNS - DoS Integer underflow.
  * Fix DHCP relaying, broken in 2.76 and 2.77.
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
- Obsoleted patches:
  * Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch
  * Handle-binding-upstream-servers-to-an-interface.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Get rid of python dependency due to examples. (fate#323526)</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Update keyring</changelog>
  <changelog author="kukuk@suse.de" date="1531742400">- Don't require systemd explicit, fix spec file to handle both
  cases correct. In containers we don't have systemd.
- Adjust pre/post install for transactional updates.
- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="dmueller@suse.com" date="1535544000">- add missing prereq on the group to be created (bsc#1106446)</changelog>
</package>
<package pkgid="0171d831179e97b949e3d62b7ef6247921c8bf586c0bacc37558841188edd991" name="dnsmasq-utils" arch="x86_64">
  <version epoch="0" ver="2.78" rel="lp150.2.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1415534400">- fix logging, PrivateDevices=yes kills it (bnc#902511, bnc#904537)</changelog>
  <changelog author="nemysis@gmx.ch" date="1419422400">- Update to 2.72, announce message:
    Add ra-advrouter mode, for RFC-3775 mobile IPv6 support.
    Add support for "ipsets" in *BSD, using pf. Thanks to
    Sven Falempim for the patch.
    Fix race condition which could lock up dnsmasq when an
    interface goes down and up rapidly. Thanks to Conrad
    Kostecki for helping to chase this down.
    Add DBus methods SetFilterWin2KOption and SetBogusPrivOption
    Thanks to the Smoothwall project for the patch.
    Fix failure to build against Nettle-3.0. Thanks to Steven
    Barth for spotting this and finding the fix.
    When assigning existing DHCP leases to intefaces by comparing
    networks, handle the case that two or more interfaces have the
    same network part, but different prefix lengths (favour the
    longer prefix length.) Thanks to Lung-Pin Chang for the
    patch.
    Add a mode which detects and removes DNS forwarding loops, ie
    a query sent to an upstream server returns as a new query to
    dnsmasq, and would therefore be forwarded again, resulting in
    a query which loops many times before being dropped. Upstream
    servers which loop back are disabled and this event is logged.
    Thanks to Smoothwall for their sponsorship of this feature.
    Extend --conf-dir to allow filtering of files. So
  - -conf-dir=/etc/dnsmasq.d,\*.conf
    will load all the files in /etc/dnsmasq.d which end in .conf
    Fix bug when resulted in NXDOMAIN answers instead of NODATA in
    some circumstances.
    Fix bug which caused dnsmasq to become unresponsive if it
    failed to send packets due to a network interface disappearing.
    Thanks to Niels Peen for spotting this.
    Fix problem with --local-service option on big-endian platforms
    Thanks to Richard Genoud for the patch.
- Add dnsmasq-rpmlintrc, for false positive scripts and symlink
- Add BuildRequires for dos2unix
- Use sed instead of simple patch group_and_isc.patch</changelog>
  <changelog author="nemysis@gmx.ch" date="1419508800">- Remove from spec group_and_isc.patch, forgotten in previous commit</changelog>
  <changelog author="dimstar@opensuse.org" date="1419854400">- Fix symlink of rcFOO to /usr/sbin/service, resolving a dangling
  symlink lint warning (and remove the same from rpmlintrc).</changelog>
  <changelog author="jslaby@suse.com" date="1420545600">- The change from Wed Dec 24 messed group w/ user IDs. Switch them
  back and be more careful w/ what is changed.</changelog>
  <changelog author="abergmann@suse.com" date="1429531200">- Move trust-anchors.conf into /etc/dnsmasq.d to be AppArmor conform.
  (bnc#908137)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434542400">- dnsmasq.service: Order Before=nss-lookup.target  and
  Wants=nss-lookup.target as this service may provide
  name resolution even for the localhost.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1439294400">- Update to 2.75, announce message:
    Fix reversion on 2.74 which caused 100% CPU use when a
    dhcp-script is configured. Thanks to Adrian Davey for
    reporting the bug and testing the fix.
- Update to 2.74, announce message:
    Fix reversion in 2.73 where --conf-file would attempt to
    read the default file, rather than no file.
    Fix inotify code to handle dangling symlinks better and
    not SEGV in some circumstances.
    DNSSEC fix. In the case of a signed CNAME generated by a
    wildcard which pointed to an unsigned domain, the wrong
    status would be logged, and some necessary checks omitted.
- Update to 2.73, announce message:
    Fix crash at startup when an empty suffix is supplied to
  - -conf-dir, also trivial memory leak. Thanks to
    Tomas Hozza for spotting this.
    Remove floor of 4096 on advertised EDNS0 packet size when
    DNSSEC in use, the original rationale for this has long gone.
    Thanks to Anders Kaseorg for spotting this.
    Use inotify for checking on updates to /etc/resolv.conf and
    friends under Linux. This fixes race conditions when the files are
    updated rapidly and saves CPU by noy polling. To build
    a binary that runs on old Linux kernels without inotify,
    use make COPTS=-DNO_INOTIFY
    Fix breakage of --domain=&lt;domain&gt;,&lt;subnet&gt;,local - only reverse
    queries were intercepted. THis appears to have been broken
    since 2.69. Thanks to Josh Stone for finding the bug.
    Eliminate IPv6 privacy addresses and deprecated addresses from
    the answers given by --interface-name. Note that reverse queries
    (ie looking for names, given addresses) are not affected.
    Thanks to Michael Gorbach for the suggestion.
    Fix crash in DNSSEC code with long RRs. Thanks to Marco Davids
    for the bug report.
    Add --ignore-address option. Ignore replies to A-record
    queries which include the specified address. No error is
    generated, dnsmasq simply continues to listen for another
    reply. This is useful to defeat blocking strategies which
    rely on quickly supplying a forged answer to a DNS
    request for certain domains, before the correct answer can
    arrive. Thanks to Glen Huang for the patch.
    Revisit the part of DNSSEC validation which determines if an
    unsigned answer is legit, or is in some part of the DNS
    tree which should be signed. Dnsmasq now works from the
    DNS root downward looking for the limit of signed
    delegations, rather than working bottom up. This is
    both more correct, and less likely to trip over broken
    nameservers in the unsigned parts of the DNS tree
    which don't respond well to DNSSEC queries.
    Add --log-queries=extra option, which makes logs easier
    to search automatically.
    Add --min-cache-ttl option. I've resisted this for a long
    time, on the grounds that disbelieving TTLs is never a
    good idea, but I've been persuaded that there are
    sometimes reasons to do it. (Step forward, GFW).
    To avoid misuse, there's a hard limit on the TTL
    floor of one hour. Thansk to RinSatsuki for the patch.
    Cope with multiple interfaces with the same link-local
    address. (IPv6 addresses are scoped, so this is allowed.)
    Thanks to Cory Benfield for help with this.
    Add --dhcp-hostsdir. This allows addition of new host
    configurations to a running dnsmasq instance much more
    cheaply than having dnsmasq re-read all its existing
    configuration each time.
    Don't reply to DHCPv6 SOLICIT messages if we're not
    configured to do stateful DHCPv6. Thanks to Win King Wan
    for the patch.
    Fix broken DNSSEC validation of ECDSA signatures.
    Add --dnssec-timestamp option, which provides an automatic
    way to detect when the system time becomes valid after
    boot on systems without an RTC, whilst allowing DNS
    queries before the clock is valid so that NTP can run.
    Thanks to Kevin Darbyshire-Bryant for developing this idea.
    Add --tftp-no-fail option. Thanks to Stefan Tomanek for
    the patch.
    Fix crash caused by looking up servers.bind, CHAOS text
    record, when more than about five --servers= lines are
    in the dnsmasq config. This causes memory corruption
    which causes a crash later. Thanks to Matt Coddington for
    sterling work chasing this down.
    Fix crash on receipt of certain malformed DNS requests.
    Thanks to Nick Sampanis for spotting the problem.
    Note that this is could allow the dnsmasq process's
    memory to be read by an attacker under certain
    circumstances, so it has a CVE, CVE-2015-3294
    Fix crash in authoritative DNS code, if a .arpa zone
    is declared as authoritative, and then a PTR query which
    is not to be treated as authoritative arrived. Normally,
    directly declaring .arpa zone as authoritative is not
    done, so this crash wouldn't be seen. Instead the
    relevant .arpa zone should be specified as a subnet
    in the auth-zone declaration. Thanks to Johnny S. Lee
    for the bugreport and initial patch.
    Fix authoritative DNS code to correctly reply to NS
    and SOA queries for .arpa zones for which we are
    declared authoritative by means of a subnet in auth-zone.
    Previously we provided correct answers to PTR queries
    in such zones (including NS and SOA) but not direct
    NS and SOA queries. Thanks to Johnny S. Lee for
    pointing out the problem.
    Fix logging of DHCPREPLY which should be suppressed
    by quiet-dhcp6. Thanks to J. Pablo Abonia for
    spotting the problem.
    Try and handle net connections with broken fragmentation
    that lose large UDP packets. If a server times out,
    reduce the maximum UDP packet size field in the EDNS0
    header to 1280 bytes. If it then answers, make that
    change permanent.
    Check IPv4-mapped IPv6 addresses when --stop-rebind
    is active. Thanks to Jordan Milne for spotting this.
    Allow DHCPv4 options T1 and T2 to be set using --dhcp-option.
    Thanks to Kevin Benton for patches and work on this.
    Fix code for DHCPCONFIRM DHCPv6 messages to confirm addresses
    in the correct subnet, even of not in dynamic address
    allocation range. Thanks to Steve Hirsch for spotting
    the problem.
    Add AddDhcpLease and DeleteDhcpLease DBus methods. Thanks
    to Nicolas Cavallari for the patch.
    Allow configuration of router advertisements without the
    "on-link" bit set. Thanks to Neil Jerram for the patch.
    Extend --bridge-interface to DHCPv6 and router
    advertisements. Thanks to Neil Jerram for the patch.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1440417600">- spec file cleanup, get rid of redifinition warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1454414400">- Add gpg signature</changelog>
  <changelog author="max@suse.com" date="1466078400">- dnsmasq-groups.patch: Initialize the supplementary groups of the
  dnsmasq user (bsc#859298).</changelog>
  <changelog author="max@suse.com" date="1470225600">- Update to 2.76:
  * Include 0.0.0.0/8 in DNS rebind checks.
  * Enhance --add-subnet to allow arbitrary subnet addresses.
  * Respect the --no-resolv flag in inotify code. Fixes bug
    which caused dnsmasq to fail to start if a resolv-file
    was a dangling symbolic link, even of --no-resolv set.
  * Fix crash when an A or AAAA record is defined locally,
    in a hosts file, and an upstream server sends a reply
    that the same name is empty (CVE-2015-8899, bsc#983273).
  * Fix failure to correctly calculate cache-size when reading a
    hosts-file fails.
  * Fix wrong answer to simple name query when --domain-needed
    set, but no upstream servers configured.
  * Return REFUSED when running out of forwarding table slots,
    not SERVFAIL.
  * Add --max-port configuration.
  * Add --script-arp and two new functions for the dhcp-script.
  * Extend --add-mac to allow a new encoding of the MAC address
    as base64, by configurting --add-mac=base64
  * Add --add-cpe-id option.
  * Don't crash with divide-by-zero if an IPv6 dhcp-range is
    declared as a whole /64.
    (ie xx::0 to xx::ffff:ffff:ffff:ffff)
  * Add support for a TTL parameter in --host-record and --cname.
  * Add --dhcp-ttl option.
  * Add --tftp-mtu option.
  * Check return-code of inet_pton() when parsing dhcp-option.
  * Fix wrong value for EDNS UDP packet size when using
  - -servers-file to define upstream DNS servers.
  * Add dhcp_release6 to contrib/lease-tools.</changelog>
  <changelog author="martin.wilck@suse.com" date="1483531200">- Handle binding upstream servers to an interface if interface
  is destroyed and recreated (boo#1018160)
  Added two patches from upstream:
  * added Handle-binding-upstream-servers-to-an-interface.patch
  * added Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch</changelog>
  <changelog author="dmueller@suse.com" date="1503057600">- reload system dbus to pick up policy change on install (bsc#1054429)</changelog>
  <changelog author="tchvatal@suse.com" date="1505217600">- Fix /srv/tftpboot permissions wrt bsc#940608</changelog>
  <changelog author="max@suse.com" date="1506945600">- Security update to version 2.78:
  * bsc#1060354, CVE-2017-14491: 2 byte heap based overflow.
  * bsc#1060355, CVE-2017-14492: heap based overflow.
  * bsc#1060360, CVE-2017-14493: stack based overflow.
  * bsc#1060361, CVE-2017-14494: DHCP - info leak.
  * bsc#1060362, CVE-2017-14495: DNS - OOM DoS.
  * bsc#1060364, CVE-2017-14496: DNS - DoS Integer underflow.
  * Fix DHCP relaying, broken in 2.76 and 2.77.
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
- Obsoleted patches:
  * Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch
  * Handle-binding-upstream-servers-to-an-interface.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Get rid of python dependency due to examples. (fate#323526)</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Update keyring</changelog>
  <changelog author="kukuk@suse.de" date="1531742400">- Don't require systemd explicit, fix spec file to handle both
  cases correct. In containers we don't have systemd.
- Adjust pre/post install for transactional updates.
- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="dmueller@suse.com" date="1535544000">- add missing prereq on the group to be created (bsc#1106446)</changelog>
</package>
<package pkgid="a83177f12ce815b63dd6294d6ebcad0bc329ca0ec2a76ad0e1f56c62c1701bc4" name="docker" arch="src">
  <version epoch="0" ver="17.09.1_ce" rel="lp150.5.3.1"/>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
  <changelog author="asarai@suse.com" date="1518523200">- Update patches to be sourced from https://github.com/suse/docker-ce (which
  are based on the upstream docker/docker-ce repo). The reason for this change
  (though it is functionally identical to the old patches) is so that public
  patch maintenance is much simpler.
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1522152000">- Add requirement for catatonit, which provides a docker-init implementation.
  fate#324652 bsc#1085380</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Compile and install all manpages.
  bsc#1085117</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="asarai@suse.com" date="1528200001">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
</package>
<package pkgid="25b190f244251c7d9c65448a2d5b2d1bcb039b46e4df26acebaab1e053bae0f0" name="docker" arch="x86_64">
  <version epoch="0" ver="17.09.1_ce" rel="lp150.5.3.1"/>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
  <changelog author="asarai@suse.com" date="1518523200">- Update patches to be sourced from https://github.com/suse/docker-ce (which
  are based on the upstream docker/docker-ce repo). The reason for this change
  (though it is functionally identical to the old patches) is so that public
  patch maintenance is much simpler.
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1522152000">- Add requirement for catatonit, which provides a docker-init implementation.
  fate#324652 bsc#1085380</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Compile and install all manpages.
  bsc#1085117</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="asarai@suse.com" date="1528200001">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
</package>
<package pkgid="433fdc56266d6aafdcfac99b5f5c71a82427d4ec288e5f3bfeb0c1940691264c" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="17.09.1_ce" rel="lp150.5.3.1"/>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
  <changelog author="asarai@suse.com" date="1518523200">- Update patches to be sourced from https://github.com/suse/docker-ce (which
  are based on the upstream docker/docker-ce repo). The reason for this change
  (though it is functionally identical to the old patches) is so that public
  patch maintenance is much simpler.
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1522152000">- Add requirement for catatonit, which provides a docker-init implementation.
  fate#324652 bsc#1085380</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Compile and install all manpages.
  bsc#1085117</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="asarai@suse.com" date="1528200001">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
</package>
<package pkgid="aeb06bc0b7b7f6abf5dd4ee63791198f3354c791a4cd0445c25ddf0e65f587f3" name="docker-test" arch="x86_64">
  <version epoch="0" ver="17.09.1_ce" rel="lp150.5.3.1"/>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
  <changelog author="asarai@suse.com" date="1518523200">- Update patches to be sourced from https://github.com/suse/docker-ce (which
  are based on the upstream docker/docker-ce repo). The reason for this change
  (though it is functionally identical to the old patches) is so that public
  patch maintenance is much simpler.
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1522152000">- Add requirement for catatonit, which provides a docker-init implementation.
  fate#324652 bsc#1085380</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Compile and install all manpages.
  bsc#1085117</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="asarai@suse.com" date="1528200001">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
</package>
<package pkgid="a307d0e3628a8a0a5d643df205591d7c69b1764ef202dc12b1b9b9adf16ba2c9" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="17.09.1_ce" rel="lp150.5.3.1"/>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
  <changelog author="asarai@suse.com" date="1518523200">- Update patches to be sourced from https://github.com/suse/docker-ce (which
  are based on the upstream docker/docker-ce repo). The reason for this change
  (though it is functionally identical to the old patches) is so that public
  patch maintenance is much simpler.
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1522152000">- Add requirement for catatonit, which provides a docker-init implementation.
  fate#324652 bsc#1085380</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Compile and install all manpages.
  bsc#1085117</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="asarai@suse.com" date="1528200001">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
</package>
<package pkgid="317b4049ca25056697013eb469d776d5f72b2263c6798345ae89c381c4f37e94" name="dolphin" arch="src">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * Update name of the delete action in the .rc files
  * behavior change -&gt; New Window opens with same URL</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1492862400">- Add patch to re-allow running dolphin as root:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Don't ignore tag clicks in the tooltips
  * Sort the tag-values alphabetically in the "Tags" column (kde#377589)</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Correct searchbox, split view transitions between tabs (kde#379135, kde#380032)</changelog>
  <changelog author="wbauer@tmo.at" date="1499428800">- Rename -lang package to dolphin-part-lang and recommend it by the
  dolphin-part package, the translations are used by the kpart too
  * Avoid boo#1027925 in the context of boo#1047665</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1499860800">- Replace %lang_package with evaluated macro to be able to add proper
  Provides/Obsoletes to avoid file conflicts during installation</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * Change in "Open in new tab" feature in Dolphin
  * Ignore drops-onto-items from invalid places items (kde#373005)</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Fix loading of dolphinui.rc (kde#382848)
  * Use https for knsrc providers
  * Fix drop menu position with urlnavigator drops
  * Bundle the XMLGUI files into qrc resources.
  * Add role for file creation time.
  * Fix knewstuff popup menu position on wayland
  * Add missing emit keywords
  * [Places Panel] Disallow editing devices
  * Support "Deletion Time" role in Trash (kde#153492)
  * Drop unnecessary method
  * Introduce DolphinMainWindowTest
  * Move non-exported code to a static library
  * add few more Q_DECL_OVERRIDE
  * Port tests from ecm_mark_as_test to ecm_add_test
  * Fix kfileitemmodeltest
  * Remove define to disable exports
  * Fix some compiler warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * Fix build with Qt 5.10
  * Keep renamed file(s) in view
  * Make sure we always have Shift+Del as shortcut
  * Qt 5 Porting: Q_WS_WIN -&gt; Q_OS_WIN</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * Fix scrolling during inline renaming causes rename of wrong file (kde#378786)</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * appdata: update doc URL, more https
  * Use CMakePackageConfigHelpers instead of the ECM variant</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * infopanel fully resizable
  * Revive folderpanel when outside $HOME
  * Ignore baloo urls created from new KIO model (kde#387888)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Let the terminal panel dock to any part of the window (kde#362593)
  * Folderspanel's context-menu option "Limit to Home Directory" is always visible
  * folderspanel context-menu option "Limit to Home Directory" should be always visible</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * Fix resetting "View Modes" preferences to defaults</changelog>
  <changelog author="wbauer@tmo.at" date="1538568000">- Add Fix-that-dragging-a-file-can-trigger-inline-rename.patch to
  prevent accidentally triggering inline rename by just dragging a
  file (boo#1108797, kde#398375)</changelog>
</package>
<package pkgid="85482a11377154fb0fa7c97760c00cc615715b43856329e497ca2781e4d24351" name="dolphin" arch="x86_64">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * Update name of the delete action in the .rc files
  * behavior change -&gt; New Window opens with same URL</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1492862400">- Add patch to re-allow running dolphin as root:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Don't ignore tag clicks in the tooltips
  * Sort the tag-values alphabetically in the "Tags" column (kde#377589)</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Correct searchbox, split view transitions between tabs (kde#379135, kde#380032)</changelog>
  <changelog author="wbauer@tmo.at" date="1499428800">- Rename -lang package to dolphin-part-lang and recommend it by the
  dolphin-part package, the translations are used by the kpart too
  * Avoid boo#1027925 in the context of boo#1047665</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1499860800">- Replace %lang_package with evaluated macro to be able to add proper
  Provides/Obsoletes to avoid file conflicts during installation</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * Change in "Open in new tab" feature in Dolphin
  * Ignore drops-onto-items from invalid places items (kde#373005)</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Fix loading of dolphinui.rc (kde#382848)
  * Use https for knsrc providers
  * Fix drop menu position with urlnavigator drops
  * Bundle the XMLGUI files into qrc resources.
  * Add role for file creation time.
  * Fix knewstuff popup menu position on wayland
  * Add missing emit keywords
  * [Places Panel] Disallow editing devices
  * Support "Deletion Time" role in Trash (kde#153492)
  * Drop unnecessary method
  * Introduce DolphinMainWindowTest
  * Move non-exported code to a static library
  * add few more Q_DECL_OVERRIDE
  * Port tests from ecm_mark_as_test to ecm_add_test
  * Fix kfileitemmodeltest
  * Remove define to disable exports
  * Fix some compiler warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * Fix build with Qt 5.10
  * Keep renamed file(s) in view
  * Make sure we always have Shift+Del as shortcut
  * Qt 5 Porting: Q_WS_WIN -&gt; Q_OS_WIN</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * Fix scrolling during inline renaming causes rename of wrong file (kde#378786)</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * appdata: update doc URL, more https
  * Use CMakePackageConfigHelpers instead of the ECM variant</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * infopanel fully resizable
  * Revive folderpanel when outside $HOME
  * Ignore baloo urls created from new KIO model (kde#387888)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Let the terminal panel dock to any part of the window (kde#362593)
  * Folderspanel's context-menu option "Limit to Home Directory" is always visible
  * folderspanel context-menu option "Limit to Home Directory" should be always visible</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * Fix resetting "View Modes" preferences to defaults</changelog>
  <changelog author="wbauer@tmo.at" date="1538568000">- Add Fix-that-dragging-a-file-can-trigger-inline-rename.patch to
  prevent accidentally triggering inline rename by just dragging a
  file (boo#1108797, kde#398375)</changelog>
</package>
<package pkgid="ee6594e4b42dff4d2a9c11082f07d2cd3f14211a456e270760c41d58667dcec6" name="dolphin-devel" arch="x86_64">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * Update name of the delete action in the .rc files
  * behavior change -&gt; New Window opens with same URL</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1492862400">- Add patch to re-allow running dolphin as root:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Don't ignore tag clicks in the tooltips
  * Sort the tag-values alphabetically in the "Tags" column (kde#377589)</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Correct searchbox, split view transitions between tabs (kde#379135, kde#380032)</changelog>
  <changelog author="wbauer@tmo.at" date="1499428800">- Rename -lang package to dolphin-part-lang and recommend it by the
  dolphin-part package, the translations are used by the kpart too
  * Avoid boo#1027925 in the context of boo#1047665</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1499860800">- Replace %lang_package with evaluated macro to be able to add proper
  Provides/Obsoletes to avoid file conflicts during installation</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * Change in "Open in new tab" feature in Dolphin
  * Ignore drops-onto-items from invalid places items (kde#373005)</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Fix loading of dolphinui.rc (kde#382848)
  * Use https for knsrc providers
  * Fix drop menu position with urlnavigator drops
  * Bundle the XMLGUI files into qrc resources.
  * Add role for file creation time.
  * Fix knewstuff popup menu position on wayland
  * Add missing emit keywords
  * [Places Panel] Disallow editing devices
  * Support "Deletion Time" role in Trash (kde#153492)
  * Drop unnecessary method
  * Introduce DolphinMainWindowTest
  * Move non-exported code to a static library
  * add few more Q_DECL_OVERRIDE
  * Port tests from ecm_mark_as_test to ecm_add_test
  * Fix kfileitemmodeltest
  * Remove define to disable exports
  * Fix some compiler warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * Fix build with Qt 5.10
  * Keep renamed file(s) in view
  * Make sure we always have Shift+Del as shortcut
  * Qt 5 Porting: Q_WS_WIN -&gt; Q_OS_WIN</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * Fix scrolling during inline renaming causes rename of wrong file (kde#378786)</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * appdata: update doc URL, more https
  * Use CMakePackageConfigHelpers instead of the ECM variant</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * infopanel fully resizable
  * Revive folderpanel when outside $HOME
  * Ignore baloo urls created from new KIO model (kde#387888)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Let the terminal panel dock to any part of the window (kde#362593)
  * Folderspanel's context-menu option "Limit to Home Directory" is always visible
  * folderspanel context-menu option "Limit to Home Directory" should be always visible</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * Fix resetting "View Modes" preferences to defaults</changelog>
  <changelog author="wbauer@tmo.at" date="1538568000">- Add Fix-that-dragging-a-file-can-trigger-inline-rename.patch to
  prevent accidentally triggering inline rename by just dragging a
  file (boo#1108797, kde#398375)</changelog>
</package>
<package pkgid="0db4589f4a2cceb04318c135a00710a8be3d0288111eaba0f89a4091eecbee4f" name="dolphin-part" arch="x86_64">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * Update name of the delete action in the .rc files
  * behavior change -&gt; New Window opens with same URL</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1492862400">- Add patch to re-allow running dolphin as root:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Don't ignore tag clicks in the tooltips
  * Sort the tag-values alphabetically in the "Tags" column (kde#377589)</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Correct searchbox, split view transitions between tabs (kde#379135, kde#380032)</changelog>
  <changelog author="wbauer@tmo.at" date="1499428800">- Rename -lang package to dolphin-part-lang and recommend it by the
  dolphin-part package, the translations are used by the kpart too
  * Avoid boo#1027925 in the context of boo#1047665</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1499860800">- Replace %lang_package with evaluated macro to be able to add proper
  Provides/Obsoletes to avoid file conflicts during installation</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * Change in "Open in new tab" feature in Dolphin
  * Ignore drops-onto-items from invalid places items (kde#373005)</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Fix loading of dolphinui.rc (kde#382848)
  * Use https for knsrc providers
  * Fix drop menu position with urlnavigator drops
  * Bundle the XMLGUI files into qrc resources.
  * Add role for file creation time.
  * Fix knewstuff popup menu position on wayland
  * Add missing emit keywords
  * [Places Panel] Disallow editing devices
  * Support "Deletion Time" role in Trash (kde#153492)
  * Drop unnecessary method
  * Introduce DolphinMainWindowTest
  * Move non-exported code to a static library
  * add few more Q_DECL_OVERRIDE
  * Port tests from ecm_mark_as_test to ecm_add_test
  * Fix kfileitemmodeltest
  * Remove define to disable exports
  * Fix some compiler warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * Fix build with Qt 5.10
  * Keep renamed file(s) in view
  * Make sure we always have Shift+Del as shortcut
  * Qt 5 Porting: Q_WS_WIN -&gt; Q_OS_WIN</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * Fix scrolling during inline renaming causes rename of wrong file (kde#378786)</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * appdata: update doc URL, more https
  * Use CMakePackageConfigHelpers instead of the ECM variant</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * infopanel fully resizable
  * Revive folderpanel when outside $HOME
  * Ignore baloo urls created from new KIO model (kde#387888)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Let the terminal panel dock to any part of the window (kde#362593)
  * Folderspanel's context-menu option "Limit to Home Directory" is always visible
  * folderspanel context-menu option "Limit to Home Directory" should be always visible</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * Fix resetting "View Modes" preferences to defaults</changelog>
  <changelog author="wbauer@tmo.at" date="1538568000">- Add Fix-that-dragging-a-file-can-trigger-inline-rename.patch to
  prevent accidentally triggering inline rename by just dragging a
  file (boo#1108797, kde#398375)</changelog>
</package>
<package pkgid="99ca09e3016d2d4257bc2ea1d5c0287c623e85969752bd2dd2c3ab0d48ac4b29" name="dolphin-part-lang" arch="noarch">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * Update name of the delete action in the .rc files
  * behavior change -&gt; New Window opens with same URL</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1492862400">- Add patch to re-allow running dolphin as root:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Don't ignore tag clicks in the tooltips
  * Sort the tag-values alphabetically in the "Tags" column (kde#377589)</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Correct searchbox, split view transitions between tabs (kde#379135, kde#380032)</changelog>
  <changelog author="wbauer@tmo.at" date="1499428800">- Rename -lang package to dolphin-part-lang and recommend it by the
  dolphin-part package, the translations are used by the kpart too
  * Avoid boo#1027925 in the context of boo#1047665</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1499860800">- Replace %lang_package with evaluated macro to be able to add proper
  Provides/Obsoletes to avoid file conflicts during installation</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * Change in "Open in new tab" feature in Dolphin
  * Ignore drops-onto-items from invalid places items (kde#373005)</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Fix loading of dolphinui.rc (kde#382848)
  * Use https for knsrc providers
  * Fix drop menu position with urlnavigator drops
  * Bundle the XMLGUI files into qrc resources.
  * Add role for file creation time.
  * Fix knewstuff popup menu position on wayland
  * Add missing emit keywords
  * [Places Panel] Disallow editing devices
  * Support "Deletion Time" role in Trash (kde#153492)
  * Drop unnecessary method
  * Introduce DolphinMainWindowTest
  * Move non-exported code to a static library
  * add few more Q_DECL_OVERRIDE
  * Port tests from ecm_mark_as_test to ecm_add_test
  * Fix kfileitemmodeltest
  * Remove define to disable exports
  * Fix some compiler warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * Fix build with Qt 5.10
  * Keep renamed file(s) in view
  * Make sure we always have Shift+Del as shortcut
  * Qt 5 Porting: Q_WS_WIN -&gt; Q_OS_WIN</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * Fix scrolling during inline renaming causes rename of wrong file (kde#378786)</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * appdata: update doc URL, more https
  * Use CMakePackageConfigHelpers instead of the ECM variant</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * infopanel fully resizable
  * Revive folderpanel when outside $HOME
  * Ignore baloo urls created from new KIO model (kde#387888)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Let the terminal panel dock to any part of the window (kde#362593)
  * Folderspanel's context-menu option "Limit to Home Directory" is always visible
  * folderspanel context-menu option "Limit to Home Directory" should be always visible</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * Fix resetting "View Modes" preferences to defaults</changelog>
  <changelog author="wbauer@tmo.at" date="1538568000">- Add Fix-that-dragging-a-file-can-trigger-inline-rename.patch to
  prevent accidentally triggering inline rename by just dragging a
  file (boo#1108797, kde#398375)</changelog>
</package>
<package pkgid="fec15532faf6fc096bc2577ceb17577efd7e9a85639eeb7e9508b806efbab843" name="dom4j" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="lp150.3.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1242302400">- Initial SUSE packaging:
  * spec script and jarjar build support was taken from jpackage.org 5.0
  * Source of dom4j and build.xml comes from Debian unstable, as there don't need
    proprietary msv from sun (bnc#430592)</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242648000">- Removed documentation of ConcurrentReaderHashMap (bnc#504663)
  * dom4j-1.6.1/docs/clover/org/dom4j/tree/ConcurrentReaderHashMap.html
  * dom4j-1.6.1/docs/xref/org/dom4j/tree/ConcurrentReaderHashMap.html</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242820800">- 'fixed bnc#501764: removed clover.license from source tarball'</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1332504000">- license update: Apache-1.1
  SPDX</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from javapackages-tools
- drop repolib part (never built)
- drop pointless jarjar
- unversioned javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Do not depend on ant-trax and run spec-cleaner.</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * dom4j-sourcetarget.patch
    + Use java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272000">- Security fix: [bsc#1105443, CVE-2018-1000632]
  * Version prior to version 2.1.1 contains a CWE-91: XML
    Injectionvulnerability in Class: Element. Methods: addElement,
    addAttribute that canresult in an attacker tampering with XML
    documents through.
  * Added dom4j-CVE-2018-1000632.patch</changelog>
</package>
<package pkgid="0fc235ef4e444ad1ef1f19346239ad805e0d9ec806df1efdce71c1dcfe6f0040" name="dom4j" arch="src">
  <version epoch="0" ver="1.6.1" rel="lp150.3.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1242302400">- Initial SUSE packaging:
  * spec script and jarjar build support was taken from jpackage.org 5.0
  * Source of dom4j and build.xml comes from Debian unstable, as there don't need
    proprietary msv from sun (bnc#430592)</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242648000">- Removed documentation of ConcurrentReaderHashMap (bnc#504663)
  * dom4j-1.6.1/docs/clover/org/dom4j/tree/ConcurrentReaderHashMap.html
  * dom4j-1.6.1/docs/xref/org/dom4j/tree/ConcurrentReaderHashMap.html</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242820800">- 'fixed bnc#501764: removed clover.license from source tarball'</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1332504000">- license update: Apache-1.1
  SPDX</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from javapackages-tools
- drop repolib part (never built)
- drop pointless jarjar
- unversioned javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Do not depend on ant-trax and run spec-cleaner.</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * dom4j-sourcetarget.patch
    + Use java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272000">- Security fix: [bsc#1105443, CVE-2018-1000632]
  * Version prior to version 2.1.1 contains a CWE-91: XML
    Injectionvulnerability in Class: Element. Methods: addElement,
    addAttribute that canresult in an attacker tampering with XML
    documents through.
  * Added dom4j-CVE-2018-1000632.patch</changelog>
</package>
<package pkgid="8c74e7da5ebd3c8db05e05b281692fc174aea3bb9daf9c28ae091fe15a5a250c" name="dom4j-demo" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="lp150.3.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1242302400">- Initial SUSE packaging:
  * spec script and jarjar build support was taken from jpackage.org 5.0
  * Source of dom4j and build.xml comes from Debian unstable, as there don't need
    proprietary msv from sun (bnc#430592)</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242648000">- Removed documentation of ConcurrentReaderHashMap (bnc#504663)
  * dom4j-1.6.1/docs/clover/org/dom4j/tree/ConcurrentReaderHashMap.html
  * dom4j-1.6.1/docs/xref/org/dom4j/tree/ConcurrentReaderHashMap.html</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242820800">- 'fixed bnc#501764: removed clover.license from source tarball'</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1332504000">- license update: Apache-1.1
  SPDX</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from javapackages-tools
- drop repolib part (never built)
- drop pointless jarjar
- unversioned javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Do not depend on ant-trax and run spec-cleaner.</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * dom4j-sourcetarget.patch
    + Use java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272000">- Security fix: [bsc#1105443, CVE-2018-1000632]
  * Version prior to version 2.1.1 contains a CWE-91: XML
    Injectionvulnerability in Class: Element. Methods: addElement,
    addAttribute that canresult in an attacker tampering with XML
    documents through.
  * Added dom4j-CVE-2018-1000632.patch</changelog>
</package>
<package pkgid="84aaed63a3093156f545758503ffcb7cd5bb32a0e4b8b27725847a83028644a3" name="dom4j-javadoc" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="lp150.3.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1242302400">- Initial SUSE packaging:
  * spec script and jarjar build support was taken from jpackage.org 5.0
  * Source of dom4j and build.xml comes from Debian unstable, as there don't need
    proprietary msv from sun (bnc#430592)</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242648000">- Removed documentation of ConcurrentReaderHashMap (bnc#504663)
  * dom4j-1.6.1/docs/clover/org/dom4j/tree/ConcurrentReaderHashMap.html
  * dom4j-1.6.1/docs/xref/org/dom4j/tree/ConcurrentReaderHashMap.html</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242820800">- 'fixed bnc#501764: removed clover.license from source tarball'</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1332504000">- license update: Apache-1.1
  SPDX</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from javapackages-tools
- drop repolib part (never built)
- drop pointless jarjar
- unversioned javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Do not depend on ant-trax and run spec-cleaner.</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * dom4j-sourcetarget.patch
    + Use java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272000">- Security fix: [bsc#1105443, CVE-2018-1000632]
  * Version prior to version 2.1.1 contains a CWE-91: XML
    Injectionvulnerability in Class: Element. Methods: addElement,
    addAttribute that canresult in an attacker tampering with XML
    documents through.
  * Added dom4j-CVE-2018-1000632.patch</changelog>
</package>
<package pkgid="cd68350f93f509241d0853b5a040f18dfb4bdd2849fcdd29041f76a31eef6e36" name="dom4j-manual" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="lp150.3.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1242302400">- Initial SUSE packaging:
  * spec script and jarjar build support was taken from jpackage.org 5.0
  * Source of dom4j and build.xml comes from Debian unstable, as there don't need
    proprietary msv from sun (bnc#430592)</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242648000">- Removed documentation of ConcurrentReaderHashMap (bnc#504663)
  * dom4j-1.6.1/docs/clover/org/dom4j/tree/ConcurrentReaderHashMap.html
  * dom4j-1.6.1/docs/xref/org/dom4j/tree/ConcurrentReaderHashMap.html</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242820800">- 'fixed bnc#501764: removed clover.license from source tarball'</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1332504000">- license update: Apache-1.1
  SPDX</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from javapackages-tools
- drop repolib part (never built)
- drop pointless jarjar
- unversioned javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Do not depend on ant-trax and run spec-cleaner.</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * dom4j-sourcetarget.patch
    + Use java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272000">- Security fix: [bsc#1105443, CVE-2018-1000632]
  * Version prior to version 2.1.1 contains a CWE-91: XML
    Injectionvulnerability in Class: Element. Methods: addElement,
    addAttribute that canresult in an attacker tampering with XML
    documents through.
  * Added dom4j-CVE-2018-1000632.patch</changelog>
</package>
<package pkgid="712a9ae9c524f82538a07851c9aec2541ce436aa4bbf9c0def315232966d729e" name="dpdk" arch="src">
  <version epoch="0" ver="17.11.2" rel="lp150.2.2.1"/>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495627200">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
</package>
<package pkgid="ddf55b9e5b54cc538f236a434a511b4a9364885fdaa2dc948c64000858809471" name="dpdk" arch="x86_64">
  <version epoch="0" ver="17.11.2" rel="lp150.2.2.1"/>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495627200">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
</package>
<package pkgid="6dcebc0fea316d90a4748f22b068c442f9a340e34067d9f2d9d8733d844dd072" name="dpdk" arch="src">
  <version epoch="0" ver="17.11.4" rel="lp150.2.5.1"/>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495540800">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="ndas@suse.de" date="1530619200">- do proper cpu compatibility test(bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]
- change %doc to %license</changelog>
  <changelog author="marco.varlese@suse.com" date="1535976000">- Update to 17.11.4 stable release. Some of the fixes include:
  * app/testpmd: fix buffer leak in TM command, fix DCB config,
  fix VLAN TCI mask set error for FDIR
  * bus/dpaa: fix buffer offset setting in FMAN, fix build,
  fix phandle support for Linux 4.16
  * doc: fix bonding command in testpmd, update qede management
  firmware guide
  * eal: fix bitmap documentation, fix return codes on thread naming
  failure, fix invalid syntax in interrupts, fix uninitialized value
  * eventdev: add event buffer flush in Rx adapter, fix internal
  port logic in Rx adapter, fix missing update to Rx adaper
  WRR position, fix port in Rx adapter internal function, fix Rx SW
  adapter stop
  * hash: fix a multi-writer race condition, fix doxygen of return
  values, fix key slot size accuracy, fix multiwriter lock memory
  allocation
  * kni:fix build with gcc 8.1, fix crash with null name
  * vhost: fix missing increment of log cache count, flush IOTLB
  cache on new mem table handling, improve dirty pages logging
  performance, release locks on RARP packet failure, retranslate
  vring addr when memory table changes
  * PMD drivers: various fixes fro bnxt, dpaa2, mlx5
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
</package>
<package pkgid="3615e7d497f089ee802e6db8a28e493986d37676b518713ee328ef537e66f2f5" name="dpdk" arch="x86_64">
  <version epoch="0" ver="17.11.4" rel="lp150.2.5.1"/>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495540800">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="ndas@suse.de" date="1530619200">- do proper cpu compatibility test(bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]
- change %doc to %license</changelog>
  <changelog author="marco.varlese@suse.com" date="1535976000">- Update to 17.11.4 stable release. Some of the fixes include:
  * app/testpmd: fix buffer leak in TM command, fix DCB config,
  fix VLAN TCI mask set error for FDIR
  * bus/dpaa: fix buffer offset setting in FMAN, fix build,
  fix phandle support for Linux 4.16
  * doc: fix bonding command in testpmd, update qede management
  firmware guide
  * eal: fix bitmap documentation, fix return codes on thread naming
  failure, fix invalid syntax in interrupts, fix uninitialized value
  * eventdev: add event buffer flush in Rx adapter, fix internal
  port logic in Rx adapter, fix missing update to Rx adaper
  WRR position, fix port in Rx adapter internal function, fix Rx SW
  adapter stop
  * hash: fix a multi-writer race condition, fix doxygen of return
  values, fix key slot size accuracy, fix multiwriter lock memory
  allocation
  * kni:fix build with gcc 8.1, fix crash with null name
  * vhost: fix missing increment of log cache count, flush IOTLB
  cache on new mem table handling, improve dirty pages logging
  performance, release locks on RARP packet failure, retranslate
  vring addr when memory table changes
  * PMD drivers: various fixes fro bnxt, dpaa2, mlx5
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
</package>
<package pkgid="d800947c4858448aaf384f09f02f4e8905b2e27e95c1a890c163b77d340837bd" name="dpdk-devel" arch="x86_64">
  <version epoch="0" ver="17.11.2" rel="lp150.2.2.1"/>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495627200">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
</package>
<package pkgid="41f441a8a5f71540ba1f7b33ded5d841cf2aa967c0dbc2c684cb9f7a584230fa" name="dpdk-devel" arch="x86_64">
  <version epoch="0" ver="17.11.4" rel="lp150.2.5.1"/>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495540800">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="ndas@suse.de" date="1530619200">- do proper cpu compatibility test(bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]
- change %doc to %license</changelog>
  <changelog author="marco.varlese@suse.com" date="1535976000">- Update to 17.11.4 stable release. Some of the fixes include:
  * app/testpmd: fix buffer leak in TM command, fix DCB config,
  fix VLAN TCI mask set error for FDIR
  * bus/dpaa: fix buffer offset setting in FMAN, fix build,
  fix phandle support for Linux 4.16
  * doc: fix bonding command in testpmd, update qede management
  firmware guide
  * eal: fix bitmap documentation, fix return codes on thread naming
  failure, fix invalid syntax in interrupts, fix uninitialized value
  * eventdev: add event buffer flush in Rx adapter, fix internal
  port logic in Rx adapter, fix missing update to Rx adaper
  WRR position, fix port in Rx adapter internal function, fix Rx SW
  adapter stop
  * hash: fix a multi-writer race condition, fix doxygen of return
  values, fix key slot size accuracy, fix multiwriter lock memory
  allocation
  * kni:fix build with gcc 8.1, fix crash with null name
  * vhost: fix missing increment of log cache count, flush IOTLB
  cache on new mem table handling, improve dirty pages logging
  performance, release locks on RARP packet failure, retranslate
  vring addr when memory table changes
  * PMD drivers: various fixes fro bnxt, dpaa2, mlx5
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
</package>
<package pkgid="2794e2c39201c1f77643ac3a8fa4eb2d1a75a8f4998868d66596e325712c6ad5" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="17.11.2" rel="lp150.2.2.1"/>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495627200">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
</package>
<package pkgid="56ebfb1b7e5d6c0310fe444fa7ad5adf613aedbd69e50f7c2cc8082263bd3e07" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="17.11.4" rel="lp150.2.5.1"/>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495540800">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="ndas@suse.de" date="1530619200">- do proper cpu compatibility test(bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]
- change %doc to %license</changelog>
  <changelog author="marco.varlese@suse.com" date="1535976000">- Update to 17.11.4 stable release. Some of the fixes include:
  * app/testpmd: fix buffer leak in TM command, fix DCB config,
  fix VLAN TCI mask set error for FDIR
  * bus/dpaa: fix buffer offset setting in FMAN, fix build,
  fix phandle support for Linux 4.16
  * doc: fix bonding command in testpmd, update qede management
  firmware guide
  * eal: fix bitmap documentation, fix return codes on thread naming
  failure, fix invalid syntax in interrupts, fix uninitialized value
  * eventdev: add event buffer flush in Rx adapter, fix internal
  port logic in Rx adapter, fix missing update to Rx adaper
  WRR position, fix port in Rx adapter internal function, fix Rx SW
  adapter stop
  * hash: fix a multi-writer race condition, fix doxygen of return
  values, fix key slot size accuracy, fix multiwriter lock memory
  allocation
  * kni:fix build with gcc 8.1, fix crash with null name
  * vhost: fix missing increment of log cache count, flush IOTLB
  cache on new mem table handling, improve dirty pages logging
  performance, release locks on RARP packet failure, retranslate
  vring addr when memory table changes
  * PMD drivers: various fixes fro bnxt, dpaa2, mlx5
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
</package>
<package pkgid="c925121572222fb58942055c15866c0cee5165175d8edd6bcf064daa2156bfc0" name="dpdk-examples" arch="x86_64">
  <version epoch="0" ver="17.11.2" rel="lp150.2.2.1"/>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495627200">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
</package>
<package pkgid="893696358744a4cb14c6abb950c57b22d159a43df6952140ed27ec6c43b59b5a" name="dpdk-examples" arch="x86_64">
  <version epoch="0" ver="17.11.4" rel="lp150.2.5.1"/>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495540800">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="ndas@suse.de" date="1530619200">- do proper cpu compatibility test(bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]
- change %doc to %license</changelog>
  <changelog author="marco.varlese@suse.com" date="1535976000">- Update to 17.11.4 stable release. Some of the fixes include:
  * app/testpmd: fix buffer leak in TM command, fix DCB config,
  fix VLAN TCI mask set error for FDIR
  * bus/dpaa: fix buffer offset setting in FMAN, fix build,
  fix phandle support for Linux 4.16
  * doc: fix bonding command in testpmd, update qede management
  firmware guide
  * eal: fix bitmap documentation, fix return codes on thread naming
  failure, fix invalid syntax in interrupts, fix uninitialized value
  * eventdev: add event buffer flush in Rx adapter, fix internal
  port logic in Rx adapter, fix missing update to Rx adaper
  WRR position, fix port in Rx adapter internal function, fix Rx SW
  adapter stop
  * hash: fix a multi-writer race condition, fix doxygen of return
  values, fix key slot size accuracy, fix multiwriter lock memory
  allocation
  * kni:fix build with gcc 8.1, fix crash with null name
  * vhost: fix missing increment of log cache count, flush IOTLB
  cache on new mem table handling, improve dirty pages logging
  performance, release locks on RARP packet failure, retranslate
  vring addr when memory table changes
  * PMD drivers: various fixes fro bnxt, dpaa2, mlx5
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
</package>
<package pkgid="7cc55592ae73b7e5680d494d19bc634e2035cf43684a2c8ffe2b2a950fb3971b" name="dpdk-kmp-default" arch="x86_64">
  <version epoch="0" ver="17.11.2_k4.12.14_lp150.12.13" rel="lp150.2.2.1"/>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495627200">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
</package>
<package pkgid="779d0e733dd89a6ec4dfeeaf28f288162ee18aa6a817ac81df9f427de470bb69" name="dpdk-kmp-default" arch="x86_64">
  <version epoch="0" ver="17.11.4_k4.12.14_lp150.12.25" rel="lp150.2.5.1"/>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495540800">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="ndas@suse.de" date="1530619200">- do proper cpu compatibility test(bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]
- change %doc to %license</changelog>
  <changelog author="marco.varlese@suse.com" date="1535976000">- Update to 17.11.4 stable release. Some of the fixes include:
  * app/testpmd: fix buffer leak in TM command, fix DCB config,
  fix VLAN TCI mask set error for FDIR
  * bus/dpaa: fix buffer offset setting in FMAN, fix build,
  fix phandle support for Linux 4.16
  * doc: fix bonding command in testpmd, update qede management
  firmware guide
  * eal: fix bitmap documentation, fix return codes on thread naming
  failure, fix invalid syntax in interrupts, fix uninitialized value
  * eventdev: add event buffer flush in Rx adapter, fix internal
  port logic in Rx adapter, fix missing update to Rx adaper
  WRR position, fix port in Rx adapter internal function, fix Rx SW
  adapter stop
  * hash: fix a multi-writer race condition, fix doxygen of return
  values, fix key slot size accuracy, fix multiwriter lock memory
  allocation
  * kni:fix build with gcc 8.1, fix crash with null name
  * vhost: fix missing increment of log cache count, flush IOTLB
  cache on new mem table handling, improve dirty pages logging
  performance, release locks on RARP packet failure, retranslate
  vring addr when memory table changes
  * PMD drivers: various fixes fro bnxt, dpaa2, mlx5
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
</package>
<package pkgid="344c8cc98befa950be62dd8241ec61ad401479a7c22099990fa19cc551372dd9" name="dpdk-tools" arch="x86_64">
  <version epoch="0" ver="17.11.2" rel="lp150.2.2.1"/>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495627200">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
</package>
<package pkgid="1bf1a143f943531f779571474e7a62e50180bec6c8a721b5c47bc24be557c125" name="dpdk-tools" arch="x86_64">
  <version epoch="0" ver="17.11.4" rel="lp150.2.5.1"/>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495540800">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="ndas@suse.de" date="1530619200">- do proper cpu compatibility test(bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]
- change %doc to %license</changelog>
  <changelog author="marco.varlese@suse.com" date="1535976000">- Update to 17.11.4 stable release. Some of the fixes include:
  * app/testpmd: fix buffer leak in TM command, fix DCB config,
  fix VLAN TCI mask set error for FDIR
  * bus/dpaa: fix buffer offset setting in FMAN, fix build,
  fix phandle support for Linux 4.16
  * doc: fix bonding command in testpmd, update qede management
  firmware guide
  * eal: fix bitmap documentation, fix return codes on thread naming
  failure, fix invalid syntax in interrupts, fix uninitialized value
  * eventdev: add event buffer flush in Rx adapter, fix internal
  port logic in Rx adapter, fix missing update to Rx adaper
  WRR position, fix port in Rx adapter internal function, fix Rx SW
  adapter stop
  * hash: fix a multi-writer race condition, fix doxygen of return
  values, fix key slot size accuracy, fix multiwriter lock memory
  allocation
  * kni:fix build with gcc 8.1, fix crash with null name
  * vhost: fix missing increment of log cache count, flush IOTLB
  cache on new mem table handling, improve dirty pages logging
  performance, release locks on RARP packet failure, retranslate
  vring addr when memory table changes
  * PMD drivers: various fixes fro bnxt, dpaa2, mlx5
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
</package>
<package pkgid="fcc0ad6d05ae3f5728993dfe866d38d3be048a5ecbacd68f6153833b0d01ecf8" name="dracut" arch="src">
  <version epoch="0" ver="044.1" rel="lp150.14.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1513339200">- Switch back to fipvlan for bnx2fc (bsc#1052840)
  * adds 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch
- 95fcoe: Allow bnc2x driver more time to complete DCB negotiation (bsc#1052840)
  * adds 0549-fcoe-up-Increase-sleeptime-to-13s.patch
- 95fcoe: add timeout initqueue entries (bsc#1052840)
  * adds 0550-95fcoe-add-timeout-initqueue-entries.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1515499200">- dracut-ima requires evmctl and keyutils (bsc#1073466)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1515585600">- FIPS: Try to fetch list of fips modules from the kernel's modules dir (bsc#1074984)
  * Adds 0551-fips-use-lib-modules-uname-r-modules.fips.patch
- Annotated patches regarding their upstream state</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- Fix typo for ima dependency (evmtcl vs evmctl) (bsc#1073466)
- Updated Patch annotation regarding their upstream state</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516881600">- support validating the IMA policy file signature, needed since Kernel 4.7
  * Adds 0552-98integrity-support-validating-the-IMA-policy-file-s.patch
- IMA: improve support for evm key loading (bsc#1077359, fate#323906)
  * Adds 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch
  * Adds 0554-98integrity-support-X.509-only-EVM-configuration.patch
- FIPS: Adjust dependencies to work for cryptsetup 2.0 (bsc#1077070)
- Added a few more patch annotations</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
</package>
<package pkgid="fedc4ff7c9dd6d4880f27042e84705e66fd7a096fc202a4b4fe20a06188f73e0" name="dracut" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1513339200">- Switch back to fipvlan for bnx2fc (bsc#1052840)
  * adds 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch
- 95fcoe: Allow bnc2x driver more time to complete DCB negotiation (bsc#1052840)
  * adds 0549-fcoe-up-Increase-sleeptime-to-13s.patch
- 95fcoe: add timeout initqueue entries (bsc#1052840)
  * adds 0550-95fcoe-add-timeout-initqueue-entries.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1515499200">- dracut-ima requires evmctl and keyutils (bsc#1073466)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1515585600">- FIPS: Try to fetch list of fips modules from the kernel's modules dir (bsc#1074984)
  * Adds 0551-fips-use-lib-modules-uname-r-modules.fips.patch
- Annotated patches regarding their upstream state</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- Fix typo for ima dependency (evmtcl vs evmctl) (bsc#1073466)
- Updated Patch annotation regarding their upstream state</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516881600">- support validating the IMA policy file signature, needed since Kernel 4.7
  * Adds 0552-98integrity-support-validating-the-IMA-policy-file-s.patch
- IMA: improve support for evm key loading (bsc#1077359, fate#323906)
  * Adds 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch
  * Adds 0554-98integrity-support-X.509-only-EVM-configuration.patch
- FIPS: Adjust dependencies to work for cryptsetup 2.0 (bsc#1077070)
- Added a few more patch annotations</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
</package>
<package pkgid="46879242a6438faee5a472ea3abff05367be648430cffb0906a456d3dd4bd1b3" name="dracut" arch="src">
  <version epoch="0" ver="044.1" rel="lp150.14.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1516881600">- support validating the IMA policy file signature, needed since Kernel 4.7
  * Adds 0552-98integrity-support-validating-the-IMA-policy-file-s.patch
- IMA: improve support for evm key loading (bsc#1077359, fate#323906)
  * Adds 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch
  * Adds 0554-98integrity-support-X.509-only-EVM-configuration.patch
- FIPS: Adjust dependencies to work for cryptsetup 2.0 (bsc#1077070)
- Added a few more patch annotations</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
</package>
<package pkgid="ae82bfd82b3e502589e8126d76fcd61c73d387444dc504f5a7fbf303fcada396" name="dracut" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1516881600">- support validating the IMA policy file signature, needed since Kernel 4.7
  * Adds 0552-98integrity-support-validating-the-IMA-policy-file-s.patch
- IMA: improve support for evm key loading (bsc#1077359, fate#323906)
  * Adds 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch
  * Adds 0554-98integrity-support-X.509-only-EVM-configuration.patch
- FIPS: Adjust dependencies to work for cryptsetup 2.0 (bsc#1077070)
- Added a few more patch annotations</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
</package>
<package pkgid="c7a78ac86459e377730b39225ab32d2b428887d33087d99e4e25a3d3172e7df3" name="dracut" arch="src">
  <version epoch="0" ver="044.1" rel="lp150.14.9.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
</package>
<package pkgid="3d08a80cf01393e434b3ed20fe660e2b9fe37e13ca14d2d067eebfd64f0826c3" name="dracut" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.9.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
</package>
<package pkgid="5f75e1a3009c0363a538c5e302d58ff8d81f5883520220bf0b80b9cc26a0f438" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1513339200">- Switch back to fipvlan for bnx2fc (bsc#1052840)
  * adds 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch
- 95fcoe: Allow bnc2x driver more time to complete DCB negotiation (bsc#1052840)
  * adds 0549-fcoe-up-Increase-sleeptime-to-13s.patch
- 95fcoe: add timeout initqueue entries (bsc#1052840)
  * adds 0550-95fcoe-add-timeout-initqueue-entries.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1515499200">- dracut-ima requires evmctl and keyutils (bsc#1073466)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1515585600">- FIPS: Try to fetch list of fips modules from the kernel's modules dir (bsc#1074984)
  * Adds 0551-fips-use-lib-modules-uname-r-modules.fips.patch
- Annotated patches regarding their upstream state</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- Fix typo for ima dependency (evmtcl vs evmctl) (bsc#1073466)
- Updated Patch annotation regarding their upstream state</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516881600">- support validating the IMA policy file signature, needed since Kernel 4.7
  * Adds 0552-98integrity-support-validating-the-IMA-policy-file-s.patch
- IMA: improve support for evm key loading (bsc#1077359, fate#323906)
  * Adds 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch
  * Adds 0554-98integrity-support-X.509-only-EVM-configuration.patch
- FIPS: Adjust dependencies to work for cryptsetup 2.0 (bsc#1077070)
- Added a few more patch annotations</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
</package>
<package pkgid="422804efa95ecb8b3c890ffa03941493d447d683c280aabc7af7e3ea5f9d6a30" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1516881600">- support validating the IMA policy file signature, needed since Kernel 4.7
  * Adds 0552-98integrity-support-validating-the-IMA-policy-file-s.patch
- IMA: improve support for evm key loading (bsc#1077359, fate#323906)
  * Adds 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch
  * Adds 0554-98integrity-support-X.509-only-EVM-configuration.patch
- FIPS: Adjust dependencies to work for cryptsetup 2.0 (bsc#1077070)
- Added a few more patch annotations</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
</package>
<package pkgid="13e984cc0deb35c0fa76b98c1a5c19c81c6ee3acd76f8b676261ef899e5f7082" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.9.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
</package>
<package pkgid="53968c0072a55cc4c512a126de09f123fb98db347b7e12ae3f3120e63e3e06d9" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1513339200">- Switch back to fipvlan for bnx2fc (bsc#1052840)
  * adds 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch
- 95fcoe: Allow bnc2x driver more time to complete DCB negotiation (bsc#1052840)
  * adds 0549-fcoe-up-Increase-sleeptime-to-13s.patch
- 95fcoe: add timeout initqueue entries (bsc#1052840)
  * adds 0550-95fcoe-add-timeout-initqueue-entries.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1515499200">- dracut-ima requires evmctl and keyutils (bsc#1073466)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1515585600">- FIPS: Try to fetch list of fips modules from the kernel's modules dir (bsc#1074984)
  * Adds 0551-fips-use-lib-modules-uname-r-modules.fips.patch
- Annotated patches regarding their upstream state</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- Fix typo for ima dependency (evmtcl vs evmctl) (bsc#1073466)
- Updated Patch annotation regarding their upstream state</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516881600">- support validating the IMA policy file signature, needed since Kernel 4.7
  * Adds 0552-98integrity-support-validating-the-IMA-policy-file-s.patch
- IMA: improve support for evm key loading (bsc#1077359, fate#323906)
  * Adds 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch
  * Adds 0554-98integrity-support-X.509-only-EVM-configuration.patch
- FIPS: Adjust dependencies to work for cryptsetup 2.0 (bsc#1077070)
- Added a few more patch annotations</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
</package>
<package pkgid="54b58c874268a2e7c71a88afa649093f514b1bc6b6b6c5b55591dce3f7ba2b50" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1516881600">- support validating the IMA policy file signature, needed since Kernel 4.7
  * Adds 0552-98integrity-support-validating-the-IMA-policy-file-s.patch
- IMA: improve support for evm key loading (bsc#1077359, fate#323906)
  * Adds 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch
  * Adds 0554-98integrity-support-X.509-only-EVM-configuration.patch
- FIPS: Adjust dependencies to work for cryptsetup 2.0 (bsc#1077070)
- Added a few more patch annotations</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
</package>
<package pkgid="cfe13d5cefdbdf37ac262256e1d41608dbc53d8db2e59e78b1573d4fc319813e" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.9.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
</package>
<package pkgid="f4980dcf66f9059b800cba4d24c57516d545544ebec04081db44a80053baf9ea" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.15.2" rel="lp150.2.3.1"/>
  <changelog author="ms@suse.de" date="1524744000">- Extend test-image-azure integration test
  Use xfs as filesystem and set a tag to also test image tags</changelog>
  <changelog author="ms@suse.de" date="1525089600">- Bump version: 9.14.5 ? 9.14.6</changelog>
  <changelog author="ms@suse.de" date="1525435200">- Fix setup of kiwi_lvm profile variable
  kiwi_lvm was always set to true if a volume management system
  is in use. However it should only be set to true if the
  selected volume management system is lvm. The same applies
  to the kiwi_lvmgroup variable which also only makes sense
  if the lvm volume management system is used.
  This Fixes bsc#1090427</changelog>
  <changelog author="ms@suse.de" date="1525435201">- Fixed check for volume group in use
  The former implementation evaluates the output of the vgs
  command and set the volume group as in use if one of the
  listed volume groups on the host contains the group name
  set by the image description. This would also match if the
  group name set in the image description is e.g 'System' and
  the a volume group on the host with name 'SystemVG' exists.
  However a conflict only exists on exact match of the name.
  The proposed fix is to use the --select feature from vgs
  and let it show information on exact match of the vg_name
  field. The code in kiwi then just evaluates if the selection
  by vgs has a value or not. This Fixes #721</changelog>
  <changelog author="dcassany@suse.com" date="1525435202">- Some simple code cleaning</changelog>
  <changelog author="ms@suse.de" date="1525435203">- Bump version: 9.14.6 ? 9.14.7</changelog>
  <changelog author="dcassany@suse.com" date="1525435204">- Add uninstall pacakges type
  This commit adds a new `uninstall` type for packages. Packages listed
  with this type will be removed by the package manager cleaning also any
  unneeded dependency. The removal is executed after running `config.sh`.
  Also in this commit `delete` type for packages is now executed after
  `uninstall` packages, meaing it also happens after `config.sh`.
  Fixes #625</changelog>
  <changelog author="dcassany@suse.com" date="1525694400">- Refining the uninstall type implementation</changelog>
  <changelog author="dcassany@suse.com" date="1525694401">- Add comment in pinch_system calls</changelog>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
</package>
<package pkgid="744c3a6cd62281cde9bd58ad9cdcd4259bd2de9c3cdad631df151359b460a4af" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.15.3" rel="lp150.2.6.1"/>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="dcassany@suse.com" date="1526299200">- Add additionaltags containerconfig attribute
  This commit adds `additionaltags` attribute, so multiple tags to
  a container image can be defined in a comma separated value.
  Fixes #713</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
  <changelog author="dcassany@suse.com" date="1527163200">- Do not delete uncompressed base docker images
  Fixes #739</changelog>
  <changelog author="ms@suse.de" date="1527508800">- Do not create static dev nodes in root init
  For compatibility reasons kiwi created a set of static device
  nodes when initializing a new image root system. With the
  presence of devtmpfs this should no longer be needed. In addition
  the static dev node setup now also causes problems on filesystems
  like btrfs which was the reason to delete this code now.
  This Fixes bsc#1087104</changelog>
  <changelog author="dcassany@suse.com" date="1527508801">- Add service dependencies in generators
  Correctly adding the initrd-root-fs.target service dependency to
  auto generated sysroot.mount for kiwi-live and kiwi-overlay dracut
  modules.
  Fixes #741</changelog>
  <changelog author="dcassany@suse.com" date="1527508802">- Verify file does not exist before creating symlink</changelog>
  <changelog author="ms@suse.de" date="1527508803">- Added support for config-cdroot archive
  The image description now allows an optional file named:
  config-cdroot.tar[.compression_postfix]. The file gets
  unpacked as user data for live and install ISO images.
  This allows users to add e.g license files or reference
  documentation to the ISO image. This Fixes #737</changelog>
  <changelog author="ms@suse.de" date="1527508804">- Added documentation for config-cdroot archive</changelog>
  <changelog author="ms@suse.de" date="1527508805">- Fix setup of LOADER_TYPE in sysconfig/bootloader
  LOADER_TYPE value for the grub2 bootloader depends on
  the use of EFI. This Fixes bsc#1094883</changelog>
  <changelog author="ms@suse.de" date="1527595200">- Bump version: 9.15.2 ? 9.15.3</changelog>
</package>
<package pkgid="1d7442669b19d389640156f7c2310e7ccf8e2dd02ea596826bdd5e918022bffd" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.16.18" rel="lp150.2.9.1"/>
  <changelog author="dcassany@suse.de" date="1537444800">- Adding bugfix trace for bsc#1108508
  bsc#1108508 ticket was fixed with bf556a96 and 77517cff commits. Just
  adding the ticket reference here.</changelog>
  <changelog author="ms@suse.de" date="1537531200">- Update kiwi tools README
  Delete obsolete entries for tools no longer present</changelog>
  <changelog author="ms@suse.de" date="1537790400">- Update docs for setting up development environment
  Reference py3.6 when showing example tox call. Also
  delete a py version reference where it was not needed</changelog>
  <changelog author="ms@suse.de" date="1537790401">- Include PDF build of documentation to the package
  Bundle a PDF version of the online documentation with the rpm package
  build. Due to the complexity of getting a latex build environment into
  the travis CI which does not take forever to install, the bundling of
  a built PDF into the pypi archive has been skipped. Users installing
  from pypi would need to install a latex env on their machine and
  run make latexpdf from the installed bundle.
  This Fixes #819</changelog>
  <changelog author="dcassany@suse.de" date="1537876800">- Make volume id customizable for installation ISOs
  This commit makes volid attribute also available for OEM images.
  The installation media makes use of the volid value. Only posix
  safe names are allowed, up to 32 characters.
  Fixes #811</changelog>
  <changelog author="ms@suse.de" date="1537963200">- Update development doc chapter per review by Tom</changelog>
  <changelog author="ms@suse.de" date="1537963201">- Customize latex output for look and feel</changelog>
  <changelog author="ms@suse.de" date="1537963202">- Bump version: 9.16.14 ? 9.16.15</changelog>
  <changelog author="ms@suse.de" date="1537963203">- Disable warnings report from pytest
  By default pytest now generates warnings for all modules
  used in the tox environment. This information is nice
  but taints the test output of the code of this project
  and is therefore unwanted.</changelog>
  <changelog author="ms@suse.de" date="1537963204">- Bump version: 9.16.15 ? 9.16.16</changelog>
  <changelog author="ms@suse.de" date="1537963205">- Fixup make build target
  Don't include auto generated schema docs into the source
  tarball. Also cleanup MANIFEST.in from files no longer
  present in the repository</changelog>
  <changelog author="ms@suse.de" date="1537963206">- Bump version: 9.16.16 ? 9.16.17</changelog>
  <changelog author="dcassany@suse.de" date="1537963207">- Create parent qgroup when snapper is present
  This commit creates a new parent quota group (1/0) of level 1 when
  btrfs_quota_groups is enabled and snapper present into the image
  root tree.
  Related to bsc#1093518 and #812</changelog>
  <changelog author="ms@suse.de" date="1537963208">- Bump version: 9.16.17 ? 9.16.18</changelog>
  <changelog author="ms@suse.de" date="1538049600">- Disable deploy stage in Travis</changelog>
  <changelog author="ms@suse.de" date="1538049601">- Disable version tagging in maintenance branch</changelog>
  <changelog author="ms@suse.de" date="1538049602">- Bugzilla reference commit
  This commit references the fix from commit:6b9e321048602945214
  with the bug id bsc#1109882 in bugzilla.</changelog>
  <changelog author="ms@suse.de" date="1538222400">- Fixed broken link to ec2uploadimg tool</changelog>
  <changelog author="ms@suse.de" date="1538740800">- Fixed URI handling with token query option
  So far only the query format ?credentials=... was supported.
  In case of ?random_token_data the returned uri was truncated
  and also the format check on the query caused a python trace.
  This Fixes #830 and Fixes #828</changelog>
  <changelog author="ms@suse.de" date="1539000000">- Adding bugfix trace for bsc#1110869
  bsc#1108508 ticket was fixed with request #831
  from SUSE/fix_uri_handler</changelog>
</package>
<package pkgid="641c6a37ac53dec44074ca571ca1910b6d4d1f61df89314b18d438ed77749334" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="9.15.2" rel="lp150.2.3.1"/>
  <changelog author="ms@suse.de" date="1524744000">- Extend test-image-azure integration test
  Use xfs as filesystem and set a tag to also test image tags</changelog>
  <changelog author="ms@suse.de" date="1525089600">- Bump version: 9.14.5 ? 9.14.6</changelog>
  <changelog author="ms@suse.de" date="1525435200">- Fix setup of kiwi_lvm profile variable
  kiwi_lvm was always set to true if a volume management system
  is in use. However it should only be set to true if the
  selected volume management system is lvm. The same applies
  to the kiwi_lvmgroup variable which also only makes sense
  if the lvm volume management system is used.
  This Fixes bsc#1090427</changelog>
  <changelog author="ms@suse.de" date="1525435201">- Fixed check for volume group in use
  The former implementation evaluates the output of the vgs
  command and set the volume group as in use if one of the
  listed volume groups on the host contains the group name
  set by the image description. This would also match if the
  group name set in the image description is e.g 'System' and
  the a volume group on the host with name 'SystemVG' exists.
  However a conflict only exists on exact match of the name.
  The proposed fix is to use the --select feature from vgs
  and let it show information on exact match of the vg_name
  field. The code in kiwi then just evaluates if the selection
  by vgs has a value or not. This Fixes #721</changelog>
  <changelog author="dcassany@suse.com" date="1525435202">- Some simple code cleaning</changelog>
  <changelog author="ms@suse.de" date="1525435203">- Bump version: 9.14.6 ? 9.14.7</changelog>
  <changelog author="dcassany@suse.com" date="1525435204">- Add uninstall pacakges type
  This commit adds a new `uninstall` type for packages. Packages listed
  with this type will be removed by the package manager cleaning also any
  unneeded dependency. The removal is executed after running `config.sh`.
  Also in this commit `delete` type for packages is now executed after
  `uninstall` packages, meaing it also happens after `config.sh`.
  Fixes #625</changelog>
  <changelog author="dcassany@suse.com" date="1525694400">- Refining the uninstall type implementation</changelog>
  <changelog author="dcassany@suse.com" date="1525694401">- Add comment in pinch_system calls</changelog>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
</package>
<package pkgid="c5edc2107d761c364cf8bc74e0b3fa966811ef2210f35dd3cd34b65250decf6d" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="9.15.3" rel="lp150.2.6.1"/>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="dcassany@suse.com" date="1526299200">- Add additionaltags containerconfig attribute
  This commit adds `additionaltags` attribute, so multiple tags to
  a container image can be defined in a comma separated value.
  Fixes #713</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
  <changelog author="dcassany@suse.com" date="1527163200">- Do not delete uncompressed base docker images
  Fixes #739</changelog>
  <changelog author="ms@suse.de" date="1527508800">- Do not create static dev nodes in root init
  For compatibility reasons kiwi created a set of static device
  nodes when initializing a new image root system. With the
  presence of devtmpfs this should no longer be needed. In addition
  the static dev node setup now also causes problems on filesystems
  like btrfs which was the reason to delete this code now.
  This Fixes bsc#1087104</changelog>
  <changelog author="dcassany@suse.com" date="1527508801">- Add service dependencies in generators
  Correctly adding the initrd-root-fs.target service dependency to
  auto generated sysroot.mount for kiwi-live and kiwi-overlay dracut
  modules.
  Fixes #741</changelog>
  <changelog author="dcassany@suse.com" date="1527508802">- Verify file does not exist before creating symlink</changelog>
  <changelog author="ms@suse.de" date="1527508803">- Added support for config-cdroot archive
  The image description now allows an optional file named:
  config-cdroot.tar[.compression_postfix]. The file gets
  unpacked as user data for live and install ISO images.
  This allows users to add e.g license files or reference
  documentation to the ISO image. This Fixes #737</changelog>
  <changelog author="ms@suse.de" date="1527508804">- Added documentation for config-cdroot archive</changelog>
  <changelog author="ms@suse.de" date="1527508805">- Fix setup of LOADER_TYPE in sysconfig/bootloader
  LOADER_TYPE value for the grub2 bootloader depends on
  the use of EFI. This Fixes bsc#1094883</changelog>
  <changelog author="ms@suse.de" date="1527595200">- Bump version: 9.15.2 ? 9.15.3</changelog>
</package>
<package pkgid="15e2b937649029acb3462500f6ac8b201042ac31da4d30cecf628378900fc976" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="9.16.18" rel="lp150.2.9.1"/>
  <changelog author="dcassany@suse.de" date="1537444800">- Adding bugfix trace for bsc#1108508
  bsc#1108508 ticket was fixed with bf556a96 and 77517cff commits. Just
  adding the ticket reference here.</changelog>
  <changelog author="ms@suse.de" date="1537531200">- Update kiwi tools README
  Delete obsolete entries for tools no longer present</changelog>
  <changelog author="ms@suse.de" date="1537790400">- Update docs for setting up development environment
  Reference py3.6 when showing example tox call. Also
  delete a py version reference where it was not needed</changelog>
  <changelog author="ms@suse.de" date="1537790401">- Include PDF build of documentation to the package
  Bundle a PDF version of the online documentation with the rpm package
  build. Due to the complexity of getting a latex build environment into
  the travis CI which does not take forever to install, the bundling of
  a built PDF into the pypi archive has been skipped. Users installing
  from pypi would need to install a latex env on their machine and
  run make latexpdf from the installed bundle.
  This Fixes #819</changelog>
  <changelog author="dcassany@suse.de" date="1537876800">- Make volume id customizable for installation ISOs
  This commit makes volid attribute also available for OEM images.
  The installation media makes use of the volid value. Only posix
  safe names are allowed, up to 32 characters.
  Fixes #811</changelog>
  <changelog author="ms@suse.de" date="1537963200">- Update development doc chapter per review by Tom</changelog>
  <changelog author="ms@suse.de" date="1537963201">- Customize latex output for look and feel</changelog>
  <changelog author="ms@suse.de" date="1537963202">- Bump version: 9.16.14 ? 9.16.15</changelog>
  <changelog author="ms@suse.de" date="1537963203">- Disable warnings report from pytest
  By default pytest now generates warnings for all modules
  used in the tox environment. This information is nice
  but taints the test output of the code of this project
  and is therefore unwanted.</changelog>
  <changelog author="ms@suse.de" date="1537963204">- Bump version: 9.16.15 ? 9.16.16</changelog>
  <changelog author="ms@suse.de" date="1537963205">- Fixup make build target
  Don't include auto generated schema docs into the source
  tarball. Also cleanup MANIFEST.in from files no longer
  present in the repository</changelog>
  <changelog author="ms@suse.de" date="1537963206">- Bump version: 9.16.16 ? 9.16.17</changelog>
  <changelog author="dcassany@suse.de" date="1537963207">- Create parent qgroup when snapper is present
  This commit creates a new parent quota group (1/0) of level 1 when
  btrfs_quota_groups is enabled and snapper present into the image
  root tree.
  Related to bsc#1093518 and #812</changelog>
  <changelog author="ms@suse.de" date="1537963208">- Bump version: 9.16.17 ? 9.16.18</changelog>
  <changelog author="ms@suse.de" date="1538049600">- Disable deploy stage in Travis</changelog>
  <changelog author="ms@suse.de" date="1538049601">- Disable version tagging in maintenance branch</changelog>
  <changelog author="ms@suse.de" date="1538049602">- Bugzilla reference commit
  This commit references the fix from commit:6b9e321048602945214
  with the bug id bsc#1109882 in bugzilla.</changelog>
  <changelog author="ms@suse.de" date="1538222400">- Fixed broken link to ec2uploadimg tool</changelog>
  <changelog author="ms@suse.de" date="1538740800">- Fixed URI handling with token query option
  So far only the query format ?credentials=... was supported.
  In case of ?random_token_data the returned uri was truncated
  and also the format check on the query caused a python trace.
  This Fixes #830 and Fixes #828</changelog>
  <changelog author="ms@suse.de" date="1539000000">- Adding bugfix trace for bsc#1110869
  bsc#1108508 ticket was fixed with request #831
  from SUSE/fix_uri_handler</changelog>
</package>
<package pkgid="7624e62cd7131639b819225ed6906520151c1d36be134228604929b39888fec9" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.15.2" rel="lp150.2.3.1"/>
  <changelog author="ms@suse.de" date="1524744000">- Extend test-image-azure integration test
  Use xfs as filesystem and set a tag to also test image tags</changelog>
  <changelog author="ms@suse.de" date="1525089600">- Bump version: 9.14.5 ? 9.14.6</changelog>
  <changelog author="ms@suse.de" date="1525435200">- Fix setup of kiwi_lvm profile variable
  kiwi_lvm was always set to true if a volume management system
  is in use. However it should only be set to true if the
  selected volume management system is lvm. The same applies
  to the kiwi_lvmgroup variable which also only makes sense
  if the lvm volume management system is used.
  This Fixes bsc#1090427</changelog>
  <changelog author="ms@suse.de" date="1525435201">- Fixed check for volume group in use
  The former implementation evaluates the output of the vgs
  command and set the volume group as in use if one of the
  listed volume groups on the host contains the group name
  set by the image description. This would also match if the
  group name set in the image description is e.g 'System' and
  the a volume group on the host with name 'SystemVG' exists.
  However a conflict only exists on exact match of the name.
  The proposed fix is to use the --select feature from vgs
  and let it show information on exact match of the vg_name
  field. The code in kiwi then just evaluates if the selection
  by vgs has a value or not. This Fixes #721</changelog>
  <changelog author="dcassany@suse.com" date="1525435202">- Some simple code cleaning</changelog>
  <changelog author="ms@suse.de" date="1525435203">- Bump version: 9.14.6 ? 9.14.7</changelog>
  <changelog author="dcassany@suse.com" date="1525435204">- Add uninstall pacakges type
  This commit adds a new `uninstall` type for packages. Packages listed
  with this type will be removed by the package manager cleaning also any
  unneeded dependency. The removal is executed after running `config.sh`.
  Also in this commit `delete` type for packages is now executed after
  `uninstall` packages, meaing it also happens after `config.sh`.
  Fixes #625</changelog>
  <changelog author="dcassany@suse.com" date="1525694400">- Refining the uninstall type implementation</changelog>
  <changelog author="dcassany@suse.com" date="1525694401">- Add comment in pinch_system calls</changelog>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
</package>
<package pkgid="bada34f8a4745a2ba88aa1aaa1c9014779f9f23312553a3a8d290042c9ad29a2" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.15.3" rel="lp150.2.6.1"/>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="dcassany@suse.com" date="1526299200">- Add additionaltags containerconfig attribute
  This commit adds `additionaltags` attribute, so multiple tags to
  a container image can be defined in a comma separated value.
  Fixes #713</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
  <changelog author="dcassany@suse.com" date="1527163200">- Do not delete uncompressed base docker images
  Fixes #739</changelog>
  <changelog author="ms@suse.de" date="1527508800">- Do not create static dev nodes in root init
  For compatibility reasons kiwi created a set of static device
  nodes when initializing a new image root system. With the
  presence of devtmpfs this should no longer be needed. In addition
  the static dev node setup now also causes problems on filesystems
  like btrfs which was the reason to delete this code now.
  This Fixes bsc#1087104</changelog>
  <changelog author="dcassany@suse.com" date="1527508801">- Add service dependencies in generators
  Correctly adding the initrd-root-fs.target service dependency to
  auto generated sysroot.mount for kiwi-live and kiwi-overlay dracut
  modules.
  Fixes #741</changelog>
  <changelog author="dcassany@suse.com" date="1527508802">- Verify file does not exist before creating symlink</changelog>
  <changelog author="ms@suse.de" date="1527508803">- Added support for config-cdroot archive
  The image description now allows an optional file named:
  config-cdroot.tar[.compression_postfix]. The file gets
  unpacked as user data for live and install ISO images.
  This allows users to add e.g license files or reference
  documentation to the ISO image. This Fixes #737</changelog>
  <changelog author="ms@suse.de" date="1527508804">- Added documentation for config-cdroot archive</changelog>
  <changelog author="ms@suse.de" date="1527508805">- Fix setup of LOADER_TYPE in sysconfig/bootloader
  LOADER_TYPE value for the grub2 bootloader depends on
  the use of EFI. This Fixes bsc#1094883</changelog>
  <changelog author="ms@suse.de" date="1527595200">- Bump version: 9.15.2 ? 9.15.3</changelog>
</package>
<package pkgid="245a436ea9a201ef5738836555f200954a5002d93073c417e5de2edd28960393" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.16.18" rel="lp150.2.9.1"/>
  <changelog author="dcassany@suse.de" date="1537444800">- Adding bugfix trace for bsc#1108508
  bsc#1108508 ticket was fixed with bf556a96 and 77517cff commits. Just
  adding the ticket reference here.</changelog>
  <changelog author="ms@suse.de" date="1537531200">- Update kiwi tools README
  Delete obsolete entries for tools no longer present</changelog>
  <changelog author="ms@suse.de" date="1537790400">- Update docs for setting up development environment
  Reference py3.6 when showing example tox call. Also
  delete a py version reference where it was not needed</changelog>
  <changelog author="ms@suse.de" date="1537790401">- Include PDF build of documentation to the package
  Bundle a PDF version of the online documentation with the rpm package
  build. Due to the complexity of getting a latex build environment into
  the travis CI which does not take forever to install, the bundling of
  a built PDF into the pypi archive has been skipped. Users installing
  from pypi would need to install a latex env on their machine and
  run make latexpdf from the installed bundle.
  This Fixes #819</changelog>
  <changelog author="dcassany@suse.de" date="1537876800">- Make volume id customizable for installation ISOs
  This commit makes volid attribute also available for OEM images.
  The installation media makes use of the volid value. Only posix
  safe names are allowed, up to 32 characters.
  Fixes #811</changelog>
  <changelog author="ms@suse.de" date="1537963200">- Update development doc chapter per review by Tom</changelog>
  <changelog author="ms@suse.de" date="1537963201">- Customize latex output for look and feel</changelog>
  <changelog author="ms@suse.de" date="1537963202">- Bump version: 9.16.14 ? 9.16.15</changelog>
  <changelog author="ms@suse.de" date="1537963203">- Disable warnings report from pytest
  By default pytest now generates warnings for all modules
  used in the tox environment. This information is nice
  but taints the test output of the code of this project
  and is therefore unwanted.</changelog>
  <changelog author="ms@suse.de" date="1537963204">- Bump version: 9.16.15 ? 9.16.16</changelog>
  <changelog author="ms@suse.de" date="1537963205">- Fixup make build target
  Don't include auto generated schema docs into the source
  tarball. Also cleanup MANIFEST.in from files no longer
  present in the repository</changelog>
  <changelog author="ms@suse.de" date="1537963206">- Bump version: 9.16.16 ? 9.16.17</changelog>
  <changelog author="dcassany@suse.de" date="1537963207">- Create parent qgroup when snapper is present
  This commit creates a new parent quota group (1/0) of level 1 when
  btrfs_quota_groups is enabled and snapper present into the image
  root tree.
  Related to bsc#1093518 and #812</changelog>
  <changelog author="ms@suse.de" date="1537963208">- Bump version: 9.16.17 ? 9.16.18</changelog>
  <changelog author="ms@suse.de" date="1538049600">- Disable deploy stage in Travis</changelog>
  <changelog author="ms@suse.de" date="1538049601">- Disable version tagging in maintenance branch</changelog>
  <changelog author="ms@suse.de" date="1538049602">- Bugzilla reference commit
  This commit references the fix from commit:6b9e321048602945214
  with the bug id bsc#1109882 in bugzilla.</changelog>
  <changelog author="ms@suse.de" date="1538222400">- Fixed broken link to ec2uploadimg tool</changelog>
  <changelog author="ms@suse.de" date="1538740800">- Fixed URI handling with token query option
  So far only the query format ?credentials=... was supported.
  In case of ?random_token_data the returned uri was truncated
  and also the format check on the query caused a python trace.
  This Fixes #830 and Fixes #828</changelog>
  <changelog author="ms@suse.de" date="1539000000">- Adding bugfix trace for bsc#1110869
  bsc#1108508 ticket was fixed with request #831
  from SUSE/fix_uri_handler</changelog>
</package>
<package pkgid="1eab22d88156fc1fc0613281539a8b72eda897155d08b7f6cf99b992de40bce2" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.15.2" rel="lp150.2.3.1"/>
  <changelog author="ms@suse.de" date="1524744000">- Extend test-image-azure integration test
  Use xfs as filesystem and set a tag to also test image tags</changelog>
  <changelog author="ms@suse.de" date="1525089600">- Bump version: 9.14.5 ? 9.14.6</changelog>
  <changelog author="ms@suse.de" date="1525435200">- Fix setup of kiwi_lvm profile variable
  kiwi_lvm was always set to true if a volume management system
  is in use. However it should only be set to true if the
  selected volume management system is lvm. The same applies
  to the kiwi_lvmgroup variable which also only makes sense
  if the lvm volume management system is used.
  This Fixes bsc#1090427</changelog>
  <changelog author="ms@suse.de" date="1525435201">- Fixed check for volume group in use
  The former implementation evaluates the output of the vgs
  command and set the volume group as in use if one of the
  listed volume groups on the host contains the group name
  set by the image description. This would also match if the
  group name set in the image description is e.g 'System' and
  the a volume group on the host with name 'SystemVG' exists.
  However a conflict only exists on exact match of the name.
  The proposed fix is to use the --select feature from vgs
  and let it show information on exact match of the vg_name
  field. The code in kiwi then just evaluates if the selection
  by vgs has a value or not. This Fixes #721</changelog>
  <changelog author="dcassany@suse.com" date="1525435202">- Some simple code cleaning</changelog>
  <changelog author="ms@suse.de" date="1525435203">- Bump version: 9.14.6 ? 9.14.7</changelog>
  <changelog author="dcassany@suse.com" date="1525435204">- Add uninstall pacakges type
  This commit adds a new `uninstall` type for packages. Packages listed
  with this type will be removed by the package manager cleaning also any
  unneeded dependency. The removal is executed after running `config.sh`.
  Also in this commit `delete` type for packages is now executed after
  `uninstall` packages, meaing it also happens after `config.sh`.
  Fixes #625</changelog>
  <changelog author="dcassany@suse.com" date="1525694400">- Refining the uninstall type implementation</changelog>
  <changelog author="dcassany@suse.com" date="1525694401">- Add comment in pinch_system calls</changelog>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
</package>
<package pkgid="6635312e30ab1344eae839f72bcd510a58a361e16c39353b5452efa18a24997a" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.15.3" rel="lp150.2.6.1"/>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="dcassany@suse.com" date="1526299200">- Add additionaltags containerconfig attribute
  This commit adds `additionaltags` attribute, so multiple tags to
  a container image can be defined in a comma separated value.
  Fixes #713</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
  <changelog author="dcassany@suse.com" date="1527163200">- Do not delete uncompressed base docker images
  Fixes #739</changelog>
  <changelog author="ms@suse.de" date="1527508800">- Do not create static dev nodes in root init
  For compatibility reasons kiwi created a set of static device
  nodes when initializing a new image root system. With the
  presence of devtmpfs this should no longer be needed. In addition
  the static dev node setup now also causes problems on filesystems
  like btrfs which was the reason to delete this code now.
  This Fixes bsc#1087104</changelog>
  <changelog author="dcassany@suse.com" date="1527508801">- Add service dependencies in generators
  Correctly adding the initrd-root-fs.target service dependency to
  auto generated sysroot.mount for kiwi-live and kiwi-overlay dracut
  modules.
  Fixes #741</changelog>
  <changelog author="dcassany@suse.com" date="1527508802">- Verify file does not exist before creating symlink</changelog>
  <changelog author="ms@suse.de" date="1527508803">- Added support for config-cdroot archive
  The image description now allows an optional file named:
  config-cdroot.tar[.compression_postfix]. The file gets
  unpacked as user data for live and install ISO images.
  This allows users to add e.g license files or reference
  documentation to the ISO image. This Fixes #737</changelog>
  <changelog author="ms@suse.de" date="1527508804">- Added documentation for config-cdroot archive</changelog>
  <changelog author="ms@suse.de" date="1527508805">- Fix setup of LOADER_TYPE in sysconfig/bootloader
  LOADER_TYPE value for the grub2 bootloader depends on
  the use of EFI. This Fixes bsc#1094883</changelog>
  <changelog author="ms@suse.de" date="1527595200">- Bump version: 9.15.2 ? 9.15.3</changelog>
</package>
<package pkgid="fe77663e4073fb6cfe44af01e79aca261c7ab26dd73bb6efad5b9a787d2e50bd" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.16.18" rel="lp150.2.9.1"/>
  <changelog author="dcassany@suse.de" date="1537444800">- Adding bugfix trace for bsc#1108508
  bsc#1108508 ticket was fixed with bf556a96 and 77517cff commits. Just
  adding the ticket reference here.</changelog>
  <changelog author="ms@suse.de" date="1537531200">- Update kiwi tools README
  Delete obsolete entries for tools no longer present</changelog>
  <changelog author="ms@suse.de" date="1537790400">- Update docs for setting up development environment
  Reference py3.6 when showing example tox call. Also
  delete a py version reference where it was not needed</changelog>
  <changelog author="ms@suse.de" date="1537790401">- Include PDF build of documentation to the package
  Bundle a PDF version of the online documentation with the rpm package
  build. Due to the complexity of getting a latex build environment into
  the travis CI which does not take forever to install, the bundling of
  a built PDF into the pypi archive has been skipped. Users installing
  from pypi would need to install a latex env on their machine and
  run make latexpdf from the installed bundle.
  This Fixes #819</changelog>
  <changelog author="dcassany@suse.de" date="1537876800">- Make volume id customizable for installation ISOs
  This commit makes volid attribute also available for OEM images.
  The installation media makes use of the volid value. Only posix
  safe names are allowed, up to 32 characters.
  Fixes #811</changelog>
  <changelog author="ms@suse.de" date="1537963200">- Update development doc chapter per review by Tom</changelog>
  <changelog author="ms@suse.de" date="1537963201">- Customize latex output for look and feel</changelog>
  <changelog author="ms@suse.de" date="1537963202">- Bump version: 9.16.14 ? 9.16.15</changelog>
  <changelog author="ms@suse.de" date="1537963203">- Disable warnings report from pytest
  By default pytest now generates warnings for all modules
  used in the tox environment. This information is nice
  but taints the test output of the code of this project
  and is therefore unwanted.</changelog>
  <changelog author="ms@suse.de" date="1537963204">- Bump version: 9.16.15 ? 9.16.16</changelog>
  <changelog author="ms@suse.de" date="1537963205">- Fixup make build target
  Don't include auto generated schema docs into the source
  tarball. Also cleanup MANIFEST.in from files no longer
  present in the repository</changelog>
  <changelog author="ms@suse.de" date="1537963206">- Bump version: 9.16.16 ? 9.16.17</changelog>
  <changelog author="dcassany@suse.de" date="1537963207">- Create parent qgroup when snapper is present
  This commit creates a new parent quota group (1/0) of level 1 when
  btrfs_quota_groups is enabled and snapper present into the image
  root tree.
  Related to bsc#1093518 and #812</changelog>
  <changelog author="ms@suse.de" date="1537963208">- Bump version: 9.16.17 ? 9.16.18</changelog>
  <changelog author="ms@suse.de" date="1538049600">- Disable deploy stage in Travis</changelog>
  <changelog author="ms@suse.de" date="1538049601">- Disable version tagging in maintenance branch</changelog>
  <changelog author="ms@suse.de" date="1538049602">- Bugzilla reference commit
  This commit references the fix from commit:6b9e321048602945214
  with the bug id bsc#1109882 in bugzilla.</changelog>
  <changelog author="ms@suse.de" date="1538222400">- Fixed broken link to ec2uploadimg tool</changelog>
  <changelog author="ms@suse.de" date="1538740800">- Fixed URI handling with token query option
  So far only the query format ?credentials=... was supported.
  In case of ?random_token_data the returned uri was truncated
  and also the format check on the query caused a python trace.
  This Fixes #830 and Fixes #828</changelog>
  <changelog author="ms@suse.de" date="1539000000">- Adding bugfix trace for bsc#1110869
  bsc#1108508 ticket was fixed with request #831
  from SUSE/fix_uri_handler</changelog>
</package>
<package pkgid="648c07660d181b55cbbd4cc8e8f3ee7812149a325e5f803a585d38fe6ecbdbd6" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="9.15.2" rel="lp150.2.3.1"/>
  <changelog author="ms@suse.de" date="1524744000">- Extend test-image-azure integration test
  Use xfs as filesystem and set a tag to also test image tags</changelog>
  <changelog author="ms@suse.de" date="1525089600">- Bump version: 9.14.5 ? 9.14.6</changelog>
  <changelog author="ms@suse.de" date="1525435200">- Fix setup of kiwi_lvm profile variable
  kiwi_lvm was always set to true if a volume management system
  is in use. However it should only be set to true if the
  selected volume management system is lvm. The same applies
  to the kiwi_lvmgroup variable which also only makes sense
  if the lvm volume management system is used.
  This Fixes bsc#1090427</changelog>
  <changelog author="ms@suse.de" date="1525435201">- Fixed check for volume group in use
  The former implementation evaluates the output of the vgs
  command and set the volume group as in use if one of the
  listed volume groups on the host contains the group name
  set by the image description. This would also match if the
  group name set in the image description is e.g 'System' and
  the a volume group on the host with name 'SystemVG' exists.
  However a conflict only exists on exact match of the name.
  The proposed fix is to use the --select feature from vgs
  and let it show information on exact match of the vg_name
  field. The code in kiwi then just evaluates if the selection
  by vgs has a value or not. This Fixes #721</changelog>
  <changelog author="dcassany@suse.com" date="1525435202">- Some simple code cleaning</changelog>
  <changelog author="ms@suse.de" date="1525435203">- Bump version: 9.14.6 ? 9.14.7</changelog>
  <changelog author="dcassany@suse.com" date="1525435204">- Add uninstall pacakges type
  This commit adds a new `uninstall` type for packages. Packages listed
  with this type will be removed by the package manager cleaning also any
  unneeded dependency. The removal is executed after running `config.sh`.
  Also in this commit `delete` type for packages is now executed after
  `uninstall` packages, meaing it also happens after `config.sh`.
  Fixes #625</changelog>
  <changelog author="dcassany@suse.com" date="1525694400">- Refining the uninstall type implementation</changelog>
  <changelog author="dcassany@suse.com" date="1525694401">- Add comment in pinch_system calls</changelog>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
</package>
<package pkgid="8b196af6f46cf5dcbd6fbde00ad09a508a85a0a8600a248c988b044eb6c927c1" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="9.15.3" rel="lp150.2.6.1"/>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="dcassany@suse.com" date="1526299200">- Add additionaltags containerconfig attribute
  This commit adds `additionaltags` attribute, so multiple tags to
  a container image can be defined in a comma separated value.
  Fixes #713</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
  <changelog author="dcassany@suse.com" date="1527163200">- Do not delete uncompressed base docker images
  Fixes #739</changelog>
  <changelog author="ms@suse.de" date="1527508800">- Do not create static dev nodes in root init
  For compatibility reasons kiwi created a set of static device
  nodes when initializing a new image root system. With the
  presence of devtmpfs this should no longer be needed. In addition
  the static dev node setup now also causes problems on filesystems
  like btrfs which was the reason to delete this code now.
  This Fixes bsc#1087104</changelog>
  <changelog author="dcassany@suse.com" date="1527508801">- Add service dependencies in generators
  Correctly adding the initrd-root-fs.target service dependency to
  auto generated sysroot.mount for kiwi-live and kiwi-overlay dracut
  modules.
  Fixes #741</changelog>
  <changelog author="dcassany@suse.com" date="1527508802">- Verify file does not exist before creating symlink</changelog>
  <changelog author="ms@suse.de" date="1527508803">- Added support for config-cdroot archive
  The image description now allows an optional file named:
  config-cdroot.tar[.compression_postfix]. The file gets
  unpacked as user data for live and install ISO images.
  This allows users to add e.g license files or reference
  documentation to the ISO image. This Fixes #737</changelog>
  <changelog author="ms@suse.de" date="1527508804">- Added documentation for config-cdroot archive</changelog>
  <changelog author="ms@suse.de" date="1527508805">- Fix setup of LOADER_TYPE in sysconfig/bootloader
  LOADER_TYPE value for the grub2 bootloader depends on
  the use of EFI. This Fixes bsc#1094883</changelog>
  <changelog author="ms@suse.de" date="1527595200">- Bump version: 9.15.2 ? 9.15.3</changelog>
</package>
<package pkgid="453b8719660f5bdc7202fc5fba1bcd1cbfa7283d4d483b59bd0daaf5fb4c9d1d" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="9.16.18" rel="lp150.2.9.1"/>
  <changelog author="dcassany@suse.de" date="1537444800">- Adding bugfix trace for bsc#1108508
  bsc#1108508 ticket was fixed with bf556a96 and 77517cff commits. Just
  adding the ticket reference here.</changelog>
  <changelog author="ms@suse.de" date="1537531200">- Update kiwi tools README
  Delete obsolete entries for tools no longer present</changelog>
  <changelog author="ms@suse.de" date="1537790400">- Update docs for setting up development environment
  Reference py3.6 when showing example tox call. Also
  delete a py version reference where it was not needed</changelog>
  <changelog author="ms@suse.de" date="1537790401">- Include PDF build of documentation to the package
  Bundle a PDF version of the online documentation with the rpm package
  build. Due to the complexity of getting a latex build environment into
  the travis CI which does not take forever to install, the bundling of
  a built PDF into the pypi archive has been skipped. Users installing
  from pypi would need to install a latex env on their machine and
  run make latexpdf from the installed bundle.
  This Fixes #819</changelog>
  <changelog author="dcassany@suse.de" date="1537876800">- Make volume id customizable for installation ISOs
  This commit makes volid attribute also available for OEM images.
  The installation media makes use of the volid value. Only posix
  safe names are allowed, up to 32 characters.
  Fixes #811</changelog>
  <changelog author="ms@suse.de" date="1537963200">- Update development doc chapter per review by Tom</changelog>
  <changelog author="ms@suse.de" date="1537963201">- Customize latex output for look and feel</changelog>
  <changelog author="ms@suse.de" date="1537963202">- Bump version: 9.16.14 ? 9.16.15</changelog>
  <changelog author="ms@suse.de" date="1537963203">- Disable warnings report from pytest
  By default pytest now generates warnings for all modules
  used in the tox environment. This information is nice
  but taints the test output of the code of this project
  and is therefore unwanted.</changelog>
  <changelog author="ms@suse.de" date="1537963204">- Bump version: 9.16.15 ? 9.16.16</changelog>
  <changelog author="ms@suse.de" date="1537963205">- Fixup make build target
  Don't include auto generated schema docs into the source
  tarball. Also cleanup MANIFEST.in from files no longer
  present in the repository</changelog>
  <changelog author="ms@suse.de" date="1537963206">- Bump version: 9.16.16 ? 9.16.17</changelog>
  <changelog author="dcassany@suse.de" date="1537963207">- Create parent qgroup when snapper is present
  This commit creates a new parent quota group (1/0) of level 1 when
  btrfs_quota_groups is enabled and snapper present into the image
  root tree.
  Related to bsc#1093518 and #812</changelog>
  <changelog author="ms@suse.de" date="1537963208">- Bump version: 9.16.17 ? 9.16.18</changelog>
  <changelog author="ms@suse.de" date="1538049600">- Disable deploy stage in Travis</changelog>
  <changelog author="ms@suse.de" date="1538049601">- Disable version tagging in maintenance branch</changelog>
  <changelog author="ms@suse.de" date="1538049602">- Bugzilla reference commit
  This commit references the fix from commit:6b9e321048602945214
  with the bug id bsc#1109882 in bugzilla.</changelog>
  <changelog author="ms@suse.de" date="1538222400">- Fixed broken link to ec2uploadimg tool</changelog>
  <changelog author="ms@suse.de" date="1538740800">- Fixed URI handling with token query option
  So far only the query format ?credentials=... was supported.
  In case of ?random_token_data the returned uri was truncated
  and also the format check on the query caused a python trace.
  This Fixes #830 and Fixes #828</changelog>
  <changelog author="ms@suse.de" date="1539000000">- Adding bugfix trace for bsc#1110869
  bsc#1108508 ticket was fixed with request #831
  from SUSE/fix_uri_handler</changelog>
</package>
<package pkgid="525b5ee4f5dd902537e85d61d74f762b589068693a11ef59d9e9d13467360bfb" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1513339200">- Switch back to fipvlan for bnx2fc (bsc#1052840)
  * adds 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch
- 95fcoe: Allow bnc2x driver more time to complete DCB negotiation (bsc#1052840)
  * adds 0549-fcoe-up-Increase-sleeptime-to-13s.patch
- 95fcoe: add timeout initqueue entries (bsc#1052840)
  * adds 0550-95fcoe-add-timeout-initqueue-entries.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1515499200">- dracut-ima requires evmctl and keyutils (bsc#1073466)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1515585600">- FIPS: Try to fetch list of fips modules from the kernel's modules dir (bsc#1074984)
  * Adds 0551-fips-use-lib-modules-uname-r-modules.fips.patch
- Annotated patches regarding their upstream state</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- Fix typo for ima dependency (evmtcl vs evmctl) (bsc#1073466)
- Updated Patch annotation regarding their upstream state</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516881600">- support validating the IMA policy file signature, needed since Kernel 4.7
  * Adds 0552-98integrity-support-validating-the-IMA-policy-file-s.patch
- IMA: improve support for evm key loading (bsc#1077359, fate#323906)
  * Adds 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch
  * Adds 0554-98integrity-support-X.509-only-EVM-configuration.patch
- FIPS: Adjust dependencies to work for cryptsetup 2.0 (bsc#1077070)
- Added a few more patch annotations</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
</package>
<package pkgid="cac4603c5dbb8623585f070817ed683cff11a5f0e10549e885e1f9eab712fd13" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1516881600">- support validating the IMA policy file signature, needed since Kernel 4.7
  * Adds 0552-98integrity-support-validating-the-IMA-policy-file-s.patch
- IMA: improve support for evm key loading (bsc#1077359, fate#323906)
  * Adds 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch
  * Adds 0554-98integrity-support-X.509-only-EVM-configuration.patch
- FIPS: Adjust dependencies to work for cryptsetup 2.0 (bsc#1077070)
- Added a few more patch annotations</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
</package>
<package pkgid="7b4dc0a02870cab372dfb4d53f14ecbb46516e0678e16a6e3630a408ee3b8be0" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.9.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
</package>
<package pkgid="bb9fffa35db70167981299d8dff3a0b29dab0e9f1368d6e55f5bc1f0ceca528f" name="drbd" arch="src">
  <version epoch="0" ver="9.0.13+git.b83ade31" rel="lp150.2.2.1"/>
  <changelog author="nwang@suse.com" date="1460116800">- Compat with kernel 4.5
- Add patch kernel-4.5-compat.patch</changelog>
  <changelog author="nwang@suse.com" date="1465387200">- bsc#983633, upgrade to ver9.0.2 to build against kernel 4.6/4.7
- Add patch compat-4.7-9902af79-i_mutex.patch
- Add patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
- Add patch compat-4.7-50225243-kill-nla_put_u64.patch
- Add patch compat-4.7-1dee3f59-align-nla-u64.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310400">- Upgrade 9.0.2 to 9.0.5
- Remove patch compat-4.7-9902af79-i_mutex.patch
  Remove patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
  Remove patch compat-4.7-50225243-kill-nla_put_u64.patch
  Remove patch compat-4.7-1dee3f59-align-nla-u64.patch
  Remove patch drbd-buildcompare.patch
  Remove patch kernel-4.5-compat.patch
  Remove patch temp.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310401">- bsc#1006176, compat with kernel 4.8 with 9.0.5</changelog>
  <changelog author="lpechacek@suse.com" date="1479556800">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="lpechacek@suse.com" date="1480075200">- Excluded openSUSE from RT KMP build (bsc#1005578)</changelog>
  <changelog author="nwang@suse.com" date="1487246400">- bsc#1025585, upgrade to 9.0.6</changelog>
  <changelog author="hare@suse.de" date="1488801600">- Compability fixes for SLE12 SP3 (bsc#993388, FATE#321732)
- Add patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- Add reproducible.patch to sort file lists (boo#1041090)
  and to override build date (boo#1047218) to fix build-compare</changelog>
  <changelog author="nwang@suse.com" date="1507291200">- bsc#1061981, update to 9.0.9
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Modify reproducible.patch since part of the patch is merged</changelog>
  <changelog author="nwang@suse.com" date="1507723200">- bsc#1062749, disable buildrt against SLE15 x86_64 temporarily.
  This change will be removed when rt is ready.</changelog>
  <changelog author="nwang@suse.com" date="1510920000">- bsc#1068587, add build request libelf-devel to build.</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.0.10-1
  * Fix resync of two secondary nodes in the presence of
  a 3rd node that is primary (maybe with disk or diskless);
  Fixed the race condition that caused the resync to sometimes not terminate
  * Improve connection behavior with autopromote enable one node Primary and
  udev present.
  * Fix in memory alignment of DRBD's struct bio.
  * Improve the quorum implementation, so that is works nicely with for the
  purpose of replacing fencing with quorum in a Pacemaker setup.
  * Ensure compatibility with upstream Linux kernel 4.14
- Remove patch reproducible.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077318, Update to 9.0.12
  * Fix a race condition in the device_open code path that can cause an
  internal counter to go negative
- Update to 9.0.11
  * Fix bug in compat code: Without this fix large bios are not split.</changelog>
  <changelog author="nwang@suse.com" date="1518350400">- bsc#1080458, enable build with kernel-rt on x86_64.
- bsc#1080459, support build against 4.15.0.
  setup_timer() change to timer_setup()
- Add patch support-timer-setup.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.0.13-1
  * abort a resync if a resync source becomes weakly and the sync
  targetis a neighbor of the primary
  * fix UUID handling with multiple diskless nodes
  * When a data-set gets into contact with an all diskless cluster,
  make sure to either set it to "Consistent" or reject the attach
  * correctly handle when a node that was marked as intentional
  diskless should get a disk
  * fix outdating of weakly connected nodes
  * made returning from Ahead to SyncSource more reliable
  * fix a hard to trigger deadlock in the receiver
  * fix online resize in the presence of two or more diskless nodes
  * fix online add of volumes to diskless nodes when it already has
  established connections
  * Set the SO_KEEPALIVE socket option on data sockets
  * automatically solve a specific split brain when quorum is enabled
  * Compat: Added support for kernels up to v4.15.x
  * new wire packet P_ZEROES a cousin of P_DISCARD, following the
  kernel as it introduced separated BIO ops for writing zeros
  and discarding
  * compat workaround for two RHEL 7.5 idiosyncrasies regarding
  refcount_t and struct nla_policy
- Remove patch support-timer-setup.patch. Upstream fix 74b1cbb274</changelog>
</package>
<package pkgid="21e742cfd3eaf094e2134ff4e2eaa9f2d8acc3b709cf8b166ade02bb75c45858" name="drbd" arch="x86_64">
  <version epoch="0" ver="9.0.13+git.b83ade31" rel="lp150.2.2.1"/>
  <changelog author="nwang@suse.com" date="1460116800">- Compat with kernel 4.5
- Add patch kernel-4.5-compat.patch</changelog>
  <changelog author="nwang@suse.com" date="1465387200">- bsc#983633, upgrade to ver9.0.2 to build against kernel 4.6/4.7
- Add patch compat-4.7-9902af79-i_mutex.patch
- Add patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
- Add patch compat-4.7-50225243-kill-nla_put_u64.patch
- Add patch compat-4.7-1dee3f59-align-nla-u64.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310400">- Upgrade 9.0.2 to 9.0.5
- Remove patch compat-4.7-9902af79-i_mutex.patch
  Remove patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
  Remove patch compat-4.7-50225243-kill-nla_put_u64.patch
  Remove patch compat-4.7-1dee3f59-align-nla-u64.patch
  Remove patch drbd-buildcompare.patch
  Remove patch kernel-4.5-compat.patch
  Remove patch temp.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310401">- bsc#1006176, compat with kernel 4.8 with 9.0.5</changelog>
  <changelog author="lpechacek@suse.com" date="1479556800">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="lpechacek@suse.com" date="1480075200">- Excluded openSUSE from RT KMP build (bsc#1005578)</changelog>
  <changelog author="nwang@suse.com" date="1487246400">- bsc#1025585, upgrade to 9.0.6</changelog>
  <changelog author="hare@suse.de" date="1488801600">- Compability fixes for SLE12 SP3 (bsc#993388, FATE#321732)
- Add patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- Add reproducible.patch to sort file lists (boo#1041090)
  and to override build date (boo#1047218) to fix build-compare</changelog>
  <changelog author="nwang@suse.com" date="1507291200">- bsc#1061981, update to 9.0.9
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Modify reproducible.patch since part of the patch is merged</changelog>
  <changelog author="nwang@suse.com" date="1507723200">- bsc#1062749, disable buildrt against SLE15 x86_64 temporarily.
  This change will be removed when rt is ready.</changelog>
  <changelog author="nwang@suse.com" date="1510920000">- bsc#1068587, add build request libelf-devel to build.</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.0.10-1
  * Fix resync of two secondary nodes in the presence of
  a 3rd node that is primary (maybe with disk or diskless);
  Fixed the race condition that caused the resync to sometimes not terminate
  * Improve connection behavior with autopromote enable one node Primary and
  udev present.
  * Fix in memory alignment of DRBD's struct bio.
  * Improve the quorum implementation, so that is works nicely with for the
  purpose of replacing fencing with quorum in a Pacemaker setup.
  * Ensure compatibility with upstream Linux kernel 4.14
- Remove patch reproducible.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077318, Update to 9.0.12
  * Fix a race condition in the device_open code path that can cause an
  internal counter to go negative
- Update to 9.0.11
  * Fix bug in compat code: Without this fix large bios are not split.</changelog>
  <changelog author="nwang@suse.com" date="1518350400">- bsc#1080458, enable build with kernel-rt on x86_64.
- bsc#1080459, support build against 4.15.0.
  setup_timer() change to timer_setup()
- Add patch support-timer-setup.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.0.13-1
  * abort a resync if a resync source becomes weakly and the sync
  targetis a neighbor of the primary
  * fix UUID handling with multiple diskless nodes
  * When a data-set gets into contact with an all diskless cluster,
  make sure to either set it to "Consistent" or reject the attach
  * correctly handle when a node that was marked as intentional
  diskless should get a disk
  * fix outdating of weakly connected nodes
  * made returning from Ahead to SyncSource more reliable
  * fix a hard to trigger deadlock in the receiver
  * fix online resize in the presence of two or more diskless nodes
  * fix online add of volumes to diskless nodes when it already has
  established connections
  * Set the SO_KEEPALIVE socket option on data sockets
  * automatically solve a specific split brain when quorum is enabled
  * Compat: Added support for kernels up to v4.15.x
  * new wire packet P_ZEROES a cousin of P_DISCARD, following the
  kernel as it introduced separated BIO ops for writing zeros
  and discarding
  * compat workaround for two RHEL 7.5 idiosyncrasies regarding
  refcount_t and struct nla_policy
- Remove patch support-timer-setup.patch. Upstream fix 74b1cbb274</changelog>
</package>
<package pkgid="c25d1c9b07b0c886f3ea355ae76eb5f47f669f887a656fe13bc04bc09782f2fa" name="drbd-kmp-default" arch="x86_64">
  <version epoch="0" ver="9.0.13+git.b83ade31_k4.12.14_lp150.12.13" rel="lp150.2.2.1"/>
  <changelog author="nwang@suse.com" date="1460116800">- Compat with kernel 4.5
- Add patch kernel-4.5-compat.patch</changelog>
  <changelog author="nwang@suse.com" date="1465387200">- bsc#983633, upgrade to ver9.0.2 to build against kernel 4.6/4.7
- Add patch compat-4.7-9902af79-i_mutex.patch
- Add patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
- Add patch compat-4.7-50225243-kill-nla_put_u64.patch
- Add patch compat-4.7-1dee3f59-align-nla-u64.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310400">- Upgrade 9.0.2 to 9.0.5
- Remove patch compat-4.7-9902af79-i_mutex.patch
  Remove patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
  Remove patch compat-4.7-50225243-kill-nla_put_u64.patch
  Remove patch compat-4.7-1dee3f59-align-nla-u64.patch
  Remove patch drbd-buildcompare.patch
  Remove patch kernel-4.5-compat.patch
  Remove patch temp.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310401">- bsc#1006176, compat with kernel 4.8 with 9.0.5</changelog>
  <changelog author="lpechacek@suse.com" date="1479556800">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="lpechacek@suse.com" date="1480075200">- Excluded openSUSE from RT KMP build (bsc#1005578)</changelog>
  <changelog author="nwang@suse.com" date="1487246400">- bsc#1025585, upgrade to 9.0.6</changelog>
  <changelog author="hare@suse.de" date="1488801600">- Compability fixes for SLE12 SP3 (bsc#993388, FATE#321732)
- Add patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- Add reproducible.patch to sort file lists (boo#1041090)
  and to override build date (boo#1047218) to fix build-compare</changelog>
  <changelog author="nwang@suse.com" date="1507291200">- bsc#1061981, update to 9.0.9
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Modify reproducible.patch since part of the patch is merged</changelog>
  <changelog author="nwang@suse.com" date="1507723200">- bsc#1062749, disable buildrt against SLE15 x86_64 temporarily.
  This change will be removed when rt is ready.</changelog>
  <changelog author="nwang@suse.com" date="1510920000">- bsc#1068587, add build request libelf-devel to build.</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.0.10-1
  * Fix resync of two secondary nodes in the presence of
  a 3rd node that is primary (maybe with disk or diskless);
  Fixed the race condition that caused the resync to sometimes not terminate
  * Improve connection behavior with autopromote enable one node Primary and
  udev present.
  * Fix in memory alignment of DRBD's struct bio.
  * Improve the quorum implementation, so that is works nicely with for the
  purpose of replacing fencing with quorum in a Pacemaker setup.
  * Ensure compatibility with upstream Linux kernel 4.14
- Remove patch reproducible.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077318, Update to 9.0.12
  * Fix a race condition in the device_open code path that can cause an
  internal counter to go negative
- Update to 9.0.11
  * Fix bug in compat code: Without this fix large bios are not split.</changelog>
  <changelog author="nwang@suse.com" date="1518350400">- bsc#1080458, enable build with kernel-rt on x86_64.
- bsc#1080459, support build against 4.15.0.
  setup_timer() change to timer_setup()
- Add patch support-timer-setup.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.0.13-1
  * abort a resync if a resync source becomes weakly and the sync
  targetis a neighbor of the primary
  * fix UUID handling with multiple diskless nodes
  * When a data-set gets into contact with an all diskless cluster,
  make sure to either set it to "Consistent" or reject the attach
  * correctly handle when a node that was marked as intentional
  diskless should get a disk
  * fix outdating of weakly connected nodes
  * made returning from Ahead to SyncSource more reliable
  * fix a hard to trigger deadlock in the receiver
  * fix online resize in the presence of two or more diskless nodes
  * fix online add of volumes to diskless nodes when it already has
  established connections
  * Set the SO_KEEPALIVE socket option on data sockets
  * automatically solve a specific split brain when quorum is enabled
  * Compat: Added support for kernels up to v4.15.x
  * new wire packet P_ZEROES a cousin of P_DISCARD, following the
  kernel as it introduced separated BIO ops for writing zeros
  and discarding
  * compat workaround for two RHEL 7.5 idiosyncrasies regarding
  refcount_t and struct nla_policy
- Remove patch support-timer-setup.patch. Upstream fix 74b1cbb274</changelog>
</package>
<package pkgid="351b2f3a98b8542e275f1fe362fcc0913c4874d2c32d3543f2d54533d1ee9ad7" name="e2fsprogs" arch="src">
  <version epoch="0" ver="1.43.8" rel="lp150.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1434801600">- e2fsprogs-1.41.1-splash_support.patch: Drop it, this patch
  depends on the old in kernel "bootsplash" patches that were
  removed after the introduction of plymouth.</changelog>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
</package>
<package pkgid="3ca82cd15c5bdc69554e6328b4a9784c594e6d7f2abfdabd7554fdce895a60d9" name="e2fsprogs" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp150.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1434801600">- e2fsprogs-1.41.1-splash_support.patch: Drop it, this patch
  depends on the old in kernel "bootsplash" patches that were
  removed after the introduction of plymouth.</changelog>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
</package>
<package pkgid="4610ca22659701eaef413a0e382b0b93428789b16eb63d5678db59bb5c1c87f9" name="e2fsprogs-devel" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp150.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1434801600">- e2fsprogs-1.41.1-splash_support.patch: Drop it, this patch
  depends on the old in kernel "bootsplash" patches that were
  removed after the introduction of plymouth.</changelog>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
</package>
<package pkgid="c6fd4188ff7cf0238bcb1c25979fe93df6a7824edb96dd2f46b36ea486f56962" name="emacs" arch="src">
  <version epoch="0" ver="25.3" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473422400">- Add emacs-24-fix-missing-gtk-icons.patch: Bring emacs up to speed
  on gtk3-3.20 changes. Fixes missing icons in emacs-gtk.</changelog>
  <changelog author="werner@suse.de" date="1474286400">- Update to emacs version 25.1
  * Next major release
  * Xwidgets: a new feature for embedding native widgets inside Emacs buffers.
  * Emacs can now load shared/dynamic libraries (modules).
  * Network security (TLS/SSL certificate validity and the like)
  * 'C-h l' now also lists the commands that were run.
  * New option 'switch-to-buffer-in-dedicated-window'
  * The option 'even-window-heights' has been renamed to 'even-window-sizes'
  * 'terpri' gets an optional arg ENSURE to conditionally output a newline.
  * 'insert-register' now leaves point after the inserted text
  * The new variable 'term-file-aliases' replaces some files from lisp/term.
  * New variable 'system-configuration-features', listing some of the main
    features that Emacs was compiled with.
  * A password is now hidden also when typed in batch mode.
  * The Emacs pseudo-random number generator can be securely seeded.
  * New input methods: 'tamil-dvorak', 'programmer-dvorak' and 'probhat'.
  * 'M-x' suggests shorthands and ignores obsolete commands for completion.
  * Changes in undo
  * New command 'comment-line' bound to 'C-x C-;'.
  * New and improved facilities for inserting Unicode characters
  * New minor mode 'global-eldoc-mode' is enabled by default.
  * Emacs now uses "bracketed paste mode" on text terminals that support it.
  * Emacs now supports the latest version of the UBA.
  * You can access 'mouse-buffer-menu' ('C-down-mouse-1') using 'C-f10'.
  * New buffer-local 'electric-pair-local-mode'.
  * New variable 'fast-but-imprecise-scrolling' inhibits fontification
    during full screen scrolling operations.
  * New documentation command 'describe-symbol'.
  * New function 'custom-prompt-customize-unsaved-options' checks for
    unsaved customizations and prompts user to customize (if found).
  * The old 'C-x w' bindings in 'hi-lock-mode' are officially deprecated
  * New function 'bookmark-set-no-overwrite' bound to 'C-x r M'.
  * Many other details, see /usr/share/emacs/25.1/etc/NEWS
- Patch emacs-24.4.dif renamed to emacs-25.1.dif
- Patches removed as now upstream or fixed otherwise
  debbugs16737.patch
  emacs-24-0010-ELF-unexec-Correct-section-header-index.patch
  emacs-24-0011-ELF-unexec-Tidy-code.patch
  emacs-24-0012-ELF-unexec-Merge-Alpha-and-MIPS-COFF-debug-handling.patch
  emacs-24-0013-ELF-unexec-Symbol-table-patching.patch
  emacs-24-0014-ELF-unexec-_OBJC_-symbols-in-bss-sections.patch
  emacs-24-0015-ELF-unexec-R_-_NONE-relocs.patch
  emacs-24-0016-ELF-unexec-Drive-from-PT_LOAD-header-rather-than-sec.patch
  emacs-24-0017-ELF-unexec-Don-t-insert-a-new-section.patch
  emacs-24-0018-src-unexelf.c-NEW_PROGRAM_H-Remove-unused-macro-Bug-.patch
  emacs-24-0019-ELF-unexec-align-section-header.patch
  emacs-24-fix-missing-gtk-icons.patch
  emacs-24.4-bzr118021.patch
  emacs24-primarysel2.patch
  gmalloc.patch
- Patches forwarded to 25.1
  emacs-24.1-ps-mule.patch
  emacs-24.3-asian-print.patch
  emacs-24.3-iconic.patch
  emacs-24.3-x11r7.patch
  emacs-24.4-flyspell.patch
  emacs-24.4-glibc.patch
  emacs-24.4-nonvoid.patch
  emacs-24.4-ps-bdf.patch
  emacs-24.4-xim.patch</changelog>
  <changelog author="werner@suse.de" date="1474459200">- Diable experimental cairo support as it cause trouble with spacemacs
  as well as with the w3 mode</changelog>
  <changelog author="werner@suse.de" date="1478865600">- Avoid address space randomization during emacs build
- Check for active Execution Shield as this breaks emacs</changelog>
  <changelog author="werner@suse.de" date="1482235200">- Add patch emacs-25.1-custom-fonts.patch as workaround for boo#1016172</changelog>
  <changelog author="werner@suse.de" date="1488283200">- Test out release candidate of emacs bugfix release 25.2
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.
- Patch emacs-25.1.dif renamed to emacs-25.2.dif
- Modified patches emacs-24.4-glibc.patch and emacs-24.4-ps-bdf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1489233600">- Add /var/games to filelist</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- also pass "-no-pie" as linkerflag to disable PIE.</changelog>
  <changelog author="werner@suse.de" date="1491220800">- Check if "-no-pie" is known to the compiler/linker</changelog>
  <changelog author="pgajdos@suse.com" date="1491998400">- build with ImageMagick 7 [bsc#1033077]
  + emacs-25.2-ImageMagick7.patch</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Update to emacs version 25.2 a bugfix release
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.</changelog>
  <changelog author="werner@suse.de" date="1493121601">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
  <changelog author="werner@suse.de" date="1493726400">- Add patch gnulib.git-94e01571.patch to fix CVE-2017-7476</changelog>
  <changelog author="zaitor@opensuse.org" date="1496404800">- Add conditional emacs-25.2-xwidget.patch, and
  pkgconfig(webkit2gtk-4.0) BuildRequires; depend on latest
  webkitgtk for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- build without libgnutls-openssl-devel</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Add patch emacs-25.2-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>
  <changelog author="werner@suse.de" date="1506081600">- Update to emacs version 25.3 a security release
  * * Security vulnerability related to Enriched Text mode is removed.
- Modified patches
  * emacs-24.4-ps-bdf.patch
  * emacs-25.2-ImageMagick7.patch
  * emacs-25.2-bsc1058425.patch now partly upstream
- Rename emacs-25.2.dif to emacs-25.3.dif</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch emacs-25.3-xft4x11.patch to allow emacs-x11 to use
  xft even for its menu bar (boo#1096354)</changelog>
  <changelog author="werner@suse.de" date="1529064000">- Simplify patch emacs-25.3-xft4x11.patch (from Henryk Hecht) for
  boo#1096354</changelog>
</package>
<package pkgid="831732e63d16db9d9f6ac459898f1d128c4f33c4603d9d2372fcbbc4e621fa90" name="emacs" arch="x86_64">
  <version epoch="0" ver="25.3" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473422400">- Add emacs-24-fix-missing-gtk-icons.patch: Bring emacs up to speed
  on gtk3-3.20 changes. Fixes missing icons in emacs-gtk.</changelog>
  <changelog author="werner@suse.de" date="1474286400">- Update to emacs version 25.1
  * Next major release
  * Xwidgets: a new feature for embedding native widgets inside Emacs buffers.
  * Emacs can now load shared/dynamic libraries (modules).
  * Network security (TLS/SSL certificate validity and the like)
  * 'C-h l' now also lists the commands that were run.
  * New option 'switch-to-buffer-in-dedicated-window'
  * The option 'even-window-heights' has been renamed to 'even-window-sizes'
  * 'terpri' gets an optional arg ENSURE to conditionally output a newline.
  * 'insert-register' now leaves point after the inserted text
  * The new variable 'term-file-aliases' replaces some files from lisp/term.
  * New variable 'system-configuration-features', listing some of the main
    features that Emacs was compiled with.
  * A password is now hidden also when typed in batch mode.
  * The Emacs pseudo-random number generator can be securely seeded.
  * New input methods: 'tamil-dvorak', 'programmer-dvorak' and 'probhat'.
  * 'M-x' suggests shorthands and ignores obsolete commands for completion.
  * Changes in undo
  * New command 'comment-line' bound to 'C-x C-;'.
  * New and improved facilities for inserting Unicode characters
  * New minor mode 'global-eldoc-mode' is enabled by default.
  * Emacs now uses "bracketed paste mode" on text terminals that support it.
  * Emacs now supports the latest version of the UBA.
  * You can access 'mouse-buffer-menu' ('C-down-mouse-1') using 'C-f10'.
  * New buffer-local 'electric-pair-local-mode'.
  * New variable 'fast-but-imprecise-scrolling' inhibits fontification
    during full screen scrolling operations.
  * New documentation command 'describe-symbol'.
  * New function 'custom-prompt-customize-unsaved-options' checks for
    unsaved customizations and prompts user to customize (if found).
  * The old 'C-x w' bindings in 'hi-lock-mode' are officially deprecated
  * New function 'bookmark-set-no-overwrite' bound to 'C-x r M'.
  * Many other details, see /usr/share/emacs/25.1/etc/NEWS
- Patch emacs-24.4.dif renamed to emacs-25.1.dif
- Patches removed as now upstream or fixed otherwise
  debbugs16737.patch
  emacs-24-0010-ELF-unexec-Correct-section-header-index.patch
  emacs-24-0011-ELF-unexec-Tidy-code.patch
  emacs-24-0012-ELF-unexec-Merge-Alpha-and-MIPS-COFF-debug-handling.patch
  emacs-24-0013-ELF-unexec-Symbol-table-patching.patch
  emacs-24-0014-ELF-unexec-_OBJC_-symbols-in-bss-sections.patch
  emacs-24-0015-ELF-unexec-R_-_NONE-relocs.patch
  emacs-24-0016-ELF-unexec-Drive-from-PT_LOAD-header-rather-than-sec.patch
  emacs-24-0017-ELF-unexec-Don-t-insert-a-new-section.patch
  emacs-24-0018-src-unexelf.c-NEW_PROGRAM_H-Remove-unused-macro-Bug-.patch
  emacs-24-0019-ELF-unexec-align-section-header.patch
  emacs-24-fix-missing-gtk-icons.patch
  emacs-24.4-bzr118021.patch
  emacs24-primarysel2.patch
  gmalloc.patch
- Patches forwarded to 25.1
  emacs-24.1-ps-mule.patch
  emacs-24.3-asian-print.patch
  emacs-24.3-iconic.patch
  emacs-24.3-x11r7.patch
  emacs-24.4-flyspell.patch
  emacs-24.4-glibc.patch
  emacs-24.4-nonvoid.patch
  emacs-24.4-ps-bdf.patch
  emacs-24.4-xim.patch</changelog>
  <changelog author="werner@suse.de" date="1474459200">- Diable experimental cairo support as it cause trouble with spacemacs
  as well as with the w3 mode</changelog>
  <changelog author="werner@suse.de" date="1478865600">- Avoid address space randomization during emacs build
- Check for active Execution Shield as this breaks emacs</changelog>
  <changelog author="werner@suse.de" date="1482235200">- Add patch emacs-25.1-custom-fonts.patch as workaround for boo#1016172</changelog>
  <changelog author="werner@suse.de" date="1488283200">- Test out release candidate of emacs bugfix release 25.2
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.
- Patch emacs-25.1.dif renamed to emacs-25.2.dif
- Modified patches emacs-24.4-glibc.patch and emacs-24.4-ps-bdf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1489233600">- Add /var/games to filelist</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- also pass "-no-pie" as linkerflag to disable PIE.</changelog>
  <changelog author="werner@suse.de" date="1491220800">- Check if "-no-pie" is known to the compiler/linker</changelog>
  <changelog author="pgajdos@suse.com" date="1491998400">- build with ImageMagick 7 [bsc#1033077]
  + emacs-25.2-ImageMagick7.patch</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Update to emacs version 25.2 a bugfix release
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.</changelog>
  <changelog author="werner@suse.de" date="1493121601">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
  <changelog author="werner@suse.de" date="1493726400">- Add patch gnulib.git-94e01571.patch to fix CVE-2017-7476</changelog>
  <changelog author="zaitor@opensuse.org" date="1496404800">- Add conditional emacs-25.2-xwidget.patch, and
  pkgconfig(webkit2gtk-4.0) BuildRequires; depend on latest
  webkitgtk for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- build without libgnutls-openssl-devel</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Add patch emacs-25.2-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>
  <changelog author="werner@suse.de" date="1506081600">- Update to emacs version 25.3 a security release
  * * Security vulnerability related to Enriched Text mode is removed.
- Modified patches
  * emacs-24.4-ps-bdf.patch
  * emacs-25.2-ImageMagick7.patch
  * emacs-25.2-bsc1058425.patch now partly upstream
- Rename emacs-25.2.dif to emacs-25.3.dif</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch emacs-25.3-xft4x11.patch to allow emacs-x11 to use
  xft even for its menu bar (boo#1096354)</changelog>
  <changelog author="werner@suse.de" date="1529064000">- Simplify patch emacs-25.3-xft4x11.patch (from Henryk Hecht) for
  boo#1096354</changelog>
</package>
<package pkgid="c3a74bee801a71c7c414869bdaa8d8697670090a267bca51dd55e0cc4e2ac91a" name="emacs-el" arch="noarch">
  <version epoch="0" ver="25.3" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473422400">- Add emacs-24-fix-missing-gtk-icons.patch: Bring emacs up to speed
  on gtk3-3.20 changes. Fixes missing icons in emacs-gtk.</changelog>
  <changelog author="werner@suse.de" date="1474286400">- Update to emacs version 25.1
  * Next major release
  * Xwidgets: a new feature for embedding native widgets inside Emacs buffers.
  * Emacs can now load shared/dynamic libraries (modules).
  * Network security (TLS/SSL certificate validity and the like)
  * 'C-h l' now also lists the commands that were run.
  * New option 'switch-to-buffer-in-dedicated-window'
  * The option 'even-window-heights' has been renamed to 'even-window-sizes'
  * 'terpri' gets an optional arg ENSURE to conditionally output a newline.
  * 'insert-register' now leaves point after the inserted text
  * The new variable 'term-file-aliases' replaces some files from lisp/term.
  * New variable 'system-configuration-features', listing some of the main
    features that Emacs was compiled with.
  * A password is now hidden also when typed in batch mode.
  * The Emacs pseudo-random number generator can be securely seeded.
  * New input methods: 'tamil-dvorak', 'programmer-dvorak' and 'probhat'.
  * 'M-x' suggests shorthands and ignores obsolete commands for completion.
  * Changes in undo
  * New command 'comment-line' bound to 'C-x C-;'.
  * New and improved facilities for inserting Unicode characters
  * New minor mode 'global-eldoc-mode' is enabled by default.
  * Emacs now uses "bracketed paste mode" on text terminals that support it.
  * Emacs now supports the latest version of the UBA.
  * You can access 'mouse-buffer-menu' ('C-down-mouse-1') using 'C-f10'.
  * New buffer-local 'electric-pair-local-mode'.
  * New variable 'fast-but-imprecise-scrolling' inhibits fontification
    during full screen scrolling operations.
  * New documentation command 'describe-symbol'.
  * New function 'custom-prompt-customize-unsaved-options' checks for
    unsaved customizations and prompts user to customize (if found).
  * The old 'C-x w' bindings in 'hi-lock-mode' are officially deprecated
  * New function 'bookmark-set-no-overwrite' bound to 'C-x r M'.
  * Many other details, see /usr/share/emacs/25.1/etc/NEWS
- Patch emacs-24.4.dif renamed to emacs-25.1.dif
- Patches removed as now upstream or fixed otherwise
  debbugs16737.patch
  emacs-24-0010-ELF-unexec-Correct-section-header-index.patch
  emacs-24-0011-ELF-unexec-Tidy-code.patch
  emacs-24-0012-ELF-unexec-Merge-Alpha-and-MIPS-COFF-debug-handling.patch
  emacs-24-0013-ELF-unexec-Symbol-table-patching.patch
  emacs-24-0014-ELF-unexec-_OBJC_-symbols-in-bss-sections.patch
  emacs-24-0015-ELF-unexec-R_-_NONE-relocs.patch
  emacs-24-0016-ELF-unexec-Drive-from-PT_LOAD-header-rather-than-sec.patch
  emacs-24-0017-ELF-unexec-Don-t-insert-a-new-section.patch
  emacs-24-0018-src-unexelf.c-NEW_PROGRAM_H-Remove-unused-macro-Bug-.patch
  emacs-24-0019-ELF-unexec-align-section-header.patch
  emacs-24-fix-missing-gtk-icons.patch
  emacs-24.4-bzr118021.patch
  emacs24-primarysel2.patch
  gmalloc.patch
- Patches forwarded to 25.1
  emacs-24.1-ps-mule.patch
  emacs-24.3-asian-print.patch
  emacs-24.3-iconic.patch
  emacs-24.3-x11r7.patch
  emacs-24.4-flyspell.patch
  emacs-24.4-glibc.patch
  emacs-24.4-nonvoid.patch
  emacs-24.4-ps-bdf.patch
  emacs-24.4-xim.patch</changelog>
  <changelog author="werner@suse.de" date="1474459200">- Diable experimental cairo support as it cause trouble with spacemacs
  as well as with the w3 mode</changelog>
  <changelog author="werner@suse.de" date="1478865600">- Avoid address space randomization during emacs build
- Check for active Execution Shield as this breaks emacs</changelog>
  <changelog author="werner@suse.de" date="1482235200">- Add patch emacs-25.1-custom-fonts.patch as workaround for boo#1016172</changelog>
  <changelog author="werner@suse.de" date="1488283200">- Test out release candidate of emacs bugfix release 25.2
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.
- Patch emacs-25.1.dif renamed to emacs-25.2.dif
- Modified patches emacs-24.4-glibc.patch and emacs-24.4-ps-bdf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1489233600">- Add /var/games to filelist</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- also pass "-no-pie" as linkerflag to disable PIE.</changelog>
  <changelog author="werner@suse.de" date="1491220800">- Check if "-no-pie" is known to the compiler/linker</changelog>
  <changelog author="pgajdos@suse.com" date="1491998400">- build with ImageMagick 7 [bsc#1033077]
  + emacs-25.2-ImageMagick7.patch</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Update to emacs version 25.2 a bugfix release
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.</changelog>
  <changelog author="werner@suse.de" date="1493121601">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
  <changelog author="werner@suse.de" date="1493726400">- Add patch gnulib.git-94e01571.patch to fix CVE-2017-7476</changelog>
  <changelog author="zaitor@opensuse.org" date="1496404800">- Add conditional emacs-25.2-xwidget.patch, and
  pkgconfig(webkit2gtk-4.0) BuildRequires; depend on latest
  webkitgtk for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- build without libgnutls-openssl-devel</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Add patch emacs-25.2-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>
  <changelog author="werner@suse.de" date="1506081600">- Update to emacs version 25.3 a security release
  * * Security vulnerability related to Enriched Text mode is removed.
- Modified patches
  * emacs-24.4-ps-bdf.patch
  * emacs-25.2-ImageMagick7.patch
  * emacs-25.2-bsc1058425.patch now partly upstream
- Rename emacs-25.2.dif to emacs-25.3.dif</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch emacs-25.3-xft4x11.patch to allow emacs-x11 to use
  xft even for its menu bar (boo#1096354)</changelog>
  <changelog author="werner@suse.de" date="1529064000">- Simplify patch emacs-25.3-xft4x11.patch (from Henryk Hecht) for
  boo#1096354</changelog>
</package>
<package pkgid="083804cf4005cc61613ea0192974e87e8a136369125b28e57159e9372369e2ec" name="emacs-info" arch="noarch">
  <version epoch="0" ver="25.3" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473422400">- Add emacs-24-fix-missing-gtk-icons.patch: Bring emacs up to speed
  on gtk3-3.20 changes. Fixes missing icons in emacs-gtk.</changelog>
  <changelog author="werner@suse.de" date="1474286400">- Update to emacs version 25.1
  * Next major release
  * Xwidgets: a new feature for embedding native widgets inside Emacs buffers.
  * Emacs can now load shared/dynamic libraries (modules).
  * Network security (TLS/SSL certificate validity and the like)
  * 'C-h l' now also lists the commands that were run.
  * New option 'switch-to-buffer-in-dedicated-window'
  * The option 'even-window-heights' has been renamed to 'even-window-sizes'
  * 'terpri' gets an optional arg ENSURE to conditionally output a newline.
  * 'insert-register' now leaves point after the inserted text
  * The new variable 'term-file-aliases' replaces some files from lisp/term.
  * New variable 'system-configuration-features', listing some of the main
    features that Emacs was compiled with.
  * A password is now hidden also when typed in batch mode.
  * The Emacs pseudo-random number generator can be securely seeded.
  * New input methods: 'tamil-dvorak', 'programmer-dvorak' and 'probhat'.
  * 'M-x' suggests shorthands and ignores obsolete commands for completion.
  * Changes in undo
  * New command 'comment-line' bound to 'C-x C-;'.
  * New and improved facilities for inserting Unicode characters
  * New minor mode 'global-eldoc-mode' is enabled by default.
  * Emacs now uses "bracketed paste mode" on text terminals that support it.
  * Emacs now supports the latest version of the UBA.
  * You can access 'mouse-buffer-menu' ('C-down-mouse-1') using 'C-f10'.
  * New buffer-local 'electric-pair-local-mode'.
  * New variable 'fast-but-imprecise-scrolling' inhibits fontification
    during full screen scrolling operations.
  * New documentation command 'describe-symbol'.
  * New function 'custom-prompt-customize-unsaved-options' checks for
    unsaved customizations and prompts user to customize (if found).
  * The old 'C-x w' bindings in 'hi-lock-mode' are officially deprecated
  * New function 'bookmark-set-no-overwrite' bound to 'C-x r M'.
  * Many other details, see /usr/share/emacs/25.1/etc/NEWS
- Patch emacs-24.4.dif renamed to emacs-25.1.dif
- Patches removed as now upstream or fixed otherwise
  debbugs16737.patch
  emacs-24-0010-ELF-unexec-Correct-section-header-index.patch
  emacs-24-0011-ELF-unexec-Tidy-code.patch
  emacs-24-0012-ELF-unexec-Merge-Alpha-and-MIPS-COFF-debug-handling.patch
  emacs-24-0013-ELF-unexec-Symbol-table-patching.patch
  emacs-24-0014-ELF-unexec-_OBJC_-symbols-in-bss-sections.patch
  emacs-24-0015-ELF-unexec-R_-_NONE-relocs.patch
  emacs-24-0016-ELF-unexec-Drive-from-PT_LOAD-header-rather-than-sec.patch
  emacs-24-0017-ELF-unexec-Don-t-insert-a-new-section.patch
  emacs-24-0018-src-unexelf.c-NEW_PROGRAM_H-Remove-unused-macro-Bug-.patch
  emacs-24-0019-ELF-unexec-align-section-header.patch
  emacs-24-fix-missing-gtk-icons.patch
  emacs-24.4-bzr118021.patch
  emacs24-primarysel2.patch
  gmalloc.patch
- Patches forwarded to 25.1
  emacs-24.1-ps-mule.patch
  emacs-24.3-asian-print.patch
  emacs-24.3-iconic.patch
  emacs-24.3-x11r7.patch
  emacs-24.4-flyspell.patch
  emacs-24.4-glibc.patch
  emacs-24.4-nonvoid.patch
  emacs-24.4-ps-bdf.patch
  emacs-24.4-xim.patch</changelog>
  <changelog author="werner@suse.de" date="1474459200">- Diable experimental cairo support as it cause trouble with spacemacs
  as well as with the w3 mode</changelog>
  <changelog author="werner@suse.de" date="1478865600">- Avoid address space randomization during emacs build
- Check for active Execution Shield as this breaks emacs</changelog>
  <changelog author="werner@suse.de" date="1482235200">- Add patch emacs-25.1-custom-fonts.patch as workaround for boo#1016172</changelog>
  <changelog author="werner@suse.de" date="1488283200">- Test out release candidate of emacs bugfix release 25.2
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.
- Patch emacs-25.1.dif renamed to emacs-25.2.dif
- Modified patches emacs-24.4-glibc.patch and emacs-24.4-ps-bdf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1489233600">- Add /var/games to filelist</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- also pass "-no-pie" as linkerflag to disable PIE.</changelog>
  <changelog author="werner@suse.de" date="1491220800">- Check if "-no-pie" is known to the compiler/linker</changelog>
  <changelog author="pgajdos@suse.com" date="1491998400">- build with ImageMagick 7 [bsc#1033077]
  + emacs-25.2-ImageMagick7.patch</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Update to emacs version 25.2 a bugfix release
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.</changelog>
  <changelog author="werner@suse.de" date="1493121601">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
  <changelog author="werner@suse.de" date="1493726400">- Add patch gnulib.git-94e01571.patch to fix CVE-2017-7476</changelog>
  <changelog author="zaitor@opensuse.org" date="1496404800">- Add conditional emacs-25.2-xwidget.patch, and
  pkgconfig(webkit2gtk-4.0) BuildRequires; depend on latest
  webkitgtk for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- build without libgnutls-openssl-devel</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Add patch emacs-25.2-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>
  <changelog author="werner@suse.de" date="1506081600">- Update to emacs version 25.3 a security release
  * * Security vulnerability related to Enriched Text mode is removed.
- Modified patches
  * emacs-24.4-ps-bdf.patch
  * emacs-25.2-ImageMagick7.patch
  * emacs-25.2-bsc1058425.patch now partly upstream
- Rename emacs-25.2.dif to emacs-25.3.dif</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch emacs-25.3-xft4x11.patch to allow emacs-x11 to use
  xft even for its menu bar (boo#1096354)</changelog>
  <changelog author="werner@suse.de" date="1529064000">- Simplify patch emacs-25.3-xft4x11.patch (from Henryk Hecht) for
  boo#1096354</changelog>
</package>
<package pkgid="f31599799629d1f16aeb04d796ba62c89bd9e89978f3118ce8a1e0b2ed7b770c" name="emacs-nox" arch="x86_64">
  <version epoch="0" ver="25.3" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473422400">- Add emacs-24-fix-missing-gtk-icons.patch: Bring emacs up to speed
  on gtk3-3.20 changes. Fixes missing icons in emacs-gtk.</changelog>
  <changelog author="werner@suse.de" date="1474286400">- Update to emacs version 25.1
  * Next major release
  * Xwidgets: a new feature for embedding native widgets inside Emacs buffers.
  * Emacs can now load shared/dynamic libraries (modules).
  * Network security (TLS/SSL certificate validity and the like)
  * 'C-h l' now also lists the commands that were run.
  * New option 'switch-to-buffer-in-dedicated-window'
  * The option 'even-window-heights' has been renamed to 'even-window-sizes'
  * 'terpri' gets an optional arg ENSURE to conditionally output a newline.
  * 'insert-register' now leaves point after the inserted text
  * The new variable 'term-file-aliases' replaces some files from lisp/term.
  * New variable 'system-configuration-features', listing some of the main
    features that Emacs was compiled with.
  * A password is now hidden also when typed in batch mode.
  * The Emacs pseudo-random number generator can be securely seeded.
  * New input methods: 'tamil-dvorak', 'programmer-dvorak' and 'probhat'.
  * 'M-x' suggests shorthands and ignores obsolete commands for completion.
  * Changes in undo
  * New command 'comment-line' bound to 'C-x C-;'.
  * New and improved facilities for inserting Unicode characters
  * New minor mode 'global-eldoc-mode' is enabled by default.
  * Emacs now uses "bracketed paste mode" on text terminals that support it.
  * Emacs now supports the latest version of the UBA.
  * You can access 'mouse-buffer-menu' ('C-down-mouse-1') using 'C-f10'.
  * New buffer-local 'electric-pair-local-mode'.
  * New variable 'fast-but-imprecise-scrolling' inhibits fontification
    during full screen scrolling operations.
  * New documentation command 'describe-symbol'.
  * New function 'custom-prompt-customize-unsaved-options' checks for
    unsaved customizations and prompts user to customize (if found).
  * The old 'C-x w' bindings in 'hi-lock-mode' are officially deprecated
  * New function 'bookmark-set-no-overwrite' bound to 'C-x r M'.
  * Many other details, see /usr/share/emacs/25.1/etc/NEWS
- Patch emacs-24.4.dif renamed to emacs-25.1.dif
- Patches removed as now upstream or fixed otherwise
  debbugs16737.patch
  emacs-24-0010-ELF-unexec-Correct-section-header-index.patch
  emacs-24-0011-ELF-unexec-Tidy-code.patch
  emacs-24-0012-ELF-unexec-Merge-Alpha-and-MIPS-COFF-debug-handling.patch
  emacs-24-0013-ELF-unexec-Symbol-table-patching.patch
  emacs-24-0014-ELF-unexec-_OBJC_-symbols-in-bss-sections.patch
  emacs-24-0015-ELF-unexec-R_-_NONE-relocs.patch
  emacs-24-0016-ELF-unexec-Drive-from-PT_LOAD-header-rather-than-sec.patch
  emacs-24-0017-ELF-unexec-Don-t-insert-a-new-section.patch
  emacs-24-0018-src-unexelf.c-NEW_PROGRAM_H-Remove-unused-macro-Bug-.patch
  emacs-24-0019-ELF-unexec-align-section-header.patch
  emacs-24-fix-missing-gtk-icons.patch
  emacs-24.4-bzr118021.patch
  emacs24-primarysel2.patch
  gmalloc.patch
- Patches forwarded to 25.1
  emacs-24.1-ps-mule.patch
  emacs-24.3-asian-print.patch
  emacs-24.3-iconic.patch
  emacs-24.3-x11r7.patch
  emacs-24.4-flyspell.patch
  emacs-24.4-glibc.patch
  emacs-24.4-nonvoid.patch
  emacs-24.4-ps-bdf.patch
  emacs-24.4-xim.patch</changelog>
  <changelog author="werner@suse.de" date="1474459200">- Diable experimental cairo support as it cause trouble with spacemacs
  as well as with the w3 mode</changelog>
  <changelog author="werner@suse.de" date="1478865600">- Avoid address space randomization during emacs build
- Check for active Execution Shield as this breaks emacs</changelog>
  <changelog author="werner@suse.de" date="1482235200">- Add patch emacs-25.1-custom-fonts.patch as workaround for boo#1016172</changelog>
  <changelog author="werner@suse.de" date="1488283200">- Test out release candidate of emacs bugfix release 25.2
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.
- Patch emacs-25.1.dif renamed to emacs-25.2.dif
- Modified patches emacs-24.4-glibc.patch and emacs-24.4-ps-bdf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1489233600">- Add /var/games to filelist</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- also pass "-no-pie" as linkerflag to disable PIE.</changelog>
  <changelog author="werner@suse.de" date="1491220800">- Check if "-no-pie" is known to the compiler/linker</changelog>
  <changelog author="pgajdos@suse.com" date="1491998400">- build with ImageMagick 7 [bsc#1033077]
  + emacs-25.2-ImageMagick7.patch</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Update to emacs version 25.2 a bugfix release
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.</changelog>
  <changelog author="werner@suse.de" date="1493121601">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
  <changelog author="werner@suse.de" date="1493726400">- Add patch gnulib.git-94e01571.patch to fix CVE-2017-7476</changelog>
  <changelog author="zaitor@opensuse.org" date="1496404800">- Add conditional emacs-25.2-xwidget.patch, and
  pkgconfig(webkit2gtk-4.0) BuildRequires; depend on latest
  webkitgtk for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- build without libgnutls-openssl-devel</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Add patch emacs-25.2-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>
  <changelog author="werner@suse.de" date="1506081600">- Update to emacs version 25.3 a security release
  * * Security vulnerability related to Enriched Text mode is removed.
- Modified patches
  * emacs-24.4-ps-bdf.patch
  * emacs-25.2-ImageMagick7.patch
  * emacs-25.2-bsc1058425.patch now partly upstream
- Rename emacs-25.2.dif to emacs-25.3.dif</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch emacs-25.3-xft4x11.patch to allow emacs-x11 to use
  xft even for its menu bar (boo#1096354)</changelog>
  <changelog author="werner@suse.de" date="1529064000">- Simplify patch emacs-25.3-xft4x11.patch (from Henryk Hecht) for
  boo#1096354</changelog>
</package>
<package pkgid="c4f2f54ab12757d66cf5985529e7d55bfdc246e03557de67df3894ec4d14320d" name="emacs-x11" arch="x86_64">
  <version epoch="0" ver="25.3" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473422400">- Add emacs-24-fix-missing-gtk-icons.patch: Bring emacs up to speed
  on gtk3-3.20 changes. Fixes missing icons in emacs-gtk.</changelog>
  <changelog author="werner@suse.de" date="1474286400">- Update to emacs version 25.1
  * Next major release
  * Xwidgets: a new feature for embedding native widgets inside Emacs buffers.
  * Emacs can now load shared/dynamic libraries (modules).
  * Network security (TLS/SSL certificate validity and the like)
  * 'C-h l' now also lists the commands that were run.
  * New option 'switch-to-buffer-in-dedicated-window'
  * The option 'even-window-heights' has been renamed to 'even-window-sizes'
  * 'terpri' gets an optional arg ENSURE to conditionally output a newline.
  * 'insert-register' now leaves point after the inserted text
  * The new variable 'term-file-aliases' replaces some files from lisp/term.
  * New variable 'system-configuration-features', listing some of the main
    features that Emacs was compiled with.
  * A password is now hidden also when typed in batch mode.
  * The Emacs pseudo-random number generator can be securely seeded.
  * New input methods: 'tamil-dvorak', 'programmer-dvorak' and 'probhat'.
  * 'M-x' suggests shorthands and ignores obsolete commands for completion.
  * Changes in undo
  * New command 'comment-line' bound to 'C-x C-;'.
  * New and improved facilities for inserting Unicode characters
  * New minor mode 'global-eldoc-mode' is enabled by default.
  * Emacs now uses "bracketed paste mode" on text terminals that support it.
  * Emacs now supports the latest version of the UBA.
  * You can access 'mouse-buffer-menu' ('C-down-mouse-1') using 'C-f10'.
  * New buffer-local 'electric-pair-local-mode'.
  * New variable 'fast-but-imprecise-scrolling' inhibits fontification
    during full screen scrolling operations.
  * New documentation command 'describe-symbol'.
  * New function 'custom-prompt-customize-unsaved-options' checks for
    unsaved customizations and prompts user to customize (if found).
  * The old 'C-x w' bindings in 'hi-lock-mode' are officially deprecated
  * New function 'bookmark-set-no-overwrite' bound to 'C-x r M'.
  * Many other details, see /usr/share/emacs/25.1/etc/NEWS
- Patch emacs-24.4.dif renamed to emacs-25.1.dif
- Patches removed as now upstream or fixed otherwise
  debbugs16737.patch
  emacs-24-0010-ELF-unexec-Correct-section-header-index.patch
  emacs-24-0011-ELF-unexec-Tidy-code.patch
  emacs-24-0012-ELF-unexec-Merge-Alpha-and-MIPS-COFF-debug-handling.patch
  emacs-24-0013-ELF-unexec-Symbol-table-patching.patch
  emacs-24-0014-ELF-unexec-_OBJC_-symbols-in-bss-sections.patch
  emacs-24-0015-ELF-unexec-R_-_NONE-relocs.patch
  emacs-24-0016-ELF-unexec-Drive-from-PT_LOAD-header-rather-than-sec.patch
  emacs-24-0017-ELF-unexec-Don-t-insert-a-new-section.patch
  emacs-24-0018-src-unexelf.c-NEW_PROGRAM_H-Remove-unused-macro-Bug-.patch
  emacs-24-0019-ELF-unexec-align-section-header.patch
  emacs-24-fix-missing-gtk-icons.patch
  emacs-24.4-bzr118021.patch
  emacs24-primarysel2.patch
  gmalloc.patch
- Patches forwarded to 25.1
  emacs-24.1-ps-mule.patch
  emacs-24.3-asian-print.patch
  emacs-24.3-iconic.patch
  emacs-24.3-x11r7.patch
  emacs-24.4-flyspell.patch
  emacs-24.4-glibc.patch
  emacs-24.4-nonvoid.patch
  emacs-24.4-ps-bdf.patch
  emacs-24.4-xim.patch</changelog>
  <changelog author="werner@suse.de" date="1474459200">- Diable experimental cairo support as it cause trouble with spacemacs
  as well as with the w3 mode</changelog>
  <changelog author="werner@suse.de" date="1478865600">- Avoid address space randomization during emacs build
- Check for active Execution Shield as this breaks emacs</changelog>
  <changelog author="werner@suse.de" date="1482235200">- Add patch emacs-25.1-custom-fonts.patch as workaround for boo#1016172</changelog>
  <changelog author="werner@suse.de" date="1488283200">- Test out release candidate of emacs bugfix release 25.2
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.
- Patch emacs-25.1.dif renamed to emacs-25.2.dif
- Modified patches emacs-24.4-glibc.patch and emacs-24.4-ps-bdf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1489233600">- Add /var/games to filelist</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- also pass "-no-pie" as linkerflag to disable PIE.</changelog>
  <changelog author="werner@suse.de" date="1491220800">- Check if "-no-pie" is known to the compiler/linker</changelog>
  <changelog author="pgajdos@suse.com" date="1491998400">- build with ImageMagick 7 [bsc#1033077]
  + emacs-25.2-ImageMagick7.patch</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Update to emacs version 25.2 a bugfix release
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.</changelog>
  <changelog author="werner@suse.de" date="1493121601">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
  <changelog author="werner@suse.de" date="1493726400">- Add patch gnulib.git-94e01571.patch to fix CVE-2017-7476</changelog>
  <changelog author="zaitor@opensuse.org" date="1496404800">- Add conditional emacs-25.2-xwidget.patch, and
  pkgconfig(webkit2gtk-4.0) BuildRequires; depend on latest
  webkitgtk for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- build without libgnutls-openssl-devel</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Add patch emacs-25.2-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>
  <changelog author="werner@suse.de" date="1506081600">- Update to emacs version 25.3 a security release
  * * Security vulnerability related to Enriched Text mode is removed.
- Modified patches
  * emacs-24.4-ps-bdf.patch
  * emacs-25.2-ImageMagick7.patch
  * emacs-25.2-bsc1058425.patch now partly upstream
- Rename emacs-25.2.dif to emacs-25.3.dif</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch emacs-25.3-xft4x11.patch to allow emacs-x11 to use
  xft even for its menu bar (boo#1096354)</changelog>
  <changelog author="werner@suse.de" date="1529064000">- Simplify patch emacs-25.3-xft4x11.patch (from Henryk Hecht) for
  boo#1096354</changelog>
</package>
<package pkgid="86b85d4194705c33412473540b606a611374cf818856afeef6bb94bd6ffb29a6" name="enigmail" arch="src">
  <version epoch="0" ver="2.0.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1430827200">- enigmail 1.8.2, fixing the following bugs:
  * Punycode domain handling incorrect
  * Mail is not automatically encrypted anymore. Enigmail does not
    warn about unencrypted mail
  * Decrypted message, but "Error - decryption failed" or "Error -
    no matching private/secret key found to decrypt message"
  * Sign Button indicates wrong status on recipient rules
  * Decryption filter merges Received headers incorrectly
  * Questionmarks "???" in Enigmail menu and encrypting message
    only with senders key
  * Enigmail key management fails always fails to connect to
    keyservers when searching for keys
  * TB account hangs when filter for storing decrypted emails is
    applied to IMAP account
  * Deleting multiple keys in key manager fails
  * INV_RECP error message confuses new users</changelog>
  <changelog author="astieger@suse.com" date="1456747200">- enigmail 1.9:
  * Added support for GnuPG 2.1
  * Backup and restore of keys and Enigmail settings
  * Messages are sent using PGP/MIME by default
  * Several new dialog windows that improve usability
  * Added support for protected headers (off by default)
  * There is no binary component anymore - this version runs on all
    platforms for which Thunderbird and GnuPG are available.
  * gpg2 2.0.7 or newer required
  * no longer run tests, a utility is not available</changelog>
  <changelog author="astieger@suse.com" date="1460030400">- enigmail 1.9.1:
  * fix recignition of MS Exchange messages
  * fix slow PGP/MIME signature verification with attachments
  * fix freeze with large mail with signature
  * fix backup/restore UI
  * fix UI issues with German umlauts</changelog>
  <changelog author="astieger@suse.com" date="1462276800">- enigmail 1.9.2:
  * Add support for Zimbra OpenPGP encrypted messages
  * Fix decrypt loop with S/MIME signed mails
  * Fix silently failing import of revocation certificate
  * Fix E-Mail saved as draft and reopened will show empty message
  * Fix multipart/signed mail without micalg parameter blank body
  * Fix display of changed key expiration date</changelog>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
</package>
<package pkgid="e299d3f2a911bf74e700cf858047828f9e7941370e3e16755cf877a313d4a8b5" name="enigmail" arch="x86_64">
  <version epoch="0" ver="2.0.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1430827200">- enigmail 1.8.2, fixing the following bugs:
  * Punycode domain handling incorrect
  * Mail is not automatically encrypted anymore. Enigmail does not
    warn about unencrypted mail
  * Decrypted message, but "Error - decryption failed" or "Error -
    no matching private/secret key found to decrypt message"
  * Sign Button indicates wrong status on recipient rules
  * Decryption filter merges Received headers incorrectly
  * Questionmarks "???" in Enigmail menu and encrypting message
    only with senders key
  * Enigmail key management fails always fails to connect to
    keyservers when searching for keys
  * TB account hangs when filter for storing decrypted emails is
    applied to IMAP account
  * Deleting multiple keys in key manager fails
  * INV_RECP error message confuses new users</changelog>
  <changelog author="astieger@suse.com" date="1456747200">- enigmail 1.9:
  * Added support for GnuPG 2.1
  * Backup and restore of keys and Enigmail settings
  * Messages are sent using PGP/MIME by default
  * Several new dialog windows that improve usability
  * Added support for protected headers (off by default)
  * There is no binary component anymore - this version runs on all
    platforms for which Thunderbird and GnuPG are available.
  * gpg2 2.0.7 or newer required
  * no longer run tests, a utility is not available</changelog>
  <changelog author="astieger@suse.com" date="1460030400">- enigmail 1.9.1:
  * fix recignition of MS Exchange messages
  * fix slow PGP/MIME signature verification with attachments
  * fix freeze with large mail with signature
  * fix backup/restore UI
  * fix UI issues with German umlauts</changelog>
  <changelog author="astieger@suse.com" date="1462276800">- enigmail 1.9.2:
  * Add support for Zimbra OpenPGP encrypted messages
  * Fix decrypt loop with S/MIME signed mails
  * Fix silently failing import of revocation certificate
  * Fix E-Mail saved as draft and reopened will show empty message
  * Fix multipart/signed mail without micalg parameter blank body
  * Fix display of changed key expiration date</changelog>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
</package>
<package pkgid="f0f7ba01421aba44c6c4e27b1b0ac60aa4d0e689309054dc6470f8a239805414" name="enigmail" arch="src">
  <version epoch="0" ver="2.0.5" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1456747200">- enigmail 1.9:
  * Added support for GnuPG 2.1
  * Backup and restore of keys and Enigmail settings
  * Messages are sent using PGP/MIME by default
  * Several new dialog windows that improve usability
  * Added support for protected headers (off by default)
  * There is no binary component anymore - this version runs on all
    platforms for which Thunderbird and GnuPG are available.
  * gpg2 2.0.7 or newer required
  * no longer run tests, a utility is not available</changelog>
  <changelog author="astieger@suse.com" date="1460030400">- enigmail 1.9.1:
  * fix recignition of MS Exchange messages
  * fix slow PGP/MIME signature verification with attachments
  * fix freeze with large mail with signature
  * fix backup/restore UI
  * fix UI issues with German umlauts</changelog>
  <changelog author="astieger@suse.com" date="1462276800">- enigmail 1.9.2:
  * Add support for Zimbra OpenPGP encrypted messages
  * Fix decrypt loop with S/MIME signed mails
  * Fix silently failing import of revocation certificate
  * Fix E-Mail saved as draft and reopened will show empty message
  * Fix multipart/signed mail without micalg parameter blank body
  * Fix display of changed key expiration date</changelog>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
</package>
<package pkgid="9263de36e94d96c6e25e9ef4c9a54722c9814c9bcb6b72f06d700dba9cda5a1c" name="enigmail" arch="x86_64">
  <version epoch="0" ver="2.0.5" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1456747200">- enigmail 1.9:
  * Added support for GnuPG 2.1
  * Backup and restore of keys and Enigmail settings
  * Messages are sent using PGP/MIME by default
  * Several new dialog windows that improve usability
  * Added support for protected headers (off by default)
  * There is no binary component anymore - this version runs on all
    platforms for which Thunderbird and GnuPG are available.
  * gpg2 2.0.7 or newer required
  * no longer run tests, a utility is not available</changelog>
  <changelog author="astieger@suse.com" date="1460030400">- enigmail 1.9.1:
  * fix recignition of MS Exchange messages
  * fix slow PGP/MIME signature verification with attachments
  * fix freeze with large mail with signature
  * fix backup/restore UI
  * fix UI issues with German umlauts</changelog>
  <changelog author="astieger@suse.com" date="1462276800">- enigmail 1.9.2:
  * Add support for Zimbra OpenPGP encrypted messages
  * Fix decrypt loop with S/MIME signed mails
  * Fix silently failing import of revocation certificate
  * Fix E-Mail saved as draft and reopened will show empty message
  * Fix multipart/signed mail without micalg parameter blank body
  * Fix display of changed key expiration date</changelog>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
</package>
<package pkgid="b709b4895e51d5e05110345bf97aa9aef049bc707ce469ffa14bc5ec3b3bd387" name="enigmail" arch="src">
  <version epoch="0" ver="2.0.6" rel="lp150.2.9.1"/>
  <changelog author="astieger@suse.com" date="1460030400">- enigmail 1.9.1:
  * fix recignition of MS Exchange messages
  * fix slow PGP/MIME signature verification with attachments
  * fix freeze with large mail with signature
  * fix backup/restore UI
  * fix UI issues with German umlauts</changelog>
  <changelog author="astieger@suse.com" date="1462276800">- enigmail 1.9.2:
  * Add support for Zimbra OpenPGP encrypted messages
  * Fix decrypt loop with S/MIME signed mails
  * Fix silently failing import of revocation certificate
  * Fix E-Mail saved as draft and reopened will show empty message
  * Fix multipart/signed mail without micalg parameter blank body
  * Fix display of changed key expiration date</changelog>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
</package>
<package pkgid="10f4dcabede1c95198fc11fa599aa2520c44e0458fc28f0e40a719ce2ba65dc8" name="enigmail" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="lp150.2.9.1"/>
  <changelog author="astieger@suse.com" date="1460030400">- enigmail 1.9.1:
  * fix recignition of MS Exchange messages
  * fix slow PGP/MIME signature verification with attachments
  * fix freeze with large mail with signature
  * fix backup/restore UI
  * fix UI issues with German umlauts</changelog>
  <changelog author="astieger@suse.com" date="1462276800">- enigmail 1.9.2:
  * Add support for Zimbra OpenPGP encrypted messages
  * Fix decrypt loop with S/MIME signed mails
  * Fix silently failing import of revocation certificate
  * Fix E-Mail saved as draft and reopened will show empty message
  * Fix multipart/signed mail without micalg parameter blank body
  * Fix display of changed key expiration date</changelog>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
</package>
<package pkgid="ad5060daed81f7326379faf6bfcf14fec4e4a2a34dad209fb42e418bbcf07815" name="enigmail" arch="src">
  <version epoch="0" ver="2.0.7" rel="lp150.2.12.1"/>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
</package>
<package pkgid="27dfa4f06602569adb7c748092b54ec7a0b1be31419bf3f436c84f01f60cda8d" name="enigmail" arch="x86_64">
  <version epoch="0" ver="2.0.7" rel="lp150.2.12.1"/>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
</package>
<package pkgid="a0522a44693b1f86447c104fc63a7721d087790f89567c5c9b769191d74b54af" name="enigmail" arch="src">
  <version epoch="0" ver="2.0.8" rel="lp150.2.15.1"/>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
  <changelog author="michael@stroeder.com" date="1533470400">- enigmail 2.0.8:
  This release addresses a security issue and
  solves a few regression bugs.
  * a security issue has been fixed that allows an attacker to prepare
    a plain, unauthenticated HTML message in a way that it looks like
    it's signed and/or encrypted (boo#1104036)</changelog>
</package>
<package pkgid="a3c0fbb260b57161fc4681fd14fd39257225db3d4d32b553ffa9fe4ed77bc572" name="enigmail" arch="x86_64">
  <version epoch="0" ver="2.0.8" rel="lp150.2.15.1"/>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
  <changelog author="michael@stroeder.com" date="1533470400">- enigmail 2.0.8:
  This release addresses a security issue and
  solves a few regression bugs.
  * a security issue has been fixed that allows an attacker to prepare
    a plain, unauthenticated HTML message in a way that it looks like
    it's signed and/or encrypted (boo#1104036)</changelog>
</package>
<package pkgid="6f86a4885728355bd426f41851facdac07001b6d3363519c36e3a98299d70faa" name="etags" arch="x86_64">
  <version epoch="0" ver="25.3" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473422400">- Add emacs-24-fix-missing-gtk-icons.patch: Bring emacs up to speed
  on gtk3-3.20 changes. Fixes missing icons in emacs-gtk.</changelog>
  <changelog author="werner@suse.de" date="1474286400">- Update to emacs version 25.1
  * Next major release
  * Xwidgets: a new feature for embedding native widgets inside Emacs buffers.
  * Emacs can now load shared/dynamic libraries (modules).
  * Network security (TLS/SSL certificate validity and the like)
  * 'C-h l' now also lists the commands that were run.
  * New option 'switch-to-buffer-in-dedicated-window'
  * The option 'even-window-heights' has been renamed to 'even-window-sizes'
  * 'terpri' gets an optional arg ENSURE to conditionally output a newline.
  * 'insert-register' now leaves point after the inserted text
  * The new variable 'term-file-aliases' replaces some files from lisp/term.
  * New variable 'system-configuration-features', listing some of the main
    features that Emacs was compiled with.
  * A password is now hidden also when typed in batch mode.
  * The Emacs pseudo-random number generator can be securely seeded.
  * New input methods: 'tamil-dvorak', 'programmer-dvorak' and 'probhat'.
  * 'M-x' suggests shorthands and ignores obsolete commands for completion.
  * Changes in undo
  * New command 'comment-line' bound to 'C-x C-;'.
  * New and improved facilities for inserting Unicode characters
  * New minor mode 'global-eldoc-mode' is enabled by default.
  * Emacs now uses "bracketed paste mode" on text terminals that support it.
  * Emacs now supports the latest version of the UBA.
  * You can access 'mouse-buffer-menu' ('C-down-mouse-1') using 'C-f10'.
  * New buffer-local 'electric-pair-local-mode'.
  * New variable 'fast-but-imprecise-scrolling' inhibits fontification
    during full screen scrolling operations.
  * New documentation command 'describe-symbol'.
  * New function 'custom-prompt-customize-unsaved-options' checks for
    unsaved customizations and prompts user to customize (if found).
  * The old 'C-x w' bindings in 'hi-lock-mode' are officially deprecated
  * New function 'bookmark-set-no-overwrite' bound to 'C-x r M'.
  * Many other details, see /usr/share/emacs/25.1/etc/NEWS
- Patch emacs-24.4.dif renamed to emacs-25.1.dif
- Patches removed as now upstream or fixed otherwise
  debbugs16737.patch
  emacs-24-0010-ELF-unexec-Correct-section-header-index.patch
  emacs-24-0011-ELF-unexec-Tidy-code.patch
  emacs-24-0012-ELF-unexec-Merge-Alpha-and-MIPS-COFF-debug-handling.patch
  emacs-24-0013-ELF-unexec-Symbol-table-patching.patch
  emacs-24-0014-ELF-unexec-_OBJC_-symbols-in-bss-sections.patch
  emacs-24-0015-ELF-unexec-R_-_NONE-relocs.patch
  emacs-24-0016-ELF-unexec-Drive-from-PT_LOAD-header-rather-than-sec.patch
  emacs-24-0017-ELF-unexec-Don-t-insert-a-new-section.patch
  emacs-24-0018-src-unexelf.c-NEW_PROGRAM_H-Remove-unused-macro-Bug-.patch
  emacs-24-0019-ELF-unexec-align-section-header.patch
  emacs-24-fix-missing-gtk-icons.patch
  emacs-24.4-bzr118021.patch
  emacs24-primarysel2.patch
  gmalloc.patch
- Patches forwarded to 25.1
  emacs-24.1-ps-mule.patch
  emacs-24.3-asian-print.patch
  emacs-24.3-iconic.patch
  emacs-24.3-x11r7.patch
  emacs-24.4-flyspell.patch
  emacs-24.4-glibc.patch
  emacs-24.4-nonvoid.patch
  emacs-24.4-ps-bdf.patch
  emacs-24.4-xim.patch</changelog>
  <changelog author="werner@suse.de" date="1474459200">- Diable experimental cairo support as it cause trouble with spacemacs
  as well as with the w3 mode</changelog>
  <changelog author="werner@suse.de" date="1478865600">- Avoid address space randomization during emacs build
- Check for active Execution Shield as this breaks emacs</changelog>
  <changelog author="werner@suse.de" date="1482235200">- Add patch emacs-25.1-custom-fonts.patch as workaround for boo#1016172</changelog>
  <changelog author="werner@suse.de" date="1488283200">- Test out release candidate of emacs bugfix release 25.2
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.
- Patch emacs-25.1.dif renamed to emacs-25.2.dif
- Modified patches emacs-24.4-glibc.patch and emacs-24.4-ps-bdf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1489233600">- Add /var/games to filelist</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- also pass "-no-pie" as linkerflag to disable PIE.</changelog>
  <changelog author="werner@suse.de" date="1491220800">- Check if "-no-pie" is known to the compiler/linker</changelog>
  <changelog author="pgajdos@suse.com" date="1491998400">- build with ImageMagick 7 [bsc#1033077]
  + emacs-25.2-ImageMagick7.patch</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Update to emacs version 25.2 a bugfix release
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.</changelog>
  <changelog author="werner@suse.de" date="1493121601">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
  <changelog author="werner@suse.de" date="1493726400">- Add patch gnulib.git-94e01571.patch to fix CVE-2017-7476</changelog>
  <changelog author="zaitor@opensuse.org" date="1496404800">- Add conditional emacs-25.2-xwidget.patch, and
  pkgconfig(webkit2gtk-4.0) BuildRequires; depend on latest
  webkitgtk for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- build without libgnutls-openssl-devel</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Add patch emacs-25.2-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>
  <changelog author="werner@suse.de" date="1506081600">- Update to emacs version 25.3 a security release
  * * Security vulnerability related to Enriched Text mode is removed.
- Modified patches
  * emacs-24.4-ps-bdf.patch
  * emacs-25.2-ImageMagick7.patch
  * emacs-25.2-bsc1058425.patch now partly upstream
- Rename emacs-25.2.dif to emacs-25.3.dif</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch emacs-25.3-xft4x11.patch to allow emacs-x11 to use
  xft even for its menu bar (boo#1096354)</changelog>
  <changelog author="werner@suse.de" date="1529064000">- Simplify patch emacs-25.3-xft4x11.patch (from Henryk Hecht) for
  boo#1096354</changelog>
</package>
<package pkgid="1460c82e469df76cb5b30b3a8aeea9efe635a8de8ea0889ddd4460b2c96e8ae2" name="ethtool" arch="src">
  <version epoch="0" ver="4.13" rel="lp150.3.3.1"/>
  <changelog author="puzel@suse.com" date="1355745600">- Update to new upstream release 3.7
  * Fix: Gracefully handle failure of register pretty-printer (-d
    option)
  * Feature: Add support for et131x registers (-d option)
  * Feature: Basic optical diagnostics for SFF-8472 modules (-m
    option)</changelog>
  <changelog author="puzel@suse.com" date="1366632000">- Update to new upstream release 3.8
  * Feature: Allow setting destination MAC address in L3/L4 flow
    spec rules (-N/-U option)
  * Fix: Show full 64 bits of user-data (-n/-u option)
  * Fix: Add version check for et131x regs (-d option)
  * Doc: Improve description of -f, -t, -s, -N/-U, -W options in
    man page
  * Fix: Restore 20000baseKR2 cap display (no options)</changelog>
  <changelog author="jengelh@inai.de" date="1372939200">- Update to new upstream release 3.10
  * Displaying of support for 10000BASE-KR link mode was implemented.
  * Support for new versions of ixgbe register dump was added.
  * The private flags print output was beautified.
- More robust make install call
- Optional signature verification</changelog>
  <changelog author="p.drouand@gmail.com" date="1385294400">- Update to version 3.12.1
  * Fix: Memory corruption when applying external calibration to
  SFF-8472 module diagnostics (-m option)
  * Feature: Add Intel 82599 and x540 DCB registers to dump
  (-d option)
- Changes from 3.12
  * Fix: Remove alternate method to check for VLAN tag offload on Linux
  &lt; 2.6.37 (-k/-K options)
  * Fix: Hide state of VLAN tag offload and LRO if the kernel is too old
  for us to reliably detect them (-k option)
  * Feature: Add register dump support for Solarflare SFC9100 family
  (-d option)
- Changes from 3.11
  * Feature: Update Realtek chip list for register dump to match
  r8169 driver in Linux 3.11 (-d option)
  * Feature: Add ixgbevf support for register dump (-d option)
  * Feature: Filter ixgbe register dump according to the specific chip
  (-d option)</changelog>
  <changelog author="puzel@suse.com" date="1386244800">- Add '-q' command line option to display switch port attributes
  (bnc#853637, fate#315293)
- added patches:
  * ethtool-display-switch-port-attributes.patch</changelog>
  <changelog author="puzel@suse.com" date="1391688000">- Drop ethtool-display-switch-port-attributes.patch (failed
  upstream acceptance and has to be reworked)</changelog>
  <changelog author="jengelh@inai.de" date="1416312000">- Update to new upstream release 3.16
  * Support for configurable RSS hash key (-x/-X options)
  * Add register dump support for Altera Triple Speed Ethernet
  (-d option)
  * Report Backplane as a supported port
- Remove unused call to %gpg_verify (the macro expands to nothing);
  source validation handled by osc.</changelog>
  <changelog author="jengelh@inai.de" date="1420977600">- Update to new upstream release 3.18
  * Fix: Lookup of SFP Tx bias in SFF-8472 module diagnostics
  (-m option)
- Drop usrmerge compat symlinks</changelog>
  <changelog author="mkubecek@suse.cz" date="1433160000">- Update to new upstream release 4.0
  * Fix: Formatting of RX flow hash indirection table when size not
    divisible by 8 (-x option)
  * Fix: Add missing Advertised speeds (no option and -s option)
  * Feature: Add support to get expansion ROM version (-i option)
  * Feature: Include SFP serial number and date in EEPROM dump
    (-m option)</changelog>
  <changelog author="mkubecek@suse.cz" date="1444392000">- Update to new upstream release 4.2
  * Feature: Support soldered-on modules in module EEPROM dump
    (-m option)
  * Feature: Add register dump support for VMware vmxnet3
    (-d option)
  * Feature: Update register dump support for IBM EMAC (-d option)
    (requires Linux 4.3 or a future stable update to 4.1 or 4.2)
  * Doc: Fix typo in man page</changelog>
  <changelog author="mkubecek@suse.cz" date="1458043200">- Update to new upstream release 4.5
  * Fix: Heap corruption when dumping registers from a file
    (-d option)
  * Fix: Stricter input validation for EEPROM setting (-E option)
  * Feature: Add PHY statistics support (--phy-statistics option)
  * Feature: Support setting default Rx flow indirection table
    (-X option)
  * Doc: Properly indent sub-options in man page
  * address build issues (mostly compiler warnings)</changelog>
  <changelog author="mkubecek@suse.cz" date="1467633600">- Update to new upstream release 4.6
  * Feature: Support register dump on Intel X550 NICs (-d option)
  * Fix: Correct some reported register offsets on Intel 10GbE NICs
    (-d option)
  * Feature: Add IPv6 support to NFC (-n, -N, -u and -U options)
  * Feature: Add support for ETHTOOL_xLINKSETTINGS ioctls (no
    option and -s option)
  * Feature: Use netlink socket when AF_INET not available</changelog>
  <changelog author="mkubecek@suse.cz" date="1476187200">- Update to new upstream release 4.8
  * Feature: QSFP Plus/QSFP28 Diagnostics Information Support
  * Feature: Enhancing link mode bits to support 25G/50G/100G
  * Feature: add support for 1000BaseX and missing 10G link mode
  * Fixes: address Coverity issues 1363118 - 1363125</changelog>
  <changelog author="mkubecek@suse.cz" date="1490875200">- Update to new upstream release 4.10
  * Fix: Fix the "advertise" parameter logic.
  * Feature: Implement ETHTOOL_PHY_GTUNABLE/ETHTOOL_PHY_STUNABLE and PHY downshift
  * Feature: add register dump support for fjes driver (-d option)
- add keyring with John Linville's key for tarball verification</changelog>
  <changelog author="mkubecek@suse.cz" date="1496750400">- Update to new upstream release 4.11
  * Feature: Support for configurable RSS hash function
  * Feature: support queue and VF fields for rxclass filters
  * Feature: Add support for 2500baseT/5000baseT link modes
  * Fix: Fix SFF 8079 cable technology bit parsing
  * Fix: sync help output for -x/-X with man page</changelog>
  <changelog author="mkubecek@suse.cz" date="1509364800">- Update to new upstream release 4.13
  * Feature: add support for HWTSTAMP_FILTER_NTP_ALL
  * Feature: Add DMA Coalescing support
  * Feature: Remove UDP Fragmentation Offload error prints
  * Feature: stmmac: Add DMA HW Feature Register
  * Fix: Do not return error code if no changes were attempted.
  * Fix: Fix formatting of advertise bitmask
  * Fix: fix the rx vs tx mixup in set channel message</changelog>
  <changelog author="mkubecek@suse.cz" date="1522929600">- add backported post-4.13 upstream fixes (bsc#1088294):
  ethtool-fix-MFLCN-register-dump-for-82599-and-newer.patch
  ethtool-correct-display-of-VF-when-showing-vf-queue-.patch
  ethtool-show-VF-and-queue-in-the-help-for-N.patch
  ethtool-correct-VF-index-values-for-the-ring_cookie-.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1522929601">- use %license rather than %doc for license file (bsc#1082318)</changelog>
  <changelog author="mkubecek@suse.cz" date="1522929602">- add warning that changes should be submitted via git (i.e. not
  directly to IBS) to the specfile
- drop BuildRoot (no longer needed in SLE15)
- drop BuildRequire for xz (no longer needed in SLE15)</changelog>
  <changelog author="mkubecek@suse.cz" date="1540209600">- fix stack clash for PHY tunables (bsc#1092037):
  ethtool-fix-stack-clash-in-do_get_phy_tunable-and-do.patch
- sync UAPI header copies with SLE15 kernel:
  Revert-ethtool-Add-DMA-Coalescing-support.patch
  ethtool-copy.h-sync-with-net-next.patch</changelog>
</package>
<package pkgid="a3c55b9290daa97a1e038c3ad263ea847e93f13f075210028893e14c94ac48d0" name="ethtool" arch="x86_64">
  <version epoch="0" ver="4.13" rel="lp150.3.3.1"/>
  <changelog author="puzel@suse.com" date="1355745600">- Update to new upstream release 3.7
  * Fix: Gracefully handle failure of register pretty-printer (-d
    option)
  * Feature: Add support for et131x registers (-d option)
  * Feature: Basic optical diagnostics for SFF-8472 modules (-m
    option)</changelog>
  <changelog author="puzel@suse.com" date="1366632000">- Update to new upstream release 3.8
  * Feature: Allow setting destination MAC address in L3/L4 flow
    spec rules (-N/-U option)
  * Fix: Show full 64 bits of user-data (-n/-u option)
  * Fix: Add version check for et131x regs (-d option)
  * Doc: Improve description of -f, -t, -s, -N/-U, -W options in
    man page
  * Fix: Restore 20000baseKR2 cap display (no options)</changelog>
  <changelog author="jengelh@inai.de" date="1372939200">- Update to new upstream release 3.10
  * Displaying of support for 10000BASE-KR link mode was implemented.
  * Support for new versions of ixgbe register dump was added.
  * The private flags print output was beautified.
- More robust make install call
- Optional signature verification</changelog>
  <changelog author="p.drouand@gmail.com" date="1385294400">- Update to version 3.12.1
  * Fix: Memory corruption when applying external calibration to
  SFF-8472 module diagnostics (-m option)
  * Feature: Add Intel 82599 and x540 DCB registers to dump
  (-d option)
- Changes from 3.12
  * Fix: Remove alternate method to check for VLAN tag offload on Linux
  &lt; 2.6.37 (-k/-K options)
  * Fix: Hide state of VLAN tag offload and LRO if the kernel is too old
  for us to reliably detect them (-k option)
  * Feature: Add register dump support for Solarflare SFC9100 family
  (-d option)
- Changes from 3.11
  * Feature: Update Realtek chip list for register dump to match
  r8169 driver in Linux 3.11 (-d option)
  * Feature: Add ixgbevf support for register dump (-d option)
  * Feature: Filter ixgbe register dump according to the specific chip
  (-d option)</changelog>
  <changelog author="puzel@suse.com" date="1386244800">- Add '-q' command line option to display switch port attributes
  (bnc#853637, fate#315293)
- added patches:
  * ethtool-display-switch-port-attributes.patch</changelog>
  <changelog author="puzel@suse.com" date="1391688000">- Drop ethtool-display-switch-port-attributes.patch (failed
  upstream acceptance and has to be reworked)</changelog>
  <changelog author="jengelh@inai.de" date="1416312000">- Update to new upstream release 3.16
  * Support for configurable RSS hash key (-x/-X options)
  * Add register dump support for Altera Triple Speed Ethernet
  (-d option)
  * Report Backplane as a supported port
- Remove unused call to %gpg_verify (the macro expands to nothing);
  source validation handled by osc.</changelog>
  <changelog author="jengelh@inai.de" date="1420977600">- Update to new upstream release 3.18
  * Fix: Lookup of SFP Tx bias in SFF-8472 module diagnostics
  (-m option)
- Drop usrmerge compat symlinks</changelog>
  <changelog author="mkubecek@suse.cz" date="1433160000">- Update to new upstream release 4.0
  * Fix: Formatting of RX flow hash indirection table when size not
    divisible by 8 (-x option)
  * Fix: Add missing Advertised speeds (no option and -s option)
  * Feature: Add support to get expansion ROM version (-i option)
  * Feature: Include SFP serial number and date in EEPROM dump
    (-m option)</changelog>
  <changelog author="mkubecek@suse.cz" date="1444392000">- Update to new upstream release 4.2
  * Feature: Support soldered-on modules in module EEPROM dump
    (-m option)
  * Feature: Add register dump support for VMware vmxnet3
    (-d option)
  * Feature: Update register dump support for IBM EMAC (-d option)
    (requires Linux 4.3 or a future stable update to 4.1 or 4.2)
  * Doc: Fix typo in man page</changelog>
  <changelog author="mkubecek@suse.cz" date="1458043200">- Update to new upstream release 4.5
  * Fix: Heap corruption when dumping registers from a file
    (-d option)
  * Fix: Stricter input validation for EEPROM setting (-E option)
  * Feature: Add PHY statistics support (--phy-statistics option)
  * Feature: Support setting default Rx flow indirection table
    (-X option)
  * Doc: Properly indent sub-options in man page
  * address build issues (mostly compiler warnings)</changelog>
  <changelog author="mkubecek@suse.cz" date="1467633600">- Update to new upstream release 4.6
  * Feature: Support register dump on Intel X550 NICs (-d option)
  * Fix: Correct some reported register offsets on Intel 10GbE NICs
    (-d option)
  * Feature: Add IPv6 support to NFC (-n, -N, -u and -U options)
  * Feature: Add support for ETHTOOL_xLINKSETTINGS ioctls (no
    option and -s option)
  * Feature: Use netlink socket when AF_INET not available</changelog>
  <changelog author="mkubecek@suse.cz" date="1476187200">- Update to new upstream release 4.8
  * Feature: QSFP Plus/QSFP28 Diagnostics Information Support
  * Feature: Enhancing link mode bits to support 25G/50G/100G
  * Feature: add support for 1000BaseX and missing 10G link mode
  * Fixes: address Coverity issues 1363118 - 1363125</changelog>
  <changelog author="mkubecek@suse.cz" date="1490875200">- Update to new upstream release 4.10
  * Fix: Fix the "advertise" parameter logic.
  * Feature: Implement ETHTOOL_PHY_GTUNABLE/ETHTOOL_PHY_STUNABLE and PHY downshift
  * Feature: add register dump support for fjes driver (-d option)
- add keyring with John Linville's key for tarball verification</changelog>
  <changelog author="mkubecek@suse.cz" date="1496750400">- Update to new upstream release 4.11
  * Feature: Support for configurable RSS hash function
  * Feature: support queue and VF fields for rxclass filters
  * Feature: Add support for 2500baseT/5000baseT link modes
  * Fix: Fix SFF 8079 cable technology bit parsing
  * Fix: sync help output for -x/-X with man page</changelog>
  <changelog author="mkubecek@suse.cz" date="1509364800">- Update to new upstream release 4.13
  * Feature: add support for HWTSTAMP_FILTER_NTP_ALL
  * Feature: Add DMA Coalescing support
  * Feature: Remove UDP Fragmentation Offload error prints
  * Feature: stmmac: Add DMA HW Feature Register
  * Fix: Do not return error code if no changes were attempted.
  * Fix: Fix formatting of advertise bitmask
  * Fix: fix the rx vs tx mixup in set channel message</changelog>
  <changelog author="mkubecek@suse.cz" date="1522929600">- add backported post-4.13 upstream fixes (bsc#1088294):
  ethtool-fix-MFLCN-register-dump-for-82599-and-newer.patch
  ethtool-correct-display-of-VF-when-showing-vf-queue-.patch
  ethtool-show-VF-and-queue-in-the-help-for-N.patch
  ethtool-correct-VF-index-values-for-the-ring_cookie-.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1522929601">- use %license rather than %doc for license file (bsc#1082318)</changelog>
  <changelog author="mkubecek@suse.cz" date="1522929602">- add warning that changes should be submitted via git (i.e. not
  directly to IBS) to the specfile
- drop BuildRoot (no longer needed in SLE15)
- drop BuildRequire for xz (no longer needed in SLE15)</changelog>
  <changelog author="mkubecek@suse.cz" date="1540209600">- fix stack clash for PHY tunables (bsc#1092037):
  ethtool-fix-stack-clash-in-do_get_phy_tunable-and-do.patch
- sync UAPI header copies with SLE15 kernel:
  Revert-ethtool-Add-DMA-Coalescing-support.patch
  ethtool-copy.h-sync-with-net-next.patch</changelog>
</package>
<package pkgid="4c21f20099c15d18e40d7e47090c284e4f4cbd59783cf951d96e0e26583301fd" name="exiv2" arch="src">
  <version epoch="0" ver="0.26" rel="lp150.5.3.1"/>
  <changelog author="fcrozat@suse.com" date="1348056000">- Add 90_changeset_r2743.diff: add support for additional Samgsung
  EXIF tags (backport for upstream)
- Add 90_changeset_r2744.diff: add support for additional Pentax
  EXIF tags (backport for upstream)
- Add more Canon models (5D Mark III, 600D, 60D, 1100D, WFT-E2 II,
  WFT-E4 II, 650D)
- Add 90_changeset_r2756.diff: add support for EOS-M Sigma 12-24mm
  f/4.5-5.6 DG HSM II lens (backport from upstream)
- Add 90_changeset_r2818_partial.diff: add support for additional
  Canon camera (5D Mark III, 600D, 60D, 1100D, WFT-E2 II, WFT-E4
  II, 650D) and EF/EF-M lenses. (backport from upstream)
- Add 99_pending_canon_eos_m.diff: add support for some Canon EOS-M
  lenses (pending upstream merge)
- Add 99_pending_minolta_manual_lens.diff: add support for Minolta
  manual lens (pending upstream merge)
- Add 99_pending_pentax_da_35.diff: add support for PENTAX-DA 35mm
  F2.4 AL lens (pending upstream merge)
- Add 99_pending_zeiss_planar_35_ze.diff: add support for Carl
  Zeiss Planar T* 50mm f/1.4 ZE lens (pending upstream merge)</changelog>
  <changelog author="fcrozat@suse.com" date="1370260800">- Remove pending patches with upstream versions :
  + 99_pending_canon_eos_m.diff (replaced by
    90_changeset_r2993.diff).
  + 99_pending_minolta_manual_lens.diff (replaced by
    90_changeset_r2989.diff).
  + 99_pending_pentax_da_35.diff (replaced by
    90_changeset_r2860.diff).
  + 99_pending_zeiss_planar_35_ze.diff (replaced by
    90_changeset_r3011.diff).
- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  + 90_changeset_r2889.diff, 90_changeset_r2985.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2958.diff: additional lenses for Samsung body
  + 90_changeset_r2959.diff, 90_changeset_r2961.diff,
    90_changeset_r2985.diff, 90_changeset_r3003.diff,
    90_changeset_r3016.diff, 90_changeset_r3017.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2963.diff, 90_changeset_r2994.diff,
    90_changeset_r3004.diff, 90_changeset_r3023.diff,
    90_changeset_r3026.diff: additional lenses for Canon body.
  + 90_changeset_r2968.diff, 90_changeset_r2969.diff,
    90_changeset_r2995.diff, 90_changeset_r3005.diff,
    90_changeset_r3006.diff: additional lenses for Minolta body.
  + 90_changeset_r2970.diff, 90_changeset_r2975.diff,
    90_changeset_r2978.diff, 90_changeset_r2981.diff,
    90_changeset_r2982.diff, 90_changeset_r2992.diff: additional
    lenses for Olympus body.
  + 90_changeset_r2998.diff: add support for FocusDistance data
    from Olympus EXIF tags.
  + 90_changeset_r2984.diff, 90_changeset_r2986.diff,
    90_changeset_r3002.diff: additional lenses for Nikon body.
  + 90_changeset_r2988.diff: add support for Exif.Photo.LensModel
    EXIF tag.
  + 90_changeset_r2990.diff: prevent double variable creation.
  + 90_changeset_r2991.diff: fix memory corruption.
  + 95_post_r3026_cleanup.diff: cleanup lenses names.</changelog>
  <changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
  <changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
  <changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="wbauer@tmo.at" date="1498824000">- Update to version 0.26
  * See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
  * exiv2-cmake-libsuffix.patch
  * exiv2_r3889_r3890_fix_boo964344.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1499169600">- Fix baselibs.conf</changelog>
  <changelog author="wbauer@tmo.at" date="1502280000">- Add fix-crash.patch to prevent crashes in gwenview with certain
  images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
  the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
  upstream</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
    CVE-2017-14864 bsc#1060995,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000)</changelog>
  <changelog author="cfeck@kde.org" date="1511524800">- split developer documentation into separate package</changelog>
  <changelog author="dmueller@suse.com" date="1527681600">- update to latest 0.26 branch:
  * obsoletes 0001-Use-more-GNUInstallDirs.patch
  d4e4288d839d0d9546a05986771f8738c382060c.patch
  gcc-version-check.patch
  7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
  fix-crash.patch
  * adds exiv2-update-to-0.26-branch.patch
  * Fixes CVE-2017-14864 (bsc#1060995),
  CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
  CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
  CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
  CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
  CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
  CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
  CVE-2017-11591 (bsc#1050257)</changelog>
</package>
<package pkgid="67b82f3717497c488e76faadfc0cc470dba478f11d14389c72a35ea33ddfedbf" name="exiv2" arch="x86_64">
  <version epoch="0" ver="0.26" rel="lp150.5.3.1"/>
  <changelog author="fcrozat@suse.com" date="1348056000">- Add 90_changeset_r2743.diff: add support for additional Samgsung
  EXIF tags (backport for upstream)
- Add 90_changeset_r2744.diff: add support for additional Pentax
  EXIF tags (backport for upstream)
- Add more Canon models (5D Mark III, 600D, 60D, 1100D, WFT-E2 II,
  WFT-E4 II, 650D)
- Add 90_changeset_r2756.diff: add support for EOS-M Sigma 12-24mm
  f/4.5-5.6 DG HSM II lens (backport from upstream)
- Add 90_changeset_r2818_partial.diff: add support for additional
  Canon camera (5D Mark III, 600D, 60D, 1100D, WFT-E2 II, WFT-E4
  II, 650D) and EF/EF-M lenses. (backport from upstream)
- Add 99_pending_canon_eos_m.diff: add support for some Canon EOS-M
  lenses (pending upstream merge)
- Add 99_pending_minolta_manual_lens.diff: add support for Minolta
  manual lens (pending upstream merge)
- Add 99_pending_pentax_da_35.diff: add support for PENTAX-DA 35mm
  F2.4 AL lens (pending upstream merge)
- Add 99_pending_zeiss_planar_35_ze.diff: add support for Carl
  Zeiss Planar T* 50mm f/1.4 ZE lens (pending upstream merge)</changelog>
  <changelog author="fcrozat@suse.com" date="1370260800">- Remove pending patches with upstream versions :
  + 99_pending_canon_eos_m.diff (replaced by
    90_changeset_r2993.diff).
  + 99_pending_minolta_manual_lens.diff (replaced by
    90_changeset_r2989.diff).
  + 99_pending_pentax_da_35.diff (replaced by
    90_changeset_r2860.diff).
  + 99_pending_zeiss_planar_35_ze.diff (replaced by
    90_changeset_r3011.diff).
- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  + 90_changeset_r2889.diff, 90_changeset_r2985.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2958.diff: additional lenses for Samsung body
  + 90_changeset_r2959.diff, 90_changeset_r2961.diff,
    90_changeset_r2985.diff, 90_changeset_r3003.diff,
    90_changeset_r3016.diff, 90_changeset_r3017.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2963.diff, 90_changeset_r2994.diff,
    90_changeset_r3004.diff, 90_changeset_r3023.diff,
    90_changeset_r3026.diff: additional lenses for Canon body.
  + 90_changeset_r2968.diff, 90_changeset_r2969.diff,
    90_changeset_r2995.diff, 90_changeset_r3005.diff,
    90_changeset_r3006.diff: additional lenses for Minolta body.
  + 90_changeset_r2970.diff, 90_changeset_r2975.diff,
    90_changeset_r2978.diff, 90_changeset_r2981.diff,
    90_changeset_r2982.diff, 90_changeset_r2992.diff: additional
    lenses for Olympus body.
  + 90_changeset_r2998.diff: add support for FocusDistance data
    from Olympus EXIF tags.
  + 90_changeset_r2984.diff, 90_changeset_r2986.diff,
    90_changeset_r3002.diff: additional lenses for Nikon body.
  + 90_changeset_r2988.diff: add support for Exif.Photo.LensModel
    EXIF tag.
  + 90_changeset_r2990.diff: prevent double variable creation.
  + 90_changeset_r2991.diff: fix memory corruption.
  + 95_post_r3026_cleanup.diff: cleanup lenses names.</changelog>
  <changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
  <changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
  <changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="wbauer@tmo.at" date="1498824000">- Update to version 0.26
  * See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
  * exiv2-cmake-libsuffix.patch
  * exiv2_r3889_r3890_fix_boo964344.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1499169600">- Fix baselibs.conf</changelog>
  <changelog author="wbauer@tmo.at" date="1502280000">- Add fix-crash.patch to prevent crashes in gwenview with certain
  images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
  the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
  upstream</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
    CVE-2017-14864 bsc#1060995,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000)</changelog>
  <changelog author="cfeck@kde.org" date="1511524800">- split developer documentation into separate package</changelog>
  <changelog author="dmueller@suse.com" date="1527681600">- update to latest 0.26 branch:
  * obsoletes 0001-Use-more-GNUInstallDirs.patch
  d4e4288d839d0d9546a05986771f8738c382060c.patch
  gcc-version-check.patch
  7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
  fix-crash.patch
  * adds exiv2-update-to-0.26-branch.patch
  * Fixes CVE-2017-14864 (bsc#1060995),
  CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
  CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
  CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
  CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
  CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
  CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
  CVE-2017-11591 (bsc#1050257)</changelog>
</package>
<package pkgid="0025a0401aa22ac586a833a6b297d78f99775fc43b3e00113af64c0bd6d7984e" name="exiv2" arch="src">
  <version epoch="0" ver="0.26" rel="lp150.5.6.1"/>
  <changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
  <changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
  <changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="wbauer@tmo.at" date="1498824000">- Update to version 0.26
  * See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
  * exiv2-cmake-libsuffix.patch
  * exiv2_r3889_r3890_fix_boo964344.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1499169600">- Fix baselibs.conf</changelog>
  <changelog author="wbauer@tmo.at" date="1502280000">- Add fix-crash.patch to prevent crashes in gwenview with certain
  images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
  the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
  upstream</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
    CVE-2017-14864 bsc#1060995,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000)</changelog>
  <changelog author="cfeck@kde.org" date="1511524800">- split developer documentation into separate package</changelog>
  <changelog author="dmueller@suse.com" date="1527681600">- update to latest 0.26 branch:
  * obsoletes 0001-Use-more-GNUInstallDirs.patch
  d4e4288d839d0d9546a05986771f8738c382060c.patch
  gcc-version-check.patch
  7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
  fix-crash.patch
  * adds exiv2-update-to-0.26-branch.patch
  * Fixes CVE-2017-14864 (bsc#1060995),
  CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
  CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
  CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
  CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
  CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
  CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
  CVE-2017-11591 (bsc#1050257)</changelog>
  <changelog author="tchvatal@suse.com" date="1530273600">- Fix build on python3 only system by making sure we use
  python3 when building</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1539691200">- update to latest 0.26 branch:
  * Fixes CVE-2018-12264, CVE-2018-12265 (bsc#1097599)</changelog>
</package>
<package pkgid="f82eba84fd2283e38e1866caf29c014837d01e3ff182303bfd8e544090a4b796" name="exiv2" arch="x86_64">
  <version epoch="0" ver="0.26" rel="lp150.5.6.1"/>
  <changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
  <changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
  <changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="wbauer@tmo.at" date="1498824000">- Update to version 0.26
  * See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
  * exiv2-cmake-libsuffix.patch
  * exiv2_r3889_r3890_fix_boo964344.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1499169600">- Fix baselibs.conf</changelog>
  <changelog author="wbauer@tmo.at" date="1502280000">- Add fix-crash.patch to prevent crashes in gwenview with certain
  images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
  the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
  upstream</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
    CVE-2017-14864 bsc#1060995,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000)</changelog>
  <changelog author="cfeck@kde.org" date="1511524800">- split developer documentation into separate package</changelog>
  <changelog author="dmueller@suse.com" date="1527681600">- update to latest 0.26 branch:
  * obsoletes 0001-Use-more-GNUInstallDirs.patch
  d4e4288d839d0d9546a05986771f8738c382060c.patch
  gcc-version-check.patch
  7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
  fix-crash.patch
  * adds exiv2-update-to-0.26-branch.patch
  * Fixes CVE-2017-14864 (bsc#1060995),
  CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
  CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
  CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
  CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
  CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
  CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
  CVE-2017-11591 (bsc#1050257)</changelog>
  <changelog author="tchvatal@suse.com" date="1530273600">- Fix build on python3 only system by making sure we use
  python3 when building</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1539691200">- update to latest 0.26 branch:
  * Fixes CVE-2018-12264, CVE-2018-12265 (bsc#1097599)</changelog>
</package>
<package pkgid="a99a6457675a270984778dedef2ff488cfa0fb7d63dd57a136b9720c8a5be734" name="exiv2-lang" arch="noarch">
  <version epoch="0" ver="0.26" rel="lp150.5.3.1"/>
  <changelog author="fcrozat@suse.com" date="1348056000">- Add 90_changeset_r2743.diff: add support for additional Samgsung
  EXIF tags (backport for upstream)
- Add 90_changeset_r2744.diff: add support for additional Pentax
  EXIF tags (backport for upstream)
- Add more Canon models (5D Mark III, 600D, 60D, 1100D, WFT-E2 II,
  WFT-E4 II, 650D)
- Add 90_changeset_r2756.diff: add support for EOS-M Sigma 12-24mm
  f/4.5-5.6 DG HSM II lens (backport from upstream)
- Add 90_changeset_r2818_partial.diff: add support for additional
  Canon camera (5D Mark III, 600D, 60D, 1100D, WFT-E2 II, WFT-E4
  II, 650D) and EF/EF-M lenses. (backport from upstream)
- Add 99_pending_canon_eos_m.diff: add support for some Canon EOS-M
  lenses (pending upstream merge)
- Add 99_pending_minolta_manual_lens.diff: add support for Minolta
  manual lens (pending upstream merge)
- Add 99_pending_pentax_da_35.diff: add support for PENTAX-DA 35mm
  F2.4 AL lens (pending upstream merge)
- Add 99_pending_zeiss_planar_35_ze.diff: add support for Carl
  Zeiss Planar T* 50mm f/1.4 ZE lens (pending upstream merge)</changelog>
  <changelog author="fcrozat@suse.com" date="1370260800">- Remove pending patches with upstream versions :
  + 99_pending_canon_eos_m.diff (replaced by
    90_changeset_r2993.diff).
  + 99_pending_minolta_manual_lens.diff (replaced by
    90_changeset_r2989.diff).
  + 99_pending_pentax_da_35.diff (replaced by
    90_changeset_r2860.diff).
  + 99_pending_zeiss_planar_35_ze.diff (replaced by
    90_changeset_r3011.diff).
- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  + 90_changeset_r2889.diff, 90_changeset_r2985.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2958.diff: additional lenses for Samsung body
  + 90_changeset_r2959.diff, 90_changeset_r2961.diff,
    90_changeset_r2985.diff, 90_changeset_r3003.diff,
    90_changeset_r3016.diff, 90_changeset_r3017.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2963.diff, 90_changeset_r2994.diff,
    90_changeset_r3004.diff, 90_changeset_r3023.diff,
    90_changeset_r3026.diff: additional lenses for Canon body.
  + 90_changeset_r2968.diff, 90_changeset_r2969.diff,
    90_changeset_r2995.diff, 90_changeset_r3005.diff,
    90_changeset_r3006.diff: additional lenses for Minolta body.
  + 90_changeset_r2970.diff, 90_changeset_r2975.diff,
    90_changeset_r2978.diff, 90_changeset_r2981.diff,
    90_changeset_r2982.diff, 90_changeset_r2992.diff: additional
    lenses for Olympus body.
  + 90_changeset_r2998.diff: add support for FocusDistance data
    from Olympus EXIF tags.
  + 90_changeset_r2984.diff, 90_changeset_r2986.diff,
    90_changeset_r3002.diff: additional lenses for Nikon body.
  + 90_changeset_r2988.diff: add support for Exif.Photo.LensModel
    EXIF tag.
  + 90_changeset_r2990.diff: prevent double variable creation.
  + 90_changeset_r2991.diff: fix memory corruption.
  + 95_post_r3026_cleanup.diff: cleanup lenses names.</changelog>
  <changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
  <changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
  <changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="wbauer@tmo.at" date="1498824000">- Update to version 0.26
  * See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
  * exiv2-cmake-libsuffix.patch
  * exiv2_r3889_r3890_fix_boo964344.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1499169600">- Fix baselibs.conf</changelog>
  <changelog author="wbauer@tmo.at" date="1502280000">- Add fix-crash.patch to prevent crashes in gwenview with certain
  images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
  the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
  upstream</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
    CVE-2017-14864 bsc#1060995,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000)</changelog>
  <changelog author="cfeck@kde.org" date="1511524800">- split developer documentation into separate package</changelog>
  <changelog author="dmueller@suse.com" date="1527681600">- update to latest 0.26 branch:
  * obsoletes 0001-Use-more-GNUInstallDirs.patch
  d4e4288d839d0d9546a05986771f8738c382060c.patch
  gcc-version-check.patch
  7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
  fix-crash.patch
  * adds exiv2-update-to-0.26-branch.patch
  * Fixes CVE-2017-14864 (bsc#1060995),
  CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
  CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
  CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
  CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
  CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
  CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
  CVE-2017-11591 (bsc#1050257)</changelog>
</package>
<package pkgid="d9f973ca5922d3d8b404cbd5bc0397fabfbf6788fad1b1b964c346d112127b42" name="exiv2-lang" arch="noarch">
  <version epoch="0" ver="0.26" rel="lp150.5.6.1"/>
  <changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
  <changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
  <changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="wbauer@tmo.at" date="1498824000">- Update to version 0.26
  * See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
  * exiv2-cmake-libsuffix.patch
  * exiv2_r3889_r3890_fix_boo964344.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1499169600">- Fix baselibs.conf</changelog>
  <changelog author="wbauer@tmo.at" date="1502280000">- Add fix-crash.patch to prevent crashes in gwenview with certain
  images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
  the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
  upstream</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
    CVE-2017-14864 bsc#1060995,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000)</changelog>
  <changelog author="cfeck@kde.org" date="1511524800">- split developer documentation into separate package</changelog>
  <changelog author="dmueller@suse.com" date="1527681600">- update to latest 0.26 branch:
  * obsoletes 0001-Use-more-GNUInstallDirs.patch
  d4e4288d839d0d9546a05986771f8738c382060c.patch
  gcc-version-check.patch
  7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
  fix-crash.patch
  * adds exiv2-update-to-0.26-branch.patch
  * Fixes CVE-2017-14864 (bsc#1060995),
  CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
  CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
  CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
  CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
  CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
  CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
  CVE-2017-11591 (bsc#1050257)</changelog>
  <changelog author="tchvatal@suse.com" date="1530273600">- Fix build on python3 only system by making sure we use
  python3 when building</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1539691200">- update to latest 0.26 branch:
  * Fixes CVE-2018-12264, CVE-2018-12265 (bsc#1097599)</changelog>
</package>
<package pkgid="ecb387b515b2389d07d708a0d83c4ba391cad4df63b7e35e77fffe07566ce58a" name="exo-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="4.12.0" rel="lp150.5.3.1"/>
  <changelog author="gber@opensuse.org" date="1362916800">- support openSUSE 13.1</changelog>
  <changelog author="gber@opensuse.org" date="1367496000">- follow the exo package changes and rename exo-branding-openSUSE
  to libexo-1-0-branding-openSUSE and move helpers.rc in an
  API-versioned subdirectory</changelog>
  <changelog author="gber@opensuse.org" date="1380974400">- add support for 13.2, drop support for &lt; 12.2</changelog>
  <changelog author="gber@opensuse.org" date="1383048000">- improve suse_version overlay system
- add xfce4-power-manager-branding-openSUSE with default actions
  for button press events and critical battery levels</changelog>
  <changelog author="gber@opensuse.org" date="1398600000">- remove support for openSUSE &lt; 12.3
- add custom theme for xfce4-notifyd</changelog>
  <changelog author="gber@opensuse.org" date="1398945600">- adjust to GTK 3 variant of libxfce4ui</changelog>
  <changelog author="gber@opensuse.org" date="1401710400">- adapt xfce4-power-manager branding to version 1.3.0
- fix typo
- rename source tarball removing the meaningless version</changelog>
  <changelog author="gber@opensuse.org" date="1401796800">- fix critical power action and hdd spindown settings</changelog>
  <changelog author="gber@opensuse.org" date="1406635200">- recommend xfce4-panel-plugin-xfce4battery which is in the panel
  branding</changelog>
  <changelog author="gber@opensuse.org" date="1408622400">- xfce4-panel-plugin-xfce4battery was renamed to
  power-manager-plugin</changelog>
  <changelog author="gber@opensuse.org" date="1425211200">- bump version to 4.12
- lock screen on suspen/hibernate</changelog>
  <changelog author="gber@opensuse.org" date="1427544000">- on &gt;= 13.2 package-manager.desktop was renamed to
  yast2-packager.desktop (boo#892936)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480161600">- adapt to changes in exo package (exo-1 subdir patch removed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480248000">- fix exo-branding provides / obsoletes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507464000">- replace application-menu with whiskermenu
- brand whiskermenu suse style
- require whiskermenu from panel-branding-openSUSE
- fix obsoletes of exo-branding-openSUSE</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507723200">- use plugin-pulseaudio instead of plugin-mixer
- recommend pavucontrol and plugin-pulseaudio instead of xfe4-mixer</changelog>
  <changelog author="florian.koch1981@gmail.com" date="1514462400">- use adwaita-icon-theme instead of gnome-icon-theme
  as fallback icon theme
  The reasons for this change are that Upstream gnome no
  longer uses gnome-icon-theme, and to save space on te Thumbleweed
  rescue CD, requested by DimStar
  https://lists.opensuse.org/opensuse-xfce/2017-05/msg00000.html
- fix /etc/xfce_defaults.conf not declared as %conf</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514894400">- fix spelling of "Adwaita" in index.theme (boo#1074269)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1517745600">- fix openSUSE splash screen</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520424000">- revert last change, branding package has been fixed</changelog>
</package>
<package pkgid="8f8bace23968451635c7a77d0d217d7c171c1941e9665d826c8a72f4299ba5b4" name="fate" arch="src">
  <version epoch="0" ver="1.6.0.5" rel="lp150.2.3.1"/>
  <changelog author="jplack@suse.de" date="1458561600">- update to version 1.5.5.5
  * add editing person as additional requester when he adds a new
    product to the feature</changelog>
  <changelog author="joachim@suse.de" date="1481803200">- added requirement for oxygen5-icon-theme (bsc#980276)</changelog>
  <changelog author="jplack@suse.com" date="1484827200">- update to version 1.5.5.6
  * make fate.spec clean for "spec-cleaner"
  * cleanup of cmakefiles, adapting to current style and syntax with much help
    from Tomas Chvatal
  * removed code for unused query-history tracking
  * replace deprecated code from qt3 compatability remaining from last port
  * remove code for unused tagging and voting
  * clean old outdated comments/code from specfile, use new Makefile
  * included patches from dmolkentin to fix fate process help view
  * switched to using repo on new gitlab.suse.de, adjusted update script
  * fix ProgressWidget as a final step away from Qt3 remainders
  * fixes BSC#980276, #978153, #956270, #1004536, #957827, #934673
  * fixes 8+ years old bsc#401198: Saving changes list of displayed features</changelog>
  <changelog author="jplack@suse.com" date="1485259200">- removed old style 'norootforbuild'
- require oxygen-icon-theme instead of oxygen5-icon-theme (bsc#1015881)</changelog>
  <changelog author="jplack@suse.com" date="1485432000">- update to version 1.5.5.7
  * make comments always editable by original author
  * bsc#1006192: have UTC time stamps in comments as in openfate
  * bsc#940928: fix formatting and limit comment threads
  * bsc#967367: remove bookmarks feature which is currently broken
  * bsc#1004536 : create an extra list for ECO stakeholders in feature view</changelog>
  <changelog author="jplack@suse.com" date="1485604800">- more fixes:
  * bsc#837526: fix filter in productviewer, rearrange columns and layout,
    also show feature open dates and deadlines
  * bsc#964882: fix crash, QList::first() returns undefined on empty list, so
    check first</changelog>
  <changelog author="jplack@suse.com" date="1485864000">- replaces outdated inttools@ mail adress by featureadmin@ (bug via email)</changelog>
  <changelog author="jplack@suse.com" date="1486728000">- weekend update, pl2 ;-)
  * the mouse wheel is now (better) usable in the general tab of
    the feature editor
  * better label for priority editor table
  * bsc#1024737: update fate.desktop file to have official menu
    categories listed</changelog>
  <changelog author="jplack@suse.com" date="1488801600">- update to version 1.5.5.8
  * bsc#1028004: Error when generating a query that uses milestones
  * remember DeltaDialog size over restart
  * make diffs in 'Changes' dialog coloured</changelog>
  <changelog author="jplack@suse.com" date="1488888000">- remove dependency to libBoost, contribution from Michael Matz</changelog>
  <changelog author="jplack@suse.com" date="1489665600">- limit query title label to a single line, EMail bug from Kai Dupke</changelog>
  <changelog author="jplack@suse.com" date="1496923200">- test build of version 1.6</changelog>
  <changelog author="jplack@suse.com" date="1496923201">- update to version 1.6
  * override the productName in features with the one from the database
    if available
  * remove "show Document Source" functionality nobody really needs
- Easier workflow fo Save/SaveAll features (bsc#1036753):
  * add save actions w/ kbd shortcuts to separate FeatureViews
  * add save actions to menues and tool bars
  * Fix naming for explicit number queries
  * adding actions for save_feature and save_all_features to FeatureView
  * change Query shortcut from Ctrl-S to Ctrl-F
- Multiple changes at once:
  * distinguish between updateProduct and addProduct in
    PriorityTable::updateProductData
  * change editable flag of requester prio dynamically in PriorityTable
  * always keep old values in PriorityTable
  * avoid usage of QSignalMapper in PriorityTable
  * use Feature::updateProduct in PriorityTable
  * implement MultiFeature::updateProduct
  * implement Feature::updateProduct()
  * move down PriorityTable::addAsRequester() for newly added products to
    class Feature
  * pass a real list in Feature::products() instead of a const reference
  * pass a real list of actors up instead of a reference so that the compiler
    does not optimize in multifeature
  * use class MultiOpView in FeatureView
  * implement class MultiOpView
  * implement class MultiFeature
  * avoid excess signals in Feature::removeProduct
  * implement Priority::operator=
- Use class FeatureViewBase wherever appropriate:
  * SimpleEditor, more use of macro FeatureViewBase_setFeature
  * derive SimpleEditor from FeatureViewBase
  * also disconnect the other way round in FeatureViewBase_setFeature
  * prepare Simpleeditor for using FeatureViewBase
  * remove acccess includes in ecoeditor.cpp
  * include verticalpage.h directly for ecoeditor
  * split out VerticalPage from simpleeditor into separate files
  * use FVB extension in EcoEditor, PriorityTable, FeatureDisplay,
    FeatureDiffView and FeatureActorEdit
  * derive class FeatureView from FeatureViewBase
  * extend class FeatureViewBase
- Enhance presenting Diffs (bsc#1039533 and more):
  * dimm green and red by 10% used for presenting changed lines in
    FeatureViewDiff
  * use monospaced font for presenting diffs
- Simpleeditor:
  * refactor to use new class Feature signals
  * avoid cursor position reset (wrong feedback from Feature) when editing in
    QLineEdit
  * use QLineEdit instead of KLineEdit
  * fix richtext conversion in all RichTextEdit widgets, report from
    behlert@suse.de
- Multiple FeatureView windows:
  * set default size 800x600 for newFeatureView
  * fix crash when calling context menu outside of table
  * fix crashes on reload of the feature
  * open new window on signal requestFeatureView in MainView
  * implement a context menu just to signal a requestFeatureView(Feature *)
  * implement class FateTableWidget to avoid selection on right mouse button
    click
  * remove obsoleted slot FeatureTableView::updateTitle
  * make ProductMap a singleton class and use it in FeatureView, EcoEditor,
    PriorityTable, ApproverListEdit, SimpleEditor, MainView
  * added TODO comments about what needs to be done
  * update signal connections to FeatureView
  * eliminate MainView::selectFeature() only used once
  * for initial feature selection also highlight it in FeatureListView
  * add helpful coments to mainview.cpp
  * remove FeatureView::save() finally
- Make ECO code compliant to refactored class feature
  * avoid warnings from early translation
  * fix FeatureView::startECO
  * signal modified moved from VerticalPage where it disappeared
  * remove duplicated code and fix wrong usage of derived virtual methods
  * eliminate obsolete FeatureView::saveData()
  * transform EcoEditor to derive from FeatureViewBase
  * implement signal Feature::saveECO()
- Refactor SimpleEditor to use new signals of class Feature:
  * fix problems saving single modified feature (email report from
    Matthias Eckermann)
  * implement FeatureDisplay::updateView for obvious reasons
  * comment out currentFeatureAboutToBeSaved
  * remove connects to deprecated signal modified()
  * remove FeatureView::slotTitleChanged
  * remove obsoleted code and declarations
  * FeatureView: no more need to actively update other widgets
  * remove modified signals, slots and flag, class Feature keeps state
  * remove signal titleChanged, class Feature has it now
  * remove signal titleChanged() form FeatureView which now comes from Feature
  * remove no longer needed method saveData(bool)
  * use-feature-signals for ReleaseNotesPage, InternalPage, MiscPage,
    PartnerPage, GeneralPage
  * get independent from definitions of documentationStatus in FeatureData
  * remove dead, commented or debug code
  * RichtextEditor: implement signal textEdited(s), make setPlainText a slot
  * RichtextEditor: update copyright notice
- New product&amp;priority editor:
  * update feature data model when deleting a single product in PriorityTable
  * fix unintended changes of feature in PriorityTable::setArch
  * add completion to PriorityTable::addAsRequester
  * priorityTable: remove warnings
  * transform PriorityTable to derive from FeatureViewBase
  * eliminate PriorityTable::clear
  * show milestone column only when needed
  * cleanup PriorityTable::addProduct
  * remove passthrough slot for priorityTable
  * get confusing column and row out of the names, use product_ix and attribute
    instead
  * remove scrollbarpolicy that is without effect
  * delete unused archeditor
  * cleanup debug and warning messages
  * split out common code from changeProduct and editProduct to method void
    changeProduct(int, QString);
  * rename editProduct to editSingleProduct, be less confusing same with
    addProduct(void) to slotAddProduct
  * prioritytable: simplify and clean code a bit
  * prepare for extended status handling
  * fix status tooltip and add for duplicates and products cleanup status
    handling
  * eliminate mEditing, setEnabled() is enough
  * also add products through product pulldown
  * add tooltips to row headers
  * removed always hidden duplicateRow and unsuse TableCol enum
  * create a popup QMenu for editing single products
  * simplify setXX functions, delete unused
  * pass generalpage in constructor of PriorityTable
  * eliminate slotEditProductList()
  * simplyfy code and loops, heavy use of foreach macro
  * disable text editing of product name item
  * adjust style for comboboxes
  * remove KDE3 #if remainders
  * Convert  mEntries to be a QList&lt;Entry&gt;
  * prioritytable: implement size hints and resize handling
  * derive PriorityTable directly from QTableWidget
  * remove unused sort function
  * remember products by name rather than id
  * eliminate productlisteditorbase
  * exchange order of PrjMgr and PM, PM first
  * edit architectures through QxtCheckComboBox now
  * simplyfy setComboItem and use it where possible
  * Turn priority dialog by 90 degrees
- New ActorList Editor:
  * Merge branch 'new-actorlist-editor'
  * fix item association in ActorListEdit::showActorMenu
  * highlist role when it contains yourself
  * use FeatureActorEdit instead of ActorListEdit in GeneralPage
  * commentDialog acts directly on Feature object
  * implement class FeatureActorEdit as a FeatureViewBase wrapper around
    ActorListEdit
  * enable context menu on left click as well
  * remove Delete shortcut from ListEdit which does not work as the action
    needs to be added to a global widget
  * fix updating of display
  * fix functionality when roleHidden is set
  * fix crash in removeActor
  * fix layout for other dialogs using ActorListEdit
  * updateView is virtual
  * use SIGNAL ActorListEdit::actorsEdited in simpleeditor
  * implement ActorListEdit::showActorMenu
  * implement ActorListEdit::slotAddMyself(QString roleId) and heavily use it
  * remove all radio and check boxes from ActorEditor
  * remove debugging messages
  * refine layout mgmt for ActorListEdit
  * implement ActorListEdit::sizeHint() and minimumSizeHint()
  * remove commented broken code
  * nicer name list and tooltip
  * make sure the list has the requester first, followed by ProdMgr
  * remove remaining KDE deps
  * make slotXXitem methods work again
  * let addActor(QSharedActor *) handle duplicates
  * add another findRow(QSharedActor*) method
  * fix setToolTip and move into updateView
  * remove unused ActorListEdit::actorUpdated(), adjust removeActor methods
  * First stage: - exchanged role and person column which now contains a list of
    all person in that role - loading and storing of the data works - all slots
    need testing/adjusting
  * use Actor::displayName() in eco.cpp, remove unused static method
  * ListEdit: enhance layout management and reimplement removeRow() for that
  * ListEdit: sizeHint() is virtual
  * ListEdit: remove unused kDebug
  * implemented ListEdit::insertRow() methods
  * remove unused stuff, eliminate roleHidden and listView in ActorListEdit
  * adjust ListEdit's sizePolicy
  * deprecate ListEdit::listView()
  * choose a nicer label for roles and actors
  * fix toolTips using Qt4 style finally
  * implement signal actorsEdited() replacing signal modified() and make
    setActors() a slot
- Configurable tabbed FeatureView:
  * some tuning for FeatureDiffView
  * better default tabs in FeatureView
  * add a placeholder for a multiOperation widget
  * initialize newly added FeatureViewBase tab with current feature data
  * FeatureDiffView: keep config over restart
  * implement FeatureDiffView::setFeature(Feature *), eliminate diff() and
    showDiff()
  * implement FeatureDiffView::configure (dialog)
  * transform FeatureDiffView to derive from FeatureViewBase
  * transform FeatureDisplay to derive from FeatureViewBase
  * implement class FeatureViewBase
  * adjust CMakeLists.txt and editor/featurediffview* to compile again in the
    new location
  * mv ui/diffgenerator to editor/featurediffview
  * use new FeatureDiffView in FeatureView
  * transform DiffGenerator to class FeatureDiffView
  * replace FeatureMap::showDiff dialog by the data provider origFeature()
  * show ECO tab when selected feature has an ECO section
  * remove all bottom buttons in ECOEditor, SimpleEditor and FeatureDisplay
  * implement configurable QTabWidget w/ all bottom buttons in a QMenu
- Eliminate use of some KDE widgets including KTabWidget
  * directly derive FeatureView from QTabWidget, eliminate KTabWidget
  * SimpleEditor: port from KTabWidget -&gt; QTabWidget
  * directly derive ECOEditor from QTabWidget
  * MainView: better icons for reload actions
  * MainView: port from KTabWidget -&gt; QTabWidget
  * use class RelationTreeMap as a singleton class
  * reduce usage of KLineEdit
  * replace KTextEdit
  * replace KPushButton
- Refactor class Feature model alike
  * simplify Feature::productByName
  * Do not allow duplicate actors (bsc#961147)
  * Feature::addProduct() does now also work for update
  * implement Feature::removeProduct(const QString &amp;id)
  * implement ProductContext::operator=
  * add architecture strings to featuredata
  * fix FeatureData::Actor::match to handle empty identity special and not as a
    catchall wildcard
  * make FeatureData::Actor::operator= and operator!= const
  * adding FeatureData::Actor::displayName() and Actor::displayEmail()
  * feature: export assigned featureMap
  * avoid crash on destruction of HtmlView
  * do not use intelligent setter functions while parsing feature
  * update copyright notice, fold long lines
  * feature: optimize/minimize emitting of signals
  * feature: remove unused method removeActorRole()
  * feature: simplify code
  * featuremap: pass through signal Feature::featureChanged()
  * implemented Feature::operator=
  * make handling of documentationStatus in FeatureData case insensitive, return
    upcase-first strings
  * implement emitting of signals
  * make class Feature a decendent of QObject
  * make setter methods public slots for class Feature
  * remove unused methods from class Feature
  * remove or comment support for feature tagging/voting, disable code compilation
  * removed support for unused feature element 'effort'
- Also resolves bugzillas:
  * bsc#887741  normal quit of fate client triggers KCrash
  * bsc#961147  Duplicate Person Box
  * bsc#1024737 FATE: Does not show up in menu
  * bsc#1032240 Segfault when removing Info Provider
  * bsc#1036753 Two clicks required to save a FATE entry
  * bsc#1032321 No save button after changing product
  * bsc#1032481 Unable to save a feature
  * bsc#1040654 Rename SLE-13-HPC to SLE-15-HPC</changelog>
  <changelog author="jplack@suse.com" date="1498219200">- bugfix release 1.6.0.1
  * bsc#1044954 FATE crashes on selected feature in query (TumbleWeed only)</changelog>
  <changelog author="jplack@suse.com" date="1498564800">- bugfix: bring back signal FeatureMap::featureReloaded</changelog>
  <changelog author="jplack@suse.com" date="1501502400">- bugfix release 1.6.0.2
  * fix bsc#1050997 in query by ids, thanks to reporter afaerber@
    and aschwab@
  * fix freeze/unfreeze in FeatureTableView
  * do not copy xml representation in Feature::operator=
  * eliminate public method FeatureMap::recordChange that nobody needs
  * FeatureMapListView: derive directly from FeatureTableView
  * fix reloading of single features, eliminate signal
    FeatureMap::featureReloaded()
  * let FeatureView handle its stuff alone in MainView
  * handle signals from FeatureMap properly in FeatureView if they apply
  * add a new public method FeatureMap::addNewFeature, making
    addFeature/addFeatures protected
  * hide progress bar after Feature import or cloning
  * make Feature::operator= an internal operation for friend classes only
  * do not bail out on new Features in FeatureDiffView::showFeatureChanges
  * remove non-emitted signal FeatureDisplay::featureSelected(Feature*)
  * remove FeatureMap* from FeatureView constructor
  * fix bug in Feature::operator=</changelog>
  <changelog author="jplack@suse.com" date="1502712000">- bugfix release 1.6.0.3
  * fix #1049390 - Standard approvers are not prepopulated anymore in ECOs
  * fix #1052788 - attachments are accepted , but not added / referenced
  * fix #1053025 - Crash when trying to approve an ECO
  * fix #1052391 - Cannot add Engineering Manager
  * fix #1052799 - Cannot change Priority</changelog>
  <changelog author="jplack@suse.com" date="1512734400">- bugfix release 1.6.0.4
  * fix #1071535 - Prio P1: Changes to Dev/QA in ECO tab are not recognized or saved
  * fix #962999  - CSS: Font size 8pt too small for reading
  * fix #1059515 - Fate repeatedly crashing
  * fix #1054023 - Can change ECO fields after initial save
  * fix #1047302 - Duplicated features not visible in FATE
  * fix #984459  - Crash after not saving new entry and quitting</changelog>
  <changelog author="jplack@suse.com" date="1527163200">- bugfix release 1.6.0.5
  * fix #1094520 - New or imported features are sometimes not
  shown/editable, thanks to Dwain Sims
  * fix #1081921 - explicitely select feature if it is the first one
  * enhanced ECO approver handling
  * implement adding of single ECO approver
  * fix #1080586 - Misleading label in ECO form
  * fix #1088478 - Prefs can have invalid Products, thanks to Adam Majer
  * integrate experimental list and tree view (sparetime project) to
    help SLE12SP4 business value process experiment
  * make some space in PriorityTable for context menu to select
  * give additional productid for each approver for each diff or history
  * include caching of productId for ECO approvers</changelog>
  <changelog author="joachim@suse.de" date="1527249600">- remove own old definition of CHECK_CXX_SYMBOL_EXISTS to compile
  again with cmake 3.11+</changelog>
</package>
<package pkgid="d7488acd169b44cac5c6356840e56835471bcf1a3359d39f103496ef1946c20c" name="fate" arch="x86_64">
  <version epoch="0" ver="1.6.0.5" rel="lp150.2.3.1"/>
  <changelog author="jplack@suse.de" date="1458561600">- update to version 1.5.5.5
  * add editing person as additional requester when he adds a new
    product to the feature</changelog>
  <changelog author="joachim@suse.de" date="1481803200">- added requirement for oxygen5-icon-theme (bsc#980276)</changelog>
  <changelog author="jplack@suse.com" date="1484827200">- update to version 1.5.5.6
  * make fate.spec clean for "spec-cleaner"
  * cleanup of cmakefiles, adapting to current style and syntax with much help
    from Tomas Chvatal
  * removed code for unused query-history tracking
  * replace deprecated code from qt3 compatability remaining from last port
  * remove code for unused tagging and voting
  * clean old outdated comments/code from specfile, use new Makefile
  * included patches from dmolkentin to fix fate process help view
  * switched to using repo on new gitlab.suse.de, adjusted update script
  * fix ProgressWidget as a final step away from Qt3 remainders
  * fixes BSC#980276, #978153, #956270, #1004536, #957827, #934673
  * fixes 8+ years old bsc#401198: Saving changes list of displayed features</changelog>
  <changelog author="jplack@suse.com" date="1485259200">- removed old style 'norootforbuild'
- require oxygen-icon-theme instead of oxygen5-icon-theme (bsc#1015881)</changelog>
  <changelog author="jplack@suse.com" date="1485432000">- update to version 1.5.5.7
  * make comments always editable by original author
  * bsc#1006192: have UTC time stamps in comments as in openfate
  * bsc#940928: fix formatting and limit comment threads
  * bsc#967367: remove bookmarks feature which is currently broken
  * bsc#1004536 : create an extra list for ECO stakeholders in feature view</changelog>
  <changelog author="jplack@suse.com" date="1485604800">- more fixes:
  * bsc#837526: fix filter in productviewer, rearrange columns and layout,
    also show feature open dates and deadlines
  * bsc#964882: fix crash, QList::first() returns undefined on empty list, so
    check first</changelog>
  <changelog author="jplack@suse.com" date="1485864000">- replaces outdated inttools@ mail adress by featureadmin@ (bug via email)</changelog>
  <changelog author="jplack@suse.com" date="1486728000">- weekend update, pl2 ;-)
  * the mouse wheel is now (better) usable in the general tab of
    the feature editor
  * better label for priority editor table
  * bsc#1024737: update fate.desktop file to have official menu
    categories listed</changelog>
  <changelog author="jplack@suse.com" date="1488801600">- update to version 1.5.5.8
  * bsc#1028004: Error when generating a query that uses milestones
  * remember DeltaDialog size over restart
  * make diffs in 'Changes' dialog coloured</changelog>
  <changelog author="jplack@suse.com" date="1488888000">- remove dependency to libBoost, contribution from Michael Matz</changelog>
  <changelog author="jplack@suse.com" date="1489665600">- limit query title label to a single line, EMail bug from Kai Dupke</changelog>
  <changelog author="jplack@suse.com" date="1496923200">- test build of version 1.6</changelog>
  <changelog author="jplack@suse.com" date="1496923201">- update to version 1.6
  * override the productName in features with the one from the database
    if available
  * remove "show Document Source" functionality nobody really needs
- Easier workflow fo Save/SaveAll features (bsc#1036753):
  * add save actions w/ kbd shortcuts to separate FeatureViews
  * add save actions to menues and tool bars
  * Fix naming for explicit number queries
  * adding actions for save_feature and save_all_features to FeatureView
  * change Query shortcut from Ctrl-S to Ctrl-F
- Multiple changes at once:
  * distinguish between updateProduct and addProduct in
    PriorityTable::updateProductData
  * change editable flag of requester prio dynamically in PriorityTable
  * always keep old values in PriorityTable
  * avoid usage of QSignalMapper in PriorityTable
  * use Feature::updateProduct in PriorityTable
  * implement MultiFeature::updateProduct
  * implement Feature::updateProduct()
  * move down PriorityTable::addAsRequester() for newly added products to
    class Feature
  * pass a real list in Feature::products() instead of a const reference
  * pass a real list of actors up instead of a reference so that the compiler
    does not optimize in multifeature
  * use class MultiOpView in FeatureView
  * implement class MultiOpView
  * implement class MultiFeature
  * avoid excess signals in Feature::removeProduct
  * implement Priority::operator=
- Use class FeatureViewBase wherever appropriate:
  * SimpleEditor, more use of macro FeatureViewBase_setFeature
  * derive SimpleEditor from FeatureViewBase
  * also disconnect the other way round in FeatureViewBase_setFeature
  * prepare Simpleeditor for using FeatureViewBase
  * remove acccess includes in ecoeditor.cpp
  * include verticalpage.h directly for ecoeditor
  * split out VerticalPage from simpleeditor into separate files
  * use FVB extension in EcoEditor, PriorityTable, FeatureDisplay,
    FeatureDiffView and FeatureActorEdit
  * derive class FeatureView from FeatureViewBase
  * extend class FeatureViewBase
- Enhance presenting Diffs (bsc#1039533 and more):
  * dimm green and red by 10% used for presenting changed lines in
    FeatureViewDiff
  * use monospaced font for presenting diffs
- Simpleeditor:
  * refactor to use new class Feature signals
  * avoid cursor position reset (wrong feedback from Feature) when editing in
    QLineEdit
  * use QLineEdit instead of KLineEdit
  * fix richtext conversion in all RichTextEdit widgets, report from
    behlert@suse.de
- Multiple FeatureView windows:
  * set default size 800x600 for newFeatureView
  * fix crash when calling context menu outside of table
  * fix crashes on reload of the feature
  * open new window on signal requestFeatureView in MainView
  * implement a context menu just to signal a requestFeatureView(Feature *)
  * implement class FateTableWidget to avoid selection on right mouse button
    click
  * remove obsoleted slot FeatureTableView::updateTitle
  * make ProductMap a singleton class and use it in FeatureView, EcoEditor,
    PriorityTable, ApproverListEdit, SimpleEditor, MainView
  * added TODO comments about what needs to be done
  * update signal connections to FeatureView
  * eliminate MainView::selectFeature() only used once
  * for initial feature selection also highlight it in FeatureListView
  * add helpful coments to mainview.cpp
  * remove FeatureView::save() finally
- Make ECO code compliant to refactored class feature
  * avoid warnings from early translation
  * fix FeatureView::startECO
  * signal modified moved from VerticalPage where it disappeared
  * remove duplicated code and fix wrong usage of derived virtual methods
  * eliminate obsolete FeatureView::saveData()
  * transform EcoEditor to derive from FeatureViewBase
  * implement signal Feature::saveECO()
- Refactor SimpleEditor to use new signals of class Feature:
  * fix problems saving single modified feature (email report from
    Matthias Eckermann)
  * implement FeatureDisplay::updateView for obvious reasons
  * comment out currentFeatureAboutToBeSaved
  * remove connects to deprecated signal modified()
  * remove FeatureView::slotTitleChanged
  * remove obsoleted code and declarations
  * FeatureView: no more need to actively update other widgets
  * remove modified signals, slots and flag, class Feature keeps state
  * remove signal titleChanged, class Feature has it now
  * remove signal titleChanged() form FeatureView which now comes from Feature
  * remove no longer needed method saveData(bool)
  * use-feature-signals for ReleaseNotesPage, InternalPage, MiscPage,
    PartnerPage, GeneralPage
  * get independent from definitions of documentationStatus in FeatureData
  * remove dead, commented or debug code
  * RichtextEditor: implement signal textEdited(s), make setPlainText a slot
  * RichtextEditor: update copyright notice
- New product&amp;priority editor:
  * update feature data model when deleting a single product in PriorityTable
  * fix unintended changes of feature in PriorityTable::setArch
  * add completion to PriorityTable::addAsRequester
  * priorityTable: remove warnings
  * transform PriorityTable to derive from FeatureViewBase
  * eliminate PriorityTable::clear
  * show milestone column only when needed
  * cleanup PriorityTable::addProduct
  * remove passthrough slot for priorityTable
  * get confusing column and row out of the names, use product_ix and attribute
    instead
  * remove scrollbarpolicy that is without effect
  * delete unused archeditor
  * cleanup debug and warning messages
  * split out common code from changeProduct and editProduct to method void
    changeProduct(int, QString);
  * rename editProduct to editSingleProduct, be less confusing same with
    addProduct(void) to slotAddProduct
  * prioritytable: simplify and clean code a bit
  * prepare for extended status handling
  * fix status tooltip and add for duplicates and products cleanup status
    handling
  * eliminate mEditing, setEnabled() is enough
  * also add products through product pulldown
  * add tooltips to row headers
  * removed always hidden duplicateRow and unsuse TableCol enum
  * create a popup QMenu for editing single products
  * simplify setXX functions, delete unused
  * pass generalpage in constructor of PriorityTable
  * eliminate slotEditProductList()
  * simplyfy code and loops, heavy use of foreach macro
  * disable text editing of product name item
  * adjust style for comboboxes
  * remove KDE3 #if remainders
  * Convert  mEntries to be a QList&lt;Entry&gt;
  * prioritytable: implement size hints and resize handling
  * derive PriorityTable directly from QTableWidget
  * remove unused sort function
  * remember products by name rather than id
  * eliminate productlisteditorbase
  * exchange order of PrjMgr and PM, PM first
  * edit architectures through QxtCheckComboBox now
  * simplyfy setComboItem and use it where possible
  * Turn priority dialog by 90 degrees
- New ActorList Editor:
  * Merge branch 'new-actorlist-editor'
  * fix item association in ActorListEdit::showActorMenu
  * highlist role when it contains yourself
  * use FeatureActorEdit instead of ActorListEdit in GeneralPage
  * commentDialog acts directly on Feature object
  * implement class FeatureActorEdit as a FeatureViewBase wrapper around
    ActorListEdit
  * enable context menu on left click as well
  * remove Delete shortcut from ListEdit which does not work as the action
    needs to be added to a global widget
  * fix updating of display
  * fix functionality when roleHidden is set
  * fix crash in removeActor
  * fix layout for other dialogs using ActorListEdit
  * updateView is virtual
  * use SIGNAL ActorListEdit::actorsEdited in simpleeditor
  * implement ActorListEdit::showActorMenu
  * implement ActorListEdit::slotAddMyself(QString roleId) and heavily use it
  * remove all radio and check boxes from ActorEditor
  * remove debugging messages
  * refine layout mgmt for ActorListEdit
  * implement ActorListEdit::sizeHint() and minimumSizeHint()
  * remove commented broken code
  * nicer name list and tooltip
  * make sure the list has the requester first, followed by ProdMgr
  * remove remaining KDE deps
  * make slotXXitem methods work again
  * let addActor(QSharedActor *) handle duplicates
  * add another findRow(QSharedActor*) method
  * fix setToolTip and move into updateView
  * remove unused ActorListEdit::actorUpdated(), adjust removeActor methods
  * First stage: - exchanged role and person column which now contains a list of
    all person in that role - loading and storing of the data works - all slots
    need testing/adjusting
  * use Actor::displayName() in eco.cpp, remove unused static method
  * ListEdit: enhance layout management and reimplement removeRow() for that
  * ListEdit: sizeHint() is virtual
  * ListEdit: remove unused kDebug
  * implemented ListEdit::insertRow() methods
  * remove unused stuff, eliminate roleHidden and listView in ActorListEdit
  * adjust ListEdit's sizePolicy
  * deprecate ListEdit::listView()
  * choose a nicer label for roles and actors
  * fix toolTips using Qt4 style finally
  * implement signal actorsEdited() replacing signal modified() and make
    setActors() a slot
- Configurable tabbed FeatureView:
  * some tuning for FeatureDiffView
  * better default tabs in FeatureView
  * add a placeholder for a multiOperation widget
  * initialize newly added FeatureViewBase tab with current feature data
  * FeatureDiffView: keep config over restart
  * implement FeatureDiffView::setFeature(Feature *), eliminate diff() and
    showDiff()
  * implement FeatureDiffView::configure (dialog)
  * transform FeatureDiffView to derive from FeatureViewBase
  * transform FeatureDisplay to derive from FeatureViewBase
  * implement class FeatureViewBase
  * adjust CMakeLists.txt and editor/featurediffview* to compile again in the
    new location
  * mv ui/diffgenerator to editor/featurediffview
  * use new FeatureDiffView in FeatureView
  * transform DiffGenerator to class FeatureDiffView
  * replace FeatureMap::showDiff dialog by the data provider origFeature()
  * show ECO tab when selected feature has an ECO section
  * remove all bottom buttons in ECOEditor, SimpleEditor and FeatureDisplay
  * implement configurable QTabWidget w/ all bottom buttons in a QMenu
- Eliminate use of some KDE widgets including KTabWidget
  * directly derive FeatureView from QTabWidget, eliminate KTabWidget
  * SimpleEditor: port from KTabWidget -&gt; QTabWidget
  * directly derive ECOEditor from QTabWidget
  * MainView: better icons for reload actions
  * MainView: port from KTabWidget -&gt; QTabWidget
  * use class RelationTreeMap as a singleton class
  * reduce usage of KLineEdit
  * replace KTextEdit
  * replace KPushButton
- Refactor class Feature model alike
  * simplify Feature::productByName
  * Do not allow duplicate actors (bsc#961147)
  * Feature::addProduct() does now also work for update
  * implement Feature::removeProduct(const QString &amp;id)
  * implement ProductContext::operator=
  * add architecture strings to featuredata
  * fix FeatureData::Actor::match to handle empty identity special and not as a
    catchall wildcard
  * make FeatureData::Actor::operator= and operator!= const
  * adding FeatureData::Actor::displayName() and Actor::displayEmail()
  * feature: export assigned featureMap
  * avoid crash on destruction of HtmlView
  * do not use intelligent setter functions while parsing feature
  * update copyright notice, fold long lines
  * feature: optimize/minimize emitting of signals
  * feature: remove unused method removeActorRole()
  * feature: simplify code
  * featuremap: pass through signal Feature::featureChanged()
  * implemented Feature::operator=
  * make handling of documentationStatus in FeatureData case insensitive, return
    upcase-first strings
  * implement emitting of signals
  * make class Feature a decendent of QObject
  * make setter methods public slots for class Feature
  * remove unused methods from class Feature
  * remove or comment support for feature tagging/voting, disable code compilation
  * removed support for unused feature element 'effort'
- Also resolves bugzillas:
  * bsc#887741  normal quit of fate client triggers KCrash
  * bsc#961147  Duplicate Person Box
  * bsc#1024737 FATE: Does not show up in menu
  * bsc#1032240 Segfault when removing Info Provider
  * bsc#1036753 Two clicks required to save a FATE entry
  * bsc#1032321 No save button after changing product
  * bsc#1032481 Unable to save a feature
  * bsc#1040654 Rename SLE-13-HPC to SLE-15-HPC</changelog>
  <changelog author="jplack@suse.com" date="1498219200">- bugfix release 1.6.0.1
  * bsc#1044954 FATE crashes on selected feature in query (TumbleWeed only)</changelog>
  <changelog author="jplack@suse.com" date="1498564800">- bugfix: bring back signal FeatureMap::featureReloaded</changelog>
  <changelog author="jplack@suse.com" date="1501502400">- bugfix release 1.6.0.2
  * fix bsc#1050997 in query by ids, thanks to reporter afaerber@
    and aschwab@
  * fix freeze/unfreeze in FeatureTableView
  * do not copy xml representation in Feature::operator=
  * eliminate public method FeatureMap::recordChange that nobody needs
  * FeatureMapListView: derive directly from FeatureTableView
  * fix reloading of single features, eliminate signal
    FeatureMap::featureReloaded()
  * let FeatureView handle its stuff alone in MainView
  * handle signals from FeatureMap properly in FeatureView if they apply
  * add a new public method FeatureMap::addNewFeature, making
    addFeature/addFeatures protected
  * hide progress bar after Feature import or cloning
  * make Feature::operator= an internal operation for friend classes only
  * do not bail out on new Features in FeatureDiffView::showFeatureChanges
  * remove non-emitted signal FeatureDisplay::featureSelected(Feature*)
  * remove FeatureMap* from FeatureView constructor
  * fix bug in Feature::operator=</changelog>
  <changelog author="jplack@suse.com" date="1502712000">- bugfix release 1.6.0.3
  * fix #1049390 - Standard approvers are not prepopulated anymore in ECOs
  * fix #1052788 - attachments are accepted , but not added / referenced
  * fix #1053025 - Crash when trying to approve an ECO
  * fix #1052391 - Cannot add Engineering Manager
  * fix #1052799 - Cannot change Priority</changelog>
  <changelog author="jplack@suse.com" date="1512734400">- bugfix release 1.6.0.4
  * fix #1071535 - Prio P1: Changes to Dev/QA in ECO tab are not recognized or saved
  * fix #962999  - CSS: Font size 8pt too small for reading
  * fix #1059515 - Fate repeatedly crashing
  * fix #1054023 - Can change ECO fields after initial save
  * fix #1047302 - Duplicated features not visible in FATE
  * fix #984459  - Crash after not saving new entry and quitting</changelog>
  <changelog author="jplack@suse.com" date="1527163200">- bugfix release 1.6.0.5
  * fix #1094520 - New or imported features are sometimes not
  shown/editable, thanks to Dwain Sims
  * fix #1081921 - explicitely select feature if it is the first one
  * enhanced ECO approver handling
  * implement adding of single ECO approver
  * fix #1080586 - Misleading label in ECO form
  * fix #1088478 - Prefs can have invalid Products, thanks to Adam Majer
  * integrate experimental list and tree view (sparetime project) to
    help SLE12SP4 business value process experiment
  * make some space in PriorityTable for context menu to select
  * give additional productid for each approver for each diff or history
  * include caching of productId for ECO approvers</changelog>
  <changelog author="joachim@suse.de" date="1527249600">- remove own old definition of CHECK_CXX_SYMBOL_EXISTS to compile
  again with cmake 3.11+</changelog>
</package>
<package pkgid="e99f4dd859414d1e5e6060e0fc4ded9ec25809661dac1c97bb7858b1193d2afc" name="feh" arch="src">
  <version epoch="0" ver="2.27.1" rel="lp150.2.3.1"/>
  <changelog author="mimi.vx@gmail.com" date="1472731200">- update to 2.17.1
- added feh-makefile_app.patch -- fix install location of icons
- refreshed feh-makefile_optflags.patch
  * Install feh icon (both 48x48 and scalable SVG) to /usr/share/icons
    when running "make install app=1"
  * Fix --sort not being respected after the first reload when used in
    conjunction with --reload
  * All key actions can now also be bound to a button by specifying them
    in .config/feh/buttons. However, note that button actions can not be
    bound to keys.
  * Rename "menu" key action to "toggle_menu", "prev" to "prev_img" and
    "next" to "next_img". The old names are still supported, but no longer
    documented.
  * feh now also sets the X11 _NET_WM_PID and WM_CLIENT_MACHINE window
    properties
  * Fix compilation on systems where HOST_NAME_MAX is not defined</changelog>
  <changelog author="mimi.vx@gmail.com" date="1487937600">- update to 2.18.2
  * Fix image-specific format specifiers not being updated correctly
  * New key binding: ! -  zoom_fill (zoom to fill window, may cut off image parts
  * Disable EXIF-based auto rotation by default
  * add --auto-rotate option to enable auto rotation</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492603200">- update to 2.18.3
- fixes boo#1034567 - CVE-2017-7875
  * Fix double-free/OOB-write in E17 IPC. This only affects the background
    setting options and requires a malicious X11 app to run alongside feh
    and pretend to be an E17 window manager.
  * Fix image-specific format specifiers not being updated correctly in thumbnail
    mode window titles
  * Fix memory leak when closing images opened from thumbnail mode
  * Fix a possible out of bounds read caused by an unterminated string when
    using --output to save images in long paths
  * Fix out of bounds read/write when handling empty or broken caption files.
  * Fix memory leak when saving a filelist or image whose target filename
    already exists.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1497787200">- update to 2.19
  * Follow the freedesktop.org Thumbnail Managing Standard by saving thumbnails
    in ${XDG_CACHE_HOME}/thumbnails (defaulting to ~/.cache/thumbnails)
    instead of ~/.thumbnails
  * Install app icons with the correct permissions of 644
  * Documentation improvements</changelog>
  <changelog author="aavindraa@gmail.com" date="1507464000">- Drop feh-2.12-fix_sighandler.patch, fixed upstream
- update to 2.21
  * Add toggle_fixed_geometry (g) key binding to toggle window auto-resize
  * Improve control via terminal input
  * Fix crash (segmentation fault) when using feh -O in non-index mode
  * Fix --force-aliasing (and possibly other options) missing from ~/.fehbg
    when using them for background setting
- includes changes from 2.20
  * Fix clang/gcc warnings
  * Add support for control via terminal input. feh will read key presses
  from the controlling terminal and handle them like X11 key presses
  inside the feh window. Note that at the moment, only lower / upper case
  ASCII letters and a very small set of additional keys are supported.
  * Fix broken ImageMagick support (see --magick-timeout) when using some ImageMagick versions
  * Remove images from the filelist if they were removed by executing a user-defined action
- includes changes from 2.19.1 - 2.19.3:
  * Fix Shift modifier not being recognized for tab, space and similar keys.
  This lead to keybindings like Shift+Tab or Shift+Space being parsed as
  if the Shift modifier had not been specified
  * Show ImageMagick loader errors unless --quiet is specified
  * Fix crash when handling certain media keys (introduced in 2.19.1)
  * Save geometry data in .fehbg when setting a wallpaper with --geometry
  * Fix Imlib2 developer warning and improve out-of-memory error message when using --thumbnails / --index on large directories</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Rebase feh-makefile_app.patch
- update to 2.22
  * Add support for CURL_CA_BUNDLE environment variable when loading
  images via HTTPS
  * Fix ~/.fehbg not being updated when setting a wallpaper via menu
  (broken in 2.21)</changelog>
  <changelog author="aavindraa@gmail.com" date="1510056000">- update to 2.22.1
  * Allow ~/.fehbg to be sourced (instead of executed) from other
  shell scripts again (broken in 2.22)</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- update to 2.22.2
  * Fix HTTPS certificate errors on some systems (broken in 2.22)</changelog>
  <changelog author="avindra@opensuse.org" date="1514462400">- update to 2.23
  * Fix broken thumbnail/index windows when using --scale-down
  * Use Imlib2 as in-memory image cache (default size: 4MiB)
    noticable performance improvements, especially in small
    slideshows
  * Add --cache-size option to set Imlib2 image cache size
- rebase feh-makefile_optflags.patch</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Ensure neutrality of description.</changelog>
  <changelog author="avindra@opensuse.org" date="1517486400">- update to 2.23.1
  * The Makefile no longer honors CPPFLAGS and instead consistently
    uses CFLAGS for user-provided include paths
  * Fix %u format specifier in multiwindow and list modes
  * Minor performance improvements
  * Stability improvements when using --magick-timeout
- switch to https version of website
- rebase feh-makefile_optflags.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518523200">- Remove BuildRequires on xorg-x11-* metapackages
- Remove unused buildRequires.</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 2.23.2
  * Fix support for nested quotes in .config/feh/themes
- feh-makefile_app.patch
  * use DESTDIR variable
- spec file: simplify a bit</changelog>
  <changelog author="avindra@opensuse.org" date="1519646400">- update to 2.24
  * Improve performance when using --{max,min}-dimension in
    slideshow mode
  * Fix crash when using %m format specifier in slideshow mode</changelog>
  <changelog author="mvetter@suse.com" date="1520424000">- Update to 2.25
  * Add --version-sort option to enable natural sorting of file
    and directory names
  * Allow arbitrary X11 colors as -B/--image-bg argument
  * Improve --image-bg support and transparency handling in
  - -bg-* mode
  * Respect --geometry settings in --bg-fill mode
  * Add keybinding toggle_auto_zoom (default "Z") to toggle
  - -auto-zoom
  * Fix filelists specified by -f/--filelist not being reloaded
    when using --reload</changelog>
  <changelog author="avindra@opensuse.org" date="1520856000">- Update to 2.25.1
  * Re-render current image when toggle_fixed_geometry is input
  * Fix issues when using CFLAGS=-m64 on some gcc versions
- run spec-cleaner</changelog>
  <changelog author="pvorel@suse.cz" date="1525867200">- Update to 2.26
  * Save absolute file paths in ~/.fehbg, similar to behaviour prior
    to 2.21
  * Add %g (window dimensions) and %Z (precise zoom level) format
    specifiers
  * Improve -z/--randomize randomness</changelog>
  <changelog author="avindra@opensuse.org" date="1526126400">- Update to 2.26.1
  * Restore pre-2.21 ~/.fehbg behaviour. This fixes nondeterministic
    wallpaper setting when using --bg-* --randomize, issues when
    specifying --theme both in ~/.fehbg and on the commandline, and
    possibly other edge cases
  * Fix /tmp being cluttered with temp ImageMagick files when using
  - -magick-timeout and a conversion takes longer than allowed</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to 2.26.3:
  * Properly escape --image-bg argument in ~/.fehbg (broken in
    2.26.1).
- Update to 2.26.2:
  * Show correct filelist position in windows opened from thumbnail
    mode.
  * Note that navigation is still not supported in those windows.
  * Improve support for key input from stdin.
  * Do not push menus off the screen when hitting screen limits.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1532088000">- update to 2.27.1
- fix boo#1101466  - specify PREFIX also for build
  * Fix --keep-zoom-vp issues introduced in 2.27
  * Fix feh occasionally becoming unresponsive when asked
    to terminate via SIGINT/SIGQUIT/SIGTERM
  * Fix size_to_image ("w") command when both --scale-down and
  - -keep-zoom-vp are enabled
  * Fix --auto-zoom not being triggered on window resize events
    when --scale-down is enabled
  * Fix --auto-zoom conflicting with manual zoom
  * Prevent --zoom &lt;percent&gt; from blocking --scale-down in fullscreen
    / fixed geometry mode
  * Prevent --keep-zoom-vp from blocking the dynamic window resizing mechanism
  - Prevent automatic recalculation of the zoom ratio when
  - -keep_zoom_vp is enabled</changelog>
</package>
<package pkgid="4e6b36a23b7fbf20df6c75c1095e49868059d2dc6dbb3a4c552dac54b088bf30" name="feh" arch="x86_64">
  <version epoch="0" ver="2.27.1" rel="lp150.2.3.1"/>
  <changelog author="mimi.vx@gmail.com" date="1472731200">- update to 2.17.1
- added feh-makefile_app.patch -- fix install location of icons
- refreshed feh-makefile_optflags.patch
  * Install feh icon (both 48x48 and scalable SVG) to /usr/share/icons
    when running "make install app=1"
  * Fix --sort not being respected after the first reload when used in
    conjunction with --reload
  * All key actions can now also be bound to a button by specifying them
    in .config/feh/buttons. However, note that button actions can not be
    bound to keys.
  * Rename "menu" key action to "toggle_menu", "prev" to "prev_img" and
    "next" to "next_img". The old names are still supported, but no longer
    documented.
  * feh now also sets the X11 _NET_WM_PID and WM_CLIENT_MACHINE window
    properties
  * Fix compilation on systems where HOST_NAME_MAX is not defined</changelog>
  <changelog author="mimi.vx@gmail.com" date="1487937600">- update to 2.18.2
  * Fix image-specific format specifiers not being updated correctly
  * New key binding: ! -  zoom_fill (zoom to fill window, may cut off image parts
  * Disable EXIF-based auto rotation by default
  * add --auto-rotate option to enable auto rotation</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492603200">- update to 2.18.3
- fixes boo#1034567 - CVE-2017-7875
  * Fix double-free/OOB-write in E17 IPC. This only affects the background
    setting options and requires a malicious X11 app to run alongside feh
    and pretend to be an E17 window manager.
  * Fix image-specific format specifiers not being updated correctly in thumbnail
    mode window titles
  * Fix memory leak when closing images opened from thumbnail mode
  * Fix a possible out of bounds read caused by an unterminated string when
    using --output to save images in long paths
  * Fix out of bounds read/write when handling empty or broken caption files.
  * Fix memory leak when saving a filelist or image whose target filename
    already exists.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1497787200">- update to 2.19
  * Follow the freedesktop.org Thumbnail Managing Standard by saving thumbnails
    in ${XDG_CACHE_HOME}/thumbnails (defaulting to ~/.cache/thumbnails)
    instead of ~/.thumbnails
  * Install app icons with the correct permissions of 644
  * Documentation improvements</changelog>
  <changelog author="aavindraa@gmail.com" date="1507464000">- Drop feh-2.12-fix_sighandler.patch, fixed upstream
- update to 2.21
  * Add toggle_fixed_geometry (g) key binding to toggle window auto-resize
  * Improve control via terminal input
  * Fix crash (segmentation fault) when using feh -O in non-index mode
  * Fix --force-aliasing (and possibly other options) missing from ~/.fehbg
    when using them for background setting
- includes changes from 2.20
  * Fix clang/gcc warnings
  * Add support for control via terminal input. feh will read key presses
  from the controlling terminal and handle them like X11 key presses
  inside the feh window. Note that at the moment, only lower / upper case
  ASCII letters and a very small set of additional keys are supported.
  * Fix broken ImageMagick support (see --magick-timeout) when using some ImageMagick versions
  * Remove images from the filelist if they were removed by executing a user-defined action
- includes changes from 2.19.1 - 2.19.3:
  * Fix Shift modifier not being recognized for tab, space and similar keys.
  This lead to keybindings like Shift+Tab or Shift+Space being parsed as
  if the Shift modifier had not been specified
  * Show ImageMagick loader errors unless --quiet is specified
  * Fix crash when handling certain media keys (introduced in 2.19.1)
  * Save geometry data in .fehbg when setting a wallpaper with --geometry
  * Fix Imlib2 developer warning and improve out-of-memory error message when using --thumbnails / --index on large directories</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Rebase feh-makefile_app.patch
- update to 2.22
  * Add support for CURL_CA_BUNDLE environment variable when loading
  images via HTTPS
  * Fix ~/.fehbg not being updated when setting a wallpaper via menu
  (broken in 2.21)</changelog>
  <changelog author="aavindraa@gmail.com" date="1510056000">- update to 2.22.1
  * Allow ~/.fehbg to be sourced (instead of executed) from other
  shell scripts again (broken in 2.22)</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- update to 2.22.2
  * Fix HTTPS certificate errors on some systems (broken in 2.22)</changelog>
  <changelog author="avindra@opensuse.org" date="1514462400">- update to 2.23
  * Fix broken thumbnail/index windows when using --scale-down
  * Use Imlib2 as in-memory image cache (default size: 4MiB)
    noticable performance improvements, especially in small
    slideshows
  * Add --cache-size option to set Imlib2 image cache size
- rebase feh-makefile_optflags.patch</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Ensure neutrality of description.</changelog>
  <changelog author="avindra@opensuse.org" date="1517486400">- update to 2.23.1
  * The Makefile no longer honors CPPFLAGS and instead consistently
    uses CFLAGS for user-provided include paths
  * Fix %u format specifier in multiwindow and list modes
  * Minor performance improvements
  * Stability improvements when using --magick-timeout
- switch to https version of website
- rebase feh-makefile_optflags.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518523200">- Remove BuildRequires on xorg-x11-* metapackages
- Remove unused buildRequires.</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 2.23.2
  * Fix support for nested quotes in .config/feh/themes
- feh-makefile_app.patch
  * use DESTDIR variable
- spec file: simplify a bit</changelog>
  <changelog author="avindra@opensuse.org" date="1519646400">- update to 2.24
  * Improve performance when using --{max,min}-dimension in
    slideshow mode
  * Fix crash when using %m format specifier in slideshow mode</changelog>
  <changelog author="mvetter@suse.com" date="1520424000">- Update to 2.25
  * Add --version-sort option to enable natural sorting of file
    and directory names
  * Allow arbitrary X11 colors as -B/--image-bg argument
  * Improve --image-bg support and transparency handling in
  - -bg-* mode
  * Respect --geometry settings in --bg-fill mode
  * Add keybinding toggle_auto_zoom (default "Z") to toggle
  - -auto-zoom
  * Fix filelists specified by -f/--filelist not being reloaded
    when using --reload</changelog>
  <changelog author="avindra@opensuse.org" date="1520856000">- Update to 2.25.1
  * Re-render current image when toggle_fixed_geometry is input
  * Fix issues when using CFLAGS=-m64 on some gcc versions
- run spec-cleaner</changelog>
  <changelog author="pvorel@suse.cz" date="1525867200">- Update to 2.26
  * Save absolute file paths in ~/.fehbg, similar to behaviour prior
    to 2.21
  * Add %g (window dimensions) and %Z (precise zoom level) format
    specifiers
  * Improve -z/--randomize randomness</changelog>
  <changelog author="avindra@opensuse.org" date="1526126400">- Update to 2.26.1
  * Restore pre-2.21 ~/.fehbg behaviour. This fixes nondeterministic
    wallpaper setting when using --bg-* --randomize, issues when
    specifying --theme both in ~/.fehbg and on the commandline, and
    possibly other edge cases
  * Fix /tmp being cluttered with temp ImageMagick files when using
  - -magick-timeout and a conversion takes longer than allowed</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to 2.26.3:
  * Properly escape --image-bg argument in ~/.fehbg (broken in
    2.26.1).
- Update to 2.26.2:
  * Show correct filelist position in windows opened from thumbnail
    mode.
  * Note that navigation is still not supported in those windows.
  * Improve support for key input from stdin.
  * Do not push menus off the screen when hitting screen limits.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1532088000">- update to 2.27.1
- fix boo#1101466  - specify PREFIX also for build
  * Fix --keep-zoom-vp issues introduced in 2.27
  * Fix feh occasionally becoming unresponsive when asked
    to terminate via SIGINT/SIGQUIT/SIGTERM
  * Fix size_to_image ("w") command when both --scale-down and
  - -keep-zoom-vp are enabled
  * Fix --auto-zoom not being triggered on window resize events
    when --scale-down is enabled
  * Fix --auto-zoom conflicting with manual zoom
  * Prevent --zoom &lt;percent&gt; from blocking --scale-down in fullscreen
    / fixed geometry mode
  * Prevent --keep-zoom-vp from blocking the dynamic window resizing mechanism
  - Prevent automatic recalculation of the zoom ratio when
  - -keep_zoom_vp is enabled</changelog>
</package>
<package pkgid="48c665dec4c09a081385daf0b0420f24b595855c55fd184fa759fa6111f40c96" name="fence-agents" arch="src">
  <version epoch="0" ver="4.0.25+git.1524215631.8f9c770a" rel="lp150.2.3.1"/>
  <changelog author="aspiers@suse.com" date="1444651200">- Update to 4.0.21:
  * Documentation of new actions in manual pages is improved
  * Tests were improved and Travis CI is now used for every push
  * fence_virsh has new option --missing-as-off to support older XEN hosts
  * fence_ilo(2) now automatically attempts to use TLS1.0 if it is not
    possible to connect via SSLv3
  * fence_mpath re-create SCSI keys after reboot, monitoring of devices
    were improved too</changelog>
  <changelog author="kgronlund@suse.com" date="1452686400">- Update to 4.0.22:
  * New fence agent for VirtualBox
  * A lot of changes in fence_compute (OpenStack)
  * Re-enable fence_zvm
  * Support for APC firmware v6.x
  * Add hard-reboot option for fence_scsi_check script
  * Add option for setting Docker Remote API version
  * Fix HP Brocade fence agent (timeout settings, deprecated options)
  * New action 'diag' for fence_ipmi</changelog>
  <changelog author="kgronlund@suse.com" date="1453896000">- Package fence_dummy in fence-agents-devel package
- Clean up package</changelog>
  <changelog author="kgronlund@suse.com" date="1456142400">- Update to version 4.0.22+git.1455008135.15c5e92:
  + fence_cisco_ucs: Obtain status of device from different endpoint
  + fence_cisco_ucs: Add --missing-as-off
- Backport fence_compute (fate#320346) (bsc#964748)
- Patches for fence_compute (fate#320346) (bsc#964748)
  - fence_compute: Add --insecure command line argument
  - fence_compute: Add --region-name command line argument
  - fence_compute: Create nova client with API 2.11
  - fence_compute: Fix disabling force_down on node when action is on
  - fence_compute: Evacuate instances on all tenants
  - fence_compute: On list, don't list hypervisors but nova-compute services
  - fence_compute: Only list nova-compute services when getting status
  - fence_compute: Deprecate the domain option
- Add 0001-fence_compute-Add-insecure-command-line-argument.patch
- Add 0002-fence_compute-Add-region-name-command-line-argument.patch
- Add 0003-fence_compute-Create-nova-client-with-API-2.11.patch
- Add 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
- Add 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
- Add 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
- Add 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
- Add 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1467288000">- Update to version 4.0.23:
  * A lot of changes in fence_compute (OpenStack compute instance)
  * Obtain status of nodes from Cisco UCS correctly
  * New fence agent for AMT using openwsman
  * Python3 support
  * Fence agent for PVE can be used by non-root users
  * Parallel building and testing of fence agents
  * Fix occasional failures of APC fence agent
- Updated fence_compute patch set:
  - Add 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  - Add 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  - Add 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Add 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  - Add 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  - Add 0006-fence_compute-Fix-use-of-undefined-variable.patch
  - Add 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  - Add 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  - Add 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0001-fence_compute-Add-insecure-command-line-argument.patch
  - Remove 0002-fence_compute-Add-region-name-command-line-argument.patch
  - Remove 0003-fence_compute-Create-nova-client-with-API-2.11.patch
  - Remove 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
  - Remove 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
  - Remove 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Remove 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1472212800">- Update to version 4.0.24:
  * Improve obtaining status on Cisco UCS devices
  * Fix issues with symlink installations
  * Fix documentation for fence_scsi and fence_mpath</changelog>
  <changelog author="kgronlund@suse.com" date="1480593600">- Update to version 4.0.24+git.1480563949.e67fcd4:
  * fence_azure_arm: add fencing agent for Azure Resource Manager
  * fence_lpar: Add support for IVM
  * fence_lpar: Handle exceptions when invalid output is read
  * fence_zvmip: Update XML metadata
  * fence_compute: fix ConnectionError by using full module name
  * fence_powerman: add fence agent for powerman
  * Suppress InsecureRequestWarning when ssl_insecure is given
  * compute: Correctly handle installations without tagged flavours
  * compute: Use the best available nova API version
  * compute: correctly implement 'on' when the force-down API call is available
  * compute: Correctly identify when the nodename already includes the supplied domain
  * compute: Ensure we can connect to nova when fixing the plug name
  * compute: Simpler check for nova force down compatibility
- Rebase and remove merged patches:
  * Remove 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  * Remove 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  * Remove 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Remove 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Remove 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Remove 0006-fence_compute-Fix-use-of-undefined-variable.patch
  * Remove 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Remove 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Add 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Add 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Add 0004-fence_compute-Fix-handling-of-domain-None.patch
  * Add 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Add 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * Add 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.25+git.1485179354.eb43835:
  * Ironic fence agent
  * fencing: Add --quiet option to disable logging to stderr
  * fence_powerman: fix typo in option powerman-path
  * fence_cisco_ucs: Commands sent to Cisco UCS are changed to
- Drop merged patch:
  * Remove 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
</package>
<package pkgid="45ffe0ee7a80a5a80b2e6acc08146859b93643683139ae5c4fb880ba718a1c6c" name="fence-agents" arch="x86_64">
  <version epoch="0" ver="4.0.25+git.1524215631.8f9c770a" rel="lp150.2.3.1"/>
  <changelog author="aspiers@suse.com" date="1444651200">- Update to 4.0.21:
  * Documentation of new actions in manual pages is improved
  * Tests were improved and Travis CI is now used for every push
  * fence_virsh has new option --missing-as-off to support older XEN hosts
  * fence_ilo(2) now automatically attempts to use TLS1.0 if it is not
    possible to connect via SSLv3
  * fence_mpath re-create SCSI keys after reboot, monitoring of devices
    were improved too</changelog>
  <changelog author="kgronlund@suse.com" date="1452686400">- Update to 4.0.22:
  * New fence agent for VirtualBox
  * A lot of changes in fence_compute (OpenStack)
  * Re-enable fence_zvm
  * Support for APC firmware v6.x
  * Add hard-reboot option for fence_scsi_check script
  * Add option for setting Docker Remote API version
  * Fix HP Brocade fence agent (timeout settings, deprecated options)
  * New action 'diag' for fence_ipmi</changelog>
  <changelog author="kgronlund@suse.com" date="1453896000">- Package fence_dummy in fence-agents-devel package
- Clean up package</changelog>
  <changelog author="kgronlund@suse.com" date="1456142400">- Update to version 4.0.22+git.1455008135.15c5e92:
  + fence_cisco_ucs: Obtain status of device from different endpoint
  + fence_cisco_ucs: Add --missing-as-off
- Backport fence_compute (fate#320346) (bsc#964748)
- Patches for fence_compute (fate#320346) (bsc#964748)
  - fence_compute: Add --insecure command line argument
  - fence_compute: Add --region-name command line argument
  - fence_compute: Create nova client with API 2.11
  - fence_compute: Fix disabling force_down on node when action is on
  - fence_compute: Evacuate instances on all tenants
  - fence_compute: On list, don't list hypervisors but nova-compute services
  - fence_compute: Only list nova-compute services when getting status
  - fence_compute: Deprecate the domain option
- Add 0001-fence_compute-Add-insecure-command-line-argument.patch
- Add 0002-fence_compute-Add-region-name-command-line-argument.patch
- Add 0003-fence_compute-Create-nova-client-with-API-2.11.patch
- Add 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
- Add 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
- Add 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
- Add 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
- Add 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1467288000">- Update to version 4.0.23:
  * A lot of changes in fence_compute (OpenStack compute instance)
  * Obtain status of nodes from Cisco UCS correctly
  * New fence agent for AMT using openwsman
  * Python3 support
  * Fence agent for PVE can be used by non-root users
  * Parallel building and testing of fence agents
  * Fix occasional failures of APC fence agent
- Updated fence_compute patch set:
  - Add 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  - Add 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  - Add 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Add 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  - Add 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  - Add 0006-fence_compute-Fix-use-of-undefined-variable.patch
  - Add 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  - Add 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  - Add 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0001-fence_compute-Add-insecure-command-line-argument.patch
  - Remove 0002-fence_compute-Add-region-name-command-line-argument.patch
  - Remove 0003-fence_compute-Create-nova-client-with-API-2.11.patch
  - Remove 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
  - Remove 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
  - Remove 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Remove 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1472212800">- Update to version 4.0.24:
  * Improve obtaining status on Cisco UCS devices
  * Fix issues with symlink installations
  * Fix documentation for fence_scsi and fence_mpath</changelog>
  <changelog author="kgronlund@suse.com" date="1480593600">- Update to version 4.0.24+git.1480563949.e67fcd4:
  * fence_azure_arm: add fencing agent for Azure Resource Manager
  * fence_lpar: Add support for IVM
  * fence_lpar: Handle exceptions when invalid output is read
  * fence_zvmip: Update XML metadata
  * fence_compute: fix ConnectionError by using full module name
  * fence_powerman: add fence agent for powerman
  * Suppress InsecureRequestWarning when ssl_insecure is given
  * compute: Correctly handle installations without tagged flavours
  * compute: Use the best available nova API version
  * compute: correctly implement 'on' when the force-down API call is available
  * compute: Correctly identify when the nodename already includes the supplied domain
  * compute: Ensure we can connect to nova when fixing the plug name
  * compute: Simpler check for nova force down compatibility
- Rebase and remove merged patches:
  * Remove 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  * Remove 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  * Remove 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Remove 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Remove 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Remove 0006-fence_compute-Fix-use-of-undefined-variable.patch
  * Remove 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Remove 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Add 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Add 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Add 0004-fence_compute-Fix-handling-of-domain-None.patch
  * Add 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Add 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * Add 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.25+git.1485179354.eb43835:
  * Ironic fence agent
  * fencing: Add --quiet option to disable logging to stderr
  * fence_powerman: fix typo in option powerman-path
  * fence_cisco_ucs: Commands sent to Cisco UCS are changed to
- Drop merged patch:
  * Remove 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
</package>
<package pkgid="21d295e1425699769758ad1e7b4c21f4ba4ab8745f4e9f286eecd7d3cd284e59" name="fence-agents" arch="src">
  <version epoch="0" ver="4.2.1+git.1529316875.1a39345b" rel="lp150.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1453896000">- Package fence_dummy in fence-agents-devel package
- Clean up package</changelog>
  <changelog author="kgronlund@suse.com" date="1456142400">- Update to version 4.0.22+git.1455008135.15c5e92:
  + fence_cisco_ucs: Obtain status of device from different endpoint
  + fence_cisco_ucs: Add --missing-as-off
- Backport fence_compute (fate#320346) (bsc#964748)
- Patches for fence_compute (fate#320346) (bsc#964748)
  - fence_compute: Add --insecure command line argument
  - fence_compute: Add --region-name command line argument
  - fence_compute: Create nova client with API 2.11
  - fence_compute: Fix disabling force_down on node when action is on
  - fence_compute: Evacuate instances on all tenants
  - fence_compute: On list, don't list hypervisors but nova-compute services
  - fence_compute: Only list nova-compute services when getting status
  - fence_compute: Deprecate the domain option
- Add 0001-fence_compute-Add-insecure-command-line-argument.patch
- Add 0002-fence_compute-Add-region-name-command-line-argument.patch
- Add 0003-fence_compute-Create-nova-client-with-API-2.11.patch
- Add 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
- Add 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
- Add 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
- Add 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
- Add 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1467288000">- Update to version 4.0.23:
  * A lot of changes in fence_compute (OpenStack compute instance)
  * Obtain status of nodes from Cisco UCS correctly
  * New fence agent for AMT using openwsman
  * Python3 support
  * Fence agent for PVE can be used by non-root users
  * Parallel building and testing of fence agents
  * Fix occasional failures of APC fence agent
- Updated fence_compute patch set:
  - Add 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  - Add 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  - Add 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Add 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  - Add 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  - Add 0006-fence_compute-Fix-use-of-undefined-variable.patch
  - Add 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  - Add 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  - Add 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0001-fence_compute-Add-insecure-command-line-argument.patch
  - Remove 0002-fence_compute-Add-region-name-command-line-argument.patch
  - Remove 0003-fence_compute-Create-nova-client-with-API-2.11.patch
  - Remove 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
  - Remove 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
  - Remove 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Remove 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1472212800">- Update to version 4.0.24:
  * Improve obtaining status on Cisco UCS devices
  * Fix issues with symlink installations
  * Fix documentation for fence_scsi and fence_mpath</changelog>
  <changelog author="kgronlund@suse.com" date="1480593600">- Update to version 4.0.24+git.1480563949.e67fcd4:
  * fence_azure_arm: add fencing agent for Azure Resource Manager
  * fence_lpar: Add support for IVM
  * fence_lpar: Handle exceptions when invalid output is read
  * fence_zvmip: Update XML metadata
  * fence_compute: fix ConnectionError by using full module name
  * fence_powerman: add fence agent for powerman
  * Suppress InsecureRequestWarning when ssl_insecure is given
  * compute: Correctly handle installations without tagged flavours
  * compute: Use the best available nova API version
  * compute: correctly implement 'on' when the force-down API call is available
  * compute: Correctly identify when the nodename already includes the supplied domain
  * compute: Ensure we can connect to nova when fixing the plug name
  * compute: Simpler check for nova force down compatibility
- Rebase and remove merged patches:
  * Remove 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  * Remove 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  * Remove 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Remove 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Remove 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Remove 0006-fence_compute-Fix-use-of-undefined-variable.patch
  * Remove 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Remove 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Add 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Add 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Add 0004-fence_compute-Fix-handling-of-domain-None.patch
  * Add 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Add 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * Add 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.25+git.1485179354.eb43835:
  * Ironic fence agent
  * fencing: Add --quiet option to disable logging to stderr
  * fence_powerman: fix typo in option powerman-path
  * fence_cisco_ucs: Commands sent to Cisco UCS are changed to
- Drop merged patch:
  * Remove 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
</package>
<package pkgid="177e23d485015870ee30e52c70b589edb55d33a0bd06a78ec1cf9489cd12b11f" name="fence-agents" arch="x86_64">
  <version epoch="0" ver="4.2.1+git.1529316875.1a39345b" rel="lp150.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1453896000">- Package fence_dummy in fence-agents-devel package
- Clean up package</changelog>
  <changelog author="kgronlund@suse.com" date="1456142400">- Update to version 4.0.22+git.1455008135.15c5e92:
  + fence_cisco_ucs: Obtain status of device from different endpoint
  + fence_cisco_ucs: Add --missing-as-off
- Backport fence_compute (fate#320346) (bsc#964748)
- Patches for fence_compute (fate#320346) (bsc#964748)
  - fence_compute: Add --insecure command line argument
  - fence_compute: Add --region-name command line argument
  - fence_compute: Create nova client with API 2.11
  - fence_compute: Fix disabling force_down on node when action is on
  - fence_compute: Evacuate instances on all tenants
  - fence_compute: On list, don't list hypervisors but nova-compute services
  - fence_compute: Only list nova-compute services when getting status
  - fence_compute: Deprecate the domain option
- Add 0001-fence_compute-Add-insecure-command-line-argument.patch
- Add 0002-fence_compute-Add-region-name-command-line-argument.patch
- Add 0003-fence_compute-Create-nova-client-with-API-2.11.patch
- Add 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
- Add 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
- Add 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
- Add 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
- Add 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1467288000">- Update to version 4.0.23:
  * A lot of changes in fence_compute (OpenStack compute instance)
  * Obtain status of nodes from Cisco UCS correctly
  * New fence agent for AMT using openwsman
  * Python3 support
  * Fence agent for PVE can be used by non-root users
  * Parallel building and testing of fence agents
  * Fix occasional failures of APC fence agent
- Updated fence_compute patch set:
  - Add 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  - Add 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  - Add 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Add 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  - Add 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  - Add 0006-fence_compute-Fix-use-of-undefined-variable.patch
  - Add 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  - Add 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  - Add 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0001-fence_compute-Add-insecure-command-line-argument.patch
  - Remove 0002-fence_compute-Add-region-name-command-line-argument.patch
  - Remove 0003-fence_compute-Create-nova-client-with-API-2.11.patch
  - Remove 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
  - Remove 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
  - Remove 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Remove 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1472212800">- Update to version 4.0.24:
  * Improve obtaining status on Cisco UCS devices
  * Fix issues with symlink installations
  * Fix documentation for fence_scsi and fence_mpath</changelog>
  <changelog author="kgronlund@suse.com" date="1480593600">- Update to version 4.0.24+git.1480563949.e67fcd4:
  * fence_azure_arm: add fencing agent for Azure Resource Manager
  * fence_lpar: Add support for IVM
  * fence_lpar: Handle exceptions when invalid output is read
  * fence_zvmip: Update XML metadata
  * fence_compute: fix ConnectionError by using full module name
  * fence_powerman: add fence agent for powerman
  * Suppress InsecureRequestWarning when ssl_insecure is given
  * compute: Correctly handle installations without tagged flavours
  * compute: Use the best available nova API version
  * compute: correctly implement 'on' when the force-down API call is available
  * compute: Correctly identify when the nodename already includes the supplied domain
  * compute: Ensure we can connect to nova when fixing the plug name
  * compute: Simpler check for nova force down compatibility
- Rebase and remove merged patches:
  * Remove 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  * Remove 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  * Remove 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Remove 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Remove 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Remove 0006-fence_compute-Fix-use-of-undefined-variable.patch
  * Remove 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Remove 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Add 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Add 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Add 0004-fence_compute-Fix-handling-of-domain-None.patch
  * Add 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Add 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * Add 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.25+git.1485179354.eb43835:
  * Ironic fence agent
  * fencing: Add --quiet option to disable logging to stderr
  * fence_powerman: fix typo in option powerman-path
  * fence_cisco_ucs: Commands sent to Cisco UCS are changed to
- Drop merged patch:
  * Remove 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
</package>
<package pkgid="5068726936561498db90ada3e9b325a15a36e43457015b6e785bfdec43870a33" name="fence-agents-devel" arch="x86_64">
  <version epoch="0" ver="4.0.25+git.1524215631.8f9c770a" rel="lp150.2.3.1"/>
  <changelog author="aspiers@suse.com" date="1444651200">- Update to 4.0.21:
  * Documentation of new actions in manual pages is improved
  * Tests were improved and Travis CI is now used for every push
  * fence_virsh has new option --missing-as-off to support older XEN hosts
  * fence_ilo(2) now automatically attempts to use TLS1.0 if it is not
    possible to connect via SSLv3
  * fence_mpath re-create SCSI keys after reboot, monitoring of devices
    were improved too</changelog>
  <changelog author="kgronlund@suse.com" date="1452686400">- Update to 4.0.22:
  * New fence agent for VirtualBox
  * A lot of changes in fence_compute (OpenStack)
  * Re-enable fence_zvm
  * Support for APC firmware v6.x
  * Add hard-reboot option for fence_scsi_check script
  * Add option for setting Docker Remote API version
  * Fix HP Brocade fence agent (timeout settings, deprecated options)
  * New action 'diag' for fence_ipmi</changelog>
  <changelog author="kgronlund@suse.com" date="1453896000">- Package fence_dummy in fence-agents-devel package
- Clean up package</changelog>
  <changelog author="kgronlund@suse.com" date="1456142400">- Update to version 4.0.22+git.1455008135.15c5e92:
  + fence_cisco_ucs: Obtain status of device from different endpoint
  + fence_cisco_ucs: Add --missing-as-off
- Backport fence_compute (fate#320346) (bsc#964748)
- Patches for fence_compute (fate#320346) (bsc#964748)
  - fence_compute: Add --insecure command line argument
  - fence_compute: Add --region-name command line argument
  - fence_compute: Create nova client with API 2.11
  - fence_compute: Fix disabling force_down on node when action is on
  - fence_compute: Evacuate instances on all tenants
  - fence_compute: On list, don't list hypervisors but nova-compute services
  - fence_compute: Only list nova-compute services when getting status
  - fence_compute: Deprecate the domain option
- Add 0001-fence_compute-Add-insecure-command-line-argument.patch
- Add 0002-fence_compute-Add-region-name-command-line-argument.patch
- Add 0003-fence_compute-Create-nova-client-with-API-2.11.patch
- Add 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
- Add 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
- Add 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
- Add 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
- Add 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1467288000">- Update to version 4.0.23:
  * A lot of changes in fence_compute (OpenStack compute instance)
  * Obtain status of nodes from Cisco UCS correctly
  * New fence agent for AMT using openwsman
  * Python3 support
  * Fence agent for PVE can be used by non-root users
  * Parallel building and testing of fence agents
  * Fix occasional failures of APC fence agent
- Updated fence_compute patch set:
  - Add 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  - Add 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  - Add 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Add 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  - Add 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  - Add 0006-fence_compute-Fix-use-of-undefined-variable.patch
  - Add 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  - Add 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  - Add 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0001-fence_compute-Add-insecure-command-line-argument.patch
  - Remove 0002-fence_compute-Add-region-name-command-line-argument.patch
  - Remove 0003-fence_compute-Create-nova-client-with-API-2.11.patch
  - Remove 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
  - Remove 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
  - Remove 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Remove 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1472212800">- Update to version 4.0.24:
  * Improve obtaining status on Cisco UCS devices
  * Fix issues with symlink installations
  * Fix documentation for fence_scsi and fence_mpath</changelog>
  <changelog author="kgronlund@suse.com" date="1480593600">- Update to version 4.0.24+git.1480563949.e67fcd4:
  * fence_azure_arm: add fencing agent for Azure Resource Manager
  * fence_lpar: Add support for IVM
  * fence_lpar: Handle exceptions when invalid output is read
  * fence_zvmip: Update XML metadata
  * fence_compute: fix ConnectionError by using full module name
  * fence_powerman: add fence agent for powerman
  * Suppress InsecureRequestWarning when ssl_insecure is given
  * compute: Correctly handle installations without tagged flavours
  * compute: Use the best available nova API version
  * compute: correctly implement 'on' when the force-down API call is available
  * compute: Correctly identify when the nodename already includes the supplied domain
  * compute: Ensure we can connect to nova when fixing the plug name
  * compute: Simpler check for nova force down compatibility
- Rebase and remove merged patches:
  * Remove 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  * Remove 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  * Remove 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Remove 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Remove 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Remove 0006-fence_compute-Fix-use-of-undefined-variable.patch
  * Remove 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Remove 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Add 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Add 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Add 0004-fence_compute-Fix-handling-of-domain-None.patch
  * Add 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Add 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * Add 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.25+git.1485179354.eb43835:
  * Ironic fence agent
  * fencing: Add --quiet option to disable logging to stderr
  * fence_powerman: fix typo in option powerman-path
  * fence_cisco_ucs: Commands sent to Cisco UCS are changed to
- Drop merged patch:
  * Remove 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
</package>
<package pkgid="f1f0c89678bb708fb1861eb40c4f2f1c04a6ffa5435f52a703bbabcdb35961ba" name="fence-agents-devel" arch="x86_64">
  <version epoch="0" ver="4.2.1+git.1529316875.1a39345b" rel="lp150.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1453896000">- Package fence_dummy in fence-agents-devel package
- Clean up package</changelog>
  <changelog author="kgronlund@suse.com" date="1456142400">- Update to version 4.0.22+git.1455008135.15c5e92:
  + fence_cisco_ucs: Obtain status of device from different endpoint
  + fence_cisco_ucs: Add --missing-as-off
- Backport fence_compute (fate#320346) (bsc#964748)
- Patches for fence_compute (fate#320346) (bsc#964748)
  - fence_compute: Add --insecure command line argument
  - fence_compute: Add --region-name command line argument
  - fence_compute: Create nova client with API 2.11
  - fence_compute: Fix disabling force_down on node when action is on
  - fence_compute: Evacuate instances on all tenants
  - fence_compute: On list, don't list hypervisors but nova-compute services
  - fence_compute: Only list nova-compute services when getting status
  - fence_compute: Deprecate the domain option
- Add 0001-fence_compute-Add-insecure-command-line-argument.patch
- Add 0002-fence_compute-Add-region-name-command-line-argument.patch
- Add 0003-fence_compute-Create-nova-client-with-API-2.11.patch
- Add 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
- Add 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
- Add 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
- Add 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
- Add 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1467288000">- Update to version 4.0.23:
  * A lot of changes in fence_compute (OpenStack compute instance)
  * Obtain status of nodes from Cisco UCS correctly
  * New fence agent for AMT using openwsman
  * Python3 support
  * Fence agent for PVE can be used by non-root users
  * Parallel building and testing of fence agents
  * Fix occasional failures of APC fence agent
- Updated fence_compute patch set:
  - Add 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  - Add 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  - Add 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Add 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  - Add 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  - Add 0006-fence_compute-Fix-use-of-undefined-variable.patch
  - Add 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  - Add 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  - Add 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0001-fence_compute-Add-insecure-command-line-argument.patch
  - Remove 0002-fence_compute-Add-region-name-command-line-argument.patch
  - Remove 0003-fence_compute-Create-nova-client-with-API-2.11.patch
  - Remove 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
  - Remove 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
  - Remove 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Remove 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1472212800">- Update to version 4.0.24:
  * Improve obtaining status on Cisco UCS devices
  * Fix issues with symlink installations
  * Fix documentation for fence_scsi and fence_mpath</changelog>
  <changelog author="kgronlund@suse.com" date="1480593600">- Update to version 4.0.24+git.1480563949.e67fcd4:
  * fence_azure_arm: add fencing agent for Azure Resource Manager
  * fence_lpar: Add support for IVM
  * fence_lpar: Handle exceptions when invalid output is read
  * fence_zvmip: Update XML metadata
  * fence_compute: fix ConnectionError by using full module name
  * fence_powerman: add fence agent for powerman
  * Suppress InsecureRequestWarning when ssl_insecure is given
  * compute: Correctly handle installations without tagged flavours
  * compute: Use the best available nova API version
  * compute: correctly implement 'on' when the force-down API call is available
  * compute: Correctly identify when the nodename already includes the supplied domain
  * compute: Ensure we can connect to nova when fixing the plug name
  * compute: Simpler check for nova force down compatibility
- Rebase and remove merged patches:
  * Remove 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  * Remove 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  * Remove 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Remove 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Remove 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Remove 0006-fence_compute-Fix-use-of-undefined-variable.patch
  * Remove 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Remove 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Add 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Add 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Add 0004-fence_compute-Fix-handling-of-domain-None.patch
  * Add 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Add 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * Add 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.25+git.1485179354.eb43835:
  * Ironic fence agent
  * fencing: Add --quiet option to disable logging to stderr
  * fence_powerman: fix typo in option powerman-path
  * fence_cisco_ucs: Commands sent to Cisco UCS are changed to
- Drop merged patch:
  * Remove 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
</package>
<package pkgid="7a41d69ff0e0018b9a5f4b7313789ca1a86fe9cb9f3c27b066067fda064f75a7" name="festival" arch="src">
  <version epoch="0" ver="2.5.0" rel="lp150.3.3.1"/>
  <changelog author="mskibbe@suse.de" date="1170072000">- festival-devel packages is incomplete (#230697)</changelog>
  <changelog author="ro@suse.de" date="1175256000">- added ncurses-devel to buildreq</changelog>
  <changelog author="mskibbe@suse.de" date="1185796800">- update speech_tools to version 1.96-beta which
  o fix a lot of bugs
  o includes speech_tools-1.2.95-includes.patch
  o fix VUL-0: Festival: Privilege elevation (#294691)</changelog>
  <changelog author="mskibbe@suse.de" date="1188216000">- fix 64 bit build problem</changelog>
  <changelog author="mskibbe@suse.de" date="1188561600">- Bug 294691 - VUL-0: Festival: Privilege elevation</changelog>
  <changelog author="hvogel@suse.de" date="1190289600">- get rid of usermod %pre call
- add group/useradd to prereq</changelog>
  <changelog author="mskibbe@suse.de" date="1200916800">- fix build problems with new gcc</changelog>
  <changelog author="ro@suse.de" date="1244462400">- Add speech_tools-1.2.96-beta-const.patch to fix build: strchr
  return value changed from char* to const char*</changelog>
  <changelog author="vuntz@opensuse.org" date="1285761600">- Add festival-no-LD_LIBRARY_PATH-extension.patch and
  speech_tools-no-LD_LIBRARY_PATH-extension.patch: do not change
  LD_LIBRARY_PATH to include a directory that can be used by
  malicious users. Fix bnc#642507.</changelog>
  <changelog author="vuntz@opensuse.org" date="1285848000">- Add festival-safe-temp-file.patch: do not use the PID of the
  process to create a temporary file. Mentioned in bnc#642507.</changelog>
  <changelog author="vuntz@opensuse.org" date="1309176000">- Update to version 2.1:
  + Integrated and updated support for HTS, Clustergen, Multisyn
    and Clunits voices.
  + Build fixes for newer gcc.
  + Bug fixes galore.
- Drop various patches that were needed to fix build issues
  (generally caused by recent gcc): festival-1.95-gcc4.patch,
  festival-1.96.patch, speech_tools-1.2.95-gcc4.patch,
  speech_tools-1.2.95-gcc41.patch,
  speech_tools-1.2.95-returnvalue.patch,
  speech_tools-1.2.96-beta-const.patch,
  speech_tools-1.2.96-beta.patch.
- Rebase festival-no-LD_LIBRARY_PATH-extension.patch and
  speech_tools-no-LD_LIBRARY_PATH-extension.patch, and change them
  to not remove empty files (which introduces errors during the
  build) by keeping an empty line in those files.
- Add speech_tools-undefined-operation.patch, which contains the
  only interesting bit left from speech_tools-1.2.95-gcc41.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1331985600">- Add speech_tools-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1353326400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
  <changelog author="schwab@suse.de" date="1365508800">- Update config.guess/sub for speech_tools</changelog>
  <changelog author="devel.openSUSE.org@gmail.com" date="1405252800">- Spec-file cleanup</changelog>
  <changelog author="p.drouand@gmail.com" date="1423742400">- Update to version 2.4
  * Updated HTS and CG engines
  * Support for newer compilers
  * Bug fixes galore.
  * Backwards compatibility with Festival 1.4.3
  * English (British and American), Spanish and Welsh text to speech
  * Externally configurable language independent modules:
  - phonesets
  - lexicons
  - letter-to-sound rules
  - tokenizing
  - part of speech tagging
  - intonation and duration
  * Waveform synthesizers:
  - Multisyn unit selection engine
  - HTS parametric synthesis engine
  - Clustergen parametric synthesis engine
  - Clunits unit selection engine
  - diphone based: residual excited LPC (and PSOLA not for distribution)
  - MBROLA database support.
  - distributed under a free X11-type licence
  * Portable (Unix) distribution
  * On-line documentation
  * SABLE markup, Emacs, client/server, scripting interfaces.
- Update speech_tools-undefined-operation.patch
- Remove speech_tools-gcc47.patch; merged on upstream release
- Add festvox_rablpc16k.tar.gz; new upstream english festvox</changelog>
  <changelog author="dimstar@opensuse.org" date="1489492800">- Add PreReq: insserv-compat. insserv is no longer part of a
  standard SUSE setup, since we have long switched to systemd.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="belphegor@belbel.or.jp" date="1542283200">- Removed sysvinit support according to the boo#1116010.
  * Added systemd unit file
  * Moved rcfestival to /usr/lib/festival/server</changelog>
  <changelog author="belphegor@belbel.or.jp" date="1543060800">- Update to version 2.5.0
  * This update includes a solution for boo#1116808.
  * But upstream seems not to provide a detailed changelog..
- Changed upstream URL to http://festvox.org/festival/,
  original URL http://www.cstr.ed.ac.uk/projects/festival/ seemed
  not to be maintained anymore.</changelog>
</package>
<package pkgid="018b13ad5192eb126788410aee789337cefee0afb1c8694714b719a238b2966e" name="festival" arch="x86_64">
  <version epoch="0" ver="2.5.0" rel="lp150.3.3.1"/>
  <changelog author="ro@suse.de" date="1244462400">- Add speech_tools-1.2.96-beta-const.patch to fix build: strchr
  return value changed from char* to const char*</changelog>
  <changelog author="vuntz@opensuse.org" date="1285761600">- Add festival-no-LD_LIBRARY_PATH-extension.patch and
  speech_tools-no-LD_LIBRARY_PATH-extension.patch: do not change
  LD_LIBRARY_PATH to include a directory that can be used by
  malicious users. Fix bnc#642507.</changelog>
  <changelog author="vuntz@opensuse.org" date="1285848000">- Add festival-safe-temp-file.patch: do not use the PID of the
  process to create a temporary file. Mentioned in bnc#642507.</changelog>
  <changelog author="vuntz@opensuse.org" date="1309176000">- Update to version 2.1:
  + Integrated and updated support for HTS, Clustergen, Multisyn
    and Clunits voices.
  + Build fixes for newer gcc.
  + Bug fixes galore.
- Drop various patches that were needed to fix build issues
  (generally caused by recent gcc): festival-1.95-gcc4.patch,
  festival-1.96.patch, speech_tools-1.2.95-gcc4.patch,
  speech_tools-1.2.95-gcc41.patch,
  speech_tools-1.2.95-returnvalue.patch,
  speech_tools-1.2.96-beta-const.patch,
  speech_tools-1.2.96-beta.patch.
- Rebase festival-no-LD_LIBRARY_PATH-extension.patch and
  speech_tools-no-LD_LIBRARY_PATH-extension.patch, and change them
  to not remove empty files (which introduces errors during the
  build) by keeping an empty line in those files.
- Add speech_tools-undefined-operation.patch, which contains the
  only interesting bit left from speech_tools-1.2.95-gcc41.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1331985600">- Add speech_tools-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1353326400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
  <changelog author="schwab@suse.de" date="1365508800">- Update config.guess/sub for speech_tools</changelog>
  <changelog author="devel.openSUSE.org@gmail.com" date="1405252800">- Spec-file cleanup</changelog>
  <changelog author="p.drouand@gmail.com" date="1423742400">- Update to version 2.4
  * Updated HTS and CG engines
  * Support for newer compilers
  * Bug fixes galore.
  * Backwards compatibility with Festival 1.4.3
  * English (British and American), Spanish and Welsh text to speech
  * Externally configurable language independent modules:
  - phonesets
  - lexicons
  - letter-to-sound rules
  - tokenizing
  - part of speech tagging
  - intonation and duration
  * Waveform synthesizers:
  - Multisyn unit selection engine
  - HTS parametric synthesis engine
  - Clustergen parametric synthesis engine
  - Clunits unit selection engine
  - diphone based: residual excited LPC (and PSOLA not for distribution)
  - MBROLA database support.
  - distributed under a free X11-type licence
  * Portable (Unix) distribution
  * On-line documentation
  * SABLE markup, Emacs, client/server, scripting interfaces.
- Update speech_tools-undefined-operation.patch
- Remove speech_tools-gcc47.patch; merged on upstream release
- Add festvox_rablpc16k.tar.gz; new upstream english festvox</changelog>
  <changelog author="dimstar@opensuse.org" date="1489492800">- Add PreReq: insserv-compat. insserv is no longer part of a
  standard SUSE setup, since we have long switched to systemd.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="belphegor@belbel.or.jp" date="1542283200">- Removed sysvinit support according to the boo#1116010.
  * Added systemd unit file
  * Moved rcfestival to /usr/lib/festival/server</changelog>
  <changelog author="belphegor@belbel.or.jp" date="1543060800">- Update to version 2.5.0
  * This update includes a solution for boo#1116808.
  * But upstream seems not to provide a detailed changelog..
- Changed upstream URL to http://festvox.org/festival/,
  original URL http://www.cstr.ed.ac.uk/projects/festival/ seemed
  not to be maintained anymore.</changelog>
</package>
<package pkgid="f745a88729a0cb9a224a7a032e7de3384624735f3a63a42dc53ce3b37ad261fa" name="festival-devel" arch="x86_64">
  <version epoch="0" ver="2.5.0" rel="lp150.3.3.1"/>
  <changelog author="ro@suse.de" date="1244462400">- Add speech_tools-1.2.96-beta-const.patch to fix build: strchr
  return value changed from char* to const char*</changelog>
  <changelog author="vuntz@opensuse.org" date="1285761600">- Add festival-no-LD_LIBRARY_PATH-extension.patch and
  speech_tools-no-LD_LIBRARY_PATH-extension.patch: do not change
  LD_LIBRARY_PATH to include a directory that can be used by
  malicious users. Fix bnc#642507.</changelog>
  <changelog author="vuntz@opensuse.org" date="1285848000">- Add festival-safe-temp-file.patch: do not use the PID of the
  process to create a temporary file. Mentioned in bnc#642507.</changelog>
  <changelog author="vuntz@opensuse.org" date="1309176000">- Update to version 2.1:
  + Integrated and updated support for HTS, Clustergen, Multisyn
    and Clunits voices.
  + Build fixes for newer gcc.
  + Bug fixes galore.
- Drop various patches that were needed to fix build issues
  (generally caused by recent gcc): festival-1.95-gcc4.patch,
  festival-1.96.patch, speech_tools-1.2.95-gcc4.patch,
  speech_tools-1.2.95-gcc41.patch,
  speech_tools-1.2.95-returnvalue.patch,
  speech_tools-1.2.96-beta-const.patch,
  speech_tools-1.2.96-beta.patch.
- Rebase festival-no-LD_LIBRARY_PATH-extension.patch and
  speech_tools-no-LD_LIBRARY_PATH-extension.patch, and change them
  to not remove empty files (which introduces errors during the
  build) by keeping an empty line in those files.
- Add speech_tools-undefined-operation.patch, which contains the
  only interesting bit left from speech_tools-1.2.95-gcc41.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1331985600">- Add speech_tools-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1353326400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
  <changelog author="schwab@suse.de" date="1365508800">- Update config.guess/sub for speech_tools</changelog>
  <changelog author="devel.openSUSE.org@gmail.com" date="1405252800">- Spec-file cleanup</changelog>
  <changelog author="p.drouand@gmail.com" date="1423742400">- Update to version 2.4
  * Updated HTS and CG engines
  * Support for newer compilers
  * Bug fixes galore.
  * Backwards compatibility with Festival 1.4.3
  * English (British and American), Spanish and Welsh text to speech
  * Externally configurable language independent modules:
  - phonesets
  - lexicons
  - letter-to-sound rules
  - tokenizing
  - part of speech tagging
  - intonation and duration
  * Waveform synthesizers:
  - Multisyn unit selection engine
  - HTS parametric synthesis engine
  - Clustergen parametric synthesis engine
  - Clunits unit selection engine
  - diphone based: residual excited LPC (and PSOLA not for distribution)
  - MBROLA database support.
  - distributed under a free X11-type licence
  * Portable (Unix) distribution
  * On-line documentation
  * SABLE markup, Emacs, client/server, scripting interfaces.
- Update speech_tools-undefined-operation.patch
- Remove speech_tools-gcc47.patch; merged on upstream release
- Add festvox_rablpc16k.tar.gz; new upstream english festvox</changelog>
  <changelog author="dimstar@opensuse.org" date="1489492800">- Add PreReq: insserv-compat. insserv is no longer part of a
  standard SUSE setup, since we have long switched to systemd.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="belphegor@belbel.or.jp" date="1542283200">- Removed sysvinit support according to the boo#1116010.
  * Added systemd unit file
  * Moved rcfestival to /usr/lib/festival/server</changelog>
  <changelog author="belphegor@belbel.or.jp" date="1543060800">- Update to version 2.5.0
  * This update includes a solution for boo#1116808.
  * But upstream seems not to provide a detailed changelog..
- Changed upstream URL to http://festvox.org/festival/,
  original URL http://www.cstr.ed.ac.uk/projects/festival/ seemed
  not to be maintained anymore.</changelog>
</package>
<package pkgid="2cdc1401cde25f126f14f60dbea8384aa615994abac58c6c5c561bcba9a351f1" name="ffmpeg-3" arch="src">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="1997a3568b87def229dff1bd02cba4fb5a083acb6b2cf6934078134f82ea1b7a" name="ffmpeg-3" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="eaf1d023612b8fade39c09a24907fe751662940d9d53eecac6fca23e66b57b19" name="ffmpeg-3" arch="src">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="b2f5326ec02aec617d156aea7d2751b6552eb4e75844ed0dc5b3ac194bcd0886" name="ffmpeg-3" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="4a1628f4440135682a3fe1da5fcc300bc60452d19270596e3b6a9dcc4bccf4ab" name="ffmpeg-3-libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="d5da4789c0f9f129101d334dcfcd6d262a2c5a18821fb6fbb395259d9c29335e" name="ffmpeg-3-libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="de5ff2ae016397788831492e2ca1dded6f0967b4ed32b598607360382fef8330" name="ffmpeg-3-libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="e85cf3e80d5d50c64a54ee57fb7dac81e7321bcc76cb2b69e6b5f328d71a01df" name="ffmpeg-3-libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="4ccd90e2c5ed36c7b449c24022e9d6e8a1114c225b4e645a81a2e742b6458e8a" name="ffmpeg-3-libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="967a48f67c1b053ff997647ede9318752951fecf5df2bd9ed85b653eb089e606" name="ffmpeg-3-libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="c23dfc11e05d611aa194e722e609106c5a18c45c083f27576ac59ef9dac7c56e" name="ffmpeg-3-libavformat-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="34a43d68b283230ab954420a7289cd9d5ca6984aca8622baf799c76fce756cd5" name="ffmpeg-3-libavformat-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="b0145ccb6b78284411ab4d2d85dd3b0cdd3b576f7e048ea6d1e234efc74938ba" name="ffmpeg-3-libavresample-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="26fffabb614a9fa103e7344dd27f3038a9abb6832a3cba070761a2727e16b80e" name="ffmpeg-3-libavresample-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="9da34dff9f3352ee21965ccc044cf60c108f398db71fc23295317ed1989e8cc1" name="ffmpeg-3-libavutil-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="dbe5721e42de03cd5615e3dca5026f0cc07f55a1e2341dd31b33c094bff1ca10" name="ffmpeg-3-libavutil-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="358e018a24fa144364ff08b6706c855f747ff892f3723c9ac89c1dc8285c5593" name="ffmpeg-3-libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="787509f45749b435a1d53198369f4177cd9c50c05f5f7ebd2e14f38ea255da46" name="ffmpeg-3-libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="7a23ebeea8d2331e0ac35620c64d874de587517a857526e4554bb52c8c44e821" name="ffmpeg-3-libswresample-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="a43de328797f1b734f736416e025bc508853ac20e7ee7ba56923abd73235fc75" name="ffmpeg-3-libswresample-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="174adaa52362d396bd197c6cc5dad4f17f2dafbdb91973e7c2db8e6ac49bef7d" name="ffmpeg-3-libswscale-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="d3a08757c6241ad193d4d327d919b3a2699984cfd31bb3bf7a006bbe77f50fa8" name="ffmpeg-3-libswscale-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="6cf0c3c64e9e28a006b2210779e93a2b5bdd5bbfc6af1ec05d14991b9dbeb468" name="ffmpeg-3-private-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="9e95bf897edbb5fa2744857aa261fcfff022799ac857f1abf79eb100d8c42aeb" name="ffmpeg-3-private-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="d387e86ebb6b090be23b09a7e8335c33d63f2072e46cedd393a688910c77bfe0" name="ffmpeg-4" arch="src">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="7916407b4a3889d6971ab387b9e2202bd8f73fd8755cd040130c4f649e41e749" name="ffmpeg-4" arch="src">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="7f97acee2646273860d62080c036b8e74cdfa1907fb295bf184d93631d13f667" name="ffmpeg-4" arch="src">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="1fe82832c0bb56a9ad0105ae131bf38bc23f18466242257c2d519688ce6354d9" name="ffmpeg-4" arch="src">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="9205204442e469a3c1fe81dd5ad893b233f12a6bce65c1af7bc6d3c9226b0d36" name="ffmpeg-4-libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="d03ec9d253534c958188efb0e06d9508b6ff029ddd265357aa87233c0252ca34" name="ffmpeg-4-libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="afc8ef2ddb787002cd5dc980d952587f64b6cd0e4a98d2873918d3b8c0e246e4" name="ffmpeg-4-libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="fc6b17b0a82b475e7dede9328443c133828ec2def2aa6c08735e4fdf923384f8" name="ffmpeg-4-libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="4c5d8d16cc757c02a5e0ff3e371cc75bd5819c7cd945a15acd5795f7992fea75" name="ffmpeg-4-libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="92c281c7f57dc9f3be2e51a7022d9d5d0fa3a7cdaf0c0db938810fd114645fec" name="ffmpeg-4-libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="cd14400470c0478d289ac709c1c81f122560665fc5636c227d3c94146f2f9086" name="ffmpeg-4-libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="fcf0679c2b3be5a91bc1ad1d90c3687609667f595491f24d6f24800fff0d3f85" name="ffmpeg-4-libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="6362238c0dbe69d4ee35a42e129602a634b9a2961b88e6117be86363e8dd9098" name="ffmpeg-4-libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="2725b3eefac84e663afbcd0d33d1621636aea0e038a6dd14aa8212fdf0c92a4a" name="ffmpeg-4-libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="5dabd69232058ae91671ec1d67ee9a20fdc7f4dfb92ea6490eb613b9431a84af" name="ffmpeg-4-libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="d0ba983f0463e4cd921e61a82c64f5323922777870d4d18c1620e2f5644dbc18" name="ffmpeg-4-libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="8ac46e383dfe132aac5561a2d1d9b152635cdf9c08ee3104bad9c289a43ff028" name="ffmpeg-4-libavformat-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="052e50815564ba7a51fcda90eae9b752d4ebd9b5ddb7f8a22b4111a0fc648ede" name="ffmpeg-4-libavformat-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="74946ab55e73f4287ba1e00881f83a991e9f6f0e1fa46768fec76c4129eb3587" name="ffmpeg-4-libavformat-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="453a7b288be39d35737e69f397b2c722342b0ec01be5d9eaa6c1bada0db46967" name="ffmpeg-4-libavformat-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="dffbd827428f390042050bc9dc59145feb8cf0cb0162b05f2debcba756c9eca2" name="ffmpeg-4-libavresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="080ca8947f5c5effed9d1752a8e4e3fc11ccfe0a80505986e886a583d5a2fb01" name="ffmpeg-4-libavresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="f1c4108b451e14cc55b3b87ecea225bdb02ec668cb22fa80f261049c71fa5247" name="ffmpeg-4-libavresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="17f295958223f44a5c2d58759bad130fbd102774939b24f98ae2a66a6fae7070" name="ffmpeg-4-libavresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="8ec9b0e6ffec137ba6773829db0378bd745a10fe11f936a4f6707aea2d4573d3" name="ffmpeg-4-libavutil-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="6b02fa149da68457a34b4f2b34d982652f728ee439a6aea4d4a7ebfcd74ae9d1" name="ffmpeg-4-libavutil-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="a0395b8e16f32b3e1e71d19df6fb70d2a70640489c754e006af987faa9d30e1f" name="ffmpeg-4-libavutil-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="92b44ccbd45c5bc70aed488ca32a8d14d42a9b69b9365cb144461ae3004c0a71" name="ffmpeg-4-libavutil-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="762d275868d1f7679732e7ab2a435607523d66064464d8fe3995b6281ca730a0" name="ffmpeg-4-libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="146477858e1bcfbf8aeeb07c739f8c4dfb4f24641a9e7483d868117020af6840" name="ffmpeg-4-libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="1ffe027008a62b4e75fbc4debf74a0bd15fe62e5f86def9fbf6d6052c38c75fa" name="ffmpeg-4-libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="0247021f0fee155496abd26c6f792bfc8a849a35ade4895d8cdc3b1df02363ac" name="ffmpeg-4-libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="fa10864575e950ddd7c99bef723cd14192f764f16882333a4cd8f068670c49e9" name="ffmpeg-4-libswresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="50f2485f4273e058f601341b37f75c15fe2669622527b212684b6fde52033ee5" name="ffmpeg-4-libswresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="993cbf4be241055d953800f86f074bde07e5840807c051d725e67954b2299044" name="ffmpeg-4-libswresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="20ea95e84c0be2a4bf9d1467db5c52b3391b9ce9d83aaf8b7a099b5053224d61" name="ffmpeg-4-libswresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="1c81b5136833f171249e1b5f27bc7e2c4870c52feaadd5a1ae76c5ac16a6d19d" name="ffmpeg-4-libswscale-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="c7eba6f2a999a23f7c55f41518a925b38709a20c47b8c10891c246722f3de883" name="ffmpeg-4-libswscale-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="dc171525c8e94adbd9938efb5ee46b1ce1dc03a9c929ec976e69783f5c6bbb24" name="ffmpeg-4-libswscale-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="6a52cfea81160e2536a47a5725f13519a6fab97a80253d7618afe4791e821f7a" name="ffmpeg-4-libswscale-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="4474583683a0346ae57999ac0774d49e101f6c94a908bda0159b7b0b85968354" name="ffmpeg-4-private-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="0e89c573dfc2741d8e3f21877c74523168b167af1c7e855cd781f9df4bbfe01a" name="ffmpeg-4-private-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="13babf755a8c72f22326b4067b16c95287ef869b508ceb76e98837a36b1e9252" name="ffmpeg-4-private-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="3b9dfd2d74987b83e5538df41833247a1fbdc68b39be7cd8d6d2dd88fbed9310" name="ffmpeg-4-private-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="c18b5d732debce32c44dc7c04d4d430da6a516fb77787ae975c3978288bda9a3" name="filesystem" arch="src">
  <version epoch="0" ver="15.0" rel="lp150.8.3.1"/>
  <changelog author="kukuk@suse.de" date="1490788800">- Move /etc/init.d hiearchy to insserv-compat
- Move /etc/cups to cups-libs [bsc#1025689]</changelog>
  <changelog author="kukuk@suse.de" date="1492430400">- Remove home directories for wwwrun, lp, mail and nobody.
  They are now part of the corresponding system-user-* RPMs.</changelog>
  <changelog author="kukuk@suse.de" date="1496750400">- Change ownership of /etc/ppp, group dialout has meanwhile another
  meaning and there are no setgid dialout binaries who could need
  that.</changelog>
  <changelog author="kukuk@suse.de" date="1496923200">- Get ride of the last non-root group. /run/lock is created by
  systemd, not filesystem, so remove it from here.</changelog>
  <changelog author="kukuk@suse.de" date="1496923201">- Remove /etc/susehelp.d and subdirectories, susehelp is gone
- Remove /etc/tmpdirs.d, support was removed 2011 and migrated
  to tmpfiles.d
- Remove /var/adm/perl-modules (support was removed with 11.4)</changelog>
  <changelog author="kukuk@suse.de" date="1496923202">- Require user root and group root</changelog>
  <changelog author="kukuk@suse.de" date="1497009600">- Remove /etc/ppp and subdirectories, the current, full list of
  directories is part of the sysconfig package</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Add /usr/share/metainfo: this is the new location defined by
  AppStream to replace /usr/share/appdata.</changelog>
  <changelog author="rbrown@suse.com" date="1510142400">- Add /usr/share/fillup-templates: this is the new location for
  fillup-templates</changelog>
  <changelog author="kukuk@suse.de" date="1511265600">- Create fs-var.conf for systemd-tmpfiles, which contains all
  directories and links below /var. This is needed for systems,
  which use transactional update, read-only root filesystem, or
  other things, where either /var is not available during upgrade
  or does not survive a reboot. So that systemd-tmpfiles could
  create them at next boot.
- Drop deprecated /usr/tmp compat link</changelog>
  <changelog author="kukuk@suse.de" date="1511352000">- Fix incomplete /usr/X11R6 drop from 2013</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Remove /var/adm/backup/{rpmdb,sysconfig}, they belong to
  aaa_base-extras only.</changelog>
  <changelog author="rbrown@suse.com" date="1517832001">- Remove /var/adm/fillup-templates, already prohibited by rpmlint</changelog>
  <changelog author="kukuk@suse.de" date="1517918400">- Adjust aaa_base test for latest aaa_base changes</changelog>
  <changelog author="kukuk@suse.de" date="1518091200">- Exclude some directories from fs-var.conf which are already part
  of systemd [bsc#1078466].
- Remove obsolete, outdated or duplicate directories:
  /lib/YaST, /lib/lsb, /srv/ftp, /usr/lib/lsb, /usr/share/nls and
  /usr/share/tmac.</changelog>
  <changelog author="schwab@suse.de" date="1518609600">- Use lib64 filelist on riscv64</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992000">- Handle aaa_base moving the license files to /usr/share/licenses.</changelog>
  <changelog author="ro@suse.de" date="1521201600">- drop /etc/xinetd.d (bsc#1084457)</changelog>
  <changelog author="msuchanek@suse.com" date="1522152000">- Add /etc/modprobe.d and /usr/lib/modprobe.d (bsc#1082050).</changelog>
  <changelog author="ro@suse.de" date="1526558400">- pretrans lua script: try to move away /var/run and /var/lock
  unless they are already symlinks (bsc#1084119)</changelog>
</package>
<package pkgid="f8ec155406ec18c758a6eef987ee94c7bda5271c9ca717feacca3485411c1f8a" name="filesystem" arch="x86_64">
  <version epoch="0" ver="15.0" rel="lp150.8.3.1"/>
  <changelog author="kukuk@suse.de" date="1490788800">- Move /etc/init.d hiearchy to insserv-compat
- Move /etc/cups to cups-libs [bsc#1025689]</changelog>
  <changelog author="kukuk@suse.de" date="1492430400">- Remove home directories for wwwrun, lp, mail and nobody.
  They are now part of the corresponding system-user-* RPMs.</changelog>
  <changelog author="kukuk@suse.de" date="1496750400">- Change ownership of /etc/ppp, group dialout has meanwhile another
  meaning and there are no setgid dialout binaries who could need
  that.</changelog>
  <changelog author="kukuk@suse.de" date="1496923200">- Get ride of the last non-root group. /run/lock is created by
  systemd, not filesystem, so remove it from here.</changelog>
  <changelog author="kukuk@suse.de" date="1496923201">- Remove /etc/susehelp.d and subdirectories, susehelp is gone
- Remove /etc/tmpdirs.d, support was removed 2011 and migrated
  to tmpfiles.d
- Remove /var/adm/perl-modules (support was removed with 11.4)</changelog>
  <changelog author="kukuk@suse.de" date="1496923202">- Require user root and group root</changelog>
  <changelog author="kukuk@suse.de" date="1497009600">- Remove /etc/ppp and subdirectories, the current, full list of
  directories is part of the sysconfig package</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Add /usr/share/metainfo: this is the new location defined by
  AppStream to replace /usr/share/appdata.</changelog>
  <changelog author="rbrown@suse.com" date="1510142400">- Add /usr/share/fillup-templates: this is the new location for
  fillup-templates</changelog>
  <changelog author="kukuk@suse.de" date="1511265600">- Create fs-var.conf for systemd-tmpfiles, which contains all
  directories and links below /var. This is needed for systems,
  which use transactional update, read-only root filesystem, or
  other things, where either /var is not available during upgrade
  or does not survive a reboot. So that systemd-tmpfiles could
  create them at next boot.
- Drop deprecated /usr/tmp compat link</changelog>
  <changelog author="kukuk@suse.de" date="1511352000">- Fix incomplete /usr/X11R6 drop from 2013</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Remove /var/adm/backup/{rpmdb,sysconfig}, they belong to
  aaa_base-extras only.</changelog>
  <changelog author="rbrown@suse.com" date="1517832001">- Remove /var/adm/fillup-templates, already prohibited by rpmlint</changelog>
  <changelog author="kukuk@suse.de" date="1517918400">- Adjust aaa_base test for latest aaa_base changes</changelog>
  <changelog author="kukuk@suse.de" date="1518091200">- Exclude some directories from fs-var.conf which are already part
  of systemd [bsc#1078466].
- Remove obsolete, outdated or duplicate directories:
  /lib/YaST, /lib/lsb, /srv/ftp, /usr/lib/lsb, /usr/share/nls and
  /usr/share/tmac.</changelog>
  <changelog author="schwab@suse.de" date="1518609600">- Use lib64 filelist on riscv64</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992000">- Handle aaa_base moving the license files to /usr/share/licenses.</changelog>
  <changelog author="ro@suse.de" date="1521201600">- drop /etc/xinetd.d (bsc#1084457)</changelog>
  <changelog author="msuchanek@suse.com" date="1522152000">- Add /etc/modprobe.d and /usr/lib/modprobe.d (bsc#1082050).</changelog>
  <changelog author="ro@suse.de" date="1526558400">- pretrans lua script: try to move away /var/run and /var/lock
  unless they are already symlinks (bsc#1084119)</changelog>
</package>
<package pkgid="e98161bea751b59b9b3c65a7e2ff6fddbe436925933244fcd20a37e8295843d3" name="firewall-applet" arch="noarch">
  <version epoch="0" ver="0.5.3" rel="lp150.2.3.1"/>
  <changelog author="mchandras@suse.de" date="1486987200">- Update to version 0.4.4.3
  * New service freeipa-trust (rh#1411650)
  * Complete icmp types for IPv4 and IPv6
  * New h323 helper container
  * Support helper container: h323
  * firewall.server.decorators: ALREADY_ errors should be logged as warnings
  * firewall.command: ALREADY_SET should also result in zero exit code
  * tests/firewall-offline-cmd_test.sh: Only use firewall-offline-cmd
  * Support more ipset types: hash:ip,port, hash:ip,port,ip, hash:ip,port,net, hash:ip,mark, hash:net,net, hash:net,port, hash:net,port,net, hash:net,iface
  * New checks for ipset entry validation
  * Use ipset dimension for match
  * firewall.core.base: New ZONE_SOURCE_IPSET_TYPES list
  * New firewall.core.icmp providing names and types for icmp and icmpv6 values
  * firewall.core.fw_ipset: New methods to get ipset dimension and applied state
  * firewall.errors: New error NOT_APPLIED
  * firewall-cmd man page: Add missing --get-ipset-types
  * firewall.core.fw_nm: No trace back on failed get_connection call (rh#1413345)
  * firewall.core.prog: Fix addition of the error output in runProg
  * Speed up ipset handling, (re)loading and import from file
  * Support --family option for --new-ipset
  * Handle FirewallError for query sequences in command line tools
  * Fail to alter entries of ipsets with timeout
  * Extended tests for ipset options
  * Return empty list for ipsets using timeouts
  * firewall.functions: Fix checks in checkIPnMask and checkIP6nMask (gh#t-woerner/firewalld#186)
  * firewalld.conf man page: New section about AutomaticHelpers
  * firewall-offline-cmd man page: Added -v and -q options, fixed section ids
  * firewall{-cmd, ctl}: Fix scope of final return in try_set_zone_of_interface
  * firewall.core.fw_zone: Limit masquerading forward rule to new connections
  * firewall-config: Update active zones on reloaded signal
  * firewall-applet: Update active zones and tooltip on reloaded signal
  * firewall.core.fw_zone: Fix missing chain for helper in rich rules using service (rh#1416578)
  * Support icmp-type usage in rich rules (rh#1409544)
  * firewall[-offline]-cmd: Fix --{set,get}-{short,description} for ipset and helper (rh#1416325)
  * firewall.core.ipset: Solve ipset creation issues with -exist and more flag tests
  * Speed up start and restart for ipsets with lots of entries (rh#1416817)
  * Speed up of ipset alteration by adding and removing entries using a file (rh#1416817)
  * Code cleanup and minor bug fixes
  * firewall.core.prog: Fix addition of the error output in runProg
  * New services mssql, kibana, elasticsearch, quassel, bitcoin-rpc, bitcoin-testnet-rpc, bitcoin-testnet, bitcoin and spideroak-lansync
  * Translation updates
- Add upstream patch to fix ipset overloading from /etc/firewalld/ipsets (gh#t-woerner/firewalld#206)
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1490702400">- Update to version 0.4.4.4
  * Drop references to fedorahosted.org from spec file and Makefile.am
  * firewall-config: Show invalid ipset type in the ipset dialog in the bad label
  * firewall.core.fw: Show icmptypes and ipsets with type errors in permanent env
  * firewall.server.firewalld: Provide information about the supported icmp types
  * firewall.core.fw_icmptype: Add ICMP type only if the type is supported
  * firewall.core.fw: New attributes ip{4,6}tables_supported_icmp_types
  * firewall.core.ipXtables: New method supported_icmp_types
  * firewall-config: Deactivate edit buttons if there are no items
  * firewall.core.io.zone: Fix permanent rich rules using icmp-type (rh#1434594)
  * firewall.core.fw_ipset: get_ipset may not ckeck if set is applied by default
  * firewall.core.fw_transaction: Use LastUpdatedOrderedDict for zone transactions
- Remove upstream patch:
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1496750400">- Update to version 0.4.4.5
  * firewall-offline-cmd: Fix --remove-service-from-zone option (rh#1438127)
  * Support sctp and dccp in ports, source-ports, forward-ports, helpers and rich rules
  * firewall-cmd: Fix --{set,get}-{short,description} for zone
  * firewall.core.ipXtables: Use new wait option for restore commands if available
  * Adding ovirt-vmconsole service file
  * Adding oVirt storage-console service.
  * Adding ctdb service file.
  * Adding service file for nrpe.
  * Rename extension for policy choices (server and desktop) to .policy.choice (rh#1449754)
  * D-Bus interfaces: Fix GetAll for interfaces without properties (rh#1452017)
  * firewall.core.fw_config: Fix wrong variable use in repr output
  * firewall.core.fw_icmptype: Add missing import for copy
  * firewall.core.fw_test: Fix wrong format string in repr
  * firewall.core.io.zone: Fix getattr use on super(Zone)
  * firewall.functions: New function get_nf_nat_helpers
  * firewall.core.fw: Get NAT helpers and store them internally.
  * firewall.core.fw_zone: Load NAT helpers with conntrack helpers
  * firewalld.dbus: Add missing properties nf_conntrach_helper_setting and nf_conntrack_helpers
  * firewall.server.firewalld: New property for NAT helpers supported by the kernel</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
</package>
<package pkgid="46752effa18f03342ee48568acbb17614e8eea021d85ae64a0062de5e67350af" name="firewall-applet" arch="noarch">
  <version epoch="0" ver="0.5.4" rel="lp150.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
</package>
<package pkgid="4c0e4c62a97c3915b3f27faadacf2e587f7c54c0c4583ed08fdfba14e4441598" name="firewall-applet" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.12.1"/>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
</package>
<package pkgid="0ce5afb4c628e34cd64d408b8999355a9dbcef1c3d14315569148c97c3d78c81" name="firewall-applet" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540468800">- Add upstream patch to fix a python stacktrace when getting the
  zone for a NetworkManager connection (bsc#1106319)
  * 0001-firewall-core-fw_nm-nm_get_zone_of_connection-should.patch</changelog>
</package>
<package pkgid="72943a6f83bd1a4dbb4538de99806fb82a90f594c663019f3c70970a9970db8f" name="firewall-applet" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.18.1"/>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540468800">- Add upstream patch to fix a python stacktrace when getting the
  zone for a NetworkManager connection (bsc#1106319)
  * 0001-firewall-core-fw_nm-nm_get_zone_of_connection-should.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1541419200">- Import SUSE translations (boo#1108832)
  * added firewalld-0.5.5-po-20181105.tar.xz</changelog>
</package>
<package pkgid="97a7e084222d166cd998aeb8880318694f28165da6aebf9a7b063be77d3d18db" name="firewall-applet" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.9.1"/>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
</package>
<package pkgid="ced4206ae8813a98c7858b63c69915b272825eaae7598973fd593224aad7f839" name="firewall-config" arch="noarch">
  <version epoch="0" ver="0.5.3" rel="lp150.2.3.1"/>
  <changelog author="mchandras@suse.de" date="1486987200">- Update to version 0.4.4.3
  * New service freeipa-trust (rh#1411650)
  * Complete icmp types for IPv4 and IPv6
  * New h323 helper container
  * Support helper container: h323
  * firewall.server.decorators: ALREADY_ errors should be logged as warnings
  * firewall.command: ALREADY_SET should also result in zero exit code
  * tests/firewall-offline-cmd_test.sh: Only use firewall-offline-cmd
  * Support more ipset types: hash:ip,port, hash:ip,port,ip, hash:ip,port,net, hash:ip,mark, hash:net,net, hash:net,port, hash:net,port,net, hash:net,iface
  * New checks for ipset entry validation
  * Use ipset dimension for match
  * firewall.core.base: New ZONE_SOURCE_IPSET_TYPES list
  * New firewall.core.icmp providing names and types for icmp and icmpv6 values
  * firewall.core.fw_ipset: New methods to get ipset dimension and applied state
  * firewall.errors: New error NOT_APPLIED
  * firewall-cmd man page: Add missing --get-ipset-types
  * firewall.core.fw_nm: No trace back on failed get_connection call (rh#1413345)
  * firewall.core.prog: Fix addition of the error output in runProg
  * Speed up ipset handling, (re)loading and import from file
  * Support --family option for --new-ipset
  * Handle FirewallError for query sequences in command line tools
  * Fail to alter entries of ipsets with timeout
  * Extended tests for ipset options
  * Return empty list for ipsets using timeouts
  * firewall.functions: Fix checks in checkIPnMask and checkIP6nMask (gh#t-woerner/firewalld#186)
  * firewalld.conf man page: New section about AutomaticHelpers
  * firewall-offline-cmd man page: Added -v and -q options, fixed section ids
  * firewall{-cmd, ctl}: Fix scope of final return in try_set_zone_of_interface
  * firewall.core.fw_zone: Limit masquerading forward rule to new connections
  * firewall-config: Update active zones on reloaded signal
  * firewall-applet: Update active zones and tooltip on reloaded signal
  * firewall.core.fw_zone: Fix missing chain for helper in rich rules using service (rh#1416578)
  * Support icmp-type usage in rich rules (rh#1409544)
  * firewall[-offline]-cmd: Fix --{set,get}-{short,description} for ipset and helper (rh#1416325)
  * firewall.core.ipset: Solve ipset creation issues with -exist and more flag tests
  * Speed up start and restart for ipsets with lots of entries (rh#1416817)
  * Speed up of ipset alteration by adding and removing entries using a file (rh#1416817)
  * Code cleanup and minor bug fixes
  * firewall.core.prog: Fix addition of the error output in runProg
  * New services mssql, kibana, elasticsearch, quassel, bitcoin-rpc, bitcoin-testnet-rpc, bitcoin-testnet, bitcoin and spideroak-lansync
  * Translation updates
- Add upstream patch to fix ipset overloading from /etc/firewalld/ipsets (gh#t-woerner/firewalld#206)
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1490702400">- Update to version 0.4.4.4
  * Drop references to fedorahosted.org from spec file and Makefile.am
  * firewall-config: Show invalid ipset type in the ipset dialog in the bad label
  * firewall.core.fw: Show icmptypes and ipsets with type errors in permanent env
  * firewall.server.firewalld: Provide information about the supported icmp types
  * firewall.core.fw_icmptype: Add ICMP type only if the type is supported
  * firewall.core.fw: New attributes ip{4,6}tables_supported_icmp_types
  * firewall.core.ipXtables: New method supported_icmp_types
  * firewall-config: Deactivate edit buttons if there are no items
  * firewall.core.io.zone: Fix permanent rich rules using icmp-type (rh#1434594)
  * firewall.core.fw_ipset: get_ipset may not ckeck if set is applied by default
  * firewall.core.fw_transaction: Use LastUpdatedOrderedDict for zone transactions
- Remove upstream patch:
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1496750400">- Update to version 0.4.4.5
  * firewall-offline-cmd: Fix --remove-service-from-zone option (rh#1438127)
  * Support sctp and dccp in ports, source-ports, forward-ports, helpers and rich rules
  * firewall-cmd: Fix --{set,get}-{short,description} for zone
  * firewall.core.ipXtables: Use new wait option for restore commands if available
  * Adding ovirt-vmconsole service file
  * Adding oVirt storage-console service.
  * Adding ctdb service file.
  * Adding service file for nrpe.
  * Rename extension for policy choices (server and desktop) to .policy.choice (rh#1449754)
  * D-Bus interfaces: Fix GetAll for interfaces without properties (rh#1452017)
  * firewall.core.fw_config: Fix wrong variable use in repr output
  * firewall.core.fw_icmptype: Add missing import for copy
  * firewall.core.fw_test: Fix wrong format string in repr
  * firewall.core.io.zone: Fix getattr use on super(Zone)
  * firewall.functions: New function get_nf_nat_helpers
  * firewall.core.fw: Get NAT helpers and store them internally.
  * firewall.core.fw_zone: Load NAT helpers with conntrack helpers
  * firewalld.dbus: Add missing properties nf_conntrach_helper_setting and nf_conntrack_helpers
  * firewall.server.firewalld: New property for NAT helpers supported by the kernel</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
</package>
<package pkgid="e013db63439ac91faac9e73e46f911c4b9f6884523529bf8c3db54202eccab38" name="firewall-config" arch="noarch">
  <version epoch="0" ver="0.5.4" rel="lp150.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
</package>
<package pkgid="7e313fc6fed96b40f8e6f02ce891bcedd8c75195619138764926e0463cacd749" name="firewall-config" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.12.1"/>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
</package>
<package pkgid="8efa81dd86a1d143c78debd257eb75f4bd9780ead06c6d88136ad14dc9223b07" name="firewall-config" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540468800">- Add upstream patch to fix a python stacktrace when getting the
  zone for a NetworkManager connection (bsc#1106319)
  * 0001-firewall-core-fw_nm-nm_get_zone_of_connection-should.patch</changelog>
</package>
<package pkgid="b5f32362af7131036ced02950cd6b480c18ce92b6e3146dd156580533a44b91b" name="firewall-config" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.18.1"/>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540468800">- Add upstream patch to fix a python stacktrace when getting the
  zone for a NetworkManager connection (bsc#1106319)
  * 0001-firewall-core-fw_nm-nm_get_zone_of_connection-should.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1541419200">- Import SUSE translations (boo#1108832)
  * added firewalld-0.5.5-po-20181105.tar.xz</changelog>
</package>
<package pkgid="c4a61a3a772770cb8a4e3b139166715a19f041906ff1d7c6cd43a28572f0503d" name="firewall-config" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.9.1"/>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
</package>
<package pkgid="965f9e5e1beccce59e92ae9bb9a82aa45bc1cf73a8175b07cdfbb70367a08b06" name="firewall-macros" arch="noarch">
  <version epoch="0" ver="0.5.3" rel="lp150.2.3.1"/>
  <changelog author="mchandras@suse.de" date="1486987200">- Update to version 0.4.4.3
  * New service freeipa-trust (rh#1411650)
  * Complete icmp types for IPv4 and IPv6
  * New h323 helper container
  * Support helper container: h323
  * firewall.server.decorators: ALREADY_ errors should be logged as warnings
  * firewall.command: ALREADY_SET should also result in zero exit code
  * tests/firewall-offline-cmd_test.sh: Only use firewall-offline-cmd
  * Support more ipset types: hash:ip,port, hash:ip,port,ip, hash:ip,port,net, hash:ip,mark, hash:net,net, hash:net,port, hash:net,port,net, hash:net,iface
  * New checks for ipset entry validation
  * Use ipset dimension for match
  * firewall.core.base: New ZONE_SOURCE_IPSET_TYPES list
  * New firewall.core.icmp providing names and types for icmp and icmpv6 values
  * firewall.core.fw_ipset: New methods to get ipset dimension and applied state
  * firewall.errors: New error NOT_APPLIED
  * firewall-cmd man page: Add missing --get-ipset-types
  * firewall.core.fw_nm: No trace back on failed get_connection call (rh#1413345)
  * firewall.core.prog: Fix addition of the error output in runProg
  * Speed up ipset handling, (re)loading and import from file
  * Support --family option for --new-ipset
  * Handle FirewallError for query sequences in command line tools
  * Fail to alter entries of ipsets with timeout
  * Extended tests for ipset options
  * Return empty list for ipsets using timeouts
  * firewall.functions: Fix checks in checkIPnMask and checkIP6nMask (gh#t-woerner/firewalld#186)
  * firewalld.conf man page: New section about AutomaticHelpers
  * firewall-offline-cmd man page: Added -v and -q options, fixed section ids
  * firewall{-cmd, ctl}: Fix scope of final return in try_set_zone_of_interface
  * firewall.core.fw_zone: Limit masquerading forward rule to new connections
  * firewall-config: Update active zones on reloaded signal
  * firewall-applet: Update active zones and tooltip on reloaded signal
  * firewall.core.fw_zone: Fix missing chain for helper in rich rules using service (rh#1416578)
  * Support icmp-type usage in rich rules (rh#1409544)
  * firewall[-offline]-cmd: Fix --{set,get}-{short,description} for ipset and helper (rh#1416325)
  * firewall.core.ipset: Solve ipset creation issues with -exist and more flag tests
  * Speed up start and restart for ipsets with lots of entries (rh#1416817)
  * Speed up of ipset alteration by adding and removing entries using a file (rh#1416817)
  * Code cleanup and minor bug fixes
  * firewall.core.prog: Fix addition of the error output in runProg
  * New services mssql, kibana, elasticsearch, quassel, bitcoin-rpc, bitcoin-testnet-rpc, bitcoin-testnet, bitcoin and spideroak-lansync
  * Translation updates
- Add upstream patch to fix ipset overloading from /etc/firewalld/ipsets (gh#t-woerner/firewalld#206)
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1490702400">- Update to version 0.4.4.4
  * Drop references to fedorahosted.org from spec file and Makefile.am
  * firewall-config: Show invalid ipset type in the ipset dialog in the bad label
  * firewall.core.fw: Show icmptypes and ipsets with type errors in permanent env
  * firewall.server.firewalld: Provide information about the supported icmp types
  * firewall.core.fw_icmptype: Add ICMP type only if the type is supported
  * firewall.core.fw: New attributes ip{4,6}tables_supported_icmp_types
  * firewall.core.ipXtables: New method supported_icmp_types
  * firewall-config: Deactivate edit buttons if there are no items
  * firewall.core.io.zone: Fix permanent rich rules using icmp-type (rh#1434594)
  * firewall.core.fw_ipset: get_ipset may not ckeck if set is applied by default
  * firewall.core.fw_transaction: Use LastUpdatedOrderedDict for zone transactions
- Remove upstream patch:
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1496750400">- Update to version 0.4.4.5
  * firewall-offline-cmd: Fix --remove-service-from-zone option (rh#1438127)
  * Support sctp and dccp in ports, source-ports, forward-ports, helpers and rich rules
  * firewall-cmd: Fix --{set,get}-{short,description} for zone
  * firewall.core.ipXtables: Use new wait option for restore commands if available
  * Adding ovirt-vmconsole service file
  * Adding oVirt storage-console service.
  * Adding ctdb service file.
  * Adding service file for nrpe.
  * Rename extension for policy choices (server and desktop) to .policy.choice (rh#1449754)
  * D-Bus interfaces: Fix GetAll for interfaces without properties (rh#1452017)
  * firewall.core.fw_config: Fix wrong variable use in repr output
  * firewall.core.fw_icmptype: Add missing import for copy
  * firewall.core.fw_test: Fix wrong format string in repr
  * firewall.core.io.zone: Fix getattr use on super(Zone)
  * firewall.functions: New function get_nf_nat_helpers
  * firewall.core.fw: Get NAT helpers and store them internally.
  * firewall.core.fw_zone: Load NAT helpers with conntrack helpers
  * firewalld.dbus: Add missing properties nf_conntrach_helper_setting and nf_conntrack_helpers
  * firewall.server.firewalld: New property for NAT helpers supported by the kernel</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
</package>
<package pkgid="fc4b986e75b176febeb9bedb48ec2b9e2a765ed09b98c13d9daa2a921e1b0fb7" name="firewall-macros" arch="noarch">
  <version epoch="0" ver="0.5.4" rel="lp150.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
</package>
<package pkgid="e9102846f873645b4019e9551c65872f40526c14d1626febd05b6b5f117f7f46" name="firewall-macros" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.12.1"/>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
</package>
<package pkgid="322dd1aca2dc45fee42573e1233aa6d0e46f6708277ed0fe74990dddbd43a999" name="firewall-macros" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540468800">- Add upstream patch to fix a python stacktrace when getting the
  zone for a NetworkManager connection (bsc#1106319)
  * 0001-firewall-core-fw_nm-nm_get_zone_of_connection-should.patch</changelog>
</package>
<package pkgid="b647e283b9427b59586da83029d7a45825e27f95beb14065186a6967c663ebb3" name="firewall-macros" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.18.1"/>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540468800">- Add upstream patch to fix a python stacktrace when getting the
  zone for a NetworkManager connection (bsc#1106319)
  * 0001-firewall-core-fw_nm-nm_get_zone_of_connection-should.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1541419200">- Import SUSE translations (boo#1108832)
  * added firewalld-0.5.5-po-20181105.tar.xz</changelog>
</package>
<package pkgid="aba0bd51b574c2d5f6c8145b1c860668fd88dbef44755ce663356497b121e542" name="firewall-macros" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.9.1"/>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
</package>
<package pkgid="ab5d94368e675096f8a8ac1e823bf6b42997fecbdef62a973ab9c70b2c13151e" name="firewalld" arch="noarch">
  <version epoch="0" ver="0.5.3" rel="lp150.2.3.1"/>
  <changelog author="mchandras@suse.de" date="1486987200">- Update to version 0.4.4.3
  * New service freeipa-trust (rh#1411650)
  * Complete icmp types for IPv4 and IPv6
  * New h323 helper container
  * Support helper container: h323
  * firewall.server.decorators: ALREADY_ errors should be logged as warnings
  * firewall.command: ALREADY_SET should also result in zero exit code
  * tests/firewall-offline-cmd_test.sh: Only use firewall-offline-cmd
  * Support more ipset types: hash:ip,port, hash:ip,port,ip, hash:ip,port,net, hash:ip,mark, hash:net,net, hash:net,port, hash:net,port,net, hash:net,iface
  * New checks for ipset entry validation
  * Use ipset dimension for match
  * firewall.core.base: New ZONE_SOURCE_IPSET_TYPES list
  * New firewall.core.icmp providing names and types for icmp and icmpv6 values
  * firewall.core.fw_ipset: New methods to get ipset dimension and applied state
  * firewall.errors: New error NOT_APPLIED
  * firewall-cmd man page: Add missing --get-ipset-types
  * firewall.core.fw_nm: No trace back on failed get_connection call (rh#1413345)
  * firewall.core.prog: Fix addition of the error output in runProg
  * Speed up ipset handling, (re)loading and import from file
  * Support --family option for --new-ipset
  * Handle FirewallError for query sequences in command line tools
  * Fail to alter entries of ipsets with timeout
  * Extended tests for ipset options
  * Return empty list for ipsets using timeouts
  * firewall.functions: Fix checks in checkIPnMask and checkIP6nMask (gh#t-woerner/firewalld#186)
  * firewalld.conf man page: New section about AutomaticHelpers
  * firewall-offline-cmd man page: Added -v and -q options, fixed section ids
  * firewall{-cmd, ctl}: Fix scope of final return in try_set_zone_of_interface
  * firewall.core.fw_zone: Limit masquerading forward rule to new connections
  * firewall-config: Update active zones on reloaded signal
  * firewall-applet: Update active zones and tooltip on reloaded signal
  * firewall.core.fw_zone: Fix missing chain for helper in rich rules using service (rh#1416578)
  * Support icmp-type usage in rich rules (rh#1409544)
  * firewall[-offline]-cmd: Fix --{set,get}-{short,description} for ipset and helper (rh#1416325)
  * firewall.core.ipset: Solve ipset creation issues with -exist and more flag tests
  * Speed up start and restart for ipsets with lots of entries (rh#1416817)
  * Speed up of ipset alteration by adding and removing entries using a file (rh#1416817)
  * Code cleanup and minor bug fixes
  * firewall.core.prog: Fix addition of the error output in runProg
  * New services mssql, kibana, elasticsearch, quassel, bitcoin-rpc, bitcoin-testnet-rpc, bitcoin-testnet, bitcoin and spideroak-lansync
  * Translation updates
- Add upstream patch to fix ipset overloading from /etc/firewalld/ipsets (gh#t-woerner/firewalld#206)
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1490702400">- Update to version 0.4.4.4
  * Drop references to fedorahosted.org from spec file and Makefile.am
  * firewall-config: Show invalid ipset type in the ipset dialog in the bad label
  * firewall.core.fw: Show icmptypes and ipsets with type errors in permanent env
  * firewall.server.firewalld: Provide information about the supported icmp types
  * firewall.core.fw_icmptype: Add ICMP type only if the type is supported
  * firewall.core.fw: New attributes ip{4,6}tables_supported_icmp_types
  * firewall.core.ipXtables: New method supported_icmp_types
  * firewall-config: Deactivate edit buttons if there are no items
  * firewall.core.io.zone: Fix permanent rich rules using icmp-type (rh#1434594)
  * firewall.core.fw_ipset: get_ipset may not ckeck if set is applied by default
  * firewall.core.fw_transaction: Use LastUpdatedOrderedDict for zone transactions
- Remove upstream patch:
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1496750400">- Update to version 0.4.4.5
  * firewall-offline-cmd: Fix --remove-service-from-zone option (rh#1438127)
  * Support sctp and dccp in ports, source-ports, forward-ports, helpers and rich rules
  * firewall-cmd: Fix --{set,get}-{short,description} for zone
  * firewall.core.ipXtables: Use new wait option for restore commands if available
  * Adding ovirt-vmconsole service file
  * Adding oVirt storage-console service.
  * Adding ctdb service file.
  * Adding service file for nrpe.
  * Rename extension for policy choices (server and desktop) to .policy.choice (rh#1449754)
  * D-Bus interfaces: Fix GetAll for interfaces without properties (rh#1452017)
  * firewall.core.fw_config: Fix wrong variable use in repr output
  * firewall.core.fw_icmptype: Add missing import for copy
  * firewall.core.fw_test: Fix wrong format string in repr
  * firewall.core.io.zone: Fix getattr use on super(Zone)
  * firewall.functions: New function get_nf_nat_helpers
  * firewall.core.fw: Get NAT helpers and store them internally.
  * firewall.core.fw_zone: Load NAT helpers with conntrack helpers
  * firewalld.dbus: Add missing properties nf_conntrach_helper_setting and nf_conntrack_helpers
  * firewall.server.firewalld: New property for NAT helpers supported by the kernel</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
</package>
<package pkgid="85a93f1d815dbe8ebaf85df8326c7787925580432a1d9bbd9c751a3802760fcb" name="firewalld" arch="src">
  <version epoch="0" ver="0.5.3" rel="lp150.2.3.1"/>
  <changelog author="mchandras@suse.de" date="1486987200">- Update to version 0.4.4.3
  * New service freeipa-trust (rh#1411650)
  * Complete icmp types for IPv4 and IPv6
  * New h323 helper container
  * Support helper container: h323
  * firewall.server.decorators: ALREADY_ errors should be logged as warnings
  * firewall.command: ALREADY_SET should also result in zero exit code
  * tests/firewall-offline-cmd_test.sh: Only use firewall-offline-cmd
  * Support more ipset types: hash:ip,port, hash:ip,port,ip, hash:ip,port,net, hash:ip,mark, hash:net,net, hash:net,port, hash:net,port,net, hash:net,iface
  * New checks for ipset entry validation
  * Use ipset dimension for match
  * firewall.core.base: New ZONE_SOURCE_IPSET_TYPES list
  * New firewall.core.icmp providing names and types for icmp and icmpv6 values
  * firewall.core.fw_ipset: New methods to get ipset dimension and applied state
  * firewall.errors: New error NOT_APPLIED
  * firewall-cmd man page: Add missing --get-ipset-types
  * firewall.core.fw_nm: No trace back on failed get_connection call (rh#1413345)
  * firewall.core.prog: Fix addition of the error output in runProg
  * Speed up ipset handling, (re)loading and import from file
  * Support --family option for --new-ipset
  * Handle FirewallError for query sequences in command line tools
  * Fail to alter entries of ipsets with timeout
  * Extended tests for ipset options
  * Return empty list for ipsets using timeouts
  * firewall.functions: Fix checks in checkIPnMask and checkIP6nMask (gh#t-woerner/firewalld#186)
  * firewalld.conf man page: New section about AutomaticHelpers
  * firewall-offline-cmd man page: Added -v and -q options, fixed section ids
  * firewall{-cmd, ctl}: Fix scope of final return in try_set_zone_of_interface
  * firewall.core.fw_zone: Limit masquerading forward rule to new connections
  * firewall-config: Update active zones on reloaded signal
  * firewall-applet: Update active zones and tooltip on reloaded signal
  * firewall.core.fw_zone: Fix missing chain for helper in rich rules using service (rh#1416578)
  * Support icmp-type usage in rich rules (rh#1409544)
  * firewall[-offline]-cmd: Fix --{set,get}-{short,description} for ipset and helper (rh#1416325)
  * firewall.core.ipset: Solve ipset creation issues with -exist and more flag tests
  * Speed up start and restart for ipsets with lots of entries (rh#1416817)
  * Speed up of ipset alteration by adding and removing entries using a file (rh#1416817)
  * Code cleanup and minor bug fixes
  * firewall.core.prog: Fix addition of the error output in runProg
  * New services mssql, kibana, elasticsearch, quassel, bitcoin-rpc, bitcoin-testnet-rpc, bitcoin-testnet, bitcoin and spideroak-lansync
  * Translation updates
- Add upstream patch to fix ipset overloading from /etc/firewalld/ipsets (gh#t-woerner/firewalld#206)
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1490702400">- Update to version 0.4.4.4
  * Drop references to fedorahosted.org from spec file and Makefile.am
  * firewall-config: Show invalid ipset type in the ipset dialog in the bad label
  * firewall.core.fw: Show icmptypes and ipsets with type errors in permanent env
  * firewall.server.firewalld: Provide information about the supported icmp types
  * firewall.core.fw_icmptype: Add ICMP type only if the type is supported
  * firewall.core.fw: New attributes ip{4,6}tables_supported_icmp_types
  * firewall.core.ipXtables: New method supported_icmp_types
  * firewall-config: Deactivate edit buttons if there are no items
  * firewall.core.io.zone: Fix permanent rich rules using icmp-type (rh#1434594)
  * firewall.core.fw_ipset: get_ipset may not ckeck if set is applied by default
  * firewall.core.fw_transaction: Use LastUpdatedOrderedDict for zone transactions
- Remove upstream patch:
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1496750400">- Update to version 0.4.4.5
  * firewall-offline-cmd: Fix --remove-service-from-zone option (rh#1438127)
  * Support sctp and dccp in ports, source-ports, forward-ports, helpers and rich rules
  * firewall-cmd: Fix --{set,get}-{short,description} for zone
  * firewall.core.ipXtables: Use new wait option for restore commands if available
  * Adding ovirt-vmconsole service file
  * Adding oVirt storage-console service.
  * Adding ctdb service file.
  * Adding service file for nrpe.
  * Rename extension for policy choices (server and desktop) to .policy.choice (rh#1449754)
  * D-Bus interfaces: Fix GetAll for interfaces without properties (rh#1452017)
  * firewall.core.fw_config: Fix wrong variable use in repr output
  * firewall.core.fw_icmptype: Add missing import for copy
  * firewall.core.fw_test: Fix wrong format string in repr
  * firewall.core.io.zone: Fix getattr use on super(Zone)
  * firewall.functions: New function get_nf_nat_helpers
  * firewall.core.fw: Get NAT helpers and store them internally.
  * firewall.core.fw_zone: Load NAT helpers with conntrack helpers
  * firewalld.dbus: Add missing properties nf_conntrach_helper_setting and nf_conntrack_helpers
  * firewall.server.firewalld: New property for NAT helpers supported by the kernel</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
</package>
<package pkgid="42f4aeaaad29bfd295deaf3792a40c4d0afde59900a8775591f24eb1c02fa60a" name="firewalld" arch="noarch">
  <version epoch="0" ver="0.5.4" rel="lp150.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
</package>
<package pkgid="b02f07db839a192e916c4fa0d6a69b71ec3e20c810223cb06f1eb290210cd922" name="firewalld" arch="src">
  <version epoch="0" ver="0.5.4" rel="lp150.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
</package>
<package pkgid="bb4d333bcbda58152c64df8358377254ed817f589ea041bc967a6100796886be" name="firewalld" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.12.1"/>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
</package>
<package pkgid="6a7b0c86aa74b356ce7765df7efc4ff36f6a8beaf5989e37bf385d8ccc51ce7a" name="firewalld" arch="src">
  <version epoch="0" ver="0.5.5" rel="lp150.2.12.1"/>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
</package>
<package pkgid="2dff2fc6200d21c6b3f91eabe3224172c3bc0b5d1ec36d827fde79782b4f876a" name="firewalld" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540468800">- Add upstream patch to fix a python stacktrace when getting the
  zone for a NetworkManager connection (bsc#1106319)
  * 0001-firewall-core-fw_nm-nm_get_zone_of_connection-should.patch</changelog>
</package>
<package pkgid="dce35b28cc98e149781f5b7f23a6d6d8a6dae94010574fb6f1262b301df976a9" name="firewalld" arch="src">
  <version epoch="0" ver="0.5.5" rel="lp150.2.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540468800">- Add upstream patch to fix a python stacktrace when getting the
  zone for a NetworkManager connection (bsc#1106319)
  * 0001-firewall-core-fw_nm-nm_get_zone_of_connection-should.patch</changelog>
</package>
<package pkgid="8f801413feb8bb373bc795a42e24b858c08224ac0ab85a68c5f6dcfed51b370f" name="firewalld" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.18.1"/>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540468800">- Add upstream patch to fix a python stacktrace when getting the
  zone for a NetworkManager connection (bsc#1106319)
  * 0001-firewall-core-fw_nm-nm_get_zone_of_connection-should.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1541419200">- Import SUSE translations (boo#1108832)
  * added firewalld-0.5.5-po-20181105.tar.xz</changelog>
</package>
<package pkgid="186c679850c84973fd209a0d44166b3d378997d1932ef265ba53da8d82e3a0ce" name="firewalld" arch="src">
  <version epoch="0" ver="0.5.5" rel="lp150.2.18.1"/>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540468800">- Add upstream patch to fix a python stacktrace when getting the
  zone for a NetworkManager connection (bsc#1106319)
  * 0001-firewall-core-fw_nm-nm_get_zone_of_connection-should.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1541419200">- Import SUSE translations (boo#1108832)
  * added firewalld-0.5.5-po-20181105.tar.xz</changelog>
</package>
<package pkgid="df77574224a156ca49c54dd7b3d83de7958303ed05266c73d4039fe710115712" name="firewalld" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.9.1"/>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
</package>
<package pkgid="b37bfead74f5e784927b30c02933db50b6de8a4b8c027fa6bbc55912040a32b0" name="firewalld" arch="src">
  <version epoch="0" ver="0.5.5" rel="lp150.2.9.1"/>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
</package>
<package pkgid="ed222b8b4d9b91186ae3e81e463012d56aa3bfe6c38f83e3bfe29db9d3780d04" name="firewalld-lang" arch="noarch">
  <version epoch="0" ver="0.5.3" rel="lp150.2.3.1"/>
  <changelog author="mchandras@suse.de" date="1486987200">- Update to version 0.4.4.3
  * New service freeipa-trust (rh#1411650)
  * Complete icmp types for IPv4 and IPv6
  * New h323 helper container
  * Support helper container: h323
  * firewall.server.decorators: ALREADY_ errors should be logged as warnings
  * firewall.command: ALREADY_SET should also result in zero exit code
  * tests/firewall-offline-cmd_test.sh: Only use firewall-offline-cmd
  * Support more ipset types: hash:ip,port, hash:ip,port,ip, hash:ip,port,net, hash:ip,mark, hash:net,net, hash:net,port, hash:net,port,net, hash:net,iface
  * New checks for ipset entry validation
  * Use ipset dimension for match
  * firewall.core.base: New ZONE_SOURCE_IPSET_TYPES list
  * New firewall.core.icmp providing names and types for icmp and icmpv6 values
  * firewall.core.fw_ipset: New methods to get ipset dimension and applied state
  * firewall.errors: New error NOT_APPLIED
  * firewall-cmd man page: Add missing --get-ipset-types
  * firewall.core.fw_nm: No trace back on failed get_connection call (rh#1413345)
  * firewall.core.prog: Fix addition of the error output in runProg
  * Speed up ipset handling, (re)loading and import from file
  * Support --family option for --new-ipset
  * Handle FirewallError for query sequences in command line tools
  * Fail to alter entries of ipsets with timeout
  * Extended tests for ipset options
  * Return empty list for ipsets using timeouts
  * firewall.functions: Fix checks in checkIPnMask and checkIP6nMask (gh#t-woerner/firewalld#186)
  * firewalld.conf man page: New section about AutomaticHelpers
  * firewall-offline-cmd man page: Added -v and -q options, fixed section ids
  * firewall{-cmd, ctl}: Fix scope of final return in try_set_zone_of_interface
  * firewall.core.fw_zone: Limit masquerading forward rule to new connections
  * firewall-config: Update active zones on reloaded signal
  * firewall-applet: Update active zones and tooltip on reloaded signal
  * firewall.core.fw_zone: Fix missing chain for helper in rich rules using service (rh#1416578)
  * Support icmp-type usage in rich rules (rh#1409544)
  * firewall[-offline]-cmd: Fix --{set,get}-{short,description} for ipset and helper (rh#1416325)
  * firewall.core.ipset: Solve ipset creation issues with -exist and more flag tests
  * Speed up start and restart for ipsets with lots of entries (rh#1416817)
  * Speed up of ipset alteration by adding and removing entries using a file (rh#1416817)
  * Code cleanup and minor bug fixes
  * firewall.core.prog: Fix addition of the error output in runProg
  * New services mssql, kibana, elasticsearch, quassel, bitcoin-rpc, bitcoin-testnet-rpc, bitcoin-testnet, bitcoin and spideroak-lansync
  * Translation updates
- Add upstream patch to fix ipset overloading from /etc/firewalld/ipsets (gh#t-woerner/firewalld#206)
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1490702400">- Update to version 0.4.4.4
  * Drop references to fedorahosted.org from spec file and Makefile.am
  * firewall-config: Show invalid ipset type in the ipset dialog in the bad label
  * firewall.core.fw: Show icmptypes and ipsets with type errors in permanent env
  * firewall.server.firewalld: Provide information about the supported icmp types
  * firewall.core.fw_icmptype: Add ICMP type only if the type is supported
  * firewall.core.fw: New attributes ip{4,6}tables_supported_icmp_types
  * firewall.core.ipXtables: New method supported_icmp_types
  * firewall-config: Deactivate edit buttons if there are no items
  * firewall.core.io.zone: Fix permanent rich rules using icmp-type (rh#1434594)
  * firewall.core.fw_ipset: get_ipset may not ckeck if set is applied by default
  * firewall.core.fw_transaction: Use LastUpdatedOrderedDict for zone transactions
- Remove upstream patch:
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1496750400">- Update to version 0.4.4.5
  * firewall-offline-cmd: Fix --remove-service-from-zone option (rh#1438127)
  * Support sctp and dccp in ports, source-ports, forward-ports, helpers and rich rules
  * firewall-cmd: Fix --{set,get}-{short,description} for zone
  * firewall.core.ipXtables: Use new wait option for restore commands if available
  * Adding ovirt-vmconsole service file
  * Adding oVirt storage-console service.
  * Adding ctdb service file.
  * Adding service file for nrpe.
  * Rename extension for policy choices (server and desktop) to .policy.choice (rh#1449754)
  * D-Bus interfaces: Fix GetAll for interfaces without properties (rh#1452017)
  * firewall.core.fw_config: Fix wrong variable use in repr output
  * firewall.core.fw_icmptype: Add missing import for copy
  * firewall.core.fw_test: Fix wrong format string in repr
  * firewall.core.io.zone: Fix getattr use on super(Zone)
  * firewall.functions: New function get_nf_nat_helpers
  * firewall.core.fw: Get NAT helpers and store them internally.
  * firewall.core.fw_zone: Load NAT helpers with conntrack helpers
  * firewalld.dbus: Add missing properties nf_conntrach_helper_setting and nf_conntrack_helpers
  * firewall.server.firewalld: New property for NAT helpers supported by the kernel</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
</package>
<package pkgid="99e1405cd9cc8a5ad2207600c4bc11188aefe42e975ebb6e39294e1509e10aa6" name="firewalld-lang" arch="noarch">
  <version epoch="0" ver="0.5.4" rel="lp150.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
</package>
<package pkgid="7752ef3b7848d83c91b9adc5e9c0930966ec9608bfbf7ffc108bf741d52880d7" name="firewalld-lang" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.12.1"/>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
</package>
<package pkgid="56346372a91d2a9a34521f0ed30c7a36ee3f391db0b1622057d1e8cb218fed16" name="firewalld-lang" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540468800">- Add upstream patch to fix a python stacktrace when getting the
  zone for a NetworkManager connection (bsc#1106319)
  * 0001-firewall-core-fw_nm-nm_get_zone_of_connection-should.patch</changelog>
</package>
<package pkgid="2288b93286e2fedaf61adbbe4d9793be5b21ebc7213ba79187aad5bd86b6069a" name="firewalld-lang" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.18.1"/>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540468800">- Add upstream patch to fix a python stacktrace when getting the
  zone for a NetworkManager connection (bsc#1106319)
  * 0001-firewall-core-fw_nm-nm_get_zone_of_connection-should.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1541419200">- Import SUSE translations (boo#1108832)
  * added firewalld-0.5.5-po-20181105.tar.xz</changelog>
</package>
<package pkgid="0702649564b50079a29dd88286b263c5240a1773b4a26a6cae8797d4e0d38d09" name="firewalld-lang" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.9.1"/>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
</package>
<package pkgid="e65af1836fb24ab4dd1bc81e6c80049ec0dc0dd3f08d3a6322ac4482b2137922" name="firewalld-rpcbind-helper" arch="noarch">
  <version epoch="0" ver="0.1" rel="lp150.3.3.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1523448000">- initial version of package</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1523880000">- Require python3 and to be in line with the Leap-15 /
  SLE-15 situation (see OBS comments in sr#595722).
- shebang.patch: use python3 in shebang for the same reasons.</changelog>
  <changelog author="jengelh@inai.de" date="1523966400">- Feed file through spec-cleaner</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1526040000">Fixes for bnc#1096064:
- 0001-main-script-fix-running-with-python3-need-to-decode.patch: fix error
  when running in python3 context, because of a missing decode() call.
- 0002-main-script-be-prepared-for-some-of-the-sysconfig-fi.patch: don't raise
  Exceptions when one of the target sysconfig files isn't installed.</changelog>
</package>
<package pkgid="eb61eb48eeabca319b74ddd23af85aafd879351f2a11fe60ae518e0248182d23" name="firewalld-rpcbind-helper" arch="src">
  <version epoch="0" ver="0.1" rel="lp150.3.3.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1523448000">- initial version of package</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1523880000">- Require python3 and to be in line with the Leap-15 /
  SLE-15 situation (see OBS comments in sr#595722).
- shebang.patch: use python3 in shebang for the same reasons.</changelog>
  <changelog author="jengelh@inai.de" date="1523966400">- Feed file through spec-cleaner</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1526040000">Fixes for bnc#1096064:
- 0001-main-script-fix-running-with-python3-need-to-decode.patch: fix error
  when running in python3 context, because of a missing decode() call.
- 0002-main-script-be-prepared-for-some-of-the-sysconfig-fi.patch: don't raise
  Exceptions when one of the target sysconfig files isn't installed.</changelog>
</package>
<package pkgid="5825618db3e13f10563b3ab650dec873614ee100fe6d7e7eeef4d61447913e11" name="fuse" arch="src">
  <version epoch="0" ver="2.9.7" rel="lp150.2.3.1"/>
  <changelog author="mszeredi@suse.cz" date="1327492800">- use %set_permissions instead of %run_permissions in specfile</changelog>
  <changelog author="puzel@suse.com" date="1335096000">- update to 2.9.0
  - Add "zero copy" support for kernel 2.6.35 or newer
  - Make maximum background requests tunable on kernel 2.6.32 or
    newer
  - Require --no-canonicalize in (u)mount (util-linux version 2.18
    or newer) to fix security problems with fusermount
  - Use dynamically sized hash tables in high level library
  - Memory use of filesystem daemon can shrink more easily
  - Add "auto_unmount" option
  - Add "remember" option
  - Add man pages for fusermount, mount.fuse and ulockmgr_server
  - API changes:
  - Introduce "store" and "retrieve" for accessing kernel
    buffers on kernel 2.6.36 or newer
  - Introduce abstract buffer for zero copy operations
  - Allow path calculation to be omitted on certain operations
  - Allow batching forget requests
  - Add "flock" method
  - Add support for ioctl on directories
  - Add delete notification
- drop fuse-pc-remove-libdir-from-Libs.diff (upstream)</changelog>
  <changelog author="rschweikert@suse.com" date="1335441600">- place binaries in /usr tree (UsrMerge project)</changelog>
  <changelog author="mszeredi@suse.cz" date="1337169600">- Fix -pthread in fuse.pc [bnc#761117]</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Trim list of FUSE fses from description (it's literally endless)
  and text inappropraite for subpackages</changelog>
  <changelog author="coolo@suse.com" date="1341230400">- avoid autoreconf to avoid breaking on updates of auto* tools</changelog>
  <changelog author="coolo@suse.com" date="1359806400">- update license to new format</changelog>
  <changelog author="archie@dellroad.org" date="1362398400">- Update to version 2.9.2
  - Add support for fallocate() (kernel &gt;= 3.5)
  - Bug fixes
- Remove fix-pthread-in-fuse.pc.patch; now included in upstream
- Don't patch generated files such as configure and Makefile.in;
  instead, regenerate them using makeconf.sh from SVN repository</changelog>
  <changelog author="idonmez@suse.com" date="1362744000">- Use autoreconf directly instead of makeconf.sh</changelog>
  <changelog author="dmueller@suse.com" date="1364299200">- fix build for SLE_11</changelog>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1371384000">- add aarch64-build-fix.patch</changelog>
  <changelog author="mszeredi@suse.cz" date="1374667200">- Update to version 2.9.3
  - Bug fixes
- Remove fuse-gnu_source.patch (fixed upstream)</changelog>
  <changelog author="bwiedemann@suse.com" date="1418212800">- include commented default fuse.conf (bnc#908292)</changelog>
  <changelog author="mszeredi@suse.cz" date="1432296000">- Update to version 2.9.4
  - fix exec environment for mount and umount (bsc#931452,
    CVE-2015-3202)
  - properly restore the default signal handler
  - fix directory file handle passed to	ioctl() method.
  - fix for uids/gids larger than 2147483647
  - initialize stat buffer passed to -&gt;getattr() and -&gt;fgetattr()</changelog>
  <changelog author="astieger@suse.com" date="1453464000">- fuse 2.9.5:
  * fix warning in mount.c:receive_fd().
  * fix possible memory leak.
  * new upstream project and source URL
  * add new maintainer keyring and verify source signature</changelog>
  <changelog author="fcrozat@suse.com" date="1501502400">- Ensure trusted group is available on Tumbleweed.</changelog>
  <changelog author="admorgan@morgancomputers.net" date="1507291200">- fuse 2.9.7
  * Shared-object version has now been bumped correctly.
  * Added SELinux support.
  * Fixed race-condition when session is terminated right after
    starting a FUSE file system.</changelog>
  <changelog author="admorgan@morgancomputers.net" date="1508155200">- Fix download link in fuse.spec</changelog>
  <changelog author="rgoldwyn@suse.com" date="1536667200">- user_allow_other restriction may be bypassed (bsc#1101797, CVE-2018-10906)
  - fusermount-prevent-silent-truncation-of-mount-options.patch
  - fusermount-dont-feed-escaped-commans-into-mount-options.patch
  - fusermount-bail-out-on-transient-config-read-failure.patch
  - fusermount-refuse-unknown-options.patch
  - fusermount-whitelist-known-good-filesystems-for-mountpoints.patch</changelog>
</package>
<package pkgid="9591b132c6c0bc623e778136e4923cd98fd90cc6300930af707ca844d7d448f3" name="fuse" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="lp150.2.3.1"/>
  <changelog author="mszeredi@suse.cz" date="1327492800">- use %set_permissions instead of %run_permissions in specfile</changelog>
  <changelog author="puzel@suse.com" date="1335096000">- update to 2.9.0
  - Add "zero copy" support for kernel 2.6.35 or newer
  - Make maximum background requests tunable on kernel 2.6.32 or
    newer
  - Require --no-canonicalize in (u)mount (util-linux version 2.18
    or newer) to fix security problems with fusermount
  - Use dynamically sized hash tables in high level library
  - Memory use of filesystem daemon can shrink more easily
  - Add "auto_unmount" option
  - Add "remember" option
  - Add man pages for fusermount, mount.fuse and ulockmgr_server
  - API changes:
  - Introduce "store" and "retrieve" for accessing kernel
    buffers on kernel 2.6.36 or newer
  - Introduce abstract buffer for zero copy operations
  - Allow path calculation to be omitted on certain operations
  - Allow batching forget requests
  - Add "flock" method
  - Add support for ioctl on directories
  - Add delete notification
- drop fuse-pc-remove-libdir-from-Libs.diff (upstream)</changelog>
  <changelog author="rschweikert@suse.com" date="1335441600">- place binaries in /usr tree (UsrMerge project)</changelog>
  <changelog author="mszeredi@suse.cz" date="1337169600">- Fix -pthread in fuse.pc [bnc#761117]</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Trim list of FUSE fses from description (it's literally endless)
  and text inappropraite for subpackages</changelog>
  <changelog author="coolo@suse.com" date="1341230400">- avoid autoreconf to avoid breaking on updates of auto* tools</changelog>
  <changelog author="coolo@suse.com" date="1359806400">- update license to new format</changelog>
  <changelog author="archie@dellroad.org" date="1362398400">- Update to version 2.9.2
  - Add support for fallocate() (kernel &gt;= 3.5)
  - Bug fixes
- Remove fix-pthread-in-fuse.pc.patch; now included in upstream
- Don't patch generated files such as configure and Makefile.in;
  instead, regenerate them using makeconf.sh from SVN repository</changelog>
  <changelog author="idonmez@suse.com" date="1362744000">- Use autoreconf directly instead of makeconf.sh</changelog>
  <changelog author="dmueller@suse.com" date="1364299200">- fix build for SLE_11</changelog>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1371384000">- add aarch64-build-fix.patch</changelog>
  <changelog author="mszeredi@suse.cz" date="1374667200">- Update to version 2.9.3
  - Bug fixes
- Remove fuse-gnu_source.patch (fixed upstream)</changelog>
  <changelog author="bwiedemann@suse.com" date="1418212800">- include commented default fuse.conf (bnc#908292)</changelog>
  <changelog author="mszeredi@suse.cz" date="1432296000">- Update to version 2.9.4
  - fix exec environment for mount and umount (bsc#931452,
    CVE-2015-3202)
  - properly restore the default signal handler
  - fix directory file handle passed to	ioctl() method.
  - fix for uids/gids larger than 2147483647
  - initialize stat buffer passed to -&gt;getattr() and -&gt;fgetattr()</changelog>
  <changelog author="astieger@suse.com" date="1453464000">- fuse 2.9.5:
  * fix warning in mount.c:receive_fd().
  * fix possible memory leak.
  * new upstream project and source URL
  * add new maintainer keyring and verify source signature</changelog>
  <changelog author="fcrozat@suse.com" date="1501502400">- Ensure trusted group is available on Tumbleweed.</changelog>
  <changelog author="admorgan@morgancomputers.net" date="1507291200">- fuse 2.9.7
  * Shared-object version has now been bumped correctly.
  * Added SELinux support.
  * Fixed race-condition when session is terminated right after
    starting a FUSE file system.</changelog>
  <changelog author="admorgan@morgancomputers.net" date="1508155200">- Fix download link in fuse.spec</changelog>
  <changelog author="rgoldwyn@suse.com" date="1536667200">- user_allow_other restriction may be bypassed (bsc#1101797, CVE-2018-10906)
  - fusermount-prevent-silent-truncation-of-mount-options.patch
  - fusermount-dont-feed-escaped-commans-into-mount-options.patch
  - fusermount-bail-out-on-transient-config-read-failure.patch
  - fusermount-refuse-unknown-options.patch
  - fusermount-whitelist-known-good-filesystems-for-mountpoints.patch</changelog>
</package>
<package pkgid="4443d5329f3f2bdd84d1b1389ea6c1da2a13f6848aa92754e68d0f57cdb8cb71" name="fuse-devel" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="lp150.2.3.1"/>
  <changelog author="mszeredi@suse.cz" date="1327492800">- use %set_permissions instead of %run_permissions in specfile</changelog>
  <changelog author="puzel@suse.com" date="1335096000">- update to 2.9.0
  - Add "zero copy" support for kernel 2.6.35 or newer
  - Make maximum background requests tunable on kernel 2.6.32 or
    newer
  - Require --no-canonicalize in (u)mount (util-linux version 2.18
    or newer) to fix security problems with fusermount
  - Use dynamically sized hash tables in high level library
  - Memory use of filesystem daemon can shrink more easily
  - Add "auto_unmount" option
  - Add "remember" option
  - Add man pages for fusermount, mount.fuse and ulockmgr_server
  - API changes:
  - Introduce "store" and "retrieve" for accessing kernel
    buffers on kernel 2.6.36 or newer
  - Introduce abstract buffer for zero copy operations
  - Allow path calculation to be omitted on certain operations
  - Allow batching forget requests
  - Add "flock" method
  - Add support for ioctl on directories
  - Add delete notification
- drop fuse-pc-remove-libdir-from-Libs.diff (upstream)</changelog>
  <changelog author="rschweikert@suse.com" date="1335441600">- place binaries in /usr tree (UsrMerge project)</changelog>
  <changelog author="mszeredi@suse.cz" date="1337169600">- Fix -pthread in fuse.pc [bnc#761117]</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Trim list of FUSE fses from description (it's literally endless)
  and text inappropraite for subpackages</changelog>
  <changelog author="coolo@suse.com" date="1341230400">- avoid autoreconf to avoid breaking on updates of auto* tools</changelog>
  <changelog author="coolo@suse.com" date="1359806400">- update license to new format</changelog>
  <changelog author="archie@dellroad.org" date="1362398400">- Update to version 2.9.2
  - Add support for fallocate() (kernel &gt;= 3.5)
  - Bug fixes
- Remove fix-pthread-in-fuse.pc.patch; now included in upstream
- Don't patch generated files such as configure and Makefile.in;
  instead, regenerate them using makeconf.sh from SVN repository</changelog>
  <changelog author="idonmez@suse.com" date="1362744000">- Use autoreconf directly instead of makeconf.sh</changelog>
  <changelog author="dmueller@suse.com" date="1364299200">- fix build for SLE_11</changelog>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1371384000">- add aarch64-build-fix.patch</changelog>
  <changelog author="mszeredi@suse.cz" date="1374667200">- Update to version 2.9.3
  - Bug fixes
- Remove fuse-gnu_source.patch (fixed upstream)</changelog>
  <changelog author="bwiedemann@suse.com" date="1418212800">- include commented default fuse.conf (bnc#908292)</changelog>
  <changelog author="mszeredi@suse.cz" date="1432296000">- Update to version 2.9.4
  - fix exec environment for mount and umount (bsc#931452,
    CVE-2015-3202)
  - properly restore the default signal handler
  - fix directory file handle passed to	ioctl() method.
  - fix for uids/gids larger than 2147483647
  - initialize stat buffer passed to -&gt;getattr() and -&gt;fgetattr()</changelog>
  <changelog author="astieger@suse.com" date="1453464000">- fuse 2.9.5:
  * fix warning in mount.c:receive_fd().
  * fix possible memory leak.
  * new upstream project and source URL
  * add new maintainer keyring and verify source signature</changelog>
  <changelog author="fcrozat@suse.com" date="1501502400">- Ensure trusted group is available on Tumbleweed.</changelog>
  <changelog author="admorgan@morgancomputers.net" date="1507291200">- fuse 2.9.7
  * Shared-object version has now been bumped correctly.
  * Added SELinux support.
  * Fixed race-condition when session is terminated right after
    starting a FUSE file system.</changelog>
  <changelog author="admorgan@morgancomputers.net" date="1508155200">- Fix download link in fuse.spec</changelog>
  <changelog author="rgoldwyn@suse.com" date="1536667200">- user_allow_other restriction may be bypassed (bsc#1101797, CVE-2018-10906)
  - fusermount-prevent-silent-truncation-of-mount-options.patch
  - fusermount-dont-feed-escaped-commans-into-mount-options.patch
  - fusermount-bail-out-on-transient-config-read-failure.patch
  - fusermount-refuse-unknown-options.patch
  - fusermount-whitelist-known-good-filesystems-for-mountpoints.patch</changelog>
</package>
<package pkgid="6cfe5f833d028630ba4ac5dcb1a469017e756aaa4c705d2ba68ad9ec3940f13d" name="fuse-devel-static" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="lp150.2.3.1"/>
  <changelog author="mszeredi@suse.cz" date="1327492800">- use %set_permissions instead of %run_permissions in specfile</changelog>
  <changelog author="puzel@suse.com" date="1335096000">- update to 2.9.0
  - Add "zero copy" support for kernel 2.6.35 or newer
  - Make maximum background requests tunable on kernel 2.6.32 or
    newer
  - Require --no-canonicalize in (u)mount (util-linux version 2.18
    or newer) to fix security problems with fusermount
  - Use dynamically sized hash tables in high level library
  - Memory use of filesystem daemon can shrink more easily
  - Add "auto_unmount" option
  - Add "remember" option
  - Add man pages for fusermount, mount.fuse and ulockmgr_server
  - API changes:
  - Introduce "store" and "retrieve" for accessing kernel
    buffers on kernel 2.6.36 or newer
  - Introduce abstract buffer for zero copy operations
  - Allow path calculation to be omitted on certain operations
  - Allow batching forget requests
  - Add "flock" method
  - Add support for ioctl on directories
  - Add delete notification
- drop fuse-pc-remove-libdir-from-Libs.diff (upstream)</changelog>
  <changelog author="rschweikert@suse.com" date="1335441600">- place binaries in /usr tree (UsrMerge project)</changelog>
  <changelog author="mszeredi@suse.cz" date="1337169600">- Fix -pthread in fuse.pc [bnc#761117]</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Trim list of FUSE fses from description (it's literally endless)
  and text inappropraite for subpackages</changelog>
  <changelog author="coolo@suse.com" date="1341230400">- avoid autoreconf to avoid breaking on updates of auto* tools</changelog>
  <changelog author="coolo@suse.com" date="1359806400">- update license to new format</changelog>
  <changelog author="archie@dellroad.org" date="1362398400">- Update to version 2.9.2
  - Add support for fallocate() (kernel &gt;= 3.5)
  - Bug fixes
- Remove fix-pthread-in-fuse.pc.patch; now included in upstream
- Don't patch generated files such as configure and Makefile.in;
  instead, regenerate them using makeconf.sh from SVN repository</changelog>
  <changelog author="idonmez@suse.com" date="1362744000">- Use autoreconf directly instead of makeconf.sh</changelog>
  <changelog author="dmueller@suse.com" date="1364299200">- fix build for SLE_11</changelog>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1371384000">- add aarch64-build-fix.patch</changelog>
  <changelog author="mszeredi@suse.cz" date="1374667200">- Update to version 2.9.3
  - Bug fixes
- Remove fuse-gnu_source.patch (fixed upstream)</changelog>
  <changelog author="bwiedemann@suse.com" date="1418212800">- include commented default fuse.conf (bnc#908292)</changelog>
  <changelog author="mszeredi@suse.cz" date="1432296000">- Update to version 2.9.4
  - fix exec environment for mount and umount (bsc#931452,
    CVE-2015-3202)
  - properly restore the default signal handler
  - fix directory file handle passed to	ioctl() method.
  - fix for uids/gids larger than 2147483647
  - initialize stat buffer passed to -&gt;getattr() and -&gt;fgetattr()</changelog>
  <changelog author="astieger@suse.com" date="1453464000">- fuse 2.9.5:
  * fix warning in mount.c:receive_fd().
  * fix possible memory leak.
  * new upstream project and source URL
  * add new maintainer keyring and verify source signature</changelog>
  <changelog author="fcrozat@suse.com" date="1501502400">- Ensure trusted group is available on Tumbleweed.</changelog>
  <changelog author="admorgan@morgancomputers.net" date="1507291200">- fuse 2.9.7
  * Shared-object version has now been bumped correctly.
  * Added SELinux support.
  * Fixed race-condition when session is terminated right after
    starting a FUSE file system.</changelog>
  <changelog author="admorgan@morgancomputers.net" date="1508155200">- Fix download link in fuse.spec</changelog>
  <changelog author="rgoldwyn@suse.com" date="1536667200">- user_allow_other restriction may be bypassed (bsc#1101797, CVE-2018-10906)
  - fusermount-prevent-silent-truncation-of-mount-options.patch
  - fusermount-dont-feed-escaped-commans-into-mount-options.patch
  - fusermount-bail-out-on-transient-config-read-failure.patch
  - fusermount-refuse-unknown-options.patch
  - fusermount-whitelist-known-good-filesystems-for-mountpoints.patch</changelog>
</package>
<package pkgid="59223408732a440a7a79f06ba50957477526e3b7df237666bb4c56572e8c87a7" name="fuse-doc" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="lp150.2.3.1"/>
  <changelog author="mszeredi@suse.cz" date="1327492800">- use %set_permissions instead of %run_permissions in specfile</changelog>
  <changelog author="puzel@suse.com" date="1335096000">- update to 2.9.0
  - Add "zero copy" support for kernel 2.6.35 or newer
  - Make maximum background requests tunable on kernel 2.6.32 or
    newer
  - Require --no-canonicalize in (u)mount (util-linux version 2.18
    or newer) to fix security problems with fusermount
  - Use dynamically sized hash tables in high level library
  - Memory use of filesystem daemon can shrink more easily
  - Add "auto_unmount" option
  - Add "remember" option
  - Add man pages for fusermount, mount.fuse and ulockmgr_server
  - API changes:
  - Introduce "store" and "retrieve" for accessing kernel
    buffers on kernel 2.6.36 or newer
  - Introduce abstract buffer for zero copy operations
  - Allow path calculation to be omitted on certain operations
  - Allow batching forget requests
  - Add "flock" method
  - Add support for ioctl on directories
  - Add delete notification
- drop fuse-pc-remove-libdir-from-Libs.diff (upstream)</changelog>
  <changelog author="rschweikert@suse.com" date="1335441600">- place binaries in /usr tree (UsrMerge project)</changelog>
  <changelog author="mszeredi@suse.cz" date="1337169600">- Fix -pthread in fuse.pc [bnc#761117]</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Trim list of FUSE fses from description (it's literally endless)
  and text inappropraite for subpackages</changelog>
  <changelog author="coolo@suse.com" date="1341230400">- avoid autoreconf to avoid breaking on updates of auto* tools</changelog>
  <changelog author="coolo@suse.com" date="1359806400">- update license to new format</changelog>
  <changelog author="archie@dellroad.org" date="1362398400">- Update to version 2.9.2
  - Add support for fallocate() (kernel &gt;= 3.5)
  - Bug fixes
- Remove fix-pthread-in-fuse.pc.patch; now included in upstream
- Don't patch generated files such as configure and Makefile.in;
  instead, regenerate them using makeconf.sh from SVN repository</changelog>
  <changelog author="idonmez@suse.com" date="1362744000">- Use autoreconf directly instead of makeconf.sh</changelog>
  <changelog author="dmueller@suse.com" date="1364299200">- fix build for SLE_11</changelog>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1371384000">- add aarch64-build-fix.patch</changelog>
  <changelog author="mszeredi@suse.cz" date="1374667200">- Update to version 2.9.3
  - Bug fixes
- Remove fuse-gnu_source.patch (fixed upstream)</changelog>
  <changelog author="bwiedemann@suse.com" date="1418212800">- include commented default fuse.conf (bnc#908292)</changelog>
  <changelog author="mszeredi@suse.cz" date="1432296000">- Update to version 2.9.4
  - fix exec environment for mount and umount (bsc#931452,
    CVE-2015-3202)
  - properly restore the default signal handler
  - fix directory file handle passed to	ioctl() method.
  - fix for uids/gids larger than 2147483647
  - initialize stat buffer passed to -&gt;getattr() and -&gt;fgetattr()</changelog>
  <changelog author="astieger@suse.com" date="1453464000">- fuse 2.9.5:
  * fix warning in mount.c:receive_fd().
  * fix possible memory leak.
  * new upstream project and source URL
  * add new maintainer keyring and verify source signature</changelog>
  <changelog author="fcrozat@suse.com" date="1501502400">- Ensure trusted group is available on Tumbleweed.</changelog>
  <changelog author="admorgan@morgancomputers.net" date="1507291200">- fuse 2.9.7
  * Shared-object version has now been bumped correctly.
  * Added SELinux support.
  * Fixed race-condition when session is terminated right after
    starting a FUSE file system.</changelog>
  <changelog author="admorgan@morgancomputers.net" date="1508155200">- Fix download link in fuse.spec</changelog>
  <changelog author="rgoldwyn@suse.com" date="1536667200">- user_allow_other restriction may be bypassed (bsc#1101797, CVE-2018-10906)
  - fusermount-prevent-silent-truncation-of-mount-options.patch
  - fusermount-dont-feed-escaped-commans-into-mount-options.patch
  - fusermount-bail-out-on-transient-config-read-failure.patch
  - fusermount-refuse-unknown-options.patch
  - fusermount-whitelist-known-good-filesystems-for-mountpoints.patch</changelog>
</package>
<package pkgid="3b413b2b7e26917f51ea124429e59d4fd89e97582c7da033bb6c889e355d64fc" name="fvwm2" arch="src">
  <version epoch="0" ver="2.6.7" rel="lp150.2.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1262001600">- Remove gnome-libs-devel, gtk-devel, gtkdoc, imlib-config,
  imlib-devel BuildRequires.
- Add xorg-x11-devel BuildRequires.
- Pass --disable-gtk to configure.
- Remove gtk subpackage: it's optional, and doesn't look that good.
- This is for fate#308601: remove gtk/gnome 1.x stack.</changelog>
  <changelog author="ro@suse.de" date="1270382400">- fix build with libpng14 (replace long deprecated functions)</changelog>
  <changelog author="coolo@novell.com" date="1289217600">- remove support for pre-9.1</changelog>
  <changelog author="coolo@novell.com" date="1299844800">- use of %find_lang is a MUST</changelog>
  <changelog author="pgajdos@suse.com" date="1314878400">- build with --no-copy-dt-needed-entries
  * no-copy-dt-needed-entries.patch</changelog>
  <changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- remove uncommented patch</changelog>
  <changelog author="vcizek@suse.com" date="1325592000">- update to 2.6.3
  dropped libpng patch
  New features over 2.5.26:
  * Support libpng 1.4 and 1.5.0's slightly newer APIs
  * New extended variable $[w.visiblename]
  * Style matching now honours the window's visible name
  * New style InitialMapCommand allows to execute any command when
    a window is mapped first.
  * New option to PrintInfo, "bindings" which prints out all of the
    Key, PointerKey, Mouse and Stroke bindings which fvwm knows about.
  * New differentiated options for SnapAttraction when snapping
    against screen edges:
  * New option to the BugOpts command
  * New BugOpts option QtDragnDropWorkaround to work around an oddity
    in handling drag-n-drop events to Qt applications.
  * New MenuStyle "UniqueHotkeyActivatesImmediate" and its negation
    "!UniqueHotkeyActivatesImmediate" to retain the menu until the
    user presses one of the menu keybindings to enact that change in
    the case where there's only one item defined in the menu at the
    specified hotkey.
  * New Style commands
  * New Resize argument to direction
  * Couple of changes to the Move command:
  * The EWMH working area is now honoured by default.
  * To move a window ignoring the working area, the option "ewmhiwa"
    can be used, similar to how the Maximize command works.
  * New expansion placeholder $[pointer.screen] to return the screen
    number the pointer is on.</changelog>
  <changelog author="werner@suse.de" date="1328616000">- update to 2.6.4
  new features:
  - FvwmIconMan no longer allows for itself to be transient
  - New command InfoStore -- to store key/value pairs of information
    to relieve the burden of the SetEnv command.
  - Speed-up improvements for fvwm-menu-desktop when generating XDG
    menus by removing unnecessary stat(2) calls.
  - BusyCursor and CursorStyle have been set to make the cursor look
    like a dot during Read/PipeRead commands, by default.
  Bug fixes:
  - FvwmRearrange now understands the "ewmhiwa" option when placing
    windows.
  - Client gravity for subwindows is honoured for reparenting
    windows, such as with XEmbed, when changing the parent's
    geometry.
  - Conditional command processing of !Layer n
    has now been fixed.
  - Fixed handling of swallowed windows for transient FvwmButtons'.
  - fvwm-menu-desktop now looks in /usr/share/applications for KDE
    legacy mode.
  - fvwm-config no longer accepts "--is-stable", "--is-released",
    "--is-final".</changelog>
  <changelog author="werner@suse.de" date="1364644800">- Add two missing build requires: librsvg-devel and libxslt-tools</changelog>
  <changelog author="werner@suse.de" date="1374148800">- Update to 2.6.5 + snpashot 2012/10/11
  - NEWS: Added FvwmForm Separators,
    fvwm-desktop-menu fixes.
  - libs/Bindings.c (AddBinding):
  - fvwm/builtins.c (FkeysymToKeycode):
  - fvwm/events.c (__handle_key):
    Add detection of XKeycodeToKeysym as deprecated, and provide a wrapper
    for it by way of fvwm_KeycodeToKeysym() to call the newer
    XkbKeycodeToKeysum() where needed.
  - libs/PictureImageLoader.c (PImageLoadSvg, PimageLoadXpm,
    PImageLoadPng):
    Fix compilation errors.
  - fvwm/menu.c ( __scan_for_pixmap):
  - libs/PictureImageLoader.c (PImageLoadSvg, PimageLoadXpm,
    PImageLoadPng):
    Add fvwm_msg() for hints about failed image load.
  - fvwm/events.c (HandlePropertyNotify):
    Fix XSizeHints problem with FVWM not correctly allowing resizing of
    windows when the hints are toggled with respect to FVWM processing
    XA_WM_NORMAL_HINTS.
  - fvwm/placement.c ( __pl_position_get_pos_simple):
    When using "UnderMouse" for PositionPlacement, ensure we honor the EWMH
    working area by default if it's in use.
  - fvwm/fvwm.c (InstallSignals):
    Unblock signals when installing them.
    When signals are registered, ensure they're unblocked so as not to queue
    them up.
  - fvwm/infostore.c (get_metainfo_length):
  + fvwm/infostore.c (new_metainfo):
  + fvwm/infostore.c (insert_metainfo):
  + fvwm/style.c (style_parse_one_style_option):
    Make C90 compliant.
- Add patch fvwm-snapshot.patch for snpashot 2012/10/11
- Add patch fvwm-rsvg.patch to avoid internal rsvg-cairo.h included twice
- Add source bin/fvwm-menu-desktop-config.fpl as missed in 2012/10/11
- Modify patch fvwm-2.5.26-gcc-warnings.patch as fixed upstream</changelog>
  <changelog author="werner@suse.de" date="1374667200">- Add patch fvwm-2.6.5-eventcrash.patch which should avoid that not
  set icon names will be freed  (bnc#778347)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1412078400">- fvwm-no-date-time.patch Do not include __DATE__ and __TIME__
  in binaries.
- Drop usage of xorg-x11-devel. pick only the needed packages.</changelog>
  <changelog author="tchvatal@suse.com" date="1412769600">- Rename config file to not have underscore at begining</changelog>
  <changelog author="mvetter@suse.com" date="1457006400">- Clean up with spec-cleaner
- Remove 'system.fvwm2rc_' seems not to be used
- Fix module 'Command' see (boo#966650)</changelog>
  <changelog author="werner@suse.de" date="1470139200">- Update to 2.6.6
  * fvwm features:
  - Support for Russian from Ivan Gayevskiy.
  - EnvMatch supports infostore variables.
  - The option "forget" to the Maximize command allows to
    unmaximize a window without changing its size and position.
  - Windows shaded to a corner (NW, NE, SW, SE) are reduced to a
    small square.
  - New option "!raise" to the WarpToWindow command.
  - The new extended variables $[wa.x], $[wa.y], $[wa.width],
    $[wa.height] can be used to get the geometry of the EWMH
    working area, and $[dwa.x], $[dwa.y], $[dwa.width],
    $[dwa.height] can be used to get the geometry of the EWMH
    dynamic working area.
  - The Resize commands accept "wa" or "da" as a suffix of the
    width or height value.  If present, the value is a percentage
    of the width or height of the EWMH working area or the EWMH
    dynamic working area.
  - Fvwm is much more resilient against applications that flood the
    window manager with repeated events.
  * New module features:
  - FvwmForm supports separator lines.
  - New FvwmIconMan options:
    IconAndSelectButton
    IconAndSelectColorset
  * Bug fixes:
  - Provide a wrapper for the deprecation of XKeycodeToKeysym and
    use XkbKeycodeToKeysym() where appropriate.
  - fvwm-menu-desktop is re-written and provides better support of
    the XDG menu specification.
  - Fix fvwm-menu-desktop keyError bug.  Use "others" if no desktop
    environment found.
  - FvwmIconMan had problems displaying the hilight colour on some
    systems (64 bit issue?).
  - Globally active windows cannot take the focus if the style
    forbids programs to take focus themselves (style
    !FPFocusByProgram).
  - Windows no longer jump from one position to the other which
    could happen in some cases with SnapAttraction.  Windows now
    snap to the closest window (or screen edge).
  - Removing bindings had several strange side effects that are
    fixed now (removing too many bindings; old bindings showing up
    again after another is removed; possibly other effects).
  - Windows sometimes did not get expose events (i.e. did not
    redraw properly) if they were uncovered by moving a window
    above them.  This has been fixed.
  - FvwmConsole now causes much less network traffic.
  - Suppress bogus events sent to the modules when a window is
    resized with the mouse.
  - Properly handle the has_ref_window_moved flag for ResizeMove and
    ResizeMoveMaximize.
  - Removed some unnecessary redraws in FvwmPager.
  - The option "NoDeskLimitY" option of the GotoPage command did
    not work.
  - Negative coordinates in the "rectangle" option to the Menu
    commend did not work correctly.  This has been fixed.
  - Removes a slight graphics problem whith the ResizeMaximize
    command being invoked from a window button menu.
  - When an attempt to reparent a client window (i.e. decorate
    it) fails, fvwm no longer throws away all events but only the
    events for that window.
  - The ChangeButton command of FvwmButtons used to strip
    whitespace from the beginning and end of button titles and
    image paths.  This is no longer done.
- Remove patches now upstream
  fvwm-2.6.5-eventcrash.patch
  fvwm-rsvg.patch
  fvwm-snapshot.patch
- Add upstream patch
  fvwm-icon-440d675d14412ec0a123d4c977534ab688229148.patch
    Expose: don't flush accumulated events</changelog>
  <changelog author="mvetter@suse.com" date="1471521600">- boo#877539 - wrong path in system.fvwm2rc:
  * Fix wallpaper path for 'init' and 'restart' commands.
  * Require default branding wallpaper package.</changelog>
  <changelog author="werner@suse.de" date="1486468800">- Update to 2.6.7 (06-Nov-2016)
  - dropped fvwm-icon-440d675d14412ec0a123d4c977534ab688229148.patch
  * New fvwm features:
    A new default configuration which is available when fvwm
    doesn't detect a configuration file to load.
    A new conditional command "Desk n" can restrict matching
    windows to a specific desk.
    A new conditional command "Screen n" to restrict matching
    windows on a given Xinerama screen.
    New expansion variable "w.screen" to ascertain the Xineram
    screen number a window is on.
    New command "InfoStoreClear" to remove all items in the
    InfoStore.
  * Removed features:
    The old and unmaintained debian/ and rpm/ directories have
    been removed; use the maintainers' copies where available.
    VMS support has been removed.
    GTK1.x support has been removed.
    GNOME-specific window hints (pre-EWMH) have been removed.
    Some fvwm modules have been removed:
    FvwmDragWell (no replacement)
    FvwmGTK (no replacement)
    FvwmSave (no replacement)
    FvwmSaveDesk (no replacement)
    FvwmScroll (no replacement)
    FvwmTabs (no replacement, never worked anyway)
    FvwmTaskBar (use FvwmButtons)
    FvwmTheme (in core of fvwm as colorsets)
    FvwmWharf (use FvwmButtons)
    FvwmWinList (use WindowList command)
    FvwmWindowMenu (use WindowList command)
    FvwmIconBox (use the IconBox style instead)
  * New module features:
    FvwmButtons learned a new option "Colorset" to its
    ChangeButton command.
  * fvwm-menu-desktop updated:
    Renamed default menu to XDGMenu and changed the name
    of the FvwmForm to FvwmForm-XDGMenu-Config to not conflict
    with someone already using FvwmMenu.
    fvwm-menu-desktop will now load defaults from the
    FvwmForm-XDGMenu-Config data file.
    Improved dynamic menus by regenerating them on-the-fly.
    Added new options: --regen-cmd, --dynamic, and more.
  * Bug fixes:
    A bug introduced in 2.6.6 could cause applications with
    negative coordinates to be placed at strange positions. This
    affected for example acroread when switching to fullscreen
    mode. This has been fixed.
    FvwmButtons "Silent" option for dynamic ChangeButton commands
    no longer loops infinitely.</changelog>
  <changelog author="jengelh@inai.de" date="1486728000">- Update summary</changelog>
  <changelog author="mvetter@suse.com" date="1526644800">- boo#1080494: Add update-alternative configuration
- Run spec-cleaner</changelog>
</package>
<package pkgid="ab5a696cf764451b7d425422370b7bfd57f378aa43219439ab4bfc59cb59fc07" name="fvwm2" arch="x86_64">
  <version epoch="0" ver="2.6.7" rel="lp150.2.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1262001600">- Remove gnome-libs-devel, gtk-devel, gtkdoc, imlib-config,
  imlib-devel BuildRequires.
- Add xorg-x11-devel BuildRequires.
- Pass --disable-gtk to configure.
- Remove gtk subpackage: it's optional, and doesn't look that good.
- This is for fate#308601: remove gtk/gnome 1.x stack.</changelog>
  <changelog author="ro@suse.de" date="1270382400">- fix build with libpng14 (replace long deprecated functions)</changelog>
  <changelog author="coolo@novell.com" date="1289217600">- remove support for pre-9.1</changelog>
  <changelog author="coolo@novell.com" date="1299844800">- use of %find_lang is a MUST</changelog>
  <changelog author="pgajdos@suse.com" date="1314878400">- build with --no-copy-dt-needed-entries
  * no-copy-dt-needed-entries.patch</changelog>
  <changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- remove uncommented patch</changelog>
  <changelog author="vcizek@suse.com" date="1325592000">- update to 2.6.3
  dropped libpng patch
  New features over 2.5.26:
  * Support libpng 1.4 and 1.5.0's slightly newer APIs
  * New extended variable $[w.visiblename]
  * Style matching now honours the window's visible name
  * New style InitialMapCommand allows to execute any command when
    a window is mapped first.
  * New option to PrintInfo, "bindings" which prints out all of the
    Key, PointerKey, Mouse and Stroke bindings which fvwm knows about.
  * New differentiated options for SnapAttraction when snapping
    against screen edges:
  * New option to the BugOpts command
  * New BugOpts option QtDragnDropWorkaround to work around an oddity
    in handling drag-n-drop events to Qt applications.
  * New MenuStyle "UniqueHotkeyActivatesImmediate" and its negation
    "!UniqueHotkeyActivatesImmediate" to retain the menu until the
    user presses one of the menu keybindings to enact that change in
    the case where there's only one item defined in the menu at the
    specified hotkey.
  * New Style commands
  * New Resize argument to direction
  * Couple of changes to the Move command:
  * The EWMH working area is now honoured by default.
  * To move a window ignoring the working area, the option "ewmhiwa"
    can be used, similar to how the Maximize command works.
  * New expansion placeholder $[pointer.screen] to return the screen
    number the pointer is on.</changelog>
  <changelog author="werner@suse.de" date="1328616000">- update to 2.6.4
  new features:
  - FvwmIconMan no longer allows for itself to be transient
  - New command InfoStore -- to store key/value pairs of information
    to relieve the burden of the SetEnv command.
  - Speed-up improvements for fvwm-menu-desktop when generating XDG
    menus by removing unnecessary stat(2) calls.
  - BusyCursor and CursorStyle have been set to make the cursor look
    like a dot during Read/PipeRead commands, by default.
  Bug fixes:
  - FvwmRearrange now understands the "ewmhiwa" option when placing
    windows.
  - Client gravity for subwindows is honoured for reparenting
    windows, such as with XEmbed, when changing the parent's
    geometry.
  - Conditional command processing of !Layer n
    has now been fixed.
  - Fixed handling of swallowed windows for transient FvwmButtons'.
  - fvwm-menu-desktop now looks in /usr/share/applications for KDE
    legacy mode.
  - fvwm-config no longer accepts "--is-stable", "--is-released",
    "--is-final".</changelog>
  <changelog author="werner@suse.de" date="1364644800">- Add two missing build requires: librsvg-devel and libxslt-tools</changelog>
  <changelog author="werner@suse.de" date="1374148800">- Update to 2.6.5 + snpashot 2012/10/11
  - NEWS: Added FvwmForm Separators,
    fvwm-desktop-menu fixes.
  - libs/Bindings.c (AddBinding):
  - fvwm/builtins.c (FkeysymToKeycode):
  - fvwm/events.c (__handle_key):
    Add detection of XKeycodeToKeysym as deprecated, and provide a wrapper
    for it by way of fvwm_KeycodeToKeysym() to call the newer
    XkbKeycodeToKeysum() where needed.
  - libs/PictureImageLoader.c (PImageLoadSvg, PimageLoadXpm,
    PImageLoadPng):
    Fix compilation errors.
  - fvwm/menu.c ( __scan_for_pixmap):
  - libs/PictureImageLoader.c (PImageLoadSvg, PimageLoadXpm,
    PImageLoadPng):
    Add fvwm_msg() for hints about failed image load.
  - fvwm/events.c (HandlePropertyNotify):
    Fix XSizeHints problem with FVWM not correctly allowing resizing of
    windows when the hints are toggled with respect to FVWM processing
    XA_WM_NORMAL_HINTS.
  - fvwm/placement.c ( __pl_position_get_pos_simple):
    When using "UnderMouse" for PositionPlacement, ensure we honor the EWMH
    working area by default if it's in use.
  - fvwm/fvwm.c (InstallSignals):
    Unblock signals when installing them.
    When signals are registered, ensure they're unblocked so as not to queue
    them up.
  - fvwm/infostore.c (get_metainfo_length):
  + fvwm/infostore.c (new_metainfo):
  + fvwm/infostore.c (insert_metainfo):
  + fvwm/style.c (style_parse_one_style_option):
    Make C90 compliant.
- Add patch fvwm-snapshot.patch for snpashot 2012/10/11
- Add patch fvwm-rsvg.patch to avoid internal rsvg-cairo.h included twice
- Add source bin/fvwm-menu-desktop-config.fpl as missed in 2012/10/11
- Modify patch fvwm-2.5.26-gcc-warnings.patch as fixed upstream</changelog>
  <changelog author="werner@suse.de" date="1374667200">- Add patch fvwm-2.6.5-eventcrash.patch which should avoid that not
  set icon names will be freed  (bnc#778347)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1412078400">- fvwm-no-date-time.patch Do not include __DATE__ and __TIME__
  in binaries.
- Drop usage of xorg-x11-devel. pick only the needed packages.</changelog>
  <changelog author="tchvatal@suse.com" date="1412769600">- Rename config file to not have underscore at begining</changelog>
  <changelog author="mvetter@suse.com" date="1457006400">- Clean up with spec-cleaner
- Remove 'system.fvwm2rc_' seems not to be used
- Fix module 'Command' see (boo#966650)</changelog>
  <changelog author="werner@suse.de" date="1470139200">- Update to 2.6.6
  * fvwm features:
  - Support for Russian from Ivan Gayevskiy.
  - EnvMatch supports infostore variables.
  - The option "forget" to the Maximize command allows to
    unmaximize a window without changing its size and position.
  - Windows shaded to a corner (NW, NE, SW, SE) are reduced to a
    small square.
  - New option "!raise" to the WarpToWindow command.
  - The new extended variables $[wa.x], $[wa.y], $[wa.width],
    $[wa.height] can be used to get the geometry of the EWMH
    working area, and $[dwa.x], $[dwa.y], $[dwa.width],
    $[dwa.height] can be used to get the geometry of the EWMH
    dynamic working area.
  - The Resize commands accept "wa" or "da" as a suffix of the
    width or height value.  If present, the value is a percentage
    of the width or height of the EWMH working area or the EWMH
    dynamic working area.
  - Fvwm is much more resilient against applications that flood the
    window manager with repeated events.
  * New module features:
  - FvwmForm supports separator lines.
  - New FvwmIconMan options:
    IconAndSelectButton
    IconAndSelectColorset
  * Bug fixes:
  - Provide a wrapper for the deprecation of XKeycodeToKeysym and
    use XkbKeycodeToKeysym() where appropriate.
  - fvwm-menu-desktop is re-written and provides better support of
    the XDG menu specification.
  - Fix fvwm-menu-desktop keyError bug.  Use "others" if no desktop
    environment found.
  - FvwmIconMan had problems displaying the hilight colour on some
    systems (64 bit issue?).
  - Globally active windows cannot take the focus if the style
    forbids programs to take focus themselves (style
    !FPFocusByProgram).
  - Windows no longer jump from one position to the other which
    could happen in some cases with SnapAttraction.  Windows now
    snap to the closest window (or screen edge).
  - Removing bindings had several strange side effects that are
    fixed now (removing too many bindings; old bindings showing up
    again after another is removed; possibly other effects).
  - Windows sometimes did not get expose events (i.e. did not
    redraw properly) if they were uncovered by moving a window
    above them.  This has been fixed.
  - FvwmConsole now causes much less network traffic.
  - Suppress bogus events sent to the modules when a window is
    resized with the mouse.
  - Properly handle the has_ref_window_moved flag for ResizeMove and
    ResizeMoveMaximize.
  - Removed some unnecessary redraws in FvwmPager.
  - The option "NoDeskLimitY" option of the GotoPage command did
    not work.
  - Negative coordinates in the "rectangle" option to the Menu
    commend did not work correctly.  This has been fixed.
  - Removes a slight graphics problem whith the ResizeMaximize
    command being invoked from a window button menu.
  - When an attempt to reparent a client window (i.e. decorate
    it) fails, fvwm no longer throws away all events but only the
    events for that window.
  - The ChangeButton command of FvwmButtons used to strip
    whitespace from the beginning and end of button titles and
    image paths.  This is no longer done.
- Remove patches now upstream
  fvwm-2.6.5-eventcrash.patch
  fvwm-rsvg.patch
  fvwm-snapshot.patch
- Add upstream patch
  fvwm-icon-440d675d14412ec0a123d4c977534ab688229148.patch
    Expose: don't flush accumulated events</changelog>
  <changelog author="mvetter@suse.com" date="1471521600">- boo#877539 - wrong path in system.fvwm2rc:
  * Fix wallpaper path for 'init' and 'restart' commands.
  * Require default branding wallpaper package.</changelog>
  <changelog author="werner@suse.de" date="1486468800">- Update to 2.6.7 (06-Nov-2016)
  - dropped fvwm-icon-440d675d14412ec0a123d4c977534ab688229148.patch
  * New fvwm features:
    A new default configuration which is available when fvwm
    doesn't detect a configuration file to load.
    A new conditional command "Desk n" can restrict matching
    windows to a specific desk.
    A new conditional command "Screen n" to restrict matching
    windows on a given Xinerama screen.
    New expansion variable "w.screen" to ascertain the Xineram
    screen number a window is on.
    New command "InfoStoreClear" to remove all items in the
    InfoStore.
  * Removed features:
    The old and unmaintained debian/ and rpm/ directories have
    been removed; use the maintainers' copies where available.
    VMS support has been removed.
    GTK1.x support has been removed.
    GNOME-specific window hints (pre-EWMH) have been removed.
    Some fvwm modules have been removed:
    FvwmDragWell (no replacement)
    FvwmGTK (no replacement)
    FvwmSave (no replacement)
    FvwmSaveDesk (no replacement)
    FvwmScroll (no replacement)
    FvwmTabs (no replacement, never worked anyway)
    FvwmTaskBar (use FvwmButtons)
    FvwmTheme (in core of fvwm as colorsets)
    FvwmWharf (use FvwmButtons)
    FvwmWinList (use WindowList command)
    FvwmWindowMenu (use WindowList command)
    FvwmIconBox (use the IconBox style instead)
  * New module features:
    FvwmButtons learned a new option "Colorset" to its
    ChangeButton command.
  * fvwm-menu-desktop updated:
    Renamed default menu to XDGMenu and changed the name
    of the FvwmForm to FvwmForm-XDGMenu-Config to not conflict
    with someone already using FvwmMenu.
    fvwm-menu-desktop will now load defaults from the
    FvwmForm-XDGMenu-Config data file.
    Improved dynamic menus by regenerating them on-the-fly.
    Added new options: --regen-cmd, --dynamic, and more.
  * Bug fixes:
    A bug introduced in 2.6.6 could cause applications with
    negative coordinates to be placed at strange positions. This
    affected for example acroread when switching to fullscreen
    mode. This has been fixed.
    FvwmButtons "Silent" option for dynamic ChangeButton commands
    no longer loops infinitely.</changelog>
  <changelog author="jengelh@inai.de" date="1486728000">- Update summary</changelog>
  <changelog author="mvetter@suse.com" date="1526644800">- boo#1080494: Add update-alternative configuration
- Run spec-cleaner</changelog>
</package>
<package pkgid="39a6573bffba11564af093149d297604d13cfe8b8a561f3591083395e0434b81" name="fwts" arch="src">
  <version epoch="0" ver="18.11.00" rel="lp150.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update to version 16.12.0 (boo#1017763):
  * ACPICA: Update to version 20161117
  * klog.json: Add a few more kernel errors to the database
  * opal: pci_info: Add OPAL PCI Info validation
  * opal: mem_info: Add OPAL MEM Info validation
  * opal: cpu_info: Add OPAL CPU Info validation
  * securebootcert: add variable AuditMode checking
  * securebootcert: add variable DeployedMode checking
  * lots of bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1485604800">- Update to version 17.01.00:
  * ACPICA: Update to version 20161222
  * klog.json: Add kernel errors to the database
  * opal: pci_info: minor code style clean-ups</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 17.02.00:
  * ACPICA: Update to version 20170119
  * acpi: s3: Add new --s3-resume-hook option
  * Add README_JSON.txt for FWTS
  * klog.json: Add some more kernel messages to klog data base
  * klog.json: Add some EFI driver kernel messages to klog database
  * klog.json: Add some EFI quirk driver kernel messages to klog database
  * klog.json: Add some more EFI driver kernel messages to klog database
  * klog.json: Add some miscellaneous messages to klog database
  * Integrate PPC for FWTS-LIVE Frontend
  * fwts_framework: handle -? option differently from -h
- Rebase fwts-no-compiletime.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1490356800">- Update to version 17.03.00:
  * ACPICA: Update to version 20170224
  * sbbr: Add "--sbbr" flag to support running SBBR Tests.
  * acpi: iort: Add support for SMMUv3
  * lots of bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1496577600">- Update to version 17.05.00:
  * Support SMBIOS 3.1.1 tests
  * dmi: dmicheck: check new offset in spec 3.11
  * dmi: dmicheck: check reserved bits of Type 7 offset 0x5
  * dmi: dmicheck: check reserved bits of Type 7 offset 0xd
  * dmi: dmicheck: add a function to verify reserved bits
  * dmi: dmicheck: add a helper function to check word min/max value
  * dmi: dmicheck: check pci(e) slot and segment, bus and dev/func
  * dmi: dmicheck: check reserved bits of offset 0x5 in type 13
  * dmi: dmicheck: add a helper function to check a reserved offset
  * dmi: dmicheck: check reserved bits in type 15 &amp; type 17
  * dmi: dmicheck: check reserved fields in type 22, 23, 30, 32, 38 and 39
  * dmi: dmicheck: add 64-bit integer to dmi_reserved_bits_check
  * dmi: dmicheck: add checks for new type 43
  * dmi: dmicheck: check reserved bits in Type 0
  * fwts/opal: Power management DT Validation tests.
  * fwts/opal: Reserved memory DT validation tests.
  * Add snapcraft rules to build a fwts snap</changelog>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 17.06.00:
  * ACPICA: Update to version 20170531
  * olog: olog.json: Update OPAL skiboot errors to check on olog
    scan
  * bios: mtrr: print out actual default type of MTRR
  * lib: fwts_alloc: only parse mem info once we have a valid line
    read in
  * lib: fwts_safe_mem: add SIGBUS handling
  * lib: fwts_alloc: re-work the memory parsing again
  * acpi: method use correct format specifier for uint32_t type
  * bios: mtrr: fix compile error in ubuntu trusty
  * opal: fix tests dependency on libfdt
  * bios: mtrr: fix overlaped MTRR (LP: #1694710)</changelog>
  <changelog author="mpluskal@suse.com" date="1503921600">- Update to version 17.07.00 (boo#1055891):
  * acpi: bgrt: update according to acpi 6.1 errata
  * acpi: method: update _PSD and _TSD tests according to ACPI 6.1
    errata
  * acpi: rsdp: revision 1 must have length 20 according to ACPI
    6.1 errata
  * acpi: method: Add _CPC revision 3 according to ACPI 6.2
  * acpi: hest: add new type 11 introduced in ACPI 6.2
  * acpi: srat: add new type 4 according to ACPI 6.2
  * acpi: method: update _GCP according to ACPI 6.2
  * acpi: hest: add notification type 11 according to ACPI 6.2
  * acpi: fadt: update minor version to 2 for ACPI 6.2
  * acpi: hest: add checks for GHES_ASSIST flag value in ACPI 6.2
  * acpi: wsmt: add wsmt test according to ACPI 6.2
  * ACPICA: Update to version 20170629
  * acpi: tpm2: Add additional start method values
  * acpi: iort: Add PMCG support</changelog>
  <changelog author="mpluskal@suse.com" date="1506081600">- Update to version 17.08.00:
  * ACPICA: Update to version 20170728
  * New ACPI tests defined by ACPI 6.2:
    + acpi: sdei: add ACPI SDEI test (mantis 1714)
    + acpi: pcct: refactor subspace to individual functions
    + acpi: pcct: update PCCT table to ACPI 6.2 (mantis 1659 &amp;
    1755)
    + acpi: dppt: add ACPI DPPT test (mantis 1795)
    + acpi: pptt: add ACPI PPTT test
    + acpi: hmat: add ACPI HMAT test (mantis 1705)
    + acpi: method: add _LSI test according to ACPI 6.2 (mantis
    1721)
    + acpi: madt: Add support for ACPI 6.2
  * New tests for SBBR:
    + acpi: fadt: add SBBR compliance tests
    + acpi: madt: add SBBR compliance tests
    + acpi: spcr: add SBBR compliance tests
    + acpi: xsdt: add SBBR compliance tests
    + acpi: dbg2: add SBBR compliance tests
    + acpi: gtdt: add SBBR compliance tests
    + acpi: acpitables: add SBBR compliance tests
    + dmi: dmicheck: add SBBR compliance tests
    + acpi: method: add SBBR compliance tests
    + acpi: rsdp: add SBBR compliance tests
    + acpi: sbbr: sync up with new SBBR tests
  * dmicheck: fix dmi_reserved_bits_check function when size is 64
  * acpi: pmtt: fix typo from pmmt to pmtt
  * acpi: rasf: add ACPI RASF test
  * acpi: remove "Linux-ready Firmware Developer Kit" from license
    header of files not derived from the LFDK
  * opal: fix build error on Ubuntu 12.04 i386 with gcc 4.6.3
  * lib: fwts_safe_mem: remove need to copy into a buffer
  * acpi: bert: add safe memory read check on mmap'd memory
  * acpi: hpet: add safe memory read check on mmap'd memory
  * acpi: mcfg: add safe memory read check on mmap'd PCI config
    memory
  * acpi: pcc: add safe memory read check on mmap'd PCC header
  * bios: pciirq: add safe memory read check on mmap'd pci irq
    region
  * bios: pnp: add safe memory read check on mmap'd memory region
  * dmi: dmicheck: fix incorrect safe memory read check on DMI
    mmap'd region
  * uefi: csm: add safe memory read check on mmap'd interrupt and
    option ROM regions
  * fwts_safe_mem: workaround longjmp clobber warnings
  * lib: fwts_smbios: use fwts_safe_memcpy to read SMBIOS entry
  * lib: fwts_acpi_tables: re-work fwts_acpi_get_rsdp, less memory
    copies
  * lib: fwts_safe_mem: really force reads
  * lib: fwts_acpi_tables: unmap mem, fixes memory leak
  * acpi: xsdt: fix build error on 32 bit systems
  * acpica: fwts_acpica: fix linker issues on Fedora (LP: #1712572)
  * acpi: method: Fix error message.
- Refresh fwts-no-compiletime.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1507550400">- Update to version 17.09.00:
  * ACPICA: Update to version 20170831
  * dmi: dmicheck: Add BMC Interface Type definitions from IPMI
    spec
  * lib: fwts_acpi_tables: add a new function to check Reserved
    field
  * lib: fwts_acpi_tables: add a new function to check reserved
    bits
  * efi_runtime: add resetsystem runtime service
- Refresh fwts-no-compiletime.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510747200">- Update to version 17.09.02:
  * No changelog provided</changelog>
  <changelog author="mpluskal@suse.com" date="1513598400">- Update to version 17.11.00:
  * acpi: devices: add a new test for acpi ec device
  * acpi: devices: add a new test for ACPI AC adapter device
  * acpi: devices: add a new test for ACPI battery device
  * acpi: devices: add a new test for smart battery device
  * acpi: devices: add new tests for power and sleep button devices
  * acpi: madt: check GICD's system vector according to mantis 1819
    (ACPI 6.2a)
  * acp: nfit: add platform capability according to manit 1831
    (ACPI 6.2a)
  * lib: add new large resource data type for _CRS methods
  * acpi: sdev: add ACPI SDEV test (mantis 1632)
  * acpi: dppt: add ACPI PDTT test (mantis 1576)
  * acpi: devices: add new tests for lid device
  * acpi: devices: add new tests for ambient light sensor device
  * acpi: devices: add new tests for time and alarm device
  * acpi: devices: add new tests for wireless power calibration
    device
  * acpi: add tests for _SRT control method
  * auto-packager: mkpackage.sh: add bionic
  * fwts: add bash command-line completion
  * Add ACPI 1.0 RSDP test to make sure RSDT field isn't null
  * ACPICA: Update to version 20171110
  * uefi: uefidump: add dumping for BluetoothLE device path
  * uefi: uefidump: add dumping for DNS device path
  * uefi: uefibootpath: add test for BluetoothLE device path
  * uefi: uefibootpath: add test for DNS device path</changelog>
  <changelog author="mpluskal@suse.com" date="1516881600">- Update to version 18.01.00:
  * ACPICA: Update to version 20180105
  * acpi: LPIT: check for monotonically increasing UID
  * fwts-test: sync up with changes in lpit test
  * Treewide: update copyright year to 2018
  * fwts-test: arg-help: sync up with copyright year changes
  * acpica: fix linking issues when building non ACPI builds
  * lib: fwts-battery: use PRIu32 format specifier, fixes cppcheck
    warning
  * acpi: acpidump: move declaration to before statements, add blank
    lines
  * lib: fwts_safe_mem: don't perform void * pointer arithmetic,
    fix 32 bit end
  * lib: fwts_alloc: move 'pos' to a deeper scope, minor style
    change
  * opal: reserve_mem: remove redundant initialization of pointer p
  * opal: reserve_mem: remove unused variable 'i' and move scope of
    variable 'value'
  * sbbr: rsdp: remove redundant initialization of boolean
    'signature_pass'
  * acpi: madt: move scope of boolean 'passed'
  * acpi: pptt: move scope of index variable 'i'.
  * acpi: rasf: move scope of index variable 'i'
  * sbbr: acpitables: clean up code, move scope of some variables
  * acpi: erst: cast size to uint64_t to clean up static analysis
    warning
  * uefi: uefidump: clean up some static analysis warnings
  * securebootcert: add checking read-only for the AuditMode and
    DeployedMode
  * securebootcert: move to UNSAFE category
- Changes for version 17.12.00:
  * ACPICA: Update to version 20171215
  * Fixed Bugs
  * acpi: tpm2: update spec url
  * trival: make read only const strings static
  * dmicheck: sbbr: make some SMBIOS structs optional
  * acpi: dbg2: sbbr: allow PL011 UART as a valid subtype
  * acpi: spcr: sbbr: IOAPIC is valid interrupt type
  * acpi: sbbr: relax a few test pass conditions
  * acpi: bert: remove confusing warning
  * acpi: madt: only inspect Local APIC/x2APIC/SAPIC tables if
    enabled</changelog>
  <changelog author="mpluskal@suse.com" date="1520510400">- Update to version 18.02.00:
  * ACPICA: Update to version 20180209
  * uefirtvariable: add test for
    EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS attribute
  * acpi: acpiinfo: add acpi 6 to acpiinfo test
  * acpi: method: check one element in _TSD only for acpi 6.2+
  * acpi: spcr: update interface types based on DBG2
  * acpi: method: allow _WAK to return an integer
  * mkpackage.README: change urgency level to medium
  * lib: fwts_log: remove redundant initialization of ptr1
  * acpi: wmi: remove redundant initialization of 'info'
  * lib: fwts_log: remove redundant initialization of 'field'
  * lib: fwts_pipeio: remove variable status
  * lib: fwts_acpi_tables: remove redundant initialization to
    'result'
  * README: Add dependencies per Platform
  * auto-packager: mkpackage.sh: remove zesty
  * uefirtvariable: modify both authenticated attributes setting
    test
  * acpi: fadt: Fix FACS checking
  * acpi: iort: Update revision checking</changelog>
  <changelog author="mpluskal@suse.com" date="1523016000">- Update to version 18.03.00:
  * ACPICA: Update to version 20180313
  * dmi: dmicheck: add chassis type for Type 3
  * klog.json: change severity for AE_ALREADY_EXISTS errors
  * olog:olog.json: Update OPAL skiboot errors to check on olog
    scan
  * uefirtauthvar: remove test with
    EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS</changelog>
  <changelog author="mpluskal@suse.com" date="1526644800">- Update to version 18.05.00:
  * fan: add cooling_device# to error messages
  * doc: adding acpitests, uefitests and sbbr options to man page
  * acpi: syntaxcheck: change it from batch to batch-experimental
  * fwts_framework: add an "ifv" option for Independent Firmware Vendor
  * dmicheck: skip checks of DMI default values for IFV
  * acpi: method: add test for _CLS control method
  * lib: create helper functions for device identification objects
  * acpi: devices: add common objects
  * fwts-frontend-text: add a recommended option for IFV (IBV)
  * fwts-frontend-text: add an option for ARM SBBR
  * auto-packager: mkpackage.sh: add cosmic
  * ACPICA: Update to version 20180427
  * ACPICA: Update to version 20180508
  * README: Add libpci-dev dependency ppc64el
  * cpufreq: Add support to read boost frequencies</changelog>
  <changelog author="mpluskal@suse.com" date="1529323200">- Update to version 18.05.01:
  * No changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1530100800">- Update to version 18.06.02:
  * ACPICA: Update to version 20180531
  * acpi: fadt: allow first reserved field to be 1
  * update_version.sh: also update version in snapcraft.yaml
  * snapcraft.yaml: add in missing stage packages
  * lib: fwts_set: fix API for fwts_set, add fwts_set_int
  * lib: add small helpers top get/set /sys/power/pm_debug_messages
  * acpi: s3: force enable /sys/power/pm_debug_messages
  * acpi: s4: also check for file based swap files
  * acpi: s4: force enable /sys/power/pm_debug_messages
  * acpi: s3power: force enable /sys/power/pm_debug_messages
  * acpi: hpet: fix getting invalid vendor ID and clock period
  * acpica: fix linking issues when building non ACPI builds
  * fwts_uefi: Fixing tiny typos in the uefi driver
  * mtrr: fix incorrect type detection</changelog>
  <changelog author="mpluskal@suse.com" date="1531224000">- Don't build with -Werror (fixes build with gcc8)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1535716800">- Update to version 18.08.00:
  * ACPICA: Update to version 20180810
  * uefi: uefivarinfo: add to UNSAFE category
  * acpi: gtdt: add checking the valid base physical address
  * dmicheck: update Processor Upgrade field in Type 4
  * dmicheck: update connection and port types in Type 8
  * dmicheck: update Usage and Characteristics 2 fields in Type 9
  * dmicheck: update memory type and add nvdimm fields for Type 17
  * coreboot/clog/clog.c: add clog test
- Refresh patch fwts-no-compiletime.patch
- Fix typo in changelog</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1542283200">- Update to version 18.11.00 (boo#1116172):
  * dmicheck: checks (Extended) Maximum Capacity for type 16
  * snapcraft: add libbsd-dev to build-packages
  * efi_runtime: re-enable the resetsystem runtime interface
  * olog:olog.json: Update OPAL skiboot errors to check on olog scan
  * acpi: button: check fixed hardware &amp; control method power buttons
  * kernelscan: add -k option to specify klog json filename
  * src/lib: add module probing helper functions
  * lib: fwts_efi_module: use the new module loading helper functions
  * lib/fwts_cpu: use new use the new module loading helper functions</changelog>
</package>
<package pkgid="9f5de122108ccbe2d7892af23ca9661378040b4d31f5b4c3f77976aec21f267f" name="fwts" arch="x86_64">
  <version epoch="0" ver="18.11.00" rel="lp150.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update to version 16.12.0 (boo#1017763):
  * ACPICA: Update to version 20161117
  * klog.json: Add a few more kernel errors to the database
  * opal: pci_info: Add OPAL PCI Info validation
  * opal: mem_info: Add OPAL MEM Info validation
  * opal: cpu_info: Add OPAL CPU Info validation
  * securebootcert: add variable AuditMode checking
  * securebootcert: add variable DeployedMode checking
  * lots of bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1485604800">- Update to version 17.01.00:
  * ACPICA: Update to version 20161222
  * klog.json: Add kernel errors to the database
  * opal: pci_info: minor code style clean-ups</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 17.02.00:
  * ACPICA: Update to version 20170119
  * acpi: s3: Add new --s3-resume-hook option
  * Add README_JSON.txt for FWTS
  * klog.json: Add some more kernel messages to klog data base
  * klog.json: Add some EFI driver kernel messages to klog database
  * klog.json: Add some EFI quirk driver kernel messages to klog database
  * klog.json: Add some more EFI driver kernel messages to klog database
  * klog.json: Add some miscellaneous messages to klog database
  * Integrate PPC for FWTS-LIVE Frontend
  * fwts_framework: handle -? option differently from -h
- Rebase fwts-no-compiletime.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1490356800">- Update to version 17.03.00:
  * ACPICA: Update to version 20170224
  * sbbr: Add "--sbbr" flag to support running SBBR Tests.
  * acpi: iort: Add support for SMMUv3
  * lots of bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1496577600">- Update to version 17.05.00:
  * Support SMBIOS 3.1.1 tests
  * dmi: dmicheck: check new offset in spec 3.11
  * dmi: dmicheck: check reserved bits of Type 7 offset 0x5
  * dmi: dmicheck: check reserved bits of Type 7 offset 0xd
  * dmi: dmicheck: add a function to verify reserved bits
  * dmi: dmicheck: add a helper function to check word min/max value
  * dmi: dmicheck: check pci(e) slot and segment, bus and dev/func
  * dmi: dmicheck: check reserved bits of offset 0x5 in type 13
  * dmi: dmicheck: add a helper function to check a reserved offset
  * dmi: dmicheck: check reserved bits in type 15 &amp; type 17
  * dmi: dmicheck: check reserved fields in type 22, 23, 30, 32, 38 and 39
  * dmi: dmicheck: add 64-bit integer to dmi_reserved_bits_check
  * dmi: dmicheck: add checks for new type 43
  * dmi: dmicheck: check reserved bits in Type 0
  * fwts/opal: Power management DT Validation tests.
  * fwts/opal: Reserved memory DT validation tests.
  * Add snapcraft rules to build a fwts snap</changelog>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 17.06.00:
  * ACPICA: Update to version 20170531
  * olog: olog.json: Update OPAL skiboot errors to check on olog
    scan
  * bios: mtrr: print out actual default type of MTRR
  * lib: fwts_alloc: only parse mem info once we have a valid line
    read in
  * lib: fwts_safe_mem: add SIGBUS handling
  * lib: fwts_alloc: re-work the memory parsing again
  * acpi: method use correct format specifier for uint32_t type
  * bios: mtrr: fix compile error in ubuntu trusty
  * opal: fix tests dependency on libfdt
  * bios: mtrr: fix overlaped MTRR (LP: #1694710)</changelog>
  <changelog author="mpluskal@suse.com" date="1503921600">- Update to version 17.07.00 (boo#1055891):
  * acpi: bgrt: update according to acpi 6.1 errata
  * acpi: method: update _PSD and _TSD tests according to ACPI 6.1
    errata
  * acpi: rsdp: revision 1 must have length 20 according to ACPI
    6.1 errata
  * acpi: method: Add _CPC revision 3 according to ACPI 6.2
  * acpi: hest: add new type 11 introduced in ACPI 6.2
  * acpi: srat: add new type 4 according to ACPI 6.2
  * acpi: method: update _GCP according to ACPI 6.2
  * acpi: hest: add notification type 11 according to ACPI 6.2
  * acpi: fadt: update minor version to 2 for ACPI 6.2
  * acpi: hest: add checks for GHES_ASSIST flag value in ACPI 6.2
  * acpi: wsmt: add wsmt test according to ACPI 6.2
  * ACPICA: Update to version 20170629
  * acpi: tpm2: Add additional start method values
  * acpi: iort: Add PMCG support</changelog>
  <changelog author="mpluskal@suse.com" date="1506081600">- Update to version 17.08.00:
  * ACPICA: Update to version 20170728
  * New ACPI tests defined by ACPI 6.2:
    + acpi: sdei: add ACPI SDEI test (mantis 1714)
    + acpi: pcct: refactor subspace to individual functions
    + acpi: pcct: update PCCT table to ACPI 6.2 (mantis 1659 &amp;
    1755)
    + acpi: dppt: add ACPI DPPT test (mantis 1795)
    + acpi: pptt: add ACPI PPTT test
    + acpi: hmat: add ACPI HMAT test (mantis 1705)
    + acpi: method: add _LSI test according to ACPI 6.2 (mantis
    1721)
    + acpi: madt: Add support for ACPI 6.2
  * New tests for SBBR:
    + acpi: fadt: add SBBR compliance tests
    + acpi: madt: add SBBR compliance tests
    + acpi: spcr: add SBBR compliance tests
    + acpi: xsdt: add SBBR compliance tests
    + acpi: dbg2: add SBBR compliance tests
    + acpi: gtdt: add SBBR compliance tests
    + acpi: acpitables: add SBBR compliance tests
    + dmi: dmicheck: add SBBR compliance tests
    + acpi: method: add SBBR compliance tests
    + acpi: rsdp: add SBBR compliance tests
    + acpi: sbbr: sync up with new SBBR tests
  * dmicheck: fix dmi_reserved_bits_check function when size is 64
  * acpi: pmtt: fix typo from pmmt to pmtt
  * acpi: rasf: add ACPI RASF test
  * acpi: remove "Linux-ready Firmware Developer Kit" from license
    header of files not derived from the LFDK
  * opal: fix build error on Ubuntu 12.04 i386 with gcc 4.6.3
  * lib: fwts_safe_mem: remove need to copy into a buffer
  * acpi: bert: add safe memory read check on mmap'd memory
  * acpi: hpet: add safe memory read check on mmap'd memory
  * acpi: mcfg: add safe memory read check on mmap'd PCI config
    memory
  * acpi: pcc: add safe memory read check on mmap'd PCC header
  * bios: pciirq: add safe memory read check on mmap'd pci irq
    region
  * bios: pnp: add safe memory read check on mmap'd memory region
  * dmi: dmicheck: fix incorrect safe memory read check on DMI
    mmap'd region
  * uefi: csm: add safe memory read check on mmap'd interrupt and
    option ROM regions
  * fwts_safe_mem: workaround longjmp clobber warnings
  * lib: fwts_smbios: use fwts_safe_memcpy to read SMBIOS entry
  * lib: fwts_acpi_tables: re-work fwts_acpi_get_rsdp, less memory
    copies
  * lib: fwts_safe_mem: really force reads
  * lib: fwts_acpi_tables: unmap mem, fixes memory leak
  * acpi: xsdt: fix build error on 32 bit systems
  * acpica: fwts_acpica: fix linker issues on Fedora (LP: #1712572)
  * acpi: method: Fix error message.
- Refresh fwts-no-compiletime.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1507550400">- Update to version 17.09.00:
  * ACPICA: Update to version 20170831
  * dmi: dmicheck: Add BMC Interface Type definitions from IPMI
    spec
  * lib: fwts_acpi_tables: add a new function to check Reserved
    field
  * lib: fwts_acpi_tables: add a new function to check reserved
    bits
  * efi_runtime: add resetsystem runtime service
- Refresh fwts-no-compiletime.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510747200">- Update to version 17.09.02:
  * No changelog provided</changelog>
  <changelog author="mpluskal@suse.com" date="1513598400">- Update to version 17.11.00:
  * acpi: devices: add a new test for acpi ec device
  * acpi: devices: add a new test for ACPI AC adapter device
  * acpi: devices: add a new test for ACPI battery device
  * acpi: devices: add a new test for smart battery device
  * acpi: devices: add new tests for power and sleep button devices
  * acpi: madt: check GICD's system vector according to mantis 1819
    (ACPI 6.2a)
  * acp: nfit: add platform capability according to manit 1831
    (ACPI 6.2a)
  * lib: add new large resource data type for _CRS methods
  * acpi: sdev: add ACPI SDEV test (mantis 1632)
  * acpi: dppt: add ACPI PDTT test (mantis 1576)
  * acpi: devices: add new tests for lid device
  * acpi: devices: add new tests for ambient light sensor device
  * acpi: devices: add new tests for time and alarm device
  * acpi: devices: add new tests for wireless power calibration
    device
  * acpi: add tests for _SRT control method
  * auto-packager: mkpackage.sh: add bionic
  * fwts: add bash command-line completion
  * Add ACPI 1.0 RSDP test to make sure RSDT field isn't null
  * ACPICA: Update to version 20171110
  * uefi: uefidump: add dumping for BluetoothLE device path
  * uefi: uefidump: add dumping for DNS device path
  * uefi: uefibootpath: add test for BluetoothLE device path
  * uefi: uefibootpath: add test for DNS device path</changelog>
  <changelog author="mpluskal@suse.com" date="1516881600">- Update to version 18.01.00:
  * ACPICA: Update to version 20180105
  * acpi: LPIT: check for monotonically increasing UID
  * fwts-test: sync up with changes in lpit test
  * Treewide: update copyright year to 2018
  * fwts-test: arg-help: sync up with copyright year changes
  * acpica: fix linking issues when building non ACPI builds
  * lib: fwts-battery: use PRIu32 format specifier, fixes cppcheck
    warning
  * acpi: acpidump: move declaration to before statements, add blank
    lines
  * lib: fwts_safe_mem: don't perform void * pointer arithmetic,
    fix 32 bit end
  * lib: fwts_alloc: move 'pos' to a deeper scope, minor style
    change
  * opal: reserve_mem: remove redundant initialization of pointer p
  * opal: reserve_mem: remove unused variable 'i' and move scope of
    variable 'value'
  * sbbr: rsdp: remove redundant initialization of boolean
    'signature_pass'
  * acpi: madt: move scope of boolean 'passed'
  * acpi: pptt: move scope of index variable 'i'.
  * acpi: rasf: move scope of index variable 'i'
  * sbbr: acpitables: clean up code, move scope of some variables
  * acpi: erst: cast size to uint64_t to clean up static analysis
    warning
  * uefi: uefidump: clean up some static analysis warnings
  * securebootcert: add checking read-only for the AuditMode and
    DeployedMode
  * securebootcert: move to UNSAFE category
- Changes for version 17.12.00:
  * ACPICA: Update to version 20171215
  * Fixed Bugs
  * acpi: tpm2: update spec url
  * trival: make read only const strings static
  * dmicheck: sbbr: make some SMBIOS structs optional
  * acpi: dbg2: sbbr: allow PL011 UART as a valid subtype
  * acpi: spcr: sbbr: IOAPIC is valid interrupt type
  * acpi: sbbr: relax a few test pass conditions
  * acpi: bert: remove confusing warning
  * acpi: madt: only inspect Local APIC/x2APIC/SAPIC tables if
    enabled</changelog>
  <changelog author="mpluskal@suse.com" date="1520510400">- Update to version 18.02.00:
  * ACPICA: Update to version 20180209
  * uefirtvariable: add test for
    EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS attribute
  * acpi: acpiinfo: add acpi 6 to acpiinfo test
  * acpi: method: check one element in _TSD only for acpi 6.2+
  * acpi: spcr: update interface types based on DBG2
  * acpi: method: allow _WAK to return an integer
  * mkpackage.README: change urgency level to medium
  * lib: fwts_log: remove redundant initialization of ptr1
  * acpi: wmi: remove redundant initialization of 'info'
  * lib: fwts_log: remove redundant initialization of 'field'
  * lib: fwts_pipeio: remove variable status
  * lib: fwts_acpi_tables: remove redundant initialization to
    'result'
  * README: Add dependencies per Platform
  * auto-packager: mkpackage.sh: remove zesty
  * uefirtvariable: modify both authenticated attributes setting
    test
  * acpi: fadt: Fix FACS checking
  * acpi: iort: Update revision checking</changelog>
  <changelog author="mpluskal@suse.com" date="1523016000">- Update to version 18.03.00:
  * ACPICA: Update to version 20180313
  * dmi: dmicheck: add chassis type for Type 3
  * klog.json: change severity for AE_ALREADY_EXISTS errors
  * olog:olog.json: Update OPAL skiboot errors to check on olog
    scan
  * uefirtauthvar: remove test with
    EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS</changelog>
  <changelog author="mpluskal@suse.com" date="1526644800">- Update to version 18.05.00:
  * fan: add cooling_device# to error messages
  * doc: adding acpitests, uefitests and sbbr options to man page
  * acpi: syntaxcheck: change it from batch to batch-experimental
  * fwts_framework: add an "ifv" option for Independent Firmware Vendor
  * dmicheck: skip checks of DMI default values for IFV
  * acpi: method: add test for _CLS control method
  * lib: create helper functions for device identification objects
  * acpi: devices: add common objects
  * fwts-frontend-text: add a recommended option for IFV (IBV)
  * fwts-frontend-text: add an option for ARM SBBR
  * auto-packager: mkpackage.sh: add cosmic
  * ACPICA: Update to version 20180427
  * ACPICA: Update to version 20180508
  * README: Add libpci-dev dependency ppc64el
  * cpufreq: Add support to read boost frequencies</changelog>
  <changelog author="mpluskal@suse.com" date="1529323200">- Update to version 18.05.01:
  * No changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1530100800">- Update to version 18.06.02:
  * ACPICA: Update to version 20180531
  * acpi: fadt: allow first reserved field to be 1
  * update_version.sh: also update version in snapcraft.yaml
  * snapcraft.yaml: add in missing stage packages
  * lib: fwts_set: fix API for fwts_set, add fwts_set_int
  * lib: add small helpers top get/set /sys/power/pm_debug_messages
  * acpi: s3: force enable /sys/power/pm_debug_messages
  * acpi: s4: also check for file based swap files
  * acpi: s4: force enable /sys/power/pm_debug_messages
  * acpi: s3power: force enable /sys/power/pm_debug_messages
  * acpi: hpet: fix getting invalid vendor ID and clock period
  * acpica: fix linking issues when building non ACPI builds
  * fwts_uefi: Fixing tiny typos in the uefi driver
  * mtrr: fix incorrect type detection</changelog>
  <changelog author="mpluskal@suse.com" date="1531224000">- Don't build with -Werror (fixes build with gcc8)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1535716800">- Update to version 18.08.00:
  * ACPICA: Update to version 20180810
  * uefi: uefivarinfo: add to UNSAFE category
  * acpi: gtdt: add checking the valid base physical address
  * dmicheck: update Processor Upgrade field in Type 4
  * dmicheck: update connection and port types in Type 8
  * dmicheck: update Usage and Characteristics 2 fields in Type 9
  * dmicheck: update memory type and add nvdimm fields for Type 17
  * coreboot/clog/clog.c: add clog test
- Refresh patch fwts-no-compiletime.patch
- Fix typo in changelog</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1542283200">- Update to version 18.11.00 (boo#1116172):
  * dmicheck: checks (Extended) Maximum Capacity for type 16
  * snapcraft: add libbsd-dev to build-packages
  * efi_runtime: re-enable the resetsystem runtime interface
  * olog:olog.json: Update OPAL skiboot errors to check on olog scan
  * acpi: button: check fixed hardware &amp; control method power buttons
  * kernelscan: add -k option to specify klog json filename
  * src/lib: add module probing helper functions
  * lib: fwts_efi_module: use the new module loading helper functions
  * lib/fwts_cpu: use new use the new module loading helper functions</changelog>
</package>
<package pkgid="2b67cef977d9d4a1d94e2c9d73726f1fcea06b02eccb5f4f0cb4c08f91e158ea" name="fwupdate" arch="src">
  <version epoch="0" ver="9+git21.gcd8f7d7" rel="lp150.5.3.1"/>
  <changelog author="glin@suse.com" date="1456920000">- initial import 0.5 (FATE#319345)
- Add fwupdate-suse-build.patch to change the destination of the
  EFI files and remove the po files</changelog>
  <changelog author="glin@suse.com" date="1459166400">- Add the missing Group</changelog>
  <changelog author="coolo@suse.com" date="1462536000">- own bash-completion directory as no longer provided by
  util-linux (boo#977259)</changelog>
  <changelog author="jengelh@inai.de" date="1462708800">- Drop unnecessary specfile elements.
  fwupdate seems not required for libfwup, remove the requirement.
- Correct requires of fwupdate-devel
- Use source URLs</changelog>
  <changelog author="glin@suse.com" date="1467892800">- Correct the EFI dir for SLE-12-SP2 (FATE#319345)
- Install fwup*.efi to the EFI system partition (FATE#319345)
- Add fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch to
  fix the file mode (bsc#988000)</changelog>
  <changelog author="glin@suse.com" date="1468584000">- Add fwupdate-fix-efivar-0.24-api.patch to fix the compilation
  errors due to the change of efivar APIs
- Bump BuildRequires of efivar-devel to 0.24
- Add fwupdate-unset-immutable-flag.patch to unset the immutable
  flag before clean the EFI variables (bsc#964726)
- Amend fwupdate-suse-build.patch (FATE#319345)
  + omit the build-id and package fwudpate-efi-debuginfo in a less
    hacky way.
  + Use the RPM_OPT_FLAGS for the user space programs
- Add fwupdate-bsc988886-add-leading-space.patch to add the leading
  space to the load option (bsc#988886)</changelog>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="glin@suse.com" date="1540814400">- Add fwupdate-bsc1113008-dont-add-headers-to-fmp-capsules.patch
  to avoid adding headers to FMP capsules (bsc#1113008)
- Add fwupdate-skip-fwupdate-verbose.patch to keep the debug
  variable
- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
</package>
<package pkgid="ded427915894fea751732b6e5068697633aa797d5cfcb2297a915f2bae67454a" name="fwupdate" arch="x86_64">
  <version epoch="0" ver="9+git21.gcd8f7d7" rel="lp150.5.3.1"/>
  <changelog author="glin@suse.com" date="1456920000">- initial import 0.5 (FATE#319345)
- Add fwupdate-suse-build.patch to change the destination of the
  EFI files and remove the po files</changelog>
  <changelog author="glin@suse.com" date="1459166400">- Add the missing Group</changelog>
  <changelog author="coolo@suse.com" date="1462536000">- own bash-completion directory as no longer provided by
  util-linux (boo#977259)</changelog>
  <changelog author="jengelh@inai.de" date="1462708800">- Drop unnecessary specfile elements.
  fwupdate seems not required for libfwup, remove the requirement.
- Correct requires of fwupdate-devel
- Use source URLs</changelog>
  <changelog author="glin@suse.com" date="1467892800">- Correct the EFI dir for SLE-12-SP2 (FATE#319345)
- Install fwup*.efi to the EFI system partition (FATE#319345)
- Add fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch to
  fix the file mode (bsc#988000)</changelog>
  <changelog author="glin@suse.com" date="1468584000">- Add fwupdate-fix-efivar-0.24-api.patch to fix the compilation
  errors due to the change of efivar APIs
- Bump BuildRequires of efivar-devel to 0.24
- Add fwupdate-unset-immutable-flag.patch to unset the immutable
  flag before clean the EFI variables (bsc#964726)
- Amend fwupdate-suse-build.patch (FATE#319345)
  + omit the build-id and package fwudpate-efi-debuginfo in a less
    hacky way.
  + Use the RPM_OPT_FLAGS for the user space programs
- Add fwupdate-bsc988886-add-leading-space.patch to add the leading
  space to the load option (bsc#988886)</changelog>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="glin@suse.com" date="1540814400">- Add fwupdate-bsc1113008-dont-add-headers-to-fmp-capsules.patch
  to avoid adding headers to FMP capsules (bsc#1113008)
- Add fwupdate-skip-fwupdate-verbose.patch to keep the debug
  variable
- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
</package>
<package pkgid="fa13043cfad247a48edc1c453a71c7fb4443504f3fd4c1f659f0d2dc6b0f1391" name="fwupdate-devel" arch="x86_64">
  <version epoch="0" ver="9+git21.gcd8f7d7" rel="lp150.5.3.1"/>
  <changelog author="glin@suse.com" date="1456920000">- initial import 0.5 (FATE#319345)
- Add fwupdate-suse-build.patch to change the destination of the
  EFI files and remove the po files</changelog>
  <changelog author="glin@suse.com" date="1459166400">- Add the missing Group</changelog>
  <changelog author="coolo@suse.com" date="1462536000">- own bash-completion directory as no longer provided by
  util-linux (boo#977259)</changelog>
  <changelog author="jengelh@inai.de" date="1462708800">- Drop unnecessary specfile elements.
  fwupdate seems not required for libfwup, remove the requirement.
- Correct requires of fwupdate-devel
- Use source URLs</changelog>
  <changelog author="glin@suse.com" date="1467892800">- Correct the EFI dir for SLE-12-SP2 (FATE#319345)
- Install fwup*.efi to the EFI system partition (FATE#319345)
- Add fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch to
  fix the file mode (bsc#988000)</changelog>
  <changelog author="glin@suse.com" date="1468584000">- Add fwupdate-fix-efivar-0.24-api.patch to fix the compilation
  errors due to the change of efivar APIs
- Bump BuildRequires of efivar-devel to 0.24
- Add fwupdate-unset-immutable-flag.patch to unset the immutable
  flag before clean the EFI variables (bsc#964726)
- Amend fwupdate-suse-build.patch (FATE#319345)
  + omit the build-id and package fwudpate-efi-debuginfo in a less
    hacky way.
  + Use the RPM_OPT_FLAGS for the user space programs
- Add fwupdate-bsc988886-add-leading-space.patch to add the leading
  space to the load option (bsc#988886)</changelog>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="glin@suse.com" date="1540814400">- Add fwupdate-bsc1113008-dont-add-headers-to-fmp-capsules.patch
  to avoid adding headers to FMP capsules (bsc#1113008)
- Add fwupdate-skip-fwupdate-verbose.patch to keep the debug
  variable
- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
</package>
<package pkgid="a6f477ff0addb8736abe714cd7b1a89c887896c7034037dcf8b02d8578a25203" name="fwupdate-efi" arch="x86_64">
  <version epoch="0" ver="9+git21.gcd8f7d7" rel="lp150.5.3.1"/>
  <changelog author="glin@suse.com" date="1456920000">- initial import 0.5 (FATE#319345)
- Add fwupdate-suse-build.patch to change the destination of the
  EFI files and remove the po files</changelog>
  <changelog author="glin@suse.com" date="1459166400">- Add the missing Group</changelog>
  <changelog author="coolo@suse.com" date="1462536000">- own bash-completion directory as no longer provided by
  util-linux (boo#977259)</changelog>
  <changelog author="jengelh@inai.de" date="1462708800">- Drop unnecessary specfile elements.
  fwupdate seems not required for libfwup, remove the requirement.
- Correct requires of fwupdate-devel
- Use source URLs</changelog>
  <changelog author="glin@suse.com" date="1467892800">- Correct the EFI dir for SLE-12-SP2 (FATE#319345)
- Install fwup*.efi to the EFI system partition (FATE#319345)
- Add fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch to
  fix the file mode (bsc#988000)</changelog>
  <changelog author="glin@suse.com" date="1468584000">- Add fwupdate-fix-efivar-0.24-api.patch to fix the compilation
  errors due to the change of efivar APIs
- Bump BuildRequires of efivar-devel to 0.24
- Add fwupdate-unset-immutable-flag.patch to unset the immutable
  flag before clean the EFI variables (bsc#964726)
- Amend fwupdate-suse-build.patch (FATE#319345)
  + omit the build-id and package fwudpate-efi-debuginfo in a less
    hacky way.
  + Use the RPM_OPT_FLAGS for the user space programs
- Add fwupdate-bsc988886-add-leading-space.patch to add the leading
  space to the load option (bsc#988886)</changelog>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="glin@suse.com" date="1540814400">- Add fwupdate-bsc1113008-dont-add-headers-to-fmp-capsules.patch
  to avoid adding headers to FMP capsules (bsc#1113008)
- Add fwupdate-skip-fwupdate-verbose.patch to keep the debug
  variable
- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
</package>
<package pkgid="386fd295cdb0405689f247c83fdd778bc37e3062d68bbd69d6814f8e9e990c71" name="g3utils" arch="x86_64">
  <version epoch="0" ver="1.1.37" rel="lp150.2.3.1"/>
  <changelog author="cristian.rodriguez@opensuse.org" date="1283083200">- Do not include build date in binaries</changelog>
  <changelog author="gjhe@novell.com" date="1305288000">- fix bug [bnc#646280],adjust faxspool to process pdf file using
  gs directly, do not use acroreader.</changelog>
  <changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro</changelog>
  <changelog author="coolo@suse.com" date="1324900800">- don't package files twice</changelog>
  <changelog author="prusnak@opensuse.org" date="1327406400">- build with PIE [bnc#743151]</changelog>
  <changelog author="mweckbecker@suse.com" date="1331294400">- fixpie.patch: Use LDFLAGS instead of CFLAGS to make building with
  PIE work properly</changelog>
  <changelog author="coolo@suse.com" date="1347364800">- add makeinfo as explicit buildrequire</changelog>
  <changelog author="dmueller@suse.com" date="1357819200">- replace run_permissions call with set_permissions (bnc#764113)</changelog>
  <changelog author="schwab@suse.de" date="1362484800">- lp64.patch: Add support for future LP64 platforms</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1417089600">- fix bashisms in faxback.sh script
- add patches:
  * mgetty-1.1.36-fix-bashisms.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1422100800">- Add mgetty@.service and vgetty@.service (boo#914661)</changelog>
  <changelog author="mpluskal@suse.com" date="1422446400">- Require systemd-rpm-macros instead of systemd for building</changelog>
  <changelog author="mpluskal@suse.com" date="1456574400">- Use correct permissions for unit files (boo#968571)</changelog>
  <changelog author="kukuk@suse.de" date="1477483200">- Add PreReq for group uucp to sendfax package</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Cleanup a bit with spec-cleaner
- Remove few rpmlint warnings and reduce the deps to contain only
  what is needed
- Add patch to build with gcc7 0001-Fix-build-failure-with-gcc-7.patch
  bsc#1041290</changelog>
  <changelog author="sbrabec@suse.com" date="1496836800">- Update to version 1.1.37:
  * faxspool: implement "-t hh:mm-hh:mm" time-range syntax, add
  @DATE +&lt;format&gt;@ to faxheader processing
  * faxq: properly display queued jobs with time-range field
  * faxrunqd: correctly handle jobs running out of the end of their
  sent-time window.
  INCOMPATIBLE CHANGE: Changes handling of "-t hh:mm" to
  "from hh:mm to midnight"
  * microcom: improve read-from-device exception handling
  * sendfax: send NSF frame on reception,
  new option reset-after-fail
  * faxrunqd: enhance and clarify per-modem statistics
- New build fixes (mgetty-noroot.patch, mgetty-mkdir-p.patch).
- Update patches
  (mgetty-1.1.36-callback.patch -&gt; mgetty-1.1.37-callback.patch,
  mgetty-1.1.36-makefile.patch -&gt; mgetty-1.1.37-makefile.patch).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1537531200">- Added patches:
  * mgetty-fix-buffer-overflow.patch - upstream patch, sets maximum
  length of a string to prevent buffer overflow and thus possible
  command injection
  * mgetty-delete-obsolete.patch - upstream-based patch, deletes
  obsolete file contrib/scrts.c, which could cause buffer overflow
- Fixed bugs:
  * bsc#1108756 (CVE-2018-16745): Stack-based buffer overflow in
    fax_notify_mail() in faxrec.c
  * bsc#1108757 (CVE-2018-16744): Command injection in faxrec.c
  * bsc#1108762 (CVE-2018-16742): Stack-based buffer overflow in
    contrib/scrts.c triggered via command line parameter
  * bsc#1108761 (CVE-2018-16743): Stack-based buffer overflow with
    long username in contrib/next-login/login.c</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1537531201">- Added patch mgetty-fax-block-code-injection.patch to fix
  bsc#1108752 (CVE-2018-16741): command injection in fax/faxq-helper.c</changelog>
</package>
<package pkgid="2e00a6ae8624fe11d18bd8dd370fc0e011fe60738d1c081a10f8df7b00d3a7b3" name="gajim" arch="noarch">
  <version epoch="0" ver="1.0.3" rel="lp150.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1437825600">- Update to 0.16.2:
  * Improve Zeroconf (Avahi) with IPv6.
  * Fix errors with GnuPG.
  * Minor fixes and improvements.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1438516800">- Update to 0.16.3:
  * Fix reading secret file.
  * Fix reconnection after suspend.
  * Fix sending GPG-encrypted file to non-trusted key.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1443355200">- Update to 0.16.4:
  * Fix trusting GPG keys.
  * Ability to disable synchronisation of logs with server.
  * Improve MAM usage.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1451390400">- Update to 0.16.5:
  * Improve MAM implementation.
  * Improve security on connexion and for roster managment
    (rh#1295475, bsc#960668, CVE-2015-8688)
  * Ability for emoticons to be sorted in menu.</changelog>
  <changelog author="mvetter@suse.com" date="1464091200">- Add gajim-remote-dont-show.patch:
  gajim-remote is cli only. Dont list it in menus.
- If python-gstreamer-0_10 is installed the error message
  'ImportError: could not import gst' is not shown.
  See: https://trac.gajim.org/ticket/7836</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1476360000">- Update to version 0.16.6:
  * Fix using gpg2.
  * Improve message receips usage.
  * Improve roster filtering.
  * Fix several minor bugs.
- Remove gajim-remote-dont-show.patch: merged upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494331200">- Update to version 0.16.7:
  * Better compatibility with XEP-0191: Blocking Command.
  * Gajim now depends on python-gnupg for PGP encryption.
  * Remove usage of demandimport.
  * Many minor bugfixes.
- Move python-farstream-0_1 to Suggests.
- Correct the licence to GPL-3.0.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496059200">- Add gajim-0.16.7-default-disable-xep-0146.patch by
  Philipp Hörist: Add a config option to activate XEP-0146 commands
  (commit cb65cfc, CVE-2016-10376, bsc#1041163).</changelog>
  <changelog author="vilene@posteo.net" date="1499169600">- Update to version 0.16.8:
  * Fix rejoining MUCs after connection loss
  * Fix Groupchat invites
  * Fix encoding problems with newer GnuPG versions
  * Fix old messages randomly reappearing in the chat window
  * Fix some problems with IBB filetransfer
  * Make XEP-0146 Commands opt-in
  * Improve sending messages to your own resources
  * Improve reliability of delivery recipes
  * Many minor bugfixes
- Add gajim-do_not_ship_certificate.patch.in: Do not package
  bundled PEM certificate, use one provided by package
  `ca-certificates-mozilla' instead.
- Remove gajim-0.16.7-default-disable-xep-0146.patch: Not needed
  anymore, patch applied upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Trim filler wording from description.</changelog>
  <changelog author="mvetter@suse.com" date="1512475200">- Update to 0.16.9:
  * Improve Zeroconf behavior
  * Fix showing normal message event
  * remove usage of OpenSSL.rand
  * a few minor bugfixes
- Update of icon cache and desktop file only in case of older
  distribution</changelog>
  <changelog author="frede@b1-systems.de" date="1513166400">- Add Requires:       python-nbxmpp &gt;= 0.6.1</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521288000">- Update to version 1.0.0:
  * Ported to GTK+3 / Python3.
  * Integrate HTTPUpload.
  * Add Navigation buttons in History Window.
  * Improvements for HiDPI Screens.
  * Depend on the python keyring package for password storage.
  * Lots of refactoring.
  * New Emoji support.
  * New Chat Window design.
  * New StartChat Window (Ctrl+N).
  * New ServerInfo Window.
  * AccountWindow Redesign.
  * Move some encryption code out into Plugins (see PGP Plugin,
    Esessions Plugin).
  * Add mam:1 and mam:2 support (mam:0 was removed).
  * Add MAM for MUCs support.
  * Add support for showing XEP-0084 Avatars.
  * Add support for geo: URIs.
  * Add xmpp URI handling directly in Gajim.
  * Remove Gajim-Remote.
  * Remove XEP-0012 (Last Activity).
  * Remove XEP-0136 (Message Archiving).
  * Add XEP-0156 (Discovering Alternative XMPP Connection Methods).
  * Add XEP-0319 (Last User Interaction in Presence).
  * Add XEP-0368 (SRV records for XMPP over TLS).
  * Add XEP-0380 (Explicit Message Encryption).
  * Add Jingle FT:5 support.
  * Lots of other small bugfixes.
- Rebase gajim-do_not_ship_certificate.patch.in.
- Update requirements and recommendations:
  also require things that are not strictly required if they are
  harmless and definitely available.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1522670400">- Update to version 1.0.1:
  * Improve MAM support.
  * Image preview in the file chooser dialogue.
  * Groupchat: Set minimise on auto join default to true.
  * Delete a bookmark when we destroy a room.
  * Fix account deletion.
  * Fix custom font handling.
  * Fix OpenPGP message decryption.
  * Fix window position restore on multi-head setups.
  * Fix scrolling in message window.</changelog>
  <changelog author="dev@stellardeath.org" date="1523188800">- Add the python3-axolotl package to recommends to make OMEMO work
  out of the box.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1525348800">- Update to version 1.0.2:
  * Server name was rejected for group chat bookmarks.
  * setup.py install missed some files if used with "--skip-build".
  * Password was sometimes stored in plaintext.
  * Do not show an error when receiving invalid avatars.
  * Fix no Licence in the About dialogue.
  * Encode filenames before sending.
  * Catch invalid IQ stanzas and log them.
  * XMPP logo in "Add New Contact" window instead Gajim logo.
  * Mark some strings as translatable.
  * Fix an error on file send completion.
  * Removing a bookmark caused an error.
  * Avatar is deleted when updating vCard.
  * Account label didn't change in tooltip of notification area
    icon.
  * Placeholder text didn't disappear.
  * Fix History Manager search.
  * Proxy comobobox in accounts/connections didn't get updated
    after ManageProxies.
  * Fix a problem receiving files.
  * Notification never autohides in gnome.
  * Correctly reload Plugins.
  * Save history export with utf8 encoding.
  * Dont allow plain BOSH by default.</changelog>
  <changelog author="tbro@opensuse.org" date="1526126400">- Fixed dependency in spec file on python3-nbxmpp 0.6.5:
  * With python3-nbxmpp 0.6.4 the newest version of gajim broke</changelog>
  <changelog author="frede@b1-systems.de" date="1526299200">- Fixed dependency in spec file on python3 &gt;= 3.5.0:
  * since Leap 42.3 and SLES 12 have only 3.4.6 they will not work
- Fixed dependency in spec file on python3-nbxmpp 0.6.5:
  * changed the also the required not only build-required</changelog>
  <changelog author="mvetter@suse.com" date="1526731200">- Update to 1.0.3:
  * bug 8296 Fix errors on roster updates after stream management resume
  * bug 9106 Convert font weight from pango to css values
  * bug 9124 Bring ChatControl to front when notification is clicked
  * Set no-store hint on groupchat chatstates
  * Dont show OOB uri if message body is the same
  * Add missing bybonjour dependency for Windows zeroconf
- Remove Require for pyasn1: not needed anymore</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1527076800">- Symlink the system PEM certfiicate to the path where
  Plugin Installer expects it to be instead of patching
  Plugin Installer as it can be updated locally unpatched and thus
  fail to work (boo#1094343).
- Remove gajim-do_not_ship_certificate.patch.in: no longer needed.</changelog>
</package>
<package pkgid="da13e90a65563f0045c39617698056d7c6d97750f86206e83adc7edc813167eb" name="gajim" arch="src">
  <version epoch="0" ver="1.0.3" rel="lp150.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1437825600">- Update to 0.16.2:
  * Improve Zeroconf (Avahi) with IPv6.
  * Fix errors with GnuPG.
  * Minor fixes and improvements.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1438516800">- Update to 0.16.3:
  * Fix reading secret file.
  * Fix reconnection after suspend.
  * Fix sending GPG-encrypted file to non-trusted key.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1443355200">- Update to 0.16.4:
  * Fix trusting GPG keys.
  * Ability to disable synchronisation of logs with server.
  * Improve MAM usage.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1451390400">- Update to 0.16.5:
  * Improve MAM implementation.
  * Improve security on connexion and for roster managment
    (rh#1295475, bsc#960668, CVE-2015-8688)
  * Ability for emoticons to be sorted in menu.</changelog>
  <changelog author="mvetter@suse.com" date="1464091200">- Add gajim-remote-dont-show.patch:
  gajim-remote is cli only. Dont list it in menus.
- If python-gstreamer-0_10 is installed the error message
  'ImportError: could not import gst' is not shown.
  See: https://trac.gajim.org/ticket/7836</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1476360000">- Update to version 0.16.6:
  * Fix using gpg2.
  * Improve message receips usage.
  * Improve roster filtering.
  * Fix several minor bugs.
- Remove gajim-remote-dont-show.patch: merged upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494331200">- Update to version 0.16.7:
  * Better compatibility with XEP-0191: Blocking Command.
  * Gajim now depends on python-gnupg for PGP encryption.
  * Remove usage of demandimport.
  * Many minor bugfixes.
- Move python-farstream-0_1 to Suggests.
- Correct the licence to GPL-3.0.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496059200">- Add gajim-0.16.7-default-disable-xep-0146.patch by
  Philipp Hörist: Add a config option to activate XEP-0146 commands
  (commit cb65cfc, CVE-2016-10376, bsc#1041163).</changelog>
  <changelog author="vilene@posteo.net" date="1499169600">- Update to version 0.16.8:
  * Fix rejoining MUCs after connection loss
  * Fix Groupchat invites
  * Fix encoding problems with newer GnuPG versions
  * Fix old messages randomly reappearing in the chat window
  * Fix some problems with IBB filetransfer
  * Make XEP-0146 Commands opt-in
  * Improve sending messages to your own resources
  * Improve reliability of delivery recipes
  * Many minor bugfixes
- Add gajim-do_not_ship_certificate.patch.in: Do not package
  bundled PEM certificate, use one provided by package
  `ca-certificates-mozilla' instead.
- Remove gajim-0.16.7-default-disable-xep-0146.patch: Not needed
  anymore, patch applied upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Trim filler wording from description.</changelog>
  <changelog author="mvetter@suse.com" date="1512475200">- Update to 0.16.9:
  * Improve Zeroconf behavior
  * Fix showing normal message event
  * remove usage of OpenSSL.rand
  * a few minor bugfixes
- Update of icon cache and desktop file only in case of older
  distribution</changelog>
  <changelog author="frede@b1-systems.de" date="1513166400">- Add Requires:       python-nbxmpp &gt;= 0.6.1</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521288000">- Update to version 1.0.0:
  * Ported to GTK+3 / Python3.
  * Integrate HTTPUpload.
  * Add Navigation buttons in History Window.
  * Improvements for HiDPI Screens.
  * Depend on the python keyring package for password storage.
  * Lots of refactoring.
  * New Emoji support.
  * New Chat Window design.
  * New StartChat Window (Ctrl+N).
  * New ServerInfo Window.
  * AccountWindow Redesign.
  * Move some encryption code out into Plugins (see PGP Plugin,
    Esessions Plugin).
  * Add mam:1 and mam:2 support (mam:0 was removed).
  * Add MAM for MUCs support.
  * Add support for showing XEP-0084 Avatars.
  * Add support for geo: URIs.
  * Add xmpp URI handling directly in Gajim.
  * Remove Gajim-Remote.
  * Remove XEP-0012 (Last Activity).
  * Remove XEP-0136 (Message Archiving).
  * Add XEP-0156 (Discovering Alternative XMPP Connection Methods).
  * Add XEP-0319 (Last User Interaction in Presence).
  * Add XEP-0368 (SRV records for XMPP over TLS).
  * Add XEP-0380 (Explicit Message Encryption).
  * Add Jingle FT:5 support.
  * Lots of other small bugfixes.
- Rebase gajim-do_not_ship_certificate.patch.in.
- Update requirements and recommendations:
  also require things that are not strictly required if they are
  harmless and definitely available.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1522670400">- Update to version 1.0.1:
  * Improve MAM support.
  * Image preview in the file chooser dialogue.
  * Groupchat: Set minimise on auto join default to true.
  * Delete a bookmark when we destroy a room.
  * Fix account deletion.
  * Fix custom font handling.
  * Fix OpenPGP message decryption.
  * Fix window position restore on multi-head setups.
  * Fix scrolling in message window.</changelog>
  <changelog author="dev@stellardeath.org" date="1523188800">- Add the python3-axolotl package to recommends to make OMEMO work
  out of the box.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1525348800">- Update to version 1.0.2:
  * Server name was rejected for group chat bookmarks.
  * setup.py install missed some files if used with "--skip-build".
  * Password was sometimes stored in plaintext.
  * Do not show an error when receiving invalid avatars.
  * Fix no Licence in the About dialogue.
  * Encode filenames before sending.
  * Catch invalid IQ stanzas and log them.
  * XMPP logo in "Add New Contact" window instead Gajim logo.
  * Mark some strings as translatable.
  * Fix an error on file send completion.
  * Removing a bookmark caused an error.
  * Avatar is deleted when updating vCard.
  * Account label didn't change in tooltip of notification area
    icon.
  * Placeholder text didn't disappear.
  * Fix History Manager search.
  * Proxy comobobox in accounts/connections didn't get updated
    after ManageProxies.
  * Fix a problem receiving files.
  * Notification never autohides in gnome.
  * Correctly reload Plugins.
  * Save history export with utf8 encoding.
  * Dont allow plain BOSH by default.</changelog>
  <changelog author="tbro@opensuse.org" date="1526126400">- Fixed dependency in spec file on python3-nbxmpp 0.6.5:
  * With python3-nbxmpp 0.6.4 the newest version of gajim broke</changelog>
  <changelog author="frede@b1-systems.de" date="1526299200">- Fixed dependency in spec file on python3 &gt;= 3.5.0:
  * since Leap 42.3 and SLES 12 have only 3.4.6 they will not work
- Fixed dependency in spec file on python3-nbxmpp 0.6.5:
  * changed the also the required not only build-required</changelog>
  <changelog author="mvetter@suse.com" date="1526731200">- Update to 1.0.3:
  * bug 8296 Fix errors on roster updates after stream management resume
  * bug 9106 Convert font weight from pango to css values
  * bug 9124 Bring ChatControl to front when notification is clicked
  * Set no-store hint on groupchat chatstates
  * Dont show OOB uri if message body is the same
  * Add missing bybonjour dependency for Windows zeroconf
- Remove Require for pyasn1: not needed anymore</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1527076800">- Symlink the system PEM certfiicate to the path where
  Plugin Installer expects it to be instead of patching
  Plugin Installer as it can be updated locally unpatched and thus
  fail to work (boo#1094343).
- Remove gajim-do_not_ship_certificate.patch.in: no longer needed.</changelog>
</package>
<package pkgid="9ce2185a6df937cf0e2db5b524f7ecea27a7e2c139c52c27ba5accb29ae89dc4" name="gajim" arch="noarch">
  <version epoch="0" ver="1.0.3" rel="lp150.3.6.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1438516800">- Update to 0.16.3:
  * Fix reading secret file.
  * Fix reconnection after suspend.
  * Fix sending GPG-encrypted file to non-trusted key.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1443355200">- Update to 0.16.4:
  * Fix trusting GPG keys.
  * Ability to disable synchronisation of logs with server.
  * Improve MAM usage.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1451390400">- Update to 0.16.5:
  * Improve MAM implementation.
  * Improve security on connexion and for roster managment
    (rh#1295475, bsc#960668, CVE-2015-8688)
  * Ability for emoticons to be sorted in menu.</changelog>
  <changelog author="mvetter@suse.com" date="1464091200">- Add gajim-remote-dont-show.patch:
  gajim-remote is cli only. Dont list it in menus.
- If python-gstreamer-0_10 is installed the error message
  'ImportError: could not import gst' is not shown.
  See: https://trac.gajim.org/ticket/7836</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1476360000">- Update to version 0.16.6:
  * Fix using gpg2.
  * Improve message receips usage.
  * Improve roster filtering.
  * Fix several minor bugs.
- Remove gajim-remote-dont-show.patch: merged upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494331200">- Update to version 0.16.7:
  * Better compatibility with XEP-0191: Blocking Command.
  * Gajim now depends on python-gnupg for PGP encryption.
  * Remove usage of demandimport.
  * Many minor bugfixes.
- Move python-farstream-0_1 to Suggests.
- Correct the licence to GPL-3.0.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496059200">- Add gajim-0.16.7-default-disable-xep-0146.patch by
  Philipp Hörist: Add a config option to activate XEP-0146 commands
  (commit cb65cfc, CVE-2016-10376, bsc#1041163).</changelog>
  <changelog author="vilene@posteo.net" date="1499169600">- Update to version 0.16.8:
  * Fix rejoining MUCs after connection loss
  * Fix Groupchat invites
  * Fix encoding problems with newer GnuPG versions
  * Fix old messages randomly reappearing in the chat window
  * Fix some problems with IBB filetransfer
  * Make XEP-0146 Commands opt-in
  * Improve sending messages to your own resources
  * Improve reliability of delivery recipes
  * Many minor bugfixes
- Add gajim-do_not_ship_certificate.patch.in: Do not package
  bundled PEM certificate, use one provided by package
  `ca-certificates-mozilla' instead.
- Remove gajim-0.16.7-default-disable-xep-0146.patch: Not needed
  anymore, patch applied upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Trim filler wording from description.</changelog>
  <changelog author="mvetter@suse.com" date="1512475200">- Update to 0.16.9:
  * Improve Zeroconf behavior
  * Fix showing normal message event
  * remove usage of OpenSSL.rand
  * a few minor bugfixes
- Update of icon cache and desktop file only in case of older
  distribution</changelog>
  <changelog author="frede@b1-systems.de" date="1513166400">- Add Requires:       python-nbxmpp &gt;= 0.6.1</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521288000">- Update to version 1.0.0:
  * Ported to GTK+3 / Python3.
  * Integrate HTTPUpload.
  * Add Navigation buttons in History Window.
  * Improvements for HiDPI Screens.
  * Depend on the python keyring package for password storage.
  * Lots of refactoring.
  * New Emoji support.
  * New Chat Window design.
  * New StartChat Window (Ctrl+N).
  * New ServerInfo Window.
  * AccountWindow Redesign.
  * Move some encryption code out into Plugins (see PGP Plugin,
    Esessions Plugin).
  * Add mam:1 and mam:2 support (mam:0 was removed).
  * Add MAM for MUCs support.
  * Add support for showing XEP-0084 Avatars.
  * Add support for geo: URIs.
  * Add xmpp URI handling directly in Gajim.
  * Remove Gajim-Remote.
  * Remove XEP-0012 (Last Activity).
  * Remove XEP-0136 (Message Archiving).
  * Add XEP-0156 (Discovering Alternative XMPP Connection Methods).
  * Add XEP-0319 (Last User Interaction in Presence).
  * Add XEP-0368 (SRV records for XMPP over TLS).
  * Add XEP-0380 (Explicit Message Encryption).
  * Add Jingle FT:5 support.
  * Lots of other small bugfixes.
- Rebase gajim-do_not_ship_certificate.patch.in.
- Update requirements and recommendations:
  also require things that are not strictly required if they are
  harmless and definitely available.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1522670400">- Update to version 1.0.1:
  * Improve MAM support.
  * Image preview in the file chooser dialogue.
  * Groupchat: Set minimise on auto join default to true.
  * Delete a bookmark when we destroy a room.
  * Fix account deletion.
  * Fix custom font handling.
  * Fix OpenPGP message decryption.
  * Fix window position restore on multi-head setups.
  * Fix scrolling in message window.</changelog>
  <changelog author="dev@stellardeath.org" date="1523188800">- Add the python3-axolotl package to recommends to make OMEMO work
  out of the box.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1525348800">- Update to version 1.0.2:
  * Server name was rejected for group chat bookmarks.
  * setup.py install missed some files if used with "--skip-build".
  * Password was sometimes stored in plaintext.
  * Do not show an error when receiving invalid avatars.
  * Fix no Licence in the About dialogue.
  * Encode filenames before sending.
  * Catch invalid IQ stanzas and log them.
  * XMPP logo in "Add New Contact" window instead Gajim logo.
  * Mark some strings as translatable.
  * Fix an error on file send completion.
  * Removing a bookmark caused an error.
  * Avatar is deleted when updating vCard.
  * Account label didn't change in tooltip of notification area
    icon.
  * Placeholder text didn't disappear.
  * Fix History Manager search.
  * Proxy comobobox in accounts/connections didn't get updated
    after ManageProxies.
  * Fix a problem receiving files.
  * Notification never autohides in gnome.
  * Correctly reload Plugins.
  * Save history export with utf8 encoding.
  * Dont allow plain BOSH by default.</changelog>
  <changelog author="tbro@opensuse.org" date="1526126400">- Fixed dependency in spec file on python3-nbxmpp 0.6.5:
  * With python3-nbxmpp 0.6.4 the newest version of gajim broke</changelog>
  <changelog author="frede@b1-systems.de" date="1526299200">- Fixed dependency in spec file on python3 &gt;= 3.5.0:
  * since Leap 42.3 and SLES 12 have only 3.4.6 they will not work
- Fixed dependency in spec file on python3-nbxmpp 0.6.5:
  * changed the also the required not only build-required</changelog>
  <changelog author="mvetter@suse.com" date="1526731200">- Update to 1.0.3:
  * bug 8296 Fix errors on roster updates after stream management resume
  * bug 9106 Convert font weight from pango to css values
  * bug 9124 Bring ChatControl to front when notification is clicked
  * Set no-store hint on groupchat chatstates
  * Dont show OOB uri if message body is the same
  * Add missing bybonjour dependency for Windows zeroconf
- Remove Require for pyasn1: not needed anymore</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1527076800">- Symlink the system PEM certfiicate to the path where
  Plugin Installer expects it to be instead of patching
  Plugin Installer as it can be updated locally unpatched and thus
  fail to work (boo#1094343).
- Remove gajim-do_not_ship_certificate.patch.in: no longer needed.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1537790400">- Add some missing dependencies (boo#1109355).</changelog>
</package>
<package pkgid="2ede6378ef0899d58a6f3b221d9678b4db0b089f0db195156db1d981b2487c49" name="gajim" arch="src">
  <version epoch="0" ver="1.0.3" rel="lp150.3.6.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1438516800">- Update to 0.16.3:
  * Fix reading secret file.
  * Fix reconnection after suspend.
  * Fix sending GPG-encrypted file to non-trusted key.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1443355200">- Update to 0.16.4:
  * Fix trusting GPG keys.
  * Ability to disable synchronisation of logs with server.
  * Improve MAM usage.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1451390400">- Update to 0.16.5:
  * Improve MAM implementation.
  * Improve security on connexion and for roster managment
    (rh#1295475, bsc#960668, CVE-2015-8688)
  * Ability for emoticons to be sorted in menu.</changelog>
  <changelog author="mvetter@suse.com" date="1464091200">- Add gajim-remote-dont-show.patch:
  gajim-remote is cli only. Dont list it in menus.
- If python-gstreamer-0_10 is installed the error message
  'ImportError: could not import gst' is not shown.
  See: https://trac.gajim.org/ticket/7836</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1476360000">- Update to version 0.16.6:
  * Fix using gpg2.
  * Improve message receips usage.
  * Improve roster filtering.
  * Fix several minor bugs.
- Remove gajim-remote-dont-show.patch: merged upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494331200">- Update to version 0.16.7:
  * Better compatibility with XEP-0191: Blocking Command.
  * Gajim now depends on python-gnupg for PGP encryption.
  * Remove usage of demandimport.
  * Many minor bugfixes.
- Move python-farstream-0_1 to Suggests.
- Correct the licence to GPL-3.0.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496059200">- Add gajim-0.16.7-default-disable-xep-0146.patch by
  Philipp Hörist: Add a config option to activate XEP-0146 commands
  (commit cb65cfc, CVE-2016-10376, bsc#1041163).</changelog>
  <changelog author="vilene@posteo.net" date="1499169600">- Update to version 0.16.8:
  * Fix rejoining MUCs after connection loss
  * Fix Groupchat invites
  * Fix encoding problems with newer GnuPG versions
  * Fix old messages randomly reappearing in the chat window
  * Fix some problems with IBB filetransfer
  * Make XEP-0146 Commands opt-in
  * Improve sending messages to your own resources
  * Improve reliability of delivery recipes
  * Many minor bugfixes
- Add gajim-do_not_ship_certificate.patch.in: Do not package
  bundled PEM certificate, use one provided by package
  `ca-certificates-mozilla' instead.
- Remove gajim-0.16.7-default-disable-xep-0146.patch: Not needed
  anymore, patch applied upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Trim filler wording from description.</changelog>
  <changelog author="mvetter@suse.com" date="1512475200">- Update to 0.16.9:
  * Improve Zeroconf behavior
  * Fix showing normal message event
  * remove usage of OpenSSL.rand
  * a few minor bugfixes
- Update of icon cache and desktop file only in case of older
  distribution</changelog>
  <changelog author="frede@b1-systems.de" date="1513166400">- Add Requires:       python-nbxmpp &gt;= 0.6.1</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521288000">- Update to version 1.0.0:
  * Ported to GTK+3 / Python3.
  * Integrate HTTPUpload.
  * Add Navigation buttons in History Window.
  * Improvements for HiDPI Screens.
  * Depend on the python keyring package for password storage.
  * Lots of refactoring.
  * New Emoji support.
  * New Chat Window design.
  * New StartChat Window (Ctrl+N).
  * New ServerInfo Window.
  * AccountWindow Redesign.
  * Move some encryption code out into Plugins (see PGP Plugin,
    Esessions Plugin).
  * Add mam:1 and mam:2 support (mam:0 was removed).
  * Add MAM for MUCs support.
  * Add support for showing XEP-0084 Avatars.
  * Add support for geo: URIs.
  * Add xmpp URI handling directly in Gajim.
  * Remove Gajim-Remote.
  * Remove XEP-0012 (Last Activity).
  * Remove XEP-0136 (Message Archiving).
  * Add XEP-0156 (Discovering Alternative XMPP Connection Methods).
  * Add XEP-0319 (Last User Interaction in Presence).
  * Add XEP-0368 (SRV records for XMPP over TLS).
  * Add XEP-0380 (Explicit Message Encryption).
  * Add Jingle FT:5 support.
  * Lots of other small bugfixes.
- Rebase gajim-do_not_ship_certificate.patch.in.
- Update requirements and recommendations:
  also require things that are not strictly required if they are
  harmless and definitely available.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1522670400">- Update to version 1.0.1:
  * Improve MAM support.
  * Image preview in the file chooser dialogue.
  * Groupchat: Set minimise on auto join default to true.
  * Delete a bookmark when we destroy a room.
  * Fix account deletion.
  * Fix custom font handling.
  * Fix OpenPGP message decryption.
  * Fix window position restore on multi-head setups.
  * Fix scrolling in message window.</changelog>
  <changelog author="dev@stellardeath.org" date="1523188800">- Add the python3-axolotl package to recommends to make OMEMO work
  out of the box.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1525348800">- Update to version 1.0.2:
  * Server name was rejected for group chat bookmarks.
  * setup.py install missed some files if used with "--skip-build".
  * Password was sometimes stored in plaintext.
  * Do not show an error when receiving invalid avatars.
  * Fix no Licence in the About dialogue.
  * Encode filenames before sending.
  * Catch invalid IQ stanzas and log them.
  * XMPP logo in "Add New Contact" window instead Gajim logo.
  * Mark some strings as translatable.
  * Fix an error on file send completion.
  * Removing a bookmark caused an error.
  * Avatar is deleted when updating vCard.
  * Account label didn't change in tooltip of notification area
    icon.
  * Placeholder text didn't disappear.
  * Fix History Manager search.
  * Proxy comobobox in accounts/connections didn't get updated
    after ManageProxies.
  * Fix a problem receiving files.
  * Notification never autohides in gnome.
  * Correctly reload Plugins.
  * Save history export with utf8 encoding.
  * Dont allow plain BOSH by default.</changelog>
  <changelog author="tbro@opensuse.org" date="1526126400">- Fixed dependency in spec file on python3-nbxmpp 0.6.5:
  * With python3-nbxmpp 0.6.4 the newest version of gajim broke</changelog>
  <changelog author="frede@b1-systems.de" date="1526299200">- Fixed dependency in spec file on python3 &gt;= 3.5.0:
  * since Leap 42.3 and SLES 12 have only 3.4.6 they will not work
- Fixed dependency in spec file on python3-nbxmpp 0.6.5:
  * changed the also the required not only build-required</changelog>
  <changelog author="mvetter@suse.com" date="1526731200">- Update to 1.0.3:
  * bug 8296 Fix errors on roster updates after stream management resume
  * bug 9106 Convert font weight from pango to css values
  * bug 9124 Bring ChatControl to front when notification is clicked
  * Set no-store hint on groupchat chatstates
  * Dont show OOB uri if message body is the same
  * Add missing bybonjour dependency for Windows zeroconf
- Remove Require for pyasn1: not needed anymore</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1527076800">- Symlink the system PEM certfiicate to the path where
  Plugin Installer expects it to be instead of patching
  Plugin Installer as it can be updated locally unpatched and thus
  fail to work (boo#1094343).
- Remove gajim-do_not_ship_certificate.patch.in: no longer needed.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1537790400">- Add some missing dependencies (boo#1109355).</changelog>
</package>
<package pkgid="bb795640adb618bc241d84ed04ed29c235a1df3c764f56fb68197f436a521a27" name="gajim-lang" arch="noarch">
  <version epoch="0" ver="1.0.3" rel="lp150.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1437825600">- Update to 0.16.2:
  * Improve Zeroconf (Avahi) with IPv6.
  * Fix errors with GnuPG.
  * Minor fixes and improvements.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1438516800">- Update to 0.16.3:
  * Fix reading secret file.
  * Fix reconnection after suspend.
  * Fix sending GPG-encrypted file to non-trusted key.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1443355200">- Update to 0.16.4:
  * Fix trusting GPG keys.
  * Ability to disable synchronisation of logs with server.
  * Improve MAM usage.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1451390400">- Update to 0.16.5:
  * Improve MAM implementation.
  * Improve security on connexion and for roster managment
    (rh#1295475, bsc#960668, CVE-2015-8688)
  * Ability for emoticons to be sorted in menu.</changelog>
  <changelog author="mvetter@suse.com" date="1464091200">- Add gajim-remote-dont-show.patch:
  gajim-remote is cli only. Dont list it in menus.
- If python-gstreamer-0_10 is installed the error message
  'ImportError: could not import gst' is not shown.
  See: https://trac.gajim.org/ticket/7836</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1476360000">- Update to version 0.16.6:
  * Fix using gpg2.
  * Improve message receips usage.
  * Improve roster filtering.
  * Fix several minor bugs.
- Remove gajim-remote-dont-show.patch: merged upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494331200">- Update to version 0.16.7:
  * Better compatibility with XEP-0191: Blocking Command.
  * Gajim now depends on python-gnupg for PGP encryption.
  * Remove usage of demandimport.
  * Many minor bugfixes.
- Move python-farstream-0_1 to Suggests.
- Correct the licence to GPL-3.0.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496059200">- Add gajim-0.16.7-default-disable-xep-0146.patch by
  Philipp Hörist: Add a config option to activate XEP-0146 commands
  (commit cb65cfc, CVE-2016-10376, bsc#1041163).</changelog>
  <changelog author="vilene@posteo.net" date="1499169600">- Update to version 0.16.8:
  * Fix rejoining MUCs after connection loss
  * Fix Groupchat invites
  * Fix encoding problems with newer GnuPG versions
  * Fix old messages randomly reappearing in the chat window
  * Fix some problems with IBB filetransfer
  * Make XEP-0146 Commands opt-in
  * Improve sending messages to your own resources
  * Improve reliability of delivery recipes
  * Many minor bugfixes
- Add gajim-do_not_ship_certificate.patch.in: Do not package
  bundled PEM certificate, use one provided by package
  `ca-certificates-mozilla' instead.
- Remove gajim-0.16.7-default-disable-xep-0146.patch: Not needed
  anymore, patch applied upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Trim filler wording from description.</changelog>
  <changelog author="mvetter@suse.com" date="1512475200">- Update to 0.16.9:
  * Improve Zeroconf behavior
  * Fix showing normal message event
  * remove usage of OpenSSL.rand
  * a few minor bugfixes
- Update of icon cache and desktop file only in case of older
  distribution</changelog>
  <changelog author="frede@b1-systems.de" date="1513166400">- Add Requires:       python-nbxmpp &gt;= 0.6.1</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521288000">- Update to version 1.0.0:
  * Ported to GTK+3 / Python3.
  * Integrate HTTPUpload.
  * Add Navigation buttons in History Window.
  * Improvements for HiDPI Screens.
  * Depend on the python keyring package for password storage.
  * Lots of refactoring.
  * New Emoji support.
  * New Chat Window design.
  * New StartChat Window (Ctrl+N).
  * New ServerInfo Window.
  * AccountWindow Redesign.
  * Move some encryption code out into Plugins (see PGP Plugin,
    Esessions Plugin).
  * Add mam:1 and mam:2 support (mam:0 was removed).
  * Add MAM for MUCs support.
  * Add support for showing XEP-0084 Avatars.
  * Add support for geo: URIs.
  * Add xmpp URI handling directly in Gajim.
  * Remove Gajim-Remote.
  * Remove XEP-0012 (Last Activity).
  * Remove XEP-0136 (Message Archiving).
  * Add XEP-0156 (Discovering Alternative XMPP Connection Methods).
  * Add XEP-0319 (Last User Interaction in Presence).
  * Add XEP-0368 (SRV records for XMPP over TLS).
  * Add XEP-0380 (Explicit Message Encryption).
  * Add Jingle FT:5 support.
  * Lots of other small bugfixes.
- Rebase gajim-do_not_ship_certificate.patch.in.
- Update requirements and recommendations:
  also require things that are not strictly required if they are
  harmless and definitely available.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1522670400">- Update to version 1.0.1:
  * Improve MAM support.
  * Image preview in the file chooser dialogue.
  * Groupchat: Set minimise on auto join default to true.
  * Delete a bookmark when we destroy a room.
  * Fix account deletion.
  * Fix custom font handling.
  * Fix OpenPGP message decryption.
  * Fix window position restore on multi-head setups.
  * Fix scrolling in message window.</changelog>
  <changelog author="dev@stellardeath.org" date="1523188800">- Add the python3-axolotl package to recommends to make OMEMO work
  out of the box.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1525348800">- Update to version 1.0.2:
  * Server name was rejected for group chat bookmarks.
  * setup.py install missed some files if used with "--skip-build".
  * Password was sometimes stored in plaintext.
  * Do not show an error when receiving invalid avatars.
  * Fix no Licence in the About dialogue.
  * Encode filenames before sending.
  * Catch invalid IQ stanzas and log them.
  * XMPP logo in "Add New Contact" window instead Gajim logo.
  * Mark some strings as translatable.
  * Fix an error on file send completion.
  * Removing a bookmark caused an error.
  * Avatar is deleted when updating vCard.
  * Account label didn't change in tooltip of notification area
    icon.
  * Placeholder text didn't disappear.
  * Fix History Manager search.
  * Proxy comobobox in accounts/connections didn't get updated
    after ManageProxies.
  * Fix a problem receiving files.
  * Notification never autohides in gnome.
  * Correctly reload Plugins.
  * Save history export with utf8 encoding.
  * Dont allow plain BOSH by default.</changelog>
  <changelog author="tbro@opensuse.org" date="1526126400">- Fixed dependency in spec file on python3-nbxmpp 0.6.5:
  * With python3-nbxmpp 0.6.4 the newest version of gajim broke</changelog>
  <changelog author="frede@b1-systems.de" date="1526299200">- Fixed dependency in spec file on python3 &gt;= 3.5.0:
  * since Leap 42.3 and SLES 12 have only 3.4.6 they will not work
- Fixed dependency in spec file on python3-nbxmpp 0.6.5:
  * changed the also the required not only build-required</changelog>
  <changelog author="mvetter@suse.com" date="1526731200">- Update to 1.0.3:
  * bug 8296 Fix errors on roster updates after stream management resume
  * bug 9106 Convert font weight from pango to css values
  * bug 9124 Bring ChatControl to front when notification is clicked
  * Set no-store hint on groupchat chatstates
  * Dont show OOB uri if message body is the same
  * Add missing bybonjour dependency for Windows zeroconf
- Remove Require for pyasn1: not needed anymore</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1527076800">- Symlink the system PEM certfiicate to the path where
  Plugin Installer expects it to be instead of patching
  Plugin Installer as it can be updated locally unpatched and thus
  fail to work (boo#1094343).
- Remove gajim-do_not_ship_certificate.patch.in: no longer needed.</changelog>
</package>
<package pkgid="f4c358934469bc3f129030ec37f79a37b97b03e92010c428e53c3831788b3216" name="gajim-lang" arch="noarch">
  <version epoch="0" ver="1.0.3" rel="lp150.3.6.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1438516800">- Update to 0.16.3:
  * Fix reading secret file.
  * Fix reconnection after suspend.
  * Fix sending GPG-encrypted file to non-trusted key.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1443355200">- Update to 0.16.4:
  * Fix trusting GPG keys.
  * Ability to disable synchronisation of logs with server.
  * Improve MAM usage.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1451390400">- Update to 0.16.5:
  * Improve MAM implementation.
  * Improve security on connexion and for roster managment
    (rh#1295475, bsc#960668, CVE-2015-8688)
  * Ability for emoticons to be sorted in menu.</changelog>
  <changelog author="mvetter@suse.com" date="1464091200">- Add gajim-remote-dont-show.patch:
  gajim-remote is cli only. Dont list it in menus.
- If python-gstreamer-0_10 is installed the error message
  'ImportError: could not import gst' is not shown.
  See: https://trac.gajim.org/ticket/7836</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1476360000">- Update to version 0.16.6:
  * Fix using gpg2.
  * Improve message receips usage.
  * Improve roster filtering.
  * Fix several minor bugs.
- Remove gajim-remote-dont-show.patch: merged upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494331200">- Update to version 0.16.7:
  * Better compatibility with XEP-0191: Blocking Command.
  * Gajim now depends on python-gnupg for PGP encryption.
  * Remove usage of demandimport.
  * Many minor bugfixes.
- Move python-farstream-0_1 to Suggests.
- Correct the licence to GPL-3.0.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496059200">- Add gajim-0.16.7-default-disable-xep-0146.patch by
  Philipp Hörist: Add a config option to activate XEP-0146 commands
  (commit cb65cfc, CVE-2016-10376, bsc#1041163).</changelog>
  <changelog author="vilene@posteo.net" date="1499169600">- Update to version 0.16.8:
  * Fix rejoining MUCs after connection loss
  * Fix Groupchat invites
  * Fix encoding problems with newer GnuPG versions
  * Fix old messages randomly reappearing in the chat window
  * Fix some problems with IBB filetransfer
  * Make XEP-0146 Commands opt-in
  * Improve sending messages to your own resources
  * Improve reliability of delivery recipes
  * Many minor bugfixes
- Add gajim-do_not_ship_certificate.patch.in: Do not package
  bundled PEM certificate, use one provided by package
  `ca-certificates-mozilla' instead.
- Remove gajim-0.16.7-default-disable-xep-0146.patch: Not needed
  anymore, patch applied upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Trim filler wording from description.</changelog>
  <changelog author="mvetter@suse.com" date="1512475200">- Update to 0.16.9:
  * Improve Zeroconf behavior
  * Fix showing normal message event
  * remove usage of OpenSSL.rand
  * a few minor bugfixes
- Update of icon cache and desktop file only in case of older
  distribution</changelog>
  <changelog author="frede@b1-systems.de" date="1513166400">- Add Requires:       python-nbxmpp &gt;= 0.6.1</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521288000">- Update to version 1.0.0:
  * Ported to GTK+3 / Python3.
  * Integrate HTTPUpload.
  * Add Navigation buttons in History Window.
  * Improvements for HiDPI Screens.
  * Depend on the python keyring package for password storage.
  * Lots of refactoring.
  * New Emoji support.
  * New Chat Window design.
  * New StartChat Window (Ctrl+N).
  * New ServerInfo Window.
  * AccountWindow Redesign.
  * Move some encryption code out into Plugins (see PGP Plugin,
    Esessions Plugin).
  * Add mam:1 and mam:2 support (mam:0 was removed).
  * Add MAM for MUCs support.
  * Add support for showing XEP-0084 Avatars.
  * Add support for geo: URIs.
  * Add xmpp URI handling directly in Gajim.
  * Remove Gajim-Remote.
  * Remove XEP-0012 (Last Activity).
  * Remove XEP-0136 (Message Archiving).
  * Add XEP-0156 (Discovering Alternative XMPP Connection Methods).
  * Add XEP-0319 (Last User Interaction in Presence).
  * Add XEP-0368 (SRV records for XMPP over TLS).
  * Add XEP-0380 (Explicit Message Encryption).
  * Add Jingle FT:5 support.
  * Lots of other small bugfixes.
- Rebase gajim-do_not_ship_certificate.patch.in.
- Update requirements and recommendations:
  also require things that are not strictly required if they are
  harmless and definitely available.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1522670400">- Update to version 1.0.1:
  * Improve MAM support.
  * Image preview in the file chooser dialogue.
  * Groupchat: Set minimise on auto join default to true.
  * Delete a bookmark when we destroy a room.
  * Fix account deletion.
  * Fix custom font handling.
  * Fix OpenPGP message decryption.
  * Fix window position restore on multi-head setups.
  * Fix scrolling in message window.</changelog>
  <changelog author="dev@stellardeath.org" date="1523188800">- Add the python3-axolotl package to recommends to make OMEMO work
  out of the box.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1525348800">- Update to version 1.0.2:
  * Server name was rejected for group chat bookmarks.
  * setup.py install missed some files if used with "--skip-build".
  * Password was sometimes stored in plaintext.
  * Do not show an error when receiving invalid avatars.
  * Fix no Licence in the About dialogue.
  * Encode filenames before sending.
  * Catch invalid IQ stanzas and log them.
  * XMPP logo in "Add New Contact" window instead Gajim logo.
  * Mark some strings as translatable.
  * Fix an error on file send completion.
  * Removing a bookmark caused an error.
  * Avatar is deleted when updating vCard.
  * Account label didn't change in tooltip of notification area
    icon.
  * Placeholder text didn't disappear.
  * Fix History Manager search.
  * Proxy comobobox in accounts/connections didn't get updated
    after ManageProxies.
  * Fix a problem receiving files.
  * Notification never autohides in gnome.
  * Correctly reload Plugins.
  * Save history export with utf8 encoding.
  * Dont allow plain BOSH by default.</changelog>
  <changelog author="tbro@opensuse.org" date="1526126400">- Fixed dependency in spec file on python3-nbxmpp 0.6.5:
  * With python3-nbxmpp 0.6.4 the newest version of gajim broke</changelog>
  <changelog author="frede@b1-systems.de" date="1526299200">- Fixed dependency in spec file on python3 &gt;= 3.5.0:
  * since Leap 42.3 and SLES 12 have only 3.4.6 they will not work
- Fixed dependency in spec file on python3-nbxmpp 0.6.5:
  * changed the also the required not only build-required</changelog>
  <changelog author="mvetter@suse.com" date="1526731200">- Update to 1.0.3:
  * bug 8296 Fix errors on roster updates after stream management resume
  * bug 9106 Convert font weight from pango to css values
  * bug 9124 Bring ChatControl to front when notification is clicked
  * Set no-store hint on groupchat chatstates
  * Dont show OOB uri if message body is the same
  * Add missing bybonjour dependency for Windows zeroconf
- Remove Require for pyasn1: not needed anymore</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1527076800">- Symlink the system PEM certfiicate to the path where
  Plugin Installer expects it to be instead of patching
  Plugin Installer as it can be updated locally unpatched and thus
  fail to work (boo#1094343).
- Remove gajim-do_not_ship_certificate.patch.in: no longer needed.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1537790400">- Add some missing dependencies (boo#1109355).</changelog>
</package>
<package pkgid="1be303a509b4fc6410f695996131992f32f7eb8c68fd05396f6a4dab39286b0e" name="gcompris-qt" arch="src">
  <version epoch="0" ver="0.91" rel="lp150.3.3.1"/>
  <changelog author="bruno@ioda-net.ch" date="1451736000">- Added upstream patch for Box2D qml-box2d detection
  robustify_Qt-plugin_and_qml-path_detection.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453118400">- Update to upstream 0.52 new version
  It includes all the little patches and improvements from master (
  without new activities or features). Most important is the
  lang activity that was not available in French.
- Remove upstream merged patches
  add-option-to-disable-qml-box2d-module-and-depending-activites.patch
  robustify_Qt-plugin_and_qml-path_detection.patch
- Refreshed content of voices-ogg</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453291200">- Added upstream patch fixing build errors on 13.2
  upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1464177600">- Update to upstream 0.60 new version
- remove merged upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467547200">- Packaging :
  + fix upstream url source
  + Remove second %changelog
  + Add rpmlintrc (man page for binary)
- Refresh voices.tar.xz with recent upstream updates</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467720000">- Fixed definitively upstream src url checked with obs service.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468756800">- Added also as sources in spec
  + gcompris-qt-rpmlintrc
  + fetch_voices.sh</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- Set data file subpackages to noarch. Trim long description.</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Split voices off to separate SRPM
- Rename -translations subpackage to -lang</changelog>
  <changelog author="bruno@ioda-net.ch" date="1470657600">- Update to last bugfix enhancement upstream revision 0.61
  Complete release changes at http://gcompris.net/news-en.html
  + New activities are:
    baby_word_processor
    tangram
    explore_momuments
    graph_coloring
    land_safe
    photo_hunter
  + Updated images for chess, hangman and horizontal/vertical
    reading activities along with the gcompris logo.
  + Lots of little fixes/improvements have been done (storing and
    restoring the window's width/height at start-up, docbook
    updated, levels/images bonus, adding an internal dataset for
    words games so that we no more expect the network to run
    GCompris.
  + Translation side 17 languages fully supported:
    Belarusian, British English, Brazilian Portuguese, Catalan,
    Catalan (Valencian), Chinese Simplified, Dutch, French,
    Galician, Italian, Norwegian Nynorsk, Polish, Portuguese,
    Romanian, Spanish, Swedish, Ukrainian.
  + some partially: Breton (88%), Chinese Traditional (97%),
    Estonian (82%), Finnish (74%), German (93%), Russian (83%),
    Slovak (76%), Slovenian (82%), Turkish (82%)</changelog>
  <changelog author="wbauer@tmo.at" date="1479556800">- Require libQt5Multimedia5 and libqt5-qtquickcontrols, it doesn't
  start without them (boo#1011125)</changelog>
  <changelog author="wbauer@tmo.at" date="1479729600">- Also require libqt5-qtgraphicaleffects, that's needed too</changelog>
  <changelog author="bruno@ioda-net.ch" date="1482580800">- New 0.70 version contains 8 new activities, half of them being
  created by last Google Summer of Code students:
  * an activity where the child has to move elements to build a
    given model (crane by Stefan Toncu)
  * an activity to draw the numbers (drawnumbers by Nitish Chauhan)
  * an activity to draw the letters (drawletters by Nitish Chauhan)
  * an activity to find on which words a given letter belongs
    (letter-in-word by Akshat Tandon)
  * the nine men morris game against Tux (nine_men_morris by Pulkit
    Gupta)
  * the nine men morris game with a friend
    (nine_men_morris_2_players by Pulkit Gupta)
  * an activity to learn to split a given number of candies amongst
    children (share by Stefan Toncu)
  * an activity to learn roman numbers (roman_numerals by Bruno
    Coudoin)
  + new features and bug fixes:
  * search feature by Rishabh Gupta
  * windows build by Bruno Coudoin and Johnny Jazeix
  * hint icon in the bar (used in photohunter) by Johnny Jazeix
  * neon build by Jonathan Riddell
  * openSUSE Tumbleweed build by Bruno Friedmann
  * archlinux (https://aur.archlinux.org/packages/gcompris-qt/)
    by Jose Riha
  * KaOS (http://kaosx.tk/packages/index.php?act=show&amp;subdir=\
    build&amp;sortby=date&amp;file=gcompris-0.70-1-x86_64.pkg.tar.xz)
    by demm
  * package on mageia cauldron by Timothee Giet
  * word list for Slovakia by Jose Riha
  * word list for Belarusian by Antos Vaclauski
  * updates on Romanian wordlists and voices by Horia Pelle
  * voices added for Portuguese Brazilian by Marcos D.
  * new graphics for crane by Timothee Giet
  * screenshots on gcompris.net updated to the Qt version
- Update gcompris-qt-voices to 20161224 version</changelog>
  <changelog author="bruno@ioda-net.ch" date="1486987200">- Add missing requires : libQt5Svg5 and qml-box2d that obs/rpm
  doesn't add when they should.
  Fixing empty gcompris-qt on pure leap Gnome3 installation.
- Add missing desktop, appdata, icon files
- Fix copyright year</changelog>
  <changelog author="bruno@ioda-net.ch" date="1503748800">- Upgrade to last release 0.80
  This new version contains 6 new activities:
  + a categorization activity where the child has to categorize
    item depending on the theme (by Divyam Madaan)
  + a guess count game where the child has to find the good
    operations to find a given number (by Rahul Yadav)
  + a game where you have to let the computer put the last ball in
    a row (by Utkarsh Tiwari)
  + as above but the child plays with a friend (Utkarsh Tiwari)
  + a checkers game (by Johnny Jazeix)
  + as above but the child plays with a friend (by Johnny Jazeix)
  We always have new features and content:
  + Polish lang dataset by ?ukasz Wojni?owicz
  + Swedish lang dataset by Stefan Asserhäll
  + Ukrainian lang dataset by Yuri Chornoivan
  + new icons
  + Updated graphics on several activities
  + lots of bug fixes
  + website translation migrated to KDE infrastructure and
    translated in Belarusian, Catalan, Catalan (Valencia),
    Romanian, Portuguese and Ukrainian
  + new mingw windows builds
  + partial translations in Greek and Hindi
- Packaging :
  + Fix icons included (the real svg is used now upstream)
  + Add appinfo and metainfo
  + Raise minimal QT version to be &gt;= 5.6.0 upstream #6c203a3</changelog>
  <changelog author="bruno@ioda-net.ch" date="1506772800">- Upgrade to bugfix release 0.81 the most important changes are:
  + Categorization, fix the "Shape" category
  + Categorization, fix the menu layout
  + Categorization, display score in expert mode
  + Guesscount, fix invalid result
  + Add Indonesian locale
  + Fix the missing copyright and licence info
  + Fix a font issue on windows version
  + Add a new minimal version with software rendering
    (requires Qt 5.8)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1521028800">- Upgrade to new 0.90 version
  + 8 new activities:
  * A calendar activity where the child learns how to use it
  * Another activity based on calendar where the child has to find
    the date corresponding at a date + some days further/before
    this date
  * An activity to learn how people on a family are related and how
    to call this relation
  * Another similar activity with questions about family members
  * An extension of memory activities where the child has to match
    lowercase letters with their corresponding uppercase
  * The same activity in two players mode with Tux
  * The Gtk+ port and improved submarine activity where the child
    learns a basic overview on how to run a submarine
  * The digital electricity activity where the child can use
    different components to create an electric schema. There is also
    a tutorial mode to explain how to use each component
  + bug fixes:
  * Irish translation, voices and datasets by Séamus Ó Briain
  * Updated graphics on several activities
  * Lot of improvements on removing overriding elements issues
    (score were hidden behind the bar...)
  * Add Tutorial item to be able to have activity introductions
    with both images and texts
  * Add easy mode in letter in word with less words displayed
  * Add license page
  * Lots of small bug fixes
- Modernize spec file with spec-cleaner -m</changelog>
  <changelog author="mimi.vx@gmail.com" date="1521547200">- Provide and obsolette original gtk gcompris
- use secure optflags on all distributions.
- and use proper cmake macros for build</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526558400">- Upgrade to new 0.91 version
  summary of changes
  + Activities:
  - fix English text in several activities
  - fix score position in several activities
  - block some buttons and interactions when needed in several
    places
  - lots of fixes for audio in several activities
  - number_sequence (and others based on it), fix base layout
  - update dataset for clickanddraw, drawnumbers and drawletters
  - crane, add localized dataset
  - lightsoff, add keyboard support and other fixes
  - algorithm, add keyboard support and other fixes
  - money, fixes for locale currency used
  - ballcatch, improve audio feedback
  - calendar, several little fixes
  - memory-case-association fix icons size
  ° Other changes:
  - re-enable sound effects on linux
  - improved playback of sound effects, no more delay
  - add captions to images and OARS tags in the appdata
  - add Scottish Gaelic to core, and update some datasets for it
  - main bar, fix some items size
  - remove unused images
  + Translations
  16 languages fully supported: British English, Catalan, Catalan
  (Valencian), Chinese Traditional, Dutch, French, Greek,
  Indonesian, Irish Gaelic, Italian, Polish, Portuguese, Romanian,
  Spanish, Swedish, Ukrainian.
  15 languages partially supported: Norwegian Nynorsk (97%), Hindi
  (96%), Turkish (90%), Scottish Gaelic (86%), Galician (86%),
  Brazilian Portuguese (84%), Belarusian (84%), German (81%),
  Chinese Simplified (79%), Russian (78%), Estonian (77%), Slovak
  (76%), Finnish (76%), Slovenian (69%), Breton (65%).
  If you want to help completing one of these translations or
  adding a new one, please contact upstream.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526817600">- Fix boo#1093988 for Leap 15.0</changelog>
</package>
<package pkgid="d1a3105e311ac75fea88da12ea1af448926aed83ce8b0d04173c106e0b48be3d" name="gcompris-qt" arch="x86_64">
  <version epoch="0" ver="0.91" rel="lp150.3.3.1"/>
  <changelog author="bruno@ioda-net.ch" date="1451736000">- Added upstream patch for Box2D qml-box2d detection
  robustify_Qt-plugin_and_qml-path_detection.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453118400">- Update to upstream 0.52 new version
  It includes all the little patches and improvements from master (
  without new activities or features). Most important is the
  lang activity that was not available in French.
- Remove upstream merged patches
  add-option-to-disable-qml-box2d-module-and-depending-activites.patch
  robustify_Qt-plugin_and_qml-path_detection.patch
- Refreshed content of voices-ogg</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453291200">- Added upstream patch fixing build errors on 13.2
  upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1464177600">- Update to upstream 0.60 new version
- remove merged upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467547200">- Packaging :
  + fix upstream url source
  + Remove second %changelog
  + Add rpmlintrc (man page for binary)
- Refresh voices.tar.xz with recent upstream updates</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467720000">- Fixed definitively upstream src url checked with obs service.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468756800">- Added also as sources in spec
  + gcompris-qt-rpmlintrc
  + fetch_voices.sh</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- Set data file subpackages to noarch. Trim long description.</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Split voices off to separate SRPM
- Rename -translations subpackage to -lang</changelog>
  <changelog author="bruno@ioda-net.ch" date="1470657600">- Update to last bugfix enhancement upstream revision 0.61
  Complete release changes at http://gcompris.net/news-en.html
  + New activities are:
    baby_word_processor
    tangram
    explore_momuments
    graph_coloring
    land_safe
    photo_hunter
  + Updated images for chess, hangman and horizontal/vertical
    reading activities along with the gcompris logo.
  + Lots of little fixes/improvements have been done (storing and
    restoring the window's width/height at start-up, docbook
    updated, levels/images bonus, adding an internal dataset for
    words games so that we no more expect the network to run
    GCompris.
  + Translation side 17 languages fully supported:
    Belarusian, British English, Brazilian Portuguese, Catalan,
    Catalan (Valencian), Chinese Simplified, Dutch, French,
    Galician, Italian, Norwegian Nynorsk, Polish, Portuguese,
    Romanian, Spanish, Swedish, Ukrainian.
  + some partially: Breton (88%), Chinese Traditional (97%),
    Estonian (82%), Finnish (74%), German (93%), Russian (83%),
    Slovak (76%), Slovenian (82%), Turkish (82%)</changelog>
  <changelog author="wbauer@tmo.at" date="1479556800">- Require libQt5Multimedia5 and libqt5-qtquickcontrols, it doesn't
  start without them (boo#1011125)</changelog>
  <changelog author="wbauer@tmo.at" date="1479729600">- Also require libqt5-qtgraphicaleffects, that's needed too</changelog>
  <changelog author="bruno@ioda-net.ch" date="1482580800">- New 0.70 version contains 8 new activities, half of them being
  created by last Google Summer of Code students:
  * an activity where the child has to move elements to build a
    given model (crane by Stefan Toncu)
  * an activity to draw the numbers (drawnumbers by Nitish Chauhan)
  * an activity to draw the letters (drawletters by Nitish Chauhan)
  * an activity to find on which words a given letter belongs
    (letter-in-word by Akshat Tandon)
  * the nine men morris game against Tux (nine_men_morris by Pulkit
    Gupta)
  * the nine men morris game with a friend
    (nine_men_morris_2_players by Pulkit Gupta)
  * an activity to learn to split a given number of candies amongst
    children (share by Stefan Toncu)
  * an activity to learn roman numbers (roman_numerals by Bruno
    Coudoin)
  + new features and bug fixes:
  * search feature by Rishabh Gupta
  * windows build by Bruno Coudoin and Johnny Jazeix
  * hint icon in the bar (used in photohunter) by Johnny Jazeix
  * neon build by Jonathan Riddell
  * openSUSE Tumbleweed build by Bruno Friedmann
  * archlinux (https://aur.archlinux.org/packages/gcompris-qt/)
    by Jose Riha
  * KaOS (http://kaosx.tk/packages/index.php?act=show&amp;subdir=\
    build&amp;sortby=date&amp;file=gcompris-0.70-1-x86_64.pkg.tar.xz)
    by demm
  * package on mageia cauldron by Timothee Giet
  * word list for Slovakia by Jose Riha
  * word list for Belarusian by Antos Vaclauski
  * updates on Romanian wordlists and voices by Horia Pelle
  * voices added for Portuguese Brazilian by Marcos D.
  * new graphics for crane by Timothee Giet
  * screenshots on gcompris.net updated to the Qt version
- Update gcompris-qt-voices to 20161224 version</changelog>
  <changelog author="bruno@ioda-net.ch" date="1486987200">- Add missing requires : libQt5Svg5 and qml-box2d that obs/rpm
  doesn't add when they should.
  Fixing empty gcompris-qt on pure leap Gnome3 installation.
- Add missing desktop, appdata, icon files
- Fix copyright year</changelog>
  <changelog author="bruno@ioda-net.ch" date="1503748800">- Upgrade to last release 0.80
  This new version contains 6 new activities:
  + a categorization activity where the child has to categorize
    item depending on the theme (by Divyam Madaan)
  + a guess count game where the child has to find the good
    operations to find a given number (by Rahul Yadav)
  + a game where you have to let the computer put the last ball in
    a row (by Utkarsh Tiwari)
  + as above but the child plays with a friend (Utkarsh Tiwari)
  + a checkers game (by Johnny Jazeix)
  + as above but the child plays with a friend (by Johnny Jazeix)
  We always have new features and content:
  + Polish lang dataset by ?ukasz Wojni?owicz
  + Swedish lang dataset by Stefan Asserhäll
  + Ukrainian lang dataset by Yuri Chornoivan
  + new icons
  + Updated graphics on several activities
  + lots of bug fixes
  + website translation migrated to KDE infrastructure and
    translated in Belarusian, Catalan, Catalan (Valencia),
    Romanian, Portuguese and Ukrainian
  + new mingw windows builds
  + partial translations in Greek and Hindi
- Packaging :
  + Fix icons included (the real svg is used now upstream)
  + Add appinfo and metainfo
  + Raise minimal QT version to be &gt;= 5.6.0 upstream #6c203a3</changelog>
  <changelog author="bruno@ioda-net.ch" date="1506772800">- Upgrade to bugfix release 0.81 the most important changes are:
  + Categorization, fix the "Shape" category
  + Categorization, fix the menu layout
  + Categorization, display score in expert mode
  + Guesscount, fix invalid result
  + Add Indonesian locale
  + Fix the missing copyright and licence info
  + Fix a font issue on windows version
  + Add a new minimal version with software rendering
    (requires Qt 5.8)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1521028800">- Upgrade to new 0.90 version
  + 8 new activities:
  * A calendar activity where the child learns how to use it
  * Another activity based on calendar where the child has to find
    the date corresponding at a date + some days further/before
    this date
  * An activity to learn how people on a family are related and how
    to call this relation
  * Another similar activity with questions about family members
  * An extension of memory activities where the child has to match
    lowercase letters with their corresponding uppercase
  * The same activity in two players mode with Tux
  * The Gtk+ port and improved submarine activity where the child
    learns a basic overview on how to run a submarine
  * The digital electricity activity where the child can use
    different components to create an electric schema. There is also
    a tutorial mode to explain how to use each component
  + bug fixes:
  * Irish translation, voices and datasets by Séamus Ó Briain
  * Updated graphics on several activities
  * Lot of improvements on removing overriding elements issues
    (score were hidden behind the bar...)
  * Add Tutorial item to be able to have activity introductions
    with both images and texts
  * Add easy mode in letter in word with less words displayed
  * Add license page
  * Lots of small bug fixes
- Modernize spec file with spec-cleaner -m</changelog>
  <changelog author="mimi.vx@gmail.com" date="1521547200">- Provide and obsolette original gtk gcompris
- use secure optflags on all distributions.
- and use proper cmake macros for build</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526558400">- Upgrade to new 0.91 version
  summary of changes
  + Activities:
  - fix English text in several activities
  - fix score position in several activities
  - block some buttons and interactions when needed in several
    places
  - lots of fixes for audio in several activities
  - number_sequence (and others based on it), fix base layout
  - update dataset for clickanddraw, drawnumbers and drawletters
  - crane, add localized dataset
  - lightsoff, add keyboard support and other fixes
  - algorithm, add keyboard support and other fixes
  - money, fixes for locale currency used
  - ballcatch, improve audio feedback
  - calendar, several little fixes
  - memory-case-association fix icons size
  ° Other changes:
  - re-enable sound effects on linux
  - improved playback of sound effects, no more delay
  - add captions to images and OARS tags in the appdata
  - add Scottish Gaelic to core, and update some datasets for it
  - main bar, fix some items size
  - remove unused images
  + Translations
  16 languages fully supported: British English, Catalan, Catalan
  (Valencian), Chinese Traditional, Dutch, French, Greek,
  Indonesian, Irish Gaelic, Italian, Polish, Portuguese, Romanian,
  Spanish, Swedish, Ukrainian.
  15 languages partially supported: Norwegian Nynorsk (97%), Hindi
  (96%), Turkish (90%), Scottish Gaelic (86%), Galician (86%),
  Brazilian Portuguese (84%), Belarusian (84%), German (81%),
  Chinese Simplified (79%), Russian (78%), Estonian (77%), Slovak
  (76%), Finnish (76%), Slovenian (69%), Breton (65%).
  If you want to help completing one of these translations or
  adding a new one, please contact upstream.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526817600">- Fix boo#1093988 for Leap 15.0</changelog>
</package>
<package pkgid="56190b217c73ccc41841c02241f70c8b0b4a4d1d71f934ba713a036c74f0c6e9" name="gcompris-qt-activities" arch="noarch">
  <version epoch="0" ver="0.91" rel="lp150.3.3.1"/>
  <changelog author="bruno@ioda-net.ch" date="1451736000">- Added upstream patch for Box2D qml-box2d detection
  robustify_Qt-plugin_and_qml-path_detection.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453118400">- Update to upstream 0.52 new version
  It includes all the little patches and improvements from master (
  without new activities or features). Most important is the
  lang activity that was not available in French.
- Remove upstream merged patches
  add-option-to-disable-qml-box2d-module-and-depending-activites.patch
  robustify_Qt-plugin_and_qml-path_detection.patch
- Refreshed content of voices-ogg</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453291200">- Added upstream patch fixing build errors on 13.2
  upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1464177600">- Update to upstream 0.60 new version
- remove merged upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467547200">- Packaging :
  + fix upstream url source
  + Remove second %changelog
  + Add rpmlintrc (man page for binary)
- Refresh voices.tar.xz with recent upstream updates</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467720000">- Fixed definitively upstream src url checked with obs service.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468756800">- Added also as sources in spec
  + gcompris-qt-rpmlintrc
  + fetch_voices.sh</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- Set data file subpackages to noarch. Trim long description.</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Split voices off to separate SRPM
- Rename -translations subpackage to -lang</changelog>
  <changelog author="bruno@ioda-net.ch" date="1470657600">- Update to last bugfix enhancement upstream revision 0.61
  Complete release changes at http://gcompris.net/news-en.html
  + New activities are:
    baby_word_processor
    tangram
    explore_momuments
    graph_coloring
    land_safe
    photo_hunter
  + Updated images for chess, hangman and horizontal/vertical
    reading activities along with the gcompris logo.
  + Lots of little fixes/improvements have been done (storing and
    restoring the window's width/height at start-up, docbook
    updated, levels/images bonus, adding an internal dataset for
    words games so that we no more expect the network to run
    GCompris.
  + Translation side 17 languages fully supported:
    Belarusian, British English, Brazilian Portuguese, Catalan,
    Catalan (Valencian), Chinese Simplified, Dutch, French,
    Galician, Italian, Norwegian Nynorsk, Polish, Portuguese,
    Romanian, Spanish, Swedish, Ukrainian.
  + some partially: Breton (88%), Chinese Traditional (97%),
    Estonian (82%), Finnish (74%), German (93%), Russian (83%),
    Slovak (76%), Slovenian (82%), Turkish (82%)</changelog>
  <changelog author="wbauer@tmo.at" date="1479556800">- Require libQt5Multimedia5 and libqt5-qtquickcontrols, it doesn't
  start without them (boo#1011125)</changelog>
  <changelog author="wbauer@tmo.at" date="1479729600">- Also require libqt5-qtgraphicaleffects, that's needed too</changelog>
  <changelog author="bruno@ioda-net.ch" date="1482580800">- New 0.70 version contains 8 new activities, half of them being
  created by last Google Summer of Code students:
  * an activity where the child has to move elements to build a
    given model (crane by Stefan Toncu)
  * an activity to draw the numbers (drawnumbers by Nitish Chauhan)
  * an activity to draw the letters (drawletters by Nitish Chauhan)
  * an activity to find on which words a given letter belongs
    (letter-in-word by Akshat Tandon)
  * the nine men morris game against Tux (nine_men_morris by Pulkit
    Gupta)
  * the nine men morris game with a friend
    (nine_men_morris_2_players by Pulkit Gupta)
  * an activity to learn to split a given number of candies amongst
    children (share by Stefan Toncu)
  * an activity to learn roman numbers (roman_numerals by Bruno
    Coudoin)
  + new features and bug fixes:
  * search feature by Rishabh Gupta
  * windows build by Bruno Coudoin and Johnny Jazeix
  * hint icon in the bar (used in photohunter) by Johnny Jazeix
  * neon build by Jonathan Riddell
  * openSUSE Tumbleweed build by Bruno Friedmann
  * archlinux (https://aur.archlinux.org/packages/gcompris-qt/)
    by Jose Riha
  * KaOS (http://kaosx.tk/packages/index.php?act=show&amp;subdir=\
    build&amp;sortby=date&amp;file=gcompris-0.70-1-x86_64.pkg.tar.xz)
    by demm
  * package on mageia cauldron by Timothee Giet
  * word list for Slovakia by Jose Riha
  * word list for Belarusian by Antos Vaclauski
  * updates on Romanian wordlists and voices by Horia Pelle
  * voices added for Portuguese Brazilian by Marcos D.
  * new graphics for crane by Timothee Giet
  * screenshots on gcompris.net updated to the Qt version
- Update gcompris-qt-voices to 20161224 version</changelog>
  <changelog author="bruno@ioda-net.ch" date="1486987200">- Add missing requires : libQt5Svg5 and qml-box2d that obs/rpm
  doesn't add when they should.
  Fixing empty gcompris-qt on pure leap Gnome3 installation.
- Add missing desktop, appdata, icon files
- Fix copyright year</changelog>
  <changelog author="bruno@ioda-net.ch" date="1503748800">- Upgrade to last release 0.80
  This new version contains 6 new activities:
  + a categorization activity where the child has to categorize
    item depending on the theme (by Divyam Madaan)
  + a guess count game where the child has to find the good
    operations to find a given number (by Rahul Yadav)
  + a game where you have to let the computer put the last ball in
    a row (by Utkarsh Tiwari)
  + as above but the child plays with a friend (Utkarsh Tiwari)
  + a checkers game (by Johnny Jazeix)
  + as above but the child plays with a friend (by Johnny Jazeix)
  We always have new features and content:
  + Polish lang dataset by ?ukasz Wojni?owicz
  + Swedish lang dataset by Stefan Asserhäll
  + Ukrainian lang dataset by Yuri Chornoivan
  + new icons
  + Updated graphics on several activities
  + lots of bug fixes
  + website translation migrated to KDE infrastructure and
    translated in Belarusian, Catalan, Catalan (Valencia),
    Romanian, Portuguese and Ukrainian
  + new mingw windows builds
  + partial translations in Greek and Hindi
- Packaging :
  + Fix icons included (the real svg is used now upstream)
  + Add appinfo and metainfo
  + Raise minimal QT version to be &gt;= 5.6.0 upstream #6c203a3</changelog>
  <changelog author="bruno@ioda-net.ch" date="1506772800">- Upgrade to bugfix release 0.81 the most important changes are:
  + Categorization, fix the "Shape" category
  + Categorization, fix the menu layout
  + Categorization, display score in expert mode
  + Guesscount, fix invalid result
  + Add Indonesian locale
  + Fix the missing copyright and licence info
  + Fix a font issue on windows version
  + Add a new minimal version with software rendering
    (requires Qt 5.8)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1521028800">- Upgrade to new 0.90 version
  + 8 new activities:
  * A calendar activity where the child learns how to use it
  * Another activity based on calendar where the child has to find
    the date corresponding at a date + some days further/before
    this date
  * An activity to learn how people on a family are related and how
    to call this relation
  * Another similar activity with questions about family members
  * An extension of memory activities where the child has to match
    lowercase letters with their corresponding uppercase
  * The same activity in two players mode with Tux
  * The Gtk+ port and improved submarine activity where the child
    learns a basic overview on how to run a submarine
  * The digital electricity activity where the child can use
    different components to create an electric schema. There is also
    a tutorial mode to explain how to use each component
  + bug fixes:
  * Irish translation, voices and datasets by Séamus Ó Briain
  * Updated graphics on several activities
  * Lot of improvements on removing overriding elements issues
    (score were hidden behind the bar...)
  * Add Tutorial item to be able to have activity introductions
    with both images and texts
  * Add easy mode in letter in word with less words displayed
  * Add license page
  * Lots of small bug fixes
- Modernize spec file with spec-cleaner -m</changelog>
  <changelog author="mimi.vx@gmail.com" date="1521547200">- Provide and obsolette original gtk gcompris
- use secure optflags on all distributions.
- and use proper cmake macros for build</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526558400">- Upgrade to new 0.91 version
  summary of changes
  + Activities:
  - fix English text in several activities
  - fix score position in several activities
  - block some buttons and interactions when needed in several
    places
  - lots of fixes for audio in several activities
  - number_sequence (and others based on it), fix base layout
  - update dataset for clickanddraw, drawnumbers and drawletters
  - crane, add localized dataset
  - lightsoff, add keyboard support and other fixes
  - algorithm, add keyboard support and other fixes
  - money, fixes for locale currency used
  - ballcatch, improve audio feedback
  - calendar, several little fixes
  - memory-case-association fix icons size
  ° Other changes:
  - re-enable sound effects on linux
  - improved playback of sound effects, no more delay
  - add captions to images and OARS tags in the appdata
  - add Scottish Gaelic to core, and update some datasets for it
  - main bar, fix some items size
  - remove unused images
  + Translations
  16 languages fully supported: British English, Catalan, Catalan
  (Valencian), Chinese Traditional, Dutch, French, Greek,
  Indonesian, Irish Gaelic, Italian, Polish, Portuguese, Romanian,
  Spanish, Swedish, Ukrainian.
  15 languages partially supported: Norwegian Nynorsk (97%), Hindi
  (96%), Turkish (90%), Scottish Gaelic (86%), Galician (86%),
  Brazilian Portuguese (84%), Belarusian (84%), German (81%),
  Chinese Simplified (79%), Russian (78%), Estonian (77%), Slovak
  (76%), Finnish (76%), Slovenian (69%), Breton (65%).
  If you want to help completing one of these translations or
  adding a new one, please contact upstream.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526817600">- Fix boo#1093988 for Leap 15.0</changelog>
</package>
<package pkgid="d16043bec559e2ea4cc4da585b369adcee9ebc4cf34b779344307a1e512879ff" name="gcompris-qt-lang" arch="noarch">
  <version epoch="0" ver="0.91" rel="lp150.3.3.1"/>
  <changelog author="bruno@ioda-net.ch" date="1451736000">- Added upstream patch for Box2D qml-box2d detection
  robustify_Qt-plugin_and_qml-path_detection.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453118400">- Update to upstream 0.52 new version
  It includes all the little patches and improvements from master (
  without new activities or features). Most important is the
  lang activity that was not available in French.
- Remove upstream merged patches
  add-option-to-disable-qml-box2d-module-and-depending-activites.patch
  robustify_Qt-plugin_and_qml-path_detection.patch
- Refreshed content of voices-ogg</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453291200">- Added upstream patch fixing build errors on 13.2
  upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1464177600">- Update to upstream 0.60 new version
- remove merged upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467547200">- Packaging :
  + fix upstream url source
  + Remove second %changelog
  + Add rpmlintrc (man page for binary)
- Refresh voices.tar.xz with recent upstream updates</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467720000">- Fixed definitively upstream src url checked with obs service.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468756800">- Added also as sources in spec
  + gcompris-qt-rpmlintrc
  + fetch_voices.sh</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- Set data file subpackages to noarch. Trim long description.</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Split voices off to separate SRPM
- Rename -translations subpackage to -lang</changelog>
  <changelog author="bruno@ioda-net.ch" date="1470657600">- Update to last bugfix enhancement upstream revision 0.61
  Complete release changes at http://gcompris.net/news-en.html
  + New activities are:
    baby_word_processor
    tangram
    explore_momuments
    graph_coloring
    land_safe
    photo_hunter
  + Updated images for chess, hangman and horizontal/vertical
    reading activities along with the gcompris logo.
  + Lots of little fixes/improvements have been done (storing and
    restoring the window's width/height at start-up, docbook
    updated, levels/images bonus, adding an internal dataset for
    words games so that we no more expect the network to run
    GCompris.
  + Translation side 17 languages fully supported:
    Belarusian, British English, Brazilian Portuguese, Catalan,
    Catalan (Valencian), Chinese Simplified, Dutch, French,
    Galician, Italian, Norwegian Nynorsk, Polish, Portuguese,
    Romanian, Spanish, Swedish, Ukrainian.
  + some partially: Breton (88%), Chinese Traditional (97%),
    Estonian (82%), Finnish (74%), German (93%), Russian (83%),
    Slovak (76%), Slovenian (82%), Turkish (82%)</changelog>
  <changelog author="wbauer@tmo.at" date="1479556800">- Require libQt5Multimedia5 and libqt5-qtquickcontrols, it doesn't
  start without them (boo#1011125)</changelog>
  <changelog author="wbauer@tmo.at" date="1479729600">- Also require libqt5-qtgraphicaleffects, that's needed too</changelog>
  <changelog author="bruno@ioda-net.ch" date="1482580800">- New 0.70 version contains 8 new activities, half of them being
  created by last Google Summer of Code students:
  * an activity where the child has to move elements to build a
    given model (crane by Stefan Toncu)
  * an activity to draw the numbers (drawnumbers by Nitish Chauhan)
  * an activity to draw the letters (drawletters by Nitish Chauhan)
  * an activity to find on which words a given letter belongs
    (letter-in-word by Akshat Tandon)
  * the nine men morris game against Tux (nine_men_morris by Pulkit
    Gupta)
  * the nine men morris game with a friend
    (nine_men_morris_2_players by Pulkit Gupta)
  * an activity to learn to split a given number of candies amongst
    children (share by Stefan Toncu)
  * an activity to learn roman numbers (roman_numerals by Bruno
    Coudoin)
  + new features and bug fixes:
  * search feature by Rishabh Gupta
  * windows build by Bruno Coudoin and Johnny Jazeix
  * hint icon in the bar (used in photohunter) by Johnny Jazeix
  * neon build by Jonathan Riddell
  * openSUSE Tumbleweed build by Bruno Friedmann
  * archlinux (https://aur.archlinux.org/packages/gcompris-qt/)
    by Jose Riha
  * KaOS (http://kaosx.tk/packages/index.php?act=show&amp;subdir=\
    build&amp;sortby=date&amp;file=gcompris-0.70-1-x86_64.pkg.tar.xz)
    by demm
  * package on mageia cauldron by Timothee Giet
  * word list for Slovakia by Jose Riha
  * word list for Belarusian by Antos Vaclauski
  * updates on Romanian wordlists and voices by Horia Pelle
  * voices added for Portuguese Brazilian by Marcos D.
  * new graphics for crane by Timothee Giet
  * screenshots on gcompris.net updated to the Qt version
- Update gcompris-qt-voices to 20161224 version</changelog>
  <changelog author="bruno@ioda-net.ch" date="1486987200">- Add missing requires : libQt5Svg5 and qml-box2d that obs/rpm
  doesn't add when they should.
  Fixing empty gcompris-qt on pure leap Gnome3 installation.
- Add missing desktop, appdata, icon files
- Fix copyright year</changelog>
  <changelog author="bruno@ioda-net.ch" date="1503748800">- Upgrade to last release 0.80
  This new version contains 6 new activities:
  + a categorization activity where the child has to categorize
    item depending on the theme (by Divyam Madaan)
  + a guess count game where the child has to find the good
    operations to find a given number (by Rahul Yadav)
  + a game where you have to let the computer put the last ball in
    a row (by Utkarsh Tiwari)
  + as above but the child plays with a friend (Utkarsh Tiwari)
  + a checkers game (by Johnny Jazeix)
  + as above but the child plays with a friend (by Johnny Jazeix)
  We always have new features and content:
  + Polish lang dataset by ?ukasz Wojni?owicz
  + Swedish lang dataset by Stefan Asserhäll
  + Ukrainian lang dataset by Yuri Chornoivan
  + new icons
  + Updated graphics on several activities
  + lots of bug fixes
  + website translation migrated to KDE infrastructure and
    translated in Belarusian, Catalan, Catalan (Valencia),
    Romanian, Portuguese and Ukrainian
  + new mingw windows builds
  + partial translations in Greek and Hindi
- Packaging :
  + Fix icons included (the real svg is used now upstream)
  + Add appinfo and metainfo
  + Raise minimal QT version to be &gt;= 5.6.0 upstream #6c203a3</changelog>
  <changelog author="bruno@ioda-net.ch" date="1506772800">- Upgrade to bugfix release 0.81 the most important changes are:
  + Categorization, fix the "Shape" category
  + Categorization, fix the menu layout
  + Categorization, display score in expert mode
  + Guesscount, fix invalid result
  + Add Indonesian locale
  + Fix the missing copyright and licence info
  + Fix a font issue on windows version
  + Add a new minimal version with software rendering
    (requires Qt 5.8)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1521028800">- Upgrade to new 0.90 version
  + 8 new activities:
  * A calendar activity where the child learns how to use it
  * Another activity based on calendar where the child has to find
    the date corresponding at a date + some days further/before
    this date
  * An activity to learn how people on a family are related and how
    to call this relation
  * Another similar activity with questions about family members
  * An extension of memory activities where the child has to match
    lowercase letters with their corresponding uppercase
  * The same activity in two players mode with Tux
  * The Gtk+ port and improved submarine activity where the child
    learns a basic overview on how to run a submarine
  * The digital electricity activity where the child can use
    different components to create an electric schema. There is also
    a tutorial mode to explain how to use each component
  + bug fixes:
  * Irish translation, voices and datasets by Séamus Ó Briain
  * Updated graphics on several activities
  * Lot of improvements on removing overriding elements issues
    (score were hidden behind the bar...)
  * Add Tutorial item to be able to have activity introductions
    with both images and texts
  * Add easy mode in letter in word with less words displayed
  * Add license page
  * Lots of small bug fixes
- Modernize spec file with spec-cleaner -m</changelog>
  <changelog author="mimi.vx@gmail.com" date="1521547200">- Provide and obsolette original gtk gcompris
- use secure optflags on all distributions.
- and use proper cmake macros for build</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526558400">- Upgrade to new 0.91 version
  summary of changes
  + Activities:
  - fix English text in several activities
  - fix score position in several activities
  - block some buttons and interactions when needed in several
    places
  - lots of fixes for audio in several activities
  - number_sequence (and others based on it), fix base layout
  - update dataset for clickanddraw, drawnumbers and drawletters
  - crane, add localized dataset
  - lightsoff, add keyboard support and other fixes
  - algorithm, add keyboard support and other fixes
  - money, fixes for locale currency used
  - ballcatch, improve audio feedback
  - calendar, several little fixes
  - memory-case-association fix icons size
  ° Other changes:
  - re-enable sound effects on linux
  - improved playback of sound effects, no more delay
  - add captions to images and OARS tags in the appdata
  - add Scottish Gaelic to core, and update some datasets for it
  - main bar, fix some items size
  - remove unused images
  + Translations
  16 languages fully supported: British English, Catalan, Catalan
  (Valencian), Chinese Traditional, Dutch, French, Greek,
  Indonesian, Irish Gaelic, Italian, Polish, Portuguese, Romanian,
  Spanish, Swedish, Ukrainian.
  15 languages partially supported: Norwegian Nynorsk (97%), Hindi
  (96%), Turkish (90%), Scottish Gaelic (86%), Galician (86%),
  Brazilian Portuguese (84%), Belarusian (84%), German (81%),
  Chinese Simplified (79%), Russian (78%), Estonian (77%), Slovak
  (76%), Finnish (76%), Slovenian (69%), Breton (65%).
  If you want to help completing one of these translations or
  adding a new one, please contact upstream.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526817600">- Fix boo#1093988 for Leap 15.0</changelog>
</package>
<package pkgid="e9c5c22d7a8353ced051d9442b7e7c21c5a69887a5ed76f91e97742140e9a603" name="gcompris-qt-voices" arch="noarch">
  <version epoch="0" ver="0~20180517" rel="lp150.2.4.1"/>
  <changelog author="jengelh@inai.de" date="1469620800">- Split voice subpackage off gcompris-qt.spec</changelog>
  <changelog author="bruno@ioda-net.ch" date="1470657600">- Updated contents to match gcompris-qt 0.61 release</changelog>
  <changelog author="bruno@ioda-net.ch" date="1479902400">- Fix path to install to allow gcompris-qt to find the voices</changelog>
  <changelog author="bruno@ioda-net.ch" date="1482580800">- Refresh content for gcompris-qt release 0.70
  * czech.ogg got renamed and refreshed to czechia.ogg
  * word list for Slovakia by Jose Riha
  * word list for Belarusian by Antos Vaclauski
  * various updates on Romanian wordlists and voices by Horia Pelle
  * voices added for Portuguese Brazilian by Marcos D.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1503748800">- Refrech content for gcompris-qt release 0.80
  * Updated LICENSE file with the upstream changes.
    Renamed, deleted, added files.
- Packaging : change requires to gcomprit-qt</changelog>
  <changelog author="bruno@ioda-net.ch" date="1505304000">- Update version to its real state 20170826
- Fix provide version to be equal to main package</changelog>
  <changelog author="bruno@ioda-net.ch" date="1506772800">- Update version 20170930 (gcompris-qt 0.81)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1521028800">- Modernize spec with spec-cleaner minimal
- Update version 20180311 (gcompris-qt 0-90)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526558400">- Update to version 20180517 (gcompris-qt 0.91)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526817600">- Fix boo#1093988 for Leap 15.0</changelog>
</package>
<package pkgid="898d03caa9a7d13d7b2171fd7c61189578ffe85856baf040a0cf2e870fba64e9" name="gcompris-qt-voices" arch="src">
  <version epoch="0" ver="0~20180517" rel="lp150.2.4.1"/>
  <changelog author="jengelh@inai.de" date="1469620800">- Split voice subpackage off gcompris-qt.spec</changelog>
  <changelog author="bruno@ioda-net.ch" date="1470657600">- Updated contents to match gcompris-qt 0.61 release</changelog>
  <changelog author="bruno@ioda-net.ch" date="1479902400">- Fix path to install to allow gcompris-qt to find the voices</changelog>
  <changelog author="bruno@ioda-net.ch" date="1482580800">- Refresh content for gcompris-qt release 0.70
  * czech.ogg got renamed and refreshed to czechia.ogg
  * word list for Slovakia by Jose Riha
  * word list for Belarusian by Antos Vaclauski
  * various updates on Romanian wordlists and voices by Horia Pelle
  * voices added for Portuguese Brazilian by Marcos D.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1503748800">- Refrech content for gcompris-qt release 0.80
  * Updated LICENSE file with the upstream changes.
    Renamed, deleted, added files.
- Packaging : change requires to gcomprit-qt</changelog>
  <changelog author="bruno@ioda-net.ch" date="1505304000">- Update version to its real state 20170826
- Fix provide version to be equal to main package</changelog>
  <changelog author="bruno@ioda-net.ch" date="1506772800">- Update version 20170930 (gcompris-qt 0.81)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1521028800">- Modernize spec with spec-cleaner minimal
- Update version 20180311 (gcompris-qt 0-90)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526558400">- Update to version 20180517 (gcompris-qt 0.91)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526817600">- Fix boo#1093988 for Leap 15.0</changelog>
</package>
<package pkgid="b226557d52a633d17b379fcc21c1f7aba6d9c2a50db4e484963d2f1d9e5ba282" name="gd" arch="src">
  <version epoch="0" ver="2.2.5" rel="lp150.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1397131200">- build against libtiff and libvpx</changelog>
  <changelog author="tchvatal@suse.com" date="1397736000">- Add tiff and vpx to the devel deps as it is in .pc file.</changelog>
  <changelog author="meissner@suse.com" date="1403870400">- split out libgd3, so libgd2 could be installed in parallel.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failure with automake-1.14</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="ed7416d9c810835c409143167dee412b3cbdd704bea2b143d7a60503edd694d8" name="gd" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp150.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1397131200">- build against libtiff and libvpx</changelog>
  <changelog author="tchvatal@suse.com" date="1397736000">- Add tiff and vpx to the devel deps as it is in .pc file.</changelog>
  <changelog author="meissner@suse.com" date="1403870400">- split out libgd3, so libgd2 could be installed in parallel.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failure with automake-1.14</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="1cc1e22661c7677ae1d40304d60354810b3122a0cb696d0f61d4cf4bf853dd65" name="gd-devel" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp150.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1397131200">- build against libtiff and libvpx</changelog>
  <changelog author="tchvatal@suse.com" date="1397736000">- Add tiff and vpx to the devel deps as it is in .pc file.</changelog>
  <changelog author="meissner@suse.com" date="1403870400">- split out libgd3, so libgd2 could be installed in parallel.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failure with automake-1.14</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="0ff88deab4dab83a9027761f670886f3b8d7a6f200f0200f227279c502a5569a" name="gdb" arch="src">
  <version epoch="0" ver="8.2" rel="lp150.2.3.1"/>
  <changelog author="matz@suse.com" date="1470657600">- Amend gdb-glibc-vdso-workaround.patch to ignore further
  vdso filenames on ppc64 and s390x.  [bnc#944105]</changelog>
  <changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
  <changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
  <changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
  <changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
  <changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
  <changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
  <changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
  <changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
  <changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>
  <changelog author="matz@suse.com" date="1507550400">- Remove %clean section.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- switch to Python 3 for Tumbleweed 1320 and up</changelog>
  <changelog author="schwab@suse.de" date="1510747200">- Support --without=testsuite and disable testsuite for qemu-linux-user
  builds</changelog>
  <changelog author="matz@suse.com" date="1520596800">- Rebase to 8.1 release:
  * ptype/o prints offsets and sizes of members (like pahole)
  * tab-completion improved: quoting function names is not generally
    necessary anymore, completion offers for breakpoint don't include
    data symbol
  * enable/disable breakpoints now accept ranges: 'disable 1.3-5'
  * new commands:
  - set/show cwd: working directory of debuggee
  - set/show compile-gcc: program to use for 'compile' command
  - starti: start program and stop at first instruction
  - TUI single-key commands: 'i' for stepi and 'o' for nexti
  * --readnever option disables any reading of debug info (for dumping)
  * s390: guarded storage register access for z14
  * gcore option -a dumps all memory mapping
  * C++ breakpoints: 'b foo' will now set a breakpoint on all functions
    and methods named 'foo' no matter the scope.  Use -qualified if you
    don't want that
  * python scripting: new events gdb.new_inferior, gdb.inferior_deleted
    and gdb.new_thread; new command rbreak (breakpoint accepting regexps)
  * gdbserver can be passed environment parameters to remote debuggee
- Added patches from Fedora:
  gdb-ppc64-stwux-tautological-compare.patch
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch
  gdb-vla-intel-fix-print-char-array.patch
- Removed unused gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2
- Removed obsolete upstream patches:
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Removed obsolete Fedora patches:
  gdb-6.3-rh-dummykfail-20041202.patch
  gdb-6.6-threads-static-test.patch
  gdb-add-index-chmod.patch
  gdb-glibc-vdso-workaround.patch
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1522152000">- Add some -Wno-error flags for gcc-8 compatibility.</changelog>
  <changelog author="tchvatal@suse.com" date="1533902400">- Apply patch from fedora to build with python3.7:
  * gdb-fix-python37-breakage.patch</changelog>
  <changelog author="matz@suse.com" date="1536667200">- Rebase to 8.2 release (as in fedora 29 @ c720d998):
  * 'symbol-file' and 'add-symbol-file' accept -o to add relative
    offset to all sections
  * pager accepts 'c' response to disable it for rest of command
  * accept _Alignof and alignof in C resp. C++ expressions
  * new target riscv*-*-elf
  * python API extensions: gdb.Type.align, gdb.execute deals
    with multi-line gdb commands, gdb.convenience_variable and
    gdb.set_convenience_variable to access convenience variables,
  * aarch64: properly support hardware watchpoints on unaligned
    addresses (needs kernel &gt;= 4.10)
- Add gdb-fix-s390-build.diff for a Wformat error on s390.
- Support access to new POWER8 registers [fate#325178, fate#326120]
  Add patches gdb-rhbz1187581-power8-regs-1of7.patch,
  gdb-rhbz1187581-power8-regs-2of7.patch,
  gdb-rhbz1187581-power8-regs-3of7.patch,
  gdb-rhbz1187581-power8-regs-4of7.patch,
  gdb-rhbz1187581-power8-regs-5of7.patch,
  gdb-rhbz1187581-power8-regs-6of7.patch,
  gdb-rhbz1187581-power8-regs-7of7.patch .
- Support ipv6 for gdbserver connections:
  Add patches gdb-rhbz881849-ipv6-1of3.patch,
  gdb-rhbz881849-ipv6-2of3.patch,
  gdb-rhbz881849-ipv6-3of3.patch .
- Update to intel processor trace library 2.0 (from 1.6.1):
  Add v2.0.tar.gz, remove v1.6.1.tar.gz
  Remove obsolete v1.6.1-implicit-fallthrough.patch .
- Remove obsolete patches:
  gdb-fix-python37-breakage.patch,
  gdb-pahole-python2.patch .
- Added patches from Fedora:
  gdb-rhbz1491128-batch-mode-exit-status-1of2.patch,
  gdb-rhbz1491128-batch-mode-exit-status-2of2.patch,
  gdb-rhbz1553104-s390x-arch12-test.patch,
  gdb-use-pulongest-aarch64-linux-tdep.patch .
- Removed obsolete patches from Fedora:
  gdb-6.6-bz235197-fork-detach-info.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-gdb-add-index-script.patch,
  gdb-ppc64-stwux-tautological-compare.patch,
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch,
  gdb-stale-frame_info.patch .
- Most other patches rebased.</changelog>
</package>
<package pkgid="28beb779b4e55dac0fc0441b29bcb5cd0bf46de4f7842841199cde1fedb91e9a" name="gdb" arch="x86_64">
  <version epoch="0" ver="8.2" rel="lp150.2.3.1"/>
  <changelog author="matz@suse.com" date="1470657600">- Amend gdb-glibc-vdso-workaround.patch to ignore further
  vdso filenames on ppc64 and s390x.  [bnc#944105]</changelog>
  <changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
  <changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
  <changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
  <changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
  <changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
  <changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
  <changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
  <changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
  <changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>
  <changelog author="matz@suse.com" date="1507550400">- Remove %clean section.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- switch to Python 3 for Tumbleweed 1320 and up</changelog>
  <changelog author="schwab@suse.de" date="1510747200">- Support --without=testsuite and disable testsuite for qemu-linux-user
  builds</changelog>
  <changelog author="matz@suse.com" date="1520596800">- Rebase to 8.1 release:
  * ptype/o prints offsets and sizes of members (like pahole)
  * tab-completion improved: quoting function names is not generally
    necessary anymore, completion offers for breakpoint don't include
    data symbol
  * enable/disable breakpoints now accept ranges: 'disable 1.3-5'
  * new commands:
  - set/show cwd: working directory of debuggee
  - set/show compile-gcc: program to use for 'compile' command
  - starti: start program and stop at first instruction
  - TUI single-key commands: 'i' for stepi and 'o' for nexti
  * --readnever option disables any reading of debug info (for dumping)
  * s390: guarded storage register access for z14
  * gcore option -a dumps all memory mapping
  * C++ breakpoints: 'b foo' will now set a breakpoint on all functions
    and methods named 'foo' no matter the scope.  Use -qualified if you
    don't want that
  * python scripting: new events gdb.new_inferior, gdb.inferior_deleted
    and gdb.new_thread; new command rbreak (breakpoint accepting regexps)
  * gdbserver can be passed environment parameters to remote debuggee
- Added patches from Fedora:
  gdb-ppc64-stwux-tautological-compare.patch
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch
  gdb-vla-intel-fix-print-char-array.patch
- Removed unused gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2
- Removed obsolete upstream patches:
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Removed obsolete Fedora patches:
  gdb-6.3-rh-dummykfail-20041202.patch
  gdb-6.6-threads-static-test.patch
  gdb-add-index-chmod.patch
  gdb-glibc-vdso-workaround.patch
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1522152000">- Add some -Wno-error flags for gcc-8 compatibility.</changelog>
  <changelog author="tchvatal@suse.com" date="1533902400">- Apply patch from fedora to build with python3.7:
  * gdb-fix-python37-breakage.patch</changelog>
  <changelog author="matz@suse.com" date="1536667200">- Rebase to 8.2 release (as in fedora 29 @ c720d998):
  * 'symbol-file' and 'add-symbol-file' accept -o to add relative
    offset to all sections
  * pager accepts 'c' response to disable it for rest of command
  * accept _Alignof and alignof in C resp. C++ expressions
  * new target riscv*-*-elf
  * python API extensions: gdb.Type.align, gdb.execute deals
    with multi-line gdb commands, gdb.convenience_variable and
    gdb.set_convenience_variable to access convenience variables,
  * aarch64: properly support hardware watchpoints on unaligned
    addresses (needs kernel &gt;= 4.10)
- Add gdb-fix-s390-build.diff for a Wformat error on s390.
- Support access to new POWER8 registers [fate#325178, fate#326120]
  Add patches gdb-rhbz1187581-power8-regs-1of7.patch,
  gdb-rhbz1187581-power8-regs-2of7.patch,
  gdb-rhbz1187581-power8-regs-3of7.patch,
  gdb-rhbz1187581-power8-regs-4of7.patch,
  gdb-rhbz1187581-power8-regs-5of7.patch,
  gdb-rhbz1187581-power8-regs-6of7.patch,
  gdb-rhbz1187581-power8-regs-7of7.patch .
- Support ipv6 for gdbserver connections:
  Add patches gdb-rhbz881849-ipv6-1of3.patch,
  gdb-rhbz881849-ipv6-2of3.patch,
  gdb-rhbz881849-ipv6-3of3.patch .
- Update to intel processor trace library 2.0 (from 1.6.1):
  Add v2.0.tar.gz, remove v1.6.1.tar.gz
  Remove obsolete v1.6.1-implicit-fallthrough.patch .
- Remove obsolete patches:
  gdb-fix-python37-breakage.patch,
  gdb-pahole-python2.patch .
- Added patches from Fedora:
  gdb-rhbz1491128-batch-mode-exit-status-1of2.patch,
  gdb-rhbz1491128-batch-mode-exit-status-2of2.patch,
  gdb-rhbz1553104-s390x-arch12-test.patch,
  gdb-use-pulongest-aarch64-linux-tdep.patch .
- Removed obsolete patches from Fedora:
  gdb-6.6-bz235197-fork-detach-info.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-gdb-add-index-script.patch,
  gdb-ppc64-stwux-tautological-compare.patch,
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch,
  gdb-stale-frame_info.patch .
- Most other patches rebased.</changelog>
</package>
<package pkgid="e5acb418f6a7ba941a5c6bdba7242ccfc2bf3175133546911e4adf14dae95aa6" name="gdb" arch="src">
  <version epoch="0" ver="8.2" rel="lp150.2.6.1"/>
  <changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
  <changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
  <changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
  <changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
  <changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
  <changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
  <changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
  <changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
  <changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>
  <changelog author="matz@suse.com" date="1507550400">- Remove %clean section.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- switch to Python 3 for Tumbleweed 1320 and up</changelog>
  <changelog author="schwab@suse.de" date="1510747200">- Support --without=testsuite and disable testsuite for qemu-linux-user
  builds</changelog>
  <changelog author="matz@suse.com" date="1520596800">- Rebase to 8.1 release:
  * ptype/o prints offsets and sizes of members (like pahole)
  * tab-completion improved: quoting function names is not generally
    necessary anymore, completion offers for breakpoint don't include
    data symbol
  * enable/disable breakpoints now accept ranges: 'disable 1.3-5'
  * new commands:
  - set/show cwd: working directory of debuggee
  - set/show compile-gcc: program to use for 'compile' command
  - starti: start program and stop at first instruction
  - TUI single-key commands: 'i' for stepi and 'o' for nexti
  * --readnever option disables any reading of debug info (for dumping)
  * s390: guarded storage register access for z14
  * gcore option -a dumps all memory mapping
  * C++ breakpoints: 'b foo' will now set a breakpoint on all functions
    and methods named 'foo' no matter the scope.  Use -qualified if you
    don't want that
  * python scripting: new events gdb.new_inferior, gdb.inferior_deleted
    and gdb.new_thread; new command rbreak (breakpoint accepting regexps)
  * gdbserver can be passed environment parameters to remote debuggee
- Added patches from Fedora:
  gdb-ppc64-stwux-tautological-compare.patch
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch
  gdb-vla-intel-fix-print-char-array.patch
- Removed unused gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2
- Removed obsolete upstream patches:
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Removed obsolete Fedora patches:
  gdb-6.3-rh-dummykfail-20041202.patch
  gdb-6.6-threads-static-test.patch
  gdb-add-index-chmod.patch
  gdb-glibc-vdso-workaround.patch
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1522152000">- Add some -Wno-error flags for gcc-8 compatibility.</changelog>
  <changelog author="tchvatal@suse.com" date="1533902400">- Apply patch from fedora to build with python3.7:
  * gdb-fix-python37-breakage.patch</changelog>
  <changelog author="matz@suse.com" date="1536667200">- Rebase to 8.2 release (as in fedora 29 @ c720d998):
  * 'symbol-file' and 'add-symbol-file' accept -o to add relative
    offset to all sections
  * pager accepts 'c' response to disable it for rest of command
  * accept _Alignof and alignof in C resp. C++ expressions
  * new target riscv*-*-elf
  * python API extensions: gdb.Type.align, gdb.execute deals
    with multi-line gdb commands, gdb.convenience_variable and
    gdb.set_convenience_variable to access convenience variables,
  * aarch64: properly support hardware watchpoints on unaligned
    addresses (needs kernel &gt;= 4.10)
- Add gdb-fix-s390-build.diff for a Wformat error on s390.
- Support access to new POWER8 registers [fate#325178, fate#326120]
  Add patches gdb-rhbz1187581-power8-regs-1of7.patch,
  gdb-rhbz1187581-power8-regs-2of7.patch,
  gdb-rhbz1187581-power8-regs-3of7.patch,
  gdb-rhbz1187581-power8-regs-4of7.patch,
  gdb-rhbz1187581-power8-regs-5of7.patch,
  gdb-rhbz1187581-power8-regs-6of7.patch,
  gdb-rhbz1187581-power8-regs-7of7.patch .
- Support ipv6 for gdbserver connections:
  Add patches gdb-rhbz881849-ipv6-1of3.patch,
  gdb-rhbz881849-ipv6-2of3.patch,
  gdb-rhbz881849-ipv6-3of3.patch .
- Update to intel processor trace library 2.0 (from 1.6.1):
  Add v2.0.tar.gz, remove v1.6.1.tar.gz
  Remove obsolete v1.6.1-implicit-fallthrough.patch .
- Remove obsolete patches:
  gdb-fix-python37-breakage.patch,
  gdb-pahole-python2.patch .
- Added patches from Fedora:
  gdb-rhbz1491128-batch-mode-exit-status-1of2.patch,
  gdb-rhbz1491128-batch-mode-exit-status-2of2.patch,
  gdb-rhbz1553104-s390x-arch12-test.patch,
  gdb-use-pulongest-aarch64-linux-tdep.patch .
- Removed obsolete patches from Fedora:
  gdb-6.6-bz235197-fork-detach-info.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-gdb-add-index-script.patch,
  gdb-ppc64-stwux-tautological-compare.patch,
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch,
  gdb-stale-frame_info.patch .
- Most other patches rebased.</changelog>
  <changelog author="tdevries@suse.com" date="1541592000">- Fix crash when reading core [bsc #1109013]
  * Add gdb-fix-crash-when-reading-core.patch
    https://sourceware.org/ml/gdb-cvs/2018-11/msg00022.html</changelog>
</package>
<package pkgid="3da5d066d3be1d512073900082ff7d6b4f0ba48ab8809ce0b9fac11c32e13880" name="gdb" arch="x86_64">
  <version epoch="0" ver="8.2" rel="lp150.2.6.1"/>
  <changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
  <changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
  <changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
  <changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
  <changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
  <changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
  <changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
  <changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
  <changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>
  <changelog author="matz@suse.com" date="1507550400">- Remove %clean section.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- switch to Python 3 for Tumbleweed 1320 and up</changelog>
  <changelog author="schwab@suse.de" date="1510747200">- Support --without=testsuite and disable testsuite for qemu-linux-user
  builds</changelog>
  <changelog author="matz@suse.com" date="1520596800">- Rebase to 8.1 release:
  * ptype/o prints offsets and sizes of members (like pahole)
  * tab-completion improved: quoting function names is not generally
    necessary anymore, completion offers for breakpoint don't include
    data symbol
  * enable/disable breakpoints now accept ranges: 'disable 1.3-5'
  * new commands:
  - set/show cwd: working directory of debuggee
  - set/show compile-gcc: program to use for 'compile' command
  - starti: start program and stop at first instruction
  - TUI single-key commands: 'i' for stepi and 'o' for nexti
  * --readnever option disables any reading of debug info (for dumping)
  * s390: guarded storage register access for z14
  * gcore option -a dumps all memory mapping
  * C++ breakpoints: 'b foo' will now set a breakpoint on all functions
    and methods named 'foo' no matter the scope.  Use -qualified if you
    don't want that
  * python scripting: new events gdb.new_inferior, gdb.inferior_deleted
    and gdb.new_thread; new command rbreak (breakpoint accepting regexps)
  * gdbserver can be passed environment parameters to remote debuggee
- Added patches from Fedora:
  gdb-ppc64-stwux-tautological-compare.patch
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch
  gdb-vla-intel-fix-print-char-array.patch
- Removed unused gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2
- Removed obsolete upstream patches:
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Removed obsolete Fedora patches:
  gdb-6.3-rh-dummykfail-20041202.patch
  gdb-6.6-threads-static-test.patch
  gdb-add-index-chmod.patch
  gdb-glibc-vdso-workaround.patch
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1522152000">- Add some -Wno-error flags for gcc-8 compatibility.</changelog>
  <changelog author="tchvatal@suse.com" date="1533902400">- Apply patch from fedora to build with python3.7:
  * gdb-fix-python37-breakage.patch</changelog>
  <changelog author="matz@suse.com" date="1536667200">- Rebase to 8.2 release (as in fedora 29 @ c720d998):
  * 'symbol-file' and 'add-symbol-file' accept -o to add relative
    offset to all sections
  * pager accepts 'c' response to disable it for rest of command
  * accept _Alignof and alignof in C resp. C++ expressions
  * new target riscv*-*-elf
  * python API extensions: gdb.Type.align, gdb.execute deals
    with multi-line gdb commands, gdb.convenience_variable and
    gdb.set_convenience_variable to access convenience variables,
  * aarch64: properly support hardware watchpoints on unaligned
    addresses (needs kernel &gt;= 4.10)
- Add gdb-fix-s390-build.diff for a Wformat error on s390.
- Support access to new POWER8 registers [fate#325178, fate#326120]
  Add patches gdb-rhbz1187581-power8-regs-1of7.patch,
  gdb-rhbz1187581-power8-regs-2of7.patch,
  gdb-rhbz1187581-power8-regs-3of7.patch,
  gdb-rhbz1187581-power8-regs-4of7.patch,
  gdb-rhbz1187581-power8-regs-5of7.patch,
  gdb-rhbz1187581-power8-regs-6of7.patch,
  gdb-rhbz1187581-power8-regs-7of7.patch .
- Support ipv6 for gdbserver connections:
  Add patches gdb-rhbz881849-ipv6-1of3.patch,
  gdb-rhbz881849-ipv6-2of3.patch,
  gdb-rhbz881849-ipv6-3of3.patch .
- Update to intel processor trace library 2.0 (from 1.6.1):
  Add v2.0.tar.gz, remove v1.6.1.tar.gz
  Remove obsolete v1.6.1-implicit-fallthrough.patch .
- Remove obsolete patches:
  gdb-fix-python37-breakage.patch,
  gdb-pahole-python2.patch .
- Added patches from Fedora:
  gdb-rhbz1491128-batch-mode-exit-status-1of2.patch,
  gdb-rhbz1491128-batch-mode-exit-status-2of2.patch,
  gdb-rhbz1553104-s390x-arch12-test.patch,
  gdb-use-pulongest-aarch64-linux-tdep.patch .
- Removed obsolete patches from Fedora:
  gdb-6.6-bz235197-fork-detach-info.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-gdb-add-index-script.patch,
  gdb-ppc64-stwux-tautological-compare.patch,
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch,
  gdb-stale-frame_info.patch .
- Most other patches rebased.</changelog>
  <changelog author="tdevries@suse.com" date="1541592000">- Fix crash when reading core [bsc #1109013]
  * Add gdb-fix-crash-when-reading-core.patch
    https://sourceware.org/ml/gdb-cvs/2018-11/msg00022.html</changelog>
</package>
<package pkgid="00d89f59e686f75a3c0f6989edff637e644c64d1ebd6c2a4473e56c4df621eb9" name="gdb-testresults" arch="x86_64">
  <version epoch="0" ver="8.2" rel="lp150.2.3.1"/>
  <changelog author="matz@suse.com" date="1470657600">- Amend gdb-glibc-vdso-workaround.patch to ignore further
  vdso filenames on ppc64 and s390x.  [bnc#944105]</changelog>
  <changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
  <changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
  <changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
  <changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
  <changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
  <changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
  <changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
  <changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
  <changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>
  <changelog author="matz@suse.com" date="1507550400">- Remove %clean section.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- switch to Python 3 for Tumbleweed 1320 and up</changelog>
  <changelog author="schwab@suse.de" date="1510747200">- Support --without=testsuite and disable testsuite for qemu-linux-user
  builds</changelog>
  <changelog author="matz@suse.com" date="1520596800">- Rebase to 8.1 release:
  * ptype/o prints offsets and sizes of members (like pahole)
  * tab-completion improved: quoting function names is not generally
    necessary anymore, completion offers for breakpoint don't include
    data symbol
  * enable/disable breakpoints now accept ranges: 'disable 1.3-5'
  * new commands:
  - set/show cwd: working directory of debuggee
  - set/show compile-gcc: program to use for 'compile' command
  - starti: start program and stop at first instruction
  - TUI single-key commands: 'i' for stepi and 'o' for nexti
  * --readnever option disables any reading of debug info (for dumping)
  * s390: guarded storage register access for z14
  * gcore option -a dumps all memory mapping
  * C++ breakpoints: 'b foo' will now set a breakpoint on all functions
    and methods named 'foo' no matter the scope.  Use -qualified if you
    don't want that
  * python scripting: new events gdb.new_inferior, gdb.inferior_deleted
    and gdb.new_thread; new command rbreak (breakpoint accepting regexps)
  * gdbserver can be passed environment parameters to remote debuggee
- Added patches from Fedora:
  gdb-ppc64-stwux-tautological-compare.patch
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch
  gdb-vla-intel-fix-print-char-array.patch
- Removed unused gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2
- Removed obsolete upstream patches:
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Removed obsolete Fedora patches:
  gdb-6.3-rh-dummykfail-20041202.patch
  gdb-6.6-threads-static-test.patch
  gdb-add-index-chmod.patch
  gdb-glibc-vdso-workaround.patch
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1522152000">- Add some -Wno-error flags for gcc-8 compatibility.</changelog>
  <changelog author="tchvatal@suse.com" date="1533902400">- Apply patch from fedora to build with python3.7:
  * gdb-fix-python37-breakage.patch</changelog>
  <changelog author="matz@suse.com" date="1536667200">- Rebase to 8.2 release (as in fedora 29 @ c720d998):
  * 'symbol-file' and 'add-symbol-file' accept -o to add relative
    offset to all sections
  * pager accepts 'c' response to disable it for rest of command
  * accept _Alignof and alignof in C resp. C++ expressions
  * new target riscv*-*-elf
  * python API extensions: gdb.Type.align, gdb.execute deals
    with multi-line gdb commands, gdb.convenience_variable and
    gdb.set_convenience_variable to access convenience variables,
  * aarch64: properly support hardware watchpoints on unaligned
    addresses (needs kernel &gt;= 4.10)
- Add gdb-fix-s390-build.diff for a Wformat error on s390.
- Support access to new POWER8 registers [fate#325178, fate#326120]
  Add patches gdb-rhbz1187581-power8-regs-1of7.patch,
  gdb-rhbz1187581-power8-regs-2of7.patch,
  gdb-rhbz1187581-power8-regs-3of7.patch,
  gdb-rhbz1187581-power8-regs-4of7.patch,
  gdb-rhbz1187581-power8-regs-5of7.patch,
  gdb-rhbz1187581-power8-regs-6of7.patch,
  gdb-rhbz1187581-power8-regs-7of7.patch .
- Support ipv6 for gdbserver connections:
  Add patches gdb-rhbz881849-ipv6-1of3.patch,
  gdb-rhbz881849-ipv6-2of3.patch,
  gdb-rhbz881849-ipv6-3of3.patch .
- Update to intel processor trace library 2.0 (from 1.6.1):
  Add v2.0.tar.gz, remove v1.6.1.tar.gz
  Remove obsolete v1.6.1-implicit-fallthrough.patch .
- Remove obsolete patches:
  gdb-fix-python37-breakage.patch,
  gdb-pahole-python2.patch .
- Added patches from Fedora:
  gdb-rhbz1491128-batch-mode-exit-status-1of2.patch,
  gdb-rhbz1491128-batch-mode-exit-status-2of2.patch,
  gdb-rhbz1553104-s390x-arch12-test.patch,
  gdb-use-pulongest-aarch64-linux-tdep.patch .
- Removed obsolete patches from Fedora:
  gdb-6.6-bz235197-fork-detach-info.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-gdb-add-index-script.patch,
  gdb-ppc64-stwux-tautological-compare.patch,
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch,
  gdb-stale-frame_info.patch .
- Most other patches rebased.</changelog>
</package>
<package pkgid="5683124a3559d0306837decbdf9e1450daca04ebeee9460f2cc4a420a6eafb63" name="gdb-testresults" arch="x86_64">
  <version epoch="0" ver="8.2" rel="lp150.2.6.1"/>
  <changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
  <changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
  <changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
  <changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
  <changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
  <changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
  <changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
  <changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
  <changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>
  <changelog author="matz@suse.com" date="1507550400">- Remove %clean section.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- switch to Python 3 for Tumbleweed 1320 and up</changelog>
  <changelog author="schwab@suse.de" date="1510747200">- Support --without=testsuite and disable testsuite for qemu-linux-user
  builds</changelog>
  <changelog author="matz@suse.com" date="1520596800">- Rebase to 8.1 release:
  * ptype/o prints offsets and sizes of members (like pahole)
  * tab-completion improved: quoting function names is not generally
    necessary anymore, completion offers for breakpoint don't include
    data symbol
  * enable/disable breakpoints now accept ranges: 'disable 1.3-5'
  * new commands:
  - set/show cwd: working directory of debuggee
  - set/show compile-gcc: program to use for 'compile' command
  - starti: start program and stop at first instruction
  - TUI single-key commands: 'i' for stepi and 'o' for nexti
  * --readnever option disables any reading of debug info (for dumping)
  * s390: guarded storage register access for z14
  * gcore option -a dumps all memory mapping
  * C++ breakpoints: 'b foo' will now set a breakpoint on all functions
    and methods named 'foo' no matter the scope.  Use -qualified if you
    don't want that
  * python scripting: new events gdb.new_inferior, gdb.inferior_deleted
    and gdb.new_thread; new command rbreak (breakpoint accepting regexps)
  * gdbserver can be passed environment parameters to remote debuggee
- Added patches from Fedora:
  gdb-ppc64-stwux-tautological-compare.patch
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch
  gdb-vla-intel-fix-print-char-array.patch
- Removed unused gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2
- Removed obsolete upstream patches:
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Removed obsolete Fedora patches:
  gdb-6.3-rh-dummykfail-20041202.patch
  gdb-6.6-threads-static-test.patch
  gdb-add-index-chmod.patch
  gdb-glibc-vdso-workaround.patch
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1522152000">- Add some -Wno-error flags for gcc-8 compatibility.</changelog>
  <changelog author="tchvatal@suse.com" date="1533902400">- Apply patch from fedora to build with python3.7:
  * gdb-fix-python37-breakage.patch</changelog>
  <changelog author="matz@suse.com" date="1536667200">- Rebase to 8.2 release (as in fedora 29 @ c720d998):
  * 'symbol-file' and 'add-symbol-file' accept -o to add relative
    offset to all sections
  * pager accepts 'c' response to disable it for rest of command
  * accept _Alignof and alignof in C resp. C++ expressions
  * new target riscv*-*-elf
  * python API extensions: gdb.Type.align, gdb.execute deals
    with multi-line gdb commands, gdb.convenience_variable and
    gdb.set_convenience_variable to access convenience variables,
  * aarch64: properly support hardware watchpoints on unaligned
    addresses (needs kernel &gt;= 4.10)
- Add gdb-fix-s390-build.diff for a Wformat error on s390.
- Support access to new POWER8 registers [fate#325178, fate#326120]
  Add patches gdb-rhbz1187581-power8-regs-1of7.patch,
  gdb-rhbz1187581-power8-regs-2of7.patch,
  gdb-rhbz1187581-power8-regs-3of7.patch,
  gdb-rhbz1187581-power8-regs-4of7.patch,
  gdb-rhbz1187581-power8-regs-5of7.patch,
  gdb-rhbz1187581-power8-regs-6of7.patch,
  gdb-rhbz1187581-power8-regs-7of7.patch .
- Support ipv6 for gdbserver connections:
  Add patches gdb-rhbz881849-ipv6-1of3.patch,
  gdb-rhbz881849-ipv6-2of3.patch,
  gdb-rhbz881849-ipv6-3of3.patch .
- Update to intel processor trace library 2.0 (from 1.6.1):
  Add v2.0.tar.gz, remove v1.6.1.tar.gz
  Remove obsolete v1.6.1-implicit-fallthrough.patch .
- Remove obsolete patches:
  gdb-fix-python37-breakage.patch,
  gdb-pahole-python2.patch .
- Added patches from Fedora:
  gdb-rhbz1491128-batch-mode-exit-status-1of2.patch,
  gdb-rhbz1491128-batch-mode-exit-status-2of2.patch,
  gdb-rhbz1553104-s390x-arch12-test.patch,
  gdb-use-pulongest-aarch64-linux-tdep.patch .
- Removed obsolete patches from Fedora:
  gdb-6.6-bz235197-fork-detach-info.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-gdb-add-index-script.patch,
  gdb-ppc64-stwux-tautological-compare.patch,
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch,
  gdb-stale-frame_info.patch .
- Most other patches rebased.</changelog>
  <changelog author="tdevries@suse.com" date="1541592000">- Fix crash when reading core [bsc #1109013]
  * Add gdb-fix-crash-when-reading-core.patch
    https://sourceware.org/ml/gdb-cvs/2018-11/msg00022.html</changelog>
</package>
<package pkgid="eb3aea6599b0053bfa5ee0d1e51b3b198386fff7d726d3c6874619b5e9659707" name="gdbserver" arch="x86_64">
  <version epoch="0" ver="8.2" rel="lp150.2.3.1"/>
  <changelog author="matz@suse.com" date="1470657600">- Amend gdb-glibc-vdso-workaround.patch to ignore further
  vdso filenames on ppc64 and s390x.  [bnc#944105]</changelog>
  <changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
  <changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
  <changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
  <changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
  <changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
  <changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
  <changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
  <changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
  <changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>
  <changelog author="matz@suse.com" date="1507550400">- Remove %clean section.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- switch to Python 3 for Tumbleweed 1320 and up</changelog>
  <changelog author="schwab@suse.de" date="1510747200">- Support --without=testsuite and disable testsuite for qemu-linux-user
  builds</changelog>
  <changelog author="matz@suse.com" date="1520596800">- Rebase to 8.1 release:
  * ptype/o prints offsets and sizes of members (like pahole)
  * tab-completion improved: quoting function names is not generally
    necessary anymore, completion offers for breakpoint don't include
    data symbol
  * enable/disable breakpoints now accept ranges: 'disable 1.3-5'
  * new commands:
  - set/show cwd: working directory of debuggee
  - set/show compile-gcc: program to use for 'compile' command
  - starti: start program and stop at first instruction
  - TUI single-key commands: 'i' for stepi and 'o' for nexti
  * --readnever option disables any reading of debug info (for dumping)
  * s390: guarded storage register access for z14
  * gcore option -a dumps all memory mapping
  * C++ breakpoints: 'b foo' will now set a breakpoint on all functions
    and methods named 'foo' no matter the scope.  Use -qualified if you
    don't want that
  * python scripting: new events gdb.new_inferior, gdb.inferior_deleted
    and gdb.new_thread; new command rbreak (breakpoint accepting regexps)
  * gdbserver can be passed environment parameters to remote debuggee
- Added patches from Fedora:
  gdb-ppc64-stwux-tautological-compare.patch
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch
  gdb-vla-intel-fix-print-char-array.patch
- Removed unused gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2
- Removed obsolete upstream patches:
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Removed obsolete Fedora patches:
  gdb-6.3-rh-dummykfail-20041202.patch
  gdb-6.6-threads-static-test.patch
  gdb-add-index-chmod.patch
  gdb-glibc-vdso-workaround.patch
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1522152000">- Add some -Wno-error flags for gcc-8 compatibility.</changelog>
  <changelog author="tchvatal@suse.com" date="1533902400">- Apply patch from fedora to build with python3.7:
  * gdb-fix-python37-breakage.patch</changelog>
  <changelog author="matz@suse.com" date="1536667200">- Rebase to 8.2 release (as in fedora 29 @ c720d998):
  * 'symbol-file' and 'add-symbol-file' accept -o to add relative
    offset to all sections
  * pager accepts 'c' response to disable it for rest of command
  * accept _Alignof and alignof in C resp. C++ expressions
  * new target riscv*-*-elf
  * python API extensions: gdb.Type.align, gdb.execute deals
    with multi-line gdb commands, gdb.convenience_variable and
    gdb.set_convenience_variable to access convenience variables,
  * aarch64: properly support hardware watchpoints on unaligned
    addresses (needs kernel &gt;= 4.10)
- Add gdb-fix-s390-build.diff for a Wformat error on s390.
- Support access to new POWER8 registers [fate#325178, fate#326120]
  Add patches gdb-rhbz1187581-power8-regs-1of7.patch,
  gdb-rhbz1187581-power8-regs-2of7.patch,
  gdb-rhbz1187581-power8-regs-3of7.patch,
  gdb-rhbz1187581-power8-regs-4of7.patch,
  gdb-rhbz1187581-power8-regs-5of7.patch,
  gdb-rhbz1187581-power8-regs-6of7.patch,
  gdb-rhbz1187581-power8-regs-7of7.patch .
- Support ipv6 for gdbserver connections:
  Add patches gdb-rhbz881849-ipv6-1of3.patch,
  gdb-rhbz881849-ipv6-2of3.patch,
  gdb-rhbz881849-ipv6-3of3.patch .
- Update to intel processor trace library 2.0 (from 1.6.1):
  Add v2.0.tar.gz, remove v1.6.1.tar.gz
  Remove obsolete v1.6.1-implicit-fallthrough.patch .
- Remove obsolete patches:
  gdb-fix-python37-breakage.patch,
  gdb-pahole-python2.patch .
- Added patches from Fedora:
  gdb-rhbz1491128-batch-mode-exit-status-1of2.patch,
  gdb-rhbz1491128-batch-mode-exit-status-2of2.patch,
  gdb-rhbz1553104-s390x-arch12-test.patch,
  gdb-use-pulongest-aarch64-linux-tdep.patch .
- Removed obsolete patches from Fedora:
  gdb-6.6-bz235197-fork-detach-info.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-gdb-add-index-script.patch,
  gdb-ppc64-stwux-tautological-compare.patch,
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch,
  gdb-stale-frame_info.patch .
- Most other patches rebased.</changelog>
</package>
<package pkgid="12c95e6925e88f7dc87acf941fb59d500f671075651298b9c0e42361d348f0c6" name="gdbserver" arch="x86_64">
  <version epoch="0" ver="8.2" rel="lp150.2.6.1"/>
  <changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
  <changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
  <changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
  <changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
  <changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
  <changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
  <changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
  <changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
  <changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>
  <changelog author="matz@suse.com" date="1507550400">- Remove %clean section.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- switch to Python 3 for Tumbleweed 1320 and up</changelog>
  <changelog author="schwab@suse.de" date="1510747200">- Support --without=testsuite and disable testsuite for qemu-linux-user
  builds</changelog>
  <changelog author="matz@suse.com" date="1520596800">- Rebase to 8.1 release:
  * ptype/o prints offsets and sizes of members (like pahole)
  * tab-completion improved: quoting function names is not generally
    necessary anymore, completion offers for breakpoint don't include
    data symbol
  * enable/disable breakpoints now accept ranges: 'disable 1.3-5'
  * new commands:
  - set/show cwd: working directory of debuggee
  - set/show compile-gcc: program to use for 'compile' command
  - starti: start program and stop at first instruction
  - TUI single-key commands: 'i' for stepi and 'o' for nexti
  * --readnever option disables any reading of debug info (for dumping)
  * s390: guarded storage register access for z14
  * gcore option -a dumps all memory mapping
  * C++ breakpoints: 'b foo' will now set a breakpoint on all functions
    and methods named 'foo' no matter the scope.  Use -qualified if you
    don't want that
  * python scripting: new events gdb.new_inferior, gdb.inferior_deleted
    and gdb.new_thread; new command rbreak (breakpoint accepting regexps)
  * gdbserver can be passed environment parameters to remote debuggee
- Added patches from Fedora:
  gdb-ppc64-stwux-tautological-compare.patch
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch
  gdb-vla-intel-fix-print-char-array.patch
- Removed unused gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2
- Removed obsolete upstream patches:
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Removed obsolete Fedora patches:
  gdb-6.3-rh-dummykfail-20041202.patch
  gdb-6.6-threads-static-test.patch
  gdb-add-index-chmod.patch
  gdb-glibc-vdso-workaround.patch
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1522152000">- Add some -Wno-error flags for gcc-8 compatibility.</changelog>
  <changelog author="tchvatal@suse.com" date="1533902400">- Apply patch from fedora to build with python3.7:
  * gdb-fix-python37-breakage.patch</changelog>
  <changelog author="matz@suse.com" date="1536667200">- Rebase to 8.2 release (as in fedora 29 @ c720d998):
  * 'symbol-file' and 'add-symbol-file' accept -o to add relative
    offset to all sections
  * pager accepts 'c' response to disable it for rest of command
  * accept _Alignof and alignof in C resp. C++ expressions
  * new target riscv*-*-elf
  * python API extensions: gdb.Type.align, gdb.execute deals
    with multi-line gdb commands, gdb.convenience_variable and
    gdb.set_convenience_variable to access convenience variables,
  * aarch64: properly support hardware watchpoints on unaligned
    addresses (needs kernel &gt;= 4.10)
- Add gdb-fix-s390-build.diff for a Wformat error on s390.
- Support access to new POWER8 registers [fate#325178, fate#326120]
  Add patches gdb-rhbz1187581-power8-regs-1of7.patch,
  gdb-rhbz1187581-power8-regs-2of7.patch,
  gdb-rhbz1187581-power8-regs-3of7.patch,
  gdb-rhbz1187581-power8-regs-4of7.patch,
  gdb-rhbz1187581-power8-regs-5of7.patch,
  gdb-rhbz1187581-power8-regs-6of7.patch,
  gdb-rhbz1187581-power8-regs-7of7.patch .
- Support ipv6 for gdbserver connections:
  Add patches gdb-rhbz881849-ipv6-1of3.patch,
  gdb-rhbz881849-ipv6-2of3.patch,
  gdb-rhbz881849-ipv6-3of3.patch .
- Update to intel processor trace library 2.0 (from 1.6.1):
  Add v2.0.tar.gz, remove v1.6.1.tar.gz
  Remove obsolete v1.6.1-implicit-fallthrough.patch .
- Remove obsolete patches:
  gdb-fix-python37-breakage.patch,
  gdb-pahole-python2.patch .
- Added patches from Fedora:
  gdb-rhbz1491128-batch-mode-exit-status-1of2.patch,
  gdb-rhbz1491128-batch-mode-exit-status-2of2.patch,
  gdb-rhbz1553104-s390x-arch12-test.patch,
  gdb-use-pulongest-aarch64-linux-tdep.patch .
- Removed obsolete patches from Fedora:
  gdb-6.6-bz235197-fork-detach-info.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-gdb-add-index-script.patch,
  gdb-ppc64-stwux-tautological-compare.patch,
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch,
  gdb-stale-frame_info.patch .
- Most other patches rebased.</changelog>
  <changelog author="tdevries@suse.com" date="1541592000">- Fix crash when reading core [bsc #1109013]
  * Add gdb-fix-crash-when-reading-core.patch
    https://sourceware.org/ml/gdb-cvs/2018-11/msg00022.html</changelog>
</package>
<package pkgid="ab7933f7f3002dd0125084ecea93c616696bea4227b3a18ddaba6e47869f5cb5" name="gdm" arch="src">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.3.1"/>
  <changelog author="yfjiang@suse.com" date="1517313600">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: examine
  filename argument in gdm_settings_desktop_backend_new instead of
  examining GDM_RUNTIME_CONF (bsc#1078030).</changelog>
  <changelog author="yfjiang@suse.com" date="1517400000">- Add back translation-update-upstream as BuildRequires since
  SLE still needs it.</changelog>
  <changelog author="xwang@suse.com" date="1519905600">- Remove gdm-default-wm-sle12.patch: default session in SLE15
  becomes 'GNOME', don't need this patch anymore.</changelog>
  <changelog author="xwang@suse.com" date="1519992000">- Add gdm-Revert-session-don-t-call-gdm_session_defaults_chang.patch:
  fix showing right active session of user in login dialog
  (bsc#1082958 bgo#793609).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519992001">- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Remove obsolete %clean section as RPM already do this kind of
  work itself.
- Update typelib-1_0-Gdm-1_0 package's summary to make it shorter
  but still meaningful.
- Update gdmflexiserver package's summary to avoid redundancies and
  correct name case in the description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992002">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
</package>
<package pkgid="1a8804571a1f0d250fafd2da8fa3c18acd4e0c0ac092ad19098ae5e59bca76dc" name="gdm" arch="x86_64">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.3.1"/>
  <changelog author="yfjiang@suse.com" date="1517313600">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: examine
  filename argument in gdm_settings_desktop_backend_new instead of
  examining GDM_RUNTIME_CONF (bsc#1078030).</changelog>
  <changelog author="yfjiang@suse.com" date="1517400000">- Add back translation-update-upstream as BuildRequires since
  SLE still needs it.</changelog>
  <changelog author="xwang@suse.com" date="1519905600">- Remove gdm-default-wm-sle12.patch: default session in SLE15
  becomes 'GNOME', don't need this patch anymore.</changelog>
  <changelog author="xwang@suse.com" date="1519992000">- Add gdm-Revert-session-don-t-call-gdm_session_defaults_chang.patch:
  fix showing right active session of user in login dialog
  (bsc#1082958 bgo#793609).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519992001">- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Remove obsolete %clean section as RPM already do this kind of
  work itself.
- Update typelib-1_0-Gdm-1_0 package's summary to make it shorter
  but still meaningful.
- Update gdmflexiserver package's summary to avoid redundancies and
  correct name case in the description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992002">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
</package>
<package pkgid="faff7d2bcaa03029cea9beba0ec0925a6b89c102ada615de4c67b6601394adeb" name="gdm-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.3.1"/>
  <changelog author="yfjiang@suse.com" date="1517313600">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: examine
  filename argument in gdm_settings_desktop_backend_new instead of
  examining GDM_RUNTIME_CONF (bsc#1078030).</changelog>
  <changelog author="yfjiang@suse.com" date="1517400000">- Add back translation-update-upstream as BuildRequires since
  SLE still needs it.</changelog>
  <changelog author="xwang@suse.com" date="1519905600">- Remove gdm-default-wm-sle12.patch: default session in SLE15
  becomes 'GNOME', don't need this patch anymore.</changelog>
  <changelog author="xwang@suse.com" date="1519992000">- Add gdm-Revert-session-don-t-call-gdm_session_defaults_chang.patch:
  fix showing right active session of user in login dialog
  (bsc#1082958 bgo#793609).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519992001">- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Remove obsolete %clean section as RPM already do this kind of
  work itself.
- Update typelib-1_0-Gdm-1_0 package's summary to make it shorter
  but still meaningful.
- Update gdmflexiserver package's summary to avoid redundancies and
  correct name case in the description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992002">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
</package>
<package pkgid="5bde40a97a1e3c694da37136c9b9015de977c3680b80b435ebb4aaaa44e8cf94" name="gdm-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.3.1"/>
  <changelog author="yfjiang@suse.com" date="1517313600">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: examine
  filename argument in gdm_settings_desktop_backend_new instead of
  examining GDM_RUNTIME_CONF (bsc#1078030).</changelog>
  <changelog author="yfjiang@suse.com" date="1517400000">- Add back translation-update-upstream as BuildRequires since
  SLE still needs it.</changelog>
  <changelog author="xwang@suse.com" date="1519905600">- Remove gdm-default-wm-sle12.patch: default session in SLE15
  becomes 'GNOME', don't need this patch anymore.</changelog>
  <changelog author="xwang@suse.com" date="1519992000">- Add gdm-Revert-session-don-t-call-gdm_session_defaults_chang.patch:
  fix showing right active session of user in login dialog
  (bsc#1082958 bgo#793609).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519992001">- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Remove obsolete %clean section as RPM already do this kind of
  work itself.
- Update typelib-1_0-Gdm-1_0 package's summary to make it shorter
  but still meaningful.
- Update gdmflexiserver package's summary to avoid redundancies and
  correct name case in the description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992002">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
</package>
<package pkgid="e08bf8cd707708710deff9a3bb761eabc45e139c8cee24427177eee04b0147bb" name="gdm-lang" arch="noarch">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.3.1"/>
  <changelog author="yfjiang@suse.com" date="1517313600">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: examine
  filename argument in gdm_settings_desktop_backend_new instead of
  examining GDM_RUNTIME_CONF (bsc#1078030).</changelog>
  <changelog author="yfjiang@suse.com" date="1517400000">- Add back translation-update-upstream as BuildRequires since
  SLE still needs it.</changelog>
  <changelog author="xwang@suse.com" date="1519905600">- Remove gdm-default-wm-sle12.patch: default session in SLE15
  becomes 'GNOME', don't need this patch anymore.</changelog>
  <changelog author="xwang@suse.com" date="1519992000">- Add gdm-Revert-session-don-t-call-gdm_session_defaults_chang.patch:
  fix showing right active session of user in login dialog
  (bsc#1082958 bgo#793609).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519992001">- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Remove obsolete %clean section as RPM already do this kind of
  work itself.
- Update typelib-1_0-Gdm-1_0 package's summary to make it shorter
  but still meaningful.
- Update gdmflexiserver package's summary to avoid redundancies and
  correct name case in the description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992002">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
</package>
<package pkgid="7599725063b9c688abade40722654ca745cc20f96cfbb0e03ac32e717cc1f2df" name="gdmflexiserver" arch="noarch">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.3.1"/>
  <changelog author="yfjiang@suse.com" date="1517313600">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: examine
  filename argument in gdm_settings_desktop_backend_new instead of
  examining GDM_RUNTIME_CONF (bsc#1078030).</changelog>
  <changelog author="yfjiang@suse.com" date="1517400000">- Add back translation-update-upstream as BuildRequires since
  SLE still needs it.</changelog>
  <changelog author="xwang@suse.com" date="1519905600">- Remove gdm-default-wm-sle12.patch: default session in SLE15
  becomes 'GNOME', don't need this patch anymore.</changelog>
  <changelog author="xwang@suse.com" date="1519992000">- Add gdm-Revert-session-don-t-call-gdm_session_defaults_chang.patch:
  fix showing right active session of user in login dialog
  (bsc#1082958 bgo#793609).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519992001">- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Remove obsolete %clean section as RPM already do this kind of
  work itself.
- Update typelib-1_0-Gdm-1_0 package's summary to make it shorter
  but still meaningful.
- Update gdmflexiserver package's summary to avoid redundancies and
  correct name case in the description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992002">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
</package>
<package pkgid="8d1bfca98d8105400d452bdd24f99137ba245dc3e941de91b2d09a27b2a5c13c" name="geotiff" arch="src">
  <version epoch="0" ver="1.4.2" rel="lp150.2.3.1"/>
  <changelog author="judas_iscariote@shorewall.net" date="1184414400">- spec file cleanup
  Mon Jun 19 12:00:00 UTC 2006 - Tim Fischer
- SPEC file created for SUSE 10.1</changelog>
  <changelog author="Dirk St&#xF6;cker &lt;opensuse@dstoecker.de&gt; 1.2.4" date="1213012800">- SPEC file created for openSUSE build service</changelog>
  <changelog author="Dirk St&#xF6;cker &lt;opensuse@dstoecker.de&gt; 1.2.5" date="1246017600">- Updated to 1.2.5
- Using parts of spec file from PackMan for improved quality</changelog>
  <changelog author="Dirk St&#xF6;cker &lt;opensuse@dstoecker.de&gt; 1.3.0" date="1278590400">- Updated to 1.3.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1302350400">- fix 64 bit issues, enable debug</changelog>
  <changelog author="Rene van Paassen&lt;rene.vanpaassen@gmail.com&gt;" date="1302523200">- removed now superfluous "%exclude %{_libdir}/debug" for i586</changelog>
  <changelog author="Michael Behrisch &lt;behrisch@users.sf.net&gt;" date="1332417600">- added gcc build dependency
- removed unneeded data dir fix for non-Suse</changelog>
  <changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1338033600">- Updated to 1.4.0</changelog>
  <changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1339761600">- Fix in pkgconfig file</changelog>
  <changelog author="mpluskal@suse.com" date="1422705600">- Cleanup spec file using spec-cleaner
- Remove commented out patch
- Add build dependency on graphviz to enable images in
  documentation
- Add build dependency on pkg-config to enable dependency generation
  of .pc file
- Update to 1.4.1
  * CMake: Fix up SONAME and VERSION to better
    match configure.ac
  * csv/datum_shift_pref.csv: revert change in preferred datum shift
    for Pulkovo 1942(58) related to ticket #1851 - not appropriate.
  * Preparing 1.4.1 release.
  * csv/datum_shift_pref.csv: Update Pulkova 1942(58) to use a
    particular transformation (#52).
  * bin/geotifcp.c: added B, L, C and M flags from tiffcp (#68)"
  * geo_print.c: clarify that the buffer passed to read methods is only
    guaranteed to be 1024 bytes long (#62).
  * CMake: Support for INCODE build. If you need INCODE support,
    with the definitions compiled into headers, use CMake as your
    configuration/build platform.
  * csv: Override three Brazilian datum shifts on behalf of Daniel
    Miranda and the OSGeo Brazilian Chapter.
  * csv: Upgrade to EPSG 8.5
  * INCODE: Adapt Ben Adler's patch in #66 to add INCODE support to the
    CMake configuration
  * geo_normalize.c: #59, better Mercator_2SP support
  * geotifcp: Do not segfault when a TIFF file has WhitePoint set #65
  * geo_names.c: fix #67 -- add VerticalUnitsGeoKey
  * add_esri_column.py: manually replace D_SIRGAS-Chile by D_Peru96 for GCS_Peru96. Likely an error in the FileGDB SDK db (#63)
  * csv: Upgrade to EPSG 8.4
  * tiffcp: Add bigtiff output support with the -8 flag like tiffcp.  Contributed by
    Mohannad Al-Durgham (nwgeo.com).
  * csv: Upgrade to EPSG 8.2
  * csv/datum_shift_pref.csv: Force OSGB 1936 preferred datum shift.
    (http://trac.osgeo.org/gdal/ticket/4597)</changelog>
  <changelog author="mpluskal@suse.com" date="1431172800">- Do not build or ship static libraries and .la files
- Remove useless conditions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="tzotsos@opensuse.org" date="1475236800">- Switched download link to OSGeo server</changelog>
  <changelog author="tzotsos@opensuse.org" date="1475323200">- Update to 1.4.2
  * update to EPSG v8.9 database
  * cleanups and security fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1489320000">- Small packaging cleanup
- Prepare version update for Leap and backports (boo#1029595)</changelog>
  <changelog author="mpluskal@suse.com" date="1527595200">- Fix incorrect library (boo#1094802)</changelog>
</package>
<package pkgid="62878d53a6ec59048a95923f7d9a48ff6dba15e3bbb58522ac8afe44e5c93106" name="geotiff" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp150.2.3.1"/>
  <changelog author="Dirk St&#xF6;cker &lt;opensuse@dstoecker.de&gt; 1.2.5" date="1246017600">- Updated to 1.2.5
- Using parts of spec file from PackMan for improved quality</changelog>
  <changelog author="Dirk St&#xF6;cker &lt;opensuse@dstoecker.de&gt; 1.3.0" date="1278590400">- Updated to 1.3.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1302350400">- fix 64 bit issues, enable debug</changelog>
  <changelog author="Rene van Paassen&lt;rene.vanpaassen@gmail.com&gt;" date="1302523200">- removed now superfluous "%exclude %{_libdir}/debug" for i586</changelog>
  <changelog author="Michael Behrisch &lt;behrisch@users.sf.net&gt;" date="1332417600">- added gcc build dependency
- removed unneeded data dir fix for non-Suse</changelog>
  <changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1338033600">- Updated to 1.4.0</changelog>
  <changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1339761600">- Fix in pkgconfig file</changelog>
  <changelog author="mpluskal@suse.com" date="1422705600">- Cleanup spec file using spec-cleaner
- Remove commented out patch
- Add build dependency on graphviz to enable images in
  documentation
- Add build dependency on pkg-config to enable dependency generation
  of .pc file
- Update to 1.4.1
  * CMake: Fix up SONAME and VERSION to better
    match configure.ac
  * csv/datum_shift_pref.csv: revert change in preferred datum shift
    for Pulkovo 1942(58) related to ticket #1851 - not appropriate.
  * Preparing 1.4.1 release.
  * csv/datum_shift_pref.csv: Update Pulkova 1942(58) to use a
    particular transformation (#52).
  * bin/geotifcp.c: added B, L, C and M flags from tiffcp (#68)"
  * geo_print.c: clarify that the buffer passed to read methods is only
    guaranteed to be 1024 bytes long (#62).
  * CMake: Support for INCODE build. If you need INCODE support,
    with the definitions compiled into headers, use CMake as your
    configuration/build platform.
  * csv: Override three Brazilian datum shifts on behalf of Daniel
    Miranda and the OSGeo Brazilian Chapter.
  * csv: Upgrade to EPSG 8.5
  * INCODE: Adapt Ben Adler's patch in #66 to add INCODE support to the
    CMake configuration
  * geo_normalize.c: #59, better Mercator_2SP support
  * geotifcp: Do not segfault when a TIFF file has WhitePoint set #65
  * geo_names.c: fix #67 -- add VerticalUnitsGeoKey
  * add_esri_column.py: manually replace D_SIRGAS-Chile by D_Peru96 for GCS_Peru96. Likely an error in the FileGDB SDK db (#63)
  * csv: Upgrade to EPSG 8.4
  * tiffcp: Add bigtiff output support with the -8 flag like tiffcp.  Contributed by
    Mohannad Al-Durgham (nwgeo.com).
  * csv: Upgrade to EPSG 8.2
  * csv/datum_shift_pref.csv: Force OSGB 1936 preferred datum shift.
    (http://trac.osgeo.org/gdal/ticket/4597)</changelog>
  <changelog author="mpluskal@suse.com" date="1431172800">- Do not build or ship static libraries and .la files
- Remove useless conditions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="tzotsos@opensuse.org" date="1475236800">- Switched download link to OSGeo server</changelog>
  <changelog author="tzotsos@opensuse.org" date="1475323200">- Update to 1.4.2
  * update to EPSG v8.9 database
  * cleanups and security fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1489320000">- Small packaging cleanup
- Prepare version update for Leap and backports (boo#1029595)</changelog>
  <changelog author="mpluskal@suse.com" date="1527595200">- Fix incorrect library (boo#1094802)</changelog>
</package>
<package pkgid="21d007a4f60caa1a9a74ef6add7314967ac09396ae4605dcf7719579970c100f" name="geotiff-devel" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp150.2.3.1"/>
  <changelog author="Dirk St&#xF6;cker &lt;opensuse@dstoecker.de&gt; 1.2.5" date="1246017600">- Updated to 1.2.5
- Using parts of spec file from PackMan for improved quality</changelog>
  <changelog author="Dirk St&#xF6;cker &lt;opensuse@dstoecker.de&gt; 1.3.0" date="1278590400">- Updated to 1.3.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1302350400">- fix 64 bit issues, enable debug</changelog>
  <changelog author="Rene van Paassen&lt;rene.vanpaassen@gmail.com&gt;" date="1302523200">- removed now superfluous "%exclude %{_libdir}/debug" for i586</changelog>
  <changelog author="Michael Behrisch &lt;behrisch@users.sf.net&gt;" date="1332417600">- added gcc build dependency
- removed unneeded data dir fix for non-Suse</changelog>
  <changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1338033600">- Updated to 1.4.0</changelog>
  <changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1339761600">- Fix in pkgconfig file</changelog>
  <changelog author="mpluskal@suse.com" date="1422705600">- Cleanup spec file using spec-cleaner
- Remove commented out patch
- Add build dependency on graphviz to enable images in
  documentation
- Add build dependency on pkg-config to enable dependency generation
  of .pc file
- Update to 1.4.1
  * CMake: Fix up SONAME and VERSION to better
    match configure.ac
  * csv/datum_shift_pref.csv: revert change in preferred datum shift
    for Pulkovo 1942(58) related to ticket #1851 - not appropriate.
  * Preparing 1.4.1 release.
  * csv/datum_shift_pref.csv: Update Pulkova 1942(58) to use a
    particular transformation (#52).
  * bin/geotifcp.c: added B, L, C and M flags from tiffcp (#68)"
  * geo_print.c: clarify that the buffer passed to read methods is only
    guaranteed to be 1024 bytes long (#62).
  * CMake: Support for INCODE build. If you need INCODE support,
    with the definitions compiled into headers, use CMake as your
    configuration/build platform.
  * csv: Override three Brazilian datum shifts on behalf of Daniel
    Miranda and the OSGeo Brazilian Chapter.
  * csv: Upgrade to EPSG 8.5
  * INCODE: Adapt Ben Adler's patch in #66 to add INCODE support to the
    CMake configuration
  * geo_normalize.c: #59, better Mercator_2SP support
  * geotifcp: Do not segfault when a TIFF file has WhitePoint set #65
  * geo_names.c: fix #67 -- add VerticalUnitsGeoKey
  * add_esri_column.py: manually replace D_SIRGAS-Chile by D_Peru96 for GCS_Peru96. Likely an error in the FileGDB SDK db (#63)
  * csv: Upgrade to EPSG 8.4
  * tiffcp: Add bigtiff output support with the -8 flag like tiffcp.  Contributed by
    Mohannad Al-Durgham (nwgeo.com).
  * csv: Upgrade to EPSG 8.2
  * csv/datum_shift_pref.csv: Force OSGB 1936 preferred datum shift.
    (http://trac.osgeo.org/gdal/ticket/4597)</changelog>
  <changelog author="mpluskal@suse.com" date="1431172800">- Do not build or ship static libraries and .la files
- Remove useless conditions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="tzotsos@opensuse.org" date="1475236800">- Switched download link to OSGeo server</changelog>
  <changelog author="tzotsos@opensuse.org" date="1475323200">- Update to 1.4.2
  * update to EPSG v8.9 database
  * cleanups and security fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1489320000">- Small packaging cleanup
- Prepare version update for Leap and backports (boo#1029595)</changelog>
  <changelog author="mpluskal@suse.com" date="1527595200">- Fix incorrect library (boo#1094802)</changelog>
</package>
<package pkgid="2e4812800e748c12173a11cc72aa4c7c4f7dab0ab4f87e3d00e043e67602c097" name="gettext-csharp" arch="src">
  <version epoch="0" ver="0.19.8.1" rel="lp150.3.3.1"/>
  <changelog author="pth@suse.de" date="1292932800">- Update to 0.18.1. Changes since 0.17:
  Version 0.18.1 - June 2010
  * msggrep: A '$' anchor in a regular expression now also matches
    the end of the string, even if it does not end in a newline.
  * Dependencies:
    The libraries and programs are now linked with libunistring if
    this library is already installed.
  * Installation options:
    The configure option --with-cvs is deprecated. The 'autopoint'
    program will now use the 'git' program by default to compress its
    archive.  If the configure option --without-git is specified,
    'autopoint' will not rely on 'git', but will instead rely on a
    locally installed 3 MB large archive.
  Version 0.18 - May 2010
  * PO file format:
    There is a new field 'Language' in the header entry.  It denotes
    the language code (plus optional country code) for the PO file.
    This field can be used by automated tools, such as spell
    checkers. It is expected to be more reliable than looking at the
    file name or at the 'Language-Team' field in the header entry.
    msgmerge, msgcat, msgen have a new option --lang that allows to
    specify this field. Additionally, msgmerge fills in this new
    field by looking at the 'Language-Team' field (if the --lang
    option is not given).
  * xgettext and PO file format:
    For messages with plural forms, programmers can inform the
    translators about the range of possible values of the numeric
    argument, like this:
    /* xgettext: range: 0..15 */
    This information 'range: 0..15' is stored in the PO file as a
    flag attached to the message. Translators can produce better
    translations when they know that the numeric argument is small.
  * Colorized PO files:
    msgattrib, msgcomm, msgconv, msgen, msgfilter, msggrep, msginit,
    msgmerge, msgunfmt, msguniq, xgettext now have options --color
    and --style, like msgcat has since version 0.17.
  * msgmerge is up to 10 times faster when the PO and POT files are
    large. This speedup was contributed by Ralf Wildenhues.
  * msgcmp has a new option -N/--no-fuzzy-matching, like msgmerge has
    since version 0.12.
  * msgfilter now sets environment variables during the invocation of
    the filter, indicating the msgid and location of the messge being
    processed.
  * xgettext now can extract plural forms from Qt 4 programs. The
    recommended xgettext command-line options for this case are:
  - -qt --keyword=tr:1,1t --keyword=tr:1,2c,2t --keyword=tr:1,1,2c,3t
  * xgettext --language=GCC-source now recognizes also the format
    strings used in the Fortran front-end of the GCC compiler, and
    marks them as 'gfc-internal-format'.
  * autopoint can now be used to update several PO directories all
    together.
  * PO mode changes:
  - PO files with plural entries are now correctly handled.
  - Editing a message with previous msgid (in comments) removes these
    comments.  Contributed by Noritada Kobayashi.
  * The po/Makevars file has a new field MSGMERGE_OPTIONS, that can
    be used to adjust msgmerge's operation.
  * The use of the macro AM_GNU_GETTEXT without 'external' argument
    and the --intl option of the gettextize program are deprecated
    and will be removed in the next release. Instead of including
    the intl sources in your package, we suggest making the libintl
    library an (optional) prerequisite of your package.
  * Updated the meaning of 'gcc-internal-format' to match GCC 4.3.
  * Installation options:
    The configure options --without-cvs and --with-git can be used to
    specify whether 'autopoint' will use the 'cvs' program, or the
    'git' program, or none at all. These options allow to trade
    dependencies against installed package size: If --without-cvs is
    specified and --with-git is not specified, 'autopoint' will not
    rely on 'cvs' or 'git', but will instead rely on a locally
    installed a 3 MB large archive.
  * Portability: The msgfilter program now also works on native Woe32
  - platforms. Compiled C# message catalogs now also work with
  - 'mono' versions from 2009
    or newer.</changelog>
  <changelog author="aj@suse.de" date="1342958400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="pth@suse.de" date="1348488000">- remove silent_rules from AM_INIT_AUTOMAKE to make autoreconf
  succeed on older distributions.
- Rename po-mode.diff to gettext-po-mode.diff</changelog>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="christoph.miebach@web.de" date="1370692800">- Update to version 0.18.2.1: Version 0.18.2 - December 2012
  + xgettext now understands the block comment syntax of Guile 2.0.
  + libgettextpo library:
  * The initial msgstr of a new message is now "", not NULL.
  * Bug fixes in the functions po_message_is_range,
    po_file_check_all, po_message_check_all.
  + Installation options:
    The configure options --with-xz and --with-bzip2 can be used to
    specify alternate compression methods for the archive used by
    the 'autopoint' program. These options, together with
  - -with-git, allow to trade dependencies against installed
    package size. --with-xz has the highest compression rate,
    followed by --with-git, followed by --with-bzip2.
  + Autoconf macros:
  * The autoconf macros installed by 'gettextize' now work with
    the forthcoming Automake 1.14 and require Autoconf version
    2.60 or newer.
  + Portability:
  * Building on MacOS X 10.7, Cygwin 1.7.10, and newer 64-bit
    mingw is now supported.
- Remove obsolete patches:
  + getext-stdio.in.patch
  + gettext-codecleanup.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1371297600">- Add glib2-devel libcroco-devel libxml2-devel to build requires to avoid
  using the included copies.
- gettext-configure.patch: Fix syntax in libxml check to avoid spurious
  failure</changelog>
  <changelog author="christoph.miebach@web.de" date="1376308800">- Version 0.18.3 - July 2013
  * Runtime behaviour:
    On Mac OS X systems, the setlocale() function now properly
    invalidates loaded message catalogs when a locale has been set.
  * Programming languages support:
  - C++:
    The gnu::autosprintf class now provides an assignment
    operator.
  - Glade:
    xgettext now supports GtkBuider file format used by Glade 3.
    xgettext now also extracts contexts (msgctxt) from Glade 2
    and GtkBuider files.
  - JavaScript:
    xgettext now partially supports JavaScript.  Since the
    current JavaScript specification (ECMA-262) does not define
    the standard set of formatting methods nor translation
    functions, the implementation supports only a limited
    set of formatting methods and translation functions commonly
    used in Gjs and other popular JavaScript implemenations and
    libraries.
  - Lua:
    xgettext now supports Lua, using ?ubomír Remák's lua-gettext.
  - Python:
    xgettext and msgfmt's format string checking now recognize
    Python format string in braced syntax (PEP 3101).  xgettext
    now also supports explicit string concatenation with '+' and
    handles platform dependent line terminators (LF/CR/CRLF)
    transparently.
  - Tcl:
    Bug fix in xgettext Unicode escape handling.
  - Vala:
    xgettext now supports Vala.
  * msgattrib now has --previous option to keep previous msgid when
    making messages fuzzy, similar to msgmerge --previous.
  * msgfmt now checks PO file headers more strictly with less
    false-positives.
  * 'gettextize' now checks macro directories specified with
    AC_CONFIG_MACRO_DIRS in configure.ac.
  * Portability:
  - msginit now does not require GNU sed.
  - The Makefile rule for generating en@quot and en@boldquot now
    uses @SED@ variable instead of hard-coded 'sed' command to
    allow users to supply GNU sed.
  * Future backward-incompatibilities:
  - In future Gettext versions, the files installed by
    'gettextize' will require Automake 1.10 or later.  This will
    improve the compatibility of user projects with newer
    Automake versions.
- Remove upstreamed patches:
  gettext-configure.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1389528000">- GNU gettext 0.18.3.2:
  * Add missing extern-inline.m4 into archive.
- verify source signature</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1401796800">- GNU gettext 0.19:
  - Programming languages support:
  * Desktop Entry:
    xgettext and msgfmt now support .desktop files, used by
    desktop applications, as input and output.
  * GSettings:
    xgettext now supports GSettings schema file format used by
    GNOME applications.
  * JavaScript:
    xgettext now recognizes E4X (ECMA-357) constructs.
  * PHP:
    Single and double quotes around heredoc markers are now
    recognized.
  * Python:
    The acceptable format specifiers in the braced-syntax format
    strings is now limited to the Standard Format Specifiers, to
    reasonably avoid false-positives.
  * Scheme:
    The gettext shorthand form _"abc", used by GIMP script-fu, is
    now recognized by xgettext.
  * C and Vala:
    xgettext now recognizes C99-style Unicode character escapes.
  - The --add-location option of msgattrib, msgcat, msgcomm,
    msgconv, msgen, msgfilter, msggrep, msgmerge, msguniq, and
    xgettext commands now takes an optional argument 'never',
    'full', or 'file', to control the format of "#: ..." comments.
  - msgfmt now has --source option to keep generated .java file
    when running in Java mode.
  - msgattrib now has --empty option that sets msgstr to empty when
    clearing fuzzy flag.
  * msgexec and msgfilter pass the plural information to subprocess
    through the environment variable MSG{EXEC,FILTER}_MSGID_PLURAL
    and MSG{EXEC,FILTER}_PLURAL_FORM.
  * New built-in filters 'quot' and 'boldquot' have been added to
    msgfilter.  These filters convert Latin quotation marks ('...',
    "...") into Unicode quotation marks (for example, U+2018) if
    possible, similar to the sed commands used in po/Rules-quot and
    po/Rules-boldquot.
  * The po/Makevars file has a couple of new options
    PO_DEPENDS_ON_POT and DIST_DEPENDS_ON_UPDATE_PO, that can be
    used to adjust the behavior of updating PO files on demand.
  * xgettext now strips prefixed string before the comment tag.
    This is useful to support C-style comment like this:
    /*
  * TRANSLATORS: first line
  * second line
  * /
  * In this example, the extracted comment does not contain "* " at
    the beginning of each line.
  * libgettextpo library:
  - Memory leak fixes in the PO file parser.
  * Documentation:
  - A complete example showing the use of GNU gettext in a
    GNOME 3 application has been added</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1402401600">- GNU gettext 0.19.1:
  * Desktop Entry: msgfmt now always reads the po/LINGUAS file
  * Vala:  Bug fix in xgettext handling of "//" in string literals
  * po/Makevars.template now contains the newly added variables
  * msgfmt now treats errors in the PO file header as non-fatal
    In future Gettext versions, msgfmt will treat header errors as
    fatal and terminate the command execution.
- switch to xz tarball</changelog>
  <changelog author="pth@suse.de" date="1405425600">- Update to 0.19.2:
  * Fix xgettext crash in parsing empty string literals in C and Vala.
  * Autoconf macro trace in autopoint now works again with Autoconf 2.68
    or earlier.  It was a regression in 0.19.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413547200">- GNU gettext 0.19.3:
  * Fix xgettext mishandling of octal character escapes in C.
  * Fix autopoint infinite recursion with certain configure.ac.
  * The po/Makevars file has a new field MSGINIT_OPTIONS, that can
    be used to adjust msginit's operation.  This is particularly
    useful for controlling line wrapping behavior together with
    MSGMERGE_OPTIONS and XGETTEXT_OPTIONS.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format</changelog>
  <changelog author="astieger@suse.com" date="1459771200">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
</package>
<package pkgid="cf0fa0f2e6bea2c0f4e09dd2da963e5694a1382a8bb5560824842900c04aea00" name="gettext-csharp" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="lp150.3.3.1"/>
  <changelog author="pth@suse.de" date="1292932800">- Update to 0.18.1. Changes since 0.17:
  Version 0.18.1 - June 2010
  * msggrep: A '$' anchor in a regular expression now also matches
    the end of the string, even if it does not end in a newline.
  * Dependencies:
    The libraries and programs are now linked with libunistring if
    this library is already installed.
  * Installation options:
    The configure option --with-cvs is deprecated. The 'autopoint'
    program will now use the 'git' program by default to compress its
    archive.  If the configure option --without-git is specified,
    'autopoint' will not rely on 'git', but will instead rely on a
    locally installed 3 MB large archive.
  Version 0.18 - May 2010
  * PO file format:
    There is a new field 'Language' in the header entry.  It denotes
    the language code (plus optional country code) for the PO file.
    This field can be used by automated tools, such as spell
    checkers. It is expected to be more reliable than looking at the
    file name or at the 'Language-Team' field in the header entry.
    msgmerge, msgcat, msgen have a new option --lang that allows to
    specify this field. Additionally, msgmerge fills in this new
    field by looking at the 'Language-Team' field (if the --lang
    option is not given).
  * xgettext and PO file format:
    For messages with plural forms, programmers can inform the
    translators about the range of possible values of the numeric
    argument, like this:
    /* xgettext: range: 0..15 */
    This information 'range: 0..15' is stored in the PO file as a
    flag attached to the message. Translators can produce better
    translations when they know that the numeric argument is small.
  * Colorized PO files:
    msgattrib, msgcomm, msgconv, msgen, msgfilter, msggrep, msginit,
    msgmerge, msgunfmt, msguniq, xgettext now have options --color
    and --style, like msgcat has since version 0.17.
  * msgmerge is up to 10 times faster when the PO and POT files are
    large. This speedup was contributed by Ralf Wildenhues.
  * msgcmp has a new option -N/--no-fuzzy-matching, like msgmerge has
    since version 0.12.
  * msgfilter now sets environment variables during the invocation of
    the filter, indicating the msgid and location of the messge being
    processed.
  * xgettext now can extract plural forms from Qt 4 programs. The
    recommended xgettext command-line options for this case are:
  - -qt --keyword=tr:1,1t --keyword=tr:1,2c,2t --keyword=tr:1,1,2c,3t
  * xgettext --language=GCC-source now recognizes also the format
    strings used in the Fortran front-end of the GCC compiler, and
    marks them as 'gfc-internal-format'.
  * autopoint can now be used to update several PO directories all
    together.
  * PO mode changes:
  - PO files with plural entries are now correctly handled.
  - Editing a message with previous msgid (in comments) removes these
    comments.  Contributed by Noritada Kobayashi.
  * The po/Makevars file has a new field MSGMERGE_OPTIONS, that can
    be used to adjust msgmerge's operation.
  * The use of the macro AM_GNU_GETTEXT without 'external' argument
    and the --intl option of the gettextize program are deprecated
    and will be removed in the next release. Instead of including
    the intl sources in your package, we suggest making the libintl
    library an (optional) prerequisite of your package.
  * Updated the meaning of 'gcc-internal-format' to match GCC 4.3.
  * Installation options:
    The configure options --without-cvs and --with-git can be used to
    specify whether 'autopoint' will use the 'cvs' program, or the
    'git' program, or none at all. These options allow to trade
    dependencies against installed package size: If --without-cvs is
    specified and --with-git is not specified, 'autopoint' will not
    rely on 'cvs' or 'git', but will instead rely on a locally
    installed a 3 MB large archive.
  * Portability: The msgfilter program now also works on native Woe32
  - platforms. Compiled C# message catalogs now also work with
  - 'mono' versions from 2009
    or newer.</changelog>
  <changelog author="aj@suse.de" date="1342958400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="pth@suse.de" date="1348488000">- remove silent_rules from AM_INIT_AUTOMAKE to make autoreconf
  succeed on older distributions.
- Rename po-mode.diff to gettext-po-mode.diff</changelog>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="christoph.miebach@web.de" date="1370692800">- Update to version 0.18.2.1: Version 0.18.2 - December 2012
  + xgettext now understands the block comment syntax of Guile 2.0.
  + libgettextpo library:
  * The initial msgstr of a new message is now "", not NULL.
  * Bug fixes in the functions po_message_is_range,
    po_file_check_all, po_message_check_all.
  + Installation options:
    The configure options --with-xz and --with-bzip2 can be used to
    specify alternate compression methods for the archive used by
    the 'autopoint' program. These options, together with
  - -with-git, allow to trade dependencies against installed
    package size. --with-xz has the highest compression rate,
    followed by --with-git, followed by --with-bzip2.
  + Autoconf macros:
  * The autoconf macros installed by 'gettextize' now work with
    the forthcoming Automake 1.14 and require Autoconf version
    2.60 or newer.
  + Portability:
  * Building on MacOS X 10.7, Cygwin 1.7.10, and newer 64-bit
    mingw is now supported.
- Remove obsolete patches:
  + getext-stdio.in.patch
  + gettext-codecleanup.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1371297600">- Add glib2-devel libcroco-devel libxml2-devel to build requires to avoid
  using the included copies.
- gettext-configure.patch: Fix syntax in libxml check to avoid spurious
  failure</changelog>
  <changelog author="christoph.miebach@web.de" date="1376308800">- Version 0.18.3 - July 2013
  * Runtime behaviour:
    On Mac OS X systems, the setlocale() function now properly
    invalidates loaded message catalogs when a locale has been set.
  * Programming languages support:
  - C++:
    The gnu::autosprintf class now provides an assignment
    operator.
  - Glade:
    xgettext now supports GtkBuider file format used by Glade 3.
    xgettext now also extracts contexts (msgctxt) from Glade 2
    and GtkBuider files.
  - JavaScript:
    xgettext now partially supports JavaScript.  Since the
    current JavaScript specification (ECMA-262) does not define
    the standard set of formatting methods nor translation
    functions, the implementation supports only a limited
    set of formatting methods and translation functions commonly
    used in Gjs and other popular JavaScript implemenations and
    libraries.
  - Lua:
    xgettext now supports Lua, using ?ubomír Remák's lua-gettext.
  - Python:
    xgettext and msgfmt's format string checking now recognize
    Python format string in braced syntax (PEP 3101).  xgettext
    now also supports explicit string concatenation with '+' and
    handles platform dependent line terminators (LF/CR/CRLF)
    transparently.
  - Tcl:
    Bug fix in xgettext Unicode escape handling.
  - Vala:
    xgettext now supports Vala.
  * msgattrib now has --previous option to keep previous msgid when
    making messages fuzzy, similar to msgmerge --previous.
  * msgfmt now checks PO file headers more strictly with less
    false-positives.
  * 'gettextize' now checks macro directories specified with
    AC_CONFIG_MACRO_DIRS in configure.ac.
  * Portability:
  - msginit now does not require GNU sed.
  - The Makefile rule for generating en@quot and en@boldquot now
    uses @SED@ variable instead of hard-coded 'sed' command to
    allow users to supply GNU sed.
  * Future backward-incompatibilities:
  - In future Gettext versions, the files installed by
    'gettextize' will require Automake 1.10 or later.  This will
    improve the compatibility of user projects with newer
    Automake versions.
- Remove upstreamed patches:
  gettext-configure.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1389528000">- GNU gettext 0.18.3.2:
  * Add missing extern-inline.m4 into archive.
- verify source signature</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1401796800">- GNU gettext 0.19:
  - Programming languages support:
  * Desktop Entry:
    xgettext and msgfmt now support .desktop files, used by
    desktop applications, as input and output.
  * GSettings:
    xgettext now supports GSettings schema file format used by
    GNOME applications.
  * JavaScript:
    xgettext now recognizes E4X (ECMA-357) constructs.
  * PHP:
    Single and double quotes around heredoc markers are now
    recognized.
  * Python:
    The acceptable format specifiers in the braced-syntax format
    strings is now limited to the Standard Format Specifiers, to
    reasonably avoid false-positives.
  * Scheme:
    The gettext shorthand form _"abc", used by GIMP script-fu, is
    now recognized by xgettext.
  * C and Vala:
    xgettext now recognizes C99-style Unicode character escapes.
  - The --add-location option of msgattrib, msgcat, msgcomm,
    msgconv, msgen, msgfilter, msggrep, msgmerge, msguniq, and
    xgettext commands now takes an optional argument 'never',
    'full', or 'file', to control the format of "#: ..." comments.
  - msgfmt now has --source option to keep generated .java file
    when running in Java mode.
  - msgattrib now has --empty option that sets msgstr to empty when
    clearing fuzzy flag.
  * msgexec and msgfilter pass the plural information to subprocess
    through the environment variable MSG{EXEC,FILTER}_MSGID_PLURAL
    and MSG{EXEC,FILTER}_PLURAL_FORM.
  * New built-in filters 'quot' and 'boldquot' have been added to
    msgfilter.  These filters convert Latin quotation marks ('...',
    "...") into Unicode quotation marks (for example, U+2018) if
    possible, similar to the sed commands used in po/Rules-quot and
    po/Rules-boldquot.
  * The po/Makevars file has a couple of new options
    PO_DEPENDS_ON_POT and DIST_DEPENDS_ON_UPDATE_PO, that can be
    used to adjust the behavior of updating PO files on demand.
  * xgettext now strips prefixed string before the comment tag.
    This is useful to support C-style comment like this:
    /*
  * TRANSLATORS: first line
  * second line
  * /
  * In this example, the extracted comment does not contain "* " at
    the beginning of each line.
  * libgettextpo library:
  - Memory leak fixes in the PO file parser.
  * Documentation:
  - A complete example showing the use of GNU gettext in a
    GNOME 3 application has been added</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1402401600">- GNU gettext 0.19.1:
  * Desktop Entry: msgfmt now always reads the po/LINGUAS file
  * Vala:  Bug fix in xgettext handling of "//" in string literals
  * po/Makevars.template now contains the newly added variables
  * msgfmt now treats errors in the PO file header as non-fatal
    In future Gettext versions, msgfmt will treat header errors as
    fatal and terminate the command execution.
- switch to xz tarball</changelog>
  <changelog author="pth@suse.de" date="1405425600">- Update to 0.19.2:
  * Fix xgettext crash in parsing empty string literals in C and Vala.
  * Autoconf macro trace in autopoint now works again with Autoconf 2.68
    or earlier.  It was a regression in 0.19.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413547200">- GNU gettext 0.19.3:
  * Fix xgettext mishandling of octal character escapes in C.
  * Fix autopoint infinite recursion with certain configure.ac.
  * The po/Makevars file has a new field MSGINIT_OPTIONS, that can
    be used to adjust msginit's operation.  This is particularly
    useful for controlling line wrapping behavior together with
    MSGMERGE_OPTIONS and XGETTEXT_OPTIONS.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format</changelog>
  <changelog author="astieger@suse.com" date="1459771200">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
</package>
<package pkgid="7c47df3c7d4805aa3f8ed63c5c361f89de628b407031561e24b508636c96937a" name="gettext-its-gtk3" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="f9a2f804dfe353a6e592c5cdb8feeb819e5c9fd26092ae30e9a7b3d663fce1e9" name="gettext-java" arch="src">
  <version epoch="0" ver="0.19.8.1" rel="lp150.3.3.1"/>
  <changelog author="aj@suse.de" date="1342958400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="pth@suse.de" date="1348488000">- remove silent_rules from AM_INIT_AUTOMAKE to make autoreconf
  succeed on older distributions.
- Rename po-mode.diff to gettext-po-mode.diff</changelog>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="christoph.miebach@web.de" date="1370692800">- Update to version 0.18.2.1: Version 0.18.2 - December 2012
  + xgettext now understands the block comment syntax of Guile 2.0.
  + libgettextpo library:
  * The initial msgstr of a new message is now "", not NULL.
  * Bug fixes in the functions po_message_is_range,
    po_file_check_all, po_message_check_all.
  + Installation options:
    The configure options --with-xz and --with-bzip2 can be used to
    specify alternate compression methods for the archive used by
    the 'autopoint' program. These options, together with
  - -with-git, allow to trade dependencies against installed
    package size. --with-xz has the highest compression rate,
    followed by --with-git, followed by --with-bzip2.
  + Autoconf macros:
  * The autoconf macros installed by 'gettextize' now work with
    the forthcoming Automake 1.14 and require Autoconf version
    2.60 or newer.
  + Portability:
  * Building on MacOS X 10.7, Cygwin 1.7.10, and newer 64-bit
    mingw is now supported.
- Remove obsolete patches:
  + getext-stdio.in.patch
  + gettext-codecleanup.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1371297600">- Add glib2-devel libcroco-devel libxml2-devel to build requires to avoid
  using the included copies.
- gettext-configure.patch: Fix syntax in libxml check to avoid spurious
  failure</changelog>
  <changelog author="christoph.miebach@web.de" date="1376308800">- Version 0.18.3 - July 2013
  * Runtime behaviour:
    On Mac OS X systems, the setlocale() function now properly
    invalidates loaded message catalogs when a locale has been set.
  * Programming languages support:
  - C++:
    The gnu::autosprintf class now provides an assignment
    operator.
  - Glade:
    xgettext now supports GtkBuider file format used by Glade 3.
    xgettext now also extracts contexts (msgctxt) from Glade 2
    and GtkBuider files.
  - JavaScript:
    xgettext now partially supports JavaScript.  Since the
    current JavaScript specification (ECMA-262) does not define
    the standard set of formatting methods nor translation
    functions, the implementation supports only a limited
    set of formatting methods and translation functions commonly
    used in Gjs and other popular JavaScript implemenations and
    libraries.
  - Lua:
    xgettext now supports Lua, using ?ubomír Remák's lua-gettext.
  - Python:
    xgettext and msgfmt's format string checking now recognize
    Python format string in braced syntax (PEP 3101).  xgettext
    now also supports explicit string concatenation with '+' and
    handles platform dependent line terminators (LF/CR/CRLF)
    transparently.
  - Tcl:
    Bug fix in xgettext Unicode escape handling.
  - Vala:
    xgettext now supports Vala.
  * msgattrib now has --previous option to keep previous msgid when
    making messages fuzzy, similar to msgmerge --previous.
  * msgfmt now checks PO file headers more strictly with less
    false-positives.
  * 'gettextize' now checks macro directories specified with
    AC_CONFIG_MACRO_DIRS in configure.ac.
  * Portability:
  - msginit now does not require GNU sed.
  - The Makefile rule for generating en@quot and en@boldquot now
    uses @SED@ variable instead of hard-coded 'sed' command to
    allow users to supply GNU sed.
  * Future backward-incompatibilities:
  - In future Gettext versions, the files installed by
    'gettextize' will require Automake 1.10 or later.  This will
    improve the compatibility of user projects with newer
    Automake versions.
- Remove upstreamed patches:
  gettext-configure.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1389528000">- GNU gettext 0.18.3.2:
  * Add missing extern-inline.m4 into archive.
- verify source signature</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1401796800">- GNU gettext 0.19:
  - Programming languages support:
  * Desktop Entry:
    xgettext and msgfmt now support .desktop files, used by
    desktop applications, as input and output.
  * GSettings:
    xgettext now supports GSettings schema file format used by
    GNOME applications.
  * JavaScript:
    xgettext now recognizes E4X (ECMA-357) constructs.
  * PHP:
    Single and double quotes around heredoc markers are now
    recognized.
  * Python:
    The acceptable format specifiers in the braced-syntax format
    strings is now limited to the Standard Format Specifiers, to
    reasonably avoid false-positives.
  * Scheme:
    The gettext shorthand form _"abc", used by GIMP script-fu, is
    now recognized by xgettext.
  * C and Vala:
    xgettext now recognizes C99-style Unicode character escapes.
  - The --add-location option of msgattrib, msgcat, msgcomm,
    msgconv, msgen, msgfilter, msggrep, msgmerge, msguniq, and
    xgettext commands now takes an optional argument 'never',
    'full', or 'file', to control the format of "#: ..." comments.
  - msgfmt now has --source option to keep generated .java file
    when running in Java mode.
  - msgattrib now has --empty option that sets msgstr to empty when
    clearing fuzzy flag.
  * msgexec and msgfilter pass the plural information to subprocess
    through the environment variable MSG{EXEC,FILTER}_MSGID_PLURAL
    and MSG{EXEC,FILTER}_PLURAL_FORM.
  * New built-in filters 'quot' and 'boldquot' have been added to
    msgfilter.  These filters convert Latin quotation marks ('...',
    "...") into Unicode quotation marks (for example, U+2018) if
    possible, similar to the sed commands used in po/Rules-quot and
    po/Rules-boldquot.
  * The po/Makevars file has a couple of new options
    PO_DEPENDS_ON_POT and DIST_DEPENDS_ON_UPDATE_PO, that can be
    used to adjust the behavior of updating PO files on demand.
  * xgettext now strips prefixed string before the comment tag.
    This is useful to support C-style comment like this:
    /*
  * TRANSLATORS: first line
  * second line
  * /
  * In this example, the extracted comment does not contain "* " at
    the beginning of each line.
  * libgettextpo library:
  - Memory leak fixes in the PO file parser.
  * Documentation:
  - A complete example showing the use of GNU gettext in a
    GNOME 3 application has been added</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1402401600">- GNU gettext 0.19.1:
  * Desktop Entry: msgfmt now always reads the po/LINGUAS file
  * Vala:  Bug fix in xgettext handling of "//" in string literals
  * po/Makevars.template now contains the newly added variables
  * msgfmt now treats errors in the PO file header as non-fatal
    In future Gettext versions, msgfmt will treat header errors as
    fatal and terminate the command execution.
- switch to xz tarball</changelog>
  <changelog author="pth@suse.de" date="1405425600">- Update to 0.19.2:
  * Fix xgettext crash in parsing empty string literals in C and Vala.
  * Autoconf macro trace in autopoint now works again with Autoconf 2.68
    or earlier.  It was a regression in 0.19.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413547200">- GNU gettext 0.19.3:
  * Fix xgettext mishandling of octal character escapes in C.
  * Fix autopoint infinite recursion with certain configure.ac.
  * The po/Makevars file has a new field MSGINIT_OPTIONS, that can
    be used to adjust msginit's operation.  This is particularly
    useful for controlling line wrapping behavior together with
    MSGMERGE_OPTIONS and XGETTEXT_OPTIONS.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format</changelog>
  <changelog author="astieger@suse.com" date="1459771200">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="fstrba@suse.com" date="1507032000">- Added patch:
  * gettext-0.19.8.1-jdk9.patch
    + specify java soure and target level 6 to be able to build
    with jdk9
- Do not depend on gcc-java and do not build native binaries of the
  gnu.gettext.GetURL and gnu.gettext.DumpResource tools, since
  gcc-java is bound to disappear
- Build the gettext.jar using any java-devel provider and make the
  gnu.gettext.GetURL and gnu.gettext.DumpResource tools scripts
  running classes from this gettext.jar
- Clean the spec file a bit</changelog>
</package>
<package pkgid="defcd7abc8ac5ac22b460c745c8a94966672e73e073a8b10450b91e9a48cee92" name="gettext-java" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="lp150.3.3.1"/>
  <changelog author="aj@suse.de" date="1342958400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="pth@suse.de" date="1348488000">- remove silent_rules from AM_INIT_AUTOMAKE to make autoreconf
  succeed on older distributions.
- Rename po-mode.diff to gettext-po-mode.diff</changelog>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="christoph.miebach@web.de" date="1370692800">- Update to version 0.18.2.1: Version 0.18.2 - December 2012
  + xgettext now understands the block comment syntax of Guile 2.0.
  + libgettextpo library:
  * The initial msgstr of a new message is now "", not NULL.
  * Bug fixes in the functions po_message_is_range,
    po_file_check_all, po_message_check_all.
  + Installation options:
    The configure options --with-xz and --with-bzip2 can be used to
    specify alternate compression methods for the archive used by
    the 'autopoint' program. These options, together with
  - -with-git, allow to trade dependencies against installed
    package size. --with-xz has the highest compression rate,
    followed by --with-git, followed by --with-bzip2.
  + Autoconf macros:
  * The autoconf macros installed by 'gettextize' now work with
    the forthcoming Automake 1.14 and require Autoconf version
    2.60 or newer.
  + Portability:
  * Building on MacOS X 10.7, Cygwin 1.7.10, and newer 64-bit
    mingw is now supported.
- Remove obsolete patches:
  + getext-stdio.in.patch
  + gettext-codecleanup.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1371297600">- Add glib2-devel libcroco-devel libxml2-devel to build requires to avoid
  using the included copies.
- gettext-configure.patch: Fix syntax in libxml check to avoid spurious
  failure</changelog>
  <changelog author="christoph.miebach@web.de" date="1376308800">- Version 0.18.3 - July 2013
  * Runtime behaviour:
    On Mac OS X systems, the setlocale() function now properly
    invalidates loaded message catalogs when a locale has been set.
  * Programming languages support:
  - C++:
    The gnu::autosprintf class now provides an assignment
    operator.
  - Glade:
    xgettext now supports GtkBuider file format used by Glade 3.
    xgettext now also extracts contexts (msgctxt) from Glade 2
    and GtkBuider files.
  - JavaScript:
    xgettext now partially supports JavaScript.  Since the
    current JavaScript specification (ECMA-262) does not define
    the standard set of formatting methods nor translation
    functions, the implementation supports only a limited
    set of formatting methods and translation functions commonly
    used in Gjs and other popular JavaScript implemenations and
    libraries.
  - Lua:
    xgettext now supports Lua, using ?ubomír Remák's lua-gettext.
  - Python:
    xgettext and msgfmt's format string checking now recognize
    Python format string in braced syntax (PEP 3101).  xgettext
    now also supports explicit string concatenation with '+' and
    handles platform dependent line terminators (LF/CR/CRLF)
    transparently.
  - Tcl:
    Bug fix in xgettext Unicode escape handling.
  - Vala:
    xgettext now supports Vala.
  * msgattrib now has --previous option to keep previous msgid when
    making messages fuzzy, similar to msgmerge --previous.
  * msgfmt now checks PO file headers more strictly with less
    false-positives.
  * 'gettextize' now checks macro directories specified with
    AC_CONFIG_MACRO_DIRS in configure.ac.
  * Portability:
  - msginit now does not require GNU sed.
  - The Makefile rule for generating en@quot and en@boldquot now
    uses @SED@ variable instead of hard-coded 'sed' command to
    allow users to supply GNU sed.
  * Future backward-incompatibilities:
  - In future Gettext versions, the files installed by
    'gettextize' will require Automake 1.10 or later.  This will
    improve the compatibility of user projects with newer
    Automake versions.
- Remove upstreamed patches:
  gettext-configure.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1389528000">- GNU gettext 0.18.3.2:
  * Add missing extern-inline.m4 into archive.
- verify source signature</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1401796800">- GNU gettext 0.19:
  - Programming languages support:
  * Desktop Entry:
    xgettext and msgfmt now support .desktop files, used by
    desktop applications, as input and output.
  * GSettings:
    xgettext now supports GSettings schema file format used by
    GNOME applications.
  * JavaScript:
    xgettext now recognizes E4X (ECMA-357) constructs.
  * PHP:
    Single and double quotes around heredoc markers are now
    recognized.
  * Python:
    The acceptable format specifiers in the braced-syntax format
    strings is now limited to the Standard Format Specifiers, to
    reasonably avoid false-positives.
  * Scheme:
    The gettext shorthand form _"abc", used by GIMP script-fu, is
    now recognized by xgettext.
  * C and Vala:
    xgettext now recognizes C99-style Unicode character escapes.
  - The --add-location option of msgattrib, msgcat, msgcomm,
    msgconv, msgen, msgfilter, msggrep, msgmerge, msguniq, and
    xgettext commands now takes an optional argument 'never',
    'full', or 'file', to control the format of "#: ..." comments.
  - msgfmt now has --source option to keep generated .java file
    when running in Java mode.
  - msgattrib now has --empty option that sets msgstr to empty when
    clearing fuzzy flag.
  * msgexec and msgfilter pass the plural information to subprocess
    through the environment variable MSG{EXEC,FILTER}_MSGID_PLURAL
    and MSG{EXEC,FILTER}_PLURAL_FORM.
  * New built-in filters 'quot' and 'boldquot' have been added to
    msgfilter.  These filters convert Latin quotation marks ('...',
    "...") into Unicode quotation marks (for example, U+2018) if
    possible, similar to the sed commands used in po/Rules-quot and
    po/Rules-boldquot.
  * The po/Makevars file has a couple of new options
    PO_DEPENDS_ON_POT and DIST_DEPENDS_ON_UPDATE_PO, that can be
    used to adjust the behavior of updating PO files on demand.
  * xgettext now strips prefixed string before the comment tag.
    This is useful to support C-style comment like this:
    /*
  * TRANSLATORS: first line
  * second line
  * /
  * In this example, the extracted comment does not contain "* " at
    the beginning of each line.
  * libgettextpo library:
  - Memory leak fixes in the PO file parser.
  * Documentation:
  - A complete example showing the use of GNU gettext in a
    GNOME 3 application has been added</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1402401600">- GNU gettext 0.19.1:
  * Desktop Entry: msgfmt now always reads the po/LINGUAS file
  * Vala:  Bug fix in xgettext handling of "//" in string literals
  * po/Makevars.template now contains the newly added variables
  * msgfmt now treats errors in the PO file header as non-fatal
    In future Gettext versions, msgfmt will treat header errors as
    fatal and terminate the command execution.
- switch to xz tarball</changelog>
  <changelog author="pth@suse.de" date="1405425600">- Update to 0.19.2:
  * Fix xgettext crash in parsing empty string literals in C and Vala.
  * Autoconf macro trace in autopoint now works again with Autoconf 2.68
    or earlier.  It was a regression in 0.19.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413547200">- GNU gettext 0.19.3:
  * Fix xgettext mishandling of octal character escapes in C.
  * Fix autopoint infinite recursion with certain configure.ac.
  * The po/Makevars file has a new field MSGINIT_OPTIONS, that can
    be used to adjust msginit's operation.  This is particularly
    useful for controlling line wrapping behavior together with
    MSGMERGE_OPTIONS and XGETTEXT_OPTIONS.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format</changelog>
  <changelog author="astieger@suse.com" date="1459771200">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="fstrba@suse.com" date="1507032000">- Added patch:
  * gettext-0.19.8.1-jdk9.patch
    + specify java soure and target level 6 to be able to build
    with jdk9
- Do not depend on gcc-java and do not build native binaries of the
  gnu.gettext.GetURL and gnu.gettext.DumpResource tools, since
  gcc-java is bound to disappear
- Build the gettext.jar using any java-devel provider and make the
  gnu.gettext.GetURL and gnu.gettext.DumpResource tools scripts
  running classes from this gettext.jar
- Clean the spec file a bit</changelog>
</package>
<package pkgid="963627e4338e61859d008d523fe22c5e1b6e2c6a96839ad9e0ee51d0ed930e8f" name="gettext-runtime" arch="src">
  <version epoch="0" ver="0.19.8.1" rel="lp150.3.3.1"/>
  <changelog author="pth@suse.de" date="1405425600">- Update to 0.19.2:
  * Fix xgettext crash in parsing empty string literals in C and Vala.
  * Autoconf macro trace in autopoint now works again with Autoconf 2.68
    or earlier.  It was a regression in 0.19.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413547200">- GNU gettext 0.19.3:
  * Fix xgettext mishandling of octal character escapes in C.
  * Fix autopoint infinite recursion with certain configure.ac.
  * The po/Makevars file has a new field MSGINIT_OPTIONS, that can
    be used to adjust msginit's operation.  This is particularly
    useful for controlling line wrapping behavior together with
    MSGMERGE_OPTIONS and XGETTEXT_OPTIONS.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419768000">- fix 'echo -e' in cvs.sh script that may be unsupported in some
  POSIX-complete shells
- add patches:
  * gettext-0.19.3-fix-bashisms.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
</package>
<package pkgid="673d1acb06382365c632bfa4230cb865d48f6b3b9c69c02ecc6a3809b35dbcbb" name="gettext-runtime" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="lp150.3.3.1"/>
  <changelog author="pth@suse.de" date="1405425600">- Update to 0.19.2:
  * Fix xgettext crash in parsing empty string literals in C and Vala.
  * Autoconf macro trace in autopoint now works again with Autoconf 2.68
    or earlier.  It was a regression in 0.19.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413547200">- GNU gettext 0.19.3:
  * Fix xgettext mishandling of octal character escapes in C.
  * Fix autopoint infinite recursion with certain configure.ac.
  * The po/Makevars file has a new field MSGINIT_OPTIONS, that can
    be used to adjust msginit's operation.  This is particularly
    useful for controlling line wrapping behavior together with
    MSGMERGE_OPTIONS and XGETTEXT_OPTIONS.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419768000">- fix 'echo -e' in cvs.sh script that may be unsupported in some
  POSIX-complete shells
- add patches:
  * gettext-0.19.3-fix-bashisms.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
</package>
<package pkgid="7ae7977a2184b033eb7582b49472547a7ccd84369d9f90aede87d5e65dd75202" name="gettext-runtime-32bit" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="lp150.3.3.1"/>
  <changelog author="pth@suse.de" date="1405425600">- Update to 0.19.2:
  * Fix xgettext crash in parsing empty string literals in C and Vala.
  * Autoconf macro trace in autopoint now works again with Autoconf 2.68
    or earlier.  It was a regression in 0.19.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413547200">- GNU gettext 0.19.3:
  * Fix xgettext mishandling of octal character escapes in C.
  * Fix autopoint infinite recursion with certain configure.ac.
  * The po/Makevars file has a new field MSGINIT_OPTIONS, that can
    be used to adjust msginit's operation.  This is particularly
    useful for controlling line wrapping behavior together with
    MSGMERGE_OPTIONS and XGETTEXT_OPTIONS.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419768000">- fix 'echo -e' in cvs.sh script that may be unsupported in some
  POSIX-complete shells
- add patches:
  * gettext-0.19.3-fix-bashisms.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
</package>
<package pkgid="981fa99c2403e791a9baf6a5333e571825246d1c565f6d1f59dbe63c9bdd4cd7" name="gettext-runtime-mini" arch="src">
  <version epoch="0" ver="0.19.8.1" rel="lp150.3.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1402401600">- GNU gettext 0.19.1:
  * Desktop Entry: msgfmt now always reads the po/LINGUAS file
  * Vala:  Bug fix in xgettext handling of "//" in string literals
  * po/Makevars.template now contains the newly added variables
  * msgfmt now treats errors in the PO file header as non-fatal
    In future Gettext versions, msgfmt will treat header errors as
    fatal and terminate the command execution.
- switch to xz tarball</changelog>
  <changelog author="pth@suse.de" date="1405425600">- Update to 0.19.2:
  * Fix xgettext crash in parsing empty string literals in C and Vala.
  * Autoconf macro trace in autopoint now works again with Autoconf 2.68
    or earlier.  It was a regression in 0.19.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413547200">- GNU gettext 0.19.3:
  * Fix xgettext mishandling of octal character escapes in C.
  * Fix autopoint infinite recursion with certain configure.ac.
  * The po/Makevars file has a new field MSGINIT_OPTIONS, that can
    be used to adjust msginit's operation.  This is particularly
    useful for controlling line wrapping behavior together with
    MSGMERGE_OPTIONS and XGETTEXT_OPTIONS.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419768000">- fix 'echo -e' in cvs.sh script that may be unsupported in some
  POSIX-complete shells
- add patches:
  * gettext-0.19.3-fix-bashisms.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
</package>
<package pkgid="4711ae179088db74b824212dd9de6b19747c3e7d65fa8901fed8091bc4d80b21" name="gettext-runtime-mini" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="lp150.3.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1402401600">- GNU gettext 0.19.1:
  * Desktop Entry: msgfmt now always reads the po/LINGUAS file
  * Vala:  Bug fix in xgettext handling of "//" in string literals
  * po/Makevars.template now contains the newly added variables
  * msgfmt now treats errors in the PO file header as non-fatal
    In future Gettext versions, msgfmt will treat header errors as
    fatal and terminate the command execution.
- switch to xz tarball</changelog>
  <changelog author="pth@suse.de" date="1405425600">- Update to 0.19.2:
  * Fix xgettext crash in parsing empty string literals in C and Vala.
  * Autoconf macro trace in autopoint now works again with Autoconf 2.68
    or earlier.  It was a regression in 0.19.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413547200">- GNU gettext 0.19.3:
  * Fix xgettext mishandling of octal character escapes in C.
  * Fix autopoint infinite recursion with certain configure.ac.
  * The po/Makevars file has a new field MSGINIT_OPTIONS, that can
    be used to adjust msginit's operation.  This is particularly
    useful for controlling line wrapping behavior together with
    MSGMERGE_OPTIONS and XGETTEXT_OPTIONS.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419768000">- fix 'echo -e' in cvs.sh script that may be unsupported in some
  POSIX-complete shells
- add patches:
  * gettext-0.19.3-fix-bashisms.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
</package>
<package pkgid="bb81a72c72c916c549c0186feff069618222e5522537b246e38703c0e9864b03" name="gettext-runtime-mini-tools-doc" arch="noarch">
  <version epoch="0" ver="0.19.8.1" rel="lp150.3.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1402401600">- GNU gettext 0.19.1:
  * Desktop Entry: msgfmt now always reads the po/LINGUAS file
  * Vala:  Bug fix in xgettext handling of "//" in string literals
  * po/Makevars.template now contains the newly added variables
  * msgfmt now treats errors in the PO file header as non-fatal
    In future Gettext versions, msgfmt will treat header errors as
    fatal and terminate the command execution.
- switch to xz tarball</changelog>
  <changelog author="pth@suse.de" date="1405425600">- Update to 0.19.2:
  * Fix xgettext crash in parsing empty string literals in C and Vala.
  * Autoconf macro trace in autopoint now works again with Autoconf 2.68
    or earlier.  It was a regression in 0.19.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413547200">- GNU gettext 0.19.3:
  * Fix xgettext mishandling of octal character escapes in C.
  * Fix autopoint infinite recursion with certain configure.ac.
  * The po/Makevars file has a new field MSGINIT_OPTIONS, that can
    be used to adjust msginit's operation.  This is particularly
    useful for controlling line wrapping behavior together with
    MSGMERGE_OPTIONS and XGETTEXT_OPTIONS.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419768000">- fix 'echo -e' in cvs.sh script that may be unsupported in some
  POSIX-complete shells
- add patches:
  * gettext-0.19.3-fix-bashisms.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
</package>
<package pkgid="5d11459cff897f1bbd9f1fdca73b3469f9d281e93c12f493e7013fff5b7a7cb1" name="gettext-runtime-tools-doc" arch="noarch">
  <version epoch="0" ver="0.19.8.1" rel="lp150.3.3.1"/>
  <changelog author="pth@suse.de" date="1405425600">- Update to 0.19.2:
  * Fix xgettext crash in parsing empty string literals in C and Vala.
  * Autoconf macro trace in autopoint now works again with Autoconf 2.68
    or earlier.  It was a regression in 0.19.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413547200">- GNU gettext 0.19.3:
  * Fix xgettext mishandling of octal character escapes in C.
  * Fix autopoint infinite recursion with certain configure.ac.
  * The po/Makevars file has a new field MSGINIT_OPTIONS, that can
    be used to adjust msginit's operation.  This is particularly
    useful for controlling line wrapping behavior together with
    MSGMERGE_OPTIONS and XGETTEXT_OPTIONS.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419768000">- fix 'echo -e' in cvs.sh script that may be unsupported in some
  POSIX-complete shells
- add patches:
  * gettext-0.19.3-fix-bashisms.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
</package>
<package pkgid="494cb04652d9d144f5aa670911ec078cdba7fe37d3e262518d67f32f5e34d977" name="gettext-tools" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="lp150.3.3.1"/>
  <changelog author="pth@suse.de" date="1405425600">- Update to 0.19.2:
  * Fix xgettext crash in parsing empty string literals in C and Vala.
  * Autoconf macro trace in autopoint now works again with Autoconf 2.68
    or earlier.  It was a regression in 0.19.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413547200">- GNU gettext 0.19.3:
  * Fix xgettext mishandling of octal character escapes in C.
  * Fix autopoint infinite recursion with certain configure.ac.
  * The po/Makevars file has a new field MSGINIT_OPTIONS, that can
    be used to adjust msginit's operation.  This is particularly
    useful for controlling line wrapping behavior together with
    MSGMERGE_OPTIONS and XGETTEXT_OPTIONS.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419768000">- fix 'echo -e' in cvs.sh script that may be unsupported in some
  POSIX-complete shells
- add patches:
  * gettext-0.19.3-fix-bashisms.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
</package>
<package pkgid="91f176a371fd0c361ad672bf179fa8be9b417a7c2dbe5b6d84eb1051ef6fa1c4" name="gettext-tools-mini" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="lp150.3.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1402401600">- GNU gettext 0.19.1:
  * Desktop Entry: msgfmt now always reads the po/LINGUAS file
  * Vala:  Bug fix in xgettext handling of "//" in string literals
  * po/Makevars.template now contains the newly added variables
  * msgfmt now treats errors in the PO file header as non-fatal
    In future Gettext versions, msgfmt will treat header errors as
    fatal and terminate the command execution.
- switch to xz tarball</changelog>
  <changelog author="pth@suse.de" date="1405425600">- Update to 0.19.2:
  * Fix xgettext crash in parsing empty string literals in C and Vala.
  * Autoconf macro trace in autopoint now works again with Autoconf 2.68
    or earlier.  It was a regression in 0.19.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413547200">- GNU gettext 0.19.3:
  * Fix xgettext mishandling of octal character escapes in C.
  * Fix autopoint infinite recursion with certain configure.ac.
  * The po/Makevars file has a new field MSGINIT_OPTIONS, that can
    be used to adjust msginit's operation.  This is particularly
    useful for controlling line wrapping behavior together with
    MSGMERGE_OPTIONS and XGETTEXT_OPTIONS.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419768000">- fix 'echo -e' in cvs.sh script that may be unsupported in some
  POSIX-complete shells
- add patches:
  * gettext-0.19.3-fix-bashisms.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
</package>
<package pkgid="68371b6acddfc6382cae67dd7899f9f7d5e53cc970220ff2ae4b5631efe96e07" name="ghostscript" arch="src">
  <version epoch="0" ver="9.23" rel="lp150.2.3.1"/>
  <changelog author="schwab@suse.de" date="1447848000">- Do not use library sources for freetype jpeg libpng tiff zlib
  from the Ghostscript upstream tarball because we prefer to use
  for long-established standard libraries the ones from SUSE
  in particular to automatically get SUSE security updates
  for standard libraries.
  In contrast we use e.g. lcms2 from the Ghostscript upstream
  tarball because this one is specially modified to work with
  Ghostscript so that we cannot use lcms2 from SUSE.
- remove-zlib-h-dependency.patch removes dependency on zlib/zlib.h
  in makefiles as we do not use the zlib sources from the
  Ghostscript upstream tarball.</changelog>
  <changelog author="jsmeix@suse.de" date="1458302400">- Version upgrade to 9.19rc1 (first release candidate for 9.19).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- ijs-config is no longer provided
- fix_make_install.patch fixes an install error and
  add_brackets_for_old_autoconf.patch fixes an autoconf error
  see http://bugs.ghostscript.com/show_bug.cgi?id=696665
- fix_ijs_and_x11_for_FirstPage_and_LastPage.patch is no longer
  needed because it is fixed in the upstream sources.
- install_gserrors.h.patch is no longer needed because it is fixed
  in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1458734400">- Version upgrade to 9.19. Mainly a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Metadata pdfmark is now implemented. This allows the user
    to specify an XMP stream which will be written to the
    Catalog of the PDF file. A new pdfmark 'Ext_Metadata' has
    been defined. This takes a string parameter which contains
    XML to be add to the XMP normally created by pdfwrite.
    See "pdfwrite pdfmark extensions" for more information.
  * An experimental, rudimentary raster trapping implementation
    has been added to the Ghostscript graphics library.
    See "Trapping" for details.
  Incompatible changes:
  * (Minor) API change: copy_alpha now supports 8 bit depth
    (as well as the previous 2 and 4).
  * The gs man pages are woefully out of date and basically
    unmaintained. With the release following 9.19, we intend
    to replace their contents with a very limited summary
    of (unlikely to ever change aspects of) calling
    Ghostscript, and a pointer to the (maintained) HTML
    documentation. That is, unless a volunteer is willing
    to update, and commit to maintaining the man pages.
  * ijs-config is no longer provided
  Planned incompatible changes:
  * We plan (ideally for the release following 9.19) to somewhat
    tidy up the device API. We plan to remove deprecated device
    procs (methods/function pointers). We also intend to merge
    the imager state and graphics state (thus eliminating the
    imager state), and change the device API so every device proc
    takes a graphics state parameter (rather than the current
    scheme where only a very few procs take an imager state
    parameter). This should serve as notice to anyone maintaining
    a Ghostscript device outside the canonical source tree that
    you may (probably will) need to update your device(s) when
    these changes happen. Devices using only the non-deprecated
    procs should be trivial to update.
- fix_make_install.patch fixes and
  add_brackets_for_old_autoconf.patch are no longer needed
  because both issues are fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
</package>
<package pkgid="ee04a7f87fb83799954ca8fa6028a07439153cfac9027c67110e2dc45d64bb4f" name="ghostscript" arch="x86_64">
  <version epoch="0" ver="9.23" rel="lp150.2.3.1"/>
  <changelog author="schwab@suse.de" date="1447848000">- Do not use library sources for freetype jpeg libpng tiff zlib
  from the Ghostscript upstream tarball because we prefer to use
  for long-established standard libraries the ones from SUSE
  in particular to automatically get SUSE security updates
  for standard libraries.
  In contrast we use e.g. lcms2 from the Ghostscript upstream
  tarball because this one is specially modified to work with
  Ghostscript so that we cannot use lcms2 from SUSE.
- remove-zlib-h-dependency.patch removes dependency on zlib/zlib.h
  in makefiles as we do not use the zlib sources from the
  Ghostscript upstream tarball.</changelog>
  <changelog author="jsmeix@suse.de" date="1458302400">- Version upgrade to 9.19rc1 (first release candidate for 9.19).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- ijs-config is no longer provided
- fix_make_install.patch fixes an install error and
  add_brackets_for_old_autoconf.patch fixes an autoconf error
  see http://bugs.ghostscript.com/show_bug.cgi?id=696665
- fix_ijs_and_x11_for_FirstPage_and_LastPage.patch is no longer
  needed because it is fixed in the upstream sources.
- install_gserrors.h.patch is no longer needed because it is fixed
  in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1458734400">- Version upgrade to 9.19. Mainly a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Metadata pdfmark is now implemented. This allows the user
    to specify an XMP stream which will be written to the
    Catalog of the PDF file. A new pdfmark 'Ext_Metadata' has
    been defined. This takes a string parameter which contains
    XML to be add to the XMP normally created by pdfwrite.
    See "pdfwrite pdfmark extensions" for more information.
  * An experimental, rudimentary raster trapping implementation
    has been added to the Ghostscript graphics library.
    See "Trapping" for details.
  Incompatible changes:
  * (Minor) API change: copy_alpha now supports 8 bit depth
    (as well as the previous 2 and 4).
  * The gs man pages are woefully out of date and basically
    unmaintained. With the release following 9.19, we intend
    to replace their contents with a very limited summary
    of (unlikely to ever change aspects of) calling
    Ghostscript, and a pointer to the (maintained) HTML
    documentation. That is, unless a volunteer is willing
    to update, and commit to maintaining the man pages.
  * ijs-config is no longer provided
  Planned incompatible changes:
  * We plan (ideally for the release following 9.19) to somewhat
    tidy up the device API. We plan to remove deprecated device
    procs (methods/function pointers). We also intend to merge
    the imager state and graphics state (thus eliminating the
    imager state), and change the device API so every device proc
    takes a graphics state parameter (rather than the current
    scheme where only a very few procs take an imager state
    parameter). This should serve as notice to anyone maintaining
    a Ghostscript device outside the canonical source tree that
    you may (probably will) need to update your device(s) when
    these changes happen. Devices using only the non-deprecated
    procs should be trivial to update.
- fix_make_install.patch fixes and
  add_brackets_for_old_autoconf.patch are no longer needed
  because both issues are fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
</package>
<package pkgid="2ff119faa0ca783d4c1300028b28f4cc6c4b0a8976fc71e7fb68cc316e780c26" name="ghostscript" arch="src">
  <version epoch="0" ver="9.25" rel="lp150.2.6.1"/>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="a462e71fa9e03f1cd362869ec3d64377f7958729ef27e6c8f2b88148cfab2145" name="ghostscript" arch="x86_64">
  <version epoch="0" ver="9.25" rel="lp150.2.6.1"/>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="a492bb6077457481f65a9061c6ba28d68e1bcab483a31b65ddb7712069ab66aa" name="ghostscript-devel" arch="x86_64">
  <version epoch="0" ver="9.23" rel="lp150.2.3.1"/>
  <changelog author="schwab@suse.de" date="1447848000">- Do not use library sources for freetype jpeg libpng tiff zlib
  from the Ghostscript upstream tarball because we prefer to use
  for long-established standard libraries the ones from SUSE
  in particular to automatically get SUSE security updates
  for standard libraries.
  In contrast we use e.g. lcms2 from the Ghostscript upstream
  tarball because this one is specially modified to work with
  Ghostscript so that we cannot use lcms2 from SUSE.
- remove-zlib-h-dependency.patch removes dependency on zlib/zlib.h
  in makefiles as we do not use the zlib sources from the
  Ghostscript upstream tarball.</changelog>
  <changelog author="jsmeix@suse.de" date="1458302400">- Version upgrade to 9.19rc1 (first release candidate for 9.19).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- ijs-config is no longer provided
- fix_make_install.patch fixes an install error and
  add_brackets_for_old_autoconf.patch fixes an autoconf error
  see http://bugs.ghostscript.com/show_bug.cgi?id=696665
- fix_ijs_and_x11_for_FirstPage_and_LastPage.patch is no longer
  needed because it is fixed in the upstream sources.
- install_gserrors.h.patch is no longer needed because it is fixed
  in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1458734400">- Version upgrade to 9.19. Mainly a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Metadata pdfmark is now implemented. This allows the user
    to specify an XMP stream which will be written to the
    Catalog of the PDF file. A new pdfmark 'Ext_Metadata' has
    been defined. This takes a string parameter which contains
    XML to be add to the XMP normally created by pdfwrite.
    See "pdfwrite pdfmark extensions" for more information.
  * An experimental, rudimentary raster trapping implementation
    has been added to the Ghostscript graphics library.
    See "Trapping" for details.
  Incompatible changes:
  * (Minor) API change: copy_alpha now supports 8 bit depth
    (as well as the previous 2 and 4).
  * The gs man pages are woefully out of date and basically
    unmaintained. With the release following 9.19, we intend
    to replace their contents with a very limited summary
    of (unlikely to ever change aspects of) calling
    Ghostscript, and a pointer to the (maintained) HTML
    documentation. That is, unless a volunteer is willing
    to update, and commit to maintaining the man pages.
  * ijs-config is no longer provided
  Planned incompatible changes:
  * We plan (ideally for the release following 9.19) to somewhat
    tidy up the device API. We plan to remove deprecated device
    procs (methods/function pointers). We also intend to merge
    the imager state and graphics state (thus eliminating the
    imager state), and change the device API so every device proc
    takes a graphics state parameter (rather than the current
    scheme where only a very few procs take an imager state
    parameter). This should serve as notice to anyone maintaining
    a Ghostscript device outside the canonical source tree that
    you may (probably will) need to update your device(s) when
    these changes happen. Devices using only the non-deprecated
    procs should be trivial to update.
- fix_make_install.patch fixes and
  add_brackets_for_old_autoconf.patch are no longer needed
  because both issues are fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
</package>
<package pkgid="9d51260e658190cf69df3e0f65b7f8ac6f712ded82ef560078305984e48d2c4d" name="ghostscript-devel" arch="x86_64">
  <version epoch="0" ver="9.25" rel="lp150.2.6.1"/>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="6ea1e9f95e9deb62a4bb53adeef74b55fd7775f8b2d7d2051829d0e872f809f1" name="ghostscript-mini" arch="src">
  <version epoch="0" ver="9.23" rel="lp150.2.3.1"/>
  <changelog author="schwab@suse.de" date="1447848000">- Do not use library sources for freetype jpeg libpng tiff zlib
  from the Ghostscript upstream tarball because we prefer to use
  for long-established standard libraries the ones from SUSE
  in particular to automatically get SUSE security updates
  for standard libraries.
  In contrast we use e.g. lcms2 from the Ghostscript upstream
  tarball because this one is specially modified to work with
  Ghostscript so that we cannot use lcms2 from SUSE.
- remove-zlib-h-dependency.patch removes dependency on zlib/zlib.h
  in makefiles as we do not use the zlib sources from the
  Ghostscript upstream tarball.</changelog>
  <changelog author="jsmeix@suse.de" date="1458302400">- Version upgrade to 9.19rc1 (first release candidate for 9.19).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- ijs-config is no longer provided
- fix_make_install.patch fixes an install error and
  add_brackets_for_old_autoconf.patch fixes an autoconf error
  see http://bugs.ghostscript.com/show_bug.cgi?id=696665
- fix_ijs_and_x11_for_FirstPage_and_LastPage.patch is no longer
  needed because it is fixed in the upstream sources.
- install_gserrors.h.patch is no longer needed because it is fixed
  in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1458734400">- Version upgrade to 9.19. Mainly a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Metadata pdfmark is now implemented. This allows the user
    to specify an XMP stream which will be written to the
    Catalog of the PDF file. A new pdfmark 'Ext_Metadata' has
    been defined. This takes a string parameter which contains
    XML to be add to the XMP normally created by pdfwrite.
    See "pdfwrite pdfmark extensions" for more information.
  * An experimental, rudimentary raster trapping implementation
    has been added to the Ghostscript graphics library.
    See "Trapping" for details.
  Incompatible changes:
  * (Minor) API change: copy_alpha now supports 8 bit depth
    (as well as the previous 2 and 4).
  * The gs man pages are woefully out of date and basically
    unmaintained. With the release following 9.19, we intend
    to replace their contents with a very limited summary
    of (unlikely to ever change aspects of) calling
    Ghostscript, and a pointer to the (maintained) HTML
    documentation. That is, unless a volunteer is willing
    to update, and commit to maintaining the man pages.
  * ijs-config is no longer provided
  Planned incompatible changes:
  * We plan (ideally for the release following 9.19) to somewhat
    tidy up the device API. We plan to remove deprecated device
    procs (methods/function pointers). We also intend to merge
    the imager state and graphics state (thus eliminating the
    imager state), and change the device API so every device proc
    takes a graphics state parameter (rather than the current
    scheme where only a very few procs take an imager state
    parameter). This should serve as notice to anyone maintaining
    a Ghostscript device outside the canonical source tree that
    you may (probably will) need to update your device(s) when
    these changes happen. Devices using only the non-deprecated
    procs should be trivial to update.
- fix_make_install.patch fixes and
  add_brackets_for_old_autoconf.patch are no longer needed
  because both issues are fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
</package>
<package pkgid="7bd82c15db068bcf4fa4c83554b69351e060e2c59a6e50a7341100a73886b8fb" name="ghostscript-mini" arch="x86_64">
  <version epoch="0" ver="9.23" rel="lp150.2.3.1"/>
  <changelog author="schwab@suse.de" date="1447848000">- Do not use library sources for freetype jpeg libpng tiff zlib
  from the Ghostscript upstream tarball because we prefer to use
  for long-established standard libraries the ones from SUSE
  in particular to automatically get SUSE security updates
  for standard libraries.
  In contrast we use e.g. lcms2 from the Ghostscript upstream
  tarball because this one is specially modified to work with
  Ghostscript so that we cannot use lcms2 from SUSE.
- remove-zlib-h-dependency.patch removes dependency on zlib/zlib.h
  in makefiles as we do not use the zlib sources from the
  Ghostscript upstream tarball.</changelog>
  <changelog author="jsmeix@suse.de" date="1458302400">- Version upgrade to 9.19rc1 (first release candidate for 9.19).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- ijs-config is no longer provided
- fix_make_install.patch fixes an install error and
  add_brackets_for_old_autoconf.patch fixes an autoconf error
  see http://bugs.ghostscript.com/show_bug.cgi?id=696665
- fix_ijs_and_x11_for_FirstPage_and_LastPage.patch is no longer
  needed because it is fixed in the upstream sources.
- install_gserrors.h.patch is no longer needed because it is fixed
  in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1458734400">- Version upgrade to 9.19. Mainly a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Metadata pdfmark is now implemented. This allows the user
    to specify an XMP stream which will be written to the
    Catalog of the PDF file. A new pdfmark 'Ext_Metadata' has
    been defined. This takes a string parameter which contains
    XML to be add to the XMP normally created by pdfwrite.
    See "pdfwrite pdfmark extensions" for more information.
  * An experimental, rudimentary raster trapping implementation
    has been added to the Ghostscript graphics library.
    See "Trapping" for details.
  Incompatible changes:
  * (Minor) API change: copy_alpha now supports 8 bit depth
    (as well as the previous 2 and 4).
  * The gs man pages are woefully out of date and basically
    unmaintained. With the release following 9.19, we intend
    to replace their contents with a very limited summary
    of (unlikely to ever change aspects of) calling
    Ghostscript, and a pointer to the (maintained) HTML
    documentation. That is, unless a volunteer is willing
    to update, and commit to maintaining the man pages.
  * ijs-config is no longer provided
  Planned incompatible changes:
  * We plan (ideally for the release following 9.19) to somewhat
    tidy up the device API. We plan to remove deprecated device
    procs (methods/function pointers). We also intend to merge
    the imager state and graphics state (thus eliminating the
    imager state), and change the device API so every device proc
    takes a graphics state parameter (rather than the current
    scheme where only a very few procs take an imager state
    parameter). This should serve as notice to anyone maintaining
    a Ghostscript device outside the canonical source tree that
    you may (probably will) need to update your device(s) when
    these changes happen. Devices using only the non-deprecated
    procs should be trivial to update.
- fix_make_install.patch fixes and
  add_brackets_for_old_autoconf.patch are no longer needed
  because both issues are fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
</package>
<package pkgid="25f359fe8b7018389e1a6ebe318936549d976e6e559492bb76d2907fdfdcdc01" name="ghostscript-mini" arch="src">
  <version epoch="0" ver="9.25" rel="lp150.2.6.1"/>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="e647c747c46f64445d7890aeb492f862f0b79ad3b4683254bb4d77ceec9f311c" name="ghostscript-mini" arch="x86_64">
  <version epoch="0" ver="9.25" rel="lp150.2.6.1"/>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="ac0b6a098e845eae76a7c65fff80e30e29da1f6ab505486721c7ebe49ae00cbc" name="ghostscript-mini-devel" arch="x86_64">
  <version epoch="0" ver="9.23" rel="lp150.2.3.1"/>
  <changelog author="schwab@suse.de" date="1447848000">- Do not use library sources for freetype jpeg libpng tiff zlib
  from the Ghostscript upstream tarball because we prefer to use
  for long-established standard libraries the ones from SUSE
  in particular to automatically get SUSE security updates
  for standard libraries.
  In contrast we use e.g. lcms2 from the Ghostscript upstream
  tarball because this one is specially modified to work with
  Ghostscript so that we cannot use lcms2 from SUSE.
- remove-zlib-h-dependency.patch removes dependency on zlib/zlib.h
  in makefiles as we do not use the zlib sources from the
  Ghostscript upstream tarball.</changelog>
  <changelog author="jsmeix@suse.de" date="1458302400">- Version upgrade to 9.19rc1 (first release candidate for 9.19).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- ijs-config is no longer provided
- fix_make_install.patch fixes an install error and
  add_brackets_for_old_autoconf.patch fixes an autoconf error
  see http://bugs.ghostscript.com/show_bug.cgi?id=696665
- fix_ijs_and_x11_for_FirstPage_and_LastPage.patch is no longer
  needed because it is fixed in the upstream sources.
- install_gserrors.h.patch is no longer needed because it is fixed
  in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1458734400">- Version upgrade to 9.19. Mainly a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Metadata pdfmark is now implemented. This allows the user
    to specify an XMP stream which will be written to the
    Catalog of the PDF file. A new pdfmark 'Ext_Metadata' has
    been defined. This takes a string parameter which contains
    XML to be add to the XMP normally created by pdfwrite.
    See "pdfwrite pdfmark extensions" for more information.
  * An experimental, rudimentary raster trapping implementation
    has been added to the Ghostscript graphics library.
    See "Trapping" for details.
  Incompatible changes:
  * (Minor) API change: copy_alpha now supports 8 bit depth
    (as well as the previous 2 and 4).
  * The gs man pages are woefully out of date and basically
    unmaintained. With the release following 9.19, we intend
    to replace their contents with a very limited summary
    of (unlikely to ever change aspects of) calling
    Ghostscript, and a pointer to the (maintained) HTML
    documentation. That is, unless a volunteer is willing
    to update, and commit to maintaining the man pages.
  * ijs-config is no longer provided
  Planned incompatible changes:
  * We plan (ideally for the release following 9.19) to somewhat
    tidy up the device API. We plan to remove deprecated device
    procs (methods/function pointers). We also intend to merge
    the imager state and graphics state (thus eliminating the
    imager state), and change the device API so every device proc
    takes a graphics state parameter (rather than the current
    scheme where only a very few procs take an imager state
    parameter). This should serve as notice to anyone maintaining
    a Ghostscript device outside the canonical source tree that
    you may (probably will) need to update your device(s) when
    these changes happen. Devices using only the non-deprecated
    procs should be trivial to update.
- fix_make_install.patch fixes and
  add_brackets_for_old_autoconf.patch are no longer needed
  because both issues are fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
</package>
<package pkgid="0e0a12fc38352fdccf9c4c85bbc24bac762c30a533f51c3a573e11c8cc67a244" name="ghostscript-mini-devel" arch="x86_64">
  <version epoch="0" ver="9.25" rel="lp150.2.6.1"/>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="dcc4961ac7048012416bc41046728bd6087490ba2a863f2872f1da90c833f00e" name="ghostscript-x11" arch="x86_64">
  <version epoch="0" ver="9.23" rel="lp150.2.3.1"/>
  <changelog author="schwab@suse.de" date="1447848000">- Do not use library sources for freetype jpeg libpng tiff zlib
  from the Ghostscript upstream tarball because we prefer to use
  for long-established standard libraries the ones from SUSE
  in particular to automatically get SUSE security updates
  for standard libraries.
  In contrast we use e.g. lcms2 from the Ghostscript upstream
  tarball because this one is specially modified to work with
  Ghostscript so that we cannot use lcms2 from SUSE.
- remove-zlib-h-dependency.patch removes dependency on zlib/zlib.h
  in makefiles as we do not use the zlib sources from the
  Ghostscript upstream tarball.</changelog>
  <changelog author="jsmeix@suse.de" date="1458302400">- Version upgrade to 9.19rc1 (first release candidate for 9.19).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- ijs-config is no longer provided
- fix_make_install.patch fixes an install error and
  add_brackets_for_old_autoconf.patch fixes an autoconf error
  see http://bugs.ghostscript.com/show_bug.cgi?id=696665
- fix_ijs_and_x11_for_FirstPage_and_LastPage.patch is no longer
  needed because it is fixed in the upstream sources.
- install_gserrors.h.patch is no longer needed because it is fixed
  in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1458734400">- Version upgrade to 9.19. Mainly a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Metadata pdfmark is now implemented. This allows the user
    to specify an XMP stream which will be written to the
    Catalog of the PDF file. A new pdfmark 'Ext_Metadata' has
    been defined. This takes a string parameter which contains
    XML to be add to the XMP normally created by pdfwrite.
    See "pdfwrite pdfmark extensions" for more information.
  * An experimental, rudimentary raster trapping implementation
    has been added to the Ghostscript graphics library.
    See "Trapping" for details.
  Incompatible changes:
  * (Minor) API change: copy_alpha now supports 8 bit depth
    (as well as the previous 2 and 4).
  * The gs man pages are woefully out of date and basically
    unmaintained. With the release following 9.19, we intend
    to replace their contents with a very limited summary
    of (unlikely to ever change aspects of) calling
    Ghostscript, and a pointer to the (maintained) HTML
    documentation. That is, unless a volunteer is willing
    to update, and commit to maintaining the man pages.
  * ijs-config is no longer provided
  Planned incompatible changes:
  * We plan (ideally for the release following 9.19) to somewhat
    tidy up the device API. We plan to remove deprecated device
    procs (methods/function pointers). We also intend to merge
    the imager state and graphics state (thus eliminating the
    imager state), and change the device API so every device proc
    takes a graphics state parameter (rather than the current
    scheme where only a very few procs take an imager state
    parameter). This should serve as notice to anyone maintaining
    a Ghostscript device outside the canonical source tree that
    you may (probably will) need to update your device(s) when
    these changes happen. Devices using only the non-deprecated
    procs should be trivial to update.
- fix_make_install.patch fixes and
  add_brackets_for_old_autoconf.patch are no longer needed
  because both issues are fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
</package>
<package pkgid="ec99c9f5ea493e93ef9774dbcdde6b0830f93ce81e3c02ca2c422799ec65d4d1" name="ghostscript-x11" arch="x86_64">
  <version epoch="0" ver="9.25" rel="lp150.2.6.1"/>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="6ccfa2ee7d820de0801af9d7184af5f398c2f49648a6ce1a743beb4be4f77a7e" name="gio-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="42.1" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1442664000">- Drop org.gnome.settings-daemon.plugins.power/button-power
  override: this settings has been removed in GNOME 3.17.92.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Bump version to 42.1, to prepare for next version of openSUSE.</changelog>
  <changelog author="badshah400@gmail.com" date="1447156800">- The touchpad schemas migrated to org.gnome.desktop.peripherals
  from org.gnome.settings-daemon.peripherals, adapt tap-to-click
  setting accordingly (boo#954526).
- The "disable-while-typing" key no longer exists, remove it
  accordingly.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455364800">- Drop org.gnome.settings-daemon.plugins.media-keys/toggle-mute
  since we dropped the patch making this needed.</changelog>
  <changelog author="fcrozat@suse.com" date="1458043200">- Fix KeySym assigned for Help, XF86Help doesn't exist anymore.</changelog>
  <changelog author="fcrozat@suse.com" date="1466424000">- Add some settings from SLE12 SP2, not enabled when building on
  openSUSE (default zoom on nautilus).
- Update favorite applications default to use new names from
  upstream, prevent writing some defaults to dconf (partially fixes
  bsc#979947).</changelog>
  <changelog author="fcrozat@suse.com" date="1467201600">- Resync with glib2-branding-SLE and simplify specfile.
- Replaces Requires by Recommends on wallpaper-branding-openSUSE:
  gio-branding-openSUSE is required by glib2, which is causing
  openSUSE wallpaper as hard dependency on non-graphical install.
  (boo#993969).</changelog>
  <changelog author="fezhang@suse.com" date="1467374400">- Make gnome-settings-daemon housekeeping plugin ignore /boot/efi
  [bsc#919217].
  Summary from bsc#919217:
  "On a default UEFI installation, /boot/efi is created with a size
  of 156MB. It will cause gnome-settings-daemon to popup a warning,
  if logged as root (not 100% sure when logged as a regular user)
  that a partition has less than than 1GB of free space.
  /boot/efi should be added to default schema
  org.gnome.settings-daemon.plugin.housekeeping ignore-paths"</changelog>
  <changelog author="dimstar@opensuse.org" date="1468497600">- Do not attempt to build -openSUSE on SLE and -SLE on openSUSE:
  trick the .spec file to ExclusiveArch: %nil in this case.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473249600">- Once again disable GNOME Software update notifications (automatic
  download of patches; openSUSE relies on gnome-settings-daemon's
  internal update plugin for update notifications) (boo#997572).</changelog>
  <changelog author="dimstar@opensuse.org" date="1476878400">- Enable freedesktop sound theme by default (boo#1004919):
  + Set org.gnome.desktop.sound/theme-name to 'freedesktop' for
    openSUSE.
  + Recommend sound-theme-freedesktop by gio-branding-openSUSE.
- Introdue @@IF_LEAP@@ logic into the .gschema.override.in file:
  IF_LEAP is true if building for 'openSUSE' and sle_version is set
  in prjconf. Apply IF_LEAP to the GNOME Software update
  notifications.</changelog>
  <changelog author="yfjiang@suse.com" date="1500379200">- Update .gschema.override.in to set small icon size on Desktop and
  nautilus in Leap, which is consistent with SLE (bsc#1043604).</changelog>
  <changelog author="fcrozat@suse.com" date="1508500800">- Update SLE version to 15.
- Remove post/postun scripts, no longer needed with file triggers.
- Update favorites applications on SLE15, we switched to pidgin and
  gnome-photos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Update .gschema.override.in: evolution.desktop has been renamed
  to org.gnome.Evolution.desktop.</changelog>
  <changelog author="xwang@suse.com" date="1513166400">-  Update .gschema.override.in to show application menu on title
  bar in sle-classic session (bgo#746592 bsc#1070090).</changelog>
  <changelog author="dimstar@opensuse.org" date="1513339200">- Rename base package to glib2-branding and add SLE and openSUSE as
  multibuild flavors. There is no other difference to the previous
  glib2-branding-{openSUSE,SLE} packages.
- Drop pre_checkin.sh: no longer needed with multibuild.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513684800">- Use variable flavor instead of BUILD_FLAVOR: obs is only
  replacing the first occurence.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513771200">- Revert "Update .gschema.override.in: evolution.desktop has been
  renamed to org.gnome.Evolution.desktop.": This will only be valid
  with GNOME 3.28.</changelog>
  <changelog author="yfjiang@suse.com" date="1525348800">- Update .gschema.override.in: referring the implementation of
  bsc#1077332, fully enable gnome-software notification which is
  now used on both leap15 and sle15 to replace the legacy g-s-d
  notification method (boo#1090042).</changelog>
  <changelog author="qkzhu@suse.com" date="1530187200">- Recommend sound-theme-freedesktop by both openSUSE and SLE.
  (bsc#1097595)</changelog>
</package>
<package pkgid="068a509e497c6650c37f0a81e64c0d8b14df314f0f62147a64683b7e0ad0bc7c" name="gio-branding-upstream" arch="noarch">
  <version epoch="0" ver="2.54.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 2.53.2:
  + A few new number parsing functions have been added. These have
    better error handling than the existing ones.
  + glib-mkenums now supports /*&lt; private &gt;*/ and /*&lt; public &gt;*/.
  + GSettings now consider XDG_DATA_HOME in addition to
    XDG_DATA_DIRS.
  + Bugs fixed: bgo#674885, bgo#698064, bgo#732000, bgo#734946,
    bgo#741335, bgo#748263, bgo#776876, bgo#777030, bgo#780300,
    bgo#780309, bgo#781755, bgo#781826, bgo#781830, bgo#781847,
    bgo#781867, bgo#782068, bgo#782075, bgo#782089, bgo#782162,
    bgo#782237, bgo#782311, bgo#782628.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651201">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
</package>
<package pkgid="8680d1b81a98d4f35859c5d6dab89b9a113a493f859ee477c129e004f2ec389d" name="git" arch="src">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="fbd02f0e608ce1e4985222f8eda885e0afb1a005577e123077cbf5ca236429eb" name="git" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="de84cacc51de0b34cebb9433b2ecd115bc677bbdd2200a09008d42b7c778738a" name="git" arch="src">
  <version epoch="0" ver="2.16.4" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="85f693e4c626110f3c65d16d394f9216054eedfb42a08ed81cc4beb5c901fb4b" name="git" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="5dcca7743a3d44e4380ace5c96c3fdfbf7b0f570169765c422c95483c6da27a2" name="git-annex" arch="src">
  <version epoch="0" ver="6.20180626" rel="lp150.2.5.1"/>
  <changelog author="psimons@suse.com" date="1477828800">- Update to version 6.20161027 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1478001600">- Update to version 6.20161031 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1479124800">- Update to version 6.20161111 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1479643200">- Update to version 6.20161118 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1481889600">- Update to version 6.20161210 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1483531200">- Update to version 6.20170101 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1487592000">- Update to version 6.20170214 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1488456000">- Update to version 6.20170301.1 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1490184000">- Update to version 6.20170321 with cabal2obs.
  * Bugfix: Passing a command a filename that does not exist sometimes did not display an error, when a path to a directory was also passed.
  * status: Propigate nonzero exit code from git status.
  * Linux standalone builds put the bundled ssh last in PATH, so any system ssh will be preferred over it.
  * assistant: Add 1/200th second delay between checking each file in the full transfer scan, to avoid using too much CPU.
  * get -J: Improve distribution of jobs amoung remotes when there are more jobs than remotes.
  * fsck -q: When a file has bad content, include the name of the file in the warning message.
  * Windows: Improve handling of shebang in external special remote program, searching for the program in the PATH.
  * Drop support for building with old versions of dns, http-conduit, directory, feed, and http-types.
  * Windows: Fix bug in shell script shebang lookup code that caused a "delayed read on closed handle" error.
  * git-annex-shell: Fix bug when used with a recently cloned repository, where "merging" messages were included in the output of configlist (and perhaps other commands) and caused a "Failed to get annex.uuid configuration" error.
  * Support GIT_SSH and GIT_SSH_COMMAND, which are handled close the same as they are by git. However, unlike git, git-annex sometimes needs to pass the -n parameter when using these.
  * sync --content-of=path (-C path) added for when you want to sync only some files' contents, not the whole working tree.</changelog>
  <changelog author="psimons@suse.com" date="1494936000">- Update to version 6.20170510 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1495454400">- Update to version 6.20170519 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1497873600">- Update to version 6.20170520.</changelog>
  <changelog author="psimons@suse.com" date="1501761600">- Updated with latest spec-cleaner version 0.9.8-8-geadfbbf.</changelog>
  <changelog author="psimons@suse.com" date="1503316800">- Update to version 6.20170818 (bsc#1054653, CVE-2017-12976).
  * Security fix: Disallow hostname starting with a dash, which
    would get passed to ssh and be treated an option. This could
    be used by an attacker who provides a crafted repository url
    to cause the victim to execute arbitrary code via -oProxyCommand.
    (The same class of security hole recently affected git itself.)
  * git-annex.cabal: Deal with breaking changes in Cabal 2.0.
  * Fix build with QuickCheck 2.10.
  * fsck: Support --json.
  * move, copy: Support --batch.
  * Added GIT_ANNEX_VECTOR_CLOCK environment variable, which can be used to
    override the default timestamps used in log files in the git-annex
    branch. This is a dangerous environment variable; use with caution.
  * Fix a git-annex test failure when run on NFS due to NFS lock files
    preventing directory removal.
  * test: Avoid most situations involving failure to delete test
    directories, by forking a worker process and only deleting the test
    directory once it exits.
  * Disable http-client's default 30 second response timeout when HEADing
    an url to check if it exists. Some web servers take quite a long time
    to answer a HEAD request.
  * Added remote configuration settings annex-ignore-command and
    annex-sync-command, which are dynamic equivilants of the annex-ignore
    and annex-sync configurations.
  * Prevent spaces from being embedded in the name of new WORM keys,
    as that handing spaces in keys would complicate things like the
    external special remote protocol.
  * migrate: WORM keys containing spaces will be migrated to not contain
    spaces anymore.
  * External special remotes will refuse to operate on keys with spaces in
    their names. That has never worked correctly due to the design of the
    external special remote protocol. Display an error message suggesting
    migration.
  * Fix incorrect external special remote documentation, which said that
    the filename parameter to the TRANSFER command could not contain
    spaces. It can in fact contain spaces. Special remotes implementors
    that relied on that may need to fix bugs in their special remotes.
  * Fix the external special remotes git-annex-remote-ipfs,
    git-annex-remote-torrent and the example.sh template to correctly
    support filenames with spaces.
  * Windows: Win32 package has subsumed Win32-extras; update dependency.</changelog>
  <changelog author="psimons@suse.com" date="1505736000">- The upstream release tarball changed in some trivial way. Copy
  the new tarball into place to keep our version in sync.</changelog>
  <changelog author="psimons@suse.com" date="1506427200">- Update to version 6.20170925.
  * git-annex export: New command, can create and efficiently update
    exports of trees to special remotes.
  * Use git-annex initremote with exporttree=yes to set up a special remote
    for use by git-annex export.
  * Implemented export to directory, S3, and webdav special remotes.
  * External special remote protocol extended to support export.
    Developers of external special remotes should consider if export makes
    sense for them and add support.
  * sync, assistant: Update tracking exports.
  * Support building with feed-1.0, while still supporting older versions.
  * init: Display an additional message when it detects a filesystem that
    allows writing to files whose write bit is not set.
  * S3: Allow removing files from IA.
  * webdav: Checking if a non-existent file is present on Box.com
    triggered a bug in its webdav support that generates an infinite series
    of redirects. Deal with such problems by assuming such behavior means
    the file is not present.
  * webdav: Fix lack of url-escaping of filenames. Mostly impacted exports
    of filenames containing eg spaces.
  * webdav: Changed path used on webdav server for temporary files.</changelog>
  <changelog author="psimons@suse.com" date="1507118400">- Update to version 6.20171003.
  * webdav: Improve error message for failed request to include the request
    method and path.
  * metadata: Added --remove-all.
  * Warn when metadata is inherited from a previous version of a file,
    to avoid the user being surprised in cases where that behavior is not
    desired or expected.
  * sync: Added --cleanup, which removes local and remote synced/ branches.
  * external: When the external special remote program crashed, a newline
    could be output, which messed up the expected output for --batch mode.
  * external: Avoid checking EXPORTSUPPORTED for special remotes that are
    not configured to use exports.
  * test: Fix reversion that made it only run inside a git repository.
  * copy, move: Behave same with --fast when sending to remotes located
    on a local disk as when sending to other remotes.
  * Fix process and file descriptor leak that was exposed when
    git-annex was built with ghc 8.2.1. Broke git-annex test on OSX
    due to running out of FDs, and may have also leaked in other situations.
  * info: Improve cleanup of stale transfer info files.</changelog>
  <changelog author="psimons@suse.com" date="1508414400">- Update to version 6.20171018.
  * add: Replace work tree file atomically on systems supporting hard
    links. Avoids a window where interrupting an add could result in
    the file being moved into the annex, with no symlink yet created.
  * webdav: Avoid unncessisarily creating the collection at the top
    of the repository when storing files there, since that collection
    is created by initremote.
    (This seems to work around some brokenness of the box.com webdav
    server, which caused uploads to be very slow or sometimes fail.)
  * webdav: Make --debug show all webdav operations.
  * get -J/move -J/copy -J/mirror -J/sync -J: Avoid "transfer already in
    progress" errors when two files use the same key.
  * Konqueror desktop file location changed to one used by plasma 5.
    Thanks, Félix Sipma.
  * Avoid repeated checking that files passed on the command line exist.
  * Fix build with aws-0.17.
  * stack.yaml: Update to lts-9.9.</changelog>
  <changelog author="psimons@suse.com" date="1509105600">- Update to version 6.20171026.
  * Windows: Fix reversion that caused the path used to link
    to annexed content to include the drive letter and full path, rather
    than being relative. (`git annex fix` will fix up after this problem).
  * Windows build fixed, and changed to use stack for more reliable build
    environment.
  * Windows: Remove wget from bundle; it needs libraries that are not
    included, and git for windows includes curl which git-annex will use
    instead.
  * Add day to metadata when annex.genmetadata is enabled.
    Thanks, Sean T Parsons
  * stack.yaml: Added nix packages section.
    Thanks, Sean T Parsons</changelog>
  <changelog author="psimons@suse.com" date="1530100800">- Update to version 6.20180626 to fix two security issues that
  remote attackers could exploit to get unauthorized access to
  local files and even decrypt them with the user's private GPG
  key. [bsc#1098062, CVE-2018-10857, bsc#1098364, CVE-2018-10859]
  Important changes are:
  * Refuse to download content, that cannot be verified with a
    hash, from encrypted special remotes (for CVE-2018-10859), and
    from all external special remotes and glacier (for
    CVE-2018-10857). In particular, URL and WORM keys stored on
    such remotes won't be downloaded. If this affects your files,
    you can run `git-annex migrate` on the affected files, to
    convert them to use a hash.
  * Added annex.security.allow-unverified-downloads, which can
    override the above.
  * Added annex.security.allowed-url-schemes setting, which
    defaults to only allowing http, https, and ftp URLs. Note
    especially that file:/ is no longer enabled by default.
  * Removed annex.web-download-command, since its interface does
    not allow supporting annex.security.allowed-url-schemes across
    redirects. If you used this setting, you may want to instead
    use annex.web-options to pass options to curl.
  * git-annex will refuse to download content from http servers on
    localhost, or any private IP addresses, to prevent accidental
    exposure of internal data. This can be overridden with the
    annex.security.allowed-http-addresses setting.
  * Local http proxies will not be used unless allowed by the
    annex.security.allowed-http-addresses setting.
  * Since the interfaces to curl and youtube-dl do not have a way
    to prevent them from accessing localhost or private IP
    addresses, they default to not being used for url downloads.
    Only when annex.security.allowed-http-addresses=all will curl
    and youtube-dl be used.
  Additionally, this update brings many bug fixes and new features.
  http://hackage.haskell.org/package/git-annex-6.20180626/changelog
  has a detailed list of changes.</changelog>
</package>
<package pkgid="3345ee1890c48acf8ca22fe72e1d471b378a33d3bfbfbb446c4e60cf1304f1e1" name="git-annex" arch="x86_64">
  <version epoch="0" ver="6.20180626" rel="lp150.2.5.1"/>
  <changelog author="psimons@suse.com" date="1477828800">- Update to version 6.20161027 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1478001600">- Update to version 6.20161031 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1479124800">- Update to version 6.20161111 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1479643200">- Update to version 6.20161118 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1481889600">- Update to version 6.20161210 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1483531200">- Update to version 6.20170101 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1487592000">- Update to version 6.20170214 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1488456000">- Update to version 6.20170301.1 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1490184000">- Update to version 6.20170321 with cabal2obs.
  * Bugfix: Passing a command a filename that does not exist sometimes did not display an error, when a path to a directory was also passed.
  * status: Propigate nonzero exit code from git status.
  * Linux standalone builds put the bundled ssh last in PATH, so any system ssh will be preferred over it.
  * assistant: Add 1/200th second delay between checking each file in the full transfer scan, to avoid using too much CPU.
  * get -J: Improve distribution of jobs amoung remotes when there are more jobs than remotes.
  * fsck -q: When a file has bad content, include the name of the file in the warning message.
  * Windows: Improve handling of shebang in external special remote program, searching for the program in the PATH.
  * Drop support for building with old versions of dns, http-conduit, directory, feed, and http-types.
  * Windows: Fix bug in shell script shebang lookup code that caused a "delayed read on closed handle" error.
  * git-annex-shell: Fix bug when used with a recently cloned repository, where "merging" messages were included in the output of configlist (and perhaps other commands) and caused a "Failed to get annex.uuid configuration" error.
  * Support GIT_SSH and GIT_SSH_COMMAND, which are handled close the same as they are by git. However, unlike git, git-annex sometimes needs to pass the -n parameter when using these.
  * sync --content-of=path (-C path) added for when you want to sync only some files' contents, not the whole working tree.</changelog>
  <changelog author="psimons@suse.com" date="1494936000">- Update to version 6.20170510 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1495454400">- Update to version 6.20170519 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1497873600">- Update to version 6.20170520.</changelog>
  <changelog author="psimons@suse.com" date="1501761600">- Updated with latest spec-cleaner version 0.9.8-8-geadfbbf.</changelog>
  <changelog author="psimons@suse.com" date="1503316800">- Update to version 6.20170818 (bsc#1054653, CVE-2017-12976).
  * Security fix: Disallow hostname starting with a dash, which
    would get passed to ssh and be treated an option. This could
    be used by an attacker who provides a crafted repository url
    to cause the victim to execute arbitrary code via -oProxyCommand.
    (The same class of security hole recently affected git itself.)
  * git-annex.cabal: Deal with breaking changes in Cabal 2.0.
  * Fix build with QuickCheck 2.10.
  * fsck: Support --json.
  * move, copy: Support --batch.
  * Added GIT_ANNEX_VECTOR_CLOCK environment variable, which can be used to
    override the default timestamps used in log files in the git-annex
    branch. This is a dangerous environment variable; use with caution.
  * Fix a git-annex test failure when run on NFS due to NFS lock files
    preventing directory removal.
  * test: Avoid most situations involving failure to delete test
    directories, by forking a worker process and only deleting the test
    directory once it exits.
  * Disable http-client's default 30 second response timeout when HEADing
    an url to check if it exists. Some web servers take quite a long time
    to answer a HEAD request.
  * Added remote configuration settings annex-ignore-command and
    annex-sync-command, which are dynamic equivilants of the annex-ignore
    and annex-sync configurations.
  * Prevent spaces from being embedded in the name of new WORM keys,
    as that handing spaces in keys would complicate things like the
    external special remote protocol.
  * migrate: WORM keys containing spaces will be migrated to not contain
    spaces anymore.
  * External special remotes will refuse to operate on keys with spaces in
    their names. That has never worked correctly due to the design of the
    external special remote protocol. Display an error message suggesting
    migration.
  * Fix incorrect external special remote documentation, which said that
    the filename parameter to the TRANSFER command could not contain
    spaces. It can in fact contain spaces. Special remotes implementors
    that relied on that may need to fix bugs in their special remotes.
  * Fix the external special remotes git-annex-remote-ipfs,
    git-annex-remote-torrent and the example.sh template to correctly
    support filenames with spaces.
  * Windows: Win32 package has subsumed Win32-extras; update dependency.</changelog>
  <changelog author="psimons@suse.com" date="1505736000">- The upstream release tarball changed in some trivial way. Copy
  the new tarball into place to keep our version in sync.</changelog>
  <changelog author="psimons@suse.com" date="1506427200">- Update to version 6.20170925.
  * git-annex export: New command, can create and efficiently update
    exports of trees to special remotes.
  * Use git-annex initremote with exporttree=yes to set up a special remote
    for use by git-annex export.
  * Implemented export to directory, S3, and webdav special remotes.
  * External special remote protocol extended to support export.
    Developers of external special remotes should consider if export makes
    sense for them and add support.
  * sync, assistant: Update tracking exports.
  * Support building with feed-1.0, while still supporting older versions.
  * init: Display an additional message when it detects a filesystem that
    allows writing to files whose write bit is not set.
  * S3: Allow removing files from IA.
  * webdav: Checking if a non-existent file is present on Box.com
    triggered a bug in its webdav support that generates an infinite series
    of redirects. Deal with such problems by assuming such behavior means
    the file is not present.
  * webdav: Fix lack of url-escaping of filenames. Mostly impacted exports
    of filenames containing eg spaces.
  * webdav: Changed path used on webdav server for temporary files.</changelog>
  <changelog author="psimons@suse.com" date="1507118400">- Update to version 6.20171003.
  * webdav: Improve error message for failed request to include the request
    method and path.
  * metadata: Added --remove-all.
  * Warn when metadata is inherited from a previous version of a file,
    to avoid the user being surprised in cases where that behavior is not
    desired or expected.
  * sync: Added --cleanup, which removes local and remote synced/ branches.
  * external: When the external special remote program crashed, a newline
    could be output, which messed up the expected output for --batch mode.
  * external: Avoid checking EXPORTSUPPORTED for special remotes that are
    not configured to use exports.
  * test: Fix reversion that made it only run inside a git repository.
  * copy, move: Behave same with --fast when sending to remotes located
    on a local disk as when sending to other remotes.
  * Fix process and file descriptor leak that was exposed when
    git-annex was built with ghc 8.2.1. Broke git-annex test on OSX
    due to running out of FDs, and may have also leaked in other situations.
  * info: Improve cleanup of stale transfer info files.</changelog>
  <changelog author="psimons@suse.com" date="1508414400">- Update to version 6.20171018.
  * add: Replace work tree file atomically on systems supporting hard
    links. Avoids a window where interrupting an add could result in
    the file being moved into the annex, with no symlink yet created.
  * webdav: Avoid unncessisarily creating the collection at the top
    of the repository when storing files there, since that collection
    is created by initremote.
    (This seems to work around some brokenness of the box.com webdav
    server, which caused uploads to be very slow or sometimes fail.)
  * webdav: Make --debug show all webdav operations.
  * get -J/move -J/copy -J/mirror -J/sync -J: Avoid "transfer already in
    progress" errors when two files use the same key.
  * Konqueror desktop file location changed to one used by plasma 5.
    Thanks, Félix Sipma.
  * Avoid repeated checking that files passed on the command line exist.
  * Fix build with aws-0.17.
  * stack.yaml: Update to lts-9.9.</changelog>
  <changelog author="psimons@suse.com" date="1509105600">- Update to version 6.20171026.
  * Windows: Fix reversion that caused the path used to link
    to annexed content to include the drive letter and full path, rather
    than being relative. (`git annex fix` will fix up after this problem).
  * Windows build fixed, and changed to use stack for more reliable build
    environment.
  * Windows: Remove wget from bundle; it needs libraries that are not
    included, and git for windows includes curl which git-annex will use
    instead.
  * Add day to metadata when annex.genmetadata is enabled.
    Thanks, Sean T Parsons
  * stack.yaml: Added nix packages section.
    Thanks, Sean T Parsons</changelog>
  <changelog author="psimons@suse.com" date="1530100800">- Update to version 6.20180626 to fix two security issues that
  remote attackers could exploit to get unauthorized access to
  local files and even decrypt them with the user's private GPG
  key. [bsc#1098062, CVE-2018-10857, bsc#1098364, CVE-2018-10859]
  Important changes are:
  * Refuse to download content, that cannot be verified with a
    hash, from encrypted special remotes (for CVE-2018-10859), and
    from all external special remotes and glacier (for
    CVE-2018-10857). In particular, URL and WORM keys stored on
    such remotes won't be downloaded. If this affects your files,
    you can run `git-annex migrate` on the affected files, to
    convert them to use a hash.
  * Added annex.security.allow-unverified-downloads, which can
    override the above.
  * Added annex.security.allowed-url-schemes setting, which
    defaults to only allowing http, https, and ftp URLs. Note
    especially that file:/ is no longer enabled by default.
  * Removed annex.web-download-command, since its interface does
    not allow supporting annex.security.allowed-url-schemes across
    redirects. If you used this setting, you may want to instead
    use annex.web-options to pass options to curl.
  * git-annex will refuse to download content from http servers on
    localhost, or any private IP addresses, to prevent accidental
    exposure of internal data. This can be overridden with the
    annex.security.allowed-http-addresses setting.
  * Local http proxies will not be used unless allowed by the
    annex.security.allowed-http-addresses setting.
  * Since the interfaces to curl and youtube-dl do not have a way
    to prevent them from accessing localhost or private IP
    addresses, they default to not being used for url downloads.
    Only when annex.security.allowed-http-addresses=all will curl
    and youtube-dl be used.
  Additionally, this update brings many bug fixes and new features.
  http://hackage.haskell.org/package/git-annex-6.20180626/changelog
  has a detailed list of changes.</changelog>
</package>
<package pkgid="c71268216aa153e6c869477718712e7164d5e9bb85a47a597b96ad38a798a5d8" name="git-annex-bash-completion" arch="x86_64">
  <version epoch="0" ver="6.20180626" rel="lp150.2.5.1"/>
  <changelog author="psimons@suse.com" date="1477828800">- Update to version 6.20161027 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1478001600">- Update to version 6.20161031 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1479124800">- Update to version 6.20161111 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1479643200">- Update to version 6.20161118 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1481889600">- Update to version 6.20161210 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1483531200">- Update to version 6.20170101 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1487592000">- Update to version 6.20170214 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1488456000">- Update to version 6.20170301.1 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1490184000">- Update to version 6.20170321 with cabal2obs.
  * Bugfix: Passing a command a filename that does not exist sometimes did not display an error, when a path to a directory was also passed.
  * status: Propigate nonzero exit code from git status.
  * Linux standalone builds put the bundled ssh last in PATH, so any system ssh will be preferred over it.
  * assistant: Add 1/200th second delay between checking each file in the full transfer scan, to avoid using too much CPU.
  * get -J: Improve distribution of jobs amoung remotes when there are more jobs than remotes.
  * fsck -q: When a file has bad content, include the name of the file in the warning message.
  * Windows: Improve handling of shebang in external special remote program, searching for the program in the PATH.
  * Drop support for building with old versions of dns, http-conduit, directory, feed, and http-types.
  * Windows: Fix bug in shell script shebang lookup code that caused a "delayed read on closed handle" error.
  * git-annex-shell: Fix bug when used with a recently cloned repository, where "merging" messages were included in the output of configlist (and perhaps other commands) and caused a "Failed to get annex.uuid configuration" error.
  * Support GIT_SSH and GIT_SSH_COMMAND, which are handled close the same as they are by git. However, unlike git, git-annex sometimes needs to pass the -n parameter when using these.
  * sync --content-of=path (-C path) added for when you want to sync only some files' contents, not the whole working tree.</changelog>
  <changelog author="psimons@suse.com" date="1494936000">- Update to version 6.20170510 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1495454400">- Update to version 6.20170519 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1497873600">- Update to version 6.20170520.</changelog>
  <changelog author="psimons@suse.com" date="1501761600">- Updated with latest spec-cleaner version 0.9.8-8-geadfbbf.</changelog>
  <changelog author="psimons@suse.com" date="1503316800">- Update to version 6.20170818 (bsc#1054653, CVE-2017-12976).
  * Security fix: Disallow hostname starting with a dash, which
    would get passed to ssh and be treated an option. This could
    be used by an attacker who provides a crafted repository url
    to cause the victim to execute arbitrary code via -oProxyCommand.
    (The same class of security hole recently affected git itself.)
  * git-annex.cabal: Deal with breaking changes in Cabal 2.0.
  * Fix build with QuickCheck 2.10.
  * fsck: Support --json.
  * move, copy: Support --batch.
  * Added GIT_ANNEX_VECTOR_CLOCK environment variable, which can be used to
    override the default timestamps used in log files in the git-annex
    branch. This is a dangerous environment variable; use with caution.
  * Fix a git-annex test failure when run on NFS due to NFS lock files
    preventing directory removal.
  * test: Avoid most situations involving failure to delete test
    directories, by forking a worker process and only deleting the test
    directory once it exits.
  * Disable http-client's default 30 second response timeout when HEADing
    an url to check if it exists. Some web servers take quite a long time
    to answer a HEAD request.
  * Added remote configuration settings annex-ignore-command and
    annex-sync-command, which are dynamic equivilants of the annex-ignore
    and annex-sync configurations.
  * Prevent spaces from being embedded in the name of new WORM keys,
    as that handing spaces in keys would complicate things like the
    external special remote protocol.
  * migrate: WORM keys containing spaces will be migrated to not contain
    spaces anymore.
  * External special remotes will refuse to operate on keys with spaces in
    their names. That has never worked correctly due to the design of the
    external special remote protocol. Display an error message suggesting
    migration.
  * Fix incorrect external special remote documentation, which said that
    the filename parameter to the TRANSFER command could not contain
    spaces. It can in fact contain spaces. Special remotes implementors
    that relied on that may need to fix bugs in their special remotes.
  * Fix the external special remotes git-annex-remote-ipfs,
    git-annex-remote-torrent and the example.sh template to correctly
    support filenames with spaces.
  * Windows: Win32 package has subsumed Win32-extras; update dependency.</changelog>
  <changelog author="psimons@suse.com" date="1505736000">- The upstream release tarball changed in some trivial way. Copy
  the new tarball into place to keep our version in sync.</changelog>
  <changelog author="psimons@suse.com" date="1506427200">- Update to version 6.20170925.
  * git-annex export: New command, can create and efficiently update
    exports of trees to special remotes.
  * Use git-annex initremote with exporttree=yes to set up a special remote
    for use by git-annex export.
  * Implemented export to directory, S3, and webdav special remotes.
  * External special remote protocol extended to support export.
    Developers of external special remotes should consider if export makes
    sense for them and add support.
  * sync, assistant: Update tracking exports.
  * Support building with feed-1.0, while still supporting older versions.
  * init: Display an additional message when it detects a filesystem that
    allows writing to files whose write bit is not set.
  * S3: Allow removing files from IA.
  * webdav: Checking if a non-existent file is present on Box.com
    triggered a bug in its webdav support that generates an infinite series
    of redirects. Deal with such problems by assuming such behavior means
    the file is not present.
  * webdav: Fix lack of url-escaping of filenames. Mostly impacted exports
    of filenames containing eg spaces.
  * webdav: Changed path used on webdav server for temporary files.</changelog>
  <changelog author="psimons@suse.com" date="1507118400">- Update to version 6.20171003.
  * webdav: Improve error message for failed request to include the request
    method and path.
  * metadata: Added --remove-all.
  * Warn when metadata is inherited from a previous version of a file,
    to avoid the user being surprised in cases where that behavior is not
    desired or expected.
  * sync: Added --cleanup, which removes local and remote synced/ branches.
  * external: When the external special remote program crashed, a newline
    could be output, which messed up the expected output for --batch mode.
  * external: Avoid checking EXPORTSUPPORTED for special remotes that are
    not configured to use exports.
  * test: Fix reversion that made it only run inside a git repository.
  * copy, move: Behave same with --fast when sending to remotes located
    on a local disk as when sending to other remotes.
  * Fix process and file descriptor leak that was exposed when
    git-annex was built with ghc 8.2.1. Broke git-annex test on OSX
    due to running out of FDs, and may have also leaked in other situations.
  * info: Improve cleanup of stale transfer info files.</changelog>
  <changelog author="psimons@suse.com" date="1508414400">- Update to version 6.20171018.
  * add: Replace work tree file atomically on systems supporting hard
    links. Avoids a window where interrupting an add could result in
    the file being moved into the annex, with no symlink yet created.
  * webdav: Avoid unncessisarily creating the collection at the top
    of the repository when storing files there, since that collection
    is created by initremote.
    (This seems to work around some brokenness of the box.com webdav
    server, which caused uploads to be very slow or sometimes fail.)
  * webdav: Make --debug show all webdav operations.
  * get -J/move -J/copy -J/mirror -J/sync -J: Avoid "transfer already in
    progress" errors when two files use the same key.
  * Konqueror desktop file location changed to one used by plasma 5.
    Thanks, Félix Sipma.
  * Avoid repeated checking that files passed on the command line exist.
  * Fix build with aws-0.17.
  * stack.yaml: Update to lts-9.9.</changelog>
  <changelog author="psimons@suse.com" date="1509105600">- Update to version 6.20171026.
  * Windows: Fix reversion that caused the path used to link
    to annexed content to include the drive letter and full path, rather
    than being relative. (`git annex fix` will fix up after this problem).
  * Windows build fixed, and changed to use stack for more reliable build
    environment.
  * Windows: Remove wget from bundle; it needs libraries that are not
    included, and git for windows includes curl which git-annex will use
    instead.
  * Add day to metadata when annex.genmetadata is enabled.
    Thanks, Sean T Parsons
  * stack.yaml: Added nix packages section.
    Thanks, Sean T Parsons</changelog>
  <changelog author="psimons@suse.com" date="1530100800">- Update to version 6.20180626 to fix two security issues that
  remote attackers could exploit to get unauthorized access to
  local files and even decrypt them with the user's private GPG
  key. [bsc#1098062, CVE-2018-10857, bsc#1098364, CVE-2018-10859]
  Important changes are:
  * Refuse to download content, that cannot be verified with a
    hash, from encrypted special remotes (for CVE-2018-10859), and
    from all external special remotes and glacier (for
    CVE-2018-10857). In particular, URL and WORM keys stored on
    such remotes won't be downloaded. If this affects your files,
    you can run `git-annex migrate` on the affected files, to
    convert them to use a hash.
  * Added annex.security.allow-unverified-downloads, which can
    override the above.
  * Added annex.security.allowed-url-schemes setting, which
    defaults to only allowing http, https, and ftp URLs. Note
    especially that file:/ is no longer enabled by default.
  * Removed annex.web-download-command, since its interface does
    not allow supporting annex.security.allowed-url-schemes across
    redirects. If you used this setting, you may want to instead
    use annex.web-options to pass options to curl.
  * git-annex will refuse to download content from http servers on
    localhost, or any private IP addresses, to prevent accidental
    exposure of internal data. This can be overridden with the
    annex.security.allowed-http-addresses setting.
  * Local http proxies will not be used unless allowed by the
    annex.security.allowed-http-addresses setting.
  * Since the interfaces to curl and youtube-dl do not have a way
    to prevent them from accessing localhost or private IP
    addresses, they default to not being used for url downloads.
    Only when annex.security.allowed-http-addresses=all will curl
    and youtube-dl be used.
  Additionally, this update brings many bug fixes and new features.
  http://hackage.haskell.org/package/git-annex-6.20180626/changelog
  has a detailed list of changes.</changelog>
</package>
<package pkgid="8aec6a9273a5272aaa84fab05b619eb0ec97be46d76017a27a86e65ffb39b30a" name="git-arch" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="8c7f26c2c958a9ebee1a44cfc08024a8207926e6a16656294586757429fee61c" name="git-arch" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="2cd01ca941eab10904af2eb554b036165ae91c0af91e6ee31b35fad5ba62f48d" name="git-core" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="fe0d12b2d735a1830a491fb58cf2f996cf086bad5a5408f09fdbdf5b908833c4" name="git-core" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="78e770e7c338d7c7e566cbbf6936eefbcb60bc7d13852b36b3208d3ce24e08d0" name="git-credential-gnome-keyring" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="52ba6b14f64bb9785a17b7d52e5096ffb8a9585af10cba6f23315b5eed1acb3b" name="git-credential-gnome-keyring" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="21d15858fa3393423826ee53d32cb96fc947d35066e12ea1145c8220f4315efd" name="git-credential-libsecret" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="72356ffe67fc0843ed57e2cab612619c9f799749454b6fe82d79547962587290" name="git-credential-libsecret" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="773469aaa6e4764fd235c5c887c70857bbe2ac4ae6139fe1d78abe845a123f1b" name="git-cvs" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="7e7a63b0491c673da808e50014f5d85525ccca60130b8791df4d6e484db6e732" name="git-cvs" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="7c9516ce79e21f74a6e9911af520f859ebeb893a81bbf50f5ccc11cc24cbbea8" name="git-daemon" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="ec92d8d36f74812cf92b787ed9329954a6b025eadceeb85312234faeb4294a43" name="git-daemon" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="e035044191d44e1980c82ac262bc191d460ef3567c99603070e4a0489471de63" name="git-doc" arch="noarch">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="9fbe964205f9362dd55789f24da1e67ecb3faff98182c6bb4ecb7a88f63bdbeb" name="git-doc" arch="noarch">
  <version epoch="0" ver="2.16.4" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="4a4b9810db74121f3ce09a3be4f68a10164cda44867e8e8ae9fe92e96401ea25" name="git-email" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="aea2f2dc2e6178d065f95d6f7757d558afc7f4b3dca0137d87e0ef6fdaa099aa" name="git-email" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="5d8c273083c23b5cc9be57d103327d2ef43fa861479bfb21ee242c39cce32745" name="git-gui" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="25db21d7f3691480ba2d03bf6f820164a4b1d655be11564facff739b813598ef" name="git-gui" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="c8b973db839c5478a52fdd3b74f97b0bb782c1366b69d05a2b3d9632695719be" name="git-p4" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="6905e7e7e029132a5d984cc7ae4416d3b87053c89ad5846d3b17082f80e5e24d" name="git-p4" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="80af70a4d29fdc36a68ecf645f5db8d8aa7a30c9e68074baa8e4076de3ab8549" name="git-svn" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="373c7daeeb92ab6b7a91b242a84fef0d100ed734db5c71c0e2d8573a5b5afd54" name="git-svn" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="a2758d9d0b621db5506252e7ab747fcf1a6563faaf0047cdb5763622be0a2f86" name="git-web" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="1a727865118b98e8276f22aa8227e592346cc8b3229c16965456dd8915e2f8db" name="git-web" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="d94f6ba3907d30b72800956f7b41e9c2b0ac687caadb78fb20767dcb406ab419" name="gitk" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="7e76423366fc98aa99f03735f1cadc9cbccf68d0b3a28cb93fba55fe2daa4ff3" name="gitk" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="8c547ac4ea9ccb0a054e1b29d0ec9638401ce97df1fe3989ba6ce4f436e0c94b" name="gitolite" arch="noarch">
  <version epoch="0" ver="3.6.9" rel="lp150.2.3.1"/>
  <changelog author="asn@cynapses.org" date="1292500800">- Initial package version 1.5.7</changelog>
  <changelog author="chris@computersalat.de" date="1297684800">- update to version 1.5.9
  - Nokia MeeGo team contributed ldap scripts
  - large configs should now be twice as fast (except when gl-perms exists)
    due to my finding and eliminating a wasted parse_acl
  - major change: split the config file when in big-config mode
    (includes a data format change)
  - GL_ALL_READ_ALL to make things much, (MUCH!) faster for sites where all
    can read all repos (like Fedora)
  - rc file revamp -- was getting too big and unwieldy; now the documentation
    is in a new file instead of inline
  - allow gitolite to be used even when users have real IDs (thus $HOME is not
    valid to find the rc file); allow /etc/gitolite/gitolite.rc then
  - BIG one for adc writers -- full blown access checks (ref level) can be
    done from an ADC now (though it has to be in perl, not shell)!
  - allow full access checks from perl (shell can only do level 1 checks);
    useful in hooks or ADCs
- v1.5.8
  - Jeff from KDE contributed the watch ADC
  - allow disabling gitolite (write access only) to take backups
  - document how to move gitolite from one server to another
  - custom permissions categories (default being READERS and WRITERS) for
    setperms (thanks to Jeff from KDE for the idea/need)
- noarch pkg, not only for suse &gt; 1110
- reworked rpm-system patch
- add group/user git</changelog>
  <changelog author="chris@computersalat.de" date="1297771200">- improve co-operation with git-web
  o add gitweb patch
  o add permissions file to doc
  o add apache user to git group</changelog>
  <changelog author="dmueller@suse.de" date="1320926400">- change requires to git-daemon</changelog>
  <changelog author="chris@computersalat.de" date="1323864000">- update to 1.5.9.1
  * IMPORTANT SECURITY FIX; PLEASE UPGRADE IF YOU'RE USING
    SOMETHING OLDER THAN THIS ONE
  - supercool new 'git' adc; so cool it's disabled by default
  - '-prune' added to find commands; makes a big diff if REPO_BASE is
    NFS/CIFS mounted
  - first python ADC contributed -- 'perms' makes setperms etc easier
    to do
  - 'set-head' ADC added
  - v2.0rc1; major refactor</changelog>
  <changelog author="chris@computersalat.de" date="1344686400">- update to 2.3.1
  - fix bug where config statements would get ignored if you had a
    description set. The biggest problem was that this would affect
    mirroring.
  - for mor info please see the CHANGELOG file
- rebase patches
- fix License: GPL-2.0 -&gt; GPL-2.0+
- add skeldir
  * add .gitolite.rc to skeldir
- add README.SuSE</changelog>
  <changelog author="chris@computersalat.de" date="1350907200">- fix for bnc#784983
  * add subpkg skel
  - hold files needed for git user homedir (/etc/skelgit/....)
  * rework spec pre section</changelog>
  <changelog author="darin@darins.net" date="1412596800">- update to 3.6.1
- updated and renamed README.SUSE
- removed patches and unused files
- spec cleanup</changelog>
  <changelog author="rpm@fthiessen.de" date="1430049600">- Update to 3.6.3
  * allow limited use of 'git config' using the new 'config' command
  * accept openssh 6.8's new fingerprint output format
  * (finally!) allow limited symlinks within ~/repositories; see
    commit 8e36230 for details
  * perms command now lists available roles
  * minor backward compat breakage: 'perms -l repo' no longer works;
    see 'perms -h' for new usage
  * allow gitolite-shell to be used as $SHELL (experts only; no
    support, no docs; see commit 9cd1e37 for details)
  * help with 'git push --signed' using a post-receive hook to adopt
    push certs into 'refs/push-certs'; for details see
    contrib/hooks/repo-specific/save-push-signatures
  * new 'transparent proxy' feature for git repos; see
    src/lib/Gitolite/Triggers/TProxy.pm for details</changelog>
  <changelog author="tampakrap@opensuse.org" date="1431864000">- Change URL to gitolite.com
- Use full URL path for the source tarball
- Add Git as runtime dependency, it's heavily needed</changelog>
  <changelog author="rpm@fthiessen.de" date="1469793600">- Update to 3.6.5
  * allow creator check to be bypassed during mirroring
  * handle new style ssh fingerprinting correctly
    (thanks to Robin Johnson)
  * allow pre-auto-gc as a repo-specific hook
  * optimise mirror pushes for heavily used repos
  * create-with-reference trigger: on repo creation, setup
    objects/info/alternates for a server side alternate object store.
  * 'mirror status all all' prints a list of repos that have *some*
    error, which is arguably more useful for further action/processing
  * allow incrementally adding more repo-specific hooks
- 2015-11-01  v3.6.4
  * a ref-create bug in wild repos was fixed
  * some contrib code related to AD integration, and to redmine user
    aliases
  * teach Alias.pm a few new tricks
  * remove a race condition in 'create' command that affected the
    'default roles' setting
  * make 'who-pushed' more efficient (local push logs, and
    'tip search')
  * 'gitolite query-rc' learns '-d' ('--dump') option</changelog>
  <changelog author="chris@computersalat.de" date="1470657600">- fix changes file
  * add missing ChangeLog info</changelog>
  <changelog author="tampakrap@opensuse.org" date="1473336000">- change the homedir of the git user to /srv/gitolite, to prevent ownership
  conflicts of the /srv/git directory with the git-daemon package</changelog>
  <changelog author="jengelh@inai.de" date="1483358400">- Do not suppress errors from useradd/groupadd
- Replace unknown "groupmod -A" call by "usermod -a -G".</changelog>
  <changelog author="bwiedemann@suse.com" date="1484654400">- dont include rebuild counter in rpm to make build-compare happy</changelog>
  <changelog author="kukuk@suse.de" date="1490011200">- Require system user wwwrun</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1528113600">- Update to 3.6.7
  * allow repo-specific hooks to be organised into
    subdirectories, and allow the multi-hook driver to be
    placed in some other location of your choice
  * allow simple test code to be embedded within the
    gitolite.conf file; see contrib/utils/testconf for how.
    (This goes on the client side, not on the server)
  * allow syslog "facility" to be changed, from the default of
    'local0'
  * allow syslog "facility" to be changed, from the default of
    replaced with a space separated list of members
- 2016-09-08  v3.6.6
  * simple but important fix for a future perl deprecation
    (perl will be removing "." from @INC in 5.24)
  * 'perms' now requires a '-c' to activate batch mode
    (should not affect interactive use but check your scripts
    perhaps?)
  * gitolite setup now accepts a '-m' option to supply a
    custom message (useful when it is used by a script)</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1536840000">- Update to 3.6.9:
  * CVE-2018-16976: prevent racy access to repos in process of migration to
    gitolite (bsc#1108272)
  * 'info' learns new '-p' option to show only physical repos (as opposed to
    wild repos)
- Update to 3.6.8:
  * fix bug when deleting *all* hooks for a repo
  * allow trailing slashes in repo names
  * make pre-receive hook driver bail on non-zero exit of a pre-receive hook
  * allow templates in gitolite.conf (new feature)
  * various optimiations
- Applied spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Trim bias from descriptions.</changelog>
</package>
<package pkgid="88d1d33355160aa9af2931da8e8a73757cb46e5e21e10240e454943ded10bc8f" name="gitolite" arch="src">
  <version epoch="0" ver="3.6.9" rel="lp150.2.3.1"/>
  <changelog author="asn@cynapses.org" date="1292500800">- Initial package version 1.5.7</changelog>
  <changelog author="chris@computersalat.de" date="1297684800">- update to version 1.5.9
  - Nokia MeeGo team contributed ldap scripts
  - large configs should now be twice as fast (except when gl-perms exists)
    due to my finding and eliminating a wasted parse_acl
  - major change: split the config file when in big-config mode
    (includes a data format change)
  - GL_ALL_READ_ALL to make things much, (MUCH!) faster for sites where all
    can read all repos (like Fedora)
  - rc file revamp -- was getting too big and unwieldy; now the documentation
    is in a new file instead of inline
  - allow gitolite to be used even when users have real IDs (thus $HOME is not
    valid to find the rc file); allow /etc/gitolite/gitolite.rc then
  - BIG one for adc writers -- full blown access checks (ref level) can be
    done from an ADC now (though it has to be in perl, not shell)!
  - allow full access checks from perl (shell can only do level 1 checks);
    useful in hooks or ADCs
- v1.5.8
  - Jeff from KDE contributed the watch ADC
  - allow disabling gitolite (write access only) to take backups
  - document how to move gitolite from one server to another
  - custom permissions categories (default being READERS and WRITERS) for
    setperms (thanks to Jeff from KDE for the idea/need)
- noarch pkg, not only for suse &gt; 1110
- reworked rpm-system patch
- add group/user git</changelog>
  <changelog author="chris@computersalat.de" date="1297771200">- improve co-operation with git-web
  o add gitweb patch
  o add permissions file to doc
  o add apache user to git group</changelog>
  <changelog author="dmueller@suse.de" date="1320926400">- change requires to git-daemon</changelog>
  <changelog author="chris@computersalat.de" date="1323864000">- update to 1.5.9.1
  * IMPORTANT SECURITY FIX; PLEASE UPGRADE IF YOU'RE USING
    SOMETHING OLDER THAN THIS ONE
  - supercool new 'git' adc; so cool it's disabled by default
  - '-prune' added to find commands; makes a big diff if REPO_BASE is
    NFS/CIFS mounted
  - first python ADC contributed -- 'perms' makes setperms etc easier
    to do
  - 'set-head' ADC added
  - v2.0rc1; major refactor</changelog>
  <changelog author="chris@computersalat.de" date="1344686400">- update to 2.3.1
  - fix bug where config statements would get ignored if you had a
    description set. The biggest problem was that this would affect
    mirroring.
  - for mor info please see the CHANGELOG file
- rebase patches
- fix License: GPL-2.0 -&gt; GPL-2.0+
- add skeldir
  * add .gitolite.rc to skeldir
- add README.SuSE</changelog>
  <changelog author="chris@computersalat.de" date="1350907200">- fix for bnc#784983
  * add subpkg skel
  - hold files needed for git user homedir (/etc/skelgit/....)
  * rework spec pre section</changelog>
  <changelog author="darin@darins.net" date="1412596800">- update to 3.6.1
- updated and renamed README.SUSE
- removed patches and unused files
- spec cleanup</changelog>
  <changelog author="rpm@fthiessen.de" date="1430049600">- Update to 3.6.3
  * allow limited use of 'git config' using the new 'config' command
  * accept openssh 6.8's new fingerprint output format
  * (finally!) allow limited symlinks within ~/repositories; see
    commit 8e36230 for details
  * perms command now lists available roles
  * minor backward compat breakage: 'perms -l repo' no longer works;
    see 'perms -h' for new usage
  * allow gitolite-shell to be used as $SHELL (experts only; no
    support, no docs; see commit 9cd1e37 for details)
  * help with 'git push --signed' using a post-receive hook to adopt
    push certs into 'refs/push-certs'; for details see
    contrib/hooks/repo-specific/save-push-signatures
  * new 'transparent proxy' feature for git repos; see
    src/lib/Gitolite/Triggers/TProxy.pm for details</changelog>
  <changelog author="tampakrap@opensuse.org" date="1431864000">- Change URL to gitolite.com
- Use full URL path for the source tarball
- Add Git as runtime dependency, it's heavily needed</changelog>
  <changelog author="rpm@fthiessen.de" date="1469793600">- Update to 3.6.5
  * allow creator check to be bypassed during mirroring
  * handle new style ssh fingerprinting correctly
    (thanks to Robin Johnson)
  * allow pre-auto-gc as a repo-specific hook
  * optimise mirror pushes for heavily used repos
  * create-with-reference trigger: on repo creation, setup
    objects/info/alternates for a server side alternate object store.
  * 'mirror status all all' prints a list of repos that have *some*
    error, which is arguably more useful for further action/processing
  * allow incrementally adding more repo-specific hooks
- 2015-11-01  v3.6.4
  * a ref-create bug in wild repos was fixed
  * some contrib code related to AD integration, and to redmine user
    aliases
  * teach Alias.pm a few new tricks
  * remove a race condition in 'create' command that affected the
    'default roles' setting
  * make 'who-pushed' more efficient (local push logs, and
    'tip search')
  * 'gitolite query-rc' learns '-d' ('--dump') option</changelog>
  <changelog author="chris@computersalat.de" date="1470657600">- fix changes file
  * add missing ChangeLog info</changelog>
  <changelog author="tampakrap@opensuse.org" date="1473336000">- change the homedir of the git user to /srv/gitolite, to prevent ownership
  conflicts of the /srv/git directory with the git-daemon package</changelog>
  <changelog author="jengelh@inai.de" date="1483358400">- Do not suppress errors from useradd/groupadd
- Replace unknown "groupmod -A" call by "usermod -a -G".</changelog>
  <changelog author="bwiedemann@suse.com" date="1484654400">- dont include rebuild counter in rpm to make build-compare happy</changelog>
  <changelog author="kukuk@suse.de" date="1490011200">- Require system user wwwrun</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1528113600">- Update to 3.6.7
  * allow repo-specific hooks to be organised into
    subdirectories, and allow the multi-hook driver to be
    placed in some other location of your choice
  * allow simple test code to be embedded within the
    gitolite.conf file; see contrib/utils/testconf for how.
    (This goes on the client side, not on the server)
  * allow syslog "facility" to be changed, from the default of
    'local0'
  * allow syslog "facility" to be changed, from the default of
    replaced with a space separated list of members
- 2016-09-08  v3.6.6
  * simple but important fix for a future perl deprecation
    (perl will be removing "." from @INC in 5.24)
  * 'perms' now requires a '-c' to activate batch mode
    (should not affect interactive use but check your scripts
    perhaps?)
  * gitolite setup now accepts a '-m' option to supply a
    custom message (useful when it is used by a script)</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1536840000">- Update to 3.6.9:
  * CVE-2018-16976: prevent racy access to repos in process of migration to
    gitolite (bsc#1108272)
  * 'info' learns new '-p' option to show only physical repos (as opposed to
    wild repos)
- Update to 3.6.8:
  * fix bug when deleting *all* hooks for a repo
  * allow trailing slashes in repo names
  * make pre-receive hook driver bail on non-zero exit of a pre-receive hook
  * allow templates in gitolite.conf (new feature)
  * various optimiations
- Applied spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Trim bias from descriptions.</changelog>
</package>
<package pkgid="aba4a6cf276b721734fd8aa7612c1914c8dc48102de4fb8bf7443656e072235b" name="glib2" arch="src">
  <version epoch="0" ver="2.54.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 2.53.2:
  + A few new number parsing functions have been added. These have
    better error handling than the existing ones.
  + glib-mkenums now supports /*&lt; private &gt;*/ and /*&lt; public &gt;*/.
  + GSettings now consider XDG_DATA_HOME in addition to
    XDG_DATA_DIRS.
  + Bugs fixed: bgo#674885, bgo#698064, bgo#732000, bgo#734946,
    bgo#741335, bgo#748263, bgo#776876, bgo#777030, bgo#780300,
    bgo#780309, bgo#781755, bgo#781826, bgo#781830, bgo#781847,
    bgo#781867, bgo#782068, bgo#782075, bgo#782089, bgo#782162,
    bgo#782237, bgo#782311, bgo#782628.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651201">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
</package>
<package pkgid="a5f1d13c642fd2a503662ffb18626ab3d6be6469753d2009e1a512afb9f969e2" name="glib2-branding-openSUSE" arch="src">
  <version epoch="0" ver="42.1" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1442664000">- Drop org.gnome.settings-daemon.plugins.power/button-power
  override: this settings has been removed in GNOME 3.17.92.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Bump version to 42.1, to prepare for next version of openSUSE.</changelog>
  <changelog author="badshah400@gmail.com" date="1447156800">- The touchpad schemas migrated to org.gnome.desktop.peripherals
  from org.gnome.settings-daemon.peripherals, adapt tap-to-click
  setting accordingly (boo#954526).
- The "disable-while-typing" key no longer exists, remove it
  accordingly.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455364800">- Drop org.gnome.settings-daemon.plugins.media-keys/toggle-mute
  since we dropped the patch making this needed.</changelog>
  <changelog author="fcrozat@suse.com" date="1458043200">- Fix KeySym assigned for Help, XF86Help doesn't exist anymore.</changelog>
  <changelog author="fcrozat@suse.com" date="1466424000">- Add some settings from SLE12 SP2, not enabled when building on
  openSUSE (default zoom on nautilus).
- Update favorite applications default to use new names from
  upstream, prevent writing some defaults to dconf (partially fixes
  bsc#979947).</changelog>
  <changelog author="fcrozat@suse.com" date="1467201600">- Resync with glib2-branding-SLE and simplify specfile.
- Replaces Requires by Recommends on wallpaper-branding-openSUSE:
  gio-branding-openSUSE is required by glib2, which is causing
  openSUSE wallpaper as hard dependency on non-graphical install.
  (boo#993969).</changelog>
  <changelog author="fezhang@suse.com" date="1467374400">- Make gnome-settings-daemon housekeeping plugin ignore /boot/efi
  [bsc#919217].
  Summary from bsc#919217:
  "On a default UEFI installation, /boot/efi is created with a size
  of 156MB. It will cause gnome-settings-daemon to popup a warning,
  if logged as root (not 100% sure when logged as a regular user)
  that a partition has less than than 1GB of free space.
  /boot/efi should be added to default schema
  org.gnome.settings-daemon.plugin.housekeeping ignore-paths"</changelog>
  <changelog author="dimstar@opensuse.org" date="1468497600">- Do not attempt to build -openSUSE on SLE and -SLE on openSUSE:
  trick the .spec file to ExclusiveArch: %nil in this case.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473249600">- Once again disable GNOME Software update notifications (automatic
  download of patches; openSUSE relies on gnome-settings-daemon's
  internal update plugin for update notifications) (boo#997572).</changelog>
  <changelog author="dimstar@opensuse.org" date="1476878400">- Enable freedesktop sound theme by default (boo#1004919):
  + Set org.gnome.desktop.sound/theme-name to 'freedesktop' for
    openSUSE.
  + Recommend sound-theme-freedesktop by gio-branding-openSUSE.
- Introdue @@IF_LEAP@@ logic into the .gschema.override.in file:
  IF_LEAP is true if building for 'openSUSE' and sle_version is set
  in prjconf. Apply IF_LEAP to the GNOME Software update
  notifications.</changelog>
  <changelog author="yfjiang@suse.com" date="1500379200">- Update .gschema.override.in to set small icon size on Desktop and
  nautilus in Leap, which is consistent with SLE (bsc#1043604).</changelog>
  <changelog author="fcrozat@suse.com" date="1508500800">- Update SLE version to 15.
- Remove post/postun scripts, no longer needed with file triggers.
- Update favorites applications on SLE15, we switched to pidgin and
  gnome-photos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Update .gschema.override.in: evolution.desktop has been renamed
  to org.gnome.Evolution.desktop.</changelog>
  <changelog author="xwang@suse.com" date="1513166400">-  Update .gschema.override.in to show application menu on title
  bar in sle-classic session (bgo#746592 bsc#1070090).</changelog>
  <changelog author="dimstar@opensuse.org" date="1513339200">- Rename base package to glib2-branding and add SLE and openSUSE as
  multibuild flavors. There is no other difference to the previous
  glib2-branding-{openSUSE,SLE} packages.
- Drop pre_checkin.sh: no longer needed with multibuild.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513684800">- Use variable flavor instead of BUILD_FLAVOR: obs is only
  replacing the first occurence.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513771200">- Revert "Update .gschema.override.in: evolution.desktop has been
  renamed to org.gnome.Evolution.desktop.": This will only be valid
  with GNOME 3.28.</changelog>
  <changelog author="yfjiang@suse.com" date="1525348800">- Update .gschema.override.in: referring the implementation of
  bsc#1077332, fully enable gnome-software notification which is
  now used on both leap15 and sle15 to replace the legacy g-s-d
  notification method (boo#1090042).</changelog>
  <changelog author="qkzhu@suse.com" date="1530187200">- Recommend sound-theme-freedesktop by both openSUSE and SLE.
  (bsc#1097595)</changelog>
</package>
<package pkgid="92bff0eb45509e3934f53d52e595c73ff6d7a6cde64bf9148de33df999626a5f" name="glib2-devel" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 2.53.2:
  + A few new number parsing functions have been added. These have
    better error handling than the existing ones.
  + glib-mkenums now supports /*&lt; private &gt;*/ and /*&lt; public &gt;*/.
  + GSettings now consider XDG_DATA_HOME in addition to
    XDG_DATA_DIRS.
  + Bugs fixed: bgo#674885, bgo#698064, bgo#732000, bgo#734946,
    bgo#741335, bgo#748263, bgo#776876, bgo#777030, bgo#780300,
    bgo#780309, bgo#781755, bgo#781826, bgo#781830, bgo#781847,
    bgo#781867, bgo#782068, bgo#782075, bgo#782089, bgo#782162,
    bgo#782237, bgo#782311, bgo#782628.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651201">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
</package>
<package pkgid="71d520692f8abd80d24e034c342563dc0cb8c4c5516f9a2a5397fa391d35241e" name="glib2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 2.53.2:
  + A few new number parsing functions have been added. These have
    better error handling than the existing ones.
  + glib-mkenums now supports /*&lt; private &gt;*/ and /*&lt; public &gt;*/.
  + GSettings now consider XDG_DATA_HOME in addition to
    XDG_DATA_DIRS.
  + Bugs fixed: bgo#674885, bgo#698064, bgo#732000, bgo#734946,
    bgo#741335, bgo#748263, bgo#776876, bgo#777030, bgo#780300,
    bgo#780309, bgo#781755, bgo#781826, bgo#781830, bgo#781847,
    bgo#781867, bgo#782068, bgo#782075, bgo#782089, bgo#782162,
    bgo#782237, bgo#782311, bgo#782628.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651201">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
</package>
<package pkgid="2ea8bdd214915431da80e23cbeda6cb127a1e654c21f83efb3a6498314545afb" name="glib2-devel-static" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 2.53.2:
  + A few new number parsing functions have been added. These have
    better error handling than the existing ones.
  + glib-mkenums now supports /*&lt; private &gt;*/ and /*&lt; public &gt;*/.
  + GSettings now consider XDG_DATA_HOME in addition to
    XDG_DATA_DIRS.
  + Bugs fixed: bgo#674885, bgo#698064, bgo#732000, bgo#734946,
    bgo#741335, bgo#748263, bgo#776876, bgo#777030, bgo#780300,
    bgo#780309, bgo#781755, bgo#781826, bgo#781830, bgo#781847,
    bgo#781867, bgo#782068, bgo#782075, bgo#782089, bgo#782162,
    bgo#782237, bgo#782311, bgo#782628.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651201">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
</package>
<package pkgid="02bddf256f5c61d349e84e37448018a646f6a1b8068da8862939895b6769a979" name="glib2-lang" arch="noarch">
  <version epoch="0" ver="2.54.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 2.53.2:
  + A few new number parsing functions have been added. These have
    better error handling than the existing ones.
  + glib-mkenums now supports /*&lt; private &gt;*/ and /*&lt; public &gt;*/.
  + GSettings now consider XDG_DATA_HOME in addition to
    XDG_DATA_DIRS.
  + Bugs fixed: bgo#674885, bgo#698064, bgo#732000, bgo#734946,
    bgo#741335, bgo#748263, bgo#776876, bgo#777030, bgo#780300,
    bgo#780309, bgo#781755, bgo#781826, bgo#781830, bgo#781847,
    bgo#781867, bgo#782068, bgo#782075, bgo#782089, bgo#782162,
    bgo#782237, bgo#782311, bgo#782628.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651201">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
</package>
<package pkgid="1b372f89bfc9f0f9ed91c0f219aab7ec2130c8e7aff668e71e387aaca76fbe15" name="glib2-tools" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 2.53.2:
  + A few new number parsing functions have been added. These have
    better error handling than the existing ones.
  + glib-mkenums now supports /*&lt; private &gt;*/ and /*&lt; public &gt;*/.
  + GSettings now consider XDG_DATA_HOME in addition to
    XDG_DATA_DIRS.
  + Bugs fixed: bgo#674885, bgo#698064, bgo#732000, bgo#734946,
    bgo#741335, bgo#748263, bgo#776876, bgo#777030, bgo#780300,
    bgo#780309, bgo#781755, bgo#781826, bgo#781830, bgo#781847,
    bgo#781867, bgo#782068, bgo#782075, bgo#782089, bgo#782162,
    bgo#782237, bgo#782311, bgo#782628.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651201">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
</package>
<package pkgid="5f35ae0e9ef0c53527a5097a23e8881ac9f1b4eee6407a256ff8561fd66869b2" name="glib2-tools-32bit" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 2.53.2:
  + A few new number parsing functions have been added. These have
    better error handling than the existing ones.
  + glib-mkenums now supports /*&lt; private &gt;*/ and /*&lt; public &gt;*/.
  + GSettings now consider XDG_DATA_HOME in addition to
    XDG_DATA_DIRS.
  + Bugs fixed: bgo#674885, bgo#698064, bgo#732000, bgo#734946,
    bgo#741335, bgo#748263, bgo#776876, bgo#777030, bgo#780300,
    bgo#780309, bgo#781755, bgo#781826, bgo#781830, bgo#781847,
    bgo#781867, bgo#782068, bgo#782075, bgo#782089, bgo#782162,
    bgo#782237, bgo#782311, bgo#782628.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651201">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
</package>
<package pkgid="c1ecf5e901d98b16e440da233357ef5b934cc52d4fb853bf72ebbe8365d94a9a" name="glibc" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="3fff436f4d422d8e9f0263d92f6eba78ec694112f1721dfe982a4aa56f49186f" name="glibc" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="6307ebfce7d1b59fc32d7fa012029e34d5af77ef1f1928b0a66051dc8cf0e637" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="69f572c99d0ac7d1ec9378aca1a85062c159fe66e64f860d3c6ba153db29b338" name="glibc" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="6c40fd5c7c8ea408e86367726a8380ae02e21757c70b903103ed5a599b9ea0ea" name="glibc" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="ccbf978c4b98059500e16ab9c4d8b5cd1eec6b515e9b144b7eb32aff5d06ec07" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="44f6764fe8a8c130ea860bb35bd6ce041bfe97bb2aaa761c6ff0bdb55d02a163" name="glibc" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="bc405448a198581629c98c3adf528f4bcd6313f6eb6c70ae1c3e26b4de4cba48" name="glibc" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="84fe481c5040f50c7d863347b3e4798dcc8638d9a4117b984c4688560de9953c" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="f977838156d3e2c177682be54164e8e8239587158245fedef2a0e569756d681a" name="glibc-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="1ff179450234ff5109aa24cdaca5af64588ea868a669d79967cd2a4340631fb2" name="glibc-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="533627ce1bdb84fb06e40f5a81d4ff9f012ffce52e4696106cb8475774f395bc" name="glibc-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="a08927fbec02b2744763517605b781b285fb24ca0b36dc08c7ae433c3dd609d9" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="ae1f41affe63b1dda60edae1bde92e33c3bf6ec0f034873ad332c586ea81118e" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="6f8726baebeb78201a6585d4f1f12141112c0a87a3d19cd742bb88b46de8043a" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="ffebea957c212b38f1c163c5747900b31fd22b413e8ceb18a3f913f033753880" name="glibc-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="883b0f5e8187b39e28b6c7612a1ad508f55725fcfa7b4a31d663937fe50f6f97" name="glibc-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="7f309e88ea6fe75cca0ad130a75b3039b98849d87fed3744d9fd31fd5af65664" name="glibc-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="28dd048e1061051286abfaf1974d78c124df37a431f4b18329a4bf13f04a5d71" name="glibc-devel-static" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="8b7e055b974f98a391bfb5e44113ca8986cebbecb9b3ea35387c5d6dddb07e77" name="glibc-devel-static" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="6b709b79db7af8c4b6220b09a89be78415592b1b24471195f23ddd1a78b6219f" name="glibc-devel-static" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="f6a1d68aff15d6b782e019d7bbcb3303b7c8d646e9b452cd6c7ea90678646f82" name="glibc-devel-static-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="38f08bcab81f2f3e88d33c7e5142609a432668a6be239fab0a301da48246b41e" name="glibc-devel-static-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="b8df13f0db96da58ba8658b81e2dcbc9bd1131da42097f66c87a20d08f195b83" name="glibc-devel-static-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="b5de7c9bf332dbe85e02056b6a2b0a1219b875c821d75f6c1277eecc65d1afe1" name="glibc-extra" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="305ed8862882e9dbaef11c1482fb1324f5f6e651935bf053ad8d29f7f54c7b22" name="glibc-extra" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="1def485e27594ca018c37be742115606d7581b8f86d5e662e0ca0a498aedefda" name="glibc-extra" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="4089788aec0b3b25f6eb3f99216838bf45311be73b9c0e45ef9a44837e681069" name="glibc-html" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="a9a14b9df8f1fe57706b1cfce98ca60f08f91cdf945e81c8b370da43efbb2138" name="glibc-html" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="f88363106317f767ffeab841e7b87c3f7405b755b15ac76ebba04213706140f5" name="glibc-html" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="5cc666366ff4375e2a5cc6914627f583a7c2fca30d0a31be7f701e4294657b1f" name="glibc-i18ndata" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="31c5b4b4f8143120cf881e43c83ace446025a4b8c643759127d9ba32cf525cbe" name="glibc-i18ndata" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="11956668c51e1ab54cbf142551630dbde7318f4bc450fce9d1066a5145282216" name="glibc-i18ndata" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="87c98b11821356c2e8a798a5903739d1b6209aab53018fcd37254bbfcae66540" name="glibc-info" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="d854763d4a36b04b72d6865fe97e951c853ed3eafe18e48af99723b11583964d" name="glibc-info" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="04a8bf752d7fa9a835318c2e116e02d966deef1a89bd3e5cc28b41996eac1f4d" name="glibc-info" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="56295b5f964be4179bbad656aa4a4a62d5b0d471ff031b6f881ac836f5863ce1" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="52c34d3b2a2778e0fa44877046cd35664a13bb87f9a18f2821081545e46e15d5" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="596e07e2dd006ca0e2c05cbb87a6980b351e597a47e387f4b7dadc0c073fee26" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="2fd6a0b4afad58668c1c0359891657a2f407a589d0935dd3bcf616ab05bb283b" name="glibc-locale-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="992913522458fde333178b811bae771e8279fcdd174abff5fb591fbf7cd23300" name="glibc-locale-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="df82408b48e1afcf1320a7046a0cf6397a0d0e206c50e48556c9a64202cedc01" name="glibc-locale-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="cf26c293e6d34f3233c7e5ee64c12838f7d021c4e258413a98e12ed10919ecd1" name="glibc-profile" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="4bef71b9f0a6046b2ebd0b47f1258bf4164f8a389163d087bee2ed7ed4fb89a2" name="glibc-profile" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="ba03dfd008f0f86465a6ecc5e5a3c7656121f649633b742294840ebfca836d56" name="glibc-profile" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="497f8c4052db88503ebd32f1b59bdaf371ac11b27641798f400ff7a6f8941cbf" name="glibc-profile-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="e12bf537d24350a8d0fca6b2d195880ef28e77ddf88f4a386c4cffc5e1a83d50" name="glibc-profile-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="8b5e8554cf6caf62a3ab6caf203bc295f510c424210871f4df4c0ca24ba8a2a4" name="glibc-profile-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="7f620689203bb19b8da70a3e0c5aacff2345febce737cba9a5cc932f28a41af0" name="glibc-testsuite-src" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="e02a9a1eea427b3a380f6567bb68bb5d6d6ca3a907bdec40cb3b2d413566e006" name="glibc-testsuite-src" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="f5ea5f108406018296a564364fdb2e407b0dba3569d03b73df8d178d8e879528" name="glibc-testsuite-src" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="21902bf345f501ddc69c124324e8aecd1acd27c207d9e494260b47bd45603b4c" name="glibc-utils" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="8e423a2c73b65f9f41d14924f2c0a2c6bccab931fdbdc263ec20023e155eb078" name="glibc-utils" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="8e851037c9ab0a448436019c6bb0c41204fba08c98149bd738ed9b445ccbb7ac" name="glibc-utils" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="46372286903571c576150615f9fa1d4488ca62073f5fb37b6d194d48da446c61" name="glibc-utils-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="98e5607fd1368dac69f9941fbec9bcea7f2e35f61cf085325d7fa0e89f4bcdb5" name="glibc-utils-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="d204bb1f5ce6732c9446e9b8792269ee8e8e2f6abea85e807b438b4868ada67b" name="glibc-utils-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="252c6c2af736b950fdda40542b052a52a0267d167361093c867613e816a56502" name="glibc-utils-src" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="b33a924baa8ec85bc1c007724ca9c05013e0dcd8fa37aacd55efa62552649ddd" name="glibc-utils-src" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="1a4e311cb7a39edf77f0f641e9874d91c6412c9473c4a9a5ae58ed929f8f149e" name="glibc-utils-src" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="24746f8be7bae7adf2be888cdaf2620aa0ddac42539286b9c4851197048e5edb" name="gn" arch="src">
  <version epoch="0" ver="0.1463" rel="lp150.2.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
</package>
<package pkgid="a443177e72d9e1ff15f9840744009867fb3ca06f334c897372a1f8c8fcde1bb0" name="gn" arch="x86_64">
  <version epoch="0" ver="0.1463" rel="lp150.2.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
</package>
<package pkgid="130384abdd0e4c37ba4044caa4476952737d9e90097a3f39575691c30124dbf4" name="gnome-books" arch="x86_64">
  <version epoch="0" ver="3.26.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473681600">- Update to version 3.21.91:
  + Some refactoring.
  + Updated translations.
- Drop gnome-documents-Gepub-0.4.patch: Fixed upstream. Following
  this, drop gnome-common BuildRequires and autoreconf call, not
  needed as we do not carry any patches anymore.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488456000">- Update to version 3.23.91:
  + Port user interactions and keybindings to GAction.
  + Update theming for collection icons.
  + Rewrite fullscreen controller code.
  + Fix scrubbar preview positioning under Wayland.
  + Stop using GdNotification.
  + Add support for IANA-registered comicbook mime types.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490184000">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493035200">- Update to version 3.24.1:
  + Use LOKDocView for pre-OOXML MS Office formats.
  + Unbreak opening in external application.
  + Fix regression that prevented comics from being previewed.
  + Make sure that load jobs are cancelled.
  + Fix double menus in fullscreened evince view.
  + Support fullscreening the e-pub view.
  + Don't leak the URI when thumbnailing.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494504000">- Update to version 3.24.2:
  + Unbreak previews of LOKDocView-supported documents from
    OneDrive.
  + Unreak caching of LOKDocView-supported documents from ownCloud.
  + Support previews of encrypted PDFs from Google.
  + Pass the right number of arguments to LOKDocView.View.new.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638400">- Update to version 3.24.3:
  + Enable printing only for documents that support it.
  + Avoid CRITICALs if a primary instance is already present.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638401">- Update to version 3.25.1:
  + Distinguish multiple online sources from the same provider
  + Unbreak previews of LOKDocView-supported documents from
    OneDrive.
  + Unreak caching of LOKDocView-supported documents from ownCloud.
  + Support previews of encrypted PDFs from Google.
  + Pass the right number of arguments to LOKDocView.View.new.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500638402">- Update to version 3.25.3:
  + Show more info in epub preview, like number of chapters.
  + Restore the accelerators for going back.
  + Exit selection mode only after printing has begun.
  + Use GtkRevealers for faders instead of Tweener.
  + Enable printing only for documents that support it.
  + Avoid CRITICALs if a primary instance is already present.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638403">- Add gnome-documents-gepub-0_5.patch: Build using libgepub 0.5.
- Add gnome-common BuildRequires and call to autoreconf, as above
  patch touches the build system.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638404">- Update to version 3.25.4:
  + Use Tracker 2.0.
  + Updated translations.
- Replace pkgconfig(tracker-control-1.0) and
  pkgconfig(tracker-sparql-1.0) with pkgconfig(tracker-control-2.0)
  and pkgconfig(tracker-sparql-2.0) BuildRequires following
  upstreams changes.
- Rebase gnome-documents-gepub-0_5.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1501329600">- Add gnome-documents-use-tracker-2.0.patch: Use new tracker
  version (bgo#785301).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884800">- Update to version 3.25.90:
  + Use Gepub 0.5.
  + Use Tracker 2.0.
  + Use 'var' for classes that are exported.
  + Updated translations.
- Drop gnome-documents-gepub-0_5.patch and
  gnome-documents-use-tracker-2.0.patch: Fixed upstream.
- Following the above, drop gnome-common BuildRequires and
  autoreconf call, no longer needed as we do not carry any patches.
- Drop obsolete post(un) handling, following macros removed:
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un).
- Pass --enable-documentation to configure, ensure we are building
  documentation.
- Stop packaging AUTHORS NEWS and README, present in src rpm in any
  case. However package COPYING, seems we lost it somewhere along
  the way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 3.25.91:
  + Modernize the Autotools build and move away from Intltool.
  + Updated translations.
- Drop intltool BuildRequires: No longer needed.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505390400">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517572800">- Update to version 3.26.2:
  + Use 'var' for symbols that are exported.
  + Use the standard dialect of String.prototype.replace.
  + Explicitly specify the Gepub API version.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1517659200">- Update Url tag to https://wiki.gnome.org/Apps/Documents: current
  Documents' web page.
- Drop glib2_gsettings_schema_requires macro now that it is no
  longer needed since RPM File Triggers.
- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Add fdupes and its macro for replacement of duplicated files with
  links under the data directory.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="mgorse@suse.com" date="1534766400">- Update to version 3.26.3:
  + Vertically centre text in the list view
  + Translation update
- Add gnome-documents-bsc1063428-garbage-collection.patch: be nice
  to the garbage collector during shutdown (bsc#1063428
  bgo#747506).</changelog>
</package>
<package pkgid="08278e0e59b334f03d5d96511343e98bdf0642ccca180d8c0a298975b1af14ef" name="gnome-control-center" arch="src">
  <version epoch="0" ver="3.26.2" rel="lp150.5.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 3.25.91:
  + Several small UI improvements and layout adjustments.
  + Various crash fixes.
  + Updated translations.
- Disable gnome-control-center-disable-error-message-for-NM.patch
  again, needs rebase.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
</package>
<package pkgid="53ee7a8cfc2a0fce6d255ce6918153625b378ceafe26893feaaf831c344aaa09" name="gnome-control-center" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 3.25.91:
  + Several small UI improvements and layout adjustments.
  + Various crash fixes.
  + Updated translations.
- Disable gnome-control-center-disable-error-message-for-NM.patch
  again, needs rebase.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
</package>
<package pkgid="8c3795bbeb23a6f04ebab04356e87f1b896e8e7bfa0e6a78472bba396971bd3f" name="gnome-control-center" arch="src">
  <version epoch="0" ver="3.26.2" rel="lp150.5.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
</package>
<package pkgid="0a9babf62063cb4a69f339f0f4efc339aaed0d9c588a212ac9eb055fdc1c9e6b" name="gnome-control-center" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
</package>
<package pkgid="204c0e6b1a841595d26a146e5e91c8b922419b36e46a2c9284263762600af800" name="gnome-control-center-color" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 3.25.91:
  + Several small UI improvements and layout adjustments.
  + Various crash fixes.
  + Updated translations.
- Disable gnome-control-center-disable-error-message-for-NM.patch
  again, needs rebase.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
</package>
<package pkgid="328fe30ca9be48827fdd62a467a9fe84a3ffc6138f5d0987942d7c361fc07fbc" name="gnome-control-center-color" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
</package>
<package pkgid="6754302e89c83136f6b0fcaad010c86808ed8c91d82347a81ba45f9fed62c89d" name="gnome-control-center-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 3.25.91:
  + Several small UI improvements and layout adjustments.
  + Various crash fixes.
  + Updated translations.
- Disable gnome-control-center-disable-error-message-for-NM.patch
  again, needs rebase.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
</package>
<package pkgid="c563649935ce52106c5d1bc30e3994d93cc94c3a10a3c05c547533555328779d" name="gnome-control-center-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
</package>
<package pkgid="21f5a4eb1496317338065ce2165ab1d5949385ab88251b6398e7c3a97ad87c93" name="gnome-control-center-goa" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 3.25.91:
  + Several small UI improvements and layout adjustments.
  + Various crash fixes.
  + Updated translations.
- Disable gnome-control-center-disable-error-message-for-NM.patch
  again, needs rebase.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
</package>
<package pkgid="e903f0049e968f54086cd4041df9ba99a7b47ae7f72500c606e83af4e080414a" name="gnome-control-center-goa" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
</package>
<package pkgid="dc084021e3291eb606b680d863a7890d125edac056699b9a17d5cbd66dc9c2cd" name="gnome-control-center-lang" arch="noarch">
  <version epoch="0" ver="3.26.2" rel="lp150.5.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 3.25.91:
  + Several small UI improvements and layout adjustments.
  + Various crash fixes.
  + Updated translations.
- Disable gnome-control-center-disable-error-message-for-NM.patch
  again, needs rebase.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
</package>
<package pkgid="2d71f87de103a50bfe5cf1e6f0b0307774752031f5517f11f6f8799d33d523d2" name="gnome-control-center-lang" arch="noarch">
  <version epoch="0" ver="3.26.2" rel="lp150.5.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
</package>
<package pkgid="9eba7ff1618a5f4b863870322d9024ca18beede3456c120a13e05f8500ced561" name="gnome-control-center-user-faces" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 3.25.91:
  + Several small UI improvements and layout adjustments.
  + Various crash fixes.
  + Updated translations.
- Disable gnome-control-center-disable-error-message-for-NM.patch
  again, needs rebase.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
</package>
<package pkgid="5dbb7ce7ea4351464779f49798cc89a69a1be6546ff7b37c4bc315ffa330f70c" name="gnome-control-center-user-faces" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
</package>
<package pkgid="991dc55b53e1b79e34f62b7f010a4741610e6c14bfce2a1b50006dccd9e023fd" name="gnome-documents" arch="src">
  <version epoch="0" ver="3.26.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473681600">- Update to version 3.21.91:
  + Some refactoring.
  + Updated translations.
- Drop gnome-documents-Gepub-0.4.patch: Fixed upstream. Following
  this, drop gnome-common BuildRequires and autoreconf call, not
  needed as we do not carry any patches anymore.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488456000">- Update to version 3.23.91:
  + Port user interactions and keybindings to GAction.
  + Update theming for collection icons.
  + Rewrite fullscreen controller code.
  + Fix scrubbar preview positioning under Wayland.
  + Stop using GdNotification.
  + Add support for IANA-registered comicbook mime types.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490184000">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493035200">- Update to version 3.24.1:
  + Use LOKDocView for pre-OOXML MS Office formats.
  + Unbreak opening in external application.
  + Fix regression that prevented comics from being previewed.
  + Make sure that load jobs are cancelled.
  + Fix double menus in fullscreened evince view.
  + Support fullscreening the e-pub view.
  + Don't leak the URI when thumbnailing.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494504000">- Update to version 3.24.2:
  + Unbreak previews of LOKDocView-supported documents from
    OneDrive.
  + Unreak caching of LOKDocView-supported documents from ownCloud.
  + Support previews of encrypted PDFs from Google.
  + Pass the right number of arguments to LOKDocView.View.new.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638400">- Update to version 3.24.3:
  + Enable printing only for documents that support it.
  + Avoid CRITICALs if a primary instance is already present.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638401">- Update to version 3.25.1:
  + Distinguish multiple online sources from the same provider
  + Unbreak previews of LOKDocView-supported documents from
    OneDrive.
  + Unreak caching of LOKDocView-supported documents from ownCloud.
  + Support previews of encrypted PDFs from Google.
  + Pass the right number of arguments to LOKDocView.View.new.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500638402">- Update to version 3.25.3:
  + Show more info in epub preview, like number of chapters.
  + Restore the accelerators for going back.
  + Exit selection mode only after printing has begun.
  + Use GtkRevealers for faders instead of Tweener.
  + Enable printing only for documents that support it.
  + Avoid CRITICALs if a primary instance is already present.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638403">- Add gnome-documents-gepub-0_5.patch: Build using libgepub 0.5.
- Add gnome-common BuildRequires and call to autoreconf, as above
  patch touches the build system.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638404">- Update to version 3.25.4:
  + Use Tracker 2.0.
  + Updated translations.
- Replace pkgconfig(tracker-control-1.0) and
  pkgconfig(tracker-sparql-1.0) with pkgconfig(tracker-control-2.0)
  and pkgconfig(tracker-sparql-2.0) BuildRequires following
  upstreams changes.
- Rebase gnome-documents-gepub-0_5.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1501329600">- Add gnome-documents-use-tracker-2.0.patch: Use new tracker
  version (bgo#785301).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884800">- Update to version 3.25.90:
  + Use Gepub 0.5.
  + Use Tracker 2.0.
  + Use 'var' for classes that are exported.
  + Updated translations.
- Drop gnome-documents-gepub-0_5.patch and
  gnome-documents-use-tracker-2.0.patch: Fixed upstream.
- Following the above, drop gnome-common BuildRequires and
  autoreconf call, no longer needed as we do not carry any patches.
- Drop obsolete post(un) handling, following macros removed:
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un).
- Pass --enable-documentation to configure, ensure we are building
  documentation.
- Stop packaging AUTHORS NEWS and README, present in src rpm in any
  case. However package COPYING, seems we lost it somewhere along
  the way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 3.25.91:
  + Modernize the Autotools build and move away from Intltool.
  + Updated translations.
- Drop intltool BuildRequires: No longer needed.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505390400">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517572800">- Update to version 3.26.2:
  + Use 'var' for symbols that are exported.
  + Use the standard dialect of String.prototype.replace.
  + Explicitly specify the Gepub API version.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1517659200">- Update Url tag to https://wiki.gnome.org/Apps/Documents: current
  Documents' web page.
- Drop glib2_gsettings_schema_requires macro now that it is no
  longer needed since RPM File Triggers.
- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Add fdupes and its macro for replacement of duplicated files with
  links under the data directory.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="mgorse@suse.com" date="1534766400">- Update to version 3.26.3:
  + Vertically centre text in the list view
  + Translation update
- Add gnome-documents-bsc1063428-garbage-collection.patch: be nice
  to the garbage collector during shutdown (bsc#1063428
  bgo#747506).</changelog>
</package>
<package pkgid="b2e43ba7739dcb82ae85e8526febf1a00501db9c2f9ba2b9dc11553e0273a69c" name="gnome-documents" arch="x86_64">
  <version epoch="0" ver="3.26.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473681600">- Update to version 3.21.91:
  + Some refactoring.
  + Updated translations.
- Drop gnome-documents-Gepub-0.4.patch: Fixed upstream. Following
  this, drop gnome-common BuildRequires and autoreconf call, not
  needed as we do not carry any patches anymore.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488456000">- Update to version 3.23.91:
  + Port user interactions and keybindings to GAction.
  + Update theming for collection icons.
  + Rewrite fullscreen controller code.
  + Fix scrubbar preview positioning under Wayland.
  + Stop using GdNotification.
  + Add support for IANA-registered comicbook mime types.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490184000">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493035200">- Update to version 3.24.1:
  + Use LOKDocView for pre-OOXML MS Office formats.
  + Unbreak opening in external application.
  + Fix regression that prevented comics from being previewed.
  + Make sure that load jobs are cancelled.
  + Fix double menus in fullscreened evince view.
  + Support fullscreening the e-pub view.
  + Don't leak the URI when thumbnailing.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494504000">- Update to version 3.24.2:
  + Unbreak previews of LOKDocView-supported documents from
    OneDrive.
  + Unreak caching of LOKDocView-supported documents from ownCloud.
  + Support previews of encrypted PDFs from Google.
  + Pass the right number of arguments to LOKDocView.View.new.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638400">- Update to version 3.24.3:
  + Enable printing only for documents that support it.
  + Avoid CRITICALs if a primary instance is already present.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638401">- Update to version 3.25.1:
  + Distinguish multiple online sources from the same provider
  + Unbreak previews of LOKDocView-supported documents from
    OneDrive.
  + Unreak caching of LOKDocView-supported documents from ownCloud.
  + Support previews of encrypted PDFs from Google.
  + Pass the right number of arguments to LOKDocView.View.new.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500638402">- Update to version 3.25.3:
  + Show more info in epub preview, like number of chapters.
  + Restore the accelerators for going back.
  + Exit selection mode only after printing has begun.
  + Use GtkRevealers for faders instead of Tweener.
  + Enable printing only for documents that support it.
  + Avoid CRITICALs if a primary instance is already present.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638403">- Add gnome-documents-gepub-0_5.patch: Build using libgepub 0.5.
- Add gnome-common BuildRequires and call to autoreconf, as above
  patch touches the build system.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638404">- Update to version 3.25.4:
  + Use Tracker 2.0.
  + Updated translations.
- Replace pkgconfig(tracker-control-1.0) and
  pkgconfig(tracker-sparql-1.0) with pkgconfig(tracker-control-2.0)
  and pkgconfig(tracker-sparql-2.0) BuildRequires following
  upstreams changes.
- Rebase gnome-documents-gepub-0_5.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1501329600">- Add gnome-documents-use-tracker-2.0.patch: Use new tracker
  version (bgo#785301).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884800">- Update to version 3.25.90:
  + Use Gepub 0.5.
  + Use Tracker 2.0.
  + Use 'var' for classes that are exported.
  + Updated translations.
- Drop gnome-documents-gepub-0_5.patch and
  gnome-documents-use-tracker-2.0.patch: Fixed upstream.
- Following the above, drop gnome-common BuildRequires and
  autoreconf call, no longer needed as we do not carry any patches.
- Drop obsolete post(un) handling, following macros removed:
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un).
- Pass --enable-documentation to configure, ensure we are building
  documentation.
- Stop packaging AUTHORS NEWS and README, present in src rpm in any
  case. However package COPYING, seems we lost it somewhere along
  the way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 3.25.91:
  + Modernize the Autotools build and move away from Intltool.
  + Updated translations.
- Drop intltool BuildRequires: No longer needed.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505390400">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517572800">- Update to version 3.26.2:
  + Use 'var' for symbols that are exported.
  + Use the standard dialect of String.prototype.replace.
  + Explicitly specify the Gepub API version.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1517659200">- Update Url tag to https://wiki.gnome.org/Apps/Documents: current
  Documents' web page.
- Drop glib2_gsettings_schema_requires macro now that it is no
  longer needed since RPM File Triggers.
- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Add fdupes and its macro for replacement of duplicated files with
  links under the data directory.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="mgorse@suse.com" date="1534766400">- Update to version 3.26.3:
  + Vertically centre text in the list view
  + Translation update
- Add gnome-documents-bsc1063428-garbage-collection.patch: be nice
  to the garbage collector during shutdown (bsc#1063428
  bgo#747506).</changelog>
</package>
<package pkgid="76d62d0231e782681d6d6cb4b48aedb235f7009a6c3dc0c0254ee941e118b2af" name="gnome-documents-lang" arch="noarch">
  <version epoch="0" ver="3.26.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473681600">- Update to version 3.21.91:
  + Some refactoring.
  + Updated translations.
- Drop gnome-documents-Gepub-0.4.patch: Fixed upstream. Following
  this, drop gnome-common BuildRequires and autoreconf call, not
  needed as we do not carry any patches anymore.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488456000">- Update to version 3.23.91:
  + Port user interactions and keybindings to GAction.
  + Update theming for collection icons.
  + Rewrite fullscreen controller code.
  + Fix scrubbar preview positioning under Wayland.
  + Stop using GdNotification.
  + Add support for IANA-registered comicbook mime types.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490184000">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493035200">- Update to version 3.24.1:
  + Use LOKDocView for pre-OOXML MS Office formats.
  + Unbreak opening in external application.
  + Fix regression that prevented comics from being previewed.
  + Make sure that load jobs are cancelled.
  + Fix double menus in fullscreened evince view.
  + Support fullscreening the e-pub view.
  + Don't leak the URI when thumbnailing.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494504000">- Update to version 3.24.2:
  + Unbreak previews of LOKDocView-supported documents from
    OneDrive.
  + Unreak caching of LOKDocView-supported documents from ownCloud.
  + Support previews of encrypted PDFs from Google.
  + Pass the right number of arguments to LOKDocView.View.new.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638400">- Update to version 3.24.3:
  + Enable printing only for documents that support it.
  + Avoid CRITICALs if a primary instance is already present.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638401">- Update to version 3.25.1:
  + Distinguish multiple online sources from the same provider
  + Unbreak previews of LOKDocView-supported documents from
    OneDrive.
  + Unreak caching of LOKDocView-supported documents from ownCloud.
  + Support previews of encrypted PDFs from Google.
  + Pass the right number of arguments to LOKDocView.View.new.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500638402">- Update to version 3.25.3:
  + Show more info in epub preview, like number of chapters.
  + Restore the accelerators for going back.
  + Exit selection mode only after printing has begun.
  + Use GtkRevealers for faders instead of Tweener.
  + Enable printing only for documents that support it.
  + Avoid CRITICALs if a primary instance is already present.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638403">- Add gnome-documents-gepub-0_5.patch: Build using libgepub 0.5.
- Add gnome-common BuildRequires and call to autoreconf, as above
  patch touches the build system.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638404">- Update to version 3.25.4:
  + Use Tracker 2.0.
  + Updated translations.
- Replace pkgconfig(tracker-control-1.0) and
  pkgconfig(tracker-sparql-1.0) with pkgconfig(tracker-control-2.0)
  and pkgconfig(tracker-sparql-2.0) BuildRequires following
  upstreams changes.
- Rebase gnome-documents-gepub-0_5.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1501329600">- Add gnome-documents-use-tracker-2.0.patch: Use new tracker
  version (bgo#785301).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884800">- Update to version 3.25.90:
  + Use Gepub 0.5.
  + Use Tracker 2.0.
  + Use 'var' for classes that are exported.
  + Updated translations.
- Drop gnome-documents-gepub-0_5.patch and
  gnome-documents-use-tracker-2.0.patch: Fixed upstream.
- Following the above, drop gnome-common BuildRequires and
  autoreconf call, no longer needed as we do not carry any patches.
- Drop obsolete post(un) handling, following macros removed:
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un).
- Pass --enable-documentation to configure, ensure we are building
  documentation.
- Stop packaging AUTHORS NEWS and README, present in src rpm in any
  case. However package COPYING, seems we lost it somewhere along
  the way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 3.25.91:
  + Modernize the Autotools build and move away from Intltool.
  + Updated translations.
- Drop intltool BuildRequires: No longer needed.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505390400">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517572800">- Update to version 3.26.2:
  + Use 'var' for symbols that are exported.
  + Use the standard dialect of String.prototype.replace.
  + Explicitly specify the Gepub API version.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1517659200">- Update Url tag to https://wiki.gnome.org/Apps/Documents: current
  Documents' web page.
- Drop glib2_gsettings_schema_requires macro now that it is no
  longer needed since RPM File Triggers.
- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Add fdupes and its macro for replacement of duplicated files with
  links under the data directory.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="mgorse@suse.com" date="1534766400">- Update to version 3.26.3:
  + Vertically centre text in the list view
  + Translation update
- Add gnome-documents-bsc1063428-garbage-collection.patch: be nice
  to the garbage collector during shutdown (bsc#1063428
  bgo#747506).</changelog>
</package>
<package pkgid="09a71b7fda6a150a8413800d0a3520f93bc99d5110469256383209084e55a0de" name="gnome-documents_books-common" arch="x86_64">
  <version epoch="0" ver="3.26.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473681600">- Update to version 3.21.91:
  + Some refactoring.
  + Updated translations.
- Drop gnome-documents-Gepub-0.4.patch: Fixed upstream. Following
  this, drop gnome-common BuildRequires and autoreconf call, not
  needed as we do not carry any patches anymore.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488456000">- Update to version 3.23.91:
  + Port user interactions and keybindings to GAction.
  + Update theming for collection icons.
  + Rewrite fullscreen controller code.
  + Fix scrubbar preview positioning under Wayland.
  + Stop using GdNotification.
  + Add support for IANA-registered comicbook mime types.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490184000">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493035200">- Update to version 3.24.1:
  + Use LOKDocView for pre-OOXML MS Office formats.
  + Unbreak opening in external application.
  + Fix regression that prevented comics from being previewed.
  + Make sure that load jobs are cancelled.
  + Fix double menus in fullscreened evince view.
  + Support fullscreening the e-pub view.
  + Don't leak the URI when thumbnailing.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494504000">- Update to version 3.24.2:
  + Unbreak previews of LOKDocView-supported documents from
    OneDrive.
  + Unreak caching of LOKDocView-supported documents from ownCloud.
  + Support previews of encrypted PDFs from Google.
  + Pass the right number of arguments to LOKDocView.View.new.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638400">- Update to version 3.24.3:
  + Enable printing only for documents that support it.
  + Avoid CRITICALs if a primary instance is already present.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638401">- Update to version 3.25.1:
  + Distinguish multiple online sources from the same provider
  + Unbreak previews of LOKDocView-supported documents from
    OneDrive.
  + Unreak caching of LOKDocView-supported documents from ownCloud.
  + Support previews of encrypted PDFs from Google.
  + Pass the right number of arguments to LOKDocView.View.new.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500638402">- Update to version 3.25.3:
  + Show more info in epub preview, like number of chapters.
  + Restore the accelerators for going back.
  + Exit selection mode only after printing has begun.
  + Use GtkRevealers for faders instead of Tweener.
  + Enable printing only for documents that support it.
  + Avoid CRITICALs if a primary instance is already present.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638403">- Add gnome-documents-gepub-0_5.patch: Build using libgepub 0.5.
- Add gnome-common BuildRequires and call to autoreconf, as above
  patch touches the build system.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638404">- Update to version 3.25.4:
  + Use Tracker 2.0.
  + Updated translations.
- Replace pkgconfig(tracker-control-1.0) and
  pkgconfig(tracker-sparql-1.0) with pkgconfig(tracker-control-2.0)
  and pkgconfig(tracker-sparql-2.0) BuildRequires following
  upstreams changes.
- Rebase gnome-documents-gepub-0_5.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1501329600">- Add gnome-documents-use-tracker-2.0.patch: Use new tracker
  version (bgo#785301).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884800">- Update to version 3.25.90:
  + Use Gepub 0.5.
  + Use Tracker 2.0.
  + Use 'var' for classes that are exported.
  + Updated translations.
- Drop gnome-documents-gepub-0_5.patch and
  gnome-documents-use-tracker-2.0.patch: Fixed upstream.
- Following the above, drop gnome-common BuildRequires and
  autoreconf call, no longer needed as we do not carry any patches.
- Drop obsolete post(un) handling, following macros removed:
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un).
- Pass --enable-documentation to configure, ensure we are building
  documentation.
- Stop packaging AUTHORS NEWS and README, present in src rpm in any
  case. However package COPYING, seems we lost it somewhere along
  the way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 3.25.91:
  + Modernize the Autotools build and move away from Intltool.
  + Updated translations.
- Drop intltool BuildRequires: No longer needed.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505390400">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517572800">- Update to version 3.26.2:
  + Use 'var' for symbols that are exported.
  + Use the standard dialect of String.prototype.replace.
  + Explicitly specify the Gepub API version.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1517659200">- Update Url tag to https://wiki.gnome.org/Apps/Documents: current
  Documents' web page.
- Drop glib2_gsettings_schema_requires macro now that it is no
  longer needed since RPM File Triggers.
- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Add fdupes and its macro for replacement of duplicated files with
  links under the data directory.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="mgorse@suse.com" date="1534766400">- Update to version 3.26.3:
  + Vertically centre text in the list view
  + Translation update
- Add gnome-documents-bsc1063428-garbage-collection.patch: be nice
  to the garbage collector during shutdown (bsc#1063428
  bgo#747506).</changelog>
</package>
<package pkgid="738e72879b966a4be0de1d8fe156269acc987e176deb5dc178d9d31a40f7c7ca" name="gnome-photos" arch="src">
  <version epoch="0" ver="3.26.3" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1487332800">- Update to version 3.23.4:
  + Bugs fixed: bgo#690623, bgo#747123, bgo#763712, bgo#775700,
    bgo#776133, bgo#776565, bgo#776670.
  + Updated translations.
- Add pkgconfig(geocode-glib-1.0) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1487332801">- Update to version 3.23.90:
  + Try to avoid low resolution thumbnails (bgo#690255).
  + Use G_DECLARE_FINAL_TYPE (bgo#763712).
  + tests: Wait for the UI to be drawn completely (bgo#777053).
  + Notify when an online account needs attention (bgo#777492).
  + Appdata uses screenshots of older version (bgo#778620).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488283200">- Update to version 3.23.91:
  + Fix distorted and wrongly scaled thumbnails (bgo#690255).
  + Thumbnails don't reflect edited state (bgo#763329).
  + Use G_DECLARE_FINAL_TYPE (bgo#763712).
  + Closing the properties before determining the edited state of
    an item shouldn't affect subsequent attempts to load the same
    item (bgo#777867).
  + appdata: Add screenshot of sharing feature (bgo#778620).
  + Exported and shared items have their orientation applied twice
    (bgo#778925).
  + po, source-notification: Fix typo (bgo#778967).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489492800">- Update to version 3.23.92:
  + Bugs fixed: bgo#763712, bgo#777869, bgo#779380, bgo#779589.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490097600">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493035200">- Update to version 3.24.1:
  + Changing the aspect ratio of the crop can make the selection
    larger than the image (bgo#765136).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Bugs fixed: bgo#778354.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503748800">- Update to version 3.24.3:
  + Support GEGL &gt;= 0.3.16.
  + Bugs fixed: bgo#763329, bgo#780692.
  + Updated translations.
- Replace pkgconfig(gnome-desktop-3.0) with
  pkgconfig(gsettings-desktop-schemas) BuildRequires following
  upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503748801">- Update to version 3.25.1:
  + Bugs fixed: bgo#763712, bgo#765136, bgo#780424.
  + Updated translations.
- Add gnome-photos-revert-autocleanups.patch: Fix build with new
  gegl-unstable. Also add libtool BuildRequires since patch touches
  buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503748802">- Update to version 3.25.3:
  + Support zooming (bgo#742662).
  + Bugs fixed: bgo#763712, bgo#764423, bgo#776082, bgo#778354,
    bgo#780424, bgo#782012.
  + Updated translations.
- Drop gnome-photos-revert-autocleanups.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503748803">- Update to version 3.25.4:
  + Support GEGL &gt;= 0.3.16.
  + Bugs fixed: bgo#763329, bgo#763712, bgo#781134.
  + Updated translations.
- Replace pkgconfig(tracker-control-1.0) and
  pkgconfig(tracker-sparql-1.0) with pkgconfig(tracker-control-2.0)
  and pkgconfig(tracker-sparql-2.0) BuildRequires following
  upstreams changes.
- Stop handling glib2_gsettings_schema_post(un),
  icon_theme_cache_post(un) and desktop_database_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of for us now.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503748804">- Update to version 3.25.91:
  + Bugs fixed: bgo#780692.
  + Updated translations.
- Drop pkgconfig(gnome-desktop-3.0) BuildRequires: No longer
  needed, nor used.
- Add pkgconfig(gsettings-desktop-schemas) BuildRequires: New
  dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92:
  + Use G_DECLARE_FINAL_TYPE (bgo#763712).
  + Various clean-ups and fixes to the searchbar handling code
    (bgo#786936).
  + Migrate from Intltool to Gettext (bgo#87105).
  + Updated translations.
- Drop intltool BuildRequires: no longer needed after the migration
  to gettext.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Bugs fixed: bgo#785115, bgo#788042.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Bugs fixed: Can't discard all edits directly from the overview
    without previewing the BaseItem (bgo#788715).
  + Updated translations.
- Update Url to https://wiki.gnome.org/Design/Apps/Photos: current
  Photos' web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Add fdupes BuildRequires and its macro for removal of duplicates
  under the data directory.</changelog>
  <changelog author="zaitor@opensuse.org" date="1511438400">- Add upstream stable commits:
  + Add gnome-photos-properties-dialog-dont-leak.patch:
    properties-dialog: Don't leak the error.
  + Add gnome-photos-main-toolbar-dont-leak.patch: main-toolbar:
    Don't leak the preview's GMenu.
  + Add gnome-photos-nb-translations.patch: Add updated Norwegian
    bokmål translation.
- Run spec-cleaner, modernize spec, use autosetup and make_build
  macros.
- Drop hicolor-icon-theme BuildRequires: No longer needed.
- Replace update-desktop-files with desktop-file-utils
  BuildRequires and no longer pass suse_update_desktop_file macro:
  Align more closely with what upstream expects.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Update to version 3.26.3:
  + Bugs fixed: bgo#785376.
  + Updated translations.
- Drop upstream fixed patches:
  + gnome-photos-main-toolbar-dont-leak.patch.
  + gnome-photos-nb-translations.patch.
  + gnome-photos-properties-dialog-dont-leak.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517659200">- Add gnome-photos-Dont-leak-thumbnailer-path-string.patch:
  thumbnail-factory: Don't leak the thumbnailer path string.
- Add gnome-photos-application-fixes.patch: application: Avoid
  CRITICALs.
- Add gnome-photos-Check-RDF-type-before-using-it.patch: utils:
  Check the RDF type before using it, not the MIME type.</changelog>
  <changelog author="sckang@suse.com" date="1540814400">- Add gnome-photos-on-demand-activate-dleyna.patch: Don't activate
  dleyna-renderer-service when Photos starts up (bsc#992420,
  glgo#GNOME/gnome-photos#75).</changelog>
</package>
<package pkgid="f03450c30a54899754bf071bb686c4b63ffc5ee9cb330a5912333e5600b449ae" name="gnome-photos" arch="x86_64">
  <version epoch="0" ver="3.26.3" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1487332800">- Update to version 3.23.4:
  + Bugs fixed: bgo#690623, bgo#747123, bgo#763712, bgo#775700,
    bgo#776133, bgo#776565, bgo#776670.
  + Updated translations.
- Add pkgconfig(geocode-glib-1.0) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1487332801">- Update to version 3.23.90:
  + Try to avoid low resolution thumbnails (bgo#690255).
  + Use G_DECLARE_FINAL_TYPE (bgo#763712).
  + tests: Wait for the UI to be drawn completely (bgo#777053).
  + Notify when an online account needs attention (bgo#777492).
  + Appdata uses screenshots of older version (bgo#778620).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488283200">- Update to version 3.23.91:
  + Fix distorted and wrongly scaled thumbnails (bgo#690255).
  + Thumbnails don't reflect edited state (bgo#763329).
  + Use G_DECLARE_FINAL_TYPE (bgo#763712).
  + Closing the properties before determining the edited state of
    an item shouldn't affect subsequent attempts to load the same
    item (bgo#777867).
  + appdata: Add screenshot of sharing feature (bgo#778620).
  + Exported and shared items have their orientation applied twice
    (bgo#778925).
  + po, source-notification: Fix typo (bgo#778967).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489492800">- Update to version 3.23.92:
  + Bugs fixed: bgo#763712, bgo#777869, bgo#779380, bgo#779589.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490097600">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493035200">- Update to version 3.24.1:
  + Changing the aspect ratio of the crop can make the selection
    larger than the image (bgo#765136).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Bugs fixed: bgo#778354.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503748800">- Update to version 3.24.3:
  + Support GEGL &gt;= 0.3.16.
  + Bugs fixed: bgo#763329, bgo#780692.
  + Updated translations.
- Replace pkgconfig(gnome-desktop-3.0) with
  pkgconfig(gsettings-desktop-schemas) BuildRequires following
  upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503748801">- Update to version 3.25.1:
  + Bugs fixed: bgo#763712, bgo#765136, bgo#780424.
  + Updated translations.
- Add gnome-photos-revert-autocleanups.patch: Fix build with new
  gegl-unstable. Also add libtool BuildRequires since patch touches
  buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503748802">- Update to version 3.25.3:
  + Support zooming (bgo#742662).
  + Bugs fixed: bgo#763712, bgo#764423, bgo#776082, bgo#778354,
    bgo#780424, bgo#782012.
  + Updated translations.
- Drop gnome-photos-revert-autocleanups.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503748803">- Update to version 3.25.4:
  + Support GEGL &gt;= 0.3.16.
  + Bugs fixed: bgo#763329, bgo#763712, bgo#781134.
  + Updated translations.
- Replace pkgconfig(tracker-control-1.0) and
  pkgconfig(tracker-sparql-1.0) with pkgconfig(tracker-control-2.0)
  and pkgconfig(tracker-sparql-2.0) BuildRequires following
  upstreams changes.
- Stop handling glib2_gsettings_schema_post(un),
  icon_theme_cache_post(un) and desktop_database_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of for us now.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503748804">- Update to version 3.25.91:
  + Bugs fixed: bgo#780692.
  + Updated translations.
- Drop pkgconfig(gnome-desktop-3.0) BuildRequires: No longer
  needed, nor used.
- Add pkgconfig(gsettings-desktop-schemas) BuildRequires: New
  dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92:
  + Use G_DECLARE_FINAL_TYPE (bgo#763712).
  + Various clean-ups and fixes to the searchbar handling code
    (bgo#786936).
  + Migrate from Intltool to Gettext (bgo#87105).
  + Updated translations.
- Drop intltool BuildRequires: no longer needed after the migration
  to gettext.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Bugs fixed: bgo#785115, bgo#788042.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Bugs fixed: Can't discard all edits directly from the overview
    without previewing the BaseItem (bgo#788715).
  + Updated translations.
- Update Url to https://wiki.gnome.org/Design/Apps/Photos: current
  Photos' web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Add fdupes BuildRequires and its macro for removal of duplicates
  under the data directory.</changelog>
  <changelog author="zaitor@opensuse.org" date="1511438400">- Add upstream stable commits:
  + Add gnome-photos-properties-dialog-dont-leak.patch:
    properties-dialog: Don't leak the error.
  + Add gnome-photos-main-toolbar-dont-leak.patch: main-toolbar:
    Don't leak the preview's GMenu.
  + Add gnome-photos-nb-translations.patch: Add updated Norwegian
    bokmål translation.
- Run spec-cleaner, modernize spec, use autosetup and make_build
  macros.
- Drop hicolor-icon-theme BuildRequires: No longer needed.
- Replace update-desktop-files with desktop-file-utils
  BuildRequires and no longer pass suse_update_desktop_file macro:
  Align more closely with what upstream expects.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Update to version 3.26.3:
  + Bugs fixed: bgo#785376.
  + Updated translations.
- Drop upstream fixed patches:
  + gnome-photos-main-toolbar-dont-leak.patch.
  + gnome-photos-nb-translations.patch.
  + gnome-photos-properties-dialog-dont-leak.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517659200">- Add gnome-photos-Dont-leak-thumbnailer-path-string.patch:
  thumbnail-factory: Don't leak the thumbnailer path string.
- Add gnome-photos-application-fixes.patch: application: Avoid
  CRITICALs.
- Add gnome-photos-Check-RDF-type-before-using-it.patch: utils:
  Check the RDF type before using it, not the MIME type.</changelog>
  <changelog author="sckang@suse.com" date="1540814400">- Add gnome-photos-on-demand-activate-dleyna.patch: Don't activate
  dleyna-renderer-service when Photos starts up (bsc#992420,
  glgo#GNOME/gnome-photos#75).</changelog>
</package>
<package pkgid="fe73a537fe52af1a8e02d7e1c48bf00f7ed33eaa191978af3dfc1d7945e9377a" name="gnome-photos-lang" arch="noarch">
  <version epoch="0" ver="3.26.3" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1487332800">- Update to version 3.23.4:
  + Bugs fixed: bgo#690623, bgo#747123, bgo#763712, bgo#775700,
    bgo#776133, bgo#776565, bgo#776670.
  + Updated translations.
- Add pkgconfig(geocode-glib-1.0) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1487332801">- Update to version 3.23.90:
  + Try to avoid low resolution thumbnails (bgo#690255).
  + Use G_DECLARE_FINAL_TYPE (bgo#763712).
  + tests: Wait for the UI to be drawn completely (bgo#777053).
  + Notify when an online account needs attention (bgo#777492).
  + Appdata uses screenshots of older version (bgo#778620).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488283200">- Update to version 3.23.91:
  + Fix distorted and wrongly scaled thumbnails (bgo#690255).
  + Thumbnails don't reflect edited state (bgo#763329).
  + Use G_DECLARE_FINAL_TYPE (bgo#763712).
  + Closing the properties before determining the edited state of
    an item shouldn't affect subsequent attempts to load the same
    item (bgo#777867).
  + appdata: Add screenshot of sharing feature (bgo#778620).
  + Exported and shared items have their orientation applied twice
    (bgo#778925).
  + po, source-notification: Fix typo (bgo#778967).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489492800">- Update to version 3.23.92:
  + Bugs fixed: bgo#763712, bgo#777869, bgo#779380, bgo#779589.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490097600">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493035200">- Update to version 3.24.1:
  + Changing the aspect ratio of the crop can make the selection
    larger than the image (bgo#765136).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Bugs fixed: bgo#778354.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503748800">- Update to version 3.24.3:
  + Support GEGL &gt;= 0.3.16.
  + Bugs fixed: bgo#763329, bgo#780692.
  + Updated translations.
- Replace pkgconfig(gnome-desktop-3.0) with
  pkgconfig(gsettings-desktop-schemas) BuildRequires following
  upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503748801">- Update to version 3.25.1:
  + Bugs fixed: bgo#763712, bgo#765136, bgo#780424.
  + Updated translations.
- Add gnome-photos-revert-autocleanups.patch: Fix build with new
  gegl-unstable. Also add libtool BuildRequires since patch touches
  buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503748802">- Update to version 3.25.3:
  + Support zooming (bgo#742662).
  + Bugs fixed: bgo#763712, bgo#764423, bgo#776082, bgo#778354,
    bgo#780424, bgo#782012.
  + Updated translations.
- Drop gnome-photos-revert-autocleanups.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503748803">- Update to version 3.25.4:
  + Support GEGL &gt;= 0.3.16.
  + Bugs fixed: bgo#763329, bgo#763712, bgo#781134.
  + Updated translations.
- Replace pkgconfig(tracker-control-1.0) and
  pkgconfig(tracker-sparql-1.0) with pkgconfig(tracker-control-2.0)
  and pkgconfig(tracker-sparql-2.0) BuildRequires following
  upstreams changes.
- Stop handling glib2_gsettings_schema_post(un),
  icon_theme_cache_post(un) and desktop_database_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of for us now.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503748804">- Update to version 3.25.91:
  + Bugs fixed: bgo#780692.
  + Updated translations.
- Drop pkgconfig(gnome-desktop-3.0) BuildRequires: No longer
  needed, nor used.
- Add pkgconfig(gsettings-desktop-schemas) BuildRequires: New
  dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92:
  + Use G_DECLARE_FINAL_TYPE (bgo#763712).
  + Various clean-ups and fixes to the searchbar handling code
    (bgo#786936).
  + Migrate from Intltool to Gettext (bgo#87105).
  + Updated translations.
- Drop intltool BuildRequires: no longer needed after the migration
  to gettext.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Bugs fixed: bgo#785115, bgo#788042.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Bugs fixed: Can't discard all edits directly from the overview
    without previewing the BaseItem (bgo#788715).
  + Updated translations.
- Update Url to https://wiki.gnome.org/Design/Apps/Photos: current
  Photos' web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Add fdupes BuildRequires and its macro for removal of duplicates
  under the data directory.</changelog>
  <changelog author="zaitor@opensuse.org" date="1511438400">- Add upstream stable commits:
  + Add gnome-photos-properties-dialog-dont-leak.patch:
    properties-dialog: Don't leak the error.
  + Add gnome-photos-main-toolbar-dont-leak.patch: main-toolbar:
    Don't leak the preview's GMenu.
  + Add gnome-photos-nb-translations.patch: Add updated Norwegian
    bokmål translation.
- Run spec-cleaner, modernize spec, use autosetup and make_build
  macros.
- Drop hicolor-icon-theme BuildRequires: No longer needed.
- Replace update-desktop-files with desktop-file-utils
  BuildRequires and no longer pass suse_update_desktop_file macro:
  Align more closely with what upstream expects.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Update to version 3.26.3:
  + Bugs fixed: bgo#785376.
  + Updated translations.
- Drop upstream fixed patches:
  + gnome-photos-main-toolbar-dont-leak.patch.
  + gnome-photos-nb-translations.patch.
  + gnome-photos-properties-dialog-dont-leak.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517659200">- Add gnome-photos-Dont-leak-thumbnailer-path-string.patch:
  thumbnail-factory: Don't leak the thumbnailer path string.
- Add gnome-photos-application-fixes.patch: application: Avoid
  CRITICALs.
- Add gnome-photos-Check-RDF-type-before-using-it.patch: utils:
  Check the RDF type before using it, not the MIME type.</changelog>
  <changelog author="sckang@suse.com" date="1540814400">- Add gnome-photos-on-demand-activate-dleyna.patch: Don't activate
  dleyna-renderer-service when Photos starts up (bsc#992420,
  glgo#GNOME/gnome-photos#75).</changelog>
</package>
<package pkgid="ce91f5ddbef2e3728a7acb3c6ca5921d6160fe084b417189bb91a0eee09bb0df" name="gnome-shell" arch="src">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1505476800">- Add gnome-shell-app-workaround-pkexec.patch: app: Work around
  pkexec restriction when launching (bgo#763531).
- Add gnome-shell-dateMenu-fixes.patch: Fix gnome-weather and
  notification icon (bgo#787423, bgo#766368).
- Add gnome-shell-fix-crash-hint-actor-NULL.patch: StEntry: fix
  crash when hint actor is NULL (bgo#787580).</changelog>
  <changelog author="xwang@suse.com" date="1505736000">- Fix JS warning, define classes with 'var' instead of 'const'
  (bgo#785084)
  + Update aboutMenu.js
  + Update gnome-shell-domain.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1505822400">- Add gnome-shell-only-listen-window-created-events-once.patch:
  gtk-embed: ensure we only listen for window-created events once
  (bgo#787361).</changelog>
  <changelog author="xwang@suse.com" date="1506600000">- Add gnome-shell-Avoid-loginDialog-grab-focus-when-locked.patch:
  Fix using keyboard can't unlock screen (bsc#1058521, bgo#788169).</changelog>
  <changelog author="badshah400@gmail.com" date="1506686400">- Add gnome-shell-disable-osk-gesture-on-lock-screen.patch:
  Disable OSK gesture on lock screen (bgo#788339).</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Update package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Don't detach launched apps to not break pkexec and friends
    (bgo#763531).
  + Allow search providers to not autostart (bgo#785380,
    bgo#787986).
  + Fix crash when tray icons are hidden/shown in quick succession
    (bgo#787361).
  + Make window group switcher more consistent (bgo#786009).
  + Improve legibility of the top bar when translucent
    (bgo#787940).
  + Don't crash when running outside a logind session (bgo#788046).
  + Allow to run headless (bgo#730551).
  + Update calendar on timezone changes (bgo#678507).
  + Improve keyboard navigation of window previews (bgo#786546).
  + Run unit tests on `meson test` (bgo#786497).
  + Misc. bug fixes: bgo#787423, bgo#766368, bgo#787580,
    bgo#787907, bgo#787901, bgo#788039, bgo#788003, bgo#786343,
    bgo#787902, bgo#788265, bgo#788339, bgo#787905, bgo#788282,
    bgo#787676.
  + Updated translations.
- Drop upstream fixed patches:
  + Drop gnome-shell-app-workaround-pkexec.patch.
  + gnome-shell-dateMenu-fixes.patch.
  + gnome-shell-fix-crash-hint-actor-NULL.patch.
  + gnome-shell-only-listen-window-created-events-once.patch.
  + gnome-shell-disable-osk-gesture-on-lock-screen.patch.
- Move all SLE only patches to patch# 1000 and above.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
</package>
<package pkgid="542798f9fcba3b6e1eae7a636187cbf3499e5f68f198bad72d8dd23b68ecd01f" name="gnome-shell" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1505476800">- Add gnome-shell-app-workaround-pkexec.patch: app: Work around
  pkexec restriction when launching (bgo#763531).
- Add gnome-shell-dateMenu-fixes.patch: Fix gnome-weather and
  notification icon (bgo#787423, bgo#766368).
- Add gnome-shell-fix-crash-hint-actor-NULL.patch: StEntry: fix
  crash when hint actor is NULL (bgo#787580).</changelog>
  <changelog author="xwang@suse.com" date="1505736000">- Fix JS warning, define classes with 'var' instead of 'const'
  (bgo#785084)
  + Update aboutMenu.js
  + Update gnome-shell-domain.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1505822400">- Add gnome-shell-only-listen-window-created-events-once.patch:
  gtk-embed: ensure we only listen for window-created events once
  (bgo#787361).</changelog>
  <changelog author="xwang@suse.com" date="1506600000">- Add gnome-shell-Avoid-loginDialog-grab-focus-when-locked.patch:
  Fix using keyboard can't unlock screen (bsc#1058521, bgo#788169).</changelog>
  <changelog author="badshah400@gmail.com" date="1506686400">- Add gnome-shell-disable-osk-gesture-on-lock-screen.patch:
  Disable OSK gesture on lock screen (bgo#788339).</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Update package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Don't detach launched apps to not break pkexec and friends
    (bgo#763531).
  + Allow search providers to not autostart (bgo#785380,
    bgo#787986).
  + Fix crash when tray icons are hidden/shown in quick succession
    (bgo#787361).
  + Make window group switcher more consistent (bgo#786009).
  + Improve legibility of the top bar when translucent
    (bgo#787940).
  + Don't crash when running outside a logind session (bgo#788046).
  + Allow to run headless (bgo#730551).
  + Update calendar on timezone changes (bgo#678507).
  + Improve keyboard navigation of window previews (bgo#786546).
  + Run unit tests on `meson test` (bgo#786497).
  + Misc. bug fixes: bgo#787423, bgo#766368, bgo#787580,
    bgo#787907, bgo#787901, bgo#788039, bgo#788003, bgo#786343,
    bgo#787902, bgo#788265, bgo#788339, bgo#787905, bgo#788282,
    bgo#787676.
  + Updated translations.
- Drop upstream fixed patches:
  + Drop gnome-shell-app-workaround-pkexec.patch.
  + gnome-shell-dateMenu-fixes.patch.
  + gnome-shell-fix-crash-hint-actor-NULL.patch.
  + gnome-shell-only-listen-window-created-events-once.patch.
  + gnome-shell-disable-osk-gesture-on-lock-screen.patch.
- Move all SLE only patches to patch# 1000 and above.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
</package>
<package pkgid="1b7defea6cbe22cd26e8bca6a62f93cc8245f6c353213c2eeaf4af0b23e02ad3" name="gnome-shell-browser-plugin" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1505476800">- Add gnome-shell-app-workaround-pkexec.patch: app: Work around
  pkexec restriction when launching (bgo#763531).
- Add gnome-shell-dateMenu-fixes.patch: Fix gnome-weather and
  notification icon (bgo#787423, bgo#766368).
- Add gnome-shell-fix-crash-hint-actor-NULL.patch: StEntry: fix
  crash when hint actor is NULL (bgo#787580).</changelog>
  <changelog author="xwang@suse.com" date="1505736000">- Fix JS warning, define classes with 'var' instead of 'const'
  (bgo#785084)
  + Update aboutMenu.js
  + Update gnome-shell-domain.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1505822400">- Add gnome-shell-only-listen-window-created-events-once.patch:
  gtk-embed: ensure we only listen for window-created events once
  (bgo#787361).</changelog>
  <changelog author="xwang@suse.com" date="1506600000">- Add gnome-shell-Avoid-loginDialog-grab-focus-when-locked.patch:
  Fix using keyboard can't unlock screen (bsc#1058521, bgo#788169).</changelog>
  <changelog author="badshah400@gmail.com" date="1506686400">- Add gnome-shell-disable-osk-gesture-on-lock-screen.patch:
  Disable OSK gesture on lock screen (bgo#788339).</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Update package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Don't detach launched apps to not break pkexec and friends
    (bgo#763531).
  + Allow search providers to not autostart (bgo#785380,
    bgo#787986).
  + Fix crash when tray icons are hidden/shown in quick succession
    (bgo#787361).
  + Make window group switcher more consistent (bgo#786009).
  + Improve legibility of the top bar when translucent
    (bgo#787940).
  + Don't crash when running outside a logind session (bgo#788046).
  + Allow to run headless (bgo#730551).
  + Update calendar on timezone changes (bgo#678507).
  + Improve keyboard navigation of window previews (bgo#786546).
  + Run unit tests on `meson test` (bgo#786497).
  + Misc. bug fixes: bgo#787423, bgo#766368, bgo#787580,
    bgo#787907, bgo#787901, bgo#788039, bgo#788003, bgo#786343,
    bgo#787902, bgo#788265, bgo#788339, bgo#787905, bgo#788282,
    bgo#787676.
  + Updated translations.
- Drop upstream fixed patches:
  + Drop gnome-shell-app-workaround-pkexec.patch.
  + gnome-shell-dateMenu-fixes.patch.
  + gnome-shell-fix-crash-hint-actor-NULL.patch.
  + gnome-shell-only-listen-window-created-events-once.patch.
  + gnome-shell-disable-osk-gesture-on-lock-screen.patch.
- Move all SLE only patches to patch# 1000 and above.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
</package>
<package pkgid="cabc92bfc0156d5b55ba9b626a71c9c2667a01df9455ab7e3732474698ccb5cf" name="gnome-shell-calendar" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1505476800">- Add gnome-shell-app-workaround-pkexec.patch: app: Work around
  pkexec restriction when launching (bgo#763531).
- Add gnome-shell-dateMenu-fixes.patch: Fix gnome-weather and
  notification icon (bgo#787423, bgo#766368).
- Add gnome-shell-fix-crash-hint-actor-NULL.patch: StEntry: fix
  crash when hint actor is NULL (bgo#787580).</changelog>
  <changelog author="xwang@suse.com" date="1505736000">- Fix JS warning, define classes with 'var' instead of 'const'
  (bgo#785084)
  + Update aboutMenu.js
  + Update gnome-shell-domain.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1505822400">- Add gnome-shell-only-listen-window-created-events-once.patch:
  gtk-embed: ensure we only listen for window-created events once
  (bgo#787361).</changelog>
  <changelog author="xwang@suse.com" date="1506600000">- Add gnome-shell-Avoid-loginDialog-grab-focus-when-locked.patch:
  Fix using keyboard can't unlock screen (bsc#1058521, bgo#788169).</changelog>
  <changelog author="badshah400@gmail.com" date="1506686400">- Add gnome-shell-disable-osk-gesture-on-lock-screen.patch:
  Disable OSK gesture on lock screen (bgo#788339).</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Update package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Don't detach launched apps to not break pkexec and friends
    (bgo#763531).
  + Allow search providers to not autostart (bgo#785380,
    bgo#787986).
  + Fix crash when tray icons are hidden/shown in quick succession
    (bgo#787361).
  + Make window group switcher more consistent (bgo#786009).
  + Improve legibility of the top bar when translucent
    (bgo#787940).
  + Don't crash when running outside a logind session (bgo#788046).
  + Allow to run headless (bgo#730551).
  + Update calendar on timezone changes (bgo#678507).
  + Improve keyboard navigation of window previews (bgo#786546).
  + Run unit tests on `meson test` (bgo#786497).
  + Misc. bug fixes: bgo#787423, bgo#766368, bgo#787580,
    bgo#787907, bgo#787901, bgo#788039, bgo#788003, bgo#786343,
    bgo#787902, bgo#788265, bgo#788339, bgo#787905, bgo#788282,
    bgo#787676.
  + Updated translations.
- Drop upstream fixed patches:
  + Drop gnome-shell-app-workaround-pkexec.patch.
  + gnome-shell-dateMenu-fixes.patch.
  + gnome-shell-fix-crash-hint-actor-NULL.patch.
  + gnome-shell-only-listen-window-created-events-once.patch.
  + gnome-shell-disable-osk-gesture-on-lock-screen.patch.
- Move all SLE only patches to patch# 1000 and above.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
</package>
<package pkgid="a17442734f275710add66e43a053f2af0018f544c747db8d4cbaa45b856de234" name="gnome-shell-classic" arch="noarch">
  <version epoch="0" ver="3.26.2" rel="lp150.6.3.1"/>
  <changelog author="xwang@suse.com" date="1505736000">- Update patch gse-sle-classic-ext.patch.
  Fix 'this._pureWinList is null', error involved in bsc#1046570
  fix(bsc#1046570).</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Register SLE-Classic with u-a handler for default.desktop
  implementation, which obsoletes the change in
  /etc/sysconfig/windowmanager to pick the 'default window manager'
  (boo#1039756).</changelog>
  <changelog author="xwang@suse.com" date="1506513600">- Enable SLE-Classic session working on Wayland.
  Add sle-classic.desktop in folder '{_datadir}/wayland-sessions/'
  (bsc#1058797)</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + native-window-placement: Adjust to gnome-shell changes.
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gse-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="qzheng@suse.com" date="1508241600">- Update gnome-shell-add-app-to-desktop.patch, allow app
  shortcut added to desktop could be executed with default
  attribute "trusted" (bsc#1055240).</changelog>
  <changelog author="xwang@suse.com" date="1508328000">- Add sle-classic-xorg.desktop file.
  Allow user to open X session or wayland session (bsc#1062909).
- Add default.desktop file in '{_datadir}/wayland-sessions/'
  Make default.desktop session working on wayland (bsc#1062196).</changelog>
  <changelog author="qzheng@suse.com" date="1509364800">- Update gse-sle-classic-ext.patch, make the bottom panel
  background of SLE-Classic "black" in the Overview mode
  (bsc#1064377).</changelog>
  <changelog author="xwang@suse.com" date="1509537600">- Apply gnome-shell-add-app-to-desktop.patch on openSUSE
  (bsc#1061742).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Updated translations.
- Update Url to
  https://wiki.gnome.org/Projects/GnomeShell/Extensions: current
  GNOME Shell Extensions project web page.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function in gnome-shell to
  gnome-shell-extensions (bsc#1065611).
  + Update gnome-shell-add-app-to-desktop.patch
  + Update gse-sle-classic-ext.patch
  + Update sle-classic-favorites-menu-at-end.patch
  + Update sle-classic-xorg.desktop
  + Update sle-classic.desktop
  + Add sle-classic.json
  + Add sle-classic@suse.com.tar.gz</changelog>
  <changelog author="xwang@suse.com" date="1510228800">- Apply SLE-Classic session on Tumbleweed (bsc#1051772).
  + Rename sle-classic-favorites-menu-at-end.patch to
    gnome-shell-favorites-menu-at-end.patch</changelog>
  <changelog author="xwang@suse.com" date="1511179200">- Add gnome-shell-extensions-window-list-app-icon-not-shown.patch:
  Fix window-list doesn't show app icon on taskbar when working in
  wayland (bgo#745064).</changelog>
  <changelog author="xwang@suse.com" date="1511524800">- Lower update-alternative priority of sle-classic desktop to 20,
  resulting in GNOME session becoming the default session
  (fate#324384).</changelog>
  <changelog author="xwang@suse.com" date="1513252800">- Fix in SLE-Classic session application title bar doesn't show
  application menu (bsc#1070090 bgo#746592).
  + Update sle-classic@suse.com.tar.gz
  + Update sle-classic.desktop
  + Update sle-classic-xorg.desktop</changelog>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Own {_datadir}/gnome-shell/extensions, needed after changes in
  gnome-shell package.</changelog>
  <changelog author="xwang@suse.com" date="1518091200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1524139200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1528113600">- Update sle-classic@suse.com.tar.gz. Don't allow user to enable
  sle-classic extension in tweak tool (bsc#1095325).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Update sle-classic@suse.com.tar.gz. After sle-classic extension
  is disabled, can't show clone window in overview mode
  (bsc#1095325).</changelog>
</package>
<package pkgid="704ef01c6a9d480e1c2f275f6ffc90217e0bea727acdc46f349cf8e5e27d5849" name="gnome-shell-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1505476800">- Add gnome-shell-app-workaround-pkexec.patch: app: Work around
  pkexec restriction when launching (bgo#763531).
- Add gnome-shell-dateMenu-fixes.patch: Fix gnome-weather and
  notification icon (bgo#787423, bgo#766368).
- Add gnome-shell-fix-crash-hint-actor-NULL.patch: StEntry: fix
  crash when hint actor is NULL (bgo#787580).</changelog>
  <changelog author="xwang@suse.com" date="1505736000">- Fix JS warning, define classes with 'var' instead of 'const'
  (bgo#785084)
  + Update aboutMenu.js
  + Update gnome-shell-domain.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1505822400">- Add gnome-shell-only-listen-window-created-events-once.patch:
  gtk-embed: ensure we only listen for window-created events once
  (bgo#787361).</changelog>
  <changelog author="xwang@suse.com" date="1506600000">- Add gnome-shell-Avoid-loginDialog-grab-focus-when-locked.patch:
  Fix using keyboard can't unlock screen (bsc#1058521, bgo#788169).</changelog>
  <changelog author="badshah400@gmail.com" date="1506686400">- Add gnome-shell-disable-osk-gesture-on-lock-screen.patch:
  Disable OSK gesture on lock screen (bgo#788339).</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Update package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Don't detach launched apps to not break pkexec and friends
    (bgo#763531).
  + Allow search providers to not autostart (bgo#785380,
    bgo#787986).
  + Fix crash when tray icons are hidden/shown in quick succession
    (bgo#787361).
  + Make window group switcher more consistent (bgo#786009).
  + Improve legibility of the top bar when translucent
    (bgo#787940).
  + Don't crash when running outside a logind session (bgo#788046).
  + Allow to run headless (bgo#730551).
  + Update calendar on timezone changes (bgo#678507).
  + Improve keyboard navigation of window previews (bgo#786546).
  + Run unit tests on `meson test` (bgo#786497).
  + Misc. bug fixes: bgo#787423, bgo#766368, bgo#787580,
    bgo#787907, bgo#787901, bgo#788039, bgo#788003, bgo#786343,
    bgo#787902, bgo#788265, bgo#788339, bgo#787905, bgo#788282,
    bgo#787676.
  + Updated translations.
- Drop upstream fixed patches:
  + Drop gnome-shell-app-workaround-pkexec.patch.
  + gnome-shell-dateMenu-fixes.patch.
  + gnome-shell-fix-crash-hint-actor-NULL.patch.
  + gnome-shell-only-listen-window-created-events-once.patch.
  + gnome-shell-disable-osk-gesture-on-lock-screen.patch.
- Move all SLE only patches to patch# 1000 and above.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
</package>
<package pkgid="c511df5b9ace318cc5eab2f11a2824360a0fd4b9989465189acdd98ca42b0212" name="gnome-shell-extensions" arch="src">
  <version epoch="0" ver="3.26.2" rel="lp150.6.3.1"/>
  <changelog author="xwang@suse.com" date="1505736000">- Update patch gse-sle-classic-ext.patch.
  Fix 'this._pureWinList is null', error involved in bsc#1046570
  fix(bsc#1046570).</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Register SLE-Classic with u-a handler for default.desktop
  implementation, which obsoletes the change in
  /etc/sysconfig/windowmanager to pick the 'default window manager'
  (boo#1039756).</changelog>
  <changelog author="xwang@suse.com" date="1506513600">- Enable SLE-Classic session working on Wayland.
  Add sle-classic.desktop in folder '{_datadir}/wayland-sessions/'
  (bsc#1058797)</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + native-window-placement: Adjust to gnome-shell changes.
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gse-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="qzheng@suse.com" date="1508241600">- Update gnome-shell-add-app-to-desktop.patch, allow app
  shortcut added to desktop could be executed with default
  attribute "trusted" (bsc#1055240).</changelog>
  <changelog author="xwang@suse.com" date="1508328000">- Add sle-classic-xorg.desktop file.
  Allow user to open X session or wayland session (bsc#1062909).
- Add default.desktop file in '{_datadir}/wayland-sessions/'
  Make default.desktop session working on wayland (bsc#1062196).</changelog>
  <changelog author="qzheng@suse.com" date="1509364800">- Update gse-sle-classic-ext.patch, make the bottom panel
  background of SLE-Classic "black" in the Overview mode
  (bsc#1064377).</changelog>
  <changelog author="xwang@suse.com" date="1509537600">- Apply gnome-shell-add-app-to-desktop.patch on openSUSE
  (bsc#1061742).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Updated translations.
- Update Url to
  https://wiki.gnome.org/Projects/GnomeShell/Extensions: current
  GNOME Shell Extensions project web page.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function in gnome-shell to
  gnome-shell-extensions (bsc#1065611).
  + Update gnome-shell-add-app-to-desktop.patch
  + Update gse-sle-classic-ext.patch
  + Update sle-classic-favorites-menu-at-end.patch
  + Update sle-classic-xorg.desktop
  + Update sle-classic.desktop
  + Add sle-classic.json
  + Add sle-classic@suse.com.tar.gz</changelog>
  <changelog author="xwang@suse.com" date="1510228800">- Apply SLE-Classic session on Tumbleweed (bsc#1051772).
  + Rename sle-classic-favorites-menu-at-end.patch to
    gnome-shell-favorites-menu-at-end.patch</changelog>
  <changelog author="xwang@suse.com" date="1511179200">- Add gnome-shell-extensions-window-list-app-icon-not-shown.patch:
  Fix window-list doesn't show app icon on taskbar when working in
  wayland (bgo#745064).</changelog>
  <changelog author="xwang@suse.com" date="1511524800">- Lower update-alternative priority of sle-classic desktop to 20,
  resulting in GNOME session becoming the default session
  (fate#324384).</changelog>
  <changelog author="xwang@suse.com" date="1513252800">- Fix in SLE-Classic session application title bar doesn't show
  application menu (bsc#1070090 bgo#746592).
  + Update sle-classic@suse.com.tar.gz
  + Update sle-classic.desktop
  + Update sle-classic-xorg.desktop</changelog>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Own {_datadir}/gnome-shell/extensions, needed after changes in
  gnome-shell package.</changelog>
  <changelog author="xwang@suse.com" date="1518091200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1524139200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1528113600">- Update sle-classic@suse.com.tar.gz. Don't allow user to enable
  sle-classic extension in tweak tool (bsc#1095325).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Update sle-classic@suse.com.tar.gz. After sle-classic extension
  is disabled, can't show clone window in overview mode
  (bsc#1095325).</changelog>
</package>
<package pkgid="df289b4efb0f86467b7ca22a71cbfc45f4a660e17eb2b90b86c91a4e92624e14" name="gnome-shell-extensions-common" arch="noarch">
  <version epoch="0" ver="3.26.2" rel="lp150.6.3.1"/>
  <changelog author="xwang@suse.com" date="1505736000">- Update patch gse-sle-classic-ext.patch.
  Fix 'this._pureWinList is null', error involved in bsc#1046570
  fix(bsc#1046570).</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Register SLE-Classic with u-a handler for default.desktop
  implementation, which obsoletes the change in
  /etc/sysconfig/windowmanager to pick the 'default window manager'
  (boo#1039756).</changelog>
  <changelog author="xwang@suse.com" date="1506513600">- Enable SLE-Classic session working on Wayland.
  Add sle-classic.desktop in folder '{_datadir}/wayland-sessions/'
  (bsc#1058797)</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + native-window-placement: Adjust to gnome-shell changes.
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gse-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="qzheng@suse.com" date="1508241600">- Update gnome-shell-add-app-to-desktop.patch, allow app
  shortcut added to desktop could be executed with default
  attribute "trusted" (bsc#1055240).</changelog>
  <changelog author="xwang@suse.com" date="1508328000">- Add sle-classic-xorg.desktop file.
  Allow user to open X session or wayland session (bsc#1062909).
- Add default.desktop file in '{_datadir}/wayland-sessions/'
  Make default.desktop session working on wayland (bsc#1062196).</changelog>
  <changelog author="qzheng@suse.com" date="1509364800">- Update gse-sle-classic-ext.patch, make the bottom panel
  background of SLE-Classic "black" in the Overview mode
  (bsc#1064377).</changelog>
  <changelog author="xwang@suse.com" date="1509537600">- Apply gnome-shell-add-app-to-desktop.patch on openSUSE
  (bsc#1061742).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Updated translations.
- Update Url to
  https://wiki.gnome.org/Projects/GnomeShell/Extensions: current
  GNOME Shell Extensions project web page.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function in gnome-shell to
  gnome-shell-extensions (bsc#1065611).
  + Update gnome-shell-add-app-to-desktop.patch
  + Update gse-sle-classic-ext.patch
  + Update sle-classic-favorites-menu-at-end.patch
  + Update sle-classic-xorg.desktop
  + Update sle-classic.desktop
  + Add sle-classic.json
  + Add sle-classic@suse.com.tar.gz</changelog>
  <changelog author="xwang@suse.com" date="1510228800">- Apply SLE-Classic session on Tumbleweed (bsc#1051772).
  + Rename sle-classic-favorites-menu-at-end.patch to
    gnome-shell-favorites-menu-at-end.patch</changelog>
  <changelog author="xwang@suse.com" date="1511179200">- Add gnome-shell-extensions-window-list-app-icon-not-shown.patch:
  Fix window-list doesn't show app icon on taskbar when working in
  wayland (bgo#745064).</changelog>
  <changelog author="xwang@suse.com" date="1511524800">- Lower update-alternative priority of sle-classic desktop to 20,
  resulting in GNOME session becoming the default session
  (fate#324384).</changelog>
  <changelog author="xwang@suse.com" date="1513252800">- Fix in SLE-Classic session application title bar doesn't show
  application menu (bsc#1070090 bgo#746592).
  + Update sle-classic@suse.com.tar.gz
  + Update sle-classic.desktop
  + Update sle-classic-xorg.desktop</changelog>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Own {_datadir}/gnome-shell/extensions, needed after changes in
  gnome-shell package.</changelog>
  <changelog author="xwang@suse.com" date="1518091200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1524139200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1528113600">- Update sle-classic@suse.com.tar.gz. Don't allow user to enable
  sle-classic extension in tweak tool (bsc#1095325).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Update sle-classic@suse.com.tar.gz. After sle-classic extension
  is disabled, can't show clone window in overview mode
  (bsc#1095325).</changelog>
</package>
<package pkgid="37d5438848f28c798adb2312b9317d94e371c928de1e1c85bd51441df0ab0722" name="gnome-shell-extensions-common-lang" arch="noarch">
  <version epoch="0" ver="3.26.2" rel="lp150.6.3.1"/>
  <changelog author="xwang@suse.com" date="1505736000">- Update patch gse-sle-classic-ext.patch.
  Fix 'this._pureWinList is null', error involved in bsc#1046570
  fix(bsc#1046570).</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Register SLE-Classic with u-a handler for default.desktop
  implementation, which obsoletes the change in
  /etc/sysconfig/windowmanager to pick the 'default window manager'
  (boo#1039756).</changelog>
  <changelog author="xwang@suse.com" date="1506513600">- Enable SLE-Classic session working on Wayland.
  Add sle-classic.desktop in folder '{_datadir}/wayland-sessions/'
  (bsc#1058797)</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + native-window-placement: Adjust to gnome-shell changes.
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gse-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="qzheng@suse.com" date="1508241600">- Update gnome-shell-add-app-to-desktop.patch, allow app
  shortcut added to desktop could be executed with default
  attribute "trusted" (bsc#1055240).</changelog>
  <changelog author="xwang@suse.com" date="1508328000">- Add sle-classic-xorg.desktop file.
  Allow user to open X session or wayland session (bsc#1062909).
- Add default.desktop file in '{_datadir}/wayland-sessions/'
  Make default.desktop session working on wayland (bsc#1062196).</changelog>
  <changelog author="qzheng@suse.com" date="1509364800">- Update gse-sle-classic-ext.patch, make the bottom panel
  background of SLE-Classic "black" in the Overview mode
  (bsc#1064377).</changelog>
  <changelog author="xwang@suse.com" date="1509537600">- Apply gnome-shell-add-app-to-desktop.patch on openSUSE
  (bsc#1061742).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Updated translations.
- Update Url to
  https://wiki.gnome.org/Projects/GnomeShell/Extensions: current
  GNOME Shell Extensions project web page.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function in gnome-shell to
  gnome-shell-extensions (bsc#1065611).
  + Update gnome-shell-add-app-to-desktop.patch
  + Update gse-sle-classic-ext.patch
  + Update sle-classic-favorites-menu-at-end.patch
  + Update sle-classic-xorg.desktop
  + Update sle-classic.desktop
  + Add sle-classic.json
  + Add sle-classic@suse.com.tar.gz</changelog>
  <changelog author="xwang@suse.com" date="1510228800">- Apply SLE-Classic session on Tumbleweed (bsc#1051772).
  + Rename sle-classic-favorites-menu-at-end.patch to
    gnome-shell-favorites-menu-at-end.patch</changelog>
  <changelog author="xwang@suse.com" date="1511179200">- Add gnome-shell-extensions-window-list-app-icon-not-shown.patch:
  Fix window-list doesn't show app icon on taskbar when working in
  wayland (bgo#745064).</changelog>
  <changelog author="xwang@suse.com" date="1511524800">- Lower update-alternative priority of sle-classic desktop to 20,
  resulting in GNOME session becoming the default session
  (fate#324384).</changelog>
  <changelog author="xwang@suse.com" date="1513252800">- Fix in SLE-Classic session application title bar doesn't show
  application menu (bsc#1070090 bgo#746592).
  + Update sle-classic@suse.com.tar.gz
  + Update sle-classic.desktop
  + Update sle-classic-xorg.desktop</changelog>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Own {_datadir}/gnome-shell/extensions, needed after changes in
  gnome-shell package.</changelog>
  <changelog author="xwang@suse.com" date="1518091200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1524139200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1528113600">- Update sle-classic@suse.com.tar.gz. Don't allow user to enable
  sle-classic extension in tweak tool (bsc#1095325).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Update sle-classic@suse.com.tar.gz. After sle-classic extension
  is disabled, can't show clone window in overview mode
  (bsc#1095325).</changelog>
</package>
<package pkgid="a1d7e9124d90f8c1233b7a7df36a14804f361b7c48833e74e48831730f81f65c" name="gnome-shell-lang" arch="noarch">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1505476800">- Add gnome-shell-app-workaround-pkexec.patch: app: Work around
  pkexec restriction when launching (bgo#763531).
- Add gnome-shell-dateMenu-fixes.patch: Fix gnome-weather and
  notification icon (bgo#787423, bgo#766368).
- Add gnome-shell-fix-crash-hint-actor-NULL.patch: StEntry: fix
  crash when hint actor is NULL (bgo#787580).</changelog>
  <changelog author="xwang@suse.com" date="1505736000">- Fix JS warning, define classes with 'var' instead of 'const'
  (bgo#785084)
  + Update aboutMenu.js
  + Update gnome-shell-domain.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1505822400">- Add gnome-shell-only-listen-window-created-events-once.patch:
  gtk-embed: ensure we only listen for window-created events once
  (bgo#787361).</changelog>
  <changelog author="xwang@suse.com" date="1506600000">- Add gnome-shell-Avoid-loginDialog-grab-focus-when-locked.patch:
  Fix using keyboard can't unlock screen (bsc#1058521, bgo#788169).</changelog>
  <changelog author="badshah400@gmail.com" date="1506686400">- Add gnome-shell-disable-osk-gesture-on-lock-screen.patch:
  Disable OSK gesture on lock screen (bgo#788339).</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Update package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Don't detach launched apps to not break pkexec and friends
    (bgo#763531).
  + Allow search providers to not autostart (bgo#785380,
    bgo#787986).
  + Fix crash when tray icons are hidden/shown in quick succession
    (bgo#787361).
  + Make window group switcher more consistent (bgo#786009).
  + Improve legibility of the top bar when translucent
    (bgo#787940).
  + Don't crash when running outside a logind session (bgo#788046).
  + Allow to run headless (bgo#730551).
  + Update calendar on timezone changes (bgo#678507).
  + Improve keyboard navigation of window previews (bgo#786546).
  + Run unit tests on `meson test` (bgo#786497).
  + Misc. bug fixes: bgo#787423, bgo#766368, bgo#787580,
    bgo#787907, bgo#787901, bgo#788039, bgo#788003, bgo#786343,
    bgo#787902, bgo#788265, bgo#788339, bgo#787905, bgo#788282,
    bgo#787676.
  + Updated translations.
- Drop upstream fixed patches:
  + Drop gnome-shell-app-workaround-pkexec.patch.
  + gnome-shell-dateMenu-fixes.patch.
  + gnome-shell-fix-crash-hint-actor-NULL.patch.
  + gnome-shell-only-listen-window-created-events-once.patch.
  + gnome-shell-disable-osk-gesture-on-lock-screen.patch.
- Move all SLE only patches to patch# 1000 and above.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
</package>
<package pkgid="1b2360bf12ba867a244304bd36c1c56d7942c76d2698959e486d51aa16af5fbf" name="gnome-shell-search-provider-documents" arch="x86_64">
  <version epoch="0" ver="3.26.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473681600">- Update to version 3.21.91:
  + Some refactoring.
  + Updated translations.
- Drop gnome-documents-Gepub-0.4.patch: Fixed upstream. Following
  this, drop gnome-common BuildRequires and autoreconf call, not
  needed as we do not carry any patches anymore.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488456000">- Update to version 3.23.91:
  + Port user interactions and keybindings to GAction.
  + Update theming for collection icons.
  + Rewrite fullscreen controller code.
  + Fix scrubbar preview positioning under Wayland.
  + Stop using GdNotification.
  + Add support for IANA-registered comicbook mime types.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490184000">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493035200">- Update to version 3.24.1:
  + Use LOKDocView for pre-OOXML MS Office formats.
  + Unbreak opening in external application.
  + Fix regression that prevented comics from being previewed.
  + Make sure that load jobs are cancelled.
  + Fix double menus in fullscreened evince view.
  + Support fullscreening the e-pub view.
  + Don't leak the URI when thumbnailing.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494504000">- Update to version 3.24.2:
  + Unbreak previews of LOKDocView-supported documents from
    OneDrive.
  + Unreak caching of LOKDocView-supported documents from ownCloud.
  + Support previews of encrypted PDFs from Google.
  + Pass the right number of arguments to LOKDocView.View.new.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638400">- Update to version 3.24.3:
  + Enable printing only for documents that support it.
  + Avoid CRITICALs if a primary instance is already present.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638401">- Update to version 3.25.1:
  + Distinguish multiple online sources from the same provider
  + Unbreak previews of LOKDocView-supported documents from
    OneDrive.
  + Unreak caching of LOKDocView-supported documents from ownCloud.
  + Support previews of encrypted PDFs from Google.
  + Pass the right number of arguments to LOKDocView.View.new.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500638402">- Update to version 3.25.3:
  + Show more info in epub preview, like number of chapters.
  + Restore the accelerators for going back.
  + Exit selection mode only after printing has begun.
  + Use GtkRevealers for faders instead of Tweener.
  + Enable printing only for documents that support it.
  + Avoid CRITICALs if a primary instance is already present.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638403">- Add gnome-documents-gepub-0_5.patch: Build using libgepub 0.5.
- Add gnome-common BuildRequires and call to autoreconf, as above
  patch touches the build system.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638404">- Update to version 3.25.4:
  + Use Tracker 2.0.
  + Updated translations.
- Replace pkgconfig(tracker-control-1.0) and
  pkgconfig(tracker-sparql-1.0) with pkgconfig(tracker-control-2.0)
  and pkgconfig(tracker-sparql-2.0) BuildRequires following
  upstreams changes.
- Rebase gnome-documents-gepub-0_5.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1501329600">- Add gnome-documents-use-tracker-2.0.patch: Use new tracker
  version (bgo#785301).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884800">- Update to version 3.25.90:
  + Use Gepub 0.5.
  + Use Tracker 2.0.
  + Use 'var' for classes that are exported.
  + Updated translations.
- Drop gnome-documents-gepub-0_5.patch and
  gnome-documents-use-tracker-2.0.patch: Fixed upstream.
- Following the above, drop gnome-common BuildRequires and
  autoreconf call, no longer needed as we do not carry any patches.
- Drop obsolete post(un) handling, following macros removed:
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un).
- Pass --enable-documentation to configure, ensure we are building
  documentation.
- Stop packaging AUTHORS NEWS and README, present in src rpm in any
  case. However package COPYING, seems we lost it somewhere along
  the way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 3.25.91:
  + Modernize the Autotools build and move away from Intltool.
  + Updated translations.
- Drop intltool BuildRequires: No longer needed.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505390400">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517572800">- Update to version 3.26.2:
  + Use 'var' for symbols that are exported.
  + Use the standard dialect of String.prototype.replace.
  + Explicitly specify the Gepub API version.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1517659200">- Update Url tag to https://wiki.gnome.org/Apps/Documents: current
  Documents' web page.
- Drop glib2_gsettings_schema_requires macro now that it is no
  longer needed since RPM File Triggers.
- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Add fdupes and its macro for replacement of duplicated files with
  links under the data directory.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="mgorse@suse.com" date="1534766400">- Update to version 3.26.3:
  + Vertically centre text in the list view
  + Translation update
- Add gnome-documents-bsc1063428-garbage-collection.patch: be nice
  to the garbage collector during shutdown (bsc#1063428
  bgo#747506).</changelog>
</package>
<package pkgid="fd01f8b9b776936877d2d587f2dbd4b870914188a64f50e0925dd16d3bab145e" name="gnome-shell-search-provider-gnome-photos" arch="x86_64">
  <version epoch="0" ver="3.26.3" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1487332800">- Update to version 3.23.4:
  + Bugs fixed: bgo#690623, bgo#747123, bgo#763712, bgo#775700,
    bgo#776133, bgo#776565, bgo#776670.
  + Updated translations.
- Add pkgconfig(geocode-glib-1.0) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1487332801">- Update to version 3.23.90:
  + Try to avoid low resolution thumbnails (bgo#690255).
  + Use G_DECLARE_FINAL_TYPE (bgo#763712).
  + tests: Wait for the UI to be drawn completely (bgo#777053).
  + Notify when an online account needs attention (bgo#777492).
  + Appdata uses screenshots of older version (bgo#778620).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488283200">- Update to version 3.23.91:
  + Fix distorted and wrongly scaled thumbnails (bgo#690255).
  + Thumbnails don't reflect edited state (bgo#763329).
  + Use G_DECLARE_FINAL_TYPE (bgo#763712).
  + Closing the properties before determining the edited state of
    an item shouldn't affect subsequent attempts to load the same
    item (bgo#777867).
  + appdata: Add screenshot of sharing feature (bgo#778620).
  + Exported and shared items have their orientation applied twice
    (bgo#778925).
  + po, source-notification: Fix typo (bgo#778967).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489492800">- Update to version 3.23.92:
  + Bugs fixed: bgo#763712, bgo#777869, bgo#779380, bgo#779589.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490097600">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493035200">- Update to version 3.24.1:
  + Changing the aspect ratio of the crop can make the selection
    larger than the image (bgo#765136).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Bugs fixed: bgo#778354.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503748800">- Update to version 3.24.3:
  + Support GEGL &gt;= 0.3.16.
  + Bugs fixed: bgo#763329, bgo#780692.
  + Updated translations.
- Replace pkgconfig(gnome-desktop-3.0) with
  pkgconfig(gsettings-desktop-schemas) BuildRequires following
  upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503748801">- Update to version 3.25.1:
  + Bugs fixed: bgo#763712, bgo#765136, bgo#780424.
  + Updated translations.
- Add gnome-photos-revert-autocleanups.patch: Fix build with new
  gegl-unstable. Also add libtool BuildRequires since patch touches
  buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503748802">- Update to version 3.25.3:
  + Support zooming (bgo#742662).
  + Bugs fixed: bgo#763712, bgo#764423, bgo#776082, bgo#778354,
    bgo#780424, bgo#782012.
  + Updated translations.
- Drop gnome-photos-revert-autocleanups.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503748803">- Update to version 3.25.4:
  + Support GEGL &gt;= 0.3.16.
  + Bugs fixed: bgo#763329, bgo#763712, bgo#781134.
  + Updated translations.
- Replace pkgconfig(tracker-control-1.0) and
  pkgconfig(tracker-sparql-1.0) with pkgconfig(tracker-control-2.0)
  and pkgconfig(tracker-sparql-2.0) BuildRequires following
  upstreams changes.
- Stop handling glib2_gsettings_schema_post(un),
  icon_theme_cache_post(un) and desktop_database_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of for us now.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503748804">- Update to version 3.25.91:
  + Bugs fixed: bgo#780692.
  + Updated translations.
- Drop pkgconfig(gnome-desktop-3.0) BuildRequires: No longer
  needed, nor used.
- Add pkgconfig(gsettings-desktop-schemas) BuildRequires: New
  dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92:
  + Use G_DECLARE_FINAL_TYPE (bgo#763712).
  + Various clean-ups and fixes to the searchbar handling code
    (bgo#786936).
  + Migrate from Intltool to Gettext (bgo#87105).
  + Updated translations.
- Drop intltool BuildRequires: no longer needed after the migration
  to gettext.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Bugs fixed: bgo#785115, bgo#788042.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Bugs fixed: Can't discard all edits directly from the overview
    without previewing the BaseItem (bgo#788715).
  + Updated translations.
- Update Url to https://wiki.gnome.org/Design/Apps/Photos: current
  Photos' web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Add fdupes BuildRequires and its macro for removal of duplicates
  under the data directory.</changelog>
  <changelog author="zaitor@opensuse.org" date="1511438400">- Add upstream stable commits:
  + Add gnome-photos-properties-dialog-dont-leak.patch:
    properties-dialog: Don't leak the error.
  + Add gnome-photos-main-toolbar-dont-leak.patch: main-toolbar:
    Don't leak the preview's GMenu.
  + Add gnome-photos-nb-translations.patch: Add updated Norwegian
    bokmål translation.
- Run spec-cleaner, modernize spec, use autosetup and make_build
  macros.
- Drop hicolor-icon-theme BuildRequires: No longer needed.
- Replace update-desktop-files with desktop-file-utils
  BuildRequires and no longer pass suse_update_desktop_file macro:
  Align more closely with what upstream expects.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Update to version 3.26.3:
  + Bugs fixed: bgo#785376.
  + Updated translations.
- Drop upstream fixed patches:
  + gnome-photos-main-toolbar-dont-leak.patch.
  + gnome-photos-nb-translations.patch.
  + gnome-photos-properties-dialog-dont-leak.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517659200">- Add gnome-photos-Dont-leak-thumbnailer-path-string.patch:
  thumbnail-factory: Don't leak the thumbnailer path string.
- Add gnome-photos-application-fixes.patch: application: Avoid
  CRITICALs.
- Add gnome-photos-Check-RDF-type-before-using-it.patch: utils:
  Check the RDF type before using it, not the MIME type.</changelog>
  <changelog author="sckang@suse.com" date="1540814400">- Add gnome-photos-on-demand-activate-dleyna.patch: Don't activate
  dleyna-renderer-service when Photos starts up (bsc#992420,
  glgo#GNOME/gnome-photos#75).</changelog>
</package>
<package pkgid="e817892017903f40799b53c0c943a7adc63b78fd00afe7aa4aada3670551215a" name="gnome-shell-search-provider-nautilus" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Fix libgd warning.
  + Numerous batch renaming improvements and fixes.
  + Detect .bz and .xz as extensions for renaming.
  + Fix operations popover too small.
  + Add dummy --no-desktop option so Dropbox plugin works again.
  + Fix build when using the --disable-tracker compile time option.
  + Updated translations.
- Run spec-clean: Updates macros to current standard and adds
  pkgconfig BuildRequires, also removes obsolete clean section.
- Conditionally BuildRequire and apply gnome-patch-translate and
  translations-update-upstream for non-openSUSE only.
- Drop nautilus2-devel Obsoletes/Provides: We do not support
  upgrading from any version where this would apply.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 3.22.0:
  + Increase gtk+ depencency version.
  + Updated translations.</changelog>
  <changelog author="qzhao@suse.com" date="1476014400">- Update nautilus-fix-desktop-icon-smash.patch:
  porting upstream's solution to work out the general aspect
  (bsc#979072, bgo#765601).</changelog>
  <changelog author="zaitor@opensuse.org" date="1476446400">- Update to version 3.22.1:
  + Multiple batch renaming fixes.
  + Multiple compression integration fixes.
  + Fix not showing "eject" and other options for devices in the
    context menu in the desktop.
  + Rework clipboard handling, fixing desktop&lt;-&gt;Nautilus
    interaction.
  + Fix overlaping icons on desktop in some cases, noticeabily in
    Ubuntu.
  + Fix wrong progress information in operations when skipping
    files.
  + Fix gnome-shell search only searching for whole words.
  + Show location as default for list view on Recent.
  + Fix context menu position in Wayland or other non-global
    coordinates systems.
  + Update man page of nautilus.
  + Add revealer for warnings in batch rename dialog.
  + Add tooltips to batch rename dialog file names.
  + Port nautilus classes to G_DECLARE.
  + Extend Nautilus File API for regular files.
  + Don't crash for simple leaks on the views.
  + Updated translations.
- Drop nautilus-enable-eject-option-on-selection-menu.patch and
  nautilus-fix-desktop-icon-smash.patch: Fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1481371200">- Update to version 3.22.2:
  + Fix opening menus with keyboard.
  + Fix batch rename failing to rename in some cases.
  + Remove Bookmarks manager shortcut from the shortcut window.
  + Reverse view icon logic to match design expectations.
  + Make icons on desktop work on Wayland sessions.
  + Fix popover animations.
  + Use the same setting for "directories first" both for file
    chooser and Nautilus.
  + Select entire names when renaming a folder.
  + Fix wrong progress information in operations due to races.
  + Fix wrong progress information in operations in non local
    files.
  + Fix regresion on speed when copying or moving files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Update to version 3.23.90:
  + Add &lt;ctrl&gt; Return as shortcut to open selected folder in new
    window.
  + &lt;ctrl&gt; N now opens the window in the same location as the
    current view.
  + Fixes on managing menus with keyboard.
  + Remove unused &lt;ctrl&gt; B shortcut.
  + Use a better empty state for trash.
  + Fix floating bar hide on hover when using tabs.
  + Syncronize gtk+ and Nautilus setting for sorting the folder
    first.
  + Select entire names for folder when renaming.
  + Support to open folders withouth permission using polkit and
    the admin backend.
  + Fix trash operations progress report.
  + Improve performance setting metadata only when necesary.
  + Fix progress reporting when copying.
  + Prevent toolbar menu dissapearing when "Hidden files" menu item
    is toggled.
  + Update app icon.
  + Fix icon scale computation when changing DPI.
  + Add &lt;ctrl&gt; M as alternate shortcut for renaming for those
    laptops withouth "f" keys.
  + Fix crash when pressing enter on search.
  + Fix failed build with tracker disabled.
  + Ask the user for using desktop files from unknown sources.
  + Improve the operations button animation in order to not need to
    show the operations popover.
  + Add an experimental icon view based on flow box with extra
    niceties under a gsetting preference.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488628800">- Update to version 3.23.91:
  + Fix long-time, hard to reproduce, and common crash on desktop
    with "auto layout" icons.
  + Port building system to meson.
  + Make F2 toggle between selection modes, full file name or only
    file name withouth extension.
  + Recent files are now always files that only the user used,
    rather than any program/daemon like Dropbox updating the access
    time.
  + Fix Nautilus tests with extexnsions points.
  + Fix crash on desktop when refreshing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1489752000">- Update to version 3.23.92:
  + Fix count progress in operations when skipping files.
  + Improve meson build.
  + Selection and menus fixed for the experimental icon view.
  + Make Nautilus work with Flatpak and Builder.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490097600">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1493467200">- Update to version 3.24.1:
  + Focus when a new folder is created.
  + Do not consider directory names with dots as extensions.
  + Fix move to/copy to when searching.
  + Various fixes to the new experimental views.
  + Fix scripts order in submenu.
  + Fix open in new tab/window in Other Places.
  + Show new networks available while in Other Places view.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.23.2.1:
  + Release with autotools.
- Changes from version 3.24.2:
  + Hide desktop icons autostart in Ubuntu.
  + Confirm file name change in dialog conflicts with return.
  + Fix search activation not changing current directory.
  + Don't wrap names after . or _
  + Fix rubberband selection when using wacom tablets.
  + Fix crash in batch renaming.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 3.25.1:
  + Ported to Meson build system.
  + Fix replacing directory with symlink.
  + Avoid extraction of files if not enough space.
  + Fix not being able to drag the window from the path bar.
  + Add user preference for using the new views.
  + Fix DnD when using Google Drive.
- Add meson BuildRequires and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson build system.
- Due to above change, no longer pass --disable-update-mimedb and
  - -enable-gtk-doc to configure, instead pass enable-exif=true,
  enable-gtk-doc=true and enable-xmp=true to meson macro. We want
  to build gtk-docs, exif and xmp support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638400">- Add nautilus-tracker-2_0.patch: Fix build with tracker-2.0, patch
  from upstream git.
- Following above patch, replace pkgconfig(tracker-sparql-1.0) with
  pkgconfig(tracker-sparql-2.0) BuildRequires.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un), icon_theme_cache_post(un) and
  mime_database_post(un) in post(un), no longer needed as we have
  file-triggers to take care of this for us now.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502712000">- Update to version 3.25.90:
  + Fix use of return key for conflict dialog.
  + Fix use of return key when searching not activating the
    selected file.
  + Add stable Flatpak builds.
  + Fix wrapping file names after a dot.
  + Use header bar for all dialogs.
  + Use portals for launching files in a sandbox with Flatpak.
  + Show error on empty name on batch rename dialog.
  + Change keyboard shortcuts for navigation of tabs similar to
    Firefox/Chrome etc.
  + Add a restore tab funcionality, similar to web browsers.
  + Fix rubberband with Wacom tablets.
  + Add Full Text Search (fts) to Nautilus so we search inside
    files content too.
  + Disable create link when clipboard is empty.
  + Disable zoom button if percentage is 100%.
  + Bump Tracker dependency to version 2.0.
  + Make Tracker a hard dependency.
  + Assume Nautilus project is GPL3+.
  + Allow decompressing archives on remote locations.
  + Add license (LGPL2.1+)to Nautilus extensions.
  + Only use location in description for GNOME Shell search.
  + Add tablet pad controllers for common actions.
  + Fix &lt;ctrl&gt;+z when renaming a file not undoing the text.
  + Use upstream and newer fallback icons.
  + Provide mime type support for compressed archives, so Nautilus
    can be used for handling compressed archives outside of
    Nautilus too.
- Drop nautilus-tracker-2_0.patch: Fixed upstream.
- Relicense spec following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504353600">- Update to version 3.25.92:
  + Fix desktop file parsing errors.
  + Bump GTK+ dependency version to 3.22.6.
  + Add mnemonic to replace button in file conflict dialog.
  + Show prefix matches first when searching.
  + Enable keyboard navigation in search type list.
  + Fix list view column picker not being centered in certain
    locales.
  + Make the path bar a drop target for files again.
  + Make sidebar visibility setting persistent.
  + Use spin button for thumbnailable file size limit setting.
  + Only allow directories to be dragged onto sidebar for
    bookmarking.
  + Make path bar clicks add new history entries.
  + Allow hiding unfocused search bar by pressing Escape.
  + Hide location entry after losing keyboard focus.
  + Allow deleting files with numpad delete key.
  + Forbid overwriting directories with files.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Update to version 3.26.2:
  + Fix crash in list view when expanding folders.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="xwang@suse.com" date="1535371200">- Add set_trusted.desktop and set_trusted.sh: If using /etc/skel
  function, the script can set files in $HOME/Desktop as trusted
  automatically when user login (bsc#1103523).</changelog>
  <changelog author="xwang@suse.com" date="1538049600">- Update set_trusted.desktop and set_trusted.sh: Move
  set_trusted.desktop file to /etc/skel/.config/autostart
  (bsc#1103523 bsc#1107854).</changelog>
</package>
<package pkgid="b5ff0b502e5f132169b05c254c9eeafa2c58649bb6838245b757c6abe5ac24e4" name="gnuhealth" arch="noarch">
  <version epoch="0" ver="3.2.10" rel="lp150.5.10.1"/>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
  <changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
  <changelog author="axel.braun@gmx.de" date="1512561600">- Version 3.2.9
  Fix bug #52580: Removing the patient field before saving the record generates an error
  Fix bug #52579: some on_change numeric method operations generate traceback
  Fix bug #52578: WHR should be on the same line as hip and waist fields</changelog>
  <changelog author="axel.braun@gmx.de" date="1512820800">- documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1514548800">- typo in documentation corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1516363200">- added gnuhealth-client to documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1528200000">- Version 3.2.10
  bug #54055: Caldav event does not update after changing the appointment</changelog>
  <changelog author="axel.braun@gmx.de" date="1529496000">- gnuhealth-control: added info about backup file
  openSUSE-gnuhealth-setup added</changelog>
  <changelog author="axel.braun@gmx.de" date="1531828800">- openSUSE-gnuhealth-setup: User tryton set to SUPERUSER
  Documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1535371200">- Adding a dummy executable called 'gnuhealth' with some help text
  (boo#1107771)</changelog>
</package>
<package pkgid="8670e2538f53c3851372cffe3ce9265a4d8f5fdaed782fa56d591893b6764925" name="gnuhealth" arch="src">
  <version epoch="0" ver="3.2.10" rel="lp150.5.10.1"/>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
  <changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
  <changelog author="axel.braun@gmx.de" date="1512561600">- Version 3.2.9
  Fix bug #52580: Removing the patient field before saving the record generates an error
  Fix bug #52579: some on_change numeric method operations generate traceback
  Fix bug #52578: WHR should be on the same line as hip and waist fields</changelog>
  <changelog author="axel.braun@gmx.de" date="1512820800">- documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1514548800">- typo in documentation corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1516363200">- added gnuhealth-client to documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1528200000">- Version 3.2.10
  bug #54055: Caldav event does not update after changing the appointment</changelog>
  <changelog author="axel.braun@gmx.de" date="1529496000">- gnuhealth-control: added info about backup file
  openSUSE-gnuhealth-setup added</changelog>
  <changelog author="axel.braun@gmx.de" date="1531828800">- openSUSE-gnuhealth-setup: User tryton set to SUPERUSER
  Documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1535371200">- Adding a dummy executable called 'gnuhealth' with some help text
  (boo#1107771)</changelog>
</package>
<package pkgid="fb880dca96f9fa43a85160a8b1a91eac258c3aab7c4a421db7a31cfb95195fdd" name="gnuhealth" arch="noarch">
  <version epoch="0" ver="3.2.10" rel="lp150.5.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
  <changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
  <changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
  <changelog author="axel.braun@gmx.de" date="1512561600">- Version 3.2.9
  Fix bug #52580: Removing the patient field before saving the record generates an error
  Fix bug #52579: some on_change numeric method operations generate traceback
  Fix bug #52578: WHR should be on the same line as hip and waist fields</changelog>
  <changelog author="axel.braun@gmx.de" date="1512820800">- documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1514548800">- typo in documentation corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1516363200">- added gnuhealth-client to documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1528200000">- Version 3.2.10
  bug #54055: Caldav event does not update after changing the appointment</changelog>
</package>
<package pkgid="2e5faea60be369403c49e94994a11120e419b29c644a56a795861bae632e84ec" name="gnuhealth" arch="src">
  <version epoch="0" ver="3.2.10" rel="lp150.5.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
  <changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
  <changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
  <changelog author="axel.braun@gmx.de" date="1512561600">- Version 3.2.9
  Fix bug #52580: Removing the patient field before saving the record generates an error
  Fix bug #52579: some on_change numeric method operations generate traceback
  Fix bug #52578: WHR should be on the same line as hip and waist fields</changelog>
  <changelog author="axel.braun@gmx.de" date="1512820800">- documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1514548800">- typo in documentation corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1516363200">- added gnuhealth-client to documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1528200000">- Version 3.2.10
  bug #54055: Caldav event does not update after changing the appointment</changelog>
</package>
<package pkgid="c6fe61b16f738519e5de54ddf496f5c558876261191d20378bfa6d5ff4a89bcd" name="gnuhealth" arch="noarch">
  <version epoch="0" ver="3.2.10" rel="lp150.5.6.1"/>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
  <changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
  <changelog author="axel.braun@gmx.de" date="1512561600">- Version 3.2.9
  Fix bug #52580: Removing the patient field before saving the record generates an error
  Fix bug #52579: some on_change numeric method operations generate traceback
  Fix bug #52578: WHR should be on the same line as hip and waist fields</changelog>
  <changelog author="axel.braun@gmx.de" date="1512820800">- documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1514548800">- typo in documentation corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1516363200">- added gnuhealth-client to documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1528200000">- Version 3.2.10
  bug #54055: Caldav event does not update after changing the appointment</changelog>
  <changelog author="axel.braun@gmx.de" date="1529496000">- gnuhealth-control: added info about backup file
  openSUSE-gnuhealth-setup added</changelog>
  <changelog author="axel.braun@gmx.de" date="1531828800">- openSUSE-gnuhealth-setup: User tryton set to SUPERUSER
  Documentation updated</changelog>
</package>
<package pkgid="99e5591c0a10d4f39b01840afc4208baa4f256fc1576943a06263e2c2147a638" name="gnuhealth" arch="src">
  <version epoch="0" ver="3.2.10" rel="lp150.5.6.1"/>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
  <changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
  <changelog author="axel.braun@gmx.de" date="1512561600">- Version 3.2.9
  Fix bug #52580: Removing the patient field before saving the record generates an error
  Fix bug #52579: some on_change numeric method operations generate traceback
  Fix bug #52578: WHR should be on the same line as hip and waist fields</changelog>
  <changelog author="axel.braun@gmx.de" date="1512820800">- documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1514548800">- typo in documentation corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1516363200">- added gnuhealth-client to documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1528200000">- Version 3.2.10
  bug #54055: Caldav event does not update after changing the appointment</changelog>
  <changelog author="axel.braun@gmx.de" date="1529496000">- gnuhealth-control: added info about backup file
  openSUSE-gnuhealth-setup added</changelog>
  <changelog author="axel.braun@gmx.de" date="1531828800">- openSUSE-gnuhealth-setup: User tryton set to SUPERUSER
  Documentation updated</changelog>
</package>
<package pkgid="5cdb1bbdaea3d371ea965f88076c9d842b8cb67d1cda09177bc570f2cd7225f7" name="gnutls" arch="src">
  <version epoch="0" ver="3.6.2" rel="lp150.4.3.1"/>
  <changelog author="astieger@suse.com" date="1496577600">- GnuTLS 3.5.12:
  * libgnutls: gnutls_x509_crt_check_hostname2() no longer matches
    IP addresses against DNS fields of certificate (CN or DNSname).
    The previous behavior was to tolerate some misconfigured
    servers, but that was non-standard and skipped any IP
    constraints present in higher level certificates.
  * libgnutls: when converting to IDNA2008, fallback to IDNA2003
    (i.e., transitional encoding) if the domain cannot be converted.
    That provides maximum compatibility with browsers like firefox
    that perform the same conversion.
  * libgnutls: fix issue in RSA-PSK client callback which resulted
    in no username being sent to the peer
  * libgnutls: fix regression causing stapled extensions in trust
    modules not to be considered.
  * certtool: introduced the email_protection_key option.  This
    option was introduced in documentation for certtool without an
    implementation of it. It is a shortcut for option
  'key_purpose_oid = 1.3.6.1.5.5.7.3.4'.
  * certtool: made printing of key ID and key PIN consistent
    between certificates, public keys, and private keys. That is
    the private key printing now uses the same format as the rest.
  * gnutls-cli: introduced the --sni-hostname option. This allows
    overriding the hostname advertised to the peer.</changelog>
  <changelog author="astieger@suse.com" date="1496923200">- GnuTLS 3.5.13:
  * libgnutls: fixed issue with AES-GCM in-place encryption and
    decryption in aarch64
  * libgnutls: no longer parse the ResponseID field of the status
    response TLS extension. The field is not used by GnuTLS nor is
    made available to calling applications. That addresses a null
    pointer dereference on server side caused by packets containing
    the ResponseID field. GNUTLS-SA-2017-4, bsc#1043398
  * libgnutls: tolerate certificates which do not have strict DER
    time encoding. It is possible using 3rd party tools to generate
    certificates with time fields that do not conform to DER
    requirements. Since 3.4.x these certificates were rejected and
    cannot be used with GnuTLS, however that caused problems with
    existing private certificate infrastructures, which were
    relying on such certificates. Tolerate reading and using these
    certificates.
  * minitasn1: updated to libtasn1 4.11.
  * certtool: allow multiple certificates to be used in --p7-sign
    with the --load-certificate option</changelog>
  <changelog author="astieger@suse.com" date="1499169600">- GnuTLS 3.5.14:
  * Handle specially HSMs which request explicit authentication
  * he GNUTLS_PKCS11_OBJ_FLAG_LOGIN will force a login on HSMs
  * do not set leading zeros when copying integers on HSMs
  * Fix issue discovering certain OCSP signers, and improved the
    discovery of OCSP signer in the case where the Subject Public
    Key identifier field matches
  * ensure OCSP responses are saved with --save-ocsp even if
    certificate verification fails.</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Drop the deprecated openssl compat ; discussed and suggested by
  vcizek
- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
</package>
<package pkgid="c87f1901ffd0ef10fa7b93a3ff983d557eee1de0142dec4930e8465a58878d4e" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.6.2" rel="lp150.4.3.1"/>
  <changelog author="astieger@suse.com" date="1496577600">- GnuTLS 3.5.12:
  * libgnutls: gnutls_x509_crt_check_hostname2() no longer matches
    IP addresses against DNS fields of certificate (CN or DNSname).
    The previous behavior was to tolerate some misconfigured
    servers, but that was non-standard and skipped any IP
    constraints present in higher level certificates.
  * libgnutls: when converting to IDNA2008, fallback to IDNA2003
    (i.e., transitional encoding) if the domain cannot be converted.
    That provides maximum compatibility with browsers like firefox
    that perform the same conversion.
  * libgnutls: fix issue in RSA-PSK client callback which resulted
    in no username being sent to the peer
  * libgnutls: fix regression causing stapled extensions in trust
    modules not to be considered.
  * certtool: introduced the email_protection_key option.  This
    option was introduced in documentation for certtool without an
    implementation of it. It is a shortcut for option
  'key_purpose_oid = 1.3.6.1.5.5.7.3.4'.
  * certtool: made printing of key ID and key PIN consistent
    between certificates, public keys, and private keys. That is
    the private key printing now uses the same format as the rest.
  * gnutls-cli: introduced the --sni-hostname option. This allows
    overriding the hostname advertised to the peer.</changelog>
  <changelog author="astieger@suse.com" date="1496923200">- GnuTLS 3.5.13:
  * libgnutls: fixed issue with AES-GCM in-place encryption and
    decryption in aarch64
  * libgnutls: no longer parse the ResponseID field of the status
    response TLS extension. The field is not used by GnuTLS nor is
    made available to calling applications. That addresses a null
    pointer dereference on server side caused by packets containing
    the ResponseID field. GNUTLS-SA-2017-4, bsc#1043398
  * libgnutls: tolerate certificates which do not have strict DER
    time encoding. It is possible using 3rd party tools to generate
    certificates with time fields that do not conform to DER
    requirements. Since 3.4.x these certificates were rejected and
    cannot be used with GnuTLS, however that caused problems with
    existing private certificate infrastructures, which were
    relying on such certificates. Tolerate reading and using these
    certificates.
  * minitasn1: updated to libtasn1 4.11.
  * certtool: allow multiple certificates to be used in --p7-sign
    with the --load-certificate option</changelog>
  <changelog author="astieger@suse.com" date="1499169600">- GnuTLS 3.5.14:
  * Handle specially HSMs which request explicit authentication
  * he GNUTLS_PKCS11_OBJ_FLAG_LOGIN will force a login on HSMs
  * do not set leading zeros when copying integers on HSMs
  * Fix issue discovering certain OCSP signers, and improved the
    discovery of OCSP signer in the case where the Subject Public
    Key identifier field matches
  * ensure OCSP responses are saved with --save-ocsp even if
    certificate verification fails.</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Drop the deprecated openssl compat ; discussed and suggested by
  vcizek
- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
</package>
<package pkgid="e12d408970ffae7abe346eef31db37c4f447a722de460963fae1eab162b82e4c" name="gnutls-guile" arch="x86_64">
  <version epoch="0" ver="3.6.2" rel="lp150.4.3.1"/>
  <changelog author="astieger@suse.com" date="1496577600">- GnuTLS 3.5.12:
  * libgnutls: gnutls_x509_crt_check_hostname2() no longer matches
    IP addresses against DNS fields of certificate (CN or DNSname).
    The previous behavior was to tolerate some misconfigured
    servers, but that was non-standard and skipped any IP
    constraints present in higher level certificates.
  * libgnutls: when converting to IDNA2008, fallback to IDNA2003
    (i.e., transitional encoding) if the domain cannot be converted.
    That provides maximum compatibility with browsers like firefox
    that perform the same conversion.
  * libgnutls: fix issue in RSA-PSK client callback which resulted
    in no username being sent to the peer
  * libgnutls: fix regression causing stapled extensions in trust
    modules not to be considered.
  * certtool: introduced the email_protection_key option.  This
    option was introduced in documentation for certtool without an
    implementation of it. It is a shortcut for option
  'key_purpose_oid = 1.3.6.1.5.5.7.3.4'.
  * certtool: made printing of key ID and key PIN consistent
    between certificates, public keys, and private keys. That is
    the private key printing now uses the same format as the rest.
  * gnutls-cli: introduced the --sni-hostname option. This allows
    overriding the hostname advertised to the peer.</changelog>
  <changelog author="astieger@suse.com" date="1496923200">- GnuTLS 3.5.13:
  * libgnutls: fixed issue with AES-GCM in-place encryption and
    decryption in aarch64
  * libgnutls: no longer parse the ResponseID field of the status
    response TLS extension. The field is not used by GnuTLS nor is
    made available to calling applications. That addresses a null
    pointer dereference on server side caused by packets containing
    the ResponseID field. GNUTLS-SA-2017-4, bsc#1043398
  * libgnutls: tolerate certificates which do not have strict DER
    time encoding. It is possible using 3rd party tools to generate
    certificates with time fields that do not conform to DER
    requirements. Since 3.4.x these certificates were rejected and
    cannot be used with GnuTLS, however that caused problems with
    existing private certificate infrastructures, which were
    relying on such certificates. Tolerate reading and using these
    certificates.
  * minitasn1: updated to libtasn1 4.11.
  * certtool: allow multiple certificates to be used in --p7-sign
    with the --load-certificate option</changelog>
  <changelog author="astieger@suse.com" date="1499169600">- GnuTLS 3.5.14:
  * Handle specially HSMs which request explicit authentication
  * he GNUTLS_PKCS11_OBJ_FLAG_LOGIN will force a login on HSMs
  * do not set leading zeros when copying integers on HSMs
  * Fix issue discovering certain OCSP signers, and improved the
    discovery of OCSP signer in the case where the Subject Public
    Key identifier field matches
  * ensure OCSP responses are saved with --save-ocsp even if
    certificate verification fails.</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Drop the deprecated openssl compat ; discussed and suggested by
  vcizek
- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
</package>
<package pkgid="ddbf3b9f199e1003bbd3237815c40f94ecfb82f6833a62012bba5f4c42730e70" name="go" arch="src">
  <version epoch="0" ver="1.9.7" rel="lp150.2.4.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="34003fa1e564648a0f777585d2450d1d72c2d8ac85622f29f888bd8f50cea971" name="go" arch="x86_64">
  <version epoch="0" ver="1.9.7" rel="lp150.2.4.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="0f4cc5930f57be722d165a5e74792ad352285e1b1285afbe9f6a5da978782667" name="go-doc" arch="x86_64">
  <version epoch="0" ver="1.9.7" rel="lp150.2.4.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="91abee5d2b0d32b0c05da840c48cd94e412fdbc2d396f63264a1c2e4d3d50b86" name="go-race" arch="x86_64">
  <version epoch="0" ver="1.9.7" rel="lp150.2.4.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="fcdf9eb7c8fb44c52dfea5d893672d85677b7109bcc71db2c58389f777532ae6" name="go1.9" arch="src">
  <version epoch="0" ver="1.9.7" rel="lp150.2.4.2"/>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- fix various issues in go trace (bsc#1085785):
  * Ensure go binaries are not stripped (eg: go tools trace), this
    caused some of them to misbehave
  * Ensure go trace html template is shipped as part of the
    installation, otherwise the web UI won't work
  * Fix license of go race</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version 1.9.7:
  * go1.9.7 (released 2018/06/05) includes fixes to the go command,
    and the crypto/x509, and strings packages. In particular, it adds
    minimal support to the go command for the vgo transition. See the
    Go 1.9.7 milestone on our issue tracker for details.
- Changes in version 1.9.6:
  * go1.9.6 (released 2018/05/01) includes fixes to the compiler and
    go command. See the Go 1.9.6 milestone on our issue tracker for details.
- Changes in version 1.9.5:
  * go1.9.5 (released 2018/03/28) includes fixes to the compiler, go
    command, and net/http/pprof package. See the Go 1.9.5 milestone
    on our issue tracker for details.
    Includes fix for bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="d35dfc5f2373dd5882e53c29dde37d7075be3205b2c88445c653c44a1e8c9ec3" name="go1.9" arch="x86_64">
  <version epoch="0" ver="1.9.7" rel="lp150.2.4.2"/>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- fix various issues in go trace (bsc#1085785):
  * Ensure go binaries are not stripped (eg: go tools trace), this
    caused some of them to misbehave
  * Ensure go trace html template is shipped as part of the
    installation, otherwise the web UI won't work
  * Fix license of go race</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version 1.9.7:
  * go1.9.7 (released 2018/06/05) includes fixes to the go command,
    and the crypto/x509, and strings packages. In particular, it adds
    minimal support to the go command for the vgo transition. See the
    Go 1.9.7 milestone on our issue tracker for details.
- Changes in version 1.9.6:
  * go1.9.6 (released 2018/05/01) includes fixes to the compiler and
    go command. See the Go 1.9.6 milestone on our issue tracker for details.
- Changes in version 1.9.5:
  * go1.9.5 (released 2018/03/28) includes fixes to the compiler, go
    command, and net/http/pprof package. See the Go 1.9.5 milestone
    on our issue tracker for details.
    Includes fix for bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="ed3bef500f1ef4d511fac6692c125e382d475b326a5f725bbfbe4000c195b61b" name="go1.9-doc" arch="x86_64">
  <version epoch="0" ver="1.9.7" rel="lp150.2.4.2"/>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- fix various issues in go trace (bsc#1085785):
  * Ensure go binaries are not stripped (eg: go tools trace), this
    caused some of them to misbehave
  * Ensure go trace html template is shipped as part of the
    installation, otherwise the web UI won't work
  * Fix license of go race</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version 1.9.7:
  * go1.9.7 (released 2018/06/05) includes fixes to the go command,
    and the crypto/x509, and strings packages. In particular, it adds
    minimal support to the go command for the vgo transition. See the
    Go 1.9.7 milestone on our issue tracker for details.
- Changes in version 1.9.6:
  * go1.9.6 (released 2018/05/01) includes fixes to the compiler and
    go command. See the Go 1.9.6 milestone on our issue tracker for details.
- Changes in version 1.9.5:
  * go1.9.5 (released 2018/03/28) includes fixes to the compiler, go
    command, and net/http/pprof package. See the Go 1.9.5 milestone
    on our issue tracker for details.
    Includes fix for bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="16c11b5375eab2f2e811434555f80052859940a57283abe98524e3494dc8cc01" name="go1.9-race" arch="x86_64">
  <version epoch="0" ver="1.9.7" rel="lp150.2.4.2"/>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- fix various issues in go trace (bsc#1085785):
  * Ensure go binaries are not stripped (eg: go tools trace), this
    caused some of them to misbehave
  * Ensure go trace html template is shipped as part of the
    installation, otherwise the web UI won't work
  * Fix license of go race</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version 1.9.7:
  * go1.9.7 (released 2018/06/05) includes fixes to the go command,
    and the crypto/x509, and strings packages. In particular, it adds
    minimal support to the go command for the vgo transition. See the
    Go 1.9.7 milestone on our issue tracker for details.
- Changes in version 1.9.6:
  * go1.9.6 (released 2018/05/01) includes fixes to the compiler and
    go command. See the Go 1.9.6 milestone on our issue tracker for details.
- Changes in version 1.9.5:
  * go1.9.5 (released 2018/03/28) includes fixes to the compiler, go
    command, and net/http/pprof package. See the Go 1.9.5 milestone
    on our issue tracker for details.
    Includes fix for bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="4fee750f724eb060b16dc4d00dcab3dab4b328e6727198df4beb74138c1f7303" name="google-compute-engine" arch="src">
  <version epoch="0" ver="20180510" rel="lp150.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1476878400">- Package the rsyslog config unconditionally, rsyslog also available on
  SLE 11</changelog>
  <changelog author="rjschwei@suse.com" date="1476878401">- Add gcei-handle-failed-open.patch
  * Do not exit with a traceback if the sudoers file cannot be written</changelog>
  <changelog author="rjschwei@suse.com" date="1476964800">- Update gcei-handle-failed-open.patch to match upstream PR</changelog>
  <changelog author="rjschwei@suse.com" date="1477483200">- Include in SLE 12 and SLE 11 (FATE#321748, FATE#321890, bsc#994943)</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
</package>
<package pkgid="b22fce368f5a57815b658a20f68e97873ffae90237ccbcb0393f658fba3b9a8d" name="google-compute-engine" arch="src">
  <version epoch="0" ver="20180510" rel="lp150.2.6.1"/>
  <changelog author="rjschwei@suse.com" date="1476878400">- Add gcei-handle-failed-open.patch
  * Do not exit with a traceback if the sudoers file cannot be written</changelog>
  <changelog author="rjschwei@suse.com" date="1476964800">- Update gcei-handle-failed-open.patch to match upstream PR</changelog>
  <changelog author="rjschwei@suse.com" date="1477483200">- Include in SLE 12 and SLE 11 (FATE#321748, FATE#321890, bsc#994943)</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
</package>
<package pkgid="1ddf8bc46f96c9b6534a6b412a3cb2949b8174db4b8e00936328e96cd37cfcf6" name="google-compute-engine" arch="src">
  <version epoch="0" ver="20180510" rel="lp150.2.9.1"/>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
</package>
<package pkgid="29bddbf706465d347fabe78ea8026dde4eb2e394a155b7b1b03e92e2e8336ebf" name="google-compute-engine-init" arch="noarch">
  <version epoch="0" ver="20180510" rel="lp150.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1476878400">- Package the rsyslog config unconditionally, rsyslog also available on
  SLE 11</changelog>
  <changelog author="rjschwei@suse.com" date="1476878401">- Add gcei-handle-failed-open.patch
  * Do not exit with a traceback if the sudoers file cannot be written</changelog>
  <changelog author="rjschwei@suse.com" date="1476964800">- Update gcei-handle-failed-open.patch to match upstream PR</changelog>
  <changelog author="rjschwei@suse.com" date="1477483200">- Include in SLE 12 and SLE 11 (FATE#321748, FATE#321890, bsc#994943)</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
</package>
<package pkgid="63630ecefaeb84f5e5d3c429354164bd9bd56a45dd69d234c266f230d3455f4f" name="google-compute-engine-init" arch="noarch">
  <version epoch="0" ver="20180510" rel="lp150.2.6.1"/>
  <changelog author="rjschwei@suse.com" date="1476878400">- Add gcei-handle-failed-open.patch
  * Do not exit with a traceback if the sudoers file cannot be written</changelog>
  <changelog author="rjschwei@suse.com" date="1476964800">- Update gcei-handle-failed-open.patch to match upstream PR</changelog>
  <changelog author="rjschwei@suse.com" date="1477483200">- Include in SLE 12 and SLE 11 (FATE#321748, FATE#321890, bsc#994943)</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
</package>
<package pkgid="b3923efbac2f42219ac3dbdcffce93b81c9afe817608e9975463463032c08f18" name="google-compute-engine-init" arch="noarch">
  <version epoch="0" ver="20180510" rel="lp150.2.9.1"/>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
</package>
<package pkgid="ccc570dddad05dbf606ab4e0e355066a78af8d81fd61ae83b982f58c6584e856" name="google-compute-engine-oslogin" arch="x86_64">
  <version epoch="0" ver="20180510" rel="lp150.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1476878400">- Package the rsyslog config unconditionally, rsyslog also available on
  SLE 11</changelog>
  <changelog author="rjschwei@suse.com" date="1476878401">- Add gcei-handle-failed-open.patch
  * Do not exit with a traceback if the sudoers file cannot be written</changelog>
  <changelog author="rjschwei@suse.com" date="1476964800">- Update gcei-handle-failed-open.patch to match upstream PR</changelog>
  <changelog author="rjschwei@suse.com" date="1477483200">- Include in SLE 12 and SLE 11 (FATE#321748, FATE#321890, bsc#994943)</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
</package>
<package pkgid="5991da00a467bdc26f0d54108d0fe0c722ab41c62856da9336315a79c7406b71" name="google-compute-engine-oslogin" arch="x86_64">
  <version epoch="0" ver="20180510" rel="lp150.2.6.1"/>
  <changelog author="rjschwei@suse.com" date="1476878400">- Add gcei-handle-failed-open.patch
  * Do not exit with a traceback if the sudoers file cannot be written</changelog>
  <changelog author="rjschwei@suse.com" date="1476964800">- Update gcei-handle-failed-open.patch to match upstream PR</changelog>
  <changelog author="rjschwei@suse.com" date="1477483200">- Include in SLE 12 and SLE 11 (FATE#321748, FATE#321890, bsc#994943)</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
</package>
<package pkgid="24fc33ec63abe80aa1c3e67b04bd4192e4145e0520a0f3b7186e38fc547c4da2" name="google-compute-engine-oslogin" arch="x86_64">
  <version epoch="0" ver="20180510" rel="lp150.2.9.1"/>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
</package>
<package pkgid="801eea55dacc89651b562175231c4946a1eab849a813c323ca716aea717b22b6" name="google-compute-engine-oslogin-32bit" arch="x86_64">
  <version epoch="0" ver="20180510" rel="lp150.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1476878400">- Package the rsyslog config unconditionally, rsyslog also available on
  SLE 11</changelog>
  <changelog author="rjschwei@suse.com" date="1476878401">- Add gcei-handle-failed-open.patch
  * Do not exit with a traceback if the sudoers file cannot be written</changelog>
  <changelog author="rjschwei@suse.com" date="1476964800">- Update gcei-handle-failed-open.patch to match upstream PR</changelog>
  <changelog author="rjschwei@suse.com" date="1477483200">- Include in SLE 12 and SLE 11 (FATE#321748, FATE#321890, bsc#994943)</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
</package>
<package pkgid="a8804bbce23bceb3d729e17406c3e5c4ade5892e478f521a79ac08f02cbed327" name="google-compute-engine-oslogin-32bit" arch="x86_64">
  <version epoch="0" ver="20180510" rel="lp150.2.6.1"/>
  <changelog author="rjschwei@suse.com" date="1476878400">- Add gcei-handle-failed-open.patch
  * Do not exit with a traceback if the sudoers file cannot be written</changelog>
  <changelog author="rjschwei@suse.com" date="1476964800">- Update gcei-handle-failed-open.patch to match upstream PR</changelog>
  <changelog author="rjschwei@suse.com" date="1477483200">- Include in SLE 12 and SLE 11 (FATE#321748, FATE#321890, bsc#994943)</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
</package>
<package pkgid="bee470692f2cc6192230d41d152e3467b824a84f74c5e4d9d375ddb7dd633c46" name="gpg2" arch="src">
  <version epoch="0" ver="2.2.5" rel="lp150.3.3.1"/>
  <changelog author="astieger@suse.com" date="1482667200">- add runtime dependency to match runtime version check for libksba</changelog>
  <changelog author="tchvatal@suse.com" date="1483963200">- Remove the fixme, condition around fdupes</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- GnuPG 2.1.18:
  * gpg: Remove bogus subkey signature while cleaning a key (with
    export-clean, import-clean, or --edit-key's sub-command clean)
  * gpg: Allow freezing the clock with --faked-system-time.
  * gpg: New --export-option flag "backup", new --import-option flag
    "restore".
  * gpg-agent: Fixed long delay due to a regression in the progress
    callback code.
  * scd: Lots of code cleanup and internal changes.
  * scd: Improved the internal CCID driver.
  * dirmngr: Fixed problem with the DNS glue code (removal of the
    trailing dot in domain names).
  * dirmngr: Make sure that Tor is actually enabled after changing the
    conf file and sending SIGHUP or "gpgconf --reload dirmngr".
  * dirmngr: Fixed Tor access to IPv6 addresses.  Note that current
    versions of Tor may require that the flag "IPv6Traffic" is used
    with the option "SocksPort" in torrc to actually allow IPv6
    traffic.
  * dirmngr: Fixed HKP for literally given IPv6 addresses.
  * dirmngr: Enabled reverse DNS lookups via Tor.
  * dirmngr: Added experimental SRV record lookup for WKD.
    See commit 88dc3af3d4ae1afe1d5e136bc4c38bc4e7d4cd10 for details.
  * dirmngr: For HKP use "pgpkey-hkps" and "pgpkey-hkp" in SRV record
    lookups.  Avoid SRV record lookup when a port is explicitly
    specified.  This fixes a regression from the 1.4 and 2.0 behavior.
  * dirmngr: Gracefully handle a missing /etc/nsswitch.conf.  Ignore
    negation terms (e.g. "[!UNAVAIL=return]" instead of bailing out.
  * dirmngr: Better debug output for flags "dns" and "network".
  * dirmngr: On reload mark all known HKP servers alive.
  * gpgconf: Allow keyword "all" for --launch, --kill, and --reload.
  * tools: gpg-wks-client now ignores a missing policy file on the
    server.
  * Avoid unnecessary ambiguity error message in the option parsing.
  * Further improvements of the regression test suite.
  * Fixed building with --disable-libdns configure option.
  * Fixed a crash running the tests on 32 bit architectures.
  * Fixed spurious failures on BSD system in the spawn functions.
    This affected for example gpg-wks-client and gpgconf.</changelog>
  <changelog author="jengelh@inai.de" date="1488456000">- Rewrite descriptions</changelog>
  <changelog author="astieger@suse.com" date="1488888000">- GnuPG 2.1.19:
  * gpg: Print a warning if Tor mode is requested but the Tor
    daemon is not running.
  * gpg: New status code DECRYPTION_KEY to print the actual private
    key used for decryption.
  * gpgv: New options --log-file and --debug.
  * gpg-agent: Revamp the prompts to ask for card PINs.
  * scd: Support for multiple card readers.
  * scd: Removed option --debug-disable-ticker. Ticker is used
    only when it is required to watch removal of device/card.
  * scd: Improved detection of card inserting and removal.
  * dirmngr: New option --disable-ipv4.
  * dirmngr: New option --no-use-tor to explicitly disable the use
    of Tor.
  * dirmngr: The option --allow-version-check is now required even
    if the option --use-tor is also used.
  * dirmngr: Handle a missing nsswitch.conf gracefully.
  * dirmngr: Avoid PTR lookups for keyserver pools. The are only
    done for the debug command "keyserver --hosttable".
  * dirmngr: Rework the internal certificate cache to support
    classes of certificates. Load system provided certificates on
    startup.
  * Add options --tls, --no-crl, and --systrust to the "VALIDATE"
    command.
  * dirmngr: Add support for the ntbtls library.
  * wks: Create mails with a "WKS-Phase" header. Fix detection of
    Draft-2 mode.
  * Many other bug fixes and new regression tests.
- dirmngr: use system certificate store</changelog>
  <changelog author="astieger@suse.com" date="1489492800">- Use stronger defaults for new users, using SHA-2 digest family
  for certificates and message signatures - FATE#323084
  adding gnupg-2.1.19-stronger-defaults.patch</changelog>
  <changelog author="astieger@suse.com" date="1491307200">- GnuPG 2.1.20:
  * gpg: New properties 'expired', 'revoked', and 'disabled' for the
    import and export filters.
  * gpg: New command --quick-set-primary-uid.
  * gpg: New compliance field for the --with-colon key listing.
  * gpg: Changed the key parser to generalize the processing of local
    meta data packets.
  * gpg: Fixed assertion failure in the TOFU trust model.
  * gpg: Fixed exporting of zero length user ID packets.
  * scd: Improved support for multiple readers.
  * scd: Fixed timeout handling for key generation.
  * agent: New option --enable-extended-key-format.
  * dirmngr: Do not add a keyserver to a new dirmngr.conf.  Dirmngr
    uses a default keyserver.
  * dimngr: Do not treat TLS warning alerts as severe error when
    building with GNUTLS.
  * dirmngr: Actually take /etc/hosts in account.
  * wks: Fixed client problems on Windows.  Published keys are now set
    to world-readable.
  * tests: Fixed creation of temporary directories.
  * A socket directory for a non standard GNUGHOME is now created on
    the fly under /run/user.  Thus "gpgconf --create-socketdir" is now
    optional.  The use of "gpgconf --remove-socketdir" to clean up
    obsolete socket directories is however recommended to avoid
    cluttering /run/user with useless directories.
  * Fixed build problems on some platforms.</changelog>
  <changelog author="astieger@suse.com" date="1494849600">- GnuPG 2.1.21:
  * gpg,gpgsm: Fix corruption of old style keyring.gpg files,
    regression in 2.1.20
  * gpg,dirmngr: Removed the skeleton config file support
    New installations no longer generate a configuration file.
    In the absence of a file, SHA-2 family hashes are used.
    Existing configurations are not touched.
    drop gnupg-2.1.19-stronger-defaults.patch FATE#323084
  * gpg: Fixed import filter property match bug.
  * scd: Removed Linux support for Cardman 4040 PCMCIA reader.
  * scd: Fixed some corner case bugs in resume/suspend handling.
  * Many minor bug fixes and code cleanup.</changelog>
  <changelog author="marco.strigl@suse.com" date="1495195200">- GnuPG 2.1.21:
  * modified gnupg-2.0.18-files-are-digests.patch to work with
    obs-sign again bsc#1039899</changelog>
  <changelog author="astieger@suse.com" date="1501243200">- GnuPG 2.1.22:
  * gpg: Extend command --quick-set-expire to allow for setting the
    expiration time of subkeys.
  * gpg: By default try to repair keys during import. New sub-option
    no-repair-keys for --import-options.
  * gpg,gpgsm: Improved checking and reporting of DE-VS compliance.
  * gpg: New options --key-origin and --with-key-origin. Store the
    time of the last key update from keyservers, WKD, or DANE.
  * agent: New option --ssh-fingerprint-digest.
  * dimngr: Lower timeouts on keyserver connection attempts and made
    it configurable.
  * dirmngr: Tor will now automatically be detected and used. The
    option --no-use-tor disables Tor detection.
  * dirmngr: Now detects a changed /etc/resolv.conf.
  * agent,dirmngr: Initiate shutdown on removal of the GnuPG home
    directory.
  * gpg: Avoid caching passphrase for failed symmetric encryption.
  * agent: Support for unprotected ssh keys.
  * dirmngr: Fixed name resolving on systems using only v6
    nameservers.
  * dirmngr: Allow the use of TLS over http proxies.
  * wks: New man pages for client and server.</changelog>
  <changelog author="astieger@suse.com" date="1502539200">- GnuPG 2.1.23:
  * gpg: Options --auto-key-retrieve and --auto-key-locate "local,wkd"
    are now used by default.  Note: this enables keyserver and Web Key
    Directory operators to notice when a signature from a locally
    non-available key is being verified for the first time or when
    you intend to encrypt to a mail address without having the key
    locally.  This new behaviour will eventually make key discovery
    much easier and mostly automatic.  Disable this by adding
    no-auto-key-retrieve
    auto-key-locate local
    to your gpg.conf.
  * agent: Option --no-grab is now the default.  The new option --grab
    allows to revert this.
  * gpg: New import option "show-only".
  * gpg: New option --disable-dirmngr to entirely disable network
    access for gpg.
  * gpg,gpgsm: Tweaked DE-VS compliance behaviour.
  * New configure flag --enable-all-tests to run more extensive tests
    during "make check".
  * gpgsm: The keygrip is now always printed in colon mode as
    documented in the man page.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- GnuPG 2.2.0:
  * New long term stable branch, replacing the 2.0.x series
  * gpg: Reverted change in 2.1.23 so that --no-auto-key-retrieve
    is again the default boo#1054088
  * Fixed a few minor bugs</changelog>
  <changelog author="astieger@suse.com" date="1505822400">- GnuPG 2.2.1:
  * gpg: Fix formatting of the user id in batch mode key generation
    if only "name-email" is given.
  * gpgv: Fix annoying "not suitable for" warnings.
  * wks: Convey only the newest user id to the provider. This is
    the case if different names are used with the same addr-spec.
  * wks: Create a complying user id for provider policy mailbox-only.
  * wks: Add workaround for posteo.de.
  * scd: Fix the use of large ECC keys with an OpenPGP card.
  * dirmngr: Use system provided root certificates if no specific
    HKP certificates are configured. If bu</changelog>
  <changelog author="astieger@suse.com" date="1510056000">- GnuPG 2.2.2:
  * gpg: Avoid duplicate key imports by concurrently running gpg
    processes
  * gpg: Fix creating on-disk subkey with on-card primary key
  * gpg: Fix validity retrieval for multiple keyrings
  * gpg: Fix --dry-run and import option show-only for secret keys
  * gpg: Print "sec" or "sbb" for secret keys with import option
    import-show
  * gpg: Make import less verbose
  * gpg: Add alias "Key-Grip" for parameter "Keygrip" and new
    parameter "Subkey-Grip" to unattended key generation
  * gpg: Improve "factory-reset" command for OpenPGP cards
  * gpg: Ease switching Gnuk tokens into ECC mode by using the magic
    keysize value 25519
  * gpgsm: Fix --with-colon listing in crt records for fields &gt; 12.
  * gpgsm: Do not expect X.509 keyids to be unique
  * agent: Fix stucked Pinentry when using --max-passphrase-days
  * agent: New option --s2k-count
  * dirmngr: Do not follow https-to-http redirects
  * dirmngr: Reduce default LDAP timeout from 100 to 15 seconds
  * gpgconf: Ignore non-installed components for commands
  - -apply-profile and --apply-defaults
  * Add configure option --enable-werror</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- GnuPG 2.2.3:
  * dirmngr: Fix crash in case of a CRL loading error
  * gpgtar: Fix wrong behaviour of --set-filename
  * gpg: Silence AKL retrieval messages
  * agent: Use clock or clock_gettime for calibration
  * agent: Improve robustness of the shutdown pending state</changelog>
  <changelog author="astieger@suse.com" date="1513857600">- GnuPG 2.2.4:
  * gpg: Change default preferences to prefer SHA512.
  * gpg: Print a warning when more than 150 MiB are encrypted using
    a cipher with 64 bit block size.
  * gpg: Print a warning if the MDC feature has not been used for a
    message.
  * gpg: Fix regular expression of domain addresses in trust
    signatures
  * agent: New option --auto-expand-secmem to help with high
    numbers of concurrent connections. Requires libgcrypt 1.8.2
    for having an effect.
  * dirmngr: Cache responses of WKD queries.
  * gpgconf: Add option --status-fd.
  * wks: Add commands --check and --remove-key to gpg-wks-server
  * Increase the backlog parameter of the daemons to 64 and add
    option --listen-backlog.
- Not enabled features:
  * New configure option --enable-run-gnupg-user-socket to first
    try a socket directory which is not removed by systemd at
    session end.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519560000">- GnuPG 2.2.5:
  * gpg: Allow the use of the "cv25519" and "ed25519" short names
    in addition to the canonical curve names in --batch --gen-key
  * gpg: Make sure to print all secret keys with option --list-only
    and --decrypt
  * gpg: Fix the use of future-default with --quick-add-key for
    signing keys
  * gpg: Select a secret key by checking availability under
    gpg-agent
  * gpg: Fix reversed prompt texts for --only-sign-text-ids
  * gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit
    systems
  * gpgsm: Fix regression since 2.1 in --export-secret-key-raw
    which got $d mod (q-1)$ wrong
  * scd: Support the KDF Data Object of the OpenPGP card 3.3
  * scd: Fix a regression in the internal CCID driver for certain
    card readers
  * dirmngr: Improve returned error description on failure of DNS
    resolving
  * wks: Implement command --install-key for gpg-wks-server.</changelog>
  <changelog author="kbabioch@suse.com" date="1522929600">- Added gnupg-CVE-2018-9234.patch: Enforce that key certification
  can only be done with the master key, and not a signing subkey.
  (bnc#1088255 CVE-2018-9234)</changelog>
  <changelog author="kbabioch@suse.com" date="1528459200">- Added gnupg-CVE-2018-12020.patch: Sanitize the diagnostic output of the
  original file name in verbose mode (bsc#1096745, CVE-2018-12020).</changelog>
</package>
<package pkgid="7716887d7d254a816112a7a9c7126a3368e7f5ee5297e48ba2b174a93477ab31" name="gpg2" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp150.3.3.1"/>
  <changelog author="astieger@suse.com" date="1482667200">- add runtime dependency to match runtime version check for libksba</changelog>
  <changelog author="tchvatal@suse.com" date="1483963200">- Remove the fixme, condition around fdupes</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- GnuPG 2.1.18:
  * gpg: Remove bogus subkey signature while cleaning a key (with
    export-clean, import-clean, or --edit-key's sub-command clean)
  * gpg: Allow freezing the clock with --faked-system-time.
  * gpg: New --export-option flag "backup", new --import-option flag
    "restore".
  * gpg-agent: Fixed long delay due to a regression in the progress
    callback code.
  * scd: Lots of code cleanup and internal changes.
  * scd: Improved the internal CCID driver.
  * dirmngr: Fixed problem with the DNS glue code (removal of the
    trailing dot in domain names).
  * dirmngr: Make sure that Tor is actually enabled after changing the
    conf file and sending SIGHUP or "gpgconf --reload dirmngr".
  * dirmngr: Fixed Tor access to IPv6 addresses.  Note that current
    versions of Tor may require that the flag "IPv6Traffic" is used
    with the option "SocksPort" in torrc to actually allow IPv6
    traffic.
  * dirmngr: Fixed HKP for literally given IPv6 addresses.
  * dirmngr: Enabled reverse DNS lookups via Tor.
  * dirmngr: Added experimental SRV record lookup for WKD.
    See commit 88dc3af3d4ae1afe1d5e136bc4c38bc4e7d4cd10 for details.
  * dirmngr: For HKP use "pgpkey-hkps" and "pgpkey-hkp" in SRV record
    lookups.  Avoid SRV record lookup when a port is explicitly
    specified.  This fixes a regression from the 1.4 and 2.0 behavior.
  * dirmngr: Gracefully handle a missing /etc/nsswitch.conf.  Ignore
    negation terms (e.g. "[!UNAVAIL=return]" instead of bailing out.
  * dirmngr: Better debug output for flags "dns" and "network".
  * dirmngr: On reload mark all known HKP servers alive.
  * gpgconf: Allow keyword "all" for --launch, --kill, and --reload.
  * tools: gpg-wks-client now ignores a missing policy file on the
    server.
  * Avoid unnecessary ambiguity error message in the option parsing.
  * Further improvements of the regression test suite.
  * Fixed building with --disable-libdns configure option.
  * Fixed a crash running the tests on 32 bit architectures.
  * Fixed spurious failures on BSD system in the spawn functions.
    This affected for example gpg-wks-client and gpgconf.</changelog>
  <changelog author="jengelh@inai.de" date="1488456000">- Rewrite descriptions</changelog>
  <changelog author="astieger@suse.com" date="1488888000">- GnuPG 2.1.19:
  * gpg: Print a warning if Tor mode is requested but the Tor
    daemon is not running.
  * gpg: New status code DECRYPTION_KEY to print the actual private
    key used for decryption.
  * gpgv: New options --log-file and --debug.
  * gpg-agent: Revamp the prompts to ask for card PINs.
  * scd: Support for multiple card readers.
  * scd: Removed option --debug-disable-ticker. Ticker is used
    only when it is required to watch removal of device/card.
  * scd: Improved detection of card inserting and removal.
  * dirmngr: New option --disable-ipv4.
  * dirmngr: New option --no-use-tor to explicitly disable the use
    of Tor.
  * dirmngr: The option --allow-version-check is now required even
    if the option --use-tor is also used.
  * dirmngr: Handle a missing nsswitch.conf gracefully.
  * dirmngr: Avoid PTR lookups for keyserver pools. The are only
    done for the debug command "keyserver --hosttable".
  * dirmngr: Rework the internal certificate cache to support
    classes of certificates. Load system provided certificates on
    startup.
  * Add options --tls, --no-crl, and --systrust to the "VALIDATE"
    command.
  * dirmngr: Add support for the ntbtls library.
  * wks: Create mails with a "WKS-Phase" header. Fix detection of
    Draft-2 mode.
  * Many other bug fixes and new regression tests.
- dirmngr: use system certificate store</changelog>
  <changelog author="astieger@suse.com" date="1489492800">- Use stronger defaults for new users, using SHA-2 digest family
  for certificates and message signatures - FATE#323084
  adding gnupg-2.1.19-stronger-defaults.patch</changelog>
  <changelog author="astieger@suse.com" date="1491307200">- GnuPG 2.1.20:
  * gpg: New properties 'expired', 'revoked', and 'disabled' for the
    import and export filters.
  * gpg: New command --quick-set-primary-uid.
  * gpg: New compliance field for the --with-colon key listing.
  * gpg: Changed the key parser to generalize the processing of local
    meta data packets.
  * gpg: Fixed assertion failure in the TOFU trust model.
  * gpg: Fixed exporting of zero length user ID packets.
  * scd: Improved support for multiple readers.
  * scd: Fixed timeout handling for key generation.
  * agent: New option --enable-extended-key-format.
  * dirmngr: Do not add a keyserver to a new dirmngr.conf.  Dirmngr
    uses a default keyserver.
  * dimngr: Do not treat TLS warning alerts as severe error when
    building with GNUTLS.
  * dirmngr: Actually take /etc/hosts in account.
  * wks: Fixed client problems on Windows.  Published keys are now set
    to world-readable.
  * tests: Fixed creation of temporary directories.
  * A socket directory for a non standard GNUGHOME is now created on
    the fly under /run/user.  Thus "gpgconf --create-socketdir" is now
    optional.  The use of "gpgconf --remove-socketdir" to clean up
    obsolete socket directories is however recommended to avoid
    cluttering /run/user with useless directories.
  * Fixed build problems on some platforms.</changelog>
  <changelog author="astieger@suse.com" date="1494849600">- GnuPG 2.1.21:
  * gpg,gpgsm: Fix corruption of old style keyring.gpg files,
    regression in 2.1.20
  * gpg,dirmngr: Removed the skeleton config file support
    New installations no longer generate a configuration file.
    In the absence of a file, SHA-2 family hashes are used.
    Existing configurations are not touched.
    drop gnupg-2.1.19-stronger-defaults.patch FATE#323084
  * gpg: Fixed import filter property match bug.
  * scd: Removed Linux support for Cardman 4040 PCMCIA reader.
  * scd: Fixed some corner case bugs in resume/suspend handling.
  * Many minor bug fixes and code cleanup.</changelog>
  <changelog author="marco.strigl@suse.com" date="1495195200">- GnuPG 2.1.21:
  * modified gnupg-2.0.18-files-are-digests.patch to work with
    obs-sign again bsc#1039899</changelog>
  <changelog author="astieger@suse.com" date="1501243200">- GnuPG 2.1.22:
  * gpg: Extend command --quick-set-expire to allow for setting the
    expiration time of subkeys.
  * gpg: By default try to repair keys during import. New sub-option
    no-repair-keys for --import-options.
  * gpg,gpgsm: Improved checking and reporting of DE-VS compliance.
  * gpg: New options --key-origin and --with-key-origin. Store the
    time of the last key update from keyservers, WKD, or DANE.
  * agent: New option --ssh-fingerprint-digest.
  * dimngr: Lower timeouts on keyserver connection attempts and made
    it configurable.
  * dirmngr: Tor will now automatically be detected and used. The
    option --no-use-tor disables Tor detection.
  * dirmngr: Now detects a changed /etc/resolv.conf.
  * agent,dirmngr: Initiate shutdown on removal of the GnuPG home
    directory.
  * gpg: Avoid caching passphrase for failed symmetric encryption.
  * agent: Support for unprotected ssh keys.
  * dirmngr: Fixed name resolving on systems using only v6
    nameservers.
  * dirmngr: Allow the use of TLS over http proxies.
  * wks: New man pages for client and server.</changelog>
  <changelog author="astieger@suse.com" date="1502539200">- GnuPG 2.1.23:
  * gpg: Options --auto-key-retrieve and --auto-key-locate "local,wkd"
    are now used by default.  Note: this enables keyserver and Web Key
    Directory operators to notice when a signature from a locally
    non-available key is being verified for the first time or when
    you intend to encrypt to a mail address without having the key
    locally.  This new behaviour will eventually make key discovery
    much easier and mostly automatic.  Disable this by adding
    no-auto-key-retrieve
    auto-key-locate local
    to your gpg.conf.
  * agent: Option --no-grab is now the default.  The new option --grab
    allows to revert this.
  * gpg: New import option "show-only".
  * gpg: New option --disable-dirmngr to entirely disable network
    access for gpg.
  * gpg,gpgsm: Tweaked DE-VS compliance behaviour.
  * New configure flag --enable-all-tests to run more extensive tests
    during "make check".
  * gpgsm: The keygrip is now always printed in colon mode as
    documented in the man page.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- GnuPG 2.2.0:
  * New long term stable branch, replacing the 2.0.x series
  * gpg: Reverted change in 2.1.23 so that --no-auto-key-retrieve
    is again the default boo#1054088
  * Fixed a few minor bugs</changelog>
  <changelog author="astieger@suse.com" date="1505822400">- GnuPG 2.2.1:
  * gpg: Fix formatting of the user id in batch mode key generation
    if only "name-email" is given.
  * gpgv: Fix annoying "not suitable for" warnings.
  * wks: Convey only the newest user id to the provider. This is
    the case if different names are used with the same addr-spec.
  * wks: Create a complying user id for provider policy mailbox-only.
  * wks: Add workaround for posteo.de.
  * scd: Fix the use of large ECC keys with an OpenPGP card.
  * dirmngr: Use system provided root certificates if no specific
    HKP certificates are configured. If bu</changelog>
  <changelog author="astieger@suse.com" date="1510056000">- GnuPG 2.2.2:
  * gpg: Avoid duplicate key imports by concurrently running gpg
    processes
  * gpg: Fix creating on-disk subkey with on-card primary key
  * gpg: Fix validity retrieval for multiple keyrings
  * gpg: Fix --dry-run and import option show-only for secret keys
  * gpg: Print "sec" or "sbb" for secret keys with import option
    import-show
  * gpg: Make import less verbose
  * gpg: Add alias "Key-Grip" for parameter "Keygrip" and new
    parameter "Subkey-Grip" to unattended key generation
  * gpg: Improve "factory-reset" command for OpenPGP cards
  * gpg: Ease switching Gnuk tokens into ECC mode by using the magic
    keysize value 25519
  * gpgsm: Fix --with-colon listing in crt records for fields &gt; 12.
  * gpgsm: Do not expect X.509 keyids to be unique
  * agent: Fix stucked Pinentry when using --max-passphrase-days
  * agent: New option --s2k-count
  * dirmngr: Do not follow https-to-http redirects
  * dirmngr: Reduce default LDAP timeout from 100 to 15 seconds
  * gpgconf: Ignore non-installed components for commands
  - -apply-profile and --apply-defaults
  * Add configure option --enable-werror</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- GnuPG 2.2.3:
  * dirmngr: Fix crash in case of a CRL loading error
  * gpgtar: Fix wrong behaviour of --set-filename
  * gpg: Silence AKL retrieval messages
  * agent: Use clock or clock_gettime for calibration
  * agent: Improve robustness of the shutdown pending state</changelog>
  <changelog author="astieger@suse.com" date="1513857600">- GnuPG 2.2.4:
  * gpg: Change default preferences to prefer SHA512.
  * gpg: Print a warning when more than 150 MiB are encrypted using
    a cipher with 64 bit block size.
  * gpg: Print a warning if the MDC feature has not been used for a
    message.
  * gpg: Fix regular expression of domain addresses in trust
    signatures
  * agent: New option --auto-expand-secmem to help with high
    numbers of concurrent connections. Requires libgcrypt 1.8.2
    for having an effect.
  * dirmngr: Cache responses of WKD queries.
  * gpgconf: Add option --status-fd.
  * wks: Add commands --check and --remove-key to gpg-wks-server
  * Increase the backlog parameter of the daemons to 64 and add
    option --listen-backlog.
- Not enabled features:
  * New configure option --enable-run-gnupg-user-socket to first
    try a socket directory which is not removed by systemd at
    session end.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519560000">- GnuPG 2.2.5:
  * gpg: Allow the use of the "cv25519" and "ed25519" short names
    in addition to the canonical curve names in --batch --gen-key
  * gpg: Make sure to print all secret keys with option --list-only
    and --decrypt
  * gpg: Fix the use of future-default with --quick-add-key for
    signing keys
  * gpg: Select a secret key by checking availability under
    gpg-agent
  * gpg: Fix reversed prompt texts for --only-sign-text-ids
  * gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit
    systems
  * gpgsm: Fix regression since 2.1 in --export-secret-key-raw
    which got $d mod (q-1)$ wrong
  * scd: Support the KDF Data Object of the OpenPGP card 3.3
  * scd: Fix a regression in the internal CCID driver for certain
    card readers
  * dirmngr: Improve returned error description on failure of DNS
    resolving
  * wks: Implement command --install-key for gpg-wks-server.</changelog>
  <changelog author="kbabioch@suse.com" date="1522929600">- Added gnupg-CVE-2018-9234.patch: Enforce that key certification
  can only be done with the master key, and not a signing subkey.
  (bnc#1088255 CVE-2018-9234)</changelog>
  <changelog author="kbabioch@suse.com" date="1528459200">- Added gnupg-CVE-2018-12020.patch: Sanitize the diagnostic output of the
  original file name in verbose mode (bsc#1096745, CVE-2018-12020).</changelog>
</package>
<package pkgid="611d50d300eae18972d423ade5a87641c5c5dd69b1f599fb84a82d48171ad5c3" name="gpg2-lang" arch="noarch">
  <version epoch="0" ver="2.2.5" rel="lp150.3.3.1"/>
  <changelog author="astieger@suse.com" date="1482667200">- add runtime dependency to match runtime version check for libksba</changelog>
  <changelog author="tchvatal@suse.com" date="1483963200">- Remove the fixme, condition around fdupes</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- GnuPG 2.1.18:
  * gpg: Remove bogus subkey signature while cleaning a key (with
    export-clean, import-clean, or --edit-key's sub-command clean)
  * gpg: Allow freezing the clock with --faked-system-time.
  * gpg: New --export-option flag "backup", new --import-option flag
    "restore".
  * gpg-agent: Fixed long delay due to a regression in the progress
    callback code.
  * scd: Lots of code cleanup and internal changes.
  * scd: Improved the internal CCID driver.
  * dirmngr: Fixed problem with the DNS glue code (removal of the
    trailing dot in domain names).
  * dirmngr: Make sure that Tor is actually enabled after changing the
    conf file and sending SIGHUP or "gpgconf --reload dirmngr".
  * dirmngr: Fixed Tor access to IPv6 addresses.  Note that current
    versions of Tor may require that the flag "IPv6Traffic" is used
    with the option "SocksPort" in torrc to actually allow IPv6
    traffic.
  * dirmngr: Fixed HKP for literally given IPv6 addresses.
  * dirmngr: Enabled reverse DNS lookups via Tor.
  * dirmngr: Added experimental SRV record lookup for WKD.
    See commit 88dc3af3d4ae1afe1d5e136bc4c38bc4e7d4cd10 for details.
  * dirmngr: For HKP use "pgpkey-hkps" and "pgpkey-hkp" in SRV record
    lookups.  Avoid SRV record lookup when a port is explicitly
    specified.  This fixes a regression from the 1.4 and 2.0 behavior.
  * dirmngr: Gracefully handle a missing /etc/nsswitch.conf.  Ignore
    negation terms (e.g. "[!UNAVAIL=return]" instead of bailing out.
  * dirmngr: Better debug output for flags "dns" and "network".
  * dirmngr: On reload mark all known HKP servers alive.
  * gpgconf: Allow keyword "all" for --launch, --kill, and --reload.
  * tools: gpg-wks-client now ignores a missing policy file on the
    server.
  * Avoid unnecessary ambiguity error message in the option parsing.
  * Further improvements of the regression test suite.
  * Fixed building with --disable-libdns configure option.
  * Fixed a crash running the tests on 32 bit architectures.
  * Fixed spurious failures on BSD system in the spawn functions.
    This affected for example gpg-wks-client and gpgconf.</changelog>
  <changelog author="jengelh@inai.de" date="1488456000">- Rewrite descriptions</changelog>
  <changelog author="astieger@suse.com" date="1488888000">- GnuPG 2.1.19:
  * gpg: Print a warning if Tor mode is requested but the Tor
    daemon is not running.
  * gpg: New status code DECRYPTION_KEY to print the actual private
    key used for decryption.
  * gpgv: New options --log-file and --debug.
  * gpg-agent: Revamp the prompts to ask for card PINs.
  * scd: Support for multiple card readers.
  * scd: Removed option --debug-disable-ticker. Ticker is used
    only when it is required to watch removal of device/card.
  * scd: Improved detection of card inserting and removal.
  * dirmngr: New option --disable-ipv4.
  * dirmngr: New option --no-use-tor to explicitly disable the use
    of Tor.
  * dirmngr: The option --allow-version-check is now required even
    if the option --use-tor is also used.
  * dirmngr: Handle a missing nsswitch.conf gracefully.
  * dirmngr: Avoid PTR lookups for keyserver pools. The are only
    done for the debug command "keyserver --hosttable".
  * dirmngr: Rework the internal certificate cache to support
    classes of certificates. Load system provided certificates on
    startup.
  * Add options --tls, --no-crl, and --systrust to the "VALIDATE"
    command.
  * dirmngr: Add support for the ntbtls library.
  * wks: Create mails with a "WKS-Phase" header. Fix detection of
    Draft-2 mode.
  * Many other bug fixes and new regression tests.
- dirmngr: use system certificate store</changelog>
  <changelog author="astieger@suse.com" date="1489492800">- Use stronger defaults for new users, using SHA-2 digest family
  for certificates and message signatures - FATE#323084
  adding gnupg-2.1.19-stronger-defaults.patch</changelog>
  <changelog author="astieger@suse.com" date="1491307200">- GnuPG 2.1.20:
  * gpg: New properties 'expired', 'revoked', and 'disabled' for the
    import and export filters.
  * gpg: New command --quick-set-primary-uid.
  * gpg: New compliance field for the --with-colon key listing.
  * gpg: Changed the key parser to generalize the processing of local
    meta data packets.
  * gpg: Fixed assertion failure in the TOFU trust model.
  * gpg: Fixed exporting of zero length user ID packets.
  * scd: Improved support for multiple readers.
  * scd: Fixed timeout handling for key generation.
  * agent: New option --enable-extended-key-format.
  * dirmngr: Do not add a keyserver to a new dirmngr.conf.  Dirmngr
    uses a default keyserver.
  * dimngr: Do not treat TLS warning alerts as severe error when
    building with GNUTLS.
  * dirmngr: Actually take /etc/hosts in account.
  * wks: Fixed client problems on Windows.  Published keys are now set
    to world-readable.
  * tests: Fixed creation of temporary directories.
  * A socket directory for a non standard GNUGHOME is now created on
    the fly under /run/user.  Thus "gpgconf --create-socketdir" is now
    optional.  The use of "gpgconf --remove-socketdir" to clean up
    obsolete socket directories is however recommended to avoid
    cluttering /run/user with useless directories.
  * Fixed build problems on some platforms.</changelog>
  <changelog author="astieger@suse.com" date="1494849600">- GnuPG 2.1.21:
  * gpg,gpgsm: Fix corruption of old style keyring.gpg files,
    regression in 2.1.20
  * gpg,dirmngr: Removed the skeleton config file support
    New installations no longer generate a configuration file.
    In the absence of a file, SHA-2 family hashes are used.
    Existing configurations are not touched.
    drop gnupg-2.1.19-stronger-defaults.patch FATE#323084
  * gpg: Fixed import filter property match bug.
  * scd: Removed Linux support for Cardman 4040 PCMCIA reader.
  * scd: Fixed some corner case bugs in resume/suspend handling.
  * Many minor bug fixes and code cleanup.</changelog>
  <changelog author="marco.strigl@suse.com" date="1495195200">- GnuPG 2.1.21:
  * modified gnupg-2.0.18-files-are-digests.patch to work with
    obs-sign again bsc#1039899</changelog>
  <changelog author="astieger@suse.com" date="1501243200">- GnuPG 2.1.22:
  * gpg: Extend command --quick-set-expire to allow for setting the
    expiration time of subkeys.
  * gpg: By default try to repair keys during import. New sub-option
    no-repair-keys for --import-options.
  * gpg,gpgsm: Improved checking and reporting of DE-VS compliance.
  * gpg: New options --key-origin and --with-key-origin. Store the
    time of the last key update from keyservers, WKD, or DANE.
  * agent: New option --ssh-fingerprint-digest.
  * dimngr: Lower timeouts on keyserver connection attempts and made
    it configurable.
  * dirmngr: Tor will now automatically be detected and used. The
    option --no-use-tor disables Tor detection.
  * dirmngr: Now detects a changed /etc/resolv.conf.
  * agent,dirmngr: Initiate shutdown on removal of the GnuPG home
    directory.
  * gpg: Avoid caching passphrase for failed symmetric encryption.
  * agent: Support for unprotected ssh keys.
  * dirmngr: Fixed name resolving on systems using only v6
    nameservers.
  * dirmngr: Allow the use of TLS over http proxies.
  * wks: New man pages for client and server.</changelog>
  <changelog author="astieger@suse.com" date="1502539200">- GnuPG 2.1.23:
  * gpg: Options --auto-key-retrieve and --auto-key-locate "local,wkd"
    are now used by default.  Note: this enables keyserver and Web Key
    Directory operators to notice when a signature from a locally
    non-available key is being verified for the first time or when
    you intend to encrypt to a mail address without having the key
    locally.  This new behaviour will eventually make key discovery
    much easier and mostly automatic.  Disable this by adding
    no-auto-key-retrieve
    auto-key-locate local
    to your gpg.conf.
  * agent: Option --no-grab is now the default.  The new option --grab
    allows to revert this.
  * gpg: New import option "show-only".
  * gpg: New option --disable-dirmngr to entirely disable network
    access for gpg.
  * gpg,gpgsm: Tweaked DE-VS compliance behaviour.
  * New configure flag --enable-all-tests to run more extensive tests
    during "make check".
  * gpgsm: The keygrip is now always printed in colon mode as
    documented in the man page.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- GnuPG 2.2.0:
  * New long term stable branch, replacing the 2.0.x series
  * gpg: Reverted change in 2.1.23 so that --no-auto-key-retrieve
    is again the default boo#1054088
  * Fixed a few minor bugs</changelog>
  <changelog author="astieger@suse.com" date="1505822400">- GnuPG 2.2.1:
  * gpg: Fix formatting of the user id in batch mode key generation
    if only "name-email" is given.
  * gpgv: Fix annoying "not suitable for" warnings.
  * wks: Convey only the newest user id to the provider. This is
    the case if different names are used with the same addr-spec.
  * wks: Create a complying user id for provider policy mailbox-only.
  * wks: Add workaround for posteo.de.
  * scd: Fix the use of large ECC keys with an OpenPGP card.
  * dirmngr: Use system provided root certificates if no specific
    HKP certificates are configured. If bu</changelog>
  <changelog author="astieger@suse.com" date="1510056000">- GnuPG 2.2.2:
  * gpg: Avoid duplicate key imports by concurrently running gpg
    processes
  * gpg: Fix creating on-disk subkey with on-card primary key
  * gpg: Fix validity retrieval for multiple keyrings
  * gpg: Fix --dry-run and import option show-only for secret keys
  * gpg: Print "sec" or "sbb" for secret keys with import option
    import-show
  * gpg: Make import less verbose
  * gpg: Add alias "Key-Grip" for parameter "Keygrip" and new
    parameter "Subkey-Grip" to unattended key generation
  * gpg: Improve "factory-reset" command for OpenPGP cards
  * gpg: Ease switching Gnuk tokens into ECC mode by using the magic
    keysize value 25519
  * gpgsm: Fix --with-colon listing in crt records for fields &gt; 12.
  * gpgsm: Do not expect X.509 keyids to be unique
  * agent: Fix stucked Pinentry when using --max-passphrase-days
  * agent: New option --s2k-count
  * dirmngr: Do not follow https-to-http redirects
  * dirmngr: Reduce default LDAP timeout from 100 to 15 seconds
  * gpgconf: Ignore non-installed components for commands
  - -apply-profile and --apply-defaults
  * Add configure option --enable-werror</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- GnuPG 2.2.3:
  * dirmngr: Fix crash in case of a CRL loading error
  * gpgtar: Fix wrong behaviour of --set-filename
  * gpg: Silence AKL retrieval messages
  * agent: Use clock or clock_gettime for calibration
  * agent: Improve robustness of the shutdown pending state</changelog>
  <changelog author="astieger@suse.com" date="1513857600">- GnuPG 2.2.4:
  * gpg: Change default preferences to prefer SHA512.
  * gpg: Print a warning when more than 150 MiB are encrypted using
    a cipher with 64 bit block size.
  * gpg: Print a warning if the MDC feature has not been used for a
    message.
  * gpg: Fix regular expression of domain addresses in trust
    signatures
  * agent: New option --auto-expand-secmem to help with high
    numbers of concurrent connections. Requires libgcrypt 1.8.2
    for having an effect.
  * dirmngr: Cache responses of WKD queries.
  * gpgconf: Add option --status-fd.
  * wks: Add commands --check and --remove-key to gpg-wks-server
  * Increase the backlog parameter of the daemons to 64 and add
    option --listen-backlog.
- Not enabled features:
  * New configure option --enable-run-gnupg-user-socket to first
    try a socket directory which is not removed by systemd at
    session end.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519560000">- GnuPG 2.2.5:
  * gpg: Allow the use of the "cv25519" and "ed25519" short names
    in addition to the canonical curve names in --batch --gen-key
  * gpg: Make sure to print all secret keys with option --list-only
    and --decrypt
  * gpg: Fix the use of future-default with --quick-add-key for
    signing keys
  * gpg: Select a secret key by checking availability under
    gpg-agent
  * gpg: Fix reversed prompt texts for --only-sign-text-ids
  * gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit
    systems
  * gpgsm: Fix regression since 2.1 in --export-secret-key-raw
    which got $d mod (q-1)$ wrong
  * scd: Support the KDF Data Object of the OpenPGP card 3.3
  * scd: Fix a regression in the internal CCID driver for certain
    card readers
  * dirmngr: Improve returned error description on failure of DNS
    resolving
  * wks: Implement command --install-key for gpg-wks-server.</changelog>
  <changelog author="kbabioch@suse.com" date="1522929600">- Added gnupg-CVE-2018-9234.patch: Enforce that key certification
  can only be done with the master key, and not a signing subkey.
  (bnc#1088255 CVE-2018-9234)</changelog>
  <changelog author="kbabioch@suse.com" date="1528459200">- Added gnupg-CVE-2018-12020.patch: Sanitize the diagnostic output of the
  original file name in verbose mode (bsc#1096745, CVE-2018-12020).</changelog>
</package>
<package pkgid="fbcc032203b92d16e2902b947976366c891c44671bd2cee0778783d3e3449d2d" name="gri" arch="src">
  <version epoch="0" ver="2.12.23" rel="lp150.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1313755200">- Initial package (version 2.12.23)</changelog>
  <changelog author="scorot@free.fr" date="1330257600">- fix build for SLE-11</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1339848000">- add explicit build requirement for perl(Time::CTime)
- fix doc/texinfo2HTML perl script: ctime and getopts
- fix warning about touched buildroot in %build section</changelog>
  <changelog author="werner@suse.de" date="1341921600">- Make it build with latest TeXLive 2012 with new package layout</changelog>
  <changelog author="dimstar@opensuse.org" date="1424779200">- Add gri-texinfo-5.0.patch: Fix build with texinfo 5.0.</changelog>
  <changelog author="bwiedemann@suse.com" date="1457438400">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="bwiedemann@suse.com" date="1457524800">- Drop timestamp from texinfo to fix build-compare</changelog>
  <changelog author="badshah400@gmail.com" date="1498478400">- Add gri-invalid-char-to-pointer.patch: Fix a char to char*
  conversion by replacing '\0' with NULL.
- Cleanup spec file by removing conditionals for outdated openSUSE
  versions, running spec-cleaner.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509019200">- Add gri-perl-5.26.patch: Fix usage of texinfo2HTML for usage with
  perl 5.26.</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- allow PS decoder for build [bsc#1109976]</changelog>
</package>
<package pkgid="d79e55829174a8e86ee3abca0f6c8951557718b04eb949e3981d0b7d921ae78f" name="gri" arch="x86_64">
  <version epoch="0" ver="2.12.23" rel="lp150.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1313755200">- Initial package (version 2.12.23)</changelog>
  <changelog author="scorot@free.fr" date="1330257600">- fix build for SLE-11</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1339848000">- add explicit build requirement for perl(Time::CTime)
- fix doc/texinfo2HTML perl script: ctime and getopts
- fix warning about touched buildroot in %build section</changelog>
  <changelog author="werner@suse.de" date="1341921600">- Make it build with latest TeXLive 2012 with new package layout</changelog>
  <changelog author="dimstar@opensuse.org" date="1424779200">- Add gri-texinfo-5.0.patch: Fix build with texinfo 5.0.</changelog>
  <changelog author="bwiedemann@suse.com" date="1457438400">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="bwiedemann@suse.com" date="1457524800">- Drop timestamp from texinfo to fix build-compare</changelog>
  <changelog author="badshah400@gmail.com" date="1498478400">- Add gri-invalid-char-to-pointer.patch: Fix a char to char*
  conversion by replacing '\0' with NULL.
- Cleanup spec file by removing conditionals for outdated openSUSE
  versions, running spec-cleaner.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509019200">- Add gri-perl-5.26.patch: Fix usage of texinfo2HTML for usage with
  perl 5.26.</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- allow PS decoder for build [bsc#1109976]</changelog>
</package>
<package pkgid="7f187311a30f456aa85b9471a49eee6d0ebc21ce80820a38bf4e18ec15f6dfca" name="growpart" arch="noarch">
  <version epoch="0" ver="0.30" rel="lp150.4.3.1"/>
  <changelog author="rschweikert@suse.com" date="1395057600">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1395057601">- include in SLE 12 (FATE #315990, #315991, and 316167)</changelog>
  <changelog author="rschweikert@suse.com" date="1395144000">- add patch licenseGPLv3.patch
  + no license file included in upstream release
    (https://bugs.launchpad.net/cloud-utils/+bug/1294338)
  + GPL v3 applies to growpart script, that is all we are distributing
    at the moment
- fix the Group, don't shout</changelog>
  <changelog author="rjschwei@suse.com" date="1473768000">- Update to version 0.29 (bsc#998378)
  + fix use of partx for newer util-linux versions (LP: #1587971)
    [Lars Kellogg-Stedman]
  + fix some issues in error path reporting
  + capture output of 'partx --help' as older versions
    do not support that flag, and send output to stderr.
  + fix bug when growing partitions on disks &gt; 2TB. (LP: #1259703)
  + run partx only on block devices (not files)
  + better --dry-run output for gpt disks, providing sgdisk command
    line that would be used.
  + support sfdisk &gt;= 2.26, and support gpt partitions with sfdisk</changelog>
  <changelog author="rjschwei@suse.com" date="1516622400">- Update to version 0.30 (bsc#1064755)
  + improved error messages on failure.
  + ignore sfdisk failure in 2.28.1 when due to reread failing
  (LP: #1619285)
  + Add service file to start growpart via systemd
  + Add rootgrow script to wrap growpart</changelog>
  <changelog author="rjschwei@suse.com" date="1516795200">- Split rootgrow and script and service into subpackage to retain
  dependency chain for growpart</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="rjschwei@suse.com" date="1529582400">- Support btrfs resize, handle ro setup in rootgrow (bsc#1097455, bsc#1098681)</changelog>
</package>
<package pkgid="50a6ea6129b38e964a92b81f934147d23219e1e50a5fc59b7ca02a978855d1d4" name="growpart" arch="src">
  <version epoch="0" ver="0.30" rel="lp150.4.3.1"/>
  <changelog author="rschweikert@suse.com" date="1395057600">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1395057601">- include in SLE 12 (FATE #315990, #315991, and 316167)</changelog>
  <changelog author="rschweikert@suse.com" date="1395144000">- add patch licenseGPLv3.patch
  + no license file included in upstream release
    (https://bugs.launchpad.net/cloud-utils/+bug/1294338)
  + GPL v3 applies to growpart script, that is all we are distributing
    at the moment
- fix the Group, don't shout</changelog>
  <changelog author="rjschwei@suse.com" date="1473768000">- Update to version 0.29 (bsc#998378)
  + fix use of partx for newer util-linux versions (LP: #1587971)
    [Lars Kellogg-Stedman]
  + fix some issues in error path reporting
  + capture output of 'partx --help' as older versions
    do not support that flag, and send output to stderr.
  + fix bug when growing partitions on disks &gt; 2TB. (LP: #1259703)
  + run partx only on block devices (not files)
  + better --dry-run output for gpt disks, providing sgdisk command
    line that would be used.
  + support sfdisk &gt;= 2.26, and support gpt partitions with sfdisk</changelog>
  <changelog author="rjschwei@suse.com" date="1516622400">- Update to version 0.30 (bsc#1064755)
  + improved error messages on failure.
  + ignore sfdisk failure in 2.28.1 when due to reread failing
  (LP: #1619285)
  + Add service file to start growpart via systemd
  + Add rootgrow script to wrap growpart</changelog>
  <changelog author="rjschwei@suse.com" date="1516795200">- Split rootgrow and script and service into subpackage to retain
  dependency chain for growpart</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="rjschwei@suse.com" date="1529582400">- Support btrfs resize, handle ro setup in rootgrow (bsc#1097455, bsc#1098681)</changelog>
</package>
<package pkgid="69debcab32127c9a5a88948c1d84af51b120633a95c4bc6d00a48ce55bff304d" name="growpart-rootgrow" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="lp150.4.3.1"/>
  <changelog author="rschweikert@suse.com" date="1395057600">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1395057601">- include in SLE 12 (FATE #315990, #315991, and 316167)</changelog>
  <changelog author="rschweikert@suse.com" date="1395144000">- add patch licenseGPLv3.patch
  + no license file included in upstream release
    (https://bugs.launchpad.net/cloud-utils/+bug/1294338)
  + GPL v3 applies to growpart script, that is all we are distributing
    at the moment
- fix the Group, don't shout</changelog>
  <changelog author="rjschwei@suse.com" date="1473768000">- Update to version 0.29 (bsc#998378)
  + fix use of partx for newer util-linux versions (LP: #1587971)
    [Lars Kellogg-Stedman]
  + fix some issues in error path reporting
  + capture output of 'partx --help' as older versions
    do not support that flag, and send output to stderr.
  + fix bug when growing partitions on disks &gt; 2TB. (LP: #1259703)
  + run partx only on block devices (not files)
  + better --dry-run output for gpt disks, providing sgdisk command
    line that would be used.
  + support sfdisk &gt;= 2.26, and support gpt partitions with sfdisk</changelog>
  <changelog author="rjschwei@suse.com" date="1516622400">- Update to version 0.30 (bsc#1064755)
  + improved error messages on failure.
  + ignore sfdisk failure in 2.28.1 when due to reread failing
  (LP: #1619285)
  + Add service file to start growpart via systemd
  + Add rootgrow script to wrap growpart</changelog>
  <changelog author="rjschwei@suse.com" date="1516795200">- Split rootgrow and script and service into subpackage to retain
  dependency chain for growpart</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="rjschwei@suse.com" date="1529582400">- Support btrfs resize, handle ro setup in rootgrow (bsc#1097455, bsc#1098681)</changelog>
</package>
<package pkgid="1660b86d2598036a6b5f7e84ece39603b4dffb0ee1ab4136efcb88c58e125584" name="grub2" arch="src">
  <version epoch="0" ver="2.02" rel="lp150.13.4.1"/>
  <changelog author="mchang@suse.com" date="1516708800">- Check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
</package>
<package pkgid="c8539f768e9e5b1c2018ec90e4faa6ffe56ce35d877a39e5909e2bfb92575f61" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.4.1"/>
  <changelog author="mchang@suse.com" date="1516708800">- Check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
</package>
<package pkgid="48e7220cdc166b65df77fddfac257b838a3e77a843bea1ac91b33e549d3780e3" name="grub2" arch="src">
  <version epoch="0" ver="2.02" rel="lp150.13.7.1"/>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
</package>
<package pkgid="8988db927ac901d382458f8027024edc3be1a24ca27e724198702c070d1c3017" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.7.1"/>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
</package>
<package pkgid="1d30f528c3aac538ba4fea4bc400d4cc1748941e3ee197faf7fef5b8864015d0" name="grub2-branding-upstream" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.4.1"/>
  <changelog author="mchang@suse.com" date="1516708800">- Check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
</package>
<package pkgid="f3517c7be2196e79cee7d59accaf1de20d29e44641bc4a556c0a187105d0ed8a" name="grub2-branding-upstream" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.7.1"/>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
</package>
<package pkgid="6256f88d492e7ad53f470e9c03f1523c4648eab271ba51414bcd13f765615024" name="grub2-i386-pc" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.4.1"/>
  <changelog author="mchang@suse.com" date="1516708800">- Check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
</package>
<package pkgid="61f386622dd198aa442b1eab4f82426cbf9c90eba0b8265ed1cb08ba06dc667a" name="grub2-i386-pc" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.7.1"/>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
</package>
<package pkgid="d21f3568880dbcd8f60afe10c3875f7146036db7572ea3e026cce139831ca7b3" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp150.13.4.1"/>
  <changelog author="mchang@suse.com" date="1516708800">- Check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
</package>
<package pkgid="7a9cbea7b6670c1b68ca2ab2de37823adb6491fc9c4d8aa111435010df018741" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp150.13.7.1"/>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
</package>
<package pkgid="74816041ab39240939c4b4706730f5c38f2f3e59dbafa630904d4f65cce57bec" name="grub2-systemd-sleep-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp150.13.4.1"/>
  <changelog author="mchang@suse.com" date="1516708800">- Check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
</package>
<package pkgid="468e4e8631c3017880f26b7c97b43d8e1274506145852d8270d56e0e5db58edf" name="grub2-systemd-sleep-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp150.13.7.1"/>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
</package>
<package pkgid="5ab59ada7727b0ff5d22fd6af9b6c55eb986b095cb92aa61478d933813e70c3a" name="grub2-x86_64-efi" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.4.1"/>
  <changelog author="mchang@suse.com" date="1516708800">- Check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
</package>
<package pkgid="40a677249795bc6ff8be94e7fb6eee6008127031940f5d588a2febcecdc45ddd" name="grub2-x86_64-efi" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.7.1"/>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
</package>
<package pkgid="af7ef8b285ab640436832891aac325aa83a22992546841d8aec60fe1d6b7fa47" name="grub2-x86_64-xen" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.4.1"/>
  <changelog author="mchang@suse.com" date="1516708800">- Check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
</package>
<package pkgid="5b1aa28a4b3062ced83d8540e5594441eafeffef0eb347ae8f148e4a4f9cf2d9" name="grub2-x86_64-xen" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.7.1"/>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
</package>
<package pkgid="ad48ff6d1bc15faa5bc42ed930d7fe64acfa2eb7a553559c314a830019ea40dc" name="gtk2-metatheme-breeze" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Adjusted Scrollbars so now they fit the Qt theme</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Fix background-image warning
  * Don't show scrollbar steppers</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Properly check for Breeze GTK 3 theme existence in kconf_update
  * Fixup install paths
  * Move the 3.0 directory to 3.18 to ensure builds will not fail (kde#388018)
  * Revert "Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally""
  * Revert "Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions"
  * Modify theme generator to match scrollbar updates
  * Add preliminary theme generation script for authoring assets
  * Add GTK 3.18 theme back to support LTS distributions
  * Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions
  * Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally" This commit causes the build to fail as gtk-3.18/ does not exist as a directory in the source tree
  * Apply text contrast changes to GTK 2 theme
  * Increase text contrast for consistency with default Breeze color scheme
  * Rename 3.20 theme to be used for all GTK 3 versions
  * Remove obsolete GTK versions' themes to improve maintainability
  * Update scrollbar assets (kde#385627)
  * Adjust client-side decorations to look correct in both CSD and forced SSD environments
  * Add support for gtk3 theme variant feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Add additional fixes:
  * 0001-kconf_update-Add-gtk-primary-button-warps-slider-0-t.patch (kde#379773</changelog>
</package>
<package pkgid="67607bfceeec30b4368794f1ba1e57d65f8ecd664267711d50e8d97d1e34228d" name="gtk2-metatheme-breeze" arch="noarch">
  <version epoch="0" ver="5.12.7" rel="lp150.2.6.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Adjusted Scrollbars so now they fit the Qt theme</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Fix background-image warning
  * Don't show scrollbar steppers</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Properly check for Breeze GTK 3 theme existence in kconf_update
  * Fixup install paths
  * Move the 3.0 directory to 3.18 to ensure builds will not fail (kde#388018)
  * Revert "Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally""
  * Revert "Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions"
  * Modify theme generator to match scrollbar updates
  * Add preliminary theme generation script for authoring assets
  * Add GTK 3.18 theme back to support LTS distributions
  * Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions
  * Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally" This commit causes the build to fail as gtk-3.18/ does not exist as a directory in the source tree
  * Apply text contrast changes to GTK 2 theme
  * Increase text contrast for consistency with default Breeze color scheme
  * Rename 3.20 theme to be used for all GTK 3 versions
  * Remove obsolete GTK versions' themes to improve maintainability
  * Update scrollbar assets (kde#385627)
  * Adjust client-side decorations to look correct in both CSD and forced SSD environments
  * Add support for gtk3 theme variant feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Add additional fixes:
  * 0001-kconf_update-Add-gtk-primary-button-warps-slider-0-t.patch (kde#379773)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1537876800">- Update to 5.12.7
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.7.php
- Changes since 5.12.6:
  * Fix scrollbars in LibreOffice (kde#389709, boo#1116859)
  * [kconf_update] Add "gtk-primary-button-warps-slider=0" to generated GTK3 config (kde#379773)
- Remove patches, now upstream:
  * 0001-kconf_update-Add-gtk-primary-button-warps-slider-0-t.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1542801600">- Add patch to fix GTK treeviews:
  * 0001-GTK-theme-treeview-style-typo-bug-fix.patch</changelog>
</package>
<package pkgid="60c1e1de028c519a3f8b90e950a59e5aa5265bc55d0684c9fe3cab74b4197b99" name="gtk3" arch="src">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="aedd73cd09373f9775a77b2953e775dec73883317be0488741c4f5cad1c0910d" name="gtk3-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="c2dcc0cea9018c43f4ece9cc11c1ace52e8584d5ab1e4bcf0cd2355bc528f532" name="gtk3-data" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="b32bad16585807e6be4cf535f23a486a9d1301081e199910115970e4e1dfb86b" name="gtk3-devel" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="b0e4d9fff01897725c55cceec6f94bb9a8617fc574bd217f872dbdd5d6f3eb53" name="gtk3-devel-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="9431034b8f1ed5b3c3fa01195775879e1e0c8372ffc8fc84f70aeca00cc1d60e" name="gtk3-immodule-amharic" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="3e22709c8e5f7a30f72f7f43974bc298f18dbb959d8ac3fa460cbb68a8db8573" name="gtk3-immodule-amharic-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="a3f9d6d01ca5b0ec15c9f244abfa88dca72cb23808769c7f156ddac6a22979c2" name="gtk3-immodule-broadway" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="98f3d3bda6cec34cedd284ada913df77fecb2addfca5cd77963a8d1c9464a9fd" name="gtk3-immodule-inuktitut" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="0080dca9ae4d7a62b0629b0c0300dc0f1b52497064645e3af691371d48908925" name="gtk3-immodule-inuktitut-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="8a7c906d3a1cf0ae3396c721b40dc8ac0bc226fe605e29c58640cf09076b9cb5" name="gtk3-immodule-multipress" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="78940a29a0bb8c5a3df8f48446f201b809c50b2faf008418717bdcf01240e6e4" name="gtk3-immodule-multipress-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="95224263352325a59527a9e7c6df639737c1f6f12c43ed7ad4e7ebe232292cbe" name="gtk3-immodule-thai" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="d3c97dc2e620fe5e29d79b910e2513f515db4b50cdabc8236c2e7b79e0809510" name="gtk3-immodule-thai-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="037622c59c7047e66f66544acf9453bfab864f616e73ce5f098c285960ee0e70" name="gtk3-immodule-vietnamese" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="130f34bcd23c0d6d1672782f41a705aa5fbff1941100a45a9260f9b8c5bb8013" name="gtk3-immodule-vietnamese-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="16f8497b24111b4d6eb765fbf5e6b0d9038ac23c2713b5f0e5f48cc2780caf9a" name="gtk3-immodule-xim" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="931dad13a3c2153f3e58b420fe77a096877bd1450faa3218247edf779c936243" name="gtk3-immodule-xim-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="3db14578ca48df6177abf5349afe1f7a0986fb21993bfa89438605496381ef32" name="gtk3-immodules-tigrigna" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="d0789c04ddac013d5d1ceb0d71d47e4fdc5c2e7fbc1cc203a0ffec9564cb990a" name="gtk3-immodules-tigrigna-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="aeff7501dc5cae9fb4ce429b57028de82e53b6317f46885048fc5b90ff83f844" name="gtk3-lang" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="24714b900f645795dc43ec849be4bcfb082fdb640a2f485404a6e77af8f3fc90" name="gtk3-metatheme-breeze" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Adjusted Scrollbars so now they fit the Qt theme</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Fix background-image warning
  * Don't show scrollbar steppers</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Properly check for Breeze GTK 3 theme existence in kconf_update
  * Fixup install paths
  * Move the 3.0 directory to 3.18 to ensure builds will not fail (kde#388018)
  * Revert "Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally""
  * Revert "Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions"
  * Modify theme generator to match scrollbar updates
  * Add preliminary theme generation script for authoring assets
  * Add GTK 3.18 theme back to support LTS distributions
  * Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions
  * Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally" This commit causes the build to fail as gtk-3.18/ does not exist as a directory in the source tree
  * Apply text contrast changes to GTK 2 theme
  * Increase text contrast for consistency with default Breeze color scheme
  * Rename 3.20 theme to be used for all GTK 3 versions
  * Remove obsolete GTK versions' themes to improve maintainability
  * Update scrollbar assets (kde#385627)
  * Adjust client-side decorations to look correct in both CSD and forced SSD environments
  * Add support for gtk3 theme variant feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Add additional fixes:
  * 0001-kconf_update-Add-gtk-primary-button-warps-slider-0-t.patch (kde#379773</changelog>
</package>
<package pkgid="5df900c64f620a5df677662216a155e2cb1ed719c816fba5d8017eaded5fd571" name="gtk3-metatheme-breeze" arch="noarch">
  <version epoch="0" ver="5.12.7" rel="lp150.2.6.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Adjusted Scrollbars so now they fit the Qt theme</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Fix background-image warning
  * Don't show scrollbar steppers</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Properly check for Breeze GTK 3 theme existence in kconf_update
  * Fixup install paths
  * Move the 3.0 directory to 3.18 to ensure builds will not fail (kde#388018)
  * Revert "Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally""
  * Revert "Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions"
  * Modify theme generator to match scrollbar updates
  * Add preliminary theme generation script for authoring assets
  * Add GTK 3.18 theme back to support LTS distributions
  * Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions
  * Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally" This commit causes the build to fail as gtk-3.18/ does not exist as a directory in the source tree
  * Apply text contrast changes to GTK 2 theme
  * Increase text contrast for consistency with default Breeze color scheme
  * Rename 3.20 theme to be used for all GTK 3 versions
  * Remove obsolete GTK versions' themes to improve maintainability
  * Update scrollbar assets (kde#385627)
  * Adjust client-side decorations to look correct in both CSD and forced SSD environments
  * Add support for gtk3 theme variant feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Add additional fixes:
  * 0001-kconf_update-Add-gtk-primary-button-warps-slider-0-t.patch (kde#379773)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1537876800">- Update to 5.12.7
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.7.php
- Changes since 5.12.6:
  * Fix scrollbars in LibreOffice (kde#389709, boo#1116859)
  * [kconf_update] Add "gtk-primary-button-warps-slider=0" to generated GTK3 config (kde#379773)
- Remove patches, now upstream:
  * 0001-kconf_update-Add-gtk-primary-button-warps-slider-0-t.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1542801600">- Add patch to fix GTK treeviews:
  * 0001-GTK-theme-treeview-style-typo-bug-fix.patch</changelog>
</package>
<package pkgid="95d07062a9b0d25594df5fd33003755f74b5b5c0a335948040a07d490f0b6443" name="gtk3-schema" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="8fa99952e92be9cd17905a1cb9809afe4b495b10ae8b129768ee48dbef23b4fb" name="gtk3-tools" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="78e265cf6b1f21ecdb997db97c48472cf1eeecd4804f11055305e5dd9dd64c3d" name="gtk3-tools-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="913dce64663a439fc7043583c269bc13c27042bf5fa5e437327784320ce94013" name="guake" arch="noarch">
  <version epoch="0" ver="3.2.1" rel="lp150.2.3.1"/>
  <changelog author="sebix+novell.com@sebix.at" date="1522411200">- initial package for version 3.0.5
- add fix-simplegladeapp.patch to fix runtime bug</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1523707200">- update to version 3.1.1:
  * New Features
  * Quick open displays a combobox with predefined settings for Visual Studio Code, Atom and Sublime Text.
  * Bug Fixes
  * Fix hyperlink VTE
- update to version 3.1.0:
  * Release Summary
  * This version of Guake brings mostly bug fixes, and some new features like "Quick Open on selection".
    I have also reworked internally the Quick Open so that it can automatically open files from logs
    from pytest and other python development tools output. However, there might still some false
    positive on the hovering of the mouse in the terminal, the most famous being the output of ``ls -l``
    which may have the mouse looks like it sees hyperlinks on the terminal everywhere. Click does
    nothing but its an annoying limitation.
  * New Features:
  - New "start at login" option in the settings (only for GNOME) #251
  - Add ``--verbose``/``-v`` parameter to enable debug logging. Please note the existing ``-v`` (for
    version number) has been renamed ``-V``.
  - Support for hyperlink VTE extension (`described
    here &lt;https://gist.github.com/egmontkob/eb114294efbcd5adb1944c9f3cb5feda&gt;`__ ) #945 (Untested, as
    it requires VTE 0.50)
  - Add great color palettes from `Guake Color
    Scheme &lt;https://github.com/ziyenano/Guake-Color-Schemes&gt;
  - Allow application to capture right click (ex: Midnight commander). #1096. It is still possible to
    show the contextual menu with Shift+right click.
  * Bug Fixes:
  - delete tab even without libutempter (#1198)
  - Fix crash when changing command file #1229
  - fix ``import sys`` in ``simplegladeapp.py``
  - change scope of ``which_align`` variable in ``pref.py`` (#1225)
  - Fix user interface translations #1228
  - Fix several issues on Quick Edit:
  - There might be broken translations, or not up-to-date language support by Guake. A global refresh
    of all existing translations would be welcomed. Most has not been updated since the transition to
    Guake 3, so these languages support might probably be unfunctional or at least partialy
    localized.
- remove fix-simplegladeapp.patch, merged upstream</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1523880000">- Use gobject-introspection for typelib library detection.</changelog>
  <changelog author="badshah400@gmail.com" date="1525089600">- Update to version 3.2.1:
  * Introduce Nord: a new nice, clean new palette theme is
    available for Guake users (gh#Guake/guake#1275)
  * Fix duplication in theme list (gh#Guake/guake#1304)
  * Fix right click selection in Midnight Commander
  * Corrected usage of Vte.Regex.new_for_match to fix regular
    expression matching (hyperlinks, quick open) on VTE &gt;0.50
    (gh#Guake/guake#1295). URL with ' (simple quote) and ()
    (parenthesis) are now captured by hyperlink matcher. User can
    still select the URL in the terminal if he wishes to capture
    the exact url, before doing a Ctrl+click or a right click.
  * Fix "Grubbox Dark" theme
  * Updated translations.
- Changes from version 3.2.0:
  * Allow user to select the theme within the preference UI
  * Selected tab use "selected highlight" color from theme
    (gh#Guake/guake##1036)
  * Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1535025600">- Add python3-gobject-Gdk to Requires; fixes boo#1102963.</changelog>
</package>
<package pkgid="e38acd8eba84a39f855ccdd5b51072a6166693ab5b030423798160bbcfd54dbe" name="guake" arch="src">
  <version epoch="0" ver="3.2.1" rel="lp150.2.3.1"/>
  <changelog author="sebix+novell.com@sebix.at" date="1522411200">- initial package for version 3.0.5
- add fix-simplegladeapp.patch to fix runtime bug</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1523707200">- update to version 3.1.1:
  * New Features
  * Quick open displays a combobox with predefined settings for Visual Studio Code, Atom and Sublime Text.
  * Bug Fixes
  * Fix hyperlink VTE
- update to version 3.1.0:
  * Release Summary
  * This version of Guake brings mostly bug fixes, and some new features like "Quick Open on selection".
    I have also reworked internally the Quick Open so that it can automatically open files from logs
    from pytest and other python development tools output. However, there might still some false
    positive on the hovering of the mouse in the terminal, the most famous being the output of ``ls -l``
    which may have the mouse looks like it sees hyperlinks on the terminal everywhere. Click does
    nothing but its an annoying limitation.
  * New Features:
  - New "start at login" option in the settings (only for GNOME) #251
  - Add ``--verbose``/``-v`` parameter to enable debug logging. Please note the existing ``-v`` (for
    version number) has been renamed ``-V``.
  - Support for hyperlink VTE extension (`described
    here &lt;https://gist.github.com/egmontkob/eb114294efbcd5adb1944c9f3cb5feda&gt;`__ ) #945 (Untested, as
    it requires VTE 0.50)
  - Add great color palettes from `Guake Color
    Scheme &lt;https://github.com/ziyenano/Guake-Color-Schemes&gt;
  - Allow application to capture right click (ex: Midnight commander). #1096. It is still possible to
    show the contextual menu with Shift+right click.
  * Bug Fixes:
  - delete tab even without libutempter (#1198)
  - Fix crash when changing command file #1229
  - fix ``import sys`` in ``simplegladeapp.py``
  - change scope of ``which_align`` variable in ``pref.py`` (#1225)
  - Fix user interface translations #1228
  - Fix several issues on Quick Edit:
  - There might be broken translations, or not up-to-date language support by Guake. A global refresh
    of all existing translations would be welcomed. Most has not been updated since the transition to
    Guake 3, so these languages support might probably be unfunctional or at least partialy
    localized.
- remove fix-simplegladeapp.patch, merged upstream</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1523880000">- Use gobject-introspection for typelib library detection.</changelog>
  <changelog author="badshah400@gmail.com" date="1525089600">- Update to version 3.2.1:
  * Introduce Nord: a new nice, clean new palette theme is
    available for Guake users (gh#Guake/guake#1275)
  * Fix duplication in theme list (gh#Guake/guake#1304)
  * Fix right click selection in Midnight Commander
  * Corrected usage of Vte.Regex.new_for_match to fix regular
    expression matching (hyperlinks, quick open) on VTE &gt;0.50
    (gh#Guake/guake#1295). URL with ' (simple quote) and ()
    (parenthesis) are now captured by hyperlink matcher. User can
    still select the URL in the terminal if he wishes to capture
    the exact url, before doing a Ctrl+click or a right click.
  * Fix "Grubbox Dark" theme
  * Updated translations.
- Changes from version 3.2.0:
  * Allow user to select the theme within the preference UI
  * Selected tab use "selected highlight" color from theme
    (gh#Guake/guake##1036)
  * Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1535025600">- Add python3-gobject-Gdk to Requires; fixes boo#1102963.</changelog>
</package>
<package pkgid="8d2bc82d770b610ce9859a43c19f17a15d2d8c698dc1d60e1900c1f31530d0ce" name="guile" arch="src">
  <version epoch="0" ver="2.0.14" rel="lp150.3.3.1"/>
  <changelog author="dvaleev@suse.com" date="1335182400">- mark this threads test as unresolved since it may produce false
  negatives, depending on the behavior/timing of the garbage
  collector.</changelog>
  <changelog author="coolo@suse.com" date="1340971200">- libffi-devel is more generic than specific gcc versions (that no longer
  exist in factory)</changelog>
  <changelog author="pgajdos@suse.com" date="1342008000">- update to 2.0.6:
  * Notable changes
  * * New optimization pass: common subexpression elimination (CSE)
  * * Improvements to the partial evaluator
  * * Run finalizers asynchronously in asyncs
  * * Update SRFI-14 character sets to Unicode 6.1
  * * Better source information for datums
  * * Improved error and warning messages
  * * A few important bug fixes in the HTTP modules.
  * * Pretty-print improvements
  * * Fix memory leak involving applicable SMOBs
  * * Support for HTTP/1.1 chunked transfer coding
  * * Micro-optimizations
  * * Incompatible change to `scandir'
  * New interfaces
  * * New C function: `scm_to_pointer'
  * * New C inline functions: `scm_new_smob', `scm_new_double_smob'
  * * (ice-9 format): Add ~h specifier for localized number output.
  * * (web response): New procedure: `response-must-not-include-body?'
  * * New predicate: 'supports-source-properties?'
  * * New C helpers: `scm_c_values', `scm_c_nvalues'
  * * Newly public inline C function: `scm_unget_byte'
  * * (language tree-il): New functions: `tree-il=?', `tree-il-hash'
  * * New fluid: `%default-port-conversion-strategy'
  * * New syntax: `=&gt;' within `case'
  * * (web http): `make-chunked-input-port', `make-chunked-output-port'
  * * (web http): `declare-opaque-header!'
  * New deprecations
  * * `close-io-port' deprecated
  * * `scm_sym2var' deprecated
  * * Lookup closures deprecated
  * Bug fixes
  * * Fix use of unitialized stat buffer in search-path of absolute paths.
  * * Avoid calling `freelocale' with a NULL argument.
  * * Work around erroneous tr_TR locale in Darwin 8 in tests.
  * * Fix `getaddrinfo' test for Darwin 8.
  * * Use Gnulib's `regex' module for better regex portability.
  * * `source-properties' and friends work on any object
  * * Rewrite open-process in C, for robustness related to threads and fork
  * * Fix &lt;TAG&gt;vector-length when applied to other uniform vector types
  * * Fix escape-only prompt optimization (was disabled previously)
  * * Fix a segfault when /dev/urandom is not accessible
  * * Fix flush on soft ports, so that it actually runs.
  * * Better compatibility of SRFI-9 records with core records
  * * Fix and clarify documentation of `sorted?'.
  * * Fix IEEE-754 endianness conversion in bytevectors.
  * * Correct thunk check in the `wind' instruction.
  * * Add @acronym support to texinfo modules
  * * Fix docbook-&gt;texi for &lt;ulink&gt; without URL
  * * Fix `setvbuf' to leave the line/column number unchanged.
  * * Add missing public declaration for `scm_take_from_input_buffers'.
  * * Fix relative file name canonicalization with empty %LOAD-PATH entries.
  * * Import newer (ice-9 match) from Chibi-Scheme.
  * * Fix unbound variables and unbound values in ECMAScript runtime.
  * * Make SRFI-6 string ports Unicode-capable.
- removed patches:
  guile-turn-off-gc-test.patch
  guile-fix_fsf_add.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1354536000">- update to 2.0.7:
  * Notable changes
  * * SRFI-105 curly infix expressions are supported
  * * Reader options may now be per-port
  * * Futures may now be nested
  * * `GUILE_LOAD_PATH' et al can now add directories to the end of
    the path
  * * `load-in-vicinity' search for `.go' files in `%load-compiled-path'
  * * Extension search order fixed, and LD_LIBRARY_PATH preserved
  * * Optimize calls to `equal?' or `eqv?' with a constant argument
  * Manual updates
  * * SRFI-9 records now documented under "Compound Data Types"
  * * (ice-9 and-let-star) and (ice-9 curried-definitions) now documented
  * New interfaces
  * * New "functional record setters" as a GNU extension of SRFI-9
  * * web: New `http-get*', `response-body-port', and `text-content-type?'
    procedures
  * * `string-split' accepts character sets and predicates
  * * R6RS SRFI support
  * * `define-public' is no a longer curried definition by default
  etc. see NEWS</changelog>
  <changelog author="pgajdos@suse.com" date="1355745600">- fixed build: net-db.test takes EAI_SYSTEM error by
  * net-db-test.patch [bnc#794696]
- turn off one test in gc.test
  * gc-test.patch
    http://lists.gnu.org/archive/html/bug-guile/2012-07/msg00069.html</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1360065600">- move .so file to libguilereadline package [bnc#765436]</changelog>
  <changelog author="pgajdos@suse.com" date="1366027200">- updated to 2.0.9:
  * * New keyword arguments for procedures that open files
  * * Numerics improvements
  * * New optimizations
  * * `peek-char' no longer consumes EOF
  * * SLIB compatibility restored
  * * Better ,trace REPL command
  * * Better docstring syntax supported for `case-lambda'
  * * Improved handling of Unicode byte order marks
  etc. see NEWS for more/details
- removed unneeded gc-test.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1396267200">- updated to 2.0.11:
  * * New GDB extension to support Guile
  * * Improved integration between R6RS and native Guile exceptions
  * * Support for HTTP proxies
  * * Lexical syntax improvements
  * ** Support |...| symbol notation
  * ** Support '#true' and '#false' notation for booleans.
  * ** Recognize '#\escape' character name.
  * ** Accept "\|" in string literals.
  * * Custom binary input ports now support 'setvbuf'.
  * * SRFI-4 predicates and length accessors no longer accept arrays.
  * * GUILE_PROGS now supports specifying a minimum required version.
  etc, see NEWS.</changelog>
  <changelog author="pgajdos@suse.com" date="1398168000">- install libguile*-gdb.scm into
  %{_datadir}/gdb/auto-load%{_libdir}/  [bnc#874028]</changelog>
  <changelog author="pgajdos@suse.com" date="1423137600">- use fake buildstamp [bnc#916347]
  + guile-fake-buildstamp.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425902400">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="pgajdos@suse.com" date="1444219200">- libguile require glibc-locale [bnc#948804]</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1469102400">- updated to 2.0.12:
  * * FFI: Add support for functions that set 'errno'
  * * The #!r6rs directive now influences read syntax
  * * 'read' now accepts "\(" as equivalent to "("
  * * SRFI-14 character data set upgraded to Unicode 8.0.0
  * * SRFI-19 table of leap seconds updated
  * * 'string-hash', 'read-string', and 'write' have been optimized
  * * GOOPS bug fix for inherited accessor methods
  for complete list of changes see NEWS
- refreshed patches
- add key of Andy Wingo to guile.keyring</changelog>
  <changelog author="mpluskal@suse.com" date="1476532800">- Update to version 2.0.13
  * Security fixes
    + CVE-2016-8606: REPL server now protects against HTTP
    inter-protocol attacks
    + CVE-2016-8605: 'mkdir' procedure no longer calls umask(2)
  * Several bugfixes and improvements (for details see NEWS file)
- Fetch keyring from savannah
- Use https for all urls</changelog>
  <changelog author="schwab@suse.de" date="1478606400">- repl-server-test.patch: fix race in 00-repl-server.test</changelog>
  <changelog author="mpluskal@suse.com" date="1487332800">- Update to version 2.0.14:
  * Bug fixes
    + Builds of .go files and of Guile itself are now
    bit-reproducible
    + 'number-&gt;locale-string' and 'monetary-amount-&gt;locale-string'
    fixes
    + (system base target) now recognizes "sh3" as a
    cross-compilation target
    + Fix race condition in '00-repl-server.test'
    + 'scandir' from (ice-9 ftw) no longer calls 'stat' for each
    entry
  * Several documentation improvements
- Drop no longer needed patches:
  * guile-fake-buildstamp.patch
  * repl-server-test.patch
- Small packaging cleanup with help of spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Format with spec-cleaner
- Fix build with new glibc 2.27 bsc#1079837:
  * guile-disable-int-tests.patch
- Use %license macro to install license</changelog>
  <changelog author="tchvatal@suse.com" date="1519819201">- Add patch from Fedora not to link to libgc in all consumer libs:
  * guile-2.0.14-gc_pkgconfig_private.patch
- Add _constraints file to ensure we can build properly</changelog>
  <changelog author="tchvatal@suse.com" date="1519819202">- Add back the require on gc-devel as it is still needed for the
  non .pc using packages (eg autotools)</changelog>
  <changelog author="tdevries@suse.com" date="1540123200">- Use 'scm_from_utf8_{string,symbol,keyword}' for C string literals
  where appropriate [bsc#1110085]
  * guile-use-utf8.patch
- Add standalone test test-ja_JP.sjis [bsc#1110085]
  * guile-add-test-ja_JP.sjis.patch
    https://debbugs.gnu.org/cgi/bugreport.cgi?bug=33044#43</changelog>
</package>
<package pkgid="9e8ecc5a29fff1834b447903e68db11df577a84d7ec0e2fef5442d2eb6bd45a9" name="guile" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="lp150.3.3.1"/>
  <changelog author="dvaleev@suse.com" date="1335182400">- mark this threads test as unresolved since it may produce false
  negatives, depending on the behavior/timing of the garbage
  collector.</changelog>
  <changelog author="coolo@suse.com" date="1340971200">- libffi-devel is more generic than specific gcc versions (that no longer
  exist in factory)</changelog>
  <changelog author="pgajdos@suse.com" date="1342008000">- update to 2.0.6:
  * Notable changes
  * * New optimization pass: common subexpression elimination (CSE)
  * * Improvements to the partial evaluator
  * * Run finalizers asynchronously in asyncs
  * * Update SRFI-14 character sets to Unicode 6.1
  * * Better source information for datums
  * * Improved error and warning messages
  * * A few important bug fixes in the HTTP modules.
  * * Pretty-print improvements
  * * Fix memory leak involving applicable SMOBs
  * * Support for HTTP/1.1 chunked transfer coding
  * * Micro-optimizations
  * * Incompatible change to `scandir'
  * New interfaces
  * * New C function: `scm_to_pointer'
  * * New C inline functions: `scm_new_smob', `scm_new_double_smob'
  * * (ice-9 format): Add ~h specifier for localized number output.
  * * (web response): New procedure: `response-must-not-include-body?'
  * * New predicate: 'supports-source-properties?'
  * * New C helpers: `scm_c_values', `scm_c_nvalues'
  * * Newly public inline C function: `scm_unget_byte'
  * * (language tree-il): New functions: `tree-il=?', `tree-il-hash'
  * * New fluid: `%default-port-conversion-strategy'
  * * New syntax: `=&gt;' within `case'
  * * (web http): `make-chunked-input-port', `make-chunked-output-port'
  * * (web http): `declare-opaque-header!'
  * New deprecations
  * * `close-io-port' deprecated
  * * `scm_sym2var' deprecated
  * * Lookup closures deprecated
  * Bug fixes
  * * Fix use of unitialized stat buffer in search-path of absolute paths.
  * * Avoid calling `freelocale' with a NULL argument.
  * * Work around erroneous tr_TR locale in Darwin 8 in tests.
  * * Fix `getaddrinfo' test for Darwin 8.
  * * Use Gnulib's `regex' module for better regex portability.
  * * `source-properties' and friends work on any object
  * * Rewrite open-process in C, for robustness related to threads and fork
  * * Fix &lt;TAG&gt;vector-length when applied to other uniform vector types
  * * Fix escape-only prompt optimization (was disabled previously)
  * * Fix a segfault when /dev/urandom is not accessible
  * * Fix flush on soft ports, so that it actually runs.
  * * Better compatibility of SRFI-9 records with core records
  * * Fix and clarify documentation of `sorted?'.
  * * Fix IEEE-754 endianness conversion in bytevectors.
  * * Correct thunk check in the `wind' instruction.
  * * Add @acronym support to texinfo modules
  * * Fix docbook-&gt;texi for &lt;ulink&gt; without URL
  * * Fix `setvbuf' to leave the line/column number unchanged.
  * * Add missing public declaration for `scm_take_from_input_buffers'.
  * * Fix relative file name canonicalization with empty %LOAD-PATH entries.
  * * Import newer (ice-9 match) from Chibi-Scheme.
  * * Fix unbound variables and unbound values in ECMAScript runtime.
  * * Make SRFI-6 string ports Unicode-capable.
- removed patches:
  guile-turn-off-gc-test.patch
  guile-fix_fsf_add.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1354536000">- update to 2.0.7:
  * Notable changes
  * * SRFI-105 curly infix expressions are supported
  * * Reader options may now be per-port
  * * Futures may now be nested
  * * `GUILE_LOAD_PATH' et al can now add directories to the end of
    the path
  * * `load-in-vicinity' search for `.go' files in `%load-compiled-path'
  * * Extension search order fixed, and LD_LIBRARY_PATH preserved
  * * Optimize calls to `equal?' or `eqv?' with a constant argument
  * Manual updates
  * * SRFI-9 records now documented under "Compound Data Types"
  * * (ice-9 and-let-star) and (ice-9 curried-definitions) now documented
  * New interfaces
  * * New "functional record setters" as a GNU extension of SRFI-9
  * * web: New `http-get*', `response-body-port', and `text-content-type?'
    procedures
  * * `string-split' accepts character sets and predicates
  * * R6RS SRFI support
  * * `define-public' is no a longer curried definition by default
  etc. see NEWS</changelog>
  <changelog author="pgajdos@suse.com" date="1355745600">- fixed build: net-db.test takes EAI_SYSTEM error by
  * net-db-test.patch [bnc#794696]
- turn off one test in gc.test
  * gc-test.patch
    http://lists.gnu.org/archive/html/bug-guile/2012-07/msg00069.html</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1360065600">- move .so file to libguilereadline package [bnc#765436]</changelog>
  <changelog author="pgajdos@suse.com" date="1366027200">- updated to 2.0.9:
  * * New keyword arguments for procedures that open files
  * * Numerics improvements
  * * New optimizations
  * * `peek-char' no longer consumes EOF
  * * SLIB compatibility restored
  * * Better ,trace REPL command
  * * Better docstring syntax supported for `case-lambda'
  * * Improved handling of Unicode byte order marks
  etc. see NEWS for more/details
- removed unneeded gc-test.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1396267200">- updated to 2.0.11:
  * * New GDB extension to support Guile
  * * Improved integration between R6RS and native Guile exceptions
  * * Support for HTTP proxies
  * * Lexical syntax improvements
  * ** Support |...| symbol notation
  * ** Support '#true' and '#false' notation for booleans.
  * ** Recognize '#\escape' character name.
  * ** Accept "\|" in string literals.
  * * Custom binary input ports now support 'setvbuf'.
  * * SRFI-4 predicates and length accessors no longer accept arrays.
  * * GUILE_PROGS now supports specifying a minimum required version.
  etc, see NEWS.</changelog>
  <changelog author="pgajdos@suse.com" date="1398168000">- install libguile*-gdb.scm into
  %{_datadir}/gdb/auto-load%{_libdir}/  [bnc#874028]</changelog>
  <changelog author="pgajdos@suse.com" date="1423137600">- use fake buildstamp [bnc#916347]
  + guile-fake-buildstamp.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425902400">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="pgajdos@suse.com" date="1444219200">- libguile require glibc-locale [bnc#948804]</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1469102400">- updated to 2.0.12:
  * * FFI: Add support for functions that set 'errno'
  * * The #!r6rs directive now influences read syntax
  * * 'read' now accepts "\(" as equivalent to "("
  * * SRFI-14 character data set upgraded to Unicode 8.0.0
  * * SRFI-19 table of leap seconds updated
  * * 'string-hash', 'read-string', and 'write' have been optimized
  * * GOOPS bug fix for inherited accessor methods
  for complete list of changes see NEWS
- refreshed patches
- add key of Andy Wingo to guile.keyring</changelog>
  <changelog author="mpluskal@suse.com" date="1476532800">- Update to version 2.0.13
  * Security fixes
    + CVE-2016-8606: REPL server now protects against HTTP
    inter-protocol attacks
    + CVE-2016-8605: 'mkdir' procedure no longer calls umask(2)
  * Several bugfixes and improvements (for details see NEWS file)
- Fetch keyring from savannah
- Use https for all urls</changelog>
  <changelog author="schwab@suse.de" date="1478606400">- repl-server-test.patch: fix race in 00-repl-server.test</changelog>
  <changelog author="mpluskal@suse.com" date="1487332800">- Update to version 2.0.14:
  * Bug fixes
    + Builds of .go files and of Guile itself are now
    bit-reproducible
    + 'number-&gt;locale-string' and 'monetary-amount-&gt;locale-string'
    fixes
    + (system base target) now recognizes "sh3" as a
    cross-compilation target
    + Fix race condition in '00-repl-server.test'
    + 'scandir' from (ice-9 ftw) no longer calls 'stat' for each
    entry
  * Several documentation improvements
- Drop no longer needed patches:
  * guile-fake-buildstamp.patch
  * repl-server-test.patch
- Small packaging cleanup with help of spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Format with spec-cleaner
- Fix build with new glibc 2.27 bsc#1079837:
  * guile-disable-int-tests.patch
- Use %license macro to install license</changelog>
  <changelog author="tchvatal@suse.com" date="1519819201">- Add patch from Fedora not to link to libgc in all consumer libs:
  * guile-2.0.14-gc_pkgconfig_private.patch
- Add _constraints file to ensure we can build properly</changelog>
  <changelog author="tchvatal@suse.com" date="1519819202">- Add back the require on gc-devel as it is still needed for the
  non .pc using packages (eg autotools)</changelog>
  <changelog author="tdevries@suse.com" date="1540123200">- Use 'scm_from_utf8_{string,symbol,keyword}' for C string literals
  where appropriate [bsc#1110085]
  * guile-use-utf8.patch
- Add standalone test test-ja_JP.sjis [bsc#1110085]
  * guile-add-test-ja_JP.sjis.patch
    https://debbugs.gnu.org/cgi/bugreport.cgi?bug=33044#43</changelog>
</package>
<package pkgid="dcf1f6c23226adc5eb8ee7bc43b2c3bac5cdec221846a4ded4f09571688b7dbb" name="guile-devel" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="lp150.3.3.1"/>
  <changelog author="dvaleev@suse.com" date="1335182400">- mark this threads test as unresolved since it may produce false
  negatives, depending on the behavior/timing of the garbage
  collector.</changelog>
  <changelog author="coolo@suse.com" date="1340971200">- libffi-devel is more generic than specific gcc versions (that no longer
  exist in factory)</changelog>
  <changelog author="pgajdos@suse.com" date="1342008000">- update to 2.0.6:
  * Notable changes
  * * New optimization pass: common subexpression elimination (CSE)
  * * Improvements to the partial evaluator
  * * Run finalizers asynchronously in asyncs
  * * Update SRFI-14 character sets to Unicode 6.1
  * * Better source information for datums
  * * Improved error and warning messages
  * * A few important bug fixes in the HTTP modules.
  * * Pretty-print improvements
  * * Fix memory leak involving applicable SMOBs
  * * Support for HTTP/1.1 chunked transfer coding
  * * Micro-optimizations
  * * Incompatible change to `scandir'
  * New interfaces
  * * New C function: `scm_to_pointer'
  * * New C inline functions: `scm_new_smob', `scm_new_double_smob'
  * * (ice-9 format): Add ~h specifier for localized number output.
  * * (web response): New procedure: `response-must-not-include-body?'
  * * New predicate: 'supports-source-properties?'
  * * New C helpers: `scm_c_values', `scm_c_nvalues'
  * * Newly public inline C function: `scm_unget_byte'
  * * (language tree-il): New functions: `tree-il=?', `tree-il-hash'
  * * New fluid: `%default-port-conversion-strategy'
  * * New syntax: `=&gt;' within `case'
  * * (web http): `make-chunked-input-port', `make-chunked-output-port'
  * * (web http): `declare-opaque-header!'
  * New deprecations
  * * `close-io-port' deprecated
  * * `scm_sym2var' deprecated
  * * Lookup closures deprecated
  * Bug fixes
  * * Fix use of unitialized stat buffer in search-path of absolute paths.
  * * Avoid calling `freelocale' with a NULL argument.
  * * Work around erroneous tr_TR locale in Darwin 8 in tests.
  * * Fix `getaddrinfo' test for Darwin 8.
  * * Use Gnulib's `regex' module for better regex portability.
  * * `source-properties' and friends work on any object
  * * Rewrite open-process in C, for robustness related to threads and fork
  * * Fix &lt;TAG&gt;vector-length when applied to other uniform vector types
  * * Fix escape-only prompt optimization (was disabled previously)
  * * Fix a segfault when /dev/urandom is not accessible
  * * Fix flush on soft ports, so that it actually runs.
  * * Better compatibility of SRFI-9 records with core records
  * * Fix and clarify documentation of `sorted?'.
  * * Fix IEEE-754 endianness conversion in bytevectors.
  * * Correct thunk check in the `wind' instruction.
  * * Add @acronym support to texinfo modules
  * * Fix docbook-&gt;texi for &lt;ulink&gt; without URL
  * * Fix `setvbuf' to leave the line/column number unchanged.
  * * Add missing public declaration for `scm_take_from_input_buffers'.
  * * Fix relative file name canonicalization with empty %LOAD-PATH entries.
  * * Import newer (ice-9 match) from Chibi-Scheme.
  * * Fix unbound variables and unbound values in ECMAScript runtime.
  * * Make SRFI-6 string ports Unicode-capable.
- removed patches:
  guile-turn-off-gc-test.patch
  guile-fix_fsf_add.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1354536000">- update to 2.0.7:
  * Notable changes
  * * SRFI-105 curly infix expressions are supported
  * * Reader options may now be per-port
  * * Futures may now be nested
  * * `GUILE_LOAD_PATH' et al can now add directories to the end of
    the path
  * * `load-in-vicinity' search for `.go' files in `%load-compiled-path'
  * * Extension search order fixed, and LD_LIBRARY_PATH preserved
  * * Optimize calls to `equal?' or `eqv?' with a constant argument
  * Manual updates
  * * SRFI-9 records now documented under "Compound Data Types"
  * * (ice-9 and-let-star) and (ice-9 curried-definitions) now documented
  * New interfaces
  * * New "functional record setters" as a GNU extension of SRFI-9
  * * web: New `http-get*', `response-body-port', and `text-content-type?'
    procedures
  * * `string-split' accepts character sets and predicates
  * * R6RS SRFI support
  * * `define-public' is no a longer curried definition by default
  etc. see NEWS</changelog>
  <changelog author="pgajdos@suse.com" date="1355745600">- fixed build: net-db.test takes EAI_SYSTEM error by
  * net-db-test.patch [bnc#794696]
- turn off one test in gc.test
  * gc-test.patch
    http://lists.gnu.org/archive/html/bug-guile/2012-07/msg00069.html</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1360065600">- move .so file to libguilereadline package [bnc#765436]</changelog>
  <changelog author="pgajdos@suse.com" date="1366027200">- updated to 2.0.9:
  * * New keyword arguments for procedures that open files
  * * Numerics improvements
  * * New optimizations
  * * `peek-char' no longer consumes EOF
  * * SLIB compatibility restored
  * * Better ,trace REPL command
  * * Better docstring syntax supported for `case-lambda'
  * * Improved handling of Unicode byte order marks
  etc. see NEWS for more/details
- removed unneeded gc-test.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1396267200">- updated to 2.0.11:
  * * New GDB extension to support Guile
  * * Improved integration between R6RS and native Guile exceptions
  * * Support for HTTP proxies
  * * Lexical syntax improvements
  * ** Support |...| symbol notation
  * ** Support '#true' and '#false' notation for booleans.
  * ** Recognize '#\escape' character name.
  * ** Accept "\|" in string literals.
  * * Custom binary input ports now support 'setvbuf'.
  * * SRFI-4 predicates and length accessors no longer accept arrays.
  * * GUILE_PROGS now supports specifying a minimum required version.
  etc, see NEWS.</changelog>
  <changelog author="pgajdos@suse.com" date="1398168000">- install libguile*-gdb.scm into
  %{_datadir}/gdb/auto-load%{_libdir}/  [bnc#874028]</changelog>
  <changelog author="pgajdos@suse.com" date="1423137600">- use fake buildstamp [bnc#916347]
  + guile-fake-buildstamp.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425902400">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="pgajdos@suse.com" date="1444219200">- libguile require glibc-locale [bnc#948804]</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1469102400">- updated to 2.0.12:
  * * FFI: Add support for functions that set 'errno'
  * * The #!r6rs directive now influences read syntax
  * * 'read' now accepts "\(" as equivalent to "("
  * * SRFI-14 character data set upgraded to Unicode 8.0.0
  * * SRFI-19 table of leap seconds updated
  * * 'string-hash', 'read-string', and 'write' have been optimized
  * * GOOPS bug fix for inherited accessor methods
  for complete list of changes see NEWS
- refreshed patches
- add key of Andy Wingo to guile.keyring</changelog>
  <changelog author="mpluskal@suse.com" date="1476532800">- Update to version 2.0.13
  * Security fixes
    + CVE-2016-8606: REPL server now protects against HTTP
    inter-protocol attacks
    + CVE-2016-8605: 'mkdir' procedure no longer calls umask(2)
  * Several bugfixes and improvements (for details see NEWS file)
- Fetch keyring from savannah
- Use https for all urls</changelog>
  <changelog author="schwab@suse.de" date="1478606400">- repl-server-test.patch: fix race in 00-repl-server.test</changelog>
  <changelog author="mpluskal@suse.com" date="1487332800">- Update to version 2.0.14:
  * Bug fixes
    + Builds of .go files and of Guile itself are now
    bit-reproducible
    + 'number-&gt;locale-string' and 'monetary-amount-&gt;locale-string'
    fixes
    + (system base target) now recognizes "sh3" as a
    cross-compilation target
    + Fix race condition in '00-repl-server.test'
    + 'scandir' from (ice-9 ftw) no longer calls 'stat' for each
    entry
  * Several documentation improvements
- Drop no longer needed patches:
  * guile-fake-buildstamp.patch
  * repl-server-test.patch
- Small packaging cleanup with help of spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Format with spec-cleaner
- Fix build with new glibc 2.27 bsc#1079837:
  * guile-disable-int-tests.patch
- Use %license macro to install license</changelog>
  <changelog author="tchvatal@suse.com" date="1519819201">- Add patch from Fedora not to link to libgc in all consumer libs:
  * guile-2.0.14-gc_pkgconfig_private.patch
- Add _constraints file to ensure we can build properly</changelog>
  <changelog author="tchvatal@suse.com" date="1519819202">- Add back the require on gc-devel as it is still needed for the
  non .pc using packages (eg autotools)</changelog>
  <changelog author="tdevries@suse.com" date="1540123200">- Use 'scm_from_utf8_{string,symbol,keyword}' for C string literals
  where appropriate [bsc#1110085]
  * guile-use-utf8.patch
- Add standalone test test-ja_JP.sjis [bsc#1110085]
  * guile-add-test-ja_JP.sjis.patch
    https://debbugs.gnu.org/cgi/bugreport.cgi?bug=33044#43</changelog>
</package>
<package pkgid="7c2df8db2266e4e48f7fa6256f6d200f11645b8e8cbceda4d1c1eb46d1a4fd67" name="guile-modules-2_0" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="lp150.3.3.1"/>
  <changelog author="dvaleev@suse.com" date="1335182400">- mark this threads test as unresolved since it may produce false
  negatives, depending on the behavior/timing of the garbage
  collector.</changelog>
  <changelog author="coolo@suse.com" date="1340971200">- libffi-devel is more generic than specific gcc versions (that no longer
  exist in factory)</changelog>
  <changelog author="pgajdos@suse.com" date="1342008000">- update to 2.0.6:
  * Notable changes
  * * New optimization pass: common subexpression elimination (CSE)
  * * Improvements to the partial evaluator
  * * Run finalizers asynchronously in asyncs
  * * Update SRFI-14 character sets to Unicode 6.1
  * * Better source information for datums
  * * Improved error and warning messages
  * * A few important bug fixes in the HTTP modules.
  * * Pretty-print improvements
  * * Fix memory leak involving applicable SMOBs
  * * Support for HTTP/1.1 chunked transfer coding
  * * Micro-optimizations
  * * Incompatible change to `scandir'
  * New interfaces
  * * New C function: `scm_to_pointer'
  * * New C inline functions: `scm_new_smob', `scm_new_double_smob'
  * * (ice-9 format): Add ~h specifier for localized number output.
  * * (web response): New procedure: `response-must-not-include-body?'
  * * New predicate: 'supports-source-properties?'
  * * New C helpers: `scm_c_values', `scm_c_nvalues'
  * * Newly public inline C function: `scm_unget_byte'
  * * (language tree-il): New functions: `tree-il=?', `tree-il-hash'
  * * New fluid: `%default-port-conversion-strategy'
  * * New syntax: `=&gt;' within `case'
  * * (web http): `make-chunked-input-port', `make-chunked-output-port'
  * * (web http): `declare-opaque-header!'
  * New deprecations
  * * `close-io-port' deprecated
  * * `scm_sym2var' deprecated
  * * Lookup closures deprecated
  * Bug fixes
  * * Fix use of unitialized stat buffer in search-path of absolute paths.
  * * Avoid calling `freelocale' with a NULL argument.
  * * Work around erroneous tr_TR locale in Darwin 8 in tests.
  * * Fix `getaddrinfo' test for Darwin 8.
  * * Use Gnulib's `regex' module for better regex portability.
  * * `source-properties' and friends work on any object
  * * Rewrite open-process in C, for robustness related to threads and fork
  * * Fix &lt;TAG&gt;vector-length when applied to other uniform vector types
  * * Fix escape-only prompt optimization (was disabled previously)
  * * Fix a segfault when /dev/urandom is not accessible
  * * Fix flush on soft ports, so that it actually runs.
  * * Better compatibility of SRFI-9 records with core records
  * * Fix and clarify documentation of `sorted?'.
  * * Fix IEEE-754 endianness conversion in bytevectors.
  * * Correct thunk check in the `wind' instruction.
  * * Add @acronym support to texinfo modules
  * * Fix docbook-&gt;texi for &lt;ulink&gt; without URL
  * * Fix `setvbuf' to leave the line/column number unchanged.
  * * Add missing public declaration for `scm_take_from_input_buffers'.
  * * Fix relative file name canonicalization with empty %LOAD-PATH entries.
  * * Import newer (ice-9 match) from Chibi-Scheme.
  * * Fix unbound variables and unbound values in ECMAScript runtime.
  * * Make SRFI-6 string ports Unicode-capable.
- removed patches:
  guile-turn-off-gc-test.patch
  guile-fix_fsf_add.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1354536000">- update to 2.0.7:
  * Notable changes
  * * SRFI-105 curly infix expressions are supported
  * * Reader options may now be per-port
  * * Futures may now be nested
  * * `GUILE_LOAD_PATH' et al can now add directories to the end of
    the path
  * * `load-in-vicinity' search for `.go' files in `%load-compiled-path'
  * * Extension search order fixed, and LD_LIBRARY_PATH preserved
  * * Optimize calls to `equal?' or `eqv?' with a constant argument
  * Manual updates
  * * SRFI-9 records now documented under "Compound Data Types"
  * * (ice-9 and-let-star) and (ice-9 curried-definitions) now documented
  * New interfaces
  * * New "functional record setters" as a GNU extension of SRFI-9
  * * web: New `http-get*', `response-body-port', and `text-content-type?'
    procedures
  * * `string-split' accepts character sets and predicates
  * * R6RS SRFI support
  * * `define-public' is no a longer curried definition by default
  etc. see NEWS</changelog>
  <changelog author="pgajdos@suse.com" date="1355745600">- fixed build: net-db.test takes EAI_SYSTEM error by
  * net-db-test.patch [bnc#794696]
- turn off one test in gc.test
  * gc-test.patch
    http://lists.gnu.org/archive/html/bug-guile/2012-07/msg00069.html</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1360065600">- move .so file to libguilereadline package [bnc#765436]</changelog>
  <changelog author="pgajdos@suse.com" date="1366027200">- updated to 2.0.9:
  * * New keyword arguments for procedures that open files
  * * Numerics improvements
  * * New optimizations
  * * `peek-char' no longer consumes EOF
  * * SLIB compatibility restored
  * * Better ,trace REPL command
  * * Better docstring syntax supported for `case-lambda'
  * * Improved handling of Unicode byte order marks
  etc. see NEWS for more/details
- removed unneeded gc-test.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1396267200">- updated to 2.0.11:
  * * New GDB extension to support Guile
  * * Improved integration between R6RS and native Guile exceptions
  * * Support for HTTP proxies
  * * Lexical syntax improvements
  * ** Support |...| symbol notation
  * ** Support '#true' and '#false' notation for booleans.
  * ** Recognize '#\escape' character name.
  * ** Accept "\|" in string literals.
  * * Custom binary input ports now support 'setvbuf'.
  * * SRFI-4 predicates and length accessors no longer accept arrays.
  * * GUILE_PROGS now supports specifying a minimum required version.
  etc, see NEWS.</changelog>
  <changelog author="pgajdos@suse.com" date="1398168000">- install libguile*-gdb.scm into
  %{_datadir}/gdb/auto-load%{_libdir}/  [bnc#874028]</changelog>
  <changelog author="pgajdos@suse.com" date="1423137600">- use fake buildstamp [bnc#916347]
  + guile-fake-buildstamp.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425902400">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="pgajdos@suse.com" date="1444219200">- libguile require glibc-locale [bnc#948804]</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1469102400">- updated to 2.0.12:
  * * FFI: Add support for functions that set 'errno'
  * * The #!r6rs directive now influences read syntax
  * * 'read' now accepts "\(" as equivalent to "("
  * * SRFI-14 character data set upgraded to Unicode 8.0.0
  * * SRFI-19 table of leap seconds updated
  * * 'string-hash', 'read-string', and 'write' have been optimized
  * * GOOPS bug fix for inherited accessor methods
  for complete list of changes see NEWS
- refreshed patches
- add key of Andy Wingo to guile.keyring</changelog>
  <changelog author="mpluskal@suse.com" date="1476532800">- Update to version 2.0.13
  * Security fixes
    + CVE-2016-8606: REPL server now protects against HTTP
    inter-protocol attacks
    + CVE-2016-8605: 'mkdir' procedure no longer calls umask(2)
  * Several bugfixes and improvements (for details see NEWS file)
- Fetch keyring from savannah
- Use https for all urls</changelog>
  <changelog author="schwab@suse.de" date="1478606400">- repl-server-test.patch: fix race in 00-repl-server.test</changelog>
  <changelog author="mpluskal@suse.com" date="1487332800">- Update to version 2.0.14:
  * Bug fixes
    + Builds of .go files and of Guile itself are now
    bit-reproducible
    + 'number-&gt;locale-string' and 'monetary-amount-&gt;locale-string'
    fixes
    + (system base target) now recognizes "sh3" as a
    cross-compilation target
    + Fix race condition in '00-repl-server.test'
    + 'scandir' from (ice-9 ftw) no longer calls 'stat' for each
    entry
  * Several documentation improvements
- Drop no longer needed patches:
  * guile-fake-buildstamp.patch
  * repl-server-test.patch
- Small packaging cleanup with help of spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Format with spec-cleaner
- Fix build with new glibc 2.27 bsc#1079837:
  * guile-disable-int-tests.patch
- Use %license macro to install license</changelog>
  <changelog author="tchvatal@suse.com" date="1519819201">- Add patch from Fedora not to link to libgc in all consumer libs:
  * guile-2.0.14-gc_pkgconfig_private.patch
- Add _constraints file to ensure we can build properly</changelog>
  <changelog author="tchvatal@suse.com" date="1519819202">- Add back the require on gc-devel as it is still needed for the
  non .pc using packages (eg autotools)</changelog>
  <changelog author="tdevries@suse.com" date="1540123200">- Use 'scm_from_utf8_{string,symbol,keyword}' for C string literals
  where appropriate [bsc#1110085]
  * guile-use-utf8.patch
- Add standalone test test-ja_JP.sjis [bsc#1110085]
  * guile-add-test-ja_JP.sjis.patch
    https://debbugs.gnu.org/cgi/bugreport.cgi?bug=33044#43</changelog>
</package>
<package pkgid="3efecd35be63759b0fba80aad5d2380a1ec2220a30194355452397b6d69269b4" name="guix" arch="src">
  <version epoch="0" ver="0.14.0" rel="lp150.2.3.1"/>
  <changelog author="sleep_walker@opensuse.org" date="1443700800">- use pkgconfig dependencies
- clean-up with spec-cleaner</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1446379200">- rename default group from guix-builders to guixbuild to match
  upstream
- install /gnu/store directory
- depend on emacs, package emacs scripts</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1446638400">- change ownership of /gnu/store
- remove sysconfig.guix file as it is not used anymore
- define macro %guix_builder_group to make such changes in future
  easier</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1447329600">- bump to 0.9.0
  - see changelog for complete list of changes
- add guile-json as dependency</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1451995200">- fix typo preventing creation of new users</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1455278400">- replace setBadness with addFilter in guix-rpmlint, add explanations
- add guix-rpmlint into spec file as Source
- create rcguix-daemon symlink
- make guix bash completion script as %config to silence warning</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1455278401">- add ExclusiveArch to restrict available architectures
- remove filter for non-standard group guixbuild (it is standard now)
- remove %config for bash completion script (rpmlint was fixed)</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1460808000">- bump to 0.10.0
- add gnutls-guile as build time dependency
- don't mark bash completion as %config (warning fixed)</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1467806400">- explicitly require libgcrypt-devel until the dynamic-link is able to
  load symlink target of /usr/lib*/libgcrypt.so
  http://debbugs.gnu.org/cgi/bugreport.cgi?bug=21076</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1468065600">- require gnutls-guile also as run time dependency</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1470225600">- bump to 0.11.0
  overview of changes is in NEWS</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1482753600">- bump to 0.12.0
  overview of changes is in NEWS</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1495540800">- bump to 0.13.0
  overview of changes is in NEWS
- add signatures for the bootstrap tarballs
- drop emacs dependency (emacs-guix is split out)
- update keyring</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1495972800">- replace pkgconfig(guile-2.0) &gt;= 2.0.7 dependency with guile-devel
  (guile 2.2 provides pkgconfig(guile-2.2) and OBS can't handle
  boolean operators in dependencies yet</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518696000">- require guile-git and libgit2-devel for build
- bump to 0.14.0
  Changes in 0.14.0
  * Package management
  * ?guix package? displays how much will be downloaded
  * ?guix package? warns about insufficient disk space
  * ?guix package? now reports package collisions early on
  * ?guix package --search? sorts results by relevance
  * ?guix pull? now fetches code directly over Git using Guile-Git
  * Substitutes can be downloaded from servers equivalent to the authorized ones
  * New ?guix-daemon? options: ?--listen?, ?--timeout?, ?--max-silent-time?
  * New ?guix weather? command
  * ?guix publish --cache? now also caches uncompressed items
  * ?guix publish? no longer removes live items from its cache
  * ?guix challenge? now displays an overall summary
  * ?guix refresh? no longer uses FTP for GNU and GNOME packages
  * ?guix refresh? has a new ?-m? or ?--manifest? option
  * New ?refresh? checker for ?guix lint?
  * New ?json? importer for ?guix import? to simplify first packages
  * New ?texlive? importer for ?guix import?
  * Distribution
  * GuixSD installation image is now available as ISO-9660
  * GuixSD installation image now includes an ?sshd? service
  * New (gnu bootloaders) API, with support for U-Boot and extlinux
  * ?grub-configuration? is deprecated in favor of ?bootloader-configuration?
  * ?%desktop-services? now includes NetworkManager instead of Wicd
  * The (uuid ?) form can now specify FAT32 and ISO-9660 UUIDs
  * ?guix system? now reports missing file system UUIDs and labels
  * ?guix system? can provide hints when reporting unbound variables
  * New ?--file-system-type? option for ?guix system disk-image?
  * ?guix system disk-image? can now creates ISO-9660 images
  * ?guix system vm-image? &amp; co. automatically estimate the image size
  * ?guix system vm? now uses overlayfs instead of unionfs
  * ?guix system init? displays a progress bar while copying files
  * TeX Live is now also available as a set of small ?texlive-? packages
  * New ?guix system search? command to search for services
  * New services
    certbot, fcgiwrap, gdm, git-http, knot, libvirt, memcached,
    mongodb, mpd, murmur, rsync, tailon, sysctl
  * 1211 new packages
  * 1403 package updates
  * Programming interfaces
  * New build systems: ?font?, ?meson?, ?minify?, ?scons?, ?texlive?
  * ?cmake-build-system? now supports cross-compilation
  * Various improvements to ?asdf-build-system?, ?emacs-build-system?,
    ?ant-build-system?, and ?go-build-system?
  * ?patches? field of &lt;origin&gt; can now contain any lowerable object
  * (gnu system vm) has a new ?make-iso9660-image? procedure
  * ?openssh-service-type? can now be extended with new authorized keys
  * ?rottlog-service-type? can now be extended with new ?log-rotation?s
  * ?network-manager-service-type? now supports VPN plugins
  * &lt;service-type&gt; now has a ?description? field, used by ?guix system search?
  * New ?virtual-machine? form in (gnu system vm)
  * New (gnu system uuid) module, which defines a disjoint &lt;uuid&gt; type
  * New (guix progress) module
  * Noteworthy bug fixes
  * GuixSD no longer creates setuid binaries in /gnu/store
    (&lt;https://bugs.gnu.org/28751&gt;)
  * /root is no longer world-readable (&lt;http://bugs.gnu.org/27135&gt;)
  * ?guix publish? no longer leaks memory (&lt;https://bugs.gnu.org/28784&gt;)
  * Missing cursor icons in GNOME could cause crashes
    (&lt;https://bugs.gnu.org/25958&gt;)
  * Setuid programs now honor the system timezone
    (&lt;https://bugs.gnu.org/29212&gt;)
  * Clients honor the daemon?s ?max-silent-time?
    (&lt;https://bugs.gnu.org/27157&gt;)
  * ?guix substitute? honors substitute expiry time again
    (&lt;https://lists.gnu.org/archive/html/guix-devel/2017-07/msg00179.html&gt;)
  * Several portability fixes for aarch64
  * Native language support
  Updated translations: da (Danish), fr (French)</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1519128000">- use wrapper for running daemon and alter service file to use it
  - if there is new daemon available - use it
  - if there is not, use the one from this package</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1520596800">- fix build against guile 2.0+</changelog>
  <changelog author="kasimir_@outlook.de" date="1522497600">- disable armv6 build (architecture is not supported)</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1527508800">- add gnutls-fix.patch
  GnuTLS built against guile 2.0 is breaking any HTTPS connection,
  this upstream patch solves it
- put COPYING as %license in specfile</changelog>
  <changelog author="jbrielmaier@suse.de" date="1528200000">- gnutls-fix.patch fixes boo#1095970</changelog>
</package>
<package pkgid="b5378b6a7557caca03833b1ce35a219c5f0d6d44aa541b0b98274be1f795e8b8" name="guix" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="lp150.2.3.1"/>
  <changelog author="sleep_walker@opensuse.org" date="1443700800">- use pkgconfig dependencies
- clean-up with spec-cleaner</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1446379200">- rename default group from guix-builders to guixbuild to match
  upstream
- install /gnu/store directory
- depend on emacs, package emacs scripts</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1446638400">- change ownership of /gnu/store
- remove sysconfig.guix file as it is not used anymore
- define macro %guix_builder_group to make such changes in future
  easier</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1447329600">- bump to 0.9.0
  - see changelog for complete list of changes
- add guile-json as dependency</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1451995200">- fix typo preventing creation of new users</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1455278400">- replace setBadness with addFilter in guix-rpmlint, add explanations
- add guix-rpmlint into spec file as Source
- create rcguix-daemon symlink
- make guix bash completion script as %config to silence warning</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1455278401">- add ExclusiveArch to restrict available architectures
- remove filter for non-standard group guixbuild (it is standard now)
- remove %config for bash completion script (rpmlint was fixed)</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1460808000">- bump to 0.10.0
- add gnutls-guile as build time dependency
- don't mark bash completion as %config (warning fixed)</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1467806400">- explicitly require libgcrypt-devel until the dynamic-link is able to
  load symlink target of /usr/lib*/libgcrypt.so
  http://debbugs.gnu.org/cgi/bugreport.cgi?bug=21076</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1468065600">- require gnutls-guile also as run time dependency</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1470225600">- bump to 0.11.0
  overview of changes is in NEWS</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1482753600">- bump to 0.12.0
  overview of changes is in NEWS</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1495540800">- bump to 0.13.0
  overview of changes is in NEWS
- add signatures for the bootstrap tarballs
- drop emacs dependency (emacs-guix is split out)
- update keyring</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1495972800">- replace pkgconfig(guile-2.0) &gt;= 2.0.7 dependency with guile-devel
  (guile 2.2 provides pkgconfig(guile-2.2) and OBS can't handle
  boolean operators in dependencies yet</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518696000">- require guile-git and libgit2-devel for build
- bump to 0.14.0
  Changes in 0.14.0
  * Package management
  * ?guix package? displays how much will be downloaded
  * ?guix package? warns about insufficient disk space
  * ?guix package? now reports package collisions early on
  * ?guix package --search? sorts results by relevance
  * ?guix pull? now fetches code directly over Git using Guile-Git
  * Substitutes can be downloaded from servers equivalent to the authorized ones
  * New ?guix-daemon? options: ?--listen?, ?--timeout?, ?--max-silent-time?
  * New ?guix weather? command
  * ?guix publish --cache? now also caches uncompressed items
  * ?guix publish? no longer removes live items from its cache
  * ?guix challenge? now displays an overall summary
  * ?guix refresh? no longer uses FTP for GNU and GNOME packages
  * ?guix refresh? has a new ?-m? or ?--manifest? option
  * New ?refresh? checker for ?guix lint?
  * New ?json? importer for ?guix import? to simplify first packages
  * New ?texlive? importer for ?guix import?
  * Distribution
  * GuixSD installation image is now available as ISO-9660
  * GuixSD installation image now includes an ?sshd? service
  * New (gnu bootloaders) API, with support for U-Boot and extlinux
  * ?grub-configuration? is deprecated in favor of ?bootloader-configuration?
  * ?%desktop-services? now includes NetworkManager instead of Wicd
  * The (uuid ?) form can now specify FAT32 and ISO-9660 UUIDs
  * ?guix system? now reports missing file system UUIDs and labels
  * ?guix system? can provide hints when reporting unbound variables
  * New ?--file-system-type? option for ?guix system disk-image?
  * ?guix system disk-image? can now creates ISO-9660 images
  * ?guix system vm-image? &amp; co. automatically estimate the image size
  * ?guix system vm? now uses overlayfs instead of unionfs
  * ?guix system init? displays a progress bar while copying files
  * TeX Live is now also available as a set of small ?texlive-? packages
  * New ?guix system search? command to search for services
  * New services
    certbot, fcgiwrap, gdm, git-http, knot, libvirt, memcached,
    mongodb, mpd, murmur, rsync, tailon, sysctl
  * 1211 new packages
  * 1403 package updates
  * Programming interfaces
  * New build systems: ?font?, ?meson?, ?minify?, ?scons?, ?texlive?
  * ?cmake-build-system? now supports cross-compilation
  * Various improvements to ?asdf-build-system?, ?emacs-build-system?,
    ?ant-build-system?, and ?go-build-system?
  * ?patches? field of &lt;origin&gt; can now contain any lowerable object
  * (gnu system vm) has a new ?make-iso9660-image? procedure
  * ?openssh-service-type? can now be extended with new authorized keys
  * ?rottlog-service-type? can now be extended with new ?log-rotation?s
  * ?network-manager-service-type? now supports VPN plugins
  * &lt;service-type&gt; now has a ?description? field, used by ?guix system search?
  * New ?virtual-machine? form in (gnu system vm)
  * New (gnu system uuid) module, which defines a disjoint &lt;uuid&gt; type
  * New (guix progress) module
  * Noteworthy bug fixes
  * GuixSD no longer creates setuid binaries in /gnu/store
    (&lt;https://bugs.gnu.org/28751&gt;)
  * /root is no longer world-readable (&lt;http://bugs.gnu.org/27135&gt;)
  * ?guix publish? no longer leaks memory (&lt;https://bugs.gnu.org/28784&gt;)
  * Missing cursor icons in GNOME could cause crashes
    (&lt;https://bugs.gnu.org/25958&gt;)
  * Setuid programs now honor the system timezone
    (&lt;https://bugs.gnu.org/29212&gt;)
  * Clients honor the daemon?s ?max-silent-time?
    (&lt;https://bugs.gnu.org/27157&gt;)
  * ?guix substitute? honors substitute expiry time again
    (&lt;https://lists.gnu.org/archive/html/guix-devel/2017-07/msg00179.html&gt;)
  * Several portability fixes for aarch64
  * Native language support
  Updated translations: da (Danish), fr (French)</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1519128000">- use wrapper for running daemon and alter service file to use it
  - if there is new daemon available - use it
  - if there is not, use the one from this package</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1520596800">- fix build against guile 2.0+</changelog>
  <changelog author="kasimir_@outlook.de" date="1522497600">- disable armv6 build (architecture is not supported)</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1527508800">- add gnutls-fix.patch
  GnuTLS built against guile 2.0 is breaking any HTTPS connection,
  this upstream patch solves it
- put COPYING as %license in specfile</changelog>
  <changelog author="jbrielmaier@suse.de" date="1528200000">- gnutls-fix.patch fixes boo#1095970</changelog>
</package>
<package pkgid="3eea83084b3faf321e9a65af872a54bceb9874c9fc4637570b978bf9dbd2b29a" name="gvfs" arch="src">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 1.33.3:
  + Do not send user invisible mounts in order to speed up
    g_volume_monitor_get.
  + mtp: Remove avoidance of file push for big files for better
    performance.
  + Various build fixes and cleanups.
  + Port several parts to GTask.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
</package>
<package pkgid="e0ce869cb478854b4e2c791ab7fcf65a6e1a52d2572c5026cdde0e43c9ad8a56" name="gvfs" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 1.33.3:
  + Do not send user invisible mounts in order to speed up
    g_volume_monitor_get.
  + mtp: Remove avoidance of file push for big files for better
    performance.
  + Various build fixes and cleanups.
  + Port several parts to GTask.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
</package>
<package pkgid="3d24c69539bda685a52efb858edb508cc5fe0ef1dfa1d8c6e77da2ade4351e47" name="gvfs-32bit" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 1.33.3:
  + Do not send user invisible mounts in order to speed up
    g_volume_monitor_get.
  + mtp: Remove avoidance of file push for big files for better
    performance.
  + Various build fixes and cleanups.
  + Port several parts to GTask.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
</package>
<package pkgid="09cdb81a975331c48019d92e03304f4fadafcd81a324319dd95be92d694a0e2b" name="gvfs-backend-afc" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 1.33.3:
  + Do not send user invisible mounts in order to speed up
    g_volume_monitor_get.
  + mtp: Remove avoidance of file push for big files for better
    performance.
  + Various build fixes and cleanups.
  + Port several parts to GTask.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
</package>
<package pkgid="cb3783c64a74c312d01774c742db9ccbeed530ddd3c623cc7dc26841a3950efa" name="gvfs-backend-samba" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 1.33.3:
  + Do not send user invisible mounts in order to speed up
    g_volume_monitor_get.
  + mtp: Remove avoidance of file push for big files for better
    performance.
  + Various build fixes and cleanups.
  + Port several parts to GTask.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
</package>
<package pkgid="0a0af37f64a4e5436cb98b54632e096be66faa2f7fb3d3b0db807edc6d8a46ce" name="gvfs-backends" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 1.33.3:
  + Do not send user invisible mounts in order to speed up
    g_volume_monitor_get.
  + mtp: Remove avoidance of file push for big files for better
    performance.
  + Various build fixes and cleanups.
  + Port several parts to GTask.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
</package>
<package pkgid="269bdf6f51e19895737cbf6482969ceeacb0aea581061c300777bc89b64d3dd8" name="gvfs-devel" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 1.33.3:
  + Do not send user invisible mounts in order to speed up
    g_volume_monitor_get.
  + mtp: Remove avoidance of file push for big files for better
    performance.
  + Various build fixes and cleanups.
  + Port several parts to GTask.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
</package>
<package pkgid="5c4c6d224b48d78d139577e2a3d5d8dac2bb916f1ea52d07b55fa2b7c0f60650" name="gvfs-fuse" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 1.33.3:
  + Do not send user invisible mounts in order to speed up
    g_volume_monitor_get.
  + mtp: Remove avoidance of file push for big files for better
    performance.
  + Various build fixes and cleanups.
  + Port several parts to GTask.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
</package>
<package pkgid="5584a7778e65b050ecbeefb3d8c7f81890dc612a9904804c3c65332403f460f5" name="gvfs-lang" arch="noarch">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 1.33.3:
  + Do not send user invisible mounts in order to speed up
    g_volume_monitor_get.
  + mtp: Remove avoidance of file push for big files for better
    performance.
  + Various build fixes and cleanups.
  + Port several parts to GTask.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
</package>
<package pkgid="f87d5b4678f70f5f1899723eafa3ccaed32dc4636a89eab01b6f082ec9ecdd4b" name="haproxy" arch="src">
  <version epoch="0" ver="1.8.14~git0.52e4d43b" rel="lp150.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514721600">- Update to version 1.8.3:
  * [RELEASE] Released version 1.8.3
  * MEDIUM: h2: prepare a graceful shutdown when the frontend is stopped
  * BUG/MAJOR: hpack: don't return direct references to the dynamic headers table
  * BUG/MEDIUM: http: don't automatically forward request close
  * MINOR: don't close stdio anymore
  * BUG/MEDIUM: mworker: don't close stdio several time
  * BUG/MEDIUM: h2: ensure we always know the stream before sending a reset
  * DOC/MINOR: configuration: typo, formatting fixes
  * BUG/MEDIUM: h2: improve handling of frames received on closed streams
  * BUG/MEDIUM: h2: properly handle and report some stream errors</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Add dependency on apparmor-profiles (bsc#1079985)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091201">- Update to version 1.8.4 (bsc#1080069):
  * BUG/MINOR: config: don't emit a warning when global stats is incompletely configured
  * DOC: Mention -Ws in the list of available options
  * DOC: Describe routing impact of using interface keyword on bind lines
  * MINOR: init: emit warning when -sf/-sd cannot parse argument
  * BUG/MEDIUM: standard: Fix memory leak in str2ip2()
  * BUG/MINOR: time/threads: ensure the adjusted time is always correct
  * BUG/MEDIUM: spoe: Allow producer to read and to forward shutdown on request side
  * BUG/MEDIUM: spoe: Always try to receive or send the frame to detect shutdowns
  * BUG/MINOR: epoll/threads: only call epoll_ctl(DEL) on polled FDs
  * BUG/MINOR: threads: Update labels array because of changes in lock_label enum
  * BUG/MINOR: cli: use global.maxsock and not maxfd to list all FDs
  * CLEANUP: Fix typo in ARGT_MSK6 comment
  * BUG/MINOR: sample: Fix output type of c_ipv62ip
  * CLEANUP: sample: Fix outdated comment about sample casts functions
  * CLEANUP: sample: Fix comment encoding of sample.c
  * BUILD: kqueue/threads: Add test on MAX_THREADS to avoid warnings when complied without threads
  * BUILD: epoll/threads: Add test on MAX_THREADS to avoid warnings when complied without threads
  * MINOR: threads: Use __decl_hathreads instead of #ifdef/#endif
  * BUG/MINOR: kqueue/threads: Don't forget to close kqueue_fd[tid] on each thread
  * BUG/MEDIUM: checks: Don't try to release undefined conn_stream when a check is freed
  * BUG/MEDIUM: threads/server: Fix deadlock in srv_set_stopping/srv_set_admin_flag
  * BUG/MINOR: threads: always set an owner to the thread_sync pipe
  * MINOR: threads: Fix build when we're not compiling with threads.
  * BUG/MINOR: mworker: only write to pidfile if it exists
  * BUG/MEDIUM: threads/mworker: fix a race on startup
  * BUG/MEDIUM: kqueue/threads: use one kqueue_fd per thread
  * BUG/MEDIUM: epoll/threads: use one epoll_fd per thread
  * MINOR: fd: add a bitmask to indicate that an FD is known by the poller
  * BUG/MEDIUM: fd: maintain a per-thread update mask
  * BUG/MEDIUM: threads/polling: Use fd_cache_mask instead of fd_cache_num
  * MINOR: threads/fd: Use a bitfield to know if there are FDs for a thread in the FD cache
  * MINOR: global: add some global activity counters to help debugging
  * MINOR: threads: add a MAX_THREADS define instead of LONGBITS
  * MINOR: global/threads: move cpu_map at the end of the global struct
  * MINOR: servers: Don't report duplicate dyncookies for disabled servers.
  * BUG/MEDIUM: peers: fix expire date wasn't updated if entry is modified remotely.
  * BUG/MINOR: poll: too large size allocation for FD events
  * CONTRIB: debug: fix a few flags definitions
  * DOC: clarify the scope of ssl_fc_is_resumed
  * BUG/MEDIUM: stream: properly handle client aborts during redispatch
  * BUILD/MINOR: ancient gcc versions atomic fix
  * BUG/MEDIUM: mworker: execvp failure depending on argv[0]
  * MINOR: dns: Handle SRV record weight correctly.
  * BUG/MINOR: lua: Fix return value of Socket.settimeout
  * BUG/MEDIUM: lua: Fix IPv6 with separate port support for Socket.connect
  * DOC: lua: Fix typos in comments of hlua_socket_receive
  * BUG/MINOR: lua: Fix default value for pattern in Socket.receive
  * BUG/MEDIUM: ssl: cache doesn't release shctx blocks
  * BUG/MEDIUM: h2: properly handle the END_STREAM flag on empty DATA frames</changelog>
  <changelog author="kgronlund@suse.com" date="1519992000">- Ensure haproxy home directory is not world readable (bsc#1077716)</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Avoid %__-type macro indirections. Remove redundant %clean
  section. Do not ignore errors from useradd.</changelog>
  <changelog author="mrueckert@suse.de" date="1520510400">- if we lock down the permissions the home directory has to be
  owned by haproxy (bsc#1077716)</changelog>
  <changelog author="kgronlund@suse.com" date="1522065600">- Update to version 1.8.5:
  * BUG/MINOR: listener: Don't decrease actconn twice when a new session is rejected
  * BUG/MINOR: h2: ensure we can never send an RST_STREAM in response to an RST_STREAM
  * BUG/MEDIUM: h2: properly account for DATA padding in flow control
  * DOC: don't suggest using http-server-close
  * DOC: log: more than 2 log servers are allowed
  * BUILD/BUG: enable -fno-strict-overflow by default
  * MINOR: log: stop emitting alerts when it's not possible to write on the socket
  * BUG/MEDIUM: threads/queue: wake up other threads upon dequeue
  * BUG/MINOR: tcp-check: use the server's service port as a fallback
  * BUG/MEDIUM: tcp-check: single connect rule can't detect DOWN servers
  * BUG/MINOR: lua: return bad error messages
  * BUG/MINOR: spoa-example: unexpected behavior for more than 127 args
  * BUG/MINOR: cli: Fix a crash when sending a command with too many arguments
  * BUG/MINOR: seemless reload: Fix crash when an interface is specified.
  * BUG/MINOR: dns: don't downgrade DNS accepted payload size automatically
  * BUG/MAJOR: threads/queue: Fix thread-safety issues on the queues management
  * BUG/MEDIUM: threads/unix: Fix a deadlock when a listener is temporarily disabled
  * BUG/MEDIUM: spoe: Remove idle applets from idle list when HAProxy is stopping
  * BUG/MINOR: force-persist and ignore-persist only apply to backends
  * BUG/MEDIUM: fix a 100% cpu usage with cpu-map and nbthread/nbproc
  * BUG/MINOR: cli: Fix a typo in the 'set rate-limit' usage
  * BUG/MINOR: cli: Fix a crash when passing a negative or too large value to "show fd"
  * BUG/MEDIUM: h2: also arm the h2 timeout when sending
  * BUG/MINOR: unix: Don't mess up when removing the socket from the xfer_sock_list.
  * BUG/MINOR: session: Fix tcp-request session failure if handshake.
  * MINOR: systemd: Add SystemD's SystemCallFilter option to the unit file
  * MINOR: systemd: Add SystemD's Protect*= options to the unit file
  * MINOR: systemd: Add section for SystemD sandboxing to unit file
  * BUG/MEDIUM: buffer: Fix the wrapping case in bi_putblk
  * BUG/MEDIUM: buffer: Fix the wrapping case in bo_putblk
  * BUG/MEDIUM: h2: always consume any trailing data after end of output buffers
  * MINOR: stats: display the number of threads in the statistics.
  * BUG/MINOR: h2: Set the target of dbuf_wait to h2c
  * MINOR: debug/pools: make DEBUG_UAF also detect underflows
  * BUG/MINOR: debug/pools: properly handle out-of-memory when building with DEBUG_UAF
  * DOC: cfgparse: Warn on option (tcp|http)log in backend
  * DOC: lua: new prototype for function "register_action()"
  * BUG/MEDIUM: ssl/sample: ssl_bc_* fetch keywords are broken.
  * BUG/MEDIUM: http: Switch the HTTP response in tunnel mode as earlier as possible
  * BUG/MINOR: ssl/threads: Make management of the TLS ticket keys files thread-safe
  * BUG/MINOR: init: Add missing brackets in the code parsing -sf/-st
  * BUG/MEDIUM: ssl: Shutdown the connection for reading on SSL_ERROR_SYSCALL
  * BUG/MEDIUM: ssl: Don't always treat SSL_ERROR_SYSCALL as unrecovarable.
  * BUG/MINOR: threads: fix missing thread lock labels for 1.8</changelog>
  <changelog author="mrueckert@suse.de" date="1523102400">- Update to version 1.8.7:
  * [RELEASE] Released version 1.8.7
  * MINOR: servers: Support alphanumeric characters for the server templates names
  * BUG/MAJOR: cache: always initialize newly created objects
  * [RELEASE] Released version 1.8.6
  * BUG/MINOR: spoe: Don't release the context buffer in .check_timeouts callbaclk
  * BUG/MINOR: spoe: Initialize variables used during conf parsing before any check
  * BUG/MAJOR: cache: fix random crashes caused by incorrect delete() on non-first blocks
  * BUG/MINOR: fd: Don't clear the update_mask in fd_insert.
  * BUG/MINOR: cache: fix "show cache" output
  * BUG/MINOR: email-alert: Set the mailer port during alert initialization
  * BUG/MINOR: checks: check the conn_stream's readiness and not the connection
  * BUG/MEDIUM: h2: always add a stream to the send or fctl list when blocked
  * BUILD/MINOR: threads: always export thread_sync_io_handler()
  * BUG/MEDIUM: h2: don't consider pending data on detach if connection is in error
  * BUG/MEDIUM: h2/threads: never release the task outside of the task handler
  * MINOR: h2: fuse h2s_detach() and h2s_free() into h2s_destroy()
  * MINOR: h2: always call h2s_detach() in h2_detach()
  * BUG/MAJOR: h2: remove orphaned streams from the send list before closing
  * MINOR: h2: provide and use h2s_detach() and h2s_free()
  * CLEANUP: h2: rename misleading h2c_stream_close() to h2s_close()
  * BUG/MINOR: hpack: fix harmless use of uninitialized value in hpack_dht_insert
  * BUILD/MINOR: cli: fix a build warning introduced by last commit
  * MINOR: cli: make "show fd" report the mux and mux_ctx pointers when available
  * MINOR: cli/threads: make "show fd" report thread_sync_io_handler instead of "unknown"
  * BUILD/MINOR: fix build when USE_THREAD is not defined
  * BUG/MINOR: lua funtion hlua_socket_settimeout don't check negative values
  * BUG/MINOR: lua: the function returns anything</changelog>
  <changelog author="kgronlund@suse.com" date="1525694400">- Update to version 1.8.8:
  * BUG/CRITICAL: h2: fix incorrect frame length check (VUL-0) (bsc#1089837)
  * MINOR: cli: Ensure the CLI always outputs an error when it should
  * BUG/MINOR: cli: Guard against NULL messages when using CLI_ST_PRINT_FREE
  * BUG/MEDIUM: kqueue: When adding new events, provide an output to get errors.
  * BUG/MINOR: http: Return an error in proxy mode when url2sa fails
  * BUG/MEDIUM: connection: Make sure we have a mux before calling detach().
  * BUG/MEDIUM: threads: Fix the max/min calculation because of name clashes</changelog>
  <changelog author="kgronlund@suse.com" date="1527595200">- Update to version 1.8.9~git9.6d82e611:
  * BUG/MEDIUM: cache: don't cache when an Authorization header is present (VUL-1) (bsc#1094846) (CVE-2018-11469)
  * BUG/MEDIUM: dns: Delay the attempt to run a DNS resolution on check failure.
  * BUG/MINOR: ssl/lua: prevent lua from affecting automatic maxconn computation
  * BUG/MEDIUM: contrib/modsecurity: Use network order to encode/decode flags
  * BUG/MEDIUM: contrib/mod_defender: Use network order to encode/decode flags
  * BUG/MEDIUM: spoe: Flags are not encoded in network order
  * BUG/MINOR: lua: Socket.send threw runtime error: 'close' needs 1 arguments.
  * BUG/MINOR: spoe: Mistake in error message about SPOE configuration
  * BUG/MEDIUM: ssl: properly protect SSL cert generation
  * BUG/MEDIUM: pollers: Use a global list for fd shared between threads.
  * BUG/MEDIUM: http: don't always abort transfers on CF_SHUTR
  * BUG/MINOR: lua: ensure large proxy IDs can be represented
  * BUG/MINOR: lua: schedule socket task upon lua connect()
  * BUG/MEDIUM: task: Don't free a task that is about to be run.
  * BUG/MINOR: map: correctly track reference to the last ref_elt being dumped
  * DOC/MINOR: clean up LUA documentation re: servers &amp; array/table.
  * BUG/MINOR: lua: Put tasks to sleep when waiting for data
  * BUG/MEDIUM: threads: Fix the sync point for more than 32 threads
  * BUG/MINOR: checks: Fix check-&gt;health computation for flapping servers
  * BUG/MINOR: config: disable http-reuse on TCP proxies
  * BUG/MINOR: lua/threads: Make lua's tasks sticky to the current thread
  * BUG/MEDIUM: h2: implement missing support for chunked encoded uploads
  * MINOR: h2: detect presence of CONNECT and/or content-length
  * BUG/MEDIUM: lua: Fix segmentation fault if a Lua task exits
  * BUG/MINOR: log: t_idle (%Ti) is not set for some requests
  * BUG/MAJOR: channel: Fix crash when trying to read from a closed socket
  * BUG/MINOR: pattern: Add a missing HA_SPIN_INIT() in pat_ref_newid()</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Update to version 1.8.10~git0.ec17d7a9:
  * MINOR: threads: Be sure to remove threads from all_threads_mask on exit
  * BUG/MEDIUM: threads: Use the sync point to check active jobs and exit
  * BUG/MEDIUM: fd: Don't modify the update_mask in fd_dodelete().
  * BUG/MAJOR: ssl: OpenSSL context is stored in non-reserved memory slot
  * BUG/MAJOR: ssl: Random crash with cipherlist capture
  * BUG/MINOR: lua: Segfaults with wrong usage of types.
  * BUG/MAJOR: map: fix a segfault when using http-request set-map
  * MINOR: lua: Increase debug information
  * BUG/MINOR: signals: ha_sigmask macro for multithreading
  * BUG/MINOR: don't ignore SIG{BUS,FPE,ILL,SEGV} during signal processing
  * BUG/MEDIUM: threads: handle signal queue only in thread 0
  * BUG/MINOR: unix: Make sure we can transfer abns sockets on seamless reload.
  * BUG/MINOR: contrib/modsecurity: update pointer on the end of the frame
  * BUG/MINOR: contrib/mod_defender: update pointer on the end of the frame
  * BUG/MINOR: contrib/modsecurity: Don't reset the status code during disconnect
  * BUG/MINOR: contrib/mod_defender: Don't reset the status code during disconnect
  * BUG/MINOR: contrib/spoa_example: Don't reset the status code during disconnect
  * MAJOR: spoe: upgrade the SPOP version to 2.0 and remove the support for 1.0
  * BUG/MEDIUM: lua/socket: Buffer error, may segfault
  * BUG/MEDIUM: lua/socket: Sheduling error on write: may dead-lock
  * BUG/MEDIUM: lua/socket: Notification error
  * BUG/MAJOR: lua: Dead lock with sockets
  * BUG/MEDIUM: lua/socket: wrong scheduling for sockets
  * MINOR: task/notification: Is notifications registered ?
  * BUG/MEDIUM: spoe: Return an error when the wrong ACK is received in sync mode
  * BUG/MEDIUM: stick-tables: Decrement ref_cnt in table_* converters
  * BUG/MEDIUM: lua/socket: Length required read doesn't work
  * BUG/MEDIUM: servers: Add srv_addr default placeholder to the state file
  * BUG/MEDIUM: fd: Only check update_mask against all_threads_mask.</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Update to version 1.8.11~git0.1d6ef58d:
  * BUG/BUILD: threads: unbreak build without threads
  * BUG/MAJOR: Stick-tables crash with segfault when the key is not in the stick-table</changelog>
  <changelog author="kgronlund@suse.com" date="1530100801">- Update to version 1.8.12~git0.8a200c71:
  * MINOR: stick-tables: make stktable_release() do nothing on NULL
  * BUG/MAJOR: stick_table: Complete incomplete SEGV fix</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.8.13~git4.c1bfcd00:
  * MINOR: dns: new DNS options to allow/prevent IP address duplication
  * MINOR: dns: fix wrong score computation in dns_get_ip_from_response
  * BUG/MEDIUM: queue: prevent a backup server from draining the proxy's connections
  * BUG/MEDIUM: servers: check the queues once enabling a server
  * MEDIUM: proxy_protocol: Convert IPs to v6 when protocols are mixed
  * BUG/MEDIUM: threads: unbreak "bind" referencing an incorrect thread number
  * MINOR: threads: move "nbthread" parsing to hathreads.c
  * BUG/MEDIUM: threads: properly fix nbthreads == MAX_THREADS
  * BUG/MINOR: threads: Handle nbthread == MAX_THREADS.
  * BUG/MINOR: config: stick-table is not supported in defaults section
  * BUG/MEDIUM: h2: prevent orphaned streams from blocking a connection forever
  * BUG/MEDIUM: threads/sync: use sched_yield when available
  * BUG/MINOR: servers: Don't make "server" in a frontend fatal.
  * BUG/MEDIUM: stats: don't ask for more data as long as we're responding
  * BUG/MEDIUM: stream-int: don't immediately enable reading when the buffer was reportedly full
  * MINOR: h2: add the error code and the max/last stream IDs to "show fd"
  * BUG/MEDIUM: threads: Fix the exit condition of the thread barrier
  * MINOR: debug: Add checks for conn_stream flags
  * MINOR: debug: Add check for CO_FL_WILL_UPDATE
  * BUG/MINOR: http: Set brackets for the unlikely macro at the right place
  * BUG/MEDIUM: h2: make sure the last stream closes the connection after a timeout
  * BUG/MEDIUM: h2: never leave pending data in the output buffer on close
  * BUG/MEDIUM: h2: don't accept new streams if conn_streams are still in excess
  * MINOR: h2: add the mux and demux buffer lengths on "show fd"
  * MINOR: h2: keep a count of the number of conn_streams attached to the mux
  * BUG/MINOR: h2: remove accidental debug code introduced with show_fd function
  * MINOR: h2: implement a basic "show_fd" function
  * MINOR: mux: add a "show_fd" function to dump debugging information for "show fd"
  * BUG/MINOR: ssl: properly ref-count the tls_keys entries
  * MINOR: systemd: consider exit status 143 as successful</changelog>
  <changelog author="kgronlund@suse.com" date="1534507200">- Require apparmor-abstractions to reduce dependencies (bsc#1100787)</changelog>
  <changelog author="mrueckert@suse.de" date="1537444800">- Update to version 1.8.14~git0.52e4d43b: (bsc#1108683) (CVE-2018-14645)
  * [RELEASE] Released version 1.8.14
  * BUG/CRITICAL: hpack: fix improper sign check on the header index value
  * BUG/MINOR: cli: make sure the "getsock" command is only called on connections
  * BUG/MINOR: tools: fix set_net_port() / set_host_port() on IPv4
  * BUG/MEDIUM: patterns: fix possible double free when reloading a pattern list
  * DOC: Fix typos in lua documentation
  * BUG/MINOR: server: Crash when setting FQDN via CLI.
  * BUG/MAJOR: kqueue: Don't reset the changes number by accident.
  * BUG/MEDIUM: snapshot: take the proxy's lock while dumping errors
  * BUG/MINOR: http/threads: atomically increment the error snapshot ID
  * BUG/MINOR: dns: check and link servers' resolvers right after config parsing
  * BUG/MEDIUM: h2: fix risk of memory leak on malformated wrapped frames
  * BUG/MEDIUM: session: fix reporting of handshake processing time in the logs
  * BUG/MINOR: stream: use atomic increments for the request counter
  * MINOR: thread: implement HA_ATOMIC_XADD()
  * BUG/MEDIUM: ECC cert should work with TLS &lt; v1.2 and openssl &gt;= 1.1.1
  * BUG/MEDIUM: dns/server: fix incomatibility between SRV resolution and server state file
  * BUG/MEDIUM: hlua: Don't call RESET_SAFE_LJMP if SET_SAFE_LJMP returns 0.
  * BUG/MAJOR: thread: lua: Wrong SSL context initialization.
  * BUG/MEDIUM: hlua: Make sure we drain the output buffer when done.
  * BUG/MEDIUM: lua: reset lua transaction between http requests
  * BUG/MEDIUM: mux_pt: dereference the connection with care in mux_pt_wake()
  * BUG/MINOR: lua: Bad HTTP client request duration.
  * BUG/MEDIUM: unix: provide a -&gt;drain() function
  * DOC: Fix spelling error in configuration doc
  * BUG/MEDIUM: cli/threads: protect some server commands against concurrent operations
  * BUG/MEDIUM: cli/threads: protect all "proxy" commands against concurrent updates
  * BUG/MEDIUM: lua: socket timeouts are not applied
  * DOC: ssl: Use consistent naming for TLS protocols
  * DOC: dns: explain set server ... fqdn requires resolver
  * BUG/MINOR: map: fix map_regm with backref
  * BUG/MEDIUM: ssl: loading dh param from certifile causes unpredictable error.
  * BUG/MEDIUM: ssl: fix missing error loading a keytype cert from a bundle.
  * BUG/MINOR: ssl: empty connections reported as errors.
  * BUG/MEDIUM: cli: make "show fd" thread-safe
  * MEDIUM: hathreads: implement a more flexible rendez-vous point
  * BUG/MEDIUM: threads: fix the no-thread case after the change to the sync point
  * MINOR: threads: add more consistency between certain variables in no-thread case
  * BUG/MEDIUM: threads: fix the double CAS implementation for ARMv7
  * MINOR: threads: Introduce double-width CAS on x86_64 and arm.
  * BUG/MEDIUM: lua: possible CLOSE-WAIT state with '\n' headers</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1537444801">- guard all parts referring to systemd to fix build on sle 11</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1537444802">- only use network namespaces on 12.x and newer, failed to build on
  sle11</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1537444803">- only reload the apparmor profile on newer distros, seems older
  distros do not have apparmor-rpm-macros yet</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1537444804">- also fix the systemd case for the apparmor_reload change</changelog>
</package>
<package pkgid="f114c83eed376fe673dfa8001ba6a77e09e3f75a6b8add7cf4784e80b96e4e32" name="haproxy" arch="x86_64">
  <version epoch="0" ver="1.8.14~git0.52e4d43b" rel="lp150.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514721600">- Update to version 1.8.3:
  * [RELEASE] Released version 1.8.3
  * MEDIUM: h2: prepare a graceful shutdown when the frontend is stopped
  * BUG/MAJOR: hpack: don't return direct references to the dynamic headers table
  * BUG/MEDIUM: http: don't automatically forward request close
  * MINOR: don't close stdio anymore
  * BUG/MEDIUM: mworker: don't close stdio several time
  * BUG/MEDIUM: h2: ensure we always know the stream before sending a reset
  * DOC/MINOR: configuration: typo, formatting fixes
  * BUG/MEDIUM: h2: improve handling of frames received on closed streams
  * BUG/MEDIUM: h2: properly handle and report some stream errors</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Add dependency on apparmor-profiles (bsc#1079985)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091201">- Update to version 1.8.4 (bsc#1080069):
  * BUG/MINOR: config: don't emit a warning when global stats is incompletely configured
  * DOC: Mention -Ws in the list of available options
  * DOC: Describe routing impact of using interface keyword on bind lines
  * MINOR: init: emit warning when -sf/-sd cannot parse argument
  * BUG/MEDIUM: standard: Fix memory leak in str2ip2()
  * BUG/MINOR: time/threads: ensure the adjusted time is always correct
  * BUG/MEDIUM: spoe: Allow producer to read and to forward shutdown on request side
  * BUG/MEDIUM: spoe: Always try to receive or send the frame to detect shutdowns
  * BUG/MINOR: epoll/threads: only call epoll_ctl(DEL) on polled FDs
  * BUG/MINOR: threads: Update labels array because of changes in lock_label enum
  * BUG/MINOR: cli: use global.maxsock and not maxfd to list all FDs
  * CLEANUP: Fix typo in ARGT_MSK6 comment
  * BUG/MINOR: sample: Fix output type of c_ipv62ip
  * CLEANUP: sample: Fix outdated comment about sample casts functions
  * CLEANUP: sample: Fix comment encoding of sample.c
  * BUILD: kqueue/threads: Add test on MAX_THREADS to avoid warnings when complied without threads
  * BUILD: epoll/threads: Add test on MAX_THREADS to avoid warnings when complied without threads
  * MINOR: threads: Use __decl_hathreads instead of #ifdef/#endif
  * BUG/MINOR: kqueue/threads: Don't forget to close kqueue_fd[tid] on each thread
  * BUG/MEDIUM: checks: Don't try to release undefined conn_stream when a check is freed
  * BUG/MEDIUM: threads/server: Fix deadlock in srv_set_stopping/srv_set_admin_flag
  * BUG/MINOR: threads: always set an owner to the thread_sync pipe
  * MINOR: threads: Fix build when we're not compiling with threads.
  * BUG/MINOR: mworker: only write to pidfile if it exists
  * BUG/MEDIUM: threads/mworker: fix a race on startup
  * BUG/MEDIUM: kqueue/threads: use one kqueue_fd per thread
  * BUG/MEDIUM: epoll/threads: use one epoll_fd per thread
  * MINOR: fd: add a bitmask to indicate that an FD is known by the poller
  * BUG/MEDIUM: fd: maintain a per-thread update mask
  * BUG/MEDIUM: threads/polling: Use fd_cache_mask instead of fd_cache_num
  * MINOR: threads/fd: Use a bitfield to know if there are FDs for a thread in the FD cache
  * MINOR: global: add some global activity counters to help debugging
  * MINOR: threads: add a MAX_THREADS define instead of LONGBITS
  * MINOR: global/threads: move cpu_map at the end of the global struct
  * MINOR: servers: Don't report duplicate dyncookies for disabled servers.
  * BUG/MEDIUM: peers: fix expire date wasn't updated if entry is modified remotely.
  * BUG/MINOR: poll: too large size allocation for FD events
  * CONTRIB: debug: fix a few flags definitions
  * DOC: clarify the scope of ssl_fc_is_resumed
  * BUG/MEDIUM: stream: properly handle client aborts during redispatch
  * BUILD/MINOR: ancient gcc versions atomic fix
  * BUG/MEDIUM: mworker: execvp failure depending on argv[0]
  * MINOR: dns: Handle SRV record weight correctly.
  * BUG/MINOR: lua: Fix return value of Socket.settimeout
  * BUG/MEDIUM: lua: Fix IPv6 with separate port support for Socket.connect
  * DOC: lua: Fix typos in comments of hlua_socket_receive
  * BUG/MINOR: lua: Fix default value for pattern in Socket.receive
  * BUG/MEDIUM: ssl: cache doesn't release shctx blocks
  * BUG/MEDIUM: h2: properly handle the END_STREAM flag on empty DATA frames</changelog>
  <changelog author="kgronlund@suse.com" date="1519992000">- Ensure haproxy home directory is not world readable (bsc#1077716)</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Avoid %__-type macro indirections. Remove redundant %clean
  section. Do not ignore errors from useradd.</changelog>
  <changelog author="mrueckert@suse.de" date="1520510400">- if we lock down the permissions the home directory has to be
  owned by haproxy (bsc#1077716)</changelog>
  <changelog author="kgronlund@suse.com" date="1522065600">- Update to version 1.8.5:
  * BUG/MINOR: listener: Don't decrease actconn twice when a new session is rejected
  * BUG/MINOR: h2: ensure we can never send an RST_STREAM in response to an RST_STREAM
  * BUG/MEDIUM: h2: properly account for DATA padding in flow control
  * DOC: don't suggest using http-server-close
  * DOC: log: more than 2 log servers are allowed
  * BUILD/BUG: enable -fno-strict-overflow by default
  * MINOR: log: stop emitting alerts when it's not possible to write on the socket
  * BUG/MEDIUM: threads/queue: wake up other threads upon dequeue
  * BUG/MINOR: tcp-check: use the server's service port as a fallback
  * BUG/MEDIUM: tcp-check: single connect rule can't detect DOWN servers
  * BUG/MINOR: lua: return bad error messages
  * BUG/MINOR: spoa-example: unexpected behavior for more than 127 args
  * BUG/MINOR: cli: Fix a crash when sending a command with too many arguments
  * BUG/MINOR: seemless reload: Fix crash when an interface is specified.
  * BUG/MINOR: dns: don't downgrade DNS accepted payload size automatically
  * BUG/MAJOR: threads/queue: Fix thread-safety issues on the queues management
  * BUG/MEDIUM: threads/unix: Fix a deadlock when a listener is temporarily disabled
  * BUG/MEDIUM: spoe: Remove idle applets from idle list when HAProxy is stopping
  * BUG/MINOR: force-persist and ignore-persist only apply to backends
  * BUG/MEDIUM: fix a 100% cpu usage with cpu-map and nbthread/nbproc
  * BUG/MINOR: cli: Fix a typo in the 'set rate-limit' usage
  * BUG/MINOR: cli: Fix a crash when passing a negative or too large value to "show fd"
  * BUG/MEDIUM: h2: also arm the h2 timeout when sending
  * BUG/MINOR: unix: Don't mess up when removing the socket from the xfer_sock_list.
  * BUG/MINOR: session: Fix tcp-request session failure if handshake.
  * MINOR: systemd: Add SystemD's SystemCallFilter option to the unit file
  * MINOR: systemd: Add SystemD's Protect*= options to the unit file
  * MINOR: systemd: Add section for SystemD sandboxing to unit file
  * BUG/MEDIUM: buffer: Fix the wrapping case in bi_putblk
  * BUG/MEDIUM: buffer: Fix the wrapping case in bo_putblk
  * BUG/MEDIUM: h2: always consume any trailing data after end of output buffers
  * MINOR: stats: display the number of threads in the statistics.
  * BUG/MINOR: h2: Set the target of dbuf_wait to h2c
  * MINOR: debug/pools: make DEBUG_UAF also detect underflows
  * BUG/MINOR: debug/pools: properly handle out-of-memory when building with DEBUG_UAF
  * DOC: cfgparse: Warn on option (tcp|http)log in backend
  * DOC: lua: new prototype for function "register_action()"
  * BUG/MEDIUM: ssl/sample: ssl_bc_* fetch keywords are broken.
  * BUG/MEDIUM: http: Switch the HTTP response in tunnel mode as earlier as possible
  * BUG/MINOR: ssl/threads: Make management of the TLS ticket keys files thread-safe
  * BUG/MINOR: init: Add missing brackets in the code parsing -sf/-st
  * BUG/MEDIUM: ssl: Shutdown the connection for reading on SSL_ERROR_SYSCALL
  * BUG/MEDIUM: ssl: Don't always treat SSL_ERROR_SYSCALL as unrecovarable.
  * BUG/MINOR: threads: fix missing thread lock labels for 1.8</changelog>
  <changelog author="mrueckert@suse.de" date="1523102400">- Update to version 1.8.7:
  * [RELEASE] Released version 1.8.7
  * MINOR: servers: Support alphanumeric characters for the server templates names
  * BUG/MAJOR: cache: always initialize newly created objects
  * [RELEASE] Released version 1.8.6
  * BUG/MINOR: spoe: Don't release the context buffer in .check_timeouts callbaclk
  * BUG/MINOR: spoe: Initialize variables used during conf parsing before any check
  * BUG/MAJOR: cache: fix random crashes caused by incorrect delete() on non-first blocks
  * BUG/MINOR: fd: Don't clear the update_mask in fd_insert.
  * BUG/MINOR: cache: fix "show cache" output
  * BUG/MINOR: email-alert: Set the mailer port during alert initialization
  * BUG/MINOR: checks: check the conn_stream's readiness and not the connection
  * BUG/MEDIUM: h2: always add a stream to the send or fctl list when blocked
  * BUILD/MINOR: threads: always export thread_sync_io_handler()
  * BUG/MEDIUM: h2: don't consider pending data on detach if connection is in error
  * BUG/MEDIUM: h2/threads: never release the task outside of the task handler
  * MINOR: h2: fuse h2s_detach() and h2s_free() into h2s_destroy()
  * MINOR: h2: always call h2s_detach() in h2_detach()
  * BUG/MAJOR: h2: remove orphaned streams from the send list before closing
  * MINOR: h2: provide and use h2s_detach() and h2s_free()
  * CLEANUP: h2: rename misleading h2c_stream_close() to h2s_close()
  * BUG/MINOR: hpack: fix harmless use of uninitialized value in hpack_dht_insert
  * BUILD/MINOR: cli: fix a build warning introduced by last commit
  * MINOR: cli: make "show fd" report the mux and mux_ctx pointers when available
  * MINOR: cli/threads: make "show fd" report thread_sync_io_handler instead of "unknown"
  * BUILD/MINOR: fix build when USE_THREAD is not defined
  * BUG/MINOR: lua funtion hlua_socket_settimeout don't check negative values
  * BUG/MINOR: lua: the function returns anything</changelog>
  <changelog author="kgronlund@suse.com" date="1525694400">- Update to version 1.8.8:
  * BUG/CRITICAL: h2: fix incorrect frame length check (VUL-0) (bsc#1089837)
  * MINOR: cli: Ensure the CLI always outputs an error when it should
  * BUG/MINOR: cli: Guard against NULL messages when using CLI_ST_PRINT_FREE
  * BUG/MEDIUM: kqueue: When adding new events, provide an output to get errors.
  * BUG/MINOR: http: Return an error in proxy mode when url2sa fails
  * BUG/MEDIUM: connection: Make sure we have a mux before calling detach().
  * BUG/MEDIUM: threads: Fix the max/min calculation because of name clashes</changelog>
  <changelog author="kgronlund@suse.com" date="1527595200">- Update to version 1.8.9~git9.6d82e611:
  * BUG/MEDIUM: cache: don't cache when an Authorization header is present (VUL-1) (bsc#1094846) (CVE-2018-11469)
  * BUG/MEDIUM: dns: Delay the attempt to run a DNS resolution on check failure.
  * BUG/MINOR: ssl/lua: prevent lua from affecting automatic maxconn computation
  * BUG/MEDIUM: contrib/modsecurity: Use network order to encode/decode flags
  * BUG/MEDIUM: contrib/mod_defender: Use network order to encode/decode flags
  * BUG/MEDIUM: spoe: Flags are not encoded in network order
  * BUG/MINOR: lua: Socket.send threw runtime error: 'close' needs 1 arguments.
  * BUG/MINOR: spoe: Mistake in error message about SPOE configuration
  * BUG/MEDIUM: ssl: properly protect SSL cert generation
  * BUG/MEDIUM: pollers: Use a global list for fd shared between threads.
  * BUG/MEDIUM: http: don't always abort transfers on CF_SHUTR
  * BUG/MINOR: lua: ensure large proxy IDs can be represented
  * BUG/MINOR: lua: schedule socket task upon lua connect()
  * BUG/MEDIUM: task: Don't free a task that is about to be run.
  * BUG/MINOR: map: correctly track reference to the last ref_elt being dumped
  * DOC/MINOR: clean up LUA documentation re: servers &amp; array/table.
  * BUG/MINOR: lua: Put tasks to sleep when waiting for data
  * BUG/MEDIUM: threads: Fix the sync point for more than 32 threads
  * BUG/MINOR: checks: Fix check-&gt;health computation for flapping servers
  * BUG/MINOR: config: disable http-reuse on TCP proxies
  * BUG/MINOR: lua/threads: Make lua's tasks sticky to the current thread
  * BUG/MEDIUM: h2: implement missing support for chunked encoded uploads
  * MINOR: h2: detect presence of CONNECT and/or content-length
  * BUG/MEDIUM: lua: Fix segmentation fault if a Lua task exits
  * BUG/MINOR: log: t_idle (%Ti) is not set for some requests
  * BUG/MAJOR: channel: Fix crash when trying to read from a closed socket
  * BUG/MINOR: pattern: Add a missing HA_SPIN_INIT() in pat_ref_newid()</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Update to version 1.8.10~git0.ec17d7a9:
  * MINOR: threads: Be sure to remove threads from all_threads_mask on exit
  * BUG/MEDIUM: threads: Use the sync point to check active jobs and exit
  * BUG/MEDIUM: fd: Don't modify the update_mask in fd_dodelete().
  * BUG/MAJOR: ssl: OpenSSL context is stored in non-reserved memory slot
  * BUG/MAJOR: ssl: Random crash with cipherlist capture
  * BUG/MINOR: lua: Segfaults with wrong usage of types.
  * BUG/MAJOR: map: fix a segfault when using http-request set-map
  * MINOR: lua: Increase debug information
  * BUG/MINOR: signals: ha_sigmask macro for multithreading
  * BUG/MINOR: don't ignore SIG{BUS,FPE,ILL,SEGV} during signal processing
  * BUG/MEDIUM: threads: handle signal queue only in thread 0
  * BUG/MINOR: unix: Make sure we can transfer abns sockets on seamless reload.
  * BUG/MINOR: contrib/modsecurity: update pointer on the end of the frame
  * BUG/MINOR: contrib/mod_defender: update pointer on the end of the frame
  * BUG/MINOR: contrib/modsecurity: Don't reset the status code during disconnect
  * BUG/MINOR: contrib/mod_defender: Don't reset the status code during disconnect
  * BUG/MINOR: contrib/spoa_example: Don't reset the status code during disconnect
  * MAJOR: spoe: upgrade the SPOP version to 2.0 and remove the support for 1.0
  * BUG/MEDIUM: lua/socket: Buffer error, may segfault
  * BUG/MEDIUM: lua/socket: Sheduling error on write: may dead-lock
  * BUG/MEDIUM: lua/socket: Notification error
  * BUG/MAJOR: lua: Dead lock with sockets
  * BUG/MEDIUM: lua/socket: wrong scheduling for sockets
  * MINOR: task/notification: Is notifications registered ?
  * BUG/MEDIUM: spoe: Return an error when the wrong ACK is received in sync mode
  * BUG/MEDIUM: stick-tables: Decrement ref_cnt in table_* converters
  * BUG/MEDIUM: lua/socket: Length required read doesn't work
  * BUG/MEDIUM: servers: Add srv_addr default placeholder to the state file
  * BUG/MEDIUM: fd: Only check update_mask against all_threads_mask.</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Update to version 1.8.11~git0.1d6ef58d:
  * BUG/BUILD: threads: unbreak build without threads
  * BUG/MAJOR: Stick-tables crash with segfault when the key is not in the stick-table</changelog>
  <changelog author="kgronlund@suse.com" date="1530100801">- Update to version 1.8.12~git0.8a200c71:
  * MINOR: stick-tables: make stktable_release() do nothing on NULL
  * BUG/MAJOR: stick_table: Complete incomplete SEGV fix</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.8.13~git4.c1bfcd00:
  * MINOR: dns: new DNS options to allow/prevent IP address duplication
  * MINOR: dns: fix wrong score computation in dns_get_ip_from_response
  * BUG/MEDIUM: queue: prevent a backup server from draining the proxy's connections
  * BUG/MEDIUM: servers: check the queues once enabling a server
  * MEDIUM: proxy_protocol: Convert IPs to v6 when protocols are mixed
  * BUG/MEDIUM: threads: unbreak "bind" referencing an incorrect thread number
  * MINOR: threads: move "nbthread" parsing to hathreads.c
  * BUG/MEDIUM: threads: properly fix nbthreads == MAX_THREADS
  * BUG/MINOR: threads: Handle nbthread == MAX_THREADS.
  * BUG/MINOR: config: stick-table is not supported in defaults section
  * BUG/MEDIUM: h2: prevent orphaned streams from blocking a connection forever
  * BUG/MEDIUM: threads/sync: use sched_yield when available
  * BUG/MINOR: servers: Don't make "server" in a frontend fatal.
  * BUG/MEDIUM: stats: don't ask for more data as long as we're responding
  * BUG/MEDIUM: stream-int: don't immediately enable reading when the buffer was reportedly full
  * MINOR: h2: add the error code and the max/last stream IDs to "show fd"
  * BUG/MEDIUM: threads: Fix the exit condition of the thread barrier
  * MINOR: debug: Add checks for conn_stream flags
  * MINOR: debug: Add check for CO_FL_WILL_UPDATE
  * BUG/MINOR: http: Set brackets for the unlikely macro at the right place
  * BUG/MEDIUM: h2: make sure the last stream closes the connection after a timeout
  * BUG/MEDIUM: h2: never leave pending data in the output buffer on close
  * BUG/MEDIUM: h2: don't accept new streams if conn_streams are still in excess
  * MINOR: h2: add the mux and demux buffer lengths on "show fd"
  * MINOR: h2: keep a count of the number of conn_streams attached to the mux
  * BUG/MINOR: h2: remove accidental debug code introduced with show_fd function
  * MINOR: h2: implement a basic "show_fd" function
  * MINOR: mux: add a "show_fd" function to dump debugging information for "show fd"
  * BUG/MINOR: ssl: properly ref-count the tls_keys entries
  * MINOR: systemd: consider exit status 143 as successful</changelog>
  <changelog author="kgronlund@suse.com" date="1534507200">- Require apparmor-abstractions to reduce dependencies (bsc#1100787)</changelog>
  <changelog author="mrueckert@suse.de" date="1537444800">- Update to version 1.8.14~git0.52e4d43b: (bsc#1108683) (CVE-2018-14645)
  * [RELEASE] Released version 1.8.14
  * BUG/CRITICAL: hpack: fix improper sign check on the header index value
  * BUG/MINOR: cli: make sure the "getsock" command is only called on connections
  * BUG/MINOR: tools: fix set_net_port() / set_host_port() on IPv4
  * BUG/MEDIUM: patterns: fix possible double free when reloading a pattern list
  * DOC: Fix typos in lua documentation
  * BUG/MINOR: server: Crash when setting FQDN via CLI.
  * BUG/MAJOR: kqueue: Don't reset the changes number by accident.
  * BUG/MEDIUM: snapshot: take the proxy's lock while dumping errors
  * BUG/MINOR: http/threads: atomically increment the error snapshot ID
  * BUG/MINOR: dns: check and link servers' resolvers right after config parsing
  * BUG/MEDIUM: h2: fix risk of memory leak on malformated wrapped frames
  * BUG/MEDIUM: session: fix reporting of handshake processing time in the logs
  * BUG/MINOR: stream: use atomic increments for the request counter
  * MINOR: thread: implement HA_ATOMIC_XADD()
  * BUG/MEDIUM: ECC cert should work with TLS &lt; v1.2 and openssl &gt;= 1.1.1
  * BUG/MEDIUM: dns/server: fix incomatibility between SRV resolution and server state file
  * BUG/MEDIUM: hlua: Don't call RESET_SAFE_LJMP if SET_SAFE_LJMP returns 0.
  * BUG/MAJOR: thread: lua: Wrong SSL context initialization.
  * BUG/MEDIUM: hlua: Make sure we drain the output buffer when done.
  * BUG/MEDIUM: lua: reset lua transaction between http requests
  * BUG/MEDIUM: mux_pt: dereference the connection with care in mux_pt_wake()
  * BUG/MINOR: lua: Bad HTTP client request duration.
  * BUG/MEDIUM: unix: provide a -&gt;drain() function
  * DOC: Fix spelling error in configuration doc
  * BUG/MEDIUM: cli/threads: protect some server commands against concurrent operations
  * BUG/MEDIUM: cli/threads: protect all "proxy" commands against concurrent updates
  * BUG/MEDIUM: lua: socket timeouts are not applied
  * DOC: ssl: Use consistent naming for TLS protocols
  * DOC: dns: explain set server ... fqdn requires resolver
  * BUG/MINOR: map: fix map_regm with backref
  * BUG/MEDIUM: ssl: loading dh param from certifile causes unpredictable error.
  * BUG/MEDIUM: ssl: fix missing error loading a keytype cert from a bundle.
  * BUG/MINOR: ssl: empty connections reported as errors.
  * BUG/MEDIUM: cli: make "show fd" thread-safe
  * MEDIUM: hathreads: implement a more flexible rendez-vous point
  * BUG/MEDIUM: threads: fix the no-thread case after the change to the sync point
  * MINOR: threads: add more consistency between certain variables in no-thread case
  * BUG/MEDIUM: threads: fix the double CAS implementation for ARMv7
  * MINOR: threads: Introduce double-width CAS on x86_64 and arm.
  * BUG/MEDIUM: lua: possible CLOSE-WAIT state with '\n' headers</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1537444801">- guard all parts referring to systemd to fix build on sle 11</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1537444802">- only use network namespaces on 12.x and newer, failed to build on
  sle11</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1537444803">- only reload the apparmor profile on newer distros, seems older
  distros do not have apparmor-rpm-macros yet</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1537444804">- also fix the systemd case for the apparmor_reload change</changelog>
</package>
<package pkgid="c57bd2bdad2c1e20d65acb97c0630566289029b44e6a44c723448721f76e41c7" name="hawk2" arch="src">
  <version epoch="0" ver="2.1.0+git.1526638315.05cdaf9d" rel="lp150.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1505217600">- minimize the packages we really need for this package:
  - adds hawk2-nodev.patch
  - use %{rubygem } syntax for BuildRequires/Requires
  - reorder requires to match the Gemfile
  - drop unused BR for nokogiri
  - run "bundle.%{rb_ruby_suffix} exec bin/rails version"
    to verify that we have everything needed for the Gemfile</changelog>
  <changelog author="kgronlund@suse.com" date="1505390400">- Update to version 2.1.0+git.1505201925.7f077708:
  * Use hawk-apiserver as proxy
  * Remove hawk_monitor and related dependencies</changelog>
  <changelog author="mrueckert@suse.de" date="1505390401">- add some BR to help the scheduler</changelog>
  <changelog author="kgronlund@suse.com" date="1505736000">- Loosen BR for nodejs to enable nodejs8</changelog>
  <changelog author="kgronlund@suse.com" date="1505736001">- Require timezone data to be present during build</changelog>
  <changelog author="kgronlund@suse.com" date="1505908800">- Update to version 2.1.0+git.1505902130.031a9f76:
  * Medium: Get post-expression value of ip resource for booth (bsc#1059492)
  * Only trigger attrlist click if paired with a SELECT element (bsc#1053456)</changelog>
  <changelog author="kgronlund@suse.com" date="1505995200">- Update to version 2.1.0+git.1505978451.64a32626:
  * Link error to report creation (bsc#1056483)
  * Low: Show cluster name in status title
  * Show revoke action for locally granted tickets (bsc#1059662)</changelog>
  <changelog author="kgronlund@suse.com" date="1510056000">- Update to version 2.1.0+git.1510051134.341d508e:
  * Show descriptions in cluster config (bsc#1054027)
  * Fix systemd installation for hawk-backend.service</changelog>
  <changelog author="kgronlund@suse.com" date="1510747200">- Update to version 2.1.0+git.1510742499.03cc2be8:
  * Switch to ruby 2.5 (bsc#1068183)
  * Permit parameter conversion in history upload dialog</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511438400">- Update to version 2.1.0+git.1511437564.94d31646:
  * Fix resources and constraints renaming (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)</changelog>
  <changelog author="rbrown@suse.com" date="1511438401">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Fix incorrect virtus dependency</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 2.1.0+git.1512139291.a886c8b1:
  * Disabled click when wizard apply successfully
  * Check data-wizard-enable to disable/enable related options
  * Correct path to Cluster configuration page
  * Fix acl_enabled? (bsc#1069296)</changelog>
  <changelog author="kgronlund@suse.com" date="1512561600">- Update to version 2.1.0+git.1512558762.84542abc:
  * Ensure certificate/key is group readable (bsc#1071481)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 2.1.0+git.1515768475.ff6e103b:
  * High: Support guest nodes (bsc#1074856)</changelog>
  <changelog author="kgronlund@suse.com" date="1518609600">- Update to version 2.1.0+git.1518590724.856b089e:
  * High: Fix remote nodes iteration (bsc#1080439)</changelog>
  <changelog author="abelarbi@suse.de" date="1519214400">- Update to version 2.1.0+git.1519229624.7c397acb:
  * Medium: Support Pacemaker Container Bundle feature (fate#324558)
  * Medium: Improved navigational structure in Hawk 2 (fate#323418)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 2.1.0+git.1522277768.8e5a2060:
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Add minimal bundle model object (fate#324558)
  * Low: Drop errors heading in status to align with dashboard</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1525089600">- Update to version 2.1.0+git.1525082027.af7afec4:
  * Low: Update copyright year in branding
  * Medium: Implement Hawk's cluster API (fate#323437)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526644800">- Update to version 2.1.0+git.1526638315.05cdaf9d:
  * High: Return after redirect in reports (bsc#1090562)
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * High: Update links to release notes and documentation (bsc#1089709)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Fetch correct meta data (bsc#1092122)</changelog>
</package>
<package pkgid="3ccbe0a3ee0ab89a41137e3c5a9698b38803d45ccfc7e4aa69e2cb0ae9b7ea56" name="hawk2" arch="x86_64">
  <version epoch="0" ver="2.1.0+git.1526638315.05cdaf9d" rel="lp150.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1505217600">- minimize the packages we really need for this package:
  - adds hawk2-nodev.patch
  - use %{rubygem } syntax for BuildRequires/Requires
  - reorder requires to match the Gemfile
  - drop unused BR for nokogiri
  - run "bundle.%{rb_ruby_suffix} exec bin/rails version"
    to verify that we have everything needed for the Gemfile</changelog>
  <changelog author="kgronlund@suse.com" date="1505390400">- Update to version 2.1.0+git.1505201925.7f077708:
  * Use hawk-apiserver as proxy
  * Remove hawk_monitor and related dependencies</changelog>
  <changelog author="mrueckert@suse.de" date="1505390401">- add some BR to help the scheduler</changelog>
  <changelog author="kgronlund@suse.com" date="1505736000">- Loosen BR for nodejs to enable nodejs8</changelog>
  <changelog author="kgronlund@suse.com" date="1505736001">- Require timezone data to be present during build</changelog>
  <changelog author="kgronlund@suse.com" date="1505908800">- Update to version 2.1.0+git.1505902130.031a9f76:
  * Medium: Get post-expression value of ip resource for booth (bsc#1059492)
  * Only trigger attrlist click if paired with a SELECT element (bsc#1053456)</changelog>
  <changelog author="kgronlund@suse.com" date="1505995200">- Update to version 2.1.0+git.1505978451.64a32626:
  * Link error to report creation (bsc#1056483)
  * Low: Show cluster name in status title
  * Show revoke action for locally granted tickets (bsc#1059662)</changelog>
  <changelog author="kgronlund@suse.com" date="1510056000">- Update to version 2.1.0+git.1510051134.341d508e:
  * Show descriptions in cluster config (bsc#1054027)
  * Fix systemd installation for hawk-backend.service</changelog>
  <changelog author="kgronlund@suse.com" date="1510747200">- Update to version 2.1.0+git.1510742499.03cc2be8:
  * Switch to ruby 2.5 (bsc#1068183)
  * Permit parameter conversion in history upload dialog</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511438400">- Update to version 2.1.0+git.1511437564.94d31646:
  * Fix resources and constraints renaming (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)</changelog>
  <changelog author="rbrown@suse.com" date="1511438401">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Fix incorrect virtus dependency</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 2.1.0+git.1512139291.a886c8b1:
  * Disabled click when wizard apply successfully
  * Check data-wizard-enable to disable/enable related options
  * Correct path to Cluster configuration page
  * Fix acl_enabled? (bsc#1069296)</changelog>
  <changelog author="kgronlund@suse.com" date="1512561600">- Update to version 2.1.0+git.1512558762.84542abc:
  * Ensure certificate/key is group readable (bsc#1071481)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 2.1.0+git.1515768475.ff6e103b:
  * High: Support guest nodes (bsc#1074856)</changelog>
  <changelog author="kgronlund@suse.com" date="1518609600">- Update to version 2.1.0+git.1518590724.856b089e:
  * High: Fix remote nodes iteration (bsc#1080439)</changelog>
  <changelog author="abelarbi@suse.de" date="1519214400">- Update to version 2.1.0+git.1519229624.7c397acb:
  * Medium: Support Pacemaker Container Bundle feature (fate#324558)
  * Medium: Improved navigational structure in Hawk 2 (fate#323418)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 2.1.0+git.1522277768.8e5a2060:
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Add minimal bundle model object (fate#324558)
  * Low: Drop errors heading in status to align with dashboard</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1525089600">- Update to version 2.1.0+git.1525082027.af7afec4:
  * Low: Update copyright year in branding
  * Medium: Implement Hawk's cluster API (fate#323437)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526644800">- Update to version 2.1.0+git.1526638315.05cdaf9d:
  * High: Return after redirect in reports (bsc#1090562)
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * High: Update links to release notes and documentation (bsc#1089709)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Fetch correct meta data (bsc#1092122)</changelog>
</package>
<package pkgid="25e2d0537842deaae39a1e557c814d0dc1ab01500fd674988e55d1e2220d092f" name="hdjmod" arch="src">
  <version epoch="0" ver="1.28" rel="lp150.3.2.1"/>
  <changelog author="marix@marix.org" date="1280059200">- Initial version</changelog>
  <changelog author="marix@marix.org" date="1280059201">- Build for older openSUSE versions</changelog>
  <changelog author="marix@marix.org" date="1285502400">- Patched to fix build with kernels newer than openSUSE 11.3</changelog>
  <changelog author="marix@marix.org" date="1291291200">- Patched to fix build with kernel 2.6.37</changelog>
  <changelog author="marix@marix.org" date="1304164800">- Cleaned up spec file
- Fixed missing dependency to the kernel</changelog>
  <changelog author="marix@marix.org" date="1304164801">- Fixed build on SLE 11 SP 1</changelog>
  <changelog author="marix@marix.org" date="1306756800">- Fixed build on kernels newer than openSUSE 11.4</changelog>
  <changelog author="cfarrell@novell.com" date="1312372800">- license update: GPL-2.0+
  Specify the license more accurately using the appropriate syntax</changelog>
  <changelog author="marix@marix.org" date="1331640000">- Fixed USB hotplugging
  Previously the module also loaded for devices of other vendors.</changelog>
  <changelog author="marix@marix.org" date="1333800000">- Fixed build on SLE 11 SP 2</changelog>
  <changelog author="marix@marix.org" date="1350388800">- Fixed build on kernel 3.6</changelog>
  <changelog author="marix@marix.org" date="1356264000">- Fixed build on kernel 3.7</changelog>
  <changelog author="marix@marix.org" date="1406289600">- Fixed build on kernel 3.16
  The required patch is hdjmod_kernel_3.16.patch</changelog>
  <changelog author="marix@marix.org" date="1495800000">- Added hdjmod_kernel_4.11.patch: Fixes build on Kernel 4.11 and
  up.</changelog>
  <changelog author="marix@marix.org" date="1498910400">- Added hdjmod_fix_buffer_overrun_in_device_name_handling.patch:
  Fixes a potential buffer overrun in device name handling.</changelog>
  <changelog author="marix@marix.org" date="1511697600">- Added hdjmod_kernel_4.14.patch: Fixes build on Kernel 4.14 and
  up.</changelog>
  <changelog author="marix@marix.org" date="1518264000">- Added hdjmod_kernel_4.15.patch: Fixes build on Kernel 4.15 and
  up.
- Removed accidentally added backup file from
  hdjmod_fix_hotplug.patch</changelog>
</package>
<package pkgid="8c9c9d31b805dd5b71c68557e505f28a285e9daa07b65aa26ed6ba6ffb4bcc03" name="hdjmod-kmp-default" arch="x86_64">
  <version epoch="0" ver="1.28_k4.12.14_lp150.12.13" rel="lp150.3.2.1"/>
  <changelog author="marix@marix.org" date="1280059200">- Initial version</changelog>
  <changelog author="marix@marix.org" date="1280059201">- Build for older openSUSE versions</changelog>
  <changelog author="marix@marix.org" date="1285502400">- Patched to fix build with kernels newer than openSUSE 11.3</changelog>
  <changelog author="marix@marix.org" date="1291291200">- Patched to fix build with kernel 2.6.37</changelog>
  <changelog author="marix@marix.org" date="1304164800">- Cleaned up spec file
- Fixed missing dependency to the kernel</changelog>
  <changelog author="marix@marix.org" date="1304164801">- Fixed build on SLE 11 SP 1</changelog>
  <changelog author="marix@marix.org" date="1306756800">- Fixed build on kernels newer than openSUSE 11.4</changelog>
  <changelog author="cfarrell@novell.com" date="1312372800">- license update: GPL-2.0+
  Specify the license more accurately using the appropriate syntax</changelog>
  <changelog author="marix@marix.org" date="1331640000">- Fixed USB hotplugging
  Previously the module also loaded for devices of other vendors.</changelog>
  <changelog author="marix@marix.org" date="1333800000">- Fixed build on SLE 11 SP 2</changelog>
  <changelog author="marix@marix.org" date="1350388800">- Fixed build on kernel 3.6</changelog>
  <changelog author="marix@marix.org" date="1356264000">- Fixed build on kernel 3.7</changelog>
  <changelog author="marix@marix.org" date="1406289600">- Fixed build on kernel 3.16
  The required patch is hdjmod_kernel_3.16.patch</changelog>
  <changelog author="marix@marix.org" date="1495800000">- Added hdjmod_kernel_4.11.patch: Fixes build on Kernel 4.11 and
  up.</changelog>
  <changelog author="marix@marix.org" date="1498910400">- Added hdjmod_fix_buffer_overrun_in_device_name_handling.patch:
  Fixes a potential buffer overrun in device name handling.</changelog>
  <changelog author="marix@marix.org" date="1511697600">- Added hdjmod_kernel_4.14.patch: Fixes build on Kernel 4.14 and
  up.</changelog>
  <changelog author="marix@marix.org" date="1518264000">- Added hdjmod_kernel_4.15.patch: Fixes build on Kernel 4.15 and
  up.
- Removed accidentally added backup file from
  hdjmod_fix_hotplug.patch</changelog>
</package>
<package pkgid="2e9c964468bd7ef0e7bde7de4cb91a5f76eba5c2e65a21833406ad381ebac626" name="hg-git" arch="noarch">
  <version epoch="0" ver="0.8.11" rel="lp150.2.3.1"/>
  <changelog author="gber@opensuse.org" date="1364299200">- update to version 0.4.0
  - Add test to show dulwich fault on invalid timezone data
  - scrub bad timezone values before dulwich sees them
  - push: provide better output about changed references
  - push: add more output about what was added
  - git_handler: add bookmark compatibility with new bmstore
  - git_handler: defend against unexported revisions in tag
    exporting
  - tests: use fn_git_commit in test-encoding.t
  - tests: make test-encoding.t compatible with git 1.8.0
  - tests: remove filterhash from test-incoming.t
  - tests: remove mercurial version check from test-incoming.t
  - tests: remove mercurial version check from
    test-pull-after-strip.t
  - tests: convert echos to comments
  - tests: avoid changing the current directory
  - tests: extract git command-line client and dulwich requirements
    into testutil
  - tests: let git init create directories when applicable
  - tests: add check for dulwich in test-url-parsing.py
  - tests: extract commonly used commit/tag functions into testutil
    library
  - tests: extract extension configuration into a testutil library</changelog>
  <changelog author="ohering@suse.de" date="1385985600">- Update to 503d403fc040 to fix interface to python-dulwich 0.9.1
  - Export Git objects from incremental Mercurial changes
  - overlaymanifest: add iteritems(), used by recent hg versions
  - Only export modified Git trees
  - Fixes #54 | option branch_bookmark_suffix doesn't move bookmarks
  - Make the path part of URL contain a leading slash only if it's not
  - git_handler: skip exporting hg tags whose names are not valid as git
  - test-tree-decomposition: work around git command format changes
  - Update test output to handle 65d8a43b adding some more objects.
  - test-subrepos: cope with unsorted output in .hgsub
  - Upgraded to use latest version of dulwich (0.9.1).
  - Updated `setup.py` file to reflect requirement on newer version of
  - git_handler: clean up trailing whitespace
  - git_handler: fix bugs introduced by 47df57f2bb2b which could never
  - overlays: fix incoming support for hg 2.8
  - Fix for #68 | Use .gitignore files (with proper semantics)</changelog>
  <changelog author="gber@opensuse.org" date="1386072000">- bump version to 0.4.0_hg20131127</changelog>
  <changelog author="gber@opensuse.org" date="1387281600">- update to version 0.5.0
  - test-subrepos.t: hide output from newer hg versions about
    active bookmarks
  - testedwith: drop 2.3.1, which has at least one test failure
  - testedwith: add 2.8.1
  - gitignore: gate feature on dirstate having rootcache and ignore
    having readpats
  - git_handler: iterate over new refs in sorted order to stabilize
    test output
  - overlay: add kludge to make sure we only ever give hexshas to
    dulwich
  - test-timezone.t: add missing (but needed) trailing whitespace
  - tests: dulwich is now smarter about sending fewer objects,
    update output
  - setup: bump dep on dulwich to 0.9.4
  - git-handler: turn refs from None to {} so that empty git repos
    can convert</changelog>
  <changelog author="gber@opensuse.org" date="1401105600">- update to version 0.6.0
  - no changelog provided, see
    https://bitbucket.org/durin42/hg-git/commits/tag/0.6.0 for a
    detailed list of changes</changelog>
  <changelog author="gber@opensuse.org" date="1408363200">- update to version 0.6.1
  - no changelog provided, see
    https://bitbucket.org/durin42/hg-git/commits/tag/0.6.1 for a
    detailed list of changes</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 0.7.0
  * no changelog provided, see
    https://bitbucket.org/durin42/hg-git/commits/tag/0.7.0 for a
    detailed list of changes
- Remove unzip build requirement; not needed
- Cleanup specfile
- Remove depreciated -f INSTALLED_FILES and --record-rpm=INSTALLED_FILES
  and use {python_sitelib} instead
- Remove "env CFLAGS="$RPM_OPT_FLAGS""; useless for a noarch package</changelog>
  <changelog author="gber@opensuse.org" date="1423137600">- update to version 0.8.0
  - no changelog provided, see
    https://bitbucket.org/durin42/hg-git/commits/tag/0.8.0 for a
    detailed list of changes</changelog>
  <changelog author="develop7@develop7.info" date="1424606400">- require python-dulwich &gt;= 0.9.7, as required by upstream setup.py</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1443873600">- update to 0.8.2
  Changes: see upstream</changelog>
  <changelog author="develop7@develop7.info" date="1449489600">- update to v0.8.3
  * fixes Mercurial 3.6 compatibility issues
  * Other changes: see https://bitbucket.org/durin42/hg-git/branches/compare/0.8.3%0D0.8.2
- use %version macro
- remove unused %rev define</changelog>
  <changelog author="develop7@develop7.info" date="1454328000">- update to v0.8.4
  * No changelog provided, see
    https://bitbucket.org/durin42/hg-git/branches/compare/0.8.4%0D0.8.3</changelog>
  <changelog author="mpluskal@suse.com" date="1454328001">- Update project url
- Cleanups spec file with spec-cleaner
- Enable tests</changelog>
  <changelog author="develop7@develop7.info" date="1454414400">- update to v0.8.5
  * Support Mercurial 3.7
  * No changelog provided, see
    https://bitbucket.org/durin42/hg-git/branches/compare/0.8.5%0D0.8.4</changelog>
  <changelog author="astieger@suse.com" date="1471262400">- disable failing tests</changelog>
  <changelog author="develop7@develop7.info" date="1493640000">- update to v0.8.6
  * Support Mercurial 4.2-rc
  * Bugfixes
- enable tests back
- source verification added</changelog>
  <changelog author="mpluskal@suse.com" date="1493726400">- Fix download url</changelog>
  <changelog author="olaf@aepfle.de" date="1503748800">- update to v0.8.9
  no changelog provided by upstream
- remove weird tests with hg-git.patch</changelog>
  <changelog author="astieger@suse.com" date="1510488000">- update to 0.8.10:
  * mercurial 4.4 compatibility
  * drop hg-git.patch and disable test, this is in flux upstream</changelog>
  <changelog author="astieger@suse.com" date="1529409600">- update to 0.8.11 (boo#1096561)
  * add config knob for marking git branches public
  * re-enable git subrepositories disabled in 4.4.1
  * fix compatibility with hg &lt; 4.2
  * improve compatibility with hg 4.5+
- as this package is known not to work with mercurial 4.6, add
  a conflict</changelog>
</package>
<package pkgid="435d4e9f585c5c1afcbf73ed67eca77559ff26373852254d3920400f880c5744" name="hg-git" arch="src">
  <version epoch="0" ver="0.8.11" rel="lp150.2.3.1"/>
  <changelog author="gber@opensuse.org" date="1364299200">- update to version 0.4.0
  - Add test to show dulwich fault on invalid timezone data
  - scrub bad timezone values before dulwich sees them
  - push: provide better output about changed references
  - push: add more output about what was added
  - git_handler: add bookmark compatibility with new bmstore
  - git_handler: defend against unexported revisions in tag
    exporting
  - tests: use fn_git_commit in test-encoding.t
  - tests: make test-encoding.t compatible with git 1.8.0
  - tests: remove filterhash from test-incoming.t
  - tests: remove mercurial version check from test-incoming.t
  - tests: remove mercurial version check from
    test-pull-after-strip.t
  - tests: convert echos to comments
  - tests: avoid changing the current directory
  - tests: extract git command-line client and dulwich requirements
    into testutil
  - tests: let git init create directories when applicable
  - tests: add check for dulwich in test-url-parsing.py
  - tests: extract commonly used commit/tag functions into testutil
    library
  - tests: extract extension configuration into a testutil library</changelog>
  <changelog author="ohering@suse.de" date="1385985600">- Update to 503d403fc040 to fix interface to python-dulwich 0.9.1
  - Export Git objects from incremental Mercurial changes
  - overlaymanifest: add iteritems(), used by recent hg versions
  - Only export modified Git trees
  - Fixes #54 | option branch_bookmark_suffix doesn't move bookmarks
  - Make the path part of URL contain a leading slash only if it's not
  - git_handler: skip exporting hg tags whose names are not valid as git
  - test-tree-decomposition: work around git command format changes
  - Update test output to handle 65d8a43b adding some more objects.
  - test-subrepos: cope with unsorted output in .hgsub
  - Upgraded to use latest version of dulwich (0.9.1).
  - Updated `setup.py` file to reflect requirement on newer version of
  - git_handler: clean up trailing whitespace
  - git_handler: fix bugs introduced by 47df57f2bb2b which could never
  - overlays: fix incoming support for hg 2.8
  - Fix for #68 | Use .gitignore files (with proper semantics)</changelog>
  <changelog author="gber@opensuse.org" date="1386072000">- bump version to 0.4.0_hg20131127</changelog>
  <changelog author="gber@opensuse.org" date="1387281600">- update to version 0.5.0
  - test-subrepos.t: hide output from newer hg versions about
    active bookmarks
  - testedwith: drop 2.3.1, which has at least one test failure
  - testedwith: add 2.8.1
  - gitignore: gate feature on dirstate having rootcache and ignore
    having readpats
  - git_handler: iterate over new refs in sorted order to stabilize
    test output
  - overlay: add kludge to make sure we only ever give hexshas to
    dulwich
  - test-timezone.t: add missing (but needed) trailing whitespace
  - tests: dulwich is now smarter about sending fewer objects,
    update output
  - setup: bump dep on dulwich to 0.9.4
  - git-handler: turn refs from None to {} so that empty git repos
    can convert</changelog>
  <changelog author="gber@opensuse.org" date="1401105600">- update to version 0.6.0
  - no changelog provided, see
    https://bitbucket.org/durin42/hg-git/commits/tag/0.6.0 for a
    detailed list of changes</changelog>
  <changelog author="gber@opensuse.org" date="1408363200">- update to version 0.6.1
  - no changelog provided, see
    https://bitbucket.org/durin42/hg-git/commits/tag/0.6.1 for a
    detailed list of changes</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 0.7.0
  * no changelog provided, see
    https://bitbucket.org/durin42/hg-git/commits/tag/0.7.0 for a
    detailed list of changes
- Remove unzip build requirement; not needed
- Cleanup specfile
- Remove depreciated -f INSTALLED_FILES and --record-rpm=INSTALLED_FILES
  and use {python_sitelib} instead
- Remove "env CFLAGS="$RPM_OPT_FLAGS""; useless for a noarch package</changelog>
  <changelog author="gber@opensuse.org" date="1423137600">- update to version 0.8.0
  - no changelog provided, see
    https://bitbucket.org/durin42/hg-git/commits/tag/0.8.0 for a
    detailed list of changes</changelog>
  <changelog author="develop7@develop7.info" date="1424606400">- require python-dulwich &gt;= 0.9.7, as required by upstream setup.py</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1443873600">- update to 0.8.2
  Changes: see upstream</changelog>
  <changelog author="develop7@develop7.info" date="1449489600">- update to v0.8.3
  * fixes Mercurial 3.6 compatibility issues
  * Other changes: see https://bitbucket.org/durin42/hg-git/branches/compare/0.8.3%0D0.8.2
- use %version macro
- remove unused %rev define</changelog>
  <changelog author="develop7@develop7.info" date="1454328000">- update to v0.8.4
  * No changelog provided, see
    https://bitbucket.org/durin42/hg-git/branches/compare/0.8.4%0D0.8.3</changelog>
  <changelog author="mpluskal@suse.com" date="1454328001">- Update project url
- Cleanups spec file with spec-cleaner
- Enable tests</changelog>
  <changelog author="develop7@develop7.info" date="1454414400">- update to v0.8.5
  * Support Mercurial 3.7
  * No changelog provided, see
    https://bitbucket.org/durin42/hg-git/branches/compare/0.8.5%0D0.8.4</changelog>
  <changelog author="astieger@suse.com" date="1471262400">- disable failing tests</changelog>
  <changelog author="develop7@develop7.info" date="1493640000">- update to v0.8.6
  * Support Mercurial 4.2-rc
  * Bugfixes
- enable tests back
- source verification added</changelog>
  <changelog author="mpluskal@suse.com" date="1493726400">- Fix download url</changelog>
  <changelog author="olaf@aepfle.de" date="1503748800">- update to v0.8.9
  no changelog provided by upstream
- remove weird tests with hg-git.patch</changelog>
  <changelog author="astieger@suse.com" date="1510488000">- update to 0.8.10:
  * mercurial 4.4 compatibility
  * drop hg-git.patch and disable test, this is in flux upstream</changelog>
  <changelog author="astieger@suse.com" date="1529409600">- update to 0.8.11 (boo#1096561)
  * add config knob for marking git branches public
  * re-enable git subrepositories disabled in 4.4.1
  * fix compatibility with hg &lt; 4.2
  * improve compatibility with hg 4.5+
- as this package is known not to work with mercurial 4.6, add
  a conflict</changelog>
</package>
<package pkgid="6b12a29d0170114eb991f3bab876c2525d28ac68ef3fe8b2f5cc3db157fba768" name="hostapd" arch="src">
  <version epoch="0" ver="2.6" rel="lp150.2.3.2"/>
  <changelog author="ro@suse.de" date="1222171200">- drop buildreq for madwifi (dropped package)</changelog>
  <changelog author="sndirsch@suse.de" date="1276084800">- udpated to release 0.6.10
- updated hostapd.dif
- git-commit-eb1f744.diff:
  * Move DTIM period configuration into Beacon set operation; fixes
    "Could not set DTIM period for kernel driver; wlan0: Unable to
    setup interface.rmdir[ctrl_interface]: No such file or
    directory" error when using "nl80211" driver</changelog>
  <changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
  <changelog author="jengelh@medozas.de" date="1316174400">- Select libnl-1_1-devel</changelog>
  <changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro</changelog>
  <changelog author="lnussel@suse.de" date="1318420800">- update to version 0.7.3
- don't use /tmp for dump file in default config
- verbose build
- fix build for older distros
- enable driver 'none' for radius only mode
- add init script</changelog>
  <changelog author="glin@suse.com" date="1337083200">- update to version 1.0
- respin hostapd.dif to fit the new defconfig
- change the file permission of the config files with passwords
  to 600 (bnc#740964)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1352203200">- Add Native systemd units</changelog>
  <changelog author="avm-xandry@yandex.ru" date="1365508800">- update to version 2.0
- fix corrected file name hostapd.dif to hostapd.diff
- in default config includes all features (IEEE 802.11w, Hotspot 2.0, IEEE 802.11ac, WPS, etc.)</changelog>
  <changelog author="cfarrell@suse.com" date="1366200000">- license update: GPL-2.0 or BSD-3-Clause
  README makes it clear that this is a dual license - i.e. choice of either
  or</changelog>
  <changelog author="aj@suse.com" date="1366286400">- Do not package /etc/init.d
- Do not install init file since package contains a service file and
  is only build for Factory
- Cleanup spec file
- Use /run instead of /var/run</changelog>
  <changelog author="dvaleev@suse.com" date="1380715200">- fix host_to_le32 undefined on BigEndian architectures
  (hostapd-be-host_to_le.patch)</changelog>
  <changelog author="i@marguerite.su" date="1397649600">- update version 2.1
  * see http://hostap.epitest.fi/cgit/hostap/log/ for details.
- change hostapd.diff to hostapd-2.1-defconfig.patch
- remove patch: hostapd-tmp.diff, no longer needed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401192000">- Update hostapd-2.1-defconfig.patch and spec file
  to build with libnl3 instead of libnl1</changelog>
  <changelog author="michael@stroeder.com" date="1420459200">- update version 2.3
- removed patch hostapd-2.1-be-host_to_le.patch because it
  seems obsolete
- hostapd-2.1-defconfig.patch rediffed and renamed to hostapd-2.3-defconfig.patch
  ChangeLog for hostapd since 2.1:
  2014-10-09 - v2.3
  * fixed number of minor issues identified in static analyzer warnings
  * fixed DFS and channel switch operation for multi-BSS cases
  * started to use constant time comparison for various password and hash
  values to reduce possibility of any externally measurable timing
  differences
  * extended explicit clearing of freed memory and expired keys to avoid
  keeping private data in memory longer than necessary
  * added support for number of new RADIUS attributes from RFC 7268
  (Mobility-Domain-Id, WLAN-HESSID, WLAN-Pairwise-Cipher,
  WLAN-Group-Cipher, WLAN-AKM-Suite, WLAN-Group-Mgmt-Pairwise-Cipher)
  * fixed GET_CONFIG wpa_pairwise_cipher value
  * added code to clear bridge FDB entry on station disconnection
  * fixed PMKSA cache timeout from Session-Timeout for WPA/WPA2 cases
  * fixed OKC PMKSA cache entry fetch to avoid a possible infinite loop
  in case the first entry does not match
  * fixed hostapd_cli action script execution to use more robust mechanism
  (CVE-2014-3686)
  2014-06-04 - v2.2
  * fixed SAE confirm-before-commit validation to avoid a potential
  segmentation fault in an unexpected message sequence that could be
  triggered remotely
  * extended VHT support
  - Operating Mode Notification
  - Power Constraint element (local_pwr_constraint)
  - Spectrum management capability (spectrum_mgmt_required=1)
  - fix VHT80 segment picking in ACS
  - fix vht_capab 'Maximum A-MPDU Length Exponent' handling
  - fix VHT20
  * fixed HT40 co-ex scan for some pri/sec channel switches
  * extended HT40 co-ex support to allow dynamic channel width changes
  during the lifetime of the BSS
  * fixed HT40 co-ex support to check for overlapping 20 MHz BSS
  * fixed MSCHAP UTF-8 to UCS-2 conversion for three-byte encoding;
  this fixes password with include UTF-8 characters that use
  three-byte encoding EAP methods that use NtPasswordHash
  * reverted TLS certificate validation step change in v2.1 that rejected
  any AAA server certificate with id-kp-clientAuth even if
  id-kp-serverAuth EKU was included
  * fixed STA validation step for WPS ER commands to prevent a potential
  crash if an ER sends an unexpected PutWLANResponse to a station that
  is disassociated, but not fully removed
  * enforce full EAP authentication after RADIUS Disconnect-Request by
  removing the PMKSA cache entry
  * added support for NAS-IP-Address, NAS-identifier, and NAS-IPv6-Address
  in RADIUS Disconnect-Request
  * added mechanism for removing addresses for MAC ACLs by prefixing an
  entry with "-"
  * Interworking/Hotspot 2.0 enhancements
  - support Hotspot 2.0 Release 2
  * OSEN network for online signup connection
  * subscription remediation (based on RADIUS server request or
  control interface HS20_WNM_NOTIF for testing purposes)
  * Hotspot 2.0 release number indication in WFA RADIUS VSA
  * deauthentication request (based on RADIUS server request or
  control interface WNM_DEAUTH_REQ for testing purposes)
  * Session Info URL RADIUS AVP to trigger ESS Disassociation Imminent
  * hs20_icon config parameter to configure icon files for OSU
  * osu_* config parameters for OSU Providers list
  - do not use Interworking filtering rules on Probe Request if
  Interworking is disabled to avoid interop issues
  * added/fixed nl80211 functionality
  - AP interface teardown optimization
  - support vendor specific driver command
  (VENDOR &lt;vendor id&gt; &lt;sub command id&gt; [&lt;hex formatted data&gt;])
  * fixed PMF protection of Deauthentication frame when this is triggered
  by session timeout
  * internal TLS implementation enhancements/fixes
  - add SHA256-based cipher suites
  - add DHE-RSA cipher suites
  - fix X.509 validation of PKCS#1 signature to check for extra data
  * RADIUS server functionality
  - add minimal RADIUS accounting server support (hostapd-as-server);
  this is mainly to enable testing coverage with hwsim scripts
  - allow authentication log to be written into SQLite databse
  - added option for TLS protocol testing of an EAP peer by simulating
  various misbehaviors/known attacks
  - MAC ACL support for testing purposes
  * fixed PTK derivation for CCMP-256 and GCMP-256
  * extended WPS per-station PSK to support ER case
  * added option to configure the management group cipher
  (group_mgmt_cipher=AES-128-CMAC (default), BIP-GMAC-128, BIP-GMAC-256,
  BIP-CMAC-256)
  * fixed AP mode default TXOP Limit values for AC_VI and AC_VO (these
  were rounded incorrectly)
  * added support for postponing FT response in case PMK-R1 needs to be
  pulled from R0KH
  * added option to advertise 40 MHz intolerant HT capability with
  ht_capab=[40-INTOLERANT]
  * remove WPS 1.0 only support, i.e., WSC 2.0 support is now enabled
  whenever CONFIG_WPS=y is set
  * EAP-pwd fixes
  - fix possible segmentation fault on EAP method deinit if an invalid
  group is negotiated
  * fixed RADIUS client retransmit/failover behavior
  - there was a potential ctash due to freed memory being accessed
  - failover to a backup server mechanism did not work properly
  * fixed a possible crash on double DISABLE command when multiple BSSes
  are enabled
  * fixed a memory leak in SAE random number generation
  * fixed GTK rekeying when the station uses FT protocol
  * fixed off-by-one bounds checking in printf_encode()
  - this could result in deinial of service in some EAP server cases
  * various bug fixes</changelog>
  <changelog author="michael@stroeder.com" date="1429790400">- update version 2.4
- added 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  for CVE-2015-1863
- updated URLs
- require pkg-config and libnl3-devel during build
- replaced hostapd-2.3-defconfig.patch by hostapd-2.4-defconfig.patch
  ChangeLog for hostapd since 2.3:
  2015-03-15 - v2.4
  * allow OpenSSL cipher configuration to be set for internal EAP server
    (openssl_ciphers parameter)
  * fixed number of small issues based on hwsim test case failures and
    static analyzer reports
  * fixed Accounting-Request to not include duplicated Acct-Session-Id
  * add support for Acct-Multi-Session-Id in RADIUS Accounting messages
  * add support for PMKSA caching with SAE
  * add support for generating BSS Load element (bss_load_update_period)
  * fixed channel switch from VHT to HT
  * add INTERFACE-ENABLED and INTERFACE-DISABLED ctrl_iface events
  * add support for learning STA IPv4/IPv6 addresses and configuring
    ProxyARP support
  * dropped support for the madwifi driver interface
  * add support for Suite B (128-bit and 192-bit level) key management and
    cipher suites
  * fixed a regression with driver=wired
  * extend EAPOL-Key msg 1/4 retry workaround for changing SNonce
  * add BSS_TM_REQ ctrl_iface command to send BSS Transition Management
    Request frames and BSS-TM-RESP event to indicate response to such
    frame
  * add support for EAP Re-Authentication Protocol (ERP)
  * fixed AP IE in EAPOL-Key 3/4 when both WPA and FT was enabled
  * fixed a regression in HT 20/40 coex Action frame parsing
  * set stdout to be line-buffered
  * add support for vendor specific VHT extension to enable 256 QAM rates
    (VHT-MCS 8 and 9) on 2.4 GHz band
  * RADIUS DAS:
  - extend Disconnect-Request processing to allow matching of multiple
    sessions
  - support Acct-Multi-Session-Id as an identifier
  - allow PMKSA cache entry to be removed without association
  * expire hostapd STA entry if kernel does not have a matching entry
  * allow chanlist to be used to specify a subset of channels for ACS
  * improve ACS behavior on 2.4 GHz band and allow channel bias to be
    configured with acs_chan_bias parameter
  * do not reply to a Probe Request frame that includes DSS Parameter Set
    element in which the channel does not match the current operating
    channel
  * add UPDATE_BEACON ctrl_iface command; this can be used to force Beacon
    frame contents to be updated and to start beaconing on an interface
    that used start_disabled=1
  * fixed some RADIUS server failover cases</changelog>
  <changelog author="michael@stroeder.com" date="1445169600">- update to upstream release 2.5
- removed 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  (CVE-2015-1863) because it's fixed in upstream release 2.5
- rebased hostapd-2.4-defconfig.patch -&gt; hostapd-2.5-defconfig.patch
  ChangeLog for hostapd since 2.4:
  2015-09-27 - v2.5
  * fixed WPS UPnP vulnerability with HTTP chunked transfer encoding
  [http://w1.fi/security/2015-2/] (CVE-2015-4141 bsc#930077)
  * fixed WMM Action frame parser
  [http://w1.fi/security/2015-3/] (CVE-2015-4142 bsc#930078)
  * fixed EAP-pwd server missing payload length validation
  [http://w1.fi/security/2015-4/]
  (CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, bsc#930079)
  * fixed validation of WPS and P2P NFC NDEF record payload length
  [http://w1.fi/security/2015-5/]
  * nl80211:
  - fixed vendor command handling to check OUI properly
  * fixed hlr_auc_gw build with OpenSSL
  * hlr_auc_gw: allow Milenage RES length to be reduced
  * disable HT for a station that does not support WMM/QoS
  * added support for hashed password (NtHash) in EAP-pwd server
  * fixed and extended dynamic VLAN cases
  * added EAP-EKE server support for deriving Session-Id
  * set Acct-Session-Id to a random value to make it more likely to be
  unique even if the device does not have a proper clock
  * added more 2.4 GHz channels for 20/40 MHz HT co-ex scan
  * modified SAE routines to be more robust and PWE generation to be
  stronger against timing attacks
  * added support for Brainpool Elliptic Curves with SAE
  * increases maximum value accepted for cwmin/cwmax
  * added support for CCMP-256 and GCMP-256 as group ciphers with FT
  * added Fast Session Transfer (FST) module
  * removed optional fields from RSNE when using FT with PMF
  (workaround for interoperability issues with iOS 8.4)
  * added EAP server support for TLS session resumption
  * fixed key derivation for Suite B 192-bit AKM (this breaks
  compatibility with the earlier version)
  * added mechanism to track unconnected stations and do minimal band
  steering
  * number of small fixes</changelog>
  <changelog author="chris@intrbiz.com" date="1475409600">- update to upstream release 2.6
  * fixed EAP-pwd last fragment validation
    [http://w1.fi/security/2015-7/] (CVE-2015-5314)
  * fixed WPS configuration update vulnerability with malformed passphrase
    [http://w1.fi/security/2016-1/] (CVE-2016-4476)
  * extended channel switch support for VHT bandwidth changes
  * added support for configuring new ANQP-elements with
    anqp_elem=&lt;InfoID&gt;:&lt;hexdump of payload&gt;
  * fixed Suite B 192-bit AKM to use proper PMK length
    (note: this makes old releases incompatible with the fixed behavior)
  * added no_probe_resp_if_max_sta=1 parameter to disable Probe Response
    frame sending for not-associated STAs if max_num_sta limit has been
    reached
  * added option (-S as command line argument) to request all interfaces
    to be started at the same time
  * modified rts_threshold and fragm_threshold configuration parameters
    to allow -1 to be used to disable RTS/fragmentation
  * EAP-pwd: added support for Brainpool Elliptic Curves
    (with OpenSSL 1.0.2 and newer)
  * fixed EAPOL reauthentication after FT protocol run
  * fixed FTIE generation for 4-way handshake after FT protocol run
  * fixed and improved various FST operations
  * TLS server
  - support SHA384 and SHA512 hashes
  - support TLS v1.2 signature algorithm with SHA384 and SHA512
  - support PKCS #5 v2.0 PBES2
  - support PKCS #5 with PKCS #12 style key decryption
  - minimal support for PKCS #12
  - support OCSP stapling (including ocsp_multi)
  * added support for OpenSSL 1.1 API changes
  - drop support for OpenSSL 0.9.8
  - drop support for OpenSSL 1.0.0
  * EAP-PEAP: support fast-connect crypto binding
  * RADIUS
  - fix Called-Station-Id to not escape SSID
  - add Event-Timestamp to all Accounting-Request packets
  - add Acct-Session-Id to Accounting-On/Off
  - add Acct-Multi-Session-Id  ton Access-Request packets
  - add Service-Type (= Frames)
  - allow server to provide PSK instead of passphrase for WPA-PSK
    Tunnel_password case
  - update full message for interim accounting updates
  - add Acct-Delay-Time into Accounting messages
  - add require_message_authenticator configuration option to require
    CoA/Disconnect-Request packets to be authenticated
  * started to postpone WNM-Notification frame sending by 100 ms so that
    the STA has some more time to configure the key before this frame is
    received after the 4-way handshake
  * VHT: added interoperability workaround for 80+80 and 160 MHz channels
  * extended VLAN support (per-STA vif, etc.)
  * fixed PMKID derivation with SAE
  * nl80211
  - added support for full station state operations
  - fix IEEE 802.1X/WEP EAP reauthentication and rekeying to use
    unencrypted EAPOL frames
  * added initial MBO support; number of extensions to WNM BSS Transition
    Management
  * added initial functionality for location related operations
  * added assocresp_elements parameter to allow vendor specific elements
    to be added into (Re)Association Response frames
  * improved Public Action frame addressing
  - use Address 3 = wildcard BSSID in GAS response if a query from an
    unassociated STA used that address
  - fix TX status processing for Address 3 = wildcard BSSID
  - add gas_address3 configuration parameter to control Address 3
    behavior
  * added command line parameter -i to override interface parameter in
    hostapd.conf
  * added command completion support to hostapd_cli
  * added passive client taxonomy determination (CONFIG_TAXONOMY=y
    compile option and "SIGNATURE &lt;addr&gt;" control interface command)
  * number of small fixes
- renamed hostapd-2.5-defconfig.patch to hostapd-2.6-defconfig.patch</changelog>
  <changelog author="chris@intrbiz.com" date="1508328000">- Fix KRACK attacks (bsc#1063479, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088):
  * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch
  * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch
  * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch
  * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch
  * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch
  * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch
  * rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch
  * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1539950400">- Added rebased-v2.6-0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch
  Ignore unauthenticated encrypted EAPOL-Key data (CVE-2018-14526, bsc#1104205).</changelog>
</package>
<package pkgid="f45aa4962838550a9d4a1ea1ba88aa7470f88a4b4f40df854033d449c6ffbc2c" name="hostapd" arch="x86_64">
  <version epoch="0" ver="2.6" rel="lp150.2.3.2"/>
  <changelog author="sndirsch@suse.de" date="1276084800">- udpated to release 0.6.10
- updated hostapd.dif
- git-commit-eb1f744.diff:
  * Move DTIM period configuration into Beacon set operation; fixes
    "Could not set DTIM period for kernel driver; wlan0: Unable to
    setup interface.rmdir[ctrl_interface]: No such file or
    directory" error when using "nl80211" driver</changelog>
  <changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
  <changelog author="jengelh@medozas.de" date="1316174400">- Select libnl-1_1-devel</changelog>
  <changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro</changelog>
  <changelog author="lnussel@suse.de" date="1318420800">- update to version 0.7.3
- don't use /tmp for dump file in default config
- verbose build
- fix build for older distros
- enable driver 'none' for radius only mode
- add init script</changelog>
  <changelog author="glin@suse.com" date="1337083200">- update to version 1.0
- respin hostapd.dif to fit the new defconfig
- change the file permission of the config files with passwords
  to 600 (bnc#740964)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1352203200">- Add Native systemd units</changelog>
  <changelog author="avm-xandry@yandex.ru" date="1365508800">- update to version 2.0
- fix corrected file name hostapd.dif to hostapd.diff
- in default config includes all features (IEEE 802.11w, Hotspot 2.0, IEEE 802.11ac, WPS, etc.)</changelog>
  <changelog author="cfarrell@suse.com" date="1366200000">- license update: GPL-2.0 or BSD-3-Clause
  README makes it clear that this is a dual license - i.e. choice of either
  or</changelog>
  <changelog author="aj@suse.com" date="1366286400">- Do not package /etc/init.d
- Do not install init file since package contains a service file and
  is only build for Factory
- Cleanup spec file
- Use /run instead of /var/run</changelog>
  <changelog author="dvaleev@suse.com" date="1380715200">- fix host_to_le32 undefined on BigEndian architectures
  (hostapd-be-host_to_le.patch)</changelog>
  <changelog author="i@marguerite.su" date="1397649600">- update version 2.1
  * see http://hostap.epitest.fi/cgit/hostap/log/ for details.
- change hostapd.diff to hostapd-2.1-defconfig.patch
- remove patch: hostapd-tmp.diff, no longer needed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401192000">- Update hostapd-2.1-defconfig.patch and spec file
  to build with libnl3 instead of libnl1</changelog>
  <changelog author="michael@stroeder.com" date="1420459200">- update version 2.3
- removed patch hostapd-2.1-be-host_to_le.patch because it
  seems obsolete
- hostapd-2.1-defconfig.patch rediffed and renamed to hostapd-2.3-defconfig.patch
  ChangeLog for hostapd since 2.1:
  2014-10-09 - v2.3
  * fixed number of minor issues identified in static analyzer warnings
  * fixed DFS and channel switch operation for multi-BSS cases
  * started to use constant time comparison for various password and hash
  values to reduce possibility of any externally measurable timing
  differences
  * extended explicit clearing of freed memory and expired keys to avoid
  keeping private data in memory longer than necessary
  * added support for number of new RADIUS attributes from RFC 7268
  (Mobility-Domain-Id, WLAN-HESSID, WLAN-Pairwise-Cipher,
  WLAN-Group-Cipher, WLAN-AKM-Suite, WLAN-Group-Mgmt-Pairwise-Cipher)
  * fixed GET_CONFIG wpa_pairwise_cipher value
  * added code to clear bridge FDB entry on station disconnection
  * fixed PMKSA cache timeout from Session-Timeout for WPA/WPA2 cases
  * fixed OKC PMKSA cache entry fetch to avoid a possible infinite loop
  in case the first entry does not match
  * fixed hostapd_cli action script execution to use more robust mechanism
  (CVE-2014-3686)
  2014-06-04 - v2.2
  * fixed SAE confirm-before-commit validation to avoid a potential
  segmentation fault in an unexpected message sequence that could be
  triggered remotely
  * extended VHT support
  - Operating Mode Notification
  - Power Constraint element (local_pwr_constraint)
  - Spectrum management capability (spectrum_mgmt_required=1)
  - fix VHT80 segment picking in ACS
  - fix vht_capab 'Maximum A-MPDU Length Exponent' handling
  - fix VHT20
  * fixed HT40 co-ex scan for some pri/sec channel switches
  * extended HT40 co-ex support to allow dynamic channel width changes
  during the lifetime of the BSS
  * fixed HT40 co-ex support to check for overlapping 20 MHz BSS
  * fixed MSCHAP UTF-8 to UCS-2 conversion for three-byte encoding;
  this fixes password with include UTF-8 characters that use
  three-byte encoding EAP methods that use NtPasswordHash
  * reverted TLS certificate validation step change in v2.1 that rejected
  any AAA server certificate with id-kp-clientAuth even if
  id-kp-serverAuth EKU was included
  * fixed STA validation step for WPS ER commands to prevent a potential
  crash if an ER sends an unexpected PutWLANResponse to a station that
  is disassociated, but not fully removed
  * enforce full EAP authentication after RADIUS Disconnect-Request by
  removing the PMKSA cache entry
  * added support for NAS-IP-Address, NAS-identifier, and NAS-IPv6-Address
  in RADIUS Disconnect-Request
  * added mechanism for removing addresses for MAC ACLs by prefixing an
  entry with "-"
  * Interworking/Hotspot 2.0 enhancements
  - support Hotspot 2.0 Release 2
  * OSEN network for online signup connection
  * subscription remediation (based on RADIUS server request or
  control interface HS20_WNM_NOTIF for testing purposes)
  * Hotspot 2.0 release number indication in WFA RADIUS VSA
  * deauthentication request (based on RADIUS server request or
  control interface WNM_DEAUTH_REQ for testing purposes)
  * Session Info URL RADIUS AVP to trigger ESS Disassociation Imminent
  * hs20_icon config parameter to configure icon files for OSU
  * osu_* config parameters for OSU Providers list
  - do not use Interworking filtering rules on Probe Request if
  Interworking is disabled to avoid interop issues
  * added/fixed nl80211 functionality
  - AP interface teardown optimization
  - support vendor specific driver command
  (VENDOR &lt;vendor id&gt; &lt;sub command id&gt; [&lt;hex formatted data&gt;])
  * fixed PMF protection of Deauthentication frame when this is triggered
  by session timeout
  * internal TLS implementation enhancements/fixes
  - add SHA256-based cipher suites
  - add DHE-RSA cipher suites
  - fix X.509 validation of PKCS#1 signature to check for extra data
  * RADIUS server functionality
  - add minimal RADIUS accounting server support (hostapd-as-server);
  this is mainly to enable testing coverage with hwsim scripts
  - allow authentication log to be written into SQLite databse
  - added option for TLS protocol testing of an EAP peer by simulating
  various misbehaviors/known attacks
  - MAC ACL support for testing purposes
  * fixed PTK derivation for CCMP-256 and GCMP-256
  * extended WPS per-station PSK to support ER case
  * added option to configure the management group cipher
  (group_mgmt_cipher=AES-128-CMAC (default), BIP-GMAC-128, BIP-GMAC-256,
  BIP-CMAC-256)
  * fixed AP mode default TXOP Limit values for AC_VI and AC_VO (these
  were rounded incorrectly)
  * added support for postponing FT response in case PMK-R1 needs to be
  pulled from R0KH
  * added option to advertise 40 MHz intolerant HT capability with
  ht_capab=[40-INTOLERANT]
  * remove WPS 1.0 only support, i.e., WSC 2.0 support is now enabled
  whenever CONFIG_WPS=y is set
  * EAP-pwd fixes
  - fix possible segmentation fault on EAP method deinit if an invalid
  group is negotiated
  * fixed RADIUS client retransmit/failover behavior
  - there was a potential ctash due to freed memory being accessed
  - failover to a backup server mechanism did not work properly
  * fixed a possible crash on double DISABLE command when multiple BSSes
  are enabled
  * fixed a memory leak in SAE random number generation
  * fixed GTK rekeying when the station uses FT protocol
  * fixed off-by-one bounds checking in printf_encode()
  - this could result in deinial of service in some EAP server cases
  * various bug fixes</changelog>
  <changelog author="michael@stroeder.com" date="1429790400">- update version 2.4
- added 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  for CVE-2015-1863
- updated URLs
- require pkg-config and libnl3-devel during build
- replaced hostapd-2.3-defconfig.patch by hostapd-2.4-defconfig.patch
  ChangeLog for hostapd since 2.3:
  2015-03-15 - v2.4
  * allow OpenSSL cipher configuration to be set for internal EAP server
    (openssl_ciphers parameter)
  * fixed number of small issues based on hwsim test case failures and
    static analyzer reports
  * fixed Accounting-Request to not include duplicated Acct-Session-Id
  * add support for Acct-Multi-Session-Id in RADIUS Accounting messages
  * add support for PMKSA caching with SAE
  * add support for generating BSS Load element (bss_load_update_period)
  * fixed channel switch from VHT to HT
  * add INTERFACE-ENABLED and INTERFACE-DISABLED ctrl_iface events
  * add support for learning STA IPv4/IPv6 addresses and configuring
    ProxyARP support
  * dropped support for the madwifi driver interface
  * add support for Suite B (128-bit and 192-bit level) key management and
    cipher suites
  * fixed a regression with driver=wired
  * extend EAPOL-Key msg 1/4 retry workaround for changing SNonce
  * add BSS_TM_REQ ctrl_iface command to send BSS Transition Management
    Request frames and BSS-TM-RESP event to indicate response to such
    frame
  * add support for EAP Re-Authentication Protocol (ERP)
  * fixed AP IE in EAPOL-Key 3/4 when both WPA and FT was enabled
  * fixed a regression in HT 20/40 coex Action frame parsing
  * set stdout to be line-buffered
  * add support for vendor specific VHT extension to enable 256 QAM rates
    (VHT-MCS 8 and 9) on 2.4 GHz band
  * RADIUS DAS:
  - extend Disconnect-Request processing to allow matching of multiple
    sessions
  - support Acct-Multi-Session-Id as an identifier
  - allow PMKSA cache entry to be removed without association
  * expire hostapd STA entry if kernel does not have a matching entry
  * allow chanlist to be used to specify a subset of channels for ACS
  * improve ACS behavior on 2.4 GHz band and allow channel bias to be
    configured with acs_chan_bias parameter
  * do not reply to a Probe Request frame that includes DSS Parameter Set
    element in which the channel does not match the current operating
    channel
  * add UPDATE_BEACON ctrl_iface command; this can be used to force Beacon
    frame contents to be updated and to start beaconing on an interface
    that used start_disabled=1
  * fixed some RADIUS server failover cases</changelog>
  <changelog author="michael@stroeder.com" date="1445169600">- update to upstream release 2.5
- removed 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  (CVE-2015-1863) because it's fixed in upstream release 2.5
- rebased hostapd-2.4-defconfig.patch -&gt; hostapd-2.5-defconfig.patch
  ChangeLog for hostapd since 2.4:
  2015-09-27 - v2.5
  * fixed WPS UPnP vulnerability with HTTP chunked transfer encoding
  [http://w1.fi/security/2015-2/] (CVE-2015-4141 bsc#930077)
  * fixed WMM Action frame parser
  [http://w1.fi/security/2015-3/] (CVE-2015-4142 bsc#930078)
  * fixed EAP-pwd server missing payload length validation
  [http://w1.fi/security/2015-4/]
  (CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, bsc#930079)
  * fixed validation of WPS and P2P NFC NDEF record payload length
  [http://w1.fi/security/2015-5/]
  * nl80211:
  - fixed vendor command handling to check OUI properly
  * fixed hlr_auc_gw build with OpenSSL
  * hlr_auc_gw: allow Milenage RES length to be reduced
  * disable HT for a station that does not support WMM/QoS
  * added support for hashed password (NtHash) in EAP-pwd server
  * fixed and extended dynamic VLAN cases
  * added EAP-EKE server support for deriving Session-Id
  * set Acct-Session-Id to a random value to make it more likely to be
  unique even if the device does not have a proper clock
  * added more 2.4 GHz channels for 20/40 MHz HT co-ex scan
  * modified SAE routines to be more robust and PWE generation to be
  stronger against timing attacks
  * added support for Brainpool Elliptic Curves with SAE
  * increases maximum value accepted for cwmin/cwmax
  * added support for CCMP-256 and GCMP-256 as group ciphers with FT
  * added Fast Session Transfer (FST) module
  * removed optional fields from RSNE when using FT with PMF
  (workaround for interoperability issues with iOS 8.4)
  * added EAP server support for TLS session resumption
  * fixed key derivation for Suite B 192-bit AKM (this breaks
  compatibility with the earlier version)
  * added mechanism to track unconnected stations and do minimal band
  steering
  * number of small fixes</changelog>
  <changelog author="chris@intrbiz.com" date="1475409600">- update to upstream release 2.6
  * fixed EAP-pwd last fragment validation
    [http://w1.fi/security/2015-7/] (CVE-2015-5314)
  * fixed WPS configuration update vulnerability with malformed passphrase
    [http://w1.fi/security/2016-1/] (CVE-2016-4476)
  * extended channel switch support for VHT bandwidth changes
  * added support for configuring new ANQP-elements with
    anqp_elem=&lt;InfoID&gt;:&lt;hexdump of payload&gt;
  * fixed Suite B 192-bit AKM to use proper PMK length
    (note: this makes old releases incompatible with the fixed behavior)
  * added no_probe_resp_if_max_sta=1 parameter to disable Probe Response
    frame sending for not-associated STAs if max_num_sta limit has been
    reached
  * added option (-S as command line argument) to request all interfaces
    to be started at the same time
  * modified rts_threshold and fragm_threshold configuration parameters
    to allow -1 to be used to disable RTS/fragmentation
  * EAP-pwd: added support for Brainpool Elliptic Curves
    (with OpenSSL 1.0.2 and newer)
  * fixed EAPOL reauthentication after FT protocol run
  * fixed FTIE generation for 4-way handshake after FT protocol run
  * fixed and improved various FST operations
  * TLS server
  - support SHA384 and SHA512 hashes
  - support TLS v1.2 signature algorithm with SHA384 and SHA512
  - support PKCS #5 v2.0 PBES2
  - support PKCS #5 with PKCS #12 style key decryption
  - minimal support for PKCS #12
  - support OCSP stapling (including ocsp_multi)
  * added support for OpenSSL 1.1 API changes
  - drop support for OpenSSL 0.9.8
  - drop support for OpenSSL 1.0.0
  * EAP-PEAP: support fast-connect crypto binding
  * RADIUS
  - fix Called-Station-Id to not escape SSID
  - add Event-Timestamp to all Accounting-Request packets
  - add Acct-Session-Id to Accounting-On/Off
  - add Acct-Multi-Session-Id  ton Access-Request packets
  - add Service-Type (= Frames)
  - allow server to provide PSK instead of passphrase for WPA-PSK
    Tunnel_password case
  - update full message for interim accounting updates
  - add Acct-Delay-Time into Accounting messages
  - add require_message_authenticator configuration option to require
    CoA/Disconnect-Request packets to be authenticated
  * started to postpone WNM-Notification frame sending by 100 ms so that
    the STA has some more time to configure the key before this frame is
    received after the 4-way handshake
  * VHT: added interoperability workaround for 80+80 and 160 MHz channels
  * extended VLAN support (per-STA vif, etc.)
  * fixed PMKID derivation with SAE
  * nl80211
  - added support for full station state operations
  - fix IEEE 802.1X/WEP EAP reauthentication and rekeying to use
    unencrypted EAPOL frames
  * added initial MBO support; number of extensions to WNM BSS Transition
    Management
  * added initial functionality for location related operations
  * added assocresp_elements parameter to allow vendor specific elements
    to be added into (Re)Association Response frames
  * improved Public Action frame addressing
  - use Address 3 = wildcard BSSID in GAS response if a query from an
    unassociated STA used that address
  - fix TX status processing for Address 3 = wildcard BSSID
  - add gas_address3 configuration parameter to control Address 3
    behavior
  * added command line parameter -i to override interface parameter in
    hostapd.conf
  * added command completion support to hostapd_cli
  * added passive client taxonomy determination (CONFIG_TAXONOMY=y
    compile option and "SIGNATURE &lt;addr&gt;" control interface command)
  * number of small fixes
- renamed hostapd-2.5-defconfig.patch to hostapd-2.6-defconfig.patch</changelog>
  <changelog author="chris@intrbiz.com" date="1508328000">- Fix KRACK attacks (bsc#1063479, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088):
  * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch
  * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch
  * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch
  * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch
  * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch
  * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch
  * rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch
  * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1539950400">- Added rebased-v2.6-0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch
  Ignore unauthenticated encrypted EAPOL-Key data (CVE-2018-14526, bsc#1104205).</changelog>
</package>
<package pkgid="29c1b944d0cae60db633e7760e5044962d61bdac28c7fd9934a46e861a6816d1" name="hwdata" arch="noarch">
  <version epoch="0" ver="0.314" rel="lp150.2.3.1"/>
  <changelog author="mc@suse.de" date="1390046400">- initial release</changelog>
  <changelog author="mc@suse.com" date="1390046401">- update to version 0.258
- updated pci and oui ids
- remove blacklist.conf</changelog>
  <changelog author="mc@suse.com" date="1405166400">- update to version 0.267
- updated pci, usb and vendor ids</changelog>
  <changelog author="mc@suse.de" date="1410609600">- version 0.269
- updated pci, usb and vendor ids</changelog>
  <changelog author="mc@suse.de" date="1443441600">- version 0.282
- updated pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Update to version 0.299
- Update project and download urls
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update to version 0.300 (boo#1038809)</changelog>
  <changelog author="mpluskal@suse.com" date="1497268800">- Update to version 0.301</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Update to version 0.302</changelog>
  <changelog author="mpluskal@suse.com" date="1501675200">- Update to version 0.303</changelog>
  <changelog author="mpluskal@suse.com" date="1504872000">- Update to version 0.304</changelog>
  <changelog author="mpluskal@suse.com" date="1506945600">- Update to version 0.305</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Update to version 0.306:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1512561600">- Update to version 0.307:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 0.308:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1520510400">- Update to version 0.310:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1522756800">- Update to version 0.311:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1525867200">- Update to version 0.312:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 0.313:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1535630400">- Update to version 0.314:
  * Updated pci, usb and vendor ids.</changelog>
</package>
<package pkgid="2440e4a683cf08bf5862bdc012a76432c91f9fd6ed7f834ca3a2b65affda07e9" name="hwdata" arch="src">
  <version epoch="0" ver="0.314" rel="lp150.2.3.1"/>
  <changelog author="mc@suse.de" date="1390046400">- initial release</changelog>
  <changelog author="mc@suse.com" date="1390046401">- update to version 0.258
- updated pci and oui ids
- remove blacklist.conf</changelog>
  <changelog author="mc@suse.com" date="1405166400">- update to version 0.267
- updated pci, usb and vendor ids</changelog>
  <changelog author="mc@suse.de" date="1410609600">- version 0.269
- updated pci, usb and vendor ids</changelog>
  <changelog author="mc@suse.de" date="1443441600">- version 0.282
- updated pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Update to version 0.299
- Update project and download urls
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update to version 0.300 (boo#1038809)</changelog>
  <changelog author="mpluskal@suse.com" date="1497268800">- Update to version 0.301</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Update to version 0.302</changelog>
  <changelog author="mpluskal@suse.com" date="1501675200">- Update to version 0.303</changelog>
  <changelog author="mpluskal@suse.com" date="1504872000">- Update to version 0.304</changelog>
  <changelog author="mpluskal@suse.com" date="1506945600">- Update to version 0.305</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Update to version 0.306:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1512561600">- Update to version 0.307:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 0.308:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1520510400">- Update to version 0.310:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1522756800">- Update to version 0.311:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1525867200">- Update to version 0.312:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 0.313:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1535630400">- Update to version 0.314:
  * Updated pci, usb and vendor ids.</changelog>
</package>
<package pkgid="d8522a0284cc0401a6b26a91f3e64b1c8f4f12ec640f2f334f63ef4167ae9d59" name="hwinfo" arch="src">
  <version epoch="0" ver="21.57" rel="lp150.2.3.1"/>
  <changelog author="snwint@suse.com" date="1491393600">- powerpc: support ibmvnic network interfaces (bsc#1031676)
- 21.39</changelog>
  <changelog author="snwint@suse.de" date="1491566400">- sanitize changelog</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493208000">- enhance documentation
- merge gh#openSUSE/hwinfo#45
- small doc changes
- 21.40</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493899200">- remove references to qlogic-firmware (bsc#1036884)
- 21.41</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493899201">- merge gh#openSUSE/hwinfo#46
- include updated hd.h in package archive
- update pci and usb ids (fate#321448)
- 21.42</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244800">- merge gh#openSUSE/hwinfo#47
- block i/o access when reading mode list from BIOS (bsc#1033832)
- 21.43</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244801">- merge gh#openSUSE/hwinfo#48
- fix conditional expression in hddb.c (gh#openSUSE/hwinfo#20)
- 21.44</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494417600">- merge gh#openSUSE/hwinfo#49
- avoid access to video memory (bsc#1033832)
- 21.45</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/hwinfo#50
- map also alternate video bios entry points (bsc#1033832)
- try harder to get the video mode list
- add links to technical specifications
- 21.46</changelog>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515758400">- merge gh#openSUSE/hwinfo#55
- Please make CDBISDN_DATE ignore timezone.
- 21.51</changelog>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/hwinfo#57
- add another sanity check on scsi serial id (bsc#1078511)
- 21.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524225600">- merge gh#openSUSE/hwinfo#60
- detect usb controller in ARM platform device (bsc#1072450)
- add xhci interface constant
- 21.53</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528286400">- merge gh#openSUSE/hwinfo#63
- detect ARM HISILICON SAS controller (bsc#1072450)
- 21.54</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528459200">- merge gh#openSUSE/hwinfo#64
- try a more agressive way to catch all usb platform controllers
  (bsc#1072450)
- 21.55</changelog>
  <changelog author="schwab@suse.de" date="1530187200">- merge gh#openSUSE/hwinfo#66
- Add support for RISC-V
- 21.56</changelog>
  <changelog author="snwint@suse.de" date="1537185600">- merge gh#openSUSE/hwinfo#69
- check for vmware only when running in a vm (bsc#1105003)
- 21.57</changelog>
</package>
<package pkgid="1f876a591b7ca30c87cffdaa72c2fd54b1a1ff886de284b092726a6b7aef1a39" name="hwinfo" arch="x86_64">
  <version epoch="0" ver="21.57" rel="lp150.2.3.1"/>
  <changelog author="snwint@suse.com" date="1491393600">- powerpc: support ibmvnic network interfaces (bsc#1031676)
- 21.39</changelog>
  <changelog author="snwint@suse.de" date="1491566400">- sanitize changelog</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493208000">- enhance documentation
- merge gh#openSUSE/hwinfo#45
- small doc changes
- 21.40</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493899200">- remove references to qlogic-firmware (bsc#1036884)
- 21.41</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493899201">- merge gh#openSUSE/hwinfo#46
- include updated hd.h in package archive
- update pci and usb ids (fate#321448)
- 21.42</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244800">- merge gh#openSUSE/hwinfo#47
- block i/o access when reading mode list from BIOS (bsc#1033832)
- 21.43</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244801">- merge gh#openSUSE/hwinfo#48
- fix conditional expression in hddb.c (gh#openSUSE/hwinfo#20)
- 21.44</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494417600">- merge gh#openSUSE/hwinfo#49
- avoid access to video memory (bsc#1033832)
- 21.45</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/hwinfo#50
- map also alternate video bios entry points (bsc#1033832)
- try harder to get the video mode list
- add links to technical specifications
- 21.46</changelog>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515758400">- merge gh#openSUSE/hwinfo#55
- Please make CDBISDN_DATE ignore timezone.
- 21.51</changelog>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/hwinfo#57
- add another sanity check on scsi serial id (bsc#1078511)
- 21.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524225600">- merge gh#openSUSE/hwinfo#60
- detect usb controller in ARM platform device (bsc#1072450)
- add xhci interface constant
- 21.53</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528286400">- merge gh#openSUSE/hwinfo#63
- detect ARM HISILICON SAS controller (bsc#1072450)
- 21.54</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528459200">- merge gh#openSUSE/hwinfo#64
- try a more agressive way to catch all usb platform controllers
  (bsc#1072450)
- 21.55</changelog>
  <changelog author="schwab@suse.de" date="1530187200">- merge gh#openSUSE/hwinfo#66
- Add support for RISC-V
- 21.56</changelog>
  <changelog author="snwint@suse.de" date="1537185600">- merge gh#openSUSE/hwinfo#69
- check for vmware only when running in a vm (bsc#1105003)
- 21.57</changelog>
</package>
<package pkgid="ca639894575886dc7c6f66d004541b0f0ffda9071786b5c69c0652c776f2a06d" name="hwinfo-devel" arch="x86_64">
  <version epoch="0" ver="21.57" rel="lp150.2.3.1"/>
  <changelog author="snwint@suse.com" date="1491393600">- powerpc: support ibmvnic network interfaces (bsc#1031676)
- 21.39</changelog>
  <changelog author="snwint@suse.de" date="1491566400">- sanitize changelog</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493208000">- enhance documentation
- merge gh#openSUSE/hwinfo#45
- small doc changes
- 21.40</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493899200">- remove references to qlogic-firmware (bsc#1036884)
- 21.41</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493899201">- merge gh#openSUSE/hwinfo#46
- include updated hd.h in package archive
- update pci and usb ids (fate#321448)
- 21.42</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244800">- merge gh#openSUSE/hwinfo#47
- block i/o access when reading mode list from BIOS (bsc#1033832)
- 21.43</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244801">- merge gh#openSUSE/hwinfo#48
- fix conditional expression in hddb.c (gh#openSUSE/hwinfo#20)
- 21.44</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494417600">- merge gh#openSUSE/hwinfo#49
- avoid access to video memory (bsc#1033832)
- 21.45</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/hwinfo#50
- map also alternate video bios entry points (bsc#1033832)
- try harder to get the video mode list
- add links to technical specifications
- 21.46</changelog>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515758400">- merge gh#openSUSE/hwinfo#55
- Please make CDBISDN_DATE ignore timezone.
- 21.51</changelog>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/hwinfo#57
- add another sanity check on scsi serial id (bsc#1078511)
- 21.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524225600">- merge gh#openSUSE/hwinfo#60
- detect usb controller in ARM platform device (bsc#1072450)
- add xhci interface constant
- 21.53</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528286400">- merge gh#openSUSE/hwinfo#63
- detect ARM HISILICON SAS controller (bsc#1072450)
- 21.54</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528459200">- merge gh#openSUSE/hwinfo#64
- try a more agressive way to catch all usb platform controllers
  (bsc#1072450)
- 21.55</changelog>
  <changelog author="schwab@suse.de" date="1530187200">- merge gh#openSUSE/hwinfo#66
- Add support for RISC-V
- 21.56</changelog>
  <changelog author="snwint@suse.de" date="1537185600">- merge gh#openSUSE/hwinfo#69
- check for vmware only when running in a vm (bsc#1105003)
- 21.57</changelog>
</package>
<package pkgid="dc0d237a76c5c47a8e96cdc80ce4db263357626e84be3c020a0c87f359f3b26a" name="hylafax+" arch="src">
  <version epoch="0" ver="5.5.9" rel="lp150.5.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1424260800">- dependency on tiff added
- build dependency on ghostscript</changelog>
  <changelog author="axel.braun@gmx.de" date="1424779200">- fix for bnc#856906 also for client package</changelog>
  <changelog author="pth@suse.de" date="1426161600">- Move libfaxutil into its own sub package (bnc#922017).</changelog>
  <changelog author="hpj@urpla.net" date="1426161601">- fix standalone hylafax+-client fallout</changelog>
  <changelog author="axel.braun@gmx.de" date="1430740800">- bnc#922402 update overwrites send-only settings to systemd config</changelog>
  <changelog author="axel.braun@gmx.de" date="1436875200">- release 5.5.6
  * add typerules suggestion for PNG conversion (19 Mar 2015)
  * support more than 256 pages in Class 1 ECM (26 Feb 2015)
  * cope with application/pdf being encoded with quoted-printable
  in faxmail (13 Feb 2015)
  * fix npages and totpages recording in sendq when proxied (31 Jan 2015)
  * fix EOF reading fault on badly-formatted MIME in faxmail (12 Jan 2015)
  * fix hi-res tagline imaging on 64-bit systems (10 Dec 2014)
  * add support for seqf.increment files to indicate seqf
  incrementation (14 Nov 2014)
  * add support to faxmail to decode long-wrapped base64 (11, 14-15 Oct 2014)
  * fix proxy setting of null taglines (16 Sep 2014)
  * fix ModemWaitForConnect configuration setting (16 Sep 2014)
  * add debug messages for the attempt to locate a suitable modem
  for jobs (12 Aug 2014)
  * fix missed data type for libtiff v4 (31 Jul, 11 Aug 2014)
  * fix faxsend segfault caused by an empty TagLine field introduced in
  alignment features added in 5.5.5 (25 Jul 2014)
  * pass job priority to the proxy server (21 Jul 2014)
  * add JobHostID feature (16, 29-31 Jul 2014)
  * fix instances where a NULL return of crypt() is ignored (13 Jul 2014)
  * improve support for utmpx on BSD (10 Jul 2014)
  * apply some downstream patches from FreeBSD ports (10 Jul 2014)
  * use ps2write in faxmail pdf converter if pswrite is missing (6 Jul 2014)
  * modify FIFO usage and remove CONFIG_FIFOBUG and CONFIG_OPENFIFO (5 Jul 2014)</changelog>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
</package>
<package pkgid="254efe976061c9cbb794bf5742d5b6aad90e1765ebd97259944ab27c092afc0c" name="hylafax+" arch="x86_64">
  <version epoch="0" ver="5.5.9" rel="lp150.5.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1424260800">- dependency on tiff added
- build dependency on ghostscript</changelog>
  <changelog author="axel.braun@gmx.de" date="1424779200">- fix for bnc#856906 also for client package</changelog>
  <changelog author="pth@suse.de" date="1426161600">- Move libfaxutil into its own sub package (bnc#922017).</changelog>
  <changelog author="hpj@urpla.net" date="1426161601">- fix standalone hylafax+-client fallout</changelog>
  <changelog author="axel.braun@gmx.de" date="1430740800">- bnc#922402 update overwrites send-only settings to systemd config</changelog>
  <changelog author="axel.braun@gmx.de" date="1436875200">- release 5.5.6
  * add typerules suggestion for PNG conversion (19 Mar 2015)
  * support more than 256 pages in Class 1 ECM (26 Feb 2015)
  * cope with application/pdf being encoded with quoted-printable
  in faxmail (13 Feb 2015)
  * fix npages and totpages recording in sendq when proxied (31 Jan 2015)
  * fix EOF reading fault on badly-formatted MIME in faxmail (12 Jan 2015)
  * fix hi-res tagline imaging on 64-bit systems (10 Dec 2014)
  * add support for seqf.increment files to indicate seqf
  incrementation (14 Nov 2014)
  * add support to faxmail to decode long-wrapped base64 (11, 14-15 Oct 2014)
  * fix proxy setting of null taglines (16 Sep 2014)
  * fix ModemWaitForConnect configuration setting (16 Sep 2014)
  * add debug messages for the attempt to locate a suitable modem
  for jobs (12 Aug 2014)
  * fix missed data type for libtiff v4 (31 Jul, 11 Aug 2014)
  * fix faxsend segfault caused by an empty TagLine field introduced in
  alignment features added in 5.5.5 (25 Jul 2014)
  * pass job priority to the proxy server (21 Jul 2014)
  * add JobHostID feature (16, 29-31 Jul 2014)
  * fix instances where a NULL return of crypt() is ignored (13 Jul 2014)
  * improve support for utmpx on BSD (10 Jul 2014)
  * apply some downstream patches from FreeBSD ports (10 Jul 2014)
  * use ps2write in faxmail pdf converter if pswrite is missing (6 Jul 2014)
  * modify FIFO usage and remove CONFIG_FIFOBUG and CONFIG_OPENFIFO (5 Jul 2014)</changelog>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
</package>
<package pkgid="bd26dd6febc4ddc46f836bad69f07c828a676635585272dbdff65c12a96c301a" name="hylafax+" arch="src">
  <version epoch="0" ver="5.6.1" rel="lp150.5.6.1"/>
  <changelog author="axel.braun@gmx.de" date="1430740800">- bnc#922402 update overwrites send-only settings to systemd config</changelog>
  <changelog author="axel.braun@gmx.de" date="1436875200">- release 5.5.6
  * add typerules suggestion for PNG conversion (19 Mar 2015)
  * support more than 256 pages in Class 1 ECM (26 Feb 2015)
  * cope with application/pdf being encoded with quoted-printable
  in faxmail (13 Feb 2015)
  * fix npages and totpages recording in sendq when proxied (31 Jan 2015)
  * fix EOF reading fault on badly-formatted MIME in faxmail (12 Jan 2015)
  * fix hi-res tagline imaging on 64-bit systems (10 Dec 2014)
  * add support for seqf.increment files to indicate seqf
  incrementation (14 Nov 2014)
  * add support to faxmail to decode long-wrapped base64 (11, 14-15 Oct 2014)
  * fix proxy setting of null taglines (16 Sep 2014)
  * fix ModemWaitForConnect configuration setting (16 Sep 2014)
  * add debug messages for the attempt to locate a suitable modem
  for jobs (12 Aug 2014)
  * fix missed data type for libtiff v4 (31 Jul, 11 Aug 2014)
  * fix faxsend segfault caused by an empty TagLine field introduced in
  alignment features added in 5.5.5 (25 Jul 2014)
  * pass job priority to the proxy server (21 Jul 2014)
  * add JobHostID feature (16, 29-31 Jul 2014)
  * fix instances where a NULL return of crypt() is ignored (13 Jul 2014)
  * improve support for utmpx on BSD (10 Jul 2014)
  * apply some downstream patches from FreeBSD ports (10 Jul 2014)
  * use ps2write in faxmail pdf converter if pswrite is missing (6 Jul 2014)
  * modify FIFO usage and remove CONFIG_FIFOBUG and CONFIG_OPENFIFO (5 Jul 2014)</changelog>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
  <changelog author="axel.braun@gmx.de" date="1534334400">- version 5.6.0
  * notification.diff removed (part of 5.6.0 now)
  * some adjustments to assist AIX 6.1 builds (29 Jun 2018)
  * initial support for systemd in faxsetup (29 Jun 2018)
  * fix RFC2047 encoding by notify (27 Jun, 3 Jul 2018)
  * add jobcontrol PageSize feature (27 Jun 2018)
  * fix various compiler warnings (27 Jun 2018)
  * fix build on musl-based distribution (27 Jun 2018)
  * don't wait forever after +FRH:3 (18 Jun 2018)
  * add -A and -B options to tagtest (22 Feb 2018)
  * make tagtest use the TSI and CallerID data, if available (21 Feb 2018)
  * make tagtest use the date from the TIFF tags, if available,
  instead of "now" (20 Feb 2018)
  * pass Content-Type name and Content-Disposition filename
  information to faxmail MIMEHandlers (15 Jan 2018)
  * fix faxmail transition between a message and external types (15 Jan 2018)
  * fix warning for major and minor macros move to sysmacros.h (19 Dec 2017)
  * avoid pagehandling from introducing some unnecessary EOM signals (15 Dec 2017)
  * improve proxy connection error handling and logging (5 Dec 2017)
  * fix for reproducible builds (11 Sep 2017)
  * fix quote escaping in client apps (5 Sep 2017)
  * treat callingnumber  as null (25, 31 Aug 2017)
  * add initial ModemGroup limits feature (24 Aug 2017)
  * add CLEANFAXDATA and BADFAXLINES TIFF tags for ECM receptions (10 Aug 2017)
  * pass the user's uid onto the session log file for sent faxes (25 Jul 2017)
  * improve job waits to minimize triggers (30 May 2017)
  * increase FIFO read size and add logging information (25 May 2017)
  * add ProxyTaglineFormat and ProxyTSI features (13 Mar 2017)</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Trim "enterprise" nonsense marketing.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537185600">- use systemd template unit file for hylafax-faxgetty services
- fix services</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537272000">- version 5.6.1:
  * CVE-2018-17141: fixes multiple JPEG vulnerabilities affecting
    fax page reception in JPEG format. Specially crafted input may
    have allowed remote execution of arbitrary code (boo#1109084)</changelog>
</package>
<package pkgid="9ddf8e51be7e03d40f98314ceeed6c6a021f97bc441befe0ea44b53538144275" name="hylafax+" arch="x86_64">
  <version epoch="0" ver="5.6.1" rel="lp150.5.6.1"/>
  <changelog author="axel.braun@gmx.de" date="1430740800">- bnc#922402 update overwrites send-only settings to systemd config</changelog>
  <changelog author="axel.braun@gmx.de" date="1436875200">- release 5.5.6
  * add typerules suggestion for PNG conversion (19 Mar 2015)
  * support more than 256 pages in Class 1 ECM (26 Feb 2015)
  * cope with application/pdf being encoded with quoted-printable
  in faxmail (13 Feb 2015)
  * fix npages and totpages recording in sendq when proxied (31 Jan 2015)
  * fix EOF reading fault on badly-formatted MIME in faxmail (12 Jan 2015)
  * fix hi-res tagline imaging on 64-bit systems (10 Dec 2014)
  * add support for seqf.increment files to indicate seqf
  incrementation (14 Nov 2014)
  * add support to faxmail to decode long-wrapped base64 (11, 14-15 Oct 2014)
  * fix proxy setting of null taglines (16 Sep 2014)
  * fix ModemWaitForConnect configuration setting (16 Sep 2014)
  * add debug messages for the attempt to locate a suitable modem
  for jobs (12 Aug 2014)
  * fix missed data type for libtiff v4 (31 Jul, 11 Aug 2014)
  * fix faxsend segfault caused by an empty TagLine field introduced in
  alignment features added in 5.5.5 (25 Jul 2014)
  * pass job priority to the proxy server (21 Jul 2014)
  * add JobHostID feature (16, 29-31 Jul 2014)
  * fix instances where a NULL return of crypt() is ignored (13 Jul 2014)
  * improve support for utmpx on BSD (10 Jul 2014)
  * apply some downstream patches from FreeBSD ports (10 Jul 2014)
  * use ps2write in faxmail pdf converter if pswrite is missing (6 Jul 2014)
  * modify FIFO usage and remove CONFIG_FIFOBUG and CONFIG_OPENFIFO (5 Jul 2014)</changelog>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
  <changelog author="axel.braun@gmx.de" date="1534334400">- version 5.6.0
  * notification.diff removed (part of 5.6.0 now)
  * some adjustments to assist AIX 6.1 builds (29 Jun 2018)
  * initial support for systemd in faxsetup (29 Jun 2018)
  * fix RFC2047 encoding by notify (27 Jun, 3 Jul 2018)
  * add jobcontrol PageSize feature (27 Jun 2018)
  * fix various compiler warnings (27 Jun 2018)
  * fix build on musl-based distribution (27 Jun 2018)
  * don't wait forever after +FRH:3 (18 Jun 2018)
  * add -A and -B options to tagtest (22 Feb 2018)
  * make tagtest use the TSI and CallerID data, if available (21 Feb 2018)
  * make tagtest use the date from the TIFF tags, if available,
  instead of "now" (20 Feb 2018)
  * pass Content-Type name and Content-Disposition filename
  information to faxmail MIMEHandlers (15 Jan 2018)
  * fix faxmail transition between a message and external types (15 Jan 2018)
  * fix warning for major and minor macros move to sysmacros.h (19 Dec 2017)
  * avoid pagehandling from introducing some unnecessary EOM signals (15 Dec 2017)
  * improve proxy connection error handling and logging (5 Dec 2017)
  * fix for reproducible builds (11 Sep 2017)
  * fix quote escaping in client apps (5 Sep 2017)
  * treat callingnumber  as null (25, 31 Aug 2017)
  * add initial ModemGroup limits feature (24 Aug 2017)
  * add CLEANFAXDATA and BADFAXLINES TIFF tags for ECM receptions (10 Aug 2017)
  * pass the user's uid onto the session log file for sent faxes (25 Jul 2017)
  * improve job waits to minimize triggers (30 May 2017)
  * increase FIFO read size and add logging information (25 May 2017)
  * add ProxyTaglineFormat and ProxyTSI features (13 Mar 2017)</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Trim "enterprise" nonsense marketing.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537185600">- use systemd template unit file for hylafax-faxgetty services
- fix services</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537272000">- version 5.6.1:
  * CVE-2018-17141: fixes multiple JPEG vulnerabilities affecting
    fax page reception in JPEG format. Specially crafted input may
    have allowed remote execution of arbitrary code (boo#1109084)</changelog>
</package>
<package pkgid="5e72f686d7bd9a63dcd40cbbe86827bacb43783af4b236801093bfa76e03f671" name="hylafax+" arch="src">
  <version epoch="0" ver="5.6.1" rel="lp150.5.9.1"/>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
  <changelog author="axel.braun@gmx.de" date="1534334400">- version 5.6.0
  * notification.diff removed (part of 5.6.0 now)
  * some adjustments to assist AIX 6.1 builds (29 Jun 2018)
  * initial support for systemd in faxsetup (29 Jun 2018)
  * fix RFC2047 encoding by notify (27 Jun, 3 Jul 2018)
  * add jobcontrol PageSize feature (27 Jun 2018)
  * fix various compiler warnings (27 Jun 2018)
  * fix build on musl-based distribution (27 Jun 2018)
  * don't wait forever after +FRH:3 (18 Jun 2018)
  * add -A and -B options to tagtest (22 Feb 2018)
  * make tagtest use the TSI and CallerID data, if available (21 Feb 2018)
  * make tagtest use the date from the TIFF tags, if available,
  instead of "now" (20 Feb 2018)
  * pass Content-Type name and Content-Disposition filename
  information to faxmail MIMEHandlers (15 Jan 2018)
  * fix faxmail transition between a message and external types (15 Jan 2018)
  * fix warning for major and minor macros move to sysmacros.h (19 Dec 2017)
  * avoid pagehandling from introducing some unnecessary EOM signals (15 Dec 2017)
  * improve proxy connection error handling and logging (5 Dec 2017)
  * fix for reproducible builds (11 Sep 2017)
  * fix quote escaping in client apps (5 Sep 2017)
  * treat callingnumber  as null (25, 31 Aug 2017)
  * add initial ModemGroup limits feature (24 Aug 2017)
  * add CLEANFAXDATA and BADFAXLINES TIFF tags for ECM receptions (10 Aug 2017)
  * pass the user's uid onto the session log file for sent faxes (25 Jul 2017)
  * improve job waits to minimize triggers (30 May 2017)
  * increase FIFO read size and add logging information (25 May 2017)
  * add ProxyTaglineFormat and ProxyTSI features (13 Mar 2017)</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Trim "enterprise" nonsense marketing.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537185600">- use systemd template unit file for hylafax-faxgetty services
- fix services</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537272000">- version 5.6.1:
  * CVE-2018-17141: fixes multiple JPEG vulnerabilities affecting
    fax page reception in JPEG format. Specially crafted input may
    have allowed remote execution of arbitrary code (boo#1109084)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1542024000">- boo#1115532 JBIG-in-tiff conversion added
  (Build Requirement tiff, libtiff)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Do not use tabs in spec</changelog>
</package>
<package pkgid="bb6f17f2dbfeed9f68828947fc3320b0cb66a580fc916974414d6f35ba5d685e" name="hylafax+" arch="x86_64">
  <version epoch="0" ver="5.6.1" rel="lp150.5.9.1"/>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
  <changelog author="axel.braun@gmx.de" date="1534334400">- version 5.6.0
  * notification.diff removed (part of 5.6.0 now)
  * some adjustments to assist AIX 6.1 builds (29 Jun 2018)
  * initial support for systemd in faxsetup (29 Jun 2018)
  * fix RFC2047 encoding by notify (27 Jun, 3 Jul 2018)
  * add jobcontrol PageSize feature (27 Jun 2018)
  * fix various compiler warnings (27 Jun 2018)
  * fix build on musl-based distribution (27 Jun 2018)
  * don't wait forever after +FRH:3 (18 Jun 2018)
  * add -A and -B options to tagtest (22 Feb 2018)
  * make tagtest use the TSI and CallerID data, if available (21 Feb 2018)
  * make tagtest use the date from the TIFF tags, if available,
  instead of "now" (20 Feb 2018)
  * pass Content-Type name and Content-Disposition filename
  information to faxmail MIMEHandlers (15 Jan 2018)
  * fix faxmail transition between a message and external types (15 Jan 2018)
  * fix warning for major and minor macros move to sysmacros.h (19 Dec 2017)
  * avoid pagehandling from introducing some unnecessary EOM signals (15 Dec 2017)
  * improve proxy connection error handling and logging (5 Dec 2017)
  * fix for reproducible builds (11 Sep 2017)
  * fix quote escaping in client apps (5 Sep 2017)
  * treat callingnumber  as null (25, 31 Aug 2017)
  * add initial ModemGroup limits feature (24 Aug 2017)
  * add CLEANFAXDATA and BADFAXLINES TIFF tags for ECM receptions (10 Aug 2017)
  * pass the user's uid onto the session log file for sent faxes (25 Jul 2017)
  * improve job waits to minimize triggers (30 May 2017)
  * increase FIFO read size and add logging information (25 May 2017)
  * add ProxyTaglineFormat and ProxyTSI features (13 Mar 2017)</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Trim "enterprise" nonsense marketing.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537185600">- use systemd template unit file for hylafax-faxgetty services
- fix services</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537272000">- version 5.6.1:
  * CVE-2018-17141: fixes multiple JPEG vulnerabilities affecting
    fax page reception in JPEG format. Specially crafted input may
    have allowed remote execution of arbitrary code (boo#1109084)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1542024000">- boo#1115532 JBIG-in-tiff conversion added
  (Build Requirement tiff, libtiff)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Do not use tabs in spec</changelog>
</package>
<package pkgid="08e9b59ad2db3af0f8bb4ba60f0c75afb91d1ff856b66d0f6c4bac3e9774f638" name="hylafax+-client" arch="x86_64">
  <version epoch="0" ver="5.5.9" rel="lp150.5.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1424260800">- dependency on tiff added
- build dependency on ghostscript</changelog>
  <changelog author="axel.braun@gmx.de" date="1424779200">- fix for bnc#856906 also for client package</changelog>
  <changelog author="pth@suse.de" date="1426161600">- Move libfaxutil into its own sub package (bnc#922017).</changelog>
  <changelog author="hpj@urpla.net" date="1426161601">- fix standalone hylafax+-client fallout</changelog>
  <changelog author="axel.braun@gmx.de" date="1430740800">- bnc#922402 update overwrites send-only settings to systemd config</changelog>
  <changelog author="axel.braun@gmx.de" date="1436875200">- release 5.5.6
  * add typerules suggestion for PNG conversion (19 Mar 2015)
  * support more than 256 pages in Class 1 ECM (26 Feb 2015)
  * cope with application/pdf being encoded with quoted-printable
  in faxmail (13 Feb 2015)
  * fix npages and totpages recording in sendq when proxied (31 Jan 2015)
  * fix EOF reading fault on badly-formatted MIME in faxmail (12 Jan 2015)
  * fix hi-res tagline imaging on 64-bit systems (10 Dec 2014)
  * add support for seqf.increment files to indicate seqf
  incrementation (14 Nov 2014)
  * add support to faxmail to decode long-wrapped base64 (11, 14-15 Oct 2014)
  * fix proxy setting of null taglines (16 Sep 2014)
  * fix ModemWaitForConnect configuration setting (16 Sep 2014)
  * add debug messages for the attempt to locate a suitable modem
  for jobs (12 Aug 2014)
  * fix missed data type for libtiff v4 (31 Jul, 11 Aug 2014)
  * fix faxsend segfault caused by an empty TagLine field introduced in
  alignment features added in 5.5.5 (25 Jul 2014)
  * pass job priority to the proxy server (21 Jul 2014)
  * add JobHostID feature (16, 29-31 Jul 2014)
  * fix instances where a NULL return of crypt() is ignored (13 Jul 2014)
  * improve support for utmpx on BSD (10 Jul 2014)
  * apply some downstream patches from FreeBSD ports (10 Jul 2014)
  * use ps2write in faxmail pdf converter if pswrite is missing (6 Jul 2014)
  * modify FIFO usage and remove CONFIG_FIFOBUG and CONFIG_OPENFIFO (5 Jul 2014)</changelog>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
</package>
<package pkgid="20f16bef7e58e47b2f3baf19a0c42bd49d63ab8a63bb98b5df3c55613b323ce5" name="hylafax+-client" arch="x86_64">
  <version epoch="0" ver="5.6.1" rel="lp150.5.6.1"/>
  <changelog author="axel.braun@gmx.de" date="1430740800">- bnc#922402 update overwrites send-only settings to systemd config</changelog>
  <changelog author="axel.braun@gmx.de" date="1436875200">- release 5.5.6
  * add typerules suggestion for PNG conversion (19 Mar 2015)
  * support more than 256 pages in Class 1 ECM (26 Feb 2015)
  * cope with application/pdf being encoded with quoted-printable
  in faxmail (13 Feb 2015)
  * fix npages and totpages recording in sendq when proxied (31 Jan 2015)
  * fix EOF reading fault on badly-formatted MIME in faxmail (12 Jan 2015)
  * fix hi-res tagline imaging on 64-bit systems (10 Dec 2014)
  * add support for seqf.increment files to indicate seqf
  incrementation (14 Nov 2014)
  * add support to faxmail to decode long-wrapped base64 (11, 14-15 Oct 2014)
  * fix proxy setting of null taglines (16 Sep 2014)
  * fix ModemWaitForConnect configuration setting (16 Sep 2014)
  * add debug messages for the attempt to locate a suitable modem
  for jobs (12 Aug 2014)
  * fix missed data type for libtiff v4 (31 Jul, 11 Aug 2014)
  * fix faxsend segfault caused by an empty TagLine field introduced in
  alignment features added in 5.5.5 (25 Jul 2014)
  * pass job priority to the proxy server (21 Jul 2014)
  * add JobHostID feature (16, 29-31 Jul 2014)
  * fix instances where a NULL return of crypt() is ignored (13 Jul 2014)
  * improve support for utmpx on BSD (10 Jul 2014)
  * apply some downstream patches from FreeBSD ports (10 Jul 2014)
  * use ps2write in faxmail pdf converter if pswrite is missing (6 Jul 2014)
  * modify FIFO usage and remove CONFIG_FIFOBUG and CONFIG_OPENFIFO (5 Jul 2014)</changelog>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
  <changelog author="axel.braun@gmx.de" date="1534334400">- version 5.6.0
  * notification.diff removed (part of 5.6.0 now)
  * some adjustments to assist AIX 6.1 builds (29 Jun 2018)
  * initial support for systemd in faxsetup (29 Jun 2018)
  * fix RFC2047 encoding by notify (27 Jun, 3 Jul 2018)
  * add jobcontrol PageSize feature (27 Jun 2018)
  * fix various compiler warnings (27 Jun 2018)
  * fix build on musl-based distribution (27 Jun 2018)
  * don't wait forever after +FRH:3 (18 Jun 2018)
  * add -A and -B options to tagtest (22 Feb 2018)
  * make tagtest use the TSI and CallerID data, if available (21 Feb 2018)
  * make tagtest use the date from the TIFF tags, if available,
  instead of "now" (20 Feb 2018)
  * pass Content-Type name and Content-Disposition filename
  information to faxmail MIMEHandlers (15 Jan 2018)
  * fix faxmail transition between a message and external types (15 Jan 2018)
  * fix warning for major and minor macros move to sysmacros.h (19 Dec 2017)
  * avoid pagehandling from introducing some unnecessary EOM signals (15 Dec 2017)
  * improve proxy connection error handling and logging (5 Dec 2017)
  * fix for reproducible builds (11 Sep 2017)
  * fix quote escaping in client apps (5 Sep 2017)
  * treat callingnumber  as null (25, 31 Aug 2017)
  * add initial ModemGroup limits feature (24 Aug 2017)
  * add CLEANFAXDATA and BADFAXLINES TIFF tags for ECM receptions (10 Aug 2017)
  * pass the user's uid onto the session log file for sent faxes (25 Jul 2017)
  * improve job waits to minimize triggers (30 May 2017)
  * increase FIFO read size and add logging information (25 May 2017)
  * add ProxyTaglineFormat and ProxyTSI features (13 Mar 2017)</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Trim "enterprise" nonsense marketing.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537185600">- use systemd template unit file for hylafax-faxgetty services
- fix services</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537272000">- version 5.6.1:
  * CVE-2018-17141: fixes multiple JPEG vulnerabilities affecting
    fax page reception in JPEG format. Specially crafted input may
    have allowed remote execution of arbitrary code (boo#1109084)</changelog>
</package>
<package pkgid="21c0fcd0c1a019f8511387b5f3e80ff150bc2f174213970680e13d4bb2b79d69" name="hylafax+-client" arch="x86_64">
  <version epoch="0" ver="5.6.1" rel="lp150.5.9.1"/>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
  <changelog author="axel.braun@gmx.de" date="1534334400">- version 5.6.0
  * notification.diff removed (part of 5.6.0 now)
  * some adjustments to assist AIX 6.1 builds (29 Jun 2018)
  * initial support for systemd in faxsetup (29 Jun 2018)
  * fix RFC2047 encoding by notify (27 Jun, 3 Jul 2018)
  * add jobcontrol PageSize feature (27 Jun 2018)
  * fix various compiler warnings (27 Jun 2018)
  * fix build on musl-based distribution (27 Jun 2018)
  * don't wait forever after +FRH:3 (18 Jun 2018)
  * add -A and -B options to tagtest (22 Feb 2018)
  * make tagtest use the TSI and CallerID data, if available (21 Feb 2018)
  * make tagtest use the date from the TIFF tags, if available,
  instead of "now" (20 Feb 2018)
  * pass Content-Type name and Content-Disposition filename
  information to faxmail MIMEHandlers (15 Jan 2018)
  * fix faxmail transition between a message and external types (15 Jan 2018)
  * fix warning for major and minor macros move to sysmacros.h (19 Dec 2017)
  * avoid pagehandling from introducing some unnecessary EOM signals (15 Dec 2017)
  * improve proxy connection error handling and logging (5 Dec 2017)
  * fix for reproducible builds (11 Sep 2017)
  * fix quote escaping in client apps (5 Sep 2017)
  * treat callingnumber  as null (25, 31 Aug 2017)
  * add initial ModemGroup limits feature (24 Aug 2017)
  * add CLEANFAXDATA and BADFAXLINES TIFF tags for ECM receptions (10 Aug 2017)
  * pass the user's uid onto the session log file for sent faxes (25 Jul 2017)
  * improve job waits to minimize triggers (30 May 2017)
  * increase FIFO read size and add logging information (25 May 2017)
  * add ProxyTaglineFormat and ProxyTSI features (13 Mar 2017)</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Trim "enterprise" nonsense marketing.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537185600">- use systemd template unit file for hylafax-faxgetty services
- fix services</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537272000">- version 5.6.1:
  * CVE-2018-17141: fixes multiple JPEG vulnerabilities affecting
    fax page reception in JPEG format. Specially crafted input may
    have allowed remote execution of arbitrary code (boo#1109084)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1542024000">- boo#1115532 JBIG-in-tiff conversion added
  (Build Requirement tiff, libtiff)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Do not use tabs in spec</changelog>
</package>
<package pkgid="d8994889d80e7fd20336786ac9abe16778b1c16524d84a086296be2dc0c35dc8" name="hyper-v" arch="src">
  <version epoch="0" ver="7" rel="lp150.4.3.2"/>
  <changelog author="ohering@suse.de" date="1389873600">- Add hv_fcopy_daemon for post 13.1 releases (fate#315887)
  hyper-v.tools.hv.hv_fcopy_daemon.c</changelog>
  <changelog author="ohering@suse.de" date="1390478400">- Start daemons on demand via udev rules because the guest services
  are optional.
- If systemd is used daemons live in libdir, they are not usercallable apps</changelog>
  <changelog author="ohering@suse.de" date="1392206400">- Update hv_fcopy_daemon, kernel name changed to /dev/vmbus/hv_fcopy</changelog>
  <changelog author="ohering@suse.de" date="1393761600">- Package /usr/lib/udev to fix build error</changelog>
  <changelog author="ohering@suse.de" date="1397131200">- Handle the case when the target file exists correctly in hv_fcopy_daemon
- vssdaemon: Ignore VFAT mounts during the Freeze operation</changelog>
  <changelog author="ohering@suse.de" date="1400673600">- Start hyper-v helpers manually with helper script in inst-sys</changelog>
  <changelog author="ohering@suse.de" date="1401105600">- copy mask2pfxlen from /etc/sysconfig/network/scripts/functions
  to hv_set_ifconfig (bnc#879256)</changelog>
  <changelog author="ohering@suse.de" date="1404216000">- fix file overwriting of hv_fcopy_daemon</changelog>
  <changelog author="ohering@suse.de" date="1412078400">- vssdaemon: ignore the EBUSY on multiple freezing the same
  partition (bnc#899204)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre/post scripts</changelog>
  <changelog author="ohering@suse.de" date="1416916800">- introduce -n/--no-daemon option (fate#317533)</changelog>
  <changelog author="ohering@suse.de" date="1418817600">- Start hv_kvp_daemon after network-online.target (bnc#910353)
- ignore ENOBUFS and ENOMEM in the KVP daemon
- vssdaemon: skip all filesystems mounted readonly (bnc#909864)
- vssdaemon: report freeze errors</changelog>
  <changelog author="ohering@suse.de" date="1421064000">- Check return value of setsockopt call
- Improve error logging in VSS daemon.
- Check return value of poll call
- Properly pack the data for file copy functionality
- make struct hv_do_fcopy match Hyper-V host messages</changelog>
  <changelog author="ohering@suse.de" date="1429185600">- Add runlevel script for fcopy daemon in SLE11 (bnc#926534)</changelog>
  <changelog author="ohering@suse.de" date="1430395200">- hv: hypervvssd: call endmntent before call setmntent again
- remove unused bytes_written from kvp_update_file()
- address compiler warnings for hv_kvp_daemon.c
- kvp_daemon: make IPv6-only-injection work
- address compiler warnings for hv_fcopy_daemon.c
- do not add redundant '/' in hv_start_fcopy()</changelog>
  <changelog author="ohering@suse.de" date="1442577600">- add a python script lsvmbus to list VMBus devices (fate#315887)</changelog>
  <changelog author="ohering@suse.de" date="1462363200">- add Conflicts with kernel &lt; 4.2 (fate#320485)
- vss: fix the write()'s argument: error -&gt; vss_msg
- remove repeated HV_FCOPY string
- report ENOSPC errors in hv_fcopy_daemon
- fcopy: full handshake support
- vss: full handshake support
- vss: use misc char device to communicate with kernel
- kvp: use misc char device to communicate with kernel</changelog>
  <changelog author="ohering@suse.de" date="1498651200">- Check VSS daemon is listening before a hot backup (bnc#1029693)
- fix a compile warning in snprintf
- kvp: ensure kvp device fd is closed on exec
- lsvmbus: add pci pass-through UUID</changelog>
  <changelog author="ohering@suse.de" date="1515412800">- update buffer handling in hv_fcopy_daemon
- remove unnecessary header files and netlink related code
- Avoid reading past allocated blocks from KVP file (bnc#1087658)
- fix snprintf warning in kvp_daemon
- properly handle long paths
- kvp: configurable external scripts path
- vss: Thaw the filesystem and continue if freeze call has timed out
- vss: Skip freezing filesystems backed by loop</changelog>
  <changelog author="ohering@suse.de" date="1526990400">- Update lsvmbus interpreter from env(1) to python3(1) (bsc#1093910)</changelog>
</package>
<package pkgid="edb74cedc3d8a5b4b2b4026b70b00e3deba72e82f8048fd157164e7106c62193" name="hyper-v" arch="x86_64">
  <version epoch="0" ver="7" rel="lp150.4.3.2"/>
  <changelog author="ohering@suse.de" date="1389873600">- Add hv_fcopy_daemon for post 13.1 releases (fate#315887)
  hyper-v.tools.hv.hv_fcopy_daemon.c</changelog>
  <changelog author="ohering@suse.de" date="1390478400">- Start daemons on demand via udev rules because the guest services
  are optional.
- If systemd is used daemons live in libdir, they are not usercallable apps</changelog>
  <changelog author="ohering@suse.de" date="1392206400">- Update hv_fcopy_daemon, kernel name changed to /dev/vmbus/hv_fcopy</changelog>
  <changelog author="ohering@suse.de" date="1393761600">- Package /usr/lib/udev to fix build error</changelog>
  <changelog author="ohering@suse.de" date="1397131200">- Handle the case when the target file exists correctly in hv_fcopy_daemon
- vssdaemon: Ignore VFAT mounts during the Freeze operation</changelog>
  <changelog author="ohering@suse.de" date="1400673600">- Start hyper-v helpers manually with helper script in inst-sys</changelog>
  <changelog author="ohering@suse.de" date="1401105600">- copy mask2pfxlen from /etc/sysconfig/network/scripts/functions
  to hv_set_ifconfig (bnc#879256)</changelog>
  <changelog author="ohering@suse.de" date="1404216000">- fix file overwriting of hv_fcopy_daemon</changelog>
  <changelog author="ohering@suse.de" date="1412078400">- vssdaemon: ignore the EBUSY on multiple freezing the same
  partition (bnc#899204)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre/post scripts</changelog>
  <changelog author="ohering@suse.de" date="1416916800">- introduce -n/--no-daemon option (fate#317533)</changelog>
  <changelog author="ohering@suse.de" date="1418817600">- Start hv_kvp_daemon after network-online.target (bnc#910353)
- ignore ENOBUFS and ENOMEM in the KVP daemon
- vssdaemon: skip all filesystems mounted readonly (bnc#909864)
- vssdaemon: report freeze errors</changelog>
  <changelog author="ohering@suse.de" date="1421064000">- Check return value of setsockopt call
- Improve error logging in VSS daemon.
- Check return value of poll call
- Properly pack the data for file copy functionality
- make struct hv_do_fcopy match Hyper-V host messages</changelog>
  <changelog author="ohering@suse.de" date="1429185600">- Add runlevel script for fcopy daemon in SLE11 (bnc#926534)</changelog>
  <changelog author="ohering@suse.de" date="1430395200">- hv: hypervvssd: call endmntent before call setmntent again
- remove unused bytes_written from kvp_update_file()
- address compiler warnings for hv_kvp_daemon.c
- kvp_daemon: make IPv6-only-injection work
- address compiler warnings for hv_fcopy_daemon.c
- do not add redundant '/' in hv_start_fcopy()</changelog>
  <changelog author="ohering@suse.de" date="1442577600">- add a python script lsvmbus to list VMBus devices (fate#315887)</changelog>
  <changelog author="ohering@suse.de" date="1462363200">- add Conflicts with kernel &lt; 4.2 (fate#320485)
- vss: fix the write()'s argument: error -&gt; vss_msg
- remove repeated HV_FCOPY string
- report ENOSPC errors in hv_fcopy_daemon
- fcopy: full handshake support
- vss: full handshake support
- vss: use misc char device to communicate with kernel
- kvp: use misc char device to communicate with kernel</changelog>
  <changelog author="ohering@suse.de" date="1498651200">- Check VSS daemon is listening before a hot backup (bnc#1029693)
- fix a compile warning in snprintf
- kvp: ensure kvp device fd is closed on exec
- lsvmbus: add pci pass-through UUID</changelog>
  <changelog author="ohering@suse.de" date="1515412800">- update buffer handling in hv_fcopy_daemon
- remove unnecessary header files and netlink related code
- Avoid reading past allocated blocks from KVP file (bnc#1087658)
- fix snprintf warning in kvp_daemon
- properly handle long paths
- kvp: configurable external scripts path
- vss: Thaw the filesystem and continue if freeze call has timed out
- vss: Skip freezing filesystems backed by loop</changelog>
  <changelog author="ohering@suse.de" date="1526990400">- Update lsvmbus interpreter from env(1) to python3(1) (bsc#1093910)</changelog>
</package>
<package pkgid="2e9f6f9082e25beb199dce290f857fa2f7904c3c245c00aff5275ec538ad7d53" name="ibmtss" arch="src">
  <version epoch="0" ver="1045" rel="lp150.3.3.1"/>
  <changelog author="msuchanek@suse.com" date="1485518400">- Import v713 (FATE#321601)
- Move to libdir and add wrapper script.
- repack source without makefile-beam which has incompatible
  license and is not used in build anyway</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- Wrap description and spell out TSS.
- Move package description up before any build recipes,
  this is the more usual layout.
- Drop unusable "return" command; %build already executes with
  sh -e.</changelog>
  <changelog author="meissner@suse.com" date="1488369600">- update to v755 (FATE#321601)
  - This is the version prefered by IBM.</changelog>
  <changelog author="msuchanek@suse.com" date="1488456000">- fix description of -devel package</changelog>
  <changelog author="msuchanek@suse.com" date="1510142400">- Update to upstream version 1045 - works with OpenSSL 1.1 (bsc#1066914)</changelog>
  <changelog author="msuchanek@suse.com" date="1516276800">- Enable test on BE</changelog>
  <changelog author="msuchanek@suse.com" date="1526558400">- Split off library, spec-clean (bsc#1093612)</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Fix RPM groups</changelog>
  <changelog author="msuchanek@suse.com" date="1526990400">- Add post/postun ldconfig call</changelog>
</package>
<package pkgid="eafdd608b2924c166409f0b2c3d8ba9d421cc67769bd6a52d8d8eae02f8df090" name="ibmtss" arch="x86_64">
  <version epoch="0" ver="1045" rel="lp150.3.3.1"/>
  <changelog author="msuchanek@suse.com" date="1485518400">- Import v713 (FATE#321601)
- Move to libdir and add wrapper script.
- repack source without makefile-beam which has incompatible
  license and is not used in build anyway</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- Wrap description and spell out TSS.
- Move package description up before any build recipes,
  this is the more usual layout.
- Drop unusable "return" command; %build already executes with
  sh -e.</changelog>
  <changelog author="meissner@suse.com" date="1488369600">- update to v755 (FATE#321601)
  - This is the version prefered by IBM.</changelog>
  <changelog author="msuchanek@suse.com" date="1488456000">- fix description of -devel package</changelog>
  <changelog author="msuchanek@suse.com" date="1510142400">- Update to upstream version 1045 - works with OpenSSL 1.1 (bsc#1066914)</changelog>
  <changelog author="msuchanek@suse.com" date="1516276800">- Enable test on BE</changelog>
  <changelog author="msuchanek@suse.com" date="1526558400">- Split off library, spec-clean (bsc#1093612)</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Fix RPM groups</changelog>
  <changelog author="msuchanek@suse.com" date="1526990400">- Add post/postun ldconfig call</changelog>
</package>
<package pkgid="68c08a55cb66dd072e01fc4d43343c4f1fdf2c0cf1680d8520a4059e0997aa29" name="ibmtss-base" arch="noarch">
  <version epoch="0" ver="1045" rel="lp150.3.3.1"/>
  <changelog author="msuchanek@suse.com" date="1485518400">- Import v713 (FATE#321601)
- Move to libdir and add wrapper script.
- repack source without makefile-beam which has incompatible
  license and is not used in build anyway</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- Wrap description and spell out TSS.
- Move package description up before any build recipes,
  this is the more usual layout.
- Drop unusable "return" command; %build already executes with
  sh -e.</changelog>
  <changelog author="meissner@suse.com" date="1488369600">- update to v755 (FATE#321601)
  - This is the version prefered by IBM.</changelog>
  <changelog author="msuchanek@suse.com" date="1488456000">- fix description of -devel package</changelog>
  <changelog author="msuchanek@suse.com" date="1510142400">- Update to upstream version 1045 - works with OpenSSL 1.1 (bsc#1066914)</changelog>
  <changelog author="msuchanek@suse.com" date="1516276800">- Enable test on BE</changelog>
  <changelog author="msuchanek@suse.com" date="1526558400">- Split off library, spec-clean (bsc#1093612)</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Fix RPM groups</changelog>
  <changelog author="msuchanek@suse.com" date="1526990400">- Add post/postun ldconfig call</changelog>
</package>
<package pkgid="c4865e2fa3b59c8088323f83a2c1a44917d5a48a35722b67e0b0b63659507b39" name="ibmtss-devel" arch="x86_64">
  <version epoch="0" ver="1045" rel="lp150.3.3.1"/>
  <changelog author="msuchanek@suse.com" date="1485518400">- Import v713 (FATE#321601)
- Move to libdir and add wrapper script.
- repack source without makefile-beam which has incompatible
  license and is not used in build anyway</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- Wrap description and spell out TSS.
- Move package description up before any build recipes,
  this is the more usual layout.
- Drop unusable "return" command; %build already executes with
  sh -e.</changelog>
  <changelog author="meissner@suse.com" date="1488369600">- update to v755 (FATE#321601)
  - This is the version prefered by IBM.</changelog>
  <changelog author="msuchanek@suse.com" date="1488456000">- fix description of -devel package</changelog>
  <changelog author="msuchanek@suse.com" date="1510142400">- Update to upstream version 1045 - works with OpenSSL 1.1 (bsc#1066914)</changelog>
  <changelog author="msuchanek@suse.com" date="1516276800">- Enable test on BE</changelog>
  <changelog author="msuchanek@suse.com" date="1526558400">- Split off library, spec-clean (bsc#1093612)</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Fix RPM groups</changelog>
  <changelog author="msuchanek@suse.com" date="1526990400">- Add post/postun ldconfig call</changelog>
</package>
<package pkgid="b4efe3fcac6152db3061d65d0e50bd1958b0983722d294fc7b0d25fcbea6eb3b" name="ibutils" arch="src">
  <version epoch="0" ver="1.5.7.0.2" rel="lp150.2.3.1"/>
  <changelog author="hvogel@suse.de" date="1183982400">- Use correct version number</changelog>
  <changelog author="jjolly@suse.de" date="1201608000">- Updated with release from OFED 1.3 rc2 (still v1.2)</changelog>
  <changelog author="jjolly@suse.de" date="1204286400">- Updated with release from OFED 1.3 GA</changelog>
  <changelog author="jjolly@suse.de" date="1224158400">- Updated with version from OFED 1.3.1 release</changelog>
  <changelog author="jjolly@novell.com" date="1273838400">- Updated the ibutils tarball to the one found in the OFED 1.4.2
  release.  There is no version change as the ibutils package in
  OFED changed, but did not change version numbers.</changelog>
  <changelog author="jjolly@novell.com" date="1274702400">- Updated to v1.5.4 from OFED 1.5.1
- Removed patch for libreplace
- Updated the retval patch to include a fix to CredLoops.cpp</changelog>
  <changelog author="pth@suse.de" date="1336478400">- BuildRequire automake, autoconf and libtool.</changelog>
  <changelog author="pth@suse.de" date="1347364800">- Update to 1.5.7-0.1.g05a9d1a from OFED 1.5.4.1:
  New Features:
  * Added scripts that convert OSM dump files for ibdmchk
  ibutils: added support for GUIDInfo MAD in ibis and simulator
  Major Bugs Fixed:
  * ibmgtsim: fixed various bugs with running simulations
  * ibutils: fixed rpmbuild with and w/o ibmgtsim
  Known Issues:
  * Ibdiagnet "-wt" option may generate a bad topology file when
    running on a cluster that contains complex switch systems.
  * ibutils works only partially on any distro with TCL 8.5.
    ibdiagnet/ibdiagpath/ibis don't work with TCL 8.5 due to a change
    in TCL behavior: the built-in TCL function "dump" on TCL 8.5
    always includes field names.
    Until the fix, any user script that uses ibis needs to be fixed
    in order to function correctly on TCL 8.5
- Adapt the patch.
- Package static library in a devel-static package.</changelog>
  <changelog author="pth@suse.de" date="1377691200">- Add ibutils-tk-8.6.patch to include tk 8.6 in the check for accetable
  tk versions.
- Add ibutils-add_shebang.patch to add a shebang to git_version.tcl
  which is installed in _bindir.
- Run fdupes to eleminate file duplication.
- Add a rpmlintrc file to silence useless warnings.
- Add ibutils-autotools.patch to modify the neccessary files
  so that autoreconf can be called.
- (Build)Require graphviz-tcl as ibdiag won't work correctly without
  the graphviz tcl plugin.</changelog>
  <changelog author="pth@suse.de" date="1389960000">- Update to OFED 3.12 daily snapshot
- Use spdx.org format for license specification</changelog>
  <changelog author="pth@suse.de" date="1401796800">- Update to OFED 3.12 final.</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Do not build and install the dynamic library so remove all
  traces.
- Remove .la files as they were only needed for the static libs.</changelog>
  <changelog author="pth@suse.de" date="1405684800">- Remove the bogus rpath from ibdmsh and that vein do not link
  ibdmsh statically.</changelog>
  <changelog author="p.drouand@gmail.com" date="1423828800">- Update to version 1.5.7-0.2
  * No changelog available
- Remove ibutils-add_shebang.patch; not needed anymore
- Use download Url as source</changelog>
  <changelog author="mgorse@suse.com" date="1424692800">- Add COPYING to package docs.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1490875200">- Add ibutils-diagui.patch to allow UI less compilation
- Add a separate ibutils-ui package for UI tools. BSC #1030891</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Normalize all macros
- Replace "1 tool" by one tool for better reading</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Scriptlets and %packages need not be wrapped in %if.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496404800">- Fix ibutils-diagui.patch to not build ibdiagui
  with the ibutils package.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527076800">- Move ibdm and ibis library directories to libibdm1 package (bsc#1092166)</changelog>
</package>
<package pkgid="38d22563f32dffc3dc0c915e22d2410ade86efbb12f7ed61284296820af46649" name="ibutils" arch="x86_64">
  <version epoch="0" ver="1.5.7.0.2" rel="lp150.2.3.1"/>
  <changelog author="jjolly@novell.com" date="1273838400">- Updated the ibutils tarball to the one found in the OFED 1.4.2
  release.  There is no version change as the ibutils package in
  OFED changed, but did not change version numbers.</changelog>
  <changelog author="jjolly@novell.com" date="1274702400">- Updated to v1.5.4 from OFED 1.5.1
- Removed patch for libreplace
- Updated the retval patch to include a fix to CredLoops.cpp</changelog>
  <changelog author="pth@suse.de" date="1336478400">- BuildRequire automake, autoconf and libtool.</changelog>
  <changelog author="pth@suse.de" date="1347364800">- Update to 1.5.7-0.1.g05a9d1a from OFED 1.5.4.1:
  New Features:
  * Added scripts that convert OSM dump files for ibdmchk
  ibutils: added support for GUIDInfo MAD in ibis and simulator
  Major Bugs Fixed:
  * ibmgtsim: fixed various bugs with running simulations
  * ibutils: fixed rpmbuild with and w/o ibmgtsim
  Known Issues:
  * Ibdiagnet "-wt" option may generate a bad topology file when
    running on a cluster that contains complex switch systems.
  * ibutils works only partially on any distro with TCL 8.5.
    ibdiagnet/ibdiagpath/ibis don't work with TCL 8.5 due to a change
    in TCL behavior: the built-in TCL function "dump" on TCL 8.5
    always includes field names.
    Until the fix, any user script that uses ibis needs to be fixed
    in order to function correctly on TCL 8.5
- Adapt the patch.
- Package static library in a devel-static package.</changelog>
  <changelog author="pth@suse.de" date="1377691200">- Add ibutils-tk-8.6.patch to include tk 8.6 in the check for accetable
  tk versions.
- Add ibutils-add_shebang.patch to add a shebang to git_version.tcl
  which is installed in _bindir.
- Run fdupes to eleminate file duplication.
- Add a rpmlintrc file to silence useless warnings.
- Add ibutils-autotools.patch to modify the neccessary files
  so that autoreconf can be called.
- (Build)Require graphviz-tcl as ibdiag won't work correctly without
  the graphviz tcl plugin.</changelog>
  <changelog author="pth@suse.de" date="1389960000">- Update to OFED 3.12 daily snapshot
- Use spdx.org format for license specification</changelog>
  <changelog author="pth@suse.de" date="1401796800">- Update to OFED 3.12 final.</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Do not build and install the dynamic library so remove all
  traces.
- Remove .la files as they were only needed for the static libs.</changelog>
  <changelog author="pth@suse.de" date="1405684800">- Remove the bogus rpath from ibdmsh and that vein do not link
  ibdmsh statically.</changelog>
  <changelog author="p.drouand@gmail.com" date="1423828800">- Update to version 1.5.7-0.2
  * No changelog available
- Remove ibutils-add_shebang.patch; not needed anymore
- Use download Url as source</changelog>
  <changelog author="mgorse@suse.com" date="1424692800">- Add COPYING to package docs.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1490875200">- Add ibutils-diagui.patch to allow UI less compilation
- Add a separate ibutils-ui package for UI tools. BSC #1030891</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Normalize all macros
- Replace "1 tool" by one tool for better reading</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Scriptlets and %packages need not be wrapped in %if.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496404800">- Fix ibutils-diagui.patch to not build ibdiagui
  with the ibutils package.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527076800">- Move ibdm and ibis library directories to libibdm1 package (bsc#1092166)</changelog>
</package>
<package pkgid="78c42ec6bc894579f1cf80ca1137c3e5c601fb026825075fe469241168a6bd1d" name="ibutils-devel" arch="x86_64">
  <version epoch="0" ver="1.5.7.0.2" rel="lp150.2.3.1"/>
  <changelog author="jjolly@novell.com" date="1273838400">- Updated the ibutils tarball to the one found in the OFED 1.4.2
  release.  There is no version change as the ibutils package in
  OFED changed, but did not change version numbers.</changelog>
  <changelog author="jjolly@novell.com" date="1274702400">- Updated to v1.5.4 from OFED 1.5.1
- Removed patch for libreplace
- Updated the retval patch to include a fix to CredLoops.cpp</changelog>
  <changelog author="pth@suse.de" date="1336478400">- BuildRequire automake, autoconf and libtool.</changelog>
  <changelog author="pth@suse.de" date="1347364800">- Update to 1.5.7-0.1.g05a9d1a from OFED 1.5.4.1:
  New Features:
  * Added scripts that convert OSM dump files for ibdmchk
  ibutils: added support for GUIDInfo MAD in ibis and simulator
  Major Bugs Fixed:
  * ibmgtsim: fixed various bugs with running simulations
  * ibutils: fixed rpmbuild with and w/o ibmgtsim
  Known Issues:
  * Ibdiagnet "-wt" option may generate a bad topology file when
    running on a cluster that contains complex switch systems.
  * ibutils works only partially on any distro with TCL 8.5.
    ibdiagnet/ibdiagpath/ibis don't work with TCL 8.5 due to a change
    in TCL behavior: the built-in TCL function "dump" on TCL 8.5
    always includes field names.
    Until the fix, any user script that uses ibis needs to be fixed
    in order to function correctly on TCL 8.5
- Adapt the patch.
- Package static library in a devel-static package.</changelog>
  <changelog author="pth@suse.de" date="1377691200">- Add ibutils-tk-8.6.patch to include tk 8.6 in the check for accetable
  tk versions.
- Add ibutils-add_shebang.patch to add a shebang to git_version.tcl
  which is installed in _bindir.
- Run fdupes to eleminate file duplication.
- Add a rpmlintrc file to silence useless warnings.
- Add ibutils-autotools.patch to modify the neccessary files
  so that autoreconf can be called.
- (Build)Require graphviz-tcl as ibdiag won't work correctly without
  the graphviz tcl plugin.</changelog>
  <changelog author="pth@suse.de" date="1389960000">- Update to OFED 3.12 daily snapshot
- Use spdx.org format for license specification</changelog>
  <changelog author="pth@suse.de" date="1401796800">- Update to OFED 3.12 final.</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Do not build and install the dynamic library so remove all
  traces.
- Remove .la files as they were only needed for the static libs.</changelog>
  <changelog author="pth@suse.de" date="1405684800">- Remove the bogus rpath from ibdmsh and that vein do not link
  ibdmsh statically.</changelog>
  <changelog author="p.drouand@gmail.com" date="1423828800">- Update to version 1.5.7-0.2
  * No changelog available
- Remove ibutils-add_shebang.patch; not needed anymore
- Use download Url as source</changelog>
  <changelog author="mgorse@suse.com" date="1424692800">- Add COPYING to package docs.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1490875200">- Add ibutils-diagui.patch to allow UI less compilation
- Add a separate ibutils-ui package for UI tools. BSC #1030891</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Normalize all macros
- Replace "1 tool" by one tool for better reading</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Scriptlets and %packages need not be wrapped in %if.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496404800">- Fix ibutils-diagui.patch to not build ibdiagui
  with the ibutils package.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527076800">- Move ibdm and ibis library directories to libibdm1 package (bsc#1092166)</changelog>
</package>
<package pkgid="a41a04c0626270d240905bcf7e42083264df6cc91724358722646bb11e8bf2c0" name="ibutils-ui" arch="src">
  <version epoch="0" ver="1.5.7.0.2" rel="lp150.2.3.1"/>
  <changelog author="hvogel@suse.de" date="1183982400">- Use correct version number</changelog>
  <changelog author="jjolly@suse.de" date="1201608000">- Updated with release from OFED 1.3 rc2 (still v1.2)</changelog>
  <changelog author="jjolly@suse.de" date="1204286400">- Updated with release from OFED 1.3 GA</changelog>
  <changelog author="jjolly@suse.de" date="1224158400">- Updated with version from OFED 1.3.1 release</changelog>
  <changelog author="jjolly@novell.com" date="1273838400">- Updated the ibutils tarball to the one found in the OFED 1.4.2
  release.  There is no version change as the ibutils package in
  OFED changed, but did not change version numbers.</changelog>
  <changelog author="jjolly@novell.com" date="1274702400">- Updated to v1.5.4 from OFED 1.5.1
- Removed patch for libreplace
- Updated the retval patch to include a fix to CredLoops.cpp</changelog>
  <changelog author="pth@suse.de" date="1336478400">- BuildRequire automake, autoconf and libtool.</changelog>
  <changelog author="pth@suse.de" date="1347364800">- Update to 1.5.7-0.1.g05a9d1a from OFED 1.5.4.1:
  New Features:
  * Added scripts that convert OSM dump files for ibdmchk
  ibutils: added support for GUIDInfo MAD in ibis and simulator
  Major Bugs Fixed:
  * ibmgtsim: fixed various bugs with running simulations
  * ibutils: fixed rpmbuild with and w/o ibmgtsim
  Known Issues:
  * Ibdiagnet "-wt" option may generate a bad topology file when
    running on a cluster that contains complex switch systems.
  * ibutils works only partially on any distro with TCL 8.5.
    ibdiagnet/ibdiagpath/ibis don't work with TCL 8.5 due to a change
    in TCL behavior: the built-in TCL function "dump" on TCL 8.5
    always includes field names.
    Until the fix, any user script that uses ibis needs to be fixed
    in order to function correctly on TCL 8.5
- Adapt the patch.
- Package static library in a devel-static package.</changelog>
  <changelog author="pth@suse.de" date="1377691200">- Add ibutils-tk-8.6.patch to include tk 8.6 in the check for accetable
  tk versions.
- Add ibutils-add_shebang.patch to add a shebang to git_version.tcl
  which is installed in _bindir.
- Run fdupes to eleminate file duplication.
- Add a rpmlintrc file to silence useless warnings.
- Add ibutils-autotools.patch to modify the neccessary files
  so that autoreconf can be called.
- (Build)Require graphviz-tcl as ibdiag won't work correctly without
  the graphviz tcl plugin.</changelog>
  <changelog author="pth@suse.de" date="1389960000">- Update to OFED 3.12 daily snapshot
- Use spdx.org format for license specification</changelog>
  <changelog author="pth@suse.de" date="1401796800">- Update to OFED 3.12 final.</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Do not build and install the dynamic library so remove all
  traces.
- Remove .la files as they were only needed for the static libs.</changelog>
  <changelog author="pth@suse.de" date="1405684800">- Remove the bogus rpath from ibdmsh and that vein do not link
  ibdmsh statically.</changelog>
  <changelog author="p.drouand@gmail.com" date="1423828800">- Update to version 1.5.7-0.2
  * No changelog available
- Remove ibutils-add_shebang.patch; not needed anymore
- Use download Url as source</changelog>
  <changelog author="mgorse@suse.com" date="1424692800">- Add COPYING to package docs.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1490875200">- Add ibutils-diagui.patch to allow UI less compilation
- Add a separate ibutils-ui package for UI tools. BSC #1030891</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Normalize all macros
- Replace "1 tool" by one tool for better reading</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Scriptlets and %packages need not be wrapped in %if.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496404800">- Fix ibutils-diagui.patch to not build ibdiagui
  with the ibutils package.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527076800">- Move ibdm and ibis library directories to libibdm1 package (bsc#1092166)</changelog>
</package>
<package pkgid="730a1606eea0afd635f6ca2e3eadd086d9e9979eb08756aea7f64e684d264996" name="ibutils-ui" arch="x86_64">
  <version epoch="0" ver="1.5.7.0.2" rel="lp150.2.3.1"/>
  <changelog author="jjolly@novell.com" date="1273838400">- Updated the ibutils tarball to the one found in the OFED 1.4.2
  release.  There is no version change as the ibutils package in
  OFED changed, but did not change version numbers.</changelog>
  <changelog author="jjolly@novell.com" date="1274702400">- Updated to v1.5.4 from OFED 1.5.1
- Removed patch for libreplace
- Updated the retval patch to include a fix to CredLoops.cpp</changelog>
  <changelog author="pth@suse.de" date="1336478400">- BuildRequire automake, autoconf and libtool.</changelog>
  <changelog author="pth@suse.de" date="1347364800">- Update to 1.5.7-0.1.g05a9d1a from OFED 1.5.4.1:
  New Features:
  * Added scripts that convert OSM dump files for ibdmchk
  ibutils: added support for GUIDInfo MAD in ibis and simulator
  Major Bugs Fixed:
  * ibmgtsim: fixed various bugs with running simulations
  * ibutils: fixed rpmbuild with and w/o ibmgtsim
  Known Issues:
  * Ibdiagnet "-wt" option may generate a bad topology file when
    running on a cluster that contains complex switch systems.
  * ibutils works only partially on any distro with TCL 8.5.
    ibdiagnet/ibdiagpath/ibis don't work with TCL 8.5 due to a change
    in TCL behavior: the built-in TCL function "dump" on TCL 8.5
    always includes field names.
    Until the fix, any user script that uses ibis needs to be fixed
    in order to function correctly on TCL 8.5
- Adapt the patch.
- Package static library in a devel-static package.</changelog>
  <changelog author="pth@suse.de" date="1377691200">- Add ibutils-tk-8.6.patch to include tk 8.6 in the check for accetable
  tk versions.
- Add ibutils-add_shebang.patch to add a shebang to git_version.tcl
  which is installed in _bindir.
- Run fdupes to eleminate file duplication.
- Add a rpmlintrc file to silence useless warnings.
- Add ibutils-autotools.patch to modify the neccessary files
  so that autoreconf can be called.
- (Build)Require graphviz-tcl as ibdiag won't work correctly without
  the graphviz tcl plugin.</changelog>
  <changelog author="pth@suse.de" date="1389960000">- Update to OFED 3.12 daily snapshot
- Use spdx.org format for license specification</changelog>
  <changelog author="pth@suse.de" date="1401796800">- Update to OFED 3.12 final.</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Do not build and install the dynamic library so remove all
  traces.
- Remove .la files as they were only needed for the static libs.</changelog>
  <changelog author="pth@suse.de" date="1405684800">- Remove the bogus rpath from ibdmsh and that vein do not link
  ibdmsh statically.</changelog>
  <changelog author="p.drouand@gmail.com" date="1423828800">- Update to version 1.5.7-0.2
  * No changelog available
- Remove ibutils-add_shebang.patch; not needed anymore
- Use download Url as source</changelog>
  <changelog author="mgorse@suse.com" date="1424692800">- Add COPYING to package docs.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1490875200">- Add ibutils-diagui.patch to allow UI less compilation
- Add a separate ibutils-ui package for UI tools. BSC #1030891</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Normalize all macros
- Replace "1 tool" by one tool for better reading</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Scriptlets and %packages need not be wrapped in %if.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496404800">- Fix ibutils-diagui.patch to not build ibdiagui
  with the ibutils package.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527076800">- Move ibdm and ibis library directories to libibdm1 package (bsc#1092166)</changelog>
</package>
<package pkgid="e7e040cace25e366022f79b781c5712e6eb9f869314c2e5f65d6df600e2f403a" name="icecast" arch="src">
  <version epoch="0" ver="2.4.3" rel="lp150.2.3.1"/>
  <changelog author="tiwai@suse.de" date="1166529600">- fix comparison of string literal in cfgfile.c (#226380).</changelog>
  <changelog author="mmarek@suse.cz" date="1170417600">- fix build with curl-7.16
- fixed more comparison with string literals by using static char*
  variables instead of #defines to string constans to detect
  whether a default or malloced value is used</changelog>
  <changelog author="tiwai@suse.de" date="1213790400">- updated to version 2.3.2:
  * Character set support
  * Authentication improvements
  * Listening socket update
  * XSL update
  * Updates for stream directory handling.
  * Updates for Win32.
  * Accept/Ban IP support.
  * A Mountpoint is exported to the slaves even if no mount
    section is defined for it.
  * Relays handle redirection (HTTP 302) if one is received at
    startup.
  * Automatically generate XSPF playlist like we do with M3U, the
    mountpoint extension is .xspf
  * Header updates for proxy handling and certain clients like
    some shoutcast source clients and flash players.
  * Added Kate/Skeleton codecs to Ogg handler.
  * Various stats cleanups.
  * The streamlist passed from master to slave had a limited
    length
  * Documentation updates.
  * Relay startup/shutdown is cleaner.
  * several build cleanups.
  * several resource leaks and race conditions fixed</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- Fix build with --no-add-needed
- Enable SSL support.</changelog>
  <changelog author="coolo@suse.com" date="1318680000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="tiwai@suse.de" date="1330948800">- Fix VUL-1: icecast log injection (CVE-2011-4612, bnc#737255)</changelog>
  <changelog author="dimstar@opensuse.org" date="1353326400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
  <changelog author="jw@suse.com" date="1358856000">- nuked %make_install to make SLES11 SP2 happy.</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1370433600">- update to 2.3.3:
  * security:
    + Improved HTTPS cipher handling and added support for chained certificates.
    + Allow the source password to be undefined. There was a corner case, where
    a default password would have taken effect. It would require the admin to
    remove the 'source-password' from the icecast config to take effect. Default
    configs ship with the password set, so this vulnerability doesn't trigger
    there.
    + Prevent error log injection of control characters by substituting
    non-alphanumeric characters with a '.' (CVE-2011-4612). Injection attempts
    can be identified via access.log, as that stores URL encoded requests.
    Investigation if further logging code needs to have sanitized output is
    ongoing.
  * bugfixes:
    + On-demand relaying - Reject listeners while reconnecting. Fix stats for
    relays without mount section.
    + Prevent too frequent YP updates.
    + Only allow raw metadata updates from same IP as connected source (unless
    user is admin). This addresses broken client software that issues updates
    without being connected.
    + Minor memory leaks
    + XSPF file installation
    + Fix case of global listeners count becoming out of sync.
    + Setting an interval of 0 in mount should disable shoutcast metadata inserts.
  * authentication:
    + Sources can now be authenticated via URL, like listeners. Post info is
    "action=stream_auth&amp;mount=/stream&amp;ip=IP&amp;server=SERVER&amp;port=8000&amp;user=fred&amp;pass=pass"
    As admin requests can come in for a stream (eg metadata update) these
    requests can be issued while stream is active. For these &amp;admin=1 is added to
    the POST details.
  * XSL update:
    + automatically generate VCLT playlist like we do with M3U, the mountpoint
    extension is .vclt
- package updates:
  * add systemd service file
  * add logrotate configuration
  * add Gentoo patches
  * set pidfile directive in default config file to make it work with
    systemd
  * split out HTML documentation into -doc subpackage</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1385726400">- remove dependency to syslog.target in icecast.service, as it doesn't exist
  any more, see bnc#852314</changelog>
  <changelog author="tiwai@suse.de" date="1392120000">- Remove the obsoleted icecast-2.3.2-CVE-2011-4612.diff that leads
  to invalid access to freed memory (bnc#862096)</changelog>
  <changelog author="mail@davykager.nl" date="1400587200">- Update to version 2.4.0:
  * Support for WebM video
  * Support for Opus audio in Ogg
  * Fixes for some race conditions
  * Allow (standard strftime(3)) %x codes in &lt;dump-file&gt;. Disabled for win32.
  * Dropped debian packaging directory as debian use their own.
- Disable Gentoo patches because they have no effect on the OBS builds.
  icecast-2.3.3-libkate.patch (has no effect on automated builds)
  icecast-2.3.3-fix-xiph_openssl.patch (spec file guarantees openssl exists)
- Rebase icecast-fix-no-add-needed.patch for version 2.4.0.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre script</changelog>
  <changelog author="fisiu@opensuse.org" date="1415966400">- Add icecast-2.4.0-produce-valid-json.patch: produce valid json status,
  fix boo#905468.</changelog>
  <changelog author="fisiu@opensuse.org" date="1416657600">- Add icecast-mp3-frame-validation.patch: validate mp3 frame.</changelog>
  <changelog author="tiwai@suse.de" date="1416916800">- updated to version 2.4.1:
  * Fixes in logging, &lt;auth&gt; in default mounts, JSON status API
  * SSL Security improvements:
  * Handle empty strings in config file better
  * Require Content-Type header for PUT requests
  * Fix possible leak of on-connect scripts (CVE-2014-9018,bnc#906538)
  More details, see http://icecast.org/news/icecast-release-2_4_1/
- Remove obsoleted patch:
  icecast-2.4.0-produce-valid-json.patch
- Change doc subpackage to noarch
- Spec file cleanup</changelog>
  <changelog author="p.drouand@gmail.com" date="1421668800">- Remove sysvinit support as the package now build only for systems
  with systemd support
- Add a backward rc compatibility symlink to systemd service file
- Only require systemd-rpm-macros to build; no need to require
  entire systemd environment
- Clean up specfile</changelog>
  <changelog author="tiwai@suse.de" date="1428494400">- update to version 2.4.2:
  Fix crash when URL Auth is used with stream_autho without
  credentials (bnc#926402)</changelog>
  <changelog author="avindra@opensuse.org" date="1513512000">- update to version 2.4.3:
  * Fixes Windows only vulnerability (CVE-2005-0837), where an
    attacker could access the raw XSLT template file by appending a
    dot ?.? to the URL. To be clear, no runtime information could be
    accessed this way.
- cleanup spec file with spec-cleaner
- fix bad line endings warning in CSS file
- rebase icecast-fix-no-add-needed.patch
- replace PreReq statements with Requires(pre)</changelog>
  <changelog author="tiwai@suse.de" date="1541160000">- Fix buffer overflow in url-auth (CVE-2018-18820, bsc#1114434):
  icecast-CVE-2018-18820-1.patch
  icecast-CVE-2018-18820-2.patch</changelog>
</package>
<package pkgid="ef9b0674f6239dd5504cb89d0502118d0445fb328f22a841be9b5f4d319a5acc" name="icecast" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="lp150.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- Fix build with --no-add-needed
- Enable SSL support.</changelog>
  <changelog author="coolo@suse.com" date="1318680000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="tiwai@suse.de" date="1330948800">- Fix VUL-1: icecast log injection (CVE-2011-4612, bnc#737255)</changelog>
  <changelog author="dimstar@opensuse.org" date="1353326400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
  <changelog author="jw@suse.com" date="1358856000">- nuked %make_install to make SLES11 SP2 happy.</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1370433600">- update to 2.3.3:
  * security:
    + Improved HTTPS cipher handling and added support for chained certificates.
    + Allow the source password to be undefined. There was a corner case, where
    a default password would have taken effect. It would require the admin to
    remove the 'source-password' from the icecast config to take effect. Default
    configs ship with the password set, so this vulnerability doesn't trigger
    there.
    + Prevent error log injection of control characters by substituting
    non-alphanumeric characters with a '.' (CVE-2011-4612). Injection attempts
    can be identified via access.log, as that stores URL encoded requests.
    Investigation if further logging code needs to have sanitized output is
    ongoing.
  * bugfixes:
    + On-demand relaying - Reject listeners while reconnecting. Fix stats for
    relays without mount section.
    + Prevent too frequent YP updates.
    + Only allow raw metadata updates from same IP as connected source (unless
    user is admin). This addresses broken client software that issues updates
    without being connected.
    + Minor memory leaks
    + XSPF file installation
    + Fix case of global listeners count becoming out of sync.
    + Setting an interval of 0 in mount should disable shoutcast metadata inserts.
  * authentication:
    + Sources can now be authenticated via URL, like listeners. Post info is
    "action=stream_auth&amp;mount=/stream&amp;ip=IP&amp;server=SERVER&amp;port=8000&amp;user=fred&amp;pass=pass"
    As admin requests can come in for a stream (eg metadata update) these
    requests can be issued while stream is active. For these &amp;admin=1 is added to
    the POST details.
  * XSL update:
    + automatically generate VCLT playlist like we do with M3U, the mountpoint
    extension is .vclt
- package updates:
  * add systemd service file
  * add logrotate configuration
  * add Gentoo patches
  * set pidfile directive in default config file to make it work with
    systemd
  * split out HTML documentation into -doc subpackage</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1385726400">- remove dependency to syslog.target in icecast.service, as it doesn't exist
  any more, see bnc#852314</changelog>
  <changelog author="tiwai@suse.de" date="1392120000">- Remove the obsoleted icecast-2.3.2-CVE-2011-4612.diff that leads
  to invalid access to freed memory (bnc#862096)</changelog>
  <changelog author="mail@davykager.nl" date="1400587200">- Update to version 2.4.0:
  * Support for WebM video
  * Support for Opus audio in Ogg
  * Fixes for some race conditions
  * Allow (standard strftime(3)) %x codes in &lt;dump-file&gt;. Disabled for win32.
  * Dropped debian packaging directory as debian use their own.
- Disable Gentoo patches because they have no effect on the OBS builds.
  icecast-2.3.3-libkate.patch (has no effect on automated builds)
  icecast-2.3.3-fix-xiph_openssl.patch (spec file guarantees openssl exists)
- Rebase icecast-fix-no-add-needed.patch for version 2.4.0.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre script</changelog>
  <changelog author="fisiu@opensuse.org" date="1415966400">- Add icecast-2.4.0-produce-valid-json.patch: produce valid json status,
  fix boo#905468.</changelog>
  <changelog author="fisiu@opensuse.org" date="1416657600">- Add icecast-mp3-frame-validation.patch: validate mp3 frame.</changelog>
  <changelog author="tiwai@suse.de" date="1416916800">- updated to version 2.4.1:
  * Fixes in logging, &lt;auth&gt; in default mounts, JSON status API
  * SSL Security improvements:
  * Handle empty strings in config file better
  * Require Content-Type header for PUT requests
  * Fix possible leak of on-connect scripts (CVE-2014-9018,bnc#906538)
  More details, see http://icecast.org/news/icecast-release-2_4_1/
- Remove obsoleted patch:
  icecast-2.4.0-produce-valid-json.patch
- Change doc subpackage to noarch
- Spec file cleanup</changelog>
  <changelog author="p.drouand@gmail.com" date="1421668800">- Remove sysvinit support as the package now build only for systems
  with systemd support
- Add a backward rc compatibility symlink to systemd service file
- Only require systemd-rpm-macros to build; no need to require
  entire systemd environment
- Clean up specfile</changelog>
  <changelog author="tiwai@suse.de" date="1428494400">- update to version 2.4.2:
  Fix crash when URL Auth is used with stream_autho without
  credentials (bnc#926402)</changelog>
  <changelog author="avindra@opensuse.org" date="1513512000">- update to version 2.4.3:
  * Fixes Windows only vulnerability (CVE-2005-0837), where an
    attacker could access the raw XSLT template file by appending a
    dot ?.? to the URL. To be clear, no runtime information could be
    accessed this way.
- cleanup spec file with spec-cleaner
- fix bad line endings warning in CSS file
- rebase icecast-fix-no-add-needed.patch
- replace PreReq statements with Requires(pre)</changelog>
  <changelog author="tiwai@suse.de" date="1541160000">- Fix buffer overflow in url-auth (CVE-2018-18820, bsc#1114434):
  icecast-CVE-2018-18820-1.patch
  icecast-CVE-2018-18820-2.patch</changelog>
</package>
<package pkgid="fc37edda6ce15f1dd6bfdffd617ba61f0a1a07cc745c411484de5d5c435a107b" name="icecast-doc" arch="noarch">
  <version epoch="0" ver="2.4.3" rel="lp150.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- Fix build with --no-add-needed
- Enable SSL support.</changelog>
  <changelog author="coolo@suse.com" date="1318680000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="tiwai@suse.de" date="1330948800">- Fix VUL-1: icecast log injection (CVE-2011-4612, bnc#737255)</changelog>
  <changelog author="dimstar@opensuse.org" date="1353326400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
  <changelog author="jw@suse.com" date="1358856000">- nuked %make_install to make SLES11 SP2 happy.</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1370433600">- update to 2.3.3:
  * security:
    + Improved HTTPS cipher handling and added support for chained certificates.
    + Allow the source password to be undefined. There was a corner case, where
    a default password would have taken effect. It would require the admin to
    remove the 'source-password' from the icecast config to take effect. Default
    configs ship with the password set, so this vulnerability doesn't trigger
    there.
    + Prevent error log injection of control characters by substituting
    non-alphanumeric characters with a '.' (CVE-2011-4612). Injection attempts
    can be identified via access.log, as that stores URL encoded requests.
    Investigation if further logging code needs to have sanitized output is
    ongoing.
  * bugfixes:
    + On-demand relaying - Reject listeners while reconnecting. Fix stats for
    relays without mount section.
    + Prevent too frequent YP updates.
    + Only allow raw metadata updates from same IP as connected source (unless
    user is admin). This addresses broken client software that issues updates
    without being connected.
    + Minor memory leaks
    + XSPF file installation
    + Fix case of global listeners count becoming out of sync.
    + Setting an interval of 0 in mount should disable shoutcast metadata inserts.
  * authentication:
    + Sources can now be authenticated via URL, like listeners. Post info is
    "action=stream_auth&amp;mount=/stream&amp;ip=IP&amp;server=SERVER&amp;port=8000&amp;user=fred&amp;pass=pass"
    As admin requests can come in for a stream (eg metadata update) these
    requests can be issued while stream is active. For these &amp;admin=1 is added to
    the POST details.
  * XSL update:
    + automatically generate VCLT playlist like we do with M3U, the mountpoint
    extension is .vclt
- package updates:
  * add systemd service file
  * add logrotate configuration
  * add Gentoo patches
  * set pidfile directive in default config file to make it work with
    systemd
  * split out HTML documentation into -doc subpackage</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1385726400">- remove dependency to syslog.target in icecast.service, as it doesn't exist
  any more, see bnc#852314</changelog>
  <changelog author="tiwai@suse.de" date="1392120000">- Remove the obsoleted icecast-2.3.2-CVE-2011-4612.diff that leads
  to invalid access to freed memory (bnc#862096)</changelog>
  <changelog author="mail@davykager.nl" date="1400587200">- Update to version 2.4.0:
  * Support for WebM video
  * Support for Opus audio in Ogg
  * Fixes for some race conditions
  * Allow (standard strftime(3)) %x codes in &lt;dump-file&gt;. Disabled for win32.
  * Dropped debian packaging directory as debian use their own.
- Disable Gentoo patches because they have no effect on the OBS builds.
  icecast-2.3.3-libkate.patch (has no effect on automated builds)
  icecast-2.3.3-fix-xiph_openssl.patch (spec file guarantees openssl exists)
- Rebase icecast-fix-no-add-needed.patch for version 2.4.0.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre script</changelog>
  <changelog author="fisiu@opensuse.org" date="1415966400">- Add icecast-2.4.0-produce-valid-json.patch: produce valid json status,
  fix boo#905468.</changelog>
  <changelog author="fisiu@opensuse.org" date="1416657600">- Add icecast-mp3-frame-validation.patch: validate mp3 frame.</changelog>
  <changelog author="tiwai@suse.de" date="1416916800">- updated to version 2.4.1:
  * Fixes in logging, &lt;auth&gt; in default mounts, JSON status API
  * SSL Security improvements:
  * Handle empty strings in config file better
  * Require Content-Type header for PUT requests
  * Fix possible leak of on-connect scripts (CVE-2014-9018,bnc#906538)
  More details, see http://icecast.org/news/icecast-release-2_4_1/
- Remove obsoleted patch:
  icecast-2.4.0-produce-valid-json.patch
- Change doc subpackage to noarch
- Spec file cleanup</changelog>
  <changelog author="p.drouand@gmail.com" date="1421668800">- Remove sysvinit support as the package now build only for systems
  with systemd support
- Add a backward rc compatibility symlink to systemd service file
- Only require systemd-rpm-macros to build; no need to require
  entire systemd environment
- Clean up specfile</changelog>
  <changelog author="tiwai@suse.de" date="1428494400">- update to version 2.4.2:
  Fix crash when URL Auth is used with stream_autho without
  credentials (bnc#926402)</changelog>
  <changelog author="avindra@opensuse.org" date="1513512000">- update to version 2.4.3:
  * Fixes Windows only vulnerability (CVE-2005-0837), where an
    attacker could access the raw XSLT template file by appending a
    dot ?.? to the URL. To be clear, no runtime information could be
    accessed this way.
- cleanup spec file with spec-cleaner
- fix bad line endings warning in CSS file
- rebase icecast-fix-no-add-needed.patch
- replace PreReq statements with Requires(pre)</changelog>
  <changelog author="tiwai@suse.de" date="1541160000">- Fix buffer overflow in url-auth (CVE-2018-18820, bsc#1114434):
  icecast-CVE-2018-18820-1.patch
  icecast-CVE-2018-18820-2.patch</changelog>
</package>
<package pkgid="f3de3797ef292905d194ab3bd824d12512daea4d206ecdc513e4094d9d77fe31" name="icewm" arch="src">
  <version epoch="0" ver="1.4.2" rel="lp150.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
</package>
<package pkgid="e55f0dfee791e497fb287ebd3dd3d8ef643ae70713459a85ee6900e191c59260" name="icewm" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp150.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
</package>
<package pkgid="42bc09a8218670238155ea6ff97a6dc60f93915120eb013b14c9de02496505ff" name="icewm-config-upstream" arch="noarch">
  <version epoch="0" ver="1.4.2" rel="lp150.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
</package>
<package pkgid="faeb5df22e8940a8e771f6531dd48b27b6125eee792e6ee709c510c528fd09be" name="icewm-default" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp150.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
</package>
<package pkgid="f216fc4e323793d118e573556d17352d308b6216d5f89380ff863da1435b2e58" name="icewm-lang" arch="noarch">
  <version epoch="0" ver="1.4.2" rel="lp150.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
</package>
<package pkgid="64ee18280abd8c1c260c3c532a770753a98f14012e460aa12f0fc3955a514a51" name="icewm-lite" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp150.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
</package>
<package pkgid="6e2fee8104ee6a4a2c743c5be7612652d56464848864f5ef52c1cc678ca673a7" name="install-initrd-openSUSE" arch="x86_64">
  <version epoch="0" ver="14.373" rel="lp150.2.3.2"/>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/installation-images#234
- add vmd.ko module (bsc#1079924)
- 14.359</changelog>
  <changelog author="snwint@suse.de" date="1519300800">- build skelcd-installer-net subpackage containing the network
  install setup (bsc#1063789)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1520596800">- merge gh#openSUSE/installation-images#235
- udevadm should retrigger 'add' events (bsc#1084357)
- 14.360</changelog>
  <changelog author="wfeldt@opensuse.org" date="1520596801">- merge gh#openSUSE/installation-images#236
- remove default driver update url (bsc#1084510)
- 14.361</changelog>
  <changelog author="wfeldt@opensuse.org" date="1521201600">- merge gh#openSUSE/installation-images#237
- move tftpboot location (bsc#1085479)
- 14.362</changelog>
  <changelog author="wfeldt@opensuse.org" date="1521720000">- merge gh#openSUSE/installation-images#238
- allow udevd to be run with --debug (bsc#1085212)
- 14.363</changelog>
  <changelog author="wfeldt@opensuse.org" date="1521720001">- merge gh#openSUSE/installation-images#239
- add novnc &amp; python3-websockify (bsc#1078785)
- 14.364</changelog>
  <changelog author="wfeldt@opensuse.org" date="1522065600">- merge gh#openSUSE/installation-images#240
- add libstorage-ng translations (bsc#1081454)
- 14.365</changelog>
  <changelog author="wfeldt@opensuse.org" date="1522238400">- merge gh#openSUSE/installation-images#241
- s390x: add zpxe.rexx to dvd (bsc#813454)
- 14.366</changelog>
  <changelog author="wfeldt@opensuse.org" date="1523016000">- merge gh#openSUSE/installation-images#242
- adjust adddir script to allow updating coreutils (bsc#1087901)
- 14.367</changelog>
  <changelog author="snwint@suse.de" date="1523275200">- do not delete efi image in skelcd-installer-net (bsc#1088679)</changelog>
  <changelog author="kukuk@suse.de" date="1523275201">- No upgrade option for Kubic (bsc#1088304)</changelog>
  <changelog author="snwint@suse.de" date="1523448000">- disable Kubic 32-bit build (bsc#1089102)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524052800">- merge gh#openSUSE/installation-images#243
- run postin script of yast2-storage-ng (bsc#1081198)
- 14.368</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524139200">- merge gh#openSUSE/installation-images#244
- remove dmraid from inst-sys (fate#323743, bsc#1088570)
- remove explicit dependency from mozilla-nspr
- 14.369</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524484800">- merge gh#openSUSE/installation-images#245
- remove last mozilla-nspr reference
- 14.370</changelog>
  <changelog author="tchvatal@suse.com" date="1524657600">- Use proper libsmbios_c2 name for the smbios library</changelog>
  <changelog author="jsrain@suse.cz" date="1525435200">- merge gh#openSUSE/installation-images#247
- adjusted libopenssl*_*-hmac dependency to match current versions
  (bsc#1090360)
- 14.371</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- merge gh#openSUSE/installation-images#248
- Use proper libsmbios_c2 name for the smbios library
- 14.372</changelog>
  <changelog author="wfeldt@opensuse.org" date="1526558400">- merge gh#openSUSE/installation-images#250
- use reiserfs-kmp (fate#323394)
- 14.373</changelog>
</package>
<package pkgid="6a5cc268934c0b4f21f38151aa79556fabc76b69c2f11b40f8a3f3f2a541eb77" name="installation-images-debuginfodeps-openSUSE" arch="x86_64">
  <version epoch="0" ver="14.373" rel="lp150.2.3.2"/>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/installation-images#234
- add vmd.ko module (bsc#1079924)
- 14.359</changelog>
  <changelog author="snwint@suse.de" date="1519300800">- build skelcd-installer-net subpackage containing the network
  install setup (bsc#1063789)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1520596800">- merge gh#openSUSE/installation-images#235
- udevadm should retrigger 'add' events (bsc#1084357)
- 14.360</changelog>
  <changelog author="wfeldt@opensuse.org" date="1520596801">- merge gh#openSUSE/installation-images#236
- remove default driver update url (bsc#1084510)
- 14.361</changelog>
  <changelog author="wfeldt@opensuse.org" date="1521201600">- merge gh#openSUSE/installation-images#237
- move tftpboot location (bsc#1085479)
- 14.362</changelog>
  <changelog author="wfeldt@opensuse.org" date="1521720000">- merge gh#openSUSE/installation-images#238
- allow udevd to be run with --debug (bsc#1085212)
- 14.363</changelog>
  <changelog author="wfeldt@opensuse.org" date="1521720001">- merge gh#openSUSE/installation-images#239
- add novnc &amp; python3-websockify (bsc#1078785)
- 14.364</changelog>
  <changelog author="wfeldt@opensuse.org" date="1522065600">- merge gh#openSUSE/installation-images#240
- add libstorage-ng translations (bsc#1081454)
- 14.365</changelog>
  <changelog author="wfeldt@opensuse.org" date="1522238400">- merge gh#openSUSE/installation-images#241
- s390x: add zpxe.rexx to dvd (bsc#813454)
- 14.366</changelog>
  <changelog author="wfeldt@opensuse.org" date="1523016000">- merge gh#openSUSE/installation-images#242
- adjust adddir script to allow updating coreutils (bsc#1087901)
- 14.367</changelog>
  <changelog author="snwint@suse.de" date="1523275200">- do not delete efi image in skelcd-installer-net (bsc#1088679)</changelog>
  <changelog author="kukuk@suse.de" date="1523275201">- No upgrade option for Kubic (bsc#1088304)</changelog>
  <changelog author="snwint@suse.de" date="1523448000">- disable Kubic 32-bit build (bsc#1089102)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524052800">- merge gh#openSUSE/installation-images#243
- run postin script of yast2-storage-ng (bsc#1081198)
- 14.368</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524139200">- merge gh#openSUSE/installation-images#244
- remove dmraid from inst-sys (fate#323743, bsc#1088570)
- remove explicit dependency from mozilla-nspr
- 14.369</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524484800">- merge gh#openSUSE/installation-images#245
- remove last mozilla-nspr reference
- 14.370</changelog>
  <changelog author="tchvatal@suse.com" date="1524657600">- Use proper libsmbios_c2 name for the smbios library</changelog>
  <changelog author="jsrain@suse.cz" date="1525435200">- merge gh#openSUSE/installation-images#247
- adjusted libopenssl*_*-hmac dependency to match current versions
  (bsc#1090360)
- 14.371</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- merge gh#openSUSE/installation-images#248
- Use proper libsmbios_c2 name for the smbios library
- 14.372</changelog>
  <changelog author="wfeldt@opensuse.org" date="1526558400">- merge gh#openSUSE/installation-images#250
- use reiserfs-kmp (fate#323394)
- 14.373</changelog>
</package>
<package pkgid="931ee3bb8eae13d85daef92c3ab879e2e8f96912df0a86eb337b66088c66280f" name="intel-gpu-tools" arch="src">
  <version epoch="0" ver="1.19" rel="lp150.2.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix bashism in intel_gpu_abrt script that uses bash-specific
  constructions
- add patches:
  * intel-gpu-tools-1.7-fix-bashisms.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1416225601">- rename intel-gpu-tools-1.7-fix-bashisms.patch to
  u_intel-gpu-tools-1.7-fix-bashisms.patch according to our patch
  guidelines</changelog>
  <changelog author="sfalken@opensuse.org" date="1421582400">- Update to version 1.9:
  + Patches refactored for new sources
  + post-build-checks disabled, due to check failure:
    I: Program returns random data in a function
    E: intel-gpu-tools no-return-in-nonvoid-function
    intel_renderstate_gen8.c:441
  + Dropped:
  - n_missing_check-ndebug.h.patch
  - intel-gpu-tools-1.7.tar.bz2
  + Added:
  - intel-gpu-tools-1.9.tar.bz2
  + Changes from version 1.7
  - More Android porting
  - Fixes to documentation warnings
  - Updates to UPDATE, MAINTAINERS, and README
  - lib:
  - Fix out of tree build of version.h
  - added function to lock memory into RAM
  - add option log domain filtering
  - introduce log domains
  - igt_debugfs: Don't setup crc in _new
  - igt_debugfs: Throw away the two first CRCs
  - igt.cocci: Deal with min/max/swap
  - add swap() macro
  - always reset connectors after the state is forced
  - remove igt_edid.h
  - tests:
  - gem_tiled_swapping: use igt_info logging wrapper
  - replaced 3D test images
  - kms_cursor_crc: Restore the valid pipe/connector combo check
  - kms_mmio_vs_cs_flip: Count valid tests for all crtcs
  - kms_flip:
  * Target the back buffer with the dummy load
  * Calibrate the dummy load delay in kms_flip
  * Use fixed size (2kx2k) buffers for dummy load
  * Refactor blit code
  - Run lib/igt.cocci
  - pm_rps: vlv:
  * roundmiddle point to freq supported by HW
  * load gpu for idle min/max tests\
  * wait for freq to settleo
  - add gem_gpgpu_fill to .gitignore
  - use base edid
  - tools:
  - add missing copyright headers
  - terminate getopt_long long option arrays properly
  - drv_hangman: Remove unused function
  - kms_cursor_crc: Remove value to 'return' in a void function
  - igt/drm_read: Require that pipe 0 is active
  - igt/drm_read: Abuse read(drm)
  - intel_error_decode: Decode the ERROR register on Sandybridge
    and Ivybridge
  - gem_bad_reloc: Don't flip-flop between SKIP and PASS</changelog>
  <changelog author="sndirsch@suse.com" date="1421755200">- reenabled post build checks
- u_build-fixes.patch
  * fix post build checks</changelog>
  <changelog author="sndirsch@suse.com" date="1426507200">- Update to version 1.10
  * New frequency manipulation tool (intel_gpu_frequency)
  * Adjustments for the Solaris port (Alan Coopersmith).
  * Remove tests/NAMING-CONVENTION since it's all in the docbook now,
    to avoid divergent conventions.
  * New CRITICAL log level for really serious stuff (Thomas Wood).
  * Interactive test mode can now be enabled by the shared cmdline
    option --interactive-debug=$var (Rodrigo Vivi).
  * Improved logging to kmsg to better line up test runs with kernel
    messages (Chris Wilson).
  * Record all log levels (including disabled levels) in a ringbuffer
    and dump that on test failures for quicker diagnostics of automated
    test run results (Thomas Wood).
  * A lot of small polish all over the test library.
  * Piles of new testcases and improvements to existing ones as usual.</changelog>
  <changelog author="sndirsch@suse.com" date="1426593600">- u_Fix-pointer-cast-in-order-to-fix-build-on-32bit-arch.patch
  * fixes build on 32bit</changelog>
  <changelog author="sndirsch@suse.com" date="1434110400">- Update to version 1.11
  * Various new tests and tools
  * Single combined test list (supported by piglit since commit 8a122bb)
  * Optional dependency on libunwind to provide automatic stack traces on test
    failures. (Thomas Wood)
  * Add optional default debug and optimisation flags for tests to enable better
    stack traces and debugging. (Thomas Wood)
  * Test programs are now installed into libexec. This is useful when building a
    complete software stack for a DUT from scratch. (Building and installing
    tests can still be disabled by the --disable-tests configure flag.)
    (Joonas Lahtinen)
  * New tool to decode watermark registers (Ville Syrjälä)
  * Timeout mechanism now reports test as failed
  * Introduce intel_reg as the one Intel graphics register multitool to replace
    intel_reg_read, intel_reg_write, intel_iosf_sb_read, intel_iosf_sb_write,
    intel_vga_read, intel_vga_write, intel_reg_dumper, intel_reg_snapshot,
    and quick_dump.py. (Jani Nikula)
  * Add functions to manipulate i915.ko parameters and ensure features are enabled
    for testing. (Paulo Zanoni)
- supersedes u_Fix-pointer-cast-in-order-to-fix-build-on-32bit-arch.patch
- added new buildrequires to gtk-doc and libunwind
- added /usr/lib/intel-gpu-tools/* and /usr/share/intel-gpu-tools/* to filelist</changelog>
  <changelog author="sndirsch@suse.com" date="1434110401">- use correct filelist macros</changelog>
  <changelog author="sndirsch@suse.com" date="1442232000">- intel-gpu-tools 1.12
  - Various new tests and tools
  - New statistical analysis functions. (Damien Lespiau)
  - New benchmark tests. (Chris Wilson)
  - Old register tools that were superseded by intel_reg have been removed.
  - Various tests have been marked "basic", to indicate they are suitable for
    use in basic acceptance testing. (Jesse Barnes)
  - Per-ring gem_storedw_loop tests combined into a single test with subtests.
    (Jesse Barnes)
  - New "aubdump" tool, used to launch an application and capture rendering to
    an AUB file. (Kristian Høgsberg Kristensen)
  - Cherryview support added to intel_display_poller. (Ville Syrjälä)
  - Skylake and Broadwell support added to gem_gpgpu_fill tests.
    (Dominik Zeromski)
  - Support for running core drm tests on any platform. (Micah Fedke)
  - Many other bug fixes
- supersedes patch 'u_build-fixes.patch"</changelog>
  <changelog author="zaitor@opensuse.org" date="1451736000">- Update to version 1.13:
  + New tests:
  - kms_atomic tests atomic mode setting.
  - core_prop_blob tests blob properties.
  - gem_request_retire targets request retirement code paths.
  - core_setmaster_vs_auth checks that drop/setMaster correctly
    transfer master state.
  + Wildcard characters are now accepted when using the
  - -run-subtest command line option to specify multiple subtests
    to run.
  + Add support for Broxton in intel_audio_dump.
  + Added Kabylake support.
  + Many other bug fixes and improvements.
- Add pkgconfig(libudev) and pkgconfig(xrandr) BuildRequires,
  configure looks for them so lets build with those supported too.</changelog>
  <changelog author="sndirsch@suse.com" date="1457092800">- Update to version 1.14
  * New test: gem_create validate parameters for GEM_CREATE ioctl
    (Ankitprasad Sharma)
  * New test: gem_softpin exercise the userptr ioctl to create shared
    buffers between CPU and GPU (Vinay Belgaumkar)
  * New tests: prime_mmap_coherency/kms_mmap_write_crc cache coherency
    tests (Tiago Vignatti)
  * New test: prime_mmap mmap() on dma-buf fds (Rob Bradford)
  * New test: gem_exec_reloc sanity check of execbuf-ioctl relocations (Chris
    Wilson)
  * New test: gem_exec_basic sanity check of execbuf-ioctl rings (Chris Wilson)
  * improved igt_hang_ring() infrastructure for generic hang injection support
    in the core library (Chris Wilson)
  * new igt_pm library to collect power management testing helpers (David
    Weinehall)
  * lig/igt_vc4: VC4 support library (Eric Anholt)
  * kms_frontbuffer_tracking: included in BAT (Paulo Zanoni)
  * kms_psr_sink_crc: Add BAT test for PSR active (Rodrigo Vivi)
  * gem_wait: test superseded by gem_latency in benchmarks (Chris Wilson)
  * igt_core: Fix logging to display extended line (Derek Morton)
  * igt_core: Expand --run-subtest functionality (Derek Morton)
  * kms_force_connector_basic: various fixes and included in BAT set (Daniel
    Vetter)
  * Many other improvements and bug fixes.</changelog>
  <changelog author="sndirsch@suse.com" date="1464782400">Update to version 1.15
- New KMS test: tests/kms_cursor_legacy (Stress legacy cursor ioctl)
  (Chris Wilson)
- Several GEM tests have been removed from BAT: tests/gem_exec_whisper,
  tests/gem_sync (dropped individual engines), test/gem_cs_prefetch (replaced
  by test/gem_exec_gttfill), tests/gem_ctx_param_basic (got relabeled
  to tests/gem_ctx_param) (Chris Wilson)
- build: Skip configure step if is NOCONFIGURE set (Tomeu Vizoso)
- tools/intel_bios_reader: Added options for dumping individual panels, specific
  section, hex format and other various fixes (Jani Nikula)
- build: Add optional --enable-werror
  (hard-fail in case of compiler warnings) (Marius Vlad)
- New KMS test: tests/prime_mmap_kms (show case dma-buf new API
  and processes restrictions) (Tiago Vignatti)
- Several tests have gained to ability to be run on different platforms
  than Intel: tests/testdisplay (Tomeu Vizoso), tests/kms_panel_fitting
  (Robert Foss), tests/kms_flip_event_leak, tests/kms_flip (Tomeu Vizoso).
- compute exitcode first: In the case of running multiple subtests which all
  happen to be skipped, igt_exitcode is 0, but the final exit code will be 77.
  (Chris Wilson)
- Shorten tests/kms_flip test (Tvrtko Ursulin)
- Half the timeout for suspend to RAM and a third for suspend to disk
  (Marius Vlad)
- lib: Pass format instead of bpp to create_bo_for_fb (Ville Syrjälä)
- Removed from tests/test-list.txt, tests/gem_concurrent_all and added
  tests/test-list-full.txt that contains all the tests. This will speed
  up considerably piglit when starting tests. (Gabriel Feceoru)
- piglit changed its behaviour to prevent overwriting the results. A fairly new
  version of piglit is required to run i-g-t tests. (Gabriel Feceoru)
- lib: Replace drmIoctl() with a layer of indirection (Chris Wilson)
- Adding missing Broxton PCI IDs (Rodrigo Vivi)
- Added COMMIT_ATOMIC (lib/igt_kms, w/ tests/kms_rotation_crc).
  Requires nuclear_pageflip parameter turned on in the i915 driver.
  (Mayuresh Gharpure, Pratik Vishwakarma)
- man/: rewrite manual pages in reStructuredText (Jani Nikula)
- tests/drv_module_reload_basic: perform fault injection (Chris Wilson)
  with various improvements (Imre Deak)
- Removed tests/gem_multi_bsd_sync_loop which was superseded by
  tests/gem_ring_sync_loop and tests/gem_dummy_reloc_loop by
  tests/gem_exec_reloc (Chris Wilson)
- New GEM tests: tests/gem_exec_whisper, tests/gem_exec_store,
  test/gem_exec_gttfill, tests/gem_exec_suspend, tests/gem_exec_flush
  (Chris Wilson)
- New benchmarks: benchmarks/gem_syslatency, benchmarks/gem_exec_fault
  (Chris Wilson)
- tests/gem_exec_nop included in BAT (Chris Wilson)
- tests/pm_rpm: Fix crash on machines that lack LLC (David Weinehall)
- lib/igt_fb: Fix domain tracking for GTT cairo surfaces (Chris Wilson)
- Add igt_subtest_group to allow igt_fixture for only a subset of subtests
  without skipping/failing all subsequent subtests. (Daniel Vetter)
- Many more fixes and improvements.
  Added python3-docutils to BuildRequires, since manual pages are now built
  via rst2man.</changelog>
  <changelog author="sndirsch@suse.com" date="1474545600">- Update to version 1.16
  A new intel-gpu-tools quarterly release is available with the following
  changes:
- Build automatically tests required when issueing a make check, Tests/subtests
  that receive a crash signal should print a backtrace when i-g-t is built with
  libunwind support (Marius Vlad)
- lib/igt_kms: Force connector probing on first use (Chris Wilson)
- vc4: Add a test for BO lookup failure error path (Eric Anholt)
- tests/gem_mocs_settings: Remove direct register tests,
  and added RC6 tests (Peter Antoine)
- Check for libdrm_intel and build if present, Add stubs for intel_bufmgr
  (Robert Foss)
- igt/gem_mmap_gtt: Add a test to detect non-WC access (Chris Wilson)
- Various documentation improvements (Daniel Vetter)
- Added new tests: tests/kms_rmfb and tests/kms_atomic_transition, a test for
  fastboot, tests/kms_panel_fitting, and a test that only tries to set the
  current property values back, tests/kms_properties. Various improvements to
  tests/kms_cursor_legacy (Maarten Lankhorst)
- lib/igt_kms: Use pipes for committing, not outputs and assign pipe properties
  in pipe init and many other improvements (Maarten Lankhorst)
- tests/gem_workarounds: read test added as a basic test, fix assertion of num
  of regs (Mika Kuoppala)
- Various improvements to tools/intel_bios_reader and tools/intel_reg (Ville
  Syrj�l�)
- lib: Add x86 cpuid based feature detection (Chris Wilson)
- demos/intel_sprite_on: Instead of looping until the first disconnected port
  is found, now go through all possible connectors, drawing the sprite on any
  connected display. (Jim Bride)
- Multiple improvements to lib/igt_kms (Robert Foss)
- lib/igt_aux: Framework for measuring latency in raising signals (Chris
  Wilson)
- Various modifications to intel_chipset: Replace lookup of GT size with
  computation, remove unused PCI_CHIP ids, converting platforms names using
  device info (Chris Wilson)
- tests/kms_chv_cursor_fail: Run the tests with fewer steps
  (Maarten Lankhorst)
- lib/intel_chipset: Add more Kabylake PCI IDs and removed PCI IDs that are no
  longer listed as Kabylake (Rodrigo Vivi)
- Basic framework for GVT-g testing has landed (Chris Wilson)
- Various improvements to tests/kms_flip (Ville Syrj�l�)
- igt/kms_cursor_legacy: Add a rudimentary test to detect stalled cursors,
  detect pageflip errors and check that cursor updates do not stall flips
  (Chris Wilson)
- vGEM support: lib and added tests/vgem_basic, tests/vgem_slow and
  tests/vgem_reload_basic (Chris Wilson)
- Various fixes to tests/kms_frontbuffer_tracking: prefer BLT drawing, recreate
  FBS at every subtest and properly handle mixing GTT and WC mmaps (Paulo Zanoni)
- Replace drv_missed_irq_hang script with a C-equivalent: tests/drv_missed_irq
  (Chris Wilson)
- Added a test case for polling dma-buf fences: tests/prime_busy (Chris Wilson)
- lib/igt_gt: Omit illegal instruction on gen8+ and time
  constrains on hang detection (igt/gem_reset_stats) (Mika Kuoppala)
- Added tests/kms_invalid_dotclock, a test that makes sure every modeset gets
  rejected by the kernel if the requested dotclock is beyond the hardware
  capabilities (Ville Syrj�l�)
- tests/gem_stolen: Verify contents of stolen-backed objects across
  hibernation, fix for no_mmap subtest and check for available stolen memory size
  (Ankitprasad Sharma)
- tests/core_prop_blob: Add invalid tests to set fb props (Daniel Vetter)
- Many more fixes and improvements.</changelog>
  <changelog author="chris@computersalat.de" date="1484222400">- Release 1.17 (2016-12-02)
  * Library changes:
  - Added an iterator that generate primes for creating input data that
    should not fall into any patterns that may be optimised by the
    drivers. (Chris Wilson)
  - Crashes in fixture blocks now print a stacktrace. (Marius Vlad)
  - Added support for various system suspend/resume options. (Imre Deak)
  - Added linked list helpers from the Wayland project. (Lyude)
  - Added a generic dummy workload helper for submitting GPU workloads
    that consume exactly a specified amount of time. (Abdiel Janulgue)
  - Added C functions for driver loading/unloading, pkill and lsof, for
    converting shell script tests to C code. (Marius Vlad)
  * Tools changes:
  - intel_reg: Add Kabylake support. (Jani Nikula)
  - intel_bios_reader: Also dump PSR info. (Ville Syrjälä)
  - intel_guc_logger: New tool for capturing logs from the GuC
    firmware. (Akash Goel)
  - intel_aubdump: Added commandline option to stream the dump to
    another process. (Lionel Landwerlin)
  - intel_aubdump: Annotate the dump with the application name and the
    used PCI ID. (Jason Ekstrand)
  * Benchmark changes:
  - gem_latency: Added support for measuring fence wakeup latencies. (Chris Wilson)
  - prime_lookup: New microbenchmark for stressing prime_fd_to_handle
    and prime_handle_to_fd. (Chris Wilson)
  * Test changes:
  - Multiple new tests.
  - Added an explicit list of tests used for Intel CI. (Petri Latvala)
  - Converted multiple shell script tests to C. (Marius Vlad)
  * And many other bug fixes and improvements.
- add new deps
  * pkgconfig(libkmod)
  * pkgconfig(libprocps)
- rebase patches
- fix libkmod.h include path
  * add N_intel-gpu-tools_Fix_libkmod.h_include_path_1315.patch
  * add N_intel-gpu-tools_Fix_libkmod.h_include_path_1320.patch
  * add N_intel-gpu-tools_Fix_libkmod.h_include_path.patch</changelog>
  <changelog author="jengelh@inai.de" date="1486296000">- Add u_respect_cflags.diff
- supersedes N_intel-gpu-tools_Fix_libkmod.h_include_path_1320.patch,
  N_intel-gpu-tools_Fix_libkmod.h_include_path_1315.patch,
  N_intel-gpu-tools_Fix_libkmod.h_include_path.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1489492800">- Release 1.18 (2017-03-13)
  * Library changes:
  - Various changes to library functions so that they don't assume Intel
    hardware. (Lyude)
  - Added helper functions for managing synchronization primitives.
    (Robert Foss)
  - Added support for the new generic CRC capture kernel ABI. (Tomeu
    Vizoso)
  - Added Geminilake platform support. (Ander Conselvan de Oliveira)
  - Added helpers for sysfs hotplug events. (Lyude)
  - Added support for hotplug testing with the Chamelium device (Lyude)
  * Tools changes:
  - intel_dp_compliance: New tool for running automated DisplayPort
    compliance tests. (Manasi Navare)
  - Renamed intel_bios_reader to intel_vbt_decode. (Jani Nikula)
  - intel_gvtg_test: New tool for setting up GVT-g guests based on
    KVMGT. (Terrence Xu)
  * Test changes:
  - Multiple new tests.
  * And many other bug fixes and improvements.
- refreshed patches: n_disable-build-of-pm_rpm.patch, u_respect_cflags.diff</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- SLE merge
  * update to latest version, Stack release 2016Q1
    (fate #315643-315645, 319159-319161, 319618)</changelog>
  <changelog author="sndirsch@suse.com" date="1497787200">- Release 1.19 (2017-06-09)
  * Library changes:
  - Changed debugfs handlers to open files for the DRM device in use,
    for setups with more than one DRM device. (Tomeu Vizoso)
  - Added support for 4K and audio HDMI EDID injection. (Abdiel
    Janulgue, Marius Vlad)
  - Added support for AMDGPU devices. (Chris Wilson)
  * Tools changes:
  - intel_error_decode now automatically opens a pager. (Chris Wilson)
  - intel_error_decode now dumps the GuC firmware logs if available.
    (Chris Wilson)
  * Benchmark changes:
  - gem_wsim: New benchmark that simulates command submission
    workloads. (Tvrtko Ursulin)
  * Scripts changes:
  - trace.pl: New tool to parse i915 tracepoints for performance
    analysis. (Tvrtko Ursulin)
  - media-bench.pl: New tool to programmatically analyze simulated media
    workloads using gem_wsim to find the optimal load balancing
    strategy. (Tvrtko Ursulin)
  * Test changes:
  - Imported amdgpu tests from libdrm. (Chris Wilson)
  - Multiple other new tests.
  * And many other bug fixes and improvements.</changelog>
  <changelog author="chris@computersalat.de" date="1502884800">- add Source signature file</changelog>
  <changelog author="sndirsch@suse.com" date="1535544000">- U_intel_gpu_top-Use-drm_open_driver-don-t-need-drm-mas.patch
  * fixes intel_gpu_top; Use drm_open_driver, don't need drm master
    (boo#1106186, fdo#102380)</changelog>
</package>
<package pkgid="9a812405a9286f5d21bb166013c18d0b2d1968569d5a0e4275b2a51c0ea4a84f" name="intel-gpu-tools" arch="x86_64">
  <version epoch="0" ver="1.19" rel="lp150.2.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix bashism in intel_gpu_abrt script that uses bash-specific
  constructions
- add patches:
  * intel-gpu-tools-1.7-fix-bashisms.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1416225601">- rename intel-gpu-tools-1.7-fix-bashisms.patch to
  u_intel-gpu-tools-1.7-fix-bashisms.patch according to our patch
  guidelines</changelog>
  <changelog author="sfalken@opensuse.org" date="1421582400">- Update to version 1.9:
  + Patches refactored for new sources
  + post-build-checks disabled, due to check failure:
    I: Program returns random data in a function
    E: intel-gpu-tools no-return-in-nonvoid-function
    intel_renderstate_gen8.c:441
  + Dropped:
  - n_missing_check-ndebug.h.patch
  - intel-gpu-tools-1.7.tar.bz2
  + Added:
  - intel-gpu-tools-1.9.tar.bz2
  + Changes from version 1.7
  - More Android porting
  - Fixes to documentation warnings
  - Updates to UPDATE, MAINTAINERS, and README
  - lib:
  - Fix out of tree build of version.h
  - added function to lock memory into RAM
  - add option log domain filtering
  - introduce log domains
  - igt_debugfs: Don't setup crc in _new
  - igt_debugfs: Throw away the two first CRCs
  - igt.cocci: Deal with min/max/swap
  - add swap() macro
  - always reset connectors after the state is forced
  - remove igt_edid.h
  - tests:
  - gem_tiled_swapping: use igt_info logging wrapper
  - replaced 3D test images
  - kms_cursor_crc: Restore the valid pipe/connector combo check
  - kms_mmio_vs_cs_flip: Count valid tests for all crtcs
  - kms_flip:
  * Target the back buffer with the dummy load
  * Calibrate the dummy load delay in kms_flip
  * Use fixed size (2kx2k) buffers for dummy load
  * Refactor blit code
  - Run lib/igt.cocci
  - pm_rps: vlv:
  * roundmiddle point to freq supported by HW
  * load gpu for idle min/max tests\
  * wait for freq to settleo
  - add gem_gpgpu_fill to .gitignore
  - use base edid
  - tools:
  - add missing copyright headers
  - terminate getopt_long long option arrays properly
  - drv_hangman: Remove unused function
  - kms_cursor_crc: Remove value to 'return' in a void function
  - igt/drm_read: Require that pipe 0 is active
  - igt/drm_read: Abuse read(drm)
  - intel_error_decode: Decode the ERROR register on Sandybridge
    and Ivybridge
  - gem_bad_reloc: Don't flip-flop between SKIP and PASS</changelog>
  <changelog author="sndirsch@suse.com" date="1421755200">- reenabled post build checks
- u_build-fixes.patch
  * fix post build checks</changelog>
  <changelog author="sndirsch@suse.com" date="1426507200">- Update to version 1.10
  * New frequency manipulation tool (intel_gpu_frequency)
  * Adjustments for the Solaris port (Alan Coopersmith).
  * Remove tests/NAMING-CONVENTION since it's all in the docbook now,
    to avoid divergent conventions.
  * New CRITICAL log level for really serious stuff (Thomas Wood).
  * Interactive test mode can now be enabled by the shared cmdline
    option --interactive-debug=$var (Rodrigo Vivi).
  * Improved logging to kmsg to better line up test runs with kernel
    messages (Chris Wilson).
  * Record all log levels (including disabled levels) in a ringbuffer
    and dump that on test failures for quicker diagnostics of automated
    test run results (Thomas Wood).
  * A lot of small polish all over the test library.
  * Piles of new testcases and improvements to existing ones as usual.</changelog>
  <changelog author="sndirsch@suse.com" date="1426593600">- u_Fix-pointer-cast-in-order-to-fix-build-on-32bit-arch.patch
  * fixes build on 32bit</changelog>
  <changelog author="sndirsch@suse.com" date="1434110400">- Update to version 1.11
  * Various new tests and tools
  * Single combined test list (supported by piglit since commit 8a122bb)
  * Optional dependency on libunwind to provide automatic stack traces on test
    failures. (Thomas Wood)
  * Add optional default debug and optimisation flags for tests to enable better
    stack traces and debugging. (Thomas Wood)
  * Test programs are now installed into libexec. This is useful when building a
    complete software stack for a DUT from scratch. (Building and installing
    tests can still be disabled by the --disable-tests configure flag.)
    (Joonas Lahtinen)
  * New tool to decode watermark registers (Ville Syrjälä)
  * Timeout mechanism now reports test as failed
  * Introduce intel_reg as the one Intel graphics register multitool to replace
    intel_reg_read, intel_reg_write, intel_iosf_sb_read, intel_iosf_sb_write,
    intel_vga_read, intel_vga_write, intel_reg_dumper, intel_reg_snapshot,
    and quick_dump.py. (Jani Nikula)
  * Add functions to manipulate i915.ko parameters and ensure features are enabled
    for testing. (Paulo Zanoni)
- supersedes u_Fix-pointer-cast-in-order-to-fix-build-on-32bit-arch.patch
- added new buildrequires to gtk-doc and libunwind
- added /usr/lib/intel-gpu-tools/* and /usr/share/intel-gpu-tools/* to filelist</changelog>
  <changelog author="sndirsch@suse.com" date="1434110401">- use correct filelist macros</changelog>
  <changelog author="sndirsch@suse.com" date="1442232000">- intel-gpu-tools 1.12
  - Various new tests and tools
  - New statistical analysis functions. (Damien Lespiau)
  - New benchmark tests. (Chris Wilson)
  - Old register tools that were superseded by intel_reg have been removed.
  - Various tests have been marked "basic", to indicate they are suitable for
    use in basic acceptance testing. (Jesse Barnes)
  - Per-ring gem_storedw_loop tests combined into a single test with subtests.
    (Jesse Barnes)
  - New "aubdump" tool, used to launch an application and capture rendering to
    an AUB file. (Kristian Høgsberg Kristensen)
  - Cherryview support added to intel_display_poller. (Ville Syrjälä)
  - Skylake and Broadwell support added to gem_gpgpu_fill tests.
    (Dominik Zeromski)
  - Support for running core drm tests on any platform. (Micah Fedke)
  - Many other bug fixes
- supersedes patch 'u_build-fixes.patch"</changelog>
  <changelog author="zaitor@opensuse.org" date="1451736000">- Update to version 1.13:
  + New tests:
  - kms_atomic tests atomic mode setting.
  - core_prop_blob tests blob properties.
  - gem_request_retire targets request retirement code paths.
  - core_setmaster_vs_auth checks that drop/setMaster correctly
    transfer master state.
  + Wildcard characters are now accepted when using the
  - -run-subtest command line option to specify multiple subtests
    to run.
  + Add support for Broxton in intel_audio_dump.
  + Added Kabylake support.
  + Many other bug fixes and improvements.
- Add pkgconfig(libudev) and pkgconfig(xrandr) BuildRequires,
  configure looks for them so lets build with those supported too.</changelog>
  <changelog author="sndirsch@suse.com" date="1457092800">- Update to version 1.14
  * New test: gem_create validate parameters for GEM_CREATE ioctl
    (Ankitprasad Sharma)
  * New test: gem_softpin exercise the userptr ioctl to create shared
    buffers between CPU and GPU (Vinay Belgaumkar)
  * New tests: prime_mmap_coherency/kms_mmap_write_crc cache coherency
    tests (Tiago Vignatti)
  * New test: prime_mmap mmap() on dma-buf fds (Rob Bradford)
  * New test: gem_exec_reloc sanity check of execbuf-ioctl relocations (Chris
    Wilson)
  * New test: gem_exec_basic sanity check of execbuf-ioctl rings (Chris Wilson)
  * improved igt_hang_ring() infrastructure for generic hang injection support
    in the core library (Chris Wilson)
  * new igt_pm library to collect power management testing helpers (David
    Weinehall)
  * lig/igt_vc4: VC4 support library (Eric Anholt)
  * kms_frontbuffer_tracking: included in BAT (Paulo Zanoni)
  * kms_psr_sink_crc: Add BAT test for PSR active (Rodrigo Vivi)
  * gem_wait: test superseded by gem_latency in benchmarks (Chris Wilson)
  * igt_core: Fix logging to display extended line (Derek Morton)
  * igt_core: Expand --run-subtest functionality (Derek Morton)
  * kms_force_connector_basic: various fixes and included in BAT set (Daniel
    Vetter)
  * Many other improvements and bug fixes.</changelog>
  <changelog author="sndirsch@suse.com" date="1464782400">Update to version 1.15
- New KMS test: tests/kms_cursor_legacy (Stress legacy cursor ioctl)
  (Chris Wilson)
- Several GEM tests have been removed from BAT: tests/gem_exec_whisper,
  tests/gem_sync (dropped individual engines), test/gem_cs_prefetch (replaced
  by test/gem_exec_gttfill), tests/gem_ctx_param_basic (got relabeled
  to tests/gem_ctx_param) (Chris Wilson)
- build: Skip configure step if is NOCONFIGURE set (Tomeu Vizoso)
- tools/intel_bios_reader: Added options for dumping individual panels, specific
  section, hex format and other various fixes (Jani Nikula)
- build: Add optional --enable-werror
  (hard-fail in case of compiler warnings) (Marius Vlad)
- New KMS test: tests/prime_mmap_kms (show case dma-buf new API
  and processes restrictions) (Tiago Vignatti)
- Several tests have gained to ability to be run on different platforms
  than Intel: tests/testdisplay (Tomeu Vizoso), tests/kms_panel_fitting
  (Robert Foss), tests/kms_flip_event_leak, tests/kms_flip (Tomeu Vizoso).
- compute exitcode first: In the case of running multiple subtests which all
  happen to be skipped, igt_exitcode is 0, but the final exit code will be 77.
  (Chris Wilson)
- Shorten tests/kms_flip test (Tvrtko Ursulin)
- Half the timeout for suspend to RAM and a third for suspend to disk
  (Marius Vlad)
- lib: Pass format instead of bpp to create_bo_for_fb (Ville Syrjälä)
- Removed from tests/test-list.txt, tests/gem_concurrent_all and added
  tests/test-list-full.txt that contains all the tests. This will speed
  up considerably piglit when starting tests. (Gabriel Feceoru)
- piglit changed its behaviour to prevent overwriting the results. A fairly new
  version of piglit is required to run i-g-t tests. (Gabriel Feceoru)
- lib: Replace drmIoctl() with a layer of indirection (Chris Wilson)
- Adding missing Broxton PCI IDs (Rodrigo Vivi)
- Added COMMIT_ATOMIC (lib/igt_kms, w/ tests/kms_rotation_crc).
  Requires nuclear_pageflip parameter turned on in the i915 driver.
  (Mayuresh Gharpure, Pratik Vishwakarma)
- man/: rewrite manual pages in reStructuredText (Jani Nikula)
- tests/drv_module_reload_basic: perform fault injection (Chris Wilson)
  with various improvements (Imre Deak)
- Removed tests/gem_multi_bsd_sync_loop which was superseded by
  tests/gem_ring_sync_loop and tests/gem_dummy_reloc_loop by
  tests/gem_exec_reloc (Chris Wilson)
- New GEM tests: tests/gem_exec_whisper, tests/gem_exec_store,
  test/gem_exec_gttfill, tests/gem_exec_suspend, tests/gem_exec_flush
  (Chris Wilson)
- New benchmarks: benchmarks/gem_syslatency, benchmarks/gem_exec_fault
  (Chris Wilson)
- tests/gem_exec_nop included in BAT (Chris Wilson)
- tests/pm_rpm: Fix crash on machines that lack LLC (David Weinehall)
- lib/igt_fb: Fix domain tracking for GTT cairo surfaces (Chris Wilson)
- Add igt_subtest_group to allow igt_fixture for only a subset of subtests
  without skipping/failing all subsequent subtests. (Daniel Vetter)
- Many more fixes and improvements.
  Added python3-docutils to BuildRequires, since manual pages are now built
  via rst2man.</changelog>
  <changelog author="sndirsch@suse.com" date="1474545600">- Update to version 1.16
  A new intel-gpu-tools quarterly release is available with the following
  changes:
- Build automatically tests required when issueing a make check, Tests/subtests
  that receive a crash signal should print a backtrace when i-g-t is built with
  libunwind support (Marius Vlad)
- lib/igt_kms: Force connector probing on first use (Chris Wilson)
- vc4: Add a test for BO lookup failure error path (Eric Anholt)
- tests/gem_mocs_settings: Remove direct register tests,
  and added RC6 tests (Peter Antoine)
- Check for libdrm_intel and build if present, Add stubs for intel_bufmgr
  (Robert Foss)
- igt/gem_mmap_gtt: Add a test to detect non-WC access (Chris Wilson)
- Various documentation improvements (Daniel Vetter)
- Added new tests: tests/kms_rmfb and tests/kms_atomic_transition, a test for
  fastboot, tests/kms_panel_fitting, and a test that only tries to set the
  current property values back, tests/kms_properties. Various improvements to
  tests/kms_cursor_legacy (Maarten Lankhorst)
- lib/igt_kms: Use pipes for committing, not outputs and assign pipe properties
  in pipe init and many other improvements (Maarten Lankhorst)
- tests/gem_workarounds: read test added as a basic test, fix assertion of num
  of regs (Mika Kuoppala)
- Various improvements to tools/intel_bios_reader and tools/intel_reg (Ville
  Syrj�l�)
- lib: Add x86 cpuid based feature detection (Chris Wilson)
- demos/intel_sprite_on: Instead of looping until the first disconnected port
  is found, now go through all possible connectors, drawing the sprite on any
  connected display. (Jim Bride)
- Multiple improvements to lib/igt_kms (Robert Foss)
- lib/igt_aux: Framework for measuring latency in raising signals (Chris
  Wilson)
- Various modifications to intel_chipset: Replace lookup of GT size with
  computation, remove unused PCI_CHIP ids, converting platforms names using
  device info (Chris Wilson)
- tests/kms_chv_cursor_fail: Run the tests with fewer steps
  (Maarten Lankhorst)
- lib/intel_chipset: Add more Kabylake PCI IDs and removed PCI IDs that are no
  longer listed as Kabylake (Rodrigo Vivi)
- Basic framework for GVT-g testing has landed (Chris Wilson)
- Various improvements to tests/kms_flip (Ville Syrj�l�)
- igt/kms_cursor_legacy: Add a rudimentary test to detect stalled cursors,
  detect pageflip errors and check that cursor updates do not stall flips
  (Chris Wilson)
- vGEM support: lib and added tests/vgem_basic, tests/vgem_slow and
  tests/vgem_reload_basic (Chris Wilson)
- Various fixes to tests/kms_frontbuffer_tracking: prefer BLT drawing, recreate
  FBS at every subtest and properly handle mixing GTT and WC mmaps (Paulo Zanoni)
- Replace drv_missed_irq_hang script with a C-equivalent: tests/drv_missed_irq
  (Chris Wilson)
- Added a test case for polling dma-buf fences: tests/prime_busy (Chris Wilson)
- lib/igt_gt: Omit illegal instruction on gen8+ and time
  constrains on hang detection (igt/gem_reset_stats) (Mika Kuoppala)
- Added tests/kms_invalid_dotclock, a test that makes sure every modeset gets
  rejected by the kernel if the requested dotclock is beyond the hardware
  capabilities (Ville Syrj�l�)
- tests/gem_stolen: Verify contents of stolen-backed objects across
  hibernation, fix for no_mmap subtest and check for available stolen memory size
  (Ankitprasad Sharma)
- tests/core_prop_blob: Add invalid tests to set fb props (Daniel Vetter)
- Many more fixes and improvements.</changelog>
  <changelog author="chris@computersalat.de" date="1484222400">- Release 1.17 (2016-12-02)
  * Library changes:
  - Added an iterator that generate primes for creating input data that
    should not fall into any patterns that may be optimised by the
    drivers. (Chris Wilson)
  - Crashes in fixture blocks now print a stacktrace. (Marius Vlad)
  - Added support for various system suspend/resume options. (Imre Deak)
  - Added linked list helpers from the Wayland project. (Lyude)
  - Added a generic dummy workload helper for submitting GPU workloads
    that consume exactly a specified amount of time. (Abdiel Janulgue)
  - Added C functions for driver loading/unloading, pkill and lsof, for
    converting shell script tests to C code. (Marius Vlad)
  * Tools changes:
  - intel_reg: Add Kabylake support. (Jani Nikula)
  - intel_bios_reader: Also dump PSR info. (Ville Syrjälä)
  - intel_guc_logger: New tool for capturing logs from the GuC
    firmware. (Akash Goel)
  - intel_aubdump: Added commandline option to stream the dump to
    another process. (Lionel Landwerlin)
  - intel_aubdump: Annotate the dump with the application name and the
    used PCI ID. (Jason Ekstrand)
  * Benchmark changes:
  - gem_latency: Added support for measuring fence wakeup latencies. (Chris Wilson)
  - prime_lookup: New microbenchmark for stressing prime_fd_to_handle
    and prime_handle_to_fd. (Chris Wilson)
  * Test changes:
  - Multiple new tests.
  - Added an explicit list of tests used for Intel CI. (Petri Latvala)
  - Converted multiple shell script tests to C. (Marius Vlad)
  * And many other bug fixes and improvements.
- add new deps
  * pkgconfig(libkmod)
  * pkgconfig(libprocps)
- rebase patches
- fix libkmod.h include path
  * add N_intel-gpu-tools_Fix_libkmod.h_include_path_1315.patch
  * add N_intel-gpu-tools_Fix_libkmod.h_include_path_1320.patch
  * add N_intel-gpu-tools_Fix_libkmod.h_include_path.patch</changelog>
  <changelog author="jengelh@inai.de" date="1486296000">- Add u_respect_cflags.diff
- supersedes N_intel-gpu-tools_Fix_libkmod.h_include_path_1320.patch,
  N_intel-gpu-tools_Fix_libkmod.h_include_path_1315.patch,
  N_intel-gpu-tools_Fix_libkmod.h_include_path.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1489492800">- Release 1.18 (2017-03-13)
  * Library changes:
  - Various changes to library functions so that they don't assume Intel
    hardware. (Lyude)
  - Added helper functions for managing synchronization primitives.
    (Robert Foss)
  - Added support for the new generic CRC capture kernel ABI. (Tomeu
    Vizoso)
  - Added Geminilake platform support. (Ander Conselvan de Oliveira)
  - Added helpers for sysfs hotplug events. (Lyude)
  - Added support for hotplug testing with the Chamelium device (Lyude)
  * Tools changes:
  - intel_dp_compliance: New tool for running automated DisplayPort
    compliance tests. (Manasi Navare)
  - Renamed intel_bios_reader to intel_vbt_decode. (Jani Nikula)
  - intel_gvtg_test: New tool for setting up GVT-g guests based on
    KVMGT. (Terrence Xu)
  * Test changes:
  - Multiple new tests.
  * And many other bug fixes and improvements.
- refreshed patches: n_disable-build-of-pm_rpm.patch, u_respect_cflags.diff</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- SLE merge
  * update to latest version, Stack release 2016Q1
    (fate #315643-315645, 319159-319161, 319618)</changelog>
  <changelog author="sndirsch@suse.com" date="1497787200">- Release 1.19 (2017-06-09)
  * Library changes:
  - Changed debugfs handlers to open files for the DRM device in use,
    for setups with more than one DRM device. (Tomeu Vizoso)
  - Added support for 4K and audio HDMI EDID injection. (Abdiel
    Janulgue, Marius Vlad)
  - Added support for AMDGPU devices. (Chris Wilson)
  * Tools changes:
  - intel_error_decode now automatically opens a pager. (Chris Wilson)
  - intel_error_decode now dumps the GuC firmware logs if available.
    (Chris Wilson)
  * Benchmark changes:
  - gem_wsim: New benchmark that simulates command submission
    workloads. (Tvrtko Ursulin)
  * Scripts changes:
  - trace.pl: New tool to parse i915 tracepoints for performance
    analysis. (Tvrtko Ursulin)
  - media-bench.pl: New tool to programmatically analyze simulated media
    workloads using gem_wsim to find the optimal load balancing
    strategy. (Tvrtko Ursulin)
  * Test changes:
  - Imported amdgpu tests from libdrm. (Chris Wilson)
  - Multiple other new tests.
  * And many other bug fixes and improvements.</changelog>
  <changelog author="chris@computersalat.de" date="1502884800">- add Source signature file</changelog>
  <changelog author="sndirsch@suse.com" date="1535544000">- U_intel_gpu_top-Use-drm_open_driver-don-t-need-drm-mas.patch
  * fixes intel_gpu_top; Use drm_open_driver, don't need drm master
    (boo#1106186, fdo#102380)</changelog>
</package>
<package pkgid="479f1663a22ccccc18a8e9e857a6e3897eadaf093644165481432449bd79966b" name="iotop" arch="noarch">
  <version epoch="0" ver="0.6" rel="lp150.3.3.1"/>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="pth@suse.de" date="1283428800">- Add py_requires
- Update to 0.4.1. Changes since 0.2.1:
  o Portability fix
  o Better reporting of missing requirements
  0.4
  ~~~
  o Compatibility with python2.4 using the ctypes module
  o Stopped using setuptools in favor of straight distutils
  0.3.2
  ~~~~~
  o Split long command lines in the middle instead of cutting them at the end
  o Added a heuristic to detect kernels without CONFIG_TASK_DELAY_ACCT
  o The I/O nice of a process/thread can be changed with the 'i' key
  0.3.1
  ~~~~~
  o Fixed the ioprio syscall detection when running on i386/x86_64
  o Fixed interaction between --accumulated and --only
  o Fixed column sorting with --accumulated
  0.3
  ~~~
  o -P is now fully implemented and is dynamically toggled with 'p'
  o Show the I/O priority
  o Added the --accumulated, --kilobytes, --time and --quiet options</changelog>
  <changelog author="pth@suse.de" date="1283774400">- Apply patch from author to adapt iotop to different alignments
  on 64 Bit systems (bnc#617281).</changelog>
  <changelog author="pth@suse.de" date="1283860800">- Rename alignment patch.</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1301313600">- update to 0.4.3:
  * the netlink message parsing code was fixed to accept alignment padding
  * UTF-8 output is now forced even if the locale is misconfigured
  * the semantic of the 'a' key was changed to show stats since iotop was
    started
- changes from 0.4.2:
  * workaround for an ncurses bug where UTF-8 strings are misprinted
  * ioprio support for the armel and hppa architectures was added
  * a possible incompatibility with Linux 2.6.37 on 64-bit systems was fixed
  * iotop does not crash anymore when the locale is incorrectly configured</changelog>
  <changelog author="saschpe@suse.de" date="1301486400">- Remove authors from %%description
- Change "python ./setup.py" calls to "python setup.py"</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1320062400">- update to 0.4.4:
  * cosmetic fixes, including a better error message when missing root
    credentials</changelog>
  <changelog author="zaitor@opensuse.org" date="1362312000">- Update to version 0.5:
  + Adapt the display to the maximum pid width.
  + Include both total and actual disk bandwidth in the summary.
  + Conversion to Python 3.
  + Installation to sbin instead of bin.</changelog>
  <changelog author="pth@suse.de" date="1372334400">- Update to 0.6:
  * Clean up the terminal on exit
  * Stop busy looping on exit in certain conditions
  * Restored UTF-8 support with python2
  * Releases are now gpg signed with key "4096R/4D23A27E 2013-05-26"</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Cleanup spec file with spec-cleaner
- Remove no longer needed iotop-rpmlintrc
- Build cleanup
- Add gpg signature
- Use fdupes to remove duplicates</changelog>
  <changelog author="mvetter@suse.com" date="1519214400">- bsc#1081915: Port to python3:
  * Add iotop-0.6-python3_build.patch: Upstream commit to fix
    python build by replacing itervalues() with values(). ID is
    99c8d7cedce81f17b851954d94bfa73787300599
  * Add iotop-0.6-python3-header.patch: Replace header to use
    python3
- Add iotop-0.6-noendcurses.patch: to prevent problems when closing
  terminal while running iotop (rh#1035503)
- Run spec-cleaner:
  * Remove py_requires
  * Use man macro
- Drop condition around noarch</changelog>
  <changelog author="ldevulder@suse.com" date="1527595200">- Add iotop-0.60-fix-proc-status-split.patch: Upstream commit to
  fix crash when /proc/*/status doesn't have tab character (this
  can be the case with vserver kernels)
- Add iotop-0.6-ignore-invalid-lines-in-proc-status.patch: Upstream
  commit to fix crash when /proc/*/status has invalid lines</changelog>
</package>
<package pkgid="e39af7e152f32d8685020fb03305e7d062f40b9cb3018907a8e8be5bca2212d2" name="iotop" arch="src">
  <version epoch="0" ver="0.6" rel="lp150.3.3.1"/>
  <changelog author="pth@suse.de" date="1202299200">- Initial package</changelog>
  <changelog author="pth@suse.de" date="1202817600">- Add missing requires for python-curses</changelog>
  <changelog author="pth@suse.de" date="1205496000">- Include a copy of GPL2 (bnc#370246).</changelog>
  <changelog author="aj@suse.de" date="1205928000">- Fix build (really include COPYING).
- Fix rpmlint warnings about "useless-explicit-requires python" and
  "redundant-prefix-tag"</changelog>
  <changelog author="pth@suse.de" date="1215691200">- Update to 0.2.1. Changes since 0.1:
  - 0.2.1:
  * UTF-8 strings are now correctly handled
  - 0.2
  * Misconfigured terminals (TERM=xterm-color) are tolerated
  * Added the --only option to only show processes or threads actually
    doing I/O
  * Typing 'o' dynamically toggles the --only option
  * Cosmetic fixes as well as minor bug fixes
  * Re-organized code to import vanilla pynl80211
  * Added workaround KERNBUG display in -P</changelog>
  <changelog author="pth@suse.de" date="1218456000">- Add rpmlintrc file.</changelog>
  <changelog author="pth@suse.de" date="1218542400">- Remove py_requires and the rpmlintrc filters for warnings
  resulting from the use of it.
- Remove superfluous BuildRequires for python.</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="pth@suse.de" date="1283428800">- Add py_requires
- Update to 0.4.1. Changes since 0.2.1:
  o Portability fix
  o Better reporting of missing requirements
  0.4
  ~~~
  o Compatibility with python2.4 using the ctypes module
  o Stopped using setuptools in favor of straight distutils
  0.3.2
  ~~~~~
  o Split long command lines in the middle instead of cutting them at the end
  o Added a heuristic to detect kernels without CONFIG_TASK_DELAY_ACCT
  o The I/O nice of a process/thread can be changed with the 'i' key
  0.3.1
  ~~~~~
  o Fixed the ioprio syscall detection when running on i386/x86_64
  o Fixed interaction between --accumulated and --only
  o Fixed column sorting with --accumulated
  0.3
  ~~~
  o -P is now fully implemented and is dynamically toggled with 'p'
  o Show the I/O priority
  o Added the --accumulated, --kilobytes, --time and --quiet options</changelog>
  <changelog author="pth@suse.de" date="1283774400">- Apply patch from author to adapt iotop to different alignments
  on 64 Bit systems (bnc#617281).</changelog>
  <changelog author="pth@suse.de" date="1283860800">- Rename alignment patch.</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1301313600">- update to 0.4.3:
  * the netlink message parsing code was fixed to accept alignment padding
  * UTF-8 output is now forced even if the locale is misconfigured
  * the semantic of the 'a' key was changed to show stats since iotop was
    started
- changes from 0.4.2:
  * workaround for an ncurses bug where UTF-8 strings are misprinted
  * ioprio support for the armel and hppa architectures was added
  * a possible incompatibility with Linux 2.6.37 on 64-bit systems was fixed
  * iotop does not crash anymore when the locale is incorrectly configured</changelog>
  <changelog author="saschpe@suse.de" date="1301486400">- Remove authors from %%description
- Change "python ./setup.py" calls to "python setup.py"</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1320062400">- update to 0.4.4:
  * cosmetic fixes, including a better error message when missing root
    credentials</changelog>
  <changelog author="zaitor@opensuse.org" date="1362312000">- Update to version 0.5:
  + Adapt the display to the maximum pid width.
  + Include both total and actual disk bandwidth in the summary.
  + Conversion to Python 3.
  + Installation to sbin instead of bin.</changelog>
  <changelog author="pth@suse.de" date="1372334400">- Update to 0.6:
  * Clean up the terminal on exit
  * Stop busy looping on exit in certain conditions
  * Restored UTF-8 support with python2
  * Releases are now gpg signed with key "4096R/4D23A27E 2013-05-26"</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Cleanup spec file with spec-cleaner
- Remove no longer needed iotop-rpmlintrc
- Build cleanup
- Add gpg signature
- Use fdupes to remove duplicates</changelog>
  <changelog author="mvetter@suse.com" date="1519214400">- bsc#1081915: Port to python3:
  * Add iotop-0.6-python3_build.patch: Upstream commit to fix
    python build by replacing itervalues() with values(). ID is
    99c8d7cedce81f17b851954d94bfa73787300599
  * Add iotop-0.6-python3-header.patch: Replace header to use
    python3
- Add iotop-0.6-noendcurses.patch: to prevent problems when closing
  terminal while running iotop (rh#1035503)
- Run spec-cleaner:
  * Remove py_requires
  * Use man macro
- Drop condition around noarch</changelog>
  <changelog author="ldevulder@suse.com" date="1527595200">- Add iotop-0.60-fix-proc-status-split.patch: Upstream commit to
  fix crash when /proc/*/status doesn't have tab character (this
  can be the case with vserver kernels)
- Add iotop-0.6-ignore-invalid-lines-in-proc-status.patch: Upstream
  commit to fix crash when /proc/*/status has invalid lines</changelog>
</package>
<package pkgid="d236ab58a9c9e864f4e99284a081a9dc0a0d30fd8c0d982c98e96fee3db26e1c" name="iscsiuio" arch="x86_64">
  <version epoch="0" ver="0.7.8.2" rel="lp150.9.3.1"/>
  <changelog author="lduncan@suse.com" date="1504699200">- Start iscsi logins before remote filesystems (bsc#1028323),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1512216000">- Added fixes for working with latest gcc (7.2.1),
  updating: open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1513252800">- Fix vulnerabilities found in iscsiuio by qualsys (bsc#1072312),
  updating: open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1516622400">- Update to latest upstream vesion 2.0.876, with very few
  SUSE-specific modifications, namely around things upstream
  does not care about, like SUSE-specific systemd files. Also,
  version number modified to add "-suse", as usual. See
  the Changelog file for more details on changes in this
  upstream version.
  This replaces open-iscsi-2.0.875-suse.tar.bz2 with
  open-iscsi-2.0.876-suse.tar.bz2, and resets
  open-iscsi-SUSE-latest.diff.bz2 to contain only changes
  since the 2.0.876-suse tag.
  These changes added a new libopeniscsiusr.so library, as
  well as include files under a new open-iscsi-dev package,
  if you want to link against this library.
  The SPEC file was also cleaned up using spec-cleaner.</changelog>
  <changelog author="lduncan@suse.com" date="1516708800">- Removed the "rpm/" source directory from both the
  open-iscsi-2.0.876-suse.tar.bz2  and open-iscsi-SUSE-latest.diff.bz2
  files, since they are not needed for building and are not part
  of the upstream sources. They are still available under the
  git repository at github.com/hreinecke/open-iscsi.git. This means
  that changes to the spec file or the changes file will no longer
  require a change to the "*SUSE-latest*" file.</changelog>
  <changelog author="jengelh@inai.de" date="1518004800">- Trim filler wording from description.
  Update old commands/RPM variables to macros.
- Implement shared library packaging guideline.
- Do not let fdupes run across partitions.</changelog>
  <changelog author="lduncan@suse.com" date="1519128000">- Fix ARP booting issue with different subnets
  (bsc#1058463), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1519214400">- Ensure correct dependencies: main package must depend
  on (new) libopeniscsiusr package, and devel package
  must depend on main package (updating spec file)</changelog>
  <changelog author="lduncan@suse.com" date="1521720000">- Cleaned up complaints by gcc-8 about strings (bsc#1084640)
- Fixed rpmlint complaint about libopeniscsiusr summary
  not starting with a capital letter
- Fixed libopeniscsiusr global variable overload
- No functional changes. This updates:
  * open-iscsi-SUSE-latest.diff.bz2, and
  * open-iscsi.spec</changelog>
  <changelog author="lduncan@suse.com" date="1523620800">- Added 2 upstream commits to address issue of iscsi_if.h
  stayig in sync with kernel vesion (bsc#1086344), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524052800">- Added upstream patch to allow host_id of 0 (bsc#1089687),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524484800">- Ensure we can get qedi transport name (bsc#1090275), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1527768000">- Fix a core dump which can occur if iscsiuio is started then
  immediately stopped (bsc#1094797), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1529064000">- Updated SPEC file to use "%license" for COPYING file</changelog>
  <changelog author="lduncan@suse.com" date="1533643200">- Update to latest upstream, including fixes for iscsiuio
  (bsc#1100349), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1535716800">- iscsiuio: limit retries of dhpcv6 (bsc#1106694), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1536753600">- Use libkmod instead of running modprobe (bsc#1106685), updating
  the spec file, and:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540123200">- Restore space to output of "iscsiadm -m node" (bsc#1111608),
  from upstream commit, updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382400">- New library version needs to Obsolete the prevoius version,
  and add a note about *not* editing the SPEC file directly,
  both updating the SPEC file</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382401">- when iscsid started up and found stale sessions it tried
  forever to reconnect them, during which time the session
  info was printed incorrectly. Fix that printing, and add
  ability to limit reconnect retries (bsc#1088389), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="11c5c2b65dfc35e4e0b179b0842f3fb4568f9d1377709b34c9b57f98c4082965" name="iscsiuio" arch="x86_64">
  <version epoch="0" ver="0.7.8.2" rel="lp150.9.6.1"/>
  <changelog author="lduncan@suse.com" date="1516622400">- Update to latest upstream vesion 2.0.876, with very few
  SUSE-specific modifications, namely around things upstream
  does not care about, like SUSE-specific systemd files. Also,
  version number modified to add "-suse", as usual. See
  the Changelog file for more details on changes in this
  upstream version.
  This replaces open-iscsi-2.0.875-suse.tar.bz2 with
  open-iscsi-2.0.876-suse.tar.bz2, and resets
  open-iscsi-SUSE-latest.diff.bz2 to contain only changes
  since the 2.0.876-suse tag.
  These changes added a new libopeniscsiusr.so library, as
  well as include files under a new open-iscsi-dev package,
  if you want to link against this library.
  The SPEC file was also cleaned up using spec-cleaner.</changelog>
  <changelog author="lduncan@suse.com" date="1516708800">- Removed the "rpm/" source directory from both the
  open-iscsi-2.0.876-suse.tar.bz2  and open-iscsi-SUSE-latest.diff.bz2
  files, since they are not needed for building and are not part
  of the upstream sources. They are still available under the
  git repository at github.com/hreinecke/open-iscsi.git. This means
  that changes to the spec file or the changes file will no longer
  require a change to the "*SUSE-latest*" file.</changelog>
  <changelog author="jengelh@inai.de" date="1518004800">- Trim filler wording from description.
  Update old commands/RPM variables to macros.
- Implement shared library packaging guideline.
- Do not let fdupes run across partitions.</changelog>
  <changelog author="lduncan@suse.com" date="1519128000">- Fix ARP booting issue with different subnets
  (bsc#1058463), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1519214400">- Ensure correct dependencies: main package must depend
  on (new) libopeniscsiusr package, and devel package
  must depend on main package (updating spec file)</changelog>
  <changelog author="lduncan@suse.com" date="1521720000">- Cleaned up complaints by gcc-8 about strings (bsc#1084640)
- Fixed rpmlint complaint about libopeniscsiusr summary
  not starting with a capital letter
- Fixed libopeniscsiusr global variable overload
- No functional changes. This updates:
  * open-iscsi-SUSE-latest.diff.bz2, and
  * open-iscsi.spec</changelog>
  <changelog author="lduncan@suse.com" date="1523620800">- Added 2 upstream commits to address issue of iscsi_if.h
  stayig in sync with kernel vesion (bsc#1086344), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524052800">- Added upstream patch to allow host_id of 0 (bsc#1089687),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524484800">- Ensure we can get qedi transport name (bsc#1090275), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1527768000">- Fix a core dump which can occur if iscsiuio is started then
  immediately stopped (bsc#1094797), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1529064000">- Updated SPEC file to use "%license" for COPYING file</changelog>
  <changelog author="lduncan@suse.com" date="1533643200">- Update to latest upstream, including fixes for iscsiuio
  (bsc#1100349), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1535716800">- iscsiuio: limit retries of dhpcv6 (bsc#1106694), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1536753600">- Use libkmod instead of running modprobe (bsc#1106685), updating
  the spec file, and:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540123200">- Restore space to output of "iscsiadm -m node" (bsc#1111608),
  from upstream commit, updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382400">- New library version needs to Obsolete the prevoius version,
  and add a note about *not* editing the SPEC file directly,
  both updating the SPEC file</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382401">- when iscsid started up and found stale sessions it tried
  forever to reconnect them, during which time the session
  info was printed incorrectly. Fix that printing, and add
  ability to limit reconnect retries (bsc#1088389), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540728000">- Do not allow multiple sessions just because they were started
  in parallel (bsc#1107753)</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540728001">- iscsiuio: Do not flush tx queue on each uio interrupt. This
  makes ping to such NICs work better (bsc#1102589)</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1541505600">- Update idbm.c files to stop i586 string overflow warnings,
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="c363490af963f51ba490025e2f10531908845b9c588ff8e599c2419899b4110f" name="issue-generator" arch="noarch">
  <version epoch="0" ver="1.5" rel="lp150.3.3.1"/>
  <changelog author="kukuk@suse.de" date="1477656000">- Initial version</changelog>
  <changelog author="kukuk@suse.de" date="1478001600">- Add directories for udev to filelist</changelog>
  <changelog author="kukuk@suse.de" date="1478088000">- Update to version 1.0</changelog>
  <changelog author="kukuk@suse.de" date="1479211200">- Use correct systemd macros</changelog>
  <changelog author="kukuk@suse.de" date="1479211201">- Update to version 1.1
  - fix several typos
  - relead agetty if we modify /run/issue</changelog>
  <changelog author="kukuk@suse.de" date="1479902400">- Update to version 1.2
  - add additional docu</changelog>
  <changelog author="kukuk@suse.de" date="1480075200">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.de" date="1490702400">- Update to version 1.3
  - make list of network interfaces configureable</changelog>
  <changelog author="kukuk@suse.de" date="1496232000">- Remove ghost entry for /etc/issue [bsc#1038526]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1511870400">- Don't require systemd: if it's there, we will use it, if it is
  not there like in a base container image, there is nothing to do
  for us.</changelog>
  <changelog author="kukuk@suse.de" date="1511870401">- Use official systemd macros in %post install</changelog>
  <changelog author="kukuk@suse.com" date="1512734400">- Readd require for systemd, else package will be installed too
  early and services will never be enabled [bsc#1071776]</changelog>
  <changelog author="kukuk@suse.de" date="1513166400">- Enable more network devices to be shown on s390x [bsc#1071776]
- Remove systemd require again, systemd-preset-branding is fixed.</changelog>
  <changelog author="kukuk@suse.de" date="1518004800">- Update to version 1.4
  - check if agetty is available
  - adjust to changed ssh-keygen output</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1526644800">- Update to version 1.5
  - don't replace issue file or reload agetty if there were no
    changes (found due to [bsc#1085196]).</changelog>
</package>
<package pkgid="562485fabaef625b402289553e77098f38a3cfc7628e7854b030d1664270078b" name="issue-generator" arch="src">
  <version epoch="0" ver="1.5" rel="lp150.3.3.1"/>
  <changelog author="kukuk@suse.de" date="1477656000">- Initial version</changelog>
  <changelog author="kukuk@suse.de" date="1478001600">- Add directories for udev to filelist</changelog>
  <changelog author="kukuk@suse.de" date="1478088000">- Update to version 1.0</changelog>
  <changelog author="kukuk@suse.de" date="1479211200">- Use correct systemd macros</changelog>
  <changelog author="kukuk@suse.de" date="1479211201">- Update to version 1.1
  - fix several typos
  - relead agetty if we modify /run/issue</changelog>
  <changelog author="kukuk@suse.de" date="1479902400">- Update to version 1.2
  - add additional docu</changelog>
  <changelog author="kukuk@suse.de" date="1480075200">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.de" date="1490702400">- Update to version 1.3
  - make list of network interfaces configureable</changelog>
  <changelog author="kukuk@suse.de" date="1496232000">- Remove ghost entry for /etc/issue [bsc#1038526]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1511870400">- Don't require systemd: if it's there, we will use it, if it is
  not there like in a base container image, there is nothing to do
  for us.</changelog>
  <changelog author="kukuk@suse.de" date="1511870401">- Use official systemd macros in %post install</changelog>
  <changelog author="kukuk@suse.com" date="1512734400">- Readd require for systemd, else package will be installed too
  early and services will never be enabled [bsc#1071776]</changelog>
  <changelog author="kukuk@suse.de" date="1513166400">- Enable more network devices to be shown on s390x [bsc#1071776]
- Remove systemd require again, systemd-preset-branding is fixed.</changelog>
  <changelog author="kukuk@suse.de" date="1518004800">- Update to version 1.4
  - check if agetty is available
  - adjust to changed ssh-keygen output</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1526644800">- Update to version 1.5
  - don't replace issue file or reload agetty if there were no
    changes (found due to [bsc#1085196]).</changelog>
</package>
<package pkgid="c34991af9088c9f5e86f6292eb19aa65b91d78c561da329bf7466348261f7401" name="issue-generator" arch="noarch">
  <version epoch="0" ver="1.6" rel="lp150.3.6.2"/>
  <changelog author="kukuk@suse.de" date="1477656000">- Initial version</changelog>
  <changelog author="kukuk@suse.de" date="1478001600">- Add directories for udev to filelist</changelog>
  <changelog author="kukuk@suse.de" date="1478088000">- Update to version 1.0</changelog>
  <changelog author="kukuk@suse.de" date="1479211200">- Use correct systemd macros</changelog>
  <changelog author="kukuk@suse.de" date="1479211201">- Update to version 1.1
  - fix several typos
  - relead agetty if we modify /run/issue</changelog>
  <changelog author="kukuk@suse.de" date="1479902400">- Update to version 1.2
  - add additional docu</changelog>
  <changelog author="kukuk@suse.de" date="1480075200">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.de" date="1490702400">- Update to version 1.3
  - make list of network interfaces configureable</changelog>
  <changelog author="kukuk@suse.de" date="1496232000">- Remove ghost entry for /etc/issue [bsc#1038526]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1511870400">- Don't require systemd: if it's there, we will use it, if it is
  not there like in a base container image, there is nothing to do
  for us.</changelog>
  <changelog author="kukuk@suse.de" date="1511870401">- Use official systemd macros in %post install</changelog>
  <changelog author="kukuk@suse.com" date="1512734400">- Readd require for systemd, else package will be installed too
  early and services will never be enabled [bsc#1071776]</changelog>
  <changelog author="kukuk@suse.de" date="1513166400">- Enable more network devices to be shown on s390x [bsc#1071776]
- Remove systemd require again, systemd-preset-branding is fixed.</changelog>
  <changelog author="kukuk@suse.de" date="1518004800">- Update to version 1.4
  - check if agetty is available
  - adjust to changed ssh-keygen output</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1526644800">- Update to version 1.5
  - don't replace issue file or reload agetty if there were no
    changes (found due to [bsc#1085196]).</changelog>
  <changelog author="kukuk@suse.de" date="1528113600">- Update to version 1.6
  - Fix permission of /run/issue [bsc#1095697]</changelog>
</package>
<package pkgid="0cf954fa211f494319e9913b36a8fa3ecbf92306f98d09feb9594f1017bdf88c" name="issue-generator" arch="src">
  <version epoch="0" ver="1.6" rel="lp150.3.6.2"/>
  <changelog author="kukuk@suse.de" date="1477656000">- Initial version</changelog>
  <changelog author="kukuk@suse.de" date="1478001600">- Add directories for udev to filelist</changelog>
  <changelog author="kukuk@suse.de" date="1478088000">- Update to version 1.0</changelog>
  <changelog author="kukuk@suse.de" date="1479211200">- Use correct systemd macros</changelog>
  <changelog author="kukuk@suse.de" date="1479211201">- Update to version 1.1
  - fix several typos
  - relead agetty if we modify /run/issue</changelog>
  <changelog author="kukuk@suse.de" date="1479902400">- Update to version 1.2
  - add additional docu</changelog>
  <changelog author="kukuk@suse.de" date="1480075200">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.de" date="1490702400">- Update to version 1.3
  - make list of network interfaces configureable</changelog>
  <changelog author="kukuk@suse.de" date="1496232000">- Remove ghost entry for /etc/issue [bsc#1038526]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1511870400">- Don't require systemd: if it's there, we will use it, if it is
  not there like in a base container image, there is nothing to do
  for us.</changelog>
  <changelog author="kukuk@suse.de" date="1511870401">- Use official systemd macros in %post install</changelog>
  <changelog author="kukuk@suse.com" date="1512734400">- Readd require for systemd, else package will be installed too
  early and services will never be enabled [bsc#1071776]</changelog>
  <changelog author="kukuk@suse.de" date="1513166400">- Enable more network devices to be shown on s390x [bsc#1071776]
- Remove systemd require again, systemd-preset-branding is fixed.</changelog>
  <changelog author="kukuk@suse.de" date="1518004800">- Update to version 1.4
  - check if agetty is available
  - adjust to changed ssh-keygen output</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1526644800">- Update to version 1.5
  - don't replace issue file or reload agetty if there were no
    changes (found due to [bsc#1085196]).</changelog>
  <changelog author="kukuk@suse.de" date="1528113600">- Update to version 1.6
  - Fix permission of /run/issue [bsc#1095697]</changelog>
</package>
<package pkgid="259a47efc169fe2facce2e8ea046eabc826a37ec032639424d0277c7d9417d65" name="java-10-openjdk" arch="src">
  <version epoch="0" ver="10.0.2.0" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516104000">- Recommend tzdata-java8 instead of depending on it. This fixes
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
</package>
<package pkgid="1e25ac2370970d6d71ab2af36b24d59cf5823662c63a0adc2bea530ab1ba97f2" name="java-10-openjdk" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516104000">- Recommend tzdata-java8 instead of depending on it. This fixes
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
</package>
<package pkgid="0454b1a03a3100404ae367007661a70047f2bf0e327e088bde05e728a3bc2bc5" name="java-10-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516104000">- Recommend tzdata-java8 instead of depending on it. This fixes
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
</package>
<package pkgid="43eaa4c7617495c421f8164478d48968dfbe76745627fc9cf740f843b3f64a6e" name="java-10-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516104000">- Recommend tzdata-java8 instead of depending on it. This fixes
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
</package>
<package pkgid="a23f635a978f23bbd9b4ac9230fdbe7e00596ecb8f505de78ed9614b6122461d" name="java-10-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516104000">- Recommend tzdata-java8 instead of depending on it. This fixes
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
</package>
<package pkgid="3b918aaea3b4963a337acdfc842ba4bae3bfef955305abd4b90f8ac85d5877f2" name="java-10-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516104000">- Recommend tzdata-java8 instead of depending on it. This fixes
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
</package>
<package pkgid="184a4a0673c83ac7eba3b06b7b3fbb61c235a87265b92ff8b1f5da190894e5dc" name="java-10-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="10.0.2.0" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516104000">- Recommend tzdata-java8 instead of depending on it. This fixes
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
</package>
<package pkgid="566f1476e273bafdbab017c45e77d8627f6839c1080f3f509e8c2422bdbc8709" name="java-10-openjdk-jmods" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516104000">- Recommend tzdata-java8 instead of depending on it. This fixes
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
</package>
<package pkgid="163515dfe8f2b3abc514c8e5c30512f9c957f0c13b704e37dadae719c8fa6013" name="java-10-openjdk-src" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516104000">- Recommend tzdata-java8 instead of depending on it. This fixes
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
</package>
<package pkgid="a2bce2ec24186cfd79ab6e291c380c6bcd0f35ba643b971e7f414f1b6c78ff1c" name="java-11-openjdk" arch="src">
  <version epoch="0" ver="11.0.0.0~24" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1525953600">- Fix s390x build, since INCLUDE_SA is false by default on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526040000">- Update to ustream tag jdk-11+13
  * Fixes:
    + S4842658: DefaultListModel and DefaultComboBoxModel should
    support addAll (Collection c)
    + S6574555: PNGImageWriter incorrectly sets bKGD chunk
    + S6788458: PNGImageReader ignores tRNS chunk while reading
    non-indexed RGB/Gray images
    + S8153532: Add @throws NPE javadoc to
    UIManager.setLookAndFeel(String) method description
    + S8154463: New failure of
    closed/java/awt/font/Outline/OutlineInvarianceTest.java
    + S8171277: Elliptic Curves for Security in Crypto
    + S8176717: GC log file handle leaked to child processes
    + S8181594: Efficient and constant-time modular arithmetic
    + S8181910: [macos] Support dark title bars on macOS
    + S8185034: Cleanup and consolidate Metaspace coding
    + S8187123: (reflect) Class#getCanonicalName and
    Class#getSimpleName is a part of performance issue
    + S8187392: Deprecated methods in the peers can be removed
    + S8189687: Swing: Invalid position of candidate pop-up of
    InputMethod in Hi-DPI on Windows
    + S8189916: Dynamic Constant support for Sparc
    + S8191410: Unicode 10
    + S8194968: problem list actions for
    tools/javac/jvm/VerboseOutTest
    + S8195002: Fix test/hotspot/jtreg/gtest/GTestWrapper.java on
    Alpine/Musl
    + S8195717: test java/lang/invoke/MethodHandlesTest timed out
    running testAsCollector1
    + S8196113: Remove the Compact Profile builds
    + S8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + S8197388: Added not existing bug id in jdk/ProblemList.txt
    + S8197447: LogCompilation throws "couldn't find bytecode"
    + S8197954: Remove unnecessary intermediary APIs from AppCDS
    implementation
    + S8198342: Test FileSystemViewListenerLeak.java is unstable
    + S8199067: [REDO] NMT: Enhance thread stack tracking
    + S8199196: Add javadoc support for preview features
    + S8199382: [TESTBUG] Open source VM testbase JDI tests
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8199852: Print more information about class loaders in
    LinkageErrors.
    + S8199912: jshell tool: /open from URI
    + S8199932: Missing copyright header in AWT source code
    + S8200083: Bump bootjdk requirement for JDK 11 to JDK 10
    + S8200094: Turkish locale reports NPE No enum constant
    com.sun.source.doctree.DocTree.Kind.S?NCE
    + S8200146: Remove the appletviewer launcher
    + S8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + S8200372: String::trim JavaDoc should clarify meaning of space
    + S8200557: OopStorage parallel iteration scales poorly
    + S8200716: Object propertyIsEnumerable buggy behavior on short
    integer-string key
    + S8200729: Conditional compilation of GCs
    + S8201138: Defect in XMLEventReader.getElementText() may cause
    data to be skipped, duplicated or otherwise result in a
    ClassCastException
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201492: Properly implement non-contiguous generations for
    Reference discovery
    + S8201524: [AIX] Don't link libfontmanager against
    libawt_headless
    + S8201572: Improve Metaspace Statistics
    + S8201598: Fix for 8181910: Support dark title bars on macOS
    broke the MacOS build
    + S8201602: ARM32 - Minimal Dynamic Constant support
    + S8201626: Typo in MakeWindowAlwaysOnTop test
    + S8201640: Use _ref_processor_* member variables directly in
    G1CollectedHeap
    + S8201793: (ref) Reference object should not support cloning
    + S8202017: Merge Reference Enqueuing phase with phase 3 of
    Reference processing
    + S8202018: Move card table clear before enqueuing pending
    references
    + S8202021: Improve variable naming in ReferenceProcesso
    + S8202050: Add javax/sound/midi/Sequencer/Recording.java to
    the problemList
    + S8202080: Introduce ordering semantics for Atomic::add and
    other RMW atomics
    + S8202083: Remove explicit CMS checks in CardTableBarrierSet
    + S8202143: Parts of 8193435 added in merge change set.
    + S8202181: Correctly specify size of hostname buffer in Unix
    Inet*AddressImpl_getLocalHostName implementations
    + S8202291: java/rmi/Naming/LookupIPv6.java failed with
    Connection refused
    + S8202301: Add tests related to JDK-8196572 to the ProblemList
    + S8202303: LogStream should autoflush on destruction
    + S8202319: Fix compilation warnings in Solaris debug builds
    for DevStudio 12.6
    + S8202387: javac --release 11 not supported
    + S8202424: Metaspace: on chunk retirement, use correct lower
    limit on chunksize when adding blocks to free blocks list
    + S8202435: [aix] print program break as part of memory info
    into hs-err file
    + S8202447: Fix unloading_occurred to mean unloading_occurred
    + S8202465: [C1] casts should not be eliminated for interface
    types
    + S8202548: Use reservation Object when creating SpeciesData
    + S8202552: [AOT][JVMCI] Incorrect usage of INCLUDE_JVMCI and
    INCLUDE_AOT
    + S8202563: BigInteger/BigDecimal not immune to overflow,
    contrary to spec
    + S8202564: java/lang/management/ThreadMXBean/ThreadCounts.java
    fails
    + S8202565: C1 compilation crashes with
    "assert(is_double_stack() &amp;&amp; !is_virtual()) failed: type check"
    + S8202575: Remove java/lang/String/nativeEncoding/
    /StringPlatformChars.java from ProblemList
    + S8202581: failure_handler: gather more environment
    information on macOS
    + S8202582: DateTimeFormatterBuilder.parseOffsetBased
    unnecessarily calls toString()
    + S8202583: Remove experimental ClassForNamePlugin
    + S8202584: de-problem list tools/javac/jvm/VerboseOutTest
    + S8202591: Remove usage of CMSEdenChunksRecordAlways in
    defNewGeneration.cpp
    + S8202592: Remove unused EvacuateFollowersClosure
    + S8202597: javac is not inducing a notional interface if
    Object appears in an intersection type
    + S8202599: Mark intermittently failing jshell tests
    + S8202606: Deprecate AllowNonVirtualCalls option
    + S8202631: JVM_Clone to throw CloneNotSupportException for
    Reference object
    + S8202634: Metaspace: simplify SpaceManager lists
    + S8202639: Use concrete Generation classes in SerialHeap and
    CMSHeap
    + S8202640: Small C1 cleanups for BarrierSetC1
    + S8202641: Replace OOP_SINCE_SAVE_MARKS with templates
    + S8202642: Replace PAR_OOP_ITERATE with templates
    + S8202647: Add deduplicate_string function to CollectedHeap
    + S8202649: Move the Parallel GC specific task creation
    functions out of Threads
    + S8202650: Enforce group for attach listener file
    + S8202662: JFR tests fails: Could not find leak with class
    + S8202672: Build failed in metaspace.cpp with VS2017
    + S8202676: AArch64: Missing enter/leave around barrier leads
    to infinite loop
    + S8202684: Minimal VM build is broken after JDK-8199067,
    JDK-8202638
    + S8202686: Missing test case for 8200167 - final Object methods
    + S8202690: jdk/jshell/ToolBasicTest.java failed in
    testOpenFileOverHttp() and testOpenLocalFileUrl()
    + S8202709: Move oopDesc::is_archive_object to
    MetaspaceShared::is_archive_object
    + S8202711: Merge tiered compilation policies
    + S8202719: Use Collections.emptyEnumeration where possible
    + S8202722: Move marksweep_init into GC code
    + S8202744: Expired flag removal for JDK 11
    + S8202780: Remove EnqueueTask related code from
    ReferenceProcessor after JDK-8202017
    + S8202781: Fix typo in DiscoveredListIterator::complete_enqeue
    + S8202810: Remove class-for-name test
    + S8202816: Update JarSigning.keystore
- Removed patch:
  * aarch64-infinite-loop.patch
  - Integrated upstream
- Modified patch:
  * java11-improved-fonts.patch
  - Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1526299200">- s390x: avoid packaging files that are not present on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526558400">- Update to upstream tag jdk-11+14
  * Fixes:
    + S8132287: obsolete the "InlineNotify" flag option
    + S8174995: SA: clhsdb 'where -a' throws Assertion Failure with
    illegal code 236 when CDS is used
    + S8176510: java/awt/font/GlyphVector/TestLayoutFlags.java
    fails with OpenJDK
    + S8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + S8185505: AArch64: Port AOT to AArch64
    + S8189140: SystemDictionaryShared::initialize() should be
    renamed to be more meaningful
    + S8189271: Metaspace::_capacity_until_GC should be size_t
    + S8191533: jar --describe-module prints service provider class
    names in lower case
    + S8193935: Illegal countedLoops transformation
    + S8194998: broken error message for subclass of interface with
    private method
    + S8195613: [SA] HotSpotTypeDataBase.readVMLongConstants
    truncates values to int
    + S8196340: (coll) Examine overriding inherited methods in
    ArrayList and ArrayList.SubList
    + S8196360: java/awt/Dialog/SiblingChildOrder/
    /SiblingChildOrderTest.java fails
    + S8196616: java/awt/GraphicsDevice/DisplayModes/
    /CompareToXrandrTest.java fails
    + S8197948: Create test for SwingSet2 main window
    + S8198412: MonospacedGlyphWidthTest.java may fail on Solaris
    + S8198991: Move Java2D demo to the open repository
    + S8199252: [TESTBUG] Open source VM testbase system dictionary
    tests
    + S8199712: Flight Recorder
    + S8200377: String::strip, String::stripLeading,
    String::stripTrailing
    + S8201447: C1 does backedge profiling incorrectly
    + S8201491: G1 support for java.lang.ref.Reference precleaning
    + S8201532: Update idom to get correct dom depth calculation
    + S8201593: Print array length in
    ArrayIndexOutOfBoundsException.
    + S8201604: ARM64 - Build failure after JDK-8193260
    + S8202016: Use obj+offset in interpreter array access
    + S8202064: Jemmy JInternalFrameOperator: Add wait for close(),
    activate(), resize() and move() operations
    + S8202113: Reflection API is causing caller classes to leak
    + S8202289: Non-empty directory in module path is not handled
    properly at CDS/AppCDS dump time
    + S8202322: AIX: symbol visibility flags not support on xlc 12.1
    + S8202392: [TESTBUG] open source vm testbase heapdump tests
    + S8202395: AARCH64: wrong encoding for SIMD instructions zip,
    trn, uzp
    + S8202426: NPE thrown by Transformer when XMLStreamReader
    reports no xml attribute type
    + S8202476: ImageLib is broken in 32 bit Windows
    + S8202519: Crash during large AppCDS dump
    + S8202544: Hide unused exports in libzip
    + S8202553: Update FXLauncherTest as part of removing JavaFX
    from JDK
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8202580: Dashed BasicStroke randomly painted incorrectly,
    may freeze application
    + S8202614: Add ability to validate links in JavadocTester
    + S8202679: Updates on windows failures in the problem list
    + S8202683: Minimal VM should build cleanly on 64-bit platforms
    + S8202708: Add a check of opening stream for not-existing UNC
    url
    + S8202714: Create a MacroAssembler::access_load/store_at
    wrapper for AArch64
    + S8202718: Jemmy JInternalFrameOperator: Dependency with
    orders of Minimize, Maximize and Close buttons
    + S8202738: vm_version Abstract_VM_Version::internal_vm_info_string()
    returns same string for different incremental builds
    + S8202745: Remove hyphens from "out-of-bounds".
    + S8202748: jtreg :hotspot_misc group shouldn't include
    vmTestbase tests
    + S8202756: move FilterUSRTest.java to openJDK
    + S8202763: failure_handler: list open files for macOS
    + S8202764: api/java_text/SimpleDateFormat/index.html#Format
    testcases started to fail with JDK11 b12
    + S8202767: java/awt/font/GlyphVector/TestLayoutFlags.java is
    missing null check
    + S8202773: Unhandled oop in JavaThread::collect_counters
    + S8202811: Problem List some tests that leave windows open on
    the desktop
    + S8202822: Add .git to .hgignore
    + S8202824: Cleanup discrepancies in ProblemList for java_awt
    jtreg tests
    + S8202829: Implement CollectedHeap::get_safepoint_workers()
    for G1
    + S8202843: langtools ant build fails
    + S8202878:
    com/apple/laf/ScreenMenu/ScreenMenuMemoryLeakTest.java fails
    + S8202889: Remove trailing LF from perf log
    + S8202914: Let custom makefile override jmod intput dir
    locations
    + S8202915: [JAXP] Performance enhancements and cleanups in
    com.sun.org.apache.xerces.internal.impl.dtd.XMLDTDValidator
    + S8202919: JDK-8202683 broke macosx build
    + S8202920: jvm.cfg generation incorrect
    + S8202974: Backout JDK-8202683
    + S8202976: Add C1 lea patching support for x86
    + S8202993: Add support for x86 testptr/testq with register and
    address
    + S8202994: Add support for undoing last TLAB allocation
    + S8202997: Split test/jdk/:tier1 to enable better parallel
    execution
    + S8203032: PrintMetaspaceDcmd fails: Non-Class: missing from
    stdout/stderr
    + S8203059: (so) Closing a socket channel registered with
    Selector and with SO_LINGER set to 0 does not reset connection
    + S8203176: javadoc handles non-ASCII characters incorrectly.
    + S8203220: Introduce ATTRIBUTE_ALIGNED macro
    + S8203223: Signed integer overflow in ImageStrings::hash_code
    (libjimage.so)
    + S8203250: runtime/LoadClass/test-classes/Hello.java has wrong
    legal notice
    + S8203251: Non-PCH build failed after JDK-8199712 (Flight
    Recorder)
    + S8203274: 32-bit build failures after JDK-8199712 (Flight
    Recorder)
    + S8203278: AArch64/PPC64 build failures after JDK-8199712
    (Flight Recorder)
    + S8203285: Minimal VM fails to build after JDK-8199712 (Flight
    Recorder)</changelog>
  <changelog author="fstrba@suse.com" date="1526990400">- Added patch:
  * fix-s390x-and-ppc64-builds.patch
    + upstream fix for broken s390x and ppc64/ppc64le builds</changelog>
  <changelog author="fstrba@suse.com" date="1527249600">- Update to upstream tag jdk-11+15
  * Fixes:
    + S8027760: JFC schema condition should not have defaults
    + S8134537: Much nearly duplicated code for sun.misc.Signal
    support
    + S8146293: Add support for RSASSA-PSS Signature algorithm
    + S8148354: Errors targeting functional interface intersection
    types
    + S8176808: Split up metaspace.cpp
    + S8185803: JdbExprTest.sh fails in JDK10-hs nightly due to
    "Name unknown: java.lang.Long.MAX_VALUE "
    + S8192992: Test8007294.java failed: attempted to spill a
    non-spillable item
    + S8193332: MetaspaceShared::check_shared_class_loader_type is
    not used during archive creation
    + S8195098: Low latency hashtable for read-mostly scenarios
    + S8195817: JFR.stop should require name of recording
    + S8195818: JFR.start should increase autogenerated name by one
    + S8195819: Remove recording=x from jcmd JFR.check output
    + S8196048: thrown type variables should be roots in the
    minimum inference graph
    + S8196201: Generate pages to list all classes and all packages
    in javadoc output
    + S8196619: [TESTBUG] restore current version check in
    runtime/appcds/MultiReleaseJars.java
    + S8196987: Resolve disabled warnings for libzip
    + S8198315: Incomplete classpath causes NPE in TransTypes
    + S8198337: -XX:StartFlightRecording=dumponexit=true,disk=false
    doesn't work
    + S8198548: Initialization race in
    com.sun.org.apache.xerces.internal.impl.xpath.regex.Token.getRange()
    on Token.categories
    + S8199064: Test applications/jcstress/other/Test.java#id1108
    fails on Sparc
    + S8199257: [TESTBUG] Open source VM testbase metaspace tests
    + S8199271: [TESTBUG] open source VM testbase stress tests
    + S8199370: [TESTBUG] Open source vm testbase GC tests
    + S8199379: [TESTBUG] Open source vm testbase JDB tests
    + S8199384: [TESTBUG] Open source VM testbase MLVM tests
    + S8199807: AppCDS performs overly restrictive path matching
    check.
    + S8200380: String::lines
    + S8200436: String::isBlank
    + S8201331: Better test cleanup for
    jdk/jfr/api/consumer/TestRecordingFile.java
    + S8201386: Miscellaneous changes imported from jsr166 CVS
    2018-05
    + S8201627: Kerberos sequence number issues
    + S8201867: Kerberos keytabs with holes in certain places are
    parsed incorrectly
    + S8202014: Possible to receive signal before signal semaphore
    created
    + S8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + S8202305: [Graal] org.graalvm.compiler.core.test.GraphResetDebugTest
    fails with java.util.ServiceConfigurationError
    + S8202377: Modularize C2 GC barriers
    + S8202427: Enhance os::print_memory_info on Windows
    + S8202466: Test serviceability/tmtools/jstat/GcTest01.java
    fails: Number of concurrent GC events is 1, but CGCT is 0
    + S8202479: Add missing try_resolve_jobject_in_native calls
    + S8202669: Intermittent crash in
    ClassLoadingService::compute_class_size()
    + S8202685: Optimize ArrayList subList replaceAll
    + S8202710: AARCH64: sporadic jtreg test fail
    + S8202713: Create a MacroAssembler::access_load/store_at
    wrapper for S390 and PPC
    + S8202771: Migrate Unicode character tests to JDK Repo
    + S8202848: -XX:+ExecuteInternalVMTests asserts with
    "assert(cd.valid() == true) failed: failed on a valid
    DirectivesParser string"
    + S8202853: NotifyCount is not initialized
    + S8202863: Rename OopStorage inner collection classes
    + S8202978: Incorrect tmp register passed to
    MacroAssembler::load_mirror()
    + S8202989: Add missing decorators in calls to to
    arraycopy_prologue/epilogue
    + S8203196: C1 emits incorrect code due to integer overflow in
    _tableswitch keys
    + S8203215: IdealLoopTree::split_outer_loop leaves phi-nodes
    with only one input
    + S8203227: Introduce os::processor_id() for Linux and Solaris
    + S8203279: Faster rounding up to nearest power of two
    + S8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + S8203288: PPC64 and s390 fail to build after JDK-8199712
    (Flight Recorder)
    + S8203292: Print complete set of flags in the hs_err file
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203318: compiler/stable/TestStableShort.java is broken
    + S8203339: Add oopDesc::field_offset()
    + S8203341: Add a safepoint-aware Semaphore
    + S8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + S8203352: Improve java implementation of
    Integer/Long.numberOfLeadingZeros
    + S8203355: MITSHM define guarding missing
    + S8203377: Cleanup the usage of os::file_name_strcmp() in
    SharedPathsMiscInfo::check().
    + S8203381: Replace InstanceKlass::allocate_instance_handle
    with JavaCalls::construct_new_instance
    + S8203391: Update com/sun/jdi/JdbMethodExitTest.sh to pass
    valid URL[]
    + S8203398: Test test/langtools/tools/javac/options/release/
    /ReleaseOptionCurrent.java writes into the source directory
    + S8203400: Fix issue with "8199852: Print more information
    about class loaders in LinkageErrors."
    + S8203410: Zero: Disable jfr feature by default
    + S8203431: TestFloatsOnStackDeopt.java throws
    java.lang.LinkageError: loader &lt;bootstrap&gt; attempted duplicate
    class definition for
    java.lang.invoke.BoundMethodHandle$Species_LLL
    + S8203436: javac should fail early when emitting illegal
    signature attributes
    + S8203437: 8199370 broke build on linux-ppc64le (w/ GCC 4.8.5.)
    + S8203454: Minimal, Zero builds fail after JDK-8202377
    (Modularize C2 barriers)
    + S8203457: Add back missing full buffer notification
    + S8203486: skip type inference for non functional interface
    components of intersection types
    + S8203487: Typo in ICUBinary.java: s/Magin/Magic/
    + S8203490: StringTable::dump lacks a load barrier
    + S8203500: Fix broken links to Specification in "specs"
    directory
    + S8203626: ProblemList
    compiler/runtime/TestFloatsOnStackDeopt.java
    + S8203635: JFR sampler thread does not record stack info
    + S8203694: Add a safepoint-aware Semaphore - part 2
- Removed patch:
  * fix-s390x-and-ppc64-builds.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527768000">- Update to upstream tag jdk-11+16
  * Fixes:
    + S8133564: Runtime - 2nd followup to Validate JVM Command-Line
    Flag Arguments
    + S8184030: TestUseRTMLockingOptionOnUnsupportedVM - RTM
    locking optimization not supported is missing
    + S8188248: NullPointerException on generic methods
    + S8189766: whitebox failure with -Xcheck:jni
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8193717: Import resolution performance regression in JDK 9
    + S8194298: Add support for per Socket configuration of TCP
    keepalive
    + S8194630: Uninitialized initiator_address in native GSS
    + S8196202: Javadoc should not generate frames by default
    + S8196913: javadoc does not (over)write stylesheet.css
    + S8198323: testing.md not updated for repository layout change
    + S8199255: [TESTBUG] Open source VM testbase default methods
    tests
    + S8199307: NPE in
    jdk.javadoc.internal.doclets.toolkit.util.Utils.getLineNumber
    + S8199383: [TESTBUG] Open source VM testbase JVMTI tests
    + S8200172: String.split non-positive term incorrect use
    + S8200266: [Graal] Update ProblemList-graal.txt files
    + S8201518: add test for randomized iteration order of
    unmodifiable Set and Map
    + S8202178: type.getKind() for var is None instead of Error
    + S8202290: AtomicAppend tests fail on macOS 10.13 ("High
    Sierra")
    + S8202813: Move vm_weak processing from SystemDictionary to
    WeakProcessor
    + S8202832: cycle detection depends on ordering of requires
    directives
    + S8202842: G1 footprint regressions in jdk11+10
    + S8202945: OopStorage should use GlobalCounter
    + S8202947: Fix minor issues with taglets
    + S8202949: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + S8202950: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + S8203014: jcmd should output command list if no command is
    given
    + S8203028: Simplify reference processing in light of
    JDK-8175797
    + S8203041: AArch64: fix overflow in immediate cmp/cmn
    instruction
    + S8203183:
    vmTestbase/vm/mlvm/anonloader/stress/oome/heap/Test.java times
    out
    + S8203221: Makefile fixes after Flight Recorder
    + S8203225: Fix of redefining a method that removes 1 or more
    lambda expressions failed to commit test cases
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203262: Incorrect cmpxchg usage in
    MetaspaceGC::inc_capacity_until_GC
    + S8203297: java/net/URL/OpenStream.java fails intermittently
    + S8203327: Small cleanups in java.lang.ref
    + S8203328: Rename EFS in java.util.zip internals to something
    meaningful
    + S8203354: assert in
    ClassLoader::update_module_path_entry_list() could have
    incorrect message
    + S8203366: Tag added wrongly in Docs.gmk
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203369: Check for both EAGAIN and EWOULDBLOCK error codes
    + S8203370: [JVMCI] UseJVMCICompiler should imply EnableJVMCI
    + S8203455: jcmd: VM.metaspace: print loader name for anonymous
    CLDs
    + S8203488: Remove error generation from TransTypes
    + S8203497: Bump Jib format version to 1.2
    + S8203628: Optimize (masked) byte memory comparisons on x86
    + S8203686: Add JDK 11 major version to
    javax/net/ssl/compatibility/JdkRelease.java
    + S8203689: Add failure code to threaddb exception messages`
    + S8203699: java/lang/invoke/SpecialInterfaceCall fails with
    SIGILL on aarch64
    + S8203766: Add some instrumentation to
    jdk/java/nio/channels/Selector/RacyDeregister.java
    + S8203769: ProblemList
    test/jdk/java/util/Map/InPlaceOpsCollisions.java
    + S8203774: jdk/jfr/api/recorder/TestStartStopRecording.java
    failed due to compilation failed
    + S8203793: cacerts/VerifyCACerts.java fails with
    java.lang.Exception: At least one cacert test failed
    + S8203795: Change default compiler on Windows to VS2017
    + S8203815: add tests failed because of 8203809 to the
    ProblemList-graal
    + S8203816: add tests failed because of 8203174 to the
    ProblemList-graal
    + S8203817: Monitor::try_lock() should not call
    check_prelock_state()
    + S8203843: BasicParState::default_estimated_thread_count(false)
    can return 0 in gtest
    + S8203865: Metaspace cleanup: Remove unused MemRegion in
    VirtualSpaceNode
    + S8203881: Print erroneous size in NegativeArraySizeException
    + S8203885: ConcurrentLocksDump::dump_at_safepoint() should not
    allocate array in resource area
    + S8203886: Invoke LambdaMetafactory::altMetafactory exactly
    from the BootstrapMethodInvoker
    + S8203892: Target interface added as marker interface in calls
    to altMetafactory
    + S8203926: Problem list
    test/langtools/tools/javac/importscope/T8193717.java
    + S8203932: Windows devkit has wrong dlls in 32 bit tools dir
    + S8203938: Fix build failures from JDK-8133564</changelog>
  <changelog author="fstrba@suse.com" date="1528200000">- Change build requirement to Java 10 or 11, since Java 9 cannot
  build OpenJDK 11 any more.</changelog>
  <changelog author="fstrba@suse.com" date="1528200001">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
</package>
<package pkgid="0a997b7c259b6b816aa851ae6c27ff647c1468e7ebb6f4d7266ceb8b1dc217e1" name="java-11-openjdk" arch="x86_64">
  <version epoch="0" ver="11.0.0.0~24" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1525953600">- Fix s390x build, since INCLUDE_SA is false by default on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526040000">- Update to ustream tag jdk-11+13
  * Fixes:
    + S4842658: DefaultListModel and DefaultComboBoxModel should
    support addAll (Collection c)
    + S6574555: PNGImageWriter incorrectly sets bKGD chunk
    + S6788458: PNGImageReader ignores tRNS chunk while reading
    non-indexed RGB/Gray images
    + S8153532: Add @throws NPE javadoc to
    UIManager.setLookAndFeel(String) method description
    + S8154463: New failure of
    closed/java/awt/font/Outline/OutlineInvarianceTest.java
    + S8171277: Elliptic Curves for Security in Crypto
    + S8176717: GC log file handle leaked to child processes
    + S8181594: Efficient and constant-time modular arithmetic
    + S8181910: [macos] Support dark title bars on macOS
    + S8185034: Cleanup and consolidate Metaspace coding
    + S8187123: (reflect) Class#getCanonicalName and
    Class#getSimpleName is a part of performance issue
    + S8187392: Deprecated methods in the peers can be removed
    + S8189687: Swing: Invalid position of candidate pop-up of
    InputMethod in Hi-DPI on Windows
    + S8189916: Dynamic Constant support for Sparc
    + S8191410: Unicode 10
    + S8194968: problem list actions for
    tools/javac/jvm/VerboseOutTest
    + S8195002: Fix test/hotspot/jtreg/gtest/GTestWrapper.java on
    Alpine/Musl
    + S8195717: test java/lang/invoke/MethodHandlesTest timed out
    running testAsCollector1
    + S8196113: Remove the Compact Profile builds
    + S8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + S8197388: Added not existing bug id in jdk/ProblemList.txt
    + S8197447: LogCompilation throws "couldn't find bytecode"
    + S8197954: Remove unnecessary intermediary APIs from AppCDS
    implementation
    + S8198342: Test FileSystemViewListenerLeak.java is unstable
    + S8199067: [REDO] NMT: Enhance thread stack tracking
    + S8199196: Add javadoc support for preview features
    + S8199382: [TESTBUG] Open source VM testbase JDI tests
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8199852: Print more information about class loaders in
    LinkageErrors.
    + S8199912: jshell tool: /open from URI
    + S8199932: Missing copyright header in AWT source code
    + S8200083: Bump bootjdk requirement for JDK 11 to JDK 10
    + S8200094: Turkish locale reports NPE No enum constant
    com.sun.source.doctree.DocTree.Kind.S?NCE
    + S8200146: Remove the appletviewer launcher
    + S8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + S8200372: String::trim JavaDoc should clarify meaning of space
    + S8200557: OopStorage parallel iteration scales poorly
    + S8200716: Object propertyIsEnumerable buggy behavior on short
    integer-string key
    + S8200729: Conditional compilation of GCs
    + S8201138: Defect in XMLEventReader.getElementText() may cause
    data to be skipped, duplicated or otherwise result in a
    ClassCastException
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201492: Properly implement non-contiguous generations for
    Reference discovery
    + S8201524: [AIX] Don't link libfontmanager against
    libawt_headless
    + S8201572: Improve Metaspace Statistics
    + S8201598: Fix for 8181910: Support dark title bars on macOS
    broke the MacOS build
    + S8201602: ARM32 - Minimal Dynamic Constant support
    + S8201626: Typo in MakeWindowAlwaysOnTop test
    + S8201640: Use _ref_processor_* member variables directly in
    G1CollectedHeap
    + S8201793: (ref) Reference object should not support cloning
    + S8202017: Merge Reference Enqueuing phase with phase 3 of
    Reference processing
    + S8202018: Move card table clear before enqueuing pending
    references
    + S8202021: Improve variable naming in ReferenceProcesso
    + S8202050: Add javax/sound/midi/Sequencer/Recording.java to
    the problemList
    + S8202080: Introduce ordering semantics for Atomic::add and
    other RMW atomics
    + S8202083: Remove explicit CMS checks in CardTableBarrierSet
    + S8202143: Parts of 8193435 added in merge change set.
    + S8202181: Correctly specify size of hostname buffer in Unix
    Inet*AddressImpl_getLocalHostName implementations
    + S8202291: java/rmi/Naming/LookupIPv6.java failed with
    Connection refused
    + S8202301: Add tests related to JDK-8196572 to the ProblemList
    + S8202303: LogStream should autoflush on destruction
    + S8202319: Fix compilation warnings in Solaris debug builds
    for DevStudio 12.6
    + S8202387: javac --release 11 not supported
    + S8202424: Metaspace: on chunk retirement, use correct lower
    limit on chunksize when adding blocks to free blocks list
    + S8202435: [aix] print program break as part of memory info
    into hs-err file
    + S8202447: Fix unloading_occurred to mean unloading_occurred
    + S8202465: [C1] casts should not be eliminated for interface
    types
    + S8202548: Use reservation Object when creating SpeciesData
    + S8202552: [AOT][JVMCI] Incorrect usage of INCLUDE_JVMCI and
    INCLUDE_AOT
    + S8202563: BigInteger/BigDecimal not immune to overflow,
    contrary to spec
    + S8202564: java/lang/management/ThreadMXBean/ThreadCounts.java
    fails
    + S8202565: C1 compilation crashes with
    "assert(is_double_stack() &amp;&amp; !is_virtual()) failed: type check"
    + S8202575: Remove java/lang/String/nativeEncoding/
    /StringPlatformChars.java from ProblemList
    + S8202581: failure_handler: gather more environment
    information on macOS
    + S8202582: DateTimeFormatterBuilder.parseOffsetBased
    unnecessarily calls toString()
    + S8202583: Remove experimental ClassForNamePlugin
    + S8202584: de-problem list tools/javac/jvm/VerboseOutTest
    + S8202591: Remove usage of CMSEdenChunksRecordAlways in
    defNewGeneration.cpp
    + S8202592: Remove unused EvacuateFollowersClosure
    + S8202597: javac is not inducing a notional interface if
    Object appears in an intersection type
    + S8202599: Mark intermittently failing jshell tests
    + S8202606: Deprecate AllowNonVirtualCalls option
    + S8202631: JVM_Clone to throw CloneNotSupportException for
    Reference object
    + S8202634: Metaspace: simplify SpaceManager lists
    + S8202639: Use concrete Generation classes in SerialHeap and
    CMSHeap
    + S8202640: Small C1 cleanups for BarrierSetC1
    + S8202641: Replace OOP_SINCE_SAVE_MARKS with templates
    + S8202642: Replace PAR_OOP_ITERATE with templates
    + S8202647: Add deduplicate_string function to CollectedHeap
    + S8202649: Move the Parallel GC specific task creation
    functions out of Threads
    + S8202650: Enforce group for attach listener file
    + S8202662: JFR tests fails: Could not find leak with class
    + S8202672: Build failed in metaspace.cpp with VS2017
    + S8202676: AArch64: Missing enter/leave around barrier leads
    to infinite loop
    + S8202684: Minimal VM build is broken after JDK-8199067,
    JDK-8202638
    + S8202686: Missing test case for 8200167 - final Object methods
    + S8202690: jdk/jshell/ToolBasicTest.java failed in
    testOpenFileOverHttp() and testOpenLocalFileUrl()
    + S8202709: Move oopDesc::is_archive_object to
    MetaspaceShared::is_archive_object
    + S8202711: Merge tiered compilation policies
    + S8202719: Use Collections.emptyEnumeration where possible
    + S8202722: Move marksweep_init into GC code
    + S8202744: Expired flag removal for JDK 11
    + S8202780: Remove EnqueueTask related code from
    ReferenceProcessor after JDK-8202017
    + S8202781: Fix typo in DiscoveredListIterator::complete_enqeue
    + S8202810: Remove class-for-name test
    + S8202816: Update JarSigning.keystore
- Removed patch:
  * aarch64-infinite-loop.patch
  - Integrated upstream
- Modified patch:
  * java11-improved-fonts.patch
  - Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1526299200">- s390x: avoid packaging files that are not present on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526558400">- Update to upstream tag jdk-11+14
  * Fixes:
    + S8132287: obsolete the "InlineNotify" flag option
    + S8174995: SA: clhsdb 'where -a' throws Assertion Failure with
    illegal code 236 when CDS is used
    + S8176510: java/awt/font/GlyphVector/TestLayoutFlags.java
    fails with OpenJDK
    + S8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + S8185505: AArch64: Port AOT to AArch64
    + S8189140: SystemDictionaryShared::initialize() should be
    renamed to be more meaningful
    + S8189271: Metaspace::_capacity_until_GC should be size_t
    + S8191533: jar --describe-module prints service provider class
    names in lower case
    + S8193935: Illegal countedLoops transformation
    + S8194998: broken error message for subclass of interface with
    private method
    + S8195613: [SA] HotSpotTypeDataBase.readVMLongConstants
    truncates values to int
    + S8196340: (coll) Examine overriding inherited methods in
    ArrayList and ArrayList.SubList
    + S8196360: java/awt/Dialog/SiblingChildOrder/
    /SiblingChildOrderTest.java fails
    + S8196616: java/awt/GraphicsDevice/DisplayModes/
    /CompareToXrandrTest.java fails
    + S8197948: Create test for SwingSet2 main window
    + S8198412: MonospacedGlyphWidthTest.java may fail on Solaris
    + S8198991: Move Java2D demo to the open repository
    + S8199252: [TESTBUG] Open source VM testbase system dictionary
    tests
    + S8199712: Flight Recorder
    + S8200377: String::strip, String::stripLeading,
    String::stripTrailing
    + S8201447: C1 does backedge profiling incorrectly
    + S8201491: G1 support for java.lang.ref.Reference precleaning
    + S8201532: Update idom to get correct dom depth calculation
    + S8201593: Print array length in
    ArrayIndexOutOfBoundsException.
    + S8201604: ARM64 - Build failure after JDK-8193260
    + S8202016: Use obj+offset in interpreter array access
    + S8202064: Jemmy JInternalFrameOperator: Add wait for close(),
    activate(), resize() and move() operations
    + S8202113: Reflection API is causing caller classes to leak
    + S8202289: Non-empty directory in module path is not handled
    properly at CDS/AppCDS dump time
    + S8202322: AIX: symbol visibility flags not support on xlc 12.1
    + S8202392: [TESTBUG] open source vm testbase heapdump tests
    + S8202395: AARCH64: wrong encoding for SIMD instructions zip,
    trn, uzp
    + S8202426: NPE thrown by Transformer when XMLStreamReader
    reports no xml attribute type
    + S8202476: ImageLib is broken in 32 bit Windows
    + S8202519: Crash during large AppCDS dump
    + S8202544: Hide unused exports in libzip
    + S8202553: Update FXLauncherTest as part of removing JavaFX
    from JDK
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8202580: Dashed BasicStroke randomly painted incorrectly,
    may freeze application
    + S8202614: Add ability to validate links in JavadocTester
    + S8202679: Updates on windows failures in the problem list
    + S8202683: Minimal VM should build cleanly on 64-bit platforms
    + S8202708: Add a check of opening stream for not-existing UNC
    url
    + S8202714: Create a MacroAssembler::access_load/store_at
    wrapper for AArch64
    + S8202718: Jemmy JInternalFrameOperator: Dependency with
    orders of Minimize, Maximize and Close buttons
    + S8202738: vm_version Abstract_VM_Version::internal_vm_info_string()
    returns same string for different incremental builds
    + S8202745: Remove hyphens from "out-of-bounds".
    + S8202748: jtreg :hotspot_misc group shouldn't include
    vmTestbase tests
    + S8202756: move FilterUSRTest.java to openJDK
    + S8202763: failure_handler: list open files for macOS
    + S8202764: api/java_text/SimpleDateFormat/index.html#Format
    testcases started to fail with JDK11 b12
    + S8202767: java/awt/font/GlyphVector/TestLayoutFlags.java is
    missing null check
    + S8202773: Unhandled oop in JavaThread::collect_counters
    + S8202811: Problem List some tests that leave windows open on
    the desktop
    + S8202822: Add .git to .hgignore
    + S8202824: Cleanup discrepancies in ProblemList for java_awt
    jtreg tests
    + S8202829: Implement CollectedHeap::get_safepoint_workers()
    for G1
    + S8202843: langtools ant build fails
    + S8202878:
    com/apple/laf/ScreenMenu/ScreenMenuMemoryLeakTest.java fails
    + S8202889: Remove trailing LF from perf log
    + S8202914: Let custom makefile override jmod intput dir
    locations
    + S8202915: [JAXP] Performance enhancements and cleanups in
    com.sun.org.apache.xerces.internal.impl.dtd.XMLDTDValidator
    + S8202919: JDK-8202683 broke macosx build
    + S8202920: jvm.cfg generation incorrect
    + S8202974: Backout JDK-8202683
    + S8202976: Add C1 lea patching support for x86
    + S8202993: Add support for x86 testptr/testq with register and
    address
    + S8202994: Add support for undoing last TLAB allocation
    + S8202997: Split test/jdk/:tier1 to enable better parallel
    execution
    + S8203032: PrintMetaspaceDcmd fails: Non-Class: missing from
    stdout/stderr
    + S8203059: (so) Closing a socket channel registered with
    Selector and with SO_LINGER set to 0 does not reset connection
    + S8203176: javadoc handles non-ASCII characters incorrectly.
    + S8203220: Introduce ATTRIBUTE_ALIGNED macro
    + S8203223: Signed integer overflow in ImageStrings::hash_code
    (libjimage.so)
    + S8203250: runtime/LoadClass/test-classes/Hello.java has wrong
    legal notice
    + S8203251: Non-PCH build failed after JDK-8199712 (Flight
    Recorder)
    + S8203274: 32-bit build failures after JDK-8199712 (Flight
    Recorder)
    + S8203278: AArch64/PPC64 build failures after JDK-8199712
    (Flight Recorder)
    + S8203285: Minimal VM fails to build after JDK-8199712 (Flight
    Recorder)</changelog>
  <changelog author="fstrba@suse.com" date="1526990400">- Added patch:
  * fix-s390x-and-ppc64-builds.patch
    + upstream fix for broken s390x and ppc64/ppc64le builds</changelog>
  <changelog author="fstrba@suse.com" date="1527249600">- Update to upstream tag jdk-11+15
  * Fixes:
    + S8027760: JFC schema condition should not have defaults
    + S8134537: Much nearly duplicated code for sun.misc.Signal
    support
    + S8146293: Add support for RSASSA-PSS Signature algorithm
    + S8148354: Errors targeting functional interface intersection
    types
    + S8176808: Split up metaspace.cpp
    + S8185803: JdbExprTest.sh fails in JDK10-hs nightly due to
    "Name unknown: java.lang.Long.MAX_VALUE "
    + S8192992: Test8007294.java failed: attempted to spill a
    non-spillable item
    + S8193332: MetaspaceShared::check_shared_class_loader_type is
    not used during archive creation
    + S8195098: Low latency hashtable for read-mostly scenarios
    + S8195817: JFR.stop should require name of recording
    + S8195818: JFR.start should increase autogenerated name by one
    + S8195819: Remove recording=x from jcmd JFR.check output
    + S8196048: thrown type variables should be roots in the
    minimum inference graph
    + S8196201: Generate pages to list all classes and all packages
    in javadoc output
    + S8196619: [TESTBUG] restore current version check in
    runtime/appcds/MultiReleaseJars.java
    + S8196987: Resolve disabled warnings for libzip
    + S8198315: Incomplete classpath causes NPE in TransTypes
    + S8198337: -XX:StartFlightRecording=dumponexit=true,disk=false
    doesn't work
    + S8198548: Initialization race in
    com.sun.org.apache.xerces.internal.impl.xpath.regex.Token.getRange()
    on Token.categories
    + S8199064: Test applications/jcstress/other/Test.java#id1108
    fails on Sparc
    + S8199257: [TESTBUG] Open source VM testbase metaspace tests
    + S8199271: [TESTBUG] open source VM testbase stress tests
    + S8199370: [TESTBUG] Open source vm testbase GC tests
    + S8199379: [TESTBUG] Open source vm testbase JDB tests
    + S8199384: [TESTBUG] Open source VM testbase MLVM tests
    + S8199807: AppCDS performs overly restrictive path matching
    check.
    + S8200380: String::lines
    + S8200436: String::isBlank
    + S8201331: Better test cleanup for
    jdk/jfr/api/consumer/TestRecordingFile.java
    + S8201386: Miscellaneous changes imported from jsr166 CVS
    2018-05
    + S8201627: Kerberos sequence number issues
    + S8201867: Kerberos keytabs with holes in certain places are
    parsed incorrectly
    + S8202014: Possible to receive signal before signal semaphore
    created
    + S8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + S8202305: [Graal] org.graalvm.compiler.core.test.GraphResetDebugTest
    fails with java.util.ServiceConfigurationError
    + S8202377: Modularize C2 GC barriers
    + S8202427: Enhance os::print_memory_info on Windows
    + S8202466: Test serviceability/tmtools/jstat/GcTest01.java
    fails: Number of concurrent GC events is 1, but CGCT is 0
    + S8202479: Add missing try_resolve_jobject_in_native calls
    + S8202669: Intermittent crash in
    ClassLoadingService::compute_class_size()
    + S8202685: Optimize ArrayList subList replaceAll
    + S8202710: AARCH64: sporadic jtreg test fail
    + S8202713: Create a MacroAssembler::access_load/store_at
    wrapper for S390 and PPC
    + S8202771: Migrate Unicode character tests to JDK Repo
    + S8202848: -XX:+ExecuteInternalVMTests asserts with
    "assert(cd.valid() == true) failed: failed on a valid
    DirectivesParser string"
    + S8202853: NotifyCount is not initialized
    + S8202863: Rename OopStorage inner collection classes
    + S8202978: Incorrect tmp register passed to
    MacroAssembler::load_mirror()
    + S8202989: Add missing decorators in calls to to
    arraycopy_prologue/epilogue
    + S8203196: C1 emits incorrect code due to integer overflow in
    _tableswitch keys
    + S8203215: IdealLoopTree::split_outer_loop leaves phi-nodes
    with only one input
    + S8203227: Introduce os::processor_id() for Linux and Solaris
    + S8203279: Faster rounding up to nearest power of two
    + S8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + S8203288: PPC64 and s390 fail to build after JDK-8199712
    (Flight Recorder)
    + S8203292: Print complete set of flags in the hs_err file
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203318: compiler/stable/TestStableShort.java is broken
    + S8203339: Add oopDesc::field_offset()
    + S8203341: Add a safepoint-aware Semaphore
    + S8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + S8203352: Improve java implementation of
    Integer/Long.numberOfLeadingZeros
    + S8203355: MITSHM define guarding missing
    + S8203377: Cleanup the usage of os::file_name_strcmp() in
    SharedPathsMiscInfo::check().
    + S8203381: Replace InstanceKlass::allocate_instance_handle
    with JavaCalls::construct_new_instance
    + S8203391: Update com/sun/jdi/JdbMethodExitTest.sh to pass
    valid URL[]
    + S8203398: Test test/langtools/tools/javac/options/release/
    /ReleaseOptionCurrent.java writes into the source directory
    + S8203400: Fix issue with "8199852: Print more information
    about class loaders in LinkageErrors."
    + S8203410: Zero: Disable jfr feature by default
    + S8203431: TestFloatsOnStackDeopt.java throws
    java.lang.LinkageError: loader &lt;bootstrap&gt; attempted duplicate
    class definition for
    java.lang.invoke.BoundMethodHandle$Species_LLL
    + S8203436: javac should fail early when emitting illegal
    signature attributes
    + S8203437: 8199370 broke build on linux-ppc64le (w/ GCC 4.8.5.)
    + S8203454: Minimal, Zero builds fail after JDK-8202377
    (Modularize C2 barriers)
    + S8203457: Add back missing full buffer notification
    + S8203486: skip type inference for non functional interface
    components of intersection types
    + S8203487: Typo in ICUBinary.java: s/Magin/Magic/
    + S8203490: StringTable::dump lacks a load barrier
    + S8203500: Fix broken links to Specification in "specs"
    directory
    + S8203626: ProblemList
    compiler/runtime/TestFloatsOnStackDeopt.java
    + S8203635: JFR sampler thread does not record stack info
    + S8203694: Add a safepoint-aware Semaphore - part 2
- Removed patch:
  * fix-s390x-and-ppc64-builds.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527768000">- Update to upstream tag jdk-11+16
  * Fixes:
    + S8133564: Runtime - 2nd followup to Validate JVM Command-Line
    Flag Arguments
    + S8184030: TestUseRTMLockingOptionOnUnsupportedVM - RTM
    locking optimization not supported is missing
    + S8188248: NullPointerException on generic methods
    + S8189766: whitebox failure with -Xcheck:jni
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8193717: Import resolution performance regression in JDK 9
    + S8194298: Add support for per Socket configuration of TCP
    keepalive
    + S8194630: Uninitialized initiator_address in native GSS
    + S8196202: Javadoc should not generate frames by default
    + S8196913: javadoc does not (over)write stylesheet.css
    + S8198323: testing.md not updated for repository layout change
    + S8199255: [TESTBUG] Open source VM testbase default methods
    tests
    + S8199307: NPE in
    jdk.javadoc.internal.doclets.toolkit.util.Utils.getLineNumber
    + S8199383: [TESTBUG] Open source VM testbase JVMTI tests
    + S8200172: String.split non-positive term incorrect use
    + S8200266: [Graal] Update ProblemList-graal.txt files
    + S8201518: add test for randomized iteration order of
    unmodifiable Set and Map
    + S8202178: type.getKind() for var is None instead of Error
    + S8202290: AtomicAppend tests fail on macOS 10.13 ("High
    Sierra")
    + S8202813: Move vm_weak processing from SystemDictionary to
    WeakProcessor
    + S8202832: cycle detection depends on ordering of requires
    directives
    + S8202842: G1 footprint regressions in jdk11+10
    + S8202945: OopStorage should use GlobalCounter
    + S8202947: Fix minor issues with taglets
    + S8202949: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + S8202950: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + S8203014: jcmd should output command list if no command is
    given
    + S8203028: Simplify reference processing in light of
    JDK-8175797
    + S8203041: AArch64: fix overflow in immediate cmp/cmn
    instruction
    + S8203183:
    vmTestbase/vm/mlvm/anonloader/stress/oome/heap/Test.java times
    out
    + S8203221: Makefile fixes after Flight Recorder
    + S8203225: Fix of redefining a method that removes 1 or more
    lambda expressions failed to commit test cases
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203262: Incorrect cmpxchg usage in
    MetaspaceGC::inc_capacity_until_GC
    + S8203297: java/net/URL/OpenStream.java fails intermittently
    + S8203327: Small cleanups in java.lang.ref
    + S8203328: Rename EFS in java.util.zip internals to something
    meaningful
    + S8203354: assert in
    ClassLoader::update_module_path_entry_list() could have
    incorrect message
    + S8203366: Tag added wrongly in Docs.gmk
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203369: Check for both EAGAIN and EWOULDBLOCK error codes
    + S8203370: [JVMCI] UseJVMCICompiler should imply EnableJVMCI
    + S8203455: jcmd: VM.metaspace: print loader name for anonymous
    CLDs
    + S8203488: Remove error generation from TransTypes
    + S8203497: Bump Jib format version to 1.2
    + S8203628: Optimize (masked) byte memory comparisons on x86
    + S8203686: Add JDK 11 major version to
    javax/net/ssl/compatibility/JdkRelease.java
    + S8203689: Add failure code to threaddb exception messages`
    + S8203699: java/lang/invoke/SpecialInterfaceCall fails with
    SIGILL on aarch64
    + S8203766: Add some instrumentation to
    jdk/java/nio/channels/Selector/RacyDeregister.java
    + S8203769: ProblemList
    test/jdk/java/util/Map/InPlaceOpsCollisions.java
    + S8203774: jdk/jfr/api/recorder/TestStartStopRecording.java
    failed due to compilation failed
    + S8203793: cacerts/VerifyCACerts.java fails with
    java.lang.Exception: At least one cacert test failed
    + S8203795: Change default compiler on Windows to VS2017
    + S8203815: add tests failed because of 8203809 to the
    ProblemList-graal
    + S8203816: add tests failed because of 8203174 to the
    ProblemList-graal
    + S8203817: Monitor::try_lock() should not call
    check_prelock_state()
    + S8203843: BasicParState::default_estimated_thread_count(false)
    can return 0 in gtest
    + S8203865: Metaspace cleanup: Remove unused MemRegion in
    VirtualSpaceNode
    + S8203881: Print erroneous size in NegativeArraySizeException
    + S8203885: ConcurrentLocksDump::dump_at_safepoint() should not
    allocate array in resource area
    + S8203886: Invoke LambdaMetafactory::altMetafactory exactly
    from the BootstrapMethodInvoker
    + S8203892: Target interface added as marker interface in calls
    to altMetafactory
    + S8203926: Problem list
    test/langtools/tools/javac/importscope/T8193717.java
    + S8203932: Windows devkit has wrong dlls in 32 bit tools dir
    + S8203938: Fix build failures from JDK-8133564</changelog>
  <changelog author="fstrba@suse.com" date="1528200000">- Change build requirement to Java 10 or 11, since Java 9 cannot
  build OpenJDK 11 any more.</changelog>
  <changelog author="fstrba@suse.com" date="1528200001">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
</package>
<package pkgid="e5827d142b89b71dfdfd585379b47e78fc0851e38e95cd424cc6b1d3c8d3170d" name="java-11-openjdk" arch="src">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.6.1"/>
  <changelog author="fstrba@suse.com" date="1528200000">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
</package>
<package pkgid="f3cf9c4bc10b772946b2df6d5ae54912b11abd692c7f039284444d5792571361" name="java-11-openjdk" arch="x86_64">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.6.1"/>
  <changelog author="fstrba@suse.com" date="1528200000">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
</package>
<package pkgid="486a7ad3ceebeadc73d0784332035cb63532ba4fda0a3014c014e3fff959cb10" name="java-11-openjdk" arch="src">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.9.1"/>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
</package>
<package pkgid="4a246b79ef68da4ea7954a999095939313495327a7746d0c491910d39fbae40c" name="java-11-openjdk" arch="x86_64">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.9.1"/>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
</package>
<package pkgid="9be0ca6667ee7f8ff9a280f99b4572c0765e936b8d13482cb5da4a1bd030de00" name="java-11-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="11.0.0.0~24" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1525953600">- Fix s390x build, since INCLUDE_SA is false by default on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526040000">- Update to ustream tag jdk-11+13
  * Fixes:
    + S4842658: DefaultListModel and DefaultComboBoxModel should
    support addAll (Collection c)
    + S6574555: PNGImageWriter incorrectly sets bKGD chunk
    + S6788458: PNGImageReader ignores tRNS chunk while reading
    non-indexed RGB/Gray images
    + S8153532: Add @throws NPE javadoc to
    UIManager.setLookAndFeel(String) method description
    + S8154463: New failure of
    closed/java/awt/font/Outline/OutlineInvarianceTest.java
    + S8171277: Elliptic Curves for Security in Crypto
    + S8176717: GC log file handle leaked to child processes
    + S8181594: Efficient and constant-time modular arithmetic
    + S8181910: [macos] Support dark title bars on macOS
    + S8185034: Cleanup and consolidate Metaspace coding
    + S8187123: (reflect) Class#getCanonicalName and
    Class#getSimpleName is a part of performance issue
    + S8187392: Deprecated methods in the peers can be removed
    + S8189687: Swing: Invalid position of candidate pop-up of
    InputMethod in Hi-DPI on Windows
    + S8189916: Dynamic Constant support for Sparc
    + S8191410: Unicode 10
    + S8194968: problem list actions for
    tools/javac/jvm/VerboseOutTest
    + S8195002: Fix test/hotspot/jtreg/gtest/GTestWrapper.java on
    Alpine/Musl
    + S8195717: test java/lang/invoke/MethodHandlesTest timed out
    running testAsCollector1
    + S8196113: Remove the Compact Profile builds
    + S8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + S8197388: Added not existing bug id in jdk/ProblemList.txt
    + S8197447: LogCompilation throws "couldn't find bytecode"
    + S8197954: Remove unnecessary intermediary APIs from AppCDS
    implementation
    + S8198342: Test FileSystemViewListenerLeak.java is unstable
    + S8199067: [REDO] NMT: Enhance thread stack tracking
    + S8199196: Add javadoc support for preview features
    + S8199382: [TESTBUG] Open source VM testbase JDI tests
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8199852: Print more information about class loaders in
    LinkageErrors.
    + S8199912: jshell tool: /open from URI
    + S8199932: Missing copyright header in AWT source code
    + S8200083: Bump bootjdk requirement for JDK 11 to JDK 10
    + S8200094: Turkish locale reports NPE No enum constant
    com.sun.source.doctree.DocTree.Kind.S?NCE
    + S8200146: Remove the appletviewer launcher
    + S8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + S8200372: String::trim JavaDoc should clarify meaning of space
    + S8200557: OopStorage parallel iteration scales poorly
    + S8200716: Object propertyIsEnumerable buggy behavior on short
    integer-string key
    + S8200729: Conditional compilation of GCs
    + S8201138: Defect in XMLEventReader.getElementText() may cause
    data to be skipped, duplicated or otherwise result in a
    ClassCastException
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201492: Properly implement non-contiguous generations for
    Reference discovery
    + S8201524: [AIX] Don't link libfontmanager against
    libawt_headless
    + S8201572: Improve Metaspace Statistics
    + S8201598: Fix for 8181910: Support dark title bars on macOS
    broke the MacOS build
    + S8201602: ARM32 - Minimal Dynamic Constant support
    + S8201626: Typo in MakeWindowAlwaysOnTop test
    + S8201640: Use _ref_processor_* member variables directly in
    G1CollectedHeap
    + S8201793: (ref) Reference object should not support cloning
    + S8202017: Merge Reference Enqueuing phase with phase 3 of
    Reference processing
    + S8202018: Move card table clear before enqueuing pending
    references
    + S8202021: Improve variable naming in ReferenceProcesso
    + S8202050: Add javax/sound/midi/Sequencer/Recording.java to
    the problemList
    + S8202080: Introduce ordering semantics for Atomic::add and
    other RMW atomics
    + S8202083: Remove explicit CMS checks in CardTableBarrierSet
    + S8202143: Parts of 8193435 added in merge change set.
    + S8202181: Correctly specify size of hostname buffer in Unix
    Inet*AddressImpl_getLocalHostName implementations
    + S8202291: java/rmi/Naming/LookupIPv6.java failed with
    Connection refused
    + S8202301: Add tests related to JDK-8196572 to the ProblemList
    + S8202303: LogStream should autoflush on destruction
    + S8202319: Fix compilation warnings in Solaris debug builds
    for DevStudio 12.6
    + S8202387: javac --release 11 not supported
    + S8202424: Metaspace: on chunk retirement, use correct lower
    limit on chunksize when adding blocks to free blocks list
    + S8202435: [aix] print program break as part of memory info
    into hs-err file
    + S8202447: Fix unloading_occurred to mean unloading_occurred
    + S8202465: [C1] casts should not be eliminated for interface
    types
    + S8202548: Use reservation Object when creating SpeciesData
    + S8202552: [AOT][JVMCI] Incorrect usage of INCLUDE_JVMCI and
    INCLUDE_AOT
    + S8202563: BigInteger/BigDecimal not immune to overflow,
    contrary to spec
    + S8202564: java/lang/management/ThreadMXBean/ThreadCounts.java
    fails
    + S8202565: C1 compilation crashes with
    "assert(is_double_stack() &amp;&amp; !is_virtual()) failed: type check"
    + S8202575: Remove java/lang/String/nativeEncoding/
    /StringPlatformChars.java from ProblemList
    + S8202581: failure_handler: gather more environment
    information on macOS
    + S8202582: DateTimeFormatterBuilder.parseOffsetBased
    unnecessarily calls toString()
    + S8202583: Remove experimental ClassForNamePlugin
    + S8202584: de-problem list tools/javac/jvm/VerboseOutTest
    + S8202591: Remove usage of CMSEdenChunksRecordAlways in
    defNewGeneration.cpp
    + S8202592: Remove unused EvacuateFollowersClosure
    + S8202597: javac is not inducing a notional interface if
    Object appears in an intersection type
    + S8202599: Mark intermittently failing jshell tests
    + S8202606: Deprecate AllowNonVirtualCalls option
    + S8202631: JVM_Clone to throw CloneNotSupportException for
    Reference object
    + S8202634: Metaspace: simplify SpaceManager lists
    + S8202639: Use concrete Generation classes in SerialHeap and
    CMSHeap
    + S8202640: Small C1 cleanups for BarrierSetC1
    + S8202641: Replace OOP_SINCE_SAVE_MARKS with templates
    + S8202642: Replace PAR_OOP_ITERATE with templates
    + S8202647: Add deduplicate_string function to CollectedHeap
    + S8202649: Move the Parallel GC specific task creation
    functions out of Threads
    + S8202650: Enforce group for attach listener file
    + S8202662: JFR tests fails: Could not find leak with class
    + S8202672: Build failed in metaspace.cpp with VS2017
    + S8202676: AArch64: Missing enter/leave around barrier leads
    to infinite loop
    + S8202684: Minimal VM build is broken after JDK-8199067,
    JDK-8202638
    + S8202686: Missing test case for 8200167 - final Object methods
    + S8202690: jdk/jshell/ToolBasicTest.java failed in
    testOpenFileOverHttp() and testOpenLocalFileUrl()
    + S8202709: Move oopDesc::is_archive_object to
    MetaspaceShared::is_archive_object
    + S8202711: Merge tiered compilation policies
    + S8202719: Use Collections.emptyEnumeration where possible
    + S8202722: Move marksweep_init into GC code
    + S8202744: Expired flag removal for JDK 11
    + S8202780: Remove EnqueueTask related code from
    ReferenceProcessor after JDK-8202017
    + S8202781: Fix typo in DiscoveredListIterator::complete_enqeue
    + S8202810: Remove class-for-name test
    + S8202816: Update JarSigning.keystore
- Removed patch:
  * aarch64-infinite-loop.patch
  - Integrated upstream
- Modified patch:
  * java11-improved-fonts.patch
  - Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1526299200">- s390x: avoid packaging files that are not present on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526558400">- Update to upstream tag jdk-11+14
  * Fixes:
    + S8132287: obsolete the "InlineNotify" flag option
    + S8174995: SA: clhsdb 'where -a' throws Assertion Failure with
    illegal code 236 when CDS is used
    + S8176510: java/awt/font/GlyphVector/TestLayoutFlags.java
    fails with OpenJDK
    + S8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + S8185505: AArch64: Port AOT to AArch64
    + S8189140: SystemDictionaryShared::initialize() should be
    renamed to be more meaningful
    + S8189271: Metaspace::_capacity_until_GC should be size_t
    + S8191533: jar --describe-module prints service provider class
    names in lower case
    + S8193935: Illegal countedLoops transformation
    + S8194998: broken error message for subclass of interface with
    private method
    + S8195613: [SA] HotSpotTypeDataBase.readVMLongConstants
    truncates values to int
    + S8196340: (coll) Examine overriding inherited methods in
    ArrayList and ArrayList.SubList
    + S8196360: java/awt/Dialog/SiblingChildOrder/
    /SiblingChildOrderTest.java fails
    + S8196616: java/awt/GraphicsDevice/DisplayModes/
    /CompareToXrandrTest.java fails
    + S8197948: Create test for SwingSet2 main window
    + S8198412: MonospacedGlyphWidthTest.java may fail on Solaris
    + S8198991: Move Java2D demo to the open repository
    + S8199252: [TESTBUG] Open source VM testbase system dictionary
    tests
    + S8199712: Flight Recorder
    + S8200377: String::strip, String::stripLeading,
    String::stripTrailing
    + S8201447: C1 does backedge profiling incorrectly
    + S8201491: G1 support for java.lang.ref.Reference precleaning
    + S8201532: Update idom to get correct dom depth calculation
    + S8201593: Print array length in
    ArrayIndexOutOfBoundsException.
    + S8201604: ARM64 - Build failure after JDK-8193260
    + S8202016: Use obj+offset in interpreter array access
    + S8202064: Jemmy JInternalFrameOperator: Add wait for close(),
    activate(), resize() and move() operations
    + S8202113: Reflection API is causing caller classes to leak
    + S8202289: Non-empty directory in module path is not handled
    properly at CDS/AppCDS dump time
    + S8202322: AIX: symbol visibility flags not support on xlc 12.1
    + S8202392: [TESTBUG] open source vm testbase heapdump tests
    + S8202395: AARCH64: wrong encoding for SIMD instructions zip,
    trn, uzp
    + S8202426: NPE thrown by Transformer when XMLStreamReader
    reports no xml attribute type
    + S8202476: ImageLib is broken in 32 bit Windows
    + S8202519: Crash during large AppCDS dump
    + S8202544: Hide unused exports in libzip
    + S8202553: Update FXLauncherTest as part of removing JavaFX
    from JDK
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8202580: Dashed BasicStroke randomly painted incorrectly,
    may freeze application
    + S8202614: Add ability to validate links in JavadocTester
    + S8202679: Updates on windows failures in the problem list
    + S8202683: Minimal VM should build cleanly on 64-bit platforms
    + S8202708: Add a check of opening stream for not-existing UNC
    url
    + S8202714: Create a MacroAssembler::access_load/store_at
    wrapper for AArch64
    + S8202718: Jemmy JInternalFrameOperator: Dependency with
    orders of Minimize, Maximize and Close buttons
    + S8202738: vm_version Abstract_VM_Version::internal_vm_info_string()
    returns same string for different incremental builds
    + S8202745: Remove hyphens from "out-of-bounds".
    + S8202748: jtreg :hotspot_misc group shouldn't include
    vmTestbase tests
    + S8202756: move FilterUSRTest.java to openJDK
    + S8202763: failure_handler: list open files for macOS
    + S8202764: api/java_text/SimpleDateFormat/index.html#Format
    testcases started to fail with JDK11 b12
    + S8202767: java/awt/font/GlyphVector/TestLayoutFlags.java is
    missing null check
    + S8202773: Unhandled oop in JavaThread::collect_counters
    + S8202811: Problem List some tests that leave windows open on
    the desktop
    + S8202822: Add .git to .hgignore
    + S8202824: Cleanup discrepancies in ProblemList for java_awt
    jtreg tests
    + S8202829: Implement CollectedHeap::get_safepoint_workers()
    for G1
    + S8202843: langtools ant build fails
    + S8202878:
    com/apple/laf/ScreenMenu/ScreenMenuMemoryLeakTest.java fails
    + S8202889: Remove trailing LF from perf log
    + S8202914: Let custom makefile override jmod intput dir
    locations
    + S8202915: [JAXP] Performance enhancements and cleanups in
    com.sun.org.apache.xerces.internal.impl.dtd.XMLDTDValidator
    + S8202919: JDK-8202683 broke macosx build
    + S8202920: jvm.cfg generation incorrect
    + S8202974: Backout JDK-8202683
    + S8202976: Add C1 lea patching support for x86
    + S8202993: Add support for x86 testptr/testq with register and
    address
    + S8202994: Add support for undoing last TLAB allocation
    + S8202997: Split test/jdk/:tier1 to enable better parallel
    execution
    + S8203032: PrintMetaspaceDcmd fails: Non-Class: missing from
    stdout/stderr
    + S8203059: (so) Closing a socket channel registered with
    Selector and with SO_LINGER set to 0 does not reset connection
    + S8203176: javadoc handles non-ASCII characters incorrectly.
    + S8203220: Introduce ATTRIBUTE_ALIGNED macro
    + S8203223: Signed integer overflow in ImageStrings::hash_code
    (libjimage.so)
    + S8203250: runtime/LoadClass/test-classes/Hello.java has wrong
    legal notice
    + S8203251: Non-PCH build failed after JDK-8199712 (Flight
    Recorder)
    + S8203274: 32-bit build failures after JDK-8199712 (Flight
    Recorder)
    + S8203278: AArch64/PPC64 build failures after JDK-8199712
    (Flight Recorder)
    + S8203285: Minimal VM fails to build after JDK-8199712 (Flight
    Recorder)</changelog>
  <changelog author="fstrba@suse.com" date="1526990400">- Added patch:
  * fix-s390x-and-ppc64-builds.patch
    + upstream fix for broken s390x and ppc64/ppc64le builds</changelog>
  <changelog author="fstrba@suse.com" date="1527249600">- Update to upstream tag jdk-11+15
  * Fixes:
    + S8027760: JFC schema condition should not have defaults
    + S8134537: Much nearly duplicated code for sun.misc.Signal
    support
    + S8146293: Add support for RSASSA-PSS Signature algorithm
    + S8148354: Errors targeting functional interface intersection
    types
    + S8176808: Split up metaspace.cpp
    + S8185803: JdbExprTest.sh fails in JDK10-hs nightly due to
    "Name unknown: java.lang.Long.MAX_VALUE "
    + S8192992: Test8007294.java failed: attempted to spill a
    non-spillable item
    + S8193332: MetaspaceShared::check_shared_class_loader_type is
    not used during archive creation
    + S8195098: Low latency hashtable for read-mostly scenarios
    + S8195817: JFR.stop should require name of recording
    + S8195818: JFR.start should increase autogenerated name by one
    + S8195819: Remove recording=x from jcmd JFR.check output
    + S8196048: thrown type variables should be roots in the
    minimum inference graph
    + S8196201: Generate pages to list all classes and all packages
    in javadoc output
    + S8196619: [TESTBUG] restore current version check in
    runtime/appcds/MultiReleaseJars.java
    + S8196987: Resolve disabled warnings for libzip
    + S8198315: Incomplete classpath causes NPE in TransTypes
    + S8198337: -XX:StartFlightRecording=dumponexit=true,disk=false
    doesn't work
    + S8198548: Initialization race in
    com.sun.org.apache.xerces.internal.impl.xpath.regex.Token.getRange()
    on Token.categories
    + S8199064: Test applications/jcstress/other/Test.java#id1108
    fails on Sparc
    + S8199257: [TESTBUG] Open source VM testbase metaspace tests
    + S8199271: [TESTBUG] open source VM testbase stress tests
    + S8199370: [TESTBUG] Open source vm testbase GC tests
    + S8199379: [TESTBUG] Open source vm testbase JDB tests
    + S8199384: [TESTBUG] Open source VM testbase MLVM tests
    + S8199807: AppCDS performs overly restrictive path matching
    check.
    + S8200380: String::lines
    + S8200436: String::isBlank
    + S8201331: Better test cleanup for
    jdk/jfr/api/consumer/TestRecordingFile.java
    + S8201386: Miscellaneous changes imported from jsr166 CVS
    2018-05
    + S8201627: Kerberos sequence number issues
    + S8201867: Kerberos keytabs with holes in certain places are
    parsed incorrectly
    + S8202014: Possible to receive signal before signal semaphore
    created
    + S8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + S8202305: [Graal] org.graalvm.compiler.core.test.GraphResetDebugTest
    fails with java.util.ServiceConfigurationError
    + S8202377: Modularize C2 GC barriers
    + S8202427: Enhance os::print_memory_info on Windows
    + S8202466: Test serviceability/tmtools/jstat/GcTest01.java
    fails: Number of concurrent GC events is 1, but CGCT is 0
    + S8202479: Add missing try_resolve_jobject_in_native calls
    + S8202669: Intermittent crash in
    ClassLoadingService::compute_class_size()
    + S8202685: Optimize ArrayList subList replaceAll
    + S8202710: AARCH64: sporadic jtreg test fail
    + S8202713: Create a MacroAssembler::access_load/store_at
    wrapper for S390 and PPC
    + S8202771: Migrate Unicode character tests to JDK Repo
    + S8202848: -XX:+ExecuteInternalVMTests asserts with
    "assert(cd.valid() == true) failed: failed on a valid
    DirectivesParser string"
    + S8202853: NotifyCount is not initialized
    + S8202863: Rename OopStorage inner collection classes
    + S8202978: Incorrect tmp register passed to
    MacroAssembler::load_mirror()
    + S8202989: Add missing decorators in calls to to
    arraycopy_prologue/epilogue
    + S8203196: C1 emits incorrect code due to integer overflow in
    _tableswitch keys
    + S8203215: IdealLoopTree::split_outer_loop leaves phi-nodes
    with only one input
    + S8203227: Introduce os::processor_id() for Linux and Solaris
    + S8203279: Faster rounding up to nearest power of two
    + S8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + S8203288: PPC64 and s390 fail to build after JDK-8199712
    (Flight Recorder)
    + S8203292: Print complete set of flags in the hs_err file
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203318: compiler/stable/TestStableShort.java is broken
    + S8203339: Add oopDesc::field_offset()
    + S8203341: Add a safepoint-aware Semaphore
    + S8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + S8203352: Improve java implementation of
    Integer/Long.numberOfLeadingZeros
    + S8203355: MITSHM define guarding missing
    + S8203377: Cleanup the usage of os::file_name_strcmp() in
    SharedPathsMiscInfo::check().
    + S8203381: Replace InstanceKlass::allocate_instance_handle
    with JavaCalls::construct_new_instance
    + S8203391: Update com/sun/jdi/JdbMethodExitTest.sh to pass
    valid URL[]
    + S8203398: Test test/langtools/tools/javac/options/release/
    /ReleaseOptionCurrent.java writes into the source directory
    + S8203400: Fix issue with "8199852: Print more information
    about class loaders in LinkageErrors."
    + S8203410: Zero: Disable jfr feature by default
    + S8203431: TestFloatsOnStackDeopt.java throws
    java.lang.LinkageError: loader &lt;bootstrap&gt; attempted duplicate
    class definition for
    java.lang.invoke.BoundMethodHandle$Species_LLL
    + S8203436: javac should fail early when emitting illegal
    signature attributes
    + S8203437: 8199370 broke build on linux-ppc64le (w/ GCC 4.8.5.)
    + S8203454: Minimal, Zero builds fail after JDK-8202377
    (Modularize C2 barriers)
    + S8203457: Add back missing full buffer notification
    + S8203486: skip type inference for non functional interface
    components of intersection types
    + S8203487: Typo in ICUBinary.java: s/Magin/Magic/
    + S8203490: StringTable::dump lacks a load barrier
    + S8203500: Fix broken links to Specification in "specs"
    directory
    + S8203626: ProblemList
    compiler/runtime/TestFloatsOnStackDeopt.java
    + S8203635: JFR sampler thread does not record stack info
    + S8203694: Add a safepoint-aware Semaphore - part 2
- Removed patch:
  * fix-s390x-and-ppc64-builds.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527768000">- Update to upstream tag jdk-11+16
  * Fixes:
    + S8133564: Runtime - 2nd followup to Validate JVM Command-Line
    Flag Arguments
    + S8184030: TestUseRTMLockingOptionOnUnsupportedVM - RTM
    locking optimization not supported is missing
    + S8188248: NullPointerException on generic methods
    + S8189766: whitebox failure with -Xcheck:jni
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8193717: Import resolution performance regression in JDK 9
    + S8194298: Add support for per Socket configuration of TCP
    keepalive
    + S8194630: Uninitialized initiator_address in native GSS
    + S8196202: Javadoc should not generate frames by default
    + S8196913: javadoc does not (over)write stylesheet.css
    + S8198323: testing.md not updated for repository layout change
    + S8199255: [TESTBUG] Open source VM testbase default methods
    tests
    + S8199307: NPE in
    jdk.javadoc.internal.doclets.toolkit.util.Utils.getLineNumber
    + S8199383: [TESTBUG] Open source VM testbase JVMTI tests
    + S8200172: String.split non-positive term incorrect use
    + S8200266: [Graal] Update ProblemList-graal.txt files
    + S8201518: add test for randomized iteration order of
    unmodifiable Set and Map
    + S8202178: type.getKind() for var is None instead of Error
    + S8202290: AtomicAppend tests fail on macOS 10.13 ("High
    Sierra")
    + S8202813: Move vm_weak processing from SystemDictionary to
    WeakProcessor
    + S8202832: cycle detection depends on ordering of requires
    directives
    + S8202842: G1 footprint regressions in jdk11+10
    + S8202945: OopStorage should use GlobalCounter
    + S8202947: Fix minor issues with taglets
    + S8202949: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + S8202950: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + S8203014: jcmd should output command list if no command is
    given
    + S8203028: Simplify reference processing in light of
    JDK-8175797
    + S8203041: AArch64: fix overflow in immediate cmp/cmn
    instruction
    + S8203183:
    vmTestbase/vm/mlvm/anonloader/stress/oome/heap/Test.java times
    out
    + S8203221: Makefile fixes after Flight Recorder
    + S8203225: Fix of redefining a method that removes 1 or more
    lambda expressions failed to commit test cases
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203262: Incorrect cmpxchg usage in
    MetaspaceGC::inc_capacity_until_GC
    + S8203297: java/net/URL/OpenStream.java fails intermittently
    + S8203327: Small cleanups in java.lang.ref
    + S8203328: Rename EFS in java.util.zip internals to something
    meaningful
    + S8203354: assert in
    ClassLoader::update_module_path_entry_list() could have
    incorrect message
    + S8203366: Tag added wrongly in Docs.gmk
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203369: Check for both EAGAIN and EWOULDBLOCK error codes
    + S8203370: [JVMCI] UseJVMCICompiler should imply EnableJVMCI
    + S8203455: jcmd: VM.metaspace: print loader name for anonymous
    CLDs
    + S8203488: Remove error generation from TransTypes
    + S8203497: Bump Jib format version to 1.2
    + S8203628: Optimize (masked) byte memory comparisons on x86
    + S8203686: Add JDK 11 major version to
    javax/net/ssl/compatibility/JdkRelease.java
    + S8203689: Add failure code to threaddb exception messages`
    + S8203699: java/lang/invoke/SpecialInterfaceCall fails with
    SIGILL on aarch64
    + S8203766: Add some instrumentation to
    jdk/java/nio/channels/Selector/RacyDeregister.java
    + S8203769: ProblemList
    test/jdk/java/util/Map/InPlaceOpsCollisions.java
    + S8203774: jdk/jfr/api/recorder/TestStartStopRecording.java
    failed due to compilation failed
    + S8203793: cacerts/VerifyCACerts.java fails with
    java.lang.Exception: At least one cacert test failed
    + S8203795: Change default compiler on Windows to VS2017
    + S8203815: add tests failed because of 8203809 to the
    ProblemList-graal
    + S8203816: add tests failed because of 8203174 to the
    ProblemList-graal
    + S8203817: Monitor::try_lock() should not call
    check_prelock_state()
    + S8203843: BasicParState::default_estimated_thread_count(false)
    can return 0 in gtest
    + S8203865: Metaspace cleanup: Remove unused MemRegion in
    VirtualSpaceNode
    + S8203881: Print erroneous size in NegativeArraySizeException
    + S8203885: ConcurrentLocksDump::dump_at_safepoint() should not
    allocate array in resource area
    + S8203886: Invoke LambdaMetafactory::altMetafactory exactly
    from the BootstrapMethodInvoker
    + S8203892: Target interface added as marker interface in calls
    to altMetafactory
    + S8203926: Problem list
    test/langtools/tools/javac/importscope/T8193717.java
    + S8203932: Windows devkit has wrong dlls in 32 bit tools dir
    + S8203938: Fix build failures from JDK-8133564</changelog>
  <changelog author="fstrba@suse.com" date="1528200000">- Change build requirement to Java 10 or 11, since Java 9 cannot
  build OpenJDK 11 any more.</changelog>
  <changelog author="fstrba@suse.com" date="1528200001">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
</package>
<package pkgid="b7eff48d8990363f460f17d2a3f8c9a7fc96881e59ed41e9026865ce582c43ba" name="java-11-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.6.1"/>
  <changelog author="fstrba@suse.com" date="1528200000">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
</package>
<package pkgid="831302b26118bd297192d885628c1f633305408b7e63c086cece6bb16aac0275" name="java-11-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.9.1"/>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
</package>
<package pkgid="d3ee1e9f0f5c4cd11bd6cdf93773aeae577b9b192cbf8fe15f98a1bc64852862" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="11.0.0.0~24" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1525953600">- Fix s390x build, since INCLUDE_SA is false by default on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526040000">- Update to ustream tag jdk-11+13
  * Fixes:
    + S4842658: DefaultListModel and DefaultComboBoxModel should
    support addAll (Collection c)
    + S6574555: PNGImageWriter incorrectly sets bKGD chunk
    + S6788458: PNGImageReader ignores tRNS chunk while reading
    non-indexed RGB/Gray images
    + S8153532: Add @throws NPE javadoc to
    UIManager.setLookAndFeel(String) method description
    + S8154463: New failure of
    closed/java/awt/font/Outline/OutlineInvarianceTest.java
    + S8171277: Elliptic Curves for Security in Crypto
    + S8176717: GC log file handle leaked to child processes
    + S8181594: Efficient and constant-time modular arithmetic
    + S8181910: [macos] Support dark title bars on macOS
    + S8185034: Cleanup and consolidate Metaspace coding
    + S8187123: (reflect) Class#getCanonicalName and
    Class#getSimpleName is a part of performance issue
    + S8187392: Deprecated methods in the peers can be removed
    + S8189687: Swing: Invalid position of candidate pop-up of
    InputMethod in Hi-DPI on Windows
    + S8189916: Dynamic Constant support for Sparc
    + S8191410: Unicode 10
    + S8194968: problem list actions for
    tools/javac/jvm/VerboseOutTest
    + S8195002: Fix test/hotspot/jtreg/gtest/GTestWrapper.java on
    Alpine/Musl
    + S8195717: test java/lang/invoke/MethodHandlesTest timed out
    running testAsCollector1
    + S8196113: Remove the Compact Profile builds
    + S8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + S8197388: Added not existing bug id in jdk/ProblemList.txt
    + S8197447: LogCompilation throws "couldn't find bytecode"
    + S8197954: Remove unnecessary intermediary APIs from AppCDS
    implementation
    + S8198342: Test FileSystemViewListenerLeak.java is unstable
    + S8199067: [REDO] NMT: Enhance thread stack tracking
    + S8199196: Add javadoc support for preview features
    + S8199382: [TESTBUG] Open source VM testbase JDI tests
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8199852: Print more information about class loaders in
    LinkageErrors.
    + S8199912: jshell tool: /open from URI
    + S8199932: Missing copyright header in AWT source code
    + S8200083: Bump bootjdk requirement for JDK 11 to JDK 10
    + S8200094: Turkish locale reports NPE No enum constant
    com.sun.source.doctree.DocTree.Kind.S?NCE
    + S8200146: Remove the appletviewer launcher
    + S8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + S8200372: String::trim JavaDoc should clarify meaning of space
    + S8200557: OopStorage parallel iteration scales poorly
    + S8200716: Object propertyIsEnumerable buggy behavior on short
    integer-string key
    + S8200729: Conditional compilation of GCs
    + S8201138: Defect in XMLEventReader.getElementText() may cause
    data to be skipped, duplicated or otherwise result in a
    ClassCastException
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201492: Properly implement non-contiguous generations for
    Reference discovery
    + S8201524: [AIX] Don't link libfontmanager against
    libawt_headless
    + S8201572: Improve Metaspace Statistics
    + S8201598: Fix for 8181910: Support dark title bars on macOS
    broke the MacOS build
    + S8201602: ARM32 - Minimal Dynamic Constant support
    + S8201626: Typo in MakeWindowAlwaysOnTop test
    + S8201640: Use _ref_processor_* member variables directly in
    G1CollectedHeap
    + S8201793: (ref) Reference object should not support cloning
    + S8202017: Merge Reference Enqueuing phase with phase 3 of
    Reference processing
    + S8202018: Move card table clear before enqueuing pending
    references
    + S8202021: Improve variable naming in ReferenceProcesso
    + S8202050: Add javax/sound/midi/Sequencer/Recording.java to
    the problemList
    + S8202080: Introduce ordering semantics for Atomic::add and
    other RMW atomics
    + S8202083: Remove explicit CMS checks in CardTableBarrierSet
    + S8202143: Parts of 8193435 added in merge change set.
    + S8202181: Correctly specify size of hostname buffer in Unix
    Inet*AddressImpl_getLocalHostName implementations
    + S8202291: java/rmi/Naming/LookupIPv6.java failed with
    Connection refused
    + S8202301: Add tests related to JDK-8196572 to the ProblemList
    + S8202303: LogStream should autoflush on destruction
    + S8202319: Fix compilation warnings in Solaris debug builds
    for DevStudio 12.6
    + S8202387: javac --release 11 not supported
    + S8202424: Metaspace: on chunk retirement, use correct lower
    limit on chunksize when adding blocks to free blocks list
    + S8202435: [aix] print program break as part of memory info
    into hs-err file
    + S8202447: Fix unloading_occurred to mean unloading_occurred
    + S8202465: [C1] casts should not be eliminated for interface
    types
    + S8202548: Use reservation Object when creating SpeciesData
    + S8202552: [AOT][JVMCI] Incorrect usage of INCLUDE_JVMCI and
    INCLUDE_AOT
    + S8202563: BigInteger/BigDecimal not immune to overflow,
    contrary to spec
    + S8202564: java/lang/management/ThreadMXBean/ThreadCounts.java
    fails
    + S8202565: C1 compilation crashes with
    "assert(is_double_stack() &amp;&amp; !is_virtual()) failed: type check"
    + S8202575: Remove java/lang/String/nativeEncoding/
    /StringPlatformChars.java from ProblemList
    + S8202581: failure_handler: gather more environment
    information on macOS
    + S8202582: DateTimeFormatterBuilder.parseOffsetBased
    unnecessarily calls toString()
    + S8202583: Remove experimental ClassForNamePlugin
    + S8202584: de-problem list tools/javac/jvm/VerboseOutTest
    + S8202591: Remove usage of CMSEdenChunksRecordAlways in
    defNewGeneration.cpp
    + S8202592: Remove unused EvacuateFollowersClosure
    + S8202597: javac is not inducing a notional interface if
    Object appears in an intersection type
    + S8202599: Mark intermittently failing jshell tests
    + S8202606: Deprecate AllowNonVirtualCalls option
    + S8202631: JVM_Clone to throw CloneNotSupportException for
    Reference object
    + S8202634: Metaspace: simplify SpaceManager lists
    + S8202639: Use concrete Generation classes in SerialHeap and
    CMSHeap
    + S8202640: Small C1 cleanups for BarrierSetC1
    + S8202641: Replace OOP_SINCE_SAVE_MARKS with templates
    + S8202642: Replace PAR_OOP_ITERATE with templates
    + S8202647: Add deduplicate_string function to CollectedHeap
    + S8202649: Move the Parallel GC specific task creation
    functions out of Threads
    + S8202650: Enforce group for attach listener file
    + S8202662: JFR tests fails: Could not find leak with class
    + S8202672: Build failed in metaspace.cpp with VS2017
    + S8202676: AArch64: Missing enter/leave around barrier leads
    to infinite loop
    + S8202684: Minimal VM build is broken after JDK-8199067,
    JDK-8202638
    + S8202686: Missing test case for 8200167 - final Object methods
    + S8202690: jdk/jshell/ToolBasicTest.java failed in
    testOpenFileOverHttp() and testOpenLocalFileUrl()
    + S8202709: Move oopDesc::is_archive_object to
    MetaspaceShared::is_archive_object
    + S8202711: Merge tiered compilation policies
    + S8202719: Use Collections.emptyEnumeration where possible
    + S8202722: Move marksweep_init into GC code
    + S8202744: Expired flag removal for JDK 11
    + S8202780: Remove EnqueueTask related code from
    ReferenceProcessor after JDK-8202017
    + S8202781: Fix typo in DiscoveredListIterator::complete_enqeue
    + S8202810: Remove class-for-name test
    + S8202816: Update JarSigning.keystore
- Removed patch:
  * aarch64-infinite-loop.patch
  - Integrated upstream
- Modified patch:
  * java11-improved-fonts.patch
  - Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1526299200">- s390x: avoid packaging files that are not present on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526558400">- Update to upstream tag jdk-11+14
  * Fixes:
    + S8132287: obsolete the "InlineNotify" flag option
    + S8174995: SA: clhsdb 'where -a' throws Assertion Failure with
    illegal code 236 when CDS is used
    + S8176510: java/awt/font/GlyphVector/TestLayoutFlags.java
    fails with OpenJDK
    + S8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + S8185505: AArch64: Port AOT to AArch64
    + S8189140: SystemDictionaryShared::initialize() should be
    renamed to be more meaningful
    + S8189271: Metaspace::_capacity_until_GC should be size_t
    + S8191533: jar --describe-module prints service provider class
    names in lower case
    + S8193935: Illegal countedLoops transformation
    + S8194998: broken error message for subclass of interface with
    private method
    + S8195613: [SA] HotSpotTypeDataBase.readVMLongConstants
    truncates values to int
    + S8196340: (coll) Examine overriding inherited methods in
    ArrayList and ArrayList.SubList
    + S8196360: java/awt/Dialog/SiblingChildOrder/
    /SiblingChildOrderTest.java fails
    + S8196616: java/awt/GraphicsDevice/DisplayModes/
    /CompareToXrandrTest.java fails
    + S8197948: Create test for SwingSet2 main window
    + S8198412: MonospacedGlyphWidthTest.java may fail on Solaris
    + S8198991: Move Java2D demo to the open repository
    + S8199252: [TESTBUG] Open source VM testbase system dictionary
    tests
    + S8199712: Flight Recorder
    + S8200377: String::strip, String::stripLeading,
    String::stripTrailing
    + S8201447: C1 does backedge profiling incorrectly
    + S8201491: G1 support for java.lang.ref.Reference precleaning
    + S8201532: Update idom to get correct dom depth calculation
    + S8201593: Print array length in
    ArrayIndexOutOfBoundsException.
    + S8201604: ARM64 - Build failure after JDK-8193260
    + S8202016: Use obj+offset in interpreter array access
    + S8202064: Jemmy JInternalFrameOperator: Add wait for close(),
    activate(), resize() and move() operations
    + S8202113: Reflection API is causing caller classes to leak
    + S8202289: Non-empty directory in module path is not handled
    properly at CDS/AppCDS dump time
    + S8202322: AIX: symbol visibility flags not support on xlc 12.1
    + S8202392: [TESTBUG] open source vm testbase heapdump tests
    + S8202395: AARCH64: wrong encoding for SIMD instructions zip,
    trn, uzp
    + S8202426: NPE thrown by Transformer when XMLStreamReader
    reports no xml attribute type
    + S8202476: ImageLib is broken in 32 bit Windows
    + S8202519: Crash during large AppCDS dump
    + S8202544: Hide unused exports in libzip
    + S8202553: Update FXLauncherTest as part of removing JavaFX
    from JDK
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8202580: Dashed BasicStroke randomly painted incorrectly,
    may freeze application
    + S8202614: Add ability to validate links in JavadocTester
    + S8202679: Updates on windows failures in the problem list
    + S8202683: Minimal VM should build cleanly on 64-bit platforms
    + S8202708: Add a check of opening stream for not-existing UNC
    url
    + S8202714: Create a MacroAssembler::access_load/store_at
    wrapper for AArch64
    + S8202718: Jemmy JInternalFrameOperator: Dependency with
    orders of Minimize, Maximize and Close buttons
    + S8202738: vm_version Abstract_VM_Version::internal_vm_info_string()
    returns same string for different incremental builds
    + S8202745: Remove hyphens from "out-of-bounds".
    + S8202748: jtreg :hotspot_misc group shouldn't include
    vmTestbase tests
    + S8202756: move FilterUSRTest.java to openJDK
    + S8202763: failure_handler: list open files for macOS
    + S8202764: api/java_text/SimpleDateFormat/index.html#Format
    testcases started to fail with JDK11 b12
    + S8202767: java/awt/font/GlyphVector/TestLayoutFlags.java is
    missing null check
    + S8202773: Unhandled oop in JavaThread::collect_counters
    + S8202811: Problem List some tests that leave windows open on
    the desktop
    + S8202822: Add .git to .hgignore
    + S8202824: Cleanup discrepancies in ProblemList for java_awt
    jtreg tests
    + S8202829: Implement CollectedHeap::get_safepoint_workers()
    for G1
    + S8202843: langtools ant build fails
    + S8202878:
    com/apple/laf/ScreenMenu/ScreenMenuMemoryLeakTest.java fails
    + S8202889: Remove trailing LF from perf log
    + S8202914: Let custom makefile override jmod intput dir
    locations
    + S8202915: [JAXP] Performance enhancements and cleanups in
    com.sun.org.apache.xerces.internal.impl.dtd.XMLDTDValidator
    + S8202919: JDK-8202683 broke macosx build
    + S8202920: jvm.cfg generation incorrect
    + S8202974: Backout JDK-8202683
    + S8202976: Add C1 lea patching support for x86
    + S8202993: Add support for x86 testptr/testq with register and
    address
    + S8202994: Add support for undoing last TLAB allocation
    + S8202997: Split test/jdk/:tier1 to enable better parallel
    execution
    + S8203032: PrintMetaspaceDcmd fails: Non-Class: missing from
    stdout/stderr
    + S8203059: (so) Closing a socket channel registered with
    Selector and with SO_LINGER set to 0 does not reset connection
    + S8203176: javadoc handles non-ASCII characters incorrectly.
    + S8203220: Introduce ATTRIBUTE_ALIGNED macro
    + S8203223: Signed integer overflow in ImageStrings::hash_code
    (libjimage.so)
    + S8203250: runtime/LoadClass/test-classes/Hello.java has wrong
    legal notice
    + S8203251: Non-PCH build failed after JDK-8199712 (Flight
    Recorder)
    + S8203274: 32-bit build failures after JDK-8199712 (Flight
    Recorder)
    + S8203278: AArch64/PPC64 build failures after JDK-8199712
    (Flight Recorder)
    + S8203285: Minimal VM fails to build after JDK-8199712 (Flight
    Recorder)</changelog>
  <changelog author="fstrba@suse.com" date="1526990400">- Added patch:
  * fix-s390x-and-ppc64-builds.patch
    + upstream fix for broken s390x and ppc64/ppc64le builds</changelog>
  <changelog author="fstrba@suse.com" date="1527249600">- Update to upstream tag jdk-11+15
  * Fixes:
    + S8027760: JFC schema condition should not have defaults
    + S8134537: Much nearly duplicated code for sun.misc.Signal
    support
    + S8146293: Add support for RSASSA-PSS Signature algorithm
    + S8148354: Errors targeting functional interface intersection
    types
    + S8176808: Split up metaspace.cpp
    + S8185803: JdbExprTest.sh fails in JDK10-hs nightly due to
    "Name unknown: java.lang.Long.MAX_VALUE "
    + S8192992: Test8007294.java failed: attempted to spill a
    non-spillable item
    + S8193332: MetaspaceShared::check_shared_class_loader_type is
    not used during archive creation
    + S8195098: Low latency hashtable for read-mostly scenarios
    + S8195817: JFR.stop should require name of recording
    + S8195818: JFR.start should increase autogenerated name by one
    + S8195819: Remove recording=x from jcmd JFR.check output
    + S8196048: thrown type variables should be roots in the
    minimum inference graph
    + S8196201: Generate pages to list all classes and all packages
    in javadoc output
    + S8196619: [TESTBUG] restore current version check in
    runtime/appcds/MultiReleaseJars.java
    + S8196987: Resolve disabled warnings for libzip
    + S8198315: Incomplete classpath causes NPE in TransTypes
    + S8198337: -XX:StartFlightRecording=dumponexit=true,disk=false
    doesn't work
    + S8198548: Initialization race in
    com.sun.org.apache.xerces.internal.impl.xpath.regex.Token.getRange()
    on Token.categories
    + S8199064: Test applications/jcstress/other/Test.java#id1108
    fails on Sparc
    + S8199257: [TESTBUG] Open source VM testbase metaspace tests
    + S8199271: [TESTBUG] open source VM testbase stress tests
    + S8199370: [TESTBUG] Open source vm testbase GC tests
    + S8199379: [TESTBUG] Open source vm testbase JDB tests
    + S8199384: [TESTBUG] Open source VM testbase MLVM tests
    + S8199807: AppCDS performs overly restrictive path matching
    check.
    + S8200380: String::lines
    + S8200436: String::isBlank
    + S8201331: Better test cleanup for
    jdk/jfr/api/consumer/TestRecordingFile.java
    + S8201386: Miscellaneous changes imported from jsr166 CVS
    2018-05
    + S8201627: Kerberos sequence number issues
    + S8201867: Kerberos keytabs with holes in certain places are
    parsed incorrectly
    + S8202014: Possible to receive signal before signal semaphore
    created
    + S8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + S8202305: [Graal] org.graalvm.compiler.core.test.GraphResetDebugTest
    fails with java.util.ServiceConfigurationError
    + S8202377: Modularize C2 GC barriers
    + S8202427: Enhance os::print_memory_info on Windows
    + S8202466: Test serviceability/tmtools/jstat/GcTest01.java
    fails: Number of concurrent GC events is 1, but CGCT is 0
    + S8202479: Add missing try_resolve_jobject_in_native calls
    + S8202669: Intermittent crash in
    ClassLoadingService::compute_class_size()
    + S8202685: Optimize ArrayList subList replaceAll
    + S8202710: AARCH64: sporadic jtreg test fail
    + S8202713: Create a MacroAssembler::access_load/store_at
    wrapper for S390 and PPC
    + S8202771: Migrate Unicode character tests to JDK Repo
    + S8202848: -XX:+ExecuteInternalVMTests asserts with
    "assert(cd.valid() == true) failed: failed on a valid
    DirectivesParser string"
    + S8202853: NotifyCount is not initialized
    + S8202863: Rename OopStorage inner collection classes
    + S8202978: Incorrect tmp register passed to
    MacroAssembler::load_mirror()
    + S8202989: Add missing decorators in calls to to
    arraycopy_prologue/epilogue
    + S8203196: C1 emits incorrect code due to integer overflow in
    _tableswitch keys
    + S8203215: IdealLoopTree::split_outer_loop leaves phi-nodes
    with only one input
    + S8203227: Introduce os::processor_id() for Linux and Solaris
    + S8203279: Faster rounding up to nearest power of two
    + S8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + S8203288: PPC64 and s390 fail to build after JDK-8199712
    (Flight Recorder)
    + S8203292: Print complete set of flags in the hs_err file
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203318: compiler/stable/TestStableShort.java is broken
    + S8203339: Add oopDesc::field_offset()
    + S8203341: Add a safepoint-aware Semaphore
    + S8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + S8203352: Improve java implementation of
    Integer/Long.numberOfLeadingZeros
    + S8203355: MITSHM define guarding missing
    + S8203377: Cleanup the usage of os::file_name_strcmp() in
    SharedPathsMiscInfo::check().
    + S8203381: Replace InstanceKlass::allocate_instance_handle
    with JavaCalls::construct_new_instance
    + S8203391: Update com/sun/jdi/JdbMethodExitTest.sh to pass
    valid URL[]
    + S8203398: Test test/langtools/tools/javac/options/release/
    /ReleaseOptionCurrent.java writes into the source directory
    + S8203400: Fix issue with "8199852: Print more information
    about class loaders in LinkageErrors."
    + S8203410: Zero: Disable jfr feature by default
    + S8203431: TestFloatsOnStackDeopt.java throws
    java.lang.LinkageError: loader &lt;bootstrap&gt; attempted duplicate
    class definition for
    java.lang.invoke.BoundMethodHandle$Species_LLL
    + S8203436: javac should fail early when emitting illegal
    signature attributes
    + S8203437: 8199370 broke build on linux-ppc64le (w/ GCC 4.8.5.)
    + S8203454: Minimal, Zero builds fail after JDK-8202377
    (Modularize C2 barriers)
    + S8203457: Add back missing full buffer notification
    + S8203486: skip type inference for non functional interface
    components of intersection types
    + S8203487: Typo in ICUBinary.java: s/Magin/Magic/
    + S8203490: StringTable::dump lacks a load barrier
    + S8203500: Fix broken links to Specification in "specs"
    directory
    + S8203626: ProblemList
    compiler/runtime/TestFloatsOnStackDeopt.java
    + S8203635: JFR sampler thread does not record stack info
    + S8203694: Add a safepoint-aware Semaphore - part 2
- Removed patch:
  * fix-s390x-and-ppc64-builds.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527768000">- Update to upstream tag jdk-11+16
  * Fixes:
    + S8133564: Runtime - 2nd followup to Validate JVM Command-Line
    Flag Arguments
    + S8184030: TestUseRTMLockingOptionOnUnsupportedVM - RTM
    locking optimization not supported is missing
    + S8188248: NullPointerException on generic methods
    + S8189766: whitebox failure with -Xcheck:jni
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8193717: Import resolution performance regression in JDK 9
    + S8194298: Add support for per Socket configuration of TCP
    keepalive
    + S8194630: Uninitialized initiator_address in native GSS
    + S8196202: Javadoc should not generate frames by default
    + S8196913: javadoc does not (over)write stylesheet.css
    + S8198323: testing.md not updated for repository layout change
    + S8199255: [TESTBUG] Open source VM testbase default methods
    tests
    + S8199307: NPE in
    jdk.javadoc.internal.doclets.toolkit.util.Utils.getLineNumber
    + S8199383: [TESTBUG] Open source VM testbase JVMTI tests
    + S8200172: String.split non-positive term incorrect use
    + S8200266: [Graal] Update ProblemList-graal.txt files
    + S8201518: add test for randomized iteration order of
    unmodifiable Set and Map
    + S8202178: type.getKind() for var is None instead of Error
    + S8202290: AtomicAppend tests fail on macOS 10.13 ("High
    Sierra")
    + S8202813: Move vm_weak processing from SystemDictionary to
    WeakProcessor
    + S8202832: cycle detection depends on ordering of requires
    directives
    + S8202842: G1 footprint regressions in jdk11+10
    + S8202945: OopStorage should use GlobalCounter
    + S8202947: Fix minor issues with taglets
    + S8202949: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + S8202950: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + S8203014: jcmd should output command list if no command is
    given
    + S8203028: Simplify reference processing in light of
    JDK-8175797
    + S8203041: AArch64: fix overflow in immediate cmp/cmn
    instruction
    + S8203183:
    vmTestbase/vm/mlvm/anonloader/stress/oome/heap/Test.java times
    out
    + S8203221: Makefile fixes after Flight Recorder
    + S8203225: Fix of redefining a method that removes 1 or more
    lambda expressions failed to commit test cases
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203262: Incorrect cmpxchg usage in
    MetaspaceGC::inc_capacity_until_GC
    + S8203297: java/net/URL/OpenStream.java fails intermittently
    + S8203327: Small cleanups in java.lang.ref
    + S8203328: Rename EFS in java.util.zip internals to something
    meaningful
    + S8203354: assert in
    ClassLoader::update_module_path_entry_list() could have
    incorrect message
    + S8203366: Tag added wrongly in Docs.gmk
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203369: Check for both EAGAIN and EWOULDBLOCK error codes
    + S8203370: [JVMCI] UseJVMCICompiler should imply EnableJVMCI
    + S8203455: jcmd: VM.metaspace: print loader name for anonymous
    CLDs
    + S8203488: Remove error generation from TransTypes
    + S8203497: Bump Jib format version to 1.2
    + S8203628: Optimize (masked) byte memory comparisons on x86
    + S8203686: Add JDK 11 major version to
    javax/net/ssl/compatibility/JdkRelease.java
    + S8203689: Add failure code to threaddb exception messages`
    + S8203699: java/lang/invoke/SpecialInterfaceCall fails with
    SIGILL on aarch64
    + S8203766: Add some instrumentation to
    jdk/java/nio/channels/Selector/RacyDeregister.java
    + S8203769: ProblemList
    test/jdk/java/util/Map/InPlaceOpsCollisions.java
    + S8203774: jdk/jfr/api/recorder/TestStartStopRecording.java
    failed due to compilation failed
    + S8203793: cacerts/VerifyCACerts.java fails with
    java.lang.Exception: At least one cacert test failed
    + S8203795: Change default compiler on Windows to VS2017
    + S8203815: add tests failed because of 8203809 to the
    ProblemList-graal
    + S8203816: add tests failed because of 8203174 to the
    ProblemList-graal
    + S8203817: Monitor::try_lock() should not call
    check_prelock_state()
    + S8203843: BasicParState::default_estimated_thread_count(false)
    can return 0 in gtest
    + S8203865: Metaspace cleanup: Remove unused MemRegion in
    VirtualSpaceNode
    + S8203881: Print erroneous size in NegativeArraySizeException
    + S8203885: ConcurrentLocksDump::dump_at_safepoint() should not
    allocate array in resource area
    + S8203886: Invoke LambdaMetafactory::altMetafactory exactly
    from the BootstrapMethodInvoker
    + S8203892: Target interface added as marker interface in calls
    to altMetafactory
    + S8203926: Problem list
    test/langtools/tools/javac/importscope/T8193717.java
    + S8203932: Windows devkit has wrong dlls in 32 bit tools dir
    + S8203938: Fix build failures from JDK-8133564</changelog>
  <changelog author="fstrba@suse.com" date="1528200000">- Change build requirement to Java 10 or 11, since Java 9 cannot
  build OpenJDK 11 any more.</changelog>
  <changelog author="fstrba@suse.com" date="1528200001">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
</package>
<package pkgid="83d483239be8f80eefb94c7b0564f1b1a33a514e1c766de2fc006352449ee985" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.6.1"/>
  <changelog author="fstrba@suse.com" date="1528200000">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
</package>
<package pkgid="655f0b6e3ef04973a1378622a749e2eaba2a4c38c63a575387527a3b5562dbfb" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.9.1"/>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
</package>
<package pkgid="57d7b52b813f8d1b0942144d103be73df883a1f233d37ff718cc81dabfd8b327" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="11.0.0.0~24" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1525953600">- Fix s390x build, since INCLUDE_SA is false by default on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526040000">- Update to ustream tag jdk-11+13
  * Fixes:
    + S4842658: DefaultListModel and DefaultComboBoxModel should
    support addAll (Collection c)
    + S6574555: PNGImageWriter incorrectly sets bKGD chunk
    + S6788458: PNGImageReader ignores tRNS chunk while reading
    non-indexed RGB/Gray images
    + S8153532: Add @throws NPE javadoc to
    UIManager.setLookAndFeel(String) method description
    + S8154463: New failure of
    closed/java/awt/font/Outline/OutlineInvarianceTest.java
    + S8171277: Elliptic Curves for Security in Crypto
    + S8176717: GC log file handle leaked to child processes
    + S8181594: Efficient and constant-time modular arithmetic
    + S8181910: [macos] Support dark title bars on macOS
    + S8185034: Cleanup and consolidate Metaspace coding
    + S8187123: (reflect) Class#getCanonicalName and
    Class#getSimpleName is a part of performance issue
    + S8187392: Deprecated methods in the peers can be removed
    + S8189687: Swing: Invalid position of candidate pop-up of
    InputMethod in Hi-DPI on Windows
    + S8189916: Dynamic Constant support for Sparc
    + S8191410: Unicode 10
    + S8194968: problem list actions for
    tools/javac/jvm/VerboseOutTest
    + S8195002: Fix test/hotspot/jtreg/gtest/GTestWrapper.java on
    Alpine/Musl
    + S8195717: test java/lang/invoke/MethodHandlesTest timed out
    running testAsCollector1
    + S8196113: Remove the Compact Profile builds
    + S8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + S8197388: Added not existing bug id in jdk/ProblemList.txt
    + S8197447: LogCompilation throws "couldn't find bytecode"
    + S8197954: Remove unnecessary intermediary APIs from AppCDS
    implementation
    + S8198342: Test FileSystemViewListenerLeak.java is unstable
    + S8199067: [REDO] NMT: Enhance thread stack tracking
    + S8199196: Add javadoc support for preview features
    + S8199382: [TESTBUG] Open source VM testbase JDI tests
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8199852: Print more information about class loaders in
    LinkageErrors.
    + S8199912: jshell tool: /open from URI
    + S8199932: Missing copyright header in AWT source code
    + S8200083: Bump bootjdk requirement for JDK 11 to JDK 10
    + S8200094: Turkish locale reports NPE No enum constant
    com.sun.source.doctree.DocTree.Kind.S?NCE
    + S8200146: Remove the appletviewer launcher
    + S8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + S8200372: String::trim JavaDoc should clarify meaning of space
    + S8200557: OopStorage parallel iteration scales poorly
    + S8200716: Object propertyIsEnumerable buggy behavior on short
    integer-string key
    + S8200729: Conditional compilation of GCs
    + S8201138: Defect in XMLEventReader.getElementText() may cause
    data to be skipped, duplicated or otherwise result in a
    ClassCastException
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201492: Properly implement non-contiguous generations for
    Reference discovery
    + S8201524: [AIX] Don't link libfontmanager against
    libawt_headless
    + S8201572: Improve Metaspace Statistics
    + S8201598: Fix for 8181910: Support dark title bars on macOS
    broke the MacOS build
    + S8201602: ARM32 - Minimal Dynamic Constant support
    + S8201626: Typo in MakeWindowAlwaysOnTop test
    + S8201640: Use _ref_processor_* member variables directly in
    G1CollectedHeap
    + S8201793: (ref) Reference object should not support cloning
    + S8202017: Merge Reference Enqueuing phase with phase 3 of
    Reference processing
    + S8202018: Move card table clear before enqueuing pending
    references
    + S8202021: Improve variable naming in ReferenceProcesso
    + S8202050: Add javax/sound/midi/Sequencer/Recording.java to
    the problemList
    + S8202080: Introduce ordering semantics for Atomic::add and
    other RMW atomics
    + S8202083: Remove explicit CMS checks in CardTableBarrierSet
    + S8202143: Parts of 8193435 added in merge change set.
    + S8202181: Correctly specify size of hostname buffer in Unix
    Inet*AddressImpl_getLocalHostName implementations
    + S8202291: java/rmi/Naming/LookupIPv6.java failed with
    Connection refused
    + S8202301: Add tests related to JDK-8196572 to the ProblemList
    + S8202303: LogStream should autoflush on destruction
    + S8202319: Fix compilation warnings in Solaris debug builds
    for DevStudio 12.6
    + S8202387: javac --release 11 not supported
    + S8202424: Metaspace: on chunk retirement, use correct lower
    limit on chunksize when adding blocks to free blocks list
    + S8202435: [aix] print program break as part of memory info
    into hs-err file
    + S8202447: Fix unloading_occurred to mean unloading_occurred
    + S8202465: [C1] casts should not be eliminated for interface
    types
    + S8202548: Use reservation Object when creating SpeciesData
    + S8202552: [AOT][JVMCI] Incorrect usage of INCLUDE_JVMCI and
    INCLUDE_AOT
    + S8202563: BigInteger/BigDecimal not immune to overflow,
    contrary to spec
    + S8202564: java/lang/management/ThreadMXBean/ThreadCounts.java
    fails
    + S8202565: C1 compilation crashes with
    "assert(is_double_stack() &amp;&amp; !is_virtual()) failed: type check"
    + S8202575: Remove java/lang/String/nativeEncoding/
    /StringPlatformChars.java from ProblemList
    + S8202581: failure_handler: gather more environment
    information on macOS
    + S8202582: DateTimeFormatterBuilder.parseOffsetBased
    unnecessarily calls toString()
    + S8202583: Remove experimental ClassForNamePlugin
    + S8202584: de-problem list tools/javac/jvm/VerboseOutTest
    + S8202591: Remove usage of CMSEdenChunksRecordAlways in
    defNewGeneration.cpp
    + S8202592: Remove unused EvacuateFollowersClosure
    + S8202597: javac is not inducing a notional interface if
    Object appears in an intersection type
    + S8202599: Mark intermittently failing jshell tests
    + S8202606: Deprecate AllowNonVirtualCalls option
    + S8202631: JVM_Clone to throw CloneNotSupportException for
    Reference object
    + S8202634: Metaspace: simplify SpaceManager lists
    + S8202639: Use concrete Generation classes in SerialHeap and
    CMSHeap
    + S8202640: Small C1 cleanups for BarrierSetC1
    + S8202641: Replace OOP_SINCE_SAVE_MARKS with templates
    + S8202642: Replace PAR_OOP_ITERATE with templates
    + S8202647: Add deduplicate_string function to CollectedHeap
    + S8202649: Move the Parallel GC specific task creation
    functions out of Threads
    + S8202650: Enforce group for attach listener file
    + S8202662: JFR tests fails: Could not find leak with class
    + S8202672: Build failed in metaspace.cpp with VS2017
    + S8202676: AArch64: Missing enter/leave around barrier leads
    to infinite loop
    + S8202684: Minimal VM build is broken after JDK-8199067,
    JDK-8202638
    + S8202686: Missing test case for 8200167 - final Object methods
    + S8202690: jdk/jshell/ToolBasicTest.java failed in
    testOpenFileOverHttp() and testOpenLocalFileUrl()
    + S8202709: Move oopDesc::is_archive_object to
    MetaspaceShared::is_archive_object
    + S8202711: Merge tiered compilation policies
    + S8202719: Use Collections.emptyEnumeration where possible
    + S8202722: Move marksweep_init into GC code
    + S8202744: Expired flag removal for JDK 11
    + S8202780: Remove EnqueueTask related code from
    ReferenceProcessor after JDK-8202017
    + S8202781: Fix typo in DiscoveredListIterator::complete_enqeue
    + S8202810: Remove class-for-name test
    + S8202816: Update JarSigning.keystore
- Removed patch:
  * aarch64-infinite-loop.patch
  - Integrated upstream
- Modified patch:
  * java11-improved-fonts.patch
  - Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1526299200">- s390x: avoid packaging files that are not present on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526558400">- Update to upstream tag jdk-11+14
  * Fixes:
    + S8132287: obsolete the "InlineNotify" flag option
    + S8174995: SA: clhsdb 'where -a' throws Assertion Failure with
    illegal code 236 when CDS is used
    + S8176510: java/awt/font/GlyphVector/TestLayoutFlags.java
    fails with OpenJDK
    + S8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + S8185505: AArch64: Port AOT to AArch64
    + S8189140: SystemDictionaryShared::initialize() should be
    renamed to be more meaningful
    + S8189271: Metaspace::_capacity_until_GC should be size_t
    + S8191533: jar --describe-module prints service provider class
    names in lower case
    + S8193935: Illegal countedLoops transformation
    + S8194998: broken error message for subclass of interface with
    private method
    + S8195613: [SA] HotSpotTypeDataBase.readVMLongConstants
    truncates values to int
    + S8196340: (coll) Examine overriding inherited methods in
    ArrayList and ArrayList.SubList
    + S8196360: java/awt/Dialog/SiblingChildOrder/
    /SiblingChildOrderTest.java fails
    + S8196616: java/awt/GraphicsDevice/DisplayModes/
    /CompareToXrandrTest.java fails
    + S8197948: Create test for SwingSet2 main window
    + S8198412: MonospacedGlyphWidthTest.java may fail on Solaris
    + S8198991: Move Java2D demo to the open repository
    + S8199252: [TESTBUG] Open source VM testbase system dictionary
    tests
    + S8199712: Flight Recorder
    + S8200377: String::strip, String::stripLeading,
    String::stripTrailing
    + S8201447: C1 does backedge profiling incorrectly
    + S8201491: G1 support for java.lang.ref.Reference precleaning
    + S8201532: Update idom to get correct dom depth calculation
    + S8201593: Print array length in
    ArrayIndexOutOfBoundsException.
    + S8201604: ARM64 - Build failure after JDK-8193260
    + S8202016: Use obj+offset in interpreter array access
    + S8202064: Jemmy JInternalFrameOperator: Add wait for close(),
    activate(), resize() and move() operations
    + S8202113: Reflection API is causing caller classes to leak
    + S8202289: Non-empty directory in module path is not handled
    properly at CDS/AppCDS dump time
    + S8202322: AIX: symbol visibility flags not support on xlc 12.1
    + S8202392: [TESTBUG] open source vm testbase heapdump tests
    + S8202395: AARCH64: wrong encoding for SIMD instructions zip,
    trn, uzp
    + S8202426: NPE thrown by Transformer when XMLStreamReader
    reports no xml attribute type
    + S8202476: ImageLib is broken in 32 bit Windows
    + S8202519: Crash during large AppCDS dump
    + S8202544: Hide unused exports in libzip
    + S8202553: Update FXLauncherTest as part of removing JavaFX
    from JDK
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8202580: Dashed BasicStroke randomly painted incorrectly,
    may freeze application
    + S8202614: Add ability to validate links in JavadocTester
    + S8202679: Updates on windows failures in the problem list
    + S8202683: Minimal VM should build cleanly on 64-bit platforms
    + S8202708: Add a check of opening stream for not-existing UNC
    url
    + S8202714: Create a MacroAssembler::access_load/store_at
    wrapper for AArch64
    + S8202718: Jemmy JInternalFrameOperator: Dependency with
    orders of Minimize, Maximize and Close buttons
    + S8202738: vm_version Abstract_VM_Version::internal_vm_info_string()
    returns same string for different incremental builds
    + S8202745: Remove hyphens from "out-of-bounds".
    + S8202748: jtreg :hotspot_misc group shouldn't include
    vmTestbase tests
    + S8202756: move FilterUSRTest.java to openJDK
    + S8202763: failure_handler: list open files for macOS
    + S8202764: api/java_text/SimpleDateFormat/index.html#Format
    testcases started to fail with JDK11 b12
    + S8202767: java/awt/font/GlyphVector/TestLayoutFlags.java is
    missing null check
    + S8202773: Unhandled oop in JavaThread::collect_counters
    + S8202811: Problem List some tests that leave windows open on
    the desktop
    + S8202822: Add .git to .hgignore
    + S8202824: Cleanup discrepancies in ProblemList for java_awt
    jtreg tests
    + S8202829: Implement CollectedHeap::get_safepoint_workers()
    for G1
    + S8202843: langtools ant build fails
    + S8202878:
    com/apple/laf/ScreenMenu/ScreenMenuMemoryLeakTest.java fails
    + S8202889: Remove trailing LF from perf log
    + S8202914: Let custom makefile override jmod intput dir
    locations
    + S8202915: [JAXP] Performance enhancements and cleanups in
    com.sun.org.apache.xerces.internal.impl.dtd.XMLDTDValidator
    + S8202919: JDK-8202683 broke macosx build
    + S8202920: jvm.cfg generation incorrect
    + S8202974: Backout JDK-8202683
    + S8202976: Add C1 lea patching support for x86
    + S8202993: Add support for x86 testptr/testq with register and
    address
    + S8202994: Add support for undoing last TLAB allocation
    + S8202997: Split test/jdk/:tier1 to enable better parallel
    execution
    + S8203032: PrintMetaspaceDcmd fails: Non-Class: missing from
    stdout/stderr
    + S8203059: (so) Closing a socket channel registered with
    Selector and with SO_LINGER set to 0 does not reset connection
    + S8203176: javadoc handles non-ASCII characters incorrectly.
    + S8203220: Introduce ATTRIBUTE_ALIGNED macro
    + S8203223: Signed integer overflow in ImageStrings::hash_code
    (libjimage.so)
    + S8203250: runtime/LoadClass/test-classes/Hello.java has wrong
    legal notice
    + S8203251: Non-PCH build failed after JDK-8199712 (Flight
    Recorder)
    + S8203274: 32-bit build failures after JDK-8199712 (Flight
    Recorder)
    + S8203278: AArch64/PPC64 build failures after JDK-8199712
    (Flight Recorder)
    + S8203285: Minimal VM fails to build after JDK-8199712 (Flight
    Recorder)</changelog>
  <changelog author="fstrba@suse.com" date="1526990400">- Added patch:
  * fix-s390x-and-ppc64-builds.patch
    + upstream fix for broken s390x and ppc64/ppc64le builds</changelog>
  <changelog author="fstrba@suse.com" date="1527249600">- Update to upstream tag jdk-11+15
  * Fixes:
    + S8027760: JFC schema condition should not have defaults
    + S8134537: Much nearly duplicated code for sun.misc.Signal
    support
    + S8146293: Add support for RSASSA-PSS Signature algorithm
    + S8148354: Errors targeting functional interface intersection
    types
    + S8176808: Split up metaspace.cpp
    + S8185803: JdbExprTest.sh fails in JDK10-hs nightly due to
    "Name unknown: java.lang.Long.MAX_VALUE "
    + S8192992: Test8007294.java failed: attempted to spill a
    non-spillable item
    + S8193332: MetaspaceShared::check_shared_class_loader_type is
    not used during archive creation
    + S8195098: Low latency hashtable for read-mostly scenarios
    + S8195817: JFR.stop should require name of recording
    + S8195818: JFR.start should increase autogenerated name by one
    + S8195819: Remove recording=x from jcmd JFR.check output
    + S8196048: thrown type variables should be roots in the
    minimum inference graph
    + S8196201: Generate pages to list all classes and all packages
    in javadoc output
    + S8196619: [TESTBUG] restore current version check in
    runtime/appcds/MultiReleaseJars.java
    + S8196987: Resolve disabled warnings for libzip
    + S8198315: Incomplete classpath causes NPE in TransTypes
    + S8198337: -XX:StartFlightRecording=dumponexit=true,disk=false
    doesn't work
    + S8198548: Initialization race in
    com.sun.org.apache.xerces.internal.impl.xpath.regex.Token.getRange()
    on Token.categories
    + S8199064: Test applications/jcstress/other/Test.java#id1108
    fails on Sparc
    + S8199257: [TESTBUG] Open source VM testbase metaspace tests
    + S8199271: [TESTBUG] open source VM testbase stress tests
    + S8199370: [TESTBUG] Open source vm testbase GC tests
    + S8199379: [TESTBUG] Open source vm testbase JDB tests
    + S8199384: [TESTBUG] Open source VM testbase MLVM tests
    + S8199807: AppCDS performs overly restrictive path matching
    check.
    + S8200380: String::lines
    + S8200436: String::isBlank
    + S8201331: Better test cleanup for
    jdk/jfr/api/consumer/TestRecordingFile.java
    + S8201386: Miscellaneous changes imported from jsr166 CVS
    2018-05
    + S8201627: Kerberos sequence number issues
    + S8201867: Kerberos keytabs with holes in certain places are
    parsed incorrectly
    + S8202014: Possible to receive signal before signal semaphore
    created
    + S8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + S8202305: [Graal] org.graalvm.compiler.core.test.GraphResetDebugTest
    fails with java.util.ServiceConfigurationError
    + S8202377: Modularize C2 GC barriers
    + S8202427: Enhance os::print_memory_info on Windows
    + S8202466: Test serviceability/tmtools/jstat/GcTest01.java
    fails: Number of concurrent GC events is 1, but CGCT is 0
    + S8202479: Add missing try_resolve_jobject_in_native calls
    + S8202669: Intermittent crash in
    ClassLoadingService::compute_class_size()
    + S8202685: Optimize ArrayList subList replaceAll
    + S8202710: AARCH64: sporadic jtreg test fail
    + S8202713: Create a MacroAssembler::access_load/store_at
    wrapper for S390 and PPC
    + S8202771: Migrate Unicode character tests to JDK Repo
    + S8202848: -XX:+ExecuteInternalVMTests asserts with
    "assert(cd.valid() == true) failed: failed on a valid
    DirectivesParser string"
    + S8202853: NotifyCount is not initialized
    + S8202863: Rename OopStorage inner collection classes
    + S8202978: Incorrect tmp register passed to
    MacroAssembler::load_mirror()
    + S8202989: Add missing decorators in calls to to
    arraycopy_prologue/epilogue
    + S8203196: C1 emits incorrect code due to integer overflow in
    _tableswitch keys
    + S8203215: IdealLoopTree::split_outer_loop leaves phi-nodes
    with only one input
    + S8203227: Introduce os::processor_id() for Linux and Solaris
    + S8203279: Faster rounding up to nearest power of two
    + S8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + S8203288: PPC64 and s390 fail to build after JDK-8199712
    (Flight Recorder)
    + S8203292: Print complete set of flags in the hs_err file
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203318: compiler/stable/TestStableShort.java is broken
    + S8203339: Add oopDesc::field_offset()
    + S8203341: Add a safepoint-aware Semaphore
    + S8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + S8203352: Improve java implementation of
    Integer/Long.numberOfLeadingZeros
    + S8203355: MITSHM define guarding missing
    + S8203377: Cleanup the usage of os::file_name_strcmp() in
    SharedPathsMiscInfo::check().
    + S8203381: Replace InstanceKlass::allocate_instance_handle
    with JavaCalls::construct_new_instance
    + S8203391: Update com/sun/jdi/JdbMethodExitTest.sh to pass
    valid URL[]
    + S8203398: Test test/langtools/tools/javac/options/release/
    /ReleaseOptionCurrent.java writes into the source directory
    + S8203400: Fix issue with "8199852: Print more information
    about class loaders in LinkageErrors."
    + S8203410: Zero: Disable jfr feature by default
    + S8203431: TestFloatsOnStackDeopt.java throws
    java.lang.LinkageError: loader &lt;bootstrap&gt; attempted duplicate
    class definition for
    java.lang.invoke.BoundMethodHandle$Species_LLL
    + S8203436: javac should fail early when emitting illegal
    signature attributes
    + S8203437: 8199370 broke build on linux-ppc64le (w/ GCC 4.8.5.)
    + S8203454: Minimal, Zero builds fail after JDK-8202377
    (Modularize C2 barriers)
    + S8203457: Add back missing full buffer notification
    + S8203486: skip type inference for non functional interface
    components of intersection types
    + S8203487: Typo in ICUBinary.java: s/Magin/Magic/
    + S8203490: StringTable::dump lacks a load barrier
    + S8203500: Fix broken links to Specification in "specs"
    directory
    + S8203626: ProblemList
    compiler/runtime/TestFloatsOnStackDeopt.java
    + S8203635: JFR sampler thread does not record stack info
    + S8203694: Add a safepoint-aware Semaphore - part 2
- Removed patch:
  * fix-s390x-and-ppc64-builds.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527768000">- Update to upstream tag jdk-11+16
  * Fixes:
    + S8133564: Runtime - 2nd followup to Validate JVM Command-Line
    Flag Arguments
    + S8184030: TestUseRTMLockingOptionOnUnsupportedVM - RTM
    locking optimization not supported is missing
    + S8188248: NullPointerException on generic methods
    + S8189766: whitebox failure with -Xcheck:jni
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8193717: Import resolution performance regression in JDK 9
    + S8194298: Add support for per Socket configuration of TCP
    keepalive
    + S8194630: Uninitialized initiator_address in native GSS
    + S8196202: Javadoc should not generate frames by default
    + S8196913: javadoc does not (over)write stylesheet.css
    + S8198323: testing.md not updated for repository layout change
    + S8199255: [TESTBUG] Open source VM testbase default methods
    tests
    + S8199307: NPE in
    jdk.javadoc.internal.doclets.toolkit.util.Utils.getLineNumber
    + S8199383: [TESTBUG] Open source VM testbase JVMTI tests
    + S8200172: String.split non-positive term incorrect use
    + S8200266: [Graal] Update ProblemList-graal.txt files
    + S8201518: add test for randomized iteration order of
    unmodifiable Set and Map
    + S8202178: type.getKind() for var is None instead of Error
    + S8202290: AtomicAppend tests fail on macOS 10.13 ("High
    Sierra")
    + S8202813: Move vm_weak processing from SystemDictionary to
    WeakProcessor
    + S8202832: cycle detection depends on ordering of requires
    directives
    + S8202842: G1 footprint regressions in jdk11+10
    + S8202945: OopStorage should use GlobalCounter
    + S8202947: Fix minor issues with taglets
    + S8202949: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + S8202950: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + S8203014: jcmd should output command list if no command is
    given
    + S8203028: Simplify reference processing in light of
    JDK-8175797
    + S8203041: AArch64: fix overflow in immediate cmp/cmn
    instruction
    + S8203183:
    vmTestbase/vm/mlvm/anonloader/stress/oome/heap/Test.java times
    out
    + S8203221: Makefile fixes after Flight Recorder
    + S8203225: Fix of redefining a method that removes 1 or more
    lambda expressions failed to commit test cases
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203262: Incorrect cmpxchg usage in
    MetaspaceGC::inc_capacity_until_GC
    + S8203297: java/net/URL/OpenStream.java fails intermittently
    + S8203327: Small cleanups in java.lang.ref
    + S8203328: Rename EFS in java.util.zip internals to something
    meaningful
    + S8203354: assert in
    ClassLoader::update_module_path_entry_list() could have
    incorrect message
    + S8203366: Tag added wrongly in Docs.gmk
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203369: Check for both EAGAIN and EWOULDBLOCK error codes
    + S8203370: [JVMCI] UseJVMCICompiler should imply EnableJVMCI
    + S8203455: jcmd: VM.metaspace: print loader name for anonymous
    CLDs
    + S8203488: Remove error generation from TransTypes
    + S8203497: Bump Jib format version to 1.2
    + S8203628: Optimize (masked) byte memory comparisons on x86
    + S8203686: Add JDK 11 major version to
    javax/net/ssl/compatibility/JdkRelease.java
    + S8203689: Add failure code to threaddb exception messages`
    + S8203699: java/lang/invoke/SpecialInterfaceCall fails with
    SIGILL on aarch64
    + S8203766: Add some instrumentation to
    jdk/java/nio/channels/Selector/RacyDeregister.java
    + S8203769: ProblemList
    test/jdk/java/util/Map/InPlaceOpsCollisions.java
    + S8203774: jdk/jfr/api/recorder/TestStartStopRecording.java
    failed due to compilation failed
    + S8203793: cacerts/VerifyCACerts.java fails with
    java.lang.Exception: At least one cacert test failed
    + S8203795: Change default compiler on Windows to VS2017
    + S8203815: add tests failed because of 8203809 to the
    ProblemList-graal
    + S8203816: add tests failed because of 8203174 to the
    ProblemList-graal
    + S8203817: Monitor::try_lock() should not call
    check_prelock_state()
    + S8203843: BasicParState::default_estimated_thread_count(false)
    can return 0 in gtest
    + S8203865: Metaspace cleanup: Remove unused MemRegion in
    VirtualSpaceNode
    + S8203881: Print erroneous size in NegativeArraySizeException
    + S8203885: ConcurrentLocksDump::dump_at_safepoint() should not
    allocate array in resource area
    + S8203886: Invoke LambdaMetafactory::altMetafactory exactly
    from the BootstrapMethodInvoker
    + S8203892: Target interface added as marker interface in calls
    to altMetafactory
    + S8203926: Problem list
    test/langtools/tools/javac/importscope/T8193717.java
    + S8203932: Windows devkit has wrong dlls in 32 bit tools dir
    + S8203938: Fix build failures from JDK-8133564</changelog>
  <changelog author="fstrba@suse.com" date="1528200000">- Change build requirement to Java 10 or 11, since Java 9 cannot
  build OpenJDK 11 any more.</changelog>
  <changelog author="fstrba@suse.com" date="1528200001">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
</package>
<package pkgid="e1c284692c4d05a1fe7a2be4bc9a30449055852003b73e0414288971c088f6a7" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.6.1"/>
  <changelog author="fstrba@suse.com" date="1528200000">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
</package>
<package pkgid="42bcd2a075776edfe8d64501a24e9293b6cbbdddf25e9469283d8c655e7c02ac" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.9.1"/>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
</package>
<package pkgid="438f6e9c445bc9241755019cb1cdae2196e17d75d987ebc485d1ea62be6a3743" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="11.0.0.0~24" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1525953600">- Fix s390x build, since INCLUDE_SA is false by default on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526040000">- Update to ustream tag jdk-11+13
  * Fixes:
    + S4842658: DefaultListModel and DefaultComboBoxModel should
    support addAll (Collection c)
    + S6574555: PNGImageWriter incorrectly sets bKGD chunk
    + S6788458: PNGImageReader ignores tRNS chunk while reading
    non-indexed RGB/Gray images
    + S8153532: Add @throws NPE javadoc to
    UIManager.setLookAndFeel(String) method description
    + S8154463: New failure of
    closed/java/awt/font/Outline/OutlineInvarianceTest.java
    + S8171277: Elliptic Curves for Security in Crypto
    + S8176717: GC log file handle leaked to child processes
    + S8181594: Efficient and constant-time modular arithmetic
    + S8181910: [macos] Support dark title bars on macOS
    + S8185034: Cleanup and consolidate Metaspace coding
    + S8187123: (reflect) Class#getCanonicalName and
    Class#getSimpleName is a part of performance issue
    + S8187392: Deprecated methods in the peers can be removed
    + S8189687: Swing: Invalid position of candidate pop-up of
    InputMethod in Hi-DPI on Windows
    + S8189916: Dynamic Constant support for Sparc
    + S8191410: Unicode 10
    + S8194968: problem list actions for
    tools/javac/jvm/VerboseOutTest
    + S8195002: Fix test/hotspot/jtreg/gtest/GTestWrapper.java on
    Alpine/Musl
    + S8195717: test java/lang/invoke/MethodHandlesTest timed out
    running testAsCollector1
    + S8196113: Remove the Compact Profile builds
    + S8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + S8197388: Added not existing bug id in jdk/ProblemList.txt
    + S8197447: LogCompilation throws "couldn't find bytecode"
    + S8197954: Remove unnecessary intermediary APIs from AppCDS
    implementation
    + S8198342: Test FileSystemViewListenerLeak.java is unstable
    + S8199067: [REDO] NMT: Enhance thread stack tracking
    + S8199196: Add javadoc support for preview features
    + S8199382: [TESTBUG] Open source VM testbase JDI tests
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8199852: Print more information about class loaders in
    LinkageErrors.
    + S8199912: jshell tool: /open from URI
    + S8199932: Missing copyright header in AWT source code
    + S8200083: Bump bootjdk requirement for JDK 11 to JDK 10
    + S8200094: Turkish locale reports NPE No enum constant
    com.sun.source.doctree.DocTree.Kind.S?NCE
    + S8200146: Remove the appletviewer launcher
    + S8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + S8200372: String::trim JavaDoc should clarify meaning of space
    + S8200557: OopStorage parallel iteration scales poorly
    + S8200716: Object propertyIsEnumerable buggy behavior on short
    integer-string key
    + S8200729: Conditional compilation of GCs
    + S8201138: Defect in XMLEventReader.getElementText() may cause
    data to be skipped, duplicated or otherwise result in a
    ClassCastException
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201492: Properly implement non-contiguous generations for
    Reference discovery
    + S8201524: [AIX] Don't link libfontmanager against
    libawt_headless
    + S8201572: Improve Metaspace Statistics
    + S8201598: Fix for 8181910: Support dark title bars on macOS
    broke the MacOS build
    + S8201602: ARM32 - Minimal Dynamic Constant support
    + S8201626: Typo in MakeWindowAlwaysOnTop test
    + S8201640: Use _ref_processor_* member variables directly in
    G1CollectedHeap
    + S8201793: (ref) Reference object should not support cloning
    + S8202017: Merge Reference Enqueuing phase with phase 3 of
    Reference processing
    + S8202018: Move card table clear before enqueuing pending
    references
    + S8202021: Improve variable naming in ReferenceProcesso
    + S8202050: Add javax/sound/midi/Sequencer/Recording.java to
    the problemList
    + S8202080: Introduce ordering semantics for Atomic::add and
    other RMW atomics
    + S8202083: Remove explicit CMS checks in CardTableBarrierSet
    + S8202143: Parts of 8193435 added in merge change set.
    + S8202181: Correctly specify size of hostname buffer in Unix
    Inet*AddressImpl_getLocalHostName implementations
    + S8202291: java/rmi/Naming/LookupIPv6.java failed with
    Connection refused
    + S8202301: Add tests related to JDK-8196572 to the ProblemList
    + S8202303: LogStream should autoflush on destruction
    + S8202319: Fix compilation warnings in Solaris debug builds
    for DevStudio 12.6
    + S8202387: javac --release 11 not supported
    + S8202424: Metaspace: on chunk retirement, use correct lower
    limit on chunksize when adding blocks to free blocks list
    + S8202435: [aix] print program break as part of memory info
    into hs-err file
    + S8202447: Fix unloading_occurred to mean unloading_occurred
    + S8202465: [C1] casts should not be eliminated for interface
    types
    + S8202548: Use reservation Object when creating SpeciesData
    + S8202552: [AOT][JVMCI] Incorrect usage of INCLUDE_JVMCI and
    INCLUDE_AOT
    + S8202563: BigInteger/BigDecimal not immune to overflow,
    contrary to spec
    + S8202564: java/lang/management/ThreadMXBean/ThreadCounts.java
    fails
    + S8202565: C1 compilation crashes with
    "assert(is_double_stack() &amp;&amp; !is_virtual()) failed: type check"
    + S8202575: Remove java/lang/String/nativeEncoding/
    /StringPlatformChars.java from ProblemList
    + S8202581: failure_handler: gather more environment
    information on macOS
    + S8202582: DateTimeFormatterBuilder.parseOffsetBased
    unnecessarily calls toString()
    + S8202583: Remove experimental ClassForNamePlugin
    + S8202584: de-problem list tools/javac/jvm/VerboseOutTest
    + S8202591: Remove usage of CMSEdenChunksRecordAlways in
    defNewGeneration.cpp
    + S8202592: Remove unused EvacuateFollowersClosure
    + S8202597: javac is not inducing a notional interface if
    Object appears in an intersection type
    + S8202599: Mark intermittently failing jshell tests
    + S8202606: Deprecate AllowNonVirtualCalls option
    + S8202631: JVM_Clone to throw CloneNotSupportException for
    Reference object
    + S8202634: Metaspace: simplify SpaceManager lists
    + S8202639: Use concrete Generation classes in SerialHeap and
    CMSHeap
    + S8202640: Small C1 cleanups for BarrierSetC1
    + S8202641: Replace OOP_SINCE_SAVE_MARKS with templates
    + S8202642: Replace PAR_OOP_ITERATE with templates
    + S8202647: Add deduplicate_string function to CollectedHeap
    + S8202649: Move the Parallel GC specific task creation
    functions out of Threads
    + S8202650: Enforce group for attach listener file
    + S8202662: JFR tests fails: Could not find leak with class
    + S8202672: Build failed in metaspace.cpp with VS2017
    + S8202676: AArch64: Missing enter/leave around barrier leads
    to infinite loop
    + S8202684: Minimal VM build is broken after JDK-8199067,
    JDK-8202638
    + S8202686: Missing test case for 8200167 - final Object methods
    + S8202690: jdk/jshell/ToolBasicTest.java failed in
    testOpenFileOverHttp() and testOpenLocalFileUrl()
    + S8202709: Move oopDesc::is_archive_object to
    MetaspaceShared::is_archive_object
    + S8202711: Merge tiered compilation policies
    + S8202719: Use Collections.emptyEnumeration where possible
    + S8202722: Move marksweep_init into GC code
    + S8202744: Expired flag removal for JDK 11
    + S8202780: Remove EnqueueTask related code from
    ReferenceProcessor after JDK-8202017
    + S8202781: Fix typo in DiscoveredListIterator::complete_enqeue
    + S8202810: Remove class-for-name test
    + S8202816: Update JarSigning.keystore
- Removed patch:
  * aarch64-infinite-loop.patch
  - Integrated upstream
- Modified patch:
  * java11-improved-fonts.patch
  - Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1526299200">- s390x: avoid packaging files that are not present on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526558400">- Update to upstream tag jdk-11+14
  * Fixes:
    + S8132287: obsolete the "InlineNotify" flag option
    + S8174995: SA: clhsdb 'where -a' throws Assertion Failure with
    illegal code 236 when CDS is used
    + S8176510: java/awt/font/GlyphVector/TestLayoutFlags.java
    fails with OpenJDK
    + S8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + S8185505: AArch64: Port AOT to AArch64
    + S8189140: SystemDictionaryShared::initialize() should be
    renamed to be more meaningful
    + S8189271: Metaspace::_capacity_until_GC should be size_t
    + S8191533: jar --describe-module prints service provider class
    names in lower case
    + S8193935: Illegal countedLoops transformation
    + S8194998: broken error message for subclass of interface with
    private method
    + S8195613: [SA] HotSpotTypeDataBase.readVMLongConstants
    truncates values to int
    + S8196340: (coll) Examine overriding inherited methods in
    ArrayList and ArrayList.SubList
    + S8196360: java/awt/Dialog/SiblingChildOrder/
    /SiblingChildOrderTest.java fails
    + S8196616: java/awt/GraphicsDevice/DisplayModes/
    /CompareToXrandrTest.java fails
    + S8197948: Create test for SwingSet2 main window
    + S8198412: MonospacedGlyphWidthTest.java may fail on Solaris
    + S8198991: Move Java2D demo to the open repository
    + S8199252: [TESTBUG] Open source VM testbase system dictionary
    tests
    + S8199712: Flight Recorder
    + S8200377: String::strip, String::stripLeading,
    String::stripTrailing
    + S8201447: C1 does backedge profiling incorrectly
    + S8201491: G1 support for java.lang.ref.Reference precleaning
    + S8201532: Update idom to get correct dom depth calculation
    + S8201593: Print array length in
    ArrayIndexOutOfBoundsException.
    + S8201604: ARM64 - Build failure after JDK-8193260
    + S8202016: Use obj+offset in interpreter array access
    + S8202064: Jemmy JInternalFrameOperator: Add wait for close(),
    activate(), resize() and move() operations
    + S8202113: Reflection API is causing caller classes to leak
    + S8202289: Non-empty directory in module path is not handled
    properly at CDS/AppCDS dump time
    + S8202322: AIX: symbol visibility flags not support on xlc 12.1
    + S8202392: [TESTBUG] open source vm testbase heapdump tests
    + S8202395: AARCH64: wrong encoding for SIMD instructions zip,
    trn, uzp
    + S8202426: NPE thrown by Transformer when XMLStreamReader
    reports no xml attribute type
    + S8202476: ImageLib is broken in 32 bit Windows
    + S8202519: Crash during large AppCDS dump
    + S8202544: Hide unused exports in libzip
    + S8202553: Update FXLauncherTest as part of removing JavaFX
    from JDK
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8202580: Dashed BasicStroke randomly painted incorrectly,
    may freeze application
    + S8202614: Add ability to validate links in JavadocTester
    + S8202679: Updates on windows failures in the problem list
    + S8202683: Minimal VM should build cleanly on 64-bit platforms
    + S8202708: Add a check of opening stream for not-existing UNC
    url
    + S8202714: Create a MacroAssembler::access_load/store_at
    wrapper for AArch64
    + S8202718: Jemmy JInternalFrameOperator: Dependency with
    orders of Minimize, Maximize and Close buttons
    + S8202738: vm_version Abstract_VM_Version::internal_vm_info_string()
    returns same string for different incremental builds
    + S8202745: Remove hyphens from "out-of-bounds".
    + S8202748: jtreg :hotspot_misc group shouldn't include
    vmTestbase tests
    + S8202756: move FilterUSRTest.java to openJDK
    + S8202763: failure_handler: list open files for macOS
    + S8202764: api/java_text/SimpleDateFormat/index.html#Format
    testcases started to fail with JDK11 b12
    + S8202767: java/awt/font/GlyphVector/TestLayoutFlags.java is
    missing null check
    + S8202773: Unhandled oop in JavaThread::collect_counters
    + S8202811: Problem List some tests that leave windows open on
    the desktop
    + S8202822: Add .git to .hgignore
    + S8202824: Cleanup discrepancies in ProblemList for java_awt
    jtreg tests
    + S8202829: Implement CollectedHeap::get_safepoint_workers()
    for G1
    + S8202843: langtools ant build fails
    + S8202878:
    com/apple/laf/ScreenMenu/ScreenMenuMemoryLeakTest.java fails
    + S8202889: Remove trailing LF from perf log
    + S8202914: Let custom makefile override jmod intput dir
    locations
    + S8202915: [JAXP] Performance enhancements and cleanups in
    com.sun.org.apache.xerces.internal.impl.dtd.XMLDTDValidator
    + S8202919: JDK-8202683 broke macosx build
    + S8202920: jvm.cfg generation incorrect
    + S8202974: Backout JDK-8202683
    + S8202976: Add C1 lea patching support for x86
    + S8202993: Add support for x86 testptr/testq with register and
    address
    + S8202994: Add support for undoing last TLAB allocation
    + S8202997: Split test/jdk/:tier1 to enable better parallel
    execution
    + S8203032: PrintMetaspaceDcmd fails: Non-Class: missing from
    stdout/stderr
    + S8203059: (so) Closing a socket channel registered with
    Selector and with SO_LINGER set to 0 does not reset connection
    + S8203176: javadoc handles non-ASCII characters incorrectly.
    + S8203220: Introduce ATTRIBUTE_ALIGNED macro
    + S8203223: Signed integer overflow in ImageStrings::hash_code
    (libjimage.so)
    + S8203250: runtime/LoadClass/test-classes/Hello.java has wrong
    legal notice
    + S8203251: Non-PCH build failed after JDK-8199712 (Flight
    Recorder)
    + S8203274: 32-bit build failures after JDK-8199712 (Flight
    Recorder)
    + S8203278: AArch64/PPC64 build failures after JDK-8199712
    (Flight Recorder)
    + S8203285: Minimal VM fails to build after JDK-8199712 (Flight
    Recorder)</changelog>
  <changelog author="fstrba@suse.com" date="1526990400">- Added patch:
  * fix-s390x-and-ppc64-builds.patch
    + upstream fix for broken s390x and ppc64/ppc64le builds</changelog>
  <changelog author="fstrba@suse.com" date="1527249600">- Update to upstream tag jdk-11+15
  * Fixes:
    + S8027760: JFC schema condition should not have defaults
    + S8134537: Much nearly duplicated code for sun.misc.Signal
    support
    + S8146293: Add support for RSASSA-PSS Signature algorithm
    + S8148354: Errors targeting functional interface intersection
    types
    + S8176808: Split up metaspace.cpp
    + S8185803: JdbExprTest.sh fails in JDK10-hs nightly due to
    "Name unknown: java.lang.Long.MAX_VALUE "
    + S8192992: Test8007294.java failed: attempted to spill a
    non-spillable item
    + S8193332: MetaspaceShared::check_shared_class_loader_type is
    not used during archive creation
    + S8195098: Low latency hashtable for read-mostly scenarios
    + S8195817: JFR.stop should require name of recording
    + S8195818: JFR.start should increase autogenerated name by one
    + S8195819: Remove recording=x from jcmd JFR.check output
    + S8196048: thrown type variables should be roots in the
    minimum inference graph
    + S8196201: Generate pages to list all classes and all packages
    in javadoc output
    + S8196619: [TESTBUG] restore current version check in
    runtime/appcds/MultiReleaseJars.java
    + S8196987: Resolve disabled warnings for libzip
    + S8198315: Incomplete classpath causes NPE in TransTypes
    + S8198337: -XX:StartFlightRecording=dumponexit=true,disk=false
    doesn't work
    + S8198548: Initialization race in
    com.sun.org.apache.xerces.internal.impl.xpath.regex.Token.getRange()
    on Token.categories
    + S8199064: Test applications/jcstress/other/Test.java#id1108
    fails on Sparc
    + S8199257: [TESTBUG] Open source VM testbase metaspace tests
    + S8199271: [TESTBUG] open source VM testbase stress tests
    + S8199370: [TESTBUG] Open source vm testbase GC tests
    + S8199379: [TESTBUG] Open source vm testbase JDB tests
    + S8199384: [TESTBUG] Open source VM testbase MLVM tests
    + S8199807: AppCDS performs overly restrictive path matching
    check.
    + S8200380: String::lines
    + S8200436: String::isBlank
    + S8201331: Better test cleanup for
    jdk/jfr/api/consumer/TestRecordingFile.java
    + S8201386: Miscellaneous changes imported from jsr166 CVS
    2018-05
    + S8201627: Kerberos sequence number issues
    + S8201867: Kerberos keytabs with holes in certain places are
    parsed incorrectly
    + S8202014: Possible to receive signal before signal semaphore
    created
    + S8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + S8202305: [Graal] org.graalvm.compiler.core.test.GraphResetDebugTest
    fails with java.util.ServiceConfigurationError
    + S8202377: Modularize C2 GC barriers
    + S8202427: Enhance os::print_memory_info on Windows
    + S8202466: Test serviceability/tmtools/jstat/GcTest01.java
    fails: Number of concurrent GC events is 1, but CGCT is 0
    + S8202479: Add missing try_resolve_jobject_in_native calls
    + S8202669: Intermittent crash in
    ClassLoadingService::compute_class_size()
    + S8202685: Optimize ArrayList subList replaceAll
    + S8202710: AARCH64: sporadic jtreg test fail
    + S8202713: Create a MacroAssembler::access_load/store_at
    wrapper for S390 and PPC
    + S8202771: Migrate Unicode character tests to JDK Repo
    + S8202848: -XX:+ExecuteInternalVMTests asserts with
    "assert(cd.valid() == true) failed: failed on a valid
    DirectivesParser string"
    + S8202853: NotifyCount is not initialized
    + S8202863: Rename OopStorage inner collection classes
    + S8202978: Incorrect tmp register passed to
    MacroAssembler::load_mirror()
    + S8202989: Add missing decorators in calls to to
    arraycopy_prologue/epilogue
    + S8203196: C1 emits incorrect code due to integer overflow in
    _tableswitch keys
    + S8203215: IdealLoopTree::split_outer_loop leaves phi-nodes
    with only one input
    + S8203227: Introduce os::processor_id() for Linux and Solaris
    + S8203279: Faster rounding up to nearest power of two
    + S8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + S8203288: PPC64 and s390 fail to build after JDK-8199712
    (Flight Recorder)
    + S8203292: Print complete set of flags in the hs_err file
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203318: compiler/stable/TestStableShort.java is broken
    + S8203339: Add oopDesc::field_offset()
    + S8203341: Add a safepoint-aware Semaphore
    + S8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + S8203352: Improve java implementation of
    Integer/Long.numberOfLeadingZeros
    + S8203355: MITSHM define guarding missing
    + S8203377: Cleanup the usage of os::file_name_strcmp() in
    SharedPathsMiscInfo::check().
    + S8203381: Replace InstanceKlass::allocate_instance_handle
    with JavaCalls::construct_new_instance
    + S8203391: Update com/sun/jdi/JdbMethodExitTest.sh to pass
    valid URL[]
    + S8203398: Test test/langtools/tools/javac/options/release/
    /ReleaseOptionCurrent.java writes into the source directory
    + S8203400: Fix issue with "8199852: Print more information
    about class loaders in LinkageErrors."
    + S8203410: Zero: Disable jfr feature by default
    + S8203431: TestFloatsOnStackDeopt.java throws
    java.lang.LinkageError: loader &lt;bootstrap&gt; attempted duplicate
    class definition for
    java.lang.invoke.BoundMethodHandle$Species_LLL
    + S8203436: javac should fail early when emitting illegal
    signature attributes
    + S8203437: 8199370 broke build on linux-ppc64le (w/ GCC 4.8.5.)
    + S8203454: Minimal, Zero builds fail after JDK-8202377
    (Modularize C2 barriers)
    + S8203457: Add back missing full buffer notification
    + S8203486: skip type inference for non functional interface
    components of intersection types
    + S8203487: Typo in ICUBinary.java: s/Magin/Magic/
    + S8203490: StringTable::dump lacks a load barrier
    + S8203500: Fix broken links to Specification in "specs"
    directory
    + S8203626: ProblemList
    compiler/runtime/TestFloatsOnStackDeopt.java
    + S8203635: JFR sampler thread does not record stack info
    + S8203694: Add a safepoint-aware Semaphore - part 2
- Removed patch:
  * fix-s390x-and-ppc64-builds.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527768000">- Update to upstream tag jdk-11+16
  * Fixes:
    + S8133564: Runtime - 2nd followup to Validate JVM Command-Line
    Flag Arguments
    + S8184030: TestUseRTMLockingOptionOnUnsupportedVM - RTM
    locking optimization not supported is missing
    + S8188248: NullPointerException on generic methods
    + S8189766: whitebox failure with -Xcheck:jni
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8193717: Import resolution performance regression in JDK 9
    + S8194298: Add support for per Socket configuration of TCP
    keepalive
    + S8194630: Uninitialized initiator_address in native GSS
    + S8196202: Javadoc should not generate frames by default
    + S8196913: javadoc does not (over)write stylesheet.css
    + S8198323: testing.md not updated for repository layout change
    + S8199255: [TESTBUG] Open source VM testbase default methods
    tests
    + S8199307: NPE in
    jdk.javadoc.internal.doclets.toolkit.util.Utils.getLineNumber
    + S8199383: [TESTBUG] Open source VM testbase JVMTI tests
    + S8200172: String.split non-positive term incorrect use
    + S8200266: [Graal] Update ProblemList-graal.txt files
    + S8201518: add test for randomized iteration order of
    unmodifiable Set and Map
    + S8202178: type.getKind() for var is None instead of Error
    + S8202290: AtomicAppend tests fail on macOS 10.13 ("High
    Sierra")
    + S8202813: Move vm_weak processing from SystemDictionary to
    WeakProcessor
    + S8202832: cycle detection depends on ordering of requires
    directives
    + S8202842: G1 footprint regressions in jdk11+10
    + S8202945: OopStorage should use GlobalCounter
    + S8202947: Fix minor issues with taglets
    + S8202949: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + S8202950: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + S8203014: jcmd should output command list if no command is
    given
    + S8203028: Simplify reference processing in light of
    JDK-8175797
    + S8203041: AArch64: fix overflow in immediate cmp/cmn
    instruction
    + S8203183:
    vmTestbase/vm/mlvm/anonloader/stress/oome/heap/Test.java times
    out
    + S8203221: Makefile fixes after Flight Recorder
    + S8203225: Fix of redefining a method that removes 1 or more
    lambda expressions failed to commit test cases
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203262: Incorrect cmpxchg usage in
    MetaspaceGC::inc_capacity_until_GC
    + S8203297: java/net/URL/OpenStream.java fails intermittently
    + S8203327: Small cleanups in java.lang.ref
    + S8203328: Rename EFS in java.util.zip internals to something
    meaningful
    + S8203354: assert in
    ClassLoader::update_module_path_entry_list() could have
    incorrect message
    + S8203366: Tag added wrongly in Docs.gmk
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203369: Check for both EAGAIN and EWOULDBLOCK error codes
    + S8203370: [JVMCI] UseJVMCICompiler should imply EnableJVMCI
    + S8203455: jcmd: VM.metaspace: print loader name for anonymous
    CLDs
    + S8203488: Remove error generation from TransTypes
    + S8203497: Bump Jib format version to 1.2
    + S8203628: Optimize (masked) byte memory comparisons on x86
    + S8203686: Add JDK 11 major version to
    javax/net/ssl/compatibility/JdkRelease.java
    + S8203689: Add failure code to threaddb exception messages`
    + S8203699: java/lang/invoke/SpecialInterfaceCall fails with
    SIGILL on aarch64
    + S8203766: Add some instrumentation to
    jdk/java/nio/channels/Selector/RacyDeregister.java
    + S8203769: ProblemList
    test/jdk/java/util/Map/InPlaceOpsCollisions.java
    + S8203774: jdk/jfr/api/recorder/TestStartStopRecording.java
    failed due to compilation failed
    + S8203793: cacerts/VerifyCACerts.java fails with
    java.lang.Exception: At least one cacert test failed
    + S8203795: Change default compiler on Windows to VS2017
    + S8203815: add tests failed because of 8203809 to the
    ProblemList-graal
    + S8203816: add tests failed because of 8203174 to the
    ProblemList-graal
    + S8203817: Monitor::try_lock() should not call
    check_prelock_state()
    + S8203843: BasicParState::default_estimated_thread_count(false)
    can return 0 in gtest
    + S8203865: Metaspace cleanup: Remove unused MemRegion in
    VirtualSpaceNode
    + S8203881: Print erroneous size in NegativeArraySizeException
    + S8203885: ConcurrentLocksDump::dump_at_safepoint() should not
    allocate array in resource area
    + S8203886: Invoke LambdaMetafactory::altMetafactory exactly
    from the BootstrapMethodInvoker
    + S8203892: Target interface added as marker interface in calls
    to altMetafactory
    + S8203926: Problem list
    test/langtools/tools/javac/importscope/T8193717.java
    + S8203932: Windows devkit has wrong dlls in 32 bit tools dir
    + S8203938: Fix build failures from JDK-8133564</changelog>
  <changelog author="fstrba@suse.com" date="1528200000">- Change build requirement to Java 10 or 11, since Java 9 cannot
  build OpenJDK 11 any more.</changelog>
  <changelog author="fstrba@suse.com" date="1528200001">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
</package>
<package pkgid="edc90ec28645e9e6712fa7725bbbe53a8e953a039b488fa1f93b022b4848bc14" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.6.1"/>
  <changelog author="fstrba@suse.com" date="1528200000">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
</package>
<package pkgid="2210a5f68536dfd09c3ad6416a73566553ca010e48334b83683677de6e7c15d8" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.9.1"/>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
</package>
<package pkgid="149e861bd19916f95a63117d9ca0d402b9e99c4f01024ad6928cc8bc898ed52b" name="java-11-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="11.0.0.0~24" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1525953600">- Fix s390x build, since INCLUDE_SA is false by default on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526040000">- Update to ustream tag jdk-11+13
  * Fixes:
    + S4842658: DefaultListModel and DefaultComboBoxModel should
    support addAll (Collection c)
    + S6574555: PNGImageWriter incorrectly sets bKGD chunk
    + S6788458: PNGImageReader ignores tRNS chunk while reading
    non-indexed RGB/Gray images
    + S8153532: Add @throws NPE javadoc to
    UIManager.setLookAndFeel(String) method description
    + S8154463: New failure of
    closed/java/awt/font/Outline/OutlineInvarianceTest.java
    + S8171277: Elliptic Curves for Security in Crypto
    + S8176717: GC log file handle leaked to child processes
    + S8181594: Efficient and constant-time modular arithmetic
    + S8181910: [macos] Support dark title bars on macOS
    + S8185034: Cleanup and consolidate Metaspace coding
    + S8187123: (reflect) Class#getCanonicalName and
    Class#getSimpleName is a part of performance issue
    + S8187392: Deprecated methods in the peers can be removed
    + S8189687: Swing: Invalid position of candidate pop-up of
    InputMethod in Hi-DPI on Windows
    + S8189916: Dynamic Constant support for Sparc
    + S8191410: Unicode 10
    + S8194968: problem list actions for
    tools/javac/jvm/VerboseOutTest
    + S8195002: Fix test/hotspot/jtreg/gtest/GTestWrapper.java on
    Alpine/Musl
    + S8195717: test java/lang/invoke/MethodHandlesTest timed out
    running testAsCollector1
    + S8196113: Remove the Compact Profile builds
    + S8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + S8197388: Added not existing bug id in jdk/ProblemList.txt
    + S8197447: LogCompilation throws "couldn't find bytecode"
    + S8197954: Remove unnecessary intermediary APIs from AppCDS
    implementation
    + S8198342: Test FileSystemViewListenerLeak.java is unstable
    + S8199067: [REDO] NMT: Enhance thread stack tracking
    + S8199196: Add javadoc support for preview features
    + S8199382: [TESTBUG] Open source VM testbase JDI tests
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8199852: Print more information about class loaders in
    LinkageErrors.
    + S8199912: jshell tool: /open from URI
    + S8199932: Missing copyright header in AWT source code
    + S8200083: Bump bootjdk requirement for JDK 11 to JDK 10
    + S8200094: Turkish locale reports NPE No enum constant
    com.sun.source.doctree.DocTree.Kind.S?NCE
    + S8200146: Remove the appletviewer launcher
    + S8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + S8200372: String::trim JavaDoc should clarify meaning of space
    + S8200557: OopStorage parallel iteration scales poorly
    + S8200716: Object propertyIsEnumerable buggy behavior on short
    integer-string key
    + S8200729: Conditional compilation of GCs
    + S8201138: Defect in XMLEventReader.getElementText() may cause
    data to be skipped, duplicated or otherwise result in a
    ClassCastException
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201492: Properly implement non-contiguous generations for
    Reference discovery
    + S8201524: [AIX] Don't link libfontmanager against
    libawt_headless
    + S8201572: Improve Metaspace Statistics
    + S8201598: Fix for 8181910: Support dark title bars on macOS
    broke the MacOS build
    + S8201602: ARM32 - Minimal Dynamic Constant support
    + S8201626: Typo in MakeWindowAlwaysOnTop test
    + S8201640: Use _ref_processor_* member variables directly in
    G1CollectedHeap
    + S8201793: (ref) Reference object should not support cloning
    + S8202017: Merge Reference Enqueuing phase with phase 3 of
    Reference processing
    + S8202018: Move card table clear before enqueuing pending
    references
    + S8202021: Improve variable naming in ReferenceProcesso
    + S8202050: Add javax/sound/midi/Sequencer/Recording.java to
    the problemList
    + S8202080: Introduce ordering semantics for Atomic::add and
    other RMW atomics
    + S8202083: Remove explicit CMS checks in CardTableBarrierSet
    + S8202143: Parts of 8193435 added in merge change set.
    + S8202181: Correctly specify size of hostname buffer in Unix
    Inet*AddressImpl_getLocalHostName implementations
    + S8202291: java/rmi/Naming/LookupIPv6.java failed with
    Connection refused
    + S8202301: Add tests related to JDK-8196572 to the ProblemList
    + S8202303: LogStream should autoflush on destruction
    + S8202319: Fix compilation warnings in Solaris debug builds
    for DevStudio 12.6
    + S8202387: javac --release 11 not supported
    + S8202424: Metaspace: on chunk retirement, use correct lower
    limit on chunksize when adding blocks to free blocks list
    + S8202435: [aix] print program break as part of memory info
    into hs-err file
    + S8202447: Fix unloading_occurred to mean unloading_occurred
    + S8202465: [C1] casts should not be eliminated for interface
    types
    + S8202548: Use reservation Object when creating SpeciesData
    + S8202552: [AOT][JVMCI] Incorrect usage of INCLUDE_JVMCI and
    INCLUDE_AOT
    + S8202563: BigInteger/BigDecimal not immune to overflow,
    contrary to spec
    + S8202564: java/lang/management/ThreadMXBean/ThreadCounts.java
    fails
    + S8202565: C1 compilation crashes with
    "assert(is_double_stack() &amp;&amp; !is_virtual()) failed: type check"
    + S8202575: Remove java/lang/String/nativeEncoding/
    /StringPlatformChars.java from ProblemList
    + S8202581: failure_handler: gather more environment
    information on macOS
    + S8202582: DateTimeFormatterBuilder.parseOffsetBased
    unnecessarily calls toString()
    + S8202583: Remove experimental ClassForNamePlugin
    + S8202584: de-problem list tools/javac/jvm/VerboseOutTest
    + S8202591: Remove usage of CMSEdenChunksRecordAlways in
    defNewGeneration.cpp
    + S8202592: Remove unused EvacuateFollowersClosure
    + S8202597: javac is not inducing a notional interface if
    Object appears in an intersection type
    + S8202599: Mark intermittently failing jshell tests
    + S8202606: Deprecate AllowNonVirtualCalls option
    + S8202631: JVM_Clone to throw CloneNotSupportException for
    Reference object
    + S8202634: Metaspace: simplify SpaceManager lists
    + S8202639: Use concrete Generation classes in SerialHeap and
    CMSHeap
    + S8202640: Small C1 cleanups for BarrierSetC1
    + S8202641: Replace OOP_SINCE_SAVE_MARKS with templates
    + S8202642: Replace PAR_OOP_ITERATE with templates
    + S8202647: Add deduplicate_string function to CollectedHeap
    + S8202649: Move the Parallel GC specific task creation
    functions out of Threads
    + S8202650: Enforce group for attach listener file
    + S8202662: JFR tests fails: Could not find leak with class
    + S8202672: Build failed in metaspace.cpp with VS2017
    + S8202676: AArch64: Missing enter/leave around barrier leads
    to infinite loop
    + S8202684: Minimal VM build is broken after JDK-8199067,
    JDK-8202638
    + S8202686: Missing test case for 8200167 - final Object methods
    + S8202690: jdk/jshell/ToolBasicTest.java failed in
    testOpenFileOverHttp() and testOpenLocalFileUrl()
    + S8202709: Move oopDesc::is_archive_object to
    MetaspaceShared::is_archive_object
    + S8202711: Merge tiered compilation policies
    + S8202719: Use Collections.emptyEnumeration where possible
    + S8202722: Move marksweep_init into GC code
    + S8202744: Expired flag removal for JDK 11
    + S8202780: Remove EnqueueTask related code from
    ReferenceProcessor after JDK-8202017
    + S8202781: Fix typo in DiscoveredListIterator::complete_enqeue
    + S8202810: Remove class-for-name test
    + S8202816: Update JarSigning.keystore
- Removed patch:
  * aarch64-infinite-loop.patch
  - Integrated upstream
- Modified patch:
  * java11-improved-fonts.patch
  - Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1526299200">- s390x: avoid packaging files that are not present on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526558400">- Update to upstream tag jdk-11+14
  * Fixes:
    + S8132287: obsolete the "InlineNotify" flag option
    + S8174995: SA: clhsdb 'where -a' throws Assertion Failure with
    illegal code 236 when CDS is used
    + S8176510: java/awt/font/GlyphVector/TestLayoutFlags.java
    fails with OpenJDK
    + S8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + S8185505: AArch64: Port AOT to AArch64
    + S8189140: SystemDictionaryShared::initialize() should be
    renamed to be more meaningful
    + S8189271: Metaspace::_capacity_until_GC should be size_t
    + S8191533: jar --describe-module prints service provider class
    names in lower case
    + S8193935: Illegal countedLoops transformation
    + S8194998: broken error message for subclass of interface with
    private method
    + S8195613: [SA] HotSpotTypeDataBase.readVMLongConstants
    truncates values to int
    + S8196340: (coll) Examine overriding inherited methods in
    ArrayList and ArrayList.SubList
    + S8196360: java/awt/Dialog/SiblingChildOrder/
    /SiblingChildOrderTest.java fails
    + S8196616: java/awt/GraphicsDevice/DisplayModes/
    /CompareToXrandrTest.java fails
    + S8197948: Create test for SwingSet2 main window
    + S8198412: MonospacedGlyphWidthTest.java may fail on Solaris
    + S8198991: Move Java2D demo to the open repository
    + S8199252: [TESTBUG] Open source VM testbase system dictionary
    tests
    + S8199712: Flight Recorder
    + S8200377: String::strip, String::stripLeading,
    String::stripTrailing
    + S8201447: C1 does backedge profiling incorrectly
    + S8201491: G1 support for java.lang.ref.Reference precleaning
    + S8201532: Update idom to get correct dom depth calculation
    + S8201593: Print array length in
    ArrayIndexOutOfBoundsException.
    + S8201604: ARM64 - Build failure after JDK-8193260
    + S8202016: Use obj+offset in interpreter array access
    + S8202064: Jemmy JInternalFrameOperator: Add wait for close(),
    activate(), resize() and move() operations
    + S8202113: Reflection API is causing caller classes to leak
    + S8202289: Non-empty directory in module path is not handled
    properly at CDS/AppCDS dump time
    + S8202322: AIX: symbol visibility flags not support on xlc 12.1
    + S8202392: [TESTBUG] open source vm testbase heapdump tests
    + S8202395: AARCH64: wrong encoding for SIMD instructions zip,
    trn, uzp
    + S8202426: NPE thrown by Transformer when XMLStreamReader
    reports no xml attribute type
    + S8202476: ImageLib is broken in 32 bit Windows
    + S8202519: Crash during large AppCDS dump
    + S8202544: Hide unused exports in libzip
    + S8202553: Update FXLauncherTest as part of removing JavaFX
    from JDK
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8202580: Dashed BasicStroke randomly painted incorrectly,
    may freeze application
    + S8202614: Add ability to validate links in JavadocTester
    + S8202679: Updates on windows failures in the problem list
    + S8202683: Minimal VM should build cleanly on 64-bit platforms
    + S8202708: Add a check of opening stream for not-existing UNC
    url
    + S8202714: Create a MacroAssembler::access_load/store_at
    wrapper for AArch64
    + S8202718: Jemmy JInternalFrameOperator: Dependency with
    orders of Minimize, Maximize and Close buttons
    + S8202738: vm_version Abstract_VM_Version::internal_vm_info_string()
    returns same string for different incremental builds
    + S8202745: Remove hyphens from "out-of-bounds".
    + S8202748: jtreg :hotspot_misc group shouldn't include
    vmTestbase tests
    + S8202756: move FilterUSRTest.java to openJDK
    + S8202763: failure_handler: list open files for macOS
    + S8202764: api/java_text/SimpleDateFormat/index.html#Format
    testcases started to fail with JDK11 b12
    + S8202767: java/awt/font/GlyphVector/TestLayoutFlags.java is
    missing null check
    + S8202773: Unhandled oop in JavaThread::collect_counters
    + S8202811: Problem List some tests that leave windows open on
    the desktop
    + S8202822: Add .git to .hgignore
    + S8202824: Cleanup discrepancies in ProblemList for java_awt
    jtreg tests
    + S8202829: Implement CollectedHeap::get_safepoint_workers()
    for G1
    + S8202843: langtools ant build fails
    + S8202878:
    com/apple/laf/ScreenMenu/ScreenMenuMemoryLeakTest.java fails
    + S8202889: Remove trailing LF from perf log
    + S8202914: Let custom makefile override jmod intput dir
    locations
    + S8202915: [JAXP] Performance enhancements and cleanups in
    com.sun.org.apache.xerces.internal.impl.dtd.XMLDTDValidator
    + S8202919: JDK-8202683 broke macosx build
    + S8202920: jvm.cfg generation incorrect
    + S8202974: Backout JDK-8202683
    + S8202976: Add C1 lea patching support for x86
    + S8202993: Add support for x86 testptr/testq with register and
    address
    + S8202994: Add support for undoing last TLAB allocation
    + S8202997: Split test/jdk/:tier1 to enable better parallel
    execution
    + S8203032: PrintMetaspaceDcmd fails: Non-Class: missing from
    stdout/stderr
    + S8203059: (so) Closing a socket channel registered with
    Selector and with SO_LINGER set to 0 does not reset connection
    + S8203176: javadoc handles non-ASCII characters incorrectly.
    + S8203220: Introduce ATTRIBUTE_ALIGNED macro
    + S8203223: Signed integer overflow in ImageStrings::hash_code
    (libjimage.so)
    + S8203250: runtime/LoadClass/test-classes/Hello.java has wrong
    legal notice
    + S8203251: Non-PCH build failed after JDK-8199712 (Flight
    Recorder)
    + S8203274: 32-bit build failures after JDK-8199712 (Flight
    Recorder)
    + S8203278: AArch64/PPC64 build failures after JDK-8199712
    (Flight Recorder)
    + S8203285: Minimal VM fails to build after JDK-8199712 (Flight
    Recorder)</changelog>
  <changelog author="fstrba@suse.com" date="1526990400">- Added patch:
  * fix-s390x-and-ppc64-builds.patch
    + upstream fix for broken s390x and ppc64/ppc64le builds</changelog>
  <changelog author="fstrba@suse.com" date="1527249600">- Update to upstream tag jdk-11+15
  * Fixes:
    + S8027760: JFC schema condition should not have defaults
    + S8134537: Much nearly duplicated code for sun.misc.Signal
    support
    + S8146293: Add support for RSASSA-PSS Signature algorithm
    + S8148354: Errors targeting functional interface intersection
    types
    + S8176808: Split up metaspace.cpp
    + S8185803: JdbExprTest.sh fails in JDK10-hs nightly due to
    "Name unknown: java.lang.Long.MAX_VALUE "
    + S8192992: Test8007294.java failed: attempted to spill a
    non-spillable item
    + S8193332: MetaspaceShared::check_shared_class_loader_type is
    not used during archive creation
    + S8195098: Low latency hashtable for read-mostly scenarios
    + S8195817: JFR.stop should require name of recording
    + S8195818: JFR.start should increase autogenerated name by one
    + S8195819: Remove recording=x from jcmd JFR.check output
    + S8196048: thrown type variables should be roots in the
    minimum inference graph
    + S8196201: Generate pages to list all classes and all packages
    in javadoc output
    + S8196619: [TESTBUG] restore current version check in
    runtime/appcds/MultiReleaseJars.java
    + S8196987: Resolve disabled warnings for libzip
    + S8198315: Incomplete classpath causes NPE in TransTypes
    + S8198337: -XX:StartFlightRecording=dumponexit=true,disk=false
    doesn't work
    + S8198548: Initialization race in
    com.sun.org.apache.xerces.internal.impl.xpath.regex.Token.getRange()
    on Token.categories
    + S8199064: Test applications/jcstress/other/Test.java#id1108
    fails on Sparc
    + S8199257: [TESTBUG] Open source VM testbase metaspace tests
    + S8199271: [TESTBUG] open source VM testbase stress tests
    + S8199370: [TESTBUG] Open source vm testbase GC tests
    + S8199379: [TESTBUG] Open source vm testbase JDB tests
    + S8199384: [TESTBUG] Open source VM testbase MLVM tests
    + S8199807: AppCDS performs overly restrictive path matching
    check.
    + S8200380: String::lines
    + S8200436: String::isBlank
    + S8201331: Better test cleanup for
    jdk/jfr/api/consumer/TestRecordingFile.java
    + S8201386: Miscellaneous changes imported from jsr166 CVS
    2018-05
    + S8201627: Kerberos sequence number issues
    + S8201867: Kerberos keytabs with holes in certain places are
    parsed incorrectly
    + S8202014: Possible to receive signal before signal semaphore
    created
    + S8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + S8202305: [Graal] org.graalvm.compiler.core.test.GraphResetDebugTest
    fails with java.util.ServiceConfigurationError
    + S8202377: Modularize C2 GC barriers
    + S8202427: Enhance os::print_memory_info on Windows
    + S8202466: Test serviceability/tmtools/jstat/GcTest01.java
    fails: Number of concurrent GC events is 1, but CGCT is 0
    + S8202479: Add missing try_resolve_jobject_in_native calls
    + S8202669: Intermittent crash in
    ClassLoadingService::compute_class_size()
    + S8202685: Optimize ArrayList subList replaceAll
    + S8202710: AARCH64: sporadic jtreg test fail
    + S8202713: Create a MacroAssembler::access_load/store_at
    wrapper for S390 and PPC
    + S8202771: Migrate Unicode character tests to JDK Repo
    + S8202848: -XX:+ExecuteInternalVMTests asserts with
    "assert(cd.valid() == true) failed: failed on a valid
    DirectivesParser string"
    + S8202853: NotifyCount is not initialized
    + S8202863: Rename OopStorage inner collection classes
    + S8202978: Incorrect tmp register passed to
    MacroAssembler::load_mirror()
    + S8202989: Add missing decorators in calls to to
    arraycopy_prologue/epilogue
    + S8203196: C1 emits incorrect code due to integer overflow in
    _tableswitch keys
    + S8203215: IdealLoopTree::split_outer_loop leaves phi-nodes
    with only one input
    + S8203227: Introduce os::processor_id() for Linux and Solaris
    + S8203279: Faster rounding up to nearest power of two
    + S8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + S8203288: PPC64 and s390 fail to build after JDK-8199712
    (Flight Recorder)
    + S8203292: Print complete set of flags in the hs_err file
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203318: compiler/stable/TestStableShort.java is broken
    + S8203339: Add oopDesc::field_offset()
    + S8203341: Add a safepoint-aware Semaphore
    + S8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + S8203352: Improve java implementation of
    Integer/Long.numberOfLeadingZeros
    + S8203355: MITSHM define guarding missing
    + S8203377: Cleanup the usage of os::file_name_strcmp() in
    SharedPathsMiscInfo::check().
    + S8203381: Replace InstanceKlass::allocate_instance_handle
    with JavaCalls::construct_new_instance
    + S8203391: Update com/sun/jdi/JdbMethodExitTest.sh to pass
    valid URL[]
    + S8203398: Test test/langtools/tools/javac/options/release/
    /ReleaseOptionCurrent.java writes into the source directory
    + S8203400: Fix issue with "8199852: Print more information
    about class loaders in LinkageErrors."
    + S8203410: Zero: Disable jfr feature by default
    + S8203431: TestFloatsOnStackDeopt.java throws
    java.lang.LinkageError: loader &lt;bootstrap&gt; attempted duplicate
    class definition for
    java.lang.invoke.BoundMethodHandle$Species_LLL
    + S8203436: javac should fail early when emitting illegal
    signature attributes
    + S8203437: 8199370 broke build on linux-ppc64le (w/ GCC 4.8.5.)
    + S8203454: Minimal, Zero builds fail after JDK-8202377
    (Modularize C2 barriers)
    + S8203457: Add back missing full buffer notification
    + S8203486: skip type inference for non functional interface
    components of intersection types
    + S8203487: Typo in ICUBinary.java: s/Magin/Magic/
    + S8203490: StringTable::dump lacks a load barrier
    + S8203500: Fix broken links to Specification in "specs"
    directory
    + S8203626: ProblemList
    compiler/runtime/TestFloatsOnStackDeopt.java
    + S8203635: JFR sampler thread does not record stack info
    + S8203694: Add a safepoint-aware Semaphore - part 2
- Removed patch:
  * fix-s390x-and-ppc64-builds.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527768000">- Update to upstream tag jdk-11+16
  * Fixes:
    + S8133564: Runtime - 2nd followup to Validate JVM Command-Line
    Flag Arguments
    + S8184030: TestUseRTMLockingOptionOnUnsupportedVM - RTM
    locking optimization not supported is missing
    + S8188248: NullPointerException on generic methods
    + S8189766: whitebox failure with -Xcheck:jni
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8193717: Import resolution performance regression in JDK 9
    + S8194298: Add support for per Socket configuration of TCP
    keepalive
    + S8194630: Uninitialized initiator_address in native GSS
    + S8196202: Javadoc should not generate frames by default
    + S8196913: javadoc does not (over)write stylesheet.css
    + S8198323: testing.md not updated for repository layout change
    + S8199255: [TESTBUG] Open source VM testbase default methods
    tests
    + S8199307: NPE in
    jdk.javadoc.internal.doclets.toolkit.util.Utils.getLineNumber
    + S8199383: [TESTBUG] Open source VM testbase JVMTI tests
    + S8200172: String.split non-positive term incorrect use
    + S8200266: [Graal] Update ProblemList-graal.txt files
    + S8201518: add test for randomized iteration order of
    unmodifiable Set and Map
    + S8202178: type.getKind() for var is None instead of Error
    + S8202290: AtomicAppend tests fail on macOS 10.13 ("High
    Sierra")
    + S8202813: Move vm_weak processing from SystemDictionary to
    WeakProcessor
    + S8202832: cycle detection depends on ordering of requires
    directives
    + S8202842: G1 footprint regressions in jdk11+10
    + S8202945: OopStorage should use GlobalCounter
    + S8202947: Fix minor issues with taglets
    + S8202949: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + S8202950: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + S8203014: jcmd should output command list if no command is
    given
    + S8203028: Simplify reference processing in light of
    JDK-8175797
    + S8203041: AArch64: fix overflow in immediate cmp/cmn
    instruction
    + S8203183:
    vmTestbase/vm/mlvm/anonloader/stress/oome/heap/Test.java times
    out
    + S8203221: Makefile fixes after Flight Recorder
    + S8203225: Fix of redefining a method that removes 1 or more
    lambda expressions failed to commit test cases
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203262: Incorrect cmpxchg usage in
    MetaspaceGC::inc_capacity_until_GC
    + S8203297: java/net/URL/OpenStream.java fails intermittently
    + S8203327: Small cleanups in java.lang.ref
    + S8203328: Rename EFS in java.util.zip internals to something
    meaningful
    + S8203354: assert in
    ClassLoader::update_module_path_entry_list() could have
    incorrect message
    + S8203366: Tag added wrongly in Docs.gmk
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203369: Check for both EAGAIN and EWOULDBLOCK error codes
    + S8203370: [JVMCI] UseJVMCICompiler should imply EnableJVMCI
    + S8203455: jcmd: VM.metaspace: print loader name for anonymous
    CLDs
    + S8203488: Remove error generation from TransTypes
    + S8203497: Bump Jib format version to 1.2
    + S8203628: Optimize (masked) byte memory comparisons on x86
    + S8203686: Add JDK 11 major version to
    javax/net/ssl/compatibility/JdkRelease.java
    + S8203689: Add failure code to threaddb exception messages`
    + S8203699: java/lang/invoke/SpecialInterfaceCall fails with
    SIGILL on aarch64
    + S8203766: Add some instrumentation to
    jdk/java/nio/channels/Selector/RacyDeregister.java
    + S8203769: ProblemList
    test/jdk/java/util/Map/InPlaceOpsCollisions.java
    + S8203774: jdk/jfr/api/recorder/TestStartStopRecording.java
    failed due to compilation failed
    + S8203793: cacerts/VerifyCACerts.java fails with
    java.lang.Exception: At least one cacert test failed
    + S8203795: Change default compiler on Windows to VS2017
    + S8203815: add tests failed because of 8203809 to the
    ProblemList-graal
    + S8203816: add tests failed because of 8203174 to the
    ProblemList-graal
    + S8203817: Monitor::try_lock() should not call
    check_prelock_state()
    + S8203843: BasicParState::default_estimated_thread_count(false)
    can return 0 in gtest
    + S8203865: Metaspace cleanup: Remove unused MemRegion in
    VirtualSpaceNode
    + S8203881: Print erroneous size in NegativeArraySizeException
    + S8203885: ConcurrentLocksDump::dump_at_safepoint() should not
    allocate array in resource area
    + S8203886: Invoke LambdaMetafactory::altMetafactory exactly
    from the BootstrapMethodInvoker
    + S8203892: Target interface added as marker interface in calls
    to altMetafactory
    + S8203926: Problem list
    test/langtools/tools/javac/importscope/T8193717.java
    + S8203932: Windows devkit has wrong dlls in 32 bit tools dir
    + S8203938: Fix build failures from JDK-8133564</changelog>
  <changelog author="fstrba@suse.com" date="1528200000">- Change build requirement to Java 10 or 11, since Java 9 cannot
  build OpenJDK 11 any more.</changelog>
  <changelog author="fstrba@suse.com" date="1528200001">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
</package>
<package pkgid="3f7fc5b26060d004c5f1ede32b774c15f177096f14f9fe1e3d189588ed7f9758" name="java-11-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.6.1"/>
  <changelog author="fstrba@suse.com" date="1528200000">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
</package>
<package pkgid="8444ea236caebe68ca4bc2ddae5865ed452125d127f66e6ddab2f475bd6fa35f" name="java-11-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.9.1"/>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
</package>
<package pkgid="3c9da83b32803039d8d8823cfcfd815067a3b0f103d92712aa09e9dc7480b2eb" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="0" ver="11.0.0.0~24" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1525953600">- Fix s390x build, since INCLUDE_SA is false by default on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526040000">- Update to ustream tag jdk-11+13
  * Fixes:
    + S4842658: DefaultListModel and DefaultComboBoxModel should
    support addAll (Collection c)
    + S6574555: PNGImageWriter incorrectly sets bKGD chunk
    + S6788458: PNGImageReader ignores tRNS chunk while reading
    non-indexed RGB/Gray images
    + S8153532: Add @throws NPE javadoc to
    UIManager.setLookAndFeel(String) method description
    + S8154463: New failure of
    closed/java/awt/font/Outline/OutlineInvarianceTest.java
    + S8171277: Elliptic Curves for Security in Crypto
    + S8176717: GC log file handle leaked to child processes
    + S8181594: Efficient and constant-time modular arithmetic
    + S8181910: [macos] Support dark title bars on macOS
    + S8185034: Cleanup and consolidate Metaspace coding
    + S8187123: (reflect) Class#getCanonicalName and
    Class#getSimpleName is a part of performance issue
    + S8187392: Deprecated methods in the peers can be removed
    + S8189687: Swing: Invalid position of candidate pop-up of
    InputMethod in Hi-DPI on Windows
    + S8189916: Dynamic Constant support for Sparc
    + S8191410: Unicode 10
    + S8194968: problem list actions for
    tools/javac/jvm/VerboseOutTest
    + S8195002: Fix test/hotspot/jtreg/gtest/GTestWrapper.java on
    Alpine/Musl
    + S8195717: test java/lang/invoke/MethodHandlesTest timed out
    running testAsCollector1
    + S8196113: Remove the Compact Profile builds
    + S8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + S8197388: Added not existing bug id in jdk/ProblemList.txt
    + S8197447: LogCompilation throws "couldn't find bytecode"
    + S8197954: Remove unnecessary intermediary APIs from AppCDS
    implementation
    + S8198342: Test FileSystemViewListenerLeak.java is unstable
    + S8199067: [REDO] NMT: Enhance thread stack tracking
    + S8199196: Add javadoc support for preview features
    + S8199382: [TESTBUG] Open source VM testbase JDI tests
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8199852: Print more information about class loaders in
    LinkageErrors.
    + S8199912: jshell tool: /open from URI
    + S8199932: Missing copyright header in AWT source code
    + S8200083: Bump bootjdk requirement for JDK 11 to JDK 10
    + S8200094: Turkish locale reports NPE No enum constant
    com.sun.source.doctree.DocTree.Kind.S?NCE
    + S8200146: Remove the appletviewer launcher
    + S8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + S8200372: String::trim JavaDoc should clarify meaning of space
    + S8200557: OopStorage parallel iteration scales poorly
    + S8200716: Object propertyIsEnumerable buggy behavior on short
    integer-string key
    + S8200729: Conditional compilation of GCs
    + S8201138: Defect in XMLEventReader.getElementText() may cause
    data to be skipped, duplicated or otherwise result in a
    ClassCastException
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201492: Properly implement non-contiguous generations for
    Reference discovery
    + S8201524: [AIX] Don't link libfontmanager against
    libawt_headless
    + S8201572: Improve Metaspace Statistics
    + S8201598: Fix for 8181910: Support dark title bars on macOS
    broke the MacOS build
    + S8201602: ARM32 - Minimal Dynamic Constant support
    + S8201626: Typo in MakeWindowAlwaysOnTop test
    + S8201640: Use _ref_processor_* member variables directly in
    G1CollectedHeap
    + S8201793: (ref) Reference object should not support cloning
    + S8202017: Merge Reference Enqueuing phase with phase 3 of
    Reference processing
    + S8202018: Move card table clear before enqueuing pending
    references
    + S8202021: Improve variable naming in ReferenceProcesso
    + S8202050: Add javax/sound/midi/Sequencer/Recording.java to
    the problemList
    + S8202080: Introduce ordering semantics for Atomic::add and
    other RMW atomics
    + S8202083: Remove explicit CMS checks in CardTableBarrierSet
    + S8202143: Parts of 8193435 added in merge change set.
    + S8202181: Correctly specify size of hostname buffer in Unix
    Inet*AddressImpl_getLocalHostName implementations
    + S8202291: java/rmi/Naming/LookupIPv6.java failed with
    Connection refused
    + S8202301: Add tests related to JDK-8196572 to the ProblemList
    + S8202303: LogStream should autoflush on destruction
    + S8202319: Fix compilation warnings in Solaris debug builds
    for DevStudio 12.6
    + S8202387: javac --release 11 not supported
    + S8202424: Metaspace: on chunk retirement, use correct lower
    limit on chunksize when adding blocks to free blocks list
    + S8202435: [aix] print program break as part of memory info
    into hs-err file
    + S8202447: Fix unloading_occurred to mean unloading_occurred
    + S8202465: [C1] casts should not be eliminated for interface
    types
    + S8202548: Use reservation Object when creating SpeciesData
    + S8202552: [AOT][JVMCI] Incorrect usage of INCLUDE_JVMCI and
    INCLUDE_AOT
    + S8202563: BigInteger/BigDecimal not immune to overflow,
    contrary to spec
    + S8202564: java/lang/management/ThreadMXBean/ThreadCounts.java
    fails
    + S8202565: C1 compilation crashes with
    "assert(is_double_stack() &amp;&amp; !is_virtual()) failed: type check"
    + S8202575: Remove java/lang/String/nativeEncoding/
    /StringPlatformChars.java from ProblemList
    + S8202581: failure_handler: gather more environment
    information on macOS
    + S8202582: DateTimeFormatterBuilder.parseOffsetBased
    unnecessarily calls toString()
    + S8202583: Remove experimental ClassForNamePlugin
    + S8202584: de-problem list tools/javac/jvm/VerboseOutTest
    + S8202591: Remove usage of CMSEdenChunksRecordAlways in
    defNewGeneration.cpp
    + S8202592: Remove unused EvacuateFollowersClosure
    + S8202597: javac is not inducing a notional interface if
    Object appears in an intersection type
    + S8202599: Mark intermittently failing jshell tests
    + S8202606: Deprecate AllowNonVirtualCalls option
    + S8202631: JVM_Clone to throw CloneNotSupportException for
    Reference object
    + S8202634: Metaspace: simplify SpaceManager lists
    + S8202639: Use concrete Generation classes in SerialHeap and
    CMSHeap
    + S8202640: Small C1 cleanups for BarrierSetC1
    + S8202641: Replace OOP_SINCE_SAVE_MARKS with templates
    + S8202642: Replace PAR_OOP_ITERATE with templates
    + S8202647: Add deduplicate_string function to CollectedHeap
    + S8202649: Move the Parallel GC specific task creation
    functions out of Threads
    + S8202650: Enforce group for attach listener file
    + S8202662: JFR tests fails: Could not find leak with class
    + S8202672: Build failed in metaspace.cpp with VS2017
    + S8202676: AArch64: Missing enter/leave around barrier leads
    to infinite loop
    + S8202684: Minimal VM build is broken after JDK-8199067,
    JDK-8202638
    + S8202686: Missing test case for 8200167 - final Object methods
    + S8202690: jdk/jshell/ToolBasicTest.java failed in
    testOpenFileOverHttp() and testOpenLocalFileUrl()
    + S8202709: Move oopDesc::is_archive_object to
    MetaspaceShared::is_archive_object
    + S8202711: Merge tiered compilation policies
    + S8202719: Use Collections.emptyEnumeration where possible
    + S8202722: Move marksweep_init into GC code
    + S8202744: Expired flag removal for JDK 11
    + S8202780: Remove EnqueueTask related code from
    ReferenceProcessor after JDK-8202017
    + S8202781: Fix typo in DiscoveredListIterator::complete_enqeue
    + S8202810: Remove class-for-name test
    + S8202816: Update JarSigning.keystore
- Removed patch:
  * aarch64-infinite-loop.patch
  - Integrated upstream
- Modified patch:
  * java11-improved-fonts.patch
  - Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1526299200">- s390x: avoid packaging files that are not present on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526558400">- Update to upstream tag jdk-11+14
  * Fixes:
    + S8132287: obsolete the "InlineNotify" flag option
    + S8174995: SA: clhsdb 'where -a' throws Assertion Failure with
    illegal code 236 when CDS is used
    + S8176510: java/awt/font/GlyphVector/TestLayoutFlags.java
    fails with OpenJDK
    + S8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + S8185505: AArch64: Port AOT to AArch64
    + S8189140: SystemDictionaryShared::initialize() should be
    renamed to be more meaningful
    + S8189271: Metaspace::_capacity_until_GC should be size_t
    + S8191533: jar --describe-module prints service provider class
    names in lower case
    + S8193935: Illegal countedLoops transformation
    + S8194998: broken error message for subclass of interface with
    private method
    + S8195613: [SA] HotSpotTypeDataBase.readVMLongConstants
    truncates values to int
    + S8196340: (coll) Examine overriding inherited methods in
    ArrayList and ArrayList.SubList
    + S8196360: java/awt/Dialog/SiblingChildOrder/
    /SiblingChildOrderTest.java fails
    + S8196616: java/awt/GraphicsDevice/DisplayModes/
    /CompareToXrandrTest.java fails
    + S8197948: Create test for SwingSet2 main window
    + S8198412: MonospacedGlyphWidthTest.java may fail on Solaris
    + S8198991: Move Java2D demo to the open repository
    + S8199252: [TESTBUG] Open source VM testbase system dictionary
    tests
    + S8199712: Flight Recorder
    + S8200377: String::strip, String::stripLeading,
    String::stripTrailing
    + S8201447: C1 does backedge profiling incorrectly
    + S8201491: G1 support for java.lang.ref.Reference precleaning
    + S8201532: Update idom to get correct dom depth calculation
    + S8201593: Print array length in
    ArrayIndexOutOfBoundsException.
    + S8201604: ARM64 - Build failure after JDK-8193260
    + S8202016: Use obj+offset in interpreter array access
    + S8202064: Jemmy JInternalFrameOperator: Add wait for close(),
    activate(), resize() and move() operations
    + S8202113: Reflection API is causing caller classes to leak
    + S8202289: Non-empty directory in module path is not handled
    properly at CDS/AppCDS dump time
    + S8202322: AIX: symbol visibility flags not support on xlc 12.1
    + S8202392: [TESTBUG] open source vm testbase heapdump tests
    + S8202395: AARCH64: wrong encoding for SIMD instructions zip,
    trn, uzp
    + S8202426: NPE thrown by Transformer when XMLStreamReader
    reports no xml attribute type
    + S8202476: ImageLib is broken in 32 bit Windows
    + S8202519: Crash during large AppCDS dump
    + S8202544: Hide unused exports in libzip
    + S8202553: Update FXLauncherTest as part of removing JavaFX
    from JDK
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8202580: Dashed BasicStroke randomly painted incorrectly,
    may freeze application
    + S8202614: Add ability to validate links in JavadocTester
    + S8202679: Updates on windows failures in the problem list
    + S8202683: Minimal VM should build cleanly on 64-bit platforms
    + S8202708: Add a check of opening stream for not-existing UNC
    url
    + S8202714: Create a MacroAssembler::access_load/store_at
    wrapper for AArch64
    + S8202718: Jemmy JInternalFrameOperator: Dependency with
    orders of Minimize, Maximize and Close buttons
    + S8202738: vm_version Abstract_VM_Version::internal_vm_info_string()
    returns same string for different incremental builds
    + S8202745: Remove hyphens from "out-of-bounds".
    + S8202748: jtreg :hotspot_misc group shouldn't include
    vmTestbase tests
    + S8202756: move FilterUSRTest.java to openJDK
    + S8202763: failure_handler: list open files for macOS
    + S8202764: api/java_text/SimpleDateFormat/index.html#Format
    testcases started to fail with JDK11 b12
    + S8202767: java/awt/font/GlyphVector/TestLayoutFlags.java is
    missing null check
    + S8202773: Unhandled oop in JavaThread::collect_counters
    + S8202811: Problem List some tests that leave windows open on
    the desktop
    + S8202822: Add .git to .hgignore
    + S8202824: Cleanup discrepancies in ProblemList for java_awt
    jtreg tests
    + S8202829: Implement CollectedHeap::get_safepoint_workers()
    for G1
    + S8202843: langtools ant build fails
    + S8202878:
    com/apple/laf/ScreenMenu/ScreenMenuMemoryLeakTest.java fails
    + S8202889: Remove trailing LF from perf log
    + S8202914: Let custom makefile override jmod intput dir
    locations
    + S8202915: [JAXP] Performance enhancements and cleanups in
    com.sun.org.apache.xerces.internal.impl.dtd.XMLDTDValidator
    + S8202919: JDK-8202683 broke macosx build
    + S8202920: jvm.cfg generation incorrect
    + S8202974: Backout JDK-8202683
    + S8202976: Add C1 lea patching support for x86
    + S8202993: Add support for x86 testptr/testq with register and
    address
    + S8202994: Add support for undoing last TLAB allocation
    + S8202997: Split test/jdk/:tier1 to enable better parallel
    execution
    + S8203032: PrintMetaspaceDcmd fails: Non-Class: missing from
    stdout/stderr
    + S8203059: (so) Closing a socket channel registered with
    Selector and with SO_LINGER set to 0 does not reset connection
    + S8203176: javadoc handles non-ASCII characters incorrectly.
    + S8203220: Introduce ATTRIBUTE_ALIGNED macro
    + S8203223: Signed integer overflow in ImageStrings::hash_code
    (libjimage.so)
    + S8203250: runtime/LoadClass/test-classes/Hello.java has wrong
    legal notice
    + S8203251: Non-PCH build failed after JDK-8199712 (Flight
    Recorder)
    + S8203274: 32-bit build failures after JDK-8199712 (Flight
    Recorder)
    + S8203278: AArch64/PPC64 build failures after JDK-8199712
    (Flight Recorder)
    + S8203285: Minimal VM fails to build after JDK-8199712 (Flight
    Recorder)</changelog>
  <changelog author="fstrba@suse.com" date="1526990400">- Added patch:
  * fix-s390x-and-ppc64-builds.patch
    + upstream fix for broken s390x and ppc64/ppc64le builds</changelog>
  <changelog author="fstrba@suse.com" date="1527249600">- Update to upstream tag jdk-11+15
  * Fixes:
    + S8027760: JFC schema condition should not have defaults
    + S8134537: Much nearly duplicated code for sun.misc.Signal
    support
    + S8146293: Add support for RSASSA-PSS Signature algorithm
    + S8148354: Errors targeting functional interface intersection
    types
    + S8176808: Split up metaspace.cpp
    + S8185803: JdbExprTest.sh fails in JDK10-hs nightly due to
    "Name unknown: java.lang.Long.MAX_VALUE "
    + S8192992: Test8007294.java failed: attempted to spill a
    non-spillable item
    + S8193332: MetaspaceShared::check_shared_class_loader_type is
    not used during archive creation
    + S8195098: Low latency hashtable for read-mostly scenarios
    + S8195817: JFR.stop should require name of recording
    + S8195818: JFR.start should increase autogenerated name by one
    + S8195819: Remove recording=x from jcmd JFR.check output
    + S8196048: thrown type variables should be roots in the
    minimum inference graph
    + S8196201: Generate pages to list all classes and all packages
    in javadoc output
    + S8196619: [TESTBUG] restore current version check in
    runtime/appcds/MultiReleaseJars.java
    + S8196987: Resolve disabled warnings for libzip
    + S8198315: Incomplete classpath causes NPE in TransTypes
    + S8198337: -XX:StartFlightRecording=dumponexit=true,disk=false
    doesn't work
    + S8198548: Initialization race in
    com.sun.org.apache.xerces.internal.impl.xpath.regex.Token.getRange()
    on Token.categories
    + S8199064: Test applications/jcstress/other/Test.java#id1108
    fails on Sparc
    + S8199257: [TESTBUG] Open source VM testbase metaspace tests
    + S8199271: [TESTBUG] open source VM testbase stress tests
    + S8199370: [TESTBUG] Open source vm testbase GC tests
    + S8199379: [TESTBUG] Open source vm testbase JDB tests
    + S8199384: [TESTBUG] Open source VM testbase MLVM tests
    + S8199807: AppCDS performs overly restrictive path matching
    check.
    + S8200380: String::lines
    + S8200436: String::isBlank
    + S8201331: Better test cleanup for
    jdk/jfr/api/consumer/TestRecordingFile.java
    + S8201386: Miscellaneous changes imported from jsr166 CVS
    2018-05
    + S8201627: Kerberos sequence number issues
    + S8201867: Kerberos keytabs with holes in certain places are
    parsed incorrectly
    + S8202014: Possible to receive signal before signal semaphore
    created
    + S8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + S8202305: [Graal] org.graalvm.compiler.core.test.GraphResetDebugTest
    fails with java.util.ServiceConfigurationError
    + S8202377: Modularize C2 GC barriers
    + S8202427: Enhance os::print_memory_info on Windows
    + S8202466: Test serviceability/tmtools/jstat/GcTest01.java
    fails: Number of concurrent GC events is 1, but CGCT is 0
    + S8202479: Add missing try_resolve_jobject_in_native calls
    + S8202669: Intermittent crash in
    ClassLoadingService::compute_class_size()
    + S8202685: Optimize ArrayList subList replaceAll
    + S8202710: AARCH64: sporadic jtreg test fail
    + S8202713: Create a MacroAssembler::access_load/store_at
    wrapper for S390 and PPC
    + S8202771: Migrate Unicode character tests to JDK Repo
    + S8202848: -XX:+ExecuteInternalVMTests asserts with
    "assert(cd.valid() == true) failed: failed on a valid
    DirectivesParser string"
    + S8202853: NotifyCount is not initialized
    + S8202863: Rename OopStorage inner collection classes
    + S8202978: Incorrect tmp register passed to
    MacroAssembler::load_mirror()
    + S8202989: Add missing decorators in calls to to
    arraycopy_prologue/epilogue
    + S8203196: C1 emits incorrect code due to integer overflow in
    _tableswitch keys
    + S8203215: IdealLoopTree::split_outer_loop leaves phi-nodes
    with only one input
    + S8203227: Introduce os::processor_id() for Linux and Solaris
    + S8203279: Faster rounding up to nearest power of two
    + S8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + S8203288: PPC64 and s390 fail to build after JDK-8199712
    (Flight Recorder)
    + S8203292: Print complete set of flags in the hs_err file
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203318: compiler/stable/TestStableShort.java is broken
    + S8203339: Add oopDesc::field_offset()
    + S8203341: Add a safepoint-aware Semaphore
    + S8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + S8203352: Improve java implementation of
    Integer/Long.numberOfLeadingZeros
    + S8203355: MITSHM define guarding missing
    + S8203377: Cleanup the usage of os::file_name_strcmp() in
    SharedPathsMiscInfo::check().
    + S8203381: Replace InstanceKlass::allocate_instance_handle
    with JavaCalls::construct_new_instance
    + S8203391: Update com/sun/jdi/JdbMethodExitTest.sh to pass
    valid URL[]
    + S8203398: Test test/langtools/tools/javac/options/release/
    /ReleaseOptionCurrent.java writes into the source directory
    + S8203400: Fix issue with "8199852: Print more information
    about class loaders in LinkageErrors."
    + S8203410: Zero: Disable jfr feature by default
    + S8203431: TestFloatsOnStackDeopt.java throws
    java.lang.LinkageError: loader &lt;bootstrap&gt; attempted duplicate
    class definition for
    java.lang.invoke.BoundMethodHandle$Species_LLL
    + S8203436: javac should fail early when emitting illegal
    signature attributes
    + S8203437: 8199370 broke build on linux-ppc64le (w/ GCC 4.8.5.)
    + S8203454: Minimal, Zero builds fail after JDK-8202377
    (Modularize C2 barriers)
    + S8203457: Add back missing full buffer notification
    + S8203486: skip type inference for non functional interface
    components of intersection types
    + S8203487: Typo in ICUBinary.java: s/Magin/Magic/
    + S8203490: StringTable::dump lacks a load barrier
    + S8203500: Fix broken links to Specification in "specs"
    directory
    + S8203626: ProblemList
    compiler/runtime/TestFloatsOnStackDeopt.java
    + S8203635: JFR sampler thread does not record stack info
    + S8203694: Add a safepoint-aware Semaphore - part 2
- Removed patch:
  * fix-s390x-and-ppc64-builds.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527768000">- Update to upstream tag jdk-11+16
  * Fixes:
    + S8133564: Runtime - 2nd followup to Validate JVM Command-Line
    Flag Arguments
    + S8184030: TestUseRTMLockingOptionOnUnsupportedVM - RTM
    locking optimization not supported is missing
    + S8188248: NullPointerException on generic methods
    + S8189766: whitebox failure with -Xcheck:jni
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8193717: Import resolution performance regression in JDK 9
    + S8194298: Add support for per Socket configuration of TCP
    keepalive
    + S8194630: Uninitialized initiator_address in native GSS
    + S8196202: Javadoc should not generate frames by default
    + S8196913: javadoc does not (over)write stylesheet.css
    + S8198323: testing.md not updated for repository layout change
    + S8199255: [TESTBUG] Open source VM testbase default methods
    tests
    + S8199307: NPE in
    jdk.javadoc.internal.doclets.toolkit.util.Utils.getLineNumber
    + S8199383: [TESTBUG] Open source VM testbase JVMTI tests
    + S8200172: String.split non-positive term incorrect use
    + S8200266: [Graal] Update ProblemList-graal.txt files
    + S8201518: add test for randomized iteration order of
    unmodifiable Set and Map
    + S8202178: type.getKind() for var is None instead of Error
    + S8202290: AtomicAppend tests fail on macOS 10.13 ("High
    Sierra")
    + S8202813: Move vm_weak processing from SystemDictionary to
    WeakProcessor
    + S8202832: cycle detection depends on ordering of requires
    directives
    + S8202842: G1 footprint regressions in jdk11+10
    + S8202945: OopStorage should use GlobalCounter
    + S8202947: Fix minor issues with taglets
    + S8202949: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + S8202950: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + S8203014: jcmd should output command list if no command is
    given
    + S8203028: Simplify reference processing in light of
    JDK-8175797
    + S8203041: AArch64: fix overflow in immediate cmp/cmn
    instruction
    + S8203183:
    vmTestbase/vm/mlvm/anonloader/stress/oome/heap/Test.java times
    out
    + S8203221: Makefile fixes after Flight Recorder
    + S8203225: Fix of redefining a method that removes 1 or more
    lambda expressions failed to commit test cases
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203262: Incorrect cmpxchg usage in
    MetaspaceGC::inc_capacity_until_GC
    + S8203297: java/net/URL/OpenStream.java fails intermittently
    + S8203327: Small cleanups in java.lang.ref
    + S8203328: Rename EFS in java.util.zip internals to something
    meaningful
    + S8203354: assert in
    ClassLoader::update_module_path_entry_list() could have
    incorrect message
    + S8203366: Tag added wrongly in Docs.gmk
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203369: Check for both EAGAIN and EWOULDBLOCK error codes
    + S8203370: [JVMCI] UseJVMCICompiler should imply EnableJVMCI
    + S8203455: jcmd: VM.metaspace: print loader name for anonymous
    CLDs
    + S8203488: Remove error generation from TransTypes
    + S8203497: Bump Jib format version to 1.2
    + S8203628: Optimize (masked) byte memory comparisons on x86
    + S8203686: Add JDK 11 major version to
    javax/net/ssl/compatibility/JdkRelease.java
    + S8203689: Add failure code to threaddb exception messages`
    + S8203699: java/lang/invoke/SpecialInterfaceCall fails with
    SIGILL on aarch64
    + S8203766: Add some instrumentation to
    jdk/java/nio/channels/Selector/RacyDeregister.java
    + S8203769: ProblemList
    test/jdk/java/util/Map/InPlaceOpsCollisions.java
    + S8203774: jdk/jfr/api/recorder/TestStartStopRecording.java
    failed due to compilation failed
    + S8203793: cacerts/VerifyCACerts.java fails with
    java.lang.Exception: At least one cacert test failed
    + S8203795: Change default compiler on Windows to VS2017
    + S8203815: add tests failed because of 8203809 to the
    ProblemList-graal
    + S8203816: add tests failed because of 8203174 to the
    ProblemList-graal
    + S8203817: Monitor::try_lock() should not call
    check_prelock_state()
    + S8203843: BasicParState::default_estimated_thread_count(false)
    can return 0 in gtest
    + S8203865: Metaspace cleanup: Remove unused MemRegion in
    VirtualSpaceNode
    + S8203881: Print erroneous size in NegativeArraySizeException
    + S8203885: ConcurrentLocksDump::dump_at_safepoint() should not
    allocate array in resource area
    + S8203886: Invoke LambdaMetafactory::altMetafactory exactly
    from the BootstrapMethodInvoker
    + S8203892: Target interface added as marker interface in calls
    to altMetafactory
    + S8203926: Problem list
    test/langtools/tools/javac/importscope/T8193717.java
    + S8203932: Windows devkit has wrong dlls in 32 bit tools dir
    + S8203938: Fix build failures from JDK-8133564</changelog>
  <changelog author="fstrba@suse.com" date="1528200000">- Change build requirement to Java 10 or 11, since Java 9 cannot
  build OpenJDK 11 any more.</changelog>
  <changelog author="fstrba@suse.com" date="1528200001">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
</package>
<package pkgid="69338fbfc35c917d7e1f1aed8ef55aa4ae2569bfb4a9c751fe65c6e346f012ae" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.6.1"/>
  <changelog author="fstrba@suse.com" date="1528200000">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
</package>
<package pkgid="dcaf59217f23e38b5282448979644b0d79ff53a82ebaf1f5804246acfaaecec2" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.9.1"/>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
</package>
<package pkgid="32b55c90868221287b31dbdf9cea7449fb788108711c202d74a2a25747a37677" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="0" ver="11.0.0.0~24" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1525953600">- Fix s390x build, since INCLUDE_SA is false by default on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526040000">- Update to ustream tag jdk-11+13
  * Fixes:
    + S4842658: DefaultListModel and DefaultComboBoxModel should
    support addAll (Collection c)
    + S6574555: PNGImageWriter incorrectly sets bKGD chunk
    + S6788458: PNGImageReader ignores tRNS chunk while reading
    non-indexed RGB/Gray images
    + S8153532: Add @throws NPE javadoc to
    UIManager.setLookAndFeel(String) method description
    + S8154463: New failure of
    closed/java/awt/font/Outline/OutlineInvarianceTest.java
    + S8171277: Elliptic Curves for Security in Crypto
    + S8176717: GC log file handle leaked to child processes
    + S8181594: Efficient and constant-time modular arithmetic
    + S8181910: [macos] Support dark title bars on macOS
    + S8185034: Cleanup and consolidate Metaspace coding
    + S8187123: (reflect) Class#getCanonicalName and
    Class#getSimpleName is a part of performance issue
    + S8187392: Deprecated methods in the peers can be removed
    + S8189687: Swing: Invalid position of candidate pop-up of
    InputMethod in Hi-DPI on Windows
    + S8189916: Dynamic Constant support for Sparc
    + S8191410: Unicode 10
    + S8194968: problem list actions for
    tools/javac/jvm/VerboseOutTest
    + S8195002: Fix test/hotspot/jtreg/gtest/GTestWrapper.java on
    Alpine/Musl
    + S8195717: test java/lang/invoke/MethodHandlesTest timed out
    running testAsCollector1
    + S8196113: Remove the Compact Profile builds
    + S8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + S8197388: Added not existing bug id in jdk/ProblemList.txt
    + S8197447: LogCompilation throws "couldn't find bytecode"
    + S8197954: Remove unnecessary intermediary APIs from AppCDS
    implementation
    + S8198342: Test FileSystemViewListenerLeak.java is unstable
    + S8199067: [REDO] NMT: Enhance thread stack tracking
    + S8199196: Add javadoc support for preview features
    + S8199382: [TESTBUG] Open source VM testbase JDI tests
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8199852: Print more information about class loaders in
    LinkageErrors.
    + S8199912: jshell tool: /open from URI
    + S8199932: Missing copyright header in AWT source code
    + S8200083: Bump bootjdk requirement for JDK 11 to JDK 10
    + S8200094: Turkish locale reports NPE No enum constant
    com.sun.source.doctree.DocTree.Kind.S?NCE
    + S8200146: Remove the appletviewer launcher
    + S8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + S8200372: String::trim JavaDoc should clarify meaning of space
    + S8200557: OopStorage parallel iteration scales poorly
    + S8200716: Object propertyIsEnumerable buggy behavior on short
    integer-string key
    + S8200729: Conditional compilation of GCs
    + S8201138: Defect in XMLEventReader.getElementText() may cause
    data to be skipped, duplicated or otherwise result in a
    ClassCastException
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201492: Properly implement non-contiguous generations for
    Reference discovery
    + S8201524: [AIX] Don't link libfontmanager against
    libawt_headless
    + S8201572: Improve Metaspace Statistics
    + S8201598: Fix for 8181910: Support dark title bars on macOS
    broke the MacOS build
    + S8201602: ARM32 - Minimal Dynamic Constant support
    + S8201626: Typo in MakeWindowAlwaysOnTop test
    + S8201640: Use _ref_processor_* member variables directly in
    G1CollectedHeap
    + S8201793: (ref) Reference object should not support cloning
    + S8202017: Merge Reference Enqueuing phase with phase 3 of
    Reference processing
    + S8202018: Move card table clear before enqueuing pending
    references
    + S8202021: Improve variable naming in ReferenceProcesso
    + S8202050: Add javax/sound/midi/Sequencer/Recording.java to
    the problemList
    + S8202080: Introduce ordering semantics for Atomic::add and
    other RMW atomics
    + S8202083: Remove explicit CMS checks in CardTableBarrierSet
    + S8202143: Parts of 8193435 added in merge change set.
    + S8202181: Correctly specify size of hostname buffer in Unix
    Inet*AddressImpl_getLocalHostName implementations
    + S8202291: java/rmi/Naming/LookupIPv6.java failed with
    Connection refused
    + S8202301: Add tests related to JDK-8196572 to the ProblemList
    + S8202303: LogStream should autoflush on destruction
    + S8202319: Fix compilation warnings in Solaris debug builds
    for DevStudio 12.6
    + S8202387: javac --release 11 not supported
    + S8202424: Metaspace: on chunk retirement, use correct lower
    limit on chunksize when adding blocks to free blocks list
    + S8202435: [aix] print program break as part of memory info
    into hs-err file
    + S8202447: Fix unloading_occurred to mean unloading_occurred
    + S8202465: [C1] casts should not be eliminated for interface
    types
    + S8202548: Use reservation Object when creating SpeciesData
    + S8202552: [AOT][JVMCI] Incorrect usage of INCLUDE_JVMCI and
    INCLUDE_AOT
    + S8202563: BigInteger/BigDecimal not immune to overflow,
    contrary to spec
    + S8202564: java/lang/management/ThreadMXBean/ThreadCounts.java
    fails
    + S8202565: C1 compilation crashes with
    "assert(is_double_stack() &amp;&amp; !is_virtual()) failed: type check"
    + S8202575: Remove java/lang/String/nativeEncoding/
    /StringPlatformChars.java from ProblemList
    + S8202581: failure_handler: gather more environment
    information on macOS
    + S8202582: DateTimeFormatterBuilder.parseOffsetBased
    unnecessarily calls toString()
    + S8202583: Remove experimental ClassForNamePlugin
    + S8202584: de-problem list tools/javac/jvm/VerboseOutTest
    + S8202591: Remove usage of CMSEdenChunksRecordAlways in
    defNewGeneration.cpp
    + S8202592: Remove unused EvacuateFollowersClosure
    + S8202597: javac is not inducing a notional interface if
    Object appears in an intersection type
    + S8202599: Mark intermittently failing jshell tests
    + S8202606: Deprecate AllowNonVirtualCalls option
    + S8202631: JVM_Clone to throw CloneNotSupportException for
    Reference object
    + S8202634: Metaspace: simplify SpaceManager lists
    + S8202639: Use concrete Generation classes in SerialHeap and
    CMSHeap
    + S8202640: Small C1 cleanups for BarrierSetC1
    + S8202641: Replace OOP_SINCE_SAVE_MARKS with templates
    + S8202642: Replace PAR_OOP_ITERATE with templates
    + S8202647: Add deduplicate_string function to CollectedHeap
    + S8202649: Move the Parallel GC specific task creation
    functions out of Threads
    + S8202650: Enforce group for attach listener file
    + S8202662: JFR tests fails: Could not find leak with class
    + S8202672: Build failed in metaspace.cpp with VS2017
    + S8202676: AArch64: Missing enter/leave around barrier leads
    to infinite loop
    + S8202684: Minimal VM build is broken after JDK-8199067,
    JDK-8202638
    + S8202686: Missing test case for 8200167 - final Object methods
    + S8202690: jdk/jshell/ToolBasicTest.java failed in
    testOpenFileOverHttp() and testOpenLocalFileUrl()
    + S8202709: Move oopDesc::is_archive_object to
    MetaspaceShared::is_archive_object
    + S8202711: Merge tiered compilation policies
    + S8202719: Use Collections.emptyEnumeration where possible
    + S8202722: Move marksweep_init into GC code
    + S8202744: Expired flag removal for JDK 11
    + S8202780: Remove EnqueueTask related code from
    ReferenceProcessor after JDK-8202017
    + S8202781: Fix typo in DiscoveredListIterator::complete_enqeue
    + S8202810: Remove class-for-name test
    + S8202816: Update JarSigning.keystore
- Removed patch:
  * aarch64-infinite-loop.patch
  - Integrated upstream
- Modified patch:
  * java11-improved-fonts.patch
  - Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1526299200">- s390x: avoid packaging files that are not present on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526558400">- Update to upstream tag jdk-11+14
  * Fixes:
    + S8132287: obsolete the "InlineNotify" flag option
    + S8174995: SA: clhsdb 'where -a' throws Assertion Failure with
    illegal code 236 when CDS is used
    + S8176510: java/awt/font/GlyphVector/TestLayoutFlags.java
    fails with OpenJDK
    + S8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + S8185505: AArch64: Port AOT to AArch64
    + S8189140: SystemDictionaryShared::initialize() should be
    renamed to be more meaningful
    + S8189271: Metaspace::_capacity_until_GC should be size_t
    + S8191533: jar --describe-module prints service provider class
    names in lower case
    + S8193935: Illegal countedLoops transformation
    + S8194998: broken error message for subclass of interface with
    private method
    + S8195613: [SA] HotSpotTypeDataBase.readVMLongConstants
    truncates values to int
    + S8196340: (coll) Examine overriding inherited methods in
    ArrayList and ArrayList.SubList
    + S8196360: java/awt/Dialog/SiblingChildOrder/
    /SiblingChildOrderTest.java fails
    + S8196616: java/awt/GraphicsDevice/DisplayModes/
    /CompareToXrandrTest.java fails
    + S8197948: Create test for SwingSet2 main window
    + S8198412: MonospacedGlyphWidthTest.java may fail on Solaris
    + S8198991: Move Java2D demo to the open repository
    + S8199252: [TESTBUG] Open source VM testbase system dictionary
    tests
    + S8199712: Flight Recorder
    + S8200377: String::strip, String::stripLeading,
    String::stripTrailing
    + S8201447: C1 does backedge profiling incorrectly
    + S8201491: G1 support for java.lang.ref.Reference precleaning
    + S8201532: Update idom to get correct dom depth calculation
    + S8201593: Print array length in
    ArrayIndexOutOfBoundsException.
    + S8201604: ARM64 - Build failure after JDK-8193260
    + S8202016: Use obj+offset in interpreter array access
    + S8202064: Jemmy JInternalFrameOperator: Add wait for close(),
    activate(), resize() and move() operations
    + S8202113: Reflection API is causing caller classes to leak
    + S8202289: Non-empty directory in module path is not handled
    properly at CDS/AppCDS dump time
    + S8202322: AIX: symbol visibility flags not support on xlc 12.1
    + S8202392: [TESTBUG] open source vm testbase heapdump tests
    + S8202395: AARCH64: wrong encoding for SIMD instructions zip,
    trn, uzp
    + S8202426: NPE thrown by Transformer when XMLStreamReader
    reports no xml attribute type
    + S8202476: ImageLib is broken in 32 bit Windows
    + S8202519: Crash during large AppCDS dump
    + S8202544: Hide unused exports in libzip
    + S8202553: Update FXLauncherTest as part of removing JavaFX
    from JDK
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8202580: Dashed BasicStroke randomly painted incorrectly,
    may freeze application
    + S8202614: Add ability to validate links in JavadocTester
    + S8202679: Updates on windows failures in the problem list
    + S8202683: Minimal VM should build cleanly on 64-bit platforms
    + S8202708: Add a check of opening stream for not-existing UNC
    url
    + S8202714: Create a MacroAssembler::access_load/store_at
    wrapper for AArch64
    + S8202718: Jemmy JInternalFrameOperator: Dependency with
    orders of Minimize, Maximize and Close buttons
    + S8202738: vm_version Abstract_VM_Version::internal_vm_info_string()
    returns same string for different incremental builds
    + S8202745: Remove hyphens from "out-of-bounds".
    + S8202748: jtreg :hotspot_misc group shouldn't include
    vmTestbase tests
    + S8202756: move FilterUSRTest.java to openJDK
    + S8202763: failure_handler: list open files for macOS
    + S8202764: api/java_text/SimpleDateFormat/index.html#Format
    testcases started to fail with JDK11 b12
    + S8202767: java/awt/font/GlyphVector/TestLayoutFlags.java is
    missing null check
    + S8202773: Unhandled oop in JavaThread::collect_counters
    + S8202811: Problem List some tests that leave windows open on
    the desktop
    + S8202822: Add .git to .hgignore
    + S8202824: Cleanup discrepancies in ProblemList for java_awt
    jtreg tests
    + S8202829: Implement CollectedHeap::get_safepoint_workers()
    for G1
    + S8202843: langtools ant build fails
    + S8202878:
    com/apple/laf/ScreenMenu/ScreenMenuMemoryLeakTest.java fails
    + S8202889: Remove trailing LF from perf log
    + S8202914: Let custom makefile override jmod intput dir
    locations
    + S8202915: [JAXP] Performance enhancements and cleanups in
    com.sun.org.apache.xerces.internal.impl.dtd.XMLDTDValidator
    + S8202919: JDK-8202683 broke macosx build
    + S8202920: jvm.cfg generation incorrect
    + S8202974: Backout JDK-8202683
    + S8202976: Add C1 lea patching support for x86
    + S8202993: Add support for x86 testptr/testq with register and
    address
    + S8202994: Add support for undoing last TLAB allocation
    + S8202997: Split test/jdk/:tier1 to enable better parallel
    execution
    + S8203032: PrintMetaspaceDcmd fails: Non-Class: missing from
    stdout/stderr
    + S8203059: (so) Closing a socket channel registered with
    Selector and with SO_LINGER set to 0 does not reset connection
    + S8203176: javadoc handles non-ASCII characters incorrectly.
    + S8203220: Introduce ATTRIBUTE_ALIGNED macro
    + S8203223: Signed integer overflow in ImageStrings::hash_code
    (libjimage.so)
    + S8203250: runtime/LoadClass/test-classes/Hello.java has wrong
    legal notice
    + S8203251: Non-PCH build failed after JDK-8199712 (Flight
    Recorder)
    + S8203274: 32-bit build failures after JDK-8199712 (Flight
    Recorder)
    + S8203278: AArch64/PPC64 build failures after JDK-8199712
    (Flight Recorder)
    + S8203285: Minimal VM fails to build after JDK-8199712 (Flight
    Recorder)</changelog>
  <changelog author="fstrba@suse.com" date="1526990400">- Added patch:
  * fix-s390x-and-ppc64-builds.patch
    + upstream fix for broken s390x and ppc64/ppc64le builds</changelog>
  <changelog author="fstrba@suse.com" date="1527249600">- Update to upstream tag jdk-11+15
  * Fixes:
    + S8027760: JFC schema condition should not have defaults
    + S8134537: Much nearly duplicated code for sun.misc.Signal
    support
    + S8146293: Add support for RSASSA-PSS Signature algorithm
    + S8148354: Errors targeting functional interface intersection
    types
    + S8176808: Split up metaspace.cpp
    + S8185803: JdbExprTest.sh fails in JDK10-hs nightly due to
    "Name unknown: java.lang.Long.MAX_VALUE "
    + S8192992: Test8007294.java failed: attempted to spill a
    non-spillable item
    + S8193332: MetaspaceShared::check_shared_class_loader_type is
    not used during archive creation
    + S8195098: Low latency hashtable for read-mostly scenarios
    + S8195817: JFR.stop should require name of recording
    + S8195818: JFR.start should increase autogenerated name by one
    + S8195819: Remove recording=x from jcmd JFR.check output
    + S8196048: thrown type variables should be roots in the
    minimum inference graph
    + S8196201: Generate pages to list all classes and all packages
    in javadoc output
    + S8196619: [TESTBUG] restore current version check in
    runtime/appcds/MultiReleaseJars.java
    + S8196987: Resolve disabled warnings for libzip
    + S8198315: Incomplete classpath causes NPE in TransTypes
    + S8198337: -XX:StartFlightRecording=dumponexit=true,disk=false
    doesn't work
    + S8198548: Initialization race in
    com.sun.org.apache.xerces.internal.impl.xpath.regex.Token.getRange()
    on Token.categories
    + S8199064: Test applications/jcstress/other/Test.java#id1108
    fails on Sparc
    + S8199257: [TESTBUG] Open source VM testbase metaspace tests
    + S8199271: [TESTBUG] open source VM testbase stress tests
    + S8199370: [TESTBUG] Open source vm testbase GC tests
    + S8199379: [TESTBUG] Open source vm testbase JDB tests
    + S8199384: [TESTBUG] Open source VM testbase MLVM tests
    + S8199807: AppCDS performs overly restrictive path matching
    check.
    + S8200380: String::lines
    + S8200436: String::isBlank
    + S8201331: Better test cleanup for
    jdk/jfr/api/consumer/TestRecordingFile.java
    + S8201386: Miscellaneous changes imported from jsr166 CVS
    2018-05
    + S8201627: Kerberos sequence number issues
    + S8201867: Kerberos keytabs with holes in certain places are
    parsed incorrectly
    + S8202014: Possible to receive signal before signal semaphore
    created
    + S8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + S8202305: [Graal] org.graalvm.compiler.core.test.GraphResetDebugTest
    fails with java.util.ServiceConfigurationError
    + S8202377: Modularize C2 GC barriers
    + S8202427: Enhance os::print_memory_info on Windows
    + S8202466: Test serviceability/tmtools/jstat/GcTest01.java
    fails: Number of concurrent GC events is 1, but CGCT is 0
    + S8202479: Add missing try_resolve_jobject_in_native calls
    + S8202669: Intermittent crash in
    ClassLoadingService::compute_class_size()
    + S8202685: Optimize ArrayList subList replaceAll
    + S8202710: AARCH64: sporadic jtreg test fail
    + S8202713: Create a MacroAssembler::access_load/store_at
    wrapper for S390 and PPC
    + S8202771: Migrate Unicode character tests to JDK Repo
    + S8202848: -XX:+ExecuteInternalVMTests asserts with
    "assert(cd.valid() == true) failed: failed on a valid
    DirectivesParser string"
    + S8202853: NotifyCount is not initialized
    + S8202863: Rename OopStorage inner collection classes
    + S8202978: Incorrect tmp register passed to
    MacroAssembler::load_mirror()
    + S8202989: Add missing decorators in calls to to
    arraycopy_prologue/epilogue
    + S8203196: C1 emits incorrect code due to integer overflow in
    _tableswitch keys
    + S8203215: IdealLoopTree::split_outer_loop leaves phi-nodes
    with only one input
    + S8203227: Introduce os::processor_id() for Linux and Solaris
    + S8203279: Faster rounding up to nearest power of two
    + S8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + S8203288: PPC64 and s390 fail to build after JDK-8199712
    (Flight Recorder)
    + S8203292: Print complete set of flags in the hs_err file
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203318: compiler/stable/TestStableShort.java is broken
    + S8203339: Add oopDesc::field_offset()
    + S8203341: Add a safepoint-aware Semaphore
    + S8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + S8203352: Improve java implementation of
    Integer/Long.numberOfLeadingZeros
    + S8203355: MITSHM define guarding missing
    + S8203377: Cleanup the usage of os::file_name_strcmp() in
    SharedPathsMiscInfo::check().
    + S8203381: Replace InstanceKlass::allocate_instance_handle
    with JavaCalls::construct_new_instance
    + S8203391: Update com/sun/jdi/JdbMethodExitTest.sh to pass
    valid URL[]
    + S8203398: Test test/langtools/tools/javac/options/release/
    /ReleaseOptionCurrent.java writes into the source directory
    + S8203400: Fix issue with "8199852: Print more information
    about class loaders in LinkageErrors."
    + S8203410: Zero: Disable jfr feature by default
    + S8203431: TestFloatsOnStackDeopt.java throws
    java.lang.LinkageError: loader &lt;bootstrap&gt; attempted duplicate
    class definition for
    java.lang.invoke.BoundMethodHandle$Species_LLL
    + S8203436: javac should fail early when emitting illegal
    signature attributes
    + S8203437: 8199370 broke build on linux-ppc64le (w/ GCC 4.8.5.)
    + S8203454: Minimal, Zero builds fail after JDK-8202377
    (Modularize C2 barriers)
    + S8203457: Add back missing full buffer notification
    + S8203486: skip type inference for non functional interface
    components of intersection types
    + S8203487: Typo in ICUBinary.java: s/Magin/Magic/
    + S8203490: StringTable::dump lacks a load barrier
    + S8203500: Fix broken links to Specification in "specs"
    directory
    + S8203626: ProblemList
    compiler/runtime/TestFloatsOnStackDeopt.java
    + S8203635: JFR sampler thread does not record stack info
    + S8203694: Add a safepoint-aware Semaphore - part 2
- Removed patch:
  * fix-s390x-and-ppc64-builds.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527768000">- Update to upstream tag jdk-11+16
  * Fixes:
    + S8133564: Runtime - 2nd followup to Validate JVM Command-Line
    Flag Arguments
    + S8184030: TestUseRTMLockingOptionOnUnsupportedVM - RTM
    locking optimization not supported is missing
    + S8188248: NullPointerException on generic methods
    + S8189766: whitebox failure with -Xcheck:jni
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8193717: Import resolution performance regression in JDK 9
    + S8194298: Add support for per Socket configuration of TCP
    keepalive
    + S8194630: Uninitialized initiator_address in native GSS
    + S8196202: Javadoc should not generate frames by default
    + S8196913: javadoc does not (over)write stylesheet.css
    + S8198323: testing.md not updated for repository layout change
    + S8199255: [TESTBUG] Open source VM testbase default methods
    tests
    + S8199307: NPE in
    jdk.javadoc.internal.doclets.toolkit.util.Utils.getLineNumber
    + S8199383: [TESTBUG] Open source VM testbase JVMTI tests
    + S8200172: String.split non-positive term incorrect use
    + S8200266: [Graal] Update ProblemList-graal.txt files
    + S8201518: add test for randomized iteration order of
    unmodifiable Set and Map
    + S8202178: type.getKind() for var is None instead of Error
    + S8202290: AtomicAppend tests fail on macOS 10.13 ("High
    Sierra")
    + S8202813: Move vm_weak processing from SystemDictionary to
    WeakProcessor
    + S8202832: cycle detection depends on ordering of requires
    directives
    + S8202842: G1 footprint regressions in jdk11+10
    + S8202945: OopStorage should use GlobalCounter
    + S8202947: Fix minor issues with taglets
    + S8202949: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + S8202950: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + S8203014: jcmd should output command list if no command is
    given
    + S8203028: Simplify reference processing in light of
    JDK-8175797
    + S8203041: AArch64: fix overflow in immediate cmp/cmn
    instruction
    + S8203183:
    vmTestbase/vm/mlvm/anonloader/stress/oome/heap/Test.java times
    out
    + S8203221: Makefile fixes after Flight Recorder
    + S8203225: Fix of redefining a method that removes 1 or more
    lambda expressions failed to commit test cases
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203262: Incorrect cmpxchg usage in
    MetaspaceGC::inc_capacity_until_GC
    + S8203297: java/net/URL/OpenStream.java fails intermittently
    + S8203327: Small cleanups in java.lang.ref
    + S8203328: Rename EFS in java.util.zip internals to something
    meaningful
    + S8203354: assert in
    ClassLoader::update_module_path_entry_list() could have
    incorrect message
    + S8203366: Tag added wrongly in Docs.gmk
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203369: Check for both EAGAIN and EWOULDBLOCK error codes
    + S8203370: [JVMCI] UseJVMCICompiler should imply EnableJVMCI
    + S8203455: jcmd: VM.metaspace: print loader name for anonymous
    CLDs
    + S8203488: Remove error generation from TransTypes
    + S8203497: Bump Jib format version to 1.2
    + S8203628: Optimize (masked) byte memory comparisons on x86
    + S8203686: Add JDK 11 major version to
    javax/net/ssl/compatibility/JdkRelease.java
    + S8203689: Add failure code to threaddb exception messages`
    + S8203699: java/lang/invoke/SpecialInterfaceCall fails with
    SIGILL on aarch64
    + S8203766: Add some instrumentation to
    jdk/java/nio/channels/Selector/RacyDeregister.java
    + S8203769: ProblemList
    test/jdk/java/util/Map/InPlaceOpsCollisions.java
    + S8203774: jdk/jfr/api/recorder/TestStartStopRecording.java
    failed due to compilation failed
    + S8203793: cacerts/VerifyCACerts.java fails with
    java.lang.Exception: At least one cacert test failed
    + S8203795: Change default compiler on Windows to VS2017
    + S8203815: add tests failed because of 8203809 to the
    ProblemList-graal
    + S8203816: add tests failed because of 8203174 to the
    ProblemList-graal
    + S8203817: Monitor::try_lock() should not call
    check_prelock_state()
    + S8203843: BasicParState::default_estimated_thread_count(false)
    can return 0 in gtest
    + S8203865: Metaspace cleanup: Remove unused MemRegion in
    VirtualSpaceNode
    + S8203881: Print erroneous size in NegativeArraySizeException
    + S8203885: ConcurrentLocksDump::dump_at_safepoint() should not
    allocate array in resource area
    + S8203886: Invoke LambdaMetafactory::altMetafactory exactly
    from the BootstrapMethodInvoker
    + S8203892: Target interface added as marker interface in calls
    to altMetafactory
    + S8203926: Problem list
    test/langtools/tools/javac/importscope/T8193717.java
    + S8203932: Windows devkit has wrong dlls in 32 bit tools dir
    + S8203938: Fix build failures from JDK-8133564</changelog>
  <changelog author="fstrba@suse.com" date="1528200000">- Change build requirement to Java 10 or 11, since Java 9 cannot
  build OpenJDK 11 any more.</changelog>
  <changelog author="fstrba@suse.com" date="1528200001">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
</package>
<package pkgid="0bbc9b36201c6683d3dfccf9dfc95c11b8e0532b3007d032bcaa57700f82742a" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.6.1"/>
  <changelog author="fstrba@suse.com" date="1528200000">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
</package>
<package pkgid="3ac1fc4d790b3ed351e8a29fbd1ac7ccd261434a29079cebb3fddc16b10f79ac" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.9.1"/>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
</package>
<package pkgid="830a8ad0fb3c3fc438db8e82766922d67ab5f0cc9b163274c5cd8691d06ab7b4" name="java-1_8_0-openjdk" arch="src">
  <version epoch="0" ver="1.8.0.171" rel="lp150.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
  <changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
  <changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="530a1d17b1880547dddfdb0a345581293325b32e7a499021b011e46576070a53" name="java-1_8_0-openjdk" arch="x86_64">
  <version epoch="0" ver="1.8.0.171" rel="lp150.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
  <changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
  <changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="a52a6c67ccae6ee6c571ed3fc2dd264544a4c4cba8d1c3c35c7326bba9e926fb" name="java-1_8_0-openjdk" arch="src">
  <version epoch="0" ver="1.8.0.181" rel="lp150.2.6.1"/>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
  + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
</package>
<package pkgid="a9d85d2a30ced6c1bd76cb9ba5054e0b7121e87685548c4a0e6ffd8fac0ac620" name="java-1_8_0-openjdk" arch="x86_64">
  <version epoch="0" ver="1.8.0.181" rel="lp150.2.6.1"/>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
  + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
</package>
<package pkgid="f119a025a75471710c8162c7307f160c33f1c9d44cdf3bb25b688ac6052b7e6d" name="java-1_8_0-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="1.8.0.171" rel="lp150.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
  <changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
  <changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="861a4b6379b1cdc851b70bac50b5b9c8ada13c5b26281ced1b0c0297f177c268" name="java-1_8_0-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="1.8.0.181" rel="lp150.2.6.1"/>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
  + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
</package>
<package pkgid="be4d6ce3a81871e7c87578832408b4c1789c77fc22f315edb302b8c7ecad1e0d" name="java-1_8_0-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="1.8.0.171" rel="lp150.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
  <changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
  <changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="0a9aff84f3be0031d6646e81646a41bea9826dafe8f45c4747e8557562c97884" name="java-1_8_0-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="1.8.0.181" rel="lp150.2.6.1"/>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
  + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
</package>
<package pkgid="5e77b9b4952988117614dc2b7addd799fac5ff0f4583565e7591b3ead9254e98" name="java-1_8_0-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="1.8.0.171" rel="lp150.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
  <changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
  <changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="cb7e4be64148e5baec2fcfed4c8face54e69d5fd396be31bceea244149fec531" name="java-1_8_0-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="1.8.0.181" rel="lp150.2.6.1"/>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
  + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
</package>
<package pkgid="8a2d2c6c61e66638ab05683f9af309f82dfed31ad0058392358b2721e24ab2cd" name="java-1_8_0-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="1.8.0.171" rel="lp150.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
  <changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
  <changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="e38e0d9344aaf08606c5d25a52b508beb044950b77c0e57ce3b37dca07b930bc" name="java-1_8_0-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="1.8.0.181" rel="lp150.2.6.1"/>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
  + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
</package>
<package pkgid="d37c118e33b7a679320e992950067b6065af575e690910fbf1dd2121b8160a4f" name="java-1_8_0-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="1.8.0.171" rel="lp150.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
  <changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
  <changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="e39c027dcef615725afbd22057fdadbeede0dbc1ac4bb5b2a3e2097f3b0bd35f" name="java-1_8_0-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="1.8.0.181" rel="lp150.2.6.1"/>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
  + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
</package>
<package pkgid="9310ae986aec2477dcde5f257e246be0267e352cc294d9395bfd462a506607bd" name="java-1_8_0-openjdk-src" arch="x86_64">
  <version epoch="0" ver="1.8.0.171" rel="lp150.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
  <changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
  <changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="ef8eecd44881ffb9d6f06801b6cce8014bd9601b248cd65d40eb1f383c6c36a5" name="java-1_8_0-openjdk-src" arch="x86_64">
  <version epoch="0" ver="1.8.0.181" rel="lp150.2.6.1"/>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
  + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
</package>
<package pkgid="70e72f8a192d7d308c8b0a82a9341b3d81121a96ff79280aedd2f21d196bcd81" name="jeos-firstboot" arch="noarch">
  <version epoch="0" ver="0.0+git20180525.280836a" rel="lp150.2.3.1"/>
  <changelog author="mkravec@opensuse.org" date="1472731200">- Update to version 0.0+git20160720.7177a42:
  * add tool to generate zypp repos from control.xml
  * fix copyright holder
  * conflict with emergency.service
  * adjust for new kiwi
  * rename snapshot 1 to match normal SLE's
  * Create read-only snapshots
  * Set dialog heigh
  * Set kernel logging to warning
  * Apply changes from Matthias and disable timeline creation</changelog>
  <changelog author="mkravec@opensuse.org" date="1472731201">- Update to version 0.0+git20160901.d14f112:
  * Removed jeos-tool</changelog>
  <changelog author="mkravec@suse.com" date="1473854400">- Update to version 0.0+git20160720.7177a42:
  * add tool to generate zypp repos from control.xml
  * fix copyright holder
  * conflict with emergency.service
  * adjust for new kiwi
  * rename snapshot 1 to match normal SLE's
  * Create read-only snapshots
  * Set dialog heigh
  * Set kernel logging to warning
  * Apply changes from Matthias and disable timeline creation</changelog>
  <changelog author="mkravec@suse.com" date="1474027200">- Update to version 0.0+git20160915.bd90972:
  * conflict with emergency.service
  * adjust for new kiwi
  * rename snapshot 1 to match normal SLE's
  * Create read-only snapshots
  * Set dialog heigh
  * Set kernel logging to warning
  * Apply changes from Matthias and disable timeline creation
  * Use jeos-tool to add repositories
  * Add comments</changelog>
  <changelog author="mkravec@suse.com" date="1474027201">- Update to version 0.0+git20160916.ce20b59:
  * Fix jeos-tool typo</changelog>
  <changelog author="lnussel@suse.de" date="1480507200">- Update to version 0.0+git20161130.db63ad6:
  * Add LICENSE
  * Add README
  * Move ifcfg-eth0 to examples
  * Don't package service symlinks</changelog>
  <changelog author="lnussel@suse.de" date="1484827200">- add license to file list</changelog>
  <changelog author="fvogt@suse.com" date="1488888000">- Update to version 0.0+git20170307.f650718:
  * Add [Install] section to jeos-firstboot.service</changelog>
  <changelog author="fvogt@suse.com" date="1489147200">- Update to version 0.0+git20170310.18283bf:
  * Replace jeos-tool with jeos-add-repos script
  * Move jeos-add-repos to sbin</changelog>
  <changelog author="fvogt@suse.com" date="1489752000">- Update to version 0.0+git20170317.c20e917:
  * Use same dependencies as systemd-firstboot.service</changelog>
  <changelog author="lnussel@suse.de" date="1499169600">- Update to version 0.0+git20170629.77ff28f:
  * Add udev-settle to wait all udev rules to be run
  * Provide default values for LINES and COLUMNS
  * Check if booted through EFI to fix yast bootloader
  * fixes after review</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1508932800">- Update to version 0.0+git20171024.4c4ec65:
  * Add require for snapshots mount point
  * Initial network configuration fixes bsc#1061829</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1510574400">- Update to version 0.0+git20171113.02e973c:
  * change initial snapshot number to 2
  * Run dracut before initial snapshot</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511524800">- Update to version 0.0+git20171124.eead2bd:
  * Change default values for ifcfg files bsc#1069782</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515672000">- Update to version 0.0+git20180111.c39e31f:
  * append to vconsole.conf instead of overwriting</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1520942400">- Update to version 0.0+git20180313.313b2ea:
  * Remove dracut initrd regeneration, bsc#1084161
  * Remove obsolete kiwi hook, bsc#1084160</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1523016000">- Update to version 0.0+git20180406.e01f473:
  * Setup quota for btrfs, fix bsc#1087079</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1524744000">- Update to version 0.0+git20180425.76e5ff7:
  * Turn off systemd status output while jeos-firstboot is running</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526472000">- Update to version 0.0+git20180516.d5031a7:
  * Run sevice before systemd-tmpfiles, bsc#1092132</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527249600">- Update to version 0.0+git20180525.280836a:
  * Rework locale selection
  * Map console fonts for non-latin locale,bsc#1094346
  * Also check for license filenames with the locale's UTF-8 suffix stripped</changelog>
</package>
<package pkgid="29a80ca70d5c3a454f20ee1b73ffdcd026824211ca840abaa98fbffb83186569" name="jeos-firstboot" arch="src">
  <version epoch="0" ver="0.0+git20180525.280836a" rel="lp150.2.3.1"/>
  <changelog author="mkravec@opensuse.org" date="1472731200">- Update to version 0.0+git20160720.7177a42:
  * add tool to generate zypp repos from control.xml
  * fix copyright holder
  * conflict with emergency.service
  * adjust for new kiwi
  * rename snapshot 1 to match normal SLE's
  * Create read-only snapshots
  * Set dialog heigh
  * Set kernel logging to warning
  * Apply changes from Matthias and disable timeline creation</changelog>
  <changelog author="mkravec@opensuse.org" date="1472731201">- Update to version 0.0+git20160901.d14f112:
  * Removed jeos-tool</changelog>
  <changelog author="mkravec@suse.com" date="1473854400">- Update to version 0.0+git20160720.7177a42:
  * add tool to generate zypp repos from control.xml
  * fix copyright holder
  * conflict with emergency.service
  * adjust for new kiwi
  * rename snapshot 1 to match normal SLE's
  * Create read-only snapshots
  * Set dialog heigh
  * Set kernel logging to warning
  * Apply changes from Matthias and disable timeline creation</changelog>
  <changelog author="mkravec@suse.com" date="1474027200">- Update to version 0.0+git20160915.bd90972:
  * conflict with emergency.service
  * adjust for new kiwi
  * rename snapshot 1 to match normal SLE's
  * Create read-only snapshots
  * Set dialog heigh
  * Set kernel logging to warning
  * Apply changes from Matthias and disable timeline creation
  * Use jeos-tool to add repositories
  * Add comments</changelog>
  <changelog author="mkravec@suse.com" date="1474027201">- Update to version 0.0+git20160916.ce20b59:
  * Fix jeos-tool typo</changelog>
  <changelog author="lnussel@suse.de" date="1480507200">- Update to version 0.0+git20161130.db63ad6:
  * Add LICENSE
  * Add README
  * Move ifcfg-eth0 to examples
  * Don't package service symlinks</changelog>
  <changelog author="lnussel@suse.de" date="1484827200">- add license to file list</changelog>
  <changelog author="fvogt@suse.com" date="1488888000">- Update to version 0.0+git20170307.f650718:
  * Add [Install] section to jeos-firstboot.service</changelog>
  <changelog author="fvogt@suse.com" date="1489147200">- Update to version 0.0+git20170310.18283bf:
  * Replace jeos-tool with jeos-add-repos script
  * Move jeos-add-repos to sbin</changelog>
  <changelog author="fvogt@suse.com" date="1489752000">- Update to version 0.0+git20170317.c20e917:
  * Use same dependencies as systemd-firstboot.service</changelog>
  <changelog author="lnussel@suse.de" date="1499169600">- Update to version 0.0+git20170629.77ff28f:
  * Add udev-settle to wait all udev rules to be run
  * Provide default values for LINES and COLUMNS
  * Check if booted through EFI to fix yast bootloader
  * fixes after review</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1508932800">- Update to version 0.0+git20171024.4c4ec65:
  * Add require for snapshots mount point
  * Initial network configuration fixes bsc#1061829</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1510574400">- Update to version 0.0+git20171113.02e973c:
  * change initial snapshot number to 2
  * Run dracut before initial snapshot</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511524800">- Update to version 0.0+git20171124.eead2bd:
  * Change default values for ifcfg files bsc#1069782</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515672000">- Update to version 0.0+git20180111.c39e31f:
  * append to vconsole.conf instead of overwriting</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1520942400">- Update to version 0.0+git20180313.313b2ea:
  * Remove dracut initrd regeneration, bsc#1084161
  * Remove obsolete kiwi hook, bsc#1084160</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1523016000">- Update to version 0.0+git20180406.e01f473:
  * Setup quota for btrfs, fix bsc#1087079</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1524744000">- Update to version 0.0+git20180425.76e5ff7:
  * Turn off systemd status output while jeos-firstboot is running</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526472000">- Update to version 0.0+git20180516.d5031a7:
  * Run sevice before systemd-tmpfiles, bsc#1092132</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527249600">- Update to version 0.0+git20180525.280836a:
  * Rework locale selection
  * Map console fonts for non-latin locale,bsc#1094346
  * Also check for license filenames with the locale's UTF-8 suffix stripped</changelog>
</package>
<package pkgid="3173b051f74238621c9cd77fb74cd2cf81e7a858859859186f2f85c95dd611d7" name="jhead" arch="src">
  <version epoch="0" ver="3.00" rel="lp150.3.3.1"/>
  <changelog author="mcihar@suse.cz" date="1107864000">- update to 2.3</changelog>
  <changelog author="sbrabec@suse.cz" date="1122638400">- Updated to version 2.4.</changelog>
  <changelog author="sbrabec@suse.cz" date="1136894400">- Updated to version 2.5.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="sbrabec@suse.cz" date="1161345600">- Updated to version 2.6:
  * Compilation and bug fixes
  * Fix shutter speed display in '-c' mode for very long shutter
    speeds
  * Fix a bug in autorot when rotating filenames with spaces in
    them.
  * Improved handling of corrupt exif linkages in exif header.
  * Added -a (rename associated files) options.</changelog>
  <changelog author="prusnak@suse.cz" date="1166270400">- fixed comparison with string literal (strcmp.patch) [#226477]</changelog>
  <changelog author="sbrabec@suse.cz" date="1186401600">- Updated to version 2.7:
  * Remove maximum jpeg sections limit
  * Added -ds option
  * On clearing rotation, clear the image and the optional
    thumbnail rotation tags.
  * Add -mkexif option to make a new exif header.</changelog>
  <changelog author="sbrabec@suse.cz" date="1195214400">- Updated to version 2.8:
  * Added IPTC handling
  * Added -q option
  * Fix handling of corrupted GPS directory.
  * Extract focus distance from canon makernote.
  * Extract subject range (pentax and fuji cameras)</changelog>
  <changelog author="sbrabec@suse.cz" date="1207569600">- Updated to version 2.82:
  * Make jhead aware of XMP data and not delete it.
  * Improve IPTC handling a little.
  * Change how date is encoded with -mkexif section to make it more
    compatible.</changelog>
  <changelog author="sbrabec@suse.cz" date="1224158400">- Updated to version 2.84:
  * Decode more exif tags for '-v' mode.
  * Fix a bunch of potential string overflows (bnc#435979,
    CVE-2008-4575)
  * Fix bug where IPTC sction was not deleted by -purejpg
  * Fix GPS altitude decode bug</changelog>
  <changelog author="sbrabec@suse.cz" date="1231156800">- Fixed arbitrary command vulnerability in DoCommand (bnc#435979,
  CVE-2008-4641).
- Fixed dependencies.</changelog>
  <changelog author="sbrabec@suse.cz" date="1249473600">- Updated to version 2.87:
  * Added the ability to move files with the -n option.
  * Minor fixes.</changelog>
  <changelog author="toganm@opensuse.org" date="1331899200">- Updated to version 2.93: For details please read changes.txt
  * Fixed bug in jhead -cmd that caused metatdata to be deleted.</changelog>
  <changelog author="toganm@opensuse.org" date="1331899201">- Fixed file-contains-date-and-time rpmlint warning. Date is set as
  last date in the changes file.</changelog>
  <changelog author="toganm@opensuse.org" date="1332244800">- Updated to version 2.95
  * Handle very large unsigned rational numbers in exif header</changelog>
  <changelog author="toganm@opensuse.org" date="1341230400">- Update to version 2.96
  * Fix printing file info when -ft option is used
  * Do not skip readonle files with -st option</changelog>
  <changelog author="toganm@opensuse.org" date="1362916800">- Update to version 2.97
  * Add feature to show quality of jpeg, (by Andy Spiegel)
  * Fix crash on some corrupt files bug, clarify time adjustment
    syntax in help</changelog>
  <changelog author="mpluskal@suse.com" date="1430136000">- Update to version 3.00
  * Make max comment size 16000
  * Added "-zt" option to trim 32k of trailing zeroes from Nikon 1
    J2 and J3 images.
  * Add ability to reset invalid rotation tag (from Moultrie
    game cameras)
- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1517832000">- Added CVE-2018-6612.patch: Fix of a heap-based buffer over-read
  (boo#1079349 CVE-2018-6612)</changelog>
  <changelog author="sbrabec@suse.com" date="1536926400">-  Integer overflow fixes (boo#1108480, CVE-2016-3822,
  CVE-2018-16554, CVE-2016-3822.patch, CVE-2018-16554.patch.</changelog>
</package>
<package pkgid="37022a6d8913ddca405ea9738bc1c78910bc3c4c31def157a7d15e06b8421688" name="jhead" arch="x86_64">
  <version epoch="0" ver="3.00" rel="lp150.3.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1231156800">- Fixed arbitrary command vulnerability in DoCommand (bnc#435979,
  CVE-2008-4641).
- Fixed dependencies.</changelog>
  <changelog author="sbrabec@suse.cz" date="1249473600">- Updated to version 2.87:
  * Added the ability to move files with the -n option.
  * Minor fixes.</changelog>
  <changelog author="toganm@opensuse.org" date="1331899200">- Updated to version 2.93: For details please read changes.txt
  * Fixed bug in jhead -cmd that caused metatdata to be deleted.</changelog>
  <changelog author="toganm@opensuse.org" date="1331899201">- Fixed file-contains-date-and-time rpmlint warning. Date is set as
  last date in the changes file.</changelog>
  <changelog author="toganm@opensuse.org" date="1332244800">- Updated to version 2.95
  * Handle very large unsigned rational numbers in exif header</changelog>
  <changelog author="toganm@opensuse.org" date="1341230400">- Update to version 2.96
  * Fix printing file info when -ft option is used
  * Do not skip readonle files with -st option</changelog>
  <changelog author="toganm@opensuse.org" date="1362916800">- Update to version 2.97
  * Add feature to show quality of jpeg, (by Andy Spiegel)
  * Fix crash on some corrupt files bug, clarify time adjustment
    syntax in help</changelog>
  <changelog author="mpluskal@suse.com" date="1430136000">- Update to version 3.00
  * Make max comment size 16000
  * Added "-zt" option to trim 32k of trailing zeroes from Nikon 1
    J2 and J3 images.
  * Add ability to reset invalid rotation tag (from Moultrie
    game cameras)
- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1517832000">- Added CVE-2018-6612.patch: Fix of a heap-based buffer over-read
  (boo#1079349 CVE-2018-6612)</changelog>
  <changelog author="sbrabec@suse.com" date="1536926400">-  Integer overflow fixes (boo#1108480, CVE-2016-3822,
  CVE-2018-16554, CVE-2016-3822.patch, CVE-2018-16554.patch.</changelog>
</package>
<package pkgid="b450342e2d9e96d6f5d8fb9aa91758be3212b76f43888521d1071bfbddc630d6" name="jhead" arch="src">
  <version epoch="0" ver="3.00" rel="lp150.3.6.1"/>
  <changelog author="sbrabec@suse.cz" date="1122638400">- Updated to version 2.4.</changelog>
  <changelog author="sbrabec@suse.cz" date="1136894400">- Updated to version 2.5.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="sbrabec@suse.cz" date="1161345600">- Updated to version 2.6:
  * Compilation and bug fixes
  * Fix shutter speed display in '-c' mode for very long shutter
    speeds
  * Fix a bug in autorot when rotating filenames with spaces in
    them.
  * Improved handling of corrupt exif linkages in exif header.
  * Added -a (rename associated files) options.</changelog>
  <changelog author="prusnak@suse.cz" date="1166270400">- fixed comparison with string literal (strcmp.patch) [#226477]</changelog>
  <changelog author="sbrabec@suse.cz" date="1186401600">- Updated to version 2.7:
  * Remove maximum jpeg sections limit
  * Added -ds option
  * On clearing rotation, clear the image and the optional
    thumbnail rotation tags.
  * Add -mkexif option to make a new exif header.</changelog>
  <changelog author="sbrabec@suse.cz" date="1195214400">- Updated to version 2.8:
  * Added IPTC handling
  * Added -q option
  * Fix handling of corrupted GPS directory.
  * Extract focus distance from canon makernote.
  * Extract subject range (pentax and fuji cameras)</changelog>
  <changelog author="sbrabec@suse.cz" date="1207569600">- Updated to version 2.82:
  * Make jhead aware of XMP data and not delete it.
  * Improve IPTC handling a little.
  * Change how date is encoded with -mkexif section to make it more
    compatible.</changelog>
  <changelog author="sbrabec@suse.cz" date="1224158400">- Updated to version 2.84:
  * Decode more exif tags for '-v' mode.
  * Fix a bunch of potential string overflows (bnc#435979,
    CVE-2008-4575)
  * Fix bug where IPTC sction was not deleted by -purejpg
  * Fix GPS altitude decode bug</changelog>
  <changelog author="sbrabec@suse.cz" date="1231156800">- Fixed arbitrary command vulnerability in DoCommand (bnc#435979,
  CVE-2008-4641).
- Fixed dependencies.</changelog>
  <changelog author="sbrabec@suse.cz" date="1249473600">- Updated to version 2.87:
  * Added the ability to move files with the -n option.
  * Minor fixes.</changelog>
  <changelog author="toganm@opensuse.org" date="1331812800">- Updated to version 2.93: For details please read changes.txt
  * Fixed bug in jhead -cmd that caused metatdata to be deleted.</changelog>
  <changelog author="toganm@opensuse.org" date="1331899200">- Fixed file-contains-date-and-time rpmlint warning. Date is set as
  last date in the changes file.</changelog>
  <changelog author="toganm@opensuse.org" date="1332244800">- Updated to version 2.95
  * Handle very large unsigned rational numbers in exif header</changelog>
  <changelog author="toganm@opensuse.org" date="1341230400">- Update to version 2.96
  * Fix printing file info when -ft option is used
  * Do not skip readonle files with -st option</changelog>
  <changelog author="toganm@opensuse.org" date="1362916800">- Update to version 2.97
  * Add feature to show quality of jpeg, (by Andy Spiegel)
  * Fix crash on some corrupt files bug, clarify time adjustment
    syntax in help</changelog>
  <changelog author="mpluskal@suse.com" date="1430136000">- Update to version 3.00
  * Make max comment size 16000
  * Added "-zt" option to trim 32k of trailing zeroes from Nikon 1
    J2 and J3 images.
  * Add ability to reset invalid rotation tag (from Moultrie
    game cameras)
- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1517832000">- Added CVE-2018-6612.patch: Fix of a heap-based buffer over-read
  (boo#1079349 CVE-2018-6612)</changelog>
  <changelog author="sbrabec@suse.com" date="1536926400">-  Integer overflow fixes (boo#1108480, CVE-2016-3822,
  CVE-2018-16554, CVE-2016-3822.patch, CVE-2018-16554.patch.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1540382400">- Renamed CVE-2018-16554.patch to CVE-2018-17088.patch, because
  it is in fact fix of boo#1108672
- Buffer overflow fix (boo#1108480) CVE-2018-16554.patch</changelog>
</package>
<package pkgid="c9544318b772ba4af827204a0b0c91bf31a4bae774fb4569e025e6a04bd38f96" name="jhead" arch="x86_64">
  <version epoch="0" ver="3.00" rel="lp150.3.6.1"/>
  <changelog author="sbrabec@suse.cz" date="1249473600">- Updated to version 2.87:
  * Added the ability to move files with the -n option.
  * Minor fixes.</changelog>
  <changelog author="toganm@opensuse.org" date="1331812800">- Updated to version 2.93: For details please read changes.txt
  * Fixed bug in jhead -cmd that caused metatdata to be deleted.</changelog>
  <changelog author="toganm@opensuse.org" date="1331899200">- Fixed file-contains-date-and-time rpmlint warning. Date is set as
  last date in the changes file.</changelog>
  <changelog author="toganm@opensuse.org" date="1332244800">- Updated to version 2.95
  * Handle very large unsigned rational numbers in exif header</changelog>
  <changelog author="toganm@opensuse.org" date="1341230400">- Update to version 2.96
  * Fix printing file info when -ft option is used
  * Do not skip readonle files with -st option</changelog>
  <changelog author="toganm@opensuse.org" date="1362916800">- Update to version 2.97
  * Add feature to show quality of jpeg, (by Andy Spiegel)
  * Fix crash on some corrupt files bug, clarify time adjustment
    syntax in help</changelog>
  <changelog author="mpluskal@suse.com" date="1430136000">- Update to version 3.00
  * Make max comment size 16000
  * Added "-zt" option to trim 32k of trailing zeroes from Nikon 1
    J2 and J3 images.
  * Add ability to reset invalid rotation tag (from Moultrie
    game cameras)
- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1517832000">- Added CVE-2018-6612.patch: Fix of a heap-based buffer over-read
  (boo#1079349 CVE-2018-6612)</changelog>
  <changelog author="sbrabec@suse.com" date="1536926400">-  Integer overflow fixes (boo#1108480, CVE-2016-3822,
  CVE-2018-16554, CVE-2016-3822.patch, CVE-2018-16554.patch.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1540382400">- Renamed CVE-2018-16554.patch to CVE-2018-17088.patch, because
  it is in fact fix of boo#1108672
- Buffer overflow fix (boo#1108480) CVE-2018-16554.patch</changelog>
</package>
<package pkgid="7dac6e315021accecd7280f0cd7f8a27c6a638ba1d2722512369036295999030" name="kde-l10n" arch="src">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="a54a0fc4e7f16fa59bae75af35ca9f2b37e3f08a848bd455b28351b749180fa8" name="kde-l10n-ar" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="4302a9f4cf8d5d551d5887e18171df0ba7368099971393c9da48ae6a9dd20036" name="kde-l10n-ast" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="d1a4853679cfe592d1edf5466e8f15a3885d1d240c1829af0aed8f2925b97c7f" name="kde-l10n-bg" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="9d6b0f772602a00e830257bb65d1f5dc1a6233b2b9f0d2fbd4b59731c939c815" name="kde-l10n-bs" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="1c0fa54b02251624689ec33d721bba3efeec82392981b124714921772b78f7f4" name="kde-l10n-ca" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="3eb9a4debbc2932712ca8aa56409915d201a808530189c0312a370900720e74e" name="kde-l10n-caValencia" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="a610966713ec3a69d2f26a818db8a40088cdd783529e5567566ae5af626c0ddb" name="kde-l10n-cs" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="e61aa9f12788cfd4354d7a97530877479f75bc76bebcddbf080b111425a2d97a" name="kde-l10n-da" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="01ea65ee5ea2b221cc7468c54ea32c7b4f01092ec5ba8b3aa29b9ebf59630722" name="kde-l10n-da-data" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="50dbd1e5d738561eae99e234f5d7ae60a873796e458e5d55210bc0bfc6631ee5" name="kde-l10n-da-doc" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="7d4a95c0ba2a6fd6779028bc4d73d61cf3ff07e3d4d5a1bd942716846074f6d8" name="kde-l10n-de" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="c18b781f9f29a51c1ed36603152baa1d0bbc95e1dcc865b0843c545ede10b82e" name="kde-l10n-de-data" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="919dfabd3aa2c3d98a68586b9a9f4b32b2ed7940e1440c6d6866e716825f3141" name="kde-l10n-de-doc" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="810bd25686e6f9732539d1b196534614b2260a843b14d6634dd33b85c9cf822a" name="kde-l10n-el" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="5993ea2b8eaf23361fe75d24f7a13fe38c59fce2fcc074bd6cdfc7d8954c136b" name="kde-l10n-en_GB" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="0fca75cdae3624e12c0e7e1d9a491b3341e654a54b03cbe44ec9f8e4468caac6" name="kde-l10n-en_GB-data" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="d36983a23ab1011f729a5d58cbe22a267f6c14d1b30202b9b0237dae6a7ae72a" name="kde-l10n-en_GB-doc" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="c1049653d148fe606959ce02f5e73c291a517cafcc13444213e1caaf6ad2a115" name="kde-l10n-eo" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="ea588ea0b351badb5e262110437ae3f35a7c6069db6da68902d2c54f0b41f636" name="kde-l10n-es" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="d702c3110626a59cab62e1a3ebec448d5222e32c24c5b3f5e3244b858937e31e" name="kde-l10n-es-data" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="7f028b381619b1a30c313c14666b3419b04f5e351a409bd7f12ce2ec4f39db18" name="kde-l10n-es-doc" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="ac19e7a5531c8c47370cd6a65d809d053cc04e5bbc7a0a9ea01f420775066281" name="kde-l10n-et" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="c51dd27ec95b4bdefb75b72b7239b9f6e4db4163def8aec37c149c880f974595" name="kde-l10n-et-data" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="6e367f57b3c108d52092f8a3724022eb4d29ad3d830355f0c14aa14bf4f699d0" name="kde-l10n-et-doc" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="285478366cfd3736b629e3e18a2e80670878951811762e638c15d2cb9688afcb" name="kde-l10n-eu" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="6dfc249951cf4b7d9dbb9fb020c3eb8c2d4627bf38ba944e0cf78d43d83d5e45" name="kde-l10n-fa" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="1595df8cb6c3924a5030302ec632d6f4058a96b7119cee34e911a322c48cfcdc" name="kde-l10n-fi" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="22187f660a103b5c9676018ec7c3d3e60584e8a8844e7d79864abc56312aae8b" name="kde-l10n-fr" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="34049217206d0db1d591c91189dc670ad2e4b14ec71647351494db955a86a6ba" name="kde-l10n-fr-data" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="7e716cda3141e1f8e767c2bed75221ec863fd7b55f0b027822442202644bc927" name="kde-l10n-fr-doc" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="f79708b6b6a374da8503428a3c526da956926f0bd6db2fe5f25d0e73725deea1" name="kde-l10n-ga" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="ced20a4c71aba47bcd1e20d3b2f1e09d783a3e7c466101af1315972646cf9cd3" name="kde-l10n-gl" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="16f90086fbd6b5e16c9cd2f0041cf180a47021e1daa8749d2ad44acb06c7a42a" name="kde-l10n-he" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="3b83de8575945460483470725d3031a62d21dc797e3bb1dab68cd42647f73d77" name="kde-l10n-hi" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="bd625eb952646b404fd4e541a502d7487f75faf663a4a8a2942a7dab6bf04028" name="kde-l10n-hr" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="c270ad8b5c06c10c787aaa393f87895b03f7b98aeb26663e286d0af8797fbe85" name="kde-l10n-hu" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="81cb04af2f9233965de6ced51cc966bb6bd962ef8af928bdca3663d20c6a294f" name="kde-l10n-ia" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="3012ba87de1e49f23682e1d10b13ffb2e3cbba0100a288530155ac72eb419a8e" name="kde-l10n-id" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="4fc9cde3fd15430a29327f371a71bb3860a10864b56bd83b13b303daca8eae40" name="kde-l10n-is" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="13109dfeca396793d078c021f79956884cbd9145395c788c2079e58deaf120f7" name="kde-l10n-it" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="4c10612fe5dfbbb0be0b06dfe8925f9f100289b11468ef66bda29df0f9dacb29" name="kde-l10n-it-data" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="364c4b15a65f2344f414feedf11f079e6f692bcd5c1017d99e5ac2ca7014a9cb" name="kde-l10n-it-doc" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="79a484f767e96a172c41cfb7455f9f2d8f480d2d5890f6fdb6f0c3597e7e9e26" name="kde-l10n-ja" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="9b88327942cb176fa16d4c2cdb0a0bafcba9bc41a9568423c9c7982291f587f8" name="kde-l10n-kk" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="26ea66ec23a3227b88a40450857f9904bbd9636480b324a1763d9dfcf39ada50" name="kde-l10n-km" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="d7637c6c053df5ae99b4fb3a0802b4d2e1a0f79a04df34c0a247950fbb9afa98" name="kde-l10n-ko" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="72420920689e39610e2831e74e9d3791e84f93827cdd5140f490811a542e6429" name="kde-l10n-lt" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="e033ec98cda5b7940db0456524932b223c5547f7946ed23f6a9652c7cace6c72" name="kde-l10n-lv" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="6576472101f21cff8363ff4d3a418f5c04abc6def9a9ecad7172d8aa9f9e6ae7" name="kde-l10n-mr" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="74fc392a3a7131a094a079c1a73accfcaca7f93bdbadcf662873cbfca556c44e" name="kde-l10n-nb" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="1fb584944b11adc4f742aabed5dce31e42e17420193e6f166f27f2b9e4363af7" name="kde-l10n-nds" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="54dc1cbf0c14a263711c4a48d4833cbadf5df7501a55d2b791ea5e240db6c924" name="kde-l10n-nl" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="12f85add4ba9d203e1dcb627d6b32395374a88edc89799406977199842639d30" name="kde-l10n-nl-data" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="298d376c3f4ef94933eb6733aaec7c33dce79d39a18e67c8189d13305afa8047" name="kde-l10n-nl-doc" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="f548f46263018669f5c51e67c59ea52a00af514d4ff9af7680e4622f0ec1142d" name="kde-l10n-nn" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="d4af9ea0061e4711a932dcab084fb206537ec0043b22c4fbceff6abf4c55d9bd" name="kde-l10n-pa" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="13e29e979c7b33b33119bf352915076636180a230f3b858239b7c56420b4c388" name="kde-l10n-pl" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="e1a689d2c295c64d6e1d1e7096472f325526fc5aea3ef607e38c5b169e166152" name="kde-l10n-pl-data" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="a00c670369bce1f91fbc38aa1679e40447b2211423000662ad8ade1b3ba8707e" name="kde-l10n-pl-doc" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="eab03924c47a883e32f0c3d4c8f2ff0c8d6a2a3402fcc9c4a600847759748ad6" name="kde-l10n-pt" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="2fa9352256b04dd528dccd1a150478f1241eb62db3fefebd50474d160fe772bc" name="kde-l10n-pt_BR" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="80a7b6821e4388ff98f60a76f8d798af6dc60fee8a7d8f0988966cc12112b0c2" name="kde-l10n-pt_BR-data" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="4c1a0280ce3cf9513af9f602ce9b67afe87bab8e2a830fa7bc8a61252ee8797a" name="kde-l10n-pt_BR-doc" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="5f1ffdfb5224380c5c9b0d36b8e164c6bcc6d1fc913dc6c866dec60f3e75033f" name="kde-l10n-ro" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="90d53a6bcf21154ac5088f0ce9e7ed351071efe67d59a3a50297d837da5067b9" name="kde-l10n-ru" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="eea7c23f415b935e02ffdc4b8d3c64b51d899dc5b4fd19725b1f9fa892c1b24b" name="kde-l10n-ru-data" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="e4e09a9c915dbcdc698f6a3a6454b7221af15c677b82e5ae7c0ead0a3565d140" name="kde-l10n-ru-doc" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="ad7575706fddbd6b7da86e4e46a9d212db994292a58b784c88e79c24cc4d3073" name="kde-l10n-sk" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="f8ba14c7a61e3652fb1e85dde7fa139c3692536702cdfb65d14b9176fb0eda51" name="kde-l10n-sl" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="be15c3371a521ffd1365f298dd54a61624955f081fb31b1e1e9b4d8175751a1a" name="kde-l10n-sr" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="6ea6df2891a6b2c63ecf3eb2589e0e31187aee5d4b66ddbe980bbd10453d6e3a" name="kde-l10n-sv" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="7acc3786b7150edd36c67333f15c5cb6390b3cac1607bb607ac2195252c54c0c" name="kde-l10n-sv-data" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="e0a2b4dffedd0b6e05e6f487220f7eab27709bf06d9d9e9e53ceaf9d2a937db6" name="kde-l10n-sv-doc" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="7f972a309833683bf658e795c505018599aba7b327a41483ae6953ca2581bc0b" name="kde-l10n-tr" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="15e6622eb2bc8313311e7ac0d6f8a75477b0f8cb5d0c238e9fabe78a2cb50eda" name="kde-l10n-ug" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="ed2e38a2b486162dfb7ab09a61000df884c0eaee54cf1506b1c81ce270b42569" name="kde-l10n-uk" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="95552711ef89e7b4f73d3f69f36c351ec272390d3bb3c201151607475031db3a" name="kde-l10n-uk-data" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="1be5820cdd1d7cec76eb23ce7378221b51d8818524ac4cfdf1d3299a7c2f6649" name="kde-l10n-uk-doc" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="f99a10a5aebf739a32a2003f598bb845080dfe2afc6db630ba46c93d8eb03cd0" name="kde-l10n-wa" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="5a66fc38810e7ef7726740868055a372ed326b14519a257a9990e95305584f2d" name="kde-l10n-zh_CN" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="8de5a4c04881edaa5350b117cfca0567a4866c693d8d2451f96d7bb1d703010f" name="kde-l10n-zh_TW" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="4bf74a34d97fd8d3b861aaf0ad3ef787754dab7dbb9beba9818a3e9f8810ba24" name="kde-user-manager" arch="src">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1499256000">- Recommend -lang package</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Don't show a region selector when selecting avatars from a gallery
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Fix using avatars from the gallery and from local files (kde#385151)
  * User Manager KCM text changes and UI modernization (kde#386635)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Split replaceAccount from addAccountToCache (kde#336994)
  * Enable anti-aliasing for user avatars</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="1251882c0bda5b0f946cf373e8688b6f14c64ee0124222ccb493741f046493d5" name="kde-user-manager" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1499256000">- Recommend -lang package</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Don't show a region selector when selecting avatars from a gallery
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Fix using avatars from the gallery and from local files (kde#385151)
  * User Manager KCM text changes and UI modernization (kde#386635)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Split replaceAccount from addAccountToCache (kde#336994)
  * Enable anti-aliasing for user avatars</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="20469f83dd7e054b0e9c8b3da37c58408ac5e92358d77685c622ddfdf7e2225e" name="kde-user-manager-lang" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1499256000">- Recommend -lang package</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Don't show a region selector when selecting avatars from a gallery
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Fix using avatars from the gallery and from local files (kde#385151)
  * User Manager KCM text changes and UI modernization (kde#386635)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Split replaceAccount from addAccountToCache (kde#336994)
  * Enable anti-aliasing for user avatars</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="280c329e7999156bc3c6759f6ac790183d27f0c8e1585655115b2e3f156271e8" name="kdeconnect-kde" arch="src">
  <version epoch="0" ver="1.3.3" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1424433600">- Update to 0.8
  * No changelog provided</changelog>
  <changelog author="toddrme2178@gmail.com" date="1448884800">- Update to 0.9f
  * Adds translations
- Update to 0.9
  * KF5 version</changelog>
  <changelog author="alarrosa@suse.com" date="1452772800">- Add 0001-This-syntax-also-works-on-older-OpenSSH-versions.patch from
  upstream to be compatible with older openssh versions (bnc#961554)</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1454328000">- Update to 0.9g
  * No changelog provided
- Drop upstreamed 0001-This-syntax-also-works-on-older-OpenSSH-versions.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1472212800">- New upstream version 1.0
  * Trigger custom commands from phone
  * Reply to SMS messages from the desktop
  * Receive desktop notifications on phone
  * TLS encryption</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1472212801">- Build docs again
- Require at least Qt 5.6</changelog>
  <changelog author="herbert@graeber-clan.de" date="1472212802">- Add firewalld service file</changelog>
  <changelog author="wbauer@tmo.at" date="1473249600">- Add fix-build-with-older-qt.patch from upstream to make it
  compile with Qt &lt; 5.6, and lower the Qt requirement to 5.2 again
  (as demanded by CMakeLists.txt)</changelog>
  <changelog author="wbauer@tmo.at" date="1474459200">- Update to 1.0.1
  * fixes some issues found in 1.0
- Drop upstreamed fix-build-with-older-qt.patch</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1478952000">- Update to 1.0.2</changelog>
  <changelog author="ecsos@opensuse.org" date="1482494400">- Update to 1.0.3</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1499860800">- Add patch to fix unauthenticated HTML injection (kde#382243):
  * 0001-Treat-device-names-as-plaintext-not-rich-text.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1506859200">- Update to 1.2.0
- Update build requirements, it needs Qt 5.7 and KF 5.38 now
- Remove patches, now upstream:
  * 0001-Treat-device-names-as-plaintext-not-rich-text.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1516276800">- Update to 1.2.1
  * Require the latest version of KF5
  * Was getting a double-delete, now it won't crash
  * Get rid of ProcessRunner
  * Add album art to mpris network packets
  * Add title, artist and album to MPRIS network packets
  * Fix information leak via /tmp (kde#383144)
  * Add support for new Android 2.3 (API 9+) cipher
  * Fix kdeconnect-cli device list
  * Fix "error activiting kdeconnectd" for kdeconnect-cli
  * Delay kdeconnectd autostart phase
  * Fix Notifications in Plasmoid
  * Make sure there's not a path within the filename
  * share plugin: fix path display
  * Use pactl instead of KMix in PauseMusic Plugin
- needs KDE Frameworks 5.42 now</changelog>
  <changelog author="alarrosa@suse.com" date="1519128000">- Add 0001-Fix-null-dereference.patch to fix a null dereference.
- Add signature file kdeconnect-kde-v1.2.1.tar.xz.sig</changelog>
  <changelog author="kamikazow@opensuse.org" date="1523275200">- Update to 1.3.0
  * Fixed frequent crash when receiving notifications
  * Fixed MPRIS player entries never being deleted
  * Added a Gnome Files (Nautilus) extension to send files from the
    context menu
  * Added handling of "tel:" links with KDE Connect
  * Support sending album art in MPRIS plugin
  * Allow sharing more than one file from the CI (eg: --share *.mp3)
- Remove patches, now upstream:
  * 0001-Fix-null-dereference.patch
- Modified wording in Description to match that KDE Connect
  runs under any Linux desktop (see upstream README.md file)</changelog>
  <changelog author="wbauer@tmo.at" date="1527854400">- Update to 1.3.1
  * Fix a bug that would hang Nautilus when copying a file if
    paired devices were available
  * Fix remote filesystem reconnection issue
  * Add a missing dependency check in cmake
  * Add missing notification category to the plasmoid
- Mark license file with %license instead of %doc</changelog>
  <changelog author="wbauer@tmo.at" date="1539864000">- Update to 1.3.2
  * Also allow modern algorithms, for compat with future apps
  * Remove characters from UUID that aren't legal in URLs
  * Add new notifications at the top of the list
  * Change the 'Dismiss all notifications' icon
  * Fix DBus signals in Mprisremote</changelog>
  <changelog author="wbauer@tmo.at" date="1541592000">- Update to 1.3.3
  * Instantiate QApplication object to fix crash on KDE Neon
    (kde#400178)
  * Fix build failure on musl based systems (kde#395161)</changelog>
  <changelog author="wbauer@tmo.at" date="1542369600">- Update to the latest upstream version to fix file browsing with
  the newest Android app (boo#1116123)</changelog>
</package>
<package pkgid="c31eca5b485c814b713609c19800625b109e286267472d2b40591d098f6e691b" name="kdeconnect-kde" arch="x86_64">
  <version epoch="0" ver="1.3.3" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1424433600">- Update to 0.8
  * No changelog provided</changelog>
  <changelog author="toddrme2178@gmail.com" date="1448884800">- Update to 0.9f
  * Adds translations
- Update to 0.9
  * KF5 version</changelog>
  <changelog author="alarrosa@suse.com" date="1452772800">- Add 0001-This-syntax-also-works-on-older-OpenSSH-versions.patch from
  upstream to be compatible with older openssh versions (bnc#961554)</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1454328000">- Update to 0.9g
  * No changelog provided
- Drop upstreamed 0001-This-syntax-also-works-on-older-OpenSSH-versions.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1472212800">- New upstream version 1.0
  * Trigger custom commands from phone
  * Reply to SMS messages from the desktop
  * Receive desktop notifications on phone
  * TLS encryption</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1472212801">- Build docs again
- Require at least Qt 5.6</changelog>
  <changelog author="herbert@graeber-clan.de" date="1472212802">- Add firewalld service file</changelog>
  <changelog author="wbauer@tmo.at" date="1473249600">- Add fix-build-with-older-qt.patch from upstream to make it
  compile with Qt &lt; 5.6, and lower the Qt requirement to 5.2 again
  (as demanded by CMakeLists.txt)</changelog>
  <changelog author="wbauer@tmo.at" date="1474459200">- Update to 1.0.1
  * fixes some issues found in 1.0
- Drop upstreamed fix-build-with-older-qt.patch</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1478952000">- Update to 1.0.2</changelog>
  <changelog author="ecsos@opensuse.org" date="1482494400">- Update to 1.0.3</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1499860800">- Add patch to fix unauthenticated HTML injection (kde#382243):
  * 0001-Treat-device-names-as-plaintext-not-rich-text.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1506859200">- Update to 1.2.0
- Update build requirements, it needs Qt 5.7 and KF 5.38 now
- Remove patches, now upstream:
  * 0001-Treat-device-names-as-plaintext-not-rich-text.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1516276800">- Update to 1.2.1
  * Require the latest version of KF5
  * Was getting a double-delete, now it won't crash
  * Get rid of ProcessRunner
  * Add album art to mpris network packets
  * Add title, artist and album to MPRIS network packets
  * Fix information leak via /tmp (kde#383144)
  * Add support for new Android 2.3 (API 9+) cipher
  * Fix kdeconnect-cli device list
  * Fix "error activiting kdeconnectd" for kdeconnect-cli
  * Delay kdeconnectd autostart phase
  * Fix Notifications in Plasmoid
  * Make sure there's not a path within the filename
  * share plugin: fix path display
  * Use pactl instead of KMix in PauseMusic Plugin
- needs KDE Frameworks 5.42 now</changelog>
  <changelog author="alarrosa@suse.com" date="1519128000">- Add 0001-Fix-null-dereference.patch to fix a null dereference.
- Add signature file kdeconnect-kde-v1.2.1.tar.xz.sig</changelog>
  <changelog author="kamikazow@opensuse.org" date="1523275200">- Update to 1.3.0
  * Fixed frequent crash when receiving notifications
  * Fixed MPRIS player entries never being deleted
  * Added a Gnome Files (Nautilus) extension to send files from the
    context menu
  * Added handling of "tel:" links with KDE Connect
  * Support sending album art in MPRIS plugin
  * Allow sharing more than one file from the CI (eg: --share *.mp3)
- Remove patches, now upstream:
  * 0001-Fix-null-dereference.patch
- Modified wording in Description to match that KDE Connect
  runs under any Linux desktop (see upstream README.md file)</changelog>
  <changelog author="wbauer@tmo.at" date="1527854400">- Update to 1.3.1
  * Fix a bug that would hang Nautilus when copying a file if
    paired devices were available
  * Fix remote filesystem reconnection issue
  * Add a missing dependency check in cmake
  * Add missing notification category to the plasmoid
- Mark license file with %license instead of %doc</changelog>
  <changelog author="wbauer@tmo.at" date="1539864000">- Update to 1.3.2
  * Also allow modern algorithms, for compat with future apps
  * Remove characters from UUID that aren't legal in URLs
  * Add new notifications at the top of the list
  * Change the 'Dismiss all notifications' icon
  * Fix DBus signals in Mprisremote</changelog>
  <changelog author="wbauer@tmo.at" date="1541592000">- Update to 1.3.3
  * Instantiate QApplication object to fix crash on KDE Neon
    (kde#400178)
  * Fix build failure on musl based systems (kde#395161)</changelog>
  <changelog author="wbauer@tmo.at" date="1542369600">- Update to the latest upstream version to fix file browsing with
  the newest Android app (boo#1116123)</changelog>
</package>
<package pkgid="cccc63e238550471800553e2ce64f2d5292a417d0cd4eb39843db9ae68ffa0ef" name="kdeconnect-kde-lang" arch="noarch">
  <version epoch="0" ver="1.3.3" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1424433600">- Update to 0.8
  * No changelog provided</changelog>
  <changelog author="toddrme2178@gmail.com" date="1448884800">- Update to 0.9f
  * Adds translations
- Update to 0.9
  * KF5 version</changelog>
  <changelog author="alarrosa@suse.com" date="1452772800">- Add 0001-This-syntax-also-works-on-older-OpenSSH-versions.patch from
  upstream to be compatible with older openssh versions (bnc#961554)</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1454328000">- Update to 0.9g
  * No changelog provided
- Drop upstreamed 0001-This-syntax-also-works-on-older-OpenSSH-versions.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1472212800">- New upstream version 1.0
  * Trigger custom commands from phone
  * Reply to SMS messages from the desktop
  * Receive desktop notifications on phone
  * TLS encryption</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1472212801">- Build docs again
- Require at least Qt 5.6</changelog>
  <changelog author="herbert@graeber-clan.de" date="1472212802">- Add firewalld service file</changelog>
  <changelog author="wbauer@tmo.at" date="1473249600">- Add fix-build-with-older-qt.patch from upstream to make it
  compile with Qt &lt; 5.6, and lower the Qt requirement to 5.2 again
  (as demanded by CMakeLists.txt)</changelog>
  <changelog author="wbauer@tmo.at" date="1474459200">- Update to 1.0.1
  * fixes some issues found in 1.0
- Drop upstreamed fix-build-with-older-qt.patch</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1478952000">- Update to 1.0.2</changelog>
  <changelog author="ecsos@opensuse.org" date="1482494400">- Update to 1.0.3</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1499860800">- Add patch to fix unauthenticated HTML injection (kde#382243):
  * 0001-Treat-device-names-as-plaintext-not-rich-text.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1506859200">- Update to 1.2.0
- Update build requirements, it needs Qt 5.7 and KF 5.38 now
- Remove patches, now upstream:
  * 0001-Treat-device-names-as-plaintext-not-rich-text.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1516276800">- Update to 1.2.1
  * Require the latest version of KF5
  * Was getting a double-delete, now it won't crash
  * Get rid of ProcessRunner
  * Add album art to mpris network packets
  * Add title, artist and album to MPRIS network packets
  * Fix information leak via /tmp (kde#383144)
  * Add support for new Android 2.3 (API 9+) cipher
  * Fix kdeconnect-cli device list
  * Fix "error activiting kdeconnectd" for kdeconnect-cli
  * Delay kdeconnectd autostart phase
  * Fix Notifications in Plasmoid
  * Make sure there's not a path within the filename
  * share plugin: fix path display
  * Use pactl instead of KMix in PauseMusic Plugin
- needs KDE Frameworks 5.42 now</changelog>
  <changelog author="alarrosa@suse.com" date="1519128000">- Add 0001-Fix-null-dereference.patch to fix a null dereference.
- Add signature file kdeconnect-kde-v1.2.1.tar.xz.sig</changelog>
  <changelog author="kamikazow@opensuse.org" date="1523275200">- Update to 1.3.0
  * Fixed frequent crash when receiving notifications
  * Fixed MPRIS player entries never being deleted
  * Added a Gnome Files (Nautilus) extension to send files from the
    context menu
  * Added handling of "tel:" links with KDE Connect
  * Support sending album art in MPRIS plugin
  * Allow sharing more than one file from the CI (eg: --share *.mp3)
- Remove patches, now upstream:
  * 0001-Fix-null-dereference.patch
- Modified wording in Description to match that KDE Connect
  runs under any Linux desktop (see upstream README.md file)</changelog>
  <changelog author="wbauer@tmo.at" date="1527854400">- Update to 1.3.1
  * Fix a bug that would hang Nautilus when copying a file if
    paired devices were available
  * Fix remote filesystem reconnection issue
  * Add a missing dependency check in cmake
  * Add missing notification category to the plasmoid
- Mark license file with %license instead of %doc</changelog>
  <changelog author="wbauer@tmo.at" date="1539864000">- Update to 1.3.2
  * Also allow modern algorithms, for compat with future apps
  * Remove characters from UUID that aren't legal in URLs
  * Add new notifications at the top of the list
  * Change the 'Dismiss all notifications' icon
  * Fix DBus signals in Mprisremote</changelog>
  <changelog author="wbauer@tmo.at" date="1541592000">- Update to 1.3.3
  * Instantiate QApplication object to fix crash on KDE Neon
    (kde#400178)
  * Fix build failure on musl based systems (kde#395161)</changelog>
  <changelog author="wbauer@tmo.at" date="1542369600">- Update to the latest upstream version to fix file browsing with
  the newest Android app (boo#1116123)</changelog>
</package>
<package pkgid="b20b4ff39ccd07721f27a0603ac4569e8629c879203e63b324daf2b8de362eb7" name="kernel-debug" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="2fc218e0790a01e904f1f485aa619cda24d9871237a8dce6341f6095f87b4c83" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="4fcd580f437b5c00c04c6e8582c4acae16cd6566e8da233c04634c95f035ec04" name="kernel-debug" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="ca3e507157b9007335fab7ea4f5e528b77c363cac847cbe5879d76fa0e186339" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="9817c4fdeee4e55d5d9a119ed244e0bd16101580941de3de0520b9473459c361" name="kernel-debug" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="30e1832510b0b274a7ea44c8e6ddc66ae1aed4e9b1028f556bb1b3f6015a5a72" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="df87808d13c0690f0cc7bf5495bc4d6c8d3643a9cca016685b7025ab605155c8" name="kernel-debug" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.19.2"/>
  <changelog author="fdmanana@suse.com" date="1538568000">- Btrfs: fix fsync after hole punching when using no-holes feature
  (bsc#1110642).
- commit 3f19b40</changelog>
  <changelog author="fdmanana@suse.com" date="1538568001">- Btrfs: fix loss of prealloc extents past i_size after fsync
  log replay (bsc#1110643).
- commit 974e057</changelog>
  <changelog author="fdmanana@suse.com" date="1538568002">- Btrfs: fix duplicate extents after fsync of file with prealloc
  extents (bsc#1110644).
- commit c4ec603</changelog>
  <changelog author="fdmanana@suse.com" date="1538568003">- Btrfs: fix return value on rename exchange failure
  (bsc#1110645).
- commit 532729c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568004">- Btrfs: sync log after logging new name (bsc#1110646).
- commit 7260d6b</changelog>
  <changelog author="fdmanana@suse.com" date="1538568005">- Btrfs: fix data corruption when deduplicating between different
  files (bsc#1110647).
- commit 669848c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568006">- btrfs: Remove unused parameters from various functions
  (bsc#1110649).
- commit c97c657</changelog>
  <changelog author="fdmanana@suse.com" date="1538568007">- Btrfs: fix send failure when root has deleted files still open
  (bsc#1110650).
- commit f52554d</changelog>
  <changelog author="jslaby@suse.cz" date="1538568008">- watchdog: Mark watchdog touch functions as notrace (git-fixes).
- commit 8b53193</changelog>
  <changelog author="neilb@suse.com" date="1538654400">- nfs/filelayout: fix oops when freeing filelayout segment
  (bsc#1105190).
- NFS/filelayout: Fix racy setting of fl-&gt;dsaddr in
  filelayout_check_deviceid() (bsc#1105190).
- commit d6d0fab</changelog>
  <changelog author="neilb@suse.com" date="1538654401">- VFS: don't test owner for NFS in set_posix_acl() (bsc#1103405).
- commit 36f977a</changelog>
  <changelog author="tiwai@suse.de" date="1538654402">- README.BRANCH: SLE15-SP1 branch maintainer changes
  Add ptesarik as co-maintainer, keep tiwai as the primary maintainer
- commit 83aea11</changelog>
  <changelog author="wqu@suse.com" date="1538654403">- btrfs: tests/qgroup: Fix wrong tree backref level (bsc#1107928).
- commit a5e154c</changelog>
  <changelog author="wqu@suse.com" date="1538654404">- btrfs: check-integrity: Fix NULL pointer dereference for
  degraded mount (bsc#1107947).
- commit 77b2277</changelog>
  <changelog author="wqu@suse.com" date="1538654405">- btrfs: scrub: Don't use inode pages for device replace (follow
  up for bsc#1108096).
- commit c865775</changelog>
  <changelog author="tiwai@suse.de" date="1538654406">- ASoC: cs4265: fix MMTLR Data switch control (bsc#1051510).
- ALSA: fireworks: fix memory leak of response buffer at error
  path (bsc#1051510).
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix
  I/O at error path (bsc#1051510).
- ALSA: emu10k1: fix possible info leak to userspace on
  SNDRV_EMU10K1_IOCTL_INFO (bsc#1051510).
- ALSA: bebob: use address returned by kmalloc() instead of
  kernel stack for streaming DMA mapping (bsc#1051510).
- ASoC: rt5514: Fix the issue of the delay volume applied
  (bsc#1051510).
- ASoC: dapm: Fix potential DAI widget pointer deref when linking
  DAIs (bsc#1051510).
- ALSA: msnd: Fix the default sample sizes (bsc#1051510).
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE()
  macro (bsc#1051510).
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
  (bsc#1051510).
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
  (bsc#1051510).
- ASoC: rt5514: Add the missing register in the readable table
  (bsc#1051510).
- ASoC: rt5514: Eliminate the noise in the ASRC case
  (bsc#1051510).
- ASoC: rt5514: Add the I2S ASRC support (bsc#1051510).
- commit 4eba9c8</changelog>
  <changelog author="wqu@suse.com" date="1538654407">- btrfs: scrub: Don't use inode page cache in
  scrub_handle_errored_block() (follow up for bsc#1108096).
- commit 3f91c84</changelog>
  <changelog author="tiwai@suse.de" date="1538654408">- smsc95xx: Check for Wake-on-LAN modes (bsc#1051510).
- smsc75xx: Check for Wake-on-LAN modes (bsc#1051510).
- r8152: Check for supported Wake-on-LAN Modes (bsc#1051510).
- sr9800: Check for supported Wake-on-LAN modes (bsc#1051510).
- lan78xx: Check for supported Wake-on-LAN modes (bsc#1051510).
- ax88179_178a: Check for supported Wake-on-LAN modes
  (bsc#1051510).
- mac80211: fix pending queue hang due to TX_DROP (bsc#1051510).
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
  (bsc#1051510).
- Input: elantech - enable middle button of touchpad on ThinkPad
  P72 (bsc#1051510).
- regulator: fix crash caused by null driver data (bsc#1051510).
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
  (bsc#1051510).
- intel_th: Fix device removal logic (bsc#1051510).
- NFC: Fix possible memory corruption when handling SHDLC I-Frame
  commands (bsc#1051510).
- platform/x86: alienware-wmi: Correct a memory leak
  (bsc#1051510).
- xhci: Fix use after free for URB cancellation on a reallocated
  endpoint (bsc#1051510).
- mei: ignore not found client in the enumeration (bsc#1051510).
- i2c: i801: Allow ACPI AML access I/O ports not reserved for
  SMBus (bsc#1051510).
- fbdev/via: fix defined but not used warning (bsc#1051510).
- video: goldfishfb: fix memory leak on driver remove
  (bsc#1051510).
- fbdev: Distinguish between interlaced and progressive modes
  (bsc#1051510).
- platform/x86: toshiba_acpi: Fix defined but not used build
  warnings (bsc#1051510).
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
  (bsc#1051510).
- input: rohm_bu21023: switch to i2c_lock_bus(...,
  I2C_LOCK_SEGMENT) (bsc#1051510).
- HID: hid-ntrig: add error handling for sysfs_create_group
  (bsc#1051510).
- mfd: ti_am335x_tscadc: Fix struct clk memory leak (bsc#1051510).
- mmc: sdhci: do not try to use 3.3V signaling if not supported
  (bsc#1051510).
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
  (bsc#1051510).
- parport: sunbpp: fix error return code (bsc#1051510).
- coresight: Handle errors in finding input/output ports
  (bsc#1051510).
- mei: bus: type promotion bug in mei_nfc_if_version()
  (bsc#1051510).
- gpio: pxa: Fix potential NULL dereference (bsc#1051510).
- gpiolib: Mark gpio_suffixes array with __maybe_unused
  (bsc#1051510).
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
  (bsc#1051510).
- crypto: sharah - Unregister correct algorithms for SAHARA 3
  (bsc#1051510).
- crypto: skcipher - Fix -Wstringop-truncation warnings
  (bsc#1051510).
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
  (bsc#1051510).
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 (bsc#1051510).
- mac80211: restrict delayed tailroom needed decrement
  (bsc#1051510).
- wlcore: Add missing PM call for
  wlcore_cmd_wait_for_event_or_timeout() (bsc#1051510).
- commit e266792</changelog>
  <changelog author="mbrugger@suse.com" date="1538654409">- arm64: Update config files. (bsc#1110716)
  Enable ST LPS25H pressure sensor.
- commit 69c6902</changelog>
  <changelog author="jack@suse.cz" date="1538654410">- patches.fixes/x86-memory_failure-Introduce-set-clear-_mce_nospec.patch:
  Fixup compilation breakage on s390 and arm due to missing
  clear_mce_nospec().
- commit faef795</changelog>
</package>
<package pkgid="0b60333aab89e6e3d6712fd7d4a04565912264000b57a10657947fa586e7f271" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.19.2"/>
  <changelog author="fdmanana@suse.com" date="1538568000">- Btrfs: fix fsync after hole punching when using no-holes feature
  (bsc#1110642).
- commit 3f19b40</changelog>
  <changelog author="fdmanana@suse.com" date="1538568001">- Btrfs: fix loss of prealloc extents past i_size after fsync
  log replay (bsc#1110643).
- commit 974e057</changelog>
  <changelog author="fdmanana@suse.com" date="1538568002">- Btrfs: fix duplicate extents after fsync of file with prealloc
  extents (bsc#1110644).
- commit c4ec603</changelog>
  <changelog author="fdmanana@suse.com" date="1538568003">- Btrfs: fix return value on rename exchange failure
  (bsc#1110645).
- commit 532729c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568004">- Btrfs: sync log after logging new name (bsc#1110646).
- commit 7260d6b</changelog>
  <changelog author="fdmanana@suse.com" date="1538568005">- Btrfs: fix data corruption when deduplicating between different
  files (bsc#1110647).
- commit 669848c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568006">- btrfs: Remove unused parameters from various functions
  (bsc#1110649).
- commit c97c657</changelog>
  <changelog author="fdmanana@suse.com" date="1538568007">- Btrfs: fix send failure when root has deleted files still open
  (bsc#1110650).
- commit f52554d</changelog>
  <changelog author="jslaby@suse.cz" date="1538568008">- watchdog: Mark watchdog touch functions as notrace (git-fixes).
- commit 8b53193</changelog>
  <changelog author="neilb@suse.com" date="1538654400">- nfs/filelayout: fix oops when freeing filelayout segment
  (bsc#1105190).
- NFS/filelayout: Fix racy setting of fl-&gt;dsaddr in
  filelayout_check_deviceid() (bsc#1105190).
- commit d6d0fab</changelog>
  <changelog author="neilb@suse.com" date="1538654401">- VFS: don't test owner for NFS in set_posix_acl() (bsc#1103405).
- commit 36f977a</changelog>
  <changelog author="tiwai@suse.de" date="1538654402">- README.BRANCH: SLE15-SP1 branch maintainer changes
  Add ptesarik as co-maintainer, keep tiwai as the primary maintainer
- commit 83aea11</changelog>
  <changelog author="wqu@suse.com" date="1538654403">- btrfs: tests/qgroup: Fix wrong tree backref level (bsc#1107928).
- commit a5e154c</changelog>
  <changelog author="wqu@suse.com" date="1538654404">- btrfs: check-integrity: Fix NULL pointer dereference for
  degraded mount (bsc#1107947).
- commit 77b2277</changelog>
  <changelog author="wqu@suse.com" date="1538654405">- btrfs: scrub: Don't use inode pages for device replace (follow
  up for bsc#1108096).
- commit c865775</changelog>
  <changelog author="tiwai@suse.de" date="1538654406">- ASoC: cs4265: fix MMTLR Data switch control (bsc#1051510).
- ALSA: fireworks: fix memory leak of response buffer at error
  path (bsc#1051510).
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix
  I/O at error path (bsc#1051510).
- ALSA: emu10k1: fix possible info leak to userspace on
  SNDRV_EMU10K1_IOCTL_INFO (bsc#1051510).
- ALSA: bebob: use address returned by kmalloc() instead of
  kernel stack for streaming DMA mapping (bsc#1051510).
- ASoC: rt5514: Fix the issue of the delay volume applied
  (bsc#1051510).
- ASoC: dapm: Fix potential DAI widget pointer deref when linking
  DAIs (bsc#1051510).
- ALSA: msnd: Fix the default sample sizes (bsc#1051510).
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE()
  macro (bsc#1051510).
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
  (bsc#1051510).
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
  (bsc#1051510).
- ASoC: rt5514: Add the missing register in the readable table
  (bsc#1051510).
- ASoC: rt5514: Eliminate the noise in the ASRC case
  (bsc#1051510).
- ASoC: rt5514: Add the I2S ASRC support (bsc#1051510).
- commit 4eba9c8</changelog>
  <changelog author="wqu@suse.com" date="1538654407">- btrfs: scrub: Don't use inode page cache in
  scrub_handle_errored_block() (follow up for bsc#1108096).
- commit 3f91c84</changelog>
  <changelog author="tiwai@suse.de" date="1538654408">- smsc95xx: Check for Wake-on-LAN modes (bsc#1051510).
- smsc75xx: Check for Wake-on-LAN modes (bsc#1051510).
- r8152: Check for supported Wake-on-LAN Modes (bsc#1051510).
- sr9800: Check for supported Wake-on-LAN modes (bsc#1051510).
- lan78xx: Check for supported Wake-on-LAN modes (bsc#1051510).
- ax88179_178a: Check for supported Wake-on-LAN modes
  (bsc#1051510).
- mac80211: fix pending queue hang due to TX_DROP (bsc#1051510).
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
  (bsc#1051510).
- Input: elantech - enable middle button of touchpad on ThinkPad
  P72 (bsc#1051510).
- regulator: fix crash caused by null driver data (bsc#1051510).
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
  (bsc#1051510).
- intel_th: Fix device removal logic (bsc#1051510).
- NFC: Fix possible memory corruption when handling SHDLC I-Frame
  commands (bsc#1051510).
- platform/x86: alienware-wmi: Correct a memory leak
  (bsc#1051510).
- xhci: Fix use after free for URB cancellation on a reallocated
  endpoint (bsc#1051510).
- mei: ignore not found client in the enumeration (bsc#1051510).
- i2c: i801: Allow ACPI AML access I/O ports not reserved for
  SMBus (bsc#1051510).
- fbdev/via: fix defined but not used warning (bsc#1051510).
- video: goldfishfb: fix memory leak on driver remove
  (bsc#1051510).
- fbdev: Distinguish between interlaced and progressive modes
  (bsc#1051510).
- platform/x86: toshiba_acpi: Fix defined but not used build
  warnings (bsc#1051510).
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
  (bsc#1051510).
- input: rohm_bu21023: switch to i2c_lock_bus(...,
  I2C_LOCK_SEGMENT) (bsc#1051510).
- HID: hid-ntrig: add error handling for sysfs_create_group
  (bsc#1051510).
- mfd: ti_am335x_tscadc: Fix struct clk memory leak (bsc#1051510).
- mmc: sdhci: do not try to use 3.3V signaling if not supported
  (bsc#1051510).
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
  (bsc#1051510).
- parport: sunbpp: fix error return code (bsc#1051510).
- coresight: Handle errors in finding input/output ports
  (bsc#1051510).
- mei: bus: type promotion bug in mei_nfc_if_version()
  (bsc#1051510).
- gpio: pxa: Fix potential NULL dereference (bsc#1051510).
- gpiolib: Mark gpio_suffixes array with __maybe_unused
  (bsc#1051510).
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
  (bsc#1051510).
- crypto: sharah - Unregister correct algorithms for SAHARA 3
  (bsc#1051510).
- crypto: skcipher - Fix -Wstringop-truncation warnings
  (bsc#1051510).
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
  (bsc#1051510).
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 (bsc#1051510).
- mac80211: restrict delayed tailroom needed decrement
  (bsc#1051510).
- wlcore: Add missing PM call for
  wlcore_cmd_wait_for_event_or_timeout() (bsc#1051510).
- commit e266792</changelog>
  <changelog author="mbrugger@suse.com" date="1538654409">- arm64: Update config files. (bsc#1110716)
  Enable ST LPS25H pressure sensor.
- commit 69c6902</changelog>
  <changelog author="jack@suse.cz" date="1538654410">- patches.fixes/x86-memory_failure-Introduce-set-clear-_mce_nospec.patch:
  Fixup compilation breakage on s390 and arm due to missing
  clear_mce_nospec().
- commit faef795</changelog>
</package>
<package pkgid="beef9746fae7ad178c94d36fb75c47185cd6f7446940a67e52077b6507bc5043" name="kernel-debug" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.22.1"/>
  <changelog author="tiwai@suse.de" date="1539172800">- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell
  XPS 27 7760 (bsc#1051510).
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
  (bsc#1051510).
- crypto: mxs-dcp - Fix wait logic on chan threads (bsc#1051510).
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM
  ioctl (bsc#1051510).
- HID: add support for Apple Magic Keyboards (bsc#1051510).
- gpio: Fix crash due to registration race (bsc#1051510).
- gpiolib-acpi: Register GpioInt ACPI event handlers from a
  late_initcall (bsc#1051510).
- gpio: adp5588: Fix sleep-in-atomic-context bug (bsc#1051510).
- cfg80211: fix a type issue in
  ieee80211_chandef_to_operating_class() (bsc#1051510).
- Revert "gpio: set up initial state from .get_direction()"
  (bsc#1051510).
- gpio: mb86s70: Revert "Return error if requesting an already
  assigned gpio" (bsc#1051510).
- commit 2759d22</changelog>
  <changelog author="mbrugger@suse.com" date="1539172801">- arm64: Update config files.
  Enable SENSORS_RASPBERRYPI_HWMON
- commit 2a83945</changelog>
  <changelog author="mbrugger@suse.com" date="1539172802">- supported.conf: mark raspberrypi-hwmon as supported
- commit af8ddda</changelog>
  <changelog author="tiwai@suse.de" date="1539172803">- HID: hid-saitek: Add device ID for RAT 7 Contagion
  (bsc#1051510).
- mac80211: shorten the IBSS debug messages (bsc#1051510).
- mac80211: don't Tx a deauth frame if the AP forbade Tx
  (bsc#1051510).
- mac80211: Fix station bandwidth setting after channel switch
  (bsc#1051510).
- mac80211: fix a race between restart and CSA flows
  (bsc#1051510).
- mac80211: do not convert to A-MSDU if frag/subframe limited
  (bsc#1051510).
- mac80211: mesh: fix HWMP sequence numbering to follow standard
  (bsc#1051510).
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211_hwsim: require at least one channel (bsc#1051510).
- mac80211: Run TXQ teardown code before de-registering interfaces
  (bsc#1051510).
- hwmon: (adt7475) Make adt7475_read_word() return errors
  (bsc#1051510).
- hwmon: (ina2xx) fix sysfs shunt resistor read access
  (bsc#1051510).
- commit af836cd</changelog>
  <changelog author="tiwai@suse.de" date="1539172804">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- Revert "mwifiex: handle race during mwifiex_usb_disconnect"
  (bsc#1051510).
- media: videobuf-dma-sg: Fix dma_{sync,unmap}_sg() calls
  (bsc#1051510).
- Revert "mwifiex: fix incorrect ht capability problem"
  (bsc#1051510).
- PM / Domains: Fix genpd to deal with drivers returning 1 from
  - &gt;prepare() (bsc#1051510).
- Revert "pinctrl: sunxi: Don't enforce bias disable (for now)"
  (bsc#1051510).
- commit fb6c36a</changelog>
  <changelog author="tiwai@suse.de" date="1539172805">- blacklist.conf: Add blacklist of inapplicable revert commits
  They are either not applicable or requiring more backports that aren't
  suitable for SLE15
- commit 987dd44</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259200">- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk (bsc#1106110)
- commit 273a6bd</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259201">- blacklist.conf: Append 'drm/amd/pp: initialize result to before or'ing in data'
- commit d2edcd9</changelog>
  <changelog author="tiwai@suse.de" date="1539259202">- Disable DRM patches that broke vbox video driver KMP (bsc#1111076)
- commit 23943c6</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259203">- blacklist.conf: Append 'Revert "drm: Use a flexible array member for blob property data"'
- commit ddc67eb</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259204">- Fix Patch-mainline tags to refer to Linux release tag
  It is expected that Patch-mainline tags refer to a release tag
  in the Linux git tree, such as v4.15. Several patches contain a
  Patch-mainline tags that instead refer to a Linux version number,
  such as 4.15. This inconsistency complicates grepping and
  automation.
  871 of 18000 patches are affected by this problem.
- commit 1d81d26</changelog>
  <changelog author="bp@suse.de" date="1539259205">- crypto: ccp - add timeout support in the SEV command
  (bsc#1106838).
- commit 912dad4</changelog>
  <changelog author="tiwai@suse.de" date="1539345600">- Update config files: update forgotten armv7hl configs
- commit 7bae3a6</changelog>
  <changelog author="msuchanek@suse.de" date="1539345601">- powerpc/numa: Skip onlining a offline node in kdump path
  (bsc#1109784).
- commit df87e51</changelog>
  <changelog author="tiwai@suse.de" date="1539345602">- squashfs metadata 2: electric boogaloo (bsc#1051510).
- squashfs: more metadata hardening (bsc#1051510).
- squashfs: be more careful about metadata corruption
  (bsc#1051510).
- commit 9bfac39</changelog>
  <changelog author="hare@suse.de" date="1539345603">- scsi: qla2xxx: Move log messages before issuing command to
  firmware (bsc#1108870).
- scsi: qla2xxx: Fix for double free of SRB structure
  (bsc#1108870).
- scsi: qla2xxx: Fix recursive mailbox timeout (bsc#1108870).
- scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
  (bsc#1108870).
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
  (bsc#1108870).
- scsi: qla2xxx: Fix duplicate switch database entries
  (bsc#1108870).
- scsi: qla2xxx: Fix NVMe Target discovery (bsc#1108870).
- scsi: qla2xxx: Fix NVMe session hang on unload (bsc#1108870).
- scsi: qla2xxx: don't allow negative thresholds (bsc#1108870).
- commit 50fe149</changelog>
  <changelog author="tiwai@suse.de" date="1539345604">- Squashfs: Compute expected length from inode size rather than
  block length (bsc#1051510).
- commit 0c4a663</changelog>
  <changelog author="tiwai@suse.de" date="1539345605">- soreuseport: initialise timewait reuseport field (bsc#1051510).
- commit bda2dcc</changelog>
  <changelog author="tiwai@suse.de" date="1539345606">- rpc_pipefs: fix double-dput() (bsc#1051510).
- commit 1a15e26</changelog>
  <changelog author="hare@suse.de" date="1539345607">- scsi: qla2xxx: Return switch command on a timeout (bsc#1108870).
- commit 8e38f2a</changelog>
</package>
<package pkgid="4841875caeb805cbc12e70dad8a4b160f27e9a95a996a68accc03b9db9494d86" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.22.1"/>
  <changelog author="tiwai@suse.de" date="1539172800">- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell
  XPS 27 7760 (bsc#1051510).
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
  (bsc#1051510).
- crypto: mxs-dcp - Fix wait logic on chan threads (bsc#1051510).
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM
  ioctl (bsc#1051510).
- HID: add support for Apple Magic Keyboards (bsc#1051510).
- gpio: Fix crash due to registration race (bsc#1051510).
- gpiolib-acpi: Register GpioInt ACPI event handlers from a
  late_initcall (bsc#1051510).
- gpio: adp5588: Fix sleep-in-atomic-context bug (bsc#1051510).
- cfg80211: fix a type issue in
  ieee80211_chandef_to_operating_class() (bsc#1051510).
- Revert "gpio: set up initial state from .get_direction()"
  (bsc#1051510).
- gpio: mb86s70: Revert "Return error if requesting an already
  assigned gpio" (bsc#1051510).
- commit 2759d22</changelog>
  <changelog author="mbrugger@suse.com" date="1539172801">- arm64: Update config files.
  Enable SENSORS_RASPBERRYPI_HWMON
- commit 2a83945</changelog>
  <changelog author="mbrugger@suse.com" date="1539172802">- supported.conf: mark raspberrypi-hwmon as supported
- commit af8ddda</changelog>
  <changelog author="tiwai@suse.de" date="1539172803">- HID: hid-saitek: Add device ID for RAT 7 Contagion
  (bsc#1051510).
- mac80211: shorten the IBSS debug messages (bsc#1051510).
- mac80211: don't Tx a deauth frame if the AP forbade Tx
  (bsc#1051510).
- mac80211: Fix station bandwidth setting after channel switch
  (bsc#1051510).
- mac80211: fix a race between restart and CSA flows
  (bsc#1051510).
- mac80211: do not convert to A-MSDU if frag/subframe limited
  (bsc#1051510).
- mac80211: mesh: fix HWMP sequence numbering to follow standard
  (bsc#1051510).
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211_hwsim: require at least one channel (bsc#1051510).
- mac80211: Run TXQ teardown code before de-registering interfaces
  (bsc#1051510).
- hwmon: (adt7475) Make adt7475_read_word() return errors
  (bsc#1051510).
- hwmon: (ina2xx) fix sysfs shunt resistor read access
  (bsc#1051510).
- commit af836cd</changelog>
  <changelog author="tiwai@suse.de" date="1539172804">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- Revert "mwifiex: handle race during mwifiex_usb_disconnect"
  (bsc#1051510).
- media: videobuf-dma-sg: Fix dma_{sync,unmap}_sg() calls
  (bsc#1051510).
- Revert "mwifiex: fix incorrect ht capability problem"
  (bsc#1051510).
- PM / Domains: Fix genpd to deal with drivers returning 1 from
  - &gt;prepare() (bsc#1051510).
- Revert "pinctrl: sunxi: Don't enforce bias disable (for now)"
  (bsc#1051510).
- commit fb6c36a</changelog>
  <changelog author="tiwai@suse.de" date="1539172805">- blacklist.conf: Add blacklist of inapplicable revert commits
  They are either not applicable or requiring more backports that aren't
  suitable for SLE15
- commit 987dd44</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259200">- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk (bsc#1106110)
- commit 273a6bd</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259201">- blacklist.conf: Append 'drm/amd/pp: initialize result to before or'ing in data'
- commit d2edcd9</changelog>
  <changelog author="tiwai@suse.de" date="1539259202">- Disable DRM patches that broke vbox video driver KMP (bsc#1111076)
- commit 23943c6</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259203">- blacklist.conf: Append 'Revert "drm: Use a flexible array member for blob property data"'
- commit ddc67eb</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259204">- Fix Patch-mainline tags to refer to Linux release tag
  It is expected that Patch-mainline tags refer to a release tag
  in the Linux git tree, such as v4.15. Several patches contain a
  Patch-mainline tags that instead refer to a Linux version number,
  such as 4.15. This inconsistency complicates grepping and
  automation.
  871 of 18000 patches are affected by this problem.
- commit 1d81d26</changelog>
  <changelog author="bp@suse.de" date="1539259205">- crypto: ccp - add timeout support in the SEV command
  (bsc#1106838).
- commit 912dad4</changelog>
  <changelog author="tiwai@suse.de" date="1539345600">- Update config files: update forgotten armv7hl configs
- commit 7bae3a6</changelog>
  <changelog author="msuchanek@suse.de" date="1539345601">- powerpc/numa: Skip onlining a offline node in kdump path
  (bsc#1109784).
- commit df87e51</changelog>
  <changelog author="tiwai@suse.de" date="1539345602">- squashfs metadata 2: electric boogaloo (bsc#1051510).
- squashfs: more metadata hardening (bsc#1051510).
- squashfs: be more careful about metadata corruption
  (bsc#1051510).
- commit 9bfac39</changelog>
  <changelog author="hare@suse.de" date="1539345603">- scsi: qla2xxx: Move log messages before issuing command to
  firmware (bsc#1108870).
- scsi: qla2xxx: Fix for double free of SRB structure
  (bsc#1108870).
- scsi: qla2xxx: Fix recursive mailbox timeout (bsc#1108870).
- scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
  (bsc#1108870).
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
  (bsc#1108870).
- scsi: qla2xxx: Fix duplicate switch database entries
  (bsc#1108870).
- scsi: qla2xxx: Fix NVMe Target discovery (bsc#1108870).
- scsi: qla2xxx: Fix NVMe session hang on unload (bsc#1108870).
- scsi: qla2xxx: don't allow negative thresholds (bsc#1108870).
- commit 50fe149</changelog>
  <changelog author="tiwai@suse.de" date="1539345604">- Squashfs: Compute expected length from inode size rather than
  block length (bsc#1051510).
- commit 0c4a663</changelog>
  <changelog author="tiwai@suse.de" date="1539345605">- soreuseport: initialise timewait reuseport field (bsc#1051510).
- commit bda2dcc</changelog>
  <changelog author="tiwai@suse.de" date="1539345606">- rpc_pipefs: fix double-dput() (bsc#1051510).
- commit 1a15e26</changelog>
  <changelog author="hare@suse.de" date="1539345607">- scsi: qla2xxx: Return switch command on a timeout (bsc#1108870).
- commit 8e38f2a</changelog>
</package>
<package pkgid="d36477261ecd55020ea3f732d17bd218cf7838aaedf0490691da8005701c9aec" name="kernel-debug" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.25.1"/>
  <changelog author="tiwai@suse.de" date="1540814400">- NFC: nfcmrvl_uart: fix OF child-node lookup (bsc#1051510).
- kernfs: update comment about kernfs_path() return value
  (bsc#1051510).
- usbip: tools: fix atoi() on non-null terminated string
  (bsc#1051510).
- USB: serial: cypress_m8: fix interrupt-out transfer length
  (bsc#1051510).
- usb: chipidea: Prevent unbalanced IRQ disable (bsc#1051510).
- commit 6c9d1e7</changelog>
  <changelog author="tiwai@suse.de" date="1540814401">- blacklist.conf: Add ASoC and USB entries that may break kABI
- commit 199a072</changelog>
  <changelog author="tiwai@suse.de" date="1540814402">- usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation
  (bsc#1051510).
- usb: gadget: fsl_udc_core: check allocation return value and
  cleanup on failure (bsc#1051510).
- commit c1b7b66</changelog>
  <changelog author="tiwai@suse.de" date="1540814403">- Refresh patch tag of upstreamed patches and move to sorted section
- commit a966b56</changelog>
  <changelog author="ohering@suse.de" date="1540900800">- move changes without Git-commit out of sorted section
- commit cbf049e</changelog>
  <changelog author="jslaby@suse.cz" date="1540900801">- random: rate limit unseeded randomness warnings (git-fixes).
- commit be52b92</changelog>
  <changelog author="jslaby@suse.cz" date="1540900802">- blacklist.conf: add a kasan fix
- commit c85e2d1</changelog>
  <changelog author="jdelvare@suse.de" date="1540900803">- Add reference to bsc#1104124 to
  patches.fixes/fs-aio-fix-the-increment-of-aio-nr-and-counting-agai.patch
- commit f60e64b</changelog>
  <changelog author="jslaby@suse.cz" date="1540900804">- tools build: fix # escaping in .cmd files for future Make
  (git-fixes).
- Kbuild: fix # escaping in .cmd files for future Make
  (git-fixes).
- commit 8f11ec3</changelog>
  <changelog author="tiwai@suse.de" date="1540900805">- drm/i915/dp: Link train Fallback on eDP only if fallback link
  BW can fit panel's native mode (bsc#1051510).
- drm/i915: Restore vblank interrupts earlier (bsc#1051510).
- commit daf120f</changelog>
  <changelog author="tiwai@suse.de" date="1540900806">- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
  (bsc#1051510).
- media: cx231xx: fix potential sign-extension overflow on large
  shift (bsc#1051510).
- media: pci: cx23885: handle adding to list failure
  (bsc#1051510).
- media: vsp1: Fix YCbCr planar formats pitch calculation
  (bsc#1051510).
- media: tvp5150: fix switch exit in set control handler
  (bsc#1051510).
- media: tvp5150: fix width alignment during set_selection()
  (bsc#1051510).
- media: em28xx: fix input name for Terratec AV 350 (bsc#1051510).
- media: em28xx: use a default format if TRY_FMT fails
  (bsc#1051510).
- media: tvp5150: avoid going past array on v4l2_querymenu()
  (bsc#1051510).
- media: dvb: fix compat ioctl translation (bsc#1051510).
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
  (bsc#1051510).
- commit 0831c5e</changelog>
  <changelog author="tiwai@suse.de" date="1540900807">- soc/tegra: pmc: Fix child-node lookup (bsc#1051510).
- serial: 8250: Fix clearing FIFOs in RS485 mode again
  (bsc#1051510).
- staging: comedi: ni_mio_common: protect register write overflow
  (bsc#1051510).
- iio: adc: at91: fix wrong channel number in triggered buffer
  mode (bsc#1051510).
- iio: adc: at91: fix acking DRDY irq on simple conversions
  (bsc#1051510).
- iio: adc: imx25-gcq: Fix leak of device_node in
  mx25_gcq_setup_cfgs() (bsc#1051510).
- commit 9f4f0cc</changelog>
  <changelog author="jthumshirn@suse.de" date="1540900808">- Refresh
  patches.fixes/0001-drm-amdgpu-powerplay-fix-missing-break-in-switch-sta.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Do-not-carry-error-code-in-HiBMC.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Don-t-overwrite-fb-helper-surfac.patch.
- Refresh
  patches.fixes/0001-drm-i915-audio-Hook-up-component-bindings-even-if-di.patch.
- Refresh
  patches.fixes/0001-drm-i915-gen9-Fix-initial-readout-for-Y-tiled-frameb.patch.
- Refresh
  patches.fixes/0001-drm-sti-do-not-remove-the-drm_bridge-that-was-never-.patch.
- Refresh
  patches.fixes/0001-drm-virtio-fix-bounds-check-in-virtio_gpu_cmd_get_ca.patch.
- commit 652fab5</changelog>
  <changelog author="tiwai@suse.de" date="1540987200">- drm/nouveau: Don't disable polling in fallback mode
  (bsc#1103356).
- Delete
  patches.suse/Revert-drm-nouveau-drm-therm-fan-add-a-fallback-if-n.
- commit aa0c431</changelog>
  <changelog author="tzimmermann@suse.de" date="1540987201">- Fix Patch-mainline for "drm/amdgpu: update tmr mc address"
  The Patch-mainline tag was incorrect. References is being updated as well.
- commit ce8535e</changelog>
  <changelog author="tiwai@suse.de" date="1540987202">- Workaround for mysterious NVMe breakage with i915 CFL
  (bsc#1111040).
- commit 0fa5877</changelog>
  <changelog author="jthumshirn@suse.de" date="1540987203">- libnvdimm, label: Fix sparse warning (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Use namespace index data to reduce number of label reads
  needed (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Split label init out from the logic for getting config
  data (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Remove empty if statement (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Clarify comment in sizeof_namespace_index (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Sanity check labeloff (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- libnvdimm, dimm: Maximize label transfer size (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7
  (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- commit 5a4eeb4</changelog>
  <changelog author="jlee@suse.com" date="1540987204">- x86/boot/KASLR: Work around firmware bugs by excluding
  EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR's choice
  (bnc#1112878).
- commit d45cd78</changelog>
  <changelog author="tiwai@suse.de" date="1540987205">- blacklist.conf: Add a few wifi driver entries that can't be applied
- commit 662fc68</changelog>
  <changelog author="tiwai@suse.de" date="1540987206">- spi/bcm63xx-hsspi: keep pll clk enabled (bsc#1051510).
- spi: sh-msiof: fix deferred probing (bsc#1051510).
- spi: bcm-qspi: switch back to reading flash using smaller chunks
  (bsc#1051510).
- commit f773242</changelog>
</package>
<package pkgid="02b087821154f370871daee0707cd7a66c7e7a597cb9d27e3f2d164da4796cee" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.25.1"/>
  <changelog author="tiwai@suse.de" date="1540814400">- NFC: nfcmrvl_uart: fix OF child-node lookup (bsc#1051510).
- kernfs: update comment about kernfs_path() return value
  (bsc#1051510).
- usbip: tools: fix atoi() on non-null terminated string
  (bsc#1051510).
- USB: serial: cypress_m8: fix interrupt-out transfer length
  (bsc#1051510).
- usb: chipidea: Prevent unbalanced IRQ disable (bsc#1051510).
- commit 6c9d1e7</changelog>
  <changelog author="tiwai@suse.de" date="1540814401">- blacklist.conf: Add ASoC and USB entries that may break kABI
- commit 199a072</changelog>
  <changelog author="tiwai@suse.de" date="1540814402">- usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation
  (bsc#1051510).
- usb: gadget: fsl_udc_core: check allocation return value and
  cleanup on failure (bsc#1051510).
- commit c1b7b66</changelog>
  <changelog author="tiwai@suse.de" date="1540814403">- Refresh patch tag of upstreamed patches and move to sorted section
- commit a966b56</changelog>
  <changelog author="ohering@suse.de" date="1540900800">- move changes without Git-commit out of sorted section
- commit cbf049e</changelog>
  <changelog author="jslaby@suse.cz" date="1540900801">- random: rate limit unseeded randomness warnings (git-fixes).
- commit be52b92</changelog>
  <changelog author="jslaby@suse.cz" date="1540900802">- blacklist.conf: add a kasan fix
- commit c85e2d1</changelog>
  <changelog author="jdelvare@suse.de" date="1540900803">- Add reference to bsc#1104124 to
  patches.fixes/fs-aio-fix-the-increment-of-aio-nr-and-counting-agai.patch
- commit f60e64b</changelog>
  <changelog author="jslaby@suse.cz" date="1540900804">- tools build: fix # escaping in .cmd files for future Make
  (git-fixes).
- Kbuild: fix # escaping in .cmd files for future Make
  (git-fixes).
- commit 8f11ec3</changelog>
  <changelog author="tiwai@suse.de" date="1540900805">- drm/i915/dp: Link train Fallback on eDP only if fallback link
  BW can fit panel's native mode (bsc#1051510).
- drm/i915: Restore vblank interrupts earlier (bsc#1051510).
- commit daf120f</changelog>
  <changelog author="tiwai@suse.de" date="1540900806">- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
  (bsc#1051510).
- media: cx231xx: fix potential sign-extension overflow on large
  shift (bsc#1051510).
- media: pci: cx23885: handle adding to list failure
  (bsc#1051510).
- media: vsp1: Fix YCbCr planar formats pitch calculation
  (bsc#1051510).
- media: tvp5150: fix switch exit in set control handler
  (bsc#1051510).
- media: tvp5150: fix width alignment during set_selection()
  (bsc#1051510).
- media: em28xx: fix input name for Terratec AV 350 (bsc#1051510).
- media: em28xx: use a default format if TRY_FMT fails
  (bsc#1051510).
- media: tvp5150: avoid going past array on v4l2_querymenu()
  (bsc#1051510).
- media: dvb: fix compat ioctl translation (bsc#1051510).
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
  (bsc#1051510).
- commit 0831c5e</changelog>
  <changelog author="tiwai@suse.de" date="1540900807">- soc/tegra: pmc: Fix child-node lookup (bsc#1051510).
- serial: 8250: Fix clearing FIFOs in RS485 mode again
  (bsc#1051510).
- staging: comedi: ni_mio_common: protect register write overflow
  (bsc#1051510).
- iio: adc: at91: fix wrong channel number in triggered buffer
  mode (bsc#1051510).
- iio: adc: at91: fix acking DRDY irq on simple conversions
  (bsc#1051510).
- iio: adc: imx25-gcq: Fix leak of device_node in
  mx25_gcq_setup_cfgs() (bsc#1051510).
- commit 9f4f0cc</changelog>
  <changelog author="jthumshirn@suse.de" date="1540900808">- Refresh
  patches.fixes/0001-drm-amdgpu-powerplay-fix-missing-break-in-switch-sta.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Do-not-carry-error-code-in-HiBMC.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Don-t-overwrite-fb-helper-surfac.patch.
- Refresh
  patches.fixes/0001-drm-i915-audio-Hook-up-component-bindings-even-if-di.patch.
- Refresh
  patches.fixes/0001-drm-i915-gen9-Fix-initial-readout-for-Y-tiled-frameb.patch.
- Refresh
  patches.fixes/0001-drm-sti-do-not-remove-the-drm_bridge-that-was-never-.patch.
- Refresh
  patches.fixes/0001-drm-virtio-fix-bounds-check-in-virtio_gpu_cmd_get_ca.patch.
- commit 652fab5</changelog>
  <changelog author="tiwai@suse.de" date="1540987200">- drm/nouveau: Don't disable polling in fallback mode
  (bsc#1103356).
- Delete
  patches.suse/Revert-drm-nouveau-drm-therm-fan-add-a-fallback-if-n.
- commit aa0c431</changelog>
  <changelog author="tzimmermann@suse.de" date="1540987201">- Fix Patch-mainline for "drm/amdgpu: update tmr mc address"
  The Patch-mainline tag was incorrect. References is being updated as well.
- commit ce8535e</changelog>
  <changelog author="tiwai@suse.de" date="1540987202">- Workaround for mysterious NVMe breakage with i915 CFL
  (bsc#1111040).
- commit 0fa5877</changelog>
  <changelog author="jthumshirn@suse.de" date="1540987203">- libnvdimm, label: Fix sparse warning (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Use namespace index data to reduce number of label reads
  needed (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Split label init out from the logic for getting config
  data (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Remove empty if statement (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Clarify comment in sizeof_namespace_index (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Sanity check labeloff (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- libnvdimm, dimm: Maximize label transfer size (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7
  (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- commit 5a4eeb4</changelog>
  <changelog author="jlee@suse.com" date="1540987204">- x86/boot/KASLR: Work around firmware bugs by excluding
  EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR's choice
  (bnc#1112878).
- commit d45cd78</changelog>
  <changelog author="tiwai@suse.de" date="1540987205">- blacklist.conf: Add a few wifi driver entries that can't be applied
- commit 662fc68</changelog>
  <changelog author="tiwai@suse.de" date="1540987206">- spi/bcm63xx-hsspi: keep pll clk enabled (bsc#1051510).
- spi: sh-msiof: fix deferred probing (bsc#1051510).
- spi: bcm-qspi: switch back to reading flash using smaller chunks
  (bsc#1051510).
- commit f773242</changelog>
</package>
<package pkgid="68ff6803e7abbcef187a0bbfe722dae4796853cadf58259229132f466886d43a" name="kernel-debug" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="73a027839ed6ef0d206d733d905d8df6bd9d7204a7990dc893c5e7d6a751d9a2" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="c310e296ee8d7097ad3c07f5ffcc2f17c202897ef79dd4da955c5cf6e3a90e2e" name="kernel-debug" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="a5c38e95e89b929d775862009528c5b760d0a8e3a1b3aa5332d60f439316dcdc" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="98bbf18a716b4862c7069cfaaf841ca22840bf662b814ca9cfe5a11a5696ecdf" name="kernel-debug-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="3d04492637c97b3f9adb37aea559097a4783ddcafd46ed52f9a10946e45a36ed" name="kernel-debug-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="979c1b7d9e84830ed3b03a9f76ec58028485da2a7352ca23ddb08f11bcfc0b40" name="kernel-debug-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="f781d9a650db8e21d250b4d5d61cffc51bf3fe18b18671901a6b6b237765369c" name="kernel-debug-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.19.2"/>
  <changelog author="fdmanana@suse.com" date="1538568000">- Btrfs: fix fsync after hole punching when using no-holes feature
  (bsc#1110642).
- commit 3f19b40</changelog>
  <changelog author="fdmanana@suse.com" date="1538568001">- Btrfs: fix loss of prealloc extents past i_size after fsync
  log replay (bsc#1110643).
- commit 974e057</changelog>
  <changelog author="fdmanana@suse.com" date="1538568002">- Btrfs: fix duplicate extents after fsync of file with prealloc
  extents (bsc#1110644).
- commit c4ec603</changelog>
  <changelog author="fdmanana@suse.com" date="1538568003">- Btrfs: fix return value on rename exchange failure
  (bsc#1110645).
- commit 532729c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568004">- Btrfs: sync log after logging new name (bsc#1110646).
- commit 7260d6b</changelog>
  <changelog author="fdmanana@suse.com" date="1538568005">- Btrfs: fix data corruption when deduplicating between different
  files (bsc#1110647).
- commit 669848c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568006">- btrfs: Remove unused parameters from various functions
  (bsc#1110649).
- commit c97c657</changelog>
  <changelog author="fdmanana@suse.com" date="1538568007">- Btrfs: fix send failure when root has deleted files still open
  (bsc#1110650).
- commit f52554d</changelog>
  <changelog author="jslaby@suse.cz" date="1538568008">- watchdog: Mark watchdog touch functions as notrace (git-fixes).
- commit 8b53193</changelog>
  <changelog author="neilb@suse.com" date="1538654400">- nfs/filelayout: fix oops when freeing filelayout segment
  (bsc#1105190).
- NFS/filelayout: Fix racy setting of fl-&gt;dsaddr in
  filelayout_check_deviceid() (bsc#1105190).
- commit d6d0fab</changelog>
  <changelog author="neilb@suse.com" date="1538654401">- VFS: don't test owner for NFS in set_posix_acl() (bsc#1103405).
- commit 36f977a</changelog>
  <changelog author="tiwai@suse.de" date="1538654402">- README.BRANCH: SLE15-SP1 branch maintainer changes
  Add ptesarik as co-maintainer, keep tiwai as the primary maintainer
- commit 83aea11</changelog>
  <changelog author="wqu@suse.com" date="1538654403">- btrfs: tests/qgroup: Fix wrong tree backref level (bsc#1107928).
- commit a5e154c</changelog>
  <changelog author="wqu@suse.com" date="1538654404">- btrfs: check-integrity: Fix NULL pointer dereference for
  degraded mount (bsc#1107947).
- commit 77b2277</changelog>
  <changelog author="wqu@suse.com" date="1538654405">- btrfs: scrub: Don't use inode pages for device replace (follow
  up for bsc#1108096).
- commit c865775</changelog>
  <changelog author="tiwai@suse.de" date="1538654406">- ASoC: cs4265: fix MMTLR Data switch control (bsc#1051510).
- ALSA: fireworks: fix memory leak of response buffer at error
  path (bsc#1051510).
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix
  I/O at error path (bsc#1051510).
- ALSA: emu10k1: fix possible info leak to userspace on
  SNDRV_EMU10K1_IOCTL_INFO (bsc#1051510).
- ALSA: bebob: use address returned by kmalloc() instead of
  kernel stack for streaming DMA mapping (bsc#1051510).
- ASoC: rt5514: Fix the issue of the delay volume applied
  (bsc#1051510).
- ASoC: dapm: Fix potential DAI widget pointer deref when linking
  DAIs (bsc#1051510).
- ALSA: msnd: Fix the default sample sizes (bsc#1051510).
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE()
  macro (bsc#1051510).
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
  (bsc#1051510).
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
  (bsc#1051510).
- ASoC: rt5514: Add the missing register in the readable table
  (bsc#1051510).
- ASoC: rt5514: Eliminate the noise in the ASRC case
  (bsc#1051510).
- ASoC: rt5514: Add the I2S ASRC support (bsc#1051510).
- commit 4eba9c8</changelog>
  <changelog author="wqu@suse.com" date="1538654407">- btrfs: scrub: Don't use inode page cache in
  scrub_handle_errored_block() (follow up for bsc#1108096).
- commit 3f91c84</changelog>
  <changelog author="tiwai@suse.de" date="1538654408">- smsc95xx: Check for Wake-on-LAN modes (bsc#1051510).
- smsc75xx: Check for Wake-on-LAN modes (bsc#1051510).
- r8152: Check for supported Wake-on-LAN Modes (bsc#1051510).
- sr9800: Check for supported Wake-on-LAN modes (bsc#1051510).
- lan78xx: Check for supported Wake-on-LAN modes (bsc#1051510).
- ax88179_178a: Check for supported Wake-on-LAN modes
  (bsc#1051510).
- mac80211: fix pending queue hang due to TX_DROP (bsc#1051510).
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
  (bsc#1051510).
- Input: elantech - enable middle button of touchpad on ThinkPad
  P72 (bsc#1051510).
- regulator: fix crash caused by null driver data (bsc#1051510).
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
  (bsc#1051510).
- intel_th: Fix device removal logic (bsc#1051510).
- NFC: Fix possible memory corruption when handling SHDLC I-Frame
  commands (bsc#1051510).
- platform/x86: alienware-wmi: Correct a memory leak
  (bsc#1051510).
- xhci: Fix use after free for URB cancellation on a reallocated
  endpoint (bsc#1051510).
- mei: ignore not found client in the enumeration (bsc#1051510).
- i2c: i801: Allow ACPI AML access I/O ports not reserved for
  SMBus (bsc#1051510).
- fbdev/via: fix defined but not used warning (bsc#1051510).
- video: goldfishfb: fix memory leak on driver remove
  (bsc#1051510).
- fbdev: Distinguish between interlaced and progressive modes
  (bsc#1051510).
- platform/x86: toshiba_acpi: Fix defined but not used build
  warnings (bsc#1051510).
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
  (bsc#1051510).
- input: rohm_bu21023: switch to i2c_lock_bus(...,
  I2C_LOCK_SEGMENT) (bsc#1051510).
- HID: hid-ntrig: add error handling for sysfs_create_group
  (bsc#1051510).
- mfd: ti_am335x_tscadc: Fix struct clk memory leak (bsc#1051510).
- mmc: sdhci: do not try to use 3.3V signaling if not supported
  (bsc#1051510).
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
  (bsc#1051510).
- parport: sunbpp: fix error return code (bsc#1051510).
- coresight: Handle errors in finding input/output ports
  (bsc#1051510).
- mei: bus: type promotion bug in mei_nfc_if_version()
  (bsc#1051510).
- gpio: pxa: Fix potential NULL dereference (bsc#1051510).
- gpiolib: Mark gpio_suffixes array with __maybe_unused
  (bsc#1051510).
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
  (bsc#1051510).
- crypto: sharah - Unregister correct algorithms for SAHARA 3
  (bsc#1051510).
- crypto: skcipher - Fix -Wstringop-truncation warnings
  (bsc#1051510).
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
  (bsc#1051510).
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 (bsc#1051510).
- mac80211: restrict delayed tailroom needed decrement
  (bsc#1051510).
- wlcore: Add missing PM call for
  wlcore_cmd_wait_for_event_or_timeout() (bsc#1051510).
- commit e266792</changelog>
  <changelog author="mbrugger@suse.com" date="1538654409">- arm64: Update config files. (bsc#1110716)
  Enable ST LPS25H pressure sensor.
- commit 69c6902</changelog>
  <changelog author="jack@suse.cz" date="1538654410">- patches.fixes/x86-memory_failure-Introduce-set-clear-_mce_nospec.patch:
  Fixup compilation breakage on s390 and arm due to missing
  clear_mce_nospec().
- commit faef795</changelog>
</package>
<package pkgid="f7f9159af36236ed3cd8ef3e800ab9d3ff87848eed00e69b588e5eab6326c198" name="kernel-debug-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.22.1"/>
  <changelog author="tiwai@suse.de" date="1539172800">- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell
  XPS 27 7760 (bsc#1051510).
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
  (bsc#1051510).
- crypto: mxs-dcp - Fix wait logic on chan threads (bsc#1051510).
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM
  ioctl (bsc#1051510).
- HID: add support for Apple Magic Keyboards (bsc#1051510).
- gpio: Fix crash due to registration race (bsc#1051510).
- gpiolib-acpi: Register GpioInt ACPI event handlers from a
  late_initcall (bsc#1051510).
- gpio: adp5588: Fix sleep-in-atomic-context bug (bsc#1051510).
- cfg80211: fix a type issue in
  ieee80211_chandef_to_operating_class() (bsc#1051510).
- Revert "gpio: set up initial state from .get_direction()"
  (bsc#1051510).
- gpio: mb86s70: Revert "Return error if requesting an already
  assigned gpio" (bsc#1051510).
- commit 2759d22</changelog>
  <changelog author="mbrugger@suse.com" date="1539172801">- arm64: Update config files.
  Enable SENSORS_RASPBERRYPI_HWMON
- commit 2a83945</changelog>
  <changelog author="mbrugger@suse.com" date="1539172802">- supported.conf: mark raspberrypi-hwmon as supported
- commit af8ddda</changelog>
  <changelog author="tiwai@suse.de" date="1539172803">- HID: hid-saitek: Add device ID for RAT 7 Contagion
  (bsc#1051510).
- mac80211: shorten the IBSS debug messages (bsc#1051510).
- mac80211: don't Tx a deauth frame if the AP forbade Tx
  (bsc#1051510).
- mac80211: Fix station bandwidth setting after channel switch
  (bsc#1051510).
- mac80211: fix a race between restart and CSA flows
  (bsc#1051510).
- mac80211: do not convert to A-MSDU if frag/subframe limited
  (bsc#1051510).
- mac80211: mesh: fix HWMP sequence numbering to follow standard
  (bsc#1051510).
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211_hwsim: require at least one channel (bsc#1051510).
- mac80211: Run TXQ teardown code before de-registering interfaces
  (bsc#1051510).
- hwmon: (adt7475) Make adt7475_read_word() return errors
  (bsc#1051510).
- hwmon: (ina2xx) fix sysfs shunt resistor read access
  (bsc#1051510).
- commit af836cd</changelog>
  <changelog author="tiwai@suse.de" date="1539172804">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- Revert "mwifiex: handle race during mwifiex_usb_disconnect"
  (bsc#1051510).
- media: videobuf-dma-sg: Fix dma_{sync,unmap}_sg() calls
  (bsc#1051510).
- Revert "mwifiex: fix incorrect ht capability problem"
  (bsc#1051510).
- PM / Domains: Fix genpd to deal with drivers returning 1 from
  - &gt;prepare() (bsc#1051510).
- Revert "pinctrl: sunxi: Don't enforce bias disable (for now)"
  (bsc#1051510).
- commit fb6c36a</changelog>
  <changelog author="tiwai@suse.de" date="1539172805">- blacklist.conf: Add blacklist of inapplicable revert commits
  They are either not applicable or requiring more backports that aren't
  suitable for SLE15
- commit 987dd44</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259200">- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk (bsc#1106110)
- commit 273a6bd</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259201">- blacklist.conf: Append 'drm/amd/pp: initialize result to before or'ing in data'
- commit d2edcd9</changelog>
  <changelog author="tiwai@suse.de" date="1539259202">- Disable DRM patches that broke vbox video driver KMP (bsc#1111076)
- commit 23943c6</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259203">- blacklist.conf: Append 'Revert "drm: Use a flexible array member for blob property data"'
- commit ddc67eb</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259204">- Fix Patch-mainline tags to refer to Linux release tag
  It is expected that Patch-mainline tags refer to a release tag
  in the Linux git tree, such as v4.15. Several patches contain a
  Patch-mainline tags that instead refer to a Linux version number,
  such as 4.15. This inconsistency complicates grepping and
  automation.
  871 of 18000 patches are affected by this problem.
- commit 1d81d26</changelog>
  <changelog author="bp@suse.de" date="1539259205">- crypto: ccp - add timeout support in the SEV command
  (bsc#1106838).
- commit 912dad4</changelog>
  <changelog author="tiwai@suse.de" date="1539345600">- Update config files: update forgotten armv7hl configs
- commit 7bae3a6</changelog>
  <changelog author="msuchanek@suse.de" date="1539345601">- powerpc/numa: Skip onlining a offline node in kdump path
  (bsc#1109784).
- commit df87e51</changelog>
  <changelog author="tiwai@suse.de" date="1539345602">- squashfs metadata 2: electric boogaloo (bsc#1051510).
- squashfs: more metadata hardening (bsc#1051510).
- squashfs: be more careful about metadata corruption
  (bsc#1051510).
- commit 9bfac39</changelog>
  <changelog author="hare@suse.de" date="1539345603">- scsi: qla2xxx: Move log messages before issuing command to
  firmware (bsc#1108870).
- scsi: qla2xxx: Fix for double free of SRB structure
  (bsc#1108870).
- scsi: qla2xxx: Fix recursive mailbox timeout (bsc#1108870).
- scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
  (bsc#1108870).
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
  (bsc#1108870).
- scsi: qla2xxx: Fix duplicate switch database entries
  (bsc#1108870).
- scsi: qla2xxx: Fix NVMe Target discovery (bsc#1108870).
- scsi: qla2xxx: Fix NVMe session hang on unload (bsc#1108870).
- scsi: qla2xxx: don't allow negative thresholds (bsc#1108870).
- commit 50fe149</changelog>
  <changelog author="tiwai@suse.de" date="1539345604">- Squashfs: Compute expected length from inode size rather than
  block length (bsc#1051510).
- commit 0c4a663</changelog>
  <changelog author="tiwai@suse.de" date="1539345605">- soreuseport: initialise timewait reuseport field (bsc#1051510).
- commit bda2dcc</changelog>
  <changelog author="tiwai@suse.de" date="1539345606">- rpc_pipefs: fix double-dput() (bsc#1051510).
- commit 1a15e26</changelog>
  <changelog author="hare@suse.de" date="1539345607">- scsi: qla2xxx: Return switch command on a timeout (bsc#1108870).
- commit 8e38f2a</changelog>
</package>
<package pkgid="003ebee466dfd75bb43db8e1d9bdcc052a94dd1591ca49130b275d986bfc4d08" name="kernel-debug-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.25.1"/>
  <changelog author="tiwai@suse.de" date="1540814400">- NFC: nfcmrvl_uart: fix OF child-node lookup (bsc#1051510).
- kernfs: update comment about kernfs_path() return value
  (bsc#1051510).
- usbip: tools: fix atoi() on non-null terminated string
  (bsc#1051510).
- USB: serial: cypress_m8: fix interrupt-out transfer length
  (bsc#1051510).
- usb: chipidea: Prevent unbalanced IRQ disable (bsc#1051510).
- commit 6c9d1e7</changelog>
  <changelog author="tiwai@suse.de" date="1540814401">- blacklist.conf: Add ASoC and USB entries that may break kABI
- commit 199a072</changelog>
  <changelog author="tiwai@suse.de" date="1540814402">- usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation
  (bsc#1051510).
- usb: gadget: fsl_udc_core: check allocation return value and
  cleanup on failure (bsc#1051510).
- commit c1b7b66</changelog>
  <changelog author="tiwai@suse.de" date="1540814403">- Refresh patch tag of upstreamed patches and move to sorted section
- commit a966b56</changelog>
  <changelog author="ohering@suse.de" date="1540900800">- move changes without Git-commit out of sorted section
- commit cbf049e</changelog>
  <changelog author="jslaby@suse.cz" date="1540900801">- random: rate limit unseeded randomness warnings (git-fixes).
- commit be52b92</changelog>
  <changelog author="jslaby@suse.cz" date="1540900802">- blacklist.conf: add a kasan fix
- commit c85e2d1</changelog>
  <changelog author="jdelvare@suse.de" date="1540900803">- Add reference to bsc#1104124 to
  patches.fixes/fs-aio-fix-the-increment-of-aio-nr-and-counting-agai.patch
- commit f60e64b</changelog>
  <changelog author="jslaby@suse.cz" date="1540900804">- tools build: fix # escaping in .cmd files for future Make
  (git-fixes).
- Kbuild: fix # escaping in .cmd files for future Make
  (git-fixes).
- commit 8f11ec3</changelog>
  <changelog author="tiwai@suse.de" date="1540900805">- drm/i915/dp: Link train Fallback on eDP only if fallback link
  BW can fit panel's native mode (bsc#1051510).
- drm/i915: Restore vblank interrupts earlier (bsc#1051510).
- commit daf120f</changelog>
  <changelog author="tiwai@suse.de" date="1540900806">- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
  (bsc#1051510).
- media: cx231xx: fix potential sign-extension overflow on large
  shift (bsc#1051510).
- media: pci: cx23885: handle adding to list failure
  (bsc#1051510).
- media: vsp1: Fix YCbCr planar formats pitch calculation
  (bsc#1051510).
- media: tvp5150: fix switch exit in set control handler
  (bsc#1051510).
- media: tvp5150: fix width alignment during set_selection()
  (bsc#1051510).
- media: em28xx: fix input name for Terratec AV 350 (bsc#1051510).
- media: em28xx: use a default format if TRY_FMT fails
  (bsc#1051510).
- media: tvp5150: avoid going past array on v4l2_querymenu()
  (bsc#1051510).
- media: dvb: fix compat ioctl translation (bsc#1051510).
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
  (bsc#1051510).
- commit 0831c5e</changelog>
  <changelog author="tiwai@suse.de" date="1540900807">- soc/tegra: pmc: Fix child-node lookup (bsc#1051510).
- serial: 8250: Fix clearing FIFOs in RS485 mode again
  (bsc#1051510).
- staging: comedi: ni_mio_common: protect register write overflow
  (bsc#1051510).
- iio: adc: at91: fix wrong channel number in triggered buffer
  mode (bsc#1051510).
- iio: adc: at91: fix acking DRDY irq on simple conversions
  (bsc#1051510).
- iio: adc: imx25-gcq: Fix leak of device_node in
  mx25_gcq_setup_cfgs() (bsc#1051510).
- commit 9f4f0cc</changelog>
  <changelog author="jthumshirn@suse.de" date="1540900808">- Refresh
  patches.fixes/0001-drm-amdgpu-powerplay-fix-missing-break-in-switch-sta.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Do-not-carry-error-code-in-HiBMC.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Don-t-overwrite-fb-helper-surfac.patch.
- Refresh
  patches.fixes/0001-drm-i915-audio-Hook-up-component-bindings-even-if-di.patch.
- Refresh
  patches.fixes/0001-drm-i915-gen9-Fix-initial-readout-for-Y-tiled-frameb.patch.
- Refresh
  patches.fixes/0001-drm-sti-do-not-remove-the-drm_bridge-that-was-never-.patch.
- Refresh
  patches.fixes/0001-drm-virtio-fix-bounds-check-in-virtio_gpu_cmd_get_ca.patch.
- commit 652fab5</changelog>
  <changelog author="tiwai@suse.de" date="1540987200">- drm/nouveau: Don't disable polling in fallback mode
  (bsc#1103356).
- Delete
  patches.suse/Revert-drm-nouveau-drm-therm-fan-add-a-fallback-if-n.
- commit aa0c431</changelog>
  <changelog author="tzimmermann@suse.de" date="1540987201">- Fix Patch-mainline for "drm/amdgpu: update tmr mc address"
  The Patch-mainline tag was incorrect. References is being updated as well.
- commit ce8535e</changelog>
  <changelog author="tiwai@suse.de" date="1540987202">- Workaround for mysterious NVMe breakage with i915 CFL
  (bsc#1111040).
- commit 0fa5877</changelog>
  <changelog author="jthumshirn@suse.de" date="1540987203">- libnvdimm, label: Fix sparse warning (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Use namespace index data to reduce number of label reads
  needed (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Split label init out from the logic for getting config
  data (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Remove empty if statement (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Clarify comment in sizeof_namespace_index (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Sanity check labeloff (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- libnvdimm, dimm: Maximize label transfer size (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7
  (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- commit 5a4eeb4</changelog>
  <changelog author="jlee@suse.com" date="1540987204">- x86/boot/KASLR: Work around firmware bugs by excluding
  EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR's choice
  (bnc#1112878).
- commit d45cd78</changelog>
  <changelog author="tiwai@suse.de" date="1540987205">- blacklist.conf: Add a few wifi driver entries that can't be applied
- commit 662fc68</changelog>
  <changelog author="tiwai@suse.de" date="1540987206">- spi/bcm63xx-hsspi: keep pll clk enabled (bsc#1051510).
- spi: sh-msiof: fix deferred probing (bsc#1051510).
- spi: bcm-qspi: switch back to reading flash using smaller chunks
  (bsc#1051510).
- commit f773242</changelog>
</package>
<package pkgid="c11ffd05062c36cbbe6b77b797442f774d0512a80125111f187db86af311397b" name="kernel-debug-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="9bd91ce604eae87c5e522cdbd38ebd16e4d834073816f0b37784b4fac0e725aa" name="kernel-debug-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="d7a86049b1a33e625b7b90887dcb795dd856bb3c0c046819f7a9d660d1d01247" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="340c4c4ce3a30801ec0fd9e7f65b57c6f2ccc34f61952d4950de720930c84be0" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="9b82df00e931a3796bca01364cac91dc549e99ac3c60b8635c04b90b33a3704c" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="e4b3bf9eda97fb52849c33ea7916ac8194a9ea08286e71099d1dcb93e30de31f" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.19.2"/>
  <changelog author="fdmanana@suse.com" date="1538568000">- Btrfs: fix fsync after hole punching when using no-holes feature
  (bsc#1110642).
- commit 3f19b40</changelog>
  <changelog author="fdmanana@suse.com" date="1538568001">- Btrfs: fix loss of prealloc extents past i_size after fsync
  log replay (bsc#1110643).
- commit 974e057</changelog>
  <changelog author="fdmanana@suse.com" date="1538568002">- Btrfs: fix duplicate extents after fsync of file with prealloc
  extents (bsc#1110644).
- commit c4ec603</changelog>
  <changelog author="fdmanana@suse.com" date="1538568003">- Btrfs: fix return value on rename exchange failure
  (bsc#1110645).
- commit 532729c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568004">- Btrfs: sync log after logging new name (bsc#1110646).
- commit 7260d6b</changelog>
  <changelog author="fdmanana@suse.com" date="1538568005">- Btrfs: fix data corruption when deduplicating between different
  files (bsc#1110647).
- commit 669848c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568006">- btrfs: Remove unused parameters from various functions
  (bsc#1110649).
- commit c97c657</changelog>
  <changelog author="fdmanana@suse.com" date="1538568007">- Btrfs: fix send failure when root has deleted files still open
  (bsc#1110650).
- commit f52554d</changelog>
  <changelog author="jslaby@suse.cz" date="1538568008">- watchdog: Mark watchdog touch functions as notrace (git-fixes).
- commit 8b53193</changelog>
  <changelog author="neilb@suse.com" date="1538654400">- nfs/filelayout: fix oops when freeing filelayout segment
  (bsc#1105190).
- NFS/filelayout: Fix racy setting of fl-&gt;dsaddr in
  filelayout_check_deviceid() (bsc#1105190).
- commit d6d0fab</changelog>
  <changelog author="neilb@suse.com" date="1538654401">- VFS: don't test owner for NFS in set_posix_acl() (bsc#1103405).
- commit 36f977a</changelog>
  <changelog author="tiwai@suse.de" date="1538654402">- README.BRANCH: SLE15-SP1 branch maintainer changes
  Add ptesarik as co-maintainer, keep tiwai as the primary maintainer
- commit 83aea11</changelog>
  <changelog author="wqu@suse.com" date="1538654403">- btrfs: tests/qgroup: Fix wrong tree backref level (bsc#1107928).
- commit a5e154c</changelog>
  <changelog author="wqu@suse.com" date="1538654404">- btrfs: check-integrity: Fix NULL pointer dereference for
  degraded mount (bsc#1107947).
- commit 77b2277</changelog>
  <changelog author="wqu@suse.com" date="1538654405">- btrfs: scrub: Don't use inode pages for device replace (follow
  up for bsc#1108096).
- commit c865775</changelog>
  <changelog author="tiwai@suse.de" date="1538654406">- ASoC: cs4265: fix MMTLR Data switch control (bsc#1051510).
- ALSA: fireworks: fix memory leak of response buffer at error
  path (bsc#1051510).
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix
  I/O at error path (bsc#1051510).
- ALSA: emu10k1: fix possible info leak to userspace on
  SNDRV_EMU10K1_IOCTL_INFO (bsc#1051510).
- ALSA: bebob: use address returned by kmalloc() instead of
  kernel stack for streaming DMA mapping (bsc#1051510).
- ASoC: rt5514: Fix the issue of the delay volume applied
  (bsc#1051510).
- ASoC: dapm: Fix potential DAI widget pointer deref when linking
  DAIs (bsc#1051510).
- ALSA: msnd: Fix the default sample sizes (bsc#1051510).
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE()
  macro (bsc#1051510).
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
  (bsc#1051510).
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
  (bsc#1051510).
- ASoC: rt5514: Add the missing register in the readable table
  (bsc#1051510).
- ASoC: rt5514: Eliminate the noise in the ASRC case
  (bsc#1051510).
- ASoC: rt5514: Add the I2S ASRC support (bsc#1051510).
- commit 4eba9c8</changelog>
  <changelog author="wqu@suse.com" date="1538654407">- btrfs: scrub: Don't use inode page cache in
  scrub_handle_errored_block() (follow up for bsc#1108096).
- commit 3f91c84</changelog>
  <changelog author="tiwai@suse.de" date="1538654408">- smsc95xx: Check for Wake-on-LAN modes (bsc#1051510).
- smsc75xx: Check for Wake-on-LAN modes (bsc#1051510).
- r8152: Check for supported Wake-on-LAN Modes (bsc#1051510).
- sr9800: Check for supported Wake-on-LAN modes (bsc#1051510).
- lan78xx: Check for supported Wake-on-LAN modes (bsc#1051510).
- ax88179_178a: Check for supported Wake-on-LAN modes
  (bsc#1051510).
- mac80211: fix pending queue hang due to TX_DROP (bsc#1051510).
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
  (bsc#1051510).
- Input: elantech - enable middle button of touchpad on ThinkPad
  P72 (bsc#1051510).
- regulator: fix crash caused by null driver data (bsc#1051510).
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
  (bsc#1051510).
- intel_th: Fix device removal logic (bsc#1051510).
- NFC: Fix possible memory corruption when handling SHDLC I-Frame
  commands (bsc#1051510).
- platform/x86: alienware-wmi: Correct a memory leak
  (bsc#1051510).
- xhci: Fix use after free for URB cancellation on a reallocated
  endpoint (bsc#1051510).
- mei: ignore not found client in the enumeration (bsc#1051510).
- i2c: i801: Allow ACPI AML access I/O ports not reserved for
  SMBus (bsc#1051510).
- fbdev/via: fix defined but not used warning (bsc#1051510).
- video: goldfishfb: fix memory leak on driver remove
  (bsc#1051510).
- fbdev: Distinguish between interlaced and progressive modes
  (bsc#1051510).
- platform/x86: toshiba_acpi: Fix defined but not used build
  warnings (bsc#1051510).
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
  (bsc#1051510).
- input: rohm_bu21023: switch to i2c_lock_bus(...,
  I2C_LOCK_SEGMENT) (bsc#1051510).
- HID: hid-ntrig: add error handling for sysfs_create_group
  (bsc#1051510).
- mfd: ti_am335x_tscadc: Fix struct clk memory leak (bsc#1051510).
- mmc: sdhci: do not try to use 3.3V signaling if not supported
  (bsc#1051510).
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
  (bsc#1051510).
- parport: sunbpp: fix error return code (bsc#1051510).
- coresight: Handle errors in finding input/output ports
  (bsc#1051510).
- mei: bus: type promotion bug in mei_nfc_if_version()
  (bsc#1051510).
- gpio: pxa: Fix potential NULL dereference (bsc#1051510).
- gpiolib: Mark gpio_suffixes array with __maybe_unused
  (bsc#1051510).
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
  (bsc#1051510).
- crypto: sharah - Unregister correct algorithms for SAHARA 3
  (bsc#1051510).
- crypto: skcipher - Fix -Wstringop-truncation warnings
  (bsc#1051510).
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
  (bsc#1051510).
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 (bsc#1051510).
- mac80211: restrict delayed tailroom needed decrement
  (bsc#1051510).
- wlcore: Add missing PM call for
  wlcore_cmd_wait_for_event_or_timeout() (bsc#1051510).
- commit e266792</changelog>
  <changelog author="mbrugger@suse.com" date="1538654409">- arm64: Update config files. (bsc#1110716)
  Enable ST LPS25H pressure sensor.
- commit 69c6902</changelog>
  <changelog author="jack@suse.cz" date="1538654410">- patches.fixes/x86-memory_failure-Introduce-set-clear-_mce_nospec.patch:
  Fixup compilation breakage on s390 and arm due to missing
  clear_mce_nospec().
- commit faef795</changelog>
</package>
<package pkgid="3e58858a5dfe61cad7b58e939b61a90f17106f5d8cedfa37ff0da5699219c0ec" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.22.1"/>
  <changelog author="tiwai@suse.de" date="1539172800">- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell
  XPS 27 7760 (bsc#1051510).
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
  (bsc#1051510).
- crypto: mxs-dcp - Fix wait logic on chan threads (bsc#1051510).
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM
  ioctl (bsc#1051510).
- HID: add support for Apple Magic Keyboards (bsc#1051510).
- gpio: Fix crash due to registration race (bsc#1051510).
- gpiolib-acpi: Register GpioInt ACPI event handlers from a
  late_initcall (bsc#1051510).
- gpio: adp5588: Fix sleep-in-atomic-context bug (bsc#1051510).
- cfg80211: fix a type issue in
  ieee80211_chandef_to_operating_class() (bsc#1051510).
- Revert "gpio: set up initial state from .get_direction()"
  (bsc#1051510).
- gpio: mb86s70: Revert "Return error if requesting an already
  assigned gpio" (bsc#1051510).
- commit 2759d22</changelog>
  <changelog author="mbrugger@suse.com" date="1539172801">- arm64: Update config files.
  Enable SENSORS_RASPBERRYPI_HWMON
- commit 2a83945</changelog>
  <changelog author="mbrugger@suse.com" date="1539172802">- supported.conf: mark raspberrypi-hwmon as supported
- commit af8ddda</changelog>
  <changelog author="tiwai@suse.de" date="1539172803">- HID: hid-saitek: Add device ID for RAT 7 Contagion
  (bsc#1051510).
- mac80211: shorten the IBSS debug messages (bsc#1051510).
- mac80211: don't Tx a deauth frame if the AP forbade Tx
  (bsc#1051510).
- mac80211: Fix station bandwidth setting after channel switch
  (bsc#1051510).
- mac80211: fix a race between restart and CSA flows
  (bsc#1051510).
- mac80211: do not convert to A-MSDU if frag/subframe limited
  (bsc#1051510).
- mac80211: mesh: fix HWMP sequence numbering to follow standard
  (bsc#1051510).
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211_hwsim: require at least one channel (bsc#1051510).
- mac80211: Run TXQ teardown code before de-registering interfaces
  (bsc#1051510).
- hwmon: (adt7475) Make adt7475_read_word() return errors
  (bsc#1051510).
- hwmon: (ina2xx) fix sysfs shunt resistor read access
  (bsc#1051510).
- commit af836cd</changelog>
  <changelog author="tiwai@suse.de" date="1539172804">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- Revert "mwifiex: handle race during mwifiex_usb_disconnect"
  (bsc#1051510).
- media: videobuf-dma-sg: Fix dma_{sync,unmap}_sg() calls
  (bsc#1051510).
- Revert "mwifiex: fix incorrect ht capability problem"
  (bsc#1051510).
- PM / Domains: Fix genpd to deal with drivers returning 1 from
  - &gt;prepare() (bsc#1051510).
- Revert "pinctrl: sunxi: Don't enforce bias disable (for now)"
  (bsc#1051510).
- commit fb6c36a</changelog>
  <changelog author="tiwai@suse.de" date="1539172805">- blacklist.conf: Add blacklist of inapplicable revert commits
  They are either not applicable or requiring more backports that aren't
  suitable for SLE15
- commit 987dd44</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259200">- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk (bsc#1106110)
- commit 273a6bd</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259201">- blacklist.conf: Append 'drm/amd/pp: initialize result to before or'ing in data'
- commit d2edcd9</changelog>
  <changelog author="tiwai@suse.de" date="1539259202">- Disable DRM patches that broke vbox video driver KMP (bsc#1111076)
- commit 23943c6</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259203">- blacklist.conf: Append 'Revert "drm: Use a flexible array member for blob property data"'
- commit ddc67eb</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259204">- Fix Patch-mainline tags to refer to Linux release tag
  It is expected that Patch-mainline tags refer to a release tag
  in the Linux git tree, such as v4.15. Several patches contain a
  Patch-mainline tags that instead refer to a Linux version number,
  such as 4.15. This inconsistency complicates grepping and
  automation.
  871 of 18000 patches are affected by this problem.
- commit 1d81d26</changelog>
  <changelog author="bp@suse.de" date="1539259205">- crypto: ccp - add timeout support in the SEV command
  (bsc#1106838).
- commit 912dad4</changelog>
  <changelog author="tiwai@suse.de" date="1539345600">- Update config files: update forgotten armv7hl configs
- commit 7bae3a6</changelog>
  <changelog author="msuchanek@suse.de" date="1539345601">- powerpc/numa: Skip onlining a offline node in kdump path
  (bsc#1109784).
- commit df87e51</changelog>
  <changelog author="tiwai@suse.de" date="1539345602">- squashfs metadata 2: electric boogaloo (bsc#1051510).
- squashfs: more metadata hardening (bsc#1051510).
- squashfs: be more careful about metadata corruption
  (bsc#1051510).
- commit 9bfac39</changelog>
  <changelog author="hare@suse.de" date="1539345603">- scsi: qla2xxx: Move log messages before issuing command to
  firmware (bsc#1108870).
- scsi: qla2xxx: Fix for double free of SRB structure
  (bsc#1108870).
- scsi: qla2xxx: Fix recursive mailbox timeout (bsc#1108870).
- scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
  (bsc#1108870).
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
  (bsc#1108870).
- scsi: qla2xxx: Fix duplicate switch database entries
  (bsc#1108870).
- scsi: qla2xxx: Fix NVMe Target discovery (bsc#1108870).
- scsi: qla2xxx: Fix NVMe session hang on unload (bsc#1108870).
- scsi: qla2xxx: don't allow negative thresholds (bsc#1108870).
- commit 50fe149</changelog>
  <changelog author="tiwai@suse.de" date="1539345604">- Squashfs: Compute expected length from inode size rather than
  block length (bsc#1051510).
- commit 0c4a663</changelog>
  <changelog author="tiwai@suse.de" date="1539345605">- soreuseport: initialise timewait reuseport field (bsc#1051510).
- commit bda2dcc</changelog>
  <changelog author="tiwai@suse.de" date="1539345606">- rpc_pipefs: fix double-dput() (bsc#1051510).
- commit 1a15e26</changelog>
  <changelog author="hare@suse.de" date="1539345607">- scsi: qla2xxx: Return switch command on a timeout (bsc#1108870).
- commit 8e38f2a</changelog>
</package>
<package pkgid="ecac293650f908b4f84bcc7d5080289fd918b9d48d96be6f30f928c4ce61eac2" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.25.1"/>
  <changelog author="tiwai@suse.de" date="1540814400">- NFC: nfcmrvl_uart: fix OF child-node lookup (bsc#1051510).
- kernfs: update comment about kernfs_path() return value
  (bsc#1051510).
- usbip: tools: fix atoi() on non-null terminated string
  (bsc#1051510).
- USB: serial: cypress_m8: fix interrupt-out transfer length
  (bsc#1051510).
- usb: chipidea: Prevent unbalanced IRQ disable (bsc#1051510).
- commit 6c9d1e7</changelog>
  <changelog author="tiwai@suse.de" date="1540814401">- blacklist.conf: Add ASoC and USB entries that may break kABI
- commit 199a072</changelog>
  <changelog author="tiwai@suse.de" date="1540814402">- usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation
  (bsc#1051510).
- usb: gadget: fsl_udc_core: check allocation return value and
  cleanup on failure (bsc#1051510).
- commit c1b7b66</changelog>
  <changelog author="tiwai@suse.de" date="1540814403">- Refresh patch tag of upstreamed patches and move to sorted section
- commit a966b56</changelog>
  <changelog author="ohering@suse.de" date="1540900800">- move changes without Git-commit out of sorted section
- commit cbf049e</changelog>
  <changelog author="jslaby@suse.cz" date="1540900801">- random: rate limit unseeded randomness warnings (git-fixes).
- commit be52b92</changelog>
  <changelog author="jslaby@suse.cz" date="1540900802">- blacklist.conf: add a kasan fix
- commit c85e2d1</changelog>
  <changelog author="jdelvare@suse.de" date="1540900803">- Add reference to bsc#1104124 to
  patches.fixes/fs-aio-fix-the-increment-of-aio-nr-and-counting-agai.patch
- commit f60e64b</changelog>
  <changelog author="jslaby@suse.cz" date="1540900804">- tools build: fix # escaping in .cmd files for future Make
  (git-fixes).
- Kbuild: fix # escaping in .cmd files for future Make
  (git-fixes).
- commit 8f11ec3</changelog>
  <changelog author="tiwai@suse.de" date="1540900805">- drm/i915/dp: Link train Fallback on eDP only if fallback link
  BW can fit panel's native mode (bsc#1051510).
- drm/i915: Restore vblank interrupts earlier (bsc#1051510).
- commit daf120f</changelog>
  <changelog author="tiwai@suse.de" date="1540900806">- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
  (bsc#1051510).
- media: cx231xx: fix potential sign-extension overflow on large
  shift (bsc#1051510).
- media: pci: cx23885: handle adding to list failure
  (bsc#1051510).
- media: vsp1: Fix YCbCr planar formats pitch calculation
  (bsc#1051510).
- media: tvp5150: fix switch exit in set control handler
  (bsc#1051510).
- media: tvp5150: fix width alignment during set_selection()
  (bsc#1051510).
- media: em28xx: fix input name for Terratec AV 350 (bsc#1051510).
- media: em28xx: use a default format if TRY_FMT fails
  (bsc#1051510).
- media: tvp5150: avoid going past array on v4l2_querymenu()
  (bsc#1051510).
- media: dvb: fix compat ioctl translation (bsc#1051510).
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
  (bsc#1051510).
- commit 0831c5e</changelog>
  <changelog author="tiwai@suse.de" date="1540900807">- soc/tegra: pmc: Fix child-node lookup (bsc#1051510).
- serial: 8250: Fix clearing FIFOs in RS485 mode again
  (bsc#1051510).
- staging: comedi: ni_mio_common: protect register write overflow
  (bsc#1051510).
- iio: adc: at91: fix wrong channel number in triggered buffer
  mode (bsc#1051510).
- iio: adc: at91: fix acking DRDY irq on simple conversions
  (bsc#1051510).
- iio: adc: imx25-gcq: Fix leak of device_node in
  mx25_gcq_setup_cfgs() (bsc#1051510).
- commit 9f4f0cc</changelog>
  <changelog author="jthumshirn@suse.de" date="1540900808">- Refresh
  patches.fixes/0001-drm-amdgpu-powerplay-fix-missing-break-in-switch-sta.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Do-not-carry-error-code-in-HiBMC.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Don-t-overwrite-fb-helper-surfac.patch.
- Refresh
  patches.fixes/0001-drm-i915-audio-Hook-up-component-bindings-even-if-di.patch.
- Refresh
  patches.fixes/0001-drm-i915-gen9-Fix-initial-readout-for-Y-tiled-frameb.patch.
- Refresh
  patches.fixes/0001-drm-sti-do-not-remove-the-drm_bridge-that-was-never-.patch.
- Refresh
  patches.fixes/0001-drm-virtio-fix-bounds-check-in-virtio_gpu_cmd_get_ca.patch.
- commit 652fab5</changelog>
  <changelog author="tiwai@suse.de" date="1540987200">- drm/nouveau: Don't disable polling in fallback mode
  (bsc#1103356).
- Delete
  patches.suse/Revert-drm-nouveau-drm-therm-fan-add-a-fallback-if-n.
- commit aa0c431</changelog>
  <changelog author="tzimmermann@suse.de" date="1540987201">- Fix Patch-mainline for "drm/amdgpu: update tmr mc address"
  The Patch-mainline tag was incorrect. References is being updated as well.
- commit ce8535e</changelog>
  <changelog author="tiwai@suse.de" date="1540987202">- Workaround for mysterious NVMe breakage with i915 CFL
  (bsc#1111040).
- commit 0fa5877</changelog>
  <changelog author="jthumshirn@suse.de" date="1540987203">- libnvdimm, label: Fix sparse warning (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Use namespace index data to reduce number of label reads
  needed (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Split label init out from the logic for getting config
  data (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Remove empty if statement (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Clarify comment in sizeof_namespace_index (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Sanity check labeloff (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- libnvdimm, dimm: Maximize label transfer size (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7
  (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- commit 5a4eeb4</changelog>
  <changelog author="jlee@suse.com" date="1540987204">- x86/boot/KASLR: Work around firmware bugs by excluding
  EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR's choice
  (bnc#1112878).
- commit d45cd78</changelog>
  <changelog author="tiwai@suse.de" date="1540987205">- blacklist.conf: Add a few wifi driver entries that can't be applied
- commit 662fc68</changelog>
  <changelog author="tiwai@suse.de" date="1540987206">- spi/bcm63xx-hsspi: keep pll clk enabled (bsc#1051510).
- spi: sh-msiof: fix deferred probing (bsc#1051510).
- spi: bcm-qspi: switch back to reading flash using smaller chunks
  (bsc#1051510).
- commit f773242</changelog>
</package>
<package pkgid="29201832016855c2070ed3ef098275aac85ddcc4de464010661ef7026be29c83" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="94d90a2e6432fa7c60797c647130c3c921982fde82542721d19a4c7364135cfe" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="efd4c1204dc57022f607f67db760d73dfd5788165d7165c9c274b99e364862b7" name="kernel-default" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="a8723ab89f510f46d86fb782ecbd7df9a353030748f41bbfc69bd149f6e218c4" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="84f23d1d668ea22f40936d027f6216a2103192f6d0323b48084a6fa7b129e5ff" name="kernel-default" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="70ed023f05f80888e3c1260eddc3a79be1043b9a6e8710935298bb4c0ecf454e" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="39a13ebd2a63bb6a2e16057d2567f6ff8bbcf9c64595a1ddcf21759ddbbefc66" name="kernel-default" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="d13d28a145cc34adce60c51776b23cd421ae037d85f0ce04c09658e8350ba3af" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="c6c33953c9d1f778eb071430c1a11dddff374bb0209a744f709f71e801611ecf" name="kernel-default" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.19.2"/>
  <changelog author="fdmanana@suse.com" date="1538568000">- Btrfs: fix fsync after hole punching when using no-holes feature
  (bsc#1110642).
- commit 3f19b40</changelog>
  <changelog author="fdmanana@suse.com" date="1538568001">- Btrfs: fix loss of prealloc extents past i_size after fsync
  log replay (bsc#1110643).
- commit 974e057</changelog>
  <changelog author="fdmanana@suse.com" date="1538568002">- Btrfs: fix duplicate extents after fsync of file with prealloc
  extents (bsc#1110644).
- commit c4ec603</changelog>
  <changelog author="fdmanana@suse.com" date="1538568003">- Btrfs: fix return value on rename exchange failure
  (bsc#1110645).
- commit 532729c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568004">- Btrfs: sync log after logging new name (bsc#1110646).
- commit 7260d6b</changelog>
  <changelog author="fdmanana@suse.com" date="1538568005">- Btrfs: fix data corruption when deduplicating between different
  files (bsc#1110647).
- commit 669848c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568006">- btrfs: Remove unused parameters from various functions
  (bsc#1110649).
- commit c97c657</changelog>
  <changelog author="fdmanana@suse.com" date="1538568007">- Btrfs: fix send failure when root has deleted files still open
  (bsc#1110650).
- commit f52554d</changelog>
  <changelog author="jslaby@suse.cz" date="1538568008">- watchdog: Mark watchdog touch functions as notrace (git-fixes).
- commit 8b53193</changelog>
  <changelog author="neilb@suse.com" date="1538654400">- nfs/filelayout: fix oops when freeing filelayout segment
  (bsc#1105190).
- NFS/filelayout: Fix racy setting of fl-&gt;dsaddr in
  filelayout_check_deviceid() (bsc#1105190).
- commit d6d0fab</changelog>
  <changelog author="neilb@suse.com" date="1538654401">- VFS: don't test owner for NFS in set_posix_acl() (bsc#1103405).
- commit 36f977a</changelog>
  <changelog author="tiwai@suse.de" date="1538654402">- README.BRANCH: SLE15-SP1 branch maintainer changes
  Add ptesarik as co-maintainer, keep tiwai as the primary maintainer
- commit 83aea11</changelog>
  <changelog author="wqu@suse.com" date="1538654403">- btrfs: tests/qgroup: Fix wrong tree backref level (bsc#1107928).
- commit a5e154c</changelog>
  <changelog author="wqu@suse.com" date="1538654404">- btrfs: check-integrity: Fix NULL pointer dereference for
  degraded mount (bsc#1107947).
- commit 77b2277</changelog>
  <changelog author="wqu@suse.com" date="1538654405">- btrfs: scrub: Don't use inode pages for device replace (follow
  up for bsc#1108096).
- commit c865775</changelog>
  <changelog author="tiwai@suse.de" date="1538654406">- ASoC: cs4265: fix MMTLR Data switch control (bsc#1051510).
- ALSA: fireworks: fix memory leak of response buffer at error
  path (bsc#1051510).
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix
  I/O at error path (bsc#1051510).
- ALSA: emu10k1: fix possible info leak to userspace on
  SNDRV_EMU10K1_IOCTL_INFO (bsc#1051510).
- ALSA: bebob: use address returned by kmalloc() instead of
  kernel stack for streaming DMA mapping (bsc#1051510).
- ASoC: rt5514: Fix the issue of the delay volume applied
  (bsc#1051510).
- ASoC: dapm: Fix potential DAI widget pointer deref when linking
  DAIs (bsc#1051510).
- ALSA: msnd: Fix the default sample sizes (bsc#1051510).
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE()
  macro (bsc#1051510).
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
  (bsc#1051510).
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
  (bsc#1051510).
- ASoC: rt5514: Add the missing register in the readable table
  (bsc#1051510).
- ASoC: rt5514: Eliminate the noise in the ASRC case
  (bsc#1051510).
- ASoC: rt5514: Add the I2S ASRC support (bsc#1051510).
- commit 4eba9c8</changelog>
  <changelog author="wqu@suse.com" date="1538654407">- btrfs: scrub: Don't use inode page cache in
  scrub_handle_errored_block() (follow up for bsc#1108096).
- commit 3f91c84</changelog>
  <changelog author="tiwai@suse.de" date="1538654408">- smsc95xx: Check for Wake-on-LAN modes (bsc#1051510).
- smsc75xx: Check for Wake-on-LAN modes (bsc#1051510).
- r8152: Check for supported Wake-on-LAN Modes (bsc#1051510).
- sr9800: Check for supported Wake-on-LAN modes (bsc#1051510).
- lan78xx: Check for supported Wake-on-LAN modes (bsc#1051510).
- ax88179_178a: Check for supported Wake-on-LAN modes
  (bsc#1051510).
- mac80211: fix pending queue hang due to TX_DROP (bsc#1051510).
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
  (bsc#1051510).
- Input: elantech - enable middle button of touchpad on ThinkPad
  P72 (bsc#1051510).
- regulator: fix crash caused by null driver data (bsc#1051510).
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
  (bsc#1051510).
- intel_th: Fix device removal logic (bsc#1051510).
- NFC: Fix possible memory corruption when handling SHDLC I-Frame
  commands (bsc#1051510).
- platform/x86: alienware-wmi: Correct a memory leak
  (bsc#1051510).
- xhci: Fix use after free for URB cancellation on a reallocated
  endpoint (bsc#1051510).
- mei: ignore not found client in the enumeration (bsc#1051510).
- i2c: i801: Allow ACPI AML access I/O ports not reserved for
  SMBus (bsc#1051510).
- fbdev/via: fix defined but not used warning (bsc#1051510).
- video: goldfishfb: fix memory leak on driver remove
  (bsc#1051510).
- fbdev: Distinguish between interlaced and progressive modes
  (bsc#1051510).
- platform/x86: toshiba_acpi: Fix defined but not used build
  warnings (bsc#1051510).
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
  (bsc#1051510).
- input: rohm_bu21023: switch to i2c_lock_bus(...,
  I2C_LOCK_SEGMENT) (bsc#1051510).
- HID: hid-ntrig: add error handling for sysfs_create_group
  (bsc#1051510).
- mfd: ti_am335x_tscadc: Fix struct clk memory leak (bsc#1051510).
- mmc: sdhci: do not try to use 3.3V signaling if not supported
  (bsc#1051510).
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
  (bsc#1051510).
- parport: sunbpp: fix error return code (bsc#1051510).
- coresight: Handle errors in finding input/output ports
  (bsc#1051510).
- mei: bus: type promotion bug in mei_nfc_if_version()
  (bsc#1051510).
- gpio: pxa: Fix potential NULL dereference (bsc#1051510).
- gpiolib: Mark gpio_suffixes array with __maybe_unused
  (bsc#1051510).
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
  (bsc#1051510).
- crypto: sharah - Unregister correct algorithms for SAHARA 3
  (bsc#1051510).
- crypto: skcipher - Fix -Wstringop-truncation warnings
  (bsc#1051510).
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
  (bsc#1051510).
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 (bsc#1051510).
- mac80211: restrict delayed tailroom needed decrement
  (bsc#1051510).
- wlcore: Add missing PM call for
  wlcore_cmd_wait_for_event_or_timeout() (bsc#1051510).
- commit e266792</changelog>
  <changelog author="mbrugger@suse.com" date="1538654409">- arm64: Update config files. (bsc#1110716)
  Enable ST LPS25H pressure sensor.
- commit 69c6902</changelog>
  <changelog author="jack@suse.cz" date="1538654410">- patches.fixes/x86-memory_failure-Introduce-set-clear-_mce_nospec.patch:
  Fixup compilation breakage on s390 and arm due to missing
  clear_mce_nospec().
- commit faef795</changelog>
</package>
<package pkgid="075e2347ad861305f29b795b2086ae7921866cb49c608e695cf9ccde2a1fe073" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.19.2"/>
  <changelog author="fdmanana@suse.com" date="1538568000">- Btrfs: fix fsync after hole punching when using no-holes feature
  (bsc#1110642).
- commit 3f19b40</changelog>
  <changelog author="fdmanana@suse.com" date="1538568001">- Btrfs: fix loss of prealloc extents past i_size after fsync
  log replay (bsc#1110643).
- commit 974e057</changelog>
  <changelog author="fdmanana@suse.com" date="1538568002">- Btrfs: fix duplicate extents after fsync of file with prealloc
  extents (bsc#1110644).
- commit c4ec603</changelog>
  <changelog author="fdmanana@suse.com" date="1538568003">- Btrfs: fix return value on rename exchange failure
  (bsc#1110645).
- commit 532729c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568004">- Btrfs: sync log after logging new name (bsc#1110646).
- commit 7260d6b</changelog>
  <changelog author="fdmanana@suse.com" date="1538568005">- Btrfs: fix data corruption when deduplicating between different
  files (bsc#1110647).
- commit 669848c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568006">- btrfs: Remove unused parameters from various functions
  (bsc#1110649).
- commit c97c657</changelog>
  <changelog author="fdmanana@suse.com" date="1538568007">- Btrfs: fix send failure when root has deleted files still open
  (bsc#1110650).
- commit f52554d</changelog>
  <changelog author="jslaby@suse.cz" date="1538568008">- watchdog: Mark watchdog touch functions as notrace (git-fixes).
- commit 8b53193</changelog>
  <changelog author="neilb@suse.com" date="1538654400">- nfs/filelayout: fix oops when freeing filelayout segment
  (bsc#1105190).
- NFS/filelayout: Fix racy setting of fl-&gt;dsaddr in
  filelayout_check_deviceid() (bsc#1105190).
- commit d6d0fab</changelog>
  <changelog author="neilb@suse.com" date="1538654401">- VFS: don't test owner for NFS in set_posix_acl() (bsc#1103405).
- commit 36f977a</changelog>
  <changelog author="tiwai@suse.de" date="1538654402">- README.BRANCH: SLE15-SP1 branch maintainer changes
  Add ptesarik as co-maintainer, keep tiwai as the primary maintainer
- commit 83aea11</changelog>
  <changelog author="wqu@suse.com" date="1538654403">- btrfs: tests/qgroup: Fix wrong tree backref level (bsc#1107928).
- commit a5e154c</changelog>
  <changelog author="wqu@suse.com" date="1538654404">- btrfs: check-integrity: Fix NULL pointer dereference for
  degraded mount (bsc#1107947).
- commit 77b2277</changelog>
  <changelog author="wqu@suse.com" date="1538654405">- btrfs: scrub: Don't use inode pages for device replace (follow
  up for bsc#1108096).
- commit c865775</changelog>
  <changelog author="tiwai@suse.de" date="1538654406">- ASoC: cs4265: fix MMTLR Data switch control (bsc#1051510).
- ALSA: fireworks: fix memory leak of response buffer at error
  path (bsc#1051510).
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix
  I/O at error path (bsc#1051510).
- ALSA: emu10k1: fix possible info leak to userspace on
  SNDRV_EMU10K1_IOCTL_INFO (bsc#1051510).
- ALSA: bebob: use address returned by kmalloc() instead of
  kernel stack for streaming DMA mapping (bsc#1051510).
- ASoC: rt5514: Fix the issue of the delay volume applied
  (bsc#1051510).
- ASoC: dapm: Fix potential DAI widget pointer deref when linking
  DAIs (bsc#1051510).
- ALSA: msnd: Fix the default sample sizes (bsc#1051510).
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE()
  macro (bsc#1051510).
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
  (bsc#1051510).
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
  (bsc#1051510).
- ASoC: rt5514: Add the missing register in the readable table
  (bsc#1051510).
- ASoC: rt5514: Eliminate the noise in the ASRC case
  (bsc#1051510).
- ASoC: rt5514: Add the I2S ASRC support (bsc#1051510).
- commit 4eba9c8</changelog>
  <changelog author="wqu@suse.com" date="1538654407">- btrfs: scrub: Don't use inode page cache in
  scrub_handle_errored_block() (follow up for bsc#1108096).
- commit 3f91c84</changelog>
  <changelog author="tiwai@suse.de" date="1538654408">- smsc95xx: Check for Wake-on-LAN modes (bsc#1051510).
- smsc75xx: Check for Wake-on-LAN modes (bsc#1051510).
- r8152: Check for supported Wake-on-LAN Modes (bsc#1051510).
- sr9800: Check for supported Wake-on-LAN modes (bsc#1051510).
- lan78xx: Check for supported Wake-on-LAN modes (bsc#1051510).
- ax88179_178a: Check for supported Wake-on-LAN modes
  (bsc#1051510).
- mac80211: fix pending queue hang due to TX_DROP (bsc#1051510).
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
  (bsc#1051510).
- Input: elantech - enable middle button of touchpad on ThinkPad
  P72 (bsc#1051510).
- regulator: fix crash caused by null driver data (bsc#1051510).
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
  (bsc#1051510).
- intel_th: Fix device removal logic (bsc#1051510).
- NFC: Fix possible memory corruption when handling SHDLC I-Frame
  commands (bsc#1051510).
- platform/x86: alienware-wmi: Correct a memory leak
  (bsc#1051510).
- xhci: Fix use after free for URB cancellation on a reallocated
  endpoint (bsc#1051510).
- mei: ignore not found client in the enumeration (bsc#1051510).
- i2c: i801: Allow ACPI AML access I/O ports not reserved for
  SMBus (bsc#1051510).
- fbdev/via: fix defined but not used warning (bsc#1051510).
- video: goldfishfb: fix memory leak on driver remove
  (bsc#1051510).
- fbdev: Distinguish between interlaced and progressive modes
  (bsc#1051510).
- platform/x86: toshiba_acpi: Fix defined but not used build
  warnings (bsc#1051510).
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
  (bsc#1051510).
- input: rohm_bu21023: switch to i2c_lock_bus(...,
  I2C_LOCK_SEGMENT) (bsc#1051510).
- HID: hid-ntrig: add error handling for sysfs_create_group
  (bsc#1051510).
- mfd: ti_am335x_tscadc: Fix struct clk memory leak (bsc#1051510).
- mmc: sdhci: do not try to use 3.3V signaling if not supported
  (bsc#1051510).
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
  (bsc#1051510).
- parport: sunbpp: fix error return code (bsc#1051510).
- coresight: Handle errors in finding input/output ports
  (bsc#1051510).
- mei: bus: type promotion bug in mei_nfc_if_version()
  (bsc#1051510).
- gpio: pxa: Fix potential NULL dereference (bsc#1051510).
- gpiolib: Mark gpio_suffixes array with __maybe_unused
  (bsc#1051510).
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
  (bsc#1051510).
- crypto: sharah - Unregister correct algorithms for SAHARA 3
  (bsc#1051510).
- crypto: skcipher - Fix -Wstringop-truncation warnings
  (bsc#1051510).
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
  (bsc#1051510).
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 (bsc#1051510).
- mac80211: restrict delayed tailroom needed decrement
  (bsc#1051510).
- wlcore: Add missing PM call for
  wlcore_cmd_wait_for_event_or_timeout() (bsc#1051510).
- commit e266792</changelog>
  <changelog author="mbrugger@suse.com" date="1538654409">- arm64: Update config files. (bsc#1110716)
  Enable ST LPS25H pressure sensor.
- commit 69c6902</changelog>
  <changelog author="jack@suse.cz" date="1538654410">- patches.fixes/x86-memory_failure-Introduce-set-clear-_mce_nospec.patch:
  Fixup compilation breakage on s390 and arm due to missing
  clear_mce_nospec().
- commit faef795</changelog>
</package>
<package pkgid="a2420a12f9c1e60550a4b030b18bb35ef3825eb9947a1bc76d56d8e0560373b5" name="kernel-default" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.22.1"/>
  <changelog author="tiwai@suse.de" date="1539172800">- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell
  XPS 27 7760 (bsc#1051510).
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
  (bsc#1051510).
- crypto: mxs-dcp - Fix wait logic on chan threads (bsc#1051510).
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM
  ioctl (bsc#1051510).
- HID: add support for Apple Magic Keyboards (bsc#1051510).
- gpio: Fix crash due to registration race (bsc#1051510).
- gpiolib-acpi: Register GpioInt ACPI event handlers from a
  late_initcall (bsc#1051510).
- gpio: adp5588: Fix sleep-in-atomic-context bug (bsc#1051510).
- cfg80211: fix a type issue in
  ieee80211_chandef_to_operating_class() (bsc#1051510).
- Revert "gpio: set up initial state from .get_direction()"
  (bsc#1051510).
- gpio: mb86s70: Revert "Return error if requesting an already
  assigned gpio" (bsc#1051510).
- commit 2759d22</changelog>
  <changelog author="mbrugger@suse.com" date="1539172801">- arm64: Update config files.
  Enable SENSORS_RASPBERRYPI_HWMON
- commit 2a83945</changelog>
  <changelog author="mbrugger@suse.com" date="1539172802">- supported.conf: mark raspberrypi-hwmon as supported
- commit af8ddda</changelog>
  <changelog author="tiwai@suse.de" date="1539172803">- HID: hid-saitek: Add device ID for RAT 7 Contagion
  (bsc#1051510).
- mac80211: shorten the IBSS debug messages (bsc#1051510).
- mac80211: don't Tx a deauth frame if the AP forbade Tx
  (bsc#1051510).
- mac80211: Fix station bandwidth setting after channel switch
  (bsc#1051510).
- mac80211: fix a race between restart and CSA flows
  (bsc#1051510).
- mac80211: do not convert to A-MSDU if frag/subframe limited
  (bsc#1051510).
- mac80211: mesh: fix HWMP sequence numbering to follow standard
  (bsc#1051510).
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211_hwsim: require at least one channel (bsc#1051510).
- mac80211: Run TXQ teardown code before de-registering interfaces
  (bsc#1051510).
- hwmon: (adt7475) Make adt7475_read_word() return errors
  (bsc#1051510).
- hwmon: (ina2xx) fix sysfs shunt resistor read access
  (bsc#1051510).
- commit af836cd</changelog>
  <changelog author="tiwai@suse.de" date="1539172804">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- Revert "mwifiex: handle race during mwifiex_usb_disconnect"
  (bsc#1051510).
- media: videobuf-dma-sg: Fix dma_{sync,unmap}_sg() calls
  (bsc#1051510).
- Revert "mwifiex: fix incorrect ht capability problem"
  (bsc#1051510).
- PM / Domains: Fix genpd to deal with drivers returning 1 from
  - &gt;prepare() (bsc#1051510).
- Revert "pinctrl: sunxi: Don't enforce bias disable (for now)"
  (bsc#1051510).
- commit fb6c36a</changelog>
  <changelog author="tiwai@suse.de" date="1539172805">- blacklist.conf: Add blacklist of inapplicable revert commits
  They are either not applicable or requiring more backports that aren't
  suitable for SLE15
- commit 987dd44</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259200">- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk (bsc#1106110)
- commit 273a6bd</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259201">- blacklist.conf: Append 'drm/amd/pp: initialize result to before or'ing in data'
- commit d2edcd9</changelog>
  <changelog author="tiwai@suse.de" date="1539259202">- Disable DRM patches that broke vbox video driver KMP (bsc#1111076)
- commit 23943c6</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259203">- blacklist.conf: Append 'Revert "drm: Use a flexible array member for blob property data"'
- commit ddc67eb</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259204">- Fix Patch-mainline tags to refer to Linux release tag
  It is expected that Patch-mainline tags refer to a release tag
  in the Linux git tree, such as v4.15. Several patches contain a
  Patch-mainline tags that instead refer to a Linux version number,
  such as 4.15. This inconsistency complicates grepping and
  automation.
  871 of 18000 patches are affected by this problem.
- commit 1d81d26</changelog>
  <changelog author="bp@suse.de" date="1539259205">- crypto: ccp - add timeout support in the SEV command
  (bsc#1106838).
- commit 912dad4</changelog>
  <changelog author="tiwai@suse.de" date="1539345600">- Update config files: update forgotten armv7hl configs
- commit 7bae3a6</changelog>
  <changelog author="msuchanek@suse.de" date="1539345601">- powerpc/numa: Skip onlining a offline node in kdump path
  (bsc#1109784).
- commit df87e51</changelog>
  <changelog author="tiwai@suse.de" date="1539345602">- squashfs metadata 2: electric boogaloo (bsc#1051510).
- squashfs: more metadata hardening (bsc#1051510).
- squashfs: be more careful about metadata corruption
  (bsc#1051510).
- commit 9bfac39</changelog>
  <changelog author="hare@suse.de" date="1539345603">- scsi: qla2xxx: Move log messages before issuing command to
  firmware (bsc#1108870).
- scsi: qla2xxx: Fix for double free of SRB structure
  (bsc#1108870).
- scsi: qla2xxx: Fix recursive mailbox timeout (bsc#1108870).
- scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
  (bsc#1108870).
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
  (bsc#1108870).
- scsi: qla2xxx: Fix duplicate switch database entries
  (bsc#1108870).
- scsi: qla2xxx: Fix NVMe Target discovery (bsc#1108870).
- scsi: qla2xxx: Fix NVMe session hang on unload (bsc#1108870).
- scsi: qla2xxx: don't allow negative thresholds (bsc#1108870).
- commit 50fe149</changelog>
  <changelog author="tiwai@suse.de" date="1539345604">- Squashfs: Compute expected length from inode size rather than
  block length (bsc#1051510).
- commit 0c4a663</changelog>
  <changelog author="tiwai@suse.de" date="1539345605">- soreuseport: initialise timewait reuseport field (bsc#1051510).
- commit bda2dcc</changelog>
  <changelog author="tiwai@suse.de" date="1539345606">- rpc_pipefs: fix double-dput() (bsc#1051510).
- commit 1a15e26</changelog>
  <changelog author="hare@suse.de" date="1539345607">- scsi: qla2xxx: Return switch command on a timeout (bsc#1108870).
- commit 8e38f2a</changelog>
</package>
<package pkgid="2784804d68ae23da675b07638a3c8f7a1564c02d6db492d6f22ea790a3acb875" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.22.1"/>
  <changelog author="tiwai@suse.de" date="1539172800">- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell
  XPS 27 7760 (bsc#1051510).
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
  (bsc#1051510).
- crypto: mxs-dcp - Fix wait logic on chan threads (bsc#1051510).
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM
  ioctl (bsc#1051510).
- HID: add support for Apple Magic Keyboards (bsc#1051510).
- gpio: Fix crash due to registration race (bsc#1051510).
- gpiolib-acpi: Register GpioInt ACPI event handlers from a
  late_initcall (bsc#1051510).
- gpio: adp5588: Fix sleep-in-atomic-context bug (bsc#1051510).
- cfg80211: fix a type issue in
  ieee80211_chandef_to_operating_class() (bsc#1051510).
- Revert "gpio: set up initial state from .get_direction()"
  (bsc#1051510).
- gpio: mb86s70: Revert "Return error if requesting an already
  assigned gpio" (bsc#1051510).
- commit 2759d22</changelog>
  <changelog author="mbrugger@suse.com" date="1539172801">- arm64: Update config files.
  Enable SENSORS_RASPBERRYPI_HWMON
- commit 2a83945</changelog>
  <changelog author="mbrugger@suse.com" date="1539172802">- supported.conf: mark raspberrypi-hwmon as supported
- commit af8ddda</changelog>
  <changelog author="tiwai@suse.de" date="1539172803">- HID: hid-saitek: Add device ID for RAT 7 Contagion
  (bsc#1051510).
- mac80211: shorten the IBSS debug messages (bsc#1051510).
- mac80211: don't Tx a deauth frame if the AP forbade Tx
  (bsc#1051510).
- mac80211: Fix station bandwidth setting after channel switch
  (bsc#1051510).
- mac80211: fix a race between restart and CSA flows
  (bsc#1051510).
- mac80211: do not convert to A-MSDU if frag/subframe limited
  (bsc#1051510).
- mac80211: mesh: fix HWMP sequence numbering to follow standard
  (bsc#1051510).
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211_hwsim: require at least one channel (bsc#1051510).
- mac80211: Run TXQ teardown code before de-registering interfaces
  (bsc#1051510).
- hwmon: (adt7475) Make adt7475_read_word() return errors
  (bsc#1051510).
- hwmon: (ina2xx) fix sysfs shunt resistor read access
  (bsc#1051510).
- commit af836cd</changelog>
  <changelog author="tiwai@suse.de" date="1539172804">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- Revert "mwifiex: handle race during mwifiex_usb_disconnect"
  (bsc#1051510).
- media: videobuf-dma-sg: Fix dma_{sync,unmap}_sg() calls
  (bsc#1051510).
- Revert "mwifiex: fix incorrect ht capability problem"
  (bsc#1051510).
- PM / Domains: Fix genpd to deal with drivers returning 1 from
  - &gt;prepare() (bsc#1051510).
- Revert "pinctrl: sunxi: Don't enforce bias disable (for now)"
  (bsc#1051510).
- commit fb6c36a</changelog>
  <changelog author="tiwai@suse.de" date="1539172805">- blacklist.conf: Add blacklist of inapplicable revert commits
  They are either not applicable or requiring more backports that aren't
  suitable for SLE15
- commit 987dd44</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259200">- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk (bsc#1106110)
- commit 273a6bd</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259201">- blacklist.conf: Append 'drm/amd/pp: initialize result to before or'ing in data'
- commit d2edcd9</changelog>
  <changelog author="tiwai@suse.de" date="1539259202">- Disable DRM patches that broke vbox video driver KMP (bsc#1111076)
- commit 23943c6</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259203">- blacklist.conf: Append 'Revert "drm: Use a flexible array member for blob property data"'
- commit ddc67eb</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259204">- Fix Patch-mainline tags to refer to Linux release tag
  It is expected that Patch-mainline tags refer to a release tag
  in the Linux git tree, such as v4.15. Several patches contain a
  Patch-mainline tags that instead refer to a Linux version number,
  such as 4.15. This inconsistency complicates grepping and
  automation.
  871 of 18000 patches are affected by this problem.
- commit 1d81d26</changelog>
  <changelog author="bp@suse.de" date="1539259205">- crypto: ccp - add timeout support in the SEV command
  (bsc#1106838).
- commit 912dad4</changelog>
  <changelog author="tiwai@suse.de" date="1539345600">- Update config files: update forgotten armv7hl configs
- commit 7bae3a6</changelog>
  <changelog author="msuchanek@suse.de" date="1539345601">- powerpc/numa: Skip onlining a offline node in kdump path
  (bsc#1109784).
- commit df87e51</changelog>
  <changelog author="tiwai@suse.de" date="1539345602">- squashfs metadata 2: electric boogaloo (bsc#1051510).
- squashfs: more metadata hardening (bsc#1051510).
- squashfs: be more careful about metadata corruption
  (bsc#1051510).
- commit 9bfac39</changelog>
  <changelog author="hare@suse.de" date="1539345603">- scsi: qla2xxx: Move log messages before issuing command to
  firmware (bsc#1108870).
- scsi: qla2xxx: Fix for double free of SRB structure
  (bsc#1108870).
- scsi: qla2xxx: Fix recursive mailbox timeout (bsc#1108870).
- scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
  (bsc#1108870).
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
  (bsc#1108870).
- scsi: qla2xxx: Fix duplicate switch database entries
  (bsc#1108870).
- scsi: qla2xxx: Fix NVMe Target discovery (bsc#1108870).
- scsi: qla2xxx: Fix NVMe session hang on unload (bsc#1108870).
- scsi: qla2xxx: don't allow negative thresholds (bsc#1108870).
- commit 50fe149</changelog>
  <changelog author="tiwai@suse.de" date="1539345604">- Squashfs: Compute expected length from inode size rather than
  block length (bsc#1051510).
- commit 0c4a663</changelog>
  <changelog author="tiwai@suse.de" date="1539345605">- soreuseport: initialise timewait reuseport field (bsc#1051510).
- commit bda2dcc</changelog>
  <changelog author="tiwai@suse.de" date="1539345606">- rpc_pipefs: fix double-dput() (bsc#1051510).
- commit 1a15e26</changelog>
  <changelog author="hare@suse.de" date="1539345607">- scsi: qla2xxx: Return switch command on a timeout (bsc#1108870).
- commit 8e38f2a</changelog>
</package>
<package pkgid="47ea298ff223c9c4a50f44dacafc80a48cb4b5c74dcd5b2d489c2a0a12b90efb" name="kernel-default" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.25.1"/>
  <changelog author="tiwai@suse.de" date="1540814400">- NFC: nfcmrvl_uart: fix OF child-node lookup (bsc#1051510).
- kernfs: update comment about kernfs_path() return value
  (bsc#1051510).
- usbip: tools: fix atoi() on non-null terminated string
  (bsc#1051510).
- USB: serial: cypress_m8: fix interrupt-out transfer length
  (bsc#1051510).
- usb: chipidea: Prevent unbalanced IRQ disable (bsc#1051510).
- commit 6c9d1e7</changelog>
  <changelog author="tiwai@suse.de" date="1540814401">- blacklist.conf: Add ASoC and USB entries that may break kABI
- commit 199a072</changelog>
  <changelog author="tiwai@suse.de" date="1540814402">- usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation
  (bsc#1051510).
- usb: gadget: fsl_udc_core: check allocation return value and
  cleanup on failure (bsc#1051510).
- commit c1b7b66</changelog>
  <changelog author="tiwai@suse.de" date="1540814403">- Refresh patch tag of upstreamed patches and move to sorted section
- commit a966b56</changelog>
  <changelog author="ohering@suse.de" date="1540900800">- move changes without Git-commit out of sorted section
- commit cbf049e</changelog>
  <changelog author="jslaby@suse.cz" date="1540900801">- random: rate limit unseeded randomness warnings (git-fixes).
- commit be52b92</changelog>
  <changelog author="jslaby@suse.cz" date="1540900802">- blacklist.conf: add a kasan fix
- commit c85e2d1</changelog>
  <changelog author="jdelvare@suse.de" date="1540900803">- Add reference to bsc#1104124 to
  patches.fixes/fs-aio-fix-the-increment-of-aio-nr-and-counting-agai.patch
- commit f60e64b</changelog>
  <changelog author="jslaby@suse.cz" date="1540900804">- tools build: fix # escaping in .cmd files for future Make
  (git-fixes).
- Kbuild: fix # escaping in .cmd files for future Make
  (git-fixes).
- commit 8f11ec3</changelog>
  <changelog author="tiwai@suse.de" date="1540900805">- drm/i915/dp: Link train Fallback on eDP only if fallback link
  BW can fit panel's native mode (bsc#1051510).
- drm/i915: Restore vblank interrupts earlier (bsc#1051510).
- commit daf120f</changelog>
  <changelog author="tiwai@suse.de" date="1540900806">- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
  (bsc#1051510).
- media: cx231xx: fix potential sign-extension overflow on large
  shift (bsc#1051510).
- media: pci: cx23885: handle adding to list failure
  (bsc#1051510).
- media: vsp1: Fix YCbCr planar formats pitch calculation
  (bsc#1051510).
- media: tvp5150: fix switch exit in set control handler
  (bsc#1051510).
- media: tvp5150: fix width alignment during set_selection()
  (bsc#1051510).
- media: em28xx: fix input name for Terratec AV 350 (bsc#1051510).
- media: em28xx: use a default format if TRY_FMT fails
  (bsc#1051510).
- media: tvp5150: avoid going past array on v4l2_querymenu()
  (bsc#1051510).
- media: dvb: fix compat ioctl translation (bsc#1051510).
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
  (bsc#1051510).
- commit 0831c5e</changelog>
  <changelog author="tiwai@suse.de" date="1540900807">- soc/tegra: pmc: Fix child-node lookup (bsc#1051510).
- serial: 8250: Fix clearing FIFOs in RS485 mode again
  (bsc#1051510).
- staging: comedi: ni_mio_common: protect register write overflow
  (bsc#1051510).
- iio: adc: at91: fix wrong channel number in triggered buffer
  mode (bsc#1051510).
- iio: adc: at91: fix acking DRDY irq on simple conversions
  (bsc#1051510).
- iio: adc: imx25-gcq: Fix leak of device_node in
  mx25_gcq_setup_cfgs() (bsc#1051510).
- commit 9f4f0cc</changelog>
  <changelog author="jthumshirn@suse.de" date="1540900808">- Refresh
  patches.fixes/0001-drm-amdgpu-powerplay-fix-missing-break-in-switch-sta.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Do-not-carry-error-code-in-HiBMC.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Don-t-overwrite-fb-helper-surfac.patch.
- Refresh
  patches.fixes/0001-drm-i915-audio-Hook-up-component-bindings-even-if-di.patch.
- Refresh
  patches.fixes/0001-drm-i915-gen9-Fix-initial-readout-for-Y-tiled-frameb.patch.
- Refresh
  patches.fixes/0001-drm-sti-do-not-remove-the-drm_bridge-that-was-never-.patch.
- Refresh
  patches.fixes/0001-drm-virtio-fix-bounds-check-in-virtio_gpu_cmd_get_ca.patch.
- commit 652fab5</changelog>
  <changelog author="tiwai@suse.de" date="1540987200">- drm/nouveau: Don't disable polling in fallback mode
  (bsc#1103356).
- Delete
  patches.suse/Revert-drm-nouveau-drm-therm-fan-add-a-fallback-if-n.
- commit aa0c431</changelog>
  <changelog author="tzimmermann@suse.de" date="1540987201">- Fix Patch-mainline for "drm/amdgpu: update tmr mc address"
  The Patch-mainline tag was incorrect. References is being updated as well.
- commit ce8535e</changelog>
  <changelog author="tiwai@suse.de" date="1540987202">- Workaround for mysterious NVMe breakage with i915 CFL
  (bsc#1111040).
- commit 0fa5877</changelog>
  <changelog author="jthumshirn@suse.de" date="1540987203">- libnvdimm, label: Fix sparse warning (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Use namespace index data to reduce number of label reads
  needed (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Split label init out from the logic for getting config
  data (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Remove empty if statement (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Clarify comment in sizeof_namespace_index (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Sanity check labeloff (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- libnvdimm, dimm: Maximize label transfer size (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7
  (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- commit 5a4eeb4</changelog>
  <changelog author="jlee@suse.com" date="1540987204">- x86/boot/KASLR: Work around firmware bugs by excluding
  EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR's choice
  (bnc#1112878).
- commit d45cd78</changelog>
  <changelog author="tiwai@suse.de" date="1540987205">- blacklist.conf: Add a few wifi driver entries that can't be applied
- commit 662fc68</changelog>
  <changelog author="tiwai@suse.de" date="1540987206">- spi/bcm63xx-hsspi: keep pll clk enabled (bsc#1051510).
- spi: sh-msiof: fix deferred probing (bsc#1051510).
- spi: bcm-qspi: switch back to reading flash using smaller chunks
  (bsc#1051510).
- commit f773242</changelog>
</package>
<package pkgid="d07ee6f0413d4c9ecc1c6ef01c05f16d63839bdcfa18d1d1c9e6bfad5c6616dd" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.25.1"/>
  <changelog author="tiwai@suse.de" date="1540814400">- NFC: nfcmrvl_uart: fix OF child-node lookup (bsc#1051510).
- kernfs: update comment about kernfs_path() return value
  (bsc#1051510).
- usbip: tools: fix atoi() on non-null terminated string
  (bsc#1051510).
- USB: serial: cypress_m8: fix interrupt-out transfer length
  (bsc#1051510).
- usb: chipidea: Prevent unbalanced IRQ disable (bsc#1051510).
- commit 6c9d1e7</changelog>
  <changelog author="tiwai@suse.de" date="1540814401">- blacklist.conf: Add ASoC and USB entries that may break kABI
- commit 199a072</changelog>
  <changelog author="tiwai@suse.de" date="1540814402">- usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation
  (bsc#1051510).
- usb: gadget: fsl_udc_core: check allocation return value and
  cleanup on failure (bsc#1051510).
- commit c1b7b66</changelog>
  <changelog author="tiwai@suse.de" date="1540814403">- Refresh patch tag of upstreamed patches and move to sorted section
- commit a966b56</changelog>
  <changelog author="ohering@suse.de" date="1540900800">- move changes without Git-commit out of sorted section
- commit cbf049e</changelog>
  <changelog author="jslaby@suse.cz" date="1540900801">- random: rate limit unseeded randomness warnings (git-fixes).
- commit be52b92</changelog>
  <changelog author="jslaby@suse.cz" date="1540900802">- blacklist.conf: add a kasan fix
- commit c85e2d1</changelog>
  <changelog author="jdelvare@suse.de" date="1540900803">- Add reference to bsc#1104124 to
  patches.fixes/fs-aio-fix-the-increment-of-aio-nr-and-counting-agai.patch
- commit f60e64b</changelog>
  <changelog author="jslaby@suse.cz" date="1540900804">- tools build: fix # escaping in .cmd files for future Make
  (git-fixes).
- Kbuild: fix # escaping in .cmd files for future Make
  (git-fixes).
- commit 8f11ec3</changelog>
  <changelog author="tiwai@suse.de" date="1540900805">- drm/i915/dp: Link train Fallback on eDP only if fallback link
  BW can fit panel's native mode (bsc#1051510).
- drm/i915: Restore vblank interrupts earlier (bsc#1051510).
- commit daf120f</changelog>
  <changelog author="tiwai@suse.de" date="1540900806">- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
  (bsc#1051510).
- media: cx231xx: fix potential sign-extension overflow on large
  shift (bsc#1051510).
- media: pci: cx23885: handle adding to list failure
  (bsc#1051510).
- media: vsp1: Fix YCbCr planar formats pitch calculation
  (bsc#1051510).
- media: tvp5150: fix switch exit in set control handler
  (bsc#1051510).
- media: tvp5150: fix width alignment during set_selection()
  (bsc#1051510).
- media: em28xx: fix input name for Terratec AV 350 (bsc#1051510).
- media: em28xx: use a default format if TRY_FMT fails
  (bsc#1051510).
- media: tvp5150: avoid going past array on v4l2_querymenu()
  (bsc#1051510).
- media: dvb: fix compat ioctl translation (bsc#1051510).
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
  (bsc#1051510).
- commit 0831c5e</changelog>
  <changelog author="tiwai@suse.de" date="1540900807">- soc/tegra: pmc: Fix child-node lookup (bsc#1051510).
- serial: 8250: Fix clearing FIFOs in RS485 mode again
  (bsc#1051510).
- staging: comedi: ni_mio_common: protect register write overflow
  (bsc#1051510).
- iio: adc: at91: fix wrong channel number in triggered buffer
  mode (bsc#1051510).
- iio: adc: at91: fix acking DRDY irq on simple conversions
  (bsc#1051510).
- iio: adc: imx25-gcq: Fix leak of device_node in
  mx25_gcq_setup_cfgs() (bsc#1051510).
- commit 9f4f0cc</changelog>
  <changelog author="jthumshirn@suse.de" date="1540900808">- Refresh
  patches.fixes/0001-drm-amdgpu-powerplay-fix-missing-break-in-switch-sta.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Do-not-carry-error-code-in-HiBMC.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Don-t-overwrite-fb-helper-surfac.patch.
- Refresh
  patches.fixes/0001-drm-i915-audio-Hook-up-component-bindings-even-if-di.patch.
- Refresh
  patches.fixes/0001-drm-i915-gen9-Fix-initial-readout-for-Y-tiled-frameb.patch.
- Refresh
  patches.fixes/0001-drm-sti-do-not-remove-the-drm_bridge-that-was-never-.patch.
- Refresh
  patches.fixes/0001-drm-virtio-fix-bounds-check-in-virtio_gpu_cmd_get_ca.patch.
- commit 652fab5</changelog>
  <changelog author="tiwai@suse.de" date="1540987200">- drm/nouveau: Don't disable polling in fallback mode
  (bsc#1103356).
- Delete
  patches.suse/Revert-drm-nouveau-drm-therm-fan-add-a-fallback-if-n.
- commit aa0c431</changelog>
  <changelog author="tzimmermann@suse.de" date="1540987201">- Fix Patch-mainline for "drm/amdgpu: update tmr mc address"
  The Patch-mainline tag was incorrect. References is being updated as well.
- commit ce8535e</changelog>
  <changelog author="tiwai@suse.de" date="1540987202">- Workaround for mysterious NVMe breakage with i915 CFL
  (bsc#1111040).
- commit 0fa5877</changelog>
  <changelog author="jthumshirn@suse.de" date="1540987203">- libnvdimm, label: Fix sparse warning (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Use namespace index data to reduce number of label reads
  needed (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Split label init out from the logic for getting config
  data (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Remove empty if statement (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Clarify comment in sizeof_namespace_index (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Sanity check labeloff (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- libnvdimm, dimm: Maximize label transfer size (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7
  (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- commit 5a4eeb4</changelog>
  <changelog author="jlee@suse.com" date="1540987204">- x86/boot/KASLR: Work around firmware bugs by excluding
  EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR's choice
  (bnc#1112878).
- commit d45cd78</changelog>
  <changelog author="tiwai@suse.de" date="1540987205">- blacklist.conf: Add a few wifi driver entries that can't be applied
- commit 662fc68</changelog>
  <changelog author="tiwai@suse.de" date="1540987206">- spi/bcm63xx-hsspi: keep pll clk enabled (bsc#1051510).
- spi: sh-msiof: fix deferred probing (bsc#1051510).
- spi: bcm-qspi: switch back to reading flash using smaller chunks
  (bsc#1051510).
- commit f773242</changelog>
</package>
<package pkgid="20dd0eb304d157b225666014836e942ebd8b1a6737b7eca19b671c22fcc4f201" name="kernel-default" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="052867e5524f536659ead940bb19ab07b5bd9500a96c13fdd9855c68522900ad" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="1a1e119963eb150d34a886375c8753a9724673563a0ed12dbaec34778e3a4116" name="kernel-default" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="73bd7fd48f1631bf74c8d331ee45907a19cffd931337b08bf9aa90927a3e9b93" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="fb99ffc090c829ebbd3affadd76b3b084361420781cb7921ff13cd43a2890d9b" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="bbdf08dbee201cb2dee7d91537c500b9f072b989851936f65d547aae92a867aa" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="a8f01cae18af7a8faef5ee3688f7a47cf32ff591e0429bed65de89c79ce075ad" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="c8cb2d28df0b6614101b4a802d0a86bbdee02c256bc134e29b38a429186ae343" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.19.2"/>
  <changelog author="fdmanana@suse.com" date="1538568000">- Btrfs: fix fsync after hole punching when using no-holes feature
  (bsc#1110642).
- commit 3f19b40</changelog>
  <changelog author="fdmanana@suse.com" date="1538568001">- Btrfs: fix loss of prealloc extents past i_size after fsync
  log replay (bsc#1110643).
- commit 974e057</changelog>
  <changelog author="fdmanana@suse.com" date="1538568002">- Btrfs: fix duplicate extents after fsync of file with prealloc
  extents (bsc#1110644).
- commit c4ec603</changelog>
  <changelog author="fdmanana@suse.com" date="1538568003">- Btrfs: fix return value on rename exchange failure
  (bsc#1110645).
- commit 532729c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568004">- Btrfs: sync log after logging new name (bsc#1110646).
- commit 7260d6b</changelog>
  <changelog author="fdmanana@suse.com" date="1538568005">- Btrfs: fix data corruption when deduplicating between different
  files (bsc#1110647).
- commit 669848c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568006">- btrfs: Remove unused parameters from various functions
  (bsc#1110649).
- commit c97c657</changelog>
  <changelog author="fdmanana@suse.com" date="1538568007">- Btrfs: fix send failure when root has deleted files still open
  (bsc#1110650).
- commit f52554d</changelog>
  <changelog author="jslaby@suse.cz" date="1538568008">- watchdog: Mark watchdog touch functions as notrace (git-fixes).
- commit 8b53193</changelog>
  <changelog author="neilb@suse.com" date="1538654400">- nfs/filelayout: fix oops when freeing filelayout segment
  (bsc#1105190).
- NFS/filelayout: Fix racy setting of fl-&gt;dsaddr in
  filelayout_check_deviceid() (bsc#1105190).
- commit d6d0fab</changelog>
  <changelog author="neilb@suse.com" date="1538654401">- VFS: don't test owner for NFS in set_posix_acl() (bsc#1103405).
- commit 36f977a</changelog>
  <changelog author="tiwai@suse.de" date="1538654402">- README.BRANCH: SLE15-SP1 branch maintainer changes
  Add ptesarik as co-maintainer, keep tiwai as the primary maintainer
- commit 83aea11</changelog>
  <changelog author="wqu@suse.com" date="1538654403">- btrfs: tests/qgroup: Fix wrong tree backref level (bsc#1107928).
- commit a5e154c</changelog>
  <changelog author="wqu@suse.com" date="1538654404">- btrfs: check-integrity: Fix NULL pointer dereference for
  degraded mount (bsc#1107947).
- commit 77b2277</changelog>
  <changelog author="wqu@suse.com" date="1538654405">- btrfs: scrub: Don't use inode pages for device replace (follow
  up for bsc#1108096).
- commit c865775</changelog>
  <changelog author="tiwai@suse.de" date="1538654406">- ASoC: cs4265: fix MMTLR Data switch control (bsc#1051510).
- ALSA: fireworks: fix memory leak of response buffer at error
  path (bsc#1051510).
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix
  I/O at error path (bsc#1051510).
- ALSA: emu10k1: fix possible info leak to userspace on
  SNDRV_EMU10K1_IOCTL_INFO (bsc#1051510).
- ALSA: bebob: use address returned by kmalloc() instead of
  kernel stack for streaming DMA mapping (bsc#1051510).
- ASoC: rt5514: Fix the issue of the delay volume applied
  (bsc#1051510).
- ASoC: dapm: Fix potential DAI widget pointer deref when linking
  DAIs (bsc#1051510).
- ALSA: msnd: Fix the default sample sizes (bsc#1051510).
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE()
  macro (bsc#1051510).
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
  (bsc#1051510).
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
  (bsc#1051510).
- ASoC: rt5514: Add the missing register in the readable table
  (bsc#1051510).
- ASoC: rt5514: Eliminate the noise in the ASRC case
  (bsc#1051510).
- ASoC: rt5514: Add the I2S ASRC support (bsc#1051510).
- commit 4eba9c8</changelog>
  <changelog author="wqu@suse.com" date="1538654407">- btrfs: scrub: Don't use inode page cache in
  scrub_handle_errored_block() (follow up for bsc#1108096).
- commit 3f91c84</changelog>
  <changelog author="tiwai@suse.de" date="1538654408">- smsc95xx: Check for Wake-on-LAN modes (bsc#1051510).
- smsc75xx: Check for Wake-on-LAN modes (bsc#1051510).
- r8152: Check for supported Wake-on-LAN Modes (bsc#1051510).
- sr9800: Check for supported Wake-on-LAN modes (bsc#1051510).
- lan78xx: Check for supported Wake-on-LAN modes (bsc#1051510).
- ax88179_178a: Check for supported Wake-on-LAN modes
  (bsc#1051510).
- mac80211: fix pending queue hang due to TX_DROP (bsc#1051510).
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
  (bsc#1051510).
- Input: elantech - enable middle button of touchpad on ThinkPad
  P72 (bsc#1051510).
- regulator: fix crash caused by null driver data (bsc#1051510).
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
  (bsc#1051510).
- intel_th: Fix device removal logic (bsc#1051510).
- NFC: Fix possible memory corruption when handling SHDLC I-Frame
  commands (bsc#1051510).
- platform/x86: alienware-wmi: Correct a memory leak
  (bsc#1051510).
- xhci: Fix use after free for URB cancellation on a reallocated
  endpoint (bsc#1051510).
- mei: ignore not found client in the enumeration (bsc#1051510).
- i2c: i801: Allow ACPI AML access I/O ports not reserved for
  SMBus (bsc#1051510).
- fbdev/via: fix defined but not used warning (bsc#1051510).
- video: goldfishfb: fix memory leak on driver remove
  (bsc#1051510).
- fbdev: Distinguish between interlaced and progressive modes
  (bsc#1051510).
- platform/x86: toshiba_acpi: Fix defined but not used build
  warnings (bsc#1051510).
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
  (bsc#1051510).
- input: rohm_bu21023: switch to i2c_lock_bus(...,
  I2C_LOCK_SEGMENT) (bsc#1051510).
- HID: hid-ntrig: add error handling for sysfs_create_group
  (bsc#1051510).
- mfd: ti_am335x_tscadc: Fix struct clk memory leak (bsc#1051510).
- mmc: sdhci: do not try to use 3.3V signaling if not supported
  (bsc#1051510).
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
  (bsc#1051510).
- parport: sunbpp: fix error return code (bsc#1051510).
- coresight: Handle errors in finding input/output ports
  (bsc#1051510).
- mei: bus: type promotion bug in mei_nfc_if_version()
  (bsc#1051510).
- gpio: pxa: Fix potential NULL dereference (bsc#1051510).
- gpiolib: Mark gpio_suffixes array with __maybe_unused
  (bsc#1051510).
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
  (bsc#1051510).
- crypto: sharah - Unregister correct algorithms for SAHARA 3
  (bsc#1051510).
- crypto: skcipher - Fix -Wstringop-truncation warnings
  (bsc#1051510).
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
  (bsc#1051510).
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 (bsc#1051510).
- mac80211: restrict delayed tailroom needed decrement
  (bsc#1051510).
- wlcore: Add missing PM call for
  wlcore_cmd_wait_for_event_or_timeout() (bsc#1051510).
- commit e266792</changelog>
  <changelog author="mbrugger@suse.com" date="1538654409">- arm64: Update config files. (bsc#1110716)
  Enable ST LPS25H pressure sensor.
- commit 69c6902</changelog>
  <changelog author="jack@suse.cz" date="1538654410">- patches.fixes/x86-memory_failure-Introduce-set-clear-_mce_nospec.patch:
  Fixup compilation breakage on s390 and arm due to missing
  clear_mce_nospec().
- commit faef795</changelog>
</package>
<package pkgid="23febda6acd67a4046b17ea11433571cf7c694cd9c6b65865b9186ca25c966f2" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.22.1"/>
  <changelog author="tiwai@suse.de" date="1539172800">- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell
  XPS 27 7760 (bsc#1051510).
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
  (bsc#1051510).
- crypto: mxs-dcp - Fix wait logic on chan threads (bsc#1051510).
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM
  ioctl (bsc#1051510).
- HID: add support for Apple Magic Keyboards (bsc#1051510).
- gpio: Fix crash due to registration race (bsc#1051510).
- gpiolib-acpi: Register GpioInt ACPI event handlers from a
  late_initcall (bsc#1051510).
- gpio: adp5588: Fix sleep-in-atomic-context bug (bsc#1051510).
- cfg80211: fix a type issue in
  ieee80211_chandef_to_operating_class() (bsc#1051510).
- Revert "gpio: set up initial state from .get_direction()"
  (bsc#1051510).
- gpio: mb86s70: Revert "Return error if requesting an already
  assigned gpio" (bsc#1051510).
- commit 2759d22</changelog>
  <changelog author="mbrugger@suse.com" date="1539172801">- arm64: Update config files.
  Enable SENSORS_RASPBERRYPI_HWMON
- commit 2a83945</changelog>
  <changelog author="mbrugger@suse.com" date="1539172802">- supported.conf: mark raspberrypi-hwmon as supported
- commit af8ddda</changelog>
  <changelog author="tiwai@suse.de" date="1539172803">- HID: hid-saitek: Add device ID for RAT 7 Contagion
  (bsc#1051510).
- mac80211: shorten the IBSS debug messages (bsc#1051510).
- mac80211: don't Tx a deauth frame if the AP forbade Tx
  (bsc#1051510).
- mac80211: Fix station bandwidth setting after channel switch
  (bsc#1051510).
- mac80211: fix a race between restart and CSA flows
  (bsc#1051510).
- mac80211: do not convert to A-MSDU if frag/subframe limited
  (bsc#1051510).
- mac80211: mesh: fix HWMP sequence numbering to follow standard
  (bsc#1051510).
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211_hwsim: require at least one channel (bsc#1051510).
- mac80211: Run TXQ teardown code before de-registering interfaces
  (bsc#1051510).
- hwmon: (adt7475) Make adt7475_read_word() return errors
  (bsc#1051510).
- hwmon: (ina2xx) fix sysfs shunt resistor read access
  (bsc#1051510).
- commit af836cd</changelog>
  <changelog author="tiwai@suse.de" date="1539172804">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- Revert "mwifiex: handle race during mwifiex_usb_disconnect"
  (bsc#1051510).
- media: videobuf-dma-sg: Fix dma_{sync,unmap}_sg() calls
  (bsc#1051510).
- Revert "mwifiex: fix incorrect ht capability problem"
  (bsc#1051510).
- PM / Domains: Fix genpd to deal with drivers returning 1 from
  - &gt;prepare() (bsc#1051510).
- Revert "pinctrl: sunxi: Don't enforce bias disable (for now)"
  (bsc#1051510).
- commit fb6c36a</changelog>
  <changelog author="tiwai@suse.de" date="1539172805">- blacklist.conf: Add blacklist of inapplicable revert commits
  They are either not applicable or requiring more backports that aren't
  suitable for SLE15
- commit 987dd44</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259200">- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk (bsc#1106110)
- commit 273a6bd</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259201">- blacklist.conf: Append 'drm/amd/pp: initialize result to before or'ing in data'
- commit d2edcd9</changelog>
  <changelog author="tiwai@suse.de" date="1539259202">- Disable DRM patches that broke vbox video driver KMP (bsc#1111076)
- commit 23943c6</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259203">- blacklist.conf: Append 'Revert "drm: Use a flexible array member for blob property data"'
- commit ddc67eb</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259204">- Fix Patch-mainline tags to refer to Linux release tag
  It is expected that Patch-mainline tags refer to a release tag
  in the Linux git tree, such as v4.15. Several patches contain a
  Patch-mainline tags that instead refer to a Linux version number,
  such as 4.15. This inconsistency complicates grepping and
  automation.
  871 of 18000 patches are affected by this problem.
- commit 1d81d26</changelog>
  <changelog author="bp@suse.de" date="1539259205">- crypto: ccp - add timeout support in the SEV command
  (bsc#1106838).
- commit 912dad4</changelog>
  <changelog author="tiwai@suse.de" date="1539345600">- Update config files: update forgotten armv7hl configs
- commit 7bae3a6</changelog>
  <changelog author="msuchanek@suse.de" date="1539345601">- powerpc/numa: Skip onlining a offline node in kdump path
  (bsc#1109784).
- commit df87e51</changelog>
  <changelog author="tiwai@suse.de" date="1539345602">- squashfs metadata 2: electric boogaloo (bsc#1051510).
- squashfs: more metadata hardening (bsc#1051510).
- squashfs: be more careful about metadata corruption
  (bsc#1051510).
- commit 9bfac39</changelog>
  <changelog author="hare@suse.de" date="1539345603">- scsi: qla2xxx: Move log messages before issuing command to
  firmware (bsc#1108870).
- scsi: qla2xxx: Fix for double free of SRB structure
  (bsc#1108870).
- scsi: qla2xxx: Fix recursive mailbox timeout (bsc#1108870).
- scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
  (bsc#1108870).
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
  (bsc#1108870).
- scsi: qla2xxx: Fix duplicate switch database entries
  (bsc#1108870).
- scsi: qla2xxx: Fix NVMe Target discovery (bsc#1108870).
- scsi: qla2xxx: Fix NVMe session hang on unload (bsc#1108870).
- scsi: qla2xxx: don't allow negative thresholds (bsc#1108870).
- commit 50fe149</changelog>
  <changelog author="tiwai@suse.de" date="1539345604">- Squashfs: Compute expected length from inode size rather than
  block length (bsc#1051510).
- commit 0c4a663</changelog>
  <changelog author="tiwai@suse.de" date="1539345605">- soreuseport: initialise timewait reuseport field (bsc#1051510).
- commit bda2dcc</changelog>
  <changelog author="tiwai@suse.de" date="1539345606">- rpc_pipefs: fix double-dput() (bsc#1051510).
- commit 1a15e26</changelog>
  <changelog author="hare@suse.de" date="1539345607">- scsi: qla2xxx: Return switch command on a timeout (bsc#1108870).
- commit 8e38f2a</changelog>
</package>
<package pkgid="71add071692bf6cae8b5183ffad62284592841dcc9cb50346ae3285d874a1b5f" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.25.1"/>
  <changelog author="tiwai@suse.de" date="1540814400">- NFC: nfcmrvl_uart: fix OF child-node lookup (bsc#1051510).
- kernfs: update comment about kernfs_path() return value
  (bsc#1051510).
- usbip: tools: fix atoi() on non-null terminated string
  (bsc#1051510).
- USB: serial: cypress_m8: fix interrupt-out transfer length
  (bsc#1051510).
- usb: chipidea: Prevent unbalanced IRQ disable (bsc#1051510).
- commit 6c9d1e7</changelog>
  <changelog author="tiwai@suse.de" date="1540814401">- blacklist.conf: Add ASoC and USB entries that may break kABI
- commit 199a072</changelog>
  <changelog author="tiwai@suse.de" date="1540814402">- usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation
  (bsc#1051510).
- usb: gadget: fsl_udc_core: check allocation return value and
  cleanup on failure (bsc#1051510).
- commit c1b7b66</changelog>
  <changelog author="tiwai@suse.de" date="1540814403">- Refresh patch tag of upstreamed patches and move to sorted section
- commit a966b56</changelog>
  <changelog author="ohering@suse.de" date="1540900800">- move changes without Git-commit out of sorted section
- commit cbf049e</changelog>
  <changelog author="jslaby@suse.cz" date="1540900801">- random: rate limit unseeded randomness warnings (git-fixes).
- commit be52b92</changelog>
  <changelog author="jslaby@suse.cz" date="1540900802">- blacklist.conf: add a kasan fix
- commit c85e2d1</changelog>
  <changelog author="jdelvare@suse.de" date="1540900803">- Add reference to bsc#1104124 to
  patches.fixes/fs-aio-fix-the-increment-of-aio-nr-and-counting-agai.patch
- commit f60e64b</changelog>
  <changelog author="jslaby@suse.cz" date="1540900804">- tools build: fix # escaping in .cmd files for future Make
  (git-fixes).
- Kbuild: fix # escaping in .cmd files for future Make
  (git-fixes).
- commit 8f11ec3</changelog>
  <changelog author="tiwai@suse.de" date="1540900805">- drm/i915/dp: Link train Fallback on eDP only if fallback link
  BW can fit panel's native mode (bsc#1051510).
- drm/i915: Restore vblank interrupts earlier (bsc#1051510).
- commit daf120f</changelog>
  <changelog author="tiwai@suse.de" date="1540900806">- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
  (bsc#1051510).
- media: cx231xx: fix potential sign-extension overflow on large
  shift (bsc#1051510).
- media: pci: cx23885: handle adding to list failure
  (bsc#1051510).
- media: vsp1: Fix YCbCr planar formats pitch calculation
  (bsc#1051510).
- media: tvp5150: fix switch exit in set control handler
  (bsc#1051510).
- media: tvp5150: fix width alignment during set_selection()
  (bsc#1051510).
- media: em28xx: fix input name for Terratec AV 350 (bsc#1051510).
- media: em28xx: use a default format if TRY_FMT fails
  (bsc#1051510).
- media: tvp5150: avoid going past array on v4l2_querymenu()
  (bsc#1051510).
- media: dvb: fix compat ioctl translation (bsc#1051510).
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
  (bsc#1051510).
- commit 0831c5e</changelog>
  <changelog author="tiwai@suse.de" date="1540900807">- soc/tegra: pmc: Fix child-node lookup (bsc#1051510).
- serial: 8250: Fix clearing FIFOs in RS485 mode again
  (bsc#1051510).
- staging: comedi: ni_mio_common: protect register write overflow
  (bsc#1051510).
- iio: adc: at91: fix wrong channel number in triggered buffer
  mode (bsc#1051510).
- iio: adc: at91: fix acking DRDY irq on simple conversions
  (bsc#1051510).
- iio: adc: imx25-gcq: Fix leak of device_node in
  mx25_gcq_setup_cfgs() (bsc#1051510).
- commit 9f4f0cc</changelog>
  <changelog author="jthumshirn@suse.de" date="1540900808">- Refresh
  patches.fixes/0001-drm-amdgpu-powerplay-fix-missing-break-in-switch-sta.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Do-not-carry-error-code-in-HiBMC.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Don-t-overwrite-fb-helper-surfac.patch.
- Refresh
  patches.fixes/0001-drm-i915-audio-Hook-up-component-bindings-even-if-di.patch.
- Refresh
  patches.fixes/0001-drm-i915-gen9-Fix-initial-readout-for-Y-tiled-frameb.patch.
- Refresh
  patches.fixes/0001-drm-sti-do-not-remove-the-drm_bridge-that-was-never-.patch.
- Refresh
  patches.fixes/0001-drm-virtio-fix-bounds-check-in-virtio_gpu_cmd_get_ca.patch.
- commit 652fab5</changelog>
  <changelog author="tiwai@suse.de" date="1540987200">- drm/nouveau: Don't disable polling in fallback mode
  (bsc#1103356).
- Delete
  patches.suse/Revert-drm-nouveau-drm-therm-fan-add-a-fallback-if-n.
- commit aa0c431</changelog>
  <changelog author="tzimmermann@suse.de" date="1540987201">- Fix Patch-mainline for "drm/amdgpu: update tmr mc address"
  The Patch-mainline tag was incorrect. References is being updated as well.
- commit ce8535e</changelog>
  <changelog author="tiwai@suse.de" date="1540987202">- Workaround for mysterious NVMe breakage with i915 CFL
  (bsc#1111040).
- commit 0fa5877</changelog>
  <changelog author="jthumshirn@suse.de" date="1540987203">- libnvdimm, label: Fix sparse warning (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Use namespace index data to reduce number of label reads
  needed (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Split label init out from the logic for getting config
  data (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Remove empty if statement (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Clarify comment in sizeof_namespace_index (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Sanity check labeloff (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- libnvdimm, dimm: Maximize label transfer size (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7
  (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- commit 5a4eeb4</changelog>
  <changelog author="jlee@suse.com" date="1540987204">- x86/boot/KASLR: Work around firmware bugs by excluding
  EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR's choice
  (bnc#1112878).
- commit d45cd78</changelog>
  <changelog author="tiwai@suse.de" date="1540987205">- blacklist.conf: Add a few wifi driver entries that can't be applied
- commit 662fc68</changelog>
  <changelog author="tiwai@suse.de" date="1540987206">- spi/bcm63xx-hsspi: keep pll clk enabled (bsc#1051510).
- spi: sh-msiof: fix deferred probing (bsc#1051510).
- spi: bcm-qspi: switch back to reading flash using smaller chunks
  (bsc#1051510).
- commit f773242</changelog>
</package>
<package pkgid="4b2c61d23b0b46f5279e17057c58374094a3de5cd61264a69416180895640b3f" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="0e78360eed949542829b4e6fefe135f345cf81cbc68892e3c23d55867fc2e34e" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="8798e81c3d48c95bfd050816eada120c0afe54dc0428132d68f0655b562a3027" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="6ca1cba908b331e8c72f8ca38f7fee5d315956db2ede23f2603652cb94c23b3d" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="4342c90bf3d4926d0d48305a107f42a597da78139f726196c2ec70bacececccb" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="1531dacc9b4f39ffdf38dec98feed9bc1c62994ccd8c9a1424cbd60030725fb4" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.19.2"/>
  <changelog author="fdmanana@suse.com" date="1538568000">- Btrfs: fix fsync after hole punching when using no-holes feature
  (bsc#1110642).
- commit 3f19b40</changelog>
  <changelog author="fdmanana@suse.com" date="1538568001">- Btrfs: fix loss of prealloc extents past i_size after fsync
  log replay (bsc#1110643).
- commit 974e057</changelog>
  <changelog author="fdmanana@suse.com" date="1538568002">- Btrfs: fix duplicate extents after fsync of file with prealloc
  extents (bsc#1110644).
- commit c4ec603</changelog>
  <changelog author="fdmanana@suse.com" date="1538568003">- Btrfs: fix return value on rename exchange failure
  (bsc#1110645).
- commit 532729c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568004">- Btrfs: sync log after logging new name (bsc#1110646).
- commit 7260d6b</changelog>
  <changelog author="fdmanana@suse.com" date="1538568005">- Btrfs: fix data corruption when deduplicating between different
  files (bsc#1110647).
- commit 669848c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568006">- btrfs: Remove unused parameters from various functions
  (bsc#1110649).
- commit c97c657</changelog>
  <changelog author="fdmanana@suse.com" date="1538568007">- Btrfs: fix send failure when root has deleted files still open
  (bsc#1110650).
- commit f52554d</changelog>
  <changelog author="jslaby@suse.cz" date="1538568008">- watchdog: Mark watchdog touch functions as notrace (git-fixes).
- commit 8b53193</changelog>
  <changelog author="neilb@suse.com" date="1538654400">- nfs/filelayout: fix oops when freeing filelayout segment
  (bsc#1105190).
- NFS/filelayout: Fix racy setting of fl-&gt;dsaddr in
  filelayout_check_deviceid() (bsc#1105190).
- commit d6d0fab</changelog>
  <changelog author="neilb@suse.com" date="1538654401">- VFS: don't test owner for NFS in set_posix_acl() (bsc#1103405).
- commit 36f977a</changelog>
  <changelog author="tiwai@suse.de" date="1538654402">- README.BRANCH: SLE15-SP1 branch maintainer changes
  Add ptesarik as co-maintainer, keep tiwai as the primary maintainer
- commit 83aea11</changelog>
  <changelog author="wqu@suse.com" date="1538654403">- btrfs: tests/qgroup: Fix wrong tree backref level (bsc#1107928).
- commit a5e154c</changelog>
  <changelog author="wqu@suse.com" date="1538654404">- btrfs: check-integrity: Fix NULL pointer dereference for
  degraded mount (bsc#1107947).
- commit 77b2277</changelog>
  <changelog author="wqu@suse.com" date="1538654405">- btrfs: scrub: Don't use inode pages for device replace (follow
  up for bsc#1108096).
- commit c865775</changelog>
  <changelog author="tiwai@suse.de" date="1538654406">- ASoC: cs4265: fix MMTLR Data switch control (bsc#1051510).
- ALSA: fireworks: fix memory leak of response buffer at error
  path (bsc#1051510).
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix
  I/O at error path (bsc#1051510).
- ALSA: emu10k1: fix possible info leak to userspace on
  SNDRV_EMU10K1_IOCTL_INFO (bsc#1051510).
- ALSA: bebob: use address returned by kmalloc() instead of
  kernel stack for streaming DMA mapping (bsc#1051510).
- ASoC: rt5514: Fix the issue of the delay volume applied
  (bsc#1051510).
- ASoC: dapm: Fix potential DAI widget pointer deref when linking
  DAIs (bsc#1051510).
- ALSA: msnd: Fix the default sample sizes (bsc#1051510).
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE()
  macro (bsc#1051510).
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
  (bsc#1051510).
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
  (bsc#1051510).
- ASoC: rt5514: Add the missing register in the readable table
  (bsc#1051510).
- ASoC: rt5514: Eliminate the noise in the ASRC case
  (bsc#1051510).
- ASoC: rt5514: Add the I2S ASRC support (bsc#1051510).
- commit 4eba9c8</changelog>
  <changelog author="wqu@suse.com" date="1538654407">- btrfs: scrub: Don't use inode page cache in
  scrub_handle_errored_block() (follow up for bsc#1108096).
- commit 3f91c84</changelog>
  <changelog author="tiwai@suse.de" date="1538654408">- smsc95xx: Check for Wake-on-LAN modes (bsc#1051510).
- smsc75xx: Check for Wake-on-LAN modes (bsc#1051510).
- r8152: Check for supported Wake-on-LAN Modes (bsc#1051510).
- sr9800: Check for supported Wake-on-LAN modes (bsc#1051510).
- lan78xx: Check for supported Wake-on-LAN modes (bsc#1051510).
- ax88179_178a: Check for supported Wake-on-LAN modes
  (bsc#1051510).
- mac80211: fix pending queue hang due to TX_DROP (bsc#1051510).
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
  (bsc#1051510).
- Input: elantech - enable middle button of touchpad on ThinkPad
  P72 (bsc#1051510).
- regulator: fix crash caused by null driver data (bsc#1051510).
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
  (bsc#1051510).
- intel_th: Fix device removal logic (bsc#1051510).
- NFC: Fix possible memory corruption when handling SHDLC I-Frame
  commands (bsc#1051510).
- platform/x86: alienware-wmi: Correct a memory leak
  (bsc#1051510).
- xhci: Fix use after free for URB cancellation on a reallocated
  endpoint (bsc#1051510).
- mei: ignore not found client in the enumeration (bsc#1051510).
- i2c: i801: Allow ACPI AML access I/O ports not reserved for
  SMBus (bsc#1051510).
- fbdev/via: fix defined but not used warning (bsc#1051510).
- video: goldfishfb: fix memory leak on driver remove
  (bsc#1051510).
- fbdev: Distinguish between interlaced and progressive modes
  (bsc#1051510).
- platform/x86: toshiba_acpi: Fix defined but not used build
  warnings (bsc#1051510).
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
  (bsc#1051510).
- input: rohm_bu21023: switch to i2c_lock_bus(...,
  I2C_LOCK_SEGMENT) (bsc#1051510).
- HID: hid-ntrig: add error handling for sysfs_create_group
  (bsc#1051510).
- mfd: ti_am335x_tscadc: Fix struct clk memory leak (bsc#1051510).
- mmc: sdhci: do not try to use 3.3V signaling if not supported
  (bsc#1051510).
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
  (bsc#1051510).
- parport: sunbpp: fix error return code (bsc#1051510).
- coresight: Handle errors in finding input/output ports
  (bsc#1051510).
- mei: bus: type promotion bug in mei_nfc_if_version()
  (bsc#1051510).
- gpio: pxa: Fix potential NULL dereference (bsc#1051510).
- gpiolib: Mark gpio_suffixes array with __maybe_unused
  (bsc#1051510).
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
  (bsc#1051510).
- crypto: sharah - Unregister correct algorithms for SAHARA 3
  (bsc#1051510).
- crypto: skcipher - Fix -Wstringop-truncation warnings
  (bsc#1051510).
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
  (bsc#1051510).
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 (bsc#1051510).
- mac80211: restrict delayed tailroom needed decrement
  (bsc#1051510).
- wlcore: Add missing PM call for
  wlcore_cmd_wait_for_event_or_timeout() (bsc#1051510).
- commit e266792</changelog>
  <changelog author="mbrugger@suse.com" date="1538654409">- arm64: Update config files. (bsc#1110716)
  Enable ST LPS25H pressure sensor.
- commit 69c6902</changelog>
  <changelog author="jack@suse.cz" date="1538654410">- patches.fixes/x86-memory_failure-Introduce-set-clear-_mce_nospec.patch:
  Fixup compilation breakage on s390 and arm due to missing
  clear_mce_nospec().
- commit faef795</changelog>
</package>
<package pkgid="2ff498f098af7fafa0edf7381cada4ef3eb6a8f4c8724ad4358411ddf41c6caa" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.22.1"/>
  <changelog author="tiwai@suse.de" date="1539172800">- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell
  XPS 27 7760 (bsc#1051510).
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
  (bsc#1051510).
- crypto: mxs-dcp - Fix wait logic on chan threads (bsc#1051510).
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM
  ioctl (bsc#1051510).
- HID: add support for Apple Magic Keyboards (bsc#1051510).
- gpio: Fix crash due to registration race (bsc#1051510).
- gpiolib-acpi: Register GpioInt ACPI event handlers from a
  late_initcall (bsc#1051510).
- gpio: adp5588: Fix sleep-in-atomic-context bug (bsc#1051510).
- cfg80211: fix a type issue in
  ieee80211_chandef_to_operating_class() (bsc#1051510).
- Revert "gpio: set up initial state from .get_direction()"
  (bsc#1051510).
- gpio: mb86s70: Revert "Return error if requesting an already
  assigned gpio" (bsc#1051510).
- commit 2759d22</changelog>
  <changelog author="mbrugger@suse.com" date="1539172801">- arm64: Update config files.
  Enable SENSORS_RASPBERRYPI_HWMON
- commit 2a83945</changelog>
  <changelog author="mbrugger@suse.com" date="1539172802">- supported.conf: mark raspberrypi-hwmon as supported
- commit af8ddda</changelog>
  <changelog author="tiwai@suse.de" date="1539172803">- HID: hid-saitek: Add device ID for RAT 7 Contagion
  (bsc#1051510).
- mac80211: shorten the IBSS debug messages (bsc#1051510).
- mac80211: don't Tx a deauth frame if the AP forbade Tx
  (bsc#1051510).
- mac80211: Fix station bandwidth setting after channel switch
  (bsc#1051510).
- mac80211: fix a race between restart and CSA flows
  (bsc#1051510).
- mac80211: do not convert to A-MSDU if frag/subframe limited
  (bsc#1051510).
- mac80211: mesh: fix HWMP sequence numbering to follow standard
  (bsc#1051510).
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211_hwsim: require at least one channel (bsc#1051510).
- mac80211: Run TXQ teardown code before de-registering interfaces
  (bsc#1051510).
- hwmon: (adt7475) Make adt7475_read_word() return errors
  (bsc#1051510).
- hwmon: (ina2xx) fix sysfs shunt resistor read access
  (bsc#1051510).
- commit af836cd</changelog>
  <changelog author="tiwai@suse.de" date="1539172804">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- Revert "mwifiex: handle race during mwifiex_usb_disconnect"
  (bsc#1051510).
- media: videobuf-dma-sg: Fix dma_{sync,unmap}_sg() calls
  (bsc#1051510).
- Revert "mwifiex: fix incorrect ht capability problem"
  (bsc#1051510).
- PM / Domains: Fix genpd to deal with drivers returning 1 from
  - &gt;prepare() (bsc#1051510).
- Revert "pinctrl: sunxi: Don't enforce bias disable (for now)"
  (bsc#1051510).
- commit fb6c36a</changelog>
  <changelog author="tiwai@suse.de" date="1539172805">- blacklist.conf: Add blacklist of inapplicable revert commits
  They are either not applicable or requiring more backports that aren't
  suitable for SLE15
- commit 987dd44</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259200">- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk (bsc#1106110)
- commit 273a6bd</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259201">- blacklist.conf: Append 'drm/amd/pp: initialize result to before or'ing in data'
- commit d2edcd9</changelog>
  <changelog author="tiwai@suse.de" date="1539259202">- Disable DRM patches that broke vbox video driver KMP (bsc#1111076)
- commit 23943c6</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259203">- blacklist.conf: Append 'Revert "drm: Use a flexible array member for blob property data"'
- commit ddc67eb</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259204">- Fix Patch-mainline tags to refer to Linux release tag
  It is expected that Patch-mainline tags refer to a release tag
  in the Linux git tree, such as v4.15. Several patches contain a
  Patch-mainline tags that instead refer to a Linux version number,
  such as 4.15. This inconsistency complicates grepping and
  automation.
  871 of 18000 patches are affected by this problem.
- commit 1d81d26</changelog>
  <changelog author="bp@suse.de" date="1539259205">- crypto: ccp - add timeout support in the SEV command
  (bsc#1106838).
- commit 912dad4</changelog>
  <changelog author="tiwai@suse.de" date="1539345600">- Update config files: update forgotten armv7hl configs
- commit 7bae3a6</changelog>
  <changelog author="msuchanek@suse.de" date="1539345601">- powerpc/numa: Skip onlining a offline node in kdump path
  (bsc#1109784).
- commit df87e51</changelog>
  <changelog author="tiwai@suse.de" date="1539345602">- squashfs metadata 2: electric boogaloo (bsc#1051510).
- squashfs: more metadata hardening (bsc#1051510).
- squashfs: be more careful about metadata corruption
  (bsc#1051510).
- commit 9bfac39</changelog>
  <changelog author="hare@suse.de" date="1539345603">- scsi: qla2xxx: Move log messages before issuing command to
  firmware (bsc#1108870).
- scsi: qla2xxx: Fix for double free of SRB structure
  (bsc#1108870).
- scsi: qla2xxx: Fix recursive mailbox timeout (bsc#1108870).
- scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
  (bsc#1108870).
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
  (bsc#1108870).
- scsi: qla2xxx: Fix duplicate switch database entries
  (bsc#1108870).
- scsi: qla2xxx: Fix NVMe Target discovery (bsc#1108870).
- scsi: qla2xxx: Fix NVMe session hang on unload (bsc#1108870).
- scsi: qla2xxx: don't allow negative thresholds (bsc#1108870).
- commit 50fe149</changelog>
  <changelog author="tiwai@suse.de" date="1539345604">- Squashfs: Compute expected length from inode size rather than
  block length (bsc#1051510).
- commit 0c4a663</changelog>
  <changelog author="tiwai@suse.de" date="1539345605">- soreuseport: initialise timewait reuseport field (bsc#1051510).
- commit bda2dcc</changelog>
  <changelog author="tiwai@suse.de" date="1539345606">- rpc_pipefs: fix double-dput() (bsc#1051510).
- commit 1a15e26</changelog>
  <changelog author="hare@suse.de" date="1539345607">- scsi: qla2xxx: Return switch command on a timeout (bsc#1108870).
- commit 8e38f2a</changelog>
</package>
<package pkgid="2552cdc74fde6079103e95423a734ba0379aed1421ef9e3967b1cf98e6928e6f" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.25.1"/>
  <changelog author="tiwai@suse.de" date="1540814400">- NFC: nfcmrvl_uart: fix OF child-node lookup (bsc#1051510).
- kernfs: update comment about kernfs_path() return value
  (bsc#1051510).
- usbip: tools: fix atoi() on non-null terminated string
  (bsc#1051510).
- USB: serial: cypress_m8: fix interrupt-out transfer length
  (bsc#1051510).
- usb: chipidea: Prevent unbalanced IRQ disable (bsc#1051510).
- commit 6c9d1e7</changelog>
  <changelog author="tiwai@suse.de" date="1540814401">- blacklist.conf: Add ASoC and USB entries that may break kABI
- commit 199a072</changelog>
  <changelog author="tiwai@suse.de" date="1540814402">- usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation
  (bsc#1051510).
- usb: gadget: fsl_udc_core: check allocation return value and
  cleanup on failure (bsc#1051510).
- commit c1b7b66</changelog>
  <changelog author="tiwai@suse.de" date="1540814403">- Refresh patch tag of upstreamed patches and move to sorted section
- commit a966b56</changelog>
  <changelog author="ohering@suse.de" date="1540900800">- move changes without Git-commit out of sorted section
- commit cbf049e</changelog>
  <changelog author="jslaby@suse.cz" date="1540900801">- random: rate limit unseeded randomness warnings (git-fixes).
- commit be52b92</changelog>
  <changelog author="jslaby@suse.cz" date="1540900802">- blacklist.conf: add a kasan fix
- commit c85e2d1</changelog>
  <changelog author="jdelvare@suse.de" date="1540900803">- Add reference to bsc#1104124 to
  patches.fixes/fs-aio-fix-the-increment-of-aio-nr-and-counting-agai.patch
- commit f60e64b</changelog>
  <changelog author="jslaby@suse.cz" date="1540900804">- tools build: fix # escaping in .cmd files for future Make
  (git-fixes).
- Kbuild: fix # escaping in .cmd files for future Make
  (git-fixes).
- commit 8f11ec3</changelog>
  <changelog author="tiwai@suse.de" date="1540900805">- drm/i915/dp: Link train Fallback on eDP only if fallback link
  BW can fit panel's native mode (bsc#1051510).
- drm/i915: Restore vblank interrupts earlier (bsc#1051510).
- commit daf120f</changelog>
  <changelog author="tiwai@suse.de" date="1540900806">- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
  (bsc#1051510).
- media: cx231xx: fix potential sign-extension overflow on large
  shift (bsc#1051510).
- media: pci: cx23885: handle adding to list failure
  (bsc#1051510).
- media: vsp1: Fix YCbCr planar formats pitch calculation
  (bsc#1051510).
- media: tvp5150: fix switch exit in set control handler
  (bsc#1051510).
- media: tvp5150: fix width alignment during set_selection()
  (bsc#1051510).
- media: em28xx: fix input name for Terratec AV 350 (bsc#1051510).
- media: em28xx: use a default format if TRY_FMT fails
  (bsc#1051510).
- media: tvp5150: avoid going past array on v4l2_querymenu()
  (bsc#1051510).
- media: dvb: fix compat ioctl translation (bsc#1051510).
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
  (bsc#1051510).
- commit 0831c5e</changelog>
  <changelog author="tiwai@suse.de" date="1540900807">- soc/tegra: pmc: Fix child-node lookup (bsc#1051510).
- serial: 8250: Fix clearing FIFOs in RS485 mode again
  (bsc#1051510).
- staging: comedi: ni_mio_common: protect register write overflow
  (bsc#1051510).
- iio: adc: at91: fix wrong channel number in triggered buffer
  mode (bsc#1051510).
- iio: adc: at91: fix acking DRDY irq on simple conversions
  (bsc#1051510).
- iio: adc: imx25-gcq: Fix leak of device_node in
  mx25_gcq_setup_cfgs() (bsc#1051510).
- commit 9f4f0cc</changelog>
  <changelog author="jthumshirn@suse.de" date="1540900808">- Refresh
  patches.fixes/0001-drm-amdgpu-powerplay-fix-missing-break-in-switch-sta.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Do-not-carry-error-code-in-HiBMC.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Don-t-overwrite-fb-helper-surfac.patch.
- Refresh
  patches.fixes/0001-drm-i915-audio-Hook-up-component-bindings-even-if-di.patch.
- Refresh
  patches.fixes/0001-drm-i915-gen9-Fix-initial-readout-for-Y-tiled-frameb.patch.
- Refresh
  patches.fixes/0001-drm-sti-do-not-remove-the-drm_bridge-that-was-never-.patch.
- Refresh
  patches.fixes/0001-drm-virtio-fix-bounds-check-in-virtio_gpu_cmd_get_ca.patch.
- commit 652fab5</changelog>
  <changelog author="tiwai@suse.de" date="1540987200">- drm/nouveau: Don't disable polling in fallback mode
  (bsc#1103356).
- Delete
  patches.suse/Revert-drm-nouveau-drm-therm-fan-add-a-fallback-if-n.
- commit aa0c431</changelog>
  <changelog author="tzimmermann@suse.de" date="1540987201">- Fix Patch-mainline for "drm/amdgpu: update tmr mc address"
  The Patch-mainline tag was incorrect. References is being updated as well.
- commit ce8535e</changelog>
  <changelog author="tiwai@suse.de" date="1540987202">- Workaround for mysterious NVMe breakage with i915 CFL
  (bsc#1111040).
- commit 0fa5877</changelog>
  <changelog author="jthumshirn@suse.de" date="1540987203">- libnvdimm, label: Fix sparse warning (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Use namespace index data to reduce number of label reads
  needed (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Split label init out from the logic for getting config
  data (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Remove empty if statement (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Clarify comment in sizeof_namespace_index (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Sanity check labeloff (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- libnvdimm, dimm: Maximize label transfer size (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7
  (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- commit 5a4eeb4</changelog>
  <changelog author="jlee@suse.com" date="1540987204">- x86/boot/KASLR: Work around firmware bugs by excluding
  EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR's choice
  (bnc#1112878).
- commit d45cd78</changelog>
  <changelog author="tiwai@suse.de" date="1540987205">- blacklist.conf: Add a few wifi driver entries that can't be applied
- commit 662fc68</changelog>
  <changelog author="tiwai@suse.de" date="1540987206">- spi/bcm63xx-hsspi: keep pll clk enabled (bsc#1051510).
- spi: sh-msiof: fix deferred probing (bsc#1051510).
- spi: bcm-qspi: switch back to reading flash using smaller chunks
  (bsc#1051510).
- commit f773242</changelog>
</package>
<package pkgid="44b88d64c4d9ee6e2193cca3aac4bdfd59dec2be99fa2ad54c0dcc0c5ef3d828" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="6836243befacb58d70507ee626d53b2918d64481b3d2d87ac827cc901cf5d417" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="8c1bca661858b91176b81f902f2f3569e52bcf97b5eb23c4968c0dd80dcc08be" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="2efe5249c2a680503e15c748a27ecc090cb0f6eef0a45c24f50e6b117f89bf2f" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="d6748260daa8c5aaa2b44adb4a240169830eea81e732dfba9605b29cd7cae091" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="9fe237a36691c641d88374622a3c7ecbab05cbb2e9057ef50493f1ee742c2b43" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.19.1"/>
  <changelog author="fdmanana@suse.com" date="1538568000">- Btrfs: fix fsync after hole punching when using no-holes feature
  (bsc#1110642).
- commit 3f19b40</changelog>
  <changelog author="fdmanana@suse.com" date="1538568001">- Btrfs: fix loss of prealloc extents past i_size after fsync
  log replay (bsc#1110643).
- commit 974e057</changelog>
  <changelog author="fdmanana@suse.com" date="1538568002">- Btrfs: fix duplicate extents after fsync of file with prealloc
  extents (bsc#1110644).
- commit c4ec603</changelog>
  <changelog author="fdmanana@suse.com" date="1538568003">- Btrfs: fix return value on rename exchange failure
  (bsc#1110645).
- commit 532729c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568004">- Btrfs: sync log after logging new name (bsc#1110646).
- commit 7260d6b</changelog>
  <changelog author="fdmanana@suse.com" date="1538568005">- Btrfs: fix data corruption when deduplicating between different
  files (bsc#1110647).
- commit 669848c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568006">- btrfs: Remove unused parameters from various functions
  (bsc#1110649).
- commit c97c657</changelog>
  <changelog author="fdmanana@suse.com" date="1538568007">- Btrfs: fix send failure when root has deleted files still open
  (bsc#1110650).
- commit f52554d</changelog>
  <changelog author="jslaby@suse.cz" date="1538568008">- watchdog: Mark watchdog touch functions as notrace (git-fixes).
- commit 8b53193</changelog>
  <changelog author="neilb@suse.com" date="1538654400">- nfs/filelayout: fix oops when freeing filelayout segment
  (bsc#1105190).
- NFS/filelayout: Fix racy setting of fl-&gt;dsaddr in
  filelayout_check_deviceid() (bsc#1105190).
- commit d6d0fab</changelog>
  <changelog author="neilb@suse.com" date="1538654401">- VFS: don't test owner for NFS in set_posix_acl() (bsc#1103405).
- commit 36f977a</changelog>
  <changelog author="tiwai@suse.de" date="1538654402">- README.BRANCH: SLE15-SP1 branch maintainer changes
  Add ptesarik as co-maintainer, keep tiwai as the primary maintainer
- commit 83aea11</changelog>
  <changelog author="wqu@suse.com" date="1538654403">- btrfs: tests/qgroup: Fix wrong tree backref level (bsc#1107928).
- commit a5e154c</changelog>
  <changelog author="wqu@suse.com" date="1538654404">- btrfs: check-integrity: Fix NULL pointer dereference for
  degraded mount (bsc#1107947).
- commit 77b2277</changelog>
  <changelog author="wqu@suse.com" date="1538654405">- btrfs: scrub: Don't use inode pages for device replace (follow
  up for bsc#1108096).
- commit c865775</changelog>
  <changelog author="tiwai@suse.de" date="1538654406">- ASoC: cs4265: fix MMTLR Data switch control (bsc#1051510).
- ALSA: fireworks: fix memory leak of response buffer at error
  path (bsc#1051510).
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix
  I/O at error path (bsc#1051510).
- ALSA: emu10k1: fix possible info leak to userspace on
  SNDRV_EMU10K1_IOCTL_INFO (bsc#1051510).
- ALSA: bebob: use address returned by kmalloc() instead of
  kernel stack for streaming DMA mapping (bsc#1051510).
- ASoC: rt5514: Fix the issue of the delay volume applied
  (bsc#1051510).
- ASoC: dapm: Fix potential DAI widget pointer deref when linking
  DAIs (bsc#1051510).
- ALSA: msnd: Fix the default sample sizes (bsc#1051510).
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE()
  macro (bsc#1051510).
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
  (bsc#1051510).
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
  (bsc#1051510).
- ASoC: rt5514: Add the missing register in the readable table
  (bsc#1051510).
- ASoC: rt5514: Eliminate the noise in the ASRC case
  (bsc#1051510).
- ASoC: rt5514: Add the I2S ASRC support (bsc#1051510).
- commit 4eba9c8</changelog>
  <changelog author="wqu@suse.com" date="1538654407">- btrfs: scrub: Don't use inode page cache in
  scrub_handle_errored_block() (follow up for bsc#1108096).
- commit 3f91c84</changelog>
  <changelog author="tiwai@suse.de" date="1538654408">- smsc95xx: Check for Wake-on-LAN modes (bsc#1051510).
- smsc75xx: Check for Wake-on-LAN modes (bsc#1051510).
- r8152: Check for supported Wake-on-LAN Modes (bsc#1051510).
- sr9800: Check for supported Wake-on-LAN modes (bsc#1051510).
- lan78xx: Check for supported Wake-on-LAN modes (bsc#1051510).
- ax88179_178a: Check for supported Wake-on-LAN modes
  (bsc#1051510).
- mac80211: fix pending queue hang due to TX_DROP (bsc#1051510).
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
  (bsc#1051510).
- Input: elantech - enable middle button of touchpad on ThinkPad
  P72 (bsc#1051510).
- regulator: fix crash caused by null driver data (bsc#1051510).
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
  (bsc#1051510).
- intel_th: Fix device removal logic (bsc#1051510).
- NFC: Fix possible memory corruption when handling SHDLC I-Frame
  commands (bsc#1051510).
- platform/x86: alienware-wmi: Correct a memory leak
  (bsc#1051510).
- xhci: Fix use after free for URB cancellation on a reallocated
  endpoint (bsc#1051510).
- mei: ignore not found client in the enumeration (bsc#1051510).
- i2c: i801: Allow ACPI AML access I/O ports not reserved for
  SMBus (bsc#1051510).
- fbdev/via: fix defined but not used warning (bsc#1051510).
- video: goldfishfb: fix memory leak on driver remove
  (bsc#1051510).
- fbdev: Distinguish between interlaced and progressive modes
  (bsc#1051510).
- platform/x86: toshiba_acpi: Fix defined but not used build
  warnings (bsc#1051510).
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
  (bsc#1051510).
- input: rohm_bu21023: switch to i2c_lock_bus(...,
  I2C_LOCK_SEGMENT) (bsc#1051510).
- HID: hid-ntrig: add error handling for sysfs_create_group
  (bsc#1051510).
- mfd: ti_am335x_tscadc: Fix struct clk memory leak (bsc#1051510).
- mmc: sdhci: do not try to use 3.3V signaling if not supported
  (bsc#1051510).
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
  (bsc#1051510).
- parport: sunbpp: fix error return code (bsc#1051510).
- coresight: Handle errors in finding input/output ports
  (bsc#1051510).
- mei: bus: type promotion bug in mei_nfc_if_version()
  (bsc#1051510).
- gpio: pxa: Fix potential NULL dereference (bsc#1051510).
- gpiolib: Mark gpio_suffixes array with __maybe_unused
  (bsc#1051510).
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
  (bsc#1051510).
- crypto: sharah - Unregister correct algorithms for SAHARA 3
  (bsc#1051510).
- crypto: skcipher - Fix -Wstringop-truncation warnings
  (bsc#1051510).
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
  (bsc#1051510).
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 (bsc#1051510).
- mac80211: restrict delayed tailroom needed decrement
  (bsc#1051510).
- wlcore: Add missing PM call for
  wlcore_cmd_wait_for_event_or_timeout() (bsc#1051510).
- commit e266792</changelog>
  <changelog author="mbrugger@suse.com" date="1538654409">- arm64: Update config files. (bsc#1110716)
  Enable ST LPS25H pressure sensor.
- commit 69c6902</changelog>
  <changelog author="jack@suse.cz" date="1538654410">- patches.fixes/x86-memory_failure-Introduce-set-clear-_mce_nospec.patch:
  Fixup compilation breakage on s390 and arm due to missing
  clear_mce_nospec().
- commit faef795</changelog>
</package>
<package pkgid="f3787be4f90790f9062a6a3074899afd8d6d9073d6f38eb4ebac3edd058991ae" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.22.1"/>
  <changelog author="tiwai@suse.de" date="1539172800">- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell
  XPS 27 7760 (bsc#1051510).
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
  (bsc#1051510).
- crypto: mxs-dcp - Fix wait logic on chan threads (bsc#1051510).
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM
  ioctl (bsc#1051510).
- HID: add support for Apple Magic Keyboards (bsc#1051510).
- gpio: Fix crash due to registration race (bsc#1051510).
- gpiolib-acpi: Register GpioInt ACPI event handlers from a
  late_initcall (bsc#1051510).
- gpio: adp5588: Fix sleep-in-atomic-context bug (bsc#1051510).
- cfg80211: fix a type issue in
  ieee80211_chandef_to_operating_class() (bsc#1051510).
- Revert "gpio: set up initial state from .get_direction()"
  (bsc#1051510).
- gpio: mb86s70: Revert "Return error if requesting an already
  assigned gpio" (bsc#1051510).
- commit 2759d22</changelog>
  <changelog author="mbrugger@suse.com" date="1539172801">- arm64: Update config files.
  Enable SENSORS_RASPBERRYPI_HWMON
- commit 2a83945</changelog>
  <changelog author="mbrugger@suse.com" date="1539172802">- supported.conf: mark raspberrypi-hwmon as supported
- commit af8ddda</changelog>
  <changelog author="tiwai@suse.de" date="1539172803">- HID: hid-saitek: Add device ID for RAT 7 Contagion
  (bsc#1051510).
- mac80211: shorten the IBSS debug messages (bsc#1051510).
- mac80211: don't Tx a deauth frame if the AP forbade Tx
  (bsc#1051510).
- mac80211: Fix station bandwidth setting after channel switch
  (bsc#1051510).
- mac80211: fix a race between restart and CSA flows
  (bsc#1051510).
- mac80211: do not convert to A-MSDU if frag/subframe limited
  (bsc#1051510).
- mac80211: mesh: fix HWMP sequence numbering to follow standard
  (bsc#1051510).
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211_hwsim: require at least one channel (bsc#1051510).
- mac80211: Run TXQ teardown code before de-registering interfaces
  (bsc#1051510).
- hwmon: (adt7475) Make adt7475_read_word() return errors
  (bsc#1051510).
- hwmon: (ina2xx) fix sysfs shunt resistor read access
  (bsc#1051510).
- commit af836cd</changelog>
  <changelog author="tiwai@suse.de" date="1539172804">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- Revert "mwifiex: handle race during mwifiex_usb_disconnect"
  (bsc#1051510).
- media: videobuf-dma-sg: Fix dma_{sync,unmap}_sg() calls
  (bsc#1051510).
- Revert "mwifiex: fix incorrect ht capability problem"
  (bsc#1051510).
- PM / Domains: Fix genpd to deal with drivers returning 1 from
  - &gt;prepare() (bsc#1051510).
- Revert "pinctrl: sunxi: Don't enforce bias disable (for now)"
  (bsc#1051510).
- commit fb6c36a</changelog>
  <changelog author="tiwai@suse.de" date="1539172805">- blacklist.conf: Add blacklist of inapplicable revert commits
  They are either not applicable or requiring more backports that aren't
  suitable for SLE15
- commit 987dd44</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259200">- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk (bsc#1106110)
- commit 273a6bd</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259201">- blacklist.conf: Append 'drm/amd/pp: initialize result to before or'ing in data'
- commit d2edcd9</changelog>
  <changelog author="tiwai@suse.de" date="1539259202">- Disable DRM patches that broke vbox video driver KMP (bsc#1111076)
- commit 23943c6</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259203">- blacklist.conf: Append 'Revert "drm: Use a flexible array member for blob property data"'
- commit ddc67eb</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259204">- Fix Patch-mainline tags to refer to Linux release tag
  It is expected that Patch-mainline tags refer to a release tag
  in the Linux git tree, such as v4.15. Several patches contain a
  Patch-mainline tags that instead refer to a Linux version number,
  such as 4.15. This inconsistency complicates grepping and
  automation.
  871 of 18000 patches are affected by this problem.
- commit 1d81d26</changelog>
  <changelog author="bp@suse.de" date="1539259205">- crypto: ccp - add timeout support in the SEV command
  (bsc#1106838).
- commit 912dad4</changelog>
  <changelog author="tiwai@suse.de" date="1539345600">- Update config files: update forgotten armv7hl configs
- commit 7bae3a6</changelog>
  <changelog author="msuchanek@suse.de" date="1539345601">- powerpc/numa: Skip onlining a offline node in kdump path
  (bsc#1109784).
- commit df87e51</changelog>
  <changelog author="tiwai@suse.de" date="1539345602">- squashfs metadata 2: electric boogaloo (bsc#1051510).
- squashfs: more metadata hardening (bsc#1051510).
- squashfs: be more careful about metadata corruption
  (bsc#1051510).
- commit 9bfac39</changelog>
  <changelog author="hare@suse.de" date="1539345603">- scsi: qla2xxx: Move log messages before issuing command to
  firmware (bsc#1108870).
- scsi: qla2xxx: Fix for double free of SRB structure
  (bsc#1108870).
- scsi: qla2xxx: Fix recursive mailbox timeout (bsc#1108870).
- scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
  (bsc#1108870).
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
  (bsc#1108870).
- scsi: qla2xxx: Fix duplicate switch database entries
  (bsc#1108870).
- scsi: qla2xxx: Fix NVMe Target discovery (bsc#1108870).
- scsi: qla2xxx: Fix NVMe session hang on unload (bsc#1108870).
- scsi: qla2xxx: don't allow negative thresholds (bsc#1108870).
- commit 50fe149</changelog>
  <changelog author="tiwai@suse.de" date="1539345604">- Squashfs: Compute expected length from inode size rather than
  block length (bsc#1051510).
- commit 0c4a663</changelog>
  <changelog author="tiwai@suse.de" date="1539345605">- soreuseport: initialise timewait reuseport field (bsc#1051510).
- commit bda2dcc</changelog>
  <changelog author="tiwai@suse.de" date="1539345606">- rpc_pipefs: fix double-dput() (bsc#1051510).
- commit 1a15e26</changelog>
  <changelog author="hare@suse.de" date="1539345607">- scsi: qla2xxx: Return switch command on a timeout (bsc#1108870).
- commit 8e38f2a</changelog>
</package>
<package pkgid="f050a66d6a046115bd0f7623ce10ef61febc06aa9be08f645413ec6e94164705" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.25.1"/>
  <changelog author="tiwai@suse.de" date="1540814400">- NFC: nfcmrvl_uart: fix OF child-node lookup (bsc#1051510).
- kernfs: update comment about kernfs_path() return value
  (bsc#1051510).
- usbip: tools: fix atoi() on non-null terminated string
  (bsc#1051510).
- USB: serial: cypress_m8: fix interrupt-out transfer length
  (bsc#1051510).
- usb: chipidea: Prevent unbalanced IRQ disable (bsc#1051510).
- commit 6c9d1e7</changelog>
  <changelog author="tiwai@suse.de" date="1540814401">- blacklist.conf: Add ASoC and USB entries that may break kABI
- commit 199a072</changelog>
  <changelog author="tiwai@suse.de" date="1540814402">- usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation
  (bsc#1051510).
- usb: gadget: fsl_udc_core: check allocation return value and
  cleanup on failure (bsc#1051510).
- commit c1b7b66</changelog>
  <changelog author="tiwai@suse.de" date="1540814403">- Refresh patch tag of upstreamed patches and move to sorted section
- commit a966b56</changelog>
  <changelog author="ohering@suse.de" date="1540900800">- move changes without Git-commit out of sorted section
- commit cbf049e</changelog>
  <changelog author="jslaby@suse.cz" date="1540900801">- random: rate limit unseeded randomness warnings (git-fixes).
- commit be52b92</changelog>
  <changelog author="jslaby@suse.cz" date="1540900802">- blacklist.conf: add a kasan fix
- commit c85e2d1</changelog>
  <changelog author="jdelvare@suse.de" date="1540900803">- Add reference to bsc#1104124 to
  patches.fixes/fs-aio-fix-the-increment-of-aio-nr-and-counting-agai.patch
- commit f60e64b</changelog>
  <changelog author="jslaby@suse.cz" date="1540900804">- tools build: fix # escaping in .cmd files for future Make
  (git-fixes).
- Kbuild: fix # escaping in .cmd files for future Make
  (git-fixes).
- commit 8f11ec3</changelog>
  <changelog author="tiwai@suse.de" date="1540900805">- drm/i915/dp: Link train Fallback on eDP only if fallback link
  BW can fit panel's native mode (bsc#1051510).
- drm/i915: Restore vblank interrupts earlier (bsc#1051510).
- commit daf120f</changelog>
  <changelog author="tiwai@suse.de" date="1540900806">- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
  (bsc#1051510).
- media: cx231xx: fix potential sign-extension overflow on large
  shift (bsc#1051510).
- media: pci: cx23885: handle adding to list failure
  (bsc#1051510).
- media: vsp1: Fix YCbCr planar formats pitch calculation
  (bsc#1051510).
- media: tvp5150: fix switch exit in set control handler
  (bsc#1051510).
- media: tvp5150: fix width alignment during set_selection()
  (bsc#1051510).
- media: em28xx: fix input name for Terratec AV 350 (bsc#1051510).
- media: em28xx: use a default format if TRY_FMT fails
  (bsc#1051510).
- media: tvp5150: avoid going past array on v4l2_querymenu()
  (bsc#1051510).
- media: dvb: fix compat ioctl translation (bsc#1051510).
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
  (bsc#1051510).
- commit 0831c5e</changelog>
  <changelog author="tiwai@suse.de" date="1540900807">- soc/tegra: pmc: Fix child-node lookup (bsc#1051510).
- serial: 8250: Fix clearing FIFOs in RS485 mode again
  (bsc#1051510).
- staging: comedi: ni_mio_common: protect register write overflow
  (bsc#1051510).
- iio: adc: at91: fix wrong channel number in triggered buffer
  mode (bsc#1051510).
- iio: adc: at91: fix acking DRDY irq on simple conversions
  (bsc#1051510).
- iio: adc: imx25-gcq: Fix leak of device_node in
  mx25_gcq_setup_cfgs() (bsc#1051510).
- commit 9f4f0cc</changelog>
  <changelog author="jthumshirn@suse.de" date="1540900808">- Refresh
  patches.fixes/0001-drm-amdgpu-powerplay-fix-missing-break-in-switch-sta.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Do-not-carry-error-code-in-HiBMC.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Don-t-overwrite-fb-helper-surfac.patch.
- Refresh
  patches.fixes/0001-drm-i915-audio-Hook-up-component-bindings-even-if-di.patch.
- Refresh
  patches.fixes/0001-drm-i915-gen9-Fix-initial-readout-for-Y-tiled-frameb.patch.
- Refresh
  patches.fixes/0001-drm-sti-do-not-remove-the-drm_bridge-that-was-never-.patch.
- Refresh
  patches.fixes/0001-drm-virtio-fix-bounds-check-in-virtio_gpu_cmd_get_ca.patch.
- commit 652fab5</changelog>
  <changelog author="tiwai@suse.de" date="1540987200">- drm/nouveau: Don't disable polling in fallback mode
  (bsc#1103356).
- Delete
  patches.suse/Revert-drm-nouveau-drm-therm-fan-add-a-fallback-if-n.
- commit aa0c431</changelog>
  <changelog author="tzimmermann@suse.de" date="1540987201">- Fix Patch-mainline for "drm/amdgpu: update tmr mc address"
  The Patch-mainline tag was incorrect. References is being updated as well.
- commit ce8535e</changelog>
  <changelog author="tiwai@suse.de" date="1540987202">- Workaround for mysterious NVMe breakage with i915 CFL
  (bsc#1111040).
- commit 0fa5877</changelog>
  <changelog author="jthumshirn@suse.de" date="1540987203">- libnvdimm, label: Fix sparse warning (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Use namespace index data to reduce number of label reads
  needed (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Split label init out from the logic for getting config
  data (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Remove empty if statement (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Clarify comment in sizeof_namespace_index (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Sanity check labeloff (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- libnvdimm, dimm: Maximize label transfer size (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7
  (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- commit 5a4eeb4</changelog>
  <changelog author="jlee@suse.com" date="1540987204">- x86/boot/KASLR: Work around firmware bugs by excluding
  EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR's choice
  (bnc#1112878).
- commit d45cd78</changelog>
  <changelog author="tiwai@suse.de" date="1540987205">- blacklist.conf: Add a few wifi driver entries that can't be applied
- commit 662fc68</changelog>
  <changelog author="tiwai@suse.de" date="1540987206">- spi/bcm63xx-hsspi: keep pll clk enabled (bsc#1051510).
- spi: sh-msiof: fix deferred probing (bsc#1051510).
- spi: bcm-qspi: switch back to reading flash using smaller chunks
  (bsc#1051510).
- commit f773242</changelog>
</package>
<package pkgid="34bed99a1492fbd736ebf32788c4bd513e8cf329ee1cea0aa9f32070618fffb0" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="f08ce9d8f072fdd30ee8a87efc239cc899352d41796182223a02846ba9123d18" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="fd933d6655de0f3c6cd5d799f54fa5a53a94cd0117dd1b1f9dfcb3b6dfa561dd" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="e7e081ba8a745550d9fea99c253352d7617602f2e40b666b4ac59847fb2abef6" name="kernel-docs" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="3539ac7247b1f4f85f18673e43df9d36dcb5d1b3f6174c6fe814e54071e69ff7" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="bafb152120ca2a9ce71f86e1691e6727e230d5c76c49d46f9765fb719f44a0b9" name="kernel-docs" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="9f92e198d38618c8089717888d9c037a4fa90c0cd9b09cdc11eb0a9c32301784" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="13d0c6375668d24f177497d2c444bab6d8cf1cb7f501da5f7538fde5b780cd87" name="kernel-docs" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="cc6db4f45500b871a908a54dab6961df615085b1a215811679ef4f7882a7f35f" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.19.3"/>
  <changelog author="fdmanana@suse.com" date="1538568000">- Btrfs: fix fsync after hole punching when using no-holes feature
  (bsc#1110642).
- commit 3f19b40</changelog>
  <changelog author="fdmanana@suse.com" date="1538568001">- Btrfs: fix loss of prealloc extents past i_size after fsync
  log replay (bsc#1110643).
- commit 974e057</changelog>
  <changelog author="fdmanana@suse.com" date="1538568002">- Btrfs: fix duplicate extents after fsync of file with prealloc
  extents (bsc#1110644).
- commit c4ec603</changelog>
  <changelog author="fdmanana@suse.com" date="1538568003">- Btrfs: fix return value on rename exchange failure
  (bsc#1110645).
- commit 532729c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568004">- Btrfs: sync log after logging new name (bsc#1110646).
- commit 7260d6b</changelog>
  <changelog author="fdmanana@suse.com" date="1538568005">- Btrfs: fix data corruption when deduplicating between different
  files (bsc#1110647).
- commit 669848c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568006">- btrfs: Remove unused parameters from various functions
  (bsc#1110649).
- commit c97c657</changelog>
  <changelog author="fdmanana@suse.com" date="1538568007">- Btrfs: fix send failure when root has deleted files still open
  (bsc#1110650).
- commit f52554d</changelog>
  <changelog author="jslaby@suse.cz" date="1538568008">- watchdog: Mark watchdog touch functions as notrace (git-fixes).
- commit 8b53193</changelog>
  <changelog author="neilb@suse.com" date="1538654400">- nfs/filelayout: fix oops when freeing filelayout segment
  (bsc#1105190).
- NFS/filelayout: Fix racy setting of fl-&gt;dsaddr in
  filelayout_check_deviceid() (bsc#1105190).
- commit d6d0fab</changelog>
  <changelog author="neilb@suse.com" date="1538654401">- VFS: don't test owner for NFS in set_posix_acl() (bsc#1103405).
- commit 36f977a</changelog>
  <changelog author="tiwai@suse.de" date="1538654402">- README.BRANCH: SLE15-SP1 branch maintainer changes
  Add ptesarik as co-maintainer, keep tiwai as the primary maintainer
- commit 83aea11</changelog>
  <changelog author="wqu@suse.com" date="1538654403">- btrfs: tests/qgroup: Fix wrong tree backref level (bsc#1107928).
- commit a5e154c</changelog>
  <changelog author="wqu@suse.com" date="1538654404">- btrfs: check-integrity: Fix NULL pointer dereference for
  degraded mount (bsc#1107947).
- commit 77b2277</changelog>
  <changelog author="wqu@suse.com" date="1538654405">- btrfs: scrub: Don't use inode pages for device replace (follow
  up for bsc#1108096).
- commit c865775</changelog>
  <changelog author="tiwai@suse.de" date="1538654406">- ASoC: cs4265: fix MMTLR Data switch control (bsc#1051510).
- ALSA: fireworks: fix memory leak of response buffer at error
  path (bsc#1051510).
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix
  I/O at error path (bsc#1051510).
- ALSA: emu10k1: fix possible info leak to userspace on
  SNDRV_EMU10K1_IOCTL_INFO (bsc#1051510).
- ALSA: bebob: use address returned by kmalloc() instead of
  kernel stack for streaming DMA mapping (bsc#1051510).
- ASoC: rt5514: Fix the issue of the delay volume applied
  (bsc#1051510).
- ASoC: dapm: Fix potential DAI widget pointer deref when linking
  DAIs (bsc#1051510).
- ALSA: msnd: Fix the default sample sizes (bsc#1051510).
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE()
  macro (bsc#1051510).
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
  (bsc#1051510).
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
  (bsc#1051510).
- ASoC: rt5514: Add the missing register in the readable table
  (bsc#1051510).
- ASoC: rt5514: Eliminate the noise in the ASRC case
  (bsc#1051510).
- ASoC: rt5514: Add the I2S ASRC support (bsc#1051510).
- commit 4eba9c8</changelog>
  <changelog author="wqu@suse.com" date="1538654407">- btrfs: scrub: Don't use inode page cache in
  scrub_handle_errored_block() (follow up for bsc#1108096).
- commit 3f91c84</changelog>
  <changelog author="tiwai@suse.de" date="1538654408">- smsc95xx: Check for Wake-on-LAN modes (bsc#1051510).
- smsc75xx: Check for Wake-on-LAN modes (bsc#1051510).
- r8152: Check for supported Wake-on-LAN Modes (bsc#1051510).
- sr9800: Check for supported Wake-on-LAN modes (bsc#1051510).
- lan78xx: Check for supported Wake-on-LAN modes (bsc#1051510).
- ax88179_178a: Check for supported Wake-on-LAN modes
  (bsc#1051510).
- mac80211: fix pending queue hang due to TX_DROP (bsc#1051510).
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
  (bsc#1051510).
- Input: elantech - enable middle button of touchpad on ThinkPad
  P72 (bsc#1051510).
- regulator: fix crash caused by null driver data (bsc#1051510).
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
  (bsc#1051510).
- intel_th: Fix device removal logic (bsc#1051510).
- NFC: Fix possible memory corruption when handling SHDLC I-Frame
  commands (bsc#1051510).
- platform/x86: alienware-wmi: Correct a memory leak
  (bsc#1051510).
- xhci: Fix use after free for URB cancellation on a reallocated
  endpoint (bsc#1051510).
- mei: ignore not found client in the enumeration (bsc#1051510).
- i2c: i801: Allow ACPI AML access I/O ports not reserved for
  SMBus (bsc#1051510).
- fbdev/via: fix defined but not used warning (bsc#1051510).
- video: goldfishfb: fix memory leak on driver remove
  (bsc#1051510).
- fbdev: Distinguish between interlaced and progressive modes
  (bsc#1051510).
- platform/x86: toshiba_acpi: Fix defined but not used build
  warnings (bsc#1051510).
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
  (bsc#1051510).
- input: rohm_bu21023: switch to i2c_lock_bus(...,
  I2C_LOCK_SEGMENT) (bsc#1051510).
- HID: hid-ntrig: add error handling for sysfs_create_group
  (bsc#1051510).
- mfd: ti_am335x_tscadc: Fix struct clk memory leak (bsc#1051510).
- mmc: sdhci: do not try to use 3.3V signaling if not supported
  (bsc#1051510).
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
  (bsc#1051510).
- parport: sunbpp: fix error return code (bsc#1051510).
- coresight: Handle errors in finding input/output ports
  (bsc#1051510).
- mei: bus: type promotion bug in mei_nfc_if_version()
  (bsc#1051510).
- gpio: pxa: Fix potential NULL dereference (bsc#1051510).
- gpiolib: Mark gpio_suffixes array with __maybe_unused
  (bsc#1051510).
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
  (bsc#1051510).
- crypto: sharah - Unregister correct algorithms for SAHARA 3
  (bsc#1051510).
- crypto: skcipher - Fix -Wstringop-truncation warnings
  (bsc#1051510).
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
  (bsc#1051510).
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 (bsc#1051510).
- mac80211: restrict delayed tailroom needed decrement
  (bsc#1051510).
- wlcore: Add missing PM call for
  wlcore_cmd_wait_for_event_or_timeout() (bsc#1051510).
- commit e266792</changelog>
  <changelog author="mbrugger@suse.com" date="1538654409">- arm64: Update config files. (bsc#1110716)
  Enable ST LPS25H pressure sensor.
- commit 69c6902</changelog>
  <changelog author="jack@suse.cz" date="1538654410">- patches.fixes/x86-memory_failure-Introduce-set-clear-_mce_nospec.patch:
  Fixup compilation breakage on s390 and arm due to missing
  clear_mce_nospec().
- commit faef795</changelog>
</package>
<package pkgid="5bb1a460924c8000efcae106c9955458ac47a927289885fd0a728d9d87885089" name="kernel-docs" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.19.3"/>
  <changelog author="fdmanana@suse.com" date="1538568000">- Btrfs: fix fsync after hole punching when using no-holes feature
  (bsc#1110642).
- commit 3f19b40</changelog>
  <changelog author="fdmanana@suse.com" date="1538568001">- Btrfs: fix loss of prealloc extents past i_size after fsync
  log replay (bsc#1110643).
- commit 974e057</changelog>
  <changelog author="fdmanana@suse.com" date="1538568002">- Btrfs: fix duplicate extents after fsync of file with prealloc
  extents (bsc#1110644).
- commit c4ec603</changelog>
  <changelog author="fdmanana@suse.com" date="1538568003">- Btrfs: fix return value on rename exchange failure
  (bsc#1110645).
- commit 532729c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568004">- Btrfs: sync log after logging new name (bsc#1110646).
- commit 7260d6b</changelog>
  <changelog author="fdmanana@suse.com" date="1538568005">- Btrfs: fix data corruption when deduplicating between different
  files (bsc#1110647).
- commit 669848c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568006">- btrfs: Remove unused parameters from various functions
  (bsc#1110649).
- commit c97c657</changelog>
  <changelog author="fdmanana@suse.com" date="1538568007">- Btrfs: fix send failure when root has deleted files still open
  (bsc#1110650).
- commit f52554d</changelog>
  <changelog author="jslaby@suse.cz" date="1538568008">- watchdog: Mark watchdog touch functions as notrace (git-fixes).
- commit 8b53193</changelog>
  <changelog author="neilb@suse.com" date="1538654400">- nfs/filelayout: fix oops when freeing filelayout segment
  (bsc#1105190).
- NFS/filelayout: Fix racy setting of fl-&gt;dsaddr in
  filelayout_check_deviceid() (bsc#1105190).
- commit d6d0fab</changelog>
  <changelog author="neilb@suse.com" date="1538654401">- VFS: don't test owner for NFS in set_posix_acl() (bsc#1103405).
- commit 36f977a</changelog>
  <changelog author="tiwai@suse.de" date="1538654402">- README.BRANCH: SLE15-SP1 branch maintainer changes
  Add ptesarik as co-maintainer, keep tiwai as the primary maintainer
- commit 83aea11</changelog>
  <changelog author="wqu@suse.com" date="1538654403">- btrfs: tests/qgroup: Fix wrong tree backref level (bsc#1107928).
- commit a5e154c</changelog>
  <changelog author="wqu@suse.com" date="1538654404">- btrfs: check-integrity: Fix NULL pointer dereference for
  degraded mount (bsc#1107947).
- commit 77b2277</changelog>
  <changelog author="wqu@suse.com" date="1538654405">- btrfs: scrub: Don't use inode pages for device replace (follow
  up for bsc#1108096).
- commit c865775</changelog>
  <changelog author="tiwai@suse.de" date="1538654406">- ASoC: cs4265: fix MMTLR Data switch control (bsc#1051510).
- ALSA: fireworks: fix memory leak of response buffer at error
  path (bsc#1051510).
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix
  I/O at error path (bsc#1051510).
- ALSA: emu10k1: fix possible info leak to userspace on
  SNDRV_EMU10K1_IOCTL_INFO (bsc#1051510).
- ALSA: bebob: use address returned by kmalloc() instead of
  kernel stack for streaming DMA mapping (bsc#1051510).
- ASoC: rt5514: Fix the issue of the delay volume applied
  (bsc#1051510).
- ASoC: dapm: Fix potential DAI widget pointer deref when linking
  DAIs (bsc#1051510).
- ALSA: msnd: Fix the default sample sizes (bsc#1051510).
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE()
  macro (bsc#1051510).
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
  (bsc#1051510).
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
  (bsc#1051510).
- ASoC: rt5514: Add the missing register in the readable table
  (bsc#1051510).
- ASoC: rt5514: Eliminate the noise in the ASRC case
  (bsc#1051510).
- ASoC: rt5514: Add the I2S ASRC support (bsc#1051510).
- commit 4eba9c8</changelog>
  <changelog author="wqu@suse.com" date="1538654407">- btrfs: scrub: Don't use inode page cache in
  scrub_handle_errored_block() (follow up for bsc#1108096).
- commit 3f91c84</changelog>
  <changelog author="tiwai@suse.de" date="1538654408">- smsc95xx: Check for Wake-on-LAN modes (bsc#1051510).
- smsc75xx: Check for Wake-on-LAN modes (bsc#1051510).
- r8152: Check for supported Wake-on-LAN Modes (bsc#1051510).
- sr9800: Check for supported Wake-on-LAN modes (bsc#1051510).
- lan78xx: Check for supported Wake-on-LAN modes (bsc#1051510).
- ax88179_178a: Check for supported Wake-on-LAN modes
  (bsc#1051510).
- mac80211: fix pending queue hang due to TX_DROP (bsc#1051510).
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
  (bsc#1051510).
- Input: elantech - enable middle button of touchpad on ThinkPad
  P72 (bsc#1051510).
- regulator: fix crash caused by null driver data (bsc#1051510).
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
  (bsc#1051510).
- intel_th: Fix device removal logic (bsc#1051510).
- NFC: Fix possible memory corruption when handling SHDLC I-Frame
  commands (bsc#1051510).
- platform/x86: alienware-wmi: Correct a memory leak
  (bsc#1051510).
- xhci: Fix use after free for URB cancellation on a reallocated
  endpoint (bsc#1051510).
- mei: ignore not found client in the enumeration (bsc#1051510).
- i2c: i801: Allow ACPI AML access I/O ports not reserved for
  SMBus (bsc#1051510).
- fbdev/via: fix defined but not used warning (bsc#1051510).
- video: goldfishfb: fix memory leak on driver remove
  (bsc#1051510).
- fbdev: Distinguish between interlaced and progressive modes
  (bsc#1051510).
- platform/x86: toshiba_acpi: Fix defined but not used build
  warnings (bsc#1051510).
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
  (bsc#1051510).
- input: rohm_bu21023: switch to i2c_lock_bus(...,
  I2C_LOCK_SEGMENT) (bsc#1051510).
- HID: hid-ntrig: add error handling for sysfs_create_group
  (bsc#1051510).
- mfd: ti_am335x_tscadc: Fix struct clk memory leak (bsc#1051510).
- mmc: sdhci: do not try to use 3.3V signaling if not supported
  (bsc#1051510).
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
  (bsc#1051510).
- parport: sunbpp: fix error return code (bsc#1051510).
- coresight: Handle errors in finding input/output ports
  (bsc#1051510).
- mei: bus: type promotion bug in mei_nfc_if_version()
  (bsc#1051510).
- gpio: pxa: Fix potential NULL dereference (bsc#1051510).
- gpiolib: Mark gpio_suffixes array with __maybe_unused
  (bsc#1051510).
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
  (bsc#1051510).
- crypto: sharah - Unregister correct algorithms for SAHARA 3
  (bsc#1051510).
- crypto: skcipher - Fix -Wstringop-truncation warnings
  (bsc#1051510).
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
  (bsc#1051510).
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 (bsc#1051510).
- mac80211: restrict delayed tailroom needed decrement
  (bsc#1051510).
- wlcore: Add missing PM call for
  wlcore_cmd_wait_for_event_or_timeout() (bsc#1051510).
- commit e266792</changelog>
  <changelog author="mbrugger@suse.com" date="1538654409">- arm64: Update config files. (bsc#1110716)
  Enable ST LPS25H pressure sensor.
- commit 69c6902</changelog>
  <changelog author="jack@suse.cz" date="1538654410">- patches.fixes/x86-memory_failure-Introduce-set-clear-_mce_nospec.patch:
  Fixup compilation breakage on s390 and arm due to missing
  clear_mce_nospec().
- commit faef795</changelog>
</package>
<package pkgid="391ca96b2833409bde2589712608009a83ed7bde82bf51a0d95f8b9eeb284db2" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.22.1"/>
  <changelog author="tiwai@suse.de" date="1539172800">- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell
  XPS 27 7760 (bsc#1051510).
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
  (bsc#1051510).
- crypto: mxs-dcp - Fix wait logic on chan threads (bsc#1051510).
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM
  ioctl (bsc#1051510).
- HID: add support for Apple Magic Keyboards (bsc#1051510).
- gpio: Fix crash due to registration race (bsc#1051510).
- gpiolib-acpi: Register GpioInt ACPI event handlers from a
  late_initcall (bsc#1051510).
- gpio: adp5588: Fix sleep-in-atomic-context bug (bsc#1051510).
- cfg80211: fix a type issue in
  ieee80211_chandef_to_operating_class() (bsc#1051510).
- Revert "gpio: set up initial state from .get_direction()"
  (bsc#1051510).
- gpio: mb86s70: Revert "Return error if requesting an already
  assigned gpio" (bsc#1051510).
- commit 2759d22</changelog>
  <changelog author="mbrugger@suse.com" date="1539172801">- arm64: Update config files.
  Enable SENSORS_RASPBERRYPI_HWMON
- commit 2a83945</changelog>
  <changelog author="mbrugger@suse.com" date="1539172802">- supported.conf: mark raspberrypi-hwmon as supported
- commit af8ddda</changelog>
  <changelog author="tiwai@suse.de" date="1539172803">- HID: hid-saitek: Add device ID for RAT 7 Contagion
  (bsc#1051510).
- mac80211: shorten the IBSS debug messages (bsc#1051510).
- mac80211: don't Tx a deauth frame if the AP forbade Tx
  (bsc#1051510).
- mac80211: Fix station bandwidth setting after channel switch
  (bsc#1051510).
- mac80211: fix a race between restart and CSA flows
  (bsc#1051510).
- mac80211: do not convert to A-MSDU if frag/subframe limited
  (bsc#1051510).
- mac80211: mesh: fix HWMP sequence numbering to follow standard
  (bsc#1051510).
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211_hwsim: require at least one channel (bsc#1051510).
- mac80211: Run TXQ teardown code before de-registering interfaces
  (bsc#1051510).
- hwmon: (adt7475) Make adt7475_read_word() return errors
  (bsc#1051510).
- hwmon: (ina2xx) fix sysfs shunt resistor read access
  (bsc#1051510).
- commit af836cd</changelog>
  <changelog author="tiwai@suse.de" date="1539172804">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- Revert "mwifiex: handle race during mwifiex_usb_disconnect"
  (bsc#1051510).
- media: videobuf-dma-sg: Fix dma_{sync,unmap}_sg() calls
  (bsc#1051510).
- Revert "mwifiex: fix incorrect ht capability problem"
  (bsc#1051510).
- PM / Domains: Fix genpd to deal with drivers returning 1 from
  - &gt;prepare() (bsc#1051510).
- Revert "pinctrl: sunxi: Don't enforce bias disable (for now)"
  (bsc#1051510).
- commit fb6c36a</changelog>
  <changelog author="tiwai@suse.de" date="1539172805">- blacklist.conf: Add blacklist of inapplicable revert commits
  They are either not applicable or requiring more backports that aren't
  suitable for SLE15
- commit 987dd44</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259200">- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk (bsc#1106110)
- commit 273a6bd</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259201">- blacklist.conf: Append 'drm/amd/pp: initialize result to before or'ing in data'
- commit d2edcd9</changelog>
  <changelog author="tiwai@suse.de" date="1539259202">- Disable DRM patches that broke vbox video driver KMP (bsc#1111076)
- commit 23943c6</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259203">- blacklist.conf: Append 'Revert "drm: Use a flexible array member for blob property data"'
- commit ddc67eb</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259204">- Fix Patch-mainline tags to refer to Linux release tag
  It is expected that Patch-mainline tags refer to a release tag
  in the Linux git tree, such as v4.15. Several patches contain a
  Patch-mainline tags that instead refer to a Linux version number,
  such as 4.15. This inconsistency complicates grepping and
  automation.
  871 of 18000 patches are affected by this problem.
- commit 1d81d26</changelog>
  <changelog author="bp@suse.de" date="1539259205">- crypto: ccp - add timeout support in the SEV command
  (bsc#1106838).
- commit 912dad4</changelog>
  <changelog author="tiwai@suse.de" date="1539345600">- Update config files: update forgotten armv7hl configs
- commit 7bae3a6</changelog>
  <changelog author="msuchanek@suse.de" date="1539345601">- powerpc/numa: Skip onlining a offline node in kdump path
  (bsc#1109784).
- commit df87e51</changelog>
  <changelog author="tiwai@suse.de" date="1539345602">- squashfs metadata 2: electric boogaloo (bsc#1051510).
- squashfs: more metadata hardening (bsc#1051510).
- squashfs: be more careful about metadata corruption
  (bsc#1051510).
- commit 9bfac39</changelog>
  <changelog author="hare@suse.de" date="1539345603">- scsi: qla2xxx: Move log messages before issuing command to
  firmware (bsc#1108870).
- scsi: qla2xxx: Fix for double free of SRB structure
  (bsc#1108870).
- scsi: qla2xxx: Fix recursive mailbox timeout (bsc#1108870).
- scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
  (bsc#1108870).
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
  (bsc#1108870).
- scsi: qla2xxx: Fix duplicate switch database entries
  (bsc#1108870).
- scsi: qla2xxx: Fix NVMe Target discovery (bsc#1108870).
- scsi: qla2xxx: Fix NVMe session hang on unload (bsc#1108870).
- scsi: qla2xxx: don't allow negative thresholds (bsc#1108870).
- commit 50fe149</changelog>
  <changelog author="tiwai@suse.de" date="1539345604">- Squashfs: Compute expected length from inode size rather than
  block length (bsc#1051510).
- commit 0c4a663</changelog>
  <changelog author="tiwai@suse.de" date="1539345605">- soreuseport: initialise timewait reuseport field (bsc#1051510).
- commit bda2dcc</changelog>
  <changelog author="tiwai@suse.de" date="1539345606">- rpc_pipefs: fix double-dput() (bsc#1051510).
- commit 1a15e26</changelog>
  <changelog author="hare@suse.de" date="1539345607">- scsi: qla2xxx: Return switch command on a timeout (bsc#1108870).
- commit 8e38f2a</changelog>
</package>
<package pkgid="5b99299048826a38f69f216fd6eee1544f4993ec99585d81949236cf75e60a8d" name="kernel-docs" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.22.1"/>
  <changelog author="tiwai@suse.de" date="1539172800">- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell
  XPS 27 7760 (bsc#1051510).
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
  (bsc#1051510).
- crypto: mxs-dcp - Fix wait logic on chan threads (bsc#1051510).
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM
  ioctl (bsc#1051510).
- HID: add support for Apple Magic Keyboards (bsc#1051510).
- gpio: Fix crash due to registration race (bsc#1051510).
- gpiolib-acpi: Register GpioInt ACPI event handlers from a
  late_initcall (bsc#1051510).
- gpio: adp5588: Fix sleep-in-atomic-context bug (bsc#1051510).
- cfg80211: fix a type issue in
  ieee80211_chandef_to_operating_class() (bsc#1051510).
- Revert "gpio: set up initial state from .get_direction()"
  (bsc#1051510).
- gpio: mb86s70: Revert "Return error if requesting an already
  assigned gpio" (bsc#1051510).
- commit 2759d22</changelog>
  <changelog author="mbrugger@suse.com" date="1539172801">- arm64: Update config files.
  Enable SENSORS_RASPBERRYPI_HWMON
- commit 2a83945</changelog>
  <changelog author="mbrugger@suse.com" date="1539172802">- supported.conf: mark raspberrypi-hwmon as supported
- commit af8ddda</changelog>
  <changelog author="tiwai@suse.de" date="1539172803">- HID: hid-saitek: Add device ID for RAT 7 Contagion
  (bsc#1051510).
- mac80211: shorten the IBSS debug messages (bsc#1051510).
- mac80211: don't Tx a deauth frame if the AP forbade Tx
  (bsc#1051510).
- mac80211: Fix station bandwidth setting after channel switch
  (bsc#1051510).
- mac80211: fix a race between restart and CSA flows
  (bsc#1051510).
- mac80211: do not convert to A-MSDU if frag/subframe limited
  (bsc#1051510).
- mac80211: mesh: fix HWMP sequence numbering to follow standard
  (bsc#1051510).
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211_hwsim: require at least one channel (bsc#1051510).
- mac80211: Run TXQ teardown code before de-registering interfaces
  (bsc#1051510).
- hwmon: (adt7475) Make adt7475_read_word() return errors
  (bsc#1051510).
- hwmon: (ina2xx) fix sysfs shunt resistor read access
  (bsc#1051510).
- commit af836cd</changelog>
  <changelog author="tiwai@suse.de" date="1539172804">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- Revert "mwifiex: handle race during mwifiex_usb_disconnect"
  (bsc#1051510).
- media: videobuf-dma-sg: Fix dma_{sync,unmap}_sg() calls
  (bsc#1051510).
- Revert "mwifiex: fix incorrect ht capability problem"
  (bsc#1051510).
- PM / Domains: Fix genpd to deal with drivers returning 1 from
  - &gt;prepare() (bsc#1051510).
- Revert "pinctrl: sunxi: Don't enforce bias disable (for now)"
  (bsc#1051510).
- commit fb6c36a</changelog>
  <changelog author="tiwai@suse.de" date="1539172805">- blacklist.conf: Add blacklist of inapplicable revert commits
  They are either not applicable or requiring more backports that aren't
  suitable for SLE15
- commit 987dd44</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259200">- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk (bsc#1106110)
- commit 273a6bd</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259201">- blacklist.conf: Append 'drm/amd/pp: initialize result to before or'ing in data'
- commit d2edcd9</changelog>
  <changelog author="tiwai@suse.de" date="1539259202">- Disable DRM patches that broke vbox video driver KMP (bsc#1111076)
- commit 23943c6</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259203">- blacklist.conf: Append 'Revert "drm: Use a flexible array member for blob property data"'
- commit ddc67eb</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259204">- Fix Patch-mainline tags to refer to Linux release tag
  It is expected that Patch-mainline tags refer to a release tag
  in the Linux git tree, such as v4.15. Several patches contain a
  Patch-mainline tags that instead refer to a Linux version number,
  such as 4.15. This inconsistency complicates grepping and
  automation.
  871 of 18000 patches are affected by this problem.
- commit 1d81d26</changelog>
  <changelog author="bp@suse.de" date="1539259205">- crypto: ccp - add timeout support in the SEV command
  (bsc#1106838).
- commit 912dad4</changelog>
  <changelog author="tiwai@suse.de" date="1539345600">- Update config files: update forgotten armv7hl configs
- commit 7bae3a6</changelog>
  <changelog author="msuchanek@suse.de" date="1539345601">- powerpc/numa: Skip onlining a offline node in kdump path
  (bsc#1109784).
- commit df87e51</changelog>
  <changelog author="tiwai@suse.de" date="1539345602">- squashfs metadata 2: electric boogaloo (bsc#1051510).
- squashfs: more metadata hardening (bsc#1051510).
- squashfs: be more careful about metadata corruption
  (bsc#1051510).
- commit 9bfac39</changelog>
  <changelog author="hare@suse.de" date="1539345603">- scsi: qla2xxx: Move log messages before issuing command to
  firmware (bsc#1108870).
- scsi: qla2xxx: Fix for double free of SRB structure
  (bsc#1108870).
- scsi: qla2xxx: Fix recursive mailbox timeout (bsc#1108870).
- scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
  (bsc#1108870).
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
  (bsc#1108870).
- scsi: qla2xxx: Fix duplicate switch database entries
  (bsc#1108870).
- scsi: qla2xxx: Fix NVMe Target discovery (bsc#1108870).
- scsi: qla2xxx: Fix NVMe session hang on unload (bsc#1108870).
- scsi: qla2xxx: don't allow negative thresholds (bsc#1108870).
- commit 50fe149</changelog>
  <changelog author="tiwai@suse.de" date="1539345604">- Squashfs: Compute expected length from inode size rather than
  block length (bsc#1051510).
- commit 0c4a663</changelog>
  <changelog author="tiwai@suse.de" date="1539345605">- soreuseport: initialise timewait reuseport field (bsc#1051510).
- commit bda2dcc</changelog>
  <changelog author="tiwai@suse.de" date="1539345606">- rpc_pipefs: fix double-dput() (bsc#1051510).
- commit 1a15e26</changelog>
  <changelog author="hare@suse.de" date="1539345607">- scsi: qla2xxx: Return switch command on a timeout (bsc#1108870).
- commit 8e38f2a</changelog>
</package>
<package pkgid="1bd3383b458e32022b03ad85cad4f439dfa92e75013189c2f681651cb128b38b" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.25.1"/>
  <changelog author="tiwai@suse.de" date="1540814400">- NFC: nfcmrvl_uart: fix OF child-node lookup (bsc#1051510).
- kernfs: update comment about kernfs_path() return value
  (bsc#1051510).
- usbip: tools: fix atoi() on non-null terminated string
  (bsc#1051510).
- USB: serial: cypress_m8: fix interrupt-out transfer length
  (bsc#1051510).
- usb: chipidea: Prevent unbalanced IRQ disable (bsc#1051510).
- commit 6c9d1e7</changelog>
  <changelog author="tiwai@suse.de" date="1540814401">- blacklist.conf: Add ASoC and USB entries that may break kABI
- commit 199a072</changelog>
  <changelog author="tiwai@suse.de" date="1540814402">- usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation
  (bsc#1051510).
- usb: gadget: fsl_udc_core: check allocation return value and
  cleanup on failure (bsc#1051510).
- commit c1b7b66</changelog>
  <changelog author="tiwai@suse.de" date="1540814403">- Refresh patch tag of upstreamed patches and move to sorted section
- commit a966b56</changelog>
  <changelog author="ohering@suse.de" date="1540900800">- move changes without Git-commit out of sorted section
- commit cbf049e</changelog>
  <changelog author="jslaby@suse.cz" date="1540900801">- random: rate limit unseeded randomness warnings (git-fixes).
- commit be52b92</changelog>
  <changelog author="jslaby@suse.cz" date="1540900802">- blacklist.conf: add a kasan fix
- commit c85e2d1</changelog>
  <changelog author="jdelvare@suse.de" date="1540900803">- Add reference to bsc#1104124 to
  patches.fixes/fs-aio-fix-the-increment-of-aio-nr-and-counting-agai.patch
- commit f60e64b</changelog>
  <changelog author="jslaby@suse.cz" date="1540900804">- tools build: fix # escaping in .cmd files for future Make
  (git-fixes).
- Kbuild: fix # escaping in .cmd files for future Make
  (git-fixes).
- commit 8f11ec3</changelog>
  <changelog author="tiwai@suse.de" date="1540900805">- drm/i915/dp: Link train Fallback on eDP only if fallback link
  BW can fit panel's native mode (bsc#1051510).
- drm/i915: Restore vblank interrupts earlier (bsc#1051510).
- commit daf120f</changelog>
  <changelog author="tiwai@suse.de" date="1540900806">- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
  (bsc#1051510).
- media: cx231xx: fix potential sign-extension overflow on large
  shift (bsc#1051510).
- media: pci: cx23885: handle adding to list failure
  (bsc#1051510).
- media: vsp1: Fix YCbCr planar formats pitch calculation
  (bsc#1051510).
- media: tvp5150: fix switch exit in set control handler
  (bsc#1051510).
- media: tvp5150: fix width alignment during set_selection()
  (bsc#1051510).
- media: em28xx: fix input name for Terratec AV 350 (bsc#1051510).
- media: em28xx: use a default format if TRY_FMT fails
  (bsc#1051510).
- media: tvp5150: avoid going past array on v4l2_querymenu()
  (bsc#1051510).
- media: dvb: fix compat ioctl translation (bsc#1051510).
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
  (bsc#1051510).
- commit 0831c5e</changelog>
  <changelog author="tiwai@suse.de" date="1540900807">- soc/tegra: pmc: Fix child-node lookup (bsc#1051510).
- serial: 8250: Fix clearing FIFOs in RS485 mode again
  (bsc#1051510).
- staging: comedi: ni_mio_common: protect register write overflow
  (bsc#1051510).
- iio: adc: at91: fix wrong channel number in triggered buffer
  mode (bsc#1051510).
- iio: adc: at91: fix acking DRDY irq on simple conversions
  (bsc#1051510).
- iio: adc: imx25-gcq: Fix leak of device_node in
  mx25_gcq_setup_cfgs() (bsc#1051510).
- commit 9f4f0cc</changelog>
  <changelog author="jthumshirn@suse.de" date="1540900808">- Refresh
  patches.fixes/0001-drm-amdgpu-powerplay-fix-missing-break-in-switch-sta.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Do-not-carry-error-code-in-HiBMC.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Don-t-overwrite-fb-helper-surfac.patch.
- Refresh
  patches.fixes/0001-drm-i915-audio-Hook-up-component-bindings-even-if-di.patch.
- Refresh
  patches.fixes/0001-drm-i915-gen9-Fix-initial-readout-for-Y-tiled-frameb.patch.
- Refresh
  patches.fixes/0001-drm-sti-do-not-remove-the-drm_bridge-that-was-never-.patch.
- Refresh
  patches.fixes/0001-drm-virtio-fix-bounds-check-in-virtio_gpu_cmd_get_ca.patch.
- commit 652fab5</changelog>
  <changelog author="tiwai@suse.de" date="1540987200">- drm/nouveau: Don't disable polling in fallback mode
  (bsc#1103356).
- Delete
  patches.suse/Revert-drm-nouveau-drm-therm-fan-add-a-fallback-if-n.
- commit aa0c431</changelog>
  <changelog author="tzimmermann@suse.de" date="1540987201">- Fix Patch-mainline for "drm/amdgpu: update tmr mc address"
  The Patch-mainline tag was incorrect. References is being updated as well.
- commit ce8535e</changelog>
  <changelog author="tiwai@suse.de" date="1540987202">- Workaround for mysterious NVMe breakage with i915 CFL
  (bsc#1111040).
- commit 0fa5877</changelog>
  <changelog author="jthumshirn@suse.de" date="1540987203">- libnvdimm, label: Fix sparse warning (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Use namespace index data to reduce number of label reads
  needed (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Split label init out from the logic for getting config
  data (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Remove empty if statement (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Clarify comment in sizeof_namespace_index (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Sanity check labeloff (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- libnvdimm, dimm: Maximize label transfer size (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7
  (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- commit 5a4eeb4</changelog>
  <changelog author="jlee@suse.com" date="1540987204">- x86/boot/KASLR: Work around firmware bugs by excluding
  EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR's choice
  (bnc#1112878).
- commit d45cd78</changelog>
  <changelog author="tiwai@suse.de" date="1540987205">- blacklist.conf: Add a few wifi driver entries that can't be applied
- commit 662fc68</changelog>
  <changelog author="tiwai@suse.de" date="1540987206">- spi/bcm63xx-hsspi: keep pll clk enabled (bsc#1051510).
- spi: sh-msiof: fix deferred probing (bsc#1051510).
- spi: bcm-qspi: switch back to reading flash using smaller chunks
  (bsc#1051510).
- commit f773242</changelog>
</package>
<package pkgid="0441af21350b88e999bb8118b5c58aea919c0225480f4f8e43f46849624e449a" name="kernel-docs" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.25.1"/>
  <changelog author="tiwai@suse.de" date="1540814400">- NFC: nfcmrvl_uart: fix OF child-node lookup (bsc#1051510).
- kernfs: update comment about kernfs_path() return value
  (bsc#1051510).
- usbip: tools: fix atoi() on non-null terminated string
  (bsc#1051510).
- USB: serial: cypress_m8: fix interrupt-out transfer length
  (bsc#1051510).
- usb: chipidea: Prevent unbalanced IRQ disable (bsc#1051510).
- commit 6c9d1e7</changelog>
  <changelog author="tiwai@suse.de" date="1540814401">- blacklist.conf: Add ASoC and USB entries that may break kABI
- commit 199a072</changelog>
  <changelog author="tiwai@suse.de" date="1540814402">- usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation
  (bsc#1051510).
- usb: gadget: fsl_udc_core: check allocation return value and
  cleanup on failure (bsc#1051510).
- commit c1b7b66</changelog>
  <changelog author="tiwai@suse.de" date="1540814403">- Refresh patch tag of upstreamed patches and move to sorted section
- commit a966b56</changelog>
  <changelog author="ohering@suse.de" date="1540900800">- move changes without Git-commit out of sorted section
- commit cbf049e</changelog>
  <changelog author="jslaby@suse.cz" date="1540900801">- random: rate limit unseeded randomness warnings (git-fixes).
- commit be52b92</changelog>
  <changelog author="jslaby@suse.cz" date="1540900802">- blacklist.conf: add a kasan fix
- commit c85e2d1</changelog>
  <changelog author="jdelvare@suse.de" date="1540900803">- Add reference to bsc#1104124 to
  patches.fixes/fs-aio-fix-the-increment-of-aio-nr-and-counting-agai.patch
- commit f60e64b</changelog>
  <changelog author="jslaby@suse.cz" date="1540900804">- tools build: fix # escaping in .cmd files for future Make
  (git-fixes).
- Kbuild: fix # escaping in .cmd files for future Make
  (git-fixes).
- commit 8f11ec3</changelog>
  <changelog author="tiwai@suse.de" date="1540900805">- drm/i915/dp: Link train Fallback on eDP only if fallback link
  BW can fit panel's native mode (bsc#1051510).
- drm/i915: Restore vblank interrupts earlier (bsc#1051510).
- commit daf120f</changelog>
  <changelog author="tiwai@suse.de" date="1540900806">- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
  (bsc#1051510).
- media: cx231xx: fix potential sign-extension overflow on large
  shift (bsc#1051510).
- media: pci: cx23885: handle adding to list failure
  (bsc#1051510).
- media: vsp1: Fix YCbCr planar formats pitch calculation
  (bsc#1051510).
- media: tvp5150: fix switch exit in set control handler
  (bsc#1051510).
- media: tvp5150: fix width alignment during set_selection()
  (bsc#1051510).
- media: em28xx: fix input name for Terratec AV 350 (bsc#1051510).
- media: em28xx: use a default format if TRY_FMT fails
  (bsc#1051510).
- media: tvp5150: avoid going past array on v4l2_querymenu()
  (bsc#1051510).
- media: dvb: fix compat ioctl translation (bsc#1051510).
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
  (bsc#1051510).
- commit 0831c5e</changelog>
  <changelog author="tiwai@suse.de" date="1540900807">- soc/tegra: pmc: Fix child-node lookup (bsc#1051510).
- serial: 8250: Fix clearing FIFOs in RS485 mode again
  (bsc#1051510).
- staging: comedi: ni_mio_common: protect register write overflow
  (bsc#1051510).
- iio: adc: at91: fix wrong channel number in triggered buffer
  mode (bsc#1051510).
- iio: adc: at91: fix acking DRDY irq on simple conversions
  (bsc#1051510).
- iio: adc: imx25-gcq: Fix leak of device_node in
  mx25_gcq_setup_cfgs() (bsc#1051510).
- commit 9f4f0cc</changelog>
  <changelog author="jthumshirn@suse.de" date="1540900808">- Refresh
  patches.fixes/0001-drm-amdgpu-powerplay-fix-missing-break-in-switch-sta.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Do-not-carry-error-code-in-HiBMC.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Don-t-overwrite-fb-helper-surfac.patch.
- Refresh
  patches.fixes/0001-drm-i915-audio-Hook-up-component-bindings-even-if-di.patch.
- Refresh
  patches.fixes/0001-drm-i915-gen9-Fix-initial-readout-for-Y-tiled-frameb.patch.
- Refresh
  patches.fixes/0001-drm-sti-do-not-remove-the-drm_bridge-that-was-never-.patch.
- Refresh
  patches.fixes/0001-drm-virtio-fix-bounds-check-in-virtio_gpu_cmd_get_ca.patch.
- commit 652fab5</changelog>
  <changelog author="tiwai@suse.de" date="1540987200">- drm/nouveau: Don't disable polling in fallback mode
  (bsc#1103356).
- Delete
  patches.suse/Revert-drm-nouveau-drm-therm-fan-add-a-fallback-if-n.
- commit aa0c431</changelog>
  <changelog author="tzimmermann@suse.de" date="1540987201">- Fix Patch-mainline for "drm/amdgpu: update tmr mc address"
  The Patch-mainline tag was incorrect. References is being updated as well.
- commit ce8535e</changelog>
  <changelog author="tiwai@suse.de" date="1540987202">- Workaround for mysterious NVMe breakage with i915 CFL
  (bsc#1111040).
- commit 0fa5877</changelog>
  <changelog author="jthumshirn@suse.de" date="1540987203">- libnvdimm, label: Fix sparse warning (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Use namespace index data to reduce number of label reads
  needed (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Split label init out from the logic for getting config
  data (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Remove empty if statement (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Clarify comment in sizeof_namespace_index (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Sanity check labeloff (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- libnvdimm, dimm: Maximize label transfer size (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7
  (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- commit 5a4eeb4</changelog>
  <changelog author="jlee@suse.com" date="1540987204">- x86/boot/KASLR: Work around firmware bugs by excluding
  EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR's choice
  (bnc#1112878).
- commit d45cd78</changelog>
  <changelog author="tiwai@suse.de" date="1540987205">- blacklist.conf: Add a few wifi driver entries that can't be applied
- commit 662fc68</changelog>
  <changelog author="tiwai@suse.de" date="1540987206">- spi/bcm63xx-hsspi: keep pll clk enabled (bsc#1051510).
- spi: sh-msiof: fix deferred probing (bsc#1051510).
- spi: bcm-qspi: switch back to reading flash using smaller chunks
  (bsc#1051510).
- commit f773242</changelog>
</package>
<package pkgid="aae84ed691e1f525a8e3248b381389f7064a939ff250409cef0cd4095d3e2d45" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="78019ec6d8c5c3fe3c3916b6fdd41e80b51829bdbd7a080e9a3f92a175ac5954" name="kernel-docs" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="8c8bf6bf9a94d2d04fda8c4a94bcc62a6fdf249234360999a343f81489e38d82" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="64b260873fb2b2ff12fad1f0f4e31bcd19fbe982bf44062942973904c14b357d" name="kernel-docs" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="1b073677ad6bfcbb3bdfe7b3d614d8c0a178eabf4a3cf2ccbc907996914bfa51" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="361529478912cbd89f1ef3d1693e23b4032cc295f1f6848bd340a0e8f400082a" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="0aa891860689afe6d4d74104ad2ccd75cd7c1f134d1ca1d1aad8a7e5ae0e0a84" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="e7fd5feda97d802dc1e479fa13367bf53682e277e4580cf1fc40f8815feedc14" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.19.3"/>
  <changelog author="fdmanana@suse.com" date="1538568000">- Btrfs: fix fsync after hole punching when using no-holes feature
  (bsc#1110642).
- commit 3f19b40</changelog>
  <changelog author="fdmanana@suse.com" date="1538568001">- Btrfs: fix loss of prealloc extents past i_size after fsync
  log replay (bsc#1110643).
- commit 974e057</changelog>
  <changelog author="fdmanana@suse.com" date="1538568002">- Btrfs: fix duplicate extents after fsync of file with prealloc
  extents (bsc#1110644).
- commit c4ec603</changelog>
  <changelog author="fdmanana@suse.com" date="1538568003">- Btrfs: fix return value on rename exchange failure
  (bsc#1110645).
- commit 532729c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568004">- Btrfs: sync log after logging new name (bsc#1110646).
- commit 7260d6b</changelog>
  <changelog author="fdmanana@suse.com" date="1538568005">- Btrfs: fix data corruption when deduplicating between different
  files (bsc#1110647).
- commit 669848c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568006">- btrfs: Remove unused parameters from various functions
  (bsc#1110649).
- commit c97c657</changelog>
  <changelog author="fdmanana@suse.com" date="1538568007">- Btrfs: fix send failure when root has deleted files still open
  (bsc#1110650).
- commit f52554d</changelog>
  <changelog author="jslaby@suse.cz" date="1538568008">- watchdog: Mark watchdog touch functions as notrace (git-fixes).
- commit 8b53193</changelog>
  <changelog author="neilb@suse.com" date="1538654400">- nfs/filelayout: fix oops when freeing filelayout segment
  (bsc#1105190).
- NFS/filelayout: Fix racy setting of fl-&gt;dsaddr in
  filelayout_check_deviceid() (bsc#1105190).
- commit d6d0fab</changelog>
  <changelog author="neilb@suse.com" date="1538654401">- VFS: don't test owner for NFS in set_posix_acl() (bsc#1103405).
- commit 36f977a</changelog>
  <changelog author="tiwai@suse.de" date="1538654402">- README.BRANCH: SLE15-SP1 branch maintainer changes
  Add ptesarik as co-maintainer, keep tiwai as the primary maintainer
- commit 83aea11</changelog>
  <changelog author="wqu@suse.com" date="1538654403">- btrfs: tests/qgroup: Fix wrong tree backref level (bsc#1107928).
- commit a5e154c</changelog>
  <changelog author="wqu@suse.com" date="1538654404">- btrfs: check-integrity: Fix NULL pointer dereference for
  degraded mount (bsc#1107947).
- commit 77b2277</changelog>
  <changelog author="wqu@suse.com" date="1538654405">- btrfs: scrub: Don't use inode pages for device replace (follow
  up for bsc#1108096).
- commit c865775</changelog>
  <changelog author="tiwai@suse.de" date="1538654406">- ASoC: cs4265: fix MMTLR Data switch control (bsc#1051510).
- ALSA: fireworks: fix memory leak of response buffer at error
  path (bsc#1051510).
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix
  I/O at error path (bsc#1051510).
- ALSA: emu10k1: fix possible info leak to userspace on
  SNDRV_EMU10K1_IOCTL_INFO (bsc#1051510).
- ALSA: bebob: use address returned by kmalloc() instead of
  kernel stack for streaming DMA mapping (bsc#1051510).
- ASoC: rt5514: Fix the issue of the delay volume applied
  (bsc#1051510).
- ASoC: dapm: Fix potential DAI widget pointer deref when linking
  DAIs (bsc#1051510).
- ALSA: msnd: Fix the default sample sizes (bsc#1051510).
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE()
  macro (bsc#1051510).
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
  (bsc#1051510).
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
  (bsc#1051510).
- ASoC: rt5514: Add the missing register in the readable table
  (bsc#1051510).
- ASoC: rt5514: Eliminate the noise in the ASRC case
  (bsc#1051510).
- ASoC: rt5514: Add the I2S ASRC support (bsc#1051510).
- commit 4eba9c8</changelog>
  <changelog author="wqu@suse.com" date="1538654407">- btrfs: scrub: Don't use inode page cache in
  scrub_handle_errored_block() (follow up for bsc#1108096).
- commit 3f91c84</changelog>
  <changelog author="tiwai@suse.de" date="1538654408">- smsc95xx: Check for Wake-on-LAN modes (bsc#1051510).
- smsc75xx: Check for Wake-on-LAN modes (bsc#1051510).
- r8152: Check for supported Wake-on-LAN Modes (bsc#1051510).
- sr9800: Check for supported Wake-on-LAN modes (bsc#1051510).
- lan78xx: Check for supported Wake-on-LAN modes (bsc#1051510).
- ax88179_178a: Check for supported Wake-on-LAN modes
  (bsc#1051510).
- mac80211: fix pending queue hang due to TX_DROP (bsc#1051510).
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
  (bsc#1051510).
- Input: elantech - enable middle button of touchpad on ThinkPad
  P72 (bsc#1051510).
- regulator: fix crash caused by null driver data (bsc#1051510).
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
  (bsc#1051510).
- intel_th: Fix device removal logic (bsc#1051510).
- NFC: Fix possible memory corruption when handling SHDLC I-Frame
  commands (bsc#1051510).
- platform/x86: alienware-wmi: Correct a memory leak
  (bsc#1051510).
- xhci: Fix use after free for URB cancellation on a reallocated
  endpoint (bsc#1051510).
- mei: ignore not found client in the enumeration (bsc#1051510).
- i2c: i801: Allow ACPI AML access I/O ports not reserved for
  SMBus (bsc#1051510).
- fbdev/via: fix defined but not used warning (bsc#1051510).
- video: goldfishfb: fix memory leak on driver remove
  (bsc#1051510).
- fbdev: Distinguish between interlaced and progressive modes
  (bsc#1051510).
- platform/x86: toshiba_acpi: Fix defined but not used build
  warnings (bsc#1051510).
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
  (bsc#1051510).
- input: rohm_bu21023: switch to i2c_lock_bus(...,
  I2C_LOCK_SEGMENT) (bsc#1051510).
- HID: hid-ntrig: add error handling for sysfs_create_group
  (bsc#1051510).
- mfd: ti_am335x_tscadc: Fix struct clk memory leak (bsc#1051510).
- mmc: sdhci: do not try to use 3.3V signaling if not supported
  (bsc#1051510).
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
  (bsc#1051510).
- parport: sunbpp: fix error return code (bsc#1051510).
- coresight: Handle errors in finding input/output ports
  (bsc#1051510).
- mei: bus: type promotion bug in mei_nfc_if_version()
  (bsc#1051510).
- gpio: pxa: Fix potential NULL dereference (bsc#1051510).
- gpiolib: Mark gpio_suffixes array with __maybe_unused
  (bsc#1051510).
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
  (bsc#1051510).
- crypto: sharah - Unregister correct algorithms for SAHARA 3
  (bsc#1051510).
- crypto: skcipher - Fix -Wstringop-truncation warnings
  (bsc#1051510).
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
  (bsc#1051510).
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 (bsc#1051510).
- mac80211: restrict delayed tailroom needed decrement
  (bsc#1051510).
- wlcore: Add missing PM call for
  wlcore_cmd_wait_for_event_or_timeout() (bsc#1051510).
- commit e266792</changelog>
  <changelog author="mbrugger@suse.com" date="1538654409">- arm64: Update config files. (bsc#1110716)
  Enable ST LPS25H pressure sensor.
- commit 69c6902</changelog>
  <changelog author="jack@suse.cz" date="1538654410">- patches.fixes/x86-memory_failure-Introduce-set-clear-_mce_nospec.patch:
  Fixup compilation breakage on s390 and arm due to missing
  clear_mce_nospec().
- commit faef795</changelog>
</package>
<package pkgid="de87a2905bacb9ac4b2b5db34cae6ba2e3cf3e43bdb80bd91420230418be8f98" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.22.1"/>
  <changelog author="tiwai@suse.de" date="1539172800">- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell
  XPS 27 7760 (bsc#1051510).
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
  (bsc#1051510).
- crypto: mxs-dcp - Fix wait logic on chan threads (bsc#1051510).
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM
  ioctl (bsc#1051510).
- HID: add support for Apple Magic Keyboards (bsc#1051510).
- gpio: Fix crash due to registration race (bsc#1051510).
- gpiolib-acpi: Register GpioInt ACPI event handlers from a
  late_initcall (bsc#1051510).
- gpio: adp5588: Fix sleep-in-atomic-context bug (bsc#1051510).
- cfg80211: fix a type issue in
  ieee80211_chandef_to_operating_class() (bsc#1051510).
- Revert "gpio: set up initial state from .get_direction()"
  (bsc#1051510).
- gpio: mb86s70: Revert "Return error if requesting an already
  assigned gpio" (bsc#1051510).
- commit 2759d22</changelog>
  <changelog author="mbrugger@suse.com" date="1539172801">- arm64: Update config files.
  Enable SENSORS_RASPBERRYPI_HWMON
- commit 2a83945</changelog>
  <changelog author="mbrugger@suse.com" date="1539172802">- supported.conf: mark raspberrypi-hwmon as supported
- commit af8ddda</changelog>
  <changelog author="tiwai@suse.de" date="1539172803">- HID: hid-saitek: Add device ID for RAT 7 Contagion
  (bsc#1051510).
- mac80211: shorten the IBSS debug messages (bsc#1051510).
- mac80211: don't Tx a deauth frame if the AP forbade Tx
  (bsc#1051510).
- mac80211: Fix station bandwidth setting after channel switch
  (bsc#1051510).
- mac80211: fix a race between restart and CSA flows
  (bsc#1051510).
- mac80211: do not convert to A-MSDU if frag/subframe limited
  (bsc#1051510).
- mac80211: mesh: fix HWMP sequence numbering to follow standard
  (bsc#1051510).
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211_hwsim: require at least one channel (bsc#1051510).
- mac80211: Run TXQ teardown code before de-registering interfaces
  (bsc#1051510).
- hwmon: (adt7475) Make adt7475_read_word() return errors
  (bsc#1051510).
- hwmon: (ina2xx) fix sysfs shunt resistor read access
  (bsc#1051510).
- commit af836cd</changelog>
  <changelog author="tiwai@suse.de" date="1539172804">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- Revert "mwifiex: handle race during mwifiex_usb_disconnect"
  (bsc#1051510).
- media: videobuf-dma-sg: Fix dma_{sync,unmap}_sg() calls
  (bsc#1051510).
- Revert "mwifiex: fix incorrect ht capability problem"
  (bsc#1051510).
- PM / Domains: Fix genpd to deal with drivers returning 1 from
  - &gt;prepare() (bsc#1051510).
- Revert "pinctrl: sunxi: Don't enforce bias disable (for now)"
  (bsc#1051510).
- commit fb6c36a</changelog>
  <changelog author="tiwai@suse.de" date="1539172805">- blacklist.conf: Add blacklist of inapplicable revert commits
  They are either not applicable or requiring more backports that aren't
  suitable for SLE15
- commit 987dd44</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259200">- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk (bsc#1106110)
- commit 273a6bd</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259201">- blacklist.conf: Append 'drm/amd/pp: initialize result to before or'ing in data'
- commit d2edcd9</changelog>
  <changelog author="tiwai@suse.de" date="1539259202">- Disable DRM patches that broke vbox video driver KMP (bsc#1111076)
- commit 23943c6</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259203">- blacklist.conf: Append 'Revert "drm: Use a flexible array member for blob property data"'
- commit ddc67eb</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259204">- Fix Patch-mainline tags to refer to Linux release tag
  It is expected that Patch-mainline tags refer to a release tag
  in the Linux git tree, such as v4.15. Several patches contain a
  Patch-mainline tags that instead refer to a Linux version number,
  such as 4.15. This inconsistency complicates grepping and
  automation.
  871 of 18000 patches are affected by this problem.
- commit 1d81d26</changelog>
  <changelog author="bp@suse.de" date="1539259205">- crypto: ccp - add timeout support in the SEV command
  (bsc#1106838).
- commit 912dad4</changelog>
  <changelog author="tiwai@suse.de" date="1539345600">- Update config files: update forgotten armv7hl configs
- commit 7bae3a6</changelog>
  <changelog author="msuchanek@suse.de" date="1539345601">- powerpc/numa: Skip onlining a offline node in kdump path
  (bsc#1109784).
- commit df87e51</changelog>
  <changelog author="tiwai@suse.de" date="1539345602">- squashfs metadata 2: electric boogaloo (bsc#1051510).
- squashfs: more metadata hardening (bsc#1051510).
- squashfs: be more careful about metadata corruption
  (bsc#1051510).
- commit 9bfac39</changelog>
  <changelog author="hare@suse.de" date="1539345603">- scsi: qla2xxx: Move log messages before issuing command to
  firmware (bsc#1108870).
- scsi: qla2xxx: Fix for double free of SRB structure
  (bsc#1108870).
- scsi: qla2xxx: Fix recursive mailbox timeout (bsc#1108870).
- scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
  (bsc#1108870).
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
  (bsc#1108870).
- scsi: qla2xxx: Fix duplicate switch database entries
  (bsc#1108870).
- scsi: qla2xxx: Fix NVMe Target discovery (bsc#1108870).
- scsi: qla2xxx: Fix NVMe session hang on unload (bsc#1108870).
- scsi: qla2xxx: don't allow negative thresholds (bsc#1108870).
- commit 50fe149</changelog>
  <changelog author="tiwai@suse.de" date="1539345604">- Squashfs: Compute expected length from inode size rather than
  block length (bsc#1051510).
- commit 0c4a663</changelog>
  <changelog author="tiwai@suse.de" date="1539345605">- soreuseport: initialise timewait reuseport field (bsc#1051510).
- commit bda2dcc</changelog>
  <changelog author="tiwai@suse.de" date="1539345606">- rpc_pipefs: fix double-dput() (bsc#1051510).
- commit 1a15e26</changelog>
  <changelog author="hare@suse.de" date="1539345607">- scsi: qla2xxx: Return switch command on a timeout (bsc#1108870).
- commit 8e38f2a</changelog>
</package>
<package pkgid="f6812c3143f8de715c9f4051bdbf81b8b919561631dcc0d8f149aee578dadbcb" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.25.1"/>
  <changelog author="tiwai@suse.de" date="1540814400">- NFC: nfcmrvl_uart: fix OF child-node lookup (bsc#1051510).
- kernfs: update comment about kernfs_path() return value
  (bsc#1051510).
- usbip: tools: fix atoi() on non-null terminated string
  (bsc#1051510).
- USB: serial: cypress_m8: fix interrupt-out transfer length
  (bsc#1051510).
- usb: chipidea: Prevent unbalanced IRQ disable (bsc#1051510).
- commit 6c9d1e7</changelog>
  <changelog author="tiwai@suse.de" date="1540814401">- blacklist.conf: Add ASoC and USB entries that may break kABI
- commit 199a072</changelog>
  <changelog author="tiwai@suse.de" date="1540814402">- usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation
  (bsc#1051510).
- usb: gadget: fsl_udc_core: check allocation return value and
  cleanup on failure (bsc#1051510).
- commit c1b7b66</changelog>
  <changelog author="tiwai@suse.de" date="1540814403">- Refresh patch tag of upstreamed patches and move to sorted section
- commit a966b56</changelog>
  <changelog author="ohering@suse.de" date="1540900800">- move changes without Git-commit out of sorted section
- commit cbf049e</changelog>
  <changelog author="jslaby@suse.cz" date="1540900801">- random: rate limit unseeded randomness warnings (git-fixes).
- commit be52b92</changelog>
  <changelog author="jslaby@suse.cz" date="1540900802">- blacklist.conf: add a kasan fix
- commit c85e2d1</changelog>
  <changelog author="jdelvare@suse.de" date="1540900803">- Add reference to bsc#1104124 to
  patches.fixes/fs-aio-fix-the-increment-of-aio-nr-and-counting-agai.patch
- commit f60e64b</changelog>
  <changelog author="jslaby@suse.cz" date="1540900804">- tools build: fix # escaping in .cmd files for future Make
  (git-fixes).
- Kbuild: fix # escaping in .cmd files for future Make
  (git-fixes).
- commit 8f11ec3</changelog>
  <changelog author="tiwai@suse.de" date="1540900805">- drm/i915/dp: Link train Fallback on eDP only if fallback link
  BW can fit panel's native mode (bsc#1051510).
- drm/i915: Restore vblank interrupts earlier (bsc#1051510).
- commit daf120f</changelog>
  <changelog author="tiwai@suse.de" date="1540900806">- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
  (bsc#1051510).
- media: cx231xx: fix potential sign-extension overflow on large
  shift (bsc#1051510).
- media: pci: cx23885: handle adding to list failure
  (bsc#1051510).
- media: vsp1: Fix YCbCr planar formats pitch calculation
  (bsc#1051510).
- media: tvp5150: fix switch exit in set control handler
  (bsc#1051510).
- media: tvp5150: fix width alignment during set_selection()
  (bsc#1051510).
- media: em28xx: fix input name for Terratec AV 350 (bsc#1051510).
- media: em28xx: use a default format if TRY_FMT fails
  (bsc#1051510).
- media: tvp5150: avoid going past array on v4l2_querymenu()
  (bsc#1051510).
- media: dvb: fix compat ioctl translation (bsc#1051510).
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
  (bsc#1051510).
- commit 0831c5e</changelog>
  <changelog author="tiwai@suse.de" date="1540900807">- soc/tegra: pmc: Fix child-node lookup (bsc#1051510).
- serial: 8250: Fix clearing FIFOs in RS485 mode again
  (bsc#1051510).
- staging: comedi: ni_mio_common: protect register write overflow
  (bsc#1051510).
- iio: adc: at91: fix wrong channel number in triggered buffer
  mode (bsc#1051510).
- iio: adc: at91: fix acking DRDY irq on simple conversions
  (bsc#1051510).
- iio: adc: imx25-gcq: Fix leak of device_node in
  mx25_gcq_setup_cfgs() (bsc#1051510).
- commit 9f4f0cc</changelog>
  <changelog author="jthumshirn@suse.de" date="1540900808">- Refresh
  patches.fixes/0001-drm-amdgpu-powerplay-fix-missing-break-in-switch-sta.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Do-not-carry-error-code-in-HiBMC.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Don-t-overwrite-fb-helper-surfac.patch.
- Refresh
  patches.fixes/0001-drm-i915-audio-Hook-up-component-bindings-even-if-di.patch.
- Refresh
  patches.fixes/0001-drm-i915-gen9-Fix-initial-readout-for-Y-tiled-frameb.patch.
- Refresh
  patches.fixes/0001-drm-sti-do-not-remove-the-drm_bridge-that-was-never-.patch.
- Refresh
  patches.fixes/0001-drm-virtio-fix-bounds-check-in-virtio_gpu_cmd_get_ca.patch.
- commit 652fab5</changelog>
  <changelog author="tiwai@suse.de" date="1540987200">- drm/nouveau: Don't disable polling in fallback mode
  (bsc#1103356).
- Delete
  patches.suse/Revert-drm-nouveau-drm-therm-fan-add-a-fallback-if-n.
- commit aa0c431</changelog>
  <changelog author="tzimmermann@suse.de" date="1540987201">- Fix Patch-mainline for "drm/amdgpu: update tmr mc address"
  The Patch-mainline tag was incorrect. References is being updated as well.
- commit ce8535e</changelog>
  <changelog author="tiwai@suse.de" date="1540987202">- Workaround for mysterious NVMe breakage with i915 CFL
  (bsc#1111040).
- commit 0fa5877</changelog>
  <changelog author="jthumshirn@suse.de" date="1540987203">- libnvdimm, label: Fix sparse warning (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Use namespace index data to reduce number of label reads
  needed (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Split label init out from the logic for getting config
  data (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Remove empty if statement (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Clarify comment in sizeof_namespace_index (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Sanity check labeloff (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- libnvdimm, dimm: Maximize label transfer size (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7
  (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- commit 5a4eeb4</changelog>
  <changelog author="jlee@suse.com" date="1540987204">- x86/boot/KASLR: Work around firmware bugs by excluding
  EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR's choice
  (bnc#1112878).
- commit d45cd78</changelog>
  <changelog author="tiwai@suse.de" date="1540987205">- blacklist.conf: Add a few wifi driver entries that can't be applied
- commit 662fc68</changelog>
  <changelog author="tiwai@suse.de" date="1540987206">- spi/bcm63xx-hsspi: keep pll clk enabled (bsc#1051510).
- spi: sh-msiof: fix deferred probing (bsc#1051510).
- spi: bcm-qspi: switch back to reading flash using smaller chunks
  (bsc#1051510).
- commit f773242</changelog>
</package>
<package pkgid="a1b9df6a07c263eed8ff11ead2a44288271d378b880f4b1f2599878a29c5a175" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="7d313659362a7d78d8f8c1ce1d4ff5acc5e542848d495bff11a51c4cf1664bc8" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="c5c0e356e8678545dc4993afc7267301dd524e2c1ac99debaeeeb99bacf53a5a" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="20180525" rel="lp150.2.3.1"/>
  <changelog author="tiwai@suse.de" date="1511179200">- Remove iwlwifi-*-34.ucode since they seem breaking with 4.13.x
  TW kernel (bsc#1068838)</changelog>
  <changelog author="mpluskal@suse.com" date="1512043200">- Update to version 20171125:
  * brcm: update firmware for bcm4358
  * brcm: update firmware for bcm4356
  * brcm: update firmware for bcm4354
  * brcm: introduce firmware for bcm43430 revision 0
  * brcm: update firmware for bcm4339
  * Mellanox: Add new mlxsw_spectrum firmware 13.1530.152
  * WHENCE: Add missing entry for mlxsw_spectrum firmware
  * WHENCE: Fix typo in entry for iwlwifi-8265-34.ucode
  * s2255drv: f2255usb: firmware version 1.2.8
  * amdgpu: add new CP firmware for polaris chips
  * qed: Add firmware 8.33.1.0
  * qcom: add venus firmware files for v4.2
  * qcom: add firmware files for Adreno a530
  * iwlwifi: add firmware version 34 for new 9000 series
  * linux-firmware: liquidio: update firmware to v1.7.0
  * linux-firmware: intel: Update Geminilake audio firmware
  * iwlwifi: add firmware version 33 for new 9000 series
  * iwlwifi: add new firmware version 34 for 8000C and 8265
  * iwlwifi: update firmwares for 3160, 3168, 7260, 7265 and 7265D
  * iwlwifi: update firmwares for 3160, 3168, 7265D, 8000C and 8265
  * linux-firmware: DMC firmware for kabylake v1.04
  * linux-firmware: update Marvell PCIe-USB8997 firmware image
  * linux-firmware: GuC firmware for kabylake v9.39
  * linux-firmware: GuC firmware for Broxton v9.29
  * linux-firmware: GuC firmware for Skylake v9.33
  * linux-firmware/i915: Add Cannonlake DMC version 1.06
  * linux-firmware/i915: Add Geminilake DMC version 1.04
  * WHENCE: Add new qed firmware
  * WHENCE: Add new radeon firmware
  * WHENCE: Fix syntax error for iwlwifi-8265-31.ucode entry
  * Revert "ath10k: QCA988X hw2.0: update firmware to 10.2.4.70.63-2"
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00051-QCARMSWP-1
  * cxgb4: update firmware to revision 1.16.63.0
  * linux-firmware: update Marvell PCIe-USB8997 firmware image
  * linux-firmware: update Marvell PCIe-USB8897-A2 firmware image
  * Drop intel wifi firmwares and WHENCE-iwlwifi-update.patch as
  they are upstreamed</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043201">- Change the shebang of check_whence.py (installed as a
  non-executable) to point to python3.</changelog>
  <changelog author="mpluskal@suse.com" date="1512388800">- Update to version 20171204:
  * amdgpu: add firmware for Raven
  * amdgpu: update vega10 vce firmware
  * linux-firmware: DMC firmware for skylake v1.27</changelog>
  <changelog author="mpluskal@suse.com" date="1514030400">- Update to version 20171221:
  * nvidia: add GP108 signed firmware
  * linux-firmware: liquidio: add v1.7.0 vswitch firmware
  * brcm: add CYW4373 firmwares and Cypress license file
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Add firmware file for Intel Bluetooth 9260
  * linux-firmware: Add firmware file for Intel Bluetooth 9560
  * Revert commits a42f895, c113d33, 041aff8, 73d13b5
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Add firmware file for Intel Bluetooth 9260
  * linux-firmware: Add firmware file for Intel Bluetooth 9560
  * linux-firmware: intel: Add Cannonlake audio firmware
  * nfp: add firmware for tc-flower
  * nfp: change firmware directory layout
  * nfp: update firmware for Agilio CX SmartNICs</changelog>
  <changelog author="meissner@suse.com" date="1514203200">- Add microcode_amd_fam17h.bin (bsc#1068032 CVE-2017-5715)</changelog>
  <changelog author="mpluskal@suse.com" date="1515067200">- Update to version 20180104:
  * wl18xx: update firmware file 8.9.0.0.76
  * wl127x/wl128x: update firmwares
  * rtlwifi: rtl8723de: Add firmware for new driver/device
  * linux-firmware: DMC firmware for cannonlake v1.07</changelog>
  <changelog author="mpluskal@suse.com" date="1516622400">- Update to version 20180119:
  * amdgpu: update uvd firmware for polaris asics
  * amdgpu: update vce firmware for Fiji
  * amdgpu: update vcn firmware for raven
  * amdgpu: update vce and uvd firmware for Vega10
  * mediatek: update MT8173 VPU firmware to 1.0.8 [decoder h264] Fix h264 decoder output delay for some low latency bitstreams
  * cxgb4: update firmware to revision 1.17.14.0
  * linux-firmware: update Marvell PCIe-USB8897/8997 firmware image to add WPA2 vulnerability fix
  * linux-firmware: intel: Update Geminilake audio firmware</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Update to version 20180201:
  * linux-firmware: Add firmware file for Intel Bluetooth,9560
  * linux-firmware: Add firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * wl127x/wl128x: update PLT firmwares
  * linux-firmware: intel: Update Kabylake audio firmware
- Mark license files as such</changelog>
  <changelog author="mpluskal@suse.com" date="1520424000">- Update to version 20180222:
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.5.3-00053
  * ath10k: QCA988X hw2.0: update firmware-5.bin to 10.2.4-1.0-00037
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.5.3-00053
  * ath10k: QCA9887 hw1.0: update firmware-5.bin to 10.2.4-1.0-00037
  * ath10k: QCA9377 hw1.0: update firmware-5.bin to WLAN.TF.1.0-00002-QCATFSWPZ-5
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00079-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update firmware-5.bin to 10.4-3.5.3-00053
  * rtl_bt: Add firmware and configuration files for the Bluetooth parts of RTL8821C and RTL8723D
  * qed: Add firmwares 8.30.12.0 and 8.10.9.0
  * nfp: update Agilio SmartNIC firmware to rev 2.0.4</changelog>
  <changelog author="mpluskal@suse.com" date="1521028800">- Update to version 20180312:
  * Mellanox: Add new mlxsw_spectrum firmware 13.1620.192
  * qed: Add firmware 8.33.11.0
  * BCM-0bb4-0306: Cypress Bluetooth firmware for HTC Vive
  * linux-firmware:Update firmware patch for Intel Bluetooth 7265 (D1)
  * qed: Add firmwares 8.20.0.0 8.18.9.0 and 8.14.6.0
  * iwlwifi: update firmware version 34 for 9000 series</changelog>
  <changelog author="meissner@suse.com" date="1521633600">- detect new style modalias too for AMD CPUs in ucode-amd
  (bsc#1084687)</changelog>
  <changelog author="mpluskal@suse.com" date="1521806400">- Update to version 20180320:
  * BCM-0bb4-0306: Update to Cypress license in WHENCE
  * linux-firmware: intel: Update Kabylake audio firmware</changelog>
  <changelog author="mpluskal@suse.com" date="1522756800">- Update to version 20180402:
  * amdgpu: update vce firmware for Polaris
  * linux-firmware: Add firmware file for Intel Bluetooth,9560
  * linux-firmware: Add firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * nfp: update Agilio SmartNIC firmware to rev 2.0.7
  * cxgb4: update firmware to revision 1.18.9.0
  * linux-firmware: intel: Update Geminilake audio firmware
  * linux-firmware: intel: Update Kabylake audio firmware
  * linux-firmware: intel: Update Broxton audio firmware
  * linux-firmware: intel: Update Skylake audio firmware</changelog>
  <changelog author="meissner@suse.com" date="1523620800">- fixed new style modalias detection too for AMD CPUs in ucode-amd,
  it can only use 1 : (bsc#1084687)</changelog>
  <changelog author="mpluskal@suse.com" date="1523966400">- Update to version 20180416:
  * linux-firmware: update wil6210 firmware to 5.2.0.18
  * linux-firmware: rsi: update firmware images for Redpine 9113 chipset
  * iwlwifi: update firmwares for 3160, 3168 and 7265
  * iwlwifi: add some new FW versions and update older ones</changelog>
  <changelog author="mpluskal@suse.com" date="1525867200">- Update to version 20180507:
  * linux-firmware: update Marvell USB8997 firmware image to add WPA2 vulnerability fix
  * linux-firmware: update Marvell SD8897-B0 firmware image to add WPA2 vulnerability fix
  * Update Intel OPA hfi1 firmware
  * qed: Add firmware 8.33.12.0
  * linux-firmware: Add firmware file for Intel Bluetooth,9560
  * linux-firmware: Add firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * cxgb4: update firmware to revision 1.19.1.0
  * nfp: add symlink for mixed mode Agilio CX 2x25GbE cards
  * nfp: update Agilio SmartNIC flower firmware to rev 5701</changelog>
  <changelog author="mpluskal@suse.com" date="1526904000">- Update to version 20180518:
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 7260 (B5/B6)
  * linux-firmware: Update firmware patch for Intel Bluetooth 7260 (B3/B4)
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware:Update firmware patch for Intel Bluetooth 7265 (D1)
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: sync up polaris12 firmware with 18.10 release
  * amdgpu: sync up polaris11 firmware with 18.10 release
  * amdgpu: sync up polaris10 firmware with 18.10 release
  * amdgpu: sync up vega10 firmware with 18.10 release
  * amdgpu: sync up carrizo firmware with 18.10 release
  * amdgpu: sync up topaz firmware with 18.10 release
  * amdgpu: sync up stoney firmware with 18.10 release
  * amdgpu: sync up tonga firmware with 18.10 release
  * amdgpu: sync up fiji firmware with 18.10 release
  * amdgpu: sync up raven firmware with 18.10 release
  * nfp: Add symlink for Agilio CX 1x40GbE flower firmware
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.9.A.16
  * linux-firmware: liquidio: update firmware to v1.7.2</changelog>
  <changelog author="mpluskal@suse.com" date="1527595200">- Update to version 20180525:
  * Update AMD cpu microcode for family 15h (CVE-2017-5715,
    bsc#1095735)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * qed: Add firmware 8.37.2.0</changelog>
  <changelog author="tiwai@suse.de" date="1528113600">- Use the upstream version of AMD ucode for family 17h
  (CVE-2017-5715, bsc#1095735)</changelog>
</package>
<package pkgid="88bdf1a70f474f5105d9ef197fe90ed1cd4c0b9cc3cfead6a33d9102f6a8cd35" name="kernel-firmware" arch="src">
  <version epoch="0" ver="20180525" rel="lp150.2.3.1"/>
  <changelog author="tiwai@suse.de" date="1511179200">- Remove iwlwifi-*-34.ucode since they seem breaking with 4.13.x
  TW kernel (bsc#1068838)</changelog>
  <changelog author="mpluskal@suse.com" date="1512043200">- Update to version 20171125:
  * brcm: update firmware for bcm4358
  * brcm: update firmware for bcm4356
  * brcm: update firmware for bcm4354
  * brcm: introduce firmware for bcm43430 revision 0
  * brcm: update firmware for bcm4339
  * Mellanox: Add new mlxsw_spectrum firmware 13.1530.152
  * WHENCE: Add missing entry for mlxsw_spectrum firmware
  * WHENCE: Fix typo in entry for iwlwifi-8265-34.ucode
  * s2255drv: f2255usb: firmware version 1.2.8
  * amdgpu: add new CP firmware for polaris chips
  * qed: Add firmware 8.33.1.0
  * qcom: add venus firmware files for v4.2
  * qcom: add firmware files for Adreno a530
  * iwlwifi: add firmware version 34 for new 9000 series
  * linux-firmware: liquidio: update firmware to v1.7.0
  * linux-firmware: intel: Update Geminilake audio firmware
  * iwlwifi: add firmware version 33 for new 9000 series
  * iwlwifi: add new firmware version 34 for 8000C and 8265
  * iwlwifi: update firmwares for 3160, 3168, 7260, 7265 and 7265D
  * iwlwifi: update firmwares for 3160, 3168, 7265D, 8000C and 8265
  * linux-firmware: DMC firmware for kabylake v1.04
  * linux-firmware: update Marvell PCIe-USB8997 firmware image
  * linux-firmware: GuC firmware for kabylake v9.39
  * linux-firmware: GuC firmware for Broxton v9.29
  * linux-firmware: GuC firmware for Skylake v9.33
  * linux-firmware/i915: Add Cannonlake DMC version 1.06
  * linux-firmware/i915: Add Geminilake DMC version 1.04
  * WHENCE: Add new qed firmware
  * WHENCE: Add new radeon firmware
  * WHENCE: Fix syntax error for iwlwifi-8265-31.ucode entry
  * Revert "ath10k: QCA988X hw2.0: update firmware to 10.2.4.70.63-2"
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00051-QCARMSWP-1
  * cxgb4: update firmware to revision 1.16.63.0
  * linux-firmware: update Marvell PCIe-USB8997 firmware image
  * linux-firmware: update Marvell PCIe-USB8897-A2 firmware image
  * Drop intel wifi firmwares and WHENCE-iwlwifi-update.patch as
  they are upstreamed</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043201">- Change the shebang of check_whence.py (installed as a
  non-executable) to point to python3.</changelog>
  <changelog author="mpluskal@suse.com" date="1512388800">- Update to version 20171204:
  * amdgpu: add firmware for Raven
  * amdgpu: update vega10 vce firmware
  * linux-firmware: DMC firmware for skylake v1.27</changelog>
  <changelog author="mpluskal@suse.com" date="1514030400">- Update to version 20171221:
  * nvidia: add GP108 signed firmware
  * linux-firmware: liquidio: add v1.7.0 vswitch firmware
  * brcm: add CYW4373 firmwares and Cypress license file
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Add firmware file for Intel Bluetooth 9260
  * linux-firmware: Add firmware file for Intel Bluetooth 9560
  * Revert commits a42f895, c113d33, 041aff8, 73d13b5
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Add firmware file for Intel Bluetooth 9260
  * linux-firmware: Add firmware file for Intel Bluetooth 9560
  * linux-firmware: intel: Add Cannonlake audio firmware
  * nfp: add firmware for tc-flower
  * nfp: change firmware directory layout
  * nfp: update firmware for Agilio CX SmartNICs</changelog>
  <changelog author="meissner@suse.com" date="1514203200">- Add microcode_amd_fam17h.bin (bsc#1068032 CVE-2017-5715)</changelog>
  <changelog author="mpluskal@suse.com" date="1515067200">- Update to version 20180104:
  * wl18xx: update firmware file 8.9.0.0.76
  * wl127x/wl128x: update firmwares
  * rtlwifi: rtl8723de: Add firmware for new driver/device
  * linux-firmware: DMC firmware for cannonlake v1.07</changelog>
  <changelog author="mpluskal@suse.com" date="1516622400">- Update to version 20180119:
  * amdgpu: update uvd firmware for polaris asics
  * amdgpu: update vce firmware for Fiji
  * amdgpu: update vcn firmware for raven
  * amdgpu: update vce and uvd firmware for Vega10
  * mediatek: update MT8173 VPU firmware to 1.0.8 [decoder h264] Fix h264 decoder output delay for some low latency bitstreams
  * cxgb4: update firmware to revision 1.17.14.0
  * linux-firmware: update Marvell PCIe-USB8897/8997 firmware image to add WPA2 vulnerability fix
  * linux-firmware: intel: Update Geminilake audio firmware</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Update to version 20180201:
  * linux-firmware: Add firmware file for Intel Bluetooth,9560
  * linux-firmware: Add firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * wl127x/wl128x: update PLT firmwares
  * linux-firmware: intel: Update Kabylake audio firmware
- Mark license files as such</changelog>
  <changelog author="mpluskal@suse.com" date="1520424000">- Update to version 20180222:
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.5.3-00053
  * ath10k: QCA988X hw2.0: update firmware-5.bin to 10.2.4-1.0-00037
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.5.3-00053
  * ath10k: QCA9887 hw1.0: update firmware-5.bin to 10.2.4-1.0-00037
  * ath10k: QCA9377 hw1.0: update firmware-5.bin to WLAN.TF.1.0-00002-QCATFSWPZ-5
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00079-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update firmware-5.bin to 10.4-3.5.3-00053
  * rtl_bt: Add firmware and configuration files for the Bluetooth parts of RTL8821C and RTL8723D
  * qed: Add firmwares 8.30.12.0 and 8.10.9.0
  * nfp: update Agilio SmartNIC firmware to rev 2.0.4</changelog>
  <changelog author="mpluskal@suse.com" date="1521028800">- Update to version 20180312:
  * Mellanox: Add new mlxsw_spectrum firmware 13.1620.192
  * qed: Add firmware 8.33.11.0
  * BCM-0bb4-0306: Cypress Bluetooth firmware for HTC Vive
  * linux-firmware:Update firmware patch for Intel Bluetooth 7265 (D1)
  * qed: Add firmwares 8.20.0.0 8.18.9.0 and 8.14.6.0
  * iwlwifi: update firmware version 34 for 9000 series</changelog>
  <changelog author="meissner@suse.com" date="1521633600">- detect new style modalias too for AMD CPUs in ucode-amd
  (bsc#1084687)</changelog>
  <changelog author="mpluskal@suse.com" date="1521806400">- Update to version 20180320:
  * BCM-0bb4-0306: Update to Cypress license in WHENCE
  * linux-firmware: intel: Update Kabylake audio firmware</changelog>
  <changelog author="mpluskal@suse.com" date="1522756800">- Update to version 20180402:
  * amdgpu: update vce firmware for Polaris
  * linux-firmware: Add firmware file for Intel Bluetooth,9560
  * linux-firmware: Add firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * nfp: update Agilio SmartNIC firmware to rev 2.0.7
  * cxgb4: update firmware to revision 1.18.9.0
  * linux-firmware: intel: Update Geminilake audio firmware
  * linux-firmware: intel: Update Kabylake audio firmware
  * linux-firmware: intel: Update Broxton audio firmware
  * linux-firmware: intel: Update Skylake audio firmware</changelog>
  <changelog author="meissner@suse.com" date="1523620800">- fixed new style modalias detection too for AMD CPUs in ucode-amd,
  it can only use 1 : (bsc#1084687)</changelog>
  <changelog author="mpluskal@suse.com" date="1523966400">- Update to version 20180416:
  * linux-firmware: update wil6210 firmware to 5.2.0.18
  * linux-firmware: rsi: update firmware images for Redpine 9113 chipset
  * iwlwifi: update firmwares for 3160, 3168 and 7265
  * iwlwifi: add some new FW versions and update older ones</changelog>
  <changelog author="mpluskal@suse.com" date="1525867200">- Update to version 20180507:
  * linux-firmware: update Marvell USB8997 firmware image to add WPA2 vulnerability fix
  * linux-firmware: update Marvell SD8897-B0 firmware image to add WPA2 vulnerability fix
  * Update Intel OPA hfi1 firmware
  * qed: Add firmware 8.33.12.0
  * linux-firmware: Add firmware file for Intel Bluetooth,9560
  * linux-firmware: Add firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * cxgb4: update firmware to revision 1.19.1.0
  * nfp: add symlink for mixed mode Agilio CX 2x25GbE cards
  * nfp: update Agilio SmartNIC flower firmware to rev 5701</changelog>
  <changelog author="mpluskal@suse.com" date="1526904000">- Update to version 20180518:
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 7260 (B5/B6)
  * linux-firmware: Update firmware patch for Intel Bluetooth 7260 (B3/B4)
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware:Update firmware patch for Intel Bluetooth 7265 (D1)
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: sync up polaris12 firmware with 18.10 release
  * amdgpu: sync up polaris11 firmware with 18.10 release
  * amdgpu: sync up polaris10 firmware with 18.10 release
  * amdgpu: sync up vega10 firmware with 18.10 release
  * amdgpu: sync up carrizo firmware with 18.10 release
  * amdgpu: sync up topaz firmware with 18.10 release
  * amdgpu: sync up stoney firmware with 18.10 release
  * amdgpu: sync up tonga firmware with 18.10 release
  * amdgpu: sync up fiji firmware with 18.10 release
  * amdgpu: sync up raven firmware with 18.10 release
  * nfp: Add symlink for Agilio CX 1x40GbE flower firmware
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.9.A.16
  * linux-firmware: liquidio: update firmware to v1.7.2</changelog>
  <changelog author="mpluskal@suse.com" date="1527595200">- Update to version 20180525:
  * Update AMD cpu microcode for family 15h (CVE-2017-5715,
    bsc#1095735)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * qed: Add firmware 8.37.2.0</changelog>
  <changelog author="tiwai@suse.de" date="1528113600">- Use the upstream version of AMD ucode for family 17h
  (CVE-2017-5715, bsc#1095735)</changelog>
</package>
<package pkgid="7bc4c9e1b8013fa9aad53db41f7a181f15f145c136bf1173d53ec48d5b98beff" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="a3e54afeb40e9595f281d4fc0e3f830dc3dcfba353a2dd413c375d7eafc0715b" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="7d7ccd2a6d29897cf1e5a8b2293e268c1544aade74e8c0bb7c80f091883729cc" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="07ba83ec297c02b8020b2eeec23e0969b02364882fd5b9021d2bb020b13d4794" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="09ef09baa2135219a6e17de953b42c203d40a472fc0ec5395b942752fe3d5315" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="4da10b9add1eaf876ca33270be73991a968c9e23abb398ceebc8440ffff41bfc" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="50452aaa0b01d112d481e1d0e11f6291af37a26502298a098ddb04f1d057753d" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.19.2"/>
  <changelog author="fdmanana@suse.com" date="1538568000">- Btrfs: fix fsync after hole punching when using no-holes feature
  (bsc#1110642).
- commit 3f19b40</changelog>
  <changelog author="fdmanana@suse.com" date="1538568001">- Btrfs: fix loss of prealloc extents past i_size after fsync
  log replay (bsc#1110643).
- commit 974e057</changelog>
  <changelog author="fdmanana@suse.com" date="1538568002">- Btrfs: fix duplicate extents after fsync of file with prealloc
  extents (bsc#1110644).
- commit c4ec603</changelog>
  <changelog author="fdmanana@suse.com" date="1538568003">- Btrfs: fix return value on rename exchange failure
  (bsc#1110645).
- commit 532729c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568004">- Btrfs: sync log after logging new name (bsc#1110646).
- commit 7260d6b</changelog>
  <changelog author="fdmanana@suse.com" date="1538568005">- Btrfs: fix data corruption when deduplicating between different
  files (bsc#1110647).
- commit 669848c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568006">- btrfs: Remove unused parameters from various functions
  (bsc#1110649).
- commit c97c657</changelog>
  <changelog author="fdmanana@suse.com" date="1538568007">- Btrfs: fix send failure when root has deleted files still open
  (bsc#1110650).
- commit f52554d</changelog>
  <changelog author="jslaby@suse.cz" date="1538568008">- watchdog: Mark watchdog touch functions as notrace (git-fixes).
- commit 8b53193</changelog>
  <changelog author="neilb@suse.com" date="1538654400">- nfs/filelayout: fix oops when freeing filelayout segment
  (bsc#1105190).
- NFS/filelayout: Fix racy setting of fl-&gt;dsaddr in
  filelayout_check_deviceid() (bsc#1105190).
- commit d6d0fab</changelog>
  <changelog author="neilb@suse.com" date="1538654401">- VFS: don't test owner for NFS in set_posix_acl() (bsc#1103405).
- commit 36f977a</changelog>
  <changelog author="tiwai@suse.de" date="1538654402">- README.BRANCH: SLE15-SP1 branch maintainer changes
  Add ptesarik as co-maintainer, keep tiwai as the primary maintainer
- commit 83aea11</changelog>
  <changelog author="wqu@suse.com" date="1538654403">- btrfs: tests/qgroup: Fix wrong tree backref level (bsc#1107928).
- commit a5e154c</changelog>
  <changelog author="wqu@suse.com" date="1538654404">- btrfs: check-integrity: Fix NULL pointer dereference for
  degraded mount (bsc#1107947).
- commit 77b2277</changelog>
  <changelog author="wqu@suse.com" date="1538654405">- btrfs: scrub: Don't use inode pages for device replace (follow
  up for bsc#1108096).
- commit c865775</changelog>
  <changelog author="tiwai@suse.de" date="1538654406">- ASoC: cs4265: fix MMTLR Data switch control (bsc#1051510).
- ALSA: fireworks: fix memory leak of response buffer at error
  path (bsc#1051510).
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix
  I/O at error path (bsc#1051510).
- ALSA: emu10k1: fix possible info leak to userspace on
  SNDRV_EMU10K1_IOCTL_INFO (bsc#1051510).
- ALSA: bebob: use address returned by kmalloc() instead of
  kernel stack for streaming DMA mapping (bsc#1051510).
- ASoC: rt5514: Fix the issue of the delay volume applied
  (bsc#1051510).
- ASoC: dapm: Fix potential DAI widget pointer deref when linking
  DAIs (bsc#1051510).
- ALSA: msnd: Fix the default sample sizes (bsc#1051510).
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE()
  macro (bsc#1051510).
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
  (bsc#1051510).
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
  (bsc#1051510).
- ASoC: rt5514: Add the missing register in the readable table
  (bsc#1051510).
- ASoC: rt5514: Eliminate the noise in the ASRC case
  (bsc#1051510).
- ASoC: rt5514: Add the I2S ASRC support (bsc#1051510).
- commit 4eba9c8</changelog>
  <changelog author="wqu@suse.com" date="1538654407">- btrfs: scrub: Don't use inode page cache in
  scrub_handle_errored_block() (follow up for bsc#1108096).
- commit 3f91c84</changelog>
  <changelog author="tiwai@suse.de" date="1538654408">- smsc95xx: Check for Wake-on-LAN modes (bsc#1051510).
- smsc75xx: Check for Wake-on-LAN modes (bsc#1051510).
- r8152: Check for supported Wake-on-LAN Modes (bsc#1051510).
- sr9800: Check for supported Wake-on-LAN modes (bsc#1051510).
- lan78xx: Check for supported Wake-on-LAN modes (bsc#1051510).
- ax88179_178a: Check for supported Wake-on-LAN modes
  (bsc#1051510).
- mac80211: fix pending queue hang due to TX_DROP (bsc#1051510).
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
  (bsc#1051510).
- Input: elantech - enable middle button of touchpad on ThinkPad
  P72 (bsc#1051510).
- regulator: fix crash caused by null driver data (bsc#1051510).
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
  (bsc#1051510).
- intel_th: Fix device removal logic (bsc#1051510).
- NFC: Fix possible memory corruption when handling SHDLC I-Frame
  commands (bsc#1051510).
- platform/x86: alienware-wmi: Correct a memory leak
  (bsc#1051510).
- xhci: Fix use after free for URB cancellation on a reallocated
  endpoint (bsc#1051510).
- mei: ignore not found client in the enumeration (bsc#1051510).
- i2c: i801: Allow ACPI AML access I/O ports not reserved for
  SMBus (bsc#1051510).
- fbdev/via: fix defined but not used warning (bsc#1051510).
- video: goldfishfb: fix memory leak on driver remove
  (bsc#1051510).
- fbdev: Distinguish between interlaced and progressive modes
  (bsc#1051510).
- platform/x86: toshiba_acpi: Fix defined but not used build
  warnings (bsc#1051510).
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
  (bsc#1051510).
- input: rohm_bu21023: switch to i2c_lock_bus(...,
  I2C_LOCK_SEGMENT) (bsc#1051510).
- HID: hid-ntrig: add error handling for sysfs_create_group
  (bsc#1051510).
- mfd: ti_am335x_tscadc: Fix struct clk memory leak (bsc#1051510).
- mmc: sdhci: do not try to use 3.3V signaling if not supported
  (bsc#1051510).
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
  (bsc#1051510).
- parport: sunbpp: fix error return code (bsc#1051510).
- coresight: Handle errors in finding input/output ports
  (bsc#1051510).
- mei: bus: type promotion bug in mei_nfc_if_version()
  (bsc#1051510).
- gpio: pxa: Fix potential NULL dereference (bsc#1051510).
- gpiolib: Mark gpio_suffixes array with __maybe_unused
  (bsc#1051510).
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
  (bsc#1051510).
- crypto: sharah - Unregister correct algorithms for SAHARA 3
  (bsc#1051510).
- crypto: skcipher - Fix -Wstringop-truncation warnings
  (bsc#1051510).
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
  (bsc#1051510).
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 (bsc#1051510).
- mac80211: restrict delayed tailroom needed decrement
  (bsc#1051510).
- wlcore: Add missing PM call for
  wlcore_cmd_wait_for_event_or_timeout() (bsc#1051510).
- commit e266792</changelog>
  <changelog author="mbrugger@suse.com" date="1538654409">- arm64: Update config files. (bsc#1110716)
  Enable ST LPS25H pressure sensor.
- commit 69c6902</changelog>
  <changelog author="jack@suse.cz" date="1538654410">- patches.fixes/x86-memory_failure-Introduce-set-clear-_mce_nospec.patch:
  Fixup compilation breakage on s390 and arm due to missing
  clear_mce_nospec().
- commit faef795</changelog>
</package>
<package pkgid="faf306120dfa13c9673785cce855a1253d0c8b15ab79645c6b1919071ebd27e1" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.19.2"/>
  <changelog author="fdmanana@suse.com" date="1538568000">- Btrfs: fix fsync after hole punching when using no-holes feature
  (bsc#1110642).
- commit 3f19b40</changelog>
  <changelog author="fdmanana@suse.com" date="1538568001">- Btrfs: fix loss of prealloc extents past i_size after fsync
  log replay (bsc#1110643).
- commit 974e057</changelog>
  <changelog author="fdmanana@suse.com" date="1538568002">- Btrfs: fix duplicate extents after fsync of file with prealloc
  extents (bsc#1110644).
- commit c4ec603</changelog>
  <changelog author="fdmanana@suse.com" date="1538568003">- Btrfs: fix return value on rename exchange failure
  (bsc#1110645).
- commit 532729c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568004">- Btrfs: sync log after logging new name (bsc#1110646).
- commit 7260d6b</changelog>
  <changelog author="fdmanana@suse.com" date="1538568005">- Btrfs: fix data corruption when deduplicating between different
  files (bsc#1110647).
- commit 669848c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568006">- btrfs: Remove unused parameters from various functions
  (bsc#1110649).
- commit c97c657</changelog>
  <changelog author="fdmanana@suse.com" date="1538568007">- Btrfs: fix send failure when root has deleted files still open
  (bsc#1110650).
- commit f52554d</changelog>
  <changelog author="jslaby@suse.cz" date="1538568008">- watchdog: Mark watchdog touch functions as notrace (git-fixes).
- commit 8b53193</changelog>
  <changelog author="neilb@suse.com" date="1538654400">- nfs/filelayout: fix oops when freeing filelayout segment
  (bsc#1105190).
- NFS/filelayout: Fix racy setting of fl-&gt;dsaddr in
  filelayout_check_deviceid() (bsc#1105190).
- commit d6d0fab</changelog>
  <changelog author="neilb@suse.com" date="1538654401">- VFS: don't test owner for NFS in set_posix_acl() (bsc#1103405).
- commit 36f977a</changelog>
  <changelog author="tiwai@suse.de" date="1538654402">- README.BRANCH: SLE15-SP1 branch maintainer changes
  Add ptesarik as co-maintainer, keep tiwai as the primary maintainer
- commit 83aea11</changelog>
  <changelog author="wqu@suse.com" date="1538654403">- btrfs: tests/qgroup: Fix wrong tree backref level (bsc#1107928).
- commit a5e154c</changelog>
  <changelog author="wqu@suse.com" date="1538654404">- btrfs: check-integrity: Fix NULL pointer dereference for
  degraded mount (bsc#1107947).
- commit 77b2277</changelog>
  <changelog author="wqu@suse.com" date="1538654405">- btrfs: scrub: Don't use inode pages for device replace (follow
  up for bsc#1108096).
- commit c865775</changelog>
  <changelog author="tiwai@suse.de" date="1538654406">- ASoC: cs4265: fix MMTLR Data switch control (bsc#1051510).
- ALSA: fireworks: fix memory leak of response buffer at error
  path (bsc#1051510).
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix
  I/O at error path (bsc#1051510).
- ALSA: emu10k1: fix possible info leak to userspace on
  SNDRV_EMU10K1_IOCTL_INFO (bsc#1051510).
- ALSA: bebob: use address returned by kmalloc() instead of
  kernel stack for streaming DMA mapping (bsc#1051510).
- ASoC: rt5514: Fix the issue of the delay volume applied
  (bsc#1051510).
- ASoC: dapm: Fix potential DAI widget pointer deref when linking
  DAIs (bsc#1051510).
- ALSA: msnd: Fix the default sample sizes (bsc#1051510).
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE()
  macro (bsc#1051510).
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
  (bsc#1051510).
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
  (bsc#1051510).
- ASoC: rt5514: Add the missing register in the readable table
  (bsc#1051510).
- ASoC: rt5514: Eliminate the noise in the ASRC case
  (bsc#1051510).
- ASoC: rt5514: Add the I2S ASRC support (bsc#1051510).
- commit 4eba9c8</changelog>
  <changelog author="wqu@suse.com" date="1538654407">- btrfs: scrub: Don't use inode page cache in
  scrub_handle_errored_block() (follow up for bsc#1108096).
- commit 3f91c84</changelog>
  <changelog author="tiwai@suse.de" date="1538654408">- smsc95xx: Check for Wake-on-LAN modes (bsc#1051510).
- smsc75xx: Check for Wake-on-LAN modes (bsc#1051510).
- r8152: Check for supported Wake-on-LAN Modes (bsc#1051510).
- sr9800: Check for supported Wake-on-LAN modes (bsc#1051510).
- lan78xx: Check for supported Wake-on-LAN modes (bsc#1051510).
- ax88179_178a: Check for supported Wake-on-LAN modes
  (bsc#1051510).
- mac80211: fix pending queue hang due to TX_DROP (bsc#1051510).
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
  (bsc#1051510).
- Input: elantech - enable middle button of touchpad on ThinkPad
  P72 (bsc#1051510).
- regulator: fix crash caused by null driver data (bsc#1051510).
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
  (bsc#1051510).
- intel_th: Fix device removal logic (bsc#1051510).
- NFC: Fix possible memory corruption when handling SHDLC I-Frame
  commands (bsc#1051510).
- platform/x86: alienware-wmi: Correct a memory leak
  (bsc#1051510).
- xhci: Fix use after free for URB cancellation on a reallocated
  endpoint (bsc#1051510).
- mei: ignore not found client in the enumeration (bsc#1051510).
- i2c: i801: Allow ACPI AML access I/O ports not reserved for
  SMBus (bsc#1051510).
- fbdev/via: fix defined but not used warning (bsc#1051510).
- video: goldfishfb: fix memory leak on driver remove
  (bsc#1051510).
- fbdev: Distinguish between interlaced and progressive modes
  (bsc#1051510).
- platform/x86: toshiba_acpi: Fix defined but not used build
  warnings (bsc#1051510).
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
  (bsc#1051510).
- input: rohm_bu21023: switch to i2c_lock_bus(...,
  I2C_LOCK_SEGMENT) (bsc#1051510).
- HID: hid-ntrig: add error handling for sysfs_create_group
  (bsc#1051510).
- mfd: ti_am335x_tscadc: Fix struct clk memory leak (bsc#1051510).
- mmc: sdhci: do not try to use 3.3V signaling if not supported
  (bsc#1051510).
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
  (bsc#1051510).
- parport: sunbpp: fix error return code (bsc#1051510).
- coresight: Handle errors in finding input/output ports
  (bsc#1051510).
- mei: bus: type promotion bug in mei_nfc_if_version()
  (bsc#1051510).
- gpio: pxa: Fix potential NULL dereference (bsc#1051510).
- gpiolib: Mark gpio_suffixes array with __maybe_unused
  (bsc#1051510).
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
  (bsc#1051510).
- crypto: sharah - Unregister correct algorithms for SAHARA 3
  (bsc#1051510).
- crypto: skcipher - Fix -Wstringop-truncation warnings
  (bsc#1051510).
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
  (bsc#1051510).
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 (bsc#1051510).
- mac80211: restrict delayed tailroom needed decrement
  (bsc#1051510).
- wlcore: Add missing PM call for
  wlcore_cmd_wait_for_event_or_timeout() (bsc#1051510).
- commit e266792</changelog>
  <changelog author="mbrugger@suse.com" date="1538654409">- arm64: Update config files. (bsc#1110716)
  Enable ST LPS25H pressure sensor.
- commit 69c6902</changelog>
  <changelog author="jack@suse.cz" date="1538654410">- patches.fixes/x86-memory_failure-Introduce-set-clear-_mce_nospec.patch:
  Fixup compilation breakage on s390 and arm due to missing
  clear_mce_nospec().
- commit faef795</changelog>
</package>
<package pkgid="59a38ed45667a59dd2928ceac401a2410c164459c58342c46a40b23f19566906" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.22.1"/>
  <changelog author="tiwai@suse.de" date="1539172800">- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell
  XPS 27 7760 (bsc#1051510).
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
  (bsc#1051510).
- crypto: mxs-dcp - Fix wait logic on chan threads (bsc#1051510).
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM
  ioctl (bsc#1051510).
- HID: add support for Apple Magic Keyboards (bsc#1051510).
- gpio: Fix crash due to registration race (bsc#1051510).
- gpiolib-acpi: Register GpioInt ACPI event handlers from a
  late_initcall (bsc#1051510).
- gpio: adp5588: Fix sleep-in-atomic-context bug (bsc#1051510).
- cfg80211: fix a type issue in
  ieee80211_chandef_to_operating_class() (bsc#1051510).
- Revert "gpio: set up initial state from .get_direction()"
  (bsc#1051510).
- gpio: mb86s70: Revert "Return error if requesting an already
  assigned gpio" (bsc#1051510).
- commit 2759d22</changelog>
  <changelog author="mbrugger@suse.com" date="1539172801">- arm64: Update config files.
  Enable SENSORS_RASPBERRYPI_HWMON
- commit 2a83945</changelog>
  <changelog author="mbrugger@suse.com" date="1539172802">- supported.conf: mark raspberrypi-hwmon as supported
- commit af8ddda</changelog>
  <changelog author="tiwai@suse.de" date="1539172803">- HID: hid-saitek: Add device ID for RAT 7 Contagion
  (bsc#1051510).
- mac80211: shorten the IBSS debug messages (bsc#1051510).
- mac80211: don't Tx a deauth frame if the AP forbade Tx
  (bsc#1051510).
- mac80211: Fix station bandwidth setting after channel switch
  (bsc#1051510).
- mac80211: fix a race between restart and CSA flows
  (bsc#1051510).
- mac80211: do not convert to A-MSDU if frag/subframe limited
  (bsc#1051510).
- mac80211: mesh: fix HWMP sequence numbering to follow standard
  (bsc#1051510).
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211_hwsim: require at least one channel (bsc#1051510).
- mac80211: Run TXQ teardown code before de-registering interfaces
  (bsc#1051510).
- hwmon: (adt7475) Make adt7475_read_word() return errors
  (bsc#1051510).
- hwmon: (ina2xx) fix sysfs shunt resistor read access
  (bsc#1051510).
- commit af836cd</changelog>
  <changelog author="tiwai@suse.de" date="1539172804">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- Revert "mwifiex: handle race during mwifiex_usb_disconnect"
  (bsc#1051510).
- media: videobuf-dma-sg: Fix dma_{sync,unmap}_sg() calls
  (bsc#1051510).
- Revert "mwifiex: fix incorrect ht capability problem"
  (bsc#1051510).
- PM / Domains: Fix genpd to deal with drivers returning 1 from
  - &gt;prepare() (bsc#1051510).
- Revert "pinctrl: sunxi: Don't enforce bias disable (for now)"
  (bsc#1051510).
- commit fb6c36a</changelog>
  <changelog author="tiwai@suse.de" date="1539172805">- blacklist.conf: Add blacklist of inapplicable revert commits
  They are either not applicable or requiring more backports that aren't
  suitable for SLE15
- commit 987dd44</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259200">- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk (bsc#1106110)
- commit 273a6bd</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259201">- blacklist.conf: Append 'drm/amd/pp: initialize result to before or'ing in data'
- commit d2edcd9</changelog>
  <changelog author="tiwai@suse.de" date="1539259202">- Disable DRM patches that broke vbox video driver KMP (bsc#1111076)
- commit 23943c6</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259203">- blacklist.conf: Append 'Revert "drm: Use a flexible array member for blob property data"'
- commit ddc67eb</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259204">- Fix Patch-mainline tags to refer to Linux release tag
  It is expected that Patch-mainline tags refer to a release tag
  in the Linux git tree, such as v4.15. Several patches contain a
  Patch-mainline tags that instead refer to a Linux version number,
  such as 4.15. This inconsistency complicates grepping and
  automation.
  871 of 18000 patches are affected by this problem.
- commit 1d81d26</changelog>
  <changelog author="bp@suse.de" date="1539259205">- crypto: ccp - add timeout support in the SEV command
  (bsc#1106838).
- commit 912dad4</changelog>
  <changelog author="tiwai@suse.de" date="1539345600">- Update config files: update forgotten armv7hl configs
- commit 7bae3a6</changelog>
  <changelog author="msuchanek@suse.de" date="1539345601">- powerpc/numa: Skip onlining a offline node in kdump path
  (bsc#1109784).
- commit df87e51</changelog>
  <changelog author="tiwai@suse.de" date="1539345602">- squashfs metadata 2: electric boogaloo (bsc#1051510).
- squashfs: more metadata hardening (bsc#1051510).
- squashfs: be more careful about metadata corruption
  (bsc#1051510).
- commit 9bfac39</changelog>
  <changelog author="hare@suse.de" date="1539345603">- scsi: qla2xxx: Move log messages before issuing command to
  firmware (bsc#1108870).
- scsi: qla2xxx: Fix for double free of SRB structure
  (bsc#1108870).
- scsi: qla2xxx: Fix recursive mailbox timeout (bsc#1108870).
- scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
  (bsc#1108870).
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
  (bsc#1108870).
- scsi: qla2xxx: Fix duplicate switch database entries
  (bsc#1108870).
- scsi: qla2xxx: Fix NVMe Target discovery (bsc#1108870).
- scsi: qla2xxx: Fix NVMe session hang on unload (bsc#1108870).
- scsi: qla2xxx: don't allow negative thresholds (bsc#1108870).
- commit 50fe149</changelog>
  <changelog author="tiwai@suse.de" date="1539345604">- Squashfs: Compute expected length from inode size rather than
  block length (bsc#1051510).
- commit 0c4a663</changelog>
  <changelog author="tiwai@suse.de" date="1539345605">- soreuseport: initialise timewait reuseport field (bsc#1051510).
- commit bda2dcc</changelog>
  <changelog author="tiwai@suse.de" date="1539345606">- rpc_pipefs: fix double-dput() (bsc#1051510).
- commit 1a15e26</changelog>
  <changelog author="hare@suse.de" date="1539345607">- scsi: qla2xxx: Return switch command on a timeout (bsc#1108870).
- commit 8e38f2a</changelog>
</package>
<package pkgid="1f1fafa81971f0176ddc984e7213034923d94f12491f9933262dab738f14e8c9" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.22.1"/>
  <changelog author="tiwai@suse.de" date="1539172800">- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell
  XPS 27 7760 (bsc#1051510).
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
  (bsc#1051510).
- crypto: mxs-dcp - Fix wait logic on chan threads (bsc#1051510).
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM
  ioctl (bsc#1051510).
- HID: add support for Apple Magic Keyboards (bsc#1051510).
- gpio: Fix crash due to registration race (bsc#1051510).
- gpiolib-acpi: Register GpioInt ACPI event handlers from a
  late_initcall (bsc#1051510).
- gpio: adp5588: Fix sleep-in-atomic-context bug (bsc#1051510).
- cfg80211: fix a type issue in
  ieee80211_chandef_to_operating_class() (bsc#1051510).
- Revert "gpio: set up initial state from .get_direction()"
  (bsc#1051510).
- gpio: mb86s70: Revert "Return error if requesting an already
  assigned gpio" (bsc#1051510).
- commit 2759d22</changelog>
  <changelog author="mbrugger@suse.com" date="1539172801">- arm64: Update config files.
  Enable SENSORS_RASPBERRYPI_HWMON
- commit 2a83945</changelog>
  <changelog author="mbrugger@suse.com" date="1539172802">- supported.conf: mark raspberrypi-hwmon as supported
- commit af8ddda</changelog>
  <changelog author="tiwai@suse.de" date="1539172803">- HID: hid-saitek: Add device ID for RAT 7 Contagion
  (bsc#1051510).
- mac80211: shorten the IBSS debug messages (bsc#1051510).
- mac80211: don't Tx a deauth frame if the AP forbade Tx
  (bsc#1051510).
- mac80211: Fix station bandwidth setting after channel switch
  (bsc#1051510).
- mac80211: fix a race between restart and CSA flows
  (bsc#1051510).
- mac80211: do not convert to A-MSDU if frag/subframe limited
  (bsc#1051510).
- mac80211: mesh: fix HWMP sequence numbering to follow standard
  (bsc#1051510).
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211_hwsim: require at least one channel (bsc#1051510).
- mac80211: Run TXQ teardown code before de-registering interfaces
  (bsc#1051510).
- hwmon: (adt7475) Make adt7475_read_word() return errors
  (bsc#1051510).
- hwmon: (ina2xx) fix sysfs shunt resistor read access
  (bsc#1051510).
- commit af836cd</changelog>
  <changelog author="tiwai@suse.de" date="1539172804">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- Revert "mwifiex: handle race during mwifiex_usb_disconnect"
  (bsc#1051510).
- media: videobuf-dma-sg: Fix dma_{sync,unmap}_sg() calls
  (bsc#1051510).
- Revert "mwifiex: fix incorrect ht capability problem"
  (bsc#1051510).
- PM / Domains: Fix genpd to deal with drivers returning 1 from
  - &gt;prepare() (bsc#1051510).
- Revert "pinctrl: sunxi: Don't enforce bias disable (for now)"
  (bsc#1051510).
- commit fb6c36a</changelog>
  <changelog author="tiwai@suse.de" date="1539172805">- blacklist.conf: Add blacklist of inapplicable revert commits
  They are either not applicable or requiring more backports that aren't
  suitable for SLE15
- commit 987dd44</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259200">- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk (bsc#1106110)
- commit 273a6bd</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259201">- blacklist.conf: Append 'drm/amd/pp: initialize result to before or'ing in data'
- commit d2edcd9</changelog>
  <changelog author="tiwai@suse.de" date="1539259202">- Disable DRM patches that broke vbox video driver KMP (bsc#1111076)
- commit 23943c6</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259203">- blacklist.conf: Append 'Revert "drm: Use a flexible array member for blob property data"'
- commit ddc67eb</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259204">- Fix Patch-mainline tags to refer to Linux release tag
  It is expected that Patch-mainline tags refer to a release tag
  in the Linux git tree, such as v4.15. Several patches contain a
  Patch-mainline tags that instead refer to a Linux version number,
  such as 4.15. This inconsistency complicates grepping and
  automation.
  871 of 18000 patches are affected by this problem.
- commit 1d81d26</changelog>
  <changelog author="bp@suse.de" date="1539259205">- crypto: ccp - add timeout support in the SEV command
  (bsc#1106838).
- commit 912dad4</changelog>
  <changelog author="tiwai@suse.de" date="1539345600">- Update config files: update forgotten armv7hl configs
- commit 7bae3a6</changelog>
  <changelog author="msuchanek@suse.de" date="1539345601">- powerpc/numa: Skip onlining a offline node in kdump path
  (bsc#1109784).
- commit df87e51</changelog>
  <changelog author="tiwai@suse.de" date="1539345602">- squashfs metadata 2: electric boogaloo (bsc#1051510).
- squashfs: more metadata hardening (bsc#1051510).
- squashfs: be more careful about metadata corruption
  (bsc#1051510).
- commit 9bfac39</changelog>
  <changelog author="hare@suse.de" date="1539345603">- scsi: qla2xxx: Move log messages before issuing command to
  firmware (bsc#1108870).
- scsi: qla2xxx: Fix for double free of SRB structure
  (bsc#1108870).
- scsi: qla2xxx: Fix recursive mailbox timeout (bsc#1108870).
- scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
  (bsc#1108870).
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
  (bsc#1108870).
- scsi: qla2xxx: Fix duplicate switch database entries
  (bsc#1108870).
- scsi: qla2xxx: Fix NVMe Target discovery (bsc#1108870).
- scsi: qla2xxx: Fix NVMe session hang on unload (bsc#1108870).
- scsi: qla2xxx: don't allow negative thresholds (bsc#1108870).
- commit 50fe149</changelog>
  <changelog author="tiwai@suse.de" date="1539345604">- Squashfs: Compute expected length from inode size rather than
  block length (bsc#1051510).
- commit 0c4a663</changelog>
  <changelog author="tiwai@suse.de" date="1539345605">- soreuseport: initialise timewait reuseport field (bsc#1051510).
- commit bda2dcc</changelog>
  <changelog author="tiwai@suse.de" date="1539345606">- rpc_pipefs: fix double-dput() (bsc#1051510).
- commit 1a15e26</changelog>
  <changelog author="hare@suse.de" date="1539345607">- scsi: qla2xxx: Return switch command on a timeout (bsc#1108870).
- commit 8e38f2a</changelog>
</package>
<package pkgid="b8d85b9db307db5811cc8236e3372bef3b3413d783227ddbe2c5f86448e05ada" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.25.1"/>
  <changelog author="tiwai@suse.de" date="1540814400">- NFC: nfcmrvl_uart: fix OF child-node lookup (bsc#1051510).
- kernfs: update comment about kernfs_path() return value
  (bsc#1051510).
- usbip: tools: fix atoi() on non-null terminated string
  (bsc#1051510).
- USB: serial: cypress_m8: fix interrupt-out transfer length
  (bsc#1051510).
- usb: chipidea: Prevent unbalanced IRQ disable (bsc#1051510).
- commit 6c9d1e7</changelog>
  <changelog author="tiwai@suse.de" date="1540814401">- blacklist.conf: Add ASoC and USB entries that may break kABI
- commit 199a072</changelog>
  <changelog author="tiwai@suse.de" date="1540814402">- usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation
  (bsc#1051510).
- usb: gadget: fsl_udc_core: check allocation return value and
  cleanup on failure (bsc#1051510).
- commit c1b7b66</changelog>
  <changelog author="tiwai@suse.de" date="1540814403">- Refresh patch tag of upstreamed patches and move to sorted section
- commit a966b56</changelog>
  <changelog author="ohering@suse.de" date="1540900800">- move changes without Git-commit out of sorted section
- commit cbf049e</changelog>
  <changelog author="jslaby@suse.cz" date="1540900801">- random: rate limit unseeded randomness warnings (git-fixes).
- commit be52b92</changelog>
  <changelog author="jslaby@suse.cz" date="1540900802">- blacklist.conf: add a kasan fix
- commit c85e2d1</changelog>
  <changelog author="jdelvare@suse.de" date="1540900803">- Add reference to bsc#1104124 to
  patches.fixes/fs-aio-fix-the-increment-of-aio-nr-and-counting-agai.patch
- commit f60e64b</changelog>
  <changelog author="jslaby@suse.cz" date="1540900804">- tools build: fix # escaping in .cmd files for future Make
  (git-fixes).
- Kbuild: fix # escaping in .cmd files for future Make
  (git-fixes).
- commit 8f11ec3</changelog>
  <changelog author="tiwai@suse.de" date="1540900805">- drm/i915/dp: Link train Fallback on eDP only if fallback link
  BW can fit panel's native mode (bsc#1051510).
- drm/i915: Restore vblank interrupts earlier (bsc#1051510).
- commit daf120f</changelog>
  <changelog author="tiwai@suse.de" date="1540900806">- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
  (bsc#1051510).
- media: cx231xx: fix potential sign-extension overflow on large
  shift (bsc#1051510).
- media: pci: cx23885: handle adding to list failure
  (bsc#1051510).
- media: vsp1: Fix YCbCr planar formats pitch calculation
  (bsc#1051510).
- media: tvp5150: fix switch exit in set control handler
  (bsc#1051510).
- media: tvp5150: fix width alignment during set_selection()
  (bsc#1051510).
- media: em28xx: fix input name for Terratec AV 350 (bsc#1051510).
- media: em28xx: use a default format if TRY_FMT fails
  (bsc#1051510).
- media: tvp5150: avoid going past array on v4l2_querymenu()
  (bsc#1051510).
- media: dvb: fix compat ioctl translation (bsc#1051510).
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
  (bsc#1051510).
- commit 0831c5e</changelog>
  <changelog author="tiwai@suse.de" date="1540900807">- soc/tegra: pmc: Fix child-node lookup (bsc#1051510).
- serial: 8250: Fix clearing FIFOs in RS485 mode again
  (bsc#1051510).
- staging: comedi: ni_mio_common: protect register write overflow
  (bsc#1051510).
- iio: adc: at91: fix wrong channel number in triggered buffer
  mode (bsc#1051510).
- iio: adc: at91: fix acking DRDY irq on simple conversions
  (bsc#1051510).
- iio: adc: imx25-gcq: Fix leak of device_node in
  mx25_gcq_setup_cfgs() (bsc#1051510).
- commit 9f4f0cc</changelog>
  <changelog author="jthumshirn@suse.de" date="1540900808">- Refresh
  patches.fixes/0001-drm-amdgpu-powerplay-fix-missing-break-in-switch-sta.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Do-not-carry-error-code-in-HiBMC.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Don-t-overwrite-fb-helper-surfac.patch.
- Refresh
  patches.fixes/0001-drm-i915-audio-Hook-up-component-bindings-even-if-di.patch.
- Refresh
  patches.fixes/0001-drm-i915-gen9-Fix-initial-readout-for-Y-tiled-frameb.patch.
- Refresh
  patches.fixes/0001-drm-sti-do-not-remove-the-drm_bridge-that-was-never-.patch.
- Refresh
  patches.fixes/0001-drm-virtio-fix-bounds-check-in-virtio_gpu_cmd_get_ca.patch.
- commit 652fab5</changelog>
  <changelog author="tiwai@suse.de" date="1540987200">- drm/nouveau: Don't disable polling in fallback mode
  (bsc#1103356).
- Delete
  patches.suse/Revert-drm-nouveau-drm-therm-fan-add-a-fallback-if-n.
- commit aa0c431</changelog>
  <changelog author="tzimmermann@suse.de" date="1540987201">- Fix Patch-mainline for "drm/amdgpu: update tmr mc address"
  The Patch-mainline tag was incorrect. References is being updated as well.
- commit ce8535e</changelog>
  <changelog author="tiwai@suse.de" date="1540987202">- Workaround for mysterious NVMe breakage with i915 CFL
  (bsc#1111040).
- commit 0fa5877</changelog>
  <changelog author="jthumshirn@suse.de" date="1540987203">- libnvdimm, label: Fix sparse warning (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Use namespace index data to reduce number of label reads
  needed (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Split label init out from the logic for getting config
  data (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Remove empty if statement (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Clarify comment in sizeof_namespace_index (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Sanity check labeloff (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- libnvdimm, dimm: Maximize label transfer size (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7
  (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- commit 5a4eeb4</changelog>
  <changelog author="jlee@suse.com" date="1540987204">- x86/boot/KASLR: Work around firmware bugs by excluding
  EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR's choice
  (bnc#1112878).
- commit d45cd78</changelog>
  <changelog author="tiwai@suse.de" date="1540987205">- blacklist.conf: Add a few wifi driver entries that can't be applied
- commit 662fc68</changelog>
  <changelog author="tiwai@suse.de" date="1540987206">- spi/bcm63xx-hsspi: keep pll clk enabled (bsc#1051510).
- spi: sh-msiof: fix deferred probing (bsc#1051510).
- spi: bcm-qspi: switch back to reading flash using smaller chunks
  (bsc#1051510).
- commit f773242</changelog>
</package>
<package pkgid="6467fe3e2ae20c3b8e56077031dea9c5f6e8f4d9880102c52517908cb6b0367c" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.25.1"/>
  <changelog author="tiwai@suse.de" date="1540814400">- NFC: nfcmrvl_uart: fix OF child-node lookup (bsc#1051510).
- kernfs: update comment about kernfs_path() return value
  (bsc#1051510).
- usbip: tools: fix atoi() on non-null terminated string
  (bsc#1051510).
- USB: serial: cypress_m8: fix interrupt-out transfer length
  (bsc#1051510).
- usb: chipidea: Prevent unbalanced IRQ disable (bsc#1051510).
- commit 6c9d1e7</changelog>
  <changelog author="tiwai@suse.de" date="1540814401">- blacklist.conf: Add ASoC and USB entries that may break kABI
- commit 199a072</changelog>
  <changelog author="tiwai@suse.de" date="1540814402">- usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation
  (bsc#1051510).
- usb: gadget: fsl_udc_core: check allocation return value and
  cleanup on failure (bsc#1051510).
- commit c1b7b66</changelog>
  <changelog author="tiwai@suse.de" date="1540814403">- Refresh patch tag of upstreamed patches and move to sorted section
- commit a966b56</changelog>
  <changelog author="ohering@suse.de" date="1540900800">- move changes without Git-commit out of sorted section
- commit cbf049e</changelog>
  <changelog author="jslaby@suse.cz" date="1540900801">- random: rate limit unseeded randomness warnings (git-fixes).
- commit be52b92</changelog>
  <changelog author="jslaby@suse.cz" date="1540900802">- blacklist.conf: add a kasan fix
- commit c85e2d1</changelog>
  <changelog author="jdelvare@suse.de" date="1540900803">- Add reference to bsc#1104124 to
  patches.fixes/fs-aio-fix-the-increment-of-aio-nr-and-counting-agai.patch
- commit f60e64b</changelog>
  <changelog author="jslaby@suse.cz" date="1540900804">- tools build: fix # escaping in .cmd files for future Make
  (git-fixes).
- Kbuild: fix # escaping in .cmd files for future Make
  (git-fixes).
- commit 8f11ec3</changelog>
  <changelog author="tiwai@suse.de" date="1540900805">- drm/i915/dp: Link train Fallback on eDP only if fallback link
  BW can fit panel's native mode (bsc#1051510).
- drm/i915: Restore vblank interrupts earlier (bsc#1051510).
- commit daf120f</changelog>
  <changelog author="tiwai@suse.de" date="1540900806">- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
  (bsc#1051510).
- media: cx231xx: fix potential sign-extension overflow on large
  shift (bsc#1051510).
- media: pci: cx23885: handle adding to list failure
  (bsc#1051510).
- media: vsp1: Fix YCbCr planar formats pitch calculation
  (bsc#1051510).
- media: tvp5150: fix switch exit in set control handler
  (bsc#1051510).
- media: tvp5150: fix width alignment during set_selection()
  (bsc#1051510).
- media: em28xx: fix input name for Terratec AV 350 (bsc#1051510).
- media: em28xx: use a default format if TRY_FMT fails
  (bsc#1051510).
- media: tvp5150: avoid going past array on v4l2_querymenu()
  (bsc#1051510).
- media: dvb: fix compat ioctl translation (bsc#1051510).
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
  (bsc#1051510).
- commit 0831c5e</changelog>
  <changelog author="tiwai@suse.de" date="1540900807">- soc/tegra: pmc: Fix child-node lookup (bsc#1051510).
- serial: 8250: Fix clearing FIFOs in RS485 mode again
  (bsc#1051510).
- staging: comedi: ni_mio_common: protect register write overflow
  (bsc#1051510).
- iio: adc: at91: fix wrong channel number in triggered buffer
  mode (bsc#1051510).
- iio: adc: at91: fix acking DRDY irq on simple conversions
  (bsc#1051510).
- iio: adc: imx25-gcq: Fix leak of device_node in
  mx25_gcq_setup_cfgs() (bsc#1051510).
- commit 9f4f0cc</changelog>
  <changelog author="jthumshirn@suse.de" date="1540900808">- Refresh
  patches.fixes/0001-drm-amdgpu-powerplay-fix-missing-break-in-switch-sta.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Do-not-carry-error-code-in-HiBMC.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Don-t-overwrite-fb-helper-surfac.patch.
- Refresh
  patches.fixes/0001-drm-i915-audio-Hook-up-component-bindings-even-if-di.patch.
- Refresh
  patches.fixes/0001-drm-i915-gen9-Fix-initial-readout-for-Y-tiled-frameb.patch.
- Refresh
  patches.fixes/0001-drm-sti-do-not-remove-the-drm_bridge-that-was-never-.patch.
- Refresh
  patches.fixes/0001-drm-virtio-fix-bounds-check-in-virtio_gpu_cmd_get_ca.patch.
- commit 652fab5</changelog>
  <changelog author="tiwai@suse.de" date="1540987200">- drm/nouveau: Don't disable polling in fallback mode
  (bsc#1103356).
- Delete
  patches.suse/Revert-drm-nouveau-drm-therm-fan-add-a-fallback-if-n.
- commit aa0c431</changelog>
  <changelog author="tzimmermann@suse.de" date="1540987201">- Fix Patch-mainline for "drm/amdgpu: update tmr mc address"
  The Patch-mainline tag was incorrect. References is being updated as well.
- commit ce8535e</changelog>
  <changelog author="tiwai@suse.de" date="1540987202">- Workaround for mysterious NVMe breakage with i915 CFL
  (bsc#1111040).
- commit 0fa5877</changelog>
  <changelog author="jthumshirn@suse.de" date="1540987203">- libnvdimm, label: Fix sparse warning (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Use namespace index data to reduce number of label reads
  needed (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Split label init out from the logic for getting config
  data (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Remove empty if statement (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Clarify comment in sizeof_namespace_index (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Sanity check labeloff (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- libnvdimm, dimm: Maximize label transfer size (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7
  (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- commit 5a4eeb4</changelog>
  <changelog author="jlee@suse.com" date="1540987204">- x86/boot/KASLR: Work around firmware bugs by excluding
  EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR's choice
  (bnc#1112878).
- commit d45cd78</changelog>
  <changelog author="tiwai@suse.de" date="1540987205">- blacklist.conf: Add a few wifi driver entries that can't be applied
- commit 662fc68</changelog>
  <changelog author="tiwai@suse.de" date="1540987206">- spi/bcm63xx-hsspi: keep pll clk enabled (bsc#1051510).
- spi: sh-msiof: fix deferred probing (bsc#1051510).
- spi: bcm-qspi: switch back to reading flash using smaller chunks
  (bsc#1051510).
- commit f773242</changelog>
</package>
<package pkgid="a489e503f41c8c179b6d0fded78c53a7da07569192d8c3022b8f8146f8821e82" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="0a79ff875507a49f1f5753e5a91b8b0f25ae7e47994a957b0afceefd00aca4a1" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="bf6e5c3d2e636d375719f7c79d6ebaa01b6622fbf623184ec32f04ff6587e8ba" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="b022535795f95b012c3150a27042edddf20b8ce59d4143355200cf54eaf80673" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="88a18bfc078143ee63d7141740c5acebf6e059827bd68131a13e50c47a4328a5" name="kernel-kvmsmall-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="64d78cbac596f841ef04ee2a9f4f99243e4ff166044dff1ca86c827497bf524a" name="kernel-kvmsmall-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="ddfc86fe07013f7f50a06065515afc7034681bfb962dc0bbaf3d6efc3270c02d" name="kernel-kvmsmall-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="5bc255a6828a26d4825f16f9372f0ad4445e5d3c508a27bc0169fb08405d5c3d" name="kernel-kvmsmall-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.19.2"/>
  <changelog author="fdmanana@suse.com" date="1538568000">- Btrfs: fix fsync after hole punching when using no-holes feature
  (bsc#1110642).
- commit 3f19b40</changelog>
  <changelog author="fdmanana@suse.com" date="1538568001">- Btrfs: fix loss of prealloc extents past i_size after fsync
  log replay (bsc#1110643).
- commit 974e057</changelog>
  <changelog author="fdmanana@suse.com" date="1538568002">- Btrfs: fix duplicate extents after fsync of file with prealloc
  extents (bsc#1110644).
- commit c4ec603</changelog>
  <changelog author="fdmanana@suse.com" date="1538568003">- Btrfs: fix return value on rename exchange failure
  (bsc#1110645).
- commit 532729c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568004">- Btrfs: sync log after logging new name (bsc#1110646).
- commit 7260d6b</changelog>
  <changelog author="fdmanana@suse.com" date="1538568005">- Btrfs: fix data corruption when deduplicating between different
  files (bsc#1110647).
- commit 669848c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568006">- btrfs: Remove unused parameters from various functions
  (bsc#1110649).
- commit c97c657</changelog>
  <changelog author="fdmanana@suse.com" date="1538568007">- Btrfs: fix send failure when root has deleted files still open
  (bsc#1110650).
- commit f52554d</changelog>
  <changelog author="jslaby@suse.cz" date="1538568008">- watchdog: Mark watchdog touch functions as notrace (git-fixes).
- commit 8b53193</changelog>
  <changelog author="neilb@suse.com" date="1538654400">- nfs/filelayout: fix oops when freeing filelayout segment
  (bsc#1105190).
- NFS/filelayout: Fix racy setting of fl-&gt;dsaddr in
  filelayout_check_deviceid() (bsc#1105190).
- commit d6d0fab</changelog>
  <changelog author="neilb@suse.com" date="1538654401">- VFS: don't test owner for NFS in set_posix_acl() (bsc#1103405).
- commit 36f977a</changelog>
  <changelog author="tiwai@suse.de" date="1538654402">- README.BRANCH: SLE15-SP1 branch maintainer changes
  Add ptesarik as co-maintainer, keep tiwai as the primary maintainer
- commit 83aea11</changelog>
  <changelog author="wqu@suse.com" date="1538654403">- btrfs: tests/qgroup: Fix wrong tree backref level (bsc#1107928).
- commit a5e154c</changelog>
  <changelog author="wqu@suse.com" date="1538654404">- btrfs: check-integrity: Fix NULL pointer dereference for
  degraded mount (bsc#1107947).
- commit 77b2277</changelog>
  <changelog author="wqu@suse.com" date="1538654405">- btrfs: scrub: Don't use inode pages for device replace (follow
  up for bsc#1108096).
- commit c865775</changelog>
  <changelog author="tiwai@suse.de" date="1538654406">- ASoC: cs4265: fix MMTLR Data switch control (bsc#1051510).
- ALSA: fireworks: fix memory leak of response buffer at error
  path (bsc#1051510).
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix
  I/O at error path (bsc#1051510).
- ALSA: emu10k1: fix possible info leak to userspace on
  SNDRV_EMU10K1_IOCTL_INFO (bsc#1051510).
- ALSA: bebob: use address returned by kmalloc() instead of
  kernel stack for streaming DMA mapping (bsc#1051510).
- ASoC: rt5514: Fix the issue of the delay volume applied
  (bsc#1051510).
- ASoC: dapm: Fix potential DAI widget pointer deref when linking
  DAIs (bsc#1051510).
- ALSA: msnd: Fix the default sample sizes (bsc#1051510).
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE()
  macro (bsc#1051510).
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
  (bsc#1051510).
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
  (bsc#1051510).
- ASoC: rt5514: Add the missing register in the readable table
  (bsc#1051510).
- ASoC: rt5514: Eliminate the noise in the ASRC case
  (bsc#1051510).
- ASoC: rt5514: Add the I2S ASRC support (bsc#1051510).
- commit 4eba9c8</changelog>
  <changelog author="wqu@suse.com" date="1538654407">- btrfs: scrub: Don't use inode page cache in
  scrub_handle_errored_block() (follow up for bsc#1108096).
- commit 3f91c84</changelog>
  <changelog author="tiwai@suse.de" date="1538654408">- smsc95xx: Check for Wake-on-LAN modes (bsc#1051510).
- smsc75xx: Check for Wake-on-LAN modes (bsc#1051510).
- r8152: Check for supported Wake-on-LAN Modes (bsc#1051510).
- sr9800: Check for supported Wake-on-LAN modes (bsc#1051510).
- lan78xx: Check for supported Wake-on-LAN modes (bsc#1051510).
- ax88179_178a: Check for supported Wake-on-LAN modes
  (bsc#1051510).
- mac80211: fix pending queue hang due to TX_DROP (bsc#1051510).
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
  (bsc#1051510).
- Input: elantech - enable middle button of touchpad on ThinkPad
  P72 (bsc#1051510).
- regulator: fix crash caused by null driver data (bsc#1051510).
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
  (bsc#1051510).
- intel_th: Fix device removal logic (bsc#1051510).
- NFC: Fix possible memory corruption when handling SHDLC I-Frame
  commands (bsc#1051510).
- platform/x86: alienware-wmi: Correct a memory leak
  (bsc#1051510).
- xhci: Fix use after free for URB cancellation on a reallocated
  endpoint (bsc#1051510).
- mei: ignore not found client in the enumeration (bsc#1051510).
- i2c: i801: Allow ACPI AML access I/O ports not reserved for
  SMBus (bsc#1051510).
- fbdev/via: fix defined but not used warning (bsc#1051510).
- video: goldfishfb: fix memory leak on driver remove
  (bsc#1051510).
- fbdev: Distinguish between interlaced and progressive modes
  (bsc#1051510).
- platform/x86: toshiba_acpi: Fix defined but not used build
  warnings (bsc#1051510).
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
  (bsc#1051510).
- input: rohm_bu21023: switch to i2c_lock_bus(...,
  I2C_LOCK_SEGMENT) (bsc#1051510).
- HID: hid-ntrig: add error handling for sysfs_create_group
  (bsc#1051510).
- mfd: ti_am335x_tscadc: Fix struct clk memory leak (bsc#1051510).
- mmc: sdhci: do not try to use 3.3V signaling if not supported
  (bsc#1051510).
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
  (bsc#1051510).
- parport: sunbpp: fix error return code (bsc#1051510).
- coresight: Handle errors in finding input/output ports
  (bsc#1051510).
- mei: bus: type promotion bug in mei_nfc_if_version()
  (bsc#1051510).
- gpio: pxa: Fix potential NULL dereference (bsc#1051510).
- gpiolib: Mark gpio_suffixes array with __maybe_unused
  (bsc#1051510).
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
  (bsc#1051510).
- crypto: sharah - Unregister correct algorithms for SAHARA 3
  (bsc#1051510).
- crypto: skcipher - Fix -Wstringop-truncation warnings
  (bsc#1051510).
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
  (bsc#1051510).
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 (bsc#1051510).
- mac80211: restrict delayed tailroom needed decrement
  (bsc#1051510).
- wlcore: Add missing PM call for
  wlcore_cmd_wait_for_event_or_timeout() (bsc#1051510).
- commit e266792</changelog>
  <changelog author="mbrugger@suse.com" date="1538654409">- arm64: Update config files. (bsc#1110716)
  Enable ST LPS25H pressure sensor.
- commit 69c6902</changelog>
  <changelog author="jack@suse.cz" date="1538654410">- patches.fixes/x86-memory_failure-Introduce-set-clear-_mce_nospec.patch:
  Fixup compilation breakage on s390 and arm due to missing
  clear_mce_nospec().
- commit faef795</changelog>
</package>
<package pkgid="289d09cea96735beeb0eb67d304cd419f7f7b1ce17d137a38b08ce514f694b29" name="kernel-kvmsmall-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.22.1"/>
  <changelog author="tiwai@suse.de" date="1539172800">- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell
  XPS 27 7760 (bsc#1051510).
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
  (bsc#1051510).
- crypto: mxs-dcp - Fix wait logic on chan threads (bsc#1051510).
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM
  ioctl (bsc#1051510).
- HID: add support for Apple Magic Keyboards (bsc#1051510).
- gpio: Fix crash due to registration race (bsc#1051510).
- gpiolib-acpi: Register GpioInt ACPI event handlers from a
  late_initcall (bsc#1051510).
- gpio: adp5588: Fix sleep-in-atomic-context bug (bsc#1051510).
- cfg80211: fix a type issue in
  ieee80211_chandef_to_operating_class() (bsc#1051510).
- Revert "gpio: set up initial state from .get_direction()"
  (bsc#1051510).
- gpio: mb86s70: Revert "Return error if requesting an already
  assigned gpio" (bsc#1051510).
- commit 2759d22</changelog>
  <changelog author="mbrugger@suse.com" date="1539172801">- arm64: Update config files.
  Enable SENSORS_RASPBERRYPI_HWMON
- commit 2a83945</changelog>
  <changelog author="mbrugger@suse.com" date="1539172802">- supported.conf: mark raspberrypi-hwmon as supported
- commit af8ddda</changelog>
  <changelog author="tiwai@suse.de" date="1539172803">- HID: hid-saitek: Add device ID for RAT 7 Contagion
  (bsc#1051510).
- mac80211: shorten the IBSS debug messages (bsc#1051510).
- mac80211: don't Tx a deauth frame if the AP forbade Tx
  (bsc#1051510).
- mac80211: Fix station bandwidth setting after channel switch
  (bsc#1051510).
- mac80211: fix a race between restart and CSA flows
  (bsc#1051510).
- mac80211: do not convert to A-MSDU if frag/subframe limited
  (bsc#1051510).
- mac80211: mesh: fix HWMP sequence numbering to follow standard
  (bsc#1051510).
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211_hwsim: require at least one channel (bsc#1051510).
- mac80211: Run TXQ teardown code before de-registering interfaces
  (bsc#1051510).
- hwmon: (adt7475) Make adt7475_read_word() return errors
  (bsc#1051510).
- hwmon: (ina2xx) fix sysfs shunt resistor read access
  (bsc#1051510).
- commit af836cd</changelog>
  <changelog author="tiwai@suse.de" date="1539172804">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- Revert "mwifiex: handle race during mwifiex_usb_disconnect"
  (bsc#1051510).
- media: videobuf-dma-sg: Fix dma_{sync,unmap}_sg() calls
  (bsc#1051510).
- Revert "mwifiex: fix incorrect ht capability problem"
  (bsc#1051510).
- PM / Domains: Fix genpd to deal with drivers returning 1 from
  - &gt;prepare() (bsc#1051510).
- Revert "pinctrl: sunxi: Don't enforce bias disable (for now)"
  (bsc#1051510).
- commit fb6c36a</changelog>
  <changelog author="tiwai@suse.de" date="1539172805">- blacklist.conf: Add blacklist of inapplicable revert commits
  They are either not applicable or requiring more backports that aren't
  suitable for SLE15
- commit 987dd44</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259200">- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk (bsc#1106110)
- commit 273a6bd</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259201">- blacklist.conf: Append 'drm/amd/pp: initialize result to before or'ing in data'
- commit d2edcd9</changelog>
  <changelog author="tiwai@suse.de" date="1539259202">- Disable DRM patches that broke vbox video driver KMP (bsc#1111076)
- commit 23943c6</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259203">- blacklist.conf: Append 'Revert "drm: Use a flexible array member for blob property data"'
- commit ddc67eb</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259204">- Fix Patch-mainline tags to refer to Linux release tag
  It is expected that Patch-mainline tags refer to a release tag
  in the Linux git tree, such as v4.15. Several patches contain a
  Patch-mainline tags that instead refer to a Linux version number,
  such as 4.15. This inconsistency complicates grepping and
  automation.
  871 of 18000 patches are affected by this problem.
- commit 1d81d26</changelog>
  <changelog author="bp@suse.de" date="1539259205">- crypto: ccp - add timeout support in the SEV command
  (bsc#1106838).
- commit 912dad4</changelog>
  <changelog author="tiwai@suse.de" date="1539345600">- Update config files: update forgotten armv7hl configs
- commit 7bae3a6</changelog>
  <changelog author="msuchanek@suse.de" date="1539345601">- powerpc/numa: Skip onlining a offline node in kdump path
  (bsc#1109784).
- commit df87e51</changelog>
  <changelog author="tiwai@suse.de" date="1539345602">- squashfs metadata 2: electric boogaloo (bsc#1051510).
- squashfs: more metadata hardening (bsc#1051510).
- squashfs: be more careful about metadata corruption
  (bsc#1051510).
- commit 9bfac39</changelog>
  <changelog author="hare@suse.de" date="1539345603">- scsi: qla2xxx: Move log messages before issuing command to
  firmware (bsc#1108870).
- scsi: qla2xxx: Fix for double free of SRB structure
  (bsc#1108870).
- scsi: qla2xxx: Fix recursive mailbox timeout (bsc#1108870).
- scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
  (bsc#1108870).
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
  (bsc#1108870).
- scsi: qla2xxx: Fix duplicate switch database entries
  (bsc#1108870).
- scsi: qla2xxx: Fix NVMe Target discovery (bsc#1108870).
- scsi: qla2xxx: Fix NVMe session hang on unload (bsc#1108870).
- scsi: qla2xxx: don't allow negative thresholds (bsc#1108870).
- commit 50fe149</changelog>
  <changelog author="tiwai@suse.de" date="1539345604">- Squashfs: Compute expected length from inode size rather than
  block length (bsc#1051510).
- commit 0c4a663</changelog>
  <changelog author="tiwai@suse.de" date="1539345605">- soreuseport: initialise timewait reuseport field (bsc#1051510).
- commit bda2dcc</changelog>
  <changelog author="tiwai@suse.de" date="1539345606">- rpc_pipefs: fix double-dput() (bsc#1051510).
- commit 1a15e26</changelog>
  <changelog author="hare@suse.de" date="1539345607">- scsi: qla2xxx: Return switch command on a timeout (bsc#1108870).
- commit 8e38f2a</changelog>
</package>
<package pkgid="05d1aa4c4cc8ff3f4240c0bfeb773ab9390dc399160aac11f7d37eb2fd980e6a" name="kernel-kvmsmall-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.25.1"/>
  <changelog author="tiwai@suse.de" date="1540814400">- NFC: nfcmrvl_uart: fix OF child-node lookup (bsc#1051510).
- kernfs: update comment about kernfs_path() return value
  (bsc#1051510).
- usbip: tools: fix atoi() on non-null terminated string
  (bsc#1051510).
- USB: serial: cypress_m8: fix interrupt-out transfer length
  (bsc#1051510).
- usb: chipidea: Prevent unbalanced IRQ disable (bsc#1051510).
- commit 6c9d1e7</changelog>
  <changelog author="tiwai@suse.de" date="1540814401">- blacklist.conf: Add ASoC and USB entries that may break kABI
- commit 199a072</changelog>
  <changelog author="tiwai@suse.de" date="1540814402">- usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation
  (bsc#1051510).
- usb: gadget: fsl_udc_core: check allocation return value and
  cleanup on failure (bsc#1051510).
- commit c1b7b66</changelog>
  <changelog author="tiwai@suse.de" date="1540814403">- Refresh patch tag of upstreamed patches and move to sorted section
- commit a966b56</changelog>
  <changelog author="ohering@suse.de" date="1540900800">- move changes without Git-commit out of sorted section
- commit cbf049e</changelog>
  <changelog author="jslaby@suse.cz" date="1540900801">- random: rate limit unseeded randomness warnings (git-fixes).
- commit be52b92</changelog>
  <changelog author="jslaby@suse.cz" date="1540900802">- blacklist.conf: add a kasan fix
- commit c85e2d1</changelog>
  <changelog author="jdelvare@suse.de" date="1540900803">- Add reference to bsc#1104124 to
  patches.fixes/fs-aio-fix-the-increment-of-aio-nr-and-counting-agai.patch
- commit f60e64b</changelog>
  <changelog author="jslaby@suse.cz" date="1540900804">- tools build: fix # escaping in .cmd files for future Make
  (git-fixes).
- Kbuild: fix # escaping in .cmd files for future Make
  (git-fixes).
- commit 8f11ec3</changelog>
  <changelog author="tiwai@suse.de" date="1540900805">- drm/i915/dp: Link train Fallback on eDP only if fallback link
  BW can fit panel's native mode (bsc#1051510).
- drm/i915: Restore vblank interrupts earlier (bsc#1051510).
- commit daf120f</changelog>
  <changelog author="tiwai@suse.de" date="1540900806">- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
  (bsc#1051510).
- media: cx231xx: fix potential sign-extension overflow on large
  shift (bsc#1051510).
- media: pci: cx23885: handle adding to list failure
  (bsc#1051510).
- media: vsp1: Fix YCbCr planar formats pitch calculation
  (bsc#1051510).
- media: tvp5150: fix switch exit in set control handler
  (bsc#1051510).
- media: tvp5150: fix width alignment during set_selection()
  (bsc#1051510).
- media: em28xx: fix input name for Terratec AV 350 (bsc#1051510).
- media: em28xx: use a default format if TRY_FMT fails
  (bsc#1051510).
- media: tvp5150: avoid going past array on v4l2_querymenu()
  (bsc#1051510).
- media: dvb: fix compat ioctl translation (bsc#1051510).
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
  (bsc#1051510).
- commit 0831c5e</changelog>
  <changelog author="tiwai@suse.de" date="1540900807">- soc/tegra: pmc: Fix child-node lookup (bsc#1051510).
- serial: 8250: Fix clearing FIFOs in RS485 mode again
  (bsc#1051510).
- staging: comedi: ni_mio_common: protect register write overflow
  (bsc#1051510).
- iio: adc: at91: fix wrong channel number in triggered buffer
  mode (bsc#1051510).
- iio: adc: at91: fix acking DRDY irq on simple conversions
  (bsc#1051510).
- iio: adc: imx25-gcq: Fix leak of device_node in
  mx25_gcq_setup_cfgs() (bsc#1051510).
- commit 9f4f0cc</changelog>
  <changelog author="jthumshirn@suse.de" date="1540900808">- Refresh
  patches.fixes/0001-drm-amdgpu-powerplay-fix-missing-break-in-switch-sta.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Do-not-carry-error-code-in-HiBMC.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Don-t-overwrite-fb-helper-surfac.patch.
- Refresh
  patches.fixes/0001-drm-i915-audio-Hook-up-component-bindings-even-if-di.patch.
- Refresh
  patches.fixes/0001-drm-i915-gen9-Fix-initial-readout-for-Y-tiled-frameb.patch.
- Refresh
  patches.fixes/0001-drm-sti-do-not-remove-the-drm_bridge-that-was-never-.patch.
- Refresh
  patches.fixes/0001-drm-virtio-fix-bounds-check-in-virtio_gpu_cmd_get_ca.patch.
- commit 652fab5</changelog>
  <changelog author="tiwai@suse.de" date="1540987200">- drm/nouveau: Don't disable polling in fallback mode
  (bsc#1103356).
- Delete
  patches.suse/Revert-drm-nouveau-drm-therm-fan-add-a-fallback-if-n.
- commit aa0c431</changelog>
  <changelog author="tzimmermann@suse.de" date="1540987201">- Fix Patch-mainline for "drm/amdgpu: update tmr mc address"
  The Patch-mainline tag was incorrect. References is being updated as well.
- commit ce8535e</changelog>
  <changelog author="tiwai@suse.de" date="1540987202">- Workaround for mysterious NVMe breakage with i915 CFL
  (bsc#1111040).
- commit 0fa5877</changelog>
  <changelog author="jthumshirn@suse.de" date="1540987203">- libnvdimm, label: Fix sparse warning (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Use namespace index data to reduce number of label reads
  needed (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Split label init out from the logic for getting config
  data (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Remove empty if statement (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Clarify comment in sizeof_namespace_index (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Sanity check labeloff (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- libnvdimm, dimm: Maximize label transfer size (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7
  (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- commit 5a4eeb4</changelog>
  <changelog author="jlee@suse.com" date="1540987204">- x86/boot/KASLR: Work around firmware bugs by excluding
  EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR's choice
  (bnc#1112878).
- commit d45cd78</changelog>
  <changelog author="tiwai@suse.de" date="1540987205">- blacklist.conf: Add a few wifi driver entries that can't be applied
- commit 662fc68</changelog>
  <changelog author="tiwai@suse.de" date="1540987206">- spi/bcm63xx-hsspi: keep pll clk enabled (bsc#1051510).
- spi: sh-msiof: fix deferred probing (bsc#1051510).
- spi: bcm-qspi: switch back to reading flash using smaller chunks
  (bsc#1051510).
- commit f773242</changelog>
</package>
<package pkgid="2440ecc5d7e513caabfe49059d9ff2a29bb9a0ae3245b3003abb9ba5abb71f65" name="kernel-kvmsmall-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="652d170f7872c3e2d26c5a5d2631035d1dcda10ee4d53e2b6ada3fd41137a01b" name="kernel-kvmsmall-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="d06ce19808a20883860085dddd28576849212937fa6d8eada7b8c8aa85a8a404" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="49c83f5a7b5f79127610059ef1614f8493851422cec1894b4fe09d27c38f98d9" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="994f45a50300beefe569ca8f32939ad2241dd405682df02773d1c872534dba03" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="8de7a09e40e42f32da545ad7dbb1a3e4e1293ad1a5244dac4d1ffc7b731f40c5" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.19.2"/>
  <changelog author="fdmanana@suse.com" date="1538568000">- Btrfs: fix fsync after hole punching when using no-holes feature
  (bsc#1110642).
- commit 3f19b40</changelog>
  <changelog author="fdmanana@suse.com" date="1538568001">- Btrfs: fix loss of prealloc extents past i_size after fsync
  log replay (bsc#1110643).
- commit 974e057</changelog>
  <changelog author="fdmanana@suse.com" date="1538568002">- Btrfs: fix duplicate extents after fsync of file with prealloc
  extents (bsc#1110644).
- commit c4ec603</changelog>
  <changelog author="fdmanana@suse.com" date="1538568003">- Btrfs: fix return value on rename exchange failure
  (bsc#1110645).
- commit 532729c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568004">- Btrfs: sync log after logging new name (bsc#1110646).
- commit 7260d6b</changelog>
  <changelog author="fdmanana@suse.com" date="1538568005">- Btrfs: fix data corruption when deduplicating between different
  files (bsc#1110647).
- commit 669848c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568006">- btrfs: Remove unused parameters from various functions
  (bsc#1110649).
- commit c97c657</changelog>
  <changelog author="fdmanana@suse.com" date="1538568007">- Btrfs: fix send failure when root has deleted files still open
  (bsc#1110650).
- commit f52554d</changelog>
  <changelog author="jslaby@suse.cz" date="1538568008">- watchdog: Mark watchdog touch functions as notrace (git-fixes).
- commit 8b53193</changelog>
  <changelog author="neilb@suse.com" date="1538654400">- nfs/filelayout: fix oops when freeing filelayout segment
  (bsc#1105190).
- NFS/filelayout: Fix racy setting of fl-&gt;dsaddr in
  filelayout_check_deviceid() (bsc#1105190).
- commit d6d0fab</changelog>
  <changelog author="neilb@suse.com" date="1538654401">- VFS: don't test owner for NFS in set_posix_acl() (bsc#1103405).
- commit 36f977a</changelog>
  <changelog author="tiwai@suse.de" date="1538654402">- README.BRANCH: SLE15-SP1 branch maintainer changes
  Add ptesarik as co-maintainer, keep tiwai as the primary maintainer
- commit 83aea11</changelog>
  <changelog author="wqu@suse.com" date="1538654403">- btrfs: tests/qgroup: Fix wrong tree backref level (bsc#1107928).
- commit a5e154c</changelog>
  <changelog author="wqu@suse.com" date="1538654404">- btrfs: check-integrity: Fix NULL pointer dereference for
  degraded mount (bsc#1107947).
- commit 77b2277</changelog>
  <changelog author="wqu@suse.com" date="1538654405">- btrfs: scrub: Don't use inode pages for device replace (follow
  up for bsc#1108096).
- commit c865775</changelog>
  <changelog author="tiwai@suse.de" date="1538654406">- ASoC: cs4265: fix MMTLR Data switch control (bsc#1051510).
- ALSA: fireworks: fix memory leak of response buffer at error
  path (bsc#1051510).
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix
  I/O at error path (bsc#1051510).
- ALSA: emu10k1: fix possible info leak to userspace on
  SNDRV_EMU10K1_IOCTL_INFO (bsc#1051510).
- ALSA: bebob: use address returned by kmalloc() instead of
  kernel stack for streaming DMA mapping (bsc#1051510).
- ASoC: rt5514: Fix the issue of the delay volume applied
  (bsc#1051510).
- ASoC: dapm: Fix potential DAI widget pointer deref when linking
  DAIs (bsc#1051510).
- ALSA: msnd: Fix the default sample sizes (bsc#1051510).
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE()
  macro (bsc#1051510).
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
  (bsc#1051510).
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
  (bsc#1051510).
- ASoC: rt5514: Add the missing register in the readable table
  (bsc#1051510).
- ASoC: rt5514: Eliminate the noise in the ASRC case
  (bsc#1051510).
- ASoC: rt5514: Add the I2S ASRC support (bsc#1051510).
- commit 4eba9c8</changelog>
  <changelog author="wqu@suse.com" date="1538654407">- btrfs: scrub: Don't use inode page cache in
  scrub_handle_errored_block() (follow up for bsc#1108096).
- commit 3f91c84</changelog>
  <changelog author="tiwai@suse.de" date="1538654408">- smsc95xx: Check for Wake-on-LAN modes (bsc#1051510).
- smsc75xx: Check for Wake-on-LAN modes (bsc#1051510).
- r8152: Check for supported Wake-on-LAN Modes (bsc#1051510).
- sr9800: Check for supported Wake-on-LAN modes (bsc#1051510).
- lan78xx: Check for supported Wake-on-LAN modes (bsc#1051510).
- ax88179_178a: Check for supported Wake-on-LAN modes
  (bsc#1051510).
- mac80211: fix pending queue hang due to TX_DROP (bsc#1051510).
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
  (bsc#1051510).
- Input: elantech - enable middle button of touchpad on ThinkPad
  P72 (bsc#1051510).
- regulator: fix crash caused by null driver data (bsc#1051510).
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
  (bsc#1051510).
- intel_th: Fix device removal logic (bsc#1051510).
- NFC: Fix possible memory corruption when handling SHDLC I-Frame
  commands (bsc#1051510).
- platform/x86: alienware-wmi: Correct a memory leak
  (bsc#1051510).
- xhci: Fix use after free for URB cancellation on a reallocated
  endpoint (bsc#1051510).
- mei: ignore not found client in the enumeration (bsc#1051510).
- i2c: i801: Allow ACPI AML access I/O ports not reserved for
  SMBus (bsc#1051510).
- fbdev/via: fix defined but not used warning (bsc#1051510).
- video: goldfishfb: fix memory leak on driver remove
  (bsc#1051510).
- fbdev: Distinguish between interlaced and progressive modes
  (bsc#1051510).
- platform/x86: toshiba_acpi: Fix defined but not used build
  warnings (bsc#1051510).
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
  (bsc#1051510).
- input: rohm_bu21023: switch to i2c_lock_bus(...,
  I2C_LOCK_SEGMENT) (bsc#1051510).
- HID: hid-ntrig: add error handling for sysfs_create_group
  (bsc#1051510).
- mfd: ti_am335x_tscadc: Fix struct clk memory leak (bsc#1051510).
- mmc: sdhci: do not try to use 3.3V signaling if not supported
  (bsc#1051510).
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
  (bsc#1051510).
- parport: sunbpp: fix error return code (bsc#1051510).
- coresight: Handle errors in finding input/output ports
  (bsc#1051510).
- mei: bus: type promotion bug in mei_nfc_if_version()
  (bsc#1051510).
- gpio: pxa: Fix potential NULL dereference (bsc#1051510).
- gpiolib: Mark gpio_suffixes array with __maybe_unused
  (bsc#1051510).
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
  (bsc#1051510).
- crypto: sharah - Unregister correct algorithms for SAHARA 3
  (bsc#1051510).
- crypto: skcipher - Fix -Wstringop-truncation warnings
  (bsc#1051510).
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
  (bsc#1051510).
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 (bsc#1051510).
- mac80211: restrict delayed tailroom needed decrement
  (bsc#1051510).
- wlcore: Add missing PM call for
  wlcore_cmd_wait_for_event_or_timeout() (bsc#1051510).
- commit e266792</changelog>
  <changelog author="mbrugger@suse.com" date="1538654409">- arm64: Update config files. (bsc#1110716)
  Enable ST LPS25H pressure sensor.
- commit 69c6902</changelog>
  <changelog author="jack@suse.cz" date="1538654410">- patches.fixes/x86-memory_failure-Introduce-set-clear-_mce_nospec.patch:
  Fixup compilation breakage on s390 and arm due to missing
  clear_mce_nospec().
- commit faef795</changelog>
</package>
<package pkgid="737354b33a9201aa2c6cbe11026228a84a8d923d435bc58cc276f00e47c233d4" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.22.1"/>
  <changelog author="tiwai@suse.de" date="1539172800">- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell
  XPS 27 7760 (bsc#1051510).
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
  (bsc#1051510).
- crypto: mxs-dcp - Fix wait logic on chan threads (bsc#1051510).
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM
  ioctl (bsc#1051510).
- HID: add support for Apple Magic Keyboards (bsc#1051510).
- gpio: Fix crash due to registration race (bsc#1051510).
- gpiolib-acpi: Register GpioInt ACPI event handlers from a
  late_initcall (bsc#1051510).
- gpio: adp5588: Fix sleep-in-atomic-context bug (bsc#1051510).
- cfg80211: fix a type issue in
  ieee80211_chandef_to_operating_class() (bsc#1051510).
- Revert "gpio: set up initial state from .get_direction()"
  (bsc#1051510).
- gpio: mb86s70: Revert "Return error if requesting an already
  assigned gpio" (bsc#1051510).
- commit 2759d22</changelog>
  <changelog author="mbrugger@suse.com" date="1539172801">- arm64: Update config files.
  Enable SENSORS_RASPBERRYPI_HWMON
- commit 2a83945</changelog>
  <changelog author="mbrugger@suse.com" date="1539172802">- supported.conf: mark raspberrypi-hwmon as supported
- commit af8ddda</changelog>
  <changelog author="tiwai@suse.de" date="1539172803">- HID: hid-saitek: Add device ID for RAT 7 Contagion
  (bsc#1051510).
- mac80211: shorten the IBSS debug messages (bsc#1051510).
- mac80211: don't Tx a deauth frame if the AP forbade Tx
  (bsc#1051510).
- mac80211: Fix station bandwidth setting after channel switch
  (bsc#1051510).
- mac80211: fix a race between restart and CSA flows
  (bsc#1051510).
- mac80211: do not convert to A-MSDU if frag/subframe limited
  (bsc#1051510).
- mac80211: mesh: fix HWMP sequence numbering to follow standard
  (bsc#1051510).
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211_hwsim: require at least one channel (bsc#1051510).
- mac80211: Run TXQ teardown code before de-registering interfaces
  (bsc#1051510).
- hwmon: (adt7475) Make adt7475_read_word() return errors
  (bsc#1051510).
- hwmon: (ina2xx) fix sysfs shunt resistor read access
  (bsc#1051510).
- commit af836cd</changelog>
  <changelog author="tiwai@suse.de" date="1539172804">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- Revert "mwifiex: handle race during mwifiex_usb_disconnect"
  (bsc#1051510).
- media: videobuf-dma-sg: Fix dma_{sync,unmap}_sg() calls
  (bsc#1051510).
- Revert "mwifiex: fix incorrect ht capability problem"
  (bsc#1051510).
- PM / Domains: Fix genpd to deal with drivers returning 1 from
  - &gt;prepare() (bsc#1051510).
- Revert "pinctrl: sunxi: Don't enforce bias disable (for now)"
  (bsc#1051510).
- commit fb6c36a</changelog>
  <changelog author="tiwai@suse.de" date="1539172805">- blacklist.conf: Add blacklist of inapplicable revert commits
  They are either not applicable or requiring more backports that aren't
  suitable for SLE15
- commit 987dd44</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259200">- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk (bsc#1106110)
- commit 273a6bd</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259201">- blacklist.conf: Append 'drm/amd/pp: initialize result to before or'ing in data'
- commit d2edcd9</changelog>
  <changelog author="tiwai@suse.de" date="1539259202">- Disable DRM patches that broke vbox video driver KMP (bsc#1111076)
- commit 23943c6</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259203">- blacklist.conf: Append 'Revert "drm: Use a flexible array member for blob property data"'
- commit ddc67eb</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259204">- Fix Patch-mainline tags to refer to Linux release tag
  It is expected that Patch-mainline tags refer to a release tag
  in the Linux git tree, such as v4.15. Several patches contain a
  Patch-mainline tags that instead refer to a Linux version number,
  such as 4.15. This inconsistency complicates grepping and
  automation.
  871 of 18000 patches are affected by this problem.
- commit 1d81d26</changelog>
  <changelog author="bp@suse.de" date="1539259205">- crypto: ccp - add timeout support in the SEV command
  (bsc#1106838).
- commit 912dad4</changelog>
  <changelog author="tiwai@suse.de" date="1539345600">- Update config files: update forgotten armv7hl configs
- commit 7bae3a6</changelog>
  <changelog author="msuchanek@suse.de" date="1539345601">- powerpc/numa: Skip onlining a offline node in kdump path
  (bsc#1109784).
- commit df87e51</changelog>
  <changelog author="tiwai@suse.de" date="1539345602">- squashfs metadata 2: electric boogaloo (bsc#1051510).
- squashfs: more metadata hardening (bsc#1051510).
- squashfs: be more careful about metadata corruption
  (bsc#1051510).
- commit 9bfac39</changelog>
  <changelog author="hare@suse.de" date="1539345603">- scsi: qla2xxx: Move log messages before issuing command to
  firmware (bsc#1108870).
- scsi: qla2xxx: Fix for double free of SRB structure
  (bsc#1108870).
- scsi: qla2xxx: Fix recursive mailbox timeout (bsc#1108870).
- scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
  (bsc#1108870).
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
  (bsc#1108870).
- scsi: qla2xxx: Fix duplicate switch database entries
  (bsc#1108870).
- scsi: qla2xxx: Fix NVMe Target discovery (bsc#1108870).
- scsi: qla2xxx: Fix NVMe session hang on unload (bsc#1108870).
- scsi: qla2xxx: don't allow negative thresholds (bsc#1108870).
- commit 50fe149</changelog>
  <changelog author="tiwai@suse.de" date="1539345604">- Squashfs: Compute expected length from inode size rather than
  block length (bsc#1051510).
- commit 0c4a663</changelog>
  <changelog author="tiwai@suse.de" date="1539345605">- soreuseport: initialise timewait reuseport field (bsc#1051510).
- commit bda2dcc</changelog>
  <changelog author="tiwai@suse.de" date="1539345606">- rpc_pipefs: fix double-dput() (bsc#1051510).
- commit 1a15e26</changelog>
  <changelog author="hare@suse.de" date="1539345607">- scsi: qla2xxx: Return switch command on a timeout (bsc#1108870).
- commit 8e38f2a</changelog>
</package>
<package pkgid="67bbf2ce9f466ffa3266ae23e3001716234625ab67b54aab80fa68f14da2fece" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.25.1"/>
  <changelog author="tiwai@suse.de" date="1540814400">- NFC: nfcmrvl_uart: fix OF child-node lookup (bsc#1051510).
- kernfs: update comment about kernfs_path() return value
  (bsc#1051510).
- usbip: tools: fix atoi() on non-null terminated string
  (bsc#1051510).
- USB: serial: cypress_m8: fix interrupt-out transfer length
  (bsc#1051510).
- usb: chipidea: Prevent unbalanced IRQ disable (bsc#1051510).
- commit 6c9d1e7</changelog>
  <changelog author="tiwai@suse.de" date="1540814401">- blacklist.conf: Add ASoC and USB entries that may break kABI
- commit 199a072</changelog>
  <changelog author="tiwai@suse.de" date="1540814402">- usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation
  (bsc#1051510).
- usb: gadget: fsl_udc_core: check allocation return value and
  cleanup on failure (bsc#1051510).
- commit c1b7b66</changelog>
  <changelog author="tiwai@suse.de" date="1540814403">- Refresh patch tag of upstreamed patches and move to sorted section
- commit a966b56</changelog>
  <changelog author="ohering@suse.de" date="1540900800">- move changes without Git-commit out of sorted section
- commit cbf049e</changelog>
  <changelog author="jslaby@suse.cz" date="1540900801">- random: rate limit unseeded randomness warnings (git-fixes).
- commit be52b92</changelog>
  <changelog author="jslaby@suse.cz" date="1540900802">- blacklist.conf: add a kasan fix
- commit c85e2d1</changelog>
  <changelog author="jdelvare@suse.de" date="1540900803">- Add reference to bsc#1104124 to
  patches.fixes/fs-aio-fix-the-increment-of-aio-nr-and-counting-agai.patch
- commit f60e64b</changelog>
  <changelog author="jslaby@suse.cz" date="1540900804">- tools build: fix # escaping in .cmd files for future Make
  (git-fixes).
- Kbuild: fix # escaping in .cmd files for future Make
  (git-fixes).
- commit 8f11ec3</changelog>
  <changelog author="tiwai@suse.de" date="1540900805">- drm/i915/dp: Link train Fallback on eDP only if fallback link
  BW can fit panel's native mode (bsc#1051510).
- drm/i915: Restore vblank interrupts earlier (bsc#1051510).
- commit daf120f</changelog>
  <changelog author="tiwai@suse.de" date="1540900806">- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
  (bsc#1051510).
- media: cx231xx: fix potential sign-extension overflow on large
  shift (bsc#1051510).
- media: pci: cx23885: handle adding to list failure
  (bsc#1051510).
- media: vsp1: Fix YCbCr planar formats pitch calculation
  (bsc#1051510).
- media: tvp5150: fix switch exit in set control handler
  (bsc#1051510).
- media: tvp5150: fix width alignment during set_selection()
  (bsc#1051510).
- media: em28xx: fix input name for Terratec AV 350 (bsc#1051510).
- media: em28xx: use a default format if TRY_FMT fails
  (bsc#1051510).
- media: tvp5150: avoid going past array on v4l2_querymenu()
  (bsc#1051510).
- media: dvb: fix compat ioctl translation (bsc#1051510).
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
  (bsc#1051510).
- commit 0831c5e</changelog>
  <changelog author="tiwai@suse.de" date="1540900807">- soc/tegra: pmc: Fix child-node lookup (bsc#1051510).
- serial: 8250: Fix clearing FIFOs in RS485 mode again
  (bsc#1051510).
- staging: comedi: ni_mio_common: protect register write overflow
  (bsc#1051510).
- iio: adc: at91: fix wrong channel number in triggered buffer
  mode (bsc#1051510).
- iio: adc: at91: fix acking DRDY irq on simple conversions
  (bsc#1051510).
- iio: adc: imx25-gcq: Fix leak of device_node in
  mx25_gcq_setup_cfgs() (bsc#1051510).
- commit 9f4f0cc</changelog>
  <changelog author="jthumshirn@suse.de" date="1540900808">- Refresh
  patches.fixes/0001-drm-amdgpu-powerplay-fix-missing-break-in-switch-sta.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Do-not-carry-error-code-in-HiBMC.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Don-t-overwrite-fb-helper-surfac.patch.
- Refresh
  patches.fixes/0001-drm-i915-audio-Hook-up-component-bindings-even-if-di.patch.
- Refresh
  patches.fixes/0001-drm-i915-gen9-Fix-initial-readout-for-Y-tiled-frameb.patch.
- Refresh
  patches.fixes/0001-drm-sti-do-not-remove-the-drm_bridge-that-was-never-.patch.
- Refresh
  patches.fixes/0001-drm-virtio-fix-bounds-check-in-virtio_gpu_cmd_get_ca.patch.
- commit 652fab5</changelog>
  <changelog author="tiwai@suse.de" date="1540987200">- drm/nouveau: Don't disable polling in fallback mode
  (bsc#1103356).
- Delete
  patches.suse/Revert-drm-nouveau-drm-therm-fan-add-a-fallback-if-n.
- commit aa0c431</changelog>
  <changelog author="tzimmermann@suse.de" date="1540987201">- Fix Patch-mainline for "drm/amdgpu: update tmr mc address"
  The Patch-mainline tag was incorrect. References is being updated as well.
- commit ce8535e</changelog>
  <changelog author="tiwai@suse.de" date="1540987202">- Workaround for mysterious NVMe breakage with i915 CFL
  (bsc#1111040).
- commit 0fa5877</changelog>
  <changelog author="jthumshirn@suse.de" date="1540987203">- libnvdimm, label: Fix sparse warning (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Use namespace index data to reduce number of label reads
  needed (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Split label init out from the logic for getting config
  data (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Remove empty if statement (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Clarify comment in sizeof_namespace_index (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Sanity check labeloff (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- libnvdimm, dimm: Maximize label transfer size (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7
  (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- commit 5a4eeb4</changelog>
  <changelog author="jlee@suse.com" date="1540987204">- x86/boot/KASLR: Work around firmware bugs by excluding
  EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR's choice
  (bnc#1112878).
- commit d45cd78</changelog>
  <changelog author="tiwai@suse.de" date="1540987205">- blacklist.conf: Add a few wifi driver entries that can't be applied
- commit 662fc68</changelog>
  <changelog author="tiwai@suse.de" date="1540987206">- spi/bcm63xx-hsspi: keep pll clk enabled (bsc#1051510).
- spi: sh-msiof: fix deferred probing (bsc#1051510).
- spi: bcm-qspi: switch back to reading flash using smaller chunks
  (bsc#1051510).
- commit f773242</changelog>
</package>
<package pkgid="292417aa28cf7b26809124f91885caddcbeb707f65bf1c194c6be8dac97cb2e0" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="7b3c82d086b793cbd892e285462df1d3e8f35bd8ce7f02f62b446cb30ebca143" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="c8773cfb1b47d4cad5e23681d042782ba2b958c9c8014c844fe4fc5dced616be" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="38bf2c0380f11ea732156656d15788b56563f2fbc5a16fde821922e8f62c797e" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="5fbc9c3cbad5d93708d7a1a84621815c02260423b1523b030111481184a92d09" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="e1c22bc22f69d9e5ee9be8333f8ab1724b9f0504ebac7ebf384d6b9dcd85724d" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.19.1"/>
  <changelog author="fdmanana@suse.com" date="1538568000">- Btrfs: fix fsync after hole punching when using no-holes feature
  (bsc#1110642).
- commit 3f19b40</changelog>
  <changelog author="fdmanana@suse.com" date="1538568001">- Btrfs: fix loss of prealloc extents past i_size after fsync
  log replay (bsc#1110643).
- commit 974e057</changelog>
  <changelog author="fdmanana@suse.com" date="1538568002">- Btrfs: fix duplicate extents after fsync of file with prealloc
  extents (bsc#1110644).
- commit c4ec603</changelog>
  <changelog author="fdmanana@suse.com" date="1538568003">- Btrfs: fix return value on rename exchange failure
  (bsc#1110645).
- commit 532729c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568004">- Btrfs: sync log after logging new name (bsc#1110646).
- commit 7260d6b</changelog>
  <changelog author="fdmanana@suse.com" date="1538568005">- Btrfs: fix data corruption when deduplicating between different
  files (bsc#1110647).
- commit 669848c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568006">- btrfs: Remove unused parameters from various functions
  (bsc#1110649).
- commit c97c657</changelog>
  <changelog author="fdmanana@suse.com" date="1538568007">- Btrfs: fix send failure when root has deleted files still open
  (bsc#1110650).
- commit f52554d</changelog>
  <changelog author="jslaby@suse.cz" date="1538568008">- watchdog: Mark watchdog touch functions as notrace (git-fixes).
- commit 8b53193</changelog>
  <changelog author="neilb@suse.com" date="1538654400">- nfs/filelayout: fix oops when freeing filelayout segment
  (bsc#1105190).
- NFS/filelayout: Fix racy setting of fl-&gt;dsaddr in
  filelayout_check_deviceid() (bsc#1105190).
- commit d6d0fab</changelog>
  <changelog author="neilb@suse.com" date="1538654401">- VFS: don't test owner for NFS in set_posix_acl() (bsc#1103405).
- commit 36f977a</changelog>
  <changelog author="tiwai@suse.de" date="1538654402">- README.BRANCH: SLE15-SP1 branch maintainer changes
  Add ptesarik as co-maintainer, keep tiwai as the primary maintainer
- commit 83aea11</changelog>
  <changelog author="wqu@suse.com" date="1538654403">- btrfs: tests/qgroup: Fix wrong tree backref level (bsc#1107928).
- commit a5e154c</changelog>
  <changelog author="wqu@suse.com" date="1538654404">- btrfs: check-integrity: Fix NULL pointer dereference for
  degraded mount (bsc#1107947).
- commit 77b2277</changelog>
  <changelog author="wqu@suse.com" date="1538654405">- btrfs: scrub: Don't use inode pages for device replace (follow
  up for bsc#1108096).
- commit c865775</changelog>
  <changelog author="tiwai@suse.de" date="1538654406">- ASoC: cs4265: fix MMTLR Data switch control (bsc#1051510).
- ALSA: fireworks: fix memory leak of response buffer at error
  path (bsc#1051510).
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix
  I/O at error path (bsc#1051510).
- ALSA: emu10k1: fix possible info leak to userspace on
  SNDRV_EMU10K1_IOCTL_INFO (bsc#1051510).
- ALSA: bebob: use address returned by kmalloc() instead of
  kernel stack for streaming DMA mapping (bsc#1051510).
- ASoC: rt5514: Fix the issue of the delay volume applied
  (bsc#1051510).
- ASoC: dapm: Fix potential DAI widget pointer deref when linking
  DAIs (bsc#1051510).
- ALSA: msnd: Fix the default sample sizes (bsc#1051510).
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE()
  macro (bsc#1051510).
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
  (bsc#1051510).
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
  (bsc#1051510).
- ASoC: rt5514: Add the missing register in the readable table
  (bsc#1051510).
- ASoC: rt5514: Eliminate the noise in the ASRC case
  (bsc#1051510).
- ASoC: rt5514: Add the I2S ASRC support (bsc#1051510).
- commit 4eba9c8</changelog>
  <changelog author="wqu@suse.com" date="1538654407">- btrfs: scrub: Don't use inode page cache in
  scrub_handle_errored_block() (follow up for bsc#1108096).
- commit 3f91c84</changelog>
  <changelog author="tiwai@suse.de" date="1538654408">- smsc95xx: Check for Wake-on-LAN modes (bsc#1051510).
- smsc75xx: Check for Wake-on-LAN modes (bsc#1051510).
- r8152: Check for supported Wake-on-LAN Modes (bsc#1051510).
- sr9800: Check for supported Wake-on-LAN modes (bsc#1051510).
- lan78xx: Check for supported Wake-on-LAN modes (bsc#1051510).
- ax88179_178a: Check for supported Wake-on-LAN modes
  (bsc#1051510).
- mac80211: fix pending queue hang due to TX_DROP (bsc#1051510).
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
  (bsc#1051510).
- Input: elantech - enable middle button of touchpad on ThinkPad
  P72 (bsc#1051510).
- regulator: fix crash caused by null driver data (bsc#1051510).
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
  (bsc#1051510).
- intel_th: Fix device removal logic (bsc#1051510).
- NFC: Fix possible memory corruption when handling SHDLC I-Frame
  commands (bsc#1051510).
- platform/x86: alienware-wmi: Correct a memory leak
  (bsc#1051510).
- xhci: Fix use after free for URB cancellation on a reallocated
  endpoint (bsc#1051510).
- mei: ignore not found client in the enumeration (bsc#1051510).
- i2c: i801: Allow ACPI AML access I/O ports not reserved for
  SMBus (bsc#1051510).
- fbdev/via: fix defined but not used warning (bsc#1051510).
- video: goldfishfb: fix memory leak on driver remove
  (bsc#1051510).
- fbdev: Distinguish between interlaced and progressive modes
  (bsc#1051510).
- platform/x86: toshiba_acpi: Fix defined but not used build
  warnings (bsc#1051510).
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
  (bsc#1051510).
- input: rohm_bu21023: switch to i2c_lock_bus(...,
  I2C_LOCK_SEGMENT) (bsc#1051510).
- HID: hid-ntrig: add error handling for sysfs_create_group
  (bsc#1051510).
- mfd: ti_am335x_tscadc: Fix struct clk memory leak (bsc#1051510).
- mmc: sdhci: do not try to use 3.3V signaling if not supported
  (bsc#1051510).
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
  (bsc#1051510).
- parport: sunbpp: fix error return code (bsc#1051510).
- coresight: Handle errors in finding input/output ports
  (bsc#1051510).
- mei: bus: type promotion bug in mei_nfc_if_version()
  (bsc#1051510).
- gpio: pxa: Fix potential NULL dereference (bsc#1051510).
- gpiolib: Mark gpio_suffixes array with __maybe_unused
  (bsc#1051510).
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
  (bsc#1051510).
- crypto: sharah - Unregister correct algorithms for SAHARA 3
  (bsc#1051510).
- crypto: skcipher - Fix -Wstringop-truncation warnings
  (bsc#1051510).
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
  (bsc#1051510).
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 (bsc#1051510).
- mac80211: restrict delayed tailroom needed decrement
  (bsc#1051510).
- wlcore: Add missing PM call for
  wlcore_cmd_wait_for_event_or_timeout() (bsc#1051510).
- commit e266792</changelog>
  <changelog author="mbrugger@suse.com" date="1538654409">- arm64: Update config files. (bsc#1110716)
  Enable ST LPS25H pressure sensor.
- commit 69c6902</changelog>
  <changelog author="jack@suse.cz" date="1538654410">- patches.fixes/x86-memory_failure-Introduce-set-clear-_mce_nospec.patch:
  Fixup compilation breakage on s390 and arm due to missing
  clear_mce_nospec().
- commit faef795</changelog>
</package>
<package pkgid="3ff1d8e63e1115eb92fbce3477e25a905e29dac2581030daab8af409b558ed66" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.22.1"/>
  <changelog author="tiwai@suse.de" date="1539172800">- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell
  XPS 27 7760 (bsc#1051510).
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
  (bsc#1051510).
- crypto: mxs-dcp - Fix wait logic on chan threads (bsc#1051510).
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM
  ioctl (bsc#1051510).
- HID: add support for Apple Magic Keyboards (bsc#1051510).
- gpio: Fix crash due to registration race (bsc#1051510).
- gpiolib-acpi: Register GpioInt ACPI event handlers from a
  late_initcall (bsc#1051510).
- gpio: adp5588: Fix sleep-in-atomic-context bug (bsc#1051510).
- cfg80211: fix a type issue in
  ieee80211_chandef_to_operating_class() (bsc#1051510).
- Revert "gpio: set up initial state from .get_direction()"
  (bsc#1051510).
- gpio: mb86s70: Revert "Return error if requesting an already
  assigned gpio" (bsc#1051510).
- commit 2759d22</changelog>
  <changelog author="mbrugger@suse.com" date="1539172801">- arm64: Update config files.
  Enable SENSORS_RASPBERRYPI_HWMON
- commit 2a83945</changelog>
  <changelog author="mbrugger@suse.com" date="1539172802">- supported.conf: mark raspberrypi-hwmon as supported
- commit af8ddda</changelog>
  <changelog author="tiwai@suse.de" date="1539172803">- HID: hid-saitek: Add device ID for RAT 7 Contagion
  (bsc#1051510).
- mac80211: shorten the IBSS debug messages (bsc#1051510).
- mac80211: don't Tx a deauth frame if the AP forbade Tx
  (bsc#1051510).
- mac80211: Fix station bandwidth setting after channel switch
  (bsc#1051510).
- mac80211: fix a race between restart and CSA flows
  (bsc#1051510).
- mac80211: do not convert to A-MSDU if frag/subframe limited
  (bsc#1051510).
- mac80211: mesh: fix HWMP sequence numbering to follow standard
  (bsc#1051510).
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211_hwsim: require at least one channel (bsc#1051510).
- mac80211: Run TXQ teardown code before de-registering interfaces
  (bsc#1051510).
- hwmon: (adt7475) Make adt7475_read_word() return errors
  (bsc#1051510).
- hwmon: (ina2xx) fix sysfs shunt resistor read access
  (bsc#1051510).
- commit af836cd</changelog>
  <changelog author="tiwai@suse.de" date="1539172804">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- Revert "mwifiex: handle race during mwifiex_usb_disconnect"
  (bsc#1051510).
- media: videobuf-dma-sg: Fix dma_{sync,unmap}_sg() calls
  (bsc#1051510).
- Revert "mwifiex: fix incorrect ht capability problem"
  (bsc#1051510).
- PM / Domains: Fix genpd to deal with drivers returning 1 from
  - &gt;prepare() (bsc#1051510).
- Revert "pinctrl: sunxi: Don't enforce bias disable (for now)"
  (bsc#1051510).
- commit fb6c36a</changelog>
  <changelog author="tiwai@suse.de" date="1539172805">- blacklist.conf: Add blacklist of inapplicable revert commits
  They are either not applicable or requiring more backports that aren't
  suitable for SLE15
- commit 987dd44</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259200">- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk (bsc#1106110)
- commit 273a6bd</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259201">- blacklist.conf: Append 'drm/amd/pp: initialize result to before or'ing in data'
- commit d2edcd9</changelog>
  <changelog author="tiwai@suse.de" date="1539259202">- Disable DRM patches that broke vbox video driver KMP (bsc#1111076)
- commit 23943c6</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259203">- blacklist.conf: Append 'Revert "drm: Use a flexible array member for blob property data"'
- commit ddc67eb</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259204">- Fix Patch-mainline tags to refer to Linux release tag
  It is expected that Patch-mainline tags refer to a release tag
  in the Linux git tree, such as v4.15. Several patches contain a
  Patch-mainline tags that instead refer to a Linux version number,
  such as 4.15. This inconsistency complicates grepping and
  automation.
  871 of 18000 patches are affected by this problem.
- commit 1d81d26</changelog>
  <changelog author="bp@suse.de" date="1539259205">- crypto: ccp - add timeout support in the SEV command
  (bsc#1106838).
- commit 912dad4</changelog>
  <changelog author="tiwai@suse.de" date="1539345600">- Update config files: update forgotten armv7hl configs
- commit 7bae3a6</changelog>
  <changelog author="msuchanek@suse.de" date="1539345601">- powerpc/numa: Skip onlining a offline node in kdump path
  (bsc#1109784).
- commit df87e51</changelog>
  <changelog author="tiwai@suse.de" date="1539345602">- squashfs metadata 2: electric boogaloo (bsc#1051510).
- squashfs: more metadata hardening (bsc#1051510).
- squashfs: be more careful about metadata corruption
  (bsc#1051510).
- commit 9bfac39</changelog>
  <changelog author="hare@suse.de" date="1539345603">- scsi: qla2xxx: Move log messages before issuing command to
  firmware (bsc#1108870).
- scsi: qla2xxx: Fix for double free of SRB structure
  (bsc#1108870).
- scsi: qla2xxx: Fix recursive mailbox timeout (bsc#1108870).
- scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
  (bsc#1108870).
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
  (bsc#1108870).
- scsi: qla2xxx: Fix duplicate switch database entries
  (bsc#1108870).
- scsi: qla2xxx: Fix NVMe Target discovery (bsc#1108870).
- scsi: qla2xxx: Fix NVMe session hang on unload (bsc#1108870).
- scsi: qla2xxx: don't allow negative thresholds (bsc#1108870).
- commit 50fe149</changelog>
  <changelog author="tiwai@suse.de" date="1539345604">- Squashfs: Compute expected length from inode size rather than
  block length (bsc#1051510).
- commit 0c4a663</changelog>
  <changelog author="tiwai@suse.de" date="1539345605">- soreuseport: initialise timewait reuseport field (bsc#1051510).
- commit bda2dcc</changelog>
  <changelog author="tiwai@suse.de" date="1539345606">- rpc_pipefs: fix double-dput() (bsc#1051510).
- commit 1a15e26</changelog>
  <changelog author="hare@suse.de" date="1539345607">- scsi: qla2xxx: Return switch command on a timeout (bsc#1108870).
- commit 8e38f2a</changelog>
</package>
<package pkgid="89c48e9f78a15932c16f227300719048f3d069c2ab7ff2a17f0e81cc6db32e84" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.25.1"/>
  <changelog author="tiwai@suse.de" date="1540814400">- NFC: nfcmrvl_uart: fix OF child-node lookup (bsc#1051510).
- kernfs: update comment about kernfs_path() return value
  (bsc#1051510).
- usbip: tools: fix atoi() on non-null terminated string
  (bsc#1051510).
- USB: serial: cypress_m8: fix interrupt-out transfer length
  (bsc#1051510).
- usb: chipidea: Prevent unbalanced IRQ disable (bsc#1051510).
- commit 6c9d1e7</changelog>
  <changelog author="tiwai@suse.de" date="1540814401">- blacklist.conf: Add ASoC and USB entries that may break kABI
- commit 199a072</changelog>
  <changelog author="tiwai@suse.de" date="1540814402">- usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation
  (bsc#1051510).
- usb: gadget: fsl_udc_core: check allocation return value and
  cleanup on failure (bsc#1051510).
- commit c1b7b66</changelog>
  <changelog author="tiwai@suse.de" date="1540814403">- Refresh patch tag of upstreamed patches and move to sorted section
- commit a966b56</changelog>
  <changelog author="ohering@suse.de" date="1540900800">- move changes without Git-commit out of sorted section
- commit cbf049e</changelog>
  <changelog author="jslaby@suse.cz" date="1540900801">- random: rate limit unseeded randomness warnings (git-fixes).
- commit be52b92</changelog>
  <changelog author="jslaby@suse.cz" date="1540900802">- blacklist.conf: add a kasan fix
- commit c85e2d1</changelog>
  <changelog author="jdelvare@suse.de" date="1540900803">- Add reference to bsc#1104124 to
  patches.fixes/fs-aio-fix-the-increment-of-aio-nr-and-counting-agai.patch
- commit f60e64b</changelog>
  <changelog author="jslaby@suse.cz" date="1540900804">- tools build: fix # escaping in .cmd files for future Make
  (git-fixes).
- Kbuild: fix # escaping in .cmd files for future Make
  (git-fixes).
- commit 8f11ec3</changelog>
  <changelog author="tiwai@suse.de" date="1540900805">- drm/i915/dp: Link train Fallback on eDP only if fallback link
  BW can fit panel's native mode (bsc#1051510).
- drm/i915: Restore vblank interrupts earlier (bsc#1051510).
- commit daf120f</changelog>
  <changelog author="tiwai@suse.de" date="1540900806">- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
  (bsc#1051510).
- media: cx231xx: fix potential sign-extension overflow on large
  shift (bsc#1051510).
- media: pci: cx23885: handle adding to list failure
  (bsc#1051510).
- media: vsp1: Fix YCbCr planar formats pitch calculation
  (bsc#1051510).
- media: tvp5150: fix switch exit in set control handler
  (bsc#1051510).
- media: tvp5150: fix width alignment during set_selection()
  (bsc#1051510).
- media: em28xx: fix input name for Terratec AV 350 (bsc#1051510).
- media: em28xx: use a default format if TRY_FMT fails
  (bsc#1051510).
- media: tvp5150: avoid going past array on v4l2_querymenu()
  (bsc#1051510).
- media: dvb: fix compat ioctl translation (bsc#1051510).
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
  (bsc#1051510).
- commit 0831c5e</changelog>
  <changelog author="tiwai@suse.de" date="1540900807">- soc/tegra: pmc: Fix child-node lookup (bsc#1051510).
- serial: 8250: Fix clearing FIFOs in RS485 mode again
  (bsc#1051510).
- staging: comedi: ni_mio_common: protect register write overflow
  (bsc#1051510).
- iio: adc: at91: fix wrong channel number in triggered buffer
  mode (bsc#1051510).
- iio: adc: at91: fix acking DRDY irq on simple conversions
  (bsc#1051510).
- iio: adc: imx25-gcq: Fix leak of device_node in
  mx25_gcq_setup_cfgs() (bsc#1051510).
- commit 9f4f0cc</changelog>
  <changelog author="jthumshirn@suse.de" date="1540900808">- Refresh
  patches.fixes/0001-drm-amdgpu-powerplay-fix-missing-break-in-switch-sta.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Do-not-carry-error-code-in-HiBMC.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Don-t-overwrite-fb-helper-surfac.patch.
- Refresh
  patches.fixes/0001-drm-i915-audio-Hook-up-component-bindings-even-if-di.patch.
- Refresh
  patches.fixes/0001-drm-i915-gen9-Fix-initial-readout-for-Y-tiled-frameb.patch.
- Refresh
  patches.fixes/0001-drm-sti-do-not-remove-the-drm_bridge-that-was-never-.patch.
- Refresh
  patches.fixes/0001-drm-virtio-fix-bounds-check-in-virtio_gpu_cmd_get_ca.patch.
- commit 652fab5</changelog>
  <changelog author="tiwai@suse.de" date="1540987200">- drm/nouveau: Don't disable polling in fallback mode
  (bsc#1103356).
- Delete
  patches.suse/Revert-drm-nouveau-drm-therm-fan-add-a-fallback-if-n.
- commit aa0c431</changelog>
  <changelog author="tzimmermann@suse.de" date="1540987201">- Fix Patch-mainline for "drm/amdgpu: update tmr mc address"
  The Patch-mainline tag was incorrect. References is being updated as well.
- commit ce8535e</changelog>
  <changelog author="tiwai@suse.de" date="1540987202">- Workaround for mysterious NVMe breakage with i915 CFL
  (bsc#1111040).
- commit 0fa5877</changelog>
  <changelog author="jthumshirn@suse.de" date="1540987203">- libnvdimm, label: Fix sparse warning (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Use namespace index data to reduce number of label reads
  needed (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Split label init out from the logic for getting config
  data (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Remove empty if statement (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Clarify comment in sizeof_namespace_index (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Sanity check labeloff (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- libnvdimm, dimm: Maximize label transfer size (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7
  (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- commit 5a4eeb4</changelog>
  <changelog author="jlee@suse.com" date="1540987204">- x86/boot/KASLR: Work around firmware bugs by excluding
  EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR's choice
  (bnc#1112878).
- commit d45cd78</changelog>
  <changelog author="tiwai@suse.de" date="1540987205">- blacklist.conf: Add a few wifi driver entries that can't be applied
- commit 662fc68</changelog>
  <changelog author="tiwai@suse.de" date="1540987206">- spi/bcm63xx-hsspi: keep pll clk enabled (bsc#1051510).
- spi: sh-msiof: fix deferred probing (bsc#1051510).
- spi: bcm-qspi: switch back to reading flash using smaller chunks
  (bsc#1051510).
- commit f773242</changelog>
</package>
<package pkgid="1a96f4bcb1451ad3414ccd61d03bbfd3b74e7fcc50f675aa727fbeb92e52e459" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="02748f85f216b9469b1fceb9708342e29ae55967f360ba54748c35769ba1c040" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="1a31f46b9472fb7f393b22bb0ace1813d3305c75ef0db87a77796805d3e861a1" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="ae6b394d5e139d6bf76d5cda69244a7d3e6d256b45c0ef13645c0f8e5e9014c4" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="41a9e20722626830a3bef3602f75fd1defcaa326856dc97d755b1af5b0d2975e" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="47413b37c2a5735a0e72897d4399b1ee22ebcd00990b14fd2a6b9ac4981f04ed" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="a2eab7b9f26f64a095d476a78276165c34492cbccd6e1b0bab14411b56350212" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="1feb991b848325c0fab385adeaeb26ffe0192b582631e78374d06f4f9b99d452" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="2f97e5dfab970c26296640b0e0b621b314b1f520511bd63875dd24997b15dc82" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.19.2"/>
  <changelog author="fdmanana@suse.com" date="1538568000">- Btrfs: fix fsync after hole punching when using no-holes feature
  (bsc#1110642).
- commit 3f19b40</changelog>
  <changelog author="fdmanana@suse.com" date="1538568001">- Btrfs: fix loss of prealloc extents past i_size after fsync
  log replay (bsc#1110643).
- commit 974e057</changelog>
  <changelog author="fdmanana@suse.com" date="1538568002">- Btrfs: fix duplicate extents after fsync of file with prealloc
  extents (bsc#1110644).
- commit c4ec603</changelog>
  <changelog author="fdmanana@suse.com" date="1538568003">- Btrfs: fix return value on rename exchange failure
  (bsc#1110645).
- commit 532729c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568004">- Btrfs: sync log after logging new name (bsc#1110646).
- commit 7260d6b</changelog>
  <changelog author="fdmanana@suse.com" date="1538568005">- Btrfs: fix data corruption when deduplicating between different
  files (bsc#1110647).
- commit 669848c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568006">- btrfs: Remove unused parameters from various functions
  (bsc#1110649).
- commit c97c657</changelog>
  <changelog author="fdmanana@suse.com" date="1538568007">- Btrfs: fix send failure when root has deleted files still open
  (bsc#1110650).
- commit f52554d</changelog>
  <changelog author="jslaby@suse.cz" date="1538568008">- watchdog: Mark watchdog touch functions as notrace (git-fixes).
- commit 8b53193</changelog>
  <changelog author="neilb@suse.com" date="1538654400">- nfs/filelayout: fix oops when freeing filelayout segment
  (bsc#1105190).
- NFS/filelayout: Fix racy setting of fl-&gt;dsaddr in
  filelayout_check_deviceid() (bsc#1105190).
- commit d6d0fab</changelog>
  <changelog author="neilb@suse.com" date="1538654401">- VFS: don't test owner for NFS in set_posix_acl() (bsc#1103405).
- commit 36f977a</changelog>
  <changelog author="tiwai@suse.de" date="1538654402">- README.BRANCH: SLE15-SP1 branch maintainer changes
  Add ptesarik as co-maintainer, keep tiwai as the primary maintainer
- commit 83aea11</changelog>
  <changelog author="wqu@suse.com" date="1538654403">- btrfs: tests/qgroup: Fix wrong tree backref level (bsc#1107928).
- commit a5e154c</changelog>
  <changelog author="wqu@suse.com" date="1538654404">- btrfs: check-integrity: Fix NULL pointer dereference for
  degraded mount (bsc#1107947).
- commit 77b2277</changelog>
  <changelog author="wqu@suse.com" date="1538654405">- btrfs: scrub: Don't use inode pages for device replace (follow
  up for bsc#1108096).
- commit c865775</changelog>
  <changelog author="tiwai@suse.de" date="1538654406">- ASoC: cs4265: fix MMTLR Data switch control (bsc#1051510).
- ALSA: fireworks: fix memory leak of response buffer at error
  path (bsc#1051510).
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix
  I/O at error path (bsc#1051510).
- ALSA: emu10k1: fix possible info leak to userspace on
  SNDRV_EMU10K1_IOCTL_INFO (bsc#1051510).
- ALSA: bebob: use address returned by kmalloc() instead of
  kernel stack for streaming DMA mapping (bsc#1051510).
- ASoC: rt5514: Fix the issue of the delay volume applied
  (bsc#1051510).
- ASoC: dapm: Fix potential DAI widget pointer deref when linking
  DAIs (bsc#1051510).
- ALSA: msnd: Fix the default sample sizes (bsc#1051510).
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE()
  macro (bsc#1051510).
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
  (bsc#1051510).
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
  (bsc#1051510).
- ASoC: rt5514: Add the missing register in the readable table
  (bsc#1051510).
- ASoC: rt5514: Eliminate the noise in the ASRC case
  (bsc#1051510).
- ASoC: rt5514: Add the I2S ASRC support (bsc#1051510).
- commit 4eba9c8</changelog>
  <changelog author="wqu@suse.com" date="1538654407">- btrfs: scrub: Don't use inode page cache in
  scrub_handle_errored_block() (follow up for bsc#1108096).
- commit 3f91c84</changelog>
  <changelog author="tiwai@suse.de" date="1538654408">- smsc95xx: Check for Wake-on-LAN modes (bsc#1051510).
- smsc75xx: Check for Wake-on-LAN modes (bsc#1051510).
- r8152: Check for supported Wake-on-LAN Modes (bsc#1051510).
- sr9800: Check for supported Wake-on-LAN modes (bsc#1051510).
- lan78xx: Check for supported Wake-on-LAN modes (bsc#1051510).
- ax88179_178a: Check for supported Wake-on-LAN modes
  (bsc#1051510).
- mac80211: fix pending queue hang due to TX_DROP (bsc#1051510).
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
  (bsc#1051510).
- Input: elantech - enable middle button of touchpad on ThinkPad
  P72 (bsc#1051510).
- regulator: fix crash caused by null driver data (bsc#1051510).
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
  (bsc#1051510).
- intel_th: Fix device removal logic (bsc#1051510).
- NFC: Fix possible memory corruption when handling SHDLC I-Frame
  commands (bsc#1051510).
- platform/x86: alienware-wmi: Correct a memory leak
  (bsc#1051510).
- xhci: Fix use after free for URB cancellation on a reallocated
  endpoint (bsc#1051510).
- mei: ignore not found client in the enumeration (bsc#1051510).
- i2c: i801: Allow ACPI AML access I/O ports not reserved for
  SMBus (bsc#1051510).
- fbdev/via: fix defined but not used warning (bsc#1051510).
- video: goldfishfb: fix memory leak on driver remove
  (bsc#1051510).
- fbdev: Distinguish between interlaced and progressive modes
  (bsc#1051510).
- platform/x86: toshiba_acpi: Fix defined but not used build
  warnings (bsc#1051510).
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
  (bsc#1051510).
- input: rohm_bu21023: switch to i2c_lock_bus(...,
  I2C_LOCK_SEGMENT) (bsc#1051510).
- HID: hid-ntrig: add error handling for sysfs_create_group
  (bsc#1051510).
- mfd: ti_am335x_tscadc: Fix struct clk memory leak (bsc#1051510).
- mmc: sdhci: do not try to use 3.3V signaling if not supported
  (bsc#1051510).
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
  (bsc#1051510).
- parport: sunbpp: fix error return code (bsc#1051510).
- coresight: Handle errors in finding input/output ports
  (bsc#1051510).
- mei: bus: type promotion bug in mei_nfc_if_version()
  (bsc#1051510).
- gpio: pxa: Fix potential NULL dereference (bsc#1051510).
- gpiolib: Mark gpio_suffixes array with __maybe_unused
  (bsc#1051510).
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
  (bsc#1051510).
- crypto: sharah - Unregister correct algorithms for SAHARA 3
  (bsc#1051510).
- crypto: skcipher - Fix -Wstringop-truncation warnings
  (bsc#1051510).
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
  (bsc#1051510).
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 (bsc#1051510).
- mac80211: restrict delayed tailroom needed decrement
  (bsc#1051510).
- wlcore: Add missing PM call for
  wlcore_cmd_wait_for_event_or_timeout() (bsc#1051510).
- commit e266792</changelog>
  <changelog author="mbrugger@suse.com" date="1538654409">- arm64: Update config files. (bsc#1110716)
  Enable ST LPS25H pressure sensor.
- commit 69c6902</changelog>
  <changelog author="jack@suse.cz" date="1538654410">- patches.fixes/x86-memory_failure-Introduce-set-clear-_mce_nospec.patch:
  Fixup compilation breakage on s390 and arm due to missing
  clear_mce_nospec().
- commit faef795</changelog>
</package>
<package pkgid="1e800be3f0846fc08041b268557c787486ad7c73bc0ea51bcd1a6ab4c81904ff" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.19.2"/>
  <changelog author="fdmanana@suse.com" date="1538568000">- Btrfs: fix fsync after hole punching when using no-holes feature
  (bsc#1110642).
- commit 3f19b40</changelog>
  <changelog author="fdmanana@suse.com" date="1538568001">- Btrfs: fix loss of prealloc extents past i_size after fsync
  log replay (bsc#1110643).
- commit 974e057</changelog>
  <changelog author="fdmanana@suse.com" date="1538568002">- Btrfs: fix duplicate extents after fsync of file with prealloc
  extents (bsc#1110644).
- commit c4ec603</changelog>
  <changelog author="fdmanana@suse.com" date="1538568003">- Btrfs: fix return value on rename exchange failure
  (bsc#1110645).
- commit 532729c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568004">- Btrfs: sync log after logging new name (bsc#1110646).
- commit 7260d6b</changelog>
  <changelog author="fdmanana@suse.com" date="1538568005">- Btrfs: fix data corruption when deduplicating between different
  files (bsc#1110647).
- commit 669848c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568006">- btrfs: Remove unused parameters from various functions
  (bsc#1110649).
- commit c97c657</changelog>
  <changelog author="fdmanana@suse.com" date="1538568007">- Btrfs: fix send failure when root has deleted files still open
  (bsc#1110650).
- commit f52554d</changelog>
  <changelog author="jslaby@suse.cz" date="1538568008">- watchdog: Mark watchdog touch functions as notrace (git-fixes).
- commit 8b53193</changelog>
  <changelog author="neilb@suse.com" date="1538654400">- nfs/filelayout: fix oops when freeing filelayout segment
  (bsc#1105190).
- NFS/filelayout: Fix racy setting of fl-&gt;dsaddr in
  filelayout_check_deviceid() (bsc#1105190).
- commit d6d0fab</changelog>
  <changelog author="neilb@suse.com" date="1538654401">- VFS: don't test owner for NFS in set_posix_acl() (bsc#1103405).
- commit 36f977a</changelog>
  <changelog author="tiwai@suse.de" date="1538654402">- README.BRANCH: SLE15-SP1 branch maintainer changes
  Add ptesarik as co-maintainer, keep tiwai as the primary maintainer
- commit 83aea11</changelog>
  <changelog author="wqu@suse.com" date="1538654403">- btrfs: tests/qgroup: Fix wrong tree backref level (bsc#1107928).
- commit a5e154c</changelog>
  <changelog author="wqu@suse.com" date="1538654404">- btrfs: check-integrity: Fix NULL pointer dereference for
  degraded mount (bsc#1107947).
- commit 77b2277</changelog>
  <changelog author="wqu@suse.com" date="1538654405">- btrfs: scrub: Don't use inode pages for device replace (follow
  up for bsc#1108096).
- commit c865775</changelog>
  <changelog author="tiwai@suse.de" date="1538654406">- ASoC: cs4265: fix MMTLR Data switch control (bsc#1051510).
- ALSA: fireworks: fix memory leak of response buffer at error
  path (bsc#1051510).
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix
  I/O at error path (bsc#1051510).
- ALSA: emu10k1: fix possible info leak to userspace on
  SNDRV_EMU10K1_IOCTL_INFO (bsc#1051510).
- ALSA: bebob: use address returned by kmalloc() instead of
  kernel stack for streaming DMA mapping (bsc#1051510).
- ASoC: rt5514: Fix the issue of the delay volume applied
  (bsc#1051510).
- ASoC: dapm: Fix potential DAI widget pointer deref when linking
  DAIs (bsc#1051510).
- ALSA: msnd: Fix the default sample sizes (bsc#1051510).
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE()
  macro (bsc#1051510).
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
  (bsc#1051510).
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
  (bsc#1051510).
- ASoC: rt5514: Add the missing register in the readable table
  (bsc#1051510).
- ASoC: rt5514: Eliminate the noise in the ASRC case
  (bsc#1051510).
- ASoC: rt5514: Add the I2S ASRC support (bsc#1051510).
- commit 4eba9c8</changelog>
  <changelog author="wqu@suse.com" date="1538654407">- btrfs: scrub: Don't use inode page cache in
  scrub_handle_errored_block() (follow up for bsc#1108096).
- commit 3f91c84</changelog>
  <changelog author="tiwai@suse.de" date="1538654408">- smsc95xx: Check for Wake-on-LAN modes (bsc#1051510).
- smsc75xx: Check for Wake-on-LAN modes (bsc#1051510).
- r8152: Check for supported Wake-on-LAN Modes (bsc#1051510).
- sr9800: Check for supported Wake-on-LAN modes (bsc#1051510).
- lan78xx: Check for supported Wake-on-LAN modes (bsc#1051510).
- ax88179_178a: Check for supported Wake-on-LAN modes
  (bsc#1051510).
- mac80211: fix pending queue hang due to TX_DROP (bsc#1051510).
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
  (bsc#1051510).
- Input: elantech - enable middle button of touchpad on ThinkPad
  P72 (bsc#1051510).
- regulator: fix crash caused by null driver data (bsc#1051510).
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
  (bsc#1051510).
- intel_th: Fix device removal logic (bsc#1051510).
- NFC: Fix possible memory corruption when handling SHDLC I-Frame
  commands (bsc#1051510).
- platform/x86: alienware-wmi: Correct a memory leak
  (bsc#1051510).
- xhci: Fix use after free for URB cancellation on a reallocated
  endpoint (bsc#1051510).
- mei: ignore not found client in the enumeration (bsc#1051510).
- i2c: i801: Allow ACPI AML access I/O ports not reserved for
  SMBus (bsc#1051510).
- fbdev/via: fix defined but not used warning (bsc#1051510).
- video: goldfishfb: fix memory leak on driver remove
  (bsc#1051510).
- fbdev: Distinguish between interlaced and progressive modes
  (bsc#1051510).
- platform/x86: toshiba_acpi: Fix defined but not used build
  warnings (bsc#1051510).
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
  (bsc#1051510).
- input: rohm_bu21023: switch to i2c_lock_bus(...,
  I2C_LOCK_SEGMENT) (bsc#1051510).
- HID: hid-ntrig: add error handling for sysfs_create_group
  (bsc#1051510).
- mfd: ti_am335x_tscadc: Fix struct clk memory leak (bsc#1051510).
- mmc: sdhci: do not try to use 3.3V signaling if not supported
  (bsc#1051510).
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
  (bsc#1051510).
- parport: sunbpp: fix error return code (bsc#1051510).
- coresight: Handle errors in finding input/output ports
  (bsc#1051510).
- mei: bus: type promotion bug in mei_nfc_if_version()
  (bsc#1051510).
- gpio: pxa: Fix potential NULL dereference (bsc#1051510).
- gpiolib: Mark gpio_suffixes array with __maybe_unused
  (bsc#1051510).
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
  (bsc#1051510).
- crypto: sharah - Unregister correct algorithms for SAHARA 3
  (bsc#1051510).
- crypto: skcipher - Fix -Wstringop-truncation warnings
  (bsc#1051510).
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
  (bsc#1051510).
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 (bsc#1051510).
- mac80211: restrict delayed tailroom needed decrement
  (bsc#1051510).
- wlcore: Add missing PM call for
  wlcore_cmd_wait_for_event_or_timeout() (bsc#1051510).
- commit e266792</changelog>
  <changelog author="mbrugger@suse.com" date="1538654409">- arm64: Update config files. (bsc#1110716)
  Enable ST LPS25H pressure sensor.
- commit 69c6902</changelog>
  <changelog author="jack@suse.cz" date="1538654410">- patches.fixes/x86-memory_failure-Introduce-set-clear-_mce_nospec.patch:
  Fixup compilation breakage on s390 and arm due to missing
  clear_mce_nospec().
- commit faef795</changelog>
</package>
<package pkgid="a506524cb39ea8a0d960da07ddf00ff1fc448828a26372a9db5bac7fa2ebe322" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.22.1"/>
  <changelog author="tiwai@suse.de" date="1539172800">- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell
  XPS 27 7760 (bsc#1051510).
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
  (bsc#1051510).
- crypto: mxs-dcp - Fix wait logic on chan threads (bsc#1051510).
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM
  ioctl (bsc#1051510).
- HID: add support for Apple Magic Keyboards (bsc#1051510).
- gpio: Fix crash due to registration race (bsc#1051510).
- gpiolib-acpi: Register GpioInt ACPI event handlers from a
  late_initcall (bsc#1051510).
- gpio: adp5588: Fix sleep-in-atomic-context bug (bsc#1051510).
- cfg80211: fix a type issue in
  ieee80211_chandef_to_operating_class() (bsc#1051510).
- Revert "gpio: set up initial state from .get_direction()"
  (bsc#1051510).
- gpio: mb86s70: Revert "Return error if requesting an already
  assigned gpio" (bsc#1051510).
- commit 2759d22</changelog>
  <changelog author="mbrugger@suse.com" date="1539172801">- arm64: Update config files.
  Enable SENSORS_RASPBERRYPI_HWMON
- commit 2a83945</changelog>
  <changelog author="mbrugger@suse.com" date="1539172802">- supported.conf: mark raspberrypi-hwmon as supported
- commit af8ddda</changelog>
  <changelog author="tiwai@suse.de" date="1539172803">- HID: hid-saitek: Add device ID for RAT 7 Contagion
  (bsc#1051510).
- mac80211: shorten the IBSS debug messages (bsc#1051510).
- mac80211: don't Tx a deauth frame if the AP forbade Tx
  (bsc#1051510).
- mac80211: Fix station bandwidth setting after channel switch
  (bsc#1051510).
- mac80211: fix a race between restart and CSA flows
  (bsc#1051510).
- mac80211: do not convert to A-MSDU if frag/subframe limited
  (bsc#1051510).
- mac80211: mesh: fix HWMP sequence numbering to follow standard
  (bsc#1051510).
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211_hwsim: require at least one channel (bsc#1051510).
- mac80211: Run TXQ teardown code before de-registering interfaces
  (bsc#1051510).
- hwmon: (adt7475) Make adt7475_read_word() return errors
  (bsc#1051510).
- hwmon: (ina2xx) fix sysfs shunt resistor read access
  (bsc#1051510).
- commit af836cd</changelog>
  <changelog author="tiwai@suse.de" date="1539172804">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- Revert "mwifiex: handle race during mwifiex_usb_disconnect"
  (bsc#1051510).
- media: videobuf-dma-sg: Fix dma_{sync,unmap}_sg() calls
  (bsc#1051510).
- Revert "mwifiex: fix incorrect ht capability problem"
  (bsc#1051510).
- PM / Domains: Fix genpd to deal with drivers returning 1 from
  - &gt;prepare() (bsc#1051510).
- Revert "pinctrl: sunxi: Don't enforce bias disable (for now)"
  (bsc#1051510).
- commit fb6c36a</changelog>
  <changelog author="tiwai@suse.de" date="1539172805">- blacklist.conf: Add blacklist of inapplicable revert commits
  They are either not applicable or requiring more backports that aren't
  suitable for SLE15
- commit 987dd44</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259200">- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk (bsc#1106110)
- commit 273a6bd</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259201">- blacklist.conf: Append 'drm/amd/pp: initialize result to before or'ing in data'
- commit d2edcd9</changelog>
  <changelog author="tiwai@suse.de" date="1539259202">- Disable DRM patches that broke vbox video driver KMP (bsc#1111076)
- commit 23943c6</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259203">- blacklist.conf: Append 'Revert "drm: Use a flexible array member for blob property data"'
- commit ddc67eb</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259204">- Fix Patch-mainline tags to refer to Linux release tag
  It is expected that Patch-mainline tags refer to a release tag
  in the Linux git tree, such as v4.15. Several patches contain a
  Patch-mainline tags that instead refer to a Linux version number,
  such as 4.15. This inconsistency complicates grepping and
  automation.
  871 of 18000 patches are affected by this problem.
- commit 1d81d26</changelog>
  <changelog author="bp@suse.de" date="1539259205">- crypto: ccp - add timeout support in the SEV command
  (bsc#1106838).
- commit 912dad4</changelog>
  <changelog author="tiwai@suse.de" date="1539345600">- Update config files: update forgotten armv7hl configs
- commit 7bae3a6</changelog>
  <changelog author="msuchanek@suse.de" date="1539345601">- powerpc/numa: Skip onlining a offline node in kdump path
  (bsc#1109784).
- commit df87e51</changelog>
  <changelog author="tiwai@suse.de" date="1539345602">- squashfs metadata 2: electric boogaloo (bsc#1051510).
- squashfs: more metadata hardening (bsc#1051510).
- squashfs: be more careful about metadata corruption
  (bsc#1051510).
- commit 9bfac39</changelog>
  <changelog author="hare@suse.de" date="1539345603">- scsi: qla2xxx: Move log messages before issuing command to
  firmware (bsc#1108870).
- scsi: qla2xxx: Fix for double free of SRB structure
  (bsc#1108870).
- scsi: qla2xxx: Fix recursive mailbox timeout (bsc#1108870).
- scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
  (bsc#1108870).
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
  (bsc#1108870).
- scsi: qla2xxx: Fix duplicate switch database entries
  (bsc#1108870).
- scsi: qla2xxx: Fix NVMe Target discovery (bsc#1108870).
- scsi: qla2xxx: Fix NVMe session hang on unload (bsc#1108870).
- scsi: qla2xxx: don't allow negative thresholds (bsc#1108870).
- commit 50fe149</changelog>
  <changelog author="tiwai@suse.de" date="1539345604">- Squashfs: Compute expected length from inode size rather than
  block length (bsc#1051510).
- commit 0c4a663</changelog>
  <changelog author="tiwai@suse.de" date="1539345605">- soreuseport: initialise timewait reuseport field (bsc#1051510).
- commit bda2dcc</changelog>
  <changelog author="tiwai@suse.de" date="1539345606">- rpc_pipefs: fix double-dput() (bsc#1051510).
- commit 1a15e26</changelog>
  <changelog author="hare@suse.de" date="1539345607">- scsi: qla2xxx: Return switch command on a timeout (bsc#1108870).
- commit 8e38f2a</changelog>
</package>
<package pkgid="02921d746b96ce439807721512e292bf961dd3ed53e807946c662db79ed5112b" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.22.1"/>
  <changelog author="tiwai@suse.de" date="1539172800">- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell
  XPS 27 7760 (bsc#1051510).
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
  (bsc#1051510).
- crypto: mxs-dcp - Fix wait logic on chan threads (bsc#1051510).
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM
  ioctl (bsc#1051510).
- HID: add support for Apple Magic Keyboards (bsc#1051510).
- gpio: Fix crash due to registration race (bsc#1051510).
- gpiolib-acpi: Register GpioInt ACPI event handlers from a
  late_initcall (bsc#1051510).
- gpio: adp5588: Fix sleep-in-atomic-context bug (bsc#1051510).
- cfg80211: fix a type issue in
  ieee80211_chandef_to_operating_class() (bsc#1051510).
- Revert "gpio: set up initial state from .get_direction()"
  (bsc#1051510).
- gpio: mb86s70: Revert "Return error if requesting an already
  assigned gpio" (bsc#1051510).
- commit 2759d22</changelog>
  <changelog author="mbrugger@suse.com" date="1539172801">- arm64: Update config files.
  Enable SENSORS_RASPBERRYPI_HWMON
- commit 2a83945</changelog>
  <changelog author="mbrugger@suse.com" date="1539172802">- supported.conf: mark raspberrypi-hwmon as supported
- commit af8ddda</changelog>
  <changelog author="tiwai@suse.de" date="1539172803">- HID: hid-saitek: Add device ID for RAT 7 Contagion
  (bsc#1051510).
- mac80211: shorten the IBSS debug messages (bsc#1051510).
- mac80211: don't Tx a deauth frame if the AP forbade Tx
  (bsc#1051510).
- mac80211: Fix station bandwidth setting after channel switch
  (bsc#1051510).
- mac80211: fix a race between restart and CSA flows
  (bsc#1051510).
- mac80211: do not convert to A-MSDU if frag/subframe limited
  (bsc#1051510).
- mac80211: mesh: fix HWMP sequence numbering to follow standard
  (bsc#1051510).
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211_hwsim: require at least one channel (bsc#1051510).
- mac80211: Run TXQ teardown code before de-registering interfaces
  (bsc#1051510).
- hwmon: (adt7475) Make adt7475_read_word() return errors
  (bsc#1051510).
- hwmon: (ina2xx) fix sysfs shunt resistor read access
  (bsc#1051510).
- commit af836cd</changelog>
  <changelog author="tiwai@suse.de" date="1539172804">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- Revert "mwifiex: handle race during mwifiex_usb_disconnect"
  (bsc#1051510).
- media: videobuf-dma-sg: Fix dma_{sync,unmap}_sg() calls
  (bsc#1051510).
- Revert "mwifiex: fix incorrect ht capability problem"
  (bsc#1051510).
- PM / Domains: Fix genpd to deal with drivers returning 1 from
  - &gt;prepare() (bsc#1051510).
- Revert "pinctrl: sunxi: Don't enforce bias disable (for now)"
  (bsc#1051510).
- commit fb6c36a</changelog>
  <changelog author="tiwai@suse.de" date="1539172805">- blacklist.conf: Add blacklist of inapplicable revert commits
  They are either not applicable or requiring more backports that aren't
  suitable for SLE15
- commit 987dd44</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259200">- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk (bsc#1106110)
- commit 273a6bd</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259201">- blacklist.conf: Append 'drm/amd/pp: initialize result to before or'ing in data'
- commit d2edcd9</changelog>
  <changelog author="tiwai@suse.de" date="1539259202">- Disable DRM patches that broke vbox video driver KMP (bsc#1111076)
- commit 23943c6</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259203">- blacklist.conf: Append 'Revert "drm: Use a flexible array member for blob property data"'
- commit ddc67eb</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259204">- Fix Patch-mainline tags to refer to Linux release tag
  It is expected that Patch-mainline tags refer to a release tag
  in the Linux git tree, such as v4.15. Several patches contain a
  Patch-mainline tags that instead refer to a Linux version number,
  such as 4.15. This inconsistency complicates grepping and
  automation.
  871 of 18000 patches are affected by this problem.
- commit 1d81d26</changelog>
  <changelog author="bp@suse.de" date="1539259205">- crypto: ccp - add timeout support in the SEV command
  (bsc#1106838).
- commit 912dad4</changelog>
  <changelog author="tiwai@suse.de" date="1539345600">- Update config files: update forgotten armv7hl configs
- commit 7bae3a6</changelog>
  <changelog author="msuchanek@suse.de" date="1539345601">- powerpc/numa: Skip onlining a offline node in kdump path
  (bsc#1109784).
- commit df87e51</changelog>
  <changelog author="tiwai@suse.de" date="1539345602">- squashfs metadata 2: electric boogaloo (bsc#1051510).
- squashfs: more metadata hardening (bsc#1051510).
- squashfs: be more careful about metadata corruption
  (bsc#1051510).
- commit 9bfac39</changelog>
  <changelog author="hare@suse.de" date="1539345603">- scsi: qla2xxx: Move log messages before issuing command to
  firmware (bsc#1108870).
- scsi: qla2xxx: Fix for double free of SRB structure
  (bsc#1108870).
- scsi: qla2xxx: Fix recursive mailbox timeout (bsc#1108870).
- scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
  (bsc#1108870).
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
  (bsc#1108870).
- scsi: qla2xxx: Fix duplicate switch database entries
  (bsc#1108870).
- scsi: qla2xxx: Fix NVMe Target discovery (bsc#1108870).
- scsi: qla2xxx: Fix NVMe session hang on unload (bsc#1108870).
- scsi: qla2xxx: don't allow negative thresholds (bsc#1108870).
- commit 50fe149</changelog>
  <changelog author="tiwai@suse.de" date="1539345604">- Squashfs: Compute expected length from inode size rather than
  block length (bsc#1051510).
- commit 0c4a663</changelog>
  <changelog author="tiwai@suse.de" date="1539345605">- soreuseport: initialise timewait reuseport field (bsc#1051510).
- commit bda2dcc</changelog>
  <changelog author="tiwai@suse.de" date="1539345606">- rpc_pipefs: fix double-dput() (bsc#1051510).
- commit 1a15e26</changelog>
  <changelog author="hare@suse.de" date="1539345607">- scsi: qla2xxx: Return switch command on a timeout (bsc#1108870).
- commit 8e38f2a</changelog>
</package>
<package pkgid="7b67b36ed7645543d6138ecd5aec85eb2648245cd29a91d3f7ad7b070723188b" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.25.1"/>
  <changelog author="tiwai@suse.de" date="1540814400">- NFC: nfcmrvl_uart: fix OF child-node lookup (bsc#1051510).
- kernfs: update comment about kernfs_path() return value
  (bsc#1051510).
- usbip: tools: fix atoi() on non-null terminated string
  (bsc#1051510).
- USB: serial: cypress_m8: fix interrupt-out transfer length
  (bsc#1051510).
- usb: chipidea: Prevent unbalanced IRQ disable (bsc#1051510).
- commit 6c9d1e7</changelog>
  <changelog author="tiwai@suse.de" date="1540814401">- blacklist.conf: Add ASoC and USB entries that may break kABI
- commit 199a072</changelog>
  <changelog author="tiwai@suse.de" date="1540814402">- usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation
  (bsc#1051510).
- usb: gadget: fsl_udc_core: check allocation return value and
  cleanup on failure (bsc#1051510).
- commit c1b7b66</changelog>
  <changelog author="tiwai@suse.de" date="1540814403">- Refresh patch tag of upstreamed patches and move to sorted section
- commit a966b56</changelog>
  <changelog author="ohering@suse.de" date="1540900800">- move changes without Git-commit out of sorted section
- commit cbf049e</changelog>
  <changelog author="jslaby@suse.cz" date="1540900801">- random: rate limit unseeded randomness warnings (git-fixes).
- commit be52b92</changelog>
  <changelog author="jslaby@suse.cz" date="1540900802">- blacklist.conf: add a kasan fix
- commit c85e2d1</changelog>
  <changelog author="jdelvare@suse.de" date="1540900803">- Add reference to bsc#1104124 to
  patches.fixes/fs-aio-fix-the-increment-of-aio-nr-and-counting-agai.patch
- commit f60e64b</changelog>
  <changelog author="jslaby@suse.cz" date="1540900804">- tools build: fix # escaping in .cmd files for future Make
  (git-fixes).
- Kbuild: fix # escaping in .cmd files for future Make
  (git-fixes).
- commit 8f11ec3</changelog>
  <changelog author="tiwai@suse.de" date="1540900805">- drm/i915/dp: Link train Fallback on eDP only if fallback link
  BW can fit panel's native mode (bsc#1051510).
- drm/i915: Restore vblank interrupts earlier (bsc#1051510).
- commit daf120f</changelog>
  <changelog author="tiwai@suse.de" date="1540900806">- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
  (bsc#1051510).
- media: cx231xx: fix potential sign-extension overflow on large
  shift (bsc#1051510).
- media: pci: cx23885: handle adding to list failure
  (bsc#1051510).
- media: vsp1: Fix YCbCr planar formats pitch calculation
  (bsc#1051510).
- media: tvp5150: fix switch exit in set control handler
  (bsc#1051510).
- media: tvp5150: fix width alignment during set_selection()
  (bsc#1051510).
- media: em28xx: fix input name for Terratec AV 350 (bsc#1051510).
- media: em28xx: use a default format if TRY_FMT fails
  (bsc#1051510).
- media: tvp5150: avoid going past array on v4l2_querymenu()
  (bsc#1051510).
- media: dvb: fix compat ioctl translation (bsc#1051510).
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
  (bsc#1051510).
- commit 0831c5e</changelog>
  <changelog author="tiwai@suse.de" date="1540900807">- soc/tegra: pmc: Fix child-node lookup (bsc#1051510).
- serial: 8250: Fix clearing FIFOs in RS485 mode again
  (bsc#1051510).
- staging: comedi: ni_mio_common: protect register write overflow
  (bsc#1051510).
- iio: adc: at91: fix wrong channel number in triggered buffer
  mode (bsc#1051510).
- iio: adc: at91: fix acking DRDY irq on simple conversions
  (bsc#1051510).
- iio: adc: imx25-gcq: Fix leak of device_node in
  mx25_gcq_setup_cfgs() (bsc#1051510).
- commit 9f4f0cc</changelog>
  <changelog author="jthumshirn@suse.de" date="1540900808">- Refresh
  patches.fixes/0001-drm-amdgpu-powerplay-fix-missing-break-in-switch-sta.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Do-not-carry-error-code-in-HiBMC.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Don-t-overwrite-fb-helper-surfac.patch.
- Refresh
  patches.fixes/0001-drm-i915-audio-Hook-up-component-bindings-even-if-di.patch.
- Refresh
  patches.fixes/0001-drm-i915-gen9-Fix-initial-readout-for-Y-tiled-frameb.patch.
- Refresh
  patches.fixes/0001-drm-sti-do-not-remove-the-drm_bridge-that-was-never-.patch.
- Refresh
  patches.fixes/0001-drm-virtio-fix-bounds-check-in-virtio_gpu_cmd_get_ca.patch.
- commit 652fab5</changelog>
  <changelog author="tiwai@suse.de" date="1540987200">- drm/nouveau: Don't disable polling in fallback mode
  (bsc#1103356).
- Delete
  patches.suse/Revert-drm-nouveau-drm-therm-fan-add-a-fallback-if-n.
- commit aa0c431</changelog>
  <changelog author="tzimmermann@suse.de" date="1540987201">- Fix Patch-mainline for "drm/amdgpu: update tmr mc address"
  The Patch-mainline tag was incorrect. References is being updated as well.
- commit ce8535e</changelog>
  <changelog author="tiwai@suse.de" date="1540987202">- Workaround for mysterious NVMe breakage with i915 CFL
  (bsc#1111040).
- commit 0fa5877</changelog>
  <changelog author="jthumshirn@suse.de" date="1540987203">- libnvdimm, label: Fix sparse warning (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Use namespace index data to reduce number of label reads
  needed (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Split label init out from the logic for getting config
  data (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Remove empty if statement (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Clarify comment in sizeof_namespace_index (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Sanity check labeloff (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- libnvdimm, dimm: Maximize label transfer size (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7
  (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- commit 5a4eeb4</changelog>
  <changelog author="jlee@suse.com" date="1540987204">- x86/boot/KASLR: Work around firmware bugs by excluding
  EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR's choice
  (bnc#1112878).
- commit d45cd78</changelog>
  <changelog author="tiwai@suse.de" date="1540987205">- blacklist.conf: Add a few wifi driver entries that can't be applied
- commit 662fc68</changelog>
  <changelog author="tiwai@suse.de" date="1540987206">- spi/bcm63xx-hsspi: keep pll clk enabled (bsc#1051510).
- spi: sh-msiof: fix deferred probing (bsc#1051510).
- spi: bcm-qspi: switch back to reading flash using smaller chunks
  (bsc#1051510).
- commit f773242</changelog>
</package>
<package pkgid="3fcbcbf55239bfb0294094706a727eba367947aca4668eb058da476ec19a1dc3" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.25.1"/>
  <changelog author="tiwai@suse.de" date="1540814400">- NFC: nfcmrvl_uart: fix OF child-node lookup (bsc#1051510).
- kernfs: update comment about kernfs_path() return value
  (bsc#1051510).
- usbip: tools: fix atoi() on non-null terminated string
  (bsc#1051510).
- USB: serial: cypress_m8: fix interrupt-out transfer length
  (bsc#1051510).
- usb: chipidea: Prevent unbalanced IRQ disable (bsc#1051510).
- commit 6c9d1e7</changelog>
  <changelog author="tiwai@suse.de" date="1540814401">- blacklist.conf: Add ASoC and USB entries that may break kABI
- commit 199a072</changelog>
  <changelog author="tiwai@suse.de" date="1540814402">- usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation
  (bsc#1051510).
- usb: gadget: fsl_udc_core: check allocation return value and
  cleanup on failure (bsc#1051510).
- commit c1b7b66</changelog>
  <changelog author="tiwai@suse.de" date="1540814403">- Refresh patch tag of upstreamed patches and move to sorted section
- commit a966b56</changelog>
  <changelog author="ohering@suse.de" date="1540900800">- move changes without Git-commit out of sorted section
- commit cbf049e</changelog>
  <changelog author="jslaby@suse.cz" date="1540900801">- random: rate limit unseeded randomness warnings (git-fixes).
- commit be52b92</changelog>
  <changelog author="jslaby@suse.cz" date="1540900802">- blacklist.conf: add a kasan fix
- commit c85e2d1</changelog>
  <changelog author="jdelvare@suse.de" date="1540900803">- Add reference to bsc#1104124 to
  patches.fixes/fs-aio-fix-the-increment-of-aio-nr-and-counting-agai.patch
- commit f60e64b</changelog>
  <changelog author="jslaby@suse.cz" date="1540900804">- tools build: fix # escaping in .cmd files for future Make
  (git-fixes).
- Kbuild: fix # escaping in .cmd files for future Make
  (git-fixes).
- commit 8f11ec3</changelog>
  <changelog author="tiwai@suse.de" date="1540900805">- drm/i915/dp: Link train Fallback on eDP only if fallback link
  BW can fit panel's native mode (bsc#1051510).
- drm/i915: Restore vblank interrupts earlier (bsc#1051510).
- commit daf120f</changelog>
  <changelog author="tiwai@suse.de" date="1540900806">- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
  (bsc#1051510).
- media: cx231xx: fix potential sign-extension overflow on large
  shift (bsc#1051510).
- media: pci: cx23885: handle adding to list failure
  (bsc#1051510).
- media: vsp1: Fix YCbCr planar formats pitch calculation
  (bsc#1051510).
- media: tvp5150: fix switch exit in set control handler
  (bsc#1051510).
- media: tvp5150: fix width alignment during set_selection()
  (bsc#1051510).
- media: em28xx: fix input name for Terratec AV 350 (bsc#1051510).
- media: em28xx: use a default format if TRY_FMT fails
  (bsc#1051510).
- media: tvp5150: avoid going past array on v4l2_querymenu()
  (bsc#1051510).
- media: dvb: fix compat ioctl translation (bsc#1051510).
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
  (bsc#1051510).
- commit 0831c5e</changelog>
  <changelog author="tiwai@suse.de" date="1540900807">- soc/tegra: pmc: Fix child-node lookup (bsc#1051510).
- serial: 8250: Fix clearing FIFOs in RS485 mode again
  (bsc#1051510).
- staging: comedi: ni_mio_common: protect register write overflow
  (bsc#1051510).
- iio: adc: at91: fix wrong channel number in triggered buffer
  mode (bsc#1051510).
- iio: adc: at91: fix acking DRDY irq on simple conversions
  (bsc#1051510).
- iio: adc: imx25-gcq: Fix leak of device_node in
  mx25_gcq_setup_cfgs() (bsc#1051510).
- commit 9f4f0cc</changelog>
  <changelog author="jthumshirn@suse.de" date="1540900808">- Refresh
  patches.fixes/0001-drm-amdgpu-powerplay-fix-missing-break-in-switch-sta.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Do-not-carry-error-code-in-HiBMC.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Don-t-overwrite-fb-helper-surfac.patch.
- Refresh
  patches.fixes/0001-drm-i915-audio-Hook-up-component-bindings-even-if-di.patch.
- Refresh
  patches.fixes/0001-drm-i915-gen9-Fix-initial-readout-for-Y-tiled-frameb.patch.
- Refresh
  patches.fixes/0001-drm-sti-do-not-remove-the-drm_bridge-that-was-never-.patch.
- Refresh
  patches.fixes/0001-drm-virtio-fix-bounds-check-in-virtio_gpu_cmd_get_ca.patch.
- commit 652fab5</changelog>
  <changelog author="tiwai@suse.de" date="1540987200">- drm/nouveau: Don't disable polling in fallback mode
  (bsc#1103356).
- Delete
  patches.suse/Revert-drm-nouveau-drm-therm-fan-add-a-fallback-if-n.
- commit aa0c431</changelog>
  <changelog author="tzimmermann@suse.de" date="1540987201">- Fix Patch-mainline for "drm/amdgpu: update tmr mc address"
  The Patch-mainline tag was incorrect. References is being updated as well.
- commit ce8535e</changelog>
  <changelog author="tiwai@suse.de" date="1540987202">- Workaround for mysterious NVMe breakage with i915 CFL
  (bsc#1111040).
- commit 0fa5877</changelog>
  <changelog author="jthumshirn@suse.de" date="1540987203">- libnvdimm, label: Fix sparse warning (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Use namespace index data to reduce number of label reads
  needed (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Split label init out from the logic for getting config
  data (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Remove empty if statement (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Clarify comment in sizeof_namespace_index (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Sanity check labeloff (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- libnvdimm, dimm: Maximize label transfer size (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7
  (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- commit 5a4eeb4</changelog>
  <changelog author="jlee@suse.com" date="1540987204">- x86/boot/KASLR: Work around firmware bugs by excluding
  EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR's choice
  (bnc#1112878).
- commit d45cd78</changelog>
  <changelog author="tiwai@suse.de" date="1540987205">- blacklist.conf: Add a few wifi driver entries that can't be applied
- commit 662fc68</changelog>
  <changelog author="tiwai@suse.de" date="1540987206">- spi/bcm63xx-hsspi: keep pll clk enabled (bsc#1051510).
- spi: sh-msiof: fix deferred probing (bsc#1051510).
- spi: bcm-qspi: switch back to reading flash using smaller chunks
  (bsc#1051510).
- commit f773242</changelog>
</package>
<package pkgid="bfb8c62b151b3b7b5fd6c9a7903133e4245693f8d3b12c01a597d0c2aa4663e1" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="374663186c03191af7659dbf85a1ffe337e23688762fe0f3493db037965411a6" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="05b306bd79747252bce628e1a7c3d32e3984942ec72b9a705071fef229cb322c" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="fbbcd5d573151564fc0e61a353cdd99de7715c0135903c6bceeb8d502b4d5dd6" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="c2d2477c9e7baeee6d0cf536d438eb69d62ce709446fb3a27ad8365895e058e7" name="kernel-obs-qa" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="b7a60a4d13ef5b9b9ce827232598c35027a649defa7bcd42cded1e37c43a1be1" name="kernel-obs-qa" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="9899c0d53607df8a425a25de881b7032f4cbce32eb31ca482e6b3014e093471d" name="kernel-obs-qa" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="088428eb44534d064467586cb923f5eb240e63ea827bbd1ea8bee8f7175c5cd7" name="kernel-obs-qa" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="2aeb1373ad75edb39c6b3699adf753c24fde05844d9247d92ef92650a866c8d0" name="kernel-obs-qa" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="85a8ce33423966cb2c7de11c6569073a3451af78a8eea8f258f9872ecd0ebc31" name="kernel-obs-qa" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="3933638001ed6668cc70c15dbd12caeb61295607e2262c51865129b0a88ed7ae" name="kernel-obs-qa" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.19.2"/>
  <changelog author="fdmanana@suse.com" date="1538568000">- Btrfs: fix fsync after hole punching when using no-holes feature
  (bsc#1110642).
- commit 3f19b40</changelog>
  <changelog author="fdmanana@suse.com" date="1538568001">- Btrfs: fix loss of prealloc extents past i_size after fsync
  log replay (bsc#1110643).
- commit 974e057</changelog>
  <changelog author="fdmanana@suse.com" date="1538568002">- Btrfs: fix duplicate extents after fsync of file with prealloc
  extents (bsc#1110644).
- commit c4ec603</changelog>
  <changelog author="fdmanana@suse.com" date="1538568003">- Btrfs: fix return value on rename exchange failure
  (bsc#1110645).
- commit 532729c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568004">- Btrfs: sync log after logging new name (bsc#1110646).
- commit 7260d6b</changelog>
  <changelog author="fdmanana@suse.com" date="1538568005">- Btrfs: fix data corruption when deduplicating between different
  files (bsc#1110647).
- commit 669848c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568006">- btrfs: Remove unused parameters from various functions
  (bsc#1110649).
- commit c97c657</changelog>
  <changelog author="fdmanana@suse.com" date="1538568007">- Btrfs: fix send failure when root has deleted files still open
  (bsc#1110650).
- commit f52554d</changelog>
  <changelog author="jslaby@suse.cz" date="1538568008">- watchdog: Mark watchdog touch functions as notrace (git-fixes).
- commit 8b53193</changelog>
  <changelog author="neilb@suse.com" date="1538654400">- nfs/filelayout: fix oops when freeing filelayout segment
  (bsc#1105190).
- NFS/filelayout: Fix racy setting of fl-&gt;dsaddr in
  filelayout_check_deviceid() (bsc#1105190).
- commit d6d0fab</changelog>
  <changelog author="neilb@suse.com" date="1538654401">- VFS: don't test owner for NFS in set_posix_acl() (bsc#1103405).
- commit 36f977a</changelog>
  <changelog author="tiwai@suse.de" date="1538654402">- README.BRANCH: SLE15-SP1 branch maintainer changes
  Add ptesarik as co-maintainer, keep tiwai as the primary maintainer
- commit 83aea11</changelog>
  <changelog author="wqu@suse.com" date="1538654403">- btrfs: tests/qgroup: Fix wrong tree backref level (bsc#1107928).
- commit a5e154c</changelog>
  <changelog author="wqu@suse.com" date="1538654404">- btrfs: check-integrity: Fix NULL pointer dereference for
  degraded mount (bsc#1107947).
- commit 77b2277</changelog>
  <changelog author="wqu@suse.com" date="1538654405">- btrfs: scrub: Don't use inode pages for device replace (follow
  up for bsc#1108096).
- commit c865775</changelog>
  <changelog author="tiwai@suse.de" date="1538654406">- ASoC: cs4265: fix MMTLR Data switch control (bsc#1051510).
- ALSA: fireworks: fix memory leak of response buffer at error
  path (bsc#1051510).
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix
  I/O at error path (bsc#1051510).
- ALSA: emu10k1: fix possible info leak to userspace on
  SNDRV_EMU10K1_IOCTL_INFO (bsc#1051510).
- ALSA: bebob: use address returned by kmalloc() instead of
  kernel stack for streaming DMA mapping (bsc#1051510).
- ASoC: rt5514: Fix the issue of the delay volume applied
  (bsc#1051510).
- ASoC: dapm: Fix potential DAI widget pointer deref when linking
  DAIs (bsc#1051510).
- ALSA: msnd: Fix the default sample sizes (bsc#1051510).
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE()
  macro (bsc#1051510).
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
  (bsc#1051510).
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
  (bsc#1051510).
- ASoC: rt5514: Add the missing register in the readable table
  (bsc#1051510).
- ASoC: rt5514: Eliminate the noise in the ASRC case
  (bsc#1051510).
- ASoC: rt5514: Add the I2S ASRC support (bsc#1051510).
- commit 4eba9c8</changelog>
  <changelog author="wqu@suse.com" date="1538654407">- btrfs: scrub: Don't use inode page cache in
  scrub_handle_errored_block() (follow up for bsc#1108096).
- commit 3f91c84</changelog>
  <changelog author="tiwai@suse.de" date="1538654408">- smsc95xx: Check for Wake-on-LAN modes (bsc#1051510).
- smsc75xx: Check for Wake-on-LAN modes (bsc#1051510).
- r8152: Check for supported Wake-on-LAN Modes (bsc#1051510).
- sr9800: Check for supported Wake-on-LAN modes (bsc#1051510).
- lan78xx: Check for supported Wake-on-LAN modes (bsc#1051510).
- ax88179_178a: Check for supported Wake-on-LAN modes
  (bsc#1051510).
- mac80211: fix pending queue hang due to TX_DROP (bsc#1051510).
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
  (bsc#1051510).
- Input: elantech - enable middle button of touchpad on ThinkPad
  P72 (bsc#1051510).
- regulator: fix crash caused by null driver data (bsc#1051510).
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
  (bsc#1051510).
- intel_th: Fix device removal logic (bsc#1051510).
- NFC: Fix possible memory corruption when handling SHDLC I-Frame
  commands (bsc#1051510).
- platform/x86: alienware-wmi: Correct a memory leak
  (bsc#1051510).
- xhci: Fix use after free for URB cancellation on a reallocated
  endpoint (bsc#1051510).
- mei: ignore not found client in the enumeration (bsc#1051510).
- i2c: i801: Allow ACPI AML access I/O ports not reserved for
  SMBus (bsc#1051510).
- fbdev/via: fix defined but not used warning (bsc#1051510).
- video: goldfishfb: fix memory leak on driver remove
  (bsc#1051510).
- fbdev: Distinguish between interlaced and progressive modes
  (bsc#1051510).
- platform/x86: toshiba_acpi: Fix defined but not used build
  warnings (bsc#1051510).
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
  (bsc#1051510).
- input: rohm_bu21023: switch to i2c_lock_bus(...,
  I2C_LOCK_SEGMENT) (bsc#1051510).
- HID: hid-ntrig: add error handling for sysfs_create_group
  (bsc#1051510).
- mfd: ti_am335x_tscadc: Fix struct clk memory leak (bsc#1051510).
- mmc: sdhci: do not try to use 3.3V signaling if not supported
  (bsc#1051510).
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
  (bsc#1051510).
- parport: sunbpp: fix error return code (bsc#1051510).
- coresight: Handle errors in finding input/output ports
  (bsc#1051510).
- mei: bus: type promotion bug in mei_nfc_if_version()
  (bsc#1051510).
- gpio: pxa: Fix potential NULL dereference (bsc#1051510).
- gpiolib: Mark gpio_suffixes array with __maybe_unused
  (bsc#1051510).
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
  (bsc#1051510).
- crypto: sharah - Unregister correct algorithms for SAHARA 3
  (bsc#1051510).
- crypto: skcipher - Fix -Wstringop-truncation warnings
  (bsc#1051510).
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
  (bsc#1051510).
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 (bsc#1051510).
- mac80211: restrict delayed tailroom needed decrement
  (bsc#1051510).
- wlcore: Add missing PM call for
  wlcore_cmd_wait_for_event_or_timeout() (bsc#1051510).
- commit e266792</changelog>
  <changelog author="mbrugger@suse.com" date="1538654409">- arm64: Update config files. (bsc#1110716)
  Enable ST LPS25H pressure sensor.
- commit 69c6902</changelog>
  <changelog author="jack@suse.cz" date="1538654410">- patches.fixes/x86-memory_failure-Introduce-set-clear-_mce_nospec.patch:
  Fixup compilation breakage on s390 and arm due to missing
  clear_mce_nospec().
- commit faef795</changelog>
</package>
<package pkgid="5d89b721182f7ab496a445991324ef3ef8fb5a4c2c9e01ad49252f8fb6b427f8" name="kernel-obs-qa" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.19.2"/>
  <changelog author="fdmanana@suse.com" date="1538568000">- Btrfs: fix fsync after hole punching when using no-holes feature
  (bsc#1110642).
- commit 3f19b40</changelog>
  <changelog author="fdmanana@suse.com" date="1538568001">- Btrfs: fix loss of prealloc extents past i_size after fsync
  log replay (bsc#1110643).
- commit 974e057</changelog>
  <changelog author="fdmanana@suse.com" date="1538568002">- Btrfs: fix duplicate extents after fsync of file with prealloc
  extents (bsc#1110644).
- commit c4ec603</changelog>
  <changelog author="fdmanana@suse.com" date="1538568003">- Btrfs: fix return value on rename exchange failure
  (bsc#1110645).
- commit 532729c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568004">- Btrfs: sync log after logging new name (bsc#1110646).
- commit 7260d6b</changelog>
  <changelog author="fdmanana@suse.com" date="1538568005">- Btrfs: fix data corruption when deduplicating between different
  files (bsc#1110647).
- commit 669848c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568006">- btrfs: Remove unused parameters from various functions
  (bsc#1110649).
- commit c97c657</changelog>
  <changelog author="fdmanana@suse.com" date="1538568007">- Btrfs: fix send failure when root has deleted files still open
  (bsc#1110650).
- commit f52554d</changelog>
  <changelog author="jslaby@suse.cz" date="1538568008">- watchdog: Mark watchdog touch functions as notrace (git-fixes).
- commit 8b53193</changelog>
  <changelog author="neilb@suse.com" date="1538654400">- nfs/filelayout: fix oops when freeing filelayout segment
  (bsc#1105190).
- NFS/filelayout: Fix racy setting of fl-&gt;dsaddr in
  filelayout_check_deviceid() (bsc#1105190).
- commit d6d0fab</changelog>
  <changelog author="neilb@suse.com" date="1538654401">- VFS: don't test owner for NFS in set_posix_acl() (bsc#1103405).
- commit 36f977a</changelog>
  <changelog author="tiwai@suse.de" date="1538654402">- README.BRANCH: SLE15-SP1 branch maintainer changes
  Add ptesarik as co-maintainer, keep tiwai as the primary maintainer
- commit 83aea11</changelog>
  <changelog author="wqu@suse.com" date="1538654403">- btrfs: tests/qgroup: Fix wrong tree backref level (bsc#1107928).
- commit a5e154c</changelog>
  <changelog author="wqu@suse.com" date="1538654404">- btrfs: check-integrity: Fix NULL pointer dereference for
  degraded mount (bsc#1107947).
- commit 77b2277</changelog>
  <changelog author="wqu@suse.com" date="1538654405">- btrfs: scrub: Don't use inode pages for device replace (follow
  up for bsc#1108096).
- commit c865775</changelog>
  <changelog author="tiwai@suse.de" date="1538654406">- ASoC: cs4265: fix MMTLR Data switch control (bsc#1051510).
- ALSA: fireworks: fix memory leak of response buffer at error
  path (bsc#1051510).
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix
  I/O at error path (bsc#1051510).
- ALSA: emu10k1: fix possible info leak to userspace on
  SNDRV_EMU10K1_IOCTL_INFO (bsc#1051510).
- ALSA: bebob: use address returned by kmalloc() instead of
  kernel stack for streaming DMA mapping (bsc#1051510).
- ASoC: rt5514: Fix the issue of the delay volume applied
  (bsc#1051510).
- ASoC: dapm: Fix potential DAI widget pointer deref when linking
  DAIs (bsc#1051510).
- ALSA: msnd: Fix the default sample sizes (bsc#1051510).
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE()
  macro (bsc#1051510).
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
  (bsc#1051510).
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
  (bsc#1051510).
- ASoC: rt5514: Add the missing register in the readable table
  (bsc#1051510).
- ASoC: rt5514: Eliminate the noise in the ASRC case
  (bsc#1051510).
- ASoC: rt5514: Add the I2S ASRC support (bsc#1051510).
- commit 4eba9c8</changelog>
  <changelog author="wqu@suse.com" date="1538654407">- btrfs: scrub: Don't use inode page cache in
  scrub_handle_errored_block() (follow up for bsc#1108096).
- commit 3f91c84</changelog>
  <changelog author="tiwai@suse.de" date="1538654408">- smsc95xx: Check for Wake-on-LAN modes (bsc#1051510).
- smsc75xx: Check for Wake-on-LAN modes (bsc#1051510).
- r8152: Check for supported Wake-on-LAN Modes (bsc#1051510).
- sr9800: Check for supported Wake-on-LAN modes (bsc#1051510).
- lan78xx: Check for supported Wake-on-LAN modes (bsc#1051510).
- ax88179_178a: Check for supported Wake-on-LAN modes
  (bsc#1051510).
- mac80211: fix pending queue hang due to TX_DROP (bsc#1051510).
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
  (bsc#1051510).
- Input: elantech - enable middle button of touchpad on ThinkPad
  P72 (bsc#1051510).
- regulator: fix crash caused by null driver data (bsc#1051510).
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
  (bsc#1051510).
- intel_th: Fix device removal logic (bsc#1051510).
- NFC: Fix possible memory corruption when handling SHDLC I-Frame
  commands (bsc#1051510).
- platform/x86: alienware-wmi: Correct a memory leak
  (bsc#1051510).
- xhci: Fix use after free for URB cancellation on a reallocated
  endpoint (bsc#1051510).
- mei: ignore not found client in the enumeration (bsc#1051510).
- i2c: i801: Allow ACPI AML access I/O ports not reserved for
  SMBus (bsc#1051510).
- fbdev/via: fix defined but not used warning (bsc#1051510).
- video: goldfishfb: fix memory leak on driver remove
  (bsc#1051510).
- fbdev: Distinguish between interlaced and progressive modes
  (bsc#1051510).
- platform/x86: toshiba_acpi: Fix defined but not used build
  warnings (bsc#1051510).
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
  (bsc#1051510).
- input: rohm_bu21023: switch to i2c_lock_bus(...,
  I2C_LOCK_SEGMENT) (bsc#1051510).
- HID: hid-ntrig: add error handling for sysfs_create_group
  (bsc#1051510).
- mfd: ti_am335x_tscadc: Fix struct clk memory leak (bsc#1051510).
- mmc: sdhci: do not try to use 3.3V signaling if not supported
  (bsc#1051510).
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
  (bsc#1051510).
- parport: sunbpp: fix error return code (bsc#1051510).
- coresight: Handle errors in finding input/output ports
  (bsc#1051510).
- mei: bus: type promotion bug in mei_nfc_if_version()
  (bsc#1051510).
- gpio: pxa: Fix potential NULL dereference (bsc#1051510).
- gpiolib: Mark gpio_suffixes array with __maybe_unused
  (bsc#1051510).
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
  (bsc#1051510).
- crypto: sharah - Unregister correct algorithms for SAHARA 3
  (bsc#1051510).
- crypto: skcipher - Fix -Wstringop-truncation warnings
  (bsc#1051510).
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
  (bsc#1051510).
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 (bsc#1051510).
- mac80211: restrict delayed tailroom needed decrement
  (bsc#1051510).
- wlcore: Add missing PM call for
  wlcore_cmd_wait_for_event_or_timeout() (bsc#1051510).
- commit e266792</changelog>
  <changelog author="mbrugger@suse.com" date="1538654409">- arm64: Update config files. (bsc#1110716)
  Enable ST LPS25H pressure sensor.
- commit 69c6902</changelog>
  <changelog author="jack@suse.cz" date="1538654410">- patches.fixes/x86-memory_failure-Introduce-set-clear-_mce_nospec.patch:
  Fixup compilation breakage on s390 and arm due to missing
  clear_mce_nospec().
- commit faef795</changelog>
</package>
<package pkgid="8695b0efe2f93e534445e6c158b10addce3c0f8bd21cb819da6ef1256275cbf5" name="kernel-obs-qa" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.22.1"/>
  <changelog author="tiwai@suse.de" date="1539172800">- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell
  XPS 27 7760 (bsc#1051510).
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
  (bsc#1051510).
- crypto: mxs-dcp - Fix wait logic on chan threads (bsc#1051510).
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM
  ioctl (bsc#1051510).
- HID: add support for Apple Magic Keyboards (bsc#1051510).
- gpio: Fix crash due to registration race (bsc#1051510).
- gpiolib-acpi: Register GpioInt ACPI event handlers from a
  late_initcall (bsc#1051510).
- gpio: adp5588: Fix sleep-in-atomic-context bug (bsc#1051510).
- cfg80211: fix a type issue in
  ieee80211_chandef_to_operating_class() (bsc#1051510).
- Revert "gpio: set up initial state from .get_direction()"
  (bsc#1051510).
- gpio: mb86s70: Revert "Return error if requesting an already
  assigned gpio" (bsc#1051510).
- commit 2759d22</changelog>
  <changelog author="mbrugger@suse.com" date="1539172801">- arm64: Update config files.
  Enable SENSORS_RASPBERRYPI_HWMON
- commit 2a83945</changelog>
  <changelog author="mbrugger@suse.com" date="1539172802">- supported.conf: mark raspberrypi-hwmon as supported
- commit af8ddda</changelog>
  <changelog author="tiwai@suse.de" date="1539172803">- HID: hid-saitek: Add device ID for RAT 7 Contagion
  (bsc#1051510).
- mac80211: shorten the IBSS debug messages (bsc#1051510).
- mac80211: don't Tx a deauth frame if the AP forbade Tx
  (bsc#1051510).
- mac80211: Fix station bandwidth setting after channel switch
  (bsc#1051510).
- mac80211: fix a race between restart and CSA flows
  (bsc#1051510).
- mac80211: do not convert to A-MSDU if frag/subframe limited
  (bsc#1051510).
- mac80211: mesh: fix HWMP sequence numbering to follow standard
  (bsc#1051510).
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211_hwsim: require at least one channel (bsc#1051510).
- mac80211: Run TXQ teardown code before de-registering interfaces
  (bsc#1051510).
- hwmon: (adt7475) Make adt7475_read_word() return errors
  (bsc#1051510).
- hwmon: (ina2xx) fix sysfs shunt resistor read access
  (bsc#1051510).
- commit af836cd</changelog>
  <changelog author="tiwai@suse.de" date="1539172804">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- Revert "mwifiex: handle race during mwifiex_usb_disconnect"
  (bsc#1051510).
- media: videobuf-dma-sg: Fix dma_{sync,unmap}_sg() calls
  (bsc#1051510).
- Revert "mwifiex: fix incorrect ht capability problem"
  (bsc#1051510).
- PM / Domains: Fix genpd to deal with drivers returning 1 from
  - &gt;prepare() (bsc#1051510).
- Revert "pinctrl: sunxi: Don't enforce bias disable (for now)"
  (bsc#1051510).
- commit fb6c36a</changelog>
  <changelog author="tiwai@suse.de" date="1539172805">- blacklist.conf: Add blacklist of inapplicable revert commits
  They are either not applicable or requiring more backports that aren't
  suitable for SLE15
- commit 987dd44</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259200">- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk (bsc#1106110)
- commit 273a6bd</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259201">- blacklist.conf: Append 'drm/amd/pp: initialize result to before or'ing in data'
- commit d2edcd9</changelog>
  <changelog author="tiwai@suse.de" date="1539259202">- Disable DRM patches that broke vbox video driver KMP (bsc#1111076)
- commit 23943c6</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259203">- blacklist.conf: Append 'Revert "drm: Use a flexible array member for blob property data"'
- commit ddc67eb</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259204">- Fix Patch-mainline tags to refer to Linux release tag
  It is expected that Patch-mainline tags refer to a release tag
  in the Linux git tree, such as v4.15. Several patches contain a
  Patch-mainline tags that instead refer to a Linux version number,
  such as 4.15. This inconsistency complicates grepping and
  automation.
  871 of 18000 patches are affected by this problem.
- commit 1d81d26</changelog>
  <changelog author="bp@suse.de" date="1539259205">- crypto: ccp - add timeout support in the SEV command
  (bsc#1106838).
- commit 912dad4</changelog>
  <changelog author="tiwai@suse.de" date="1539345600">- Update config files: update forgotten armv7hl configs
- commit 7bae3a6</changelog>
  <changelog author="msuchanek@suse.de" date="1539345601">- powerpc/numa: Skip onlining a offline node in kdump path
  (bsc#1109784).
- commit df87e51</changelog>
  <changelog author="tiwai@suse.de" date="1539345602">- squashfs metadata 2: electric boogaloo (bsc#1051510).
- squashfs: more metadata hardening (bsc#1051510).
- squashfs: be more careful about metadata corruption
  (bsc#1051510).
- commit 9bfac39</changelog>
  <changelog author="hare@suse.de" date="1539345603">- scsi: qla2xxx: Move log messages before issuing command to
  firmware (bsc#1108870).
- scsi: qla2xxx: Fix for double free of SRB structure
  (bsc#1108870).
- scsi: qla2xxx: Fix recursive mailbox timeout (bsc#1108870).
- scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
  (bsc#1108870).
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
  (bsc#1108870).
- scsi: qla2xxx: Fix duplicate switch database entries
  (bsc#1108870).
- scsi: qla2xxx: Fix NVMe Target discovery (bsc#1108870).
- scsi: qla2xxx: Fix NVMe session hang on unload (bsc#1108870).
- scsi: qla2xxx: don't allow negative thresholds (bsc#1108870).
- commit 50fe149</changelog>
  <changelog author="tiwai@suse.de" date="1539345604">- Squashfs: Compute expected length from inode size rather than
  block length (bsc#1051510).
- commit 0c4a663</changelog>
  <changelog author="tiwai@suse.de" date="1539345605">- soreuseport: initialise timewait reuseport field (bsc#1051510).
- commit bda2dcc</changelog>
  <changelog author="tiwai@suse.de" date="1539345606">- rpc_pipefs: fix double-dput() (bsc#1051510).
- commit 1a15e26</changelog>
  <changelog author="hare@suse.de" date="1539345607">- scsi: qla2xxx: Return switch command on a timeout (bsc#1108870).
- commit 8e38f2a</changelog>
</package>
<package pkgid="52e6912e9f2605c56421f570b096a1e2b282b77d97afd481652e271501fa5f0c" name="kernel-obs-qa" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.22.1"/>
  <changelog author="tiwai@suse.de" date="1539172800">- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell
  XPS 27 7760 (bsc#1051510).
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
  (bsc#1051510).
- crypto: mxs-dcp - Fix wait logic on chan threads (bsc#1051510).
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM
  ioctl (bsc#1051510).
- HID: add support for Apple Magic Keyboards (bsc#1051510).
- gpio: Fix crash due to registration race (bsc#1051510).
- gpiolib-acpi: Register GpioInt ACPI event handlers from a
  late_initcall (bsc#1051510).
- gpio: adp5588: Fix sleep-in-atomic-context bug (bsc#1051510).
- cfg80211: fix a type issue in
  ieee80211_chandef_to_operating_class() (bsc#1051510).
- Revert "gpio: set up initial state from .get_direction()"
  (bsc#1051510).
- gpio: mb86s70: Revert "Return error if requesting an already
  assigned gpio" (bsc#1051510).
- commit 2759d22</changelog>
  <changelog author="mbrugger@suse.com" date="1539172801">- arm64: Update config files.
  Enable SENSORS_RASPBERRYPI_HWMON
- commit 2a83945</changelog>
  <changelog author="mbrugger@suse.com" date="1539172802">- supported.conf: mark raspberrypi-hwmon as supported
- commit af8ddda</changelog>
  <changelog author="tiwai@suse.de" date="1539172803">- HID: hid-saitek: Add device ID for RAT 7 Contagion
  (bsc#1051510).
- mac80211: shorten the IBSS debug messages (bsc#1051510).
- mac80211: don't Tx a deauth frame if the AP forbade Tx
  (bsc#1051510).
- mac80211: Fix station bandwidth setting after channel switch
  (bsc#1051510).
- mac80211: fix a race between restart and CSA flows
  (bsc#1051510).
- mac80211: do not convert to A-MSDU if frag/subframe limited
  (bsc#1051510).
- mac80211: mesh: fix HWMP sequence numbering to follow standard
  (bsc#1051510).
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211_hwsim: require at least one channel (bsc#1051510).
- mac80211: Run TXQ teardown code before de-registering interfaces
  (bsc#1051510).
- hwmon: (adt7475) Make adt7475_read_word() return errors
  (bsc#1051510).
- hwmon: (ina2xx) fix sysfs shunt resistor read access
  (bsc#1051510).
- commit af836cd</changelog>
  <changelog author="tiwai@suse.de" date="1539172804">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- Revert "mwifiex: handle race during mwifiex_usb_disconnect"
  (bsc#1051510).
- media: videobuf-dma-sg: Fix dma_{sync,unmap}_sg() calls
  (bsc#1051510).
- Revert "mwifiex: fix incorrect ht capability problem"
  (bsc#1051510).
- PM / Domains: Fix genpd to deal with drivers returning 1 from
  - &gt;prepare() (bsc#1051510).
- Revert "pinctrl: sunxi: Don't enforce bias disable (for now)"
  (bsc#1051510).
- commit fb6c36a</changelog>
  <changelog author="tiwai@suse.de" date="1539172805">- blacklist.conf: Add blacklist of inapplicable revert commits
  They are either not applicable or requiring more backports that aren't
  suitable for SLE15
- commit 987dd44</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259200">- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk (bsc#1106110)
- commit 273a6bd</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259201">- blacklist.conf: Append 'drm/amd/pp: initialize result to before or'ing in data'
- commit d2edcd9</changelog>
  <changelog author="tiwai@suse.de" date="1539259202">- Disable DRM patches that broke vbox video driver KMP (bsc#1111076)
- commit 23943c6</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259203">- blacklist.conf: Append 'Revert "drm: Use a flexible array member for blob property data"'
- commit ddc67eb</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259204">- Fix Patch-mainline tags to refer to Linux release tag
  It is expected that Patch-mainline tags refer to a release tag
  in the Linux git tree, such as v4.15. Several patches contain a
  Patch-mainline tags that instead refer to a Linux version number,
  such as 4.15. This inconsistency complicates grepping and
  automation.
  871 of 18000 patches are affected by this problem.
- commit 1d81d26</changelog>
  <changelog author="bp@suse.de" date="1539259205">- crypto: ccp - add timeout support in the SEV command
  (bsc#1106838).
- commit 912dad4</changelog>
  <changelog author="tiwai@suse.de" date="1539345600">- Update config files: update forgotten armv7hl configs
- commit 7bae3a6</changelog>
  <changelog author="msuchanek@suse.de" date="1539345601">- powerpc/numa: Skip onlining a offline node in kdump path
  (bsc#1109784).
- commit df87e51</changelog>
  <changelog author="tiwai@suse.de" date="1539345602">- squashfs metadata 2: electric boogaloo (bsc#1051510).
- squashfs: more metadata hardening (bsc#1051510).
- squashfs: be more careful about metadata corruption
  (bsc#1051510).
- commit 9bfac39</changelog>
  <changelog author="hare@suse.de" date="1539345603">- scsi: qla2xxx: Move log messages before issuing command to
  firmware (bsc#1108870).
- scsi: qla2xxx: Fix for double free of SRB structure
  (bsc#1108870).
- scsi: qla2xxx: Fix recursive mailbox timeout (bsc#1108870).
- scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
  (bsc#1108870).
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
  (bsc#1108870).
- scsi: qla2xxx: Fix duplicate switch database entries
  (bsc#1108870).
- scsi: qla2xxx: Fix NVMe Target discovery (bsc#1108870).
- scsi: qla2xxx: Fix NVMe session hang on unload (bsc#1108870).
- scsi: qla2xxx: don't allow negative thresholds (bsc#1108870).
- commit 50fe149</changelog>
  <changelog author="tiwai@suse.de" date="1539345604">- Squashfs: Compute expected length from inode size rather than
  block length (bsc#1051510).
- commit 0c4a663</changelog>
  <changelog author="tiwai@suse.de" date="1539345605">- soreuseport: initialise timewait reuseport field (bsc#1051510).
- commit bda2dcc</changelog>
  <changelog author="tiwai@suse.de" date="1539345606">- rpc_pipefs: fix double-dput() (bsc#1051510).
- commit 1a15e26</changelog>
  <changelog author="hare@suse.de" date="1539345607">- scsi: qla2xxx: Return switch command on a timeout (bsc#1108870).
- commit 8e38f2a</changelog>
</package>
<package pkgid="84a666f30a4873effec13b1acdc4d2be5e6eaba26c5ec8b3e6946b9e726f14e4" name="kernel-obs-qa" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.25.1"/>
  <changelog author="tiwai@suse.de" date="1540814400">- NFC: nfcmrvl_uart: fix OF child-node lookup (bsc#1051510).
- kernfs: update comment about kernfs_path() return value
  (bsc#1051510).
- usbip: tools: fix atoi() on non-null terminated string
  (bsc#1051510).
- USB: serial: cypress_m8: fix interrupt-out transfer length
  (bsc#1051510).
- usb: chipidea: Prevent unbalanced IRQ disable (bsc#1051510).
- commit 6c9d1e7</changelog>
  <changelog author="tiwai@suse.de" date="1540814401">- blacklist.conf: Add ASoC and USB entries that may break kABI
- commit 199a072</changelog>
  <changelog author="tiwai@suse.de" date="1540814402">- usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation
  (bsc#1051510).
- usb: gadget: fsl_udc_core: check allocation return value and
  cleanup on failure (bsc#1051510).
- commit c1b7b66</changelog>
  <changelog author="tiwai@suse.de" date="1540814403">- Refresh patch tag of upstreamed patches and move to sorted section
- commit a966b56</changelog>
  <changelog author="ohering@suse.de" date="1540900800">- move changes without Git-commit out of sorted section
- commit cbf049e</changelog>
  <changelog author="jslaby@suse.cz" date="1540900801">- random: rate limit unseeded randomness warnings (git-fixes).
- commit be52b92</changelog>
  <changelog author="jslaby@suse.cz" date="1540900802">- blacklist.conf: add a kasan fix
- commit c85e2d1</changelog>
  <changelog author="jdelvare@suse.de" date="1540900803">- Add reference to bsc#1104124 to
  patches.fixes/fs-aio-fix-the-increment-of-aio-nr-and-counting-agai.patch
- commit f60e64b</changelog>
  <changelog author="jslaby@suse.cz" date="1540900804">- tools build: fix # escaping in .cmd files for future Make
  (git-fixes).
- Kbuild: fix # escaping in .cmd files for future Make
  (git-fixes).
- commit 8f11ec3</changelog>
  <changelog author="tiwai@suse.de" date="1540900805">- drm/i915/dp: Link train Fallback on eDP only if fallback link
  BW can fit panel's native mode (bsc#1051510).
- drm/i915: Restore vblank interrupts earlier (bsc#1051510).
- commit daf120f</changelog>
  <changelog author="tiwai@suse.de" date="1540900806">- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
  (bsc#1051510).
- media: cx231xx: fix potential sign-extension overflow on large
  shift (bsc#1051510).
- media: pci: cx23885: handle adding to list failure
  (bsc#1051510).
- media: vsp1: Fix YCbCr planar formats pitch calculation
  (bsc#1051510).
- media: tvp5150: fix switch exit in set control handler
  (bsc#1051510).
- media: tvp5150: fix width alignment during set_selection()
  (bsc#1051510).
- media: em28xx: fix input name for Terratec AV 350 (bsc#1051510).
- media: em28xx: use a default format if TRY_FMT fails
  (bsc#1051510).
- media: tvp5150: avoid going past array on v4l2_querymenu()
  (bsc#1051510).
- media: dvb: fix compat ioctl translation (bsc#1051510).
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
  (bsc#1051510).
- commit 0831c5e</changelog>
  <changelog author="tiwai@suse.de" date="1540900807">- soc/tegra: pmc: Fix child-node lookup (bsc#1051510).
- serial: 8250: Fix clearing FIFOs in RS485 mode again
  (bsc#1051510).
- staging: comedi: ni_mio_common: protect register write overflow
  (bsc#1051510).
- iio: adc: at91: fix wrong channel number in triggered buffer
  mode (bsc#1051510).
- iio: adc: at91: fix acking DRDY irq on simple conversions
  (bsc#1051510).
- iio: adc: imx25-gcq: Fix leak of device_node in
  mx25_gcq_setup_cfgs() (bsc#1051510).
- commit 9f4f0cc</changelog>
  <changelog author="jthumshirn@suse.de" date="1540900808">- Refresh
  patches.fixes/0001-drm-amdgpu-powerplay-fix-missing-break-in-switch-sta.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Do-not-carry-error-code-in-HiBMC.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Don-t-overwrite-fb-helper-surfac.patch.
- Refresh
  patches.fixes/0001-drm-i915-audio-Hook-up-component-bindings-even-if-di.patch.
- Refresh
  patches.fixes/0001-drm-i915-gen9-Fix-initial-readout-for-Y-tiled-frameb.patch.
- Refresh
  patches.fixes/0001-drm-sti-do-not-remove-the-drm_bridge-that-was-never-.patch.
- Refresh
  patches.fixes/0001-drm-virtio-fix-bounds-check-in-virtio_gpu_cmd_get_ca.patch.
- commit 652fab5</changelog>
  <changelog author="tiwai@suse.de" date="1540987200">- drm/nouveau: Don't disable polling in fallback mode
  (bsc#1103356).
- Delete
  patches.suse/Revert-drm-nouveau-drm-therm-fan-add-a-fallback-if-n.
- commit aa0c431</changelog>
  <changelog author="tzimmermann@suse.de" date="1540987201">- Fix Patch-mainline for "drm/amdgpu: update tmr mc address"
  The Patch-mainline tag was incorrect. References is being updated as well.
- commit ce8535e</changelog>
  <changelog author="tiwai@suse.de" date="1540987202">- Workaround for mysterious NVMe breakage with i915 CFL
  (bsc#1111040).
- commit 0fa5877</changelog>
  <changelog author="jthumshirn@suse.de" date="1540987203">- libnvdimm, label: Fix sparse warning (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Use namespace index data to reduce number of label reads
  needed (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Split label init out from the logic for getting config
  data (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Remove empty if statement (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Clarify comment in sizeof_namespace_index (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Sanity check labeloff (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- libnvdimm, dimm: Maximize label transfer size (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7
  (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- commit 5a4eeb4</changelog>
  <changelog author="jlee@suse.com" date="1540987204">- x86/boot/KASLR: Work around firmware bugs by excluding
  EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR's choice
  (bnc#1112878).
- commit d45cd78</changelog>
  <changelog author="tiwai@suse.de" date="1540987205">- blacklist.conf: Add a few wifi driver entries that can't be applied
- commit 662fc68</changelog>
  <changelog author="tiwai@suse.de" date="1540987206">- spi/bcm63xx-hsspi: keep pll clk enabled (bsc#1051510).
- spi: sh-msiof: fix deferred probing (bsc#1051510).
- spi: bcm-qspi: switch back to reading flash using smaller chunks
  (bsc#1051510).
- commit f773242</changelog>
</package>
<package pkgid="42160bc3d0ef1fbfa6635a60fb1af9eedcced22329828b947aaa0f30d9712316" name="kernel-obs-qa" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.25.1"/>
  <changelog author="tiwai@suse.de" date="1540814400">- NFC: nfcmrvl_uart: fix OF child-node lookup (bsc#1051510).
- kernfs: update comment about kernfs_path() return value
  (bsc#1051510).
- usbip: tools: fix atoi() on non-null terminated string
  (bsc#1051510).
- USB: serial: cypress_m8: fix interrupt-out transfer length
  (bsc#1051510).
- usb: chipidea: Prevent unbalanced IRQ disable (bsc#1051510).
- commit 6c9d1e7</changelog>
  <changelog author="tiwai@suse.de" date="1540814401">- blacklist.conf: Add ASoC and USB entries that may break kABI
- commit 199a072</changelog>
  <changelog author="tiwai@suse.de" date="1540814402">- usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation
  (bsc#1051510).
- usb: gadget: fsl_udc_core: check allocation return value and
  cleanup on failure (bsc#1051510).
- commit c1b7b66</changelog>
  <changelog author="tiwai@suse.de" date="1540814403">- Refresh patch tag of upstreamed patches and move to sorted section
- commit a966b56</changelog>
  <changelog author="ohering@suse.de" date="1540900800">- move changes without Git-commit out of sorted section
- commit cbf049e</changelog>
  <changelog author="jslaby@suse.cz" date="1540900801">- random: rate limit unseeded randomness warnings (git-fixes).
- commit be52b92</changelog>
  <changelog author="jslaby@suse.cz" date="1540900802">- blacklist.conf: add a kasan fix
- commit c85e2d1</changelog>
  <changelog author="jdelvare@suse.de" date="1540900803">- Add reference to bsc#1104124 to
  patches.fixes/fs-aio-fix-the-increment-of-aio-nr-and-counting-agai.patch
- commit f60e64b</changelog>
  <changelog author="jslaby@suse.cz" date="1540900804">- tools build: fix # escaping in .cmd files for future Make
  (git-fixes).
- Kbuild: fix # escaping in .cmd files for future Make
  (git-fixes).
- commit 8f11ec3</changelog>
  <changelog author="tiwai@suse.de" date="1540900805">- drm/i915/dp: Link train Fallback on eDP only if fallback link
  BW can fit panel's native mode (bsc#1051510).
- drm/i915: Restore vblank interrupts earlier (bsc#1051510).
- commit daf120f</changelog>
  <changelog author="tiwai@suse.de" date="1540900806">- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
  (bsc#1051510).
- media: cx231xx: fix potential sign-extension overflow on large
  shift (bsc#1051510).
- media: pci: cx23885: handle adding to list failure
  (bsc#1051510).
- media: vsp1: Fix YCbCr planar formats pitch calculation
  (bsc#1051510).
- media: tvp5150: fix switch exit in set control handler
  (bsc#1051510).
- media: tvp5150: fix width alignment during set_selection()
  (bsc#1051510).
- media: em28xx: fix input name for Terratec AV 350 (bsc#1051510).
- media: em28xx: use a default format if TRY_FMT fails
  (bsc#1051510).
- media: tvp5150: avoid going past array on v4l2_querymenu()
  (bsc#1051510).
- media: dvb: fix compat ioctl translation (bsc#1051510).
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
  (bsc#1051510).
- commit 0831c5e</changelog>
  <changelog author="tiwai@suse.de" date="1540900807">- soc/tegra: pmc: Fix child-node lookup (bsc#1051510).
- serial: 8250: Fix clearing FIFOs in RS485 mode again
  (bsc#1051510).
- staging: comedi: ni_mio_common: protect register write overflow
  (bsc#1051510).
- iio: adc: at91: fix wrong channel number in triggered buffer
  mode (bsc#1051510).
- iio: adc: at91: fix acking DRDY irq on simple conversions
  (bsc#1051510).
- iio: adc: imx25-gcq: Fix leak of device_node in
  mx25_gcq_setup_cfgs() (bsc#1051510).
- commit 9f4f0cc</changelog>
  <changelog author="jthumshirn@suse.de" date="1540900808">- Refresh
  patches.fixes/0001-drm-amdgpu-powerplay-fix-missing-break-in-switch-sta.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Do-not-carry-error-code-in-HiBMC.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Don-t-overwrite-fb-helper-surfac.patch.
- Refresh
  patches.fixes/0001-drm-i915-audio-Hook-up-component-bindings-even-if-di.patch.
- Refresh
  patches.fixes/0001-drm-i915-gen9-Fix-initial-readout-for-Y-tiled-frameb.patch.
- Refresh
  patches.fixes/0001-drm-sti-do-not-remove-the-drm_bridge-that-was-never-.patch.
- Refresh
  patches.fixes/0001-drm-virtio-fix-bounds-check-in-virtio_gpu_cmd_get_ca.patch.
- commit 652fab5</changelog>
  <changelog author="tiwai@suse.de" date="1540987200">- drm/nouveau: Don't disable polling in fallback mode
  (bsc#1103356).
- Delete
  patches.suse/Revert-drm-nouveau-drm-therm-fan-add-a-fallback-if-n.
- commit aa0c431</changelog>
  <changelog author="tzimmermann@suse.de" date="1540987201">- Fix Patch-mainline for "drm/amdgpu: update tmr mc address"
  The Patch-mainline tag was incorrect. References is being updated as well.
- commit ce8535e</changelog>
  <changelog author="tiwai@suse.de" date="1540987202">- Workaround for mysterious NVMe breakage with i915 CFL
  (bsc#1111040).
- commit 0fa5877</changelog>
  <changelog author="jthumshirn@suse.de" date="1540987203">- libnvdimm, label: Fix sparse warning (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Use namespace index data to reduce number of label reads
  needed (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Split label init out from the logic for getting config
  data (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Remove empty if statement (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Clarify comment in sizeof_namespace_index (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Sanity check labeloff (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- libnvdimm, dimm: Maximize label transfer size (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7
  (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- commit 5a4eeb4</changelog>
  <changelog author="jlee@suse.com" date="1540987204">- x86/boot/KASLR: Work around firmware bugs by excluding
  EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR's choice
  (bnc#1112878).
- commit d45cd78</changelog>
  <changelog author="tiwai@suse.de" date="1540987205">- blacklist.conf: Add a few wifi driver entries that can't be applied
- commit 662fc68</changelog>
  <changelog author="tiwai@suse.de" date="1540987206">- spi/bcm63xx-hsspi: keep pll clk enabled (bsc#1051510).
- spi: sh-msiof: fix deferred probing (bsc#1051510).
- spi: bcm-qspi: switch back to reading flash using smaller chunks
  (bsc#1051510).
- commit f773242</changelog>
</package>
<package pkgid="d1410adabaacf8b6182f26d3fe5c11172ae34a835897e5ca14d29bdbcdf3734e" name="kernel-obs-qa" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="aed35dc6a158df3d688e40f2202704d7817a7fdfdfee4e89e49ffcf372cb9537" name="kernel-obs-qa" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="a44062cdf2d9701e1d3c63fe88c9054546d3bf78b4a51c0ac38a738ef68240ff" name="kernel-obs-qa" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="7b28719b993c31b9036fed606253bb055915321f018f570d039e4b8e9a3c76e6" name="kernel-obs-qa" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="5843ef5fa8c78d8c35c591aa2a96cd5bf0f0d9e8a600efc6a906cef8490ada26" name="kernel-source" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="a87d3818729021c6ea2e59573ef8fbc9c1e7cb2cb86003ce0dfb42922c2e34b9" name="kernel-source" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="739e26f12ff82869b9d5bda3eb0e0a89894ae56a2ebab2a2760abc5c27f85dd7" name="kernel-source" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="bcb6137cc0fd3a61a9f790fb82165ae4069783c55c6a882571f9a82e08a9c396" name="kernel-source" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="b34150b8c0df5bc6c52cbeb6ade2276c60cab2f303d182037ff40bf80343ca73" name="kernel-source" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="bb9a90995ef0bd058f7819f48a46cb0d028af713a4cef23f0698a8e328d63bcf" name="kernel-source" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="1efa3a35fd5a4f5222b01b9e9d41b54bffe9c807cf71ccaf96212480c2d035b1" name="kernel-source" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.19.1"/>
  <changelog author="fdmanana@suse.com" date="1538568000">- Btrfs: fix fsync after hole punching when using no-holes feature
  (bsc#1110642).
- commit 3f19b40</changelog>
  <changelog author="fdmanana@suse.com" date="1538568001">- Btrfs: fix loss of prealloc extents past i_size after fsync
  log replay (bsc#1110643).
- commit 974e057</changelog>
  <changelog author="fdmanana@suse.com" date="1538568002">- Btrfs: fix duplicate extents after fsync of file with prealloc
  extents (bsc#1110644).
- commit c4ec603</changelog>
  <changelog author="fdmanana@suse.com" date="1538568003">- Btrfs: fix return value on rename exchange failure
  (bsc#1110645).
- commit 532729c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568004">- Btrfs: sync log after logging new name (bsc#1110646).
- commit 7260d6b</changelog>
  <changelog author="fdmanana@suse.com" date="1538568005">- Btrfs: fix data corruption when deduplicating between different
  files (bsc#1110647).
- commit 669848c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568006">- btrfs: Remove unused parameters from various functions
  (bsc#1110649).
- commit c97c657</changelog>
  <changelog author="fdmanana@suse.com" date="1538568007">- Btrfs: fix send failure when root has deleted files still open
  (bsc#1110650).
- commit f52554d</changelog>
  <changelog author="jslaby@suse.cz" date="1538568008">- watchdog: Mark watchdog touch functions as notrace (git-fixes).
- commit 8b53193</changelog>
  <changelog author="neilb@suse.com" date="1538654400">- nfs/filelayout: fix oops when freeing filelayout segment
  (bsc#1105190).
- NFS/filelayout: Fix racy setting of fl-&gt;dsaddr in
  filelayout_check_deviceid() (bsc#1105190).
- commit d6d0fab</changelog>
  <changelog author="neilb@suse.com" date="1538654401">- VFS: don't test owner for NFS in set_posix_acl() (bsc#1103405).
- commit 36f977a</changelog>
  <changelog author="tiwai@suse.de" date="1538654402">- README.BRANCH: SLE15-SP1 branch maintainer changes
  Add ptesarik as co-maintainer, keep tiwai as the primary maintainer
- commit 83aea11</changelog>
  <changelog author="wqu@suse.com" date="1538654403">- btrfs: tests/qgroup: Fix wrong tree backref level (bsc#1107928).
- commit a5e154c</changelog>
  <changelog author="wqu@suse.com" date="1538654404">- btrfs: check-integrity: Fix NULL pointer dereference for
  degraded mount (bsc#1107947).
- commit 77b2277</changelog>
  <changelog author="wqu@suse.com" date="1538654405">- btrfs: scrub: Don't use inode pages for device replace (follow
  up for bsc#1108096).
- commit c865775</changelog>
  <changelog author="tiwai@suse.de" date="1538654406">- ASoC: cs4265: fix MMTLR Data switch control (bsc#1051510).
- ALSA: fireworks: fix memory leak of response buffer at error
  path (bsc#1051510).
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix
  I/O at error path (bsc#1051510).
- ALSA: emu10k1: fix possible info leak to userspace on
  SNDRV_EMU10K1_IOCTL_INFO (bsc#1051510).
- ALSA: bebob: use address returned by kmalloc() instead of
  kernel stack for streaming DMA mapping (bsc#1051510).
- ASoC: rt5514: Fix the issue of the delay volume applied
  (bsc#1051510).
- ASoC: dapm: Fix potential DAI widget pointer deref when linking
  DAIs (bsc#1051510).
- ALSA: msnd: Fix the default sample sizes (bsc#1051510).
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE()
  macro (bsc#1051510).
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
  (bsc#1051510).
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
  (bsc#1051510).
- ASoC: rt5514: Add the missing register in the readable table
  (bsc#1051510).
- ASoC: rt5514: Eliminate the noise in the ASRC case
  (bsc#1051510).
- ASoC: rt5514: Add the I2S ASRC support (bsc#1051510).
- commit 4eba9c8</changelog>
  <changelog author="wqu@suse.com" date="1538654407">- btrfs: scrub: Don't use inode page cache in
  scrub_handle_errored_block() (follow up for bsc#1108096).
- commit 3f91c84</changelog>
  <changelog author="tiwai@suse.de" date="1538654408">- smsc95xx: Check for Wake-on-LAN modes (bsc#1051510).
- smsc75xx: Check for Wake-on-LAN modes (bsc#1051510).
- r8152: Check for supported Wake-on-LAN Modes (bsc#1051510).
- sr9800: Check for supported Wake-on-LAN modes (bsc#1051510).
- lan78xx: Check for supported Wake-on-LAN modes (bsc#1051510).
- ax88179_178a: Check for supported Wake-on-LAN modes
  (bsc#1051510).
- mac80211: fix pending queue hang due to TX_DROP (bsc#1051510).
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
  (bsc#1051510).
- Input: elantech - enable middle button of touchpad on ThinkPad
  P72 (bsc#1051510).
- regulator: fix crash caused by null driver data (bsc#1051510).
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
  (bsc#1051510).
- intel_th: Fix device removal logic (bsc#1051510).
- NFC: Fix possible memory corruption when handling SHDLC I-Frame
  commands (bsc#1051510).
- platform/x86: alienware-wmi: Correct a memory leak
  (bsc#1051510).
- xhci: Fix use after free for URB cancellation on a reallocated
  endpoint (bsc#1051510).
- mei: ignore not found client in the enumeration (bsc#1051510).
- i2c: i801: Allow ACPI AML access I/O ports not reserved for
  SMBus (bsc#1051510).
- fbdev/via: fix defined but not used warning (bsc#1051510).
- video: goldfishfb: fix memory leak on driver remove
  (bsc#1051510).
- fbdev: Distinguish between interlaced and progressive modes
  (bsc#1051510).
- platform/x86: toshiba_acpi: Fix defined but not used build
  warnings (bsc#1051510).
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
  (bsc#1051510).
- input: rohm_bu21023: switch to i2c_lock_bus(...,
  I2C_LOCK_SEGMENT) (bsc#1051510).
- HID: hid-ntrig: add error handling for sysfs_create_group
  (bsc#1051510).
- mfd: ti_am335x_tscadc: Fix struct clk memory leak (bsc#1051510).
- mmc: sdhci: do not try to use 3.3V signaling if not supported
  (bsc#1051510).
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
  (bsc#1051510).
- parport: sunbpp: fix error return code (bsc#1051510).
- coresight: Handle errors in finding input/output ports
  (bsc#1051510).
- mei: bus: type promotion bug in mei_nfc_if_version()
  (bsc#1051510).
- gpio: pxa: Fix potential NULL dereference (bsc#1051510).
- gpiolib: Mark gpio_suffixes array with __maybe_unused
  (bsc#1051510).
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
  (bsc#1051510).
- crypto: sharah - Unregister correct algorithms for SAHARA 3
  (bsc#1051510).
- crypto: skcipher - Fix -Wstringop-truncation warnings
  (bsc#1051510).
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
  (bsc#1051510).
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 (bsc#1051510).
- mac80211: restrict delayed tailroom needed decrement
  (bsc#1051510).
- wlcore: Add missing PM call for
  wlcore_cmd_wait_for_event_or_timeout() (bsc#1051510).
- commit e266792</changelog>
  <changelog author="mbrugger@suse.com" date="1538654409">- arm64: Update config files. (bsc#1110716)
  Enable ST LPS25H pressure sensor.
- commit 69c6902</changelog>
  <changelog author="jack@suse.cz" date="1538654410">- patches.fixes/x86-memory_failure-Introduce-set-clear-_mce_nospec.patch:
  Fixup compilation breakage on s390 and arm due to missing
  clear_mce_nospec().
- commit faef795</changelog>
</package>
<package pkgid="116b9499bd5f2556e338569ab7d248b8bda739cf5e3785c9e40278f2a410bf80" name="kernel-source" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.19.1"/>
  <changelog author="fdmanana@suse.com" date="1538568000">- Btrfs: fix fsync after hole punching when using no-holes feature
  (bsc#1110642).
- commit 3f19b40</changelog>
  <changelog author="fdmanana@suse.com" date="1538568001">- Btrfs: fix loss of prealloc extents past i_size after fsync
  log replay (bsc#1110643).
- commit 974e057</changelog>
  <changelog author="fdmanana@suse.com" date="1538568002">- Btrfs: fix duplicate extents after fsync of file with prealloc
  extents (bsc#1110644).
- commit c4ec603</changelog>
  <changelog author="fdmanana@suse.com" date="1538568003">- Btrfs: fix return value on rename exchange failure
  (bsc#1110645).
- commit 532729c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568004">- Btrfs: sync log after logging new name (bsc#1110646).
- commit 7260d6b</changelog>
  <changelog author="fdmanana@suse.com" date="1538568005">- Btrfs: fix data corruption when deduplicating between different
  files (bsc#1110647).
- commit 669848c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568006">- btrfs: Remove unused parameters from various functions
  (bsc#1110649).
- commit c97c657</changelog>
  <changelog author="fdmanana@suse.com" date="1538568007">- Btrfs: fix send failure when root has deleted files still open
  (bsc#1110650).
- commit f52554d</changelog>
  <changelog author="jslaby@suse.cz" date="1538568008">- watchdog: Mark watchdog touch functions as notrace (git-fixes).
- commit 8b53193</changelog>
  <changelog author="neilb@suse.com" date="1538654400">- nfs/filelayout: fix oops when freeing filelayout segment
  (bsc#1105190).
- NFS/filelayout: Fix racy setting of fl-&gt;dsaddr in
  filelayout_check_deviceid() (bsc#1105190).
- commit d6d0fab</changelog>
  <changelog author="neilb@suse.com" date="1538654401">- VFS: don't test owner for NFS in set_posix_acl() (bsc#1103405).
- commit 36f977a</changelog>
  <changelog author="tiwai@suse.de" date="1538654402">- README.BRANCH: SLE15-SP1 branch maintainer changes
  Add ptesarik as co-maintainer, keep tiwai as the primary maintainer
- commit 83aea11</changelog>
  <changelog author="wqu@suse.com" date="1538654403">- btrfs: tests/qgroup: Fix wrong tree backref level (bsc#1107928).
- commit a5e154c</changelog>
  <changelog author="wqu@suse.com" date="1538654404">- btrfs: check-integrity: Fix NULL pointer dereference for
  degraded mount (bsc#1107947).
- commit 77b2277</changelog>
  <changelog author="wqu@suse.com" date="1538654405">- btrfs: scrub: Don't use inode pages for device replace (follow
  up for bsc#1108096).
- commit c865775</changelog>
  <changelog author="tiwai@suse.de" date="1538654406">- ASoC: cs4265: fix MMTLR Data switch control (bsc#1051510).
- ALSA: fireworks: fix memory leak of response buffer at error
  path (bsc#1051510).
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix
  I/O at error path (bsc#1051510).
- ALSA: emu10k1: fix possible info leak to userspace on
  SNDRV_EMU10K1_IOCTL_INFO (bsc#1051510).
- ALSA: bebob: use address returned by kmalloc() instead of
  kernel stack for streaming DMA mapping (bsc#1051510).
- ASoC: rt5514: Fix the issue of the delay volume applied
  (bsc#1051510).
- ASoC: dapm: Fix potential DAI widget pointer deref when linking
  DAIs (bsc#1051510).
- ALSA: msnd: Fix the default sample sizes (bsc#1051510).
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE()
  macro (bsc#1051510).
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
  (bsc#1051510).
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
  (bsc#1051510).
- ASoC: rt5514: Add the missing register in the readable table
  (bsc#1051510).
- ASoC: rt5514: Eliminate the noise in the ASRC case
  (bsc#1051510).
- ASoC: rt5514: Add the I2S ASRC support (bsc#1051510).
- commit 4eba9c8</changelog>
  <changelog author="wqu@suse.com" date="1538654407">- btrfs: scrub: Don't use inode page cache in
  scrub_handle_errored_block() (follow up for bsc#1108096).
- commit 3f91c84</changelog>
  <changelog author="tiwai@suse.de" date="1538654408">- smsc95xx: Check for Wake-on-LAN modes (bsc#1051510).
- smsc75xx: Check for Wake-on-LAN modes (bsc#1051510).
- r8152: Check for supported Wake-on-LAN Modes (bsc#1051510).
- sr9800: Check for supported Wake-on-LAN modes (bsc#1051510).
- lan78xx: Check for supported Wake-on-LAN modes (bsc#1051510).
- ax88179_178a: Check for supported Wake-on-LAN modes
  (bsc#1051510).
- mac80211: fix pending queue hang due to TX_DROP (bsc#1051510).
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
  (bsc#1051510).
- Input: elantech - enable middle button of touchpad on ThinkPad
  P72 (bsc#1051510).
- regulator: fix crash caused by null driver data (bsc#1051510).
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
  (bsc#1051510).
- intel_th: Fix device removal logic (bsc#1051510).
- NFC: Fix possible memory corruption when handling SHDLC I-Frame
  commands (bsc#1051510).
- platform/x86: alienware-wmi: Correct a memory leak
  (bsc#1051510).
- xhci: Fix use after free for URB cancellation on a reallocated
  endpoint (bsc#1051510).
- mei: ignore not found client in the enumeration (bsc#1051510).
- i2c: i801: Allow ACPI AML access I/O ports not reserved for
  SMBus (bsc#1051510).
- fbdev/via: fix defined but not used warning (bsc#1051510).
- video: goldfishfb: fix memory leak on driver remove
  (bsc#1051510).
- fbdev: Distinguish between interlaced and progressive modes
  (bsc#1051510).
- platform/x86: toshiba_acpi: Fix defined but not used build
  warnings (bsc#1051510).
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
  (bsc#1051510).
- input: rohm_bu21023: switch to i2c_lock_bus(...,
  I2C_LOCK_SEGMENT) (bsc#1051510).
- HID: hid-ntrig: add error handling for sysfs_create_group
  (bsc#1051510).
- mfd: ti_am335x_tscadc: Fix struct clk memory leak (bsc#1051510).
- mmc: sdhci: do not try to use 3.3V signaling if not supported
  (bsc#1051510).
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
  (bsc#1051510).
- parport: sunbpp: fix error return code (bsc#1051510).
- coresight: Handle errors in finding input/output ports
  (bsc#1051510).
- mei: bus: type promotion bug in mei_nfc_if_version()
  (bsc#1051510).
- gpio: pxa: Fix potential NULL dereference (bsc#1051510).
- gpiolib: Mark gpio_suffixes array with __maybe_unused
  (bsc#1051510).
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
  (bsc#1051510).
- crypto: sharah - Unregister correct algorithms for SAHARA 3
  (bsc#1051510).
- crypto: skcipher - Fix -Wstringop-truncation warnings
  (bsc#1051510).
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
  (bsc#1051510).
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 (bsc#1051510).
- mac80211: restrict delayed tailroom needed decrement
  (bsc#1051510).
- wlcore: Add missing PM call for
  wlcore_cmd_wait_for_event_or_timeout() (bsc#1051510).
- commit e266792</changelog>
  <changelog author="mbrugger@suse.com" date="1538654409">- arm64: Update config files. (bsc#1110716)
  Enable ST LPS25H pressure sensor.
- commit 69c6902</changelog>
  <changelog author="jack@suse.cz" date="1538654410">- patches.fixes/x86-memory_failure-Introduce-set-clear-_mce_nospec.patch:
  Fixup compilation breakage on s390 and arm due to missing
  clear_mce_nospec().
- commit faef795</changelog>
</package>
<package pkgid="6be7633378e4611b8568124a5d2e70822a441088e9f348290aea64b4d08965af" name="kernel-source" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.22.1"/>
  <changelog author="tiwai@suse.de" date="1539172800">- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell
  XPS 27 7760 (bsc#1051510).
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
  (bsc#1051510).
- crypto: mxs-dcp - Fix wait logic on chan threads (bsc#1051510).
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM
  ioctl (bsc#1051510).
- HID: add support for Apple Magic Keyboards (bsc#1051510).
- gpio: Fix crash due to registration race (bsc#1051510).
- gpiolib-acpi: Register GpioInt ACPI event handlers from a
  late_initcall (bsc#1051510).
- gpio: adp5588: Fix sleep-in-atomic-context bug (bsc#1051510).
- cfg80211: fix a type issue in
  ieee80211_chandef_to_operating_class() (bsc#1051510).
- Revert "gpio: set up initial state from .get_direction()"
  (bsc#1051510).
- gpio: mb86s70: Revert "Return error if requesting an already
  assigned gpio" (bsc#1051510).
- commit 2759d22</changelog>
  <changelog author="mbrugger@suse.com" date="1539172801">- arm64: Update config files.
  Enable SENSORS_RASPBERRYPI_HWMON
- commit 2a83945</changelog>
  <changelog author="mbrugger@suse.com" date="1539172802">- supported.conf: mark raspberrypi-hwmon as supported
- commit af8ddda</changelog>
  <changelog author="tiwai@suse.de" date="1539172803">- HID: hid-saitek: Add device ID for RAT 7 Contagion
  (bsc#1051510).
- mac80211: shorten the IBSS debug messages (bsc#1051510).
- mac80211: don't Tx a deauth frame if the AP forbade Tx
  (bsc#1051510).
- mac80211: Fix station bandwidth setting after channel switch
  (bsc#1051510).
- mac80211: fix a race between restart and CSA flows
  (bsc#1051510).
- mac80211: do not convert to A-MSDU if frag/subframe limited
  (bsc#1051510).
- mac80211: mesh: fix HWMP sequence numbering to follow standard
  (bsc#1051510).
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211_hwsim: require at least one channel (bsc#1051510).
- mac80211: Run TXQ teardown code before de-registering interfaces
  (bsc#1051510).
- hwmon: (adt7475) Make adt7475_read_word() return errors
  (bsc#1051510).
- hwmon: (ina2xx) fix sysfs shunt resistor read access
  (bsc#1051510).
- commit af836cd</changelog>
  <changelog author="tiwai@suse.de" date="1539172804">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- Revert "mwifiex: handle race during mwifiex_usb_disconnect"
  (bsc#1051510).
- media: videobuf-dma-sg: Fix dma_{sync,unmap}_sg() calls
  (bsc#1051510).
- Revert "mwifiex: fix incorrect ht capability problem"
  (bsc#1051510).
- PM / Domains: Fix genpd to deal with drivers returning 1 from
  - &gt;prepare() (bsc#1051510).
- Revert "pinctrl: sunxi: Don't enforce bias disable (for now)"
  (bsc#1051510).
- commit fb6c36a</changelog>
  <changelog author="tiwai@suse.de" date="1539172805">- blacklist.conf: Add blacklist of inapplicable revert commits
  They are either not applicable or requiring more backports that aren't
  suitable for SLE15
- commit 987dd44</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259200">- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk (bsc#1106110)
- commit 273a6bd</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259201">- blacklist.conf: Append 'drm/amd/pp: initialize result to before or'ing in data'
- commit d2edcd9</changelog>
  <changelog author="tiwai@suse.de" date="1539259202">- Disable DRM patches that broke vbox video driver KMP (bsc#1111076)
- commit 23943c6</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259203">- blacklist.conf: Append 'Revert "drm: Use a flexible array member for blob property data"'
- commit ddc67eb</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259204">- Fix Patch-mainline tags to refer to Linux release tag
  It is expected that Patch-mainline tags refer to a release tag
  in the Linux git tree, such as v4.15. Several patches contain a
  Patch-mainline tags that instead refer to a Linux version number,
  such as 4.15. This inconsistency complicates grepping and
  automation.
  871 of 18000 patches are affected by this problem.
- commit 1d81d26</changelog>
  <changelog author="bp@suse.de" date="1539259205">- crypto: ccp - add timeout support in the SEV command
  (bsc#1106838).
- commit 912dad4</changelog>
  <changelog author="tiwai@suse.de" date="1539345600">- Update config files: update forgotten armv7hl configs
- commit 7bae3a6</changelog>
  <changelog author="msuchanek@suse.de" date="1539345601">- powerpc/numa: Skip onlining a offline node in kdump path
  (bsc#1109784).
- commit df87e51</changelog>
  <changelog author="tiwai@suse.de" date="1539345602">- squashfs metadata 2: electric boogaloo (bsc#1051510).
- squashfs: more metadata hardening (bsc#1051510).
- squashfs: be more careful about metadata corruption
  (bsc#1051510).
- commit 9bfac39</changelog>
  <changelog author="hare@suse.de" date="1539345603">- scsi: qla2xxx: Move log messages before issuing command to
  firmware (bsc#1108870).
- scsi: qla2xxx: Fix for double free of SRB structure
  (bsc#1108870).
- scsi: qla2xxx: Fix recursive mailbox timeout (bsc#1108870).
- scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
  (bsc#1108870).
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
  (bsc#1108870).
- scsi: qla2xxx: Fix duplicate switch database entries
  (bsc#1108870).
- scsi: qla2xxx: Fix NVMe Target discovery (bsc#1108870).
- scsi: qla2xxx: Fix NVMe session hang on unload (bsc#1108870).
- scsi: qla2xxx: don't allow negative thresholds (bsc#1108870).
- commit 50fe149</changelog>
  <changelog author="tiwai@suse.de" date="1539345604">- Squashfs: Compute expected length from inode size rather than
  block length (bsc#1051510).
- commit 0c4a663</changelog>
  <changelog author="tiwai@suse.de" date="1539345605">- soreuseport: initialise timewait reuseport field (bsc#1051510).
- commit bda2dcc</changelog>
  <changelog author="tiwai@suse.de" date="1539345606">- rpc_pipefs: fix double-dput() (bsc#1051510).
- commit 1a15e26</changelog>
  <changelog author="hare@suse.de" date="1539345607">- scsi: qla2xxx: Return switch command on a timeout (bsc#1108870).
- commit 8e38f2a</changelog>
</package>
<package pkgid="e7f95084a7412b421af50a6e70b02c7b06c34cd8b7e50954ce21a926bf88f0be" name="kernel-source" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.22.1"/>
  <changelog author="tiwai@suse.de" date="1539172800">- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell
  XPS 27 7760 (bsc#1051510).
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
  (bsc#1051510).
- crypto: mxs-dcp - Fix wait logic on chan threads (bsc#1051510).
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM
  ioctl (bsc#1051510).
- HID: add support for Apple Magic Keyboards (bsc#1051510).
- gpio: Fix crash due to registration race (bsc#1051510).
- gpiolib-acpi: Register GpioInt ACPI event handlers from a
  late_initcall (bsc#1051510).
- gpio: adp5588: Fix sleep-in-atomic-context bug (bsc#1051510).
- cfg80211: fix a type issue in
  ieee80211_chandef_to_operating_class() (bsc#1051510).
- Revert "gpio: set up initial state from .get_direction()"
  (bsc#1051510).
- gpio: mb86s70: Revert "Return error if requesting an already
  assigned gpio" (bsc#1051510).
- commit 2759d22</changelog>
  <changelog author="mbrugger@suse.com" date="1539172801">- arm64: Update config files.
  Enable SENSORS_RASPBERRYPI_HWMON
- commit 2a83945</changelog>
  <changelog author="mbrugger@suse.com" date="1539172802">- supported.conf: mark raspberrypi-hwmon as supported
- commit af8ddda</changelog>
  <changelog author="tiwai@suse.de" date="1539172803">- HID: hid-saitek: Add device ID for RAT 7 Contagion
  (bsc#1051510).
- mac80211: shorten the IBSS debug messages (bsc#1051510).
- mac80211: don't Tx a deauth frame if the AP forbade Tx
  (bsc#1051510).
- mac80211: Fix station bandwidth setting after channel switch
  (bsc#1051510).
- mac80211: fix a race between restart and CSA flows
  (bsc#1051510).
- mac80211: do not convert to A-MSDU if frag/subframe limited
  (bsc#1051510).
- mac80211: mesh: fix HWMP sequence numbering to follow standard
  (bsc#1051510).
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211_hwsim: require at least one channel (bsc#1051510).
- mac80211: Run TXQ teardown code before de-registering interfaces
  (bsc#1051510).
- hwmon: (adt7475) Make adt7475_read_word() return errors
  (bsc#1051510).
- hwmon: (ina2xx) fix sysfs shunt resistor read access
  (bsc#1051510).
- commit af836cd</changelog>
  <changelog author="tiwai@suse.de" date="1539172804">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- Revert "mwifiex: handle race during mwifiex_usb_disconnect"
  (bsc#1051510).
- media: videobuf-dma-sg: Fix dma_{sync,unmap}_sg() calls
  (bsc#1051510).
- Revert "mwifiex: fix incorrect ht capability problem"
  (bsc#1051510).
- PM / Domains: Fix genpd to deal with drivers returning 1 from
  - &gt;prepare() (bsc#1051510).
- Revert "pinctrl: sunxi: Don't enforce bias disable (for now)"
  (bsc#1051510).
- commit fb6c36a</changelog>
  <changelog author="tiwai@suse.de" date="1539172805">- blacklist.conf: Add blacklist of inapplicable revert commits
  They are either not applicable or requiring more backports that aren't
  suitable for SLE15
- commit 987dd44</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259200">- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk (bsc#1106110)
- commit 273a6bd</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259201">- blacklist.conf: Append 'drm/amd/pp: initialize result to before or'ing in data'
- commit d2edcd9</changelog>
  <changelog author="tiwai@suse.de" date="1539259202">- Disable DRM patches that broke vbox video driver KMP (bsc#1111076)
- commit 23943c6</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259203">- blacklist.conf: Append 'Revert "drm: Use a flexible array member for blob property data"'
- commit ddc67eb</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259204">- Fix Patch-mainline tags to refer to Linux release tag
  It is expected that Patch-mainline tags refer to a release tag
  in the Linux git tree, such as v4.15. Several patches contain a
  Patch-mainline tags that instead refer to a Linux version number,
  such as 4.15. This inconsistency complicates grepping and
  automation.
  871 of 18000 patches are affected by this problem.
- commit 1d81d26</changelog>
  <changelog author="bp@suse.de" date="1539259205">- crypto: ccp - add timeout support in the SEV command
  (bsc#1106838).
- commit 912dad4</changelog>
  <changelog author="tiwai@suse.de" date="1539345600">- Update config files: update forgotten armv7hl configs
- commit 7bae3a6</changelog>
  <changelog author="msuchanek@suse.de" date="1539345601">- powerpc/numa: Skip onlining a offline node in kdump path
  (bsc#1109784).
- commit df87e51</changelog>
  <changelog author="tiwai@suse.de" date="1539345602">- squashfs metadata 2: electric boogaloo (bsc#1051510).
- squashfs: more metadata hardening (bsc#1051510).
- squashfs: be more careful about metadata corruption
  (bsc#1051510).
- commit 9bfac39</changelog>
  <changelog author="hare@suse.de" date="1539345603">- scsi: qla2xxx: Move log messages before issuing command to
  firmware (bsc#1108870).
- scsi: qla2xxx: Fix for double free of SRB structure
  (bsc#1108870).
- scsi: qla2xxx: Fix recursive mailbox timeout (bsc#1108870).
- scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
  (bsc#1108870).
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
  (bsc#1108870).
- scsi: qla2xxx: Fix duplicate switch database entries
  (bsc#1108870).
- scsi: qla2xxx: Fix NVMe Target discovery (bsc#1108870).
- scsi: qla2xxx: Fix NVMe session hang on unload (bsc#1108870).
- scsi: qla2xxx: don't allow negative thresholds (bsc#1108870).
- commit 50fe149</changelog>
  <changelog author="tiwai@suse.de" date="1539345604">- Squashfs: Compute expected length from inode size rather than
  block length (bsc#1051510).
- commit 0c4a663</changelog>
  <changelog author="tiwai@suse.de" date="1539345605">- soreuseport: initialise timewait reuseport field (bsc#1051510).
- commit bda2dcc</changelog>
  <changelog author="tiwai@suse.de" date="1539345606">- rpc_pipefs: fix double-dput() (bsc#1051510).
- commit 1a15e26</changelog>
  <changelog author="hare@suse.de" date="1539345607">- scsi: qla2xxx: Return switch command on a timeout (bsc#1108870).
- commit 8e38f2a</changelog>
</package>
<package pkgid="37e84148f90e81cb563597265a18a07183ccd8cffb0f0dea39c988aa63ab76f5" name="kernel-source" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.25.1"/>
  <changelog author="tiwai@suse.de" date="1540814400">- NFC: nfcmrvl_uart: fix OF child-node lookup (bsc#1051510).
- kernfs: update comment about kernfs_path() return value
  (bsc#1051510).
- usbip: tools: fix atoi() on non-null terminated string
  (bsc#1051510).
- USB: serial: cypress_m8: fix interrupt-out transfer length
  (bsc#1051510).
- usb: chipidea: Prevent unbalanced IRQ disable (bsc#1051510).
- commit 6c9d1e7</changelog>
  <changelog author="tiwai@suse.de" date="1540814401">- blacklist.conf: Add ASoC and USB entries that may break kABI
- commit 199a072</changelog>
  <changelog author="tiwai@suse.de" date="1540814402">- usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation
  (bsc#1051510).
- usb: gadget: fsl_udc_core: check allocation return value and
  cleanup on failure (bsc#1051510).
- commit c1b7b66</changelog>
  <changelog author="tiwai@suse.de" date="1540814403">- Refresh patch tag of upstreamed patches and move to sorted section
- commit a966b56</changelog>
  <changelog author="ohering@suse.de" date="1540900800">- move changes without Git-commit out of sorted section
- commit cbf049e</changelog>
  <changelog author="jslaby@suse.cz" date="1540900801">- random: rate limit unseeded randomness warnings (git-fixes).
- commit be52b92</changelog>
  <changelog author="jslaby@suse.cz" date="1540900802">- blacklist.conf: add a kasan fix
- commit c85e2d1</changelog>
  <changelog author="jdelvare@suse.de" date="1540900803">- Add reference to bsc#1104124 to
  patches.fixes/fs-aio-fix-the-increment-of-aio-nr-and-counting-agai.patch
- commit f60e64b</changelog>
  <changelog author="jslaby@suse.cz" date="1540900804">- tools build: fix # escaping in .cmd files for future Make
  (git-fixes).
- Kbuild: fix # escaping in .cmd files for future Make
  (git-fixes).
- commit 8f11ec3</changelog>
  <changelog author="tiwai@suse.de" date="1540900805">- drm/i915/dp: Link train Fallback on eDP only if fallback link
  BW can fit panel's native mode (bsc#1051510).
- drm/i915: Restore vblank interrupts earlier (bsc#1051510).
- commit daf120f</changelog>
  <changelog author="tiwai@suse.de" date="1540900806">- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
  (bsc#1051510).
- media: cx231xx: fix potential sign-extension overflow on large
  shift (bsc#1051510).
- media: pci: cx23885: handle adding to list failure
  (bsc#1051510).
- media: vsp1: Fix YCbCr planar formats pitch calculation
  (bsc#1051510).
- media: tvp5150: fix switch exit in set control handler
  (bsc#1051510).
- media: tvp5150: fix width alignment during set_selection()
  (bsc#1051510).
- media: em28xx: fix input name for Terratec AV 350 (bsc#1051510).
- media: em28xx: use a default format if TRY_FMT fails
  (bsc#1051510).
- media: tvp5150: avoid going past array on v4l2_querymenu()
  (bsc#1051510).
- media: dvb: fix compat ioctl translation (bsc#1051510).
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
  (bsc#1051510).
- commit 0831c5e</changelog>
  <changelog author="tiwai@suse.de" date="1540900807">- soc/tegra: pmc: Fix child-node lookup (bsc#1051510).
- serial: 8250: Fix clearing FIFOs in RS485 mode again
  (bsc#1051510).
- staging: comedi: ni_mio_common: protect register write overflow
  (bsc#1051510).
- iio: adc: at91: fix wrong channel number in triggered buffer
  mode (bsc#1051510).
- iio: adc: at91: fix acking DRDY irq on simple conversions
  (bsc#1051510).
- iio: adc: imx25-gcq: Fix leak of device_node in
  mx25_gcq_setup_cfgs() (bsc#1051510).
- commit 9f4f0cc</changelog>
  <changelog author="jthumshirn@suse.de" date="1540900808">- Refresh
  patches.fixes/0001-drm-amdgpu-powerplay-fix-missing-break-in-switch-sta.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Do-not-carry-error-code-in-HiBMC.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Don-t-overwrite-fb-helper-surfac.patch.
- Refresh
  patches.fixes/0001-drm-i915-audio-Hook-up-component-bindings-even-if-di.patch.
- Refresh
  patches.fixes/0001-drm-i915-gen9-Fix-initial-readout-for-Y-tiled-frameb.patch.
- Refresh
  patches.fixes/0001-drm-sti-do-not-remove-the-drm_bridge-that-was-never-.patch.
- Refresh
  patches.fixes/0001-drm-virtio-fix-bounds-check-in-virtio_gpu_cmd_get_ca.patch.
- commit 652fab5</changelog>
  <changelog author="tiwai@suse.de" date="1540987200">- drm/nouveau: Don't disable polling in fallback mode
  (bsc#1103356).
- Delete
  patches.suse/Revert-drm-nouveau-drm-therm-fan-add-a-fallback-if-n.
- commit aa0c431</changelog>
  <changelog author="tzimmermann@suse.de" date="1540987201">- Fix Patch-mainline for "drm/amdgpu: update tmr mc address"
  The Patch-mainline tag was incorrect. References is being updated as well.
- commit ce8535e</changelog>
  <changelog author="tiwai@suse.de" date="1540987202">- Workaround for mysterious NVMe breakage with i915 CFL
  (bsc#1111040).
- commit 0fa5877</changelog>
  <changelog author="jthumshirn@suse.de" date="1540987203">- libnvdimm, label: Fix sparse warning (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Use namespace index data to reduce number of label reads
  needed (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Split label init out from the logic for getting config
  data (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Remove empty if statement (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Clarify comment in sizeof_namespace_index (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Sanity check labeloff (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- libnvdimm, dimm: Maximize label transfer size (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7
  (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- commit 5a4eeb4</changelog>
  <changelog author="jlee@suse.com" date="1540987204">- x86/boot/KASLR: Work around firmware bugs by excluding
  EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR's choice
  (bnc#1112878).
- commit d45cd78</changelog>
  <changelog author="tiwai@suse.de" date="1540987205">- blacklist.conf: Add a few wifi driver entries that can't be applied
- commit 662fc68</changelog>
  <changelog author="tiwai@suse.de" date="1540987206">- spi/bcm63xx-hsspi: keep pll clk enabled (bsc#1051510).
- spi: sh-msiof: fix deferred probing (bsc#1051510).
- spi: bcm-qspi: switch back to reading flash using smaller chunks
  (bsc#1051510).
- commit f773242</changelog>
</package>
<package pkgid="603b0421856cec89f1619f4b1700af34099536dc89d5a69c0a054c5e839834d4" name="kernel-source" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.25.1"/>
  <changelog author="tiwai@suse.de" date="1540814400">- NFC: nfcmrvl_uart: fix OF child-node lookup (bsc#1051510).
- kernfs: update comment about kernfs_path() return value
  (bsc#1051510).
- usbip: tools: fix atoi() on non-null terminated string
  (bsc#1051510).
- USB: serial: cypress_m8: fix interrupt-out transfer length
  (bsc#1051510).
- usb: chipidea: Prevent unbalanced IRQ disable (bsc#1051510).
- commit 6c9d1e7</changelog>
  <changelog author="tiwai@suse.de" date="1540814401">- blacklist.conf: Add ASoC and USB entries that may break kABI
- commit 199a072</changelog>
  <changelog author="tiwai@suse.de" date="1540814402">- usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation
  (bsc#1051510).
- usb: gadget: fsl_udc_core: check allocation return value and
  cleanup on failure (bsc#1051510).
- commit c1b7b66</changelog>
  <changelog author="tiwai@suse.de" date="1540814403">- Refresh patch tag of upstreamed patches and move to sorted section
- commit a966b56</changelog>
  <changelog author="ohering@suse.de" date="1540900800">- move changes without Git-commit out of sorted section
- commit cbf049e</changelog>
  <changelog author="jslaby@suse.cz" date="1540900801">- random: rate limit unseeded randomness warnings (git-fixes).
- commit be52b92</changelog>
  <changelog author="jslaby@suse.cz" date="1540900802">- blacklist.conf: add a kasan fix
- commit c85e2d1</changelog>
  <changelog author="jdelvare@suse.de" date="1540900803">- Add reference to bsc#1104124 to
  patches.fixes/fs-aio-fix-the-increment-of-aio-nr-and-counting-agai.patch
- commit f60e64b</changelog>
  <changelog author="jslaby@suse.cz" date="1540900804">- tools build: fix # escaping in .cmd files for future Make
  (git-fixes).
- Kbuild: fix # escaping in .cmd files for future Make
  (git-fixes).
- commit 8f11ec3</changelog>
  <changelog author="tiwai@suse.de" date="1540900805">- drm/i915/dp: Link train Fallback on eDP only if fallback link
  BW can fit panel's native mode (bsc#1051510).
- drm/i915: Restore vblank interrupts earlier (bsc#1051510).
- commit daf120f</changelog>
  <changelog author="tiwai@suse.de" date="1540900806">- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
  (bsc#1051510).
- media: cx231xx: fix potential sign-extension overflow on large
  shift (bsc#1051510).
- media: pci: cx23885: handle adding to list failure
  (bsc#1051510).
- media: vsp1: Fix YCbCr planar formats pitch calculation
  (bsc#1051510).
- media: tvp5150: fix switch exit in set control handler
  (bsc#1051510).
- media: tvp5150: fix width alignment during set_selection()
  (bsc#1051510).
- media: em28xx: fix input name for Terratec AV 350 (bsc#1051510).
- media: em28xx: use a default format if TRY_FMT fails
  (bsc#1051510).
- media: tvp5150: avoid going past array on v4l2_querymenu()
  (bsc#1051510).
- media: dvb: fix compat ioctl translation (bsc#1051510).
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
  (bsc#1051510).
- commit 0831c5e</changelog>
  <changelog author="tiwai@suse.de" date="1540900807">- soc/tegra: pmc: Fix child-node lookup (bsc#1051510).
- serial: 8250: Fix clearing FIFOs in RS485 mode again
  (bsc#1051510).
- staging: comedi: ni_mio_common: protect register write overflow
  (bsc#1051510).
- iio: adc: at91: fix wrong channel number in triggered buffer
  mode (bsc#1051510).
- iio: adc: at91: fix acking DRDY irq on simple conversions
  (bsc#1051510).
- iio: adc: imx25-gcq: Fix leak of device_node in
  mx25_gcq_setup_cfgs() (bsc#1051510).
- commit 9f4f0cc</changelog>
  <changelog author="jthumshirn@suse.de" date="1540900808">- Refresh
  patches.fixes/0001-drm-amdgpu-powerplay-fix-missing-break-in-switch-sta.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Do-not-carry-error-code-in-HiBMC.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Don-t-overwrite-fb-helper-surfac.patch.
- Refresh
  patches.fixes/0001-drm-i915-audio-Hook-up-component-bindings-even-if-di.patch.
- Refresh
  patches.fixes/0001-drm-i915-gen9-Fix-initial-readout-for-Y-tiled-frameb.patch.
- Refresh
  patches.fixes/0001-drm-sti-do-not-remove-the-drm_bridge-that-was-never-.patch.
- Refresh
  patches.fixes/0001-drm-virtio-fix-bounds-check-in-virtio_gpu_cmd_get_ca.patch.
- commit 652fab5</changelog>
  <changelog author="tiwai@suse.de" date="1540987200">- drm/nouveau: Don't disable polling in fallback mode
  (bsc#1103356).
- Delete
  patches.suse/Revert-drm-nouveau-drm-therm-fan-add-a-fallback-if-n.
- commit aa0c431</changelog>
  <changelog author="tzimmermann@suse.de" date="1540987201">- Fix Patch-mainline for "drm/amdgpu: update tmr mc address"
  The Patch-mainline tag was incorrect. References is being updated as well.
- commit ce8535e</changelog>
  <changelog author="tiwai@suse.de" date="1540987202">- Workaround for mysterious NVMe breakage with i915 CFL
  (bsc#1111040).
- commit 0fa5877</changelog>
  <changelog author="jthumshirn@suse.de" date="1540987203">- libnvdimm, label: Fix sparse warning (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Use namespace index data to reduce number of label reads
  needed (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Split label init out from the logic for getting config
  data (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Remove empty if statement (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Clarify comment in sizeof_namespace_index (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Sanity check labeloff (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- libnvdimm, dimm: Maximize label transfer size (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7
  (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- commit 5a4eeb4</changelog>
  <changelog author="jlee@suse.com" date="1540987204">- x86/boot/KASLR: Work around firmware bugs by excluding
  EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR's choice
  (bnc#1112878).
- commit d45cd78</changelog>
  <changelog author="tiwai@suse.de" date="1540987205">- blacklist.conf: Add a few wifi driver entries that can't be applied
- commit 662fc68</changelog>
  <changelog author="tiwai@suse.de" date="1540987206">- spi/bcm63xx-hsspi: keep pll clk enabled (bsc#1051510).
- spi: sh-msiof: fix deferred probing (bsc#1051510).
- spi: bcm-qspi: switch back to reading flash using smaller chunks
  (bsc#1051510).
- commit f773242</changelog>
</package>
<package pkgid="2a93ffafe422098b67c0b3974c22130de1489de3b9e6b33c7efac24b51a1a30e" name="kernel-source" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="fa95072ddfa8d5e34859405b755a0e313a3a86a37a02425f764fb5e0947e767c" name="kernel-source" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="e2348e93cd963b6c44b9387ee3385b010dafd58f9e42e38ec71893a3e9dbe612" name="kernel-source" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="43fdc2a7d1ac50fadddb6d676ec6eb2fd686f9e81d64e741b0bccb116e74769c" name="kernel-source" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="8ce990abaf9edea93af98883e0114f1327e0d67caf8d561b9c60bbcc63c0ed26" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="61732a2fe9deacf67323870983b62a4465a73323d65834124705cc65f5ee8da8" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="8bbd7fea38425ec43902dbb4ac1a136c8127ff20a4cec925c1af8c0324df5dbb" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="f38b0693287b771c54ee36d51c35d739d2d81fe8e521026f23293d79145927aa" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.19.1"/>
  <changelog author="fdmanana@suse.com" date="1538568000">- Btrfs: fix fsync after hole punching when using no-holes feature
  (bsc#1110642).
- commit 3f19b40</changelog>
  <changelog author="fdmanana@suse.com" date="1538568001">- Btrfs: fix loss of prealloc extents past i_size after fsync
  log replay (bsc#1110643).
- commit 974e057</changelog>
  <changelog author="fdmanana@suse.com" date="1538568002">- Btrfs: fix duplicate extents after fsync of file with prealloc
  extents (bsc#1110644).
- commit c4ec603</changelog>
  <changelog author="fdmanana@suse.com" date="1538568003">- Btrfs: fix return value on rename exchange failure
  (bsc#1110645).
- commit 532729c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568004">- Btrfs: sync log after logging new name (bsc#1110646).
- commit 7260d6b</changelog>
  <changelog author="fdmanana@suse.com" date="1538568005">- Btrfs: fix data corruption when deduplicating between different
  files (bsc#1110647).
- commit 669848c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568006">- btrfs: Remove unused parameters from various functions
  (bsc#1110649).
- commit c97c657</changelog>
  <changelog author="fdmanana@suse.com" date="1538568007">- Btrfs: fix send failure when root has deleted files still open
  (bsc#1110650).
- commit f52554d</changelog>
  <changelog author="jslaby@suse.cz" date="1538568008">- watchdog: Mark watchdog touch functions as notrace (git-fixes).
- commit 8b53193</changelog>
  <changelog author="neilb@suse.com" date="1538654400">- nfs/filelayout: fix oops when freeing filelayout segment
  (bsc#1105190).
- NFS/filelayout: Fix racy setting of fl-&gt;dsaddr in
  filelayout_check_deviceid() (bsc#1105190).
- commit d6d0fab</changelog>
  <changelog author="neilb@suse.com" date="1538654401">- VFS: don't test owner for NFS in set_posix_acl() (bsc#1103405).
- commit 36f977a</changelog>
  <changelog author="tiwai@suse.de" date="1538654402">- README.BRANCH: SLE15-SP1 branch maintainer changes
  Add ptesarik as co-maintainer, keep tiwai as the primary maintainer
- commit 83aea11</changelog>
  <changelog author="wqu@suse.com" date="1538654403">- btrfs: tests/qgroup: Fix wrong tree backref level (bsc#1107928).
- commit a5e154c</changelog>
  <changelog author="wqu@suse.com" date="1538654404">- btrfs: check-integrity: Fix NULL pointer dereference for
  degraded mount (bsc#1107947).
- commit 77b2277</changelog>
  <changelog author="wqu@suse.com" date="1538654405">- btrfs: scrub: Don't use inode pages for device replace (follow
  up for bsc#1108096).
- commit c865775</changelog>
  <changelog author="tiwai@suse.de" date="1538654406">- ASoC: cs4265: fix MMTLR Data switch control (bsc#1051510).
- ALSA: fireworks: fix memory leak of response buffer at error
  path (bsc#1051510).
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix
  I/O at error path (bsc#1051510).
- ALSA: emu10k1: fix possible info leak to userspace on
  SNDRV_EMU10K1_IOCTL_INFO (bsc#1051510).
- ALSA: bebob: use address returned by kmalloc() instead of
  kernel stack for streaming DMA mapping (bsc#1051510).
- ASoC: rt5514: Fix the issue of the delay volume applied
  (bsc#1051510).
- ASoC: dapm: Fix potential DAI widget pointer deref when linking
  DAIs (bsc#1051510).
- ALSA: msnd: Fix the default sample sizes (bsc#1051510).
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE()
  macro (bsc#1051510).
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
  (bsc#1051510).
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
  (bsc#1051510).
- ASoC: rt5514: Add the missing register in the readable table
  (bsc#1051510).
- ASoC: rt5514: Eliminate the noise in the ASRC case
  (bsc#1051510).
- ASoC: rt5514: Add the I2S ASRC support (bsc#1051510).
- commit 4eba9c8</changelog>
  <changelog author="wqu@suse.com" date="1538654407">- btrfs: scrub: Don't use inode page cache in
  scrub_handle_errored_block() (follow up for bsc#1108096).
- commit 3f91c84</changelog>
  <changelog author="tiwai@suse.de" date="1538654408">- smsc95xx: Check for Wake-on-LAN modes (bsc#1051510).
- smsc75xx: Check for Wake-on-LAN modes (bsc#1051510).
- r8152: Check for supported Wake-on-LAN Modes (bsc#1051510).
- sr9800: Check for supported Wake-on-LAN modes (bsc#1051510).
- lan78xx: Check for supported Wake-on-LAN modes (bsc#1051510).
- ax88179_178a: Check for supported Wake-on-LAN modes
  (bsc#1051510).
- mac80211: fix pending queue hang due to TX_DROP (bsc#1051510).
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
  (bsc#1051510).
- Input: elantech - enable middle button of touchpad on ThinkPad
  P72 (bsc#1051510).
- regulator: fix crash caused by null driver data (bsc#1051510).
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
  (bsc#1051510).
- intel_th: Fix device removal logic (bsc#1051510).
- NFC: Fix possible memory corruption when handling SHDLC I-Frame
  commands (bsc#1051510).
- platform/x86: alienware-wmi: Correct a memory leak
  (bsc#1051510).
- xhci: Fix use after free for URB cancellation on a reallocated
  endpoint (bsc#1051510).
- mei: ignore not found client in the enumeration (bsc#1051510).
- i2c: i801: Allow ACPI AML access I/O ports not reserved for
  SMBus (bsc#1051510).
- fbdev/via: fix defined but not used warning (bsc#1051510).
- video: goldfishfb: fix memory leak on driver remove
  (bsc#1051510).
- fbdev: Distinguish between interlaced and progressive modes
  (bsc#1051510).
- platform/x86: toshiba_acpi: Fix defined but not used build
  warnings (bsc#1051510).
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
  (bsc#1051510).
- input: rohm_bu21023: switch to i2c_lock_bus(...,
  I2C_LOCK_SEGMENT) (bsc#1051510).
- HID: hid-ntrig: add error handling for sysfs_create_group
  (bsc#1051510).
- mfd: ti_am335x_tscadc: Fix struct clk memory leak (bsc#1051510).
- mmc: sdhci: do not try to use 3.3V signaling if not supported
  (bsc#1051510).
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
  (bsc#1051510).
- parport: sunbpp: fix error return code (bsc#1051510).
- coresight: Handle errors in finding input/output ports
  (bsc#1051510).
- mei: bus: type promotion bug in mei_nfc_if_version()
  (bsc#1051510).
- gpio: pxa: Fix potential NULL dereference (bsc#1051510).
- gpiolib: Mark gpio_suffixes array with __maybe_unused
  (bsc#1051510).
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
  (bsc#1051510).
- crypto: sharah - Unregister correct algorithms for SAHARA 3
  (bsc#1051510).
- crypto: skcipher - Fix -Wstringop-truncation warnings
  (bsc#1051510).
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
  (bsc#1051510).
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 (bsc#1051510).
- mac80211: restrict delayed tailroom needed decrement
  (bsc#1051510).
- wlcore: Add missing PM call for
  wlcore_cmd_wait_for_event_or_timeout() (bsc#1051510).
- commit e266792</changelog>
  <changelog author="mbrugger@suse.com" date="1538654409">- arm64: Update config files. (bsc#1110716)
  Enable ST LPS25H pressure sensor.
- commit 69c6902</changelog>
  <changelog author="jack@suse.cz" date="1538654410">- patches.fixes/x86-memory_failure-Introduce-set-clear-_mce_nospec.patch:
  Fixup compilation breakage on s390 and arm due to missing
  clear_mce_nospec().
- commit faef795</changelog>
</package>
<package pkgid="5d106bd4ffb4e756909d6356da927454db071281c53924ef0252070600ead71b" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.22.1"/>
  <changelog author="tiwai@suse.de" date="1539172800">- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell
  XPS 27 7760 (bsc#1051510).
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
  (bsc#1051510).
- crypto: mxs-dcp - Fix wait logic on chan threads (bsc#1051510).
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM
  ioctl (bsc#1051510).
- HID: add support for Apple Magic Keyboards (bsc#1051510).
- gpio: Fix crash due to registration race (bsc#1051510).
- gpiolib-acpi: Register GpioInt ACPI event handlers from a
  late_initcall (bsc#1051510).
- gpio: adp5588: Fix sleep-in-atomic-context bug (bsc#1051510).
- cfg80211: fix a type issue in
  ieee80211_chandef_to_operating_class() (bsc#1051510).
- Revert "gpio: set up initial state from .get_direction()"
  (bsc#1051510).
- gpio: mb86s70: Revert "Return error if requesting an already
  assigned gpio" (bsc#1051510).
- commit 2759d22</changelog>
  <changelog author="mbrugger@suse.com" date="1539172801">- arm64: Update config files.
  Enable SENSORS_RASPBERRYPI_HWMON
- commit 2a83945</changelog>
  <changelog author="mbrugger@suse.com" date="1539172802">- supported.conf: mark raspberrypi-hwmon as supported
- commit af8ddda</changelog>
  <changelog author="tiwai@suse.de" date="1539172803">- HID: hid-saitek: Add device ID for RAT 7 Contagion
  (bsc#1051510).
- mac80211: shorten the IBSS debug messages (bsc#1051510).
- mac80211: don't Tx a deauth frame if the AP forbade Tx
  (bsc#1051510).
- mac80211: Fix station bandwidth setting after channel switch
  (bsc#1051510).
- mac80211: fix a race between restart and CSA flows
  (bsc#1051510).
- mac80211: do not convert to A-MSDU if frag/subframe limited
  (bsc#1051510).
- mac80211: mesh: fix HWMP sequence numbering to follow standard
  (bsc#1051510).
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211_hwsim: require at least one channel (bsc#1051510).
- mac80211: Run TXQ teardown code before de-registering interfaces
  (bsc#1051510).
- hwmon: (adt7475) Make adt7475_read_word() return errors
  (bsc#1051510).
- hwmon: (ina2xx) fix sysfs shunt resistor read access
  (bsc#1051510).
- commit af836cd</changelog>
  <changelog author="tiwai@suse.de" date="1539172804">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- Revert "mwifiex: handle race during mwifiex_usb_disconnect"
  (bsc#1051510).
- media: videobuf-dma-sg: Fix dma_{sync,unmap}_sg() calls
  (bsc#1051510).
- Revert "mwifiex: fix incorrect ht capability problem"
  (bsc#1051510).
- PM / Domains: Fix genpd to deal with drivers returning 1 from
  - &gt;prepare() (bsc#1051510).
- Revert "pinctrl: sunxi: Don't enforce bias disable (for now)"
  (bsc#1051510).
- commit fb6c36a</changelog>
  <changelog author="tiwai@suse.de" date="1539172805">- blacklist.conf: Add blacklist of inapplicable revert commits
  They are either not applicable or requiring more backports that aren't
  suitable for SLE15
- commit 987dd44</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259200">- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk (bsc#1106110)
- commit 273a6bd</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259201">- blacklist.conf: Append 'drm/amd/pp: initialize result to before or'ing in data'
- commit d2edcd9</changelog>
  <changelog author="tiwai@suse.de" date="1539259202">- Disable DRM patches that broke vbox video driver KMP (bsc#1111076)
- commit 23943c6</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259203">- blacklist.conf: Append 'Revert "drm: Use a flexible array member for blob property data"'
- commit ddc67eb</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259204">- Fix Patch-mainline tags to refer to Linux release tag
  It is expected that Patch-mainline tags refer to a release tag
  in the Linux git tree, such as v4.15. Several patches contain a
  Patch-mainline tags that instead refer to a Linux version number,
  such as 4.15. This inconsistency complicates grepping and
  automation.
  871 of 18000 patches are affected by this problem.
- commit 1d81d26</changelog>
  <changelog author="bp@suse.de" date="1539259205">- crypto: ccp - add timeout support in the SEV command
  (bsc#1106838).
- commit 912dad4</changelog>
  <changelog author="tiwai@suse.de" date="1539345600">- Update config files: update forgotten armv7hl configs
- commit 7bae3a6</changelog>
  <changelog author="msuchanek@suse.de" date="1539345601">- powerpc/numa: Skip onlining a offline node in kdump path
  (bsc#1109784).
- commit df87e51</changelog>
  <changelog author="tiwai@suse.de" date="1539345602">- squashfs metadata 2: electric boogaloo (bsc#1051510).
- squashfs: more metadata hardening (bsc#1051510).
- squashfs: be more careful about metadata corruption
  (bsc#1051510).
- commit 9bfac39</changelog>
  <changelog author="hare@suse.de" date="1539345603">- scsi: qla2xxx: Move log messages before issuing command to
  firmware (bsc#1108870).
- scsi: qla2xxx: Fix for double free of SRB structure
  (bsc#1108870).
- scsi: qla2xxx: Fix recursive mailbox timeout (bsc#1108870).
- scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
  (bsc#1108870).
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
  (bsc#1108870).
- scsi: qla2xxx: Fix duplicate switch database entries
  (bsc#1108870).
- scsi: qla2xxx: Fix NVMe Target discovery (bsc#1108870).
- scsi: qla2xxx: Fix NVMe session hang on unload (bsc#1108870).
- scsi: qla2xxx: don't allow negative thresholds (bsc#1108870).
- commit 50fe149</changelog>
  <changelog author="tiwai@suse.de" date="1539345604">- Squashfs: Compute expected length from inode size rather than
  block length (bsc#1051510).
- commit 0c4a663</changelog>
  <changelog author="tiwai@suse.de" date="1539345605">- soreuseport: initialise timewait reuseport field (bsc#1051510).
- commit bda2dcc</changelog>
  <changelog author="tiwai@suse.de" date="1539345606">- rpc_pipefs: fix double-dput() (bsc#1051510).
- commit 1a15e26</changelog>
  <changelog author="hare@suse.de" date="1539345607">- scsi: qla2xxx: Return switch command on a timeout (bsc#1108870).
- commit 8e38f2a</changelog>
</package>
<package pkgid="b3df80f4fb159f496b0df752f60c15a93bf9cad83fb4fe28a8efed6c4953b8d2" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.25.1"/>
  <changelog author="tiwai@suse.de" date="1540814400">- NFC: nfcmrvl_uart: fix OF child-node lookup (bsc#1051510).
- kernfs: update comment about kernfs_path() return value
  (bsc#1051510).
- usbip: tools: fix atoi() on non-null terminated string
  (bsc#1051510).
- USB: serial: cypress_m8: fix interrupt-out transfer length
  (bsc#1051510).
- usb: chipidea: Prevent unbalanced IRQ disable (bsc#1051510).
- commit 6c9d1e7</changelog>
  <changelog author="tiwai@suse.de" date="1540814401">- blacklist.conf: Add ASoC and USB entries that may break kABI
- commit 199a072</changelog>
  <changelog author="tiwai@suse.de" date="1540814402">- usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation
  (bsc#1051510).
- usb: gadget: fsl_udc_core: check allocation return value and
  cleanup on failure (bsc#1051510).
- commit c1b7b66</changelog>
  <changelog author="tiwai@suse.de" date="1540814403">- Refresh patch tag of upstreamed patches and move to sorted section
- commit a966b56</changelog>
  <changelog author="ohering@suse.de" date="1540900800">- move changes without Git-commit out of sorted section
- commit cbf049e</changelog>
  <changelog author="jslaby@suse.cz" date="1540900801">- random: rate limit unseeded randomness warnings (git-fixes).
- commit be52b92</changelog>
  <changelog author="jslaby@suse.cz" date="1540900802">- blacklist.conf: add a kasan fix
- commit c85e2d1</changelog>
  <changelog author="jdelvare@suse.de" date="1540900803">- Add reference to bsc#1104124 to
  patches.fixes/fs-aio-fix-the-increment-of-aio-nr-and-counting-agai.patch
- commit f60e64b</changelog>
  <changelog author="jslaby@suse.cz" date="1540900804">- tools build: fix # escaping in .cmd files for future Make
  (git-fixes).
- Kbuild: fix # escaping in .cmd files for future Make
  (git-fixes).
- commit 8f11ec3</changelog>
  <changelog author="tiwai@suse.de" date="1540900805">- drm/i915/dp: Link train Fallback on eDP only if fallback link
  BW can fit panel's native mode (bsc#1051510).
- drm/i915: Restore vblank interrupts earlier (bsc#1051510).
- commit daf120f</changelog>
  <changelog author="tiwai@suse.de" date="1540900806">- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
  (bsc#1051510).
- media: cx231xx: fix potential sign-extension overflow on large
  shift (bsc#1051510).
- media: pci: cx23885: handle adding to list failure
  (bsc#1051510).
- media: vsp1: Fix YCbCr planar formats pitch calculation
  (bsc#1051510).
- media: tvp5150: fix switch exit in set control handler
  (bsc#1051510).
- media: tvp5150: fix width alignment during set_selection()
  (bsc#1051510).
- media: em28xx: fix input name for Terratec AV 350 (bsc#1051510).
- media: em28xx: use a default format if TRY_FMT fails
  (bsc#1051510).
- media: tvp5150: avoid going past array on v4l2_querymenu()
  (bsc#1051510).
- media: dvb: fix compat ioctl translation (bsc#1051510).
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
  (bsc#1051510).
- commit 0831c5e</changelog>
  <changelog author="tiwai@suse.de" date="1540900807">- soc/tegra: pmc: Fix child-node lookup (bsc#1051510).
- serial: 8250: Fix clearing FIFOs in RS485 mode again
  (bsc#1051510).
- staging: comedi: ni_mio_common: protect register write overflow
  (bsc#1051510).
- iio: adc: at91: fix wrong channel number in triggered buffer
  mode (bsc#1051510).
- iio: adc: at91: fix acking DRDY irq on simple conversions
  (bsc#1051510).
- iio: adc: imx25-gcq: Fix leak of device_node in
  mx25_gcq_setup_cfgs() (bsc#1051510).
- commit 9f4f0cc</changelog>
  <changelog author="jthumshirn@suse.de" date="1540900808">- Refresh
  patches.fixes/0001-drm-amdgpu-powerplay-fix-missing-break-in-switch-sta.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Do-not-carry-error-code-in-HiBMC.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Don-t-overwrite-fb-helper-surfac.patch.
- Refresh
  patches.fixes/0001-drm-i915-audio-Hook-up-component-bindings-even-if-di.patch.
- Refresh
  patches.fixes/0001-drm-i915-gen9-Fix-initial-readout-for-Y-tiled-frameb.patch.
- Refresh
  patches.fixes/0001-drm-sti-do-not-remove-the-drm_bridge-that-was-never-.patch.
- Refresh
  patches.fixes/0001-drm-virtio-fix-bounds-check-in-virtio_gpu_cmd_get_ca.patch.
- commit 652fab5</changelog>
  <changelog author="tiwai@suse.de" date="1540987200">- drm/nouveau: Don't disable polling in fallback mode
  (bsc#1103356).
- Delete
  patches.suse/Revert-drm-nouveau-drm-therm-fan-add-a-fallback-if-n.
- commit aa0c431</changelog>
  <changelog author="tzimmermann@suse.de" date="1540987201">- Fix Patch-mainline for "drm/amdgpu: update tmr mc address"
  The Patch-mainline tag was incorrect. References is being updated as well.
- commit ce8535e</changelog>
  <changelog author="tiwai@suse.de" date="1540987202">- Workaround for mysterious NVMe breakage with i915 CFL
  (bsc#1111040).
- commit 0fa5877</changelog>
  <changelog author="jthumshirn@suse.de" date="1540987203">- libnvdimm, label: Fix sparse warning (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Use namespace index data to reduce number of label reads
  needed (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Split label init out from the logic for getting config
  data (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Remove empty if statement (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Clarify comment in sizeof_namespace_index (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Sanity check labeloff (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- libnvdimm, dimm: Maximize label transfer size (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7
  (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- commit 5a4eeb4</changelog>
  <changelog author="jlee@suse.com" date="1540987204">- x86/boot/KASLR: Work around firmware bugs by excluding
  EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR's choice
  (bnc#1112878).
- commit d45cd78</changelog>
  <changelog author="tiwai@suse.de" date="1540987205">- blacklist.conf: Add a few wifi driver entries that can't be applied
- commit 662fc68</changelog>
  <changelog author="tiwai@suse.de" date="1540987206">- spi/bcm63xx-hsspi: keep pll clk enabled (bsc#1051510).
- spi: sh-msiof: fix deferred probing (bsc#1051510).
- spi: bcm-qspi: switch back to reading flash using smaller chunks
  (bsc#1051510).
- commit f773242</changelog>
</package>
<package pkgid="f4486ff7666471f295463b9642ce836b9a96b2625c19d61a910dd58dc5330b3f" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="c90532e8b4d96ef8ee0819d447444b2e12bca213a0bd3dc56eff1fa56e399f2b" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="76a8e4de10012ff5c8eee84ef30b34d9e270b62bcbe77d5f4a6d0c81b9113a7e" name="kernel-syms" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="9a6699114a3e2e175dee50eeda57008ea62889d2d337c9ed97e75c7da4b40178" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="1fd77f1ba88195155d0bc9668785abbb3d59891ac3a9cbfd8af4e76de0029a99" name="kernel-syms" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="f78dced37bf2e03059e6276a5101cef991928e4d45c50d1cff8ae9397463ed77" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="c6993806945bfffb77a01d4703a0e5c8e36efda6f30165d74dd6ace8edea6e56" name="kernel-syms" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="e1ce221c1ec02153213ab61095bb924a6c862844abf5185ecf703a4c4933e986" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="ec9a170845507e594c2915cec6e76374358ac7e3c5f91c7b29121eee829ba9ce" name="kernel-syms" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.19.1"/>
  <changelog author="fdmanana@suse.com" date="1538568000">- Btrfs: fix fsync after hole punching when using no-holes feature
  (bsc#1110642).
- commit 3f19b40</changelog>
  <changelog author="fdmanana@suse.com" date="1538568001">- Btrfs: fix loss of prealloc extents past i_size after fsync
  log replay (bsc#1110643).
- commit 974e057</changelog>
  <changelog author="fdmanana@suse.com" date="1538568002">- Btrfs: fix duplicate extents after fsync of file with prealloc
  extents (bsc#1110644).
- commit c4ec603</changelog>
  <changelog author="fdmanana@suse.com" date="1538568003">- Btrfs: fix return value on rename exchange failure
  (bsc#1110645).
- commit 532729c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568004">- Btrfs: sync log after logging new name (bsc#1110646).
- commit 7260d6b</changelog>
  <changelog author="fdmanana@suse.com" date="1538568005">- Btrfs: fix data corruption when deduplicating between different
  files (bsc#1110647).
- commit 669848c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568006">- btrfs: Remove unused parameters from various functions
  (bsc#1110649).
- commit c97c657</changelog>
  <changelog author="fdmanana@suse.com" date="1538568007">- Btrfs: fix send failure when root has deleted files still open
  (bsc#1110650).
- commit f52554d</changelog>
  <changelog author="jslaby@suse.cz" date="1538568008">- watchdog: Mark watchdog touch functions as notrace (git-fixes).
- commit 8b53193</changelog>
  <changelog author="neilb@suse.com" date="1538654400">- nfs/filelayout: fix oops when freeing filelayout segment
  (bsc#1105190).
- NFS/filelayout: Fix racy setting of fl-&gt;dsaddr in
  filelayout_check_deviceid() (bsc#1105190).
- commit d6d0fab</changelog>
  <changelog author="neilb@suse.com" date="1538654401">- VFS: don't test owner for NFS in set_posix_acl() (bsc#1103405).
- commit 36f977a</changelog>
  <changelog author="tiwai@suse.de" date="1538654402">- README.BRANCH: SLE15-SP1 branch maintainer changes
  Add ptesarik as co-maintainer, keep tiwai as the primary maintainer
- commit 83aea11</changelog>
  <changelog author="wqu@suse.com" date="1538654403">- btrfs: tests/qgroup: Fix wrong tree backref level (bsc#1107928).
- commit a5e154c</changelog>
  <changelog author="wqu@suse.com" date="1538654404">- btrfs: check-integrity: Fix NULL pointer dereference for
  degraded mount (bsc#1107947).
- commit 77b2277</changelog>
  <changelog author="wqu@suse.com" date="1538654405">- btrfs: scrub: Don't use inode pages for device replace (follow
  up for bsc#1108096).
- commit c865775</changelog>
  <changelog author="tiwai@suse.de" date="1538654406">- ASoC: cs4265: fix MMTLR Data switch control (bsc#1051510).
- ALSA: fireworks: fix memory leak of response buffer at error
  path (bsc#1051510).
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix
  I/O at error path (bsc#1051510).
- ALSA: emu10k1: fix possible info leak to userspace on
  SNDRV_EMU10K1_IOCTL_INFO (bsc#1051510).
- ALSA: bebob: use address returned by kmalloc() instead of
  kernel stack for streaming DMA mapping (bsc#1051510).
- ASoC: rt5514: Fix the issue of the delay volume applied
  (bsc#1051510).
- ASoC: dapm: Fix potential DAI widget pointer deref when linking
  DAIs (bsc#1051510).
- ALSA: msnd: Fix the default sample sizes (bsc#1051510).
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE()
  macro (bsc#1051510).
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
  (bsc#1051510).
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
  (bsc#1051510).
- ASoC: rt5514: Add the missing register in the readable table
  (bsc#1051510).
- ASoC: rt5514: Eliminate the noise in the ASRC case
  (bsc#1051510).
- ASoC: rt5514: Add the I2S ASRC support (bsc#1051510).
- commit 4eba9c8</changelog>
  <changelog author="wqu@suse.com" date="1538654407">- btrfs: scrub: Don't use inode page cache in
  scrub_handle_errored_block() (follow up for bsc#1108096).
- commit 3f91c84</changelog>
  <changelog author="tiwai@suse.de" date="1538654408">- smsc95xx: Check for Wake-on-LAN modes (bsc#1051510).
- smsc75xx: Check for Wake-on-LAN modes (bsc#1051510).
- r8152: Check for supported Wake-on-LAN Modes (bsc#1051510).
- sr9800: Check for supported Wake-on-LAN modes (bsc#1051510).
- lan78xx: Check for supported Wake-on-LAN modes (bsc#1051510).
- ax88179_178a: Check for supported Wake-on-LAN modes
  (bsc#1051510).
- mac80211: fix pending queue hang due to TX_DROP (bsc#1051510).
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
  (bsc#1051510).
- Input: elantech - enable middle button of touchpad on ThinkPad
  P72 (bsc#1051510).
- regulator: fix crash caused by null driver data (bsc#1051510).
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
  (bsc#1051510).
- intel_th: Fix device removal logic (bsc#1051510).
- NFC: Fix possible memory corruption when handling SHDLC I-Frame
  commands (bsc#1051510).
- platform/x86: alienware-wmi: Correct a memory leak
  (bsc#1051510).
- xhci: Fix use after free for URB cancellation on a reallocated
  endpoint (bsc#1051510).
- mei: ignore not found client in the enumeration (bsc#1051510).
- i2c: i801: Allow ACPI AML access I/O ports not reserved for
  SMBus (bsc#1051510).
- fbdev/via: fix defined but not used warning (bsc#1051510).
- video: goldfishfb: fix memory leak on driver remove
  (bsc#1051510).
- fbdev: Distinguish between interlaced and progressive modes
  (bsc#1051510).
- platform/x86: toshiba_acpi: Fix defined but not used build
  warnings (bsc#1051510).
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
  (bsc#1051510).
- input: rohm_bu21023: switch to i2c_lock_bus(...,
  I2C_LOCK_SEGMENT) (bsc#1051510).
- HID: hid-ntrig: add error handling for sysfs_create_group
  (bsc#1051510).
- mfd: ti_am335x_tscadc: Fix struct clk memory leak (bsc#1051510).
- mmc: sdhci: do not try to use 3.3V signaling if not supported
  (bsc#1051510).
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
  (bsc#1051510).
- parport: sunbpp: fix error return code (bsc#1051510).
- coresight: Handle errors in finding input/output ports
  (bsc#1051510).
- mei: bus: type promotion bug in mei_nfc_if_version()
  (bsc#1051510).
- gpio: pxa: Fix potential NULL dereference (bsc#1051510).
- gpiolib: Mark gpio_suffixes array with __maybe_unused
  (bsc#1051510).
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
  (bsc#1051510).
- crypto: sharah - Unregister correct algorithms for SAHARA 3
  (bsc#1051510).
- crypto: skcipher - Fix -Wstringop-truncation warnings
  (bsc#1051510).
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
  (bsc#1051510).
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 (bsc#1051510).
- mac80211: restrict delayed tailroom needed decrement
  (bsc#1051510).
- wlcore: Add missing PM call for
  wlcore_cmd_wait_for_event_or_timeout() (bsc#1051510).
- commit e266792</changelog>
  <changelog author="mbrugger@suse.com" date="1538654409">- arm64: Update config files. (bsc#1110716)
  Enable ST LPS25H pressure sensor.
- commit 69c6902</changelog>
  <changelog author="jack@suse.cz" date="1538654410">- patches.fixes/x86-memory_failure-Introduce-set-clear-_mce_nospec.patch:
  Fixup compilation breakage on s390 and arm due to missing
  clear_mce_nospec().
- commit faef795</changelog>
</package>
<package pkgid="2dc4d0e7cd88fe2306930b89698037a12c91f03ae5f59e4058b748f9157b0d8d" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.19.1"/>
  <changelog author="fdmanana@suse.com" date="1538568000">- Btrfs: fix fsync after hole punching when using no-holes feature
  (bsc#1110642).
- commit 3f19b40</changelog>
  <changelog author="fdmanana@suse.com" date="1538568001">- Btrfs: fix loss of prealloc extents past i_size after fsync
  log replay (bsc#1110643).
- commit 974e057</changelog>
  <changelog author="fdmanana@suse.com" date="1538568002">- Btrfs: fix duplicate extents after fsync of file with prealloc
  extents (bsc#1110644).
- commit c4ec603</changelog>
  <changelog author="fdmanana@suse.com" date="1538568003">- Btrfs: fix return value on rename exchange failure
  (bsc#1110645).
- commit 532729c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568004">- Btrfs: sync log after logging new name (bsc#1110646).
- commit 7260d6b</changelog>
  <changelog author="fdmanana@suse.com" date="1538568005">- Btrfs: fix data corruption when deduplicating between different
  files (bsc#1110647).
- commit 669848c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568006">- btrfs: Remove unused parameters from various functions
  (bsc#1110649).
- commit c97c657</changelog>
  <changelog author="fdmanana@suse.com" date="1538568007">- Btrfs: fix send failure when root has deleted files still open
  (bsc#1110650).
- commit f52554d</changelog>
  <changelog author="jslaby@suse.cz" date="1538568008">- watchdog: Mark watchdog touch functions as notrace (git-fixes).
- commit 8b53193</changelog>
  <changelog author="neilb@suse.com" date="1538654400">- nfs/filelayout: fix oops when freeing filelayout segment
  (bsc#1105190).
- NFS/filelayout: Fix racy setting of fl-&gt;dsaddr in
  filelayout_check_deviceid() (bsc#1105190).
- commit d6d0fab</changelog>
  <changelog author="neilb@suse.com" date="1538654401">- VFS: don't test owner for NFS in set_posix_acl() (bsc#1103405).
- commit 36f977a</changelog>
  <changelog author="tiwai@suse.de" date="1538654402">- README.BRANCH: SLE15-SP1 branch maintainer changes
  Add ptesarik as co-maintainer, keep tiwai as the primary maintainer
- commit 83aea11</changelog>
  <changelog author="wqu@suse.com" date="1538654403">- btrfs: tests/qgroup: Fix wrong tree backref level (bsc#1107928).
- commit a5e154c</changelog>
  <changelog author="wqu@suse.com" date="1538654404">- btrfs: check-integrity: Fix NULL pointer dereference for
  degraded mount (bsc#1107947).
- commit 77b2277</changelog>
  <changelog author="wqu@suse.com" date="1538654405">- btrfs: scrub: Don't use inode pages for device replace (follow
  up for bsc#1108096).
- commit c865775</changelog>
  <changelog author="tiwai@suse.de" date="1538654406">- ASoC: cs4265: fix MMTLR Data switch control (bsc#1051510).
- ALSA: fireworks: fix memory leak of response buffer at error
  path (bsc#1051510).
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix
  I/O at error path (bsc#1051510).
- ALSA: emu10k1: fix possible info leak to userspace on
  SNDRV_EMU10K1_IOCTL_INFO (bsc#1051510).
- ALSA: bebob: use address returned by kmalloc() instead of
  kernel stack for streaming DMA mapping (bsc#1051510).
- ASoC: rt5514: Fix the issue of the delay volume applied
  (bsc#1051510).
- ASoC: dapm: Fix potential DAI widget pointer deref when linking
  DAIs (bsc#1051510).
- ALSA: msnd: Fix the default sample sizes (bsc#1051510).
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE()
  macro (bsc#1051510).
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
  (bsc#1051510).
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
  (bsc#1051510).
- ASoC: rt5514: Add the missing register in the readable table
  (bsc#1051510).
- ASoC: rt5514: Eliminate the noise in the ASRC case
  (bsc#1051510).
- ASoC: rt5514: Add the I2S ASRC support (bsc#1051510).
- commit 4eba9c8</changelog>
  <changelog author="wqu@suse.com" date="1538654407">- btrfs: scrub: Don't use inode page cache in
  scrub_handle_errored_block() (follow up for bsc#1108096).
- commit 3f91c84</changelog>
  <changelog author="tiwai@suse.de" date="1538654408">- smsc95xx: Check for Wake-on-LAN modes (bsc#1051510).
- smsc75xx: Check for Wake-on-LAN modes (bsc#1051510).
- r8152: Check for supported Wake-on-LAN Modes (bsc#1051510).
- sr9800: Check for supported Wake-on-LAN modes (bsc#1051510).
- lan78xx: Check for supported Wake-on-LAN modes (bsc#1051510).
- ax88179_178a: Check for supported Wake-on-LAN modes
  (bsc#1051510).
- mac80211: fix pending queue hang due to TX_DROP (bsc#1051510).
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
  (bsc#1051510).
- Input: elantech - enable middle button of touchpad on ThinkPad
  P72 (bsc#1051510).
- regulator: fix crash caused by null driver data (bsc#1051510).
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
  (bsc#1051510).
- intel_th: Fix device removal logic (bsc#1051510).
- NFC: Fix possible memory corruption when handling SHDLC I-Frame
  commands (bsc#1051510).
- platform/x86: alienware-wmi: Correct a memory leak
  (bsc#1051510).
- xhci: Fix use after free for URB cancellation on a reallocated
  endpoint (bsc#1051510).
- mei: ignore not found client in the enumeration (bsc#1051510).
- i2c: i801: Allow ACPI AML access I/O ports not reserved for
  SMBus (bsc#1051510).
- fbdev/via: fix defined but not used warning (bsc#1051510).
- video: goldfishfb: fix memory leak on driver remove
  (bsc#1051510).
- fbdev: Distinguish between interlaced and progressive modes
  (bsc#1051510).
- platform/x86: toshiba_acpi: Fix defined but not used build
  warnings (bsc#1051510).
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
  (bsc#1051510).
- input: rohm_bu21023: switch to i2c_lock_bus(...,
  I2C_LOCK_SEGMENT) (bsc#1051510).
- HID: hid-ntrig: add error handling for sysfs_create_group
  (bsc#1051510).
- mfd: ti_am335x_tscadc: Fix struct clk memory leak (bsc#1051510).
- mmc: sdhci: do not try to use 3.3V signaling if not supported
  (bsc#1051510).
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
  (bsc#1051510).
- parport: sunbpp: fix error return code (bsc#1051510).
- coresight: Handle errors in finding input/output ports
  (bsc#1051510).
- mei: bus: type promotion bug in mei_nfc_if_version()
  (bsc#1051510).
- gpio: pxa: Fix potential NULL dereference (bsc#1051510).
- gpiolib: Mark gpio_suffixes array with __maybe_unused
  (bsc#1051510).
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
  (bsc#1051510).
- crypto: sharah - Unregister correct algorithms for SAHARA 3
  (bsc#1051510).
- crypto: skcipher - Fix -Wstringop-truncation warnings
  (bsc#1051510).
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
  (bsc#1051510).
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 (bsc#1051510).
- mac80211: restrict delayed tailroom needed decrement
  (bsc#1051510).
- wlcore: Add missing PM call for
  wlcore_cmd_wait_for_event_or_timeout() (bsc#1051510).
- commit e266792</changelog>
  <changelog author="mbrugger@suse.com" date="1538654409">- arm64: Update config files. (bsc#1110716)
  Enable ST LPS25H pressure sensor.
- commit 69c6902</changelog>
  <changelog author="jack@suse.cz" date="1538654410">- patches.fixes/x86-memory_failure-Introduce-set-clear-_mce_nospec.patch:
  Fixup compilation breakage on s390 and arm due to missing
  clear_mce_nospec().
- commit faef795</changelog>
</package>
<package pkgid="801bdc0da6b79e04a45594a3aa364e65b2770ad02edb0038885a7eb08ae6b2f1" name="kernel-syms" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.22.1"/>
  <changelog author="tiwai@suse.de" date="1539172800">- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell
  XPS 27 7760 (bsc#1051510).
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
  (bsc#1051510).
- crypto: mxs-dcp - Fix wait logic on chan threads (bsc#1051510).
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM
  ioctl (bsc#1051510).
- HID: add support for Apple Magic Keyboards (bsc#1051510).
- gpio: Fix crash due to registration race (bsc#1051510).
- gpiolib-acpi: Register GpioInt ACPI event handlers from a
  late_initcall (bsc#1051510).
- gpio: adp5588: Fix sleep-in-atomic-context bug (bsc#1051510).
- cfg80211: fix a type issue in
  ieee80211_chandef_to_operating_class() (bsc#1051510).
- Revert "gpio: set up initial state from .get_direction()"
  (bsc#1051510).
- gpio: mb86s70: Revert "Return error if requesting an already
  assigned gpio" (bsc#1051510).
- commit 2759d22</changelog>
  <changelog author="mbrugger@suse.com" date="1539172801">- arm64: Update config files.
  Enable SENSORS_RASPBERRYPI_HWMON
- commit 2a83945</changelog>
  <changelog author="mbrugger@suse.com" date="1539172802">- supported.conf: mark raspberrypi-hwmon as supported
- commit af8ddda</changelog>
  <changelog author="tiwai@suse.de" date="1539172803">- HID: hid-saitek: Add device ID for RAT 7 Contagion
  (bsc#1051510).
- mac80211: shorten the IBSS debug messages (bsc#1051510).
- mac80211: don't Tx a deauth frame if the AP forbade Tx
  (bsc#1051510).
- mac80211: Fix station bandwidth setting after channel switch
  (bsc#1051510).
- mac80211: fix a race between restart and CSA flows
  (bsc#1051510).
- mac80211: do not convert to A-MSDU if frag/subframe limited
  (bsc#1051510).
- mac80211: mesh: fix HWMP sequence numbering to follow standard
  (bsc#1051510).
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211_hwsim: require at least one channel (bsc#1051510).
- mac80211: Run TXQ teardown code before de-registering interfaces
  (bsc#1051510).
- hwmon: (adt7475) Make adt7475_read_word() return errors
  (bsc#1051510).
- hwmon: (ina2xx) fix sysfs shunt resistor read access
  (bsc#1051510).
- commit af836cd</changelog>
  <changelog author="tiwai@suse.de" date="1539172804">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- Revert "mwifiex: handle race during mwifiex_usb_disconnect"
  (bsc#1051510).
- media: videobuf-dma-sg: Fix dma_{sync,unmap}_sg() calls
  (bsc#1051510).
- Revert "mwifiex: fix incorrect ht capability problem"
  (bsc#1051510).
- PM / Domains: Fix genpd to deal with drivers returning 1 from
  - &gt;prepare() (bsc#1051510).
- Revert "pinctrl: sunxi: Don't enforce bias disable (for now)"
  (bsc#1051510).
- commit fb6c36a</changelog>
  <changelog author="tiwai@suse.de" date="1539172805">- blacklist.conf: Add blacklist of inapplicable revert commits
  They are either not applicable or requiring more backports that aren't
  suitable for SLE15
- commit 987dd44</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259200">- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk (bsc#1106110)
- commit 273a6bd</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259201">- blacklist.conf: Append 'drm/amd/pp: initialize result to before or'ing in data'
- commit d2edcd9</changelog>
  <changelog author="tiwai@suse.de" date="1539259202">- Disable DRM patches that broke vbox video driver KMP (bsc#1111076)
- commit 23943c6</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259203">- blacklist.conf: Append 'Revert "drm: Use a flexible array member for blob property data"'
- commit ddc67eb</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259204">- Fix Patch-mainline tags to refer to Linux release tag
  It is expected that Patch-mainline tags refer to a release tag
  in the Linux git tree, such as v4.15. Several patches contain a
  Patch-mainline tags that instead refer to a Linux version number,
  such as 4.15. This inconsistency complicates grepping and
  automation.
  871 of 18000 patches are affected by this problem.
- commit 1d81d26</changelog>
  <changelog author="bp@suse.de" date="1539259205">- crypto: ccp - add timeout support in the SEV command
  (bsc#1106838).
- commit 912dad4</changelog>
  <changelog author="tiwai@suse.de" date="1539345600">- Update config files: update forgotten armv7hl configs
- commit 7bae3a6</changelog>
  <changelog author="msuchanek@suse.de" date="1539345601">- powerpc/numa: Skip onlining a offline node in kdump path
  (bsc#1109784).
- commit df87e51</changelog>
  <changelog author="tiwai@suse.de" date="1539345602">- squashfs metadata 2: electric boogaloo (bsc#1051510).
- squashfs: more metadata hardening (bsc#1051510).
- squashfs: be more careful about metadata corruption
  (bsc#1051510).
- commit 9bfac39</changelog>
  <changelog author="hare@suse.de" date="1539345603">- scsi: qla2xxx: Move log messages before issuing command to
  firmware (bsc#1108870).
- scsi: qla2xxx: Fix for double free of SRB structure
  (bsc#1108870).
- scsi: qla2xxx: Fix recursive mailbox timeout (bsc#1108870).
- scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
  (bsc#1108870).
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
  (bsc#1108870).
- scsi: qla2xxx: Fix duplicate switch database entries
  (bsc#1108870).
- scsi: qla2xxx: Fix NVMe Target discovery (bsc#1108870).
- scsi: qla2xxx: Fix NVMe session hang on unload (bsc#1108870).
- scsi: qla2xxx: don't allow negative thresholds (bsc#1108870).
- commit 50fe149</changelog>
  <changelog author="tiwai@suse.de" date="1539345604">- Squashfs: Compute expected length from inode size rather than
  block length (bsc#1051510).
- commit 0c4a663</changelog>
  <changelog author="tiwai@suse.de" date="1539345605">- soreuseport: initialise timewait reuseport field (bsc#1051510).
- commit bda2dcc</changelog>
  <changelog author="tiwai@suse.de" date="1539345606">- rpc_pipefs: fix double-dput() (bsc#1051510).
- commit 1a15e26</changelog>
  <changelog author="hare@suse.de" date="1539345607">- scsi: qla2xxx: Return switch command on a timeout (bsc#1108870).
- commit 8e38f2a</changelog>
</package>
<package pkgid="047640b1ee2683c2af33df41e397d8587a08840b23da51def354571c4e0d7338" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.22.1"/>
  <changelog author="tiwai@suse.de" date="1539172800">- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell
  XPS 27 7760 (bsc#1051510).
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
  (bsc#1051510).
- crypto: mxs-dcp - Fix wait logic on chan threads (bsc#1051510).
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM
  ioctl (bsc#1051510).
- HID: add support for Apple Magic Keyboards (bsc#1051510).
- gpio: Fix crash due to registration race (bsc#1051510).
- gpiolib-acpi: Register GpioInt ACPI event handlers from a
  late_initcall (bsc#1051510).
- gpio: adp5588: Fix sleep-in-atomic-context bug (bsc#1051510).
- cfg80211: fix a type issue in
  ieee80211_chandef_to_operating_class() (bsc#1051510).
- Revert "gpio: set up initial state from .get_direction()"
  (bsc#1051510).
- gpio: mb86s70: Revert "Return error if requesting an already
  assigned gpio" (bsc#1051510).
- commit 2759d22</changelog>
  <changelog author="mbrugger@suse.com" date="1539172801">- arm64: Update config files.
  Enable SENSORS_RASPBERRYPI_HWMON
- commit 2a83945</changelog>
  <changelog author="mbrugger@suse.com" date="1539172802">- supported.conf: mark raspberrypi-hwmon as supported
- commit af8ddda</changelog>
  <changelog author="tiwai@suse.de" date="1539172803">- HID: hid-saitek: Add device ID for RAT 7 Contagion
  (bsc#1051510).
- mac80211: shorten the IBSS debug messages (bsc#1051510).
- mac80211: don't Tx a deauth frame if the AP forbade Tx
  (bsc#1051510).
- mac80211: Fix station bandwidth setting after channel switch
  (bsc#1051510).
- mac80211: fix a race between restart and CSA flows
  (bsc#1051510).
- mac80211: do not convert to A-MSDU if frag/subframe limited
  (bsc#1051510).
- mac80211: mesh: fix HWMP sequence numbering to follow standard
  (bsc#1051510).
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211_hwsim: require at least one channel (bsc#1051510).
- mac80211: Run TXQ teardown code before de-registering interfaces
  (bsc#1051510).
- hwmon: (adt7475) Make adt7475_read_word() return errors
  (bsc#1051510).
- hwmon: (ina2xx) fix sysfs shunt resistor read access
  (bsc#1051510).
- commit af836cd</changelog>
  <changelog author="tiwai@suse.de" date="1539172804">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- Revert "mwifiex: handle race during mwifiex_usb_disconnect"
  (bsc#1051510).
- media: videobuf-dma-sg: Fix dma_{sync,unmap}_sg() calls
  (bsc#1051510).
- Revert "mwifiex: fix incorrect ht capability problem"
  (bsc#1051510).
- PM / Domains: Fix genpd to deal with drivers returning 1 from
  - &gt;prepare() (bsc#1051510).
- Revert "pinctrl: sunxi: Don't enforce bias disable (for now)"
  (bsc#1051510).
- commit fb6c36a</changelog>
  <changelog author="tiwai@suse.de" date="1539172805">- blacklist.conf: Add blacklist of inapplicable revert commits
  They are either not applicable or requiring more backports that aren't
  suitable for SLE15
- commit 987dd44</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259200">- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk (bsc#1106110)
- commit 273a6bd</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259201">- blacklist.conf: Append 'drm/amd/pp: initialize result to before or'ing in data'
- commit d2edcd9</changelog>
  <changelog author="tiwai@suse.de" date="1539259202">- Disable DRM patches that broke vbox video driver KMP (bsc#1111076)
- commit 23943c6</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259203">- blacklist.conf: Append 'Revert "drm: Use a flexible array member for blob property data"'
- commit ddc67eb</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259204">- Fix Patch-mainline tags to refer to Linux release tag
  It is expected that Patch-mainline tags refer to a release tag
  in the Linux git tree, such as v4.15. Several patches contain a
  Patch-mainline tags that instead refer to a Linux version number,
  such as 4.15. This inconsistency complicates grepping and
  automation.
  871 of 18000 patches are affected by this problem.
- commit 1d81d26</changelog>
  <changelog author="bp@suse.de" date="1539259205">- crypto: ccp - add timeout support in the SEV command
  (bsc#1106838).
- commit 912dad4</changelog>
  <changelog author="tiwai@suse.de" date="1539345600">- Update config files: update forgotten armv7hl configs
- commit 7bae3a6</changelog>
  <changelog author="msuchanek@suse.de" date="1539345601">- powerpc/numa: Skip onlining a offline node in kdump path
  (bsc#1109784).
- commit df87e51</changelog>
  <changelog author="tiwai@suse.de" date="1539345602">- squashfs metadata 2: electric boogaloo (bsc#1051510).
- squashfs: more metadata hardening (bsc#1051510).
- squashfs: be more careful about metadata corruption
  (bsc#1051510).
- commit 9bfac39</changelog>
  <changelog author="hare@suse.de" date="1539345603">- scsi: qla2xxx: Move log messages before issuing command to
  firmware (bsc#1108870).
- scsi: qla2xxx: Fix for double free of SRB structure
  (bsc#1108870).
- scsi: qla2xxx: Fix recursive mailbox timeout (bsc#1108870).
- scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
  (bsc#1108870).
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
  (bsc#1108870).
- scsi: qla2xxx: Fix duplicate switch database entries
  (bsc#1108870).
- scsi: qla2xxx: Fix NVMe Target discovery (bsc#1108870).
- scsi: qla2xxx: Fix NVMe session hang on unload (bsc#1108870).
- scsi: qla2xxx: don't allow negative thresholds (bsc#1108870).
- commit 50fe149</changelog>
  <changelog author="tiwai@suse.de" date="1539345604">- Squashfs: Compute expected length from inode size rather than
  block length (bsc#1051510).
- commit 0c4a663</changelog>
  <changelog author="tiwai@suse.de" date="1539345605">- soreuseport: initialise timewait reuseport field (bsc#1051510).
- commit bda2dcc</changelog>
  <changelog author="tiwai@suse.de" date="1539345606">- rpc_pipefs: fix double-dput() (bsc#1051510).
- commit 1a15e26</changelog>
  <changelog author="hare@suse.de" date="1539345607">- scsi: qla2xxx: Return switch command on a timeout (bsc#1108870).
- commit 8e38f2a</changelog>
</package>
<package pkgid="f75e06c75f5735b02f5ca15fa5bf0a2f40da68082478579ad0c2232ac30f56fd" name="kernel-syms" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.25.1"/>
  <changelog author="tiwai@suse.de" date="1540814400">- NFC: nfcmrvl_uart: fix OF child-node lookup (bsc#1051510).
- kernfs: update comment about kernfs_path() return value
  (bsc#1051510).
- usbip: tools: fix atoi() on non-null terminated string
  (bsc#1051510).
- USB: serial: cypress_m8: fix interrupt-out transfer length
  (bsc#1051510).
- usb: chipidea: Prevent unbalanced IRQ disable (bsc#1051510).
- commit 6c9d1e7</changelog>
  <changelog author="tiwai@suse.de" date="1540814401">- blacklist.conf: Add ASoC and USB entries that may break kABI
- commit 199a072</changelog>
  <changelog author="tiwai@suse.de" date="1540814402">- usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation
  (bsc#1051510).
- usb: gadget: fsl_udc_core: check allocation return value and
  cleanup on failure (bsc#1051510).
- commit c1b7b66</changelog>
  <changelog author="tiwai@suse.de" date="1540814403">- Refresh patch tag of upstreamed patches and move to sorted section
- commit a966b56</changelog>
  <changelog author="ohering@suse.de" date="1540900800">- move changes without Git-commit out of sorted section
- commit cbf049e</changelog>
  <changelog author="jslaby@suse.cz" date="1540900801">- random: rate limit unseeded randomness warnings (git-fixes).
- commit be52b92</changelog>
  <changelog author="jslaby@suse.cz" date="1540900802">- blacklist.conf: add a kasan fix
- commit c85e2d1</changelog>
  <changelog author="jdelvare@suse.de" date="1540900803">- Add reference to bsc#1104124 to
  patches.fixes/fs-aio-fix-the-increment-of-aio-nr-and-counting-agai.patch
- commit f60e64b</changelog>
  <changelog author="jslaby@suse.cz" date="1540900804">- tools build: fix # escaping in .cmd files for future Make
  (git-fixes).
- Kbuild: fix # escaping in .cmd files for future Make
  (git-fixes).
- commit 8f11ec3</changelog>
  <changelog author="tiwai@suse.de" date="1540900805">- drm/i915/dp: Link train Fallback on eDP only if fallback link
  BW can fit panel's native mode (bsc#1051510).
- drm/i915: Restore vblank interrupts earlier (bsc#1051510).
- commit daf120f</changelog>
  <changelog author="tiwai@suse.de" date="1540900806">- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
  (bsc#1051510).
- media: cx231xx: fix potential sign-extension overflow on large
  shift (bsc#1051510).
- media: pci: cx23885: handle adding to list failure
  (bsc#1051510).
- media: vsp1: Fix YCbCr planar formats pitch calculation
  (bsc#1051510).
- media: tvp5150: fix switch exit in set control handler
  (bsc#1051510).
- media: tvp5150: fix width alignment during set_selection()
  (bsc#1051510).
- media: em28xx: fix input name for Terratec AV 350 (bsc#1051510).
- media: em28xx: use a default format if TRY_FMT fails
  (bsc#1051510).
- media: tvp5150: avoid going past array on v4l2_querymenu()
  (bsc#1051510).
- media: dvb: fix compat ioctl translation (bsc#1051510).
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
  (bsc#1051510).
- commit 0831c5e</changelog>
  <changelog author="tiwai@suse.de" date="1540900807">- soc/tegra: pmc: Fix child-node lookup (bsc#1051510).
- serial: 8250: Fix clearing FIFOs in RS485 mode again
  (bsc#1051510).
- staging: comedi: ni_mio_common: protect register write overflow
  (bsc#1051510).
- iio: adc: at91: fix wrong channel number in triggered buffer
  mode (bsc#1051510).
- iio: adc: at91: fix acking DRDY irq on simple conversions
  (bsc#1051510).
- iio: adc: imx25-gcq: Fix leak of device_node in
  mx25_gcq_setup_cfgs() (bsc#1051510).
- commit 9f4f0cc</changelog>
  <changelog author="jthumshirn@suse.de" date="1540900808">- Refresh
  patches.fixes/0001-drm-amdgpu-powerplay-fix-missing-break-in-switch-sta.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Do-not-carry-error-code-in-HiBMC.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Don-t-overwrite-fb-helper-surfac.patch.
- Refresh
  patches.fixes/0001-drm-i915-audio-Hook-up-component-bindings-even-if-di.patch.
- Refresh
  patches.fixes/0001-drm-i915-gen9-Fix-initial-readout-for-Y-tiled-frameb.patch.
- Refresh
  patches.fixes/0001-drm-sti-do-not-remove-the-drm_bridge-that-was-never-.patch.
- Refresh
  patches.fixes/0001-drm-virtio-fix-bounds-check-in-virtio_gpu_cmd_get_ca.patch.
- commit 652fab5</changelog>
  <changelog author="tiwai@suse.de" date="1540987200">- drm/nouveau: Don't disable polling in fallback mode
  (bsc#1103356).
- Delete
  patches.suse/Revert-drm-nouveau-drm-therm-fan-add-a-fallback-if-n.
- commit aa0c431</changelog>
  <changelog author="tzimmermann@suse.de" date="1540987201">- Fix Patch-mainline for "drm/amdgpu: update tmr mc address"
  The Patch-mainline tag was incorrect. References is being updated as well.
- commit ce8535e</changelog>
  <changelog author="tiwai@suse.de" date="1540987202">- Workaround for mysterious NVMe breakage with i915 CFL
  (bsc#1111040).
- commit 0fa5877</changelog>
  <changelog author="jthumshirn@suse.de" date="1540987203">- libnvdimm, label: Fix sparse warning (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Use namespace index data to reduce number of label reads
  needed (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Split label init out from the logic for getting config
  data (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Remove empty if statement (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Clarify comment in sizeof_namespace_index (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Sanity check labeloff (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- libnvdimm, dimm: Maximize label transfer size (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7
  (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- commit 5a4eeb4</changelog>
  <changelog author="jlee@suse.com" date="1540987204">- x86/boot/KASLR: Work around firmware bugs by excluding
  EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR's choice
  (bnc#1112878).
- commit d45cd78</changelog>
  <changelog author="tiwai@suse.de" date="1540987205">- blacklist.conf: Add a few wifi driver entries that can't be applied
- commit 662fc68</changelog>
  <changelog author="tiwai@suse.de" date="1540987206">- spi/bcm63xx-hsspi: keep pll clk enabled (bsc#1051510).
- spi: sh-msiof: fix deferred probing (bsc#1051510).
- spi: bcm-qspi: switch back to reading flash using smaller chunks
  (bsc#1051510).
- commit f773242</changelog>
</package>
<package pkgid="94fa84c4f141477ade63abb580ed51b519e0362aafa9d1af8d61792228a3bca1" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.25.1"/>
  <changelog author="tiwai@suse.de" date="1540814400">- NFC: nfcmrvl_uart: fix OF child-node lookup (bsc#1051510).
- kernfs: update comment about kernfs_path() return value
  (bsc#1051510).
- usbip: tools: fix atoi() on non-null terminated string
  (bsc#1051510).
- USB: serial: cypress_m8: fix interrupt-out transfer length
  (bsc#1051510).
- usb: chipidea: Prevent unbalanced IRQ disable (bsc#1051510).
- commit 6c9d1e7</changelog>
  <changelog author="tiwai@suse.de" date="1540814401">- blacklist.conf: Add ASoC and USB entries that may break kABI
- commit 199a072</changelog>
  <changelog author="tiwai@suse.de" date="1540814402">- usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation
  (bsc#1051510).
- usb: gadget: fsl_udc_core: check allocation return value and
  cleanup on failure (bsc#1051510).
- commit c1b7b66</changelog>
  <changelog author="tiwai@suse.de" date="1540814403">- Refresh patch tag of upstreamed patches and move to sorted section
- commit a966b56</changelog>
  <changelog author="ohering@suse.de" date="1540900800">- move changes without Git-commit out of sorted section
- commit cbf049e</changelog>
  <changelog author="jslaby@suse.cz" date="1540900801">- random: rate limit unseeded randomness warnings (git-fixes).
- commit be52b92</changelog>
  <changelog author="jslaby@suse.cz" date="1540900802">- blacklist.conf: add a kasan fix
- commit c85e2d1</changelog>
  <changelog author="jdelvare@suse.de" date="1540900803">- Add reference to bsc#1104124 to
  patches.fixes/fs-aio-fix-the-increment-of-aio-nr-and-counting-agai.patch
- commit f60e64b</changelog>
  <changelog author="jslaby@suse.cz" date="1540900804">- tools build: fix # escaping in .cmd files for future Make
  (git-fixes).
- Kbuild: fix # escaping in .cmd files for future Make
  (git-fixes).
- commit 8f11ec3</changelog>
  <changelog author="tiwai@suse.de" date="1540900805">- drm/i915/dp: Link train Fallback on eDP only if fallback link
  BW can fit panel's native mode (bsc#1051510).
- drm/i915: Restore vblank interrupts earlier (bsc#1051510).
- commit daf120f</changelog>
  <changelog author="tiwai@suse.de" date="1540900806">- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
  (bsc#1051510).
- media: cx231xx: fix potential sign-extension overflow on large
  shift (bsc#1051510).
- media: pci: cx23885: handle adding to list failure
  (bsc#1051510).
- media: vsp1: Fix YCbCr planar formats pitch calculation
  (bsc#1051510).
- media: tvp5150: fix switch exit in set control handler
  (bsc#1051510).
- media: tvp5150: fix width alignment during set_selection()
  (bsc#1051510).
- media: em28xx: fix input name for Terratec AV 350 (bsc#1051510).
- media: em28xx: use a default format if TRY_FMT fails
  (bsc#1051510).
- media: tvp5150: avoid going past array on v4l2_querymenu()
  (bsc#1051510).
- media: dvb: fix compat ioctl translation (bsc#1051510).
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
  (bsc#1051510).
- commit 0831c5e</changelog>
  <changelog author="tiwai@suse.de" date="1540900807">- soc/tegra: pmc: Fix child-node lookup (bsc#1051510).
- serial: 8250: Fix clearing FIFOs in RS485 mode again
  (bsc#1051510).
- staging: comedi: ni_mio_common: protect register write overflow
  (bsc#1051510).
- iio: adc: at91: fix wrong channel number in triggered buffer
  mode (bsc#1051510).
- iio: adc: at91: fix acking DRDY irq on simple conversions
  (bsc#1051510).
- iio: adc: imx25-gcq: Fix leak of device_node in
  mx25_gcq_setup_cfgs() (bsc#1051510).
- commit 9f4f0cc</changelog>
  <changelog author="jthumshirn@suse.de" date="1540900808">- Refresh
  patches.fixes/0001-drm-amdgpu-powerplay-fix-missing-break-in-switch-sta.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Do-not-carry-error-code-in-HiBMC.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Don-t-overwrite-fb-helper-surfac.patch.
- Refresh
  patches.fixes/0001-drm-i915-audio-Hook-up-component-bindings-even-if-di.patch.
- Refresh
  patches.fixes/0001-drm-i915-gen9-Fix-initial-readout-for-Y-tiled-frameb.patch.
- Refresh
  patches.fixes/0001-drm-sti-do-not-remove-the-drm_bridge-that-was-never-.patch.
- Refresh
  patches.fixes/0001-drm-virtio-fix-bounds-check-in-virtio_gpu_cmd_get_ca.patch.
- commit 652fab5</changelog>
  <changelog author="tiwai@suse.de" date="1540987200">- drm/nouveau: Don't disable polling in fallback mode
  (bsc#1103356).
- Delete
  patches.suse/Revert-drm-nouveau-drm-therm-fan-add-a-fallback-if-n.
- commit aa0c431</changelog>
  <changelog author="tzimmermann@suse.de" date="1540987201">- Fix Patch-mainline for "drm/amdgpu: update tmr mc address"
  The Patch-mainline tag was incorrect. References is being updated as well.
- commit ce8535e</changelog>
  <changelog author="tiwai@suse.de" date="1540987202">- Workaround for mysterious NVMe breakage with i915 CFL
  (bsc#1111040).
- commit 0fa5877</changelog>
  <changelog author="jthumshirn@suse.de" date="1540987203">- libnvdimm, label: Fix sparse warning (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Use namespace index data to reduce number of label reads
  needed (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Split label init out from the logic for getting config
  data (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Remove empty if statement (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Clarify comment in sizeof_namespace_index (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Sanity check labeloff (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- libnvdimm, dimm: Maximize label transfer size (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7
  (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- commit 5a4eeb4</changelog>
  <changelog author="jlee@suse.com" date="1540987204">- x86/boot/KASLR: Work around firmware bugs by excluding
  EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR's choice
  (bnc#1112878).
- commit d45cd78</changelog>
  <changelog author="tiwai@suse.de" date="1540987205">- blacklist.conf: Add a few wifi driver entries that can't be applied
- commit 662fc68</changelog>
  <changelog author="tiwai@suse.de" date="1540987206">- spi/bcm63xx-hsspi: keep pll clk enabled (bsc#1051510).
- spi: sh-msiof: fix deferred probing (bsc#1051510).
- spi: bcm-qspi: switch back to reading flash using smaller chunks
  (bsc#1051510).
- commit f773242</changelog>
</package>
<package pkgid="635b86685405bceb3530072f25ad8b63077cb0289721b4156cca77b11a53b3cc" name="kernel-syms" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="7abec3074659ddd1e3841a2d7c4b24692585f6d147459cd2aa9fc28e8cabeb04" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="ef854b25879bcda245d87bc0e595c62eae99f31667c29c5ae70e2336356690b6" name="kernel-syms" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="6b9a9195ad5cdabe7f21c4f40a703e531ec7ce50792d4ab92f1bd7e4cceac906" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="a171270b8c1e7f011bf76be6c90baee8071052262cebdd7a6a578e80e34346fe" name="kernel-vanilla" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="3d5620bd9da7967fb7279ee30e8a1977fa980deb24a64824413c9b4c5f60c330" name="kernel-vanilla" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="fd5176f9ccb0495d8fd5d01687c683498341d6e449f10f1265194f675826dc76" name="kernel-vanilla" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="41ab2abe1b17f5bf056032cb77aca69ef3a68fbd8ec70316acc98fde87a8c212" name="kernel-vanilla" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="80d8fa707e84f3ca908b684739fcc8ecb2dfdc5e0f268e39ee15bd46404f3c39" name="kernel-vanilla" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="265bc95a3a0d89b81bc801de7fd945b32e8a36562cdc029edc5f13e37c9a3518" name="kernel-vanilla" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="d1fabfa2e330854fd3e1665380c733f4c692c068c4a9144e4ad051e425ca9dd6" name="kernel-vanilla" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.19.2"/>
  <changelog author="fdmanana@suse.com" date="1538568000">- Btrfs: fix fsync after hole punching when using no-holes feature
  (bsc#1110642).
- commit 3f19b40</changelog>
  <changelog author="fdmanana@suse.com" date="1538568001">- Btrfs: fix loss of prealloc extents past i_size after fsync
  log replay (bsc#1110643).
- commit 974e057</changelog>
  <changelog author="fdmanana@suse.com" date="1538568002">- Btrfs: fix duplicate extents after fsync of file with prealloc
  extents (bsc#1110644).
- commit c4ec603</changelog>
  <changelog author="fdmanana@suse.com" date="1538568003">- Btrfs: fix return value on rename exchange failure
  (bsc#1110645).
- commit 532729c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568004">- Btrfs: sync log after logging new name (bsc#1110646).
- commit 7260d6b</changelog>
  <changelog author="fdmanana@suse.com" date="1538568005">- Btrfs: fix data corruption when deduplicating between different
  files (bsc#1110647).
- commit 669848c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568006">- btrfs: Remove unused parameters from various functions
  (bsc#1110649).
- commit c97c657</changelog>
  <changelog author="fdmanana@suse.com" date="1538568007">- Btrfs: fix send failure when root has deleted files still open
  (bsc#1110650).
- commit f52554d</changelog>
  <changelog author="jslaby@suse.cz" date="1538568008">- watchdog: Mark watchdog touch functions as notrace (git-fixes).
- commit 8b53193</changelog>
  <changelog author="neilb@suse.com" date="1538654400">- nfs/filelayout: fix oops when freeing filelayout segment
  (bsc#1105190).
- NFS/filelayout: Fix racy setting of fl-&gt;dsaddr in
  filelayout_check_deviceid() (bsc#1105190).
- commit d6d0fab</changelog>
  <changelog author="neilb@suse.com" date="1538654401">- VFS: don't test owner for NFS in set_posix_acl() (bsc#1103405).
- commit 36f977a</changelog>
  <changelog author="tiwai@suse.de" date="1538654402">- README.BRANCH: SLE15-SP1 branch maintainer changes
  Add ptesarik as co-maintainer, keep tiwai as the primary maintainer
- commit 83aea11</changelog>
  <changelog author="wqu@suse.com" date="1538654403">- btrfs: tests/qgroup: Fix wrong tree backref level (bsc#1107928).
- commit a5e154c</changelog>
  <changelog author="wqu@suse.com" date="1538654404">- btrfs: check-integrity: Fix NULL pointer dereference for
  degraded mount (bsc#1107947).
- commit 77b2277</changelog>
  <changelog author="wqu@suse.com" date="1538654405">- btrfs: scrub: Don't use inode pages for device replace (follow
  up for bsc#1108096).
- commit c865775</changelog>
  <changelog author="tiwai@suse.de" date="1538654406">- ASoC: cs4265: fix MMTLR Data switch control (bsc#1051510).
- ALSA: fireworks: fix memory leak of response buffer at error
  path (bsc#1051510).
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix
  I/O at error path (bsc#1051510).
- ALSA: emu10k1: fix possible info leak to userspace on
  SNDRV_EMU10K1_IOCTL_INFO (bsc#1051510).
- ALSA: bebob: use address returned by kmalloc() instead of
  kernel stack for streaming DMA mapping (bsc#1051510).
- ASoC: rt5514: Fix the issue of the delay volume applied
  (bsc#1051510).
- ASoC: dapm: Fix potential DAI widget pointer deref when linking
  DAIs (bsc#1051510).
- ALSA: msnd: Fix the default sample sizes (bsc#1051510).
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE()
  macro (bsc#1051510).
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
  (bsc#1051510).
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
  (bsc#1051510).
- ASoC: rt5514: Add the missing register in the readable table
  (bsc#1051510).
- ASoC: rt5514: Eliminate the noise in the ASRC case
  (bsc#1051510).
- ASoC: rt5514: Add the I2S ASRC support (bsc#1051510).
- commit 4eba9c8</changelog>
  <changelog author="wqu@suse.com" date="1538654407">- btrfs: scrub: Don't use inode page cache in
  scrub_handle_errored_block() (follow up for bsc#1108096).
- commit 3f91c84</changelog>
  <changelog author="tiwai@suse.de" date="1538654408">- smsc95xx: Check for Wake-on-LAN modes (bsc#1051510).
- smsc75xx: Check for Wake-on-LAN modes (bsc#1051510).
- r8152: Check for supported Wake-on-LAN Modes (bsc#1051510).
- sr9800: Check for supported Wake-on-LAN modes (bsc#1051510).
- lan78xx: Check for supported Wake-on-LAN modes (bsc#1051510).
- ax88179_178a: Check for supported Wake-on-LAN modes
  (bsc#1051510).
- mac80211: fix pending queue hang due to TX_DROP (bsc#1051510).
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
  (bsc#1051510).
- Input: elantech - enable middle button of touchpad on ThinkPad
  P72 (bsc#1051510).
- regulator: fix crash caused by null driver data (bsc#1051510).
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
  (bsc#1051510).
- intel_th: Fix device removal logic (bsc#1051510).
- NFC: Fix possible memory corruption when handling SHDLC I-Frame
  commands (bsc#1051510).
- platform/x86: alienware-wmi: Correct a memory leak
  (bsc#1051510).
- xhci: Fix use after free for URB cancellation on a reallocated
  endpoint (bsc#1051510).
- mei: ignore not found client in the enumeration (bsc#1051510).
- i2c: i801: Allow ACPI AML access I/O ports not reserved for
  SMBus (bsc#1051510).
- fbdev/via: fix defined but not used warning (bsc#1051510).
- video: goldfishfb: fix memory leak on driver remove
  (bsc#1051510).
- fbdev: Distinguish between interlaced and progressive modes
  (bsc#1051510).
- platform/x86: toshiba_acpi: Fix defined but not used build
  warnings (bsc#1051510).
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
  (bsc#1051510).
- input: rohm_bu21023: switch to i2c_lock_bus(...,
  I2C_LOCK_SEGMENT) (bsc#1051510).
- HID: hid-ntrig: add error handling for sysfs_create_group
  (bsc#1051510).
- mfd: ti_am335x_tscadc: Fix struct clk memory leak (bsc#1051510).
- mmc: sdhci: do not try to use 3.3V signaling if not supported
  (bsc#1051510).
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
  (bsc#1051510).
- parport: sunbpp: fix error return code (bsc#1051510).
- coresight: Handle errors in finding input/output ports
  (bsc#1051510).
- mei: bus: type promotion bug in mei_nfc_if_version()
  (bsc#1051510).
- gpio: pxa: Fix potential NULL dereference (bsc#1051510).
- gpiolib: Mark gpio_suffixes array with __maybe_unused
  (bsc#1051510).
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
  (bsc#1051510).
- crypto: sharah - Unregister correct algorithms for SAHARA 3
  (bsc#1051510).
- crypto: skcipher - Fix -Wstringop-truncation warnings
  (bsc#1051510).
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
  (bsc#1051510).
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 (bsc#1051510).
- mac80211: restrict delayed tailroom needed decrement
  (bsc#1051510).
- wlcore: Add missing PM call for
  wlcore_cmd_wait_for_event_or_timeout() (bsc#1051510).
- commit e266792</changelog>
  <changelog author="mbrugger@suse.com" date="1538654409">- arm64: Update config files. (bsc#1110716)
  Enable ST LPS25H pressure sensor.
- commit 69c6902</changelog>
  <changelog author="jack@suse.cz" date="1538654410">- patches.fixes/x86-memory_failure-Introduce-set-clear-_mce_nospec.patch:
  Fixup compilation breakage on s390 and arm due to missing
  clear_mce_nospec().
- commit faef795</changelog>
</package>
<package pkgid="d77e987feba7e07d896e83916e0e4a6347aefcf5fb3a058ade7449c1a227b2cc" name="kernel-vanilla" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.19.2"/>
  <changelog author="fdmanana@suse.com" date="1538568000">- Btrfs: fix fsync after hole punching when using no-holes feature
  (bsc#1110642).
- commit 3f19b40</changelog>
  <changelog author="fdmanana@suse.com" date="1538568001">- Btrfs: fix loss of prealloc extents past i_size after fsync
  log replay (bsc#1110643).
- commit 974e057</changelog>
  <changelog author="fdmanana@suse.com" date="1538568002">- Btrfs: fix duplicate extents after fsync of file with prealloc
  extents (bsc#1110644).
- commit c4ec603</changelog>
  <changelog author="fdmanana@suse.com" date="1538568003">- Btrfs: fix return value on rename exchange failure
  (bsc#1110645).
- commit 532729c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568004">- Btrfs: sync log after logging new name (bsc#1110646).
- commit 7260d6b</changelog>
  <changelog author="fdmanana@suse.com" date="1538568005">- Btrfs: fix data corruption when deduplicating between different
  files (bsc#1110647).
- commit 669848c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568006">- btrfs: Remove unused parameters from various functions
  (bsc#1110649).
- commit c97c657</changelog>
  <changelog author="fdmanana@suse.com" date="1538568007">- Btrfs: fix send failure when root has deleted files still open
  (bsc#1110650).
- commit f52554d</changelog>
  <changelog author="jslaby@suse.cz" date="1538568008">- watchdog: Mark watchdog touch functions as notrace (git-fixes).
- commit 8b53193</changelog>
  <changelog author="neilb@suse.com" date="1538654400">- nfs/filelayout: fix oops when freeing filelayout segment
  (bsc#1105190).
- NFS/filelayout: Fix racy setting of fl-&gt;dsaddr in
  filelayout_check_deviceid() (bsc#1105190).
- commit d6d0fab</changelog>
  <changelog author="neilb@suse.com" date="1538654401">- VFS: don't test owner for NFS in set_posix_acl() (bsc#1103405).
- commit 36f977a</changelog>
  <changelog author="tiwai@suse.de" date="1538654402">- README.BRANCH: SLE15-SP1 branch maintainer changes
  Add ptesarik as co-maintainer, keep tiwai as the primary maintainer
- commit 83aea11</changelog>
  <changelog author="wqu@suse.com" date="1538654403">- btrfs: tests/qgroup: Fix wrong tree backref level (bsc#1107928).
- commit a5e154c</changelog>
  <changelog author="wqu@suse.com" date="1538654404">- btrfs: check-integrity: Fix NULL pointer dereference for
  degraded mount (bsc#1107947).
- commit 77b2277</changelog>
  <changelog author="wqu@suse.com" date="1538654405">- btrfs: scrub: Don't use inode pages for device replace (follow
  up for bsc#1108096).
- commit c865775</changelog>
  <changelog author="tiwai@suse.de" date="1538654406">- ASoC: cs4265: fix MMTLR Data switch control (bsc#1051510).
- ALSA: fireworks: fix memory leak of response buffer at error
  path (bsc#1051510).
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix
  I/O at error path (bsc#1051510).
- ALSA: emu10k1: fix possible info leak to userspace on
  SNDRV_EMU10K1_IOCTL_INFO (bsc#1051510).
- ALSA: bebob: use address returned by kmalloc() instead of
  kernel stack for streaming DMA mapping (bsc#1051510).
- ASoC: rt5514: Fix the issue of the delay volume applied
  (bsc#1051510).
- ASoC: dapm: Fix potential DAI widget pointer deref when linking
  DAIs (bsc#1051510).
- ALSA: msnd: Fix the default sample sizes (bsc#1051510).
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE()
  macro (bsc#1051510).
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
  (bsc#1051510).
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
  (bsc#1051510).
- ASoC: rt5514: Add the missing register in the readable table
  (bsc#1051510).
- ASoC: rt5514: Eliminate the noise in the ASRC case
  (bsc#1051510).
- ASoC: rt5514: Add the I2S ASRC support (bsc#1051510).
- commit 4eba9c8</changelog>
  <changelog author="wqu@suse.com" date="1538654407">- btrfs: scrub: Don't use inode page cache in
  scrub_handle_errored_block() (follow up for bsc#1108096).
- commit 3f91c84</changelog>
  <changelog author="tiwai@suse.de" date="1538654408">- smsc95xx: Check for Wake-on-LAN modes (bsc#1051510).
- smsc75xx: Check for Wake-on-LAN modes (bsc#1051510).
- r8152: Check for supported Wake-on-LAN Modes (bsc#1051510).
- sr9800: Check for supported Wake-on-LAN modes (bsc#1051510).
- lan78xx: Check for supported Wake-on-LAN modes (bsc#1051510).
- ax88179_178a: Check for supported Wake-on-LAN modes
  (bsc#1051510).
- mac80211: fix pending queue hang due to TX_DROP (bsc#1051510).
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
  (bsc#1051510).
- Input: elantech - enable middle button of touchpad on ThinkPad
  P72 (bsc#1051510).
- regulator: fix crash caused by null driver data (bsc#1051510).
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
  (bsc#1051510).
- intel_th: Fix device removal logic (bsc#1051510).
- NFC: Fix possible memory corruption when handling SHDLC I-Frame
  commands (bsc#1051510).
- platform/x86: alienware-wmi: Correct a memory leak
  (bsc#1051510).
- xhci: Fix use after free for URB cancellation on a reallocated
  endpoint (bsc#1051510).
- mei: ignore not found client in the enumeration (bsc#1051510).
- i2c: i801: Allow ACPI AML access I/O ports not reserved for
  SMBus (bsc#1051510).
- fbdev/via: fix defined but not used warning (bsc#1051510).
- video: goldfishfb: fix memory leak on driver remove
  (bsc#1051510).
- fbdev: Distinguish between interlaced and progressive modes
  (bsc#1051510).
- platform/x86: toshiba_acpi: Fix defined but not used build
  warnings (bsc#1051510).
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
  (bsc#1051510).
- input: rohm_bu21023: switch to i2c_lock_bus(...,
  I2C_LOCK_SEGMENT) (bsc#1051510).
- HID: hid-ntrig: add error handling for sysfs_create_group
  (bsc#1051510).
- mfd: ti_am335x_tscadc: Fix struct clk memory leak (bsc#1051510).
- mmc: sdhci: do not try to use 3.3V signaling if not supported
  (bsc#1051510).
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
  (bsc#1051510).
- parport: sunbpp: fix error return code (bsc#1051510).
- coresight: Handle errors in finding input/output ports
  (bsc#1051510).
- mei: bus: type promotion bug in mei_nfc_if_version()
  (bsc#1051510).
- gpio: pxa: Fix potential NULL dereference (bsc#1051510).
- gpiolib: Mark gpio_suffixes array with __maybe_unused
  (bsc#1051510).
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
  (bsc#1051510).
- crypto: sharah - Unregister correct algorithms for SAHARA 3
  (bsc#1051510).
- crypto: skcipher - Fix -Wstringop-truncation warnings
  (bsc#1051510).
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
  (bsc#1051510).
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 (bsc#1051510).
- mac80211: restrict delayed tailroom needed decrement
  (bsc#1051510).
- wlcore: Add missing PM call for
  wlcore_cmd_wait_for_event_or_timeout() (bsc#1051510).
- commit e266792</changelog>
  <changelog author="mbrugger@suse.com" date="1538654409">- arm64: Update config files. (bsc#1110716)
  Enable ST LPS25H pressure sensor.
- commit 69c6902</changelog>
  <changelog author="jack@suse.cz" date="1538654410">- patches.fixes/x86-memory_failure-Introduce-set-clear-_mce_nospec.patch:
  Fixup compilation breakage on s390 and arm due to missing
  clear_mce_nospec().
- commit faef795</changelog>
</package>
<package pkgid="c5d8974f5711c7ed6cafdc1a5df0b17058f1c77e5a9da6c6561408e86c40c418" name="kernel-vanilla" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.22.1"/>
  <changelog author="tiwai@suse.de" date="1539172800">- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell
  XPS 27 7760 (bsc#1051510).
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
  (bsc#1051510).
- crypto: mxs-dcp - Fix wait logic on chan threads (bsc#1051510).
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM
  ioctl (bsc#1051510).
- HID: add support for Apple Magic Keyboards (bsc#1051510).
- gpio: Fix crash due to registration race (bsc#1051510).
- gpiolib-acpi: Register GpioInt ACPI event handlers from a
  late_initcall (bsc#1051510).
- gpio: adp5588: Fix sleep-in-atomic-context bug (bsc#1051510).
- cfg80211: fix a type issue in
  ieee80211_chandef_to_operating_class() (bsc#1051510).
- Revert "gpio: set up initial state from .get_direction()"
  (bsc#1051510).
- gpio: mb86s70: Revert "Return error if requesting an already
  assigned gpio" (bsc#1051510).
- commit 2759d22</changelog>
  <changelog author="mbrugger@suse.com" date="1539172801">- arm64: Update config files.
  Enable SENSORS_RASPBERRYPI_HWMON
- commit 2a83945</changelog>
  <changelog author="mbrugger@suse.com" date="1539172802">- supported.conf: mark raspberrypi-hwmon as supported
- commit af8ddda</changelog>
  <changelog author="tiwai@suse.de" date="1539172803">- HID: hid-saitek: Add device ID for RAT 7 Contagion
  (bsc#1051510).
- mac80211: shorten the IBSS debug messages (bsc#1051510).
- mac80211: don't Tx a deauth frame if the AP forbade Tx
  (bsc#1051510).
- mac80211: Fix station bandwidth setting after channel switch
  (bsc#1051510).
- mac80211: fix a race between restart and CSA flows
  (bsc#1051510).
- mac80211: do not convert to A-MSDU if frag/subframe limited
  (bsc#1051510).
- mac80211: mesh: fix HWMP sequence numbering to follow standard
  (bsc#1051510).
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211_hwsim: require at least one channel (bsc#1051510).
- mac80211: Run TXQ teardown code before de-registering interfaces
  (bsc#1051510).
- hwmon: (adt7475) Make adt7475_read_word() return errors
  (bsc#1051510).
- hwmon: (ina2xx) fix sysfs shunt resistor read access
  (bsc#1051510).
- commit af836cd</changelog>
  <changelog author="tiwai@suse.de" date="1539172804">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- Revert "mwifiex: handle race during mwifiex_usb_disconnect"
  (bsc#1051510).
- media: videobuf-dma-sg: Fix dma_{sync,unmap}_sg() calls
  (bsc#1051510).
- Revert "mwifiex: fix incorrect ht capability problem"
  (bsc#1051510).
- PM / Domains: Fix genpd to deal with drivers returning 1 from
  - &gt;prepare() (bsc#1051510).
- Revert "pinctrl: sunxi: Don't enforce bias disable (for now)"
  (bsc#1051510).
- commit fb6c36a</changelog>
  <changelog author="tiwai@suse.de" date="1539172805">- blacklist.conf: Add blacklist of inapplicable revert commits
  They are either not applicable or requiring more backports that aren't
  suitable for SLE15
- commit 987dd44</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259200">- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk (bsc#1106110)
- commit 273a6bd</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259201">- blacklist.conf: Append 'drm/amd/pp: initialize result to before or'ing in data'
- commit d2edcd9</changelog>
  <changelog author="tiwai@suse.de" date="1539259202">- Disable DRM patches that broke vbox video driver KMP (bsc#1111076)
- commit 23943c6</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259203">- blacklist.conf: Append 'Revert "drm: Use a flexible array member for blob property data"'
- commit ddc67eb</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259204">- Fix Patch-mainline tags to refer to Linux release tag
  It is expected that Patch-mainline tags refer to a release tag
  in the Linux git tree, such as v4.15. Several patches contain a
  Patch-mainline tags that instead refer to a Linux version number,
  such as 4.15. This inconsistency complicates grepping and
  automation.
  871 of 18000 patches are affected by this problem.
- commit 1d81d26</changelog>
  <changelog author="bp@suse.de" date="1539259205">- crypto: ccp - add timeout support in the SEV command
  (bsc#1106838).
- commit 912dad4</changelog>
  <changelog author="tiwai@suse.de" date="1539345600">- Update config files: update forgotten armv7hl configs
- commit 7bae3a6</changelog>
  <changelog author="msuchanek@suse.de" date="1539345601">- powerpc/numa: Skip onlining a offline node in kdump path
  (bsc#1109784).
- commit df87e51</changelog>
  <changelog author="tiwai@suse.de" date="1539345602">- squashfs metadata 2: electric boogaloo (bsc#1051510).
- squashfs: more metadata hardening (bsc#1051510).
- squashfs: be more careful about metadata corruption
  (bsc#1051510).
- commit 9bfac39</changelog>
  <changelog author="hare@suse.de" date="1539345603">- scsi: qla2xxx: Move log messages before issuing command to
  firmware (bsc#1108870).
- scsi: qla2xxx: Fix for double free of SRB structure
  (bsc#1108870).
- scsi: qla2xxx: Fix recursive mailbox timeout (bsc#1108870).
- scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
  (bsc#1108870).
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
  (bsc#1108870).
- scsi: qla2xxx: Fix duplicate switch database entries
  (bsc#1108870).
- scsi: qla2xxx: Fix NVMe Target discovery (bsc#1108870).
- scsi: qla2xxx: Fix NVMe session hang on unload (bsc#1108870).
- scsi: qla2xxx: don't allow negative thresholds (bsc#1108870).
- commit 50fe149</changelog>
  <changelog author="tiwai@suse.de" date="1539345604">- Squashfs: Compute expected length from inode size rather than
  block length (bsc#1051510).
- commit 0c4a663</changelog>
  <changelog author="tiwai@suse.de" date="1539345605">- soreuseport: initialise timewait reuseport field (bsc#1051510).
- commit bda2dcc</changelog>
  <changelog author="tiwai@suse.de" date="1539345606">- rpc_pipefs: fix double-dput() (bsc#1051510).
- commit 1a15e26</changelog>
  <changelog author="hare@suse.de" date="1539345607">- scsi: qla2xxx: Return switch command on a timeout (bsc#1108870).
- commit 8e38f2a</changelog>
</package>
<package pkgid="8af49e8cc2cde9988d04eaa010e59bcf519e91bdb2ad618360459f45e580994a" name="kernel-vanilla" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.22.1"/>
  <changelog author="tiwai@suse.de" date="1539172800">- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell
  XPS 27 7760 (bsc#1051510).
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
  (bsc#1051510).
- crypto: mxs-dcp - Fix wait logic on chan threads (bsc#1051510).
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM
  ioctl (bsc#1051510).
- HID: add support for Apple Magic Keyboards (bsc#1051510).
- gpio: Fix crash due to registration race (bsc#1051510).
- gpiolib-acpi: Register GpioInt ACPI event handlers from a
  late_initcall (bsc#1051510).
- gpio: adp5588: Fix sleep-in-atomic-context bug (bsc#1051510).
- cfg80211: fix a type issue in
  ieee80211_chandef_to_operating_class() (bsc#1051510).
- Revert "gpio: set up initial state from .get_direction()"
  (bsc#1051510).
- gpio: mb86s70: Revert "Return error if requesting an already
  assigned gpio" (bsc#1051510).
- commit 2759d22</changelog>
  <changelog author="mbrugger@suse.com" date="1539172801">- arm64: Update config files.
  Enable SENSORS_RASPBERRYPI_HWMON
- commit 2a83945</changelog>
  <changelog author="mbrugger@suse.com" date="1539172802">- supported.conf: mark raspberrypi-hwmon as supported
- commit af8ddda</changelog>
  <changelog author="tiwai@suse.de" date="1539172803">- HID: hid-saitek: Add device ID for RAT 7 Contagion
  (bsc#1051510).
- mac80211: shorten the IBSS debug messages (bsc#1051510).
- mac80211: don't Tx a deauth frame if the AP forbade Tx
  (bsc#1051510).
- mac80211: Fix station bandwidth setting after channel switch
  (bsc#1051510).
- mac80211: fix a race between restart and CSA flows
  (bsc#1051510).
- mac80211: do not convert to A-MSDU if frag/subframe limited
  (bsc#1051510).
- mac80211: mesh: fix HWMP sequence numbering to follow standard
  (bsc#1051510).
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211_hwsim: require at least one channel (bsc#1051510).
- mac80211: Run TXQ teardown code before de-registering interfaces
  (bsc#1051510).
- hwmon: (adt7475) Make adt7475_read_word() return errors
  (bsc#1051510).
- hwmon: (ina2xx) fix sysfs shunt resistor read access
  (bsc#1051510).
- commit af836cd</changelog>
  <changelog author="tiwai@suse.de" date="1539172804">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- Revert "mwifiex: handle race during mwifiex_usb_disconnect"
  (bsc#1051510).
- media: videobuf-dma-sg: Fix dma_{sync,unmap}_sg() calls
  (bsc#1051510).
- Revert "mwifiex: fix incorrect ht capability problem"
  (bsc#1051510).
- PM / Domains: Fix genpd to deal with drivers returning 1 from
  - &gt;prepare() (bsc#1051510).
- Revert "pinctrl: sunxi: Don't enforce bias disable (for now)"
  (bsc#1051510).
- commit fb6c36a</changelog>
  <changelog author="tiwai@suse.de" date="1539172805">- blacklist.conf: Add blacklist of inapplicable revert commits
  They are either not applicable or requiring more backports that aren't
  suitable for SLE15
- commit 987dd44</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259200">- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk (bsc#1106110)
- commit 273a6bd</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259201">- blacklist.conf: Append 'drm/amd/pp: initialize result to before or'ing in data'
- commit d2edcd9</changelog>
  <changelog author="tiwai@suse.de" date="1539259202">- Disable DRM patches that broke vbox video driver KMP (bsc#1111076)
- commit 23943c6</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259203">- blacklist.conf: Append 'Revert "drm: Use a flexible array member for blob property data"'
- commit ddc67eb</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259204">- Fix Patch-mainline tags to refer to Linux release tag
  It is expected that Patch-mainline tags refer to a release tag
  in the Linux git tree, such as v4.15. Several patches contain a
  Patch-mainline tags that instead refer to a Linux version number,
  such as 4.15. This inconsistency complicates grepping and
  automation.
  871 of 18000 patches are affected by this problem.
- commit 1d81d26</changelog>
  <changelog author="bp@suse.de" date="1539259205">- crypto: ccp - add timeout support in the SEV command
  (bsc#1106838).
- commit 912dad4</changelog>
  <changelog author="tiwai@suse.de" date="1539345600">- Update config files: update forgotten armv7hl configs
- commit 7bae3a6</changelog>
  <changelog author="msuchanek@suse.de" date="1539345601">- powerpc/numa: Skip onlining a offline node in kdump path
  (bsc#1109784).
- commit df87e51</changelog>
  <changelog author="tiwai@suse.de" date="1539345602">- squashfs metadata 2: electric boogaloo (bsc#1051510).
- squashfs: more metadata hardening (bsc#1051510).
- squashfs: be more careful about metadata corruption
  (bsc#1051510).
- commit 9bfac39</changelog>
  <changelog author="hare@suse.de" date="1539345603">- scsi: qla2xxx: Move log messages before issuing command to
  firmware (bsc#1108870).
- scsi: qla2xxx: Fix for double free of SRB structure
  (bsc#1108870).
- scsi: qla2xxx: Fix recursive mailbox timeout (bsc#1108870).
- scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
  (bsc#1108870).
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
  (bsc#1108870).
- scsi: qla2xxx: Fix duplicate switch database entries
  (bsc#1108870).
- scsi: qla2xxx: Fix NVMe Target discovery (bsc#1108870).
- scsi: qla2xxx: Fix NVMe session hang on unload (bsc#1108870).
- scsi: qla2xxx: don't allow negative thresholds (bsc#1108870).
- commit 50fe149</changelog>
  <changelog author="tiwai@suse.de" date="1539345604">- Squashfs: Compute expected length from inode size rather than
  block length (bsc#1051510).
- commit 0c4a663</changelog>
  <changelog author="tiwai@suse.de" date="1539345605">- soreuseport: initialise timewait reuseport field (bsc#1051510).
- commit bda2dcc</changelog>
  <changelog author="tiwai@suse.de" date="1539345606">- rpc_pipefs: fix double-dput() (bsc#1051510).
- commit 1a15e26</changelog>
  <changelog author="hare@suse.de" date="1539345607">- scsi: qla2xxx: Return switch command on a timeout (bsc#1108870).
- commit 8e38f2a</changelog>
</package>
<package pkgid="89399f09a7d358c6a1e181f1cd2f9a60f464d65476ab0a76e248456b97d52b64" name="kernel-vanilla" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.25.1"/>
  <changelog author="tiwai@suse.de" date="1540814400">- NFC: nfcmrvl_uart: fix OF child-node lookup (bsc#1051510).
- kernfs: update comment about kernfs_path() return value
  (bsc#1051510).
- usbip: tools: fix atoi() on non-null terminated string
  (bsc#1051510).
- USB: serial: cypress_m8: fix interrupt-out transfer length
  (bsc#1051510).
- usb: chipidea: Prevent unbalanced IRQ disable (bsc#1051510).
- commit 6c9d1e7</changelog>
  <changelog author="tiwai@suse.de" date="1540814401">- blacklist.conf: Add ASoC and USB entries that may break kABI
- commit 199a072</changelog>
  <changelog author="tiwai@suse.de" date="1540814402">- usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation
  (bsc#1051510).
- usb: gadget: fsl_udc_core: check allocation return value and
  cleanup on failure (bsc#1051510).
- commit c1b7b66</changelog>
  <changelog author="tiwai@suse.de" date="1540814403">- Refresh patch tag of upstreamed patches and move to sorted section
- commit a966b56</changelog>
  <changelog author="ohering@suse.de" date="1540900800">- move changes without Git-commit out of sorted section
- commit cbf049e</changelog>
  <changelog author="jslaby@suse.cz" date="1540900801">- random: rate limit unseeded randomness warnings (git-fixes).
- commit be52b92</changelog>
  <changelog author="jslaby@suse.cz" date="1540900802">- blacklist.conf: add a kasan fix
- commit c85e2d1</changelog>
  <changelog author="jdelvare@suse.de" date="1540900803">- Add reference to bsc#1104124 to
  patches.fixes/fs-aio-fix-the-increment-of-aio-nr-and-counting-agai.patch
- commit f60e64b</changelog>
  <changelog author="jslaby@suse.cz" date="1540900804">- tools build: fix # escaping in .cmd files for future Make
  (git-fixes).
- Kbuild: fix # escaping in .cmd files for future Make
  (git-fixes).
- commit 8f11ec3</changelog>
  <changelog author="tiwai@suse.de" date="1540900805">- drm/i915/dp: Link train Fallback on eDP only if fallback link
  BW can fit panel's native mode (bsc#1051510).
- drm/i915: Restore vblank interrupts earlier (bsc#1051510).
- commit daf120f</changelog>
  <changelog author="tiwai@suse.de" date="1540900806">- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
  (bsc#1051510).
- media: cx231xx: fix potential sign-extension overflow on large
  shift (bsc#1051510).
- media: pci: cx23885: handle adding to list failure
  (bsc#1051510).
- media: vsp1: Fix YCbCr planar formats pitch calculation
  (bsc#1051510).
- media: tvp5150: fix switch exit in set control handler
  (bsc#1051510).
- media: tvp5150: fix width alignment during set_selection()
  (bsc#1051510).
- media: em28xx: fix input name for Terratec AV 350 (bsc#1051510).
- media: em28xx: use a default format if TRY_FMT fails
  (bsc#1051510).
- media: tvp5150: avoid going past array on v4l2_querymenu()
  (bsc#1051510).
- media: dvb: fix compat ioctl translation (bsc#1051510).
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
  (bsc#1051510).
- commit 0831c5e</changelog>
  <changelog author="tiwai@suse.de" date="1540900807">- soc/tegra: pmc: Fix child-node lookup (bsc#1051510).
- serial: 8250: Fix clearing FIFOs in RS485 mode again
  (bsc#1051510).
- staging: comedi: ni_mio_common: protect register write overflow
  (bsc#1051510).
- iio: adc: at91: fix wrong channel number in triggered buffer
  mode (bsc#1051510).
- iio: adc: at91: fix acking DRDY irq on simple conversions
  (bsc#1051510).
- iio: adc: imx25-gcq: Fix leak of device_node in
  mx25_gcq_setup_cfgs() (bsc#1051510).
- commit 9f4f0cc</changelog>
  <changelog author="jthumshirn@suse.de" date="1540900808">- Refresh
  patches.fixes/0001-drm-amdgpu-powerplay-fix-missing-break-in-switch-sta.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Do-not-carry-error-code-in-HiBMC.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Don-t-overwrite-fb-helper-surfac.patch.
- Refresh
  patches.fixes/0001-drm-i915-audio-Hook-up-component-bindings-even-if-di.patch.
- Refresh
  patches.fixes/0001-drm-i915-gen9-Fix-initial-readout-for-Y-tiled-frameb.patch.
- Refresh
  patches.fixes/0001-drm-sti-do-not-remove-the-drm_bridge-that-was-never-.patch.
- Refresh
  patches.fixes/0001-drm-virtio-fix-bounds-check-in-virtio_gpu_cmd_get_ca.patch.
- commit 652fab5</changelog>
  <changelog author="tiwai@suse.de" date="1540987200">- drm/nouveau: Don't disable polling in fallback mode
  (bsc#1103356).
- Delete
  patches.suse/Revert-drm-nouveau-drm-therm-fan-add-a-fallback-if-n.
- commit aa0c431</changelog>
  <changelog author="tzimmermann@suse.de" date="1540987201">- Fix Patch-mainline for "drm/amdgpu: update tmr mc address"
  The Patch-mainline tag was incorrect. References is being updated as well.
- commit ce8535e</changelog>
  <changelog author="tiwai@suse.de" date="1540987202">- Workaround for mysterious NVMe breakage with i915 CFL
  (bsc#1111040).
- commit 0fa5877</changelog>
  <changelog author="jthumshirn@suse.de" date="1540987203">- libnvdimm, label: Fix sparse warning (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Use namespace index data to reduce number of label reads
  needed (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Split label init out from the logic for getting config
  data (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Remove empty if statement (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Clarify comment in sizeof_namespace_index (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Sanity check labeloff (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- libnvdimm, dimm: Maximize label transfer size (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7
  (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- commit 5a4eeb4</changelog>
  <changelog author="jlee@suse.com" date="1540987204">- x86/boot/KASLR: Work around firmware bugs by excluding
  EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR's choice
  (bnc#1112878).
- commit d45cd78</changelog>
  <changelog author="tiwai@suse.de" date="1540987205">- blacklist.conf: Add a few wifi driver entries that can't be applied
- commit 662fc68</changelog>
  <changelog author="tiwai@suse.de" date="1540987206">- spi/bcm63xx-hsspi: keep pll clk enabled (bsc#1051510).
- spi: sh-msiof: fix deferred probing (bsc#1051510).
- spi: bcm-qspi: switch back to reading flash using smaller chunks
  (bsc#1051510).
- commit f773242</changelog>
</package>
<package pkgid="662dde1509f8727a770caf06368e21180c6779d3bc6dc5059938df8fb10726fb" name="kernel-vanilla" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.25.1"/>
  <changelog author="tiwai@suse.de" date="1540814400">- NFC: nfcmrvl_uart: fix OF child-node lookup (bsc#1051510).
- kernfs: update comment about kernfs_path() return value
  (bsc#1051510).
- usbip: tools: fix atoi() on non-null terminated string
  (bsc#1051510).
- USB: serial: cypress_m8: fix interrupt-out transfer length
  (bsc#1051510).
- usb: chipidea: Prevent unbalanced IRQ disable (bsc#1051510).
- commit 6c9d1e7</changelog>
  <changelog author="tiwai@suse.de" date="1540814401">- blacklist.conf: Add ASoC and USB entries that may break kABI
- commit 199a072</changelog>
  <changelog author="tiwai@suse.de" date="1540814402">- usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation
  (bsc#1051510).
- usb: gadget: fsl_udc_core: check allocation return value and
  cleanup on failure (bsc#1051510).
- commit c1b7b66</changelog>
  <changelog author="tiwai@suse.de" date="1540814403">- Refresh patch tag of upstreamed patches and move to sorted section
- commit a966b56</changelog>
  <changelog author="ohering@suse.de" date="1540900800">- move changes without Git-commit out of sorted section
- commit cbf049e</changelog>
  <changelog author="jslaby@suse.cz" date="1540900801">- random: rate limit unseeded randomness warnings (git-fixes).
- commit be52b92</changelog>
  <changelog author="jslaby@suse.cz" date="1540900802">- blacklist.conf: add a kasan fix
- commit c85e2d1</changelog>
  <changelog author="jdelvare@suse.de" date="1540900803">- Add reference to bsc#1104124 to
  patches.fixes/fs-aio-fix-the-increment-of-aio-nr-and-counting-agai.patch
- commit f60e64b</changelog>
  <changelog author="jslaby@suse.cz" date="1540900804">- tools build: fix # escaping in .cmd files for future Make
  (git-fixes).
- Kbuild: fix # escaping in .cmd files for future Make
  (git-fixes).
- commit 8f11ec3</changelog>
  <changelog author="tiwai@suse.de" date="1540900805">- drm/i915/dp: Link train Fallback on eDP only if fallback link
  BW can fit panel's native mode (bsc#1051510).
- drm/i915: Restore vblank interrupts earlier (bsc#1051510).
- commit daf120f</changelog>
  <changelog author="tiwai@suse.de" date="1540900806">- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
  (bsc#1051510).
- media: cx231xx: fix potential sign-extension overflow on large
  shift (bsc#1051510).
- media: pci: cx23885: handle adding to list failure
  (bsc#1051510).
- media: vsp1: Fix YCbCr planar formats pitch calculation
  (bsc#1051510).
- media: tvp5150: fix switch exit in set control handler
  (bsc#1051510).
- media: tvp5150: fix width alignment during set_selection()
  (bsc#1051510).
- media: em28xx: fix input name for Terratec AV 350 (bsc#1051510).
- media: em28xx: use a default format if TRY_FMT fails
  (bsc#1051510).
- media: tvp5150: avoid going past array on v4l2_querymenu()
  (bsc#1051510).
- media: dvb: fix compat ioctl translation (bsc#1051510).
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
  (bsc#1051510).
- commit 0831c5e</changelog>
  <changelog author="tiwai@suse.de" date="1540900807">- soc/tegra: pmc: Fix child-node lookup (bsc#1051510).
- serial: 8250: Fix clearing FIFOs in RS485 mode again
  (bsc#1051510).
- staging: comedi: ni_mio_common: protect register write overflow
  (bsc#1051510).
- iio: adc: at91: fix wrong channel number in triggered buffer
  mode (bsc#1051510).
- iio: adc: at91: fix acking DRDY irq on simple conversions
  (bsc#1051510).
- iio: adc: imx25-gcq: Fix leak of device_node in
  mx25_gcq_setup_cfgs() (bsc#1051510).
- commit 9f4f0cc</changelog>
  <changelog author="jthumshirn@suse.de" date="1540900808">- Refresh
  patches.fixes/0001-drm-amdgpu-powerplay-fix-missing-break-in-switch-sta.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Do-not-carry-error-code-in-HiBMC.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Don-t-overwrite-fb-helper-surfac.patch.
- Refresh
  patches.fixes/0001-drm-i915-audio-Hook-up-component-bindings-even-if-di.patch.
- Refresh
  patches.fixes/0001-drm-i915-gen9-Fix-initial-readout-for-Y-tiled-frameb.patch.
- Refresh
  patches.fixes/0001-drm-sti-do-not-remove-the-drm_bridge-that-was-never-.patch.
- Refresh
  patches.fixes/0001-drm-virtio-fix-bounds-check-in-virtio_gpu_cmd_get_ca.patch.
- commit 652fab5</changelog>
  <changelog author="tiwai@suse.de" date="1540987200">- drm/nouveau: Don't disable polling in fallback mode
  (bsc#1103356).
- Delete
  patches.suse/Revert-drm-nouveau-drm-therm-fan-add-a-fallback-if-n.
- commit aa0c431</changelog>
  <changelog author="tzimmermann@suse.de" date="1540987201">- Fix Patch-mainline for "drm/amdgpu: update tmr mc address"
  The Patch-mainline tag was incorrect. References is being updated as well.
- commit ce8535e</changelog>
  <changelog author="tiwai@suse.de" date="1540987202">- Workaround for mysterious NVMe breakage with i915 CFL
  (bsc#1111040).
- commit 0fa5877</changelog>
  <changelog author="jthumshirn@suse.de" date="1540987203">- libnvdimm, label: Fix sparse warning (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Use namespace index data to reduce number of label reads
  needed (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Split label init out from the logic for getting config
  data (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Remove empty if statement (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Clarify comment in sizeof_namespace_index (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Sanity check labeloff (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- libnvdimm, dimm: Maximize label transfer size (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7
  (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- commit 5a4eeb4</changelog>
  <changelog author="jlee@suse.com" date="1540987204">- x86/boot/KASLR: Work around firmware bugs by excluding
  EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR's choice
  (bnc#1112878).
- commit d45cd78</changelog>
  <changelog author="tiwai@suse.de" date="1540987205">- blacklist.conf: Add a few wifi driver entries that can't be applied
- commit 662fc68</changelog>
  <changelog author="tiwai@suse.de" date="1540987206">- spi/bcm63xx-hsspi: keep pll clk enabled (bsc#1051510).
- spi: sh-msiof: fix deferred probing (bsc#1051510).
- spi: bcm-qspi: switch back to reading flash using smaller chunks
  (bsc#1051510).
- commit f773242</changelog>
</package>
<package pkgid="6b3e79d1562a88048dcc5e7cdf2c772a96ec78c0025fc1c36b9912f3e6394416" name="kernel-vanilla" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="85e8431bc30cb704113aca814b3b315a1b0133c4928c06a245df2bed508199e9" name="kernel-vanilla" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="23f482f086eb7a931e13ecdc97ae6f9e6b888e57ddbdfe78325fffbb0e461a7d" name="kernel-vanilla-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="0d7ae728aa55016ffc30e8cd9811977facc30e8e095754d464fdf280dd3c8493" name="kernel-vanilla-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="6e37b79c0f05054ad2e10ff01721b18860e7151abdc99cf669738f0ea4a49a9b" name="kernel-vanilla-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="83128fb96a5bbd08042826e8fdbeb5e7848527be68ad1555e64b3d0ca25fc044" name="kernel-vanilla-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.19.2"/>
  <changelog author="fdmanana@suse.com" date="1538568000">- Btrfs: fix fsync after hole punching when using no-holes feature
  (bsc#1110642).
- commit 3f19b40</changelog>
  <changelog author="fdmanana@suse.com" date="1538568001">- Btrfs: fix loss of prealloc extents past i_size after fsync
  log replay (bsc#1110643).
- commit 974e057</changelog>
  <changelog author="fdmanana@suse.com" date="1538568002">- Btrfs: fix duplicate extents after fsync of file with prealloc
  extents (bsc#1110644).
- commit c4ec603</changelog>
  <changelog author="fdmanana@suse.com" date="1538568003">- Btrfs: fix return value on rename exchange failure
  (bsc#1110645).
- commit 532729c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568004">- Btrfs: sync log after logging new name (bsc#1110646).
- commit 7260d6b</changelog>
  <changelog author="fdmanana@suse.com" date="1538568005">- Btrfs: fix data corruption when deduplicating between different
  files (bsc#1110647).
- commit 669848c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568006">- btrfs: Remove unused parameters from various functions
  (bsc#1110649).
- commit c97c657</changelog>
  <changelog author="fdmanana@suse.com" date="1538568007">- Btrfs: fix send failure when root has deleted files still open
  (bsc#1110650).
- commit f52554d</changelog>
  <changelog author="jslaby@suse.cz" date="1538568008">- watchdog: Mark watchdog touch functions as notrace (git-fixes).
- commit 8b53193</changelog>
  <changelog author="neilb@suse.com" date="1538654400">- nfs/filelayout: fix oops when freeing filelayout segment
  (bsc#1105190).
- NFS/filelayout: Fix racy setting of fl-&gt;dsaddr in
  filelayout_check_deviceid() (bsc#1105190).
- commit d6d0fab</changelog>
  <changelog author="neilb@suse.com" date="1538654401">- VFS: don't test owner for NFS in set_posix_acl() (bsc#1103405).
- commit 36f977a</changelog>
  <changelog author="tiwai@suse.de" date="1538654402">- README.BRANCH: SLE15-SP1 branch maintainer changes
  Add ptesarik as co-maintainer, keep tiwai as the primary maintainer
- commit 83aea11</changelog>
  <changelog author="wqu@suse.com" date="1538654403">- btrfs: tests/qgroup: Fix wrong tree backref level (bsc#1107928).
- commit a5e154c</changelog>
  <changelog author="wqu@suse.com" date="1538654404">- btrfs: check-integrity: Fix NULL pointer dereference for
  degraded mount (bsc#1107947).
- commit 77b2277</changelog>
  <changelog author="wqu@suse.com" date="1538654405">- btrfs: scrub: Don't use inode pages for device replace (follow
  up for bsc#1108096).
- commit c865775</changelog>
  <changelog author="tiwai@suse.de" date="1538654406">- ASoC: cs4265: fix MMTLR Data switch control (bsc#1051510).
- ALSA: fireworks: fix memory leak of response buffer at error
  path (bsc#1051510).
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix
  I/O at error path (bsc#1051510).
- ALSA: emu10k1: fix possible info leak to userspace on
  SNDRV_EMU10K1_IOCTL_INFO (bsc#1051510).
- ALSA: bebob: use address returned by kmalloc() instead of
  kernel stack for streaming DMA mapping (bsc#1051510).
- ASoC: rt5514: Fix the issue of the delay volume applied
  (bsc#1051510).
- ASoC: dapm: Fix potential DAI widget pointer deref when linking
  DAIs (bsc#1051510).
- ALSA: msnd: Fix the default sample sizes (bsc#1051510).
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE()
  macro (bsc#1051510).
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
  (bsc#1051510).
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
  (bsc#1051510).
- ASoC: rt5514: Add the missing register in the readable table
  (bsc#1051510).
- ASoC: rt5514: Eliminate the noise in the ASRC case
  (bsc#1051510).
- ASoC: rt5514: Add the I2S ASRC support (bsc#1051510).
- commit 4eba9c8</changelog>
  <changelog author="wqu@suse.com" date="1538654407">- btrfs: scrub: Don't use inode page cache in
  scrub_handle_errored_block() (follow up for bsc#1108096).
- commit 3f91c84</changelog>
  <changelog author="tiwai@suse.de" date="1538654408">- smsc95xx: Check for Wake-on-LAN modes (bsc#1051510).
- smsc75xx: Check for Wake-on-LAN modes (bsc#1051510).
- r8152: Check for supported Wake-on-LAN Modes (bsc#1051510).
- sr9800: Check for supported Wake-on-LAN modes (bsc#1051510).
- lan78xx: Check for supported Wake-on-LAN modes (bsc#1051510).
- ax88179_178a: Check for supported Wake-on-LAN modes
  (bsc#1051510).
- mac80211: fix pending queue hang due to TX_DROP (bsc#1051510).
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
  (bsc#1051510).
- Input: elantech - enable middle button of touchpad on ThinkPad
  P72 (bsc#1051510).
- regulator: fix crash caused by null driver data (bsc#1051510).
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
  (bsc#1051510).
- intel_th: Fix device removal logic (bsc#1051510).
- NFC: Fix possible memory corruption when handling SHDLC I-Frame
  commands (bsc#1051510).
- platform/x86: alienware-wmi: Correct a memory leak
  (bsc#1051510).
- xhci: Fix use after free for URB cancellation on a reallocated
  endpoint (bsc#1051510).
- mei: ignore not found client in the enumeration (bsc#1051510).
- i2c: i801: Allow ACPI AML access I/O ports not reserved for
  SMBus (bsc#1051510).
- fbdev/via: fix defined but not used warning (bsc#1051510).
- video: goldfishfb: fix memory leak on driver remove
  (bsc#1051510).
- fbdev: Distinguish between interlaced and progressive modes
  (bsc#1051510).
- platform/x86: toshiba_acpi: Fix defined but not used build
  warnings (bsc#1051510).
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
  (bsc#1051510).
- input: rohm_bu21023: switch to i2c_lock_bus(...,
  I2C_LOCK_SEGMENT) (bsc#1051510).
- HID: hid-ntrig: add error handling for sysfs_create_group
  (bsc#1051510).
- mfd: ti_am335x_tscadc: Fix struct clk memory leak (bsc#1051510).
- mmc: sdhci: do not try to use 3.3V signaling if not supported
  (bsc#1051510).
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
  (bsc#1051510).
- parport: sunbpp: fix error return code (bsc#1051510).
- coresight: Handle errors in finding input/output ports
  (bsc#1051510).
- mei: bus: type promotion bug in mei_nfc_if_version()
  (bsc#1051510).
- gpio: pxa: Fix potential NULL dereference (bsc#1051510).
- gpiolib: Mark gpio_suffixes array with __maybe_unused
  (bsc#1051510).
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
  (bsc#1051510).
- crypto: sharah - Unregister correct algorithms for SAHARA 3
  (bsc#1051510).
- crypto: skcipher - Fix -Wstringop-truncation warnings
  (bsc#1051510).
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
  (bsc#1051510).
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 (bsc#1051510).
- mac80211: restrict delayed tailroom needed decrement
  (bsc#1051510).
- wlcore: Add missing PM call for
  wlcore_cmd_wait_for_event_or_timeout() (bsc#1051510).
- commit e266792</changelog>
  <changelog author="mbrugger@suse.com" date="1538654409">- arm64: Update config files. (bsc#1110716)
  Enable ST LPS25H pressure sensor.
- commit 69c6902</changelog>
  <changelog author="jack@suse.cz" date="1538654410">- patches.fixes/x86-memory_failure-Introduce-set-clear-_mce_nospec.patch:
  Fixup compilation breakage on s390 and arm due to missing
  clear_mce_nospec().
- commit faef795</changelog>
</package>
<package pkgid="21ba4131bd94b96cd78c709858bb4e205906605cc5d80a08d6cb254689e34972" name="kernel-vanilla-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.22.1"/>
  <changelog author="tiwai@suse.de" date="1539172800">- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell
  XPS 27 7760 (bsc#1051510).
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
  (bsc#1051510).
- crypto: mxs-dcp - Fix wait logic on chan threads (bsc#1051510).
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM
  ioctl (bsc#1051510).
- HID: add support for Apple Magic Keyboards (bsc#1051510).
- gpio: Fix crash due to registration race (bsc#1051510).
- gpiolib-acpi: Register GpioInt ACPI event handlers from a
  late_initcall (bsc#1051510).
- gpio: adp5588: Fix sleep-in-atomic-context bug (bsc#1051510).
- cfg80211: fix a type issue in
  ieee80211_chandef_to_operating_class() (bsc#1051510).
- Revert "gpio: set up initial state from .get_direction()"
  (bsc#1051510).
- gpio: mb86s70: Revert "Return error if requesting an already
  assigned gpio" (bsc#1051510).
- commit 2759d22</changelog>
  <changelog author="mbrugger@suse.com" date="1539172801">- arm64: Update config files.
  Enable SENSORS_RASPBERRYPI_HWMON
- commit 2a83945</changelog>
  <changelog author="mbrugger@suse.com" date="1539172802">- supported.conf: mark raspberrypi-hwmon as supported
- commit af8ddda</changelog>
  <changelog author="tiwai@suse.de" date="1539172803">- HID: hid-saitek: Add device ID for RAT 7 Contagion
  (bsc#1051510).
- mac80211: shorten the IBSS debug messages (bsc#1051510).
- mac80211: don't Tx a deauth frame if the AP forbade Tx
  (bsc#1051510).
- mac80211: Fix station bandwidth setting after channel switch
  (bsc#1051510).
- mac80211: fix a race between restart and CSA flows
  (bsc#1051510).
- mac80211: do not convert to A-MSDU if frag/subframe limited
  (bsc#1051510).
- mac80211: mesh: fix HWMP sequence numbering to follow standard
  (bsc#1051510).
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211_hwsim: require at least one channel (bsc#1051510).
- mac80211: Run TXQ teardown code before de-registering interfaces
  (bsc#1051510).
- hwmon: (adt7475) Make adt7475_read_word() return errors
  (bsc#1051510).
- hwmon: (ina2xx) fix sysfs shunt resistor read access
  (bsc#1051510).
- commit af836cd</changelog>
  <changelog author="tiwai@suse.de" date="1539172804">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- Revert "mwifiex: handle race during mwifiex_usb_disconnect"
  (bsc#1051510).
- media: videobuf-dma-sg: Fix dma_{sync,unmap}_sg() calls
  (bsc#1051510).
- Revert "mwifiex: fix incorrect ht capability problem"
  (bsc#1051510).
- PM / Domains: Fix genpd to deal with drivers returning 1 from
  - &gt;prepare() (bsc#1051510).
- Revert "pinctrl: sunxi: Don't enforce bias disable (for now)"
  (bsc#1051510).
- commit fb6c36a</changelog>
  <changelog author="tiwai@suse.de" date="1539172805">- blacklist.conf: Add blacklist of inapplicable revert commits
  They are either not applicable or requiring more backports that aren't
  suitable for SLE15
- commit 987dd44</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259200">- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk (bsc#1106110)
- commit 273a6bd</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259201">- blacklist.conf: Append 'drm/amd/pp: initialize result to before or'ing in data'
- commit d2edcd9</changelog>
  <changelog author="tiwai@suse.de" date="1539259202">- Disable DRM patches that broke vbox video driver KMP (bsc#1111076)
- commit 23943c6</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259203">- blacklist.conf: Append 'Revert "drm: Use a flexible array member for blob property data"'
- commit ddc67eb</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259204">- Fix Patch-mainline tags to refer to Linux release tag
  It is expected that Patch-mainline tags refer to a release tag
  in the Linux git tree, such as v4.15. Several patches contain a
  Patch-mainline tags that instead refer to a Linux version number,
  such as 4.15. This inconsistency complicates grepping and
  automation.
  871 of 18000 patches are affected by this problem.
- commit 1d81d26</changelog>
  <changelog author="bp@suse.de" date="1539259205">- crypto: ccp - add timeout support in the SEV command
  (bsc#1106838).
- commit 912dad4</changelog>
  <changelog author="tiwai@suse.de" date="1539345600">- Update config files: update forgotten armv7hl configs
- commit 7bae3a6</changelog>
  <changelog author="msuchanek@suse.de" date="1539345601">- powerpc/numa: Skip onlining a offline node in kdump path
  (bsc#1109784).
- commit df87e51</changelog>
  <changelog author="tiwai@suse.de" date="1539345602">- squashfs metadata 2: electric boogaloo (bsc#1051510).
- squashfs: more metadata hardening (bsc#1051510).
- squashfs: be more careful about metadata corruption
  (bsc#1051510).
- commit 9bfac39</changelog>
  <changelog author="hare@suse.de" date="1539345603">- scsi: qla2xxx: Move log messages before issuing command to
  firmware (bsc#1108870).
- scsi: qla2xxx: Fix for double free of SRB structure
  (bsc#1108870).
- scsi: qla2xxx: Fix recursive mailbox timeout (bsc#1108870).
- scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
  (bsc#1108870).
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
  (bsc#1108870).
- scsi: qla2xxx: Fix duplicate switch database entries
  (bsc#1108870).
- scsi: qla2xxx: Fix NVMe Target discovery (bsc#1108870).
- scsi: qla2xxx: Fix NVMe session hang on unload (bsc#1108870).
- scsi: qla2xxx: don't allow negative thresholds (bsc#1108870).
- commit 50fe149</changelog>
  <changelog author="tiwai@suse.de" date="1539345604">- Squashfs: Compute expected length from inode size rather than
  block length (bsc#1051510).
- commit 0c4a663</changelog>
  <changelog author="tiwai@suse.de" date="1539345605">- soreuseport: initialise timewait reuseport field (bsc#1051510).
- commit bda2dcc</changelog>
  <changelog author="tiwai@suse.de" date="1539345606">- rpc_pipefs: fix double-dput() (bsc#1051510).
- commit 1a15e26</changelog>
  <changelog author="hare@suse.de" date="1539345607">- scsi: qla2xxx: Return switch command on a timeout (bsc#1108870).
- commit 8e38f2a</changelog>
</package>
<package pkgid="e8bbc3a4198fb5a1920ccedb4b186fdfa96b8cf6730cc4d017b0ca8266b782aa" name="kernel-vanilla-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.25.1"/>
  <changelog author="tiwai@suse.de" date="1540814400">- NFC: nfcmrvl_uart: fix OF child-node lookup (bsc#1051510).
- kernfs: update comment about kernfs_path() return value
  (bsc#1051510).
- usbip: tools: fix atoi() on non-null terminated string
  (bsc#1051510).
- USB: serial: cypress_m8: fix interrupt-out transfer length
  (bsc#1051510).
- usb: chipidea: Prevent unbalanced IRQ disable (bsc#1051510).
- commit 6c9d1e7</changelog>
  <changelog author="tiwai@suse.de" date="1540814401">- blacklist.conf: Add ASoC and USB entries that may break kABI
- commit 199a072</changelog>
  <changelog author="tiwai@suse.de" date="1540814402">- usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation
  (bsc#1051510).
- usb: gadget: fsl_udc_core: check allocation return value and
  cleanup on failure (bsc#1051510).
- commit c1b7b66</changelog>
  <changelog author="tiwai@suse.de" date="1540814403">- Refresh patch tag of upstreamed patches and move to sorted section
- commit a966b56</changelog>
  <changelog author="ohering@suse.de" date="1540900800">- move changes without Git-commit out of sorted section
- commit cbf049e</changelog>
  <changelog author="jslaby@suse.cz" date="1540900801">- random: rate limit unseeded randomness warnings (git-fixes).
- commit be52b92</changelog>
  <changelog author="jslaby@suse.cz" date="1540900802">- blacklist.conf: add a kasan fix
- commit c85e2d1</changelog>
  <changelog author="jdelvare@suse.de" date="1540900803">- Add reference to bsc#1104124 to
  patches.fixes/fs-aio-fix-the-increment-of-aio-nr-and-counting-agai.patch
- commit f60e64b</changelog>
  <changelog author="jslaby@suse.cz" date="1540900804">- tools build: fix # escaping in .cmd files for future Make
  (git-fixes).
- Kbuild: fix # escaping in .cmd files for future Make
  (git-fixes).
- commit 8f11ec3</changelog>
  <changelog author="tiwai@suse.de" date="1540900805">- drm/i915/dp: Link train Fallback on eDP only if fallback link
  BW can fit panel's native mode (bsc#1051510).
- drm/i915: Restore vblank interrupts earlier (bsc#1051510).
- commit daf120f</changelog>
  <changelog author="tiwai@suse.de" date="1540900806">- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
  (bsc#1051510).
- media: cx231xx: fix potential sign-extension overflow on large
  shift (bsc#1051510).
- media: pci: cx23885: handle adding to list failure
  (bsc#1051510).
- media: vsp1: Fix YCbCr planar formats pitch calculation
  (bsc#1051510).
- media: tvp5150: fix switch exit in set control handler
  (bsc#1051510).
- media: tvp5150: fix width alignment during set_selection()
  (bsc#1051510).
- media: em28xx: fix input name for Terratec AV 350 (bsc#1051510).
- media: em28xx: use a default format if TRY_FMT fails
  (bsc#1051510).
- media: tvp5150: avoid going past array on v4l2_querymenu()
  (bsc#1051510).
- media: dvb: fix compat ioctl translation (bsc#1051510).
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
  (bsc#1051510).
- commit 0831c5e</changelog>
  <changelog author="tiwai@suse.de" date="1540900807">- soc/tegra: pmc: Fix child-node lookup (bsc#1051510).
- serial: 8250: Fix clearing FIFOs in RS485 mode again
  (bsc#1051510).
- staging: comedi: ni_mio_common: protect register write overflow
  (bsc#1051510).
- iio: adc: at91: fix wrong channel number in triggered buffer
  mode (bsc#1051510).
- iio: adc: at91: fix acking DRDY irq on simple conversions
  (bsc#1051510).
- iio: adc: imx25-gcq: Fix leak of device_node in
  mx25_gcq_setup_cfgs() (bsc#1051510).
- commit 9f4f0cc</changelog>
  <changelog author="jthumshirn@suse.de" date="1540900808">- Refresh
  patches.fixes/0001-drm-amdgpu-powerplay-fix-missing-break-in-switch-sta.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Do-not-carry-error-code-in-HiBMC.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Don-t-overwrite-fb-helper-surfac.patch.
- Refresh
  patches.fixes/0001-drm-i915-audio-Hook-up-component-bindings-even-if-di.patch.
- Refresh
  patches.fixes/0001-drm-i915-gen9-Fix-initial-readout-for-Y-tiled-frameb.patch.
- Refresh
  patches.fixes/0001-drm-sti-do-not-remove-the-drm_bridge-that-was-never-.patch.
- Refresh
  patches.fixes/0001-drm-virtio-fix-bounds-check-in-virtio_gpu_cmd_get_ca.patch.
- commit 652fab5</changelog>
  <changelog author="tiwai@suse.de" date="1540987200">- drm/nouveau: Don't disable polling in fallback mode
  (bsc#1103356).
- Delete
  patches.suse/Revert-drm-nouveau-drm-therm-fan-add-a-fallback-if-n.
- commit aa0c431</changelog>
  <changelog author="tzimmermann@suse.de" date="1540987201">- Fix Patch-mainline for "drm/amdgpu: update tmr mc address"
  The Patch-mainline tag was incorrect. References is being updated as well.
- commit ce8535e</changelog>
  <changelog author="tiwai@suse.de" date="1540987202">- Workaround for mysterious NVMe breakage with i915 CFL
  (bsc#1111040).
- commit 0fa5877</changelog>
  <changelog author="jthumshirn@suse.de" date="1540987203">- libnvdimm, label: Fix sparse warning (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Use namespace index data to reduce number of label reads
  needed (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Split label init out from the logic for getting config
  data (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Remove empty if statement (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Clarify comment in sizeof_namespace_index (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Sanity check labeloff (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- libnvdimm, dimm: Maximize label transfer size (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7
  (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- commit 5a4eeb4</changelog>
  <changelog author="jlee@suse.com" date="1540987204">- x86/boot/KASLR: Work around firmware bugs by excluding
  EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR's choice
  (bnc#1112878).
- commit d45cd78</changelog>
  <changelog author="tiwai@suse.de" date="1540987205">- blacklist.conf: Add a few wifi driver entries that can't be applied
- commit 662fc68</changelog>
  <changelog author="tiwai@suse.de" date="1540987206">- spi/bcm63xx-hsspi: keep pll clk enabled (bsc#1051510).
- spi: sh-msiof: fix deferred probing (bsc#1051510).
- spi: bcm-qspi: switch back to reading flash using smaller chunks
  (bsc#1051510).
- commit f773242</changelog>
</package>
<package pkgid="a8f2b5c34c5a7b33e5657abf59e043daa78819e01d5d064d3b3324fd14f1e790" name="kernel-vanilla-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="7fed59fc3c4b695c49c09ab2d5fd6319a3b7d2cae485e47b1c1ab0d446547480" name="kernel-vanilla-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="63e70dd63569d4aa9a5349a3b90c6bd9b7b3b0e0b480617001eb7b81a6d18b83" name="kernel-vanilla-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="9f8dcddb138de3e0ba470cb67d03ea6520cea43b681eff522fc3576bacb418d1" name="kernel-vanilla-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="e2aa3533d53f85f76a04b0eb782041337b4647bb44b8ff58c692fc6174f92106" name="kernel-vanilla-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.19.2"/>
  <changelog author="fdmanana@suse.com" date="1538568000">- Btrfs: fix fsync after hole punching when using no-holes feature
  (bsc#1110642).
- commit 3f19b40</changelog>
  <changelog author="fdmanana@suse.com" date="1538568001">- Btrfs: fix loss of prealloc extents past i_size after fsync
  log replay (bsc#1110643).
- commit 974e057</changelog>
  <changelog author="fdmanana@suse.com" date="1538568002">- Btrfs: fix duplicate extents after fsync of file with prealloc
  extents (bsc#1110644).
- commit c4ec603</changelog>
  <changelog author="fdmanana@suse.com" date="1538568003">- Btrfs: fix return value on rename exchange failure
  (bsc#1110645).
- commit 532729c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568004">- Btrfs: sync log after logging new name (bsc#1110646).
- commit 7260d6b</changelog>
  <changelog author="fdmanana@suse.com" date="1538568005">- Btrfs: fix data corruption when deduplicating between different
  files (bsc#1110647).
- commit 669848c</changelog>
  <changelog author="fdmanana@suse.com" date="1538568006">- btrfs: Remove unused parameters from various functions
  (bsc#1110649).
- commit c97c657</changelog>
  <changelog author="fdmanana@suse.com" date="1538568007">- Btrfs: fix send failure when root has deleted files still open
  (bsc#1110650).
- commit f52554d</changelog>
  <changelog author="jslaby@suse.cz" date="1538568008">- watchdog: Mark watchdog touch functions as notrace (git-fixes).
- commit 8b53193</changelog>
  <changelog author="neilb@suse.com" date="1538654400">- nfs/filelayout: fix oops when freeing filelayout segment
  (bsc#1105190).
- NFS/filelayout: Fix racy setting of fl-&gt;dsaddr in
  filelayout_check_deviceid() (bsc#1105190).
- commit d6d0fab</changelog>
  <changelog author="neilb@suse.com" date="1538654401">- VFS: don't test owner for NFS in set_posix_acl() (bsc#1103405).
- commit 36f977a</changelog>
  <changelog author="tiwai@suse.de" date="1538654402">- README.BRANCH: SLE15-SP1 branch maintainer changes
  Add ptesarik as co-maintainer, keep tiwai as the primary maintainer
- commit 83aea11</changelog>
  <changelog author="wqu@suse.com" date="1538654403">- btrfs: tests/qgroup: Fix wrong tree backref level (bsc#1107928).
- commit a5e154c</changelog>
  <changelog author="wqu@suse.com" date="1538654404">- btrfs: check-integrity: Fix NULL pointer dereference for
  degraded mount (bsc#1107947).
- commit 77b2277</changelog>
  <changelog author="wqu@suse.com" date="1538654405">- btrfs: scrub: Don't use inode pages for device replace (follow
  up for bsc#1108096).
- commit c865775</changelog>
  <changelog author="tiwai@suse.de" date="1538654406">- ASoC: cs4265: fix MMTLR Data switch control (bsc#1051510).
- ALSA: fireworks: fix memory leak of response buffer at error
  path (bsc#1051510).
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix
  I/O at error path (bsc#1051510).
- ALSA: emu10k1: fix possible info leak to userspace on
  SNDRV_EMU10K1_IOCTL_INFO (bsc#1051510).
- ALSA: bebob: use address returned by kmalloc() instead of
  kernel stack for streaming DMA mapping (bsc#1051510).
- ASoC: rt5514: Fix the issue of the delay volume applied
  (bsc#1051510).
- ASoC: dapm: Fix potential DAI widget pointer deref when linking
  DAIs (bsc#1051510).
- ALSA: msnd: Fix the default sample sizes (bsc#1051510).
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE()
  macro (bsc#1051510).
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
  (bsc#1051510).
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
  (bsc#1051510).
- ASoC: rt5514: Add the missing register in the readable table
  (bsc#1051510).
- ASoC: rt5514: Eliminate the noise in the ASRC case
  (bsc#1051510).
- ASoC: rt5514: Add the I2S ASRC support (bsc#1051510).
- commit 4eba9c8</changelog>
  <changelog author="wqu@suse.com" date="1538654407">- btrfs: scrub: Don't use inode page cache in
  scrub_handle_errored_block() (follow up for bsc#1108096).
- commit 3f91c84</changelog>
  <changelog author="tiwai@suse.de" date="1538654408">- smsc95xx: Check for Wake-on-LAN modes (bsc#1051510).
- smsc75xx: Check for Wake-on-LAN modes (bsc#1051510).
- r8152: Check for supported Wake-on-LAN Modes (bsc#1051510).
- sr9800: Check for supported Wake-on-LAN modes (bsc#1051510).
- lan78xx: Check for supported Wake-on-LAN modes (bsc#1051510).
- ax88179_178a: Check for supported Wake-on-LAN modes
  (bsc#1051510).
- mac80211: fix pending queue hang due to TX_DROP (bsc#1051510).
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
  (bsc#1051510).
- Input: elantech - enable middle button of touchpad on ThinkPad
  P72 (bsc#1051510).
- regulator: fix crash caused by null driver data (bsc#1051510).
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
  (bsc#1051510).
- intel_th: Fix device removal logic (bsc#1051510).
- NFC: Fix possible memory corruption when handling SHDLC I-Frame
  commands (bsc#1051510).
- platform/x86: alienware-wmi: Correct a memory leak
  (bsc#1051510).
- xhci: Fix use after free for URB cancellation on a reallocated
  endpoint (bsc#1051510).
- mei: ignore not found client in the enumeration (bsc#1051510).
- i2c: i801: Allow ACPI AML access I/O ports not reserved for
  SMBus (bsc#1051510).
- fbdev/via: fix defined but not used warning (bsc#1051510).
- video: goldfishfb: fix memory leak on driver remove
  (bsc#1051510).
- fbdev: Distinguish between interlaced and progressive modes
  (bsc#1051510).
- platform/x86: toshiba_acpi: Fix defined but not used build
  warnings (bsc#1051510).
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
  (bsc#1051510).
- input: rohm_bu21023: switch to i2c_lock_bus(...,
  I2C_LOCK_SEGMENT) (bsc#1051510).
- HID: hid-ntrig: add error handling for sysfs_create_group
  (bsc#1051510).
- mfd: ti_am335x_tscadc: Fix struct clk memory leak (bsc#1051510).
- mmc: sdhci: do not try to use 3.3V signaling if not supported
  (bsc#1051510).
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
  (bsc#1051510).
- parport: sunbpp: fix error return code (bsc#1051510).
- coresight: Handle errors in finding input/output ports
  (bsc#1051510).
- mei: bus: type promotion bug in mei_nfc_if_version()
  (bsc#1051510).
- gpio: pxa: Fix potential NULL dereference (bsc#1051510).
- gpiolib: Mark gpio_suffixes array with __maybe_unused
  (bsc#1051510).
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
  (bsc#1051510).
- crypto: sharah - Unregister correct algorithms for SAHARA 3
  (bsc#1051510).
- crypto: skcipher - Fix -Wstringop-truncation warnings
  (bsc#1051510).
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
  (bsc#1051510).
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 (bsc#1051510).
- mac80211: restrict delayed tailroom needed decrement
  (bsc#1051510).
- wlcore: Add missing PM call for
  wlcore_cmd_wait_for_event_or_timeout() (bsc#1051510).
- commit e266792</changelog>
  <changelog author="mbrugger@suse.com" date="1538654409">- arm64: Update config files. (bsc#1110716)
  Enable ST LPS25H pressure sensor.
- commit 69c6902</changelog>
  <changelog author="jack@suse.cz" date="1538654410">- patches.fixes/x86-memory_failure-Introduce-set-clear-_mce_nospec.patch:
  Fixup compilation breakage on s390 and arm due to missing
  clear_mce_nospec().
- commit faef795</changelog>
</package>
<package pkgid="72060839cacb79122fcb7edc42ae86d8ff5364cc3f31c49e27bc01007c87fce3" name="kernel-vanilla-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.22.1"/>
  <changelog author="tiwai@suse.de" date="1539172800">- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell
  XPS 27 7760 (bsc#1051510).
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
  (bsc#1051510).
- crypto: mxs-dcp - Fix wait logic on chan threads (bsc#1051510).
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM
  ioctl (bsc#1051510).
- HID: add support for Apple Magic Keyboards (bsc#1051510).
- gpio: Fix crash due to registration race (bsc#1051510).
- gpiolib-acpi: Register GpioInt ACPI event handlers from a
  late_initcall (bsc#1051510).
- gpio: adp5588: Fix sleep-in-atomic-context bug (bsc#1051510).
- cfg80211: fix a type issue in
  ieee80211_chandef_to_operating_class() (bsc#1051510).
- Revert "gpio: set up initial state from .get_direction()"
  (bsc#1051510).
- gpio: mb86s70: Revert "Return error if requesting an already
  assigned gpio" (bsc#1051510).
- commit 2759d22</changelog>
  <changelog author="mbrugger@suse.com" date="1539172801">- arm64: Update config files.
  Enable SENSORS_RASPBERRYPI_HWMON
- commit 2a83945</changelog>
  <changelog author="mbrugger@suse.com" date="1539172802">- supported.conf: mark raspberrypi-hwmon as supported
- commit af8ddda</changelog>
  <changelog author="tiwai@suse.de" date="1539172803">- HID: hid-saitek: Add device ID for RAT 7 Contagion
  (bsc#1051510).
- mac80211: shorten the IBSS debug messages (bsc#1051510).
- mac80211: don't Tx a deauth frame if the AP forbade Tx
  (bsc#1051510).
- mac80211: Fix station bandwidth setting after channel switch
  (bsc#1051510).
- mac80211: fix a race between restart and CSA flows
  (bsc#1051510).
- mac80211: do not convert to A-MSDU if frag/subframe limited
  (bsc#1051510).
- mac80211: mesh: fix HWMP sequence numbering to follow standard
  (bsc#1051510).
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
  (bsc#1051510).
- mac80211_hwsim: require at least one channel (bsc#1051510).
- mac80211: Run TXQ teardown code before de-registering interfaces
  (bsc#1051510).
- hwmon: (adt7475) Make adt7475_read_word() return errors
  (bsc#1051510).
- hwmon: (ina2xx) fix sysfs shunt resistor read access
  (bsc#1051510).
- commit af836cd</changelog>
  <changelog author="tiwai@suse.de" date="1539172804">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- Revert "mwifiex: handle race during mwifiex_usb_disconnect"
  (bsc#1051510).
- media: videobuf-dma-sg: Fix dma_{sync,unmap}_sg() calls
  (bsc#1051510).
- Revert "mwifiex: fix incorrect ht capability problem"
  (bsc#1051510).
- PM / Domains: Fix genpd to deal with drivers returning 1 from
  - &gt;prepare() (bsc#1051510).
- Revert "pinctrl: sunxi: Don't enforce bias disable (for now)"
  (bsc#1051510).
- commit fb6c36a</changelog>
  <changelog author="tiwai@suse.de" date="1539172805">- blacklist.conf: Add blacklist of inapplicable revert commits
  They are either not applicable or requiring more backports that aren't
  suitable for SLE15
- commit 987dd44</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259200">- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk (bsc#1106110)
- commit 273a6bd</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259201">- blacklist.conf: Append 'drm/amd/pp: initialize result to before or'ing in data'
- commit d2edcd9</changelog>
  <changelog author="tiwai@suse.de" date="1539259202">- Disable DRM patches that broke vbox video driver KMP (bsc#1111076)
- commit 23943c6</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259203">- blacklist.conf: Append 'Revert "drm: Use a flexible array member for blob property data"'
- commit ddc67eb</changelog>
  <changelog author="tzimmermann@suse.de" date="1539259204">- Fix Patch-mainline tags to refer to Linux release tag
  It is expected that Patch-mainline tags refer to a release tag
  in the Linux git tree, such as v4.15. Several patches contain a
  Patch-mainline tags that instead refer to a Linux version number,
  such as 4.15. This inconsistency complicates grepping and
  automation.
  871 of 18000 patches are affected by this problem.
- commit 1d81d26</changelog>
  <changelog author="bp@suse.de" date="1539259205">- crypto: ccp - add timeout support in the SEV command
  (bsc#1106838).
- commit 912dad4</changelog>
  <changelog author="tiwai@suse.de" date="1539345600">- Update config files: update forgotten armv7hl configs
- commit 7bae3a6</changelog>
  <changelog author="msuchanek@suse.de" date="1539345601">- powerpc/numa: Skip onlining a offline node in kdump path
  (bsc#1109784).
- commit df87e51</changelog>
  <changelog author="tiwai@suse.de" date="1539345602">- squashfs metadata 2: electric boogaloo (bsc#1051510).
- squashfs: more metadata hardening (bsc#1051510).
- squashfs: be more careful about metadata corruption
  (bsc#1051510).
- commit 9bfac39</changelog>
  <changelog author="hare@suse.de" date="1539345603">- scsi: qla2xxx: Move log messages before issuing command to
  firmware (bsc#1108870).
- scsi: qla2xxx: Fix for double free of SRB structure
  (bsc#1108870).
- scsi: qla2xxx: Fix recursive mailbox timeout (bsc#1108870).
- scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
  (bsc#1108870).
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
  (bsc#1108870).
- scsi: qla2xxx: Fix duplicate switch database entries
  (bsc#1108870).
- scsi: qla2xxx: Fix NVMe Target discovery (bsc#1108870).
- scsi: qla2xxx: Fix NVMe session hang on unload (bsc#1108870).
- scsi: qla2xxx: don't allow negative thresholds (bsc#1108870).
- commit 50fe149</changelog>
  <changelog author="tiwai@suse.de" date="1539345604">- Squashfs: Compute expected length from inode size rather than
  block length (bsc#1051510).
- commit 0c4a663</changelog>
  <changelog author="tiwai@suse.de" date="1539345605">- soreuseport: initialise timewait reuseport field (bsc#1051510).
- commit bda2dcc</changelog>
  <changelog author="tiwai@suse.de" date="1539345606">- rpc_pipefs: fix double-dput() (bsc#1051510).
- commit 1a15e26</changelog>
  <changelog author="hare@suse.de" date="1539345607">- scsi: qla2xxx: Return switch command on a timeout (bsc#1108870).
- commit 8e38f2a</changelog>
</package>
<package pkgid="d0ad974878e20d5f23c5031e4dc6f0a4b904fb019c532f39737a5d07ca568170" name="kernel-vanilla-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.25.1"/>
  <changelog author="tiwai@suse.de" date="1540814400">- NFC: nfcmrvl_uart: fix OF child-node lookup (bsc#1051510).
- kernfs: update comment about kernfs_path() return value
  (bsc#1051510).
- usbip: tools: fix atoi() on non-null terminated string
  (bsc#1051510).
- USB: serial: cypress_m8: fix interrupt-out transfer length
  (bsc#1051510).
- usb: chipidea: Prevent unbalanced IRQ disable (bsc#1051510).
- commit 6c9d1e7</changelog>
  <changelog author="tiwai@suse.de" date="1540814401">- blacklist.conf: Add ASoC and USB entries that may break kABI
- commit 199a072</changelog>
  <changelog author="tiwai@suse.de" date="1540814402">- usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation
  (bsc#1051510).
- usb: gadget: fsl_udc_core: check allocation return value and
  cleanup on failure (bsc#1051510).
- commit c1b7b66</changelog>
  <changelog author="tiwai@suse.de" date="1540814403">- Refresh patch tag of upstreamed patches and move to sorted section
- commit a966b56</changelog>
  <changelog author="ohering@suse.de" date="1540900800">- move changes without Git-commit out of sorted section
- commit cbf049e</changelog>
  <changelog author="jslaby@suse.cz" date="1540900801">- random: rate limit unseeded randomness warnings (git-fixes).
- commit be52b92</changelog>
  <changelog author="jslaby@suse.cz" date="1540900802">- blacklist.conf: add a kasan fix
- commit c85e2d1</changelog>
  <changelog author="jdelvare@suse.de" date="1540900803">- Add reference to bsc#1104124 to
  patches.fixes/fs-aio-fix-the-increment-of-aio-nr-and-counting-agai.patch
- commit f60e64b</changelog>
  <changelog author="jslaby@suse.cz" date="1540900804">- tools build: fix # escaping in .cmd files for future Make
  (git-fixes).
- Kbuild: fix # escaping in .cmd files for future Make
  (git-fixes).
- commit 8f11ec3</changelog>
  <changelog author="tiwai@suse.de" date="1540900805">- drm/i915/dp: Link train Fallback on eDP only if fallback link
  BW can fit panel's native mode (bsc#1051510).
- drm/i915: Restore vblank interrupts earlier (bsc#1051510).
- commit daf120f</changelog>
  <changelog author="tiwai@suse.de" date="1540900806">- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
  (bsc#1051510).
- media: cx231xx: fix potential sign-extension overflow on large
  shift (bsc#1051510).
- media: pci: cx23885: handle adding to list failure
  (bsc#1051510).
- media: vsp1: Fix YCbCr planar formats pitch calculation
  (bsc#1051510).
- media: tvp5150: fix switch exit in set control handler
  (bsc#1051510).
- media: tvp5150: fix width alignment during set_selection()
  (bsc#1051510).
- media: em28xx: fix input name for Terratec AV 350 (bsc#1051510).
- media: em28xx: use a default format if TRY_FMT fails
  (bsc#1051510).
- media: tvp5150: avoid going past array on v4l2_querymenu()
  (bsc#1051510).
- media: dvb: fix compat ioctl translation (bsc#1051510).
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
  (bsc#1051510).
- commit 0831c5e</changelog>
  <changelog author="tiwai@suse.de" date="1540900807">- soc/tegra: pmc: Fix child-node lookup (bsc#1051510).
- serial: 8250: Fix clearing FIFOs in RS485 mode again
  (bsc#1051510).
- staging: comedi: ni_mio_common: protect register write overflow
  (bsc#1051510).
- iio: adc: at91: fix wrong channel number in triggered buffer
  mode (bsc#1051510).
- iio: adc: at91: fix acking DRDY irq on simple conversions
  (bsc#1051510).
- iio: adc: imx25-gcq: Fix leak of device_node in
  mx25_gcq_setup_cfgs() (bsc#1051510).
- commit 9f4f0cc</changelog>
  <changelog author="jthumshirn@suse.de" date="1540900808">- Refresh
  patches.fixes/0001-drm-amdgpu-powerplay-fix-missing-break-in-switch-sta.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Do-not-carry-error-code-in-HiBMC.patch.
- Refresh
  patches.fixes/0001-drm-hisilicon-hibmc-Don-t-overwrite-fb-helper-surfac.patch.
- Refresh
  patches.fixes/0001-drm-i915-audio-Hook-up-component-bindings-even-if-di.patch.
- Refresh
  patches.fixes/0001-drm-i915-gen9-Fix-initial-readout-for-Y-tiled-frameb.patch.
- Refresh
  patches.fixes/0001-drm-sti-do-not-remove-the-drm_bridge-that-was-never-.patch.
- Refresh
  patches.fixes/0001-drm-virtio-fix-bounds-check-in-virtio_gpu_cmd_get_ca.patch.
- commit 652fab5</changelog>
  <changelog author="tiwai@suse.de" date="1540987200">- drm/nouveau: Don't disable polling in fallback mode
  (bsc#1103356).
- Delete
  patches.suse/Revert-drm-nouveau-drm-therm-fan-add-a-fallback-if-n.
- commit aa0c431</changelog>
  <changelog author="tzimmermann@suse.de" date="1540987201">- Fix Patch-mainline for "drm/amdgpu: update tmr mc address"
  The Patch-mainline tag was incorrect. References is being updated as well.
- commit ce8535e</changelog>
  <changelog author="tiwai@suse.de" date="1540987202">- Workaround for mysterious NVMe breakage with i915 CFL
  (bsc#1111040).
- commit 0fa5877</changelog>
  <changelog author="jthumshirn@suse.de" date="1540987203">- libnvdimm, label: Fix sparse warning (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Use namespace index data to reduce number of label reads
  needed (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Split label init out from the logic for getting config
  data (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Remove empty if statement (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- nvdimm: Clarify comment in sizeof_namespace_index (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- nvdimm: Sanity check labeloff (bsc#1111921, bsc#1113408,
  FATE#326765, bsc#1113972).
- libnvdimm, dimm: Maximize label transfer size (bsc#1111921,
  bsc#1113408, FATE#326765, bsc#1113972).
- libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7
  (bsc#1111921, bsc#1113408, FATE#326765, bsc#1113972).
- commit 5a4eeb4</changelog>
  <changelog author="jlee@suse.com" date="1540987204">- x86/boot/KASLR: Work around firmware bugs by excluding
  EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR's choice
  (bnc#1112878).
- commit d45cd78</changelog>
  <changelog author="tiwai@suse.de" date="1540987205">- blacklist.conf: Add a few wifi driver entries that can't be applied
- commit 662fc68</changelog>
  <changelog author="tiwai@suse.de" date="1540987206">- spi/bcm63xx-hsspi: keep pll clk enabled (bsc#1051510).
- spi: sh-msiof: fix deferred probing (bsc#1051510).
- spi: bcm-qspi: switch back to reading flash using smaller chunks
  (bsc#1051510).
- commit f773242</changelog>
</package>
<package pkgid="b7ddbfb023cbd311369145939e2fce308dd42b4e46275ee7776397ed2489572f" name="kernel-vanilla-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="1e3f0dfdf9eac2c6ea13e3fa7088d3d2216bb4d059bd59d8cd0aa74cc04f9d38" name="kglobalaccel" arch="src">
  <version epoch="0" ver="5.45.0" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * build: Remove KService dependency</changelog>
  <changelog author="wbauer@tmo.at" date="1494849601">- Remove unnecessary kservice-devel build requirement
- Drop no longer useful
  0001-Make-kglobalaccel5-properly-killable-fixing-super-sl.patch
- No point to delete the kglobalaccel5.po files, they are not
  included any more since 5.11.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * kglobalaccel5: Mark as nongui exe</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys (kde#183458)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Revert upstream commit to avoid major regressions (kde#384597):
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys" (kde#384597)
- Dropped patches, now usptream:
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Revert "Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys""
  * Component can't be null (tested line before it).
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Remove double look-up
  * Group some blocking dbus calls
  * We depend against 5.7
  * kglobalacceld: Avoid loading an icon loader for no reason
  * generate correct shortcut strings
  * Port to debug category</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove unused, duplicated file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use cmake function 'kdbusaddons_generate_dbus_service_file' from kdbusaddons to generate dbus service file (kde#382460)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Remove not necessary QtCore and co
  * Don't assert if used incorrectly from dbus (kde#389375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1527681600">- Add upstream patch 0001-Make-sure-ungrab-keyboard-request-is-processed-befor.patch:
  * Fixes Alt-Tab being randomly ignored (kde#394689, boo#1094931)</changelog>
</package>
<package pkgid="f9d62d53a25a5d98393021cceaeff2ae923f33750cacd7548716c3b2990c72e7" name="kglobalaccel" arch="src">
  <version epoch="0" ver="5.45.0" rel="lp150.2.6.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * build: Remove KService dependency</changelog>
  <changelog author="wbauer@tmo.at" date="1494849601">- Remove unnecessary kservice-devel build requirement
- Drop no longer useful
  0001-Make-kglobalaccel5-properly-killable-fixing-super-sl.patch
- No point to delete the kglobalaccel5.po files, they are not
  included any more since 5.11.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * kglobalaccel5: Mark as nongui exe</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys (kde#183458)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Revert upstream commit to avoid major regressions (kde#384597):
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys" (kde#384597)
- Dropped patches, now usptream:
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Revert "Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys""
  * Component can't be null (tested line before it).
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Remove double look-up
  * Group some blocking dbus calls
  * We depend against 5.7
  * kglobalacceld: Avoid loading an icon loader for no reason
  * generate correct shortcut strings
  * Port to debug category</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove unused, duplicated file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use cmake function 'kdbusaddons_generate_dbus_service_file' from kdbusaddons to generate dbus service file (kde#382460)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Remove not necessary QtCore and co
  * Don't assert if used incorrectly from dbus (kde#389375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1527681600">- Add upstream patch 0001-Make-sure-ungrab-keyboard-request-is-processed-befor.patch:
  * Fixes Alt-Tab being randomly ignored (kde#394689, boo#1094931)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1541246400">- Add patch to fix keyboard layout changes (boo#1103682, kde#350816, kde#269403):
  * 0001-Fix-keyboard-layout-change-notifications.patch</changelog>
</package>
<package pkgid="394d9885ed7dba38df769b5a3f223150081d1a94c6d264921aed453544c7e62b" name="kglobalaccel-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * build: Remove KService dependency</changelog>
  <changelog author="wbauer@tmo.at" date="1494849601">- Remove unnecessary kservice-devel build requirement
- Drop no longer useful
  0001-Make-kglobalaccel5-properly-killable-fixing-super-sl.patch
- No point to delete the kglobalaccel5.po files, they are not
  included any more since 5.11.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * kglobalaccel5: Mark as nongui exe</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys (kde#183458)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Revert upstream commit to avoid major regressions (kde#384597):
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys" (kde#384597)
- Dropped patches, now usptream:
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Revert "Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys""
  * Component can't be null (tested line before it).
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Remove double look-up
  * Group some blocking dbus calls
  * We depend against 5.7
  * kglobalacceld: Avoid loading an icon loader for no reason
  * generate correct shortcut strings
  * Port to debug category</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove unused, duplicated file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use cmake function 'kdbusaddons_generate_dbus_service_file' from kdbusaddons to generate dbus service file (kde#382460)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Remove not necessary QtCore and co
  * Don't assert if used incorrectly from dbus (kde#389375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1527681600">- Add upstream patch 0001-Make-sure-ungrab-keyboard-request-is-processed-befor.patch:
  * Fixes Alt-Tab being randomly ignored (kde#394689, boo#1094931)</changelog>
</package>
<package pkgid="abe7b30ff11f956e8dec7e1b05bbc9ea09408fa0a08c15b62a1432e7aa317516" name="kglobalaccel-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.2.6.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * build: Remove KService dependency</changelog>
  <changelog author="wbauer@tmo.at" date="1494849601">- Remove unnecessary kservice-devel build requirement
- Drop no longer useful
  0001-Make-kglobalaccel5-properly-killable-fixing-super-sl.patch
- No point to delete the kglobalaccel5.po files, they are not
  included any more since 5.11.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * kglobalaccel5: Mark as nongui exe</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys (kde#183458)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Revert upstream commit to avoid major regressions (kde#384597):
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys" (kde#384597)
- Dropped patches, now usptream:
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Revert "Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys""
  * Component can't be null (tested line before it).
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Remove double look-up
  * Group some blocking dbus calls
  * We depend against 5.7
  * kglobalacceld: Avoid loading an icon loader for no reason
  * generate correct shortcut strings
  * Port to debug category</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove unused, duplicated file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use cmake function 'kdbusaddons_generate_dbus_service_file' from kdbusaddons to generate dbus service file (kde#382460)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Remove not necessary QtCore and co
  * Don't assert if used incorrectly from dbus (kde#389375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1527681600">- Add upstream patch 0001-Make-sure-ungrab-keyboard-request-is-processed-befor.patch:
  * Fixes Alt-Tab being randomly ignored (kde#394689, boo#1094931)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1541246400">- Add patch to fix keyboard layout changes (boo#1103682, kde#350816, kde#269403):
  * 0001-Fix-keyboard-layout-change-notifications.patch</changelog>
</package>
<package pkgid="20e51f62f9917adb3d6a8616be6ce61eda9c900be60e309b9d62d1ff93794c0d" name="kglobalaccel-devel" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * build: Remove KService dependency</changelog>
  <changelog author="wbauer@tmo.at" date="1494849601">- Remove unnecessary kservice-devel build requirement
- Drop no longer useful
  0001-Make-kglobalaccel5-properly-killable-fixing-super-sl.patch
- No point to delete the kglobalaccel5.po files, they are not
  included any more since 5.11.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * kglobalaccel5: Mark as nongui exe</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys (kde#183458)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Revert upstream commit to avoid major regressions (kde#384597):
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys" (kde#384597)
- Dropped patches, now usptream:
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Revert "Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys""
  * Component can't be null (tested line before it).
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Remove double look-up
  * Group some blocking dbus calls
  * We depend against 5.7
  * kglobalacceld: Avoid loading an icon loader for no reason
  * generate correct shortcut strings
  * Port to debug category</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove unused, duplicated file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use cmake function 'kdbusaddons_generate_dbus_service_file' from kdbusaddons to generate dbus service file (kde#382460)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Remove not necessary QtCore and co
  * Don't assert if used incorrectly from dbus (kde#389375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1527681600">- Add upstream patch 0001-Make-sure-ungrab-keyboard-request-is-processed-befor.patch:
  * Fixes Alt-Tab being randomly ignored (kde#394689, boo#1094931)</changelog>
</package>
<package pkgid="6661d4a5e4f17f5c9a5a07f3d4832e91d9533548139ded458bb6257472e5814f" name="kglobalaccel-devel" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.2.6.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * build: Remove KService dependency</changelog>
  <changelog author="wbauer@tmo.at" date="1494849601">- Remove unnecessary kservice-devel build requirement
- Drop no longer useful
  0001-Make-kglobalaccel5-properly-killable-fixing-super-sl.patch
- No point to delete the kglobalaccel5.po files, they are not
  included any more since 5.11.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * kglobalaccel5: Mark as nongui exe</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys (kde#183458)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Revert upstream commit to avoid major regressions (kde#384597):
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys" (kde#384597)
- Dropped patches, now usptream:
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Revert "Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys""
  * Component can't be null (tested line before it).
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Remove double look-up
  * Group some blocking dbus calls
  * We depend against 5.7
  * kglobalacceld: Avoid loading an icon loader for no reason
  * generate correct shortcut strings
  * Port to debug category</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove unused, duplicated file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use cmake function 'kdbusaddons_generate_dbus_service_file' from kdbusaddons to generate dbus service file (kde#382460)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Remove not necessary QtCore and co
  * Don't assert if used incorrectly from dbus (kde#389375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1527681600">- Add upstream patch 0001-Make-sure-ungrab-keyboard-request-is-processed-befor.patch:
  * Fixes Alt-Tab being randomly ignored (kde#394689, boo#1094931)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1541246400">- Add patch to fix keyboard layout changes (boo#1103682, kde#350816, kde#269403):
  * 0001-Fix-keyboard-layout-change-notifications.patch</changelog>
</package>
<package pkgid="c0687f6b772f4f3837dc25f895fc089d5788a9fb8cfb068eda935ab3254b29da" name="kglobalaccel5" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * build: Remove KService dependency</changelog>
  <changelog author="wbauer@tmo.at" date="1494849601">- Remove unnecessary kservice-devel build requirement
- Drop no longer useful
  0001-Make-kglobalaccel5-properly-killable-fixing-super-sl.patch
- No point to delete the kglobalaccel5.po files, they are not
  included any more since 5.11.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * kglobalaccel5: Mark as nongui exe</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys (kde#183458)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Revert upstream commit to avoid major regressions (kde#384597):
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys" (kde#384597)
- Dropped patches, now usptream:
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Revert "Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys""
  * Component can't be null (tested line before it).
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Remove double look-up
  * Group some blocking dbus calls
  * We depend against 5.7
  * kglobalacceld: Avoid loading an icon loader for no reason
  * generate correct shortcut strings
  * Port to debug category</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove unused, duplicated file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use cmake function 'kdbusaddons_generate_dbus_service_file' from kdbusaddons to generate dbus service file (kde#382460)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Remove not necessary QtCore and co
  * Don't assert if used incorrectly from dbus (kde#389375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1527681600">- Add upstream patch 0001-Make-sure-ungrab-keyboard-request-is-processed-befor.patch:
  * Fixes Alt-Tab being randomly ignored (kde#394689, boo#1094931)</changelog>
</package>
<package pkgid="f3e37710fe8f526372cc12079e72f7b2994ab7fa30c9ecf1dfdc77d676067025" name="kglobalaccel5" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.2.6.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * build: Remove KService dependency</changelog>
  <changelog author="wbauer@tmo.at" date="1494849601">- Remove unnecessary kservice-devel build requirement
- Drop no longer useful
  0001-Make-kglobalaccel5-properly-killable-fixing-super-sl.patch
- No point to delete the kglobalaccel5.po files, they are not
  included any more since 5.11.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * kglobalaccel5: Mark as nongui exe</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys (kde#183458)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Revert upstream commit to avoid major regressions (kde#384597):
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys" (kde#384597)
- Dropped patches, now usptream:
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Revert "Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys""
  * Component can't be null (tested line before it).
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Remove double look-up
  * Group some blocking dbus calls
  * We depend against 5.7
  * kglobalacceld: Avoid loading an icon loader for no reason
  * generate correct shortcut strings
  * Port to debug category</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove unused, duplicated file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use cmake function 'kdbusaddons_generate_dbus_service_file' from kdbusaddons to generate dbus service file (kde#382460)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Remove not necessary QtCore and co
  * Don't assert if used incorrectly from dbus (kde#389375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1527681600">- Add upstream patch 0001-Make-sure-ungrab-keyboard-request-is-processed-befor.patch:
  * Fixes Alt-Tab being randomly ignored (kde#394689, boo#1094931)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1541246400">- Add patch to fix keyboard layout changes (boo#1103682, kde#350816, kde#269403):
  * 0001-Fix-keyboard-layout-change-notifications.patch</changelog>
</package>
<package pkgid="4b251155d39cd42836ffed03a3de108c05454be62a4d42495e2e7c3b7b39a782" name="khotkeys5" arch="src">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1502971200">- Add Requires: libqt5-qdbus
- Fix typos in descriptions
- Mention package name in 0001-Use-qdbus-qt5-and-qdbusviewer-qt5.patch</changelog>
  <changelog author="christophe@krop.fr" date="1503144000">- Add 0002-Make-sure-the-dbus-xml-interface-file-exists-before-.patch.
  Fixes build with CMake &gt;= 3.9</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * Make sure the dbus xml interface file exists before it's used
- Remove patches, now upstream:
  * 0002-Make-sure-the-dbus-xml-interface-file-exists-before-.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508587200">- Add #!BuildIgnore to break the
  plasma5-workspace-devel -&gt; plasma5-workspace -&gt; kwin5 -&gt; kdialog
  dep chain which results in pulling in kdebase4-runtime on 42.2</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Add missing include</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Remove obsolete reviewboardrc file
  * kcm hotkeys: Add space in front of spinbox suffix "ms"
  * Fix double space in UI string</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Remove verbose debugging statement</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="7fbf618ee60633ea76848c9700aa85e082141cd8f7a768acf4e86c16970e9c10" name="khotkeys5" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1502971200">- Add Requires: libqt5-qdbus
- Fix typos in descriptions
- Mention package name in 0001-Use-qdbus-qt5-and-qdbusviewer-qt5.patch</changelog>
  <changelog author="christophe@krop.fr" date="1503144000">- Add 0002-Make-sure-the-dbus-xml-interface-file-exists-before-.patch.
  Fixes build with CMake &gt;= 3.9</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * Make sure the dbus xml interface file exists before it's used
- Remove patches, now upstream:
  * 0002-Make-sure-the-dbus-xml-interface-file-exists-before-.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508587200">- Add #!BuildIgnore to break the
  plasma5-workspace-devel -&gt; plasma5-workspace -&gt; kwin5 -&gt; kdialog
  dep chain which results in pulling in kdebase4-runtime on 42.2</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Add missing include</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Remove obsolete reviewboardrc file
  * kcm hotkeys: Add space in front of spinbox suffix "ms"
  * Fix double space in UI string</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Remove verbose debugging statement</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="5f61cdad238377c3b9db8bdf04a531575165cf436996a9c56788eb544c7c9998" name="khotkeys5-devel" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1502971200">- Add Requires: libqt5-qdbus
- Fix typos in descriptions
- Mention package name in 0001-Use-qdbus-qt5-and-qdbusviewer-qt5.patch</changelog>
  <changelog author="christophe@krop.fr" date="1503144000">- Add 0002-Make-sure-the-dbus-xml-interface-file-exists-before-.patch.
  Fixes build with CMake &gt;= 3.9</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * Make sure the dbus xml interface file exists before it's used
- Remove patches, now upstream:
  * 0002-Make-sure-the-dbus-xml-interface-file-exists-before-.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508587200">- Add #!BuildIgnore to break the
  plasma5-workspace-devel -&gt; plasma5-workspace -&gt; kwin5 -&gt; kdialog
  dep chain which results in pulling in kdebase4-runtime on 42.2</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Add missing include</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Remove obsolete reviewboardrc file
  * kcm hotkeys: Add space in front of spinbox suffix "ms"
  * Fix double space in UI string</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Remove verbose debugging statement</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="d86352f8cd13a12d39818c6257518904e339405ba3fa44bf795bf9a6d641ce0f" name="khotkeys5-lang" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1502971200">- Add Requires: libqt5-qdbus
- Fix typos in descriptions
- Mention package name in 0001-Use-qdbus-qt5-and-qdbusviewer-qt5.patch</changelog>
  <changelog author="christophe@krop.fr" date="1503144000">- Add 0002-Make-sure-the-dbus-xml-interface-file-exists-before-.patch.
  Fixes build with CMake &gt;= 3.9</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * Make sure the dbus xml interface file exists before it's used
- Remove patches, now upstream:
  * 0002-Make-sure-the-dbus-xml-interface-file-exists-before-.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508587200">- Add #!BuildIgnore to break the
  plasma5-workspace-devel -&gt; plasma5-workspace -&gt; kwin5 -&gt; kdialog
  dep chain which results in pulling in kdebase4-runtime on 42.2</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Add missing include</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Remove obsolete reviewboardrc file
  * kcm hotkeys: Add space in front of spinbox suffix "ms"
  * Fix double space in UI string</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Remove verbose debugging statement</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="9878eccca46355317f2cbaf09ecc7aa5fd9a688536f9d09fde1a898988f484ff" name="kinfocenter5" arch="src">
  <version epoch="0" ver="5.12.6" rel="lp150.3.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Allow to select module with keyboard
  * Do not leak XVisualInfo (X11 EGL path)
  * Do not mark {variantLabel} as translatable
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Drop custom app metadata setting, KAboutData::setApplicationData does it
  * Call KLocalizedString::setApplicationDomain before first i18n usage</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Const'ify, initialize variable, minor optimization
  * Update copyright
  * Fix cmake warning
  * Const'ify
  * When we click on "clear search" clear lineedit too
  * Do not leak XVisualInfo (GLX path)
  * Don't build pci module on ARM (kde#335908)
  * Remove obsolete reviewboardrc file
  * const'ify
  * Use isEmpty
  * Port to new connect api
  * Port to new connect api
  * USe nullptr. Clean up. Optimization
  * Add gitignore
  * Reindent it
  * Make as explicit, use nullptr
  * Fix clazy warning
  * Fix some clazy warning
  * simplify check
  * Ise nullptr
  * Modernize code
  * opengl: Dummy string should not be translatable
  * Expose the memory usage percentages to accessibility tools</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Ensure Registry gets destroyed before the Wayland connection (kde#387479)
  * Show high-resolution and vector logos properly in HighDPI mode (kde#388633)</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * kcm_energyinfo: Allow changing of the timespan if no data available</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * kcm_opengl: Fix EGL info retrieval.</changelog>
  <changelog author="wbauer@tmo.at" date="1525780800">- Add kcm_opengl-Fix-retrieval-of-DRI-information.patch to fix
  displaying 3D acceleration info and kernel module in "OpenGL"
  with kernels &gt;= 3.12</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Update kinfocenter docbook to 5.12</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="0f13bc98e0e16add9135c268930da5074004ad8e86f06f1f53ead1ad658fc2a8" name="kinfocenter5" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.3.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Allow to select module with keyboard
  * Do not leak XVisualInfo (X11 EGL path)
  * Do not mark {variantLabel} as translatable
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Drop custom app metadata setting, KAboutData::setApplicationData does it
  * Call KLocalizedString::setApplicationDomain before first i18n usage</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Const'ify, initialize variable, minor optimization
  * Update copyright
  * Fix cmake warning
  * Const'ify
  * When we click on "clear search" clear lineedit too
  * Do not leak XVisualInfo (GLX path)
  * Don't build pci module on ARM (kde#335908)
  * Remove obsolete reviewboardrc file
  * const'ify
  * Use isEmpty
  * Port to new connect api
  * Port to new connect api
  * USe nullptr. Clean up. Optimization
  * Add gitignore
  * Reindent it
  * Make as explicit, use nullptr
  * Fix clazy warning
  * Fix some clazy warning
  * simplify check
  * Ise nullptr
  * Modernize code
  * opengl: Dummy string should not be translatable
  * Expose the memory usage percentages to accessibility tools</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Ensure Registry gets destroyed before the Wayland connection (kde#387479)
  * Show high-resolution and vector logos properly in HighDPI mode (kde#388633)</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * kcm_energyinfo: Allow changing of the timespan if no data available</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * kcm_opengl: Fix EGL info retrieval.</changelog>
  <changelog author="wbauer@tmo.at" date="1525780800">- Add kcm_opengl-Fix-retrieval-of-DRI-information.patch to fix
  displaying 3D acceleration info and kernel module in "OpenGL"
  with kernels &gt;= 3.12</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Update kinfocenter docbook to 5.12</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="ae035b1d52d504962ab3e456c224617b73958e712287b3ae652aa66bcab2c057" name="kinfocenter5-lang" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.3.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Allow to select module with keyboard
  * Do not leak XVisualInfo (X11 EGL path)
  * Do not mark {variantLabel} as translatable
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Drop custom app metadata setting, KAboutData::setApplicationData does it
  * Call KLocalizedString::setApplicationDomain before first i18n usage</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Const'ify, initialize variable, minor optimization
  * Update copyright
  * Fix cmake warning
  * Const'ify
  * When we click on "clear search" clear lineedit too
  * Do not leak XVisualInfo (GLX path)
  * Don't build pci module on ARM (kde#335908)
  * Remove obsolete reviewboardrc file
  * const'ify
  * Use isEmpty
  * Port to new connect api
  * Port to new connect api
  * USe nullptr. Clean up. Optimization
  * Add gitignore
  * Reindent it
  * Make as explicit, use nullptr
  * Fix clazy warning
  * Fix some clazy warning
  * simplify check
  * Ise nullptr
  * Modernize code
  * opengl: Dummy string should not be translatable
  * Expose the memory usage percentages to accessibility tools</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Ensure Registry gets destroyed before the Wayland connection (kde#387479)
  * Show high-resolution and vector logos properly in HighDPI mode (kde#388633)</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * kcm_energyinfo: Allow changing of the timespan if no data available</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * kcm_opengl: Fix EGL info retrieval.</changelog>
  <changelog author="wbauer@tmo.at" date="1525780800">- Add kcm_opengl-Fix-retrieval-of-DRI-information.patch to fix
  displaying 3D acceleration info and kernel module in "OpenGL"
  with kernels &gt;= 3.12</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Update kinfocenter docbook to 5.12</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="ca9fc831dd7ef2dc524d65ca60805a3c808ff4e4da7fb0e79abdc82245fc2b03" name="kiwi-man-pages" arch="x86_64">
  <version epoch="0" ver="9.15.2" rel="lp150.2.3.1"/>
  <changelog author="ms@suse.de" date="1524744000">- Extend test-image-azure integration test
  Use xfs as filesystem and set a tag to also test image tags</changelog>
  <changelog author="ms@suse.de" date="1525089600">- Bump version: 9.14.5 ? 9.14.6</changelog>
  <changelog author="ms@suse.de" date="1525435200">- Fix setup of kiwi_lvm profile variable
  kiwi_lvm was always set to true if a volume management system
  is in use. However it should only be set to true if the
  selected volume management system is lvm. The same applies
  to the kiwi_lvmgroup variable which also only makes sense
  if the lvm volume management system is used.
  This Fixes bsc#1090427</changelog>
  <changelog author="ms@suse.de" date="1525435201">- Fixed check for volume group in use
  The former implementation evaluates the output of the vgs
  command and set the volume group as in use if one of the
  listed volume groups on the host contains the group name
  set by the image description. This would also match if the
  group name set in the image description is e.g 'System' and
  the a volume group on the host with name 'SystemVG' exists.
  However a conflict only exists on exact match of the name.
  The proposed fix is to use the --select feature from vgs
  and let it show information on exact match of the vg_name
  field. The code in kiwi then just evaluates if the selection
  by vgs has a value or not. This Fixes #721</changelog>
  <changelog author="dcassany@suse.com" date="1525435202">- Some simple code cleaning</changelog>
  <changelog author="ms@suse.de" date="1525435203">- Bump version: 9.14.6 ? 9.14.7</changelog>
  <changelog author="dcassany@suse.com" date="1525435204">- Add uninstall pacakges type
  This commit adds a new `uninstall` type for packages. Packages listed
  with this type will be removed by the package manager cleaning also any
  unneeded dependency. The removal is executed after running `config.sh`.
  Also in this commit `delete` type for packages is now executed after
  `uninstall` packages, meaing it also happens after `config.sh`.
  Fixes #625</changelog>
  <changelog author="dcassany@suse.com" date="1525694400">- Refining the uninstall type implementation</changelog>
  <changelog author="dcassany@suse.com" date="1525694401">- Add comment in pinch_system calls</changelog>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
</package>
<package pkgid="ba5927178fb0b044159020cc611700038186d7338975d94dd47c684dfb8e7cf9" name="kiwi-man-pages" arch="x86_64">
  <version epoch="0" ver="9.15.3" rel="lp150.2.6.1"/>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="dcassany@suse.com" date="1526299200">- Add additionaltags containerconfig attribute
  This commit adds `additionaltags` attribute, so multiple tags to
  a container image can be defined in a comma separated value.
  Fixes #713</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
  <changelog author="dcassany@suse.com" date="1527163200">- Do not delete uncompressed base docker images
  Fixes #739</changelog>
  <changelog author="ms@suse.de" date="1527508800">- Do not create static dev nodes in root init
  For compatibility reasons kiwi created a set of static device
  nodes when initializing a new image root system. With the
  presence of devtmpfs this should no longer be needed. In addition
  the static dev node setup now also causes problems on filesystems
  like btrfs which was the reason to delete this code now.
  This Fixes bsc#1087104</changelog>
  <changelog author="dcassany@suse.com" date="1527508801">- Add service dependencies in generators
  Correctly adding the initrd-root-fs.target service dependency to
  auto generated sysroot.mount for kiwi-live and kiwi-overlay dracut
  modules.
  Fixes #741</changelog>
  <changelog author="dcassany@suse.com" date="1527508802">- Verify file does not exist before creating symlink</changelog>
  <changelog author="ms@suse.de" date="1527508803">- Added support for config-cdroot archive
  The image description now allows an optional file named:
  config-cdroot.tar[.compression_postfix]. The file gets
  unpacked as user data for live and install ISO images.
  This allows users to add e.g license files or reference
  documentation to the ISO image. This Fixes #737</changelog>
  <changelog author="ms@suse.de" date="1527508804">- Added documentation for config-cdroot archive</changelog>
  <changelog author="ms@suse.de" date="1527508805">- Fix setup of LOADER_TYPE in sysconfig/bootloader
  LOADER_TYPE value for the grub2 bootloader depends on
  the use of EFI. This Fixes bsc#1094883</changelog>
  <changelog author="ms@suse.de" date="1527595200">- Bump version: 9.15.2 ? 9.15.3</changelog>
</package>
<package pkgid="d0561b88ed48ac5cb7a7b9e9cb9634ae335888b5dc15e61faa41fe2a5761ace3" name="kiwi-man-pages" arch="x86_64">
  <version epoch="0" ver="9.16.18" rel="lp150.2.9.1"/>
  <changelog author="dcassany@suse.de" date="1537444800">- Adding bugfix trace for bsc#1108508
  bsc#1108508 ticket was fixed with bf556a96 and 77517cff commits. Just
  adding the ticket reference here.</changelog>
  <changelog author="ms@suse.de" date="1537531200">- Update kiwi tools README
  Delete obsolete entries for tools no longer present</changelog>
  <changelog author="ms@suse.de" date="1537790400">- Update docs for setting up development environment
  Reference py3.6 when showing example tox call. Also
  delete a py version reference where it was not needed</changelog>
  <changelog author="ms@suse.de" date="1537790401">- Include PDF build of documentation to the package
  Bundle a PDF version of the online documentation with the rpm package
  build. Due to the complexity of getting a latex build environment into
  the travis CI which does not take forever to install, the bundling of
  a built PDF into the pypi archive has been skipped. Users installing
  from pypi would need to install a latex env on their machine and
  run make latexpdf from the installed bundle.
  This Fixes #819</changelog>
  <changelog author="dcassany@suse.de" date="1537876800">- Make volume id customizable for installation ISOs
  This commit makes volid attribute also available for OEM images.
  The installation media makes use of the volid value. Only posix
  safe names are allowed, up to 32 characters.
  Fixes #811</changelog>
  <changelog author="ms@suse.de" date="1537963200">- Update development doc chapter per review by Tom</changelog>
  <changelog author="ms@suse.de" date="1537963201">- Customize latex output for look and feel</changelog>
  <changelog author="ms@suse.de" date="1537963202">- Bump version: 9.16.14 ? 9.16.15</changelog>
  <changelog author="ms@suse.de" date="1537963203">- Disable warnings report from pytest
  By default pytest now generates warnings for all modules
  used in the tox environment. This information is nice
  but taints the test output of the code of this project
  and is therefore unwanted.</changelog>
  <changelog author="ms@suse.de" date="1537963204">- Bump version: 9.16.15 ? 9.16.16</changelog>
  <changelog author="ms@suse.de" date="1537963205">- Fixup make build target
  Don't include auto generated schema docs into the source
  tarball. Also cleanup MANIFEST.in from files no longer
  present in the repository</changelog>
  <changelog author="ms@suse.de" date="1537963206">- Bump version: 9.16.16 ? 9.16.17</changelog>
  <changelog author="dcassany@suse.de" date="1537963207">- Create parent qgroup when snapper is present
  This commit creates a new parent quota group (1/0) of level 1 when
  btrfs_quota_groups is enabled and snapper present into the image
  root tree.
  Related to bsc#1093518 and #812</changelog>
  <changelog author="ms@suse.de" date="1537963208">- Bump version: 9.16.17 ? 9.16.18</changelog>
  <changelog author="ms@suse.de" date="1538049600">- Disable deploy stage in Travis</changelog>
  <changelog author="ms@suse.de" date="1538049601">- Disable version tagging in maintenance branch</changelog>
  <changelog author="ms@suse.de" date="1538049602">- Bugzilla reference commit
  This commit references the fix from commit:6b9e321048602945214
  with the bug id bsc#1109882 in bugzilla.</changelog>
  <changelog author="ms@suse.de" date="1538222400">- Fixed broken link to ec2uploadimg tool</changelog>
  <changelog author="ms@suse.de" date="1538740800">- Fixed URI handling with token query option
  So far only the query format ?credentials=... was supported.
  In case of ?random_token_data the returned uri was truncated
  and also the format check on the query caused a python trace.
  This Fixes #830 and Fixes #828</changelog>
  <changelog author="ms@suse.de" date="1539000000">- Adding bugfix trace for bsc#1110869
  bsc#1108508 ticket was fixed with request #831
  from SUSE/fix_uri_handler</changelog>
</package>
<package pkgid="4eec6b6b24afcd94d710199c85ea2b99772b415872295ac3a60d3f722804904b" name="kiwi-pxeboot" arch="x86_64">
  <version epoch="0" ver="9.15.2" rel="lp150.2.3.1"/>
  <changelog author="ms@suse.de" date="1524744000">- Extend test-image-azure integration test
  Use xfs as filesystem and set a tag to also test image tags</changelog>
  <changelog author="ms@suse.de" date="1525089600">- Bump version: 9.14.5 ? 9.14.6</changelog>
  <changelog author="ms@suse.de" date="1525435200">- Fix setup of kiwi_lvm profile variable
  kiwi_lvm was always set to true if a volume management system
  is in use. However it should only be set to true if the
  selected volume management system is lvm. The same applies
  to the kiwi_lvmgroup variable which also only makes sense
  if the lvm volume management system is used.
  This Fixes bsc#1090427</changelog>
  <changelog author="ms@suse.de" date="1525435201">- Fixed check for volume group in use
  The former implementation evaluates the output of the vgs
  command and set the volume group as in use if one of the
  listed volume groups on the host contains the group name
  set by the image description. This would also match if the
  group name set in the image description is e.g 'System' and
  the a volume group on the host with name 'SystemVG' exists.
  However a conflict only exists on exact match of the name.
  The proposed fix is to use the --select feature from vgs
  and let it show information on exact match of the vg_name
  field. The code in kiwi then just evaluates if the selection
  by vgs has a value or not. This Fixes #721</changelog>
  <changelog author="dcassany@suse.com" date="1525435202">- Some simple code cleaning</changelog>
  <changelog author="ms@suse.de" date="1525435203">- Bump version: 9.14.6 ? 9.14.7</changelog>
  <changelog author="dcassany@suse.com" date="1525435204">- Add uninstall pacakges type
  This commit adds a new `uninstall` type for packages. Packages listed
  with this type will be removed by the package manager cleaning also any
  unneeded dependency. The removal is executed after running `config.sh`.
  Also in this commit `delete` type for packages is now executed after
  `uninstall` packages, meaing it also happens after `config.sh`.
  Fixes #625</changelog>
  <changelog author="dcassany@suse.com" date="1525694400">- Refining the uninstall type implementation</changelog>
  <changelog author="dcassany@suse.com" date="1525694401">- Add comment in pinch_system calls</changelog>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
</package>
<package pkgid="1e4043934add8c03765193b910b1bffe07c21854302e2e1aff66c485cac9e294" name="kiwi-pxeboot" arch="x86_64">
  <version epoch="0" ver="9.15.3" rel="lp150.2.6.1"/>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="dcassany@suse.com" date="1526299200">- Add additionaltags containerconfig attribute
  This commit adds `additionaltags` attribute, so multiple tags to
  a container image can be defined in a comma separated value.
  Fixes #713</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
  <changelog author="dcassany@suse.com" date="1527163200">- Do not delete uncompressed base docker images
  Fixes #739</changelog>
  <changelog author="ms@suse.de" date="1527508800">- Do not create static dev nodes in root init
  For compatibility reasons kiwi created a set of static device
  nodes when initializing a new image root system. With the
  presence of devtmpfs this should no longer be needed. In addition
  the static dev node setup now also causes problems on filesystems
  like btrfs which was the reason to delete this code now.
  This Fixes bsc#1087104</changelog>
  <changelog author="dcassany@suse.com" date="1527508801">- Add service dependencies in generators
  Correctly adding the initrd-root-fs.target service dependency to
  auto generated sysroot.mount for kiwi-live and kiwi-overlay dracut
  modules.
  Fixes #741</changelog>
  <changelog author="dcassany@suse.com" date="1527508802">- Verify file does not exist before creating symlink</changelog>
  <changelog author="ms@suse.de" date="1527508803">- Added support for config-cdroot archive
  The image description now allows an optional file named:
  config-cdroot.tar[.compression_postfix]. The file gets
  unpacked as user data for live and install ISO images.
  This allows users to add e.g license files or reference
  documentation to the ISO image. This Fixes #737</changelog>
  <changelog author="ms@suse.de" date="1527508804">- Added documentation for config-cdroot archive</changelog>
  <changelog author="ms@suse.de" date="1527508805">- Fix setup of LOADER_TYPE in sysconfig/bootloader
  LOADER_TYPE value for the grub2 bootloader depends on
  the use of EFI. This Fixes bsc#1094883</changelog>
  <changelog author="ms@suse.de" date="1527595200">- Bump version: 9.15.2 ? 9.15.3</changelog>
</package>
<package pkgid="e0d30d4a57c1f38ed285376334945563a971f0223c419a964fd87a94f109a41a" name="kiwi-pxeboot" arch="x86_64">
  <version epoch="0" ver="9.16.18" rel="lp150.2.9.1"/>
  <changelog author="dcassany@suse.de" date="1537444800">- Adding bugfix trace for bsc#1108508
  bsc#1108508 ticket was fixed with bf556a96 and 77517cff commits. Just
  adding the ticket reference here.</changelog>
  <changelog author="ms@suse.de" date="1537531200">- Update kiwi tools README
  Delete obsolete entries for tools no longer present</changelog>
  <changelog author="ms@suse.de" date="1537790400">- Update docs for setting up development environment
  Reference py3.6 when showing example tox call. Also
  delete a py version reference where it was not needed</changelog>
  <changelog author="ms@suse.de" date="1537790401">- Include PDF build of documentation to the package
  Bundle a PDF version of the online documentation with the rpm package
  build. Due to the complexity of getting a latex build environment into
  the travis CI which does not take forever to install, the bundling of
  a built PDF into the pypi archive has been skipped. Users installing
  from pypi would need to install a latex env on their machine and
  run make latexpdf from the installed bundle.
  This Fixes #819</changelog>
  <changelog author="dcassany@suse.de" date="1537876800">- Make volume id customizable for installation ISOs
  This commit makes volid attribute also available for OEM images.
  The installation media makes use of the volid value. Only posix
  safe names are allowed, up to 32 characters.
  Fixes #811</changelog>
  <changelog author="ms@suse.de" date="1537963200">- Update development doc chapter per review by Tom</changelog>
  <changelog author="ms@suse.de" date="1537963201">- Customize latex output for look and feel</changelog>
  <changelog author="ms@suse.de" date="1537963202">- Bump version: 9.16.14 ? 9.16.15</changelog>
  <changelog author="ms@suse.de" date="1537963203">- Disable warnings report from pytest
  By default pytest now generates warnings for all modules
  used in the tox environment. This information is nice
  but taints the test output of the code of this project
  and is therefore unwanted.</changelog>
  <changelog author="ms@suse.de" date="1537963204">- Bump version: 9.16.15 ? 9.16.16</changelog>
  <changelog author="ms@suse.de" date="1537963205">- Fixup make build target
  Don't include auto generated schema docs into the source
  tarball. Also cleanup MANIFEST.in from files no longer
  present in the repository</changelog>
  <changelog author="ms@suse.de" date="1537963206">- Bump version: 9.16.16 ? 9.16.17</changelog>
  <changelog author="dcassany@suse.de" date="1537963207">- Create parent qgroup when snapper is present
  This commit creates a new parent quota group (1/0) of level 1 when
  btrfs_quota_groups is enabled and snapper present into the image
  root tree.
  Related to bsc#1093518 and #812</changelog>
  <changelog author="ms@suse.de" date="1537963208">- Bump version: 9.16.17 ? 9.16.18</changelog>
  <changelog author="ms@suse.de" date="1538049600">- Disable deploy stage in Travis</changelog>
  <changelog author="ms@suse.de" date="1538049601">- Disable version tagging in maintenance branch</changelog>
  <changelog author="ms@suse.de" date="1538049602">- Bugzilla reference commit
  This commit references the fix from commit:6b9e321048602945214
  with the bug id bsc#1109882 in bugzilla.</changelog>
  <changelog author="ms@suse.de" date="1538222400">- Fixed broken link to ec2uploadimg tool</changelog>
  <changelog author="ms@suse.de" date="1538740800">- Fixed URI handling with token query option
  So far only the query format ?credentials=... was supported.
  In case of ?random_token_data the returned uri was truncated
  and also the format check on the query caused a python trace.
  This Fixes #830 and Fixes #828</changelog>
  <changelog author="ms@suse.de" date="1539000000">- Adding bugfix trace for bsc#1110869
  bsc#1108508 ticket was fixed with request #831
  from SUSE/fix_uri_handler</changelog>
</package>
<package pkgid="b8707e8b03cb52c012d5159150507388724d43c93bc55fd3fb322a8904206690" name="kiwi-tools" arch="x86_64">
  <version epoch="0" ver="9.15.2" rel="lp150.2.3.1"/>
  <changelog author="ms@suse.de" date="1524744000">- Extend test-image-azure integration test
  Use xfs as filesystem and set a tag to also test image tags</changelog>
  <changelog author="ms@suse.de" date="1525089600">- Bump version: 9.14.5 ? 9.14.6</changelog>
  <changelog author="ms@suse.de" date="1525435200">- Fix setup of kiwi_lvm profile variable
  kiwi_lvm was always set to true if a volume management system
  is in use. However it should only be set to true if the
  selected volume management system is lvm. The same applies
  to the kiwi_lvmgroup variable which also only makes sense
  if the lvm volume management system is used.
  This Fixes bsc#1090427</changelog>
  <changelog author="ms@suse.de" date="1525435201">- Fixed check for volume group in use
  The former implementation evaluates the output of the vgs
  command and set the volume group as in use if one of the
  listed volume groups on the host contains the group name
  set by the image description. This would also match if the
  group name set in the image description is e.g 'System' and
  the a volume group on the host with name 'SystemVG' exists.
  However a conflict only exists on exact match of the name.
  The proposed fix is to use the --select feature from vgs
  and let it show information on exact match of the vg_name
  field. The code in kiwi then just evaluates if the selection
  by vgs has a value or not. This Fixes #721</changelog>
  <changelog author="dcassany@suse.com" date="1525435202">- Some simple code cleaning</changelog>
  <changelog author="ms@suse.de" date="1525435203">- Bump version: 9.14.6 ? 9.14.7</changelog>
  <changelog author="dcassany@suse.com" date="1525435204">- Add uninstall pacakges type
  This commit adds a new `uninstall` type for packages. Packages listed
  with this type will be removed by the package manager cleaning also any
  unneeded dependency. The removal is executed after running `config.sh`.
  Also in this commit `delete` type for packages is now executed after
  `uninstall` packages, meaing it also happens after `config.sh`.
  Fixes #625</changelog>
  <changelog author="dcassany@suse.com" date="1525694400">- Refining the uninstall type implementation</changelog>
  <changelog author="dcassany@suse.com" date="1525694401">- Add comment in pinch_system calls</changelog>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
</package>
<package pkgid="b7216c037d87c3e071e2dab4964fa696d03ea72f0c334c903ce92b27fcd4a5b7" name="kiwi-tools" arch="x86_64">
  <version epoch="0" ver="9.15.3" rel="lp150.2.6.1"/>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="dcassany@suse.com" date="1526299200">- Add additionaltags containerconfig attribute
  This commit adds `additionaltags` attribute, so multiple tags to
  a container image can be defined in a comma separated value.
  Fixes #713</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
  <changelog author="dcassany@suse.com" date="1527163200">- Do not delete uncompressed base docker images
  Fixes #739</changelog>
  <changelog author="ms@suse.de" date="1527508800">- Do not create static dev nodes in root init
  For compatibility reasons kiwi created a set of static device
  nodes when initializing a new image root system. With the
  presence of devtmpfs this should no longer be needed. In addition
  the static dev node setup now also causes problems on filesystems
  like btrfs which was the reason to delete this code now.
  This Fixes bsc#1087104</changelog>
  <changelog author="dcassany@suse.com" date="1527508801">- Add service dependencies in generators
  Correctly adding the initrd-root-fs.target service dependency to
  auto generated sysroot.mount for kiwi-live and kiwi-overlay dracut
  modules.
  Fixes #741</changelog>
  <changelog author="dcassany@suse.com" date="1527508802">- Verify file does not exist before creating symlink</changelog>
  <changelog author="ms@suse.de" date="1527508803">- Added support for config-cdroot archive
  The image description now allows an optional file named:
  config-cdroot.tar[.compression_postfix]. The file gets
  unpacked as user data for live and install ISO images.
  This allows users to add e.g license files or reference
  documentation to the ISO image. This Fixes #737</changelog>
  <changelog author="ms@suse.de" date="1527508804">- Added documentation for config-cdroot archive</changelog>
  <changelog author="ms@suse.de" date="1527508805">- Fix setup of LOADER_TYPE in sysconfig/bootloader
  LOADER_TYPE value for the grub2 bootloader depends on
  the use of EFI. This Fixes bsc#1094883</changelog>
  <changelog author="ms@suse.de" date="1527595200">- Bump version: 9.15.2 ? 9.15.3</changelog>
</package>
<package pkgid="bfe3baf6677a87d141e3dfd0b5bb89aeaa9f2b0d29f503105e59c585d7b32e24" name="kiwi-tools" arch="x86_64">
  <version epoch="0" ver="9.16.18" rel="lp150.2.9.1"/>
  <changelog author="dcassany@suse.de" date="1537444800">- Adding bugfix trace for bsc#1108508
  bsc#1108508 ticket was fixed with bf556a96 and 77517cff commits. Just
  adding the ticket reference here.</changelog>
  <changelog author="ms@suse.de" date="1537531200">- Update kiwi tools README
  Delete obsolete entries for tools no longer present</changelog>
  <changelog author="ms@suse.de" date="1537790400">- Update docs for setting up development environment
  Reference py3.6 when showing example tox call. Also
  delete a py version reference where it was not needed</changelog>
  <changelog author="ms@suse.de" date="1537790401">- Include PDF build of documentation to the package
  Bundle a PDF version of the online documentation with the rpm package
  build. Due to the complexity of getting a latex build environment into
  the travis CI which does not take forever to install, the bundling of
  a built PDF into the pypi archive has been skipped. Users installing
  from pypi would need to install a latex env on their machine and
  run make latexpdf from the installed bundle.
  This Fixes #819</changelog>
  <changelog author="dcassany@suse.de" date="1537876800">- Make volume id customizable for installation ISOs
  This commit makes volid attribute also available for OEM images.
  The installation media makes use of the volid value. Only posix
  safe names are allowed, up to 32 characters.
  Fixes #811</changelog>
  <changelog author="ms@suse.de" date="1537963200">- Update development doc chapter per review by Tom</changelog>
  <changelog author="ms@suse.de" date="1537963201">- Customize latex output for look and feel</changelog>
  <changelog author="ms@suse.de" date="1537963202">- Bump version: 9.16.14 ? 9.16.15</changelog>
  <changelog author="ms@suse.de" date="1537963203">- Disable warnings report from pytest
  By default pytest now generates warnings for all modules
  used in the tox environment. This information is nice
  but taints the test output of the code of this project
  and is therefore unwanted.</changelog>
  <changelog author="ms@suse.de" date="1537963204">- Bump version: 9.16.15 ? 9.16.16</changelog>
  <changelog author="ms@suse.de" date="1537963205">- Fixup make build target
  Don't include auto generated schema docs into the source
  tarball. Also cleanup MANIFEST.in from files no longer
  present in the repository</changelog>
  <changelog author="ms@suse.de" date="1537963206">- Bump version: 9.16.16 ? 9.16.17</changelog>
  <changelog author="dcassany@suse.de" date="1537963207">- Create parent qgroup when snapper is present
  This commit creates a new parent quota group (1/0) of level 1 when
  btrfs_quota_groups is enabled and snapper present into the image
  root tree.
  Related to bsc#1093518 and #812</changelog>
  <changelog author="ms@suse.de" date="1537963208">- Bump version: 9.16.17 ? 9.16.18</changelog>
  <changelog author="ms@suse.de" date="1538049600">- Disable deploy stage in Travis</changelog>
  <changelog author="ms@suse.de" date="1538049601">- Disable version tagging in maintenance branch</changelog>
  <changelog author="ms@suse.de" date="1538049602">- Bugzilla reference commit
  This commit references the fix from commit:6b9e321048602945214
  with the bug id bsc#1109882 in bugzilla.</changelog>
  <changelog author="ms@suse.de" date="1538222400">- Fixed broken link to ec2uploadimg tool</changelog>
  <changelog author="ms@suse.de" date="1538740800">- Fixed URI handling with token query option
  So far only the query format ?credentials=... was supported.
  In case of ?random_token_data the returned uri was truncated
  and also the format check on the query caused a python trace.
  This Fixes #830 and Fixes #828</changelog>
  <changelog author="ms@suse.de" date="1539000000">- Adding bugfix trace for bsc#1110869
  bsc#1108508 ticket was fixed with request #831
  from SUSE/fix_uri_handler</changelog>
</package>
<package pkgid="fa456718e13748afd29c5dcf703a199d5a28509f6d67572b21e313f97d7ad4ee" name="kmod" arch="src">
  <version epoch="0" ver="25" rel="lp150.4.3.1"/>
  <changelog author="meissner@suse.com" date="1425643200">- 0001-use-correct-sort-method-in-test-array.patch: use correct test
  bsc#920930</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1427976000">- If kmod packge changes, regenerate the initrd.</changelog>
  <changelog author="mmarek@suse.cz" date="1429617600">- Update to kmod 20
  * More robust ELF parsing
  * To fix a race, modprobe only looks at modules.builtin to
  determine a builtin module, so e.g. 'modprobe vt' will no longer
  work.
  * Other fixes
  * Testsuite moved to a separate package, since it is now building
  the test modules from sources, which requires the kernel package.
  * dropped kmod-blacklist-fixtest.patch (merged upstream)
  * includes 0001-Fix-race-while-loading-modules.patch (bsc#998906)</changelog>
  <changelog author="jengelh@inai.de" date="1446897600">- Update to new upstream release 21
  * The kmod tool now prints the relevant configuration options it was built
  with when the "--version" argument is passed.</changelog>
  <changelog author="jengelh@inai.de" date="1449489600">- Update to new upstream release 22
  * support `insmod -f`
  * depmod: do not fall back to uname on bad version</changelog>
  <changelog author="dvaleev@suse.com" date="1455019200">- Fix kernel master build for ppc64le (bsc#1070209)
  depmod-Ignore_PowerPC64_ABIv2_.TOC.symbol.patch</changelog>
  <changelog author="mmarek@suse.cz" date="1466164800">- libkmod: Handle long lines in /proc/modules (bsc#983754)
  0001-libkmod-Handle-long-lines-in-proc-modules.patch</changelog>
  <changelog author="mmarek@suse.com" date="1469102400">- Regenerate initrd on kmod update (bsc#989788)
- Sync specfile with openSUSE:Factory</changelog>
  <changelog author="jengelh@inai.de" date="1469102401">- Update to new upstream release 23
  * Don't add comment to modules.devname if it would otherwise be
  empty.
  * Ignore .TOC. symbols in depmod parsing.
  * Fix crash on modinfo while checking for available signature of
  unknown type.
  * Teach modinfo about PKCS#7 module signatures.
- Drop depmod-Ignore_PowerPC64_ABIv2_.TOC.symbol.patch (merged),
  0001-libkmod-Handle-long-lines-in-proc-modules.patch (merged)</changelog>
  <changelog author="yousaf.kaukab@suse.com" date="1479816000">- 0002-depmod-ignore-related-modules-in-depmod_report_cycle.patch:
  Fix buffer overflow when printing modules in cyclic dependency
  chain (boo#1008186)</changelog>
  <changelog author="jengelh@inai.de" date="1499342400">- Update to new upstream release 24
  * libkmod: fix  use of strcpy
  * depmod: fix string overflow
  * depmod: ignore related modules in depmod_report_cycles
  * libkmod: Fix handling of quotes in kernel command line
  * libkmod-config: replace 0/1 with bool
  * depmod: handle nested loops
- Drop 0001-use-correct-sort-method-in-test-array.patch,
  0002-depmod-ignore-related-modules-in-depmod_report_cycle.patch,
  0009-libkmod-Implement-filtering-of-unsupported-modules-o.patch
  (applied upstream)
- Remove support for openSUSE &lt; 13.2 (non-dracut mkinitrd)
- Separate bash completion functions into extra package
- Move some of the symlinks from kmod-compat to kmod,
  as kmod still does not have native support for all functions.</changelog>
  <changelog author="jengelh@inai.de" date="1501070400">- Add versioned requires between kmod-compat -&gt; kmod</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="msuchanek@suse.com" date="1511179200">- Move dependency on suse-module-tools to kmod-compat (bsc#1047911).</changelog>
  <changelog author="msuchanek@suse.com" date="1512648000">- Fix resolving .TOC. in modules on 4.4 and older kernel (bsc#1070209)
  depmod-Don-t-add-.TOC.-when-it-s-in-the-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1517486400">- Update to kmod v25
  * Fix resolving symbols with MODULE_REL_CRCS (bsc#1077867)
- Drop depmod-Don-t-add-.TOC.-when-it-s-in-the-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1520510400">- Fix PKCS#7 signature display in modinfo (bsc#1077693).
  * Add libkmod-signature-implement-pkcs7-parsing-with-asn1c.patch
  * Add libkmod-signature-Fix-crash-when-module-signature-is.patch
  * Refresh 0010-modprobe-Implement-allow-unsupported-modules.patch</changelog>
  <changelog author="ro@suse.de" date="1521201600">- for sle, buildexclude the 32bit platforms in kmod-testsuite,
  they have no kernel binaries anyway (bnc#1085640)</changelog>
  <changelog author="msuchanek@suse.com" date="1523016000">- Fix crash when PKCS#7 signer name is not present in signature (bsc#1088244)
  + libkmod-signature-pkcs-7-fix-crash-when-signer-info-.patch</changelog>
  <changelog author="vlad.botanic@gmail.com" date="1528459200">- allow 'modprobe -c' print the status of "allow_unsupported_modules" option.
  + 0012-modprobe-print-unsupported-status.patch</changelog>
</package>
<package pkgid="9eae98747c85717297df54e6d2fb5caf9cb624dc2bbf4c98300cf019a31703d8" name="kmod" arch="x86_64">
  <version epoch="0" ver="25" rel="lp150.4.3.1"/>
  <changelog author="meissner@suse.com" date="1425643200">- 0001-use-correct-sort-method-in-test-array.patch: use correct test
  bsc#920930</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1427976000">- If kmod packge changes, regenerate the initrd.</changelog>
  <changelog author="mmarek@suse.cz" date="1429617600">- Update to kmod 20
  * More robust ELF parsing
  * To fix a race, modprobe only looks at modules.builtin to
  determine a builtin module, so e.g. 'modprobe vt' will no longer
  work.
  * Other fixes
  * Testsuite moved to a separate package, since it is now building
  the test modules from sources, which requires the kernel package.
  * dropped kmod-blacklist-fixtest.patch (merged upstream)
  * includes 0001-Fix-race-while-loading-modules.patch (bsc#998906)</changelog>
  <changelog author="jengelh@inai.de" date="1446897600">- Update to new upstream release 21
  * The kmod tool now prints the relevant configuration options it was built
  with when the "--version" argument is passed.</changelog>
  <changelog author="jengelh@inai.de" date="1449489600">- Update to new upstream release 22
  * support `insmod -f`
  * depmod: do not fall back to uname on bad version</changelog>
  <changelog author="dvaleev@suse.com" date="1455019200">- Fix kernel master build for ppc64le (bsc#1070209)
  depmod-Ignore_PowerPC64_ABIv2_.TOC.symbol.patch</changelog>
  <changelog author="mmarek@suse.cz" date="1466164800">- libkmod: Handle long lines in /proc/modules (bsc#983754)
  0001-libkmod-Handle-long-lines-in-proc-modules.patch</changelog>
  <changelog author="mmarek@suse.com" date="1469102400">- Regenerate initrd on kmod update (bsc#989788)
- Sync specfile with openSUSE:Factory</changelog>
  <changelog author="jengelh@inai.de" date="1469102401">- Update to new upstream release 23
  * Don't add comment to modules.devname if it would otherwise be
  empty.
  * Ignore .TOC. symbols in depmod parsing.
  * Fix crash on modinfo while checking for available signature of
  unknown type.
  * Teach modinfo about PKCS#7 module signatures.
- Drop depmod-Ignore_PowerPC64_ABIv2_.TOC.symbol.patch (merged),
  0001-libkmod-Handle-long-lines-in-proc-modules.patch (merged)</changelog>
  <changelog author="yousaf.kaukab@suse.com" date="1479816000">- 0002-depmod-ignore-related-modules-in-depmod_report_cycle.patch:
  Fix buffer overflow when printing modules in cyclic dependency
  chain (boo#1008186)</changelog>
  <changelog author="jengelh@inai.de" date="1499342400">- Update to new upstream release 24
  * libkmod: fix  use of strcpy
  * depmod: fix string overflow
  * depmod: ignore related modules in depmod_report_cycles
  * libkmod: Fix handling of quotes in kernel command line
  * libkmod-config: replace 0/1 with bool
  * depmod: handle nested loops
- Drop 0001-use-correct-sort-method-in-test-array.patch,
  0002-depmod-ignore-related-modules-in-depmod_report_cycle.patch,
  0009-libkmod-Implement-filtering-of-unsupported-modules-o.patch
  (applied upstream)
- Remove support for openSUSE &lt; 13.2 (non-dracut mkinitrd)
- Separate bash completion functions into extra package
- Move some of the symlinks from kmod-compat to kmod,
  as kmod still does not have native support for all functions.</changelog>
  <changelog author="jengelh@inai.de" date="1501070400">- Add versioned requires between kmod-compat -&gt; kmod</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="msuchanek@suse.com" date="1511179200">- Move dependency on suse-module-tools to kmod-compat (bsc#1047911).</changelog>
  <changelog author="msuchanek@suse.com" date="1512648000">- Fix resolving .TOC. in modules on 4.4 and older kernel (bsc#1070209)
  depmod-Don-t-add-.TOC.-when-it-s-in-the-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1517486400">- Update to kmod v25
  * Fix resolving symbols with MODULE_REL_CRCS (bsc#1077867)
- Drop depmod-Don-t-add-.TOC.-when-it-s-in-the-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1520510400">- Fix PKCS#7 signature display in modinfo (bsc#1077693).
  * Add libkmod-signature-implement-pkcs7-parsing-with-asn1c.patch
  * Add libkmod-signature-Fix-crash-when-module-signature-is.patch
  * Refresh 0010-modprobe-Implement-allow-unsupported-modules.patch</changelog>
  <changelog author="ro@suse.de" date="1521201600">- for sle, buildexclude the 32bit platforms in kmod-testsuite,
  they have no kernel binaries anyway (bnc#1085640)</changelog>
  <changelog author="msuchanek@suse.com" date="1523016000">- Fix crash when PKCS#7 signer name is not present in signature (bsc#1088244)
  + libkmod-signature-pkcs-7-fix-crash-when-signer-info-.patch</changelog>
  <changelog author="vlad.botanic@gmail.com" date="1528459200">- allow 'modprobe -c' print the status of "allow_unsupported_modules" option.
  + 0012-modprobe-print-unsupported-status.patch</changelog>
</package>
<package pkgid="5f3d28cff20ffcae00d5805d29d637e06ceddd3f8826164deed8fd8cc82340a8" name="kmod-bash-completion" arch="noarch">
  <version epoch="0" ver="25" rel="lp150.4.3.1"/>
  <changelog author="meissner@suse.com" date="1425643200">- 0001-use-correct-sort-method-in-test-array.patch: use correct test
  bsc#920930</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1427976000">- If kmod packge changes, regenerate the initrd.</changelog>
  <changelog author="mmarek@suse.cz" date="1429617600">- Update to kmod 20
  * More robust ELF parsing
  * To fix a race, modprobe only looks at modules.builtin to
  determine a builtin module, so e.g. 'modprobe vt' will no longer
  work.
  * Other fixes
  * Testsuite moved to a separate package, since it is now building
  the test modules from sources, which requires the kernel package.
  * dropped kmod-blacklist-fixtest.patch (merged upstream)
  * includes 0001-Fix-race-while-loading-modules.patch (bsc#998906)</changelog>
  <changelog author="jengelh@inai.de" date="1446897600">- Update to new upstream release 21
  * The kmod tool now prints the relevant configuration options it was built
  with when the "--version" argument is passed.</changelog>
  <changelog author="jengelh@inai.de" date="1449489600">- Update to new upstream release 22
  * support `insmod -f`
  * depmod: do not fall back to uname on bad version</changelog>
  <changelog author="dvaleev@suse.com" date="1455019200">- Fix kernel master build for ppc64le (bsc#1070209)
  depmod-Ignore_PowerPC64_ABIv2_.TOC.symbol.patch</changelog>
  <changelog author="mmarek@suse.cz" date="1466164800">- libkmod: Handle long lines in /proc/modules (bsc#983754)
  0001-libkmod-Handle-long-lines-in-proc-modules.patch</changelog>
  <changelog author="mmarek@suse.com" date="1469102400">- Regenerate initrd on kmod update (bsc#989788)
- Sync specfile with openSUSE:Factory</changelog>
  <changelog author="jengelh@inai.de" date="1469102401">- Update to new upstream release 23
  * Don't add comment to modules.devname if it would otherwise be
  empty.
  * Ignore .TOC. symbols in depmod parsing.
  * Fix crash on modinfo while checking for available signature of
  unknown type.
  * Teach modinfo about PKCS#7 module signatures.
- Drop depmod-Ignore_PowerPC64_ABIv2_.TOC.symbol.patch (merged),
  0001-libkmod-Handle-long-lines-in-proc-modules.patch (merged)</changelog>
  <changelog author="yousaf.kaukab@suse.com" date="1479816000">- 0002-depmod-ignore-related-modules-in-depmod_report_cycle.patch:
  Fix buffer overflow when printing modules in cyclic dependency
  chain (boo#1008186)</changelog>
  <changelog author="jengelh@inai.de" date="1499342400">- Update to new upstream release 24
  * libkmod: fix  use of strcpy
  * depmod: fix string overflow
  * depmod: ignore related modules in depmod_report_cycles
  * libkmod: Fix handling of quotes in kernel command line
  * libkmod-config: replace 0/1 with bool
  * depmod: handle nested loops
- Drop 0001-use-correct-sort-method-in-test-array.patch,
  0002-depmod-ignore-related-modules-in-depmod_report_cycle.patch,
  0009-libkmod-Implement-filtering-of-unsupported-modules-o.patch
  (applied upstream)
- Remove support for openSUSE &lt; 13.2 (non-dracut mkinitrd)
- Separate bash completion functions into extra package
- Move some of the symlinks from kmod-compat to kmod,
  as kmod still does not have native support for all functions.</changelog>
  <changelog author="jengelh@inai.de" date="1501070400">- Add versioned requires between kmod-compat -&gt; kmod</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="msuchanek@suse.com" date="1511179200">- Move dependency on suse-module-tools to kmod-compat (bsc#1047911).</changelog>
  <changelog author="msuchanek@suse.com" date="1512648000">- Fix resolving .TOC. in modules on 4.4 and older kernel (bsc#1070209)
  depmod-Don-t-add-.TOC.-when-it-s-in-the-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1517486400">- Update to kmod v25
  * Fix resolving symbols with MODULE_REL_CRCS (bsc#1077867)
- Drop depmod-Don-t-add-.TOC.-when-it-s-in-the-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1520510400">- Fix PKCS#7 signature display in modinfo (bsc#1077693).
  * Add libkmod-signature-implement-pkcs7-parsing-with-asn1c.patch
  * Add libkmod-signature-Fix-crash-when-module-signature-is.patch
  * Refresh 0010-modprobe-Implement-allow-unsupported-modules.patch</changelog>
  <changelog author="ro@suse.de" date="1521201600">- for sle, buildexclude the 32bit platforms in kmod-testsuite,
  they have no kernel binaries anyway (bnc#1085640)</changelog>
  <changelog author="msuchanek@suse.com" date="1523016000">- Fix crash when PKCS#7 signer name is not present in signature (bsc#1088244)
  + libkmod-signature-pkcs-7-fix-crash-when-signer-info-.patch</changelog>
  <changelog author="vlad.botanic@gmail.com" date="1528459200">- allow 'modprobe -c' print the status of "allow_unsupported_modules" option.
  + 0012-modprobe-print-unsupported-status.patch</changelog>
</package>
<package pkgid="aa68d6ea1a805cbe96b86ac9407bfd394c8678a65cec555f048c459334eff1c4" name="kmod-compat" arch="x86_64">
  <version epoch="0" ver="25" rel="lp150.4.3.1"/>
  <changelog author="meissner@suse.com" date="1425643200">- 0001-use-correct-sort-method-in-test-array.patch: use correct test
  bsc#920930</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1427976000">- If kmod packge changes, regenerate the initrd.</changelog>
  <changelog author="mmarek@suse.cz" date="1429617600">- Update to kmod 20
  * More robust ELF parsing
  * To fix a race, modprobe only looks at modules.builtin to
  determine a builtin module, so e.g. 'modprobe vt' will no longer
  work.
  * Other fixes
  * Testsuite moved to a separate package, since it is now building
  the test modules from sources, which requires the kernel package.
  * dropped kmod-blacklist-fixtest.patch (merged upstream)
  * includes 0001-Fix-race-while-loading-modules.patch (bsc#998906)</changelog>
  <changelog author="jengelh@inai.de" date="1446897600">- Update to new upstream release 21
  * The kmod tool now prints the relevant configuration options it was built
  with when the "--version" argument is passed.</changelog>
  <changelog author="jengelh@inai.de" date="1449489600">- Update to new upstream release 22
  * support `insmod -f`
  * depmod: do not fall back to uname on bad version</changelog>
  <changelog author="dvaleev@suse.com" date="1455019200">- Fix kernel master build for ppc64le (bsc#1070209)
  depmod-Ignore_PowerPC64_ABIv2_.TOC.symbol.patch</changelog>
  <changelog author="mmarek@suse.cz" date="1466164800">- libkmod: Handle long lines in /proc/modules (bsc#983754)
  0001-libkmod-Handle-long-lines-in-proc-modules.patch</changelog>
  <changelog author="mmarek@suse.com" date="1469102400">- Regenerate initrd on kmod update (bsc#989788)
- Sync specfile with openSUSE:Factory</changelog>
  <changelog author="jengelh@inai.de" date="1469102401">- Update to new upstream release 23
  * Don't add comment to modules.devname if it would otherwise be
  empty.
  * Ignore .TOC. symbols in depmod parsing.
  * Fix crash on modinfo while checking for available signature of
  unknown type.
  * Teach modinfo about PKCS#7 module signatures.
- Drop depmod-Ignore_PowerPC64_ABIv2_.TOC.symbol.patch (merged),
  0001-libkmod-Handle-long-lines-in-proc-modules.patch (merged)</changelog>
  <changelog author="yousaf.kaukab@suse.com" date="1479816000">- 0002-depmod-ignore-related-modules-in-depmod_report_cycle.patch:
  Fix buffer overflow when printing modules in cyclic dependency
  chain (boo#1008186)</changelog>
  <changelog author="jengelh@inai.de" date="1499342400">- Update to new upstream release 24
  * libkmod: fix  use of strcpy
  * depmod: fix string overflow
  * depmod: ignore related modules in depmod_report_cycles
  * libkmod: Fix handling of quotes in kernel command line
  * libkmod-config: replace 0/1 with bool
  * depmod: handle nested loops
- Drop 0001-use-correct-sort-method-in-test-array.patch,
  0002-depmod-ignore-related-modules-in-depmod_report_cycle.patch,
  0009-libkmod-Implement-filtering-of-unsupported-modules-o.patch
  (applied upstream)
- Remove support for openSUSE &lt; 13.2 (non-dracut mkinitrd)
- Separate bash completion functions into extra package
- Move some of the symlinks from kmod-compat to kmod,
  as kmod still does not have native support for all functions.</changelog>
  <changelog author="jengelh@inai.de" date="1501070400">- Add versioned requires between kmod-compat -&gt; kmod</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="msuchanek@suse.com" date="1511179200">- Move dependency on suse-module-tools to kmod-compat (bsc#1047911).</changelog>
  <changelog author="msuchanek@suse.com" date="1512648000">- Fix resolving .TOC. in modules on 4.4 and older kernel (bsc#1070209)
  depmod-Don-t-add-.TOC.-when-it-s-in-the-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1517486400">- Update to kmod v25
  * Fix resolving symbols with MODULE_REL_CRCS (bsc#1077867)
- Drop depmod-Don-t-add-.TOC.-when-it-s-in-the-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1520510400">- Fix PKCS#7 signature display in modinfo (bsc#1077693).
  * Add libkmod-signature-implement-pkcs7-parsing-with-asn1c.patch
  * Add libkmod-signature-Fix-crash-when-module-signature-is.patch
  * Refresh 0010-modprobe-Implement-allow-unsupported-modules.patch</changelog>
  <changelog author="ro@suse.de" date="1521201600">- for sle, buildexclude the 32bit platforms in kmod-testsuite,
  they have no kernel binaries anyway (bnc#1085640)</changelog>
  <changelog author="msuchanek@suse.com" date="1523016000">- Fix crash when PKCS#7 signer name is not present in signature (bsc#1088244)
  + libkmod-signature-pkcs-7-fix-crash-when-signer-info-.patch</changelog>
  <changelog author="vlad.botanic@gmail.com" date="1528459200">- allow 'modprobe -c' print the status of "allow_unsupported_modules" option.
  + 0012-modprobe-print-unsupported-status.patch</changelog>
</package>
<package pkgid="be2163373a8d1b84759ea776f80d631ff501b538ec0681faccbbfc259ae46d0c" name="kmod-testsuite" arch="src">
  <version epoch="0" ver="25" rel="lp150.4.3.1"/>
  <changelog author="mmarek@suse.cz" date="1429617600">- Run the kmod testsuite in a separate build, to avoid a buildloop
  with the kernel.</changelog>
  <changelog author="jengelh@inai.de" date="1446897600">- Update to new upstream release 21
  * Cache built modules so it is easier to run "make check" on
  build servers by distro maintainers. If kmod is configured with
  - -disable-test-modules, the modules from cache will be used by
  "make check". No changes to the tests are needed and all of
  them can run fine.
- Specify KDIR explicitly to resolve build failure with `osc build`
  (because kmod uses `uname -r` and the kernel versions need not
  match between build env and local host)</changelog>
  <changelog author="jengelh@inai.de" date="1449489600">- Update to new upstream release 22
  * support `insmod -f`
  * depmod: do not fall back to uname on bad version</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1459425600">- Ignore make check error of ppc64 architecture, bypass boo#897845</changelog>
  <changelog author="yousaf.kaukab@suse.com" date="1479816000">- 0001-testsuite-depmod-add-module-dependency-outside-cycli.patch:
  Add test case where cyclic and non-cyclic dependencies are present
  at the same time. (boo#1008186)</changelog>
  <changelog author="jengelh@inai.de" date="1499342400">- Update to new upstream release 24
  * libkmod: fix  use of strcpy
  * depmod: fix string overflow
  * depmod: ignore related modules in depmod_report_cycles
  * libkmod: Fix handling of quotes in kernel command line
  * libkmod-config: replace 0/1 with bool
  * depmod: handle nested loops
- Drop 0001-use-correct-sort-method-in-test-array.patch,
  0002-depmod-ignore-related-modules-in-depmod_report_cycle.patch,
  0009-libkmod-Implement-filtering-of-unsupported-modules-o.patch
  (applied upstream)</changelog>
  <changelog author="msuchanek@suse.com" date="1517486400">- Update to kmod v25</changelog>
  <changelog author="msuchanek@suse.com" date="1520510400">- Fix PKCS#7 signature display in modinfo (bsc#1077693).
  * Add libkmod-signature-implement-pkcs7-parsing-with-asn1c.patch
  * Add libkmod-signature-Fix-crash-when-module-signature-is.patch
  * Refresh 0010-modprobe-Implement-allow-unsupported-modules.patch</changelog>
  <changelog author="ro@suse.de" date="1521201600">- for sle, buildexclude the 32bit platforms in kmod-testsuite,
  they have no kernel binaries anyway (bnc#1085640)</changelog>
  <changelog author="msuchanek@suse.com" date="1523016000">- Fix crash when PKCS#7 signer name is not present in signature (bsc#1088244)
  + libkmod-signature-pkcs-7-fix-crash-when-signer-info-.patch</changelog>
</package>
<package pkgid="6e5deb9cd0899e4cd11eaa235a1361ac7eecfee5b275adf5d2c880414ddfbb65" name="kmymoney" arch="src">
  <version epoch="0" ver="5.0.1" rel="lp150.2.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts</changelog>
  <changelog author="nico.kruber@gmail.com" date="1430308800">- Update to 4.7.2:
  * fix a crash in the transaction split editor
  * added the monetary symbol of the Turkish lira
  * matching restrictions on an already imported transaction
    were removed</changelog>
  <changelog author="wbauer@tmo.at" date="1464696000">- Only require libakonadiprotocolinternals1 (needed to run kmymoney)
  on Leap and Tumbleweed, not akonadi-runtime, to prevent conflicts
  with KDEPIM5 (boo#982301)</changelog>
  <changelog author="wbauer@tmo.at" date="1464782400">- Use share-mime-info macros (boo#979301)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1468152000">- Update to 4.8.0
  * Added support for online SEPA transactions
  * Added support for import from Weboob
  * Improved payee matching when importing transactions
  * Supports AqBanking versions 5.5.0 or later
  * Updated Brazilian account templates
  * When an account cannot be closed, a tooltip explains the
    reason
  * Categories no longer have opening date, which caused annoying
    errors both during input and while running the consistency
    check
  * Do not inadvertently modify start date of schedules
  * Solved rounding problems causing reconciliation to fail and
    investment transaction to show missing assignments of 0.00
  * Fixed some annoying consistency check errors</changelog>
  <changelog author="nico.kruber@gmail.com" date="1473940800">- add kmymoney-4.8.0-fix-csv-import-account-type.patch which fixes
  the default CSV import to credit card accounts (kde#364425)</changelog>
  <changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="wbauer@tmo.at" date="1496404800">- Add fix-build.patch to fix build with latest cmake in Factory</changelog>
  <changelog author="wbauer@tmo.at" date="1496836800">- Add aqbanking-5.1-backward-compatibility.patch to make it
  possible to build the kbanking plugin on Leap 42.X (boo#1042760)</changelog>
  <changelog author="wbauer@tmo.at" date="1498046400">- Modify aqbanking-5.1-backward-compatibility.patch to fix online
  SEPA transactions with aqbanking 5.1</changelog>
  <changelog author="wbauer@tmo.at" date="1503748800">- Add fix-build-with-cmake-3.9.patch to fix build with latest
  cmake in Factory (kde#383351)</changelog>
  <changelog author="wbauer@tmo.at" date="1512993600">- BuildIgnore libopenssl-1_0_0-devel to avoid an openssl conflict
  and fix the build on Tumbleweed</changelog>
  <changelog author="wbauer@tmo.at" date="1514376000">- Update to 4.8.1.1
  * Improvements to data import, including:
    + Improved payee matching
    + Avoid crash if you provide an invalid name for the import
    file
    + Resolved numerous issues with importing QIF and CSV files
    + Removed some restrictions on the type of account to which
    data can be imported
    + Allowed OFX import to use Client UID, required by some banks
  * Improvements to the database back end
    + Avoid a crash if the database is not present restoring from
    hibernation
    + Corrected SQL syntax issues causing errors
  * The user is now notified if changing a memo in a transaction
    would make it different from the memo in the other split of the
    transaction (such as in a transfer)
  * Added a setting to configure location of optional log file for
    imported data
  * Removed restriction on configuring VAT assignments for certain
    types of accounts
  * Eliminated false positive errors from Consistency Check
  * Several improvements to importing and exporting templates
  * Eliminated several causes of crashes
- Drop patches that have been merged upstream:
  * kmymoney-4.8.0-fix-csv-import-account-type.patch
  * fix-build.patch
  * fix-build-with-cmake-3.9.patch
- Rebase aqbanking-5.1-backward-compatibility.patch
- Drop BuildIgnore again, no longer necessary as libqt4 uses
  OpenSSL 1.1 now in Tumbleweed
- No longer necessary to change the file permissions of the appdata
  file, this has been fixed upstream
- Adjust package summary and description (for KDE4 -&gt; by KDE)</changelog>
  <changelog author="wbauer@tmo.at" date="1514548800">- Add fix-sepa-plugin.patch to fix the installation of the SEPA
  plugin so that it can actually be loaded (kde#386547)</changelog>
  <changelog author="wbauer@tmo.at" date="1517227200">- Add fix-build-with-libalkimia-7.0.patch to make it build with the
  latest libalkimia (kde#387350)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518782400">- Update to version 5.0.0
  * Ported to KDE Frameworks 5
  * Multiple improvements to reports, including better performance.
  * Allow logarithmic axes in report graphs.
  * When deleting a security, automatically delete its prices.
  * Allow separate beginning balance accounts for different currencies.
  * Added support for several new currencies
  * Major bugs fixed:
    + Elimination of several crashes.
    + Fix problems with report graphs using older data.
    + Fix rounding errors in some investment transactions.
    + Removed Yahoo from stock and currency price sources, as they no
    longer provide this service.
- Drop patches (upstreamed or no longer applicable):
  - aqbanking-5.1-backward-compatibility.patch
  - fix-build-with-libalkimia-7.0.patch
  - fix-sepa-plugin.patch
- Move docs to main subpackage (English) and put translated docs
  in -lang</changelog>
  <changelog author="wbauer@tmo.at" date="1521460800">- Update to version 5.0.1
  * Improvements:
    + Remove old locolor icons
    + Install local icons in the local datadir
    + Fix icon presentation of our own icons
    + Fix build with QtWebEngine
    + Enable investment actions when appropriate
    + Ledger search box now supports the account hierarchy
    character ":"
    + Enable calculator tool button
    + Allow CSV importer to deal with Feb 30th
  * Clicking autocomplete entry crashes application (kde#390264)
  * Kmymoney does not open multiple files correctly (kde#350850)
  * Cannot turn off Outbox tab in 4.8.0. (kde#377760)
  * can't change ledger sort options in configure dialog
    (kde#390042)
  * File/backup give mount/unmount error, even if "mount" is not
    checked (kde#390176)
  * Don't add new payee from new operation panel (kde#390232)
  * QIF Import filter fails (kde#390627)
  * Huge gap in report display screen (kde#390657)
  * Crash &gt; Tools &gt; Currencies (kde#390658)
  * Scheduled transactions: "Enter next transaction" should be
    available in ledger (kde#390834)
  * dollar symbol appears after amount (kde#390873)
  * quantity in Investments view should be right-justified
    (kde#390967)
  * Pre-Fill dialog missing (kde#391048)
  * Show tip of the day (kde#391249)
  * Displaying the ledger without an account having been selected
    displays a closed account (kde#391453)
  * Startup WM Class is wrong (kde#391733)
  * CSV importer ignores last line if not followed by a newline
    (kde#391770)
  * Context does not change to ledger view from the find
    transaction dialog (kde#391773)
  * After completing reconcile, Statement/Cleared/Balance show
    reconcile amounts, not account amounts (kde#390178)
  * switching from Investments page to Ledgers always shows same
    stale closed account ledger (kde#390406)
  * Clearing ledger search box doesn't return to the previous
    position (kde#390593)
  * Ctrl+Shift+Space shortcut no longer available (kde#390249)
  * Save as defaults to encrypted with no way to not encrypt
    (kde#390467)
  * Home page Net Worth Forecast Y axis starts at 0 (kde#391961)
- Drop no longer used Kross build requirement</changelog>
  <changelog author="wbauer@tmo.at" date="1531396800">- Add upstream patches to fix a crash when creating or editing a
  transaction (boo#1100025, kde#392735):
  * Delete-item-after-it-has-been-removed.patch
  * Improve-deletion-of-unused-widgets-in-transaction-editor.patch</changelog>
</package>
<package pkgid="9154e9690a29375e6608e2185e6e9b6bd67170b6f1cfbfc732813520d8a1569b" name="kmymoney" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.2.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts</changelog>
  <changelog author="nico.kruber@gmail.com" date="1430308800">- Update to 4.7.2:
  * fix a crash in the transaction split editor
  * added the monetary symbol of the Turkish lira
  * matching restrictions on an already imported transaction
    were removed</changelog>
  <changelog author="wbauer@tmo.at" date="1464696000">- Only require libakonadiprotocolinternals1 (needed to run kmymoney)
  on Leap and Tumbleweed, not akonadi-runtime, to prevent conflicts
  with KDEPIM5 (boo#982301)</changelog>
  <changelog author="wbauer@tmo.at" date="1464782400">- Use share-mime-info macros (boo#979301)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1468152000">- Update to 4.8.0
  * Added support for online SEPA transactions
  * Added support for import from Weboob
  * Improved payee matching when importing transactions
  * Supports AqBanking versions 5.5.0 or later
  * Updated Brazilian account templates
  * When an account cannot be closed, a tooltip explains the
    reason
  * Categories no longer have opening date, which caused annoying
    errors both during input and while running the consistency
    check
  * Do not inadvertently modify start date of schedules
  * Solved rounding problems causing reconciliation to fail and
    investment transaction to show missing assignments of 0.00
  * Fixed some annoying consistency check errors</changelog>
  <changelog author="nico.kruber@gmail.com" date="1473940800">- add kmymoney-4.8.0-fix-csv-import-account-type.patch which fixes
  the default CSV import to credit card accounts (kde#364425)</changelog>
  <changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="wbauer@tmo.at" date="1496404800">- Add fix-build.patch to fix build with latest cmake in Factory</changelog>
  <changelog author="wbauer@tmo.at" date="1496836800">- Add aqbanking-5.1-backward-compatibility.patch to make it
  possible to build the kbanking plugin on Leap 42.X (boo#1042760)</changelog>
  <changelog author="wbauer@tmo.at" date="1498046400">- Modify aqbanking-5.1-backward-compatibility.patch to fix online
  SEPA transactions with aqbanking 5.1</changelog>
  <changelog author="wbauer@tmo.at" date="1503748800">- Add fix-build-with-cmake-3.9.patch to fix build with latest
  cmake in Factory (kde#383351)</changelog>
  <changelog author="wbauer@tmo.at" date="1512993600">- BuildIgnore libopenssl-1_0_0-devel to avoid an openssl conflict
  and fix the build on Tumbleweed</changelog>
  <changelog author="wbauer@tmo.at" date="1514376000">- Update to 4.8.1.1
  * Improvements to data import, including:
    + Improved payee matching
    + Avoid crash if you provide an invalid name for the import
    file
    + Resolved numerous issues with importing QIF and CSV files
    + Removed some restrictions on the type of account to which
    data can be imported
    + Allowed OFX import to use Client UID, required by some banks
  * Improvements to the database back end
    + Avoid a crash if the database is not present restoring from
    hibernation
    + Corrected SQL syntax issues causing errors
  * The user is now notified if changing a memo in a transaction
    would make it different from the memo in the other split of the
    transaction (such as in a transfer)
  * Added a setting to configure location of optional log file for
    imported data
  * Removed restriction on configuring VAT assignments for certain
    types of accounts
  * Eliminated false positive errors from Consistency Check
  * Several improvements to importing and exporting templates
  * Eliminated several causes of crashes
- Drop patches that have been merged upstream:
  * kmymoney-4.8.0-fix-csv-import-account-type.patch
  * fix-build.patch
  * fix-build-with-cmake-3.9.patch
- Rebase aqbanking-5.1-backward-compatibility.patch
- Drop BuildIgnore again, no longer necessary as libqt4 uses
  OpenSSL 1.1 now in Tumbleweed
- No longer necessary to change the file permissions of the appdata
  file, this has been fixed upstream
- Adjust package summary and description (for KDE4 -&gt; by KDE)</changelog>
  <changelog author="wbauer@tmo.at" date="1514548800">- Add fix-sepa-plugin.patch to fix the installation of the SEPA
  plugin so that it can actually be loaded (kde#386547)</changelog>
  <changelog author="wbauer@tmo.at" date="1517227200">- Add fix-build-with-libalkimia-7.0.patch to make it build with the
  latest libalkimia (kde#387350)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518782400">- Update to version 5.0.0
  * Ported to KDE Frameworks 5
  * Multiple improvements to reports, including better performance.
  * Allow logarithmic axes in report graphs.
  * When deleting a security, automatically delete its prices.
  * Allow separate beginning balance accounts for different currencies.
  * Added support for several new currencies
  * Major bugs fixed:
    + Elimination of several crashes.
    + Fix problems with report graphs using older data.
    + Fix rounding errors in some investment transactions.
    + Removed Yahoo from stock and currency price sources, as they no
    longer provide this service.
- Drop patches (upstreamed or no longer applicable):
  - aqbanking-5.1-backward-compatibility.patch
  - fix-build-with-libalkimia-7.0.patch
  - fix-sepa-plugin.patch
- Move docs to main subpackage (English) and put translated docs
  in -lang</changelog>
  <changelog author="wbauer@tmo.at" date="1521460800">- Update to version 5.0.1
  * Improvements:
    + Remove old locolor icons
    + Install local icons in the local datadir
    + Fix icon presentation of our own icons
    + Fix build with QtWebEngine
    + Enable investment actions when appropriate
    + Ledger search box now supports the account hierarchy
    character ":"
    + Enable calculator tool button
    + Allow CSV importer to deal with Feb 30th
  * Clicking autocomplete entry crashes application (kde#390264)
  * Kmymoney does not open multiple files correctly (kde#350850)
  * Cannot turn off Outbox tab in 4.8.0. (kde#377760)
  * can't change ledger sort options in configure dialog
    (kde#390042)
  * File/backup give mount/unmount error, even if "mount" is not
    checked (kde#390176)
  * Don't add new payee from new operation panel (kde#390232)
  * QIF Import filter fails (kde#390627)
  * Huge gap in report display screen (kde#390657)
  * Crash &gt; Tools &gt; Currencies (kde#390658)
  * Scheduled transactions: "Enter next transaction" should be
    available in ledger (kde#390834)
  * dollar symbol appears after amount (kde#390873)
  * quantity in Investments view should be right-justified
    (kde#390967)
  * Pre-Fill dialog missing (kde#391048)
  * Show tip of the day (kde#391249)
  * Displaying the ledger without an account having been selected
    displays a closed account (kde#391453)
  * Startup WM Class is wrong (kde#391733)
  * CSV importer ignores last line if not followed by a newline
    (kde#391770)
  * Context does not change to ledger view from the find
    transaction dialog (kde#391773)
  * After completing reconcile, Statement/Cleared/Balance show
    reconcile amounts, not account amounts (kde#390178)
  * switching from Investments page to Ledgers always shows same
    stale closed account ledger (kde#390406)
  * Clearing ledger search box doesn't return to the previous
    position (kde#390593)
  * Ctrl+Shift+Space shortcut no longer available (kde#390249)
  * Save as defaults to encrypted with no way to not encrypt
    (kde#390467)
  * Home page Net Worth Forecast Y axis starts at 0 (kde#391961)
- Drop no longer used Kross build requirement</changelog>
  <changelog author="wbauer@tmo.at" date="1531396800">- Add upstream patches to fix a crash when creating or editing a
  transaction (boo#1100025, kde#392735):
  * Delete-item-after-it-has-been-removed.patch
  * Improve-deletion-of-unused-widgets-in-transaction-editor.patch</changelog>
</package>
<package pkgid="93592cbd96ed8921980f42e7887fb49c48c135d615636750078a95ffeb9d23b5" name="kmymoney-devel" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.2.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts</changelog>
  <changelog author="nico.kruber@gmail.com" date="1430308800">- Update to 4.7.2:
  * fix a crash in the transaction split editor
  * added the monetary symbol of the Turkish lira
  * matching restrictions on an already imported transaction
    were removed</changelog>
  <changelog author="wbauer@tmo.at" date="1464696000">- Only require libakonadiprotocolinternals1 (needed to run kmymoney)
  on Leap and Tumbleweed, not akonadi-runtime, to prevent conflicts
  with KDEPIM5 (boo#982301)</changelog>
  <changelog author="wbauer@tmo.at" date="1464782400">- Use share-mime-info macros (boo#979301)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1468152000">- Update to 4.8.0
  * Added support for online SEPA transactions
  * Added support for import from Weboob
  * Improved payee matching when importing transactions
  * Supports AqBanking versions 5.5.0 or later
  * Updated Brazilian account templates
  * When an account cannot be closed, a tooltip explains the
    reason
  * Categories no longer have opening date, which caused annoying
    errors both during input and while running the consistency
    check
  * Do not inadvertently modify start date of schedules
  * Solved rounding problems causing reconciliation to fail and
    investment transaction to show missing assignments of 0.00
  * Fixed some annoying consistency check errors</changelog>
  <changelog author="nico.kruber@gmail.com" date="1473940800">- add kmymoney-4.8.0-fix-csv-import-account-type.patch which fixes
  the default CSV import to credit card accounts (kde#364425)</changelog>
  <changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="wbauer@tmo.at" date="1496404800">- Add fix-build.patch to fix build with latest cmake in Factory</changelog>
  <changelog author="wbauer@tmo.at" date="1496836800">- Add aqbanking-5.1-backward-compatibility.patch to make it
  possible to build the kbanking plugin on Leap 42.X (boo#1042760)</changelog>
  <changelog author="wbauer@tmo.at" date="1498046400">- Modify aqbanking-5.1-backward-compatibility.patch to fix online
  SEPA transactions with aqbanking 5.1</changelog>
  <changelog author="wbauer@tmo.at" date="1503748800">- Add fix-build-with-cmake-3.9.patch to fix build with latest
  cmake in Factory (kde#383351)</changelog>
  <changelog author="wbauer@tmo.at" date="1512993600">- BuildIgnore libopenssl-1_0_0-devel to avoid an openssl conflict
  and fix the build on Tumbleweed</changelog>
  <changelog author="wbauer@tmo.at" date="1514376000">- Update to 4.8.1.1
  * Improvements to data import, including:
    + Improved payee matching
    + Avoid crash if you provide an invalid name for the import
    file
    + Resolved numerous issues with importing QIF and CSV files
    + Removed some restrictions on the type of account to which
    data can be imported
    + Allowed OFX import to use Client UID, required by some banks
  * Improvements to the database back end
    + Avoid a crash if the database is not present restoring from
    hibernation
    + Corrected SQL syntax issues causing errors
  * The user is now notified if changing a memo in a transaction
    would make it different from the memo in the other split of the
    transaction (such as in a transfer)
  * Added a setting to configure location of optional log file for
    imported data
  * Removed restriction on configuring VAT assignments for certain
    types of accounts
  * Eliminated false positive errors from Consistency Check
  * Several improvements to importing and exporting templates
  * Eliminated several causes of crashes
- Drop patches that have been merged upstream:
  * kmymoney-4.8.0-fix-csv-import-account-type.patch
  * fix-build.patch
  * fix-build-with-cmake-3.9.patch
- Rebase aqbanking-5.1-backward-compatibility.patch
- Drop BuildIgnore again, no longer necessary as libqt4 uses
  OpenSSL 1.1 now in Tumbleweed
- No longer necessary to change the file permissions of the appdata
  file, this has been fixed upstream
- Adjust package summary and description (for KDE4 -&gt; by KDE)</changelog>
  <changelog author="wbauer@tmo.at" date="1514548800">- Add fix-sepa-plugin.patch to fix the installation of the SEPA
  plugin so that it can actually be loaded (kde#386547)</changelog>
  <changelog author="wbauer@tmo.at" date="1517227200">- Add fix-build-with-libalkimia-7.0.patch to make it build with the
  latest libalkimia (kde#387350)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518782400">- Update to version 5.0.0
  * Ported to KDE Frameworks 5
  * Multiple improvements to reports, including better performance.
  * Allow logarithmic axes in report graphs.
  * When deleting a security, automatically delete its prices.
  * Allow separate beginning balance accounts for different currencies.
  * Added support for several new currencies
  * Major bugs fixed:
    + Elimination of several crashes.
    + Fix problems with report graphs using older data.
    + Fix rounding errors in some investment transactions.
    + Removed Yahoo from stock and currency price sources, as they no
    longer provide this service.
- Drop patches (upstreamed or no longer applicable):
  - aqbanking-5.1-backward-compatibility.patch
  - fix-build-with-libalkimia-7.0.patch
  - fix-sepa-plugin.patch
- Move docs to main subpackage (English) and put translated docs
  in -lang</changelog>
  <changelog author="wbauer@tmo.at" date="1521460800">- Update to version 5.0.1
  * Improvements:
    + Remove old locolor icons
    + Install local icons in the local datadir
    + Fix icon presentation of our own icons
    + Fix build with QtWebEngine
    + Enable investment actions when appropriate
    + Ledger search box now supports the account hierarchy
    character ":"
    + Enable calculator tool button
    + Allow CSV importer to deal with Feb 30th
  * Clicking autocomplete entry crashes application (kde#390264)
  * Kmymoney does not open multiple files correctly (kde#350850)
  * Cannot turn off Outbox tab in 4.8.0. (kde#377760)
  * can't change ledger sort options in configure dialog
    (kde#390042)
  * File/backup give mount/unmount error, even if "mount" is not
    checked (kde#390176)
  * Don't add new payee from new operation panel (kde#390232)
  * QIF Import filter fails (kde#390627)
  * Huge gap in report display screen (kde#390657)
  * Crash &gt; Tools &gt; Currencies (kde#390658)
  * Scheduled transactions: "Enter next transaction" should be
    available in ledger (kde#390834)
  * dollar symbol appears after amount (kde#390873)
  * quantity in Investments view should be right-justified
    (kde#390967)
  * Pre-Fill dialog missing (kde#391048)
  * Show tip of the day (kde#391249)
  * Displaying the ledger without an account having been selected
    displays a closed account (kde#391453)
  * Startup WM Class is wrong (kde#391733)
  * CSV importer ignores last line if not followed by a newline
    (kde#391770)
  * Context does not change to ledger view from the find
    transaction dialog (kde#391773)
  * After completing reconcile, Statement/Cleared/Balance show
    reconcile amounts, not account amounts (kde#390178)
  * switching from Investments page to Ledgers always shows same
    stale closed account ledger (kde#390406)
  * Clearing ledger search box doesn't return to the previous
    position (kde#390593)
  * Ctrl+Shift+Space shortcut no longer available (kde#390249)
  * Save as defaults to encrypted with no way to not encrypt
    (kde#390467)
  * Home page Net Worth Forecast Y axis starts at 0 (kde#391961)
- Drop no longer used Kross build requirement</changelog>
  <changelog author="wbauer@tmo.at" date="1531396800">- Add upstream patches to fix a crash when creating or editing a
  transaction (boo#1100025, kde#392735):
  * Delete-item-after-it-has-been-removed.patch
  * Improve-deletion-of-unused-widgets-in-transaction-editor.patch</changelog>
</package>
<package pkgid="bd38a90f97149642ccbb603f0d30f53d47b110c3bb3979829c11789f40e73faf" name="kmymoney-lang" arch="noarch">
  <version epoch="0" ver="5.0.1" rel="lp150.2.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts</changelog>
  <changelog author="nico.kruber@gmail.com" date="1430308800">- Update to 4.7.2:
  * fix a crash in the transaction split editor
  * added the monetary symbol of the Turkish lira
  * matching restrictions on an already imported transaction
    were removed</changelog>
  <changelog author="wbauer@tmo.at" date="1464696000">- Only require libakonadiprotocolinternals1 (needed to run kmymoney)
  on Leap and Tumbleweed, not akonadi-runtime, to prevent conflicts
  with KDEPIM5 (boo#982301)</changelog>
  <changelog author="wbauer@tmo.at" date="1464782400">- Use share-mime-info macros (boo#979301)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1468152000">- Update to 4.8.0
  * Added support for online SEPA transactions
  * Added support for import from Weboob
  * Improved payee matching when importing transactions
  * Supports AqBanking versions 5.5.0 or later
  * Updated Brazilian account templates
  * When an account cannot be closed, a tooltip explains the
    reason
  * Categories no longer have opening date, which caused annoying
    errors both during input and while running the consistency
    check
  * Do not inadvertently modify start date of schedules
  * Solved rounding problems causing reconciliation to fail and
    investment transaction to show missing assignments of 0.00
  * Fixed some annoying consistency check errors</changelog>
  <changelog author="nico.kruber@gmail.com" date="1473940800">- add kmymoney-4.8.0-fix-csv-import-account-type.patch which fixes
  the default CSV import to credit card accounts (kde#364425)</changelog>
  <changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="wbauer@tmo.at" date="1496404800">- Add fix-build.patch to fix build with latest cmake in Factory</changelog>
  <changelog author="wbauer@tmo.at" date="1496836800">- Add aqbanking-5.1-backward-compatibility.patch to make it
  possible to build the kbanking plugin on Leap 42.X (boo#1042760)</changelog>
  <changelog author="wbauer@tmo.at" date="1498046400">- Modify aqbanking-5.1-backward-compatibility.patch to fix online
  SEPA transactions with aqbanking 5.1</changelog>
  <changelog author="wbauer@tmo.at" date="1503748800">- Add fix-build-with-cmake-3.9.patch to fix build with latest
  cmake in Factory (kde#383351)</changelog>
  <changelog author="wbauer@tmo.at" date="1512993600">- BuildIgnore libopenssl-1_0_0-devel to avoid an openssl conflict
  and fix the build on Tumbleweed</changelog>
  <changelog author="wbauer@tmo.at" date="1514376000">- Update to 4.8.1.1
  * Improvements to data import, including:
    + Improved payee matching
    + Avoid crash if you provide an invalid name for the import
    file
    + Resolved numerous issues with importing QIF and CSV files
    + Removed some restrictions on the type of account to which
    data can be imported
    + Allowed OFX import to use Client UID, required by some banks
  * Improvements to the database back end
    + Avoid a crash if the database is not present restoring from
    hibernation
    + Corrected SQL syntax issues causing errors
  * The user is now notified if changing a memo in a transaction
    would make it different from the memo in the other split of the
    transaction (such as in a transfer)
  * Added a setting to configure location of optional log file for
    imported data
  * Removed restriction on configuring VAT assignments for certain
    types of accounts
  * Eliminated false positive errors from Consistency Check
  * Several improvements to importing and exporting templates
  * Eliminated several causes of crashes
- Drop patches that have been merged upstream:
  * kmymoney-4.8.0-fix-csv-import-account-type.patch
  * fix-build.patch
  * fix-build-with-cmake-3.9.patch
- Rebase aqbanking-5.1-backward-compatibility.patch
- Drop BuildIgnore again, no longer necessary as libqt4 uses
  OpenSSL 1.1 now in Tumbleweed
- No longer necessary to change the file permissions of the appdata
  file, this has been fixed upstream
- Adjust package summary and description (for KDE4 -&gt; by KDE)</changelog>
  <changelog author="wbauer@tmo.at" date="1514548800">- Add fix-sepa-plugin.patch to fix the installation of the SEPA
  plugin so that it can actually be loaded (kde#386547)</changelog>
  <changelog author="wbauer@tmo.at" date="1517227200">- Add fix-build-with-libalkimia-7.0.patch to make it build with the
  latest libalkimia (kde#387350)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518782400">- Update to version 5.0.0
  * Ported to KDE Frameworks 5
  * Multiple improvements to reports, including better performance.
  * Allow logarithmic axes in report graphs.
  * When deleting a security, automatically delete its prices.
  * Allow separate beginning balance accounts for different currencies.
  * Added support for several new currencies
  * Major bugs fixed:
    + Elimination of several crashes.
    + Fix problems with report graphs using older data.
    + Fix rounding errors in some investment transactions.
    + Removed Yahoo from stock and currency price sources, as they no
    longer provide this service.
- Drop patches (upstreamed or no longer applicable):
  - aqbanking-5.1-backward-compatibility.patch
  - fix-build-with-libalkimia-7.0.patch
  - fix-sepa-plugin.patch
- Move docs to main subpackage (English) and put translated docs
  in -lang</changelog>
  <changelog author="wbauer@tmo.at" date="1521460800">- Update to version 5.0.1
  * Improvements:
    + Remove old locolor icons
    + Install local icons in the local datadir
    + Fix icon presentation of our own icons
    + Fix build with QtWebEngine
    + Enable investment actions when appropriate
    + Ledger search box now supports the account hierarchy
    character ":"
    + Enable calculator tool button
    + Allow CSV importer to deal with Feb 30th
  * Clicking autocomplete entry crashes application (kde#390264)
  * Kmymoney does not open multiple files correctly (kde#350850)
  * Cannot turn off Outbox tab in 4.8.0. (kde#377760)
  * can't change ledger sort options in configure dialog
    (kde#390042)
  * File/backup give mount/unmount error, even if "mount" is not
    checked (kde#390176)
  * Don't add new payee from new operation panel (kde#390232)
  * QIF Import filter fails (kde#390627)
  * Huge gap in report display screen (kde#390657)
  * Crash &gt; Tools &gt; Currencies (kde#390658)
  * Scheduled transactions: "Enter next transaction" should be
    available in ledger (kde#390834)
  * dollar symbol appears after amount (kde#390873)
  * quantity in Investments view should be right-justified
    (kde#390967)
  * Pre-Fill dialog missing (kde#391048)
  * Show tip of the day (kde#391249)
  * Displaying the ledger without an account having been selected
    displays a closed account (kde#391453)
  * Startup WM Class is wrong (kde#391733)
  * CSV importer ignores last line if not followed by a newline
    (kde#391770)
  * Context does not change to ledger view from the find
    transaction dialog (kde#391773)
  * After completing reconcile, Statement/Cleared/Balance show
    reconcile amounts, not account amounts (kde#390178)
  * switching from Investments page to Ledgers always shows same
    stale closed account ledger (kde#390406)
  * Clearing ledger search box doesn't return to the previous
    position (kde#390593)
  * Ctrl+Shift+Space shortcut no longer available (kde#390249)
  * Save as defaults to encrypted with no way to not encrypt
    (kde#390467)
  * Home page Net Worth Forecast Y axis starts at 0 (kde#391961)
- Drop no longer used Kross build requirement</changelog>
  <changelog author="wbauer@tmo.at" date="1531396800">- Add upstream patches to fix a crash when creating or editing a
  transaction (boo#1100025, kde#392735):
  * Delete-item-after-it-has-been-removed.patch
  * Improve-deletion-of-unused-widgets-in-transaction-editor.patch</changelog>
</package>
<package pkgid="8464589a97f31e7f77b69a21b12d92df416974cb827686f19fc2f42b6c419381" name="kpartx" arch="x86_64">
  <version epoch="0" ver="0.7.3+102+suse.be95116" rel="lp150.2.3.1"/>
  <changelog author="mwilck@suse.com" date="1516363200">- Update to version 0.7.3+30+suse.6b5ed839:
  * multipath.rules: temporary rule to obtain ID_WWN for NVMe
  (bsc#1076828)
  * libmultipath: ignore natively multipathed NVME devices
  (bsc#1076828)
  * multipath.rules: handle NVME devices (bsc#1076828)
  * FIX "libmultipath: hwtable: multibus for NetApp NVMe-FC"
  (bsc#1073319)
  * libmultipath: increase path product_id/rev field size for NVMe
  (bsc#1073319)</changelog>
  <changelog author="mwilck@suse.com" date="1516968000">- Update to version 0.7.3+31+suse.6804bb73f72d:
  * libmultipath: hwtable: no_path_retry="queue" for NetApp NVMe
  (bsc#1073319)</changelog>
  <changelog author="mwilck@suse.com" date="1517313600">- Update to version 0.7.3+38+suse.a16beed5280a:
  * kpartx: don't delete partitions from partitions (bsc#1078362)
  * hwtable: add latest updates (bsc#1078363)
  * multipathd.service: set TasksMax=infinity (bsc#1060616)</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- Fix whitespace in dracut conf file (bsc#1080562)</changelog>
  <changelog author="mwilck@suse.com" date="1519300800">- Update to version 0.7.3+52+suse.08a969b7fce0:
- Add limited support for displaying native NVMe multipath
  (bsc#1082419)
  * libmultipath: foreign/nvme: implement path display
  * multipathd: use foreign API
  * multipath: use foreign API
  * libmultipath/foreign: nvme foreign library
  * libmultipath/print: add "%G - foreign" wildcard
  * libmultipath: API for foreign multipath handling
  * libmultipath: print: use generic API for get_x_layout()
  * libmultipath: print: convert API to generic data type
  * libmultipath: "generic multipath" interface
  * libmultipath: add vector_convert()
  * libmultipath: add vector_free_const()
  * libmultipath: get rid of selector "hack" in print.c
- Fix locking errors detected by coverity check (bsc#1082418)
  * checkers/rbd: missing pthread_lock() on failure path
  * libmultipath: fix deadlock in tur.c</changelog>
  <changelog author="mwilck@suse.com" date="1519646400">- Update to version 0.7.3+53+suse.140f4937e9e7:
  * libmultipath: fix wrong output of "multipath -t" (bsc#1082835)</changelog>
  <changelog author="mwilck@suse.com" date="1521547200">- Update to version 0.7.3+57+suse.bb6be4c8b4ca:
  * multipathd: fix signal blocking logic (bsc#1086025)
  * multipath-tools: handle exit signal immediately (bsc#1086025)
  * multipath: fix DEF_TIMEOUT use (bsc#1086014)
  * multipath-tools: foreign/NVME implementation v2 (upstream accepted)
    (bsc#1082419)</changelog>
  <changelog author="mwilck@suse.com" date="1521633600">- Update to version 0.7.3+59+suse.1b6191c26774:
  * libmultipath: don't reject maps with undefined prio (bsc#1085212,
  bsc#1075129)
  * multipathd: handle errors in uxlsnr as fatal (bsc#1086025)</changelog>
  <changelog author="mwilck@suse.com" date="1522238400">- Update to version 0.7.3+60+suse.46ac839:
  * libmultipath/hwtable: don't hard-code ALUA for IBM IPR
  (bsc#1085212, bsc#1075129)</changelog>
  <changelog author="mwilck@suse.com" date="1522238401">- Fixed license tags in spec file
  * multipath tools / libmultipath is GPL-2.0-only
  * libmpathcmd is LGPL-2.0-or-later
  * libdmmp is GPL-3.0-or-later
  * adopt SPDX format.</changelog>
  <changelog author="mwilck@suse.com" date="1523016000">- Update to version 0.7.3+61+suse.d4d0494:
  * 11-dm-mpath.rules: dont't run "multipath -U" during coldplug
  (bsc#1084748)</changelog>
  <changelog author="mwilck@suse.com" date="1523361600">- No functional changes, just licenses
- Spec file: fix %license tags and info after closer inspection
  (bsc#1088801)
  * kpartx is under GPL-2.0-only
  * rbd is under LGPL-2.1-only
- Update to version 0.7.3+66+suse.dc5fe2d: Fix licensing info (bsc#1088801)
  * Added fossology assessment as README.licenses
  * multipath-tools: create LICENSES dir with the text of all used licences</changelog>
  <changelog author="mwilck@suse.com" date="1523361601">- No functional changes
  * fixed SPDX syntax (and -&gt; AND)
  * added /usr/share/licenses</changelog>
  <changelog author="mwilck@suse.com" date="1523361602">- No functional changes
- Fixed rpmlint warnings (bsc#1088946)
  * multipath-tools-devel: moved .so files to /usr/lib[64]
  * added version dependencies for -devel packages</changelog>
  <changelog author="mwilck@suse.com" date="1523534400">- Update to version 0.7.3+67+suse.8f0c27b:
  * disable nvme foreign library (bsc#1089353)</changelog>
  <changelog author="mwilck@suse.com" date="1530187200">- Update to version 0.7.3+79+suse.4b9f3ee:
  * multipath: don't start multipathd unnecessarily (bsc#1098177)
  * (lib)mpathpersist: use O_RDONLY file descriptors (bsc#1093220)
  * libmpathpersist: fix byte swapping for big endian systems (bsc#1099036)
  * libmultipath: add (get|put)_unaligned_be64 (bsc#1099036)
  * libmpathpersist: fix stack overflow in mpath_format_readfullstatus() (bsc#1099007)
  * libmpathpersist: fix typo in mpath_format_readfullstatus (bsc#1099007)
  * libmpathpersist: remove duplicate test in readfullstatus (bsc#1099007)
  * libmpathpersist: decrease log level of various messages (bsc#1099007)
  * Introduce the ibmultipath/unaligned.h header file (bsc#1099036)
  * libmultipath: Fix sgio_get_vpd() (bsc#1099484)
  * multipathd: fix reservation_key check (1099008)
  * libmultipath: avoid error messages from RDAC check (bsc#1075539)</changelog>
  <changelog author="mwilck@suse.com" date="1530187201">- Update to version 0.7.3+80+suse.6ccc1b0:
  * libmultipath: allow sysfs_pathinfo to return SKIPPED (bsc#1098458)</changelog>
  <changelog author="mwilck@suse.com" date="1538568000">- Update to version 0.7.3+99+suse.f3d8614:
  * multipathd: try SCSI persistent reservations for SCSI only
  (bsc#1108875)
  * libmultipath: allow sysfs_pathinfo to return SKIPPED (bsc#1098458)
  * multipathd: fix memory leak on error in configure (bsc#1110418)
  * multipathd: minor fixes (bsc#1110418)
  * multipathd: function return value tweaks (bsc#1110418)
  * libmutipath: don't use malformed uevents (bsc#1110418)
  * libmultipath: fix null dereference int alloc_path_group (bsc#1110418)
  * libmultipath: fix length issues in get_vpd_sgio (bsc#1110418)
  * libmultipath: fix gcc 8.1 "truncated output" warnings (bsc#1099007)
  * (lib)mpathpersist: use O_RDONLY file descriptors (bsc#1093220)
  * libmpathpersist: fix byte swapping for big endian systems (bsc#1099036)
  * libmultipath: add (get|put)_unaligned_be64 (bsc#1099036)
  * libmpathpersist: fix stack overflow in mpath_format_readfullstatus()
  (bsc#1099007)
  * libmpathpersist: fix typo in mpath_format_readfullstatus (bsc#1099007)
  * libmpathpersist: remove duplicate test in readfullstatus (bsc#1099007)
  * libmultipath: print correct default for delay_*_checks
  (bsc#1110418, bsc#1099026)
  * libmultipath: fix memory leak in process_config_dir() (bsc#1110352)
  * multipathd: register threads that use rcu calls (bsc#1110418)
  * multipathd: use nanosleep for strict timing (bsc#1110418)
  * libmultipath: fix log_pthread processing (bsc#1110418)
  * libmultipath: set dm_conf_verbosity (bsc#1110418)
  * libmultipath: fix basenamecpy (bsc#1110418)
  * libmultipath: get_uid: check VPD pages for SCSI only (bsc#1108728)
  * libmultipath: get_uid: don't quit prematurely without udev
  (bsc#1108728)
  * multipath: print sysfs state in fast list mode (bsc#1110354)
  * multipathd: release uxsocket and resource when cancel thread (bsc#1110355)
  * libmultipath: fix gcc 8.1 "truncated output" warnings (bsc#1099007)</changelog>
  <changelog author="mwilck@suse.com" date="1542196800">- Update to version 0.7.3+101+suse.beb7d7b:
  * multipathd: decrease log level of uevent messages (bsc#1110586)
  * libmultipath: pathinfo: skip hidden devices (bsc#1110586)</changelog>
  <changelog author="mwilck@suse.com" date="1543233600">- Update to version 0.7.3+102+suse.be95116:
  * libmpathpersist: fix off-by-one error in PRIN length check
  (bsc#1099007)</changelog>
</package>
<package pkgid="9396cd7ab5922c305dd1bfbb51a2de07a7571aa6c2235348babed0fba2849cb1" name="kscreen5" arch="src">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Also generate default output scale on first run not just new monitors
  * [OutputConfig] Locale-format refresh rate
  * Automatic scaling selection
  * Fix deprecated usage of ecm_install_icons
  * Show UI for per screen scaling options on supported platforms
  * Port OutputConfig away from blockSignals
  * Use Q_DECL_OVERRIDE
  * Get rid of extra margins</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Don't auto scale outputs where we don't know the physical size
  * Keep monitoring the initial config
  * track the config to monitor, save scale
  * add size hint to KScreen KCM</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Don't re-align outputs when QMLOutput in clone mode moves
  * Keep the unified QMLOutput always in center</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Remove obsolete reviewboardrc file
  * Use nullptr here. Use QLatin1Char(...)
  * Minor optimization
  * Const'ify
  * Port to autogenerate logging category
  * Initialize pointer/value. Minor optimization
  * Constify
  * Modernize: use nullptr
  * Delete layout before to recreate new one
  * Fix debug text
  * kcm displayconfiguration scaling: Remove unused text strings
  * Keep monitoring the initial config
  * track the config to monitor, save scale</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * KDED: respond to output being completely removed
  * KDED: restore output scale from config</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Use QQuickWidget instead of QQuickView for the main view in the kcm</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Add additional fixes:
  * 0001-Fix-preview-widget-appearing-to-scale-twice.patch (kde#388218)</changelog>
</package>
<package pkgid="6a1536c585d3338e99885cc43dbce3b848f558db467bd99cd4f0484b9fb0528c" name="kscreen5" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Also generate default output scale on first run not just new monitors
  * [OutputConfig] Locale-format refresh rate
  * Automatic scaling selection
  * Fix deprecated usage of ecm_install_icons
  * Show UI for per screen scaling options on supported platforms
  * Port OutputConfig away from blockSignals
  * Use Q_DECL_OVERRIDE
  * Get rid of extra margins</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Don't auto scale outputs where we don't know the physical size
  * Keep monitoring the initial config
  * track the config to monitor, save scale
  * add size hint to KScreen KCM</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Don't re-align outputs when QMLOutput in clone mode moves
  * Keep the unified QMLOutput always in center</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Remove obsolete reviewboardrc file
  * Use nullptr here. Use QLatin1Char(...)
  * Minor optimization
  * Const'ify
  * Port to autogenerate logging category
  * Initialize pointer/value. Minor optimization
  * Constify
  * Modernize: use nullptr
  * Delete layout before to recreate new one
  * Fix debug text
  * kcm displayconfiguration scaling: Remove unused text strings
  * Keep monitoring the initial config
  * track the config to monitor, save scale</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * KDED: respond to output being completely removed
  * KDED: restore output scale from config</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Use QQuickWidget instead of QQuickView for the main view in the kcm</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Add additional fixes:
  * 0001-Fix-preview-widget-appearing-to-scale-twice.patch (kde#388218)</changelog>
</package>
<package pkgid="9fce45946eb178ffccab36165d4a2cef4192473d2ce17fc27b0dbe6d6c2463eb" name="kscreen5-lang" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Also generate default output scale on first run not just new monitors
  * [OutputConfig] Locale-format refresh rate
  * Automatic scaling selection
  * Fix deprecated usage of ecm_install_icons
  * Show UI for per screen scaling options on supported platforms
  * Port OutputConfig away from blockSignals
  * Use Q_DECL_OVERRIDE
  * Get rid of extra margins</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Don't auto scale outputs where we don't know the physical size
  * Keep monitoring the initial config
  * track the config to monitor, save scale
  * add size hint to KScreen KCM</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Don't re-align outputs when QMLOutput in clone mode moves
  * Keep the unified QMLOutput always in center</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Remove obsolete reviewboardrc file
  * Use nullptr here. Use QLatin1Char(...)
  * Minor optimization
  * Const'ify
  * Port to autogenerate logging category
  * Initialize pointer/value. Minor optimization
  * Constify
  * Modernize: use nullptr
  * Delete layout before to recreate new one
  * Fix debug text
  * kcm displayconfiguration scaling: Remove unused text strings
  * Keep monitoring the initial config
  * track the config to monitor, save scale</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * KDED: respond to output being completely removed
  * KDED: restore output scale from config</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Use QQuickWidget instead of QQuickView for the main view in the kcm</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Add additional fixes:
  * 0001-Fix-preview-widget-appearing-to-scale-twice.patch (kde#388218)</changelog>
</package>
<package pkgid="9cdaeafa3e64785f73236344983c2ea43898da117e8accf962b0ed3f06a4dfef" name="kscreenlocker" arch="src">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1504180800">- Add patch to allow the NVIDIA driver to poke through seccomp and
  thus not crashing (kde#384005):
  * 0001-Don-t-dissallow-open-with-write-flag-syscall-on-NVID.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * seccomp filter: Handle openat as well (kde#384651)
  * Don't dissallow open with write flag syscall on NVIDIA (kde#384005)
  * Tell user to unlock his session only
  * Use Q_DECL_OVERRIDE
  * Fix detection of sys/event.h on FreeBSD &lt; 12
  * include &lt;signal.h&gt; for kill(2)
- Remove patches, now upstream:
  * 0001-Don-t-dissallow-open-with-write-flag-syscall-on-NVID.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Workaround crash on lockscreen close</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Adjust kwinglplatform.cpp for Mesa renderer string changes
  * Fix greeter crashing with software rendering on wayland</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Remove double margin in KCM UI
  * Load config specified by the LnF theme (kde#384264)
  * Remove unused class SelectImageButton
  * Remove obsolete reviewboardrc file
  * Bump KF5 required version to 5.42
  * Whitelist Switch keyboard layout to shortcuts (kde#378531)
  * port to Package::fileUrl
  * Forbid more syscalls which could modify the filesystem
  * Screenlocker KCM text improvements
  * Change kcm header "Screen Locking Timeouts" to "Configure Screen Locking"</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Fix brightness shortcuts in the whitelist
  * Add touchpad shortcuts to the whitelist
  * Fix building autotest on platforms where syscalls are not available</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Require Qt 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Update size hint of lnf config widget (kde#389483)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="c092d869a36587a04e3bc884d7e95907171030c89e7d938702196d924ec649d7" name="kscreenlocker" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1504180800">- Add patch to allow the NVIDIA driver to poke through seccomp and
  thus not crashing (kde#384005):
  * 0001-Don-t-dissallow-open-with-write-flag-syscall-on-NVID.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * seccomp filter: Handle openat as well (kde#384651)
  * Don't dissallow open with write flag syscall on NVIDIA (kde#384005)
  * Tell user to unlock his session only
  * Use Q_DECL_OVERRIDE
  * Fix detection of sys/event.h on FreeBSD &lt; 12
  * include &lt;signal.h&gt; for kill(2)
- Remove patches, now upstream:
  * 0001-Don-t-dissallow-open-with-write-flag-syscall-on-NVID.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Workaround crash on lockscreen close</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Adjust kwinglplatform.cpp for Mesa renderer string changes
  * Fix greeter crashing with software rendering on wayland</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Remove double margin in KCM UI
  * Load config specified by the LnF theme (kde#384264)
  * Remove unused class SelectImageButton
  * Remove obsolete reviewboardrc file
  * Bump KF5 required version to 5.42
  * Whitelist Switch keyboard layout to shortcuts (kde#378531)
  * port to Package::fileUrl
  * Forbid more syscalls which could modify the filesystem
  * Screenlocker KCM text improvements
  * Change kcm header "Screen Locking Timeouts" to "Configure Screen Locking"</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Fix brightness shortcuts in the whitelist
  * Add touchpad shortcuts to the whitelist
  * Fix building autotest on platforms where syscalls are not available</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Require Qt 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Update size hint of lnf config widget (kde#389483)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="640c504ad0c1561ed4a8353fde24db1641479def04b60b6f4353997ac27d674e" name="kscreenlocker-devel" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1504180800">- Add patch to allow the NVIDIA driver to poke through seccomp and
  thus not crashing (kde#384005):
  * 0001-Don-t-dissallow-open-with-write-flag-syscall-on-NVID.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * seccomp filter: Handle openat as well (kde#384651)
  * Don't dissallow open with write flag syscall on NVIDIA (kde#384005)
  * Tell user to unlock his session only
  * Use Q_DECL_OVERRIDE
  * Fix detection of sys/event.h on FreeBSD &lt; 12
  * include &lt;signal.h&gt; for kill(2)
- Remove patches, now upstream:
  * 0001-Don-t-dissallow-open-with-write-flag-syscall-on-NVID.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Workaround crash on lockscreen close</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Adjust kwinglplatform.cpp for Mesa renderer string changes
  * Fix greeter crashing with software rendering on wayland</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Remove double margin in KCM UI
  * Load config specified by the LnF theme (kde#384264)
  * Remove unused class SelectImageButton
  * Remove obsolete reviewboardrc file
  * Bump KF5 required version to 5.42
  * Whitelist Switch keyboard layout to shortcuts (kde#378531)
  * port to Package::fileUrl
  * Forbid more syscalls which could modify the filesystem
  * Screenlocker KCM text improvements
  * Change kcm header "Screen Locking Timeouts" to "Configure Screen Locking"</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Fix brightness shortcuts in the whitelist
  * Add touchpad shortcuts to the whitelist
  * Fix building autotest on platforms where syscalls are not available</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Require Qt 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Update size hint of lnf config widget (kde#389483)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="08be0731ea9791dc98f926a5d74b552661961086d90a62d6967df04824368f58" name="kscreenlocker-lang" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1504180800">- Add patch to allow the NVIDIA driver to poke through seccomp and
  thus not crashing (kde#384005):
  * 0001-Don-t-dissallow-open-with-write-flag-syscall-on-NVID.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * seccomp filter: Handle openat as well (kde#384651)
  * Don't dissallow open with write flag syscall on NVIDIA (kde#384005)
  * Tell user to unlock his session only
  * Use Q_DECL_OVERRIDE
  * Fix detection of sys/event.h on FreeBSD &lt; 12
  * include &lt;signal.h&gt; for kill(2)
- Remove patches, now upstream:
  * 0001-Don-t-dissallow-open-with-write-flag-syscall-on-NVID.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Workaround crash on lockscreen close</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Adjust kwinglplatform.cpp for Mesa renderer string changes
  * Fix greeter crashing with software rendering on wayland</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Remove double margin in KCM UI
  * Load config specified by the LnF theme (kde#384264)
  * Remove unused class SelectImageButton
  * Remove obsolete reviewboardrc file
  * Bump KF5 required version to 5.42
  * Whitelist Switch keyboard layout to shortcuts (kde#378531)
  * port to Package::fileUrl
  * Forbid more syscalls which could modify the filesystem
  * Screenlocker KCM text improvements
  * Change kcm header "Screen Locking Timeouts" to "Configure Screen Locking"</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Fix brightness shortcuts in the whitelist
  * Add touchpad shortcuts to the whitelist
  * Fix building autotest on platforms where syscalls are not available</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Require Qt 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Update size hint of lnf config widget (kde#389483)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="4c9a54ed8b1baa9a8fb26ff64ba5f6c1be3aad3834e63e28ebbd242636a57a4a" name="ksysguard5" arch="src">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * softraid: Remove dead code and associated warning.
  * Properly check if mdraid array is active.
  * FreeBSD build fix, v4.
  * FreeBSD compile fix, try 3.
  * Fix FreeBSD build, try 2.
  * Fix build regression on FreeBSD
  * Fix compilation with strict libc (such as musl).
  * remove extra &lt;nlist.h&gt; include on FreeBSD
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507291200">- Add patch to fix gathering of the CPU clock with kernel &gt;= 4.13
  (boo#1061071, kde#382561):
  * 0001-Try-to-read-CPU-clock-from-cpufreq-scaling_cur_freq-.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Try to read CPU clock from cpufreq/scaling_cur_freq instead of /proc/cpuinfo (kde#382561)
- Remove patches, now upstream:
  * 0001-Try-to-read-CPU-clock-from-cpufreq-scaling_cur_freq-.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * use OCS to retrieve Tabs from the KDE store (kde#338669)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * linux: expand 'arrayDevice' by 1 character more
  * Remove obsolete reviewboardrc file
  * fix warning comparing int with uint
  * fix warning, o is unused
  * fix warning comparing uint to int
  * replace tabs with spaces for style consistency
  * revise the tab upload dialog to direct people at the kde store
  * Add .arcconfig
  * Don't repeat work of KAboutData::setupCommandLine()
  * Group app metadata setting code</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Require KDE Frameworks 5.42 and Qt 5.9
  * Correction with the &amp; problem in tabs (kde#382512)</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None
- Refreshed patches:
  * 0001-Use-run-for-ksysguardd-s-pid-file.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Explicitly include &lt;QDoubleValidator&gt; to fix build with Qt 5.11</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Fix leak of pipe FDs in MD RAID code (kde#378268)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="034a8510f47697dc6fabf4c2a11d4e93b31276bee60facf4a8d7c7d65157f421" name="ksysguard5" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * softraid: Remove dead code and associated warning.
  * Properly check if mdraid array is active.
  * FreeBSD build fix, v4.
  * FreeBSD compile fix, try 3.
  * Fix FreeBSD build, try 2.
  * Fix build regression on FreeBSD
  * Fix compilation with strict libc (such as musl).
  * remove extra &lt;nlist.h&gt; include on FreeBSD
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507291200">- Add patch to fix gathering of the CPU clock with kernel &gt;= 4.13
  (boo#1061071, kde#382561):
  * 0001-Try-to-read-CPU-clock-from-cpufreq-scaling_cur_freq-.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Try to read CPU clock from cpufreq/scaling_cur_freq instead of /proc/cpuinfo (kde#382561)
- Remove patches, now upstream:
  * 0001-Try-to-read-CPU-clock-from-cpufreq-scaling_cur_freq-.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * use OCS to retrieve Tabs from the KDE store (kde#338669)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * linux: expand 'arrayDevice' by 1 character more
  * Remove obsolete reviewboardrc file
  * fix warning comparing int with uint
  * fix warning, o is unused
  * fix warning comparing uint to int
  * replace tabs with spaces for style consistency
  * revise the tab upload dialog to direct people at the kde store
  * Add .arcconfig
  * Don't repeat work of KAboutData::setupCommandLine()
  * Group app metadata setting code</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Require KDE Frameworks 5.42 and Qt 5.9
  * Correction with the &amp; problem in tabs (kde#382512)</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None
- Refreshed patches:
  * 0001-Use-run-for-ksysguardd-s-pid-file.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Explicitly include &lt;QDoubleValidator&gt; to fix build with Qt 5.11</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Fix leak of pipe FDs in MD RAID code (kde#378268)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="9f50cadab4922574fda7a7a5fc09beac263c21859910e75a7b6ee77f1e90140e" name="ksysguard5-lang" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * softraid: Remove dead code and associated warning.
  * Properly check if mdraid array is active.
  * FreeBSD build fix, v4.
  * FreeBSD compile fix, try 3.
  * Fix FreeBSD build, try 2.
  * Fix build regression on FreeBSD
  * Fix compilation with strict libc (such as musl).
  * remove extra &lt;nlist.h&gt; include on FreeBSD
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507291200">- Add patch to fix gathering of the CPU clock with kernel &gt;= 4.13
  (boo#1061071, kde#382561):
  * 0001-Try-to-read-CPU-clock-from-cpufreq-scaling_cur_freq-.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Try to read CPU clock from cpufreq/scaling_cur_freq instead of /proc/cpuinfo (kde#382561)
- Remove patches, now upstream:
  * 0001-Try-to-read-CPU-clock-from-cpufreq-scaling_cur_freq-.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * use OCS to retrieve Tabs from the KDE store (kde#338669)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * linux: expand 'arrayDevice' by 1 character more
  * Remove obsolete reviewboardrc file
  * fix warning comparing int with uint
  * fix warning, o is unused
  * fix warning comparing uint to int
  * replace tabs with spaces for style consistency
  * revise the tab upload dialog to direct people at the kde store
  * Add .arcconfig
  * Don't repeat work of KAboutData::setupCommandLine()
  * Group app metadata setting code</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Require KDE Frameworks 5.42 and Qt 5.9
  * Correction with the &amp; problem in tabs (kde#382512)</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None
- Refreshed patches:
  * 0001-Use-run-for-ksysguardd-s-pid-file.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Explicitly include &lt;QDoubleValidator&gt; to fix build with Qt 5.11</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Fix leak of pipe FDs in MD RAID code (kde#378268)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="775a63ce9dcb2442938d911eb034ea4625b2c17053643663b7ca6d7010d62899" name="kubectl" arch="src">
  <version epoch="0" ver="1.9.8" rel="lp150.3.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1531742400">- initial commit in order to split kubectl package
  (fix bsc#1097473 and bsc#1101010 and fate#325820)
  add lintrc filter to avoid conflict with kubernetes-client package which is built in SLE12 but not shipped in SLE12</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1532001600">- Get the commit id from the obsinfo file.
  This way this is automatic and we don't have a regression
  of bsc#1065972</changelog>
</package>
<package pkgid="a8fbf670240a49862ae468d02b99adc6d7bcd7c5fbae74450c42f3692c8e50c6" name="kubectl" arch="x86_64">
  <version epoch="0" ver="1.9.8" rel="lp150.3.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1531742400">- initial commit in order to split kubectl package
  (fix bsc#1097473 and bsc#1101010 and fate#325820)
  add lintrc filter to avoid conflict with kubernetes-client package which is built in SLE12 but not shipped in SLE12</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1532001600">- Get the commit id from the obsinfo file.
  This way this is automatic and we don't have a regression
  of bsc#1065972</changelog>
</package>
<package pkgid="4f93b2e5e52461c9565454fd6b26682705ad08abd09bc0d0b3c8db4024572c71" name="kupfer" arch="noarch">
  <version epoch="0" ver="319" rel="lp150.2.4.1"/>
  <changelog author="wnereiz &lt;wnereiz@gmail.com&gt;" date="1388664000">- Version 208
- Build rpm form the upstream codes</changelog>
  <changelog author="wnereiz &lt;wnereiz@gmail.com&gt;" date="1401969600">- Some changes based on rpmlint results
  + Resolve standard-dir-owned-by-package problem
  + Change GPL version to spec standard.
- Use %_libdir instead of hardcode in spec.</changelog>
  <changelog author="wnereiz &lt;wnereiz@gmail.com&gt;" date="1402056000">- Remove %clean since it is not needed anymore.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1451736000">- spec-cleaned</changelog>
  <changelog author="wnereiz@kawashiro.org" date="1468065600">- Remove useless python-wnck dependency (for pushing to Leap)</changelog>
  <changelog author="mpluskal@suse.com" date="1484654400">- Correct rpm group
- Enable parallel build
- Update dependencies</changelog>
  <changelog author="wnereiz@kawashiro.org" date="1486900800">- Updated to version v305. There're some big changes from upstream:
  + Project home changed to github
  + Switched to python3
  + Gtk3 support
  + other minor changes</changelog>
  <changelog author="wnereiz@kawashiro.org" date="1518955200">- Update to version v319, and fix .desktop file categories</changelog>
  <changelog author="jengelh@inai.de" date="1518955201">- Ensure neutrality of description.</changelog>
  <changelog author="wnereiz@member.fsf.org" date="1538827200">- Add dependency packages python3-cairo and python3-dbus-python
  (bsc#1102282)
- Some minor changes to satisfy spec-cleaner</changelog>
</package>
<package pkgid="a450a8b26fb647b9e9bd26bf79713bd09ecdd076e48b49b7f211fb4a8103488e" name="kupfer" arch="src">
  <version epoch="0" ver="319" rel="lp150.2.4.1"/>
  <changelog author="wnereiz &lt;wnereiz@gmail.com&gt;" date="1388664000">- Version 208
- Build rpm form the upstream codes</changelog>
  <changelog author="wnereiz &lt;wnereiz@gmail.com&gt;" date="1401969600">- Some changes based on rpmlint results
  + Resolve standard-dir-owned-by-package problem
  + Change GPL version to spec standard.
- Use %_libdir instead of hardcode in spec.</changelog>
  <changelog author="wnereiz &lt;wnereiz@gmail.com&gt;" date="1402056000">- Remove %clean since it is not needed anymore.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1451736000">- spec-cleaned</changelog>
  <changelog author="wnereiz@kawashiro.org" date="1468065600">- Remove useless python-wnck dependency (for pushing to Leap)</changelog>
  <changelog author="mpluskal@suse.com" date="1484654400">- Correct rpm group
- Enable parallel build
- Update dependencies</changelog>
  <changelog author="wnereiz@kawashiro.org" date="1486900800">- Updated to version v305. There're some big changes from upstream:
  + Project home changed to github
  + Switched to python3
  + Gtk3 support
  + other minor changes</changelog>
  <changelog author="wnereiz@kawashiro.org" date="1518955200">- Update to version v319, and fix .desktop file categories</changelog>
  <changelog author="jengelh@inai.de" date="1518955201">- Ensure neutrality of description.</changelog>
  <changelog author="wnereiz@member.fsf.org" date="1538827200">- Add dependency packages python3-cairo and python3-dbus-python
  (bsc#1102282)
- Some minor changes to satisfy spec-cleaner</changelog>
</package>
<package pkgid="98ba368de142ccbceeb39bc613ab485bd2176ddbd2284c0b0282aed7b9043676" name="kwayland-32bit" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * [client] Fix nullptr dereference in ConfinedPointer
    and LockedPointer
  * [client] Install pointerconstraints.h
  * [server] Fix regression in
    SeatInterface::end/cancelPointerPinchGesture
  * Implementation of PointerConstraints protocol
  * [server] Reduce overhead of pointersForSurface
  * Return SurfaceInterface::size in global compositor space
  * [tools/generator] Generate enum FooInterfaceVersion on
    server side
  * [tools/generator] Wrap wl_fixed request args in
    wl_fixed_from_double
  * [tools/generator] Generate implementation of
    client side requests
  * [tools/generator] Generate client side resource factories
  * [tools/generator] Generate callbacks and listener
    on client side
  * [tools/generator] Pass this as q pointer to
    Client::Resource::Private
  * [tools/generator] Generate Private::setup(wl_foo *arg)
    on client side
  * Implementation of PointerGestures protocol
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="alarrosa@suse.com" date="1491566400">- Drop fix-wayland-1.3-dependency.diff which isn't needed anymore
  since SLE12 SP2.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Add support for wl_shell_surface::set_popup and popup_done
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * Validate surface is valid when sending TextInput leave event
  * Fix autotests on the FreeBSD CI.</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * Autotests: solve warning for QProcess::ProcessState metatype registration
  * Fix for TestQtSurfaceExtension in path with spaces
  * API dox: add some minimal docs to more class to have them covered by doxygen
  * API dox: add some minimal docs to class to have them covered by doxygen
  * API dox: Use doxygen notation to have comments used
  * API dox: fix @link usage
  * add requestToggleKeepAbove/below
  * Keep QIcon::fromTheme in main thread
  * Remove pid changedSignal in Client::PlasmaWindow
  * add pid to plasma window management protocol</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [autotests/server] Check whether test is run as root
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * Make unittest independent from the location of the executable.
  * autotests: prepare for CMAKE_RUNTIME_OUTPUT_DIRECTORY being set
  * Destroy all kwayland objects created by registry when it is destroyed
  * Emit connectionDied if the QPA is destroyed
  * [client] Track all created ConnectionThreads and add API to access them
  * [server] Send text input leave if focused surface gets unbound
  * [server] Send pointer leave if focused surface gets unbound
  * Drop unused variable
  * [client] Properly track enteredSurface in Keyboard
  * [server] Send keyboard leave when client destroys the focused surface (kde#382280)
  * check Buffer validity (kde#381953)</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * Treat input RGB buffers as premultiplied
  * Update SurfaceInterface outputs when an output global gets destroyed
  * KWayland::Client::Surface track output destruction
  * Do not leak symbols of pimpl classes, protect with Q_DECL_HIDDEN
  * Avoid sending data offers from an invalid source. (kde#383054)</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Only send OutputConfig sendApplied / sendFailed to the right resource
  * Add missing command macro
  * Don't crash if a client (legally) uses deleted global contrast manager
  * Don't crash if a client (legally) uses a deleted global
  * Update @since docs
  * Missing licenses
  * Support XDG v6</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * [client] Drop the checks for platformName being "wayland"
  * Don't duplicate connect to wl_display_flush
  * don't qcompare with nullptr
  * Wayland foreign protocol
  * Revert "Expose wl_display_set_global_filter as a virtual method"
  * Expose wl_display_set_global_filter as a virtual method</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Fix testWaylandFullscreenShell.
  * Expose wl_display_set_global_filter as a virtual method
  * Fix kwayland-testXdgShellV6.
  * Add support for zwp_idle_inhibit_manager_v1
  * [server] Support inhibiting the IdleInterface</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Minor doxygen change to group new bind/create methods
  * Fix naming inconsistency
  * Resolve some merge issues
  * Unit test for Server Decoration Palette
  * Create interface for passing server decoration palettes
  * Explicitly include std::bind functions
  * [server] Add a method IdleInterface::simulateUserActivity
  * Fix regression caused by backward compatibility support in data source
  * Fix @since version tags
  * Add support for version 3 of data device manager interface (kde#386993)
  * Scope exported/imported objects to the test
  * Fix ASAN warning on TestXdgForeign
  * Replace QCOMPARE(nullptr) with QVERIFY
  * Fix error in WaylandSurface::testDisconnect
  * Explicit QCOMPARE(QString,QString)
  * Add explicit AppMenu protocol
  * Fix ASAN warnings in XDGForeignV2Interface
  * Fix exlude generated file from automoc feature</changelog>
  <changelog author="lbeltrame@kde.org" date="1517918400">- Add 0001-server-Don-t-crash-when-a-subsurface-gets-commited-w.patch
  * Upstream fix to prevent kwin from crashing when opening
    systemsettings (kde#389231)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Fix typo</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * Implement releasing of client-freed output
  * [server] Properly handle the situation when the DataSource for a drag gets destroyed (kde#389221)
  * [server] Don't crash when a subsurface gets commited whose parent surface got destroyed (kde#389231)
- Dropped patches, now upstream:
  * 0001-server-Don-t-crash-when-a-subsurface-gets-commited-w.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Add Remote Access interface to KWayland
  * [server] Add support for the frame semantics of Pointer version 5 (kde#389189)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1529582400">- Add patch to fix copy-paste from GTK3 applications (boo#1097606):
  * 0001-Do-not-cancel-old-clipboard-selection-if-it-is-same-.patch</changelog>
</package>
<package pkgid="3fc04080e46261da230d3330f9c8a936e2dcec8d3520ed607992f83dc9beb926" name="kwayland" arch="src">
  <version epoch="0" ver="5.45.0" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * [client] Fix nullptr dereference in ConfinedPointer
    and LockedPointer
  * [client] Install pointerconstraints.h
  * [server] Fix regression in
    SeatInterface::end/cancelPointerPinchGesture
  * Implementation of PointerConstraints protocol
  * [server] Reduce overhead of pointersForSurface
  * Return SurfaceInterface::size in global compositor space
  * [tools/generator] Generate enum FooInterfaceVersion on
    server side
  * [tools/generator] Wrap wl_fixed request args in
    wl_fixed_from_double
  * [tools/generator] Generate implementation of
    client side requests
  * [tools/generator] Generate client side resource factories
  * [tools/generator] Generate callbacks and listener
    on client side
  * [tools/generator] Pass this as q pointer to
    Client::Resource::Private
  * [tools/generator] Generate Private::setup(wl_foo *arg)
    on client side
  * Implementation of PointerGestures protocol
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="alarrosa@suse.com" date="1491566400">- Drop fix-wayland-1.3-dependency.diff which isn't needed anymore
  since SLE12 SP2.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Add support for wl_shell_surface::set_popup and popup_done
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * Validate surface is valid when sending TextInput leave event
  * Fix autotests on the FreeBSD CI.</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * Autotests: solve warning for QProcess::ProcessState metatype registration
  * Fix for TestQtSurfaceExtension in path with spaces
  * API dox: add some minimal docs to more class to have them covered by doxygen
  * API dox: add some minimal docs to class to have them covered by doxygen
  * API dox: Use doxygen notation to have comments used
  * API dox: fix @link usage
  * add requestToggleKeepAbove/below
  * Keep QIcon::fromTheme in main thread
  * Remove pid changedSignal in Client::PlasmaWindow
  * add pid to plasma window management protocol</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [autotests/server] Check whether test is run as root
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * Make unittest independent from the location of the executable.
  * autotests: prepare for CMAKE_RUNTIME_OUTPUT_DIRECTORY being set
  * Destroy all kwayland objects created by registry when it is destroyed
  * Emit connectionDied if the QPA is destroyed
  * [client] Track all created ConnectionThreads and add API to access them
  * [server] Send text input leave if focused surface gets unbound
  * [server] Send pointer leave if focused surface gets unbound
  * Drop unused variable
  * [client] Properly track enteredSurface in Keyboard
  * [server] Send keyboard leave when client destroys the focused surface (kde#382280)
  * check Buffer validity (kde#381953)</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * Treat input RGB buffers as premultiplied
  * Update SurfaceInterface outputs when an output global gets destroyed
  * KWayland::Client::Surface track output destruction
  * Do not leak symbols of pimpl classes, protect with Q_DECL_HIDDEN
  * Avoid sending data offers from an invalid source. (kde#383054)</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Only send OutputConfig sendApplied / sendFailed to the right resource
  * Add missing command macro
  * Don't crash if a client (legally) uses deleted global contrast manager
  * Don't crash if a client (legally) uses a deleted global
  * Update @since docs
  * Missing licenses
  * Support XDG v6</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * [client] Drop the checks for platformName being "wayland"
  * Don't duplicate connect to wl_display_flush
  * don't qcompare with nullptr
  * Wayland foreign protocol
  * Revert "Expose wl_display_set_global_filter as a virtual method"
  * Expose wl_display_set_global_filter as a virtual method</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Fix testWaylandFullscreenShell.
  * Expose wl_display_set_global_filter as a virtual method
  * Fix kwayland-testXdgShellV6.
  * Add support for zwp_idle_inhibit_manager_v1
  * [server] Support inhibiting the IdleInterface</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Minor doxygen change to group new bind/create methods
  * Fix naming inconsistency
  * Resolve some merge issues
  * Unit test for Server Decoration Palette
  * Create interface for passing server decoration palettes
  * Explicitly include std::bind functions
  * [server] Add a method IdleInterface::simulateUserActivity
  * Fix regression caused by backward compatibility support in data source
  * Fix @since version tags
  * Add support for version 3 of data device manager interface (kde#386993)
  * Scope exported/imported objects to the test
  * Fix ASAN warning on TestXdgForeign
  * Replace QCOMPARE(nullptr) with QVERIFY
  * Fix error in WaylandSurface::testDisconnect
  * Explicit QCOMPARE(QString,QString)
  * Add explicit AppMenu protocol
  * Fix ASAN warnings in XDGForeignV2Interface
  * Fix exlude generated file from automoc feature</changelog>
  <changelog author="lbeltrame@kde.org" date="1517918400">- Add 0001-server-Don-t-crash-when-a-subsurface-gets-commited-w.patch
  * Upstream fix to prevent kwin from crashing when opening
    systemsettings (kde#389231)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Fix typo</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * Implement releasing of client-freed output
  * [server] Properly handle the situation when the DataSource for a drag gets destroyed (kde#389221)
  * [server] Don't crash when a subsurface gets commited whose parent surface got destroyed (kde#389231)
- Dropped patches, now upstream:
  * 0001-server-Don-t-crash-when-a-subsurface-gets-commited-w.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Add Remote Access interface to KWayland
  * [server] Add support for the frame semantics of Pointer version 5 (kde#389189)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1529582400">- Add patch to fix copy-paste from GTK3 applications (boo#1097606):
  * 0001-Do-not-cancel-old-clipboard-selection-if-it-is-same-.patch</changelog>
</package>
<package pkgid="b37df8638f750447ca644908b71ce6dcba1346c539d982442202af52a37e4e31" name="kwayland" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * [client] Fix nullptr dereference in ConfinedPointer
    and LockedPointer
  * [client] Install pointerconstraints.h
  * [server] Fix regression in
    SeatInterface::end/cancelPointerPinchGesture
  * Implementation of PointerConstraints protocol
  * [server] Reduce overhead of pointersForSurface
  * Return SurfaceInterface::size in global compositor space
  * [tools/generator] Generate enum FooInterfaceVersion on
    server side
  * [tools/generator] Wrap wl_fixed request args in
    wl_fixed_from_double
  * [tools/generator] Generate implementation of
    client side requests
  * [tools/generator] Generate client side resource factories
  * [tools/generator] Generate callbacks and listener
    on client side
  * [tools/generator] Pass this as q pointer to
    Client::Resource::Private
  * [tools/generator] Generate Private::setup(wl_foo *arg)
    on client side
  * Implementation of PointerGestures protocol
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="alarrosa@suse.com" date="1491566400">- Drop fix-wayland-1.3-dependency.diff which isn't needed anymore
  since SLE12 SP2.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Add support for wl_shell_surface::set_popup and popup_done
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * Validate surface is valid when sending TextInput leave event
  * Fix autotests on the FreeBSD CI.</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * Autotests: solve warning for QProcess::ProcessState metatype registration
  * Fix for TestQtSurfaceExtension in path with spaces
  * API dox: add some minimal docs to more class to have them covered by doxygen
  * API dox: add some minimal docs to class to have them covered by doxygen
  * API dox: Use doxygen notation to have comments used
  * API dox: fix @link usage
  * add requestToggleKeepAbove/below
  * Keep QIcon::fromTheme in main thread
  * Remove pid changedSignal in Client::PlasmaWindow
  * add pid to plasma window management protocol</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [autotests/server] Check whether test is run as root
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * Make unittest independent from the location of the executable.
  * autotests: prepare for CMAKE_RUNTIME_OUTPUT_DIRECTORY being set
  * Destroy all kwayland objects created by registry when it is destroyed
  * Emit connectionDied if the QPA is destroyed
  * [client] Track all created ConnectionThreads and add API to access them
  * [server] Send text input leave if focused surface gets unbound
  * [server] Send pointer leave if focused surface gets unbound
  * Drop unused variable
  * [client] Properly track enteredSurface in Keyboard
  * [server] Send keyboard leave when client destroys the focused surface (kde#382280)
  * check Buffer validity (kde#381953)</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * Treat input RGB buffers as premultiplied
  * Update SurfaceInterface outputs when an output global gets destroyed
  * KWayland::Client::Surface track output destruction
  * Do not leak symbols of pimpl classes, protect with Q_DECL_HIDDEN
  * Avoid sending data offers from an invalid source. (kde#383054)</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Only send OutputConfig sendApplied / sendFailed to the right resource
  * Add missing command macro
  * Don't crash if a client (legally) uses deleted global contrast manager
  * Don't crash if a client (legally) uses a deleted global
  * Update @since docs
  * Missing licenses
  * Support XDG v6</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * [client] Drop the checks for platformName being "wayland"
  * Don't duplicate connect to wl_display_flush
  * don't qcompare with nullptr
  * Wayland foreign protocol
  * Revert "Expose wl_display_set_global_filter as a virtual method"
  * Expose wl_display_set_global_filter as a virtual method</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Fix testWaylandFullscreenShell.
  * Expose wl_display_set_global_filter as a virtual method
  * Fix kwayland-testXdgShellV6.
  * Add support for zwp_idle_inhibit_manager_v1
  * [server] Support inhibiting the IdleInterface</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Minor doxygen change to group new bind/create methods
  * Fix naming inconsistency
  * Resolve some merge issues
  * Unit test for Server Decoration Palette
  * Create interface for passing server decoration palettes
  * Explicitly include std::bind functions
  * [server] Add a method IdleInterface::simulateUserActivity
  * Fix regression caused by backward compatibility support in data source
  * Fix @since version tags
  * Add support for version 3 of data device manager interface (kde#386993)
  * Scope exported/imported objects to the test
  * Fix ASAN warning on TestXdgForeign
  * Replace QCOMPARE(nullptr) with QVERIFY
  * Fix error in WaylandSurface::testDisconnect
  * Explicit QCOMPARE(QString,QString)
  * Add explicit AppMenu protocol
  * Fix ASAN warnings in XDGForeignV2Interface
  * Fix exlude generated file from automoc feature</changelog>
  <changelog author="lbeltrame@kde.org" date="1517918400">- Add 0001-server-Don-t-crash-when-a-subsurface-gets-commited-w.patch
  * Upstream fix to prevent kwin from crashing when opening
    systemsettings (kde#389231)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Fix typo</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * Implement releasing of client-freed output
  * [server] Properly handle the situation when the DataSource for a drag gets destroyed (kde#389221)
  * [server] Don't crash when a subsurface gets commited whose parent surface got destroyed (kde#389231)
- Dropped patches, now upstream:
  * 0001-server-Don-t-crash-when-a-subsurface-gets-commited-w.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Add Remote Access interface to KWayland
  * [server] Add support for the frame semantics of Pointer version 5 (kde#389189)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1529582400">- Add patch to fix copy-paste from GTK3 applications (boo#1097606):
  * 0001-Do-not-cancel-old-clipboard-selection-if-it-is-same-.patch</changelog>
</package>
<package pkgid="5b2f10e1af44f6e3f95acee09f06c398813b4badd95669c2fe1e57fcaa8c29fa" name="kwayland-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * [client] Fix nullptr dereference in ConfinedPointer
    and LockedPointer
  * [client] Install pointerconstraints.h
  * [server] Fix regression in
    SeatInterface::end/cancelPointerPinchGesture
  * Implementation of PointerConstraints protocol
  * [server] Reduce overhead of pointersForSurface
  * Return SurfaceInterface::size in global compositor space
  * [tools/generator] Generate enum FooInterfaceVersion on
    server side
  * [tools/generator] Wrap wl_fixed request args in
    wl_fixed_from_double
  * [tools/generator] Generate implementation of
    client side requests
  * [tools/generator] Generate client side resource factories
  * [tools/generator] Generate callbacks and listener
    on client side
  * [tools/generator] Pass this as q pointer to
    Client::Resource::Private
  * [tools/generator] Generate Private::setup(wl_foo *arg)
    on client side
  * Implementation of PointerGestures protocol
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="alarrosa@suse.com" date="1491566400">- Drop fix-wayland-1.3-dependency.diff which isn't needed anymore
  since SLE12 SP2.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Add support for wl_shell_surface::set_popup and popup_done
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * Validate surface is valid when sending TextInput leave event
  * Fix autotests on the FreeBSD CI.</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * Autotests: solve warning for QProcess::ProcessState metatype registration
  * Fix for TestQtSurfaceExtension in path with spaces
  * API dox: add some minimal docs to more class to have them covered by doxygen
  * API dox: add some minimal docs to class to have them covered by doxygen
  * API dox: Use doxygen notation to have comments used
  * API dox: fix @link usage
  * add requestToggleKeepAbove/below
  * Keep QIcon::fromTheme in main thread
  * Remove pid changedSignal in Client::PlasmaWindow
  * add pid to plasma window management protocol</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [autotests/server] Check whether test is run as root
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * Make unittest independent from the location of the executable.
  * autotests: prepare for CMAKE_RUNTIME_OUTPUT_DIRECTORY being set
  * Destroy all kwayland objects created by registry when it is destroyed
  * Emit connectionDied if the QPA is destroyed
  * [client] Track all created ConnectionThreads and add API to access them
  * [server] Send text input leave if focused surface gets unbound
  * [server] Send pointer leave if focused surface gets unbound
  * Drop unused variable
  * [client] Properly track enteredSurface in Keyboard
  * [server] Send keyboard leave when client destroys the focused surface (kde#382280)
  * check Buffer validity (kde#381953)</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * Treat input RGB buffers as premultiplied
  * Update SurfaceInterface outputs when an output global gets destroyed
  * KWayland::Client::Surface track output destruction
  * Do not leak symbols of pimpl classes, protect with Q_DECL_HIDDEN
  * Avoid sending data offers from an invalid source. (kde#383054)</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Only send OutputConfig sendApplied / sendFailed to the right resource
  * Add missing command macro
  * Don't crash if a client (legally) uses deleted global contrast manager
  * Don't crash if a client (legally) uses a deleted global
  * Update @since docs
  * Missing licenses
  * Support XDG v6</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * [client] Drop the checks for platformName being "wayland"
  * Don't duplicate connect to wl_display_flush
  * don't qcompare with nullptr
  * Wayland foreign protocol
  * Revert "Expose wl_display_set_global_filter as a virtual method"
  * Expose wl_display_set_global_filter as a virtual method</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Fix testWaylandFullscreenShell.
  * Expose wl_display_set_global_filter as a virtual method
  * Fix kwayland-testXdgShellV6.
  * Add support for zwp_idle_inhibit_manager_v1
  * [server] Support inhibiting the IdleInterface</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Minor doxygen change to group new bind/create methods
  * Fix naming inconsistency
  * Resolve some merge issues
  * Unit test for Server Decoration Palette
  * Create interface for passing server decoration palettes
  * Explicitly include std::bind functions
  * [server] Add a method IdleInterface::simulateUserActivity
  * Fix regression caused by backward compatibility support in data source
  * Fix @since version tags
  * Add support for version 3 of data device manager interface (kde#386993)
  * Scope exported/imported objects to the test
  * Fix ASAN warning on TestXdgForeign
  * Replace QCOMPARE(nullptr) with QVERIFY
  * Fix error in WaylandSurface::testDisconnect
  * Explicit QCOMPARE(QString,QString)
  * Add explicit AppMenu protocol
  * Fix ASAN warnings in XDGForeignV2Interface
  * Fix exlude generated file from automoc feature</changelog>
  <changelog author="lbeltrame@kde.org" date="1517918400">- Add 0001-server-Don-t-crash-when-a-subsurface-gets-commited-w.patch
  * Upstream fix to prevent kwin from crashing when opening
    systemsettings (kde#389231)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Fix typo</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * Implement releasing of client-freed output
  * [server] Properly handle the situation when the DataSource for a drag gets destroyed (kde#389221)
  * [server] Don't crash when a subsurface gets commited whose parent surface got destroyed (kde#389231)
- Dropped patches, now upstream:
  * 0001-server-Don-t-crash-when-a-subsurface-gets-commited-w.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Add Remote Access interface to KWayland
  * [server] Add support for the frame semantics of Pointer version 5 (kde#389189)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1529582400">- Add patch to fix copy-paste from GTK3 applications (boo#1097606):
  * 0001-Do-not-cancel-old-clipboard-selection-if-it-is-same-.patch</changelog>
</package>
<package pkgid="431d791b0b21c2a32bdf74be6af859e5e9796a1125e5fcbf6aa54d8e94bf88b1" name="kwayland-devel" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * [client] Fix nullptr dereference in ConfinedPointer
    and LockedPointer
  * [client] Install pointerconstraints.h
  * [server] Fix regression in
    SeatInterface::end/cancelPointerPinchGesture
  * Implementation of PointerConstraints protocol
  * [server] Reduce overhead of pointersForSurface
  * Return SurfaceInterface::size in global compositor space
  * [tools/generator] Generate enum FooInterfaceVersion on
    server side
  * [tools/generator] Wrap wl_fixed request args in
    wl_fixed_from_double
  * [tools/generator] Generate implementation of
    client side requests
  * [tools/generator] Generate client side resource factories
  * [tools/generator] Generate callbacks and listener
    on client side
  * [tools/generator] Pass this as q pointer to
    Client::Resource::Private
  * [tools/generator] Generate Private::setup(wl_foo *arg)
    on client side
  * Implementation of PointerGestures protocol
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="alarrosa@suse.com" date="1491566400">- Drop fix-wayland-1.3-dependency.diff which isn't needed anymore
  since SLE12 SP2.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Add support for wl_shell_surface::set_popup and popup_done
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * Validate surface is valid when sending TextInput leave event
  * Fix autotests on the FreeBSD CI.</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * Autotests: solve warning for QProcess::ProcessState metatype registration
  * Fix for TestQtSurfaceExtension in path with spaces
  * API dox: add some minimal docs to more class to have them covered by doxygen
  * API dox: add some minimal docs to class to have them covered by doxygen
  * API dox: Use doxygen notation to have comments used
  * API dox: fix @link usage
  * add requestToggleKeepAbove/below
  * Keep QIcon::fromTheme in main thread
  * Remove pid changedSignal in Client::PlasmaWindow
  * add pid to plasma window management protocol</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [autotests/server] Check whether test is run as root
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * Make unittest independent from the location of the executable.
  * autotests: prepare for CMAKE_RUNTIME_OUTPUT_DIRECTORY being set
  * Destroy all kwayland objects created by registry when it is destroyed
  * Emit connectionDied if the QPA is destroyed
  * [client] Track all created ConnectionThreads and add API to access them
  * [server] Send text input leave if focused surface gets unbound
  * [server] Send pointer leave if focused surface gets unbound
  * Drop unused variable
  * [client] Properly track enteredSurface in Keyboard
  * [server] Send keyboard leave when client destroys the focused surface (kde#382280)
  * check Buffer validity (kde#381953)</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * Treat input RGB buffers as premultiplied
  * Update SurfaceInterface outputs when an output global gets destroyed
  * KWayland::Client::Surface track output destruction
  * Do not leak symbols of pimpl classes, protect with Q_DECL_HIDDEN
  * Avoid sending data offers from an invalid source. (kde#383054)</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Only send OutputConfig sendApplied / sendFailed to the right resource
  * Add missing command macro
  * Don't crash if a client (legally) uses deleted global contrast manager
  * Don't crash if a client (legally) uses a deleted global
  * Update @since docs
  * Missing licenses
  * Support XDG v6</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * [client] Drop the checks for platformName being "wayland"
  * Don't duplicate connect to wl_display_flush
  * don't qcompare with nullptr
  * Wayland foreign protocol
  * Revert "Expose wl_display_set_global_filter as a virtual method"
  * Expose wl_display_set_global_filter as a virtual method</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Fix testWaylandFullscreenShell.
  * Expose wl_display_set_global_filter as a virtual method
  * Fix kwayland-testXdgShellV6.
  * Add support for zwp_idle_inhibit_manager_v1
  * [server] Support inhibiting the IdleInterface</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Minor doxygen change to group new bind/create methods
  * Fix naming inconsistency
  * Resolve some merge issues
  * Unit test for Server Decoration Palette
  * Create interface for passing server decoration palettes
  * Explicitly include std::bind functions
  * [server] Add a method IdleInterface::simulateUserActivity
  * Fix regression caused by backward compatibility support in data source
  * Fix @since version tags
  * Add support for version 3 of data device manager interface (kde#386993)
  * Scope exported/imported objects to the test
  * Fix ASAN warning on TestXdgForeign
  * Replace QCOMPARE(nullptr) with QVERIFY
  * Fix error in WaylandSurface::testDisconnect
  * Explicit QCOMPARE(QString,QString)
  * Add explicit AppMenu protocol
  * Fix ASAN warnings in XDGForeignV2Interface
  * Fix exlude generated file from automoc feature</changelog>
  <changelog author="lbeltrame@kde.org" date="1517918400">- Add 0001-server-Don-t-crash-when-a-subsurface-gets-commited-w.patch
  * Upstream fix to prevent kwin from crashing when opening
    systemsettings (kde#389231)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Fix typo</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * Implement releasing of client-freed output
  * [server] Properly handle the situation when the DataSource for a drag gets destroyed (kde#389221)
  * [server] Don't crash when a subsurface gets commited whose parent surface got destroyed (kde#389231)
- Dropped patches, now upstream:
  * 0001-server-Don-t-crash-when-a-subsurface-gets-commited-w.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Add Remote Access interface to KWayland
  * [server] Add support for the frame semantics of Pointer version 5 (kde#389189)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1529582400">- Add patch to fix copy-paste from GTK3 applications (boo#1097606):
  * 0001-Do-not-cancel-old-clipboard-selection-if-it-is-same-.patch</changelog>
</package>
<package pkgid="f038323df34c0eb29794c2e9dd0395bbd2cfcf766ce117540cba8da9ced9880d" name="kwin5" arch="src">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Fix: Missing dependencies for kwin autotests
  * remove xdgv6 use from 5.11 branch
  * Also send Wayland clients to a new desktop if their desktop was removed
  * Don't recreate kwayland blurmanager on screen size changes
  * Don't reload background contrast effect on screen resize
  * [tabbox] Create X11Filter on establishKeyboardGrab (kde#385032)
  * Restore cursors across multiple screens (kde#385003)
  * Properly update the visible (icon) name when the caption changes (kde#384760)
  * Make sure OpenGL Context is valid before deleting shader (kde#384884)
  * Don't scale cursor hotspot differently to cursor (kde#384769)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Ensure leave event is send to decoration when a window maximizes (kde#385140)
  * Update pointer position whenever a window gets (un)minimized (kde#378704)
  * Fix DRM EGL crash regression
  * [autotests] Fix typo
  * [platforms/drm] Use a shared pointer for gbm_surface (kde#385372)
  * Ensure internal Wayland connection is properly setup before creating LockScreen integration (kde#385397)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Don't use the global KConfig object on the OpenGL freeze detection thread (kde#372114)
  * Fix rendering issues of subsurfaces by using proper clipping (kde#385924)
  * Fix viewport for screenshot on multiple screens
  * Set scale on glScissor calls
  * Fix glScissor calls with y-offset screens
  * Fix viewport on vertically stacked monitors (kde#386099,kde#385655)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Allow glXChooseFBConfig to return sRGB capable fbconfig (kde#387159)
  * Fix leaking of FDs requested from logind
  * Fix race condition with libinput events on startup
  * Fix build with a KWindowSystem framework that doesn't pull QWidget
  * Allow a cross-process check for same applications (kde#386043)
  * Don't use XDGv6 in stable
  * Support modifier+mouse button on window decoration (kde#386708)
  * Remove unnecessary QString::arg call
  * fix occassional crash caused by needlessly delayed signals (bko#363224)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512820800">- As permissions now has CAP_SYS_NICE for kwin_wayland,
  enable support here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512907200">- Add parens to fix build for 42.x</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Add missing include</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1516795200">- Build with gcc7 on Leap 42.3, gcc6 no longer works because of a
  change to the default compiler flags in openSUSE:Leap:42.3:Update
  (boo#1077345)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517745600">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * [libinput] Ensure Event::device returns a proper Device (kde#389674)
  * Acknowledge the server side deco mode in WaylandServer not ShellClient (kde#389117)
  * From 22% of cpu in hasTransientInternal to 0.2x%
  * [autotests/integration] Add test for broken quick tiling for xdg_shell
  * [effects/blur] Disable texture cache on Wayland</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Fix compilation without libinput
  * Make it possible to compile 5.12 branch with a kdecoration from master
  * [x11] Fix interactive point selection (kde#387720)
  * Block geometry updates on move resize finish and don't configure xdg shell surfaces while blocked (kde#388072)
  * Enable blending if a subsurface has an alpha channel</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Fix the build on armhf/aarch64
  * Convert EffectView to a QQuickWidget
  * Sanity check WindowQuad before trying to create a grid out of it (kde#390953)
  * Fix typo in config group name
  * [kcmkwin/rules] Disable detect button on Wayland
  * Don't crash if the cursor theme fails to create (kde#390314)
  * Support modifier mouse/scroll action on internal decorated windows (kde#374880)
  * Explicitly include &lt;QAction&gt; to fix build with Qt 5.11
  * [autotests] Set breeze icon theme name in integration tests
  * Send hoverLeave or hoverMotion after touch up on decoration (kde#386231)
  * Init the icon in ShellClient::init
  * Disable window rule configuration for Wayland
  * Properly handle move during touch events (kde#390113)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521460800">- Add patch to create Xauthority on wayland, to support connections
  as different user (boo#1084737):
  * 0001-Use-Xauthority-for-Xwayland.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * [colorcorrection] Apply current color temperature on screen hot plug (kde#391623)
  * [effects/coverswitch] Fix broken reflection on multi-monitor setup (kde#378688)
  * [AppMenu] Ignore show request when application menu isn't configured (kde#392012)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * Convert JS files to UTF-8 (from ISO-8859-15)
  * [KScreen Effect] Fix fade to black (kde#388384)
  * Reparse the input configuration when we are notified that it changed
  * Don't try to filter null key combinations (kde#390110)
  * drm backend: choose correct EGL config with mesa-18
  * Ensure _NET_CURRENT_DESKTOP is set on startup (kde#391034)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Update kwindecoration docbook
  * Do not save kwinrulesrc on every window opening/closing (kde#393911)
  * Update seat's timestamp after waking up screen through double tap (kde#392754)
  * Use XdgShell Unstable V6 in nested wayland platform
  * Do not unset cursor image when cursor enters a surface</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="4da57ec6acef58304e0e2772ce45041a0cbdd12a064f0eba20b66bac3b4f2eb5" name="kwin5" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Fix: Missing dependencies for kwin autotests
  * remove xdgv6 use from 5.11 branch
  * Also send Wayland clients to a new desktop if their desktop was removed
  * Don't recreate kwayland blurmanager on screen size changes
  * Don't reload background contrast effect on screen resize
  * [tabbox] Create X11Filter on establishKeyboardGrab (kde#385032)
  * Restore cursors across multiple screens (kde#385003)
  * Properly update the visible (icon) name when the caption changes (kde#384760)
  * Make sure OpenGL Context is valid before deleting shader (kde#384884)
  * Don't scale cursor hotspot differently to cursor (kde#384769)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Ensure leave event is send to decoration when a window maximizes (kde#385140)
  * Update pointer position whenever a window gets (un)minimized (kde#378704)
  * Fix DRM EGL crash regression
  * [autotests] Fix typo
  * [platforms/drm] Use a shared pointer for gbm_surface (kde#385372)
  * Ensure internal Wayland connection is properly setup before creating LockScreen integration (kde#385397)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Don't use the global KConfig object on the OpenGL freeze detection thread (kde#372114)
  * Fix rendering issues of subsurfaces by using proper clipping (kde#385924)
  * Fix viewport for screenshot on multiple screens
  * Set scale on glScissor calls
  * Fix glScissor calls with y-offset screens
  * Fix viewport on vertically stacked monitors (kde#386099,kde#385655)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Allow glXChooseFBConfig to return sRGB capable fbconfig (kde#387159)
  * Fix leaking of FDs requested from logind
  * Fix race condition with libinput events on startup
  * Fix build with a KWindowSystem framework that doesn't pull QWidget
  * Allow a cross-process check for same applications (kde#386043)
  * Don't use XDGv6 in stable
  * Support modifier+mouse button on window decoration (kde#386708)
  * Remove unnecessary QString::arg call
  * fix occassional crash caused by needlessly delayed signals (bko#363224)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512820800">- As permissions now has CAP_SYS_NICE for kwin_wayland,
  enable support here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512907200">- Add parens to fix build for 42.x</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Add missing include</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1516795200">- Build with gcc7 on Leap 42.3, gcc6 no longer works because of a
  change to the default compiler flags in openSUSE:Leap:42.3:Update
  (boo#1077345)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517745600">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * [libinput] Ensure Event::device returns a proper Device (kde#389674)
  * Acknowledge the server side deco mode in WaylandServer not ShellClient (kde#389117)
  * From 22% of cpu in hasTransientInternal to 0.2x%
  * [autotests/integration] Add test for broken quick tiling for xdg_shell
  * [effects/blur] Disable texture cache on Wayland</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Fix compilation without libinput
  * Make it possible to compile 5.12 branch with a kdecoration from master
  * [x11] Fix interactive point selection (kde#387720)
  * Block geometry updates on move resize finish and don't configure xdg shell surfaces while blocked (kde#388072)
  * Enable blending if a subsurface has an alpha channel</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Fix the build on armhf/aarch64
  * Convert EffectView to a QQuickWidget
  * Sanity check WindowQuad before trying to create a grid out of it (kde#390953)
  * Fix typo in config group name
  * [kcmkwin/rules] Disable detect button on Wayland
  * Don't crash if the cursor theme fails to create (kde#390314)
  * Support modifier mouse/scroll action on internal decorated windows (kde#374880)
  * Explicitly include &lt;QAction&gt; to fix build with Qt 5.11
  * [autotests] Set breeze icon theme name in integration tests
  * Send hoverLeave or hoverMotion after touch up on decoration (kde#386231)
  * Init the icon in ShellClient::init
  * Disable window rule configuration for Wayland
  * Properly handle move during touch events (kde#390113)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521460800">- Add patch to create Xauthority on wayland, to support connections
  as different user (boo#1084737):
  * 0001-Use-Xauthority-for-Xwayland.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * [colorcorrection] Apply current color temperature on screen hot plug (kde#391623)
  * [effects/coverswitch] Fix broken reflection on multi-monitor setup (kde#378688)
  * [AppMenu] Ignore show request when application menu isn't configured (kde#392012)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * Convert JS files to UTF-8 (from ISO-8859-15)
  * [KScreen Effect] Fix fade to black (kde#388384)
  * Reparse the input configuration when we are notified that it changed
  * Don't try to filter null key combinations (kde#390110)
  * drm backend: choose correct EGL config with mesa-18
  * Ensure _NET_CURRENT_DESKTOP is set on startup (kde#391034)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Update kwindecoration docbook
  * Do not save kwinrulesrc on every window opening/closing (kde#393911)
  * Update seat's timestamp after waking up screen through double tap (kde#392754)
  * Use XdgShell Unstable V6 in nested wayland platform
  * Do not unset cursor image when cursor enters a surface</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="ea768f18f4e99417a707f0b2f3a825638d047d845dfe1ce8e72e282a4beda388" name="kwin5-devel" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Fix: Missing dependencies for kwin autotests
  * remove xdgv6 use from 5.11 branch
  * Also send Wayland clients to a new desktop if their desktop was removed
  * Don't recreate kwayland blurmanager on screen size changes
  * Don't reload background contrast effect on screen resize
  * [tabbox] Create X11Filter on establishKeyboardGrab (kde#385032)
  * Restore cursors across multiple screens (kde#385003)
  * Properly update the visible (icon) name when the caption changes (kde#384760)
  * Make sure OpenGL Context is valid before deleting shader (kde#384884)
  * Don't scale cursor hotspot differently to cursor (kde#384769)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Ensure leave event is send to decoration when a window maximizes (kde#385140)
  * Update pointer position whenever a window gets (un)minimized (kde#378704)
  * Fix DRM EGL crash regression
  * [autotests] Fix typo
  * [platforms/drm] Use a shared pointer for gbm_surface (kde#385372)
  * Ensure internal Wayland connection is properly setup before creating LockScreen integration (kde#385397)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Don't use the global KConfig object on the OpenGL freeze detection thread (kde#372114)
  * Fix rendering issues of subsurfaces by using proper clipping (kde#385924)
  * Fix viewport for screenshot on multiple screens
  * Set scale on glScissor calls
  * Fix glScissor calls with y-offset screens
  * Fix viewport on vertically stacked monitors (kde#386099,kde#385655)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Allow glXChooseFBConfig to return sRGB capable fbconfig (kde#387159)
  * Fix leaking of FDs requested from logind
  * Fix race condition with libinput events on startup
  * Fix build with a KWindowSystem framework that doesn't pull QWidget
  * Allow a cross-process check for same applications (kde#386043)
  * Don't use XDGv6 in stable
  * Support modifier+mouse button on window decoration (kde#386708)
  * Remove unnecessary QString::arg call
  * fix occassional crash caused by needlessly delayed signals (bko#363224)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512820800">- As permissions now has CAP_SYS_NICE for kwin_wayland,
  enable support here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512907200">- Add parens to fix build for 42.x</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Add missing include</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1516795200">- Build with gcc7 on Leap 42.3, gcc6 no longer works because of a
  change to the default compiler flags in openSUSE:Leap:42.3:Update
  (boo#1077345)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517745600">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * [libinput] Ensure Event::device returns a proper Device (kde#389674)
  * Acknowledge the server side deco mode in WaylandServer not ShellClient (kde#389117)
  * From 22% of cpu in hasTransientInternal to 0.2x%
  * [autotests/integration] Add test for broken quick tiling for xdg_shell
  * [effects/blur] Disable texture cache on Wayland</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Fix compilation without libinput
  * Make it possible to compile 5.12 branch with a kdecoration from master
  * [x11] Fix interactive point selection (kde#387720)
  * Block geometry updates on move resize finish and don't configure xdg shell surfaces while blocked (kde#388072)
  * Enable blending if a subsurface has an alpha channel</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Fix the build on armhf/aarch64
  * Convert EffectView to a QQuickWidget
  * Sanity check WindowQuad before trying to create a grid out of it (kde#390953)
  * Fix typo in config group name
  * [kcmkwin/rules] Disable detect button on Wayland
  * Don't crash if the cursor theme fails to create (kde#390314)
  * Support modifier mouse/scroll action on internal decorated windows (kde#374880)
  * Explicitly include &lt;QAction&gt; to fix build with Qt 5.11
  * [autotests] Set breeze icon theme name in integration tests
  * Send hoverLeave or hoverMotion after touch up on decoration (kde#386231)
  * Init the icon in ShellClient::init
  * Disable window rule configuration for Wayland
  * Properly handle move during touch events (kde#390113)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521460800">- Add patch to create Xauthority on wayland, to support connections
  as different user (boo#1084737):
  * 0001-Use-Xauthority-for-Xwayland.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * [colorcorrection] Apply current color temperature on screen hot plug (kde#391623)
  * [effects/coverswitch] Fix broken reflection on multi-monitor setup (kde#378688)
  * [AppMenu] Ignore show request when application menu isn't configured (kde#392012)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * Convert JS files to UTF-8 (from ISO-8859-15)
  * [KScreen Effect] Fix fade to black (kde#388384)
  * Reparse the input configuration when we are notified that it changed
  * Don't try to filter null key combinations (kde#390110)
  * drm backend: choose correct EGL config with mesa-18
  * Ensure _NET_CURRENT_DESKTOP is set on startup (kde#391034)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Update kwindecoration docbook
  * Do not save kwinrulesrc on every window opening/closing (kde#393911)
  * Update seat's timestamp after waking up screen through double tap (kde#392754)
  * Use XdgShell Unstable V6 in nested wayland platform
  * Do not unset cursor image when cursor enters a surface</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="45bd68fb841a82f2d3469db431eb9b0d4a7886ed5935def16defee7a2a8265e1" name="kwin5-lang" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Fix: Missing dependencies for kwin autotests
  * remove xdgv6 use from 5.11 branch
  * Also send Wayland clients to a new desktop if their desktop was removed
  * Don't recreate kwayland blurmanager on screen size changes
  * Don't reload background contrast effect on screen resize
  * [tabbox] Create X11Filter on establishKeyboardGrab (kde#385032)
  * Restore cursors across multiple screens (kde#385003)
  * Properly update the visible (icon) name when the caption changes (kde#384760)
  * Make sure OpenGL Context is valid before deleting shader (kde#384884)
  * Don't scale cursor hotspot differently to cursor (kde#384769)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Ensure leave event is send to decoration when a window maximizes (kde#385140)
  * Update pointer position whenever a window gets (un)minimized (kde#378704)
  * Fix DRM EGL crash regression
  * [autotests] Fix typo
  * [platforms/drm] Use a shared pointer for gbm_surface (kde#385372)
  * Ensure internal Wayland connection is properly setup before creating LockScreen integration (kde#385397)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Don't use the global KConfig object on the OpenGL freeze detection thread (kde#372114)
  * Fix rendering issues of subsurfaces by using proper clipping (kde#385924)
  * Fix viewport for screenshot on multiple screens
  * Set scale on glScissor calls
  * Fix glScissor calls with y-offset screens
  * Fix viewport on vertically stacked monitors (kde#386099,kde#385655)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Allow glXChooseFBConfig to return sRGB capable fbconfig (kde#387159)
  * Fix leaking of FDs requested from logind
  * Fix race condition with libinput events on startup
  * Fix build with a KWindowSystem framework that doesn't pull QWidget
  * Allow a cross-process check for same applications (kde#386043)
  * Don't use XDGv6 in stable
  * Support modifier+mouse button on window decoration (kde#386708)
  * Remove unnecessary QString::arg call
  * fix occassional crash caused by needlessly delayed signals (bko#363224)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512820800">- As permissions now has CAP_SYS_NICE for kwin_wayland,
  enable support here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512907200">- Add parens to fix build for 42.x</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Add missing include</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1516795200">- Build with gcc7 on Leap 42.3, gcc6 no longer works because of a
  change to the default compiler flags in openSUSE:Leap:42.3:Update
  (boo#1077345)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517745600">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * [libinput] Ensure Event::device returns a proper Device (kde#389674)
  * Acknowledge the server side deco mode in WaylandServer not ShellClient (kde#389117)
  * From 22% of cpu in hasTransientInternal to 0.2x%
  * [autotests/integration] Add test for broken quick tiling for xdg_shell
  * [effects/blur] Disable texture cache on Wayland</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Fix compilation without libinput
  * Make it possible to compile 5.12 branch with a kdecoration from master
  * [x11] Fix interactive point selection (kde#387720)
  * Block geometry updates on move resize finish and don't configure xdg shell surfaces while blocked (kde#388072)
  * Enable blending if a subsurface has an alpha channel</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Fix the build on armhf/aarch64
  * Convert EffectView to a QQuickWidget
  * Sanity check WindowQuad before trying to create a grid out of it (kde#390953)
  * Fix typo in config group name
  * [kcmkwin/rules] Disable detect button on Wayland
  * Don't crash if the cursor theme fails to create (kde#390314)
  * Support modifier mouse/scroll action on internal decorated windows (kde#374880)
  * Explicitly include &lt;QAction&gt; to fix build with Qt 5.11
  * [autotests] Set breeze icon theme name in integration tests
  * Send hoverLeave or hoverMotion after touch up on decoration (kde#386231)
  * Init the icon in ShellClient::init
  * Disable window rule configuration for Wayland
  * Properly handle move during touch events (kde#390113)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521460800">- Add patch to create Xauthority on wayland, to support connections
  as different user (boo#1084737):
  * 0001-Use-Xauthority-for-Xwayland.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * [colorcorrection] Apply current color temperature on screen hot plug (kde#391623)
  * [effects/coverswitch] Fix broken reflection on multi-monitor setup (kde#378688)
  * [AppMenu] Ignore show request when application menu isn't configured (kde#392012)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * Convert JS files to UTF-8 (from ISO-8859-15)
  * [KScreen Effect] Fix fade to black (kde#388384)
  * Reparse the input configuration when we are notified that it changed
  * Don't try to filter null key combinations (kde#390110)
  * drm backend: choose correct EGL config with mesa-18
  * Ensure _NET_CURRENT_DESKTOP is set on startup (kde#391034)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Update kwindecoration docbook
  * Do not save kwinrulesrc on every window opening/closing (kde#393911)
  * Update seat's timestamp after waking up screen through double tap (kde#392754)
  * Use XdgShell Unstable V6 in nested wayland platform
  * Do not unset cursor image when cursor enters a surface</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="d76387ee195d178865754e0a240a90d3d91a0ce1da5aabb172040d3f80763e69" name="lapack" arch="src">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="38a14965023c80e6ae37e2daa73c7c4ad9482abd2562fba682b9c15c6b2a7e83" name="lapack-devel" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="286bfa5d8319191a31f4435517512cc9a24cd642a708903b9d25e8e0b99b91f4" name="lapack-devel-32bit" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="757ce540a5fc6bf5d4932586fb2a6b42a05a6313aee8492414b05e2d1fa0147e" name="lapack-devel-static" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="1ae432d40980e174f1406014d2898b1fc593538f02fcc18ab350dbb7cb0b785a" name="lapack-man" arch="noarch">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1333108800">- Fixed building on openSUSE 11.4 by fixing defattr
- Made the package groups consistent: Development/Libraries/Parallel
- Cleaned up spec file formatting
- Made all requires use the new package naming</changelog>
  <changelog author="rguenther@suse.com" date="1333368000">- Undo spec file obfuscation</changelog>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
</package>
<package pkgid="a4af84d30d6e5989f151029465bdc0ffee687c9ef151ed9856257a86835027db" name="lapack-man" arch="src">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1333108800">- Fixed building on openSUSE 11.4 by fixing defattr
- Made the package groups consistent: Development/Libraries/Parallel
- Cleaned up spec file formatting
- Made all requires use the new package naming</changelog>
  <changelog author="rguenther@suse.com" date="1333368000">- Undo spec file obfuscation</changelog>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
</package>
<package pkgid="ae2b9efbc121b46528a6793285df7899c14dd7002e5054c869e8e3dbff7287c9" name="lapacke-devel" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="8cfabb8167f8204322b17e9a3d4e3ad1aa1e38f5396311c16eff236209ac099b" name="lapacke-devel-32bit" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="60edf8eae9305b4eb320984b4da51c5afe3622937de44b9193e6db178c31b1d9" name="lapacke-devel-static" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="218f85c07ffc72aaaf39decfe3b64ac51f2d5e3ce952bb7e56c49bfea99e8cf4" name="lastpass-cli" arch="src">
  <version epoch="0" ver="1.3.1" rel="lp150.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1460808000">- Initial package for version 0.9.0</changelog>
  <changelog author="mpluskal@suse.com" date="1469966400">- Update to version 1.0.0:
  * New command lpass status shows whether or not the user is
    logged in with agent, from Nick Knudson
  * lpass add can now be passed --note-type=X in order to add a
    secure note using a template. Specifying an unknown note
    template will list the available templates.
  * lpass ls now shows username with --long, from Alli Witheford
  * Bash completions are now installed with make install, from
    Eli Schwartz
  * Fish shell completions supplied by Joar Wanboarg
  * Initial support for adding (lpass add --app) and editing
    applications
  * Updates to manpage for ls, passwd, add, and basic usage
    examples
  * lpass now follows XDG base directory specifications for its
    files on platforms that use it. Set LP_HOME to ~/.lpass to
    keep the previous location
  * Bugfix: resolved syncing problems on some platforms
    (notably RHEL/CentOS) related to improper multiprocess usage
    of libcurl (github #166)
  * Bugfix: lpass show no longer crashes when a searched-for field
    is not found (github #167)
  * Bugfix: lpass no longer exits with an error if the blob is
    empty but otherwise without parsing errors. This fixes the case
    where a new user could not use the application without first
    adding a site elsewhere.
  * LPASS_LOG_LEVEL learned level=8 with which lpass will also dump
    libcurl verbose logs showing all traffic for debugging (not
    recommended for general use due to potentially sensitive
    headers being logged).</changelog>
  <changelog author="mpluskal@suse.com" date="1487332800">- Update to version 1.1.2:
  * Bugfix: crash with lpass logout --color=never fixed
  * Bugfix: lpass add with secure notes works again
  * Bugfix: sort order in lpass ls is now consistent whether or not
    colors are used
  * Documentation has been enhanced to describe aliases and more
    options, with patches by Eric B. Hymowitz.
- Changes for version 1.1.1:
  * Bugfix: fix crash in lpass show for secure notes without
    attachments
  * Build: fix build on OpenBSD, from Björn Ketelaars
  * Build: fix build when using LibreSSL, from Björn Ketelaars
- Changes for version 1.1.0:
  * New command lpass import can import an existing csv file (or
    output from lpass export) into the vault lpass show and lpass
    ls learned a --format argument to enable user-specified
    printf-style formats
  * Bash completions will now complete field names if --field is
    specified after the account name
  * Build: cmake now used for building, by Filippo Cucchetto and
    with fixes by Eli Schwartz
  * Build: lpass has been updated to work with OpenSSL 1.1
  * Bugfix: crash in lpass ls -l with no last_modified_gmt fixed
  * Bugfix: secure notes editing with "Name" fields now works
    properly
  * Bugfix: editing secure note names now works (github #106)
  * Bugfix: lpass-created server secure notes are now compatible
    with the plugin
  * Bugfix: generate now uses all defined characters, by Ignat
    Korchagin
  * Bugfix: lpass show for ssh-key secure notes no longer corrupts
  * password-protected ssh keys (github #232)</changelog>
  <changelog author="mpluskal@suse.com" date="1496923200">- Update to version 1.2.0:
  * lpass show now supports new-style multiline ssh keys
  * lpass export now supports --fields=FIELDLIST argument to
  * control output, with patches from Kyle Burton
  * lpass ls now always shows empty shared folders
  * lpass edit can now set the 'master password reprompt' field in
    sites
  * lpass share create now shows the created share name
  * Bugfix: crash in lpass show fixed by Kyle Burton
  * build fixes for termux and documentation updates, from
    Christian Rondeau
  * documentation updates for Ubuntu from Craig Menning and Glenn
    Oppegard
  * Test suite now included covering basic operations
- Enable tests</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Update to version 1.2.1:
  * fix regression with lpass show not displaying all fields for
    secure notes</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Update to version 1.2.2:
  * lpass ls --format now supports "%al" to show URL
  * $VISUAL can be used in preference to $EDITOR
  * lpass edit can now directly edit multiline ssh keys
  * fields are now preserved when edited with lpass edit
  * Bugfix: use-after-free in http.c fixed
  * Bugfix: command-line completion now works for names with spaces
  * Bugfix: loading attachments from shared folders now works
  * Documentation updates</changelog>
  <changelog author="mpluskal@suse.com" date="1523016000">- Update to version 1.3.0:
  * lpass show now supports --json format
  * lpass show now supports --quiet flag to suppress prompts
  * lpass import has --keep-dupes flag which will preserve
    duplicate accounts on import
  * LPASS_PINENTRY environment variable may now be used to set
    custom path to pinentry
  * Build fix for aarch64 and others
  * New fish completions
  * Zsh completions
  * bugfix: site notes now show up in notes textarea instead of
    fields
  * spelling fixes
- Modernise spec file
- Install autocompletions</changelog>
  <changelog author="ggkioulis@suse.com" date="1528804800">- Update to version 1.3.1:
  * Revert "pins: remove GlobalSign R1/R3 pins" from Robert Copeland
  * Readme update from Wesley Schwengle
  * Add Dockerfile to create a clean build environment from Wesley Schwengle
  * Missing dependencies in readme
  * Added CLion project files to ignore list</changelog>
</package>
<package pkgid="ace58727b823036b4798dba914321feb884d08bc9af945c3f5c2728af85dbfd7" name="lastpass-cli" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="lp150.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1460808000">- Initial package for version 0.9.0</changelog>
  <changelog author="mpluskal@suse.com" date="1469966400">- Update to version 1.0.0:
  * New command lpass status shows whether or not the user is
    logged in with agent, from Nick Knudson
  * lpass add can now be passed --note-type=X in order to add a
    secure note using a template. Specifying an unknown note
    template will list the available templates.
  * lpass ls now shows username with --long, from Alli Witheford
  * Bash completions are now installed with make install, from
    Eli Schwartz
  * Fish shell completions supplied by Joar Wanboarg
  * Initial support for adding (lpass add --app) and editing
    applications
  * Updates to manpage for ls, passwd, add, and basic usage
    examples
  * lpass now follows XDG base directory specifications for its
    files on platforms that use it. Set LP_HOME to ~/.lpass to
    keep the previous location
  * Bugfix: resolved syncing problems on some platforms
    (notably RHEL/CentOS) related to improper multiprocess usage
    of libcurl (github #166)
  * Bugfix: lpass show no longer crashes when a searched-for field
    is not found (github #167)
  * Bugfix: lpass no longer exits with an error if the blob is
    empty but otherwise without parsing errors. This fixes the case
    where a new user could not use the application without first
    adding a site elsewhere.
  * LPASS_LOG_LEVEL learned level=8 with which lpass will also dump
    libcurl verbose logs showing all traffic for debugging (not
    recommended for general use due to potentially sensitive
    headers being logged).</changelog>
  <changelog author="mpluskal@suse.com" date="1487332800">- Update to version 1.1.2:
  * Bugfix: crash with lpass logout --color=never fixed
  * Bugfix: lpass add with secure notes works again
  * Bugfix: sort order in lpass ls is now consistent whether or not
    colors are used
  * Documentation has been enhanced to describe aliases and more
    options, with patches by Eric B. Hymowitz.
- Changes for version 1.1.1:
  * Bugfix: fix crash in lpass show for secure notes without
    attachments
  * Build: fix build on OpenBSD, from Björn Ketelaars
  * Build: fix build when using LibreSSL, from Björn Ketelaars
- Changes for version 1.1.0:
  * New command lpass import can import an existing csv file (or
    output from lpass export) into the vault lpass show and lpass
    ls learned a --format argument to enable user-specified
    printf-style formats
  * Bash completions will now complete field names if --field is
    specified after the account name
  * Build: cmake now used for building, by Filippo Cucchetto and
    with fixes by Eli Schwartz
  * Build: lpass has been updated to work with OpenSSL 1.1
  * Bugfix: crash in lpass ls -l with no last_modified_gmt fixed
  * Bugfix: secure notes editing with "Name" fields now works
    properly
  * Bugfix: editing secure note names now works (github #106)
  * Bugfix: lpass-created server secure notes are now compatible
    with the plugin
  * Bugfix: generate now uses all defined characters, by Ignat
    Korchagin
  * Bugfix: lpass show for ssh-key secure notes no longer corrupts
  * password-protected ssh keys (github #232)</changelog>
  <changelog author="mpluskal@suse.com" date="1496923200">- Update to version 1.2.0:
  * lpass show now supports new-style multiline ssh keys
  * lpass export now supports --fields=FIELDLIST argument to
  * control output, with patches from Kyle Burton
  * lpass ls now always shows empty shared folders
  * lpass edit can now set the 'master password reprompt' field in
    sites
  * lpass share create now shows the created share name
  * Bugfix: crash in lpass show fixed by Kyle Burton
  * build fixes for termux and documentation updates, from
    Christian Rondeau
  * documentation updates for Ubuntu from Craig Menning and Glenn
    Oppegard
  * Test suite now included covering basic operations
- Enable tests</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Update to version 1.2.1:
  * fix regression with lpass show not displaying all fields for
    secure notes</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Update to version 1.2.2:
  * lpass ls --format now supports "%al" to show URL
  * $VISUAL can be used in preference to $EDITOR
  * lpass edit can now directly edit multiline ssh keys
  * fields are now preserved when edited with lpass edit
  * Bugfix: use-after-free in http.c fixed
  * Bugfix: command-line completion now works for names with spaces
  * Bugfix: loading attachments from shared folders now works
  * Documentation updates</changelog>
  <changelog author="mpluskal@suse.com" date="1523016000">- Update to version 1.3.0:
  * lpass show now supports --json format
  * lpass show now supports --quiet flag to suppress prompts
  * lpass import has --keep-dupes flag which will preserve
    duplicate accounts on import
  * LPASS_PINENTRY environment variable may now be used to set
    custom path to pinentry
  * Build fix for aarch64 and others
  * New fish completions
  * Zsh completions
  * bugfix: site notes now show up in notes textarea instead of
    fields
  * spelling fixes
- Modernise spec file
- Install autocompletions</changelog>
  <changelog author="ggkioulis@suse.com" date="1528804800">- Update to version 1.3.1:
  * Revert "pins: remove GlobalSign R1/R3 pins" from Robert Copeland
  * Readme update from Wesley Schwengle
  * Add Dockerfile to create a clean build environment from Wesley Schwengle
  * Missing dependencies in readme
  * Added CLion project files to ignore list</changelog>
</package>
<package pkgid="8eda5da4201f04fa38114bf9e7048cc5c9c860c0184f781c31af8d850f4e68f4" name="lcms2" arch="src">
  <version epoch="0" ver="2.9" rel="lp150.2.3.1"/>
  <changelog author="adrian@suse.de" date="1274184000">- initial lcms2 package, based on package from version 1
- use OBS source services to download tar ball</changelog>
  <changelog author="mrdocs@opensuse.org" date="1286539200">-more spec file cleanups and prepare for factory submit
-test building against it in my home repo</changelog>
  <changelog author="mrdocs@opensuse.org" date="1289390400">- build documentation noarch and recompress tar</changelog>
  <changelog author="adrian@suse.de" date="1293364800">- update to version 2.1
  * maintenance release (no further details in changelog)
- remove obsolete patches</changelog>
  <changelog author="ro@suse.de" date="1303214400">- fix devel package name in baselibs.conf</changelog>
  <changelog author="mrdocs@opensuse.org" date="1307793600">-update to 2.2
  * maintenance update
  +Version  2.2 adds stability.
  - fixes all known bugs
  - adds support  for dictionary  metatag. Pascal unit now compiles
  under FPK Pascal as well as Delphi.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322136000">- Open all fds with O_CLOEXEC
- Use gcc visibility, symbol table shrinks around 50% ...</changelog>
  <changelog author="adrian@suse.de" date="1324123200">- update to version 2.3
  * Full support for ICC 4.3</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1351425600">- Update to version 2.4
  * Featured release
    + Performance and stability fixes
    + Black point detection from the algorithm disclosed by Adobe
    + Added support for transforms on planar data with different
    stride
    + Added a new plug-in type for optimizing full transforms
    + Linear (gamma 1.0) profiles can now operate in unbounded mode
    + Added "half" float support
    + Please see the ChangeLog  file for more details.</changelog>
  <changelog author="mrdocs@opensuse.org" date="1372852800">- Update to version 2.5
  * Maintenance update
  + Focused on incorrect path and error handling.
    It also updates the black point compensation algorithm
    to match the ICC including the new black point compensation algorithm
    actually being standarized by TC130, ICC and ISO.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389009600">- Correct lcms-endian.patch to rely on autoconf only, no
  extra arch specific preprocessor hackery.</changelog>
  <changelog author="adrian@suse.de" date="1395057600">- update to version 2.6
  * Fixed a double free in recovering from a previous error in default intent handler.
  * Fixed some indexing out of bounds in floating point interpolation
  * Fixed a bug in PCS/Colorspace order when reading V2 Lab devicelinks
  * Added a way to retrieve matrix shaper always, no matter LUT is present
  * Changed endianess detection for PowerPC
  * Fixed memory leaks on error handling
  * Big revamp on Contexts, from Artifex
  * New locking plug-in, from Artifex
  * Added directories for tiff, jpeg in configure script
  * Fix for delete tag memory corruption
  * Added pthread dependency. From now lcms supports multithreading</changelog>
  <changelog author="mailaender@opensuse.org" date="1400241600">- Fixed missing dependency pthread</changelog>
  <changelog author="aloisio@gmx.com" date="1435320000">- Update to version 2.7
  * improved multi-threading
  * added contexts and a new locking plug-in type
  * bugfixes and other minor features
- Dropped lcms-endian.patch that was fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="plinnell@opensuse.org" date="1471348800">- Update to 2.8
  * Fixed many typos in comments, thanks to Stefan Weil for doing that.
  * Fixed localization bug, added a new test case crayons.icc thnaks to Richard Hughes for providing the profile.
  * Fixed a bug in optimizer that made some formats (i.e, bits planar) unavailable
  * Fixed misalignment problems on Alpha. The compiler does not align strings, and accessing begin of string as a uint16 makes code to fail.
  * Added some extra checks to the tools and examples.
  * Fix a bug that prevented to read luminance tag
  * BIG amount of functionality contributed/Sponsored  by Alien Skin Software: TransformStride, copyAlpha, performance plug-ins. Fixes some warnings as well.
  * added an extra _ to _stdcall to make it more portable
  * Fixed a bug in transicc for named color profiles
  * Fixed several compiler warnings
  * Added support for Visual Studio 2015
  * Fixed for XCODE project</changelog>
  <changelog author="plinnell@opensuse.org" date="1485259200">- Added 0001-Added-an-extra-check-to-MLU-bounds.patch
  * fixes https://bugzilla.suse.com/show_bug.cgi?id=1021364</changelog>
  <changelog author="plinnell@opensuse.org" date="1511870400">- Update to 2.9
- Drop 0001-Added-an-extra-check-to-MLU-bounds.patch, it is now
  in the upstream code
  * Bugfix release
  + Several fixes related with security, and therefore not detailed here.
  + C++ compiles now without warnings
  + Added OSX and clang in travis
  + Added a travis-ci test matrix for many compilers and OS.
    Thanks to Thomas Weber (debian) for this great improvement.
  + testbed can now work with dynamic versions of library
  + Fixed wrong planar formatters regarding linestride interpretation</changelog>
  <changelog author="sbrabec@suse.com" date="1538568000">- Add check on CGATS memory allocation (bsc1108813, CVE-2018-16435,
  lcms2-cgats-memory-allocation.patch).</changelog>
</package>
<package pkgid="3bfd531e8428ce4f770b1d660b47aa91b649ac7754b82bf294734bdc0c36aed9" name="lcms2" arch="x86_64">
  <version epoch="0" ver="2.9" rel="lp150.2.3.1"/>
  <changelog author="adrian@suse.de" date="1274184000">- initial lcms2 package, based on package from version 1
- use OBS source services to download tar ball</changelog>
  <changelog author="mrdocs@opensuse.org" date="1286539200">-more spec file cleanups and prepare for factory submit
-test building against it in my home repo</changelog>
  <changelog author="mrdocs@opensuse.org" date="1289390400">- build documentation noarch and recompress tar</changelog>
  <changelog author="adrian@suse.de" date="1293364800">- update to version 2.1
  * maintenance release (no further details in changelog)
- remove obsolete patches</changelog>
  <changelog author="ro@suse.de" date="1303214400">- fix devel package name in baselibs.conf</changelog>
  <changelog author="mrdocs@opensuse.org" date="1307793600">-update to 2.2
  * maintenance update
  +Version  2.2 adds stability.
  - fixes all known bugs
  - adds support  for dictionary  metatag. Pascal unit now compiles
  under FPK Pascal as well as Delphi.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322136000">- Open all fds with O_CLOEXEC
- Use gcc visibility, symbol table shrinks around 50% ...</changelog>
  <changelog author="adrian@suse.de" date="1324123200">- update to version 2.3
  * Full support for ICC 4.3</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1351425600">- Update to version 2.4
  * Featured release
    + Performance and stability fixes
    + Black point detection from the algorithm disclosed by Adobe
    + Added support for transforms on planar data with different
    stride
    + Added a new plug-in type for optimizing full transforms
    + Linear (gamma 1.0) profiles can now operate in unbounded mode
    + Added "half" float support
    + Please see the ChangeLog  file for more details.</changelog>
  <changelog author="mrdocs@opensuse.org" date="1372852800">- Update to version 2.5
  * Maintenance update
  + Focused on incorrect path and error handling.
    It also updates the black point compensation algorithm
    to match the ICC including the new black point compensation algorithm
    actually being standarized by TC130, ICC and ISO.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389009600">- Correct lcms-endian.patch to rely on autoconf only, no
  extra arch specific preprocessor hackery.</changelog>
  <changelog author="adrian@suse.de" date="1395057600">- update to version 2.6
  * Fixed a double free in recovering from a previous error in default intent handler.
  * Fixed some indexing out of bounds in floating point interpolation
  * Fixed a bug in PCS/Colorspace order when reading V2 Lab devicelinks
  * Added a way to retrieve matrix shaper always, no matter LUT is present
  * Changed endianess detection for PowerPC
  * Fixed memory leaks on error handling
  * Big revamp on Contexts, from Artifex
  * New locking plug-in, from Artifex
  * Added directories for tiff, jpeg in configure script
  * Fix for delete tag memory corruption
  * Added pthread dependency. From now lcms supports multithreading</changelog>
  <changelog author="mailaender@opensuse.org" date="1400241600">- Fixed missing dependency pthread</changelog>
  <changelog author="aloisio@gmx.com" date="1435320000">- Update to version 2.7
  * improved multi-threading
  * added contexts and a new locking plug-in type
  * bugfixes and other minor features
- Dropped lcms-endian.patch that was fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="plinnell@opensuse.org" date="1471348800">- Update to 2.8
  * Fixed many typos in comments, thanks to Stefan Weil for doing that.
  * Fixed localization bug, added a new test case crayons.icc thnaks to Richard Hughes for providing the profile.
  * Fixed a bug in optimizer that made some formats (i.e, bits planar) unavailable
  * Fixed misalignment problems on Alpha. The compiler does not align strings, and accessing begin of string as a uint16 makes code to fail.
  * Added some extra checks to the tools and examples.
  * Fix a bug that prevented to read luminance tag
  * BIG amount of functionality contributed/Sponsored  by Alien Skin Software: TransformStride, copyAlpha, performance plug-ins. Fixes some warnings as well.
  * added an extra _ to _stdcall to make it more portable
  * Fixed a bug in transicc for named color profiles
  * Fixed several compiler warnings
  * Added support for Visual Studio 2015
  * Fixed for XCODE project</changelog>
  <changelog author="plinnell@opensuse.org" date="1485259200">- Added 0001-Added-an-extra-check-to-MLU-bounds.patch
  * fixes https://bugzilla.suse.com/show_bug.cgi?id=1021364</changelog>
  <changelog author="plinnell@opensuse.org" date="1511870400">- Update to 2.9
- Drop 0001-Added-an-extra-check-to-MLU-bounds.patch, it is now
  in the upstream code
  * Bugfix release
  + Several fixes related with security, and therefore not detailed here.
  + C++ compiles now without warnings
  + Added OSX and clang in travis
  + Added a travis-ci test matrix for many compilers and OS.
    Thanks to Thomas Weber (debian) for this great improvement.
  + testbed can now work with dynamic versions of library
  + Fixed wrong planar formatters regarding linestride interpretation</changelog>
  <changelog author="sbrabec@suse.com" date="1538568000">- Add check on CGATS memory allocation (bsc1108813, CVE-2018-16435,
  lcms2-cgats-memory-allocation.patch).</changelog>
</package>
<package pkgid="9c2446b9aaa360f17e5498f0b7432b4895a01e593f67b06a6c8667660f93d0fe" name="ldb" arch="src">
  <version epoch="0" ver="1.2.3" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1445515200">- Rename pyldb to python-ldb.</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Add doxygen at build time to add the development documentation.
- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 1.1.23; (bsc#954658).
  + Test improvements
  + Improved python3 bindings; (bsc#951911)
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1449748800">- Update to 1.1.24.
  + fix LDAP \00 search expression attack DoS; CVE-2015-3223; (bso#11325)
  + fix remote read memory exploit in LDB; CVE-2015-5330; (bso#11599)
  + move ldb_(un)pack_data into ldb_module.h for testing
  + fix installation of _ldb_text.py
  + fix propagation of LDB errors through TDB
  + fix bug triggered by having an empty message in database during search</changelog>
  <changelog author="lmuelle@suse.com" date="1453896000">- Update to 1.1.25; (bsc#954658).
  + torture: test ldb_unpack_data_only_attr_list
  + increment version due to added ldb_unpack_data_only_attr_list
  + introduce ldb_unpack_data_withlist to unpack partial list of attributes</changelog>
  <changelog author="lmuelle@suse.com" date="1455278400">- Provide python-ldb and python-ldb-devel; (bsc#966523).</changelog>
  <changelog author="lmuelle@suse.com" date="1455710400">- Update to 1.1.26; (bsc#954658).
  + let a timeout of -1 indicate no timeout for a given request
  + fix memory leaks in pyldb ldb.search()
  + build fixes
  + improve pyldb ldb.search() help message
  + add pyldb ldb.search_iterator() api
  + add LDB_ATTR_FLAG_FORCE_BASE64_LDIF as optional argument
    to ldb_schema_attribute_add()
  + add client support for LDB_CONTROL_DIRSYNC_EX</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Add ldb-python3.5-fix-soabi_name.patch: Do not change x86_64 to
  x86-64 when building with python 3.5.</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Require talloc 2.1.6 at build-time; (bsc#954658).</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to 1.1.27
  + performance improvements
  + VLV control improvements</changelog>
  <changelog author="ddiss@suse.com" date="1485259200">- Update to 1.1.29; (bsc#1032915).
  + add support for LDB_CONTROL_RECALCULATE_RDN_OID on ldb_modify()
  + Performance and memory consumption improvements</changelog>
  <changelog author="scabrero@suse.com" date="1499083200">- Update to 1.1.31
  + let ldbdump parse the -i option
  + don't allow the reveal_internals control for ldbedit
  + only allow --show-binary for ldbsearch
  + don't let ldbsearch create non-existing files
  + fix ldb_tdb search inconsistencies
  + add cmocka based tests
  + provide an interface for improved indexing for callers
    like Samba, which will allow much better performance.
  + Makes ldb access to tdb:// databases use a private event context
    rather than the global event context passed in by the caller.
    This is because running other operations while locks are held
    or a search is being conducted is not safe.
  + Add efficient function to find duplicate values in ldb messages
    (this makes large multi-valued attributes in ldb_tdb more efficient)
- Add ldb-tests-do-not-override-lib-path.patch: Check if LD_LIBRARY_PATH
  and LDB_MODULES_PATH environment variables are set before overriding
  them.</changelog>
  <changelog author="scabrero@suse.com" date="1499256000">- Update to 1.2.0
  + handle one more LDB_FLAG_INTERNAL_DISABLE_SINGLE_VALUE_CHECK
    case in ldb_tdb
  + fix ldb_tdb locking (performance) problems
  + fix ldb_tdb search inconsistencies by adding
    read_[un]lock() hooks to the module stack
    (bug #12858)
  + add cmocka based tests for the locking issues
  + ldb_version.h provides LDB_VERSION_{MAJOR,MINOR,RELEASE} defines
  + protect ldb_modules.h from being used by Samba &lt; 4.7
    Note: that this release (as well as 1.1.30 and 1.1.31)
    may cause problems for older applications, e.g. Samba
    See https://bugzilla.samba.org/show_bug.cgi?id=12859</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to 1.2.1
  + Bug #12882: Do not install _ldb_text.py if we have system libldb
  + Use libraries from build dir for testsuite
  + Bug #12900: Fix index out of bound in ldb_msg_find_common_values</changelog>
  <changelog author="scabrero@suse.com" date="1505736000">- Update to 1.2.2
  + Bug #13017: Add ldb_ldif_message_redacted_string() to allow debug
    of redacted log messages, avoiding showing secret values
  + Bug #13015: Allow re-index of newer databases with binary GUID TDB keys
    (this officially removes support for re-index of the original
    pack format 0, rather than simply segfaulting).
  + Avoid memory allocation and so make modify of records in ldb_tdb faster</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Remove %if guards for blocks that do not affect the build result.
  Fix RPM groups and summaries.
  Drop very old SUSE support. Replace old RPM macros by new
  constructs.</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 1.2.3; (bsc#1080545);
  + Performance regression in DNS server with introduction of DNS wildcard;
    (bso#13191);</changelog>
  <changelog author="dmulder@suse.com" date="1536926400">- Remove python-talloc-devel from %if %else block, since the py3 build
  should not remove py2 dependencies; (bsc#1108164);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1537876800">- Update license to LGPL 3.0 or later; (bsc#1109571);</changelog>
</package>
<package pkgid="c45cdbc38fa4a4075bf5469737e18477ddf80b68360990dc72422e9bd79fb3c5" name="ldb-tools" arch="x86_64">
  <version epoch="0" ver="1.2.3" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1445515200">- Rename pyldb to python-ldb.</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Add doxygen at build time to add the development documentation.
- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 1.1.23; (bsc#954658).
  + Test improvements
  + Improved python3 bindings; (bsc#951911)
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1449748800">- Update to 1.1.24.
  + fix LDAP \00 search expression attack DoS; CVE-2015-3223; (bso#11325)
  + fix remote read memory exploit in LDB; CVE-2015-5330; (bso#11599)
  + move ldb_(un)pack_data into ldb_module.h for testing
  + fix installation of _ldb_text.py
  + fix propagation of LDB errors through TDB
  + fix bug triggered by having an empty message in database during search</changelog>
  <changelog author="lmuelle@suse.com" date="1453896000">- Update to 1.1.25; (bsc#954658).
  + torture: test ldb_unpack_data_only_attr_list
  + increment version due to added ldb_unpack_data_only_attr_list
  + introduce ldb_unpack_data_withlist to unpack partial list of attributes</changelog>
  <changelog author="lmuelle@suse.com" date="1455278400">- Provide python-ldb and python-ldb-devel; (bsc#966523).</changelog>
  <changelog author="lmuelle@suse.com" date="1455710400">- Update to 1.1.26; (bsc#954658).
  + let a timeout of -1 indicate no timeout for a given request
  + fix memory leaks in pyldb ldb.search()
  + build fixes
  + improve pyldb ldb.search() help message
  + add pyldb ldb.search_iterator() api
  + add LDB_ATTR_FLAG_FORCE_BASE64_LDIF as optional argument
    to ldb_schema_attribute_add()
  + add client support for LDB_CONTROL_DIRSYNC_EX</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Add ldb-python3.5-fix-soabi_name.patch: Do not change x86_64 to
  x86-64 when building with python 3.5.</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Require talloc 2.1.6 at build-time; (bsc#954658).</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to 1.1.27
  + performance improvements
  + VLV control improvements</changelog>
  <changelog author="ddiss@suse.com" date="1485259200">- Update to 1.1.29; (bsc#1032915).
  + add support for LDB_CONTROL_RECALCULATE_RDN_OID on ldb_modify()
  + Performance and memory consumption improvements</changelog>
  <changelog author="scabrero@suse.com" date="1499083200">- Update to 1.1.31
  + let ldbdump parse the -i option
  + don't allow the reveal_internals control for ldbedit
  + only allow --show-binary for ldbsearch
  + don't let ldbsearch create non-existing files
  + fix ldb_tdb search inconsistencies
  + add cmocka based tests
  + provide an interface for improved indexing for callers
    like Samba, which will allow much better performance.
  + Makes ldb access to tdb:// databases use a private event context
    rather than the global event context passed in by the caller.
    This is because running other operations while locks are held
    or a search is being conducted is not safe.
  + Add efficient function to find duplicate values in ldb messages
    (this makes large multi-valued attributes in ldb_tdb more efficient)
- Add ldb-tests-do-not-override-lib-path.patch: Check if LD_LIBRARY_PATH
  and LDB_MODULES_PATH environment variables are set before overriding
  them.</changelog>
  <changelog author="scabrero@suse.com" date="1499256000">- Update to 1.2.0
  + handle one more LDB_FLAG_INTERNAL_DISABLE_SINGLE_VALUE_CHECK
    case in ldb_tdb
  + fix ldb_tdb locking (performance) problems
  + fix ldb_tdb search inconsistencies by adding
    read_[un]lock() hooks to the module stack
    (bug #12858)
  + add cmocka based tests for the locking issues
  + ldb_version.h provides LDB_VERSION_{MAJOR,MINOR,RELEASE} defines
  + protect ldb_modules.h from being used by Samba &lt; 4.7
    Note: that this release (as well as 1.1.30 and 1.1.31)
    may cause problems for older applications, e.g. Samba
    See https://bugzilla.samba.org/show_bug.cgi?id=12859</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to 1.2.1
  + Bug #12882: Do not install _ldb_text.py if we have system libldb
  + Use libraries from build dir for testsuite
  + Bug #12900: Fix index out of bound in ldb_msg_find_common_values</changelog>
  <changelog author="scabrero@suse.com" date="1505736000">- Update to 1.2.2
  + Bug #13017: Add ldb_ldif_message_redacted_string() to allow debug
    of redacted log messages, avoiding showing secret values
  + Bug #13015: Allow re-index of newer databases with binary GUID TDB keys
    (this officially removes support for re-index of the original
    pack format 0, rather than simply segfaulting).
  + Avoid memory allocation and so make modify of records in ldb_tdb faster</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Remove %if guards for blocks that do not affect the build result.
  Fix RPM groups and summaries.
  Drop very old SUSE support. Replace old RPM macros by new
  constructs.</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 1.2.3; (bsc#1080545);
  + Performance regression in DNS server with introduction of DNS wildcard;
    (bso#13191);</changelog>
  <changelog author="dmulder@suse.com" date="1536926400">- Remove python-talloc-devel from %if %else block, since the py3 build
  should not remove py2 dependencies; (bsc#1108164);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1537876800">- Update license to LGPL 3.0 or later; (bsc#1109571);</changelog>
</package>
<package pkgid="f7ca1cbe9ee67b3f1860e6f92880e0c165cbfb95190315f63fb5d4882d524d2e" name="ldirectord" arch="x86_64">
  <version epoch="0" ver="4.1.1+git0.5a1edf2b" rel="lp150.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.0+git.1485962683.3b5faae:
  * Also backup users permissions. Skip guest user permission for vhost /
  * Low: slapd: Change of the stop processing.
  * LVM: add error messages for partial_activation
  * Low: apache: Reduce log spam for success
  * Low: findif.sh: Correctly redirect output to /dev/null
  * Low: eDir88: Fix incorrect shell usage
  * Low: redis: Fix error in log output
  * Low: tomcat: Fix incorrect shell usage
  * Low: rabbitmq-cluster: Fix incorrect shell usage
  * Low: Filesystem: Fix incorrect shell usage
  * Low: nginx: Fix incorrect shell usage
  * Low: ServeRAID: Fix incorrect shell usage
  * Low: postfix: data_dir loop could only ever run once
  * Low: SysInfo: Convert test series to legal syntax
  * tomcat: fix systemd tomcat start script check
  * galera: make last commit parsing compatible with mariadb 10.1.18+
  * galera: prevent promote right after demote
  * ifcheck must not suppress stdout of "ip" command so that it can be printed out in case of an error (e.g., usage in findif_check_params).
  * Medium: IPaddr2: add option to enable sending refresh arp packets in monitor
  * Low: IPaddr2: Log refresh arp packets at debug level instead of info
  * pgsql: fix problem with creating replication slot names, when node count greather then 2
  * Low: Update outdated mailing list/wiki references
  * Enable dump/restore users from RabbitMQ ver. 3.6.x
  * Don't run scriptlets if Mnesia isn't available
  * Don't call erlang:halt/0 inside of the working node
  * Remove file only if successfully imported users
  * Dump users only if non-empty
  * Improve dump/restore ofusers' permissions
  * Restore users' permissions only if Mnesia is running
  * RabbitMQ: Reset Mnesia before joining existing cluster
  * portblock: Use -w (wait) to avoid "insufficient privileges" error
  * portblock: version check for -w
  * Double-quote value of synchronous_standby_names in rep_mode.conf
  * specfile: make requirements general and update comments
  * Filesystem: check if there are any mounts mounted under the mountpoint
  * IPaddr2: return success on stop with invalid IP
  * Fix typo in IPaddr2
  * Fix grammar and spelling in some resource agents
  * galera: allow names in wsrep_cluster_address to differ from pacemaker nodes' names
  * IPaddr2 detect duplicate IP
  * redis: use "CLIENT KILL type normal" to notify clients of master being demoted
  * specfile: Add metadata.rng to the file to be collected
  * Adds support for fstype=zfs on Filesystem resource agent
  * LVM: fix partial activation
  * galera: revert "long SST monitoring" PR #684 and #762
  * Medium: exportfs: Only strip brackets from edges of clientspec (bsc#1022223)
- Rebase patches:
  * Add 0001-LVM-Default-partial_activation-to-true-in-SLE-HAE.patch
  * Add 0002-nfsserver-fix-path-to-sm-notify.patch
  * Add 0003-ldirectord-don-t-create-subsys-lock.patch
  * Add 0004-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  * Add 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * Remove lvm-vg-partial-active.diff
  * Remove resource-agents-nfsserver-sle11.patch
  * Remove no-var-lock-subsys.patch
  * Remove 0006-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  * Remove 0001-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1495022400">- Update to version 4.0.1+git.1495055229.643177f1:
  * High: SAPInstance: Add IS_ERS parameter (bsc#1036486)
  * High: DB2: fix HADR support for DB2 V98+ (bsc#1035470)
  * Medium: iSCSILogicalUnit/iSCSITarget: protect targetcli invocations with locks
  * Medium: iSCSILogicalUnit: lio-t IPv6-support
  * Medium: LVM: add check_writethrough parameter
  * Medium: galera: fix permission of temporary log file for mariadb 10.1.21+
  * Medium: galera: fix the first bootstrap when cluster has no data
  * Medium: docker: fix to deal with the image name correctly.
  * Medium: named: Add support for rndc options in named resource agent.
  * Medium: NodeUtilization: Add NodeUtilization agent
  * Medium: rabbitmq-cluster: Allow the rabbitmq cluster to work on pacemaker remote nodes
  * Medium: galera: fix master target during promotion with cluster_host_map
  * Medium: IPaddr2: add option for specifying IPv6's preferred_lft
  * Medium: docker: Allow callers to specify a set of directories that should be created if the don't exist
  * Low: pgsql: fix regex in set async mode
  * Low: added kamctl parameter as it was missing, causing issues if kamctl is not in PATH
  * Low: clvm: remove reload action from metadata
  * Low: iSCSILogicalUnit: replace openssl call with md5sum
  * Low: nginx: fix return code for configfile err
  * Add 0006-Revert-ocf_log-use-same-log-format-as-pacemaker.patch</changelog>
  <changelog author="zlliu@suse.com" date="1500033600">- Medium: Raid1: Handle case when mddev is a symlink(bsc#1047991)
  0007-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1500206400">- High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Add 0009-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
- Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * Add 0008-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1502107200">- High: CTDB: Don't fail on empty directory (bsc#1052577)
  * Add 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.1+git.1503904762.b4582bdb:
  * Low: mysql: Fixed bug where crm_admin is never called, leaving master scores to -1 in certain conditions.
  * Low: exportfs: check fsid parameter for not containing a comma
  * Low: mysql: don't run ocf_is_ms check in a subshell
  * Low: redis: add check for redis-check-rdb
  * Low: redis: wait for pid file to appear after start
  * High: pgsql: Allow dynamic membership
  * Medium: CTDB: fix issue with --logfile being replace with --logging
  * Medium: oraasm: new resource agent for Oracle ASM Disk Groups
  * Medium: rabbitmq-cluster: Backup and restore policies
  * Low: Raid1: Clean up spelling and whitespace
  * Medium: LVM: use vgscan --cache to update metadata during start/relocate
  * Medium: LVM: warn when cache mode is not writethrough
  * Medium: iSCSILogicalUnit: add emulate parameters
  * Medium: mysql: Properly Detect read_only State
  * Medium: anything: Allow multiple instances of binfiles to be run (pidfile will be unique)
  * Medium: anything: Start should return OCF_RUNNING if monitor succeeds
  * Medium: anything: Attempt to fix missing PID directory before starting
  * Medium: kamailio fixes and enhancements for v5.0
  * Low: portblock: dont log dd "0+0 records in/out"
  * Medium: Raid1: Handle case when mddev is a symlink
  * Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * Medium: VirtualDomain: new attributes migrateuri, remoteuri, migration_user
  * Low: sapdb: Add hdbnameserver to monitor services
  * High: CTDB: Don't fail on empty directory (bsc#1052577)
  * High: minio: Resource agent for the minio storage server
  * High: ZFS: Add ZFS Resource Agent
  * High: awseip/awsvip: fixes and improvements
  * Medium: VirtualDomain: new configuration option shutdown_mode
  * Medium: Route: Resource key for the address family (ip4, ip6 or detect)
  * Low: aws-vpc-route53: Fix missing ocf_log in log message
- Remove patches merged upstream:
  * Remove 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * Remove 0008-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
  * Remove 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch
  * Remove 0009-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * Remove 0007-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504180800">- Update to version 4.0.1+git.1504170332.70fbcd8a:
  * Medium: ocf-shellfuncs: improve locking (ocf_take_lock)
  * Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
  * High: lvmlockd: add resource agent for lvmlockd daemon (fate#323822)
  * High: rkt: Add agent for managing rkt containers
  * Medium: varnish: Compatibility for version 4.0</changelog>
  <changelog author="kgronlund@suse.com" date="1504180801">- Update to version 4.0.1+git.1504207605.22ac330c: (bsc#1053207)
  * galera: Honor "safe_to_bootstrap" flag in grastate.dat (bsc#1055017)
  * galera: Fix instance name in master_exists() (bsc#1056635)</changelog>
  <changelog author="kgronlund@suse.com" date="1504526400">- Update to version 4.0.1+git.1504527822.722ffb5b:
  * High: ovsmonitor: Add OpenvSwitch monitor agent (fate#323276)</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.1+git.1508859013.2b3cb4a6:
  * Medium: aws-vpc-route53: Fix tempfile race (bsc#1059312)
  * High: pgsql: Support PG10: Following the change of the PostgreSQL function name.
  * High: pgsql: Support PG10: Following the change of the default action of "pg_ctl start" and "pg_ctl promote".</changelog>
  <changelog author="kgronlund@suse.com" date="1509710400">- Update to version 4.0.1+git.1509705432.020b5b34:
  * LVM-activate: add new RA for LVM activation (fate#323822)
  * nfsserver: allow stop to timeout
  * adding docker-native healthcheck query to docker</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version v4.1.0rc1~git8.2900c751:
  * Drop libnet dependency (bsc#1069596)
  * db2: fix HADR promote when master failed
  * Add resource agent for IPSEC tunnels
  * Mid: apache: Move the stop judgment last.
  * Mid: apache: Eliminate wasteful TERM transmission, correct the waiting time correctly.
  * galera: recover from empty gvwstate.dat
  * Revert "LVM: use vgscan --cache to update metadata during start/relocate"
  * Medium: IPaddr2: do not send Gratuitous ARPs in the Cluster IP configuration
  * Medium: IPaddr2: add send_arp_opts parameter
  * Medium: IPaddr2: allow to choose arping instead of send_arp binary
  * Low: send_arp.linux: print proper usage
  * Low: IPaddr2: document arp_interval as deprecated
  * Low: IPaddr2: remove metadata of an unused parameter arp_mac
  * Low: IPaddr2: always remove orphan pidfile
  * Low: IPaddr2: use ocf_log for an output from send_arp</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.1.0+git54.b264e401:
  * mpathpersist: New agent (fate#324044)
  * jira: New resource agent
  * azure-lb: New resource agent
  * lxc-info/machine-info: New agents for monitoring containers/machines
  * Low: redis: Check read bit on redis config
  * Low: IPsrcaddr: Only check for ifconfig on BSD/solaris
  * Medium: CTDB: Cope with deprecated "idmap backend" smb.conf option
  * Medium: oracle: Fix alter user syntax for set_mon_user_profile
  * Medium: db2: improve monitor and simplify STANDBY/.../DISCONNECTED
  * Medium: CTDB: fix initial probe
  * Medium: ethmonitor: add intel omnipath support
  * Medium: LVM-activate: avoid unnecessary validation in stop action
  * Medium: IPsrcaddr: match exact route to avoid failing</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.1.0+git59.a0452207:
  * lvmlockd: auto change lvm config to use lvmlockd (fate#323822)
  * LVM-activate: put all validations into lvm_validate (fate#323822)
  * mariadb: GTID/semi-sync based MariaDB Master/Slave resource-agent</changelog>
  <changelog author="kgronlund@suse.com" date="1516190400">- Use python3 (bsc#1076413)</changelog>
  <changelog author="kgronlund@suse.com" date="1516190401">- Drop python requirement (bsc#1076413)
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.1.0+git83.6c77ce7e:
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * redis: add support for tunneling replication traffic
  * Low: ovsmonitor: Generate man page for ovsmonitor (fate#323276)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Pacemaker 2.0 compatibility (fate#324508):
  * Low: Xen: Use "crm_attribute --name/-n" instead of deprecated "--attr-name"
  * Low: Xen,redis: Use "crm_attribute --query/-G" instead of deprecated "--get-value"
  * Low: db2,galera,NodeUtilization: Use "crm_attribute --quiet/-q" instead of deprecated "-Q"
  * Low: sfex_daemon: Use "crm_resource --node/-N" instead of deprecated "--host-uname/-H"
  * Low: Xen,NodeUtilization: Use "crm_attribute --node/-N" instead of deprecated "--node-uname/-U"
  * Low: vmware: Do not reference the dropped cluster property "default_action_timeout"
- Remove patch merged upstream:
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518004801">- Edits to description, and compact build commands.</changelog>
  <changelog author="kgronlund@suse.com" date="1520337600">- Update to version 4.1.1+git0.5a1edf2b:
  * High: mpathpersist: Fixed problem that character string could not be correctly parsed (bsc#1083896)
  * High: VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Medium: awseip/awsvip: improvements (incl multi NIC support)
  * Medium: awseip/awsvip: increase default "api_delay" to 3s to avoid failures
  * Low: pgsql: try to create stats_temp_directory
  * Low: Filesystem: Add support for cvfs
  * Low: pgsql: improve validations for replication mode</changelog>
  <changelog author="dakechi@suse.com" date="1533729600">- Implements the reload operation on the SAPInstance RA (bsc#1096744)
- Include the enq_server and enq_replicator on the default service list
  to be monitored for the new S/4 HANA Enq. Services 2. (bsc#1092384)
- Improved SAPInstance START profile detection, avoiding the need of
  setting the START_PROFILE parameter. (bsc#1096744)
- Included the following patches:
  * 0007-SAPInstance-implemeted-reload-method.patch
  * 0008-SAPInstance-Improved-indents.patch
  * 0009-Medium-SAPInstance-Add-monitored-services-for-ENSA2-.patch
  * 0010-SAPInstance-Improved-SAP-instance-profile-detection.patch</changelog>
</package>
<package pkgid="f7f0f0f793d547bd1f88a6754a15559fbd133c9df75efc18a4a1caaa5c67122a" name="ldirectord" arch="x86_64">
  <version epoch="0" ver="4.1.1+git0.5a1edf2b" rel="lp150.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1500206400">- High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Add 0009-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
- Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * Add 0008-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1502107200">- High: CTDB: Don't fail on empty directory (bsc#1052577)
  * Add 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.1+git.1503904762.b4582bdb:
  * Low: mysql: Fixed bug where crm_admin is never called, leaving master scores to -1 in certain conditions.
  * Low: exportfs: check fsid parameter for not containing a comma
  * Low: mysql: don't run ocf_is_ms check in a subshell
  * Low: redis: add check for redis-check-rdb
  * Low: redis: wait for pid file to appear after start
  * High: pgsql: Allow dynamic membership
  * Medium: CTDB: fix issue with --logfile being replace with --logging
  * Medium: oraasm: new resource agent for Oracle ASM Disk Groups
  * Medium: rabbitmq-cluster: Backup and restore policies
  * Low: Raid1: Clean up spelling and whitespace
  * Medium: LVM: use vgscan --cache to update metadata during start/relocate
  * Medium: LVM: warn when cache mode is not writethrough
  * Medium: iSCSILogicalUnit: add emulate parameters
  * Medium: mysql: Properly Detect read_only State
  * Medium: anything: Allow multiple instances of binfiles to be run (pidfile will be unique)
  * Medium: anything: Start should return OCF_RUNNING if monitor succeeds
  * Medium: anything: Attempt to fix missing PID directory before starting
  * Medium: kamailio fixes and enhancements for v5.0
  * Low: portblock: dont log dd "0+0 records in/out"
  * Medium: Raid1: Handle case when mddev is a symlink
  * Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * Medium: VirtualDomain: new attributes migrateuri, remoteuri, migration_user
  * Low: sapdb: Add hdbnameserver to monitor services
  * High: CTDB: Don't fail on empty directory (bsc#1052577)
  * High: minio: Resource agent for the minio storage server
  * High: ZFS: Add ZFS Resource Agent
  * High: awseip/awsvip: fixes and improvements
  * Medium: VirtualDomain: new configuration option shutdown_mode
  * Medium: Route: Resource key for the address family (ip4, ip6 or detect)
  * Low: aws-vpc-route53: Fix missing ocf_log in log message
- Remove patches merged upstream:
  * Remove 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * Remove 0008-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
  * Remove 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch
  * Remove 0009-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * Remove 0007-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504180800">- Update to version 4.0.1+git.1504170332.70fbcd8a:
  * Medium: ocf-shellfuncs: improve locking (ocf_take_lock)
  * Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
  * High: lvmlockd: add resource agent for lvmlockd daemon (fate#323822)
  * High: rkt: Add agent for managing rkt containers
  * Medium: varnish: Compatibility for version 4.0</changelog>
  <changelog author="kgronlund@suse.com" date="1504180801">- Update to version 4.0.1+git.1504207605.22ac330c: (bsc#1053207)
  * galera: Honor "safe_to_bootstrap" flag in grastate.dat (bsc#1055017)
  * galera: Fix instance name in master_exists() (bsc#1056635)</changelog>
  <changelog author="kgronlund@suse.com" date="1504526400">- Update to version 4.0.1+git.1504527822.722ffb5b:
  * High: ovsmonitor: Add OpenvSwitch monitor agent (fate#323276)</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.1+git.1508859013.2b3cb4a6:
  * Medium: aws-vpc-route53: Fix tempfile race (bsc#1059312)
  * High: pgsql: Support PG10: Following the change of the PostgreSQL function name.
  * High: pgsql: Support PG10: Following the change of the default action of "pg_ctl start" and "pg_ctl promote".</changelog>
  <changelog author="kgronlund@suse.com" date="1509710400">- Update to version 4.0.1+git.1509705432.020b5b34:
  * LVM-activate: add new RA for LVM activation (fate#323822)
  * nfsserver: allow stop to timeout
  * adding docker-native healthcheck query to docker</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version v4.1.0rc1~git8.2900c751:
  * Drop libnet dependency (bsc#1069596)
  * db2: fix HADR promote when master failed
  * Add resource agent for IPSEC tunnels
  * Mid: apache: Move the stop judgment last.
  * Mid: apache: Eliminate wasteful TERM transmission, correct the waiting time correctly.
  * galera: recover from empty gvwstate.dat
  * Revert "LVM: use vgscan --cache to update metadata during start/relocate"
  * Medium: IPaddr2: do not send Gratuitous ARPs in the Cluster IP configuration
  * Medium: IPaddr2: add send_arp_opts parameter
  * Medium: IPaddr2: allow to choose arping instead of send_arp binary
  * Low: send_arp.linux: print proper usage
  * Low: IPaddr2: document arp_interval as deprecated
  * Low: IPaddr2: remove metadata of an unused parameter arp_mac
  * Low: IPaddr2: always remove orphan pidfile
  * Low: IPaddr2: use ocf_log for an output from send_arp</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.1.0+git54.b264e401:
  * mpathpersist: New agent (fate#324044)
  * jira: New resource agent
  * azure-lb: New resource agent
  * lxc-info/machine-info: New agents for monitoring containers/machines
  * Low: redis: Check read bit on redis config
  * Low: IPsrcaddr: Only check for ifconfig on BSD/solaris
  * Medium: CTDB: Cope with deprecated "idmap backend" smb.conf option
  * Medium: oracle: Fix alter user syntax for set_mon_user_profile
  * Medium: db2: improve monitor and simplify STANDBY/.../DISCONNECTED
  * Medium: CTDB: fix initial probe
  * Medium: ethmonitor: add intel omnipath support
  * Medium: LVM-activate: avoid unnecessary validation in stop action
  * Medium: IPsrcaddr: match exact route to avoid failing</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.1.0+git59.a0452207:
  * lvmlockd: auto change lvm config to use lvmlockd (fate#323822)
  * LVM-activate: put all validations into lvm_validate (fate#323822)
  * mariadb: GTID/semi-sync based MariaDB Master/Slave resource-agent</changelog>
  <changelog author="kgronlund@suse.com" date="1516190400">- Use python3 (bsc#1076413)</changelog>
  <changelog author="kgronlund@suse.com" date="1516190401">- Drop python requirement (bsc#1076413)
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.1.0+git83.6c77ce7e:
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * redis: add support for tunneling replication traffic
  * Low: ovsmonitor: Generate man page for ovsmonitor (fate#323276)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Pacemaker 2.0 compatibility (fate#324508):
  * Low: Xen: Use "crm_attribute --name/-n" instead of deprecated "--attr-name"
  * Low: Xen,redis: Use "crm_attribute --query/-G" instead of deprecated "--get-value"
  * Low: db2,galera,NodeUtilization: Use "crm_attribute --quiet/-q" instead of deprecated "-Q"
  * Low: sfex_daemon: Use "crm_resource --node/-N" instead of deprecated "--host-uname/-H"
  * Low: Xen,NodeUtilization: Use "crm_attribute --node/-N" instead of deprecated "--node-uname/-U"
  * Low: vmware: Do not reference the dropped cluster property "default_action_timeout"
- Remove patch merged upstream:
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518004801">- Edits to description, and compact build commands.</changelog>
  <changelog author="kgronlund@suse.com" date="1520337600">- Update to version 4.1.1+git0.5a1edf2b:
  * High: mpathpersist: Fixed problem that character string could not be correctly parsed (bsc#1083896)
  * High: VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Medium: awseip/awsvip: improvements (incl multi NIC support)
  * Medium: awseip/awsvip: increase default "api_delay" to 3s to avoid failures
  * Low: pgsql: try to create stats_temp_directory
  * Low: Filesystem: Add support for cvfs
  * Low: pgsql: improve validations for replication mode</changelog>
  <changelog author="dakechi@suse.com" date="1533729600">- Implements the reload operation on the SAPInstance RA (bsc#1096744)
- Include the enq_server and enq_replicator on the default service list
  to be monitored for the new S/4 HANA Enq. Services 2. (bsc#1092384)
- Improved SAPInstance START profile detection, avoiding the need of
  setting the START_PROFILE parameter. (bsc#1096744)
- Included the following patches:
  * 0007-SAPInstance-implemeted-reload-method.patch
  * 0008-SAPInstance-Improved-indents.patch
  * 0009-Medium-SAPInstance-Add-monitored-services-for-ENSA2-.patch
  * 0010-SAPInstance-Improved-SAP-instance-profile-detection.patch</changelog>
  <changelog author="abriel@suse.com" date="1536235200">- CTDB: fix incorrect db corruption reports (bsc#1101668)
- CTDB: fix OCF_RESKEY_ctdb_recovery_lock validation (bsc#1097656)
- LVM: fix missing dash (bsc#1104900)
- Included the following patches:
  * 0011-CTDB-fix-incorrect-db-corruption-reports-bsc-1101668.patch
  * 0012-CTDB-fix-OCF_RESKEY_ctdb_recovery_lock-validation-bs.patch
  * 0013-LVM-fix-missing-dash.patch</changelog>
  <changelog author="dakechi@suse.com" date="1536321600">- pgsql: Avoid the change of /dev/null to postgres owner/group (bsc#1090882)
- Included the patch:
  * 0014-pgsql-Avoid-the-change-of-dev-null-to-postgres-owner.patch</changelog>
  <changelog author="abriel@suse.com" date="1539259200">- CTDB: fix --logging/--logfile version string comparison (bsc#1102935)
- Included the patch:
  * 0015-CTDB-fix-logging-logfile-version-string-comparison.patch</changelog>
</package>
<package pkgid="8b283f96e06e3656410f16e06d4df8d95a3a22e264d0df01a49db926ffaed149" name="libGraphicsMagick++-Q16-12" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.12.1"/>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
</package>
<package pkgid="7e69fe91f7301f002f9834906d5403fe8c079e318da6391a83c46c02b5947c5e" name="libGraphicsMagick++-Q16-12" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.15.1"/>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
</package>
<package pkgid="9b38767a0dff2f8784b352415f278e0859971928ce30f672eef3c25a23ac241a" name="libGraphicsMagick++-Q16-12" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
</package>
<package pkgid="14cf463aa8a9c970f79d554bc3899ba50586d65d2cfe5f19b351a4d9bf2e9be3" name="libGraphicsMagick++-Q16-12" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.6.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
</package>
<package pkgid="2d770e2d9aa0b4692920fc02637dd1b24fba56dd318943d23f181f4d74ff4768" name="libGraphicsMagick++-Q16-12" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.9.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
</package>
<package pkgid="93ce46e6b004bf449dbcf1e617824adf8b3a398b5f5fdde903d4bf12ddf70338" name="libGraphicsMagick++-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.12.1"/>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
</package>
<package pkgid="3975849c90732f1ab90fa3e6181ca9373f51437059c074c764ab4acd62bca19e" name="libGraphicsMagick++-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.15.1"/>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
</package>
<package pkgid="c54c6e6bfb3bf6cebadc25969426c846df7eb38f73fa1a79c91692f7dd1cc799" name="libGraphicsMagick++-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
</package>
<package pkgid="85902e1bdcdd15b705886c2746f9bf0e8ab51a810c510a029ae3f3cad09ca75b" name="libGraphicsMagick++-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.6.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
</package>
<package pkgid="df4385621ec7faf3e5e09f62f179be06ca300634ba9a5e652ba30f9b8c3208d2" name="libGraphicsMagick++-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.9.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
</package>
<package pkgid="d5b9dc6b64bc2be504b7c565cbdf94b5f25b5fa2ed48e50c8f75d1227aabd4b7" name="libGraphicsMagick-Q16-3" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.12.1"/>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
</package>
<package pkgid="15262fe7462546a92ae3c1edb6800c86f4dd140dca501f944cfee7104d70ff06" name="libGraphicsMagick-Q16-3" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.15.1"/>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
</package>
<package pkgid="480cb1c7a40e2b2b7266d9407841b87fa670cf52c0bedc33c2bd72516cda814d" name="libGraphicsMagick-Q16-3" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
</package>
<package pkgid="db19587df818fd7cdc192e63f807d099ec52f850ebb7568adba945d7aae93c5e" name="libGraphicsMagick-Q16-3" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.6.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
</package>
<package pkgid="7318151e383059b6953e394d8a7c48cb5e20590074c0da84100377a71c1c4f71" name="libGraphicsMagick-Q16-3" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.9.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
</package>
<package pkgid="3f837173680819d95278a01e69a77d59aa3cb15e1bbb838eda21e46c56b8b7e0" name="libGraphicsMagick3-config" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.12.1"/>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
</package>
<package pkgid="13e8db6ade64a863c77c28dbbb77d2eb2b333236b9a83c73e6adf82d7b7f3608" name="libGraphicsMagick3-config" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.15.1"/>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
</package>
<package pkgid="315ef7c28a7c0fc220b27e27eefc75bc80b8dbf7a2abf8f4d118a51c4db79476" name="libGraphicsMagick3-config" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
</package>
<package pkgid="0e254d37d7f1b747de5647f38bf591e74d47033d731561e9be36331e096f3c7b" name="libGraphicsMagick3-config" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.6.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
</package>
<package pkgid="05416ea441a66c63cf12b0384511178c59b757aa05e90f811a95a1b1396d249a" name="libGraphicsMagick3-config" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.9.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
</package>
<package pkgid="7bc3c95fa15da3da20bfbef3c1e9ad960ad9c75dce7022e50fd911ef825002cd" name="libGraphicsMagickWand-Q16-2" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.12.1"/>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
</package>
<package pkgid="4b9b8fbb66b4845cbd63493cb31c8b3f47e0f75e3f01f2d9d2c25d249fc35d06" name="libGraphicsMagickWand-Q16-2" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.15.1"/>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
</package>
<package pkgid="494d566dbfa5a4fb3fbea097616a6b4684ff6b3a06f4a2cd4d10c6c69d8c1055" name="libGraphicsMagickWand-Q16-2" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
</package>
<package pkgid="664b41d0bcefd707335eeef9bb87a87c9331cb715820d1edf117e0f93f9e92e5" name="libGraphicsMagickWand-Q16-2" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.6.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
</package>
<package pkgid="14ff634c15e073260104de84d2c4e45066b88400fd8f06471bc6b11e01b5652f" name="libGraphicsMagickWand-Q16-2" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.9.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
</package>
<package pkgid="0483dab321bb8987d44fc96601a4cd6ef45eba504beddf5fadec96c40f36025d" name="libKF5BluezQt6" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1479124800">- Specify the file to be included in bluez-qt-udev instead of
  owning the /lib/udev/ directory.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1479124801">- (Build)Require udev so udevrulesdir gets owned</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Provide device type for Low Energy devices
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * Pass an explicit list of arguments. This prevents QProcess from trying to handle our space containing path through a shell
  * Fix property changes being missed immediately after an obejct is added (kde#377405)</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * API dox: note CamelCase includes by @class tag
  * API dox: add namespace to classes named in README.md
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * Autotests: repair finding helper binary in current setup
  * autotests: fix running with CTEST_PARALLEL_LEVEL=8
  * autotests: prepare for CMAKE_RUNTIME_OUTPUT_DIRECTORY being set</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * autotests: remove now unnecessary compat code
  * autotests: fix failure to find fakebluez in the bin dir.
  * Autotests: Fix finding fakebluez binary (kde#383453)</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Do not leak rfkill file descriptors. (kde#386886)</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Autogenerate debug file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * No need to initialize m_usableAdapterwith nullptr</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * None</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539950400">- Fix install directory for udev rules (boo#1112598)</changelog>
</package>
<package pkgid="e6997bf215895f7e527c2ecb88a1c27e3770ef976fbecd92b022904720d8305f" name="libKF5GlobalAccel5-32bit" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * build: Remove KService dependency</changelog>
  <changelog author="wbauer@tmo.at" date="1494849601">- Remove unnecessary kservice-devel build requirement
- Drop no longer useful
  0001-Make-kglobalaccel5-properly-killable-fixing-super-sl.patch
- No point to delete the kglobalaccel5.po files, they are not
  included any more since 5.11.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * kglobalaccel5: Mark as nongui exe</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys (kde#183458)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Revert upstream commit to avoid major regressions (kde#384597):
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys" (kde#384597)
- Dropped patches, now usptream:
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Revert "Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys""
  * Component can't be null (tested line before it).
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Remove double look-up
  * Group some blocking dbus calls
  * We depend against 5.7
  * kglobalacceld: Avoid loading an icon loader for no reason
  * generate correct shortcut strings
  * Port to debug category</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove unused, duplicated file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use cmake function 'kdbusaddons_generate_dbus_service_file' from kdbusaddons to generate dbus service file (kde#382460)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Remove not necessary QtCore and co
  * Don't assert if used incorrectly from dbus (kde#389375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1527681600">- Add upstream patch 0001-Make-sure-ungrab-keyboard-request-is-processed-befor.patch:
  * Fixes Alt-Tab being randomly ignored (kde#394689, boo#1094931)</changelog>
</package>
<package pkgid="86607552d9f49273723feeaed048b9d683e78cb77a0f1085de2143a3c5dd40a8" name="libKF5GlobalAccel5-32bit" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.2.6.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * build: Remove KService dependency</changelog>
  <changelog author="wbauer@tmo.at" date="1494849601">- Remove unnecessary kservice-devel build requirement
- Drop no longer useful
  0001-Make-kglobalaccel5-properly-killable-fixing-super-sl.patch
- No point to delete the kglobalaccel5.po files, they are not
  included any more since 5.11.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * kglobalaccel5: Mark as nongui exe</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys (kde#183458)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Revert upstream commit to avoid major regressions (kde#384597):
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys" (kde#384597)
- Dropped patches, now usptream:
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Revert "Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys""
  * Component can't be null (tested line before it).
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Remove double look-up
  * Group some blocking dbus calls
  * We depend against 5.7
  * kglobalacceld: Avoid loading an icon loader for no reason
  * generate correct shortcut strings
  * Port to debug category</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove unused, duplicated file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use cmake function 'kdbusaddons_generate_dbus_service_file' from kdbusaddons to generate dbus service file (kde#382460)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Remove not necessary QtCore and co
  * Don't assert if used incorrectly from dbus (kde#389375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1527681600">- Add upstream patch 0001-Make-sure-ungrab-keyboard-request-is-processed-befor.patch:
  * Fixes Alt-Tab being randomly ignored (kde#394689, boo#1094931)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1541246400">- Add patch to fix keyboard layout changes (boo#1103682, kde#350816, kde#269403):
  * 0001-Fix-keyboard-layout-change-notifications.patch</changelog>
</package>
<package pkgid="6ca592fd06a0e83b4f6d9d0614c39ec8d29fbf64aa60784e1282b2ee40ed10cc" name="libKF5GlobalAccel5" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * build: Remove KService dependency</changelog>
  <changelog author="wbauer@tmo.at" date="1494849601">- Remove unnecessary kservice-devel build requirement
- Drop no longer useful
  0001-Make-kglobalaccel5-properly-killable-fixing-super-sl.patch
- No point to delete the kglobalaccel5.po files, they are not
  included any more since 5.11.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * kglobalaccel5: Mark as nongui exe</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys (kde#183458)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Revert upstream commit to avoid major regressions (kde#384597):
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys" (kde#384597)
- Dropped patches, now usptream:
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Revert "Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys""
  * Component can't be null (tested line before it).
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Remove double look-up
  * Group some blocking dbus calls
  * We depend against 5.7
  * kglobalacceld: Avoid loading an icon loader for no reason
  * generate correct shortcut strings
  * Port to debug category</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove unused, duplicated file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use cmake function 'kdbusaddons_generate_dbus_service_file' from kdbusaddons to generate dbus service file (kde#382460)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Remove not necessary QtCore and co
  * Don't assert if used incorrectly from dbus (kde#389375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1527681600">- Add upstream patch 0001-Make-sure-ungrab-keyboard-request-is-processed-befor.patch:
  * Fixes Alt-Tab being randomly ignored (kde#394689, boo#1094931)</changelog>
</package>
<package pkgid="51d0cde15cbfd92896c76e79cd78e319086164103f1a3c038528e0543851aef9" name="libKF5GlobalAccel5" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.2.6.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * build: Remove KService dependency</changelog>
  <changelog author="wbauer@tmo.at" date="1494849601">- Remove unnecessary kservice-devel build requirement
- Drop no longer useful
  0001-Make-kglobalaccel5-properly-killable-fixing-super-sl.patch
- No point to delete the kglobalaccel5.po files, they are not
  included any more since 5.11.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * kglobalaccel5: Mark as nongui exe</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys (kde#183458)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Revert upstream commit to avoid major regressions (kde#384597):
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys" (kde#384597)
- Dropped patches, now usptream:
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Revert "Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys""
  * Component can't be null (tested line before it).
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Remove double look-up
  * Group some blocking dbus calls
  * We depend against 5.7
  * kglobalacceld: Avoid loading an icon loader for no reason
  * generate correct shortcut strings
  * Port to debug category</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove unused, duplicated file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use cmake function 'kdbusaddons_generate_dbus_service_file' from kdbusaddons to generate dbus service file (kde#382460)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Remove not necessary QtCore and co
  * Don't assert if used incorrectly from dbus (kde#389375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1527681600">- Add upstream patch 0001-Make-sure-ungrab-keyboard-request-is-processed-befor.patch:
  * Fixes Alt-Tab being randomly ignored (kde#394689, boo#1094931)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1541246400">- Add patch to fix keyboard layout changes (boo#1103682, kde#350816, kde#269403):
  * 0001-Fix-keyboard-layout-change-notifications.patch</changelog>
</package>
<package pkgid="1fffc0d90dd5fd58ffc4b355144242b944392d8d535ec849968f730fcdf3ec05" name="libKF5GlobalAccel5-lang" arch="noarch">
  <version epoch="0" ver="5.45.0" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * build: Remove KService dependency</changelog>
  <changelog author="wbauer@tmo.at" date="1494849601">- Remove unnecessary kservice-devel build requirement
- Drop no longer useful
  0001-Make-kglobalaccel5-properly-killable-fixing-super-sl.patch
- No point to delete the kglobalaccel5.po files, they are not
  included any more since 5.11.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * kglobalaccel5: Mark as nongui exe</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys (kde#183458)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Revert upstream commit to avoid major regressions (kde#384597):
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys" (kde#384597)
- Dropped patches, now usptream:
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Revert "Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys""
  * Component can't be null (tested line before it).
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Remove double look-up
  * Group some blocking dbus calls
  * We depend against 5.7
  * kglobalacceld: Avoid loading an icon loader for no reason
  * generate correct shortcut strings
  * Port to debug category</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove unused, duplicated file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use cmake function 'kdbusaddons_generate_dbus_service_file' from kdbusaddons to generate dbus service file (kde#382460)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Remove not necessary QtCore and co
  * Don't assert if used incorrectly from dbus (kde#389375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1527681600">- Add upstream patch 0001-Make-sure-ungrab-keyboard-request-is-processed-befor.patch:
  * Fixes Alt-Tab being randomly ignored (kde#394689, boo#1094931)</changelog>
</package>
<package pkgid="f9866c3c1fa0178b529f7bc68cb1c4437a3a1eb34de0c1cc4cc5356938c30da5" name="libKF5GlobalAccel5-lang" arch="noarch">
  <version epoch="0" ver="5.45.0" rel="lp150.2.6.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * build: Remove KService dependency</changelog>
  <changelog author="wbauer@tmo.at" date="1494849601">- Remove unnecessary kservice-devel build requirement
- Drop no longer useful
  0001-Make-kglobalaccel5-properly-killable-fixing-super-sl.patch
- No point to delete the kglobalaccel5.po files, they are not
  included any more since 5.11.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * kglobalaccel5: Mark as nongui exe</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys (kde#183458)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Revert upstream commit to avoid major regressions (kde#384597):
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys" (kde#384597)
- Dropped patches, now usptream:
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Revert "Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys""
  * Component can't be null (tested line before it).
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Remove double look-up
  * Group some blocking dbus calls
  * We depend against 5.7
  * kglobalacceld: Avoid loading an icon loader for no reason
  * generate correct shortcut strings
  * Port to debug category</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove unused, duplicated file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use cmake function 'kdbusaddons_generate_dbus_service_file' from kdbusaddons to generate dbus service file (kde#382460)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Remove not necessary QtCore and co
  * Don't assert if used incorrectly from dbus (kde#389375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1527681600">- Add upstream patch 0001-Make-sure-ungrab-keyboard-request-is-processed-befor.patch:
  * Fixes Alt-Tab being randomly ignored (kde#394689, boo#1094931)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1541246400">- Add patch to fix keyboard layout changes (boo#1103682, kde#350816, kde#269403):
  * 0001-Fix-keyboard-layout-change-notifications.patch</changelog>
</package>
<package pkgid="b5625f5a5d71b05fb3658c512cb5d7e16fba553076ced36a2c3623bb3e887aac" name="libKF5GlobalAccelPrivate5" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * build: Remove KService dependency</changelog>
  <changelog author="wbauer@tmo.at" date="1494849601">- Remove unnecessary kservice-devel build requirement
- Drop no longer useful
  0001-Make-kglobalaccel5-properly-killable-fixing-super-sl.patch
- No point to delete the kglobalaccel5.po files, they are not
  included any more since 5.11.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * kglobalaccel5: Mark as nongui exe</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys (kde#183458)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Revert upstream commit to avoid major regressions (kde#384597):
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys" (kde#384597)
- Dropped patches, now usptream:
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Revert "Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys""
  * Component can't be null (tested line before it).
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Remove double look-up
  * Group some blocking dbus calls
  * We depend against 5.7
  * kglobalacceld: Avoid loading an icon loader for no reason
  * generate correct shortcut strings
  * Port to debug category</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove unused, duplicated file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use cmake function 'kdbusaddons_generate_dbus_service_file' from kdbusaddons to generate dbus service file (kde#382460)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Remove not necessary QtCore and co
  * Don't assert if used incorrectly from dbus (kde#389375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1527681600">- Add upstream patch 0001-Make-sure-ungrab-keyboard-request-is-processed-befor.patch:
  * Fixes Alt-Tab being randomly ignored (kde#394689, boo#1094931)</changelog>
</package>
<package pkgid="78ec9c91764a9456d0a52898d1858ffa9ffa2313284ddf870e0eee99a4b2b1ed" name="libKF5GlobalAccelPrivate5" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.2.6.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * build: Remove KService dependency</changelog>
  <changelog author="wbauer@tmo.at" date="1494849601">- Remove unnecessary kservice-devel build requirement
- Drop no longer useful
  0001-Make-kglobalaccel5-properly-killable-fixing-super-sl.patch
- No point to delete the kglobalaccel5.po files, they are not
  included any more since 5.11.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * kglobalaccel5: Mark as nongui exe</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys (kde#183458)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Revert upstream commit to avoid major regressions (kde#384597):
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys" (kde#384597)
- Dropped patches, now usptream:
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Revert "Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys""
  * Component can't be null (tested line before it).
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Remove double look-up
  * Group some blocking dbus calls
  * We depend against 5.7
  * kglobalacceld: Avoid loading an icon loader for no reason
  * generate correct shortcut strings
  * Port to debug category</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove unused, duplicated file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use cmake function 'kdbusaddons_generate_dbus_service_file' from kdbusaddons to generate dbus service file (kde#382460)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Remove not necessary QtCore and co
  * Don't assert if used incorrectly from dbus (kde#389375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1527681600">- Add upstream patch 0001-Make-sure-ungrab-keyboard-request-is-processed-befor.patch:
  * Fixes Alt-Tab being randomly ignored (kde#394689, boo#1094931)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1541246400">- Add patch to fix keyboard layout changes (boo#1103682, kde#350816, kde#269403):
  * 0001-Fix-keyboard-layout-change-notifications.patch</changelog>
</package>
<package pkgid="5c14f27aaf663377341d7f84d8b21601e90ee173131cc6e001580d8eabefd649" name="libKPimGAPIBlogger5" arch="x86_64">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Fix some clazy warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776000">- Make libKPimGAPICore5 provide libkgapi, so that instaling
  languages (which use a single file) will work</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776001">- Remove all Recommends on non-core packages, since they will
  require the core one</changelog>
  <changelog author="lbeltrame@kde.org" date="1493294400">- Add upstream patch adapt-to-changes-in-google-oauth.patch:
  * Fix for changes in Google OAuth process</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Prepare 5.5.1
  * Auth: add URL bar and SSL indicator to the authentication page
  * Auth: don't store cookies
  * Auth: Adapt to changes in Google OAuth token retrieval process
  * Use same variable as other lib. It's more easy to upgrade version
  * Fix some clazy warning
- Drop upstreamed patches:
  * adapt-to-changes-in-google-oauth.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * None</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Update version
  * Revert "Try to fix build on windows"
  * Try to fix build on windows
  * Fix compile on windows
  * Use isEmpty() here
  * Add more definitions QT_NO_URL_CAST_FROM_STRING
  * Remove Qt module from include
  * Remove module name
  * Use nullptr
  * use nullptr
  * Pedantic
  * Use qCDebug
  * Fix indent
  * Port to for(...:...)
  * Port some others Q_FOREACH
  * Remove more q_foreach
  * Convert some Q_FOREACH
  * not necessary
  * Port to for(...:...)
  * We depend against qt5.7
  * Increase version
  * Fix dependancies</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * lintcmake https://build.neon.kde.org/job/xenial_stable_applications_libkgapi_lintcmake/21/console Unknown CMake command "find_dependency".
  * Fix version</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Port to new connect api
  * Port to new connect api
  * Port to new connect api
  * Remove project here
  * not necessary to have project here
  * Fix merge conflict
  * Add parent
  * Fix includes
  * Adapt to KCalCore API changes
  * Port Period and Duration to QDateTime
  * Adapt to KCalCore lastModified/created API changes
  * We can remove this compatibility now
  * Make run without install them
  * Remove unused line</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * Contacts: fix sync of alternative URL types (kde#387344)</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Add Fix-token-page-URL.patch to make authentification with
  Google services work again after a change by Google (kde#388483)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Fix oauth focus (kde#389263)
  * Reenable setting the authentication URL
  * Retrieve OAuth2 token with HTTP socket
  * Check for the correct "kind" strings
  * Fix token page URL (kde#388483)
- Dropped patches, now upstream:
  * Fix-token-page-URL.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532088000">- Add patch 0001-Use-QtInfoMsg-as-for-other-repo.patch from upstream:
  * Convert all messages to use QtInfoMsg so they can be properly
    filtered and don't reach the logs by default (boo#1101938)</changelog>
</package>
<package pkgid="2def3cf0c12dac99e4ec2d113d64110f18ce3aefb4a97e70f3aea9c953873b51" name="libKPimGAPICalendar5" arch="x86_64">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Fix some clazy warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776000">- Make libKPimGAPICore5 provide libkgapi, so that instaling
  languages (which use a single file) will work</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776001">- Remove all Recommends on non-core packages, since they will
  require the core one</changelog>
  <changelog author="lbeltrame@kde.org" date="1493294400">- Add upstream patch adapt-to-changes-in-google-oauth.patch:
  * Fix for changes in Google OAuth process</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Prepare 5.5.1
  * Auth: add URL bar and SSL indicator to the authentication page
  * Auth: don't store cookies
  * Auth: Adapt to changes in Google OAuth token retrieval process
  * Use same variable as other lib. It's more easy to upgrade version
  * Fix some clazy warning
- Drop upstreamed patches:
  * adapt-to-changes-in-google-oauth.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * None</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Update version
  * Revert "Try to fix build on windows"
  * Try to fix build on windows
  * Fix compile on windows
  * Use isEmpty() here
  * Add more definitions QT_NO_URL_CAST_FROM_STRING
  * Remove Qt module from include
  * Remove module name
  * Use nullptr
  * use nullptr
  * Pedantic
  * Use qCDebug
  * Fix indent
  * Port to for(...:...)
  * Port some others Q_FOREACH
  * Remove more q_foreach
  * Convert some Q_FOREACH
  * not necessary
  * Port to for(...:...)
  * We depend against qt5.7
  * Increase version
  * Fix dependancies</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * lintcmake https://build.neon.kde.org/job/xenial_stable_applications_libkgapi_lintcmake/21/console Unknown CMake command "find_dependency".
  * Fix version</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Port to new connect api
  * Port to new connect api
  * Port to new connect api
  * Remove project here
  * not necessary to have project here
  * Fix merge conflict
  * Add parent
  * Fix includes
  * Adapt to KCalCore API changes
  * Port Period and Duration to QDateTime
  * Adapt to KCalCore lastModified/created API changes
  * We can remove this compatibility now
  * Make run without install them
  * Remove unused line</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * Contacts: fix sync of alternative URL types (kde#387344)</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Add Fix-token-page-URL.patch to make authentification with
  Google services work again after a change by Google (kde#388483)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Fix oauth focus (kde#389263)
  * Reenable setting the authentication URL
  * Retrieve OAuth2 token with HTTP socket
  * Check for the correct "kind" strings
  * Fix token page URL (kde#388483)
- Dropped patches, now upstream:
  * Fix-token-page-URL.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532088000">- Add patch 0001-Use-QtInfoMsg-as-for-other-repo.patch from upstream:
  * Convert all messages to use QtInfoMsg so they can be properly
    filtered and don't reach the logs by default (boo#1101938)</changelog>
</package>
<package pkgid="253824d7c071803c4d5f7a75c62ed9d6d915c0601d90c0799dafa36d0ec4ce86" name="libKPimGAPIContacts5" arch="x86_64">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Fix some clazy warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776000">- Make libKPimGAPICore5 provide libkgapi, so that instaling
  languages (which use a single file) will work</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776001">- Remove all Recommends on non-core packages, since they will
  require the core one</changelog>
  <changelog author="lbeltrame@kde.org" date="1493294400">- Add upstream patch adapt-to-changes-in-google-oauth.patch:
  * Fix for changes in Google OAuth process</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Prepare 5.5.1
  * Auth: add URL bar and SSL indicator to the authentication page
  * Auth: don't store cookies
  * Auth: Adapt to changes in Google OAuth token retrieval process
  * Use same variable as other lib. It's more easy to upgrade version
  * Fix some clazy warning
- Drop upstreamed patches:
  * adapt-to-changes-in-google-oauth.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * None</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Update version
  * Revert "Try to fix build on windows"
  * Try to fix build on windows
  * Fix compile on windows
  * Use isEmpty() here
  * Add more definitions QT_NO_URL_CAST_FROM_STRING
  * Remove Qt module from include
  * Remove module name
  * Use nullptr
  * use nullptr
  * Pedantic
  * Use qCDebug
  * Fix indent
  * Port to for(...:...)
  * Port some others Q_FOREACH
  * Remove more q_foreach
  * Convert some Q_FOREACH
  * not necessary
  * Port to for(...:...)
  * We depend against qt5.7
  * Increase version
  * Fix dependancies</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * lintcmake https://build.neon.kde.org/job/xenial_stable_applications_libkgapi_lintcmake/21/console Unknown CMake command "find_dependency".
  * Fix version</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Port to new connect api
  * Port to new connect api
  * Port to new connect api
  * Remove project here
  * not necessary to have project here
  * Fix merge conflict
  * Add parent
  * Fix includes
  * Adapt to KCalCore API changes
  * Port Period and Duration to QDateTime
  * Adapt to KCalCore lastModified/created API changes
  * We can remove this compatibility now
  * Make run without install them
  * Remove unused line</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * Contacts: fix sync of alternative URL types (kde#387344)</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Add Fix-token-page-URL.patch to make authentification with
  Google services work again after a change by Google (kde#388483)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Fix oauth focus (kde#389263)
  * Reenable setting the authentication URL
  * Retrieve OAuth2 token with HTTP socket
  * Check for the correct "kind" strings
  * Fix token page URL (kde#388483)
- Dropped patches, now upstream:
  * Fix-token-page-URL.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532088000">- Add patch 0001-Use-QtInfoMsg-as-for-other-repo.patch from upstream:
  * Convert all messages to use QtInfoMsg so they can be properly
    filtered and don't reach the logs by default (boo#1101938)</changelog>
</package>
<package pkgid="82150311318b5ecd1258f26ff0e8dc7e68747a149e0d7db12ed29aec4f06997b" name="libKPimGAPICore5" arch="x86_64">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Fix some clazy warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776000">- Make libKPimGAPICore5 provide libkgapi, so that instaling
  languages (which use a single file) will work</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776001">- Remove all Recommends on non-core packages, since they will
  require the core one</changelog>
  <changelog author="lbeltrame@kde.org" date="1493294400">- Add upstream patch adapt-to-changes-in-google-oauth.patch:
  * Fix for changes in Google OAuth process</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Prepare 5.5.1
  * Auth: add URL bar and SSL indicator to the authentication page
  * Auth: don't store cookies
  * Auth: Adapt to changes in Google OAuth token retrieval process
  * Use same variable as other lib. It's more easy to upgrade version
  * Fix some clazy warning
- Drop upstreamed patches:
  * adapt-to-changes-in-google-oauth.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * None</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Update version
  * Revert "Try to fix build on windows"
  * Try to fix build on windows
  * Fix compile on windows
  * Use isEmpty() here
  * Add more definitions QT_NO_URL_CAST_FROM_STRING
  * Remove Qt module from include
  * Remove module name
  * Use nullptr
  * use nullptr
  * Pedantic
  * Use qCDebug
  * Fix indent
  * Port to for(...:...)
  * Port some others Q_FOREACH
  * Remove more q_foreach
  * Convert some Q_FOREACH
  * not necessary
  * Port to for(...:...)
  * We depend against qt5.7
  * Increase version
  * Fix dependancies</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * lintcmake https://build.neon.kde.org/job/xenial_stable_applications_libkgapi_lintcmake/21/console Unknown CMake command "find_dependency".
  * Fix version</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Port to new connect api
  * Port to new connect api
  * Port to new connect api
  * Remove project here
  * not necessary to have project here
  * Fix merge conflict
  * Add parent
  * Fix includes
  * Adapt to KCalCore API changes
  * Port Period and Duration to QDateTime
  * Adapt to KCalCore lastModified/created API changes
  * We can remove this compatibility now
  * Make run without install them
  * Remove unused line</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * Contacts: fix sync of alternative URL types (kde#387344)</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Add Fix-token-page-URL.patch to make authentification with
  Google services work again after a change by Google (kde#388483)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Fix oauth focus (kde#389263)
  * Reenable setting the authentication URL
  * Retrieve OAuth2 token with HTTP socket
  * Check for the correct "kind" strings
  * Fix token page URL (kde#388483)
- Dropped patches, now upstream:
  * Fix-token-page-URL.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532088000">- Add patch 0001-Use-QtInfoMsg-as-for-other-repo.patch from upstream:
  * Convert all messages to use QtInfoMsg so they can be properly
    filtered and don't reach the logs by default (boo#1101938)</changelog>
</package>
<package pkgid="993273ca158b2975f70a3d60d49dcb19f6545fe595a6c1eb00ab2e546523ece0" name="libKPimGAPIDrive5" arch="x86_64">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Fix some clazy warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776000">- Make libKPimGAPICore5 provide libkgapi, so that instaling
  languages (which use a single file) will work</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776001">- Remove all Recommends on non-core packages, since they will
  require the core one</changelog>
  <changelog author="lbeltrame@kde.org" date="1493294400">- Add upstream patch adapt-to-changes-in-google-oauth.patch:
  * Fix for changes in Google OAuth process</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Prepare 5.5.1
  * Auth: add URL bar and SSL indicator to the authentication page
  * Auth: don't store cookies
  * Auth: Adapt to changes in Google OAuth token retrieval process
  * Use same variable as other lib. It's more easy to upgrade version
  * Fix some clazy warning
- Drop upstreamed patches:
  * adapt-to-changes-in-google-oauth.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * None</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Update version
  * Revert "Try to fix build on windows"
  * Try to fix build on windows
  * Fix compile on windows
  * Use isEmpty() here
  * Add more definitions QT_NO_URL_CAST_FROM_STRING
  * Remove Qt module from include
  * Remove module name
  * Use nullptr
  * use nullptr
  * Pedantic
  * Use qCDebug
  * Fix indent
  * Port to for(...:...)
  * Port some others Q_FOREACH
  * Remove more q_foreach
  * Convert some Q_FOREACH
  * not necessary
  * Port to for(...:...)
  * We depend against qt5.7
  * Increase version
  * Fix dependancies</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * lintcmake https://build.neon.kde.org/job/xenial_stable_applications_libkgapi_lintcmake/21/console Unknown CMake command "find_dependency".
  * Fix version</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Port to new connect api
  * Port to new connect api
  * Port to new connect api
  * Remove project here
  * not necessary to have project here
  * Fix merge conflict
  * Add parent
  * Fix includes
  * Adapt to KCalCore API changes
  * Port Period and Duration to QDateTime
  * Adapt to KCalCore lastModified/created API changes
  * We can remove this compatibility now
  * Make run without install them
  * Remove unused line</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * Contacts: fix sync of alternative URL types (kde#387344)</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Add Fix-token-page-URL.patch to make authentification with
  Google services work again after a change by Google (kde#388483)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Fix oauth focus (kde#389263)
  * Reenable setting the authentication URL
  * Retrieve OAuth2 token with HTTP socket
  * Check for the correct "kind" strings
  * Fix token page URL (kde#388483)
- Dropped patches, now upstream:
  * Fix-token-page-URL.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532088000">- Add patch 0001-Use-QtInfoMsg-as-for-other-repo.patch from upstream:
  * Convert all messages to use QtInfoMsg so they can be properly
    filtered and don't reach the logs by default (boo#1101938)</changelog>
</package>
<package pkgid="0c43aadab2ee5957ba93f1f2d4efca981cd70080275919315d0daafafc0f5dfb" name="libKPimGAPILatitude5" arch="x86_64">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Fix some clazy warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776000">- Make libKPimGAPICore5 provide libkgapi, so that instaling
  languages (which use a single file) will work</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776001">- Remove all Recommends on non-core packages, since they will
  require the core one</changelog>
  <changelog author="lbeltrame@kde.org" date="1493294400">- Add upstream patch adapt-to-changes-in-google-oauth.patch:
  * Fix for changes in Google OAuth process</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Prepare 5.5.1
  * Auth: add URL bar and SSL indicator to the authentication page
  * Auth: don't store cookies
  * Auth: Adapt to changes in Google OAuth token retrieval process
  * Use same variable as other lib. It's more easy to upgrade version
  * Fix some clazy warning
- Drop upstreamed patches:
  * adapt-to-changes-in-google-oauth.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * None</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Update version
  * Revert "Try to fix build on windows"
  * Try to fix build on windows
  * Fix compile on windows
  * Use isEmpty() here
  * Add more definitions QT_NO_URL_CAST_FROM_STRING
  * Remove Qt module from include
  * Remove module name
  * Use nullptr
  * use nullptr
  * Pedantic
  * Use qCDebug
  * Fix indent
  * Port to for(...:...)
  * Port some others Q_FOREACH
  * Remove more q_foreach
  * Convert some Q_FOREACH
  * not necessary
  * Port to for(...:...)
  * We depend against qt5.7
  * Increase version
  * Fix dependancies</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * lintcmake https://build.neon.kde.org/job/xenial_stable_applications_libkgapi_lintcmake/21/console Unknown CMake command "find_dependency".
  * Fix version</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Port to new connect api
  * Port to new connect api
  * Port to new connect api
  * Remove project here
  * not necessary to have project here
  * Fix merge conflict
  * Add parent
  * Fix includes
  * Adapt to KCalCore API changes
  * Port Period and Duration to QDateTime
  * Adapt to KCalCore lastModified/created API changes
  * We can remove this compatibility now
  * Make run without install them
  * Remove unused line</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * Contacts: fix sync of alternative URL types (kde#387344)</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Add Fix-token-page-URL.patch to make authentification with
  Google services work again after a change by Google (kde#388483)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Fix oauth focus (kde#389263)
  * Reenable setting the authentication URL
  * Retrieve OAuth2 token with HTTP socket
  * Check for the correct "kind" strings
  * Fix token page URL (kde#388483)
- Dropped patches, now upstream:
  * Fix-token-page-URL.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532088000">- Add patch 0001-Use-QtInfoMsg-as-for-other-repo.patch from upstream:
  * Convert all messages to use QtInfoMsg so they can be properly
    filtered and don't reach the logs by default (boo#1101938)</changelog>
</package>
<package pkgid="ba64801e56f32875b7eb12feae97a382c011577d7a113a70d6c2f83641d06502" name="libKPimGAPIMaps5" arch="x86_64">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Fix some clazy warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776000">- Make libKPimGAPICore5 provide libkgapi, so that instaling
  languages (which use a single file) will work</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776001">- Remove all Recommends on non-core packages, since they will
  require the core one</changelog>
  <changelog author="lbeltrame@kde.org" date="1493294400">- Add upstream patch adapt-to-changes-in-google-oauth.patch:
  * Fix for changes in Google OAuth process</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Prepare 5.5.1
  * Auth: add URL bar and SSL indicator to the authentication page
  * Auth: don't store cookies
  * Auth: Adapt to changes in Google OAuth token retrieval process
  * Use same variable as other lib. It's more easy to upgrade version
  * Fix some clazy warning
- Drop upstreamed patches:
  * adapt-to-changes-in-google-oauth.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * None</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Update version
  * Revert "Try to fix build on windows"
  * Try to fix build on windows
  * Fix compile on windows
  * Use isEmpty() here
  * Add more definitions QT_NO_URL_CAST_FROM_STRING
  * Remove Qt module from include
  * Remove module name
  * Use nullptr
  * use nullptr
  * Pedantic
  * Use qCDebug
  * Fix indent
  * Port to for(...:...)
  * Port some others Q_FOREACH
  * Remove more q_foreach
  * Convert some Q_FOREACH
  * not necessary
  * Port to for(...:...)
  * We depend against qt5.7
  * Increase version
  * Fix dependancies</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * lintcmake https://build.neon.kde.org/job/xenial_stable_applications_libkgapi_lintcmake/21/console Unknown CMake command "find_dependency".
  * Fix version</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Port to new connect api
  * Port to new connect api
  * Port to new connect api
  * Remove project here
  * not necessary to have project here
  * Fix merge conflict
  * Add parent
  * Fix includes
  * Adapt to KCalCore API changes
  * Port Period and Duration to QDateTime
  * Adapt to KCalCore lastModified/created API changes
  * We can remove this compatibility now
  * Make run without install them
  * Remove unused line</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * Contacts: fix sync of alternative URL types (kde#387344)</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Add Fix-token-page-URL.patch to make authentification with
  Google services work again after a change by Google (kde#388483)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Fix oauth focus (kde#389263)
  * Reenable setting the authentication URL
  * Retrieve OAuth2 token with HTTP socket
  * Check for the correct "kind" strings
  * Fix token page URL (kde#388483)
- Dropped patches, now upstream:
  * Fix-token-page-URL.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532088000">- Add patch 0001-Use-QtInfoMsg-as-for-other-repo.patch from upstream:
  * Convert all messages to use QtInfoMsg so they can be properly
    filtered and don't reach the logs by default (boo#1101938)</changelog>
</package>
<package pkgid="6ee397fb15299f35cda59bdd5513038d0a2ea5df70fb7ab399ff342256e263f1" name="libKPimGAPITasks5" arch="x86_64">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Fix some clazy warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776000">- Make libKPimGAPICore5 provide libkgapi, so that instaling
  languages (which use a single file) will work</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776001">- Remove all Recommends on non-core packages, since they will
  require the core one</changelog>
  <changelog author="lbeltrame@kde.org" date="1493294400">- Add upstream patch adapt-to-changes-in-google-oauth.patch:
  * Fix for changes in Google OAuth process</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Prepare 5.5.1
  * Auth: add URL bar and SSL indicator to the authentication page
  * Auth: don't store cookies
  * Auth: Adapt to changes in Google OAuth token retrieval process
  * Use same variable as other lib. It's more easy to upgrade version
  * Fix some clazy warning
- Drop upstreamed patches:
  * adapt-to-changes-in-google-oauth.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * None</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Update version
  * Revert "Try to fix build on windows"
  * Try to fix build on windows
  * Fix compile on windows
  * Use isEmpty() here
  * Add more definitions QT_NO_URL_CAST_FROM_STRING
  * Remove Qt module from include
  * Remove module name
  * Use nullptr
  * use nullptr
  * Pedantic
  * Use qCDebug
  * Fix indent
  * Port to for(...:...)
  * Port some others Q_FOREACH
  * Remove more q_foreach
  * Convert some Q_FOREACH
  * not necessary
  * Port to for(...:...)
  * We depend against qt5.7
  * Increase version
  * Fix dependancies</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * lintcmake https://build.neon.kde.org/job/xenial_stable_applications_libkgapi_lintcmake/21/console Unknown CMake command "find_dependency".
  * Fix version</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Port to new connect api
  * Port to new connect api
  * Port to new connect api
  * Remove project here
  * not necessary to have project here
  * Fix merge conflict
  * Add parent
  * Fix includes
  * Adapt to KCalCore API changes
  * Port Period and Duration to QDateTime
  * Adapt to KCalCore lastModified/created API changes
  * We can remove this compatibility now
  * Make run without install them
  * Remove unused line</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * Contacts: fix sync of alternative URL types (kde#387344)</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Add Fix-token-page-URL.patch to make authentification with
  Google services work again after a change by Google (kde#388483)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Fix oauth focus (kde#389263)
  * Reenable setting the authentication URL
  * Retrieve OAuth2 token with HTTP socket
  * Check for the correct "kind" strings
  * Fix token page URL (kde#388483)
- Dropped patches, now upstream:
  * Fix-token-page-URL.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532088000">- Add patch 0001-Use-QtInfoMsg-as-for-other-repo.patch from upstream:
  * Convert all messages to use QtInfoMsg so they can be properly
    filtered and don't reach the logs by default (boo#1101938)</changelog>
</package>
<package pkgid="7b3110d7b98795163d8edf803d1c37f1b9944cd21042320a98a563ca2c4b309d" name="libKScreenLocker5" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1504180800">- Add patch to allow the NVIDIA driver to poke through seccomp and
  thus not crashing (kde#384005):
  * 0001-Don-t-dissallow-open-with-write-flag-syscall-on-NVID.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * seccomp filter: Handle openat as well (kde#384651)
  * Don't dissallow open with write flag syscall on NVIDIA (kde#384005)
  * Tell user to unlock his session only
  * Use Q_DECL_OVERRIDE
  * Fix detection of sys/event.h on FreeBSD &lt; 12
  * include &lt;signal.h&gt; for kill(2)
- Remove patches, now upstream:
  * 0001-Don-t-dissallow-open-with-write-flag-syscall-on-NVID.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Workaround crash on lockscreen close</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Adjust kwinglplatform.cpp for Mesa renderer string changes
  * Fix greeter crashing with software rendering on wayland</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Remove double margin in KCM UI
  * Load config specified by the LnF theme (kde#384264)
  * Remove unused class SelectImageButton
  * Remove obsolete reviewboardrc file
  * Bump KF5 required version to 5.42
  * Whitelist Switch keyboard layout to shortcuts (kde#378531)
  * port to Package::fileUrl
  * Forbid more syscalls which could modify the filesystem
  * Screenlocker KCM text improvements
  * Change kcm header "Screen Locking Timeouts" to "Configure Screen Locking"</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Fix brightness shortcuts in the whitelist
  * Add touchpad shortcuts to the whitelist
  * Fix building autotest on platforms where syscalls are not available</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Require Qt 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Update size hint of lnf config widget (kde#389483)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="727f6ac1f4c2eec7f1f8e2d302c38766eeb70901a537d4b79acf5acba173bf2d" name="libLLVM5-32bit" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="f2af143eba173fb6050623ee1cb54b44a6ae6ab09cf3c4cfe8475163f8dda2e8" name="libLLVM5" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="8344c5a86dc263459e19ce52f05366b7b12719bb4180c8a4008cf1e77038e706" name="libLTO5-32bit" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="8cb1fecde9530fe0a5ec9169a4d492ad794e1043fc0c2e420aed8d71258084cc" name="libLTO5" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="f8ffe6cd559637551ee7912a1f693bbb2925688d58128be07a2b38ab88136962" name="libMagick++-7_Q16HDRI4-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="8470ac1acb312486c9d75716ad5fa598f6f7149ee5b8b861d34f7c377fa83521" name="libMagick++-7_Q16HDRI4-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
</package>
<package pkgid="d411cafe4128f0b1ce24d6aaf26cbd9f3f3f8a242781bf370c26df618cd17ef7" name="libMagick++-7_Q16HDRI4-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
</package>
<package pkgid="faa68b9418d96289e4a64e7a40b158abf51042616d33ca714ca7cfff0fac5773" name="libMagick++-7_Q16HDRI4-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
</package>
<package pkgid="622c5724d0c34eccac3a908f48c92e21a63b3250918791d91b2bf991a9852991" name="libMagick++-7_Q16HDRI4-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="0927b9974c9396211277f8be19b898f12acb32dded7a1d8694e2998396ad2d2d" name="libMagick++-7_Q16HDRI4-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="6731312f5e9bb38b8f58b559b004e116ac38d7ffda5c9f044b2a6f63934eeb10" name="libMagick++-7_Q16HDRI4-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="e9270fe38790c79baa2d0b7df845ae3b3ade8df99e7d3443a018541efc95d2f4" name="libMagick++-7_Q16HDRI4" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="91687b5d3e6a99685ba3dbc75c476393387dda968fa6996cd50d22fb1c511043" name="libMagick++-7_Q16HDRI4" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
</package>
<package pkgid="a536a1aceff31d64584663c2d0436d7908f77c01d6a52ff0881f266d3ce30e7c" name="libMagick++-7_Q16HDRI4" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
</package>
<package pkgid="281f4a04bc443cb11e2c1542c5c6309a94f4facc2f88a938838aafd7381f4077" name="libMagick++-7_Q16HDRI4" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
</package>
<package pkgid="da8aa18e7f28e3ef2126a229cf1c0182be70561e57e50e502da2011fd035a581" name="libMagick++-7_Q16HDRI4" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="12273043ba69e1ee921d06ee7a06ed9982d1f0b044a7298122d4df9e4a512dac" name="libMagick++-7_Q16HDRI4" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="71a0adcc8fce04509f7928dcd96f1b3a13bcf7528b284382918bf7c4efe45d72" name="libMagick++-7_Q16HDRI4" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="327520dd7a51cb64fdd0c82aa7b3a4397fa5564393177463f511c42c68d65ed1" name="libMagick++-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="afa6e39bdd58919513392b31266b6719f8b29d4dee490871b9e56997676d5e95" name="libMagick++-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
</package>
<package pkgid="be3e50df94ec41aeed40a624d7ccd126aebd3a269bbc87a78474a6d2525210b7" name="libMagick++-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
</package>
<package pkgid="76d562ca6f276a88174d9e1f4f0690c9b39463aad4a5c92bc3980236bcf8ea60" name="libMagick++-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
</package>
<package pkgid="727ab295af0f7413eee323f14a7a4c4bc90d3924fe7b217de8962ba81cfb881f" name="libMagick++-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="01d5424b13b3f8b100792247538f4bc0f53aaaa077e8bff81b3eba22cc7fb50f" name="libMagick++-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="7cc8f6929144f99e5f16bcc0c27e304b887df278d977ddab7ceacd02eefab02d" name="libMagick++-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="42596f10870f9dd4cef4e78e5a6e7e5ffd5851b052e3c39c1a1c1a5c67f80171" name="libMagick++-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="58519f0de38fb97fc69ef06f395064c2d888bbf50c65ce15725719663fbf793d" name="libMagick++-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
</package>
<package pkgid="6806a3ec64088dc4e34bdf566cecec1efee3e11146f5d53dba8126214bc5adc8" name="libMagick++-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
</package>
<package pkgid="7947656e1fd4e375e51ed8487bbf132e61cb985ab0860c25216d5e8326e0d51e" name="libMagick++-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
</package>
<package pkgid="7b74cd706d495073a79febd32986768c956341a9fbc5f3799af790359a836162" name="libMagick++-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="2e623e08230300e5bc177514e0c73bb8f7aab98ecf588702a5f5522ea0fa07c2" name="libMagick++-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="180ab67cc031ee12663b24a6ef3a7c2cb48ff61bb3cd8cea4e0ebaf71b72e410" name="libMagick++-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="5f3ff6d0c9a2e92c046ab48f5c2223e61870dd4fbc60ff3c0952bb83b5aa21d0" name="libMagickCore-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="0ecc37bd834674a57648e281681c76f1311079d01d7321223d2c3b158b02b0e7" name="libMagickCore-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
</package>
<package pkgid="5e611bfe798992c0281b05b1ca45301b9f288f782e0a2fc8da8056ca6ed76795" name="libMagickCore-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
</package>
<package pkgid="e137017517ed64745593ad7edecd33c0119e5e8a23a1591c03aa79f26c2adef5" name="libMagickCore-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
</package>
<package pkgid="e4b7704ca0bab5662054fcfdbe0c6f086f116d19914fe5898ce18eb24f9de86e" name="libMagickCore-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="469777bd82c2e88b72f2cb71c134fb5a14e3c7fa31a798303b7369e34ffda8e3" name="libMagickCore-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="0f1445b066340edd3814f6cc4990fa6c80d14f242591876a9f5ed2d934c66ea5" name="libMagickCore-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="deebbeb291ad529ab16eb4cf42828a0a84bb4e1cf958c212c7f48dbcf21d6f6d" name="libMagickCore-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="6ea68e2e5d2adcb8ac12edcca21a871740c6f5f54175f95356bba483990f560d" name="libMagickCore-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
</package>
<package pkgid="ff9f405959a5a30a38a397afe8baf52aa28e33960eb837310a5a53a697ea88bc" name="libMagickCore-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
</package>
<package pkgid="408ffca70d4317d9cdff9bccf009f98003da2c9c3563a85400798cf2145dff89" name="libMagickCore-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
</package>
<package pkgid="8b07db68e0870ac9107ad713ad490535a950231df2110c8ad462e62d205dcb5a" name="libMagickCore-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="7ad9243fd26d6a9d94d7330355d48c2547d58055029b4110061850732aaf5f20" name="libMagickCore-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="c494633b71071f9193f6b22e03ba17df15f27b71a5a3a3318d409a495f6fa219" name="libMagickCore-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="04f853fa0c44d3de39c8b9142e474c6fd964325fc64a8b0215337197cde561c2" name="libMagickWand-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="c193092f74c2bfa5a6b8e73bf6b53e1d496bd5c4fb1d70f6dcbe561e3a92d71e" name="libMagickWand-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
</package>
<package pkgid="43abcc2312a01f8b88f70fb539f0c934bba4e2a722b10e46ec7d9a2e684c924f" name="libMagickWand-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
</package>
<package pkgid="f8ef7222ab52fc7ca10b3c1e3eb78c1acfe6ca21875ee023ba56939222c4df4f" name="libMagickWand-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
</package>
<package pkgid="6796a0fb2beaf9a9f621ca7ad90575481d7604b32b47e854b7ec5155e97d86e7" name="libMagickWand-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="3cc53d8d24795cdb8e4393270cbd1f7d0ed4d8533920f7c2a3ff662b0fa546a2" name="libMagickWand-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="898c75bee162b71733015492adf3b279174e61d85eb3f278d0e3ced3f9fd3bfa" name="libMagickWand-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="4ff9140716348c39bf93019103ca84d6d030b4578a7c795a95d648e98cdef01d" name="libMagickWand-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="3071ba98149628e954ca220bfedc71336057d071e6cff4824912d289cacb0a15" name="libMagickWand-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
</package>
<package pkgid="bed66a528b072d289598f4573f3c4ca412af55debe99db70cf5fbf06a1c131df" name="libMagickWand-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
</package>
<package pkgid="4c20f72a938c56dd29ce23ff23c117d4ad3cb3c49d924b72d412ac89f678efa2" name="libMagickWand-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
</package>
<package pkgid="7f4490cac0cf6925c82bce312312ad93cf7d49e62d681f3790af6196f3d800d2" name="libMagickWand-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="a7c15238c4b6ae41cbec5c3fd4e277851f71383c303c6b48a4b106bfc978a65d" name="libMagickWand-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="3cd9955c90cfc2fbeaa24893f2b0f2ae066887c1e44f454a6e57125f2eb9c607" name="libMagickWand-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="5151b61eb8c076eef720d8a71a04eb138e82f58c70afb593fdd1d69112a54b26" name="libOSMesa-devel" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="967dc10d2ec0acab1620dcc4787bf39395e7133837724036ea2278c1c6354391" name="libOSMesa-devel-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="e875cb9107ffd767a1cf9739c17ad1283d5732fdcd5c7031904bc14ac8d66141" name="libOSMesa8" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="c6c0ca58ed97c5997f46d0340fa15faf04f5abdee3128558e0cecd31b17bb224" name="libOSMesa8-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="05bc5e8f3742c52a442999d050b49c3ca2a660dba91e2f450454633cf497c59f" name="libSDL2_image-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.0.4" rel="lp150.2.3.1"/>
  <changelog author="prusnak@opensuse.org" date="1376395200">- created package (version 2.0.0) - based on SDL_image package</changelog>
  <changelog author="jengelh@inai.de" date="1376395201">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list, more robust make install call</changelog>
  <changelog author="dvaleev@suse.com" date="1378987200">- Fix undefined s on BigEndian platforms (bigendian_undefined_s.patch)</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway, remove redundant Requires.</changelog>
  <changelog author="mailaender@opensuse.org" date="1452427200">- Update to version 2.0.1
  * Fixed support for transparency in XPM files
  * Fixed memory leak in webp image loading
  * Fixed loading BMP files with large BITMAPINFOHEADER structures
  * Fixed building with libpng 1.4
- Removed bigendian_undefined_s.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518177600">- Update to new upstream release 2.0.2
  * Added simple SVG image support based on Nano SVG
  * Fixed security vulnerability in XCF image loader
    [boo#1062777, CVE-2017-2887]
  * Added optional support for loading images using Windows
    Imaging Component
  * Added libpng save support for much smaller 8-bit images
  * Added JPG save support: IMG_SaveJPG() and IMG_SaveJPG_RW()</changelog>
  <changelog author="jengelh@inai.de" date="1518523200">- Update BuildRequires</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.3
  * Fixed a number of security issues:
  * TALOS-2017-0488/CVE-2017-12122/boo#1084256:
    IMG_LoadLBM_RW code execution vulnerability
  * TALOS-2017-0489/CVE-2017-14440/boo#1084257:
    ILBM CMAP parsing code execution vulnerability
  * TALOS-2017-0490/CVE-2017-14441/boo#1084282:
    ICO pitch handling code execution vulnerability
  * TALOS-2017-0491/CVE-2017-14442/boo#1084304:
    Image palette population code execution vulnerability
  * TALOS-2017-0497/CVE-2017-14448/boo#1084303:
    load_xcf_tile_rle decompression code execution
  * TALOS-2017-0498/CVE-2017-14449/boo#1084297:
    do_layer_surface double free vulnerability
  * TALOS-2017-0499/CVE-2017-14450/boo#1084288:
    LWZ decompression buffer overflow vulnerability</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541592000">- Update to new upstream release 2.0.4
  * Fixed memory issues in the XCF loader:
  * CVE-2018-3839 boo#1089087 TALOS-2018-0521
  * CVE-2018-3977 boo#1114519 TALOS-2018-0645</changelog>
</package>
<package pkgid="d695198d69dc63314fb66c94a1e2386d73560c6b8832001bcee437858b0021ac" name="libSDL2_image-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.0.4" rel="lp150.2.3.1"/>
  <changelog author="prusnak@opensuse.org" date="1376395200">- created package (version 2.0.0) - based on SDL_image package</changelog>
  <changelog author="jengelh@inai.de" date="1376395201">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list, more robust make install call</changelog>
  <changelog author="dvaleev@suse.com" date="1378987200">- Fix undefined s on BigEndian platforms (bigendian_undefined_s.patch)</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway, remove redundant Requires.</changelog>
  <changelog author="mailaender@opensuse.org" date="1452427200">- Update to version 2.0.1
  * Fixed support for transparency in XPM files
  * Fixed memory leak in webp image loading
  * Fixed loading BMP files with large BITMAPINFOHEADER structures
  * Fixed building with libpng 1.4
- Removed bigendian_undefined_s.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518177600">- Update to new upstream release 2.0.2
  * Added simple SVG image support based on Nano SVG
  * Fixed security vulnerability in XCF image loader
    [boo#1062777, CVE-2017-2887]
  * Added optional support for loading images using Windows
    Imaging Component
  * Added libpng save support for much smaller 8-bit images
  * Added JPG save support: IMG_SaveJPG() and IMG_SaveJPG_RW()</changelog>
  <changelog author="jengelh@inai.de" date="1518523200">- Update BuildRequires</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.3
  * Fixed a number of security issues:
  * TALOS-2017-0488/CVE-2017-12122/boo#1084256:
    IMG_LoadLBM_RW code execution vulnerability
  * TALOS-2017-0489/CVE-2017-14440/boo#1084257:
    ILBM CMAP parsing code execution vulnerability
  * TALOS-2017-0490/CVE-2017-14441/boo#1084282:
    ICO pitch handling code execution vulnerability
  * TALOS-2017-0491/CVE-2017-14442/boo#1084304:
    Image palette population code execution vulnerability
  * TALOS-2017-0497/CVE-2017-14448/boo#1084303:
    load_xcf_tile_rle decompression code execution
  * TALOS-2017-0498/CVE-2017-14449/boo#1084297:
    do_layer_surface double free vulnerability
  * TALOS-2017-0499/CVE-2017-14450/boo#1084288:
    LWZ decompression buffer overflow vulnerability</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541592000">- Update to new upstream release 2.0.4
  * Fixed memory issues in the XCF loader:
  * CVE-2018-3839 boo#1089087 TALOS-2018-0521
  * CVE-2018-3977 boo#1114519 TALOS-2018-0645</changelog>
</package>
<package pkgid="d843b0de66f86366d5089897b8fe9fe7cb1a9fa15a1c0161a12fb69ada1fbbc1" name="libSDL2_image-devel" arch="x86_64">
  <version epoch="0" ver="2.0.4" rel="lp150.2.3.1"/>
  <changelog author="prusnak@opensuse.org" date="1376395200">- created package (version 2.0.0) - based on SDL_image package</changelog>
  <changelog author="jengelh@inai.de" date="1376395201">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list, more robust make install call</changelog>
  <changelog author="dvaleev@suse.com" date="1378987200">- Fix undefined s on BigEndian platforms (bigendian_undefined_s.patch)</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway, remove redundant Requires.</changelog>
  <changelog author="mailaender@opensuse.org" date="1452427200">- Update to version 2.0.1
  * Fixed support for transparency in XPM files
  * Fixed memory leak in webp image loading
  * Fixed loading BMP files with large BITMAPINFOHEADER structures
  * Fixed building with libpng 1.4
- Removed bigendian_undefined_s.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518177600">- Update to new upstream release 2.0.2
  * Added simple SVG image support based on Nano SVG
  * Fixed security vulnerability in XCF image loader
    [boo#1062777, CVE-2017-2887]
  * Added optional support for loading images using Windows
    Imaging Component
  * Added libpng save support for much smaller 8-bit images
  * Added JPG save support: IMG_SaveJPG() and IMG_SaveJPG_RW()</changelog>
  <changelog author="jengelh@inai.de" date="1518523200">- Update BuildRequires</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.3
  * Fixed a number of security issues:
  * TALOS-2017-0488/CVE-2017-12122/boo#1084256:
    IMG_LoadLBM_RW code execution vulnerability
  * TALOS-2017-0489/CVE-2017-14440/boo#1084257:
    ILBM CMAP parsing code execution vulnerability
  * TALOS-2017-0490/CVE-2017-14441/boo#1084282:
    ICO pitch handling code execution vulnerability
  * TALOS-2017-0491/CVE-2017-14442/boo#1084304:
    Image palette population code execution vulnerability
  * TALOS-2017-0497/CVE-2017-14448/boo#1084303:
    load_xcf_tile_rle decompression code execution
  * TALOS-2017-0498/CVE-2017-14449/boo#1084297:
    do_layer_surface double free vulnerability
  * TALOS-2017-0499/CVE-2017-14450/boo#1084288:
    LWZ decompression buffer overflow vulnerability</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541592000">- Update to new upstream release 2.0.4
  * Fixed memory issues in the XCF loader:
  * CVE-2018-3839 boo#1089087 TALOS-2018-0521
  * CVE-2018-3977 boo#1114519 TALOS-2018-0645</changelog>
</package>
<package pkgid="8dc9833cb4b31685718b2834be9ec810c5e0b4214c0749b3179eaac0924f9453" name="libSDL2_image-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.0.4" rel="lp150.2.3.1"/>
  <changelog author="prusnak@opensuse.org" date="1376395200">- created package (version 2.0.0) - based on SDL_image package</changelog>
  <changelog author="jengelh@inai.de" date="1376395201">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list, more robust make install call</changelog>
  <changelog author="dvaleev@suse.com" date="1378987200">- Fix undefined s on BigEndian platforms (bigendian_undefined_s.patch)</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway, remove redundant Requires.</changelog>
  <changelog author="mailaender@opensuse.org" date="1452427200">- Update to version 2.0.1
  * Fixed support for transparency in XPM files
  * Fixed memory leak in webp image loading
  * Fixed loading BMP files with large BITMAPINFOHEADER structures
  * Fixed building with libpng 1.4
- Removed bigendian_undefined_s.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518177600">- Update to new upstream release 2.0.2
  * Added simple SVG image support based on Nano SVG
  * Fixed security vulnerability in XCF image loader
    [boo#1062777, CVE-2017-2887]
  * Added optional support for loading images using Windows
    Imaging Component
  * Added libpng save support for much smaller 8-bit images
  * Added JPG save support: IMG_SaveJPG() and IMG_SaveJPG_RW()</changelog>
  <changelog author="jengelh@inai.de" date="1518523200">- Update BuildRequires</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.3
  * Fixed a number of security issues:
  * TALOS-2017-0488/CVE-2017-12122/boo#1084256:
    IMG_LoadLBM_RW code execution vulnerability
  * TALOS-2017-0489/CVE-2017-14440/boo#1084257:
    ILBM CMAP parsing code execution vulnerability
  * TALOS-2017-0490/CVE-2017-14441/boo#1084282:
    ICO pitch handling code execution vulnerability
  * TALOS-2017-0491/CVE-2017-14442/boo#1084304:
    Image palette population code execution vulnerability
  * TALOS-2017-0497/CVE-2017-14448/boo#1084303:
    load_xcf_tile_rle decompression code execution
  * TALOS-2017-0498/CVE-2017-14449/boo#1084297:
    do_layer_surface double free vulnerability
  * TALOS-2017-0499/CVE-2017-14450/boo#1084288:
    LWZ decompression buffer overflow vulnerability</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541592000">- Update to new upstream release 2.0.4
  * Fixed memory issues in the XCF loader:
  * CVE-2018-3839 boo#1089087 TALOS-2018-0521
  * CVE-2018-3977 boo#1114519 TALOS-2018-0645</changelog>
</package>
<package pkgid="c0e6fcc029d936abfaf7b92dc99e28b9b1013b5b728aeb839684bd3b4119e02c" name="libSoundTouch0" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="lp150.2.3.1"/>
  <changelog author="crrodriguez@suse.de" date="1238846400">- use --enable-shared and disable static libraries</changelog>
  <changelog author="sbrabec@suse.cz" date="1241697600">- Updated to version 1.4.0:
  * Improved sound quality by automatic calculation of time stretch
    algorithm processing parameters according to tempo setting
  * Moved BPM detection routines from SoundStretch application into
    SoundTouch library
  * Bugfixes: Usage of uninitialied variables, GNU build scripts,
    compiler errors due to 'const' keyword mismatch.
  * Source code cleanup
- Split according to shared library packaging policy.</changelog>
  <changelog author="lnussel@suse.de" date="1254398400">- fix library package to not depend on main package and glibc-devel</changelog>
  <changelog author="rguenther@novell.com" date="1291896000">- drop bogus libstdc++ BuildRequires</changelog>
  <changelog author="davejplater@gmail.com" date="1291896001">- Fixed rpmlint warnings and error.</changelog>
  <changelog author="davejplater@gmail.com" date="1291896002">- Update to version 1.5.0, added manpage for sounstrech
- Upstream changes :
  * Added normalization to correlation calculation and improvement
  automatic seek/sequence parameter calculation to improve sound
  quality
  * Fixes in compilation scripts for non-Intel platforms
  * Added Dynamic-Link-Library (DLL) version of SoundTouch library
  build, provided with Delphi/Pascal wrapper for calling the dll
  routines
  * Added #define PREVENT_CLICK_AT_RATE_CROSSOVER that prevents a
  click artifact when crossing the nominal pitch from either
  positive to negative side or vice versa
  * Other minor fixes &amp; code cleanup
- Bugfixes :
  * Fixed negative array indexing in quick seek algorithm
  * FIR autoalias filter running too far in processing buffer
  * Check against zero sample count in rate transposing
  * Fix for x86-64 support: Removed pop/push instructions from the
  cpu detection algorithm.
  * Check against empty buffers in FIFOSampleBuffer</changelog>
  <changelog author="toddrme2178@gmail.com" date="1302782400">- added 32bit compatibility libraries</changelog>
  <changelog author="ampsaltis@gmail.com" date="1312977600">- New upstream version 1.6.0.
- Changes:
  * Added automatic cutoff threshold adaptation to beat detection
    routine to better adapt BPM calculation to different types of
    music
  * Retired 3DNow! optimization support as 3DNow! is nowadays
    obsoleted and assembler code is nuisance to maintain
  * Retired "configure" file from source code package due to
    autoconf/automake versio conflicts, so that it is from now on to
    be generated by invoking "boostrap" script that uses locally
    available toolchain version for generating the "configure" file
  * Resolved namespace/label naming conflicts with other libraries by
    replacing global labels such as INTEGER_SAMPLES with more
    specific SOUNDTOUCH_INTEGER_SAMPLES etc.
  * Updated windows build scripts &amp; project files for Visual Studio
    2008 support
  * Updated SoundTouch.dll API for .NET compatibility
  * Added API for querying nominal processing input &amp; output sample
    batch sizes</changelog>
  <changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="sbrabec@suse.cz" date="1359115200">- Update to version 1.7.1:
  * Added files for Android compilation
  * Sound quality improvements
  * Improved flush() to adjust output sound stream duration to
    match better with ideal duration
  * Rewrote x86 cpu feature check to resolve compatibility problems
  * Configure script automatically checks if CPU supports mmx &amp; sse
    compatibility for GNU platform, and the script support now
    "--enable-x86-optimizations" switch to allow disabling
    x86-specific optimizations.
  * Revised #define conditions for 32bit/64bit compatibility
  * gnu autoconf/automake script compatibility fixes
  * Tuned beat-per-minute detection algorithm
- Updated man page from Debian unstable.</changelog>
  <changelog author="p.drouand@gmail.com" date="1427284800">- Update to version 1.8.0
  * Added support for multi-channel audio processing
  * Added support for cubic and shannon interpolation for rate and
    pitch shift effects besides the original linear interpolation,
    to reduce aliasing at high frequencies due to interpolation.
    Cubic interpolation is used as default for floating point processing,
    and linear interpolation for integer processing.
  * Fixed bug in anti-alias filtering that limited stop-band attenuation
    to -10 dB instead of &lt;-50dB, and increased filter length from 32 to 64
    taps to further reduce aliasing due to frequency folding.
  * Performance improvements in cross-correlation algorithm
  * Other bug and compatibility fixes
- Remove obsolete AUTHORS and %clean sections</changelog>
  <changelog author="p.drouand@gmail.com" date="1428235200">- Add baselibs.conf in sources list; fix for Factory</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1536235200">- bsc #1103676: CVE-2018-1000223: soundtouch: Heap-based buffer overflow
  added patch fix-buffer-overflow.patch</changelog>
</package>
<package pkgid="81c8db6688aa5b36425d6004f1628dc4347e712fc08992ed38ab0bf8f7063d05" name="libSoundTouch0" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="lp150.2.6.1"/>
  <changelog author="crrodriguez@suse.de" date="1238846400">- use --enable-shared and disable static libraries</changelog>
  <changelog author="sbrabec@suse.cz" date="1241697600">- Updated to version 1.4.0:
  * Improved sound quality by automatic calculation of time stretch
    algorithm processing parameters according to tempo setting
  * Moved BPM detection routines from SoundStretch application into
    SoundTouch library
  * Bugfixes: Usage of uninitialied variables, GNU build scripts,
    compiler errors due to 'const' keyword mismatch.
  * Source code cleanup
- Split according to shared library packaging policy.</changelog>
  <changelog author="lnussel@suse.de" date="1254398400">- fix library package to not depend on main package and glibc-devel</changelog>
  <changelog author="rguenther@novell.com" date="1291896000">- drop bogus libstdc++ BuildRequires</changelog>
  <changelog author="davejplater@gmail.com" date="1291896001">- Fixed rpmlint warnings and error.</changelog>
  <changelog author="davejplater@gmail.com" date="1291896002">- Update to version 1.5.0, added manpage for sounstrech
- Upstream changes :
  * Added normalization to correlation calculation and improvement
  automatic seek/sequence parameter calculation to improve sound
  quality
  * Fixes in compilation scripts for non-Intel platforms
  * Added Dynamic-Link-Library (DLL) version of SoundTouch library
  build, provided with Delphi/Pascal wrapper for calling the dll
  routines
  * Added #define PREVENT_CLICK_AT_RATE_CROSSOVER that prevents a
  click artifact when crossing the nominal pitch from either
  positive to negative side or vice versa
  * Other minor fixes &amp; code cleanup
- Bugfixes :
  * Fixed negative array indexing in quick seek algorithm
  * FIR autoalias filter running too far in processing buffer
  * Check against zero sample count in rate transposing
  * Fix for x86-64 support: Removed pop/push instructions from the
  cpu detection algorithm.
  * Check against empty buffers in FIFOSampleBuffer</changelog>
  <changelog author="toddrme2178@gmail.com" date="1302782400">- added 32bit compatibility libraries</changelog>
  <changelog author="ampsaltis@gmail.com" date="1312977600">- New upstream version 1.6.0.
- Changes:
  * Added automatic cutoff threshold adaptation to beat detection
    routine to better adapt BPM calculation to different types of
    music
  * Retired 3DNow! optimization support as 3DNow! is nowadays
    obsoleted and assembler code is nuisance to maintain
  * Retired "configure" file from source code package due to
    autoconf/automake versio conflicts, so that it is from now on to
    be generated by invoking "boostrap" script that uses locally
    available toolchain version for generating the "configure" file
  * Resolved namespace/label naming conflicts with other libraries by
    replacing global labels such as INTEGER_SAMPLES with more
    specific SOUNDTOUCH_INTEGER_SAMPLES etc.
  * Updated windows build scripts &amp; project files for Visual Studio
    2008 support
  * Updated SoundTouch.dll API for .NET compatibility
  * Added API for querying nominal processing input &amp; output sample
    batch sizes</changelog>
  <changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="sbrabec@suse.cz" date="1359115200">- Update to version 1.7.1:
  * Added files for Android compilation
  * Sound quality improvements
  * Improved flush() to adjust output sound stream duration to
    match better with ideal duration
  * Rewrote x86 cpu feature check to resolve compatibility problems
  * Configure script automatically checks if CPU supports mmx &amp; sse
    compatibility for GNU platform, and the script support now
    "--enable-x86-optimizations" switch to allow disabling
    x86-specific optimizations.
  * Revised #define conditions for 32bit/64bit compatibility
  * gnu autoconf/automake script compatibility fixes
  * Tuned beat-per-minute detection algorithm
- Updated man page from Debian unstable.</changelog>
  <changelog author="p.drouand@gmail.com" date="1427284800">- Update to version 1.8.0
  * Added support for multi-channel audio processing
  * Added support for cubic and shannon interpolation for rate and
    pitch shift effects besides the original linear interpolation,
    to reduce aliasing at high frequencies due to interpolation.
    Cubic interpolation is used as default for floating point processing,
    and linear interpolation for integer processing.
  * Fixed bug in anti-alias filtering that limited stop-band attenuation
    to -10 dB instead of &lt;-50dB, and increased filter length from 32 to 64
    taps to further reduce aliasing due to frequency folding.
  * Performance improvements in cross-correlation algorithm
  * Other bug and compatibility fixes
- Remove obsolete AUTHORS and %clean sections</changelog>
  <changelog author="p.drouand@gmail.com" date="1428235200">- Add baselibs.conf in sources list; fix for Factory</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1536235200">- bsc #1103676: CVE-2018-1000223: soundtouch: Heap-based buffer overflow
  added patch fix-buffer-overflow.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1540814400">- Fixed bugs:
  * CVE-2018-17098 (bsc#1108632) -- remote denial of service
  * CVE-2018-17097 (bsc#1108631) -- remote denial of service (double free)
  * CVE-2018-17096 (bsc#1108630) -- remote denial of service
    in BPMDetect.cpp
- Added patches:
  * soundtouch-throw-exception.patch -- fixes bsc#1108630
  * soundtouch-avoid-assert.patch
  * soundtouch-round-buffer.patch -- fixes bsc#1108631 and bsc#1108632
- Renamed fix-buffer-overflow.patch to soundtouch-fix-buffer-overflow.patch</changelog>
</package>
<package pkgid="52799d61ce93406197197b98b873265642f482b6ac8928a7ca42f364ae1e0770" name="libSoundTouch0-32bit" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="lp150.2.3.1"/>
  <changelog author="crrodriguez@suse.de" date="1238846400">- use --enable-shared and disable static libraries</changelog>
  <changelog author="sbrabec@suse.cz" date="1241697600">- Updated to version 1.4.0:
  * Improved sound quality by automatic calculation of time stretch
    algorithm processing parameters according to tempo setting
  * Moved BPM detection routines from SoundStretch application into
    SoundTouch library
  * Bugfixes: Usage of uninitialied variables, GNU build scripts,
    compiler errors due to 'const' keyword mismatch.
  * Source code cleanup
- Split according to shared library packaging policy.</changelog>
  <changelog author="lnussel@suse.de" date="1254398400">- fix library package to not depend on main package and glibc-devel</changelog>
  <changelog author="rguenther@novell.com" date="1291896000">- drop bogus libstdc++ BuildRequires</changelog>
  <changelog author="davejplater@gmail.com" date="1291896001">- Fixed rpmlint warnings and error.</changelog>
  <changelog author="davejplater@gmail.com" date="1291896002">- Update to version 1.5.0, added manpage for sounstrech
- Upstream changes :
  * Added normalization to correlation calculation and improvement
  automatic seek/sequence parameter calculation to improve sound
  quality
  * Fixes in compilation scripts for non-Intel platforms
  * Added Dynamic-Link-Library (DLL) version of SoundTouch library
  build, provided with Delphi/Pascal wrapper for calling the dll
  routines
  * Added #define PREVENT_CLICK_AT_RATE_CROSSOVER that prevents a
  click artifact when crossing the nominal pitch from either
  positive to negative side or vice versa
  * Other minor fixes &amp; code cleanup
- Bugfixes :
  * Fixed negative array indexing in quick seek algorithm
  * FIR autoalias filter running too far in processing buffer
  * Check against zero sample count in rate transposing
  * Fix for x86-64 support: Removed pop/push instructions from the
  cpu detection algorithm.
  * Check against empty buffers in FIFOSampleBuffer</changelog>
  <changelog author="toddrme2178@gmail.com" date="1302782400">- added 32bit compatibility libraries</changelog>
  <changelog author="ampsaltis@gmail.com" date="1312977600">- New upstream version 1.6.0.
- Changes:
  * Added automatic cutoff threshold adaptation to beat detection
    routine to better adapt BPM calculation to different types of
    music
  * Retired 3DNow! optimization support as 3DNow! is nowadays
    obsoleted and assembler code is nuisance to maintain
  * Retired "configure" file from source code package due to
    autoconf/automake versio conflicts, so that it is from now on to
    be generated by invoking "boostrap" script that uses locally
    available toolchain version for generating the "configure" file
  * Resolved namespace/label naming conflicts with other libraries by
    replacing global labels such as INTEGER_SAMPLES with more
    specific SOUNDTOUCH_INTEGER_SAMPLES etc.
  * Updated windows build scripts &amp; project files for Visual Studio
    2008 support
  * Updated SoundTouch.dll API for .NET compatibility
  * Added API for querying nominal processing input &amp; output sample
    batch sizes</changelog>
  <changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="sbrabec@suse.cz" date="1359115200">- Update to version 1.7.1:
  * Added files for Android compilation
  * Sound quality improvements
  * Improved flush() to adjust output sound stream duration to
    match better with ideal duration
  * Rewrote x86 cpu feature check to resolve compatibility problems
  * Configure script automatically checks if CPU supports mmx &amp; sse
    compatibility for GNU platform, and the script support now
    "--enable-x86-optimizations" switch to allow disabling
    x86-specific optimizations.
  * Revised #define conditions for 32bit/64bit compatibility
  * gnu autoconf/automake script compatibility fixes
  * Tuned beat-per-minute detection algorithm
- Updated man page from Debian unstable.</changelog>
  <changelog author="p.drouand@gmail.com" date="1427284800">- Update to version 1.8.0
  * Added support for multi-channel audio processing
  * Added support for cubic and shannon interpolation for rate and
    pitch shift effects besides the original linear interpolation,
    to reduce aliasing at high frequencies due to interpolation.
    Cubic interpolation is used as default for floating point processing,
    and linear interpolation for integer processing.
  * Fixed bug in anti-alias filtering that limited stop-band attenuation
    to -10 dB instead of &lt;-50dB, and increased filter length from 32 to 64
    taps to further reduce aliasing due to frequency folding.
  * Performance improvements in cross-correlation algorithm
  * Other bug and compatibility fixes
- Remove obsolete AUTHORS and %clean sections</changelog>
  <changelog author="p.drouand@gmail.com" date="1428235200">- Add baselibs.conf in sources list; fix for Factory</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1536235200">- bsc #1103676: CVE-2018-1000223: soundtouch: Heap-based buffer overflow
  added patch fix-buffer-overflow.patch</changelog>
</package>
<package pkgid="f4141854a0170f3fd16c98a85a0eb7785a7961afcbc093f6c76614f8887a33dd" name="libSoundTouch0-32bit" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="lp150.2.6.1"/>
  <changelog author="crrodriguez@suse.de" date="1238846400">- use --enable-shared and disable static libraries</changelog>
  <changelog author="sbrabec@suse.cz" date="1241697600">- Updated to version 1.4.0:
  * Improved sound quality by automatic calculation of time stretch
    algorithm processing parameters according to tempo setting
  * Moved BPM detection routines from SoundStretch application into
    SoundTouch library
  * Bugfixes: Usage of uninitialied variables, GNU build scripts,
    compiler errors due to 'const' keyword mismatch.
  * Source code cleanup
- Split according to shared library packaging policy.</changelog>
  <changelog author="lnussel@suse.de" date="1254398400">- fix library package to not depend on main package and glibc-devel</changelog>
  <changelog author="rguenther@novell.com" date="1291896000">- drop bogus libstdc++ BuildRequires</changelog>
  <changelog author="davejplater@gmail.com" date="1291896001">- Fixed rpmlint warnings and error.</changelog>
  <changelog author="davejplater@gmail.com" date="1291896002">- Update to version 1.5.0, added manpage for sounstrech
- Upstream changes :
  * Added normalization to correlation calculation and improvement
  automatic seek/sequence parameter calculation to improve sound
  quality
  * Fixes in compilation scripts for non-Intel platforms
  * Added Dynamic-Link-Library (DLL) version of SoundTouch library
  build, provided with Delphi/Pascal wrapper for calling the dll
  routines
  * Added #define PREVENT_CLICK_AT_RATE_CROSSOVER that prevents a
  click artifact when crossing the nominal pitch from either
  positive to negative side or vice versa
  * Other minor fixes &amp; code cleanup
- Bugfixes :
  * Fixed negative array indexing in quick seek algorithm
  * FIR autoalias filter running too far in processing buffer
  * Check against zero sample count in rate transposing
  * Fix for x86-64 support: Removed pop/push instructions from the
  cpu detection algorithm.
  * Check against empty buffers in FIFOSampleBuffer</changelog>
  <changelog author="toddrme2178@gmail.com" date="1302782400">- added 32bit compatibility libraries</changelog>
  <changelog author="ampsaltis@gmail.com" date="1312977600">- New upstream version 1.6.0.
- Changes:
  * Added automatic cutoff threshold adaptation to beat detection
    routine to better adapt BPM calculation to different types of
    music
  * Retired 3DNow! optimization support as 3DNow! is nowadays
    obsoleted and assembler code is nuisance to maintain
  * Retired "configure" file from source code package due to
    autoconf/automake versio conflicts, so that it is from now on to
    be generated by invoking "boostrap" script that uses locally
    available toolchain version for generating the "configure" file
  * Resolved namespace/label naming conflicts with other libraries by
    replacing global labels such as INTEGER_SAMPLES with more
    specific SOUNDTOUCH_INTEGER_SAMPLES etc.
  * Updated windows build scripts &amp; project files for Visual Studio
    2008 support
  * Updated SoundTouch.dll API for .NET compatibility
  * Added API for querying nominal processing input &amp; output sample
    batch sizes</changelog>
  <changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="sbrabec@suse.cz" date="1359115200">- Update to version 1.7.1:
  * Added files for Android compilation
  * Sound quality improvements
  * Improved flush() to adjust output sound stream duration to
    match better with ideal duration
  * Rewrote x86 cpu feature check to resolve compatibility problems
  * Configure script automatically checks if CPU supports mmx &amp; sse
    compatibility for GNU platform, and the script support now
    "--enable-x86-optimizations" switch to allow disabling
    x86-specific optimizations.
  * Revised #define conditions for 32bit/64bit compatibility
  * gnu autoconf/automake script compatibility fixes
  * Tuned beat-per-minute detection algorithm
- Updated man page from Debian unstable.</changelog>
  <changelog author="p.drouand@gmail.com" date="1427284800">- Update to version 1.8.0
  * Added support for multi-channel audio processing
  * Added support for cubic and shannon interpolation for rate and
    pitch shift effects besides the original linear interpolation,
    to reduce aliasing at high frequencies due to interpolation.
    Cubic interpolation is used as default for floating point processing,
    and linear interpolation for integer processing.
  * Fixed bug in anti-alias filtering that limited stop-band attenuation
    to -10 dB instead of &lt;-50dB, and increased filter length from 32 to 64
    taps to further reduce aliasing due to frequency folding.
  * Performance improvements in cross-correlation algorithm
  * Other bug and compatibility fixes
- Remove obsolete AUTHORS and %clean sections</changelog>
  <changelog author="p.drouand@gmail.com" date="1428235200">- Add baselibs.conf in sources list; fix for Factory</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1536235200">- bsc #1103676: CVE-2018-1000223: soundtouch: Heap-based buffer overflow
  added patch fix-buffer-overflow.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1540814400">- Fixed bugs:
  * CVE-2018-17098 (bsc#1108632) -- remote denial of service
  * CVE-2018-17097 (bsc#1108631) -- remote denial of service (double free)
  * CVE-2018-17096 (bsc#1108630) -- remote denial of service
    in BPMDetect.cpp
- Added patches:
  * soundtouch-throw-exception.patch -- fixes bsc#1108630
  * soundtouch-avoid-assert.patch
  * soundtouch-round-buffer.patch -- fixes bsc#1108631 and bsc#1108632
- Renamed fix-buffer-overflow.patch to soundtouch-fix-buffer-overflow.patch</changelog>
</package>
<package pkgid="70999715c9155c94ffdc833519010c0bc43f9bc8db21185fc546075da89b1463" name="libX11" arch="src">
  <version epoch="0" ver="1.6.5" rel="lp150.2.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1335441600">- Drop xorg-x11-libX11.sh and xorg-x11-libX11.csh files: they were
  not used in the package, although they were intended to be
  installed in /etc/profile.d. However, /etc/profile and
  /etc/csh.login already contain this code (setting the XKEYSYMDB
  and XNLSPATH environment variables), so we don't need them.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1338379200">- Update to version 1.4.99.902</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1338811200">- Update finally to version 1.5</changelog>
  <changelog author="matz@suse.com" date="1362052800">- Fix typo in rpm metadata (%versino -&gt; %version)</changelog>
  <changelog author="jengelh@inai.de" date="1363694400">- Use more robust make install call</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1364212800">- Update to version 1.5.99.901 (1.6 RC1):
  + Remove upstreamed patches:
    bug153744.diff (patch1)
    p_new-locales.diff (patch4)
    p_khmer-locale.diff (patch8)
    Xcms.diff (patch17)
    compose-zh_CN.UTF-8.diff (patch18)
  + Changed patches:
    bug-239698_libx11.diff (patch10)
    bug-221326-xim-sync.patch (patch13)
    en-locales.diff (patch15)</changelog>
  <changelog author="mmeister@suse.com" date="1365681600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1369396800">- Update to version 1.5.99.902 (1.6 RC2):
  This release is brought to you by the letters C, V, &amp; E, and more numbers
  than I can count, with a special guest appearance by the letters J? and j?.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370347200">- Update to final version 1.6.0:
  Changes since libX11 1.5 (found in the release candidates) include fixes
  for the recently announced security issues CVE-2013-1981, CVE-2013-1997,
  and CVE-2013-2004; the addition of the _XEatDataWords API for use by
  Xlib-based extension libraries, to help them avoid integer overflows when
  it is necessary to discard data; removal of ancient, unused, incomplete
  support for the Cray Unicos OS, and the DECnet and TLI transport types;
  numerous improvements to compose files and locale data; man page macro
  cleanups to improve compatibility with doclifter; and various other
  code cleanups and compiler warning fixes.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1375185600">- Update to version 1.6.1:
  This release includes fixes to the code, docs &amp; build system.
  It makes both clang &amp; doclifter happier.  It includes patches
  upstreamed from Ubuntu, NetBSD, and Solaris.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378728000">- Update to version 1.6.2:
  This release of libX11 includes a number of fixes to handle realloc() failure
  better, resolves a number of compiler &amp; static analyzer warnings, fixes several
  bugs in the X Input Method framework, and cleans up the XKB code to be a little
  more maintainable.
- Drop upstreamed patches:
  + Patch10: bug-239698_libx11.diff
  + Patch13: bug-221326-xim-sync.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1395662400">- U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch
  * fix typo in en_US Compose file (s/dead_actute/dead_acute/)
    (bnc#869333)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "?"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "?"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "?"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "?"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
</package>
<package pkgid="dab47e6ead9e0a79d69858ac94d333fb02deca9115e5cdab716f602a12757bf3" name="libX11-6" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="lp150.2.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1335441600">- Drop xorg-x11-libX11.sh and xorg-x11-libX11.csh files: they were
  not used in the package, although they were intended to be
  installed in /etc/profile.d. However, /etc/profile and
  /etc/csh.login already contain this code (setting the XKEYSYMDB
  and XNLSPATH environment variables), so we don't need them.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1338379200">- Update to version 1.4.99.902</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1338811200">- Update finally to version 1.5</changelog>
  <changelog author="matz@suse.com" date="1362052800">- Fix typo in rpm metadata (%versino -&gt; %version)</changelog>
  <changelog author="jengelh@inai.de" date="1363694400">- Use more robust make install call</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1364212800">- Update to version 1.5.99.901 (1.6 RC1):
  + Remove upstreamed patches:
    bug153744.diff (patch1)
    p_new-locales.diff (patch4)
    p_khmer-locale.diff (patch8)
    Xcms.diff (patch17)
    compose-zh_CN.UTF-8.diff (patch18)
  + Changed patches:
    bug-239698_libx11.diff (patch10)
    bug-221326-xim-sync.patch (patch13)
    en-locales.diff (patch15)</changelog>
  <changelog author="mmeister@suse.com" date="1365681600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1369396800">- Update to version 1.5.99.902 (1.6 RC2):
  This release is brought to you by the letters C, V, &amp; E, and more numbers
  than I can count, with a special guest appearance by the letters J? and j?.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370347200">- Update to final version 1.6.0:
  Changes since libX11 1.5 (found in the release candidates) include fixes
  for the recently announced security issues CVE-2013-1981, CVE-2013-1997,
  and CVE-2013-2004; the addition of the _XEatDataWords API for use by
  Xlib-based extension libraries, to help them avoid integer overflows when
  it is necessary to discard data; removal of ancient, unused, incomplete
  support for the Cray Unicos OS, and the DECnet and TLI transport types;
  numerous improvements to compose files and locale data; man page macro
  cleanups to improve compatibility with doclifter; and various other
  code cleanups and compiler warning fixes.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1375185600">- Update to version 1.6.1:
  This release includes fixes to the code, docs &amp; build system.
  It makes both clang &amp; doclifter happier.  It includes patches
  upstreamed from Ubuntu, NetBSD, and Solaris.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378728000">- Update to version 1.6.2:
  This release of libX11 includes a number of fixes to handle realloc() failure
  better, resolves a number of compiler &amp; static analyzer warnings, fixes several
  bugs in the X Input Method framework, and cleans up the XKB code to be a little
  more maintainable.
- Drop upstreamed patches:
  + Patch10: bug-239698_libx11.diff
  + Patch13: bug-221326-xim-sync.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1395662400">- U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch
  * fix typo in en_US Compose file (s/dead_actute/dead_acute/)
    (bnc#869333)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "?"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "?"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "?"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "?"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
</package>
<package pkgid="741850a2390d5cdd0b2938e65499e40c3c911c34363ff5054d07f24e803e06dc" name="libX11-6-32bit" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="lp150.2.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1335441600">- Drop xorg-x11-libX11.sh and xorg-x11-libX11.csh files: they were
  not used in the package, although they were intended to be
  installed in /etc/profile.d. However, /etc/profile and
  /etc/csh.login already contain this code (setting the XKEYSYMDB
  and XNLSPATH environment variables), so we don't need them.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1338379200">- Update to version 1.4.99.902</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1338811200">- Update finally to version 1.5</changelog>
  <changelog author="matz@suse.com" date="1362052800">- Fix typo in rpm metadata (%versino -&gt; %version)</changelog>
  <changelog author="jengelh@inai.de" date="1363694400">- Use more robust make install call</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1364212800">- Update to version 1.5.99.901 (1.6 RC1):
  + Remove upstreamed patches:
    bug153744.diff (patch1)
    p_new-locales.diff (patch4)
    p_khmer-locale.diff (patch8)
    Xcms.diff (patch17)
    compose-zh_CN.UTF-8.diff (patch18)
  + Changed patches:
    bug-239698_libx11.diff (patch10)
    bug-221326-xim-sync.patch (patch13)
    en-locales.diff (patch15)</changelog>
  <changelog author="mmeister@suse.com" date="1365681600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1369396800">- Update to version 1.5.99.902 (1.6 RC2):
  This release is brought to you by the letters C, V, &amp; E, and more numbers
  than I can count, with a special guest appearance by the letters J? and j?.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370347200">- Update to final version 1.6.0:
  Changes since libX11 1.5 (found in the release candidates) include fixes
  for the recently announced security issues CVE-2013-1981, CVE-2013-1997,
  and CVE-2013-2004; the addition of the _XEatDataWords API for use by
  Xlib-based extension libraries, to help them avoid integer overflows when
  it is necessary to discard data; removal of ancient, unused, incomplete
  support for the Cray Unicos OS, and the DECnet and TLI transport types;
  numerous improvements to compose files and locale data; man page macro
  cleanups to improve compatibility with doclifter; and various other
  code cleanups and compiler warning fixes.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1375185600">- Update to version 1.6.1:
  This release includes fixes to the code, docs &amp; build system.
  It makes both clang &amp; doclifter happier.  It includes patches
  upstreamed from Ubuntu, NetBSD, and Solaris.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378728000">- Update to version 1.6.2:
  This release of libX11 includes a number of fixes to handle realloc() failure
  better, resolves a number of compiler &amp; static analyzer warnings, fixes several
  bugs in the X Input Method framework, and cleans up the XKB code to be a little
  more maintainable.
- Drop upstreamed patches:
  + Patch10: bug-239698_libx11.diff
  + Patch13: bug-221326-xim-sync.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1395662400">- U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch
  * fix typo in en_US Compose file (s/dead_actute/dead_acute/)
    (bnc#869333)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "?"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "?"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "?"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "?"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
</package>
<package pkgid="6b1530f9d7ef8fa959af30b774ee042b397a0e8d05598d4e9caa3740318a8979" name="libX11-data" arch="noarch">
  <version epoch="0" ver="1.6.5" rel="lp150.2.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1335441600">- Drop xorg-x11-libX11.sh and xorg-x11-libX11.csh files: they were
  not used in the package, although they were intended to be
  installed in /etc/profile.d. However, /etc/profile and
  /etc/csh.login already contain this code (setting the XKEYSYMDB
  and XNLSPATH environment variables), so we don't need them.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1338379200">- Update to version 1.4.99.902</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1338811200">- Update finally to version 1.5</changelog>
  <changelog author="matz@suse.com" date="1362052800">- Fix typo in rpm metadata (%versino -&gt; %version)</changelog>
  <changelog author="jengelh@inai.de" date="1363694400">- Use more robust make install call</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1364212800">- Update to version 1.5.99.901 (1.6 RC1):
  + Remove upstreamed patches:
    bug153744.diff (patch1)
    p_new-locales.diff (patch4)
    p_khmer-locale.diff (patch8)
    Xcms.diff (patch17)
    compose-zh_CN.UTF-8.diff (patch18)
  + Changed patches:
    bug-239698_libx11.diff (patch10)
    bug-221326-xim-sync.patch (patch13)
    en-locales.diff (patch15)</changelog>
  <changelog author="mmeister@suse.com" date="1365681600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1369396800">- Update to version 1.5.99.902 (1.6 RC2):
  This release is brought to you by the letters C, V, &amp; E, and more numbers
  than I can count, with a special guest appearance by the letters J? and j?.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370347200">- Update to final version 1.6.0:
  Changes since libX11 1.5 (found in the release candidates) include fixes
  for the recently announced security issues CVE-2013-1981, CVE-2013-1997,
  and CVE-2013-2004; the addition of the _XEatDataWords API for use by
  Xlib-based extension libraries, to help them avoid integer overflows when
  it is necessary to discard data; removal of ancient, unused, incomplete
  support for the Cray Unicos OS, and the DECnet and TLI transport types;
  numerous improvements to compose files and locale data; man page macro
  cleanups to improve compatibility with doclifter; and various other
  code cleanups and compiler warning fixes.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1375185600">- Update to version 1.6.1:
  This release includes fixes to the code, docs &amp; build system.
  It makes both clang &amp; doclifter happier.  It includes patches
  upstreamed from Ubuntu, NetBSD, and Solaris.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378728000">- Update to version 1.6.2:
  This release of libX11 includes a number of fixes to handle realloc() failure
  better, resolves a number of compiler &amp; static analyzer warnings, fixes several
  bugs in the X Input Method framework, and cleans up the XKB code to be a little
  more maintainable.
- Drop upstreamed patches:
  + Patch10: bug-239698_libx11.diff
  + Patch13: bug-221326-xim-sync.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1395662400">- U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch
  * fix typo in en_US Compose file (s/dead_actute/dead_acute/)
    (bnc#869333)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "?"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "?"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "?"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "?"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
</package>
<package pkgid="9a66634415658de6baeb9b964d38af8ff02304c72fc1b866a14e9bbf008d4906" name="libX11-devel" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="lp150.2.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1335441600">- Drop xorg-x11-libX11.sh and xorg-x11-libX11.csh files: they were
  not used in the package, although they were intended to be
  installed in /etc/profile.d. However, /etc/profile and
  /etc/csh.login already contain this code (setting the XKEYSYMDB
  and XNLSPATH environment variables), so we don't need them.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1338379200">- Update to version 1.4.99.902</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1338811200">- Update finally to version 1.5</changelog>
  <changelog author="matz@suse.com" date="1362052800">- Fix typo in rpm metadata (%versino -&gt; %version)</changelog>
  <changelog author="jengelh@inai.de" date="1363694400">- Use more robust make install call</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1364212800">- Update to version 1.5.99.901 (1.6 RC1):
  + Remove upstreamed patches:
    bug153744.diff (patch1)
    p_new-locales.diff (patch4)
    p_khmer-locale.diff (patch8)
    Xcms.diff (patch17)
    compose-zh_CN.UTF-8.diff (patch18)
  + Changed patches:
    bug-239698_libx11.diff (patch10)
    bug-221326-xim-sync.patch (patch13)
    en-locales.diff (patch15)</changelog>
  <changelog author="mmeister@suse.com" date="1365681600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1369396800">- Update to version 1.5.99.902 (1.6 RC2):
  This release is brought to you by the letters C, V, &amp; E, and more numbers
  than I can count, with a special guest appearance by the letters J? and j?.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370347200">- Update to final version 1.6.0:
  Changes since libX11 1.5 (found in the release candidates) include fixes
  for the recently announced security issues CVE-2013-1981, CVE-2013-1997,
  and CVE-2013-2004; the addition of the _XEatDataWords API for use by
  Xlib-based extension libraries, to help them avoid integer overflows when
  it is necessary to discard data; removal of ancient, unused, incomplete
  support for the Cray Unicos OS, and the DECnet and TLI transport types;
  numerous improvements to compose files and locale data; man page macro
  cleanups to improve compatibility with doclifter; and various other
  code cleanups and compiler warning fixes.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1375185600">- Update to version 1.6.1:
  This release includes fixes to the code, docs &amp; build system.
  It makes both clang &amp; doclifter happier.  It includes patches
  upstreamed from Ubuntu, NetBSD, and Solaris.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378728000">- Update to version 1.6.2:
  This release of libX11 includes a number of fixes to handle realloc() failure
  better, resolves a number of compiler &amp; static analyzer warnings, fixes several
  bugs in the X Input Method framework, and cleans up the XKB code to be a little
  more maintainable.
- Drop upstreamed patches:
  + Patch10: bug-239698_libx11.diff
  + Patch13: bug-221326-xim-sync.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1395662400">- U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch
  * fix typo in en_US Compose file (s/dead_actute/dead_acute/)
    (bnc#869333)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "?"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "?"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "?"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "?"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
</package>
<package pkgid="b18a4a374751f04aeca9299363ff039a91d21aab57b4dc30e391983efe712ee6" name="libX11-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="lp150.2.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1335441600">- Drop xorg-x11-libX11.sh and xorg-x11-libX11.csh files: they were
  not used in the package, although they were intended to be
  installed in /etc/profile.d. However, /etc/profile and
  /etc/csh.login already contain this code (setting the XKEYSYMDB
  and XNLSPATH environment variables), so we don't need them.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1338379200">- Update to version 1.4.99.902</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1338811200">- Update finally to version 1.5</changelog>
  <changelog author="matz@suse.com" date="1362052800">- Fix typo in rpm metadata (%versino -&gt; %version)</changelog>
  <changelog author="jengelh@inai.de" date="1363694400">- Use more robust make install call</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1364212800">- Update to version 1.5.99.901 (1.6 RC1):
  + Remove upstreamed patches:
    bug153744.diff (patch1)
    p_new-locales.diff (patch4)
    p_khmer-locale.diff (patch8)
    Xcms.diff (patch17)
    compose-zh_CN.UTF-8.diff (patch18)
  + Changed patches:
    bug-239698_libx11.diff (patch10)
    bug-221326-xim-sync.patch (patch13)
    en-locales.diff (patch15)</changelog>
  <changelog author="mmeister@suse.com" date="1365681600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1369396800">- Update to version 1.5.99.902 (1.6 RC2):
  This release is brought to you by the letters C, V, &amp; E, and more numbers
  than I can count, with a special guest appearance by the letters J? and j?.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370347200">- Update to final version 1.6.0:
  Changes since libX11 1.5 (found in the release candidates) include fixes
  for the recently announced security issues CVE-2013-1981, CVE-2013-1997,
  and CVE-2013-2004; the addition of the _XEatDataWords API for use by
  Xlib-based extension libraries, to help them avoid integer overflows when
  it is necessary to discard data; removal of ancient, unused, incomplete
  support for the Cray Unicos OS, and the DECnet and TLI transport types;
  numerous improvements to compose files and locale data; man page macro
  cleanups to improve compatibility with doclifter; and various other
  code cleanups and compiler warning fixes.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1375185600">- Update to version 1.6.1:
  This release includes fixes to the code, docs &amp; build system.
  It makes both clang &amp; doclifter happier.  It includes patches
  upstreamed from Ubuntu, NetBSD, and Solaris.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378728000">- Update to version 1.6.2:
  This release of libX11 includes a number of fixes to handle realloc() failure
  better, resolves a number of compiler &amp; static analyzer warnings, fixes several
  bugs in the X Input Method framework, and cleans up the XKB code to be a little
  more maintainable.
- Drop upstreamed patches:
  + Patch10: bug-239698_libx11.diff
  + Patch13: bug-221326-xim-sync.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1395662400">- U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch
  * fix typo in en_US Compose file (s/dead_actute/dead_acute/)
    (bnc#869333)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "?"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "?"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "?"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "?"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
</package>
<package pkgid="1724b38cc8feab15b2d6b1e8c6d1b080bf530fa0366c59cea9884b65cc666dc3" name="libX11-xcb1" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="lp150.2.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1335441600">- Drop xorg-x11-libX11.sh and xorg-x11-libX11.csh files: they were
  not used in the package, although they were intended to be
  installed in /etc/profile.d. However, /etc/profile and
  /etc/csh.login already contain this code (setting the XKEYSYMDB
  and XNLSPATH environment variables), so we don't need them.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1338379200">- Update to version 1.4.99.902</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1338811200">- Update finally to version 1.5</changelog>
  <changelog author="matz@suse.com" date="1362052800">- Fix typo in rpm metadata (%versino -&gt; %version)</changelog>
  <changelog author="jengelh@inai.de" date="1363694400">- Use more robust make install call</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1364212800">- Update to version 1.5.99.901 (1.6 RC1):
  + Remove upstreamed patches:
    bug153744.diff (patch1)
    p_new-locales.diff (patch4)
    p_khmer-locale.diff (patch8)
    Xcms.diff (patch17)
    compose-zh_CN.UTF-8.diff (patch18)
  + Changed patches:
    bug-239698_libx11.diff (patch10)
    bug-221326-xim-sync.patch (patch13)
    en-locales.diff (patch15)</changelog>
  <changelog author="mmeister@suse.com" date="1365681600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1369396800">- Update to version 1.5.99.902 (1.6 RC2):
  This release is brought to you by the letters C, V, &amp; E, and more numbers
  than I can count, with a special guest appearance by the letters J? and j?.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370347200">- Update to final version 1.6.0:
  Changes since libX11 1.5 (found in the release candidates) include fixes
  for the recently announced security issues CVE-2013-1981, CVE-2013-1997,
  and CVE-2013-2004; the addition of the _XEatDataWords API for use by
  Xlib-based extension libraries, to help them avoid integer overflows when
  it is necessary to discard data; removal of ancient, unused, incomplete
  support for the Cray Unicos OS, and the DECnet and TLI transport types;
  numerous improvements to compose files and locale data; man page macro
  cleanups to improve compatibility with doclifter; and various other
  code cleanups and compiler warning fixes.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1375185600">- Update to version 1.6.1:
  This release includes fixes to the code, docs &amp; build system.
  It makes both clang &amp; doclifter happier.  It includes patches
  upstreamed from Ubuntu, NetBSD, and Solaris.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378728000">- Update to version 1.6.2:
  This release of libX11 includes a number of fixes to handle realloc() failure
  better, resolves a number of compiler &amp; static analyzer warnings, fixes several
  bugs in the X Input Method framework, and cleans up the XKB code to be a little
  more maintainable.
- Drop upstreamed patches:
  + Patch10: bug-239698_libx11.diff
  + Patch13: bug-221326-xim-sync.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1395662400">- U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch
  * fix typo in en_US Compose file (s/dead_actute/dead_acute/)
    (bnc#869333)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "?"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "?"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "?"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "?"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
</package>
<package pkgid="0cd5facd86400c0fd5c77bb297d24084dc3319a41f95d523a0b36753e31801da" name="libX11-xcb1-32bit" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="lp150.2.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1335441600">- Drop xorg-x11-libX11.sh and xorg-x11-libX11.csh files: they were
  not used in the package, although they were intended to be
  installed in /etc/profile.d. However, /etc/profile and
  /etc/csh.login already contain this code (setting the XKEYSYMDB
  and XNLSPATH environment variables), so we don't need them.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1338379200">- Update to version 1.4.99.902</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1338811200">- Update finally to version 1.5</changelog>
  <changelog author="matz@suse.com" date="1362052800">- Fix typo in rpm metadata (%versino -&gt; %version)</changelog>
  <changelog author="jengelh@inai.de" date="1363694400">- Use more robust make install call</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1364212800">- Update to version 1.5.99.901 (1.6 RC1):
  + Remove upstreamed patches:
    bug153744.diff (patch1)
    p_new-locales.diff (patch4)
    p_khmer-locale.diff (patch8)
    Xcms.diff (patch17)
    compose-zh_CN.UTF-8.diff (patch18)
  + Changed patches:
    bug-239698_libx11.diff (patch10)
    bug-221326-xim-sync.patch (patch13)
    en-locales.diff (patch15)</changelog>
  <changelog author="mmeister@suse.com" date="1365681600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1369396800">- Update to version 1.5.99.902 (1.6 RC2):
  This release is brought to you by the letters C, V, &amp; E, and more numbers
  than I can count, with a special guest appearance by the letters J? and j?.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370347200">- Update to final version 1.6.0:
  Changes since libX11 1.5 (found in the release candidates) include fixes
  for the recently announced security issues CVE-2013-1981, CVE-2013-1997,
  and CVE-2013-2004; the addition of the _XEatDataWords API for use by
  Xlib-based extension libraries, to help them avoid integer overflows when
  it is necessary to discard data; removal of ancient, unused, incomplete
  support for the Cray Unicos OS, and the DECnet and TLI transport types;
  numerous improvements to compose files and locale data; man page macro
  cleanups to improve compatibility with doclifter; and various other
  code cleanups and compiler warning fixes.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1375185600">- Update to version 1.6.1:
  This release includes fixes to the code, docs &amp; build system.
  It makes both clang &amp; doclifter happier.  It includes patches
  upstreamed from Ubuntu, NetBSD, and Solaris.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378728000">- Update to version 1.6.2:
  This release of libX11 includes a number of fixes to handle realloc() failure
  better, resolves a number of compiler &amp; static analyzer warnings, fixes several
  bugs in the X Input Method framework, and cleans up the XKB code to be a little
  more maintainable.
- Drop upstreamed patches:
  + Patch10: bug-239698_libx11.diff
  + Patch13: bug-221326-xim-sync.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1395662400">- U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch
  * fix typo in en_US Compose file (s/dead_actute/dead_acute/)
    (bnc#869333)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "?"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "?"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "?"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "?"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
</package>
<package pkgid="4f44670427eddaccb4713c955603858ee5ec916aaad82b36efedbf037089c910" name="libXaw" arch="src">
  <version epoch="0" ver="1.0.13" rel="lp150.2.3.1"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="vuntz@opensuse.org" date="1334232000">- Update to version 1.0.10:
  + Fix potential infinte loop in XawBoxQueryGeometry()
  + Fixes for compiler warnings
  + General cleanups
  + Build configuration and documentation improvements
- Changes from version 1.0.9:
  + Fix build issues
  + Minor documentation cleanups
  + Build configuration improvements</changelog>
  <changelog author="zaitor@opensuse.org" date="1348056000">- Update to version 1.0.11:
  + Only call XawStackFree if XawStackAlloc was used for allocation
  + Correct order of arguments to XawStackFree()
  + Correct undefined behavior access to out of scope pointer
    contents</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add proper bit-type symbols for sparc64</changelog>
  <changelog author="zaitor@opensuse.org" date="1378987200">- Update to version 1.0.12:
  + Replace TXT16 with XChar2b inline.
  + Remove CRAY/WORD64 support.
  + Fix fd leak when write() fails in WriteToFile().
  + Fix fd leak when fdopen() fails in InitStringOrFile().
  + Include winsock header on WIN32 to provide fd_set etc.</changelog>
  <changelog author="sndirsch@suse.com" date="1430740800">- Update to version 1.0.13
  * Fix build with gcc -Werror=format-security
  * configure: Drop AM_MAINTAINER_MODE
  * autogen.sh: Honor NOCONFIGURE=1
  * Use autoconf HAVE_UNISTD_H instead of imake X_NOT_POSIX to find &lt;unistd.h&gt;
  * Just use C89 size_t instead of rolling our own Size_t
  * Use SEEK_* names instead of raw numbers for fseek whence argument
  * Makefile: use AM_V_GEN and AM_V_at to implement automake silent rules
  * Makefile: use $(LN_S) for better code portability
  * Include &lt;unistd.h&gt;
  * Fix abs() usage.</changelog>
  <changelog author="msrb@suse.com" date="1529582400">- U_NULL-pointer-dereference-in-XawAsciiSinkInitialize.patch
  * Fix crash when required font is not installed. (bsc#1098411)</changelog>
</package>
<package pkgid="23787001f60fd7542e18ccab9fcbdfe0ba27577ebe7d70dac0fb5d04ac4d5c79" name="libXaw-devel" arch="x86_64">
  <version epoch="0" ver="1.0.13" rel="lp150.2.3.1"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="vuntz@opensuse.org" date="1334232000">- Update to version 1.0.10:
  + Fix potential infinte loop in XawBoxQueryGeometry()
  + Fixes for compiler warnings
  + General cleanups
  + Build configuration and documentation improvements
- Changes from version 1.0.9:
  + Fix build issues
  + Minor documentation cleanups
  + Build configuration improvements</changelog>
  <changelog author="zaitor@opensuse.org" date="1348056000">- Update to version 1.0.11:
  + Only call XawStackFree if XawStackAlloc was used for allocation
  + Correct order of arguments to XawStackFree()
  + Correct undefined behavior access to out of scope pointer
    contents</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add proper bit-type symbols for sparc64</changelog>
  <changelog author="zaitor@opensuse.org" date="1378987200">- Update to version 1.0.12:
  + Replace TXT16 with XChar2b inline.
  + Remove CRAY/WORD64 support.
  + Fix fd leak when write() fails in WriteToFile().
  + Fix fd leak when fdopen() fails in InitStringOrFile().
  + Include winsock header on WIN32 to provide fd_set etc.</changelog>
  <changelog author="sndirsch@suse.com" date="1430740800">- Update to version 1.0.13
  * Fix build with gcc -Werror=format-security
  * configure: Drop AM_MAINTAINER_MODE
  * autogen.sh: Honor NOCONFIGURE=1
  * Use autoconf HAVE_UNISTD_H instead of imake X_NOT_POSIX to find &lt;unistd.h&gt;
  * Just use C89 size_t instead of rolling our own Size_t
  * Use SEEK_* names instead of raw numbers for fseek whence argument
  * Makefile: use AM_V_GEN and AM_V_at to implement automake silent rules
  * Makefile: use $(LN_S) for better code portability
  * Include &lt;unistd.h&gt;
  * Fix abs() usage.</changelog>
  <changelog author="msrb@suse.com" date="1529582400">- U_NULL-pointer-dereference-in-XawAsciiSinkInitialize.patch
  * Fix crash when required font is not installed. (bsc#1098411)</changelog>
</package>
<package pkgid="e069ee78c7c950ad4b737017fb5b04342a32533e5d5dd107abbc5527037d13c4" name="libXaw-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.13" rel="lp150.2.3.1"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="vuntz@opensuse.org" date="1334232000">- Update to version 1.0.10:
  + Fix potential infinte loop in XawBoxQueryGeometry()
  + Fixes for compiler warnings
  + General cleanups
  + Build configuration and documentation improvements
- Changes from version 1.0.9:
  + Fix build issues
  + Minor documentation cleanups
  + Build configuration improvements</changelog>
  <changelog author="zaitor@opensuse.org" date="1348056000">- Update to version 1.0.11:
  + Only call XawStackFree if XawStackAlloc was used for allocation
  + Correct order of arguments to XawStackFree()
  + Correct undefined behavior access to out of scope pointer
    contents</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add proper bit-type symbols for sparc64</changelog>
  <changelog author="zaitor@opensuse.org" date="1378987200">- Update to version 1.0.12:
  + Replace TXT16 with XChar2b inline.
  + Remove CRAY/WORD64 support.
  + Fix fd leak when write() fails in WriteToFile().
  + Fix fd leak when fdopen() fails in InitStringOrFile().
  + Include winsock header on WIN32 to provide fd_set etc.</changelog>
  <changelog author="sndirsch@suse.com" date="1430740800">- Update to version 1.0.13
  * Fix build with gcc -Werror=format-security
  * configure: Drop AM_MAINTAINER_MODE
  * autogen.sh: Honor NOCONFIGURE=1
  * Use autoconf HAVE_UNISTD_H instead of imake X_NOT_POSIX to find &lt;unistd.h&gt;
  * Just use C89 size_t instead of rolling our own Size_t
  * Use SEEK_* names instead of raw numbers for fseek whence argument
  * Makefile: use AM_V_GEN and AM_V_at to implement automake silent rules
  * Makefile: use $(LN_S) for better code portability
  * Include &lt;unistd.h&gt;
  * Fix abs() usage.</changelog>
  <changelog author="msrb@suse.com" date="1529582400">- U_NULL-pointer-dereference-in-XawAsciiSinkInitialize.patch
  * Fix crash when required font is not installed. (bsc#1098411)</changelog>
</package>
<package pkgid="b9a0a941bca01b8192a7344948a375bb6f7763565f890ae4f4b4e13c4eb60392" name="libXaw6" arch="x86_64">
  <version epoch="0" ver="1.0.13" rel="lp150.2.3.1"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="vuntz@opensuse.org" date="1334232000">- Update to version 1.0.10:
  + Fix potential infinte loop in XawBoxQueryGeometry()
  + Fixes for compiler warnings
  + General cleanups
  + Build configuration and documentation improvements
- Changes from version 1.0.9:
  + Fix build issues
  + Minor documentation cleanups
  + Build configuration improvements</changelog>
  <changelog author="zaitor@opensuse.org" date="1348056000">- Update to version 1.0.11:
  + Only call XawStackFree if XawStackAlloc was used for allocation
  + Correct order of arguments to XawStackFree()
  + Correct undefined behavior access to out of scope pointer
    contents</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add proper bit-type symbols for sparc64</changelog>
  <changelog author="zaitor@opensuse.org" date="1378987200">- Update to version 1.0.12:
  + Replace TXT16 with XChar2b inline.
  + Remove CRAY/WORD64 support.
  + Fix fd leak when write() fails in WriteToFile().
  + Fix fd leak when fdopen() fails in InitStringOrFile().
  + Include winsock header on WIN32 to provide fd_set etc.</changelog>
  <changelog author="sndirsch@suse.com" date="1430740800">- Update to version 1.0.13
  * Fix build with gcc -Werror=format-security
  * configure: Drop AM_MAINTAINER_MODE
  * autogen.sh: Honor NOCONFIGURE=1
  * Use autoconf HAVE_UNISTD_H instead of imake X_NOT_POSIX to find &lt;unistd.h&gt;
  * Just use C89 size_t instead of rolling our own Size_t
  * Use SEEK_* names instead of raw numbers for fseek whence argument
  * Makefile: use AM_V_GEN and AM_V_at to implement automake silent rules
  * Makefile: use $(LN_S) for better code portability
  * Include &lt;unistd.h&gt;
  * Fix abs() usage.</changelog>
  <changelog author="msrb@suse.com" date="1529582400">- U_NULL-pointer-dereference-in-XawAsciiSinkInitialize.patch
  * Fix crash when required font is not installed. (bsc#1098411)</changelog>
</package>
<package pkgid="20f6f83ed4fa635dab1d27b86408d750f65d3a224525906d42328e4b79a3c11c" name="libXaw6-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.13" rel="lp150.2.3.1"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="vuntz@opensuse.org" date="1334232000">- Update to version 1.0.10:
  + Fix potential infinte loop in XawBoxQueryGeometry()
  + Fixes for compiler warnings
  + General cleanups
  + Build configuration and documentation improvements
- Changes from version 1.0.9:
  + Fix build issues
  + Minor documentation cleanups
  + Build configuration improvements</changelog>
  <changelog author="zaitor@opensuse.org" date="1348056000">- Update to version 1.0.11:
  + Only call XawStackFree if XawStackAlloc was used for allocation
  + Correct order of arguments to XawStackFree()
  + Correct undefined behavior access to out of scope pointer
    contents</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add proper bit-type symbols for sparc64</changelog>
  <changelog author="zaitor@opensuse.org" date="1378987200">- Update to version 1.0.12:
  + Replace TXT16 with XChar2b inline.
  + Remove CRAY/WORD64 support.
  + Fix fd leak when write() fails in WriteToFile().
  + Fix fd leak when fdopen() fails in InitStringOrFile().
  + Include winsock header on WIN32 to provide fd_set etc.</changelog>
  <changelog author="sndirsch@suse.com" date="1430740800">- Update to version 1.0.13
  * Fix build with gcc -Werror=format-security
  * configure: Drop AM_MAINTAINER_MODE
  * autogen.sh: Honor NOCONFIGURE=1
  * Use autoconf HAVE_UNISTD_H instead of imake X_NOT_POSIX to find &lt;unistd.h&gt;
  * Just use C89 size_t instead of rolling our own Size_t
  * Use SEEK_* names instead of raw numbers for fseek whence argument
  * Makefile: use AM_V_GEN and AM_V_at to implement automake silent rules
  * Makefile: use $(LN_S) for better code portability
  * Include &lt;unistd.h&gt;
  * Fix abs() usage.</changelog>
  <changelog author="msrb@suse.com" date="1529582400">- U_NULL-pointer-dereference-in-XawAsciiSinkInitialize.patch
  * Fix crash when required font is not installed. (bsc#1098411)</changelog>
</package>
<package pkgid="56b538b1e1b470e06c39dea3183ff0b1c7b4518bba944e50fe8aa49d5f8df280" name="libXaw7" arch="x86_64">
  <version epoch="0" ver="1.0.13" rel="lp150.2.3.1"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="vuntz@opensuse.org" date="1334232000">- Update to version 1.0.10:
  + Fix potential infinte loop in XawBoxQueryGeometry()
  + Fixes for compiler warnings
  + General cleanups
  + Build configuration and documentation improvements
- Changes from version 1.0.9:
  + Fix build issues
  + Minor documentation cleanups
  + Build configuration improvements</changelog>
  <changelog author="zaitor@opensuse.org" date="1348056000">- Update to version 1.0.11:
  + Only call XawStackFree if XawStackAlloc was used for allocation
  + Correct order of arguments to XawStackFree()
  + Correct undefined behavior access to out of scope pointer
    contents</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add proper bit-type symbols for sparc64</changelog>
  <changelog author="zaitor@opensuse.org" date="1378987200">- Update to version 1.0.12:
  + Replace TXT16 with XChar2b inline.
  + Remove CRAY/WORD64 support.
  + Fix fd leak when write() fails in WriteToFile().
  + Fix fd leak when fdopen() fails in InitStringOrFile().
  + Include winsock header on WIN32 to provide fd_set etc.</changelog>
  <changelog author="sndirsch@suse.com" date="1430740800">- Update to version 1.0.13
  * Fix build with gcc -Werror=format-security
  * configure: Drop AM_MAINTAINER_MODE
  * autogen.sh: Honor NOCONFIGURE=1
  * Use autoconf HAVE_UNISTD_H instead of imake X_NOT_POSIX to find &lt;unistd.h&gt;
  * Just use C89 size_t instead of rolling our own Size_t
  * Use SEEK_* names instead of raw numbers for fseek whence argument
  * Makefile: use AM_V_GEN and AM_V_at to implement automake silent rules
  * Makefile: use $(LN_S) for better code portability
  * Include &lt;unistd.h&gt;
  * Fix abs() usage.</changelog>
  <changelog author="msrb@suse.com" date="1529582400">- U_NULL-pointer-dereference-in-XawAsciiSinkInitialize.patch
  * Fix crash when required font is not installed. (bsc#1098411)</changelog>
</package>
<package pkgid="4304e916bf548801113dab24fab0c2a858bcc6f6517362933955cf14306384e0" name="libXaw7-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.13" rel="lp150.2.3.1"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="vuntz@opensuse.org" date="1334232000">- Update to version 1.0.10:
  + Fix potential infinte loop in XawBoxQueryGeometry()
  + Fixes for compiler warnings
  + General cleanups
  + Build configuration and documentation improvements
- Changes from version 1.0.9:
  + Fix build issues
  + Minor documentation cleanups
  + Build configuration improvements</changelog>
  <changelog author="zaitor@opensuse.org" date="1348056000">- Update to version 1.0.11:
  + Only call XawStackFree if XawStackAlloc was used for allocation
  + Correct order of arguments to XawStackFree()
  + Correct undefined behavior access to out of scope pointer
    contents</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add proper bit-type symbols for sparc64</changelog>
  <changelog author="zaitor@opensuse.org" date="1378987200">- Update to version 1.0.12:
  + Replace TXT16 with XChar2b inline.
  + Remove CRAY/WORD64 support.
  + Fix fd leak when write() fails in WriteToFile().
  + Fix fd leak when fdopen() fails in InitStringOrFile().
  + Include winsock header on WIN32 to provide fd_set etc.</changelog>
  <changelog author="sndirsch@suse.com" date="1430740800">- Update to version 1.0.13
  * Fix build with gcc -Werror=format-security
  * configure: Drop AM_MAINTAINER_MODE
  * autogen.sh: Honor NOCONFIGURE=1
  * Use autoconf HAVE_UNISTD_H instead of imake X_NOT_POSIX to find &lt;unistd.h&gt;
  * Just use C89 size_t instead of rolling our own Size_t
  * Use SEEK_* names instead of raw numbers for fseek whence argument
  * Makefile: use AM_V_GEN and AM_V_at to implement automake silent rules
  * Makefile: use $(LN_S) for better code portability
  * Include &lt;unistd.h&gt;
  * Fix abs() usage.</changelog>
  <changelog author="msrb@suse.com" date="1529582400">- U_NULL-pointer-dereference-in-XawAsciiSinkInitialize.patch
  * Fix crash when required font is not installed. (bsc#1098411)</changelog>
</package>
<package pkgid="08065f25e072bd687263b1b87df5bdca652f00f55b8beb252b2e724acc0e1ab1" name="libXaw8" arch="x86_64">
  <version epoch="0" ver="1.0.13" rel="lp150.2.3.1"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="vuntz@opensuse.org" date="1334232000">- Update to version 1.0.10:
  + Fix potential infinte loop in XawBoxQueryGeometry()
  + Fixes for compiler warnings
  + General cleanups
  + Build configuration and documentation improvements
- Changes from version 1.0.9:
  + Fix build issues
  + Minor documentation cleanups
  + Build configuration improvements</changelog>
  <changelog author="zaitor@opensuse.org" date="1348056000">- Update to version 1.0.11:
  + Only call XawStackFree if XawStackAlloc was used for allocation
  + Correct order of arguments to XawStackFree()
  + Correct undefined behavior access to out of scope pointer
    contents</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add proper bit-type symbols for sparc64</changelog>
  <changelog author="zaitor@opensuse.org" date="1378987200">- Update to version 1.0.12:
  + Replace TXT16 with XChar2b inline.
  + Remove CRAY/WORD64 support.
  + Fix fd leak when write() fails in WriteToFile().
  + Fix fd leak when fdopen() fails in InitStringOrFile().
  + Include winsock header on WIN32 to provide fd_set etc.</changelog>
  <changelog author="sndirsch@suse.com" date="1430740800">- Update to version 1.0.13
  * Fix build with gcc -Werror=format-security
  * configure: Drop AM_MAINTAINER_MODE
  * autogen.sh: Honor NOCONFIGURE=1
  * Use autoconf HAVE_UNISTD_H instead of imake X_NOT_POSIX to find &lt;unistd.h&gt;
  * Just use C89 size_t instead of rolling our own Size_t
  * Use SEEK_* names instead of raw numbers for fseek whence argument
  * Makefile: use AM_V_GEN and AM_V_at to implement automake silent rules
  * Makefile: use $(LN_S) for better code portability
  * Include &lt;unistd.h&gt;
  * Fix abs() usage.</changelog>
  <changelog author="msrb@suse.com" date="1529582400">- U_NULL-pointer-dereference-in-XawAsciiSinkInitialize.patch
  * Fix crash when required font is not installed. (bsc#1098411)</changelog>
</package>
<package pkgid="ada46166cc9389dfbe08c2b7de029ffb37d54c340bfac930aad26c8f1fc68b14" name="libXaw8-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.13" rel="lp150.2.3.1"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="vuntz@opensuse.org" date="1334232000">- Update to version 1.0.10:
  + Fix potential infinte loop in XawBoxQueryGeometry()
  + Fixes for compiler warnings
  + General cleanups
  + Build configuration and documentation improvements
- Changes from version 1.0.9:
  + Fix build issues
  + Minor documentation cleanups
  + Build configuration improvements</changelog>
  <changelog author="zaitor@opensuse.org" date="1348056000">- Update to version 1.0.11:
  + Only call XawStackFree if XawStackAlloc was used for allocation
  + Correct order of arguments to XawStackFree()
  + Correct undefined behavior access to out of scope pointer
    contents</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add proper bit-type symbols for sparc64</changelog>
  <changelog author="zaitor@opensuse.org" date="1378987200">- Update to version 1.0.12:
  + Replace TXT16 with XChar2b inline.
  + Remove CRAY/WORD64 support.
  + Fix fd leak when write() fails in WriteToFile().
  + Fix fd leak when fdopen() fails in InitStringOrFile().
  + Include winsock header on WIN32 to provide fd_set etc.</changelog>
  <changelog author="sndirsch@suse.com" date="1430740800">- Update to version 1.0.13
  * Fix build with gcc -Werror=format-security
  * configure: Drop AM_MAINTAINER_MODE
  * autogen.sh: Honor NOCONFIGURE=1
  * Use autoconf HAVE_UNISTD_H instead of imake X_NOT_POSIX to find &lt;unistd.h&gt;
  * Just use C89 size_t instead of rolling our own Size_t
  * Use SEEK_* names instead of raw numbers for fseek whence argument
  * Makefile: use AM_V_GEN and AM_V_at to implement automake silent rules
  * Makefile: use $(LN_S) for better code portability
  * Include &lt;unistd.h&gt;
  * Fix abs() usage.</changelog>
  <changelog author="msrb@suse.com" date="1529582400">- U_NULL-pointer-dereference-in-XawAsciiSinkInitialize.patch
  * Fix crash when required font is not installed. (bsc#1098411)</changelog>
</package>
<package pkgid="96e462d414ecb8c41f74399724d71d1ee2e5a02a14c13d93cb83a761b6e8b3e2" name="libXvMC_nouveau" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="27915298cd8ce26076c0b03a39e0572e8e9b05faabccd3629f0fe9d656df24a1" name="libXvMC_nouveau-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="6ed61547e97f03851703c7930ce14c5756686f59a9cdb7644d858bad68074da6" name="libXvMC_r600" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="9d8fae61b5be5c901cceb6b663937c8ff83c3d57fdd5d496aabad9bdc1c0291f" name="libXvMC_r600-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="a9e5cc935bc3d8ee3d09feb0143bf1d8286248f428a8e59065cdeba7c24b7480" name="libXvnc-devel" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="lp150.10.3.1"/>
  <changelog author="msrb@suse.com" date="1491825600">- U_tigervnc-better-check-for-screen-visibility.patch
  * Crop operations to visible screen. (bnc#1032272)</changelog>
  <changelog author="msrb@suse.com" date="1496232000">- Update to tigervnc 1.8.0
  * Overhaul of the Java client to match the look and behaviour of the native client
  * Initial work for multi-threaded decoding in the Java client
  * vncconfig no longer needed for clipboard with Xvnc/libvnc.so
  * vncserver has system wide config support
  * Full support for alpha cursors in Xvnc/libvnc.so and both viewers
- Removed patches:
  * U_Add-xorg-xserver-1.19-support.patch
  * U_tigervnc-fix-inetd-not-working-with-xserver-1-19.patch
  * U_tigervnc-better-check-for-screen-visibility.patch</changelog>
  <changelog author="meissner@suse.com" date="1496404800">- removed unneeded -fPIC flags for CFLAGS, these made it avoid
  PIE support.</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-deve &gt;= 1.6.0 to avoid bootstrap fail</changelog>
  <changelog author="msrb@suse.com" date="1499428800">- Change with-vnc-key.sh to generate TLS certificate using current
  hostname. (bnc#1041847)</changelog>
  <changelog author="msrb@suse.com" date="1500552000">- U_allow_multiple_certs_with_same_dn_in_saved_certs_file.patch,
  U_handle_certificate_verification_for_saved_certs_correctly.patch
  * Fix certificate handling in the java client. (bnc#1041847)
- Refresh u_tigervnc-add-autoaccept-parameter.patch and apply it
  last.
- Make sure CN in generated certificate doesn't exceed 64
  characters. (bnc#1041847)</changelog>
  <changelog author="msrb@suse.com" date="1502452800">- Disable MIT-SHM extension when running under vnc user.
  (bnc#1053373)</changelog>
  <changelog author="fstrba@suse.com" date="1505131200">- Specify java source and target level 1.6 in order to be able to
  build with jdk9</changelog>
  <changelog author="msrb@suse.com" date="1506340800">- Add tigervnc-x11vnc wrapper for x0vncserver that replaces x11vnc.
  (fate#323207)
- Replace java applet with novnc as web-based VNC viewer.
  (fate#323880)
- Convert xinetd services to systemd socket activated services.
  (bnc#1058460)</changelog>
  <changelog author="msrb@suse.com" date="1506427200">- u_Unset-pixel-buffer-when-x0vncserver-client-disconnect.patch
  * Fixes crash in x0vncserver after client disconnects.
    (bnc#1058587)</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig's gl, egl and gbm instead of Mesa-devel.
  * Those dependencies are what the underlying X server really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * tigervnc-1.8.0-nowindows.patch
    + Remove Windows code that is removed from jdk10</changelog>
  <changelog author="dimstar@opensuse.org" date="1513598401">- Do not mess with /usr/lib*64)?/debug: this is RPM's playground
  for debuginfo packages.</changelog>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
</package>
<package pkgid="14f5d602235b22378e59639dd88460504657e4bd76cfd095ea264e45a41646f5" name="libXvnc-devel" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="lp150.10.6.1"/>
  <changelog author="msrb@suse.com" date="1496232000">- Update to tigervnc 1.8.0
  * Overhaul of the Java client to match the look and behaviour of the native client
  * Initial work for multi-threaded decoding in the Java client
  * vncconfig no longer needed for clipboard with Xvnc/libvnc.so
  * vncserver has system wide config support
  * Full support for alpha cursors in Xvnc/libvnc.so and both viewers
- Removed patches:
  * U_Add-xorg-xserver-1.19-support.patch
  * U_tigervnc-fix-inetd-not-working-with-xserver-1-19.patch
  * U_tigervnc-better-check-for-screen-visibility.patch</changelog>
  <changelog author="meissner@suse.com" date="1496404800">- removed unneeded -fPIC flags for CFLAGS, these made it avoid
  PIE support.</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-deve &gt;= 1.6.0 to avoid bootstrap fail</changelog>
  <changelog author="msrb@suse.com" date="1499428800">- Change with-vnc-key.sh to generate TLS certificate using current
  hostname. (bnc#1041847)</changelog>
  <changelog author="msrb@suse.com" date="1500552000">- U_allow_multiple_certs_with_same_dn_in_saved_certs_file.patch,
  U_handle_certificate_verification_for_saved_certs_correctly.patch
  * Fix certificate handling in the java client. (bnc#1041847)
- Refresh u_tigervnc-add-autoaccept-parameter.patch and apply it
  last.
- Make sure CN in generated certificate doesn't exceed 64
  characters. (bnc#1041847)</changelog>
  <changelog author="msrb@suse.com" date="1502452800">- Disable MIT-SHM extension when running under vnc user.
  (bnc#1053373)</changelog>
  <changelog author="fstrba@suse.com" date="1505131200">- Specify java source and target level 1.6 in order to be able to
  build with jdk9</changelog>
  <changelog author="msrb@suse.com" date="1506340800">- Add tigervnc-x11vnc wrapper for x0vncserver that replaces x11vnc.
  (fate#323207)
- Replace java applet with novnc as web-based VNC viewer.
  (fate#323880)
- Convert xinetd services to systemd socket activated services.
  (bnc#1058460)</changelog>
  <changelog author="msrb@suse.com" date="1506427200">- u_Unset-pixel-buffer-when-x0vncserver-client-disconnect.patch
  * Fixes crash in x0vncserver after client disconnects.
    (bnc#1058587)</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig's gl, egl and gbm instead of Mesa-devel.
  * Those dependencies are what the underlying X server really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * tigervnc-1.8.0-nowindows.patch
    + Remove Windows code that is removed from jdk10</changelog>
  <changelog author="dimstar@opensuse.org" date="1513598401">- Do not mess with /usr/lib*64)?/debug: this is RPM's playground
  for debuginfo packages.</changelog>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
</package>
<package pkgid="80ecf1dc4d6e0ee00c408bfd8dc5bb9b8e1c1870c398d4b8a7ac8a444f493750" name="libXvnc1" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="lp150.10.3.1"/>
  <changelog author="msrb@suse.com" date="1491825600">- U_tigervnc-better-check-for-screen-visibility.patch
  * Crop operations to visible screen. (bnc#1032272)</changelog>
  <changelog author="msrb@suse.com" date="1496232000">- Update to tigervnc 1.8.0
  * Overhaul of the Java client to match the look and behaviour of the native client
  * Initial work for multi-threaded decoding in the Java client
  * vncconfig no longer needed for clipboard with Xvnc/libvnc.so
  * vncserver has system wide config support
  * Full support for alpha cursors in Xvnc/libvnc.so and both viewers
- Removed patches:
  * U_Add-xorg-xserver-1.19-support.patch
  * U_tigervnc-fix-inetd-not-working-with-xserver-1-19.patch
  * U_tigervnc-better-check-for-screen-visibility.patch</changelog>
  <changelog author="meissner@suse.com" date="1496404800">- removed unneeded -fPIC flags for CFLAGS, these made it avoid
  PIE support.</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-deve &gt;= 1.6.0 to avoid bootstrap fail</changelog>
  <changelog author="msrb@suse.com" date="1499428800">- Change with-vnc-key.sh to generate TLS certificate using current
  hostname. (bnc#1041847)</changelog>
  <changelog author="msrb@suse.com" date="1500552000">- U_allow_multiple_certs_with_same_dn_in_saved_certs_file.patch,
  U_handle_certificate_verification_for_saved_certs_correctly.patch
  * Fix certificate handling in the java client. (bnc#1041847)
- Refresh u_tigervnc-add-autoaccept-parameter.patch and apply it
  last.
- Make sure CN in generated certificate doesn't exceed 64
  characters. (bnc#1041847)</changelog>
  <changelog author="msrb@suse.com" date="1502452800">- Disable MIT-SHM extension when running under vnc user.
  (bnc#1053373)</changelog>
  <changelog author="fstrba@suse.com" date="1505131200">- Specify java source and target level 1.6 in order to be able to
  build with jdk9</changelog>
  <changelog author="msrb@suse.com" date="1506340800">- Add tigervnc-x11vnc wrapper for x0vncserver that replaces x11vnc.
  (fate#323207)
- Replace java applet with novnc as web-based VNC viewer.
  (fate#323880)
- Convert xinetd services to systemd socket activated services.
  (bnc#1058460)</changelog>
  <changelog author="msrb@suse.com" date="1506427200">- u_Unset-pixel-buffer-when-x0vncserver-client-disconnect.patch
  * Fixes crash in x0vncserver after client disconnects.
    (bnc#1058587)</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig's gl, egl and gbm instead of Mesa-devel.
  * Those dependencies are what the underlying X server really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * tigervnc-1.8.0-nowindows.patch
    + Remove Windows code that is removed from jdk10</changelog>
  <changelog author="dimstar@opensuse.org" date="1513598401">- Do not mess with /usr/lib*64)?/debug: this is RPM's playground
  for debuginfo packages.</changelog>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
</package>
<package pkgid="cabcd30314e6aecaf7d98968abbede5d320e9f81553d82e6e22776da74118ab4" name="libXvnc1" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="lp150.10.6.1"/>
  <changelog author="msrb@suse.com" date="1496232000">- Update to tigervnc 1.8.0
  * Overhaul of the Java client to match the look and behaviour of the native client
  * Initial work for multi-threaded decoding in the Java client
  * vncconfig no longer needed for clipboard with Xvnc/libvnc.so
  * vncserver has system wide config support
  * Full support for alpha cursors in Xvnc/libvnc.so and both viewers
- Removed patches:
  * U_Add-xorg-xserver-1.19-support.patch
  * U_tigervnc-fix-inetd-not-working-with-xserver-1-19.patch
  * U_tigervnc-better-check-for-screen-visibility.patch</changelog>
  <changelog author="meissner@suse.com" date="1496404800">- removed unneeded -fPIC flags for CFLAGS, these made it avoid
  PIE support.</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-deve &gt;= 1.6.0 to avoid bootstrap fail</changelog>
  <changelog author="msrb@suse.com" date="1499428800">- Change with-vnc-key.sh to generate TLS certificate using current
  hostname. (bnc#1041847)</changelog>
  <changelog author="msrb@suse.com" date="1500552000">- U_allow_multiple_certs_with_same_dn_in_saved_certs_file.patch,
  U_handle_certificate_verification_for_saved_certs_correctly.patch
  * Fix certificate handling in the java client. (bnc#1041847)
- Refresh u_tigervnc-add-autoaccept-parameter.patch and apply it
  last.
- Make sure CN in generated certificate doesn't exceed 64
  characters. (bnc#1041847)</changelog>
  <changelog author="msrb@suse.com" date="1502452800">- Disable MIT-SHM extension when running under vnc user.
  (bnc#1053373)</changelog>
  <changelog author="fstrba@suse.com" date="1505131200">- Specify java source and target level 1.6 in order to be able to
  build with jdk9</changelog>
  <changelog author="msrb@suse.com" date="1506340800">- Add tigervnc-x11vnc wrapper for x0vncserver that replaces x11vnc.
  (fate#323207)
- Replace java applet with novnc as web-based VNC viewer.
  (fate#323880)
- Convert xinetd services to systemd socket activated services.
  (bnc#1058460)</changelog>
  <changelog author="msrb@suse.com" date="1506427200">- u_Unset-pixel-buffer-when-x0vncserver-client-disconnect.patch
  * Fixes crash in x0vncserver after client disconnects.
    (bnc#1058587)</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig's gl, egl and gbm instead of Mesa-devel.
  * Those dependencies are what the underlying X server really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * tigervnc-1.8.0-nowindows.patch
    + Remove Windows code that is removed from jdk10</changelog>
  <changelog author="dimstar@opensuse.org" date="1513598401">- Do not mess with /usr/lib*64)?/debug: this is RPM's playground
  for debuginfo packages.</changelog>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
</package>
<package pkgid="06234c6c2f699c0272844ba0abec64b96115691826633fccebde8cf575ed6ee1" name="libaccountsservice0" arch="x86_64">
  <version epoch="0" ver="0.6.45" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1412510400">- Pass --enable-user-heuristics to configure to ensure that legacy
  users are still shown in GDM facebrowser.</changelog>
  <changelog author="zaitor@opensuse.org" date="1413720000">- Update to version 0.6.39:
  + Fix ListCachedUsers race at startup.
  + Add new api for uncaching user.
  + Fix memory corruption bug.
  + Build goo changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422360000">- Update to version 0.6.40:
  + Support large UIDs better.
  + Don't require X11 display to fetch user with X11 session.
  + Ensure accountsservice doesn't start before NSS works.</changelog>
  <changelog author="dliang@suse.com" date="1433419200">- Add accountsservice-933083-load-root-setting.patch (bnc#933083)
  Load settings of an account which is not 'human' but can still be
  able to login to the system. (like 'root')</changelog>
  <changelog author="michael@stroeder.com" date="1452513600">- Updated Url.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Rebased accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add as-fate318433-prevent-same-account-multi-logins.patch
  (fate#318433):
  Prevent multiple simultaneous logins.</changelog>
  <changelog author="zaitor@opensuse.org" date="1465992000">- Update to version 0.6.42:
  + Wtmp fixes on solaris.
  + Allow a user to change his own data even if he's remote.
  + Add way to set password hint independent of password.
  + Conform to modern systemd library naming scheme.
  + Disable GVFS support in service, since it's not needed and has
    bad side effects.
- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires following upstream changes.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-daemon). Nowadays
  pkgconfig(libsystemd) is enough and replaces all libsystemd-*
  libs which are obsolete.</changelog>
  <changelog author="fezhang@suse.com" date="1472040000">- Enable as-fate318433-prevent-same-account-multi-logins.patch for
  Leap as requested by the Leap Release Manager (boo#994876).</changelog>
  <changelog author="fezhang@suse.com" date="1473595200">- Update accountsservice-sysconfig.patch:
  Flush the buffer before shut down the GIOChannel, otherwise we
  get a truncated setting file. The problem has caused the
  switching autologin in gnome-control-center breaking
  /etc/sysconfig/displaymanager (bsc#998107).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Update to version 0.6.43:
  + Fix logout times in login-history.
  + Increase performance in large deployments.
  + Memory leak fix.
  + Exclude nologin users from user list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480507200">- Rebase accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493121600">- Update to version 0.6.45:
  + Wrap password expiration info in libaccountsservice api.
- Changes from version 0.6.44:
  + Export password expiration info from shadow file.
  + Fix user classification logic.
  + Don't lose track of users when /etc/passwd is reloaded.
- Drop accountsservice-933083-load-root-setting.patch:
  fixed upstream (177509 edac45).</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Remove redundant %clean section; use %_smp_mflags for build.</changelog>
  <changelog author="yfjiang@suse.com" date="1502366400">- Update specfile to build
  as-fate318433-prevent-same-account-multi-logins.patch on SLE15.</changelog>
  <changelog author="qzheng@suse.com" date="1513944000">- Add remove-no-longer-used-system-accounts.patch:
  Drop operator, nobody4 and noaccess from the blacklist
  (bsc#1063794, fdo#103879).</changelog>
  <changelog author="fezhang@suse.com" date="1528891200">- Add accountsservice-missing-users-on-gdm-login.patch: Don't abort
  loading users when an /etc/shadow entry found missing
  (boo#1090003 fdo#106904).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Add accountsservice-lib-treat-session-type-wayland-as-graphical-session.patch:
  When user session type is wayland, act_user_is_logged_in can
  return TRUE if the user is logged in (boo#1095918 fdo#106855).</changelog>
  <changelog author="qzheng@suse.com" date="1537876800">- Add CVE-2018-14036.patch to canonicalize the input path for the
  prefix comparison (CVE-2018-14036, bsc#1099699).</changelog>
</package>
<package pkgid="60c8cb49a637d1826b73f5fb12f6955e1f938c1a9af324a230801104e5142310" name="libapparmor" arch="src">
  <version epoch="0" ver="2.12" rel="lp150.6.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485604800">- split libapparmor into separate spec to get rid of build loop
  involving mariadb, systemd, apparmor, libapr and mariadb again
  (see the discussion in SR 448871 for details)
- libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but
  with minimum BuildRequires</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - mostly test-related changes in libapparmor
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1509451200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - no changes in libapparmor
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - preserve errno across aa_*_unref() functions
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- no longer package static libapparmor.a</changelog>
</package>
<package pkgid="3e73071e03199f5d9df3d76b5be0761f20870fa7894e3ddefc95252fe62e9cd1" name="libapparmor-devel" arch="x86_64">
  <version epoch="0" ver="2.12" rel="lp150.6.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485604800">- split libapparmor into separate spec to get rid of build loop
  involving mariadb, systemd, apparmor, libapr and mariadb again
  (see the discussion in SR 448871 for details)
- libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but
  with minimum BuildRequires</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - mostly test-related changes in libapparmor
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1509451200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - no changes in libapparmor
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - preserve errno across aa_*_unref() functions
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- no longer package static libapparmor.a</changelog>
</package>
<package pkgid="5327b989c27861f6b05310ead5c857733395a73ab336191d9bcefa53a53d811c" name="libapparmor1" arch="x86_64">
  <version epoch="0" ver="2.12" rel="lp150.6.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485604800">- split libapparmor into separate spec to get rid of build loop
  involving mariadb, systemd, apparmor, libapr and mariadb again
  (see the discussion in SR 448871 for details)
- libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but
  with minimum BuildRequires</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - mostly test-related changes in libapparmor
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1509451200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - no changes in libapparmor
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - preserve errno across aa_*_unref() functions
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- no longer package static libapparmor.a</changelog>
</package>
<package pkgid="ffee3eb98a8529fb682d1555af11857861aeaf4c208a491f19549edff72913a8" name="libapparmor1-32bit" arch="x86_64">
  <version epoch="0" ver="2.12" rel="lp150.6.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485604800">- split libapparmor into separate spec to get rid of build loop
  involving mariadb, systemd, apparmor, libapr and mariadb again
  (see the discussion in SR 448871 for details)
- libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but
  with minimum BuildRequires</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - mostly test-related changes in libapparmor
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1509451200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - no changes in libapparmor
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - preserve errno across aa_*_unref() functions
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- no longer package static libapparmor.a</changelog>
</package>
<package pkgid="5510066c9a7122503b395aaef2ccbb3aeafa7c055cf5a343ff44b0dda5cc508a" name="libapr-util1" arch="x86_64">
  <version epoch="0" ver="1.6.1" rel="lp150.3.3.1"/>
  <changelog author="poeml@cmdline.net" date="1329566400">- updated to 1.4.1
- fixed crash in memtest testcase. Patch sent upstreams
  https://issues.apache.org/bugzilla/show_bug.cgi?id=52705
  apr-util-1.4.1-testmemcache-initialize-values-array.patch
- removed obsolete libapr-util1-1.3.12-gcc46.patch
- Changes with 1.4.1:
  * ) Apply Windows build fixes for the apr_crypto API.
  Changes with 1.4.0:
  * ) apr_ldap_init: Pass secure=1 to ldapssl_init() with Solaris LDAP SDK.  PR: 42682
  * ) apr_memcache_server_create: Fix possible segfault. PR 51064.
  * ) apr_thread_pool: Fix thread unsafe pool usage.
  * ) Do not include apr.h and apr_errno.h from system search path in
    apu_errno.h. PR 46487
  * ) Add optional dbm, openssl and nss subpackages to the RPM spec file.
  * ) apr_dbd_freetds: The sybdb.h header file might be freetds/sybdb.h
    or sybdb.h.
  * ) Add apr_crypto implementations for OpenSSL and Mozilla NSS. Add a unit
    test to verify the interoperability of the two modules. Builds default
    to disabled unless explicitly enabled.
  * ) Add the apr_crypto interface, a rewrite of the earlier apr_ssl code,
    based on the modular dso interface used for dbd and ldap. Initially,
    the interface supports symmetrical encryption and decryption. The
    purpose of the interface is to offer portable and interoperable
    access to basic crypto using the native crypto libraries present on
    each platform.
  * ) Add trace probes to hooks, making it easier to inspect APR Hook based
    applications with DTrace or other such mechanisms.
  * ) Implement resource list when threads are unavailable. PR 24325
  Changes with 1.3.13:
  * ) Fix a failure of configure to detect ldap_set_rebind_proc(),
    encountered on Fedora 15 with gcc 4.6.
  * ) apr_thread_pool: Fix thread unsafe pool usage.
  * ) Improve platform detection for bundled expat by updating
    config.guess and config.sub.
  * ) Sync libtool handling of bundled expat from APR.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1343822400">- Apache 2.4.x complains "Your APR does not include SSL/EVP support."
  Indeed, that's the case, fix it.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1345204800">- Needs libuud-devel now</changelog>
  <changelog author="mls@suse.de" date="1373976000">- get rid of --parents in doc section</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to apr-util 1.5.2
  * apr_uri_parse(): Do not accept invalid characters in the scheme.
  * Fix memory leak in hook sorting function.
  * Fix password validation failure for all crypt and crypt_r based
  * Fix potential data corruption in apr_brigade_write()
  * Fixes for ap_crypto,memcache etc.. see
  https://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.5</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1377691200">- Use compiler symbol visibility
- libapr1 does not have symbol *versioning* so requires_ge it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1385035200">- version 1.5.3
  * Add support to apr_memcache for unix domain sockets.
  * Add support for Berkeley DB 6.0.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1410955200">- version 1.5.4
  * MySQL driver: Fix incorrect handling of bad parameter.
  * apr_crypto_get_driver(): Fix invalid storage reference on error path.
- docs: Tell doxygen not to store timestamps in files.</changelog>
  <changelog author="tchvatal@suse.com" date="1413460800">- Clean up with spec-cleaner
- Kill support of sle10 and sle9
- Remove unused configure switches</changelog>
  <changelog author="coolo@suse.com" date="1413633600">- fix requires after spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1444737600">- require postgresql-devel version at least 9.1.0 to fix build for
  SLE-11-SP4</changelog>
  <changelog author="pgajdos@suse.com" date="1454587200">- require postgresql-devel less then 9.4 to fix build on SLE_12
  and SLE_12_SP1</changelog>
  <changelog author="pgajdos@suse.com" date="1460030400">- require just posgresql-devel everywhere, it seems to work now</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1497873600">- APR-util 1.6.0
  * Update MySQL build to stop using libmysqlclient_r
  * apr_siphash: Implement keyed hash function SipHash
  * apr_buckets: Add apr_bucket_file_set_buf_size()
  * apr_crypto: avoid excessive iteration in bcrypt hash.
  * apr_xml_to_text: Add style APR_XML_X2T_PARSED.
  * see http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.6 for
  extra details</changelog>
  <changelog author="mpluskal@suse.com" date="1499860800">- Rename package to apr-util
- Drop baselib.conf as it does not target any supported
  architecture</changelog>
  <changelog author="jengelh@inai.de" date="1500292800">- Replace unusual *.?a match by *.la.
- Fix RPM groups, diversify summaries.</changelog>
  <changelog author="mpluskal@suse.com" date="1508241600">- We need to obsolete same version of package (bsc#1063305)</changelog>
  <changelog author="kstreitova@suse.com" date="1510056000">- APR-util 1.6.1
  * apr_crypto: Fix compatibility with LibreSSL. PR 61596.
  * sdbm: better database/page validation to fail cleanly when
    corrupted [bsc#1064990], CVE-2017-12618</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Add apr-util-mariadb-10.2.patch: Fix detection / build with
  MariaDB 10.2.</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- extend apr-util-mariadb-10.2.patch: Fix detection / build with
  MariaDB 10.2. [bsc#1094754]</changelog>
</package>
<package pkgid="274ba2948a24f6affc72733e51502c092aad0a7be87a2cc1305a6fdd2c313620" name="libapr-util1-dbd-mysql" arch="x86_64">
  <version epoch="0" ver="1.6.1" rel="lp150.3.3.1"/>
  <changelog author="poeml@cmdline.net" date="1329566400">- updated to 1.4.1
- fixed crash in memtest testcase. Patch sent upstreams
  https://issues.apache.org/bugzilla/show_bug.cgi?id=52705
  apr-util-1.4.1-testmemcache-initialize-values-array.patch
- removed obsolete libapr-util1-1.3.12-gcc46.patch
- Changes with 1.4.1:
  * ) Apply Windows build fixes for the apr_crypto API.
  Changes with 1.4.0:
  * ) apr_ldap_init: Pass secure=1 to ldapssl_init() with Solaris LDAP SDK.  PR: 42682
  * ) apr_memcache_server_create: Fix possible segfault. PR 51064.
  * ) apr_thread_pool: Fix thread unsafe pool usage.
  * ) Do not include apr.h and apr_errno.h from system search path in
    apu_errno.h. PR 46487
  * ) Add optional dbm, openssl and nss subpackages to the RPM spec file.
  * ) apr_dbd_freetds: The sybdb.h header file might be freetds/sybdb.h
    or sybdb.h.
  * ) Add apr_crypto implementations for OpenSSL and Mozilla NSS. Add a unit
    test to verify the interoperability of the two modules. Builds default
    to disabled unless explicitly enabled.
  * ) Add the apr_crypto interface, a rewrite of the earlier apr_ssl code,
    based on the modular dso interface used for dbd and ldap. Initially,
    the interface supports symmetrical encryption and decryption. The
    purpose of the interface is to offer portable and interoperable
    access to basic crypto using the native crypto libraries present on
    each platform.
  * ) Add trace probes to hooks, making it easier to inspect APR Hook based
    applications with DTrace or other such mechanisms.
  * ) Implement resource list when threads are unavailable. PR 24325
  Changes with 1.3.13:
  * ) Fix a failure of configure to detect ldap_set_rebind_proc(),
    encountered on Fedora 15 with gcc 4.6.
  * ) apr_thread_pool: Fix thread unsafe pool usage.
  * ) Improve platform detection for bundled expat by updating
    config.guess and config.sub.
  * ) Sync libtool handling of bundled expat from APR.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1343822400">- Apache 2.4.x complains "Your APR does not include SSL/EVP support."
  Indeed, that's the case, fix it.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1345204800">- Needs libuud-devel now</changelog>
  <changelog author="mls@suse.de" date="1373976000">- get rid of --parents in doc section</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to apr-util 1.5.2
  * apr_uri_parse(): Do not accept invalid characters in the scheme.
  * Fix memory leak in hook sorting function.
  * Fix password validation failure for all crypt and crypt_r based
  * Fix potential data corruption in apr_brigade_write()
  * Fixes for ap_crypto,memcache etc.. see
  https://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.5</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1377691200">- Use compiler symbol visibility
- libapr1 does not have symbol *versioning* so requires_ge it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1385035200">- version 1.5.3
  * Add support to apr_memcache for unix domain sockets.
  * Add support for Berkeley DB 6.0.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1410955200">- version 1.5.4
  * MySQL driver: Fix incorrect handling of bad parameter.
  * apr_crypto_get_driver(): Fix invalid storage reference on error path.
- docs: Tell doxygen not to store timestamps in files.</changelog>
  <changelog author="tchvatal@suse.com" date="1413460800">- Clean up with spec-cleaner
- Kill support of sle10 and sle9
- Remove unused configure switches</changelog>
  <changelog author="coolo@suse.com" date="1413633600">- fix requires after spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1444737600">- require postgresql-devel version at least 9.1.0 to fix build for
  SLE-11-SP4</changelog>
  <changelog author="pgajdos@suse.com" date="1454587200">- require postgresql-devel less then 9.4 to fix build on SLE_12
  and SLE_12_SP1</changelog>
  <changelog author="pgajdos@suse.com" date="1460030400">- require just posgresql-devel everywhere, it seems to work now</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1497873600">- APR-util 1.6.0
  * Update MySQL build to stop using libmysqlclient_r
  * apr_siphash: Implement keyed hash function SipHash
  * apr_buckets: Add apr_bucket_file_set_buf_size()
  * apr_crypto: avoid excessive iteration in bcrypt hash.
  * apr_xml_to_text: Add style APR_XML_X2T_PARSED.
  * see http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.6 for
  extra details</changelog>
  <changelog author="mpluskal@suse.com" date="1499860800">- Rename package to apr-util
- Drop baselib.conf as it does not target any supported
  architecture</changelog>
  <changelog author="jengelh@inai.de" date="1500292800">- Replace unusual *.?a match by *.la.
- Fix RPM groups, diversify summaries.</changelog>
  <changelog author="mpluskal@suse.com" date="1508241600">- We need to obsolete same version of package (bsc#1063305)</changelog>
  <changelog author="kstreitova@suse.com" date="1510056000">- APR-util 1.6.1
  * apr_crypto: Fix compatibility with LibreSSL. PR 61596.
  * sdbm: better database/page validation to fail cleanly when
    corrupted [bsc#1064990], CVE-2017-12618</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Add apr-util-mariadb-10.2.patch: Fix detection / build with
  MariaDB 10.2.</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- extend apr-util-mariadb-10.2.patch: Fix detection / build with
  MariaDB 10.2. [bsc#1094754]</changelog>
</package>
<package pkgid="3bd219c36d080c82207847b5e3f2557faf95c7887869e78db982509c9a423921" name="libapr-util1-dbd-pgsql" arch="x86_64">
  <version epoch="0" ver="1.6.1" rel="lp150.3.3.1"/>
  <changelog author="poeml@cmdline.net" date="1329566400">- updated to 1.4.1
- fixed crash in memtest testcase. Patch sent upstreams
  https://issues.apache.org/bugzilla/show_bug.cgi?id=52705
  apr-util-1.4.1-testmemcache-initialize-values-array.patch
- removed obsolete libapr-util1-1.3.12-gcc46.patch
- Changes with 1.4.1:
  * ) Apply Windows build fixes for the apr_crypto API.
  Changes with 1.4.0:
  * ) apr_ldap_init: Pass secure=1 to ldapssl_init() with Solaris LDAP SDK.  PR: 42682
  * ) apr_memcache_server_create: Fix possible segfault. PR 51064.
  * ) apr_thread_pool: Fix thread unsafe pool usage.
  * ) Do not include apr.h and apr_errno.h from system search path in
    apu_errno.h. PR 46487
  * ) Add optional dbm, openssl and nss subpackages to the RPM spec file.
  * ) apr_dbd_freetds: The sybdb.h header file might be freetds/sybdb.h
    or sybdb.h.
  * ) Add apr_crypto implementations for OpenSSL and Mozilla NSS. Add a unit
    test to verify the interoperability of the two modules. Builds default
    to disabled unless explicitly enabled.
  * ) Add the apr_crypto interface, a rewrite of the earlier apr_ssl code,
    based on the modular dso interface used for dbd and ldap. Initially,
    the interface supports symmetrical encryption and decryption. The
    purpose of the interface is to offer portable and interoperable
    access to basic crypto using the native crypto libraries present on
    each platform.
  * ) Add trace probes to hooks, making it easier to inspect APR Hook based
    applications with DTrace or other such mechanisms.
  * ) Implement resource list when threads are unavailable. PR 24325
  Changes with 1.3.13:
  * ) Fix a failure of configure to detect ldap_set_rebind_proc(),
    encountered on Fedora 15 with gcc 4.6.
  * ) apr_thread_pool: Fix thread unsafe pool usage.
  * ) Improve platform detection for bundled expat by updating
    config.guess and config.sub.
  * ) Sync libtool handling of bundled expat from APR.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1343822400">- Apache 2.4.x complains "Your APR does not include SSL/EVP support."
  Indeed, that's the case, fix it.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1345204800">- Needs libuud-devel now</changelog>
  <changelog author="mls@suse.de" date="1373976000">- get rid of --parents in doc section</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to apr-util 1.5.2
  * apr_uri_parse(): Do not accept invalid characters in the scheme.
  * Fix memory leak in hook sorting function.
  * Fix password validation failure for all crypt and crypt_r based
  * Fix potential data corruption in apr_brigade_write()
  * Fixes for ap_crypto,memcache etc.. see
  https://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.5</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1377691200">- Use compiler symbol visibility
- libapr1 does not have symbol *versioning* so requires_ge it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1385035200">- version 1.5.3
  * Add support to apr_memcache for unix domain sockets.
  * Add support for Berkeley DB 6.0.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1410955200">- version 1.5.4
  * MySQL driver: Fix incorrect handling of bad parameter.
  * apr_crypto_get_driver(): Fix invalid storage reference on error path.
- docs: Tell doxygen not to store timestamps in files.</changelog>
  <changelog author="tchvatal@suse.com" date="1413460800">- Clean up with spec-cleaner
- Kill support of sle10 and sle9
- Remove unused configure switches</changelog>
  <changelog author="coolo@suse.com" date="1413633600">- fix requires after spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1444737600">- require postgresql-devel version at least 9.1.0 to fix build for
  SLE-11-SP4</changelog>
  <changelog author="pgajdos@suse.com" date="1454587200">- require postgresql-devel less then 9.4 to fix build on SLE_12
  and SLE_12_SP1</changelog>
  <changelog author="pgajdos@suse.com" date="1460030400">- require just posgresql-devel everywhere, it seems to work now</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1497873600">- APR-util 1.6.0
  * Update MySQL build to stop using libmysqlclient_r
  * apr_siphash: Implement keyed hash function SipHash
  * apr_buckets: Add apr_bucket_file_set_buf_size()
  * apr_crypto: avoid excessive iteration in bcrypt hash.
  * apr_xml_to_text: Add style APR_XML_X2T_PARSED.
  * see http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.6 for
  extra details</changelog>
  <changelog author="mpluskal@suse.com" date="1499860800">- Rename package to apr-util
- Drop baselib.conf as it does not target any supported
  architecture</changelog>
  <changelog author="jengelh@inai.de" date="1500292800">- Replace unusual *.?a match by *.la.
- Fix RPM groups, diversify summaries.</changelog>
  <changelog author="mpluskal@suse.com" date="1508241600">- We need to obsolete same version of package (bsc#1063305)</changelog>
  <changelog author="kstreitova@suse.com" date="1510056000">- APR-util 1.6.1
  * apr_crypto: Fix compatibility with LibreSSL. PR 61596.
  * sdbm: better database/page validation to fail cleanly when
    corrupted [bsc#1064990], CVE-2017-12618</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Add apr-util-mariadb-10.2.patch: Fix detection / build with
  MariaDB 10.2.</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- extend apr-util-mariadb-10.2.patch: Fix detection / build with
  MariaDB 10.2. [bsc#1094754]</changelog>
</package>
<package pkgid="61b39ca93f0c0af59d58b20cd8b3e0035aa7c83f7571b13597d16e0f3a4fc5ea" name="libapr-util1-dbd-sqlite3" arch="x86_64">
  <version epoch="0" ver="1.6.1" rel="lp150.3.3.1"/>
  <changelog author="poeml@cmdline.net" date="1329566400">- updated to 1.4.1
- fixed crash in memtest testcase. Patch sent upstreams
  https://issues.apache.org/bugzilla/show_bug.cgi?id=52705
  apr-util-1.4.1-testmemcache-initialize-values-array.patch
- removed obsolete libapr-util1-1.3.12-gcc46.patch
- Changes with 1.4.1:
  * ) Apply Windows build fixes for the apr_crypto API.
  Changes with 1.4.0:
  * ) apr_ldap_init: Pass secure=1 to ldapssl_init() with Solaris LDAP SDK.  PR: 42682
  * ) apr_memcache_server_create: Fix possible segfault. PR 51064.
  * ) apr_thread_pool: Fix thread unsafe pool usage.
  * ) Do not include apr.h and apr_errno.h from system search path in
    apu_errno.h. PR 46487
  * ) Add optional dbm, openssl and nss subpackages to the RPM spec file.
  * ) apr_dbd_freetds: The sybdb.h header file might be freetds/sybdb.h
    or sybdb.h.
  * ) Add apr_crypto implementations for OpenSSL and Mozilla NSS. Add a unit
    test to verify the interoperability of the two modules. Builds default
    to disabled unless explicitly enabled.
  * ) Add the apr_crypto interface, a rewrite of the earlier apr_ssl code,
    based on the modular dso interface used for dbd and ldap. Initially,
    the interface supports symmetrical encryption and decryption. The
    purpose of the interface is to offer portable and interoperable
    access to basic crypto using the native crypto libraries present on
    each platform.
  * ) Add trace probes to hooks, making it easier to inspect APR Hook based
    applications with DTrace or other such mechanisms.
  * ) Implement resource list when threads are unavailable. PR 24325
  Changes with 1.3.13:
  * ) Fix a failure of configure to detect ldap_set_rebind_proc(),
    encountered on Fedora 15 with gcc 4.6.
  * ) apr_thread_pool: Fix thread unsafe pool usage.
  * ) Improve platform detection for bundled expat by updating
    config.guess and config.sub.
  * ) Sync libtool handling of bundled expat from APR.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1343822400">- Apache 2.4.x complains "Your APR does not include SSL/EVP support."
  Indeed, that's the case, fix it.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1345204800">- Needs libuud-devel now</changelog>
  <changelog author="mls@suse.de" date="1373976000">- get rid of --parents in doc section</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to apr-util 1.5.2
  * apr_uri_parse(): Do not accept invalid characters in the scheme.
  * Fix memory leak in hook sorting function.
  * Fix password validation failure for all crypt and crypt_r based
  * Fix potential data corruption in apr_brigade_write()
  * Fixes for ap_crypto,memcache etc.. see
  https://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.5</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1377691200">- Use compiler symbol visibility
- libapr1 does not have symbol *versioning* so requires_ge it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1385035200">- version 1.5.3
  * Add support to apr_memcache for unix domain sockets.
  * Add support for Berkeley DB 6.0.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1410955200">- version 1.5.4
  * MySQL driver: Fix incorrect handling of bad parameter.
  * apr_crypto_get_driver(): Fix invalid storage reference on error path.
- docs: Tell doxygen not to store timestamps in files.</changelog>
  <changelog author="tchvatal@suse.com" date="1413460800">- Clean up with spec-cleaner
- Kill support of sle10 and sle9
- Remove unused configure switches</changelog>
  <changelog author="coolo@suse.com" date="1413633600">- fix requires after spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1444737600">- require postgresql-devel version at least 9.1.0 to fix build for
  SLE-11-SP4</changelog>
  <changelog author="pgajdos@suse.com" date="1454587200">- require postgresql-devel less then 9.4 to fix build on SLE_12
  and SLE_12_SP1</changelog>
  <changelog author="pgajdos@suse.com" date="1460030400">- require just posgresql-devel everywhere, it seems to work now</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1497873600">- APR-util 1.6.0
  * Update MySQL build to stop using libmysqlclient_r
  * apr_siphash: Implement keyed hash function SipHash
  * apr_buckets: Add apr_bucket_file_set_buf_size()
  * apr_crypto: avoid excessive iteration in bcrypt hash.
  * apr_xml_to_text: Add style APR_XML_X2T_PARSED.
  * see http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.6 for
  extra details</changelog>
  <changelog author="mpluskal@suse.com" date="1499860800">- Rename package to apr-util
- Drop baselib.conf as it does not target any supported
  architecture</changelog>
  <changelog author="jengelh@inai.de" date="1500292800">- Replace unusual *.?a match by *.la.
- Fix RPM groups, diversify summaries.</changelog>
  <changelog author="mpluskal@suse.com" date="1508241600">- We need to obsolete same version of package (bsc#1063305)</changelog>
  <changelog author="kstreitova@suse.com" date="1510056000">- APR-util 1.6.1
  * apr_crypto: Fix compatibility with LibreSSL. PR 61596.
  * sdbm: better database/page validation to fail cleanly when
    corrupted [bsc#1064990], CVE-2017-12618</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Add apr-util-mariadb-10.2.patch: Fix detection / build with
  MariaDB 10.2.</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- extend apr-util-mariadb-10.2.patch: Fix detection / build with
  MariaDB 10.2. [bsc#1094754]</changelog>
</package>
<package pkgid="a1c44f18f45106fd1f7219d6721863a136272fb5c489422d3ed9b27e6a40aa82" name="libarchive" arch="src">
  <version epoch="0" ver="3.3.2" rel="lp150.2.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1376654400">- update to 3.1.2
  This is a maintenance update to fix issues with the new RAR
  seeking feature.
- libarchive's new website moved to http://www.libarchive.org.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1376913600">- libarchive-openssl.patch: Call OPENSSL_config where needed,
  otherwise on systems configured to use openSSL engines such
  as via-padlock wont benefit from hardware acceleration.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1377000000">- remove artificial dependencies on libacl-devel, libbz2-devel,
  zlib-devel from libarchive-devel.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1385294400">- add optional -static-devel library package, intended to publish pixz
  for CentOS / RHEL, default off
- skip some dependencies not required for pixz on CentOS / RHEL</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401278400">- libarchive-xattr.patch, fix subtle wrong library check
  that causes this package to depend on libattr when it should
  be using glibc.</changelog>
  <changelog author="jsegitz@novell.com" date="1415707200">- Added CVE-2013-0211.patch to fix CVE-2013-0211 (bnc#800024)</changelog>
  <changelog author="adrian@suse.com" date="1425556800">- fix a directory traversal in cpio tool (bnc#920870)
  directory-traversal-fix.patch CVE-2015-2304</changelog>
  <changelog author="astieger@suse.com" date="1426420800">- add CVE for previous change</changelog>
  <changelog author="astieger@suse.com" date="1427025600">- RHEL/CentOS build fix, skipping autoreconf</changelog>
  <changelog author="astieger@suse.com" date="1442664000">- build static lib on RHEL 7</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1462536000">- add _constraints memory 4096MB to avoid ppc64le build failure</changelog>
  <changelog author="adrian@suse.de" date="1462795200">- 4GB _constraints for ppc64le only, it would break other archs
- update to version 3.2.0
  * Fixes CVE-2016-1541
  * Fixes CVE-2015-8928
  * changes are only documented in git history
  * updated openssl patch
  * new bsdcat utility
- removed obsolete patches for:
  * CVE-2013-0211.patch
  * directory-traversal-fix.patch
  * libarchive-xattr.patch</changelog>
  <changelog author="adrian@suse.de" date="1466078400">- limit size of symlinks in cpio archives (CVE-2016-4809, boo#984990)
  CVE-2016-4809.patch</changelog>
  <changelog author="adrian@suse.de" date="1466424000">- update to version 3.2.1
  Fixes a number of security issues:
    CVE-2015-8934, CVE-2015-8933, CVE-2015-8917, CVE-2016-4301, CVE-2016-4300
- and fixing the build (fix-build.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1469275200">- make bsdtar require a matching libarchive version to avoid
  missing symbol errors</changelog>
  <changelog author="adrian@suse.com" date="1477483200">- update to version 3.2.2
  Unspecified security fixes, but at least:
  * CVE-2016-8687
  * CVE-2016-8689
  * CVE-2016-8688
  * CVE-2016-5844
  * CVE-2016-6250
  * CVE-2016-5418
- obsoletes fix-build.patch</changelog>
  <changelog author="adrian@suse.com" date="1480680000">- fix extracting over symlinks: fix-extract-over-links.patch
  the problem is solved upstream different, but git master
  is too different atm.</changelog>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1539172800">- CVE-2017-14502.patch: bsc#1059100
  CVE-2017-14501.patch: CVE-2017-14503 bsc#1057514 bsc#1059139</changelog>
</package>
<package pkgid="346e75e34b72f66c5b4470105136b09eebd54a34ce1a92bad33175aefa3858fb" name="libarchive-devel" arch="x86_64">
  <version epoch="0" ver="3.3.2" rel="lp150.2.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1376654400">- update to 3.1.2
  This is a maintenance update to fix issues with the new RAR
  seeking feature.
- libarchive's new website moved to http://www.libarchive.org.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1376913600">- libarchive-openssl.patch: Call OPENSSL_config where needed,
  otherwise on systems configured to use openSSL engines such
  as via-padlock wont benefit from hardware acceleration.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1377000000">- remove artificial dependencies on libacl-devel, libbz2-devel,
  zlib-devel from libarchive-devel.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1385294400">- add optional -static-devel library package, intended to publish pixz
  for CentOS / RHEL, default off
- skip some dependencies not required for pixz on CentOS / RHEL</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401278400">- libarchive-xattr.patch, fix subtle wrong library check
  that causes this package to depend on libattr when it should
  be using glibc.</changelog>
  <changelog author="jsegitz@novell.com" date="1415707200">- Added CVE-2013-0211.patch to fix CVE-2013-0211 (bnc#800024)</changelog>
  <changelog author="adrian@suse.com" date="1425556800">- fix a directory traversal in cpio tool (bnc#920870)
  directory-traversal-fix.patch CVE-2015-2304</changelog>
  <changelog author="astieger@suse.com" date="1426420800">- add CVE for previous change</changelog>
  <changelog author="astieger@suse.com" date="1427025600">- RHEL/CentOS build fix, skipping autoreconf</changelog>
  <changelog author="astieger@suse.com" date="1442664000">- build static lib on RHEL 7</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1462536000">- add _constraints memory 4096MB to avoid ppc64le build failure</changelog>
  <changelog author="adrian@suse.de" date="1462795200">- 4GB _constraints for ppc64le only, it would break other archs
- update to version 3.2.0
  * Fixes CVE-2016-1541
  * Fixes CVE-2015-8928
  * changes are only documented in git history
  * updated openssl patch
  * new bsdcat utility
- removed obsolete patches for:
  * CVE-2013-0211.patch
  * directory-traversal-fix.patch
  * libarchive-xattr.patch</changelog>
  <changelog author="adrian@suse.de" date="1466078400">- limit size of symlinks in cpio archives (CVE-2016-4809, boo#984990)
  CVE-2016-4809.patch</changelog>
  <changelog author="adrian@suse.de" date="1466424000">- update to version 3.2.1
  Fixes a number of security issues:
    CVE-2015-8934, CVE-2015-8933, CVE-2015-8917, CVE-2016-4301, CVE-2016-4300
- and fixing the build (fix-build.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1469275200">- make bsdtar require a matching libarchive version to avoid
  missing symbol errors</changelog>
  <changelog author="adrian@suse.com" date="1477483200">- update to version 3.2.2
  Unspecified security fixes, but at least:
  * CVE-2016-8687
  * CVE-2016-8689
  * CVE-2016-8688
  * CVE-2016-5844
  * CVE-2016-6250
  * CVE-2016-5418
- obsoletes fix-build.patch</changelog>
  <changelog author="adrian@suse.com" date="1480680000">- fix extracting over symlinks: fix-extract-over-links.patch
  the problem is solved upstream different, but git master
  is too different atm.</changelog>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1539172800">- CVE-2017-14502.patch: bsc#1059100
  CVE-2017-14501.patch: CVE-2017-14503 bsc#1057514 bsc#1059139</changelog>
</package>
<package pkgid="e7395c30107cf21fa741630a5f3560af2c66494e1cde878c39f124da79ae4140" name="libarchive13" arch="x86_64">
  <version epoch="0" ver="3.3.2" rel="lp150.2.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1376654400">- update to 3.1.2
  This is a maintenance update to fix issues with the new RAR
  seeking feature.
- libarchive's new website moved to http://www.libarchive.org.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1376913600">- libarchive-openssl.patch: Call OPENSSL_config where needed,
  otherwise on systems configured to use openSSL engines such
  as via-padlock wont benefit from hardware acceleration.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1377000000">- remove artificial dependencies on libacl-devel, libbz2-devel,
  zlib-devel from libarchive-devel.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1385294400">- add optional -static-devel library package, intended to publish pixz
  for CentOS / RHEL, default off
- skip some dependencies not required for pixz on CentOS / RHEL</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401278400">- libarchive-xattr.patch, fix subtle wrong library check
  that causes this package to depend on libattr when it should
  be using glibc.</changelog>
  <changelog author="jsegitz@novell.com" date="1415707200">- Added CVE-2013-0211.patch to fix CVE-2013-0211 (bnc#800024)</changelog>
  <changelog author="adrian@suse.com" date="1425556800">- fix a directory traversal in cpio tool (bnc#920870)
  directory-traversal-fix.patch CVE-2015-2304</changelog>
  <changelog author="astieger@suse.com" date="1426420800">- add CVE for previous change</changelog>
  <changelog author="astieger@suse.com" date="1427025600">- RHEL/CentOS build fix, skipping autoreconf</changelog>
  <changelog author="astieger@suse.com" date="1442664000">- build static lib on RHEL 7</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1462536000">- add _constraints memory 4096MB to avoid ppc64le build failure</changelog>
  <changelog author="adrian@suse.de" date="1462795200">- 4GB _constraints for ppc64le only, it would break other archs
- update to version 3.2.0
  * Fixes CVE-2016-1541
  * Fixes CVE-2015-8928
  * changes are only documented in git history
  * updated openssl patch
  * new bsdcat utility
- removed obsolete patches for:
  * CVE-2013-0211.patch
  * directory-traversal-fix.patch
  * libarchive-xattr.patch</changelog>
  <changelog author="adrian@suse.de" date="1466078400">- limit size of symlinks in cpio archives (CVE-2016-4809, boo#984990)
  CVE-2016-4809.patch</changelog>
  <changelog author="adrian@suse.de" date="1466424000">- update to version 3.2.1
  Fixes a number of security issues:
    CVE-2015-8934, CVE-2015-8933, CVE-2015-8917, CVE-2016-4301, CVE-2016-4300
- and fixing the build (fix-build.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1469275200">- make bsdtar require a matching libarchive version to avoid
  missing symbol errors</changelog>
  <changelog author="adrian@suse.com" date="1477483200">- update to version 3.2.2
  Unspecified security fixes, but at least:
  * CVE-2016-8687
  * CVE-2016-8689
  * CVE-2016-8688
  * CVE-2016-5844
  * CVE-2016-6250
  * CVE-2016-5418
- obsoletes fix-build.patch</changelog>
  <changelog author="adrian@suse.com" date="1480680000">- fix extracting over symlinks: fix-extract-over-links.patch
  the problem is solved upstream different, but git master
  is too different atm.</changelog>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1539172800">- CVE-2017-14502.patch: bsc#1059100
  CVE-2017-14501.patch: CVE-2017-14503 bsc#1057514 bsc#1059139</changelog>
</package>
<package pkgid="12f8bf003aed05b66ebe7367cde59bfcd03849f28d6fdb2fc80f3dd5fb4ebc5f" name="libarchive13-32bit" arch="x86_64">
  <version epoch="0" ver="3.3.2" rel="lp150.2.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1376654400">- update to 3.1.2
  This is a maintenance update to fix issues with the new RAR
  seeking feature.
- libarchive's new website moved to http://www.libarchive.org.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1376913600">- libarchive-openssl.patch: Call OPENSSL_config where needed,
  otherwise on systems configured to use openSSL engines such
  as via-padlock wont benefit from hardware acceleration.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1377000000">- remove artificial dependencies on libacl-devel, libbz2-devel,
  zlib-devel from libarchive-devel.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1385294400">- add optional -static-devel library package, intended to publish pixz
  for CentOS / RHEL, default off
- skip some dependencies not required for pixz on CentOS / RHEL</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401278400">- libarchive-xattr.patch, fix subtle wrong library check
  that causes this package to depend on libattr when it should
  be using glibc.</changelog>
  <changelog author="jsegitz@novell.com" date="1415707200">- Added CVE-2013-0211.patch to fix CVE-2013-0211 (bnc#800024)</changelog>
  <changelog author="adrian@suse.com" date="1425556800">- fix a directory traversal in cpio tool (bnc#920870)
  directory-traversal-fix.patch CVE-2015-2304</changelog>
  <changelog author="astieger@suse.com" date="1426420800">- add CVE for previous change</changelog>
  <changelog author="astieger@suse.com" date="1427025600">- RHEL/CentOS build fix, skipping autoreconf</changelog>
  <changelog author="astieger@suse.com" date="1442664000">- build static lib on RHEL 7</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1462536000">- add _constraints memory 4096MB to avoid ppc64le build failure</changelog>
  <changelog author="adrian@suse.de" date="1462795200">- 4GB _constraints for ppc64le only, it would break other archs
- update to version 3.2.0
  * Fixes CVE-2016-1541
  * Fixes CVE-2015-8928
  * changes are only documented in git history
  * updated openssl patch
  * new bsdcat utility
- removed obsolete patches for:
  * CVE-2013-0211.patch
  * directory-traversal-fix.patch
  * libarchive-xattr.patch</changelog>
  <changelog author="adrian@suse.de" date="1466078400">- limit size of symlinks in cpio archives (CVE-2016-4809, boo#984990)
  CVE-2016-4809.patch</changelog>
  <changelog author="adrian@suse.de" date="1466424000">- update to version 3.2.1
  Fixes a number of security issues:
    CVE-2015-8934, CVE-2015-8933, CVE-2015-8917, CVE-2016-4301, CVE-2016-4300
- and fixing the build (fix-build.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1469275200">- make bsdtar require a matching libarchive version to avoid
  missing symbol errors</changelog>
  <changelog author="adrian@suse.com" date="1477483200">- update to version 3.2.2
  Unspecified security fixes, but at least:
  * CVE-2016-8687
  * CVE-2016-8689
  * CVE-2016-8688
  * CVE-2016-5844
  * CVE-2016-6250
  * CVE-2016-5418
- obsoletes fix-build.patch</changelog>
  <changelog author="adrian@suse.com" date="1480680000">- fix extracting over symlinks: fix-extract-over-links.patch
  the problem is solved upstream different, but git master
  is too different atm.</changelog>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1539172800">- CVE-2017-14502.patch: bsc#1059100
  CVE-2017-14501.patch: CVE-2017-14503 bsc#1057514 bsc#1059139</changelog>
</package>
<package pkgid="9822ca9f914da810727b49985e617d7113c80344f0e62f9c7a7346402d5f0169" name="libasound2" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp150.5.3.1"/>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-lib 1.1.1:
  * including previous fixes
  * a few more fixes/cleanup of control API
  * BSD compatibility changes
  * sync with 4.6 kernel ABI
  * provide API for sequencer sound card number / pid
  * fix races at dmix/dsnoop plugin
  * a few topology API updates
- Drop the obsoleted patches:
  0001-topology-Add-missing-include-sys-stat.h.patch
  0002-pcm-simple-Fix-asserts.patch
  0003-topology-open-topology-files-with-O_TRUNC.patch
  0004-topology-Remove-unused-function-write_data_block.patch
  0005-topology-Remove-unused-variables.patch
  0006-topology-Fix-comparison-of-unsigned-expression-0.patch
  0007-topology-Not-compare-a-for-loop-iterator-with-ABI-__.patch
  0008-topology-Quit-and-show-error-message-on-big-endian-m.patch
  0009-config-files-do-not-include-ucm-topology-configurati.patch
  0010-control-add-missing-asserts-to-ctl_elem_set-function.patch
  0011-pcm_hw-fix-possible-memory-leak-coverity.patch
  0012-coverity-fixes.patch
  0013-topology-fix-debug-output-to-print-correct-max-value.patch</changelog>
  <changelog author="tiwai@suse.de" date="1463054400">- Backport various upstream fixes for PCM (bnc#979702):
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch</changelog>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
</package>
<package pkgid="be6a2fde867fac7e083272c871dc5d11b304fb0472a15521c090bc99b81b59f5" name="libasound2" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp150.5.6.1"/>
  <changelog author="tiwai@suse.de" date="1463054400">- Backport various upstream fixes for PCM (bnc#979702):
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch</changelog>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539864000">- Fix UCM profile for Dell WD15 dock (bsc#1112292):
  0104-conf-ucm-Dell-WD15-Dock-Fix-incorrect-device-names.patch</changelog>
</package>
<package pkgid="a27d3b06b50a2510fcf55cf9596a9646f7481008422893b1eb8fcd11f21fd1a1" name="libasound2-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp150.5.3.1"/>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-lib 1.1.1:
  * including previous fixes
  * a few more fixes/cleanup of control API
  * BSD compatibility changes
  * sync with 4.6 kernel ABI
  * provide API for sequencer sound card number / pid
  * fix races at dmix/dsnoop plugin
  * a few topology API updates
- Drop the obsoleted patches:
  0001-topology-Add-missing-include-sys-stat.h.patch
  0002-pcm-simple-Fix-asserts.patch
  0003-topology-open-topology-files-with-O_TRUNC.patch
  0004-topology-Remove-unused-function-write_data_block.patch
  0005-topology-Remove-unused-variables.patch
  0006-topology-Fix-comparison-of-unsigned-expression-0.patch
  0007-topology-Not-compare-a-for-loop-iterator-with-ABI-__.patch
  0008-topology-Quit-and-show-error-message-on-big-endian-m.patch
  0009-config-files-do-not-include-ucm-topology-configurati.patch
  0010-control-add-missing-asserts-to-ctl_elem_set-function.patch
  0011-pcm_hw-fix-possible-memory-leak-coverity.patch
  0012-coverity-fixes.patch
  0013-topology-fix-debug-output-to-print-correct-max-value.patch</changelog>
  <changelog author="tiwai@suse.de" date="1463054400">- Backport various upstream fixes for PCM (bnc#979702):
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch</changelog>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
</package>
<package pkgid="5bece382a2343c1235bd70ae52c05cf3706699d9572e134d0757fba077fdb1c0" name="libasound2-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp150.5.6.1"/>
  <changelog author="tiwai@suse.de" date="1463054400">- Backport various upstream fixes for PCM (bnc#979702):
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch</changelog>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539864000">- Fix UCM profile for Dell WD15 dock (bsc#1112292):
  0104-conf-ucm-Dell-WD15-Dock-Fix-incorrect-device-names.patch</changelog>
</package>
<package pkgid="8eb15717e07110dafe38547223f1444083287aa9a19e65f258d35f5f5f55a172" name="libaubio-devel" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp150.3.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
</package>
<package pkgid="44362a8deca0e9e82bfe9b633ae52312506996a86c279163ae2d937e2ae7055c" name="libaubio-devel" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp150.3.6.1"/>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
</package>
<package pkgid="03447dba2e15bc015787c3fbe50a8ad0b9d1629199492236f92562ee5d449a68" name="libaubio5" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp150.3.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
</package>
<package pkgid="7f6c2e3b4bf4e1b17fff36cc6d2b0fcee7c6f1c896a2e0d52c8e0f95174a39c0" name="libaubio5" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp150.3.6.1"/>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
</package>
<package pkgid="3ff94b4378b69881e16ee7a4ac05cedddc4752eb83080115edcc363313c24a0b" name="libaubio5-32bit" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp150.3.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
</package>
<package pkgid="860691b8bbe0d997acf9f177fb4aa93a91ff8051cb93e1e8897cd17908066347" name="libaubio5-32bit" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp150.3.6.1"/>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
</package>
<package pkgid="363bc2877d18107cd09f01a11bfbe0e0fa0cfb1ba58e656f0b4c69432bd50d1e" name="libaudiofile1" arch="x86_64">
  <version epoch="0" ver="0.3.6" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
  <changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
  <changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
  <changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
  <changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
  <changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
  <changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
  <changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
  <changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>
  <changelog author="rguenther@suse.com" date="1454068800">- Add audiofile-gcc6.patch to fix compile errors with GCC 6.</changelog>
  <changelog author="alarrosa@suse.com" date="1489060800">- Add 0001-Always-check-the-number-of-coefficients.patch to put in code
  an assert that was removed when building the code for a release
  which checks the number of coeficients in WAVE.cpp .
- Add 0002-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch
  to check for a multiplication overflow in MSADPCM.cpp .
- Add 0003-Check-for-multiplication-overflow-in-sfconvert.patch to
  check that a multiplication doesn't overflow when calculating a
  buffer size and reduce it if necessary.
- Add 0004-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch
  to clamp index values to fix an index overflow in IMA.cpp .
- Add 0005-Actually-fail-when-error-occurs-in-parseFormat.patch
  so when there's an unsupported number of bits per sample or an invalid
  number of samples per block, don't only print an error message using
  the error handler, but actually stop parsing the file.
- Add 0006-Check-for-division-by-zero-in-BlockCodec-runPull.patch to
  check for division by zero in BlockCodec::runPull
- These patches fix boo#1026978 (CVE-2017-6837, CVE-2017-6838,
  CVE-2017-6839), boo#1026979 (CVE-2017-6827),
  boo#1026980 (CVE-2017-6828), boo#1026981 (CVE-2017-6829),
  boo#1026982 (CVE-2017-6830), boo#1026983 (CVE-2017-6831),
  boo#1026984 (CVE-2017-6832), boo#1026985 (CVE-2017-6833),
  boo#1026986 (CVE-2017-6834), boo#1026987 (CVE-2017-6836),
  boo#1026988 (CVE-2017-6835).</changelog>
  <changelog author="qzheng@suse.com" date="1539864000">- Add 0007-set-the-output-chunk-to-the-amount-of-frames.patch to
  set the output chunk to the amount of frames we pulled so that
  the next module in the chain has the correct frame count (
  boo#1111586, CVE-2018-17095 ).</changelog>
</package>
<package pkgid="03b01b36f0811faa642ca2b05db8833f1815160514760537147bb58e79b0e195" name="libaudiofile1-32bit" arch="x86_64">
  <version epoch="0" ver="0.3.6" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
  <changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
  <changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
  <changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
  <changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
  <changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
  <changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
  <changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
  <changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>
  <changelog author="rguenther@suse.com" date="1454068800">- Add audiofile-gcc6.patch to fix compile errors with GCC 6.</changelog>
  <changelog author="alarrosa@suse.com" date="1489060800">- Add 0001-Always-check-the-number-of-coefficients.patch to put in code
  an assert that was removed when building the code for a release
  which checks the number of coeficients in WAVE.cpp .
- Add 0002-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch
  to check for a multiplication overflow in MSADPCM.cpp .
- Add 0003-Check-for-multiplication-overflow-in-sfconvert.patch to
  check that a multiplication doesn't overflow when calculating a
  buffer size and reduce it if necessary.
- Add 0004-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch
  to clamp index values to fix an index overflow in IMA.cpp .
- Add 0005-Actually-fail-when-error-occurs-in-parseFormat.patch
  so when there's an unsupported number of bits per sample or an invalid
  number of samples per block, don't only print an error message using
  the error handler, but actually stop parsing the file.
- Add 0006-Check-for-division-by-zero-in-BlockCodec-runPull.patch to
  check for division by zero in BlockCodec::runPull
- These patches fix boo#1026978 (CVE-2017-6837, CVE-2017-6838,
  CVE-2017-6839), boo#1026979 (CVE-2017-6827),
  boo#1026980 (CVE-2017-6828), boo#1026981 (CVE-2017-6829),
  boo#1026982 (CVE-2017-6830), boo#1026983 (CVE-2017-6831),
  boo#1026984 (CVE-2017-6832), boo#1026985 (CVE-2017-6833),
  boo#1026986 (CVE-2017-6834), boo#1026987 (CVE-2017-6836),
  boo#1026988 (CVE-2017-6835).</changelog>
  <changelog author="qzheng@suse.com" date="1539864000">- Add 0007-set-the-output-chunk-to-the-amount-of-frames.patch to
  set the output chunk to the amount of frames we pulled so that
  the next module in the chain has the correct frame count (
  boo#1111586, CVE-2018-17095 ).</changelog>
</package>
<package pkgid="b3c2659d64c180ff8fc4f762505afabe7d98f61630cbfdbd8f05e3ab7f22e685" name="libavcodec57" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="4c5452689a3824321c4aa2feaa3c976f1f439c87eded5397ac1ef2aa56c05da7" name="libavcodec57" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="62a6c45665da34e60940776cf1080a1069e8783f9fb3b5c62fa8d4b7f622e767" name="libavcodec58" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="113b565e43ad1598f73d44f0f13292cad9be449dc2675bbb35c3163050685ef2" name="libavcodec58" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="af0186d3ed2a5468e0ae3f86249d003755aaea3b69686e433e36485d45c50987" name="libavcodec58" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="9682b0c8c304900e3136b307bc4b685e48d3a5a1387435f59f1bbae64aa95cea" name="libavcodec58" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="d6b0533d7c9eefd0c3bfaed3bee43b10770a284b0f5997a73fff39efcbf2c7b0" name="libavdevice57" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="eb3585f4060ab6cf4a956ecda26559052efa0c52feb3f3b33b7bad612f59bc1a" name="libavdevice57" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="39009557a559d044381caaeed3f7874800d5c96aa51803d8d36b2ae92272f753" name="libavdevice58" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="f1feae1e969486d44c678979a740b3e0ca6e149863d61922d2b196ea4f5a4b2f" name="libavdevice58" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="51f22ffcf4c635a8cc065a12eecdd347be4e92aaa3297f5fe8904cdf5bc8ebc8" name="libavdevice58" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="592dac622ebda48d1d408c9057d19f29ea17e9688d309d88bd2763e5465363e8" name="libavdevice58" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="852cfc1add0e67560e523491f357359babdf9b7158860753a772db736d7a20f5" name="libavfilter6" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="ac247b52fc0c079a32bfb98772b752cc9ef5bc0dabe9cf8c6184bd11b4ed9575" name="libavfilter6" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="496a6334831364a634f3f215f62db4630aab8f950438955c87addf37e4cf2133" name="libavfilter7" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="7c544dd5a7dc6ac99735b4ff8f82f28a4ccda9760b3b2add6e9044bbb5499052" name="libavfilter7" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="9af126b0abed666cef88e634b9373195fbfceeaa06b0ede86464d8bf7d83ee95" name="libavfilter7" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="8d3db9a9ff170ab62843ae2867d16bb23a993ebf1c06ea170e0eb3c5b85d3d4c" name="libavfilter7" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="f0fcaf3ce2d0a5fc319533fef8fc91864ba94e3d0d24461c6b0125e5e3b4424e" name="libavformat57" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="dc764470a6d8d3a6ef0ec4f634b45abc87f14d9e271c420888461fb6bf293ed5" name="libavformat57" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="4c57bff851f0f061f66b9a1496867ba47f3038dfb187dde04edf75a03e25142d" name="libavformat58" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="fcf03dbec9350e9453589cebfe93cefd3d64294499fd6a6a22bfbb4c50bb3e46" name="libavformat58" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="f4429b227b308157a7cb179fd327039318996d2465dbe293dbe76bde93c78d62" name="libavformat58" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="fe7b878d79a316561eacf6863c81253091fc15e830bd9e59bd7f595cfdcf2780" name="libavformat58" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="63beb98d87223faa906aa10039967d4bfe3e5cb95679bf3d64379e98ad23a2b4" name="libavresample3" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="3b0a85af4ade845e2c10ff5b5645613f99898b6e7b9e66fe9cf57e4cacfbc74e" name="libavresample3" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="42f244cb6c57f9a6b2763a3a16d3cbf847bcae269575f75586f8caa2197a4999" name="libavresample4" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="443e527d0c73b21e61fca683b38c27056c993f02d780d93f60043d425fa43bee" name="libavresample4" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="6aa76f36e97bc613ee61348a1c92862d5913947bb177f28758e7534b2f286708" name="libavresample4" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="7f3bdd887ac6e0526a81e085707adf96e3d18e984e8f277d0ac27757b9e7f513" name="libavresample4" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="c6334ec6d10e5294c38d760bb211f7252242f9bee3adcb469cf41a50ed170460" name="libavutil55" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="a230a8f017e5de311654fc5e964f21599fbc6cf6c163aff6f04cf04e146846d0" name="libavutil55" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="74a2593db9e974a6f22b85bbabc1d64f994c3a317702d31fab4d90c3f7b75b45" name="libavutil56" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="0e6ab578605d9bf3e8a1deb0b8e576641a2ee672eeae1019ae63426c01ac1ced" name="libavutil56" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="755b860e59eae9ce0c279ec486aaa06859ae8240e90d7e45b9d49bf99459d071" name="libavutil56" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="2237ca72c20a39f88b1e0576e96a4bac4c2fdbb44b1095f5fd24c6c6d7c96f40" name="libavutil56" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="1a56a91e0ba84f1f33de62c9708a9594682a00e4f907b34622d6537bbe55a429" name="libbind9-160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="a5ea1692ac6ba510431441871a662abcf5cf159fba94a8545977d52fc4f459b2" name="libbind9-160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="73cd182cbd381d8f66c5ce2d7ce56a7ed5f0a1dbfe8192efbe7bc8257db16142" name="libbind9-160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="35ac05114d1bca6f5fd230a83d7c6c50d1851254d86be6e957e58a1e58136440" name="libbind9-160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="54b1c6a3f6d6081f7aad5cf941a1f86dfaf8cf1482b28a7998e15c17c5432fdf" name="libbitcoinconsensus-devel" arch="x86_64">
  <version epoch="0" ver="0.16.3" rel="lp150.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1456056000">- Update to 0.12.0
  * For a complete list of changes see provided release-notes
- Small spec file cleanups
  * remove old obsole/provides
  * move icon handling scriplets to correct subpackage</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Use pretty name for tarball
- Update describtion in .firewall</changelog>
  <changelog author="mpluskal@suse.com" date="1462017600">- Update to 0.12.1
  * For a complete list of changes see provided release-notes
- Drop no longer needed patch
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Small spec file polishing</changelog>
  <changelog author="mpluskal@suse.com" date="1464350400">- Remove unnecessary build dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update test dependencies
- Build with safer ldflags</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466424000">- put back still need patch for ppc64le
  bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
  (subset of upstream commit id cf5c786)</changelog>
  <changelog author="mpluskal@suse.com" date="1472040000">- Update to version 0.13.0:
  * For a complete list of changes see provided release-notes
- Drop upstreamed patch:
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Fail build on testsuite failure</changelog>
  <changelog author="mpluskal@suse.com" date="1474200000">- Speedup build/reduce it's memory consumption by using gold linker</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 0.13.1:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Update to version 0.14.0:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 0.14.1:
  * For a complete list of changes see provided release-notes
- Update unit file</changelog>
  <changelog author="mpluskal@suse.com" date="1497873600">- Update to version 0.14.2
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1505217600">- Update to version 0.15.0
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1507550400">- Update to version 0.15.0.1:
  * Some clients may have crashed at startup because a custom fee
    setting was configured that no longer exists in the GUI
  * Small translation updates
  * update manpages, forgotten in 0.15.0
- Small specfile cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1514808000">- Update to version 0.15.1:
  * Network fork safety enhancements
  * Miner block size limiting deprecated
  * GUI settings backed up on reset
  * Duplicate wallets disallowed
  * Debug -minimumchainwork argument added
  * Low-level RPC changes
- Fix building with current boost:
  * bitcoin-boost_1_66.patch</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Trim redundant wording from description.</changelog>
  <changelog author="develop7@develop7.info" date="1520596800">- Update to version 0.16.0
  * Segwit Wallet
  * BIP173 (Bech32) Address support ("bc1..." addresses)
  * HD-wallets by default
  * Replace-By-Fee by default in GUI
  * Wallets directory configuration (`-walletdir`)
  * Build: Minimum GCC bumped to 4.8.x
  * Support for signalling pruned nodes (BIP159)
  * Performance: SHA256 assembly enabled by default
  * GUI changes
  * RPC changes
- Remove bitcoin-boost_1_66.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1529323200">- Update to version 0.16.1:
  * For complete list of changes see release-notes-0.16.1.md</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537963200">- Update to version 0.16.3:
  * For complete list of changes see:
    + release-notes-0.16.3.md
    + release-notes-0.16.2.md
- Resolves bsc#1108992 CVE-2018-17144</changelog>
</package>
<package pkgid="04a45e2c7fb23f026981fbee5c04c52dfda7ad1449f69cc6f9a7ee5da88d3903" name="libbitcoinconsensus0" arch="x86_64">
  <version epoch="0" ver="0.16.3" rel="lp150.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1456056000">- Update to 0.12.0
  * For a complete list of changes see provided release-notes
- Small spec file cleanups
  * remove old obsole/provides
  * move icon handling scriplets to correct subpackage</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Use pretty name for tarball
- Update describtion in .firewall</changelog>
  <changelog author="mpluskal@suse.com" date="1462017600">- Update to 0.12.1
  * For a complete list of changes see provided release-notes
- Drop no longer needed patch
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Small spec file polishing</changelog>
  <changelog author="mpluskal@suse.com" date="1464350400">- Remove unnecessary build dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update test dependencies
- Build with safer ldflags</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466424000">- put back still need patch for ppc64le
  bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
  (subset of upstream commit id cf5c786)</changelog>
  <changelog author="mpluskal@suse.com" date="1472040000">- Update to version 0.13.0:
  * For a complete list of changes see provided release-notes
- Drop upstreamed patch:
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Fail build on testsuite failure</changelog>
  <changelog author="mpluskal@suse.com" date="1474200000">- Speedup build/reduce it's memory consumption by using gold linker</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 0.13.1:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Update to version 0.14.0:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 0.14.1:
  * For a complete list of changes see provided release-notes
- Update unit file</changelog>
  <changelog author="mpluskal@suse.com" date="1497873600">- Update to version 0.14.2
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1505217600">- Update to version 0.15.0
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1507550400">- Update to version 0.15.0.1:
  * Some clients may have crashed at startup because a custom fee
    setting was configured that no longer exists in the GUI
  * Small translation updates
  * update manpages, forgotten in 0.15.0
- Small specfile cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1514808000">- Update to version 0.15.1:
  * Network fork safety enhancements
  * Miner block size limiting deprecated
  * GUI settings backed up on reset
  * Duplicate wallets disallowed
  * Debug -minimumchainwork argument added
  * Low-level RPC changes
- Fix building with current boost:
  * bitcoin-boost_1_66.patch</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Trim redundant wording from description.</changelog>
  <changelog author="develop7@develop7.info" date="1520596800">- Update to version 0.16.0
  * Segwit Wallet
  * BIP173 (Bech32) Address support ("bc1..." addresses)
  * HD-wallets by default
  * Replace-By-Fee by default in GUI
  * Wallets directory configuration (`-walletdir`)
  * Build: Minimum GCC bumped to 4.8.x
  * Support for signalling pruned nodes (BIP159)
  * Performance: SHA256 assembly enabled by default
  * GUI changes
  * RPC changes
- Remove bitcoin-boost_1_66.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1529323200">- Update to version 0.16.1:
  * For complete list of changes see release-notes-0.16.1.md</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537963200">- Update to version 0.16.3:
  * For complete list of changes see:
    + release-notes-0.16.3.md
    + release-notes-0.16.2.md
- Resolves bsc#1108992 CVE-2018-17144</changelog>
</package>
<package pkgid="be6c1bbf4af96667b66047134eb23c84d92e77df8fb36cdd50b35c1b9c79a13a" name="libblas3" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="2bfbb1da8d54a7ec64b966827bb477d48d1db392c78ab173550be156d38af954" name="libblas3-32bit" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="1082fedbd629810254830bf791d9367b49e2d7f84e9f2ef3e9fe3cef0bfcaed4" name="libblkid-devel" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="937692fc6df53b1a525e7a794ae998501af48f2c541738930143c0946446e4c6" name="libblkid-devel" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="6921d1de46fe334ef2197486888a365cfa0f5baf3d18cac37e01a5ef0cda2e6b" name="libblkid-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="320697d4ff35c99341734b4a2d0fdd83cd018b08d1cb1c008df32fe40c54a101" name="libblkid-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="97568f6434887d48239a6c51aff55c8b0446774a1c723260080f84489688c15e" name="libblkid-devel-static" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="7aaa17aaed0f31fe9eae03b12f11c91c211b7865cc8db7baa7d1eddbd7dc883a" name="libblkid-devel-static" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="a3b352f7a4035dd84575cdb518cad92250e0baa76fe5bc30aed291d6d71e8cf6" name="libblkid1" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="cc791a054d405549647918c55c5a71f3fc2e7853f98842d0599ea5f7e5cfa9c7" name="libblkid1" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="2088b860442f15019e2d40f930cefbeb3838318221136b28f1df8367986d7605" name="libblkid1-32bit" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="bb76def43f78096d5fee68f4f118f8bc036de1a43479ab172e99b289b3284dc2" name="libblkid1-32bit" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="8625caac648f4008dc94096e5e8eb77f4ddc897fc053497932b4f871742328ab" name="libbluetooth3-32bit" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
</package>
<package pkgid="99de84c7b5e6ed5d6702c220a2f8ad7f6c253e1122a9e6c3b5846ca29129ce4b" name="libbluetooth3" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
</package>
<package pkgid="aa0a6cec5cdcce4cd9442595f955da89accbbe88a9c9d31ea3ce780e28d9a983" name="libc++-devel" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="1c461042d7e090cbcf6c30f43080c8a654ccec206e1a06bf6b4cb485fb360be7" name="libc++1" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="da17925a7fdb1805fd445cf782181fcef94683b9b7af0eacd75caf540c880718" name="libc++abi-devel" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="51567925fa10f1577a7fc16a2ce450e421d5ce148fd9da737006eea45b04ddb6" name="libc++abi1" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="d6b3ad65f34bc294beddc2d7a54e67abd86cca2b9c6e81a8e47801d1af0b191e" name="libcairo-gobject2" arch="x86_64">
  <version epoch="0" ver="1.15.10" rel="lp150.3.3.1"/>
  <changelog author="ro@suse.de" date="1431777600">- drop cairo-disable-lto.patch: lto was dropped upstream</changelog>
  <changelog author="zaitor@opensuse.org" date="1446465600">- Update to version 1.14.4:
  + Avoid appending empty slots to user data arrays. Fixes a memory
    consumption regression since commit 9341c254a.
  + Return a better error (file-not-found) when setting up pango on
    devices where the font files don't have read permissions.
  + Fix regression in the font size of canvas text in Inkscape when
    compiled with the Quartz backend (fdo#84324).
  + Fix _cairo_gl_shader_bind_matrix() to maintain compatibility
    with OpenGL ES 2.0. Manually transpose the matrix.
  + Fix incorrect font descriptor conversion when the font matrix
    yy is negative (fdo#90538).
  + Fix crash when using a complex path for clip and stroke due to
    discarding the intersection exactly at the top edge
    (fdo#74779).
  + Fix cairo_get_locale_decimal_point() on Android.
  + Fix compilation problem on AIX due to conflicting usage of
    symbol 'jmpbuf' (fdo#89339).
  + Fix broken rendering with XCB due to snapshotting of uploaded
    part of surfaces (fdo#67505).
  + Fix loss of alpha when copying a mask for a cairo recording
    surface, resulting in a double copy (fdo#73038, fdo#73901).
  + Fix incorrect recording of certain paths with script surfaces
    (fdo#91054).
  + Fix typo in definition of MAYBE_WARN in configure script
    (fdo#89750).
  + Fix use of filename variable after it's been freed (fdo#91206).
  + Fix out of bounds access when printing pattern (fdo#91266).
  + Fix incorrect size calculation in glyph cache unlocking for
    Cairo GL compositor (fdo#91321).
  + Fix memory leak in _cairo_gl_pattern_texture_setup()
    (fdo#91537).
  + Fix transparent images in win32-print (fdo#91835).
  + Fix _put_shm_image_boxes and _put_image_boxes when no SHM
    available with XCB.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008000">- Update to version 1.14.6:
  + Simple bugfix release to fix one Windows issue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008001">- Update to version 1.15.2:
  + Fix xcb/xlib compilation and calls. Make image boxes behave
    when SHM is not available.
  + Fix various issues with printing and transparent images on
    Win32.
  + Fix thin lines that don't show up when printing in Inkscape due
    to overly aggressive culling (fdo#77298).
  + Fix broken printing via pdf when glyph 0 is used for rendering,
    resulting in missing spaces and letters (fdo#89082).
  + Fix crash for certain glyphs in opentype fonts (fdo#91902).
  + Fix incorrect rendering of SVG paths with more than one
    subpath. If more than one trap is passed in then it's
    guaranteed that the returned traps will have their left edge to
    the left of their right edge, but if only one trap is passed in
    then the function always returns without doing anything
    (fdo#90984).
  + Improve rendering with Quarts to better match pixman's blending
    and filtering behavior.
- Drop cairo-render-thin-lines.patch: Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1450699200">- Add cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  to fix mutex deadlocks on certain documents (bsc#958844).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove patch:
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch.</changelog>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="zaitor@opensuse.org" date="1481457600">- Update to version 1.15.4:
  + The PDF backend has gained support for a range of widely used
    features, including thumbnails, page labels, metadata, document
    outlines, structured text, hyperlinks, and tags. Tags permit
    adding logical info such as headings, tables, figures, etc.
    that facilitates indexing, accessibility, text reflow,
    searching, and extraction of the tagged items to other
    software.
  + API Changes:
  - Added a cairo API to set up Win32 surfaces for HDC with alpha
    channels.
  - New API for added PDF functionality (see above), and new
    error status item for problems relating to PDF tagging.
  - New error status items for handling of GDI, libfreetype, and
    libpng errors, respectively.
  + Fix playback of recording surfaces into PDF surfaces, where
    objects with negative coordinates were not getting drawn. To
    address this, the coordinate systems for PDF and PS have been
    changed to match cairo's coordinate system. This allows
    recording surfaces to be emitted in cairo coordinates, and
    results in the same origin being used for all operations when
    using the recording surface XObject. Test cases for PDF and PS
    have also been updated accordingly (fdo#89232).
  + Fix "invalidfont" error on some printers when printing PDFs
    with embedded fonts that have glyphs (such as spaces) with
    num_contours == 0 (fdo#79897).
  + Fix missing glyphs such as thin dashes, which get scaled to 0
    in userspace and thus have their drawing operations culled
    (fdo#94615).
  + Fix other oddities caused by variously idiosyncratic fonts.
  + Fix deadlock when destruction of a scaled font indirectly
    triggers destruction of a second scaled font, causing the
    global cache to be locked twice (fdo#93891).
  + Fix X errors reported to applications when shmdt() is called
    before the Attach request is processed, due to missing xcb and
    xlib calls.
  + Fix random failure in record-paint-alpha-clip-mast test case,
    caused by an incorrect assumption that a deferred clear can be
    skipped (fdo#84330).
  + Fix crash when dealing with an XShmGetImage() failure, caused
    by a double free in _get_image_surface() (fdo#91967).
  + Fix invalid execution of ASCII85 data by the PS interpreter
    that the image operator didn't use, by flushing the extraneous
    data after drawing the image (fdo#84811).
  + Fix decoding of Adobe Photoshop's inverted CMYK JPEG files in
    PDF export.
  + Fix unbounded surface assertion in win32-print code.
  + Fix a data race in freed_pool discovered by Firefox's cairo
    usage. The patch adads atomic int load and store functions,
    with relaxed memory ordering (fdo#90318).
  + Cleanup debugging text sent to stdout instead of log
    (fdo#95227).
  + Fix build issue when using non-GNU strings utility (fdo#88639).
  + Fix build of cairo modules as regular modules, not as versioned
    shared libaries (fdo#29319).
  + Fix build on win32 using gcc 5.4.
  + Fix build of script backend to require zlib.
  + Update test suite reference images using Debian Jessie 64-bit
    and poppler current as of June, 2016.
  + Various improvements to documentation and tests, compiler
    warning fixes, and an assortment of code refactoring and
    cleanup.
- Drop cairo-modules-no-version.patch,
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch and
  cairo-xlib-double-free.patch: Fixed upstream.
- Drop libtool BuildRequires and stop passing autoreconf, we no
  longer have any patches touching the buildsystem.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="qzheng@suse.com" date="1529409600">- Add cairo-CVE-2017-9814.patch: Replace malloc with_cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
</package>
<package pkgid="e8b11ba7d3938c8698554c65a291b2c144169d8b705ffa9f47102c61f5c1fc76" name="libcairo-gobject2-32bit" arch="x86_64">
  <version epoch="0" ver="1.15.10" rel="lp150.3.3.1"/>
  <changelog author="ro@suse.de" date="1431777600">- drop cairo-disable-lto.patch: lto was dropped upstream</changelog>
  <changelog author="zaitor@opensuse.org" date="1446465600">- Update to version 1.14.4:
  + Avoid appending empty slots to user data arrays. Fixes a memory
    consumption regression since commit 9341c254a.
  + Return a better error (file-not-found) when setting up pango on
    devices where the font files don't have read permissions.
  + Fix regression in the font size of canvas text in Inkscape when
    compiled with the Quartz backend (fdo#84324).
  + Fix _cairo_gl_shader_bind_matrix() to maintain compatibility
    with OpenGL ES 2.0. Manually transpose the matrix.
  + Fix incorrect font descriptor conversion when the font matrix
    yy is negative (fdo#90538).
  + Fix crash when using a complex path for clip and stroke due to
    discarding the intersection exactly at the top edge
    (fdo#74779).
  + Fix cairo_get_locale_decimal_point() on Android.
  + Fix compilation problem on AIX due to conflicting usage of
    symbol 'jmpbuf' (fdo#89339).
  + Fix broken rendering with XCB due to snapshotting of uploaded
    part of surfaces (fdo#67505).
  + Fix loss of alpha when copying a mask for a cairo recording
    surface, resulting in a double copy (fdo#73038, fdo#73901).
  + Fix incorrect recording of certain paths with script surfaces
    (fdo#91054).
  + Fix typo in definition of MAYBE_WARN in configure script
    (fdo#89750).
  + Fix use of filename variable after it's been freed (fdo#91206).
  + Fix out of bounds access when printing pattern (fdo#91266).
  + Fix incorrect size calculation in glyph cache unlocking for
    Cairo GL compositor (fdo#91321).
  + Fix memory leak in _cairo_gl_pattern_texture_setup()
    (fdo#91537).
  + Fix transparent images in win32-print (fdo#91835).
  + Fix _put_shm_image_boxes and _put_image_boxes when no SHM
    available with XCB.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008000">- Update to version 1.14.6:
  + Simple bugfix release to fix one Windows issue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008001">- Update to version 1.15.2:
  + Fix xcb/xlib compilation and calls. Make image boxes behave
    when SHM is not available.
  + Fix various issues with printing and transparent images on
    Win32.
  + Fix thin lines that don't show up when printing in Inkscape due
    to overly aggressive culling (fdo#77298).
  + Fix broken printing via pdf when glyph 0 is used for rendering,
    resulting in missing spaces and letters (fdo#89082).
  + Fix crash for certain glyphs in opentype fonts (fdo#91902).
  + Fix incorrect rendering of SVG paths with more than one
    subpath. If more than one trap is passed in then it's
    guaranteed that the returned traps will have their left edge to
    the left of their right edge, but if only one trap is passed in
    then the function always returns without doing anything
    (fdo#90984).
  + Improve rendering with Quarts to better match pixman's blending
    and filtering behavior.
- Drop cairo-render-thin-lines.patch: Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1450699200">- Add cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  to fix mutex deadlocks on certain documents (bsc#958844).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove patch:
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch.</changelog>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="zaitor@opensuse.org" date="1481457600">- Update to version 1.15.4:
  + The PDF backend has gained support for a range of widely used
    features, including thumbnails, page labels, metadata, document
    outlines, structured text, hyperlinks, and tags. Tags permit
    adding logical info such as headings, tables, figures, etc.
    that facilitates indexing, accessibility, text reflow,
    searching, and extraction of the tagged items to other
    software.
  + API Changes:
  - Added a cairo API to set up Win32 surfaces for HDC with alpha
    channels.
  - New API for added PDF functionality (see above), and new
    error status item for problems relating to PDF tagging.
  - New error status items for handling of GDI, libfreetype, and
    libpng errors, respectively.
  + Fix playback of recording surfaces into PDF surfaces, where
    objects with negative coordinates were not getting drawn. To
    address this, the coordinate systems for PDF and PS have been
    changed to match cairo's coordinate system. This allows
    recording surfaces to be emitted in cairo coordinates, and
    results in the same origin being used for all operations when
    using the recording surface XObject. Test cases for PDF and PS
    have also been updated accordingly (fdo#89232).
  + Fix "invalidfont" error on some printers when printing PDFs
    with embedded fonts that have glyphs (such as spaces) with
    num_contours == 0 (fdo#79897).
  + Fix missing glyphs such as thin dashes, which get scaled to 0
    in userspace and thus have their drawing operations culled
    (fdo#94615).
  + Fix other oddities caused by variously idiosyncratic fonts.
  + Fix deadlock when destruction of a scaled font indirectly
    triggers destruction of a second scaled font, causing the
    global cache to be locked twice (fdo#93891).
  + Fix X errors reported to applications when shmdt() is called
    before the Attach request is processed, due to missing xcb and
    xlib calls.
  + Fix random failure in record-paint-alpha-clip-mast test case,
    caused by an incorrect assumption that a deferred clear can be
    skipped (fdo#84330).
  + Fix crash when dealing with an XShmGetImage() failure, caused
    by a double free in _get_image_surface() (fdo#91967).
  + Fix invalid execution of ASCII85 data by the PS interpreter
    that the image operator didn't use, by flushing the extraneous
    data after drawing the image (fdo#84811).
  + Fix decoding of Adobe Photoshop's inverted CMYK JPEG files in
    PDF export.
  + Fix unbounded surface assertion in win32-print code.
  + Fix a data race in freed_pool discovered by Firefox's cairo
    usage. The patch adads atomic int load and store functions,
    with relaxed memory ordering (fdo#90318).
  + Cleanup debugging text sent to stdout instead of log
    (fdo#95227).
  + Fix build issue when using non-GNU strings utility (fdo#88639).
  + Fix build of cairo modules as regular modules, not as versioned
    shared libaries (fdo#29319).
  + Fix build on win32 using gcc 5.4.
  + Fix build of script backend to require zlib.
  + Update test suite reference images using Debian Jessie 64-bit
    and poppler current as of June, 2016.
  + Various improvements to documentation and tests, compiler
    warning fixes, and an assortment of code refactoring and
    cleanup.
- Drop cairo-modules-no-version.patch,
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch and
  cairo-xlib-double-free.patch: Fixed upstream.
- Drop libtool BuildRequires and stop passing autoreconf, we no
  longer have any patches touching the buildsystem.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="qzheng@suse.com" date="1529409600">- Add cairo-CVE-2017-9814.patch: Replace malloc with_cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
</package>
<package pkgid="7b8aa851c06ff649cfab3d62a1d7c834464011e71dcf934fa77c92dad7427282" name="libcairo-script-interpreter2" arch="x86_64">
  <version epoch="0" ver="1.15.10" rel="lp150.3.3.1"/>
  <changelog author="ro@suse.de" date="1431777600">- drop cairo-disable-lto.patch: lto was dropped upstream</changelog>
  <changelog author="zaitor@opensuse.org" date="1446465600">- Update to version 1.14.4:
  + Avoid appending empty slots to user data arrays. Fixes a memory
    consumption regression since commit 9341c254a.
  + Return a better error (file-not-found) when setting up pango on
    devices where the font files don't have read permissions.
  + Fix regression in the font size of canvas text in Inkscape when
    compiled with the Quartz backend (fdo#84324).
  + Fix _cairo_gl_shader_bind_matrix() to maintain compatibility
    with OpenGL ES 2.0. Manually transpose the matrix.
  + Fix incorrect font descriptor conversion when the font matrix
    yy is negative (fdo#90538).
  + Fix crash when using a complex path for clip and stroke due to
    discarding the intersection exactly at the top edge
    (fdo#74779).
  + Fix cairo_get_locale_decimal_point() on Android.
  + Fix compilation problem on AIX due to conflicting usage of
    symbol 'jmpbuf' (fdo#89339).
  + Fix broken rendering with XCB due to snapshotting of uploaded
    part of surfaces (fdo#67505).
  + Fix loss of alpha when copying a mask for a cairo recording
    surface, resulting in a double copy (fdo#73038, fdo#73901).
  + Fix incorrect recording of certain paths with script surfaces
    (fdo#91054).
  + Fix typo in definition of MAYBE_WARN in configure script
    (fdo#89750).
  + Fix use of filename variable after it's been freed (fdo#91206).
  + Fix out of bounds access when printing pattern (fdo#91266).
  + Fix incorrect size calculation in glyph cache unlocking for
    Cairo GL compositor (fdo#91321).
  + Fix memory leak in _cairo_gl_pattern_texture_setup()
    (fdo#91537).
  + Fix transparent images in win32-print (fdo#91835).
  + Fix _put_shm_image_boxes and _put_image_boxes when no SHM
    available with XCB.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008000">- Update to version 1.14.6:
  + Simple bugfix release to fix one Windows issue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008001">- Update to version 1.15.2:
  + Fix xcb/xlib compilation and calls. Make image boxes behave
    when SHM is not available.
  + Fix various issues with printing and transparent images on
    Win32.
  + Fix thin lines that don't show up when printing in Inkscape due
    to overly aggressive culling (fdo#77298).
  + Fix broken printing via pdf when glyph 0 is used for rendering,
    resulting in missing spaces and letters (fdo#89082).
  + Fix crash for certain glyphs in opentype fonts (fdo#91902).
  + Fix incorrect rendering of SVG paths with more than one
    subpath. If more than one trap is passed in then it's
    guaranteed that the returned traps will have their left edge to
    the left of their right edge, but if only one trap is passed in
    then the function always returns without doing anything
    (fdo#90984).
  + Improve rendering with Quarts to better match pixman's blending
    and filtering behavior.
- Drop cairo-render-thin-lines.patch: Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1450699200">- Add cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  to fix mutex deadlocks on certain documents (bsc#958844).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove patch:
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch.</changelog>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="zaitor@opensuse.org" date="1481457600">- Update to version 1.15.4:
  + The PDF backend has gained support for a range of widely used
    features, including thumbnails, page labels, metadata, document
    outlines, structured text, hyperlinks, and tags. Tags permit
    adding logical info such as headings, tables, figures, etc.
    that facilitates indexing, accessibility, text reflow,
    searching, and extraction of the tagged items to other
    software.
  + API Changes:
  - Added a cairo API to set up Win32 surfaces for HDC with alpha
    channels.
  - New API for added PDF functionality (see above), and new
    error status item for problems relating to PDF tagging.
  - New error status items for handling of GDI, libfreetype, and
    libpng errors, respectively.
  + Fix playback of recording surfaces into PDF surfaces, where
    objects with negative coordinates were not getting drawn. To
    address this, the coordinate systems for PDF and PS have been
    changed to match cairo's coordinate system. This allows
    recording surfaces to be emitted in cairo coordinates, and
    results in the same origin being used for all operations when
    using the recording surface XObject. Test cases for PDF and PS
    have also been updated accordingly (fdo#89232).
  + Fix "invalidfont" error on some printers when printing PDFs
    with embedded fonts that have glyphs (such as spaces) with
    num_contours == 0 (fdo#79897).
  + Fix missing glyphs such as thin dashes, which get scaled to 0
    in userspace and thus have their drawing operations culled
    (fdo#94615).
  + Fix other oddities caused by variously idiosyncratic fonts.
  + Fix deadlock when destruction of a scaled font indirectly
    triggers destruction of a second scaled font, causing the
    global cache to be locked twice (fdo#93891).
  + Fix X errors reported to applications when shmdt() is called
    before the Attach request is processed, due to missing xcb and
    xlib calls.
  + Fix random failure in record-paint-alpha-clip-mast test case,
    caused by an incorrect assumption that a deferred clear can be
    skipped (fdo#84330).
  + Fix crash when dealing with an XShmGetImage() failure, caused
    by a double free in _get_image_surface() (fdo#91967).
  + Fix invalid execution of ASCII85 data by the PS interpreter
    that the image operator didn't use, by flushing the extraneous
    data after drawing the image (fdo#84811).
  + Fix decoding of Adobe Photoshop's inverted CMYK JPEG files in
    PDF export.
  + Fix unbounded surface assertion in win32-print code.
  + Fix a data race in freed_pool discovered by Firefox's cairo
    usage. The patch adads atomic int load and store functions,
    with relaxed memory ordering (fdo#90318).
  + Cleanup debugging text sent to stdout instead of log
    (fdo#95227).
  + Fix build issue when using non-GNU strings utility (fdo#88639).
  + Fix build of cairo modules as regular modules, not as versioned
    shared libaries (fdo#29319).
  + Fix build on win32 using gcc 5.4.
  + Fix build of script backend to require zlib.
  + Update test suite reference images using Debian Jessie 64-bit
    and poppler current as of June, 2016.
  + Various improvements to documentation and tests, compiler
    warning fixes, and an assortment of code refactoring and
    cleanup.
- Drop cairo-modules-no-version.patch,
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch and
  cairo-xlib-double-free.patch: Fixed upstream.
- Drop libtool BuildRequires and stop passing autoreconf, we no
  longer have any patches touching the buildsystem.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="qzheng@suse.com" date="1529409600">- Add cairo-CVE-2017-9814.patch: Replace malloc with_cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
</package>
<package pkgid="e738103e349df4d4d968f90233bcb11cb2adadca3cadf67bcb6ad221608783c7" name="libcairo-script-interpreter2-32bit" arch="x86_64">
  <version epoch="0" ver="1.15.10" rel="lp150.3.3.1"/>
  <changelog author="ro@suse.de" date="1431777600">- drop cairo-disable-lto.patch: lto was dropped upstream</changelog>
  <changelog author="zaitor@opensuse.org" date="1446465600">- Update to version 1.14.4:
  + Avoid appending empty slots to user data arrays. Fixes a memory
    consumption regression since commit 9341c254a.
  + Return a better error (file-not-found) when setting up pango on
    devices where the font files don't have read permissions.
  + Fix regression in the font size of canvas text in Inkscape when
    compiled with the Quartz backend (fdo#84324).
  + Fix _cairo_gl_shader_bind_matrix() to maintain compatibility
    with OpenGL ES 2.0. Manually transpose the matrix.
  + Fix incorrect font descriptor conversion when the font matrix
    yy is negative (fdo#90538).
  + Fix crash when using a complex path for clip and stroke due to
    discarding the intersection exactly at the top edge
    (fdo#74779).
  + Fix cairo_get_locale_decimal_point() on Android.
  + Fix compilation problem on AIX due to conflicting usage of
    symbol 'jmpbuf' (fdo#89339).
  + Fix broken rendering with XCB due to snapshotting of uploaded
    part of surfaces (fdo#67505).
  + Fix loss of alpha when copying a mask for a cairo recording
    surface, resulting in a double copy (fdo#73038, fdo#73901).
  + Fix incorrect recording of certain paths with script surfaces
    (fdo#91054).
  + Fix typo in definition of MAYBE_WARN in configure script
    (fdo#89750).
  + Fix use of filename variable after it's been freed (fdo#91206).
  + Fix out of bounds access when printing pattern (fdo#91266).
  + Fix incorrect size calculation in glyph cache unlocking for
    Cairo GL compositor (fdo#91321).
  + Fix memory leak in _cairo_gl_pattern_texture_setup()
    (fdo#91537).
  + Fix transparent images in win32-print (fdo#91835).
  + Fix _put_shm_image_boxes and _put_image_boxes when no SHM
    available with XCB.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008000">- Update to version 1.14.6:
  + Simple bugfix release to fix one Windows issue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008001">- Update to version 1.15.2:
  + Fix xcb/xlib compilation and calls. Make image boxes behave
    when SHM is not available.
  + Fix various issues with printing and transparent images on
    Win32.
  + Fix thin lines that don't show up when printing in Inkscape due
    to overly aggressive culling (fdo#77298).
  + Fix broken printing via pdf when glyph 0 is used for rendering,
    resulting in missing spaces and letters (fdo#89082).
  + Fix crash for certain glyphs in opentype fonts (fdo#91902).
  + Fix incorrect rendering of SVG paths with more than one
    subpath. If more than one trap is passed in then it's
    guaranteed that the returned traps will have their left edge to
    the left of their right edge, but if only one trap is passed in
    then the function always returns without doing anything
    (fdo#90984).
  + Improve rendering with Quarts to better match pixman's blending
    and filtering behavior.
- Drop cairo-render-thin-lines.patch: Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1450699200">- Add cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  to fix mutex deadlocks on certain documents (bsc#958844).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove patch:
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch.</changelog>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="zaitor@opensuse.org" date="1481457600">- Update to version 1.15.4:
  + The PDF backend has gained support for a range of widely used
    features, including thumbnails, page labels, metadata, document
    outlines, structured text, hyperlinks, and tags. Tags permit
    adding logical info such as headings, tables, figures, etc.
    that facilitates indexing, accessibility, text reflow,
    searching, and extraction of the tagged items to other
    software.
  + API Changes:
  - Added a cairo API to set up Win32 surfaces for HDC with alpha
    channels.
  - New API for added PDF functionality (see above), and new
    error status item for problems relating to PDF tagging.
  - New error status items for handling of GDI, libfreetype, and
    libpng errors, respectively.
  + Fix playback of recording surfaces into PDF surfaces, where
    objects with negative coordinates were not getting drawn. To
    address this, the coordinate systems for PDF and PS have been
    changed to match cairo's coordinate system. This allows
    recording surfaces to be emitted in cairo coordinates, and
    results in the same origin being used for all operations when
    using the recording surface XObject. Test cases for PDF and PS
    have also been updated accordingly (fdo#89232).
  + Fix "invalidfont" error on some printers when printing PDFs
    with embedded fonts that have glyphs (such as spaces) with
    num_contours == 0 (fdo#79897).
  + Fix missing glyphs such as thin dashes, which get scaled to 0
    in userspace and thus have their drawing operations culled
    (fdo#94615).
  + Fix other oddities caused by variously idiosyncratic fonts.
  + Fix deadlock when destruction of a scaled font indirectly
    triggers destruction of a second scaled font, causing the
    global cache to be locked twice (fdo#93891).
  + Fix X errors reported to applications when shmdt() is called
    before the Attach request is processed, due to missing xcb and
    xlib calls.
  + Fix random failure in record-paint-alpha-clip-mast test case,
    caused by an incorrect assumption that a deferred clear can be
    skipped (fdo#84330).
  + Fix crash when dealing with an XShmGetImage() failure, caused
    by a double free in _get_image_surface() (fdo#91967).
  + Fix invalid execution of ASCII85 data by the PS interpreter
    that the image operator didn't use, by flushing the extraneous
    data after drawing the image (fdo#84811).
  + Fix decoding of Adobe Photoshop's inverted CMYK JPEG files in
    PDF export.
  + Fix unbounded surface assertion in win32-print code.
  + Fix a data race in freed_pool discovered by Firefox's cairo
    usage. The patch adads atomic int load and store functions,
    with relaxed memory ordering (fdo#90318).
  + Cleanup debugging text sent to stdout instead of log
    (fdo#95227).
  + Fix build issue when using non-GNU strings utility (fdo#88639).
  + Fix build of cairo modules as regular modules, not as versioned
    shared libaries (fdo#29319).
  + Fix build on win32 using gcc 5.4.
  + Fix build of script backend to require zlib.
  + Update test suite reference images using Debian Jessie 64-bit
    and poppler current as of June, 2016.
  + Various improvements to documentation and tests, compiler
    warning fixes, and an assortment of code refactoring and
    cleanup.
- Drop cairo-modules-no-version.patch,
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch and
  cairo-xlib-double-free.patch: Fixed upstream.
- Drop libtool BuildRequires and stop passing autoreconf, we no
  longer have any patches touching the buildsystem.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="qzheng@suse.com" date="1529409600">- Add cairo-CVE-2017-9814.patch: Replace malloc with_cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
</package>
<package pkgid="b3318b05ed8e532f414bacecb8fffa209ed7dbf39b4290a0497f14a7bc973b8a" name="libcairo2" arch="x86_64">
  <version epoch="0" ver="1.15.10" rel="lp150.3.3.1"/>
  <changelog author="ro@suse.de" date="1431777600">- drop cairo-disable-lto.patch: lto was dropped upstream</changelog>
  <changelog author="zaitor@opensuse.org" date="1446465600">- Update to version 1.14.4:
  + Avoid appending empty slots to user data arrays. Fixes a memory
    consumption regression since commit 9341c254a.
  + Return a better error (file-not-found) when setting up pango on
    devices where the font files don't have read permissions.
  + Fix regression in the font size of canvas text in Inkscape when
    compiled with the Quartz backend (fdo#84324).
  + Fix _cairo_gl_shader_bind_matrix() to maintain compatibility
    with OpenGL ES 2.0. Manually transpose the matrix.
  + Fix incorrect font descriptor conversion when the font matrix
    yy is negative (fdo#90538).
  + Fix crash when using a complex path for clip and stroke due to
    discarding the intersection exactly at the top edge
    (fdo#74779).
  + Fix cairo_get_locale_decimal_point() on Android.
  + Fix compilation problem on AIX due to conflicting usage of
    symbol 'jmpbuf' (fdo#89339).
  + Fix broken rendering with XCB due to snapshotting of uploaded
    part of surfaces (fdo#67505).
  + Fix loss of alpha when copying a mask for a cairo recording
    surface, resulting in a double copy (fdo#73038, fdo#73901).
  + Fix incorrect recording of certain paths with script surfaces
    (fdo#91054).
  + Fix typo in definition of MAYBE_WARN in configure script
    (fdo#89750).
  + Fix use of filename variable after it's been freed (fdo#91206).
  + Fix out of bounds access when printing pattern (fdo#91266).
  + Fix incorrect size calculation in glyph cache unlocking for
    Cairo GL compositor (fdo#91321).
  + Fix memory leak in _cairo_gl_pattern_texture_setup()
    (fdo#91537).
  + Fix transparent images in win32-print (fdo#91835).
  + Fix _put_shm_image_boxes and _put_image_boxes when no SHM
    available with XCB.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008000">- Update to version 1.14.6:
  + Simple bugfix release to fix one Windows issue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008001">- Update to version 1.15.2:
  + Fix xcb/xlib compilation and calls. Make image boxes behave
    when SHM is not available.
  + Fix various issues with printing and transparent images on
    Win32.
  + Fix thin lines that don't show up when printing in Inkscape due
    to overly aggressive culling (fdo#77298).
  + Fix broken printing via pdf when glyph 0 is used for rendering,
    resulting in missing spaces and letters (fdo#89082).
  + Fix crash for certain glyphs in opentype fonts (fdo#91902).
  + Fix incorrect rendering of SVG paths with more than one
    subpath. If more than one trap is passed in then it's
    guaranteed that the returned traps will have their left edge to
    the left of their right edge, but if only one trap is passed in
    then the function always returns without doing anything
    (fdo#90984).
  + Improve rendering with Quarts to better match pixman's blending
    and filtering behavior.
- Drop cairo-render-thin-lines.patch: Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1450699200">- Add cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  to fix mutex deadlocks on certain documents (bsc#958844).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove patch:
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch.</changelog>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="zaitor@opensuse.org" date="1481457600">- Update to version 1.15.4:
  + The PDF backend has gained support for a range of widely used
    features, including thumbnails, page labels, metadata, document
    outlines, structured text, hyperlinks, and tags. Tags permit
    adding logical info such as headings, tables, figures, etc.
    that facilitates indexing, accessibility, text reflow,
    searching, and extraction of the tagged items to other
    software.
  + API Changes:
  - Added a cairo API to set up Win32 surfaces for HDC with alpha
    channels.
  - New API for added PDF functionality (see above), and new
    error status item for problems relating to PDF tagging.
  - New error status items for handling of GDI, libfreetype, and
    libpng errors, respectively.
  + Fix playback of recording surfaces into PDF surfaces, where
    objects with negative coordinates were not getting drawn. To
    address this, the coordinate systems for PDF and PS have been
    changed to match cairo's coordinate system. This allows
    recording surfaces to be emitted in cairo coordinates, and
    results in the same origin being used for all operations when
    using the recording surface XObject. Test cases for PDF and PS
    have also been updated accordingly (fdo#89232).
  + Fix "invalidfont" error on some printers when printing PDFs
    with embedded fonts that have glyphs (such as spaces) with
    num_contours == 0 (fdo#79897).
  + Fix missing glyphs such as thin dashes, which get scaled to 0
    in userspace and thus have their drawing operations culled
    (fdo#94615).
  + Fix other oddities caused by variously idiosyncratic fonts.
  + Fix deadlock when destruction of a scaled font indirectly
    triggers destruction of a second scaled font, causing the
    global cache to be locked twice (fdo#93891).
  + Fix X errors reported to applications when shmdt() is called
    before the Attach request is processed, due to missing xcb and
    xlib calls.
  + Fix random failure in record-paint-alpha-clip-mast test case,
    caused by an incorrect assumption that a deferred clear can be
    skipped (fdo#84330).
  + Fix crash when dealing with an XShmGetImage() failure, caused
    by a double free in _get_image_surface() (fdo#91967).
  + Fix invalid execution of ASCII85 data by the PS interpreter
    that the image operator didn't use, by flushing the extraneous
    data after drawing the image (fdo#84811).
  + Fix decoding of Adobe Photoshop's inverted CMYK JPEG files in
    PDF export.
  + Fix unbounded surface assertion in win32-print code.
  + Fix a data race in freed_pool discovered by Firefox's cairo
    usage. The patch adads atomic int load and store functions,
    with relaxed memory ordering (fdo#90318).
  + Cleanup debugging text sent to stdout instead of log
    (fdo#95227).
  + Fix build issue when using non-GNU strings utility (fdo#88639).
  + Fix build of cairo modules as regular modules, not as versioned
    shared libaries (fdo#29319).
  + Fix build on win32 using gcc 5.4.
  + Fix build of script backend to require zlib.
  + Update test suite reference images using Debian Jessie 64-bit
    and poppler current as of June, 2016.
  + Various improvements to documentation and tests, compiler
    warning fixes, and an assortment of code refactoring and
    cleanup.
- Drop cairo-modules-no-version.patch,
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch and
  cairo-xlib-double-free.patch: Fixed upstream.
- Drop libtool BuildRequires and stop passing autoreconf, we no
  longer have any patches touching the buildsystem.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="qzheng@suse.com" date="1529409600">- Add cairo-CVE-2017-9814.patch: Replace malloc with_cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
</package>
<package pkgid="a3ef50dea784f513ec42d6f6bfb3423b5938365fe2beb876e07c6703cc333f1f" name="libcairo2-32bit" arch="x86_64">
  <version epoch="0" ver="1.15.10" rel="lp150.3.3.1"/>
  <changelog author="ro@suse.de" date="1431777600">- drop cairo-disable-lto.patch: lto was dropped upstream</changelog>
  <changelog author="zaitor@opensuse.org" date="1446465600">- Update to version 1.14.4:
  + Avoid appending empty slots to user data arrays. Fixes a memory
    consumption regression since commit 9341c254a.
  + Return a better error (file-not-found) when setting up pango on
    devices where the font files don't have read permissions.
  + Fix regression in the font size of canvas text in Inkscape when
    compiled with the Quartz backend (fdo#84324).
  + Fix _cairo_gl_shader_bind_matrix() to maintain compatibility
    with OpenGL ES 2.0. Manually transpose the matrix.
  + Fix incorrect font descriptor conversion when the font matrix
    yy is negative (fdo#90538).
  + Fix crash when using a complex path for clip and stroke due to
    discarding the intersection exactly at the top edge
    (fdo#74779).
  + Fix cairo_get_locale_decimal_point() on Android.
  + Fix compilation problem on AIX due to conflicting usage of
    symbol 'jmpbuf' (fdo#89339).
  + Fix broken rendering with XCB due to snapshotting of uploaded
    part of surfaces (fdo#67505).
  + Fix loss of alpha when copying a mask for a cairo recording
    surface, resulting in a double copy (fdo#73038, fdo#73901).
  + Fix incorrect recording of certain paths with script surfaces
    (fdo#91054).
  + Fix typo in definition of MAYBE_WARN in configure script
    (fdo#89750).
  + Fix use of filename variable after it's been freed (fdo#91206).
  + Fix out of bounds access when printing pattern (fdo#91266).
  + Fix incorrect size calculation in glyph cache unlocking for
    Cairo GL compositor (fdo#91321).
  + Fix memory leak in _cairo_gl_pattern_texture_setup()
    (fdo#91537).
  + Fix transparent images in win32-print (fdo#91835).
  + Fix _put_shm_image_boxes and _put_image_boxes when no SHM
    available with XCB.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008000">- Update to version 1.14.6:
  + Simple bugfix release to fix one Windows issue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008001">- Update to version 1.15.2:
  + Fix xcb/xlib compilation and calls. Make image boxes behave
    when SHM is not available.
  + Fix various issues with printing and transparent images on
    Win32.
  + Fix thin lines that don't show up when printing in Inkscape due
    to overly aggressive culling (fdo#77298).
  + Fix broken printing via pdf when glyph 0 is used for rendering,
    resulting in missing spaces and letters (fdo#89082).
  + Fix crash for certain glyphs in opentype fonts (fdo#91902).
  + Fix incorrect rendering of SVG paths with more than one
    subpath. If more than one trap is passed in then it's
    guaranteed that the returned traps will have their left edge to
    the left of their right edge, but if only one trap is passed in
    then the function always returns without doing anything
    (fdo#90984).
  + Improve rendering with Quarts to better match pixman's blending
    and filtering behavior.
- Drop cairo-render-thin-lines.patch: Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1450699200">- Add cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  to fix mutex deadlocks on certain documents (bsc#958844).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove patch:
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch.</changelog>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="zaitor@opensuse.org" date="1481457600">- Update to version 1.15.4:
  + The PDF backend has gained support for a range of widely used
    features, including thumbnails, page labels, metadata, document
    outlines, structured text, hyperlinks, and tags. Tags permit
    adding logical info such as headings, tables, figures, etc.
    that facilitates indexing, accessibility, text reflow,
    searching, and extraction of the tagged items to other
    software.
  + API Changes:
  - Added a cairo API to set up Win32 surfaces for HDC with alpha
    channels.
  - New API for added PDF functionality (see above), and new
    error status item for problems relating to PDF tagging.
  - New error status items for handling of GDI, libfreetype, and
    libpng errors, respectively.
  + Fix playback of recording surfaces into PDF surfaces, where
    objects with negative coordinates were not getting drawn. To
    address this, the coordinate systems for PDF and PS have been
    changed to match cairo's coordinate system. This allows
    recording surfaces to be emitted in cairo coordinates, and
    results in the same origin being used for all operations when
    using the recording surface XObject. Test cases for PDF and PS
    have also been updated accordingly (fdo#89232).
  + Fix "invalidfont" error on some printers when printing PDFs
    with embedded fonts that have glyphs (such as spaces) with
    num_contours == 0 (fdo#79897).
  + Fix missing glyphs such as thin dashes, which get scaled to 0
    in userspace and thus have their drawing operations culled
    (fdo#94615).
  + Fix other oddities caused by variously idiosyncratic fonts.
  + Fix deadlock when destruction of a scaled font indirectly
    triggers destruction of a second scaled font, causing the
    global cache to be locked twice (fdo#93891).
  + Fix X errors reported to applications when shmdt() is called
    before the Attach request is processed, due to missing xcb and
    xlib calls.
  + Fix random failure in record-paint-alpha-clip-mast test case,
    caused by an incorrect assumption that a deferred clear can be
    skipped (fdo#84330).
  + Fix crash when dealing with an XShmGetImage() failure, caused
    by a double free in _get_image_surface() (fdo#91967).
  + Fix invalid execution of ASCII85 data by the PS interpreter
    that the image operator didn't use, by flushing the extraneous
    data after drawing the image (fdo#84811).
  + Fix decoding of Adobe Photoshop's inverted CMYK JPEG files in
    PDF export.
  + Fix unbounded surface assertion in win32-print code.
  + Fix a data race in freed_pool discovered by Firefox's cairo
    usage. The patch adads atomic int load and store functions,
    with relaxed memory ordering (fdo#90318).
  + Cleanup debugging text sent to stdout instead of log
    (fdo#95227).
  + Fix build issue when using non-GNU strings utility (fdo#88639).
  + Fix build of cairo modules as regular modules, not as versioned
    shared libaries (fdo#29319).
  + Fix build on win32 using gcc 5.4.
  + Fix build of script backend to require zlib.
  + Update test suite reference images using Debian Jessie 64-bit
    and poppler current as of June, 2016.
  + Various improvements to documentation and tests, compiler
    warning fixes, and an assortment of code refactoring and
    cleanup.
- Drop cairo-modules-no-version.patch,
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch and
  cairo-xlib-double-free.patch: Fixed upstream.
- Drop libtool BuildRequires and stop passing autoreconf, we no
  longer have any patches touching the buildsystem.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="qzheng@suse.com" date="1529409600">- Add cairo-CVE-2017-9814.patch: Replace malloc with_cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
</package>
<package pkgid="ce0c6049ff4aa83f18b2d8019004324e38dc9ef7c5378c617057e55da278c086" name="libcdio++0" arch="x86_64">
  <version epoch="0" ver="0.94" rel="lp150.5.3.1"/>
  <changelog author="sagiben@gmail.com" date="1296388800">- Updated to version 0.82
- Upstream changes :
  * Remove all uses of CDIO_MIN_DRIVER,
  CDIO_MAX_DRIVER, CDIO_MIN_DEVICE_DRIVER or CDIO_MAX_DEVICE_DRIVER.
  * FreeBSD get_media_changed fixes
  * MingGW/Msys compilation issues
  * Add OS/2 driver
  * Cross compilations fixes and uclinix is like GNU/Linux
  * Numerous other bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1297166400">- Rename Shared Object package to libcdio12, conforming the
  libraries name.
- Adjust rpmlintrc to only ignore shared lib names of the -mini
  packages. This avoids missing shlib renames for the 'main'
  package.</changelog>
  <changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- one less _service file for factory</changelog>
  <changelog author="coolo@suse.com" date="1321185601">- add libtool as buildrequire</changelog>
  <changelog author="davejplater@gmail.com" date="1333713600">- Update to libcdio-0.83, removed need for libcdio-mini by adding
  linker library paths to sources in the spec file build section.
- Upstream changes:
  * Add retrieval SCSI sense reply from the most-recent MMC command.
  * Add exclusive read/write access for devices which is used for
  experimental writing/burning. Currently only on GNU/Linux and FreeBSD.
  * MMC bug fixes
  * FreeBSD drive list now shows empty drives.
  * Add ability to retrieve SCSI tuple for a name and/or fake one up for
  programs that wanto to cd-record compatible.
  * Tolerance for OS's without timezone in their struct tm (e.g. Solaris)
  added iso9660_set_{d,l}time_with_timezone
  * Add mmc_get_disk_erasable
  * Update MMC Feature Profile list, DVD Book types
  * Reduce range of seek in paranoia_seek to be int32_t
  * Remove some potential flaws found by Coverty's static analysis tool
  * Add ISRC track info to cd-info output.
  * Don't wrap-around volume adjustment for cdda-player.
  * Handle double-byte strings in CD-text
  * --no-header on cd-info omits copyright and warranty</changelog>
  <changelog author="davejplater@gmail.com" date="1334491200">- Update to 0.83.git from 14/04/2012 git head.
- libcdio-paranoia separated from libcdio due to license issues
  see bnc#756564</changelog>
  <changelog author="davejplater@gmail.com" date="1337342400">- Split cdio-utils to a linked package to prevent cycles due to
  utils dependancy on libvcdinfo and vcdimagers dependency on
  libcdio.</changelog>
  <changelog author="coolo@suse.com" date="1337947200">- enable rock support - for some bizzare reason it's not default
  (the help is saying otherwise, but it's obvious if you try to
  read from kiwi live cds)</changelog>
  <changelog author="coolo@suse.com" date="1347019200">- add makeinfo as explicit buildrequires</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="davejplater@gmail.com" date="1364904000">- Add url to spec source field to enable local source service.</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
</package>
<package pkgid="178d5cf878750576458a8e0c4ad243a2b4228f0836e0b459489ecef12f874ab7" name="libcdio++0-32bit" arch="x86_64">
  <version epoch="0" ver="0.94" rel="lp150.5.3.1"/>
  <changelog author="sagiben@gmail.com" date="1296388800">- Updated to version 0.82
- Upstream changes :
  * Remove all uses of CDIO_MIN_DRIVER,
  CDIO_MAX_DRIVER, CDIO_MIN_DEVICE_DRIVER or CDIO_MAX_DEVICE_DRIVER.
  * FreeBSD get_media_changed fixes
  * MingGW/Msys compilation issues
  * Add OS/2 driver
  * Cross compilations fixes and uclinix is like GNU/Linux
  * Numerous other bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1297166400">- Rename Shared Object package to libcdio12, conforming the
  libraries name.
- Adjust rpmlintrc to only ignore shared lib names of the -mini
  packages. This avoids missing shlib renames for the 'main'
  package.</changelog>
  <changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- one less _service file for factory</changelog>
  <changelog author="coolo@suse.com" date="1321185601">- add libtool as buildrequire</changelog>
  <changelog author="davejplater@gmail.com" date="1333713600">- Update to libcdio-0.83, removed need for libcdio-mini by adding
  linker library paths to sources in the spec file build section.
- Upstream changes:
  * Add retrieval SCSI sense reply from the most-recent MMC command.
  * Add exclusive read/write access for devices which is used for
  experimental writing/burning. Currently only on GNU/Linux and FreeBSD.
  * MMC bug fixes
  * FreeBSD drive list now shows empty drives.
  * Add ability to retrieve SCSI tuple for a name and/or fake one up for
  programs that wanto to cd-record compatible.
  * Tolerance for OS's without timezone in their struct tm (e.g. Solaris)
  added iso9660_set_{d,l}time_with_timezone
  * Add mmc_get_disk_erasable
  * Update MMC Feature Profile list, DVD Book types
  * Reduce range of seek in paranoia_seek to be int32_t
  * Remove some potential flaws found by Coverty's static analysis tool
  * Add ISRC track info to cd-info output.
  * Don't wrap-around volume adjustment for cdda-player.
  * Handle double-byte strings in CD-text
  * --no-header on cd-info omits copyright and warranty</changelog>
  <changelog author="davejplater@gmail.com" date="1334491200">- Update to 0.83.git from 14/04/2012 git head.
- libcdio-paranoia separated from libcdio due to license issues
  see bnc#756564</changelog>
  <changelog author="davejplater@gmail.com" date="1337342400">- Split cdio-utils to a linked package to prevent cycles due to
  utils dependancy on libvcdinfo and vcdimagers dependency on
  libcdio.</changelog>
  <changelog author="coolo@suse.com" date="1337947200">- enable rock support - for some bizzare reason it's not default
  (the help is saying otherwise, but it's obvious if you try to
  read from kiwi live cds)</changelog>
  <changelog author="coolo@suse.com" date="1347019200">- add makeinfo as explicit buildrequires</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="davejplater@gmail.com" date="1364904000">- Add url to spec source field to enable local source service.</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
</package>
<package pkgid="2b139b115e38527284d36ac6df0a2d8517e3910244b6d5f4352c5e5d54d0f6fc" name="libcdio" arch="src">
  <version epoch="0" ver="0.94" rel="lp150.5.3.1"/>
  <changelog author="sagiben@gmail.com" date="1296388800">- Updated to version 0.82
- Upstream changes :
  * Remove all uses of CDIO_MIN_DRIVER,
  CDIO_MAX_DRIVER, CDIO_MIN_DEVICE_DRIVER or CDIO_MAX_DEVICE_DRIVER.
  * FreeBSD get_media_changed fixes
  * MingGW/Msys compilation issues
  * Add OS/2 driver
  * Cross compilations fixes and uclinix is like GNU/Linux
  * Numerous other bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1297166400">- Rename Shared Object package to libcdio12, conforming the
  libraries name.
- Adjust rpmlintrc to only ignore shared lib names of the -mini
  packages. This avoids missing shlib renames for the 'main'
  package.</changelog>
  <changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- one less _service file for factory</changelog>
  <changelog author="coolo@suse.com" date="1321185601">- add libtool as buildrequire</changelog>
  <changelog author="davejplater@gmail.com" date="1333713600">- Update to libcdio-0.83, removed need for libcdio-mini by adding
  linker library paths to sources in the spec file build section.
- Upstream changes:
  * Add retrieval SCSI sense reply from the most-recent MMC command.
  * Add exclusive read/write access for devices which is used for
  experimental writing/burning. Currently only on GNU/Linux and FreeBSD.
  * MMC bug fixes
  * FreeBSD drive list now shows empty drives.
  * Add ability to retrieve SCSI tuple for a name and/or fake one up for
  programs that wanto to cd-record compatible.
  * Tolerance for OS's without timezone in their struct tm (e.g. Solaris)
  added iso9660_set_{d,l}time_with_timezone
  * Add mmc_get_disk_erasable
  * Update MMC Feature Profile list, DVD Book types
  * Reduce range of seek in paranoia_seek to be int32_t
  * Remove some potential flaws found by Coverty's static analysis tool
  * Add ISRC track info to cd-info output.
  * Don't wrap-around volume adjustment for cdda-player.
  * Handle double-byte strings in CD-text
  * --no-header on cd-info omits copyright and warranty</changelog>
  <changelog author="davejplater@gmail.com" date="1334491200">- Update to 0.83.git from 14/04/2012 git head.
- libcdio-paranoia separated from libcdio due to license issues
  see bnc#756564</changelog>
  <changelog author="davejplater@gmail.com" date="1337342400">- Split cdio-utils to a linked package to prevent cycles due to
  utils dependancy on libvcdinfo and vcdimagers dependency on
  libcdio.</changelog>
  <changelog author="coolo@suse.com" date="1337947200">- enable rock support - for some bizzare reason it's not default
  (the help is saying otherwise, but it's obvious if you try to
  read from kiwi live cds)</changelog>
  <changelog author="coolo@suse.com" date="1347019200">- add makeinfo as explicit buildrequires</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="davejplater@gmail.com" date="1364904000">- Add url to spec source field to enable local source service.</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
</package>
<package pkgid="9c6df49d2940434b20fc04e797583dd3b2c913d3bd1d3c3b543a9b98dca0868d" name="libcdio-devel" arch="x86_64">
  <version epoch="0" ver="0.94" rel="lp150.5.3.1"/>
  <changelog author="sagiben@gmail.com" date="1296388800">- Updated to version 0.82
- Upstream changes :
  * Remove all uses of CDIO_MIN_DRIVER,
  CDIO_MAX_DRIVER, CDIO_MIN_DEVICE_DRIVER or CDIO_MAX_DEVICE_DRIVER.
  * FreeBSD get_media_changed fixes
  * MingGW/Msys compilation issues
  * Add OS/2 driver
  * Cross compilations fixes and uclinix is like GNU/Linux
  * Numerous other bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1297166400">- Rename Shared Object package to libcdio12, conforming the
  libraries name.
- Adjust rpmlintrc to only ignore shared lib names of the -mini
  packages. This avoids missing shlib renames for the 'main'
  package.</changelog>
  <changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- one less _service file for factory</changelog>
  <changelog author="coolo@suse.com" date="1321185601">- add libtool as buildrequire</changelog>
  <changelog author="davejplater@gmail.com" date="1333713600">- Update to libcdio-0.83, removed need for libcdio-mini by adding
  linker library paths to sources in the spec file build section.
- Upstream changes:
  * Add retrieval SCSI sense reply from the most-recent MMC command.
  * Add exclusive read/write access for devices which is used for
  experimental writing/burning. Currently only on GNU/Linux and FreeBSD.
  * MMC bug fixes
  * FreeBSD drive list now shows empty drives.
  * Add ability to retrieve SCSI tuple for a name and/or fake one up for
  programs that wanto to cd-record compatible.
  * Tolerance for OS's without timezone in their struct tm (e.g. Solaris)
  added iso9660_set_{d,l}time_with_timezone
  * Add mmc_get_disk_erasable
  * Update MMC Feature Profile list, DVD Book types
  * Reduce range of seek in paranoia_seek to be int32_t
  * Remove some potential flaws found by Coverty's static analysis tool
  * Add ISRC track info to cd-info output.
  * Don't wrap-around volume adjustment for cdda-player.
  * Handle double-byte strings in CD-text
  * --no-header on cd-info omits copyright and warranty</changelog>
  <changelog author="davejplater@gmail.com" date="1334491200">- Update to 0.83.git from 14/04/2012 git head.
- libcdio-paranoia separated from libcdio due to license issues
  see bnc#756564</changelog>
  <changelog author="davejplater@gmail.com" date="1337342400">- Split cdio-utils to a linked package to prevent cycles due to
  utils dependancy on libvcdinfo and vcdimagers dependency on
  libcdio.</changelog>
  <changelog author="coolo@suse.com" date="1337947200">- enable rock support - for some bizzare reason it's not default
  (the help is saying otherwise, but it's obvious if you try to
  read from kiwi live cds)</changelog>
  <changelog author="coolo@suse.com" date="1347019200">- add makeinfo as explicit buildrequires</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="davejplater@gmail.com" date="1364904000">- Add url to spec source field to enable local source service.</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
</package>
<package pkgid="0516e3f14deee2e485bbbd345a5326e2e41d05ade1e1af96fe3eecf85f69a45d" name="libcdio16" arch="x86_64">
  <version epoch="0" ver="0.94" rel="lp150.5.3.1"/>
  <changelog author="sagiben@gmail.com" date="1296388800">- Updated to version 0.82
- Upstream changes :
  * Remove all uses of CDIO_MIN_DRIVER,
  CDIO_MAX_DRIVER, CDIO_MIN_DEVICE_DRIVER or CDIO_MAX_DEVICE_DRIVER.
  * FreeBSD get_media_changed fixes
  * MingGW/Msys compilation issues
  * Add OS/2 driver
  * Cross compilations fixes and uclinix is like GNU/Linux
  * Numerous other bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1297166400">- Rename Shared Object package to libcdio12, conforming the
  libraries name.
- Adjust rpmlintrc to only ignore shared lib names of the -mini
  packages. This avoids missing shlib renames for the 'main'
  package.</changelog>
  <changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- one less _service file for factory</changelog>
  <changelog author="coolo@suse.com" date="1321185601">- add libtool as buildrequire</changelog>
  <changelog author="davejplater@gmail.com" date="1333713600">- Update to libcdio-0.83, removed need for libcdio-mini by adding
  linker library paths to sources in the spec file build section.
- Upstream changes:
  * Add retrieval SCSI sense reply from the most-recent MMC command.
  * Add exclusive read/write access for devices which is used for
  experimental writing/burning. Currently only on GNU/Linux and FreeBSD.
  * MMC bug fixes
  * FreeBSD drive list now shows empty drives.
  * Add ability to retrieve SCSI tuple for a name and/or fake one up for
  programs that wanto to cd-record compatible.
  * Tolerance for OS's without timezone in their struct tm (e.g. Solaris)
  added iso9660_set_{d,l}time_with_timezone
  * Add mmc_get_disk_erasable
  * Update MMC Feature Profile list, DVD Book types
  * Reduce range of seek in paranoia_seek to be int32_t
  * Remove some potential flaws found by Coverty's static analysis tool
  * Add ISRC track info to cd-info output.
  * Don't wrap-around volume adjustment for cdda-player.
  * Handle double-byte strings in CD-text
  * --no-header on cd-info omits copyright and warranty</changelog>
  <changelog author="davejplater@gmail.com" date="1334491200">- Update to 0.83.git from 14/04/2012 git head.
- libcdio-paranoia separated from libcdio due to license issues
  see bnc#756564</changelog>
  <changelog author="davejplater@gmail.com" date="1337342400">- Split cdio-utils to a linked package to prevent cycles due to
  utils dependancy on libvcdinfo and vcdimagers dependency on
  libcdio.</changelog>
  <changelog author="coolo@suse.com" date="1337947200">- enable rock support - for some bizzare reason it's not default
  (the help is saying otherwise, but it's obvious if you try to
  read from kiwi live cds)</changelog>
  <changelog author="coolo@suse.com" date="1347019200">- add makeinfo as explicit buildrequires</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="davejplater@gmail.com" date="1364904000">- Add url to spec source field to enable local source service.</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
</package>
<package pkgid="927ceff055aec31a37db60f56d0123c07a6da7174f5b7fff1121a8663c719797" name="libcdio16-32bit" arch="x86_64">
  <version epoch="0" ver="0.94" rel="lp150.5.3.1"/>
  <changelog author="sagiben@gmail.com" date="1296388800">- Updated to version 0.82
- Upstream changes :
  * Remove all uses of CDIO_MIN_DRIVER,
  CDIO_MAX_DRIVER, CDIO_MIN_DEVICE_DRIVER or CDIO_MAX_DEVICE_DRIVER.
  * FreeBSD get_media_changed fixes
  * MingGW/Msys compilation issues
  * Add OS/2 driver
  * Cross compilations fixes and uclinix is like GNU/Linux
  * Numerous other bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1297166400">- Rename Shared Object package to libcdio12, conforming the
  libraries name.
- Adjust rpmlintrc to only ignore shared lib names of the -mini
  packages. This avoids missing shlib renames for the 'main'
  package.</changelog>
  <changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- one less _service file for factory</changelog>
  <changelog author="coolo@suse.com" date="1321185601">- add libtool as buildrequire</changelog>
  <changelog author="davejplater@gmail.com" date="1333713600">- Update to libcdio-0.83, removed need for libcdio-mini by adding
  linker library paths to sources in the spec file build section.
- Upstream changes:
  * Add retrieval SCSI sense reply from the most-recent MMC command.
  * Add exclusive read/write access for devices which is used for
  experimental writing/burning. Currently only on GNU/Linux and FreeBSD.
  * MMC bug fixes
  * FreeBSD drive list now shows empty drives.
  * Add ability to retrieve SCSI tuple for a name and/or fake one up for
  programs that wanto to cd-record compatible.
  * Tolerance for OS's without timezone in their struct tm (e.g. Solaris)
  added iso9660_set_{d,l}time_with_timezone
  * Add mmc_get_disk_erasable
  * Update MMC Feature Profile list, DVD Book types
  * Reduce range of seek in paranoia_seek to be int32_t
  * Remove some potential flaws found by Coverty's static analysis tool
  * Add ISRC track info to cd-info output.
  * Don't wrap-around volume adjustment for cdda-player.
  * Handle double-byte strings in CD-text
  * --no-header on cd-info omits copyright and warranty</changelog>
  <changelog author="davejplater@gmail.com" date="1334491200">- Update to 0.83.git from 14/04/2012 git head.
- libcdio-paranoia separated from libcdio due to license issues
  see bnc#756564</changelog>
  <changelog author="davejplater@gmail.com" date="1337342400">- Split cdio-utils to a linked package to prevent cycles due to
  utils dependancy on libvcdinfo and vcdimagers dependency on
  libcdio.</changelog>
  <changelog author="coolo@suse.com" date="1337947200">- enable rock support - for some bizzare reason it's not default
  (the help is saying otherwise, but it's obvious if you try to
  read from kiwi live cds)</changelog>
  <changelog author="coolo@suse.com" date="1347019200">- add makeinfo as explicit buildrequires</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="davejplater@gmail.com" date="1364904000">- Add url to spec source field to enable local source service.</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
</package>
<package pkgid="3be51ae333528dedadb3c3fd3f77efa5965e4de1b5b4369d2425bd05613f71e3" name="libclamav7" arch="x86_64">
  <version epoch="0" ver="0.100.1" rel="lp150.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1457006400">- Update to version 0.99.1
  * hwp5.x: fix for streams without names
  * libclamav: yara: avoid unaliged access to 64bit variable
  * patch by Mark Allan to add show-progress option to freshclam.
  * added 'CustomXML' as trigger for likely OOXML
  * ClamAV 0.99.1 beta1 release.
  * add scanning options for scanning xml-based documents
  (MSXML, OOXML, HWPML) and HWP3
  * add dconfs for XDP, MBR, GPT, APM, OOXML, MSXML, and HWP formats
  * hwp: scan decompressed data on limits exceeded
  * Fix for signature name length&lt;3 in .ign &amp; .ign2 CVD files.
  * Change RTF file magic from '{\rtf' to '{\rt'
  * zeroing out buffer at allocation to avoid writing uninitialized
  bytes to a file
  * adding check for compressed input stream
  * clean up and boost accuracy to detecting OOXML documents
  * Fix crash when using pcre statistics due to inconsistent memory
  management function calls
  * adding check to verify a valid number of rounds for rijndael aes
  encryption/decryption
  * fixing edge case revealed by unit testing
  * let html be scanned raw when --scan-html=no is in effect.
  * fix crash due to memory overlay with crafted 7z files.
  * fixing off by one OOB write in htmlnorm
  * fixing autoit OOB bufferread
  * sigtool: adding support for decoding cdb sigs
  * fix embedded http links.
  * fix regression crash on sid 1005597703 due to uninitialzed
  (i.e., garbage initialized) structure.
  * corrects mso stream prefix value for big endian processors.
  * ooxml_hwp: add support for filetyping and preclassification
  * hwpole2: new filetype and handler for hwp embedded ole2 files
  * fixing possible oob dereference when parsing mbox files
  * adding explicit wwunpack oob checks
  * fixing edge case where a null terminator was unintentionally
  written into an adjacent buffer.
  * hwpml: use msxml_parser callback scanner for binary data
  * msxml_parser: add callback-based scanning mechanism
  * HWPML: added hwpml_keys for hwpml parsing
  * add HMPML filetype, tab fixes in filetype.c
  * Hwp3.x: inflate compressed segment and offset tracking
  * Hwp3.x file header parsing and preclass
  * pcre: fixed minimum pcre version check
  * fix detection of libcheck without pkg-config file
  * add HWP5 filetype tracking to preclassification
  * add HWP 3.x internal filetypes
  * add hwp5 contents to preclass set
  * proper identification of HWP file format
  * strengthen file typing for OOXML.
  * normalization of whitelist signatures
  * github issue #9 - wrong length &amp; offset.</changelog>
  <changelog author="martin.liska@suse.com" date="1466164800">- Change default C++ std to -std=gnu++98.</changelog>
  <changelog author="fweiss@suse.com" date="1466683200">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged manually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="jengelh@inai.de" date="1469102400">- Trim useless words from description and fix spellos.
  Test for user/group existence before adding and always show
  errors when they occur.</changelog>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
</package>
<package pkgid="f6664512929619fa784d2fe2f6473d970acd2b18585faebd99dd2c30458e9951" name="libclamav7" arch="x86_64">
  <version epoch="0" ver="0.100.2" rel="lp150.2.6.1"/>
  <changelog author="martin.liska@suse.com" date="1466164800">- Change default C++ std to -std=gnu++98.</changelog>
  <changelog author="fweiss@suse.com" date="1466683200">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged manually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="jengelh@inai.de" date="1469102400">- Trim useless words from description and fix spellos.
  Test for user/group existence before adding and always show
  errors when they occur.</changelog>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
</package>
<package pkgid="c5adac779c96bf855c4270ea82e8b1a8f72cff8037b8289d99efd7a8128d1253" name="libclammspack0" arch="x86_64">
  <version epoch="0" ver="0.100.1" rel="lp150.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1457006400">- Update to version 0.99.1
  * hwp5.x: fix for streams without names
  * libclamav: yara: avoid unaliged access to 64bit variable
  * patch by Mark Allan to add show-progress option to freshclam.
  * added 'CustomXML' as trigger for likely OOXML
  * ClamAV 0.99.1 beta1 release.
  * add scanning options for scanning xml-based documents
  (MSXML, OOXML, HWPML) and HWP3
  * add dconfs for XDP, MBR, GPT, APM, OOXML, MSXML, and HWP formats
  * hwp: scan decompressed data on limits exceeded
  * Fix for signature name length&lt;3 in .ign &amp; .ign2 CVD files.
  * Change RTF file magic from '{\rtf' to '{\rt'
  * zeroing out buffer at allocation to avoid writing uninitialized
  bytes to a file
  * adding check for compressed input stream
  * clean up and boost accuracy to detecting OOXML documents
  * Fix crash when using pcre statistics due to inconsistent memory
  management function calls
  * adding check to verify a valid number of rounds for rijndael aes
  encryption/decryption
  * fixing edge case revealed by unit testing
  * let html be scanned raw when --scan-html=no is in effect.
  * fix crash due to memory overlay with crafted 7z files.
  * fixing off by one OOB write in htmlnorm
  * fixing autoit OOB bufferread
  * sigtool: adding support for decoding cdb sigs
  * fix embedded http links.
  * fix regression crash on sid 1005597703 due to uninitialzed
  (i.e., garbage initialized) structure.
  * corrects mso stream prefix value for big endian processors.
  * ooxml_hwp: add support for filetyping and preclassification
  * hwpole2: new filetype and handler for hwp embedded ole2 files
  * fixing possible oob dereference when parsing mbox files
  * adding explicit wwunpack oob checks
  * fixing edge case where a null terminator was unintentionally
  written into an adjacent buffer.
  * hwpml: use msxml_parser callback scanner for binary data
  * msxml_parser: add callback-based scanning mechanism
  * HWPML: added hwpml_keys for hwpml parsing
  * add HMPML filetype, tab fixes in filetype.c
  * Hwp3.x: inflate compressed segment and offset tracking
  * Hwp3.x file header parsing and preclass
  * pcre: fixed minimum pcre version check
  * fix detection of libcheck without pkg-config file
  * add HWP5 filetype tracking to preclassification
  * add HWP 3.x internal filetypes
  * add hwp5 contents to preclass set
  * proper identification of HWP file format
  * strengthen file typing for OOXML.
  * normalization of whitelist signatures
  * github issue #9 - wrong length &amp; offset.</changelog>
  <changelog author="martin.liska@suse.com" date="1466164800">- Change default C++ std to -std=gnu++98.</changelog>
  <changelog author="fweiss@suse.com" date="1466683200">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged manually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="jengelh@inai.de" date="1469102400">- Trim useless words from description and fix spellos.
  Test for user/group existence before adding and always show
  errors when they occur.</changelog>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
</package>
<package pkgid="0da6396048afd63075b5f42da5085a7649db796bbb0da9007f2fda0c0c8d76f5" name="libclammspack0" arch="x86_64">
  <version epoch="0" ver="0.100.2" rel="lp150.2.6.1"/>
  <changelog author="martin.liska@suse.com" date="1466164800">- Change default C++ std to -std=gnu++98.</changelog>
  <changelog author="fweiss@suse.com" date="1466683200">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged manually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="jengelh@inai.de" date="1469102400">- Trim useless words from description and fix spellos.
  Test for user/group existence before adding and always show
  errors when they occur.</changelog>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
</package>
<package pkgid="a71bcddb6fa8f1b798df71cdbeb5773ebeae02e74ca8de346c6726292c78bcbf" name="libclang5-32bit" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="6c7880af16758528c12794b01004765d1ec1b057fab9acf80078bca3f4c5fa2e" name="libclang5" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="f487d13373d27cce43c8e75924832a4b9fac89cbae1df4f97a6ebb1536cd00ef" name="libcodec2-0_6" arch="x86_64">
  <version epoch="0" ver="0.6" rel="lp150.2.3.2"/>
  <changelog author="dl8fcl@darc.de" date="1367236800">- first try</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1424001600">- version 0.3svn1917
- mods based on Fedora package</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899200">- version 0.4</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899201">- patch to install copm_prim.h needed by freedv2</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1442577600">- version 0.4.1</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1444564800">- version 0.5</changelog>
  <changelog author="aloisio@gmx.com" date="1484395200">- Version 0.5.1
  * Updated golay
- Spec cleanup
- Added codec2-rpmlintrc</changelog>
  <changelog author="dl8fcl@darc.de" date="1484654400">- Copyrigth information of spec file removed</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1489579200">- Update description with new bit rates from homepage.</changelog>
  <changelog author="mardnh@gmx.de" date="1492344000">- Update to version 0.6:
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1496145600">- Update licensing information</changelog>
  <changelog author="mpluskal@suse.com" date="1531828800">- Add baselibs.conf</changelog>
</package>
<package pkgid="d5fa840e8691ae0f220994f369b86c192101169f32ffe95ff7c1400f56bbf168" name="libcom_err-devel" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp150.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1434801600">- e2fsprogs-1.41.1-splash_support.patch: Drop it, this patch
  depends on the old in kernel "bootsplash" patches that were
  removed after the introduction of plymouth.</changelog>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
</package>
<package pkgid="2783edca5c5db0fa0f1b099f79887df2814121215d53a961ce0b7b8743e53579" name="libcom_err-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp150.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1434801600">- e2fsprogs-1.41.1-splash_support.patch: Drop it, this patch
  depends on the old in kernel "bootsplash" patches that were
  removed after the introduction of plymouth.</changelog>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
</package>
<package pkgid="280a0f22ca517f0414a0d32b4cbc1ccc30b7bef7bc96789b3f6fbd12aa3222e0" name="libcom_err-devel-static" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp150.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1434801600">- e2fsprogs-1.41.1-splash_support.patch: Drop it, this patch
  depends on the old in kernel "bootsplash" patches that were
  removed after the introduction of plymouth.</changelog>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
</package>
<package pkgid="eb4c8749c8c9ba6b84d93bbaf41d7bc378ea392534cda89208f197500292f961" name="libcom_err2" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp150.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1434801600">- e2fsprogs-1.41.1-splash_support.patch: Drop it, this patch
  depends on the old in kernel "bootsplash" patches that were
  removed after the introduction of plymouth.</changelog>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
</package>
<package pkgid="40dc57d3cc751723fe9521658f038f3be69e2b098d29b81972daa5cec5612896" name="libcom_err2-32bit" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp150.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1434801600">- e2fsprogs-1.41.1-splash_support.patch: Drop it, this patch
  depends on the old in kernel "bootsplash" patches that were
  removed after the introduction of plymouth.</changelog>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
</package>
<package pkgid="1aafa72e84ae54ec5ba31bbb8aab33755fea8ce1d4e64af58563175b0d7b3b02" name="libcontainers-common" arch="noarch">
  <version epoch="0" ver="0.0.1" rel="lp150.2.1"/>
  <changelog author="vrothberg@suse.com" date="1518091200">- Add libcontainers-common package.</changelog>
  <changelog author="vrothberg@suse.com" date="1520251200">- Configuration files should generally be tagged as %config(noreplace) in order
  to keep the modified config files and to avoid losing data when the package
  is being updated.
  feature#crio</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Added /usr/share/containers/oci/hooks.d and /etc/containers/oci/hooks.d
  to the package. These are used by tools like cri-o and podman to store
  custom hooks.</changelog>
  <changelog author="vrothberg@suse.com" date="1534161600">- Make libcontainers-common arch independent.
- Add LICENSE.</changelog>
  <changelog author="vrothberg@suse.com" date="1535371200">- Consolidate libcontainers-{common,image,storage} into one package,
  libcontainers-common. That's the way upstream intended all libraries from
  github.com/containers to be packaged. It facilitates updating and maintaining
  the package, as all configs and manpages come from a central source.
  Note that the `storage` binary that previously has been provided by the
  libcontainers-storage package is not provided anymore as, despite the claims
  in the manpages, it is not intended for production use.</changelog>
  <changelog author="vrothberg@suse.com" date="1535371201">- storage.conf: comment out options that are not supported by btrfs.
  This simplifies switching the driver as it avoids the whack-a-mole
  of commenting out "unsupported" options.</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1542024000">- Use seccomp.json from github.com/containers/libpod to align with the
  upstream defaults.
- Update to the latest image and storage to pull in improvements to the
  manpages.</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1542024001">- Add oci-hooks(5) manpage from libpod.</changelog>
</package>
<package pkgid="76fb70fd801c9a77bf0976dbd4e23e9a8b4b75435cb923cf50192763e29444c5" name="libcontainers-common" arch="src">
  <version epoch="0" ver="0.0.1" rel="lp150.2.1"/>
  <changelog author="vrothberg@suse.com" date="1518091200">- Add libcontainers-common package.</changelog>
  <changelog author="vrothberg@suse.com" date="1520251200">- Configuration files should generally be tagged as %config(noreplace) in order
  to keep the modified config files and to avoid losing data when the package
  is being updated.
  feature#crio</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Added /usr/share/containers/oci/hooks.d and /etc/containers/oci/hooks.d
  to the package. These are used by tools like cri-o and podman to store
  custom hooks.</changelog>
  <changelog author="vrothberg@suse.com" date="1534161600">- Make libcontainers-common arch independent.
- Add LICENSE.</changelog>
  <changelog author="vrothberg@suse.com" date="1535371200">- Consolidate libcontainers-{common,image,storage} into one package,
  libcontainers-common. That's the way upstream intended all libraries from
  github.com/containers to be packaged. It facilitates updating and maintaining
  the package, as all configs and manpages come from a central source.
  Note that the `storage` binary that previously has been provided by the
  libcontainers-storage package is not provided anymore as, despite the claims
  in the manpages, it is not intended for production use.</changelog>
  <changelog author="vrothberg@suse.com" date="1535371201">- storage.conf: comment out options that are not supported by btrfs.
  This simplifies switching the driver as it avoids the whack-a-mole
  of commenting out "unsupported" options.</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1542024000">- Use seccomp.json from github.com/containers/libpod to align with the
  upstream defaults.
- Update to the latest image and storage to pull in improvements to the
  manpages.</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1542024001">- Add oci-hooks(5) manpage from libpod.</changelog>
</package>
<package pkgid="6cb87681c79748ef624e2fd3ef43852bbf752321c60b0c761e62caad36311839" name="libcpupower0" arch="x86_64">
  <version epoch="0" ver="4.15" rel="lp150.2.3.1"/>
  <changelog author="trenn@suse.de" date="1396008000">- Update to latest turbostat version (git 2d6e532279ddf30188d5fbd)
  bnc#866862, bnc#869071, bnc#869809
- Adjust MSR include path
  add make_header_file_passable_from_outside.patch</changelog>
  <changelog author="trenn@suse.de" date="1396267200">- If root, try to load msr driver on x86 if /dev/cpu/0/msr is not avail
  Add cpupower-always_try_to_load_msr_driver_as_root.patch</changelog>
  <changelog author="trenn@suse.de" date="1396353600">- Do return 0 if cpupower info -b is called instead of the perf bias value
  which is already printed to stdout.
  Add cpupower-return_zero_on_success.patch
- Remove mc and smt scheduler knobs. These do not exist anymore in latest
  kernels for quite a while now.
  Add cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1407844800">- Update turbostat to latest 3.17 kernel version (in fact it is 3.16-rc7)
  This fixes bnc#891523</changelog>
  <changelog author="trenn@suse.de" date="1407931200">- Fix cpupower_export_tarball_from_git.sh script and make sure msr-index.h
  is included in the turbostat tarball.</changelog>
  <changelog author="trenn@suse.de" date="1422446400">- Update cpupower and turbostat to latest git kernel HEAD version
  this currently is 3.19-rc6, but it is expected that there are no
  changes anymore and the version gets named 3.19 already.
  The patches are already included mainline and get removed from osc:
    cpupower_disable_by_latency.patch
    add_idle_manpages_in_Makefile.patch
    cpupower-always_try_to_load_msr_driver_as_root.patch
    cpupower-return_zero_on_success.patch
    cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1422446401">- Make sources also build against 13.1 and older by providing
  asm-index.h which is included in linux-glibc-devel in newer
  distributions
  * Add turbostat_set_asm_header_fixed.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1452081600">- Drop dead link.
- Fix Obsoletes statement, cpufrequtils package versions were
  greater than cpupower package versions so we must obsolete all
  versions of cpufrequtils.</changelog>
  <changelog author="trenn@suse.de" date="1453809600">- Move from kernel version to turbostat internal version for turbostat
- Add latest turbostat sources (latest git commit: 30f05309bde492)
- Adds Skylake, Broadwell and Knights Landing support for turbostat
  (fate#319798, fate#319183, fate#319516)</changelog>
  <changelog author="trenn@suse.de" date="1461153600">- Add cpuidle functions to public libcpupower
  * Add library_cleanup.patch</changelog>
  <changelog author="trenn@suse.de" date="1461844800">- Update turbostat to version 4.12
- Update cpupower to latest sources
- Let turbostat only build against a local msr-index.h
  Also add the msr-index.h export to the tarball from git repo script
  * Delete make_header_file_passable_from_outside.patch</changelog>
  <changelog author="trenn@suse.de" date="1490184000">- Update cpupower and turbostat to latest kernel v4.10 sources
  D library_cleanup.patch
- Change .c file header file modification, modify in Makefile instead:
  D turbostat_set_asm_header_fixed.patch
  A turbostat_makefile_fix_asm_header.patch
- fate #320908: KBL: Turbostat for KBL H/S &amp; U/Y
- fate #321191: [KNL] turbostat reports to report corect MSR_TURBO_RATIO_LIMIT
  information
- fate #321193: [KNL] turbostat should report correct cpu clock values for
  Knights Landing
- fate #321285: turbostat support for Skylake-SP server
- fate #321286: turbostat support for Harrisonville (Denverton SoC)
- fate #321925: [HPC, KNM, kernel] turbostat support</changelog>
  <changelog author="trenn@suse.de" date="1493812800">- Update to latest mainline sources
- turbostat changed versioning scheme (we now have version 17.04.12)</changelog>
  <changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>
  <changelog author="jengelh@inai.de" date="1507204801">- Rectify RPM groups. Replace old $RPM_ shell variables by macros.
  Apply consistent styling to macros.</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041332,bsc#996052,bsc#976983]</changelog>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
- By that fix a sysfs read bug missing the final '\0' (bsc#1103294)
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
</package>
<package pkgid="f79ce1c2893c24fb046f4f7686ec998da0fec7192148a88ed14c59349bbc5b70" name="libcrypto43" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
  <changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
  <changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
  <changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
  <changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1493899200">- Update to new upstream release 2.5.4
  * Reverted a previous change that forced consistency between
    return value and error code when specifing a certificate
    verification callback, since this breaks the documented API.
  * Switched Linux getrandom() usage to non-blocking mode,
    continuing to use fallback mechanims if unsuccessful.
  * Fixed a bug caused by the return value being set early to
    signal successful DTLS cookie validation.</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict for split openssl packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494331200">- Add conflict between libressl and the main versioned packages too</changelog>
  <changelog author="jengelh@inai.de" date="1503576000">- Update to new upstream release 2.5.5
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.</changelog>
  <changelog author="jengelh@inai.de" date="1504267200">- Update to new upstream release 2.6.0
  * Added support for providing CRLs to libtls. Once a CRL is
    provided, we enable CRL checking for the full certificate
    chain.
  * Allow non-compliant clients using IP literal addresses with
    SNI to connect to a server using libtls.
  * Avoid a potential NULL pointer dereference in
    d2i_ECPrivateKey().
  * Added definitions for three OIDs used in EV certificates.
  * Plugged a memory leak in tls_ocsp_free.
  * Added tls_peer_cert_chain_pem, tls_cert_hash, and
    tls_hex_string to libtls, useful in private certificate
    validation callbacks.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Added tls_keypair_clear_key for clearing key material.
  * Removed inconsistent IPv6 handling from
    BIO_get_accept_socket, simplified BIO_get_host_ip and
    BIO_accept.
  * Fixed the openssl(1) ca command so that is generates
    certificates with RFC 5280-conformant time.
  * Added ASN1_TIME_set_tm to set an asn1 from a struct tm *.
  * Added SSL{,_CTX}_set_{min,max}_proto_version() functions.
  * Added HKDF (HMAC Key Derivation Function) from BoringSSL
  * Providea a tls_unload_file() function that frees the memory
    returned from a tls_load_file() call, ensuring that it the
    contents become inaccessible. This is specifically needed on
    platforms where the library allocators may be different from
    the application allocator.
  * Perform reference counting for tls_config. This allows
    tls_config_free() to be called as soon as it has been passed
    to the final tls_configure() call, simplifying lifetime
    tracking for the application.
  * Moved internal state of SSL and other structures to be
    opaque.
  * Dropped cipher suites with DSS authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update to new upstream release 2.6.2
  * Provide a useful error with libtls if there are no OCSP URLs
    in a peer certificate.
  * Keep track of which keypair is in use by a TLS context,
    fixing a bug where a TLS server with SNI would only return
    the OCSP staple for the default keypair.
- Update to new upstream release 2.6.1
  * Added tls_config_set_ecdhecurves() to libtls, which allows
    the names of the eliptical curves that may be used during
    client and server key exchange to be specified.
  * Removed support for DSS/DSA, since we removed the cipher
    suites a while back.
  * Removed NPN support. NPN was never standardised and the last
    draft expired in October 2012. ALPN was standardised.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS
    termintation.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Implemented the SSL_CTX_set_min_proto_version(3) API.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.</changelog>
  <changelog author="jengelh@inai.de" date="1510056000">- Update to new upstream release 2.6.3
  * Added support for providing CRLs to libtls - once a CRL is
    provided via tls_config_set_crl_file(3) or
    tls_config_set_crl_mem(3), CRL checking is enabled and
    required for the full certificate chain.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Relaxed SNI validation to allow non-RFC-compliant clients
    using literal IP addresses with SNI to connect to a
    libtls-based TLS server.
  * Added tls_peer_cert_chain_pem() to libtls, useful in private
    certificate validation callbacks such as those in relayd.
  * Added SSL{,_CTX}_set_{min,max}_proto_version(3) functions.
  * Imported HKDF (HMAC Key Derivation Function) from BoringSSL.
  * Dropped cipher suites using DSS authentication.
  * Removed support for DSS/DSA from libssl.
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.
  * Removed NPN support - NPN was never standardised and the last
    draft expired in October 2012.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS termination.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.
- Add des-fcrypt.diff [boo#1065363]</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Add extra-symver.diff</changelog>
  <changelog author="jengelh@inai.de" date="1513857600">- Update to new upstream release 2.6.4
  * Make tls_config_parse_protocols() work correctly when passed
    a NULL pointer for a protocol string.
  * Correct TLS extensions handling when no extensions are
    present.</changelog>
  <changelog author="jengelh@inai.de" date="1521806400">- Update to new upstream release 2.7.0
  * Added support for many OpenSSL 1.0.2 and 1.1 APIs.
  * Added support for automatic library initialization in
    libcrypto, libssl, and libtls.
  * Converted more packet handling methods to CBB, which improves
    resiliency when generating TLS messages.
  * Completed TLS extension handling rewrite, improving consistency
    of checks for malformed and duplicate extensions.
  * Rewrote ASN1_TYPE_ get,set _octetstring() using templated
    ASN.1. This removes the last remaining use of the old M_ASN1_
    macros (asn1_mac.h) from API that needs to continue to exist.
  * Added support for client-side session resumption in libtls.
  * A libtls client can specify a session file descriptor (a
    regular file with appropriate ownership and permissions) and
    libtls will manage reading and writing of session data across
    TLS handshakes.
  * Merged more DTLS support into the regular TLS code path.</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Update to new upstream release 2.7.1
  * Fixed a bug in int_x509_param_set_hosts, calling strlen() if
    name length provided is 0 to match the OpenSSL behaviour.
    [CVE-2018-8970, boo#1086778]</changelog>
  <changelog author="jengelh@inai.de" date="1522670400">- Update to new upstream release 2.7.2
  * Updated and added extensive new HISTORY sections to
    the API manuals.</changelog>
  <changelog author="jengelh@inai.de" date="1525694400">- Update to new upstream release 2.7.3
  * Removed incorrect NULL checks in DH_set0_key().
  * Limited tls_config_clear_keys() to only clear private keys.</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Update to new upstream release 2.8.0
  * Fixed a pair of 20+ year-old bugs in X509_NAME_add_entry.
  * Tighten up checks for various X509_VERIFY_PARAM functions,
    'poisoning' parameters so that an unverified certificate
    cannot be used if it fails verification.
  * Fixed a potential memory leak on failure in ASN1_item_digest.
  * Fixed a potential memory alignment crash in
    asn1_item_combine_free.
  * Removed unused SSL3_FLAGS_DELAY_CLIENT_FINISHED and
    SSL3_FLAGS_POP_BUFFER flags in write path, simplifying IO
    paths.
  * Removed SSL_OP_TLS_ROLLBACK_BUG buggy client workarounds.
  * Added const annotations to many existing APIs from OpenSSL,
    making interoperability easier for downstream applications.
  * Added a missing bounds check in c2i_ASN1_BIT_STRING.
  * Removed three remaining single DES cipher suites.
  * Fixed a potential leak/incorrect return value in DSA
    signature generation.
  * Added a blinding value when generating DSA and ECDSA
    signatures, in order to reduce the possibility of a
    side-channel attack leaking the private key.
  * Added ECC constant time scalar multiplication support.
  * Revised the implementation of RSASSA-PKCS1-v1_5 to match the
    specification in RFC 8017.
  * Changes from 2.7.4:
  * Avoid a timing side-channel leak when generating DSA and ECDSA
    signatures. [CVE-2018-12434, boo#1097779]
  * Reject excessively large primes in DH key generation.</changelog>
</package>
<package pkgid="c0a935058d1cabc87363be52423b20da8f9f908b075fdbac58a1d03a96514eb4" name="libcrypto43-32bit" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
  <changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
  <changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
  <changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
  <changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1493899200">- Update to new upstream release 2.5.4
  * Reverted a previous change that forced consistency between
    return value and error code when specifing a certificate
    verification callback, since this breaks the documented API.
  * Switched Linux getrandom() usage to non-blocking mode,
    continuing to use fallback mechanims if unsuccessful.
  * Fixed a bug caused by the return value being set early to
    signal successful DTLS cookie validation.</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict for split openssl packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494331200">- Add conflict between libressl and the main versioned packages too</changelog>
  <changelog author="jengelh@inai.de" date="1503576000">- Update to new upstream release 2.5.5
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.</changelog>
  <changelog author="jengelh@inai.de" date="1504267200">- Update to new upstream release 2.6.0
  * Added support for providing CRLs to libtls. Once a CRL is
    provided, we enable CRL checking for the full certificate
    chain.
  * Allow non-compliant clients using IP literal addresses with
    SNI to connect to a server using libtls.
  * Avoid a potential NULL pointer dereference in
    d2i_ECPrivateKey().
  * Added definitions for three OIDs used in EV certificates.
  * Plugged a memory leak in tls_ocsp_free.
  * Added tls_peer_cert_chain_pem, tls_cert_hash, and
    tls_hex_string to libtls, useful in private certificate
    validation callbacks.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Added tls_keypair_clear_key for clearing key material.
  * Removed inconsistent IPv6 handling from
    BIO_get_accept_socket, simplified BIO_get_host_ip and
    BIO_accept.
  * Fixed the openssl(1) ca command so that is generates
    certificates with RFC 5280-conformant time.
  * Added ASN1_TIME_set_tm to set an asn1 from a struct tm *.
  * Added SSL{,_CTX}_set_{min,max}_proto_version() functions.
  * Added HKDF (HMAC Key Derivation Function) from BoringSSL
  * Providea a tls_unload_file() function that frees the memory
    returned from a tls_load_file() call, ensuring that it the
    contents become inaccessible. This is specifically needed on
    platforms where the library allocators may be different from
    the application allocator.
  * Perform reference counting for tls_config. This allows
    tls_config_free() to be called as soon as it has been passed
    to the final tls_configure() call, simplifying lifetime
    tracking for the application.
  * Moved internal state of SSL and other structures to be
    opaque.
  * Dropped cipher suites with DSS authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update to new upstream release 2.6.2
  * Provide a useful error with libtls if there are no OCSP URLs
    in a peer certificate.
  * Keep track of which keypair is in use by a TLS context,
    fixing a bug where a TLS server with SNI would only return
    the OCSP staple for the default keypair.
- Update to new upstream release 2.6.1
  * Added tls_config_set_ecdhecurves() to libtls, which allows
    the names of the eliptical curves that may be used during
    client and server key exchange to be specified.
  * Removed support for DSS/DSA, since we removed the cipher
    suites a while back.
  * Removed NPN support. NPN was never standardised and the last
    draft expired in October 2012. ALPN was standardised.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS
    termintation.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Implemented the SSL_CTX_set_min_proto_version(3) API.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.</changelog>
  <changelog author="jengelh@inai.de" date="1510056000">- Update to new upstream release 2.6.3
  * Added support for providing CRLs to libtls - once a CRL is
    provided via tls_config_set_crl_file(3) or
    tls_config_set_crl_mem(3), CRL checking is enabled and
    required for the full certificate chain.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Relaxed SNI validation to allow non-RFC-compliant clients
    using literal IP addresses with SNI to connect to a
    libtls-based TLS server.
  * Added tls_peer_cert_chain_pem() to libtls, useful in private
    certificate validation callbacks such as those in relayd.
  * Added SSL{,_CTX}_set_{min,max}_proto_version(3) functions.
  * Imported HKDF (HMAC Key Derivation Function) from BoringSSL.
  * Dropped cipher suites using DSS authentication.
  * Removed support for DSS/DSA from libssl.
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.
  * Removed NPN support - NPN was never standardised and the last
    draft expired in October 2012.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS termination.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.
- Add des-fcrypt.diff [boo#1065363]</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Add extra-symver.diff</changelog>
  <changelog author="jengelh@inai.de" date="1513857600">- Update to new upstream release 2.6.4
  * Make tls_config_parse_protocols() work correctly when passed
    a NULL pointer for a protocol string.
  * Correct TLS extensions handling when no extensions are
    present.</changelog>
  <changelog author="jengelh@inai.de" date="1521806400">- Update to new upstream release 2.7.0
  * Added support for many OpenSSL 1.0.2 and 1.1 APIs.
  * Added support for automatic library initialization in
    libcrypto, libssl, and libtls.
  * Converted more packet handling methods to CBB, which improves
    resiliency when generating TLS messages.
  * Completed TLS extension handling rewrite, improving consistency
    of checks for malformed and duplicate extensions.
  * Rewrote ASN1_TYPE_ get,set _octetstring() using templated
    ASN.1. This removes the last remaining use of the old M_ASN1_
    macros (asn1_mac.h) from API that needs to continue to exist.
  * Added support for client-side session resumption in libtls.
  * A libtls client can specify a session file descriptor (a
    regular file with appropriate ownership and permissions) and
    libtls will manage reading and writing of session data across
    TLS handshakes.
  * Merged more DTLS support into the regular TLS code path.</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Update to new upstream release 2.7.1
  * Fixed a bug in int_x509_param_set_hosts, calling strlen() if
    name length provided is 0 to match the OpenSSL behaviour.
    [CVE-2018-8970, boo#1086778]</changelog>
  <changelog author="jengelh@inai.de" date="1522670400">- Update to new upstream release 2.7.2
  * Updated and added extensive new HISTORY sections to
    the API manuals.</changelog>
  <changelog author="jengelh@inai.de" date="1525694400">- Update to new upstream release 2.7.3
  * Removed incorrect NULL checks in DH_set0_key().
  * Limited tls_config_clear_keys() to only clear private keys.</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Update to new upstream release 2.8.0
  * Fixed a pair of 20+ year-old bugs in X509_NAME_add_entry.
  * Tighten up checks for various X509_VERIFY_PARAM functions,
    'poisoning' parameters so that an unverified certificate
    cannot be used if it fails verification.
  * Fixed a potential memory leak on failure in ASN1_item_digest.
  * Fixed a potential memory alignment crash in
    asn1_item_combine_free.
  * Removed unused SSL3_FLAGS_DELAY_CLIENT_FINISHED and
    SSL3_FLAGS_POP_BUFFER flags in write path, simplifying IO
    paths.
  * Removed SSL_OP_TLS_ROLLBACK_BUG buggy client workarounds.
  * Added const annotations to many existing APIs from OpenSSL,
    making interoperability easier for downstream applications.
  * Added a missing bounds check in c2i_ASN1_BIT_STRING.
  * Removed three remaining single DES cipher suites.
  * Fixed a potential leak/incorrect return value in DSA
    signature generation.
  * Added a blinding value when generating DSA and ECDSA
    signatures, in order to reduce the possibility of a
    side-channel attack leaking the private key.
  * Added ECC constant time scalar multiplication support.
  * Revised the implementation of RSASSA-PKCS1-v1_5 to match the
    specification in RFC 8017.
  * Changes from 2.7.4:
  * Avoid a timing side-channel leak when generating DSA and ECDSA
    signatures. [CVE-2018-12434, boo#1097779]
  * Reject excessively large primes in DH key generation.</changelog>
</package>
<package pkgid="6dc6f671d2cfab13ca4b648e206da5535d6a909ccd0d40802577fabd147e4127" name="libcups2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="81220bed811733e36ffdd12b0ce2bebb0d52464247d2ddce2e9277ed094d5790" name="libcups2-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="4c138078ce942a87189f1fe99a10d224740818b9c4f6838c140d45c9328b51e9" name="libcupscgi1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="dca8f85fec37f9f734ef8ac45a2c0901099710bd479f3e1ecb4243487102e38d" name="libcupscgi1-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="5d306bcbc78d60c50e7a51839e7a05d0f920f3f49c0dd7f77a6f6d3b67be884e" name="libcupsimage2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="2ef53c3e8bc59ca2ab86833aabe3b9bd28ef60b030afabe2b000cc75eb4af09b" name="libcupsimage2-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="41ccf39ba8d5d499878448cefd6ef351cef61fb037889322f6750a965ad3401f" name="libcupsmime1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="8854ef90323ee9e2eb3b994423574cb1cc9d07690f5ce7e235ce1642d5c8875e" name="libcupsmime1-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="9abcd4f35f7f957d32670b4cc9c3dd444d3c98e68f7cccc7211662ca59af21da" name="libcupsppdc1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="4546660b78019d2a50a7837b33c4dac9710e097466907735d2d017c45a7c9a93" name="libcupsppdc1-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="01509a8b8b9d422ae70193a6e3c79934ecf8adb7461fdf5a11cd3bf508d8ff93" name="libcurl-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
</package>
<package pkgid="36187181999fbc01a75b335d4b7201b6a90c2a21d19d04c11bb647da1eeb6faa" name="libcurl-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.15.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1112758, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
</package>
<package pkgid="730d9f306bc27ace510a956c7e99e113207757b9ac7473b52ea4303481e5f1c9" name="libcurl-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.3.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="a942cccecd934c5ff0df7e7e59c146703abd01dbd748dc7880a5cc9ba42fa7fb" name="libcurl-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.6.1"/>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
</package>
<package pkgid="1f5c8443c5bf7db43fa42b4209d7ec4aa93d640cfc4164887e50e6ec10938f1d" name="libcurl-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
</package>
<package pkgid="df010b19e3d6f215fe918f4a203a7bda53035bb5676795b8dee4497adc48c7a4" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
</package>
<package pkgid="31d1c209b55ebb3e859200764d336019053349c4e38d384ba26857153fe9233f" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.15.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1112758, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
</package>
<package pkgid="b9b2bee4c5ca8f898e3bf1ba5f6f5041459aad615609775e92310702d7fcfbcb" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.3.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="d0caf96b94fe0f89260e49ee5df739f959fcccf3230e1207e8ef12b682b88232" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.6.1"/>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
</package>
<package pkgid="0e52f6a8217d4544d823f661fb4085f459f5159e1ac3827548002026d9d3f24e" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
</package>
<package pkgid="c0641aef470c1159d5f223ef0db42bd412900a6ef66ee95a555c8dbd9b9e83b9" name="libcurl-mini-devel" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
</package>
<package pkgid="8954d8e869d53288216ae20da23f20689519d0e5ea7ecf39c23308175bbc9a24" name="libcurl-mini-devel" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.15.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1112758, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
</package>
<package pkgid="6f942e43107035efe43322324a1ae986a48c067b8164f7d3f36585369e7217c0" name="libcurl-mini-devel" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.3.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="8b3cbda10b2d829af36bcb68a53aae5304cf6e2c2008c5dd5678625fd7e0aaad" name="libcurl-mini-devel" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.6.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="11948f4d3285438431c8145d1a769b00cc7a35b6c5d825c67d14941e9a4ef944" name="libcurl-mini-devel" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.9.1"/>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
</package>
<package pkgid="145e1310e6b947cd9ed17477c380dce517bc8ae77e47f6139b004903fcadc5ca" name="libcurl4-32bit" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
</package>
<package pkgid="cf390e4c79273c3a0c7308c3e46a6e9f2b2811681faae026da5a54400c13bfbc" name="libcurl4-32bit" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.15.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1112758, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
</package>
<package pkgid="d11499bb5c8194989ba9a4666732dc06e0dd6b9decc4dfdade9fca8a6e563100" name="libcurl4-32bit" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.3.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="a8928751fda8b5f23ff88407fd0115a1322af5cfca4df1ea94d1be522e64cced" name="libcurl4-32bit" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.6.1"/>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
</package>
<package pkgid="3bfa232c86333f9cb02800a64bb61d416f9195d3e92fec71efc13f4ee8e92206" name="libcurl4-32bit" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
</package>
<package pkgid="e04b5bb2fbe9fefc1a99b75f17d893eb9f29e1d3b0250c1f6670897fc070f6ca" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
</package>
<package pkgid="aa7902ca7301084c7fe0e270570cc145493059bc4158d2c1b7a255d7deb2e481" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.15.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1112758, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
</package>
<package pkgid="5df9a58a9463e0060f9f9ff1b762a02880472432024c71129af9b51aea465592" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.3.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="331f864baa232f7690e30ae9af5c728a606e95648e976a85b3b812b77e008999" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.6.1"/>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
</package>
<package pkgid="4878fa90c58ce2d96e73e7b5f579d1a400d75da67d6216ca047fdcfc6783bdb1" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
</package>
<package pkgid="e2c7396aab87b54f7136549ec77773e224edf37387c33eaa6c58ed9d583d1735" name="libcurl4-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
</package>
<package pkgid="aa09f39b6b76b5160b7015495cc87db9e80407a6f9bc23d9319585473a10f5be" name="libcurl4-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.15.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1112758, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
</package>
<package pkgid="b854b1c140a8adb5ac40fe51831fc094bdad410f984266ad402b2a688f378745" name="libcurl4-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.3.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="db92cbca0c77c7b62f39777b940d6135f256ccf35dc39238109d853ce9bcc5d9" name="libcurl4-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.6.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="9cd019c79371c1e104b904b7d1b8131b2118624752f8369336b821608c4b276f" name="libcurl4-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.9.1"/>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
</package>
<package pkgid="b94176423aa2675b6c4cf7bdd10da0ea83d93f248b2235b7190b2f477207fa09" name="libdat2-2" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="lp150.2.3.1"/>
  <changelog author="pth@suse.de" date="1400587200">- Fix typo in dapl_test.c.</changelog>
  <changelog author="pth@suse.de" date="1403697600">- Provide full source URL</changelog>
  <changelog author="pth@suse.de" date="1403697601">- Remove dapl-2.0.13-build_error.patch as it isn't needed anymore.</changelog>
  <changelog author="pth@suse.de" date="1403870400">- Add baselibs.conf and dapl-rpmlintrc as source.
- Fix dapl-fix_type_punning.patch.
- Fix type punning in cm.c</changelog>
  <changelog author="pth@suse.de" date="1407153600">- Remove s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407412800">- Readd s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407499200">- Add dapl-rename_dtest.patch to rename dtest to dpltest because
  of name clash with dateutils.
- Also rename the man  page for dtest.
- Make dapl-devel and dapl-debug-devel obsolete each other.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- dapl-debug can't obsolete dapl or zypper will switch between the versions
  all the time. They do conflict though</changelog>
  <changelog author="dimstar@opensuse.org" date="1423051200">- Also have dapl-utils conflict with dapl-debug-utils.
- Fix baselibs.conf to build libdat2-2-32bit.</changelog>
  <changelog author="pth@suse.de" date="1439294400">- Replace dapl-s390_support.patch with
  dapl-add-s390x-platform-support.patch (bsc#934683).
- Fix library name in baselibs.conf.
- Tag baselibs.conf and dapl-rpmlintrc as source.
- libdapl*.so work like plugins, hence they do not get a separate
  subpackage. So shut up rpmlint complaining about the package
  name.
- Drop the dapl-doc sub package and move the man pages to the
  packages containing the files/programs they describe.</changelog>
  <changelog author="pth@suse.de" date="1440504000">- Exclude aarch64 as there is currently no assembler code for this
  architecture.</changelog>
  <changelog author="dmueller@suse.com" date="1441886400">- add dapl-add-aarch64-platform-support.patch (fate#318444)
- revert last change</changelog>
  <changelog author="pth@suse.de" date="1457611200">- Update to 2.1.8 git version (bsc#970668).
  List of changes is too long so please see the included ChangeLog.
- Patches removed because the fixes are included upstream:
  dapl-fix_type_punning.patch
  dapl-autotools.patch
  dapl-add-s390x-platform-support.patch
  dapl-add-aarch64-platform-support.patch
  dapl-add-s390x-platform-support.patch
- Add dapl-s390.patch so that the defines are also valid for s390</changelog>
  <changelog author="pth@suse.de" date="1490788800">- Make dependencies on libs now coming from rdma-core versioned.
- Remove unused patch dapl-rename_dtest.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1495022400">- Disable dapl on armv7hl</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Restore description of libdapl. Fix some grammar errors.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Add conflicts between dapl and dapl-debug packages for devel
  and utils
- Rename dapl-utils tests to avoid conflicts with other packages (dateutils)
  * dapltest =&gt; dapl-test
  * dtest    =&gt; dapl-utest
  * dtestcm  =&gt; dapl-testcm
  * dtestsrq =&gt; dapl-testsrq
  * dtestx   =&gt; dapl-testx
- Remove librdmacm and libibverbs version dependencies</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1497268800">- Merge .changes files with SLE12-SP3 (bsc#1041579)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1500552000">- Update to 2.1.10
  * dtest_suite: add option to pause the test.
  * dtestcm: add client retry, give server time to queue up all listens
  * dtest: Add new man pages. (dtestx dtestcm dtestsrq)
  * cma: fix open_query mode, initialize attributes
  * ucm: up level CM timer logging, increase drep time at scale
  * dtest: fix return value check on do_rdma_write_with_msg
  * dtestx: check device capabilities and do atomic tests only if supported by HW
  * common: set atomic attributes based on provider/device capabilities
  * build: dtest_suite.sh was moved to test/scripts
  * mpxyd: let TX thread sleep if no open devices are referenced
  * mcm: when mmap req from MIC return with fail stat print WARN.
  * dtest_suite: remove duplicate dtest_suite.sh
  * dtest: enable -D option (data check) to work with scif provider
  * dtest_suite: fix typo in user_string var
  * mcm: remove logs from post send speed path
  * mcm proxy: push WR from MIC to host with scif mmap memory instead of scif_send.
  * dtest: the default size in pingpong test is set to 1 byte regardless to user input.
  * dtest: cleanup 4 printfs from the middle of performance test, may reduce performance.
- Refresh patches against 2.1.10</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527595200">- Add ucm-mcm-fix-backlog-parameter-for-socket.patch to fix
  a "deadlock" that causes socket connection to timeout when
  net.ipv4.tcp_syncookies=0. (bsc#1094657)</changelog>
</package>
<package pkgid="6f9ab9e6b00a954f47d9e3239c6945fa14e3953a2400e1ea6d7c134009b7800a" name="libdat2-2-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="lp150.2.3.1"/>
  <changelog author="pth@suse.de" date="1400587200">- Fix typo in dapl_test.c.</changelog>
  <changelog author="pth@suse.de" date="1403697600">- Provide full source URL</changelog>
  <changelog author="pth@suse.de" date="1403697601">- Remove dapl-2.0.13-build_error.patch as it isn't needed anymore.</changelog>
  <changelog author="pth@suse.de" date="1403870400">- Add baselibs.conf and dapl-rpmlintrc as source.
- Fix dapl-fix_type_punning.patch.
- Fix type punning in cm.c</changelog>
  <changelog author="pth@suse.de" date="1407153600">- Remove s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407412800">- Readd s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407499200">- Add dapl-rename_dtest.patch to rename dtest to dpltest because
  of name clash with dateutils.
- Also rename the man  page for dtest.
- Make dapl-devel and dapl-debug-devel obsolete each other.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- dapl-debug can't obsolete dapl or zypper will switch between the versions
  all the time. They do conflict though</changelog>
  <changelog author="dimstar@opensuse.org" date="1423051200">- Also have dapl-utils conflict with dapl-debug-utils.
- Fix baselibs.conf to build libdat2-2-32bit.</changelog>
  <changelog author="pth@suse.de" date="1439294400">- Replace dapl-s390_support.patch with
  dapl-add-s390x-platform-support.patch (bsc#934683).
- Fix library name in baselibs.conf.
- Tag baselibs.conf and dapl-rpmlintrc as source.
- libdapl*.so work like plugins, hence they do not get a separate
  subpackage. So shut up rpmlint complaining about the package
  name.
- Drop the dapl-doc sub package and move the man pages to the
  packages containing the files/programs they describe.</changelog>
  <changelog author="pth@suse.de" date="1440504000">- Exclude aarch64 as there is currently no assembler code for this
  architecture.</changelog>
  <changelog author="dmueller@suse.com" date="1441886400">- add dapl-add-aarch64-platform-support.patch (fate#318444)
- revert last change</changelog>
  <changelog author="pth@suse.de" date="1457611200">- Update to 2.1.8 git version (bsc#970668).
  List of changes is too long so please see the included ChangeLog.
- Patches removed because the fixes are included upstream:
  dapl-fix_type_punning.patch
  dapl-autotools.patch
  dapl-add-s390x-platform-support.patch
  dapl-add-aarch64-platform-support.patch
  dapl-add-s390x-platform-support.patch
- Add dapl-s390.patch so that the defines are also valid for s390</changelog>
  <changelog author="pth@suse.de" date="1490788800">- Make dependencies on libs now coming from rdma-core versioned.
- Remove unused patch dapl-rename_dtest.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1495022400">- Disable dapl on armv7hl</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Restore description of libdapl. Fix some grammar errors.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Add conflicts between dapl and dapl-debug packages for devel
  and utils
- Rename dapl-utils tests to avoid conflicts with other packages (dateutils)
  * dapltest =&gt; dapl-test
  * dtest    =&gt; dapl-utest
  * dtestcm  =&gt; dapl-testcm
  * dtestsrq =&gt; dapl-testsrq
  * dtestx   =&gt; dapl-testx
- Remove librdmacm and libibverbs version dependencies</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1497268800">- Merge .changes files with SLE12-SP3 (bsc#1041579)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1500552000">- Update to 2.1.10
  * dtest_suite: add option to pause the test.
  * dtestcm: add client retry, give server time to queue up all listens
  * dtest: Add new man pages. (dtestx dtestcm dtestsrq)
  * cma: fix open_query mode, initialize attributes
  * ucm: up level CM timer logging, increase drep time at scale
  * dtest: fix return value check on do_rdma_write_with_msg
  * dtestx: check device capabilities and do atomic tests only if supported by HW
  * common: set atomic attributes based on provider/device capabilities
  * build: dtest_suite.sh was moved to test/scripts
  * mpxyd: let TX thread sleep if no open devices are referenced
  * mcm: when mmap req from MIC return with fail stat print WARN.
  * dtest_suite: remove duplicate dtest_suite.sh
  * dtest: enable -D option (data check) to work with scif provider
  * dtest_suite: fix typo in user_string var
  * mcm: remove logs from post send speed path
  * mcm proxy: push WR from MIC to host with scif mmap memory instead of scif_send.
  * dtest: the default size in pingpong test is set to 1 byte regardless to user input.
  * dtest: cleanup 4 printfs from the middle of performance test, may reduce performance.
- Refresh patches against 2.1.10</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527595200">- Add ucm-mcm-fix-backlog-parameter-for-socket.patch to fix
  a "deadlock" that causes socket connection to timeout when
  net.ipv4.tcp_syncookies=0. (bsc#1094657)</changelog>
</package>
<package pkgid="3e618899868c23ea3a88b96e101c2f77ab36e7e26760c16fb2f1d43930478bfb" name="libdcerpc-binding0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="b645ebe8e27766527248a7810a0e427bcc5e65032ee49e9f6a4beb43e18e63ff" name="libdcerpc-binding0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="40ab394373b3cd1669c4f49f06110b8c03f207540e6c43a7fceaae5a552a688a" name="libdcerpc-binding0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="0604ff447a37b8a08086691454088770c85f47a7af1e4b699e3a70a62ecf24b9" name="libdcerpc-binding0" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="88d67628f714d49460015983bc769068637ae99270a744f0fef5592bb8c8a7af" name="libdcerpc-binding0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="6f40acd0c093a59269b1b76944492a44137240249d501c0134b203c83652eb5a" name="libdcerpc-binding0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="8997418c61510e17d3cd9a0850e655592c1ce71bd5062913df80596ed6bd340c" name="libdcerpc-devel" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="0f29385ae996eb1807d3a1464e9b2693ee6bc751e7cf2d1e4527f6616750dc86" name="libdcerpc-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="6d2d0071d454705914458f9b9b5f40ea091328cbf1f01378b16cce6f3bd3e254" name="libdcerpc-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="5c292873bd90c21969e1ebdebedaa640e7119f54042db13b8b5c6caf3e061e24" name="libdcerpc-samr-devel" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="a9e54d7cdb50e31b23345c7d9506303668850a0bdd5e05be2c264a7fa0910d77" name="libdcerpc-samr-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="553ed421b409755bd0cd290d969806d76170e633a2c134755cf2db5290f7dafc" name="libdcerpc-samr-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="ba9cd4b99593a291e8620a8006ee49a14b984be34ee977d429cba166c95bdc0a" name="libdcerpc-samr0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="6e2c68d1e893b1a2f2123bca14d375745f709f76f430d384e3dce7744c863f84" name="libdcerpc-samr0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="60ad9e65374756fdf828f036790ab88d513e6f21c0c3971c62a338b0da0b2b1d" name="libdcerpc-samr0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="7ca049d026ebb5a5f669a39a6bc1cbc3728ce955771a575692b1839b180c09db" name="libdcerpc-samr0" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="e4bc6a261791de0a0b5f506d01659a8316502e033e6e65d598bc8c50a1db8db3" name="libdcerpc-samr0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="43fc6c64b0933b3fa3d43d096dc449d15d99095582493dc1fcae7fde4b970c10" name="libdcerpc-samr0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="75e091fa8d0dfbabee3ab240fe63956bc7bbac4a81e576d57d3ed4cbe1d5b6c8" name="libdcerpc0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="36acb3976aac759bf29c8c697087844f4b654569d94fd59c4dda4adcce47837e" name="libdcerpc0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="bc54adb01aef35ae3878534b4e632c1b1960a085e65ec1a54c4d61befe2620d9" name="libdcerpc0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="b7d687a6c622522f523e078ff63aef33e18b3e6828a5b472e623a132c9446fca" name="libdcerpc0" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="b3c4b9f43e57afdecd98e8ce52f54e813dc9024d529c3ff9a3dc363307512fae" name="libdcerpc0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="7212870e7338e7b204a40a3cc33889811d03af4001fa9ed866408699c96e7e09" name="libdcerpc0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="7047adf4e07f341bcaca56484498100327dacab48c8bd06647f2e29951b3a259" name="libdialog14" arch="x86_64">
  <version epoch="0" ver="1.3" rel="lp150.2.3.1"/>
  <changelog author="werner@suse.de" date="1277985600">- Added korean po translation file (bnc#614248)</changelog>
  <changelog author="werner@suse.de" date="1283947200">- Disable gpm as it is not used for long time</changelog>
  <changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1359288000">- Build with libtool using
- Add devel package</changelog>
  <changelog author="cfarrell@suse.com" date="1359633600">- license update: LGPL-2.1
  See e.g. editbox.c</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1361534400">- Fix libraries
  * dialog-libs.patch</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1361534401">- Update to version 1.2-20121230
  * See included CHANGES file for detailes</changelog>
  <changelog author="werner@suse.de" date="1362052800">- Re-add patch dialog-1.2-20121230.dif: Fix problem with moving
  shadows during terminal resize
- Use a /etc/dialogrc for openSUSE default coloring/shadow defaults
- Re-add Korean language message file</changelog>
  <changelog author="werner@suse.de" date="1371816000">- Require terminfo-base and suggest terminfo to have on many or on
  mostly all terminals valid line graphics (bnc#826171)</changelog>
  <changelog author="p.drouand@gmail.com" date="1386849600">- Update to version 1.2-20130928
  + fix a regression in gauge widget from 1.2-20130928 changes;
    dlg_reallocate_gauge() failed when no --title option was given
- Changes from 1.2-20130923
  + fix samples/inputbox6-utf8, which had depended unnecessarily on bash.
  + improve memory caching for wide-character manipulation in gauge
    widget
  + add dlg_reallocate_gauge
  + updated configure macros to use msys changes from ncurses.
  + update config.guess, config.sub
- Changes from 1.2-20130902
  + modify makefile rule to make the ".png" filenames created by groff
    predictable.
  + add option --help-tags to allow scripts to get the item's tag field
    consistently from help- and help-item button results rather than
    getting the item's text for the latter
  + correct manpage discussion of DIALOG_ITEM_HELP versus --item-help,
    as well as --help-button return status
  + correct limit used for --hline option
  + do not print empty "[]" if a --hline option was given with an empty
    value
  + miscellaneous configure script fixes/updates.  In particular, add
    option --with-shared which builds shared libraries without a libtool
    dependency.
  + add FreeBSD port-files for test-builds.
  + update lt.po, add fa.po from
    http://translationproject.org/latest/dialog/
  + update config.guess, config.sub
- Changes from 1.2-20130523
  + modify ifdef in arrows.c to work around packages which use the
    wide-character ncursesw headers with the ncurses library
  + correct workaround for xterm alternate-screen to work with/without
    the fix made in ncurses that makes putp() always write to the
    standard output (Debian #708829).
  + improve limit-checks for checklist, in case the dialog is resized
  + add --last-key option ( Debian #697607).
- Changes from 2013/03/15
  + update zh_TW.po, add an.po from
    http://translationproject.org/latest/dialog/
- Remove dialog-libs.patch; fixed on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1420372800">- Update to version 1.2-20140911
  + correct malloc-size for change to prgbox.</changelog>
  <changelog author="werner@suse.de" date="1425470400">- Update to version 1.2-20150225
  + modify gauge widget to keep from erasing a second gauge widget, e.g.,
    via the "--and-widget" option.  This is a cosmetic change to match
    behavior of dialog 1.0 (report by Jason Orendorf).
  + add configure option "--with-man2html"
  + add configure options for versioned symbols, from ongoing work on
    ncurses.
  + update configure macros, e.g., for shared libraries
- Changes from 1.2- 20150125
  + suppress highlighting of character which denotes an abbreviation or
    shortcut for the OK/Cancel and other buttons for these widgets, which
    use abbreviations for the list shown on the screen:  buildlist,
    checklist/radiobox, menubox, treeview (Debian #775295).
  + add grid up/left and down/right bindings in editbox.c as synonyms for
    field prev and next, respectively when handling the OK/Cancel buttons
    (Debian #775294).</changelog>
  <changelog author="werner@suse.de" date="1425556800">- Hack around bug in libtool as it seems to be broken in shell
  function func_lalib_unsafe_p() as this does only work if a
  file descriptor 0 exists.</changelog>
  <changelog author="mpluskal@suse.com" date="1432296000">- Add gpg signature
- Update to 1.2-20150513
  + add configure option --with-install-prefix, like ncurses.
  + add --with-screen and related configure options from ncurses-examples
    to allow building with ncurses6 test-packages.
  + update configure macros for improved coding style from lynx changes.
  + updated ro.po from
    http://translationproject.org/latest/dialog/
  + update config.guess, config.sub
  &gt; patches by Florent Rougon:
  + fix two bugs in the "--file" option.
    + When the number of arguments read from the included file is 0, the
    code used to just skip over '--file' and its argument instead of
    removing them from the argument list, causing "Error:  Unknown
    option --file" later on.
    + In the alternative case (at least one argument read from the file),
    the previous code used to do '--j;' in order to "force rescan" of
    the inserted arguments.  However, control then flowed to outer
    blocks where a '++j;' counteracted this measure, causing "Error:
    Unknown option --msgbox" (for instance) later on.
  + modify escaping in argv.c to be more uniform, whether or not the
    backslash is found within a parameter.</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 1.2-20150920
  * decrease table value for minimum number of arguments for the
    widgets which use --no-items option
  * update configure macros:
    + use $SHELL consistently, deprecate non-POSIX shell
    + PKG_CONFIG may simply be unset - fix
    + add option to allow changing ABI version, from ncurses6.
  * fixes for two autoconf macros, CF_ADD_INCDIR and
    CF_NCURSES_CONFIG from work on ncurses.
  * build-fix for NetBSD curses
- Fix typo in previous changelog entry</changelog>
  <changelog author="mpluskal@suse.com" date="1457697600">- Update to 1.3-20160209
  * modify editbox widget to add a trailing newline if the text
    has none to ensure the last line is not ignored (report by
    Florent Rougon).
  * change mouse initialization to look for button-presses rather
    than button-clicks, for better response.
  * modify dump_curses_key() to show mouse-coding in readable form.
  * correct mapping of mouse-clicks on the day-grid in calendar
    widget when "--week-start" is used to set the start of the week
    (report by Stefan Vogtner).
  * integrated changes from Stefan Vogtner:
  * use Gregorian algorithm for leap year
  * use mktime if available; calendar was written just as it became
    standard.
- Changes for version 1.3
  * correct --infobox documentation, which said it shows an OK
    button.
  * fix a couple of place in test-scripts which referred to
    $SIG_TRAP rather than $SIG_QUIT
  * reorganize dialog.3, to use subsections for generating navigation
    pane, using man2html
  * add "--week-start" option for calendar widget (prompted by
    discussion with Stefan Vogtner).
  * add a limit-check in editbox.c to ensure that mouse-clicks
    outside the filled-in text area do not access past the end of
    the array (report by Stefan Vogtner).
  * update configure macros from ncurses changes.
  * update config.guess, config.sub</changelog>
  <changelog author="p.drouand@gmail.com" date="1488888000">- Update to version 1.3-20170131
  * use DLG_TRACE macro consistently to make "--disable-trace" configure
  option work.
  * modify buildlist widget to support option "--reorder" for to allow
    user to reorder the data based on the sequence of selections
    (discussion with Paraic O'Ceallaigh).
  * fill background color on unused parts of buildlist.
  * fix a minor error in buildlist which let pageup switch columns.
  * change several calls to dlg_trace_msg to prefix with "#" to make
    the trace logs more consistent for parsing.
  * add samples/run_test.sh
  * further improve performance with very long command-lines by changes
    to howmany_tags().
  * modify dlg_string_to_argv() to convert escaped double-quotes to
    plain double-quotes when within a double-quoted string.
  * modify makefile to apply CFLAGS to linking
  * modify dlg_string_to_argv() to ignore escaped newlines except when
    quoted, fixing a problem with samples/checklist9.
  * interpret $DIALOGOPTS before expanding "--file", etc., to allow
    the environment variable to turn on tracing in that process.
  * improve performance when processing very long command lines, e.g.,
    using "--file" by changing dialog_opts[] to an array of pointers to
    the expanded argv[] (discussion with Lars Tauber).
  * modified autoconf macros
    + CF_CC_ENV_FLAGS amend the last change to move only the
    preprocessor, optimization and warning flags to CPPFLAGS and
    CFLAGS, leaving the residue in CC.  That happens to work for gcc's
    various "model" options, but may require tuning for other compilers
    + CF_LARGEFILE workaround for clang exit-code vs warnings
    + CF_MATH_LIB quiet strict gcc warning
    + CF_WITH_LIBTOOL fix a few places in configure/build scripts where
    DESTDIR and rpath were combined
    + CF_XOPEN_SOURCE add "uclinux" to list of Linux's
  * update config.guess, config.sub</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Update to version 1.3-20170509:
  * improved configure macros CF_ADD_CFLAGS, CF_CC_ENV_FLAGS, and
  CF_SHARED_OPTS.
  * updated hu.po and tr.po from
  http://translationproject.org/latest/dialog/
  * update config.guess, config.sub</changelog>
  <changelog author="werner@suse.de" date="1527595200">- Update to version 1.3-20171209
  + update ftp url in test-packages.
  + modify test-packages to use recommended compiler/linker flags.
  + improved configure macros AM_WITH_NLS, CF_CC_ENV_FLAGS,
    CF_CURSES_LIBS, CF_NCURSES_CONFIG, CF_SHARED_OPTS, CF_WITH_LIBTOOL,
    CF__INTL_BODY.
  + update config.guess, config.sub
- Add patch textbox-file_size.patch to fix bug bsc#1094836</changelog>
</package>
<package pkgid="7e701c7bbf890ddc53ff09a0600431aa256062d8214fd17aea538fdb59e9c759" name="libdmmp-devel" arch="x86_64">
  <version epoch="0" ver="0.7.3+102+suse.be95116" rel="lp150.2.3.1"/>
  <changelog author="mwilck@suse.com" date="1516363200">- Update to version 0.7.3+30+suse.6b5ed839:
  * multipath.rules: temporary rule to obtain ID_WWN for NVMe
  (bsc#1076828)
  * libmultipath: ignore natively multipathed NVME devices
  (bsc#1076828)
  * multipath.rules: handle NVME devices (bsc#1076828)
  * FIX "libmultipath: hwtable: multibus for NetApp NVMe-FC"
  (bsc#1073319)
  * libmultipath: increase path product_id/rev field size for NVMe
  (bsc#1073319)</changelog>
  <changelog author="mwilck@suse.com" date="1516968000">- Update to version 0.7.3+31+suse.6804bb73f72d:
  * libmultipath: hwtable: no_path_retry="queue" for NetApp NVMe
  (bsc#1073319)</changelog>
  <changelog author="mwilck@suse.com" date="1517313600">- Update to version 0.7.3+38+suse.a16beed5280a:
  * kpartx: don't delete partitions from partitions (bsc#1078362)
  * hwtable: add latest updates (bsc#1078363)
  * multipathd.service: set TasksMax=infinity (bsc#1060616)</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- Fix whitespace in dracut conf file (bsc#1080562)</changelog>
  <changelog author="mwilck@suse.com" date="1519300800">- Update to version 0.7.3+52+suse.08a969b7fce0:
- Add limited support for displaying native NVMe multipath
  (bsc#1082419)
  * libmultipath: foreign/nvme: implement path display
  * multipathd: use foreign API
  * multipath: use foreign API
  * libmultipath/foreign: nvme foreign library
  * libmultipath/print: add "%G - foreign" wildcard
  * libmultipath: API for foreign multipath handling
  * libmultipath: print: use generic API for get_x_layout()
  * libmultipath: print: convert API to generic data type
  * libmultipath: "generic multipath" interface
  * libmultipath: add vector_convert()
  * libmultipath: add vector_free_const()
  * libmultipath: get rid of selector "hack" in print.c
- Fix locking errors detected by coverity check (bsc#1082418)
  * checkers/rbd: missing pthread_lock() on failure path
  * libmultipath: fix deadlock in tur.c</changelog>
  <changelog author="mwilck@suse.com" date="1519646400">- Update to version 0.7.3+53+suse.140f4937e9e7:
  * libmultipath: fix wrong output of "multipath -t" (bsc#1082835)</changelog>
  <changelog author="mwilck@suse.com" date="1521547200">- Update to version 0.7.3+57+suse.bb6be4c8b4ca:
  * multipathd: fix signal blocking logic (bsc#1086025)
  * multipath-tools: handle exit signal immediately (bsc#1086025)
  * multipath: fix DEF_TIMEOUT use (bsc#1086014)
  * multipath-tools: foreign/NVME implementation v2 (upstream accepted)
    (bsc#1082419)</changelog>
  <changelog author="mwilck@suse.com" date="1521633600">- Update to version 0.7.3+59+suse.1b6191c26774:
  * libmultipath: don't reject maps with undefined prio (bsc#1085212,
  bsc#1075129)
  * multipathd: handle errors in uxlsnr as fatal (bsc#1086025)</changelog>
  <changelog author="mwilck@suse.com" date="1522238400">- Update to version 0.7.3+60+suse.46ac839:
  * libmultipath/hwtable: don't hard-code ALUA for IBM IPR
  (bsc#1085212, bsc#1075129)</changelog>
  <changelog author="mwilck@suse.com" date="1522238401">- Fixed license tags in spec file
  * multipath tools / libmultipath is GPL-2.0-only
  * libmpathcmd is LGPL-2.0-or-later
  * libdmmp is GPL-3.0-or-later
  * adopt SPDX format.</changelog>
  <changelog author="mwilck@suse.com" date="1523016000">- Update to version 0.7.3+61+suse.d4d0494:
  * 11-dm-mpath.rules: dont't run "multipath -U" during coldplug
  (bsc#1084748)</changelog>
  <changelog author="mwilck@suse.com" date="1523361600">- No functional changes, just licenses
- Spec file: fix %license tags and info after closer inspection
  (bsc#1088801)
  * kpartx is under GPL-2.0-only
  * rbd is under LGPL-2.1-only
- Update to version 0.7.3+66+suse.dc5fe2d: Fix licensing info (bsc#1088801)
  * Added fossology assessment as README.licenses
  * multipath-tools: create LICENSES dir with the text of all used licences</changelog>
  <changelog author="mwilck@suse.com" date="1523361601">- No functional changes
  * fixed SPDX syntax (and -&gt; AND)
  * added /usr/share/licenses</changelog>
  <changelog author="mwilck@suse.com" date="1523361602">- No functional changes
- Fixed rpmlint warnings (bsc#1088946)
  * multipath-tools-devel: moved .so files to /usr/lib[64]
  * added version dependencies for -devel packages</changelog>
  <changelog author="mwilck@suse.com" date="1523534400">- Update to version 0.7.3+67+suse.8f0c27b:
  * disable nvme foreign library (bsc#1089353)</changelog>
  <changelog author="mwilck@suse.com" date="1530187200">- Update to version 0.7.3+79+suse.4b9f3ee:
  * multipath: don't start multipathd unnecessarily (bsc#1098177)
  * (lib)mpathpersist: use O_RDONLY file descriptors (bsc#1093220)
  * libmpathpersist: fix byte swapping for big endian systems (bsc#1099036)
  * libmultipath: add (get|put)_unaligned_be64 (bsc#1099036)
  * libmpathpersist: fix stack overflow in mpath_format_readfullstatus() (bsc#1099007)
  * libmpathpersist: fix typo in mpath_format_readfullstatus (bsc#1099007)
  * libmpathpersist: remove duplicate test in readfullstatus (bsc#1099007)
  * libmpathpersist: decrease log level of various messages (bsc#1099007)
  * Introduce the ibmultipath/unaligned.h header file (bsc#1099036)
  * libmultipath: Fix sgio_get_vpd() (bsc#1099484)
  * multipathd: fix reservation_key check (1099008)
  * libmultipath: avoid error messages from RDAC check (bsc#1075539)</changelog>
  <changelog author="mwilck@suse.com" date="1530187201">- Update to version 0.7.3+80+suse.6ccc1b0:
  * libmultipath: allow sysfs_pathinfo to return SKIPPED (bsc#1098458)</changelog>
  <changelog author="mwilck@suse.com" date="1538568000">- Update to version 0.7.3+99+suse.f3d8614:
  * multipathd: try SCSI persistent reservations for SCSI only
  (bsc#1108875)
  * libmultipath: allow sysfs_pathinfo to return SKIPPED (bsc#1098458)
  * multipathd: fix memory leak on error in configure (bsc#1110418)
  * multipathd: minor fixes (bsc#1110418)
  * multipathd: function return value tweaks (bsc#1110418)
  * libmutipath: don't use malformed uevents (bsc#1110418)
  * libmultipath: fix null dereference int alloc_path_group (bsc#1110418)
  * libmultipath: fix length issues in get_vpd_sgio (bsc#1110418)
  * libmultipath: fix gcc 8.1 "truncated output" warnings (bsc#1099007)
  * (lib)mpathpersist: use O_RDONLY file descriptors (bsc#1093220)
  * libmpathpersist: fix byte swapping for big endian systems (bsc#1099036)
  * libmultipath: add (get|put)_unaligned_be64 (bsc#1099036)
  * libmpathpersist: fix stack overflow in mpath_format_readfullstatus()
  (bsc#1099007)
  * libmpathpersist: fix typo in mpath_format_readfullstatus (bsc#1099007)
  * libmpathpersist: remove duplicate test in readfullstatus (bsc#1099007)
  * libmultipath: print correct default for delay_*_checks
  (bsc#1110418, bsc#1099026)
  * libmultipath: fix memory leak in process_config_dir() (bsc#1110352)
  * multipathd: register threads that use rcu calls (bsc#1110418)
  * multipathd: use nanosleep for strict timing (bsc#1110418)
  * libmultipath: fix log_pthread processing (bsc#1110418)
  * libmultipath: set dm_conf_verbosity (bsc#1110418)
  * libmultipath: fix basenamecpy (bsc#1110418)
  * libmultipath: get_uid: check VPD pages for SCSI only (bsc#1108728)
  * libmultipath: get_uid: don't quit prematurely without udev
  (bsc#1108728)
  * multipath: print sysfs state in fast list mode (bsc#1110354)
  * multipathd: release uxsocket and resource when cancel thread (bsc#1110355)
  * libmultipath: fix gcc 8.1 "truncated output" warnings (bsc#1099007)</changelog>
  <changelog author="mwilck@suse.com" date="1542196800">- Update to version 0.7.3+101+suse.beb7d7b:
  * multipathd: decrease log level of uevent messages (bsc#1110586)
  * libmultipath: pathinfo: skip hidden devices (bsc#1110586)</changelog>
  <changelog author="mwilck@suse.com" date="1543233600">- Update to version 0.7.3+102+suse.be95116:
  * libmpathpersist: fix off-by-one error in PRIN length check
  (bsc#1099007)</changelog>
</package>
<package pkgid="2fbd4928b5f8b862369bd69d46cb294a88306b833ae1d47e7a47e95bf492cc50" name="libdmmp0_1_0" arch="x86_64">
  <version epoch="0" ver="0.7.3+102+suse.be95116" rel="lp150.2.3.1"/>
  <changelog author="mwilck@suse.com" date="1516363200">- Update to version 0.7.3+30+suse.6b5ed839:
  * multipath.rules: temporary rule to obtain ID_WWN for NVMe
  (bsc#1076828)
  * libmultipath: ignore natively multipathed NVME devices
  (bsc#1076828)
  * multipath.rules: handle NVME devices (bsc#1076828)
  * FIX "libmultipath: hwtable: multibus for NetApp NVMe-FC"
  (bsc#1073319)
  * libmultipath: increase path product_id/rev field size for NVMe
  (bsc#1073319)</changelog>
  <changelog author="mwilck@suse.com" date="1516968000">- Update to version 0.7.3+31+suse.6804bb73f72d:
  * libmultipath: hwtable: no_path_retry="queue" for NetApp NVMe
  (bsc#1073319)</changelog>
  <changelog author="mwilck@suse.com" date="1517313600">- Update to version 0.7.3+38+suse.a16beed5280a:
  * kpartx: don't delete partitions from partitions (bsc#1078362)
  * hwtable: add latest updates (bsc#1078363)
  * multipathd.service: set TasksMax=infinity (bsc#1060616)</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- Fix whitespace in dracut conf file (bsc#1080562)</changelog>
  <changelog author="mwilck@suse.com" date="1519300800">- Update to version 0.7.3+52+suse.08a969b7fce0:
- Add limited support for displaying native NVMe multipath
  (bsc#1082419)
  * libmultipath: foreign/nvme: implement path display
  * multipathd: use foreign API
  * multipath: use foreign API
  * libmultipath/foreign: nvme foreign library
  * libmultipath/print: add "%G - foreign" wildcard
  * libmultipath: API for foreign multipath handling
  * libmultipath: print: use generic API for get_x_layout()
  * libmultipath: print: convert API to generic data type
  * libmultipath: "generic multipath" interface
  * libmultipath: add vector_convert()
  * libmultipath: add vector_free_const()
  * libmultipath: get rid of selector "hack" in print.c
- Fix locking errors detected by coverity check (bsc#1082418)
  * checkers/rbd: missing pthread_lock() on failure path
  * libmultipath: fix deadlock in tur.c</changelog>
  <changelog author="mwilck@suse.com" date="1519646400">- Update to version 0.7.3+53+suse.140f4937e9e7:
  * libmultipath: fix wrong output of "multipath -t" (bsc#1082835)</changelog>
  <changelog author="mwilck@suse.com" date="1521547200">- Update to version 0.7.3+57+suse.bb6be4c8b4ca:
  * multipathd: fix signal blocking logic (bsc#1086025)
  * multipath-tools: handle exit signal immediately (bsc#1086025)
  * multipath: fix DEF_TIMEOUT use (bsc#1086014)
  * multipath-tools: foreign/NVME implementation v2 (upstream accepted)
    (bsc#1082419)</changelog>
  <changelog author="mwilck@suse.com" date="1521633600">- Update to version 0.7.3+59+suse.1b6191c26774:
  * libmultipath: don't reject maps with undefined prio (bsc#1085212,
  bsc#1075129)
  * multipathd: handle errors in uxlsnr as fatal (bsc#1086025)</changelog>
  <changelog author="mwilck@suse.com" date="1522238400">- Update to version 0.7.3+60+suse.46ac839:
  * libmultipath/hwtable: don't hard-code ALUA for IBM IPR
  (bsc#1085212, bsc#1075129)</changelog>
  <changelog author="mwilck@suse.com" date="1522238401">- Fixed license tags in spec file
  * multipath tools / libmultipath is GPL-2.0-only
  * libmpathcmd is LGPL-2.0-or-later
  * libdmmp is GPL-3.0-or-later
  * adopt SPDX format.</changelog>
  <changelog author="mwilck@suse.com" date="1523016000">- Update to version 0.7.3+61+suse.d4d0494:
  * 11-dm-mpath.rules: dont't run "multipath -U" during coldplug
  (bsc#1084748)</changelog>
  <changelog author="mwilck@suse.com" date="1523361600">- No functional changes, just licenses
- Spec file: fix %license tags and info after closer inspection
  (bsc#1088801)
  * kpartx is under GPL-2.0-only
  * rbd is under LGPL-2.1-only
- Update to version 0.7.3+66+suse.dc5fe2d: Fix licensing info (bsc#1088801)
  * Added fossology assessment as README.licenses
  * multipath-tools: create LICENSES dir with the text of all used licences</changelog>
  <changelog author="mwilck@suse.com" date="1523361601">- No functional changes
  * fixed SPDX syntax (and -&gt; AND)
  * added /usr/share/licenses</changelog>
  <changelog author="mwilck@suse.com" date="1523361602">- No functional changes
- Fixed rpmlint warnings (bsc#1088946)
  * multipath-tools-devel: moved .so files to /usr/lib[64]
  * added version dependencies for -devel packages</changelog>
  <changelog author="mwilck@suse.com" date="1523534400">- Update to version 0.7.3+67+suse.8f0c27b:
  * disable nvme foreign library (bsc#1089353)</changelog>
  <changelog author="mwilck@suse.com" date="1530187200">- Update to version 0.7.3+79+suse.4b9f3ee:
  * multipath: don't start multipathd unnecessarily (bsc#1098177)
  * (lib)mpathpersist: use O_RDONLY file descriptors (bsc#1093220)
  * libmpathpersist: fix byte swapping for big endian systems (bsc#1099036)
  * libmultipath: add (get|put)_unaligned_be64 (bsc#1099036)
  * libmpathpersist: fix stack overflow in mpath_format_readfullstatus() (bsc#1099007)
  * libmpathpersist: fix typo in mpath_format_readfullstatus (bsc#1099007)
  * libmpathpersist: remove duplicate test in readfullstatus (bsc#1099007)
  * libmpathpersist: decrease log level of various messages (bsc#1099007)
  * Introduce the ibmultipath/unaligned.h header file (bsc#1099036)
  * libmultipath: Fix sgio_get_vpd() (bsc#1099484)
  * multipathd: fix reservation_key check (1099008)
  * libmultipath: avoid error messages from RDAC check (bsc#1075539)</changelog>
  <changelog author="mwilck@suse.com" date="1530187201">- Update to version 0.7.3+80+suse.6ccc1b0:
  * libmultipath: allow sysfs_pathinfo to return SKIPPED (bsc#1098458)</changelog>
  <changelog author="mwilck@suse.com" date="1538568000">- Update to version 0.7.3+99+suse.f3d8614:
  * multipathd: try SCSI persistent reservations for SCSI only
  (bsc#1108875)
  * libmultipath: allow sysfs_pathinfo to return SKIPPED (bsc#1098458)
  * multipathd: fix memory leak on error in configure (bsc#1110418)
  * multipathd: minor fixes (bsc#1110418)
  * multipathd: function return value tweaks (bsc#1110418)
  * libmutipath: don't use malformed uevents (bsc#1110418)
  * libmultipath: fix null dereference int alloc_path_group (bsc#1110418)
  * libmultipath: fix length issues in get_vpd_sgio (bsc#1110418)
  * libmultipath: fix gcc 8.1 "truncated output" warnings (bsc#1099007)
  * (lib)mpathpersist: use O_RDONLY file descriptors (bsc#1093220)
  * libmpathpersist: fix byte swapping for big endian systems (bsc#1099036)
  * libmultipath: add (get|put)_unaligned_be64 (bsc#1099036)
  * libmpathpersist: fix stack overflow in mpath_format_readfullstatus()
  (bsc#1099007)
  * libmpathpersist: fix typo in mpath_format_readfullstatus (bsc#1099007)
  * libmpathpersist: remove duplicate test in readfullstatus (bsc#1099007)
  * libmultipath: print correct default for delay_*_checks
  (bsc#1110418, bsc#1099026)
  * libmultipath: fix memory leak in process_config_dir() (bsc#1110352)
  * multipathd: register threads that use rcu calls (bsc#1110418)
  * multipathd: use nanosleep for strict timing (bsc#1110418)
  * libmultipath: fix log_pthread processing (bsc#1110418)
  * libmultipath: set dm_conf_verbosity (bsc#1110418)
  * libmultipath: fix basenamecpy (bsc#1110418)
  * libmultipath: get_uid: check VPD pages for SCSI only (bsc#1108728)
  * libmultipath: get_uid: don't quit prematurely without udev
  (bsc#1108728)
  * multipath: print sysfs state in fast list mode (bsc#1110354)
  * multipathd: release uxsocket and resource when cancel thread (bsc#1110355)
  * libmultipath: fix gcc 8.1 "truncated output" warnings (bsc#1099007)</changelog>
  <changelog author="mwilck@suse.com" date="1542196800">- Update to version 0.7.3+101+suse.beb7d7b:
  * multipathd: decrease log level of uevent messages (bsc#1110586)
  * libmultipath: pathinfo: skip hidden devices (bsc#1110586)</changelog>
  <changelog author="mwilck@suse.com" date="1543233600">- Update to version 0.7.3+102+suse.be95116:
  * libmpathpersist: fix off-by-one error in PRIN length check
  (bsc#1099007)</changelog>
</package>
<package pkgid="c394a699aa978edc0987b9f96c7569e4a54e991d1a1ac56ca5086ae99a122a0f" name="libdns169-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="3dafab5c41025ce260d3fce737790a688e7cb4af143d11db3c8a7667e9399503" name="libdns169-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="d6193dba2bea070a08f21286d13a45abef3c856e997bba72756c0e206e9a7f83" name="libdns169" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="5cb5ab152a300f00f38403acc680984710fb16cf16da80b8c132b363a11481fb" name="libdns169" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="af49221d5439f5391f01b2defc576e45ed9132b0f74cc8f8fcc5d2d9dd9a6d52" name="libdolphinvcs5" arch="x86_64">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * Update name of the delete action in the .rc files
  * behavior change -&gt; New Window opens with same URL</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1492862400">- Add patch to re-allow running dolphin as root:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Don't ignore tag clicks in the tooltips
  * Sort the tag-values alphabetically in the "Tags" column (kde#377589)</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Correct searchbox, split view transitions between tabs (kde#379135, kde#380032)</changelog>
  <changelog author="wbauer@tmo.at" date="1499428800">- Rename -lang package to dolphin-part-lang and recommend it by the
  dolphin-part package, the translations are used by the kpart too
  * Avoid boo#1027925 in the context of boo#1047665</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1499860800">- Replace %lang_package with evaluated macro to be able to add proper
  Provides/Obsoletes to avoid file conflicts during installation</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * Change in "Open in new tab" feature in Dolphin
  * Ignore drops-onto-items from invalid places items (kde#373005)</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Fix loading of dolphinui.rc (kde#382848)
  * Use https for knsrc providers
  * Fix drop menu position with urlnavigator drops
  * Bundle the XMLGUI files into qrc resources.
  * Add role for file creation time.
  * Fix knewstuff popup menu position on wayland
  * Add missing emit keywords
  * [Places Panel] Disallow editing devices
  * Support "Deletion Time" role in Trash (kde#153492)
  * Drop unnecessary method
  * Introduce DolphinMainWindowTest
  * Move non-exported code to a static library
  * add few more Q_DECL_OVERRIDE
  * Port tests from ecm_mark_as_test to ecm_add_test
  * Fix kfileitemmodeltest
  * Remove define to disable exports
  * Fix some compiler warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * Fix build with Qt 5.10
  * Keep renamed file(s) in view
  * Make sure we always have Shift+Del as shortcut
  * Qt 5 Porting: Q_WS_WIN -&gt; Q_OS_WIN</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * Fix scrolling during inline renaming causes rename of wrong file (kde#378786)</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * appdata: update doc URL, more https
  * Use CMakePackageConfigHelpers instead of the ECM variant</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * infopanel fully resizable
  * Revive folderpanel when outside $HOME
  * Ignore baloo urls created from new KIO model (kde#387888)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Let the terminal panel dock to any part of the window (kde#362593)
  * Folderspanel's context-menu option "Limit to Home Directory" is always visible
  * folderspanel context-menu option "Limit to Home Directory" should be always visible</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * Fix resetting "View Modes" preferences to defaults</changelog>
  <changelog author="wbauer@tmo.at" date="1538568000">- Add Fix-that-dragging-a-file-can-trigger-inline-rename.patch to
  prevent accidentally triggering inline rename by just dragging a
  file (boo#1108797, kde#398375)</changelog>
</package>
<package pkgid="46a2a4e134936b416e15ee5198ed0e30cef03030cad623e670fa7d730d980899" name="libdpdk-17_11-0" arch="x86_64">
  <version epoch="0" ver="17.11.2" rel="lp150.2.2.1"/>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495627200">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
</package>
<package pkgid="773b4365c0c6d5abcd2f1803999fbfa5c6075a0ca3480f678d960d05b727888e" name="libdpdk-17_11" arch="x86_64">
  <version epoch="0" ver="17.11.4" rel="lp150.2.5.1"/>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495540800">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="ndas@suse.de" date="1530619200">- do proper cpu compatibility test(bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]
- change %doc to %license</changelog>
  <changelog author="marco.varlese@suse.com" date="1535976000">- Update to 17.11.4 stable release. Some of the fixes include:
  * app/testpmd: fix buffer leak in TM command, fix DCB config,
  fix VLAN TCI mask set error for FDIR
  * bus/dpaa: fix buffer offset setting in FMAN, fix build,
  fix phandle support for Linux 4.16
  * doc: fix bonding command in testpmd, update qede management
  firmware guide
  * eal: fix bitmap documentation, fix return codes on thread naming
  failure, fix invalid syntax in interrupts, fix uninitialized value
  * eventdev: add event buffer flush in Rx adapter, fix internal
  port logic in Rx adapter, fix missing update to Rx adaper
  WRR position, fix port in Rx adapter internal function, fix Rx SW
  adapter stop
  * hash: fix a multi-writer race condition, fix doxygen of return
  values, fix key slot size accuracy, fix multiwriter lock memory
  allocation
  * kni:fix build with gcc 8.1, fix crash with null name
  * vhost: fix missing increment of log cache count, flush IOTLB
  cache on new mem table handling, improve dirty pages logging
  performance, release locks on RARP packet failure, retranslate
  vring addr when memory table changes
  * PMD drivers: various fixes fro bnxt, dpaa2, mlx5
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
</package>
<package pkgid="fa1b0bf0180f8fef2464651c4cbe808163b3f1a9acc74e8cb6fbf6f25099b468" name="libebml" arch="src">
  <version epoch="0" ver="1.3.6" rel="lp150.2.3.1"/>
  <changelog author="cristian.rodriguez@opensuse.org" date="1291809600">- fix -devel package dependencies</changelog>
  <changelog author="reddwarf@opensuse.org" date="1296388800">- update to version 1.2.0
  - no need to put the internal code of EbmlCrc32 in the public header
  - more safety on the Binary buffer handling in case we run out of memory
  - fix CRC32 detection in master elements
  - fix compilation under gcc 4.5
  - Fixed handling of UTF-8 strings with characters encoded in more than three bytes
  - Increased library .so name to .3 due to binary incompatible changes</changelog>
  <changelog author="ro@suse.de" date="1303128000">- update baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1309435200">- Update to version 1.2.1:
  + fix the constructor of CRTError in StdIOCallback
  + fix the size returned by MemIOCallback::read() when reaching
    the end of the buffer
  + add a macro to define signed integer elements that have a
    default value
  + fix compilation of debug builds on win32
  + fix for Sun Studio C compiler
- Stop source service usage: Factory is moving to a slightly
  different approch to verify source authenticity. Cconsequently,
  specify a full URL as Source.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1316952000">- Update to version 1.2.2
  + fix usage of the DEBUG #define (use LIBEBML_DEBUG instead)
  + The EbmlCodeVersion variable now resides in the library instead of being declared static in the header file.
  + only use the test element to read once in the loop</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1336651200">- Do not use gcc -ansi flag.</changelog>
  <changelog author="zaitor@opensuse.org" date="1364040000">- Update to version 1.3.0:
  + Compilation warning fixes
  + GetValue() and SetValue() functions for
    EbmlFloat/EbmlSInteger/EbmlUInteger
  + GetValue(), SetValue(), GetValueUTF8(), SetValueUTF8()
    functions for EbmlString/EbmlUnicodeString
  + Date values use 64bit integers
  + Integer conversion operators were made 'const'
  + GetElementList() function for EbmlMaster providing a
    reference to the underlying std::vector&lt;&gt; for better
    interaction with the C++ standard library
  + New constructor for UTFstring taking a single std::wstring
  + Increased library .so name to .4 due to binary incompatible
    changes.
  + Removed the Debian build files from our package.
- Bump soname following upstream code changes.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1369137600">- Add libebml-1.3.0-6efcb74d1e.patch
- Simplify make calls</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389528000">- Support C++ visibility by reusing win32 code for the same
  purpose.
- added patches:
  * libebml-visibility.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389873600">- revert last change, breaks mkvtoolnix that uses
  internal and symbols that are not annotated as public :(
  keep inlines-hidden though.</changelog>
  <changelog author="dimstar@opensuse.org" date="1392120000">- Also revert inlines-hidden: still breaks mkvtoolnix on i586.</changelog>
  <changelog author="jengelh@inai.de" date="1407326400">- Set RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixed boo#1104354
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
</package>
<package pkgid="52af250597aaf896ca3fb8659b3d524bbebd4512a62f32be634b59ee1b8b185e" name="libebml-devel" arch="x86_64">
  <version epoch="0" ver="1.3.6" rel="lp150.2.3.1"/>
  <changelog author="cristian.rodriguez@opensuse.org" date="1291809600">- fix -devel package dependencies</changelog>
  <changelog author="reddwarf@opensuse.org" date="1296388800">- update to version 1.2.0
  - no need to put the internal code of EbmlCrc32 in the public header
  - more safety on the Binary buffer handling in case we run out of memory
  - fix CRC32 detection in master elements
  - fix compilation under gcc 4.5
  - Fixed handling of UTF-8 strings with characters encoded in more than three bytes
  - Increased library .so name to .3 due to binary incompatible changes</changelog>
  <changelog author="ro@suse.de" date="1303128000">- update baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1309435200">- Update to version 1.2.1:
  + fix the constructor of CRTError in StdIOCallback
  + fix the size returned by MemIOCallback::read() when reaching
    the end of the buffer
  + add a macro to define signed integer elements that have a
    default value
  + fix compilation of debug builds on win32
  + fix for Sun Studio C compiler
- Stop source service usage: Factory is moving to a slightly
  different approch to verify source authenticity. Cconsequently,
  specify a full URL as Source.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1316952000">- Update to version 1.2.2
  + fix usage of the DEBUG #define (use LIBEBML_DEBUG instead)
  + The EbmlCodeVersion variable now resides in the library instead of being declared static in the header file.
  + only use the test element to read once in the loop</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1336651200">- Do not use gcc -ansi flag.</changelog>
  <changelog author="zaitor@opensuse.org" date="1364040000">- Update to version 1.3.0:
  + Compilation warning fixes
  + GetValue() and SetValue() functions for
    EbmlFloat/EbmlSInteger/EbmlUInteger
  + GetValue(), SetValue(), GetValueUTF8(), SetValueUTF8()
    functions for EbmlString/EbmlUnicodeString
  + Date values use 64bit integers
  + Integer conversion operators were made 'const'
  + GetElementList() function for EbmlMaster providing a
    reference to the underlying std::vector&lt;&gt; for better
    interaction with the C++ standard library
  + New constructor for UTFstring taking a single std::wstring
  + Increased library .so name to .4 due to binary incompatible
    changes.
  + Removed the Debian build files from our package.
- Bump soname following upstream code changes.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1369137600">- Add libebml-1.3.0-6efcb74d1e.patch
- Simplify make calls</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389528000">- Support C++ visibility by reusing win32 code for the same
  purpose.
- added patches:
  * libebml-visibility.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389873600">- revert last change, breaks mkvtoolnix that uses
  internal and symbols that are not annotated as public :(
  keep inlines-hidden though.</changelog>
  <changelog author="dimstar@opensuse.org" date="1392120000">- Also revert inlines-hidden: still breaks mkvtoolnix on i586.</changelog>
  <changelog author="jengelh@inai.de" date="1407326400">- Set RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixed boo#1104354
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
</package>
<package pkgid="fdac832582458d15fc712a3d41d312cf0f60927c93137ac62c074842c96296ff" name="libebml4" arch="x86_64">
  <version epoch="0" ver="1.3.6" rel="lp150.2.3.1"/>
  <changelog author="cristian.rodriguez@opensuse.org" date="1291809600">- fix -devel package dependencies</changelog>
  <changelog author="reddwarf@opensuse.org" date="1296388800">- update to version 1.2.0
  - no need to put the internal code of EbmlCrc32 in the public header
  - more safety on the Binary buffer handling in case we run out of memory
  - fix CRC32 detection in master elements
  - fix compilation under gcc 4.5
  - Fixed handling of UTF-8 strings with characters encoded in more than three bytes
  - Increased library .so name to .3 due to binary incompatible changes</changelog>
  <changelog author="ro@suse.de" date="1303128000">- update baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1309435200">- Update to version 1.2.1:
  + fix the constructor of CRTError in StdIOCallback
  + fix the size returned by MemIOCallback::read() when reaching
    the end of the buffer
  + add a macro to define signed integer elements that have a
    default value
  + fix compilation of debug builds on win32
  + fix for Sun Studio C compiler
- Stop source service usage: Factory is moving to a slightly
  different approch to verify source authenticity. Cconsequently,
  specify a full URL as Source.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1316952000">- Update to version 1.2.2
  + fix usage of the DEBUG #define (use LIBEBML_DEBUG instead)
  + The EbmlCodeVersion variable now resides in the library instead of being declared static in the header file.
  + only use the test element to read once in the loop</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1336651200">- Do not use gcc -ansi flag.</changelog>
  <changelog author="zaitor@opensuse.org" date="1364040000">- Update to version 1.3.0:
  + Compilation warning fixes
  + GetValue() and SetValue() functions for
    EbmlFloat/EbmlSInteger/EbmlUInteger
  + GetValue(), SetValue(), GetValueUTF8(), SetValueUTF8()
    functions for EbmlString/EbmlUnicodeString
  + Date values use 64bit integers
  + Integer conversion operators were made 'const'
  + GetElementList() function for EbmlMaster providing a
    reference to the underlying std::vector&lt;&gt; for better
    interaction with the C++ standard library
  + New constructor for UTFstring taking a single std::wstring
  + Increased library .so name to .4 due to binary incompatible
    changes.
  + Removed the Debian build files from our package.
- Bump soname following upstream code changes.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1369137600">- Add libebml-1.3.0-6efcb74d1e.patch
- Simplify make calls</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389528000">- Support C++ visibility by reusing win32 code for the same
  purpose.
- added patches:
  * libebml-visibility.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389873600">- revert last change, breaks mkvtoolnix that uses
  internal and symbols that are not annotated as public :(
  keep inlines-hidden though.</changelog>
  <changelog author="dimstar@opensuse.org" date="1392120000">- Also revert inlines-hidden: still breaks mkvtoolnix on i586.</changelog>
  <changelog author="jengelh@inai.de" date="1407326400">- Set RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixed boo#1104354
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
</package>
<package pkgid="8e8c5d61456b9ddf0dbe1a0fef71ebd7119094a302b65ce765b4a5f33dd12c63" name="libebml4-32bit" arch="x86_64">
  <version epoch="0" ver="1.3.6" rel="lp150.2.3.1"/>
  <changelog author="cristian.rodriguez@opensuse.org" date="1291809600">- fix -devel package dependencies</changelog>
  <changelog author="reddwarf@opensuse.org" date="1296388800">- update to version 1.2.0
  - no need to put the internal code of EbmlCrc32 in the public header
  - more safety on the Binary buffer handling in case we run out of memory
  - fix CRC32 detection in master elements
  - fix compilation under gcc 4.5
  - Fixed handling of UTF-8 strings with characters encoded in more than three bytes
  - Increased library .so name to .3 due to binary incompatible changes</changelog>
  <changelog author="ro@suse.de" date="1303128000">- update baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1309435200">- Update to version 1.2.1:
  + fix the constructor of CRTError in StdIOCallback
  + fix the size returned by MemIOCallback::read() when reaching
    the end of the buffer
  + add a macro to define signed integer elements that have a
    default value
  + fix compilation of debug builds on win32
  + fix for Sun Studio C compiler
- Stop source service usage: Factory is moving to a slightly
  different approch to verify source authenticity. Cconsequently,
  specify a full URL as Source.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1316952000">- Update to version 1.2.2
  + fix usage of the DEBUG #define (use LIBEBML_DEBUG instead)
  + The EbmlCodeVersion variable now resides in the library instead of being declared static in the header file.
  + only use the test element to read once in the loop</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1336651200">- Do not use gcc -ansi flag.</changelog>
  <changelog author="zaitor@opensuse.org" date="1364040000">- Update to version 1.3.0:
  + Compilation warning fixes
  + GetValue() and SetValue() functions for
    EbmlFloat/EbmlSInteger/EbmlUInteger
  + GetValue(), SetValue(), GetValueUTF8(), SetValueUTF8()
    functions for EbmlString/EbmlUnicodeString
  + Date values use 64bit integers
  + Integer conversion operators were made 'const'
  + GetElementList() function for EbmlMaster providing a
    reference to the underlying std::vector&lt;&gt; for better
    interaction with the C++ standard library
  + New constructor for UTFstring taking a single std::wstring
  + Increased library .so name to .4 due to binary incompatible
    changes.
  + Removed the Debian build files from our package.
- Bump soname following upstream code changes.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1369137600">- Add libebml-1.3.0-6efcb74d1e.patch
- Simplify make calls</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389528000">- Support C++ visibility by reusing win32 code for the same
  purpose.
- added patches:
  * libebml-visibility.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389873600">- revert last change, breaks mkvtoolnix that uses
  internal and symbols that are not annotated as public :(
  keep inlines-hidden though.</changelog>
  <changelog author="dimstar@opensuse.org" date="1392120000">- Also revert inlines-hidden: still breaks mkvtoolnix on i586.</changelog>
  <changelog author="jengelh@inai.de" date="1407326400">- Set RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixed boo#1104354
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
</package>
<package pkgid="6eb81d3b13513c7f06121ad9b460e80913ec12720588344b01b0f439f8350c31" name="libecpg6" arch="x86_64">
  <version epoch="0" ver="10.5" rel="lp150.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1501761600">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1501848000">- use multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1501848001">- bump version in update-alternatives call</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
</package>
<package pkgid="7a4bd6dbeeb853816b8834c89d8f37f5c975443ce31814c0e234d73446fb6001" name="libecpg6" arch="x86_64">
  <version epoch="0" ver="10.6" rel="lp150.3.6.1"/>
  <changelog author="mrueckert@suse.de" date="1501848000">- use multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1501848001">- bump version in update-alternatives call</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
</package>
<package pkgid="7d55962610f00c3d882775126d07cd94606726cd272fbbb9129fb93630441805" name="libecpg6-32bit" arch="x86_64">
  <version epoch="0" ver="10.5" rel="lp150.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1501761600">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1501848000">- use multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1501848001">- bump version in update-alternatives call</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
</package>
<package pkgid="595e9f215f0d2da3ebc71dd233f3e1a25d43e6d05d310b968b110e7947a3fa15" name="libecpg6-32bit" arch="x86_64">
  <version epoch="0" ver="10.6" rel="lp150.3.6.1"/>
  <changelog author="mrueckert@suse.de" date="1501848000">- use multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1501848001">- bump version in update-alternatives call</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
</package>
<package pkgid="5f0c3e61615cd5be45c363863590d150905f4e189dbb267e4806cd46856ff67d" name="libepubgen" arch="src">
  <version epoch="0" ver="0.1.1" rel="lp150.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1417176000">- Initial package of libepub 0.0.0</changelog>
  <changelog author="tchvatal@suse.com" date="1470052800">- Disable sle11 support code</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1502712000">- Version update to 0.0.1:
  * Fix escaping of HTML entities.
  * Use symbol visibility on Linux. The library only exports public
    classes/functions now.
  * Print debugging output to stderr.
  * Switch to C++11.</changelog>
  <changelog author="tchvatal@suse.com" date="1513771200">- Version update to 0.1.0:
  * Fix various validation problems, pointed out by epubcheck.
  * Add EPUB3 support.
  * Split on headings: add user-friendly section names.
  * Support writing CSS styles inline in the XHTML streams.
  * Support various image wrap types.
  * Support embedded fonts.
  * Support cover images.
  * Support footnotes.
  * upport EPUB3 fixed layout.</changelog>
  <changelog author="tchvatal@suse.com" date="1528286400">- Version update to 0.1.1:
  * Avoid &lt;div&gt; inside &lt;p&gt; or &lt;span&gt;.
  * Avoid writin vertical-align attribute without a value.
  * Fix generation of invalid XHTML when there is a link starting at the
    beginning of a footnote.
  * Handle relative width for images.
  * Fixed layout: write chapter names to improve navigation.
  * Support writing mode.
  * Start a new HTML file at every page span in addition to the splits
    induced by the chosen split method. This is to ensure that specified
    writing mode works correctly, as it is HTML &lt;body&gt; attribute.
  * Improve tests.
  * Add a basic support for ruby.
  * Configure: disable treating of compiler warnings as errors by
    default.
  * Various minor fixes and code cleanups.</changelog>
</package>
<package pkgid="1b38ef9a9a1e1f2a839e20a5c903ca1d42d8b3b622ccc005d75d7255899306c8" name="libepubgen-0_1-1" arch="x86_64">
  <version epoch="0" ver="0.1.1" rel="lp150.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1417176000">- Initial package of libepub 0.0.0</changelog>
  <changelog author="tchvatal@suse.com" date="1470052800">- Disable sle11 support code</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1502712000">- Version update to 0.0.1:
  * Fix escaping of HTML entities.
  * Use symbol visibility on Linux. The library only exports public
    classes/functions now.
  * Print debugging output to stderr.
  * Switch to C++11.</changelog>
  <changelog author="tchvatal@suse.com" date="1513771200">- Version update to 0.1.0:
  * Fix various validation problems, pointed out by epubcheck.
  * Add EPUB3 support.
  * Split on headings: add user-friendly section names.
  * Support writing CSS styles inline in the XHTML streams.
  * Support various image wrap types.
  * Support embedded fonts.
  * Support cover images.
  * Support footnotes.
  * upport EPUB3 fixed layout.</changelog>
  <changelog author="tchvatal@suse.com" date="1528286400">- Version update to 0.1.1:
  * Avoid &lt;div&gt; inside &lt;p&gt; or &lt;span&gt;.
  * Avoid writin vertical-align attribute without a value.
  * Fix generation of invalid XHTML when there is a link starting at the
    beginning of a footnote.
  * Handle relative width for images.
  * Fixed layout: write chapter names to improve navigation.
  * Support writing mode.
  * Start a new HTML file at every page span in addition to the splits
    induced by the chosen split method. This is to ensure that specified
    writing mode works correctly, as it is HTML &lt;body&gt; attribute.
  * Improve tests.
  * Add a basic support for ruby.
  * Configure: disable treating of compiler warnings as errors by
    default.
  * Various minor fixes and code cleanups.</changelog>
</package>
<package pkgid="fe9d7b7db1e0525ba72ddf209b08605abf4f65ae149dd69f5510b193ae3578a7" name="libepubgen-devel" arch="x86_64">
  <version epoch="0" ver="0.1.1" rel="lp150.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1417176000">- Initial package of libepub 0.0.0</changelog>
  <changelog author="tchvatal@suse.com" date="1470052800">- Disable sle11 support code</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1502712000">- Version update to 0.0.1:
  * Fix escaping of HTML entities.
  * Use symbol visibility on Linux. The library only exports public
    classes/functions now.
  * Print debugging output to stderr.
  * Switch to C++11.</changelog>
  <changelog author="tchvatal@suse.com" date="1513771200">- Version update to 0.1.0:
  * Fix various validation problems, pointed out by epubcheck.
  * Add EPUB3 support.
  * Split on headings: add user-friendly section names.
  * Support writing CSS styles inline in the XHTML streams.
  * Support various image wrap types.
  * Support embedded fonts.
  * Support cover images.
  * Support footnotes.
  * upport EPUB3 fixed layout.</changelog>
  <changelog author="tchvatal@suse.com" date="1528286400">- Version update to 0.1.1:
  * Avoid &lt;div&gt; inside &lt;p&gt; or &lt;span&gt;.
  * Avoid writin vertical-align attribute without a value.
  * Fix generation of invalid XHTML when there is a link starting at the
    beginning of a footnote.
  * Handle relative width for images.
  * Fixed layout: write chapter names to improve navigation.
  * Support writing mode.
  * Start a new HTML file at every page span in addition to the splits
    induced by the chosen split method. This is to ensure that specified
    writing mode works correctly, as it is HTML &lt;body&gt; attribute.
  * Improve tests.
  * Add a basic support for ruby.
  * Configure: disable treating of compiler warnings as errors by
    default.
  * Various minor fixes and code cleanups.</changelog>
</package>
<package pkgid="a9a05b2803e7e19aa0a682b343eed551c21e0cba94cca02ff2b014469901041c" name="libepubgen-devel-doc" arch="noarch">
  <version epoch="0" ver="0.1.1" rel="lp150.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1417176000">- Initial package of libepub 0.0.0</changelog>
  <changelog author="tchvatal@suse.com" date="1470052800">- Disable sle11 support code</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1502712000">- Version update to 0.0.1:
  * Fix escaping of HTML entities.
  * Use symbol visibility on Linux. The library only exports public
    classes/functions now.
  * Print debugging output to stderr.
  * Switch to C++11.</changelog>
  <changelog author="tchvatal@suse.com" date="1513771200">- Version update to 0.1.0:
  * Fix various validation problems, pointed out by epubcheck.
  * Add EPUB3 support.
  * Split on headings: add user-friendly section names.
  * Support writing CSS styles inline in the XHTML streams.
  * Support various image wrap types.
  * Support embedded fonts.
  * Support cover images.
  * Support footnotes.
  * upport EPUB3 fixed layout.</changelog>
  <changelog author="tchvatal@suse.com" date="1528286400">- Version update to 0.1.1:
  * Avoid &lt;div&gt; inside &lt;p&gt; or &lt;span&gt;.
  * Avoid writin vertical-align attribute without a value.
  * Fix generation of invalid XHTML when there is a link starting at the
    beginning of a footnote.
  * Handle relative width for images.
  * Fixed layout: write chapter names to improve navigation.
  * Support writing mode.
  * Start a new HTML file at every page span in addition to the splits
    induced by the chosen split method. This is to ensure that specified
    writing mode works correctly, as it is HTML &lt;body&gt; attribute.
  * Improve tests.
  * Add a basic support for ruby.
  * Configure: disable treating of compiler warnings as errors by
    default.
  * Various minor fixes and code cleanups.</changelog>
</package>
<package pkgid="1cf9617f85a3251415e401e1d87b575fd30128fca8a74bfd8f8c6e7c5f318886" name="libevtlog-3_14-0" arch="x86_64">
  <version epoch="0" ver="3.14.1" rel="lp150.2.3.1"/>
  <changelog author="mt@suse.de" date="1400500800">- rpm: use _rundir rpm macro if defined (bnc#873857)</changelog>
  <changelog author="czanik@balabit.hu" date="1405944000">- update to 3.5.5 (bugfix release)
- copying ivykis headers manually is no more necessary</changelog>
  <changelog author="pczanik@genesi-usa.com" date="1407240000">- update to 3.5.6 (bugfix release)</changelog>
  <changelog author="mt@suse.de" date="1408708800">- Stop syslog.socket in %preun to avoid the daemon we uninstall
  gets started by a log message due to dependencies (bnc#840815).</changelog>
  <changelog author="dimstar@opensuse.org" date="1425384000">- Do not BuildRequire libhiredis0_10: It's responsibility of the
  respective -devel package to pull in the library. On openSUSE &lt;
  13.2.1 (Current Tumbleweed) we keep it to workaround a bug in
  the hiredis-devel package of those releases.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1427284800">- fix shebang in syslog-ng-service-prepare script that contains
  bash-specific constructions</changelog>
  <changelog author="czanik@balabit.hu" date="1441627200">- update to syslog-ng 3.7.1
- for a detailed changelog, see upstream at:
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.7.1
  and
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.6.1
- FYI: no java support due to lack of gradle
- follow geoip modul name change (tfgeoip -&gt; geoip-plugin)
- add libkvformat.so
- remove notls workaround (openssl is now a hard dependency)
- add python support
- update version in syslog-ng.conf
- move json support to core
- tmp patch to fix compilation on SLES11:
  e30fe7c3717a7bda4036448c7777747df1a4e0f9.patch
- SLES notes: some core dependencies are missing, so you need to
  build in your home repo and have json, libevtlog from Factory</changelog>
  <changelog author="peter@czanik.hu" date="1464782400">- fix bnc#965191 by adding back "Alias=syslog.service" to
  "syslog.service"
- update to 3.7.3, which fixes many small bugs
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.7.3
- remove obsolate e30fe7c3717a7bda4036448c7777747df1a4e0f9.patch
- using self generated dist tgz, as official tgz is missing
  generated man pages
- fix bnc#982487 by copying config.h manually</changelog>
  <changelog author="peter@czanik.hu" date="1471953600">- update to 3.8.1
  for a complete list of changes see:
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.8.1
- add Java support. NOTE:
  no modules due to missing gradle and JAR dependencies
- add curl HTTP support
- disable mongodb for SLES11 (fails to compile)
- update configuration to 3.8
- change datadir parameter (default now includes 'syslog-ng')
- add cef &amp; date modules, apache, loggly, logmatic scl-s
- add disk buffer support
- update java module list
- uncomment Alias=syslog.service in syslog-ng.service
- rename system-expand to system-expand.sh
- add missing: Obsolates: syslog-ng-json (JSON is now in core)</changelog>
  <changelog author="peter@czanik.hu" date="1473422400">- really update config version to 3.8 (thanks Per for the report)
- move curl (HTTP) support into a subpackage
  to reduce the number of dependencies in the base package</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- require group and user "news" in new system model.</changelog>
  <changelog author="peter@czanik.hu" date="1498046400">- update to version 3.10.1
- update config version
- libcurl.so renamed to libhttp.so
- added module libtfgetent.so
- added module libmap-value-pairs.so
- added module libstardate.so
- added cisco parser (scl)
- added snmptrapd parser files
- add pkgconfig for add-contextual-data
- don't compile curl dest on SLES 11</changelog>
  <changelog author="fstrba@suse.com" date="1507636800">- Do not hardcode dependency on java-1_7_0-openjdk, depend on
  java-devel &gt;= 1.7 instead
- Added patch:
  * syslog-ng-3.10.1-sourcetarget.patch
    + Build Java classes with the lowest required source and target
    levels.</changelog>
  <changelog author="jengelh@inai.de" date="1507723200">- Update package summaries and RPM group classifications.
  Drop author lists from descriptions. Remove redundant %clean
  section. Replace old $RPM_ shell vars and make consistent use
  of macros instead.</changelog>
  <changelog author="peter@czanik.hu" date="1511956800">- update to syslog-ng 3.12.1
- add tags parser
- add xml parser
- add Windows eventlog parser
- add syslog-ng-debun + man
- handle evtlog merge (add obsolates, new files, etc.)
- use Python version of merge-grammar
- add libmaxminddb-devel BuildRequires for the geoip2 parser
- add geoip2 parser
- add osquery parser (scl)
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468) (by @RBrownSUSE)
- WARNING:
  disable RabbitMQ and AMQP support as they fail
  to compile with openssl 1.1
  Will be most likely re-enabled in 3.14.1</changelog>
  <changelog author="peter@czanik.hu" date="1512475200">- fix %post and mongodb as requested by @idonmez</changelog>
  <changelog author="peter@czanik.hu" date="1515499200">- disable Java destination temporarily (it does not build)</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1515585600">- fix build error with json-c v0.13 with patch
  0001-modules-json-Adaptions-for-json-c-v0.13.patch</changelog>
  <changelog author="peter@czanik.hu" date="1523016000">- update to syslog-ng 3.14.1
- remove patch, as merged upstream:
  0001-modules-json-Adaptions-for-json-c-v0.13.patch
- remove patch and revert to jdk 1.7 as 1.9 is problematic:
  syslog-ng-3.10.1-sourcetarget.patch
- add secret-storage, appmodell and SCL files</changelog>
  <changelog author="peter@czanik.hu" date="1527768000">- added network.target to syslog-ng.service
  to resolve bnc#1077975</changelog>
</package>
<package pkgid="e0a77cd5dd6b701a3128eca21baab0547b1101468e28f11bab73c3d8af369ada" name="libexiv2-26" arch="x86_64">
  <version epoch="0" ver="0.26" rel="lp150.5.3.1"/>
  <changelog author="fcrozat@suse.com" date="1348056000">- Add 90_changeset_r2743.diff: add support for additional Samgsung
  EXIF tags (backport for upstream)
- Add 90_changeset_r2744.diff: add support for additional Pentax
  EXIF tags (backport for upstream)
- Add more Canon models (5D Mark III, 600D, 60D, 1100D, WFT-E2 II,
  WFT-E4 II, 650D)
- Add 90_changeset_r2756.diff: add support for EOS-M Sigma 12-24mm
  f/4.5-5.6 DG HSM II lens (backport from upstream)
- Add 90_changeset_r2818_partial.diff: add support for additional
  Canon camera (5D Mark III, 600D, 60D, 1100D, WFT-E2 II, WFT-E4
  II, 650D) and EF/EF-M lenses. (backport from upstream)
- Add 99_pending_canon_eos_m.diff: add support for some Canon EOS-M
  lenses (pending upstream merge)
- Add 99_pending_minolta_manual_lens.diff: add support for Minolta
  manual lens (pending upstream merge)
- Add 99_pending_pentax_da_35.diff: add support for PENTAX-DA 35mm
  F2.4 AL lens (pending upstream merge)
- Add 99_pending_zeiss_planar_35_ze.diff: add support for Carl
  Zeiss Planar T* 50mm f/1.4 ZE lens (pending upstream merge)</changelog>
  <changelog author="fcrozat@suse.com" date="1370260800">- Remove pending patches with upstream versions :
  + 99_pending_canon_eos_m.diff (replaced by
    90_changeset_r2993.diff).
  + 99_pending_minolta_manual_lens.diff (replaced by
    90_changeset_r2989.diff).
  + 99_pending_pentax_da_35.diff (replaced by
    90_changeset_r2860.diff).
  + 99_pending_zeiss_planar_35_ze.diff (replaced by
    90_changeset_r3011.diff).
- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  + 90_changeset_r2889.diff, 90_changeset_r2985.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2958.diff: additional lenses for Samsung body
  + 90_changeset_r2959.diff, 90_changeset_r2961.diff,
    90_changeset_r2985.diff, 90_changeset_r3003.diff,
    90_changeset_r3016.diff, 90_changeset_r3017.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2963.diff, 90_changeset_r2994.diff,
    90_changeset_r3004.diff, 90_changeset_r3023.diff,
    90_changeset_r3026.diff: additional lenses for Canon body.
  + 90_changeset_r2968.diff, 90_changeset_r2969.diff,
    90_changeset_r2995.diff, 90_changeset_r3005.diff,
    90_changeset_r3006.diff: additional lenses for Minolta body.
  + 90_changeset_r2970.diff, 90_changeset_r2975.diff,
    90_changeset_r2978.diff, 90_changeset_r2981.diff,
    90_changeset_r2982.diff, 90_changeset_r2992.diff: additional
    lenses for Olympus body.
  + 90_changeset_r2998.diff: add support for FocusDistance data
    from Olympus EXIF tags.
  + 90_changeset_r2984.diff, 90_changeset_r2986.diff,
    90_changeset_r3002.diff: additional lenses for Nikon body.
  + 90_changeset_r2988.diff: add support for Exif.Photo.LensModel
    EXIF tag.
  + 90_changeset_r2990.diff: prevent double variable creation.
  + 90_changeset_r2991.diff: fix memory corruption.
  + 95_post_r3026_cleanup.diff: cleanup lenses names.</changelog>
  <changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
  <changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
  <changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="wbauer@tmo.at" date="1498824000">- Update to version 0.26
  * See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
  * exiv2-cmake-libsuffix.patch
  * exiv2_r3889_r3890_fix_boo964344.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1499169600">- Fix baselibs.conf</changelog>
  <changelog author="wbauer@tmo.at" date="1502280000">- Add fix-crash.patch to prevent crashes in gwenview with certain
  images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
  the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
  upstream</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
    CVE-2017-14864 bsc#1060995,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000)</changelog>
  <changelog author="cfeck@kde.org" date="1511524800">- split developer documentation into separate package</changelog>
  <changelog author="dmueller@suse.com" date="1527681600">- update to latest 0.26 branch:
  * obsoletes 0001-Use-more-GNUInstallDirs.patch
  d4e4288d839d0d9546a05986771f8738c382060c.patch
  gcc-version-check.patch
  7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
  fix-crash.patch
  * adds exiv2-update-to-0.26-branch.patch
  * Fixes CVE-2017-14864 (bsc#1060995),
  CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
  CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
  CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
  CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
  CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
  CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
  CVE-2017-11591 (bsc#1050257)</changelog>
</package>
<package pkgid="93ba121aeee3faa906619aa47d730d5548fa39f7af2daa8ea4e2038bb5beeda8" name="libexiv2-26" arch="x86_64">
  <version epoch="0" ver="0.26" rel="lp150.5.6.1"/>
  <changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
  <changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
  <changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="wbauer@tmo.at" date="1498824000">- Update to version 0.26
  * See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
  * exiv2-cmake-libsuffix.patch
  * exiv2_r3889_r3890_fix_boo964344.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1499169600">- Fix baselibs.conf</changelog>
  <changelog author="wbauer@tmo.at" date="1502280000">- Add fix-crash.patch to prevent crashes in gwenview with certain
  images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
  the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
  upstream</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
    CVE-2017-14864 bsc#1060995,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000)</changelog>
  <changelog author="cfeck@kde.org" date="1511524800">- split developer documentation into separate package</changelog>
  <changelog author="dmueller@suse.com" date="1527681600">- update to latest 0.26 branch:
  * obsoletes 0001-Use-more-GNUInstallDirs.patch
  d4e4288d839d0d9546a05986771f8738c382060c.patch
  gcc-version-check.patch
  7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
  fix-crash.patch
  * adds exiv2-update-to-0.26-branch.patch
  * Fixes CVE-2017-14864 (bsc#1060995),
  CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
  CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
  CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
  CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
  CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
  CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
  CVE-2017-11591 (bsc#1050257)</changelog>
  <changelog author="tchvatal@suse.com" date="1530273600">- Fix build on python3 only system by making sure we use
  python3 when building</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1539691200">- update to latest 0.26 branch:
  * Fixes CVE-2018-12264, CVE-2018-12265 (bsc#1097599)</changelog>
</package>
<package pkgid="a030c328c7b36e4a1ddbb1a0a92ae55822b8b536c4218f0cbaa42add1609768a" name="libexiv2-26-32bit" arch="x86_64">
  <version epoch="0" ver="0.26" rel="lp150.5.3.1"/>
  <changelog author="fcrozat@suse.com" date="1348056000">- Add 90_changeset_r2743.diff: add support for additional Samgsung
  EXIF tags (backport for upstream)
- Add 90_changeset_r2744.diff: add support for additional Pentax
  EXIF tags (backport for upstream)
- Add more Canon models (5D Mark III, 600D, 60D, 1100D, WFT-E2 II,
  WFT-E4 II, 650D)
- Add 90_changeset_r2756.diff: add support for EOS-M Sigma 12-24mm
  f/4.5-5.6 DG HSM II lens (backport from upstream)
- Add 90_changeset_r2818_partial.diff: add support for additional
  Canon camera (5D Mark III, 600D, 60D, 1100D, WFT-E2 II, WFT-E4
  II, 650D) and EF/EF-M lenses. (backport from upstream)
- Add 99_pending_canon_eos_m.diff: add support for some Canon EOS-M
  lenses (pending upstream merge)
- Add 99_pending_minolta_manual_lens.diff: add support for Minolta
  manual lens (pending upstream merge)
- Add 99_pending_pentax_da_35.diff: add support for PENTAX-DA 35mm
  F2.4 AL lens (pending upstream merge)
- Add 99_pending_zeiss_planar_35_ze.diff: add support for Carl
  Zeiss Planar T* 50mm f/1.4 ZE lens (pending upstream merge)</changelog>
  <changelog author="fcrozat@suse.com" date="1370260800">- Remove pending patches with upstream versions :
  + 99_pending_canon_eos_m.diff (replaced by
    90_changeset_r2993.diff).
  + 99_pending_minolta_manual_lens.diff (replaced by
    90_changeset_r2989.diff).
  + 99_pending_pentax_da_35.diff (replaced by
    90_changeset_r2860.diff).
  + 99_pending_zeiss_planar_35_ze.diff (replaced by
    90_changeset_r3011.diff).
- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  + 90_changeset_r2889.diff, 90_changeset_r2985.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2958.diff: additional lenses for Samsung body
  + 90_changeset_r2959.diff, 90_changeset_r2961.diff,
    90_changeset_r2985.diff, 90_changeset_r3003.diff,
    90_changeset_r3016.diff, 90_changeset_r3017.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2963.diff, 90_changeset_r2994.diff,
    90_changeset_r3004.diff, 90_changeset_r3023.diff,
    90_changeset_r3026.diff: additional lenses for Canon body.
  + 90_changeset_r2968.diff, 90_changeset_r2969.diff,
    90_changeset_r2995.diff, 90_changeset_r3005.diff,
    90_changeset_r3006.diff: additional lenses for Minolta body.
  + 90_changeset_r2970.diff, 90_changeset_r2975.diff,
    90_changeset_r2978.diff, 90_changeset_r2981.diff,
    90_changeset_r2982.diff, 90_changeset_r2992.diff: additional
    lenses for Olympus body.
  + 90_changeset_r2998.diff: add support for FocusDistance data
    from Olympus EXIF tags.
  + 90_changeset_r2984.diff, 90_changeset_r2986.diff,
    90_changeset_r3002.diff: additional lenses for Nikon body.
  + 90_changeset_r2988.diff: add support for Exif.Photo.LensModel
    EXIF tag.
  + 90_changeset_r2990.diff: prevent double variable creation.
  + 90_changeset_r2991.diff: fix memory corruption.
  + 95_post_r3026_cleanup.diff: cleanup lenses names.</changelog>
  <changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
  <changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
  <changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="wbauer@tmo.at" date="1498824000">- Update to version 0.26
  * See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
  * exiv2-cmake-libsuffix.patch
  * exiv2_r3889_r3890_fix_boo964344.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1499169600">- Fix baselibs.conf</changelog>
  <changelog author="wbauer@tmo.at" date="1502280000">- Add fix-crash.patch to prevent crashes in gwenview with certain
  images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
  the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
  upstream</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
    CVE-2017-14864 bsc#1060995,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000)</changelog>
  <changelog author="cfeck@kde.org" date="1511524800">- split developer documentation into separate package</changelog>
  <changelog author="dmueller@suse.com" date="1527681600">- update to latest 0.26 branch:
  * obsoletes 0001-Use-more-GNUInstallDirs.patch
  d4e4288d839d0d9546a05986771f8738c382060c.patch
  gcc-version-check.patch
  7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
  fix-crash.patch
  * adds exiv2-update-to-0.26-branch.patch
  * Fixes CVE-2017-14864 (bsc#1060995),
  CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
  CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
  CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
  CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
  CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
  CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
  CVE-2017-11591 (bsc#1050257)</changelog>
</package>
<package pkgid="adb956bc058c2a85ff9ca81f7ca82305b1f2132890225cb87e0efc6441ad4dc7" name="libexiv2-26-32bit" arch="x86_64">
  <version epoch="0" ver="0.26" rel="lp150.5.6.1"/>
  <changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
  <changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
  <changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="wbauer@tmo.at" date="1498824000">- Update to version 0.26
  * See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
  * exiv2-cmake-libsuffix.patch
  * exiv2_r3889_r3890_fix_boo964344.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1499169600">- Fix baselibs.conf</changelog>
  <changelog author="wbauer@tmo.at" date="1502280000">- Add fix-crash.patch to prevent crashes in gwenview with certain
  images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
  the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
  upstream</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
    CVE-2017-14864 bsc#1060995,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000)</changelog>
  <changelog author="cfeck@kde.org" date="1511524800">- split developer documentation into separate package</changelog>
  <changelog author="dmueller@suse.com" date="1527681600">- update to latest 0.26 branch:
  * obsoletes 0001-Use-more-GNUInstallDirs.patch
  d4e4288d839d0d9546a05986771f8738c382060c.patch
  gcc-version-check.patch
  7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
  fix-crash.patch
  * adds exiv2-update-to-0.26-branch.patch
  * Fixes CVE-2017-14864 (bsc#1060995),
  CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
  CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
  CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
  CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
  CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
  CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
  CVE-2017-11591 (bsc#1050257)</changelog>
  <changelog author="tchvatal@suse.com" date="1530273600">- Fix build on python3 only system by making sure we use
  python3 when building</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1539691200">- update to latest 0.26 branch:
  * Fixes CVE-2018-12264, CVE-2018-12265 (bsc#1097599)</changelog>
</package>
<package pkgid="740147e9cce3987d0e7cc2865a8488db443e31a3be573bba76b96f0e095b39eb" name="libexiv2-devel" arch="x86_64">
  <version epoch="0" ver="0.26" rel="lp150.5.3.1"/>
  <changelog author="fcrozat@suse.com" date="1348056000">- Add 90_changeset_r2743.diff: add support for additional Samgsung
  EXIF tags (backport for upstream)
- Add 90_changeset_r2744.diff: add support for additional Pentax
  EXIF tags (backport for upstream)
- Add more Canon models (5D Mark III, 600D, 60D, 1100D, WFT-E2 II,
  WFT-E4 II, 650D)
- Add 90_changeset_r2756.diff: add support for EOS-M Sigma 12-24mm
  f/4.5-5.6 DG HSM II lens (backport from upstream)
- Add 90_changeset_r2818_partial.diff: add support for additional
  Canon camera (5D Mark III, 600D, 60D, 1100D, WFT-E2 II, WFT-E4
  II, 650D) and EF/EF-M lenses. (backport from upstream)
- Add 99_pending_canon_eos_m.diff: add support for some Canon EOS-M
  lenses (pending upstream merge)
- Add 99_pending_minolta_manual_lens.diff: add support for Minolta
  manual lens (pending upstream merge)
- Add 99_pending_pentax_da_35.diff: add support for PENTAX-DA 35mm
  F2.4 AL lens (pending upstream merge)
- Add 99_pending_zeiss_planar_35_ze.diff: add support for Carl
  Zeiss Planar T* 50mm f/1.4 ZE lens (pending upstream merge)</changelog>
  <changelog author="fcrozat@suse.com" date="1370260800">- Remove pending patches with upstream versions :
  + 99_pending_canon_eos_m.diff (replaced by
    90_changeset_r2993.diff).
  + 99_pending_minolta_manual_lens.diff (replaced by
    90_changeset_r2989.diff).
  + 99_pending_pentax_da_35.diff (replaced by
    90_changeset_r2860.diff).
  + 99_pending_zeiss_planar_35_ze.diff (replaced by
    90_changeset_r3011.diff).
- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  + 90_changeset_r2889.diff, 90_changeset_r2985.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2958.diff: additional lenses for Samsung body
  + 90_changeset_r2959.diff, 90_changeset_r2961.diff,
    90_changeset_r2985.diff, 90_changeset_r3003.diff,
    90_changeset_r3016.diff, 90_changeset_r3017.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2963.diff, 90_changeset_r2994.diff,
    90_changeset_r3004.diff, 90_changeset_r3023.diff,
    90_changeset_r3026.diff: additional lenses for Canon body.
  + 90_changeset_r2968.diff, 90_changeset_r2969.diff,
    90_changeset_r2995.diff, 90_changeset_r3005.diff,
    90_changeset_r3006.diff: additional lenses for Minolta body.
  + 90_changeset_r2970.diff, 90_changeset_r2975.diff,
    90_changeset_r2978.diff, 90_changeset_r2981.diff,
    90_changeset_r2982.diff, 90_changeset_r2992.diff: additional
    lenses for Olympus body.
  + 90_changeset_r2998.diff: add support for FocusDistance data
    from Olympus EXIF tags.
  + 90_changeset_r2984.diff, 90_changeset_r2986.diff,
    90_changeset_r3002.diff: additional lenses for Nikon body.
  + 90_changeset_r2988.diff: add support for Exif.Photo.LensModel
    EXIF tag.
  + 90_changeset_r2990.diff: prevent double variable creation.
  + 90_changeset_r2991.diff: fix memory corruption.
  + 95_post_r3026_cleanup.diff: cleanup lenses names.</changelog>
  <changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
  <changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
  <changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="wbauer@tmo.at" date="1498824000">- Update to version 0.26
  * See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
  * exiv2-cmake-libsuffix.patch
  * exiv2_r3889_r3890_fix_boo964344.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1499169600">- Fix baselibs.conf</changelog>
  <changelog author="wbauer@tmo.at" date="1502280000">- Add fix-crash.patch to prevent crashes in gwenview with certain
  images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
  the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
  upstream</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
    CVE-2017-14864 bsc#1060995,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000)</changelog>
  <changelog author="cfeck@kde.org" date="1511524800">- split developer documentation into separate package</changelog>
  <changelog author="dmueller@suse.com" date="1527681600">- update to latest 0.26 branch:
  * obsoletes 0001-Use-more-GNUInstallDirs.patch
  d4e4288d839d0d9546a05986771f8738c382060c.patch
  gcc-version-check.patch
  7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
  fix-crash.patch
  * adds exiv2-update-to-0.26-branch.patch
  * Fixes CVE-2017-14864 (bsc#1060995),
  CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
  CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
  CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
  CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
  CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
  CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
  CVE-2017-11591 (bsc#1050257)</changelog>
</package>
<package pkgid="0991a6f9f917868e90ff09c868f689cd1ced64eacce25ef86c9ffb4c289ea87d" name="libexiv2-devel" arch="x86_64">
  <version epoch="0" ver="0.26" rel="lp150.5.6.1"/>
  <changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
  <changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
  <changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="wbauer@tmo.at" date="1498824000">- Update to version 0.26
  * See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
  * exiv2-cmake-libsuffix.patch
  * exiv2_r3889_r3890_fix_boo964344.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1499169600">- Fix baselibs.conf</changelog>
  <changelog author="wbauer@tmo.at" date="1502280000">- Add fix-crash.patch to prevent crashes in gwenview with certain
  images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
  the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
  upstream</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
    CVE-2017-14864 bsc#1060995,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000)</changelog>
  <changelog author="cfeck@kde.org" date="1511524800">- split developer documentation into separate package</changelog>
  <changelog author="dmueller@suse.com" date="1527681600">- update to latest 0.26 branch:
  * obsoletes 0001-Use-more-GNUInstallDirs.patch
  d4e4288d839d0d9546a05986771f8738c382060c.patch
  gcc-version-check.patch
  7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
  fix-crash.patch
  * adds exiv2-update-to-0.26-branch.patch
  * Fixes CVE-2017-14864 (bsc#1060995),
  CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
  CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
  CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
  CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
  CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
  CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
  CVE-2017-11591 (bsc#1050257)</changelog>
  <changelog author="tchvatal@suse.com" date="1530273600">- Fix build on python3 only system by making sure we use
  python3 when building</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1539691200">- update to latest 0.26 branch:
  * Fixes CVE-2018-12264, CVE-2018-12265 (bsc#1097599)</changelog>
</package>
<package pkgid="2a06261ce8ecb5520a680b132e8e7dc91cb8bde0d1bc251fc725394fc343d45a" name="libexiv2-doc" arch="x86_64">
  <version epoch="0" ver="0.26" rel="lp150.5.3.1"/>
  <changelog author="fcrozat@suse.com" date="1348056000">- Add 90_changeset_r2743.diff: add support for additional Samgsung
  EXIF tags (backport for upstream)
- Add 90_changeset_r2744.diff: add support for additional Pentax
  EXIF tags (backport for upstream)
- Add more Canon models (5D Mark III, 600D, 60D, 1100D, WFT-E2 II,
  WFT-E4 II, 650D)
- Add 90_changeset_r2756.diff: add support for EOS-M Sigma 12-24mm
  f/4.5-5.6 DG HSM II lens (backport from upstream)
- Add 90_changeset_r2818_partial.diff: add support for additional
  Canon camera (5D Mark III, 600D, 60D, 1100D, WFT-E2 II, WFT-E4
  II, 650D) and EF/EF-M lenses. (backport from upstream)
- Add 99_pending_canon_eos_m.diff: add support for some Canon EOS-M
  lenses (pending upstream merge)
- Add 99_pending_minolta_manual_lens.diff: add support for Minolta
  manual lens (pending upstream merge)
- Add 99_pending_pentax_da_35.diff: add support for PENTAX-DA 35mm
  F2.4 AL lens (pending upstream merge)
- Add 99_pending_zeiss_planar_35_ze.diff: add support for Carl
  Zeiss Planar T* 50mm f/1.4 ZE lens (pending upstream merge)</changelog>
  <changelog author="fcrozat@suse.com" date="1370260800">- Remove pending patches with upstream versions :
  + 99_pending_canon_eos_m.diff (replaced by
    90_changeset_r2993.diff).
  + 99_pending_minolta_manual_lens.diff (replaced by
    90_changeset_r2989.diff).
  + 99_pending_pentax_da_35.diff (replaced by
    90_changeset_r2860.diff).
  + 99_pending_zeiss_planar_35_ze.diff (replaced by
    90_changeset_r3011.diff).
- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  + 90_changeset_r2889.diff, 90_changeset_r2985.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2958.diff: additional lenses for Samsung body
  + 90_changeset_r2959.diff, 90_changeset_r2961.diff,
    90_changeset_r2985.diff, 90_changeset_r3003.diff,
    90_changeset_r3016.diff, 90_changeset_r3017.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2963.diff, 90_changeset_r2994.diff,
    90_changeset_r3004.diff, 90_changeset_r3023.diff,
    90_changeset_r3026.diff: additional lenses for Canon body.
  + 90_changeset_r2968.diff, 90_changeset_r2969.diff,
    90_changeset_r2995.diff, 90_changeset_r3005.diff,
    90_changeset_r3006.diff: additional lenses for Minolta body.
  + 90_changeset_r2970.diff, 90_changeset_r2975.diff,
    90_changeset_r2978.diff, 90_changeset_r2981.diff,
    90_changeset_r2982.diff, 90_changeset_r2992.diff: additional
    lenses for Olympus body.
  + 90_changeset_r2998.diff: add support for FocusDistance data
    from Olympus EXIF tags.
  + 90_changeset_r2984.diff, 90_changeset_r2986.diff,
    90_changeset_r3002.diff: additional lenses for Nikon body.
  + 90_changeset_r2988.diff: add support for Exif.Photo.LensModel
    EXIF tag.
  + 90_changeset_r2990.diff: prevent double variable creation.
  + 90_changeset_r2991.diff: fix memory corruption.
  + 95_post_r3026_cleanup.diff: cleanup lenses names.</changelog>
  <changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
  <changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
  <changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="wbauer@tmo.at" date="1498824000">- Update to version 0.26
  * See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
  * exiv2-cmake-libsuffix.patch
  * exiv2_r3889_r3890_fix_boo964344.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1499169600">- Fix baselibs.conf</changelog>
  <changelog author="wbauer@tmo.at" date="1502280000">- Add fix-crash.patch to prevent crashes in gwenview with certain
  images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
  the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
  upstream</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
    CVE-2017-14864 bsc#1060995,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000)</changelog>
  <changelog author="cfeck@kde.org" date="1511524800">- split developer documentation into separate package</changelog>
  <changelog author="dmueller@suse.com" date="1527681600">- update to latest 0.26 branch:
  * obsoletes 0001-Use-more-GNUInstallDirs.patch
  d4e4288d839d0d9546a05986771f8738c382060c.patch
  gcc-version-check.patch
  7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
  fix-crash.patch
  * adds exiv2-update-to-0.26-branch.patch
  * Fixes CVE-2017-14864 (bsc#1060995),
  CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
  CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
  CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
  CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
  CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
  CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
  CVE-2017-11591 (bsc#1050257)</changelog>
</package>
<package pkgid="c05c366e3c4daba8c1c727f440c6808599b4e583842a3135862487af3421152e" name="libexiv2-doc" arch="x86_64">
  <version epoch="0" ver="0.26" rel="lp150.5.6.1"/>
  <changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
  <changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
  <changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="wbauer@tmo.at" date="1498824000">- Update to version 0.26
  * See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
  * exiv2-cmake-libsuffix.patch
  * exiv2_r3889_r3890_fix_boo964344.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1499169600">- Fix baselibs.conf</changelog>
  <changelog author="wbauer@tmo.at" date="1502280000">- Add fix-crash.patch to prevent crashes in gwenview with certain
  images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
  the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
  upstream</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
    CVE-2017-14864 bsc#1060995,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000)</changelog>
  <changelog author="cfeck@kde.org" date="1511524800">- split developer documentation into separate package</changelog>
  <changelog author="dmueller@suse.com" date="1527681600">- update to latest 0.26 branch:
  * obsoletes 0001-Use-more-GNUInstallDirs.patch
  d4e4288d839d0d9546a05986771f8738c382060c.patch
  gcc-version-check.patch
  7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
  fix-crash.patch
  * adds exiv2-update-to-0.26-branch.patch
  * Fixes CVE-2017-14864 (bsc#1060995),
  CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
  CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
  CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
  CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
  CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
  CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
  CVE-2017-11591 (bsc#1050257)</changelog>
  <changelog author="tchvatal@suse.com" date="1530273600">- Fix build on python3 only system by making sure we use
  python3 when building</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1539691200">- update to latest 0.26 branch:
  * Fixes CVE-2018-12264, CVE-2018-12265 (bsc#1097599)</changelog>
</package>
<package pkgid="0497128293340c0ab7b793d5f35e4eddaa6846280e09d659d172f222ce47e949" name="libext2fs-devel" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp150.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1434801600">- e2fsprogs-1.41.1-splash_support.patch: Drop it, this patch
  depends on the old in kernel "bootsplash" patches that were
  removed after the introduction of plymouth.</changelog>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
</package>
<package pkgid="084256b4f2ad544c655a1613184e47fb91d1606ef341af03d6f16ae2b721fb08" name="libext2fs-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp150.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1434801600">- e2fsprogs-1.41.1-splash_support.patch: Drop it, this patch
  depends on the old in kernel "bootsplash" patches that were
  removed after the introduction of plymouth.</changelog>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
</package>
<package pkgid="06ce9a1d1fde6fc9454072bdf04ad3c0be009d01dc6ab8628544c55ad451c9b7" name="libext2fs-devel-static" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp150.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1434801600">- e2fsprogs-1.41.1-splash_support.patch: Drop it, this patch
  depends on the old in kernel "bootsplash" patches that were
  removed after the introduction of plymouth.</changelog>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
</package>
<package pkgid="aac36386497d4eae1308018f0f3cd195898b2c32ab051b7da443d0547dd95149" name="libext2fs2" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp150.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1434801600">- e2fsprogs-1.41.1-splash_support.patch: Drop it, this patch
  depends on the old in kernel "bootsplash" patches that were
  removed after the introduction of plymouth.</changelog>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
</package>
<package pkgid="cfd8eb7297d9ebb8294e81ab71e285b529268af0a0f6dee398a13f303d1bf473" name="libext2fs2-32bit" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp150.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1434801600">- e2fsprogs-1.41.1-splash_support.patch: Drop it, this patch
  depends on the old in kernel "bootsplash" patches that were
  removed after the introduction of plymouth.</changelog>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
</package>
<package pkgid="ae602fe7e1a691cf066736768ee92acf96ae8ab49bff570450c1cd27fe80e817" name="libfaxutil5_5_9" arch="x86_64">
  <version epoch="0" ver="5.5.9" rel="lp150.5.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1424260800">- dependency on tiff added
- build dependency on ghostscript</changelog>
  <changelog author="axel.braun@gmx.de" date="1424779200">- fix for bnc#856906 also for client package</changelog>
  <changelog author="pth@suse.de" date="1426161600">- Move libfaxutil into its own sub package (bnc#922017).</changelog>
  <changelog author="hpj@urpla.net" date="1426161601">- fix standalone hylafax+-client fallout</changelog>
  <changelog author="axel.braun@gmx.de" date="1430740800">- bnc#922402 update overwrites send-only settings to systemd config</changelog>
  <changelog author="axel.braun@gmx.de" date="1436875200">- release 5.5.6
  * add typerules suggestion for PNG conversion (19 Mar 2015)
  * support more than 256 pages in Class 1 ECM (26 Feb 2015)
  * cope with application/pdf being encoded with quoted-printable
  in faxmail (13 Feb 2015)
  * fix npages and totpages recording in sendq when proxied (31 Jan 2015)
  * fix EOF reading fault on badly-formatted MIME in faxmail (12 Jan 2015)
  * fix hi-res tagline imaging on 64-bit systems (10 Dec 2014)
  * add support for seqf.increment files to indicate seqf
  incrementation (14 Nov 2014)
  * add support to faxmail to decode long-wrapped base64 (11, 14-15 Oct 2014)
  * fix proxy setting of null taglines (16 Sep 2014)
  * fix ModemWaitForConnect configuration setting (16 Sep 2014)
  * add debug messages for the attempt to locate a suitable modem
  for jobs (12 Aug 2014)
  * fix missed data type for libtiff v4 (31 Jul, 11 Aug 2014)
  * fix faxsend segfault caused by an empty TagLine field introduced in
  alignment features added in 5.5.5 (25 Jul 2014)
  * pass job priority to the proxy server (21 Jul 2014)
  * add JobHostID feature (16, 29-31 Jul 2014)
  * fix instances where a NULL return of crypt() is ignored (13 Jul 2014)
  * improve support for utmpx on BSD (10 Jul 2014)
  * apply some downstream patches from FreeBSD ports (10 Jul 2014)
  * use ps2write in faxmail pdf converter if pswrite is missing (6 Jul 2014)
  * modify FIFO usage and remove CONFIG_FIFOBUG and CONFIG_OPENFIFO (5 Jul 2014)</changelog>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
</package>
<package pkgid="75dcebb6476d65e981366fb9f260569bfa2cfd8c4c6e6c0fce5afc924495ce43" name="libfaxutil5_6_1" arch="x86_64">
  <version epoch="0" ver="5.6.1" rel="lp150.5.6.1"/>
  <changelog author="axel.braun@gmx.de" date="1430740800">- bnc#922402 update overwrites send-only settings to systemd config</changelog>
  <changelog author="axel.braun@gmx.de" date="1436875200">- release 5.5.6
  * add typerules suggestion for PNG conversion (19 Mar 2015)
  * support more than 256 pages in Class 1 ECM (26 Feb 2015)
  * cope with application/pdf being encoded with quoted-printable
  in faxmail (13 Feb 2015)
  * fix npages and totpages recording in sendq when proxied (31 Jan 2015)
  * fix EOF reading fault on badly-formatted MIME in faxmail (12 Jan 2015)
  * fix hi-res tagline imaging on 64-bit systems (10 Dec 2014)
  * add support for seqf.increment files to indicate seqf
  incrementation (14 Nov 2014)
  * add support to faxmail to decode long-wrapped base64 (11, 14-15 Oct 2014)
  * fix proxy setting of null taglines (16 Sep 2014)
  * fix ModemWaitForConnect configuration setting (16 Sep 2014)
  * add debug messages for the attempt to locate a suitable modem
  for jobs (12 Aug 2014)
  * fix missed data type for libtiff v4 (31 Jul, 11 Aug 2014)
  * fix faxsend segfault caused by an empty TagLine field introduced in
  alignment features added in 5.5.5 (25 Jul 2014)
  * pass job priority to the proxy server (21 Jul 2014)
  * add JobHostID feature (16, 29-31 Jul 2014)
  * fix instances where a NULL return of crypt() is ignored (13 Jul 2014)
  * improve support for utmpx on BSD (10 Jul 2014)
  * apply some downstream patches from FreeBSD ports (10 Jul 2014)
  * use ps2write in faxmail pdf converter if pswrite is missing (6 Jul 2014)
  * modify FIFO usage and remove CONFIG_FIFOBUG and CONFIG_OPENFIFO (5 Jul 2014)</changelog>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
  <changelog author="axel.braun@gmx.de" date="1534334400">- version 5.6.0
  * notification.diff removed (part of 5.6.0 now)
  * some adjustments to assist AIX 6.1 builds (29 Jun 2018)
  * initial support for systemd in faxsetup (29 Jun 2018)
  * fix RFC2047 encoding by notify (27 Jun, 3 Jul 2018)
  * add jobcontrol PageSize feature (27 Jun 2018)
  * fix various compiler warnings (27 Jun 2018)
  * fix build on musl-based distribution (27 Jun 2018)
  * don't wait forever after +FRH:3 (18 Jun 2018)
  * add -A and -B options to tagtest (22 Feb 2018)
  * make tagtest use the TSI and CallerID data, if available (21 Feb 2018)
  * make tagtest use the date from the TIFF tags, if available,
  instead of "now" (20 Feb 2018)
  * pass Content-Type name and Content-Disposition filename
  information to faxmail MIMEHandlers (15 Jan 2018)
  * fix faxmail transition between a message and external types (15 Jan 2018)
  * fix warning for major and minor macros move to sysmacros.h (19 Dec 2017)
  * avoid pagehandling from introducing some unnecessary EOM signals (15 Dec 2017)
  * improve proxy connection error handling and logging (5 Dec 2017)
  * fix for reproducible builds (11 Sep 2017)
  * fix quote escaping in client apps (5 Sep 2017)
  * treat callingnumber  as null (25, 31 Aug 2017)
  * add initial ModemGroup limits feature (24 Aug 2017)
  * add CLEANFAXDATA and BADFAXLINES TIFF tags for ECM receptions (10 Aug 2017)
  * pass the user's uid onto the session log file for sent faxes (25 Jul 2017)
  * improve job waits to minimize triggers (30 May 2017)
  * increase FIFO read size and add logging information (25 May 2017)
  * add ProxyTaglineFormat and ProxyTSI features (13 Mar 2017)</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Trim "enterprise" nonsense marketing.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537185600">- use systemd template unit file for hylafax-faxgetty services
- fix services</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537272000">- version 5.6.1:
  * CVE-2018-17141: fixes multiple JPEG vulnerabilities affecting
    fax page reception in JPEG format. Specially crafted input may
    have allowed remote execution of arbitrary code (boo#1109084)</changelog>
</package>
<package pkgid="c96b02814d6a03c4611c942be23804b9b18fa92235478bd18318ad395b3cfc3c" name="libfaxutil5_6_1" arch="x86_64">
  <version epoch="0" ver="5.6.1" rel="lp150.5.9.1"/>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
  <changelog author="axel.braun@gmx.de" date="1534334400">- version 5.6.0
  * notification.diff removed (part of 5.6.0 now)
  * some adjustments to assist AIX 6.1 builds (29 Jun 2018)
  * initial support for systemd in faxsetup (29 Jun 2018)
  * fix RFC2047 encoding by notify (27 Jun, 3 Jul 2018)
  * add jobcontrol PageSize feature (27 Jun 2018)
  * fix various compiler warnings (27 Jun 2018)
  * fix build on musl-based distribution (27 Jun 2018)
  * don't wait forever after +FRH:3 (18 Jun 2018)
  * add -A and -B options to tagtest (22 Feb 2018)
  * make tagtest use the TSI and CallerID data, if available (21 Feb 2018)
  * make tagtest use the date from the TIFF tags, if available,
  instead of "now" (20 Feb 2018)
  * pass Content-Type name and Content-Disposition filename
  information to faxmail MIMEHandlers (15 Jan 2018)
  * fix faxmail transition between a message and external types (15 Jan 2018)
  * fix warning for major and minor macros move to sysmacros.h (19 Dec 2017)
  * avoid pagehandling from introducing some unnecessary EOM signals (15 Dec 2017)
  * improve proxy connection error handling and logging (5 Dec 2017)
  * fix for reproducible builds (11 Sep 2017)
  * fix quote escaping in client apps (5 Sep 2017)
  * treat callingnumber  as null (25, 31 Aug 2017)
  * add initial ModemGroup limits feature (24 Aug 2017)
  * add CLEANFAXDATA and BADFAXLINES TIFF tags for ECM receptions (10 Aug 2017)
  * pass the user's uid onto the session log file for sent faxes (25 Jul 2017)
  * improve job waits to minimize triggers (30 May 2017)
  * increase FIFO read size and add logging information (25 May 2017)
  * add ProxyTaglineFormat and ProxyTSI features (13 Mar 2017)</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Trim "enterprise" nonsense marketing.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537185600">- use systemd template unit file for hylafax-faxgetty services
- fix services</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537272000">- version 5.6.1:
  * CVE-2018-17141: fixes multiple JPEG vulnerabilities affecting
    fax page reception in JPEG format. Specially crafted input may
    have allowed remote execution of arbitrary code (boo#1109084)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1542024000">- boo#1115532 JBIG-in-tiff conversion added
  (Build Requirement tiff, libtiff)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Do not use tabs in spec</changelog>
</package>
<package pkgid="f989e640f3c1737c9d7f407ef947b6159333bbb1710a89b598bb4ca234b490a7" name="libfdisk-devel" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="b26e2ad96f50a10234504145f16093d6f16f7c71c54c4b7e7bf3e3a4355b6bc8" name="libfdisk-devel" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="75ba1135d839810582147c3c544fc4fb34f2b31bdf2f18c204f10d1f132f730e" name="libfdisk-devel-static" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="caea56a6919009cee07051d89a7047f39af845209885bf16ff670277ea9a8c5b" name="libfdisk-devel-static" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="b9e7b4467dc25f7f42004e5d66b4c20687b19c25efb2d5d46048003c20f07e5c" name="libfdisk1" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="f230bdf342a7ecbc54400c09601fc270fd283fab6604272160067b4fbdcc54da" name="libfdisk1" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="7ce29b0b328aec482462b22f74996af51e3f44f49ffae6071e4343fa55da727f" name="libfreebl3" arch="x86_64">
  <version epoch="0" ver="3.36.4" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1471867200">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
  <changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
  <changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
  <changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
</package>
<package pkgid="1c59ce4cc1d9abb4793d998ead543084b7428a03dcd3bfea8e4951a1de3cf2fa" name="libfreebl3-32bit" arch="x86_64">
  <version epoch="0" ver="3.36.4" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1471867200">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
  <changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
  <changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
  <changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
</package>
<package pkgid="2b4ae7916bd91a471f6dab5935ea2f967c8c5e2e7e5dff5dc6009d545e980747" name="libfuse2" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="lp150.2.3.1"/>
  <changelog author="mszeredi@suse.cz" date="1327492800">- use %set_permissions instead of %run_permissions in specfile</changelog>
  <changelog author="puzel@suse.com" date="1335096000">- update to 2.9.0
  - Add "zero copy" support for kernel 2.6.35 or newer
  - Make maximum background requests tunable on kernel 2.6.32 or
    newer
  - Require --no-canonicalize in (u)mount (util-linux version 2.18
    or newer) to fix security problems with fusermount
  - Use dynamically sized hash tables in high level library
  - Memory use of filesystem daemon can shrink more easily
  - Add "auto_unmount" option
  - Add "remember" option
  - Add man pages for fusermount, mount.fuse and ulockmgr_server
  - API changes:
  - Introduce "store" and "retrieve" for accessing kernel
    buffers on kernel 2.6.36 or newer
  - Introduce abstract buffer for zero copy operations
  - Allow path calculation to be omitted on certain operations
  - Allow batching forget requests
  - Add "flock" method
  - Add support for ioctl on directories
  - Add delete notification
- drop fuse-pc-remove-libdir-from-Libs.diff (upstream)</changelog>
  <changelog author="rschweikert@suse.com" date="1335441600">- place binaries in /usr tree (UsrMerge project)</changelog>
  <changelog author="mszeredi@suse.cz" date="1337169600">- Fix -pthread in fuse.pc [bnc#761117]</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Trim list of FUSE fses from description (it's literally endless)
  and text inappropraite for subpackages</changelog>
  <changelog author="coolo@suse.com" date="1341230400">- avoid autoreconf to avoid breaking on updates of auto* tools</changelog>
  <changelog author="coolo@suse.com" date="1359806400">- update license to new format</changelog>
  <changelog author="archie@dellroad.org" date="1362398400">- Update to version 2.9.2
  - Add support for fallocate() (kernel &gt;= 3.5)
  - Bug fixes
- Remove fix-pthread-in-fuse.pc.patch; now included in upstream
- Don't patch generated files such as configure and Makefile.in;
  instead, regenerate them using makeconf.sh from SVN repository</changelog>
  <changelog author="idonmez@suse.com" date="1362744000">- Use autoreconf directly instead of makeconf.sh</changelog>
  <changelog author="dmueller@suse.com" date="1364299200">- fix build for SLE_11</changelog>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1371384000">- add aarch64-build-fix.patch</changelog>
  <changelog author="mszeredi@suse.cz" date="1374667200">- Update to version 2.9.3
  - Bug fixes
- Remove fuse-gnu_source.patch (fixed upstream)</changelog>
  <changelog author="bwiedemann@suse.com" date="1418212800">- include commented default fuse.conf (bnc#908292)</changelog>
  <changelog author="mszeredi@suse.cz" date="1432296000">- Update to version 2.9.4
  - fix exec environment for mount and umount (bsc#931452,
    CVE-2015-3202)
  - properly restore the default signal handler
  - fix directory file handle passed to	ioctl() method.
  - fix for uids/gids larger than 2147483647
  - initialize stat buffer passed to -&gt;getattr() and -&gt;fgetattr()</changelog>
  <changelog author="astieger@suse.com" date="1453464000">- fuse 2.9.5:
  * fix warning in mount.c:receive_fd().
  * fix possible memory leak.
  * new upstream project and source URL
  * add new maintainer keyring and verify source signature</changelog>
  <changelog author="fcrozat@suse.com" date="1501502400">- Ensure trusted group is available on Tumbleweed.</changelog>
  <changelog author="admorgan@morgancomputers.net" date="1507291200">- fuse 2.9.7
  * Shared-object version has now been bumped correctly.
  * Added SELinux support.
  * Fixed race-condition when session is terminated right after
    starting a FUSE file system.</changelog>
  <changelog author="admorgan@morgancomputers.net" date="1508155200">- Fix download link in fuse.spec</changelog>
  <changelog author="rgoldwyn@suse.com" date="1536667200">- user_allow_other restriction may be bypassed (bsc#1101797, CVE-2018-10906)
  - fusermount-prevent-silent-truncation-of-mount-options.patch
  - fusermount-dont-feed-escaped-commans-into-mount-options.patch
  - fusermount-bail-out-on-transient-config-read-failure.patch
  - fusermount-refuse-unknown-options.patch
  - fusermount-whitelist-known-good-filesystems-for-mountpoints.patch</changelog>
</package>
<package pkgid="0f331a44755d243b3f0230e21ff9afb3e3c08071563debab96452db78ee411bc" name="libfuse2-32bit" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="lp150.2.3.1"/>
  <changelog author="mszeredi@suse.cz" date="1327492800">- use %set_permissions instead of %run_permissions in specfile</changelog>
  <changelog author="puzel@suse.com" date="1335096000">- update to 2.9.0
  - Add "zero copy" support for kernel 2.6.35 or newer
  - Make maximum background requests tunable on kernel 2.6.32 or
    newer
  - Require --no-canonicalize in (u)mount (util-linux version 2.18
    or newer) to fix security problems with fusermount
  - Use dynamically sized hash tables in high level library
  - Memory use of filesystem daemon can shrink more easily
  - Add "auto_unmount" option
  - Add "remember" option
  - Add man pages for fusermount, mount.fuse and ulockmgr_server
  - API changes:
  - Introduce "store" and "retrieve" for accessing kernel
    buffers on kernel 2.6.36 or newer
  - Introduce abstract buffer for zero copy operations
  - Allow path calculation to be omitted on certain operations
  - Allow batching forget requests
  - Add "flock" method
  - Add support for ioctl on directories
  - Add delete notification
- drop fuse-pc-remove-libdir-from-Libs.diff (upstream)</changelog>
  <changelog author="rschweikert@suse.com" date="1335441600">- place binaries in /usr tree (UsrMerge project)</changelog>
  <changelog author="mszeredi@suse.cz" date="1337169600">- Fix -pthread in fuse.pc [bnc#761117]</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Trim list of FUSE fses from description (it's literally endless)
  and text inappropraite for subpackages</changelog>
  <changelog author="coolo@suse.com" date="1341230400">- avoid autoreconf to avoid breaking on updates of auto* tools</changelog>
  <changelog author="coolo@suse.com" date="1359806400">- update license to new format</changelog>
  <changelog author="archie@dellroad.org" date="1362398400">- Update to version 2.9.2
  - Add support for fallocate() (kernel &gt;= 3.5)
  - Bug fixes
- Remove fix-pthread-in-fuse.pc.patch; now included in upstream
- Don't patch generated files such as configure and Makefile.in;
  instead, regenerate them using makeconf.sh from SVN repository</changelog>
  <changelog author="idonmez@suse.com" date="1362744000">- Use autoreconf directly instead of makeconf.sh</changelog>
  <changelog author="dmueller@suse.com" date="1364299200">- fix build for SLE_11</changelog>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1371384000">- add aarch64-build-fix.patch</changelog>
  <changelog author="mszeredi@suse.cz" date="1374667200">- Update to version 2.9.3
  - Bug fixes
- Remove fuse-gnu_source.patch (fixed upstream)</changelog>
  <changelog author="bwiedemann@suse.com" date="1418212800">- include commented default fuse.conf (bnc#908292)</changelog>
  <changelog author="mszeredi@suse.cz" date="1432296000">- Update to version 2.9.4
  - fix exec environment for mount and umount (bsc#931452,
    CVE-2015-3202)
  - properly restore the default signal handler
  - fix directory file handle passed to	ioctl() method.
  - fix for uids/gids larger than 2147483647
  - initialize stat buffer passed to -&gt;getattr() and -&gt;fgetattr()</changelog>
  <changelog author="astieger@suse.com" date="1453464000">- fuse 2.9.5:
  * fix warning in mount.c:receive_fd().
  * fix possible memory leak.
  * new upstream project and source URL
  * add new maintainer keyring and verify source signature</changelog>
  <changelog author="fcrozat@suse.com" date="1501502400">- Ensure trusted group is available on Tumbleweed.</changelog>
  <changelog author="admorgan@morgancomputers.net" date="1507291200">- fuse 2.9.7
  * Shared-object version has now been bumped correctly.
  * Added SELinux support.
  * Fixed race-condition when session is terminated right after
    starting a FUSE file system.</changelog>
  <changelog author="admorgan@morgancomputers.net" date="1508155200">- Fix download link in fuse.spec</changelog>
  <changelog author="rgoldwyn@suse.com" date="1536667200">- user_allow_other restriction may be bypassed (bsc#1101797, CVE-2018-10906)
  - fusermount-prevent-silent-truncation-of-mount-options.patch
  - fusermount-dont-feed-escaped-commans-into-mount-options.patch
  - fusermount-bail-out-on-transient-config-read-failure.patch
  - fusermount-refuse-unknown-options.patch
  - fusermount-whitelist-known-good-filesystems-for-mountpoints.patch</changelog>
</package>
<package pkgid="d610c6d116fecfa696ec6a89c92ed2cf722c890c08a0c4305d9d323a103d8d4d" name="libfwup1" arch="x86_64">
  <version epoch="0" ver="9+git21.gcd8f7d7" rel="lp150.5.3.1"/>
  <changelog author="glin@suse.com" date="1456920000">- initial import 0.5 (FATE#319345)
- Add fwupdate-suse-build.patch to change the destination of the
  EFI files and remove the po files</changelog>
  <changelog author="glin@suse.com" date="1459166400">- Add the missing Group</changelog>
  <changelog author="coolo@suse.com" date="1462536000">- own bash-completion directory as no longer provided by
  util-linux (boo#977259)</changelog>
  <changelog author="jengelh@inai.de" date="1462708800">- Drop unnecessary specfile elements.
  fwupdate seems not required for libfwup, remove the requirement.
- Correct requires of fwupdate-devel
- Use source URLs</changelog>
  <changelog author="glin@suse.com" date="1467892800">- Correct the EFI dir for SLE-12-SP2 (FATE#319345)
- Install fwup*.efi to the EFI system partition (FATE#319345)
- Add fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch to
  fix the file mode (bsc#988000)</changelog>
  <changelog author="glin@suse.com" date="1468584000">- Add fwupdate-fix-efivar-0.24-api.patch to fix the compilation
  errors due to the change of efivar APIs
- Bump BuildRequires of efivar-devel to 0.24
- Add fwupdate-unset-immutable-flag.patch to unset the immutable
  flag before clean the EFI variables (bsc#964726)
- Amend fwupdate-suse-build.patch (FATE#319345)
  + omit the build-id and package fwudpate-efi-debuginfo in a less
    hacky way.
  + Use the RPM_OPT_FLAGS for the user space programs
- Add fwupdate-bsc988886-add-leading-space.patch to add the leading
  space to the load option (bsc#988886)</changelog>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="glin@suse.com" date="1540814400">- Add fwupdate-bsc1113008-dont-add-headers-to-fmp-capsules.patch
  to avoid adding headers to FMP capsules (bsc#1113008)
- Add fwupdate-skip-fwupdate-verbose.patch to keep the debug
  variable
- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
</package>
<package pkgid="928f468aaac7b8e1255451ef8af9478fade494b78e358788bbd21bc5461a188c" name="libgarcon-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="4.12.0" rel="lp150.5.3.1"/>
  <changelog author="gber@opensuse.org" date="1362916800">- support openSUSE 13.1</changelog>
  <changelog author="gber@opensuse.org" date="1367496000">- follow the exo package changes and rename exo-branding-openSUSE
  to libexo-1-0-branding-openSUSE and move helpers.rc in an
  API-versioned subdirectory</changelog>
  <changelog author="gber@opensuse.org" date="1380974400">- add support for 13.2, drop support for &lt; 12.2</changelog>
  <changelog author="gber@opensuse.org" date="1383048000">- improve suse_version overlay system
- add xfce4-power-manager-branding-openSUSE with default actions
  for button press events and critical battery levels</changelog>
  <changelog author="gber@opensuse.org" date="1398600000">- remove support for openSUSE &lt; 12.3
- add custom theme for xfce4-notifyd</changelog>
  <changelog author="gber@opensuse.org" date="1398945600">- adjust to GTK 3 variant of libxfce4ui</changelog>
  <changelog author="gber@opensuse.org" date="1401710400">- adapt xfce4-power-manager branding to version 1.3.0
- fix typo
- rename source tarball removing the meaningless version</changelog>
  <changelog author="gber@opensuse.org" date="1401796800">- fix critical power action and hdd spindown settings</changelog>
  <changelog author="gber@opensuse.org" date="1406635200">- recommend xfce4-panel-plugin-xfce4battery which is in the panel
  branding</changelog>
  <changelog author="gber@opensuse.org" date="1408622400">- xfce4-panel-plugin-xfce4battery was renamed to
  power-manager-plugin</changelog>
  <changelog author="gber@opensuse.org" date="1425211200">- bump version to 4.12
- lock screen on suspen/hibernate</changelog>
  <changelog author="gber@opensuse.org" date="1427544000">- on &gt;= 13.2 package-manager.desktop was renamed to
  yast2-packager.desktop (boo#892936)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480161600">- adapt to changes in exo package (exo-1 subdir patch removed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480248000">- fix exo-branding provides / obsoletes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507464000">- replace application-menu with whiskermenu
- brand whiskermenu suse style
- require whiskermenu from panel-branding-openSUSE
- fix obsoletes of exo-branding-openSUSE</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507723200">- use plugin-pulseaudio instead of plugin-mixer
- recommend pavucontrol and plugin-pulseaudio instead of xfe4-mixer</changelog>
  <changelog author="florian.koch1981@gmail.com" date="1514462400">- use adwaita-icon-theme instead of gnome-icon-theme
  as fallback icon theme
  The reasons for this change are that Upstream gnome no
  longer uses gnome-icon-theme, and to save space on te Thumbleweed
  rescue CD, requested by DimStar
  https://lists.opensuse.org/opensuse-xfce/2017-05/msg00000.html
- fix /etc/xfce_defaults.conf not declared as %conf</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514894400">- fix spelling of "Adwaita" in index.theme (boo#1074269)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1517745600">- fix openSUSE splash screen</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520424000">- revert last change, branding package has been fixed</changelog>
</package>
<package pkgid="0c6cddab1613a532bd2c75295c6aaab801d136bc834a666ccdae85ed8586ea38" name="libgbm-devel" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="ab893896a8999b23a93a43d91e7b68ebae37997c0ac65cf0363668488f97e542" name="libgbm-devel-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="769f922bf9648ed5d31f44a0e637c7e719a9b2187732d4eff26b92a7bef8b90a" name="libgbm1" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="711d99376ca85fc9436cd37be1b6f94eb8e0f66012c63f1e920f25281df8b0c3" name="libgbm1-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="57f8204a8482ab733885ae505e59c0525b26a89910902ec0c362663b07147f30" name="libgcrypt" arch="src">
  <version epoch="0" ver="1.8.2" rel="lp150.5.3.1"/>
  <changelog author="astieger@suse.com" date="1444478400">- follow-up to libgcrypt 1.6.4 update: sosuffix is 20.0.4</changelog>
  <changelog author="astieger@suse.com" date="1455019200">- update to 1.6.5:
  * CVE-2015-7511: Mitigate side-channel attack on ECDH with
    Weierstrass curves (boo#965902)</changelog>
  <changelog author="pjanouch@suse.de" date="1463400000">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
  <changelog author="pjanouch@suse.de" date="1463400001">- remove conditionals for unsupported distributions (before 13.2),
  it would not build anyway because of new dependencies</changelog>
  <changelog author="astieger@suse.com" date="1471435200">- libgcrypt 1.6.6:
  * fix CVE-2016-6313: Issue in the mixing functions of the random
    number generators allowed an attacker who obtained a number of
    bytes from the standard RNG to predict some of the next ouput.
    (bsc#994157)</changelog>
  <changelog author="mpluskal,vcizek,astieger}@suse.com" date="1471694400">- libgcrypt 1.7.3:
  * security issue already fixes with 1.6.6
  * Fix building of some asm modules with older compilers and CPUs.
  * ARMv8/AArch32 improvements for AES, GCM, SHA-256, and SHA-1.
- includes changes from libgcrypt 1.7.2:
  * Bug fixes:
  - Fix setting of the ECC cofactor if parameters are specified.
  - Fix memory leak in the ECC code.
  - Remove debug message about unsupported getrandom syscall.
  - Fix build problems related to AVX use.
  - Fix bus errors on ARM for Poly1305, ChaCha20, AES, and SHA-512.
  * Internal changes:
  - Improved fatal error message for wrong use of gcry_md_read.
  - Disallow symmetric encryption/decryption if key is not set.
- includes changes from 1.7.1:
  * Bug fixes:
  - Fix ecc_verify for cofactor support.
  - Fix portability bug when using gcc with Solaris 9 SPARC.
  - Build fix for OpenBSD/amd64
  - Add OIDs to the Serpent ciphers.
  * Internal changes:
  - Use getrandom system call on Linux if available.
  - Blinding is now also used for RSA signature creation.
  - Changed names of debug envvars
- includes changes from 1.7.0:
  * New algorithms and modes:
  - SHA3-224, SHA3-256, SHA3-384, SHA3-512, and MD2 hash algorithms.
  - SHAKE128 and SHAKE256 extendable-output hash algorithms.
  - ChaCha20 stream cipher.
  - Poly1305 message authentication algorithm
  - ChaCha20-Poly1305 Authenticated Encryption with Associated Data
    mode.
  - OCB mode.
  - HMAC-MD2 for use by legacy applications.
  * New curves for ECC:
  - Curve25519.
  - sec256k1.
  - GOST R 34.10-2001 and GOST R 34.10-2012.
  * Performance:
  - Improved performance of KDF functions.
  - Assembler optimized implementations of Blowfish and Serpent on
    ARM.
  - Assembler optimized implementation of 3DES on x86.
  - Improved AES using the SSSE3 based vector permutation method by
    Mike Hamburg.
  - AVX/BMI is used for SHA-1 and SHA-256 on x86.  This is for SHA-1
    about 20% faster than SSSE3 and more than 100% faster than the
    generic C implementation.
  - 40% speedup for SHA-512 and 72% for SHA-1 on ARM Cortex-A8.
  - 60-90% speedup for Whirlpool on x86.
  - 300% speedup for RIPE MD-160.
  - Up to 11 times speedup for CRC functions on x86.
  * Other features:
  - Improved ECDSA and FIPS 186-4 compliance.
  - Support for Montgomery curves.
  - gcry_cipher_set_sbox to tweak S-boxes of the gost28147 cipher
    algorithm.
  - gcry_mpi_ec_sub to subtract two points on a curve.
  - gcry_mpi_ec_decode_point to decode an MPI into a point object.
  - Emulation for broken Whirlpool code prior to 1.6.0.  [from 1.6.1]
  - Flag "pkcs1-raw" to enable PCKS#1 padding with a user supplied
    hash part.
  - Parameter "saltlen" to set a non-default salt length for RSA PSS.
  - A SP800-90A conforming DRNG replaces the former X9.31 alternative
    random number generator.
  - Map deprecated RSA algo number to the RSA algo number for better
    backward compatibility. [from 1.6.2]
  - Use ciphertext blinding for Elgamal decryption [CVE-2014-3591].
    See http://www.cs.tau.ac.il/~tromer/radioexp/ for details.
    [from 1.6.3]
  - Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]. [from 1.6.3]
  - Flag "no-keytest" for ECC key generation.  Due to a bug in
    the parser that flag will also be accepted but ignored by older
    version of Libgcrypt. [from 1.6.4]
  - Speed up the random number generator by requiring less extra
    seeding. [from 1.6.4]
  - Always verify a created RSA signature to avoid private key leaks
    due to hardware failures. [from 1.6.4]
  - Mitigate side-channel attack on ECDH with Weierstrass curves
    [CVE-2015-7511].  See http://www.cs.tau.ac.IL/~tromer/ecdh/ for
    details. [from 1.6.5]
  * Internal changes:
  - Moved locking out to libgpg-error.
  - Support of the SYSROOT envvar in the build system.
  - Refactor some code.
  - The availability of a 64 bit integer type is now mandatory.
  * Bug fixes:
  - Fixed message digest lookup by OID (regression in 1.6.0).
  - Fixed a build problem on NetBSD
  - Fixed some asm build problems and feature detection bugs.
  * Interface changes relative to the 1.6.0 release:
  gcry_cipher_final               NEW macro.
  GCRY_CIPHER_MODE_CFB8           NEW constant.
  GCRY_CIPHER_MODE_OCB            NEW.
  GCRY_CIPHER_MODE_POLY1305       NEW.
  gcry_cipher_set_sbox            NEW macro.
  gcry_mac_get_algo               NEW.
  GCRY_MAC_HMAC_MD2               NEW.
  GCRY_MAC_HMAC_SHA3_224          NEW.
  GCRY_MAC_HMAC_SHA3_256          NEW.
  GCRY_MAC_HMAC_SHA3_384          NEW.
  GCRY_MAC_HMAC_SHA3_512          NEW.
  GCRY_MAC_POLY1305               NEW.
  GCRY_MAC_POLY1305_AES           NEW.
  GCRY_MAC_POLY1305_CAMELLIA      NEW.
  GCRY_MAC_POLY1305_SEED          NEW.
  GCRY_MAC_POLY1305_SERPENT       NEW.
  GCRY_MAC_POLY1305_TWOFISH       NEW.
  gcry_md_extract                 NEW.
  GCRY_MD_FLAG_BUGEMU1            NEW [from 1.6.1].
  GCRY_MD_GOSTR3411_CP            NEW.
  GCRY_MD_SHA3_224                NEW.
  GCRY_MD_SHA3_256                NEW.
  GCRY_MD_SHA3_384                NEW.
  GCRY_MD_SHA3_512                NEW.
  GCRY_MD_SHAKE128                NEW.
  GCRY_MD_SHAKE256                NEW.
  gcry_mpi_ec_decode_point        NEW.
  gcry_mpi_ec_sub                 NEW.
  GCRY_PK_EDDSA                   NEW constant.
  GCRYCTL_GET_TAGLEN              NEW.
  GCRYCTL_SET_SBOX                NEW.
  GCRYCTL_SET_TAGLEN              NEW.
- Apply libgcrypt-1.6.3-aliasing.patch only on big-endian
  architectures
- update drbg_test.patch and install cavs testing directory again
- As DRBG is upstream, drop pateches:
  v9-0001-SP800-90A-Deterministic-Random-Bit-Generator.patch
  0002-Compile-DRBG.patch
  0003-Function-definitions-of-interfaces-for-random.c.patch
  0004-Invoke-DRBG-from-common-libgcrypt-RNG-code.patch
  0005-Function-definitions-for-gcry_control-callbacks.patch
  0006-DRBG-specific-gcry_control-requests.patch
  v9-0007-User-interface-to-DRBG.patch
  libgcrypt-fix-rng.patch
- drop obsolete:
  libgcrypt-fips-dsa.patch
  libgcrypt-fips_ecdsa.patch</changelog>
  <changelog author="astieger@suse.com" date="1481630400">- libgcrypt 1.7.4:
  * ARMv8/AArch32 performance improvements for AES, GCM, SHA-256,
    and SHA-1.
  * Add ARMv8/AArch32 assembly implementation for Twofish and
    Camellia.
  * Add bulk processing implementation for ARMv8/AArch32.
  * Add Stribog OIDs.
  * Improve the DRBG performance and sync the code with the Linux
    version.
  * When secure memory is requested by the MPI functions or by
    gcry_xmalloc_secure, they do not anymore lead to a fatal error
    if the secure memory pool is used up.  Instead new pools are
    allocated as needed.  These new pools are not protected against
    being swapped out (mlock can't be used). Mitigation for
    minor confidentiality issues is encryption swap space.
  * Fix GOST 28147 CryptoPro-B S-box.
  * Fix error code handling of mlock calls.</changelog>
  <changelog author="astieger@suse.com" date="1481803200">- libgcrypt 1.7.5:
  * Fix regression in mlock detection introduced with 1.7.4</changelog>
  <changelog author="rmaliska@suse.com" date="1484913600">- libgcrypt 1.7.6:
  * Fix counter operand from read-only to read/write
  * Fix too large jump alignment in mpih-rshift</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libgcrypt 1.7.7:
  * Fix possible timing attack on EdDSA session key (previously
    patched, drop libgcrypt-secure-EdDSA-session-key.patch)
  * Fix long standing bug in secure memory implementation which
    could lead to a segv on free</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- libgcrypt 1.7.8:
  * CVE-2017-7526: Mitigate a flush+reload side-channel attack on
    RSA secret keys (bsc#1046607)</changelog>
  <changelog author="astieger@suse.com" date="1500638400">- libgcrypt 1.8.0:
  * New cipher mode XTS
  * New hash function Blake-2
  * New function gcry_mpi_point_copy.
  * New function gcry_get_config.
  * GCRYCTL_REINIT_SYSCALL_CLAMP allows to init nPth after Libgcrypt.
  * New gobal configuration file /etc/gcrypt/random.conf.
  * GCRYCTL_PRINT_CONFIG does now also print build information for
    libgpg-error and the used compiler version.
  * GCRY_CIPHER_MODE_CFB8 is now supported.
  * A jitter based entropy collector is now used in addition to the
    other entropy collectors.
  * Optimized gcry_md_hash_buffers for SHA-256 and SHA-512.
    random pool lock).
  * Interface changes relative to the 1.7.0 release:
    gcry_get_config                 NEW function.
    gcry_mpi_point_copy             NEW function.
    GCRYCTL_REINIT_SYSCALL_CLAMP    NEW macro.
    GCRY_MD_BLAKE2B_512             NEW constant.
    GCRY_MD_BLAKE2B_384             NEW constant.
    GCRY_MD_BLAKE2B_256             NEW constant.
    GCRY_MD_BLAKE2B_160             NEW constant.
    GCRY_MD_BLAKE2S_256             NEW constant.
    GCRY_MD_BLAKE2S_224             NEW constant.
    GCRY_MD_BLAKE2S_160             NEW constant.
    GCRY_MD_BLAKE2S_128             NEW constant.
    GCRY_CIPHER_MODE_XTS            NEW constant.
    gcry_md_info                    DEPRECATED.
- Refresh patch libgcrypt-1.6.3-aliasing.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- RPM group fixes.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- libgcrypt 1.8.1:
  * Mitigate a local side-channel attack on Curve25519 dubbed "May
    the Fourth be With You" CVE-2017-0379 bsc#1055837
  * Add more extra bytes to the pool after reading a seed file
  * Add the OID SHA384WithECDSA from RFC-7427 to SHA-384
  * Fix build problems with the Jitter RNG
  * Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE)</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- libgcrypt 1.8.2:
  * Fix fatal out of secure memory status in the s-expression
    parser on heavy loaded systems.
  * Add auto expand secmem feature or use by GnuPG 2.2.4</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522324800">- Extended the fipsdrv dsa-sign and dsa-verify commands with the
  - -algo parameter for the FIPS testing of DSA SigVer and SigGen
  (bsc#1064455).
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525262400">- Suggest libgcrypt20-hmac for package libgcrypt20 to ensure they
  are installed in the right order. [bsc#1090766]</changelog>
  <changelog author="psimons@suse.com" date="1529496000">- Apply "CVE-2018-0495.patch" from upstream to enable blinding for
  ECDSA signing. This change mitigates a novel side-channel attack.
  [CVE-2018-0495, bsc#1097410]</changelog>
</package>
<package pkgid="1e265e7e40f59956a7f755c82fe622bf3e0f6612140ddbb7ae876f97c65e7c27" name="libgcrypt-cavs" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="lp150.5.3.1"/>
  <changelog author="astieger@suse.com" date="1444478400">- follow-up to libgcrypt 1.6.4 update: sosuffix is 20.0.4</changelog>
  <changelog author="astieger@suse.com" date="1455019200">- update to 1.6.5:
  * CVE-2015-7511: Mitigate side-channel attack on ECDH with
    Weierstrass curves (boo#965902)</changelog>
  <changelog author="pjanouch@suse.de" date="1463400000">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
  <changelog author="pjanouch@suse.de" date="1463400001">- remove conditionals for unsupported distributions (before 13.2),
  it would not build anyway because of new dependencies</changelog>
  <changelog author="astieger@suse.com" date="1471435200">- libgcrypt 1.6.6:
  * fix CVE-2016-6313: Issue in the mixing functions of the random
    number generators allowed an attacker who obtained a number of
    bytes from the standard RNG to predict some of the next ouput.
    (bsc#994157)</changelog>
  <changelog author="mpluskal,vcizek,astieger}@suse.com" date="1471694400">- libgcrypt 1.7.3:
  * security issue already fixes with 1.6.6
  * Fix building of some asm modules with older compilers and CPUs.
  * ARMv8/AArch32 improvements for AES, GCM, SHA-256, and SHA-1.
- includes changes from libgcrypt 1.7.2:
  * Bug fixes:
  - Fix setting of the ECC cofactor if parameters are specified.
  - Fix memory leak in the ECC code.
  - Remove debug message about unsupported getrandom syscall.
  - Fix build problems related to AVX use.
  - Fix bus errors on ARM for Poly1305, ChaCha20, AES, and SHA-512.
  * Internal changes:
  - Improved fatal error message for wrong use of gcry_md_read.
  - Disallow symmetric encryption/decryption if key is not set.
- includes changes from 1.7.1:
  * Bug fixes:
  - Fix ecc_verify for cofactor support.
  - Fix portability bug when using gcc with Solaris 9 SPARC.
  - Build fix for OpenBSD/amd64
  - Add OIDs to the Serpent ciphers.
  * Internal changes:
  - Use getrandom system call on Linux if available.
  - Blinding is now also used for RSA signature creation.
  - Changed names of debug envvars
- includes changes from 1.7.0:
  * New algorithms and modes:
  - SHA3-224, SHA3-256, SHA3-384, SHA3-512, and MD2 hash algorithms.
  - SHAKE128 and SHAKE256 extendable-output hash algorithms.
  - ChaCha20 stream cipher.
  - Poly1305 message authentication algorithm
  - ChaCha20-Poly1305 Authenticated Encryption with Associated Data
    mode.
  - OCB mode.
  - HMAC-MD2 for use by legacy applications.
  * New curves for ECC:
  - Curve25519.
  - sec256k1.
  - GOST R 34.10-2001 and GOST R 34.10-2012.
  * Performance:
  - Improved performance of KDF functions.
  - Assembler optimized implementations of Blowfish and Serpent on
    ARM.
  - Assembler optimized implementation of 3DES on x86.
  - Improved AES using the SSSE3 based vector permutation method by
    Mike Hamburg.
  - AVX/BMI is used for SHA-1 and SHA-256 on x86.  This is for SHA-1
    about 20% faster than SSSE3 and more than 100% faster than the
    generic C implementation.
  - 40% speedup for SHA-512 and 72% for SHA-1 on ARM Cortex-A8.
  - 60-90% speedup for Whirlpool on x86.
  - 300% speedup for RIPE MD-160.
  - Up to 11 times speedup for CRC functions on x86.
  * Other features:
  - Improved ECDSA and FIPS 186-4 compliance.
  - Support for Montgomery curves.
  - gcry_cipher_set_sbox to tweak S-boxes of the gost28147 cipher
    algorithm.
  - gcry_mpi_ec_sub to subtract two points on a curve.
  - gcry_mpi_ec_decode_point to decode an MPI into a point object.
  - Emulation for broken Whirlpool code prior to 1.6.0.  [from 1.6.1]
  - Flag "pkcs1-raw" to enable PCKS#1 padding with a user supplied
    hash part.
  - Parameter "saltlen" to set a non-default salt length for RSA PSS.
  - A SP800-90A conforming DRNG replaces the former X9.31 alternative
    random number generator.
  - Map deprecated RSA algo number to the RSA algo number for better
    backward compatibility. [from 1.6.2]
  - Use ciphertext blinding for Elgamal decryption [CVE-2014-3591].
    See http://www.cs.tau.ac.il/~tromer/radioexp/ for details.
    [from 1.6.3]
  - Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]. [from 1.6.3]
  - Flag "no-keytest" for ECC key generation.  Due to a bug in
    the parser that flag will also be accepted but ignored by older
    version of Libgcrypt. [from 1.6.4]
  - Speed up the random number generator by requiring less extra
    seeding. [from 1.6.4]
  - Always verify a created RSA signature to avoid private key leaks
    due to hardware failures. [from 1.6.4]
  - Mitigate side-channel attack on ECDH with Weierstrass curves
    [CVE-2015-7511].  See http://www.cs.tau.ac.IL/~tromer/ecdh/ for
    details. [from 1.6.5]
  * Internal changes:
  - Moved locking out to libgpg-error.
  - Support of the SYSROOT envvar in the build system.
  - Refactor some code.
  - The availability of a 64 bit integer type is now mandatory.
  * Bug fixes:
  - Fixed message digest lookup by OID (regression in 1.6.0).
  - Fixed a build problem on NetBSD
  - Fixed some asm build problems and feature detection bugs.
  * Interface changes relative to the 1.6.0 release:
  gcry_cipher_final               NEW macro.
  GCRY_CIPHER_MODE_CFB8           NEW constant.
  GCRY_CIPHER_MODE_OCB            NEW.
  GCRY_CIPHER_MODE_POLY1305       NEW.
  gcry_cipher_set_sbox            NEW macro.
  gcry_mac_get_algo               NEW.
  GCRY_MAC_HMAC_MD2               NEW.
  GCRY_MAC_HMAC_SHA3_224          NEW.
  GCRY_MAC_HMAC_SHA3_256          NEW.
  GCRY_MAC_HMAC_SHA3_384          NEW.
  GCRY_MAC_HMAC_SHA3_512          NEW.
  GCRY_MAC_POLY1305               NEW.
  GCRY_MAC_POLY1305_AES           NEW.
  GCRY_MAC_POLY1305_CAMELLIA      NEW.
  GCRY_MAC_POLY1305_SEED          NEW.
  GCRY_MAC_POLY1305_SERPENT       NEW.
  GCRY_MAC_POLY1305_TWOFISH       NEW.
  gcry_md_extract                 NEW.
  GCRY_MD_FLAG_BUGEMU1            NEW [from 1.6.1].
  GCRY_MD_GOSTR3411_CP            NEW.
  GCRY_MD_SHA3_224                NEW.
  GCRY_MD_SHA3_256                NEW.
  GCRY_MD_SHA3_384                NEW.
  GCRY_MD_SHA3_512                NEW.
  GCRY_MD_SHAKE128                NEW.
  GCRY_MD_SHAKE256                NEW.
  gcry_mpi_ec_decode_point        NEW.
  gcry_mpi_ec_sub                 NEW.
  GCRY_PK_EDDSA                   NEW constant.
  GCRYCTL_GET_TAGLEN              NEW.
  GCRYCTL_SET_SBOX                NEW.
  GCRYCTL_SET_TAGLEN              NEW.
- Apply libgcrypt-1.6.3-aliasing.patch only on big-endian
  architectures
- update drbg_test.patch and install cavs testing directory again
- As DRBG is upstream, drop pateches:
  v9-0001-SP800-90A-Deterministic-Random-Bit-Generator.patch
  0002-Compile-DRBG.patch
  0003-Function-definitions-of-interfaces-for-random.c.patch
  0004-Invoke-DRBG-from-common-libgcrypt-RNG-code.patch
  0005-Function-definitions-for-gcry_control-callbacks.patch
  0006-DRBG-specific-gcry_control-requests.patch
  v9-0007-User-interface-to-DRBG.patch
  libgcrypt-fix-rng.patch
- drop obsolete:
  libgcrypt-fips-dsa.patch
  libgcrypt-fips_ecdsa.patch</changelog>
  <changelog author="astieger@suse.com" date="1481630400">- libgcrypt 1.7.4:
  * ARMv8/AArch32 performance improvements for AES, GCM, SHA-256,
    and SHA-1.
  * Add ARMv8/AArch32 assembly implementation for Twofish and
    Camellia.
  * Add bulk processing implementation for ARMv8/AArch32.
  * Add Stribog OIDs.
  * Improve the DRBG performance and sync the code with the Linux
    version.
  * When secure memory is requested by the MPI functions or by
    gcry_xmalloc_secure, they do not anymore lead to a fatal error
    if the secure memory pool is used up.  Instead new pools are
    allocated as needed.  These new pools are not protected against
    being swapped out (mlock can't be used). Mitigation for
    minor confidentiality issues is encryption swap space.
  * Fix GOST 28147 CryptoPro-B S-box.
  * Fix error code handling of mlock calls.</changelog>
  <changelog author="astieger@suse.com" date="1481803200">- libgcrypt 1.7.5:
  * Fix regression in mlock detection introduced with 1.7.4</changelog>
  <changelog author="rmaliska@suse.com" date="1484913600">- libgcrypt 1.7.6:
  * Fix counter operand from read-only to read/write
  * Fix too large jump alignment in mpih-rshift</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libgcrypt 1.7.7:
  * Fix possible timing attack on EdDSA session key (previously
    patched, drop libgcrypt-secure-EdDSA-session-key.patch)
  * Fix long standing bug in secure memory implementation which
    could lead to a segv on free</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- libgcrypt 1.7.8:
  * CVE-2017-7526: Mitigate a flush+reload side-channel attack on
    RSA secret keys (bsc#1046607)</changelog>
  <changelog author="astieger@suse.com" date="1500638400">- libgcrypt 1.8.0:
  * New cipher mode XTS
  * New hash function Blake-2
  * New function gcry_mpi_point_copy.
  * New function gcry_get_config.
  * GCRYCTL_REINIT_SYSCALL_CLAMP allows to init nPth after Libgcrypt.
  * New gobal configuration file /etc/gcrypt/random.conf.
  * GCRYCTL_PRINT_CONFIG does now also print build information for
    libgpg-error and the used compiler version.
  * GCRY_CIPHER_MODE_CFB8 is now supported.
  * A jitter based entropy collector is now used in addition to the
    other entropy collectors.
  * Optimized gcry_md_hash_buffers for SHA-256 and SHA-512.
    random pool lock).
  * Interface changes relative to the 1.7.0 release:
    gcry_get_config                 NEW function.
    gcry_mpi_point_copy             NEW function.
    GCRYCTL_REINIT_SYSCALL_CLAMP    NEW macro.
    GCRY_MD_BLAKE2B_512             NEW constant.
    GCRY_MD_BLAKE2B_384             NEW constant.
    GCRY_MD_BLAKE2B_256             NEW constant.
    GCRY_MD_BLAKE2B_160             NEW constant.
    GCRY_MD_BLAKE2S_256             NEW constant.
    GCRY_MD_BLAKE2S_224             NEW constant.
    GCRY_MD_BLAKE2S_160             NEW constant.
    GCRY_MD_BLAKE2S_128             NEW constant.
    GCRY_CIPHER_MODE_XTS            NEW constant.
    gcry_md_info                    DEPRECATED.
- Refresh patch libgcrypt-1.6.3-aliasing.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- RPM group fixes.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- libgcrypt 1.8.1:
  * Mitigate a local side-channel attack on Curve25519 dubbed "May
    the Fourth be With You" CVE-2017-0379 bsc#1055837
  * Add more extra bytes to the pool after reading a seed file
  * Add the OID SHA384WithECDSA from RFC-7427 to SHA-384
  * Fix build problems with the Jitter RNG
  * Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE)</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- libgcrypt 1.8.2:
  * Fix fatal out of secure memory status in the s-expression
    parser on heavy loaded systems.
  * Add auto expand secmem feature or use by GnuPG 2.2.4</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522324800">- Extended the fipsdrv dsa-sign and dsa-verify commands with the
  - -algo parameter for the FIPS testing of DSA SigVer and SigGen
  (bsc#1064455).
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525262400">- Suggest libgcrypt20-hmac for package libgcrypt20 to ensure they
  are installed in the right order. [bsc#1090766]</changelog>
  <changelog author="psimons@suse.com" date="1529496000">- Apply "CVE-2018-0495.patch" from upstream to enable blinding for
  ECDSA signing. This change mitigates a novel side-channel attack.
  [CVE-2018-0495, bsc#1097410]</changelog>
</package>
<package pkgid="3ca20010c99914c6fdf6a78a1643fb92dc7377b28c9d10a1b0c9874fc11230a2" name="libgcrypt-devel" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="lp150.5.3.1"/>
  <changelog author="astieger@suse.com" date="1444478400">- follow-up to libgcrypt 1.6.4 update: sosuffix is 20.0.4</changelog>
  <changelog author="astieger@suse.com" date="1455019200">- update to 1.6.5:
  * CVE-2015-7511: Mitigate side-channel attack on ECDH with
    Weierstrass curves (boo#965902)</changelog>
  <changelog author="pjanouch@suse.de" date="1463400000">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
  <changelog author="pjanouch@suse.de" date="1463400001">- remove conditionals for unsupported distributions (before 13.2),
  it would not build anyway because of new dependencies</changelog>
  <changelog author="astieger@suse.com" date="1471435200">- libgcrypt 1.6.6:
  * fix CVE-2016-6313: Issue in the mixing functions of the random
    number generators allowed an attacker who obtained a number of
    bytes from the standard RNG to predict some of the next ouput.
    (bsc#994157)</changelog>
  <changelog author="mpluskal,vcizek,astieger}@suse.com" date="1471694400">- libgcrypt 1.7.3:
  * security issue already fixes with 1.6.6
  * Fix building of some asm modules with older compilers and CPUs.
  * ARMv8/AArch32 improvements for AES, GCM, SHA-256, and SHA-1.
- includes changes from libgcrypt 1.7.2:
  * Bug fixes:
  - Fix setting of the ECC cofactor if parameters are specified.
  - Fix memory leak in the ECC code.
  - Remove debug message about unsupported getrandom syscall.
  - Fix build problems related to AVX use.
  - Fix bus errors on ARM for Poly1305, ChaCha20, AES, and SHA-512.
  * Internal changes:
  - Improved fatal error message for wrong use of gcry_md_read.
  - Disallow symmetric encryption/decryption if key is not set.
- includes changes from 1.7.1:
  * Bug fixes:
  - Fix ecc_verify for cofactor support.
  - Fix portability bug when using gcc with Solaris 9 SPARC.
  - Build fix for OpenBSD/amd64
  - Add OIDs to the Serpent ciphers.
  * Internal changes:
  - Use getrandom system call on Linux if available.
  - Blinding is now also used for RSA signature creation.
  - Changed names of debug envvars
- includes changes from 1.7.0:
  * New algorithms and modes:
  - SHA3-224, SHA3-256, SHA3-384, SHA3-512, and MD2 hash algorithms.
  - SHAKE128 and SHAKE256 extendable-output hash algorithms.
  - ChaCha20 stream cipher.
  - Poly1305 message authentication algorithm
  - ChaCha20-Poly1305 Authenticated Encryption with Associated Data
    mode.
  - OCB mode.
  - HMAC-MD2 for use by legacy applications.
  * New curves for ECC:
  - Curve25519.
  - sec256k1.
  - GOST R 34.10-2001 and GOST R 34.10-2012.
  * Performance:
  - Improved performance of KDF functions.
  - Assembler optimized implementations of Blowfish and Serpent on
    ARM.
  - Assembler optimized implementation of 3DES on x86.
  - Improved AES using the SSSE3 based vector permutation method by
    Mike Hamburg.
  - AVX/BMI is used for SHA-1 and SHA-256 on x86.  This is for SHA-1
    about 20% faster than SSSE3 and more than 100% faster than the
    generic C implementation.
  - 40% speedup for SHA-512 and 72% for SHA-1 on ARM Cortex-A8.
  - 60-90% speedup for Whirlpool on x86.
  - 300% speedup for RIPE MD-160.
  - Up to 11 times speedup for CRC functions on x86.
  * Other features:
  - Improved ECDSA and FIPS 186-4 compliance.
  - Support for Montgomery curves.
  - gcry_cipher_set_sbox to tweak S-boxes of the gost28147 cipher
    algorithm.
  - gcry_mpi_ec_sub to subtract two points on a curve.
  - gcry_mpi_ec_decode_point to decode an MPI into a point object.
  - Emulation for broken Whirlpool code prior to 1.6.0.  [from 1.6.1]
  - Flag "pkcs1-raw" to enable PCKS#1 padding with a user supplied
    hash part.
  - Parameter "saltlen" to set a non-default salt length for RSA PSS.
  - A SP800-90A conforming DRNG replaces the former X9.31 alternative
    random number generator.
  - Map deprecated RSA algo number to the RSA algo number for better
    backward compatibility. [from 1.6.2]
  - Use ciphertext blinding for Elgamal decryption [CVE-2014-3591].
    See http://www.cs.tau.ac.il/~tromer/radioexp/ for details.
    [from 1.6.3]
  - Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]. [from 1.6.3]
  - Flag "no-keytest" for ECC key generation.  Due to a bug in
    the parser that flag will also be accepted but ignored by older
    version of Libgcrypt. [from 1.6.4]
  - Speed up the random number generator by requiring less extra
    seeding. [from 1.6.4]
  - Always verify a created RSA signature to avoid private key leaks
    due to hardware failures. [from 1.6.4]
  - Mitigate side-channel attack on ECDH with Weierstrass curves
    [CVE-2015-7511].  See http://www.cs.tau.ac.IL/~tromer/ecdh/ for
    details. [from 1.6.5]
  * Internal changes:
  - Moved locking out to libgpg-error.
  - Support of the SYSROOT envvar in the build system.
  - Refactor some code.
  - The availability of a 64 bit integer type is now mandatory.
  * Bug fixes:
  - Fixed message digest lookup by OID (regression in 1.6.0).
  - Fixed a build problem on NetBSD
  - Fixed some asm build problems and feature detection bugs.
  * Interface changes relative to the 1.6.0 release:
  gcry_cipher_final               NEW macro.
  GCRY_CIPHER_MODE_CFB8           NEW constant.
  GCRY_CIPHER_MODE_OCB            NEW.
  GCRY_CIPHER_MODE_POLY1305       NEW.
  gcry_cipher_set_sbox            NEW macro.
  gcry_mac_get_algo               NEW.
  GCRY_MAC_HMAC_MD2               NEW.
  GCRY_MAC_HMAC_SHA3_224          NEW.
  GCRY_MAC_HMAC_SHA3_256          NEW.
  GCRY_MAC_HMAC_SHA3_384          NEW.
  GCRY_MAC_HMAC_SHA3_512          NEW.
  GCRY_MAC_POLY1305               NEW.
  GCRY_MAC_POLY1305_AES           NEW.
  GCRY_MAC_POLY1305_CAMELLIA      NEW.
  GCRY_MAC_POLY1305_SEED          NEW.
  GCRY_MAC_POLY1305_SERPENT       NEW.
  GCRY_MAC_POLY1305_TWOFISH       NEW.
  gcry_md_extract                 NEW.
  GCRY_MD_FLAG_BUGEMU1            NEW [from 1.6.1].
  GCRY_MD_GOSTR3411_CP            NEW.
  GCRY_MD_SHA3_224                NEW.
  GCRY_MD_SHA3_256                NEW.
  GCRY_MD_SHA3_384                NEW.
  GCRY_MD_SHA3_512                NEW.
  GCRY_MD_SHAKE128                NEW.
  GCRY_MD_SHAKE256                NEW.
  gcry_mpi_ec_decode_point        NEW.
  gcry_mpi_ec_sub                 NEW.
  GCRY_PK_EDDSA                   NEW constant.
  GCRYCTL_GET_TAGLEN              NEW.
  GCRYCTL_SET_SBOX                NEW.
  GCRYCTL_SET_TAGLEN              NEW.
- Apply libgcrypt-1.6.3-aliasing.patch only on big-endian
  architectures
- update drbg_test.patch and install cavs testing directory again
- As DRBG is upstream, drop pateches:
  v9-0001-SP800-90A-Deterministic-Random-Bit-Generator.patch
  0002-Compile-DRBG.patch
  0003-Function-definitions-of-interfaces-for-random.c.patch
  0004-Invoke-DRBG-from-common-libgcrypt-RNG-code.patch
  0005-Function-definitions-for-gcry_control-callbacks.patch
  0006-DRBG-specific-gcry_control-requests.patch
  v9-0007-User-interface-to-DRBG.patch
  libgcrypt-fix-rng.patch
- drop obsolete:
  libgcrypt-fips-dsa.patch
  libgcrypt-fips_ecdsa.patch</changelog>
  <changelog author="astieger@suse.com" date="1481630400">- libgcrypt 1.7.4:
  * ARMv8/AArch32 performance improvements for AES, GCM, SHA-256,
    and SHA-1.
  * Add ARMv8/AArch32 assembly implementation for Twofish and
    Camellia.
  * Add bulk processing implementation for ARMv8/AArch32.
  * Add Stribog OIDs.
  * Improve the DRBG performance and sync the code with the Linux
    version.
  * When secure memory is requested by the MPI functions or by
    gcry_xmalloc_secure, they do not anymore lead to a fatal error
    if the secure memory pool is used up.  Instead new pools are
    allocated as needed.  These new pools are not protected against
    being swapped out (mlock can't be used). Mitigation for
    minor confidentiality issues is encryption swap space.
  * Fix GOST 28147 CryptoPro-B S-box.
  * Fix error code handling of mlock calls.</changelog>
  <changelog author="astieger@suse.com" date="1481803200">- libgcrypt 1.7.5:
  * Fix regression in mlock detection introduced with 1.7.4</changelog>
  <changelog author="rmaliska@suse.com" date="1484913600">- libgcrypt 1.7.6:
  * Fix counter operand from read-only to read/write
  * Fix too large jump alignment in mpih-rshift</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libgcrypt 1.7.7:
  * Fix possible timing attack on EdDSA session key (previously
    patched, drop libgcrypt-secure-EdDSA-session-key.patch)
  * Fix long standing bug in secure memory implementation which
    could lead to a segv on free</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- libgcrypt 1.7.8:
  * CVE-2017-7526: Mitigate a flush+reload side-channel attack on
    RSA secret keys (bsc#1046607)</changelog>
  <changelog author="astieger@suse.com" date="1500638400">- libgcrypt 1.8.0:
  * New cipher mode XTS
  * New hash function Blake-2
  * New function gcry_mpi_point_copy.
  * New function gcry_get_config.
  * GCRYCTL_REINIT_SYSCALL_CLAMP allows to init nPth after Libgcrypt.
  * New gobal configuration file /etc/gcrypt/random.conf.
  * GCRYCTL_PRINT_CONFIG does now also print build information for
    libgpg-error and the used compiler version.
  * GCRY_CIPHER_MODE_CFB8 is now supported.
  * A jitter based entropy collector is now used in addition to the
    other entropy collectors.
  * Optimized gcry_md_hash_buffers for SHA-256 and SHA-512.
    random pool lock).
  * Interface changes relative to the 1.7.0 release:
    gcry_get_config                 NEW function.
    gcry_mpi_point_copy             NEW function.
    GCRYCTL_REINIT_SYSCALL_CLAMP    NEW macro.
    GCRY_MD_BLAKE2B_512             NEW constant.
    GCRY_MD_BLAKE2B_384             NEW constant.
    GCRY_MD_BLAKE2B_256             NEW constant.
    GCRY_MD_BLAKE2B_160             NEW constant.
    GCRY_MD_BLAKE2S_256             NEW constant.
    GCRY_MD_BLAKE2S_224             NEW constant.
    GCRY_MD_BLAKE2S_160             NEW constant.
    GCRY_MD_BLAKE2S_128             NEW constant.
    GCRY_CIPHER_MODE_XTS            NEW constant.
    gcry_md_info                    DEPRECATED.
- Refresh patch libgcrypt-1.6.3-aliasing.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- RPM group fixes.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- libgcrypt 1.8.1:
  * Mitigate a local side-channel attack on Curve25519 dubbed "May
    the Fourth be With You" CVE-2017-0379 bsc#1055837
  * Add more extra bytes to the pool after reading a seed file
  * Add the OID SHA384WithECDSA from RFC-7427 to SHA-384
  * Fix build problems with the Jitter RNG
  * Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE)</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- libgcrypt 1.8.2:
  * Fix fatal out of secure memory status in the s-expression
    parser on heavy loaded systems.
  * Add auto expand secmem feature or use by GnuPG 2.2.4</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522324800">- Extended the fipsdrv dsa-sign and dsa-verify commands with the
  - -algo parameter for the FIPS testing of DSA SigVer and SigGen
  (bsc#1064455).
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525262400">- Suggest libgcrypt20-hmac for package libgcrypt20 to ensure they
  are installed in the right order. [bsc#1090766]</changelog>
  <changelog author="psimons@suse.com" date="1529496000">- Apply "CVE-2018-0495.patch" from upstream to enable blinding for
  ECDSA signing. This change mitigates a novel side-channel attack.
  [CVE-2018-0495, bsc#1097410]</changelog>
</package>
<package pkgid="abe477879fadb68d039778192dbd26f46a503c145dd40defd4b8e00e70e4ad7e" name="libgcrypt-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="lp150.5.3.1"/>
  <changelog author="astieger@suse.com" date="1444478400">- follow-up to libgcrypt 1.6.4 update: sosuffix is 20.0.4</changelog>
  <changelog author="astieger@suse.com" date="1455019200">- update to 1.6.5:
  * CVE-2015-7511: Mitigate side-channel attack on ECDH with
    Weierstrass curves (boo#965902)</changelog>
  <changelog author="pjanouch@suse.de" date="1463400000">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
  <changelog author="pjanouch@suse.de" date="1463400001">- remove conditionals for unsupported distributions (before 13.2),
  it would not build anyway because of new dependencies</changelog>
  <changelog author="astieger@suse.com" date="1471435200">- libgcrypt 1.6.6:
  * fix CVE-2016-6313: Issue in the mixing functions of the random
    number generators allowed an attacker who obtained a number of
    bytes from the standard RNG to predict some of the next ouput.
    (bsc#994157)</changelog>
  <changelog author="mpluskal,vcizek,astieger}@suse.com" date="1471694400">- libgcrypt 1.7.3:
  * security issue already fixes with 1.6.6
  * Fix building of some asm modules with older compilers and CPUs.
  * ARMv8/AArch32 improvements for AES, GCM, SHA-256, and SHA-1.
- includes changes from libgcrypt 1.7.2:
  * Bug fixes:
  - Fix setting of the ECC cofactor if parameters are specified.
  - Fix memory leak in the ECC code.
  - Remove debug message about unsupported getrandom syscall.
  - Fix build problems related to AVX use.
  - Fix bus errors on ARM for Poly1305, ChaCha20, AES, and SHA-512.
  * Internal changes:
  - Improved fatal error message for wrong use of gcry_md_read.
  - Disallow symmetric encryption/decryption if key is not set.
- includes changes from 1.7.1:
  * Bug fixes:
  - Fix ecc_verify for cofactor support.
  - Fix portability bug when using gcc with Solaris 9 SPARC.
  - Build fix for OpenBSD/amd64
  - Add OIDs to the Serpent ciphers.
  * Internal changes:
  - Use getrandom system call on Linux if available.
  - Blinding is now also used for RSA signature creation.
  - Changed names of debug envvars
- includes changes from 1.7.0:
  * New algorithms and modes:
  - SHA3-224, SHA3-256, SHA3-384, SHA3-512, and MD2 hash algorithms.
  - SHAKE128 and SHAKE256 extendable-output hash algorithms.
  - ChaCha20 stream cipher.
  - Poly1305 message authentication algorithm
  - ChaCha20-Poly1305 Authenticated Encryption with Associated Data
    mode.
  - OCB mode.
  - HMAC-MD2 for use by legacy applications.
  * New curves for ECC:
  - Curve25519.
  - sec256k1.
  - GOST R 34.10-2001 and GOST R 34.10-2012.
  * Performance:
  - Improved performance of KDF functions.
  - Assembler optimized implementations of Blowfish and Serpent on
    ARM.
  - Assembler optimized implementation of 3DES on x86.
  - Improved AES using the SSSE3 based vector permutation method by
    Mike Hamburg.
  - AVX/BMI is used for SHA-1 and SHA-256 on x86.  This is for SHA-1
    about 20% faster than SSSE3 and more than 100% faster than the
    generic C implementation.
  - 40% speedup for SHA-512 and 72% for SHA-1 on ARM Cortex-A8.
  - 60-90% speedup for Whirlpool on x86.
  - 300% speedup for RIPE MD-160.
  - Up to 11 times speedup for CRC functions on x86.
  * Other features:
  - Improved ECDSA and FIPS 186-4 compliance.
  - Support for Montgomery curves.
  - gcry_cipher_set_sbox to tweak S-boxes of the gost28147 cipher
    algorithm.
  - gcry_mpi_ec_sub to subtract two points on a curve.
  - gcry_mpi_ec_decode_point to decode an MPI into a point object.
  - Emulation for broken Whirlpool code prior to 1.6.0.  [from 1.6.1]
  - Flag "pkcs1-raw" to enable PCKS#1 padding with a user supplied
    hash part.
  - Parameter "saltlen" to set a non-default salt length for RSA PSS.
  - A SP800-90A conforming DRNG replaces the former X9.31 alternative
    random number generator.
  - Map deprecated RSA algo number to the RSA algo number for better
    backward compatibility. [from 1.6.2]
  - Use ciphertext blinding for Elgamal decryption [CVE-2014-3591].
    See http://www.cs.tau.ac.il/~tromer/radioexp/ for details.
    [from 1.6.3]
  - Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]. [from 1.6.3]
  - Flag "no-keytest" for ECC key generation.  Due to a bug in
    the parser that flag will also be accepted but ignored by older
    version of Libgcrypt. [from 1.6.4]
  - Speed up the random number generator by requiring less extra
    seeding. [from 1.6.4]
  - Always verify a created RSA signature to avoid private key leaks
    due to hardware failures. [from 1.6.4]
  - Mitigate side-channel attack on ECDH with Weierstrass curves
    [CVE-2015-7511].  See http://www.cs.tau.ac.IL/~tromer/ecdh/ for
    details. [from 1.6.5]
  * Internal changes:
  - Moved locking out to libgpg-error.
  - Support of the SYSROOT envvar in the build system.
  - Refactor some code.
  - The availability of a 64 bit integer type is now mandatory.
  * Bug fixes:
  - Fixed message digest lookup by OID (regression in 1.6.0).
  - Fixed a build problem on NetBSD
  - Fixed some asm build problems and feature detection bugs.
  * Interface changes relative to the 1.6.0 release:
  gcry_cipher_final               NEW macro.
  GCRY_CIPHER_MODE_CFB8           NEW constant.
  GCRY_CIPHER_MODE_OCB            NEW.
  GCRY_CIPHER_MODE_POLY1305       NEW.
  gcry_cipher_set_sbox            NEW macro.
  gcry_mac_get_algo               NEW.
  GCRY_MAC_HMAC_MD2               NEW.
  GCRY_MAC_HMAC_SHA3_224          NEW.
  GCRY_MAC_HMAC_SHA3_256          NEW.
  GCRY_MAC_HMAC_SHA3_384          NEW.
  GCRY_MAC_HMAC_SHA3_512          NEW.
  GCRY_MAC_POLY1305               NEW.
  GCRY_MAC_POLY1305_AES           NEW.
  GCRY_MAC_POLY1305_CAMELLIA      NEW.
  GCRY_MAC_POLY1305_SEED          NEW.
  GCRY_MAC_POLY1305_SERPENT       NEW.
  GCRY_MAC_POLY1305_TWOFISH       NEW.
  gcry_md_extract                 NEW.
  GCRY_MD_FLAG_BUGEMU1            NEW [from 1.6.1].
  GCRY_MD_GOSTR3411_CP            NEW.
  GCRY_MD_SHA3_224                NEW.
  GCRY_MD_SHA3_256                NEW.
  GCRY_MD_SHA3_384                NEW.
  GCRY_MD_SHA3_512                NEW.
  GCRY_MD_SHAKE128                NEW.
  GCRY_MD_SHAKE256                NEW.
  gcry_mpi_ec_decode_point        NEW.
  gcry_mpi_ec_sub                 NEW.
  GCRY_PK_EDDSA                   NEW constant.
  GCRYCTL_GET_TAGLEN              NEW.
  GCRYCTL_SET_SBOX                NEW.
  GCRYCTL_SET_TAGLEN              NEW.
- Apply libgcrypt-1.6.3-aliasing.patch only on big-endian
  architectures
- update drbg_test.patch and install cavs testing directory again
- As DRBG is upstream, drop pateches:
  v9-0001-SP800-90A-Deterministic-Random-Bit-Generator.patch
  0002-Compile-DRBG.patch
  0003-Function-definitions-of-interfaces-for-random.c.patch
  0004-Invoke-DRBG-from-common-libgcrypt-RNG-code.patch
  0005-Function-definitions-for-gcry_control-callbacks.patch
  0006-DRBG-specific-gcry_control-requests.patch
  v9-0007-User-interface-to-DRBG.patch
  libgcrypt-fix-rng.patch
- drop obsolete:
  libgcrypt-fips-dsa.patch
  libgcrypt-fips_ecdsa.patch</changelog>
  <changelog author="astieger@suse.com" date="1481630400">- libgcrypt 1.7.4:
  * ARMv8/AArch32 performance improvements for AES, GCM, SHA-256,
    and SHA-1.
  * Add ARMv8/AArch32 assembly implementation for Twofish and
    Camellia.
  * Add bulk processing implementation for ARMv8/AArch32.
  * Add Stribog OIDs.
  * Improve the DRBG performance and sync the code with the Linux
    version.
  * When secure memory is requested by the MPI functions or by
    gcry_xmalloc_secure, they do not anymore lead to a fatal error
    if the secure memory pool is used up.  Instead new pools are
    allocated as needed.  These new pools are not protected against
    being swapped out (mlock can't be used). Mitigation for
    minor confidentiality issues is encryption swap space.
  * Fix GOST 28147 CryptoPro-B S-box.
  * Fix error code handling of mlock calls.</changelog>
  <changelog author="astieger@suse.com" date="1481803200">- libgcrypt 1.7.5:
  * Fix regression in mlock detection introduced with 1.7.4</changelog>
  <changelog author="rmaliska@suse.com" date="1484913600">- libgcrypt 1.7.6:
  * Fix counter operand from read-only to read/write
  * Fix too large jump alignment in mpih-rshift</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libgcrypt 1.7.7:
  * Fix possible timing attack on EdDSA session key (previously
    patched, drop libgcrypt-secure-EdDSA-session-key.patch)
  * Fix long standing bug in secure memory implementation which
    could lead to a segv on free</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- libgcrypt 1.7.8:
  * CVE-2017-7526: Mitigate a flush+reload side-channel attack on
    RSA secret keys (bsc#1046607)</changelog>
  <changelog author="astieger@suse.com" date="1500638400">- libgcrypt 1.8.0:
  * New cipher mode XTS
  * New hash function Blake-2
  * New function gcry_mpi_point_copy.
  * New function gcry_get_config.
  * GCRYCTL_REINIT_SYSCALL_CLAMP allows to init nPth after Libgcrypt.
  * New gobal configuration file /etc/gcrypt/random.conf.
  * GCRYCTL_PRINT_CONFIG does now also print build information for
    libgpg-error and the used compiler version.
  * GCRY_CIPHER_MODE_CFB8 is now supported.
  * A jitter based entropy collector is now used in addition to the
    other entropy collectors.
  * Optimized gcry_md_hash_buffers for SHA-256 and SHA-512.
    random pool lock).
  * Interface changes relative to the 1.7.0 release:
    gcry_get_config                 NEW function.
    gcry_mpi_point_copy             NEW function.
    GCRYCTL_REINIT_SYSCALL_CLAMP    NEW macro.
    GCRY_MD_BLAKE2B_512             NEW constant.
    GCRY_MD_BLAKE2B_384             NEW constant.
    GCRY_MD_BLAKE2B_256             NEW constant.
    GCRY_MD_BLAKE2B_160             NEW constant.
    GCRY_MD_BLAKE2S_256             NEW constant.
    GCRY_MD_BLAKE2S_224             NEW constant.
    GCRY_MD_BLAKE2S_160             NEW constant.
    GCRY_MD_BLAKE2S_128             NEW constant.
    GCRY_CIPHER_MODE_XTS            NEW constant.
    gcry_md_info                    DEPRECATED.
- Refresh patch libgcrypt-1.6.3-aliasing.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- RPM group fixes.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- libgcrypt 1.8.1:
  * Mitigate a local side-channel attack on Curve25519 dubbed "May
    the Fourth be With You" CVE-2017-0379 bsc#1055837
  * Add more extra bytes to the pool after reading a seed file
  * Add the OID SHA384WithECDSA from RFC-7427 to SHA-384
  * Fix build problems with the Jitter RNG
  * Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE)</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- libgcrypt 1.8.2:
  * Fix fatal out of secure memory status in the s-expression
    parser on heavy loaded systems.
  * Add auto expand secmem feature or use by GnuPG 2.2.4</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522324800">- Extended the fipsdrv dsa-sign and dsa-verify commands with the
  - -algo parameter for the FIPS testing of DSA SigVer and SigGen
  (bsc#1064455).
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525262400">- Suggest libgcrypt20-hmac for package libgcrypt20 to ensure they
  are installed in the right order. [bsc#1090766]</changelog>
  <changelog author="psimons@suse.com" date="1529496000">- Apply "CVE-2018-0495.patch" from upstream to enable blinding for
  ECDSA signing. This change mitigates a novel side-channel attack.
  [CVE-2018-0495, bsc#1097410]</changelog>
</package>
<package pkgid="bf6768bbaddcbf3b98d9cd5256a0aacb69375f3fbddfa44c2263a6191b86854d" name="libgcrypt20" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="lp150.5.3.1"/>
  <changelog author="astieger@suse.com" date="1444478400">- follow-up to libgcrypt 1.6.4 update: sosuffix is 20.0.4</changelog>
  <changelog author="astieger@suse.com" date="1455019200">- update to 1.6.5:
  * CVE-2015-7511: Mitigate side-channel attack on ECDH with
    Weierstrass curves (boo#965902)</changelog>
  <changelog author="pjanouch@suse.de" date="1463400000">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
  <changelog author="pjanouch@suse.de" date="1463400001">- remove conditionals for unsupported distributions (before 13.2),
  it would not build anyway because of new dependencies</changelog>
  <changelog author="astieger@suse.com" date="1471435200">- libgcrypt 1.6.6:
  * fix CVE-2016-6313: Issue in the mixing functions of the random
    number generators allowed an attacker who obtained a number of
    bytes from the standard RNG to predict some of the next ouput.
    (bsc#994157)</changelog>
  <changelog author="mpluskal,vcizek,astieger}@suse.com" date="1471694400">- libgcrypt 1.7.3:
  * security issue already fixes with 1.6.6
  * Fix building of some asm modules with older compilers and CPUs.
  * ARMv8/AArch32 improvements for AES, GCM, SHA-256, and SHA-1.
- includes changes from libgcrypt 1.7.2:
  * Bug fixes:
  - Fix setting of the ECC cofactor if parameters are specified.
  - Fix memory leak in the ECC code.
  - Remove debug message about unsupported getrandom syscall.
  - Fix build problems related to AVX use.
  - Fix bus errors on ARM for Poly1305, ChaCha20, AES, and SHA-512.
  * Internal changes:
  - Improved fatal error message for wrong use of gcry_md_read.
  - Disallow symmetric encryption/decryption if key is not set.
- includes changes from 1.7.1:
  * Bug fixes:
  - Fix ecc_verify for cofactor support.
  - Fix portability bug when using gcc with Solaris 9 SPARC.
  - Build fix for OpenBSD/amd64
  - Add OIDs to the Serpent ciphers.
  * Internal changes:
  - Use getrandom system call on Linux if available.
  - Blinding is now also used for RSA signature creation.
  - Changed names of debug envvars
- includes changes from 1.7.0:
  * New algorithms and modes:
  - SHA3-224, SHA3-256, SHA3-384, SHA3-512, and MD2 hash algorithms.
  - SHAKE128 and SHAKE256 extendable-output hash algorithms.
  - ChaCha20 stream cipher.
  - Poly1305 message authentication algorithm
  - ChaCha20-Poly1305 Authenticated Encryption with Associated Data
    mode.
  - OCB mode.
  - HMAC-MD2 for use by legacy applications.
  * New curves for ECC:
  - Curve25519.
  - sec256k1.
  - GOST R 34.10-2001 and GOST R 34.10-2012.
  * Performance:
  - Improved performance of KDF functions.
  - Assembler optimized implementations of Blowfish and Serpent on
    ARM.
  - Assembler optimized implementation of 3DES on x86.
  - Improved AES using the SSSE3 based vector permutation method by
    Mike Hamburg.
  - AVX/BMI is used for SHA-1 and SHA-256 on x86.  This is for SHA-1
    about 20% faster than SSSE3 and more than 100% faster than the
    generic C implementation.
  - 40% speedup for SHA-512 and 72% for SHA-1 on ARM Cortex-A8.
  - 60-90% speedup for Whirlpool on x86.
  - 300% speedup for RIPE MD-160.
  - Up to 11 times speedup for CRC functions on x86.
  * Other features:
  - Improved ECDSA and FIPS 186-4 compliance.
  - Support for Montgomery curves.
  - gcry_cipher_set_sbox to tweak S-boxes of the gost28147 cipher
    algorithm.
  - gcry_mpi_ec_sub to subtract two points on a curve.
  - gcry_mpi_ec_decode_point to decode an MPI into a point object.
  - Emulation for broken Whirlpool code prior to 1.6.0.  [from 1.6.1]
  - Flag "pkcs1-raw" to enable PCKS#1 padding with a user supplied
    hash part.
  - Parameter "saltlen" to set a non-default salt length for RSA PSS.
  - A SP800-90A conforming DRNG replaces the former X9.31 alternative
    random number generator.
  - Map deprecated RSA algo number to the RSA algo number for better
    backward compatibility. [from 1.6.2]
  - Use ciphertext blinding for Elgamal decryption [CVE-2014-3591].
    See http://www.cs.tau.ac.il/~tromer/radioexp/ for details.
    [from 1.6.3]
  - Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]. [from 1.6.3]
  - Flag "no-keytest" for ECC key generation.  Due to a bug in
    the parser that flag will also be accepted but ignored by older
    version of Libgcrypt. [from 1.6.4]
  - Speed up the random number generator by requiring less extra
    seeding. [from 1.6.4]
  - Always verify a created RSA signature to avoid private key leaks
    due to hardware failures. [from 1.6.4]
  - Mitigate side-channel attack on ECDH with Weierstrass curves
    [CVE-2015-7511].  See http://www.cs.tau.ac.IL/~tromer/ecdh/ for
    details. [from 1.6.5]
  * Internal changes:
  - Moved locking out to libgpg-error.
  - Support of the SYSROOT envvar in the build system.
  - Refactor some code.
  - The availability of a 64 bit integer type is now mandatory.
  * Bug fixes:
  - Fixed message digest lookup by OID (regression in 1.6.0).
  - Fixed a build problem on NetBSD
  - Fixed some asm build problems and feature detection bugs.
  * Interface changes relative to the 1.6.0 release:
  gcry_cipher_final               NEW macro.
  GCRY_CIPHER_MODE_CFB8           NEW constant.
  GCRY_CIPHER_MODE_OCB            NEW.
  GCRY_CIPHER_MODE_POLY1305       NEW.
  gcry_cipher_set_sbox            NEW macro.
  gcry_mac_get_algo               NEW.
  GCRY_MAC_HMAC_MD2               NEW.
  GCRY_MAC_HMAC_SHA3_224          NEW.
  GCRY_MAC_HMAC_SHA3_256          NEW.
  GCRY_MAC_HMAC_SHA3_384          NEW.
  GCRY_MAC_HMAC_SHA3_512          NEW.
  GCRY_MAC_POLY1305               NEW.
  GCRY_MAC_POLY1305_AES           NEW.
  GCRY_MAC_POLY1305_CAMELLIA      NEW.
  GCRY_MAC_POLY1305_SEED          NEW.
  GCRY_MAC_POLY1305_SERPENT       NEW.
  GCRY_MAC_POLY1305_TWOFISH       NEW.
  gcry_md_extract                 NEW.
  GCRY_MD_FLAG_BUGEMU1            NEW [from 1.6.1].
  GCRY_MD_GOSTR3411_CP            NEW.
  GCRY_MD_SHA3_224                NEW.
  GCRY_MD_SHA3_256                NEW.
  GCRY_MD_SHA3_384                NEW.
  GCRY_MD_SHA3_512                NEW.
  GCRY_MD_SHAKE128                NEW.
  GCRY_MD_SHAKE256                NEW.
  gcry_mpi_ec_decode_point        NEW.
  gcry_mpi_ec_sub                 NEW.
  GCRY_PK_EDDSA                   NEW constant.
  GCRYCTL_GET_TAGLEN              NEW.
  GCRYCTL_SET_SBOX                NEW.
  GCRYCTL_SET_TAGLEN              NEW.
- Apply libgcrypt-1.6.3-aliasing.patch only on big-endian
  architectures
- update drbg_test.patch and install cavs testing directory again
- As DRBG is upstream, drop pateches:
  v9-0001-SP800-90A-Deterministic-Random-Bit-Generator.patch
  0002-Compile-DRBG.patch
  0003-Function-definitions-of-interfaces-for-random.c.patch
  0004-Invoke-DRBG-from-common-libgcrypt-RNG-code.patch
  0005-Function-definitions-for-gcry_control-callbacks.patch
  0006-DRBG-specific-gcry_control-requests.patch
  v9-0007-User-interface-to-DRBG.patch
  libgcrypt-fix-rng.patch
- drop obsolete:
  libgcrypt-fips-dsa.patch
  libgcrypt-fips_ecdsa.patch</changelog>
  <changelog author="astieger@suse.com" date="1481630400">- libgcrypt 1.7.4:
  * ARMv8/AArch32 performance improvements for AES, GCM, SHA-256,
    and SHA-1.
  * Add ARMv8/AArch32 assembly implementation for Twofish and
    Camellia.
  * Add bulk processing implementation for ARMv8/AArch32.
  * Add Stribog OIDs.
  * Improve the DRBG performance and sync the code with the Linux
    version.
  * When secure memory is requested by the MPI functions or by
    gcry_xmalloc_secure, they do not anymore lead to a fatal error
    if the secure memory pool is used up.  Instead new pools are
    allocated as needed.  These new pools are not protected against
    being swapped out (mlock can't be used). Mitigation for
    minor confidentiality issues is encryption swap space.
  * Fix GOST 28147 CryptoPro-B S-box.
  * Fix error code handling of mlock calls.</changelog>
  <changelog author="astieger@suse.com" date="1481803200">- libgcrypt 1.7.5:
  * Fix regression in mlock detection introduced with 1.7.4</changelog>
  <changelog author="rmaliska@suse.com" date="1484913600">- libgcrypt 1.7.6:
  * Fix counter operand from read-only to read/write
  * Fix too large jump alignment in mpih-rshift</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libgcrypt 1.7.7:
  * Fix possible timing attack on EdDSA session key (previously
    patched, drop libgcrypt-secure-EdDSA-session-key.patch)
  * Fix long standing bug in secure memory implementation which
    could lead to a segv on free</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- libgcrypt 1.7.8:
  * CVE-2017-7526: Mitigate a flush+reload side-channel attack on
    RSA secret keys (bsc#1046607)</changelog>
  <changelog author="astieger@suse.com" date="1500638400">- libgcrypt 1.8.0:
  * New cipher mode XTS
  * New hash function Blake-2
  * New function gcry_mpi_point_copy.
  * New function gcry_get_config.
  * GCRYCTL_REINIT_SYSCALL_CLAMP allows to init nPth after Libgcrypt.
  * New gobal configuration file /etc/gcrypt/random.conf.
  * GCRYCTL_PRINT_CONFIG does now also print build information for
    libgpg-error and the used compiler version.
  * GCRY_CIPHER_MODE_CFB8 is now supported.
  * A jitter based entropy collector is now used in addition to the
    other entropy collectors.
  * Optimized gcry_md_hash_buffers for SHA-256 and SHA-512.
    random pool lock).
  * Interface changes relative to the 1.7.0 release:
    gcry_get_config                 NEW function.
    gcry_mpi_point_copy             NEW function.
    GCRYCTL_REINIT_SYSCALL_CLAMP    NEW macro.
    GCRY_MD_BLAKE2B_512             NEW constant.
    GCRY_MD_BLAKE2B_384             NEW constant.
    GCRY_MD_BLAKE2B_256             NEW constant.
    GCRY_MD_BLAKE2B_160             NEW constant.
    GCRY_MD_BLAKE2S_256             NEW constant.
    GCRY_MD_BLAKE2S_224             NEW constant.
    GCRY_MD_BLAKE2S_160             NEW constant.
    GCRY_MD_BLAKE2S_128             NEW constant.
    GCRY_CIPHER_MODE_XTS            NEW constant.
    gcry_md_info                    DEPRECATED.
- Refresh patch libgcrypt-1.6.3-aliasing.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- RPM group fixes.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- libgcrypt 1.8.1:
  * Mitigate a local side-channel attack on Curve25519 dubbed "May
    the Fourth be With You" CVE-2017-0379 bsc#1055837
  * Add more extra bytes to the pool after reading a seed file
  * Add the OID SHA384WithECDSA from RFC-7427 to SHA-384
  * Fix build problems with the Jitter RNG
  * Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE)</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- libgcrypt 1.8.2:
  * Fix fatal out of secure memory status in the s-expression
    parser on heavy loaded systems.
  * Add auto expand secmem feature or use by GnuPG 2.2.4</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522324800">- Extended the fipsdrv dsa-sign and dsa-verify commands with the
  - -algo parameter for the FIPS testing of DSA SigVer and SigGen
  (bsc#1064455).
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525262400">- Suggest libgcrypt20-hmac for package libgcrypt20 to ensure they
  are installed in the right order. [bsc#1090766]</changelog>
  <changelog author="psimons@suse.com" date="1529496000">- Apply "CVE-2018-0495.patch" from upstream to enable blinding for
  ECDSA signing. This change mitigates a novel side-channel attack.
  [CVE-2018-0495, bsc#1097410]</changelog>
</package>
<package pkgid="3cbc8571cfe785d5ae7d5356d676160a4f5eb36c42fb7c9781d4718ae36a3264" name="libgcrypt20-32bit" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="lp150.5.3.1"/>
  <changelog author="astieger@suse.com" date="1444478400">- follow-up to libgcrypt 1.6.4 update: sosuffix is 20.0.4</changelog>
  <changelog author="astieger@suse.com" date="1455019200">- update to 1.6.5:
  * CVE-2015-7511: Mitigate side-channel attack on ECDH with
    Weierstrass curves (boo#965902)</changelog>
  <changelog author="pjanouch@suse.de" date="1463400000">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
  <changelog author="pjanouch@suse.de" date="1463400001">- remove conditionals for unsupported distributions (before 13.2),
  it would not build anyway because of new dependencies</changelog>
  <changelog author="astieger@suse.com" date="1471435200">- libgcrypt 1.6.6:
  * fix CVE-2016-6313: Issue in the mixing functions of the random
    number generators allowed an attacker who obtained a number of
    bytes from the standard RNG to predict some of the next ouput.
    (bsc#994157)</changelog>
  <changelog author="mpluskal,vcizek,astieger}@suse.com" date="1471694400">- libgcrypt 1.7.3:
  * security issue already fixes with 1.6.6
  * Fix building of some asm modules with older compilers and CPUs.
  * ARMv8/AArch32 improvements for AES, GCM, SHA-256, and SHA-1.
- includes changes from libgcrypt 1.7.2:
  * Bug fixes:
  - Fix setting of the ECC cofactor if parameters are specified.
  - Fix memory leak in the ECC code.
  - Remove debug message about unsupported getrandom syscall.
  - Fix build problems related to AVX use.
  - Fix bus errors on ARM for Poly1305, ChaCha20, AES, and SHA-512.
  * Internal changes:
  - Improved fatal error message for wrong use of gcry_md_read.
  - Disallow symmetric encryption/decryption if key is not set.
- includes changes from 1.7.1:
  * Bug fixes:
  - Fix ecc_verify for cofactor support.
  - Fix portability bug when using gcc with Solaris 9 SPARC.
  - Build fix for OpenBSD/amd64
  - Add OIDs to the Serpent ciphers.
  * Internal changes:
  - Use getrandom system call on Linux if available.
  - Blinding is now also used for RSA signature creation.
  - Changed names of debug envvars
- includes changes from 1.7.0:
  * New algorithms and modes:
  - SHA3-224, SHA3-256, SHA3-384, SHA3-512, and MD2 hash algorithms.
  - SHAKE128 and SHAKE256 extendable-output hash algorithms.
  - ChaCha20 stream cipher.
  - Poly1305 message authentication algorithm
  - ChaCha20-Poly1305 Authenticated Encryption with Associated Data
    mode.
  - OCB mode.
  - HMAC-MD2 for use by legacy applications.
  * New curves for ECC:
  - Curve25519.
  - sec256k1.
  - GOST R 34.10-2001 and GOST R 34.10-2012.
  * Performance:
  - Improved performance of KDF functions.
  - Assembler optimized implementations of Blowfish and Serpent on
    ARM.
  - Assembler optimized implementation of 3DES on x86.
  - Improved AES using the SSSE3 based vector permutation method by
    Mike Hamburg.
  - AVX/BMI is used for SHA-1 and SHA-256 on x86.  This is for SHA-1
    about 20% faster than SSSE3 and more than 100% faster than the
    generic C implementation.
  - 40% speedup for SHA-512 and 72% for SHA-1 on ARM Cortex-A8.
  - 60-90% speedup for Whirlpool on x86.
  - 300% speedup for RIPE MD-160.
  - Up to 11 times speedup for CRC functions on x86.
  * Other features:
  - Improved ECDSA and FIPS 186-4 compliance.
  - Support for Montgomery curves.
  - gcry_cipher_set_sbox to tweak S-boxes of the gost28147 cipher
    algorithm.
  - gcry_mpi_ec_sub to subtract two points on a curve.
  - gcry_mpi_ec_decode_point to decode an MPI into a point object.
  - Emulation for broken Whirlpool code prior to 1.6.0.  [from 1.6.1]
  - Flag "pkcs1-raw" to enable PCKS#1 padding with a user supplied
    hash part.
  - Parameter "saltlen" to set a non-default salt length for RSA PSS.
  - A SP800-90A conforming DRNG replaces the former X9.31 alternative
    random number generator.
  - Map deprecated RSA algo number to the RSA algo number for better
    backward compatibility. [from 1.6.2]
  - Use ciphertext blinding for Elgamal decryption [CVE-2014-3591].
    See http://www.cs.tau.ac.il/~tromer/radioexp/ for details.
    [from 1.6.3]
  - Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]. [from 1.6.3]
  - Flag "no-keytest" for ECC key generation.  Due to a bug in
    the parser that flag will also be accepted but ignored by older
    version of Libgcrypt. [from 1.6.4]
  - Speed up the random number generator by requiring less extra
    seeding. [from 1.6.4]
  - Always verify a created RSA signature to avoid private key leaks
    due to hardware failures. [from 1.6.4]
  - Mitigate side-channel attack on ECDH with Weierstrass curves
    [CVE-2015-7511].  See http://www.cs.tau.ac.IL/~tromer/ecdh/ for
    details. [from 1.6.5]
  * Internal changes:
  - Moved locking out to libgpg-error.
  - Support of the SYSROOT envvar in the build system.
  - Refactor some code.
  - The availability of a 64 bit integer type is now mandatory.
  * Bug fixes:
  - Fixed message digest lookup by OID (regression in 1.6.0).
  - Fixed a build problem on NetBSD
  - Fixed some asm build problems and feature detection bugs.
  * Interface changes relative to the 1.6.0 release:
  gcry_cipher_final               NEW macro.
  GCRY_CIPHER_MODE_CFB8           NEW constant.
  GCRY_CIPHER_MODE_OCB            NEW.
  GCRY_CIPHER_MODE_POLY1305       NEW.
  gcry_cipher_set_sbox            NEW macro.
  gcry_mac_get_algo               NEW.
  GCRY_MAC_HMAC_MD2               NEW.
  GCRY_MAC_HMAC_SHA3_224          NEW.
  GCRY_MAC_HMAC_SHA3_256          NEW.
  GCRY_MAC_HMAC_SHA3_384          NEW.
  GCRY_MAC_HMAC_SHA3_512          NEW.
  GCRY_MAC_POLY1305               NEW.
  GCRY_MAC_POLY1305_AES           NEW.
  GCRY_MAC_POLY1305_CAMELLIA      NEW.
  GCRY_MAC_POLY1305_SEED          NEW.
  GCRY_MAC_POLY1305_SERPENT       NEW.
  GCRY_MAC_POLY1305_TWOFISH       NEW.
  gcry_md_extract                 NEW.
  GCRY_MD_FLAG_BUGEMU1            NEW [from 1.6.1].
  GCRY_MD_GOSTR3411_CP            NEW.
  GCRY_MD_SHA3_224                NEW.
  GCRY_MD_SHA3_256                NEW.
  GCRY_MD_SHA3_384                NEW.
  GCRY_MD_SHA3_512                NEW.
  GCRY_MD_SHAKE128                NEW.
  GCRY_MD_SHAKE256                NEW.
  gcry_mpi_ec_decode_point        NEW.
  gcry_mpi_ec_sub                 NEW.
  GCRY_PK_EDDSA                   NEW constant.
  GCRYCTL_GET_TAGLEN              NEW.
  GCRYCTL_SET_SBOX                NEW.
  GCRYCTL_SET_TAGLEN              NEW.
- Apply libgcrypt-1.6.3-aliasing.patch only on big-endian
  architectures
- update drbg_test.patch and install cavs testing directory again
- As DRBG is upstream, drop pateches:
  v9-0001-SP800-90A-Deterministic-Random-Bit-Generator.patch
  0002-Compile-DRBG.patch
  0003-Function-definitions-of-interfaces-for-random.c.patch
  0004-Invoke-DRBG-from-common-libgcrypt-RNG-code.patch
  0005-Function-definitions-for-gcry_control-callbacks.patch
  0006-DRBG-specific-gcry_control-requests.patch
  v9-0007-User-interface-to-DRBG.patch
  libgcrypt-fix-rng.patch
- drop obsolete:
  libgcrypt-fips-dsa.patch
  libgcrypt-fips_ecdsa.patch</changelog>
  <changelog author="astieger@suse.com" date="1481630400">- libgcrypt 1.7.4:
  * ARMv8/AArch32 performance improvements for AES, GCM, SHA-256,
    and SHA-1.
  * Add ARMv8/AArch32 assembly implementation for Twofish and
    Camellia.
  * Add bulk processing implementation for ARMv8/AArch32.
  * Add Stribog OIDs.
  * Improve the DRBG performance and sync the code with the Linux
    version.
  * When secure memory is requested by the MPI functions or by
    gcry_xmalloc_secure, they do not anymore lead to a fatal error
    if the secure memory pool is used up.  Instead new pools are
    allocated as needed.  These new pools are not protected against
    being swapped out (mlock can't be used). Mitigation for
    minor confidentiality issues is encryption swap space.
  * Fix GOST 28147 CryptoPro-B S-box.
  * Fix error code handling of mlock calls.</changelog>
  <changelog author="astieger@suse.com" date="1481803200">- libgcrypt 1.7.5:
  * Fix regression in mlock detection introduced with 1.7.4</changelog>
  <changelog author="rmaliska@suse.com" date="1484913600">- libgcrypt 1.7.6:
  * Fix counter operand from read-only to read/write
  * Fix too large jump alignment in mpih-rshift</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libgcrypt 1.7.7:
  * Fix possible timing attack on EdDSA session key (previously
    patched, drop libgcrypt-secure-EdDSA-session-key.patch)
  * Fix long standing bug in secure memory implementation which
    could lead to a segv on free</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- libgcrypt 1.7.8:
  * CVE-2017-7526: Mitigate a flush+reload side-channel attack on
    RSA secret keys (bsc#1046607)</changelog>
  <changelog author="astieger@suse.com" date="1500638400">- libgcrypt 1.8.0:
  * New cipher mode XTS
  * New hash function Blake-2
  * New function gcry_mpi_point_copy.
  * New function gcry_get_config.
  * GCRYCTL_REINIT_SYSCALL_CLAMP allows to init nPth after Libgcrypt.
  * New gobal configuration file /etc/gcrypt/random.conf.
  * GCRYCTL_PRINT_CONFIG does now also print build information for
    libgpg-error and the used compiler version.
  * GCRY_CIPHER_MODE_CFB8 is now supported.
  * A jitter based entropy collector is now used in addition to the
    other entropy collectors.
  * Optimized gcry_md_hash_buffers for SHA-256 and SHA-512.
    random pool lock).
  * Interface changes relative to the 1.7.0 release:
    gcry_get_config                 NEW function.
    gcry_mpi_point_copy             NEW function.
    GCRYCTL_REINIT_SYSCALL_CLAMP    NEW macro.
    GCRY_MD_BLAKE2B_512             NEW constant.
    GCRY_MD_BLAKE2B_384             NEW constant.
    GCRY_MD_BLAKE2B_256             NEW constant.
    GCRY_MD_BLAKE2B_160             NEW constant.
    GCRY_MD_BLAKE2S_256             NEW constant.
    GCRY_MD_BLAKE2S_224             NEW constant.
    GCRY_MD_BLAKE2S_160             NEW constant.
    GCRY_MD_BLAKE2S_128             NEW constant.
    GCRY_CIPHER_MODE_XTS            NEW constant.
    gcry_md_info                    DEPRECATED.
- Refresh patch libgcrypt-1.6.3-aliasing.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- RPM group fixes.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- libgcrypt 1.8.1:
  * Mitigate a local side-channel attack on Curve25519 dubbed "May
    the Fourth be With You" CVE-2017-0379 bsc#1055837
  * Add more extra bytes to the pool after reading a seed file
  * Add the OID SHA384WithECDSA from RFC-7427 to SHA-384
  * Fix build problems with the Jitter RNG
  * Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE)</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- libgcrypt 1.8.2:
  * Fix fatal out of secure memory status in the s-expression
    parser on heavy loaded systems.
  * Add auto expand secmem feature or use by GnuPG 2.2.4</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522324800">- Extended the fipsdrv dsa-sign and dsa-verify commands with the
  - -algo parameter for the FIPS testing of DSA SigVer and SigGen
  (bsc#1064455).
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525262400">- Suggest libgcrypt20-hmac for package libgcrypt20 to ensure they
  are installed in the right order. [bsc#1090766]</changelog>
  <changelog author="psimons@suse.com" date="1529496000">- Apply "CVE-2018-0495.patch" from upstream to enable blinding for
  ECDSA signing. This change mitigates a novel side-channel attack.
  [CVE-2018-0495, bsc#1097410]</changelog>
</package>
<package pkgid="afa3272c332600114bbf8c5f0ccdbd401051de395ae035940bc158608420fcad" name="libgcrypt20-hmac" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="lp150.5.3.1"/>
  <changelog author="astieger@suse.com" date="1444478400">- follow-up to libgcrypt 1.6.4 update: sosuffix is 20.0.4</changelog>
  <changelog author="astieger@suse.com" date="1455019200">- update to 1.6.5:
  * CVE-2015-7511: Mitigate side-channel attack on ECDH with
    Weierstrass curves (boo#965902)</changelog>
  <changelog author="pjanouch@suse.de" date="1463400000">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
  <changelog author="pjanouch@suse.de" date="1463400001">- remove conditionals for unsupported distributions (before 13.2),
  it would not build anyway because of new dependencies</changelog>
  <changelog author="astieger@suse.com" date="1471435200">- libgcrypt 1.6.6:
  * fix CVE-2016-6313: Issue in the mixing functions of the random
    number generators allowed an attacker who obtained a number of
    bytes from the standard RNG to predict some of the next ouput.
    (bsc#994157)</changelog>
  <changelog author="mpluskal,vcizek,astieger}@suse.com" date="1471694400">- libgcrypt 1.7.3:
  * security issue already fixes with 1.6.6
  * Fix building of some asm modules with older compilers and CPUs.
  * ARMv8/AArch32 improvements for AES, GCM, SHA-256, and SHA-1.
- includes changes from libgcrypt 1.7.2:
  * Bug fixes:
  - Fix setting of the ECC cofactor if parameters are specified.
  - Fix memory leak in the ECC code.
  - Remove debug message about unsupported getrandom syscall.
  - Fix build problems related to AVX use.
  - Fix bus errors on ARM for Poly1305, ChaCha20, AES, and SHA-512.
  * Internal changes:
  - Improved fatal error message for wrong use of gcry_md_read.
  - Disallow symmetric encryption/decryption if key is not set.
- includes changes from 1.7.1:
  * Bug fixes:
  - Fix ecc_verify for cofactor support.
  - Fix portability bug when using gcc with Solaris 9 SPARC.
  - Build fix for OpenBSD/amd64
  - Add OIDs to the Serpent ciphers.
  * Internal changes:
  - Use getrandom system call on Linux if available.
  - Blinding is now also used for RSA signature creation.
  - Changed names of debug envvars
- includes changes from 1.7.0:
  * New algorithms and modes:
  - SHA3-224, SHA3-256, SHA3-384, SHA3-512, and MD2 hash algorithms.
  - SHAKE128 and SHAKE256 extendable-output hash algorithms.
  - ChaCha20 stream cipher.
  - Poly1305 message authentication algorithm
  - ChaCha20-Poly1305 Authenticated Encryption with Associated Data
    mode.
  - OCB mode.
  - HMAC-MD2 for use by legacy applications.
  * New curves for ECC:
  - Curve25519.
  - sec256k1.
  - GOST R 34.10-2001 and GOST R 34.10-2012.
  * Performance:
  - Improved performance of KDF functions.
  - Assembler optimized implementations of Blowfish and Serpent on
    ARM.
  - Assembler optimized implementation of 3DES on x86.
  - Improved AES using the SSSE3 based vector permutation method by
    Mike Hamburg.
  - AVX/BMI is used for SHA-1 and SHA-256 on x86.  This is for SHA-1
    about 20% faster than SSSE3 and more than 100% faster than the
    generic C implementation.
  - 40% speedup for SHA-512 and 72% for SHA-1 on ARM Cortex-A8.
  - 60-90% speedup for Whirlpool on x86.
  - 300% speedup for RIPE MD-160.
  - Up to 11 times speedup for CRC functions on x86.
  * Other features:
  - Improved ECDSA and FIPS 186-4 compliance.
  - Support for Montgomery curves.
  - gcry_cipher_set_sbox to tweak S-boxes of the gost28147 cipher
    algorithm.
  - gcry_mpi_ec_sub to subtract two points on a curve.
  - gcry_mpi_ec_decode_point to decode an MPI into a point object.
  - Emulation for broken Whirlpool code prior to 1.6.0.  [from 1.6.1]
  - Flag "pkcs1-raw" to enable PCKS#1 padding with a user supplied
    hash part.
  - Parameter "saltlen" to set a non-default salt length for RSA PSS.
  - A SP800-90A conforming DRNG replaces the former X9.31 alternative
    random number generator.
  - Map deprecated RSA algo number to the RSA algo number for better
    backward compatibility. [from 1.6.2]
  - Use ciphertext blinding for Elgamal decryption [CVE-2014-3591].
    See http://www.cs.tau.ac.il/~tromer/radioexp/ for details.
    [from 1.6.3]
  - Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]. [from 1.6.3]
  - Flag "no-keytest" for ECC key generation.  Due to a bug in
    the parser that flag will also be accepted but ignored by older
    version of Libgcrypt. [from 1.6.4]
  - Speed up the random number generator by requiring less extra
    seeding. [from 1.6.4]
  - Always verify a created RSA signature to avoid private key leaks
    due to hardware failures. [from 1.6.4]
  - Mitigate side-channel attack on ECDH with Weierstrass curves
    [CVE-2015-7511].  See http://www.cs.tau.ac.IL/~tromer/ecdh/ for
    details. [from 1.6.5]
  * Internal changes:
  - Moved locking out to libgpg-error.
  - Support of the SYSROOT envvar in the build system.
  - Refactor some code.
  - The availability of a 64 bit integer type is now mandatory.
  * Bug fixes:
  - Fixed message digest lookup by OID (regression in 1.6.0).
  - Fixed a build problem on NetBSD
  - Fixed some asm build problems and feature detection bugs.
  * Interface changes relative to the 1.6.0 release:
  gcry_cipher_final               NEW macro.
  GCRY_CIPHER_MODE_CFB8           NEW constant.
  GCRY_CIPHER_MODE_OCB            NEW.
  GCRY_CIPHER_MODE_POLY1305       NEW.
  gcry_cipher_set_sbox            NEW macro.
  gcry_mac_get_algo               NEW.
  GCRY_MAC_HMAC_MD2               NEW.
  GCRY_MAC_HMAC_SHA3_224          NEW.
  GCRY_MAC_HMAC_SHA3_256          NEW.
  GCRY_MAC_HMAC_SHA3_384          NEW.
  GCRY_MAC_HMAC_SHA3_512          NEW.
  GCRY_MAC_POLY1305               NEW.
  GCRY_MAC_POLY1305_AES           NEW.
  GCRY_MAC_POLY1305_CAMELLIA      NEW.
  GCRY_MAC_POLY1305_SEED          NEW.
  GCRY_MAC_POLY1305_SERPENT       NEW.
  GCRY_MAC_POLY1305_TWOFISH       NEW.
  gcry_md_extract                 NEW.
  GCRY_MD_FLAG_BUGEMU1            NEW [from 1.6.1].
  GCRY_MD_GOSTR3411_CP            NEW.
  GCRY_MD_SHA3_224                NEW.
  GCRY_MD_SHA3_256                NEW.
  GCRY_MD_SHA3_384                NEW.
  GCRY_MD_SHA3_512                NEW.
  GCRY_MD_SHAKE128                NEW.
  GCRY_MD_SHAKE256                NEW.
  gcry_mpi_ec_decode_point        NEW.
  gcry_mpi_ec_sub                 NEW.
  GCRY_PK_EDDSA                   NEW constant.
  GCRYCTL_GET_TAGLEN              NEW.
  GCRYCTL_SET_SBOX                NEW.
  GCRYCTL_SET_TAGLEN              NEW.
- Apply libgcrypt-1.6.3-aliasing.patch only on big-endian
  architectures
- update drbg_test.patch and install cavs testing directory again
- As DRBG is upstream, drop pateches:
  v9-0001-SP800-90A-Deterministic-Random-Bit-Generator.patch
  0002-Compile-DRBG.patch
  0003-Function-definitions-of-interfaces-for-random.c.patch
  0004-Invoke-DRBG-from-common-libgcrypt-RNG-code.patch
  0005-Function-definitions-for-gcry_control-callbacks.patch
  0006-DRBG-specific-gcry_control-requests.patch
  v9-0007-User-interface-to-DRBG.patch
  libgcrypt-fix-rng.patch
- drop obsolete:
  libgcrypt-fips-dsa.patch
  libgcrypt-fips_ecdsa.patch</changelog>
  <changelog author="astieger@suse.com" date="1481630400">- libgcrypt 1.7.4:
  * ARMv8/AArch32 performance improvements for AES, GCM, SHA-256,
    and SHA-1.
  * Add ARMv8/AArch32 assembly implementation for Twofish and
    Camellia.
  * Add bulk processing implementation for ARMv8/AArch32.
  * Add Stribog OIDs.
  * Improve the DRBG performance and sync the code with the Linux
    version.
  * When secure memory is requested by the MPI functions or by
    gcry_xmalloc_secure, they do not anymore lead to a fatal error
    if the secure memory pool is used up.  Instead new pools are
    allocated as needed.  These new pools are not protected against
    being swapped out (mlock can't be used). Mitigation for
    minor confidentiality issues is encryption swap space.
  * Fix GOST 28147 CryptoPro-B S-box.
  * Fix error code handling of mlock calls.</changelog>
  <changelog author="astieger@suse.com" date="1481803200">- libgcrypt 1.7.5:
  * Fix regression in mlock detection introduced with 1.7.4</changelog>
  <changelog author="rmaliska@suse.com" date="1484913600">- libgcrypt 1.7.6:
  * Fix counter operand from read-only to read/write
  * Fix too large jump alignment in mpih-rshift</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libgcrypt 1.7.7:
  * Fix possible timing attack on EdDSA session key (previously
    patched, drop libgcrypt-secure-EdDSA-session-key.patch)
  * Fix long standing bug in secure memory implementation which
    could lead to a segv on free</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- libgcrypt 1.7.8:
  * CVE-2017-7526: Mitigate a flush+reload side-channel attack on
    RSA secret keys (bsc#1046607)</changelog>
  <changelog author="astieger@suse.com" date="1500638400">- libgcrypt 1.8.0:
  * New cipher mode XTS
  * New hash function Blake-2
  * New function gcry_mpi_point_copy.
  * New function gcry_get_config.
  * GCRYCTL_REINIT_SYSCALL_CLAMP allows to init nPth after Libgcrypt.
  * New gobal configuration file /etc/gcrypt/random.conf.
  * GCRYCTL_PRINT_CONFIG does now also print build information for
    libgpg-error and the used compiler version.
  * GCRY_CIPHER_MODE_CFB8 is now supported.
  * A jitter based entropy collector is now used in addition to the
    other entropy collectors.
  * Optimized gcry_md_hash_buffers for SHA-256 and SHA-512.
    random pool lock).
  * Interface changes relative to the 1.7.0 release:
    gcry_get_config                 NEW function.
    gcry_mpi_point_copy             NEW function.
    GCRYCTL_REINIT_SYSCALL_CLAMP    NEW macro.
    GCRY_MD_BLAKE2B_512             NEW constant.
    GCRY_MD_BLAKE2B_384             NEW constant.
    GCRY_MD_BLAKE2B_256             NEW constant.
    GCRY_MD_BLAKE2B_160             NEW constant.
    GCRY_MD_BLAKE2S_256             NEW constant.
    GCRY_MD_BLAKE2S_224             NEW constant.
    GCRY_MD_BLAKE2S_160             NEW constant.
    GCRY_MD_BLAKE2S_128             NEW constant.
    GCRY_CIPHER_MODE_XTS            NEW constant.
    gcry_md_info                    DEPRECATED.
- Refresh patch libgcrypt-1.6.3-aliasing.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- RPM group fixes.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- libgcrypt 1.8.1:
  * Mitigate a local side-channel attack on Curve25519 dubbed "May
    the Fourth be With You" CVE-2017-0379 bsc#1055837
  * Add more extra bytes to the pool after reading a seed file
  * Add the OID SHA384WithECDSA from RFC-7427 to SHA-384
  * Fix build problems with the Jitter RNG
  * Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE)</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- libgcrypt 1.8.2:
  * Fix fatal out of secure memory status in the s-expression
    parser on heavy loaded systems.
  * Add auto expand secmem feature or use by GnuPG 2.2.4</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522324800">- Extended the fipsdrv dsa-sign and dsa-verify commands with the
  - -algo parameter for the FIPS testing of DSA SigVer and SigGen
  (bsc#1064455).
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525262400">- Suggest libgcrypt20-hmac for package libgcrypt20 to ensure they
  are installed in the right order. [bsc#1090766]</changelog>
  <changelog author="psimons@suse.com" date="1529496000">- Apply "CVE-2018-0495.patch" from upstream to enable blinding for
  ECDSA signing. This change mitigates a novel side-channel attack.
  [CVE-2018-0495, bsc#1097410]</changelog>
</package>
<package pkgid="d8f6f090b8c14e0f73b7bbe9eed6a205a19a26fe351043d5fab281c49c98da2e" name="libgcrypt20-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="lp150.5.3.1"/>
  <changelog author="astieger@suse.com" date="1444478400">- follow-up to libgcrypt 1.6.4 update: sosuffix is 20.0.4</changelog>
  <changelog author="astieger@suse.com" date="1455019200">- update to 1.6.5:
  * CVE-2015-7511: Mitigate side-channel attack on ECDH with
    Weierstrass curves (boo#965902)</changelog>
  <changelog author="pjanouch@suse.de" date="1463400000">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
  <changelog author="pjanouch@suse.de" date="1463400001">- remove conditionals for unsupported distributions (before 13.2),
  it would not build anyway because of new dependencies</changelog>
  <changelog author="astieger@suse.com" date="1471435200">- libgcrypt 1.6.6:
  * fix CVE-2016-6313: Issue in the mixing functions of the random
    number generators allowed an attacker who obtained a number of
    bytes from the standard RNG to predict some of the next ouput.
    (bsc#994157)</changelog>
  <changelog author="mpluskal,vcizek,astieger}@suse.com" date="1471694400">- libgcrypt 1.7.3:
  * security issue already fixes with 1.6.6
  * Fix building of some asm modules with older compilers and CPUs.
  * ARMv8/AArch32 improvements for AES, GCM, SHA-256, and SHA-1.
- includes changes from libgcrypt 1.7.2:
  * Bug fixes:
  - Fix setting of the ECC cofactor if parameters are specified.
  - Fix memory leak in the ECC code.
  - Remove debug message about unsupported getrandom syscall.
  - Fix build problems related to AVX use.
  - Fix bus errors on ARM for Poly1305, ChaCha20, AES, and SHA-512.
  * Internal changes:
  - Improved fatal error message for wrong use of gcry_md_read.
  - Disallow symmetric encryption/decryption if key is not set.
- includes changes from 1.7.1:
  * Bug fixes:
  - Fix ecc_verify for cofactor support.
  - Fix portability bug when using gcc with Solaris 9 SPARC.
  - Build fix for OpenBSD/amd64
  - Add OIDs to the Serpent ciphers.
  * Internal changes:
  - Use getrandom system call on Linux if available.
  - Blinding is now also used for RSA signature creation.
  - Changed names of debug envvars
- includes changes from 1.7.0:
  * New algorithms and modes:
  - SHA3-224, SHA3-256, SHA3-384, SHA3-512, and MD2 hash algorithms.
  - SHAKE128 and SHAKE256 extendable-output hash algorithms.
  - ChaCha20 stream cipher.
  - Poly1305 message authentication algorithm
  - ChaCha20-Poly1305 Authenticated Encryption with Associated Data
    mode.
  - OCB mode.
  - HMAC-MD2 for use by legacy applications.
  * New curves for ECC:
  - Curve25519.
  - sec256k1.
  - GOST R 34.10-2001 and GOST R 34.10-2012.
  * Performance:
  - Improved performance of KDF functions.
  - Assembler optimized implementations of Blowfish and Serpent on
    ARM.
  - Assembler optimized implementation of 3DES on x86.
  - Improved AES using the SSSE3 based vector permutation method by
    Mike Hamburg.
  - AVX/BMI is used for SHA-1 and SHA-256 on x86.  This is for SHA-1
    about 20% faster than SSSE3 and more than 100% faster than the
    generic C implementation.
  - 40% speedup for SHA-512 and 72% for SHA-1 on ARM Cortex-A8.
  - 60-90% speedup for Whirlpool on x86.
  - 300% speedup for RIPE MD-160.
  - Up to 11 times speedup for CRC functions on x86.
  * Other features:
  - Improved ECDSA and FIPS 186-4 compliance.
  - Support for Montgomery curves.
  - gcry_cipher_set_sbox to tweak S-boxes of the gost28147 cipher
    algorithm.
  - gcry_mpi_ec_sub to subtract two points on a curve.
  - gcry_mpi_ec_decode_point to decode an MPI into a point object.
  - Emulation for broken Whirlpool code prior to 1.6.0.  [from 1.6.1]
  - Flag "pkcs1-raw" to enable PCKS#1 padding with a user supplied
    hash part.
  - Parameter "saltlen" to set a non-default salt length for RSA PSS.
  - A SP800-90A conforming DRNG replaces the former X9.31 alternative
    random number generator.
  - Map deprecated RSA algo number to the RSA algo number for better
    backward compatibility. [from 1.6.2]
  - Use ciphertext blinding for Elgamal decryption [CVE-2014-3591].
    See http://www.cs.tau.ac.il/~tromer/radioexp/ for details.
    [from 1.6.3]
  - Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]. [from 1.6.3]
  - Flag "no-keytest" for ECC key generation.  Due to a bug in
    the parser that flag will also be accepted but ignored by older
    version of Libgcrypt. [from 1.6.4]
  - Speed up the random number generator by requiring less extra
    seeding. [from 1.6.4]
  - Always verify a created RSA signature to avoid private key leaks
    due to hardware failures. [from 1.6.4]
  - Mitigate side-channel attack on ECDH with Weierstrass curves
    [CVE-2015-7511].  See http://www.cs.tau.ac.IL/~tromer/ecdh/ for
    details. [from 1.6.5]
  * Internal changes:
  - Moved locking out to libgpg-error.
  - Support of the SYSROOT envvar in the build system.
  - Refactor some code.
  - The availability of a 64 bit integer type is now mandatory.
  * Bug fixes:
  - Fixed message digest lookup by OID (regression in 1.6.0).
  - Fixed a build problem on NetBSD
  - Fixed some asm build problems and feature detection bugs.
  * Interface changes relative to the 1.6.0 release:
  gcry_cipher_final               NEW macro.
  GCRY_CIPHER_MODE_CFB8           NEW constant.
  GCRY_CIPHER_MODE_OCB            NEW.
  GCRY_CIPHER_MODE_POLY1305       NEW.
  gcry_cipher_set_sbox            NEW macro.
  gcry_mac_get_algo               NEW.
  GCRY_MAC_HMAC_MD2               NEW.
  GCRY_MAC_HMAC_SHA3_224          NEW.
  GCRY_MAC_HMAC_SHA3_256          NEW.
  GCRY_MAC_HMAC_SHA3_384          NEW.
  GCRY_MAC_HMAC_SHA3_512          NEW.
  GCRY_MAC_POLY1305               NEW.
  GCRY_MAC_POLY1305_AES           NEW.
  GCRY_MAC_POLY1305_CAMELLIA      NEW.
  GCRY_MAC_POLY1305_SEED          NEW.
  GCRY_MAC_POLY1305_SERPENT       NEW.
  GCRY_MAC_POLY1305_TWOFISH       NEW.
  gcry_md_extract                 NEW.
  GCRY_MD_FLAG_BUGEMU1            NEW [from 1.6.1].
  GCRY_MD_GOSTR3411_CP            NEW.
  GCRY_MD_SHA3_224                NEW.
  GCRY_MD_SHA3_256                NEW.
  GCRY_MD_SHA3_384                NEW.
  GCRY_MD_SHA3_512                NEW.
  GCRY_MD_SHAKE128                NEW.
  GCRY_MD_SHAKE256                NEW.
  gcry_mpi_ec_decode_point        NEW.
  gcry_mpi_ec_sub                 NEW.
  GCRY_PK_EDDSA                   NEW constant.
  GCRYCTL_GET_TAGLEN              NEW.
  GCRYCTL_SET_SBOX                NEW.
  GCRYCTL_SET_TAGLEN              NEW.
- Apply libgcrypt-1.6.3-aliasing.patch only on big-endian
  architectures
- update drbg_test.patch and install cavs testing directory again
- As DRBG is upstream, drop pateches:
  v9-0001-SP800-90A-Deterministic-Random-Bit-Generator.patch
  0002-Compile-DRBG.patch
  0003-Function-definitions-of-interfaces-for-random.c.patch
  0004-Invoke-DRBG-from-common-libgcrypt-RNG-code.patch
  0005-Function-definitions-for-gcry_control-callbacks.patch
  0006-DRBG-specific-gcry_control-requests.patch
  v9-0007-User-interface-to-DRBG.patch
  libgcrypt-fix-rng.patch
- drop obsolete:
  libgcrypt-fips-dsa.patch
  libgcrypt-fips_ecdsa.patch</changelog>
  <changelog author="astieger@suse.com" date="1481630400">- libgcrypt 1.7.4:
  * ARMv8/AArch32 performance improvements for AES, GCM, SHA-256,
    and SHA-1.
  * Add ARMv8/AArch32 assembly implementation for Twofish and
    Camellia.
  * Add bulk processing implementation for ARMv8/AArch32.
  * Add Stribog OIDs.
  * Improve the DRBG performance and sync the code with the Linux
    version.
  * When secure memory is requested by the MPI functions or by
    gcry_xmalloc_secure, they do not anymore lead to a fatal error
    if the secure memory pool is used up.  Instead new pools are
    allocated as needed.  These new pools are not protected against
    being swapped out (mlock can't be used). Mitigation for
    minor confidentiality issues is encryption swap space.
  * Fix GOST 28147 CryptoPro-B S-box.
  * Fix error code handling of mlock calls.</changelog>
  <changelog author="astieger@suse.com" date="1481803200">- libgcrypt 1.7.5:
  * Fix regression in mlock detection introduced with 1.7.4</changelog>
  <changelog author="rmaliska@suse.com" date="1484913600">- libgcrypt 1.7.6:
  * Fix counter operand from read-only to read/write
  * Fix too large jump alignment in mpih-rshift</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libgcrypt 1.7.7:
  * Fix possible timing attack on EdDSA session key (previously
    patched, drop libgcrypt-secure-EdDSA-session-key.patch)
  * Fix long standing bug in secure memory implementation which
    could lead to a segv on free</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- libgcrypt 1.7.8:
  * CVE-2017-7526: Mitigate a flush+reload side-channel attack on
    RSA secret keys (bsc#1046607)</changelog>
  <changelog author="astieger@suse.com" date="1500638400">- libgcrypt 1.8.0:
  * New cipher mode XTS
  * New hash function Blake-2
  * New function gcry_mpi_point_copy.
  * New function gcry_get_config.
  * GCRYCTL_REINIT_SYSCALL_CLAMP allows to init nPth after Libgcrypt.
  * New gobal configuration file /etc/gcrypt/random.conf.
  * GCRYCTL_PRINT_CONFIG does now also print build information for
    libgpg-error and the used compiler version.
  * GCRY_CIPHER_MODE_CFB8 is now supported.
  * A jitter based entropy collector is now used in addition to the
    other entropy collectors.
  * Optimized gcry_md_hash_buffers for SHA-256 and SHA-512.
    random pool lock).
  * Interface changes relative to the 1.7.0 release:
    gcry_get_config                 NEW function.
    gcry_mpi_point_copy             NEW function.
    GCRYCTL_REINIT_SYSCALL_CLAMP    NEW macro.
    GCRY_MD_BLAKE2B_512             NEW constant.
    GCRY_MD_BLAKE2B_384             NEW constant.
    GCRY_MD_BLAKE2B_256             NEW constant.
    GCRY_MD_BLAKE2B_160             NEW constant.
    GCRY_MD_BLAKE2S_256             NEW constant.
    GCRY_MD_BLAKE2S_224             NEW constant.
    GCRY_MD_BLAKE2S_160             NEW constant.
    GCRY_MD_BLAKE2S_128             NEW constant.
    GCRY_CIPHER_MODE_XTS            NEW constant.
    gcry_md_info                    DEPRECATED.
- Refresh patch libgcrypt-1.6.3-aliasing.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- RPM group fixes.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- libgcrypt 1.8.1:
  * Mitigate a local side-channel attack on Curve25519 dubbed "May
    the Fourth be With You" CVE-2017-0379 bsc#1055837
  * Add more extra bytes to the pool after reading a seed file
  * Add the OID SHA384WithECDSA from RFC-7427 to SHA-384
  * Fix build problems with the Jitter RNG
  * Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE)</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- libgcrypt 1.8.2:
  * Fix fatal out of secure memory status in the s-expression
    parser on heavy loaded systems.
  * Add auto expand secmem feature or use by GnuPG 2.2.4</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522324800">- Extended the fipsdrv dsa-sign and dsa-verify commands with the
  - -algo parameter for the FIPS testing of DSA SigVer and SigGen
  (bsc#1064455).
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525262400">- Suggest libgcrypt20-hmac for package libgcrypt20 to ensure they
  are installed in the right order. [bsc#1090766]</changelog>
  <changelog author="psimons@suse.com" date="1529496000">- Apply "CVE-2018-0495.patch" from upstream to enable blinding for
  ECDSA signing. This change mitigates a novel side-channel attack.
  [CVE-2018-0495, bsc#1097410]</changelog>
</package>
<package pkgid="0eff066e37298f0926d6ec06ef25575d9a91f5ca72cd3f57e42d1a00364e1af1" name="libgd3" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp150.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1397131200">- build against libtiff and libvpx</changelog>
  <changelog author="tchvatal@suse.com" date="1397736000">- Add tiff and vpx to the devel deps as it is in .pc file.</changelog>
  <changelog author="meissner@suse.com" date="1403870400">- split out libgd3, so libgd2 could be installed in parallel.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failure with automake-1.14</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="be6599339e5818198f4e074fddeb1e53101fa548bf50e8cc81d8d4769fcc3fa0" name="libgd3-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp150.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1397131200">- build against libtiff and libvpx</changelog>
  <changelog author="tchvatal@suse.com" date="1397736000">- Add tiff and vpx to the devel deps as it is in .pc file.</changelog>
  <changelog author="meissner@suse.com" date="1403870400">- split out libgd3, so libgd2 could be installed in parallel.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failure with automake-1.14</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="d8f55a65bd21726d818e5b2a42646c3e6fd1233270e30a97c19ee94dd0e87413" name="libgdm1" arch="x86_64">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.3.1"/>
  <changelog author="yfjiang@suse.com" date="1517313600">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: examine
  filename argument in gdm_settings_desktop_backend_new instead of
  examining GDM_RUNTIME_CONF (bsc#1078030).</changelog>
  <changelog author="yfjiang@suse.com" date="1517400000">- Add back translation-update-upstream as BuildRequires since
  SLE still needs it.</changelog>
  <changelog author="xwang@suse.com" date="1519905600">- Remove gdm-default-wm-sle12.patch: default session in SLE15
  becomes 'GNOME', don't need this patch anymore.</changelog>
  <changelog author="xwang@suse.com" date="1519992000">- Add gdm-Revert-session-don-t-call-gdm_session_defaults_chang.patch:
  fix showing right active session of user in login dialog
  (bsc#1082958 bgo#793609).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519992001">- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Remove obsolete %clean section as RPM already do this kind of
  work itself.
- Update typelib-1_0-Gdm-1_0 package's summary to make it shorter
  but still meaningful.
- Update gdmflexiserver package's summary to avoid redundancies and
  correct name case in the description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992002">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
</package>
<package pkgid="5204355783b8e45baf1a23be2eee90ce7ba8bd96d04dadd05d25e18a814d0535" name="libgeotiff2" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp150.2.3.1"/>
  <changelog author="Dirk St&#xF6;cker &lt;opensuse@dstoecker.de&gt; 1.2.5" date="1246017600">- Updated to 1.2.5
- Using parts of spec file from PackMan for improved quality</changelog>
  <changelog author="Dirk St&#xF6;cker &lt;opensuse@dstoecker.de&gt; 1.3.0" date="1278590400">- Updated to 1.3.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1302350400">- fix 64 bit issues, enable debug</changelog>
  <changelog author="Rene van Paassen&lt;rene.vanpaassen@gmail.com&gt;" date="1302523200">- removed now superfluous "%exclude %{_libdir}/debug" for i586</changelog>
  <changelog author="Michael Behrisch &lt;behrisch@users.sf.net&gt;" date="1332417600">- added gcc build dependency
- removed unneeded data dir fix for non-Suse</changelog>
  <changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1338033600">- Updated to 1.4.0</changelog>
  <changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1339761600">- Fix in pkgconfig file</changelog>
  <changelog author="mpluskal@suse.com" date="1422705600">- Cleanup spec file using spec-cleaner
- Remove commented out patch
- Add build dependency on graphviz to enable images in
  documentation
- Add build dependency on pkg-config to enable dependency generation
  of .pc file
- Update to 1.4.1
  * CMake: Fix up SONAME and VERSION to better
    match configure.ac
  * csv/datum_shift_pref.csv: revert change in preferred datum shift
    for Pulkovo 1942(58) related to ticket #1851 - not appropriate.
  * Preparing 1.4.1 release.
  * csv/datum_shift_pref.csv: Update Pulkova 1942(58) to use a
    particular transformation (#52).
  * bin/geotifcp.c: added B, L, C and M flags from tiffcp (#68)"
  * geo_print.c: clarify that the buffer passed to read methods is only
    guaranteed to be 1024 bytes long (#62).
  * CMake: Support for INCODE build. If you need INCODE support,
    with the definitions compiled into headers, use CMake as your
    configuration/build platform.
  * csv: Override three Brazilian datum shifts on behalf of Daniel
    Miranda and the OSGeo Brazilian Chapter.
  * csv: Upgrade to EPSG 8.5
  * INCODE: Adapt Ben Adler's patch in #66 to add INCODE support to the
    CMake configuration
  * geo_normalize.c: #59, better Mercator_2SP support
  * geotifcp: Do not segfault when a TIFF file has WhitePoint set #65
  * geo_names.c: fix #67 -- add VerticalUnitsGeoKey
  * add_esri_column.py: manually replace D_SIRGAS-Chile by D_Peru96 for GCS_Peru96. Likely an error in the FileGDB SDK db (#63)
  * csv: Upgrade to EPSG 8.4
  * tiffcp: Add bigtiff output support with the -8 flag like tiffcp.  Contributed by
    Mohannad Al-Durgham (nwgeo.com).
  * csv: Upgrade to EPSG 8.2
  * csv/datum_shift_pref.csv: Force OSGB 1936 preferred datum shift.
    (http://trac.osgeo.org/gdal/ticket/4597)</changelog>
  <changelog author="mpluskal@suse.com" date="1431172800">- Do not build or ship static libraries and .la files
- Remove useless conditions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="tzotsos@opensuse.org" date="1475236800">- Switched download link to OSGeo server</changelog>
  <changelog author="tzotsos@opensuse.org" date="1475323200">- Update to 1.4.2
  * update to EPSG v8.9 database
  * cleanups and security fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1489320000">- Small packaging cleanup
- Prepare version update for Leap and backports (boo#1029595)</changelog>
  <changelog author="mpluskal@suse.com" date="1527595200">- Fix incorrect library (boo#1094802)</changelog>
</package>
<package pkgid="07ca2072d0909c051b54b8115009aa130da2d99c314cb8ac15d8e5fe673ab4c3" name="libgio-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 2.53.2:
  + A few new number parsing functions have been added. These have
    better error handling than the existing ones.
  + glib-mkenums now supports /*&lt; private &gt;*/ and /*&lt; public &gt;*/.
  + GSettings now consider XDG_DATA_HOME in addition to
    XDG_DATA_DIRS.
  + Bugs fixed: bgo#674885, bgo#698064, bgo#732000, bgo#734946,
    bgo#741335, bgo#748263, bgo#776876, bgo#777030, bgo#780300,
    bgo#780309, bgo#781755, bgo#781826, bgo#781830, bgo#781847,
    bgo#781867, bgo#782068, bgo#782075, bgo#782089, bgo#782162,
    bgo#782237, bgo#782311, bgo#782628.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651201">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
</package>
<package pkgid="fbc5986b9487453148e0e3de59c0a0ae69d34dbdb27c5ea8e4231806f9e98aaf" name="libgio-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 2.53.2:
  + A few new number parsing functions have been added. These have
    better error handling than the existing ones.
  + glib-mkenums now supports /*&lt; private &gt;*/ and /*&lt; public &gt;*/.
  + GSettings now consider XDG_DATA_HOME in addition to
    XDG_DATA_DIRS.
  + Bugs fixed: bgo#674885, bgo#698064, bgo#732000, bgo#734946,
    bgo#741335, bgo#748263, bgo#776876, bgo#777030, bgo#780300,
    bgo#780309, bgo#781755, bgo#781826, bgo#781830, bgo#781847,
    bgo#781867, bgo#782068, bgo#782075, bgo#782089, bgo#782162,
    bgo#782237, bgo#782311, bgo#782628.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651201">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
</package>
<package pkgid="3548f71d53c3ebdb630743becc9e048904d3cd4e280be87ac5179e95c587dd90" name="libgio-fam" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 2.53.2:
  + A few new number parsing functions have been added. These have
    better error handling than the existing ones.
  + glib-mkenums now supports /*&lt; private &gt;*/ and /*&lt; public &gt;*/.
  + GSettings now consider XDG_DATA_HOME in addition to
    XDG_DATA_DIRS.
  + Bugs fixed: bgo#674885, bgo#698064, bgo#732000, bgo#734946,
    bgo#741335, bgo#748263, bgo#776876, bgo#777030, bgo#780300,
    bgo#780309, bgo#781755, bgo#781826, bgo#781830, bgo#781847,
    bgo#781867, bgo#782068, bgo#782075, bgo#782089, bgo#782162,
    bgo#782237, bgo#782311, bgo#782628.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651201">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
</package>
<package pkgid="613a87a2e2d7f996f6e8a8e32eafb4967a68352cf6cf09e2ac795a51c92067c9" name="libgio-fam-32bit" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 2.53.2:
  + A few new number parsing functions have been added. These have
    better error handling than the existing ones.
  + glib-mkenums now supports /*&lt; private &gt;*/ and /*&lt; public &gt;*/.
  + GSettings now consider XDG_DATA_HOME in addition to
    XDG_DATA_DIRS.
  + Bugs fixed: bgo#674885, bgo#698064, bgo#732000, bgo#734946,
    bgo#741335, bgo#748263, bgo#776876, bgo#777030, bgo#780300,
    bgo#780309, bgo#781755, bgo#781826, bgo#781830, bgo#781847,
    bgo#781867, bgo#782068, bgo#782075, bgo#782089, bgo#782162,
    bgo#782237, bgo#782311, bgo#782628.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651201">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
</package>
<package pkgid="2e02212323a3431fc3d686c39d6ea57c2ee00b1ccb2bdea42e7d09f169e43c3d" name="libgit2" arch="src">
  <version epoch="0" ver="0.26.6" rel="lp150.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1404993600">- Update to version 0.21.1:
  + Added a new config snapshotting API to fix race issues when
    different applications (e.g. Git and a libgit2 client) access
    the same repository simultaneously.
  + Added reflog support to all APIs that could alter a reference.
  + Avoided race conditions when updating references.
  + Converted all APIs that output string data to use git_buf
    objects for the return value.
  + Added standard git_&lt;object&gt;_init_options functions to
    initialize options structures when static initialization is not
    possible, and renamed options structures to standard
    git_&lt;object&gt;_options (replacing _opts suffix used in some
    places).
  + Improved use of const on pointers in many APIs (which may
    affect some bindings).
  + Replaced use of oid with simply id for references to
    git_oid value.s
  + Previously, when a callback function returned an error value
    (i.e. non-zero), libgit2 converted it to GIT_EUSER for the
    parent function's return value. Now, libgit2 tries to pass
    through the callback's return value all the way back to the
    caller.
  + All inline functions were eliminated from the public libgit2
    API.
  + Removed all Apache licensed code from library.
  + For more changes, please see detailed ChangeLog in package.
- Rename libgit2-0 subpackage to libgit2-21, following upstreams
  soname change (another project believing the soname should match
  the version).
- Enable SSH Support:
  + Add pkgconfig(libssh2) BuildRequires.
  + Pass -DUSE_SSH:BOOL=ON to cmake call in order to enable SSH
    support.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1413460800">- Add baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1422360000">- Update to version 0.22.1:
  + The following (critical) fixes have been backported to this
    maintenance release:
  - checkout: introduce git_checkout_perfdata.
  - git_path_join_unrooted: return base len.
  - checkout: don't recreate previous directory.
  - checkout tests: nasty symlinks.
  - checkout: drop newline in error message.
  - checkout: remove files before writing new ones.
  - checkout tests: emulate p_realpath poorly on Win32.
  - checkout tests: cleanup realpath impl on Win32.
- Changes from version 0.22.0:
  + git_signature_new() now requires a non-empty email address.
  + Use CommonCrypto libraries for SHA-1 calculation on Mac OS X.
  + Disable SSL compression and SSLv2 and SSLv3 ciphers in favor of
    TLSv1 in OpenSSL.
  + The fetch behavior of remotes with autotag set to
    GIT_REMOTE_DOWNLOAD_TAGS_ALL has been changed to match git
    1.9.0 and later. In this mode, libgit2 now fetches all tags in
    addition to whatever else needs to be fetched.
  + git_checkout() now handles case-changing renames correctly on
    case-insensitive filesystems; for example renaming "readme" to
    "README".
  + The search for libssh2 is now done via pkg-config instead of a
    custom search of a few directories.
  + Add support for core.protectHFS and core.protectNTFS. Add more
    validation for filenames which we write such as references.
  + The local transport now generates textual progress output like
    git-upload-pack does ("counting objects").
  + git_checkout_index() can now check out an in-memory index that
    is not necessarily the repository's index, so you may check out
    an index that was produced by git_merge and friends while
    retaining the cached information.
  + Remove the default timeout for receiving / sending data over
    HTTP using the WinHTTP transport layer.
  + Add SPNEGO (Kerberos) authentication using GSSAPI on Unix
    systems.
  + Provide built-in objects for the empty blob (e69de29) and empty
    tree (4b825dc) objects.
  + The index' tree cache is now filled upon read-tree and
    write-tree and the cache is written to disk.
  + LF -&gt; CRLF filter refuses to handle mixed-EOL files.
  + LF -&gt; CRLF filter now runs when * text = auto (with Git for
    Windows 1.9.4).
  + File unlocks are atomic again via rename. Read-only files on
    Windows are made read-write if necessary.
  + Share open packfiles across repositories to share descriptors
    and mmaps.
  + Use a map for the treebuilder, making insertion O(1).
  + The build system now accepts an option EMBED_SSH_PATH which
    when set tells it to include a copy of libssh2 at the given
    location. This is enabled for MSVC.
  + Add support for refspecs with the asterisk in the middle of a
    pattern.
  + Fetching now performs opportunistic updates. To achieve this,
    we introduce a difference between active and passive refspecs,
    which make git_remote_download() and git_remote_fetch() to take
    a list of resfpecs to be the active list, similarly to how git
    fetch accepts a list on the command-line.
  + The THREADSAFE option to build libgit2 with threading support
    has been flipped to be on by default.
  + The remote object has learnt to prune remote-tracking branches.
    If the remote is configured to do so, this will happen via
    git_remote_fetch(). You can also call git_remote_prune() after
    connecting or fetching to perform the prune.
- Rename libgit2-21 subpackage to libgit2-22, following upstreams
  soname bump (also in baselibs.conf).</changelog>
  <changelog author="dimstar@opensuse.org" date="1438084800">- Update to version 0.23.0:
  + Changes or improvements:
  - Patience and minimal diff drivers can now be used for merges.
  - Merges can now ignore whitespace changes.
  - Updated binary identification in CRLF filtering to avoid
    false positives in UTF-8 files.
  - Rename and copy detection is enabled for small files.
  - Checkout can now handle an initial checkout of a repository,
    making GIT_CHECKOUT_SAFE_CREATE unnecessary for users of
    clone.
  - The signature parameter in the ref-modifying functions has
    been removed. Use git_repository_set_ident() and
    git_repository_ident() to override the signature to be used.
  - The local transport now auto-scales the number of threads to
    use when creating the packfile instead of sticking to one.
  - Reference renaming now uses the right id for the old value.
  - The annotated version of branch creation, HEAD detaching and
    reset allow for specifying the expression from the user to be
    put into the reflog.
  - git_rebase_commit now returns GIT_EUNMERGED when you attempt
    to commit with unstaged changes.
  - On Mac OS X, we now use SecureTransport to provide the
    cryptographic support for HTTPS connections insead of
    OpenSSL.
  - Checkout can now accept an index for the baseline
    computations via the baseline_index member.
  - The configuration for fetching is no longer stored inside the
    git_remote struct but has been moved to a git_fetch_options.
    The remote functions now take these options or the callbacks
    instead of setting them beforehand.
  - git_submodule instances are no longer cached or shared across
    lookup. Each submodule represents the configuration at the
    time of loading.
  - The index now uses diffs for add_all() and update_all() which
    gives it a speed boost and closer semantics to git.
  - The ssh transport now reports the stderr output from the
    server as the error message, which allows you to get the
    "repository not found" messages.
  - git_index_conflict_add() will remove staged entries that
    exist for conflicted paths.
  - The flags for a git_diff_file will now have the
    GIT_DIFF_FLAG_EXISTS bit set when a file exists on that side
    of the diff. This is useful for understanding whether a side
    of the diff exists in the presence of a conflict.
  - The constructor for a write-stream into the odb now takes
    git_off_t instead of size_t for the size of the blob, which
    allows putting large files into the odb on 32-bit systems.
  - The remote's push and pull URLs now honor the
    url.$URL.insteadOf configuration. This allows modifying URL
    prefixes to a custom value via gitconfig.
  - git_diff_foreach, git_diff_blobs, git_diff_blob_to_buffer,
    and git_diff_buffers now accept a new binary callback of type
    git_diff_binary_cb that includes the binary diff information.
  - The race condition mitigations described in racy-git.txt have
    been implemented.
  - If libcurl is installed, we will use it to connect to HTTP(S)
    servers.
  + Various API changes (incl. breaking changes).
- Rename libgit2-22 subpackage to libgit2-23, following upstreams
  soname bump (also in baselibs.conf).</changelog>
  <changelog author="astieger@suse.com" date="1441627200">- libgit2 0.23.2:
  * documentation fixes
  * diff: don't error out on an invalid regex
  * http: propagate the credentials callback's error code
  * Fix bug in git_smart__push: push_transfer_progress cb is never called
  * remote: don't confuse tag auto-follow rules with refspec matching
  * curl: use the most secure auth method for the proxy
  * Forcing libssh2 lib location
  * fix duplicate basenames to support older VS
- includes changes from 0.23.1:
  * Stage an unregistered submodule in _add_bypath()
  * filebuf: remove lockfile upon rename errors
  * Increase required version of cmake to 2.8
  * Handle ssh:// and git:// urls containing a '~' character.
  * documentation updates
  * submodule URL handling fixes
  * index: allow add_bypath to update submodules
  * blob: fail to create a blob from a dir with EDIRECTORY
  * submodule: lookup the submodule by path if available
  * submdule: reproduce double-reporting of a submodule in foreach
- note cmake requirement and use cmake makros
- build with system libcurl
- build with system http-parser</changelog>
  <changelog author="dimstar@opensuse.org" date="1441886400">- Add libgit2-fix-.pc-file.patch: Fix paths written in libgit2.pc.</changelog>
  <changelog author="astieger@suse.com" date="1444219200">- libgit2 0.23.3, containing critical fixes:
  * blame: guard xdiff calls for large files
  * diff: don't feed large files to xdiff
  * merge_file: treat large files as binary
  * xdiff: convert size variables to size_t
  * GITERR_CHECK_ALLOC_ADDn: multi-arg adders</changelog>
  <changelog author="astieger@suse.com" date="1448884800">- libgit2 0.23.4:
  * various bug fixes and improvements
- drop upstreamed libgit2-fix-.pc-file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129600">- Update to version 0.24.0:
  + Custom filters can now be registered with wildcard attributes,
    for example filter=*. Consumers should examine the attributes
    parameter of the check function for details.
  + Symlinks are now followed when locking a file, which can be
    necessary when multiple worktrees share a base repository.
  + You can now set your own user-agent to be sent for HTTP
    requests by using the GIT_OPT_SET_USER_AGENT with
    git_libgit2_opts().
  + You can set custom HTTP header fields to be sent along with
    requests by passing them in the fetch and push options.
  + Tree objects are now assumed to be sorted. If a tree is not
    correctly formed, it will give bad results. This is the git
    approach and cuts a significant amount of time when reading the
    trees.
  + Filter registration is now protected against concurrent
    registration.
  + Filenames which are not valid on Windows in an index no longer
    cause to fail to parse it on that OS.
  + Rebases can now be performed purely in-memory, without touching
    the repository's workdir.
  + When adding objects to the index, or when creating new tree or
    commit objects, the inputs are validated to ensure that the
    dependent objects exist and are of the correct type. This
    object validation can be disabled with the
    GIT_OPT_ENABLE_STRICT_OBJECT_CREATION option.
  + The WinHTTP transport's handling of bad credentials now behaves
    like the others, asking for credentials again.
  + Various API changes (additions AND removals).
- Rename libgit2-23 subpackage to libgit2-24, following upstraems
  soname bump (also in baselibs.conf).</changelog>
  <changelog author="astieger@suse.com" date="1461153600">- libgit2 0.24.1:
  + various compatible backported bug fixes</changelog>
  <changelog author="sreeves@suse.com" date="1462795200">- Add to the SDK. Fate#319349
- Update license to GPL-2.0 WITH GCC-exception-2.0</changelog>
  <changelog author="astieger@suse.com" date="1480593600">- libgit2 0.24.3, fixing the following vulnerabilities:
  * CVE-2016-8568, CVE-2016-8569: invalid memory accesses parsing
    object files (bsc#1003810)
  * various bug fixes from the 0.24.2 release</changelog>
  <changelog author="astieger@suse.com" date="1484136000">- libgit2 0.24.6, including the following security fixes:
  * bsc#1019036: edge cases in the Git Smart Protocol can lead to
    attempting to parse outside of the buffer
    CVE-2016-10128,CVE-2016-10129
  * bsc#1019037: MITM possible due to lack of parameter for
    certificate parameter
    CVE-2016-10130,CVE-2017-5338,CVE-2017-5339
- includes changes from 0.24.5:
  * add support for OpenSSL 1.1.0 for BIO filter</changelog>
  <changelog author="astieger@suse.com" date="1484136001">- libgit2 0.25.1
- New features and functionality:
  * repository discovery features
  * Support for reading and writing git index v4 files
  * Improve the performance of the revwalk
  * reference db concurrency improvements
  * Nanosecond resolution is now activated by default
  * restrict the set of ciphers used with OpenSSL by default.
  * user-registered merge drivers
  * built-in support for the union merge driver
  * callers can now specify proxy settings
  * New API for creating signed commits
  * New API for creating blobs from streams
  * New flags for opening repositories
  * New functions for various git operations
- Removed API:
  * git_blob_create_fromchunks() has been removed in  favour of
    git_blob_create_fromstream()
- Changed API:
  * git_packbuilder_object_count and git_packbuilder_written now
    return a size_t instead of a uint32_t for more thorough
    compatibility with the rest of the library.
  * git_packbuiler_progress now provides explicitly sized uint32_t
    values instead of unsigned int.
  * git_diff_file now includes an id_abbrev field that reflects the
    number of nibbles set in the id field.
  * git_odb_backend now has a freshen function pointer
  * git_remote_connect() now accepts proxy options.</changelog>
  <changelog author="astieger@suse.com" date="1501934400">- libgit2 0.26.0:
  * Support for opening, creating and modifying worktrees.
  * Can now detect SHA1 collisions resulting from the SHAttered
    attack CVE-2005-4900
  * Fix for missing implementation of `git_merge_driver_source` getters
  * Fix for installed pkg-config file being broken when the prefix
    contains spaces
  * Can now detect when the hashsum of on-disk objects does not
    match their expected hashsum.
  * Support open-ended ranges (e.g. "master..", "...master") in
    revision range parsing code.
  * Correctly compute ignores with leading "/" in subdirectories.
  * Optionally call `fsync` on loose objects, packfiles and their
    indexes, loose references and packed reference files.
  * Builds against OpenSSL v1.1 and against LibreSSL.
  * Improvements for reading index v4 files.
  * API additions and incompatible API changes</changelog>
  <changelog author="mimi.vx@gmail.com" date="1510574400">- remove unneeded dependency (python is used only for testsuite, which
    isn't used during build)</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- Update to 0.26.3:
  * Fix cloning of the libgit2 project with git clone --recursive by removing an
    invalid submodule from our testing data.
  * Fix endianness of the port in p_getaddrinfo().
  * Fix handling of negative gitignore rules with wildcards.
  * Fix handling of case-insensitive negative gitignore rules.
  * Fix resolving references to a tag if the reference is stored with its fully
    resolved OID in the packed-refs file.
  * Fix checkout not treating worktree files as modified when only their mode has
    changed.
  * Fix rename detection with GIT_DIFF_FIND_RENAMES_FROM_REWRITES.
  * Fixes memory handling issues when reading crafted repository index files.
    The issues allow for possible denial of service due to allocation of large
    memory and out-of-bound reads.
    (CVE-2018-8098 bnc#1085257 CVE-2018-8099 bnc#1085256)
  * Updates the bundled zlib to 1.2.11. Users who build the bundled zlib are
    vulnerable to security issues in the prior version.</changelog>
  <changelog author="mgorse@suse.com" date="1532606400">- Update to version 0.26.5 (boo#1095219 boo#1100612 boo#1100613):
  * This is a security release fixing out-of-bounds reads when
    reading objects from a packfile. This corresponds to
    CVE-2018-10887 and CVE-2018-10888, which were both reported by
    Riccardo Schirone.
  * Changes in v0.26.4:
  * This is a security release fixing insufficient validation of
    submodule names (CVE-2018-11235, reported by Etienne
    Stalmans) and disallows `.gitmodules` files as symlinks.</changelog>
  <changelog author="astieger@suse.com" date="1534161600">- libgit2 0.26.6:
  * fix out-of-bounds reads when processing smart-protocol "ng"
    packets (bsc#1104641)</changelog>
</package>
<package pkgid="dfcf9970390abae10c0788646023cefdd60e7350a8d845cf4386b2fcfe0ec41c" name="libgit2-26" arch="x86_64">
  <version epoch="0" ver="0.26.6" rel="lp150.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1404993600">- Update to version 0.21.1:
  + Added a new config snapshotting API to fix race issues when
    different applications (e.g. Git and a libgit2 client) access
    the same repository simultaneously.
  + Added reflog support to all APIs that could alter a reference.
  + Avoided race conditions when updating references.
  + Converted all APIs that output string data to use git_buf
    objects for the return value.
  + Added standard git_&lt;object&gt;_init_options functions to
    initialize options structures when static initialization is not
    possible, and renamed options structures to standard
    git_&lt;object&gt;_options (replacing _opts suffix used in some
    places).
  + Improved use of const on pointers in many APIs (which may
    affect some bindings).
  + Replaced use of oid with simply id for references to
    git_oid value.s
  + Previously, when a callback function returned an error value
    (i.e. non-zero), libgit2 converted it to GIT_EUSER for the
    parent function's return value. Now, libgit2 tries to pass
    through the callback's return value all the way back to the
    caller.
  + All inline functions were eliminated from the public libgit2
    API.
  + Removed all Apache licensed code from library.
  + For more changes, please see detailed ChangeLog in package.
- Rename libgit2-0 subpackage to libgit2-21, following upstreams
  soname change (another project believing the soname should match
  the version).
- Enable SSH Support:
  + Add pkgconfig(libssh2) BuildRequires.
  + Pass -DUSE_SSH:BOOL=ON to cmake call in order to enable SSH
    support.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1413460800">- Add baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1422360000">- Update to version 0.22.1:
  + The following (critical) fixes have been backported to this
    maintenance release:
  - checkout: introduce git_checkout_perfdata.
  - git_path_join_unrooted: return base len.
  - checkout: don't recreate previous directory.
  - checkout tests: nasty symlinks.
  - checkout: drop newline in error message.
  - checkout: remove files before writing new ones.
  - checkout tests: emulate p_realpath poorly on Win32.
  - checkout tests: cleanup realpath impl on Win32.
- Changes from version 0.22.0:
  + git_signature_new() now requires a non-empty email address.
  + Use CommonCrypto libraries for SHA-1 calculation on Mac OS X.
  + Disable SSL compression and SSLv2 and SSLv3 ciphers in favor of
    TLSv1 in OpenSSL.
  + The fetch behavior of remotes with autotag set to
    GIT_REMOTE_DOWNLOAD_TAGS_ALL has been changed to match git
    1.9.0 and later. In this mode, libgit2 now fetches all tags in
    addition to whatever else needs to be fetched.
  + git_checkout() now handles case-changing renames correctly on
    case-insensitive filesystems; for example renaming "readme" to
    "README".
  + The search for libssh2 is now done via pkg-config instead of a
    custom search of a few directories.
  + Add support for core.protectHFS and core.protectNTFS. Add more
    validation for filenames which we write such as references.
  + The local transport now generates textual progress output like
    git-upload-pack does ("counting objects").
  + git_checkout_index() can now check out an in-memory index that
    is not necessarily the repository's index, so you may check out
    an index that was produced by git_merge and friends while
    retaining the cached information.
  + Remove the default timeout for receiving / sending data over
    HTTP using the WinHTTP transport layer.
  + Add SPNEGO (Kerberos) authentication using GSSAPI on Unix
    systems.
  + Provide built-in objects for the empty blob (e69de29) and empty
    tree (4b825dc) objects.
  + The index' tree cache is now filled upon read-tree and
    write-tree and the cache is written to disk.
  + LF -&gt; CRLF filter refuses to handle mixed-EOL files.
  + LF -&gt; CRLF filter now runs when * text = auto (with Git for
    Windows 1.9.4).
  + File unlocks are atomic again via rename. Read-only files on
    Windows are made read-write if necessary.
  + Share open packfiles across repositories to share descriptors
    and mmaps.
  + Use a map for the treebuilder, making insertion O(1).
  + The build system now accepts an option EMBED_SSH_PATH which
    when set tells it to include a copy of libssh2 at the given
    location. This is enabled for MSVC.
  + Add support for refspecs with the asterisk in the middle of a
    pattern.
  + Fetching now performs opportunistic updates. To achieve this,
    we introduce a difference between active and passive refspecs,
    which make git_remote_download() and git_remote_fetch() to take
    a list of resfpecs to be the active list, similarly to how git
    fetch accepts a list on the command-line.
  + The THREADSAFE option to build libgit2 with threading support
    has been flipped to be on by default.
  + The remote object has learnt to prune remote-tracking branches.
    If the remote is configured to do so, this will happen via
    git_remote_fetch(). You can also call git_remote_prune() after
    connecting or fetching to perform the prune.
- Rename libgit2-21 subpackage to libgit2-22, following upstreams
  soname bump (also in baselibs.conf).</changelog>
  <changelog author="dimstar@opensuse.org" date="1438084800">- Update to version 0.23.0:
  + Changes or improvements:
  - Patience and minimal diff drivers can now be used for merges.
  - Merges can now ignore whitespace changes.
  - Updated binary identification in CRLF filtering to avoid
    false positives in UTF-8 files.
  - Rename and copy detection is enabled for small files.
  - Checkout can now handle an initial checkout of a repository,
    making GIT_CHECKOUT_SAFE_CREATE unnecessary for users of
    clone.
  - The signature parameter in the ref-modifying functions has
    been removed. Use git_repository_set_ident() and
    git_repository_ident() to override the signature to be used.
  - The local transport now auto-scales the number of threads to
    use when creating the packfile instead of sticking to one.
  - Reference renaming now uses the right id for the old value.
  - The annotated version of branch creation, HEAD detaching and
    reset allow for specifying the expression from the user to be
    put into the reflog.
  - git_rebase_commit now returns GIT_EUNMERGED when you attempt
    to commit with unstaged changes.
  - On Mac OS X, we now use SecureTransport to provide the
    cryptographic support for HTTPS connections insead of
    OpenSSL.
  - Checkout can now accept an index for the baseline
    computations via the baseline_index member.
  - The configuration for fetching is no longer stored inside the
    git_remote struct but has been moved to a git_fetch_options.
    The remote functions now take these options or the callbacks
    instead of setting them beforehand.
  - git_submodule instances are no longer cached or shared across
    lookup. Each submodule represents the configuration at the
    time of loading.
  - The index now uses diffs for add_all() and update_all() which
    gives it a speed boost and closer semantics to git.
  - The ssh transport now reports the stderr output from the
    server as the error message, which allows you to get the
    "repository not found" messages.
  - git_index_conflict_add() will remove staged entries that
    exist for conflicted paths.
  - The flags for a git_diff_file will now have the
    GIT_DIFF_FLAG_EXISTS bit set when a file exists on that side
    of the diff. This is useful for understanding whether a side
    of the diff exists in the presence of a conflict.
  - The constructor for a write-stream into the odb now takes
    git_off_t instead of size_t for the size of the blob, which
    allows putting large files into the odb on 32-bit systems.
  - The remote's push and pull URLs now honor the
    url.$URL.insteadOf configuration. This allows modifying URL
    prefixes to a custom value via gitconfig.
  - git_diff_foreach, git_diff_blobs, git_diff_blob_to_buffer,
    and git_diff_buffers now accept a new binary callback of type
    git_diff_binary_cb that includes the binary diff information.
  - The race condition mitigations described in racy-git.txt have
    been implemented.
  - If libcurl is installed, we will use it to connect to HTTP(S)
    servers.
  + Various API changes (incl. breaking changes).
- Rename libgit2-22 subpackage to libgit2-23, following upstreams
  soname bump (also in baselibs.conf).</changelog>
  <changelog author="astieger@suse.com" date="1441627200">- libgit2 0.23.2:
  * documentation fixes
  * diff: don't error out on an invalid regex
  * http: propagate the credentials callback's error code
  * Fix bug in git_smart__push: push_transfer_progress cb is never called
  * remote: don't confuse tag auto-follow rules with refspec matching
  * curl: use the most secure auth method for the proxy
  * Forcing libssh2 lib location
  * fix duplicate basenames to support older VS
- includes changes from 0.23.1:
  * Stage an unregistered submodule in _add_bypath()
  * filebuf: remove lockfile upon rename errors
  * Increase required version of cmake to 2.8
  * Handle ssh:// and git:// urls containing a '~' character.
  * documentation updates
  * submodule URL handling fixes
  * index: allow add_bypath to update submodules
  * blob: fail to create a blob from a dir with EDIRECTORY
  * submodule: lookup the submodule by path if available
  * submdule: reproduce double-reporting of a submodule in foreach
- note cmake requirement and use cmake makros
- build with system libcurl
- build with system http-parser</changelog>
  <changelog author="dimstar@opensuse.org" date="1441886400">- Add libgit2-fix-.pc-file.patch: Fix paths written in libgit2.pc.</changelog>
  <changelog author="astieger@suse.com" date="1444219200">- libgit2 0.23.3, containing critical fixes:
  * blame: guard xdiff calls for large files
  * diff: don't feed large files to xdiff
  * merge_file: treat large files as binary
  * xdiff: convert size variables to size_t
  * GITERR_CHECK_ALLOC_ADDn: multi-arg adders</changelog>
  <changelog author="astieger@suse.com" date="1448884800">- libgit2 0.23.4:
  * various bug fixes and improvements
- drop upstreamed libgit2-fix-.pc-file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129600">- Update to version 0.24.0:
  + Custom filters can now be registered with wildcard attributes,
    for example filter=*. Consumers should examine the attributes
    parameter of the check function for details.
  + Symlinks are now followed when locking a file, which can be
    necessary when multiple worktrees share a base repository.
  + You can now set your own user-agent to be sent for HTTP
    requests by using the GIT_OPT_SET_USER_AGENT with
    git_libgit2_opts().
  + You can set custom HTTP header fields to be sent along with
    requests by passing them in the fetch and push options.
  + Tree objects are now assumed to be sorted. If a tree is not
    correctly formed, it will give bad results. This is the git
    approach and cuts a significant amount of time when reading the
    trees.
  + Filter registration is now protected against concurrent
    registration.
  + Filenames which are not valid on Windows in an index no longer
    cause to fail to parse it on that OS.
  + Rebases can now be performed purely in-memory, without touching
    the repository's workdir.
  + When adding objects to the index, or when creating new tree or
    commit objects, the inputs are validated to ensure that the
    dependent objects exist and are of the correct type. This
    object validation can be disabled with the
    GIT_OPT_ENABLE_STRICT_OBJECT_CREATION option.
  + The WinHTTP transport's handling of bad credentials now behaves
    like the others, asking for credentials again.
  + Various API changes (additions AND removals).
- Rename libgit2-23 subpackage to libgit2-24, following upstraems
  soname bump (also in baselibs.conf).</changelog>
  <changelog author="astieger@suse.com" date="1461153600">- libgit2 0.24.1:
  + various compatible backported bug fixes</changelog>
  <changelog author="sreeves@suse.com" date="1462795200">- Add to the SDK. Fate#319349
- Update license to GPL-2.0 WITH GCC-exception-2.0</changelog>
  <changelog author="astieger@suse.com" date="1480593600">- libgit2 0.24.3, fixing the following vulnerabilities:
  * CVE-2016-8568, CVE-2016-8569: invalid memory accesses parsing
    object files (bsc#1003810)
  * various bug fixes from the 0.24.2 release</changelog>
  <changelog author="astieger@suse.com" date="1484136000">- libgit2 0.24.6, including the following security fixes:
  * bsc#1019036: edge cases in the Git Smart Protocol can lead to
    attempting to parse outside of the buffer
    CVE-2016-10128,CVE-2016-10129
  * bsc#1019037: MITM possible due to lack of parameter for
    certificate parameter
    CVE-2016-10130,CVE-2017-5338,CVE-2017-5339
- includes changes from 0.24.5:
  * add support for OpenSSL 1.1.0 for BIO filter</changelog>
  <changelog author="astieger@suse.com" date="1484136001">- libgit2 0.25.1
- New features and functionality:
  * repository discovery features
  * Support for reading and writing git index v4 files
  * Improve the performance of the revwalk
  * reference db concurrency improvements
  * Nanosecond resolution is now activated by default
  * restrict the set of ciphers used with OpenSSL by default.
  * user-registered merge drivers
  * built-in support for the union merge driver
  * callers can now specify proxy settings
  * New API for creating signed commits
  * New API for creating blobs from streams
  * New flags for opening repositories
  * New functions for various git operations
- Removed API:
  * git_blob_create_fromchunks() has been removed in  favour of
    git_blob_create_fromstream()
- Changed API:
  * git_packbuilder_object_count and git_packbuilder_written now
    return a size_t instead of a uint32_t for more thorough
    compatibility with the rest of the library.
  * git_packbuiler_progress now provides explicitly sized uint32_t
    values instead of unsigned int.
  * git_diff_file now includes an id_abbrev field that reflects the
    number of nibbles set in the id field.
  * git_odb_backend now has a freshen function pointer
  * git_remote_connect() now accepts proxy options.</changelog>
  <changelog author="astieger@suse.com" date="1501934400">- libgit2 0.26.0:
  * Support for opening, creating and modifying worktrees.
  * Can now detect SHA1 collisions resulting from the SHAttered
    attack CVE-2005-4900
  * Fix for missing implementation of `git_merge_driver_source` getters
  * Fix for installed pkg-config file being broken when the prefix
    contains spaces
  * Can now detect when the hashsum of on-disk objects does not
    match their expected hashsum.
  * Support open-ended ranges (e.g. "master..", "...master") in
    revision range parsing code.
  * Correctly compute ignores with leading "/" in subdirectories.
  * Optionally call `fsync` on loose objects, packfiles and their
    indexes, loose references and packed reference files.
  * Builds against OpenSSL v1.1 and against LibreSSL.
  * Improvements for reading index v4 files.
  * API additions and incompatible API changes</changelog>
  <changelog author="mimi.vx@gmail.com" date="1510574400">- remove unneeded dependency (python is used only for testsuite, which
    isn't used during build)</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- Update to 0.26.3:
  * Fix cloning of the libgit2 project with git clone --recursive by removing an
    invalid submodule from our testing data.
  * Fix endianness of the port in p_getaddrinfo().
  * Fix handling of negative gitignore rules with wildcards.
  * Fix handling of case-insensitive negative gitignore rules.
  * Fix resolving references to a tag if the reference is stored with its fully
    resolved OID in the packed-refs file.
  * Fix checkout not treating worktree files as modified when only their mode has
    changed.
  * Fix rename detection with GIT_DIFF_FIND_RENAMES_FROM_REWRITES.
  * Fixes memory handling issues when reading crafted repository index files.
    The issues allow for possible denial of service due to allocation of large
    memory and out-of-bound reads.
    (CVE-2018-8098 bnc#1085257 CVE-2018-8099 bnc#1085256)
  * Updates the bundled zlib to 1.2.11. Users who build the bundled zlib are
    vulnerable to security issues in the prior version.</changelog>
  <changelog author="mgorse@suse.com" date="1532606400">- Update to version 0.26.5 (boo#1095219 boo#1100612 boo#1100613):
  * This is a security release fixing out-of-bounds reads when
    reading objects from a packfile. This corresponds to
    CVE-2018-10887 and CVE-2018-10888, which were both reported by
    Riccardo Schirone.
  * Changes in v0.26.4:
  * This is a security release fixing insufficient validation of
    submodule names (CVE-2018-11235, reported by Etienne
    Stalmans) and disallows `.gitmodules` files as symlinks.</changelog>
  <changelog author="astieger@suse.com" date="1534161600">- libgit2 0.26.6:
  * fix out-of-bounds reads when processing smart-protocol "ng"
    packets (bsc#1104641)</changelog>
</package>
<package pkgid="f90a3107fd8a762da008c5a342271583e9fed6d24e0de3c25b2afbd7610394dd" name="libgit2-26-32bit" arch="x86_64">
  <version epoch="0" ver="0.26.6" rel="lp150.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1404993600">- Update to version 0.21.1:
  + Added a new config snapshotting API to fix race issues when
    different applications (e.g. Git and a libgit2 client) access
    the same repository simultaneously.
  + Added reflog support to all APIs that could alter a reference.
  + Avoided race conditions when updating references.
  + Converted all APIs that output string data to use git_buf
    objects for the return value.
  + Added standard git_&lt;object&gt;_init_options functions to
    initialize options structures when static initialization is not
    possible, and renamed options structures to standard
    git_&lt;object&gt;_options (replacing _opts suffix used in some
    places).
  + Improved use of const on pointers in many APIs (which may
    affect some bindings).
  + Replaced use of oid with simply id for references to
    git_oid value.s
  + Previously, when a callback function returned an error value
    (i.e. non-zero), libgit2 converted it to GIT_EUSER for the
    parent function's return value. Now, libgit2 tries to pass
    through the callback's return value all the way back to the
    caller.
  + All inline functions were eliminated from the public libgit2
    API.
  + Removed all Apache licensed code from library.
  + For more changes, please see detailed ChangeLog in package.
- Rename libgit2-0 subpackage to libgit2-21, following upstreams
  soname change (another project believing the soname should match
  the version).
- Enable SSH Support:
  + Add pkgconfig(libssh2) BuildRequires.
  + Pass -DUSE_SSH:BOOL=ON to cmake call in order to enable SSH
    support.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1413460800">- Add baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1422360000">- Update to version 0.22.1:
  + The following (critical) fixes have been backported to this
    maintenance release:
  - checkout: introduce git_checkout_perfdata.
  - git_path_join_unrooted: return base len.
  - checkout: don't recreate previous directory.
  - checkout tests: nasty symlinks.
  - checkout: drop newline in error message.
  - checkout: remove files before writing new ones.
  - checkout tests: emulate p_realpath poorly on Win32.
  - checkout tests: cleanup realpath impl on Win32.
- Changes from version 0.22.0:
  + git_signature_new() now requires a non-empty email address.
  + Use CommonCrypto libraries for SHA-1 calculation on Mac OS X.
  + Disable SSL compression and SSLv2 and SSLv3 ciphers in favor of
    TLSv1 in OpenSSL.
  + The fetch behavior of remotes with autotag set to
    GIT_REMOTE_DOWNLOAD_TAGS_ALL has been changed to match git
    1.9.0 and later. In this mode, libgit2 now fetches all tags in
    addition to whatever else needs to be fetched.
  + git_checkout() now handles case-changing renames correctly on
    case-insensitive filesystems; for example renaming "readme" to
    "README".
  + The search for libssh2 is now done via pkg-config instead of a
    custom search of a few directories.
  + Add support for core.protectHFS and core.protectNTFS. Add more
    validation for filenames which we write such as references.
  + The local transport now generates textual progress output like
    git-upload-pack does ("counting objects").
  + git_checkout_index() can now check out an in-memory index that
    is not necessarily the repository's index, so you may check out
    an index that was produced by git_merge and friends while
    retaining the cached information.
  + Remove the default timeout for receiving / sending data over
    HTTP using the WinHTTP transport layer.
  + Add SPNEGO (Kerberos) authentication using GSSAPI on Unix
    systems.
  + Provide built-in objects for the empty blob (e69de29) and empty
    tree (4b825dc) objects.
  + The index' tree cache is now filled upon read-tree and
    write-tree and the cache is written to disk.
  + LF -&gt; CRLF filter refuses to handle mixed-EOL files.
  + LF -&gt; CRLF filter now runs when * text = auto (with Git for
    Windows 1.9.4).
  + File unlocks are atomic again via rename. Read-only files on
    Windows are made read-write if necessary.
  + Share open packfiles across repositories to share descriptors
    and mmaps.
  + Use a map for the treebuilder, making insertion O(1).
  + The build system now accepts an option EMBED_SSH_PATH which
    when set tells it to include a copy of libssh2 at the given
    location. This is enabled for MSVC.
  + Add support for refspecs with the asterisk in the middle of a
    pattern.
  + Fetching now performs opportunistic updates. To achieve this,
    we introduce a difference between active and passive refspecs,
    which make git_remote_download() and git_remote_fetch() to take
    a list of resfpecs to be the active list, similarly to how git
    fetch accepts a list on the command-line.
  + The THREADSAFE option to build libgit2 with threading support
    has been flipped to be on by default.
  + The remote object has learnt to prune remote-tracking branches.
    If the remote is configured to do so, this will happen via
    git_remote_fetch(). You can also call git_remote_prune() after
    connecting or fetching to perform the prune.
- Rename libgit2-21 subpackage to libgit2-22, following upstreams
  soname bump (also in baselibs.conf).</changelog>
  <changelog author="dimstar@opensuse.org" date="1438084800">- Update to version 0.23.0:
  + Changes or improvements:
  - Patience and minimal diff drivers can now be used for merges.
  - Merges can now ignore whitespace changes.
  - Updated binary identification in CRLF filtering to avoid
    false positives in UTF-8 files.
  - Rename and copy detection is enabled for small files.
  - Checkout can now handle an initial checkout of a repository,
    making GIT_CHECKOUT_SAFE_CREATE unnecessary for users of
    clone.
  - The signature parameter in the ref-modifying functions has
    been removed. Use git_repository_set_ident() and
    git_repository_ident() to override the signature to be used.
  - The local transport now auto-scales the number of threads to
    use when creating the packfile instead of sticking to one.
  - Reference renaming now uses the right id for the old value.
  - The annotated version of branch creation, HEAD detaching and
    reset allow for specifying the expression from the user to be
    put into the reflog.
  - git_rebase_commit now returns GIT_EUNMERGED when you attempt
    to commit with unstaged changes.
  - On Mac OS X, we now use SecureTransport to provide the
    cryptographic support for HTTPS connections insead of
    OpenSSL.
  - Checkout can now accept an index for the baseline
    computations via the baseline_index member.
  - The configuration for fetching is no longer stored inside the
    git_remote struct but has been moved to a git_fetch_options.
    The remote functions now take these options or the callbacks
    instead of setting them beforehand.
  - git_submodule instances are no longer cached or shared across
    lookup. Each submodule represents the configuration at the
    time of loading.
  - The index now uses diffs for add_all() and update_all() which
    gives it a speed boost and closer semantics to git.
  - The ssh transport now reports the stderr output from the
    server as the error message, which allows you to get the
    "repository not found" messages.
  - git_index_conflict_add() will remove staged entries that
    exist for conflicted paths.
  - The flags for a git_diff_file will now have the
    GIT_DIFF_FLAG_EXISTS bit set when a file exists on that side
    of the diff. This is useful for understanding whether a side
    of the diff exists in the presence of a conflict.
  - The constructor for a write-stream into the odb now takes
    git_off_t instead of size_t for the size of the blob, which
    allows putting large files into the odb on 32-bit systems.
  - The remote's push and pull URLs now honor the
    url.$URL.insteadOf configuration. This allows modifying URL
    prefixes to a custom value via gitconfig.
  - git_diff_foreach, git_diff_blobs, git_diff_blob_to_buffer,
    and git_diff_buffers now accept a new binary callback of type
    git_diff_binary_cb that includes the binary diff information.
  - The race condition mitigations described in racy-git.txt have
    been implemented.
  - If libcurl is installed, we will use it to connect to HTTP(S)
    servers.
  + Various API changes (incl. breaking changes).
- Rename libgit2-22 subpackage to libgit2-23, following upstreams
  soname bump (also in baselibs.conf).</changelog>
  <changelog author="astieger@suse.com" date="1441627200">- libgit2 0.23.2:
  * documentation fixes
  * diff: don't error out on an invalid regex
  * http: propagate the credentials callback's error code
  * Fix bug in git_smart__push: push_transfer_progress cb is never called
  * remote: don't confuse tag auto-follow rules with refspec matching
  * curl: use the most secure auth method for the proxy
  * Forcing libssh2 lib location
  * fix duplicate basenames to support older VS
- includes changes from 0.23.1:
  * Stage an unregistered submodule in _add_bypath()
  * filebuf: remove lockfile upon rename errors
  * Increase required version of cmake to 2.8
  * Handle ssh:// and git:// urls containing a '~' character.
  * documentation updates
  * submodule URL handling fixes
  * index: allow add_bypath to update submodules
  * blob: fail to create a blob from a dir with EDIRECTORY
  * submodule: lookup the submodule by path if available
  * submdule: reproduce double-reporting of a submodule in foreach
- note cmake requirement and use cmake makros
- build with system libcurl
- build with system http-parser</changelog>
  <changelog author="dimstar@opensuse.org" date="1441886400">- Add libgit2-fix-.pc-file.patch: Fix paths written in libgit2.pc.</changelog>
  <changelog author="astieger@suse.com" date="1444219200">- libgit2 0.23.3, containing critical fixes:
  * blame: guard xdiff calls for large files
  * diff: don't feed large files to xdiff
  * merge_file: treat large files as binary
  * xdiff: convert size variables to size_t
  * GITERR_CHECK_ALLOC_ADDn: multi-arg adders</changelog>
  <changelog author="astieger@suse.com" date="1448884800">- libgit2 0.23.4:
  * various bug fixes and improvements
- drop upstreamed libgit2-fix-.pc-file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129600">- Update to version 0.24.0:
  + Custom filters can now be registered with wildcard attributes,
    for example filter=*. Consumers should examine the attributes
    parameter of the check function for details.
  + Symlinks are now followed when locking a file, which can be
    necessary when multiple worktrees share a base repository.
  + You can now set your own user-agent to be sent for HTTP
    requests by using the GIT_OPT_SET_USER_AGENT with
    git_libgit2_opts().
  + You can set custom HTTP header fields to be sent along with
    requests by passing them in the fetch and push options.
  + Tree objects are now assumed to be sorted. If a tree is not
    correctly formed, it will give bad results. This is the git
    approach and cuts a significant amount of time when reading the
    trees.
  + Filter registration is now protected against concurrent
    registration.
  + Filenames which are not valid on Windows in an index no longer
    cause to fail to parse it on that OS.
  + Rebases can now be performed purely in-memory, without touching
    the repository's workdir.
  + When adding objects to the index, or when creating new tree or
    commit objects, the inputs are validated to ensure that the
    dependent objects exist and are of the correct type. This
    object validation can be disabled with the
    GIT_OPT_ENABLE_STRICT_OBJECT_CREATION option.
  + The WinHTTP transport's handling of bad credentials now behaves
    like the others, asking for credentials again.
  + Various API changes (additions AND removals).
- Rename libgit2-23 subpackage to libgit2-24, following upstraems
  soname bump (also in baselibs.conf).</changelog>
  <changelog author="astieger@suse.com" date="1461153600">- libgit2 0.24.1:
  + various compatible backported bug fixes</changelog>
  <changelog author="sreeves@suse.com" date="1462795200">- Add to the SDK. Fate#319349
- Update license to GPL-2.0 WITH GCC-exception-2.0</changelog>
  <changelog author="astieger@suse.com" date="1480593600">- libgit2 0.24.3, fixing the following vulnerabilities:
  * CVE-2016-8568, CVE-2016-8569: invalid memory accesses parsing
    object files (bsc#1003810)
  * various bug fixes from the 0.24.2 release</changelog>
  <changelog author="astieger@suse.com" date="1484136000">- libgit2 0.24.6, including the following security fixes:
  * bsc#1019036: edge cases in the Git Smart Protocol can lead to
    attempting to parse outside of the buffer
    CVE-2016-10128,CVE-2016-10129
  * bsc#1019037: MITM possible due to lack of parameter for
    certificate parameter
    CVE-2016-10130,CVE-2017-5338,CVE-2017-5339
- includes changes from 0.24.5:
  * add support for OpenSSL 1.1.0 for BIO filter</changelog>
  <changelog author="astieger@suse.com" date="1484136001">- libgit2 0.25.1
- New features and functionality:
  * repository discovery features
  * Support for reading and writing git index v4 files
  * Improve the performance of the revwalk
  * reference db concurrency improvements
  * Nanosecond resolution is now activated by default
  * restrict the set of ciphers used with OpenSSL by default.
  * user-registered merge drivers
  * built-in support for the union merge driver
  * callers can now specify proxy settings
  * New API for creating signed commits
  * New API for creating blobs from streams
  * New flags for opening repositories
  * New functions for various git operations
- Removed API:
  * git_blob_create_fromchunks() has been removed in  favour of
    git_blob_create_fromstream()
- Changed API:
  * git_packbuilder_object_count and git_packbuilder_written now
    return a size_t instead of a uint32_t for more thorough
    compatibility with the rest of the library.
  * git_packbuiler_progress now provides explicitly sized uint32_t
    values instead of unsigned int.
  * git_diff_file now includes an id_abbrev field that reflects the
    number of nibbles set in the id field.
  * git_odb_backend now has a freshen function pointer
  * git_remote_connect() now accepts proxy options.</changelog>
  <changelog author="astieger@suse.com" date="1501934400">- libgit2 0.26.0:
  * Support for opening, creating and modifying worktrees.
  * Can now detect SHA1 collisions resulting from the SHAttered
    attack CVE-2005-4900
  * Fix for missing implementation of `git_merge_driver_source` getters
  * Fix for installed pkg-config file being broken when the prefix
    contains spaces
  * Can now detect when the hashsum of on-disk objects does not
    match their expected hashsum.
  * Support open-ended ranges (e.g. "master..", "...master") in
    revision range parsing code.
  * Correctly compute ignores with leading "/" in subdirectories.
  * Optionally call `fsync` on loose objects, packfiles and their
    indexes, loose references and packed reference files.
  * Builds against OpenSSL v1.1 and against LibreSSL.
  * Improvements for reading index v4 files.
  * API additions and incompatible API changes</changelog>
  <changelog author="mimi.vx@gmail.com" date="1510574400">- remove unneeded dependency (python is used only for testsuite, which
    isn't used during build)</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- Update to 0.26.3:
  * Fix cloning of the libgit2 project with git clone --recursive by removing an
    invalid submodule from our testing data.
  * Fix endianness of the port in p_getaddrinfo().
  * Fix handling of negative gitignore rules with wildcards.
  * Fix handling of case-insensitive negative gitignore rules.
  * Fix resolving references to a tag if the reference is stored with its fully
    resolved OID in the packed-refs file.
  * Fix checkout not treating worktree files as modified when only their mode has
    changed.
  * Fix rename detection with GIT_DIFF_FIND_RENAMES_FROM_REWRITES.
  * Fixes memory handling issues when reading crafted repository index files.
    The issues allow for possible denial of service due to allocation of large
    memory and out-of-bound reads.
    (CVE-2018-8098 bnc#1085257 CVE-2018-8099 bnc#1085256)
  * Updates the bundled zlib to 1.2.11. Users who build the bundled zlib are
    vulnerable to security issues in the prior version.</changelog>
  <changelog author="mgorse@suse.com" date="1532606400">- Update to version 0.26.5 (boo#1095219 boo#1100612 boo#1100613):
  * This is a security release fixing out-of-bounds reads when
    reading objects from a packfile. This corresponds to
    CVE-2018-10887 and CVE-2018-10888, which were both reported by
    Riccardo Schirone.
  * Changes in v0.26.4:
  * This is a security release fixing insufficient validation of
    submodule names (CVE-2018-11235, reported by Etienne
    Stalmans) and disallows `.gitmodules` files as symlinks.</changelog>
  <changelog author="astieger@suse.com" date="1534161600">- libgit2 0.26.6:
  * fix out-of-bounds reads when processing smart-protocol "ng"
    packets (bsc#1104641)</changelog>
</package>
<package pkgid="ba96bc3a57d5811ea28b0d1c30f837d55d4f46671f725868ada74d5d496279f3" name="libgit2-devel" arch="x86_64">
  <version epoch="0" ver="0.26.6" rel="lp150.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1404993600">- Update to version 0.21.1:
  + Added a new config snapshotting API to fix race issues when
    different applications (e.g. Git and a libgit2 client) access
    the same repository simultaneously.
  + Added reflog support to all APIs that could alter a reference.
  + Avoided race conditions when updating references.
  + Converted all APIs that output string data to use git_buf
    objects for the return value.
  + Added standard git_&lt;object&gt;_init_options functions to
    initialize options structures when static initialization is not
    possible, and renamed options structures to standard
    git_&lt;object&gt;_options (replacing _opts suffix used in some
    places).
  + Improved use of const on pointers in many APIs (which may
    affect some bindings).
  + Replaced use of oid with simply id for references to
    git_oid value.s
  + Previously, when a callback function returned an error value
    (i.e. non-zero), libgit2 converted it to GIT_EUSER for the
    parent function's return value. Now, libgit2 tries to pass
    through the callback's return value all the way back to the
    caller.
  + All inline functions were eliminated from the public libgit2
    API.
  + Removed all Apache licensed code from library.
  + For more changes, please see detailed ChangeLog in package.
- Rename libgit2-0 subpackage to libgit2-21, following upstreams
  soname change (another project believing the soname should match
  the version).
- Enable SSH Support:
  + Add pkgconfig(libssh2) BuildRequires.
  + Pass -DUSE_SSH:BOOL=ON to cmake call in order to enable SSH
    support.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1413460800">- Add baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1422360000">- Update to version 0.22.1:
  + The following (critical) fixes have been backported to this
    maintenance release:
  - checkout: introduce git_checkout_perfdata.
  - git_path_join_unrooted: return base len.
  - checkout: don't recreate previous directory.
  - checkout tests: nasty symlinks.
  - checkout: drop newline in error message.
  - checkout: remove files before writing new ones.
  - checkout tests: emulate p_realpath poorly on Win32.
  - checkout tests: cleanup realpath impl on Win32.
- Changes from version 0.22.0:
  + git_signature_new() now requires a non-empty email address.
  + Use CommonCrypto libraries for SHA-1 calculation on Mac OS X.
  + Disable SSL compression and SSLv2 and SSLv3 ciphers in favor of
    TLSv1 in OpenSSL.
  + The fetch behavior of remotes with autotag set to
    GIT_REMOTE_DOWNLOAD_TAGS_ALL has been changed to match git
    1.9.0 and later. In this mode, libgit2 now fetches all tags in
    addition to whatever else needs to be fetched.
  + git_checkout() now handles case-changing renames correctly on
    case-insensitive filesystems; for example renaming "readme" to
    "README".
  + The search for libssh2 is now done via pkg-config instead of a
    custom search of a few directories.
  + Add support for core.protectHFS and core.protectNTFS. Add more
    validation for filenames which we write such as references.
  + The local transport now generates textual progress output like
    git-upload-pack does ("counting objects").
  + git_checkout_index() can now check out an in-memory index that
    is not necessarily the repository's index, so you may check out
    an index that was produced by git_merge and friends while
    retaining the cached information.
  + Remove the default timeout for receiving / sending data over
    HTTP using the WinHTTP transport layer.
  + Add SPNEGO (Kerberos) authentication using GSSAPI on Unix
    systems.
  + Provide built-in objects for the empty blob (e69de29) and empty
    tree (4b825dc) objects.
  + The index' tree cache is now filled upon read-tree and
    write-tree and the cache is written to disk.
  + LF -&gt; CRLF filter refuses to handle mixed-EOL files.
  + LF -&gt; CRLF filter now runs when * text = auto (with Git for
    Windows 1.9.4).
  + File unlocks are atomic again via rename. Read-only files on
    Windows are made read-write if necessary.
  + Share open packfiles across repositories to share descriptors
    and mmaps.
  + Use a map for the treebuilder, making insertion O(1).
  + The build system now accepts an option EMBED_SSH_PATH which
    when set tells it to include a copy of libssh2 at the given
    location. This is enabled for MSVC.
  + Add support for refspecs with the asterisk in the middle of a
    pattern.
  + Fetching now performs opportunistic updates. To achieve this,
    we introduce a difference between active and passive refspecs,
    which make git_remote_download() and git_remote_fetch() to take
    a list of resfpecs to be the active list, similarly to how git
    fetch accepts a list on the command-line.
  + The THREADSAFE option to build libgit2 with threading support
    has been flipped to be on by default.
  + The remote object has learnt to prune remote-tracking branches.
    If the remote is configured to do so, this will happen via
    git_remote_fetch(). You can also call git_remote_prune() after
    connecting or fetching to perform the prune.
- Rename libgit2-21 subpackage to libgit2-22, following upstreams
  soname bump (also in baselibs.conf).</changelog>
  <changelog author="dimstar@opensuse.org" date="1438084800">- Update to version 0.23.0:
  + Changes or improvements:
  - Patience and minimal diff drivers can now be used for merges.
  - Merges can now ignore whitespace changes.
  - Updated binary identification in CRLF filtering to avoid
    false positives in UTF-8 files.
  - Rename and copy detection is enabled for small files.
  - Checkout can now handle an initial checkout of a repository,
    making GIT_CHECKOUT_SAFE_CREATE unnecessary for users of
    clone.
  - The signature parameter in the ref-modifying functions has
    been removed. Use git_repository_set_ident() and
    git_repository_ident() to override the signature to be used.
  - The local transport now auto-scales the number of threads to
    use when creating the packfile instead of sticking to one.
  - Reference renaming now uses the right id for the old value.
  - The annotated version of branch creation, HEAD detaching and
    reset allow for specifying the expression from the user to be
    put into the reflog.
  - git_rebase_commit now returns GIT_EUNMERGED when you attempt
    to commit with unstaged changes.
  - On Mac OS X, we now use SecureTransport to provide the
    cryptographic support for HTTPS connections insead of
    OpenSSL.
  - Checkout can now accept an index for the baseline
    computations via the baseline_index member.
  - The configuration for fetching is no longer stored inside the
    git_remote struct but has been moved to a git_fetch_options.
    The remote functions now take these options or the callbacks
    instead of setting them beforehand.
  - git_submodule instances are no longer cached or shared across
    lookup. Each submodule represents the configuration at the
    time of loading.
  - The index now uses diffs for add_all() and update_all() which
    gives it a speed boost and closer semantics to git.
  - The ssh transport now reports the stderr output from the
    server as the error message, which allows you to get the
    "repository not found" messages.
  - git_index_conflict_add() will remove staged entries that
    exist for conflicted paths.
  - The flags for a git_diff_file will now have the
    GIT_DIFF_FLAG_EXISTS bit set when a file exists on that side
    of the diff. This is useful for understanding whether a side
    of the diff exists in the presence of a conflict.
  - The constructor for a write-stream into the odb now takes
    git_off_t instead of size_t for the size of the blob, which
    allows putting large files into the odb on 32-bit systems.
  - The remote's push and pull URLs now honor the
    url.$URL.insteadOf configuration. This allows modifying URL
    prefixes to a custom value via gitconfig.
  - git_diff_foreach, git_diff_blobs, git_diff_blob_to_buffer,
    and git_diff_buffers now accept a new binary callback of type
    git_diff_binary_cb that includes the binary diff information.
  - The race condition mitigations described in racy-git.txt have
    been implemented.
  - If libcurl is installed, we will use it to connect to HTTP(S)
    servers.
  + Various API changes (incl. breaking changes).
- Rename libgit2-22 subpackage to libgit2-23, following upstreams
  soname bump (also in baselibs.conf).</changelog>
  <changelog author="astieger@suse.com" date="1441627200">- libgit2 0.23.2:
  * documentation fixes
  * diff: don't error out on an invalid regex
  * http: propagate the credentials callback's error code
  * Fix bug in git_smart__push: push_transfer_progress cb is never called
  * remote: don't confuse tag auto-follow rules with refspec matching
  * curl: use the most secure auth method for the proxy
  * Forcing libssh2 lib location
  * fix duplicate basenames to support older VS
- includes changes from 0.23.1:
  * Stage an unregistered submodule in _add_bypath()
  * filebuf: remove lockfile upon rename errors
  * Increase required version of cmake to 2.8
  * Handle ssh:// and git:// urls containing a '~' character.
  * documentation updates
  * submodule URL handling fixes
  * index: allow add_bypath to update submodules
  * blob: fail to create a blob from a dir with EDIRECTORY
  * submodule: lookup the submodule by path if available
  * submdule: reproduce double-reporting of a submodule in foreach
- note cmake requirement and use cmake makros
- build with system libcurl
- build with system http-parser</changelog>
  <changelog author="dimstar@opensuse.org" date="1441886400">- Add libgit2-fix-.pc-file.patch: Fix paths written in libgit2.pc.</changelog>
  <changelog author="astieger@suse.com" date="1444219200">- libgit2 0.23.3, containing critical fixes:
  * blame: guard xdiff calls for large files
  * diff: don't feed large files to xdiff
  * merge_file: treat large files as binary
  * xdiff: convert size variables to size_t
  * GITERR_CHECK_ALLOC_ADDn: multi-arg adders</changelog>
  <changelog author="astieger@suse.com" date="1448884800">- libgit2 0.23.4:
  * various bug fixes and improvements
- drop upstreamed libgit2-fix-.pc-file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129600">- Update to version 0.24.0:
  + Custom filters can now be registered with wildcard attributes,
    for example filter=*. Consumers should examine the attributes
    parameter of the check function for details.
  + Symlinks are now followed when locking a file, which can be
    necessary when multiple worktrees share a base repository.
  + You can now set your own user-agent to be sent for HTTP
    requests by using the GIT_OPT_SET_USER_AGENT with
    git_libgit2_opts().
  + You can set custom HTTP header fields to be sent along with
    requests by passing them in the fetch and push options.
  + Tree objects are now assumed to be sorted. If a tree is not
    correctly formed, it will give bad results. This is the git
    approach and cuts a significant amount of time when reading the
    trees.
  + Filter registration is now protected against concurrent
    registration.
  + Filenames which are not valid on Windows in an index no longer
    cause to fail to parse it on that OS.
  + Rebases can now be performed purely in-memory, without touching
    the repository's workdir.
  + When adding objects to the index, or when creating new tree or
    commit objects, the inputs are validated to ensure that the
    dependent objects exist and are of the correct type. This
    object validation can be disabled with the
    GIT_OPT_ENABLE_STRICT_OBJECT_CREATION option.
  + The WinHTTP transport's handling of bad credentials now behaves
    like the others, asking for credentials again.
  + Various API changes (additions AND removals).
- Rename libgit2-23 subpackage to libgit2-24, following upstraems
  soname bump (also in baselibs.conf).</changelog>
  <changelog author="astieger@suse.com" date="1461153600">- libgit2 0.24.1:
  + various compatible backported bug fixes</changelog>
  <changelog author="sreeves@suse.com" date="1462795200">- Add to the SDK. Fate#319349
- Update license to GPL-2.0 WITH GCC-exception-2.0</changelog>
  <changelog author="astieger@suse.com" date="1480593600">- libgit2 0.24.3, fixing the following vulnerabilities:
  * CVE-2016-8568, CVE-2016-8569: invalid memory accesses parsing
    object files (bsc#1003810)
  * various bug fixes from the 0.24.2 release</changelog>
  <changelog author="astieger@suse.com" date="1484136000">- libgit2 0.24.6, including the following security fixes:
  * bsc#1019036: edge cases in the Git Smart Protocol can lead to
    attempting to parse outside of the buffer
    CVE-2016-10128,CVE-2016-10129
  * bsc#1019037: MITM possible due to lack of parameter for
    certificate parameter
    CVE-2016-10130,CVE-2017-5338,CVE-2017-5339
- includes changes from 0.24.5:
  * add support for OpenSSL 1.1.0 for BIO filter</changelog>
  <changelog author="astieger@suse.com" date="1484136001">- libgit2 0.25.1
- New features and functionality:
  * repository discovery features
  * Support for reading and writing git index v4 files
  * Improve the performance of the revwalk
  * reference db concurrency improvements
  * Nanosecond resolution is now activated by default
  * restrict the set of ciphers used with OpenSSL by default.
  * user-registered merge drivers
  * built-in support for the union merge driver
  * callers can now specify proxy settings
  * New API for creating signed commits
  * New API for creating blobs from streams
  * New flags for opening repositories
  * New functions for various git operations
- Removed API:
  * git_blob_create_fromchunks() has been removed in  favour of
    git_blob_create_fromstream()
- Changed API:
  * git_packbuilder_object_count and git_packbuilder_written now
    return a size_t instead of a uint32_t for more thorough
    compatibility with the rest of the library.
  * git_packbuiler_progress now provides explicitly sized uint32_t
    values instead of unsigned int.
  * git_diff_file now includes an id_abbrev field that reflects the
    number of nibbles set in the id field.
  * git_odb_backend now has a freshen function pointer
  * git_remote_connect() now accepts proxy options.</changelog>
  <changelog author="astieger@suse.com" date="1501934400">- libgit2 0.26.0:
  * Support for opening, creating and modifying worktrees.
  * Can now detect SHA1 collisions resulting from the SHAttered
    attack CVE-2005-4900
  * Fix for missing implementation of `git_merge_driver_source` getters
  * Fix for installed pkg-config file being broken when the prefix
    contains spaces
  * Can now detect when the hashsum of on-disk objects does not
    match their expected hashsum.
  * Support open-ended ranges (e.g. "master..", "...master") in
    revision range parsing code.
  * Correctly compute ignores with leading "/" in subdirectories.
  * Optionally call `fsync` on loose objects, packfiles and their
    indexes, loose references and packed reference files.
  * Builds against OpenSSL v1.1 and against LibreSSL.
  * Improvements for reading index v4 files.
  * API additions and incompatible API changes</changelog>
  <changelog author="mimi.vx@gmail.com" date="1510574400">- remove unneeded dependency (python is used only for testsuite, which
    isn't used during build)</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- Update to 0.26.3:
  * Fix cloning of the libgit2 project with git clone --recursive by removing an
    invalid submodule from our testing data.
  * Fix endianness of the port in p_getaddrinfo().
  * Fix handling of negative gitignore rules with wildcards.
  * Fix handling of case-insensitive negative gitignore rules.
  * Fix resolving references to a tag if the reference is stored with its fully
    resolved OID in the packed-refs file.
  * Fix checkout not treating worktree files as modified when only their mode has
    changed.
  * Fix rename detection with GIT_DIFF_FIND_RENAMES_FROM_REWRITES.
  * Fixes memory handling issues when reading crafted repository index files.
    The issues allow for possible denial of service due to allocation of large
    memory and out-of-bound reads.
    (CVE-2018-8098 bnc#1085257 CVE-2018-8099 bnc#1085256)
  * Updates the bundled zlib to 1.2.11. Users who build the bundled zlib are
    vulnerable to security issues in the prior version.</changelog>
  <changelog author="mgorse@suse.com" date="1532606400">- Update to version 0.26.5 (boo#1095219 boo#1100612 boo#1100613):
  * This is a security release fixing out-of-bounds reads when
    reading objects from a packfile. This corresponds to
    CVE-2018-10887 and CVE-2018-10888, which were both reported by
    Riccardo Schirone.
  * Changes in v0.26.4:
  * This is a security release fixing insufficient validation of
    submodule names (CVE-2018-11235, reported by Etienne
    Stalmans) and disallows `.gitmodules` files as symlinks.</changelog>
  <changelog author="astieger@suse.com" date="1534161600">- libgit2 0.26.6:
  * fix out-of-bounds reads when processing smart-protocol "ng"
    packets (bsc#1104641)</changelog>
</package>
<package pkgid="13f530f5909306908f1e978a48dab79681cb8b655dd1d72d8c0393d3abea94e1" name="libglib-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 2.53.2:
  + A few new number parsing functions have been added. These have
    better error handling than the existing ones.
  + glib-mkenums now supports /*&lt; private &gt;*/ and /*&lt; public &gt;*/.
  + GSettings now consider XDG_DATA_HOME in addition to
    XDG_DATA_DIRS.
  + Bugs fixed: bgo#674885, bgo#698064, bgo#732000, bgo#734946,
    bgo#741335, bgo#748263, bgo#776876, bgo#777030, bgo#780300,
    bgo#780309, bgo#781755, bgo#781826, bgo#781830, bgo#781847,
    bgo#781867, bgo#782068, bgo#782075, bgo#782089, bgo#782162,
    bgo#782237, bgo#782311, bgo#782628.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651201">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
</package>
<package pkgid="5db47bd5d998c5f21dd043c24b0ca58924ddaa4947c7fe05874907efbbb32366" name="libglib-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 2.53.2:
  + A few new number parsing functions have been added. These have
    better error handling than the existing ones.
  + glib-mkenums now supports /*&lt; private &gt;*/ and /*&lt; public &gt;*/.
  + GSettings now consider XDG_DATA_HOME in addition to
    XDG_DATA_DIRS.
  + Bugs fixed: bgo#674885, bgo#698064, bgo#732000, bgo#734946,
    bgo#741335, bgo#748263, bgo#776876, bgo#777030, bgo#780300,
    bgo#780309, bgo#781755, bgo#781826, bgo#781830, bgo#781847,
    bgo#781867, bgo#782068, bgo#782075, bgo#782089, bgo#782162,
    bgo#782237, bgo#782311, bgo#782628.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651201">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
</package>
<package pkgid="8911f3ecf575fb936869666c46fe5d4762312dc16973b46885fd32a8cf761325" name="libgmodule-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 2.53.2:
  + A few new number parsing functions have been added. These have
    better error handling than the existing ones.
  + glib-mkenums now supports /*&lt; private &gt;*/ and /*&lt; public &gt;*/.
  + GSettings now consider XDG_DATA_HOME in addition to
    XDG_DATA_DIRS.
  + Bugs fixed: bgo#674885, bgo#698064, bgo#732000, bgo#734946,
    bgo#741335, bgo#748263, bgo#776876, bgo#777030, bgo#780300,
    bgo#780309, bgo#781755, bgo#781826, bgo#781830, bgo#781847,
    bgo#781867, bgo#782068, bgo#782075, bgo#782089, bgo#782162,
    bgo#782237, bgo#782311, bgo#782628.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651201">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
</package>
<package pkgid="9f4e325686f68f50089243e38f1f46d4868979f8e082f678aeb08bdf965bf494" name="libgmodule-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 2.53.2:
  + A few new number parsing functions have been added. These have
    better error handling than the existing ones.
  + glib-mkenums now supports /*&lt; private &gt;*/ and /*&lt; public &gt;*/.
  + GSettings now consider XDG_DATA_HOME in addition to
    XDG_DATA_DIRS.
  + Bugs fixed: bgo#674885, bgo#698064, bgo#732000, bgo#734946,
    bgo#741335, bgo#748263, bgo#776876, bgo#777030, bgo#780300,
    bgo#780309, bgo#781755, bgo#781826, bgo#781830, bgo#781847,
    bgo#781867, bgo#782068, bgo#782075, bgo#782089, bgo#782162,
    bgo#782237, bgo#782311, bgo#782628.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651201">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
</package>
<package pkgid="1171e76dd6ac1e0352f55ce737f9f99ee16a5910fcd25fd3e2c12c27bb2b87df" name="libgnutls-dane-devel" arch="x86_64">
  <version epoch="0" ver="3.6.2" rel="lp150.4.3.1"/>
  <changelog author="astieger@suse.com" date="1496577600">- GnuTLS 3.5.12:
  * libgnutls: gnutls_x509_crt_check_hostname2() no longer matches
    IP addresses against DNS fields of certificate (CN or DNSname).
    The previous behavior was to tolerate some misconfigured
    servers, but that was non-standard and skipped any IP
    constraints present in higher level certificates.
  * libgnutls: when converting to IDNA2008, fallback to IDNA2003
    (i.e., transitional encoding) if the domain cannot be converted.
    That provides maximum compatibility with browsers like firefox
    that perform the same conversion.
  * libgnutls: fix issue in RSA-PSK client callback which resulted
    in no username being sent to the peer
  * libgnutls: fix regression causing stapled extensions in trust
    modules not to be considered.
  * certtool: introduced the email_protection_key option.  This
    option was introduced in documentation for certtool without an
    implementation of it. It is a shortcut for option
  'key_purpose_oid = 1.3.6.1.5.5.7.3.4'.
  * certtool: made printing of key ID and key PIN consistent
    between certificates, public keys, and private keys. That is
    the private key printing now uses the same format as the rest.
  * gnutls-cli: introduced the --sni-hostname option. This allows
    overriding the hostname advertised to the peer.</changelog>
  <changelog author="astieger@suse.com" date="1496923200">- GnuTLS 3.5.13:
  * libgnutls: fixed issue with AES-GCM in-place encryption and
    decryption in aarch64
  * libgnutls: no longer parse the ResponseID field of the status
    response TLS extension. The field is not used by GnuTLS nor is
    made available to calling applications. That addresses a null
    pointer dereference on server side caused by packets containing
    the ResponseID field. GNUTLS-SA-2017-4, bsc#1043398
  * libgnutls: tolerate certificates which do not have strict DER
    time encoding. It is possible using 3rd party tools to generate
    certificates with time fields that do not conform to DER
    requirements. Since 3.4.x these certificates were rejected and
    cannot be used with GnuTLS, however that caused problems with
    existing private certificate infrastructures, which were
    relying on such certificates. Tolerate reading and using these
    certificates.
  * minitasn1: updated to libtasn1 4.11.
  * certtool: allow multiple certificates to be used in --p7-sign
    with the --load-certificate option</changelog>
  <changelog author="astieger@suse.com" date="1499169600">- GnuTLS 3.5.14:
  * Handle specially HSMs which request explicit authentication
  * he GNUTLS_PKCS11_OBJ_FLAG_LOGIN will force a login on HSMs
  * do not set leading zeros when copying integers on HSMs
  * Fix issue discovering certain OCSP signers, and improved the
    discovery of OCSP signer in the case where the Subject Public
    Key identifier field matches
  * ensure OCSP responses are saved with --save-ocsp even if
    certificate verification fails.</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Drop the deprecated openssl compat ; discussed and suggested by
  vcizek
- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
</package>
<package pkgid="287fde2b4dd8e7959aa2168808110ff11314bd97bf16c4340e631da04b1857f1" name="libgnutls-dane0" arch="x86_64">
  <version epoch="0" ver="3.6.2" rel="lp150.4.3.1"/>
  <changelog author="astieger@suse.com" date="1496577600">- GnuTLS 3.5.12:
  * libgnutls: gnutls_x509_crt_check_hostname2() no longer matches
    IP addresses against DNS fields of certificate (CN or DNSname).
    The previous behavior was to tolerate some misconfigured
    servers, but that was non-standard and skipped any IP
    constraints present in higher level certificates.
  * libgnutls: when converting to IDNA2008, fallback to IDNA2003
    (i.e., transitional encoding) if the domain cannot be converted.
    That provides maximum compatibility with browsers like firefox
    that perform the same conversion.
  * libgnutls: fix issue in RSA-PSK client callback which resulted
    in no username being sent to the peer
  * libgnutls: fix regression causing stapled extensions in trust
    modules not to be considered.
  * certtool: introduced the email_protection_key option.  This
    option was introduced in documentation for certtool without an
    implementation of it. It is a shortcut for option
  'key_purpose_oid = 1.3.6.1.5.5.7.3.4'.
  * certtool: made printing of key ID and key PIN consistent
    between certificates, public keys, and private keys. That is
    the private key printing now uses the same format as the rest.
  * gnutls-cli: introduced the --sni-hostname option. This allows
    overriding the hostname advertised to the peer.</changelog>
  <changelog author="astieger@suse.com" date="1496923200">- GnuTLS 3.5.13:
  * libgnutls: fixed issue with AES-GCM in-place encryption and
    decryption in aarch64
  * libgnutls: no longer parse the ResponseID field of the status
    response TLS extension. The field is not used by GnuTLS nor is
    made available to calling applications. That addresses a null
    pointer dereference on server side caused by packets containing
    the ResponseID field. GNUTLS-SA-2017-4, bsc#1043398
  * libgnutls: tolerate certificates which do not have strict DER
    time encoding. It is possible using 3rd party tools to generate
    certificates with time fields that do not conform to DER
    requirements. Since 3.4.x these certificates were rejected and
    cannot be used with GnuTLS, however that caused problems with
    existing private certificate infrastructures, which were
    relying on such certificates. Tolerate reading and using these
    certificates.
  * minitasn1: updated to libtasn1 4.11.
  * certtool: allow multiple certificates to be used in --p7-sign
    with the --load-certificate option</changelog>
  <changelog author="astieger@suse.com" date="1499169600">- GnuTLS 3.5.14:
  * Handle specially HSMs which request explicit authentication
  * he GNUTLS_PKCS11_OBJ_FLAG_LOGIN will force a login on HSMs
  * do not set leading zeros when copying integers on HSMs
  * Fix issue discovering certain OCSP signers, and improved the
    discovery of OCSP signer in the case where the Subject Public
    Key identifier field matches
  * ensure OCSP responses are saved with --save-ocsp even if
    certificate verification fails.</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Drop the deprecated openssl compat ; discussed and suggested by
  vcizek
- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
</package>
<package pkgid="b7dfa678c0f086feb6afc642031368ff2930bae58aef73dbfdd2abb7270ebd7a" name="libgnutls-devel" arch="x86_64">
  <version epoch="0" ver="3.6.2" rel="lp150.4.3.1"/>
  <changelog author="astieger@suse.com" date="1496577600">- GnuTLS 3.5.12:
  * libgnutls: gnutls_x509_crt_check_hostname2() no longer matches
    IP addresses against DNS fields of certificate (CN or DNSname).
    The previous behavior was to tolerate some misconfigured
    servers, but that was non-standard and skipped any IP
    constraints present in higher level certificates.
  * libgnutls: when converting to IDNA2008, fallback to IDNA2003
    (i.e., transitional encoding) if the domain cannot be converted.
    That provides maximum compatibility with browsers like firefox
    that perform the same conversion.
  * libgnutls: fix issue in RSA-PSK client callback which resulted
    in no username being sent to the peer
  * libgnutls: fix regression causing stapled extensions in trust
    modules not to be considered.
  * certtool: introduced the email_protection_key option.  This
    option was introduced in documentation for certtool without an
    implementation of it. It is a shortcut for option
  'key_purpose_oid = 1.3.6.1.5.5.7.3.4'.
  * certtool: made printing of key ID and key PIN consistent
    between certificates, public keys, and private keys. That is
    the private key printing now uses the same format as the rest.
  * gnutls-cli: introduced the --sni-hostname option. This allows
    overriding the hostname advertised to the peer.</changelog>
  <changelog author="astieger@suse.com" date="1496923200">- GnuTLS 3.5.13:
  * libgnutls: fixed issue with AES-GCM in-place encryption and
    decryption in aarch64
  * libgnutls: no longer parse the ResponseID field of the status
    response TLS extension. The field is not used by GnuTLS nor is
    made available to calling applications. That addresses a null
    pointer dereference on server side caused by packets containing
    the ResponseID field. GNUTLS-SA-2017-4, bsc#1043398
  * libgnutls: tolerate certificates which do not have strict DER
    time encoding. It is possible using 3rd party tools to generate
    certificates with time fields that do not conform to DER
    requirements. Since 3.4.x these certificates were rejected and
    cannot be used with GnuTLS, however that caused problems with
    existing private certificate infrastructures, which were
    relying on such certificates. Tolerate reading and using these
    certificates.
  * minitasn1: updated to libtasn1 4.11.
  * certtool: allow multiple certificates to be used in --p7-sign
    with the --load-certificate option</changelog>
  <changelog author="astieger@suse.com" date="1499169600">- GnuTLS 3.5.14:
  * Handle specially HSMs which request explicit authentication
  * he GNUTLS_PKCS11_OBJ_FLAG_LOGIN will force a login on HSMs
  * do not set leading zeros when copying integers on HSMs
  * Fix issue discovering certain OCSP signers, and improved the
    discovery of OCSP signer in the case where the Subject Public
    Key identifier field matches
  * ensure OCSP responses are saved with --save-ocsp even if
    certificate verification fails.</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Drop the deprecated openssl compat ; discussed and suggested by
  vcizek
- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
</package>
<package pkgid="820a0fb4d8571f21ec5e32f508ef5bbe452777959f0dc5d1ca240ce7937cbc84" name="libgnutls-devel-32bit" arch="x86_64">
  <version epoch="0" ver="3.6.2" rel="lp150.4.3.1"/>
  <changelog author="astieger@suse.com" date="1496577600">- GnuTLS 3.5.12:
  * libgnutls: gnutls_x509_crt_check_hostname2() no longer matches
    IP addresses against DNS fields of certificate (CN or DNSname).
    The previous behavior was to tolerate some misconfigured
    servers, but that was non-standard and skipped any IP
    constraints present in higher level certificates.
  * libgnutls: when converting to IDNA2008, fallback to IDNA2003
    (i.e., transitional encoding) if the domain cannot be converted.
    That provides maximum compatibility with browsers like firefox
    that perform the same conversion.
  * libgnutls: fix issue in RSA-PSK client callback which resulted
    in no username being sent to the peer
  * libgnutls: fix regression causing stapled extensions in trust
    modules not to be considered.
  * certtool: introduced the email_protection_key option.  This
    option was introduced in documentation for certtool without an
    implementation of it. It is a shortcut for option
  'key_purpose_oid = 1.3.6.1.5.5.7.3.4'.
  * certtool: made printing of key ID and key PIN consistent
    between certificates, public keys, and private keys. That is
    the private key printing now uses the same format as the rest.
  * gnutls-cli: introduced the --sni-hostname option. This allows
    overriding the hostname advertised to the peer.</changelog>
  <changelog author="astieger@suse.com" date="1496923200">- GnuTLS 3.5.13:
  * libgnutls: fixed issue with AES-GCM in-place encryption and
    decryption in aarch64
  * libgnutls: no longer parse the ResponseID field of the status
    response TLS extension. The field is not used by GnuTLS nor is
    made available to calling applications. That addresses a null
    pointer dereference on server side caused by packets containing
    the ResponseID field. GNUTLS-SA-2017-4, bsc#1043398
  * libgnutls: tolerate certificates which do not have strict DER
    time encoding. It is possible using 3rd party tools to generate
    certificates with time fields that do not conform to DER
    requirements. Since 3.4.x these certificates were rejected and
    cannot be used with GnuTLS, however that caused problems with
    existing private certificate infrastructures, which were
    relying on such certificates. Tolerate reading and using these
    certificates.
  * minitasn1: updated to libtasn1 4.11.
  * certtool: allow multiple certificates to be used in --p7-sign
    with the --load-certificate option</changelog>
  <changelog author="astieger@suse.com" date="1499169600">- GnuTLS 3.5.14:
  * Handle specially HSMs which request explicit authentication
  * he GNUTLS_PKCS11_OBJ_FLAG_LOGIN will force a login on HSMs
  * do not set leading zeros when copying integers on HSMs
  * Fix issue discovering certain OCSP signers, and improved the
    discovery of OCSP signer in the case where the Subject Public
    Key identifier field matches
  * ensure OCSP responses are saved with --save-ocsp even if
    certificate verification fails.</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Drop the deprecated openssl compat ; discussed and suggested by
  vcizek
- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
</package>
<package pkgid="c6c979aa0c0f8f404a1eb92adcfa12cdf731ef3c55b1d08ea4167fd2a419a0ec" name="libgnutls30" arch="x86_64">
  <version epoch="0" ver="3.6.2" rel="lp150.4.3.1"/>
  <changelog author="astieger@suse.com" date="1496577600">- GnuTLS 3.5.12:
  * libgnutls: gnutls_x509_crt_check_hostname2() no longer matches
    IP addresses against DNS fields of certificate (CN or DNSname).
    The previous behavior was to tolerate some misconfigured
    servers, but that was non-standard and skipped any IP
    constraints present in higher level certificates.
  * libgnutls: when converting to IDNA2008, fallback to IDNA2003
    (i.e., transitional encoding) if the domain cannot be converted.
    That provides maximum compatibility with browsers like firefox
    that perform the same conversion.
  * libgnutls: fix issue in RSA-PSK client callback which resulted
    in no username being sent to the peer
  * libgnutls: fix regression causing stapled extensions in trust
    modules not to be considered.
  * certtool: introduced the email_protection_key option.  This
    option was introduced in documentation for certtool without an
    implementation of it. It is a shortcut for option
  'key_purpose_oid = 1.3.6.1.5.5.7.3.4'.
  * certtool: made printing of key ID and key PIN consistent
    between certificates, public keys, and private keys. That is
    the private key printing now uses the same format as the rest.
  * gnutls-cli: introduced the --sni-hostname option. This allows
    overriding the hostname advertised to the peer.</changelog>
  <changelog author="astieger@suse.com" date="1496923200">- GnuTLS 3.5.13:
  * libgnutls: fixed issue with AES-GCM in-place encryption and
    decryption in aarch64
  * libgnutls: no longer parse the ResponseID field of the status
    response TLS extension. The field is not used by GnuTLS nor is
    made available to calling applications. That addresses a null
    pointer dereference on server side caused by packets containing
    the ResponseID field. GNUTLS-SA-2017-4, bsc#1043398
  * libgnutls: tolerate certificates which do not have strict DER
    time encoding. It is possible using 3rd party tools to generate
    certificates with time fields that do not conform to DER
    requirements. Since 3.4.x these certificates were rejected and
    cannot be used with GnuTLS, however that caused problems with
    existing private certificate infrastructures, which were
    relying on such certificates. Tolerate reading and using these
    certificates.
  * minitasn1: updated to libtasn1 4.11.
  * certtool: allow multiple certificates to be used in --p7-sign
    with the --load-certificate option</changelog>
  <changelog author="astieger@suse.com" date="1499169600">- GnuTLS 3.5.14:
  * Handle specially HSMs which request explicit authentication
  * he GNUTLS_PKCS11_OBJ_FLAG_LOGIN will force a login on HSMs
  * do not set leading zeros when copying integers on HSMs
  * Fix issue discovering certain OCSP signers, and improved the
    discovery of OCSP signer in the case where the Subject Public
    Key identifier field matches
  * ensure OCSP responses are saved with --save-ocsp even if
    certificate verification fails.</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Drop the deprecated openssl compat ; discussed and suggested by
  vcizek
- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
</package>
<package pkgid="3c77e636e1b4176c0778713697c6ac017ae1b8cc0ebf3a60ae68efc6bebebf21" name="libgnutls30-32bit" arch="x86_64">
  <version epoch="0" ver="3.6.2" rel="lp150.4.3.1"/>
  <changelog author="astieger@suse.com" date="1496577600">- GnuTLS 3.5.12:
  * libgnutls: gnutls_x509_crt_check_hostname2() no longer matches
    IP addresses against DNS fields of certificate (CN or DNSname).
    The previous behavior was to tolerate some misconfigured
    servers, but that was non-standard and skipped any IP
    constraints present in higher level certificates.
  * libgnutls: when converting to IDNA2008, fallback to IDNA2003
    (i.e., transitional encoding) if the domain cannot be converted.
    That provides maximum compatibility with browsers like firefox
    that perform the same conversion.
  * libgnutls: fix issue in RSA-PSK client callback which resulted
    in no username being sent to the peer
  * libgnutls: fix regression causing stapled extensions in trust
    modules not to be considered.
  * certtool: introduced the email_protection_key option.  This
    option was introduced in documentation for certtool without an
    implementation of it. It is a shortcut for option
  'key_purpose_oid = 1.3.6.1.5.5.7.3.4'.
  * certtool: made printing of key ID and key PIN consistent
    between certificates, public keys, and private keys. That is
    the private key printing now uses the same format as the rest.
  * gnutls-cli: introduced the --sni-hostname option. This allows
    overriding the hostname advertised to the peer.</changelog>
  <changelog author="astieger@suse.com" date="1496923200">- GnuTLS 3.5.13:
  * libgnutls: fixed issue with AES-GCM in-place encryption and
    decryption in aarch64
  * libgnutls: no longer parse the ResponseID field of the status
    response TLS extension. The field is not used by GnuTLS nor is
    made available to calling applications. That addresses a null
    pointer dereference on server side caused by packets containing
    the ResponseID field. GNUTLS-SA-2017-4, bsc#1043398
  * libgnutls: tolerate certificates which do not have strict DER
    time encoding. It is possible using 3rd party tools to generate
    certificates with time fields that do not conform to DER
    requirements. Since 3.4.x these certificates were rejected and
    cannot be used with GnuTLS, however that caused problems with
    existing private certificate infrastructures, which were
    relying on such certificates. Tolerate reading and using these
    certificates.
  * minitasn1: updated to libtasn1 4.11.
  * certtool: allow multiple certificates to be used in --p7-sign
    with the --load-certificate option</changelog>
  <changelog author="astieger@suse.com" date="1499169600">- GnuTLS 3.5.14:
  * Handle specially HSMs which request explicit authentication
  * he GNUTLS_PKCS11_OBJ_FLAG_LOGIN will force a login on HSMs
  * do not set leading zeros when copying integers on HSMs
  * Fix issue discovering certain OCSP signers, and improved the
    discovery of OCSP signer in the case where the Subject Public
    Key identifier field matches
  * ensure OCSP responses are saved with --save-ocsp even if
    certificate verification fails.</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Drop the deprecated openssl compat ; discussed and suggested by
  vcizek
- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
</package>
<package pkgid="5f0ee911fc97358d5df54c7538275f5644e9ffc784c0a70d5eb1a43974c682ef" name="libgnutlsxx-devel" arch="x86_64">
  <version epoch="0" ver="3.6.2" rel="lp150.4.3.1"/>
  <changelog author="astieger@suse.com" date="1496577600">- GnuTLS 3.5.12:
  * libgnutls: gnutls_x509_crt_check_hostname2() no longer matches
    IP addresses against DNS fields of certificate (CN or DNSname).
    The previous behavior was to tolerate some misconfigured
    servers, but that was non-standard and skipped any IP
    constraints present in higher level certificates.
  * libgnutls: when converting to IDNA2008, fallback to IDNA2003
    (i.e., transitional encoding) if the domain cannot be converted.
    That provides maximum compatibility with browsers like firefox
    that perform the same conversion.
  * libgnutls: fix issue in RSA-PSK client callback which resulted
    in no username being sent to the peer
  * libgnutls: fix regression causing stapled extensions in trust
    modules not to be considered.
  * certtool: introduced the email_protection_key option.  This
    option was introduced in documentation for certtool without an
    implementation of it. It is a shortcut for option
  'key_purpose_oid = 1.3.6.1.5.5.7.3.4'.
  * certtool: made printing of key ID and key PIN consistent
    between certificates, public keys, and private keys. That is
    the private key printing now uses the same format as the rest.
  * gnutls-cli: introduced the --sni-hostname option. This allows
    overriding the hostname advertised to the peer.</changelog>
  <changelog author="astieger@suse.com" date="1496923200">- GnuTLS 3.5.13:
  * libgnutls: fixed issue with AES-GCM in-place encryption and
    decryption in aarch64
  * libgnutls: no longer parse the ResponseID field of the status
    response TLS extension. The field is not used by GnuTLS nor is
    made available to calling applications. That addresses a null
    pointer dereference on server side caused by packets containing
    the ResponseID field. GNUTLS-SA-2017-4, bsc#1043398
  * libgnutls: tolerate certificates which do not have strict DER
    time encoding. It is possible using 3rd party tools to generate
    certificates with time fields that do not conform to DER
    requirements. Since 3.4.x these certificates were rejected and
    cannot be used with GnuTLS, however that caused problems with
    existing private certificate infrastructures, which were
    relying on such certificates. Tolerate reading and using these
    certificates.
  * minitasn1: updated to libtasn1 4.11.
  * certtool: allow multiple certificates to be used in --p7-sign
    with the --load-certificate option</changelog>
  <changelog author="astieger@suse.com" date="1499169600">- GnuTLS 3.5.14:
  * Handle specially HSMs which request explicit authentication
  * he GNUTLS_PKCS11_OBJ_FLAG_LOGIN will force a login on HSMs
  * do not set leading zeros when copying integers on HSMs
  * Fix issue discovering certain OCSP signers, and improved the
    discovery of OCSP signer in the case where the Subject Public
    Key identifier field matches
  * ensure OCSP responses are saved with --save-ocsp even if
    certificate verification fails.</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Drop the deprecated openssl compat ; discussed and suggested by
  vcizek
- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
</package>
<package pkgid="9864df5d252faeaec92b7ff1598eca0ce26d63b0aaefeb3839139e45ec8c1e65" name="libgnutlsxx28" arch="x86_64">
  <version epoch="0" ver="3.6.2" rel="lp150.4.3.1"/>
  <changelog author="astieger@suse.com" date="1496577600">- GnuTLS 3.5.12:
  * libgnutls: gnutls_x509_crt_check_hostname2() no longer matches
    IP addresses against DNS fields of certificate (CN or DNSname).
    The previous behavior was to tolerate some misconfigured
    servers, but that was non-standard and skipped any IP
    constraints present in higher level certificates.
  * libgnutls: when converting to IDNA2008, fallback to IDNA2003
    (i.e., transitional encoding) if the domain cannot be converted.
    That provides maximum compatibility with browsers like firefox
    that perform the same conversion.
  * libgnutls: fix issue in RSA-PSK client callback which resulted
    in no username being sent to the peer
  * libgnutls: fix regression causing stapled extensions in trust
    modules not to be considered.
  * certtool: introduced the email_protection_key option.  This
    option was introduced in documentation for certtool without an
    implementation of it. It is a shortcut for option
  'key_purpose_oid = 1.3.6.1.5.5.7.3.4'.
  * certtool: made printing of key ID and key PIN consistent
    between certificates, public keys, and private keys. That is
    the private key printing now uses the same format as the rest.
  * gnutls-cli: introduced the --sni-hostname option. This allows
    overriding the hostname advertised to the peer.</changelog>
  <changelog author="astieger@suse.com" date="1496923200">- GnuTLS 3.5.13:
  * libgnutls: fixed issue with AES-GCM in-place encryption and
    decryption in aarch64
  * libgnutls: no longer parse the ResponseID field of the status
    response TLS extension. The field is not used by GnuTLS nor is
    made available to calling applications. That addresses a null
    pointer dereference on server side caused by packets containing
    the ResponseID field. GNUTLS-SA-2017-4, bsc#1043398
  * libgnutls: tolerate certificates which do not have strict DER
    time encoding. It is possible using 3rd party tools to generate
    certificates with time fields that do not conform to DER
    requirements. Since 3.4.x these certificates were rejected and
    cannot be used with GnuTLS, however that caused problems with
    existing private certificate infrastructures, which were
    relying on such certificates. Tolerate reading and using these
    certificates.
  * minitasn1: updated to libtasn1 4.11.
  * certtool: allow multiple certificates to be used in --p7-sign
    with the --load-certificate option</changelog>
  <changelog author="astieger@suse.com" date="1499169600">- GnuTLS 3.5.14:
  * Handle specially HSMs which request explicit authentication
  * he GNUTLS_PKCS11_OBJ_FLAG_LOGIN will force a login on HSMs
  * do not set leading zeros when copying integers on HSMs
  * Fix issue discovering certain OCSP signers, and improved the
    discovery of OCSP signer in the case where the Subject Public
    Key identifier field matches
  * ensure OCSP responses are saved with --save-ocsp even if
    certificate verification fails.</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Drop the deprecated openssl compat ; discussed and suggested by
  vcizek
- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
</package>
<package pkgid="ea7447607bb12a5e7a5db2ae935ac1902c956085115948fc7b6665eff712137a" name="libgobject-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 2.53.2:
  + A few new number parsing functions have been added. These have
    better error handling than the existing ones.
  + glib-mkenums now supports /*&lt; private &gt;*/ and /*&lt; public &gt;*/.
  + GSettings now consider XDG_DATA_HOME in addition to
    XDG_DATA_DIRS.
  + Bugs fixed: bgo#674885, bgo#698064, bgo#732000, bgo#734946,
    bgo#741335, bgo#748263, bgo#776876, bgo#777030, bgo#780300,
    bgo#780309, bgo#781755, bgo#781826, bgo#781830, bgo#781847,
    bgo#781867, bgo#782068, bgo#782075, bgo#782089, bgo#782162,
    bgo#782237, bgo#782311, bgo#782628.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651201">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
</package>
<package pkgid="795e1864e50b8911cfa1f74c21ee61645e3c436dd3b695197b0103238b7d918f" name="libgobject-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 2.53.2:
  + A few new number parsing functions have been added. These have
    better error handling than the existing ones.
  + glib-mkenums now supports /*&lt; private &gt;*/ and /*&lt; public &gt;*/.
  + GSettings now consider XDG_DATA_HOME in addition to
    XDG_DATA_DIRS.
  + Bugs fixed: bgo#674885, bgo#698064, bgo#732000, bgo#734946,
    bgo#741335, bgo#748263, bgo#776876, bgo#777030, bgo#780300,
    bgo#780309, bgo#781755, bgo#781826, bgo#781830, bgo#781847,
    bgo#781867, bgo#782068, bgo#782075, bgo#782089, bgo#782162,
    bgo#782237, bgo#782311, bgo#782628.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651201">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
</package>
<package pkgid="ce603fafc7b74a16f0f6e2e550caacd2dd79b1b0ba73e761eafc98ae8ab01c2f" name="libgphoto2" arch="src">
  <version epoch="0" ver="2.5.18" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.com" date="1436097600">- updated to 2.5.8 release
- all:
  * Missing COPYRIGHT headers added.
  * Bug fixes for issues detected by Coverity.
- ptp2:
  * Canon Powershot/IXUS CHDK support
    Install the CHDK firmware and then use "gphoto2 --set-config chdk=On" to enable.
  * Canon EOS: Implemented new capture method for new Canon EOS to avoid hangs.
  * Canon EOS: New configuration variable: continuousaf
  * Canon EOS: event output for focusinfo / focusmask
  * Nikon DSLR: New configuration variables: movieiso, movieshutterspeed, moviehighisonr
  * Nikon Coolpix A: also manually add override opcodes for capture (please report if it works)
  * New USB ids:
  Sony: DSC-HX60V, Alpha-A7S, Alpha-A77 M2, Alpha A5100
  Panasonic: DMC-LS2
  Canon EOS 7D Mark II, Canon EOS M3
  Canon Powershot SX520 HS
  Fuji Fujifilm X-E2
  Samsung NX1
  * Media Player IDs synced with the libmtp ID database.
  * Lots of bugfixes.
- libgphoto2_port/libusb1:
  * Prefer libusb1 over libusb0 if both are present.
  * Asynchronous interrupt handling, to avoid losing usb interrupts during other
    operations.
- libgphoto2.keyring: replaced by my new 4096 bit key</changelog>
  <changelog author="dimstar@opensuse.org" date="1438948800">- Change udev BuildRequires for pkgconfig(udev)
- use pkg-config --modversion udev instead of querying the package
  database. udev is often installed as udev-mini in OBS' build env,
  which the rpm -q udev call could not find.</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to baselibs for use to build wine in 64bit environments</changelog>
  <changelog author="meissner@suse.com" date="1447848000">- updated to 2.5.9 release
  Now maintained (source and issue tracker) in GIT at https://github.com/gphoto/libgphoto2
  ptp2:
  * PTP/IP: fixes to support Ricoh Theta and Sony Alpha over WLAN better
  * unification of timeout with backoff handling
  * Canon EOS: fixed a timeout bug on wait_event
  * Canon EOS: report protection status correctly
  * Canon EOS: unlock the ui on close
  * Sony: bulb mode support (in manual mode, shutterspeed and bulb option)
  * Hook up PTP OpenCapture opcode
  * Nikon J5 support. Nikon now hides prop and opcodes even differently.
  * Added USB IDs:
  - Sony SLT A77V, A7R2, HDR-PJ260VE
  - Nikon DSLR D5500
  - Canon EOS 760D, 5Ds, 5Ds R
  - Nikon Coolpix AW110, S6300, S6800, S3700, S2900
  - Nikon 1 S2, J5
  - Ricoh Theta m15 (USB and WLAN)
  - GoProp Hero 4
  canon: readd old Canon IXUS 30.
  translations: updated ukrainian, vietnamese, polish, italian</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1451390400">- Several changes/fixes to packaging:
  * API documentation was packaged twice, once in the -devel package
    and once in the main package (under different paths), split off
    to separate libgphoto2-devel-doc package
  * Use apidocs from source tar instead of using doxygen
  * package user documentation in separate libgphoto2-doc package
  * remove obsolete hotplug scripts</changelog>
  <changelog author="meissner@suse.com" date="1458734400">- updated to 2.5.10 release
  libgphoto2:
  * added gp_camera_list_config, gp_camera_get_single_config, gp_camera_set_single_config
    additional configuration APIs for faster access to single configuration values.
  ptp2:
  * allow generic opcode commands with parameters, config variable "opcode"
  * fixed pretending that Nikon Coolpix S series is a Nikon 1 S.
  * Nikon: fixed problem with SDRAM capture
  * Canon EOS: handle "no focus" during capture
  * Canon EOS: handle --new correctly
  * Canon Powershot: handle lack of object protection setting
  * Ricoh Theta: support shutterspeed configuration
  * added size checking to PTP unpacking primitives
  * various bugfixes
  * New ids:
  * Imported Media Players and Android phones from libmtp
  * Sony Alpha A7S II, ILCE 7M2
  * Kodak Z990
  * Nikon Coolpix L840, S3600
  * Leica SL
  * Olympus TG-620, E-M5 Mark 2
  * Canon EOS 1D C, 750D
  * Canon IXUS 160
  * Fuji Film X-T1, X-T10, A-610
  pentax:
  * fixed some crashes on non-existing config variables
  * use portable directory api (helps Visual Studio)
  libgphoto2_port/vusb:
  * Implemented a virtual PTP camera for test purposes.
  libgphoto2_port/disk:
  * Support exfat fuse filesystems.
  all:
  * fixed various issues found by Coverity static analyzer
  * removed unistd.h headers where not needed to help Visual Studio
  translations:
  * updated swedish, brazilian portuguese, danish, polish, ukrainian, vietnamese</changelog>
  <changelog author="meissner@suse.com" date="1465473600">- libgphoto2-newjpeg.patch: jpeg_mem_src gets a const buffer now
  in new libjpeg-turbo.</changelog>
  <changelog author="meissner@suse.com" date="1465473601">- require: udev in the library package for the hwdb refresher
  bsc#982339</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="meissner@suse.com" date="1479643200">- updated to 2.5.11 release
  * canon:
  * not experimental anymore, for some years
  * some bugfixes in configuration handling
  * ptp2:
  * canon: EOS capture improvements, also supporting new EOS
  * sony: tethering and trigger capture implemented, capture stability improvements
  * sony: exposure compensation setting fixed
  * sony: capture and autofocus configurations, similar to eosremoterelease
  * generic: fixed serialnumber retrieval
  * nikon: "autofocus" config variable for global autofocus enable/disable (default on, default liveview off)
  * various bugs fixed, stability improved
  * ptpip: allow different event ports. --port ptpip:IP:dataport:eventport
  * New ids reported:
  - Sony Alpha 7, DSC-RX100M4, NEX-7, DSC-HX20V, Alpha 6300, A7S II, A7,
  - Nikon DSC Df, D7200, D5, D810A, 1 V3
  - Canon EOS 1Dx Mark 3, 80D, 5D Mark IV
  - Canon Digital IXUS 180
  - various music players / android phones imported from libmtp
  * libgphoto2:
  * Speed up initial startup.
  * Win32: store settings in the "User Profile\.gphoto\settings" and not in C:\\Windows anymore.
  * gp_widget_changed() no longer clears the "changed" state to make this API more consistent.
    Use gp_widget_set_changed(widget,FALSE) to do so.
  * examples:
  * sample-photobooth: a sample program handling tethering, SIGUSR1 driven capture and SIGUSR2
    based configuration reading.
  * sample-afl: code to inject afl fuzzing data
  * translations:
  * updated swedish, ukrainian, polish, finnish, russian, danish, polish, brazilian, serbian, dutch, chinese
- libgphoto2-newjpeg.patch: removed, upstream</changelog>
  <changelog author="meissner@suse.com" date="1483617600">- updated to 2.5.12 release
  ptp2:
  * Canon EOS: more fixes for Canon EOS 5D Mark IV and Canon EOS 80D.
  * Parrot Sequoia support and property decoding
  * Nikon 1: Fixed Nikon 1 capture
  * Sony Alpha: various bugfixes.
  * New USB IDs:
  * Nikon Coolpix AW130
  * Nikon DSC D3400
  * Parrot Sequoia
  * GoPro Hero, Hero4 Silver, Hero +
  * bugfixes and cleanups
  canon:
  * fixed zoom on some older Canon Powershots
  translations:
  * updated polish, ukrainian, vietnamese, danish, french, svensk</changelog>
  <changelog author="meissner@suse.com" date="1490097600">- updated to 2.5.12.1 temporary snapshot
  ptp2:
  * iPhone iOS 10.2 storage handling fixed, added dynamic storage handling
  * Sony Alpha Live View support.
  * Canon EOS M series capture enabled. (might not fully work yet)
  * Various crashes and endless loops fixed that were found by the AFL fuzzer.
  * Various bugfixes in Nikon, Canon capture
  * New USB Ids:
  * Sony: SLT A37, DSC-RX100M5
  * Nikon KeyMission 360
  * Canon PowerShot G16
  * Canon EOS M5
  * Fuji Fujifilm XT-2
  * GoPro Hero 5 Black</changelog>
  <changelog author="meissner@suse.com" date="1491652800">- updated to 2.5.13 release
  See below in 2.5.12.1 pre relase, also:
  pentax:
  * Now using the pktriggercord codebase
  * lots of improvements
  * Please report missing Pentax K USB ids that are supported by pktriggercord!</changelog>
  <changelog author="meissner@suse.com" date="1496664000">- updated to 2.5.14 release
  * ptp2:
  * Canon EOS M remote control / capture support (M3, M5, M10 ... but not the original EOS M currently)
  * fix for Canon EOS camera crash bug introduced in 2.5.13.
  * Fuji XT-2 capture support (firmware update needed, might work for other Fuji XT too)
  * Canon EOS 77D added.
  * various bugfixes
  * added USB IDs:
  * Sony DSC-RX10M3, DSC-HX90V
  * Sony UMC-R10C
  * Nikon D5600,
  * Canon EOS 77D
  * Fuji XT-20
  * synced MTP device ids from libmtp
  * more issues fixed that were found by the AFL fuzzer
  * pentax:
  * Added Pentax K5-II, Pentax K3-II
  * libgphoto2_port:
  * fixed gp_log_remove_func
  * libgphoto2_port/vusb:
  * support f-number, shutterspeed, and exposurebias in the virtual PTP camera
  * all:
  * several issues found by gcc 7 fixed
  * translations:
  * updated ukrainian, polish, vietnamese, french, swedish</changelog>
  <changelog author="meissner@suse.com" date="1500206400">- libgphoto2-fix-fuji.patch: check before using a ptp property that
  is only available in some updated Fuji cameras (bsc#1048853)</changelog>
  <changelog author="meissner@suse.com" date="1506945600">- updated to 2.5.15 release
  - ptp2:
  * fuji: Fix cameras without new capture properties.
  * Canon EOS: config aspectratio, highisonr
  * Canon EOS: emit CAPTURECOMPLETE event
  * Canon EOS: whitebalanaceadjustment is 32bit signed, not 16bit signed
  * usb: better error feedback
  * fixed some bugs found by AFL fuzzing
  * Added USB ids:
  * Sony: A6500, HX400V
  * Nikon: D500, D7500
  * Olympus: VR360
  * Canon PowerShot: ELPH 350 HS
  * Canon EOS: 200D, Rebel T7i
  * Fuji: GFX 50 S
  * Ricoh Theta S, Theta SC
  - libgphoto2_port/vusb:
  * now default disabled as it confused people, enable with --enable-vusb
- libgphoto2-fix-fuji.patch: upstreamed</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Avoid running fdupes across partitions. Replace old tar
  options, old RPM shell variables by new constructs.
  Rectify RPM groups. Make macro style consistent again.</changelog>
  <changelog author="meissner@suse.com" date="1508155200">- updated to 2.5.16 release
  - ptp2: emergency bugfix as a previous bugfix broke some detection features</changelog>
  <changelog author="meissner@suse.com" date="1523880000">- updated to 2.5.17 release
  - ptp2:
  * Apple iOSX: handle root directory objects that have ParentObject==StorageID instead of 0
  * implement PTP 1.1 Manifest reading and hook into filesystem. currently only supported by Apple iOS.
  * Canon PowerShot CHDK live view support.
  * Canon EOS: prepare capture needs to wait a bit on a crucial place to get all events.
    might fix some PTP Device Busy reports.
  * Canon EOS: split bulk downloads into pieces of partial downloads. This might cure the Error 70.
  * Canon EOS: Improved EOS M capture
  * Canon CHDK: live preview capture support added
  * Added USB IDs:
  * Sony A7r III
  * Nikon CoolPix L430
  * Nikon D850
  * Canon EOS M2, M6, M100
  * Canon EOS 6D Mark II
  * Fuji Film X-Pro 2
  - pentax:
  * Code updates imported from pkremote
  - libgphoto2:
  * Report file changes via GP_EVENT_FILE_CHANGED (hooked up for Canon EOS currently)
  - translations:
  * updates spanish, chinese</changelog>
  <changelog author="meissner@suse.com" date="1526212800">- updated to 2.5.18 release (bsc#1091309)
  - ptp2:
    Canon EOS: Fixed file download on several EOS brands, broken by 2.5.17 release.
  - pentax:
    Added K01 and K70 models.</changelog>
</package>
<package pkgid="6f9eb7464233b7671c2e34b06512a2a79a4a14fed706d515438f6b4857bebf64" name="libgphoto2-6" arch="x86_64">
  <version epoch="0" ver="2.5.18" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.com" date="1436097600">- updated to 2.5.8 release
- all:
  * Missing COPYRIGHT headers added.
  * Bug fixes for issues detected by Coverity.
- ptp2:
  * Canon Powershot/IXUS CHDK support
    Install the CHDK firmware and then use "gphoto2 --set-config chdk=On" to enable.
  * Canon EOS: Implemented new capture method for new Canon EOS to avoid hangs.
  * Canon EOS: New configuration variable: continuousaf
  * Canon EOS: event output for focusinfo / focusmask
  * Nikon DSLR: New configuration variables: movieiso, movieshutterspeed, moviehighisonr
  * Nikon Coolpix A: also manually add override opcodes for capture (please report if it works)
  * New USB ids:
  Sony: DSC-HX60V, Alpha-A7S, Alpha-A77 M2, Alpha A5100
  Panasonic: DMC-LS2
  Canon EOS 7D Mark II, Canon EOS M3
  Canon Powershot SX520 HS
  Fuji Fujifilm X-E2
  Samsung NX1
  * Media Player IDs synced with the libmtp ID database.
  * Lots of bugfixes.
- libgphoto2_port/libusb1:
  * Prefer libusb1 over libusb0 if both are present.
  * Asynchronous interrupt handling, to avoid losing usb interrupts during other
    operations.
- libgphoto2.keyring: replaced by my new 4096 bit key</changelog>
  <changelog author="dimstar@opensuse.org" date="1438948800">- Change udev BuildRequires for pkgconfig(udev)
- use pkg-config --modversion udev instead of querying the package
  database. udev is often installed as udev-mini in OBS' build env,
  which the rpm -q udev call could not find.</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to baselibs for use to build wine in 64bit environments</changelog>
  <changelog author="meissner@suse.com" date="1447848000">- updated to 2.5.9 release
  Now maintained (source and issue tracker) in GIT at https://github.com/gphoto/libgphoto2
  ptp2:
  * PTP/IP: fixes to support Ricoh Theta and Sony Alpha over WLAN better
  * unification of timeout with backoff handling
  * Canon EOS: fixed a timeout bug on wait_event
  * Canon EOS: report protection status correctly
  * Canon EOS: unlock the ui on close
  * Sony: bulb mode support (in manual mode, shutterspeed and bulb option)
  * Hook up PTP OpenCapture opcode
  * Nikon J5 support. Nikon now hides prop and opcodes even differently.
  * Added USB IDs:
  - Sony SLT A77V, A7R2, HDR-PJ260VE
  - Nikon DSLR D5500
  - Canon EOS 760D, 5Ds, 5Ds R
  - Nikon Coolpix AW110, S6300, S6800, S3700, S2900
  - Nikon 1 S2, J5
  - Ricoh Theta m15 (USB and WLAN)
  - GoProp Hero 4
  canon: readd old Canon IXUS 30.
  translations: updated ukrainian, vietnamese, polish, italian</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1451390400">- Several changes/fixes to packaging:
  * API documentation was packaged twice, once in the -devel package
    and once in the main package (under different paths), split off
    to separate libgphoto2-devel-doc package
  * Use apidocs from source tar instead of using doxygen
  * package user documentation in separate libgphoto2-doc package
  * remove obsolete hotplug scripts</changelog>
  <changelog author="meissner@suse.com" date="1458734400">- updated to 2.5.10 release
  libgphoto2:
  * added gp_camera_list_config, gp_camera_get_single_config, gp_camera_set_single_config
    additional configuration APIs for faster access to single configuration values.
  ptp2:
  * allow generic opcode commands with parameters, config variable "opcode"
  * fixed pretending that Nikon Coolpix S series is a Nikon 1 S.
  * Nikon: fixed problem with SDRAM capture
  * Canon EOS: handle "no focus" during capture
  * Canon EOS: handle --new correctly
  * Canon Powershot: handle lack of object protection setting
  * Ricoh Theta: support shutterspeed configuration
  * added size checking to PTP unpacking primitives
  * various bugfixes
  * New ids:
  * Imported Media Players and Android phones from libmtp
  * Sony Alpha A7S II, ILCE 7M2
  * Kodak Z990
  * Nikon Coolpix L840, S3600
  * Leica SL
  * Olympus TG-620, E-M5 Mark 2
  * Canon EOS 1D C, 750D
  * Canon IXUS 160
  * Fuji Film X-T1, X-T10, A-610
  pentax:
  * fixed some crashes on non-existing config variables
  * use portable directory api (helps Visual Studio)
  libgphoto2_port/vusb:
  * Implemented a virtual PTP camera for test purposes.
  libgphoto2_port/disk:
  * Support exfat fuse filesystems.
  all:
  * fixed various issues found by Coverity static analyzer
  * removed unistd.h headers where not needed to help Visual Studio
  translations:
  * updated swedish, brazilian portuguese, danish, polish, ukrainian, vietnamese</changelog>
  <changelog author="meissner@suse.com" date="1465473600">- libgphoto2-newjpeg.patch: jpeg_mem_src gets a const buffer now
  in new libjpeg-turbo.</changelog>
  <changelog author="meissner@suse.com" date="1465473601">- require: udev in the library package for the hwdb refresher
  bsc#982339</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="meissner@suse.com" date="1479643200">- updated to 2.5.11 release
  * canon:
  * not experimental anymore, for some years
  * some bugfixes in configuration handling
  * ptp2:
  * canon: EOS capture improvements, also supporting new EOS
  * sony: tethering and trigger capture implemented, capture stability improvements
  * sony: exposure compensation setting fixed
  * sony: capture and autofocus configurations, similar to eosremoterelease
  * generic: fixed serialnumber retrieval
  * nikon: "autofocus" config variable for global autofocus enable/disable (default on, default liveview off)
  * various bugs fixed, stability improved
  * ptpip: allow different event ports. --port ptpip:IP:dataport:eventport
  * New ids reported:
  - Sony Alpha 7, DSC-RX100M4, NEX-7, DSC-HX20V, Alpha 6300, A7S II, A7,
  - Nikon DSC Df, D7200, D5, D810A, 1 V3
  - Canon EOS 1Dx Mark 3, 80D, 5D Mark IV
  - Canon Digital IXUS 180
  - various music players / android phones imported from libmtp
  * libgphoto2:
  * Speed up initial startup.
  * Win32: store settings in the "User Profile\.gphoto\settings" and not in C:\\Windows anymore.
  * gp_widget_changed() no longer clears the "changed" state to make this API more consistent.
    Use gp_widget_set_changed(widget,FALSE) to do so.
  * examples:
  * sample-photobooth: a sample program handling tethering, SIGUSR1 driven capture and SIGUSR2
    based configuration reading.
  * sample-afl: code to inject afl fuzzing data
  * translations:
  * updated swedish, ukrainian, polish, finnish, russian, danish, polish, brazilian, serbian, dutch, chinese
- libgphoto2-newjpeg.patch: removed, upstream</changelog>
  <changelog author="meissner@suse.com" date="1483617600">- updated to 2.5.12 release
  ptp2:
  * Canon EOS: more fixes for Canon EOS 5D Mark IV and Canon EOS 80D.
  * Parrot Sequoia support and property decoding
  * Nikon 1: Fixed Nikon 1 capture
  * Sony Alpha: various bugfixes.
  * New USB IDs:
  * Nikon Coolpix AW130
  * Nikon DSC D3400
  * Parrot Sequoia
  * GoPro Hero, Hero4 Silver, Hero +
  * bugfixes and cleanups
  canon:
  * fixed zoom on some older Canon Powershots
  translations:
  * updated polish, ukrainian, vietnamese, danish, french, svensk</changelog>
  <changelog author="meissner@suse.com" date="1490097600">- updated to 2.5.12.1 temporary snapshot
  ptp2:
  * iPhone iOS 10.2 storage handling fixed, added dynamic storage handling
  * Sony Alpha Live View support.
  * Canon EOS M series capture enabled. (might not fully work yet)
  * Various crashes and endless loops fixed that were found by the AFL fuzzer.
  * Various bugfixes in Nikon, Canon capture
  * New USB Ids:
  * Sony: SLT A37, DSC-RX100M5
  * Nikon KeyMission 360
  * Canon PowerShot G16
  * Canon EOS M5
  * Fuji Fujifilm XT-2
  * GoPro Hero 5 Black</changelog>
  <changelog author="meissner@suse.com" date="1491652800">- updated to 2.5.13 release
  See below in 2.5.12.1 pre relase, also:
  pentax:
  * Now using the pktriggercord codebase
  * lots of improvements
  * Please report missing Pentax K USB ids that are supported by pktriggercord!</changelog>
  <changelog author="meissner@suse.com" date="1496664000">- updated to 2.5.14 release
  * ptp2:
  * Canon EOS M remote control / capture support (M3, M5, M10 ... but not the original EOS M currently)
  * fix for Canon EOS camera crash bug introduced in 2.5.13.
  * Fuji XT-2 capture support (firmware update needed, might work for other Fuji XT too)
  * Canon EOS 77D added.
  * various bugfixes
  * added USB IDs:
  * Sony DSC-RX10M3, DSC-HX90V
  * Sony UMC-R10C
  * Nikon D5600,
  * Canon EOS 77D
  * Fuji XT-20
  * synced MTP device ids from libmtp
  * more issues fixed that were found by the AFL fuzzer
  * pentax:
  * Added Pentax K5-II, Pentax K3-II
  * libgphoto2_port:
  * fixed gp_log_remove_func
  * libgphoto2_port/vusb:
  * support f-number, shutterspeed, and exposurebias in the virtual PTP camera
  * all:
  * several issues found by gcc 7 fixed
  * translations:
  * updated ukrainian, polish, vietnamese, french, swedish</changelog>
  <changelog author="meissner@suse.com" date="1500206400">- libgphoto2-fix-fuji.patch: check before using a ptp property that
  is only available in some updated Fuji cameras (bsc#1048853)</changelog>
  <changelog author="meissner@suse.com" date="1506945600">- updated to 2.5.15 release
  - ptp2:
  * fuji: Fix cameras without new capture properties.
  * Canon EOS: config aspectratio, highisonr
  * Canon EOS: emit CAPTURECOMPLETE event
  * Canon EOS: whitebalanaceadjustment is 32bit signed, not 16bit signed
  * usb: better error feedback
  * fixed some bugs found by AFL fuzzing
  * Added USB ids:
  * Sony: A6500, HX400V
  * Nikon: D500, D7500
  * Olympus: VR360
  * Canon PowerShot: ELPH 350 HS
  * Canon EOS: 200D, Rebel T7i
  * Fuji: GFX 50 S
  * Ricoh Theta S, Theta SC
  - libgphoto2_port/vusb:
  * now default disabled as it confused people, enable with --enable-vusb
- libgphoto2-fix-fuji.patch: upstreamed</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Avoid running fdupes across partitions. Replace old tar
  options, old RPM shell variables by new constructs.
  Rectify RPM groups. Make macro style consistent again.</changelog>
  <changelog author="meissner@suse.com" date="1508155200">- updated to 2.5.16 release
  - ptp2: emergency bugfix as a previous bugfix broke some detection features</changelog>
  <changelog author="meissner@suse.com" date="1523880000">- updated to 2.5.17 release
  - ptp2:
  * Apple iOSX: handle root directory objects that have ParentObject==StorageID instead of 0
  * implement PTP 1.1 Manifest reading and hook into filesystem. currently only supported by Apple iOS.
  * Canon PowerShot CHDK live view support.
  * Canon EOS: prepare capture needs to wait a bit on a crucial place to get all events.
    might fix some PTP Device Busy reports.
  * Canon EOS: split bulk downloads into pieces of partial downloads. This might cure the Error 70.
  * Canon EOS: Improved EOS M capture
  * Canon CHDK: live preview capture support added
  * Added USB IDs:
  * Sony A7r III
  * Nikon CoolPix L430
  * Nikon D850
  * Canon EOS M2, M6, M100
  * Canon EOS 6D Mark II
  * Fuji Film X-Pro 2
  - pentax:
  * Code updates imported from pkremote
  - libgphoto2:
  * Report file changes via GP_EVENT_FILE_CHANGED (hooked up for Canon EOS currently)
  - translations:
  * updates spanish, chinese</changelog>
  <changelog author="meissner@suse.com" date="1526212800">- updated to 2.5.18 release (bsc#1091309)
  - ptp2:
    Canon EOS: Fixed file download on several EOS brands, broken by 2.5.17 release.
  - pentax:
    Added K01 and K70 models.</changelog>
</package>
<package pkgid="8987de0b9f6e2cd38d2ef73fa2a7b1613d40f7fefbdebc5aabe3685c17c05b26" name="libgphoto2-6-32bit" arch="x86_64">
  <version epoch="0" ver="2.5.18" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.com" date="1436097600">- updated to 2.5.8 release
- all:
  * Missing COPYRIGHT headers added.
  * Bug fixes for issues detected by Coverity.
- ptp2:
  * Canon Powershot/IXUS CHDK support
    Install the CHDK firmware and then use "gphoto2 --set-config chdk=On" to enable.
  * Canon EOS: Implemented new capture method for new Canon EOS to avoid hangs.
  * Canon EOS: New configuration variable: continuousaf
  * Canon EOS: event output for focusinfo / focusmask
  * Nikon DSLR: New configuration variables: movieiso, movieshutterspeed, moviehighisonr
  * Nikon Coolpix A: also manually add override opcodes for capture (please report if it works)
  * New USB ids:
  Sony: DSC-HX60V, Alpha-A7S, Alpha-A77 M2, Alpha A5100
  Panasonic: DMC-LS2
  Canon EOS 7D Mark II, Canon EOS M3
  Canon Powershot SX520 HS
  Fuji Fujifilm X-E2
  Samsung NX1
  * Media Player IDs synced with the libmtp ID database.
  * Lots of bugfixes.
- libgphoto2_port/libusb1:
  * Prefer libusb1 over libusb0 if both are present.
  * Asynchronous interrupt handling, to avoid losing usb interrupts during other
    operations.
- libgphoto2.keyring: replaced by my new 4096 bit key</changelog>
  <changelog author="dimstar@opensuse.org" date="1438948800">- Change udev BuildRequires for pkgconfig(udev)
- use pkg-config --modversion udev instead of querying the package
  database. udev is often installed as udev-mini in OBS' build env,
  which the rpm -q udev call could not find.</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to baselibs for use to build wine in 64bit environments</changelog>
  <changelog author="meissner@suse.com" date="1447848000">- updated to 2.5.9 release
  Now maintained (source and issue tracker) in GIT at https://github.com/gphoto/libgphoto2
  ptp2:
  * PTP/IP: fixes to support Ricoh Theta and Sony Alpha over WLAN better
  * unification of timeout with backoff handling
  * Canon EOS: fixed a timeout bug on wait_event
  * Canon EOS: report protection status correctly
  * Canon EOS: unlock the ui on close
  * Sony: bulb mode support (in manual mode, shutterspeed and bulb option)
  * Hook up PTP OpenCapture opcode
  * Nikon J5 support. Nikon now hides prop and opcodes even differently.
  * Added USB IDs:
  - Sony SLT A77V, A7R2, HDR-PJ260VE
  - Nikon DSLR D5500
  - Canon EOS 760D, 5Ds, 5Ds R
  - Nikon Coolpix AW110, S6300, S6800, S3700, S2900
  - Nikon 1 S2, J5
  - Ricoh Theta m15 (USB and WLAN)
  - GoProp Hero 4
  canon: readd old Canon IXUS 30.
  translations: updated ukrainian, vietnamese, polish, italian</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1451390400">- Several changes/fixes to packaging:
  * API documentation was packaged twice, once in the -devel package
    and once in the main package (under different paths), split off
    to separate libgphoto2-devel-doc package
  * Use apidocs from source tar instead of using doxygen
  * package user documentation in separate libgphoto2-doc package
  * remove obsolete hotplug scripts</changelog>
  <changelog author="meissner@suse.com" date="1458734400">- updated to 2.5.10 release
  libgphoto2:
  * added gp_camera_list_config, gp_camera_get_single_config, gp_camera_set_single_config
    additional configuration APIs for faster access to single configuration values.
  ptp2:
  * allow generic opcode commands with parameters, config variable "opcode"
  * fixed pretending that Nikon Coolpix S series is a Nikon 1 S.
  * Nikon: fixed problem with SDRAM capture
  * Canon EOS: handle "no focus" during capture
  * Canon EOS: handle --new correctly
  * Canon Powershot: handle lack of object protection setting
  * Ricoh Theta: support shutterspeed configuration
  * added size checking to PTP unpacking primitives
  * various bugfixes
  * New ids:
  * Imported Media Players and Android phones from libmtp
  * Sony Alpha A7S II, ILCE 7M2
  * Kodak Z990
  * Nikon Coolpix L840, S3600
  * Leica SL
  * Olympus TG-620, E-M5 Mark 2
  * Canon EOS 1D C, 750D
  * Canon IXUS 160
  * Fuji Film X-T1, X-T10, A-610
  pentax:
  * fixed some crashes on non-existing config variables
  * use portable directory api (helps Visual Studio)
  libgphoto2_port/vusb:
  * Implemented a virtual PTP camera for test purposes.
  libgphoto2_port/disk:
  * Support exfat fuse filesystems.
  all:
  * fixed various issues found by Coverity static analyzer
  * removed unistd.h headers where not needed to help Visual Studio
  translations:
  * updated swedish, brazilian portuguese, danish, polish, ukrainian, vietnamese</changelog>
  <changelog author="meissner@suse.com" date="1465473600">- libgphoto2-newjpeg.patch: jpeg_mem_src gets a const buffer now
  in new libjpeg-turbo.</changelog>
  <changelog author="meissner@suse.com" date="1465473601">- require: udev in the library package for the hwdb refresher
  bsc#982339</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="meissner@suse.com" date="1479643200">- updated to 2.5.11 release
  * canon:
  * not experimental anymore, for some years
  * some bugfixes in configuration handling
  * ptp2:
  * canon: EOS capture improvements, also supporting new EOS
  * sony: tethering and trigger capture implemented, capture stability improvements
  * sony: exposure compensation setting fixed
  * sony: capture and autofocus configurations, similar to eosremoterelease
  * generic: fixed serialnumber retrieval
  * nikon: "autofocus" config variable for global autofocus enable/disable (default on, default liveview off)
  * various bugs fixed, stability improved
  * ptpip: allow different event ports. --port ptpip:IP:dataport:eventport
  * New ids reported:
  - Sony Alpha 7, DSC-RX100M4, NEX-7, DSC-HX20V, Alpha 6300, A7S II, A7,
  - Nikon DSC Df, D7200, D5, D810A, 1 V3
  - Canon EOS 1Dx Mark 3, 80D, 5D Mark IV
  - Canon Digital IXUS 180
  - various music players / android phones imported from libmtp
  * libgphoto2:
  * Speed up initial startup.
  * Win32: store settings in the "User Profile\.gphoto\settings" and not in C:\\Windows anymore.
  * gp_widget_changed() no longer clears the "changed" state to make this API more consistent.
    Use gp_widget_set_changed(widget,FALSE) to do so.
  * examples:
  * sample-photobooth: a sample program handling tethering, SIGUSR1 driven capture and SIGUSR2
    based configuration reading.
  * sample-afl: code to inject afl fuzzing data
  * translations:
  * updated swedish, ukrainian, polish, finnish, russian, danish, polish, brazilian, serbian, dutch, chinese
- libgphoto2-newjpeg.patch: removed, upstream</changelog>
  <changelog author="meissner@suse.com" date="1483617600">- updated to 2.5.12 release
  ptp2:
  * Canon EOS: more fixes for Canon EOS 5D Mark IV and Canon EOS 80D.
  * Parrot Sequoia support and property decoding
  * Nikon 1: Fixed Nikon 1 capture
  * Sony Alpha: various bugfixes.
  * New USB IDs:
  * Nikon Coolpix AW130
  * Nikon DSC D3400
  * Parrot Sequoia
  * GoPro Hero, Hero4 Silver, Hero +
  * bugfixes and cleanups
  canon:
  * fixed zoom on some older Canon Powershots
  translations:
  * updated polish, ukrainian, vietnamese, danish, french, svensk</changelog>
  <changelog author="meissner@suse.com" date="1490097600">- updated to 2.5.12.1 temporary snapshot
  ptp2:
  * iPhone iOS 10.2 storage handling fixed, added dynamic storage handling
  * Sony Alpha Live View support.
  * Canon EOS M series capture enabled. (might not fully work yet)
  * Various crashes and endless loops fixed that were found by the AFL fuzzer.
  * Various bugfixes in Nikon, Canon capture
  * New USB Ids:
  * Sony: SLT A37, DSC-RX100M5
  * Nikon KeyMission 360
  * Canon PowerShot G16
  * Canon EOS M5
  * Fuji Fujifilm XT-2
  * GoPro Hero 5 Black</changelog>
  <changelog author="meissner@suse.com" date="1491652800">- updated to 2.5.13 release
  See below in 2.5.12.1 pre relase, also:
  pentax:
  * Now using the pktriggercord codebase
  * lots of improvements
  * Please report missing Pentax K USB ids that are supported by pktriggercord!</changelog>
  <changelog author="meissner@suse.com" date="1496664000">- updated to 2.5.14 release
  * ptp2:
  * Canon EOS M remote control / capture support (M3, M5, M10 ... but not the original EOS M currently)
  * fix for Canon EOS camera crash bug introduced in 2.5.13.
  * Fuji XT-2 capture support (firmware update needed, might work for other Fuji XT too)
  * Canon EOS 77D added.
  * various bugfixes
  * added USB IDs:
  * Sony DSC-RX10M3, DSC-HX90V
  * Sony UMC-R10C
  * Nikon D5600,
  * Canon EOS 77D
  * Fuji XT-20
  * synced MTP device ids from libmtp
  * more issues fixed that were found by the AFL fuzzer
  * pentax:
  * Added Pentax K5-II, Pentax K3-II
  * libgphoto2_port:
  * fixed gp_log_remove_func
  * libgphoto2_port/vusb:
  * support f-number, shutterspeed, and exposurebias in the virtual PTP camera
  * all:
  * several issues found by gcc 7 fixed
  * translations:
  * updated ukrainian, polish, vietnamese, french, swedish</changelog>
  <changelog author="meissner@suse.com" date="1500206400">- libgphoto2-fix-fuji.patch: check before using a ptp property that
  is only available in some updated Fuji cameras (bsc#1048853)</changelog>
  <changelog author="meissner@suse.com" date="1506945600">- updated to 2.5.15 release
  - ptp2:
  * fuji: Fix cameras without new capture properties.
  * Canon EOS: config aspectratio, highisonr
  * Canon EOS: emit CAPTURECOMPLETE event
  * Canon EOS: whitebalanaceadjustment is 32bit signed, not 16bit signed
  * usb: better error feedback
  * fixed some bugs found by AFL fuzzing
  * Added USB ids:
  * Sony: A6500, HX400V
  * Nikon: D500, D7500
  * Olympus: VR360
  * Canon PowerShot: ELPH 350 HS
  * Canon EOS: 200D, Rebel T7i
  * Fuji: GFX 50 S
  * Ricoh Theta S, Theta SC
  - libgphoto2_port/vusb:
  * now default disabled as it confused people, enable with --enable-vusb
- libgphoto2-fix-fuji.patch: upstreamed</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Avoid running fdupes across partitions. Replace old tar
  options, old RPM shell variables by new constructs.
  Rectify RPM groups. Make macro style consistent again.</changelog>
  <changelog author="meissner@suse.com" date="1508155200">- updated to 2.5.16 release
  - ptp2: emergency bugfix as a previous bugfix broke some detection features</changelog>
  <changelog author="meissner@suse.com" date="1523880000">- updated to 2.5.17 release
  - ptp2:
  * Apple iOSX: handle root directory objects that have ParentObject==StorageID instead of 0
  * implement PTP 1.1 Manifest reading and hook into filesystem. currently only supported by Apple iOS.
  * Canon PowerShot CHDK live view support.
  * Canon EOS: prepare capture needs to wait a bit on a crucial place to get all events.
    might fix some PTP Device Busy reports.
  * Canon EOS: split bulk downloads into pieces of partial downloads. This might cure the Error 70.
  * Canon EOS: Improved EOS M capture
  * Canon CHDK: live preview capture support added
  * Added USB IDs:
  * Sony A7r III
  * Nikon CoolPix L430
  * Nikon D850
  * Canon EOS M2, M6, M100
  * Canon EOS 6D Mark II
  * Fuji Film X-Pro 2
  - pentax:
  * Code updates imported from pkremote
  - libgphoto2:
  * Report file changes via GP_EVENT_FILE_CHANGED (hooked up for Canon EOS currently)
  - translations:
  * updates spanish, chinese</changelog>
  <changelog author="meissner@suse.com" date="1526212800">- updated to 2.5.18 release (bsc#1091309)
  - ptp2:
    Canon EOS: Fixed file download on several EOS brands, broken by 2.5.17 release.
  - pentax:
    Added K01 and K70 models.</changelog>
</package>
<package pkgid="55307632893684d93bcbf9cb3d35f1ead7fa1fa705eb4d35aaa6aed41c2d294e" name="libgphoto2-6-lang" arch="noarch">
  <version epoch="0" ver="2.5.18" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.com" date="1436097600">- updated to 2.5.8 release
- all:
  * Missing COPYRIGHT headers added.
  * Bug fixes for issues detected by Coverity.
- ptp2:
  * Canon Powershot/IXUS CHDK support
    Install the CHDK firmware and then use "gphoto2 --set-config chdk=On" to enable.
  * Canon EOS: Implemented new capture method for new Canon EOS to avoid hangs.
  * Canon EOS: New configuration variable: continuousaf
  * Canon EOS: event output for focusinfo / focusmask
  * Nikon DSLR: New configuration variables: movieiso, movieshutterspeed, moviehighisonr
  * Nikon Coolpix A: also manually add override opcodes for capture (please report if it works)
  * New USB ids:
  Sony: DSC-HX60V, Alpha-A7S, Alpha-A77 M2, Alpha A5100
  Panasonic: DMC-LS2
  Canon EOS 7D Mark II, Canon EOS M3
  Canon Powershot SX520 HS
  Fuji Fujifilm X-E2
  Samsung NX1
  * Media Player IDs synced with the libmtp ID database.
  * Lots of bugfixes.
- libgphoto2_port/libusb1:
  * Prefer libusb1 over libusb0 if both are present.
  * Asynchronous interrupt handling, to avoid losing usb interrupts during other
    operations.
- libgphoto2.keyring: replaced by my new 4096 bit key</changelog>
  <changelog author="dimstar@opensuse.org" date="1438948800">- Change udev BuildRequires for pkgconfig(udev)
- use pkg-config --modversion udev instead of querying the package
  database. udev is often installed as udev-mini in OBS' build env,
  which the rpm -q udev call could not find.</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to baselibs for use to build wine in 64bit environments</changelog>
  <changelog author="meissner@suse.com" date="1447848000">- updated to 2.5.9 release
  Now maintained (source and issue tracker) in GIT at https://github.com/gphoto/libgphoto2
  ptp2:
  * PTP/IP: fixes to support Ricoh Theta and Sony Alpha over WLAN better
  * unification of timeout with backoff handling
  * Canon EOS: fixed a timeout bug on wait_event
  * Canon EOS: report protection status correctly
  * Canon EOS: unlock the ui on close
  * Sony: bulb mode support (in manual mode, shutterspeed and bulb option)
  * Hook up PTP OpenCapture opcode
  * Nikon J5 support. Nikon now hides prop and opcodes even differently.
  * Added USB IDs:
  - Sony SLT A77V, A7R2, HDR-PJ260VE
  - Nikon DSLR D5500
  - Canon EOS 760D, 5Ds, 5Ds R
  - Nikon Coolpix AW110, S6300, S6800, S3700, S2900
  - Nikon 1 S2, J5
  - Ricoh Theta m15 (USB and WLAN)
  - GoProp Hero 4
  canon: readd old Canon IXUS 30.
  translations: updated ukrainian, vietnamese, polish, italian</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1451390400">- Several changes/fixes to packaging:
  * API documentation was packaged twice, once in the -devel package
    and once in the main package (under different paths), split off
    to separate libgphoto2-devel-doc package
  * Use apidocs from source tar instead of using doxygen
  * package user documentation in separate libgphoto2-doc package
  * remove obsolete hotplug scripts</changelog>
  <changelog author="meissner@suse.com" date="1458734400">- updated to 2.5.10 release
  libgphoto2:
  * added gp_camera_list_config, gp_camera_get_single_config, gp_camera_set_single_config
    additional configuration APIs for faster access to single configuration values.
  ptp2:
  * allow generic opcode commands with parameters, config variable "opcode"
  * fixed pretending that Nikon Coolpix S series is a Nikon 1 S.
  * Nikon: fixed problem with SDRAM capture
  * Canon EOS: handle "no focus" during capture
  * Canon EOS: handle --new correctly
  * Canon Powershot: handle lack of object protection setting
  * Ricoh Theta: support shutterspeed configuration
  * added size checking to PTP unpacking primitives
  * various bugfixes
  * New ids:
  * Imported Media Players and Android phones from libmtp
  * Sony Alpha A7S II, ILCE 7M2
  * Kodak Z990
  * Nikon Coolpix L840, S3600
  * Leica SL
  * Olympus TG-620, E-M5 Mark 2
  * Canon EOS 1D C, 750D
  * Canon IXUS 160
  * Fuji Film X-T1, X-T10, A-610
  pentax:
  * fixed some crashes on non-existing config variables
  * use portable directory api (helps Visual Studio)
  libgphoto2_port/vusb:
  * Implemented a virtual PTP camera for test purposes.
  libgphoto2_port/disk:
  * Support exfat fuse filesystems.
  all:
  * fixed various issues found by Coverity static analyzer
  * removed unistd.h headers where not needed to help Visual Studio
  translations:
  * updated swedish, brazilian portuguese, danish, polish, ukrainian, vietnamese</changelog>
  <changelog author="meissner@suse.com" date="1465473600">- libgphoto2-newjpeg.patch: jpeg_mem_src gets a const buffer now
  in new libjpeg-turbo.</changelog>
  <changelog author="meissner@suse.com" date="1465473601">- require: udev in the library package for the hwdb refresher
  bsc#982339</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="meissner@suse.com" date="1479643200">- updated to 2.5.11 release
  * canon:
  * not experimental anymore, for some years
  * some bugfixes in configuration handling
  * ptp2:
  * canon: EOS capture improvements, also supporting new EOS
  * sony: tethering and trigger capture implemented, capture stability improvements
  * sony: exposure compensation setting fixed
  * sony: capture and autofocus configurations, similar to eosremoterelease
  * generic: fixed serialnumber retrieval
  * nikon: "autofocus" config variable for global autofocus enable/disable (default on, default liveview off)
  * various bugs fixed, stability improved
  * ptpip: allow different event ports. --port ptpip:IP:dataport:eventport
  * New ids reported:
  - Sony Alpha 7, DSC-RX100M4, NEX-7, DSC-HX20V, Alpha 6300, A7S II, A7,
  - Nikon DSC Df, D7200, D5, D810A, 1 V3
  - Canon EOS 1Dx Mark 3, 80D, 5D Mark IV
  - Canon Digital IXUS 180
  - various music players / android phones imported from libmtp
  * libgphoto2:
  * Speed up initial startup.
  * Win32: store settings in the "User Profile\.gphoto\settings" and not in C:\\Windows anymore.
  * gp_widget_changed() no longer clears the "changed" state to make this API more consistent.
    Use gp_widget_set_changed(widget,FALSE) to do so.
  * examples:
  * sample-photobooth: a sample program handling tethering, SIGUSR1 driven capture and SIGUSR2
    based configuration reading.
  * sample-afl: code to inject afl fuzzing data
  * translations:
  * updated swedish, ukrainian, polish, finnish, russian, danish, polish, brazilian, serbian, dutch, chinese
- libgphoto2-newjpeg.patch: removed, upstream</changelog>
  <changelog author="meissner@suse.com" date="1483617600">- updated to 2.5.12 release
  ptp2:
  * Canon EOS: more fixes for Canon EOS 5D Mark IV and Canon EOS 80D.
  * Parrot Sequoia support and property decoding
  * Nikon 1: Fixed Nikon 1 capture
  * Sony Alpha: various bugfixes.
  * New USB IDs:
  * Nikon Coolpix AW130
  * Nikon DSC D3400
  * Parrot Sequoia
  * GoPro Hero, Hero4 Silver, Hero +
  * bugfixes and cleanups
  canon:
  * fixed zoom on some older Canon Powershots
  translations:
  * updated polish, ukrainian, vietnamese, danish, french, svensk</changelog>
  <changelog author="meissner@suse.com" date="1490097600">- updated to 2.5.12.1 temporary snapshot
  ptp2:
  * iPhone iOS 10.2 storage handling fixed, added dynamic storage handling
  * Sony Alpha Live View support.
  * Canon EOS M series capture enabled. (might not fully work yet)
  * Various crashes and endless loops fixed that were found by the AFL fuzzer.
  * Various bugfixes in Nikon, Canon capture
  * New USB Ids:
  * Sony: SLT A37, DSC-RX100M5
  * Nikon KeyMission 360
  * Canon PowerShot G16
  * Canon EOS M5
  * Fuji Fujifilm XT-2
  * GoPro Hero 5 Black</changelog>
  <changelog author="meissner@suse.com" date="1491652800">- updated to 2.5.13 release
  See below in 2.5.12.1 pre relase, also:
  pentax:
  * Now using the pktriggercord codebase
  * lots of improvements
  * Please report missing Pentax K USB ids that are supported by pktriggercord!</changelog>
  <changelog author="meissner@suse.com" date="1496664000">- updated to 2.5.14 release
  * ptp2:
  * Canon EOS M remote control / capture support (M3, M5, M10 ... but not the original EOS M currently)
  * fix for Canon EOS camera crash bug introduced in 2.5.13.
  * Fuji XT-2 capture support (firmware update needed, might work for other Fuji XT too)
  * Canon EOS 77D added.
  * various bugfixes
  * added USB IDs:
  * Sony DSC-RX10M3, DSC-HX90V
  * Sony UMC-R10C
  * Nikon D5600,
  * Canon EOS 77D
  * Fuji XT-20
  * synced MTP device ids from libmtp
  * more issues fixed that were found by the AFL fuzzer
  * pentax:
  * Added Pentax K5-II, Pentax K3-II
  * libgphoto2_port:
  * fixed gp_log_remove_func
  * libgphoto2_port/vusb:
  * support f-number, shutterspeed, and exposurebias in the virtual PTP camera
  * all:
  * several issues found by gcc 7 fixed
  * translations:
  * updated ukrainian, polish, vietnamese, french, swedish</changelog>
  <changelog author="meissner@suse.com" date="1500206400">- libgphoto2-fix-fuji.patch: check before using a ptp property that
  is only available in some updated Fuji cameras (bsc#1048853)</changelog>
  <changelog author="meissner@suse.com" date="1506945600">- updated to 2.5.15 release
  - ptp2:
  * fuji: Fix cameras without new capture properties.
  * Canon EOS: config aspectratio, highisonr
  * Canon EOS: emit CAPTURECOMPLETE event
  * Canon EOS: whitebalanaceadjustment is 32bit signed, not 16bit signed
  * usb: better error feedback
  * fixed some bugs found by AFL fuzzing
  * Added USB ids:
  * Sony: A6500, HX400V
  * Nikon: D500, D7500
  * Olympus: VR360
  * Canon PowerShot: ELPH 350 HS
  * Canon EOS: 200D, Rebel T7i
  * Fuji: GFX 50 S
  * Ricoh Theta S, Theta SC
  - libgphoto2_port/vusb:
  * now default disabled as it confused people, enable with --enable-vusb
- libgphoto2-fix-fuji.patch: upstreamed</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Avoid running fdupes across partitions. Replace old tar
  options, old RPM shell variables by new constructs.
  Rectify RPM groups. Make macro style consistent again.</changelog>
  <changelog author="meissner@suse.com" date="1508155200">- updated to 2.5.16 release
  - ptp2: emergency bugfix as a previous bugfix broke some detection features</changelog>
  <changelog author="meissner@suse.com" date="1523880000">- updated to 2.5.17 release
  - ptp2:
  * Apple iOSX: handle root directory objects that have ParentObject==StorageID instead of 0
  * implement PTP 1.1 Manifest reading and hook into filesystem. currently only supported by Apple iOS.
  * Canon PowerShot CHDK live view support.
  * Canon EOS: prepare capture needs to wait a bit on a crucial place to get all events.
    might fix some PTP Device Busy reports.
  * Canon EOS: split bulk downloads into pieces of partial downloads. This might cure the Error 70.
  * Canon EOS: Improved EOS M capture
  * Canon CHDK: live preview capture support added
  * Added USB IDs:
  * Sony A7r III
  * Nikon CoolPix L430
  * Nikon D850
  * Canon EOS M2, M6, M100
  * Canon EOS 6D Mark II
  * Fuji Film X-Pro 2
  - pentax:
  * Code updates imported from pkremote
  - libgphoto2:
  * Report file changes via GP_EVENT_FILE_CHANGED (hooked up for Canon EOS currently)
  - translations:
  * updates spanish, chinese</changelog>
  <changelog author="meissner@suse.com" date="1526212800">- updated to 2.5.18 release (bsc#1091309)
  - ptp2:
    Canon EOS: Fixed file download on several EOS brands, broken by 2.5.17 release.
  - pentax:
    Added K01 and K70 models.</changelog>
</package>
<package pkgid="055c5aa69539e7a566950a6fb7064ec19e2d688343079f5e1429a1dec6aca580" name="libgphoto2-devel" arch="x86_64">
  <version epoch="0" ver="2.5.18" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.com" date="1436097600">- updated to 2.5.8 release
- all:
  * Missing COPYRIGHT headers added.
  * Bug fixes for issues detected by Coverity.
- ptp2:
  * Canon Powershot/IXUS CHDK support
    Install the CHDK firmware and then use "gphoto2 --set-config chdk=On" to enable.
  * Canon EOS: Implemented new capture method for new Canon EOS to avoid hangs.
  * Canon EOS: New configuration variable: continuousaf
  * Canon EOS: event output for focusinfo / focusmask
  * Nikon DSLR: New configuration variables: movieiso, movieshutterspeed, moviehighisonr
  * Nikon Coolpix A: also manually add override opcodes for capture (please report if it works)
  * New USB ids:
  Sony: DSC-HX60V, Alpha-A7S, Alpha-A77 M2, Alpha A5100
  Panasonic: DMC-LS2
  Canon EOS 7D Mark II, Canon EOS M3
  Canon Powershot SX520 HS
  Fuji Fujifilm X-E2
  Samsung NX1
  * Media Player IDs synced with the libmtp ID database.
  * Lots of bugfixes.
- libgphoto2_port/libusb1:
  * Prefer libusb1 over libusb0 if both are present.
  * Asynchronous interrupt handling, to avoid losing usb interrupts during other
    operations.
- libgphoto2.keyring: replaced by my new 4096 bit key</changelog>
  <changelog author="dimstar@opensuse.org" date="1438948800">- Change udev BuildRequires for pkgconfig(udev)
- use pkg-config --modversion udev instead of querying the package
  database. udev is often installed as udev-mini in OBS' build env,
  which the rpm -q udev call could not find.</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to baselibs for use to build wine in 64bit environments</changelog>
  <changelog author="meissner@suse.com" date="1447848000">- updated to 2.5.9 release
  Now maintained (source and issue tracker) in GIT at https://github.com/gphoto/libgphoto2
  ptp2:
  * PTP/IP: fixes to support Ricoh Theta and Sony Alpha over WLAN better
  * unification of timeout with backoff handling
  * Canon EOS: fixed a timeout bug on wait_event
  * Canon EOS: report protection status correctly
  * Canon EOS: unlock the ui on close
  * Sony: bulb mode support (in manual mode, shutterspeed and bulb option)
  * Hook up PTP OpenCapture opcode
  * Nikon J5 support. Nikon now hides prop and opcodes even differently.
  * Added USB IDs:
  - Sony SLT A77V, A7R2, HDR-PJ260VE
  - Nikon DSLR D5500
  - Canon EOS 760D, 5Ds, 5Ds R
  - Nikon Coolpix AW110, S6300, S6800, S3700, S2900
  - Nikon 1 S2, J5
  - Ricoh Theta m15 (USB and WLAN)
  - GoProp Hero 4
  canon: readd old Canon IXUS 30.
  translations: updated ukrainian, vietnamese, polish, italian</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1451390400">- Several changes/fixes to packaging:
  * API documentation was packaged twice, once in the -devel package
    and once in the main package (under different paths), split off
    to separate libgphoto2-devel-doc package
  * Use apidocs from source tar instead of using doxygen
  * package user documentation in separate libgphoto2-doc package
  * remove obsolete hotplug scripts</changelog>
  <changelog author="meissner@suse.com" date="1458734400">- updated to 2.5.10 release
  libgphoto2:
  * added gp_camera_list_config, gp_camera_get_single_config, gp_camera_set_single_config
    additional configuration APIs for faster access to single configuration values.
  ptp2:
  * allow generic opcode commands with parameters, config variable "opcode"
  * fixed pretending that Nikon Coolpix S series is a Nikon 1 S.
  * Nikon: fixed problem with SDRAM capture
  * Canon EOS: handle "no focus" during capture
  * Canon EOS: handle --new correctly
  * Canon Powershot: handle lack of object protection setting
  * Ricoh Theta: support shutterspeed configuration
  * added size checking to PTP unpacking primitives
  * various bugfixes
  * New ids:
  * Imported Media Players and Android phones from libmtp
  * Sony Alpha A7S II, ILCE 7M2
  * Kodak Z990
  * Nikon Coolpix L840, S3600
  * Leica SL
  * Olympus TG-620, E-M5 Mark 2
  * Canon EOS 1D C, 750D
  * Canon IXUS 160
  * Fuji Film X-T1, X-T10, A-610
  pentax:
  * fixed some crashes on non-existing config variables
  * use portable directory api (helps Visual Studio)
  libgphoto2_port/vusb:
  * Implemented a virtual PTP camera for test purposes.
  libgphoto2_port/disk:
  * Support exfat fuse filesystems.
  all:
  * fixed various issues found by Coverity static analyzer
  * removed unistd.h headers where not needed to help Visual Studio
  translations:
  * updated swedish, brazilian portuguese, danish, polish, ukrainian, vietnamese</changelog>
  <changelog author="meissner@suse.com" date="1465473600">- libgphoto2-newjpeg.patch: jpeg_mem_src gets a const buffer now
  in new libjpeg-turbo.</changelog>
  <changelog author="meissner@suse.com" date="1465473601">- require: udev in the library package for the hwdb refresher
  bsc#982339</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="meissner@suse.com" date="1479643200">- updated to 2.5.11 release
  * canon:
  * not experimental anymore, for some years
  * some bugfixes in configuration handling
  * ptp2:
  * canon: EOS capture improvements, also supporting new EOS
  * sony: tethering and trigger capture implemented, capture stability improvements
  * sony: exposure compensation setting fixed
  * sony: capture and autofocus configurations, similar to eosremoterelease
  * generic: fixed serialnumber retrieval
  * nikon: "autofocus" config variable for global autofocus enable/disable (default on, default liveview off)
  * various bugs fixed, stability improved
  * ptpip: allow different event ports. --port ptpip:IP:dataport:eventport
  * New ids reported:
  - Sony Alpha 7, DSC-RX100M4, NEX-7, DSC-HX20V, Alpha 6300, A7S II, A7,
  - Nikon DSC Df, D7200, D5, D810A, 1 V3
  - Canon EOS 1Dx Mark 3, 80D, 5D Mark IV
  - Canon Digital IXUS 180
  - various music players / android phones imported from libmtp
  * libgphoto2:
  * Speed up initial startup.
  * Win32: store settings in the "User Profile\.gphoto\settings" and not in C:\\Windows anymore.
  * gp_widget_changed() no longer clears the "changed" state to make this API more consistent.
    Use gp_widget_set_changed(widget,FALSE) to do so.
  * examples:
  * sample-photobooth: a sample program handling tethering, SIGUSR1 driven capture and SIGUSR2
    based configuration reading.
  * sample-afl: code to inject afl fuzzing data
  * translations:
  * updated swedish, ukrainian, polish, finnish, russian, danish, polish, brazilian, serbian, dutch, chinese
- libgphoto2-newjpeg.patch: removed, upstream</changelog>
  <changelog author="meissner@suse.com" date="1483617600">- updated to 2.5.12 release
  ptp2:
  * Canon EOS: more fixes for Canon EOS 5D Mark IV and Canon EOS 80D.
  * Parrot Sequoia support and property decoding
  * Nikon 1: Fixed Nikon 1 capture
  * Sony Alpha: various bugfixes.
  * New USB IDs:
  * Nikon Coolpix AW130
  * Nikon DSC D3400
  * Parrot Sequoia
  * GoPro Hero, Hero4 Silver, Hero +
  * bugfixes and cleanups
  canon:
  * fixed zoom on some older Canon Powershots
  translations:
  * updated polish, ukrainian, vietnamese, danish, french, svensk</changelog>
  <changelog author="meissner@suse.com" date="1490097600">- updated to 2.5.12.1 temporary snapshot
  ptp2:
  * iPhone iOS 10.2 storage handling fixed, added dynamic storage handling
  * Sony Alpha Live View support.
  * Canon EOS M series capture enabled. (might not fully work yet)
  * Various crashes and endless loops fixed that were found by the AFL fuzzer.
  * Various bugfixes in Nikon, Canon capture
  * New USB Ids:
  * Sony: SLT A37, DSC-RX100M5
  * Nikon KeyMission 360
  * Canon PowerShot G16
  * Canon EOS M5
  * Fuji Fujifilm XT-2
  * GoPro Hero 5 Black</changelog>
  <changelog author="meissner@suse.com" date="1491652800">- updated to 2.5.13 release
  See below in 2.5.12.1 pre relase, also:
  pentax:
  * Now using the pktriggercord codebase
  * lots of improvements
  * Please report missing Pentax K USB ids that are supported by pktriggercord!</changelog>
  <changelog author="meissner@suse.com" date="1496664000">- updated to 2.5.14 release
  * ptp2:
  * Canon EOS M remote control / capture support (M3, M5, M10 ... but not the original EOS M currently)
  * fix for Canon EOS camera crash bug introduced in 2.5.13.
  * Fuji XT-2 capture support (firmware update needed, might work for other Fuji XT too)
  * Canon EOS 77D added.
  * various bugfixes
  * added USB IDs:
  * Sony DSC-RX10M3, DSC-HX90V
  * Sony UMC-R10C
  * Nikon D5600,
  * Canon EOS 77D
  * Fuji XT-20
  * synced MTP device ids from libmtp
  * more issues fixed that were found by the AFL fuzzer
  * pentax:
  * Added Pentax K5-II, Pentax K3-II
  * libgphoto2_port:
  * fixed gp_log_remove_func
  * libgphoto2_port/vusb:
  * support f-number, shutterspeed, and exposurebias in the virtual PTP camera
  * all:
  * several issues found by gcc 7 fixed
  * translations:
  * updated ukrainian, polish, vietnamese, french, swedish</changelog>
  <changelog author="meissner@suse.com" date="1500206400">- libgphoto2-fix-fuji.patch: check before using a ptp property that
  is only available in some updated Fuji cameras (bsc#1048853)</changelog>
  <changelog author="meissner@suse.com" date="1506945600">- updated to 2.5.15 release
  - ptp2:
  * fuji: Fix cameras without new capture properties.
  * Canon EOS: config aspectratio, highisonr
  * Canon EOS: emit CAPTURECOMPLETE event
  * Canon EOS: whitebalanaceadjustment is 32bit signed, not 16bit signed
  * usb: better error feedback
  * fixed some bugs found by AFL fuzzing
  * Added USB ids:
  * Sony: A6500, HX400V
  * Nikon: D500, D7500
  * Olympus: VR360
  * Canon PowerShot: ELPH 350 HS
  * Canon EOS: 200D, Rebel T7i
  * Fuji: GFX 50 S
  * Ricoh Theta S, Theta SC
  - libgphoto2_port/vusb:
  * now default disabled as it confused people, enable with --enable-vusb
- libgphoto2-fix-fuji.patch: upstreamed</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Avoid running fdupes across partitions. Replace old tar
  options, old RPM shell variables by new constructs.
  Rectify RPM groups. Make macro style consistent again.</changelog>
  <changelog author="meissner@suse.com" date="1508155200">- updated to 2.5.16 release
  - ptp2: emergency bugfix as a previous bugfix broke some detection features</changelog>
  <changelog author="meissner@suse.com" date="1523880000">- updated to 2.5.17 release
  - ptp2:
  * Apple iOSX: handle root directory objects that have ParentObject==StorageID instead of 0
  * implement PTP 1.1 Manifest reading and hook into filesystem. currently only supported by Apple iOS.
  * Canon PowerShot CHDK live view support.
  * Canon EOS: prepare capture needs to wait a bit on a crucial place to get all events.
    might fix some PTP Device Busy reports.
  * Canon EOS: split bulk downloads into pieces of partial downloads. This might cure the Error 70.
  * Canon EOS: Improved EOS M capture
  * Canon CHDK: live preview capture support added
  * Added USB IDs:
  * Sony A7r III
  * Nikon CoolPix L430
  * Nikon D850
  * Canon EOS M2, M6, M100
  * Canon EOS 6D Mark II
  * Fuji Film X-Pro 2
  - pentax:
  * Code updates imported from pkremote
  - libgphoto2:
  * Report file changes via GP_EVENT_FILE_CHANGED (hooked up for Canon EOS currently)
  - translations:
  * updates spanish, chinese</changelog>
  <changelog author="meissner@suse.com" date="1526212800">- updated to 2.5.18 release (bsc#1091309)
  - ptp2:
    Canon EOS: Fixed file download on several EOS brands, broken by 2.5.17 release.
  - pentax:
    Added K01 and K70 models.</changelog>
</package>
<package pkgid="75dedab59e6d65649d78947d4c6c1537b4a13f0d1290909841c997d5f24209a6" name="libgphoto2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.5.18" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.com" date="1436097600">- updated to 2.5.8 release
- all:
  * Missing COPYRIGHT headers added.
  * Bug fixes for issues detected by Coverity.
- ptp2:
  * Canon Powershot/IXUS CHDK support
    Install the CHDK firmware and then use "gphoto2 --set-config chdk=On" to enable.
  * Canon EOS: Implemented new capture method for new Canon EOS to avoid hangs.
  * Canon EOS: New configuration variable: continuousaf
  * Canon EOS: event output for focusinfo / focusmask
  * Nikon DSLR: New configuration variables: movieiso, movieshutterspeed, moviehighisonr
  * Nikon Coolpix A: also manually add override opcodes for capture (please report if it works)
  * New USB ids:
  Sony: DSC-HX60V, Alpha-A7S, Alpha-A77 M2, Alpha A5100
  Panasonic: DMC-LS2
  Canon EOS 7D Mark II, Canon EOS M3
  Canon Powershot SX520 HS
  Fuji Fujifilm X-E2
  Samsung NX1
  * Media Player IDs synced with the libmtp ID database.
  * Lots of bugfixes.
- libgphoto2_port/libusb1:
  * Prefer libusb1 over libusb0 if both are present.
  * Asynchronous interrupt handling, to avoid losing usb interrupts during other
    operations.
- libgphoto2.keyring: replaced by my new 4096 bit key</changelog>
  <changelog author="dimstar@opensuse.org" date="1438948800">- Change udev BuildRequires for pkgconfig(udev)
- use pkg-config --modversion udev instead of querying the package
  database. udev is often installed as udev-mini in OBS' build env,
  which the rpm -q udev call could not find.</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to baselibs for use to build wine in 64bit environments</changelog>
  <changelog author="meissner@suse.com" date="1447848000">- updated to 2.5.9 release
  Now maintained (source and issue tracker) in GIT at https://github.com/gphoto/libgphoto2
  ptp2:
  * PTP/IP: fixes to support Ricoh Theta and Sony Alpha over WLAN better
  * unification of timeout with backoff handling
  * Canon EOS: fixed a timeout bug on wait_event
  * Canon EOS: report protection status correctly
  * Canon EOS: unlock the ui on close
  * Sony: bulb mode support (in manual mode, shutterspeed and bulb option)
  * Hook up PTP OpenCapture opcode
  * Nikon J5 support. Nikon now hides prop and opcodes even differently.
  * Added USB IDs:
  - Sony SLT A77V, A7R2, HDR-PJ260VE
  - Nikon DSLR D5500
  - Canon EOS 760D, 5Ds, 5Ds R
  - Nikon Coolpix AW110, S6300, S6800, S3700, S2900
  - Nikon 1 S2, J5
  - Ricoh Theta m15 (USB and WLAN)
  - GoProp Hero 4
  canon: readd old Canon IXUS 30.
  translations: updated ukrainian, vietnamese, polish, italian</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1451390400">- Several changes/fixes to packaging:
  * API documentation was packaged twice, once in the -devel package
    and once in the main package (under different paths), split off
    to separate libgphoto2-devel-doc package
  * Use apidocs from source tar instead of using doxygen
  * package user documentation in separate libgphoto2-doc package
  * remove obsolete hotplug scripts</changelog>
  <changelog author="meissner@suse.com" date="1458734400">- updated to 2.5.10 release
  libgphoto2:
  * added gp_camera_list_config, gp_camera_get_single_config, gp_camera_set_single_config
    additional configuration APIs for faster access to single configuration values.
  ptp2:
  * allow generic opcode commands with parameters, config variable "opcode"
  * fixed pretending that Nikon Coolpix S series is a Nikon 1 S.
  * Nikon: fixed problem with SDRAM capture
  * Canon EOS: handle "no focus" during capture
  * Canon EOS: handle --new correctly
  * Canon Powershot: handle lack of object protection setting
  * Ricoh Theta: support shutterspeed configuration
  * added size checking to PTP unpacking primitives
  * various bugfixes
  * New ids:
  * Imported Media Players and Android phones from libmtp
  * Sony Alpha A7S II, ILCE 7M2
  * Kodak Z990
  * Nikon Coolpix L840, S3600
  * Leica SL
  * Olympus TG-620, E-M5 Mark 2
  * Canon EOS 1D C, 750D
  * Canon IXUS 160
  * Fuji Film X-T1, X-T10, A-610
  pentax:
  * fixed some crashes on non-existing config variables
  * use portable directory api (helps Visual Studio)
  libgphoto2_port/vusb:
  * Implemented a virtual PTP camera for test purposes.
  libgphoto2_port/disk:
  * Support exfat fuse filesystems.
  all:
  * fixed various issues found by Coverity static analyzer
  * removed unistd.h headers where not needed to help Visual Studio
  translations:
  * updated swedish, brazilian portuguese, danish, polish, ukrainian, vietnamese</changelog>
  <changelog author="meissner@suse.com" date="1465473600">- libgphoto2-newjpeg.patch: jpeg_mem_src gets a const buffer now
  in new libjpeg-turbo.</changelog>
  <changelog author="meissner@suse.com" date="1465473601">- require: udev in the library package for the hwdb refresher
  bsc#982339</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="meissner@suse.com" date="1479643200">- updated to 2.5.11 release
  * canon:
  * not experimental anymore, for some years
  * some bugfixes in configuration handling
  * ptp2:
  * canon: EOS capture improvements, also supporting new EOS
  * sony: tethering and trigger capture implemented, capture stability improvements
  * sony: exposure compensation setting fixed
  * sony: capture and autofocus configurations, similar to eosremoterelease
  * generic: fixed serialnumber retrieval
  * nikon: "autofocus" config variable for global autofocus enable/disable (default on, default liveview off)
  * various bugs fixed, stability improved
  * ptpip: allow different event ports. --port ptpip:IP:dataport:eventport
  * New ids reported:
  - Sony Alpha 7, DSC-RX100M4, NEX-7, DSC-HX20V, Alpha 6300, A7S II, A7,
  - Nikon DSC Df, D7200, D5, D810A, 1 V3
  - Canon EOS 1Dx Mark 3, 80D, 5D Mark IV
  - Canon Digital IXUS 180
  - various music players / android phones imported from libmtp
  * libgphoto2:
  * Speed up initial startup.
  * Win32: store settings in the "User Profile\.gphoto\settings" and not in C:\\Windows anymore.
  * gp_widget_changed() no longer clears the "changed" state to make this API more consistent.
    Use gp_widget_set_changed(widget,FALSE) to do so.
  * examples:
  * sample-photobooth: a sample program handling tethering, SIGUSR1 driven capture and SIGUSR2
    based configuration reading.
  * sample-afl: code to inject afl fuzzing data
  * translations:
  * updated swedish, ukrainian, polish, finnish, russian, danish, polish, brazilian, serbian, dutch, chinese
- libgphoto2-newjpeg.patch: removed, upstream</changelog>
  <changelog author="meissner@suse.com" date="1483617600">- updated to 2.5.12 release
  ptp2:
  * Canon EOS: more fixes for Canon EOS 5D Mark IV and Canon EOS 80D.
  * Parrot Sequoia support and property decoding
  * Nikon 1: Fixed Nikon 1 capture
  * Sony Alpha: various bugfixes.
  * New USB IDs:
  * Nikon Coolpix AW130
  * Nikon DSC D3400
  * Parrot Sequoia
  * GoPro Hero, Hero4 Silver, Hero +
  * bugfixes and cleanups
  canon:
  * fixed zoom on some older Canon Powershots
  translations:
  * updated polish, ukrainian, vietnamese, danish, french, svensk</changelog>
  <changelog author="meissner@suse.com" date="1490097600">- updated to 2.5.12.1 temporary snapshot
  ptp2:
  * iPhone iOS 10.2 storage handling fixed, added dynamic storage handling
  * Sony Alpha Live View support.
  * Canon EOS M series capture enabled. (might not fully work yet)
  * Various crashes and endless loops fixed that were found by the AFL fuzzer.
  * Various bugfixes in Nikon, Canon capture
  * New USB Ids:
  * Sony: SLT A37, DSC-RX100M5
  * Nikon KeyMission 360
  * Canon PowerShot G16
  * Canon EOS M5
  * Fuji Fujifilm XT-2
  * GoPro Hero 5 Black</changelog>
  <changelog author="meissner@suse.com" date="1491652800">- updated to 2.5.13 release
  See below in 2.5.12.1 pre relase, also:
  pentax:
  * Now using the pktriggercord codebase
  * lots of improvements
  * Please report missing Pentax K USB ids that are supported by pktriggercord!</changelog>
  <changelog author="meissner@suse.com" date="1496664000">- updated to 2.5.14 release
  * ptp2:
  * Canon EOS M remote control / capture support (M3, M5, M10 ... but not the original EOS M currently)
  * fix for Canon EOS camera crash bug introduced in 2.5.13.
  * Fuji XT-2 capture support (firmware update needed, might work for other Fuji XT too)
  * Canon EOS 77D added.
  * various bugfixes
  * added USB IDs:
  * Sony DSC-RX10M3, DSC-HX90V
  * Sony UMC-R10C
  * Nikon D5600,
  * Canon EOS 77D
  * Fuji XT-20
  * synced MTP device ids from libmtp
  * more issues fixed that were found by the AFL fuzzer
  * pentax:
  * Added Pentax K5-II, Pentax K3-II
  * libgphoto2_port:
  * fixed gp_log_remove_func
  * libgphoto2_port/vusb:
  * support f-number, shutterspeed, and exposurebias in the virtual PTP camera
  * all:
  * several issues found by gcc 7 fixed
  * translations:
  * updated ukrainian, polish, vietnamese, french, swedish</changelog>
  <changelog author="meissner@suse.com" date="1500206400">- libgphoto2-fix-fuji.patch: check before using a ptp property that
  is only available in some updated Fuji cameras (bsc#1048853)</changelog>
  <changelog author="meissner@suse.com" date="1506945600">- updated to 2.5.15 release
  - ptp2:
  * fuji: Fix cameras without new capture properties.
  * Canon EOS: config aspectratio, highisonr
  * Canon EOS: emit CAPTURECOMPLETE event
  * Canon EOS: whitebalanaceadjustment is 32bit signed, not 16bit signed
  * usb: better error feedback
  * fixed some bugs found by AFL fuzzing
  * Added USB ids:
  * Sony: A6500, HX400V
  * Nikon: D500, D7500
  * Olympus: VR360
  * Canon PowerShot: ELPH 350 HS
  * Canon EOS: 200D, Rebel T7i
  * Fuji: GFX 50 S
  * Ricoh Theta S, Theta SC
  - libgphoto2_port/vusb:
  * now default disabled as it confused people, enable with --enable-vusb
- libgphoto2-fix-fuji.patch: upstreamed</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Avoid running fdupes across partitions. Replace old tar
  options, old RPM shell variables by new constructs.
  Rectify RPM groups. Make macro style consistent again.</changelog>
  <changelog author="meissner@suse.com" date="1508155200">- updated to 2.5.16 release
  - ptp2: emergency bugfix as a previous bugfix broke some detection features</changelog>
  <changelog author="meissner@suse.com" date="1523880000">- updated to 2.5.17 release
  - ptp2:
  * Apple iOSX: handle root directory objects that have ParentObject==StorageID instead of 0
  * implement PTP 1.1 Manifest reading and hook into filesystem. currently only supported by Apple iOS.
  * Canon PowerShot CHDK live view support.
  * Canon EOS: prepare capture needs to wait a bit on a crucial place to get all events.
    might fix some PTP Device Busy reports.
  * Canon EOS: split bulk downloads into pieces of partial downloads. This might cure the Error 70.
  * Canon EOS: Improved EOS M capture
  * Canon CHDK: live preview capture support added
  * Added USB IDs:
  * Sony A7r III
  * Nikon CoolPix L430
  * Nikon D850
  * Canon EOS M2, M6, M100
  * Canon EOS 6D Mark II
  * Fuji Film X-Pro 2
  - pentax:
  * Code updates imported from pkremote
  - libgphoto2:
  * Report file changes via GP_EVENT_FILE_CHANGED (hooked up for Canon EOS currently)
  - translations:
  * updates spanish, chinese</changelog>
  <changelog author="meissner@suse.com" date="1526212800">- updated to 2.5.18 release (bsc#1091309)
  - ptp2:
    Canon EOS: Fixed file download on several EOS brands, broken by 2.5.17 release.
  - pentax:
    Added K01 and K70 models.</changelog>
</package>
<package pkgid="179d429b55b88dada0e9469ba53e6bafa01d2b77477fa69318be20c006c1a6f2" name="libgphoto2-devel-doc" arch="x86_64">
  <version epoch="0" ver="2.5.18" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.com" date="1436097600">- updated to 2.5.8 release
- all:
  * Missing COPYRIGHT headers added.
  * Bug fixes for issues detected by Coverity.
- ptp2:
  * Canon Powershot/IXUS CHDK support
    Install the CHDK firmware and then use "gphoto2 --set-config chdk=On" to enable.
  * Canon EOS: Implemented new capture method for new Canon EOS to avoid hangs.
  * Canon EOS: New configuration variable: continuousaf
  * Canon EOS: event output for focusinfo / focusmask
  * Nikon DSLR: New configuration variables: movieiso, movieshutterspeed, moviehighisonr
  * Nikon Coolpix A: also manually add override opcodes for capture (please report if it works)
  * New USB ids:
  Sony: DSC-HX60V, Alpha-A7S, Alpha-A77 M2, Alpha A5100
  Panasonic: DMC-LS2
  Canon EOS 7D Mark II, Canon EOS M3
  Canon Powershot SX520 HS
  Fuji Fujifilm X-E2
  Samsung NX1
  * Media Player IDs synced with the libmtp ID database.
  * Lots of bugfixes.
- libgphoto2_port/libusb1:
  * Prefer libusb1 over libusb0 if both are present.
  * Asynchronous interrupt handling, to avoid losing usb interrupts during other
    operations.
- libgphoto2.keyring: replaced by my new 4096 bit key</changelog>
  <changelog author="dimstar@opensuse.org" date="1438948800">- Change udev BuildRequires for pkgconfig(udev)
- use pkg-config --modversion udev instead of querying the package
  database. udev is often installed as udev-mini in OBS' build env,
  which the rpm -q udev call could not find.</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to baselibs for use to build wine in 64bit environments</changelog>
  <changelog author="meissner@suse.com" date="1447848000">- updated to 2.5.9 release
  Now maintained (source and issue tracker) in GIT at https://github.com/gphoto/libgphoto2
  ptp2:
  * PTP/IP: fixes to support Ricoh Theta and Sony Alpha over WLAN better
  * unification of timeout with backoff handling
  * Canon EOS: fixed a timeout bug on wait_event
  * Canon EOS: report protection status correctly
  * Canon EOS: unlock the ui on close
  * Sony: bulb mode support (in manual mode, shutterspeed and bulb option)
  * Hook up PTP OpenCapture opcode
  * Nikon J5 support. Nikon now hides prop and opcodes even differently.
  * Added USB IDs:
  - Sony SLT A77V, A7R2, HDR-PJ260VE
  - Nikon DSLR D5500
  - Canon EOS 760D, 5Ds, 5Ds R
  - Nikon Coolpix AW110, S6300, S6800, S3700, S2900
  - Nikon 1 S2, J5
  - Ricoh Theta m15 (USB and WLAN)
  - GoProp Hero 4
  canon: readd old Canon IXUS 30.
  translations: updated ukrainian, vietnamese, polish, italian</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1451390400">- Several changes/fixes to packaging:
  * API documentation was packaged twice, once in the -devel package
    and once in the main package (under different paths), split off
    to separate libgphoto2-devel-doc package
  * Use apidocs from source tar instead of using doxygen
  * package user documentation in separate libgphoto2-doc package
  * remove obsolete hotplug scripts</changelog>
  <changelog author="meissner@suse.com" date="1458734400">- updated to 2.5.10 release
  libgphoto2:
  * added gp_camera_list_config, gp_camera_get_single_config, gp_camera_set_single_config
    additional configuration APIs for faster access to single configuration values.
  ptp2:
  * allow generic opcode commands with parameters, config variable "opcode"
  * fixed pretending that Nikon Coolpix S series is a Nikon 1 S.
  * Nikon: fixed problem with SDRAM capture
  * Canon EOS: handle "no focus" during capture
  * Canon EOS: handle --new correctly
  * Canon Powershot: handle lack of object protection setting
  * Ricoh Theta: support shutterspeed configuration
  * added size checking to PTP unpacking primitives
  * various bugfixes
  * New ids:
  * Imported Media Players and Android phones from libmtp
  * Sony Alpha A7S II, ILCE 7M2
  * Kodak Z990
  * Nikon Coolpix L840, S3600
  * Leica SL
  * Olympus TG-620, E-M5 Mark 2
  * Canon EOS 1D C, 750D
  * Canon IXUS 160
  * Fuji Film X-T1, X-T10, A-610
  pentax:
  * fixed some crashes on non-existing config variables
  * use portable directory api (helps Visual Studio)
  libgphoto2_port/vusb:
  * Implemented a virtual PTP camera for test purposes.
  libgphoto2_port/disk:
  * Support exfat fuse filesystems.
  all:
  * fixed various issues found by Coverity static analyzer
  * removed unistd.h headers where not needed to help Visual Studio
  translations:
  * updated swedish, brazilian portuguese, danish, polish, ukrainian, vietnamese</changelog>
  <changelog author="meissner@suse.com" date="1465473600">- libgphoto2-newjpeg.patch: jpeg_mem_src gets a const buffer now
  in new libjpeg-turbo.</changelog>
  <changelog author="meissner@suse.com" date="1465473601">- require: udev in the library package for the hwdb refresher
  bsc#982339</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="meissner@suse.com" date="1479643200">- updated to 2.5.11 release
  * canon:
  * not experimental anymore, for some years
  * some bugfixes in configuration handling
  * ptp2:
  * canon: EOS capture improvements, also supporting new EOS
  * sony: tethering and trigger capture implemented, capture stability improvements
  * sony: exposure compensation setting fixed
  * sony: capture and autofocus configurations, similar to eosremoterelease
  * generic: fixed serialnumber retrieval
  * nikon: "autofocus" config variable for global autofocus enable/disable (default on, default liveview off)
  * various bugs fixed, stability improved
  * ptpip: allow different event ports. --port ptpip:IP:dataport:eventport
  * New ids reported:
  - Sony Alpha 7, DSC-RX100M4, NEX-7, DSC-HX20V, Alpha 6300, A7S II, A7,
  - Nikon DSC Df, D7200, D5, D810A, 1 V3
  - Canon EOS 1Dx Mark 3, 80D, 5D Mark IV
  - Canon Digital IXUS 180
  - various music players / android phones imported from libmtp
  * libgphoto2:
  * Speed up initial startup.
  * Win32: store settings in the "User Profile\.gphoto\settings" and not in C:\\Windows anymore.
  * gp_widget_changed() no longer clears the "changed" state to make this API more consistent.
    Use gp_widget_set_changed(widget,FALSE) to do so.
  * examples:
  * sample-photobooth: a sample program handling tethering, SIGUSR1 driven capture and SIGUSR2
    based configuration reading.
  * sample-afl: code to inject afl fuzzing data
  * translations:
  * updated swedish, ukrainian, polish, finnish, russian, danish, polish, brazilian, serbian, dutch, chinese
- libgphoto2-newjpeg.patch: removed, upstream</changelog>
  <changelog author="meissner@suse.com" date="1483617600">- updated to 2.5.12 release
  ptp2:
  * Canon EOS: more fixes for Canon EOS 5D Mark IV and Canon EOS 80D.
  * Parrot Sequoia support and property decoding
  * Nikon 1: Fixed Nikon 1 capture
  * Sony Alpha: various bugfixes.
  * New USB IDs:
  * Nikon Coolpix AW130
  * Nikon DSC D3400
  * Parrot Sequoia
  * GoPro Hero, Hero4 Silver, Hero +
  * bugfixes and cleanups
  canon:
  * fixed zoom on some older Canon Powershots
  translations:
  * updated polish, ukrainian, vietnamese, danish, french, svensk</changelog>
  <changelog author="meissner@suse.com" date="1490097600">- updated to 2.5.12.1 temporary snapshot
  ptp2:
  * iPhone iOS 10.2 storage handling fixed, added dynamic storage handling
  * Sony Alpha Live View support.
  * Canon EOS M series capture enabled. (might not fully work yet)
  * Various crashes and endless loops fixed that were found by the AFL fuzzer.
  * Various bugfixes in Nikon, Canon capture
  * New USB Ids:
  * Sony: SLT A37, DSC-RX100M5
  * Nikon KeyMission 360
  * Canon PowerShot G16
  * Canon EOS M5
  * Fuji Fujifilm XT-2
  * GoPro Hero 5 Black</changelog>
  <changelog author="meissner@suse.com" date="1491652800">- updated to 2.5.13 release
  See below in 2.5.12.1 pre relase, also:
  pentax:
  * Now using the pktriggercord codebase
  * lots of improvements
  * Please report missing Pentax K USB ids that are supported by pktriggercord!</changelog>
  <changelog author="meissner@suse.com" date="1496664000">- updated to 2.5.14 release
  * ptp2:
  * Canon EOS M remote control / capture support (M3, M5, M10 ... but not the original EOS M currently)
  * fix for Canon EOS camera crash bug introduced in 2.5.13.
  * Fuji XT-2 capture support (firmware update needed, might work for other Fuji XT too)
  * Canon EOS 77D added.
  * various bugfixes
  * added USB IDs:
  * Sony DSC-RX10M3, DSC-HX90V
  * Sony UMC-R10C
  * Nikon D5600,
  * Canon EOS 77D
  * Fuji XT-20
  * synced MTP device ids from libmtp
  * more issues fixed that were found by the AFL fuzzer
  * pentax:
  * Added Pentax K5-II, Pentax K3-II
  * libgphoto2_port:
  * fixed gp_log_remove_func
  * libgphoto2_port/vusb:
  * support f-number, shutterspeed, and exposurebias in the virtual PTP camera
  * all:
  * several issues found by gcc 7 fixed
  * translations:
  * updated ukrainian, polish, vietnamese, french, swedish</changelog>
  <changelog author="meissner@suse.com" date="1500206400">- libgphoto2-fix-fuji.patch: check before using a ptp property that
  is only available in some updated Fuji cameras (bsc#1048853)</changelog>
  <changelog author="meissner@suse.com" date="1506945600">- updated to 2.5.15 release
  - ptp2:
  * fuji: Fix cameras without new capture properties.
  * Canon EOS: config aspectratio, highisonr
  * Canon EOS: emit CAPTURECOMPLETE event
  * Canon EOS: whitebalanaceadjustment is 32bit signed, not 16bit signed
  * usb: better error feedback
  * fixed some bugs found by AFL fuzzing
  * Added USB ids:
  * Sony: A6500, HX400V
  * Nikon: D500, D7500
  * Olympus: VR360
  * Canon PowerShot: ELPH 350 HS
  * Canon EOS: 200D, Rebel T7i
  * Fuji: GFX 50 S
  * Ricoh Theta S, Theta SC
  - libgphoto2_port/vusb:
  * now default disabled as it confused people, enable with --enable-vusb
- libgphoto2-fix-fuji.patch: upstreamed</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Avoid running fdupes across partitions. Replace old tar
  options, old RPM shell variables by new constructs.
  Rectify RPM groups. Make macro style consistent again.</changelog>
  <changelog author="meissner@suse.com" date="1508155200">- updated to 2.5.16 release
  - ptp2: emergency bugfix as a previous bugfix broke some detection features</changelog>
  <changelog author="meissner@suse.com" date="1523880000">- updated to 2.5.17 release
  - ptp2:
  * Apple iOSX: handle root directory objects that have ParentObject==StorageID instead of 0
  * implement PTP 1.1 Manifest reading and hook into filesystem. currently only supported by Apple iOS.
  * Canon PowerShot CHDK live view support.
  * Canon EOS: prepare capture needs to wait a bit on a crucial place to get all events.
    might fix some PTP Device Busy reports.
  * Canon EOS: split bulk downloads into pieces of partial downloads. This might cure the Error 70.
  * Canon EOS: Improved EOS M capture
  * Canon CHDK: live preview capture support added
  * Added USB IDs:
  * Sony A7r III
  * Nikon CoolPix L430
  * Nikon D850
  * Canon EOS M2, M6, M100
  * Canon EOS 6D Mark II
  * Fuji Film X-Pro 2
  - pentax:
  * Code updates imported from pkremote
  - libgphoto2:
  * Report file changes via GP_EVENT_FILE_CHANGED (hooked up for Canon EOS currently)
  - translations:
  * updates spanish, chinese</changelog>
  <changelog author="meissner@suse.com" date="1526212800">- updated to 2.5.18 release (bsc#1091309)
  - ptp2:
    Canon EOS: Fixed file download on several EOS brands, broken by 2.5.17 release.
  - pentax:
    Added K01 and K70 models.</changelog>
</package>
<package pkgid="04d0cb9af3c474ff5accaed3c8c0dea6ce1892ab602411cb06667bf00b523cc9" name="libgphoto2-doc" arch="x86_64">
  <version epoch="0" ver="2.5.18" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.com" date="1436097600">- updated to 2.5.8 release
- all:
  * Missing COPYRIGHT headers added.
  * Bug fixes for issues detected by Coverity.
- ptp2:
  * Canon Powershot/IXUS CHDK support
    Install the CHDK firmware and then use "gphoto2 --set-config chdk=On" to enable.
  * Canon EOS: Implemented new capture method for new Canon EOS to avoid hangs.
  * Canon EOS: New configuration variable: continuousaf
  * Canon EOS: event output for focusinfo / focusmask
  * Nikon DSLR: New configuration variables: movieiso, movieshutterspeed, moviehighisonr
  * Nikon Coolpix A: also manually add override opcodes for capture (please report if it works)
  * New USB ids:
  Sony: DSC-HX60V, Alpha-A7S, Alpha-A77 M2, Alpha A5100
  Panasonic: DMC-LS2
  Canon EOS 7D Mark II, Canon EOS M3
  Canon Powershot SX520 HS
  Fuji Fujifilm X-E2
  Samsung NX1
  * Media Player IDs synced with the libmtp ID database.
  * Lots of bugfixes.
- libgphoto2_port/libusb1:
  * Prefer libusb1 over libusb0 if both are present.
  * Asynchronous interrupt handling, to avoid losing usb interrupts during other
    operations.
- libgphoto2.keyring: replaced by my new 4096 bit key</changelog>
  <changelog author="dimstar@opensuse.org" date="1438948800">- Change udev BuildRequires for pkgconfig(udev)
- use pkg-config --modversion udev instead of querying the package
  database. udev is often installed as udev-mini in OBS' build env,
  which the rpm -q udev call could not find.</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to baselibs for use to build wine in 64bit environments</changelog>
  <changelog author="meissner@suse.com" date="1447848000">- updated to 2.5.9 release
  Now maintained (source and issue tracker) in GIT at https://github.com/gphoto/libgphoto2
  ptp2:
  * PTP/IP: fixes to support Ricoh Theta and Sony Alpha over WLAN better
  * unification of timeout with backoff handling
  * Canon EOS: fixed a timeout bug on wait_event
  * Canon EOS: report protection status correctly
  * Canon EOS: unlock the ui on close
  * Sony: bulb mode support (in manual mode, shutterspeed and bulb option)
  * Hook up PTP OpenCapture opcode
  * Nikon J5 support. Nikon now hides prop and opcodes even differently.
  * Added USB IDs:
  - Sony SLT A77V, A7R2, HDR-PJ260VE
  - Nikon DSLR D5500
  - Canon EOS 760D, 5Ds, 5Ds R
  - Nikon Coolpix AW110, S6300, S6800, S3700, S2900
  - Nikon 1 S2, J5
  - Ricoh Theta m15 (USB and WLAN)
  - GoProp Hero 4
  canon: readd old Canon IXUS 30.
  translations: updated ukrainian, vietnamese, polish, italian</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1451390400">- Several changes/fixes to packaging:
  * API documentation was packaged twice, once in the -devel package
    and once in the main package (under different paths), split off
    to separate libgphoto2-devel-doc package
  * Use apidocs from source tar instead of using doxygen
  * package user documentation in separate libgphoto2-doc package
  * remove obsolete hotplug scripts</changelog>
  <changelog author="meissner@suse.com" date="1458734400">- updated to 2.5.10 release
  libgphoto2:
  * added gp_camera_list_config, gp_camera_get_single_config, gp_camera_set_single_config
    additional configuration APIs for faster access to single configuration values.
  ptp2:
  * allow generic opcode commands with parameters, config variable "opcode"
  * fixed pretending that Nikon Coolpix S series is a Nikon 1 S.
  * Nikon: fixed problem with SDRAM capture
  * Canon EOS: handle "no focus" during capture
  * Canon EOS: handle --new correctly
  * Canon Powershot: handle lack of object protection setting
  * Ricoh Theta: support shutterspeed configuration
  * added size checking to PTP unpacking primitives
  * various bugfixes
  * New ids:
  * Imported Media Players and Android phones from libmtp
  * Sony Alpha A7S II, ILCE 7M2
  * Kodak Z990
  * Nikon Coolpix L840, S3600
  * Leica SL
  * Olympus TG-620, E-M5 Mark 2
  * Canon EOS 1D C, 750D
  * Canon IXUS 160
  * Fuji Film X-T1, X-T10, A-610
  pentax:
  * fixed some crashes on non-existing config variables
  * use portable directory api (helps Visual Studio)
  libgphoto2_port/vusb:
  * Implemented a virtual PTP camera for test purposes.
  libgphoto2_port/disk:
  * Support exfat fuse filesystems.
  all:
  * fixed various issues found by Coverity static analyzer
  * removed unistd.h headers where not needed to help Visual Studio
  translations:
  * updated swedish, brazilian portuguese, danish, polish, ukrainian, vietnamese</changelog>
  <changelog author="meissner@suse.com" date="1465473600">- libgphoto2-newjpeg.patch: jpeg_mem_src gets a const buffer now
  in new libjpeg-turbo.</changelog>
  <changelog author="meissner@suse.com" date="1465473601">- require: udev in the library package for the hwdb refresher
  bsc#982339</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="meissner@suse.com" date="1479643200">- updated to 2.5.11 release
  * canon:
  * not experimental anymore, for some years
  * some bugfixes in configuration handling
  * ptp2:
  * canon: EOS capture improvements, also supporting new EOS
  * sony: tethering and trigger capture implemented, capture stability improvements
  * sony: exposure compensation setting fixed
  * sony: capture and autofocus configurations, similar to eosremoterelease
  * generic: fixed serialnumber retrieval
  * nikon: "autofocus" config variable for global autofocus enable/disable (default on, default liveview off)
  * various bugs fixed, stability improved
  * ptpip: allow different event ports. --port ptpip:IP:dataport:eventport
  * New ids reported:
  - Sony Alpha 7, DSC-RX100M4, NEX-7, DSC-HX20V, Alpha 6300, A7S II, A7,
  - Nikon DSC Df, D7200, D5, D810A, 1 V3
  - Canon EOS 1Dx Mark 3, 80D, 5D Mark IV
  - Canon Digital IXUS 180
  - various music players / android phones imported from libmtp
  * libgphoto2:
  * Speed up initial startup.
  * Win32: store settings in the "User Profile\.gphoto\settings" and not in C:\\Windows anymore.
  * gp_widget_changed() no longer clears the "changed" state to make this API more consistent.
    Use gp_widget_set_changed(widget,FALSE) to do so.
  * examples:
  * sample-photobooth: a sample program handling tethering, SIGUSR1 driven capture and SIGUSR2
    based configuration reading.
  * sample-afl: code to inject afl fuzzing data
  * translations:
  * updated swedish, ukrainian, polish, finnish, russian, danish, polish, brazilian, serbian, dutch, chinese
- libgphoto2-newjpeg.patch: removed, upstream</changelog>
  <changelog author="meissner@suse.com" date="1483617600">- updated to 2.5.12 release
  ptp2:
  * Canon EOS: more fixes for Canon EOS 5D Mark IV and Canon EOS 80D.
  * Parrot Sequoia support and property decoding
  * Nikon 1: Fixed Nikon 1 capture
  * Sony Alpha: various bugfixes.
  * New USB IDs:
  * Nikon Coolpix AW130
  * Nikon DSC D3400
  * Parrot Sequoia
  * GoPro Hero, Hero4 Silver, Hero +
  * bugfixes and cleanups
  canon:
  * fixed zoom on some older Canon Powershots
  translations:
  * updated polish, ukrainian, vietnamese, danish, french, svensk</changelog>
  <changelog author="meissner@suse.com" date="1490097600">- updated to 2.5.12.1 temporary snapshot
  ptp2:
  * iPhone iOS 10.2 storage handling fixed, added dynamic storage handling
  * Sony Alpha Live View support.
  * Canon EOS M series capture enabled. (might not fully work yet)
  * Various crashes and endless loops fixed that were found by the AFL fuzzer.
  * Various bugfixes in Nikon, Canon capture
  * New USB Ids:
  * Sony: SLT A37, DSC-RX100M5
  * Nikon KeyMission 360
  * Canon PowerShot G16
  * Canon EOS M5
  * Fuji Fujifilm XT-2
  * GoPro Hero 5 Black</changelog>
  <changelog author="meissner@suse.com" date="1491652800">- updated to 2.5.13 release
  See below in 2.5.12.1 pre relase, also:
  pentax:
  * Now using the pktriggercord codebase
  * lots of improvements
  * Please report missing Pentax K USB ids that are supported by pktriggercord!</changelog>
  <changelog author="meissner@suse.com" date="1496664000">- updated to 2.5.14 release
  * ptp2:
  * Canon EOS M remote control / capture support (M3, M5, M10 ... but not the original EOS M currently)
  * fix for Canon EOS camera crash bug introduced in 2.5.13.
  * Fuji XT-2 capture support (firmware update needed, might work for other Fuji XT too)
  * Canon EOS 77D added.
  * various bugfixes
  * added USB IDs:
  * Sony DSC-RX10M3, DSC-HX90V
  * Sony UMC-R10C
  * Nikon D5600,
  * Canon EOS 77D
  * Fuji XT-20
  * synced MTP device ids from libmtp
  * more issues fixed that were found by the AFL fuzzer
  * pentax:
  * Added Pentax K5-II, Pentax K3-II
  * libgphoto2_port:
  * fixed gp_log_remove_func
  * libgphoto2_port/vusb:
  * support f-number, shutterspeed, and exposurebias in the virtual PTP camera
  * all:
  * several issues found by gcc 7 fixed
  * translations:
  * updated ukrainian, polish, vietnamese, french, swedish</changelog>
  <changelog author="meissner@suse.com" date="1500206400">- libgphoto2-fix-fuji.patch: check before using a ptp property that
  is only available in some updated Fuji cameras (bsc#1048853)</changelog>
  <changelog author="meissner@suse.com" date="1506945600">- updated to 2.5.15 release
  - ptp2:
  * fuji: Fix cameras without new capture properties.
  * Canon EOS: config aspectratio, highisonr
  * Canon EOS: emit CAPTURECOMPLETE event
  * Canon EOS: whitebalanaceadjustment is 32bit signed, not 16bit signed
  * usb: better error feedback
  * fixed some bugs found by AFL fuzzing
  * Added USB ids:
  * Sony: A6500, HX400V
  * Nikon: D500, D7500
  * Olympus: VR360
  * Canon PowerShot: ELPH 350 HS
  * Canon EOS: 200D, Rebel T7i
  * Fuji: GFX 50 S
  * Ricoh Theta S, Theta SC
  - libgphoto2_port/vusb:
  * now default disabled as it confused people, enable with --enable-vusb
- libgphoto2-fix-fuji.patch: upstreamed</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Avoid running fdupes across partitions. Replace old tar
  options, old RPM shell variables by new constructs.
  Rectify RPM groups. Make macro style consistent again.</changelog>
  <changelog author="meissner@suse.com" date="1508155200">- updated to 2.5.16 release
  - ptp2: emergency bugfix as a previous bugfix broke some detection features</changelog>
  <changelog author="meissner@suse.com" date="1523880000">- updated to 2.5.17 release
  - ptp2:
  * Apple iOSX: handle root directory objects that have ParentObject==StorageID instead of 0
  * implement PTP 1.1 Manifest reading and hook into filesystem. currently only supported by Apple iOS.
  * Canon PowerShot CHDK live view support.
  * Canon EOS: prepare capture needs to wait a bit on a crucial place to get all events.
    might fix some PTP Device Busy reports.
  * Canon EOS: split bulk downloads into pieces of partial downloads. This might cure the Error 70.
  * Canon EOS: Improved EOS M capture
  * Canon CHDK: live preview capture support added
  * Added USB IDs:
  * Sony A7r III
  * Nikon CoolPix L430
  * Nikon D850
  * Canon EOS M2, M6, M100
  * Canon EOS 6D Mark II
  * Fuji Film X-Pro 2
  - pentax:
  * Code updates imported from pkremote
  - libgphoto2:
  * Report file changes via GP_EVENT_FILE_CHANGED (hooked up for Canon EOS currently)
  - translations:
  * updates spanish, chinese</changelog>
  <changelog author="meissner@suse.com" date="1526212800">- updated to 2.5.18 release (bsc#1091309)
  - ptp2:
    Canon EOS: Fixed file download on several EOS brands, broken by 2.5.17 release.
  - pentax:
    Added K01 and K70 models.</changelog>
</package>
<package pkgid="5d2e6538cceee10ea2587033b0af34f2d3198df5258c86aca69c38d3ffee3b43" name="libgthread-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 2.53.2:
  + A few new number parsing functions have been added. These have
    better error handling than the existing ones.
  + glib-mkenums now supports /*&lt; private &gt;*/ and /*&lt; public &gt;*/.
  + GSettings now consider XDG_DATA_HOME in addition to
    XDG_DATA_DIRS.
  + Bugs fixed: bgo#674885, bgo#698064, bgo#732000, bgo#734946,
    bgo#741335, bgo#748263, bgo#776876, bgo#777030, bgo#780300,
    bgo#780309, bgo#781755, bgo#781826, bgo#781830, bgo#781847,
    bgo#781867, bgo#782068, bgo#782075, bgo#782089, bgo#782162,
    bgo#782237, bgo#782311, bgo#782628.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651201">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
</package>
<package pkgid="1a6d893f90ae1cf59604c6079656d7d26661aafe28f63504b5c2afb59ad25c35" name="libgthread-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 2.53.2:
  + A few new number parsing functions have been added. These have
    better error handling than the existing ones.
  + glib-mkenums now supports /*&lt; private &gt;*/ and /*&lt; public &gt;*/.
  + GSettings now consider XDG_DATA_HOME in addition to
    XDG_DATA_DIRS.
  + Bugs fixed: bgo#674885, bgo#698064, bgo#732000, bgo#734946,
    bgo#741335, bgo#748263, bgo#776876, bgo#777030, bgo#780300,
    bgo#780309, bgo#781755, bgo#781826, bgo#781830, bgo#781847,
    bgo#781867, bgo#782068, bgo#782075, bgo#782089, bgo#782162,
    bgo#782237, bgo#782311, bgo#782628.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651201">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
</package>
<package pkgid="54778ae30790b3f3ca93ca3be61d74858cf4732ab0cba0e33386bd8046675378" name="libgtk-3-0" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="9b94b2a0078990dd801c26c74dc55bcf341e338d302fc9b691062a9083c03043" name="libgtk-3-0-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="5799ea9a85734cc6fc971d2bdbd6d79f24e1964ac4b7dd0d10c9b08f0c2cc6b6" name="libguile-2_0-22" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="lp150.3.3.1"/>
  <changelog author="dvaleev@suse.com" date="1335182400">- mark this threads test as unresolved since it may produce false
  negatives, depending on the behavior/timing of the garbage
  collector.</changelog>
  <changelog author="coolo@suse.com" date="1340971200">- libffi-devel is more generic than specific gcc versions (that no longer
  exist in factory)</changelog>
  <changelog author="pgajdos@suse.com" date="1342008000">- update to 2.0.6:
  * Notable changes
  * * New optimization pass: common subexpression elimination (CSE)
  * * Improvements to the partial evaluator
  * * Run finalizers asynchronously in asyncs
  * * Update SRFI-14 character sets to Unicode 6.1
  * * Better source information for datums
  * * Improved error and warning messages
  * * A few important bug fixes in the HTTP modules.
  * * Pretty-print improvements
  * * Fix memory leak involving applicable SMOBs
  * * Support for HTTP/1.1 chunked transfer coding
  * * Micro-optimizations
  * * Incompatible change to `scandir'
  * New interfaces
  * * New C function: `scm_to_pointer'
  * * New C inline functions: `scm_new_smob', `scm_new_double_smob'
  * * (ice-9 format): Add ~h specifier for localized number output.
  * * (web response): New procedure: `response-must-not-include-body?'
  * * New predicate: 'supports-source-properties?'
  * * New C helpers: `scm_c_values', `scm_c_nvalues'
  * * Newly public inline C function: `scm_unget_byte'
  * * (language tree-il): New functions: `tree-il=?', `tree-il-hash'
  * * New fluid: `%default-port-conversion-strategy'
  * * New syntax: `=&gt;' within `case'
  * * (web http): `make-chunked-input-port', `make-chunked-output-port'
  * * (web http): `declare-opaque-header!'
  * New deprecations
  * * `close-io-port' deprecated
  * * `scm_sym2var' deprecated
  * * Lookup closures deprecated
  * Bug fixes
  * * Fix use of unitialized stat buffer in search-path of absolute paths.
  * * Avoid calling `freelocale' with a NULL argument.
  * * Work around erroneous tr_TR locale in Darwin 8 in tests.
  * * Fix `getaddrinfo' test for Darwin 8.
  * * Use Gnulib's `regex' module for better regex portability.
  * * `source-properties' and friends work on any object
  * * Rewrite open-process in C, for robustness related to threads and fork
  * * Fix &lt;TAG&gt;vector-length when applied to other uniform vector types
  * * Fix escape-only prompt optimization (was disabled previously)
  * * Fix a segfault when /dev/urandom is not accessible
  * * Fix flush on soft ports, so that it actually runs.
  * * Better compatibility of SRFI-9 records with core records
  * * Fix and clarify documentation of `sorted?'.
  * * Fix IEEE-754 endianness conversion in bytevectors.
  * * Correct thunk check in the `wind' instruction.
  * * Add @acronym support to texinfo modules
  * * Fix docbook-&gt;texi for &lt;ulink&gt; without URL
  * * Fix `setvbuf' to leave the line/column number unchanged.
  * * Add missing public declaration for `scm_take_from_input_buffers'.
  * * Fix relative file name canonicalization with empty %LOAD-PATH entries.
  * * Import newer (ice-9 match) from Chibi-Scheme.
  * * Fix unbound variables and unbound values in ECMAScript runtime.
  * * Make SRFI-6 string ports Unicode-capable.
- removed patches:
  guile-turn-off-gc-test.patch
  guile-fix_fsf_add.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1354536000">- update to 2.0.7:
  * Notable changes
  * * SRFI-105 curly infix expressions are supported
  * * Reader options may now be per-port
  * * Futures may now be nested
  * * `GUILE_LOAD_PATH' et al can now add directories to the end of
    the path
  * * `load-in-vicinity' search for `.go' files in `%load-compiled-path'
  * * Extension search order fixed, and LD_LIBRARY_PATH preserved
  * * Optimize calls to `equal?' or `eqv?' with a constant argument
  * Manual updates
  * * SRFI-9 records now documented under "Compound Data Types"
  * * (ice-9 and-let-star) and (ice-9 curried-definitions) now documented
  * New interfaces
  * * New "functional record setters" as a GNU extension of SRFI-9
  * * web: New `http-get*', `response-body-port', and `text-content-type?'
    procedures
  * * `string-split' accepts character sets and predicates
  * * R6RS SRFI support
  * * `define-public' is no a longer curried definition by default
  etc. see NEWS</changelog>
  <changelog author="pgajdos@suse.com" date="1355745600">- fixed build: net-db.test takes EAI_SYSTEM error by
  * net-db-test.patch [bnc#794696]
- turn off one test in gc.test
  * gc-test.patch
    http://lists.gnu.org/archive/html/bug-guile/2012-07/msg00069.html</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1360065600">- move .so file to libguilereadline package [bnc#765436]</changelog>
  <changelog author="pgajdos@suse.com" date="1366027200">- updated to 2.0.9:
  * * New keyword arguments for procedures that open files
  * * Numerics improvements
  * * New optimizations
  * * `peek-char' no longer consumes EOF
  * * SLIB compatibility restored
  * * Better ,trace REPL command
  * * Better docstring syntax supported for `case-lambda'
  * * Improved handling of Unicode byte order marks
  etc. see NEWS for more/details
- removed unneeded gc-test.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1396267200">- updated to 2.0.11:
  * * New GDB extension to support Guile
  * * Improved integration between R6RS and native Guile exceptions
  * * Support for HTTP proxies
  * * Lexical syntax improvements
  * ** Support |...| symbol notation
  * ** Support '#true' and '#false' notation for booleans.
  * ** Recognize '#\escape' character name.
  * ** Accept "\|" in string literals.
  * * Custom binary input ports now support 'setvbuf'.
  * * SRFI-4 predicates and length accessors no longer accept arrays.
  * * GUILE_PROGS now supports specifying a minimum required version.
  etc, see NEWS.</changelog>
  <changelog author="pgajdos@suse.com" date="1398168000">- install libguile*-gdb.scm into
  %{_datadir}/gdb/auto-load%{_libdir}/  [bnc#874028]</changelog>
  <changelog author="pgajdos@suse.com" date="1423137600">- use fake buildstamp [bnc#916347]
  + guile-fake-buildstamp.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425902400">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="pgajdos@suse.com" date="1444219200">- libguile require glibc-locale [bnc#948804]</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1469102400">- updated to 2.0.12:
  * * FFI: Add support for functions that set 'errno'
  * * The #!r6rs directive now influences read syntax
  * * 'read' now accepts "\(" as equivalent to "("
  * * SRFI-14 character data set upgraded to Unicode 8.0.0
  * * SRFI-19 table of leap seconds updated
  * * 'string-hash', 'read-string', and 'write' have been optimized
  * * GOOPS bug fix for inherited accessor methods
  for complete list of changes see NEWS
- refreshed patches
- add key of Andy Wingo to guile.keyring</changelog>
  <changelog author="mpluskal@suse.com" date="1476532800">- Update to version 2.0.13
  * Security fixes
    + CVE-2016-8606: REPL server now protects against HTTP
    inter-protocol attacks
    + CVE-2016-8605: 'mkdir' procedure no longer calls umask(2)
  * Several bugfixes and improvements (for details see NEWS file)
- Fetch keyring from savannah
- Use https for all urls</changelog>
  <changelog author="schwab@suse.de" date="1478606400">- repl-server-test.patch: fix race in 00-repl-server.test</changelog>
  <changelog author="mpluskal@suse.com" date="1487332800">- Update to version 2.0.14:
  * Bug fixes
    + Builds of .go files and of Guile itself are now
    bit-reproducible
    + 'number-&gt;locale-string' and 'monetary-amount-&gt;locale-string'
    fixes
    + (system base target) now recognizes "sh3" as a
    cross-compilation target
    + Fix race condition in '00-repl-server.test'
    + 'scandir' from (ice-9 ftw) no longer calls 'stat' for each
    entry
  * Several documentation improvements
- Drop no longer needed patches:
  * guile-fake-buildstamp.patch
  * repl-server-test.patch
- Small packaging cleanup with help of spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Format with spec-cleaner
- Fix build with new glibc 2.27 bsc#1079837:
  * guile-disable-int-tests.patch
- Use %license macro to install license</changelog>
  <changelog author="tchvatal@suse.com" date="1519819201">- Add patch from Fedora not to link to libgc in all consumer libs:
  * guile-2.0.14-gc_pkgconfig_private.patch
- Add _constraints file to ensure we can build properly</changelog>
  <changelog author="tchvatal@suse.com" date="1519819202">- Add back the require on gc-devel as it is still needed for the
  non .pc using packages (eg autotools)</changelog>
  <changelog author="tdevries@suse.com" date="1540123200">- Use 'scm_from_utf8_{string,symbol,keyword}' for C string literals
  where appropriate [bsc#1110085]
  * guile-use-utf8.patch
- Add standalone test test-ja_JP.sjis [bsc#1110085]
  * guile-add-test-ja_JP.sjis.patch
    https://debbugs.gnu.org/cgi/bugreport.cgi?bug=33044#43</changelog>
</package>
<package pkgid="23fde647f809a4e8002803332e54cbbf43a94cd5865f7631f305c343d040845e" name="libguilereadline-v-18-18" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="lp150.3.3.1"/>
  <changelog author="dvaleev@suse.com" date="1335182400">- mark this threads test as unresolved since it may produce false
  negatives, depending on the behavior/timing of the garbage
  collector.</changelog>
  <changelog author="coolo@suse.com" date="1340971200">- libffi-devel is more generic than specific gcc versions (that no longer
  exist in factory)</changelog>
  <changelog author="pgajdos@suse.com" date="1342008000">- update to 2.0.6:
  * Notable changes
  * * New optimization pass: common subexpression elimination (CSE)
  * * Improvements to the partial evaluator
  * * Run finalizers asynchronously in asyncs
  * * Update SRFI-14 character sets to Unicode 6.1
  * * Better source information for datums
  * * Improved error and warning messages
  * * A few important bug fixes in the HTTP modules.
  * * Pretty-print improvements
  * * Fix memory leak involving applicable SMOBs
  * * Support for HTTP/1.1 chunked transfer coding
  * * Micro-optimizations
  * * Incompatible change to `scandir'
  * New interfaces
  * * New C function: `scm_to_pointer'
  * * New C inline functions: `scm_new_smob', `scm_new_double_smob'
  * * (ice-9 format): Add ~h specifier for localized number output.
  * * (web response): New procedure: `response-must-not-include-body?'
  * * New predicate: 'supports-source-properties?'
  * * New C helpers: `scm_c_values', `scm_c_nvalues'
  * * Newly public inline C function: `scm_unget_byte'
  * * (language tree-il): New functions: `tree-il=?', `tree-il-hash'
  * * New fluid: `%default-port-conversion-strategy'
  * * New syntax: `=&gt;' within `case'
  * * (web http): `make-chunked-input-port', `make-chunked-output-port'
  * * (web http): `declare-opaque-header!'
  * New deprecations
  * * `close-io-port' deprecated
  * * `scm_sym2var' deprecated
  * * Lookup closures deprecated
  * Bug fixes
  * * Fix use of unitialized stat buffer in search-path of absolute paths.
  * * Avoid calling `freelocale' with a NULL argument.
  * * Work around erroneous tr_TR locale in Darwin 8 in tests.
  * * Fix `getaddrinfo' test for Darwin 8.
  * * Use Gnulib's `regex' module for better regex portability.
  * * `source-properties' and friends work on any object
  * * Rewrite open-process in C, for robustness related to threads and fork
  * * Fix &lt;TAG&gt;vector-length when applied to other uniform vector types
  * * Fix escape-only prompt optimization (was disabled previously)
  * * Fix a segfault when /dev/urandom is not accessible
  * * Fix flush on soft ports, so that it actually runs.
  * * Better compatibility of SRFI-9 records with core records
  * * Fix and clarify documentation of `sorted?'.
  * * Fix IEEE-754 endianness conversion in bytevectors.
  * * Correct thunk check in the `wind' instruction.
  * * Add @acronym support to texinfo modules
  * * Fix docbook-&gt;texi for &lt;ulink&gt; without URL
  * * Fix `setvbuf' to leave the line/column number unchanged.
  * * Add missing public declaration for `scm_take_from_input_buffers'.
  * * Fix relative file name canonicalization with empty %LOAD-PATH entries.
  * * Import newer (ice-9 match) from Chibi-Scheme.
  * * Fix unbound variables and unbound values in ECMAScript runtime.
  * * Make SRFI-6 string ports Unicode-capable.
- removed patches:
  guile-turn-off-gc-test.patch
  guile-fix_fsf_add.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1354536000">- update to 2.0.7:
  * Notable changes
  * * SRFI-105 curly infix expressions are supported
  * * Reader options may now be per-port
  * * Futures may now be nested
  * * `GUILE_LOAD_PATH' et al can now add directories to the end of
    the path
  * * `load-in-vicinity' search for `.go' files in `%load-compiled-path'
  * * Extension search order fixed, and LD_LIBRARY_PATH preserved
  * * Optimize calls to `equal?' or `eqv?' with a constant argument
  * Manual updates
  * * SRFI-9 records now documented under "Compound Data Types"
  * * (ice-9 and-let-star) and (ice-9 curried-definitions) now documented
  * New interfaces
  * * New "functional record setters" as a GNU extension of SRFI-9
  * * web: New `http-get*', `response-body-port', and `text-content-type?'
    procedures
  * * `string-split' accepts character sets and predicates
  * * R6RS SRFI support
  * * `define-public' is no a longer curried definition by default
  etc. see NEWS</changelog>
  <changelog author="pgajdos@suse.com" date="1355745600">- fixed build: net-db.test takes EAI_SYSTEM error by
  * net-db-test.patch [bnc#794696]
- turn off one test in gc.test
  * gc-test.patch
    http://lists.gnu.org/archive/html/bug-guile/2012-07/msg00069.html</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1360065600">- move .so file to libguilereadline package [bnc#765436]</changelog>
  <changelog author="pgajdos@suse.com" date="1366027200">- updated to 2.0.9:
  * * New keyword arguments for procedures that open files
  * * Numerics improvements
  * * New optimizations
  * * `peek-char' no longer consumes EOF
  * * SLIB compatibility restored
  * * Better ,trace REPL command
  * * Better docstring syntax supported for `case-lambda'
  * * Improved handling of Unicode byte order marks
  etc. see NEWS for more/details
- removed unneeded gc-test.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1396267200">- updated to 2.0.11:
  * * New GDB extension to support Guile
  * * Improved integration between R6RS and native Guile exceptions
  * * Support for HTTP proxies
  * * Lexical syntax improvements
  * ** Support |...| symbol notation
  * ** Support '#true' and '#false' notation for booleans.
  * ** Recognize '#\escape' character name.
  * ** Accept "\|" in string literals.
  * * Custom binary input ports now support 'setvbuf'.
  * * SRFI-4 predicates and length accessors no longer accept arrays.
  * * GUILE_PROGS now supports specifying a minimum required version.
  etc, see NEWS.</changelog>
  <changelog author="pgajdos@suse.com" date="1398168000">- install libguile*-gdb.scm into
  %{_datadir}/gdb/auto-load%{_libdir}/  [bnc#874028]</changelog>
  <changelog author="pgajdos@suse.com" date="1423137600">- use fake buildstamp [bnc#916347]
  + guile-fake-buildstamp.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425902400">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="pgajdos@suse.com" date="1444219200">- libguile require glibc-locale [bnc#948804]</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1469102400">- updated to 2.0.12:
  * * FFI: Add support for functions that set 'errno'
  * * The #!r6rs directive now influences read syntax
  * * 'read' now accepts "\(" as equivalent to "("
  * * SRFI-14 character data set upgraded to Unicode 8.0.0
  * * SRFI-19 table of leap seconds updated
  * * 'string-hash', 'read-string', and 'write' have been optimized
  * * GOOPS bug fix for inherited accessor methods
  for complete list of changes see NEWS
- refreshed patches
- add key of Andy Wingo to guile.keyring</changelog>
  <changelog author="mpluskal@suse.com" date="1476532800">- Update to version 2.0.13
  * Security fixes
    + CVE-2016-8606: REPL server now protects against HTTP
    inter-protocol attacks
    + CVE-2016-8605: 'mkdir' procedure no longer calls umask(2)
  * Several bugfixes and improvements (for details see NEWS file)
- Fetch keyring from savannah
- Use https for all urls</changelog>
  <changelog author="schwab@suse.de" date="1478606400">- repl-server-test.patch: fix race in 00-repl-server.test</changelog>
  <changelog author="mpluskal@suse.com" date="1487332800">- Update to version 2.0.14:
  * Bug fixes
    + Builds of .go files and of Guile itself are now
    bit-reproducible
    + 'number-&gt;locale-string' and 'monetary-amount-&gt;locale-string'
    fixes
    + (system base target) now recognizes "sh3" as a
    cross-compilation target
    + Fix race condition in '00-repl-server.test'
    + 'scandir' from (ice-9 ftw) no longer calls 'stat' for each
    entry
  * Several documentation improvements
- Drop no longer needed patches:
  * guile-fake-buildstamp.patch
  * repl-server-test.patch
- Small packaging cleanup with help of spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Format with spec-cleaner
- Fix build with new glibc 2.27 bsc#1079837:
  * guile-disable-int-tests.patch
- Use %license macro to install license</changelog>
  <changelog author="tchvatal@suse.com" date="1519819201">- Add patch from Fedora not to link to libgc in all consumer libs:
  * guile-2.0.14-gc_pkgconfig_private.patch
- Add _constraints file to ensure we can build properly</changelog>
  <changelog author="tchvatal@suse.com" date="1519819202">- Add back the require on gc-devel as it is still needed for the
  non .pc using packages (eg autotools)</changelog>
  <changelog author="tdevries@suse.com" date="1540123200">- Use 'scm_from_utf8_{string,symbol,keyword}' for C string literals
  where appropriate [bsc#1110085]
  * guile-use-utf8.patch
- Add standalone test test-ja_JP.sjis [bsc#1110085]
  * guile-add-test-ja_JP.sjis.patch
    https://debbugs.gnu.org/cgi/bugreport.cgi?bug=33044#43</changelog>
</package>
<package pkgid="3da3dea7ab901ae9c89092134933dda2b6c5106bfad9319673bbcddab6211073" name="libibdm1" arch="x86_64">
  <version epoch="0" ver="1.5.7.0.2" rel="lp150.2.3.1"/>
  <changelog author="jjolly@novell.com" date="1273838400">- Updated the ibutils tarball to the one found in the OFED 1.4.2
  release.  There is no version change as the ibutils package in
  OFED changed, but did not change version numbers.</changelog>
  <changelog author="jjolly@novell.com" date="1274702400">- Updated to v1.5.4 from OFED 1.5.1
- Removed patch for libreplace
- Updated the retval patch to include a fix to CredLoops.cpp</changelog>
  <changelog author="pth@suse.de" date="1336478400">- BuildRequire automake, autoconf and libtool.</changelog>
  <changelog author="pth@suse.de" date="1347364800">- Update to 1.5.7-0.1.g05a9d1a from OFED 1.5.4.1:
  New Features:
  * Added scripts that convert OSM dump files for ibdmchk
  ibutils: added support for GUIDInfo MAD in ibis and simulator
  Major Bugs Fixed:
  * ibmgtsim: fixed various bugs with running simulations
  * ibutils: fixed rpmbuild with and w/o ibmgtsim
  Known Issues:
  * Ibdiagnet "-wt" option may generate a bad topology file when
    running on a cluster that contains complex switch systems.
  * ibutils works only partially on any distro with TCL 8.5.
    ibdiagnet/ibdiagpath/ibis don't work with TCL 8.5 due to a change
    in TCL behavior: the built-in TCL function "dump" on TCL 8.5
    always includes field names.
    Until the fix, any user script that uses ibis needs to be fixed
    in order to function correctly on TCL 8.5
- Adapt the patch.
- Package static library in a devel-static package.</changelog>
  <changelog author="pth@suse.de" date="1377691200">- Add ibutils-tk-8.6.patch to include tk 8.6 in the check for accetable
  tk versions.
- Add ibutils-add_shebang.patch to add a shebang to git_version.tcl
  which is installed in _bindir.
- Run fdupes to eleminate file duplication.
- Add a rpmlintrc file to silence useless warnings.
- Add ibutils-autotools.patch to modify the neccessary files
  so that autoreconf can be called.
- (Build)Require graphviz-tcl as ibdiag won't work correctly without
  the graphviz tcl plugin.</changelog>
  <changelog author="pth@suse.de" date="1389960000">- Update to OFED 3.12 daily snapshot
- Use spdx.org format for license specification</changelog>
  <changelog author="pth@suse.de" date="1401796800">- Update to OFED 3.12 final.</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Do not build and install the dynamic library so remove all
  traces.
- Remove .la files as they were only needed for the static libs.</changelog>
  <changelog author="pth@suse.de" date="1405684800">- Remove the bogus rpath from ibdmsh and that vein do not link
  ibdmsh statically.</changelog>
  <changelog author="p.drouand@gmail.com" date="1423828800">- Update to version 1.5.7-0.2
  * No changelog available
- Remove ibutils-add_shebang.patch; not needed anymore
- Use download Url as source</changelog>
  <changelog author="mgorse@suse.com" date="1424692800">- Add COPYING to package docs.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1490875200">- Add ibutils-diagui.patch to allow UI less compilation
- Add a separate ibutils-ui package for UI tools. BSC #1030891</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Normalize all macros
- Replace "1 tool" by one tool for better reading</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Scriptlets and %packages need not be wrapped in %if.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496404800">- Fix ibutils-diagui.patch to not build ibdiagui
  with the ibutils package.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527076800">- Move ibdm and ibis library directories to libibdm1 package (bsc#1092166)</changelog>
</package>
<package pkgid="9cf190678ddb307853282a003d39db592eb44f2ce192bae910692dbc347b3012" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="5ecfbecec3c8db09f8539235df01aea46010fa055e838b124ce235a247f61f2b" name="libipa_hbac0" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="a8c72467d952f7f7584e47f72da0b46cdfa31adf3a1448b6c4b9aaca8c4ce93b" name="libirs-devel" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="23849aff178c5f8c3a58673e8e49584ffc9808550a2b017c918fadfc9a148115" name="libirs-devel" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="a6a7ae35ebd38e5b7ba47c585c60da42448513fa3fc46160c8f783ad34d62ff8" name="libirs160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="b40bc73b7c9b4843f845915744d1ffa1e05435e3fcd0e1ef82c80ff082c1f192" name="libirs160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="7a728e6acaf3b7e2c2103a4e10958fe03f861d408daa3e1da0d00239f2022224" name="libirs160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="8e6ba3bd744a0b129b4c553936069c1f208c0531148f448e3d23180a86e98f89" name="libirs160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="6d7d1302eca9c75241c92fde16c04c7eaba8becd6aa777b03d24503c62e68798" name="libisc166-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="20042745b1447ae46571d25d09ecc33e4467a829e334407f4540539b87b7835b" name="libisc166-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="f1f1b7ed0513fd3445ad4e1600413d0cd926d9f2e411ee4cd74b2873eca31415" name="libisc166" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="eb1a35c5e2aad57b6a6d158f073cbc484e1c0ec5a276ff957872ffb47763052f" name="libisc166" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="3c837869c6991db32ed2cd9ca577552b2c99d3562e103dca522e2f9da64aed78" name="libisccc160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="9f2e6de19fe9230487023261ede9bca9c21f9541a3924e3b37fb8ee3e3e6918a" name="libisccc160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="2c763d856748180334fecc357e6fdc35baea666440cb621d24a9bff86903794d" name="libisccc160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="084bb14317b5c81e4fb1765a59e923f2c0f912d4fd9b8753efdad2d40799eac2" name="libisccc160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="60f225f9e5dd15f344529812d4af1a716c5490a696221f5f4aea80b3fc765977" name="libisccfg160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="da4e9b83fa500b82b0c8b42d38c36c08b1b36525abb92a5718d3b59d5b28f146" name="libisccfg160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="4017b3dacae22d3be9ee7e40b9e5e28d761a12996b00a15beb269fff71d71547" name="libisccfg160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="d04ec6d167346fdf9d18e6ce11388db7cb8e8ef441ca26909afbef706a046062" name="libisccfg160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="6a21ea8baf344688904cdc377fe17f92b57815e5d89ee2ea55d5fde34d7b81d9" name="libisds" arch="src">
  <version epoch="0" ver="0.10.8" rel="lp150.2.3.1"/>
  <changelog author="ppisar@redhat.com" date="1277812800">- 0.3.1 version bump
- Create ~/.gnupg to workaround bug in gnupg2-smime</changelog>
  <changelog author="ppisar@redhat.com" date="1292846400">- 0.4 bump, it breaks ABI
- Use smaller xz archive instead of bzip2
- Do tests in parallel</changelog>
  <changelog author="ppisar@redhat.com" date="1297425600">- Rebuild with GCC 4.6
- Remove BuildRoot stuff
- Make devel subpackage dependencies ISA specific</changelog>
  <changelog author="ppisar@redhat.com" date="1299153600">- 0.5 bump (breaks ABI, API preserved)
- Remove aplied patch and GPG hack</changelog>
  <changelog author="ppisar@redhat.com" date="1351598400">- 0.6.1 bump</changelog>
  <changelog author="ppisar@redhat.com" date="1351684800">- 0.6.2 bump</changelog>
  <changelog author="ppisar@redhat.com" date="1357214400">- 0.7 bump</changelog>
  <changelog author="ppisar@redhat.com" date="1364385600">- Update config.sub to support aarch64 (bug #925782)</changelog>
  <changelog author="ppisar@redhat.com" date="1382356800">- 0.8 bump</changelog>
  <changelog author="ppisar@redhat.com" date="1396440000">- Use _DEFAULT_SOURCE where _BSD_SOURCE macro presents to satisfy glibc-2.19.90</changelog>
  <changelog author="ppisar@redhat.com" date="1407844800">- 0.9 bump</changelog>
  <changelog author="tchvatal@suse.com" date="1421064000">- Cleanup for openSUSE
- Version bump to 0.10:
  * A new ISDSSearch2 service was implemented by an isds_find_box_by_fulltext()
    function.
  * The OpenSSL library can be used instead of the default GPGme library by
    specifying --enable-openssl-backend option to the configure script.
  * When parsing ISO 8601 date-time strings from a server response, microsecond
    fractions are properly rounded (half up) now.
  * An use-after-free bug in parsing SOAP response has been fixed.
  * Handling su_seconds_t type used in the timeval structure was corrected to
    enable flawless compilation with Mac OS X standard library.
  * Various signedness mismataches which could lead to an undefined behaviour
    were fixed.
  * A work-around for accessing the strdup(3) function in Mac OS X standard
    library was applied.</changelog>
  <changelog author="tchvatal@suse.com" date="1441627200">- Version bump to 0.10.1:
  * Fix expired certificates so the testsuite pass again</changelog>
  <changelog author="jslaby@suse.com" date="1460376000">- Version bump to 0.10.3:
  * l10n: Update translation catalogues
  * Correct _isds_build_url_from_context() documentation
  * Do not use dolar in formatting strings
  * Fixed a potential bug when printing debugging information.
  * Fix building without libcurl</changelog>
  <changelog author="mpluskal@suse.com" date="1460376001">- Add gpg signature
- Small cleanup with spec-cleaner
  * use valid rpm category
  * use pkgconfig() style dependencies
-Update build dependencies
  * add gpgme-devel</changelog>
  <changelog author="jslaby@suse.com" date="1476100800">- Version bump to 0.10.5:
  * l10n: Update translation catalogues
  * Added a new value into isds_DbState.
  * Fixed a bug. User identification didn't work properly.</changelog>
  <changelog author="jslaby@suse.com" date="1476964800">- Version bump to 0.10.6:
  * l10n: Update translation catalogues
  * Adapt to OpenSSL 1.1.0</changelog>
  <changelog author="tchvatal@suse.com" date="1496577600">- Disable werror</changelog>
  <changelog author="jslaby@suse.com" date="1500465600">- Version bump to 0.10.7:
  * l10n: Update translation catalogues
  * doc: Annotate documentation for new box types
  * Added OVM_FO, OVM_PFO and OVM_PO box types.
  * Add missing user and sender types to example client...
  * Added PFO_AUDITOR box type.
  * Added RECEIVER and GUARDIAN user types.</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- Version bump to 0.10.8:
  * Various memory leaks fixed
  * Recognise EV8</changelog>
</package>
<package pkgid="94957d0ec09a85e75c86f77857d2fa517f8cac9a825db66d3e4125417855c204" name="libisds-devel" arch="x86_64">
  <version epoch="0" ver="0.10.8" rel="lp150.2.3.1"/>
  <changelog author="ppisar@redhat.com" date="1277812800">- 0.3.1 version bump
- Create ~/.gnupg to workaround bug in gnupg2-smime</changelog>
  <changelog author="ppisar@redhat.com" date="1292846400">- 0.4 bump, it breaks ABI
- Use smaller xz archive instead of bzip2
- Do tests in parallel</changelog>
  <changelog author="ppisar@redhat.com" date="1297425600">- Rebuild with GCC 4.6
- Remove BuildRoot stuff
- Make devel subpackage dependencies ISA specific</changelog>
  <changelog author="ppisar@redhat.com" date="1299153600">- 0.5 bump (breaks ABI, API preserved)
- Remove aplied patch and GPG hack</changelog>
  <changelog author="ppisar@redhat.com" date="1351598400">- 0.6.1 bump</changelog>
  <changelog author="ppisar@redhat.com" date="1351684800">- 0.6.2 bump</changelog>
  <changelog author="ppisar@redhat.com" date="1357214400">- 0.7 bump</changelog>
  <changelog author="ppisar@redhat.com" date="1364385600">- Update config.sub to support aarch64 (bug #925782)</changelog>
  <changelog author="ppisar@redhat.com" date="1382356800">- 0.8 bump</changelog>
  <changelog author="ppisar@redhat.com" date="1396440000">- Use _DEFAULT_SOURCE where _BSD_SOURCE macro presents to satisfy glibc-2.19.90</changelog>
  <changelog author="ppisar@redhat.com" date="1407844800">- 0.9 bump</changelog>
  <changelog author="tchvatal@suse.com" date="1421064000">- Cleanup for openSUSE
- Version bump to 0.10:
  * A new ISDSSearch2 service was implemented by an isds_find_box_by_fulltext()
    function.
  * The OpenSSL library can be used instead of the default GPGme library by
    specifying --enable-openssl-backend option to the configure script.
  * When parsing ISO 8601 date-time strings from a server response, microsecond
    fractions are properly rounded (half up) now.
  * An use-after-free bug in parsing SOAP response has been fixed.
  * Handling su_seconds_t type used in the timeval structure was corrected to
    enable flawless compilation with Mac OS X standard library.
  * Various signedness mismataches which could lead to an undefined behaviour
    were fixed.
  * A work-around for accessing the strdup(3) function in Mac OS X standard
    library was applied.</changelog>
  <changelog author="tchvatal@suse.com" date="1441627200">- Version bump to 0.10.1:
  * Fix expired certificates so the testsuite pass again</changelog>
  <changelog author="jslaby@suse.com" date="1460376000">- Version bump to 0.10.3:
  * l10n: Update translation catalogues
  * Correct _isds_build_url_from_context() documentation
  * Do not use dolar in formatting strings
  * Fixed a potential bug when printing debugging information.
  * Fix building without libcurl</changelog>
  <changelog author="mpluskal@suse.com" date="1460376001">- Add gpg signature
- Small cleanup with spec-cleaner
  * use valid rpm category
  * use pkgconfig() style dependencies
-Update build dependencies
  * add gpgme-devel</changelog>
  <changelog author="jslaby@suse.com" date="1476100800">- Version bump to 0.10.5:
  * l10n: Update translation catalogues
  * Added a new value into isds_DbState.
  * Fixed a bug. User identification didn't work properly.</changelog>
  <changelog author="jslaby@suse.com" date="1476964800">- Version bump to 0.10.6:
  * l10n: Update translation catalogues
  * Adapt to OpenSSL 1.1.0</changelog>
  <changelog author="tchvatal@suse.com" date="1496577600">- Disable werror</changelog>
  <changelog author="jslaby@suse.com" date="1500465600">- Version bump to 0.10.7:
  * l10n: Update translation catalogues
  * doc: Annotate documentation for new box types
  * Added OVM_FO, OVM_PFO and OVM_PO box types.
  * Add missing user and sender types to example client...
  * Added PFO_AUDITOR box type.
  * Added RECEIVER and GUARDIAN user types.</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- Version bump to 0.10.8:
  * Various memory leaks fixed
  * Recognise EV8</changelog>
</package>
<package pkgid="4463dafcbe0c4afd0c5ceb823fa7869861a3323248b6a562dfbfba769beeb5a8" name="libisds5" arch="x86_64">
  <version epoch="0" ver="0.10.8" rel="lp150.2.3.1"/>
  <changelog author="ppisar@redhat.com" date="1277812800">- 0.3.1 version bump
- Create ~/.gnupg to workaround bug in gnupg2-smime</changelog>
  <changelog author="ppisar@redhat.com" date="1292846400">- 0.4 bump, it breaks ABI
- Use smaller xz archive instead of bzip2
- Do tests in parallel</changelog>
  <changelog author="ppisar@redhat.com" date="1297425600">- Rebuild with GCC 4.6
- Remove BuildRoot stuff
- Make devel subpackage dependencies ISA specific</changelog>
  <changelog author="ppisar@redhat.com" date="1299153600">- 0.5 bump (breaks ABI, API preserved)
- Remove aplied patch and GPG hack</changelog>
  <changelog author="ppisar@redhat.com" date="1351598400">- 0.6.1 bump</changelog>
  <changelog author="ppisar@redhat.com" date="1351684800">- 0.6.2 bump</changelog>
  <changelog author="ppisar@redhat.com" date="1357214400">- 0.7 bump</changelog>
  <changelog author="ppisar@redhat.com" date="1364385600">- Update config.sub to support aarch64 (bug #925782)</changelog>
  <changelog author="ppisar@redhat.com" date="1382356800">- 0.8 bump</changelog>
  <changelog author="ppisar@redhat.com" date="1396440000">- Use _DEFAULT_SOURCE where _BSD_SOURCE macro presents to satisfy glibc-2.19.90</changelog>
  <changelog author="ppisar@redhat.com" date="1407844800">- 0.9 bump</changelog>
  <changelog author="tchvatal@suse.com" date="1421064000">- Cleanup for openSUSE
- Version bump to 0.10:
  * A new ISDSSearch2 service was implemented by an isds_find_box_by_fulltext()
    function.
  * The OpenSSL library can be used instead of the default GPGme library by
    specifying --enable-openssl-backend option to the configure script.
  * When parsing ISO 8601 date-time strings from a server response, microsecond
    fractions are properly rounded (half up) now.
  * An use-after-free bug in parsing SOAP response has been fixed.
  * Handling su_seconds_t type used in the timeval structure was corrected to
    enable flawless compilation with Mac OS X standard library.
  * Various signedness mismataches which could lead to an undefined behaviour
    were fixed.
  * A work-around for accessing the strdup(3) function in Mac OS X standard
    library was applied.</changelog>
  <changelog author="tchvatal@suse.com" date="1441627200">- Version bump to 0.10.1:
  * Fix expired certificates so the testsuite pass again</changelog>
  <changelog author="jslaby@suse.com" date="1460376000">- Version bump to 0.10.3:
  * l10n: Update translation catalogues
  * Correct _isds_build_url_from_context() documentation
  * Do not use dolar in formatting strings
  * Fixed a potential bug when printing debugging information.
  * Fix building without libcurl</changelog>
  <changelog author="mpluskal@suse.com" date="1460376001">- Add gpg signature
- Small cleanup with spec-cleaner
  * use valid rpm category
  * use pkgconfig() style dependencies
-Update build dependencies
  * add gpgme-devel</changelog>
  <changelog author="jslaby@suse.com" date="1476100800">- Version bump to 0.10.5:
  * l10n: Update translation catalogues
  * Added a new value into isds_DbState.
  * Fixed a bug. User identification didn't work properly.</changelog>
  <changelog author="jslaby@suse.com" date="1476964800">- Version bump to 0.10.6:
  * l10n: Update translation catalogues
  * Adapt to OpenSSL 1.1.0</changelog>
  <changelog author="tchvatal@suse.com" date="1496577600">- Disable werror</changelog>
  <changelog author="jslaby@suse.com" date="1500465600">- Version bump to 0.10.7:
  * l10n: Update translation catalogues
  * doc: Annotate documentation for new box types
  * Added OVM_FO, OVM_PFO and OVM_PO box types.
  * Add missing user and sender types to example client...
  * Added PFO_AUDITOR box type.
  * Added RECEIVER and GUARDIAN user types.</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- Version bump to 0.10.8:
  * Various memory leaks fixed
  * Recognise EV8</changelog>
</package>
<package pkgid="5b3fe42fb05faa1d285bf9d9340327b1c4eb2b7778444548cc6999e686704437" name="libiso9660-10" arch="x86_64">
  <version epoch="0" ver="0.94" rel="lp150.5.3.1"/>
  <changelog author="sagiben@gmail.com" date="1296388800">- Updated to version 0.82
- Upstream changes :
  * Remove all uses of CDIO_MIN_DRIVER,
  CDIO_MAX_DRIVER, CDIO_MIN_DEVICE_DRIVER or CDIO_MAX_DEVICE_DRIVER.
  * FreeBSD get_media_changed fixes
  * MingGW/Msys compilation issues
  * Add OS/2 driver
  * Cross compilations fixes and uclinix is like GNU/Linux
  * Numerous other bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1297166400">- Rename Shared Object package to libcdio12, conforming the
  libraries name.
- Adjust rpmlintrc to only ignore shared lib names of the -mini
  packages. This avoids missing shlib renames for the 'main'
  package.</changelog>
  <changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- one less _service file for factory</changelog>
  <changelog author="coolo@suse.com" date="1321185601">- add libtool as buildrequire</changelog>
  <changelog author="davejplater@gmail.com" date="1333713600">- Update to libcdio-0.83, removed need for libcdio-mini by adding
  linker library paths to sources in the spec file build section.
- Upstream changes:
  * Add retrieval SCSI sense reply from the most-recent MMC command.
  * Add exclusive read/write access for devices which is used for
  experimental writing/burning. Currently only on GNU/Linux and FreeBSD.
  * MMC bug fixes
  * FreeBSD drive list now shows empty drives.
  * Add ability to retrieve SCSI tuple for a name and/or fake one up for
  programs that wanto to cd-record compatible.
  * Tolerance for OS's without timezone in their struct tm (e.g. Solaris)
  added iso9660_set_{d,l}time_with_timezone
  * Add mmc_get_disk_erasable
  * Update MMC Feature Profile list, DVD Book types
  * Reduce range of seek in paranoia_seek to be int32_t
  * Remove some potential flaws found by Coverty's static analysis tool
  * Add ISRC track info to cd-info output.
  * Don't wrap-around volume adjustment for cdda-player.
  * Handle double-byte strings in CD-text
  * --no-header on cd-info omits copyright and warranty</changelog>
  <changelog author="davejplater@gmail.com" date="1334491200">- Update to 0.83.git from 14/04/2012 git head.
- libcdio-paranoia separated from libcdio due to license issues
  see bnc#756564</changelog>
  <changelog author="davejplater@gmail.com" date="1337342400">- Split cdio-utils to a linked package to prevent cycles due to
  utils dependancy on libvcdinfo and vcdimagers dependency on
  libcdio.</changelog>
  <changelog author="coolo@suse.com" date="1337947200">- enable rock support - for some bizzare reason it's not default
  (the help is saying otherwise, but it's obvious if you try to
  read from kiwi live cds)</changelog>
  <changelog author="coolo@suse.com" date="1347019200">- add makeinfo as explicit buildrequires</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="davejplater@gmail.com" date="1364904000">- Add url to spec source field to enable local source service.</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
</package>
<package pkgid="f7e21f2df69d5d05a71b3a4c3a3d5710eb5e35ff07ad857d51d5211052d640c8" name="libiso9660-10-32bit" arch="x86_64">
  <version epoch="0" ver="0.94" rel="lp150.5.3.1"/>
  <changelog author="sagiben@gmail.com" date="1296388800">- Updated to version 0.82
- Upstream changes :
  * Remove all uses of CDIO_MIN_DRIVER,
  CDIO_MAX_DRIVER, CDIO_MIN_DEVICE_DRIVER or CDIO_MAX_DEVICE_DRIVER.
  * FreeBSD get_media_changed fixes
  * MingGW/Msys compilation issues
  * Add OS/2 driver
  * Cross compilations fixes and uclinix is like GNU/Linux
  * Numerous other bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1297166400">- Rename Shared Object package to libcdio12, conforming the
  libraries name.
- Adjust rpmlintrc to only ignore shared lib names of the -mini
  packages. This avoids missing shlib renames for the 'main'
  package.</changelog>
  <changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- one less _service file for factory</changelog>
  <changelog author="coolo@suse.com" date="1321185601">- add libtool as buildrequire</changelog>
  <changelog author="davejplater@gmail.com" date="1333713600">- Update to libcdio-0.83, removed need for libcdio-mini by adding
  linker library paths to sources in the spec file build section.
- Upstream changes:
  * Add retrieval SCSI sense reply from the most-recent MMC command.
  * Add exclusive read/write access for devices which is used for
  experimental writing/burning. Currently only on GNU/Linux and FreeBSD.
  * MMC bug fixes
  * FreeBSD drive list now shows empty drives.
  * Add ability to retrieve SCSI tuple for a name and/or fake one up for
  programs that wanto to cd-record compatible.
  * Tolerance for OS's without timezone in their struct tm (e.g. Solaris)
  added iso9660_set_{d,l}time_with_timezone
  * Add mmc_get_disk_erasable
  * Update MMC Feature Profile list, DVD Book types
  * Reduce range of seek in paranoia_seek to be int32_t
  * Remove some potential flaws found by Coverty's static analysis tool
  * Add ISRC track info to cd-info output.
  * Don't wrap-around volume adjustment for cdda-player.
  * Handle double-byte strings in CD-text
  * --no-header on cd-info omits copyright and warranty</changelog>
  <changelog author="davejplater@gmail.com" date="1334491200">- Update to 0.83.git from 14/04/2012 git head.
- libcdio-paranoia separated from libcdio due to license issues
  see bnc#756564</changelog>
  <changelog author="davejplater@gmail.com" date="1337342400">- Split cdio-utils to a linked package to prevent cycles due to
  utils dependancy on libvcdinfo and vcdimagers dependency on
  libcdio.</changelog>
  <changelog author="coolo@suse.com" date="1337947200">- enable rock support - for some bizzare reason it's not default
  (the help is saying otherwise, but it's obvious if you try to
  read from kiwi live cds)</changelog>
  <changelog author="coolo@suse.com" date="1347019200">- add makeinfo as explicit buildrequires</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="davejplater@gmail.com" date="1364904000">- Add url to spec source field to enable local source service.</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
</package>
<package pkgid="93e3dec991d4e57f2e79454c987108f90e444580fb44bbce5940e61cff5a007a" name="libjavascriptcoregtk-4_0-18" arch="x86_64">
  <version epoch="0" ver="2.20.3" rel="lp150.2.3.1"/>
  <changelog author="ro@suse.de" date="1517313600">- even on recent codestreams there is no binutils gold on s390
  only on s390x.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519905600">- Add missing dependencies from the -devel package to the build
  typelib-1_0-*: just like libraries, a consumer of the devel
  package can assume the typelibs to be present:
  + typelib-1_0-WebKit2-%{_sonameverpkg}.
  + typelib-1_0-WebKit2WebExtension-%{_sonameverpkg}.</changelog>
  <changelog author="fcrozat@suse.com" date="1519992000">- Add webkit2gtk3-fix-wayland-crash.patch: fix crash when using
  Wayland with QXL/virtio (bsc#1079512, webkit#182490).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
</package>
<package pkgid="ea2919dcc6b077602ff044167d1897e09a18f0fdc7eca23456bfc484837594f3" name="libjavascriptcoregtk-4_0-18" arch="x86_64">
  <version epoch="0" ver="2.20.5" rel="lp150.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
  <changelog author="mgorse@suse.com" date="1532088000">- Add webkit2gtk3-boo1101999-off-by-one.patch: fix off-by-one in
  xdg_mime_get_simple_globs (boo#1101999 CVE-2018-12911).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Update to version 2.20.4 (boo#1104169):
  + Fix a crash when leaving accelerated compositing mode.
  + Fix non-deterministic build failure due to missing
    JavaScriptCore/JSContextRef.h.
  + Security fixes: CVE-2018-4261, CVE-2018-4262, CVE-2018-4263,
    CVE-2018-4264, CVE-2018-4265, CVE-2018-4266, CVE-2018-4267,
    CVE-2018-4270, CVE-2018-4272, CVE-2018-4273, CVE-2018-4278,
    CVE-2018-4284.
- Drop webkit2gtk3-boo1101999-off-by-one.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 2.20.5:
  + Fix rendering artifacts in some web sites due to a bug
    introduced in 2.20.4.</changelog>
</package>
<package pkgid="bea220db89ca9513cbdabd41d6cf1cfd754f547fea0755468340e1f02b4a72bc" name="libjavascriptcoregtk-4_0-18-32bit" arch="x86_64">
  <version epoch="0" ver="2.20.3" rel="lp150.2.3.1"/>
  <changelog author="ro@suse.de" date="1517313600">- even on recent codestreams there is no binutils gold on s390
  only on s390x.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519905600">- Add missing dependencies from the -devel package to the build
  typelib-1_0-*: just like libraries, a consumer of the devel
  package can assume the typelibs to be present:
  + typelib-1_0-WebKit2-%{_sonameverpkg}.
  + typelib-1_0-WebKit2WebExtension-%{_sonameverpkg}.</changelog>
  <changelog author="fcrozat@suse.com" date="1519992000">- Add webkit2gtk3-fix-wayland-crash.patch: fix crash when using
  Wayland with QXL/virtio (bsc#1079512, webkit#182490).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
</package>
<package pkgid="099f13176a59b414967ed06324c99709a98da6abf49dc3bbd48c59380e88f2b0" name="libjavascriptcoregtk-4_0-18-32bit" arch="x86_64">
  <version epoch="0" ver="2.20.5" rel="lp150.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
  <changelog author="mgorse@suse.com" date="1532088000">- Add webkit2gtk3-boo1101999-off-by-one.patch: fix off-by-one in
  xdg_mime_get_simple_globs (boo#1101999 CVE-2018-12911).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Update to version 2.20.4 (boo#1104169):
  + Fix a crash when leaving accelerated compositing mode.
  + Fix non-deterministic build failure due to missing
    JavaScriptCore/JSContextRef.h.
  + Security fixes: CVE-2018-4261, CVE-2018-4262, CVE-2018-4263,
    CVE-2018-4264, CVE-2018-4265, CVE-2018-4266, CVE-2018-4267,
    CVE-2018-4270, CVE-2018-4272, CVE-2018-4273, CVE-2018-4278,
    CVE-2018-4284.
- Drop webkit2gtk3-boo1101999-off-by-one.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 2.20.5:
  + Fix rendering artifacts in some web sites due to a bug
    introduced in 2.20.4.</changelog>
</package>
<package pkgid="d81373313983d69fe0e2e838dad297703afac6f4ebfab37c24ea9318050112b4" name="libkgapi" arch="src">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Fix some clazy warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776000">- Make libKPimGAPICore5 provide libkgapi, so that instaling
  languages (which use a single file) will work</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776001">- Remove all Recommends on non-core packages, since they will
  require the core one</changelog>
  <changelog author="lbeltrame@kde.org" date="1493294400">- Add upstream patch adapt-to-changes-in-google-oauth.patch:
  * Fix for changes in Google OAuth process</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Prepare 5.5.1
  * Auth: add URL bar and SSL indicator to the authentication page
  * Auth: don't store cookies
  * Auth: Adapt to changes in Google OAuth token retrieval process
  * Use same variable as other lib. It's more easy to upgrade version
  * Fix some clazy warning
- Drop upstreamed patches:
  * adapt-to-changes-in-google-oauth.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * None</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Update version
  * Revert "Try to fix build on windows"
  * Try to fix build on windows
  * Fix compile on windows
  * Use isEmpty() here
  * Add more definitions QT_NO_URL_CAST_FROM_STRING
  * Remove Qt module from include
  * Remove module name
  * Use nullptr
  * use nullptr
  * Pedantic
  * Use qCDebug
  * Fix indent
  * Port to for(...:...)
  * Port some others Q_FOREACH
  * Remove more q_foreach
  * Convert some Q_FOREACH
  * not necessary
  * Port to for(...:...)
  * We depend against qt5.7
  * Increase version
  * Fix dependancies</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * lintcmake https://build.neon.kde.org/job/xenial_stable_applications_libkgapi_lintcmake/21/console Unknown CMake command "find_dependency".
  * Fix version</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Port to new connect api
  * Port to new connect api
  * Port to new connect api
  * Remove project here
  * not necessary to have project here
  * Fix merge conflict
  * Add parent
  * Fix includes
  * Adapt to KCalCore API changes
  * Port Period and Duration to QDateTime
  * Adapt to KCalCore lastModified/created API changes
  * We can remove this compatibility now
  * Make run without install them
  * Remove unused line</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * Contacts: fix sync of alternative URL types (kde#387344)</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Add Fix-token-page-URL.patch to make authentification with
  Google services work again after a change by Google (kde#388483)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Fix oauth focus (kde#389263)
  * Reenable setting the authentication URL
  * Retrieve OAuth2 token with HTTP socket
  * Check for the correct "kind" strings
  * Fix token page URL (kde#388483)
- Dropped patches, now upstream:
  * Fix-token-page-URL.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532088000">- Add patch 0001-Use-QtInfoMsg-as-for-other-repo.patch from upstream:
  * Convert all messages to use QtInfoMsg so they can be properly
    filtered and don't reach the logs by default (boo#1101938)</changelog>
</package>
<package pkgid="7de62c544b8f386b1dc80002f8d2d39aca17c0975b11a3a3b58866e30e9a0a53" name="libkgapi-devel" arch="x86_64">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Fix some clazy warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776000">- Make libKPimGAPICore5 provide libkgapi, so that instaling
  languages (which use a single file) will work</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776001">- Remove all Recommends on non-core packages, since they will
  require the core one</changelog>
  <changelog author="lbeltrame@kde.org" date="1493294400">- Add upstream patch adapt-to-changes-in-google-oauth.patch:
  * Fix for changes in Google OAuth process</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Prepare 5.5.1
  * Auth: add URL bar and SSL indicator to the authentication page
  * Auth: don't store cookies
  * Auth: Adapt to changes in Google OAuth token retrieval process
  * Use same variable as other lib. It's more easy to upgrade version
  * Fix some clazy warning
- Drop upstreamed patches:
  * adapt-to-changes-in-google-oauth.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * None</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Update version
  * Revert "Try to fix build on windows"
  * Try to fix build on windows
  * Fix compile on windows
  * Use isEmpty() here
  * Add more definitions QT_NO_URL_CAST_FROM_STRING
  * Remove Qt module from include
  * Remove module name
  * Use nullptr
  * use nullptr
  * Pedantic
  * Use qCDebug
  * Fix indent
  * Port to for(...:...)
  * Port some others Q_FOREACH
  * Remove more q_foreach
  * Convert some Q_FOREACH
  * not necessary
  * Port to for(...:...)
  * We depend against qt5.7
  * Increase version
  * Fix dependancies</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * lintcmake https://build.neon.kde.org/job/xenial_stable_applications_libkgapi_lintcmake/21/console Unknown CMake command "find_dependency".
  * Fix version</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Port to new connect api
  * Port to new connect api
  * Port to new connect api
  * Remove project here
  * not necessary to have project here
  * Fix merge conflict
  * Add parent
  * Fix includes
  * Adapt to KCalCore API changes
  * Port Period and Duration to QDateTime
  * Adapt to KCalCore lastModified/created API changes
  * We can remove this compatibility now
  * Make run without install them
  * Remove unused line</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * Contacts: fix sync of alternative URL types (kde#387344)</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Add Fix-token-page-URL.patch to make authentification with
  Google services work again after a change by Google (kde#388483)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Fix oauth focus (kde#389263)
  * Reenable setting the authentication URL
  * Retrieve OAuth2 token with HTTP socket
  * Check for the correct "kind" strings
  * Fix token page URL (kde#388483)
- Dropped patches, now upstream:
  * Fix-token-page-URL.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532088000">- Add patch 0001-Use-QtInfoMsg-as-for-other-repo.patch from upstream:
  * Convert all messages to use QtInfoMsg so they can be properly
    filtered and don't reach the logs by default (boo#1101938)</changelog>
</package>
<package pkgid="4047c633bb72e2263ac529720c90d8f91004c847fe4c0dd9b1e009fdbd36de1e" name="libkgapi-lang" arch="noarch">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Fix some clazy warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776000">- Make libKPimGAPICore5 provide libkgapi, so that instaling
  languages (which use a single file) will work</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776001">- Remove all Recommends on non-core packages, since they will
  require the core one</changelog>
  <changelog author="lbeltrame@kde.org" date="1493294400">- Add upstream patch adapt-to-changes-in-google-oauth.patch:
  * Fix for changes in Google OAuth process</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Prepare 5.5.1
  * Auth: add URL bar and SSL indicator to the authentication page
  * Auth: don't store cookies
  * Auth: Adapt to changes in Google OAuth token retrieval process
  * Use same variable as other lib. It's more easy to upgrade version
  * Fix some clazy warning
- Drop upstreamed patches:
  * adapt-to-changes-in-google-oauth.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * None</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Update version
  * Revert "Try to fix build on windows"
  * Try to fix build on windows
  * Fix compile on windows
  * Use isEmpty() here
  * Add more definitions QT_NO_URL_CAST_FROM_STRING
  * Remove Qt module from include
  * Remove module name
  * Use nullptr
  * use nullptr
  * Pedantic
  * Use qCDebug
  * Fix indent
  * Port to for(...:...)
  * Port some others Q_FOREACH
  * Remove more q_foreach
  * Convert some Q_FOREACH
  * not necessary
  * Port to for(...:...)
  * We depend against qt5.7
  * Increase version
  * Fix dependancies</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * lintcmake https://build.neon.kde.org/job/xenial_stable_applications_libkgapi_lintcmake/21/console Unknown CMake command "find_dependency".
  * Fix version</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Port to new connect api
  * Port to new connect api
  * Port to new connect api
  * Remove project here
  * not necessary to have project here
  * Fix merge conflict
  * Add parent
  * Fix includes
  * Adapt to KCalCore API changes
  * Port Period and Duration to QDateTime
  * Adapt to KCalCore lastModified/created API changes
  * We can remove this compatibility now
  * Make run without install them
  * Remove unused line</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * Contacts: fix sync of alternative URL types (kde#387344)</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Add Fix-token-page-URL.patch to make authentification with
  Google services work again after a change by Google (kde#388483)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Fix oauth focus (kde#389263)
  * Reenable setting the authentication URL
  * Retrieve OAuth2 token with HTTP socket
  * Check for the correct "kind" strings
  * Fix token page URL (kde#388483)
- Dropped patches, now upstream:
  * Fix-token-page-URL.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532088000">- Add patch 0001-Use-QtInfoMsg-as-for-other-repo.patch from upstream:
  * Convert all messages to use QtInfoMsg so they can be properly
    filtered and don't reach the logs by default (boo#1101938)</changelog>
</package>
<package pkgid="bf4d1a86cd43b492f415172679af180eb2598f4b8addeee781166ca053196c06" name="libkmod-devel" arch="x86_64">
  <version epoch="0" ver="25" rel="lp150.4.3.1"/>
  <changelog author="meissner@suse.com" date="1425643200">- 0001-use-correct-sort-method-in-test-array.patch: use correct test
  bsc#920930</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1427976000">- If kmod packge changes, regenerate the initrd.</changelog>
  <changelog author="mmarek@suse.cz" date="1429617600">- Update to kmod 20
  * More robust ELF parsing
  * To fix a race, modprobe only looks at modules.builtin to
  determine a builtin module, so e.g. 'modprobe vt' will no longer
  work.
  * Other fixes
  * Testsuite moved to a separate package, since it is now building
  the test modules from sources, which requires the kernel package.
  * dropped kmod-blacklist-fixtest.patch (merged upstream)
  * includes 0001-Fix-race-while-loading-modules.patch (bsc#998906)</changelog>
  <changelog author="jengelh@inai.de" date="1446897600">- Update to new upstream release 21
  * The kmod tool now prints the relevant configuration options it was built
  with when the "--version" argument is passed.</changelog>
  <changelog author="jengelh@inai.de" date="1449489600">- Update to new upstream release 22
  * support `insmod -f`
  * depmod: do not fall back to uname on bad version</changelog>
  <changelog author="dvaleev@suse.com" date="1455019200">- Fix kernel master build for ppc64le (bsc#1070209)
  depmod-Ignore_PowerPC64_ABIv2_.TOC.symbol.patch</changelog>
  <changelog author="mmarek@suse.cz" date="1466164800">- libkmod: Handle long lines in /proc/modules (bsc#983754)
  0001-libkmod-Handle-long-lines-in-proc-modules.patch</changelog>
  <changelog author="mmarek@suse.com" date="1469102400">- Regenerate initrd on kmod update (bsc#989788)
- Sync specfile with openSUSE:Factory</changelog>
  <changelog author="jengelh@inai.de" date="1469102401">- Update to new upstream release 23
  * Don't add comment to modules.devname if it would otherwise be
  empty.
  * Ignore .TOC. symbols in depmod parsing.
  * Fix crash on modinfo while checking for available signature of
  unknown type.
  * Teach modinfo about PKCS#7 module signatures.
- Drop depmod-Ignore_PowerPC64_ABIv2_.TOC.symbol.patch (merged),
  0001-libkmod-Handle-long-lines-in-proc-modules.patch (merged)</changelog>
  <changelog author="yousaf.kaukab@suse.com" date="1479816000">- 0002-depmod-ignore-related-modules-in-depmod_report_cycle.patch:
  Fix buffer overflow when printing modules in cyclic dependency
  chain (boo#1008186)</changelog>
  <changelog author="jengelh@inai.de" date="1499342400">- Update to new upstream release 24
  * libkmod: fix  use of strcpy
  * depmod: fix string overflow
  * depmod: ignore related modules in depmod_report_cycles
  * libkmod: Fix handling of quotes in kernel command line
  * libkmod-config: replace 0/1 with bool
  * depmod: handle nested loops
- Drop 0001-use-correct-sort-method-in-test-array.patch,
  0002-depmod-ignore-related-modules-in-depmod_report_cycle.patch,
  0009-libkmod-Implement-filtering-of-unsupported-modules-o.patch
  (applied upstream)
- Remove support for openSUSE &lt; 13.2 (non-dracut mkinitrd)
- Separate bash completion functions into extra package
- Move some of the symlinks from kmod-compat to kmod,
  as kmod still does not have native support for all functions.</changelog>
  <changelog author="jengelh@inai.de" date="1501070400">- Add versioned requires between kmod-compat -&gt; kmod</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="msuchanek@suse.com" date="1511179200">- Move dependency on suse-module-tools to kmod-compat (bsc#1047911).</changelog>
  <changelog author="msuchanek@suse.com" date="1512648000">- Fix resolving .TOC. in modules on 4.4 and older kernel (bsc#1070209)
  depmod-Don-t-add-.TOC.-when-it-s-in-the-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1517486400">- Update to kmod v25
  * Fix resolving symbols with MODULE_REL_CRCS (bsc#1077867)
- Drop depmod-Don-t-add-.TOC.-when-it-s-in-the-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1520510400">- Fix PKCS#7 signature display in modinfo (bsc#1077693).
  * Add libkmod-signature-implement-pkcs7-parsing-with-asn1c.patch
  * Add libkmod-signature-Fix-crash-when-module-signature-is.patch
  * Refresh 0010-modprobe-Implement-allow-unsupported-modules.patch</changelog>
  <changelog author="ro@suse.de" date="1521201600">- for sle, buildexclude the 32bit platforms in kmod-testsuite,
  they have no kernel binaries anyway (bnc#1085640)</changelog>
  <changelog author="msuchanek@suse.com" date="1523016000">- Fix crash when PKCS#7 signer name is not present in signature (bsc#1088244)
  + libkmod-signature-pkcs-7-fix-crash-when-signer-info-.patch</changelog>
  <changelog author="vlad.botanic@gmail.com" date="1528459200">- allow 'modprobe -c' print the status of "allow_unsupported_modules" option.
  + 0012-modprobe-print-unsupported-status.patch</changelog>
</package>
<package pkgid="fb327facf6f76265dfa4b11bd3716b48efb3b81b171ca12c80605a71a0752660" name="libkmod2" arch="x86_64">
  <version epoch="0" ver="25" rel="lp150.4.3.1"/>
  <changelog author="meissner@suse.com" date="1425643200">- 0001-use-correct-sort-method-in-test-array.patch: use correct test
  bsc#920930</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1427976000">- If kmod packge changes, regenerate the initrd.</changelog>
  <changelog author="mmarek@suse.cz" date="1429617600">- Update to kmod 20
  * More robust ELF parsing
  * To fix a race, modprobe only looks at modules.builtin to
  determine a builtin module, so e.g. 'modprobe vt' will no longer
  work.
  * Other fixes
  * Testsuite moved to a separate package, since it is now building
  the test modules from sources, which requires the kernel package.
  * dropped kmod-blacklist-fixtest.patch (merged upstream)
  * includes 0001-Fix-race-while-loading-modules.patch (bsc#998906)</changelog>
  <changelog author="jengelh@inai.de" date="1446897600">- Update to new upstream release 21
  * The kmod tool now prints the relevant configuration options it was built
  with when the "--version" argument is passed.</changelog>
  <changelog author="jengelh@inai.de" date="1449489600">- Update to new upstream release 22
  * support `insmod -f`
  * depmod: do not fall back to uname on bad version</changelog>
  <changelog author="dvaleev@suse.com" date="1455019200">- Fix kernel master build for ppc64le (bsc#1070209)
  depmod-Ignore_PowerPC64_ABIv2_.TOC.symbol.patch</changelog>
  <changelog author="mmarek@suse.cz" date="1466164800">- libkmod: Handle long lines in /proc/modules (bsc#983754)
  0001-libkmod-Handle-long-lines-in-proc-modules.patch</changelog>
  <changelog author="mmarek@suse.com" date="1469102400">- Regenerate initrd on kmod update (bsc#989788)
- Sync specfile with openSUSE:Factory</changelog>
  <changelog author="jengelh@inai.de" date="1469102401">- Update to new upstream release 23
  * Don't add comment to modules.devname if it would otherwise be
  empty.
  * Ignore .TOC. symbols in depmod parsing.
  * Fix crash on modinfo while checking for available signature of
  unknown type.
  * Teach modinfo about PKCS#7 module signatures.
- Drop depmod-Ignore_PowerPC64_ABIv2_.TOC.symbol.patch (merged),
  0001-libkmod-Handle-long-lines-in-proc-modules.patch (merged)</changelog>
  <changelog author="yousaf.kaukab@suse.com" date="1479816000">- 0002-depmod-ignore-related-modules-in-depmod_report_cycle.patch:
  Fix buffer overflow when printing modules in cyclic dependency
  chain (boo#1008186)</changelog>
  <changelog author="jengelh@inai.de" date="1499342400">- Update to new upstream release 24
  * libkmod: fix  use of strcpy
  * depmod: fix string overflow
  * depmod: ignore related modules in depmod_report_cycles
  * libkmod: Fix handling of quotes in kernel command line
  * libkmod-config: replace 0/1 with bool
  * depmod: handle nested loops
- Drop 0001-use-correct-sort-method-in-test-array.patch,
  0002-depmod-ignore-related-modules-in-depmod_report_cycle.patch,
  0009-libkmod-Implement-filtering-of-unsupported-modules-o.patch
  (applied upstream)
- Remove support for openSUSE &lt; 13.2 (non-dracut mkinitrd)
- Separate bash completion functions into extra package
- Move some of the symlinks from kmod-compat to kmod,
  as kmod still does not have native support for all functions.</changelog>
  <changelog author="jengelh@inai.de" date="1501070400">- Add versioned requires between kmod-compat -&gt; kmod</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="msuchanek@suse.com" date="1511179200">- Move dependency on suse-module-tools to kmod-compat (bsc#1047911).</changelog>
  <changelog author="msuchanek@suse.com" date="1512648000">- Fix resolving .TOC. in modules on 4.4 and older kernel (bsc#1070209)
  depmod-Don-t-add-.TOC.-when-it-s-in-the-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1517486400">- Update to kmod v25
  * Fix resolving symbols with MODULE_REL_CRCS (bsc#1077867)
- Drop depmod-Don-t-add-.TOC.-when-it-s-in-the-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1520510400">- Fix PKCS#7 signature display in modinfo (bsc#1077693).
  * Add libkmod-signature-implement-pkcs7-parsing-with-asn1c.patch
  * Add libkmod-signature-Fix-crash-when-module-signature-is.patch
  * Refresh 0010-modprobe-Implement-allow-unsupported-modules.patch</changelog>
  <changelog author="ro@suse.de" date="1521201600">- for sle, buildexclude the 32bit platforms in kmod-testsuite,
  they have no kernel binaries anyway (bnc#1085640)</changelog>
  <changelog author="msuchanek@suse.com" date="1523016000">- Fix crash when PKCS#7 signer name is not present in signature (bsc#1088244)
  + libkmod-signature-pkcs-7-fix-crash-when-signer-info-.patch</changelog>
  <changelog author="vlad.botanic@gmail.com" date="1528459200">- allow 'modprobe -c' print the status of "allow_unsupported_modules" option.
  + 0012-modprobe-print-unsupported-status.patch</changelog>
</package>
<package pkgid="acd9a2dbd856a88914452a741678f35c1a0542bb1156dfe22bd974e0fb26637b" name="libkpathsea6" arch="x86_64">
  <version epoch="0" ver="6.2.3" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="87c3cc01f46fcb749f4dd2ff2f73d68d687787cb693ce00843e7bac492eae16d" name="libkpathsea6" arch="x86_64">
  <version epoch="0" ver="6.2.3" rel="lp150.9.6.1"/>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537963200">- Add patch source-bsc1109673.dif to fix bsc#1109673 for CVE-2018-17407
  which is about buffer overflow in the handling of Type 1 fonts
  allowing arbitrary code execution</changelog>
</package>
<package pkgid="d83009fb275c6175936c39932d7d7066c7c2b532142a39633c01122f0338ed9d" name="libksysguard5-32bit" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * libksysguard does not appear to use QtScript, but just includes it.
  * Inject custom style sheet with system colors (kde#360214)
  * Use Q_DECL_OVERRIDE
  * Fix compilation on CentOS 6</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Add a per-process CPU usage graph shown in the process list
  * Remove obsolete reviewboardrc file
  * Only initialize variable if we are going to use it
  * Modernize: Use nullptr where possible
  * Modernize: Q_DECL_OVERRIDE -&gt; override
  * Modernize: Use override everywhere
  * Minor: Fix compiler warning</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Remove usage of deprecated QString::null</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * [ProcessModel] Return invalid QVariant() for when window is not known</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * [ProcessModel] Center more column headings (kde#394467)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="c7d4a3c3a756426ed601a6279603f6b14a0c140556f13e8def76d9d231983481" name="libksysguard5" arch="src">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * libksysguard does not appear to use QtScript, but just includes it.
  * Inject custom style sheet with system colors (kde#360214)
  * Use Q_DECL_OVERRIDE
  * Fix compilation on CentOS 6</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Add a per-process CPU usage graph shown in the process list
  * Remove obsolete reviewboardrc file
  * Only initialize variable if we are going to use it
  * Modernize: Use nullptr where possible
  * Modernize: Q_DECL_OVERRIDE -&gt; override
  * Modernize: Use override everywhere
  * Minor: Fix compiler warning</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Remove usage of deprecated QString::null</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * [ProcessModel] Return invalid QVariant() for when window is not known</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * [ProcessModel] Center more column headings (kde#394467)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="c2f7b245ac6d1ab8bafc20f79f1a561437a540374e1abfc11e19584339495617" name="libksysguard5" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * libksysguard does not appear to use QtScript, but just includes it.
  * Inject custom style sheet with system colors (kde#360214)
  * Use Q_DECL_OVERRIDE
  * Fix compilation on CentOS 6</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Add a per-process CPU usage graph shown in the process list
  * Remove obsolete reviewboardrc file
  * Only initialize variable if we are going to use it
  * Modernize: Use nullptr where possible
  * Modernize: Q_DECL_OVERRIDE -&gt; override
  * Modernize: Use override everywhere
  * Minor: Fix compiler warning</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Remove usage of deprecated QString::null</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * [ProcessModel] Return invalid QVariant() for when window is not known</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * [ProcessModel] Center more column headings (kde#394467)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="8c85a2939516407a4c2b27e2c7ab0a8c2798133e80ef49c3ceca74923e01870e" name="libksysguard5-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * libksysguard does not appear to use QtScript, but just includes it.
  * Inject custom style sheet with system colors (kde#360214)
  * Use Q_DECL_OVERRIDE
  * Fix compilation on CentOS 6</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Add a per-process CPU usage graph shown in the process list
  * Remove obsolete reviewboardrc file
  * Only initialize variable if we are going to use it
  * Modernize: Use nullptr where possible
  * Modernize: Q_DECL_OVERRIDE -&gt; override
  * Modernize: Use override everywhere
  * Minor: Fix compiler warning</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Remove usage of deprecated QString::null</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * [ProcessModel] Return invalid QVariant() for when window is not known</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * [ProcessModel] Center more column headings (kde#394467)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="0dee3e388d5b1afea4f96c4f950e4f4c17af2cae1ab1d0ed4f9bfa237a185223" name="libksysguard5-devel" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * libksysguard does not appear to use QtScript, but just includes it.
  * Inject custom style sheet with system colors (kde#360214)
  * Use Q_DECL_OVERRIDE
  * Fix compilation on CentOS 6</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Add a per-process CPU usage graph shown in the process list
  * Remove obsolete reviewboardrc file
  * Only initialize variable if we are going to use it
  * Modernize: Use nullptr where possible
  * Modernize: Q_DECL_OVERRIDE -&gt; override
  * Modernize: Use override everywhere
  * Minor: Fix compiler warning</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Remove usage of deprecated QString::null</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * [ProcessModel] Return invalid QVariant() for when window is not known</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * [ProcessModel] Center more column headings (kde#394467)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="5e8af75e71a46a3ac1f064b0caaa7b61cf2b0e41cf3d5b112ad12dae469d4a1b" name="libksysguard5-helper" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * libksysguard does not appear to use QtScript, but just includes it.
  * Inject custom style sheet with system colors (kde#360214)
  * Use Q_DECL_OVERRIDE
  * Fix compilation on CentOS 6</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Add a per-process CPU usage graph shown in the process list
  * Remove obsolete reviewboardrc file
  * Only initialize variable if we are going to use it
  * Modernize: Use nullptr where possible
  * Modernize: Q_DECL_OVERRIDE -&gt; override
  * Modernize: Use override everywhere
  * Minor: Fix compiler warning</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Remove usage of deprecated QString::null</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * [ProcessModel] Return invalid QVariant() for when window is not known</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * [ProcessModel] Center more column headings (kde#394467)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="fae08770e1a9d1c4fb0c9df3a89868a6af4d7feb4eb477c21faa61f6f12cc6aa" name="libksysguard5-lang" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * libksysguard does not appear to use QtScript, but just includes it.
  * Inject custom style sheet with system colors (kde#360214)
  * Use Q_DECL_OVERRIDE
  * Fix compilation on CentOS 6</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Add a per-process CPU usage graph shown in the process list
  * Remove obsolete reviewboardrc file
  * Only initialize variable if we are going to use it
  * Modernize: Use nullptr where possible
  * Modernize: Q_DECL_OVERRIDE -&gt; override
  * Modernize: Use override everywhere
  * Minor: Fix compiler warning</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Remove usage of deprecated QString::null</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * [ProcessModel] Return invalid QVariant() for when window is not known</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * [ProcessModel] Center more column headings (kde#394467)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="8cb164157bd38c1149d32c9ebe6c5500a4941c4d9a67e2d110dad9864389658b" name="liblangtag" arch="src">
  <version epoch="0" ver="0.6.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1352203200">- Initial package. Version 0.4.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1352289600">- Add missing directory to the list.</changelog>
  <changelog author="tchvatal@suse.com" date="1352462400">- Fix desc not to contain mention of libexttextcat.</changelog>
  <changelog author="tchvatal@suse.com" date="1352808000">- Use both lpgl and mpl licenses.
  * thanks to babelworx for the hint (merge request fails to
    complete so doing it myself).</changelog>
  <changelog author="tchvatal@suse.com" date="1352894400">- Fix Requires to demand glib2-devel not gtk1 variant
  (thanks coolo)
  * Fix copy&amp;pasto in one summary.</changelog>
  <changelog author="tchvatal@suse.com" date="1366459200">- Use full download url.
- Apply patches from git to fix few build issues.</changelog>
  <changelog author="tchvatal@suse.com" date="1367064000">- Version bump to 0.5
  * Enhancements:
  * Iterator support
  * Add lt_tag_convert_from_locale_string()
  * Bug Fixes:
  * Fix wrong traversal on keys
  * Fix xml parser for tags in range
  * Improve portability
  * Fix broken lt_tag_transform()
  * Fix the build issue when builddir != srcdir
  * Fix broken lt_tag_convert_from_locale()
  * Fix memory leaks
  * Fix linker issue
  * Use secure_getenv if available
  * more
- Remove upstreamed patches.</changelog>
  <changelog author="tchvatal@suse.com" date="1367409600">- Version bump to 0.5.1
  * resolves abi compatibility issues.</changelog>
  <changelog author="tchvatal@suse.com" date="1379937600">- Version bump to 0.5.2
  * Various autootool fixes
  * coverity fixes
  * For more read up NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1399896000">- Version bump to 0.5.3:
  * Various small fixes detailed in NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1400587200">- Add condition around noarch doc subpkg to work with SLE11</changelog>
  <changelog author="tchvatal@suse.com" date="1403697600">- Version bump to 0.5.4:
  * Various small items detailed in NEWS file
  * Removed language stubtag registry</changelog>
  <changelog author="tchvatal@suse.com" date="1436875200">- Version bump to 0.5.7:
  * Tons of fixes between 0.5.4 and this release. Read NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1450699200">- Version bump to 0.5.8:
  * Fix the build requirement in pkgconfig file
  * Make some header files public (fixes: issue#14)
  * Fix test fail on SunOS
  * Fix unknown node issue</changelog>
  <changelog author="tchvatal@suse.com" date="1474891200">- Version update to 0.6.1:
  * Initialize databases just once.
  * Support BCP47-like locale representation
  * Use deprecation macros
  * Add a lookup table to catch up a script/language from language/script
  * Update to add more files into .gitignore
  * Fix the behavior on lt_tag_transform() according to tr#35
  * Fix a segfault if no territory or script is given to lt_tag_convert_from_locale_string()
  * Add missing header file
  * Add lt_db_set_val() to change the place of database
  * Fix memory leaks
  * missing gobject function for lt_relation_db thing
  * Support the language alias for the canonicalization
  * Fix lt_trie_keys() not working
  * Fix OOM handling
  * Improve the bootup time
  * Add docs
  * Update the library versioning</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Version update to 0.6.2:
  * use standard function
  * fix leak in test</changelog>
</package>
<package pkgid="e270dc91f12e5c634182837c2a1a37a2aaa2050929e45e03cd86ec57e5643d85" name="liblangtag-devel" arch="x86_64">
  <version epoch="0" ver="0.6.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1352203200">- Initial package. Version 0.4.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1352289600">- Add missing directory to the list.</changelog>
  <changelog author="tchvatal@suse.com" date="1352462400">- Fix desc not to contain mention of libexttextcat.</changelog>
  <changelog author="tchvatal@suse.com" date="1352808000">- Use both lpgl and mpl licenses.
  * thanks to babelworx for the hint (merge request fails to
    complete so doing it myself).</changelog>
  <changelog author="tchvatal@suse.com" date="1352894400">- Fix Requires to demand glib2-devel not gtk1 variant
  (thanks coolo)
  * Fix copy&amp;pasto in one summary.</changelog>
  <changelog author="tchvatal@suse.com" date="1366459200">- Use full download url.
- Apply patches from git to fix few build issues.</changelog>
  <changelog author="tchvatal@suse.com" date="1367064000">- Version bump to 0.5
  * Enhancements:
  * Iterator support
  * Add lt_tag_convert_from_locale_string()
  * Bug Fixes:
  * Fix wrong traversal on keys
  * Fix xml parser for tags in range
  * Improve portability
  * Fix broken lt_tag_transform()
  * Fix the build issue when builddir != srcdir
  * Fix broken lt_tag_convert_from_locale()
  * Fix memory leaks
  * Fix linker issue
  * Use secure_getenv if available
  * more
- Remove upstreamed patches.</changelog>
  <changelog author="tchvatal@suse.com" date="1367409600">- Version bump to 0.5.1
  * resolves abi compatibility issues.</changelog>
  <changelog author="tchvatal@suse.com" date="1379937600">- Version bump to 0.5.2
  * Various autootool fixes
  * coverity fixes
  * For more read up NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1399896000">- Version bump to 0.5.3:
  * Various small fixes detailed in NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1400587200">- Add condition around noarch doc subpkg to work with SLE11</changelog>
  <changelog author="tchvatal@suse.com" date="1403697600">- Version bump to 0.5.4:
  * Various small items detailed in NEWS file
  * Removed language stubtag registry</changelog>
  <changelog author="tchvatal@suse.com" date="1436875200">- Version bump to 0.5.7:
  * Tons of fixes between 0.5.4 and this release. Read NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1450699200">- Version bump to 0.5.8:
  * Fix the build requirement in pkgconfig file
  * Make some header files public (fixes: issue#14)
  * Fix test fail on SunOS
  * Fix unknown node issue</changelog>
  <changelog author="tchvatal@suse.com" date="1474891200">- Version update to 0.6.1:
  * Initialize databases just once.
  * Support BCP47-like locale representation
  * Use deprecation macros
  * Add a lookup table to catch up a script/language from language/script
  * Update to add more files into .gitignore
  * Fix the behavior on lt_tag_transform() according to tr#35
  * Fix a segfault if no territory or script is given to lt_tag_convert_from_locale_string()
  * Add missing header file
  * Add lt_db_set_val() to change the place of database
  * Fix memory leaks
  * missing gobject function for lt_relation_db thing
  * Support the language alias for the canonicalization
  * Fix lt_trie_keys() not working
  * Fix OOM handling
  * Improve the bootup time
  * Add docs
  * Update the library versioning</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Version update to 0.6.2:
  * use standard function
  * fix leak in test</changelog>
</package>
<package pkgid="a174a6741ff06fe996c9dae7963d653558333f834729148cc18a070c361200a7" name="liblangtag-doc" arch="noarch">
  <version epoch="0" ver="0.6.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1352203200">- Initial package. Version 0.4.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1352289600">- Add missing directory to the list.</changelog>
  <changelog author="tchvatal@suse.com" date="1352462400">- Fix desc not to contain mention of libexttextcat.</changelog>
  <changelog author="tchvatal@suse.com" date="1352808000">- Use both lpgl and mpl licenses.
  * thanks to babelworx for the hint (merge request fails to
    complete so doing it myself).</changelog>
  <changelog author="tchvatal@suse.com" date="1352894400">- Fix Requires to demand glib2-devel not gtk1 variant
  (thanks coolo)
  * Fix copy&amp;pasto in one summary.</changelog>
  <changelog author="tchvatal@suse.com" date="1366459200">- Use full download url.
- Apply patches from git to fix few build issues.</changelog>
  <changelog author="tchvatal@suse.com" date="1367064000">- Version bump to 0.5
  * Enhancements:
  * Iterator support
  * Add lt_tag_convert_from_locale_string()
  * Bug Fixes:
  * Fix wrong traversal on keys
  * Fix xml parser for tags in range
  * Improve portability
  * Fix broken lt_tag_transform()
  * Fix the build issue when builddir != srcdir
  * Fix broken lt_tag_convert_from_locale()
  * Fix memory leaks
  * Fix linker issue
  * Use secure_getenv if available
  * more
- Remove upstreamed patches.</changelog>
  <changelog author="tchvatal@suse.com" date="1367409600">- Version bump to 0.5.1
  * resolves abi compatibility issues.</changelog>
  <changelog author="tchvatal@suse.com" date="1379937600">- Version bump to 0.5.2
  * Various autootool fixes
  * coverity fixes
  * For more read up NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1399896000">- Version bump to 0.5.3:
  * Various small fixes detailed in NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1400587200">- Add condition around noarch doc subpkg to work with SLE11</changelog>
  <changelog author="tchvatal@suse.com" date="1403697600">- Version bump to 0.5.4:
  * Various small items detailed in NEWS file
  * Removed language stubtag registry</changelog>
  <changelog author="tchvatal@suse.com" date="1436875200">- Version bump to 0.5.7:
  * Tons of fixes between 0.5.4 and this release. Read NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1450699200">- Version bump to 0.5.8:
  * Fix the build requirement in pkgconfig file
  * Make some header files public (fixes: issue#14)
  * Fix test fail on SunOS
  * Fix unknown node issue</changelog>
  <changelog author="tchvatal@suse.com" date="1474891200">- Version update to 0.6.1:
  * Initialize databases just once.
  * Support BCP47-like locale representation
  * Use deprecation macros
  * Add a lookup table to catch up a script/language from language/script
  * Update to add more files into .gitignore
  * Fix the behavior on lt_tag_transform() according to tr#35
  * Fix a segfault if no territory or script is given to lt_tag_convert_from_locale_string()
  * Add missing header file
  * Add lt_db_set_val() to change the place of database
  * Fix memory leaks
  * missing gobject function for lt_relation_db thing
  * Support the language alias for the canonicalization
  * Fix lt_trie_keys() not working
  * Fix OOM handling
  * Improve the bootup time
  * Add docs
  * Update the library versioning</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Version update to 0.6.2:
  * use standard function
  * fix leak in test</changelog>
</package>
<package pkgid="cfbbd04168bdf707b2fd9fa2e35a6fc1e825cb40f2b851a3d2ffc00bee95e1d9" name="liblangtag1" arch="x86_64">
  <version epoch="0" ver="0.6.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1352203200">- Initial package. Version 0.4.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1352289600">- Add missing directory to the list.</changelog>
  <changelog author="tchvatal@suse.com" date="1352462400">- Fix desc not to contain mention of libexttextcat.</changelog>
  <changelog author="tchvatal@suse.com" date="1352808000">- Use both lpgl and mpl licenses.
  * thanks to babelworx for the hint (merge request fails to
    complete so doing it myself).</changelog>
  <changelog author="tchvatal@suse.com" date="1352894400">- Fix Requires to demand glib2-devel not gtk1 variant
  (thanks coolo)
  * Fix copy&amp;pasto in one summary.</changelog>
  <changelog author="tchvatal@suse.com" date="1366459200">- Use full download url.
- Apply patches from git to fix few build issues.</changelog>
  <changelog author="tchvatal@suse.com" date="1367064000">- Version bump to 0.5
  * Enhancements:
  * Iterator support
  * Add lt_tag_convert_from_locale_string()
  * Bug Fixes:
  * Fix wrong traversal on keys
  * Fix xml parser for tags in range
  * Improve portability
  * Fix broken lt_tag_transform()
  * Fix the build issue when builddir != srcdir
  * Fix broken lt_tag_convert_from_locale()
  * Fix memory leaks
  * Fix linker issue
  * Use secure_getenv if available
  * more
- Remove upstreamed patches.</changelog>
  <changelog author="tchvatal@suse.com" date="1367409600">- Version bump to 0.5.1
  * resolves abi compatibility issues.</changelog>
  <changelog author="tchvatal@suse.com" date="1379937600">- Version bump to 0.5.2
  * Various autootool fixes
  * coverity fixes
  * For more read up NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1399896000">- Version bump to 0.5.3:
  * Various small fixes detailed in NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1400587200">- Add condition around noarch doc subpkg to work with SLE11</changelog>
  <changelog author="tchvatal@suse.com" date="1403697600">- Version bump to 0.5.4:
  * Various small items detailed in NEWS file
  * Removed language stubtag registry</changelog>
  <changelog author="tchvatal@suse.com" date="1436875200">- Version bump to 0.5.7:
  * Tons of fixes between 0.5.4 and this release. Read NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1450699200">- Version bump to 0.5.8:
  * Fix the build requirement in pkgconfig file
  * Make some header files public (fixes: issue#14)
  * Fix test fail on SunOS
  * Fix unknown node issue</changelog>
  <changelog author="tchvatal@suse.com" date="1474891200">- Version update to 0.6.1:
  * Initialize databases just once.
  * Support BCP47-like locale representation
  * Use deprecation macros
  * Add a lookup table to catch up a script/language from language/script
  * Update to add more files into .gitignore
  * Fix the behavior on lt_tag_transform() according to tr#35
  * Fix a segfault if no territory or script is given to lt_tag_convert_from_locale_string()
  * Add missing header file
  * Add lt_db_set_val() to change the place of database
  * Fix memory leaks
  * missing gobject function for lt_relation_db thing
  * Support the language alias for the canonicalization
  * Fix lt_trie_keys() not working
  * Fix OOM handling
  * Improve the bootup time
  * Add docs
  * Update the library versioning</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Version update to 0.6.2:
  * use standard function
  * fix leak in test</changelog>
</package>
<package pkgid="3b4b50ec2651faa8ef363e6493798643c3e0ebb6a4ede9cf6d078df827b3aea8" name="liblapack3" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="4d227b2d26535b07e52abe4137244caa42294c51b91ad40022df22143ed906bf" name="liblapack3-32bit" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="8fa7dd436acb3dac5ec1676e6f2e0bc59ede64810ec872ab3c861c572c07cc53" name="liblapacke3" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="c536d8bab5d332089fd45073d2c2c66fb2d494994a51355da215bcabb8b2ddfd" name="liblapacke3-32bit" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="31cf5c3afd8b47bf5b4ffc35fedc7f0ef50020383970a7340f897d4c29b8225b" name="liblcms2-2" arch="x86_64">
  <version epoch="0" ver="2.9" rel="lp150.2.3.1"/>
  <changelog author="adrian@suse.de" date="1274184000">- initial lcms2 package, based on package from version 1
- use OBS source services to download tar ball</changelog>
  <changelog author="mrdocs@opensuse.org" date="1286539200">-more spec file cleanups and prepare for factory submit
-test building against it in my home repo</changelog>
  <changelog author="mrdocs@opensuse.org" date="1289390400">- build documentation noarch and recompress tar</changelog>
  <changelog author="adrian@suse.de" date="1293364800">- update to version 2.1
  * maintenance release (no further details in changelog)
- remove obsolete patches</changelog>
  <changelog author="ro@suse.de" date="1303214400">- fix devel package name in baselibs.conf</changelog>
  <changelog author="mrdocs@opensuse.org" date="1307793600">-update to 2.2
  * maintenance update
  +Version  2.2 adds stability.
  - fixes all known bugs
  - adds support  for dictionary  metatag. Pascal unit now compiles
  under FPK Pascal as well as Delphi.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322136000">- Open all fds with O_CLOEXEC
- Use gcc visibility, symbol table shrinks around 50% ...</changelog>
  <changelog author="adrian@suse.de" date="1324123200">- update to version 2.3
  * Full support for ICC 4.3</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1351425600">- Update to version 2.4
  * Featured release
    + Performance and stability fixes
    + Black point detection from the algorithm disclosed by Adobe
    + Added support for transforms on planar data with different
    stride
    + Added a new plug-in type for optimizing full transforms
    + Linear (gamma 1.0) profiles can now operate in unbounded mode
    + Added "half" float support
    + Please see the ChangeLog  file for more details.</changelog>
  <changelog author="mrdocs@opensuse.org" date="1372852800">- Update to version 2.5
  * Maintenance update
  + Focused on incorrect path and error handling.
    It also updates the black point compensation algorithm
    to match the ICC including the new black point compensation algorithm
    actually being standarized by TC130, ICC and ISO.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389009600">- Correct lcms-endian.patch to rely on autoconf only, no
  extra arch specific preprocessor hackery.</changelog>
  <changelog author="adrian@suse.de" date="1395057600">- update to version 2.6
  * Fixed a double free in recovering from a previous error in default intent handler.
  * Fixed some indexing out of bounds in floating point interpolation
  * Fixed a bug in PCS/Colorspace order when reading V2 Lab devicelinks
  * Added a way to retrieve matrix shaper always, no matter LUT is present
  * Changed endianess detection for PowerPC
  * Fixed memory leaks on error handling
  * Big revamp on Contexts, from Artifex
  * New locking plug-in, from Artifex
  * Added directories for tiff, jpeg in configure script
  * Fix for delete tag memory corruption
  * Added pthread dependency. From now lcms supports multithreading</changelog>
  <changelog author="mailaender@opensuse.org" date="1400241600">- Fixed missing dependency pthread</changelog>
  <changelog author="aloisio@gmx.com" date="1435320000">- Update to version 2.7
  * improved multi-threading
  * added contexts and a new locking plug-in type
  * bugfixes and other minor features
- Dropped lcms-endian.patch that was fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="plinnell@opensuse.org" date="1471348800">- Update to 2.8
  * Fixed many typos in comments, thanks to Stefan Weil for doing that.
  * Fixed localization bug, added a new test case crayons.icc thnaks to Richard Hughes for providing the profile.
  * Fixed a bug in optimizer that made some formats (i.e, bits planar) unavailable
  * Fixed misalignment problems on Alpha. The compiler does not align strings, and accessing begin of string as a uint16 makes code to fail.
  * Added some extra checks to the tools and examples.
  * Fix a bug that prevented to read luminance tag
  * BIG amount of functionality contributed/Sponsored  by Alien Skin Software: TransformStride, copyAlpha, performance plug-ins. Fixes some warnings as well.
  * added an extra _ to _stdcall to make it more portable
  * Fixed a bug in transicc for named color profiles
  * Fixed several compiler warnings
  * Added support for Visual Studio 2015
  * Fixed for XCODE project</changelog>
  <changelog author="plinnell@opensuse.org" date="1485259200">- Added 0001-Added-an-extra-check-to-MLU-bounds.patch
  * fixes https://bugzilla.suse.com/show_bug.cgi?id=1021364</changelog>
  <changelog author="plinnell@opensuse.org" date="1511870400">- Update to 2.9
- Drop 0001-Added-an-extra-check-to-MLU-bounds.patch, it is now
  in the upstream code
  * Bugfix release
  + Several fixes related with security, and therefore not detailed here.
  + C++ compiles now without warnings
  + Added OSX and clang in travis
  + Added a travis-ci test matrix for many compilers and OS.
    Thanks to Thomas Weber (debian) for this great improvement.
  + testbed can now work with dynamic versions of library
  + Fixed wrong planar formatters regarding linestride interpretation</changelog>
  <changelog author="sbrabec@suse.com" date="1538568000">- Add check on CGATS memory allocation (bsc1108813, CVE-2018-16435,
  lcms2-cgats-memory-allocation.patch).</changelog>
</package>
<package pkgid="61f3abcef6ab056b4d77417937dfd298db90a84c276abd390135a120132cf0df" name="liblcms2-2-32bit" arch="x86_64">
  <version epoch="0" ver="2.9" rel="lp150.2.3.1"/>
  <changelog author="adrian@suse.de" date="1274184000">- initial lcms2 package, based on package from version 1
- use OBS source services to download tar ball</changelog>
  <changelog author="mrdocs@opensuse.org" date="1286539200">-more spec file cleanups and prepare for factory submit
-test building against it in my home repo</changelog>
  <changelog author="mrdocs@opensuse.org" date="1289390400">- build documentation noarch and recompress tar</changelog>
  <changelog author="adrian@suse.de" date="1293364800">- update to version 2.1
  * maintenance release (no further details in changelog)
- remove obsolete patches</changelog>
  <changelog author="ro@suse.de" date="1303214400">- fix devel package name in baselibs.conf</changelog>
  <changelog author="mrdocs@opensuse.org" date="1307793600">-update to 2.2
  * maintenance update
  +Version  2.2 adds stability.
  - fixes all known bugs
  - adds support  for dictionary  metatag. Pascal unit now compiles
  under FPK Pascal as well as Delphi.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322136000">- Open all fds with O_CLOEXEC
- Use gcc visibility, symbol table shrinks around 50% ...</changelog>
  <changelog author="adrian@suse.de" date="1324123200">- update to version 2.3
  * Full support for ICC 4.3</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1351425600">- Update to version 2.4
  * Featured release
    + Performance and stability fixes
    + Black point detection from the algorithm disclosed by Adobe
    + Added support for transforms on planar data with different
    stride
    + Added a new plug-in type for optimizing full transforms
    + Linear (gamma 1.0) profiles can now operate in unbounded mode
    + Added "half" float support
    + Please see the ChangeLog  file for more details.</changelog>
  <changelog author="mrdocs@opensuse.org" date="1372852800">- Update to version 2.5
  * Maintenance update
  + Focused on incorrect path and error handling.
    It also updates the black point compensation algorithm
    to match the ICC including the new black point compensation algorithm
    actually being standarized by TC130, ICC and ISO.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389009600">- Correct lcms-endian.patch to rely on autoconf only, no
  extra arch specific preprocessor hackery.</changelog>
  <changelog author="adrian@suse.de" date="1395057600">- update to version 2.6
  * Fixed a double free in recovering from a previous error in default intent handler.
  * Fixed some indexing out of bounds in floating point interpolation
  * Fixed a bug in PCS/Colorspace order when reading V2 Lab devicelinks
  * Added a way to retrieve matrix shaper always, no matter LUT is present
  * Changed endianess detection for PowerPC
  * Fixed memory leaks on error handling
  * Big revamp on Contexts, from Artifex
  * New locking plug-in, from Artifex
  * Added directories for tiff, jpeg in configure script
  * Fix for delete tag memory corruption
  * Added pthread dependency. From now lcms supports multithreading</changelog>
  <changelog author="mailaender@opensuse.org" date="1400241600">- Fixed missing dependency pthread</changelog>
  <changelog author="aloisio@gmx.com" date="1435320000">- Update to version 2.7
  * improved multi-threading
  * added contexts and a new locking plug-in type
  * bugfixes and other minor features
- Dropped lcms-endian.patch that was fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="plinnell@opensuse.org" date="1471348800">- Update to 2.8
  * Fixed many typos in comments, thanks to Stefan Weil for doing that.
  * Fixed localization bug, added a new test case crayons.icc thnaks to Richard Hughes for providing the profile.
  * Fixed a bug in optimizer that made some formats (i.e, bits planar) unavailable
  * Fixed misalignment problems on Alpha. The compiler does not align strings, and accessing begin of string as a uint16 makes code to fail.
  * Added some extra checks to the tools and examples.
  * Fix a bug that prevented to read luminance tag
  * BIG amount of functionality contributed/Sponsored  by Alien Skin Software: TransformStride, copyAlpha, performance plug-ins. Fixes some warnings as well.
  * added an extra _ to _stdcall to make it more portable
  * Fixed a bug in transicc for named color profiles
  * Fixed several compiler warnings
  * Added support for Visual Studio 2015
  * Fixed for XCODE project</changelog>
  <changelog author="plinnell@opensuse.org" date="1485259200">- Added 0001-Added-an-extra-check-to-MLU-bounds.patch
  * fixes https://bugzilla.suse.com/show_bug.cgi?id=1021364</changelog>
  <changelog author="plinnell@opensuse.org" date="1511870400">- Update to 2.9
- Drop 0001-Added-an-extra-check-to-MLU-bounds.patch, it is now
  in the upstream code
  * Bugfix release
  + Several fixes related with security, and therefore not detailed here.
  + C++ compiles now without warnings
  + Added OSX and clang in travis
  + Added a travis-ci test matrix for many compilers and OS.
    Thanks to Thomas Weber (debian) for this great improvement.
  + testbed can now work with dynamic versions of library
  + Fixed wrong planar formatters regarding linestride interpretation</changelog>
  <changelog author="sbrabec@suse.com" date="1538568000">- Add check on CGATS memory allocation (bsc1108813, CVE-2018-16435,
  lcms2-cgats-memory-allocation.patch).</changelog>
</package>
<package pkgid="d1bf27a9c9cd41ab9c3becd3b7bd831ee8c1786580b2d58c17dd1ac3c52f1393" name="liblcms2-devel" arch="x86_64">
  <version epoch="0" ver="2.9" rel="lp150.2.3.1"/>
  <changelog author="adrian@suse.de" date="1274184000">- initial lcms2 package, based on package from version 1
- use OBS source services to download tar ball</changelog>
  <changelog author="mrdocs@opensuse.org" date="1286539200">-more spec file cleanups and prepare for factory submit
-test building against it in my home repo</changelog>
  <changelog author="mrdocs@opensuse.org" date="1289390400">- build documentation noarch and recompress tar</changelog>
  <changelog author="adrian@suse.de" date="1293364800">- update to version 2.1
  * maintenance release (no further details in changelog)
- remove obsolete patches</changelog>
  <changelog author="ro@suse.de" date="1303214400">- fix devel package name in baselibs.conf</changelog>
  <changelog author="mrdocs@opensuse.org" date="1307793600">-update to 2.2
  * maintenance update
  +Version  2.2 adds stability.
  - fixes all known bugs
  - adds support  for dictionary  metatag. Pascal unit now compiles
  under FPK Pascal as well as Delphi.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322136000">- Open all fds with O_CLOEXEC
- Use gcc visibility, symbol table shrinks around 50% ...</changelog>
  <changelog author="adrian@suse.de" date="1324123200">- update to version 2.3
  * Full support for ICC 4.3</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1351425600">- Update to version 2.4
  * Featured release
    + Performance and stability fixes
    + Black point detection from the algorithm disclosed by Adobe
    + Added support for transforms on planar data with different
    stride
    + Added a new plug-in type for optimizing full transforms
    + Linear (gamma 1.0) profiles can now operate in unbounded mode
    + Added "half" float support
    + Please see the ChangeLog  file for more details.</changelog>
  <changelog author="mrdocs@opensuse.org" date="1372852800">- Update to version 2.5
  * Maintenance update
  + Focused on incorrect path and error handling.
    It also updates the black point compensation algorithm
    to match the ICC including the new black point compensation algorithm
    actually being standarized by TC130, ICC and ISO.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389009600">- Correct lcms-endian.patch to rely on autoconf only, no
  extra arch specific preprocessor hackery.</changelog>
  <changelog author="adrian@suse.de" date="1395057600">- update to version 2.6
  * Fixed a double free in recovering from a previous error in default intent handler.
  * Fixed some indexing out of bounds in floating point interpolation
  * Fixed a bug in PCS/Colorspace order when reading V2 Lab devicelinks
  * Added a way to retrieve matrix shaper always, no matter LUT is present
  * Changed endianess detection for PowerPC
  * Fixed memory leaks on error handling
  * Big revamp on Contexts, from Artifex
  * New locking plug-in, from Artifex
  * Added directories for tiff, jpeg in configure script
  * Fix for delete tag memory corruption
  * Added pthread dependency. From now lcms supports multithreading</changelog>
  <changelog author="mailaender@opensuse.org" date="1400241600">- Fixed missing dependency pthread</changelog>
  <changelog author="aloisio@gmx.com" date="1435320000">- Update to version 2.7
  * improved multi-threading
  * added contexts and a new locking plug-in type
  * bugfixes and other minor features
- Dropped lcms-endian.patch that was fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="plinnell@opensuse.org" date="1471348800">- Update to 2.8
  * Fixed many typos in comments, thanks to Stefan Weil for doing that.
  * Fixed localization bug, added a new test case crayons.icc thnaks to Richard Hughes for providing the profile.
  * Fixed a bug in optimizer that made some formats (i.e, bits planar) unavailable
  * Fixed misalignment problems on Alpha. The compiler does not align strings, and accessing begin of string as a uint16 makes code to fail.
  * Added some extra checks to the tools and examples.
  * Fix a bug that prevented to read luminance tag
  * BIG amount of functionality contributed/Sponsored  by Alien Skin Software: TransformStride, copyAlpha, performance plug-ins. Fixes some warnings as well.
  * added an extra _ to _stdcall to make it more portable
  * Fixed a bug in transicc for named color profiles
  * Fixed several compiler warnings
  * Added support for Visual Studio 2015
  * Fixed for XCODE project</changelog>
  <changelog author="plinnell@opensuse.org" date="1485259200">- Added 0001-Added-an-extra-check-to-MLU-bounds.patch
  * fixes https://bugzilla.suse.com/show_bug.cgi?id=1021364</changelog>
  <changelog author="plinnell@opensuse.org" date="1511870400">- Update to 2.9
- Drop 0001-Added-an-extra-check-to-MLU-bounds.patch, it is now
  in the upstream code
  * Bugfix release
  + Several fixes related with security, and therefore not detailed here.
  + C++ compiles now without warnings
  + Added OSX and clang in travis
  + Added a travis-ci test matrix for many compilers and OS.
    Thanks to Thomas Weber (debian) for this great improvement.
  + testbed can now work with dynamic versions of library
  + Fixed wrong planar formatters regarding linestride interpretation</changelog>
  <changelog author="sbrabec@suse.com" date="1538568000">- Add check on CGATS memory allocation (bsc1108813, CVE-2018-16435,
  lcms2-cgats-memory-allocation.patch).</changelog>
</package>
<package pkgid="f0b708e2b3f475b201d666a71111a8aa1bf035aea825c55df6f8caf76ec04f31" name="liblcms2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.9" rel="lp150.2.3.1"/>
  <changelog author="adrian@suse.de" date="1274184000">- initial lcms2 package, based on package from version 1
- use OBS source services to download tar ball</changelog>
  <changelog author="mrdocs@opensuse.org" date="1286539200">-more spec file cleanups and prepare for factory submit
-test building against it in my home repo</changelog>
  <changelog author="mrdocs@opensuse.org" date="1289390400">- build documentation noarch and recompress tar</changelog>
  <changelog author="adrian@suse.de" date="1293364800">- update to version 2.1
  * maintenance release (no further details in changelog)
- remove obsolete patches</changelog>
  <changelog author="ro@suse.de" date="1303214400">- fix devel package name in baselibs.conf</changelog>
  <changelog author="mrdocs@opensuse.org" date="1307793600">-update to 2.2
  * maintenance update
  +Version  2.2 adds stability.
  - fixes all known bugs
  - adds support  for dictionary  metatag. Pascal unit now compiles
  under FPK Pascal as well as Delphi.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322136000">- Open all fds with O_CLOEXEC
- Use gcc visibility, symbol table shrinks around 50% ...</changelog>
  <changelog author="adrian@suse.de" date="1324123200">- update to version 2.3
  * Full support for ICC 4.3</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1351425600">- Update to version 2.4
  * Featured release
    + Performance and stability fixes
    + Black point detection from the algorithm disclosed by Adobe
    + Added support for transforms on planar data with different
    stride
    + Added a new plug-in type for optimizing full transforms
    + Linear (gamma 1.0) profiles can now operate in unbounded mode
    + Added "half" float support
    + Please see the ChangeLog  file for more details.</changelog>
  <changelog author="mrdocs@opensuse.org" date="1372852800">- Update to version 2.5
  * Maintenance update
  + Focused on incorrect path and error handling.
    It also updates the black point compensation algorithm
    to match the ICC including the new black point compensation algorithm
    actually being standarized by TC130, ICC and ISO.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389009600">- Correct lcms-endian.patch to rely on autoconf only, no
  extra arch specific preprocessor hackery.</changelog>
  <changelog author="adrian@suse.de" date="1395057600">- update to version 2.6
  * Fixed a double free in recovering from a previous error in default intent handler.
  * Fixed some indexing out of bounds in floating point interpolation
  * Fixed a bug in PCS/Colorspace order when reading V2 Lab devicelinks
  * Added a way to retrieve matrix shaper always, no matter LUT is present
  * Changed endianess detection for PowerPC
  * Fixed memory leaks on error handling
  * Big revamp on Contexts, from Artifex
  * New locking plug-in, from Artifex
  * Added directories for tiff, jpeg in configure script
  * Fix for delete tag memory corruption
  * Added pthread dependency. From now lcms supports multithreading</changelog>
  <changelog author="mailaender@opensuse.org" date="1400241600">- Fixed missing dependency pthread</changelog>
  <changelog author="aloisio@gmx.com" date="1435320000">- Update to version 2.7
  * improved multi-threading
  * added contexts and a new locking plug-in type
  * bugfixes and other minor features
- Dropped lcms-endian.patch that was fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="plinnell@opensuse.org" date="1471348800">- Update to 2.8
  * Fixed many typos in comments, thanks to Stefan Weil for doing that.
  * Fixed localization bug, added a new test case crayons.icc thnaks to Richard Hughes for providing the profile.
  * Fixed a bug in optimizer that made some formats (i.e, bits planar) unavailable
  * Fixed misalignment problems on Alpha. The compiler does not align strings, and accessing begin of string as a uint16 makes code to fail.
  * Added some extra checks to the tools and examples.
  * Fix a bug that prevented to read luminance tag
  * BIG amount of functionality contributed/Sponsored  by Alien Skin Software: TransformStride, copyAlpha, performance plug-ins. Fixes some warnings as well.
  * added an extra _ to _stdcall to make it more portable
  * Fixed a bug in transicc for named color profiles
  * Fixed several compiler warnings
  * Added support for Visual Studio 2015
  * Fixed for XCODE project</changelog>
  <changelog author="plinnell@opensuse.org" date="1485259200">- Added 0001-Added-an-extra-check-to-MLU-bounds.patch
  * fixes https://bugzilla.suse.com/show_bug.cgi?id=1021364</changelog>
  <changelog author="plinnell@opensuse.org" date="1511870400">- Update to 2.9
- Drop 0001-Added-an-extra-check-to-MLU-bounds.patch, it is now
  in the upstream code
  * Bugfix release
  + Several fixes related with security, and therefore not detailed here.
  + C++ compiles now without warnings
  + Added OSX and clang in travis
  + Added a travis-ci test matrix for many compilers and OS.
    Thanks to Thomas Weber (debian) for this great improvement.
  + testbed can now work with dynamic versions of library
  + Fixed wrong planar formatters regarding linestride interpretation</changelog>
  <changelog author="sbrabec@suse.com" date="1538568000">- Add check on CGATS memory allocation (bsc1108813, CVE-2018-16435,
  lcms2-cgats-memory-allocation.patch).</changelog>
</package>
<package pkgid="e48714fe25aa99b008990a4b21950bc05f2f7ddec82aafe15b56ff5bd9a048d0" name="liblcms2-doc" arch="noarch">
  <version epoch="0" ver="2.9" rel="lp150.2.3.1"/>
  <changelog author="adrian@suse.de" date="1274184000">- initial lcms2 package, based on package from version 1
- use OBS source services to download tar ball</changelog>
  <changelog author="mrdocs@opensuse.org" date="1286539200">-more spec file cleanups and prepare for factory submit
-test building against it in my home repo</changelog>
  <changelog author="mrdocs@opensuse.org" date="1289390400">- build documentation noarch and recompress tar</changelog>
  <changelog author="adrian@suse.de" date="1293364800">- update to version 2.1
  * maintenance release (no further details in changelog)
- remove obsolete patches</changelog>
  <changelog author="ro@suse.de" date="1303214400">- fix devel package name in baselibs.conf</changelog>
  <changelog author="mrdocs@opensuse.org" date="1307793600">-update to 2.2
  * maintenance update
  +Version  2.2 adds stability.
  - fixes all known bugs
  - adds support  for dictionary  metatag. Pascal unit now compiles
  under FPK Pascal as well as Delphi.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322136000">- Open all fds with O_CLOEXEC
- Use gcc visibility, symbol table shrinks around 50% ...</changelog>
  <changelog author="adrian@suse.de" date="1324123200">- update to version 2.3
  * Full support for ICC 4.3</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1351425600">- Update to version 2.4
  * Featured release
    + Performance and stability fixes
    + Black point detection from the algorithm disclosed by Adobe
    + Added support for transforms on planar data with different
    stride
    + Added a new plug-in type for optimizing full transforms
    + Linear (gamma 1.0) profiles can now operate in unbounded mode
    + Added "half" float support
    + Please see the ChangeLog  file for more details.</changelog>
  <changelog author="mrdocs@opensuse.org" date="1372852800">- Update to version 2.5
  * Maintenance update
  + Focused on incorrect path and error handling.
    It also updates the black point compensation algorithm
    to match the ICC including the new black point compensation algorithm
    actually being standarized by TC130, ICC and ISO.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389009600">- Correct lcms-endian.patch to rely on autoconf only, no
  extra arch specific preprocessor hackery.</changelog>
  <changelog author="adrian@suse.de" date="1395057600">- update to version 2.6
  * Fixed a double free in recovering from a previous error in default intent handler.
  * Fixed some indexing out of bounds in floating point interpolation
  * Fixed a bug in PCS/Colorspace order when reading V2 Lab devicelinks
  * Added a way to retrieve matrix shaper always, no matter LUT is present
  * Changed endianess detection for PowerPC
  * Fixed memory leaks on error handling
  * Big revamp on Contexts, from Artifex
  * New locking plug-in, from Artifex
  * Added directories for tiff, jpeg in configure script
  * Fix for delete tag memory corruption
  * Added pthread dependency. From now lcms supports multithreading</changelog>
  <changelog author="mailaender@opensuse.org" date="1400241600">- Fixed missing dependency pthread</changelog>
  <changelog author="aloisio@gmx.com" date="1435320000">- Update to version 2.7
  * improved multi-threading
  * added contexts and a new locking plug-in type
  * bugfixes and other minor features
- Dropped lcms-endian.patch that was fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="plinnell@opensuse.org" date="1471348800">- Update to 2.8
  * Fixed many typos in comments, thanks to Stefan Weil for doing that.
  * Fixed localization bug, added a new test case crayons.icc thnaks to Richard Hughes for providing the profile.
  * Fixed a bug in optimizer that made some formats (i.e, bits planar) unavailable
  * Fixed misalignment problems on Alpha. The compiler does not align strings, and accessing begin of string as a uint16 makes code to fail.
  * Added some extra checks to the tools and examples.
  * Fix a bug that prevented to read luminance tag
  * BIG amount of functionality contributed/Sponsored  by Alien Skin Software: TransformStride, copyAlpha, performance plug-ins. Fixes some warnings as well.
  * added an extra _ to _stdcall to make it more portable
  * Fixed a bug in transicc for named color profiles
  * Fixed several compiler warnings
  * Added support for Visual Studio 2015
  * Fixed for XCODE project</changelog>
  <changelog author="plinnell@opensuse.org" date="1485259200">- Added 0001-Added-an-extra-check-to-MLU-bounds.patch
  * fixes https://bugzilla.suse.com/show_bug.cgi?id=1021364</changelog>
  <changelog author="plinnell@opensuse.org" date="1511870400">- Update to 2.9
- Drop 0001-Added-an-extra-check-to-MLU-bounds.patch, it is now
  in the upstream code
  * Bugfix release
  + Several fixes related with security, and therefore not detailed here.
  + C++ compiles now without warnings
  + Added OSX and clang in travis
  + Added a travis-ci test matrix for many compilers and OS.
    Thanks to Thomas Weber (debian) for this great improvement.
  + testbed can now work with dynamic versions of library
  + Fixed wrong planar formatters regarding linestride interpretation</changelog>
  <changelog author="sbrabec@suse.com" date="1538568000">- Add check on CGATS memory allocation (bsc1108813, CVE-2018-16435,
  lcms2-cgats-memory-allocation.patch).</changelog>
</package>
<package pkgid="709940f3902e4b553dcdca65df3bb8326de7d689865a4868f374639964c40e6d" name="libldap-2_4-2" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="lp150.8.3.1"/>
  <changelog author="hguo@suse.com" date="1476446400">- Add more details in the comments of slapd.conf concerning
  file permission and StartTLS capability.</changelog>
  <changelog author="hguo@suse.com" date="1478779200">- Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Drop binutils requirement; the code using /usr/bin/strings has
  been dropped in openSUSE:Factory/openldap2 revision 112.</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#976172 owned by hguo@suse.com: openldap2 - missing
  /usr/share/doc/packages/openldap2/guide/admin/guide.html
- bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546:
  openldap2: slapd crash in valueReturnFilter cleanup
- [fate#319300](https://fate.suse.com/319300)
- [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545)
- bug#905959 owned by hguo@suse.com: L3-Question: Are multiple
  "Connection 0" in a Multi Master setup normal ?
- [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546)
- bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545:
  openldap2: slapd crashes on search with deref control and empty attr list</changelog>
  <changelog author="hguo@suse.com" date="1496836800">- Remove legacy daemon control that was used to migrate from SLE 11
  to 12. (bsc#1038405)</changelog>
  <changelog author="michael@stroeder.com" date="1499860800">- Upgrade to upstream 2.4.45 release
- removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch
  and  0012-use-system-wide-cert-dir-by-default.patch
- added 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  for supporting modify increment operations with back-sock
- added overlay addpartial to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1500552000">- added overlay trace to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1503057600">- Added OpenLDAP new feature implementing OpenLDAP ITS#8714
  0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1504699200">- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1505736000">- added 0012-ITS8051-sockdnpat.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1506945600">- use existing groups instead of inventing new ones</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add openldap-r-only.dif so that openldap2's own tools also
  link against libldap_r rather than libldap.
- Make libldap equivalent to libldap_r (like Debian) to avoid
  crashes in threaded programs which unknowingly get both
  libraries inserted into their process image.
  [rh#1370065, boo#996551]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="michael@stroeder.com" date="1512993600">- added 0016-ITS-8782-fix-cancel-memleak.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="michael@stroeder.com" date="1521806400">- Upgrade to upstream 2.4.46 release
- removed obsolete back-port patches:
  * 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  * 0016-ITS-8782-fix-cancel-memleak.patch
  OpenLDAP 2.4.46 Release (2018/03/22)
  Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717)
  Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373)
  Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687)
  Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791)
  Fixed libldap MozNSS CA certificate hash matching (ITS#7374)
  Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389)
  Fixed libldap MozNSS initialization (ITS#8484)
  Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650)
  Fixed libldap memory leak with cancel operations (ITS#8782)
  Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705)
  Fixed slapd to maintain SSF across SASL binds (ITS#8796)
  Fixed slapd syncrepl deadlock when updating cookie (ITS#8752)
  Fixed slapd syncrepl callback to always be last in the stack (ITS#8752)
  Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778)
  Fixed slapd CSN queue processing (ITS#8801)
  Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720)
  Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520)
  Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226)
  Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404)
  Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692)
  Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752)
  Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100)
  Fixed slapo-syncprov memory leak with delete operations (ITS#8690)
  Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444)
  Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100)
  Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607)
  Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800)
  Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486)
  Build Environment
  Fixed Windows build with newer MINGW version (ITS#8697)
  Fixed compiler warnings and removed unused variables (ITS#8578)
  Contrib
  Fixed ldapc++ Control structure (ITS#8583)
  Documentation
  Delete stub manpage for back-ldbm (ITS#8713)
  Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121)
  Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818)
  Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715)
  Fixed slapo-syncprov(5) indexing requirements (ITS#5048)</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1523016000">- bsc#1085064 Add script "openldap_update_modules_path.sh" which
  which removes the configuration item olcModulePath in cn=config
  which is after upgrade from SLE12 to SLE15 holds inappropriate
  information. If the cn=config is being used on a system, the
  conflicting items in slapd.conf are ignored, despite of it, the
  backend DB configuration section has been also commented out in
  the default slapd.conf.
  In case of correct cn=config (the olcModulePath has been already
  removed), the script stops without touching anything.</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1524571200">- bsc#1085064 Packaging issues have been discovered around the
  openldap_update_modules_path.sh which has been corrected:
  - the spec file was wrongly configured, therefore the script has
  never been called
  - the script should create the symlinks first, as slapcat is
  useless on a system which is already affected.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1534507200">- Fix slapd segfaults in mdb_env_reader_dest
  with patch 0016-Clear-shared-key-only-in-close-function.patch
  (bsc#1089640)</changelog>
</package>
<package pkgid="91198b4168365a4b9d14ccd74a9dab4ab950e7263f4dcb44806df2d21214d97d" name="libldap-2_4-2-32bit" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="lp150.8.3.1"/>
  <changelog author="hguo@suse.com" date="1476446400">- Add more details in the comments of slapd.conf concerning
  file permission and StartTLS capability.</changelog>
  <changelog author="hguo@suse.com" date="1478779200">- Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Drop binutils requirement; the code using /usr/bin/strings has
  been dropped in openSUSE:Factory/openldap2 revision 112.</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#976172 owned by hguo@suse.com: openldap2 - missing
  /usr/share/doc/packages/openldap2/guide/admin/guide.html
- bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546:
  openldap2: slapd crash in valueReturnFilter cleanup
- [fate#319300](https://fate.suse.com/319300)
- [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545)
- bug#905959 owned by hguo@suse.com: L3-Question: Are multiple
  "Connection 0" in a Multi Master setup normal ?
- [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546)
- bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545:
  openldap2: slapd crashes on search with deref control and empty attr list</changelog>
  <changelog author="hguo@suse.com" date="1496836800">- Remove legacy daemon control that was used to migrate from SLE 11
  to 12. (bsc#1038405)</changelog>
  <changelog author="michael@stroeder.com" date="1499860800">- Upgrade to upstream 2.4.45 release
- removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch
  and  0012-use-system-wide-cert-dir-by-default.patch
- added 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  for supporting modify increment operations with back-sock
- added overlay addpartial to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1500552000">- added overlay trace to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1503057600">- Added OpenLDAP new feature implementing OpenLDAP ITS#8714
  0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1504699200">- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1505736000">- added 0012-ITS8051-sockdnpat.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1506945600">- use existing groups instead of inventing new ones</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add openldap-r-only.dif so that openldap2's own tools also
  link against libldap_r rather than libldap.
- Make libldap equivalent to libldap_r (like Debian) to avoid
  crashes in threaded programs which unknowingly get both
  libraries inserted into their process image.
  [rh#1370065, boo#996551]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="michael@stroeder.com" date="1512993600">- added 0016-ITS-8782-fix-cancel-memleak.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="michael@stroeder.com" date="1521806400">- Upgrade to upstream 2.4.46 release
- removed obsolete back-port patches:
  * 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  * 0016-ITS-8782-fix-cancel-memleak.patch
  OpenLDAP 2.4.46 Release (2018/03/22)
  Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717)
  Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373)
  Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687)
  Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791)
  Fixed libldap MozNSS CA certificate hash matching (ITS#7374)
  Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389)
  Fixed libldap MozNSS initialization (ITS#8484)
  Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650)
  Fixed libldap memory leak with cancel operations (ITS#8782)
  Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705)
  Fixed slapd to maintain SSF across SASL binds (ITS#8796)
  Fixed slapd syncrepl deadlock when updating cookie (ITS#8752)
  Fixed slapd syncrepl callback to always be last in the stack (ITS#8752)
  Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778)
  Fixed slapd CSN queue processing (ITS#8801)
  Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720)
  Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520)
  Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226)
  Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404)
  Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692)
  Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752)
  Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100)
  Fixed slapo-syncprov memory leak with delete operations (ITS#8690)
  Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444)
  Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100)
  Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607)
  Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800)
  Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486)
  Build Environment
  Fixed Windows build with newer MINGW version (ITS#8697)
  Fixed compiler warnings and removed unused variables (ITS#8578)
  Contrib
  Fixed ldapc++ Control structure (ITS#8583)
  Documentation
  Delete stub manpage for back-ldbm (ITS#8713)
  Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121)
  Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818)
  Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715)
  Fixed slapo-syncprov(5) indexing requirements (ITS#5048)</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1523016000">- bsc#1085064 Add script "openldap_update_modules_path.sh" which
  which removes the configuration item olcModulePath in cn=config
  which is after upgrade from SLE12 to SLE15 holds inappropriate
  information. If the cn=config is being used on a system, the
  conflicting items in slapd.conf are ignored, despite of it, the
  backend DB configuration section has been also commented out in
  the default slapd.conf.
  In case of correct cn=config (the olcModulePath has been already
  removed), the script stops without touching anything.</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1524571200">- bsc#1085064 Packaging issues have been discovered around the
  openldap_update_modules_path.sh which has been corrected:
  - the spec file was wrongly configured, therefore the script has
  never been called
  - the script should create the symlinks first, as slapcat is
  useless on a system which is already affected.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1534507200">- Fix slapd segfaults in mdb_env_reader_dest
  with patch 0016-Clear-shared-key-only-in-close-function.patch
  (bsc#1089640)</changelog>
</package>
<package pkgid="379d5b6b6336ad9b3e888c227e6b49fe6455a057d7c139aa88a01bee02d9586d" name="libldap-data" arch="noarch">
  <version epoch="0" ver="2.4.46" rel="lp150.8.3.1"/>
  <changelog author="hguo@suse.com" date="1476446400">- Add more details in the comments of slapd.conf concerning
  file permission and StartTLS capability.</changelog>
  <changelog author="hguo@suse.com" date="1478779200">- Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Drop binutils requirement; the code using /usr/bin/strings has
  been dropped in openSUSE:Factory/openldap2 revision 112.</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#976172 owned by hguo@suse.com: openldap2 - missing
  /usr/share/doc/packages/openldap2/guide/admin/guide.html
- bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546:
  openldap2: slapd crash in valueReturnFilter cleanup
- [fate#319300](https://fate.suse.com/319300)
- [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545)
- bug#905959 owned by hguo@suse.com: L3-Question: Are multiple
  "Connection 0" in a Multi Master setup normal ?
- [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546)
- bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545:
  openldap2: slapd crashes on search with deref control and empty attr list</changelog>
  <changelog author="hguo@suse.com" date="1496836800">- Remove legacy daemon control that was used to migrate from SLE 11
  to 12. (bsc#1038405)</changelog>
  <changelog author="michael@stroeder.com" date="1499860800">- Upgrade to upstream 2.4.45 release
- removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch
  and  0012-use-system-wide-cert-dir-by-default.patch
- added 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  for supporting modify increment operations with back-sock
- added overlay addpartial to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1500552000">- added overlay trace to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1503057600">- Added OpenLDAP new feature implementing OpenLDAP ITS#8714
  0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1504699200">- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1505736000">- added 0012-ITS8051-sockdnpat.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1506945600">- use existing groups instead of inventing new ones</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add openldap-r-only.dif so that openldap2's own tools also
  link against libldap_r rather than libldap.
- Make libldap equivalent to libldap_r (like Debian) to avoid
  crashes in threaded programs which unknowingly get both
  libraries inserted into their process image.
  [rh#1370065, boo#996551]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="michael@stroeder.com" date="1512993600">- added 0016-ITS-8782-fix-cancel-memleak.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="michael@stroeder.com" date="1521806400">- Upgrade to upstream 2.4.46 release
- removed obsolete back-port patches:
  * 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  * 0016-ITS-8782-fix-cancel-memleak.patch
  OpenLDAP 2.4.46 Release (2018/03/22)
  Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717)
  Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373)
  Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687)
  Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791)
  Fixed libldap MozNSS CA certificate hash matching (ITS#7374)
  Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389)
  Fixed libldap MozNSS initialization (ITS#8484)
  Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650)
  Fixed libldap memory leak with cancel operations (ITS#8782)
  Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705)
  Fixed slapd to maintain SSF across SASL binds (ITS#8796)
  Fixed slapd syncrepl deadlock when updating cookie (ITS#8752)
  Fixed slapd syncrepl callback to always be last in the stack (ITS#8752)
  Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778)
  Fixed slapd CSN queue processing (ITS#8801)
  Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720)
  Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520)
  Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226)
  Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404)
  Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692)
  Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752)
  Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100)
  Fixed slapo-syncprov memory leak with delete operations (ITS#8690)
  Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444)
  Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100)
  Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607)
  Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800)
  Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486)
  Build Environment
  Fixed Windows build with newer MINGW version (ITS#8697)
  Fixed compiler warnings and removed unused variables (ITS#8578)
  Contrib
  Fixed ldapc++ Control structure (ITS#8583)
  Documentation
  Delete stub manpage for back-ldbm (ITS#8713)
  Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121)
  Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818)
  Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715)
  Fixed slapo-syncprov(5) indexing requirements (ITS#5048)</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1523016000">- bsc#1085064 Add script "openldap_update_modules_path.sh" which
  which removes the configuration item olcModulePath in cn=config
  which is after upgrade from SLE12 to SLE15 holds inappropriate
  information. If the cn=config is being used on a system, the
  conflicting items in slapd.conf are ignored, despite of it, the
  backend DB configuration section has been also commented out in
  the default slapd.conf.
  In case of correct cn=config (the olcModulePath has been already
  removed), the script stops without touching anything.</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1524571200">- bsc#1085064 Packaging issues have been discovered around the
  openldap_update_modules_path.sh which has been corrected:
  - the spec file was wrongly configured, therefore the script has
  never been called
  - the script should create the symlinks first, as slapcat is
  useless on a system which is already affected.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1534507200">- Fix slapd segfaults in mdb_env_reader_dest
  with patch 0016-Clear-shared-key-only-in-close-function.patch
  (bsc#1089640)</changelog>
</package>
<package pkgid="44f351c2ba253d897e49cc382802de37f204921bfb8023597fa5903beee1a260" name="libldb-devel" arch="x86_64">
  <version epoch="0" ver="1.2.3" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1445515200">- Rename pyldb to python-ldb.</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Add doxygen at build time to add the development documentation.
- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 1.1.23; (bsc#954658).
  + Test improvements
  + Improved python3 bindings; (bsc#951911)
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1449748800">- Update to 1.1.24.
  + fix LDAP \00 search expression attack DoS; CVE-2015-3223; (bso#11325)
  + fix remote read memory exploit in LDB; CVE-2015-5330; (bso#11599)
  + move ldb_(un)pack_data into ldb_module.h for testing
  + fix installation of _ldb_text.py
  + fix propagation of LDB errors through TDB
  + fix bug triggered by having an empty message in database during search</changelog>
  <changelog author="lmuelle@suse.com" date="1453896000">- Update to 1.1.25; (bsc#954658).
  + torture: test ldb_unpack_data_only_attr_list
  + increment version due to added ldb_unpack_data_only_attr_list
  + introduce ldb_unpack_data_withlist to unpack partial list of attributes</changelog>
  <changelog author="lmuelle@suse.com" date="1455278400">- Provide python-ldb and python-ldb-devel; (bsc#966523).</changelog>
  <changelog author="lmuelle@suse.com" date="1455710400">- Update to 1.1.26; (bsc#954658).
  + let a timeout of -1 indicate no timeout for a given request
  + fix memory leaks in pyldb ldb.search()
  + build fixes
  + improve pyldb ldb.search() help message
  + add pyldb ldb.search_iterator() api
  + add LDB_ATTR_FLAG_FORCE_BASE64_LDIF as optional argument
    to ldb_schema_attribute_add()
  + add client support for LDB_CONTROL_DIRSYNC_EX</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Add ldb-python3.5-fix-soabi_name.patch: Do not change x86_64 to
  x86-64 when building with python 3.5.</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Require talloc 2.1.6 at build-time; (bsc#954658).</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to 1.1.27
  + performance improvements
  + VLV control improvements</changelog>
  <changelog author="ddiss@suse.com" date="1485259200">- Update to 1.1.29; (bsc#1032915).
  + add support for LDB_CONTROL_RECALCULATE_RDN_OID on ldb_modify()
  + Performance and memory consumption improvements</changelog>
  <changelog author="scabrero@suse.com" date="1499083200">- Update to 1.1.31
  + let ldbdump parse the -i option
  + don't allow the reveal_internals control for ldbedit
  + only allow --show-binary for ldbsearch
  + don't let ldbsearch create non-existing files
  + fix ldb_tdb search inconsistencies
  + add cmocka based tests
  + provide an interface for improved indexing for callers
    like Samba, which will allow much better performance.
  + Makes ldb access to tdb:// databases use a private event context
    rather than the global event context passed in by the caller.
    This is because running other operations while locks are held
    or a search is being conducted is not safe.
  + Add efficient function to find duplicate values in ldb messages
    (this makes large multi-valued attributes in ldb_tdb more efficient)
- Add ldb-tests-do-not-override-lib-path.patch: Check if LD_LIBRARY_PATH
  and LDB_MODULES_PATH environment variables are set before overriding
  them.</changelog>
  <changelog author="scabrero@suse.com" date="1499256000">- Update to 1.2.0
  + handle one more LDB_FLAG_INTERNAL_DISABLE_SINGLE_VALUE_CHECK
    case in ldb_tdb
  + fix ldb_tdb locking (performance) problems
  + fix ldb_tdb search inconsistencies by adding
    read_[un]lock() hooks to the module stack
    (bug #12858)
  + add cmocka based tests for the locking issues
  + ldb_version.h provides LDB_VERSION_{MAJOR,MINOR,RELEASE} defines
  + protect ldb_modules.h from being used by Samba &lt; 4.7
    Note: that this release (as well as 1.1.30 and 1.1.31)
    may cause problems for older applications, e.g. Samba
    See https://bugzilla.samba.org/show_bug.cgi?id=12859</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to 1.2.1
  + Bug #12882: Do not install _ldb_text.py if we have system libldb
  + Use libraries from build dir for testsuite
  + Bug #12900: Fix index out of bound in ldb_msg_find_common_values</changelog>
  <changelog author="scabrero@suse.com" date="1505736000">- Update to 1.2.2
  + Bug #13017: Add ldb_ldif_message_redacted_string() to allow debug
    of redacted log messages, avoiding showing secret values
  + Bug #13015: Allow re-index of newer databases with binary GUID TDB keys
    (this officially removes support for re-index of the original
    pack format 0, rather than simply segfaulting).
  + Avoid memory allocation and so make modify of records in ldb_tdb faster</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Remove %if guards for blocks that do not affect the build result.
  Fix RPM groups and summaries.
  Drop very old SUSE support. Replace old RPM macros by new
  constructs.</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 1.2.3; (bsc#1080545);
  + Performance regression in DNS server with introduction of DNS wildcard;
    (bso#13191);</changelog>
  <changelog author="dmulder@suse.com" date="1536926400">- Remove python-talloc-devel from %if %else block, since the py3 build
  should not remove py2 dependencies; (bsc#1108164);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1537876800">- Update license to LGPL 3.0 or later; (bsc#1109571);</changelog>
</package>
<package pkgid="50a899e31eb60cede4dde005c783dbfe8d2b12726cda81c97783454af996fb5b" name="libldb1" arch="x86_64">
  <version epoch="0" ver="1.2.3" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1445515200">- Rename pyldb to python-ldb.</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Add doxygen at build time to add the development documentation.
- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 1.1.23; (bsc#954658).
  + Test improvements
  + Improved python3 bindings; (bsc#951911)
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1449748800">- Update to 1.1.24.
  + fix LDAP \00 search expression attack DoS; CVE-2015-3223; (bso#11325)
  + fix remote read memory exploit in LDB; CVE-2015-5330; (bso#11599)
  + move ldb_(un)pack_data into ldb_module.h for testing
  + fix installation of _ldb_text.py
  + fix propagation of LDB errors through TDB
  + fix bug triggered by having an empty message in database during search</changelog>
  <changelog author="lmuelle@suse.com" date="1453896000">- Update to 1.1.25; (bsc#954658).
  + torture: test ldb_unpack_data_only_attr_list
  + increment version due to added ldb_unpack_data_only_attr_list
  + introduce ldb_unpack_data_withlist to unpack partial list of attributes</changelog>
  <changelog author="lmuelle@suse.com" date="1455278400">- Provide python-ldb and python-ldb-devel; (bsc#966523).</changelog>
  <changelog author="lmuelle@suse.com" date="1455710400">- Update to 1.1.26; (bsc#954658).
  + let a timeout of -1 indicate no timeout for a given request
  + fix memory leaks in pyldb ldb.search()
  + build fixes
  + improve pyldb ldb.search() help message
  + add pyldb ldb.search_iterator() api
  + add LDB_ATTR_FLAG_FORCE_BASE64_LDIF as optional argument
    to ldb_schema_attribute_add()
  + add client support for LDB_CONTROL_DIRSYNC_EX</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Add ldb-python3.5-fix-soabi_name.patch: Do not change x86_64 to
  x86-64 when building with python 3.5.</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Require talloc 2.1.6 at build-time; (bsc#954658).</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to 1.1.27
  + performance improvements
  + VLV control improvements</changelog>
  <changelog author="ddiss@suse.com" date="1485259200">- Update to 1.1.29; (bsc#1032915).
  + add support for LDB_CONTROL_RECALCULATE_RDN_OID on ldb_modify()
  + Performance and memory consumption improvements</changelog>
  <changelog author="scabrero@suse.com" date="1499083200">- Update to 1.1.31
  + let ldbdump parse the -i option
  + don't allow the reveal_internals control for ldbedit
  + only allow --show-binary for ldbsearch
  + don't let ldbsearch create non-existing files
  + fix ldb_tdb search inconsistencies
  + add cmocka based tests
  + provide an interface for improved indexing for callers
    like Samba, which will allow much better performance.
  + Makes ldb access to tdb:// databases use a private event context
    rather than the global event context passed in by the caller.
    This is because running other operations while locks are held
    or a search is being conducted is not safe.
  + Add efficient function to find duplicate values in ldb messages
    (this makes large multi-valued attributes in ldb_tdb more efficient)
- Add ldb-tests-do-not-override-lib-path.patch: Check if LD_LIBRARY_PATH
  and LDB_MODULES_PATH environment variables are set before overriding
  them.</changelog>
  <changelog author="scabrero@suse.com" date="1499256000">- Update to 1.2.0
  + handle one more LDB_FLAG_INTERNAL_DISABLE_SINGLE_VALUE_CHECK
    case in ldb_tdb
  + fix ldb_tdb locking (performance) problems
  + fix ldb_tdb search inconsistencies by adding
    read_[un]lock() hooks to the module stack
    (bug #12858)
  + add cmocka based tests for the locking issues
  + ldb_version.h provides LDB_VERSION_{MAJOR,MINOR,RELEASE} defines
  + protect ldb_modules.h from being used by Samba &lt; 4.7
    Note: that this release (as well as 1.1.30 and 1.1.31)
    may cause problems for older applications, e.g. Samba
    See https://bugzilla.samba.org/show_bug.cgi?id=12859</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to 1.2.1
  + Bug #12882: Do not install _ldb_text.py if we have system libldb
  + Use libraries from build dir for testsuite
  + Bug #12900: Fix index out of bound in ldb_msg_find_common_values</changelog>
  <changelog author="scabrero@suse.com" date="1505736000">- Update to 1.2.2
  + Bug #13017: Add ldb_ldif_message_redacted_string() to allow debug
    of redacted log messages, avoiding showing secret values
  + Bug #13015: Allow re-index of newer databases with binary GUID TDB keys
    (this officially removes support for re-index of the original
    pack format 0, rather than simply segfaulting).
  + Avoid memory allocation and so make modify of records in ldb_tdb faster</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Remove %if guards for blocks that do not affect the build result.
  Fix RPM groups and summaries.
  Drop very old SUSE support. Replace old RPM macros by new
  constructs.</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 1.2.3; (bsc#1080545);
  + Performance regression in DNS server with introduction of DNS wildcard;
    (bso#13191);</changelog>
  <changelog author="dmulder@suse.com" date="1536926400">- Remove python-talloc-devel from %if %else block, since the py3 build
  should not remove py2 dependencies; (bsc#1108164);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1537876800">- Update license to LGPL 3.0 or later; (bsc#1109571);</changelog>
</package>
<package pkgid="77ac42ff3f9d1aeedb7fe1727b530ee20e96f66c48c82e3992b20f7d31903a1b" name="libldb1-32bit" arch="x86_64">
  <version epoch="0" ver="1.2.3" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1445515200">- Rename pyldb to python-ldb.</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Add doxygen at build time to add the development documentation.
- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 1.1.23; (bsc#954658).
  + Test improvements
  + Improved python3 bindings; (bsc#951911)
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1449748800">- Update to 1.1.24.
  + fix LDAP \00 search expression attack DoS; CVE-2015-3223; (bso#11325)
  + fix remote read memory exploit in LDB; CVE-2015-5330; (bso#11599)
  + move ldb_(un)pack_data into ldb_module.h for testing
  + fix installation of _ldb_text.py
  + fix propagation of LDB errors through TDB
  + fix bug triggered by having an empty message in database during search</changelog>
  <changelog author="lmuelle@suse.com" date="1453896000">- Update to 1.1.25; (bsc#954658).
  + torture: test ldb_unpack_data_only_attr_list
  + increment version due to added ldb_unpack_data_only_attr_list
  + introduce ldb_unpack_data_withlist to unpack partial list of attributes</changelog>
  <changelog author="lmuelle@suse.com" date="1455278400">- Provide python-ldb and python-ldb-devel; (bsc#966523).</changelog>
  <changelog author="lmuelle@suse.com" date="1455710400">- Update to 1.1.26; (bsc#954658).
  + let a timeout of -1 indicate no timeout for a given request
  + fix memory leaks in pyldb ldb.search()
  + build fixes
  + improve pyldb ldb.search() help message
  + add pyldb ldb.search_iterator() api
  + add LDB_ATTR_FLAG_FORCE_BASE64_LDIF as optional argument
    to ldb_schema_attribute_add()
  + add client support for LDB_CONTROL_DIRSYNC_EX</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Add ldb-python3.5-fix-soabi_name.patch: Do not change x86_64 to
  x86-64 when building with python 3.5.</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Require talloc 2.1.6 at build-time; (bsc#954658).</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to 1.1.27
  + performance improvements
  + VLV control improvements</changelog>
  <changelog author="ddiss@suse.com" date="1485259200">- Update to 1.1.29; (bsc#1032915).
  + add support for LDB_CONTROL_RECALCULATE_RDN_OID on ldb_modify()
  + Performance and memory consumption improvements</changelog>
  <changelog author="scabrero@suse.com" date="1499083200">- Update to 1.1.31
  + let ldbdump parse the -i option
  + don't allow the reveal_internals control for ldbedit
  + only allow --show-binary for ldbsearch
  + don't let ldbsearch create non-existing files
  + fix ldb_tdb search inconsistencies
  + add cmocka based tests
  + provide an interface for improved indexing for callers
    like Samba, which will allow much better performance.
  + Makes ldb access to tdb:// databases use a private event context
    rather than the global event context passed in by the caller.
    This is because running other operations while locks are held
    or a search is being conducted is not safe.
  + Add efficient function to find duplicate values in ldb messages
    (this makes large multi-valued attributes in ldb_tdb more efficient)
- Add ldb-tests-do-not-override-lib-path.patch: Check if LD_LIBRARY_PATH
  and LDB_MODULES_PATH environment variables are set before overriding
  them.</changelog>
  <changelog author="scabrero@suse.com" date="1499256000">- Update to 1.2.0
  + handle one more LDB_FLAG_INTERNAL_DISABLE_SINGLE_VALUE_CHECK
    case in ldb_tdb
  + fix ldb_tdb locking (performance) problems
  + fix ldb_tdb search inconsistencies by adding
    read_[un]lock() hooks to the module stack
    (bug #12858)
  + add cmocka based tests for the locking issues
  + ldb_version.h provides LDB_VERSION_{MAJOR,MINOR,RELEASE} defines
  + protect ldb_modules.h from being used by Samba &lt; 4.7
    Note: that this release (as well as 1.1.30 and 1.1.31)
    may cause problems for older applications, e.g. Samba
    See https://bugzilla.samba.org/show_bug.cgi?id=12859</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to 1.2.1
  + Bug #12882: Do not install _ldb_text.py if we have system libldb
  + Use libraries from build dir for testsuite
  + Bug #12900: Fix index out of bound in ldb_msg_find_common_values</changelog>
  <changelog author="scabrero@suse.com" date="1505736000">- Update to 1.2.2
  + Bug #13017: Add ldb_ldif_message_redacted_string() to allow debug
    of redacted log messages, avoiding showing secret values
  + Bug #13015: Allow re-index of newer databases with binary GUID TDB keys
    (this officially removes support for re-index of the original
    pack format 0, rather than simply segfaulting).
  + Avoid memory allocation and so make modify of records in ldb_tdb faster</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Remove %if guards for blocks that do not affect the build result.
  Fix RPM groups and summaries.
  Drop very old SUSE support. Replace old RPM macros by new
  constructs.</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 1.2.3; (bsc#1080545);
  + Performance regression in DNS server with introduction of DNS wildcard;
    (bso#13191);</changelog>
  <changelog author="dmulder@suse.com" date="1536926400">- Remove python-talloc-devel from %if %else block, since the py3 build
  should not remove py2 dependencies; (bsc#1108164);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1537876800">- Update license to LGPL 3.0 or later; (bsc#1109571);</changelog>
</package>
<package pkgid="caa8408e63c88daa598d00b522fb967700511fe2a7841f69fb0b23a672726977" name="liblldb5" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="2767913fff08dbf454deb6c7e8d3c50d4d423897ea6d7133fb2e891fd64b69d0" name="liblwres160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="675c63092863e1f73fc3c1c206d16f9dce5177bb8990f9c5e7a294b0a4960a67" name="liblwres160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="5d15e6af832365999ce4799c60926053c32ee3a397025882a119b8e26f01e8ae" name="liblwres160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="0edc6745a185493e21f53c0de29b04b32efe42fc8e0a05c2c05a182844cd549f" name="liblwres160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="591f6fdbeffbb499932f29607adc5935ce992f9024a6c81a60050e6aaf6d1699" name="liblxc-devel" arch="x86_64">
  <version epoch="0" ver="2.0.9" rel="lp150.2.3.1"/>
  <changelog author="cbrauner@suse.de" date="1468065600">- Split into packages to follow best practice.
  * lxc
  * liblxc1
  * liblxc-devel
  Also, we need liblxc1 to be separately installable from LXC for LXD.
- Tweak descriptions.</changelog>
  <changelog author="cbrauner@suse.de" date="1468065601">- add lxcfs dependency: lxc relies on lxcfs for a long time now to provide
  container aware /proc files. The /sys/fs/cgroup part is slowly phased out
  because we now have cgroup namespaces.</changelog>
  <changelog author="jengelh@inai.de" date="1469275200">- Abolish old macro use. Remove ancient %clean section.
  Avoid sh invocation for simple ldconfig calls.</changelog>
  <changelog author="cbrauner@suse.de" date="1472644800">- update lxc to 2.0.4
- add 0001-bdev-use-correct-overlay-module-name.patch
- add 0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
- add 0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
- add 0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
- add 0005-tools-move-rcfile-to-the-common-options-list.patch
- add 0006-tools-set-configfile-after-load_config.patch
- add 0007-doc-add-rcfile-to-common-opts.patch
- add 0008-doc-Update-Korean-lxc-attach-1.patch
- add 0009-doc-Add-rcfile-to-Korean-common-opts.patch
- add 0010-doc-Add-rcfile-to-Japanese-common-opts.patch
- add 0011-tools-use-exit-EXIT_-everywhere.patch
- add 0012-tools-unify-exit-calls-outside-of-main.patch
- add 0013-utils-Add-mips-signalfd-syscall-numbers.patch
- add 0014-seccomp-Implement-MIPS-seccomp-handling.patch
- add 0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
- add 0016-seccomp-fix-strerror.patch
- add 0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
- add 0018-seccomp-add-support-for-s390x.patch
- add 0019-seccomp-remove-double-include-and-order-includes.patch
- add 0020-seccomp-non-functional-changes.patch
- add 0021-templates-use-fd-9-instead-of-200.patch
- add 0022-templates-fedora-requires-openssl-binary.patch
- add 0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
- add 0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
- add 0025-c-r-Fix-pid_t-on-some-arches.patch
- add 0026-templates-Add-mips-hostarch-detection-to-debian.patch
- add 0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch</changelog>
  <changelog author="schwab@suse.de" date="1474286400">- setcap has been moved to /usr/sbin (boo#998326).</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481025600">- CVE-2016-8649: lxc: guest escape via ptrace of lxc-attach (bsc#1010933).
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485259200">- update to version 2.0.7
  This is the seventh bugfix release for LXC 2.0. The main bugfixes in this release are:
  - attach: Close lsm label file descriptor
  - attach: Non-functional changes
  - attach: Simplify lsm_openat()
  - caps: Add lxc_cap_is_set()
  - conf: attach: Save errno across call to close
  - conf: Clearly report to either use drop or keep
  - conf: criu: Add make_anonymous_mount_file()
  - conf: Fix suggest_default_idmap()
  - configure: Add --enable-gnutls option
  - configure: Check for memfd_create()
  - configure: Check whether gettid() is declared
  - configure: Do not allow variable length arrays
  - configure: Remove -Werror=vla
  - configure: Use AC_HEADER_MAJOR to detect major()/minor()/makedev()
  - conf: Non-functional changes
  - conf: Remove thread-unsafe strsignal + improve log
  - init: Add cgroupfs-mount to Should-Start/Stop sysvinit LSB headers
  - log: Add lxc_unix_epoch_to_utc()
  - log: Annotate lxc_unix_epoch_to_utc()
  - log: Drop all timezone conversion functions
  - log: Make sure that date is correctly formatted
  - log: Use lxc_unix_epoch_to_utc()
  - log: Use N/A if getpid() != gettid() when threaded
  - log: Use thread-safe localtime_r()
  - lvm: Supress warnings about leaked files
  - lxccontainer: Log failure to send sig to init pid
  - monitor: Add more logging
  - monitor: Close mainloop on exit if we opened it
  - monitor: Improve log + set log level to DEBUG
  - monitor: Log which pipe fd is currently used
  - monitor: Make lxc-monitord async signal safe
  - monitor: Non-functional changes
  - python3-lxc: Fix api_test.py on s390x
  - start: Check for CAP_SETGID before setgroups()
  - start: Fix execute and improve setgroups() calls
  - state: Use async signal safe fun in lxc_wait()
  - templates: lxc-debian: Don't try to get stuff from /usr/lib/systemd on the host
  - templates: lxc-debian: Fix getty service startup
  - templates: lxc-debian: Fix typo in calling dpkg with --print-foreign-architectures option
  - templates: lxc-debian: Handle ppc hostarch -&gt; powerpc
  - templates: lxc-opensuse: Change openSUSE default release to Leap 42.2
  - templates: lxc-opensuse: Remove libgcc_s1
  - templates: lxc-opensuse: Remove poweroff.target -&gt; sigpwr.target copy
  - templates: lxc-opensuse: Set to be unconfined by AppArmor
  - templates: lxc-opensuse: Update for Leap 42.2
  - tests; Don't cause test failures on cleanup errors
  - tests: Skip unpriv tests on broken overlay module
  - tools: Improve logging
  - tools: lxc-start: Remove c-&gt;is_defined(c) check
  - tools: lxc-start: Set configfile after load_config
  - tools: Only check for O_RDONLY
  - tree-wide: Random macro cleanups
  - tree-wide: Remove any variable length arrays
  - tree-wide: Sic semper assertis!
  - utils: Add macro __LXC_NUMSTRLEN
  - utils: Add uid, gid, group convenience wrappers
- commented out the patches, as they no longer apply cleanly</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485518400">- all patches (00*.patch) are upstream already, thus deleted; patch lxc-aa_allow_incomplete-default.patch is now reworked and added as a drop-in file in /usr/share/lxc/config/common.conf.d/
  0001-bdev-use-correct-overlay-module-name.patch
  0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
  0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
  0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
  0005-tools-move-rcfile-to-the-common-options-list.patch
  0006-tools-set-configfile-after-load_config.patch
  0007-doc-add-rcfile-to-common-opts.patch
  0008-doc-Update-Korean-lxc-attach-1.patch
  0009-doc-Add-rcfile-to-Korean-common-opts.patch
  0010-doc-Add-rcfile-to-Japanese-common-opts.patch
  0011-tools-use-exit-EXIT_-everywhere.patch
  0012-tools-unify-exit-calls-outside-of-main.patch
  0013-utils-Add-mips-signalfd-syscall-numbers.patch
  0014-seccomp-Implement-MIPS-seccomp-handling.patch
  0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
  0016-seccomp-fix-strerror.patch
  0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
  0018-seccomp-add-support-for-s390x.patch
  0019-seccomp-remove-double-include-and-order-includes.patch
  0020-seccomp-non-functional-changes.patch
  0021-templates-use-fd-9-instead-of-200.patch
  0022-templates-fedora-requires-openssl-binary.patch
  0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
  0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
  0025-c-r-Fix-pid_t-on-some-arches.patch
  0026-templates-Add-mips-hostarch-detection-to-debian.patch
  0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch
  lxc-aa_allow_incomplete-default.patch
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490788800">- backported two patches to get the package to build again for Tumbleweed
  (applied only on tumbleweed aka suse_version &gt;1315)
  0001-tree-wide-include-sys-sysmacros.h-directly.patch
  0002-tree-wide-include-sys-sysmacros.h-directly.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490875200">- fix for boo#1028264
  added patch 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Replace %__cp by cp</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1494936000">- Update to version 2.0.8
  * Security fix for CVE-2017-5985
  * All templates have been updated to not set default passwords anymore, instead requiring lxc-attach be used to configure users.
  * This may affect some automated environments that were relying on our default (very much insecure) users.
  Bugfixes:
    Make lxc-start-ephemeral Python 3.2-compatible
    Fix typo
    Allow build without sys/capability.h
    lxc-opensuse: fix default value for release code
    util: always malloc for setproctitle
    util: update setproctitle comments
    confile: clear lxc.network..ipv{4,6} when empty
    lxc_setup_tios(): Ignore SIGTTOU and SIGTTIN signals
    Make lxc-net return non-zero on failure
    seccomp: allow x32 guests on amd64 hosts.
    Add HAVE_LIBCAP
    c/r: only supply --ext-mount-map for bind mounts
    Added 'mkdir -p' functionality in create_or_remove_cgroup
    Use LXC_ROOTFS_MOUNT in clonehostname hook
    squeeze is not a supported release anymore, drop the key
    start: dumb down SIGCHLD from WARN() to NOTICE()
    log: fix lxc_unix_epoch_to_utc()
    cgfsng: make trim() safer
    seccomp: set SCMP_FLTATR_ATL_TSKIP if available
    lxc-user-nic: re-order #includes
    lxc-user-nic: improve + bugfix
    lxc-user-nic: delete link on failure
    conf: only try to delete veth when privileged
    Fix lxc-containers to support multiple bridges
    Fix mixed tab/spaces in previous patch
    lxc-alpine: use dl-cdn.a.o as default mirror instead of random one
    lxc-checkconfig: verify new[ug]idmap are setuid-root
    [templates] archlinux: resolve conflicting files
    [templates] archlinux: noneed default_timezone variable
    python3: Deal with potential NULL char*
    lxc-download.in / allow setting keyserver from env
    lxc-download.in / Document keyserver change in help
    Change variable check to match existing style
    tree-wide: include directly
    conf/ile: make sure buffer is large enough
    tree-wide: include directly
    tests: Support running on IPv6 networks
    tests: Kill containers (don't wait for shutdown)
    Fix opening wrong file in suggest_default_idmap
    do not set the root password in the debian template
    do not set insecure passwords
    don't set a default password for altlinux, gentoo, openmandriva and pld
    tools: exit with return code of lxc_execute()
    Keep veth.pair.name on network shutdown
    Makefile: fix static clang init.lxc build
    Avoid waiting for bridge interface if disabled in sysconfig/lxc | lxc-net via USE_LXC_BRIDGE
    Increased buffer length in print_stats()
    avoid assigning to a variable which is not POSIX shell proof (bug #1498)
    remove obsolete note about api stability
    conf: less error prone pointer access
    conf: lxc_map_ids() non-functional changes
    caps: add lxc_{proc,file}_cap_is_set()
    conf: check for {filecaps,setuid} on new{g,u}idmap
    conf: improve log when mounting rootfs
    ls: simplify the judgment condition when list active containers
    fix typo introduced in #1509
    attach|unshare: fix the wrong comment
    caps: skip file capability checks on android
    autotools: check for cap_get_file
    caps: return false if caps are not supported
    conf: non-functional changes to setup_pts()
    conf: use bind-mount for /dev/ptmx
    conf: non-functional changes
    utils: use loop device helpers from LXD
    create ISSUE_TEMPLATE.md
    cgroups: improve cgfsng debugging
    issue template: fix typo
    conf: close fd in lxc_setup_devpts()
    conf: non-functional changes
    utils: tweak lxc_mount_proc_if_needed()
    Change sshd template to work with Ubuntu 17.04
    conf: order mount options
    conf: add MS_LAZYTIME to mount options
    monitor: report errno on exec() error
    af unix: allow for maximum socket name
    commands: avoid NULL pointer dereference
    commands: non-functional changes
    lxccontainer: avoid NULL pointer dereference
    monitor: simplify abstract socket logic
    precise is not the latest LTS, let's use xenial instead
    fix the wrong exit status
    conf: non-functional changes lxc_fill_autodev()
    conf: remove /dev/console from lxc_fill_autodev()
    conf: non-functional changes lxc_setup()
    conf: non-functional changes to console functions
    conf: improve lxc_setup_dev_console()
    conf: lxc_setup_ttydir_console()
    config: remove /dev/console bind mount
    doc: document console behavior
    utils: add lxc_unstack_mountpoint()
    conf: unstack all mounts atop /dev/console
    console: fail when we cannot allocate peer tty
    start: remove umount2()
    conf: non-functional changes
    utils: handle &gt; 2^31 in lxc_unstack_mountpoint()
    Install systemd units for CentOS
    Merge ubuntu and debiancase
    start: add crucial details about lxc_spawn()
- Deleted patches that have been backported before:
  - 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch
  - 0001-tree-wide-include-sys-sysmacros.h-directly.patch
  - 0002-tree-wide-include-sys-sysmacros.h-directly.patch
- added signature verification</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1499169600">- added workaround for #bsc1041291 to allow builds on Tumbleweed with gcc7, until this bug in gcc7 is fixed...</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094400">- added correct reload of apparmor to %post</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094401">- added Requires for apparmor-abstractions and BuildRequires for apparmor-rpm-macros to apply the fix for boo#1036360</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094402">- removed apparmor-rpm-macros again, as it is not needed for the current %post solution</changelog>
  <changelog author="mchandras@suse.de" date="1504267200">- Fix libcap-progs dependency. The 'setcap' binary is located in /sbin
  instead of /usr/sbin but it's best to depend on the actual package
  instead since the location might change in the future.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1505217600">- removed ldconfig from lxc %post section</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1509451200">- update to version 2.0.9
  Bugfixes:
  * apparmor: Allow containers to start in AppArmor namespaces
  * apparmor: Drop useless apparmor denies
  * caps: Move ifndef/define to the top
  * cgfsng: Fail when limits fail to apply
  * cgfsng: Log when we defer to cgfsng
  * cgfsng: Only output debug info when we set cgroup data
  * cgroups: Handle hybrid cgroup layouts
  * cgroups: Use tight scoping
  * cgroups: Workaround gcc-7 bug
  * commands: Abstract cmd socket handling + logging
  * commands: Add missing translation
  * commands: Delete meaningless comments
  * commands: Handle EINTR
  * commands: Make state server interface flexible
  * commands: Move lxc_make_abstract_socket_name()
  * commands: Rename to lxc_cmd_add_state_client()
  * commonds: Fix typo
  * conf: Adapt to lxc-user-nic usage
  * conf: Add lxc_get_idmaps()
  * conf: Add userns_exec_full()
  * conf: Allow to clear all config items
  * conf: Allow to get lxc.autodev
  * conf: Allow to get lxc.haltsignal
  * conf: Allow to get lxc.kmsg
  * conf: Allow to get lxc.rebootsignal
  * conf: Allow to get lxc.stopsignal
  * conf: Allow writing uid mappings with euid != 0
  * conf: Avoid double-frees in userns_exec_1()
  * conf: Clear lxc.include
  * conf: Do not check for empty value twice
  * conf: Do not check union on wrong net type
  * conf: Do not deref null pointer
  * conf: Do not free static memory
  * conf: Do not log uninitialized memory
  * conf: Do not write out trailing spaces
  * conf: Don't send ttys when none are configured
  * conf: Dump lxc_get_config_item()
  * conf: Error out on too many mappings
  * conf: Fix bionic builds
  * conf: Fix build without libcap
  * conf: Fix tty creation
  * conf: Fix userns_exec_1()
  * conf: Free netdev-&gt;downscript
  * conf: Implement config item clear callback
  * conf: Improve lxc_map_ids()
  * conf: Improve tty shifting function
  * conf: Improve write_id_mapping()
  * conf: Increase lxc-user-nic buffer
  * conf: Log lxc-user-nic output
  * conf: lxc_listconfigs -&gt; lxc_list_config_items
  * conf: Move clearing config items into one place
  * conf: Non-functional changes
  * conf: NOTICE() on mounts on container's /dev
  * conf: Performance tweaks
  * conf: Preserve newlines
  * conf: Properly parse lxc.idmap entries
  * conf: Record idmap that gets written
  * conf: Refactoring of most config parsing code
  * conf: Refactor network deletion
  * conf: Remove dead assignments in parse_idmaps()
  * conf: Remove dead mount code
  * conf: Rework lxc_map_ids()
  * conf: Rework userns_exec_1()
  * conf: Send ttys in batches of 2
  * conf: Switch API to new callback system
  * conf: Use a minimal {g,u}id map
  * conf: Use correct check on char array
  * conf: Use run_command for lxc-usernsexec
  * console: Clean tty state + return 0 on peer exit
  * console: DO NOT add the handles of adjust winsize when the 'stdin' is not a tty
  * console: Fix memory leak of 'lxc_tty_state'
  * console: Remove dead assignments
  * core: Do remount with the MS_REMOUNT flag when mounts with MS_RDONLY
  * core: Fix a format string build failure on x32
  * core: Fix includes for Android
  * core: Fix memory and resource leak
  * core: Fix some cppcheck warnings
  * core: Fix the bug of 'ts-&gt;stdoutfd' did not fill with parameters 'stdoutfd'
  * core: Include custom mntent for Android
  * core: Log function called in userns_exec_1()
  * core: Remove the __func__ macro
  * core: Remove the unused macro
  * core: Replace "priority" with "level"
  * core: Revert "Add a prefix to the lxc.pc"
  * core: root -&gt; am_root
  * core: struct bdev -&gt; struct lxc_storage
  * core: Update .gitignore
  * core: Use strerror(errno) instead of %m
  * criu: Add cmp_version()
  * criu: Use correct check initialization check
  * doc: Add CII Best Practices badge to README
  * doc: Add console behavior to Japanese lxc.container.conf(5)
  * doc: Document missing env variables
  * doc: Fix regex-typo in Japanese and Korean lxc-monitor(1)
  * doc: Fix regex-typo in lxc-monitor.sgml.in
  * doc: Reword id mapping restrictions when unpriv
  * doc: Rework README
  * doc: Tweak Japanese lxc.container.conf(5)
  * doc: Tweak lxc.container.conf a little
  * doc: Untabify Japanese lxc.container.conf(5)
  * doc: Update API documentation for get_config_item
  * execute: Enable console &amp; standard /dev symlinks
  * init: Add comment for exclude 32 and 33 signals
  * init: Adjust include statements
  * init: Become session leader
  * init: Move initialization of act to outside of the loop
  * init: Report exec*() failure
  * init: Use lxc-stop to stop systemd service
  * liblxc: Make sure memory is free()ed
  * liblxc: Only spawn monitord on demand
  * liblxc: Remove 5s timeout on error
  * liblxc: Use snprintf()
  * liblxc: Use userns_exec_full()
  * lock: Non-functional changes
  * lock: Return the right error when open lock file failed
  * log: Prevent stack smashing
  * log: Switch to a new lxc_log_init function
  * monitor: Abstract lxc_abstract_unix_{send,recv}_fd for af_unix
  * monitor: Add lxc_cmd_state_server()
  * monitor: Add TRACE()ers
  * monitor: Delete unneccessory include file
  * monitor: Remove dead assignments
  * monitor: Remove the workaround-code for lxc_abstract_unix_connect
  * monitor: Remove unlink operation for af_unix
  * network: Add arg to config clear method
  * network: Add data arg to set callback
  * network: Add ifindex field for host veth device
  * network: Add lxc_log_configured_netdevs()
  * network: Add missing checks for empty links
  * network: Add network counter
  * network: Add warning when ignoring MTU
  * network: Clear ifindeces
  * network: Delete ovs for unprivileged networks
  * network: Document all fields in struct lxc_netdev
  * network: Don't delete net devs we didn't create
  * network: Fix grammar
  * network: Implement lxc_get_netdev_by_idx()
  * network: Log cleanup thread pid for openswitch
  * network: Log ifindex
  * network: Log ifindex for host side veth device
  * network: Log veth_attr.pair and veth_attr.veth1
  * network: Move config_value_empty() to confile_utils
  * network: Perform network validation at creation time
  * network: Remove allocation from lxc_mkifname()
  * network: Remove dead assignments
  * network: Remove netpipe
  * network: Retrieve correct names and ifindices
  * network: Retrieve the host's veth device ifindex
  * network: Rework network creation
  * network: Send ifindex for unpriv networks
  * network: Stop recording saved physical net devices
  * network: Use correct network device name
  * network: Use send()/recv()
  * network: Use single helper to delete networks
  * network: Use static memory for net device names
  * openvswitch: Delete ports intelligently
  * seccomp: Export the seccomp filter after load it into kernel successful
  * seccomp: Print action name in log
  * seccomp: s/n-new-privs/no-new-privs/g
  * seccomp: Update comment for function parse_config
  * start: Add lxc_free_handler()
  * start: Add lxc_init_handler()
  * start: Document all handler fields
  * start: Don't call lxc_map_ids() without id map
  * start: Don't close inherited namespace fds
  * start: Don't let data_sock users close the fd
  * start: Dup std{in,out,err} to pty slave
  * start: Ensure cgroups are cleaned up
  * start: Generalize lxc_check_inherited()
  * start: Log sending and receiving of tty fds
  * start: lxc_setup() after unshare(CLONE_NEWCGROUP)
  * start: Move env setup before container setup
  * start: Pass LXC_LOG_LEVEL to hooks
  * start: Pin rootfs when privileged
  * start: Remove dead variable
  * start: Send state to legacy lxc-monitord state server even if no state clients registered
  * start: Set environment variables correctly
  * start: Switch from SOCK_DGRAM to SOCK_STREAM
  * start: Switch ids at last possible instance
  * start: Use separate socket on daemonized start
  * start: Use userns_exec_full()
  * state: Remove lxc_rmstate declaration
  * storage: Add storage_utils.{c.h}
  * storage: Avoid segfault
  * storage: Default to orig type on identical paths
  * storage: Record output from mkfs.*
  * storage: Rename files "bdev" -&gt; "storage"
  * storage: Use userns_exec_full()
  * storage/dir: Using 'add-required_remount_flags' function to add required flags
  * storage/loop: Detect loop file
  * storage/overlayfs: Fix wrong path
  * storage/overlay: Handle overlay for stable 2.0
  * template: Remove obsolete bind-mounts from userns.conf
  * template: Use "rsync -SHaAX" to copy the cached rootfs into place
  * template/alpine: Add support for ppc64le
  * template/alpine: Change file check to also check file size (-f =&gt; -s)
  * template/archlinux: Change locale "en-US.UTF-8" to "en_US.UTF-8"
  * template/centos: Add cronie to the pkg list
  * template/centos: Use altarch mirror for CentOS on arches other than i386 and x86_64
  * template/debian: Add aarch64 -&gt; arm64 mapping
  * template/debian: Add buster as a valid release
  * template/debian: Don't force getty@ configuration
  * template/debian: Use deb.debian.org as the default Debian mirror
  * template/download: Fix syntax error
  * template/download: Sanitize script with shellcheck
  * template/opensuse: Add Tumbleweed as supported release
  * template/opensuse: Fix tumbleweed software selection
  * template/opensuse: getty.target.wants does not always exists
  * template/opensuse: Support leap 42.3
  * template/opensuse: Tumbleweed has no update repo
  * template/plamo: Delete unnecessary process during container shutdown
  * template/ubuntu: Check that there is netplan binary, rather than just just a config directory
  * template/ubuntu: Conditionally move upstart ssh job, as it is now optional
  * template/ubuntu: Support netplan in newer releases by default
  * tests: Adapt lxc-user-nic tests to new syntax
  * tests: Add corner-case tests for lxc_safe_{u}int()
  * tests: Add item clear and config file tests
  * tests: Add test script to test the ro option of lxc.rootfs.options
  * tests: Add unit tests for idmap parser
  * tests: Avoid NULL pointer dereference
  * tests: Compare return value to expected value whenever we can
  * tests: Define a network before checks
  * tests: Don't fail when no processes for the user exist
  * tests: Enforce all methods for config items
  * tests: Remove dead assignments
  * tests: Remove the temp container directory
  * tests: Shortlived daemonized containers
  * tests: Support systemd hybrid cgroups
  * tools: Add additional cgroup checks
  * tools: Print "-devel" when LXC_DEVEL is true
  * tools: Use "which"
  * tools/lxc-attach: Allow for situations without /dev/tty
  * tools/lxc-checkconfig: Add CONFIG_NETFILTER_XT_MATCH_COMMENT
  * tools/lxc-checkconfig: Add probe status checking
  * tools/lxc-execute: Print error message when failed
  * tools/lxc-ls: Return all containers by default
  * tools/lxc-monitord: Exit when receiving a quit command
  * tools/lxc-unshare: Do not pass NULL pointer
  * tools/lxc-user-nic: Add new {create,delete} subcommands
  * tools/lxc-user-nic: Check db before trying to delete
  * tools/lxc-user-nic: Fix adding database entries
  * tools/lxc-user-nic: Fix memleak
  * tools/lxc-user-nic: Free memory and check for error
  * tools/lxc-user-nic: Initialize vars to silence gcc-7
  * tools/lxc-user-nic: Keep lines from other {users,links}
  * tools/lxc-user-nic: Remove delta between master + stable
  * tools/lxc-user-nic: Remove double initialization
  * tools/lxc-user-nic: Rework renaming net devices
  * tools/lxc-user-nic: Simplify logic
  * tools/lxc-user-nic: Test privilege over netns on delete
  * tools/lxc-usernsexec: Remove dead assignments
  * travis: Fix builds
  * utils: Add has_fs_type() + is_fs_type()
  * utils: Add lxc_nic_exists()
  * utils: Add lxc_safe_ulong()
  * utils: Add run_command
  * utils: Close parent end in child process after fork
  * utils: Do not write to 0 sized buffer
  * utils: Duplicate stderr as well in lxc_popen()
  * utils: Fix lxc_mount_proc_if_needed()
  * utils: Fix lxc_popen()/lxc_pclose()
  * utils: Fix mem leak with realpath
  * utils: Fix num parsing functions
  * utils: Fix ppc64le builds
  * utils: Fix the way to detect blocking signal
  * utils: lxc_popen() remove dead assignments
  * utils: Move helpers from cgfsng.c to utils.{c,h}
  * utils: Rework lxc_deslashify()
  * utils: Switch to has_fs_type()
  * utils: Use 1LU otherwise we overflow
  * utils: Use access instead of stat</changelog>
  <changelog author="mchandras@suse.de" date="1532001600">- Add upstream patch to fix container start up problems when AppArmor
  is enabled (boo#1099239)
  * 0001-apparmor-Allow-usr-lib-paths-for-mount-and-pivot_roo.patch</changelog>
</package>
<package pkgid="d5c778ee427ecf9ff7bf4229d8712872daa14405fb91a2e8c89efb132069f182" name="liblxc-devel" arch="x86_64">
  <version epoch="0" ver="2.0.9" rel="lp150.2.6.1"/>
  <changelog author="cbrauner@suse.de" date="1468065600">- add lxcfs dependency: lxc relies on lxcfs for a long time now to provide
  container aware /proc files. The /sys/fs/cgroup part is slowly phased out
  because we now have cgroup namespaces.</changelog>
  <changelog author="jengelh@inai.de" date="1469275200">- Abolish old macro use. Remove ancient %clean section.
  Avoid sh invocation for simple ldconfig calls.</changelog>
  <changelog author="cbrauner@suse.de" date="1472644800">- update lxc to 2.0.4
- add 0001-bdev-use-correct-overlay-module-name.patch
- add 0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
- add 0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
- add 0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
- add 0005-tools-move-rcfile-to-the-common-options-list.patch
- add 0006-tools-set-configfile-after-load_config.patch
- add 0007-doc-add-rcfile-to-common-opts.patch
- add 0008-doc-Update-Korean-lxc-attach-1.patch
- add 0009-doc-Add-rcfile-to-Korean-common-opts.patch
- add 0010-doc-Add-rcfile-to-Japanese-common-opts.patch
- add 0011-tools-use-exit-EXIT_-everywhere.patch
- add 0012-tools-unify-exit-calls-outside-of-main.patch
- add 0013-utils-Add-mips-signalfd-syscall-numbers.patch
- add 0014-seccomp-Implement-MIPS-seccomp-handling.patch
- add 0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
- add 0016-seccomp-fix-strerror.patch
- add 0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
- add 0018-seccomp-add-support-for-s390x.patch
- add 0019-seccomp-remove-double-include-and-order-includes.patch
- add 0020-seccomp-non-functional-changes.patch
- add 0021-templates-use-fd-9-instead-of-200.patch
- add 0022-templates-fedora-requires-openssl-binary.patch
- add 0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
- add 0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
- add 0025-c-r-Fix-pid_t-on-some-arches.patch
- add 0026-templates-Add-mips-hostarch-detection-to-debian.patch
- add 0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch</changelog>
  <changelog author="schwab@suse.de" date="1474286400">- setcap has been moved to /usr/sbin (boo#998326).</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481025600">- CVE-2016-8649: lxc: guest escape via ptrace of lxc-attach (bsc#1010933).
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485259200">- update to version 2.0.7
  This is the seventh bugfix release for LXC 2.0. The main bugfixes in this release are:
  - attach: Close lsm label file descriptor
  - attach: Non-functional changes
  - attach: Simplify lsm_openat()
  - caps: Add lxc_cap_is_set()
  - conf: attach: Save errno across call to close
  - conf: Clearly report to either use drop or keep
  - conf: criu: Add make_anonymous_mount_file()
  - conf: Fix suggest_default_idmap()
  - configure: Add --enable-gnutls option
  - configure: Check for memfd_create()
  - configure: Check whether gettid() is declared
  - configure: Do not allow variable length arrays
  - configure: Remove -Werror=vla
  - configure: Use AC_HEADER_MAJOR to detect major()/minor()/makedev()
  - conf: Non-functional changes
  - conf: Remove thread-unsafe strsignal + improve log
  - init: Add cgroupfs-mount to Should-Start/Stop sysvinit LSB headers
  - log: Add lxc_unix_epoch_to_utc()
  - log: Annotate lxc_unix_epoch_to_utc()
  - log: Drop all timezone conversion functions
  - log: Make sure that date is correctly formatted
  - log: Use lxc_unix_epoch_to_utc()
  - log: Use N/A if getpid() != gettid() when threaded
  - log: Use thread-safe localtime_r()
  - lvm: Supress warnings about leaked files
  - lxccontainer: Log failure to send sig to init pid
  - monitor: Add more logging
  - monitor: Close mainloop on exit if we opened it
  - monitor: Improve log + set log level to DEBUG
  - monitor: Log which pipe fd is currently used
  - monitor: Make lxc-monitord async signal safe
  - monitor: Non-functional changes
  - python3-lxc: Fix api_test.py on s390x
  - start: Check for CAP_SETGID before setgroups()
  - start: Fix execute and improve setgroups() calls
  - state: Use async signal safe fun in lxc_wait()
  - templates: lxc-debian: Don't try to get stuff from /usr/lib/systemd on the host
  - templates: lxc-debian: Fix getty service startup
  - templates: lxc-debian: Fix typo in calling dpkg with --print-foreign-architectures option
  - templates: lxc-debian: Handle ppc hostarch -&gt; powerpc
  - templates: lxc-opensuse: Change openSUSE default release to Leap 42.2
  - templates: lxc-opensuse: Remove libgcc_s1
  - templates: lxc-opensuse: Remove poweroff.target -&gt; sigpwr.target copy
  - templates: lxc-opensuse: Set to be unconfined by AppArmor
  - templates: lxc-opensuse: Update for Leap 42.2
  - tests; Don't cause test failures on cleanup errors
  - tests: Skip unpriv tests on broken overlay module
  - tools: Improve logging
  - tools: lxc-start: Remove c-&gt;is_defined(c) check
  - tools: lxc-start: Set configfile after load_config
  - tools: Only check for O_RDONLY
  - tree-wide: Random macro cleanups
  - tree-wide: Remove any variable length arrays
  - tree-wide: Sic semper assertis!
  - utils: Add macro __LXC_NUMSTRLEN
  - utils: Add uid, gid, group convenience wrappers
- commented out the patches, as they no longer apply cleanly</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485518400">- all patches (00*.patch) are upstream already, thus deleted; patch lxc-aa_allow_incomplete-default.patch is now reworked and added as a drop-in file in /usr/share/lxc/config/common.conf.d/
  0001-bdev-use-correct-overlay-module-name.patch
  0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
  0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
  0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
  0005-tools-move-rcfile-to-the-common-options-list.patch
  0006-tools-set-configfile-after-load_config.patch
  0007-doc-add-rcfile-to-common-opts.patch
  0008-doc-Update-Korean-lxc-attach-1.patch
  0009-doc-Add-rcfile-to-Korean-common-opts.patch
  0010-doc-Add-rcfile-to-Japanese-common-opts.patch
  0011-tools-use-exit-EXIT_-everywhere.patch
  0012-tools-unify-exit-calls-outside-of-main.patch
  0013-utils-Add-mips-signalfd-syscall-numbers.patch
  0014-seccomp-Implement-MIPS-seccomp-handling.patch
  0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
  0016-seccomp-fix-strerror.patch
  0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
  0018-seccomp-add-support-for-s390x.patch
  0019-seccomp-remove-double-include-and-order-includes.patch
  0020-seccomp-non-functional-changes.patch
  0021-templates-use-fd-9-instead-of-200.patch
  0022-templates-fedora-requires-openssl-binary.patch
  0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
  0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
  0025-c-r-Fix-pid_t-on-some-arches.patch
  0026-templates-Add-mips-hostarch-detection-to-debian.patch
  0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch
  lxc-aa_allow_incomplete-default.patch
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490788800">- backported two patches to get the package to build again for Tumbleweed
  (applied only on tumbleweed aka suse_version &gt;1315)
  0001-tree-wide-include-sys-sysmacros.h-directly.patch
  0002-tree-wide-include-sys-sysmacros.h-directly.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490875200">- fix for boo#1028264
  added patch 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Replace %__cp by cp</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1494936000">- Update to version 2.0.8
  * Security fix for CVE-2017-5985
  * All templates have been updated to not set default passwords anymore, instead requiring lxc-attach be used to configure users.
  * This may affect some automated environments that were relying on our default (very much insecure) users.
  Bugfixes:
    Make lxc-start-ephemeral Python 3.2-compatible
    Fix typo
    Allow build without sys/capability.h
    lxc-opensuse: fix default value for release code
    util: always malloc for setproctitle
    util: update setproctitle comments
    confile: clear lxc.network..ipv{4,6} when empty
    lxc_setup_tios(): Ignore SIGTTOU and SIGTTIN signals
    Make lxc-net return non-zero on failure
    seccomp: allow x32 guests on amd64 hosts.
    Add HAVE_LIBCAP
    c/r: only supply --ext-mount-map for bind mounts
    Added 'mkdir -p' functionality in create_or_remove_cgroup
    Use LXC_ROOTFS_MOUNT in clonehostname hook
    squeeze is not a supported release anymore, drop the key
    start: dumb down SIGCHLD from WARN() to NOTICE()
    log: fix lxc_unix_epoch_to_utc()
    cgfsng: make trim() safer
    seccomp: set SCMP_FLTATR_ATL_TSKIP if available
    lxc-user-nic: re-order #includes
    lxc-user-nic: improve + bugfix
    lxc-user-nic: delete link on failure
    conf: only try to delete veth when privileged
    Fix lxc-containers to support multiple bridges
    Fix mixed tab/spaces in previous patch
    lxc-alpine: use dl-cdn.a.o as default mirror instead of random one
    lxc-checkconfig: verify new[ug]idmap are setuid-root
    [templates] archlinux: resolve conflicting files
    [templates] archlinux: noneed default_timezone variable
    python3: Deal with potential NULL char*
    lxc-download.in / allow setting keyserver from env
    lxc-download.in / Document keyserver change in help
    Change variable check to match existing style
    tree-wide: include directly
    conf/ile: make sure buffer is large enough
    tree-wide: include directly
    tests: Support running on IPv6 networks
    tests: Kill containers (don't wait for shutdown)
    Fix opening wrong file in suggest_default_idmap
    do not set the root password in the debian template
    do not set insecure passwords
    don't set a default password for altlinux, gentoo, openmandriva and pld
    tools: exit with return code of lxc_execute()
    Keep veth.pair.name on network shutdown
    Makefile: fix static clang init.lxc build
    Avoid waiting for bridge interface if disabled in sysconfig/lxc | lxc-net via USE_LXC_BRIDGE
    Increased buffer length in print_stats()
    avoid assigning to a variable which is not POSIX shell proof (bug #1498)
    remove obsolete note about api stability
    conf: less error prone pointer access
    conf: lxc_map_ids() non-functional changes
    caps: add lxc_{proc,file}_cap_is_set()
    conf: check for {filecaps,setuid} on new{g,u}idmap
    conf: improve log when mounting rootfs
    ls: simplify the judgment condition when list active containers
    fix typo introduced in #1509
    attach|unshare: fix the wrong comment
    caps: skip file capability checks on android
    autotools: check for cap_get_file
    caps: return false if caps are not supported
    conf: non-functional changes to setup_pts()
    conf: use bind-mount for /dev/ptmx
    conf: non-functional changes
    utils: use loop device helpers from LXD
    create ISSUE_TEMPLATE.md
    cgroups: improve cgfsng debugging
    issue template: fix typo
    conf: close fd in lxc_setup_devpts()
    conf: non-functional changes
    utils: tweak lxc_mount_proc_if_needed()
    Change sshd template to work with Ubuntu 17.04
    conf: order mount options
    conf: add MS_LAZYTIME to mount options
    monitor: report errno on exec() error
    af unix: allow for maximum socket name
    commands: avoid NULL pointer dereference
    commands: non-functional changes
    lxccontainer: avoid NULL pointer dereference
    monitor: simplify abstract socket logic
    precise is not the latest LTS, let's use xenial instead
    fix the wrong exit status
    conf: non-functional changes lxc_fill_autodev()
    conf: remove /dev/console from lxc_fill_autodev()
    conf: non-functional changes lxc_setup()
    conf: non-functional changes to console functions
    conf: improve lxc_setup_dev_console()
    conf: lxc_setup_ttydir_console()
    config: remove /dev/console bind mount
    doc: document console behavior
    utils: add lxc_unstack_mountpoint()
    conf: unstack all mounts atop /dev/console
    console: fail when we cannot allocate peer tty
    start: remove umount2()
    conf: non-functional changes
    utils: handle &gt; 2^31 in lxc_unstack_mountpoint()
    Install systemd units for CentOS
    Merge ubuntu and debiancase
    start: add crucial details about lxc_spawn()
- Deleted patches that have been backported before:
  - 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch
  - 0001-tree-wide-include-sys-sysmacros.h-directly.patch
  - 0002-tree-wide-include-sys-sysmacros.h-directly.patch
- added signature verification</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1499169600">- added workaround for #bsc1041291 to allow builds on Tumbleweed with gcc7, until this bug in gcc7 is fixed...</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094400">- added correct reload of apparmor to %post</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094401">- added Requires for apparmor-abstractions and BuildRequires for apparmor-rpm-macros to apply the fix for boo#1036360</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094402">- removed apparmor-rpm-macros again, as it is not needed for the current %post solution</changelog>
  <changelog author="mchandras@suse.de" date="1504267200">- Fix libcap-progs dependency. The 'setcap' binary is located in /sbin
  instead of /usr/sbin but it's best to depend on the actual package
  instead since the location might change in the future.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1505217600">- removed ldconfig from lxc %post section</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1509451200">- update to version 2.0.9
  Bugfixes:
  * apparmor: Allow containers to start in AppArmor namespaces
  * apparmor: Drop useless apparmor denies
  * caps: Move ifndef/define to the top
  * cgfsng: Fail when limits fail to apply
  * cgfsng: Log when we defer to cgfsng
  * cgfsng: Only output debug info when we set cgroup data
  * cgroups: Handle hybrid cgroup layouts
  * cgroups: Use tight scoping
  * cgroups: Workaround gcc-7 bug
  * commands: Abstract cmd socket handling + logging
  * commands: Add missing translation
  * commands: Delete meaningless comments
  * commands: Handle EINTR
  * commands: Make state server interface flexible
  * commands: Move lxc_make_abstract_socket_name()
  * commands: Rename to lxc_cmd_add_state_client()
  * commonds: Fix typo
  * conf: Adapt to lxc-user-nic usage
  * conf: Add lxc_get_idmaps()
  * conf: Add userns_exec_full()
  * conf: Allow to clear all config items
  * conf: Allow to get lxc.autodev
  * conf: Allow to get lxc.haltsignal
  * conf: Allow to get lxc.kmsg
  * conf: Allow to get lxc.rebootsignal
  * conf: Allow to get lxc.stopsignal
  * conf: Allow writing uid mappings with euid != 0
  * conf: Avoid double-frees in userns_exec_1()
  * conf: Clear lxc.include
  * conf: Do not check for empty value twice
  * conf: Do not check union on wrong net type
  * conf: Do not deref null pointer
  * conf: Do not free static memory
  * conf: Do not log uninitialized memory
  * conf: Do not write out trailing spaces
  * conf: Don't send ttys when none are configured
  * conf: Dump lxc_get_config_item()
  * conf: Error out on too many mappings
  * conf: Fix bionic builds
  * conf: Fix build without libcap
  * conf: Fix tty creation
  * conf: Fix userns_exec_1()
  * conf: Free netdev-&gt;downscript
  * conf: Implement config item clear callback
  * conf: Improve lxc_map_ids()
  * conf: Improve tty shifting function
  * conf: Improve write_id_mapping()
  * conf: Increase lxc-user-nic buffer
  * conf: Log lxc-user-nic output
  * conf: lxc_listconfigs -&gt; lxc_list_config_items
  * conf: Move clearing config items into one place
  * conf: Non-functional changes
  * conf: NOTICE() on mounts on container's /dev
  * conf: Performance tweaks
  * conf: Preserve newlines
  * conf: Properly parse lxc.idmap entries
  * conf: Record idmap that gets written
  * conf: Refactoring of most config parsing code
  * conf: Refactor network deletion
  * conf: Remove dead assignments in parse_idmaps()
  * conf: Remove dead mount code
  * conf: Rework lxc_map_ids()
  * conf: Rework userns_exec_1()
  * conf: Send ttys in batches of 2
  * conf: Switch API to new callback system
  * conf: Use a minimal {g,u}id map
  * conf: Use correct check on char array
  * conf: Use run_command for lxc-usernsexec
  * console: Clean tty state + return 0 on peer exit
  * console: DO NOT add the handles of adjust winsize when the 'stdin' is not a tty
  * console: Fix memory leak of 'lxc_tty_state'
  * console: Remove dead assignments
  * core: Do remount with the MS_REMOUNT flag when mounts with MS_RDONLY
  * core: Fix a format string build failure on x32
  * core: Fix includes for Android
  * core: Fix memory and resource leak
  * core: Fix some cppcheck warnings
  * core: Fix the bug of 'ts-&gt;stdoutfd' did not fill with parameters 'stdoutfd'
  * core: Include custom mntent for Android
  * core: Log function called in userns_exec_1()
  * core: Remove the __func__ macro
  * core: Remove the unused macro
  * core: Replace "priority" with "level"
  * core: Revert "Add a prefix to the lxc.pc"
  * core: root -&gt; am_root
  * core: struct bdev -&gt; struct lxc_storage
  * core: Update .gitignore
  * core: Use strerror(errno) instead of %m
  * criu: Add cmp_version()
  * criu: Use correct check initialization check
  * doc: Add CII Best Practices badge to README
  * doc: Add console behavior to Japanese lxc.container.conf(5)
  * doc: Document missing env variables
  * doc: Fix regex-typo in Japanese and Korean lxc-monitor(1)
  * doc: Fix regex-typo in lxc-monitor.sgml.in
  * doc: Reword id mapping restrictions when unpriv
  * doc: Rework README
  * doc: Tweak Japanese lxc.container.conf(5)
  * doc: Tweak lxc.container.conf a little
  * doc: Untabify Japanese lxc.container.conf(5)
  * doc: Update API documentation for get_config_item
  * execute: Enable console &amp; standard /dev symlinks
  * init: Add comment for exclude 32 and 33 signals
  * init: Adjust include statements
  * init: Become session leader
  * init: Move initialization of act to outside of the loop
  * init: Report exec*() failure
  * init: Use lxc-stop to stop systemd service
  * liblxc: Make sure memory is free()ed
  * liblxc: Only spawn monitord on demand
  * liblxc: Remove 5s timeout on error
  * liblxc: Use snprintf()
  * liblxc: Use userns_exec_full()
  * lock: Non-functional changes
  * lock: Return the right error when open lock file failed
  * log: Prevent stack smashing
  * log: Switch to a new lxc_log_init function
  * monitor: Abstract lxc_abstract_unix_{send,recv}_fd for af_unix
  * monitor: Add lxc_cmd_state_server()
  * monitor: Add TRACE()ers
  * monitor: Delete unneccessory include file
  * monitor: Remove dead assignments
  * monitor: Remove the workaround-code for lxc_abstract_unix_connect
  * monitor: Remove unlink operation for af_unix
  * network: Add arg to config clear method
  * network: Add data arg to set callback
  * network: Add ifindex field for host veth device
  * network: Add lxc_log_configured_netdevs()
  * network: Add missing checks for empty links
  * network: Add network counter
  * network: Add warning when ignoring MTU
  * network: Clear ifindeces
  * network: Delete ovs for unprivileged networks
  * network: Document all fields in struct lxc_netdev
  * network: Don't delete net devs we didn't create
  * network: Fix grammar
  * network: Implement lxc_get_netdev_by_idx()
  * network: Log cleanup thread pid for openswitch
  * network: Log ifindex
  * network: Log ifindex for host side veth device
  * network: Log veth_attr.pair and veth_attr.veth1
  * network: Move config_value_empty() to confile_utils
  * network: Perform network validation at creation time
  * network: Remove allocation from lxc_mkifname()
  * network: Remove dead assignments
  * network: Remove netpipe
  * network: Retrieve correct names and ifindices
  * network: Retrieve the host's veth device ifindex
  * network: Rework network creation
  * network: Send ifindex for unpriv networks
  * network: Stop recording saved physical net devices
  * network: Use correct network device name
  * network: Use send()/recv()
  * network: Use single helper to delete networks
  * network: Use static memory for net device names
  * openvswitch: Delete ports intelligently
  * seccomp: Export the seccomp filter after load it into kernel successful
  * seccomp: Print action name in log
  * seccomp: s/n-new-privs/no-new-privs/g
  * seccomp: Update comment for function parse_config
  * start: Add lxc_free_handler()
  * start: Add lxc_init_handler()
  * start: Document all handler fields
  * start: Don't call lxc_map_ids() without id map
  * start: Don't close inherited namespace fds
  * start: Don't let data_sock users close the fd
  * start: Dup std{in,out,err} to pty slave
  * start: Ensure cgroups are cleaned up
  * start: Generalize lxc_check_inherited()
  * start: Log sending and receiving of tty fds
  * start: lxc_setup() after unshare(CLONE_NEWCGROUP)
  * start: Move env setup before container setup
  * start: Pass LXC_LOG_LEVEL to hooks
  * start: Pin rootfs when privileged
  * start: Remove dead variable
  * start: Send state to legacy lxc-monitord state server even if no state clients registered
  * start: Set environment variables correctly
  * start: Switch from SOCK_DGRAM to SOCK_STREAM
  * start: Switch ids at last possible instance
  * start: Use separate socket on daemonized start
  * start: Use userns_exec_full()
  * state: Remove lxc_rmstate declaration
  * storage: Add storage_utils.{c.h}
  * storage: Avoid segfault
  * storage: Default to orig type on identical paths
  * storage: Record output from mkfs.*
  * storage: Rename files "bdev" -&gt; "storage"
  * storage: Use userns_exec_full()
  * storage/dir: Using 'add-required_remount_flags' function to add required flags
  * storage/loop: Detect loop file
  * storage/overlayfs: Fix wrong path
  * storage/overlay: Handle overlay for stable 2.0
  * template: Remove obsolete bind-mounts from userns.conf
  * template: Use "rsync -SHaAX" to copy the cached rootfs into place
  * template/alpine: Add support for ppc64le
  * template/alpine: Change file check to also check file size (-f =&gt; -s)
  * template/archlinux: Change locale "en-US.UTF-8" to "en_US.UTF-8"
  * template/centos: Add cronie to the pkg list
  * template/centos: Use altarch mirror for CentOS on arches other than i386 and x86_64
  * template/debian: Add aarch64 -&gt; arm64 mapping
  * template/debian: Add buster as a valid release
  * template/debian: Don't force getty@ configuration
  * template/debian: Use deb.debian.org as the default Debian mirror
  * template/download: Fix syntax error
  * template/download: Sanitize script with shellcheck
  * template/opensuse: Add Tumbleweed as supported release
  * template/opensuse: Fix tumbleweed software selection
  * template/opensuse: getty.target.wants does not always exists
  * template/opensuse: Support leap 42.3
  * template/opensuse: Tumbleweed has no update repo
  * template/plamo: Delete unnecessary process during container shutdown
  * template/ubuntu: Check that there is netplan binary, rather than just just a config directory
  * template/ubuntu: Conditionally move upstart ssh job, as it is now optional
  * template/ubuntu: Support netplan in newer releases by default
  * tests: Adapt lxc-user-nic tests to new syntax
  * tests: Add corner-case tests for lxc_safe_{u}int()
  * tests: Add item clear and config file tests
  * tests: Add test script to test the ro option of lxc.rootfs.options
  * tests: Add unit tests for idmap parser
  * tests: Avoid NULL pointer dereference
  * tests: Compare return value to expected value whenever we can
  * tests: Define a network before checks
  * tests: Don't fail when no processes for the user exist
  * tests: Enforce all methods for config items
  * tests: Remove dead assignments
  * tests: Remove the temp container directory
  * tests: Shortlived daemonized containers
  * tests: Support systemd hybrid cgroups
  * tools: Add additional cgroup checks
  * tools: Print "-devel" when LXC_DEVEL is true
  * tools: Use "which"
  * tools/lxc-attach: Allow for situations without /dev/tty
  * tools/lxc-checkconfig: Add CONFIG_NETFILTER_XT_MATCH_COMMENT
  * tools/lxc-checkconfig: Add probe status checking
  * tools/lxc-execute: Print error message when failed
  * tools/lxc-ls: Return all containers by default
  * tools/lxc-monitord: Exit when receiving a quit command
  * tools/lxc-unshare: Do not pass NULL pointer
  * tools/lxc-user-nic: Add new {create,delete} subcommands
  * tools/lxc-user-nic: Check db before trying to delete
  * tools/lxc-user-nic: Fix adding database entries
  * tools/lxc-user-nic: Fix memleak
  * tools/lxc-user-nic: Free memory and check for error
  * tools/lxc-user-nic: Initialize vars to silence gcc-7
  * tools/lxc-user-nic: Keep lines from other {users,links}
  * tools/lxc-user-nic: Remove delta between master + stable
  * tools/lxc-user-nic: Remove double initialization
  * tools/lxc-user-nic: Rework renaming net devices
  * tools/lxc-user-nic: Simplify logic
  * tools/lxc-user-nic: Test privilege over netns on delete
  * tools/lxc-usernsexec: Remove dead assignments
  * travis: Fix builds
  * utils: Add has_fs_type() + is_fs_type()
  * utils: Add lxc_nic_exists()
  * utils: Add lxc_safe_ulong()
  * utils: Add run_command
  * utils: Close parent end in child process after fork
  * utils: Do not write to 0 sized buffer
  * utils: Duplicate stderr as well in lxc_popen()
  * utils: Fix lxc_mount_proc_if_needed()
  * utils: Fix lxc_popen()/lxc_pclose()
  * utils: Fix mem leak with realpath
  * utils: Fix num parsing functions
  * utils: Fix ppc64le builds
  * utils: Fix the way to detect blocking signal
  * utils: lxc_popen() remove dead assignments
  * utils: Move helpers from cgfsng.c to utils.{c,h}
  * utils: Rework lxc_deslashify()
  * utils: Switch to has_fs_type()
  * utils: Use 1LU otherwise we overflow
  * utils: Use access instead of stat</changelog>
  <changelog author="mchandras@suse.de" date="1532001600">- Add upstream patch to fix container start up problems when AppArmor
  is enabled (boo#1099239)
  * 0001-apparmor-Allow-usr-lib-paths-for-mount-and-pivot_roo.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1533556800">- 0001-utils-add-LXC_PROC_PID_FD_LEN.patch: prerequisite for applying the
  next patch
- 0001-lxc-user-nic-verify-file-descriptor-stable-2.0.patch: fix information
  leak and possible open() side effects accessible to regular users via
  lxc-user-nic (bsc#988348, CVE-2018-6556)</changelog>
</package>
<package pkgid="cb277cb66f985a2bfffc91b3a3585f0383dab1a08861aa1a33088ee7aab126e2" name="liblxc1" arch="x86_64">
  <version epoch="0" ver="2.0.9" rel="lp150.2.3.1"/>
  <changelog author="cbrauner@suse.de" date="1468065600">- Split into packages to follow best practice.
  * lxc
  * liblxc1
  * liblxc-devel
  Also, we need liblxc1 to be separately installable from LXC for LXD.
- Tweak descriptions.</changelog>
  <changelog author="cbrauner@suse.de" date="1468065601">- add lxcfs dependency: lxc relies on lxcfs for a long time now to provide
  container aware /proc files. The /sys/fs/cgroup part is slowly phased out
  because we now have cgroup namespaces.</changelog>
  <changelog author="jengelh@inai.de" date="1469275200">- Abolish old macro use. Remove ancient %clean section.
  Avoid sh invocation for simple ldconfig calls.</changelog>
  <changelog author="cbrauner@suse.de" date="1472644800">- update lxc to 2.0.4
- add 0001-bdev-use-correct-overlay-module-name.patch
- add 0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
- add 0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
- add 0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
- add 0005-tools-move-rcfile-to-the-common-options-list.patch
- add 0006-tools-set-configfile-after-load_config.patch
- add 0007-doc-add-rcfile-to-common-opts.patch
- add 0008-doc-Update-Korean-lxc-attach-1.patch
- add 0009-doc-Add-rcfile-to-Korean-common-opts.patch
- add 0010-doc-Add-rcfile-to-Japanese-common-opts.patch
- add 0011-tools-use-exit-EXIT_-everywhere.patch
- add 0012-tools-unify-exit-calls-outside-of-main.patch
- add 0013-utils-Add-mips-signalfd-syscall-numbers.patch
- add 0014-seccomp-Implement-MIPS-seccomp-handling.patch
- add 0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
- add 0016-seccomp-fix-strerror.patch
- add 0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
- add 0018-seccomp-add-support-for-s390x.patch
- add 0019-seccomp-remove-double-include-and-order-includes.patch
- add 0020-seccomp-non-functional-changes.patch
- add 0021-templates-use-fd-9-instead-of-200.patch
- add 0022-templates-fedora-requires-openssl-binary.patch
- add 0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
- add 0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
- add 0025-c-r-Fix-pid_t-on-some-arches.patch
- add 0026-templates-Add-mips-hostarch-detection-to-debian.patch
- add 0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch</changelog>
  <changelog author="schwab@suse.de" date="1474286400">- setcap has been moved to /usr/sbin (boo#998326).</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481025600">- CVE-2016-8649: lxc: guest escape via ptrace of lxc-attach (bsc#1010933).
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485259200">- update to version 2.0.7
  This is the seventh bugfix release for LXC 2.0. The main bugfixes in this release are:
  - attach: Close lsm label file descriptor
  - attach: Non-functional changes
  - attach: Simplify lsm_openat()
  - caps: Add lxc_cap_is_set()
  - conf: attach: Save errno across call to close
  - conf: Clearly report to either use drop or keep
  - conf: criu: Add make_anonymous_mount_file()
  - conf: Fix suggest_default_idmap()
  - configure: Add --enable-gnutls option
  - configure: Check for memfd_create()
  - configure: Check whether gettid() is declared
  - configure: Do not allow variable length arrays
  - configure: Remove -Werror=vla
  - configure: Use AC_HEADER_MAJOR to detect major()/minor()/makedev()
  - conf: Non-functional changes
  - conf: Remove thread-unsafe strsignal + improve log
  - init: Add cgroupfs-mount to Should-Start/Stop sysvinit LSB headers
  - log: Add lxc_unix_epoch_to_utc()
  - log: Annotate lxc_unix_epoch_to_utc()
  - log: Drop all timezone conversion functions
  - log: Make sure that date is correctly formatted
  - log: Use lxc_unix_epoch_to_utc()
  - log: Use N/A if getpid() != gettid() when threaded
  - log: Use thread-safe localtime_r()
  - lvm: Supress warnings about leaked files
  - lxccontainer: Log failure to send sig to init pid
  - monitor: Add more logging
  - monitor: Close mainloop on exit if we opened it
  - monitor: Improve log + set log level to DEBUG
  - monitor: Log which pipe fd is currently used
  - monitor: Make lxc-monitord async signal safe
  - monitor: Non-functional changes
  - python3-lxc: Fix api_test.py on s390x
  - start: Check for CAP_SETGID before setgroups()
  - start: Fix execute and improve setgroups() calls
  - state: Use async signal safe fun in lxc_wait()
  - templates: lxc-debian: Don't try to get stuff from /usr/lib/systemd on the host
  - templates: lxc-debian: Fix getty service startup
  - templates: lxc-debian: Fix typo in calling dpkg with --print-foreign-architectures option
  - templates: lxc-debian: Handle ppc hostarch -&gt; powerpc
  - templates: lxc-opensuse: Change openSUSE default release to Leap 42.2
  - templates: lxc-opensuse: Remove libgcc_s1
  - templates: lxc-opensuse: Remove poweroff.target -&gt; sigpwr.target copy
  - templates: lxc-opensuse: Set to be unconfined by AppArmor
  - templates: lxc-opensuse: Update for Leap 42.2
  - tests; Don't cause test failures on cleanup errors
  - tests: Skip unpriv tests on broken overlay module
  - tools: Improve logging
  - tools: lxc-start: Remove c-&gt;is_defined(c) check
  - tools: lxc-start: Set configfile after load_config
  - tools: Only check for O_RDONLY
  - tree-wide: Random macro cleanups
  - tree-wide: Remove any variable length arrays
  - tree-wide: Sic semper assertis!
  - utils: Add macro __LXC_NUMSTRLEN
  - utils: Add uid, gid, group convenience wrappers
- commented out the patches, as they no longer apply cleanly</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485518400">- all patches (00*.patch) are upstream already, thus deleted; patch lxc-aa_allow_incomplete-default.patch is now reworked and added as a drop-in file in /usr/share/lxc/config/common.conf.d/
  0001-bdev-use-correct-overlay-module-name.patch
  0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
  0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
  0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
  0005-tools-move-rcfile-to-the-common-options-list.patch
  0006-tools-set-configfile-after-load_config.patch
  0007-doc-add-rcfile-to-common-opts.patch
  0008-doc-Update-Korean-lxc-attach-1.patch
  0009-doc-Add-rcfile-to-Korean-common-opts.patch
  0010-doc-Add-rcfile-to-Japanese-common-opts.patch
  0011-tools-use-exit-EXIT_-everywhere.patch
  0012-tools-unify-exit-calls-outside-of-main.patch
  0013-utils-Add-mips-signalfd-syscall-numbers.patch
  0014-seccomp-Implement-MIPS-seccomp-handling.patch
  0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
  0016-seccomp-fix-strerror.patch
  0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
  0018-seccomp-add-support-for-s390x.patch
  0019-seccomp-remove-double-include-and-order-includes.patch
  0020-seccomp-non-functional-changes.patch
  0021-templates-use-fd-9-instead-of-200.patch
  0022-templates-fedora-requires-openssl-binary.patch
  0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
  0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
  0025-c-r-Fix-pid_t-on-some-arches.patch
  0026-templates-Add-mips-hostarch-detection-to-debian.patch
  0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch
  lxc-aa_allow_incomplete-default.patch
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490788800">- backported two patches to get the package to build again for Tumbleweed
  (applied only on tumbleweed aka suse_version &gt;1315)
  0001-tree-wide-include-sys-sysmacros.h-directly.patch
  0002-tree-wide-include-sys-sysmacros.h-directly.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490875200">- fix for boo#1028264
  added patch 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Replace %__cp by cp</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1494936000">- Update to version 2.0.8
  * Security fix for CVE-2017-5985
  * All templates have been updated to not set default passwords anymore, instead requiring lxc-attach be used to configure users.
  * This may affect some automated environments that were relying on our default (very much insecure) users.
  Bugfixes:
    Make lxc-start-ephemeral Python 3.2-compatible
    Fix typo
    Allow build without sys/capability.h
    lxc-opensuse: fix default value for release code
    util: always malloc for setproctitle
    util: update setproctitle comments
    confile: clear lxc.network..ipv{4,6} when empty
    lxc_setup_tios(): Ignore SIGTTOU and SIGTTIN signals
    Make lxc-net return non-zero on failure
    seccomp: allow x32 guests on amd64 hosts.
    Add HAVE_LIBCAP
    c/r: only supply --ext-mount-map for bind mounts
    Added 'mkdir -p' functionality in create_or_remove_cgroup
    Use LXC_ROOTFS_MOUNT in clonehostname hook
    squeeze is not a supported release anymore, drop the key
    start: dumb down SIGCHLD from WARN() to NOTICE()
    log: fix lxc_unix_epoch_to_utc()
    cgfsng: make trim() safer
    seccomp: set SCMP_FLTATR_ATL_TSKIP if available
    lxc-user-nic: re-order #includes
    lxc-user-nic: improve + bugfix
    lxc-user-nic: delete link on failure
    conf: only try to delete veth when privileged
    Fix lxc-containers to support multiple bridges
    Fix mixed tab/spaces in previous patch
    lxc-alpine: use dl-cdn.a.o as default mirror instead of random one
    lxc-checkconfig: verify new[ug]idmap are setuid-root
    [templates] archlinux: resolve conflicting files
    [templates] archlinux: noneed default_timezone variable
    python3: Deal with potential NULL char*
    lxc-download.in / allow setting keyserver from env
    lxc-download.in / Document keyserver change in help
    Change variable check to match existing style
    tree-wide: include directly
    conf/ile: make sure buffer is large enough
    tree-wide: include directly
    tests: Support running on IPv6 networks
    tests: Kill containers (don't wait for shutdown)
    Fix opening wrong file in suggest_default_idmap
    do not set the root password in the debian template
    do not set insecure passwords
    don't set a default password for altlinux, gentoo, openmandriva and pld
    tools: exit with return code of lxc_execute()
    Keep veth.pair.name on network shutdown
    Makefile: fix static clang init.lxc build
    Avoid waiting for bridge interface if disabled in sysconfig/lxc | lxc-net via USE_LXC_BRIDGE
    Increased buffer length in print_stats()
    avoid assigning to a variable which is not POSIX shell proof (bug #1498)
    remove obsolete note about api stability
    conf: less error prone pointer access
    conf: lxc_map_ids() non-functional changes
    caps: add lxc_{proc,file}_cap_is_set()
    conf: check for {filecaps,setuid} on new{g,u}idmap
    conf: improve log when mounting rootfs
    ls: simplify the judgment condition when list active containers
    fix typo introduced in #1509
    attach|unshare: fix the wrong comment
    caps: skip file capability checks on android
    autotools: check for cap_get_file
    caps: return false if caps are not supported
    conf: non-functional changes to setup_pts()
    conf: use bind-mount for /dev/ptmx
    conf: non-functional changes
    utils: use loop device helpers from LXD
    create ISSUE_TEMPLATE.md
    cgroups: improve cgfsng debugging
    issue template: fix typo
    conf: close fd in lxc_setup_devpts()
    conf: non-functional changes
    utils: tweak lxc_mount_proc_if_needed()
    Change sshd template to work with Ubuntu 17.04
    conf: order mount options
    conf: add MS_LAZYTIME to mount options
    monitor: report errno on exec() error
    af unix: allow for maximum socket name
    commands: avoid NULL pointer dereference
    commands: non-functional changes
    lxccontainer: avoid NULL pointer dereference
    monitor: simplify abstract socket logic
    precise is not the latest LTS, let's use xenial instead
    fix the wrong exit status
    conf: non-functional changes lxc_fill_autodev()
    conf: remove /dev/console from lxc_fill_autodev()
    conf: non-functional changes lxc_setup()
    conf: non-functional changes to console functions
    conf: improve lxc_setup_dev_console()
    conf: lxc_setup_ttydir_console()
    config: remove /dev/console bind mount
    doc: document console behavior
    utils: add lxc_unstack_mountpoint()
    conf: unstack all mounts atop /dev/console
    console: fail when we cannot allocate peer tty
    start: remove umount2()
    conf: non-functional changes
    utils: handle &gt; 2^31 in lxc_unstack_mountpoint()
    Install systemd units for CentOS
    Merge ubuntu and debiancase
    start: add crucial details about lxc_spawn()
- Deleted patches that have been backported before:
  - 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch
  - 0001-tree-wide-include-sys-sysmacros.h-directly.patch
  - 0002-tree-wide-include-sys-sysmacros.h-directly.patch
- added signature verification</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1499169600">- added workaround for #bsc1041291 to allow builds on Tumbleweed with gcc7, until this bug in gcc7 is fixed...</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094400">- added correct reload of apparmor to %post</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094401">- added Requires for apparmor-abstractions and BuildRequires for apparmor-rpm-macros to apply the fix for boo#1036360</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094402">- removed apparmor-rpm-macros again, as it is not needed for the current %post solution</changelog>
  <changelog author="mchandras@suse.de" date="1504267200">- Fix libcap-progs dependency. The 'setcap' binary is located in /sbin
  instead of /usr/sbin but it's best to depend on the actual package
  instead since the location might change in the future.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1505217600">- removed ldconfig from lxc %post section</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1509451200">- update to version 2.0.9
  Bugfixes:
  * apparmor: Allow containers to start in AppArmor namespaces
  * apparmor: Drop useless apparmor denies
  * caps: Move ifndef/define to the top
  * cgfsng: Fail when limits fail to apply
  * cgfsng: Log when we defer to cgfsng
  * cgfsng: Only output debug info when we set cgroup data
  * cgroups: Handle hybrid cgroup layouts
  * cgroups: Use tight scoping
  * cgroups: Workaround gcc-7 bug
  * commands: Abstract cmd socket handling + logging
  * commands: Add missing translation
  * commands: Delete meaningless comments
  * commands: Handle EINTR
  * commands: Make state server interface flexible
  * commands: Move lxc_make_abstract_socket_name()
  * commands: Rename to lxc_cmd_add_state_client()
  * commonds: Fix typo
  * conf: Adapt to lxc-user-nic usage
  * conf: Add lxc_get_idmaps()
  * conf: Add userns_exec_full()
  * conf: Allow to clear all config items
  * conf: Allow to get lxc.autodev
  * conf: Allow to get lxc.haltsignal
  * conf: Allow to get lxc.kmsg
  * conf: Allow to get lxc.rebootsignal
  * conf: Allow to get lxc.stopsignal
  * conf: Allow writing uid mappings with euid != 0
  * conf: Avoid double-frees in userns_exec_1()
  * conf: Clear lxc.include
  * conf: Do not check for empty value twice
  * conf: Do not check union on wrong net type
  * conf: Do not deref null pointer
  * conf: Do not free static memory
  * conf: Do not log uninitialized memory
  * conf: Do not write out trailing spaces
  * conf: Don't send ttys when none are configured
  * conf: Dump lxc_get_config_item()
  * conf: Error out on too many mappings
  * conf: Fix bionic builds
  * conf: Fix build without libcap
  * conf: Fix tty creation
  * conf: Fix userns_exec_1()
  * conf: Free netdev-&gt;downscript
  * conf: Implement config item clear callback
  * conf: Improve lxc_map_ids()
  * conf: Improve tty shifting function
  * conf: Improve write_id_mapping()
  * conf: Increase lxc-user-nic buffer
  * conf: Log lxc-user-nic output
  * conf: lxc_listconfigs -&gt; lxc_list_config_items
  * conf: Move clearing config items into one place
  * conf: Non-functional changes
  * conf: NOTICE() on mounts on container's /dev
  * conf: Performance tweaks
  * conf: Preserve newlines
  * conf: Properly parse lxc.idmap entries
  * conf: Record idmap that gets written
  * conf: Refactoring of most config parsing code
  * conf: Refactor network deletion
  * conf: Remove dead assignments in parse_idmaps()
  * conf: Remove dead mount code
  * conf: Rework lxc_map_ids()
  * conf: Rework userns_exec_1()
  * conf: Send ttys in batches of 2
  * conf: Switch API to new callback system
  * conf: Use a minimal {g,u}id map
  * conf: Use correct check on char array
  * conf: Use run_command for lxc-usernsexec
  * console: Clean tty state + return 0 on peer exit
  * console: DO NOT add the handles of adjust winsize when the 'stdin' is not a tty
  * console: Fix memory leak of 'lxc_tty_state'
  * console: Remove dead assignments
  * core: Do remount with the MS_REMOUNT flag when mounts with MS_RDONLY
  * core: Fix a format string build failure on x32
  * core: Fix includes for Android
  * core: Fix memory and resource leak
  * core: Fix some cppcheck warnings
  * core: Fix the bug of 'ts-&gt;stdoutfd' did not fill with parameters 'stdoutfd'
  * core: Include custom mntent for Android
  * core: Log function called in userns_exec_1()
  * core: Remove the __func__ macro
  * core: Remove the unused macro
  * core: Replace "priority" with "level"
  * core: Revert "Add a prefix to the lxc.pc"
  * core: root -&gt; am_root
  * core: struct bdev -&gt; struct lxc_storage
  * core: Update .gitignore
  * core: Use strerror(errno) instead of %m
  * criu: Add cmp_version()
  * criu: Use correct check initialization check
  * doc: Add CII Best Practices badge to README
  * doc: Add console behavior to Japanese lxc.container.conf(5)
  * doc: Document missing env variables
  * doc: Fix regex-typo in Japanese and Korean lxc-monitor(1)
  * doc: Fix regex-typo in lxc-monitor.sgml.in
  * doc: Reword id mapping restrictions when unpriv
  * doc: Rework README
  * doc: Tweak Japanese lxc.container.conf(5)
  * doc: Tweak lxc.container.conf a little
  * doc: Untabify Japanese lxc.container.conf(5)
  * doc: Update API documentation for get_config_item
  * execute: Enable console &amp; standard /dev symlinks
  * init: Add comment for exclude 32 and 33 signals
  * init: Adjust include statements
  * init: Become session leader
  * init: Move initialization of act to outside of the loop
  * init: Report exec*() failure
  * init: Use lxc-stop to stop systemd service
  * liblxc: Make sure memory is free()ed
  * liblxc: Only spawn monitord on demand
  * liblxc: Remove 5s timeout on error
  * liblxc: Use snprintf()
  * liblxc: Use userns_exec_full()
  * lock: Non-functional changes
  * lock: Return the right error when open lock file failed
  * log: Prevent stack smashing
  * log: Switch to a new lxc_log_init function
  * monitor: Abstract lxc_abstract_unix_{send,recv}_fd for af_unix
  * monitor: Add lxc_cmd_state_server()
  * monitor: Add TRACE()ers
  * monitor: Delete unneccessory include file
  * monitor: Remove dead assignments
  * monitor: Remove the workaround-code for lxc_abstract_unix_connect
  * monitor: Remove unlink operation for af_unix
  * network: Add arg to config clear method
  * network: Add data arg to set callback
  * network: Add ifindex field for host veth device
  * network: Add lxc_log_configured_netdevs()
  * network: Add missing checks for empty links
  * network: Add network counter
  * network: Add warning when ignoring MTU
  * network: Clear ifindeces
  * network: Delete ovs for unprivileged networks
  * network: Document all fields in struct lxc_netdev
  * network: Don't delete net devs we didn't create
  * network: Fix grammar
  * network: Implement lxc_get_netdev_by_idx()
  * network: Log cleanup thread pid for openswitch
  * network: Log ifindex
  * network: Log ifindex for host side veth device
  * network: Log veth_attr.pair and veth_attr.veth1
  * network: Move config_value_empty() to confile_utils
  * network: Perform network validation at creation time
  * network: Remove allocation from lxc_mkifname()
  * network: Remove dead assignments
  * network: Remove netpipe
  * network: Retrieve correct names and ifindices
  * network: Retrieve the host's veth device ifindex
  * network: Rework network creation
  * network: Send ifindex for unpriv networks
  * network: Stop recording saved physical net devices
  * network: Use correct network device name
  * network: Use send()/recv()
  * network: Use single helper to delete networks
  * network: Use static memory for net device names
  * openvswitch: Delete ports intelligently
  * seccomp: Export the seccomp filter after load it into kernel successful
  * seccomp: Print action name in log
  * seccomp: s/n-new-privs/no-new-privs/g
  * seccomp: Update comment for function parse_config
  * start: Add lxc_free_handler()
  * start: Add lxc_init_handler()
  * start: Document all handler fields
  * start: Don't call lxc_map_ids() without id map
  * start: Don't close inherited namespace fds
  * start: Don't let data_sock users close the fd
  * start: Dup std{in,out,err} to pty slave
  * start: Ensure cgroups are cleaned up
  * start: Generalize lxc_check_inherited()
  * start: Log sending and receiving of tty fds
  * start: lxc_setup() after unshare(CLONE_NEWCGROUP)
  * start: Move env setup before container setup
  * start: Pass LXC_LOG_LEVEL to hooks
  * start: Pin rootfs when privileged
  * start: Remove dead variable
  * start: Send state to legacy lxc-monitord state server even if no state clients registered
  * start: Set environment variables correctly
  * start: Switch from SOCK_DGRAM to SOCK_STREAM
  * start: Switch ids at last possible instance
  * start: Use separate socket on daemonized start
  * start: Use userns_exec_full()
  * state: Remove lxc_rmstate declaration
  * storage: Add storage_utils.{c.h}
  * storage: Avoid segfault
  * storage: Default to orig type on identical paths
  * storage: Record output from mkfs.*
  * storage: Rename files "bdev" -&gt; "storage"
  * storage: Use userns_exec_full()
  * storage/dir: Using 'add-required_remount_flags' function to add required flags
  * storage/loop: Detect loop file
  * storage/overlayfs: Fix wrong path
  * storage/overlay: Handle overlay for stable 2.0
  * template: Remove obsolete bind-mounts from userns.conf
  * template: Use "rsync -SHaAX" to copy the cached rootfs into place
  * template/alpine: Add support for ppc64le
  * template/alpine: Change file check to also check file size (-f =&gt; -s)
  * template/archlinux: Change locale "en-US.UTF-8" to "en_US.UTF-8"
  * template/centos: Add cronie to the pkg list
  * template/centos: Use altarch mirror for CentOS on arches other than i386 and x86_64
  * template/debian: Add aarch64 -&gt; arm64 mapping
  * template/debian: Add buster as a valid release
  * template/debian: Don't force getty@ configuration
  * template/debian: Use deb.debian.org as the default Debian mirror
  * template/download: Fix syntax error
  * template/download: Sanitize script with shellcheck
  * template/opensuse: Add Tumbleweed as supported release
  * template/opensuse: Fix tumbleweed software selection
  * template/opensuse: getty.target.wants does not always exists
  * template/opensuse: Support leap 42.3
  * template/opensuse: Tumbleweed has no update repo
  * template/plamo: Delete unnecessary process during container shutdown
  * template/ubuntu: Check that there is netplan binary, rather than just just a config directory
  * template/ubuntu: Conditionally move upstart ssh job, as it is now optional
  * template/ubuntu: Support netplan in newer releases by default
  * tests: Adapt lxc-user-nic tests to new syntax
  * tests: Add corner-case tests for lxc_safe_{u}int()
  * tests: Add item clear and config file tests
  * tests: Add test script to test the ro option of lxc.rootfs.options
  * tests: Add unit tests for idmap parser
  * tests: Avoid NULL pointer dereference
  * tests: Compare return value to expected value whenever we can
  * tests: Define a network before checks
  * tests: Don't fail when no processes for the user exist
  * tests: Enforce all methods for config items
  * tests: Remove dead assignments
  * tests: Remove the temp container directory
  * tests: Shortlived daemonized containers
  * tests: Support systemd hybrid cgroups
  * tools: Add additional cgroup checks
  * tools: Print "-devel" when LXC_DEVEL is true
  * tools: Use "which"
  * tools/lxc-attach: Allow for situations without /dev/tty
  * tools/lxc-checkconfig: Add CONFIG_NETFILTER_XT_MATCH_COMMENT
  * tools/lxc-checkconfig: Add probe status checking
  * tools/lxc-execute: Print error message when failed
  * tools/lxc-ls: Return all containers by default
  * tools/lxc-monitord: Exit when receiving a quit command
  * tools/lxc-unshare: Do not pass NULL pointer
  * tools/lxc-user-nic: Add new {create,delete} subcommands
  * tools/lxc-user-nic: Check db before trying to delete
  * tools/lxc-user-nic: Fix adding database entries
  * tools/lxc-user-nic: Fix memleak
  * tools/lxc-user-nic: Free memory and check for error
  * tools/lxc-user-nic: Initialize vars to silence gcc-7
  * tools/lxc-user-nic: Keep lines from other {users,links}
  * tools/lxc-user-nic: Remove delta between master + stable
  * tools/lxc-user-nic: Remove double initialization
  * tools/lxc-user-nic: Rework renaming net devices
  * tools/lxc-user-nic: Simplify logic
  * tools/lxc-user-nic: Test privilege over netns on delete
  * tools/lxc-usernsexec: Remove dead assignments
  * travis: Fix builds
  * utils: Add has_fs_type() + is_fs_type()
  * utils: Add lxc_nic_exists()
  * utils: Add lxc_safe_ulong()
  * utils: Add run_command
  * utils: Close parent end in child process after fork
  * utils: Do not write to 0 sized buffer
  * utils: Duplicate stderr as well in lxc_popen()
  * utils: Fix lxc_mount_proc_if_needed()
  * utils: Fix lxc_popen()/lxc_pclose()
  * utils: Fix mem leak with realpath
  * utils: Fix num parsing functions
  * utils: Fix ppc64le builds
  * utils: Fix the way to detect blocking signal
  * utils: lxc_popen() remove dead assignments
  * utils: Move helpers from cgfsng.c to utils.{c,h}
  * utils: Rework lxc_deslashify()
  * utils: Switch to has_fs_type()
  * utils: Use 1LU otherwise we overflow
  * utils: Use access instead of stat</changelog>
  <changelog author="mchandras@suse.de" date="1532001600">- Add upstream patch to fix container start up problems when AppArmor
  is enabled (boo#1099239)
  * 0001-apparmor-Allow-usr-lib-paths-for-mount-and-pivot_roo.patch</changelog>
</package>
<package pkgid="0fa78f9c769ca70bfe8698088146e78aaa241fa8ca227cd3431c252afb8b4f42" name="liblxc1" arch="x86_64">
  <version epoch="0" ver="2.0.9" rel="lp150.2.6.1"/>
  <changelog author="cbrauner@suse.de" date="1468065600">- add lxcfs dependency: lxc relies on lxcfs for a long time now to provide
  container aware /proc files. The /sys/fs/cgroup part is slowly phased out
  because we now have cgroup namespaces.</changelog>
  <changelog author="jengelh@inai.de" date="1469275200">- Abolish old macro use. Remove ancient %clean section.
  Avoid sh invocation for simple ldconfig calls.</changelog>
  <changelog author="cbrauner@suse.de" date="1472644800">- update lxc to 2.0.4
- add 0001-bdev-use-correct-overlay-module-name.patch
- add 0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
- add 0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
- add 0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
- add 0005-tools-move-rcfile-to-the-common-options-list.patch
- add 0006-tools-set-configfile-after-load_config.patch
- add 0007-doc-add-rcfile-to-common-opts.patch
- add 0008-doc-Update-Korean-lxc-attach-1.patch
- add 0009-doc-Add-rcfile-to-Korean-common-opts.patch
- add 0010-doc-Add-rcfile-to-Japanese-common-opts.patch
- add 0011-tools-use-exit-EXIT_-everywhere.patch
- add 0012-tools-unify-exit-calls-outside-of-main.patch
- add 0013-utils-Add-mips-signalfd-syscall-numbers.patch
- add 0014-seccomp-Implement-MIPS-seccomp-handling.patch
- add 0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
- add 0016-seccomp-fix-strerror.patch
- add 0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
- add 0018-seccomp-add-support-for-s390x.patch
- add 0019-seccomp-remove-double-include-and-order-includes.patch
- add 0020-seccomp-non-functional-changes.patch
- add 0021-templates-use-fd-9-instead-of-200.patch
- add 0022-templates-fedora-requires-openssl-binary.patch
- add 0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
- add 0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
- add 0025-c-r-Fix-pid_t-on-some-arches.patch
- add 0026-templates-Add-mips-hostarch-detection-to-debian.patch
- add 0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch</changelog>
  <changelog author="schwab@suse.de" date="1474286400">- setcap has been moved to /usr/sbin (boo#998326).</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481025600">- CVE-2016-8649: lxc: guest escape via ptrace of lxc-attach (bsc#1010933).
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485259200">- update to version 2.0.7
  This is the seventh bugfix release for LXC 2.0. The main bugfixes in this release are:
  - attach: Close lsm label file descriptor
  - attach: Non-functional changes
  - attach: Simplify lsm_openat()
  - caps: Add lxc_cap_is_set()
  - conf: attach: Save errno across call to close
  - conf: Clearly report to either use drop or keep
  - conf: criu: Add make_anonymous_mount_file()
  - conf: Fix suggest_default_idmap()
  - configure: Add --enable-gnutls option
  - configure: Check for memfd_create()
  - configure: Check whether gettid() is declared
  - configure: Do not allow variable length arrays
  - configure: Remove -Werror=vla
  - configure: Use AC_HEADER_MAJOR to detect major()/minor()/makedev()
  - conf: Non-functional changes
  - conf: Remove thread-unsafe strsignal + improve log
  - init: Add cgroupfs-mount to Should-Start/Stop sysvinit LSB headers
  - log: Add lxc_unix_epoch_to_utc()
  - log: Annotate lxc_unix_epoch_to_utc()
  - log: Drop all timezone conversion functions
  - log: Make sure that date is correctly formatted
  - log: Use lxc_unix_epoch_to_utc()
  - log: Use N/A if getpid() != gettid() when threaded
  - log: Use thread-safe localtime_r()
  - lvm: Supress warnings about leaked files
  - lxccontainer: Log failure to send sig to init pid
  - monitor: Add more logging
  - monitor: Close mainloop on exit if we opened it
  - monitor: Improve log + set log level to DEBUG
  - monitor: Log which pipe fd is currently used
  - monitor: Make lxc-monitord async signal safe
  - monitor: Non-functional changes
  - python3-lxc: Fix api_test.py on s390x
  - start: Check for CAP_SETGID before setgroups()
  - start: Fix execute and improve setgroups() calls
  - state: Use async signal safe fun in lxc_wait()
  - templates: lxc-debian: Don't try to get stuff from /usr/lib/systemd on the host
  - templates: lxc-debian: Fix getty service startup
  - templates: lxc-debian: Fix typo in calling dpkg with --print-foreign-architectures option
  - templates: lxc-debian: Handle ppc hostarch -&gt; powerpc
  - templates: lxc-opensuse: Change openSUSE default release to Leap 42.2
  - templates: lxc-opensuse: Remove libgcc_s1
  - templates: lxc-opensuse: Remove poweroff.target -&gt; sigpwr.target copy
  - templates: lxc-opensuse: Set to be unconfined by AppArmor
  - templates: lxc-opensuse: Update for Leap 42.2
  - tests; Don't cause test failures on cleanup errors
  - tests: Skip unpriv tests on broken overlay module
  - tools: Improve logging
  - tools: lxc-start: Remove c-&gt;is_defined(c) check
  - tools: lxc-start: Set configfile after load_config
  - tools: Only check for O_RDONLY
  - tree-wide: Random macro cleanups
  - tree-wide: Remove any variable length arrays
  - tree-wide: Sic semper assertis!
  - utils: Add macro __LXC_NUMSTRLEN
  - utils: Add uid, gid, group convenience wrappers
- commented out the patches, as they no longer apply cleanly</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485518400">- all patches (00*.patch) are upstream already, thus deleted; patch lxc-aa_allow_incomplete-default.patch is now reworked and added as a drop-in file in /usr/share/lxc/config/common.conf.d/
  0001-bdev-use-correct-overlay-module-name.patch
  0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
  0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
  0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
  0005-tools-move-rcfile-to-the-common-options-list.patch
  0006-tools-set-configfile-after-load_config.patch
  0007-doc-add-rcfile-to-common-opts.patch
  0008-doc-Update-Korean-lxc-attach-1.patch
  0009-doc-Add-rcfile-to-Korean-common-opts.patch
  0010-doc-Add-rcfile-to-Japanese-common-opts.patch
  0011-tools-use-exit-EXIT_-everywhere.patch
  0012-tools-unify-exit-calls-outside-of-main.patch
  0013-utils-Add-mips-signalfd-syscall-numbers.patch
  0014-seccomp-Implement-MIPS-seccomp-handling.patch
  0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
  0016-seccomp-fix-strerror.patch
  0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
  0018-seccomp-add-support-for-s390x.patch
  0019-seccomp-remove-double-include-and-order-includes.patch
  0020-seccomp-non-functional-changes.patch
  0021-templates-use-fd-9-instead-of-200.patch
  0022-templates-fedora-requires-openssl-binary.patch
  0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
  0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
  0025-c-r-Fix-pid_t-on-some-arches.patch
  0026-templates-Add-mips-hostarch-detection-to-debian.patch
  0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch
  lxc-aa_allow_incomplete-default.patch
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490788800">- backported two patches to get the package to build again for Tumbleweed
  (applied only on tumbleweed aka suse_version &gt;1315)
  0001-tree-wide-include-sys-sysmacros.h-directly.patch
  0002-tree-wide-include-sys-sysmacros.h-directly.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490875200">- fix for boo#1028264
  added patch 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Replace %__cp by cp</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1494936000">- Update to version 2.0.8
  * Security fix for CVE-2017-5985
  * All templates have been updated to not set default passwords anymore, instead requiring lxc-attach be used to configure users.
  * This may affect some automated environments that were relying on our default (very much insecure) users.
  Bugfixes:
    Make lxc-start-ephemeral Python 3.2-compatible
    Fix typo
    Allow build without sys/capability.h
    lxc-opensuse: fix default value for release code
    util: always malloc for setproctitle
    util: update setproctitle comments
    confile: clear lxc.network..ipv{4,6} when empty
    lxc_setup_tios(): Ignore SIGTTOU and SIGTTIN signals
    Make lxc-net return non-zero on failure
    seccomp: allow x32 guests on amd64 hosts.
    Add HAVE_LIBCAP
    c/r: only supply --ext-mount-map for bind mounts
    Added 'mkdir -p' functionality in create_or_remove_cgroup
    Use LXC_ROOTFS_MOUNT in clonehostname hook
    squeeze is not a supported release anymore, drop the key
    start: dumb down SIGCHLD from WARN() to NOTICE()
    log: fix lxc_unix_epoch_to_utc()
    cgfsng: make trim() safer
    seccomp: set SCMP_FLTATR_ATL_TSKIP if available
    lxc-user-nic: re-order #includes
    lxc-user-nic: improve + bugfix
    lxc-user-nic: delete link on failure
    conf: only try to delete veth when privileged
    Fix lxc-containers to support multiple bridges
    Fix mixed tab/spaces in previous patch
    lxc-alpine: use dl-cdn.a.o as default mirror instead of random one
    lxc-checkconfig: verify new[ug]idmap are setuid-root
    [templates] archlinux: resolve conflicting files
    [templates] archlinux: noneed default_timezone variable
    python3: Deal with potential NULL char*
    lxc-download.in / allow setting keyserver from env
    lxc-download.in / Document keyserver change in help
    Change variable check to match existing style
    tree-wide: include directly
    conf/ile: make sure buffer is large enough
    tree-wide: include directly
    tests: Support running on IPv6 networks
    tests: Kill containers (don't wait for shutdown)
    Fix opening wrong file in suggest_default_idmap
    do not set the root password in the debian template
    do not set insecure passwords
    don't set a default password for altlinux, gentoo, openmandriva and pld
    tools: exit with return code of lxc_execute()
    Keep veth.pair.name on network shutdown
    Makefile: fix static clang init.lxc build
    Avoid waiting for bridge interface if disabled in sysconfig/lxc | lxc-net via USE_LXC_BRIDGE
    Increased buffer length in print_stats()
    avoid assigning to a variable which is not POSIX shell proof (bug #1498)
    remove obsolete note about api stability
    conf: less error prone pointer access
    conf: lxc_map_ids() non-functional changes
    caps: add lxc_{proc,file}_cap_is_set()
    conf: check for {filecaps,setuid} on new{g,u}idmap
    conf: improve log when mounting rootfs
    ls: simplify the judgment condition when list active containers
    fix typo introduced in #1509
    attach|unshare: fix the wrong comment
    caps: skip file capability checks on android
    autotools: check for cap_get_file
    caps: return false if caps are not supported
    conf: non-functional changes to setup_pts()
    conf: use bind-mount for /dev/ptmx
    conf: non-functional changes
    utils: use loop device helpers from LXD
    create ISSUE_TEMPLATE.md
    cgroups: improve cgfsng debugging
    issue template: fix typo
    conf: close fd in lxc_setup_devpts()
    conf: non-functional changes
    utils: tweak lxc_mount_proc_if_needed()
    Change sshd template to work with Ubuntu 17.04
    conf: order mount options
    conf: add MS_LAZYTIME to mount options
    monitor: report errno on exec() error
    af unix: allow for maximum socket name
    commands: avoid NULL pointer dereference
    commands: non-functional changes
    lxccontainer: avoid NULL pointer dereference
    monitor: simplify abstract socket logic
    precise is not the latest LTS, let's use xenial instead
    fix the wrong exit status
    conf: non-functional changes lxc_fill_autodev()
    conf: remove /dev/console from lxc_fill_autodev()
    conf: non-functional changes lxc_setup()
    conf: non-functional changes to console functions
    conf: improve lxc_setup_dev_console()
    conf: lxc_setup_ttydir_console()
    config: remove /dev/console bind mount
    doc: document console behavior
    utils: add lxc_unstack_mountpoint()
    conf: unstack all mounts atop /dev/console
    console: fail when we cannot allocate peer tty
    start: remove umount2()
    conf: non-functional changes
    utils: handle &gt; 2^31 in lxc_unstack_mountpoint()
    Install systemd units for CentOS
    Merge ubuntu and debiancase
    start: add crucial details about lxc_spawn()
- Deleted patches that have been backported before:
  - 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch
  - 0001-tree-wide-include-sys-sysmacros.h-directly.patch
  - 0002-tree-wide-include-sys-sysmacros.h-directly.patch
- added signature verification</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1499169600">- added workaround for #bsc1041291 to allow builds on Tumbleweed with gcc7, until this bug in gcc7 is fixed...</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094400">- added correct reload of apparmor to %post</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094401">- added Requires for apparmor-abstractions and BuildRequires for apparmor-rpm-macros to apply the fix for boo#1036360</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094402">- removed apparmor-rpm-macros again, as it is not needed for the current %post solution</changelog>
  <changelog author="mchandras@suse.de" date="1504267200">- Fix libcap-progs dependency. The 'setcap' binary is located in /sbin
  instead of /usr/sbin but it's best to depend on the actual package
  instead since the location might change in the future.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1505217600">- removed ldconfig from lxc %post section</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1509451200">- update to version 2.0.9
  Bugfixes:
  * apparmor: Allow containers to start in AppArmor namespaces
  * apparmor: Drop useless apparmor denies
  * caps: Move ifndef/define to the top
  * cgfsng: Fail when limits fail to apply
  * cgfsng: Log when we defer to cgfsng
  * cgfsng: Only output debug info when we set cgroup data
  * cgroups: Handle hybrid cgroup layouts
  * cgroups: Use tight scoping
  * cgroups: Workaround gcc-7 bug
  * commands: Abstract cmd socket handling + logging
  * commands: Add missing translation
  * commands: Delete meaningless comments
  * commands: Handle EINTR
  * commands: Make state server interface flexible
  * commands: Move lxc_make_abstract_socket_name()
  * commands: Rename to lxc_cmd_add_state_client()
  * commonds: Fix typo
  * conf: Adapt to lxc-user-nic usage
  * conf: Add lxc_get_idmaps()
  * conf: Add userns_exec_full()
  * conf: Allow to clear all config items
  * conf: Allow to get lxc.autodev
  * conf: Allow to get lxc.haltsignal
  * conf: Allow to get lxc.kmsg
  * conf: Allow to get lxc.rebootsignal
  * conf: Allow to get lxc.stopsignal
  * conf: Allow writing uid mappings with euid != 0
  * conf: Avoid double-frees in userns_exec_1()
  * conf: Clear lxc.include
  * conf: Do not check for empty value twice
  * conf: Do not check union on wrong net type
  * conf: Do not deref null pointer
  * conf: Do not free static memory
  * conf: Do not log uninitialized memory
  * conf: Do not write out trailing spaces
  * conf: Don't send ttys when none are configured
  * conf: Dump lxc_get_config_item()
  * conf: Error out on too many mappings
  * conf: Fix bionic builds
  * conf: Fix build without libcap
  * conf: Fix tty creation
  * conf: Fix userns_exec_1()
  * conf: Free netdev-&gt;downscript
  * conf: Implement config item clear callback
  * conf: Improve lxc_map_ids()
  * conf: Improve tty shifting function
  * conf: Improve write_id_mapping()
  * conf: Increase lxc-user-nic buffer
  * conf: Log lxc-user-nic output
  * conf: lxc_listconfigs -&gt; lxc_list_config_items
  * conf: Move clearing config items into one place
  * conf: Non-functional changes
  * conf: NOTICE() on mounts on container's /dev
  * conf: Performance tweaks
  * conf: Preserve newlines
  * conf: Properly parse lxc.idmap entries
  * conf: Record idmap that gets written
  * conf: Refactoring of most config parsing code
  * conf: Refactor network deletion
  * conf: Remove dead assignments in parse_idmaps()
  * conf: Remove dead mount code
  * conf: Rework lxc_map_ids()
  * conf: Rework userns_exec_1()
  * conf: Send ttys in batches of 2
  * conf: Switch API to new callback system
  * conf: Use a minimal {g,u}id map
  * conf: Use correct check on char array
  * conf: Use run_command for lxc-usernsexec
  * console: Clean tty state + return 0 on peer exit
  * console: DO NOT add the handles of adjust winsize when the 'stdin' is not a tty
  * console: Fix memory leak of 'lxc_tty_state'
  * console: Remove dead assignments
  * core: Do remount with the MS_REMOUNT flag when mounts with MS_RDONLY
  * core: Fix a format string build failure on x32
  * core: Fix includes for Android
  * core: Fix memory and resource leak
  * core: Fix some cppcheck warnings
  * core: Fix the bug of 'ts-&gt;stdoutfd' did not fill with parameters 'stdoutfd'
  * core: Include custom mntent for Android
  * core: Log function called in userns_exec_1()
  * core: Remove the __func__ macro
  * core: Remove the unused macro
  * core: Replace "priority" with "level"
  * core: Revert "Add a prefix to the lxc.pc"
  * core: root -&gt; am_root
  * core: struct bdev -&gt; struct lxc_storage
  * core: Update .gitignore
  * core: Use strerror(errno) instead of %m
  * criu: Add cmp_version()
  * criu: Use correct check initialization check
  * doc: Add CII Best Practices badge to README
  * doc: Add console behavior to Japanese lxc.container.conf(5)
  * doc: Document missing env variables
  * doc: Fix regex-typo in Japanese and Korean lxc-monitor(1)
  * doc: Fix regex-typo in lxc-monitor.sgml.in
  * doc: Reword id mapping restrictions when unpriv
  * doc: Rework README
  * doc: Tweak Japanese lxc.container.conf(5)
  * doc: Tweak lxc.container.conf a little
  * doc: Untabify Japanese lxc.container.conf(5)
  * doc: Update API documentation for get_config_item
  * execute: Enable console &amp; standard /dev symlinks
  * init: Add comment for exclude 32 and 33 signals
  * init: Adjust include statements
  * init: Become session leader
  * init: Move initialization of act to outside of the loop
  * init: Report exec*() failure
  * init: Use lxc-stop to stop systemd service
  * liblxc: Make sure memory is free()ed
  * liblxc: Only spawn monitord on demand
  * liblxc: Remove 5s timeout on error
  * liblxc: Use snprintf()
  * liblxc: Use userns_exec_full()
  * lock: Non-functional changes
  * lock: Return the right error when open lock file failed
  * log: Prevent stack smashing
  * log: Switch to a new lxc_log_init function
  * monitor: Abstract lxc_abstract_unix_{send,recv}_fd for af_unix
  * monitor: Add lxc_cmd_state_server()
  * monitor: Add TRACE()ers
  * monitor: Delete unneccessory include file
  * monitor: Remove dead assignments
  * monitor: Remove the workaround-code for lxc_abstract_unix_connect
  * monitor: Remove unlink operation for af_unix
  * network: Add arg to config clear method
  * network: Add data arg to set callback
  * network: Add ifindex field for host veth device
  * network: Add lxc_log_configured_netdevs()
  * network: Add missing checks for empty links
  * network: Add network counter
  * network: Add warning when ignoring MTU
  * network: Clear ifindeces
  * network: Delete ovs for unprivileged networks
  * network: Document all fields in struct lxc_netdev
  * network: Don't delete net devs we didn't create
  * network: Fix grammar
  * network: Implement lxc_get_netdev_by_idx()
  * network: Log cleanup thread pid for openswitch
  * network: Log ifindex
  * network: Log ifindex for host side veth device
  * network: Log veth_attr.pair and veth_attr.veth1
  * network: Move config_value_empty() to confile_utils
  * network: Perform network validation at creation time
  * network: Remove allocation from lxc_mkifname()
  * network: Remove dead assignments
  * network: Remove netpipe
  * network: Retrieve correct names and ifindices
  * network: Retrieve the host's veth device ifindex
  * network: Rework network creation
  * network: Send ifindex for unpriv networks
  * network: Stop recording saved physical net devices
  * network: Use correct network device name
  * network: Use send()/recv()
  * network: Use single helper to delete networks
  * network: Use static memory for net device names
  * openvswitch: Delete ports intelligently
  * seccomp: Export the seccomp filter after load it into kernel successful
  * seccomp: Print action name in log
  * seccomp: s/n-new-privs/no-new-privs/g
  * seccomp: Update comment for function parse_config
  * start: Add lxc_free_handler()
  * start: Add lxc_init_handler()
  * start: Document all handler fields
  * start: Don't call lxc_map_ids() without id map
  * start: Don't close inherited namespace fds
  * start: Don't let data_sock users close the fd
  * start: Dup std{in,out,err} to pty slave
  * start: Ensure cgroups are cleaned up
  * start: Generalize lxc_check_inherited()
  * start: Log sending and receiving of tty fds
  * start: lxc_setup() after unshare(CLONE_NEWCGROUP)
  * start: Move env setup before container setup
  * start: Pass LXC_LOG_LEVEL to hooks
  * start: Pin rootfs when privileged
  * start: Remove dead variable
  * start: Send state to legacy lxc-monitord state server even if no state clients registered
  * start: Set environment variables correctly
  * start: Switch from SOCK_DGRAM to SOCK_STREAM
  * start: Switch ids at last possible instance
  * start: Use separate socket on daemonized start
  * start: Use userns_exec_full()
  * state: Remove lxc_rmstate declaration
  * storage: Add storage_utils.{c.h}
  * storage: Avoid segfault
  * storage: Default to orig type on identical paths
  * storage: Record output from mkfs.*
  * storage: Rename files "bdev" -&gt; "storage"
  * storage: Use userns_exec_full()
  * storage/dir: Using 'add-required_remount_flags' function to add required flags
  * storage/loop: Detect loop file
  * storage/overlayfs: Fix wrong path
  * storage/overlay: Handle overlay for stable 2.0
  * template: Remove obsolete bind-mounts from userns.conf
  * template: Use "rsync -SHaAX" to copy the cached rootfs into place
  * template/alpine: Add support for ppc64le
  * template/alpine: Change file check to also check file size (-f =&gt; -s)
  * template/archlinux: Change locale "en-US.UTF-8" to "en_US.UTF-8"
  * template/centos: Add cronie to the pkg list
  * template/centos: Use altarch mirror for CentOS on arches other than i386 and x86_64
  * template/debian: Add aarch64 -&gt; arm64 mapping
  * template/debian: Add buster as a valid release
  * template/debian: Don't force getty@ configuration
  * template/debian: Use deb.debian.org as the default Debian mirror
  * template/download: Fix syntax error
  * template/download: Sanitize script with shellcheck
  * template/opensuse: Add Tumbleweed as supported release
  * template/opensuse: Fix tumbleweed software selection
  * template/opensuse: getty.target.wants does not always exists
  * template/opensuse: Support leap 42.3
  * template/opensuse: Tumbleweed has no update repo
  * template/plamo: Delete unnecessary process during container shutdown
  * template/ubuntu: Check that there is netplan binary, rather than just just a config directory
  * template/ubuntu: Conditionally move upstart ssh job, as it is now optional
  * template/ubuntu: Support netplan in newer releases by default
  * tests: Adapt lxc-user-nic tests to new syntax
  * tests: Add corner-case tests for lxc_safe_{u}int()
  * tests: Add item clear and config file tests
  * tests: Add test script to test the ro option of lxc.rootfs.options
  * tests: Add unit tests for idmap parser
  * tests: Avoid NULL pointer dereference
  * tests: Compare return value to expected value whenever we can
  * tests: Define a network before checks
  * tests: Don't fail when no processes for the user exist
  * tests: Enforce all methods for config items
  * tests: Remove dead assignments
  * tests: Remove the temp container directory
  * tests: Shortlived daemonized containers
  * tests: Support systemd hybrid cgroups
  * tools: Add additional cgroup checks
  * tools: Print "-devel" when LXC_DEVEL is true
  * tools: Use "which"
  * tools/lxc-attach: Allow for situations without /dev/tty
  * tools/lxc-checkconfig: Add CONFIG_NETFILTER_XT_MATCH_COMMENT
  * tools/lxc-checkconfig: Add probe status checking
  * tools/lxc-execute: Print error message when failed
  * tools/lxc-ls: Return all containers by default
  * tools/lxc-monitord: Exit when receiving a quit command
  * tools/lxc-unshare: Do not pass NULL pointer
  * tools/lxc-user-nic: Add new {create,delete} subcommands
  * tools/lxc-user-nic: Check db before trying to delete
  * tools/lxc-user-nic: Fix adding database entries
  * tools/lxc-user-nic: Fix memleak
  * tools/lxc-user-nic: Free memory and check for error
  * tools/lxc-user-nic: Initialize vars to silence gcc-7
  * tools/lxc-user-nic: Keep lines from other {users,links}
  * tools/lxc-user-nic: Remove delta between master + stable
  * tools/lxc-user-nic: Remove double initialization
  * tools/lxc-user-nic: Rework renaming net devices
  * tools/lxc-user-nic: Simplify logic
  * tools/lxc-user-nic: Test privilege over netns on delete
  * tools/lxc-usernsexec: Remove dead assignments
  * travis: Fix builds
  * utils: Add has_fs_type() + is_fs_type()
  * utils: Add lxc_nic_exists()
  * utils: Add lxc_safe_ulong()
  * utils: Add run_command
  * utils: Close parent end in child process after fork
  * utils: Do not write to 0 sized buffer
  * utils: Duplicate stderr as well in lxc_popen()
  * utils: Fix lxc_mount_proc_if_needed()
  * utils: Fix lxc_popen()/lxc_pclose()
  * utils: Fix mem leak with realpath
  * utils: Fix num parsing functions
  * utils: Fix ppc64le builds
  * utils: Fix the way to detect blocking signal
  * utils: lxc_popen() remove dead assignments
  * utils: Move helpers from cgfsng.c to utils.{c,h}
  * utils: Rework lxc_deslashify()
  * utils: Switch to has_fs_type()
  * utils: Use 1LU otherwise we overflow
  * utils: Use access instead of stat</changelog>
  <changelog author="mchandras@suse.de" date="1532001600">- Add upstream patch to fix container start up problems when AppArmor
  is enabled (boo#1099239)
  * 0001-apparmor-Allow-usr-lib-paths-for-mount-and-pivot_roo.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1533556800">- 0001-utils-add-LXC_PROC_PID_FD_LEN.patch: prerequisite for applying the
  next patch
- 0001-lxc-user-nic-verify-file-descriptor-stable-2.0.patch: fix information
  leak and possible open() side effects accessible to regular users via
  lxc-user-nic (bsc#988348, CVE-2018-6556)</changelog>
</package>
<package pkgid="8c9142e7c10bf7e8ead28c9dd69e154ef2696f28ce6690dc3b9be4306055522e" name="libmetrics-devel" arch="x86_64">
  <version epoch="0" ver="0.4" rel="lp150.2.3.1"/>
  <changelog author="jfehlig@novell.com" date="1245412800">- vhostmd is currently only used with Xen so make it
  ExclusiveArch x86 and x86_64</changelog>
  <changelog author="jfehlig@novell.com" date="1246017600">- Add metric type 'XML'</changelog>
  <changelog author="jfehlig@novell.com" date="1246017601">- Allow larger buffer for 'xml' type</changelog>
  <changelog author="jfehlig@novell.com" date="1246276800">- Validate XML returned by 'action' for metric type 'xml'
- Do not convert metrics values internally in vhostmd.  Treat
  all metric values as strings and leave it to consumers to do
  any conversion.</changelog>
  <changelog author="dmueller@suse.de" date="1253102400">- fix devel package requires</changelog>
  <changelog author="aj@suse.de" date="1254225600">- Fix devel package requires.</changelog>
  <changelog author="jfehlig@novell.com" date="1256904000">- Release of version 0.3
  - change default disk location to /dev/shm/vhostmd0
  - open metrics disk with O_DIRECT
  - Fixes for '--with{,out}-xenstore' option
  - Allow gcc to check calls to vu_log* printf-like functions
  - Always connect to libvirt read-only
  - Add '-u user' command line option to drop root privs
  - Add '-c uri' command line option to specify libvirt connection
    URI
  - Add CONNECT substitution &lt;action&gt;s
  - vm-dump-metrics: On error, exit with status code 1</changelog>
  <changelog author="jfehlig@novell.com" date="1260360000">- Release of version 0.4
  - configure.ac: Fix C compiler detection to be compatible with
    automake
  - chdir ("/") when daemonizing self</changelog>
  <changelog author="jfehlig@novell.com" date="1269950400">- Fixed vm-dump-metrics man page
  bnc#592242
  manpage.patch
- Build vhostmd without xenstore support since it is not well
  tested on SuSE distributions.  Additionally, it can be confusing
  when used in context of KVM where xenstore does not exist.
- Strip 's' (seconds) from metrics that contain a time value
  vhostmd-conf.patch
- Remove stray newline from metric values to improve XML readability
  value-newline.patch</changelog>
  <changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jfehlig@suse.com" date="1386676800">- link libmetrics with libxml to fix Factory build</changelog>
  <changelog author="mlatimer@suse.com" date="1402488000">- Various updates to vmhostd.xml
  - Replace xm commands with xl commands
  - Add /sbin and /bin to &lt;path&gt;
  - Use xen_version for VirtualizationProductInfo
  vhostmd-conf.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1402660800">- Further updates to vmhostd.xml
  - Support both xen and non-xen hypervisors (kvm)
  - Document reserved characters in 'action' field
  - Revert xen_version back to major/minor/extra to maintain compatability
    with xend
  - Minor syntax and legibility cleanup
  vhostmd-conf.patch
  bnc#872736</changelog>
  <changelog author="jfehlig@suse.com" date="1415016000">- Fix Factory build
  build-fix.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1415707200">- Improve build scripts
  Replace build-fix.patch with build-improvements.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1421236800">- Build vhostmd for all architectures</changelog>
  <changelog author="jfehlig@suse.com" date="1493294400">- Add systemd service file
  add-systemd-service.patch
  bsc#1036427
- Replace build-improvements.patch with
  modernize-build-files.patch sent upstream</changelog>
  <changelog author="jengelh@inai.de" date="1493467200">- Fix RPM group for libmetrics0
- Replace old RPM shell vars in %install
- Author lists do not belong into the description
- Use macros in file list to compact paths</changelog>
  <changelog author="jfehlig@suse.com" date="1525089600">- vhostmd.service: fix typo and move Documentation from [Service]
  to [Unit] section (changed add-systemd-service.patch)
  bsc#1090769</changelog>
  <changelog author="jfehlig@suse.com" date="1529928000">- Handle SIGPIPE and reconnect to libvirtd
  c7646e32-handle-sigpipe-reconnect.patch,
  03dc9982-fix-deallocation.patch
  bsc#1098804</changelog>
</package>
<package pkgid="2e9dc2795f019fb83e0fa503886cd82429191125a47c5afa08b77715c71a67e0" name="libmetrics0" arch="x86_64">
  <version epoch="0" ver="0.4" rel="lp150.2.3.1"/>
  <changelog author="jfehlig@novell.com" date="1245412800">- vhostmd is currently only used with Xen so make it
  ExclusiveArch x86 and x86_64</changelog>
  <changelog author="jfehlig@novell.com" date="1246017600">- Add metric type 'XML'</changelog>
  <changelog author="jfehlig@novell.com" date="1246017601">- Allow larger buffer for 'xml' type</changelog>
  <changelog author="jfehlig@novell.com" date="1246276800">- Validate XML returned by 'action' for metric type 'xml'
- Do not convert metrics values internally in vhostmd.  Treat
  all metric values as strings and leave it to consumers to do
  any conversion.</changelog>
  <changelog author="dmueller@suse.de" date="1253102400">- fix devel package requires</changelog>
  <changelog author="aj@suse.de" date="1254225600">- Fix devel package requires.</changelog>
  <changelog author="jfehlig@novell.com" date="1256904000">- Release of version 0.3
  - change default disk location to /dev/shm/vhostmd0
  - open metrics disk with O_DIRECT
  - Fixes for '--with{,out}-xenstore' option
  - Allow gcc to check calls to vu_log* printf-like functions
  - Always connect to libvirt read-only
  - Add '-u user' command line option to drop root privs
  - Add '-c uri' command line option to specify libvirt connection
    URI
  - Add CONNECT substitution &lt;action&gt;s
  - vm-dump-metrics: On error, exit with status code 1</changelog>
  <changelog author="jfehlig@novell.com" date="1260360000">- Release of version 0.4
  - configure.ac: Fix C compiler detection to be compatible with
    automake
  - chdir ("/") when daemonizing self</changelog>
  <changelog author="jfehlig@novell.com" date="1269950400">- Fixed vm-dump-metrics man page
  bnc#592242
  manpage.patch
- Build vhostmd without xenstore support since it is not well
  tested on SuSE distributions.  Additionally, it can be confusing
  when used in context of KVM where xenstore does not exist.
- Strip 's' (seconds) from metrics that contain a time value
  vhostmd-conf.patch
- Remove stray newline from metric values to improve XML readability
  value-newline.patch</changelog>
  <changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jfehlig@suse.com" date="1386676800">- link libmetrics with libxml to fix Factory build</changelog>
  <changelog author="mlatimer@suse.com" date="1402488000">- Various updates to vmhostd.xml
  - Replace xm commands with xl commands
  - Add /sbin and /bin to &lt;path&gt;
  - Use xen_version for VirtualizationProductInfo
  vhostmd-conf.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1402660800">- Further updates to vmhostd.xml
  - Support both xen and non-xen hypervisors (kvm)
  - Document reserved characters in 'action' field
  - Revert xen_version back to major/minor/extra to maintain compatability
    with xend
  - Minor syntax and legibility cleanup
  vhostmd-conf.patch
  bnc#872736</changelog>
  <changelog author="jfehlig@suse.com" date="1415016000">- Fix Factory build
  build-fix.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1415707200">- Improve build scripts
  Replace build-fix.patch with build-improvements.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1421236800">- Build vhostmd for all architectures</changelog>
  <changelog author="jfehlig@suse.com" date="1493294400">- Add systemd service file
  add-systemd-service.patch
  bsc#1036427
- Replace build-improvements.patch with
  modernize-build-files.patch sent upstream</changelog>
  <changelog author="jengelh@inai.de" date="1493467200">- Fix RPM group for libmetrics0
- Replace old RPM shell vars in %install
- Author lists do not belong into the description
- Use macros in file list to compact paths</changelog>
  <changelog author="jfehlig@suse.com" date="1525089600">- vhostmd.service: fix typo and move Documentation from [Service]
  to [Unit] section (changed add-systemd-service.patch)
  bsc#1090769</changelog>
  <changelog author="jfehlig@suse.com" date="1529928000">- Handle SIGPIPE and reconnect to libvirtd
  c7646e32-handle-sigpipe-reconnect.patch,
  03dc9982-fix-deallocation.patch
  bsc#1098804</changelog>
</package>
<package pkgid="4ca0c3aca7782ea941f1478169417dc738a8c9ad37372c310d3b02777b32f259" name="libminizip1" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1353585600">- Replace %make_install by normal make install;
  the former is a constant source of agony in older or non-SUSE.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1355572800">- Add zlib-devel-static to baselibs.conf, needed for binutils testsuite
- Migrate zlib-&lt;targettype&gt; to libz1-&lt;targettype&gt;</changelog>
  <changelog author="mvyskocil@suse.com" date="1362484800">- libz1-32bit obsoletes zlib-32bit &lt;= 1.2.7 (fixes bnc#806310)</changelog>
  <changelog author="idonmez@suse.com" date="1368273600">- Update to version 1.2.8
  * Add new inflateGetDictionary() function
  * Fix bug where gzopen() immediately followed by gzclose()
    would write an empty file instead of an empty gzip stream.
  * Fix bug in gzclose() when gzwrite() runs out of memory</changelog>
  <changelog author="mvyskocil@suse.com" date="1375099200">- zlib-format.patch, backport missing sle11 feature back to openSUSE
  bnc#831880</changelog>
  <changelog author="tchvatal@suse.com" date="1411646400">- Install examples to cover another angle from bnc#890228
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1435147200">- Remove zlib-devel-static, nothing should use libz.a anyway.
- Package minizip library, everything using it should now pull
  minizip-devel and unbundle it bnc#935864</changelog>
  <changelog author="tchvatal@suse.com" date="1435665600">- Bring back zlib-devel-static. Needed by binutils</changelog>
  <changelog author="tchvatal@suse.com" date="1436788800">- Require zlib-devel in zlib-devel-static to fix previous change</changelog>
  <changelog author="jengelh@inai.de" date="1443096000">- Trim descriptions to fit target audience. Update RPM group
  classification.</changelog>
  <changelog author="tchvatal@suse.com" date="1480852800">- Include fixes for bnc#1003580 bnc#1003579 bnc#1003577 bnc#1013882:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch refreshed
  * zlib-bnc1013882.patch CVE-2016-9843</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update to version 1.2.9:
  * Improve compress() and uncompress() to support large lengths
  * Allow building zlib outside of the source directory
  * Fix bug when level 0 used with Z_HUFFMAN or Z_RLE
  * Fix bugs in creating a very large gzip header
  * Add uncompress2() function, which returns the input size used
  * Dramatically speed up deflation for level 0 (storing)
  * Add gzfread() and gzfwrite(), duplicating the interfaces of fread() and fwrite()
  * Add crc32_z() and adler32_z() functions with size_t lengths
  * Many portability improvements
- Drop patches included in upstream:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch
  * zlib-bnc1013882.patch
- Drop zlib-1.2.7-improve-longest_match-performance.patch
  * not accepted by upstream for two releases
  * rebasing no longer possible</changelog>
  <changelog author="mpluskal@suse.com" date="1483444800">- Update to version 1.2.10:
  * Avoid warnings on snprintf() return value
  * Fix bug in deflate_stored() for zero-length input
  * Fix bug in gzwrite.c that produced corrupt gzip files
  * Remove files to be installed before copying them in Makefile.in
  * Add warnings when compiling with assembler code</changelog>
  <changelog author="mpluskal@suse.com" date="1484568000">- Update to version 1.2.11:
  * Fix deflate stored bug when pulling last block from window
  * Permit immediate deflateParams changes before any deflate input</changelog>
  <changelog author="schwab@suse.de" date="1491307200">- baselibs.conf: add missing dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Add s390 performance patch (fate#314093):
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1496318400">- Add gpg signature
- Re-enable profiling</changelog>
  <changelog author="kah0922@gmail.com" date="1497268800">- Added 32bit minizip support</changelog>
  <changelog author="tchvatal@suse.com" date="1526385600">- Add patch to safeguard against negative values in uInt bsc#1071321:
  * 0001-Do-not-try-to-store-negative-values-in-unsigned-int.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1529496000">- Add patch for fate#325307 zlib speedup on power8:
  * zlib-power8-fate325307.patch</changelog>
</package>
<package pkgid="076dd00ced45e2e9380d797c0ea22da4fb9e91e3b073ee1475f755ea16a383ba" name="libminizip1-32bit" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1353585600">- Replace %make_install by normal make install;
  the former is a constant source of agony in older or non-SUSE.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1355572800">- Add zlib-devel-static to baselibs.conf, needed for binutils testsuite
- Migrate zlib-&lt;targettype&gt; to libz1-&lt;targettype&gt;</changelog>
  <changelog author="mvyskocil@suse.com" date="1362484800">- libz1-32bit obsoletes zlib-32bit &lt;= 1.2.7 (fixes bnc#806310)</changelog>
  <changelog author="idonmez@suse.com" date="1368273600">- Update to version 1.2.8
  * Add new inflateGetDictionary() function
  * Fix bug where gzopen() immediately followed by gzclose()
    would write an empty file instead of an empty gzip stream.
  * Fix bug in gzclose() when gzwrite() runs out of memory</changelog>
  <changelog author="mvyskocil@suse.com" date="1375099200">- zlib-format.patch, backport missing sle11 feature back to openSUSE
  bnc#831880</changelog>
  <changelog author="tchvatal@suse.com" date="1411646400">- Install examples to cover another angle from bnc#890228
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1435147200">- Remove zlib-devel-static, nothing should use libz.a anyway.
- Package minizip library, everything using it should now pull
  minizip-devel and unbundle it bnc#935864</changelog>
  <changelog author="tchvatal@suse.com" date="1435665600">- Bring back zlib-devel-static. Needed by binutils</changelog>
  <changelog author="tchvatal@suse.com" date="1436788800">- Require zlib-devel in zlib-devel-static to fix previous change</changelog>
  <changelog author="jengelh@inai.de" date="1443096000">- Trim descriptions to fit target audience. Update RPM group
  classification.</changelog>
  <changelog author="tchvatal@suse.com" date="1480852800">- Include fixes for bnc#1003580 bnc#1003579 bnc#1003577 bnc#1013882:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch refreshed
  * zlib-bnc1013882.patch CVE-2016-9843</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update to version 1.2.9:
  * Improve compress() and uncompress() to support large lengths
  * Allow building zlib outside of the source directory
  * Fix bug when level 0 used with Z_HUFFMAN or Z_RLE
  * Fix bugs in creating a very large gzip header
  * Add uncompress2() function, which returns the input size used
  * Dramatically speed up deflation for level 0 (storing)
  * Add gzfread() and gzfwrite(), duplicating the interfaces of fread() and fwrite()
  * Add crc32_z() and adler32_z() functions with size_t lengths
  * Many portability improvements
- Drop patches included in upstream:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch
  * zlib-bnc1013882.patch
- Drop zlib-1.2.7-improve-longest_match-performance.patch
  * not accepted by upstream for two releases
  * rebasing no longer possible</changelog>
  <changelog author="mpluskal@suse.com" date="1483444800">- Update to version 1.2.10:
  * Avoid warnings on snprintf() return value
  * Fix bug in deflate_stored() for zero-length input
  * Fix bug in gzwrite.c that produced corrupt gzip files
  * Remove files to be installed before copying them in Makefile.in
  * Add warnings when compiling with assembler code</changelog>
  <changelog author="mpluskal@suse.com" date="1484568000">- Update to version 1.2.11:
  * Fix deflate stored bug when pulling last block from window
  * Permit immediate deflateParams changes before any deflate input</changelog>
  <changelog author="schwab@suse.de" date="1491307200">- baselibs.conf: add missing dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Add s390 performance patch (fate#314093):
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1496318400">- Add gpg signature
- Re-enable profiling</changelog>
  <changelog author="kah0922@gmail.com" date="1497268800">- Added 32bit minizip support</changelog>
  <changelog author="tchvatal@suse.com" date="1526385600">- Add patch to safeguard against negative values in uInt bsc#1071321:
  * 0001-Do-not-try-to-store-negative-values-in-unsigned-int.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1529496000">- Add patch for fate#325307 zlib speedup on power8:
  * zlib-power8-fate325307.patch</changelog>
</package>
<package pkgid="be94cadebebc996cdd8c68ec1ce90f4f6509b31bfb1cb7643c77fcf43dab5e86" name="libmodplug-devel" arch="x86_64">
  <version epoch="0" ver="0.3.9" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
</package>
<package pkgid="8b8db825bcde24afcebb1647d075e2b14007fbb8246b04f3aeb88679d34f7b3d" name="libmodplug1" arch="x86_64">
  <version epoch="0" ver="0.3.9" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
</package>
<package pkgid="091a087a71ab0552e8249aa5f653f921f06eb4de695bf6ef5bb4da2326510aa2" name="libmodplug1-32bit" arch="x86_64">
  <version epoch="0" ver="0.3.9" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
</package>
<package pkgid="d2f9f7109c96a8d2ac958a99a46fb3db16de84892585afb928983e44f478a2a3" name="libmount-devel" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="c18859c54d33843e847b437079d8fb55250f9261a16abb802a562ecffbd11208" name="libmount-devel" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="be5e5ef689462a3ab18c6cf01e62091a23b5d82de9f387d2cf3b6fc32173c7a1" name="libmount-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="f95b21cbb844bd5bf5411e41469ec280bc8b8dc33bd84f8301b544063c6c2cba" name="libmount-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="ac5d3deb96ef41b8b40d2079a5cf8ae47ae3fb148002004a18d37e2a4bea8dba" name="libmount-devel-static" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="574e8f41f939622627b82365659a12cdec347666631fb5f0fe7fa47d49721190" name="libmount-devel-static" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="48efe2334de1477569eca64177ab5db555cfbfdf3a203620391a222ba934e311" name="libmount1" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="497261497672b8f094f434c0e4e6bf2b51e2f4a23209b3acba8b57c7f97f0864" name="libmount1" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="8d051e9aff3791199b8adffe38ad8e4c3f1b758b4f4190f888dff71610985476" name="libmount1-32bit" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="2bbb1c173a614109fa392e41349808d34174c6ac222c03809feae3badd4c3c89" name="libmount1-32bit" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="a15393ab9982ab478738a3e953271557e10c5bdd7ebd5845e6735f01de0cea7c" name="libmozjs-52" arch="x86_64">
  <version epoch="0" ver="52.6.0" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1502798400">- initial mozjs52 package
  (roughly based on previous mozjs* packages)</changelog>
  <changelog author="wr@rosenauer.org" date="1503921600">- update to 52.3.0
- added bmo1176787.patch to disable MOZ_GLUE_IN_PROGRAM
- added bmo1379539.patch to remove NSPR dependency while
  - -enable-posix-nspr-emulation is used</changelog>
  <changelog author="wr@rosenauer.org" date="1504008000">- try to use ION everywhere
- removed obsolete NSPR build dependency</changelog>
  <changelog author="cgrobertson@suse.com" date="1507291200">- Added additional compiler flags on the condition
  of building for ppc64le using gcc7 or newer.
  (see bmo#1399248)</changelog>
  <changelog author="jones_ld@protonmail.com" date="1511006400">- Enable Internationalization required by GJS
- Disable running tests due to broken toLocaleDateString_timeZone test</changelog>
  <changelog author="cgrobertson@suse.com" date="1512129600">- Added support for ICU and data file.
- Added mozilla-s390-bigendian.patch to enable bigendian support
  for s390 machines.
- Added xulrunner-24.0-s390-inlines.patch for s390 builds.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517227200">- Update to 52.6.0
- Drop fix-64bit-archs.patch and bmo1379539.patch, fixed upstream
- Update Source url.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519905600">- Actually remove bundled zlib and use system zlib. Avoids potential
  problems when trying to use system zlib while mozjs52-devel is
  installed (two zlib.h instances with conflicting definitions).
  Likewise fix for boo#1082720.
- Drop unused zip BuildRequires.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1526990400">- Fix armv6 build by fixing armv6 detection:
  * fix_armv6_build.patch</changelog>
  <changelog author="schwab@suse.de" date="1527681600">- No JIT on ppc, don't run jit test</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1527681601">- for ppc64 (BE) use same patches as s390x
  (mozilla-s390-bigendian.patch xulrunner-24.0-s390-inlines.patch)
- This change is sufficient to solve boo#1093033</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1529323200">- update _constraints file for ppc64/ppc64le to avoid
  "Out of memory" build failure on some PowerPC workers.</changelog>
  <changelog author="msuchanek@suse.com" date="1532433600">- Remove trailing backslash (https://build.suse.de/request/show/168818)</changelog>
</package>
<package pkgid="f9cd9b81708dfb5dab1b4fb7ddca79e4a4c9d5d9b92887c07ad5aafda83b39d5" name="libmwaw" arch="src">
  <version epoch="0" ver="0.3.14" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1383307200">- Drop doc conditional and use verbose build.</changelog>
  <changelog author="tchvatal@suse.com" date="1386072000">- Format with spec-cleaner</changelog>
  <changelog author="fridrich.strba@suse.com" date="1387281600">- Upgrade to upstream 0.2.0
  - ABI change
  - Several improvements in handling of embedded graphics</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1390046400">- build with -fvisibility-inlines-hidden, around 2800
  less in the export symbol table.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651200">- Cleanup with spec-cleaner and noarch documenation.</changelog>
  <changelog author="tchvatal@suse.com" date="1402488000">- Version bump to 0.3.1:
  * Switch over to librevenge framework
- Add patch libmwaw-0.3.1-stream.patch to fix streams</changelog>
  <changelog author="fstrba@suse.com" date="1404216000">- Fix patch libmwaw-0.3.1-stream.patch to allow buiding with older
  version of autotools.</changelog>
  <changelog author="tchvatal@suse.com" date="1420200000">- Version bump to 0.3.4:
  * Various tweaks&amp;fixes on the 0.3 series found by fuzzy testing/etc
- Removed patch libmwaw-0.3.1-stream.patch as we should not bother
  with old autotools</changelog>
  <changelog author="tchvatal@suse.com" date="1434196800">- Version bump to 0.3.5
  * Various small fixes on 0.3 series, nothing big woth mention</changelog>
  <changelog author="tchvatal@suse.com" date="1440763200">- Version bump to 0.3.6:
  - Added a minimal parser for ApplePict v1.v2, ie. no clipping, does not
    take in account the copy mode: srcCopy, srcOr, ...
  - Extended the --with-docs configure option to allow to build doc only
    for the API classes: --with-docs=no|api|full .
  - Added a parser for MacDraft v4-v5 documents.
  - RagTime v5-v6 parser: try to retrieve the main layouts and the
    picture/shape/textbox, ie. now, it generates result but it is
    still very imcomplete...
  - MWAW{Graphic,Presentation,Text}Listener: corrected a problem in openGroup
    which may create to incorrect document.
  - Created an MWAWEmbeddedObject class to store a picture with various
    representations.
  - MWAW*Listener: renamed insertPicture to insertShape, added a function to
    insert a texbox in a MWAWGraphicShape (which only insert a basic textbox).
  - Fixed many crashes and hangs when importing broken files, found with the
    help of american-fuzzy-lop.
  - And several other minor fixes and improvements.</changelog>
  <changelog author="tchvatal@suse.com" date="1450699200">- Version update to 0.3.7:
  - RagTime v5-v6 parser: try to retrieve the embedded spreadsheets
    + begin to understand the hierarchical structures which store
    a chart (but not the meaning of each field),
  - ClarisWorks/AppleWorks: find a new structure in the file's header
    (which could prevent to convert some database's file),
  - BeagleWorks/GreatWorks/Word Perfect Works: retrieve the picture's
    field in a database
  - all: improve a little the methods which create spreadsheets,
  - all: make some constructors explicit.
  - add a parser for Style documents(at least v1.6 and v1.9)
  - add file signatures for FullPaint documents which have the same format as
    MacPaint..
  - add a parser for Pixel Paint documents</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 0.3.8:
  * Various clang and -W* fixes all around
  * Bunch of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1480766400">- Version update to 0.3.9:
  * Various warning and clang fixes all around</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1486641600">- Version update to 0.3.10:
  * Various fixes for importing Mac powerpoint v4</changelog>
  <changelog author="tchvatal@suse.com" date="1494849600">- Update to 0.3.11:
  * Various small updates</changelog>
  <changelog author="tchvatal@suse.com" date="1498737600">- Add patch CVE-2017-9433.patch fixing bsc#1042828 CVE-2017-9433</changelog>
  <changelog author="tchvatal@suse.com" date="1511956800">- Version update to 0.3.13:
  * Remove merged CVE-2017-9433.patch
  * Many fuzzing fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1512475200">- Add patch to build with old gcc:
  * libmwaw-0.3.13-buildfix.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 0.3.14:
  * Support MS Multiplan 1.1 files
- Remove merged patch libmwaw-0.3.13-buildfix.patch</changelog>
</package>
<package pkgid="68a18adb93062971c1a80b38e1e5f870dc8e5523c09fcad7cecc3fa079428e8c" name="libmwaw-0_3-3" arch="x86_64">
  <version epoch="0" ver="0.3.14" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1383307200">- Drop doc conditional and use verbose build.</changelog>
  <changelog author="tchvatal@suse.com" date="1386072000">- Format with spec-cleaner</changelog>
  <changelog author="fridrich.strba@suse.com" date="1387281600">- Upgrade to upstream 0.2.0
  - ABI change
  - Several improvements in handling of embedded graphics</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1390046400">- build with -fvisibility-inlines-hidden, around 2800
  less in the export symbol table.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651200">- Cleanup with spec-cleaner and noarch documenation.</changelog>
  <changelog author="tchvatal@suse.com" date="1402488000">- Version bump to 0.3.1:
  * Switch over to librevenge framework
- Add patch libmwaw-0.3.1-stream.patch to fix streams</changelog>
  <changelog author="fstrba@suse.com" date="1404216000">- Fix patch libmwaw-0.3.1-stream.patch to allow buiding with older
  version of autotools.</changelog>
  <changelog author="tchvatal@suse.com" date="1420200000">- Version bump to 0.3.4:
  * Various tweaks&amp;fixes on the 0.3 series found by fuzzy testing/etc
- Removed patch libmwaw-0.3.1-stream.patch as we should not bother
  with old autotools</changelog>
  <changelog author="tchvatal@suse.com" date="1434196800">- Version bump to 0.3.5
  * Various small fixes on 0.3 series, nothing big woth mention</changelog>
  <changelog author="tchvatal@suse.com" date="1440763200">- Version bump to 0.3.6:
  - Added a minimal parser for ApplePict v1.v2, ie. no clipping, does not
    take in account the copy mode: srcCopy, srcOr, ...
  - Extended the --with-docs configure option to allow to build doc only
    for the API classes: --with-docs=no|api|full .
  - Added a parser for MacDraft v4-v5 documents.
  - RagTime v5-v6 parser: try to retrieve the main layouts and the
    picture/shape/textbox, ie. now, it generates result but it is
    still very imcomplete...
  - MWAW{Graphic,Presentation,Text}Listener: corrected a problem in openGroup
    which may create to incorrect document.
  - Created an MWAWEmbeddedObject class to store a picture with various
    representations.
  - MWAW*Listener: renamed insertPicture to insertShape, added a function to
    insert a texbox in a MWAWGraphicShape (which only insert a basic textbox).
  - Fixed many crashes and hangs when importing broken files, found with the
    help of american-fuzzy-lop.
  - And several other minor fixes and improvements.</changelog>
  <changelog author="tchvatal@suse.com" date="1450699200">- Version update to 0.3.7:
  - RagTime v5-v6 parser: try to retrieve the embedded spreadsheets
    + begin to understand the hierarchical structures which store
    a chart (but not the meaning of each field),
  - ClarisWorks/AppleWorks: find a new structure in the file's header
    (which could prevent to convert some database's file),
  - BeagleWorks/GreatWorks/Word Perfect Works: retrieve the picture's
    field in a database
  - all: improve a little the methods which create spreadsheets,
  - all: make some constructors explicit.
  - add a parser for Style documents(at least v1.6 and v1.9)
  - add file signatures for FullPaint documents which have the same format as
    MacPaint..
  - add a parser for Pixel Paint documents</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 0.3.8:
  * Various clang and -W* fixes all around
  * Bunch of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1480766400">- Version update to 0.3.9:
  * Various warning and clang fixes all around</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1486641600">- Version update to 0.3.10:
  * Various fixes for importing Mac powerpoint v4</changelog>
  <changelog author="tchvatal@suse.com" date="1494849600">- Update to 0.3.11:
  * Various small updates</changelog>
  <changelog author="tchvatal@suse.com" date="1498737600">- Add patch CVE-2017-9433.patch fixing bsc#1042828 CVE-2017-9433</changelog>
  <changelog author="tchvatal@suse.com" date="1511956800">- Version update to 0.3.13:
  * Remove merged CVE-2017-9433.patch
  * Many fuzzing fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1512475200">- Add patch to build with old gcc:
  * libmwaw-0.3.13-buildfix.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 0.3.14:
  * Support MS Multiplan 1.1 files
- Remove merged patch libmwaw-0.3.13-buildfix.patch</changelog>
</package>
<package pkgid="e9168a744656a9be606a634aadf30ef2ff810eec4bb3056cae3d91c667b01b93" name="libmwaw-devel" arch="x86_64">
  <version epoch="0" ver="0.3.14" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1383307200">- Drop doc conditional and use verbose build.</changelog>
  <changelog author="tchvatal@suse.com" date="1386072000">- Format with spec-cleaner</changelog>
  <changelog author="fridrich.strba@suse.com" date="1387281600">- Upgrade to upstream 0.2.0
  - ABI change
  - Several improvements in handling of embedded graphics</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1390046400">- build with -fvisibility-inlines-hidden, around 2800
  less in the export symbol table.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651200">- Cleanup with spec-cleaner and noarch documenation.</changelog>
  <changelog author="tchvatal@suse.com" date="1402488000">- Version bump to 0.3.1:
  * Switch over to librevenge framework
- Add patch libmwaw-0.3.1-stream.patch to fix streams</changelog>
  <changelog author="fstrba@suse.com" date="1404216000">- Fix patch libmwaw-0.3.1-stream.patch to allow buiding with older
  version of autotools.</changelog>
  <changelog author="tchvatal@suse.com" date="1420200000">- Version bump to 0.3.4:
  * Various tweaks&amp;fixes on the 0.3 series found by fuzzy testing/etc
- Removed patch libmwaw-0.3.1-stream.patch as we should not bother
  with old autotools</changelog>
  <changelog author="tchvatal@suse.com" date="1434196800">- Version bump to 0.3.5
  * Various small fixes on 0.3 series, nothing big woth mention</changelog>
  <changelog author="tchvatal@suse.com" date="1440763200">- Version bump to 0.3.6:
  - Added a minimal parser for ApplePict v1.v2, ie. no clipping, does not
    take in account the copy mode: srcCopy, srcOr, ...
  - Extended the --with-docs configure option to allow to build doc only
    for the API classes: --with-docs=no|api|full .
  - Added a parser for MacDraft v4-v5 documents.
  - RagTime v5-v6 parser: try to retrieve the main layouts and the
    picture/shape/textbox, ie. now, it generates result but it is
    still very imcomplete...
  - MWAW{Graphic,Presentation,Text}Listener: corrected a problem in openGroup
    which may create to incorrect document.
  - Created an MWAWEmbeddedObject class to store a picture with various
    representations.
  - MWAW*Listener: renamed insertPicture to insertShape, added a function to
    insert a texbox in a MWAWGraphicShape (which only insert a basic textbox).
  - Fixed many crashes and hangs when importing broken files, found with the
    help of american-fuzzy-lop.
  - And several other minor fixes and improvements.</changelog>
  <changelog author="tchvatal@suse.com" date="1450699200">- Version update to 0.3.7:
  - RagTime v5-v6 parser: try to retrieve the embedded spreadsheets
    + begin to understand the hierarchical structures which store
    a chart (but not the meaning of each field),
  - ClarisWorks/AppleWorks: find a new structure in the file's header
    (which could prevent to convert some database's file),
  - BeagleWorks/GreatWorks/Word Perfect Works: retrieve the picture's
    field in a database
  - all: improve a little the methods which create spreadsheets,
  - all: make some constructors explicit.
  - add a parser for Style documents(at least v1.6 and v1.9)
  - add file signatures for FullPaint documents which have the same format as
    MacPaint..
  - add a parser for Pixel Paint documents</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 0.3.8:
  * Various clang and -W* fixes all around
  * Bunch of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1480766400">- Version update to 0.3.9:
  * Various warning and clang fixes all around</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1486641600">- Version update to 0.3.10:
  * Various fixes for importing Mac powerpoint v4</changelog>
  <changelog author="tchvatal@suse.com" date="1494849600">- Update to 0.3.11:
  * Various small updates</changelog>
  <changelog author="tchvatal@suse.com" date="1498737600">- Add patch CVE-2017-9433.patch fixing bsc#1042828 CVE-2017-9433</changelog>
  <changelog author="tchvatal@suse.com" date="1511956800">- Version update to 0.3.13:
  * Remove merged CVE-2017-9433.patch
  * Many fuzzing fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1512475200">- Add patch to build with old gcc:
  * libmwaw-0.3.13-buildfix.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 0.3.14:
  * Support MS Multiplan 1.1 files
- Remove merged patch libmwaw-0.3.13-buildfix.patch</changelog>
</package>
<package pkgid="9d6f6e2263ea531682d9ca8f0dc0ca2d059fe332042e8751fc016620cf794c42" name="libmwaw-devel-doc" arch="noarch">
  <version epoch="0" ver="0.3.14" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1383307200">- Drop doc conditional and use verbose build.</changelog>
  <changelog author="tchvatal@suse.com" date="1386072000">- Format with spec-cleaner</changelog>
  <changelog author="fridrich.strba@suse.com" date="1387281600">- Upgrade to upstream 0.2.0
  - ABI change
  - Several improvements in handling of embedded graphics</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1390046400">- build with -fvisibility-inlines-hidden, around 2800
  less in the export symbol table.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651200">- Cleanup with spec-cleaner and noarch documenation.</changelog>
  <changelog author="tchvatal@suse.com" date="1402488000">- Version bump to 0.3.1:
  * Switch over to librevenge framework
- Add patch libmwaw-0.3.1-stream.patch to fix streams</changelog>
  <changelog author="fstrba@suse.com" date="1404216000">- Fix patch libmwaw-0.3.1-stream.patch to allow buiding with older
  version of autotools.</changelog>
  <changelog author="tchvatal@suse.com" date="1420200000">- Version bump to 0.3.4:
  * Various tweaks&amp;fixes on the 0.3 series found by fuzzy testing/etc
- Removed patch libmwaw-0.3.1-stream.patch as we should not bother
  with old autotools</changelog>
  <changelog author="tchvatal@suse.com" date="1434196800">- Version bump to 0.3.5
  * Various small fixes on 0.3 series, nothing big woth mention</changelog>
  <changelog author="tchvatal@suse.com" date="1440763200">- Version bump to 0.3.6:
  - Added a minimal parser for ApplePict v1.v2, ie. no clipping, does not
    take in account the copy mode: srcCopy, srcOr, ...
  - Extended the --with-docs configure option to allow to build doc only
    for the API classes: --with-docs=no|api|full .
  - Added a parser for MacDraft v4-v5 documents.
  - RagTime v5-v6 parser: try to retrieve the main layouts and the
    picture/shape/textbox, ie. now, it generates result but it is
    still very imcomplete...
  - MWAW{Graphic,Presentation,Text}Listener: corrected a problem in openGroup
    which may create to incorrect document.
  - Created an MWAWEmbeddedObject class to store a picture with various
    representations.
  - MWAW*Listener: renamed insertPicture to insertShape, added a function to
    insert a texbox in a MWAWGraphicShape (which only insert a basic textbox).
  - Fixed many crashes and hangs when importing broken files, found with the
    help of american-fuzzy-lop.
  - And several other minor fixes and improvements.</changelog>
  <changelog author="tchvatal@suse.com" date="1450699200">- Version update to 0.3.7:
  - RagTime v5-v6 parser: try to retrieve the embedded spreadsheets
    + begin to understand the hierarchical structures which store
    a chart (but not the meaning of each field),
  - ClarisWorks/AppleWorks: find a new structure in the file's header
    (which could prevent to convert some database's file),
  - BeagleWorks/GreatWorks/Word Perfect Works: retrieve the picture's
    field in a database
  - all: improve a little the methods which create spreadsheets,
  - all: make some constructors explicit.
  - add a parser for Style documents(at least v1.6 and v1.9)
  - add file signatures for FullPaint documents which have the same format as
    MacPaint..
  - add a parser for Pixel Paint documents</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 0.3.8:
  * Various clang and -W* fixes all around
  * Bunch of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1480766400">- Version update to 0.3.9:
  * Various warning and clang fixes all around</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1486641600">- Version update to 0.3.10:
  * Various fixes for importing Mac powerpoint v4</changelog>
  <changelog author="tchvatal@suse.com" date="1494849600">- Update to 0.3.11:
  * Various small updates</changelog>
  <changelog author="tchvatal@suse.com" date="1498737600">- Add patch CVE-2017-9433.patch fixing bsc#1042828 CVE-2017-9433</changelog>
  <changelog author="tchvatal@suse.com" date="1511956800">- Version update to 0.3.13:
  * Remove merged CVE-2017-9433.patch
  * Many fuzzing fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1512475200">- Add patch to build with old gcc:
  * libmwaw-0.3.13-buildfix.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 0.3.14:
  * Support MS Multiplan 1.1 files
- Remove merged patch libmwaw-0.3.13-buildfix.patch</changelog>
</package>
<package pkgid="e1ba356ef6bce32954adff56baa5c59d1f1927e3e9f28860ebea2ad846ec42e5" name="libmwaw-tools" arch="x86_64">
  <version epoch="0" ver="0.3.14" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1383307200">- Drop doc conditional and use verbose build.</changelog>
  <changelog author="tchvatal@suse.com" date="1386072000">- Format with spec-cleaner</changelog>
  <changelog author="fridrich.strba@suse.com" date="1387281600">- Upgrade to upstream 0.2.0
  - ABI change
  - Several improvements in handling of embedded graphics</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1390046400">- build with -fvisibility-inlines-hidden, around 2800
  less in the export symbol table.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651200">- Cleanup with spec-cleaner and noarch documenation.</changelog>
  <changelog author="tchvatal@suse.com" date="1402488000">- Version bump to 0.3.1:
  * Switch over to librevenge framework
- Add patch libmwaw-0.3.1-stream.patch to fix streams</changelog>
  <changelog author="fstrba@suse.com" date="1404216000">- Fix patch libmwaw-0.3.1-stream.patch to allow buiding with older
  version of autotools.</changelog>
  <changelog author="tchvatal@suse.com" date="1420200000">- Version bump to 0.3.4:
  * Various tweaks&amp;fixes on the 0.3 series found by fuzzy testing/etc
- Removed patch libmwaw-0.3.1-stream.patch as we should not bother
  with old autotools</changelog>
  <changelog author="tchvatal@suse.com" date="1434196800">- Version bump to 0.3.5
  * Various small fixes on 0.3 series, nothing big woth mention</changelog>
  <changelog author="tchvatal@suse.com" date="1440763200">- Version bump to 0.3.6:
  - Added a minimal parser for ApplePict v1.v2, ie. no clipping, does not
    take in account the copy mode: srcCopy, srcOr, ...
  - Extended the --with-docs configure option to allow to build doc only
    for the API classes: --with-docs=no|api|full .
  - Added a parser for MacDraft v4-v5 documents.
  - RagTime v5-v6 parser: try to retrieve the main layouts and the
    picture/shape/textbox, ie. now, it generates result but it is
    still very imcomplete...
  - MWAW{Graphic,Presentation,Text}Listener: corrected a problem in openGroup
    which may create to incorrect document.
  - Created an MWAWEmbeddedObject class to store a picture with various
    representations.
  - MWAW*Listener: renamed insertPicture to insertShape, added a function to
    insert a texbox in a MWAWGraphicShape (which only insert a basic textbox).
  - Fixed many crashes and hangs when importing broken files, found with the
    help of american-fuzzy-lop.
  - And several other minor fixes and improvements.</changelog>
  <changelog author="tchvatal@suse.com" date="1450699200">- Version update to 0.3.7:
  - RagTime v5-v6 parser: try to retrieve the embedded spreadsheets
    + begin to understand the hierarchical structures which store
    a chart (but not the meaning of each field),
  - ClarisWorks/AppleWorks: find a new structure in the file's header
    (which could prevent to convert some database's file),
  - BeagleWorks/GreatWorks/Word Perfect Works: retrieve the picture's
    field in a database
  - all: improve a little the methods which create spreadsheets,
  - all: make some constructors explicit.
  - add a parser for Style documents(at least v1.6 and v1.9)
  - add file signatures for FullPaint documents which have the same format as
    MacPaint..
  - add a parser for Pixel Paint documents</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 0.3.8:
  * Various clang and -W* fixes all around
  * Bunch of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1480766400">- Version update to 0.3.9:
  * Various warning and clang fixes all around</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1486641600">- Version update to 0.3.10:
  * Various fixes for importing Mac powerpoint v4</changelog>
  <changelog author="tchvatal@suse.com" date="1494849600">- Update to 0.3.11:
  * Various small updates</changelog>
  <changelog author="tchvatal@suse.com" date="1498737600">- Add patch CVE-2017-9433.patch fixing bsc#1042828 CVE-2017-9433</changelog>
  <changelog author="tchvatal@suse.com" date="1511956800">- Version update to 0.3.13:
  * Remove merged CVE-2017-9433.patch
  * Many fuzzing fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1512475200">- Add patch to build with old gcc:
  * libmwaw-0.3.13-buildfix.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 0.3.14:
  * Support MS Multiplan 1.1 files
- Remove merged patch libmwaw-0.3.13-buildfix.patch</changelog>
</package>
<package pkgid="ce40bfdd2cd02a0ff03e7ecc2ac86c24e822ee1d78fc256ec05c89d369f53bea" name="libmysqld-devel" arch="x86_64">
  <version epoch="0" ver="10.2.15" rel="lp150.2.3.2"/>
  <changelog author="kstreitova@suse.com" date="1499688000">- update to MariaDB 10.1.25 GA
  * notable changes
  * MariaDB can no longer be compiled with OpenSSL version 0.9.8
    and below. The last 0.9.8 release was in December 2015, it is
    out of support and is no longer getting security fixes.
  * MariaDB Backup is now beta
  * release notes and changelog:
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-release-notes
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-changelog
  * refresh mariadb-10.1.12-fortify-and-O.patch
  * remove mariadb-10.1.22-xtradb_null_checks.patch (MDEV-12358),
    a fix was merged upstream
  * update file lists for new man-pages and tools
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream</changelog>
  <changelog author="vcizek@suse.com" date="1505822400">- Explicitly require libopenssl-1_0_0-devel, to successfully build
  once we switch openssl to 1.1 (bsc#1042632)</changelog>
  <changelog author="bwiedemann@suse.com" date="1509019200">- Drop INFO_BIN from package because it is not needed
  and differs for every build (boo#1047218)</changelog>
  <changelog author="vcizek@suse.com" date="1509451200">- Also Require: libopenssl-1_0_0-devel from the libmysqlclient-devel package</changelog>
  <changelog author="kstreitova@suse.com" date="1509451201">- update to 10.2.10 GA
  * release notes and changelogs
    https://downloads.mariadb.org/mariadb/+releases/
  * fixes for the following security vulnerabilities
  * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365
  * 10.2.8:  CVE-2017-3636, CVE-2017-3641, CVE-2017-3653,
    CVE-2017-10320, CVE-2017-10365, CVE-2017-10379,
    CVE-2017-10384, CVE-2017-10286, CVE-2017-3257
  * 10.2.6:  CVE-2017-3308, CVE-2017-3309, CVE-2017-3453,
    CVE-2017-3456, CVE-2017-3464
  * 10.2.5:  CVE-2017-3313, CVE-2017-3302
  * [bsc#1042632], [bsc#1043328], [bsc#1019948], [fate#323738]
- refresh and rename the following patches:
  * mariadb-10.1.4-group.patch to
    mariadb-10.2.3-group.patch
  * mariadb-10.1.16-systemd-cmake.patch to
    mariadb-10.2.8-systemd-cmake.patch
  * mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
  * mariadb-10.1.12-fortify-and-O.patch to
    mariadb-10.2.4-fortify-and-O.patch
  * mysql-community-server-5.1.46-logrotate.patch to
    mariadb-10.2.4-logrotate.patch
- add mariadb-10.2.10.tar.gz.sig signature and mariadb.keyring files
- start building without client library part, use
  mariadb-connector-c for getting libmariadb libraries. Remove
  libmysclient* packages
- remove baselibs.conf because we no longer build client libraries
  here
- update %{soname} to 19 (libmysqld soname)
- change '=' to '&gt;=' in  Requires:mariadb-errormessages for
  libmysqld%{soname}. Versioned libraries shouldn't require regular
  packages with '='. It also causes problems during update (Problem:
  libmysqld18-10.1.25-3.1.x86_64 requires mariadb-errormessages = 10.1.25,
  but this requirement cannot be provided).
  Also add "Provides: mariadb-errormessages = 10.1.25" for errormessages
  subpackage that solves this problem for the current update.
- pack new files, remove mysql specific files
- remove README.SUSE as it was outdated
- package cleaning
  * run spec-cleaner
  * renumber sources
  * reorganize subpackages order and update summaries, descriptions
    and groups
  * tweak and add some comments to the specfile
  * remove warning about mysql-packaging repository that is no longer
    used for this package
  * remove checks whether we build mysql or mariadb (we build mariadb
    only)
- add galera subpackage
  * add missing "Requires:" (lsof, net-tools, rsync, socat,
    xtrabackup) for proper wsrep scripts functionality
  * add mariadb-10.2.9-galera_cnf.patch that enhances galera.cnf
    configuration file (add wsrep_on=OFF and set the location
    of the wsrep library)
  * rename README-wsrep to README.wsrep so it corresponds with the
    other README names
  * move galera_new_cluster, galera_recovery,
    use_galera_new_cluster.conf, wsrep_* scripts to the galera
    subpackage
- remove the following macros definitions:
  * %{_tmpfilesdir} - it's been defined in systemd macros since
    openSUSE 13.2
  * %{preferred} - we no longer need to distinguish between preferred
    and not preferred version (we build mariadb only)
  * %{with_mandatory_lz4} - mysql specific
  * %{build_extras}, %{pretty_name}, %{build_readline},
    %{builtin_plugins} and {libname} - they are no longer needed
- add the following macros
  * %{run_testsuite} macro that controls the run of the regression
    testsuite
  * %{ignore_testsuite_result} macro - when set to 1 it ignores
    results from the regression testsuite (debug purposes)
  * %{with_mroonga} macro (enable mroonga build for x86_64 archs only)
- rename %{with_jemalloc} to %{with_tokudb} and enable tokudb for
  x86_64 architectures for openSUSE and SLE15 [fate#323280]. Don't
  enable it for SLE12 (missing jemalloc dependency)
- add the following BuildRequires:
  * unixODBC-devel to allow ODBC support for Connect engine [bsc#1039034]
  * krb5-devel to build auth_gssapi.so plugin
  * libarchive-devel
  * use libboost_headers-devel instead of boost-devel for TW. Boost
    package has been split up and will migrate to using multibuild.
    This results in packages that unnecessarily build require
    boost-devel to cause major bottlenecks [bsc#1062583]
- do not use "BuildRequires: lzo-devel" for i586 and arm because
  it makes build fail
- add the following Requires:
  * hostname - as mariadb_install_db depends on this tool [bsc#1060110]
  * libaio-devel for libmysqld-devel because libmysqld depends
    on libaio
- tweak build options:
  * remove "DWITH_ASAN=OFF" - this option was added because of mysql
    and it's no longer needed
  * switch from "-DWITH_JEMALLOC=auto" to "-DWITH_JEMALLOC=system"
  * use "DCMAKE_SKIP_INSTALL_RPATH" - this allows to link with -rpath
    during build and fixes quite a few test suite failures. When
    installing the file -rpath is still disabled, so this should
    not have any effect on the installed binaries
  * add "-DWITH_LIBARCHIVE=ON" and "-DWITH_MARIABACKUP=ON"
  * remove -DWITH_BOOST=../boost/ as we use system boost now
- enable OQGRAPH to build (openSUSE only, SLE is missing Judy
  requirement)
- disable Cassandra storage engine build as it's no longer actively
  being developed (See MDEV-4695) [bsc#1055165]
  * Remove "BuildRequires: libthrift-devel" and %{with_cassandra}
    macros that are no longer needed now
- disable make test (Connector/C unit tests) as it requires a
  running server. These tests are part of mysql-test-run
  now (MDEV-12470)
- add suse_skipped_tests.list - the list of the tests that we want
  to skip (they fail correctly or the fix is in progress)
  * adjust mysql-test-run options to skip tests listed there
    [bsc#1041891]
- remove mytop utility that is packaged separately
- remove *.jar files from mysql-test
- remove python scripts remains from tokudb upstream
- remove generating of the MySQL NDB Cluster filelists
- remove removing of manpages for MySQL Carrier Grade Edition
- provide a symlink for the my_safe_process executable that was
  moved from its location to bindir
- update filename in /var/adm/update-messages to match
  documentation and build-compare pattern
- README is now README.md
- fix "file listed twice" build error</changelog>
  <changelog author="vcizek@suse.com" date="1511956800">- Disable openssl compatibility checking
  * the check uses CRYPTO_set_mem_functions() to set debugging
    memory allocation function. The setting only succeeds if no allocation
    was done before. Our fips self-tests, which are run from the library
    constructor, however, do allocate memory, so the subsequent call to
    CRYPTO_set_mem_functions causes the compatibility check to fail
  * add mariadb-10.2.10-disable_openssl_compatibility_check.patch</changelog>
  <changelog author="rhafer@suse.de" date="1511956801">- Added mariadb-10.2.10-wsrep_sst_common.patch (bsc#1069401).
  Upstream bug: https://jira.mariadb.org/browse/MDEV-14256</changelog>
  <changelog author="kstreitova@suse.com" date="1512043200">- update to 10.2.11 GA
  * release notes and changelog:
  * https://mariadb.com/kb/en/library/mariadb-10211-release-notes/
  * https://mariadb.com/kb/en/library/mariadb-10211-changelog/
- pack additional mroonga/groonga files
- change default charset to utf8mb4 for full Unicode support
  [fate#324329]
- remove mariadb-10.2.10-wsrep_sst_common.patch as it's no longer
  needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Do not manually delete
  %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release}-something:
  The file is listed as ghost and thus properly owned by the
  package.
- Use %tmpfiles_create which can cope with transactional updates.</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
</package>
<package pkgid="1109f51e7553927ebe9aa3568c0835388ef6441cbed40d34aa9f42423d9da4b5" name="libmysqld-devel" arch="x86_64">
  <version epoch="0" ver="10.2.15" rel="lp150.2.6.1"/>
  <changelog author="vcizek@suse.com" date="1505822400">- Explicitly require libopenssl-1_0_0-devel, to successfully build
  once we switch openssl to 1.1 (bsc#1042632)</changelog>
  <changelog author="bwiedemann@suse.com" date="1509019200">- Drop INFO_BIN from package because it is not needed
  and differs for every build (boo#1047218)</changelog>
  <changelog author="vcizek@suse.com" date="1509451200">- Also Require: libopenssl-1_0_0-devel from the libmysqlclient-devel package</changelog>
  <changelog author="kstreitova@suse.com" date="1509451201">- update to 10.2.10 GA
  * release notes and changelogs
    https://downloads.mariadb.org/mariadb/+releases/
  * fixes for the following security vulnerabilities
  * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365
  * 10.2.8:  CVE-2017-3636, CVE-2017-3641, CVE-2017-3653,
    CVE-2017-10320, CVE-2017-10365, CVE-2017-10379,
    CVE-2017-10384, CVE-2017-10286, CVE-2017-3257
  * 10.2.6:  CVE-2017-3308, CVE-2017-3309, CVE-2017-3453,
    CVE-2017-3456, CVE-2017-3464
  * 10.2.5:  CVE-2017-3313, CVE-2017-3302
  * [bsc#1042632], [bsc#1043328], [bsc#1019948], [fate#323738]
- refresh and rename the following patches:
  * mariadb-10.1.4-group.patch to
    mariadb-10.2.3-group.patch
  * mariadb-10.1.16-systemd-cmake.patch to
    mariadb-10.2.8-systemd-cmake.patch
  * mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
  * mariadb-10.1.12-fortify-and-O.patch to
    mariadb-10.2.4-fortify-and-O.patch
  * mysql-community-server-5.1.46-logrotate.patch to
    mariadb-10.2.4-logrotate.patch
- add mariadb-10.2.10.tar.gz.sig signature and mariadb.keyring files
- start building without client library part, use
  mariadb-connector-c for getting libmariadb libraries. Remove
  libmysclient* packages
- remove baselibs.conf because we no longer build client libraries
  here
- update %{soname} to 19 (libmysqld soname)
- change '=' to '&gt;=' in  Requires:mariadb-errormessages for
  libmysqld%{soname}. Versioned libraries shouldn't require regular
  packages with '='. It also causes problems during update (Problem:
  libmysqld18-10.1.25-3.1.x86_64 requires mariadb-errormessages = 10.1.25,
  but this requirement cannot be provided).
  Also add "Provides: mariadb-errormessages = 10.1.25" for errormessages
  subpackage that solves this problem for the current update.
- pack new files, remove mysql specific files
- remove README.SUSE as it was outdated
- package cleaning
  * run spec-cleaner
  * renumber sources
  * reorganize subpackages order and update summaries, descriptions
    and groups
  * tweak and add some comments to the specfile
  * remove warning about mysql-packaging repository that is no longer
    used for this package
  * remove checks whether we build mysql or mariadb (we build mariadb
    only)
- add galera subpackage
  * add missing "Requires:" (lsof, net-tools, rsync, socat,
    xtrabackup) for proper wsrep scripts functionality
  * add mariadb-10.2.9-galera_cnf.patch that enhances galera.cnf
    configuration file (add wsrep_on=OFF and set the location
    of the wsrep library)
  * rename README-wsrep to README.wsrep so it corresponds with the
    other README names
  * move galera_new_cluster, galera_recovery,
    use_galera_new_cluster.conf, wsrep_* scripts to the galera
    subpackage
- remove the following macros definitions:
  * %{_tmpfilesdir} - it's been defined in systemd macros since
    openSUSE 13.2
  * %{preferred} - we no longer need to distinguish between preferred
    and not preferred version (we build mariadb only)
  * %{with_mandatory_lz4} - mysql specific
  * %{build_extras}, %{pretty_name}, %{build_readline},
    %{builtin_plugins} and {libname} - they are no longer needed
- add the following macros
  * %{run_testsuite} macro that controls the run of the regression
    testsuite
  * %{ignore_testsuite_result} macro - when set to 1 it ignores
    results from the regression testsuite (debug purposes)
  * %{with_mroonga} macro (enable mroonga build for x86_64 archs only)
- rename %{with_jemalloc} to %{with_tokudb} and enable tokudb for
  x86_64 architectures for openSUSE and SLE15 [fate#323280]. Don't
  enable it for SLE12 (missing jemalloc dependency)
- add the following BuildRequires:
  * unixODBC-devel to allow ODBC support for Connect engine [bsc#1039034]
  * krb5-devel to build auth_gssapi.so plugin
  * libarchive-devel
  * use libboost_headers-devel instead of boost-devel for TW. Boost
    package has been split up and will migrate to using multibuild.
    This results in packages that unnecessarily build require
    boost-devel to cause major bottlenecks [bsc#1062583]
- do not use "BuildRequires: lzo-devel" for i586 and arm because
  it makes build fail
- add the following Requires:
  * hostname - as mariadb_install_db depends on this tool [bsc#1060110]
  * libaio-devel for libmysqld-devel because libmysqld depends
    on libaio
- tweak build options:
  * remove "DWITH_ASAN=OFF" - this option was added because of mysql
    and it's no longer needed
  * switch from "-DWITH_JEMALLOC=auto" to "-DWITH_JEMALLOC=system"
  * use "DCMAKE_SKIP_INSTALL_RPATH" - this allows to link with -rpath
    during build and fixes quite a few test suite failures. When
    installing the file -rpath is still disabled, so this should
    not have any effect on the installed binaries
  * add "-DWITH_LIBARCHIVE=ON" and "-DWITH_MARIABACKUP=ON"
  * remove -DWITH_BOOST=../boost/ as we use system boost now
- enable OQGRAPH to build (openSUSE only, SLE is missing Judy
  requirement)
- disable Cassandra storage engine build as it's no longer actively
  being developed (See MDEV-4695) [bsc#1055165]
  * Remove "BuildRequires: libthrift-devel" and %{with_cassandra}
    macros that are no longer needed now
- disable make test (Connector/C unit tests) as it requires a
  running server. These tests are part of mysql-test-run
  now (MDEV-12470)
- add suse_skipped_tests.list - the list of the tests that we want
  to skip (they fail correctly or the fix is in progress)
  * adjust mysql-test-run options to skip tests listed there
    [bsc#1041891]
- remove mytop utility that is packaged separately
- remove *.jar files from mysql-test
- remove python scripts remains from tokudb upstream
- remove generating of the MySQL NDB Cluster filelists
- remove removing of manpages for MySQL Carrier Grade Edition
- provide a symlink for the my_safe_process executable that was
  moved from its location to bindir
- update filename in /var/adm/update-messages to match
  documentation and build-compare pattern
- README is now README.md
- fix "file listed twice" build error</changelog>
  <changelog author="vcizek@suse.com" date="1511956800">- Disable openssl compatibility checking
  * the check uses CRYPTO_set_mem_functions() to set debugging
    memory allocation function. The setting only succeeds if no allocation
    was done before. Our fips self-tests, which are run from the library
    constructor, however, do allocate memory, so the subsequent call to
    CRYPTO_set_mem_functions causes the compatibility check to fail
  * add mariadb-10.2.10-disable_openssl_compatibility_check.patch</changelog>
  <changelog author="rhafer@suse.de" date="1511956801">- Added mariadb-10.2.10-wsrep_sst_common.patch (bsc#1069401).
  Upstream bug: https://jira.mariadb.org/browse/MDEV-14256</changelog>
  <changelog author="kstreitova@suse.com" date="1512043200">- update to 10.2.11 GA
  * release notes and changelog:
  * https://mariadb.com/kb/en/library/mariadb-10211-release-notes/
  * https://mariadb.com/kb/en/library/mariadb-10211-changelog/
- pack additional mroonga/groonga files
- change default charset to utf8mb4 for full Unicode support
  [fate#324329]
- remove mariadb-10.2.10-wsrep_sst_common.patch as it's no longer
  needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Do not manually delete
  %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release}-something:
  The file is listed as ghost and thus properly owned by the
  package.
- Use %tmpfiles_create which can cope with transactional updates.</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
  <changelog author="kstreitova@suse.com" date="1532692800">- switch to libedit as control sequences were already fixed there
  so we don't have to avoid it [bsc#1098683]</changelog>
</package>
<package pkgid="7c0ee8be6763337e96815eefa423edb3924153c07af8bc9574e3de63b803080e" name="libmysqld19" arch="x86_64">
  <version epoch="0" ver="10.2.15" rel="lp150.2.3.2"/>
  <changelog author="kstreitova@suse.com" date="1499688000">- update to MariaDB 10.1.25 GA
  * notable changes
  * MariaDB can no longer be compiled with OpenSSL version 0.9.8
    and below. The last 0.9.8 release was in December 2015, it is
    out of support and is no longer getting security fixes.
  * MariaDB Backup is now beta
  * release notes and changelog:
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-release-notes
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-changelog
  * refresh mariadb-10.1.12-fortify-and-O.patch
  * remove mariadb-10.1.22-xtradb_null_checks.patch (MDEV-12358),
    a fix was merged upstream
  * update file lists for new man-pages and tools
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream</changelog>
  <changelog author="vcizek@suse.com" date="1505822400">- Explicitly require libopenssl-1_0_0-devel, to successfully build
  once we switch openssl to 1.1 (bsc#1042632)</changelog>
  <changelog author="bwiedemann@suse.com" date="1509019200">- Drop INFO_BIN from package because it is not needed
  and differs for every build (boo#1047218)</changelog>
  <changelog author="vcizek@suse.com" date="1509451200">- Also Require: libopenssl-1_0_0-devel from the libmysqlclient-devel package</changelog>
  <changelog author="kstreitova@suse.com" date="1509451201">- update to 10.2.10 GA
  * release notes and changelogs
    https://downloads.mariadb.org/mariadb/+releases/
  * fixes for the following security vulnerabilities
  * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365
  * 10.2.8:  CVE-2017-3636, CVE-2017-3641, CVE-2017-3653,
    CVE-2017-10320, CVE-2017-10365, CVE-2017-10379,
    CVE-2017-10384, CVE-2017-10286, CVE-2017-3257
  * 10.2.6:  CVE-2017-3308, CVE-2017-3309, CVE-2017-3453,
    CVE-2017-3456, CVE-2017-3464
  * 10.2.5:  CVE-2017-3313, CVE-2017-3302
  * [bsc#1042632], [bsc#1043328], [bsc#1019948], [fate#323738]
- refresh and rename the following patches:
  * mariadb-10.1.4-group.patch to
    mariadb-10.2.3-group.patch
  * mariadb-10.1.16-systemd-cmake.patch to
    mariadb-10.2.8-systemd-cmake.patch
  * mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
  * mariadb-10.1.12-fortify-and-O.patch to
    mariadb-10.2.4-fortify-and-O.patch
  * mysql-community-server-5.1.46-logrotate.patch to
    mariadb-10.2.4-logrotate.patch
- add mariadb-10.2.10.tar.gz.sig signature and mariadb.keyring files
- start building without client library part, use
  mariadb-connector-c for getting libmariadb libraries. Remove
  libmysclient* packages
- remove baselibs.conf because we no longer build client libraries
  here
- update %{soname} to 19 (libmysqld soname)
- change '=' to '&gt;=' in  Requires:mariadb-errormessages for
  libmysqld%{soname}. Versioned libraries shouldn't require regular
  packages with '='. It also causes problems during update (Problem:
  libmysqld18-10.1.25-3.1.x86_64 requires mariadb-errormessages = 10.1.25,
  but this requirement cannot be provided).
  Also add "Provides: mariadb-errormessages = 10.1.25" for errormessages
  subpackage that solves this problem for the current update.
- pack new files, remove mysql specific files
- remove README.SUSE as it was outdated
- package cleaning
  * run spec-cleaner
  * renumber sources
  * reorganize subpackages order and update summaries, descriptions
    and groups
  * tweak and add some comments to the specfile
  * remove warning about mysql-packaging repository that is no longer
    used for this package
  * remove checks whether we build mysql or mariadb (we build mariadb
    only)
- add galera subpackage
  * add missing "Requires:" (lsof, net-tools, rsync, socat,
    xtrabackup) for proper wsrep scripts functionality
  * add mariadb-10.2.9-galera_cnf.patch that enhances galera.cnf
    configuration file (add wsrep_on=OFF and set the location
    of the wsrep library)
  * rename README-wsrep to README.wsrep so it corresponds with the
    other README names
  * move galera_new_cluster, galera_recovery,
    use_galera_new_cluster.conf, wsrep_* scripts to the galera
    subpackage
- remove the following macros definitions:
  * %{_tmpfilesdir} - it's been defined in systemd macros since
    openSUSE 13.2
  * %{preferred} - we no longer need to distinguish between preferred
    and not preferred version (we build mariadb only)
  * %{with_mandatory_lz4} - mysql specific
  * %{build_extras}, %{pretty_name}, %{build_readline},
    %{builtin_plugins} and {libname} - they are no longer needed
- add the following macros
  * %{run_testsuite} macro that controls the run of the regression
    testsuite
  * %{ignore_testsuite_result} macro - when set to 1 it ignores
    results from the regression testsuite (debug purposes)
  * %{with_mroonga} macro (enable mroonga build for x86_64 archs only)
- rename %{with_jemalloc} to %{with_tokudb} and enable tokudb for
  x86_64 architectures for openSUSE and SLE15 [fate#323280]. Don't
  enable it for SLE12 (missing jemalloc dependency)
- add the following BuildRequires:
  * unixODBC-devel to allow ODBC support for Connect engine [bsc#1039034]
  * krb5-devel to build auth_gssapi.so plugin
  * libarchive-devel
  * use libboost_headers-devel instead of boost-devel for TW. Boost
    package has been split up and will migrate to using multibuild.
    This results in packages that unnecessarily build require
    boost-devel to cause major bottlenecks [bsc#1062583]
- do not use "BuildRequires: lzo-devel" for i586 and arm because
  it makes build fail
- add the following Requires:
  * hostname - as mariadb_install_db depends on this tool [bsc#1060110]
  * libaio-devel for libmysqld-devel because libmysqld depends
    on libaio
- tweak build options:
  * remove "DWITH_ASAN=OFF" - this option was added because of mysql
    and it's no longer needed
  * switch from "-DWITH_JEMALLOC=auto" to "-DWITH_JEMALLOC=system"
  * use "DCMAKE_SKIP_INSTALL_RPATH" - this allows to link with -rpath
    during build and fixes quite a few test suite failures. When
    installing the file -rpath is still disabled, so this should
    not have any effect on the installed binaries
  * add "-DWITH_LIBARCHIVE=ON" and "-DWITH_MARIABACKUP=ON"
  * remove -DWITH_BOOST=../boost/ as we use system boost now
- enable OQGRAPH to build (openSUSE only, SLE is missing Judy
  requirement)
- disable Cassandra storage engine build as it's no longer actively
  being developed (See MDEV-4695) [bsc#1055165]
  * Remove "BuildRequires: libthrift-devel" and %{with_cassandra}
    macros that are no longer needed now
- disable make test (Connector/C unit tests) as it requires a
  running server. These tests are part of mysql-test-run
  now (MDEV-12470)
- add suse_skipped_tests.list - the list of the tests that we want
  to skip (they fail correctly or the fix is in progress)
  * adjust mysql-test-run options to skip tests listed there
    [bsc#1041891]
- remove mytop utility that is packaged separately
- remove *.jar files from mysql-test
- remove python scripts remains from tokudb upstream
- remove generating of the MySQL NDB Cluster filelists
- remove removing of manpages for MySQL Carrier Grade Edition
- provide a symlink for the my_safe_process executable that was
  moved from its location to bindir
- update filename in /var/adm/update-messages to match
  documentation and build-compare pattern
- README is now README.md
- fix "file listed twice" build error</changelog>
  <changelog author="vcizek@suse.com" date="1511956800">- Disable openssl compatibility checking
  * the check uses CRYPTO_set_mem_functions() to set debugging
    memory allocation function. The setting only succeeds if no allocation
    was done before. Our fips self-tests, which are run from the library
    constructor, however, do allocate memory, so the subsequent call to
    CRYPTO_set_mem_functions causes the compatibility check to fail
  * add mariadb-10.2.10-disable_openssl_compatibility_check.patch</changelog>
  <changelog author="rhafer@suse.de" date="1511956801">- Added mariadb-10.2.10-wsrep_sst_common.patch (bsc#1069401).
  Upstream bug: https://jira.mariadb.org/browse/MDEV-14256</changelog>
  <changelog author="kstreitova@suse.com" date="1512043200">- update to 10.2.11 GA
  * release notes and changelog:
  * https://mariadb.com/kb/en/library/mariadb-10211-release-notes/
  * https://mariadb.com/kb/en/library/mariadb-10211-changelog/
- pack additional mroonga/groonga files
- change default charset to utf8mb4 for full Unicode support
  [fate#324329]
- remove mariadb-10.2.10-wsrep_sst_common.patch as it's no longer
  needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Do not manually delete
  %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release}-something:
  The file is listed as ghost and thus properly owned by the
  package.
- Use %tmpfiles_create which can cope with transactional updates.</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
</package>
<package pkgid="5a7266a0f0c8ac013d3ad33776655105dd1f2a7a24d697a5fd9cbe3bc695b828" name="libmysqld19" arch="x86_64">
  <version epoch="0" ver="10.2.15" rel="lp150.2.6.1"/>
  <changelog author="vcizek@suse.com" date="1505822400">- Explicitly require libopenssl-1_0_0-devel, to successfully build
  once we switch openssl to 1.1 (bsc#1042632)</changelog>
  <changelog author="bwiedemann@suse.com" date="1509019200">- Drop INFO_BIN from package because it is not needed
  and differs for every build (boo#1047218)</changelog>
  <changelog author="vcizek@suse.com" date="1509451200">- Also Require: libopenssl-1_0_0-devel from the libmysqlclient-devel package</changelog>
  <changelog author="kstreitova@suse.com" date="1509451201">- update to 10.2.10 GA
  * release notes and changelogs
    https://downloads.mariadb.org/mariadb/+releases/
  * fixes for the following security vulnerabilities
  * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365
  * 10.2.8:  CVE-2017-3636, CVE-2017-3641, CVE-2017-3653,
    CVE-2017-10320, CVE-2017-10365, CVE-2017-10379,
    CVE-2017-10384, CVE-2017-10286, CVE-2017-3257
  * 10.2.6:  CVE-2017-3308, CVE-2017-3309, CVE-2017-3453,
    CVE-2017-3456, CVE-2017-3464
  * 10.2.5:  CVE-2017-3313, CVE-2017-3302
  * [bsc#1042632], [bsc#1043328], [bsc#1019948], [fate#323738]
- refresh and rename the following patches:
  * mariadb-10.1.4-group.patch to
    mariadb-10.2.3-group.patch
  * mariadb-10.1.16-systemd-cmake.patch to
    mariadb-10.2.8-systemd-cmake.patch
  * mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
  * mariadb-10.1.12-fortify-and-O.patch to
    mariadb-10.2.4-fortify-and-O.patch
  * mysql-community-server-5.1.46-logrotate.patch to
    mariadb-10.2.4-logrotate.patch
- add mariadb-10.2.10.tar.gz.sig signature and mariadb.keyring files
- start building without client library part, use
  mariadb-connector-c for getting libmariadb libraries. Remove
  libmysclient* packages
- remove baselibs.conf because we no longer build client libraries
  here
- update %{soname} to 19 (libmysqld soname)
- change '=' to '&gt;=' in  Requires:mariadb-errormessages for
  libmysqld%{soname}. Versioned libraries shouldn't require regular
  packages with '='. It also causes problems during update (Problem:
  libmysqld18-10.1.25-3.1.x86_64 requires mariadb-errormessages = 10.1.25,
  but this requirement cannot be provided).
  Also add "Provides: mariadb-errormessages = 10.1.25" for errormessages
  subpackage that solves this problem for the current update.
- pack new files, remove mysql specific files
- remove README.SUSE as it was outdated
- package cleaning
  * run spec-cleaner
  * renumber sources
  * reorganize subpackages order and update summaries, descriptions
    and groups
  * tweak and add some comments to the specfile
  * remove warning about mysql-packaging repository that is no longer
    used for this package
  * remove checks whether we build mysql or mariadb (we build mariadb
    only)
- add galera subpackage
  * add missing "Requires:" (lsof, net-tools, rsync, socat,
    xtrabackup) for proper wsrep scripts functionality
  * add mariadb-10.2.9-galera_cnf.patch that enhances galera.cnf
    configuration file (add wsrep_on=OFF and set the location
    of the wsrep library)
  * rename README-wsrep to README.wsrep so it corresponds with the
    other README names
  * move galera_new_cluster, galera_recovery,
    use_galera_new_cluster.conf, wsrep_* scripts to the galera
    subpackage
- remove the following macros definitions:
  * %{_tmpfilesdir} - it's been defined in systemd macros since
    openSUSE 13.2
  * %{preferred} - we no longer need to distinguish between preferred
    and not preferred version (we build mariadb only)
  * %{with_mandatory_lz4} - mysql specific
  * %{build_extras}, %{pretty_name}, %{build_readline},
    %{builtin_plugins} and {libname} - they are no longer needed
- add the following macros
  * %{run_testsuite} macro that controls the run of the regression
    testsuite
  * %{ignore_testsuite_result} macro - when set to 1 it ignores
    results from the regression testsuite (debug purposes)
  * %{with_mroonga} macro (enable mroonga build for x86_64 archs only)
- rename %{with_jemalloc} to %{with_tokudb} and enable tokudb for
  x86_64 architectures for openSUSE and SLE15 [fate#323280]. Don't
  enable it for SLE12 (missing jemalloc dependency)
- add the following BuildRequires:
  * unixODBC-devel to allow ODBC support for Connect engine [bsc#1039034]
  * krb5-devel to build auth_gssapi.so plugin
  * libarchive-devel
  * use libboost_headers-devel instead of boost-devel for TW. Boost
    package has been split up and will migrate to using multibuild.
    This results in packages that unnecessarily build require
    boost-devel to cause major bottlenecks [bsc#1062583]
- do not use "BuildRequires: lzo-devel" for i586 and arm because
  it makes build fail
- add the following Requires:
  * hostname - as mariadb_install_db depends on this tool [bsc#1060110]
  * libaio-devel for libmysqld-devel because libmysqld depends
    on libaio
- tweak build options:
  * remove "DWITH_ASAN=OFF" - this option was added because of mysql
    and it's no longer needed
  * switch from "-DWITH_JEMALLOC=auto" to "-DWITH_JEMALLOC=system"
  * use "DCMAKE_SKIP_INSTALL_RPATH" - this allows to link with -rpath
    during build and fixes quite a few test suite failures. When
    installing the file -rpath is still disabled, so this should
    not have any effect on the installed binaries
  * add "-DWITH_LIBARCHIVE=ON" and "-DWITH_MARIABACKUP=ON"
  * remove -DWITH_BOOST=../boost/ as we use system boost now
- enable OQGRAPH to build (openSUSE only, SLE is missing Judy
  requirement)
- disable Cassandra storage engine build as it's no longer actively
  being developed (See MDEV-4695) [bsc#1055165]
  * Remove "BuildRequires: libthrift-devel" and %{with_cassandra}
    macros that are no longer needed now
- disable make test (Connector/C unit tests) as it requires a
  running server. These tests are part of mysql-test-run
  now (MDEV-12470)
- add suse_skipped_tests.list - the list of the tests that we want
  to skip (they fail correctly or the fix is in progress)
  * adjust mysql-test-run options to skip tests listed there
    [bsc#1041891]
- remove mytop utility that is packaged separately
- remove *.jar files from mysql-test
- remove python scripts remains from tokudb upstream
- remove generating of the MySQL NDB Cluster filelists
- remove removing of manpages for MySQL Carrier Grade Edition
- provide a symlink for the my_safe_process executable that was
  moved from its location to bindir
- update filename in /var/adm/update-messages to match
  documentation and build-compare pattern
- README is now README.md
- fix "file listed twice" build error</changelog>
  <changelog author="vcizek@suse.com" date="1511956800">- Disable openssl compatibility checking
  * the check uses CRYPTO_set_mem_functions() to set debugging
    memory allocation function. The setting only succeeds if no allocation
    was done before. Our fips self-tests, which are run from the library
    constructor, however, do allocate memory, so the subsequent call to
    CRYPTO_set_mem_functions causes the compatibility check to fail
  * add mariadb-10.2.10-disable_openssl_compatibility_check.patch</changelog>
  <changelog author="rhafer@suse.de" date="1511956801">- Added mariadb-10.2.10-wsrep_sst_common.patch (bsc#1069401).
  Upstream bug: https://jira.mariadb.org/browse/MDEV-14256</changelog>
  <changelog author="kstreitova@suse.com" date="1512043200">- update to 10.2.11 GA
  * release notes and changelog:
  * https://mariadb.com/kb/en/library/mariadb-10211-release-notes/
  * https://mariadb.com/kb/en/library/mariadb-10211-changelog/
- pack additional mroonga/groonga files
- change default charset to utf8mb4 for full Unicode support
  [fate#324329]
- remove mariadb-10.2.10-wsrep_sst_common.patch as it's no longer
  needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Do not manually delete
  %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release}-something:
  The file is listed as ghost and thus properly owned by the
  package.
- Use %tmpfiles_create which can cope with transactional updates.</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
  <changelog author="kstreitova@suse.com" date="1532692800">- switch to libedit as control sequences were already fixed there
  so we don't have to avoid it [bsc#1098683]</changelog>
</package>
<package pkgid="38ff522b1d49a9ab9332f7302e5dc26b981dcfbed4cebb22262e722f2b3f138c" name="libnautilus-extension1" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Fix libgd warning.
  + Numerous batch renaming improvements and fixes.
  + Detect .bz and .xz as extensions for renaming.
  + Fix operations popover too small.
  + Add dummy --no-desktop option so Dropbox plugin works again.
  + Fix build when using the --disable-tracker compile time option.
  + Updated translations.
- Run spec-clean: Updates macros to current standard and adds
  pkgconfig BuildRequires, also removes obsolete clean section.
- Conditionally BuildRequire and apply gnome-patch-translate and
  translations-update-upstream for non-openSUSE only.
- Drop nautilus2-devel Obsoletes/Provides: We do not support
  upgrading from any version where this would apply.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 3.22.0:
  + Increase gtk+ depencency version.
  + Updated translations.</changelog>
  <changelog author="qzhao@suse.com" date="1476014400">- Update nautilus-fix-desktop-icon-smash.patch:
  porting upstream's solution to work out the general aspect
  (bsc#979072, bgo#765601).</changelog>
  <changelog author="zaitor@opensuse.org" date="1476446400">- Update to version 3.22.1:
  + Multiple batch renaming fixes.
  + Multiple compression integration fixes.
  + Fix not showing "eject" and other options for devices in the
    context menu in the desktop.
  + Rework clipboard handling, fixing desktop&lt;-&gt;Nautilus
    interaction.
  + Fix overlaping icons on desktop in some cases, noticeabily in
    Ubuntu.
  + Fix wrong progress information in operations when skipping
    files.
  + Fix gnome-shell search only searching for whole words.
  + Show location as default for list view on Recent.
  + Fix context menu position in Wayland or other non-global
    coordinates systems.
  + Update man page of nautilus.
  + Add revealer for warnings in batch rename dialog.
  + Add tooltips to batch rename dialog file names.
  + Port nautilus classes to G_DECLARE.
  + Extend Nautilus File API for regular files.
  + Don't crash for simple leaks on the views.
  + Updated translations.
- Drop nautilus-enable-eject-option-on-selection-menu.patch and
  nautilus-fix-desktop-icon-smash.patch: Fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1481371200">- Update to version 3.22.2:
  + Fix opening menus with keyboard.
  + Fix batch rename failing to rename in some cases.
  + Remove Bookmarks manager shortcut from the shortcut window.
  + Reverse view icon logic to match design expectations.
  + Make icons on desktop work on Wayland sessions.
  + Fix popover animations.
  + Use the same setting for "directories first" both for file
    chooser and Nautilus.
  + Select entire names when renaming a folder.
  + Fix wrong progress information in operations due to races.
  + Fix wrong progress information in operations in non local
    files.
  + Fix regresion on speed when copying or moving files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Update to version 3.23.90:
  + Add &lt;ctrl&gt; Return as shortcut to open selected folder in new
    window.
  + &lt;ctrl&gt; N now opens the window in the same location as the
    current view.
  + Fixes on managing menus with keyboard.
  + Remove unused &lt;ctrl&gt; B shortcut.
  + Use a better empty state for trash.
  + Fix floating bar hide on hover when using tabs.
  + Syncronize gtk+ and Nautilus setting for sorting the folder
    first.
  + Select entire names for folder when renaming.
  + Support to open folders withouth permission using polkit and
    the admin backend.
  + Fix trash operations progress report.
  + Improve performance setting metadata only when necesary.
  + Fix progress reporting when copying.
  + Prevent toolbar menu dissapearing when "Hidden files" menu item
    is toggled.
  + Update app icon.
  + Fix icon scale computation when changing DPI.
  + Add &lt;ctrl&gt; M as alternate shortcut for renaming for those
    laptops withouth "f" keys.
  + Fix crash when pressing enter on search.
  + Fix failed build with tracker disabled.
  + Ask the user for using desktop files from unknown sources.
  + Improve the operations button animation in order to not need to
    show the operations popover.
  + Add an experimental icon view based on flow box with extra
    niceties under a gsetting preference.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488628800">- Update to version 3.23.91:
  + Fix long-time, hard to reproduce, and common crash on desktop
    with "auto layout" icons.
  + Port building system to meson.
  + Make F2 toggle between selection modes, full file name or only
    file name withouth extension.
  + Recent files are now always files that only the user used,
    rather than any program/daemon like Dropbox updating the access
    time.
  + Fix Nautilus tests with extexnsions points.
  + Fix crash on desktop when refreshing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1489752000">- Update to version 3.23.92:
  + Fix count progress in operations when skipping files.
  + Improve meson build.
  + Selection and menus fixed for the experimental icon view.
  + Make Nautilus work with Flatpak and Builder.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490097600">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1493467200">- Update to version 3.24.1:
  + Focus when a new folder is created.
  + Do not consider directory names with dots as extensions.
  + Fix move to/copy to when searching.
  + Various fixes to the new experimental views.
  + Fix scripts order in submenu.
  + Fix open in new tab/window in Other Places.
  + Show new networks available while in Other Places view.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.23.2.1:
  + Release with autotools.
- Changes from version 3.24.2:
  + Hide desktop icons autostart in Ubuntu.
  + Confirm file name change in dialog conflicts with return.
  + Fix search activation not changing current directory.
  + Don't wrap names after . or _
  + Fix rubberband selection when using wacom tablets.
  + Fix crash in batch renaming.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 3.25.1:
  + Ported to Meson build system.
  + Fix replacing directory with symlink.
  + Avoid extraction of files if not enough space.
  + Fix not being able to drag the window from the path bar.
  + Add user preference for using the new views.
  + Fix DnD when using Google Drive.
- Add meson BuildRequires and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson build system.
- Due to above change, no longer pass --disable-update-mimedb and
  - -enable-gtk-doc to configure, instead pass enable-exif=true,
  enable-gtk-doc=true and enable-xmp=true to meson macro. We want
  to build gtk-docs, exif and xmp support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638400">- Add nautilus-tracker-2_0.patch: Fix build with tracker-2.0, patch
  from upstream git.
- Following above patch, replace pkgconfig(tracker-sparql-1.0) with
  pkgconfig(tracker-sparql-2.0) BuildRequires.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un), icon_theme_cache_post(un) and
  mime_database_post(un) in post(un), no longer needed as we have
  file-triggers to take care of this for us now.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502712000">- Update to version 3.25.90:
  + Fix use of return key for conflict dialog.
  + Fix use of return key when searching not activating the
    selected file.
  + Add stable Flatpak builds.
  + Fix wrapping file names after a dot.
  + Use header bar for all dialogs.
  + Use portals for launching files in a sandbox with Flatpak.
  + Show error on empty name on batch rename dialog.
  + Change keyboard shortcuts for navigation of tabs similar to
    Firefox/Chrome etc.
  + Add a restore tab funcionality, similar to web browsers.
  + Fix rubberband with Wacom tablets.
  + Add Full Text Search (fts) to Nautilus so we search inside
    files content too.
  + Disable create link when clipboard is empty.
  + Disable zoom button if percentage is 100%.
  + Bump Tracker dependency to version 2.0.
  + Make Tracker a hard dependency.
  + Assume Nautilus project is GPL3+.
  + Allow decompressing archives on remote locations.
  + Add license (LGPL2.1+)to Nautilus extensions.
  + Only use location in description for GNOME Shell search.
  + Add tablet pad controllers for common actions.
  + Fix &lt;ctrl&gt;+z when renaming a file not undoing the text.
  + Use upstream and newer fallback icons.
  + Provide mime type support for compressed archives, so Nautilus
    can be used for handling compressed archives outside of
    Nautilus too.
- Drop nautilus-tracker-2_0.patch: Fixed upstream.
- Relicense spec following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504353600">- Update to version 3.25.92:
  + Fix desktop file parsing errors.
  + Bump GTK+ dependency version to 3.22.6.
  + Add mnemonic to replace button in file conflict dialog.
  + Show prefix matches first when searching.
  + Enable keyboard navigation in search type list.
  + Fix list view column picker not being centered in certain
    locales.
  + Make the path bar a drop target for files again.
  + Make sidebar visibility setting persistent.
  + Use spin button for thumbnailable file size limit setting.
  + Only allow directories to be dragged onto sidebar for
    bookmarking.
  + Make path bar clicks add new history entries.
  + Allow hiding unfocused search bar by pressing Escape.
  + Hide location entry after losing keyboard focus.
  + Allow deleting files with numpad delete key.
  + Forbid overwriting directories with files.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Update to version 3.26.2:
  + Fix crash in list view when expanding folders.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="xwang@suse.com" date="1535371200">- Add set_trusted.desktop and set_trusted.sh: If using /etc/skel
  function, the script can set files in $HOME/Desktop as trusted
  automatically when user login (bsc#1103523).</changelog>
  <changelog author="xwang@suse.com" date="1538049600">- Update set_trusted.desktop and set_trusted.sh: Move
  set_trusted.desktop file to /etc/skel/.config/autostart
  (bsc#1103523 bsc#1107854).</changelog>
</package>
<package pkgid="b87e7f5eff2f4759f5ad6f87c222350138a736e85f8b3525644d187633027700" name="libnautilus-extension1-32bit" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Fix libgd warning.
  + Numerous batch renaming improvements and fixes.
  + Detect .bz and .xz as extensions for renaming.
  + Fix operations popover too small.
  + Add dummy --no-desktop option so Dropbox plugin works again.
  + Fix build when using the --disable-tracker compile time option.
  + Updated translations.
- Run spec-clean: Updates macros to current standard and adds
  pkgconfig BuildRequires, also removes obsolete clean section.
- Conditionally BuildRequire and apply gnome-patch-translate and
  translations-update-upstream for non-openSUSE only.
- Drop nautilus2-devel Obsoletes/Provides: We do not support
  upgrading from any version where this would apply.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 3.22.0:
  + Increase gtk+ depencency version.
  + Updated translations.</changelog>
  <changelog author="qzhao@suse.com" date="1476014400">- Update nautilus-fix-desktop-icon-smash.patch:
  porting upstream's solution to work out the general aspect
  (bsc#979072, bgo#765601).</changelog>
  <changelog author="zaitor@opensuse.org" date="1476446400">- Update to version 3.22.1:
  + Multiple batch renaming fixes.
  + Multiple compression integration fixes.
  + Fix not showing "eject" and other options for devices in the
    context menu in the desktop.
  + Rework clipboard handling, fixing desktop&lt;-&gt;Nautilus
    interaction.
  + Fix overlaping icons on desktop in some cases, noticeabily in
    Ubuntu.
  + Fix wrong progress information in operations when skipping
    files.
  + Fix gnome-shell search only searching for whole words.
  + Show location as default for list view on Recent.
  + Fix context menu position in Wayland or other non-global
    coordinates systems.
  + Update man page of nautilus.
  + Add revealer for warnings in batch rename dialog.
  + Add tooltips to batch rename dialog file names.
  + Port nautilus classes to G_DECLARE.
  + Extend Nautilus File API for regular files.
  + Don't crash for simple leaks on the views.
  + Updated translations.
- Drop nautilus-enable-eject-option-on-selection-menu.patch and
  nautilus-fix-desktop-icon-smash.patch: Fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1481371200">- Update to version 3.22.2:
  + Fix opening menus with keyboard.
  + Fix batch rename failing to rename in some cases.
  + Remove Bookmarks manager shortcut from the shortcut window.
  + Reverse view icon logic to match design expectations.
  + Make icons on desktop work on Wayland sessions.
  + Fix popover animations.
  + Use the same setting for "directories first" both for file
    chooser and Nautilus.
  + Select entire names when renaming a folder.
  + Fix wrong progress information in operations due to races.
  + Fix wrong progress information in operations in non local
    files.
  + Fix regresion on speed when copying or moving files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Update to version 3.23.90:
  + Add &lt;ctrl&gt; Return as shortcut to open selected folder in new
    window.
  + &lt;ctrl&gt; N now opens the window in the same location as the
    current view.
  + Fixes on managing menus with keyboard.
  + Remove unused &lt;ctrl&gt; B shortcut.
  + Use a better empty state for trash.
  + Fix floating bar hide on hover when using tabs.
  + Syncronize gtk+ and Nautilus setting for sorting the folder
    first.
  + Select entire names for folder when renaming.
  + Support to open folders withouth permission using polkit and
    the admin backend.
  + Fix trash operations progress report.
  + Improve performance setting metadata only when necesary.
  + Fix progress reporting when copying.
  + Prevent toolbar menu dissapearing when "Hidden files" menu item
    is toggled.
  + Update app icon.
  + Fix icon scale computation when changing DPI.
  + Add &lt;ctrl&gt; M as alternate shortcut for renaming for those
    laptops withouth "f" keys.
  + Fix crash when pressing enter on search.
  + Fix failed build with tracker disabled.
  + Ask the user for using desktop files from unknown sources.
  + Improve the operations button animation in order to not need to
    show the operations popover.
  + Add an experimental icon view based on flow box with extra
    niceties under a gsetting preference.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488628800">- Update to version 3.23.91:
  + Fix long-time, hard to reproduce, and common crash on desktop
    with "auto layout" icons.
  + Port building system to meson.
  + Make F2 toggle between selection modes, full file name or only
    file name withouth extension.
  + Recent files are now always files that only the user used,
    rather than any program/daemon like Dropbox updating the access
    time.
  + Fix Nautilus tests with extexnsions points.
  + Fix crash on desktop when refreshing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1489752000">- Update to version 3.23.92:
  + Fix count progress in operations when skipping files.
  + Improve meson build.
  + Selection and menus fixed for the experimental icon view.
  + Make Nautilus work with Flatpak and Builder.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490097600">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1493467200">- Update to version 3.24.1:
  + Focus when a new folder is created.
  + Do not consider directory names with dots as extensions.
  + Fix move to/copy to when searching.
  + Various fixes to the new experimental views.
  + Fix scripts order in submenu.
  + Fix open in new tab/window in Other Places.
  + Show new networks available while in Other Places view.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.23.2.1:
  + Release with autotools.
- Changes from version 3.24.2:
  + Hide desktop icons autostart in Ubuntu.
  + Confirm file name change in dialog conflicts with return.
  + Fix search activation not changing current directory.
  + Don't wrap names after . or _
  + Fix rubberband selection when using wacom tablets.
  + Fix crash in batch renaming.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 3.25.1:
  + Ported to Meson build system.
  + Fix replacing directory with symlink.
  + Avoid extraction of files if not enough space.
  + Fix not being able to drag the window from the path bar.
  + Add user preference for using the new views.
  + Fix DnD when using Google Drive.
- Add meson BuildRequires and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson build system.
- Due to above change, no longer pass --disable-update-mimedb and
  - -enable-gtk-doc to configure, instead pass enable-exif=true,
  enable-gtk-doc=true and enable-xmp=true to meson macro. We want
  to build gtk-docs, exif and xmp support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638400">- Add nautilus-tracker-2_0.patch: Fix build with tracker-2.0, patch
  from upstream git.
- Following above patch, replace pkgconfig(tracker-sparql-1.0) with
  pkgconfig(tracker-sparql-2.0) BuildRequires.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un), icon_theme_cache_post(un) and
  mime_database_post(un) in post(un), no longer needed as we have
  file-triggers to take care of this for us now.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502712000">- Update to version 3.25.90:
  + Fix use of return key for conflict dialog.
  + Fix use of return key when searching not activating the
    selected file.
  + Add stable Flatpak builds.
  + Fix wrapping file names after a dot.
  + Use header bar for all dialogs.
  + Use portals for launching files in a sandbox with Flatpak.
  + Show error on empty name on batch rename dialog.
  + Change keyboard shortcuts for navigation of tabs similar to
    Firefox/Chrome etc.
  + Add a restore tab funcionality, similar to web browsers.
  + Fix rubberband with Wacom tablets.
  + Add Full Text Search (fts) to Nautilus so we search inside
    files content too.
  + Disable create link when clipboard is empty.
  + Disable zoom button if percentage is 100%.
  + Bump Tracker dependency to version 2.0.
  + Make Tracker a hard dependency.
  + Assume Nautilus project is GPL3+.
  + Allow decompressing archives on remote locations.
  + Add license (LGPL2.1+)to Nautilus extensions.
  + Only use location in description for GNOME Shell search.
  + Add tablet pad controllers for common actions.
  + Fix &lt;ctrl&gt;+z when renaming a file not undoing the text.
  + Use upstream and newer fallback icons.
  + Provide mime type support for compressed archives, so Nautilus
    can be used for handling compressed archives outside of
    Nautilus too.
- Drop nautilus-tracker-2_0.patch: Fixed upstream.
- Relicense spec following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504353600">- Update to version 3.25.92:
  + Fix desktop file parsing errors.
  + Bump GTK+ dependency version to 3.22.6.
  + Add mnemonic to replace button in file conflict dialog.
  + Show prefix matches first when searching.
  + Enable keyboard navigation in search type list.
  + Fix list view column picker not being centered in certain
    locales.
  + Make the path bar a drop target for files again.
  + Make sidebar visibility setting persistent.
  + Use spin button for thumbnailable file size limit setting.
  + Only allow directories to be dragged onto sidebar for
    bookmarking.
  + Make path bar clicks add new history entries.
  + Allow hiding unfocused search bar by pressing Escape.
  + Hide location entry after losing keyboard focus.
  + Allow deleting files with numpad delete key.
  + Forbid overwriting directories with files.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Update to version 3.26.2:
  + Fix crash in list view when expanding folders.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="xwang@suse.com" date="1535371200">- Add set_trusted.desktop and set_trusted.sh: If using /etc/skel
  function, the script can set files in $HOME/Desktop as trusted
  automatically when user login (bsc#1103523).</changelog>
  <changelog author="xwang@suse.com" date="1538049600">- Update set_trusted.desktop and set_trusted.sh: Move
  set_trusted.desktop file to /etc/skel/.config/autostart
  (bsc#1103523 bsc#1107854).</changelog>
</package>
<package pkgid="678bc8892c91edf8bf37443aa3e8f1ef65e4884e5f33b680676251bf20713099" name="libndr-devel" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="5f7353c9aa3ca63baf04c899e4deb46174da95fe419f64a728b0a07af0b942eb" name="libndr-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="d20ae3546e5b9a87b5517638c245f433e9bdd13198d9a38f3ff030c5d55597d5" name="libndr-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="65bbab29baf214d76c1b2583b4417ed191a0b8ed0932d9f1312b9f06a3825414" name="libndr-krb5pac-devel" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="055b71872a5198da771c348575240318d8372e5176e2012701c21f1eb4b9726d" name="libndr-krb5pac-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="5a84bc0cd4b99debfeec3074d7d78cf921d7e5474de11e3451f4b346e268452f" name="libndr-krb5pac-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="1cc48d5594f5cb66ddef6e12e2d13b131c2a489f6df5d7f3392a449cbd543c99" name="libndr-krb5pac0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="1b792f812917750cf6adae13f78f379292ecdf0305bba86ecf08d660e06aae7c" name="libndr-krb5pac0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="9ff8fdf899875f0f8c373674565c62f4c12d218437965dee5fb88da75f3e82d2" name="libndr-krb5pac0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="372cc18d4b198f61a56b5a4a46ccb130294687cabd531f2dc8c76460d06a0c1e" name="libndr-krb5pac0" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="0361567a5f5272617363e2a1ab6e496808673799ab70b31839ee21ae7651e563" name="libndr-krb5pac0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="e7ebfed96dbf8f003e60eef576bb618782e60f19a785fab3050f8dce11043fa8" name="libndr-krb5pac0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="b038691adebba504bd1a1f4862d645098236921c253a163dc3ef79fafd7cd5f8" name="libndr-nbt-devel" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="ac06a614b44a75afa7636534c8dac87d2cea28ed7a01b79b2a3ee84be52c06bd" name="libndr-nbt-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="aa3b3586a9ac99a9e7f11d0bb2db54c29e6aa71ca150054c2fe591ff2c4d28b8" name="libndr-nbt-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="b0270228f8b8c8a8728a640e9276b90a7880d0c354835df82336d07656de150b" name="libndr-nbt0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="ea529f9f6d78a681bdfbcdb3420a84f78ea87ccdf57fe6990e382b71204bb6f1" name="libndr-nbt0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="c79a3636b4990f76f31f774c5090eb68a3b8aa045d5b96c278daa5c9f9c29705" name="libndr-nbt0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="20a56b79287c62b6f48c5dba84001011807808843e06f964b31d4986359689ad" name="libndr-nbt0" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="6453ec9460982521debf1bc20b89d5bae022cf27162af7a9c59a500790c113d3" name="libndr-nbt0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="22c6b74eda0de3120b5e7f37115417a8714d55c3772bbfdec3828b200e254f2b" name="libndr-nbt0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="7205ffabc43567d874ddbe3c855bfd49665517174aad25ff9d8168d56473e60a" name="libndr-standard-devel" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="906f41f8044ab3b24d193f63caa3ea7d94cbd0a852817c5065414d9efe6c980d" name="libndr-standard-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="bbe8bf278e887fc8cd15de63723c600b1274f399e30ebe959f2437eff6e155f3" name="libndr-standard-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="f82582c7f69e3df58ec1868c3044e9518a29b6e95c1933ae463554b7cf7bf509" name="libndr-standard0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="cbde5700e5aa6c260d264e1a104f6e0aa97684300f93ef4e4204dd4aaf879615" name="libndr-standard0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="746bb42018ec6a66c4cf9a8fe6ef77c04e166d319baa15b9d1cdec455985ffab" name="libndr-standard0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="5afbb9c7c829ff42514daa1bc0c2931242255202f20ba97aa420830f9cc0ac1f" name="libndr-standard0" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="a181d9b73d5ad127526b6406a920f56c2c895859185bab26376d2188a61edd93" name="libndr-standard0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="d9a4ad0d59becd8c6671174d54e3811690bb236f8e4eecf2dcc335c1a0d3e4a8" name="libndr-standard0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="48cd3fe3d11d5674505224a41aad3cf483d2b80a664728ca1add398eb45d1647" name="libndr0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="8ba26472bcacc7923bfbb9ca0421e8bae8abdd21eaafa81e1167a41725983da4" name="libndr0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="10ae9e4bccfff9a4f3322752613234b49b82e8fe50aa360293331d142497b26d" name="libndr0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="21d32c4ff104645f5dcd3ecf8f0c57f79d2ced3c6b09c299738e314e410cdcdc" name="libndr0" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="767fb968a24f523241ec5cc436735d283e635d7b5c8596469686cedbf7693180" name="libndr0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="949ccd4acdedb62e1673a46b99f0c120974bdea948ccef128eebc98659c4382c" name="libndr0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="bc5ef656c5f3dfbb3ba8cbc1bad04fba762860e82616345da6cff8493929b221" name="libnetapi-devel" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="7743443e835b7315a11f0c361bcf1f80821105f6028d73cd926570d4cd28f4b7" name="libnetapi-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="b0d392cbe4fc96ede8eeee2709e9f64e580ad4b2d6cb221b49b01f80bed5be81" name="libnetapi-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="714e3ac36356e232f5a769836dc3c213217c0e62114b0f141378053e0e0e70b1" name="libnetapi0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="fbb092175537e49ff5efa9c28df3acf59e5c9db9a36f0d84468c7876d5418fad" name="libnetapi0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="7347615a103fc92b2febeab91fd1fb3300d1f40d9c149215afe397dc68b5fc11" name="libnetapi0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="fe8bb6d053e635a42ae475a6ad9acde7e8cccb7e0dc3b3a91b05077732c3ae6d" name="libnetapi0" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="e9eee449b42a783faedfcdc309feb71d758fe17877cbfc3a20514e49848cf7dd" name="libnetapi0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="7ad741fe5d4046e5e4bbe0a3b69786b0c7f686c488c94908b680754e35ebc624" name="libnetapi0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="433fb5b24a07512bb5f8e46cc2aea61feb877a9dddfd592710bcd28b274900ae" name="libnfsidmap-sss" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="66ba9ae2e8f75e60eb9d3f762574bef97d24f15bda310b729ac31c650084fe1f" name="libnumbertext" arch="src">
  <version epoch="0" ver="1.0.5" rel="lp150.2.1"/>
  <changelog author="tchvatal@suse.com" date="1527681600">- Initial commit, needed by libreoffice</changelog>
  <changelog author="tchvatal@suse.com" date="1527681601">- Add config.h to installed headers as all headers require it</changelog>
  <changelog author="tchvatal@suse.com" date="1528113600">- Add patch to build on old gcc versions:
  * libnumbertext-oldgcc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539691200">- Update to 1.0.5:
  * Various fixes in numerical calculations and issues reported on
    libreoffice tracker
- Drop merged libnumbertext-oldgcc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540814400">- Add patch libnumbertext-boost.patch to fix build with boost
  and enable build on older distributions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540814401">- Drop libnumbertext-boost.patch and rather rely on new gcc, safer</changelog>
</package>
<package pkgid="c44cfc1df00586e4153cdba273cd7eaa120f97ab697746ca67eb7d76f9df6588" name="libnumbertext-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="lp150.2.1"/>
  <changelog author="tchvatal@suse.com" date="1527681600">- Initial commit, needed by libreoffice</changelog>
  <changelog author="tchvatal@suse.com" date="1527681601">- Add config.h to installed headers as all headers require it</changelog>
  <changelog author="tchvatal@suse.com" date="1528113600">- Add patch to build on old gcc versions:
  * libnumbertext-oldgcc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539691200">- Update to 1.0.5:
  * Various fixes in numerical calculations and issues reported on
    libreoffice tracker
- Drop merged libnumbertext-oldgcc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540814400">- Add patch libnumbertext-boost.patch to fix build with boost
  and enable build on older distributions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540814401">- Drop libnumbertext-boost.patch and rather rely on new gcc, safer</changelog>
</package>
<package pkgid="52b01d8c8348327acb3490afe4b401fc8f0cc8a999d2eb79f12352673b042479" name="libnumbertext-data" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="lp150.2.1"/>
  <changelog author="tchvatal@suse.com" date="1527681600">- Initial commit, needed by libreoffice</changelog>
  <changelog author="tchvatal@suse.com" date="1527681601">- Add config.h to installed headers as all headers require it</changelog>
  <changelog author="tchvatal@suse.com" date="1528113600">- Add patch to build on old gcc versions:
  * libnumbertext-oldgcc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539691200">- Update to 1.0.5:
  * Various fixes in numerical calculations and issues reported on
    libreoffice tracker
- Drop merged libnumbertext-oldgcc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540814400">- Add patch libnumbertext-boost.patch to fix build with boost
  and enable build on older distributions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540814401">- Drop libnumbertext-boost.patch and rather rely on new gcc, safer</changelog>
</package>
<package pkgid="f45f529f45978a8a59076005168bd151199ac135bca5641553aa8c2cc6c9eacd" name="libnumbertext-devel" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="lp150.2.1"/>
  <changelog author="tchvatal@suse.com" date="1527681600">- Initial commit, needed by libreoffice</changelog>
  <changelog author="tchvatal@suse.com" date="1527681601">- Add config.h to installed headers as all headers require it</changelog>
  <changelog author="tchvatal@suse.com" date="1528113600">- Add patch to build on old gcc versions:
  * libnumbertext-oldgcc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539691200">- Update to 1.0.5:
  * Various fixes in numerical calculations and issues reported on
    libreoffice tracker
- Drop merged libnumbertext-oldgcc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540814400">- Add patch libnumbertext-boost.patch to fix build with boost
  and enable build on older distributions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540814401">- Drop libnumbertext-boost.patch and rather rely on new gcc, safer</changelog>
</package>
<package pkgid="0668e430c92a54361ddc236cdf1862964a82c32f0a3e09c579f3701e6cd6445a" name="libnumbertext-tools" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="lp150.2.1"/>
  <changelog author="tchvatal@suse.com" date="1527681600">- Initial commit, needed by libreoffice</changelog>
  <changelog author="tchvatal@suse.com" date="1527681601">- Add config.h to installed headers as all headers require it</changelog>
  <changelog author="tchvatal@suse.com" date="1528113600">- Add patch to build on old gcc versions:
  * libnumbertext-oldgcc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539691200">- Update to 1.0.5:
  * Various fixes in numerical calculations and issues reported on
    libreoffice tracker
- Drop merged libnumbertext-oldgcc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540814400">- Add patch libnumbertext-boost.patch to fix build with boost
  and enable build on older distributions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540814401">- Drop libnumbertext-boost.patch and rather rely on new gcc, safer</changelog>
</package>
<package pkgid="58f20154adc19a2691135d02ffdad203f5f8adf4c227de251295364ec2f96e6c" name="libomp5-devel" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="68867d60ec9f9048cf895ec37be1cb6ca14f3cb9d2086af015aaa10d7a50a3c0" name="libopamgt-devel" arch="x86_64">
  <version epoch="0" ver="10.6.0" rel="lp150.4.3.1"/>
  <changelog author="ndas@suse.de" date="1458648000">- Initial package for fate#319232</changelog>
  <changelog author="ndas@suse.de" date="1469102400">- create sym link only if /etc/sysconfig/opa dir doesn't exist (bsc#989135).</changelog>
  <changelog author="josef.moellers@suse.com" date="1488283200">- Update to v10.3.1
  Unfortunately intel has not shared any
  information related to the changes
  (fate#321474)</changelog>
  <changelog author="pth@suse.de" date="1490702400">- BuildRequire rdma-core-devel not rdma-core
- BuildRequire libibmad-devel</changelog>
  <changelog author="josef.moellers@suse.com" date="1491220800">- Package opa-address-resolution-devel renamed to
  opa-address-resolution, then .so's and .h files packaged
  into a new opa-address-resolution-devel.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496923200">- Update to v10.4.0.0.197
  * No changelog available
- Update opa-ff_fix_suse_build_issue.patch and
  0001-Add-shebang-for-exp-files.patch to new sources</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1497268800">- Remove AutoReq: no</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1498219200">- Replace dependency from libibmad-devel to infiniband-diags-devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1503921600">- Updates patches to latest sources:
  * opa-ff_fix_suse_build_issue.patch replaced by
    opa-ff-suse-build-fixes.patch
  * 0001-Add-shebang-for-exp-files.patch replaced by
    opa-ff-add-shebang-for-exp-files.patch
- Add opa-ff-sigset-was-removed.patch to build with the latest glibc
  which does not expose &lt;bits/sigset.h&gt; anymore</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504612800">- Update _service file to allow auto updates from github</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Fix RPM groups. Implement shared library guideline.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505822400">- Update to v10.5.0.0.140
  * No changelog available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1511179200">- Update to v10.6.0.0.131
  * No changelog available
- Remove opa-ff-sigset-was-removed.patch as it was fixed upstream.
- Rebase opa-ff-suse-build-fixes.patch and
  opa-ff-add-shebang-for-exp-files.patch to the latest sources</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519905600">- Cleanup install section
- Install and package missing libopamgt (bsc#1083499)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522152000">- Update pseudo_opt path to %{_prefix}/lib/opa (bsc#1042721,bsc#1086934)
- Update opasysconfdif to %{_sysconfdir}/opa/
- Minor cleanup of sysconfig install code</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527076800">- Update opa-adress-resolution and libopasadb descriptions (bsc#1093880)</changelog>
</package>
<package pkgid="04b2857c7a528859a91c39162b53653cd1350f2a3ef265d5b508e9145db2eb2e" name="libopamgt0" arch="x86_64">
  <version epoch="0" ver="10.6.0" rel="lp150.4.3.1"/>
  <changelog author="ndas@suse.de" date="1458648000">- Initial package for fate#319232</changelog>
  <changelog author="ndas@suse.de" date="1469102400">- create sym link only if /etc/sysconfig/opa dir doesn't exist (bsc#989135).</changelog>
  <changelog author="josef.moellers@suse.com" date="1488283200">- Update to v10.3.1
  Unfortunately intel has not shared any
  information related to the changes
  (fate#321474)</changelog>
  <changelog author="pth@suse.de" date="1490702400">- BuildRequire rdma-core-devel not rdma-core
- BuildRequire libibmad-devel</changelog>
  <changelog author="josef.moellers@suse.com" date="1491220800">- Package opa-address-resolution-devel renamed to
  opa-address-resolution, then .so's and .h files packaged
  into a new opa-address-resolution-devel.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496923200">- Update to v10.4.0.0.197
  * No changelog available
- Update opa-ff_fix_suse_build_issue.patch and
  0001-Add-shebang-for-exp-files.patch to new sources</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1497268800">- Remove AutoReq: no</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1498219200">- Replace dependency from libibmad-devel to infiniband-diags-devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1503921600">- Updates patches to latest sources:
  * opa-ff_fix_suse_build_issue.patch replaced by
    opa-ff-suse-build-fixes.patch
  * 0001-Add-shebang-for-exp-files.patch replaced by
    opa-ff-add-shebang-for-exp-files.patch
- Add opa-ff-sigset-was-removed.patch to build with the latest glibc
  which does not expose &lt;bits/sigset.h&gt; anymore</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504612800">- Update _service file to allow auto updates from github</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Fix RPM groups. Implement shared library guideline.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505822400">- Update to v10.5.0.0.140
  * No changelog available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1511179200">- Update to v10.6.0.0.131
  * No changelog available
- Remove opa-ff-sigset-was-removed.patch as it was fixed upstream.
- Rebase opa-ff-suse-build-fixes.patch and
  opa-ff-add-shebang-for-exp-files.patch to the latest sources</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519905600">- Cleanup install section
- Install and package missing libopamgt (bsc#1083499)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522152000">- Update pseudo_opt path to %{_prefix}/lib/opa (bsc#1042721,bsc#1086934)
- Update opasysconfdif to %{_sysconfdir}/opa/
- Minor cleanup of sysconfig install code</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527076800">- Update opa-adress-resolution and libopasadb descriptions (bsc#1093880)</changelog>
</package>
<package pkgid="886e29a2dc0201182f40923514a41ae1a2c51df1096fbfa5b5edc7f56f4344f8" name="libopasadb1_0_0" arch="x86_64">
  <version epoch="0" ver="10.6.0" rel="lp150.4.3.1"/>
  <changelog author="ndas@suse.de" date="1458648000">- Initial package for fate#319232</changelog>
  <changelog author="ndas@suse.de" date="1469102400">- create sym link only if /etc/sysconfig/opa dir doesn't exist (bsc#989135).</changelog>
  <changelog author="josef.moellers@suse.com" date="1488283200">- Update to v10.3.1
  Unfortunately intel has not shared any
  information related to the changes
  (fate#321474)</changelog>
  <changelog author="pth@suse.de" date="1490702400">- BuildRequire rdma-core-devel not rdma-core
- BuildRequire libibmad-devel</changelog>
  <changelog author="josef.moellers@suse.com" date="1491220800">- Package opa-address-resolution-devel renamed to
  opa-address-resolution, then .so's and .h files packaged
  into a new opa-address-resolution-devel.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496923200">- Update to v10.4.0.0.197
  * No changelog available
- Update opa-ff_fix_suse_build_issue.patch and
  0001-Add-shebang-for-exp-files.patch to new sources</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1497268800">- Remove AutoReq: no</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1498219200">- Replace dependency from libibmad-devel to infiniband-diags-devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1503921600">- Updates patches to latest sources:
  * opa-ff_fix_suse_build_issue.patch replaced by
    opa-ff-suse-build-fixes.patch
  * 0001-Add-shebang-for-exp-files.patch replaced by
    opa-ff-add-shebang-for-exp-files.patch
- Add opa-ff-sigset-was-removed.patch to build with the latest glibc
  which does not expose &lt;bits/sigset.h&gt; anymore</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504612800">- Update _service file to allow auto updates from github</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Fix RPM groups. Implement shared library guideline.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505822400">- Update to v10.5.0.0.140
  * No changelog available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1511179200">- Update to v10.6.0.0.131
  * No changelog available
- Remove opa-ff-sigset-was-removed.patch as it was fixed upstream.
- Rebase opa-ff-suse-build-fixes.patch and
  opa-ff-add-shebang-for-exp-files.patch to the latest sources</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519905600">- Cleanup install section
- Install and package missing libopamgt (bsc#1083499)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522152000">- Update pseudo_opt path to %{_prefix}/lib/opa (bsc#1042721,bsc#1086934)
- Update opasysconfdif to %{_sysconfdir}/opa/
- Minor cleanup of sysconfig install code</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527076800">- Update opa-adress-resolution and libopasadb descriptions (bsc#1093880)</changelog>
</package>
<package pkgid="46a913f32be1d6903868bb20b4d00869394feba4dbed794325b791684c6d1545" name="libopencv3_3" arch="x86_64">
  <version epoch="0" ver="3.3.1" rel="lp150.4.3.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1456660800">- Added _constraints file to avoid random failures on small workers
  (at least for builds on PMBS)</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1457006400">- Added opencv_contrib_face-3.1.0.tar.bz2
  * This tarball is created to take only the face module from the
    contrib package. The Face module is required by libkface, which
    in its turn is required by digikam.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457524800">- Add python 3 support</changelog>
  <changelog author="toddrme2178@gmail.com" date="1458561600">- Test for python versions greater than or equal to the current
  version.</changelog>
  <changelog author="martin.liska@suse.com" date="1464177600">- Apply upstream patch opencv-gcc6-disable-pch.patch to disable
  PCH for GCC6.</changelog>
  <changelog author="dimstar@opensuse.org" date="1465300800">- In case we build using GCC6 (or newer), add -mlra to CFLAGS to
  workaround gcc bug
  https://gcc.gnu.org/bugzilla/show_bug.cgi?id=71294.</changelog>
  <changelog author="olaf@aepfle.de" date="1469102400">- Enable ffmpeg support unconditional</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1495972800">- Update to OpenCV 3.2.0
  - Results from 11 GSoC 2016 projects have been submitted to the library:
    + sinusoidal patterns for structured light and phase unwrapping module
    [Ambroise Moreau (Delia Passalacqua)]
    + DIS optical flow (excellent dense optical flow algorithm that is both
    significantly better and significantly faster than Farneback?s algorithm ?
    our baseline), and learning-based color constancy algorithms implementation
    [Alexander Bokov (Maksim Shabunin)]
    + CNN based tracking algorithm (GOTURN) [Tyan Vladimir (Antonella Cascitelli)]
    + PCAFlow and Global Patch Collider algorithms implementation
    [Vladislav Samsonov (Ethan Rublee)]
    + Multi-language OpenCV Tutorials in Python, C++ and Java
    [João Cartucho (Vincent Rabaud)]
    + New camera model and parallel processing for stitching pipeline
    [Jiri Horner (Bo Li)]
    + Optimizations and improvements of dnn module
    [Vitaliy Lyudvichenko (Anatoly Baksheev)]
    + Base64 and JSON support for file storage. Use names like
    ?myfilestorage.xml?base64? when writing file storage to store big chunks of
    numerical data in base64-encoded form.  [Iric Wu (Vadim Pisarevsky)]
    + tiny_dnn improvements and integration
    [Edgar Riba (Manuele Tamburrano, Stefano Fabri)]
    + Quantization and semantic saliency detection with tiny_dnn
    [Yida Wang (Manuele Tamburrano, Stefano Fabri)]
    + Word-spotting CNN based algorithm
    [Anguelos Nicolaou (Lluis Gomez)]
  - Contributions besides GSoC:
    + Greatly improved and accelerated dnn module in opencv_contrib:
  - Many new layers, including deconvolution, LSTM etc.
  - Support for semantic segmentation and SSD networks with samples.
  - TensorFlow importer + sample that runs Inception net by Google.
    + More image formats and camera backends supported
    + Interactive camera calibration app
    + Multiple algorithms implemented in opencv_contrib
    + Supported latest OSes, including Ubuntu 16.04 LTS and OSX 10.12
    + Lot?s of optimizations for IA and ARM archs using parallelism, vector
    instructions and new OpenCL kernels.
    + OpenCV now can use vendor-provided OpenVX and LAPACK/BLAS (including Intel MKL,
    Apple?s Accelerate, OpenBLAS and Atlas) for acceleration
- Refreshed opencv-build-compare.patch
- Dropped upstream opencv-gcc5.patch
- Replace opencv-gcc6-disable-pch.patch with upstream patch
  opencv-gcc6-fix-pch-support-PR8345.patch
- Enable TBB support (C++ threading library)
- Add dependency on openBLAS</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Cleanup a bit with spec-cleaner
- Use %cmake macros
- Remove the conditions that are not really needed
- Add tests conditional disabled by default
  * Many tests fail and there are missing testdata
- Switch to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1496664001">- Add conditional for the qt5/qt4 integration
  * This is used only for gui tools, library is not affected
- Add provides/obsoletes for the qt5 packages to allow migration
- Drop patch opencv-qt5-sobump.diff
  * Used only by the obsoleted qt5 variant</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500120000">- Add 0001-Do-not-include-glx.h-when-using-GLES.patch
  Fix build for 32bit ARM, including both GLES and desktop GL headers
  causes incompatible pointer type errors</changelog>
  <changelog author="kah0922@gmail.com" date="1507550400">- Update to 3.3
- Dropped obsolete patches
  * opencv-gcc6-fix-pch-support-PR8345.patch
  * opencv-gles.patch
- Updated opencv-build-compare.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Rename python subpackage to python2
- Do not explicitly require python-base for python subpackages</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Update to version 3.3.1:
  * Lots of various bugfixes
- Update source url</changelog>
  <changelog author="ecsos@opensuse.org" date="1509796800">- fix build error/unresolvable for Leap 42.2 and 42.3</changelog>
  <changelog author="ecsos@opensuse.org" date="1510142400">- change requires of python-numpy-devel to build in Leap and
  to not break factory in future</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Update licensing information</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1511611200">- Readd opencv-gles.patch, it is *not* included upstream; otherwise
  build breaks on all GLES Qt5 platforms (armv6l, armv7l, aarch64)
- add fix_processor_detection_for_32bit_on_64bit.patch
- Correctly set optimizations and dynamic dispatch on ARM, use
  OpenCV 3.3 syntax on x86.</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Add conditionals for python2 and python3 to allow us enabling
  only desired python variants when needed
- Do not depend on sphinx as py2 and py3 seem to collide there</changelog>
  <changelog author="qzheng@suse.com" date="1526904000">- Add opencv-imgproc-fix-bounds-check.patch:
  make backport from commit 4ca89db to fix imgproc(hdr)
  bounds check in HdrDecoder::checkSignature ( bsc#1074312,
  CVE-2017-18009 ).</changelog>
</package>
<package pkgid="6e58258fb0ef7dfc06ccd9806f6d7628a418fbacf2dd16dd8d7364495fc9cc81" name="libopeniscsiusr0_2_0" arch="x86_64">
  <version epoch="0" ver="2.0.876" rel="lp150.9.3.1"/>
  <changelog author="lduncan@suse.com" date="1504699200">- Start iscsi logins before remote filesystems (bsc#1028323),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1512216000">- Added fixes for working with latest gcc (7.2.1),
  updating: open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1513252800">- Fix vulnerabilities found in iscsiuio by qualsys (bsc#1072312),
  updating: open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1516622400">- Update to latest upstream vesion 2.0.876, with very few
  SUSE-specific modifications, namely around things upstream
  does not care about, like SUSE-specific systemd files. Also,
  version number modified to add "-suse", as usual. See
  the Changelog file for more details on changes in this
  upstream version.
  This replaces open-iscsi-2.0.875-suse.tar.bz2 with
  open-iscsi-2.0.876-suse.tar.bz2, and resets
  open-iscsi-SUSE-latest.diff.bz2 to contain only changes
  since the 2.0.876-suse tag.
  These changes added a new libopeniscsiusr.so library, as
  well as include files under a new open-iscsi-dev package,
  if you want to link against this library.
  The SPEC file was also cleaned up using spec-cleaner.</changelog>
  <changelog author="lduncan@suse.com" date="1516708800">- Removed the "rpm/" source directory from both the
  open-iscsi-2.0.876-suse.tar.bz2  and open-iscsi-SUSE-latest.diff.bz2
  files, since they are not needed for building and are not part
  of the upstream sources. They are still available under the
  git repository at github.com/hreinecke/open-iscsi.git. This means
  that changes to the spec file or the changes file will no longer
  require a change to the "*SUSE-latest*" file.</changelog>
  <changelog author="jengelh@inai.de" date="1518004800">- Trim filler wording from description.
  Update old commands/RPM variables to macros.
- Implement shared library packaging guideline.
- Do not let fdupes run across partitions.</changelog>
  <changelog author="lduncan@suse.com" date="1519128000">- Fix ARP booting issue with different subnets
  (bsc#1058463), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1519214400">- Ensure correct dependencies: main package must depend
  on (new) libopeniscsiusr package, and devel package
  must depend on main package (updating spec file)</changelog>
  <changelog author="lduncan@suse.com" date="1521720000">- Cleaned up complaints by gcc-8 about strings (bsc#1084640)
- Fixed rpmlint complaint about libopeniscsiusr summary
  not starting with a capital letter
- Fixed libopeniscsiusr global variable overload
- No functional changes. This updates:
  * open-iscsi-SUSE-latest.diff.bz2, and
  * open-iscsi.spec</changelog>
  <changelog author="lduncan@suse.com" date="1523620800">- Added 2 upstream commits to address issue of iscsi_if.h
  stayig in sync with kernel vesion (bsc#1086344), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524052800">- Added upstream patch to allow host_id of 0 (bsc#1089687),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524484800">- Ensure we can get qedi transport name (bsc#1090275), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1527768000">- Fix a core dump which can occur if iscsiuio is started then
  immediately stopped (bsc#1094797), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1529064000">- Updated SPEC file to use "%license" for COPYING file</changelog>
  <changelog author="lduncan@suse.com" date="1533643200">- Update to latest upstream, including fixes for iscsiuio
  (bsc#1100349), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1535716800">- iscsiuio: limit retries of dhpcv6 (bsc#1106694), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1536753600">- Use libkmod instead of running modprobe (bsc#1106685), updating
  the spec file, and:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540123200">- Restore space to output of "iscsiadm -m node" (bsc#1111608),
  from upstream commit, updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382400">- New library version needs to Obsolete the prevoius version,
  and add a note about *not* editing the SPEC file directly,
  both updating the SPEC file</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382401">- when iscsid started up and found stale sessions it tried
  forever to reconnect them, during which time the session
  info was printed incorrectly. Fix that printing, and add
  ability to limit reconnect retries (bsc#1088389), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="c52d47593b60dc8b9befa9072639a61e0d7e01999d1c9aeabb2a674c754f077f" name="libopeniscsiusr0_2_0" arch="x86_64">
  <version epoch="0" ver="2.0.876" rel="lp150.9.6.1"/>
  <changelog author="lduncan@suse.com" date="1516622400">- Update to latest upstream vesion 2.0.876, with very few
  SUSE-specific modifications, namely around things upstream
  does not care about, like SUSE-specific systemd files. Also,
  version number modified to add "-suse", as usual. See
  the Changelog file for more details on changes in this
  upstream version.
  This replaces open-iscsi-2.0.875-suse.tar.bz2 with
  open-iscsi-2.0.876-suse.tar.bz2, and resets
  open-iscsi-SUSE-latest.diff.bz2 to contain only changes
  since the 2.0.876-suse tag.
  These changes added a new libopeniscsiusr.so library, as
  well as include files under a new open-iscsi-dev package,
  if you want to link against this library.
  The SPEC file was also cleaned up using spec-cleaner.</changelog>
  <changelog author="lduncan@suse.com" date="1516708800">- Removed the "rpm/" source directory from both the
  open-iscsi-2.0.876-suse.tar.bz2  and open-iscsi-SUSE-latest.diff.bz2
  files, since they are not needed for building and are not part
  of the upstream sources. They are still available under the
  git repository at github.com/hreinecke/open-iscsi.git. This means
  that changes to the spec file or the changes file will no longer
  require a change to the "*SUSE-latest*" file.</changelog>
  <changelog author="jengelh@inai.de" date="1518004800">- Trim filler wording from description.
  Update old commands/RPM variables to macros.
- Implement shared library packaging guideline.
- Do not let fdupes run across partitions.</changelog>
  <changelog author="lduncan@suse.com" date="1519128000">- Fix ARP booting issue with different subnets
  (bsc#1058463), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1519214400">- Ensure correct dependencies: main package must depend
  on (new) libopeniscsiusr package, and devel package
  must depend on main package (updating spec file)</changelog>
  <changelog author="lduncan@suse.com" date="1521720000">- Cleaned up complaints by gcc-8 about strings (bsc#1084640)
- Fixed rpmlint complaint about libopeniscsiusr summary
  not starting with a capital letter
- Fixed libopeniscsiusr global variable overload
- No functional changes. This updates:
  * open-iscsi-SUSE-latest.diff.bz2, and
  * open-iscsi.spec</changelog>
  <changelog author="lduncan@suse.com" date="1523620800">- Added 2 upstream commits to address issue of iscsi_if.h
  stayig in sync with kernel vesion (bsc#1086344), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524052800">- Added upstream patch to allow host_id of 0 (bsc#1089687),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524484800">- Ensure we can get qedi transport name (bsc#1090275), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1527768000">- Fix a core dump which can occur if iscsiuio is started then
  immediately stopped (bsc#1094797), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1529064000">- Updated SPEC file to use "%license" for COPYING file</changelog>
  <changelog author="lduncan@suse.com" date="1533643200">- Update to latest upstream, including fixes for iscsiuio
  (bsc#1100349), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1535716800">- iscsiuio: limit retries of dhpcv6 (bsc#1106694), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1536753600">- Use libkmod instead of running modprobe (bsc#1106685), updating
  the spec file, and:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540123200">- Restore space to output of "iscsiadm -m node" (bsc#1111608),
  from upstream commit, updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382400">- New library version needs to Obsolete the prevoius version,
  and add a note about *not* editing the SPEC file directly,
  both updating the SPEC file</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382401">- when iscsid started up and found stale sessions it tried
  forever to reconnect them, during which time the session
  info was printed incorrectly. Fix that printing, and add
  ability to limit reconnect retries (bsc#1088389), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540728000">- Do not allow multiple sessions just because they were started
  in parallel (bsc#1107753)</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540728001">- iscsiuio: Do not flush tx queue on each uio interrupt. This
  makes ping to such NICs work better (bsc#1102589)</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1541505600">- Update idbm.c files to stop i586 string overflow warnings,
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="7c87e9fa1362e440ed0f8756fda573a8e6e7da5e54acd76468c1bd436ff2215a" name="libopenmpi1-gnu-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.7" rel="lp150.9.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Remove --enable-mpi-thread-multiple configure option as it
  silently disabled Infiniband support. (bsc#1058811, boo#1058750)
- Reenable fortan08 bindings as gcc &gt;= 5 is now the default</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340800">- Fix VERSION file during build so that ompi_info reports good infos</changelog>
  <changelog author="eich@suse.com" date="1506513600">- Converted to multibuild.
- Add HPC build using environment modules (FATE#321711).</changelog>
  <changelog author="eich@suse.com" date="1507032000">- Remove duplicates in %files section
- Set devel master package for HPC builds architecture dependent
- Make matching of *.mod files more generic to catch differences
  due to different gcc versions.</changelog>
  <changelog author="eich@suse.com" date="1507291200">- Set Name to %pname for "%flavor" == "" to avoid triggering
  errors in the Factory package validator.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507291201">- Add conflicts between the macros-devel packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507636800">- Add a ringdisabled flag to allow building only the standard flavor
  so not all flavors are pulled into staging rings
- Fix baselibs.conf generation (wrong directory and name)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507896000">- Fix pre/post install call to ldconfig</changelog>
  <changelog author="eich@suse.com" date="1509105600">- Make main openmpi built for HPC conflict with openmpi &lt; 1.10.7:
  this didn't have a separate config package.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Switch from gcc6 to gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516190400">- Only build openmpi-config in the standard flavor</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522065600">- Enable --enable-mpirun-prefix-by-default (bsc#1086821)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528372800">- Disable HPC builds for SLE12 (fate#325053)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1530014400">- Add openmpi-btl-openib-backport-device-params-from-master.patch
  to support newer HCA (bsc#1094689)</changelog>
  <changelog author="bwiedemann@suse.com" date="1531742400">- Drop config.log from rpm
- Add reproducible.patch to make package build reproducible
  (boo#1047218, boo#1084909, boo#1041090)</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536062400">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
</package>
<package pkgid="8ebb6c093108bf8cb80f93c43cd82cd04cd53434b4e4f1c3fe5ec0963cb83d53" name="libopenmpi2-gnu-hpc" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="lp150.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1500465600">- Fix module file name</changelog>
  <changelog author="schwab@linux-m68k.org" date="1502625600">- Enable ucx only on supported platforms</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504612800">- Update _service to allow auto updates from github</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504699200">- Update to 2.1.1.176.7aa585d4ff (2.1.2rc3)
  * Too many bug fixes to list. See NEWS
  * ppc64be support was dropped
- Drop btl-vader-work-around-ob1-pending-fragment-bug.patch and
  pml-ob1-do-not-access-fragment-after-calling-btl-rget.patch as
  they were merged upstream.
- Package NEWS file
- Add openmpi-pmix-configure-ac.patch to fix
  a compilation issue on Leap 42.3/SLE12 SP3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Update to 2.1.1.186.9a3ac9803c
- Drop openmpi-pmix-configure-ac.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Reenable fortan08 bindings as gcc &gt;= 5 is now the default
- Remove devel-headers configure option (reserved for MPI plugins developers)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505822400">- Remove --disable-mca-dso
  Related bug was due to openmpi/*.so wrongly packaged as devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340800">- Update to OpenMPI 2.1.2
  * Many bug fixes. See NEWS
- Fix VERSION file during build so that ompi_info reports good infos</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340801">- Convert to multibuild.
- Move all the doc to the docs RPM
- Add HPC build using environment modules (FATE#321711).
- Resync spec with openmpi and openmpi3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507291200">- Add conflicts between the macros-devel packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507636800">- Add a ringdisabled flag to allow building only the standard flavor
  so not all flavors are pulled into staging rings
- Fix baselibs.conf generation (wrong directory and name)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507896000">- Fix pre/post install call to ldconfig</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512648000">- Add btl-vader-change-the-way-fast-boxes-are-used.patch to
  fix a SEGV on i386 systems</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516190400">- Switch from gcc6 to gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890)
- Fix rpm macro file.
- Only build openmpi2-config for the standard flavor</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522065600">- Enable --enable-mpirun-prefix-by-default (bsc#1086821)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522152000">- Update to openmpi 2.1.3
  - Update internal PMIx version to 1.2.5.
  - Fix a problem with ompi_info reporting using param option.
  - Correct PMPI_Aint_{add|diff} to be functions (not subroutines)
    in the Fortran mpi_f08 module.
  - Fix a problem when doing MPI I/O using data types with large
    extents in conjunction with MPI_TYPE_CREATE_SUBARRAY.  Thanks to
  - Fix a problem when opening many files using MPI_FILE_OPEN.
  - Fix a problem with debuggers failing to attach to a running job.
  - Fix a problem when using madvise and the OpenIB BTL.
  - Fix a problem in the Vader BTL that resulted in failures of
    IMB under certain circumstances.
  - Fix a problem preventing Open MPI from working under Cygwin.
  - Reduce some verbosity being emitted by the USNIC BTL under certain
    circumstances.
  - Fix a problem with misdirection of SIGKILL.
  - Replace use of posix_memalign with malloc for small allocations.
  - Fix a problem with Open MPI's out of band TCP network for file descriptors
    greater than 32767.
  - Plug a memory leak in MPI_Mem_free().
- Drop btl-vader-change-the-way-fast-boxes-are-used.patch as it
  merged upstream.
- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1087031)</changelog>
  <changelog author="eich@suse.com" date="1525262400">- Create missing docs master package (bsc#1091714)</changelog>
  <changelog author="jjolly@suse.com" date="1526644800">- Added openmpi2-add-HCAs-to-mca-ini.patch
  * Adds necessary parameters for QLogic Corp. FastLinQ QL41000 (bsc#1092257)</changelog>
</package>
<package pkgid="93fdb3a14920c7e2f43f5306f6be3034ef0c26fcf5d21eeb9604cc7464ef2c09" name="libopenmpi2-gnu-hpc" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="lp150.3.6.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Update to 2.1.1.186.9a3ac9803c
- Drop openmpi-pmix-configure-ac.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Reenable fortan08 bindings as gcc &gt;= 5 is now the default
- Remove devel-headers configure option (reserved for MPI plugins developers)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505822400">- Remove --disable-mca-dso
  Related bug was due to openmpi/*.so wrongly packaged as devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340800">- Update to OpenMPI 2.1.2
  * Many bug fixes. See NEWS
- Fix VERSION file during build so that ompi_info reports good infos</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340801">- Convert to multibuild.
- Move all the doc to the docs RPM
- Add HPC build using environment modules (FATE#321711).
- Resync spec with openmpi and openmpi3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507291200">- Add conflicts between the macros-devel packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507636800">- Add a ringdisabled flag to allow building only the standard flavor
  so not all flavors are pulled into staging rings
- Fix baselibs.conf generation (wrong directory and name)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507896000">- Fix pre/post install call to ldconfig</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512648000">- Add btl-vader-change-the-way-fast-boxes-are-used.patch to
  fix a SEGV on i386 systems</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516190400">- Switch from gcc6 to gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890)
- Fix rpm macro file.
- Only build openmpi2-config for the standard flavor</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522065600">- Enable --enable-mpirun-prefix-by-default (bsc#1086821)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522152000">- Update to openmpi 2.1.3
  - Update internal PMIx version to 1.2.5.
  - Fix a problem with ompi_info reporting using param option.
  - Correct PMPI_Aint_{add|diff} to be functions (not subroutines)
    in the Fortran mpi_f08 module.
  - Fix a problem when doing MPI I/O using data types with large
    extents in conjunction with MPI_TYPE_CREATE_SUBARRAY.  Thanks to
  - Fix a problem when opening many files using MPI_FILE_OPEN.
  - Fix a problem with debuggers failing to attach to a running job.
  - Fix a problem when using madvise and the OpenIB BTL.
  - Fix a problem in the Vader BTL that resulted in failures of
    IMB under certain circumstances.
  - Fix a problem preventing Open MPI from working under Cygwin.
  - Reduce some verbosity being emitted by the USNIC BTL under certain
    circumstances.
  - Fix a problem with misdirection of SIGKILL.
  - Replace use of posix_memalign with malloc for small allocations.
  - Fix a problem with Open MPI's out of band TCP network for file descriptors
    greater than 32767.
  - Plug a memory leak in MPI_Mem_free().
- Drop btl-vader-change-the-way-fast-boxes-are-used.patch as it
  merged upstream.
- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1087031)</changelog>
  <changelog author="eich@suse.com" date="1525262400">- Create missing docs master package (bsc#1091714)</changelog>
  <changelog author="jjolly@suse.com" date="1526644800">- Added openmpi2-add-HCAs-to-mca-ini.patch
  * Adds necessary parameters for QLogic Corp. FastLinQ QL41000 (bsc#1092257)</changelog>
  <changelog author="jjolly@suse.com" date="1528372800">- Updated openmpi2-add-HCAs-to-mca-ini.patch
  * Adds Broadcom BCM57414 NetXtreme-E RDMA Ethernet Controller (bsc#1094689)</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi2:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
</package>
<package pkgid="75e8ce214b49a7bda6c1e31863a5ee005f1e526cf2ba5a67ccf3648d528e7ed3" name="libopenmpi_1_10_7-gnu-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.7" rel="lp150.9.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Remove --enable-mpi-thread-multiple configure option as it
  silently disabled Infiniband support. (bsc#1058811, boo#1058750)
- Reenable fortan08 bindings as gcc &gt;= 5 is now the default</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340800">- Fix VERSION file during build so that ompi_info reports good infos</changelog>
  <changelog author="eich@suse.com" date="1506513600">- Converted to multibuild.
- Add HPC build using environment modules (FATE#321711).</changelog>
  <changelog author="eich@suse.com" date="1507032000">- Remove duplicates in %files section
- Set devel master package for HPC builds architecture dependent
- Make matching of *.mod files more generic to catch differences
  due to different gcc versions.</changelog>
  <changelog author="eich@suse.com" date="1507291200">- Set Name to %pname for "%flavor" == "" to avoid triggering
  errors in the Factory package validator.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507291201">- Add conflicts between the macros-devel packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507636800">- Add a ringdisabled flag to allow building only the standard flavor
  so not all flavors are pulled into staging rings
- Fix baselibs.conf generation (wrong directory and name)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507896000">- Fix pre/post install call to ldconfig</changelog>
  <changelog author="eich@suse.com" date="1509105600">- Make main openmpi built for HPC conflict with openmpi &lt; 1.10.7:
  this didn't have a separate config package.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Switch from gcc6 to gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516190400">- Only build openmpi-config in the standard flavor</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522065600">- Enable --enable-mpirun-prefix-by-default (bsc#1086821)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528372800">- Disable HPC builds for SLE12 (fate#325053)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1530014400">- Add openmpi-btl-openib-backport-device-params-from-master.patch
  to support newer HCA (bsc#1094689)</changelog>
  <changelog author="bwiedemann@suse.com" date="1531742400">- Drop config.log from rpm
- Add reproducible.patch to make package build reproducible
  (boo#1047218, boo#1084909, boo#1041090)</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536062400">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
</package>
<package pkgid="44051707e02fc2f14817bbc8aeeff17d084b961c5498f926fee24fded92201c0" name="libopenmpi_2_1_3-gnu-hpc" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="lp150.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1500465600">- Fix module file name</changelog>
  <changelog author="schwab@linux-m68k.org" date="1502625600">- Enable ucx only on supported platforms</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504612800">- Update _service to allow auto updates from github</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504699200">- Update to 2.1.1.176.7aa585d4ff (2.1.2rc3)
  * Too many bug fixes to list. See NEWS
  * ppc64be support was dropped
- Drop btl-vader-work-around-ob1-pending-fragment-bug.patch and
  pml-ob1-do-not-access-fragment-after-calling-btl-rget.patch as
  they were merged upstream.
- Package NEWS file
- Add openmpi-pmix-configure-ac.patch to fix
  a compilation issue on Leap 42.3/SLE12 SP3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Update to 2.1.1.186.9a3ac9803c
- Drop openmpi-pmix-configure-ac.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Reenable fortan08 bindings as gcc &gt;= 5 is now the default
- Remove devel-headers configure option (reserved for MPI plugins developers)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505822400">- Remove --disable-mca-dso
  Related bug was due to openmpi/*.so wrongly packaged as devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340800">- Update to OpenMPI 2.1.2
  * Many bug fixes. See NEWS
- Fix VERSION file during build so that ompi_info reports good infos</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340801">- Convert to multibuild.
- Move all the doc to the docs RPM
- Add HPC build using environment modules (FATE#321711).
- Resync spec with openmpi and openmpi3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507291200">- Add conflicts between the macros-devel packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507636800">- Add a ringdisabled flag to allow building only the standard flavor
  so not all flavors are pulled into staging rings
- Fix baselibs.conf generation (wrong directory and name)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507896000">- Fix pre/post install call to ldconfig</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512648000">- Add btl-vader-change-the-way-fast-boxes-are-used.patch to
  fix a SEGV on i386 systems</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516190400">- Switch from gcc6 to gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890)
- Fix rpm macro file.
- Only build openmpi2-config for the standard flavor</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522065600">- Enable --enable-mpirun-prefix-by-default (bsc#1086821)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522152000">- Update to openmpi 2.1.3
  - Update internal PMIx version to 1.2.5.
  - Fix a problem with ompi_info reporting using param option.
  - Correct PMPI_Aint_{add|diff} to be functions (not subroutines)
    in the Fortran mpi_f08 module.
  - Fix a problem when doing MPI I/O using data types with large
    extents in conjunction with MPI_TYPE_CREATE_SUBARRAY.  Thanks to
  - Fix a problem when opening many files using MPI_FILE_OPEN.
  - Fix a problem with debuggers failing to attach to a running job.
  - Fix a problem when using madvise and the OpenIB BTL.
  - Fix a problem in the Vader BTL that resulted in failures of
    IMB under certain circumstances.
  - Fix a problem preventing Open MPI from working under Cygwin.
  - Reduce some verbosity being emitted by the USNIC BTL under certain
    circumstances.
  - Fix a problem with misdirection of SIGKILL.
  - Replace use of posix_memalign with malloc for small allocations.
  - Fix a problem with Open MPI's out of band TCP network for file descriptors
    greater than 32767.
  - Plug a memory leak in MPI_Mem_free().
- Drop btl-vader-change-the-way-fast-boxes-are-used.patch as it
  merged upstream.
- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1087031)</changelog>
  <changelog author="eich@suse.com" date="1525262400">- Create missing docs master package (bsc#1091714)</changelog>
  <changelog author="jjolly@suse.com" date="1526644800">- Added openmpi2-add-HCAs-to-mca-ini.patch
  * Adds necessary parameters for QLogic Corp. FastLinQ QL41000 (bsc#1092257)</changelog>
</package>
<package pkgid="8071e5f1f1e8b8ff887b78bf1c01e4c28a596c8103faaae79b74d1224ff579f6" name="libopenmpi_2_1_3-gnu-hpc" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="lp150.3.6.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Update to 2.1.1.186.9a3ac9803c
- Drop openmpi-pmix-configure-ac.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Reenable fortan08 bindings as gcc &gt;= 5 is now the default
- Remove devel-headers configure option (reserved for MPI plugins developers)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505822400">- Remove --disable-mca-dso
  Related bug was due to openmpi/*.so wrongly packaged as devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340800">- Update to OpenMPI 2.1.2
  * Many bug fixes. See NEWS
- Fix VERSION file during build so that ompi_info reports good infos</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340801">- Convert to multibuild.
- Move all the doc to the docs RPM
- Add HPC build using environment modules (FATE#321711).
- Resync spec with openmpi and openmpi3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507291200">- Add conflicts between the macros-devel packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507636800">- Add a ringdisabled flag to allow building only the standard flavor
  so not all flavors are pulled into staging rings
- Fix baselibs.conf generation (wrong directory and name)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507896000">- Fix pre/post install call to ldconfig</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512648000">- Add btl-vader-change-the-way-fast-boxes-are-used.patch to
  fix a SEGV on i386 systems</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516190400">- Switch from gcc6 to gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890)
- Fix rpm macro file.
- Only build openmpi2-config for the standard flavor</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522065600">- Enable --enable-mpirun-prefix-by-default (bsc#1086821)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522152000">- Update to openmpi 2.1.3
  - Update internal PMIx version to 1.2.5.
  - Fix a problem with ompi_info reporting using param option.
  - Correct PMPI_Aint_{add|diff} to be functions (not subroutines)
    in the Fortran mpi_f08 module.
  - Fix a problem when doing MPI I/O using data types with large
    extents in conjunction with MPI_TYPE_CREATE_SUBARRAY.  Thanks to
  - Fix a problem when opening many files using MPI_FILE_OPEN.
  - Fix a problem with debuggers failing to attach to a running job.
  - Fix a problem when using madvise and the OpenIB BTL.
  - Fix a problem in the Vader BTL that resulted in failures of
    IMB under certain circumstances.
  - Fix a problem preventing Open MPI from working under Cygwin.
  - Reduce some verbosity being emitted by the USNIC BTL under certain
    circumstances.
  - Fix a problem with misdirection of SIGKILL.
  - Replace use of posix_memalign with malloc for small allocations.
  - Fix a problem with Open MPI's out of band TCP network for file descriptors
    greater than 32767.
  - Plug a memory leak in MPI_Mem_free().
- Drop btl-vader-change-the-way-fast-boxes-are-used.patch as it
  merged upstream.
- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1087031)</changelog>
  <changelog author="eich@suse.com" date="1525262400">- Create missing docs master package (bsc#1091714)</changelog>
  <changelog author="jjolly@suse.com" date="1526644800">- Added openmpi2-add-HCAs-to-mca-ini.patch
  * Adds necessary parameters for QLogic Corp. FastLinQ QL41000 (bsc#1092257)</changelog>
  <changelog author="jjolly@suse.com" date="1528372800">- Updated openmpi2-add-HCAs-to-mca-ini.patch
  * Adds Broadcom BCM57414 NetXtreme-E RDMA Ethernet Controller (bsc#1094689)</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi2:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
</package>
<package pkgid="8ea50768c45f00c98c518014ccf2fb40385898a07a7100355e8e0829511c46ea" name="libopenmpt" arch="src">
  <version epoch="0" ver="0.3.9" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
</package>
<package pkgid="899f4bd46576ad07c7ec69ff0041736595810f93bcea2a0a484be5df845c2c61" name="libopenmpt-devel" arch="x86_64">
  <version epoch="0" ver="0.3.9" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
</package>
<package pkgid="dea984a4d239efea7a2c171db15605f0a918ddf32fbd69d21b4a1a0917a38491" name="libopenmpt0" arch="x86_64">
  <version epoch="0" ver="0.3.9" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
</package>
<package pkgid="c11362967c5bd963b12fae2f38152199fde024cf35f2cf97dd7900492ef7f2cf" name="libopenmpt0-32bit" arch="x86_64">
  <version epoch="0" ver="0.3.9" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
</package>
<package pkgid="f26b53aded53974961d5d0a92966b697b80355e5b5386e1c3f905eb2273de20a" name="libopenmpt_modplug1" arch="x86_64">
  <version epoch="0" ver="0.3.9" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
</package>
<package pkgid="ca5e5e14f25d305c7afab140cf35f09bd305b0bd96b3f363c20e3c4d9702c215" name="libopenmpt_modplug1-32bit" arch="x86_64">
  <version epoch="0" ver="0.3.9" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
</package>
<package pkgid="a9a675fa29e710a27c8f226a0a26ad3b9c18384c807121791c95224a71251e03" name="libopenscap8" arch="x86_64">
  <version epoch="0" ver="1.2.16" rel="lp150.6.3.1"/>
  <changelog author="meissner@suse.com" date="1444046400">- openscap 1.2.6 release
  - New features
  - introduced OpenSCAP user manual
  - improved OVAL 5.11.1 support
  - added OVAL 5.11.1 XSD schemas and schematrons
  - support for core/platform schema versions
  - support for check_existence attribute in state entities
  - support for CIM datetime format
  - amended behavior of mask attribute
  - added support for remote .xml.bz2 files (use with --fetch-remote-resources)
  - rewrote oscap-docker to python, deeper integration with Atomic Host
  - introduced CPE name for Fedora 24 to the internal dictionary
  - HTML report &amp; guide
  - results can be grouped by according to various aspects
  - printing supported (interactive elements are now hidden when printing)
  - table of content now shows only selected items (rule &amp; groups)
  - references to RHSA are presented as links to website (rhbz#1243808)
  - Maintenance
  - scap-as-rpm can now build source rpm packages (srpms) (trac#469)
  - scap-as-rpm now supports python3
  - refactored oval processing into oval_session structure
  - many smaller bugfixes and new tests
- new openscap-docker subpackage</changelog>
  <changelog author="meissner@suse.com" date="1444392000">- openscap-new-inventory.patch: find out the CPE ids of
  SUSE Linux Enterprise and openSUSE versions.</changelog>
  <changelog author="meissner@suse.com" date="1449144000">- openscap 1.2.7 release
  - New features
  - OVAL 5.11.1 fully supported
  - oscap-vm - tool for offline scanning of virtual machines
  - verbose mode
  - added SLED, SLES and OpenSUSE CPE names
  - show profile description in HTML report and guide
  - group rules by PCI DSS identifier in HTML report
  - preliminary support for Ansible Playbooks within xccdf:fix
  - added "How to contribute" and "Versioning" documents
  - Maintenance
  - using bziped RHSA documents in oscap-docker
  - fixed errors of sysctl probe
  - fixed skip-valid option (issue #203)
  - fixed segmentation faults in SCE content reporting (issue #231)
  - fixed tracebacks of scap-as-rpm
  - fixed invalid memory reads in rpmverifyfile probe (issue #212)
  - updated README and user manual
  - many small bugfixes and new tests
- openscap-new-inventory.patch: upstreamed
- fix-missing-include.dif: refreshed, 1 hunk upstream</changelog>
  <changelog author="meissner@suse.com" date="1453204800">- openscap 1.2.8 release
  - Maintenance
  - textfilecontent54_probe does not produce false positives on non-UTF files (rhbz #1285757)
  - fixed oscap-docker
  - small improvements in verbose mode
  - oscap info module shows information about tailoring files
  - fixed build with CCE (issue #264)
  - fixed XCCDF score computation (issue #272)
  - fixed segmentation fault in variable probe (issue #277)
  - fixed broken support for OVAL directives
  - fixed bash completion
  - plugged memory leaks
  - fixed fresh static analysis (coverity) findings
  - fixed shellcheck warnings
  - new tests
  - refactoring in datastream module
  - many small bugfixes and typo fixes</changelog>
  <changelog author="meissner@suse.com" date="1458734400">- enable the SCE (script checking engine)
  packaged in "openscap-engine-sce" subpackage.
- enable the CCE (Common Configuration Enumeration)</changelog>
  <changelog author="meissner@suse.com" date="1461326400">- openscap 1.2.9 release
  - New features
  - oscap-chroot - a tool for offline scanning of filesystems mounted at arbitrary paths
  - enabled offline scanning in many probes
  - support for SCE in data streams
  - many improvements of verbose mode
  - verbose messages can be written on stderr
  - runlevel probe supports SUSE systems
  - new upstream tests
  - Maintenance
  - a lot of refactoring
  - fixes in various tests
  - OCILs are correctly placed in datastreams (issue #364)
  - oscap-vm can work with fusermount when guestunmount is not available
  - fixed oscap-docker HTTP communication issues (issue #304)
  - fixed oscap-docker tracebacks (issue #303, #317)
  - fixed container mounting in oscap-docker (issue #329)
  - added Fedora 25 CPE
  - only non-empty profiles are built (rhbz#1256879, rhbz#1302230)
  - fixed compiler errors on RHEL5 and SLES11
  - fixed sorting of groups in HTML report (issue #342)
  - fixed version/@time and version/@update in XCCDF Benchmark
  - fixed CPE definitions to work also in offline mode
  - fixed sysctl probe (issue #258)
  - fixed manual page for oscap-ssh (rhbz#1299969)
  - updated user manuals and manual pages
  - updated .gitignore
- dropped fix-missing-include.dif, not needed anymore</changelog>
  <changelog author="meissner@suse.com" date="1476792000">- openscap-1.2.11 / 14-10-2016
  - New features
  - huge speed-up of generating HTML reports and guides
  - support remote datastream components (issue #526)
  - support tailoring of external datastreams
  - various attributes of remediation scripts are now shown in HTML report (issue #541)
  - new option generating OVAL results without system characteristics
  - remediation scripts in HTML report are now collapsed
  - support for extracting Ansible playbooks
  - enabled fetching remote resources in OVAL module
  - added Wind River Linux CPE
  - Maintenance
  - updated jQuery and bootstrap libraries in HTML reports
  - extended, improved and updated user manual
  - fixed issues with proxy in oscap-docker (RHBZ #1351952)
  - fixed a bug in OVAL arithmetic function
  - fixed a segmentation fault (issue #529)
  - fixed results of XCCDF rules with @role="unscored" (issue #525)
  - fixed invalid characters in OVAL results (issue #468)
  - fixed a segmentation fault in tailoring (RHBZ #1367896)
  - updated SUSE 11 CPE
  - fixed many memory issues
  - large refactoring of datastream module
  - new tests in upstream test suite
  - various small fixes and improvements
- openscap-1.2.10 / 29-06-2016
  - New features
  - support --benchmark-id when running `oscap xccdf generate guide`
  - added CPE support for OpenSUSE 42.1
  - Maintenance
  - oscap-docker fixed to be source compatible with both Python 2 and 3
  - fixed offline mode in rpmverifypackage probe
  - fixed scanning of non-RHEL containers in oscap-docker (issue #427)
  - fixed regression in loading a datastream session (RHBZ #1250072)
  - fixed missing SCE results in XCCDF reports (issue #394)
  - fixed a segmentation fault (issue #370)
  - fix error message when OVAL generator element is missing (issue #345)
  - fixed failing rpminfo probe
  - fixed compilation on RHEL5 (issue #393)
  - new tests in upstream test suite
  - test suite is able to run on Fedora 24
  - fixed remediation scripts appearance in HTML guides (issue #460)
  - fixed autoconf build
  - small fixes, refactoring, small documentation improvements</changelog>
  <changelog author="meissner@suse.com" date="1479729600">- openscap-1.2.12 / 21-11-2016
  - New features
  - separated stdout and stderr in SCE results and HTML report
  - HTML reports contain [ref] links for rules and groups
  - Maintenance
  - fixed ARF errors reported by the SCAPval tool
  - fixed CVE parsing (issue #550)
  - fixed namespace of ARF vocabulary according to NIST SP800-126 errata
  - fixed exporting OVAL Windows namespaces
  - fixed injecting xccdf:check-content-ref references in ARF results
  - fixed oscap-docker incompliance reporting (issue #475, RHBZ #1387248)
  - fixed oscap-docker man page (RHBZ #1387166)
  - fixed memory leaks and resource leaks
  - small fixes and refactoring, test suite fixes</changelog>
  <changelog author="meissner@suse.com" date="1483704000">- openscap-1.2.13 / 05-01-2017
  - Maintenance
  - we always build system_info OVAL probe, fixed configure output accordingly
  - warn when the user requests to generate an ARF from XCCDF 1.1
  - fixed a segfault when loading an OVAL file with invalid family attribute
  - added --thin-results CLI override to oscap xccdf eval
  - added --without-syschar CLI override to oscap xccdf eval
  - fixed a segfault when freeing xccdf_policy of the default profile
  - removed ARF schematron workaround when there are no applicable checks
  - fixed verbose output in oscap xccdf generate fix
  - do not filter fix by applicability when generating remediations from results
  - fixed memory leaks, resource leaks and other minor issues</changelog>
  <changelog author="meissner@suse.com" date="1490097600">- openscap-1.2.14 / 21-03-2017
  - New features
  - Detailed information about ARF files in 'oscap info' (issue #664)
  - XSLT template creating XCCDF files from OVAL files
  - Generating remediation scripts from ARF
  - Significant improvements of User Manual (issue #249, #513)
  - HTML report UX improvements (issue #601, #620, #622, #655)
  - Warnings are shown by default
  - Verbose mode is available in 'xccdf remediate' module (issue #520)
  - Added Fedora 26, Fedora 27 and OpenSUSE 42.2 CPEs (issue #698)
  - Support for Anaconda remediation in HTML report
  - Maintenance
  - Fixed CPE dictionary to identify RHEVH as RHEL7 (RHBZ #1420038)
  - Fixed systemd probes crashes inside containers (RHBZ #1431186, issue #700)
  - Added a warning on non-existing XCCDF Benchmarks (issue #614)
  - Fixed output on terminals with white background (RHBZ #1365911, issue #512)
  - Error handling in oscap-vm (RHBZ #1391754)
  - Fixed SCE stderr stalling (RHBZ #1420811)
  - Fixed Android OVAL schema (issue #279)
  - Fixed absolute filepath parsing in OVAL (RHBZ #1312831, #1312824)
  - Fixes based on Coverity scan report (issue #581, #634, #681)
  - Fixed duplicated error messages (issue #707)
  - Fixed XCCDF score calculation (issue #617)
  - Fixed segmentation faults in RPM probes (RHBZ #1414303, #1414312)
  - Fixed failing DataStream build if "@" is in filepath
  - Fixed missing header in result-oriented Ansible remediations
  - Memory leak and resource leak fixes (issue #635, #636)
  - New upstream tests
  - Many minor fixes and improvements</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Remove line-trailing whitespace from last changelog entry.
- Rename %soname to %sover to better reflect its use.
- Replace unnecessary %__-type macro indirections.</changelog>
  <changelog author="meissner@suse.com" date="1503662400">- openscap-1.2.15 / 25-08-2017
  - New features
  - short profile names can be used instead of long IDs
  - new option --rule allows to evaluate only a single rule
  - new option --fix-type in "oscap xccdf generate fix" allows choosing
    remediation script type without typing long URL
  - "oscap info" shows profile titles
  - OVAL details in HTML report are easier to read
  - HTML report is smaller because unselected rules are removed
  - HTML report supports NIST 800-171 and CJIS
  - remediation scripts contain headers with useful information
  - remediation scripts report progress when they run
  - basic support for Oracle Linux (CPEs, runlevels)
  - remediation scripts can be generated from datastreams that contain
    multiple XCCDF benchmarks (issue #772)
  - basic support for OVAL 5.11.2 (only schemas, no features)
  - enabled offline RPM database in rpminfo probe (issue #778)
  - added Fedora 28 CPE
  - Maintenance
  - fixed oscap-docker with Docker &gt;= 2.0 (issue #794)
  - fixed behavior of sysctl probe to be consistent with sysctl tool
  - fixed generating remediation scripts (issue #723, #773)
  - severity of tailored rules is not discarded (issue #739)
  - fixed errors in RPM probes initialization
  - oscap-docker shows all warnings reported by oscap (issue #713)
  - small improvements in verbose mode
  - standard C operations are used instead of custom OpenSCAP operations
  - fixed compiler warnings
  - fixed missing header files
  - fixed resource leaks (issue #715)
  - fixed pkgconfig file (RHBZ #1414777)
  - refactoring
  - documentation fixes and improvements</changelog>
  <changelog author="meissner@suse.com" date="1510660800">- openscap-1.2.16
  - New features
  - oscap can generate output that is compatible with STIG Viewer.
  - CVRF parsing and export has been implemented.
  - oscap info command has been expanded.
  - The AIX platform is supported.
  - Many documentation improvements.
  - Numerous other improvements of existing features.
  - Maintenance
  - Huge cross-platform improvements.
  - Memory leaks fixed (RHBZ#1485876).
  - SELinux fixes.
  - Many coverity fixes.
  - Numerous other bugfixes.
- buildrequire procps-devel</changelog>
  <changelog author="meissner@suse.com" date="1510660801">- openscap-productid-cvrf.patch: add a --productid selector
  for "oscap cvrf" as upstream does not detect the system yet.
  (might go away)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1519300800">- disable scap-as-rpm binary to avoid python2 dependency. (bsc#1082135)</changelog>
  <changelog author="meissner@suse.com" date="1520251200">- replace oscap-scan.init by oscap-scan.service, add a /usr/bin/oscap-scan
  helper tool for this. (bsc#1083115)</changelog>
  <changelog author="jengelh@inai.de" date="1520251201">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="meissner@suse.com" date="1524744000">- openscap-new-suse.patch: handle SLE15 and openSUSE Leap 42.3 and 15.0
  (bsc#1091040)</changelog>
  <changelog author="meissner@suse.com" date="1534852800">- 0001-add-a-safety-n-before-the-end-script-comment.patch:
  append a \n to fix scripts, our default ruleset does not have them.
  (bsc#1102706)
- remove cpe id from sample scap, so it runs everywhere. (bsc#1091040)</changelog>
</package>
<package pkgid="97e74da5e5bc752a0fe47c86d915c8e28c1365d6d06c2f7145cd8b22a4179018" name="libopenscap_sce8" arch="x86_64">
  <version epoch="0" ver="1.2.16" rel="lp150.6.3.1"/>
  <changelog author="meissner@suse.com" date="1444046400">- openscap 1.2.6 release
  - New features
  - introduced OpenSCAP user manual
  - improved OVAL 5.11.1 support
  - added OVAL 5.11.1 XSD schemas and schematrons
  - support for core/platform schema versions
  - support for check_existence attribute in state entities
  - support for CIM datetime format
  - amended behavior of mask attribute
  - added support for remote .xml.bz2 files (use with --fetch-remote-resources)
  - rewrote oscap-docker to python, deeper integration with Atomic Host
  - introduced CPE name for Fedora 24 to the internal dictionary
  - HTML report &amp; guide
  - results can be grouped by according to various aspects
  - printing supported (interactive elements are now hidden when printing)
  - table of content now shows only selected items (rule &amp; groups)
  - references to RHSA are presented as links to website (rhbz#1243808)
  - Maintenance
  - scap-as-rpm can now build source rpm packages (srpms) (trac#469)
  - scap-as-rpm now supports python3
  - refactored oval processing into oval_session structure
  - many smaller bugfixes and new tests
- new openscap-docker subpackage</changelog>
  <changelog author="meissner@suse.com" date="1444392000">- openscap-new-inventory.patch: find out the CPE ids of
  SUSE Linux Enterprise and openSUSE versions.</changelog>
  <changelog author="meissner@suse.com" date="1449144000">- openscap 1.2.7 release
  - New features
  - OVAL 5.11.1 fully supported
  - oscap-vm - tool for offline scanning of virtual machines
  - verbose mode
  - added SLED, SLES and OpenSUSE CPE names
  - show profile description in HTML report and guide
  - group rules by PCI DSS identifier in HTML report
  - preliminary support for Ansible Playbooks within xccdf:fix
  - added "How to contribute" and "Versioning" documents
  - Maintenance
  - using bziped RHSA documents in oscap-docker
  - fixed errors of sysctl probe
  - fixed skip-valid option (issue #203)
  - fixed segmentation faults in SCE content reporting (issue #231)
  - fixed tracebacks of scap-as-rpm
  - fixed invalid memory reads in rpmverifyfile probe (issue #212)
  - updated README and user manual
  - many small bugfixes and new tests
- openscap-new-inventory.patch: upstreamed
- fix-missing-include.dif: refreshed, 1 hunk upstream</changelog>
  <changelog author="meissner@suse.com" date="1453204800">- openscap 1.2.8 release
  - Maintenance
  - textfilecontent54_probe does not produce false positives on non-UTF files (rhbz #1285757)
  - fixed oscap-docker
  - small improvements in verbose mode
  - oscap info module shows information about tailoring files
  - fixed build with CCE (issue #264)
  - fixed XCCDF score computation (issue #272)
  - fixed segmentation fault in variable probe (issue #277)
  - fixed broken support for OVAL directives
  - fixed bash completion
  - plugged memory leaks
  - fixed fresh static analysis (coverity) findings
  - fixed shellcheck warnings
  - new tests
  - refactoring in datastream module
  - many small bugfixes and typo fixes</changelog>
  <changelog author="meissner@suse.com" date="1458734400">- enable the SCE (script checking engine)
  packaged in "openscap-engine-sce" subpackage.
- enable the CCE (Common Configuration Enumeration)</changelog>
  <changelog author="meissner@suse.com" date="1461326400">- openscap 1.2.9 release
  - New features
  - oscap-chroot - a tool for offline scanning of filesystems mounted at arbitrary paths
  - enabled offline scanning in many probes
  - support for SCE in data streams
  - many improvements of verbose mode
  - verbose messages can be written on stderr
  - runlevel probe supports SUSE systems
  - new upstream tests
  - Maintenance
  - a lot of refactoring
  - fixes in various tests
  - OCILs are correctly placed in datastreams (issue #364)
  - oscap-vm can work with fusermount when guestunmount is not available
  - fixed oscap-docker HTTP communication issues (issue #304)
  - fixed oscap-docker tracebacks (issue #303, #317)
  - fixed container mounting in oscap-docker (issue #329)
  - added Fedora 25 CPE
  - only non-empty profiles are built (rhbz#1256879, rhbz#1302230)
  - fixed compiler errors on RHEL5 and SLES11
  - fixed sorting of groups in HTML report (issue #342)
  - fixed version/@time and version/@update in XCCDF Benchmark
  - fixed CPE definitions to work also in offline mode
  - fixed sysctl probe (issue #258)
  - fixed manual page for oscap-ssh (rhbz#1299969)
  - updated user manuals and manual pages
  - updated .gitignore
- dropped fix-missing-include.dif, not needed anymore</changelog>
  <changelog author="meissner@suse.com" date="1476792000">- openscap-1.2.11 / 14-10-2016
  - New features
  - huge speed-up of generating HTML reports and guides
  - support remote datastream components (issue #526)
  - support tailoring of external datastreams
  - various attributes of remediation scripts are now shown in HTML report (issue #541)
  - new option generating OVAL results without system characteristics
  - remediation scripts in HTML report are now collapsed
  - support for extracting Ansible playbooks
  - enabled fetching remote resources in OVAL module
  - added Wind River Linux CPE
  - Maintenance
  - updated jQuery and bootstrap libraries in HTML reports
  - extended, improved and updated user manual
  - fixed issues with proxy in oscap-docker (RHBZ #1351952)
  - fixed a bug in OVAL arithmetic function
  - fixed a segmentation fault (issue #529)
  - fixed results of XCCDF rules with @role="unscored" (issue #525)
  - fixed invalid characters in OVAL results (issue #468)
  - fixed a segmentation fault in tailoring (RHBZ #1367896)
  - updated SUSE 11 CPE
  - fixed many memory issues
  - large refactoring of datastream module
  - new tests in upstream test suite
  - various small fixes and improvements
- openscap-1.2.10 / 29-06-2016
  - New features
  - support --benchmark-id when running `oscap xccdf generate guide`
  - added CPE support for OpenSUSE 42.1
  - Maintenance
  - oscap-docker fixed to be source compatible with both Python 2 and 3
  - fixed offline mode in rpmverifypackage probe
  - fixed scanning of non-RHEL containers in oscap-docker (issue #427)
  - fixed regression in loading a datastream session (RHBZ #1250072)
  - fixed missing SCE results in XCCDF reports (issue #394)
  - fixed a segmentation fault (issue #370)
  - fix error message when OVAL generator element is missing (issue #345)
  - fixed failing rpminfo probe
  - fixed compilation on RHEL5 (issue #393)
  - new tests in upstream test suite
  - test suite is able to run on Fedora 24
  - fixed remediation scripts appearance in HTML guides (issue #460)
  - fixed autoconf build
  - small fixes, refactoring, small documentation improvements</changelog>
  <changelog author="meissner@suse.com" date="1479729600">- openscap-1.2.12 / 21-11-2016
  - New features
  - separated stdout and stderr in SCE results and HTML report
  - HTML reports contain [ref] links for rules and groups
  - Maintenance
  - fixed ARF errors reported by the SCAPval tool
  - fixed CVE parsing (issue #550)
  - fixed namespace of ARF vocabulary according to NIST SP800-126 errata
  - fixed exporting OVAL Windows namespaces
  - fixed injecting xccdf:check-content-ref references in ARF results
  - fixed oscap-docker incompliance reporting (issue #475, RHBZ #1387248)
  - fixed oscap-docker man page (RHBZ #1387166)
  - fixed memory leaks and resource leaks
  - small fixes and refactoring, test suite fixes</changelog>
  <changelog author="meissner@suse.com" date="1483704000">- openscap-1.2.13 / 05-01-2017
  - Maintenance
  - we always build system_info OVAL probe, fixed configure output accordingly
  - warn when the user requests to generate an ARF from XCCDF 1.1
  - fixed a segfault when loading an OVAL file with invalid family attribute
  - added --thin-results CLI override to oscap xccdf eval
  - added --without-syschar CLI override to oscap xccdf eval
  - fixed a segfault when freeing xccdf_policy of the default profile
  - removed ARF schematron workaround when there are no applicable checks
  - fixed verbose output in oscap xccdf generate fix
  - do not filter fix by applicability when generating remediations from results
  - fixed memory leaks, resource leaks and other minor issues</changelog>
  <changelog author="meissner@suse.com" date="1490097600">- openscap-1.2.14 / 21-03-2017
  - New features
  - Detailed information about ARF files in 'oscap info' (issue #664)
  - XSLT template creating XCCDF files from OVAL files
  - Generating remediation scripts from ARF
  - Significant improvements of User Manual (issue #249, #513)
  - HTML report UX improvements (issue #601, #620, #622, #655)
  - Warnings are shown by default
  - Verbose mode is available in 'xccdf remediate' module (issue #520)
  - Added Fedora 26, Fedora 27 and OpenSUSE 42.2 CPEs (issue #698)
  - Support for Anaconda remediation in HTML report
  - Maintenance
  - Fixed CPE dictionary to identify RHEVH as RHEL7 (RHBZ #1420038)
  - Fixed systemd probes crashes inside containers (RHBZ #1431186, issue #700)
  - Added a warning on non-existing XCCDF Benchmarks (issue #614)
  - Fixed output on terminals with white background (RHBZ #1365911, issue #512)
  - Error handling in oscap-vm (RHBZ #1391754)
  - Fixed SCE stderr stalling (RHBZ #1420811)
  - Fixed Android OVAL schema (issue #279)
  - Fixed absolute filepath parsing in OVAL (RHBZ #1312831, #1312824)
  - Fixes based on Coverity scan report (issue #581, #634, #681)
  - Fixed duplicated error messages (issue #707)
  - Fixed XCCDF score calculation (issue #617)
  - Fixed segmentation faults in RPM probes (RHBZ #1414303, #1414312)
  - Fixed failing DataStream build if "@" is in filepath
  - Fixed missing header in result-oriented Ansible remediations
  - Memory leak and resource leak fixes (issue #635, #636)
  - New upstream tests
  - Many minor fixes and improvements</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Remove line-trailing whitespace from last changelog entry.
- Rename %soname to %sover to better reflect its use.
- Replace unnecessary %__-type macro indirections.</changelog>
  <changelog author="meissner@suse.com" date="1503662400">- openscap-1.2.15 / 25-08-2017
  - New features
  - short profile names can be used instead of long IDs
  - new option --rule allows to evaluate only a single rule
  - new option --fix-type in "oscap xccdf generate fix" allows choosing
    remediation script type without typing long URL
  - "oscap info" shows profile titles
  - OVAL details in HTML report are easier to read
  - HTML report is smaller because unselected rules are removed
  - HTML report supports NIST 800-171 and CJIS
  - remediation scripts contain headers with useful information
  - remediation scripts report progress when they run
  - basic support for Oracle Linux (CPEs, runlevels)
  - remediation scripts can be generated from datastreams that contain
    multiple XCCDF benchmarks (issue #772)
  - basic support for OVAL 5.11.2 (only schemas, no features)
  - enabled offline RPM database in rpminfo probe (issue #778)
  - added Fedora 28 CPE
  - Maintenance
  - fixed oscap-docker with Docker &gt;= 2.0 (issue #794)
  - fixed behavior of sysctl probe to be consistent with sysctl tool
  - fixed generating remediation scripts (issue #723, #773)
  - severity of tailored rules is not discarded (issue #739)
  - fixed errors in RPM probes initialization
  - oscap-docker shows all warnings reported by oscap (issue #713)
  - small improvements in verbose mode
  - standard C operations are used instead of custom OpenSCAP operations
  - fixed compiler warnings
  - fixed missing header files
  - fixed resource leaks (issue #715)
  - fixed pkgconfig file (RHBZ #1414777)
  - refactoring
  - documentation fixes and improvements</changelog>
  <changelog author="meissner@suse.com" date="1510660800">- openscap-1.2.16
  - New features
  - oscap can generate output that is compatible with STIG Viewer.
  - CVRF parsing and export has been implemented.
  - oscap info command has been expanded.
  - The AIX platform is supported.
  - Many documentation improvements.
  - Numerous other improvements of existing features.
  - Maintenance
  - Huge cross-platform improvements.
  - Memory leaks fixed (RHBZ#1485876).
  - SELinux fixes.
  - Many coverity fixes.
  - Numerous other bugfixes.
- buildrequire procps-devel</changelog>
  <changelog author="meissner@suse.com" date="1510660801">- openscap-productid-cvrf.patch: add a --productid selector
  for "oscap cvrf" as upstream does not detect the system yet.
  (might go away)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1519300800">- disable scap-as-rpm binary to avoid python2 dependency. (bsc#1082135)</changelog>
  <changelog author="meissner@suse.com" date="1520251200">- replace oscap-scan.init by oscap-scan.service, add a /usr/bin/oscap-scan
  helper tool for this. (bsc#1083115)</changelog>
  <changelog author="jengelh@inai.de" date="1520251201">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="meissner@suse.com" date="1524744000">- openscap-new-suse.patch: handle SLE15 and openSUSE Leap 42.3 and 15.0
  (bsc#1091040)</changelog>
  <changelog author="meissner@suse.com" date="1534852800">- 0001-add-a-safety-n-before-the-end-script-comment.patch:
  append a \n to fix scripts, our default ruleset does not have them.
  (bsc#1102706)
- remove cpe id from sample scap, so it runs everywhere. (bsc#1091040)</changelog>
</package>
<package pkgid="30f99e049fc079669ba4282673e0baa88643483435468edcf69895cdcf0563dc" name="libopenssl-1_0_0-devel" arch="x86_64">
  <version epoch="0" ver="1.0.2n" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1493726400">- Update baselibs.conf to contain all the renamed packages</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict on docu packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494417600">- Avoid the requires conflict between 1.1 and 1.0 openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1494417601">- Add conflict for any libopenssl-devel that is not in our version</changelog>
  <changelog author="vcizek@suse.com" date="1495195200">- filter out provides of the steam-32bit package by adding
  "autoreqprov off" to baselibs.conf (bsc#1039880)</changelog>
  <changelog author="vcizek@suse.com" date="1496059200">- update to 1.0.2l
  * bugfix release only
  * fixes problem with a lower-than-before version number (bsc#1040863)
- drop openssl-print_notice-NULL_crash.patch (upstream)
- refresh patches openssl-fipslocking.patch and
  0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498219200">- Update engines location for the engines to match up 1.1 to ease
  later on migration bsc#1045803
  * openssl-engines-path.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169600">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch
- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch
- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal
- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169601">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch
- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169602">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392, boo#1038906)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch
- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499688000">- Ship the -cavs subpackage with the FIPS testing helper binaries</changelog>
  <changelog author="jengelh@inai.de" date="1499688001">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
</package>
<package pkgid="f2502acc8fc84cae046b9a0a122b6120465c91a4f9328986049d38f903ef8f18" name="libopenssl-1_0_0-devel" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp150.2.6.1"/>
  <changelog author="vcizek@suse.com" date="1495195200">- filter out provides of the steam-32bit package by adding
  "autoreqprov off" to baselibs.conf (bsc#1039880)</changelog>
  <changelog author="vcizek@suse.com" date="1496059200">- update to 1.0.2l
  * bugfix release only
  * fixes problem with a lower-than-before version number (bsc#1040863)
- drop openssl-print_notice-NULL_crash.patch (upstream)
- refresh patches openssl-fipslocking.patch and
  0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498219200">- Update engines location for the engines to match up 1.1 to ease
  later on migration bsc#1045803
  * openssl-engines-path.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169600">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch
- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch
- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal
- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169601">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch
- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169602">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392, boo#1038906)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch
- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499688000">- Ship the -cavs subpackage with the FIPS testing helper binaries</changelog>
  <changelog author="jengelh@inai.de" date="1499688001">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
</package>
<package pkgid="1f082cbdd8f551ab5f1eb47a8b9528c1bf1635dc500c05620d299a6e9e61f10d" name="libopenssl-1_0_0-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2n" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1493726400">- Update baselibs.conf to contain all the renamed packages</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict on docu packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494417600">- Avoid the requires conflict between 1.1 and 1.0 openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1494417601">- Add conflict for any libopenssl-devel that is not in our version</changelog>
  <changelog author="vcizek@suse.com" date="1495195200">- filter out provides of the steam-32bit package by adding
  "autoreqprov off" to baselibs.conf (bsc#1039880)</changelog>
  <changelog author="vcizek@suse.com" date="1496059200">- update to 1.0.2l
  * bugfix release only
  * fixes problem with a lower-than-before version number (bsc#1040863)
- drop openssl-print_notice-NULL_crash.patch (upstream)
- refresh patches openssl-fipslocking.patch and
  0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498219200">- Update engines location for the engines to match up 1.1 to ease
  later on migration bsc#1045803
  * openssl-engines-path.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169600">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch
- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch
- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal
- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169601">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch
- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169602">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392, boo#1038906)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch
- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499688000">- Ship the -cavs subpackage with the FIPS testing helper binaries</changelog>
  <changelog author="jengelh@inai.de" date="1499688001">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
</package>
<package pkgid="8e587b409f1133916040009be16c4dbcecc2349de094f5bdd96dcfd232fb2b9c" name="libopenssl-1_0_0-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp150.2.6.1"/>
  <changelog author="vcizek@suse.com" date="1495195200">- filter out provides of the steam-32bit package by adding
  "autoreqprov off" to baselibs.conf (bsc#1039880)</changelog>
  <changelog author="vcizek@suse.com" date="1496059200">- update to 1.0.2l
  * bugfix release only
  * fixes problem with a lower-than-before version number (bsc#1040863)
- drop openssl-print_notice-NULL_crash.patch (upstream)
- refresh patches openssl-fipslocking.patch and
  0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498219200">- Update engines location for the engines to match up 1.1 to ease
  later on migration bsc#1045803
  * openssl-engines-path.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169600">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch
- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch
- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal
- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169601">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch
- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169602">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392, boo#1038906)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch
- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499688000">- Ship the -cavs subpackage with the FIPS testing helper binaries</changelog>
  <changelog author="jengelh@inai.de" date="1499688001">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
</package>
<package pkgid="1019a48a8acfeb65a12b82f3c0ea390b11fd5d9c59fc30fbf9fcb8e13e2ed527" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.0h" rel="lp150.3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1498392000">- Add patch openssl-no-date.patch to disable date inclusion in most
  of the binaries
- Use autopatch to make things smaller
- Enable verbose output on the tests
- Paralelize depmod</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="vcizek@suse.com" date="1500379201">- Fix a race condition in tests to make the package build reliably
  * https://github.com/openssl/openssl/issues/3562
  * 0001-Fix-a-TLSProxy-race-condition.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Disable the verbosity of the tests as we expose yet another race
  condition in that</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
</package>
<package pkgid="e63ad46e75ff30d432b0f56b29a214648e042854d23491ab916b3a18c1160d70" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.0h" rel="lp150.3.6.1"/>
  <changelog author="vcizek@suse.com" date="1500379200">- Fix a race condition in tests to make the package build reliably
  * https://github.com/openssl/openssl/issues/3562
  * 0001-Fix-a-TLSProxy-race-condition.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Disable the verbosity of the tests as we expose yet another race
  condition in that</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
</package>
<package pkgid="7ce527c0f5792c19ca6d2327272cc07cbd1e193fca73f09e0241dd8778c8dee6" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.0i" rel="lp150.3.12.1"/>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
  <changelog author="vcizek@suse.com" date="1533211200">- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)
- Don't Require openssl-1_1 from the devel package, just Recommend it</changelog>
  <changelog author="vcizek@suse.com" date="1534248000">- Update to 1.1.0i
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
  * Fixed a text canonicalisation bug in CMS
- drop patches (upstream):
  * 0001-Limit-scope-of-CN-name-constraints.patch
  * 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch
  * 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch
  * 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch
  * openssl-add-blinding-to-dsa.patch
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-CVE-2018-0732.patch
- refresh patches:
  * openssl-1.1.0-fips.patch
  * openssl-disable_rsa_keygen_tests_with_small_modulus.patch
- rename openssl-CVE-2018-0737.patch to openssl-CVE-2018-0737-fips.patch
  as it now only includes changes to the fips code</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864001">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add openssl-dsa_paramgen2_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1540296000">- Obsolete libopenssl-1_0_0-devel by libopenssl-1_1-devel to avoid
  conflicts when updating from older distributions (bsc#1106180)</changelog>
</package>
<package pkgid="103bcfc1576fbad35e0395f6e509f6ce811da0318cea9a769f8fccb74c5204be" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.0i" rel="lp150.3.15.1"/>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
  <changelog author="vcizek@suse.com" date="1533211200">- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)
- Don't Require openssl-1_1 from the devel package, just Recommend it</changelog>
  <changelog author="vcizek@suse.com" date="1534248000">- Update to 1.1.0i
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
  * Fixed a text canonicalisation bug in CMS
- drop patches (upstream):
  * 0001-Limit-scope-of-CN-name-constraints.patch
  * 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch
  * 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch
  * 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch
  * openssl-add-blinding-to-dsa.patch
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-CVE-2018-0732.patch
- refresh patches:
  * openssl-1.1.0-fips.patch
  * openssl-disable_rsa_keygen_tests_with_small_modulus.patch
- rename openssl-CVE-2018-0737.patch to openssl-CVE-2018-0737-fips.patch
  as it now only includes changes to the fips code</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864001">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add openssl-dsa_paramgen2_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1540296000">- Obsolete libopenssl-1_0_0-devel by libopenssl-1_1-devel to avoid
  conflicts when updating from older distributions (bsc#1106180)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in ECDSA signature generation
    (bsc#1113651, CVE-2018-0735)
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes
- Add patches:
  * openssl-CVE-2018-0734.patch
  * openssl-CVE-2018-0735.patch
  * 0001-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
</package>
<package pkgid="3cf797bf58dd406b16a9e4d73d897eef87a143ebdb31d3427300471e2caa9486" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.0i" rel="lp150.3.9.1"/>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
  <changelog author="vcizek@suse.com" date="1533211200">- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)
- Don't Require openssl-1_1 from the devel package, just Recommend it</changelog>
  <changelog author="vcizek@suse.com" date="1534248000">- Update to 1.1.0i
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
  * Fixed a text canonicalisation bug in CMS
- drop patches (upstream):
  * 0001-Limit-scope-of-CN-name-constraints.patch
  * 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch
  * 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch
  * 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch
  * openssl-add-blinding-to-dsa.patch
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-CVE-2018-0732.patch
- refresh patches:
  * openssl-1.1.0-fips.patch
  * openssl-disable_rsa_keygen_tests_with_small_modulus.patch
- rename openssl-CVE-2018-0737.patch to openssl-CVE-2018-0737-fips.patch
  as it now only includes changes to the fips code</changelog>
</package>
<package pkgid="b0944da6a11f3e441ceec4f0a1f74fdaed819883e0e21e44d248b411ac5c8d99" name="libopenssl-1_1-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.0h" rel="lp150.3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1498392000">- Add patch openssl-no-date.patch to disable date inclusion in most
  of the binaries
- Use autopatch to make things smaller
- Enable verbose output on the tests
- Paralelize depmod</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="vcizek@suse.com" date="1500379201">- Fix a race condition in tests to make the package build reliably
  * https://github.com/openssl/openssl/issues/3562
  * 0001-Fix-a-TLSProxy-race-condition.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Disable the verbosity of the tests as we expose yet another race
  condition in that</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
</package>
<package pkgid="6a6c748e24d0f1f72161bb248f8569d8e6824fbc74fc5c23bacd8b83dbd33264" name="libopenssl-1_1-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.0h" rel="lp150.3.6.1"/>
  <changelog author="vcizek@suse.com" date="1500379200">- Fix a race condition in tests to make the package build reliably
  * https://github.com/openssl/openssl/issues/3562
  * 0001-Fix-a-TLSProxy-race-condition.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Disable the verbosity of the tests as we expose yet another race
  condition in that</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
</package>
<package pkgid="f0ae9ccf86559ac8ca8e9433e861e40e2125449d2339037a039edd0ffcb9ac63" name="libopenssl-1_1-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.0i" rel="lp150.3.12.1"/>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
  <changelog author="vcizek@suse.com" date="1533211200">- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)
- Don't Require openssl-1_1 from the devel package, just Recommend it</changelog>
  <changelog author="vcizek@suse.com" date="1534248000">- Update to 1.1.0i
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
  * Fixed a text canonicalisation bug in CMS
- drop patches (upstream):
  * 0001-Limit-scope-of-CN-name-constraints.patch
  * 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch
  * 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch
  * 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch
  * openssl-add-blinding-to-dsa.patch
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-CVE-2018-0732.patch
- refresh patches:
  * openssl-1.1.0-fips.patch
  * openssl-disable_rsa_keygen_tests_with_small_modulus.patch
- rename openssl-CVE-2018-0737.patch to openssl-CVE-2018-0737-fips.patch
  as it now only includes changes to the fips code</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864001">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add openssl-dsa_paramgen2_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1540296000">- Obsolete libopenssl-1_0_0-devel by libopenssl-1_1-devel to avoid
  conflicts when updating from older distributions (bsc#1106180)</changelog>
</package>
<package pkgid="74f97969fe3269d13be8098ba8f89e424584ecd88b862bd3c8779f7f474fdfac" name="libopenssl-1_1-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.0i" rel="lp150.3.15.1"/>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
  <changelog author="vcizek@suse.com" date="1533211200">- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)
- Don't Require openssl-1_1 from the devel package, just Recommend it</changelog>
  <changelog author="vcizek@suse.com" date="1534248000">- Update to 1.1.0i
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
  * Fixed a text canonicalisation bug in CMS
- drop patches (upstream):
  * 0001-Limit-scope-of-CN-name-constraints.patch
  * 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch
  * 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch
  * 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch
  * openssl-add-blinding-to-dsa.patch
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-CVE-2018-0732.patch
- refresh patches:
  * openssl-1.1.0-fips.patch
  * openssl-disable_rsa_keygen_tests_with_small_modulus.patch
- rename openssl-CVE-2018-0737.patch to openssl-CVE-2018-0737-fips.patch
  as it now only includes changes to the fips code</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864001">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add openssl-dsa_paramgen2_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1540296000">- Obsolete libopenssl-1_0_0-devel by libopenssl-1_1-devel to avoid
  conflicts when updating from older distributions (bsc#1106180)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in ECDSA signature generation
    (bsc#1113651, CVE-2018-0735)
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes
- Add patches:
  * openssl-CVE-2018-0734.patch
  * openssl-CVE-2018-0735.patch
  * 0001-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
</package>
<package pkgid="f7867a5be72f9dcc32fce7b5b018baa5d84071c4768ddcd0bbc887bf59f99127" name="libopenssl-1_1-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.0i" rel="lp150.3.9.1"/>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
  <changelog author="vcizek@suse.com" date="1533211200">- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)
- Don't Require openssl-1_1 from the devel package, just Recommend it</changelog>
  <changelog author="vcizek@suse.com" date="1534248000">- Update to 1.1.0i
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
  * Fixed a text canonicalisation bug in CMS
- drop patches (upstream):
  * 0001-Limit-scope-of-CN-name-constraints.patch
  * 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch
  * 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch
  * 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch
  * openssl-add-blinding-to-dsa.patch
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-CVE-2018-0732.patch
- refresh patches:
  * openssl-1.1.0-fips.patch
  * openssl-disable_rsa_keygen_tests_with_small_modulus.patch
- rename openssl-CVE-2018-0737.patch to openssl-CVE-2018-0737-fips.patch
  as it now only includes changes to the fips code</changelog>
</package>
<package pkgid="fc45291d8a55bc5428ff0acaad1550a16864e52e71ce9e655c38c6548b457fe0" name="libopenssl-devel" arch="noarch">
  <version epoch="0" ver="1.1.0i" rel="lp150.2.3.1"/>
  <changelog author="vcizek@suse.com" date="1475236800">- add FIPS changes from SP2:
- fix problems with locking in FIPS mode (bsc#992120)
  * duplicates: bsc#991877, bsc#991193, bsc#990392, bsc#990428
    and bsc#990207
  * bring back openssl-fipslocking.patch
- drop openssl-fips_RSA_compute_d_with_lcm.patch (upstream)
  (bsc#984323)
- don't check for /etc/system-fips (bsc#982268)
  * add openssl-fips-dont_run_FIPS_module_installed.patch
- refresh openssl-fips-rsagen-d-bits.patch</changelog>
  <changelog author="vcizek@suse.com" date="1475236801">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch</changelog>
  <changelog author="meissner@suse.com" date="1485518400">- Updated to openssl 1.0.2k
  - bsc#1009528 / CVE-2016-7055: openssl: Montgomery multiplication may produce incorrect results
  - bsc#1019334 / CVE-2016-7056: openssl: ECSDA P-256 timing attack key recovery
  - bsc#1022085 / CVE-2017-3731: openssl: Truncated packet could crash via OOB read
  - bsc#1022086 / CVE-2017-3732: openssl: BN_mod_exp may produce incorrect results on x86_64</changelog>
  <changelog author="vcizek@suse.com" date="1486036800">- fix X509_CERT_FILE path (bsc#1022271) and rename
  updated openssl-1.0.1e-truststore.diff to openssl-truststore.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1491307200">- Remove O3 from optflags, no need to not rely on distro wide settings
- Remove conditions for sle10 and sle11, we care only about sle12+
- USE SUSE instead of SuSE in readme
- Pass over with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1491998400">- Prepare to split to various subpackages converting main one to
  dummy package
- Reduce to only provide main pkg and devel and depend on proper
  soversioned package
- Version in this package needs to be synced with the one provided
  by the split package
- Remove all the patches, now in the proper versioned namespace:
  * merge_from_0.9.8k.patch
  * openssl-1.0.0-c_rehash-compat.diff
  * bug610223.patch
  * openssl-ocloexec.patch
  * openssl-1.0.2a-padlock64.patch
  * openssl-fix-pod-syntax.diff
  * openssl-truststore.patch
  * compression_methods_switch.patch
  * 0005-libssl-Hide-library-private-symbols.patch
  * openssl-1.0.2a-default-paths.patch
  * openssl-pkgconfig.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * 0001-libcrypto-Hide-library-private-symbols.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-fips-ctor.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-gcc-attributes.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-no-egd.patch
  * openssl-fips-hidden.patch
  * openssl-1.0.1e-add-suse-default-cipher.patch
  * openssl-1.0.1e-add-test-suse-default-cipher-suite.patch
  * openssl-missing_FIPS_ec_group_new_by_curve_name.patch
  * openssl-fips-dont_run_FIPS_module_installed.patch
  * openssl-fips_disallow_x931_rand_method.patch
  * openssl-fips_disallow_ENGINE_loading.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-urandom-reseeding.patch
  * openssl-fips-rsagen-d-bits.patch
  * openssl-fips-selftests_in_nonfips_mode.patch
  * openssl-fips-fix-odd-rsakeybits.patch
  * openssl-fips-clearerror.patch
  * openssl-fips-dont-fall-back-to-default-digest.patch
  * openssl-fipslocking.patch
  * openssl-print_notice-NULL_crash.patch
  * openssl-randfile_fread_interrupt.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1491998401">- Remove the ssl provides as it is applicable for only those that
  really provide it</changelog>
  <changelog author="tchvatal@suse.com" date="1493208000">- Fix typo in openssl requires
- Add dependency on the branched devel package
- Provide all pkgconfig symbols to hide them in versioned subpkgs
- This allows us to propagate only the preffered version of openssl
  while allowing us to add extra openssl only as additional dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1493726400">- Provide basic baselibs.conf for 32bit subpackages
- Specify this package as noarch (as we just provide README files)</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Provide pkgconfig(openssl)</changelog>
  <changelog author="tchvatal@suse.com" date="1495627200">- Switch default to openssl-1.1.0</changelog>
  <changelog author="tchvatal@suse.com" date="1496059200">- Update to 1.1.0f release</changelog>
  <changelog author="tchvatal@suse.com" date="1498219200">- Revert back to 1.0.2l for now so we get new fixes of 1.0 openssl
  to tumbleweed</changelog>
  <changelog author="vcizek@suse.com" date="1499774400">- Obsolete openssl-debuginfo
  * the package doesn't exist any more, has been replaced by
    openssl-{so_version}-debuginfo (bsc#1040172)</changelog>
  <changelog author="tchvatal@suse.com" date="1501502400">- Switch to 1.1.0f release as default again</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Revert version back to 1.0.2m to get security fixes quickly to
  Tumbleweed
  * OpenSSL Security Advisory [02 Nov 2017] (bsc#1066242,bsc#1056058)</changelog>
  <changelog author="vcizek@suse.com" date="1509969600">- Update to 1.1.0g release</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- change the sonum to 1.1, as all the minor versions keep ABI
  compatibility (bsc#1081335)
- update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h release</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Update to 1.1.0i release</changelog>
</package>
<package pkgid="ca8bd0845bd0598ea4814b5c9fb3d74eba9e9a956c2cd0e0d126450c2d018d50" name="libopenssl1_0_0" arch="x86_64">
  <version epoch="0" ver="1.0.2n" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1493726400">- Update baselibs.conf to contain all the renamed packages</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict on docu packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494417600">- Avoid the requires conflict between 1.1 and 1.0 openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1494417601">- Add conflict for any libopenssl-devel that is not in our version</changelog>
  <changelog author="vcizek@suse.com" date="1495195200">- filter out provides of the steam-32bit package by adding
  "autoreqprov off" to baselibs.conf (bsc#1039880)</changelog>
  <changelog author="vcizek@suse.com" date="1496059200">- update to 1.0.2l
  * bugfix release only
  * fixes problem with a lower-than-before version number (bsc#1040863)
- drop openssl-print_notice-NULL_crash.patch (upstream)
- refresh patches openssl-fipslocking.patch and
  0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498219200">- Update engines location for the engines to match up 1.1 to ease
  later on migration bsc#1045803
  * openssl-engines-path.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169600">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch
- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch
- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal
- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169601">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch
- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169602">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392, boo#1038906)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch
- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499688000">- Ship the -cavs subpackage with the FIPS testing helper binaries</changelog>
  <changelog author="jengelh@inai.de" date="1499688001">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
</package>
<package pkgid="84b1ac602948986f36061ef52727b063ec033195ee440422e7274a2668476165" name="libopenssl1_0_0" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp150.2.6.1"/>
  <changelog author="vcizek@suse.com" date="1495195200">- filter out provides of the steam-32bit package by adding
  "autoreqprov off" to baselibs.conf (bsc#1039880)</changelog>
  <changelog author="vcizek@suse.com" date="1496059200">- update to 1.0.2l
  * bugfix release only
  * fixes problem with a lower-than-before version number (bsc#1040863)
- drop openssl-print_notice-NULL_crash.patch (upstream)
- refresh patches openssl-fipslocking.patch and
  0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498219200">- Update engines location for the engines to match up 1.1 to ease
  later on migration bsc#1045803
  * openssl-engines-path.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169600">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch
- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch
- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal
- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169601">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch
- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169602">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392, boo#1038906)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch
- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499688000">- Ship the -cavs subpackage with the FIPS testing helper binaries</changelog>
  <changelog author="jengelh@inai.de" date="1499688001">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
</package>
<package pkgid="a91ad347c26e70ca8cb5713fdc6325eb3f76412fc6a410dedd69f480fd9c970f" name="libopenssl1_0_0-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2n" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1493726400">- Update baselibs.conf to contain all the renamed packages</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict on docu packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494417600">- Avoid the requires conflict between 1.1 and 1.0 openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1494417601">- Add conflict for any libopenssl-devel that is not in our version</changelog>
  <changelog author="vcizek@suse.com" date="1495195200">- filter out provides of the steam-32bit package by adding
  "autoreqprov off" to baselibs.conf (bsc#1039880)</changelog>
  <changelog author="vcizek@suse.com" date="1496059200">- update to 1.0.2l
  * bugfix release only
  * fixes problem with a lower-than-before version number (bsc#1040863)
- drop openssl-print_notice-NULL_crash.patch (upstream)
- refresh patches openssl-fipslocking.patch and
  0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498219200">- Update engines location for the engines to match up 1.1 to ease
  later on migration bsc#1045803
  * openssl-engines-path.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169600">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch
- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch
- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal
- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169601">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch
- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169602">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392, boo#1038906)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch
- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499688000">- Ship the -cavs subpackage with the FIPS testing helper binaries</changelog>
  <changelog author="jengelh@inai.de" date="1499688001">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
</package>
<package pkgid="6151d5eeb5c1c3eefee1e92ae1cd22afc528e1347f79a3444f35ad981302b1d0" name="libopenssl1_0_0-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp150.2.6.1"/>
  <changelog author="vcizek@suse.com" date="1495195200">- filter out provides of the steam-32bit package by adding
  "autoreqprov off" to baselibs.conf (bsc#1039880)</changelog>
  <changelog author="vcizek@suse.com" date="1496059200">- update to 1.0.2l
  * bugfix release only
  * fixes problem with a lower-than-before version number (bsc#1040863)
- drop openssl-print_notice-NULL_crash.patch (upstream)
- refresh patches openssl-fipslocking.patch and
  0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498219200">- Update engines location for the engines to match up 1.1 to ease
  later on migration bsc#1045803
  * openssl-engines-path.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169600">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch
- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch
- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal
- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169601">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch
- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169602">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392, boo#1038906)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch
- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499688000">- Ship the -cavs subpackage with the FIPS testing helper binaries</changelog>
  <changelog author="jengelh@inai.de" date="1499688001">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
</package>
<package pkgid="fd4b70ef373531e911683382d5a77d7792f3d472fe1530d7dc7c41d17f443884" name="libopenssl1_0_0-hmac" arch="x86_64">
  <version epoch="0" ver="1.0.2n" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1493726400">- Update baselibs.conf to contain all the renamed packages</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict on docu packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494417600">- Avoid the requires conflict between 1.1 and 1.0 openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1494417601">- Add conflict for any libopenssl-devel that is not in our version</changelog>
  <changelog author="vcizek@suse.com" date="1495195200">- filter out provides of the steam-32bit package by adding
  "autoreqprov off" to baselibs.conf (bsc#1039880)</changelog>
  <changelog author="vcizek@suse.com" date="1496059200">- update to 1.0.2l
  * bugfix release only
  * fixes problem with a lower-than-before version number (bsc#1040863)
- drop openssl-print_notice-NULL_crash.patch (upstream)
- refresh patches openssl-fipslocking.patch and
  0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498219200">- Update engines location for the engines to match up 1.1 to ease
  later on migration bsc#1045803
  * openssl-engines-path.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169600">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch
- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch
- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal
- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169601">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch
- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169602">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392, boo#1038906)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch
- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499688000">- Ship the -cavs subpackage with the FIPS testing helper binaries</changelog>
  <changelog author="jengelh@inai.de" date="1499688001">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
</package>
<package pkgid="13ec1fd9f90111b3940783c447ce2cc6ae2950289a71814cd72be1ad2f4118e7" name="libopenssl1_0_0-hmac" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp150.2.6.1"/>
  <changelog author="vcizek@suse.com" date="1495195200">- filter out provides of the steam-32bit package by adding
  "autoreqprov off" to baselibs.conf (bsc#1039880)</changelog>
  <changelog author="vcizek@suse.com" date="1496059200">- update to 1.0.2l
  * bugfix release only
  * fixes problem with a lower-than-before version number (bsc#1040863)
- drop openssl-print_notice-NULL_crash.patch (upstream)
- refresh patches openssl-fipslocking.patch and
  0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498219200">- Update engines location for the engines to match up 1.1 to ease
  later on migration bsc#1045803
  * openssl-engines-path.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169600">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch
- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch
- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal
- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169601">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch
- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169602">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392, boo#1038906)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch
- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499688000">- Ship the -cavs subpackage with the FIPS testing helper binaries</changelog>
  <changelog author="jengelh@inai.de" date="1499688001">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
</package>
<package pkgid="bbe903e9a2e8dc2caabe2169373c20b7b59fe5a58b0134e3d1d7c80a4299e13d" name="libopenssl1_0_0-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2n" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1493726400">- Update baselibs.conf to contain all the renamed packages</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict on docu packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494417600">- Avoid the requires conflict between 1.1 and 1.0 openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1494417601">- Add conflict for any libopenssl-devel that is not in our version</changelog>
  <changelog author="vcizek@suse.com" date="1495195200">- filter out provides of the steam-32bit package by adding
  "autoreqprov off" to baselibs.conf (bsc#1039880)</changelog>
  <changelog author="vcizek@suse.com" date="1496059200">- update to 1.0.2l
  * bugfix release only
  * fixes problem with a lower-than-before version number (bsc#1040863)
- drop openssl-print_notice-NULL_crash.patch (upstream)
- refresh patches openssl-fipslocking.patch and
  0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498219200">- Update engines location for the engines to match up 1.1 to ease
  later on migration bsc#1045803
  * openssl-engines-path.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169600">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch
- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch
- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal
- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169601">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch
- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169602">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392, boo#1038906)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch
- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499688000">- Ship the -cavs subpackage with the FIPS testing helper binaries</changelog>
  <changelog author="jengelh@inai.de" date="1499688001">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
</package>
<package pkgid="d4dd4072eb0dbfb17c57bddcc81e3cdd93a7bfa18f8e145af88cff31779e7d2d" name="libopenssl1_0_0-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp150.2.6.1"/>
  <changelog author="vcizek@suse.com" date="1495195200">- filter out provides of the steam-32bit package by adding
  "autoreqprov off" to baselibs.conf (bsc#1039880)</changelog>
  <changelog author="vcizek@suse.com" date="1496059200">- update to 1.0.2l
  * bugfix release only
  * fixes problem with a lower-than-before version number (bsc#1040863)
- drop openssl-print_notice-NULL_crash.patch (upstream)
- refresh patches openssl-fipslocking.patch and
  0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498219200">- Update engines location for the engines to match up 1.1 to ease
  later on migration bsc#1045803
  * openssl-engines-path.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169600">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch
- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch
- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal
- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169601">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch
- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169602">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392, boo#1038906)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch
- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499688000">- Ship the -cavs subpackage with the FIPS testing helper binaries</changelog>
  <changelog author="jengelh@inai.de" date="1499688001">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
</package>
<package pkgid="8cdfe22ff6a01f696b9c87a17dac9d1ce1074d2637588e31d521f405716f7d75" name="libopenssl1_0_0-steam" arch="x86_64">
  <version epoch="0" ver="1.0.2n" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1493726400">- Update baselibs.conf to contain all the renamed packages</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict on docu packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494417600">- Avoid the requires conflict between 1.1 and 1.0 openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1494417601">- Add conflict for any libopenssl-devel that is not in our version</changelog>
  <changelog author="vcizek@suse.com" date="1495195200">- filter out provides of the steam-32bit package by adding
  "autoreqprov off" to baselibs.conf (bsc#1039880)</changelog>
  <changelog author="vcizek@suse.com" date="1496059200">- update to 1.0.2l
  * bugfix release only
  * fixes problem with a lower-than-before version number (bsc#1040863)
- drop openssl-print_notice-NULL_crash.patch (upstream)
- refresh patches openssl-fipslocking.patch and
  0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498219200">- Update engines location for the engines to match up 1.1 to ease
  later on migration bsc#1045803
  * openssl-engines-path.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169600">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch
- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch
- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal
- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169601">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch
- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169602">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392, boo#1038906)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch
- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499688000">- Ship the -cavs subpackage with the FIPS testing helper binaries</changelog>
  <changelog author="jengelh@inai.de" date="1499688001">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
</package>
<package pkgid="ecc76742c7351aa156cca2474fde2cd80087ffdd8581f413919424fe9d939ba9" name="libopenssl1_0_0-steam" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp150.2.6.1"/>
  <changelog author="vcizek@suse.com" date="1495195200">- filter out provides of the steam-32bit package by adding
  "autoreqprov off" to baselibs.conf (bsc#1039880)</changelog>
  <changelog author="vcizek@suse.com" date="1496059200">- update to 1.0.2l
  * bugfix release only
  * fixes problem with a lower-than-before version number (bsc#1040863)
- drop openssl-print_notice-NULL_crash.patch (upstream)
- refresh patches openssl-fipslocking.patch and
  0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498219200">- Update engines location for the engines to match up 1.1 to ease
  later on migration bsc#1045803
  * openssl-engines-path.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169600">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch
- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch
- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal
- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169601">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch
- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169602">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392, boo#1038906)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch
- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499688000">- Ship the -cavs subpackage with the FIPS testing helper binaries</changelog>
  <changelog author="jengelh@inai.de" date="1499688001">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
</package>
<package pkgid="a2a221d1e1704524985b6dcf172f4a6acffcca491be8f9da1a248e366f62f060" name="libopenssl1_0_0-steam-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2n" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1493726400">- Update baselibs.conf to contain all the renamed packages</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict on docu packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494417600">- Avoid the requires conflict between 1.1 and 1.0 openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1494417601">- Add conflict for any libopenssl-devel that is not in our version</changelog>
  <changelog author="vcizek@suse.com" date="1495195200">- filter out provides of the steam-32bit package by adding
  "autoreqprov off" to baselibs.conf (bsc#1039880)</changelog>
  <changelog author="vcizek@suse.com" date="1496059200">- update to 1.0.2l
  * bugfix release only
  * fixes problem with a lower-than-before version number (bsc#1040863)
- drop openssl-print_notice-NULL_crash.patch (upstream)
- refresh patches openssl-fipslocking.patch and
  0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498219200">- Update engines location for the engines to match up 1.1 to ease
  later on migration bsc#1045803
  * openssl-engines-path.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169600">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch
- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch
- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal
- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169601">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch
- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169602">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392, boo#1038906)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch
- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499688000">- Ship the -cavs subpackage with the FIPS testing helper binaries</changelog>
  <changelog author="jengelh@inai.de" date="1499688001">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
</package>
<package pkgid="de2909691e21b3de959575874074b89507e5300e0319a0aab821fa7c020dc661" name="libopenssl1_0_0-steam-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp150.2.6.1"/>
  <changelog author="vcizek@suse.com" date="1495195200">- filter out provides of the steam-32bit package by adding
  "autoreqprov off" to baselibs.conf (bsc#1039880)</changelog>
  <changelog author="vcizek@suse.com" date="1496059200">- update to 1.0.2l
  * bugfix release only
  * fixes problem with a lower-than-before version number (bsc#1040863)
- drop openssl-print_notice-NULL_crash.patch (upstream)
- refresh patches openssl-fipslocking.patch and
  0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498219200">- Update engines location for the engines to match up 1.1 to ease
  later on migration bsc#1045803
  * openssl-engines-path.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169600">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch
- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch
- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal
- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169601">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch
- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169602">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392, boo#1038906)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch
- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499688000">- Ship the -cavs subpackage with the FIPS testing helper binaries</changelog>
  <changelog author="jengelh@inai.de" date="1499688001">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
</package>
<package pkgid="3c14bd93ab3733d5dd1aaa8d37acd3bb474cb085b56cd29ef0d1f2a27b6eac49" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.0h" rel="lp150.3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1498392000">- Add patch openssl-no-date.patch to disable date inclusion in most
  of the binaries
- Use autopatch to make things smaller
- Enable verbose output on the tests
- Paralelize depmod</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="vcizek@suse.com" date="1500379201">- Fix a race condition in tests to make the package build reliably
  * https://github.com/openssl/openssl/issues/3562
  * 0001-Fix-a-TLSProxy-race-condition.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Disable the verbosity of the tests as we expose yet another race
  condition in that</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
</package>
<package pkgid="194f6833e39316c0ebb92d49561be4deb5d519026210dd964facc3c15534fa2d" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.0h" rel="lp150.3.6.1"/>
  <changelog author="vcizek@suse.com" date="1500379200">- Fix a race condition in tests to make the package build reliably
  * https://github.com/openssl/openssl/issues/3562
  * 0001-Fix-a-TLSProxy-race-condition.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Disable the verbosity of the tests as we expose yet another race
  condition in that</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
</package>
<package pkgid="806257098eede8043f196a78537f9b85bc581085b0de53d7546f5395f093bf85" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.0i" rel="lp150.3.12.1"/>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
  <changelog author="vcizek@suse.com" date="1533211200">- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)
- Don't Require openssl-1_1 from the devel package, just Recommend it</changelog>
  <changelog author="vcizek@suse.com" date="1534248000">- Update to 1.1.0i
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
  * Fixed a text canonicalisation bug in CMS
- drop patches (upstream):
  * 0001-Limit-scope-of-CN-name-constraints.patch
  * 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch
  * 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch
  * 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch
  * openssl-add-blinding-to-dsa.patch
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-CVE-2018-0732.patch
- refresh patches:
  * openssl-1.1.0-fips.patch
  * openssl-disable_rsa_keygen_tests_with_small_modulus.patch
- rename openssl-CVE-2018-0737.patch to openssl-CVE-2018-0737-fips.patch
  as it now only includes changes to the fips code</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864001">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add openssl-dsa_paramgen2_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1540296000">- Obsolete libopenssl-1_0_0-devel by libopenssl-1_1-devel to avoid
  conflicts when updating from older distributions (bsc#1106180)</changelog>
</package>
<package pkgid="fb3e459ac83af15864ec30eb566e3fa6e45e126138b281689420ddd4b1c7bef8" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.0i" rel="lp150.3.15.1"/>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
  <changelog author="vcizek@suse.com" date="1533211200">- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)
- Don't Require openssl-1_1 from the devel package, just Recommend it</changelog>
  <changelog author="vcizek@suse.com" date="1534248000">- Update to 1.1.0i
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
  * Fixed a text canonicalisation bug in CMS
- drop patches (upstream):
  * 0001-Limit-scope-of-CN-name-constraints.patch
  * 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch
  * 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch
  * 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch
  * openssl-add-blinding-to-dsa.patch
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-CVE-2018-0732.patch
- refresh patches:
  * openssl-1.1.0-fips.patch
  * openssl-disable_rsa_keygen_tests_with_small_modulus.patch
- rename openssl-CVE-2018-0737.patch to openssl-CVE-2018-0737-fips.patch
  as it now only includes changes to the fips code</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864001">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add openssl-dsa_paramgen2_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1540296000">- Obsolete libopenssl-1_0_0-devel by libopenssl-1_1-devel to avoid
  conflicts when updating from older distributions (bsc#1106180)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in ECDSA signature generation
    (bsc#1113651, CVE-2018-0735)
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes
- Add patches:
  * openssl-CVE-2018-0734.patch
  * openssl-CVE-2018-0735.patch
  * 0001-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
</package>
<package pkgid="fe8bf9d480a764529ab6ef157ac6d7900f9c4c81f10d82a036eba393003d3c48" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.0i" rel="lp150.3.9.1"/>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
  <changelog author="vcizek@suse.com" date="1533211200">- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)
- Don't Require openssl-1_1 from the devel package, just Recommend it</changelog>
  <changelog author="vcizek@suse.com" date="1534248000">- Update to 1.1.0i
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
  * Fixed a text canonicalisation bug in CMS
- drop patches (upstream):
  * 0001-Limit-scope-of-CN-name-constraints.patch
  * 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch
  * 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch
  * 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch
  * openssl-add-blinding-to-dsa.patch
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-CVE-2018-0732.patch
- refresh patches:
  * openssl-1.1.0-fips.patch
  * openssl-disable_rsa_keygen_tests_with_small_modulus.patch
- rename openssl-CVE-2018-0737.patch to openssl-CVE-2018-0737-fips.patch
  as it now only includes changes to the fips code</changelog>
</package>
<package pkgid="da39fcda2810d43b595bc6a9a5030950902ba89250763d52f663f30cf7ed548d" name="libopenssl1_1-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.0h" rel="lp150.3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1498392000">- Add patch openssl-no-date.patch to disable date inclusion in most
  of the binaries
- Use autopatch to make things smaller
- Enable verbose output on the tests
- Paralelize depmod</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="vcizek@suse.com" date="1500379201">- Fix a race condition in tests to make the package build reliably
  * https://github.com/openssl/openssl/issues/3562
  * 0001-Fix-a-TLSProxy-race-condition.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Disable the verbosity of the tests as we expose yet another race
  condition in that</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
</package>
<package pkgid="0896891ce3982d276f4ac86b1b7ba885c11aef83a581cc4e1eb20daf0bc945fa" name="libopenssl1_1-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.0h" rel="lp150.3.6.1"/>
  <changelog author="vcizek@suse.com" date="1500379200">- Fix a race condition in tests to make the package build reliably
  * https://github.com/openssl/openssl/issues/3562
  * 0001-Fix-a-TLSProxy-race-condition.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Disable the verbosity of the tests as we expose yet another race
  condition in that</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
</package>
<package pkgid="0b4cc85ade097abe3816a7d4bdadcce323f5ef4a742f82db7c81a8eda7d546f7" name="libopenssl1_1-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.0i" rel="lp150.3.12.1"/>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
  <changelog author="vcizek@suse.com" date="1533211200">- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)
- Don't Require openssl-1_1 from the devel package, just Recommend it</changelog>
  <changelog author="vcizek@suse.com" date="1534248000">- Update to 1.1.0i
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
  * Fixed a text canonicalisation bug in CMS
- drop patches (upstream):
  * 0001-Limit-scope-of-CN-name-constraints.patch
  * 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch
  * 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch
  * 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch
  * openssl-add-blinding-to-dsa.patch
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-CVE-2018-0732.patch
- refresh patches:
  * openssl-1.1.0-fips.patch
  * openssl-disable_rsa_keygen_tests_with_small_modulus.patch
- rename openssl-CVE-2018-0737.patch to openssl-CVE-2018-0737-fips.patch
  as it now only includes changes to the fips code</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864001">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add openssl-dsa_paramgen2_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1540296000">- Obsolete libopenssl-1_0_0-devel by libopenssl-1_1-devel to avoid
  conflicts when updating from older distributions (bsc#1106180)</changelog>
</package>
<package pkgid="56fabaf534fccbf7baf570eee92c0328abd40e78a7aa4324dc3b95f898159c9f" name="libopenssl1_1-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.0i" rel="lp150.3.15.1"/>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
  <changelog author="vcizek@suse.com" date="1533211200">- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)
- Don't Require openssl-1_1 from the devel package, just Recommend it</changelog>
  <changelog author="vcizek@suse.com" date="1534248000">- Update to 1.1.0i
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
  * Fixed a text canonicalisation bug in CMS
- drop patches (upstream):
  * 0001-Limit-scope-of-CN-name-constraints.patch
  * 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch
  * 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch
  * 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch
  * openssl-add-blinding-to-dsa.patch
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-CVE-2018-0732.patch
- refresh patches:
  * openssl-1.1.0-fips.patch
  * openssl-disable_rsa_keygen_tests_with_small_modulus.patch
- rename openssl-CVE-2018-0737.patch to openssl-CVE-2018-0737-fips.patch
  as it now only includes changes to the fips code</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864001">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add openssl-dsa_paramgen2_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1540296000">- Obsolete libopenssl-1_0_0-devel by libopenssl-1_1-devel to avoid
  conflicts when updating from older distributions (bsc#1106180)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in ECDSA signature generation
    (bsc#1113651, CVE-2018-0735)
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes
- Add patches:
  * openssl-CVE-2018-0734.patch
  * openssl-CVE-2018-0735.patch
  * 0001-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
</package>
<package pkgid="d6f69b4e1da3e25bea01b9cb23f3e42282eada55b12a5ee091733cf9e4701261" name="libopenssl1_1-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.0i" rel="lp150.3.9.1"/>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
  <changelog author="vcizek@suse.com" date="1533211200">- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)
- Don't Require openssl-1_1 from the devel package, just Recommend it</changelog>
  <changelog author="vcizek@suse.com" date="1534248000">- Update to 1.1.0i
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
  * Fixed a text canonicalisation bug in CMS
- drop patches (upstream):
  * 0001-Limit-scope-of-CN-name-constraints.patch
  * 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch
  * 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch
  * 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch
  * openssl-add-blinding-to-dsa.patch
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-CVE-2018-0732.patch
- refresh patches:
  * openssl-1.1.0-fips.patch
  * openssl-disable_rsa_keygen_tests_with_small_modulus.patch
- rename openssl-CVE-2018-0737.patch to openssl-CVE-2018-0737-fips.patch
  as it now only includes changes to the fips code</changelog>
</package>
<package pkgid="1aafae02d3bebcaca4635d850784a9c046313c54bd9bc3d08d15c90e284fa6fb" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.0h" rel="lp150.3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1498392000">- Add patch openssl-no-date.patch to disable date inclusion in most
  of the binaries
- Use autopatch to make things smaller
- Enable verbose output on the tests
- Paralelize depmod</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="vcizek@suse.com" date="1500379201">- Fix a race condition in tests to make the package build reliably
  * https://github.com/openssl/openssl/issues/3562
  * 0001-Fix-a-TLSProxy-race-condition.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Disable the verbosity of the tests as we expose yet another race
  condition in that</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
</package>
<package pkgid="7bb64d98826c4b60a294bd397779977eb7f9d9e67ab522c762c4cf4113bae5bc" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.0h" rel="lp150.3.6.1"/>
  <changelog author="vcizek@suse.com" date="1500379200">- Fix a race condition in tests to make the package build reliably
  * https://github.com/openssl/openssl/issues/3562
  * 0001-Fix-a-TLSProxy-race-condition.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Disable the verbosity of the tests as we expose yet another race
  condition in that</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
</package>
<package pkgid="48fe302d20d77a1405e9988219f1f39dfb232b9661d90ac7b51ee0d885f76be7" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.0i" rel="lp150.3.12.1"/>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
  <changelog author="vcizek@suse.com" date="1533211200">- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)
- Don't Require openssl-1_1 from the devel package, just Recommend it</changelog>
  <changelog author="vcizek@suse.com" date="1534248000">- Update to 1.1.0i
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
  * Fixed a text canonicalisation bug in CMS
- drop patches (upstream):
  * 0001-Limit-scope-of-CN-name-constraints.patch
  * 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch
  * 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch
  * 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch
  * openssl-add-blinding-to-dsa.patch
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-CVE-2018-0732.patch
- refresh patches:
  * openssl-1.1.0-fips.patch
  * openssl-disable_rsa_keygen_tests_with_small_modulus.patch
- rename openssl-CVE-2018-0737.patch to openssl-CVE-2018-0737-fips.patch
  as it now only includes changes to the fips code</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864001">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add openssl-dsa_paramgen2_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1540296000">- Obsolete libopenssl-1_0_0-devel by libopenssl-1_1-devel to avoid
  conflicts when updating from older distributions (bsc#1106180)</changelog>
</package>
<package pkgid="a0f8c4b5fcc231ac6ad2a7674a93585417ed2860b996a320a6bb11a0782ab917" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.0i" rel="lp150.3.15.1"/>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
  <changelog author="vcizek@suse.com" date="1533211200">- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)
- Don't Require openssl-1_1 from the devel package, just Recommend it</changelog>
  <changelog author="vcizek@suse.com" date="1534248000">- Update to 1.1.0i
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
  * Fixed a text canonicalisation bug in CMS
- drop patches (upstream):
  * 0001-Limit-scope-of-CN-name-constraints.patch
  * 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch
  * 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch
  * 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch
  * openssl-add-blinding-to-dsa.patch
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-CVE-2018-0732.patch
- refresh patches:
  * openssl-1.1.0-fips.patch
  * openssl-disable_rsa_keygen_tests_with_small_modulus.patch
- rename openssl-CVE-2018-0737.patch to openssl-CVE-2018-0737-fips.patch
  as it now only includes changes to the fips code</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864001">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add openssl-dsa_paramgen2_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1540296000">- Obsolete libopenssl-1_0_0-devel by libopenssl-1_1-devel to avoid
  conflicts when updating from older distributions (bsc#1106180)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in ECDSA signature generation
    (bsc#1113651, CVE-2018-0735)
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes
- Add patches:
  * openssl-CVE-2018-0734.patch
  * openssl-CVE-2018-0735.patch
  * 0001-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
</package>
<package pkgid="06011046a411fe1bed81381b825e74798f377d69ea10489c79729195b49553a3" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.0i" rel="lp150.3.9.1"/>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
  <changelog author="vcizek@suse.com" date="1533211200">- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)
- Don't Require openssl-1_1 from the devel package, just Recommend it</changelog>
  <changelog author="vcizek@suse.com" date="1534248000">- Update to 1.1.0i
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
  * Fixed a text canonicalisation bug in CMS
- drop patches (upstream):
  * 0001-Limit-scope-of-CN-name-constraints.patch
  * 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch
  * 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch
  * 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch
  * openssl-add-blinding-to-dsa.patch
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-CVE-2018-0732.patch
- refresh patches:
  * openssl-1.1.0-fips.patch
  * openssl-disable_rsa_keygen_tests_with_small_modulus.patch
- rename openssl-CVE-2018-0737.patch to openssl-CVE-2018-0737-fips.patch
  as it now only includes changes to the fips code</changelog>
</package>
<package pkgid="3247e953fea823158826a5185f8f879406a5e07b5c5ff3a3625540a3a5c85bcd" name="libopenssl1_1-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.0h" rel="lp150.3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1498392000">- Add patch openssl-no-date.patch to disable date inclusion in most
  of the binaries
- Use autopatch to make things smaller
- Enable verbose output on the tests
- Paralelize depmod</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="vcizek@suse.com" date="1500379201">- Fix a race condition in tests to make the package build reliably
  * https://github.com/openssl/openssl/issues/3562
  * 0001-Fix-a-TLSProxy-race-condition.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Disable the verbosity of the tests as we expose yet another race
  condition in that</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
</package>
<package pkgid="d3f156e4c3927e27eecfa29157d097005983320651de2b13b7e3db850e946757" name="libopenssl1_1-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.0h" rel="lp150.3.6.1"/>
  <changelog author="vcizek@suse.com" date="1500379200">- Fix a race condition in tests to make the package build reliably
  * https://github.com/openssl/openssl/issues/3562
  * 0001-Fix-a-TLSProxy-race-condition.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Disable the verbosity of the tests as we expose yet another race
  condition in that</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
</package>
<package pkgid="fdb0359ba7ffc329b80a4151a93443e4274f4f4c84fb2428a8e7969bca207056" name="libopenssl1_1-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.0i" rel="lp150.3.12.1"/>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
  <changelog author="vcizek@suse.com" date="1533211200">- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)
- Don't Require openssl-1_1 from the devel package, just Recommend it</changelog>
  <changelog author="vcizek@suse.com" date="1534248000">- Update to 1.1.0i
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
  * Fixed a text canonicalisation bug in CMS
- drop patches (upstream):
  * 0001-Limit-scope-of-CN-name-constraints.patch
  * 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch
  * 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch
  * 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch
  * openssl-add-blinding-to-dsa.patch
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-CVE-2018-0732.patch
- refresh patches:
  * openssl-1.1.0-fips.patch
  * openssl-disable_rsa_keygen_tests_with_small_modulus.patch
- rename openssl-CVE-2018-0737.patch to openssl-CVE-2018-0737-fips.patch
  as it now only includes changes to the fips code</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864001">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add openssl-dsa_paramgen2_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1540296000">- Obsolete libopenssl-1_0_0-devel by libopenssl-1_1-devel to avoid
  conflicts when updating from older distributions (bsc#1106180)</changelog>
</package>
<package pkgid="4c46035bc4026dc1bec33942e57f36591066e2cfbb4af7a7fe9256e8a5981d91" name="libopenssl1_1-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.0i" rel="lp150.3.15.1"/>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
  <changelog author="vcizek@suse.com" date="1533211200">- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)
- Don't Require openssl-1_1 from the devel package, just Recommend it</changelog>
  <changelog author="vcizek@suse.com" date="1534248000">- Update to 1.1.0i
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
  * Fixed a text canonicalisation bug in CMS
- drop patches (upstream):
  * 0001-Limit-scope-of-CN-name-constraints.patch
  * 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch
  * 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch
  * 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch
  * openssl-add-blinding-to-dsa.patch
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-CVE-2018-0732.patch
- refresh patches:
  * openssl-1.1.0-fips.patch
  * openssl-disable_rsa_keygen_tests_with_small_modulus.patch
- rename openssl-CVE-2018-0737.patch to openssl-CVE-2018-0737-fips.patch
  as it now only includes changes to the fips code</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864001">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add openssl-dsa_paramgen2_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1540296000">- Obsolete libopenssl-1_0_0-devel by libopenssl-1_1-devel to avoid
  conflicts when updating from older distributions (bsc#1106180)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in ECDSA signature generation
    (bsc#1113651, CVE-2018-0735)
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes
- Add patches:
  * openssl-CVE-2018-0734.patch
  * openssl-CVE-2018-0735.patch
  * 0001-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
</package>
<package pkgid="9ecff9e02458c49871d001bfea15f49353a03ecd4961c743e2377f5954632c24" name="libopenssl1_1-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.0i" rel="lp150.3.9.1"/>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
  <changelog author="vcizek@suse.com" date="1533211200">- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)
- Don't Require openssl-1_1 from the devel package, just Recommend it</changelog>
  <changelog author="vcizek@suse.com" date="1534248000">- Update to 1.1.0i
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
  * Fixed a text canonicalisation bug in CMS
- drop patches (upstream):
  * 0001-Limit-scope-of-CN-name-constraints.patch
  * 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch
  * 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch
  * 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch
  * openssl-add-blinding-to-dsa.patch
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-CVE-2018-0732.patch
- refresh patches:
  * openssl-1.1.0-fips.patch
  * openssl-disable_rsa_keygen_tests_with_small_modulus.patch
- rename openssl-CVE-2018-0737.patch to openssl-CVE-2018-0737-fips.patch
  as it now only includes changes to the fips code</changelog>
</package>
<package pkgid="dd1d7eb1306d6d405e42f1e941a01eff9533f15d981d4f4ca34a5585f2fea472" name="libopenvswitch-2_8-0" arch="x86_64">
  <version epoch="0" ver="2.8.4" rel="lp150.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499515200">- Remove irrelevant wording from summaries/description.
  Diversify summaries.
- Get rid of an empty if block by inverting the condition.
- Implement shared library packaging guideline.</changelog>
  <changelog author="mchandras@suse.de" date="1500465600">- Version bump to 2.7.2. Some of the changes are:
  * Revert "netdev: Fix netdev_open() to adhere to class type if given"
  * connmgr: Fix crash when in_band_create() fails.
  * db-ctl-base: Fix reference-following feature in get_row_by_id().
  * netdev: Fix crash when ifa_netmask is null.
  * ovn-controller: fix use-after-free in physical_run()
  * ovn-controller: avoid crash when vswitchd connection is lost
  * ovsdb-types: Fix memory leak on error path.
  * vswitchd: Fix IFACE_STAT name error in iface_refresh_stats
  * netdev: Fix crash when interface option is changed to invalid value.
  * ofp-util: fix memory leak in ofputil_pull_ofp11_buckets
  * configure: Fix check for rte_config.h to handle cross-compilation.
  * ofp-util: Check length of buckets in ofputil_pull_ofp15_group_mod() (cve-2017-9265) (bsc#1041447)
  * ofp-print: Don't abort on unknown reason in role status message (cve-2017-9263) (bsc#1041470)</changelog>
  <changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mchandras@suse.de" date="1504526400">- Version bump to 2.8.0 (fate#323334, bsc#1050700). Some of the changes are:
  * ovs-ofctl can now accept and display port names in place of numbers.  By
    default it always accepts names and in interactive use it displays them;
    use --names or --no-names to override.  See ovs-ofctl(8) for details.
  * "ovs-ofctl dump-flows" now accepts --no-stats to omit flow statistics.
  * New ovs-dpctl command "ct-stats-show" to show connection tracking stats.
  * DPDK log messages redirected to OVS logging subsystem.
    Log level can be changed in a usual OVS way using
    'ovs-appctl vlog' commands for 'dpdk' module. Lower bound
    still can be configured via extra arguments for DPDK EAL.
  * dpdkvhostuser ports are marked as deprecated.  They will be removed
    in an upcoming release.
  * Support for DPDK v17.05.1.
  * New support for multiple VLANs (802.1ad or "QinQ"), including a new
    "dot1q-tunnel" port VLAN mode.
  * Added NAT support for userspace datapath.
  * Added FTP and TFTP support with NAT for userspace datapath.
  * Experimental NSH (Network Service Header) support in userspace datapath.
  * Tracing with ofproto/trace now traces through recirculation.
  * New support for role-based access control (see ovsdb-server(1)).
  * New commands 'stp/show' and 'rstp/show' (see ovs-vswitchd(8)).
  * All features required by OpenFlow 1.4 are now implemented, so
    ovs-vswitchd now enables OpenFlow 1.4 by default (in addition to
    OpenFlow 1.0 to 1.3).
  * Increased support for OpenFlow 1.6 (draft).
  * Bundles now support hashing by just nw_src or nw_dst.
  * The "learn" action now supports a "limit" option (see ovs-ofctl(8)).
  * The port status bit OFPPS_LIVE now reflects link aliveness.
  * OpenFlow 1.5 packet-out is now supported.
  * Support for OpenFlow 1.5 field packet_type and packet-type-aware
    pipeline (PTAP).
  * Added generic encap and decap actions (EXT-382).
    First supported use case is encap/decap for Ethernet.
  * Added NSH (Network Service Header) support in userspace
    Used generic encap and decap actions to implement encapsulation and
    decapsulation of NSH header.
    IETF NSH draft - https://datatracker.ietf.org/doc/draft-ietf-sfc-nsh/
  * ovs-vswitchd and ovsdb-server run as non-root users by default.
  * Add --cleanup option to command 'ovs-appctl exit' (see ovs-vswitchd(8)).
  * Use new tunnel port option "packet_type" to configure L2 vs. L3.
  * In conjunction with PTAP tunnel ports can handle a mix of L2 and L3
    payload.
  * New vxlan tunnel extension "gpe" to support VXLAN-GPE tunnels.
  * New support for non-Ethernet (L3) payloads in GRE and VXLAN-GPE.
  * Add experimental support for hardware offloading
  * HW offloading is disabled by default.
  * HW offloading is done through the TC interface.
  * The next major version of OVS will introduce a change in the
    conntrack API.  Conntrack state is only available to the processing
    path that follows the "recirc_table" argument of the ct() action.
    Starting in OVS 2.9, this state will be cleared for the current
    processing path whenever ct() is called.
- Create new openvswitch-doc subpackage for the Open vSwitch documentation
- Fix filename for logrotate configuration (bsc#1057357)
- Fix constrains with Provides/Obsoletes tags (bsc#1057357)
- Misc cleanups from spec-cleaner</changelog>
  <changelog author="mchandras@suse.de" date="1506686400">- Version bump to 2.8.1. Some of the changes are:
  * connmgr: Fix violation of flow monitoring protocol description.
  * ovn/actions: Improve OVN load-balancing performance.
  * dpif-netdev: Fix a zero-rate bug for meter
  * conntrack: Tighten handling of alg reverse conns.
  * conntrack: Add function ct_print_conn_info().
  * conntrack: Create nat_conn_keys_insert().
  * netdev-dpdk: reset packet_type for reused dp_packets.
  * ofp-util: Fix memory leaks when parsing OF1.5 group properties (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix memory leaks on error cases in ofputil_decode_group_mod() (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix buffer overread in ofputil_decode_bundle_add().
  * ofproto: Include patch ports in mtu overriden check
  * netdev-tc-offloads: Fix vxlan tunnel offloading
  * bridge: Fix controller status update to passive connections
  * lib/odp: Fix handling of set masked action in parse_odp_action
  * tests: Fix sparse error on test-ovn.c
  * dpif-netdev: Fix per packet cycles statistics.
  * netdev-dpdk: update vhost user client port status.
  * ovsdb-server.1: Fix mention of wrong option.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1512561600">- Fix documentation installation. It's best to install everything to
  %buildroot and then remove the files we don't need instead of the
  other way around since some files need to be present in the source
  directory for the testsuite to run.</changelog>
  <changelog author="mchandras@suse.de" date="1514376000">- Python fixes and improvements
  * Build Python3 subpackages for Open vSwitch python bindings
  * Switch build architecture to 'noarch' for python bindings.
  * Fix license for python subpackages
  * Build and ship python bytecode files.
- Do not mark files in /usr/share/* as configuration files
- Replace version macro with actual version number of Obsoletes tags.
  The DPDK packages have been merged with the regular OvS ones in the
  2.7.0 release so make it more explicit which ones we are obsoleting.
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1515499200">- Add upstream patches to support DPDK 17.11 (fate#322609)
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch
  * 0002-netdev-dpdk-DPDK-v17.11-upgrade.patch
  * 0003-netdev-dpdk-vHost-IOMMU-support.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519214400">- Version bump to 2.8.2 (bsc#1081953). Some of the changes are
  * ofp-meter: Fix use-after-free for decoding meter mods.
  * xlate: fix xport lookup for recirc
  * ofproto-dpif-xlate: add uuid to xports
  * netdev-dpdk: Fix requested MTU size validation.
  * netdev-dpdk: fix ingress_policer leak on error path
  * ofproto: Fix double-unref of temporary rule when learning.
  * gre: strip gre-tso offload flags
  * tc flower: reorder tunnel encap/decap actions
  * ofproto: Fix wrong datapath flow with same in_port and output port.
  * dpif: geneve: supply dpif function to get ifindex
  * ovs-tcpundump: fix a conversion issue
  * tunnel: fix tunnel flags set/clear.
  * netdev-dpdk: replace uint8_t with dpdk_port_t
  * lex: Fix parsing of long tokens.
  * odp-util: Use flexible sized buffer to hold Geneve options.
  * odp-util: Avoid reading wrong table in generate_all_wildcard_mask().
  * bond: Fix bug that writes to freed memory
  * conntrack: Fix icmp error address sanity check.
  * ovsdb-idl: Fix assertion failure on error path parsing server reply.
  * ofproto: Keep inserting buckets into a group from changing group type.
  * odp-util: Fix another hang in NSH action parsing.
  * odp-util: Fix parsing corner case for encap_nsh() actions.
  * netdev: netdev_get_etheraddr is not functioning as advertised.
  * ofproto-dpif-xlate: Fix bug that may leak ofproto_flow_mod
  * bfd: Fix memory leak
  * dpif: Fix memory leak
  * execution: Fix bug that leaks ovsdb_row
  * flow: Avoid buffer overread in parse_nsh() for malformed packet.
  * ovs-ofctl: Fix bad free in colors_parse_from_env().
  * odp-util: Fix buffer overread in parsing string form of ODP flows.
  * OpenvSwitch logrotate: Use ctl file path as target in ovs-appctl to reset logs
  * ovn-ctl: Add -vfile:info option to OVN_NB/SB_LOG options
  * netdev-tc-offloads: update stats properly on flow deletion
  * tests: Try harder to figure out whether IPv6 is supported.
  * netdev, dpif: fix the crash/assert on port delete
  * ovs-ctl: Don't remember vport-* kernel modules
  * NSH: Adjust NSH wire format to the latest IETF draft
  * ovs-lib: dont't purge corrupted DB
  * meta-flow: Fix format in documentation.
  * dpif-netlink-rtnl: Fix ovs_geneve probing after restart.
  * ovsdb-server: Fix memory leak
  * test-ovsdb: Fix memory leak
  * ovsdb-idl: Fix memory leak
  * netdev-linux: Fix wrong ceil rate when max-rate less than 8bit.
  * ofproto/trace: Fix memory leak in oftrace_push_ct_state()
  * ofproto-dpif-upcall: Fix null pointer dereference on exit.
  * ofproto-dpif-xlate: use xlate error enum for unsupported packet type
  * timeval: Check for OS-provided clock_gettime on macOS
  * Add dl_type to flow metadata for correct interpretation of conntrack metadata
  * Check flow's dl_type before setting ct_orig_tuple in 'pkt_metadata_from_flow()'
  * tests/stp: Use long warps instead of multiple calls.
  * ovs-save: Handle different 'ip addr show' output.
  * datapath-windows: Remove the workaround in NAT for TCP checksum
  * netdev: Fix memory leak on error path.
  * replication: Avoid theoretical use-after-free error in reset_database().
  * ovs-ctl.in: Call 'hostname -f' after vswitchd starts.
  * dpif-netdev: Use portable error code for zero rate meter band
- Remove patches that have been applied upstream:
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519300800">- Fix incorrect python3 dependencies for python2 subpackages
- Add upstream patches so we can build tools using python3 (bsc#1082194)
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1521633600">- set rundir to %_rundir</changelog>
  <changelog author="mchandras@suse.de" date="1521720000">- Fix file permissions in /etc/openvswitch for upgrades (951d79e638ec)</changelog>
  <changelog author="mchandras@suse.de" date="1524484800">- Preserve 'enable' status of openvswitch.service file when upgrading
  from &lt;SLE-12-SP3. The service file has been moved from the old
  openvswitch-switch subpackage to the main openvswitch one so we
  need to handle this migration step in %posttrans (bsc#1089476)
- Move DISABLE_STOP_ON_REMOVAL=yes to %preun. This variable is only
  checked in %service_del_preun macro</changelog>
  <changelog author="mchandras@suse.de" date="1525262400">- Move openvswitch user/group creation to %pre scriptlet. The default
  ownership of the configuration files expects the user and group to
  be available as early as possible (bsc#1091408)</changelog>
  <changelog author="mchandras@suse.de" date="1525867200">- Add support for RedHat distributions. All SUSE macros are now
  conditional and the spec file has been adapted based on the upstream
  one (fate#324537)
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1527595200">- Version bump to 2.8.4 (bsc#1094234). Some of the changes are
  * dpif-netdev: Free packets on TUNNEL_PUSH if may_steal.
  * netdev-dpdk: fix check for "net_nfp" driver
  * netdev-dpdk: Don't use PMD driver if not configured successfully
  * netdev-dpdk: Remove use of rte_mempool_ops_get_count.
  * conntrack-tcp: Handle tcp session reuse.
  * tunnel: make tun_key_to_attr aware of tunnel type.
  * Configurable Link State Change (LSC) detection mode
  * netdev-dpdk: don't enable scatter for jumbo RX support for nfp
  * faq: Document DPDK version maintenance.
  * Avoid crash in OvS while transmitting fragmented packets over tunnel.
  * compat: Fix upstream 4.4.119 kernel
  * ovs-vsctl: Fix segfault when attempting to del-port from parent bridge.
  * ofproto-dpif-xlate: Fix segmentation fault caused by tun_table
  * odp-util: Remove unnecessary TOS ECN bits rewrite for tunnels
  * datapath: Prevent panic
  * netdev-dpdk: Free mempool only when no in-use mbufs.
  * python: Fix a double encoding attempt on an Unicode string
  * ofproto-dpif: Init ukey-&gt;dump_seq to zero
  * nsh: Add unit test for double NSH encap and decap
  * xlate: Correct handling of double encap() actions
  * tc: Change filter error to debug once
  * lib/tc: Handle error parsing action in nl_parse_single_action
  * ovn: Fix tunnel id overflow.
  * ofp-actions: Correct execution of encap/decap actions in action set
  * ovsdb-idl.at: Fix test failed. (writing large data via IDL with unicode)
  * netdev-dpdk: Limit rate of DPDK logs.
  * netdev-dpdk: Remove 'error' from non error log.
  * odp-util: Print eth() for Ethernet flows if packet_type is absent.
  * python: Fix decoding error when the received data is larger than 4096.
  * datapath-windows: fix hash creation on ct mark
  * tunnel: Fix deletion of datapath tunnel ports in case of reconfiguration
  * tests: Make packet-type-aware.at hash independent
- Remove patches which are now upstream:
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch
- Use openvswitch user/group for the log directory (3f556d66edb9)</changelog>
  <changelog author="mchandras@suse.de" date="1533643200">- Add upstream patch to fix dbus timeout due to deadlock in systemd
  dependencies (bsc#1098630).
  * 0001-utilities-Launch-ovsdb-tool-without-using-PAM.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533816000">- Add upstream patch to fix permissions when running the logrotate
  script (bsc#1104049)
  * 0001-rhel-Use-correct-user-in-the-logrotate-configuration.patch</changelog>
</package>
<package pkgid="b014715eb2c457c9d2113298b90d3d7bd710443c12da55341a9297fd4657fb21" name="libopenvswitch-2_8-0" arch="x86_64">
  <version epoch="0" ver="2.8.5" rel="lp150.5.6.1"/>
  <changelog author="mchandras@suse.de" date="1500465600">- Version bump to 2.7.2. Some of the changes are:
  * Revert "netdev: Fix netdev_open() to adhere to class type if given"
  * connmgr: Fix crash when in_band_create() fails.
  * db-ctl-base: Fix reference-following feature in get_row_by_id().
  * netdev: Fix crash when ifa_netmask is null.
  * ovn-controller: fix use-after-free in physical_run()
  * ovn-controller: avoid crash when vswitchd connection is lost
  * ovsdb-types: Fix memory leak on error path.
  * vswitchd: Fix IFACE_STAT name error in iface_refresh_stats
  * netdev: Fix crash when interface option is changed to invalid value.
  * ofp-util: fix memory leak in ofputil_pull_ofp11_buckets
  * configure: Fix check for rte_config.h to handle cross-compilation.
  * ofp-util: Check length of buckets in ofputil_pull_ofp15_group_mod() (cve-2017-9265) (bsc#1041447)
  * ofp-print: Don't abort on unknown reason in role status message (cve-2017-9263) (bsc#1041470)</changelog>
  <changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mchandras@suse.de" date="1504526400">- Version bump to 2.8.0 (fate#323334, bsc#1050700). Some of the changes are:
  * ovs-ofctl can now accept and display port names in place of numbers.  By
    default it always accepts names and in interactive use it displays them;
    use --names or --no-names to override.  See ovs-ofctl(8) for details.
  * "ovs-ofctl dump-flows" now accepts --no-stats to omit flow statistics.
  * New ovs-dpctl command "ct-stats-show" to show connection tracking stats.
  * DPDK log messages redirected to OVS logging subsystem.
    Log level can be changed in a usual OVS way using
    'ovs-appctl vlog' commands for 'dpdk' module. Lower bound
    still can be configured via extra arguments for DPDK EAL.
  * dpdkvhostuser ports are marked as deprecated.  They will be removed
    in an upcoming release.
  * Support for DPDK v17.05.1.
  * New support for multiple VLANs (802.1ad or "QinQ"), including a new
    "dot1q-tunnel" port VLAN mode.
  * Added NAT support for userspace datapath.
  * Added FTP and TFTP support with NAT for userspace datapath.
  * Experimental NSH (Network Service Header) support in userspace datapath.
  * Tracing with ofproto/trace now traces through recirculation.
  * New support for role-based access control (see ovsdb-server(1)).
  * New commands 'stp/show' and 'rstp/show' (see ovs-vswitchd(8)).
  * All features required by OpenFlow 1.4 are now implemented, so
    ovs-vswitchd now enables OpenFlow 1.4 by default (in addition to
    OpenFlow 1.0 to 1.3).
  * Increased support for OpenFlow 1.6 (draft).
  * Bundles now support hashing by just nw_src or nw_dst.
  * The "learn" action now supports a "limit" option (see ovs-ofctl(8)).
  * The port status bit OFPPS_LIVE now reflects link aliveness.
  * OpenFlow 1.5 packet-out is now supported.
  * Support for OpenFlow 1.5 field packet_type and packet-type-aware
    pipeline (PTAP).
  * Added generic encap and decap actions (EXT-382).
    First supported use case is encap/decap for Ethernet.
  * Added NSH (Network Service Header) support in userspace
    Used generic encap and decap actions to implement encapsulation and
    decapsulation of NSH header.
    IETF NSH draft - https://datatracker.ietf.org/doc/draft-ietf-sfc-nsh/
  * ovs-vswitchd and ovsdb-server run as non-root users by default.
  * Add --cleanup option to command 'ovs-appctl exit' (see ovs-vswitchd(8)).
  * Use new tunnel port option "packet_type" to configure L2 vs. L3.
  * In conjunction with PTAP tunnel ports can handle a mix of L2 and L3
    payload.
  * New vxlan tunnel extension "gpe" to support VXLAN-GPE tunnels.
  * New support for non-Ethernet (L3) payloads in GRE and VXLAN-GPE.
  * Add experimental support for hardware offloading
  * HW offloading is disabled by default.
  * HW offloading is done through the TC interface.
  * The next major version of OVS will introduce a change in the
    conntrack API.  Conntrack state is only available to the processing
    path that follows the "recirc_table" argument of the ct() action.
    Starting in OVS 2.9, this state will be cleared for the current
    processing path whenever ct() is called.
- Create new openvswitch-doc subpackage for the Open vSwitch documentation
- Fix filename for logrotate configuration (bsc#1057357)
- Fix constrains with Provides/Obsoletes tags (bsc#1057357)
- Misc cleanups from spec-cleaner</changelog>
  <changelog author="mchandras@suse.de" date="1506686400">- Version bump to 2.8.1. Some of the changes are:
  * connmgr: Fix violation of flow monitoring protocol description.
  * ovn/actions: Improve OVN load-balancing performance.
  * dpif-netdev: Fix a zero-rate bug for meter
  * conntrack: Tighten handling of alg reverse conns.
  * conntrack: Add function ct_print_conn_info().
  * conntrack: Create nat_conn_keys_insert().
  * netdev-dpdk: reset packet_type for reused dp_packets.
  * ofp-util: Fix memory leaks when parsing OF1.5 group properties (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix memory leaks on error cases in ofputil_decode_group_mod() (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix buffer overread in ofputil_decode_bundle_add().
  * ofproto: Include patch ports in mtu overriden check
  * netdev-tc-offloads: Fix vxlan tunnel offloading
  * bridge: Fix controller status update to passive connections
  * lib/odp: Fix handling of set masked action in parse_odp_action
  * tests: Fix sparse error on test-ovn.c
  * dpif-netdev: Fix per packet cycles statistics.
  * netdev-dpdk: update vhost user client port status.
  * ovsdb-server.1: Fix mention of wrong option.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1512561600">- Fix documentation installation. It's best to install everything to
  %buildroot and then remove the files we don't need instead of the
  other way around since some files need to be present in the source
  directory for the testsuite to run.</changelog>
  <changelog author="mchandras@suse.de" date="1514376000">- Python fixes and improvements
  * Build Python3 subpackages for Open vSwitch python bindings
  * Switch build architecture to 'noarch' for python bindings.
  * Fix license for python subpackages
  * Build and ship python bytecode files.
- Do not mark files in /usr/share/* as configuration files
- Replace version macro with actual version number of Obsoletes tags.
  The DPDK packages have been merged with the regular OvS ones in the
  2.7.0 release so make it more explicit which ones we are obsoleting.
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1515499200">- Add upstream patches to support DPDK 17.11 (fate#322609)
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch
  * 0002-netdev-dpdk-DPDK-v17.11-upgrade.patch
  * 0003-netdev-dpdk-vHost-IOMMU-support.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519214400">- Version bump to 2.8.2 (bsc#1081953). Some of the changes are
  * ofp-meter: Fix use-after-free for decoding meter mods.
  * xlate: fix xport lookup for recirc
  * ofproto-dpif-xlate: add uuid to xports
  * netdev-dpdk: Fix requested MTU size validation.
  * netdev-dpdk: fix ingress_policer leak on error path
  * ofproto: Fix double-unref of temporary rule when learning.
  * gre: strip gre-tso offload flags
  * tc flower: reorder tunnel encap/decap actions
  * ofproto: Fix wrong datapath flow with same in_port and output port.
  * dpif: geneve: supply dpif function to get ifindex
  * ovs-tcpundump: fix a conversion issue
  * tunnel: fix tunnel flags set/clear.
  * netdev-dpdk: replace uint8_t with dpdk_port_t
  * lex: Fix parsing of long tokens.
  * odp-util: Use flexible sized buffer to hold Geneve options.
  * odp-util: Avoid reading wrong table in generate_all_wildcard_mask().
  * bond: Fix bug that writes to freed memory
  * conntrack: Fix icmp error address sanity check.
  * ovsdb-idl: Fix assertion failure on error path parsing server reply.
  * ofproto: Keep inserting buckets into a group from changing group type.
  * odp-util: Fix another hang in NSH action parsing.
  * odp-util: Fix parsing corner case for encap_nsh() actions.
  * netdev: netdev_get_etheraddr is not functioning as advertised.
  * ofproto-dpif-xlate: Fix bug that may leak ofproto_flow_mod
  * bfd: Fix memory leak
  * dpif: Fix memory leak
  * execution: Fix bug that leaks ovsdb_row
  * flow: Avoid buffer overread in parse_nsh() for malformed packet.
  * ovs-ofctl: Fix bad free in colors_parse_from_env().
  * odp-util: Fix buffer overread in parsing string form of ODP flows.
  * OpenvSwitch logrotate: Use ctl file path as target in ovs-appctl to reset logs
  * ovn-ctl: Add -vfile:info option to OVN_NB/SB_LOG options
  * netdev-tc-offloads: update stats properly on flow deletion
  * tests: Try harder to figure out whether IPv6 is supported.
  * netdev, dpif: fix the crash/assert on port delete
  * ovs-ctl: Don't remember vport-* kernel modules
  * NSH: Adjust NSH wire format to the latest IETF draft
  * ovs-lib: dont't purge corrupted DB
  * meta-flow: Fix format in documentation.
  * dpif-netlink-rtnl: Fix ovs_geneve probing after restart.
  * ovsdb-server: Fix memory leak
  * test-ovsdb: Fix memory leak
  * ovsdb-idl: Fix memory leak
  * netdev-linux: Fix wrong ceil rate when max-rate less than 8bit.
  * ofproto/trace: Fix memory leak in oftrace_push_ct_state()
  * ofproto-dpif-upcall: Fix null pointer dereference on exit.
  * ofproto-dpif-xlate: use xlate error enum for unsupported packet type
  * timeval: Check for OS-provided clock_gettime on macOS
  * Add dl_type to flow metadata for correct interpretation of conntrack metadata
  * Check flow's dl_type before setting ct_orig_tuple in 'pkt_metadata_from_flow()'
  * tests/stp: Use long warps instead of multiple calls.
  * ovs-save: Handle different 'ip addr show' output.
  * datapath-windows: Remove the workaround in NAT for TCP checksum
  * netdev: Fix memory leak on error path.
  * replication: Avoid theoretical use-after-free error in reset_database().
  * ovs-ctl.in: Call 'hostname -f' after vswitchd starts.
  * dpif-netdev: Use portable error code for zero rate meter band
- Remove patches that have been applied upstream:
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519300800">- Fix incorrect python3 dependencies for python2 subpackages
- Add upstream patches so we can build tools using python3 (bsc#1082194)
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1521633600">- set rundir to %_rundir</changelog>
  <changelog author="mchandras@suse.de" date="1521720000">- Fix file permissions in /etc/openvswitch for upgrades (951d79e638ec)</changelog>
  <changelog author="mchandras@suse.de" date="1524484800">- Preserve 'enable' status of openvswitch.service file when upgrading
  from &lt;SLE-12-SP3. The service file has been moved from the old
  openvswitch-switch subpackage to the main openvswitch one so we
  need to handle this migration step in %posttrans (bsc#1089476)
- Move DISABLE_STOP_ON_REMOVAL=yes to %preun. This variable is only
  checked in %service_del_preun macro</changelog>
  <changelog author="mchandras@suse.de" date="1525262400">- Move openvswitch user/group creation to %pre scriptlet. The default
  ownership of the configuration files expects the user and group to
  be available as early as possible (bsc#1091408)</changelog>
  <changelog author="mchandras@suse.de" date="1525867200">- Add support for RedHat distributions. All SUSE macros are now
  conditional and the spec file has been adapted based on the upstream
  one (fate#324537)
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1527595200">- Version bump to 2.8.4 (bsc#1094234). Some of the changes are
  * dpif-netdev: Free packets on TUNNEL_PUSH if may_steal.
  * netdev-dpdk: fix check for "net_nfp" driver
  * netdev-dpdk: Don't use PMD driver if not configured successfully
  * netdev-dpdk: Remove use of rte_mempool_ops_get_count.
  * conntrack-tcp: Handle tcp session reuse.
  * tunnel: make tun_key_to_attr aware of tunnel type.
  * Configurable Link State Change (LSC) detection mode
  * netdev-dpdk: don't enable scatter for jumbo RX support for nfp
  * faq: Document DPDK version maintenance.
  * Avoid crash in OvS while transmitting fragmented packets over tunnel.
  * compat: Fix upstream 4.4.119 kernel
  * ovs-vsctl: Fix segfault when attempting to del-port from parent bridge.
  * ofproto-dpif-xlate: Fix segmentation fault caused by tun_table
  * odp-util: Remove unnecessary TOS ECN bits rewrite for tunnels
  * datapath: Prevent panic
  * netdev-dpdk: Free mempool only when no in-use mbufs.
  * python: Fix a double encoding attempt on an Unicode string
  * ofproto-dpif: Init ukey-&gt;dump_seq to zero
  * nsh: Add unit test for double NSH encap and decap
  * xlate: Correct handling of double encap() actions
  * tc: Change filter error to debug once
  * lib/tc: Handle error parsing action in nl_parse_single_action
  * ovn: Fix tunnel id overflow.
  * ofp-actions: Correct execution of encap/decap actions in action set
  * ovsdb-idl.at: Fix test failed. (writing large data via IDL with unicode)
  * netdev-dpdk: Limit rate of DPDK logs.
  * netdev-dpdk: Remove 'error' from non error log.
  * odp-util: Print eth() for Ethernet flows if packet_type is absent.
  * python: Fix decoding error when the received data is larger than 4096.
  * datapath-windows: fix hash creation on ct mark
  * tunnel: Fix deletion of datapath tunnel ports in case of reconfiguration
  * tests: Make packet-type-aware.at hash independent
- Remove patches which are now upstream:
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch
- Use openvswitch user/group for the log directory (3f556d66edb9)</changelog>
  <changelog author="mchandras@suse.de" date="1533643200">- Add upstream patch to fix dbus timeout due to deadlock in systemd
  dependencies (bsc#1098630).
  * 0001-utilities-Launch-ovsdb-tool-without-using-PAM.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533816000">- Add upstream patch to fix permissions when running the logrotate
  script (bsc#1104049)
  * 0001-rhel-Use-correct-user-in-the-logrotate-configuration.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540209600">- Version bump to 2.8.5 (bsc#1112703). Some of the changes are:
  * dpif-netdev.at: Add missing backslash.
  * ofproto-dpif-xlate: Avoid deadlock on multicast snooping recursion.
  * expr: Disallow &lt; &lt;= &gt;= &gt; comparisons against empty value set.
  * expr: Set a limit on the depth of nested parentheses
  * dpif-netdev: Add vlan to mask for flow_put operation.
  * odp-util: Fix a use-after-free bug.
  * dpif-netlink: Fix null pointer.
  * dpif-netlink: don't allocate per thread netlink sockets (bsc#1110865)
  * netdev: Properly clear 'details' when iterating in NETDEV_QOS_FOR_EACH.
  * lex: Fix buffer overrun parsing overlong hexadecimal constants.
  * ovsdb-client: Fix a bug that uses wrong index
  * ofproto-dpif-xlate: Fix conntrack fields on NXT_RESUME
  * flow: Fix uninitialized flow fields in IPv6 error case.
  * ofproto-dpif: Fix NXT_RESUME flow stats
  * meta-flow: Make "nw_frag" a synonym for "ip_frag".
  * lib/tc: treat vlan id and prio as independent fields
  * odp-util: Don't attempt to write IPv6 flow label bits that don't exist.
  * lib/tc: reject offloading of non-Ethernet packets
  * ovn-controller: Fix test - IP relocation using GARP request.
  * tests: Make test result more predictable.
  * ovs-ctl: Allow add-remote without vswitchd started.
  * daemon-unix: Use same name for original or restarted children.
  * dpif-netdev: Prevent unsafe access when retrieving meter stats.
  * tests: Use the default key length when generating RSA keys
  * utilities: Drop shebang from bash completion script
  * ofp-actions: Re-fix error path for parsing OpenFlow actions.
  * nx-match: Avoid double-free on some error paths.
  * ovn-northd: Support learning neighbor from ARP request.
  * ovn-northd: LR respond ARP from valid subnet only.
  * netdev-dpdk: Support the link speed of XL710
  * netdev-linux: Avoid division by 0 if kernel reports bad scheduler data.
  * ofp-actions: Avoid assertion failure for clone(ct(...bad actions...)).
  * ovsdb-idl.c: Fix IDL index problem when rows are updated.
  * netdev-dpdk: Fix failure to configure flow control at netdev-init.
  * netdev-dpdk: Use hex for PCI vendor ID.
  * ofctl: Fixup compare_flows function
  * stream-ssl: Define SSL_OP_NO_SSL_MASK for OpenSSL versions that lack it.
  * utilities: Launch ovsdb-tool without using PAM
  * ovs-ofctl: Better validate OpenFlow message length in "ofp-parse-pcap".
  * stream-ssl: Don't enable new TLS versions by default
  * pcap-file: Fix formatting of log message.
  * meta-flow: Make mf_vl_mff_mf_from_nxm_header() require a valid field.
  * nx-match: Fix memory leak in oxm_pull_field_array() error case.
  * compat: Initialize IPv4 reassembly secret timer
  * conntrack: Fix use after free for FTP control case.
  * ifupdown.sh: Correctly bring up bond slaves.
  * conntrack: Fix using alg_exp_entry out of scope.
  * ofp-group: Don't assert-fail decoding bad OF1.5 group mod type or command.
  * ofp-actions: Fix buffer overread in decode_LEARN_specs().
  * ofp-actions: Avoid buffer overread in BUNDLE action decoding.
  * rconn: Suppress 'connected' log for unreliable connections.
  * datapath: stt: linearize in SKIP_ZERO_COPY case
  * ovn: Fix DHCP classless static route for non-classful masks.
  * ofproto: Fix OVS crash when reverting old flows in bundle commit
  * rconn: Introduce new invariant to fix assertion failure in corner case.
  * dpctl.man: Correct argument to "dump-flows".
  * ovs-thread: Fix thread id for threads not started with ovs_thread_create()
  * netdev-dpdk: Handle ENOTSUP for rte_eth_dev_set_mtu.
  * netdev-dpdk: Enable HW_CRC_STRIP for virtual functions.
  * lib: fix typo in fragment handling error messages
- Remove old patch which is included in this release:
  * 0001-utilities-Launch-ovsdb-tool-without-using-PAM.patch</changelog>
</package>
<package pkgid="a536fe43012f0d3b7442a71dec531979e7d2544dd59ee1626b674499fb341266" name="libowncloudsync-devel" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="lp150.2.4.1"/>
  <changelog author="badshah400@gmail.com" date="1493380800">- Use full URL for source code.
- Run post-install/uninstall scriptlets for %{name} to update the
  hicolor icon theme cache, as it installs icons to that theme.
  This fixes an issue where a generic icon instead of the app icon
  showed up in the desktop menus after installation; necessitates
  a BuildRequires on the hicolor-icon-theme, which provides the
  appropriate macros.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1493380801">- update to version 2.3.2 rc1
  * Fix more crashes (thanks to everyone submitting to our crash reporter!)
  * Improve compatibility with server 10.0 (5691, X-OC-Total-Size)
  * Share dialog: UI improvements, Bring to front on tray click
  * owncloudcmd: Align process return value with sync return value (3936)</changelog>
  <changelog author="klaas.freitag@suse.com" date="1493812800">- Use desktop database update script in postinstall and uninstall</changelog>
  <changelog author="klaas.freitag@suse.com" date="1494417600">- version 2.3.2 (2017-05-08)
  * Fix more crashes (thanks to everyone submitting to our crash reporter!)
  * Improve compatibility with server 10.0 (#5691, X-OC-Total-Size)
  * Share dialog: UI improvements, Bring to front on tray click
  * owncloudcmd: Align process return value with sync return value (#3936)
  * Fix disk free check on Windows when opening the local DB</changelog>
  <changelog author="klaas.freitag@suse.com" date="1497355200">- Fix: Build the dolphin overlays also for Tumbleweed.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1504526400">- Update to upstream version 2.3.3
  * Chunking NG: Don't use old chunking on new DAV endpoint (5855)
  * Selective Sync: Skip excluded folders when reading DB, don't let them show errors (5772)
  * Settings: Make window bigger so Qt version is always visible (5760)
  * Share links: Show warning that public link shares are public (5786)
  * Downloads: Re-trigger folder discovery on HTTP 404 (5799)
  * Notifications: Propagate "Dismiss" as DELETE to server (5922)
  * Overlay Icons: Fix potential hangs on Windows
  * SyncJournalDB: Don't use ._ as filename pattern if that does not work because of SMB storage settings (5844)
  * SyncJournalDB: Log reason for sqlite3 opening errors
  * Windows: Fix a memory leak in FileSystem::longWinPath
  * Switch Linux builds also to Qt 5.6.2 (5470)
  * Stopped maintaining Qt 4 support
  * Linux packaging fixes: install the owncloud-client-nemo, owncloud-client-nautilus, owncloud-client-caja, owncloud-client-dolphin package for sync-state icons and a share-with menu in your file manager.
  * Linux deprecation: Releases after 2.3.3 do not support Fedora 24 or lower, openSUSE Leap 42.1 or lower, Debian 7.0 or lower.
  * 2.4.0 deprecation: We will drop 32-bit Linux support and MacOS X 10.9 support or lower.
  * Supported platforms are documented at Desktop System Requirements.</changelog>
  <changelog author="freitag@suse.com" date="1504699200">- Added updstream patch force_qdbus_tray_workaround.patch to fix a
  problem with the Qt lib on Leap 42.2 only</changelog>
  <changelog author="freitag@opensuse.org" date="1504872000">- Reworked the source tarball coming from upstream and removed not
  needed stuff as well as questionable licensed files.
  See https://github.com/owncloud/client/issues/6005 for details
  and README.source which was added and explains that.</changelog>
  <changelog author="freitag@opensuse.org" date="1505217600">- Install README.source to doc. Make pack checker in Factory happy.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1508587200">- Do not install README.source file as requested in sr</changelog>
  <changelog author="freitag@owncloud.com" date="1514203200">- Update to version 2.4.0 with lots of fixes and additions.
  Detailed changelog:
  https://raw.githubusercontent.com/owncloud/client/master/ChangeLog
- Drop force_qdbus_tray_workaround.patch: Problem fixed upstream.</changelog>
  <changelog author="freitag@owncloud.com" date="1514376000">- Feedback from review:
  * Use %{buildroot} instead of ${RPM_BUILD_ROOT}
  * Leave license- and few other readme files with the main package</changelog>
  <changelog author="freitag@owncloud.com" date="1514462400">- Added rpath.diff: Fix the rpath to the private libs of owncloud
  Fixed documentation file list issue</changelog>
  <changelog author="freitag@owncloud.com" date="1514548800">- Fixed documentation installation by avoiding the %doc macro.</changelog>
  <changelog author="freitag@owncloud.com" date="1514808000">- Bring back the doc macro to mark the documentation files.
  Fix building by utilizing the exclude macro.</changelog>
  <changelog author="freitag@owncloud.com" date="1514808001">- Removed superflous patch force_qdbus_tray_workaround.patch</changelog>
  <changelog author="klaas.freitag@suse.com" date="1519819200">- Add explicit BuildRequires on Qt5Sql to fix TW build.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1520337600">- Update to upstream version 2.4.1
  * Enhanced Nautilus integration.
  * Cleaner User Experience and overall improvements to
    notifications and the synchronization of files.
  * Better implementation and integration of Client Filesystems.
  * Improved Sharing dialogue
  * and a lot more...
  Changelog: https://github.com/owncloud/client/releases</changelog>
  <changelog author="freitag@owncloud.com" date="1521201600">- Updated changelog for upstream release.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1532692800">- Update to upstream version 2.4.2 (see boo#1057832)
  * Coming with some bugfixes, Changelog:
    https://owncloud.org/changelog/desktop-client/
- Added patch fix-systray-menu-pos.patch to fix a problem with
  older Qt versions. Applies only to versions Leap 15 and older,
  fixes https://github.com/owncloud/client/issues/5968</changelog>
</package>
<package pkgid="e8fba8bd6074ab46e938e52d8335b5cd995662fda9b5ae1fd1179ab973281a85" name="libowncloudsync0" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="lp150.2.4.1"/>
  <changelog author="badshah400@gmail.com" date="1493380800">- Use full URL for source code.
- Run post-install/uninstall scriptlets for %{name} to update the
  hicolor icon theme cache, as it installs icons to that theme.
  This fixes an issue where a generic icon instead of the app icon
  showed up in the desktop menus after installation; necessitates
  a BuildRequires on the hicolor-icon-theme, which provides the
  appropriate macros.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1493380801">- update to version 2.3.2 rc1
  * Fix more crashes (thanks to everyone submitting to our crash reporter!)
  * Improve compatibility with server 10.0 (5691, X-OC-Total-Size)
  * Share dialog: UI improvements, Bring to front on tray click
  * owncloudcmd: Align process return value with sync return value (3936)</changelog>
  <changelog author="klaas.freitag@suse.com" date="1493812800">- Use desktop database update script in postinstall and uninstall</changelog>
  <changelog author="klaas.freitag@suse.com" date="1494417600">- version 2.3.2 (2017-05-08)
  * Fix more crashes (thanks to everyone submitting to our crash reporter!)
  * Improve compatibility with server 10.0 (#5691, X-OC-Total-Size)
  * Share dialog: UI improvements, Bring to front on tray click
  * owncloudcmd: Align process return value with sync return value (#3936)
  * Fix disk free check on Windows when opening the local DB</changelog>
  <changelog author="klaas.freitag@suse.com" date="1497355200">- Fix: Build the dolphin overlays also for Tumbleweed.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1504526400">- Update to upstream version 2.3.3
  * Chunking NG: Don't use old chunking on new DAV endpoint (5855)
  * Selective Sync: Skip excluded folders when reading DB, don't let them show errors (5772)
  * Settings: Make window bigger so Qt version is always visible (5760)
  * Share links: Show warning that public link shares are public (5786)
  * Downloads: Re-trigger folder discovery on HTTP 404 (5799)
  * Notifications: Propagate "Dismiss" as DELETE to server (5922)
  * Overlay Icons: Fix potential hangs on Windows
  * SyncJournalDB: Don't use ._ as filename pattern if that does not work because of SMB storage settings (5844)
  * SyncJournalDB: Log reason for sqlite3 opening errors
  * Windows: Fix a memory leak in FileSystem::longWinPath
  * Switch Linux builds also to Qt 5.6.2 (5470)
  * Stopped maintaining Qt 4 support
  * Linux packaging fixes: install the owncloud-client-nemo, owncloud-client-nautilus, owncloud-client-caja, owncloud-client-dolphin package for sync-state icons and a share-with menu in your file manager.
  * Linux deprecation: Releases after 2.3.3 do not support Fedora 24 or lower, openSUSE Leap 42.1 or lower, Debian 7.0 or lower.
  * 2.4.0 deprecation: We will drop 32-bit Linux support and MacOS X 10.9 support or lower.
  * Supported platforms are documented at Desktop System Requirements.</changelog>
  <changelog author="freitag@suse.com" date="1504699200">- Added updstream patch force_qdbus_tray_workaround.patch to fix a
  problem with the Qt lib on Leap 42.2 only</changelog>
  <changelog author="freitag@opensuse.org" date="1504872000">- Reworked the source tarball coming from upstream and removed not
  needed stuff as well as questionable licensed files.
  See https://github.com/owncloud/client/issues/6005 for details
  and README.source which was added and explains that.</changelog>
  <changelog author="freitag@opensuse.org" date="1505217600">- Install README.source to doc. Make pack checker in Factory happy.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1508587200">- Do not install README.source file as requested in sr</changelog>
  <changelog author="freitag@owncloud.com" date="1514203200">- Update to version 2.4.0 with lots of fixes and additions.
  Detailed changelog:
  https://raw.githubusercontent.com/owncloud/client/master/ChangeLog
- Drop force_qdbus_tray_workaround.patch: Problem fixed upstream.</changelog>
  <changelog author="freitag@owncloud.com" date="1514376000">- Feedback from review:
  * Use %{buildroot} instead of ${RPM_BUILD_ROOT}
  * Leave license- and few other readme files with the main package</changelog>
  <changelog author="freitag@owncloud.com" date="1514462400">- Added rpath.diff: Fix the rpath to the private libs of owncloud
  Fixed documentation file list issue</changelog>
  <changelog author="freitag@owncloud.com" date="1514548800">- Fixed documentation installation by avoiding the %doc macro.</changelog>
  <changelog author="freitag@owncloud.com" date="1514808000">- Bring back the doc macro to mark the documentation files.
  Fix building by utilizing the exclude macro.</changelog>
  <changelog author="freitag@owncloud.com" date="1514808001">- Removed superflous patch force_qdbus_tray_workaround.patch</changelog>
  <changelog author="klaas.freitag@suse.com" date="1519819200">- Add explicit BuildRequires on Qt5Sql to fix TW build.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1520337600">- Update to upstream version 2.4.1
  * Enhanced Nautilus integration.
  * Cleaner User Experience and overall improvements to
    notifications and the synchronization of files.
  * Better implementation and integration of Client Filesystems.
  * Improved Sharing dialogue
  * and a lot more...
  Changelog: https://github.com/owncloud/client/releases</changelog>
  <changelog author="freitag@owncloud.com" date="1521201600">- Updated changelog for upstream release.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1532692800">- Update to upstream version 2.4.2 (see boo#1057832)
  * Coming with some bugfixes, Changelog:
    https://owncloud.org/changelog/desktop-client/
- Added patch fix-systray-menu-pos.patch to fix a problem with
  older Qt versions. Applies only to versions Leap 15 and older,
  fixes https://github.com/owncloud/client/issues/5968</changelog>
</package>
<package pkgid="679631b4604d58ed02fd8aabb9c5ae69be6908778d9cee5c6751048640deddd2" name="libpackagekit-glib2-18" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp150.3.3.1"/>
  <changelog author="sckang@suse.com" date="1496318400">- Add PackageKit-avoid-stack-smashing-on-i586.patch: Fix PackageKit
  stack smashing when running "pkcon get-updates" on 32-bit system
  (fdo#101267, bsc#1020028).</changelog>
  <changelog author="dimstar@opensuse.org" date="1496836800">- Update to version 1.1.6:
  + New Feature: Add new status "Running hooks".
  + Bugfixes:
  - Checks NULL strings inside pk_progress_bar_start.
  - Fix segfault when config file is not found.
  - Return success to avoid reboot in pk-offline-update.
  - Use g_printerr() for errors instead g_print().
  - Various tweaks to the offline-updates service file.
  + Backends: fixes for alpm, aptcc and dnf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Explicitly call autoreconf, as one of the patches touches the
  build system. As long as the version of automake available is the
  same as was used to bootstrap the tarball, there is no issue, but
  if the version changes, the call must be explicit.
- Add autoconf-archive BuildRequires in order to actually be able
  to successfully bootstrap.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
</package>
<package pkgid="fbecb0245efae5f697ae63a6912e827864ba32b53144df2c14d9ecb712402ad4" name="libpackagekit-glib2-18-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp150.3.3.1"/>
  <changelog author="sckang@suse.com" date="1496318400">- Add PackageKit-avoid-stack-smashing-on-i586.patch: Fix PackageKit
  stack smashing when running "pkcon get-updates" on 32-bit system
  (fdo#101267, bsc#1020028).</changelog>
  <changelog author="dimstar@opensuse.org" date="1496836800">- Update to version 1.1.6:
  + New Feature: Add new status "Running hooks".
  + Bugfixes:
  - Checks NULL strings inside pk_progress_bar_start.
  - Fix segfault when config file is not found.
  - Return success to avoid reboot in pk-offline-update.
  - Use g_printerr() for errors instead g_print().
  - Various tweaks to the offline-updates service file.
  + Backends: fixes for alpm, aptcc and dnf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Explicitly call autoreconf, as one of the patches touches the
  build system. As long as the version of automake available is the
  same as was used to bootstrap the tarball, there is no issue, but
  if the version changes, the call must be explicit.
- Add autoconf-archive BuildRequires in order to actually be able
  to successfully bootstrap.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
</package>
<package pkgid="6a2853c31acbc0bf387a2acc97511f980d6bb1f44a93372ed4e0d811c48f870f" name="libpackagekit-glib2-devel" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp150.3.3.1"/>
  <changelog author="sckang@suse.com" date="1496318400">- Add PackageKit-avoid-stack-smashing-on-i586.patch: Fix PackageKit
  stack smashing when running "pkcon get-updates" on 32-bit system
  (fdo#101267, bsc#1020028).</changelog>
  <changelog author="dimstar@opensuse.org" date="1496836800">- Update to version 1.1.6:
  + New Feature: Add new status "Running hooks".
  + Bugfixes:
  - Checks NULL strings inside pk_progress_bar_start.
  - Fix segfault when config file is not found.
  - Return success to avoid reboot in pk-offline-update.
  - Use g_printerr() for errors instead g_print().
  - Various tweaks to the offline-updates service file.
  + Backends: fixes for alpm, aptcc and dnf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Explicitly call autoreconf, as one of the patches touches the
  build system. As long as the version of automake available is the
  same as was used to bootstrap the tarball, there is no issue, but
  if the version changes, the call must be explicit.
- Add autoconf-archive BuildRequires in order to actually be able
  to successfully bootstrap.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
</package>
<package pkgid="352bfca1d2a996b82fb30b5e7b204c4a0ab00158ea581232b3c7cd4358ea55f3" name="libpackagekit-glib2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp150.3.3.1"/>
  <changelog author="sckang@suse.com" date="1496318400">- Add PackageKit-avoid-stack-smashing-on-i586.patch: Fix PackageKit
  stack smashing when running "pkcon get-updates" on 32-bit system
  (fdo#101267, bsc#1020028).</changelog>
  <changelog author="dimstar@opensuse.org" date="1496836800">- Update to version 1.1.6:
  + New Feature: Add new status "Running hooks".
  + Bugfixes:
  - Checks NULL strings inside pk_progress_bar_start.
  - Fix segfault when config file is not found.
  - Return success to avoid reboot in pk-offline-update.
  - Use g_printerr() for errors instead g_print().
  - Various tweaks to the offline-updates service file.
  + Backends: fixes for alpm, aptcc and dnf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Explicitly call autoreconf, as one of the patches touches the
  build system. As long as the version of automake available is the
  same as was used to bootstrap the tarball, there is no issue, but
  if the version changes, the call must be explicit.
- Add autoconf-archive BuildRequires in order to actually be able
  to successfully bootstrap.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
</package>
<package pkgid="f48eeea457724fe5ba1f534aeacdd4a0922b902e1b6139a868a5afb554f3f52c" name="libpango-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.40.14" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 1.38.1:
  + Require Harfbuzz 0.9.30.
  + Fix make check with --enable-debug=no.
  + Win32 build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 1.39.0:
  + Update PangoScript to Unicode 8.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458734400">- Update to version 1.40.0:
  + Fix typos.
  + Don't treat OGHAM SPACE MARK as whitespace.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 1.40.1 (Fate#318572):
  + Use $PKG_CONFIG consistently (bgo#764191).
  + Fix a PangoWin32FontMap memory leak (bgo#764089).</changelog>
  <changelog author="hpj@suse.com" date="1470225600">- Make libpango obsolete/provide pango-modules bsc#978972. Change
  by idonmez@suse.com.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.40.2:
  + Improve introspection builds in msvc (bgo#764984).
  + Properly handle UTF32 chars in coretext.
  + Add rebeccapurple to list of colors.
  + Correct font weight mapping in coretext (bgo#766148).
  + Use version macros for exports (bgo#767587).</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 1.40.3:
  + Fix export of pango_cairo_win32_font_map_get_type (bgo#771004).
  + Fix build on OS X (bgo#770729).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488196800">- Update to version 1.40.4:
  + Fix introspection annotation of pango_lkayout_get_size
    (bgo#779232).
  + Fix some Coverity findings: bgo#778601, bgo#778602, bgo#778654,
    bgo#778656.</changelog>
  <changelog author="zaitor@opensuse.org" date="1491825600">- Update to version 1.40.5:
  + Add missing introspection annotations (bgo#778663).
  + Fix line-end handling in pango_read_line (bgo#778816).
  + Make alpha attribute work without color (bgo#773767).
  + win32: Enable rendering colored texti and underlines
    (bgo#768779).</changelog>
  <changelog author="zaitor@opensuse.org" date="1495540800">- Update to version 1.40.6:
  + Don't use deprecated harfbuzz api.
  + Correctly implement min-required/max-allowed support.
  + Avoid compiler warnings.
  + Drop -uninstalled.pd files.
  + Add support for building with meson.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 1.40.7:
  + Some fixes for meson build support.
  + Don't change fonts for variation selectors (bgo#781123).
  + Fix some bugs in the libthai glue layer.
  + Pass text along when calling into cairo (bgo#784394).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.40.8:
  + Support emoji sequences in boundary determination.
  + Choose emoji font for color emoji.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 1.40.9:
  + Build and dist fixes.
  + Fix build on Windows with MSVC (bgo#783274).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884800">- Update to version 1.40.10:
  + Update Emoji data to version 5.
  + Apply gravity across spans in markup (bgo#784243).
  + Support variation selectors for shaping.
  + CoreText: Rely on CGFont for scaling (bgo#782393).
  + Fix grapheme breaks and backspacing for Emoji.
- Add meson BuildRequires and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson build system.
- Add help2man BuildRequires, needed to build manpages.
- Minor spec file cleanup.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 1.40.11:
  + Fix backspacing for more Emoji sequences.
  + Make tests run faster.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1504180800">- Add pango-fix-default-break-function.patch: Fix
  pango_default_break function for sentence start/end (bgo#785978).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.40.12:
  + Fix pango_default_break for sentence start/end (bgo#785978).
  + Fix multilib issue in pango-enum-types.h (bgo#786887).
- Drop pango-fix-default-break-function.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 1.40.13:
  + Some performance improvements (bgo#788643).
  + Update pango_default_break for line breaks (bgo#788115).
  + Fix an introspection warning (bgo#781857).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 1.40.14:
  + Fix char break problem introduced in 1.40.13 (bgo#789625).
  + Add tests for char breaking.</changelog>
  <changelog author="sreeves@suse.com" date="1534593600">- Add pango-emoji-bsc1103877.patch: Fix denial of service
  when parsing emoji (bsc#1103877, CVE-2018-15120)</changelog>
</package>
<package pkgid="c18e547ff8920c5e2d0eba7a339c8e88d4d83460904ba031132375c924bc7cd5" name="libpango-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.40.14" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 1.38.1:
  + Require Harfbuzz 0.9.30.
  + Fix make check with --enable-debug=no.
  + Win32 build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 1.39.0:
  + Update PangoScript to Unicode 8.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458734400">- Update to version 1.40.0:
  + Fix typos.
  + Don't treat OGHAM SPACE MARK as whitespace.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 1.40.1 (Fate#318572):
  + Use $PKG_CONFIG consistently (bgo#764191).
  + Fix a PangoWin32FontMap memory leak (bgo#764089).</changelog>
  <changelog author="hpj@suse.com" date="1470225600">- Make libpango obsolete/provide pango-modules bsc#978972. Change
  by idonmez@suse.com.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.40.2:
  + Improve introspection builds in msvc (bgo#764984).
  + Properly handle UTF32 chars in coretext.
  + Add rebeccapurple to list of colors.
  + Correct font weight mapping in coretext (bgo#766148).
  + Use version macros for exports (bgo#767587).</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 1.40.3:
  + Fix export of pango_cairo_win32_font_map_get_type (bgo#771004).
  + Fix build on OS X (bgo#770729).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488196800">- Update to version 1.40.4:
  + Fix introspection annotation of pango_lkayout_get_size
    (bgo#779232).
  + Fix some Coverity findings: bgo#778601, bgo#778602, bgo#778654,
    bgo#778656.</changelog>
  <changelog author="zaitor@opensuse.org" date="1491825600">- Update to version 1.40.5:
  + Add missing introspection annotations (bgo#778663).
  + Fix line-end handling in pango_read_line (bgo#778816).
  + Make alpha attribute work without color (bgo#773767).
  + win32: Enable rendering colored texti and underlines
    (bgo#768779).</changelog>
  <changelog author="zaitor@opensuse.org" date="1495540800">- Update to version 1.40.6:
  + Don't use deprecated harfbuzz api.
  + Correctly implement min-required/max-allowed support.
  + Avoid compiler warnings.
  + Drop -uninstalled.pd files.
  + Add support for building with meson.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 1.40.7:
  + Some fixes for meson build support.
  + Don't change fonts for variation selectors (bgo#781123).
  + Fix some bugs in the libthai glue layer.
  + Pass text along when calling into cairo (bgo#784394).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.40.8:
  + Support emoji sequences in boundary determination.
  + Choose emoji font for color emoji.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 1.40.9:
  + Build and dist fixes.
  + Fix build on Windows with MSVC (bgo#783274).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884800">- Update to version 1.40.10:
  + Update Emoji data to version 5.
  + Apply gravity across spans in markup (bgo#784243).
  + Support variation selectors for shaping.
  + CoreText: Rely on CGFont for scaling (bgo#782393).
  + Fix grapheme breaks and backspacing for Emoji.
- Add meson BuildRequires and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson build system.
- Add help2man BuildRequires, needed to build manpages.
- Minor spec file cleanup.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 1.40.11:
  + Fix backspacing for more Emoji sequences.
  + Make tests run faster.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1504180800">- Add pango-fix-default-break-function.patch: Fix
  pango_default_break function for sentence start/end (bgo#785978).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.40.12:
  + Fix pango_default_break for sentence start/end (bgo#785978).
  + Fix multilib issue in pango-enum-types.h (bgo#786887).
- Drop pango-fix-default-break-function.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 1.40.13:
  + Some performance improvements (bgo#788643).
  + Update pango_default_break for line breaks (bgo#788115).
  + Fix an introspection warning (bgo#781857).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 1.40.14:
  + Fix char break problem introduced in 1.40.13 (bgo#789625).
  + Add tests for char breaking.</changelog>
  <changelog author="sreeves@suse.com" date="1534593600">- Add pango-emoji-bsc1103877.patch: Fix denial of service
  when parsing emoji (bsc#1103877, CVE-2018-15120)</changelog>
</package>
<package pkgid="76e80f2e89a87146e940e602ac0b9f9a2434aa2b506b4f97ea015e7270e9765d" name="libply-boot-client4" arch="x86_64">
  <version epoch="0" ver="0.9.3+git20181016.a588b3f" rel="lp150.3.3.1"/>
  <changelog author="fvogt@suse.com" date="1453291200">- Add 0001-Add-label-ft-plugin.patch and
    0002-Install-label-ft-plugin-into-initrd-if-available.patch:
  - Ability to output text in initrd, needed for encryption
  - boo#959986</changelog>
  <changelog author="fvogt@suse.com" date="1454932800">- Add 0003-fix_null_deref.patch as well
  - Avoid potential SEGV if label plugin fails to load</changelog>
  <changelog author="idonmez@suse.com" date="1464782400">- Remove framebuffer support bsc#980750 and bsc#982226</changelog>
  <changelog author="tchvatal@suse.com" date="1470312000">- Reduce patches list removing merged upstream (bit differently tho):
  * 0001-seats-guard-against-NULL-terminal.patch
  * fix-serial-consoles.patch
  * plymouth-boot-vga-framebuffer.patch
- Refresh patches:
  * 0001-let-it-become-a-real-daemon.patch
- Update to version 0.9.2+git20160620.0e65b86:
  * configure: tweak defaults to be more systemd friendly
  * text: don't draw if not animating
  * terminal: always open terminal in non-blocking mode
  * device-manager: probe existing DRM devices at startup
  * drm: don't pick up drm master implicitly
  * terminal: refresh geometry after drm device arrives
  * logger: stop using carriage returns
  * build-goo: don't install systemd units during distcheck
  * systemd-units: Fix uninstall script
  * configure: switch to tar.xz instead tar.bz2</changelog>
  <changelog author="tchvatal@suse.com" date="1470312001">- Sort out with spec-cleaner and move all buildrequires to main scope
  not to subpkgs, sometimes interpreted wrongly by rpm if it is split</changelog>
  <changelog author="tchvatal@suse.com" date="1473163200">- Add systemd to buildrequires to properly detect systemd-ask-password</changelog>
  <changelog author="tchvatal@suse.com" date="1473163201">- Update to version 0.9.2+git20160823.e4b7e49:
  * libply: fix HiDPI detection
  * libply, main: Add device scale setting
  * main: support plymouth.force-scale on the kernel command line
- Refresh patch:
  * 0001-let-it-become-a-real-daemon.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1483963200">- Update to version 0.9.2+git20161215.18dd755:
  * terminal: refresh geometry after drm device arrives
  * logger: stop using carriage returns
  * build-goo: don't install systemd units during distcheck
  * systemd-units: Fix uninstall script
  * configure: switch to tar.xz instead tar.bz2
  * libply: fix HiDPI detection
  * libply, main: Add device scale setting
  * main: support plymouth.force-scale on the kernel command line
  * build-goo: make udev support build time optional
  * device-manager: dont pass terminal as renderer device</changelog>
  <changelog author="fvogt@suse.com" date="1485345600">- Remove patch which causes breakage with systemd-vconsole-setup (bsc#1020327):
  * 0001-let-it-become-a-real-daemon.patch
- Add upstream patch to fix crash on boot:
  * 0001-device-manager-handle-NULL-renderer-better.patch
- Replace removal of framebuffer driver and plymouth-ignore-cirrusdrm.patch
  with single patch:
  * only_use_fb_for_cirrus_bochs.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1485432000">- Drop use-mkinitrd.patch: No longer needed, mkinitrd is just a
  wrapper for dracut now any way, hence this patch is currently
  pointless.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1494244800">- Update to version 0.9.2+git20170424.6fd5c6b:
  * main: Look for config in runtime dir first
  * main: Look for theme in runtime dir first
  * Revert "Recreate boot log at each boot instead of appending"
  * x11: implement get_display_name
  * drm: implement get_display_name
  * configure: don't look for libudev when --without-udev is passed
  * renderer: export device name from plugin
  * device-manager: handle NULL renderer better
- Remove 0001-device-manager-handle-NULL-renderer-better.patch
  (upstreamed).</changelog>
  <changelog author="qzhao@suse.com" date="1497441600">- Update plymouth.spec: Add COPYING file in plymouth package file
  list, This is for the law requirement (bsc#1043834).</changelog>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
</package>
<package pkgid="254cb0b1ca267cfc61d528fef606296e3909e84880069dd7d7aaf5596b660b2d" name="libply-splash-core4" arch="x86_64">
  <version epoch="0" ver="0.9.3+git20181016.a588b3f" rel="lp150.3.3.1"/>
  <changelog author="fvogt@suse.com" date="1453291200">- Add 0001-Add-label-ft-plugin.patch and
    0002-Install-label-ft-plugin-into-initrd-if-available.patch:
  - Ability to output text in initrd, needed for encryption
  - boo#959986</changelog>
  <changelog author="fvogt@suse.com" date="1454932800">- Add 0003-fix_null_deref.patch as well
  - Avoid potential SEGV if label plugin fails to load</changelog>
  <changelog author="idonmez@suse.com" date="1464782400">- Remove framebuffer support bsc#980750 and bsc#982226</changelog>
  <changelog author="tchvatal@suse.com" date="1470312000">- Reduce patches list removing merged upstream (bit differently tho):
  * 0001-seats-guard-against-NULL-terminal.patch
  * fix-serial-consoles.patch
  * plymouth-boot-vga-framebuffer.patch
- Refresh patches:
  * 0001-let-it-become-a-real-daemon.patch
- Update to version 0.9.2+git20160620.0e65b86:
  * configure: tweak defaults to be more systemd friendly
  * text: don't draw if not animating
  * terminal: always open terminal in non-blocking mode
  * device-manager: probe existing DRM devices at startup
  * drm: don't pick up drm master implicitly
  * terminal: refresh geometry after drm device arrives
  * logger: stop using carriage returns
  * build-goo: don't install systemd units during distcheck
  * systemd-units: Fix uninstall script
  * configure: switch to tar.xz instead tar.bz2</changelog>
  <changelog author="tchvatal@suse.com" date="1470312001">- Sort out with spec-cleaner and move all buildrequires to main scope
  not to subpkgs, sometimes interpreted wrongly by rpm if it is split</changelog>
  <changelog author="tchvatal@suse.com" date="1473163200">- Add systemd to buildrequires to properly detect systemd-ask-password</changelog>
  <changelog author="tchvatal@suse.com" date="1473163201">- Update to version 0.9.2+git20160823.e4b7e49:
  * libply: fix HiDPI detection
  * libply, main: Add device scale setting
  * main: support plymouth.force-scale on the kernel command line
- Refresh patch:
  * 0001-let-it-become-a-real-daemon.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1483963200">- Update to version 0.9.2+git20161215.18dd755:
  * terminal: refresh geometry after drm device arrives
  * logger: stop using carriage returns
  * build-goo: don't install systemd units during distcheck
  * systemd-units: Fix uninstall script
  * configure: switch to tar.xz instead tar.bz2
  * libply: fix HiDPI detection
  * libply, main: Add device scale setting
  * main: support plymouth.force-scale on the kernel command line
  * build-goo: make udev support build time optional
  * device-manager: dont pass terminal as renderer device</changelog>
  <changelog author="fvogt@suse.com" date="1485345600">- Remove patch which causes breakage with systemd-vconsole-setup (bsc#1020327):
  * 0001-let-it-become-a-real-daemon.patch
- Add upstream patch to fix crash on boot:
  * 0001-device-manager-handle-NULL-renderer-better.patch
- Replace removal of framebuffer driver and plymouth-ignore-cirrusdrm.patch
  with single patch:
  * only_use_fb_for_cirrus_bochs.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1485432000">- Drop use-mkinitrd.patch: No longer needed, mkinitrd is just a
  wrapper for dracut now any way, hence this patch is currently
  pointless.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1494244800">- Update to version 0.9.2+git20170424.6fd5c6b:
  * main: Look for config in runtime dir first
  * main: Look for theme in runtime dir first
  * Revert "Recreate boot log at each boot instead of appending"
  * x11: implement get_display_name
  * drm: implement get_display_name
  * configure: don't look for libudev when --without-udev is passed
  * renderer: export device name from plugin
  * device-manager: handle NULL renderer better
- Remove 0001-device-manager-handle-NULL-renderer-better.patch
  (upstreamed).</changelog>
  <changelog author="qzhao@suse.com" date="1497441600">- Update plymouth.spec: Add COPYING file in plymouth package file
  list, This is for the law requirement (bsc#1043834).</changelog>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
</package>
<package pkgid="3ef02d9ce2c8d54801d351e17aa5a25bd3ee7f1ad48b3e273c5e0eca7dea215c" name="libply-splash-graphics4" arch="x86_64">
  <version epoch="0" ver="0.9.3+git20181016.a588b3f" rel="lp150.3.3.1"/>
  <changelog author="fvogt@suse.com" date="1453291200">- Add 0001-Add-label-ft-plugin.patch and
    0002-Install-label-ft-plugin-into-initrd-if-available.patch:
  - Ability to output text in initrd, needed for encryption
  - boo#959986</changelog>
  <changelog author="fvogt@suse.com" date="1454932800">- Add 0003-fix_null_deref.patch as well
  - Avoid potential SEGV if label plugin fails to load</changelog>
  <changelog author="idonmez@suse.com" date="1464782400">- Remove framebuffer support bsc#980750 and bsc#982226</changelog>
  <changelog author="tchvatal@suse.com" date="1470312000">- Reduce patches list removing merged upstream (bit differently tho):
  * 0001-seats-guard-against-NULL-terminal.patch
  * fix-serial-consoles.patch
  * plymouth-boot-vga-framebuffer.patch
- Refresh patches:
  * 0001-let-it-become-a-real-daemon.patch
- Update to version 0.9.2+git20160620.0e65b86:
  * configure: tweak defaults to be more systemd friendly
  * text: don't draw if not animating
  * terminal: always open terminal in non-blocking mode
  * device-manager: probe existing DRM devices at startup
  * drm: don't pick up drm master implicitly
  * terminal: refresh geometry after drm device arrives
  * logger: stop using carriage returns
  * build-goo: don't install systemd units during distcheck
  * systemd-units: Fix uninstall script
  * configure: switch to tar.xz instead tar.bz2</changelog>
  <changelog author="tchvatal@suse.com" date="1470312001">- Sort out with spec-cleaner and move all buildrequires to main scope
  not to subpkgs, sometimes interpreted wrongly by rpm if it is split</changelog>
  <changelog author="tchvatal@suse.com" date="1473163200">- Add systemd to buildrequires to properly detect systemd-ask-password</changelog>
  <changelog author="tchvatal@suse.com" date="1473163201">- Update to version 0.9.2+git20160823.e4b7e49:
  * libply: fix HiDPI detection
  * libply, main: Add device scale setting
  * main: support plymouth.force-scale on the kernel command line
- Refresh patch:
  * 0001-let-it-become-a-real-daemon.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1483963200">- Update to version 0.9.2+git20161215.18dd755:
  * terminal: refresh geometry after drm device arrives
  * logger: stop using carriage returns
  * build-goo: don't install systemd units during distcheck
  * systemd-units: Fix uninstall script
  * configure: switch to tar.xz instead tar.bz2
  * libply: fix HiDPI detection
  * libply, main: Add device scale setting
  * main: support plymouth.force-scale on the kernel command line
  * build-goo: make udev support build time optional
  * device-manager: dont pass terminal as renderer device</changelog>
  <changelog author="fvogt@suse.com" date="1485345600">- Remove patch which causes breakage with systemd-vconsole-setup (bsc#1020327):
  * 0001-let-it-become-a-real-daemon.patch
- Add upstream patch to fix crash on boot:
  * 0001-device-manager-handle-NULL-renderer-better.patch
- Replace removal of framebuffer driver and plymouth-ignore-cirrusdrm.patch
  with single patch:
  * only_use_fb_for_cirrus_bochs.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1485432000">- Drop use-mkinitrd.patch: No longer needed, mkinitrd is just a
  wrapper for dracut now any way, hence this patch is currently
  pointless.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1494244800">- Update to version 0.9.2+git20170424.6fd5c6b:
  * main: Look for config in runtime dir first
  * main: Look for theme in runtime dir first
  * Revert "Recreate boot log at each boot instead of appending"
  * x11: implement get_display_name
  * drm: implement get_display_name
  * configure: don't look for libudev when --without-udev is passed
  * renderer: export device name from plugin
  * device-manager: handle NULL renderer better
- Remove 0001-device-manager-handle-NULL-renderer-better.patch
  (upstreamed).</changelog>
  <changelog author="qzhao@suse.com" date="1497441600">- Update plymouth.spec: Add COPYING file in plymouth package file
  list, This is for the law requirement (bsc#1043834).</changelog>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
</package>
<package pkgid="2428689804b9a2c65a2d21cb946796258d997a432f99343f7a285f552a200349" name="libply4" arch="x86_64">
  <version epoch="0" ver="0.9.3+git20181016.a588b3f" rel="lp150.3.3.1"/>
  <changelog author="fvogt@suse.com" date="1453291200">- Add 0001-Add-label-ft-plugin.patch and
    0002-Install-label-ft-plugin-into-initrd-if-available.patch:
  - Ability to output text in initrd, needed for encryption
  - boo#959986</changelog>
  <changelog author="fvogt@suse.com" date="1454932800">- Add 0003-fix_null_deref.patch as well
  - Avoid potential SEGV if label plugin fails to load</changelog>
  <changelog author="idonmez@suse.com" date="1464782400">- Remove framebuffer support bsc#980750 and bsc#982226</changelog>
  <changelog author="tchvatal@suse.com" date="1470312000">- Reduce patches list removing merged upstream (bit differently tho):
  * 0001-seats-guard-against-NULL-terminal.patch
  * fix-serial-consoles.patch
  * plymouth-boot-vga-framebuffer.patch
- Refresh patches:
  * 0001-let-it-become-a-real-daemon.patch
- Update to version 0.9.2+git20160620.0e65b86:
  * configure: tweak defaults to be more systemd friendly
  * text: don't draw if not animating
  * terminal: always open terminal in non-blocking mode
  * device-manager: probe existing DRM devices at startup
  * drm: don't pick up drm master implicitly
  * terminal: refresh geometry after drm device arrives
  * logger: stop using carriage returns
  * build-goo: don't install systemd units during distcheck
  * systemd-units: Fix uninstall script
  * configure: switch to tar.xz instead tar.bz2</changelog>
  <changelog author="tchvatal@suse.com" date="1470312001">- Sort out with spec-cleaner and move all buildrequires to main scope
  not to subpkgs, sometimes interpreted wrongly by rpm if it is split</changelog>
  <changelog author="tchvatal@suse.com" date="1473163200">- Add systemd to buildrequires to properly detect systemd-ask-password</changelog>
  <changelog author="tchvatal@suse.com" date="1473163201">- Update to version 0.9.2+git20160823.e4b7e49:
  * libply: fix HiDPI detection
  * libply, main: Add device scale setting
  * main: support plymouth.force-scale on the kernel command line
- Refresh patch:
  * 0001-let-it-become-a-real-daemon.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1483963200">- Update to version 0.9.2+git20161215.18dd755:
  * terminal: refresh geometry after drm device arrives
  * logger: stop using carriage returns
  * build-goo: don't install systemd units during distcheck
  * systemd-units: Fix uninstall script
  * configure: switch to tar.xz instead tar.bz2
  * libply: fix HiDPI detection
  * libply, main: Add device scale setting
  * main: support plymouth.force-scale on the kernel command line
  * build-goo: make udev support build time optional
  * device-manager: dont pass terminal as renderer device</changelog>
  <changelog author="fvogt@suse.com" date="1485345600">- Remove patch which causes breakage with systemd-vconsole-setup (bsc#1020327):
  * 0001-let-it-become-a-real-daemon.patch
- Add upstream patch to fix crash on boot:
  * 0001-device-manager-handle-NULL-renderer-better.patch
- Replace removal of framebuffer driver and plymouth-ignore-cirrusdrm.patch
  with single patch:
  * only_use_fb_for_cirrus_bochs.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1485432000">- Drop use-mkinitrd.patch: No longer needed, mkinitrd is just a
  wrapper for dracut now any way, hence this patch is currently
  pointless.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1494244800">- Update to version 0.9.2+git20170424.6fd5c6b:
  * main: Look for config in runtime dir first
  * main: Look for theme in runtime dir first
  * Revert "Recreate boot log at each boot instead of appending"
  * x11: implement get_display_name
  * drm: implement get_display_name
  * configure: don't look for libudev when --without-udev is passed
  * renderer: export device name from plugin
  * device-manager: handle NULL renderer better
- Remove 0001-device-manager-handle-NULL-renderer-better.patch
  (upstreamed).</changelog>
  <changelog author="qzhao@suse.com" date="1497441600">- Update plymouth.spec: Add COPYING file in plymouth package file
  list, This is for the law requirement (bsc#1043834).</changelog>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
</package>
<package pkgid="8cf009240d3b49e0ce13e559c67af57f8afdf49b80954b44dcec427ce0287796" name="libpmi0" arch="x86_64">
  <version epoch="0" ver="17.11.7" rel="lp150.5.7.1"/>
  <changelog author="jjolly@suse.com" date="1499688000">- Allows OpenSUSE Factory build as well
- Removes unused .service files from project
- Adds /var/run/slurm to /usr/lib/tmpfiles.d for boottime creation
  * Patches upstream .service files to allow for /var/run/slurm path
  * Modifies slurm.conf to allow for /var/run/slurm path</changelog>
  <changelog author="jjolly@suse.com" date="1505217600">- Made tmpfiles_create post-install macro SLE12 SP2 or greater
- Directly calling systemd-tmpfiles --create for before SLE12 SP2</changelog>
  <changelog author="jjolly@suse.com" date="1506513600">- Updated to slurm 17-02-7-1
  * Added python as BuildRequires
  * Removed sched-wiki package
  * Removed slurmdb-direct package
  * Obsoleted sched-wiki and slurmdb-direct packages
  * Removing Cray-specific files
  * Added /etc/slurm/layout.d files (new for this version)
  * Remove /etc/slurm/cgroup files from package
  * Added lib/slurm/mcs_account.so
  * Removed lib/slurm/jobacct_gather_aix.so
  * Removed lib/slurm/job_submit_cnode.so
- Created slurm-sql package
- Moved files from slurm-plugins to slurm-torque package
- Moved creation of /usr/lib/tmpfiles.d/slurm.conf into slurm.spec
  * Removed tmpfiles.d-slurm.conf
- Changed /var/run path for slurm daemons to /var/run/slurm
  * Added slurmctld-service-var-run-path.patch
  (FATE#324026).</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Trim redundant wording in descriptions.</changelog>
  <changelog author="eich@suse.com" date="1509537600">- Updated to 17.02.9 to fix CVE-2017-15566 (bsc#1065697).
  Changes in 17.0.9
  * When resuming powered down nodes, mark DOWN nodes right after
    ResumeTimeout
    has been reached (previous logic would wait about one minute longer).
  * Fix sreport not showing full column name for TRES Count.
  * Fix slurmdb_reservations_get() giving wrong usage data when job's spanned
    reservation that was modified.
  * Fix sreport reservation utilization report showing bad data.
  * Show all TRES' on a reservation in sreport reservation utilization report
    by default.
  * Fix sacctmgr show reservation handling "end" parameter.
  * Work around issue with sysmacros.h and gcc7 / glibc 2.25.
  * Fix layouts code to only allow setting a boolean.
  * Fix sbatch --wait to keep waiting even if a message timeout occurs.
  * CRAY - If configured with NodeFeatures=knl_cray and there are non-KNL
    nodes which include no features the slurmctld will abort without
    this patch when attemping strtok_r(NULL).
  * Fix regression in 17.02.7 which would run the spank_task_privileged as
    part of the slurmstepd instead of it's child process.
  * Fix security issue in Prolog and Epilog by always prepending SPANK_ to
    all user-set environment variables. CVE-2017-15566.
  Changes in 17.0.8:
  * Add 'slurmdbd:' to the accounting plugin to notify message is from dbd
    instead of local.
  * mpi/mvapich - Buffer being only partially cleared. No failures observed.
  * Fix for job  --switch option on dragonfly network.
  * In salloc with  --uid option, drop supplementary groups before changing UID.
  * jobcomp/elasticsearch - strip any trailing slashes from JobCompLoc.
  * jobcomp/elasticsearch - fix memory leak when transferring generated buffer.
  * Prevent slurmstepd ABRT when parsing gres.conf CPUs.
  * Fix sbatch --signal to signal all MPI ranks in a step instead of just those
    on node 0.
  * Check multiple partition limits when scheduling a job that were previously
    only checked on submit.
  * Cray: Avoid running application/step Node Health Check on the external
    job step.
  * Optimization enhancements for partition based job preemption.
  * Address some build warnings from GCC 7.1, and one possible memory leak if
    /proc is inaccessible.
  * If creating/altering a core based reservation with scontrol/sview on a
    remote cluster correctly determine the select type.
  * Fix autoconf test for libcurl when clang is used.
  * Fix default location for cgroup_allowed_devices_file.conf to use correct
    default path.
  * Document NewName option to sacctmgr.
  * Reject a second PMI2_Init call within a single step to prevent slurmstepd
    from hanging.
  * Handle old 32bit values stored in the database for requested memory
    correctly in sacct.
  * Fix memory leaks in the task/cgroup plugin when constraining devices.
  * Make extremely verbose info messages debug2 messages in the task/cgroup
    plugin when constraining devices.
  * Fix issue that would deny the stepd access to /dev/null where GRES has a
    'type' but no file defined.
  * Fix issue where the slurmstepd would fatal on job launch if you have no
    gres listed in your slurm.conf but some in gres.conf.
  * Fix validating time spec to correctly validate various time formats.
  * Make scontrol work correctly with job update timelimit [+|-]=.
  * Reduce the visibily of a number of warnings in _part_access_check.
  * Prevent segfault in sacctmgr if no association name is specified for
    an update command.
  * burst_buffer/cray plugin modified to work with changes in Cray UP05
    software release.
  * Fix job reasons for jobs that are violating assoc MaxTRESPerNode limits.
  * Fix segfault when unpacking a 16.05 slurm_cred in a 17.02 daemon.
  * Fix setting TRES limits with case insensitive TRES names.
  * Add alias for xstrncmp() -- slurm_xstrncmp().
  * Fix sorting of case insensitive strings when using xstrcasecmp().
  * Gracefully handle race condition when reading /proc as process exits.
  * Avoid error on Cray duplicate setup of core specialization.
  * Skip over undefined (hidden in Slurm) nodes in pbsnodes.
  * Add empty hashes in perl api's slurm_load_node() for hidden nodes.
  * CRAY - Add rpath logic to work for the alpscomm libs.
  * Fixes for administrator extended TimeLimit (job reason &amp; time limit reset).
  * Fix gres selection on systems running select/linear.
  * sview: Added window decorator for maximize,minimize,close buttons for all
    systems.
  * squeue: interpret negative length format specifiers as a request to
    delimit values with spaces.
  * Fix the torque pbsnodes wrapper script to parse a gres field with a type
    set correctly.
- Fixed ABI version of libslurm.</changelog>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
</package>
<package pkgid="3f846fe3cc95cd00149b1147f9b555853253e23025f94eca7d6993c5a44ec35a" name="libpmi0" arch="x86_64">
  <version epoch="0" ver="17.11.9" rel="lp150.5.11.1"/>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
  <changelog author="eich@suse.com" date="1532779200">- Add a 'Recommends: slurm-munge' to slurm-slurmdbd.</changelog>
  <changelog author="eich@suse.com" date="1533038400">- slurmctld-rerun-agent_init-when-backup-controller-takes-over.patch:
  Fix race in the slurmctld backup controller which prevents it
  to clean up allocations on nodes properly after failing over
  (bsc#1084917).
- Handled %license in a backward compatible manner.</changelog>
  <changelog author="eich@suse.com" date="1533038401">- Update to 17.11.8
  * Fix incomplete RESPONSE_[RESOURCE|JOB_PACK]_ALLOCATION building path.
  * Do not allocate nodes that were marked down due to the node not responding
    by ResumeTimeout.
  * task/cray plugin - search for "mems" cgroup information in the file
    "cpuset.mems" then fall back to the file "mems".
  * Fix ipmi profile debug uninitialized variable.
  * PMIx: fixed the direct connect inline msg sending.
  * MYSQL: Fix issue not handling all fields when loading an archive dump.
  * Allow a job_submit plugin to change the admin_comment field during
    job_submit_plugin_modify().
  * job_submit/lua - fix access into reservation table.
  * MySQL - Prevent deadlock caused by archive logic locking reads.
  * Don't enforce MaxQueryTimeRange when requesting specific jobs.
  * Modify --test-only logic to properly support jobs submitted to more than
    one partition.
  * Prevent slurmctld from abort when attempting to set non-existing
    qos as def_qos_id.
  * Add new job dependency type of "afterburstbuffer". The pending job will be
    delayed until the first job completes execution and it's burst buffer
    stage-out is completed.
  * Reorder proctrack/task plugin load in the slurmstepd to match that of
    slurmd
    and avoid race condition calling task before proctrack can introduce.
  * Prevent reboot of a busy KNL node when requesting inactive features.
  * Revert to previous behavior when requesting memory per cpu/node introduced
    in 17.11.7.
  * Fix to reinitialize previously adjusted job members to their original
    value
    when validating the job memory in multi-partition requests.
  * Fix _step_signal() from always returning SLURM_SUCCESS.
  * Combine active and available node feature change logs on one line rather
    than one line per node for performance reasons.
  * Prevent occasionally leaking freezer cgroups.
  * Fix potential segfault when closing the mpi/pmi2 plugin.
  * Fix issues with  --exclusive=[user|mcs] to work correctly
    with preemption or when job requests a specific list of hosts.
  * Make code compile with hdf5 1.10.2+
  * mpi/pmix: Fixed the collectives canceling.
  * SlurmDBD: improve error message handling on archive load failure.
  * Fix incorrect locking when deleting reservations.
  * Fix incorrect locking when setting up the power save module.
  * Fix setting format output length for squeue when showing array jobs.
  * Add xstrstr function.
  * Fix printing out of --hint options in sbatch, salloc --help.
  * Prevent possible divide by zero in _validate_time_limit().
  * Add Delegate=yes to the slurmd.service file to prevent systemd from
    interfering with the jobs' cgroup hierarchies.
  * Change the backlog argument to the listen() syscall within srun to 4096
    to match elsewhere in the code, and avoid communication problems at scale.</changelog>
  <changelog author="eich@suse.com" date="1533211200">- When using a remote shared StateSaveLocation, slurmctld needs to
  be started after remote filesystems have become available.
  Add 'remote-fs.target' to the 'After=' directive in slurmctld.service
  (boo#1103561).</changelog>
  <changelog author="eich@suse.com" date="1534248000">- Update to 17.11.9
  * Fix segfault in slurmctld when a job's node bitmap is NULL during a
    scheduling cycle.  Primarily caused by EnforcePartLimits=ALL.
  * Remove erroneous unlock in acct_gather_energy/ipmi.
  * Enable support for hwloc version 2.0.1.
  * Fix 'srun -q' (--qos) option handling.
  * Fix socket communication issue that can lead to lost task completition
    messages, which will cause a permanently stuck srun process.
  * Handle creation of TMPDIR if environment variable is set or changed in
    a task prolog script.
  * Avoid node layout fragmentation if running with a fixed CPU count but
    without Sockets and CoresPerSocket defined.
  * burst_buffer/cray - Fix datawarp swap default pool overriding jobdw.
  * Fix incorrect job priority assignment for multi-partition job with
    different PriorityTier settings on the partitions.
  * Fix sinfo to print correct node state.</changelog>
</package>
<package pkgid="50ea933efd152cae353060cf34ae347c375f7c3092f97689bd23a1b25fa899e6" name="libpmi0" arch="x86_64">
  <version epoch="0" ver="17.11.9" rel="lp150.5.15.1"/>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
  <changelog author="eich@suse.com" date="1532779200">- Add a 'Recommends: slurm-munge' to slurm-slurmdbd.</changelog>
  <changelog author="eich@suse.com" date="1533038400">- slurmctld-rerun-agent_init-when-backup-controller-takes-over.patch:
  Fix race in the slurmctld backup controller which prevents it
  to clean up allocations on nodes properly after failing over
  (bsc#1084917).
- Handled %license in a backward compatible manner.</changelog>
  <changelog author="eich@suse.com" date="1533038401">- Update to 17.11.8
  * Fix incomplete RESPONSE_[RESOURCE|JOB_PACK]_ALLOCATION building path.
  * Do not allocate nodes that were marked down due to the node not responding
    by ResumeTimeout.
  * task/cray plugin - search for "mems" cgroup information in the file
    "cpuset.mems" then fall back to the file "mems".
  * Fix ipmi profile debug uninitialized variable.
  * PMIx: fixed the direct connect inline msg sending.
  * MYSQL: Fix issue not handling all fields when loading an archive dump.
  * Allow a job_submit plugin to change the admin_comment field during
    job_submit_plugin_modify().
  * job_submit/lua - fix access into reservation table.
  * MySQL - Prevent deadlock caused by archive logic locking reads.
  * Don't enforce MaxQueryTimeRange when requesting specific jobs.
  * Modify --test-only logic to properly support jobs submitted to more than
    one partition.
  * Prevent slurmctld from abort when attempting to set non-existing
    qos as def_qos_id.
  * Add new job dependency type of "afterburstbuffer". The pending job will be
    delayed until the first job completes execution and it's burst buffer
    stage-out is completed.
  * Reorder proctrack/task plugin load in the slurmstepd to match that of
    slurmd
    and avoid race condition calling task before proctrack can introduce.
  * Prevent reboot of a busy KNL node when requesting inactive features.
  * Revert to previous behavior when requesting memory per cpu/node introduced
    in 17.11.7.
  * Fix to reinitialize previously adjusted job members to their original
    value
    when validating the job memory in multi-partition requests.
  * Fix _step_signal() from always returning SLURM_SUCCESS.
  * Combine active and available node feature change logs on one line rather
    than one line per node for performance reasons.
  * Prevent occasionally leaking freezer cgroups.
  * Fix potential segfault when closing the mpi/pmi2 plugin.
  * Fix issues with  --exclusive=[user|mcs] to work correctly
    with preemption or when job requests a specific list of hosts.
  * Make code compile with hdf5 1.10.2+
  * mpi/pmix: Fixed the collectives canceling.
  * SlurmDBD: improve error message handling on archive load failure.
  * Fix incorrect locking when deleting reservations.
  * Fix incorrect locking when setting up the power save module.
  * Fix setting format output length for squeue when showing array jobs.
  * Add xstrstr function.
  * Fix printing out of --hint options in sbatch, salloc --help.
  * Prevent possible divide by zero in _validate_time_limit().
  * Add Delegate=yes to the slurmd.service file to prevent systemd from
    interfering with the jobs' cgroup hierarchies.
  * Change the backlog argument to the listen() syscall within srun to 4096
    to match elsewhere in the code, and avoid communication problems at scale.</changelog>
  <changelog author="eich@suse.com" date="1533211200">- When using a remote shared StateSaveLocation, slurmctld needs to
  be started after remote filesystems have become available.
  Add 'remote-fs.target' to the 'After=' directive in slurmctld.service
  (boo#1103561).</changelog>
  <changelog author="eich@suse.com" date="1534248000">- Update to 17.11.9
  * Fix segfault in slurmctld when a job's node bitmap is NULL during a
    scheduling cycle.  Primarily caused by EnforcePartLimits=ALL.
  * Remove erroneous unlock in acct_gather_energy/ipmi.
  * Enable support for hwloc version 2.0.1.
  * Fix 'srun -q' (--qos) option handling.
  * Fix socket communication issue that can lead to lost task completition
    messages, which will cause a permanently stuck srun process.
  * Handle creation of TMPDIR if environment variable is set or changed in
    a task prolog script.
  * Avoid node layout fragmentation if running with a fixed CPU count but
    without Sockets and CoresPerSocket defined.
  * burst_buffer/cray - Fix datawarp swap default pool overriding jobdw.
  * Fix incorrect job priority assignment for multi-partition job with
    different PriorityTier settings on the partitions.
  * Fix sinfo to print correct node state.</changelog>
  <changelog author="eich@suse.com" date="1537617600">- Fix Requires(pre) and Requires(post) for slurm-config and slurm-node.
  This fixes issues with failing slurm user creation when installed
  during initial system installation (bsc#1109373).</changelog>
  <changelog author="cgoll@suse.com" date="1537790400">- added correct link flags for perl bindings (bsc#1108671)
  * added correct linker search path in slurm-2.4.4-rpath.patch
  * perl:Switch is required by slurm torque wrappers</changelog>
</package>
<package pkgid="1418223cd39e8e133534499e2d62d9db79ff0848f384eae2745edff455476e85" name="libpolkit0" arch="x86_64">
  <version epoch="0" ver="0.114" rel="lp150.2.3.1"/>
  <changelog author="saschpe@suse.de" date="1357732800">- Only mark the following files as %config, not %config(noreplace):
  + %{_sysconfdir}/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
  + %{_sysconfdir}/pam.d/polkit-1
  + %{_sysconfdir}/polkit-1/rules.d/50-default.rules
  PolicyKit's own config files should only be changed for good reason
  and we want to prefer openSUSE's defaults (you still get an .rpmsafe
  file)</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1358164800">- Update to 0.110
  + Set XAUTHORITY environment variable if is unset
  + Use mutex and condition variables properly
  + Build fixes.
- Changes from version 0.109:
  + Include gmodule-2.0 to avoid linker errors
  + Don't require libmozjs185 devel packages for polkit rules
    to work
- Drop polkit-link-gmodule.patch and polkit-libmozjs.patch, those
  are merged upstream</changelog>
  <changelog author="gber@opensuse.org" date="1361188800">- Recommend libmozjs185-1_0 which is dlopen'ed and required for JS
  rules</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1365681600">- Add automake-113.patch, fixes build with automake-1.13</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Update to 0.111
  + Both js185 and mozjs17 versions of SpiderMonkey are supported
  + The JavaScript interpreter is now mandatory
  + Fixed various memory leaks
  + Respect SUID_CFLAGS and SUID_LDFLAGS
  + Set process environment from pam_getenvlist()
  + Fix the build with automake 1.13
- Drop polkit-suid_flags.patch and automake-113.patch, those
  patches are included in this release</changelog>
  <changelog author="dimstar@opensuse.org" date="1373025600">- On openSUSE 13.1+, switch from mozjs185 to mozjs-17.0 by:
  + Conditionally BuildRequire pkgconfig(mozjs-17.0).
- Drop libmozjs185-1_0 Recommends: the library is actually required
  and auto-detected as such by rpm (from 0.111 changes: "The
  JavaScript interpreter is now mandatory").</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379592000">- Update to 0.112
  + polkitunixprocess: Deprecate racy APIs
  + pkcheck: Support --process=pid,start-time,uid syntax too
    (CVE-2013-4288)
  + Use GOnce for interface type registration
  + Add czech translation po file to distribution
  + Update the czech once more with newest pot file</changelog>
  <changelog author="toms@opensuse.org" date="1380283200">- Fixed URL</changelog>
  <changelog author="meissner@suse.com" date="1418126400">- Added gpg signature and keyring with David Zeuthen and Miloslav Trmac
  ids.</changelog>
  <changelog author="tchvatal@suse.com" date="1421064000">- Try to fix kded leaking due to powerdevil exposing this issue in
  polkit: (bsc#912889)
  * polkit-no-kded-leak.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1438862400">- Update to 0.113:
  * Fix CVE-2015-4625
  * Fix CVE-2015-3256
  * Fix CVE-2015-3255
  * Fix CVE-2015-3218
  * On systemd-213 and later, the ?active? state is shared across
    all sessions of an user, instead of being tracked separately
  * pkexec: when not given a program to execute, runs the users?
    shell by default
- Remove polkit-no-kded-leak.patch (upstreamed)</changelog>
  <changelog author="meissner@suse.com" date="1448539200">- polkit-revert-session-magic.patch: revert a session detection change
  that could lead to sessions not being detected as active due to
  a systemd bug. bsc#954139</changelog>
  <changelog author="fbui@suse.com" date="1465300800">- systemd.pc is shipped by systemd main package (bsc#983167)
  Strangely polkit wants systemd.pc to detect that the target system
  is running systemd even if its configured to build systemd support...</changelog>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- 0001-Fix-CVE-FIXME-Trusting-client-supplied-UID.patch:
  Fixed trusting the client-supplied UID (CVE-2018-1116 bsc#1099031)</changelog>
</package>
<package pkgid="e613f1092a3f21997679996fa3c3d948d1b876d208aa2bab5966cf324ea26ed3" name="libpolkit0-32bit" arch="x86_64">
  <version epoch="0" ver="0.114" rel="lp150.2.3.1"/>
  <changelog author="saschpe@suse.de" date="1357732800">- Only mark the following files as %config, not %config(noreplace):
  + %{_sysconfdir}/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
  + %{_sysconfdir}/pam.d/polkit-1
  + %{_sysconfdir}/polkit-1/rules.d/50-default.rules
  PolicyKit's own config files should only be changed for good reason
  and we want to prefer openSUSE's defaults (you still get an .rpmsafe
  file)</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1358164800">- Update to 0.110
  + Set XAUTHORITY environment variable if is unset
  + Use mutex and condition variables properly
  + Build fixes.
- Changes from version 0.109:
  + Include gmodule-2.0 to avoid linker errors
  + Don't require libmozjs185 devel packages for polkit rules
    to work
- Drop polkit-link-gmodule.patch and polkit-libmozjs.patch, those
  are merged upstream</changelog>
  <changelog author="gber@opensuse.org" date="1361188800">- Recommend libmozjs185-1_0 which is dlopen'ed and required for JS
  rules</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1365681600">- Add automake-113.patch, fixes build with automake-1.13</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Update to 0.111
  + Both js185 and mozjs17 versions of SpiderMonkey are supported
  + The JavaScript interpreter is now mandatory
  + Fixed various memory leaks
  + Respect SUID_CFLAGS and SUID_LDFLAGS
  + Set process environment from pam_getenvlist()
  + Fix the build with automake 1.13
- Drop polkit-suid_flags.patch and automake-113.patch, those
  patches are included in this release</changelog>
  <changelog author="dimstar@opensuse.org" date="1373025600">- On openSUSE 13.1+, switch from mozjs185 to mozjs-17.0 by:
  + Conditionally BuildRequire pkgconfig(mozjs-17.0).
- Drop libmozjs185-1_0 Recommends: the library is actually required
  and auto-detected as such by rpm (from 0.111 changes: "The
  JavaScript interpreter is now mandatory").</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379592000">- Update to 0.112
  + polkitunixprocess: Deprecate racy APIs
  + pkcheck: Support --process=pid,start-time,uid syntax too
    (CVE-2013-4288)
  + Use GOnce for interface type registration
  + Add czech translation po file to distribution
  + Update the czech once more with newest pot file</changelog>
  <changelog author="toms@opensuse.org" date="1380283200">- Fixed URL</changelog>
  <changelog author="meissner@suse.com" date="1418126400">- Added gpg signature and keyring with David Zeuthen and Miloslav Trmac
  ids.</changelog>
  <changelog author="tchvatal@suse.com" date="1421064000">- Try to fix kded leaking due to powerdevil exposing this issue in
  polkit: (bsc#912889)
  * polkit-no-kded-leak.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1438862400">- Update to 0.113:
  * Fix CVE-2015-4625
  * Fix CVE-2015-3256
  * Fix CVE-2015-3255
  * Fix CVE-2015-3218
  * On systemd-213 and later, the ?active? state is shared across
    all sessions of an user, instead of being tracked separately
  * pkexec: when not given a program to execute, runs the users?
    shell by default
- Remove polkit-no-kded-leak.patch (upstreamed)</changelog>
  <changelog author="meissner@suse.com" date="1448539200">- polkit-revert-session-magic.patch: revert a session detection change
  that could lead to sessions not being detected as active due to
  a systemd bug. bsc#954139</changelog>
  <changelog author="fbui@suse.com" date="1465300800">- systemd.pc is shipped by systemd main package (bsc#983167)
  Strangely polkit wants systemd.pc to detect that the target system
  is running systemd even if its configured to build systemd support...</changelog>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- 0001-Fix-CVE-FIXME-Trusting-client-supplied-UID.patch:
  Fixed trusting the client-supplied UID (CVE-2018-1116 bsc#1099031)</changelog>
</package>
<package pkgid="f78e438d82e9b33085acef95e403e491764c9490ec9c8e331c66cfffcc0db098" name="libpostproc54" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="dc3095d13ed16507d63bbb8392cbf361755628e8d54a01c07140ea83292a8152" name="libpostproc54" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="327378a9c12b7e9b55a6c9a2853ff9d42db83dc8f6bde435af8dc44f12880e2b" name="libpostproc55" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="cb9d66f5e862cadec85069005c53e1802d1faf172b114226b331a7f3a34a3655" name="libpostproc55" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="d234f8636bcd3a2dc448bd5ff75ca71f3efea77c6d934304e3e22f975b80c435" name="libpostproc55" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="6170a60b2d0776202a34c5792d252eef8393ce5a056acfe94d6b07129301a4ba" name="libpostproc55" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="1243c14b18e09fa6a8e219c2073f4a3340489f615b5e7364087347ac33c24ff2" name="libpq5" arch="x86_64">
  <version epoch="0" ver="10.5" rel="lp150.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1501761600">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1501848000">- use multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1501848001">- bump version in update-alternatives call</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
</package>
<package pkgid="acc0b743e1d732f3f24ed75a2fcc2ca482d6492a346d717b8545309d4ed6faac" name="libpq5" arch="x86_64">
  <version epoch="0" ver="10.6" rel="lp150.3.6.1"/>
  <changelog author="mrueckert@suse.de" date="1501848000">- use multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1501848001">- bump version in update-alternatives call</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
</package>
<package pkgid="eccb62e881f7251e5b6778feef00bc33181cf748c81ccd53180303849d8a7604" name="libpq5-32bit" arch="x86_64">
  <version epoch="0" ver="10.5" rel="lp150.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1501761600">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1501848000">- use multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1501848001">- bump version in update-alternatives call</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
</package>
<package pkgid="1a6c36ebe45c4a247bf76bfa84c3866c94a2b379e25604aebec9aecad1157d19" name="libpq5-32bit" arch="x86_64">
  <version epoch="0" ver="10.6" rel="lp150.3.6.1"/>
  <changelog author="mrueckert@suse.de" date="1501848000">- use multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1501848001">- bump version in update-alternatives call</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
</package>
<package pkgid="b3ef6d8767c58307e7d6185d72382b4c84ecd6b5a80ad51d859cddc3815879ec" name="libptexenc1" arch="x86_64">
  <version epoch="0" ver="1.3.5" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="6df8f79ee21361c04984343ad1be3d480bc492a11b50a1e3e36740d238eabe1e" name="libptexenc1" arch="x86_64">
  <version epoch="0" ver="1.3.5" rel="lp150.9.6.1"/>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537963200">- Add patch source-bsc1109673.dif to fix bsc#1109673 for CVE-2018-17407
  which is about buffer overflow in the handling of Type 1 fonts
  allowing arbitrary code execution</changelog>
</package>
<package pkgid="a611d549c5135dbaafac88d643bb95bb01d5fc75d1fb6360a8dc48e7321ac2d8" name="libpython2_7-1_0" arch="x86_64">
  <version epoch="0" ver="2.7.14" rel="lp150.6.3.1"/>
  <changelog author="schwab@suse.de" date="1432036800">- Reenable test_posix on aarch64</changelog>
  <changelog author="michael@stroeder.com" date="1432468800">- update to 2.7.10
- removed obsolete python-2.7-urllib2-localnet-ssl.patch</changelog>
  <changelog author="dmueller@suse.com" date="1433937600">- add __python2 compatibility macro (used by Fedora)</changelog>
  <changelog author="dimstar@opensuse.org" date="1441800000">- Add python-ncurses-6.0-accessors.patch: Fix build with
  NCurses 6.0 and OPAQUE_WINDOW set to 1.</changelog>
  <changelog author="jmatejek@suse.com" date="1442232000">- copy strict-tls-checks subpackage from SLE to retain future compatibility
  (not built in openSUSE)
- do this properly to fix bnc#945401</changelog>
  <changelog author="rguenther@suse.com" date="1454068800">- Add python-2.7.10-overflow_check.patch to fix broken overflow checks.
  [bnc#964182]</changelog>
  <changelog author="jmatejek@suse.com" date="1467288000">- update to 2.7.12
  * dozens of bugfixes, see NEWS for details
  * fixes multiple security issues:
    CVE-2016-0772 TLS stripping attack on smtplib (bsc#984751)
    CVE-2016-5636 zipimporter heap overflow (bsc#985177)
    CVE-2016-5699 httplib header injection (bsc#985348)
    (this one is actually fixed since 2.7.10)
- removed upstreamed python-2.7.7-mhlib-linkcount.patch
- refreshed multilib patch
- python-2.7.12-makeopcode.patch - run newly-built python interpreter
  to make opcodes, in order not to require pre-built python
- update LD_LIBRARY_PATH to use $PWD instead of "." because the test
  process escapes to its own directory
- modify shebang-fixing scriptlet to ignore makeopcodetargets.py</changelog>
  <changelog author="jmatejek@suse.com" date="1480680000">- provide python2-* symbols, for support of new packages built as
  python2-foo
- rename macros.python to macros.python2 accordingly
- require python-rpm-macros package, drop macro definitions from
  macros.python2</changelog>
  <changelog author="jmatejek@suse.com" date="1483444800">- update to 2.7.13
  * dozens of bugfixes, see NEWS for details
  * updated cipher lists for openssl wrapper, support openssl &gt;= 1.1.0
  * properly fix HTTPoxy (CVE-2016-1000110)
  * profile-opt build now applies PGO to modules as well
- update python-2.7.10-overflow_check.patch
  with python-2.7.13-overflow_check.patch, incorporating upstream changes
- add "-fwrapv" to optflags explicitly because upstream code still
  relies on it in many places</changelog>
  <changelog author="bwiedemann@suse.com" date="1487937600">- Add reproducible.patch to allow reproducible builds of various
  python packages like python-amqp
  Upstream: https://github.com/python/cpython/pull/296</changelog>
  <changelog author="jmatejek@suse.com" date="1494849600">- obsolete/provide python-argparse and provide python2-argparse,
  because the argparse module is available from python 2.7 up</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Call python2 instead of python in macros</changelog>
  <changelog author="jmatejek@suse.com" date="1511179200">- update to 2.7.14
  * dozens of bugfixes, see NEWS for details
  * fixed possible integer overflow in PyString_DecodeEscape (CVE-2017-1000158, bsc#1068664)
  * fixed segfaults with dict mutated during search
  * fixed possible free-after-use problems with buffer objects with custom indexing
  * fixed urllib.splithost to correctly parse fragments (bpo-30500)
- drop upstreamed python-2.7.13-overflow_check.patch
- drop unneeded python-2.7.12-makeopcode.patch
- drop upstreamed 0001-2.7-bpo-30714-ALPN-changes-for-OpenSSL-1.1.0f-3094.patch</changelog>
  <changelog author="jmatejek@suse.com" date="1513944000">- exclude test_regrtest for s390, where it does not segfault as it should
  (fixes bsc#1073269)
- fix segfault while creating weakref - bsc#1073748, bpo#29347
  (this is actually fixed by the 2.7.14 update; mentioning this for purposes
  of bugfix tracking)</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Add patch python-fix-shebang.patch to fix bsc#1078326</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517572800">- Add python-skip_random_failing_tests.patch bypass boo#1078485
  and exclude many tests for PowerPC</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517832000">- exclude test_socket &amp; test_subprocess for PowerPC boo#1078485
  (same ref as previous change)</changelog>
  <changelog author="bwiedemann@suse.com" date="1519128000">- Add python-sorted_tar.patch (boo#1081750)</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1537876800">- Apply "CVE-2018-1000802-shutil_use_subprocess_no_spawn.patch" which
  converts shutil._call_external_zip to use subprocess rather than
  distutils.spawn. [bsc#1109663, CVE-2018-1000802]</changelog>
</package>
<package pkgid="cdf56afdc56659a7f6a6cb6631cf378c8fe4cb3dbc0336e67194541f58967a0d" name="libpython2_7-1_0-32bit" arch="x86_64">
  <version epoch="0" ver="2.7.14" rel="lp150.6.3.1"/>
  <changelog author="schwab@suse.de" date="1432036800">- Reenable test_posix on aarch64</changelog>
  <changelog author="michael@stroeder.com" date="1432468800">- update to 2.7.10
- removed obsolete python-2.7-urllib2-localnet-ssl.patch</changelog>
  <changelog author="dmueller@suse.com" date="1433937600">- add __python2 compatibility macro (used by Fedora)</changelog>
  <changelog author="dimstar@opensuse.org" date="1441800000">- Add python-ncurses-6.0-accessors.patch: Fix build with
  NCurses 6.0 and OPAQUE_WINDOW set to 1.</changelog>
  <changelog author="jmatejek@suse.com" date="1442232000">- copy strict-tls-checks subpackage from SLE to retain future compatibility
  (not built in openSUSE)
- do this properly to fix bnc#945401</changelog>
  <changelog author="rguenther@suse.com" date="1454068800">- Add python-2.7.10-overflow_check.patch to fix broken overflow checks.
  [bnc#964182]</changelog>
  <changelog author="jmatejek@suse.com" date="1467288000">- update to 2.7.12
  * dozens of bugfixes, see NEWS for details
  * fixes multiple security issues:
    CVE-2016-0772 TLS stripping attack on smtplib (bsc#984751)
    CVE-2016-5636 zipimporter heap overflow (bsc#985177)
    CVE-2016-5699 httplib header injection (bsc#985348)
    (this one is actually fixed since 2.7.10)
- removed upstreamed python-2.7.7-mhlib-linkcount.patch
- refreshed multilib patch
- python-2.7.12-makeopcode.patch - run newly-built python interpreter
  to make opcodes, in order not to require pre-built python
- update LD_LIBRARY_PATH to use $PWD instead of "." because the test
  process escapes to its own directory
- modify shebang-fixing scriptlet to ignore makeopcodetargets.py</changelog>
  <changelog author="jmatejek@suse.com" date="1480680000">- provide python2-* symbols, for support of new packages built as
  python2-foo
- rename macros.python to macros.python2 accordingly
- require python-rpm-macros package, drop macro definitions from
  macros.python2</changelog>
  <changelog author="jmatejek@suse.com" date="1483444800">- update to 2.7.13
  * dozens of bugfixes, see NEWS for details
  * updated cipher lists for openssl wrapper, support openssl &gt;= 1.1.0
  * properly fix HTTPoxy (CVE-2016-1000110)
  * profile-opt build now applies PGO to modules as well
- update python-2.7.10-overflow_check.patch
  with python-2.7.13-overflow_check.patch, incorporating upstream changes
- add "-fwrapv" to optflags explicitly because upstream code still
  relies on it in many places</changelog>
  <changelog author="bwiedemann@suse.com" date="1487937600">- Add reproducible.patch to allow reproducible builds of various
  python packages like python-amqp
  Upstream: https://github.com/python/cpython/pull/296</changelog>
  <changelog author="jmatejek@suse.com" date="1494849600">- obsolete/provide python-argparse and provide python2-argparse,
  because the argparse module is available from python 2.7 up</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Call python2 instead of python in macros</changelog>
  <changelog author="jmatejek@suse.com" date="1511179200">- update to 2.7.14
  * dozens of bugfixes, see NEWS for details
  * fixed possible integer overflow in PyString_DecodeEscape (CVE-2017-1000158, bsc#1068664)
  * fixed segfaults with dict mutated during search
  * fixed possible free-after-use problems with buffer objects with custom indexing
  * fixed urllib.splithost to correctly parse fragments (bpo-30500)
- drop upstreamed python-2.7.13-overflow_check.patch
- drop unneeded python-2.7.12-makeopcode.patch
- drop upstreamed 0001-2.7-bpo-30714-ALPN-changes-for-OpenSSL-1.1.0f-3094.patch</changelog>
  <changelog author="jmatejek@suse.com" date="1513944000">- exclude test_regrtest for s390, where it does not segfault as it should
  (fixes bsc#1073269)
- fix segfault while creating weakref - bsc#1073748, bpo#29347
  (this is actually fixed by the 2.7.14 update; mentioning this for purposes
  of bugfix tracking)</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Add patch python-fix-shebang.patch to fix bsc#1078326</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517572800">- Add python-skip_random_failing_tests.patch bypass boo#1078485
  and exclude many tests for PowerPC</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517832000">- exclude test_socket &amp; test_subprocess for PowerPC boo#1078485
  (same ref as previous change)</changelog>
  <changelog author="bwiedemann@suse.com" date="1519128000">- Add python-sorted_tar.patch (boo#1081750)</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1537876800">- Apply "CVE-2018-1000802-shutil_use_subprocess_no_spawn.patch" which
  converts shutil._call_external_zip to use subprocess rather than
  distutils.spawn. [bsc#1109663, CVE-2018-1000802]</changelog>
</package>
<package pkgid="3282b59c5fe3a49468b2f5b65a7c1e7c1ffb36ba9192d15205e4e696802f7772" name="libpython3_6m1_0" arch="x86_64">
  <version epoch="0" ver="3.6.5" rel="lp150.2.3.1"/>
  <changelog author="jmatejek@suse.com" date="1501761600">- update to 3.6.2
  * bugfix release, over a hundred bugs fixed
  * see Misc/NEWS for details
- drop upstreamed test-socket-aead-kernel49.patch
- add Provides: python3-typing (fixes bsc#1050653)
- drop duplicate Provides: python3</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="jmatejek@suse.com" date="1504094400">- distutils-reproducible-compile.patch: ensure distutils order files
  before compiling, which works around bsc#1049186</changelog>
  <changelog author="schwab@suse.de" date="1504180800">- fix missing %{?armsuffix}</changelog>
  <changelog author="vcizek@suse.com" date="1505390400">- Fix test broken with OpenSSL 1.1 (bsc#1042670)
  * add 0001-3.6-bpo-30714-ALPN-changes-for-OpenSSL-1.1.0f-3093.patch</changelog>
  <changelog author="dmueller@suse.com" date="1505908800">- drop python-2.7-libffi-aarch64.patch: this patches the intree
  copy of libffi which is unused/deleted in the line afterwards
- fix build against system libffi: include flags weren't set
  so it actually used the in-tree libffi headers.</changelog>
  <changelog author="jmatejek@suse.com" date="1507723200">- update to 3.6.3
  * bugfix release, over a hundred bugs fixed
  * see Misc/NEWS for details
- drop upstreamed 0001-3.6-bpo-30714-ALPN-changes-for-OpenSSL-1.1.0f-3093.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1510833600">- move 2to3 to python3-tools package</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Install 2to3-%{python_version} executable (override defattr of
  the -tools package). 2to3 (unversioned) is a symlink and does not
  carry permissions (bsc#1070853).</changelog>
  <changelog author="jmatejek@suse.com" date="1514980800">- update to 3.6.4
  * bugfix release, over a hundred bugs fixed
  * see Misc/NEWS for details
- drop upstreamed python3-ncurses-6.0-accessors.patch
- drop PYTHONSTARTUP hooks that cause spurious startup errors
  * fixes bsc#1070738
  * the relevant feature (REPL history) is now built into Python itself</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516276800">- Add skip_random_failing_tests.patch only for PowerPC</changelog>
  <changelog author="jmatejek@suse.com" date="1516795200">- move XML modules and python3-xml provide to python3-base
  (fixes bsc#1077230)
- move ensurepip to base</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix glibc 2.27 fail bsc#1079761:
  * fix-localeconv-encoding-for-LC_NUMERIC.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1519128000">- Add python3-sorted_tar.patch (boo#1081750)</changelog>
  <changelog author="schwab@suse.de" date="1519128001">- ctypes-pass-by-value.patch: Fix pass by value for structs on aarch64</changelog>
  <changelog author="adam@mizerski.pl" date="1520424000">- Created %so_major and %so_minor macros
- Put Tools/gdb/libpython.py script into proper place and ship it with devel
  subpackage.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1522497600">- update to 3.6.5
  * bugfix release
  * see Misc/NEWS for details
- drop ctypes-pass-by-value.patch
- drop fix-localeconv-encoding-for-LC_NUMERIC.patch
- refresh python-3.6.0-multilib-new.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1523880000">- Move the tests from base to generic package wrt bsc#1088573
  * We still fail the whole distro if python3 is not build
  * The other archs than x86_64 took couple of hours to unblock
    build of other software, this way we work around the issue
- Some tests are still run in -base for the LTO tweaking, but at
  least it is not run twice</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- As we run in main python package do not generate the pre_checkin
  from both now</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1535976000">- Add -fwrapv to OPTS, which is default for python3 anyway
  See for example https://github.com/zopefoundation/persistent/issues/86
  for bugs which are caused by avoiding it. (bsc#1107030)</changelog>
</package>
<package pkgid="83371ce6f09a3013fcec1d12a70c3403c10fa4e47f68e2e6db3dac283f3e6f79" name="libpython3_6m1_0-32bit" arch="x86_64">
  <version epoch="0" ver="3.6.5" rel="lp150.2.3.1"/>
  <changelog author="jmatejek@suse.com" date="1501761600">- update to 3.6.2
  * bugfix release, over a hundred bugs fixed
  * see Misc/NEWS for details
- drop upstreamed test-socket-aead-kernel49.patch
- add Provides: python3-typing (fixes bsc#1050653)
- drop duplicate Provides: python3</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="jmatejek@suse.com" date="1504094400">- distutils-reproducible-compile.patch: ensure distutils order files
  before compiling, which works around bsc#1049186</changelog>
  <changelog author="schwab@suse.de" date="1504180800">- fix missing %{?armsuffix}</changelog>
  <changelog author="vcizek@suse.com" date="1505390400">- Fix test broken with OpenSSL 1.1 (bsc#1042670)
  * add 0001-3.6-bpo-30714-ALPN-changes-for-OpenSSL-1.1.0f-3093.patch</changelog>
  <changelog author="dmueller@suse.com" date="1505908800">- drop python-2.7-libffi-aarch64.patch: this patches the intree
  copy of libffi which is unused/deleted in the line afterwards
- fix build against system libffi: include flags weren't set
  so it actually used the in-tree libffi headers.</changelog>
  <changelog author="jmatejek@suse.com" date="1507723200">- update to 3.6.3
  * bugfix release, over a hundred bugs fixed
  * see Misc/NEWS for details
- drop upstreamed 0001-3.6-bpo-30714-ALPN-changes-for-OpenSSL-1.1.0f-3093.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1510833600">- move 2to3 to python3-tools package</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Install 2to3-%{python_version} executable (override defattr of
  the -tools package). 2to3 (unversioned) is a symlink and does not
  carry permissions (bsc#1070853).</changelog>
  <changelog author="jmatejek@suse.com" date="1514980800">- update to 3.6.4
  * bugfix release, over a hundred bugs fixed
  * see Misc/NEWS for details
- drop upstreamed python3-ncurses-6.0-accessors.patch
- drop PYTHONSTARTUP hooks that cause spurious startup errors
  * fixes bsc#1070738
  * the relevant feature (REPL history) is now built into Python itself</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516276800">- Add skip_random_failing_tests.patch only for PowerPC</changelog>
  <changelog author="jmatejek@suse.com" date="1516795200">- move XML modules and python3-xml provide to python3-base
  (fixes bsc#1077230)
- move ensurepip to base</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix glibc 2.27 fail bsc#1079761:
  * fix-localeconv-encoding-for-LC_NUMERIC.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1519128000">- Add python3-sorted_tar.patch (boo#1081750)</changelog>
  <changelog author="schwab@suse.de" date="1519128001">- ctypes-pass-by-value.patch: Fix pass by value for structs on aarch64</changelog>
  <changelog author="adam@mizerski.pl" date="1520424000">- Created %so_major and %so_minor macros
- Put Tools/gdb/libpython.py script into proper place and ship it with devel
  subpackage.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1522497600">- update to 3.6.5
  * bugfix release
  * see Misc/NEWS for details
- drop ctypes-pass-by-value.patch
- drop fix-localeconv-encoding-for-LC_NUMERIC.patch
- refresh python-3.6.0-multilib-new.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1523880000">- Move the tests from base to generic package wrt bsc#1088573
  * We still fail the whole distro if python3 is not build
  * The other archs than x86_64 took couple of hours to unblock
    build of other software, this way we work around the issue
- Some tests are still run in -base for the LTO tweaking, but at
  least it is not run twice</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- As we run in main python package do not generate the pre_checkin
  from both now</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1535976000">- Add -fwrapv to OPTS, which is default for python3 anyway
  See for example https://github.com/zopefoundation/persistent/issues/86
  for bugs which are caused by avoiding it. (bsc#1107030)</changelog>
</package>
<package pkgid="4dbaf19176d12858a5229f1a2d1919dab1c2f4ad7d94bace5d1633f4ec861d6f" name="libre2-0" arch="x86_64">
  <version epoch="0" ver="20180901" rel="lp150.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1477137600">- Fixup group and avoid rm indirection</changelog>
  <changelog author="mpluskal@suse.com" date="1480766400">- Update to version 2016-11-01:
  * No upstream changelog available
- Drop no longer needed re2-gcc61.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1484395200">- Update to version 2017-01-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1489665600">- Update to version 2017-03-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1492084800">- Update to version 2017-04-01
  * No upstream changelog available</changelog>
  <changelog author="vsistek@suse.com" date="1495195200">- Update to version 2017-05-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1497182400">- Update to version 2017-06-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1501329600">- Update to version 2017-07-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1504526400">- Update to version 2017-07-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Update to version 2017-11-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1513598400">- Update to version 2017-12-01
  * No upstream changelog available</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libre2-0-32bit, dependency to
  libqt5-qtwebengine-32bit.</changelog>
  <changelog author="mpluskal@suse.com" date="1514980801">- Update to version 2018-01-01
  * No upstream changelog available</changelog>
  <changelog author="astieger@suse.com" date="1517572800">- update to 2018-02-01:
  * developer visible changes only</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- update to 2018-03-01:
  * no longer linking against librd and libm
  * other developer visible changes</changelog>
  <changelog author="mpluskal@suse.com" date="1523016000">- Update to version 2018-04-01
  * developer visible changes only</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2018-07-01:
  * Fix a "DFA out of memory" error
  * Update Unicode data to 11.0.0
  * Fix `-Wclass-memaccess' warnings and fallthrough macros
  * Use the standard first-byte analysis for the DFA too</changelog>
  <changelog author="mpluskal@suse.com" date="1532088001">- Simplify spec file a bit</changelog>
  <changelog author="astieger@suse.com" date="1535025600">- update to 2018-08-01:
  * Fix the "DFA out of memory" error for the reverse Prog</changelog>
  <changelog author="astieger@suse.com" date="1536148800">- update to 2018-09-01:
  * developer visible changes only</changelog>
</package>
<package pkgid="e57492c68c3efae691c28a8d53b204b1ed9e8e66938f03db72e0ebfb4f19557b" name="libre2-0-32bit" arch="x86_64">
  <version epoch="0" ver="20180901" rel="lp150.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1477137600">- Fixup group and avoid rm indirection</changelog>
  <changelog author="mpluskal@suse.com" date="1480766400">- Update to version 2016-11-01:
  * No upstream changelog available
- Drop no longer needed re2-gcc61.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1484395200">- Update to version 2017-01-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1489665600">- Update to version 2017-03-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1492084800">- Update to version 2017-04-01
  * No upstream changelog available</changelog>
  <changelog author="vsistek@suse.com" date="1495195200">- Update to version 2017-05-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1497182400">- Update to version 2017-06-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1501329600">- Update to version 2017-07-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1504526400">- Update to version 2017-07-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Update to version 2017-11-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1513598400">- Update to version 2017-12-01
  * No upstream changelog available</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libre2-0-32bit, dependency to
  libqt5-qtwebengine-32bit.</changelog>
  <changelog author="mpluskal@suse.com" date="1514980801">- Update to version 2018-01-01
  * No upstream changelog available</changelog>
  <changelog author="astieger@suse.com" date="1517572800">- update to 2018-02-01:
  * developer visible changes only</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- update to 2018-03-01:
  * no longer linking against librd and libm
  * other developer visible changes</changelog>
  <changelog author="mpluskal@suse.com" date="1523016000">- Update to version 2018-04-01
  * developer visible changes only</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2018-07-01:
  * Fix a "DFA out of memory" error
  * Update Unicode data to 11.0.0
  * Fix `-Wclass-memaccess' warnings and fallthrough macros
  * Use the standard first-byte analysis for the DFA too</changelog>
  <changelog author="mpluskal@suse.com" date="1532088001">- Simplify spec file a bit</changelog>
  <changelog author="astieger@suse.com" date="1535025600">- update to 2018-08-01:
  * Fix the "DFA out of memory" error for the reverse Prog</changelog>
  <changelog author="astieger@suse.com" date="1536148800">- update to 2018-09-01:
  * developer visible changes only</changelog>
</package>
<package pkgid="309a3c88da78a77b5ca11972988d4344e13010cfd52efd109492a3d1db26d1ff" name="libreadline7-32bit" arch="x86_64">
  <version epoch="0" ver="7.0" rel="lp150.8.3.1"/>
  <changelog author="werner@suse.de" date="1485518400">- Add upstream patch bash44-006
  Out-of-range negative offsets to popd can cause the shell to crash
  attempting to free an invalid memory block.
- Remove patch popd-offset-overflow.patch to use bash44-006
- Add upstream patch bash44-007
  When performing filename completion, bash dequotes the directory
  name being completed, which can result in match failures and
  potential unwanted expansion.
- Duplicate bash44-007 as readline70-002 as it seems to be missed
- Add upstream patch bash44-008
  Under certain circumstances, bash will evaluate arithmetic
  expressions as part of reading an expression token even when
  evaluation is suppressed. This happens while evaluating a
  conditional expression and skipping over the failed branch of the
  expression.
- Add upstream patch bash44-009
  There is a race condition in add_history() that can be triggered
  by a fatal signal arriving between the time the history length
  is updated and the time the history list update is completed.
  A later attempt to reference an invalid history entry can cause
  a crash.
- Add upstream patch bash44-010
  Depending on compiler optimizations and behavior, the `read'
  builtin may not save partial input when a timeout occurs.
- Add upstream patch bash44-011
  Subshells begun to run command and process substitutions may
  attempt to set the terminal's process group to an incorrect
  value if they receive a fatal signal.  This depends on the
  behavior of the process that starts the shell.
- Add upstream patch bash44-012
  When -N is used, the input is not supposed to be split using
  $IFS, but leading and trailing IFS whitespace was still removed.</changelog>
  <changelog author="werner@suse.de" date="1485777600">- Add upstream patch readline70-002 which replace old one
  There is a race condition in add_history() that can be triggered by a fatal
  signal arriving between the time the history length is updated and the time
  the history list update is completed. A later attempt to reference an
  invalid history entry can cause a crash.
- Add upstream patch readline70-003
  Readline-7.0 uses pselect(2) to allow readline to handle signals that do not
  interrupt read(2), such as SIGALRM, before reading another character.  The
  signal mask used in the pselect call did not take into account signals the
  calling application blocked before calling readline().</changelog>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
</package>
<package pkgid="42598b0b73b9e7154375530406fb83c9e6399d4f5065e8c57eb49caea3a14d7b" name="libreadline7" arch="x86_64">
  <version epoch="0" ver="7.0" rel="lp150.8.3.1"/>
  <changelog author="werner@suse.de" date="1485518400">- Add upstream patch bash44-006
  Out-of-range negative offsets to popd can cause the shell to crash
  attempting to free an invalid memory block.
- Remove patch popd-offset-overflow.patch to use bash44-006
- Add upstream patch bash44-007
  When performing filename completion, bash dequotes the directory
  name being completed, which can result in match failures and
  potential unwanted expansion.
- Duplicate bash44-007 as readline70-002 as it seems to be missed
- Add upstream patch bash44-008
  Under certain circumstances, bash will evaluate arithmetic
  expressions as part of reading an expression token even when
  evaluation is suppressed. This happens while evaluating a
  conditional expression and skipping over the failed branch of the
  expression.
- Add upstream patch bash44-009
  There is a race condition in add_history() that can be triggered
  by a fatal signal arriving between the time the history length
  is updated and the time the history list update is completed.
  A later attempt to reference an invalid history entry can cause
  a crash.
- Add upstream patch bash44-010
  Depending on compiler optimizations and behavior, the `read'
  builtin may not save partial input when a timeout occurs.
- Add upstream patch bash44-011
  Subshells begun to run command and process substitutions may
  attempt to set the terminal's process group to an incorrect
  value if they receive a fatal signal.  This depends on the
  behavior of the process that starts the shell.
- Add upstream patch bash44-012
  When -N is used, the input is not supposed to be split using
  $IFS, but leading and trailing IFS whitespace was still removed.</changelog>
  <changelog author="werner@suse.de" date="1485777600">- Add upstream patch readline70-002 which replace old one
  There is a race condition in add_history() that can be triggered by a fatal
  signal arriving between the time the history length is updated and the time
  the history list update is completed. A later attempt to reference an
  invalid history entry can cause a crash.
- Add upstream patch readline70-003
  Readline-7.0 uses pselect(2) to allow readline to handle signals that do not
  interrupt read(2), such as SIGALRM, before reading another character.  The
  signal mask used in the pselect call did not take into account signals the
  calling application blocked before calling readline().</changelog>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
</package>
<package pkgid="331f4ac7e040683b96cde9d201119130a11d1e4f9946878c393582cabebd5938" name="libregina3" arch="x86_64">
  <version epoch="0" ver="3.9.1" rel="lp150.2.3.1"/>
  <changelog author="mge@suse.de" date="1060084800">- update to 3.2</changelog>
  <changelog author="mge@suse.de" date="1076328000">- added SONAME (libregina.so) to library</changelog>
  <changelog author="mge@suse.de" date="1092312000">- update to 3.3</changelog>
  <changelog author="dmueller@suse.de" date="1130760000">- don't build as root</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="cthiel@suse.de" date="1219924800">- fix init script</changelog>
  <changelog author="mpost@suse.com" date="1461153600">- Upgraded to version 3.9.1
- Added Regina-REXX-regutil-3.9.1-doc.pdf
- Removed regina-rxstack-lsb.init.d and added a systemd unit file
  for rxstack.
- Converted all hardcoded paths to RPM macros.
- Removed obsolete regina-rpmlintrc file
- Removed the following obsolete patches:
  regina-3.3-configure.diff
  regina-3.3-Makefile.in.diff
- Removed deprecated Authors section
- Broke the documentation out into a separate package.
- Removed redundant changelog entries from the spec file.</changelog>
  <changelog author="mpluskal@suse.com" date="1462190400">- Rename package to Regina-REXX</changelog>
  <changelog author="mpluskal@suse.com" date="1496923200">- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1521115200">- Modernise spec file with spec-cleaner
- Allow alternative rexx implementations to be installed in
  parallel (bsc#1083875)</changelog>
</package>
<package pkgid="cadd3e6f9ad95ffbdb11478aae9ec93ba3fbb1a4cd0da8ad53b3033565eb6c58" name="libreoffice" arch="src">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="6df4abe902e412ebdd089e67b1cf2b9169511d3e79baf78d0d55268bb86a09ea" name="libreoffice" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="8e60d670f3495988f4137848c631f75531b75620c255dbd50222941dd64434e6" name="libreoffice" arch="src">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="8c89cfedd24c3645a15bf6b12f2c5b1d284b9a1b3d90fbb4df24e9a53546b9cb" name="libreoffice" arch="x86_64">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="f3ed092551b26227043530f0100a6a55567e2a1a3ed11cd391a4b05b3e6466db" name="libreoffice-base" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="9d520a0cb709ba18bdf346df67e9e94a933359592ad6c3732fa184091f19f510" name="libreoffice-base" arch="x86_64">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="778bd5ae5cec72a5769f0615e24e59f5bba18f009ac552b2a03b0439c195944f" name="libreoffice-base-drivers-firebird" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="35c2e0155797fa4cab6d1e3e5301330d14ec72a22777c9b4e9fbbc0aa447ecea" name="libreoffice-base-drivers-firebird" arch="x86_64">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="3843d8cbc49ffae456e7259ec1304c0e855817bd77d191be2026a76e99ce41f3" name="libreoffice-base-drivers-mysql" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="0a850d15444a88b550783399aa4583044ef7083b104d6993ec7b419d2e472a2a" name="libreoffice-base-drivers-postgresql" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="4da980732a3388f20888659cb0542f43b3f009ec860ee830b8659cb398329ff1" name="libreoffice-base-drivers-postgresql" arch="x86_64">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="b5a6a185c9d4ab3d58f7eaaad3c967f224ffae10aa02e64534cbefd43f54de1a" name="libreoffice-branding-upstream" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="6407d14ceed436448ff65d5c4c1432006bcf1e50ba29243ad6f92e285860d590" name="libreoffice-branding-upstream" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="aa594cb8d56e3beec957d7710c8a3232314361c290486d79c9579c70fe098fac" name="libreoffice-calc" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="e20d066f579b09192b62f09d085bb408e125eb3c06da66e70b7dc38d838002b4" name="libreoffice-calc" arch="x86_64">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="3c23c960395b26813b9c8b22f0e44e442a4feee9764c5509e7e9dbad4ac987cd" name="libreoffice-calc-extensions" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="9e253ee429540d7824a46061ca812409b7f014c8e19c97d025345d941618afec" name="libreoffice-calc-extensions" arch="x86_64">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="a9a059d68414d46568515112d34684912416e04d814bdb464029558fba4e355c" name="libreoffice-draw" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="1f3b9e7ad4af19a8c2664e373e20c8eb167552cbe4a6d3016a0f1680478b529b" name="libreoffice-draw" arch="x86_64">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="9688bd6bf040c69cd2cad9b8cf54000de8c274a573e25a1e47591b90903b1f1c" name="libreoffice-filters-optional" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="ecd5b9fd39c10a71366967c164edae196f548109f2c2c6c62c0969dc072e65f5" name="libreoffice-filters-optional" arch="x86_64">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="894ce03682543f37b4f06a795e862cf80b082e06d431e6822e3386bbbf8e4934" name="libreoffice-gdb-pretty-printers" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="b8c5a80e03273acf0b839d30834b2a060e5236707afb7acf311def4ed1b9b596" name="libreoffice-gdb-pretty-printers" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="9c6631c0639b3e250f17161c728181054f9d02720e402a72e5776a9979bed988" name="libreoffice-glade" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="2a5bf37bdbdb3dda899687484a8ae1b315135f243058b0c66a0ed17d3bf32096" name="libreoffice-glade" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="2014f29168fba576532e2ba529a01461e555511454732c3b0aed3fb71c4577eb" name="libreoffice-gnome" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="8cf37884cb674031a29effeb0921b0af4e4c7b147187ec88175dc37e3ec7cf0c" name="libreoffice-gnome" arch="x86_64">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="f877653313948af7f9a4c368f5b0fa51fd53082eef874ddbe187c90ec33e2fae" name="libreoffice-gtk2" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="dd14187f1a1db37e8d449f5bf93b1debff9a1dda1b403ede228f037bfa074fb9" name="libreoffice-gtk2" arch="x86_64">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="77f929097e4a282d0e0332a1fa4ff555c1ee5e20dff38f4558467ccd85d3317b" name="libreoffice-gtk3" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="fe5580f2528b4b9897335d09b2ae4a08b49114bc631ac8f18b092e680c0ae043" name="libreoffice-gtk3" arch="x86_64">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="1b6dea36e4a54dc755de4959d8cf7668b8d16dd37da52d64a7d409a35527b696" name="libreoffice-icon-themes" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="b5d1cfaa8f27aa374494ad36b6d8454a361f8d8f53ec9b6fa966196fdd757f3e" name="libreoffice-icon-themes" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="c9d340073bde115d70523d235ee14154b550c2fbafd96907c0f4fabc9bf31d40" name="libreoffice-impress" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="8c3e03c345c6c6d64ad9f47acd8b59400bf8f7d706f437cc2d9423aa19d6f258" name="libreoffice-impress" arch="x86_64">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="4e2fd9798c2c33877d7e31fe6526f8c320a33895f0a0a0e5e36f74ac05fa9fdb" name="libreoffice-kde4" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="f4b849bb5e41fdc0abdb33d11df1c392112c052c04ca92a387a6952ab9a6eabd" name="libreoffice-l10n-af" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="c8db644b53adcde5355ca744ada7fba4680789e8b5a65dde71a4b80bb8c8da86" name="libreoffice-l10n-af" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="bcb366fa8054cefd3666f79d6d8a84ea2cc55d2cb0468a86e3c9db98e898958e" name="libreoffice-l10n-am" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="ce8d1946cd97593671319482fac0d98e176ee45e123a7c7b717a4b52ff0fde65" name="libreoffice-l10n-ar" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="6319a9a4f90638ab8025c37b705f1070bc1afb67fabbb3f311be7653b2775a0a" name="libreoffice-l10n-ar" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="11d4ae6a448717de7c04b0b7043b427fef939b00310e2cc3dc536ada4f416e51" name="libreoffice-l10n-as" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="5501b2cdef60a37172a9a17579c7b05781521254576201bf4e469a67edd51545" name="libreoffice-l10n-as" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="d8e762b3e00759f0b06cea00814abd4aefc255d1366dc7b8459be4630de13240" name="libreoffice-l10n-ast" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="133c4cc67226c498bee5bd79b801afba9cb1fdd7f8f3b1f40d72e80ec9379b74" name="libreoffice-l10n-be" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="26e678850651950d133e8ecbfd4b6f93ddc30678a2ffb37304a34057f50234b9" name="libreoffice-l10n-bg" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="76f66008fc5c2537e493126ab7d7082a9338dc8cf7dda61489b30450b44e491e" name="libreoffice-l10n-bg" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="52e389286fe401522cd510e91cf51cbb9e785235c5c07098e0ab0601f2f58589" name="libreoffice-l10n-bn" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="c62dbfff7e477d7f01a8b9a2690a548ceefa0aecbda3f7593063376fec9d8ea6" name="libreoffice-l10n-bn" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="e440328065565007f9f88bfa4d5d0904f530f9366f4a03d494fe39dd49a0cc69" name="libreoffice-l10n-bn_IN" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="4c82428c06801b042f74cef25ba9f49e00ee98e1a2c36e2a9d26d0b5c1d9b94b" name="libreoffice-l10n-bo" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="13869fdf13d8c00dfe956a5ef33ab1b2afab78900aa4cf87500010310d08f2e7" name="libreoffice-l10n-br" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="3910028c3f8b423cb7af834967d110d2c9d5bc6d706c5181930de1c50cca0ad9" name="libreoffice-l10n-br" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="96732a6b90ba32bc9558513b93bc5ce736965f9dfe8b8533d99479b5d2295ce6" name="libreoffice-l10n-brx" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="4759326cd2f92b1fb273028cef5736c760865cad13e8abcd9ec66d6536695e5d" name="libreoffice-l10n-bs" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="48130dc1bacde8145a77a14f1072b5d6d98bcd2a242c58e10b82913bc01c0249" name="libreoffice-l10n-ca" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="c28b9a7a0f8d3d5390e98dcbf3bb612df2f969c287d0069767c565bb2a63abc5" name="libreoffice-l10n-ca" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="e4d5873f06987a4558a37233a9a1524d7061ccf5161a4290b41c8e6531454480" name="libreoffice-l10n-ca_valencia" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="43c2bbf47a7e97b742eea625a91fbe793af063aeee3168b04067ae94ed862055" name="libreoffice-l10n-cs" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="f4fedc7a20b0c97cf61d087cccdfa0b05fd3545c6e76520fc855887b9a54eba4" name="libreoffice-l10n-cs" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="2350e0b15028619c11ab31c4721434da154fd2ce0f226a57967ae7df524e5c15" name="libreoffice-l10n-cy" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="8a09e93c9b5ea095a78a37371a87d287e3bd7c0c1d7cec2acb18703c7cc0eec9" name="libreoffice-l10n-cy" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="5147689dac37886d07bacaba226a7c2771b7f625a12ad6417390b178399c68ca" name="libreoffice-l10n-da" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="9afd946209762d37fb362e2952aa678e883f5b0b8756d07cfc32b4eb234bc4e4" name="libreoffice-l10n-da" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="f140fc6b455986ea4cba5c95c408cf176c16939a24549d8b123d645526dcdf29" name="libreoffice-l10n-de" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="22d0e529ea2c46d6151e9cd9d470a40916b93d1911baba1e7e14831dcb63c8b3" name="libreoffice-l10n-de" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="37e93201f5d1fba55802225345c7815b15caf1b0e3cbd424e742eb578467b876" name="libreoffice-l10n-dgo" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="d55d4789c2cf6e74967b52807adc76d087c309606a45d5b0162720e3aaa5e87b" name="libreoffice-l10n-dz" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="db8e4c2a76d61961ac4a649ec27071b0158c3b131cc279524b738fc700629ce6" name="libreoffice-l10n-dz" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="c0fa95c423d2e29d3156bea2dd6268e55d40334edf202106d9fd2fa1c20d9aff" name="libreoffice-l10n-el" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="e6215023ebaaf49b2982af81abc855aa583aaa6e9004fbe088cad7fe88678adf" name="libreoffice-l10n-el" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="63362d007a50e7768d47148ca6d6eb04cb7b46c6b9d749ca3e6fafdbdf6448a1" name="libreoffice-l10n-en" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="9492a65d4bb888eb648c3751c1657e3778ae574460a51675a399be5e356fa52c" name="libreoffice-l10n-en" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="b90420ae6b4167bdf4e533cbb9834249703bcdb931f6e5a0ba37ae9fc05fdb1a" name="libreoffice-l10n-en_GB" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="02aacfd21c07c9e0d8b846928f16c2a8ad5911ca82b1b695967f3b1134e20281" name="libreoffice-l10n-en_ZA" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="7461dc169e45a54040bdcb140f875ec3f09422746773e7946b8edc678e79b6ff" name="libreoffice-l10n-eo" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="483e26290ce98a5da2ae2f6e700e0a3f24195a77d9bbd704d29baef3f82cad97" name="libreoffice-l10n-eo" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="4f3d8ac899b35b7877d03f9421f8881ccca30ae138994420dd43aa1027ead914" name="libreoffice-l10n-es" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="386a3c29685c68539c54b4f8991da82ba849d73c8115a9d054bc5229e69a0d48" name="libreoffice-l10n-es" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="c3ec09bb4c73a8527dfb89196a889a5a6caded5e275afdbdfaef3564f761574c" name="libreoffice-l10n-et" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="3a6c19dd1f503523f98a2aa38879831d7ee9a3ac6a88055e3406b33f3efc1e7d" name="libreoffice-l10n-et" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="f82580076f63190e8e540bb8a68b1975f12a089c20d26e42822fb05a3b9c2e27" name="libreoffice-l10n-eu" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="c8ba4404e51c13101dad35a26d16c117621324b3b71e482d0dc659e5d171df3c" name="libreoffice-l10n-eu" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="608bd3348f3d814b4e7780803a0997bbc9b6f4aeae716121f05b9082981b6a7d" name="libreoffice-l10n-fa" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="d620e5403dc79b4d0b136080c893ba94b5dbf676fd68e7f2631287723c7776bb" name="libreoffice-l10n-fa" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="617182aa9a83295e3feb9d8ca5cd5c4e2bc135a8003ecf1df2e030d584a530ee" name="libreoffice-l10n-fi" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="aca666a4f8fcce9f7644e63e71087a315114738d992c9253a151bb30051b3f0a" name="libreoffice-l10n-fi" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="d5b16a39c91f1329929b11b64a2519e0cf176a062f95d5326322903fe982757d" name="libreoffice-l10n-fr" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="88af1effe66741271a7b8a0dd6e1d13663d4cdfdb2f5a748b03703209a6fffa8" name="libreoffice-l10n-fr" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="c9b200b702d991dae7a743f9a5e2472d20dfb3385b4cd7369411b42e3aa80d93" name="libreoffice-l10n-fy" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="6946ca6201e20e8def70a6502430b347b6321e63c0a66bfc506fa38c252715b1" name="libreoffice-l10n-ga" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="514b3005b8fa6e687cc1493858b228ed504e374fb76203d5872486a375a69b0e" name="libreoffice-l10n-ga" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="8e91b6c6fc62b1d797be8ffb6788ee7dc82f768272d51d60a906f85a103caead" name="libreoffice-l10n-gd" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="884ceed2547cc82a710a244dc8c504c6e443e243254259f93020a29a38bb6efb" name="libreoffice-l10n-gl" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="2a46187d85ca024f6b10e3c55c6fb3660e4bdb759b424798a3c3c5659d2757a5" name="libreoffice-l10n-gl" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="b1823287397e652dbfcc195faca0b0c27ae1954a81897319140e510576642111" name="libreoffice-l10n-gu" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="452c863c124c2595bc0e360ecdfb05615816bf8e128f9b2e88c8358ca1d8a35c" name="libreoffice-l10n-gu" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="6d4d92fa82df12b3969417fcafe8c3344c9e5dbf14d4795af78ba6361f6808a4" name="libreoffice-l10n-gug" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="9a5ee229473b8b7de42c4e069f73548ca7676f41fc5ae5d600adbd4550078a19" name="libreoffice-l10n-he" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="9dee05307329c20748bb7aa2d466bc7d20203d2f2ae6e6ae75cca90b8b8ffb31" name="libreoffice-l10n-he" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="1d8eda5f72fcad4a9a41da77c9b202cb9529821e821d739c479b227d50f335ea" name="libreoffice-l10n-hi" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="b26044e4f3da43e99537d4dea3b56d7d93a083edd12a0240baed392e38515c74" name="libreoffice-l10n-hi" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="0db9a2c3c8d71e39e032a1be2cbbe71be0ff91ac1f2bc7ca4c670111b1342bbd" name="libreoffice-l10n-hr" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="d6949e3a83d0a331ee750d611f450d29189d4cdf1fc297b90a3dc91e386f83bc" name="libreoffice-l10n-hr" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="68fa018a6fe251813fabbde24b9cbd7a2518675cfe80d6bd536978982c401070" name="libreoffice-l10n-hsb" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="7a1f56ea7252ded34d9a646b379ad9deaa547485fe0cd341ca969d63c043f17e" name="libreoffice-l10n-hu" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="92b26dce87971dc5a80aa8b795f4e0612f5fb6f0035e87c5e6a6646071337ab1" name="libreoffice-l10n-hu" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="21102d220b6a2f550acd24edac8853d81484a2d5e53eb83a13e755008ad5eec8" name="libreoffice-l10n-id" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="32def6180e1d6a6b3230740c4b4481fafc35cb6cbb009020d352672b26d157f8" name="libreoffice-l10n-is" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="da1036a1a20ab7248a29d79b1dc023cdbb29f93c711d87e6eb5bd08e722d9710" name="libreoffice-l10n-it" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="76814bc1b43574d74b2cbae7e54dcbf8a0edf9aefc2541628adc17958086c0ca" name="libreoffice-l10n-it" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="ffa801de50ee8b5c95043639c0d6302473a90d31d26a91089a786e21ed835fd2" name="libreoffice-l10n-ja" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="bd0e92095466b37807bc0e0bacf5f0180d12aa5d988e16f2c00e2765993fcb62" name="libreoffice-l10n-ja" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="2196ee1fdc477818f3a8ac90fb23a21a5c39e63482e4518e91d6eb9a2ca80ffa" name="libreoffice-l10n-ka" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="8a538fe8cc42f9678d5cfff35c4a9fff1c1814b1edeeea2600a2e6336eba1128" name="libreoffice-l10n-kab" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="bd16805704b394180dd0e34330483f2e3f4a4ca06de0a7694a02548f9378f5b1" name="libreoffice-l10n-kk" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="6acce213ebc7879a852ee1e7036abc8283706612ddb1f1704ad4eb8a575c94d1" name="libreoffice-l10n-kk" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="e9c6f260c38b5cdb3f839137b00ed3182c009af90521f0d330f6970f052e1503" name="libreoffice-l10n-km" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="10d451dfa22f843928e6e1d94138bb35f9b361e93cfd98876ab0e1bdd7d3fc27" name="libreoffice-l10n-kmr_Latn" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="397c76851a8be8bd77b02a4825e0860174f7394c0348516774e7a26cad7a3e8a" name="libreoffice-l10n-kn" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="021e7f0e6a48839d107e62c3cc469e86b216a83f43ea3c72f4b2de0c4c97cd25" name="libreoffice-l10n-kn" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="d5ff26c95dd77e82a9fcb2d82c9967e68b6ef9b4e2ec881d4e0381a08d581bad" name="libreoffice-l10n-ko" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="919b2ed9a9b70f7cecac1eb2baca4041a66c98ed7ab0ab33171ed223e8b1ebdc" name="libreoffice-l10n-ko" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="b20d3c1fbb8c4a464310cb852a0686185e18d8ab0bed5140c4498969089712b6" name="libreoffice-l10n-kok" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="ade0388ed292d1bdc65c329bec3c162a5b9a39dced90b08bf5d894cf6925ebea" name="libreoffice-l10n-ks" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="cbca68516fcc41f3100159cab71e40a16fe036a1b71d1f0c398b729670df583a" name="libreoffice-l10n-lb" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="2997253a220ed0e8bf49dd31d53746269cd5a86ecd33e92738ed2a3473732afe" name="libreoffice-l10n-lo" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="71cc917d346ba755824675f461aa08bf866e3f47d37f3181ae87e8980af0df2e" name="libreoffice-l10n-lt" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="7556cd33d89deee24854fef1e1cf596d13d92f5ae328940aca6258650965780f" name="libreoffice-l10n-lt" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="20de39dd94d52be03b430e4a26002443443405804b1a7ec1ca908173a14d93c3" name="libreoffice-l10n-lv" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="011ba5d36c82f542d24cc8196dd1f52f566d792fb260ff43f0ddc804f7402dac" name="libreoffice-l10n-lv" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="5c7fed59470fca3d624afb5cd3d6016b3f64c9ec54e3c666648b9c23f3583c13" name="libreoffice-l10n-mai" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="2cac83744aaba9110bb5482f11f79905b71ad26ae1ea878f4debd5a72a47cf37" name="libreoffice-l10n-mai" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="2b1e37312e4c254e729dfd5bb8a4995e241a05896335177fa94d848a3cbf9bda" name="libreoffice-l10n-mk" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="0ef32fd3052a04ea9a3b3c7f9217112d433d800becf0cb2c712ce2c08402c749" name="libreoffice-l10n-ml" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="7bfe475698332bd4e0cf65660397c31c215319440928a7245aebf0c08b95e269" name="libreoffice-l10n-ml" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="3d73b21c4d492cf29e778394145bff0bd95369d3fcbbd7ff76418d19b4eddc37" name="libreoffice-l10n-mn" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="a0df47e23822f359ac0bc49a5c0b5e28bb0706d1a329c8748e2c571e1adc7543" name="libreoffice-l10n-mni" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="274c1cc5c83fb9dcb73f4886db6a784c5b153792be99db3a02aea5a7f834963b" name="libreoffice-l10n-mr" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="ad8ac7094bff5cf2b6e0b1e63cc66a173a24912ac367ed07932aecfb63fccd39" name="libreoffice-l10n-mr" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="ad5b73f1a1e6a1e5ad3884c91f6b679cb645ecffffa3fbfe5c97ed55807ed6b4" name="libreoffice-l10n-my" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="e6cf858f21a820fab16700018c94b186b1147389e5699d5d0b54bfc0d1b18f9f" name="libreoffice-l10n-nb" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="63d470b30bd2e26663bd8c49b1cfdfcaf2aa723613c44799fad6dd9e6b5e4e45" name="libreoffice-l10n-nb" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="87f5f810e2f07b3e99fd7aad456242fe3315e079ac9067996a110c3d7b69dd39" name="libreoffice-l10n-ne" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="c11501435aafc9e4872f83a21bf211857bfafc317a3ff43d220ae41d0b12e107" name="libreoffice-l10n-nl" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="b0316192c7dd3ab05e02580a29e14fc1ad58f8ae2776ee26b5bd788e269177cd" name="libreoffice-l10n-nl" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="be497ea14d1a24bb101ae0710797fc4f991bc35751c3d33041eeb12dd6462780" name="libreoffice-l10n-nn" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="0d7e894f744ce307913578286a5b04673d1116182ad077d252da8a37392d572d" name="libreoffice-l10n-nn" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="7a83460c4a55967cda256129febedf7c171b11259b0aa4ec77f1ef726b88e0cb" name="libreoffice-l10n-nr" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="0ca683e7698e1c8f922e282b4d3f82f6a2b8fb146549524249a814a78493758e" name="libreoffice-l10n-nr" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="ce61c56959cc1e08743d27ded9d715972a652a2808971f993a6cb3426a470856" name="libreoffice-l10n-nso" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="01338839a7e27ae1ae834cf076c60dc20c5eac824843cf36f516f464e67e9186" name="libreoffice-l10n-nso" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="ba7267b2dc9a33bf753b789bf00929e3fb434b0700119bed2e89246f884b2fcd" name="libreoffice-l10n-oc" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="191c6ef7a6edc1009af00204f6a04c4368a51e702e2340530f915bd2fe8d373b" name="libreoffice-l10n-om" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="fbf9a460ca29050e58c3964bd9189d5a4a68b132e0487f74cc4fc3df29164e52" name="libreoffice-l10n-or" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="566f75ddeaa5fce96a12793802b31c5d00ae780304acd73ed8e950484a118e94" name="libreoffice-l10n-or" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="5f50745d5a1a6fe8ac23c274d7de9d4d9aec79fb6cbd141f40ceef2462bf4592" name="libreoffice-l10n-pa" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="933d6fea3d4318c87abab64f6d4e7552cf31348099c3577439a7dd46687ab29b" name="libreoffice-l10n-pa" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="7a2d57024a5c5b2fa0a8d33e9bcb8cbb763330641f3034795031871fcf8164ce" name="libreoffice-l10n-pl" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="a02605359c8911c5e0ec81f722ae48d6fd58792b22fc6c4892a5ccd6f57b64cf" name="libreoffice-l10n-pl" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="e04b1db25dac594018c137083a62ea1bfd49f0c1f0d09c6ceed42d83650c9e71" name="libreoffice-l10n-pt_BR" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="d5c05506a8d1b463c5d05a47942e9538eddb4c8d9526197a6062f878322e4f6f" name="libreoffice-l10n-pt_BR" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="4dce0400b4adc5f4367ed5476b06f492c625e44e052e1d3ff0f67703af628a68" name="libreoffice-l10n-pt_PT" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="b532ba2abd6a55c7c0c0fbd124947eb58685b3bf3987cc5a6faefeb6de67540c" name="libreoffice-l10n-pt_PT" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="06541ab3c436240c986d0a049d224ade9641861212429e0164d6895de81e3475" name="libreoffice-l10n-ro" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="a6ae91a29fe8ca3dd63c700ce74a76abf14bb82879b3175a884a32565e73c331" name="libreoffice-l10n-ro" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="99ce5e1a7aa3fc2b3086f752684295d52829d6f637837bf4b55b5e51023d43c2" name="libreoffice-l10n-ru" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="49696cf8ed9a6505d2a610ef924d058ce2e1c5eb0ea59941bc709df60980b8c0" name="libreoffice-l10n-ru" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="47a08bc9d26515aa4e0f22f864963e42e2c6d34b72167af23d2282b43c790bb4" name="libreoffice-l10n-rw" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="698567a868c386bd17b7658954127cd880775e7bc90c5490a1e740701ddac4a6" name="libreoffice-l10n-sa_IN" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="78c8774b8b757eddbabf75216ae51d2c4de467ba7241418f879fa868247b7819" name="libreoffice-l10n-sat" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="b19bb31d0b45ab06dd343ef42b2027720165d91f5e418e03e746738d73db40aa" name="libreoffice-l10n-sd" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="aba2ef1fa485d3bf39b06064b79c95a47df9f19a2393fb368afa8becce8894a9" name="libreoffice-l10n-si" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="6bf94662a1deb89b46d1455e494c6be6484ca0d6ab99d0cf2ef110b8013f1778" name="libreoffice-l10n-si" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="fdde0a4b883c29518092ee626cf7e9e46eee6b3759d0e00db50a9abdb52d21fa" name="libreoffice-l10n-sid" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="a0b269ba4f25921b7822207f0824128bc97299665aefb8d7f359f0f00db13420" name="libreoffice-l10n-sk" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="5d30806313d398cac25b548fad1876846022d562377028fdc7d6ccbf49a3c7a3" name="libreoffice-l10n-sk" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="2dcb73cfbb14c00d8b9ba164fd50167c223e079b4ae933a9ef2165f1f326004b" name="libreoffice-l10n-sl" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="368377e70d5ad669a722669c78da4aea06c0a97633febe194c80232f19ff8d3d" name="libreoffice-l10n-sl" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="57b5803079c2ac345d0c280d7262d1ea9a42f1203f8885e4c7f61bd43952cdd7" name="libreoffice-l10n-sq" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="05ba53e3e5f4065f796da0690fce976cb04be85f792f4acd9d9d6b4fd8d40543" name="libreoffice-l10n-sr" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="ab31759f7227e73ea20fb0765791cd3eb008db595031d6d00eb15d22c1cd1268" name="libreoffice-l10n-sr" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="8a203d355a4fa4fdedc10d48ca238ef6d231940d6c0811a71f4b8a2ec0edc994" name="libreoffice-l10n-ss" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="d38a71d3f94ed8a6d1d07a6a274292310c9f62760b33f8f140160e4ad3cf12c4" name="libreoffice-l10n-ss" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="cd62672aa008771b709c940e3d0cc6b8cf74d882522f3b40a299a3a5835df599" name="libreoffice-l10n-st" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="96c36ecbefa5992eb4db67a5acca998f91dfefb4b4cdb4d9b7fad094d9cb3a0c" name="libreoffice-l10n-st" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="31ac1019bcb2c07758b4769830eaf5f008ad64df887a048706bdcdfc99127779" name="libreoffice-l10n-sv" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="22fd96fe3968151b60aaf6b2ecd7a525b84f86b5bb394f51e7009aaeccf38a5e" name="libreoffice-l10n-sv" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="c9d3b7c5ea605d4969864fc237d0ec7b93345257e4d6434eff84d090bd2b427b" name="libreoffice-l10n-sw_TZ" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="6480ac86c3a7b9f2d0bc8f71915acba9a072439ff3531a1d400fff018a3fe1f8" name="libreoffice-l10n-ta" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="d41c27a68c1cda0577dc0f7c93fc5b5256163cd30c686f507d10b64318149451" name="libreoffice-l10n-ta" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="2c87053b73b220b3d70235a9402518ff64133c35b1c4de0d15c8e0b1fcd530b6" name="libreoffice-l10n-te" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="5fdfdb54dc36b4c25877107f2f29b2a5bd8d54e0dab6a90655624f0f3e05bf27" name="libreoffice-l10n-te" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="4b8c5bd6809c44138284e7df6cf9b737190a5fab89693ba9b04a592be65409ae" name="libreoffice-l10n-tg" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="6fb2b0eff9b171bb7aebca111bcad21865598f5fbb2040ea720dae72d3e26bda" name="libreoffice-l10n-th" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="278c87f5cbfa5d7c9b0e30b593b1798761589cdaa4b75e495509d6964db51da6" name="libreoffice-l10n-th" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="e7ab162d2390ba459ff1a217085b4fc92e0fdf228e714c7add3fcf37f091ef6b" name="libreoffice-l10n-tn" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="d2ea71ddf0234d455bdd76b8464866afe55f271af8d6c203963619403ffdf2fd" name="libreoffice-l10n-tn" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="2dd1db9f7e67b23819f50351ecd72b25c2480cb10bc9757d71673f6d269979e2" name="libreoffice-l10n-tr" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="93a98be10189012c3ca93633ead48b0b79520e7c5a16c15c3bf9d0fdd514203d" name="libreoffice-l10n-tr" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="d89f53306f73c2be870c0e60782ee5e9434cc874f053be2e51f36babf2430ca4" name="libreoffice-l10n-ts" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="b78e3e0bd94f46297d7d6d3a125bf2677aba4dce21c96911d76463ad0b623571" name="libreoffice-l10n-ts" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="77f43ad55a244e9eb0600481f140fa6ea21479c619d9075ebc610e3df5a2fbcf" name="libreoffice-l10n-tt" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="0ca665c790a523bd3164a34c75952cb52c9cbbb6e1ac0b35ab81ffc79edf6834" name="libreoffice-l10n-ug" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="a98b589e5fd2d725424889379e4e28a883028b574b03409022d9e9b10a93b735" name="libreoffice-l10n-uk" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="9beb9ab18904ed1bf5e23395a18ed6a6684a4b0b58906e4de0821fbeee434d92" name="libreoffice-l10n-uk" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="2920f234603658ae2206cf960ba3fee963ac3f9c6bd3ffc72f2aeda0cf8ae92f" name="libreoffice-l10n-uz" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="736306b31a5f8921728179971778faad30426d77f948093c70696027e69e164c" name="libreoffice-l10n-ve" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="eca18b29ef745fe6a5e1084ab60c8de238309d010c6e9d1c5a82734a0bc55253" name="libreoffice-l10n-ve" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="28fabe40bb9fab22590c037e4eb613d3c2fcda4a2e6341ceb761a19b9df824a1" name="libreoffice-l10n-vec" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="5a6931f1482763f0b4492e28d14d97bd67864aef37347f78d80e68179c97f7e2" name="libreoffice-l10n-vi" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="65b3c593afd54f377e1d32127ef4cd1f477a6a374f12e331993562fb13bdae4f" name="libreoffice-l10n-xh" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="d0142d3586db545b41104fc60cabd17749dccf0bff2759b2207dff18e28f16a4" name="libreoffice-l10n-xh" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="bb1631c2d3a4e823652cba98a0f328f1eaab51929fb4fd29f91fb41c6ae91181" name="libreoffice-l10n-zh_CN" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="03ab7ffb38771cd8b4b0a6a089f793f715263306b3fb4b95bd2d5f94584e7cce" name="libreoffice-l10n-zh_CN" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="ecdfa3ef01ec3341941778d6f85178bfb671ad0be53a8b267bd63fa7cfe48392" name="libreoffice-l10n-zh_TW" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="f6adce8032586fb82743dedc5d7898be3fa8bdef649d81af06143c44f220fcc4" name="libreoffice-l10n-zh_TW" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="e1872e7ebcadb8c0421fd0667626e4bc023ca98ac3ce577f0e2a1ea84a291278" name="libreoffice-l10n-zu" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="b27f19de302cacee81cc230f3de39a682cca296ac8cb88508ddcf5018f1b63f8" name="libreoffice-l10n-zu" arch="noarch">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="5cbd7450758e1d62f88f5166ed3a04bd41305f650da107a568c9d9fb9bad2431" name="libreoffice-mailmerge" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="108cd8cacffebf02203a18802aa043e3a3add60b8a05a8209dcbaafe1bb3e30c" name="libreoffice-mailmerge" arch="x86_64">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="8fcf17c1ba8dcfff9adcefb1d3110d5f21e187c1e825a17d46c307e351243926" name="libreoffice-math" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="91370385d283ee148744c8cf8507209fd3c0c45a5a979bbb5f83b5d327107db9" name="libreoffice-math" arch="x86_64">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="43be8ae329b467e771c2d6ad5bb15432583ccc0d366a733ff61ce26241cec48b" name="libreoffice-officebean" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="c2856bcadd84ff9b28c50aa5d36348fc6d7b0582001e1d51a3eb21caa9fe7bf7" name="libreoffice-officebean" arch="x86_64">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="7861617c5c52783aaea866a04f6047052b2a2c94a72c92bc063e0ed816b56489" name="libreoffice-pyuno" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="e39d50db192022f11e7a382860d8d6e7a2060e772ad61fdf300a70db3c96a6ba" name="libreoffice-pyuno" arch="x86_64">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="7572425a5dc3bc664fe0c8cc295d9de540967672405d949be6037fd75918f845" name="libreoffice-qt5" arch="x86_64">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="e5d8d741d25eb1bcfdd0f9354ddb7b7ea7b84cd44dff8fa8fe3cac39d81acaff" name="libreoffice-sdk" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="f760a2eaed95dfdfa6dc1f8612613a114f23f132906dadc88b6963e10205db63" name="libreoffice-sdk" arch="x86_64">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="6bd651db4cac49cdd2e24a6ac63ff1afb93de8a548cfe2efd956f2e7933200d8" name="libreoffice-sdk-doc" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="b0ac7c0d759153a1e1f5904554f2aa72cfab1365f005be9bfbda1822e6aeb877" name="libreoffice-sdk-doc" arch="x86_64">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="c20b5ad30766418498331264553e80573cdd764c09b752c7e6aba600d2c2ce04" name="libreoffice-writer" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="5b4e19f04764c230a13fc70c9ee1831fc19c501fce195f51917bd677aa072504" name="libreoffice-writer" arch="x86_64">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="598fbebc17937728126ba003255c2acfea794ca1c6c2aa7bae7d5ffc477d74d3" name="libreoffice-writer-extensions" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="dc0dd053e29a92b20b063abc541a8247117de7d5370bcfea6ad59a05d82688ab" name="libreoffice-writer-extensions" arch="x86_64">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="c16854e0cdfe058a0ce32c263e384e437d64b13368460e4c81728a69af450f6f" name="libreofficekit" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="a57a7158c15d6d3f209c6d6ac770e318d31631b0fd8d93b8c9844ce91f33d9a9" name="libreofficekit" arch="x86_64">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="4441cb9bfc48f278497dd0b0ecd5b58dcbfc35fe7c0165d3ac68dc2edc1abcd2" name="libreofficekit-devel" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="358c0d137e4ce0e38089e9fe2ab6f44cabf1b44ad496fb918181bdee7db525fc" name="libreofficekit-devel" arch="x86_64">
  <version epoch="0" ver="6.1.3.2" rel="lp150.2.6.2"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Added patch:
  * 0001-call-System.runFinalizersOnExit-by-reflection-since-.patch
    + Call the System.runFinalizersOnExit method by reflection,
    since it is removed in jdk11</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Version update to 6.1.0.2:
  * RC2 of the 6.1 series</changelog>
  <changelog author="tchvatal@suse.com" date="1532347200">- Add new language Kabyle</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Reenable firebird integration</changelog>
  <changelog author="andras.timar@collabora.com" date="1532692800">- bsc#1095601 - LO-L3: Exporting to PPTX shifts arrow shapes quite a bit
  * bsc1095601.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533124800">- bsc#1098891 LO-L3: Table in PPTX misplaced and partly blue
  * bsc1098891.patch
- bsc#1088263 LO-L3: Labels in chart change (from white and other colors) to black when saving as PPTX
  * bsc1088263.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1533211200">- bsc#1095639 LO-L3: Exporting to PPTX results in vertical labels being shown horizontally
  * bsc1095639.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533470400">- Version update to 6.1.0.3:
  * RC3 of 6.1.0 release</changelog>
  <changelog author="tchvatal@suse.com" date="1533643200">- Rewrite description to reflect we ship also offline help</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- No longer run chrpath on bundled gnupg as it is not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Fix the bundled assuan version to be 2.5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Version update to 6.1.1.1:
  * RC1 of the 6.1.1 release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537185600">- Update to 6.1.1.2:
  * 6.1.1 RC2</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Switch to serf from neon package that is quite dead
- Remove sysstray configure option as the code was removed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537876800">- Version update to 6.1.2.1:
  * 6.1.2 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539345600">- Update to 6.1.3.1 fate#326624:
  * 6.1.3 RC1</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Use turkish spellcheck that is now provided by myspell-dictionaries</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Update to 6.1.3.2:
  * 6.1.3 Final</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900801">- Remove libreofficekit files that are not supposed to be
  installed when the feature is disabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540987200">- Honorably mention all the now dropped patches from 6.0 series that
  are merged by the 6.1 already and as such never entered TW:
  * bnc1088262.patch
  * bsc1088263.patch
  * bsc1095601.patch
  * bsc1095639.patch
  * bsc1098891.patch</changelog>
</package>
<package pkgid="84491ccea22c12bc7d026ee5ec8a8c7ce909b59f30d95ac93a59c6beee6a7831" name="libressl" arch="src">
  <version epoch="0" ver="2.8.0" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
  <changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
  <changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
  <changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
  <changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1493899200">- Update to new upstream release 2.5.4
  * Reverted a previous change that forced consistency between
    return value and error code when specifing a certificate
    verification callback, since this breaks the documented API.
  * Switched Linux getrandom() usage to non-blocking mode,
    continuing to use fallback mechanims if unsuccessful.
  * Fixed a bug caused by the return value being set early to
    signal successful DTLS cookie validation.</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict for split openssl packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494331200">- Add conflict between libressl and the main versioned packages too</changelog>
  <changelog author="jengelh@inai.de" date="1503576000">- Update to new upstream release 2.5.5
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.</changelog>
  <changelog author="jengelh@inai.de" date="1504267200">- Update to new upstream release 2.6.0
  * Added support for providing CRLs to libtls. Once a CRL is
    provided, we enable CRL checking for the full certificate
    chain.
  * Allow non-compliant clients using IP literal addresses with
    SNI to connect to a server using libtls.
  * Avoid a potential NULL pointer dereference in
    d2i_ECPrivateKey().
  * Added definitions for three OIDs used in EV certificates.
  * Plugged a memory leak in tls_ocsp_free.
  * Added tls_peer_cert_chain_pem, tls_cert_hash, and
    tls_hex_string to libtls, useful in private certificate
    validation callbacks.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Added tls_keypair_clear_key for clearing key material.
  * Removed inconsistent IPv6 handling from
    BIO_get_accept_socket, simplified BIO_get_host_ip and
    BIO_accept.
  * Fixed the openssl(1) ca command so that is generates
    certificates with RFC 5280-conformant time.
  * Added ASN1_TIME_set_tm to set an asn1 from a struct tm *.
  * Added SSL{,_CTX}_set_{min,max}_proto_version() functions.
  * Added HKDF (HMAC Key Derivation Function) from BoringSSL
  * Providea a tls_unload_file() function that frees the memory
    returned from a tls_load_file() call, ensuring that it the
    contents become inaccessible. This is specifically needed on
    platforms where the library allocators may be different from
    the application allocator.
  * Perform reference counting for tls_config. This allows
    tls_config_free() to be called as soon as it has been passed
    to the final tls_configure() call, simplifying lifetime
    tracking for the application.
  * Moved internal state of SSL and other structures to be
    opaque.
  * Dropped cipher suites with DSS authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update to new upstream release 2.6.2
  * Provide a useful error with libtls if there are no OCSP URLs
    in a peer certificate.
  * Keep track of which keypair is in use by a TLS context,
    fixing a bug where a TLS server with SNI would only return
    the OCSP staple for the default keypair.
- Update to new upstream release 2.6.1
  * Added tls_config_set_ecdhecurves() to libtls, which allows
    the names of the eliptical curves that may be used during
    client and server key exchange to be specified.
  * Removed support for DSS/DSA, since we removed the cipher
    suites a while back.
  * Removed NPN support. NPN was never standardised and the last
    draft expired in October 2012. ALPN was standardised.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS
    termintation.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Implemented the SSL_CTX_set_min_proto_version(3) API.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.</changelog>
  <changelog author="jengelh@inai.de" date="1510056000">- Update to new upstream release 2.6.3
  * Added support for providing CRLs to libtls - once a CRL is
    provided via tls_config_set_crl_file(3) or
    tls_config_set_crl_mem(3), CRL checking is enabled and
    required for the full certificate chain.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Relaxed SNI validation to allow non-RFC-compliant clients
    using literal IP addresses with SNI to connect to a
    libtls-based TLS server.
  * Added tls_peer_cert_chain_pem() to libtls, useful in private
    certificate validation callbacks such as those in relayd.
  * Added SSL{,_CTX}_set_{min,max}_proto_version(3) functions.
  * Imported HKDF (HMAC Key Derivation Function) from BoringSSL.
  * Dropped cipher suites using DSS authentication.
  * Removed support for DSS/DSA from libssl.
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.
  * Removed NPN support - NPN was never standardised and the last
    draft expired in October 2012.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS termination.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.
- Add des-fcrypt.diff [boo#1065363]</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Add extra-symver.diff</changelog>
  <changelog author="jengelh@inai.de" date="1513857600">- Update to new upstream release 2.6.4
  * Make tls_config_parse_protocols() work correctly when passed
    a NULL pointer for a protocol string.
  * Correct TLS extensions handling when no extensions are
    present.</changelog>
  <changelog author="jengelh@inai.de" date="1521806400">- Update to new upstream release 2.7.0
  * Added support for many OpenSSL 1.0.2 and 1.1 APIs.
  * Added support for automatic library initialization in
    libcrypto, libssl, and libtls.
  * Converted more packet handling methods to CBB, which improves
    resiliency when generating TLS messages.
  * Completed TLS extension handling rewrite, improving consistency
    of checks for malformed and duplicate extensions.
  * Rewrote ASN1_TYPE_ get,set _octetstring() using templated
    ASN.1. This removes the last remaining use of the old M_ASN1_
    macros (asn1_mac.h) from API that needs to continue to exist.
  * Added support for client-side session resumption in libtls.
  * A libtls client can specify a session file descriptor (a
    regular file with appropriate ownership and permissions) and
    libtls will manage reading and writing of session data across
    TLS handshakes.
  * Merged more DTLS support into the regular TLS code path.</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Update to new upstream release 2.7.1
  * Fixed a bug in int_x509_param_set_hosts, calling strlen() if
    name length provided is 0 to match the OpenSSL behaviour.
    [CVE-2018-8970, boo#1086778]</changelog>
  <changelog author="jengelh@inai.de" date="1522670400">- Update to new upstream release 2.7.2
  * Updated and added extensive new HISTORY sections to
    the API manuals.</changelog>
  <changelog author="jengelh@inai.de" date="1525694400">- Update to new upstream release 2.7.3
  * Removed incorrect NULL checks in DH_set0_key().
  * Limited tls_config_clear_keys() to only clear private keys.</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Update to new upstream release 2.8.0
  * Fixed a pair of 20+ year-old bugs in X509_NAME_add_entry.
  * Tighten up checks for various X509_VERIFY_PARAM functions,
    'poisoning' parameters so that an unverified certificate
    cannot be used if it fails verification.
  * Fixed a potential memory leak on failure in ASN1_item_digest.
  * Fixed a potential memory alignment crash in
    asn1_item_combine_free.
  * Removed unused SSL3_FLAGS_DELAY_CLIENT_FINISHED and
    SSL3_FLAGS_POP_BUFFER flags in write path, simplifying IO
    paths.
  * Removed SSL_OP_TLS_ROLLBACK_BUG buggy client workarounds.
  * Added const annotations to many existing APIs from OpenSSL,
    making interoperability easier for downstream applications.
  * Added a missing bounds check in c2i_ASN1_BIT_STRING.
  * Removed three remaining single DES cipher suites.
  * Fixed a potential leak/incorrect return value in DSA
    signature generation.
  * Added a blinding value when generating DSA and ECDSA
    signatures, in order to reduce the possibility of a
    side-channel attack leaking the private key.
  * Added ECC constant time scalar multiplication support.
  * Revised the implementation of RSASSA-PKCS1-v1_5 to match the
    specification in RFC 8017.
  * Changes from 2.7.4:
  * Avoid a timing side-channel leak when generating DSA and ECDSA
    signatures. [CVE-2018-12434, boo#1097779]
  * Reject excessively large primes in DH key generation.</changelog>
</package>
<package pkgid="9836c50d89bbd65a295a420d8bd198203029776cd81aa2e02d2e2dbceb443461" name="libressl" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
  <changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
  <changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
  <changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
  <changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1493899200">- Update to new upstream release 2.5.4
  * Reverted a previous change that forced consistency between
    return value and error code when specifing a certificate
    verification callback, since this breaks the documented API.
  * Switched Linux getrandom() usage to non-blocking mode,
    continuing to use fallback mechanims if unsuccessful.
  * Fixed a bug caused by the return value being set early to
    signal successful DTLS cookie validation.</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict for split openssl packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494331200">- Add conflict between libressl and the main versioned packages too</changelog>
  <changelog author="jengelh@inai.de" date="1503576000">- Update to new upstream release 2.5.5
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.</changelog>
  <changelog author="jengelh@inai.de" date="1504267200">- Update to new upstream release 2.6.0
  * Added support for providing CRLs to libtls. Once a CRL is
    provided, we enable CRL checking for the full certificate
    chain.
  * Allow non-compliant clients using IP literal addresses with
    SNI to connect to a server using libtls.
  * Avoid a potential NULL pointer dereference in
    d2i_ECPrivateKey().
  * Added definitions for three OIDs used in EV certificates.
  * Plugged a memory leak in tls_ocsp_free.
  * Added tls_peer_cert_chain_pem, tls_cert_hash, and
    tls_hex_string to libtls, useful in private certificate
    validation callbacks.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Added tls_keypair_clear_key for clearing key material.
  * Removed inconsistent IPv6 handling from
    BIO_get_accept_socket, simplified BIO_get_host_ip and
    BIO_accept.
  * Fixed the openssl(1) ca command so that is generates
    certificates with RFC 5280-conformant time.
  * Added ASN1_TIME_set_tm to set an asn1 from a struct tm *.
  * Added SSL{,_CTX}_set_{min,max}_proto_version() functions.
  * Added HKDF (HMAC Key Derivation Function) from BoringSSL
  * Providea a tls_unload_file() function that frees the memory
    returned from a tls_load_file() call, ensuring that it the
    contents become inaccessible. This is specifically needed on
    platforms where the library allocators may be different from
    the application allocator.
  * Perform reference counting for tls_config. This allows
    tls_config_free() to be called as soon as it has been passed
    to the final tls_configure() call, simplifying lifetime
    tracking for the application.
  * Moved internal state of SSL and other structures to be
    opaque.
  * Dropped cipher suites with DSS authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update to new upstream release 2.6.2
  * Provide a useful error with libtls if there are no OCSP URLs
    in a peer certificate.
  * Keep track of which keypair is in use by a TLS context,
    fixing a bug where a TLS server with SNI would only return
    the OCSP staple for the default keypair.
- Update to new upstream release 2.6.1
  * Added tls_config_set_ecdhecurves() to libtls, which allows
    the names of the eliptical curves that may be used during
    client and server key exchange to be specified.
  * Removed support for DSS/DSA, since we removed the cipher
    suites a while back.
  * Removed NPN support. NPN was never standardised and the last
    draft expired in October 2012. ALPN was standardised.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS
    termintation.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Implemented the SSL_CTX_set_min_proto_version(3) API.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.</changelog>
  <changelog author="jengelh@inai.de" date="1510056000">- Update to new upstream release 2.6.3
  * Added support for providing CRLs to libtls - once a CRL is
    provided via tls_config_set_crl_file(3) or
    tls_config_set_crl_mem(3), CRL checking is enabled and
    required for the full certificate chain.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Relaxed SNI validation to allow non-RFC-compliant clients
    using literal IP addresses with SNI to connect to a
    libtls-based TLS server.
  * Added tls_peer_cert_chain_pem() to libtls, useful in private
    certificate validation callbacks such as those in relayd.
  * Added SSL{,_CTX}_set_{min,max}_proto_version(3) functions.
  * Imported HKDF (HMAC Key Derivation Function) from BoringSSL.
  * Dropped cipher suites using DSS authentication.
  * Removed support for DSS/DSA from libssl.
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.
  * Removed NPN support - NPN was never standardised and the last
    draft expired in October 2012.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS termination.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.
- Add des-fcrypt.diff [boo#1065363]</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Add extra-symver.diff</changelog>
  <changelog author="jengelh@inai.de" date="1513857600">- Update to new upstream release 2.6.4
  * Make tls_config_parse_protocols() work correctly when passed
    a NULL pointer for a protocol string.
  * Correct TLS extensions handling when no extensions are
    present.</changelog>
  <changelog author="jengelh@inai.de" date="1521806400">- Update to new upstream release 2.7.0
  * Added support for many OpenSSL 1.0.2 and 1.1 APIs.
  * Added support for automatic library initialization in
    libcrypto, libssl, and libtls.
  * Converted more packet handling methods to CBB, which improves
    resiliency when generating TLS messages.
  * Completed TLS extension handling rewrite, improving consistency
    of checks for malformed and duplicate extensions.
  * Rewrote ASN1_TYPE_ get,set _octetstring() using templated
    ASN.1. This removes the last remaining use of the old M_ASN1_
    macros (asn1_mac.h) from API that needs to continue to exist.
  * Added support for client-side session resumption in libtls.
  * A libtls client can specify a session file descriptor (a
    regular file with appropriate ownership and permissions) and
    libtls will manage reading and writing of session data across
    TLS handshakes.
  * Merged more DTLS support into the regular TLS code path.</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Update to new upstream release 2.7.1
  * Fixed a bug in int_x509_param_set_hosts, calling strlen() if
    name length provided is 0 to match the OpenSSL behaviour.
    [CVE-2018-8970, boo#1086778]</changelog>
  <changelog author="jengelh@inai.de" date="1522670400">- Update to new upstream release 2.7.2
  * Updated and added extensive new HISTORY sections to
    the API manuals.</changelog>
  <changelog author="jengelh@inai.de" date="1525694400">- Update to new upstream release 2.7.3
  * Removed incorrect NULL checks in DH_set0_key().
  * Limited tls_config_clear_keys() to only clear private keys.</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Update to new upstream release 2.8.0
  * Fixed a pair of 20+ year-old bugs in X509_NAME_add_entry.
  * Tighten up checks for various X509_VERIFY_PARAM functions,
    'poisoning' parameters so that an unverified certificate
    cannot be used if it fails verification.
  * Fixed a potential memory leak on failure in ASN1_item_digest.
  * Fixed a potential memory alignment crash in
    asn1_item_combine_free.
  * Removed unused SSL3_FLAGS_DELAY_CLIENT_FINISHED and
    SSL3_FLAGS_POP_BUFFER flags in write path, simplifying IO
    paths.
  * Removed SSL_OP_TLS_ROLLBACK_BUG buggy client workarounds.
  * Added const annotations to many existing APIs from OpenSSL,
    making interoperability easier for downstream applications.
  * Added a missing bounds check in c2i_ASN1_BIT_STRING.
  * Removed three remaining single DES cipher suites.
  * Fixed a potential leak/incorrect return value in DSA
    signature generation.
  * Added a blinding value when generating DSA and ECDSA
    signatures, in order to reduce the possibility of a
    side-channel attack leaking the private key.
  * Added ECC constant time scalar multiplication support.
  * Revised the implementation of RSASSA-PKCS1-v1_5 to match the
    specification in RFC 8017.
  * Changes from 2.7.4:
  * Avoid a timing side-channel leak when generating DSA and ECDSA
    signatures. [CVE-2018-12434, boo#1097779]
  * Reject excessively large primes in DH key generation.</changelog>
</package>
<package pkgid="3346cb1b71566d2860f19e68c9dac7b5dcc2b74cab88f19f9b3a94b42802634b" name="libressl-devel" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
  <changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
  <changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
  <changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
  <changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1493899200">- Update to new upstream release 2.5.4
  * Reverted a previous change that forced consistency between
    return value and error code when specifing a certificate
    verification callback, since this breaks the documented API.
  * Switched Linux getrandom() usage to non-blocking mode,
    continuing to use fallback mechanims if unsuccessful.
  * Fixed a bug caused by the return value being set early to
    signal successful DTLS cookie validation.</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict for split openssl packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494331200">- Add conflict between libressl and the main versioned packages too</changelog>
  <changelog author="jengelh@inai.de" date="1503576000">- Update to new upstream release 2.5.5
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.</changelog>
  <changelog author="jengelh@inai.de" date="1504267200">- Update to new upstream release 2.6.0
  * Added support for providing CRLs to libtls. Once a CRL is
    provided, we enable CRL checking for the full certificate
    chain.
  * Allow non-compliant clients using IP literal addresses with
    SNI to connect to a server using libtls.
  * Avoid a potential NULL pointer dereference in
    d2i_ECPrivateKey().
  * Added definitions for three OIDs used in EV certificates.
  * Plugged a memory leak in tls_ocsp_free.
  * Added tls_peer_cert_chain_pem, tls_cert_hash, and
    tls_hex_string to libtls, useful in private certificate
    validation callbacks.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Added tls_keypair_clear_key for clearing key material.
  * Removed inconsistent IPv6 handling from
    BIO_get_accept_socket, simplified BIO_get_host_ip and
    BIO_accept.
  * Fixed the openssl(1) ca command so that is generates
    certificates with RFC 5280-conformant time.
  * Added ASN1_TIME_set_tm to set an asn1 from a struct tm *.
  * Added SSL{,_CTX}_set_{min,max}_proto_version() functions.
  * Added HKDF (HMAC Key Derivation Function) from BoringSSL
  * Providea a tls_unload_file() function that frees the memory
    returned from a tls_load_file() call, ensuring that it the
    contents become inaccessible. This is specifically needed on
    platforms where the library allocators may be different from
    the application allocator.
  * Perform reference counting for tls_config. This allows
    tls_config_free() to be called as soon as it has been passed
    to the final tls_configure() call, simplifying lifetime
    tracking for the application.
  * Moved internal state of SSL and other structures to be
    opaque.
  * Dropped cipher suites with DSS authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update to new upstream release 2.6.2
  * Provide a useful error with libtls if there are no OCSP URLs
    in a peer certificate.
  * Keep track of which keypair is in use by a TLS context,
    fixing a bug where a TLS server with SNI would only return
    the OCSP staple for the default keypair.
- Update to new upstream release 2.6.1
  * Added tls_config_set_ecdhecurves() to libtls, which allows
    the names of the eliptical curves that may be used during
    client and server key exchange to be specified.
  * Removed support for DSS/DSA, since we removed the cipher
    suites a while back.
  * Removed NPN support. NPN was never standardised and the last
    draft expired in October 2012. ALPN was standardised.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS
    termintation.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Implemented the SSL_CTX_set_min_proto_version(3) API.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.</changelog>
  <changelog author="jengelh@inai.de" date="1510056000">- Update to new upstream release 2.6.3
  * Added support for providing CRLs to libtls - once a CRL is
    provided via tls_config_set_crl_file(3) or
    tls_config_set_crl_mem(3), CRL checking is enabled and
    required for the full certificate chain.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Relaxed SNI validation to allow non-RFC-compliant clients
    using literal IP addresses with SNI to connect to a
    libtls-based TLS server.
  * Added tls_peer_cert_chain_pem() to libtls, useful in private
    certificate validation callbacks such as those in relayd.
  * Added SSL{,_CTX}_set_{min,max}_proto_version(3) functions.
  * Imported HKDF (HMAC Key Derivation Function) from BoringSSL.
  * Dropped cipher suites using DSS authentication.
  * Removed support for DSS/DSA from libssl.
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.
  * Removed NPN support - NPN was never standardised and the last
    draft expired in October 2012.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS termination.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.
- Add des-fcrypt.diff [boo#1065363]</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Add extra-symver.diff</changelog>
  <changelog author="jengelh@inai.de" date="1513857600">- Update to new upstream release 2.6.4
  * Make tls_config_parse_protocols() work correctly when passed
    a NULL pointer for a protocol string.
  * Correct TLS extensions handling when no extensions are
    present.</changelog>
  <changelog author="jengelh@inai.de" date="1521806400">- Update to new upstream release 2.7.0
  * Added support for many OpenSSL 1.0.2 and 1.1 APIs.
  * Added support for automatic library initialization in
    libcrypto, libssl, and libtls.
  * Converted more packet handling methods to CBB, which improves
    resiliency when generating TLS messages.
  * Completed TLS extension handling rewrite, improving consistency
    of checks for malformed and duplicate extensions.
  * Rewrote ASN1_TYPE_ get,set _octetstring() using templated
    ASN.1. This removes the last remaining use of the old M_ASN1_
    macros (asn1_mac.h) from API that needs to continue to exist.
  * Added support for client-side session resumption in libtls.
  * A libtls client can specify a session file descriptor (a
    regular file with appropriate ownership and permissions) and
    libtls will manage reading and writing of session data across
    TLS handshakes.
  * Merged more DTLS support into the regular TLS code path.</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Update to new upstream release 2.7.1
  * Fixed a bug in int_x509_param_set_hosts, calling strlen() if
    name length provided is 0 to match the OpenSSL behaviour.
    [CVE-2018-8970, boo#1086778]</changelog>
  <changelog author="jengelh@inai.de" date="1522670400">- Update to new upstream release 2.7.2
  * Updated and added extensive new HISTORY sections to
    the API manuals.</changelog>
  <changelog author="jengelh@inai.de" date="1525694400">- Update to new upstream release 2.7.3
  * Removed incorrect NULL checks in DH_set0_key().
  * Limited tls_config_clear_keys() to only clear private keys.</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Update to new upstream release 2.8.0
  * Fixed a pair of 20+ year-old bugs in X509_NAME_add_entry.
  * Tighten up checks for various X509_VERIFY_PARAM functions,
    'poisoning' parameters so that an unverified certificate
    cannot be used if it fails verification.
  * Fixed a potential memory leak on failure in ASN1_item_digest.
  * Fixed a potential memory alignment crash in
    asn1_item_combine_free.
  * Removed unused SSL3_FLAGS_DELAY_CLIENT_FINISHED and
    SSL3_FLAGS_POP_BUFFER flags in write path, simplifying IO
    paths.
  * Removed SSL_OP_TLS_ROLLBACK_BUG buggy client workarounds.
  * Added const annotations to many existing APIs from OpenSSL,
    making interoperability easier for downstream applications.
  * Added a missing bounds check in c2i_ASN1_BIT_STRING.
  * Removed three remaining single DES cipher suites.
  * Fixed a potential leak/incorrect return value in DSA
    signature generation.
  * Added a blinding value when generating DSA and ECDSA
    signatures, in order to reduce the possibility of a
    side-channel attack leaking the private key.
  * Added ECC constant time scalar multiplication support.
  * Revised the implementation of RSASSA-PKCS1-v1_5 to match the
    specification in RFC 8017.
  * Changes from 2.7.4:
  * Avoid a timing side-channel leak when generating DSA and ECDSA
    signatures. [CVE-2018-12434, boo#1097779]
  * Reject excessively large primes in DH key generation.</changelog>
</package>
<package pkgid="a26f7899dab0cb5ce512dafa6b7030a56380e7ce685302b0d7494843c82306da" name="libressl-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
  <changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
  <changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
  <changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
  <changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1493899200">- Update to new upstream release 2.5.4
  * Reverted a previous change that forced consistency between
    return value and error code when specifing a certificate
    verification callback, since this breaks the documented API.
  * Switched Linux getrandom() usage to non-blocking mode,
    continuing to use fallback mechanims if unsuccessful.
  * Fixed a bug caused by the return value being set early to
    signal successful DTLS cookie validation.</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict for split openssl packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494331200">- Add conflict between libressl and the main versioned packages too</changelog>
  <changelog author="jengelh@inai.de" date="1503576000">- Update to new upstream release 2.5.5
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.</changelog>
  <changelog author="jengelh@inai.de" date="1504267200">- Update to new upstream release 2.6.0
  * Added support for providing CRLs to libtls. Once a CRL is
    provided, we enable CRL checking for the full certificate
    chain.
  * Allow non-compliant clients using IP literal addresses with
    SNI to connect to a server using libtls.
  * Avoid a potential NULL pointer dereference in
    d2i_ECPrivateKey().
  * Added definitions for three OIDs used in EV certificates.
  * Plugged a memory leak in tls_ocsp_free.
  * Added tls_peer_cert_chain_pem, tls_cert_hash, and
    tls_hex_string to libtls, useful in private certificate
    validation callbacks.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Added tls_keypair_clear_key for clearing key material.
  * Removed inconsistent IPv6 handling from
    BIO_get_accept_socket, simplified BIO_get_host_ip and
    BIO_accept.
  * Fixed the openssl(1) ca command so that is generates
    certificates with RFC 5280-conformant time.
  * Added ASN1_TIME_set_tm to set an asn1 from a struct tm *.
  * Added SSL{,_CTX}_set_{min,max}_proto_version() functions.
  * Added HKDF (HMAC Key Derivation Function) from BoringSSL
  * Providea a tls_unload_file() function that frees the memory
    returned from a tls_load_file() call, ensuring that it the
    contents become inaccessible. This is specifically needed on
    platforms where the library allocators may be different from
    the application allocator.
  * Perform reference counting for tls_config. This allows
    tls_config_free() to be called as soon as it has been passed
    to the final tls_configure() call, simplifying lifetime
    tracking for the application.
  * Moved internal state of SSL and other structures to be
    opaque.
  * Dropped cipher suites with DSS authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update to new upstream release 2.6.2
  * Provide a useful error with libtls if there are no OCSP URLs
    in a peer certificate.
  * Keep track of which keypair is in use by a TLS context,
    fixing a bug where a TLS server with SNI would only return
    the OCSP staple for the default keypair.
- Update to new upstream release 2.6.1
  * Added tls_config_set_ecdhecurves() to libtls, which allows
    the names of the eliptical curves that may be used during
    client and server key exchange to be specified.
  * Removed support for DSS/DSA, since we removed the cipher
    suites a while back.
  * Removed NPN support. NPN was never standardised and the last
    draft expired in October 2012. ALPN was standardised.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS
    termintation.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Implemented the SSL_CTX_set_min_proto_version(3) API.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.</changelog>
  <changelog author="jengelh@inai.de" date="1510056000">- Update to new upstream release 2.6.3
  * Added support for providing CRLs to libtls - once a CRL is
    provided via tls_config_set_crl_file(3) or
    tls_config_set_crl_mem(3), CRL checking is enabled and
    required for the full certificate chain.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Relaxed SNI validation to allow non-RFC-compliant clients
    using literal IP addresses with SNI to connect to a
    libtls-based TLS server.
  * Added tls_peer_cert_chain_pem() to libtls, useful in private
    certificate validation callbacks such as those in relayd.
  * Added SSL{,_CTX}_set_{min,max}_proto_version(3) functions.
  * Imported HKDF (HMAC Key Derivation Function) from BoringSSL.
  * Dropped cipher suites using DSS authentication.
  * Removed support for DSS/DSA from libssl.
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.
  * Removed NPN support - NPN was never standardised and the last
    draft expired in October 2012.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS termination.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.
- Add des-fcrypt.diff [boo#1065363]</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Add extra-symver.diff</changelog>
  <changelog author="jengelh@inai.de" date="1513857600">- Update to new upstream release 2.6.4
  * Make tls_config_parse_protocols() work correctly when passed
    a NULL pointer for a protocol string.
  * Correct TLS extensions handling when no extensions are
    present.</changelog>
  <changelog author="jengelh@inai.de" date="1521806400">- Update to new upstream release 2.7.0
  * Added support for many OpenSSL 1.0.2 and 1.1 APIs.
  * Added support for automatic library initialization in
    libcrypto, libssl, and libtls.
  * Converted more packet handling methods to CBB, which improves
    resiliency when generating TLS messages.
  * Completed TLS extension handling rewrite, improving consistency
    of checks for malformed and duplicate extensions.
  * Rewrote ASN1_TYPE_ get,set _octetstring() using templated
    ASN.1. This removes the last remaining use of the old M_ASN1_
    macros (asn1_mac.h) from API that needs to continue to exist.
  * Added support for client-side session resumption in libtls.
  * A libtls client can specify a session file descriptor (a
    regular file with appropriate ownership and permissions) and
    libtls will manage reading and writing of session data across
    TLS handshakes.
  * Merged more DTLS support into the regular TLS code path.</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Update to new upstream release 2.7.1
  * Fixed a bug in int_x509_param_set_hosts, calling strlen() if
    name length provided is 0 to match the OpenSSL behaviour.
    [CVE-2018-8970, boo#1086778]</changelog>
  <changelog author="jengelh@inai.de" date="1522670400">- Update to new upstream release 2.7.2
  * Updated and added extensive new HISTORY sections to
    the API manuals.</changelog>
  <changelog author="jengelh@inai.de" date="1525694400">- Update to new upstream release 2.7.3
  * Removed incorrect NULL checks in DH_set0_key().
  * Limited tls_config_clear_keys() to only clear private keys.</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Update to new upstream release 2.8.0
  * Fixed a pair of 20+ year-old bugs in X509_NAME_add_entry.
  * Tighten up checks for various X509_VERIFY_PARAM functions,
    'poisoning' parameters so that an unverified certificate
    cannot be used if it fails verification.
  * Fixed a potential memory leak on failure in ASN1_item_digest.
  * Fixed a potential memory alignment crash in
    asn1_item_combine_free.
  * Removed unused SSL3_FLAGS_DELAY_CLIENT_FINISHED and
    SSL3_FLAGS_POP_BUFFER flags in write path, simplifying IO
    paths.
  * Removed SSL_OP_TLS_ROLLBACK_BUG buggy client workarounds.
  * Added const annotations to many existing APIs from OpenSSL,
    making interoperability easier for downstream applications.
  * Added a missing bounds check in c2i_ASN1_BIT_STRING.
  * Removed three remaining single DES cipher suites.
  * Fixed a potential leak/incorrect return value in DSA
    signature generation.
  * Added a blinding value when generating DSA and ECDSA
    signatures, in order to reduce the possibility of a
    side-channel attack leaking the private key.
  * Added ECC constant time scalar multiplication support.
  * Revised the implementation of RSASSA-PKCS1-v1_5 to match the
    specification in RFC 8017.
  * Changes from 2.7.4:
  * Avoid a timing side-channel leak when generating DSA and ECDSA
    signatures. [CVE-2018-12434, boo#1097779]
  * Reject excessively large primes in DH key generation.</changelog>
</package>
<package pkgid="75670f7793c8a97c7af9c8798537850807f9707f469ac5cc0031483de25121e2" name="libressl-devel-doc" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
  <changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
  <changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
  <changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
  <changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1493899200">- Update to new upstream release 2.5.4
  * Reverted a previous change that forced consistency between
    return value and error code when specifing a certificate
    verification callback, since this breaks the documented API.
  * Switched Linux getrandom() usage to non-blocking mode,
    continuing to use fallback mechanims if unsuccessful.
  * Fixed a bug caused by the return value being set early to
    signal successful DTLS cookie validation.</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict for split openssl packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494331200">- Add conflict between libressl and the main versioned packages too</changelog>
  <changelog author="jengelh@inai.de" date="1503576000">- Update to new upstream release 2.5.5
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.</changelog>
  <changelog author="jengelh@inai.de" date="1504267200">- Update to new upstream release 2.6.0
  * Added support for providing CRLs to libtls. Once a CRL is
    provided, we enable CRL checking for the full certificate
    chain.
  * Allow non-compliant clients using IP literal addresses with
    SNI to connect to a server using libtls.
  * Avoid a potential NULL pointer dereference in
    d2i_ECPrivateKey().
  * Added definitions for three OIDs used in EV certificates.
  * Plugged a memory leak in tls_ocsp_free.
  * Added tls_peer_cert_chain_pem, tls_cert_hash, and
    tls_hex_string to libtls, useful in private certificate
    validation callbacks.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Added tls_keypair_clear_key for clearing key material.
  * Removed inconsistent IPv6 handling from
    BIO_get_accept_socket, simplified BIO_get_host_ip and
    BIO_accept.
  * Fixed the openssl(1) ca command so that is generates
    certificates with RFC 5280-conformant time.
  * Added ASN1_TIME_set_tm to set an asn1 from a struct tm *.
  * Added SSL{,_CTX}_set_{min,max}_proto_version() functions.
  * Added HKDF (HMAC Key Derivation Function) from BoringSSL
  * Providea a tls_unload_file() function that frees the memory
    returned from a tls_load_file() call, ensuring that it the
    contents become inaccessible. This is specifically needed on
    platforms where the library allocators may be different from
    the application allocator.
  * Perform reference counting for tls_config. This allows
    tls_config_free() to be called as soon as it has been passed
    to the final tls_configure() call, simplifying lifetime
    tracking for the application.
  * Moved internal state of SSL and other structures to be
    opaque.
  * Dropped cipher suites with DSS authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update to new upstream release 2.6.2
  * Provide a useful error with libtls if there are no OCSP URLs
    in a peer certificate.
  * Keep track of which keypair is in use by a TLS context,
    fixing a bug where a TLS server with SNI would only return
    the OCSP staple for the default keypair.
- Update to new upstream release 2.6.1
  * Added tls_config_set_ecdhecurves() to libtls, which allows
    the names of the eliptical curves that may be used during
    client and server key exchange to be specified.
  * Removed support for DSS/DSA, since we removed the cipher
    suites a while back.
  * Removed NPN support. NPN was never standardised and the last
    draft expired in October 2012. ALPN was standardised.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS
    termintation.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Implemented the SSL_CTX_set_min_proto_version(3) API.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.</changelog>
  <changelog author="jengelh@inai.de" date="1510056000">- Update to new upstream release 2.6.3
  * Added support for providing CRLs to libtls - once a CRL is
    provided via tls_config_set_crl_file(3) or
    tls_config_set_crl_mem(3), CRL checking is enabled and
    required for the full certificate chain.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Relaxed SNI validation to allow non-RFC-compliant clients
    using literal IP addresses with SNI to connect to a
    libtls-based TLS server.
  * Added tls_peer_cert_chain_pem() to libtls, useful in private
    certificate validation callbacks such as those in relayd.
  * Added SSL{,_CTX}_set_{min,max}_proto_version(3) functions.
  * Imported HKDF (HMAC Key Derivation Function) from BoringSSL.
  * Dropped cipher suites using DSS authentication.
  * Removed support for DSS/DSA from libssl.
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.
  * Removed NPN support - NPN was never standardised and the last
    draft expired in October 2012.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS termination.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.
- Add des-fcrypt.diff [boo#1065363]</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Add extra-symver.diff</changelog>
  <changelog author="jengelh@inai.de" date="1513857600">- Update to new upstream release 2.6.4
  * Make tls_config_parse_protocols() work correctly when passed
    a NULL pointer for a protocol string.
  * Correct TLS extensions handling when no extensions are
    present.</changelog>
  <changelog author="jengelh@inai.de" date="1521806400">- Update to new upstream release 2.7.0
  * Added support for many OpenSSL 1.0.2 and 1.1 APIs.
  * Added support for automatic library initialization in
    libcrypto, libssl, and libtls.
  * Converted more packet handling methods to CBB, which improves
    resiliency when generating TLS messages.
  * Completed TLS extension handling rewrite, improving consistency
    of checks for malformed and duplicate extensions.
  * Rewrote ASN1_TYPE_ get,set _octetstring() using templated
    ASN.1. This removes the last remaining use of the old M_ASN1_
    macros (asn1_mac.h) from API that needs to continue to exist.
  * Added support for client-side session resumption in libtls.
  * A libtls client can specify a session file descriptor (a
    regular file with appropriate ownership and permissions) and
    libtls will manage reading and writing of session data across
    TLS handshakes.
  * Merged more DTLS support into the regular TLS code path.</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Update to new upstream release 2.7.1
  * Fixed a bug in int_x509_param_set_hosts, calling strlen() if
    name length provided is 0 to match the OpenSSL behaviour.
    [CVE-2018-8970, boo#1086778]</changelog>
  <changelog author="jengelh@inai.de" date="1522670400">- Update to new upstream release 2.7.2
  * Updated and added extensive new HISTORY sections to
    the API manuals.</changelog>
  <changelog author="jengelh@inai.de" date="1525694400">- Update to new upstream release 2.7.3
  * Removed incorrect NULL checks in DH_set0_key().
  * Limited tls_config_clear_keys() to only clear private keys.</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Update to new upstream release 2.8.0
  * Fixed a pair of 20+ year-old bugs in X509_NAME_add_entry.
  * Tighten up checks for various X509_VERIFY_PARAM functions,
    'poisoning' parameters so that an unverified certificate
    cannot be used if it fails verification.
  * Fixed a potential memory leak on failure in ASN1_item_digest.
  * Fixed a potential memory alignment crash in
    asn1_item_combine_free.
  * Removed unused SSL3_FLAGS_DELAY_CLIENT_FINISHED and
    SSL3_FLAGS_POP_BUFFER flags in write path, simplifying IO
    paths.
  * Removed SSL_OP_TLS_ROLLBACK_BUG buggy client workarounds.
  * Added const annotations to many existing APIs from OpenSSL,
    making interoperability easier for downstream applications.
  * Added a missing bounds check in c2i_ASN1_BIT_STRING.
  * Removed three remaining single DES cipher suites.
  * Fixed a potential leak/incorrect return value in DSA
    signature generation.
  * Added a blinding value when generating DSA and ECDSA
    signatures, in order to reduce the possibility of a
    side-channel attack leaking the private key.
  * Added ECC constant time scalar multiplication support.
  * Revised the implementation of RSASSA-PKCS1-v1_5 to match the
    specification in RFC 8017.
  * Changes from 2.7.4:
  * Avoid a timing side-channel leak when generating DSA and ECDSA
    signatures. [CVE-2018-12434, boo#1097779]
  * Reject excessively large primes in DH key generation.</changelog>
</package>
<package pkgid="671a3660b041ec7f5e8ea4c07e9800bd7c2da4109dbde88786dc07556eb7884e" name="libsamba-credentials-devel" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="be25925a2861f73e5ba0ac9a016b349f4c16ff513e70fe77ec82782709d710cf" name="libsamba-credentials-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="e12d46b1bd9f379ee5eee60e21b946d2e2192a964da2ec40d66c58d857b871a8" name="libsamba-credentials-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="aee92669855df6f083a546cb957e15c321d5c9b660fe4b146b0ed6fc20a47242" name="libsamba-credentials0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="3b2e5c874554493e622860806328a0671af61576dcd24a9faa27d88b2203aac9" name="libsamba-credentials0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="c38f3deec8a626122d11d668a11f588f0c551f72bc0165beea78859d9ac1d362" name="libsamba-credentials0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="8ddae0a3f3f21f75c54d43b109e6d52b09c64ed98b2608dab9b6d1cc079afc51" name="libsamba-credentials0" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="a5676b52233aef9e7edd84be4e0f61507b011c4883aba867a0505ae5cf119574" name="libsamba-credentials0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="24aa5bccfadd34a24bb0e161c0966eb05530b92aed400a5a465f5eb174840a69" name="libsamba-credentials0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="cf4e77bb0b9ee4e91e18f25d9ad2609053d28ad16c54f476cd49f4a55fdd96c3" name="libsamba-errors-devel" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="13fd1d0234fc80b47ff1e384cf6d63380ea52f4cf8be935c7713dd5b6cb9a8f5" name="libsamba-errors-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="9dc373c91ac3fd1f3400db9949e5dff3c56a67e5b76de03c77b7b0038b5f1530" name="libsamba-errors-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="ef6c1ccc7fbb8aa245b5817953793a5ebb2d9fd7bf8d97464ea84a84c8a39733" name="libsamba-errors0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="07a5e9478de1399447682efb5f4ad718d86e1b85b5558ce3506c9a94f0b1212b" name="libsamba-errors0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="fc4b307061ed62a87a3750e0745c25f1a258ce8b774e23b7aaad4936c8b2e72f" name="libsamba-errors0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="5becbc028c682ce30c3ae21743657fa857d7551f29f548d7caff5c13c86ab016" name="libsamba-errors0" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="ae53c02207f133dd2bda0de70a71a1854fbfe46f4944a19fecc634d01a6598a5" name="libsamba-errors0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="38106aae9d8f3cf53fb8e0170b3f38675da83306034dafb951e1ef9c4b8fbe01" name="libsamba-errors0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="68377e5e74140e386bdc9a5686c2bb1f2e9eb72c8046065470e28846c5d34caf" name="libsamba-hostconfig-devel" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="3ff4b46b2c559d3c1249bc2edf33a08d352ff3ce8921432895bf5c6164d7ff38" name="libsamba-hostconfig-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="05a78be4e9c5a46c70daf056bd83d0968a7fb0d9e7eba7652838983f1f9f43cf" name="libsamba-hostconfig-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="106bbe2595fb912829af49c9cca858ce4ff243b54a6f6772cbfe06b570dc8f40" name="libsamba-hostconfig0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="ac4545ff25e17823dbddd87ba4b7424a0c513942a165bd9777344925815e3347" name="libsamba-hostconfig0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="683cff05abfa75968a1a3b4b306d48a54a58c3b086ef551846c515d52219f300" name="libsamba-hostconfig0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="c97acf8128b32e6a70de3af33078b6bedf594829e521942fe0244ff3f4397ed0" name="libsamba-hostconfig0" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="fcad73a44c4c8683403282d8c579ccd533521a43cc95cc325e2d57fae81b82b2" name="libsamba-hostconfig0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="17f0de5ad823009a9b449bc6e77c8d8cb9c851e0b1d76b128d6770a7190aa39b" name="libsamba-hostconfig0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="08c3a33f2a2886b049eef41b8e92505fb51f73d64a72269c03a48933693b9539" name="libsamba-passdb-devel" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="7a19a49d024021f6203307661e13430a65393dfa00cd97c6361a79581a479dc3" name="libsamba-passdb-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="5d1db4821b44e6599ea10dbfc6acc9d02aadb9a563ab18df94fde964b2a859ce" name="libsamba-passdb-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="7725b02582f533d1e3e60437dc60f48e15632c56a14f093ff9b2b056beb14171" name="libsamba-passdb0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="bd37ee43cffcf3a93e74baca5007850e0d9a5c7186b411b7bba30a5ee430596c" name="libsamba-passdb0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="78c21f292ddd7e38b89068f83e6329082fa8e6e0d372e19bc3bfd8d6527896d2" name="libsamba-passdb0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="c72f18de0a9aac80763d6fa7068cbdd495c32e2e8490c41bc2be7ac060c95cd4" name="libsamba-passdb0" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="bfcb80daf768bac3e3ce9f21d2999480aba2380481d2b17966f4d7b4045ad6c0" name="libsamba-passdb0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="65f6d8d01b94b66e1baa113b9c6a1456aa51e856ebb1cc3217bb5c27f8b9d4b6" name="libsamba-passdb0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="264c7f857dc13d4ae861bf6d1df714b068397cb1e24261672ebd7e497158c4b9" name="libsamba-policy-devel" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="113c3ebafacc3dba6ca9b044c9232a4409507c3b4a7167d78c0347976d6841dd" name="libsamba-policy-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="5d97d847b6298321a0bb9e57481834b54a426098b150535dad0a9c3785e3adcb" name="libsamba-policy-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="7169d5bd21eea7ff0573c866b39e8dcfb3c86eaed6151da331c4c66c77cf4c87" name="libsamba-policy0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="2a1f0f8c5c4ff4bd07cd6635cc83776d2d119af6c7431bf493b07ee516e9368e" name="libsamba-policy0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="46b215d70d51b08559006328671c6b96b39fba6e9ad749e5c6a2e9e51d5b5a7b" name="libsamba-policy0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="a5096aebad21ec72ab948b78df29aa807ce68a5546d1ff801e14a54ef9e5e24f" name="libsamba-policy0" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="adce8048b99fec9fffc3c7f96dbebfa7a47858348c3d5c08d3fc932fa393bdde" name="libsamba-policy0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="0a2e8367c56c8a82f76ac56a6118e5df767bac1c7221b6a27d4717cee9c465db" name="libsamba-policy0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="a39e967c92a9db251d3278640c4385a56a61310e60d84c7299d9b529b295d0a7" name="libsamba-util-devel" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="89b73fc7afc476abd6bc9cdeab3ce7e563ec05669baad1ff2339752f87ddc6d2" name="libsamba-util-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="dddceaf8cca41d20c920eb046e5969be1c2bfc5c2cf645419e8d606b39d46710" name="libsamba-util-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="109d52df7bf41a232e96e2fa7d2e5358364c195c388d38ec54065c7502656338" name="libsamba-util0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="4a5d9e2b5a0e650cf8889e470655c2c5f80d2139c464fb42577da33d580cfa82" name="libsamba-util0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="db85e9b930c056b45686c441cc5700ef301708b2286360415bdd24104796b3cc" name="libsamba-util0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="f72a7d06030f6fd88c83872703ef653157b2aa511d484b8aab0da82ea6dc2526" name="libsamba-util0" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="9c45cdb6e17c7b3bd78458a8e75a019b76a97fe23ac9f4ba972425e456fc53e4" name="libsamba-util0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="104a315c518aafecd67a866fe7d247ffab579d301a79631a93be4444249a5c70" name="libsamba-util0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="f6e447ade5c87e65e77347e45474799494498e7a7b4f2a4c17c492461a909f0b" name="libsamdb-devel" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="ea26ce91646746a21c76b6422ab41e49d611639017337aebea79052b6e35cd75" name="libsamdb-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="6562e3d2f7795c344a36d06d25c0d7c3f137a13d611869d8b48b931316624939" name="libsamdb-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="c6e8905122482f5f668cfeb6d6d5de8e5acdfac2ed1a94636d2ce5444c2f8a18" name="libsamdb0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="efa57907b8adfefe6e5e833de0f81299818944ec799803f8289651f33737115e" name="libsamdb0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="4a846aab58738276cd991a2996293c1620792708c20a83d7e945908d3f7e15db" name="libsamdb0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="ea3217a82bceff66f8edf9f8b301b74f2c73ba9b5234c2bee038dbb258aba06e" name="libsamdb0" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="8085216a9ea5647040da52421adda59648de66c2ee6483774a656926392005ea" name="libsamdb0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="8ee22bcc272d600c3f64cb3dae945bbfce36e0d809021ddeeaa5cbf8d3922a55" name="libsamdb0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="41d3d696b8dcfd0a36ae452c5b1999367e57b109252a4447275fd6f16293bc0f" name="libshadowsocks-libev2" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="lp150.2.3.1"/>
  <changelog author="i@marguerite.su" date="1433505600">- update version 2.2.1
  * fix an issue of UDF relay.
- changes in 2.2.0
  * add TPROXY support for redir mode.</changelog>
  <changelog author="i@marguerite.su" date="1435233600">- update version 2.2.2
  * fix the timer of UDP relay</changelog>
  <changelog author="i@marguerite.su" date="1440244800">- update version 2.3.0
  * add manager mode to support multi-user and traffic stat
- changes in 2.2.3
  * Fix some issues for multi-destination UDP relay</changelog>
  <changelog author="hillwood@linuxfans.org" date="1444564800">- Update to 2.4.0
  * Refine the one-time authentication.
- Changes of 2.3.3 and 2.3.2
  * Minor bug fixes.
- Changes of 2.3.1
  * Fix an issue of connection cache of UDP relay.
  * Add support of one time authentication for header verification.</changelog>
  <changelog author="hillwood@opensuse.org" date="1480680000">- update to 2.4.8
  * Fix a security bug.
  * Refine memory management.
  * Minor bug fixes.
  * Fix a potential memory leak.
  * Fix some compiler related issues.
  * Fix build issues on OpenWRT.
  * Reduce the latency of redir mode.
  * Update manual pages by @kimw.
  * Enhance UDP relay mode by @wongsyrone.
  * Add ss-nat, a helper script to set up NAT rules for ss-redir,
    from @aa65535.
  * Fix several issues for debian package by @rogers0.
  * Update manual pages with asciidoc by @anonymous-contributor.
  * Fix issues of bind_address option by @tim-le.</changelog>
  <changelog author="hillwood@opensuse.org" date="1480680001">- Update to 2.5.6
  * Add outbound ACL for server by @kimw.
  * Refine log format by @kimw.
  * Refine attack detection.
  * Fix a bug of auto blocking mechanism.
  * Fix TCP Fast Open on macOS.
  * Fix a bug of UDP relay mode of ss-local.
  * Refine ACL feature with hostname support.
  * Add HTTP/SNI parser for ss-local/ss-redir.
  * Fix several bugs of the command line interface.
  * Add aes-128/192/256-ctr ciphers.
  * Add option MTU for UDP relay.
  * Add MultiPath TCP support.
- Fix spec for Fedora.</changelog>
  <changelog author="hillwood@opensuse.org" date="1480939200">- Add system scripts for ss-redir, ss-tunnel, ss-manager and ss-nat.
- Split doc package.</changelog>
  <changelog author="hillwood@opensuse.org" date="1480939201">- Fix %pre, %post, %preun and %postun.</changelog>
  <changelog author="jengelh@inai.de" date="1481025600">- Use a single call to %service_*</changelog>
  <changelog author="hillwood@opensuse.org" date="1492516800">- Update to 3.0.5
  * Drop dependencies of OpenSSL and PolarSSL.
  * Deprecate OTA (One-Time-Auth).
  * Add new ciphers for SIP004: aes-128-gcm, aes-192-gcm, aes-256-gcm,
    chacha20-poly1305 and chacha20-ietf-poly1305.
  * Refine SIP003 to support standalone mode of obfsproxy.
  * Fix a crashe when using stream ciphers.
  * Fix a protocol bug in AEAD ciphers. (SIP004)
  * Allow setting keys directly. (SIP006)
  * Add session key for AEAD. (SIP007)
  * Replace nonce cache with a ping-pong bloom filter.
  * Add CMake files by @wenerme.
  * Support TCP Fast Open in ss-redir by @lqs.
  * Support TOS/DESCP in ss-redir by @sduponch.
  * Refine MPTCP by @sduponch.
  * Fix a bug of TCP Fast Open in ss-redir.</changelog>
  <changelog author="hillwood@opensuse.org" date="1500552000">- Update to 3.0.7
  * Fix a bug with AEAD ciphers.
  * Refine ACL support by @blackgear.
  * Refine manager mode by @mengxd.
  * Fix a potential memory leak by @vlolteanu.</changelog>
  <changelog author="hillwood@opensuse.org" date="1500552001">- Set simple-obfs by Recommends.</changelog>
  <changelog author="hillwood@opensuse.org" date="1502366400">- Update to 3.0.8
  * Refine the ping-pong bloom filter.
  * Minor bug fixes by @vfreex, @vlolteanu and @jackyyf.</changelog>
  <changelog author="hillwood@opensuse.org" date="1505822400">- Update to 3.1.0
  * Replace libudns with libc-ares.
- Merge libbloom, libcork and libipset.</changelog>
  <changelog author="hillwood@opensuse.org" date="1506600000">- Fix Request tag.</changelog>
  <changelog author="hillwood@opensuse.org" date="1509451200">- Add fix-Command-Execution-in-ss-manager.patch
  * Fix boo#1065619 and CVE-2017-15924</changelog>
  <changelog author="hillwood@opensuse.org" date="1514548800">- Update to 3.1.2
  * Fix a bug in DNS resolver.
  * Add new TFO API support.
- Drop fix-Command-Execution-in-ss-manager.patch. Merged by upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1514635200">- Instad of removing static libs after the fact, do not even build
  them in the first place.
- Fix RPM groups and spelling errors in the description.</changelog>
  <changelog author="hillwood@opensuse.org" date="1516449600">- Update version to 3.1.3
  * Fix a bug in UDP relay.</changelog>
  <changelog author="hillwood@opensuse.org" date="1527595200">- Update version to 3.2.0
  * Add MinGW support by @linusyang
  * Refine c-ares integration by @xnoreq.
  * Fix building issues with GCC8 by @FlyingheartCN.
  * Minor bug fixes (boo#1109556, boo#1109550, boo#1109548).</changelog>
</package>
<package pkgid="287e80419c3e09a1a916438c26be5ca2dfb8906f8148e97d17313334540318e4" name="libsingularity1" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="lp150.2.3.1"/>
  <changelog author="eich@suse.com" date="1487419200">- Initial import of singuarity 2.2.1.</changelog>
  <changelog author="eich@suse.com" date="1505390400">- Update to version 2.3.1:
  This release includes a fix for a High Severity security issue on older
  hosts, and other improvements and fixes to previous versions of Singularity.
  Version 2.3:
  There are a massive number of fixes, updates, optimizations and awesomeness
  contained within this release, but here is a brief overview of the major
  changes you can expect to find in this release:
    Lots of backend library changes to accommodate a more flexible API
    Restructured Python backend
    Updated bootstrap backend to make it much more reliable
    Direct support for the awesome, the fantastic, Singularity-Hub!
    Ability to run additional commands without root privileges (e.g. create,
    import, copy, export, etc..).
    Added ability to pull images from Singularity Hub and Docker
    Containers now have labels, and are inspect'able
- Do-chdir-before-duing-chroot.patch:
  Add a chdir() before chroot() just to keep rpmlint from complaining
  even more. There is a chdir("/") right after the chroot() call.
- Created group 'singularity' and make suid-root binaries only executable
  by this group.</changelog>
  <changelog author="eich@suse.com" date="1506945600">- set permissions for SUID binaries to 4750.
- fix library packaging for i586.
- add a README.SUSE
- temporarily filter filter for non-standard-gid from rpmlint
  until group 'singularity' is available as known group.</changelog>
  <changelog author="eich@suse.com" date="1507204800">- Removed:
  Do-chdir-before-duing-chroot.patch:
  After checking with the security team that there are no concerns
  about doing the chdir() after the chroot(), remove this patch and
  add a filter to keep rpmlint from complaining (bsc#1028304).</changelog>
  <changelog author="eich@suse.com" date="1509624000">- Update to 2.3.2:
  * Fix for a change that Docker implemented to their registry
    RESTful API which broke compatibility with Singularity.
  * Several other low minor fixes.</changelog>
  <changelog author="eich@suse.com" date="1509969600">- Restrict permissions file version to a version which has
  the required singularity entries.</changelog>
  <changelog author="cgoll@suse.com" date="1530878400">- Updated from 2.3.2 to 2.5.2
- Fix security issues for incorrect access control on systems
  supporting overlay file system descirbed in CVE-2018-12021 and
  bsc#1100333
  Highlights of 2.5.2
  * a new `build` command was added to replace `create` +
    `bootstrap`
  * default image format is squashfs, eliminating the need to
    specify a size
  * a `localimage` can be used as a build base, including ext3,
    sandbox, and other squashfs images
  * singularity hub can now be used as a base with the uri
  * Restore docker-extract aufs whiteout handling that implements
    correct extraction of docker container layers.
  * several bug fixes, see CHANGELOG.md for details
- Removed: singularity-2.3.2.tar.gz
- Added: singularity-2.5.2.tar.gz
- Removed 'notyet' if conditions in specfile to allow files
  introduced in v2.5.2
- Fixed access control on systems supporting overlay file system
  (CVE-2018-12021, boo#1100333).</changelog>
  <changelog author="eich@suse.com" date="1531137600">- Use %license instead of %doc for license files on newer products.
- Fix bash completion path.</changelog>
  <changelog author="eich@suse.com" date="1539518400">- Update to version 2.6.0
  * Allow admin to specify a non-standard location for mksquashfs binary at
    build time with '--with-mksquashfs' option #1662
  * '--nv' option will use
    [nvidia-container-cli](https://github.com/NVIDIA/libnvidia-container) if
    installed #1681
  * [nvliblist.conf]
    (https://github.com/singularityware/singularity/blob/master/etc/nvliblist.conf)
    now has a section for binaries #1681
  * '--nv' can be made default with all action commands in singularity.conf
    [#1681]
  * '--nv' can be controlled by env vars '$SINGULARITY_NV' and
    '$SINGULARITY_NV_OFF' #1681
  * Refactored travis build and packaging tests #1601
  * Added build and packaging tests for Debian 8/9 and openSUSE 42.3/15.0 #1713
  * Restore shim init process for proper signal handling and child reaping when
    container is initiated in its own PID namespace #1221
  * Add '-i' option to image.create to specify the inode ratio. #1759
  * Bind '/dev/nvidia*' into the container when the '--nv' flag is used in
    conjuction with the '--contain' flag #1358
  * Add '--no-home' option to not mount user $HOME if it is not the $CWD and
    'mount home = yes' is set. #1761
  * Added support for OAUTH2 Docker registries like Azure Container Registry
    [#1622]
  [#]## Bug fixes
  * Fix 404 when using Arch Linux bootstrap #1731
  * Fix environment variables clearing while starting instances #1766</changelog>
</package>
<package pkgid="c106555a1c05f15bb679cd7b1e0fdf2e773d0162060e0d2d44ebfadf25b241ed" name="libslurm32" arch="x86_64">
  <version epoch="0" ver="17.11.7" rel="lp150.5.7.1"/>
  <changelog author="jjolly@suse.com" date="1499688000">- Allows OpenSUSE Factory build as well
- Removes unused .service files from project
- Adds /var/run/slurm to /usr/lib/tmpfiles.d for boottime creation
  * Patches upstream .service files to allow for /var/run/slurm path
  * Modifies slurm.conf to allow for /var/run/slurm path</changelog>
  <changelog author="jjolly@suse.com" date="1505217600">- Made tmpfiles_create post-install macro SLE12 SP2 or greater
- Directly calling systemd-tmpfiles --create for before SLE12 SP2</changelog>
  <changelog author="jjolly@suse.com" date="1506513600">- Updated to slurm 17-02-7-1
  * Added python as BuildRequires
  * Removed sched-wiki package
  * Removed slurmdb-direct package
  * Obsoleted sched-wiki and slurmdb-direct packages
  * Removing Cray-specific files
  * Added /etc/slurm/layout.d files (new for this version)
  * Remove /etc/slurm/cgroup files from package
  * Added lib/slurm/mcs_account.so
  * Removed lib/slurm/jobacct_gather_aix.so
  * Removed lib/slurm/job_submit_cnode.so
- Created slurm-sql package
- Moved files from slurm-plugins to slurm-torque package
- Moved creation of /usr/lib/tmpfiles.d/slurm.conf into slurm.spec
  * Removed tmpfiles.d-slurm.conf
- Changed /var/run path for slurm daemons to /var/run/slurm
  * Added slurmctld-service-var-run-path.patch
  (FATE#324026).</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Trim redundant wording in descriptions.</changelog>
  <changelog author="eich@suse.com" date="1509537600">- Updated to 17.02.9 to fix CVE-2017-15566 (bsc#1065697).
  Changes in 17.0.9
  * When resuming powered down nodes, mark DOWN nodes right after
    ResumeTimeout
    has been reached (previous logic would wait about one minute longer).
  * Fix sreport not showing full column name for TRES Count.
  * Fix slurmdb_reservations_get() giving wrong usage data when job's spanned
    reservation that was modified.
  * Fix sreport reservation utilization report showing bad data.
  * Show all TRES' on a reservation in sreport reservation utilization report
    by default.
  * Fix sacctmgr show reservation handling "end" parameter.
  * Work around issue with sysmacros.h and gcc7 / glibc 2.25.
  * Fix layouts code to only allow setting a boolean.
  * Fix sbatch --wait to keep waiting even if a message timeout occurs.
  * CRAY - If configured with NodeFeatures=knl_cray and there are non-KNL
    nodes which include no features the slurmctld will abort without
    this patch when attemping strtok_r(NULL).
  * Fix regression in 17.02.7 which would run the spank_task_privileged as
    part of the slurmstepd instead of it's child process.
  * Fix security issue in Prolog and Epilog by always prepending SPANK_ to
    all user-set environment variables. CVE-2017-15566.
  Changes in 17.0.8:
  * Add 'slurmdbd:' to the accounting plugin to notify message is from dbd
    instead of local.
  * mpi/mvapich - Buffer being only partially cleared. No failures observed.
  * Fix for job  --switch option on dragonfly network.
  * In salloc with  --uid option, drop supplementary groups before changing UID.
  * jobcomp/elasticsearch - strip any trailing slashes from JobCompLoc.
  * jobcomp/elasticsearch - fix memory leak when transferring generated buffer.
  * Prevent slurmstepd ABRT when parsing gres.conf CPUs.
  * Fix sbatch --signal to signal all MPI ranks in a step instead of just those
    on node 0.
  * Check multiple partition limits when scheduling a job that were previously
    only checked on submit.
  * Cray: Avoid running application/step Node Health Check on the external
    job step.
  * Optimization enhancements for partition based job preemption.
  * Address some build warnings from GCC 7.1, and one possible memory leak if
    /proc is inaccessible.
  * If creating/altering a core based reservation with scontrol/sview on a
    remote cluster correctly determine the select type.
  * Fix autoconf test for libcurl when clang is used.
  * Fix default location for cgroup_allowed_devices_file.conf to use correct
    default path.
  * Document NewName option to sacctmgr.
  * Reject a second PMI2_Init call within a single step to prevent slurmstepd
    from hanging.
  * Handle old 32bit values stored in the database for requested memory
    correctly in sacct.
  * Fix memory leaks in the task/cgroup plugin when constraining devices.
  * Make extremely verbose info messages debug2 messages in the task/cgroup
    plugin when constraining devices.
  * Fix issue that would deny the stepd access to /dev/null where GRES has a
    'type' but no file defined.
  * Fix issue where the slurmstepd would fatal on job launch if you have no
    gres listed in your slurm.conf but some in gres.conf.
  * Fix validating time spec to correctly validate various time formats.
  * Make scontrol work correctly with job update timelimit [+|-]=.
  * Reduce the visibily of a number of warnings in _part_access_check.
  * Prevent segfault in sacctmgr if no association name is specified for
    an update command.
  * burst_buffer/cray plugin modified to work with changes in Cray UP05
    software release.
  * Fix job reasons for jobs that are violating assoc MaxTRESPerNode limits.
  * Fix segfault when unpacking a 16.05 slurm_cred in a 17.02 daemon.
  * Fix setting TRES limits with case insensitive TRES names.
  * Add alias for xstrncmp() -- slurm_xstrncmp().
  * Fix sorting of case insensitive strings when using xstrcasecmp().
  * Gracefully handle race condition when reading /proc as process exits.
  * Avoid error on Cray duplicate setup of core specialization.
  * Skip over undefined (hidden in Slurm) nodes in pbsnodes.
  * Add empty hashes in perl api's slurm_load_node() for hidden nodes.
  * CRAY - Add rpath logic to work for the alpscomm libs.
  * Fixes for administrator extended TimeLimit (job reason &amp; time limit reset).
  * Fix gres selection on systems running select/linear.
  * sview: Added window decorator for maximize,minimize,close buttons for all
    systems.
  * squeue: interpret negative length format specifiers as a request to
    delimit values with spaces.
  * Fix the torque pbsnodes wrapper script to parse a gres field with a type
    set correctly.
- Fixed ABI version of libslurm.</changelog>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
</package>
<package pkgid="7125e77b2a43d4651ce2a7b586c08772265092e829ce2d94fe3ff07a54b3834f" name="libslurm32" arch="x86_64">
  <version epoch="0" ver="17.11.9" rel="lp150.5.11.1"/>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
  <changelog author="eich@suse.com" date="1532779200">- Add a 'Recommends: slurm-munge' to slurm-slurmdbd.</changelog>
  <changelog author="eich@suse.com" date="1533038400">- slurmctld-rerun-agent_init-when-backup-controller-takes-over.patch:
  Fix race in the slurmctld backup controller which prevents it
  to clean up allocations on nodes properly after failing over
  (bsc#1084917).
- Handled %license in a backward compatible manner.</changelog>
  <changelog author="eich@suse.com" date="1533038401">- Update to 17.11.8
  * Fix incomplete RESPONSE_[RESOURCE|JOB_PACK]_ALLOCATION building path.
  * Do not allocate nodes that were marked down due to the node not responding
    by ResumeTimeout.
  * task/cray plugin - search for "mems" cgroup information in the file
    "cpuset.mems" then fall back to the file "mems".
  * Fix ipmi profile debug uninitialized variable.
  * PMIx: fixed the direct connect inline msg sending.
  * MYSQL: Fix issue not handling all fields when loading an archive dump.
  * Allow a job_submit plugin to change the admin_comment field during
    job_submit_plugin_modify().
  * job_submit/lua - fix access into reservation table.
  * MySQL - Prevent deadlock caused by archive logic locking reads.
  * Don't enforce MaxQueryTimeRange when requesting specific jobs.
  * Modify --test-only logic to properly support jobs submitted to more than
    one partition.
  * Prevent slurmctld from abort when attempting to set non-existing
    qos as def_qos_id.
  * Add new job dependency type of "afterburstbuffer". The pending job will be
    delayed until the first job completes execution and it's burst buffer
    stage-out is completed.
  * Reorder proctrack/task plugin load in the slurmstepd to match that of
    slurmd
    and avoid race condition calling task before proctrack can introduce.
  * Prevent reboot of a busy KNL node when requesting inactive features.
  * Revert to previous behavior when requesting memory per cpu/node introduced
    in 17.11.7.
  * Fix to reinitialize previously adjusted job members to their original
    value
    when validating the job memory in multi-partition requests.
  * Fix _step_signal() from always returning SLURM_SUCCESS.
  * Combine active and available node feature change logs on one line rather
    than one line per node for performance reasons.
  * Prevent occasionally leaking freezer cgroups.
  * Fix potential segfault when closing the mpi/pmi2 plugin.
  * Fix issues with  --exclusive=[user|mcs] to work correctly
    with preemption or when job requests a specific list of hosts.
  * Make code compile with hdf5 1.10.2+
  * mpi/pmix: Fixed the collectives canceling.
  * SlurmDBD: improve error message handling on archive load failure.
  * Fix incorrect locking when deleting reservations.
  * Fix incorrect locking when setting up the power save module.
  * Fix setting format output length for squeue when showing array jobs.
  * Add xstrstr function.
  * Fix printing out of --hint options in sbatch, salloc --help.
  * Prevent possible divide by zero in _validate_time_limit().
  * Add Delegate=yes to the slurmd.service file to prevent systemd from
    interfering with the jobs' cgroup hierarchies.
  * Change the backlog argument to the listen() syscall within srun to 4096
    to match elsewhere in the code, and avoid communication problems at scale.</changelog>
  <changelog author="eich@suse.com" date="1533211200">- When using a remote shared StateSaveLocation, slurmctld needs to
  be started after remote filesystems have become available.
  Add 'remote-fs.target' to the 'After=' directive in slurmctld.service
  (boo#1103561).</changelog>
  <changelog author="eich@suse.com" date="1534248000">- Update to 17.11.9
  * Fix segfault in slurmctld when a job's node bitmap is NULL during a
    scheduling cycle.  Primarily caused by EnforcePartLimits=ALL.
  * Remove erroneous unlock in acct_gather_energy/ipmi.
  * Enable support for hwloc version 2.0.1.
  * Fix 'srun -q' (--qos) option handling.
  * Fix socket communication issue that can lead to lost task completition
    messages, which will cause a permanently stuck srun process.
  * Handle creation of TMPDIR if environment variable is set or changed in
    a task prolog script.
  * Avoid node layout fragmentation if running with a fixed CPU count but
    without Sockets and CoresPerSocket defined.
  * burst_buffer/cray - Fix datawarp swap default pool overriding jobdw.
  * Fix incorrect job priority assignment for multi-partition job with
    different PriorityTier settings on the partitions.
  * Fix sinfo to print correct node state.</changelog>
</package>
<package pkgid="fad167f2fc697143502c9563595015dfdcb42be76433223e8642522b17e855a3" name="libslurm32" arch="x86_64">
  <version epoch="0" ver="17.11.9" rel="lp150.5.15.1"/>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
  <changelog author="eich@suse.com" date="1532779200">- Add a 'Recommends: slurm-munge' to slurm-slurmdbd.</changelog>
  <changelog author="eich@suse.com" date="1533038400">- slurmctld-rerun-agent_init-when-backup-controller-takes-over.patch:
  Fix race in the slurmctld backup controller which prevents it
  to clean up allocations on nodes properly after failing over
  (bsc#1084917).
- Handled %license in a backward compatible manner.</changelog>
  <changelog author="eich@suse.com" date="1533038401">- Update to 17.11.8
  * Fix incomplete RESPONSE_[RESOURCE|JOB_PACK]_ALLOCATION building path.
  * Do not allocate nodes that were marked down due to the node not responding
    by ResumeTimeout.
  * task/cray plugin - search for "mems" cgroup information in the file
    "cpuset.mems" then fall back to the file "mems".
  * Fix ipmi profile debug uninitialized variable.
  * PMIx: fixed the direct connect inline msg sending.
  * MYSQL: Fix issue not handling all fields when loading an archive dump.
  * Allow a job_submit plugin to change the admin_comment field during
    job_submit_plugin_modify().
  * job_submit/lua - fix access into reservation table.
  * MySQL - Prevent deadlock caused by archive logic locking reads.
  * Don't enforce MaxQueryTimeRange when requesting specific jobs.
  * Modify --test-only logic to properly support jobs submitted to more than
    one partition.
  * Prevent slurmctld from abort when attempting to set non-existing
    qos as def_qos_id.
  * Add new job dependency type of "afterburstbuffer". The pending job will be
    delayed until the first job completes execution and it's burst buffer
    stage-out is completed.
  * Reorder proctrack/task plugin load in the slurmstepd to match that of
    slurmd
    and avoid race condition calling task before proctrack can introduce.
  * Prevent reboot of a busy KNL node when requesting inactive features.
  * Revert to previous behavior when requesting memory per cpu/node introduced
    in 17.11.7.
  * Fix to reinitialize previously adjusted job members to their original
    value
    when validating the job memory in multi-partition requests.
  * Fix _step_signal() from always returning SLURM_SUCCESS.
  * Combine active and available node feature change logs on one line rather
    than one line per node for performance reasons.
  * Prevent occasionally leaking freezer cgroups.
  * Fix potential segfault when closing the mpi/pmi2 plugin.
  * Fix issues with  --exclusive=[user|mcs] to work correctly
    with preemption or when job requests a specific list of hosts.
  * Make code compile with hdf5 1.10.2+
  * mpi/pmix: Fixed the collectives canceling.
  * SlurmDBD: improve error message handling on archive load failure.
  * Fix incorrect locking when deleting reservations.
  * Fix incorrect locking when setting up the power save module.
  * Fix setting format output length for squeue when showing array jobs.
  * Add xstrstr function.
  * Fix printing out of --hint options in sbatch, salloc --help.
  * Prevent possible divide by zero in _validate_time_limit().
  * Add Delegate=yes to the slurmd.service file to prevent systemd from
    interfering with the jobs' cgroup hierarchies.
  * Change the backlog argument to the listen() syscall within srun to 4096
    to match elsewhere in the code, and avoid communication problems at scale.</changelog>
  <changelog author="eich@suse.com" date="1533211200">- When using a remote shared StateSaveLocation, slurmctld needs to
  be started after remote filesystems have become available.
  Add 'remote-fs.target' to the 'After=' directive in slurmctld.service
  (boo#1103561).</changelog>
  <changelog author="eich@suse.com" date="1534248000">- Update to 17.11.9
  * Fix segfault in slurmctld when a job's node bitmap is NULL during a
    scheduling cycle.  Primarily caused by EnforcePartLimits=ALL.
  * Remove erroneous unlock in acct_gather_energy/ipmi.
  * Enable support for hwloc version 2.0.1.
  * Fix 'srun -q' (--qos) option handling.
  * Fix socket communication issue that can lead to lost task completition
    messages, which will cause a permanently stuck srun process.
  * Handle creation of TMPDIR if environment variable is set or changed in
    a task prolog script.
  * Avoid node layout fragmentation if running with a fixed CPU count but
    without Sockets and CoresPerSocket defined.
  * burst_buffer/cray - Fix datawarp swap default pool overriding jobdw.
  * Fix incorrect job priority assignment for multi-partition job with
    different PriorityTier settings on the partitions.
  * Fix sinfo to print correct node state.</changelog>
  <changelog author="eich@suse.com" date="1537617600">- Fix Requires(pre) and Requires(post) for slurm-config and slurm-node.
  This fixes issues with failing slurm user creation when installed
  during initial system installation (bsc#1109373).</changelog>
  <changelog author="cgoll@suse.com" date="1537790400">- added correct link flags for perl bindings (bsc#1108671)
  * added correct linker search path in slurm-2.4.4-rpath.patch
  * perl:Switch is required by slurm torque wrappers</changelog>
</package>
<package pkgid="018cbd32674e18cc06aad4af19fc4dd4fda7298e126c217cbb0cdcc79ab2802f" name="libsmartcols-devel" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="47685b616bf3c50da85301a7f12210c8bfae0dd41affa2c78b7044cddc5dd7d6" name="libsmartcols-devel" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="5c68a3ea42bb8dd8a96923fe26a5d0c69cb085eb2cbc464905813073e2f7d913" name="libsmartcols-devel-static" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="114c07992dc51f876414769bcbf1cc542ba37f69dcc1c497901b652ed7cb6222" name="libsmartcols-devel-static" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="81c2a1369b5450e307f535fca702c9c1dfbe469b2da2fdb6989632d8e47c906d" name="libsmartcols1" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="b6c0f3bc67d71e7a37e47d1fe66e30a4bbaf99c748d6ddb26b994854815b12c8" name="libsmartcols1" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="bcfb6a97db4f09ef91c1a919c5acb9b1a87080095154c26989ddc015f4b6060c" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="631556050fe8b78214bdbee96d534f13e8857089ea8816edf433a9e1afd9e7a0" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="8e3dee64bd09a931d975079a0e630090278f499a0b4ad14be44f6e09ebfd45f9" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="d5e6ab3b910848ccf4ed16039f691d059f8069091cfb0b144de42acfb1bb57ed" name="libsmbclient0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="50b1992a8ba83b57186a1245cdd67404ec8f409027e8ec8784e46e951eb1c471" name="libsmbclient0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="b011d3306413174979648d1c3a0d43ef61983adc847b5fa111808fa247e8d6ff" name="libsmbclient0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="5b9409988a32d9a41071a6b86a7c91e20078be88b9892a581ef70524e2c5648f" name="libsmbclient0" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="28c0b4dffa552a8b25604bba463fb95fb6233eb56532be6fd2ad828723a33fe4" name="libsmbclient0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="f07bb95e4bd8f7e24c32413a1ae27ad40a3e94e2753c8656e26fe1e38630590a" name="libsmbclient0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="c237eee7668c200ad0ccb3e254e74fb9c306998ee4ff8853271593c4ab1ddee9" name="libsmbconf-devel" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="c169441f82623a145d484f79952b2802682f9769805329eb74e7c68c978de079" name="libsmbconf-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="e7dd5f73cff3c5fc3e079da2de2b4a777155afb933f81fe6740d211e6fb3b0ff" name="libsmbconf-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="5f457e57d488506df98ef26dc9619a88480ed17f5fddf11c16c69b192649c407" name="libsmbconf0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="1371b85ad0b99852da0783f886534e3d2e7168d2d684ef15d6da4183c1a21b72" name="libsmbconf0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="d2964f8e28890b8943cd13c86f01a4c11376ddcac4a4ced441f9f18fdadcaa85" name="libsmbconf0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="e1094124c4cc5e5fe90d480a24d2956e334b1bbd73bc204fa537b767d2945c31" name="libsmbconf0" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="3f097b419415f5b664c96cd2199de6b7974426a8332c9a3a28338b876622f654" name="libsmbconf0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="c6ff501b500d20c5301c45f17493ff129e7f8172a68c22e3a88546807d73fe86" name="libsmbconf0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="5097ca4288f75ff3178356b925ff7d0d227f185a77a20b36972bbafacb8499a3" name="libsmbldap-devel" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="47f193dd34683f5c646017fdb919879422c48357c52106e563e55d0334eba16e" name="libsmbldap-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="8ca3f32fd5b6039f78fe7676ccb36cf4b301817f265ee269877dd406fa3cf126" name="libsmbldap-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="729f6ae92d1e21fb7825d5e0c477ef08aeb16ced5d6ab9abae1751a1f52e7531" name="libsmbldap2-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="7c4e6bf8af1b000f65594a981768b713eca42c97c27dae6f88f5eeddd283c9d6" name="libsmbldap2-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="6535051451bb58964d63ef4cd50ec257d6d00895dbd188693c21c4940a9116db" name="libsmbldap2-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="9b4a8d8fa60cb60d88420b81ac0dc5916c2a5af19c3dae9ebb0036d86c931870" name="libsmbldap2" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="1b4794cc36509233f80d9e5148df834ba7d1b9ada7477d5e0fee7cc89b748232" name="libsmbldap2" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="ad6cf53edb78273dc3b551d321ca310ff18499c0d0c845a267d4c9f2bfb63e82" name="libsmbldap2" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="53beb545253af84d47199d94f2b03e6903bd2d6065eb927caadd8c2f2e571bb2" name="libsnapper-devel" arch="x86_64">
  <version epoch="0" ver="0.5.4" rel="lp150.3.3.1"/>
  <changelog author="aschnell@suse.com" date="1470657600">- better messages for some btrfs quota errors
  (gh#openSUSE/snapper#257)</changelog>
  <changelog author="aschnell@suse.com" date="1470744000">- merged patch to fix order of object destruction on shutdown
  (gh#openSUSE/snapper#258)</changelog>
  <changelog author="aschnell@suse.com" date="1478088000">- fixed use of getpwuid_r, getpwnam_r and getgrnam_r</changelog>
  <changelog author="aschnell@suse.com" date="1478260800">- catch exception if setting default subvolume fails (bsc#1008544)</changelog>
  <changelog author="aschnell@suse.com" date="1481803200">- support option --no-dbus for all snapper commands (fate#319404,
  fate#321049)
- version 0.4.0</changelog>
  <changelog author="aschnell@suse.com" date="1482321600">- fixed --root option (bsc#1016633)
- version 0.4.1</changelog>
  <changelog author="aschnell@suse.com" date="1486036800">- build SLE12 versions with quota support again (bsc#1021370)
- version 0.4.2</changelog>
  <changelog author="aschnell@suse.com" date="1486036801">- deal with CaaSP btrfs setup where certain subvolumes are
  read-only (bsc#1018302 and bsc#1018095)
- version 0.4.3</changelog>
  <changelog author="aschnell@suse.com" date="1490184000">- remove read-only mount option for new fstab entry in mksubvolume
  (bsc#1030257)
- version 0.4.4</changelog>
  <changelog author="aschnell@suse.com" date="1492689600">- generate build file for Ubuntu 17.04
- version 0.4.5</changelog>
  <changelog author="aschnell@suse.com" date="1494331200">- set cleanup algorithm for rollback snapshots (fate#321773)
- version 0.5.0</changelog>
  <changelog author="lslezak@suse.com" date="1501761600">- fixed table formatting for non-ACSII characters (bsc#1051901)
  (::mbrtowc behavior has been changed in glibc-2.22)
- version 0.5.1</changelog>
  <changelog author="aschnell@suse.com" date="1504699200">- fix compilation with boost 1.65.0 (gh#openSUSE/snapper#354)
  (bsc#1061262)
- version 0.5.2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Switched from cron to systemd timers (spec file based
  distributions) (fate#324529)
- version 0.5.3</changelog>
  <changelog author="aschnell@suse.com" date="1515585600">- use python3 instead of python2 (bsc#1070324)</changelog>
  <changelog author="aschnell@suse.com" date="1516968000">- improved error handling for systemd services
  (gh#openSUSE/snapper#382)</changelog>
  <changelog author="aschnell@suse.com" date="1517227200">- create subvolume instead of snapshot for initial system
  (bsc#1077240)
- version 0.5.4</changelog>
  <changelog author="aschnell@suse.com" date="1524225600">- soften error handling if setting locale fails due to broken
  system setup (bsc#1085832)</changelog>
  <changelog author="jsrain@suse.cz" date="1525953600">- move warning in case of non-UTF8 locale to man page (bsc#1092103)</changelog>
</package>
<package pkgid="b54b027ef6165452ba76a06bb873314ffc8d1599ecbbbcc1751ee17a5f057b7d" name="libsnapper-devel" arch="x86_64">
  <version epoch="0" ver="0.5.6" rel="lp150.3.6.1"/>
  <changelog author="aschnell@suse.com" date="1478088000">- fixed use of getpwuid_r, getpwnam_r and getgrnam_r</changelog>
  <changelog author="aschnell@suse.com" date="1478260800">- catch exception if setting default subvolume fails (bsc#1008544)</changelog>
  <changelog author="aschnell@suse.com" date="1481803200">- support option --no-dbus for all snapper commands (fate#319404,
  fate#321049)
- version 0.4.0</changelog>
  <changelog author="aschnell@suse.com" date="1482321600">- fixed --root option (bsc#1016633)
- version 0.4.1</changelog>
  <changelog author="aschnell@suse.com" date="1486036800">- build SLE12 versions with quota support again (bsc#1021370)
- version 0.4.2</changelog>
  <changelog author="aschnell@suse.com" date="1486036801">- deal with CaaSP btrfs setup where certain subvolumes are
  read-only (bsc#1018302 and bsc#1018095)
- version 0.4.3</changelog>
  <changelog author="aschnell@suse.com" date="1490184000">- remove read-only mount option for new fstab entry in mksubvolume
  (bsc#1030257)
- version 0.4.4</changelog>
  <changelog author="aschnell@suse.com" date="1492689600">- generate build file for Ubuntu 17.04
- version 0.4.5</changelog>
  <changelog author="aschnell@suse.com" date="1494331200">- set cleanup algorithm for rollback snapshots (fate#321773)
- version 0.5.0</changelog>
  <changelog author="lslezak@suse.com" date="1501761600">- fixed table formatting for non-ACSII characters (bsc#1051901)
  (::mbrtowc behavior has been changed in glibc-2.22)
- version 0.5.1</changelog>
  <changelog author="aschnell@suse.com" date="1504699200">- fix compilation with boost 1.65.0 (gh#openSUSE/snapper#354)
  (bsc#1061262)
- version 0.5.2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Switched from cron to systemd timers (spec file based
  distributions) (fate#324529)
- version 0.5.3</changelog>
  <changelog author="aschnell@suse.com" date="1515585600">- use python3 instead of python2 (bsc#1070324)</changelog>
  <changelog author="aschnell@suse.com" date="1516968000">- improved error handling for systemd services
  (gh#openSUSE/snapper#382)</changelog>
  <changelog author="aschnell@suse.com" date="1517227200">- create subvolume instead of snapshot for initial system
  (bsc#1077240)
- version 0.5.4</changelog>
  <changelog author="aschnell@suse.com" date="1524225600">- soften error handling if setting locale fails due to broken
  system setup (bsc#1085832)</changelog>
  <changelog author="jsrain@suse.cz" date="1525953600">- move warning in case of non-UTF8 locale to man page (bsc#1092103)</changelog>
  <changelog author="aschnell@suse.com" date="1527508800">- merged (gh#openSUSE/snapper#409) to build with boost 1.67.0
  (bsc#1096208)
- version 0.5.5</changelog>
  <changelog author="aschnell@suse.com" date="1532347200">- fixed logging during shutdown of snapperd to avoid core dumps
  (bsc#1096401 and others)
- version 0.5.6</changelog>
</package>
<package pkgid="f447977114e6a0cbad30744318130dca1f8155352db27df69399cbf14bbeac1e" name="libsnapper4" arch="x86_64">
  <version epoch="0" ver="0.5.4" rel="lp150.3.3.1"/>
  <changelog author="aschnell@suse.com" date="1470657600">- better messages for some btrfs quota errors
  (gh#openSUSE/snapper#257)</changelog>
  <changelog author="aschnell@suse.com" date="1470744000">- merged patch to fix order of object destruction on shutdown
  (gh#openSUSE/snapper#258)</changelog>
  <changelog author="aschnell@suse.com" date="1478088000">- fixed use of getpwuid_r, getpwnam_r and getgrnam_r</changelog>
  <changelog author="aschnell@suse.com" date="1478260800">- catch exception if setting default subvolume fails (bsc#1008544)</changelog>
  <changelog author="aschnell@suse.com" date="1481803200">- support option --no-dbus for all snapper commands (fate#319404,
  fate#321049)
- version 0.4.0</changelog>
  <changelog author="aschnell@suse.com" date="1482321600">- fixed --root option (bsc#1016633)
- version 0.4.1</changelog>
  <changelog author="aschnell@suse.com" date="1486036800">- build SLE12 versions with quota support again (bsc#1021370)
- version 0.4.2</changelog>
  <changelog author="aschnell@suse.com" date="1486036801">- deal with CaaSP btrfs setup where certain subvolumes are
  read-only (bsc#1018302 and bsc#1018095)
- version 0.4.3</changelog>
  <changelog author="aschnell@suse.com" date="1490184000">- remove read-only mount option for new fstab entry in mksubvolume
  (bsc#1030257)
- version 0.4.4</changelog>
  <changelog author="aschnell@suse.com" date="1492689600">- generate build file for Ubuntu 17.04
- version 0.4.5</changelog>
  <changelog author="aschnell@suse.com" date="1494331200">- set cleanup algorithm for rollback snapshots (fate#321773)
- version 0.5.0</changelog>
  <changelog author="lslezak@suse.com" date="1501761600">- fixed table formatting for non-ACSII characters (bsc#1051901)
  (::mbrtowc behavior has been changed in glibc-2.22)
- version 0.5.1</changelog>
  <changelog author="aschnell@suse.com" date="1504699200">- fix compilation with boost 1.65.0 (gh#openSUSE/snapper#354)
  (bsc#1061262)
- version 0.5.2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Switched from cron to systemd timers (spec file based
  distributions) (fate#324529)
- version 0.5.3</changelog>
  <changelog author="aschnell@suse.com" date="1515585600">- use python3 instead of python2 (bsc#1070324)</changelog>
  <changelog author="aschnell@suse.com" date="1516968000">- improved error handling for systemd services
  (gh#openSUSE/snapper#382)</changelog>
  <changelog author="aschnell@suse.com" date="1517227200">- create subvolume instead of snapshot for initial system
  (bsc#1077240)
- version 0.5.4</changelog>
  <changelog author="aschnell@suse.com" date="1524225600">- soften error handling if setting locale fails due to broken
  system setup (bsc#1085832)</changelog>
  <changelog author="jsrain@suse.cz" date="1525953600">- move warning in case of non-UTF8 locale to man page (bsc#1092103)</changelog>
</package>
<package pkgid="f46f8be2da8de7a95460e0a8df4b3f57cbdd30089958933988e7e11b67d6ed21" name="libsnapper4" arch="x86_64">
  <version epoch="0" ver="0.5.6" rel="lp150.3.6.1"/>
  <changelog author="aschnell@suse.com" date="1478088000">- fixed use of getpwuid_r, getpwnam_r and getgrnam_r</changelog>
  <changelog author="aschnell@suse.com" date="1478260800">- catch exception if setting default subvolume fails (bsc#1008544)</changelog>
  <changelog author="aschnell@suse.com" date="1481803200">- support option --no-dbus for all snapper commands (fate#319404,
  fate#321049)
- version 0.4.0</changelog>
  <changelog author="aschnell@suse.com" date="1482321600">- fixed --root option (bsc#1016633)
- version 0.4.1</changelog>
  <changelog author="aschnell@suse.com" date="1486036800">- build SLE12 versions with quota support again (bsc#1021370)
- version 0.4.2</changelog>
  <changelog author="aschnell@suse.com" date="1486036801">- deal with CaaSP btrfs setup where certain subvolumes are
  read-only (bsc#1018302 and bsc#1018095)
- version 0.4.3</changelog>
  <changelog author="aschnell@suse.com" date="1490184000">- remove read-only mount option for new fstab entry in mksubvolume
  (bsc#1030257)
- version 0.4.4</changelog>
  <changelog author="aschnell@suse.com" date="1492689600">- generate build file for Ubuntu 17.04
- version 0.4.5</changelog>
  <changelog author="aschnell@suse.com" date="1494331200">- set cleanup algorithm for rollback snapshots (fate#321773)
- version 0.5.0</changelog>
  <changelog author="lslezak@suse.com" date="1501761600">- fixed table formatting for non-ACSII characters (bsc#1051901)
  (::mbrtowc behavior has been changed in glibc-2.22)
- version 0.5.1</changelog>
  <changelog author="aschnell@suse.com" date="1504699200">- fix compilation with boost 1.65.0 (gh#openSUSE/snapper#354)
  (bsc#1061262)
- version 0.5.2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Switched from cron to systemd timers (spec file based
  distributions) (fate#324529)
- version 0.5.3</changelog>
  <changelog author="aschnell@suse.com" date="1515585600">- use python3 instead of python2 (bsc#1070324)</changelog>
  <changelog author="aschnell@suse.com" date="1516968000">- improved error handling for systemd services
  (gh#openSUSE/snapper#382)</changelog>
  <changelog author="aschnell@suse.com" date="1517227200">- create subvolume instead of snapshot for initial system
  (bsc#1077240)
- version 0.5.4</changelog>
  <changelog author="aschnell@suse.com" date="1524225600">- soften error handling if setting locale fails due to broken
  system setup (bsc#1085832)</changelog>
  <changelog author="jsrain@suse.cz" date="1525953600">- move warning in case of non-UTF8 locale to man page (bsc#1092103)</changelog>
  <changelog author="aschnell@suse.com" date="1527508800">- merged (gh#openSUSE/snapper#409) to build with boost 1.67.0
  (bsc#1096208)
- version 0.5.5</changelog>
  <changelog author="aschnell@suse.com" date="1532347200">- fixed logging during shutdown of snapperd to avoid core dumps
  (bsc#1096401 and others)
- version 0.5.6</changelog>
</package>
<package pkgid="fee05e98fc278a67b6e9770b6454ca08b4da118837e957c965b4979cd13a7ecb" name="libsndfile" arch="src">
  <version epoch="0" ver="1.0.28" rel="lp150.3.3.1"/>
  <changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- fix devel dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322136000">- use O_CLOEXEC in library code.</changelog>
  <changelog author="tiwai@suse.de" date="1322136001">- add missing provides/obsoletes for libsndfile -&gt; libsndfile1
  rename (bnc#732565)</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="mmeister@suse.com" date="1366027200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tiwai@suse.de" date="1420632000">- VUL-0: two buffer read overflows in sd2_parse_rsrc_fork()
  (CVE-2014-9496, bnc#911796): backported upstream fix patches
  sndfile-src-sd2.c-Fix-segfault-in-SD2-RSRC-parser.patch
  sndfile-src-sd2.c-Fix-two-potential-buffer-read-overflows.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Cleanup spec file with spec-cleaner
- Add gpg signature
- Remove old ppc provides/obsoletes</changelog>
  <changelog author="tiwai@suse.de" date="1446638400">- VUL-1: libsndfile DoS/divide-by-zero (CVE-2014-9756, bsc#953521):
  libsndfile-src-file_io.c-Prevent-potential-divide-by-zero.patch</changelog>
  <changelog author="tiwai@suse.de" date="1446638401">- VUL-0: libsndfile 1.0.25 heap overflow (CVE-2015-7805, bsc#953516)
  libsndfile-src-common.c-Fix-a-header-parsing-bug.patch
  libsndfile-fix-header-read-CVE-2015-7805.patch
- VUL-0: libsndfile 1.0.25 heap overflow (CVE-2015-8075, bsc#953519)
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch
- Fix the build with SLE11-SP3 due to AM_SILENT_RULE macro</changelog>
  <changelog author="tiwai@suse.de" date="1448280000">- Update to version 1.0.26:
  * Fix for CVE-2014-9496, CVE-2014-9756 and CVE-2015-7805.
  * Add ALAC/CAF support. Minor bug fixes and improvements.
- Refreshed patches:
  sndfile-ocloexec.patch
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch
- Removed obsoleted patches:
  libsndfile-example-fix.diff
  libsndfile-fix-header-read-CVE-2015-7805.patch
  libsndfile-paf-zero-division-fix.diff
  libsndfile-src-common.c-Fix-a-header-parsing-bug.patch
  libsndfile-src-file_io.c-Prevent-potential-divide-by-zero.patch
  sndfile-src-sd2.c-Fix-segfault-in-SD2-RSRC-parser.patch
  sndfile-src-sd2.c-Fix-two-potential-buffer-read-overflows.patch</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1462881600">- Fix spec file to enable builds on non opensuse OS</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Update to version 1.0.27:
  * Fix a seek regression in 1.0.26
  * Add metadata read/write for CAF and RF64
  * FIx PAF endian-ness issue
- Update to version 1.0.28
  * Fix buffer overruns in FLAC and ID3 handling code
  (CVE-2017-7585, CVE-2017-7586, bsc#1033054, bsc#1033053)
  * Reduce default header memory requirements
  * Fix detection of Large File Support for 32 bit systems.
- Obsoleted patch:
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493726400">- Fix FLAC buffer overflows (CVE-2017-8361 CVE-2017-8363
  CVE-2017-8365 CVE-2017-8362 bsc#1036944 bsc#1036945 bsc#1036946
  bsc#1036943):
  0001-FLAC-Fix-a-buffer-read-overrun.patch
  0002-src-flac.c-Fix-a-buffer-read-overflow.patch</changelog>
  <changelog author="tiwai@suse.de" date="1497355200">- Fix out-of-bounds read memory access in the aiff_read_chanmap()
  (CVE-2017-6892, bsc#1043978):
  0010-src-aiff.c-Fix-a-buffer-read-overflow.patch</changelog>
  <changelog author="tiwai@suse.de" date="1502193600">- Fix Heap-based Buffer Overflow in the psf_binheader_writef
  (CVE-2017-12562, bsc#1052476):
  0020-src-common.c-Fix-heap-buffer-overflows-when-writing-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: divide-by-zero error exists in the function
  double64_init() in double64.c (CVE-2017-14634, bsc#1059911):
  0030-double64_init-Check-psf-sf.channels-against-upper-bo.patch
- Tentative fix for VUL-0: out of bounds read in the function
  d2alaw_array() in alaw.c (CVE-2017-14245, bsc#1059912) and
  VUL-0: out of bounds read in the function d2ulaw_array() in
  ulaw.c (CVE-2017-14246, bsc#1059913):
  0031-sfe_copy_data_fp-check-value-of-max-variable.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix potential overflow in d2alaw_array() (CVE-2017-17456,
  bsc#1071777):
  libsndfile-CVE-2017-17456-alaw-range-check.patch
- Fix potential overflow in d2ulaw_array() (CVE-2017-17457,
  bsc#1071767):
  libsndfile-CVE-2017-17457-ulaw-range-check.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1530878400">- Fix buffer overflow in sndfile-deinterlace, which isn't really a
  security issue (bsc#1100167, CVE-2018-13139):
  sndfile-deinterlace-channels-check.patch</changelog>
</package>
<package pkgid="e273a6fcc3dc5c1dad9ac0b954f98b75dee90b0b3d3a68f9f8db6c91c4d96d51" name="libsndfile-devel" arch="x86_64">
  <version epoch="0" ver="1.0.28" rel="lp150.3.3.1"/>
  <changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- fix devel dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322136000">- use O_CLOEXEC in library code.</changelog>
  <changelog author="tiwai@suse.de" date="1322136001">- add missing provides/obsoletes for libsndfile -&gt; libsndfile1
  rename (bnc#732565)</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="mmeister@suse.com" date="1366027200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tiwai@suse.de" date="1420632000">- VUL-0: two buffer read overflows in sd2_parse_rsrc_fork()
  (CVE-2014-9496, bnc#911796): backported upstream fix patches
  sndfile-src-sd2.c-Fix-segfault-in-SD2-RSRC-parser.patch
  sndfile-src-sd2.c-Fix-two-potential-buffer-read-overflows.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Cleanup spec file with spec-cleaner
- Add gpg signature
- Remove old ppc provides/obsoletes</changelog>
  <changelog author="tiwai@suse.de" date="1446638400">- VUL-1: libsndfile DoS/divide-by-zero (CVE-2014-9756, bsc#953521):
  libsndfile-src-file_io.c-Prevent-potential-divide-by-zero.patch</changelog>
  <changelog author="tiwai@suse.de" date="1446638401">- VUL-0: libsndfile 1.0.25 heap overflow (CVE-2015-7805, bsc#953516)
  libsndfile-src-common.c-Fix-a-header-parsing-bug.patch
  libsndfile-fix-header-read-CVE-2015-7805.patch
- VUL-0: libsndfile 1.0.25 heap overflow (CVE-2015-8075, bsc#953519)
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch
- Fix the build with SLE11-SP3 due to AM_SILENT_RULE macro</changelog>
  <changelog author="tiwai@suse.de" date="1448280000">- Update to version 1.0.26:
  * Fix for CVE-2014-9496, CVE-2014-9756 and CVE-2015-7805.
  * Add ALAC/CAF support. Minor bug fixes and improvements.
- Refreshed patches:
  sndfile-ocloexec.patch
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch
- Removed obsoleted patches:
  libsndfile-example-fix.diff
  libsndfile-fix-header-read-CVE-2015-7805.patch
  libsndfile-paf-zero-division-fix.diff
  libsndfile-src-common.c-Fix-a-header-parsing-bug.patch
  libsndfile-src-file_io.c-Prevent-potential-divide-by-zero.patch
  sndfile-src-sd2.c-Fix-segfault-in-SD2-RSRC-parser.patch
  sndfile-src-sd2.c-Fix-two-potential-buffer-read-overflows.patch</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1462881600">- Fix spec file to enable builds on non opensuse OS</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Update to version 1.0.27:
  * Fix a seek regression in 1.0.26
  * Add metadata read/write for CAF and RF64
  * FIx PAF endian-ness issue
- Update to version 1.0.28
  * Fix buffer overruns in FLAC and ID3 handling code
  (CVE-2017-7585, CVE-2017-7586, bsc#1033054, bsc#1033053)
  * Reduce default header memory requirements
  * Fix detection of Large File Support for 32 bit systems.
- Obsoleted patch:
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493726400">- Fix FLAC buffer overflows (CVE-2017-8361 CVE-2017-8363
  CVE-2017-8365 CVE-2017-8362 bsc#1036944 bsc#1036945 bsc#1036946
  bsc#1036943):
  0001-FLAC-Fix-a-buffer-read-overrun.patch
  0002-src-flac.c-Fix-a-buffer-read-overflow.patch</changelog>
  <changelog author="tiwai@suse.de" date="1497355200">- Fix out-of-bounds read memory access in the aiff_read_chanmap()
  (CVE-2017-6892, bsc#1043978):
  0010-src-aiff.c-Fix-a-buffer-read-overflow.patch</changelog>
  <changelog author="tiwai@suse.de" date="1502193600">- Fix Heap-based Buffer Overflow in the psf_binheader_writef
  (CVE-2017-12562, bsc#1052476):
  0020-src-common.c-Fix-heap-buffer-overflows-when-writing-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: divide-by-zero error exists in the function
  double64_init() in double64.c (CVE-2017-14634, bsc#1059911):
  0030-double64_init-Check-psf-sf.channels-against-upper-bo.patch
- Tentative fix for VUL-0: out of bounds read in the function
  d2alaw_array() in alaw.c (CVE-2017-14245, bsc#1059912) and
  VUL-0: out of bounds read in the function d2ulaw_array() in
  ulaw.c (CVE-2017-14246, bsc#1059913):
  0031-sfe_copy_data_fp-check-value-of-max-variable.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix potential overflow in d2alaw_array() (CVE-2017-17456,
  bsc#1071777):
  libsndfile-CVE-2017-17456-alaw-range-check.patch
- Fix potential overflow in d2ulaw_array() (CVE-2017-17457,
  bsc#1071767):
  libsndfile-CVE-2017-17457-ulaw-range-check.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1530878400">- Fix buffer overflow in sndfile-deinterlace, which isn't really a
  security issue (bsc#1100167, CVE-2018-13139):
  sndfile-deinterlace-channels-check.patch</changelog>
</package>
<package pkgid="777b39ae09326a059741187cb8de6105eb88db09ec529003d00e061699de563d" name="libsndfile-progs" arch="src">
  <version epoch="0" ver="1.0.28" rel="lp150.3.3.1"/>
  <changelog author="meissner@suse.de" date="1223985600">- prototype for memset</changelog>
  <changelog author="olh@suse.de" date="1231329600">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="tiwai@suse.de" date="1234180800">- updated to version 1.0.18
  * Add Ogg/Vorbis support (disabled right now due to vorbis
    version mismatch; SVN version is required)
  * Remove captive FLAC library.
  * Many new features and bug fixes.
  * Generate Win32 and Win64 pre-compiled binaries.
- Dropped libsndfile-octave subpackage (as octave itself is
  dropped from FACTORY)</changelog>
  <changelog author="tiwai@suse.de" date="1236168000">- updated to version 1.0.19:
  * Fix for CVE-2009-0186 (bnc#481769 - VUL-0: libsndfile CAF
    Processing Integer Overflow Vulnerability)
  * Huge number of minor fixes as a result of static analysis
- remove INSTALL file from filelist</changelog>
  <changelog author="tiwai@suse.de" date="1240574400">- built progs subpackage from an individual spec file to cut the
  circular dependency with jack.</changelog>
  <changelog author="ro@suse.de" date="1240833600">- buildfix: tar basedir is libsndfile not libsndfile-progs</changelog>
  <changelog author="tiwai@suse.de" date="1242388800">- updated to version 1.0.20:
  * Fix for potential heap overflow
- enable ogg/vorbis support</changelog>
  <changelog author="dmueller@suse.de" date="1244030400">- explicitely enable sqlite support to avoid random flipping</changelog>
  <changelog author="tiwai@suse.de" date="1281960000">- updated to version 1.0.21:
  * Bunch of minor bug fixes.
  * including VUL-1 divide-by-zero fix (bnc#631379)</changelog>
  <changelog author="davejplater@gmail.com" date="1286539200">- Update to version 1.0.22
- Upstream changes :
  * Bunch of minor bug fixes.</changelog>
  <changelog author="oliver.bengs@opensuse.org" date="1286798400">- Update to version 1.0.23:
- Upstream changes :
  * configure.ac src/version-metadata.rc.in src/Makefile.am
    Add version string resources to the windows DLL.
  * doc/api.html
    Update to add missing SF_FORMAT_* values. Closed Debian bug #545257.
  * NEWS README configure.ac doc/*.html
    Updates for 1.0.23 release.
  * Other minor bug fixes</changelog>
  <changelog author="oliver.bengs@opensuse.org" date="1300881600">- Update to version 1.0.24
- Upstream changes :
  * WAV files are now written with an 18 byte u-law and A-law fmt chunk
  * A document on virtual I/O functionality was added
  * Two new methods were added in sndfile.hh
  * A fix was made for a non-zero SSND offset values on AIFF
  * Minor bug fixes and improvements were done</changelog>
  <changelog author="tiwai@suse.de" date="1310990400">- updated to version 1.0.25:
  Fix for Secunia Advisory SA45125 (CVE-2011-2696, bnc#705681)
  Minor bug fixes and improvements</changelog>
  <changelog author="tiwai@suse.de" date="1311940800">- Fix zero-division in PAF parser (bnc#708988)</changelog>
  <changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="mmeister@suse.com" date="1366027200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="tiwai@suse.de" date="1448280000">- Update to version 1.0.26:
  * Fix for CVE-2014-9496, CVE-2014-9756 and CVE-2015-7805.
  * Add ALAC/CAF support. Minor bug fixes and improvements.
- Drop libsndfile-example-fix.diff</changelog>
  <changelog author="idonmez@suse.com" date="1448366400">- Remove documentation, it belongs to the libsndfile package.</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Update to version 1.0.27:
  * Fix a seek regression in 1.0.26
  * Add metadata read/write for CAF and RF64
  * FIx PAF endian-ness issue
- Update to version 1.0.28
  * Fix buffer overruns in FLAC and ID3 handling code
  (CVE-2017-7585, CVE-2017-7586, bsc#1033054, bsc#1033053)
  * Reduce default header memory requirements
  * Fix detection of Large File Support for 32 bit systems.
- Obsoleted patch:
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch</changelog>
</package>
<package pkgid="e788106d3908d2ca7d2366497bdf708d3ebcf632b1046c2e62b8702eba2551f7" name="libsndfile-progs" arch="x86_64">
  <version epoch="0" ver="1.0.28" rel="lp150.3.3.1"/>
  <changelog author="tiwai@suse.de" date="1236168000">- updated to version 1.0.19:
  * Fix for CVE-2009-0186 (bnc#481769 - VUL-0: libsndfile CAF
    Processing Integer Overflow Vulnerability)
  * Huge number of minor fixes as a result of static analysis
- remove INSTALL file from filelist</changelog>
  <changelog author="tiwai@suse.de" date="1240574400">- built progs subpackage from an individual spec file to cut the
  circular dependency with jack.</changelog>
  <changelog author="ro@suse.de" date="1240833600">- buildfix: tar basedir is libsndfile not libsndfile-progs</changelog>
  <changelog author="tiwai@suse.de" date="1242388800">- updated to version 1.0.20:
  * Fix for potential heap overflow
- enable ogg/vorbis support</changelog>
  <changelog author="dmueller@suse.de" date="1244030400">- explicitely enable sqlite support to avoid random flipping</changelog>
  <changelog author="tiwai@suse.de" date="1281960000">- updated to version 1.0.21:
  * Bunch of minor bug fixes.
  * including VUL-1 divide-by-zero fix (bnc#631379)</changelog>
  <changelog author="davejplater@gmail.com" date="1286539200">- Update to version 1.0.22
- Upstream changes :
  * Bunch of minor bug fixes.</changelog>
  <changelog author="oliver.bengs@opensuse.org" date="1286798400">- Update to version 1.0.23:
- Upstream changes :
  * configure.ac src/version-metadata.rc.in src/Makefile.am
    Add version string resources to the windows DLL.
  * doc/api.html
    Update to add missing SF_FORMAT_* values. Closed Debian bug #545257.
  * NEWS README configure.ac doc/*.html
    Updates for 1.0.23 release.
  * Other minor bug fixes</changelog>
  <changelog author="oliver.bengs@opensuse.org" date="1300881600">- Update to version 1.0.24
- Upstream changes :
  * WAV files are now written with an 18 byte u-law and A-law fmt chunk
  * A document on virtual I/O functionality was added
  * Two new methods were added in sndfile.hh
  * A fix was made for a non-zero SSND offset values on AIFF
  * Minor bug fixes and improvements were done</changelog>
  <changelog author="tiwai@suse.de" date="1310990400">- updated to version 1.0.25:
  Fix for Secunia Advisory SA45125 (CVE-2011-2696, bnc#705681)
  Minor bug fixes and improvements</changelog>
  <changelog author="tiwai@suse.de" date="1311940800">- Fix zero-division in PAF parser (bnc#708988)</changelog>
  <changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="mmeister@suse.com" date="1366027200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="tiwai@suse.de" date="1448280000">- Update to version 1.0.26:
  * Fix for CVE-2014-9496, CVE-2014-9756 and CVE-2015-7805.
  * Add ALAC/CAF support. Minor bug fixes and improvements.
- Drop libsndfile-example-fix.diff</changelog>
  <changelog author="idonmez@suse.com" date="1448366400">- Remove documentation, it belongs to the libsndfile package.</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Update to version 1.0.27:
  * Fix a seek regression in 1.0.26
  * Add metadata read/write for CAF and RF64
  * FIx PAF endian-ness issue
- Update to version 1.0.28
  * Fix buffer overruns in FLAC and ID3 handling code
  (CVE-2017-7585, CVE-2017-7586, bsc#1033054, bsc#1033053)
  * Reduce default header memory requirements
  * Fix detection of Large File Support for 32 bit systems.
- Obsoleted patch:
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch</changelog>
</package>
<package pkgid="e4811d8f3e49ce787cb1d4d72bb23975d2d6cf8f0efabc1aebae698c838d37b6" name="libsndfile1" arch="x86_64">
  <version epoch="0" ver="1.0.28" rel="lp150.3.3.1"/>
  <changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- fix devel dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322136000">- use O_CLOEXEC in library code.</changelog>
  <changelog author="tiwai@suse.de" date="1322136001">- add missing provides/obsoletes for libsndfile -&gt; libsndfile1
  rename (bnc#732565)</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="mmeister@suse.com" date="1366027200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tiwai@suse.de" date="1420632000">- VUL-0: two buffer read overflows in sd2_parse_rsrc_fork()
  (CVE-2014-9496, bnc#911796): backported upstream fix patches
  sndfile-src-sd2.c-Fix-segfault-in-SD2-RSRC-parser.patch
  sndfile-src-sd2.c-Fix-two-potential-buffer-read-overflows.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Cleanup spec file with spec-cleaner
- Add gpg signature
- Remove old ppc provides/obsoletes</changelog>
  <changelog author="tiwai@suse.de" date="1446638400">- VUL-1: libsndfile DoS/divide-by-zero (CVE-2014-9756, bsc#953521):
  libsndfile-src-file_io.c-Prevent-potential-divide-by-zero.patch</changelog>
  <changelog author="tiwai@suse.de" date="1446638401">- VUL-0: libsndfile 1.0.25 heap overflow (CVE-2015-7805, bsc#953516)
  libsndfile-src-common.c-Fix-a-header-parsing-bug.patch
  libsndfile-fix-header-read-CVE-2015-7805.patch
- VUL-0: libsndfile 1.0.25 heap overflow (CVE-2015-8075, bsc#953519)
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch
- Fix the build with SLE11-SP3 due to AM_SILENT_RULE macro</changelog>
  <changelog author="tiwai@suse.de" date="1448280000">- Update to version 1.0.26:
  * Fix for CVE-2014-9496, CVE-2014-9756 and CVE-2015-7805.
  * Add ALAC/CAF support. Minor bug fixes and improvements.
- Refreshed patches:
  sndfile-ocloexec.patch
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch
- Removed obsoleted patches:
  libsndfile-example-fix.diff
  libsndfile-fix-header-read-CVE-2015-7805.patch
  libsndfile-paf-zero-division-fix.diff
  libsndfile-src-common.c-Fix-a-header-parsing-bug.patch
  libsndfile-src-file_io.c-Prevent-potential-divide-by-zero.patch
  sndfile-src-sd2.c-Fix-segfault-in-SD2-RSRC-parser.patch
  sndfile-src-sd2.c-Fix-two-potential-buffer-read-overflows.patch</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1462881600">- Fix spec file to enable builds on non opensuse OS</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Update to version 1.0.27:
  * Fix a seek regression in 1.0.26
  * Add metadata read/write for CAF and RF64
  * FIx PAF endian-ness issue
- Update to version 1.0.28
  * Fix buffer overruns in FLAC and ID3 handling code
  (CVE-2017-7585, CVE-2017-7586, bsc#1033054, bsc#1033053)
  * Reduce default header memory requirements
  * Fix detection of Large File Support for 32 bit systems.
- Obsoleted patch:
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493726400">- Fix FLAC buffer overflows (CVE-2017-8361 CVE-2017-8363
  CVE-2017-8365 CVE-2017-8362 bsc#1036944 bsc#1036945 bsc#1036946
  bsc#1036943):
  0001-FLAC-Fix-a-buffer-read-overrun.patch
  0002-src-flac.c-Fix-a-buffer-read-overflow.patch</changelog>
  <changelog author="tiwai@suse.de" date="1497355200">- Fix out-of-bounds read memory access in the aiff_read_chanmap()
  (CVE-2017-6892, bsc#1043978):
  0010-src-aiff.c-Fix-a-buffer-read-overflow.patch</changelog>
  <changelog author="tiwai@suse.de" date="1502193600">- Fix Heap-based Buffer Overflow in the psf_binheader_writef
  (CVE-2017-12562, bsc#1052476):
  0020-src-common.c-Fix-heap-buffer-overflows-when-writing-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: divide-by-zero error exists in the function
  double64_init() in double64.c (CVE-2017-14634, bsc#1059911):
  0030-double64_init-Check-psf-sf.channels-against-upper-bo.patch
- Tentative fix for VUL-0: out of bounds read in the function
  d2alaw_array() in alaw.c (CVE-2017-14245, bsc#1059912) and
  VUL-0: out of bounds read in the function d2ulaw_array() in
  ulaw.c (CVE-2017-14246, bsc#1059913):
  0031-sfe_copy_data_fp-check-value-of-max-variable.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix potential overflow in d2alaw_array() (CVE-2017-17456,
  bsc#1071777):
  libsndfile-CVE-2017-17456-alaw-range-check.patch
- Fix potential overflow in d2ulaw_array() (CVE-2017-17457,
  bsc#1071767):
  libsndfile-CVE-2017-17457-ulaw-range-check.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1530878400">- Fix buffer overflow in sndfile-deinterlace, which isn't really a
  security issue (bsc#1100167, CVE-2018-13139):
  sndfile-deinterlace-channels-check.patch</changelog>
</package>
<package pkgid="c77ba95ec60be202941799304f75ece4feeef7a956d2c58fa5eec78281b229ff" name="libsndfile1-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.28" rel="lp150.3.3.1"/>
  <changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- fix devel dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322136000">- use O_CLOEXEC in library code.</changelog>
  <changelog author="tiwai@suse.de" date="1322136001">- add missing provides/obsoletes for libsndfile -&gt; libsndfile1
  rename (bnc#732565)</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="mmeister@suse.com" date="1366027200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tiwai@suse.de" date="1420632000">- VUL-0: two buffer read overflows in sd2_parse_rsrc_fork()
  (CVE-2014-9496, bnc#911796): backported upstream fix patches
  sndfile-src-sd2.c-Fix-segfault-in-SD2-RSRC-parser.patch
  sndfile-src-sd2.c-Fix-two-potential-buffer-read-overflows.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Cleanup spec file with spec-cleaner
- Add gpg signature
- Remove old ppc provides/obsoletes</changelog>
  <changelog author="tiwai@suse.de" date="1446638400">- VUL-1: libsndfile DoS/divide-by-zero (CVE-2014-9756, bsc#953521):
  libsndfile-src-file_io.c-Prevent-potential-divide-by-zero.patch</changelog>
  <changelog author="tiwai@suse.de" date="1446638401">- VUL-0: libsndfile 1.0.25 heap overflow (CVE-2015-7805, bsc#953516)
  libsndfile-src-common.c-Fix-a-header-parsing-bug.patch
  libsndfile-fix-header-read-CVE-2015-7805.patch
- VUL-0: libsndfile 1.0.25 heap overflow (CVE-2015-8075, bsc#953519)
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch
- Fix the build with SLE11-SP3 due to AM_SILENT_RULE macro</changelog>
  <changelog author="tiwai@suse.de" date="1448280000">- Update to version 1.0.26:
  * Fix for CVE-2014-9496, CVE-2014-9756 and CVE-2015-7805.
  * Add ALAC/CAF support. Minor bug fixes and improvements.
- Refreshed patches:
  sndfile-ocloexec.patch
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch
- Removed obsoleted patches:
  libsndfile-example-fix.diff
  libsndfile-fix-header-read-CVE-2015-7805.patch
  libsndfile-paf-zero-division-fix.diff
  libsndfile-src-common.c-Fix-a-header-parsing-bug.patch
  libsndfile-src-file_io.c-Prevent-potential-divide-by-zero.patch
  sndfile-src-sd2.c-Fix-segfault-in-SD2-RSRC-parser.patch
  sndfile-src-sd2.c-Fix-two-potential-buffer-read-overflows.patch</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1462881600">- Fix spec file to enable builds on non opensuse OS</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Update to version 1.0.27:
  * Fix a seek regression in 1.0.26
  * Add metadata read/write for CAF and RF64
  * FIx PAF endian-ness issue
- Update to version 1.0.28
  * Fix buffer overruns in FLAC and ID3 handling code
  (CVE-2017-7585, CVE-2017-7586, bsc#1033054, bsc#1033053)
  * Reduce default header memory requirements
  * Fix detection of Large File Support for 32 bit systems.
- Obsoleted patch:
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493726400">- Fix FLAC buffer overflows (CVE-2017-8361 CVE-2017-8363
  CVE-2017-8365 CVE-2017-8362 bsc#1036944 bsc#1036945 bsc#1036946
  bsc#1036943):
  0001-FLAC-Fix-a-buffer-read-overrun.patch
  0002-src-flac.c-Fix-a-buffer-read-overflow.patch</changelog>
  <changelog author="tiwai@suse.de" date="1497355200">- Fix out-of-bounds read memory access in the aiff_read_chanmap()
  (CVE-2017-6892, bsc#1043978):
  0010-src-aiff.c-Fix-a-buffer-read-overflow.patch</changelog>
  <changelog author="tiwai@suse.de" date="1502193600">- Fix Heap-based Buffer Overflow in the psf_binheader_writef
  (CVE-2017-12562, bsc#1052476):
  0020-src-common.c-Fix-heap-buffer-overflows-when-writing-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: divide-by-zero error exists in the function
  double64_init() in double64.c (CVE-2017-14634, bsc#1059911):
  0030-double64_init-Check-psf-sf.channels-against-upper-bo.patch
- Tentative fix for VUL-0: out of bounds read in the function
  d2alaw_array() in alaw.c (CVE-2017-14245, bsc#1059912) and
  VUL-0: out of bounds read in the function d2ulaw_array() in
  ulaw.c (CVE-2017-14246, bsc#1059913):
  0031-sfe_copy_data_fp-check-value-of-max-variable.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix potential overflow in d2alaw_array() (CVE-2017-17456,
  bsc#1071777):
  libsndfile-CVE-2017-17456-alaw-range-check.patch
- Fix potential overflow in d2ulaw_array() (CVE-2017-17457,
  bsc#1071767):
  libsndfile-CVE-2017-17457-ulaw-range-check.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1530878400">- Fix buffer overflow in sndfile-deinterlace, which isn't really a
  security issue (bsc#1100167, CVE-2018-13139):
  sndfile-deinterlace-channels-check.patch</changelog>
</package>
<package pkgid="850b5ebb6f1549ae7386dd56dd3a4f3221e224c88125a2f38026de07989ab8a5" name="libsnmp30-32bit" arch="x86_64">
  <version epoch="0" ver="5.7.3" rel="lp150.6.3.1"/>
  <changelog author="cobexer@gmail.com" date="1417348800">- also stop snmptrapd on removal</changelog>
  <changelog author="abergmann@suse.com" date="1436875200">- update to upstream version 5.7.3
- remove patch that is now present in the upstream release:
  * net-snmp-5.7.2-fix-snmptrapd-remote-denial-of-service.patch
- rename patches to new version number 5.7.3:
  delete:
  * net-snmp-5.7.2-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.2-net-snmp-config-headercheck.patch
  * net-snmp-5.7.2-perl-tk-warning.patch
  * net-snmp-5.7.2-pie.patch
  * net-snmp-5.7.2-socket-path.patch
  * net-snmp-5.7.2-testing-empty-arptable.patch
  * net-snmp-5.7.2-velocity-mib.patch
  add:
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
- add build requirement 'procps' to fix a net-snmp-config error
  (bsc#935863)
- enable DTLS and TLS support (FATE#318789)
  new binary 'snmptls' was added
- add support for hostname netgroups (FATE#316305)
  '@hostgroup' can be specified for multiple hosts
  * net-snmp-5.7.3-netgroups.patch
- suppress network statistics output in snmpstatus (FATE#316289)
  '-Sn' don't print any info about the network
  '-Si' don't print the operational status of network interfaces
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch</changelog>
  <changelog author="jengelh@inai.de" date="1437566400">- Request pkgconfig(libssl) instead of openssl-devel to support
  using LibreSSL as well.</changelog>
  <changelog author="meissner@suse.com" date="1438603200">- Disable MD5 authentication method, disable DES support
  (if something breaks, tell me)</changelog>
  <changelog author="abergmann@suse.com" date="1439467200">- added net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch: to fix
  an incompletely initialized vulnerability within the
  snmp_pdu_parse() function of snmp_api.c.
  (bnc#940188, CVE-2015-5621)</changelog>
  <changelog author="meissner@suse.com" date="1441281600">- reenabled md5 and des, as some tools build against it and need
  the methods :(</changelog>
  <changelog author="astieger@suse.com" date="1455537600">- fix build with GNU grep 2.23, use grep -a to force text matching</changelog>
  <changelog author="abergmann@suse.com" date="1458043200">- make snmpd and snmptrapd log message destination configurable
  for syslog or a dedicated log file. (bsc#695677)
- make snmpd and snmptrapd listening address(es) configurable via
  the sysconfig file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463832000">- Fix build with perl 5.24.0:
  + Add net-snmp-5.7.3-Fix-Makefile.PL.patch: Fix build system
    recursiely loading Makefile.Pl and destroying its internas.
    See https://rt.perl.org/Public/Bug/Display.html?id=125907
  + net-snmp-5.7.3-Remove-U64-typedef.patch: The U64 typedef
    conflicts with a typedef in a Perl header file. Hence remove
    the U64 typedef from the Net-SNMP header files. Backported from
    upstream commit 477b4307ef1.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Fix build with OpenSSL 1.1 (bsc#1042664):
  + Add net-snmp-5.7.3-build-with-openssl-1.1.patch, cumulated
    squash-patch from the following upstream commits:
    bbed6b86e70b5a3c54f14992696f2308a8d79511
    14bb72fd12bf5b68662893f7d8afbc4a8d52a6c8
    9641b472ef01208f92631016e91b0a4a518163f0
    e4c6937483d4a680570cec05388d2e4b291868a6
    b906c60c8a436d7360267a6d242526b33a9aaac8</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
</package>
<package pkgid="802aa3ced9ac133888d5b946d01b43b1b5e599dd0e61c29f17d55dc4f4c669b6" name="libsnmp30" arch="x86_64">
  <version epoch="0" ver="5.7.3" rel="lp150.6.3.1"/>
  <changelog author="cobexer@gmail.com" date="1417348800">- also stop snmptrapd on removal</changelog>
  <changelog author="abergmann@suse.com" date="1436875200">- update to upstream version 5.7.3
- remove patch that is now present in the upstream release:
  * net-snmp-5.7.2-fix-snmptrapd-remote-denial-of-service.patch
- rename patches to new version number 5.7.3:
  delete:
  * net-snmp-5.7.2-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.2-net-snmp-config-headercheck.patch
  * net-snmp-5.7.2-perl-tk-warning.patch
  * net-snmp-5.7.2-pie.patch
  * net-snmp-5.7.2-socket-path.patch
  * net-snmp-5.7.2-testing-empty-arptable.patch
  * net-snmp-5.7.2-velocity-mib.patch
  add:
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
- add build requirement 'procps' to fix a net-snmp-config error
  (bsc#935863)
- enable DTLS and TLS support (FATE#318789)
  new binary 'snmptls' was added
- add support for hostname netgroups (FATE#316305)
  '@hostgroup' can be specified for multiple hosts
  * net-snmp-5.7.3-netgroups.patch
- suppress network statistics output in snmpstatus (FATE#316289)
  '-Sn' don't print any info about the network
  '-Si' don't print the operational status of network interfaces
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch</changelog>
  <changelog author="jengelh@inai.de" date="1437566400">- Request pkgconfig(libssl) instead of openssl-devel to support
  using LibreSSL as well.</changelog>
  <changelog author="meissner@suse.com" date="1438603200">- Disable MD5 authentication method, disable DES support
  (if something breaks, tell me)</changelog>
  <changelog author="abergmann@suse.com" date="1439467200">- added net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch: to fix
  an incompletely initialized vulnerability within the
  snmp_pdu_parse() function of snmp_api.c.
  (bnc#940188, CVE-2015-5621)</changelog>
  <changelog author="meissner@suse.com" date="1441281600">- reenabled md5 and des, as some tools build against it and need
  the methods :(</changelog>
  <changelog author="astieger@suse.com" date="1455537600">- fix build with GNU grep 2.23, use grep -a to force text matching</changelog>
  <changelog author="abergmann@suse.com" date="1458043200">- make snmpd and snmptrapd log message destination configurable
  for syslog or a dedicated log file. (bsc#695677)
- make snmpd and snmptrapd listening address(es) configurable via
  the sysconfig file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463832000">- Fix build with perl 5.24.0:
  + Add net-snmp-5.7.3-Fix-Makefile.PL.patch: Fix build system
    recursiely loading Makefile.Pl and destroying its internas.
    See https://rt.perl.org/Public/Bug/Display.html?id=125907
  + net-snmp-5.7.3-Remove-U64-typedef.patch: The U64 typedef
    conflicts with a typedef in a Perl header file. Hence remove
    the U64 typedef from the Net-SNMP header files. Backported from
    upstream commit 477b4307ef1.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Fix build with OpenSSL 1.1 (bsc#1042664):
  + Add net-snmp-5.7.3-build-with-openssl-1.1.patch, cumulated
    squash-patch from the following upstream commits:
    bbed6b86e70b5a3c54f14992696f2308a8d79511
    14bb72fd12bf5b68662893f7d8afbc4a8d52a6c8
    9641b472ef01208f92631016e91b0a4a518163f0
    e4c6937483d4a680570cec05388d2e4b291868a6
    b906c60c8a436d7360267a6d242526b33a9aaac8</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
</package>
<package pkgid="dcc4832ac47df68f001cdf8713cf15d70eabdaa9aadaab0f943e9a887bab614b" name="libsodium" arch="src">
  <version epoch="0" ver="1.0.16" rel="lp150.3.5.1"/>
  <changelog author="idonmez@suse.com" date="1409227200">- Update to version 0.7.0
  * Added sodium_malloc() and sodium_allocarray() for secure memory
    allocation.
  * ed25519 keys can be converted to curve25519 keys with
    crypto_sign_ed25519_pk_to_curve25519() and
    crypto_sign_ed25519_sk_to_curve25519().
  * aes256 was removed.</changelog>
  <changelog author="idonmez@suse.com" date="1411560000">- Update to version 1.0.0
  * The API and ABI are now stable.
  * crypto_sign() properly works with overlapping regions again.
  * The test suite has been extended.</changelog>
  <changelog author="idonmez@suse.com" date="1421409600">- Update to version 1.0.2
  * The _easy and _detached APIs now support precalculated keys
  * sodium_free() can now be called on regions with PROT_NONE
    protection.
  * Memory allocation functions can now be used on operating systems
    with no memory protection.</changelog>
  <changelog author="mpluskal@suse.com" date="1431518400">- Update to 1.0.3
  * In addition to sodium_bin2hex(), sodium_hex2bin() is now a
    constant-time function.
  * crypto_stream_xsalsa20_ic() has been added.
  * crypto_generichash_statebytes(), crypto_auth_*_statebytes()
    and crypto_hash_*_statebytes() have been added in order to
    retrieve the size of structures keeping states from foreign
    languages.
  * The JavaScript target doesn't require /dev/urandom or an
    external randombytes() implementation any more. Other minor
    Emscripten-related improvements have been made in order to
    support libsodium.js
  * Custom randombytes implementations do not need to provide
    their own implementation of randombytes_uniform() any more.
    randombytes_stir() and randombytes_close() can also be NULL
    pointers if they are not required.
  * On Linux, getrandom(2) is being used instead of directly
    accessing /dev/urandom, if the kernel supports this system
    call.
  * crypto_box_seal() and crypto_box_seal_open() have been added.
  * A solutions for Visual Studio 2015 was added.</changelog>
  <changelog author="idonmez@suse.com" date="1445169600">- Update to 1.0.4
  * Support for AES256-GCM has been added. This requires a CPU with
    the aesni and pclmul extensions, and is accessible via the
    crypto_aead_aes256gcm_*() functions.
  * ChaCha20 with an extended (96 bit) nonce and a 32-bit counter has
    been implemented as crypto_stream_chacha20_ietf(),
    crypto_stream_chacha20_ietf_xor() and crypto_stream_chacha20_ietf_xor_ic().
    An IETF-compatible version of ChaCha20Poly1305 is available as
    crypto_aead_chacha20poly1305_ietf_npubbytes(),
    crypto_aead_chacha20poly1305_ietf_encrypt() and
    crypto_aead_chacha20poly1305_ietf_decrypt().
  * The sodium_increment() helper function has been added, to increment
    an arbitrary large number (such as a nonce).
  * The sodium_compare() helper function has been added, to compare
    arbitrary large numbers (such as nonces, in order to prevent replay attacks).</changelog>
  <changelog author="idonmez@suse.com" date="1445428800">- Now that gcc 5.2 is available on TW, remove the ARMv7 workaround.</changelog>
  <changelog author="idonmez@suse.com" date="1446465600">- Update to 1.0.6
  * Optimized implementations of Blake2 have been added for modern
    Intel platforms. crypto_generichash() is now faster than MD5 and
    SHA1 implementations while being far more secure.
  * The crypto_sign_edwards25519sha512batch_*() functions have been
    tagged as deprecated.
  * sodium_compare() now works as documented, and compares numbers
    in little-endian format instead of behaving like memcmp().
  * sodium_runtime_has_ssse3() and sodium_runtime_has_sse41() have
    been added.</changelog>
  <changelog author="idonmez@suse.com" date="1448971200">- Follow upstream's lead and compile with -flto for &gt; 13.2 on x86
  and x86-64.</changelog>
  <changelog author="idonmez@suse.com" date="1449576000">- Update to version 1.0.7
  * Sandy2x, the fastest Curve25519 implementation ever,
    has been merged in, and is automatically used on CPUs
    supporting the AVX instructions set.
  * An SSE2 optimized implementation of Poly1305 was added,
    and is twice as fast as the portable one.
  * An SSSE3 optimized implementation of ChaCha20 was added,
    and is twice as fast as the portable one.
  * Faster sodium_increment() for common nonce sizes.
  * New helper functions have been added: sodium_is_zero()
    and sodium_add().</changelog>
  <changelog author="idonmez@suse.com" date="1451044800">- Update to version 1.0.8
  * Handle the case where the CPU supports AVX, but we are running
    on an hypervisor with AVX disabled/not supported.
  * Faster (2x) scalarmult_base() when using the ref10 implementation.</changelog>
  <changelog author="idonmez@suse.com" date="1459598400">- Update to version 1.0.9
  * A detached API was added to the ChaCha20-Poly1305 and AES256-GCM
    implementations.
  * The Argon2i password hashing function was added, and is accessible
    directly and through a new, high-level crypto_pwhash API.
    The scrypt function remains available as well.
  * A speed-record AVX2 implementation of BLAKE2b was added.
  * Countermeasures for Ed25519 signatures malleability have been
    added to match the irtf-cfrg-eddsa draft.
  * The HChaCha20 core function was implemented (crypto_core_hchacha20()).
  * No-op stubs were added for all AES256-GCM public functions even
    when compiled on non-Intel platforms.
  * crypt_generichash_blake2b_statebytes() was added.
  * New macros were added for the IETF variant of the ChaCha20-Poly1305
    construction.</changelog>
  <changelog author="idonmez@suse.com" date="1459857600">- Update to version 1.0.10
  * Compile fix update for older GCCs</changelog>
  <changelog author="i@marguerite.su" date="1470484800">- update version 1.0.11
  * sodium_init() is now thread-safe, and can be safely called
    multiple times.
  * Better support for old gcc versions.
  * AVX2 detection was fixed, resulting in faster BLAKE2b hashing
    on platforms where it was not properly detected.
  * The Sandy2x Curve25519 implementation was not as fast as
    expected on some platforms. This has been fixed.
  * The NativeClient target was improved. Most notably, it now
    supports optimized implementations, and uses pepper_49 by default.
  * The library can be compiled with recent Emscripten versions.
    Changes have been made to produce smaller code, and the default
    heap size was reduced in the standard version.
  * Decryption functions can now accept a NULL pointer for the output.
    This checks the MAC without writing the decrypted message.
  * crypto_generichash_final() now returns -1 if called twice.</changelog>
  <changelog author="idonmez@suse.com" date="1489406400">- Update to version 1.0.12
  * Ed25519ph was implemented, adding a multi-part signature API
    (crypto_sign_init(), crypto_sign_update(), crypto_sign_final_*()).
  * New constants and related accessors have been added for Scrypt
    and Argon2.
  * XChaCha20 has been implemented. Like XSalsa20, this construction
    extends the ChaCha20 cipher to accept a 192-bit nonce. This
    makes it safe to use ChaCha20 with random nonces.
  * crypto_secretbox, crypto_box and crypto_aead now offer variants
    leveraging XChaCha20.
  * SHA-2 is about 20% faster, which also gives a speed boost to
    signature and signature verification.
  * AVX2 implementations of Salsa20 and ChaCha20 have been added.
    They are twice as fast as the SSE2 implementations. The speed
    gain is even more significant on Windows, that previously
    didn't use vectorized implementations.
  * New high-level API: crypto_kdf, to easily derive one or more
    subkeys from a master key.
  * Siphash with a 128-bit output has been implemented, and is
    available as crypto_shorthash_siphashx_*.
  * New *_keygen() helpers functions have been added to create
    secret keys for all constructions. This improves code clarity
    and can prevent keys from being partially initialized.
  * A new randombytes_buf_deterministic() function was added to
    deterministically fill a memory region with pseudorandom data.
    This function can especially be useful to write reproducible tests.
  * A preliminary crypto_kx_*() API was added to compute shared
    session keys.
  * AVX2 detection is more reliable.</changelog>
  <changelog author="idonmez@suse.com" date="1506600000">- Update to version 1.0.14
  * Internal consistency checks failing and primitives used with
    dangerous/out-of-bounds/invalid parameters used to call abort(3).
    Now, a custom handler that doesn't return can be set with the
    set_sodium_misuse() function. It still aborts by default or if
    the handler ever returns. This is not a replacement for non-fatal,
    expected runtime errors. This handler will be only called in
    unexpected situations due to potential bugs in the library or in
    language bindings.
  * *_MESSAGEBYTES_MAX macros (and the corresponding _messagebytes_max()
    symbols) have been added to represent the maximum message size that
    can be safely handled by a primitive. Language bindings are
    encouraged to check user inputs against these maximum lengths.
  * The test suite has been extended to cover more edge cases.
  * crypto_sign_ed25519_pk_to_curve25519() now rejects points that
    are not on the curve, or not in the main subgroup.
  * Further changes have been made to ensure that smart compilers
    will not optimize out code that we don't want to be optimized.
  * The sodium_runtime_has_* symbols for CPU features detection are
    now defined as weak symbols, i.e. they can be replaced with an
    application-defined implementation. This can be useful to
    disable AVX* when temperature/power consumption is a concern.
  * crypto_kx_*() now aborts if called with no non-NULL pointers
    to store keys to.
  * SSE2 implementations of crypto_verify_*() have been added.
  * Passwords can be hashed using a specific algorithm with the new
    crypto_pwhash_str_alg() function.
  * Due to popular demand, base64 encoding (sodium_bin2base64())
    and decoding (sodium_base642bin()) have been implemented.
  * A new crypto_secretstream_*() API was added to safely encrypt
    files and multi-part messages.
  * The sodium_pad() and sodium_unpad() helper functions have been
    added in order to add &amp; remove padding.
  * An AVX512 optimized implementation of Argon2 has been added.
  * The crypto_pwhash_str_needs_rehash() function was added to check
    if a password hash string matches the given parameters, or if it
    needs an update.
  Updates from 1.0.13
  * An AVX2 optimized implementation of the Argon2 round function was added.
  * The Argon2id variant of Argon2 has been implemented. The high-level
    crypto_pwhash_str_verify() function automatically detects the
    algorithm and can verify both Argon2i and Argon2id hashed passwords.
    The default algorithm for newly hashed passwords remains Argon2i
    in this version to avoid breaking compatibility with verifiers
    running libsodium &lt;= 1.0.12.
  * A crypto_box_curve25519xchacha20poly1305_seal*() function set was implemented.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1507464000">- Refresh spec-file.
- Update to 1.0.15.
  * Release notes: https://github.com/jedisct1/libsodium/releases/tag/1.0.15
  * The default password hashing algorithm is now Argon2id.
  * The pwhash_str_verify() function can still verify Argon2i hashes without any changes,
    and pwhash() can still compute Argon2i hashes as well.
  * The aes128ctr primitive was removed. It was slow, non-standard, not authenticated,
    and didn't seem to be used by any opensource project.
  * Argon2id required at least 3 passes like Argon2i, despite a minimum of 1
    as defined by the OPSLIMIT_MIN constant. This has been fixed.
  * The secretstream construction was slightly changed to be consistent with forthcoming variants.
  * The Javascript and Webassembly versions have been merged, and the module now returns
    a .ready promise that will resolve after the Webassembly code is loaded and compiled.
  * Note that due to these incompatible changes, the library version major was bumped up.</changelog>
  <changelog author="idonmez@suse.com" date="1513166400">- Update to 1.0.16
  * Signatures computations and verifications are now way faster
    on 64-bit platforms with compilers supporting 128-bit
    arithmetic (gcc, clang, icc). This includes the WebAssembly
    target.
  * New low-level APIs for computations over edwards25519:
    crypto_scalarmult_ed25519(), crypto_scalarmult_ed25519_base(),
    crypto_core_ed25519_is_valid_point(), crypto_core_ed25519_add(),
    crypto_core_ed25519_sub() and crypto_core_ed25519_from_uniform()
    (elligator representative to point).
  * crypto_sign_open(), crypto_sign_verify_detached() and
    crypto_sign_edwards25519sha512batch_open` now reject public
    keys in non-canonical form in addition to low-order points.
  * The library can be built with ED25519_NONDETERMINISTIC defined
    in order to use synthetic nonces for EdDSA. This is disabled
    by default.
  * sodium_stackzero() was added to wipe content off the stack.
  * The Salsa20-based PRNG example is now thread-safe on platforms
    with support for thread-local storage, optionally mixes bits
    from RDRAND.
  * Argon2 and scrypt are slightly faster on Linux.</changelog>
  <changelog author="adam.majer@suse.de" date="1514548800">- Enable verbose make output when building tests</changelog>
  <changelog author="mpluskal@suse.com" date="1531396800">- Add gpg signature
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Add baselibs.conf: build libsodium23-32bit, which is required by
  zeromq's -32bit packages.</changelog>
</package>
<package pkgid="8e5b666773648f3481a677a9ee75a5809c7444823c74d17428b8efcd5d7b6044" name="libsodium-devel" arch="x86_64">
  <version epoch="0" ver="1.0.16" rel="lp150.3.5.1"/>
  <changelog author="idonmez@suse.com" date="1409227200">- Update to version 0.7.0
  * Added sodium_malloc() and sodium_allocarray() for secure memory
    allocation.
  * ed25519 keys can be converted to curve25519 keys with
    crypto_sign_ed25519_pk_to_curve25519() and
    crypto_sign_ed25519_sk_to_curve25519().
  * aes256 was removed.</changelog>
  <changelog author="idonmez@suse.com" date="1411560000">- Update to version 1.0.0
  * The API and ABI are now stable.
  * crypto_sign() properly works with overlapping regions again.
  * The test suite has been extended.</changelog>
  <changelog author="idonmez@suse.com" date="1421409600">- Update to version 1.0.2
  * The _easy and _detached APIs now support precalculated keys
  * sodium_free() can now be called on regions with PROT_NONE
    protection.
  * Memory allocation functions can now be used on operating systems
    with no memory protection.</changelog>
  <changelog author="mpluskal@suse.com" date="1431518400">- Update to 1.0.3
  * In addition to sodium_bin2hex(), sodium_hex2bin() is now a
    constant-time function.
  * crypto_stream_xsalsa20_ic() has been added.
  * crypto_generichash_statebytes(), crypto_auth_*_statebytes()
    and crypto_hash_*_statebytes() have been added in order to
    retrieve the size of structures keeping states from foreign
    languages.
  * The JavaScript target doesn't require /dev/urandom or an
    external randombytes() implementation any more. Other minor
    Emscripten-related improvements have been made in order to
    support libsodium.js
  * Custom randombytes implementations do not need to provide
    their own implementation of randombytes_uniform() any more.
    randombytes_stir() and randombytes_close() can also be NULL
    pointers if they are not required.
  * On Linux, getrandom(2) is being used instead of directly
    accessing /dev/urandom, if the kernel supports this system
    call.
  * crypto_box_seal() and crypto_box_seal_open() have been added.
  * A solutions for Visual Studio 2015 was added.</changelog>
  <changelog author="idonmez@suse.com" date="1445169600">- Update to 1.0.4
  * Support for AES256-GCM has been added. This requires a CPU with
    the aesni and pclmul extensions, and is accessible via the
    crypto_aead_aes256gcm_*() functions.
  * ChaCha20 with an extended (96 bit) nonce and a 32-bit counter has
    been implemented as crypto_stream_chacha20_ietf(),
    crypto_stream_chacha20_ietf_xor() and crypto_stream_chacha20_ietf_xor_ic().
    An IETF-compatible version of ChaCha20Poly1305 is available as
    crypto_aead_chacha20poly1305_ietf_npubbytes(),
    crypto_aead_chacha20poly1305_ietf_encrypt() and
    crypto_aead_chacha20poly1305_ietf_decrypt().
  * The sodium_increment() helper function has been added, to increment
    an arbitrary large number (such as a nonce).
  * The sodium_compare() helper function has been added, to compare
    arbitrary large numbers (such as nonces, in order to prevent replay attacks).</changelog>
  <changelog author="idonmez@suse.com" date="1445428800">- Now that gcc 5.2 is available on TW, remove the ARMv7 workaround.</changelog>
  <changelog author="idonmez@suse.com" date="1446465600">- Update to 1.0.6
  * Optimized implementations of Blake2 have been added for modern
    Intel platforms. crypto_generichash() is now faster than MD5 and
    SHA1 implementations while being far more secure.
  * The crypto_sign_edwards25519sha512batch_*() functions have been
    tagged as deprecated.
  * sodium_compare() now works as documented, and compares numbers
    in little-endian format instead of behaving like memcmp().
  * sodium_runtime_has_ssse3() and sodium_runtime_has_sse41() have
    been added.</changelog>
  <changelog author="idonmez@suse.com" date="1448971200">- Follow upstream's lead and compile with -flto for &gt; 13.2 on x86
  and x86-64.</changelog>
  <changelog author="idonmez@suse.com" date="1449576000">- Update to version 1.0.7
  * Sandy2x, the fastest Curve25519 implementation ever,
    has been merged in, and is automatically used on CPUs
    supporting the AVX instructions set.
  * An SSE2 optimized implementation of Poly1305 was added,
    and is twice as fast as the portable one.
  * An SSSE3 optimized implementation of ChaCha20 was added,
    and is twice as fast as the portable one.
  * Faster sodium_increment() for common nonce sizes.
  * New helper functions have been added: sodium_is_zero()
    and sodium_add().</changelog>
  <changelog author="idonmez@suse.com" date="1451044800">- Update to version 1.0.8
  * Handle the case where the CPU supports AVX, but we are running
    on an hypervisor with AVX disabled/not supported.
  * Faster (2x) scalarmult_base() when using the ref10 implementation.</changelog>
  <changelog author="idonmez@suse.com" date="1459598400">- Update to version 1.0.9
  * A detached API was added to the ChaCha20-Poly1305 and AES256-GCM
    implementations.
  * The Argon2i password hashing function was added, and is accessible
    directly and through a new, high-level crypto_pwhash API.
    The scrypt function remains available as well.
  * A speed-record AVX2 implementation of BLAKE2b was added.
  * Countermeasures for Ed25519 signatures malleability have been
    added to match the irtf-cfrg-eddsa draft.
  * The HChaCha20 core function was implemented (crypto_core_hchacha20()).
  * No-op stubs were added for all AES256-GCM public functions even
    when compiled on non-Intel platforms.
  * crypt_generichash_blake2b_statebytes() was added.
  * New macros were added for the IETF variant of the ChaCha20-Poly1305
    construction.</changelog>
  <changelog author="idonmez@suse.com" date="1459857600">- Update to version 1.0.10
  * Compile fix update for older GCCs</changelog>
  <changelog author="i@marguerite.su" date="1470484800">- update version 1.0.11
  * sodium_init() is now thread-safe, and can be safely called
    multiple times.
  * Better support for old gcc versions.
  * AVX2 detection was fixed, resulting in faster BLAKE2b hashing
    on platforms where it was not properly detected.
  * The Sandy2x Curve25519 implementation was not as fast as
    expected on some platforms. This has been fixed.
  * The NativeClient target was improved. Most notably, it now
    supports optimized implementations, and uses pepper_49 by default.
  * The library can be compiled with recent Emscripten versions.
    Changes have been made to produce smaller code, and the default
    heap size was reduced in the standard version.
  * Decryption functions can now accept a NULL pointer for the output.
    This checks the MAC without writing the decrypted message.
  * crypto_generichash_final() now returns -1 if called twice.</changelog>
  <changelog author="idonmez@suse.com" date="1489406400">- Update to version 1.0.12
  * Ed25519ph was implemented, adding a multi-part signature API
    (crypto_sign_init(), crypto_sign_update(), crypto_sign_final_*()).
  * New constants and related accessors have been added for Scrypt
    and Argon2.
  * XChaCha20 has been implemented. Like XSalsa20, this construction
    extends the ChaCha20 cipher to accept a 192-bit nonce. This
    makes it safe to use ChaCha20 with random nonces.
  * crypto_secretbox, crypto_box and crypto_aead now offer variants
    leveraging XChaCha20.
  * SHA-2 is about 20% faster, which also gives a speed boost to
    signature and signature verification.
  * AVX2 implementations of Salsa20 and ChaCha20 have been added.
    They are twice as fast as the SSE2 implementations. The speed
    gain is even more significant on Windows, that previously
    didn't use vectorized implementations.
  * New high-level API: crypto_kdf, to easily derive one or more
    subkeys from a master key.
  * Siphash with a 128-bit output has been implemented, and is
    available as crypto_shorthash_siphashx_*.
  * New *_keygen() helpers functions have been added to create
    secret keys for all constructions. This improves code clarity
    and can prevent keys from being partially initialized.
  * A new randombytes_buf_deterministic() function was added to
    deterministically fill a memory region with pseudorandom data.
    This function can especially be useful to write reproducible tests.
  * A preliminary crypto_kx_*() API was added to compute shared
    session keys.
  * AVX2 detection is more reliable.</changelog>
  <changelog author="idonmez@suse.com" date="1506600000">- Update to version 1.0.14
  * Internal consistency checks failing and primitives used with
    dangerous/out-of-bounds/invalid parameters used to call abort(3).
    Now, a custom handler that doesn't return can be set with the
    set_sodium_misuse() function. It still aborts by default or if
    the handler ever returns. This is not a replacement for non-fatal,
    expected runtime errors. This handler will be only called in
    unexpected situations due to potential bugs in the library or in
    language bindings.
  * *_MESSAGEBYTES_MAX macros (and the corresponding _messagebytes_max()
    symbols) have been added to represent the maximum message size that
    can be safely handled by a primitive. Language bindings are
    encouraged to check user inputs against these maximum lengths.
  * The test suite has been extended to cover more edge cases.
  * crypto_sign_ed25519_pk_to_curve25519() now rejects points that
    are not on the curve, or not in the main subgroup.
  * Further changes have been made to ensure that smart compilers
    will not optimize out code that we don't want to be optimized.
  * The sodium_runtime_has_* symbols for CPU features detection are
    now defined as weak symbols, i.e. they can be replaced with an
    application-defined implementation. This can be useful to
    disable AVX* when temperature/power consumption is a concern.
  * crypto_kx_*() now aborts if called with no non-NULL pointers
    to store keys to.
  * SSE2 implementations of crypto_verify_*() have been added.
  * Passwords can be hashed using a specific algorithm with the new
    crypto_pwhash_str_alg() function.
  * Due to popular demand, base64 encoding (sodium_bin2base64())
    and decoding (sodium_base642bin()) have been implemented.
  * A new crypto_secretstream_*() API was added to safely encrypt
    files and multi-part messages.
  * The sodium_pad() and sodium_unpad() helper functions have been
    added in order to add &amp; remove padding.
  * An AVX512 optimized implementation of Argon2 has been added.
  * The crypto_pwhash_str_needs_rehash() function was added to check
    if a password hash string matches the given parameters, or if it
    needs an update.
  Updates from 1.0.13
  * An AVX2 optimized implementation of the Argon2 round function was added.
  * The Argon2id variant of Argon2 has been implemented. The high-level
    crypto_pwhash_str_verify() function automatically detects the
    algorithm and can verify both Argon2i and Argon2id hashed passwords.
    The default algorithm for newly hashed passwords remains Argon2i
    in this version to avoid breaking compatibility with verifiers
    running libsodium &lt;= 1.0.12.
  * A crypto_box_curve25519xchacha20poly1305_seal*() function set was implemented.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1507464000">- Refresh spec-file.
- Update to 1.0.15.
  * Release notes: https://github.com/jedisct1/libsodium/releases/tag/1.0.15
  * The default password hashing algorithm is now Argon2id.
  * The pwhash_str_verify() function can still verify Argon2i hashes without any changes,
    and pwhash() can still compute Argon2i hashes as well.
  * The aes128ctr primitive was removed. It was slow, non-standard, not authenticated,
    and didn't seem to be used by any opensource project.
  * Argon2id required at least 3 passes like Argon2i, despite a minimum of 1
    as defined by the OPSLIMIT_MIN constant. This has been fixed.
  * The secretstream construction was slightly changed to be consistent with forthcoming variants.
  * The Javascript and Webassembly versions have been merged, and the module now returns
    a .ready promise that will resolve after the Webassembly code is loaded and compiled.
  * Note that due to these incompatible changes, the library version major was bumped up.</changelog>
  <changelog author="idonmez@suse.com" date="1513166400">- Update to 1.0.16
  * Signatures computations and verifications are now way faster
    on 64-bit platforms with compilers supporting 128-bit
    arithmetic (gcc, clang, icc). This includes the WebAssembly
    target.
  * New low-level APIs for computations over edwards25519:
    crypto_scalarmult_ed25519(), crypto_scalarmult_ed25519_base(),
    crypto_core_ed25519_is_valid_point(), crypto_core_ed25519_add(),
    crypto_core_ed25519_sub() and crypto_core_ed25519_from_uniform()
    (elligator representative to point).
  * crypto_sign_open(), crypto_sign_verify_detached() and
    crypto_sign_edwards25519sha512batch_open` now reject public
    keys in non-canonical form in addition to low-order points.
  * The library can be built with ED25519_NONDETERMINISTIC defined
    in order to use synthetic nonces for EdDSA. This is disabled
    by default.
  * sodium_stackzero() was added to wipe content off the stack.
  * The Salsa20-based PRNG example is now thread-safe on platforms
    with support for thread-local storage, optionally mixes bits
    from RDRAND.
  * Argon2 and scrypt are slightly faster on Linux.</changelog>
  <changelog author="adam.majer@suse.de" date="1514548800">- Enable verbose make output when building tests</changelog>
  <changelog author="mpluskal@suse.com" date="1531396800">- Add gpg signature
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Add baselibs.conf: build libsodium23-32bit, which is required by
  zeromq's -32bit packages.</changelog>
</package>
<package pkgid="c194fc225f1a9304c6fa86c6f8c2ff6d445582585bf930f02f6cd9fd0050f47e" name="libsodium23" arch="x86_64">
  <version epoch="0" ver="1.0.16" rel="lp150.3.5.1"/>
  <changelog author="idonmez@suse.com" date="1409227200">- Update to version 0.7.0
  * Added sodium_malloc() and sodium_allocarray() for secure memory
    allocation.
  * ed25519 keys can be converted to curve25519 keys with
    crypto_sign_ed25519_pk_to_curve25519() and
    crypto_sign_ed25519_sk_to_curve25519().
  * aes256 was removed.</changelog>
  <changelog author="idonmez@suse.com" date="1411560000">- Update to version 1.0.0
  * The API and ABI are now stable.
  * crypto_sign() properly works with overlapping regions again.
  * The test suite has been extended.</changelog>
  <changelog author="idonmez@suse.com" date="1421409600">- Update to version 1.0.2
  * The _easy and _detached APIs now support precalculated keys
  * sodium_free() can now be called on regions with PROT_NONE
    protection.
  * Memory allocation functions can now be used on operating systems
    with no memory protection.</changelog>
  <changelog author="mpluskal@suse.com" date="1431518400">- Update to 1.0.3
  * In addition to sodium_bin2hex(), sodium_hex2bin() is now a
    constant-time function.
  * crypto_stream_xsalsa20_ic() has been added.
  * crypto_generichash_statebytes(), crypto_auth_*_statebytes()
    and crypto_hash_*_statebytes() have been added in order to
    retrieve the size of structures keeping states from foreign
    languages.
  * The JavaScript target doesn't require /dev/urandom or an
    external randombytes() implementation any more. Other minor
    Emscripten-related improvements have been made in order to
    support libsodium.js
  * Custom randombytes implementations do not need to provide
    their own implementation of randombytes_uniform() any more.
    randombytes_stir() and randombytes_close() can also be NULL
    pointers if they are not required.
  * On Linux, getrandom(2) is being used instead of directly
    accessing /dev/urandom, if the kernel supports this system
    call.
  * crypto_box_seal() and crypto_box_seal_open() have been added.
  * A solutions for Visual Studio 2015 was added.</changelog>
  <changelog author="idonmez@suse.com" date="1445169600">- Update to 1.0.4
  * Support for AES256-GCM has been added. This requires a CPU with
    the aesni and pclmul extensions, and is accessible via the
    crypto_aead_aes256gcm_*() functions.
  * ChaCha20 with an extended (96 bit) nonce and a 32-bit counter has
    been implemented as crypto_stream_chacha20_ietf(),
    crypto_stream_chacha20_ietf_xor() and crypto_stream_chacha20_ietf_xor_ic().
    An IETF-compatible version of ChaCha20Poly1305 is available as
    crypto_aead_chacha20poly1305_ietf_npubbytes(),
    crypto_aead_chacha20poly1305_ietf_encrypt() and
    crypto_aead_chacha20poly1305_ietf_decrypt().
  * The sodium_increment() helper function has been added, to increment
    an arbitrary large number (such as a nonce).
  * The sodium_compare() helper function has been added, to compare
    arbitrary large numbers (such as nonces, in order to prevent replay attacks).</changelog>
  <changelog author="idonmez@suse.com" date="1445428800">- Now that gcc 5.2 is available on TW, remove the ARMv7 workaround.</changelog>
  <changelog author="idonmez@suse.com" date="1446465600">- Update to 1.0.6
  * Optimized implementations of Blake2 have been added for modern
    Intel platforms. crypto_generichash() is now faster than MD5 and
    SHA1 implementations while being far more secure.
  * The crypto_sign_edwards25519sha512batch_*() functions have been
    tagged as deprecated.
  * sodium_compare() now works as documented, and compares numbers
    in little-endian format instead of behaving like memcmp().
  * sodium_runtime_has_ssse3() and sodium_runtime_has_sse41() have
    been added.</changelog>
  <changelog author="idonmez@suse.com" date="1448971200">- Follow upstream's lead and compile with -flto for &gt; 13.2 on x86
  and x86-64.</changelog>
  <changelog author="idonmez@suse.com" date="1449576000">- Update to version 1.0.7
  * Sandy2x, the fastest Curve25519 implementation ever,
    has been merged in, and is automatically used on CPUs
    supporting the AVX instructions set.
  * An SSE2 optimized implementation of Poly1305 was added,
    and is twice as fast as the portable one.
  * An SSSE3 optimized implementation of ChaCha20 was added,
    and is twice as fast as the portable one.
  * Faster sodium_increment() for common nonce sizes.
  * New helper functions have been added: sodium_is_zero()
    and sodium_add().</changelog>
  <changelog author="idonmez@suse.com" date="1451044800">- Update to version 1.0.8
  * Handle the case where the CPU supports AVX, but we are running
    on an hypervisor with AVX disabled/not supported.
  * Faster (2x) scalarmult_base() when using the ref10 implementation.</changelog>
  <changelog author="idonmez@suse.com" date="1459598400">- Update to version 1.0.9
  * A detached API was added to the ChaCha20-Poly1305 and AES256-GCM
    implementations.
  * The Argon2i password hashing function was added, and is accessible
    directly and through a new, high-level crypto_pwhash API.
    The scrypt function remains available as well.
  * A speed-record AVX2 implementation of BLAKE2b was added.
  * Countermeasures for Ed25519 signatures malleability have been
    added to match the irtf-cfrg-eddsa draft.
  * The HChaCha20 core function was implemented (crypto_core_hchacha20()).
  * No-op stubs were added for all AES256-GCM public functions even
    when compiled on non-Intel platforms.
  * crypt_generichash_blake2b_statebytes() was added.
  * New macros were added for the IETF variant of the ChaCha20-Poly1305
    construction.</changelog>
  <changelog author="idonmez@suse.com" date="1459857600">- Update to version 1.0.10
  * Compile fix update for older GCCs</changelog>
  <changelog author="i@marguerite.su" date="1470484800">- update version 1.0.11
  * sodium_init() is now thread-safe, and can be safely called
    multiple times.
  * Better support for old gcc versions.
  * AVX2 detection was fixed, resulting in faster BLAKE2b hashing
    on platforms where it was not properly detected.
  * The Sandy2x Curve25519 implementation was not as fast as
    expected on some platforms. This has been fixed.
  * The NativeClient target was improved. Most notably, it now
    supports optimized implementations, and uses pepper_49 by default.
  * The library can be compiled with recent Emscripten versions.
    Changes have been made to produce smaller code, and the default
    heap size was reduced in the standard version.
  * Decryption functions can now accept a NULL pointer for the output.
    This checks the MAC without writing the decrypted message.
  * crypto_generichash_final() now returns -1 if called twice.</changelog>
  <changelog author="idonmez@suse.com" date="1489406400">- Update to version 1.0.12
  * Ed25519ph was implemented, adding a multi-part signature API
    (crypto_sign_init(), crypto_sign_update(), crypto_sign_final_*()).
  * New constants and related accessors have been added for Scrypt
    and Argon2.
  * XChaCha20 has been implemented. Like XSalsa20, this construction
    extends the ChaCha20 cipher to accept a 192-bit nonce. This
    makes it safe to use ChaCha20 with random nonces.
  * crypto_secretbox, crypto_box and crypto_aead now offer variants
    leveraging XChaCha20.
  * SHA-2 is about 20% faster, which also gives a speed boost to
    signature and signature verification.
  * AVX2 implementations of Salsa20 and ChaCha20 have been added.
    They are twice as fast as the SSE2 implementations. The speed
    gain is even more significant on Windows, that previously
    didn't use vectorized implementations.
  * New high-level API: crypto_kdf, to easily derive one or more
    subkeys from a master key.
  * Siphash with a 128-bit output has been implemented, and is
    available as crypto_shorthash_siphashx_*.
  * New *_keygen() helpers functions have been added to create
    secret keys for all constructions. This improves code clarity
    and can prevent keys from being partially initialized.
  * A new randombytes_buf_deterministic() function was added to
    deterministically fill a memory region with pseudorandom data.
    This function can especially be useful to write reproducible tests.
  * A preliminary crypto_kx_*() API was added to compute shared
    session keys.
  * AVX2 detection is more reliable.</changelog>
  <changelog author="idonmez@suse.com" date="1506600000">- Update to version 1.0.14
  * Internal consistency checks failing and primitives used with
    dangerous/out-of-bounds/invalid parameters used to call abort(3).
    Now, a custom handler that doesn't return can be set with the
    set_sodium_misuse() function. It still aborts by default or if
    the handler ever returns. This is not a replacement for non-fatal,
    expected runtime errors. This handler will be only called in
    unexpected situations due to potential bugs in the library or in
    language bindings.
  * *_MESSAGEBYTES_MAX macros (and the corresponding _messagebytes_max()
    symbols) have been added to represent the maximum message size that
    can be safely handled by a primitive. Language bindings are
    encouraged to check user inputs against these maximum lengths.
  * The test suite has been extended to cover more edge cases.
  * crypto_sign_ed25519_pk_to_curve25519() now rejects points that
    are not on the curve, or not in the main subgroup.
  * Further changes have been made to ensure that smart compilers
    will not optimize out code that we don't want to be optimized.
  * The sodium_runtime_has_* symbols for CPU features detection are
    now defined as weak symbols, i.e. they can be replaced with an
    application-defined implementation. This can be useful to
    disable AVX* when temperature/power consumption is a concern.
  * crypto_kx_*() now aborts if called with no non-NULL pointers
    to store keys to.
  * SSE2 implementations of crypto_verify_*() have been added.
  * Passwords can be hashed using a specific algorithm with the new
    crypto_pwhash_str_alg() function.
  * Due to popular demand, base64 encoding (sodium_bin2base64())
    and decoding (sodium_base642bin()) have been implemented.
  * A new crypto_secretstream_*() API was added to safely encrypt
    files and multi-part messages.
  * The sodium_pad() and sodium_unpad() helper functions have been
    added in order to add &amp; remove padding.
  * An AVX512 optimized implementation of Argon2 has been added.
  * The crypto_pwhash_str_needs_rehash() function was added to check
    if a password hash string matches the given parameters, or if it
    needs an update.
  Updates from 1.0.13
  * An AVX2 optimized implementation of the Argon2 round function was added.
  * The Argon2id variant of Argon2 has been implemented. The high-level
    crypto_pwhash_str_verify() function automatically detects the
    algorithm and can verify both Argon2i and Argon2id hashed passwords.
    The default algorithm for newly hashed passwords remains Argon2i
    in this version to avoid breaking compatibility with verifiers
    running libsodium &lt;= 1.0.12.
  * A crypto_box_curve25519xchacha20poly1305_seal*() function set was implemented.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1507464000">- Refresh spec-file.
- Update to 1.0.15.
  * Release notes: https://github.com/jedisct1/libsodium/releases/tag/1.0.15
  * The default password hashing algorithm is now Argon2id.
  * The pwhash_str_verify() function can still verify Argon2i hashes without any changes,
    and pwhash() can still compute Argon2i hashes as well.
  * The aes128ctr primitive was removed. It was slow, non-standard, not authenticated,
    and didn't seem to be used by any opensource project.
  * Argon2id required at least 3 passes like Argon2i, despite a minimum of 1
    as defined by the OPSLIMIT_MIN constant. This has been fixed.
  * The secretstream construction was slightly changed to be consistent with forthcoming variants.
  * The Javascript and Webassembly versions have been merged, and the module now returns
    a .ready promise that will resolve after the Webassembly code is loaded and compiled.
  * Note that due to these incompatible changes, the library version major was bumped up.</changelog>
  <changelog author="idonmez@suse.com" date="1513166400">- Update to 1.0.16
  * Signatures computations and verifications are now way faster
    on 64-bit platforms with compilers supporting 128-bit
    arithmetic (gcc, clang, icc). This includes the WebAssembly
    target.
  * New low-level APIs for computations over edwards25519:
    crypto_scalarmult_ed25519(), crypto_scalarmult_ed25519_base(),
    crypto_core_ed25519_is_valid_point(), crypto_core_ed25519_add(),
    crypto_core_ed25519_sub() and crypto_core_ed25519_from_uniform()
    (elligator representative to point).
  * crypto_sign_open(), crypto_sign_verify_detached() and
    crypto_sign_edwards25519sha512batch_open` now reject public
    keys in non-canonical form in addition to low-order points.
  * The library can be built with ED25519_NONDETERMINISTIC defined
    in order to use synthetic nonces for EdDSA. This is disabled
    by default.
  * sodium_stackzero() was added to wipe content off the stack.
  * The Salsa20-based PRNG example is now thread-safe on platforms
    with support for thread-local storage, optionally mixes bits
    from RDRAND.
  * Argon2 and scrypt are slightly faster on Linux.</changelog>
  <changelog author="adam.majer@suse.de" date="1514548800">- Enable verbose make output when building tests</changelog>
  <changelog author="mpluskal@suse.com" date="1531396800">- Add gpg signature
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Add baselibs.conf: build libsodium23-32bit, which is required by
  zeromq's -32bit packages.</changelog>
</package>
<package pkgid="0df4ba4205852ed74dbe3da38f51ccb8e4510800291739774ac18d02a42b74dc" name="libsodium23-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.16" rel="lp150.3.5.1"/>
  <changelog author="idonmez@suse.com" date="1409227200">- Update to version 0.7.0
  * Added sodium_malloc() and sodium_allocarray() for secure memory
    allocation.
  * ed25519 keys can be converted to curve25519 keys with
    crypto_sign_ed25519_pk_to_curve25519() and
    crypto_sign_ed25519_sk_to_curve25519().
  * aes256 was removed.</changelog>
  <changelog author="idonmez@suse.com" date="1411560000">- Update to version 1.0.0
  * The API and ABI are now stable.
  * crypto_sign() properly works with overlapping regions again.
  * The test suite has been extended.</changelog>
  <changelog author="idonmez@suse.com" date="1421409600">- Update to version 1.0.2
  * The _easy and _detached APIs now support precalculated keys
  * sodium_free() can now be called on regions with PROT_NONE
    protection.
  * Memory allocation functions can now be used on operating systems
    with no memory protection.</changelog>
  <changelog author="mpluskal@suse.com" date="1431518400">- Update to 1.0.3
  * In addition to sodium_bin2hex(), sodium_hex2bin() is now a
    constant-time function.
  * crypto_stream_xsalsa20_ic() has been added.
  * crypto_generichash_statebytes(), crypto_auth_*_statebytes()
    and crypto_hash_*_statebytes() have been added in order to
    retrieve the size of structures keeping states from foreign
    languages.
  * The JavaScript target doesn't require /dev/urandom or an
    external randombytes() implementation any more. Other minor
    Emscripten-related improvements have been made in order to
    support libsodium.js
  * Custom randombytes implementations do not need to provide
    their own implementation of randombytes_uniform() any more.
    randombytes_stir() and randombytes_close() can also be NULL
    pointers if they are not required.
  * On Linux, getrandom(2) is being used instead of directly
    accessing /dev/urandom, if the kernel supports this system
    call.
  * crypto_box_seal() and crypto_box_seal_open() have been added.
  * A solutions for Visual Studio 2015 was added.</changelog>
  <changelog author="idonmez@suse.com" date="1445169600">- Update to 1.0.4
  * Support for AES256-GCM has been added. This requires a CPU with
    the aesni and pclmul extensions, and is accessible via the
    crypto_aead_aes256gcm_*() functions.
  * ChaCha20 with an extended (96 bit) nonce and a 32-bit counter has
    been implemented as crypto_stream_chacha20_ietf(),
    crypto_stream_chacha20_ietf_xor() and crypto_stream_chacha20_ietf_xor_ic().
    An IETF-compatible version of ChaCha20Poly1305 is available as
    crypto_aead_chacha20poly1305_ietf_npubbytes(),
    crypto_aead_chacha20poly1305_ietf_encrypt() and
    crypto_aead_chacha20poly1305_ietf_decrypt().
  * The sodium_increment() helper function has been added, to increment
    an arbitrary large number (such as a nonce).
  * The sodium_compare() helper function has been added, to compare
    arbitrary large numbers (such as nonces, in order to prevent replay attacks).</changelog>
  <changelog author="idonmez@suse.com" date="1445428800">- Now that gcc 5.2 is available on TW, remove the ARMv7 workaround.</changelog>
  <changelog author="idonmez@suse.com" date="1446465600">- Update to 1.0.6
  * Optimized implementations of Blake2 have been added for modern
    Intel platforms. crypto_generichash() is now faster than MD5 and
    SHA1 implementations while being far more secure.
  * The crypto_sign_edwards25519sha512batch_*() functions have been
    tagged as deprecated.
  * sodium_compare() now works as documented, and compares numbers
    in little-endian format instead of behaving like memcmp().
  * sodium_runtime_has_ssse3() and sodium_runtime_has_sse41() have
    been added.</changelog>
  <changelog author="idonmez@suse.com" date="1448971200">- Follow upstream's lead and compile with -flto for &gt; 13.2 on x86
  and x86-64.</changelog>
  <changelog author="idonmez@suse.com" date="1449576000">- Update to version 1.0.7
  * Sandy2x, the fastest Curve25519 implementation ever,
    has been merged in, and is automatically used on CPUs
    supporting the AVX instructions set.
  * An SSE2 optimized implementation of Poly1305 was added,
    and is twice as fast as the portable one.
  * An SSSE3 optimized implementation of ChaCha20 was added,
    and is twice as fast as the portable one.
  * Faster sodium_increment() for common nonce sizes.
  * New helper functions have been added: sodium_is_zero()
    and sodium_add().</changelog>
  <changelog author="idonmez@suse.com" date="1451044800">- Update to version 1.0.8
  * Handle the case where the CPU supports AVX, but we are running
    on an hypervisor with AVX disabled/not supported.
  * Faster (2x) scalarmult_base() when using the ref10 implementation.</changelog>
  <changelog author="idonmez@suse.com" date="1459598400">- Update to version 1.0.9
  * A detached API was added to the ChaCha20-Poly1305 and AES256-GCM
    implementations.
  * The Argon2i password hashing function was added, and is accessible
    directly and through a new, high-level crypto_pwhash API.
    The scrypt function remains available as well.
  * A speed-record AVX2 implementation of BLAKE2b was added.
  * Countermeasures for Ed25519 signatures malleability have been
    added to match the irtf-cfrg-eddsa draft.
  * The HChaCha20 core function was implemented (crypto_core_hchacha20()).
  * No-op stubs were added for all AES256-GCM public functions even
    when compiled on non-Intel platforms.
  * crypt_generichash_blake2b_statebytes() was added.
  * New macros were added for the IETF variant of the ChaCha20-Poly1305
    construction.</changelog>
  <changelog author="idonmez@suse.com" date="1459857600">- Update to version 1.0.10
  * Compile fix update for older GCCs</changelog>
  <changelog author="i@marguerite.su" date="1470484800">- update version 1.0.11
  * sodium_init() is now thread-safe, and can be safely called
    multiple times.
  * Better support for old gcc versions.
  * AVX2 detection was fixed, resulting in faster BLAKE2b hashing
    on platforms where it was not properly detected.
  * The Sandy2x Curve25519 implementation was not as fast as
    expected on some platforms. This has been fixed.
  * The NativeClient target was improved. Most notably, it now
    supports optimized implementations, and uses pepper_49 by default.
  * The library can be compiled with recent Emscripten versions.
    Changes have been made to produce smaller code, and the default
    heap size was reduced in the standard version.
  * Decryption functions can now accept a NULL pointer for the output.
    This checks the MAC without writing the decrypted message.
  * crypto_generichash_final() now returns -1 if called twice.</changelog>
  <changelog author="idonmez@suse.com" date="1489406400">- Update to version 1.0.12
  * Ed25519ph was implemented, adding a multi-part signature API
    (crypto_sign_init(), crypto_sign_update(), crypto_sign_final_*()).
  * New constants and related accessors have been added for Scrypt
    and Argon2.
  * XChaCha20 has been implemented. Like XSalsa20, this construction
    extends the ChaCha20 cipher to accept a 192-bit nonce. This
    makes it safe to use ChaCha20 with random nonces.
  * crypto_secretbox, crypto_box and crypto_aead now offer variants
    leveraging XChaCha20.
  * SHA-2 is about 20% faster, which also gives a speed boost to
    signature and signature verification.
  * AVX2 implementations of Salsa20 and ChaCha20 have been added.
    They are twice as fast as the SSE2 implementations. The speed
    gain is even more significant on Windows, that previously
    didn't use vectorized implementations.
  * New high-level API: crypto_kdf, to easily derive one or more
    subkeys from a master key.
  * Siphash with a 128-bit output has been implemented, and is
    available as crypto_shorthash_siphashx_*.
  * New *_keygen() helpers functions have been added to create
    secret keys for all constructions. This improves code clarity
    and can prevent keys from being partially initialized.
  * A new randombytes_buf_deterministic() function was added to
    deterministically fill a memory region with pseudorandom data.
    This function can especially be useful to write reproducible tests.
  * A preliminary crypto_kx_*() API was added to compute shared
    session keys.
  * AVX2 detection is more reliable.</changelog>
  <changelog author="idonmez@suse.com" date="1506600000">- Update to version 1.0.14
  * Internal consistency checks failing and primitives used with
    dangerous/out-of-bounds/invalid parameters used to call abort(3).
    Now, a custom handler that doesn't return can be set with the
    set_sodium_misuse() function. It still aborts by default or if
    the handler ever returns. This is not a replacement for non-fatal,
    expected runtime errors. This handler will be only called in
    unexpected situations due to potential bugs in the library or in
    language bindings.
  * *_MESSAGEBYTES_MAX macros (and the corresponding _messagebytes_max()
    symbols) have been added to represent the maximum message size that
    can be safely handled by a primitive. Language bindings are
    encouraged to check user inputs against these maximum lengths.
  * The test suite has been extended to cover more edge cases.
  * crypto_sign_ed25519_pk_to_curve25519() now rejects points that
    are not on the curve, or not in the main subgroup.
  * Further changes have been made to ensure that smart compilers
    will not optimize out code that we don't want to be optimized.
  * The sodium_runtime_has_* symbols for CPU features detection are
    now defined as weak symbols, i.e. they can be replaced with an
    application-defined implementation. This can be useful to
    disable AVX* when temperature/power consumption is a concern.
  * crypto_kx_*() now aborts if called with no non-NULL pointers
    to store keys to.
  * SSE2 implementations of crypto_verify_*() have been added.
  * Passwords can be hashed using a specific algorithm with the new
    crypto_pwhash_str_alg() function.
  * Due to popular demand, base64 encoding (sodium_bin2base64())
    and decoding (sodium_base642bin()) have been implemented.
  * A new crypto_secretstream_*() API was added to safely encrypt
    files and multi-part messages.
  * The sodium_pad() and sodium_unpad() helper functions have been
    added in order to add &amp; remove padding.
  * An AVX512 optimized implementation of Argon2 has been added.
  * The crypto_pwhash_str_needs_rehash() function was added to check
    if a password hash string matches the given parameters, or if it
    needs an update.
  Updates from 1.0.13
  * An AVX2 optimized implementation of the Argon2 round function was added.
  * The Argon2id variant of Argon2 has been implemented. The high-level
    crypto_pwhash_str_verify() function automatically detects the
    algorithm and can verify both Argon2i and Argon2id hashed passwords.
    The default algorithm for newly hashed passwords remains Argon2i
    in this version to avoid breaking compatibility with verifiers
    running libsodium &lt;= 1.0.12.
  * A crypto_box_curve25519xchacha20poly1305_seal*() function set was implemented.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1507464000">- Refresh spec-file.
- Update to 1.0.15.
  * Release notes: https://github.com/jedisct1/libsodium/releases/tag/1.0.15
  * The default password hashing algorithm is now Argon2id.
  * The pwhash_str_verify() function can still verify Argon2i hashes without any changes,
    and pwhash() can still compute Argon2i hashes as well.
  * The aes128ctr primitive was removed. It was slow, non-standard, not authenticated,
    and didn't seem to be used by any opensource project.
  * Argon2id required at least 3 passes like Argon2i, despite a minimum of 1
    as defined by the OPSLIMIT_MIN constant. This has been fixed.
  * The secretstream construction was slightly changed to be consistent with forthcoming variants.
  * The Javascript and Webassembly versions have been merged, and the module now returns
    a .ready promise that will resolve after the Webassembly code is loaded and compiled.
  * Note that due to these incompatible changes, the library version major was bumped up.</changelog>
  <changelog author="idonmez@suse.com" date="1513166400">- Update to 1.0.16
  * Signatures computations and verifications are now way faster
    on 64-bit platforms with compilers supporting 128-bit
    arithmetic (gcc, clang, icc). This includes the WebAssembly
    target.
  * New low-level APIs for computations over edwards25519:
    crypto_scalarmult_ed25519(), crypto_scalarmult_ed25519_base(),
    crypto_core_ed25519_is_valid_point(), crypto_core_ed25519_add(),
    crypto_core_ed25519_sub() and crypto_core_ed25519_from_uniform()
    (elligator representative to point).
  * crypto_sign_open(), crypto_sign_verify_detached() and
    crypto_sign_edwards25519sha512batch_open` now reject public
    keys in non-canonical form in addition to low-order points.
  * The library can be built with ED25519_NONDETERMINISTIC defined
    in order to use synthetic nonces for EdDSA. This is disabled
    by default.
  * sodium_stackzero() was added to wipe content off the stack.
  * The Salsa20-based PRNG example is now thread-safe on platforms
    with support for thread-local storage, optionally mixes bits
    from RDRAND.
  * Argon2 and scrypt are slightly faster on Linux.</changelog>
  <changelog author="adam.majer@suse.de" date="1514548800">- Enable verbose make output when building tests</changelog>
  <changelog author="mpluskal@suse.com" date="1531396800">- Add gpg signature
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Add baselibs.conf: build libsodium23-32bit, which is required by
  zeromq's -32bit packages.</changelog>
</package>
<package pkgid="efda77092c37c236aefd100eda4c89684c2d60e09848c37e2e28972a5f2dcd5a" name="libsoftokn3" arch="x86_64">
  <version epoch="0" ver="3.36.4" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1471867200">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
  <changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
  <changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
  <changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
</package>
<package pkgid="27162d1989e3daa24d87eef368469cac4ece5bcc14726528b768a6bc23ecf20c" name="libsoftokn3-32bit" arch="x86_64">
  <version epoch="0" ver="3.36.4" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1471867200">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
  <changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
  <changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
  <changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
</package>
<package pkgid="ce115e7ac96db36147c32b1328a3ec1728f5c2bb994680613b9849026c0d3626" name="libsolv" arch="src">
  <version epoch="0" ver="0.6.35" rel="lp150.2.3.1"/>
  <changelog author="mls@suse.de" date="1469188800">- also scan /usr/share/metainfo for appdata files [bnc#989830]
- support tri-state product-endoflife [fate#320699]
- take lockstep into account when calculating unneeded packages
- ignore appplication extensions for now in appdata parser
  [bnc#984332]
- add enabled features to solvversion.h
- take disfavors into account when auto-minimizing for recommended
  packages
- change cleandeps code so that it keeps all providers
- make sure that all repos have different names in a testcase
- bump version to 0.6.23</changelog>
  <changelog author="mls@suse.de" date="1478779200">- make testcase_str2solvid work with ignored packages
- improve checks against corrupt rpm
- add SOLVER_FLAG_FOCUS_BEST solver flag
- rework susetags multi-line handling [bnc#1007273]
- build both for python2 and python3
- bump version to 0.6.24</changelog>
  <changelog author="mls@suse.de" date="1486468800">- add SOLVABLE_NAME hack for pool_whatmatchesdep and
  solvable_matchesdep
- add SOLVER_FLAG_STRONG_RECOMMENDS option
- add SOLVER_FLAG_INSTALL_ALSO_UPDATES option
- do not special case release-less provides in sort_by_common_dep
- solver_problemruleinfo2str: return reason why a package is not
  installable
- guard against dirpool_add_dir being called with an illegal
  component id
- reject solv files with bad directories
- bump version to 0.6.25</changelog>
  <changelog author="mls@suse.de" date="1487160000">- export solvable_matchesdep function, as we now use it in
  the bindings [bnc#1025440]
- bump version to 0.6.26</changelog>
  <changelog author="mls@suse.de" date="1493121600">- change queue resize code to use adaptive chunk sizes
- fix potential segfault in testcase_depstr [bnc#1036002]
- fix performance issues with name = md5sum dependencies
  [bnc#1035946]
- improve "forcebest with uninstall" handling
- make dirid handling more robust
- build with libxml2 instead of libexpat
- bump version to 0.6.27</changelog>
  <changelog author="ngompa13@gmail.com" date="1494244800">- Enable bzip2 and xz/lzma compression support
- Enable complex/rich dependencies on distributions with RPM 4.13+
- Simplified CentOS/RHEL conditionals
- Added Mageia conditionals
- Fixed a few spec portability issues</changelog>
  <changelog author="ngompa13@gmail.com" date="1494504000">- Disable bzip2 and xz/lzma compression support for SLE &lt;= 12</changelog>
  <changelog author="ngompa13@gmail.com" date="1495972800">- Enable complex/rich dependencies for CentOS/RHEL 7, matching how
  libsolv is configured there.</changelog>
  <changelog author="mls@suse.de" date="1498824000">- make peace with newer perl versions
- fix memory leak in bindings
- add pool_best_solvables() function
- fix 64bit integer parsing from RPM headers
- bump version to 0.6.28</changelog>
  <changelog author="mls@suse.de" date="1504785600">- expose solver_get_recommendations in bindings
- fix bug in solver_prune_to_highest_prio_per_name resulting in
  bad solver_get_recommendations output
- support 'without' and 'unless' dependencies
- fix yumobs rule generation bug
- Use same heuristic as upstream to determine src rpms
- bump version to 0.6.29</changelog>
  <changelog author="mls@suse.de" date="1508760000">- many fixes and improvements for cleandeps
- support debian packages with xz compressed control.tar
- always create dup rules for "distupgrade" jobs
- use recommends also for ordering packages
- Fix splitprovides handling with addalreadyrecommended turned off
  [bnc#1059065]
- bump version to 0.6.30</changelog>
  <changelog author="jengelh@inai.de" date="1508846400">- Update package descriptions and groups.
  Replace old $RPM_* variables by macros.</changelog>
  <changelog author="mls@suse.de" date="1517400000">- new ENABLE_RPMDB_LIBRPM/ENABLE_RPMPKG_LIBRPM config options
- new pool_set_whatprovides function to change the whatprovides
  data
- much improved selection code
- bump version to 0.6.31</changelog>
  <changelog author="mls@suse.de" date="1518523200">- fixed bug that could make fileconflict detection very slow
  in some cases [bnc#953130]
- bump version to 0.6.32</changelog>
  <changelog author="mls@suse.de" date="1519819200">- fix bad assignment in solution refinement that led
  to a memory leak [bnc#1075978]
- use license tag instead of doc in the spec file [bnc#1082318]
- bump version to 0.6.33</changelog>
  <changelog author="mls@suse.de" date="1519905600">- also use suggests for ordering packages [bnc#1077635]</changelog>
  <changelog author="mls@suse.de" date="1521806400">- make sure product files come from /etc/products.d in fallback
  search [bnc#1086602]
- bump version to 0.6.34</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Sort a bit with spec-cleaner
- Use python/ruby/etc condition names to match what other packages
  do in order to make sure we are enabling/disabling stuff within
  prjcfg
- Silence the source unpacking
- Make sure to execute tests</changelog>
  <changelog author="ngompa13@gmail.com" date="1531915201">- Fix compatibility with Mageia and RH/Fedora</changelog>
  <changelog author="mls@suse.de" date="1533816000">- refactor arch handling
- add support for zstd and zchunk compression
- convert repo2solv.sh script into a binary tool
- bump version to 0.6.35</changelog>
</package>
<package pkgid="4901822e87e7eebf3bb94071802820784e2172340a9b38cff55a3f1466527249" name="libsolv-demo" arch="x86_64">
  <version epoch="0" ver="0.6.35" rel="lp150.2.3.1"/>
  <changelog author="mls@suse.de" date="1469188800">- also scan /usr/share/metainfo for appdata files [bnc#989830]
- support tri-state product-endoflife [fate#320699]
- take lockstep into account when calculating unneeded packages
- ignore appplication extensions for now in appdata parser
  [bnc#984332]
- add enabled features to solvversion.h
- take disfavors into account when auto-minimizing for recommended
  packages
- change cleandeps code so that it keeps all providers
- make sure that all repos have different names in a testcase
- bump version to 0.6.23</changelog>
  <changelog author="mls@suse.de" date="1478779200">- make testcase_str2solvid work with ignored packages
- improve checks against corrupt rpm
- add SOLVER_FLAG_FOCUS_BEST solver flag
- rework susetags multi-line handling [bnc#1007273]
- build both for python2 and python3
- bump version to 0.6.24</changelog>
  <changelog author="mls@suse.de" date="1486468800">- add SOLVABLE_NAME hack for pool_whatmatchesdep and
  solvable_matchesdep
- add SOLVER_FLAG_STRONG_RECOMMENDS option
- add SOLVER_FLAG_INSTALL_ALSO_UPDATES option
- do not special case release-less provides in sort_by_common_dep
- solver_problemruleinfo2str: return reason why a package is not
  installable
- guard against dirpool_add_dir being called with an illegal
  component id
- reject solv files with bad directories
- bump version to 0.6.25</changelog>
  <changelog author="mls@suse.de" date="1487160000">- export solvable_matchesdep function, as we now use it in
  the bindings [bnc#1025440]
- bump version to 0.6.26</changelog>
  <changelog author="mls@suse.de" date="1493121600">- change queue resize code to use adaptive chunk sizes
- fix potential segfault in testcase_depstr [bnc#1036002]
- fix performance issues with name = md5sum dependencies
  [bnc#1035946]
- improve "forcebest with uninstall" handling
- make dirid handling more robust
- build with libxml2 instead of libexpat
- bump version to 0.6.27</changelog>
  <changelog author="ngompa13@gmail.com" date="1494244800">- Enable bzip2 and xz/lzma compression support
- Enable complex/rich dependencies on distributions with RPM 4.13+
- Simplified CentOS/RHEL conditionals
- Added Mageia conditionals
- Fixed a few spec portability issues</changelog>
  <changelog author="ngompa13@gmail.com" date="1494504000">- Disable bzip2 and xz/lzma compression support for SLE &lt;= 12</changelog>
  <changelog author="ngompa13@gmail.com" date="1495972800">- Enable complex/rich dependencies for CentOS/RHEL 7, matching how
  libsolv is configured there.</changelog>
  <changelog author="mls@suse.de" date="1498824000">- make peace with newer perl versions
- fix memory leak in bindings
- add pool_best_solvables() function
- fix 64bit integer parsing from RPM headers
- bump version to 0.6.28</changelog>
  <changelog author="mls@suse.de" date="1504785600">- expose solver_get_recommendations in bindings
- fix bug in solver_prune_to_highest_prio_per_name resulting in
  bad solver_get_recommendations output
- support 'without' and 'unless' dependencies
- fix yumobs rule generation bug
- Use same heuristic as upstream to determine src rpms
- bump version to 0.6.29</changelog>
  <changelog author="mls@suse.de" date="1508760000">- many fixes and improvements for cleandeps
- support debian packages with xz compressed control.tar
- always create dup rules for "distupgrade" jobs
- use recommends also for ordering packages
- Fix splitprovides handling with addalreadyrecommended turned off
  [bnc#1059065]
- bump version to 0.6.30</changelog>
  <changelog author="jengelh@inai.de" date="1508846400">- Update package descriptions and groups.
  Replace old $RPM_* variables by macros.</changelog>
  <changelog author="mls@suse.de" date="1517400000">- new ENABLE_RPMDB_LIBRPM/ENABLE_RPMPKG_LIBRPM config options
- new pool_set_whatprovides function to change the whatprovides
  data
- much improved selection code
- bump version to 0.6.31</changelog>
  <changelog author="mls@suse.de" date="1518523200">- fixed bug that could make fileconflict detection very slow
  in some cases [bnc#953130]
- bump version to 0.6.32</changelog>
  <changelog author="mls@suse.de" date="1519819200">- fix bad assignment in solution refinement that led
  to a memory leak [bnc#1075978]
- use license tag instead of doc in the spec file [bnc#1082318]
- bump version to 0.6.33</changelog>
  <changelog author="mls@suse.de" date="1519905600">- also use suggests for ordering packages [bnc#1077635]</changelog>
  <changelog author="mls@suse.de" date="1521806400">- make sure product files come from /etc/products.d in fallback
  search [bnc#1086602]
- bump version to 0.6.34</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Sort a bit with spec-cleaner
- Use python/ruby/etc condition names to match what other packages
  do in order to make sure we are enabling/disabling stuff within
  prjcfg
- Silence the source unpacking
- Make sure to execute tests</changelog>
  <changelog author="ngompa13@gmail.com" date="1531915201">- Fix compatibility with Mageia and RH/Fedora</changelog>
  <changelog author="mls@suse.de" date="1533816000">- refactor arch handling
- add support for zstd and zchunk compression
- convert repo2solv.sh script into a binary tool
- bump version to 0.6.35</changelog>
</package>
<package pkgid="c924a675af85b79ab3716625c1985e3c63212caffbcb0d1529195953a556af30" name="libsolv-devel" arch="x86_64">
  <version epoch="0" ver="0.6.35" rel="lp150.2.3.1"/>
  <changelog author="mls@suse.de" date="1469188800">- also scan /usr/share/metainfo for appdata files [bnc#989830]
- support tri-state product-endoflife [fate#320699]
- take lockstep into account when calculating unneeded packages
- ignore appplication extensions for now in appdata parser
  [bnc#984332]
- add enabled features to solvversion.h
- take disfavors into account when auto-minimizing for recommended
  packages
- change cleandeps code so that it keeps all providers
- make sure that all repos have different names in a testcase
- bump version to 0.6.23</changelog>
  <changelog author="mls@suse.de" date="1478779200">- make testcase_str2solvid work with ignored packages
- improve checks against corrupt rpm
- add SOLVER_FLAG_FOCUS_BEST solver flag
- rework susetags multi-line handling [bnc#1007273]
- build both for python2 and python3
- bump version to 0.6.24</changelog>
  <changelog author="mls@suse.de" date="1486468800">- add SOLVABLE_NAME hack for pool_whatmatchesdep and
  solvable_matchesdep
- add SOLVER_FLAG_STRONG_RECOMMENDS option
- add SOLVER_FLAG_INSTALL_ALSO_UPDATES option
- do not special case release-less provides in sort_by_common_dep
- solver_problemruleinfo2str: return reason why a package is not
  installable
- guard against dirpool_add_dir being called with an illegal
  component id
- reject solv files with bad directories
- bump version to 0.6.25</changelog>
  <changelog author="mls@suse.de" date="1487160000">- export solvable_matchesdep function, as we now use it in
  the bindings [bnc#1025440]
- bump version to 0.6.26</changelog>
  <changelog author="mls@suse.de" date="1493121600">- change queue resize code to use adaptive chunk sizes
- fix potential segfault in testcase_depstr [bnc#1036002]
- fix performance issues with name = md5sum dependencies
  [bnc#1035946]
- improve "forcebest with uninstall" handling
- make dirid handling more robust
- build with libxml2 instead of libexpat
- bump version to 0.6.27</changelog>
  <changelog author="ngompa13@gmail.com" date="1494244800">- Enable bzip2 and xz/lzma compression support
- Enable complex/rich dependencies on distributions with RPM 4.13+
- Simplified CentOS/RHEL conditionals
- Added Mageia conditionals
- Fixed a few spec portability issues</changelog>
  <changelog author="ngompa13@gmail.com" date="1494504000">- Disable bzip2 and xz/lzma compression support for SLE &lt;= 12</changelog>
  <changelog author="ngompa13@gmail.com" date="1495972800">- Enable complex/rich dependencies for CentOS/RHEL 7, matching how
  libsolv is configured there.</changelog>
  <changelog author="mls@suse.de" date="1498824000">- make peace with newer perl versions
- fix memory leak in bindings
- add pool_best_solvables() function
- fix 64bit integer parsing from RPM headers
- bump version to 0.6.28</changelog>
  <changelog author="mls@suse.de" date="1504785600">- expose solver_get_recommendations in bindings
- fix bug in solver_prune_to_highest_prio_per_name resulting in
  bad solver_get_recommendations output
- support 'without' and 'unless' dependencies
- fix yumobs rule generation bug
- Use same heuristic as upstream to determine src rpms
- bump version to 0.6.29</changelog>
  <changelog author="mls@suse.de" date="1508760000">- many fixes and improvements for cleandeps
- support debian packages with xz compressed control.tar
- always create dup rules for "distupgrade" jobs
- use recommends also for ordering packages
- Fix splitprovides handling with addalreadyrecommended turned off
  [bnc#1059065]
- bump version to 0.6.30</changelog>
  <changelog author="jengelh@inai.de" date="1508846400">- Update package descriptions and groups.
  Replace old $RPM_* variables by macros.</changelog>
  <changelog author="mls@suse.de" date="1517400000">- new ENABLE_RPMDB_LIBRPM/ENABLE_RPMPKG_LIBRPM config options
- new pool_set_whatprovides function to change the whatprovides
  data
- much improved selection code
- bump version to 0.6.31</changelog>
  <changelog author="mls@suse.de" date="1518523200">- fixed bug that could make fileconflict detection very slow
  in some cases [bnc#953130]
- bump version to 0.6.32</changelog>
  <changelog author="mls@suse.de" date="1519819200">- fix bad assignment in solution refinement that led
  to a memory leak [bnc#1075978]
- use license tag instead of doc in the spec file [bnc#1082318]
- bump version to 0.6.33</changelog>
  <changelog author="mls@suse.de" date="1519905600">- also use suggests for ordering packages [bnc#1077635]</changelog>
  <changelog author="mls@suse.de" date="1521806400">- make sure product files come from /etc/products.d in fallback
  search [bnc#1086602]
- bump version to 0.6.34</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Sort a bit with spec-cleaner
- Use python/ruby/etc condition names to match what other packages
  do in order to make sure we are enabling/disabling stuff within
  prjcfg
- Silence the source unpacking
- Make sure to execute tests</changelog>
  <changelog author="ngompa13@gmail.com" date="1531915201">- Fix compatibility with Mageia and RH/Fedora</changelog>
  <changelog author="mls@suse.de" date="1533816000">- refactor arch handling
- add support for zstd and zchunk compression
- convert repo2solv.sh script into a binary tool
- bump version to 0.6.35</changelog>
</package>
<package pkgid="07daa3e9b749d2b9c897cb3e99efd0f056ab6508b047bdefb7b6fe16679efeb0" name="libsolv-tools" arch="x86_64">
  <version epoch="0" ver="0.6.35" rel="lp150.2.3.1"/>
  <changelog author="mls@suse.de" date="1469188800">- also scan /usr/share/metainfo for appdata files [bnc#989830]
- support tri-state product-endoflife [fate#320699]
- take lockstep into account when calculating unneeded packages
- ignore appplication extensions for now in appdata parser
  [bnc#984332]
- add enabled features to solvversion.h
- take disfavors into account when auto-minimizing for recommended
  packages
- change cleandeps code so that it keeps all providers
- make sure that all repos have different names in a testcase
- bump version to 0.6.23</changelog>
  <changelog author="mls@suse.de" date="1478779200">- make testcase_str2solvid work with ignored packages
- improve checks against corrupt rpm
- add SOLVER_FLAG_FOCUS_BEST solver flag
- rework susetags multi-line handling [bnc#1007273]
- build both for python2 and python3
- bump version to 0.6.24</changelog>
  <changelog author="mls@suse.de" date="1486468800">- add SOLVABLE_NAME hack for pool_whatmatchesdep and
  solvable_matchesdep
- add SOLVER_FLAG_STRONG_RECOMMENDS option
- add SOLVER_FLAG_INSTALL_ALSO_UPDATES option
- do not special case release-less provides in sort_by_common_dep
- solver_problemruleinfo2str: return reason why a package is not
  installable
- guard against dirpool_add_dir being called with an illegal
  component id
- reject solv files with bad directories
- bump version to 0.6.25</changelog>
  <changelog author="mls@suse.de" date="1487160000">- export solvable_matchesdep function, as we now use it in
  the bindings [bnc#1025440]
- bump version to 0.6.26</changelog>
  <changelog author="mls@suse.de" date="1493121600">- change queue resize code to use adaptive chunk sizes
- fix potential segfault in testcase_depstr [bnc#1036002]
- fix performance issues with name = md5sum dependencies
  [bnc#1035946]
- improve "forcebest with uninstall" handling
- make dirid handling more robust
- build with libxml2 instead of libexpat
- bump version to 0.6.27</changelog>
  <changelog author="ngompa13@gmail.com" date="1494244800">- Enable bzip2 and xz/lzma compression support
- Enable complex/rich dependencies on distributions with RPM 4.13+
- Simplified CentOS/RHEL conditionals
- Added Mageia conditionals
- Fixed a few spec portability issues</changelog>
  <changelog author="ngompa13@gmail.com" date="1494504000">- Disable bzip2 and xz/lzma compression support for SLE &lt;= 12</changelog>
  <changelog author="ngompa13@gmail.com" date="1495972800">- Enable complex/rich dependencies for CentOS/RHEL 7, matching how
  libsolv is configured there.</changelog>
  <changelog author="mls@suse.de" date="1498824000">- make peace with newer perl versions
- fix memory leak in bindings
- add pool_best_solvables() function
- fix 64bit integer parsing from RPM headers
- bump version to 0.6.28</changelog>
  <changelog author="mls@suse.de" date="1504785600">- expose solver_get_recommendations in bindings
- fix bug in solver_prune_to_highest_prio_per_name resulting in
  bad solver_get_recommendations output
- support 'without' and 'unless' dependencies
- fix yumobs rule generation bug
- Use same heuristic as upstream to determine src rpms
- bump version to 0.6.29</changelog>
  <changelog author="mls@suse.de" date="1508760000">- many fixes and improvements for cleandeps
- support debian packages with xz compressed control.tar
- always create dup rules for "distupgrade" jobs
- use recommends also for ordering packages
- Fix splitprovides handling with addalreadyrecommended turned off
  [bnc#1059065]
- bump version to 0.6.30</changelog>
  <changelog author="jengelh@inai.de" date="1508846400">- Update package descriptions and groups.
  Replace old $RPM_* variables by macros.</changelog>
  <changelog author="mls@suse.de" date="1517400000">- new ENABLE_RPMDB_LIBRPM/ENABLE_RPMPKG_LIBRPM config options
- new pool_set_whatprovides function to change the whatprovides
  data
- much improved selection code
- bump version to 0.6.31</changelog>
  <changelog author="mls@suse.de" date="1518523200">- fixed bug that could make fileconflict detection very slow
  in some cases [bnc#953130]
- bump version to 0.6.32</changelog>
  <changelog author="mls@suse.de" date="1519819200">- fix bad assignment in solution refinement that led
  to a memory leak [bnc#1075978]
- use license tag instead of doc in the spec file [bnc#1082318]
- bump version to 0.6.33</changelog>
  <changelog author="mls@suse.de" date="1519905600">- also use suggests for ordering packages [bnc#1077635]</changelog>
  <changelog author="mls@suse.de" date="1521806400">- make sure product files come from /etc/products.d in fallback
  search [bnc#1086602]
- bump version to 0.6.34</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Sort a bit with spec-cleaner
- Use python/ruby/etc condition names to match what other packages
  do in order to make sure we are enabling/disabling stuff within
  prjcfg
- Silence the source unpacking
- Make sure to execute tests</changelog>
  <changelog author="ngompa13@gmail.com" date="1531915201">- Fix compatibility with Mageia and RH/Fedora</changelog>
  <changelog author="mls@suse.de" date="1533816000">- refactor arch handling
- add support for zstd and zchunk compression
- convert repo2solv.sh script into a binary tool
- bump version to 0.6.35</changelog>
</package>
<package pkgid="b662ff3c2238eb3d1017c65639a9f350faffef581c4f1541ec6505e7515b8163" name="libspectre" arch="src">
  <version epoch="0" ver="0.2.8" rel="lp150.2.3.1"/>
  <changelog author="dmueller@suse.de" date="1207224000">- Initial package (0.2.0)</changelog>
  <changelog author="ro@suse.de" date="1217592000">- fix requires for debuginfo package</changelog>
  <changelog author="stbinner@suse.de" date="1224072000">- update to 0.2.1:
  * Fixes and improvements in the PostScript parser
  * Portability fixes</changelog>
  <changelog author="mrueckert@suse.de" date="1224676800">- fix debug_packages_requires define</changelog>
  <changelog author="vuntz@novell.com" date="1233835200">- Update to version 0.2.2:
  + A problem when rendering some documents where the page size is
    different from the Bounding Box has been fixed (fdo#18239)
  + Parser is now locale-independent when parsing float numbers
    (fdo#18685)
  + The display format has been fixed to match cairo/pixman.
    (fdo#18266)</changelog>
  <changelog author="vuntz@opensuse.org" date="1258113600">- Update to version 0.2.3:
  + Several fixes in the PostScript parser:
  - Detection of invalid or broken files has been improved. A
    document scanned without errors with no pages and no format
    is likely to be an invalid file, or not a PostScript file at
    all (fdo#19042)
  - Fix possible uninitialized use of Document media struct
    contents(fdo#18685)
  - Fix documents with PJL commands before the initial DSC
    comments.
  + Ghostscript is now always run with -dSAFER option
  + A missing argument in gs command line of PDF exporter was
    making it always fail for any document in BSD systems
    (fdo#18826)
  + Internal copy of ghostscript headers have been removed since
    they are already installed by ghostscript since version 8.62
    (fdo#18827)
- Do not call suse_update_config, and do not reset CFLAGS to
  default value.</changelog>
  <changelog author="vuntz@opensuse.org" date="1266753600">- Update to version 0.2.4:
  + Documents containing embedded documents inside the prolog,
    typically font resources, were not correctly rendered
    (fdo#25573)
  + Fix some portability issues to make libspectre build and work
    on Windows (fdo#26377)
  + PDF exporter was broken which might cause a crash when printing
    some documents (fdo#26592)</changelog>
  <changelog author="vuntz@opensuse.org" date="1281355200">- Update to version 0.2.6:
  + The most important change in this release is that gs is now
    always initalized with the flag -P- to make Ghostscript not
    look in the current directory for library files. See
    deb#583183.
  + Compiler flags -ansi and -pedantic are now optional and can be
    enabled with --enable-iso-c configure option. (fdo#27735)
  + Files with a doseps header and without EOF comment are
    correctly rendered now. (fdo#27830)
- Changes from version 0.2.5:
  + Fix a portability issue that caused crashes on big-endian 64
    bit systems. See lp#298139.
  + Fix a crash when something goes wrong while running pdf
    exporter. (fdo#26592)
- Add pkg-config BuildRequires to have pkgconfig() Provides.</changelog>
  <changelog author="zaitor@opensuse.org" date="1350820800">- Update to version 0.2.7:
  + This release fixes two crashes that can happen when %%Pages:
    or %%Page: comments are missing in the document or when
    %%Pages: comment is present but it's invalid.
- Changed tarball into upstream default gz.
- Updated url and sourcelinks to valid locations.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1389268800">- Add COPYING to %doc of the library subpackage (bnc#857790)</changelog>
  <changelog author="dimstar@opensuse.org" date="1446638400">- Add libspectre-gs-9.18.patch: Fix building with ghostscript 9.18;
  patch only applied when building against GS 9.18+ (boo#953149).</changelog>
  <changelog author="dimstar@opensuse.org" date="1446638401">- Replace the logic in the prep section to use zypper in order to
  verify the version. The previous version had issues on openSUSE
  13.2.</changelog>
  <changelog author="badshah400@gmail.com" date="1446984000">- Add libspectre-rotate-documents-correctly.patch to fix documents
  being rotated incorrectly; patch taken from upstream bug
  report (fdo#76450,boo#898327).</changelog>
  <changelog author="zaitor@opensuse.org" date="1467460800">- Update to version to version 0.2.8:
  + Fixed the document rotation with newer versions of Ghostscript
    (fdo#76450).
  + Build was also broken with Ghostscript &gt;= 9.18 and has been
    fixed.
  + Fixed a compile warning due to a comparison of integers of
    different signs when building on OS X (fdo#56476).
  + Makefiles were updated to properly use CPPFLAGS instead of
    CFLAGS (fdo#56481).
- Drop libspectre-gs-9.18.patch and
  libspectre-rotate-documents-correctly.patch: Fixed upstream.
- Drop zypper BuildRequires: It was only needed for above patches.</changelog>
  <changelog author="alarrosa@suse.com" date="1471953600">- Add fix-bsc975503.diff to fix handling of PostScript files with
  embedded EPS files. The PS file then contains two "%%EOF" DSC
  comments and the first one stopped the parsing of the file as if
  the real EOF was reached (bsc#975503, fdo#97091).</changelog>
</package>
<package pkgid="673520da410d4a92b162b34d85e6f9ce0c26f91b7a0c47e9e5d10e0647c38b55" name="libspectre-devel" arch="x86_64">
  <version epoch="0" ver="0.2.8" rel="lp150.2.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1258113600">- Update to version 0.2.3:
  + Several fixes in the PostScript parser:
  - Detection of invalid or broken files has been improved. A
    document scanned without errors with no pages and no format
    is likely to be an invalid file, or not a PostScript file at
    all (fdo#19042)
  - Fix possible uninitialized use of Document media struct
    contents(fdo#18685)
  - Fix documents with PJL commands before the initial DSC
    comments.
  + Ghostscript is now always run with -dSAFER option
  + A missing argument in gs command line of PDF exporter was
    making it always fail for any document in BSD systems
    (fdo#18826)
  + Internal copy of ghostscript headers have been removed since
    they are already installed by ghostscript since version 8.62
    (fdo#18827)
- Do not call suse_update_config, and do not reset CFLAGS to
  default value.</changelog>
  <changelog author="vuntz@opensuse.org" date="1266753600">- Update to version 0.2.4:
  + Documents containing embedded documents inside the prolog,
    typically font resources, were not correctly rendered
    (fdo#25573)
  + Fix some portability issues to make libspectre build and work
    on Windows (fdo#26377)
  + PDF exporter was broken which might cause a crash when printing
    some documents (fdo#26592)</changelog>
  <changelog author="vuntz@opensuse.org" date="1281355200">- Update to version 0.2.6:
  + The most important change in this release is that gs is now
    always initalized with the flag -P- to make Ghostscript not
    look in the current directory for library files. See
    deb#583183.
  + Compiler flags -ansi and -pedantic are now optional and can be
    enabled with --enable-iso-c configure option. (fdo#27735)
  + Files with a doseps header and without EOF comment are
    correctly rendered now. (fdo#27830)
- Changes from version 0.2.5:
  + Fix a portability issue that caused crashes on big-endian 64
    bit systems. See lp#298139.
  + Fix a crash when something goes wrong while running pdf
    exporter. (fdo#26592)
- Add pkg-config BuildRequires to have pkgconfig() Provides.</changelog>
  <changelog author="zaitor@opensuse.org" date="1350820800">- Update to version 0.2.7:
  + This release fixes two crashes that can happen when %%Pages:
    or %%Page: comments are missing in the document or when
    %%Pages: comment is present but it's invalid.
- Changed tarball into upstream default gz.
- Updated url and sourcelinks to valid locations.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1389268800">- Add COPYING to %doc of the library subpackage (bnc#857790)</changelog>
  <changelog author="dimstar@opensuse.org" date="1446638400">- Add libspectre-gs-9.18.patch: Fix building with ghostscript 9.18;
  patch only applied when building against GS 9.18+ (boo#953149).</changelog>
  <changelog author="dimstar@opensuse.org" date="1446638401">- Replace the logic in the prep section to use zypper in order to
  verify the version. The previous version had issues on openSUSE
  13.2.</changelog>
  <changelog author="badshah400@gmail.com" date="1446984000">- Add libspectre-rotate-documents-correctly.patch to fix documents
  being rotated incorrectly; patch taken from upstream bug
  report (fdo#76450,boo#898327).</changelog>
  <changelog author="zaitor@opensuse.org" date="1467460800">- Update to version to version 0.2.8:
  + Fixed the document rotation with newer versions of Ghostscript
    (fdo#76450).
  + Build was also broken with Ghostscript &gt;= 9.18 and has been
    fixed.
  + Fixed a compile warning due to a comparison of integers of
    different signs when building on OS X (fdo#56476).
  + Makefiles were updated to properly use CPPFLAGS instead of
    CFLAGS (fdo#56481).
- Drop libspectre-gs-9.18.patch and
  libspectre-rotate-documents-correctly.patch: Fixed upstream.
- Drop zypper BuildRequires: It was only needed for above patches.</changelog>
  <changelog author="alarrosa@suse.com" date="1471953600">- Add fix-bsc975503.diff to fix handling of PostScript files with
  embedded EPS files. The PS file then contains two "%%EOF" DSC
  comments and the first one stopped the parsing of the file as if
  the real EOF was reached (bsc#975503, fdo#97091).</changelog>
</package>
<package pkgid="46bf472e68e869d038d05b2b9a2ddbeccb445f3db4c206a8c745f5b3dd756a98" name="libspectre1" arch="x86_64">
  <version epoch="0" ver="0.2.8" rel="lp150.2.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1258113600">- Update to version 0.2.3:
  + Several fixes in the PostScript parser:
  - Detection of invalid or broken files has been improved. A
    document scanned without errors with no pages and no format
    is likely to be an invalid file, or not a PostScript file at
    all (fdo#19042)
  - Fix possible uninitialized use of Document media struct
    contents(fdo#18685)
  - Fix documents with PJL commands before the initial DSC
    comments.
  + Ghostscript is now always run with -dSAFER option
  + A missing argument in gs command line of PDF exporter was
    making it always fail for any document in BSD systems
    (fdo#18826)
  + Internal copy of ghostscript headers have been removed since
    they are already installed by ghostscript since version 8.62
    (fdo#18827)
- Do not call suse_update_config, and do not reset CFLAGS to
  default value.</changelog>
  <changelog author="vuntz@opensuse.org" date="1266753600">- Update to version 0.2.4:
  + Documents containing embedded documents inside the prolog,
    typically font resources, were not correctly rendered
    (fdo#25573)
  + Fix some portability issues to make libspectre build and work
    on Windows (fdo#26377)
  + PDF exporter was broken which might cause a crash when printing
    some documents (fdo#26592)</changelog>
  <changelog author="vuntz@opensuse.org" date="1281355200">- Update to version 0.2.6:
  + The most important change in this release is that gs is now
    always initalized with the flag -P- to make Ghostscript not
    look in the current directory for library files. See
    deb#583183.
  + Compiler flags -ansi and -pedantic are now optional and can be
    enabled with --enable-iso-c configure option. (fdo#27735)
  + Files with a doseps header and without EOF comment are
    correctly rendered now. (fdo#27830)
- Changes from version 0.2.5:
  + Fix a portability issue that caused crashes on big-endian 64
    bit systems. See lp#298139.
  + Fix a crash when something goes wrong while running pdf
    exporter. (fdo#26592)
- Add pkg-config BuildRequires to have pkgconfig() Provides.</changelog>
  <changelog author="zaitor@opensuse.org" date="1350820800">- Update to version 0.2.7:
  + This release fixes two crashes that can happen when %%Pages:
    or %%Page: comments are missing in the document or when
    %%Pages: comment is present but it's invalid.
- Changed tarball into upstream default gz.
- Updated url and sourcelinks to valid locations.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1389268800">- Add COPYING to %doc of the library subpackage (bnc#857790)</changelog>
  <changelog author="dimstar@opensuse.org" date="1446638400">- Add libspectre-gs-9.18.patch: Fix building with ghostscript 9.18;
  patch only applied when building against GS 9.18+ (boo#953149).</changelog>
  <changelog author="dimstar@opensuse.org" date="1446638401">- Replace the logic in the prep section to use zypper in order to
  verify the version. The previous version had issues on openSUSE
  13.2.</changelog>
  <changelog author="badshah400@gmail.com" date="1446984000">- Add libspectre-rotate-documents-correctly.patch to fix documents
  being rotated incorrectly; patch taken from upstream bug
  report (fdo#76450,boo#898327).</changelog>
  <changelog author="zaitor@opensuse.org" date="1467460800">- Update to version to version 0.2.8:
  + Fixed the document rotation with newer versions of Ghostscript
    (fdo#76450).
  + Build was also broken with Ghostscript &gt;= 9.18 and has been
    fixed.
  + Fixed a compile warning due to a comparison of integers of
    different signs when building on OS X (fdo#56476).
  + Makefiles were updated to properly use CPPFLAGS instead of
    CFLAGS (fdo#56481).
- Drop libspectre-gs-9.18.patch and
  libspectre-rotate-documents-correctly.patch: Fixed upstream.
- Drop zypper BuildRequires: It was only needed for above patches.</changelog>
  <changelog author="alarrosa@suse.com" date="1471953600">- Add fix-bsc975503.diff to fix handling of PostScript files with
  embedded EPS files. The PS file then contains two "%%EOF" DSC
  comments and the first one stopped the parsing of the file as if
  the real EOF was reached (bsc#975503, fdo#97091).</changelog>
</package>
<package pkgid="e6d7c9e60d4d028835974e3a1acb7554382d7fe1f4e7922db4bd829787e7f407" name="libspice-client-glib-2_0-8" arch="x86_64">
  <version epoch="0" ver="0.34" rel="lp150.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1365768000">- Update to version 0.19:
  + snappy has been renamed to spicy-screenshot.
  + Several file-xfer fixes and improvements.
  + Many win32 and USB redirection related fixes.
  + Compile and work again with RHEL6 and older glib releases.
  + misc fixes and improvements.</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 0.20:
  + Adaptive video streaming support (sync with PulseAudio
    backend only).
  + Add spice_usb_device_manager_get_devices_with_filter().
  + Add --spice-secure-channels to explicitely specify secure
    channels.
  + Multi-monitor, win32, USB redir fixes.
  + Add basic gtk+ wayland and broadway backend support.
  + Removed the GnomeRR code.</changelog>
  <changelog author="dimstar@opensuse.org" date="1376481600">- Add spice-gtk-mapfile.patch: Add spice_channel_string_to_type to
  map files (bnc#834896).</changelog>
  <changelog author="dimstar@opensuse.org" date="1379678400">- Update to version 0.21:
  + Improve inverted cursor support.
  + Win32 usb redirected device uninstall fix.
  + Add support for libusb hotplug API.
  + Smartcard initialization fixes.
  + C&amp;p converts line-endings if necessary.
  + Rendering and overall performance improvements.
  + Build and bindings fixes.
- Drop spice-gtk-mapfile.patch: fixed upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1404302400">- Release 0.25:
  + Fix SPICE_GTK_MICRO_VERSION define for default value
  + Make "phodav", the webdav server, an external dependency rather
  than a submodule.
- Changes from 0.24:
  + support folder sharing, via WebDAV channel
  + add HTTPS proxy support (requires glib 2.28), and Basic auth
  + add SPICE_GTK_CHECK_VERSION macro
  + advertise SASL capability early (to help fips-enabled servers)
  + fix crash when releasing primary surface
  + fix a few memory leaks with SASL
  + fix spice_display_get_pixbuf() with offset area
- Changes from 0.23:
  + support Opus codec for audio channels
  + ssl: use tls 1.0 or better
  + support gdbus instead of dbus-glib when available
- Changes from 0.22:
  + improve inverted cursor support
  + use system-wide trust certificate store
  + make sasl support work with other method than MD5
  + fix some clipboard crasher, limit clipboard size
  + fix various regressions:
    usbredir, alt-tab on win32, palette crash, agent notification,
    old protocol support, sasl ending crash, gthread coroutine
    crash, close  sockets on migration, pulse backend crash
  + fix a few memory leaks
- Add pkgconfig(libsoup-2.4) and pkgconfig(usbutils) BuildRequires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1418990400">- Update to version 0.27:
  + Add GStreamer 1.0 audio support.
  + Add LZ4 compression algorithm support.
  + Learn to release the keyboard grab on release keys pressed
    (ctrl+alt by default), to let alt+f4/alt-tab and others for
    client side.
  + Session and channels life-cycle changes: a channel will no
    longer hold a reference after session disconnection.
  + Migration fixes, fail early on client provided fds (this is
    left to solve in the future).
  + Fix support for Gtk+ 3.0 on Windows.
  + Clipboard size fixes.
  + Server-side pointer drawing on grab.
  + Build-sys improvements.
  + New APIs:
  - spice_usb_device_get_libusb_device()
  - spice_session_is_for_migration()</changelog>
  <changelog author="zaitor@opensuse.org" date="1427371200">- Update to version 0.28:
  + webdav improvements:
  - No longer spawn a server thread
  - No longer use local TCP sockets &amp; port
  - Provides read-only mode with SpiceSession:share-dir-ro
  - Requires libphodav-2.0 glib-2.0 &gt;= 2.43.90 libsoup-2.4 &gt;=
    2.49.91
  + Drop gstreamer 0.10 in favour of 1.0
  + Add spice+unix://path connection support
  + Accept URI with empty parameters value, such as
    spice://localhost?port=5900&amp;tls-port=
  + Fixed lz4 support
  + Silence some harmless warnings
  + Misc API documentation improvements
  + Switch-host migration fixes
  + Learn to build --without-gtk
  + Bugs and regressions fixes
- Add pkgconfig(liblz4) BuildRequires and pass --enable-lz4 to
  configure.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1433505600">- Check for passwords longer than what spice protocol allows to
  help reporting the error to the user.
  password-length-check.patch. boo#931044</changelog>
  <changelog author="cbosdonnat@suse.com" date="1435665600">- Update to version 0.29:
  + sync guest audio volume with client volume
  + use stream volume for PulseAudio source
  + on Windows, fail early during initialization if the usbclerk service
    can't be reached
  + fix audio and usb managers to work with client provided fds
  + check for too long passwords, boo#931044
  + many crasher and bug fixes, (boo#898383)
- Drop now useless patch: password-length-check.patch
- bnc#894069: disable smart card support for SLE</changelog>
  <changelog author="zaitor@opensuse.org" date="1443700800">- Update to version 0.30:
  + spice-protocol is no longer bundled with spice-gtk. Requires
    spice-protocol &gt;= 0.12.10
  + Handle single headed monitors that have a non-zero x, y config
  + Various small improvements to 'spicy' test application
  + Fix build with automake &lt; 1.13
  + various bug fixes and improvements (boo#958306)
  + New API:
  - spice_main_update_display_enabled()
  - Add SpiceSession::preferred-compression property and
  - -spice-preferred-compression commandline switch (requires a
    yet-to-be-released version of spice server)
  + Ability to set the SpiceDisplay::keypress-delay property via a
    new SPICE_KEYPRESS_DELAY environment variable
- Add python-six BuildRequires: New dependency, that configure
  fails to look for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458302400">- Update to version 0.31:
  + NOTE: this is the last release to support gtk+ 2.0.
  + Add local GL scanout support for virtio-gpu/virgl guests.
  + New file-transfer API, to be able to monitor transfers etc.
  + New spice_display_change_preferred_compression() API.
  + Better authentication error reports.
  + usbredir: drop isoc packets on low bandwidth (rh#1264156).
  + usbredir: add counter of free channels (rh#1298772).
  + Add a toplevel include header spice-client-gtk.h.
  + Grab keyboard based on session focus (rh#1275231).
  + Don't print error message on successful file transfer
    (rh#1265562).
  + Allow simultaneous support for Pulse and GStreamer audio.
  + Remove GSlice usage.
  + Some BE endianness fixes.
  + Misc leak and use after-free fixes.
  + Documentation fixes.
- Drop pkgconfig(x11) and pkgconfig(xrandr) BuildRequires: no
  longer needed.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
</package>
<package pkgid="8de97bc0c5fb18a84ce6bf0e61a3e5e415de9dd8c5ba97c89122c95cb0d63009" name="libspice-client-glib-helper" arch="x86_64">
  <version epoch="0" ver="0.34" rel="lp150.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1365768000">- Update to version 0.19:
  + snappy has been renamed to spicy-screenshot.
  + Several file-xfer fixes and improvements.
  + Many win32 and USB redirection related fixes.
  + Compile and work again with RHEL6 and older glib releases.
  + misc fixes and improvements.</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 0.20:
  + Adaptive video streaming support (sync with PulseAudio
    backend only).
  + Add spice_usb_device_manager_get_devices_with_filter().
  + Add --spice-secure-channels to explicitely specify secure
    channels.
  + Multi-monitor, win32, USB redir fixes.
  + Add basic gtk+ wayland and broadway backend support.
  + Removed the GnomeRR code.</changelog>
  <changelog author="dimstar@opensuse.org" date="1376481600">- Add spice-gtk-mapfile.patch: Add spice_channel_string_to_type to
  map files (bnc#834896).</changelog>
  <changelog author="dimstar@opensuse.org" date="1379678400">- Update to version 0.21:
  + Improve inverted cursor support.
  + Win32 usb redirected device uninstall fix.
  + Add support for libusb hotplug API.
  + Smartcard initialization fixes.
  + C&amp;p converts line-endings if necessary.
  + Rendering and overall performance improvements.
  + Build and bindings fixes.
- Drop spice-gtk-mapfile.patch: fixed upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1404302400">- Release 0.25:
  + Fix SPICE_GTK_MICRO_VERSION define for default value
  + Make "phodav", the webdav server, an external dependency rather
  than a submodule.
- Changes from 0.24:
  + support folder sharing, via WebDAV channel
  + add HTTPS proxy support (requires glib 2.28), and Basic auth
  + add SPICE_GTK_CHECK_VERSION macro
  + advertise SASL capability early (to help fips-enabled servers)
  + fix crash when releasing primary surface
  + fix a few memory leaks with SASL
  + fix spice_display_get_pixbuf() with offset area
- Changes from 0.23:
  + support Opus codec for audio channels
  + ssl: use tls 1.0 or better
  + support gdbus instead of dbus-glib when available
- Changes from 0.22:
  + improve inverted cursor support
  + use system-wide trust certificate store
  + make sasl support work with other method than MD5
  + fix some clipboard crasher, limit clipboard size
  + fix various regressions:
    usbredir, alt-tab on win32, palette crash, agent notification,
    old protocol support, sasl ending crash, gthread coroutine
    crash, close  sockets on migration, pulse backend crash
  + fix a few memory leaks
- Add pkgconfig(libsoup-2.4) and pkgconfig(usbutils) BuildRequires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1418990400">- Update to version 0.27:
  + Add GStreamer 1.0 audio support.
  + Add LZ4 compression algorithm support.
  + Learn to release the keyboard grab on release keys pressed
    (ctrl+alt by default), to let alt+f4/alt-tab and others for
    client side.
  + Session and channels life-cycle changes: a channel will no
    longer hold a reference after session disconnection.
  + Migration fixes, fail early on client provided fds (this is
    left to solve in the future).
  + Fix support for Gtk+ 3.0 on Windows.
  + Clipboard size fixes.
  + Server-side pointer drawing on grab.
  + Build-sys improvements.
  + New APIs:
  - spice_usb_device_get_libusb_device()
  - spice_session_is_for_migration()</changelog>
  <changelog author="zaitor@opensuse.org" date="1427371200">- Update to version 0.28:
  + webdav improvements:
  - No longer spawn a server thread
  - No longer use local TCP sockets &amp; port
  - Provides read-only mode with SpiceSession:share-dir-ro
  - Requires libphodav-2.0 glib-2.0 &gt;= 2.43.90 libsoup-2.4 &gt;=
    2.49.91
  + Drop gstreamer 0.10 in favour of 1.0
  + Add spice+unix://path connection support
  + Accept URI with empty parameters value, such as
    spice://localhost?port=5900&amp;tls-port=
  + Fixed lz4 support
  + Silence some harmless warnings
  + Misc API documentation improvements
  + Switch-host migration fixes
  + Learn to build --without-gtk
  + Bugs and regressions fixes
- Add pkgconfig(liblz4) BuildRequires and pass --enable-lz4 to
  configure.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1433505600">- Check for passwords longer than what spice protocol allows to
  help reporting the error to the user.
  password-length-check.patch. boo#931044</changelog>
  <changelog author="cbosdonnat@suse.com" date="1435665600">- Update to version 0.29:
  + sync guest audio volume with client volume
  + use stream volume for PulseAudio source
  + on Windows, fail early during initialization if the usbclerk service
    can't be reached
  + fix audio and usb managers to work with client provided fds
  + check for too long passwords, boo#931044
  + many crasher and bug fixes, (boo#898383)
- Drop now useless patch: password-length-check.patch
- bnc#894069: disable smart card support for SLE</changelog>
  <changelog author="zaitor@opensuse.org" date="1443700800">- Update to version 0.30:
  + spice-protocol is no longer bundled with spice-gtk. Requires
    spice-protocol &gt;= 0.12.10
  + Handle single headed monitors that have a non-zero x, y config
  + Various small improvements to 'spicy' test application
  + Fix build with automake &lt; 1.13
  + various bug fixes and improvements (boo#958306)
  + New API:
  - spice_main_update_display_enabled()
  - Add SpiceSession::preferred-compression property and
  - -spice-preferred-compression commandline switch (requires a
    yet-to-be-released version of spice server)
  + Ability to set the SpiceDisplay::keypress-delay property via a
    new SPICE_KEYPRESS_DELAY environment variable
- Add python-six BuildRequires: New dependency, that configure
  fails to look for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458302400">- Update to version 0.31:
  + NOTE: this is the last release to support gtk+ 2.0.
  + Add local GL scanout support for virtio-gpu/virgl guests.
  + New file-transfer API, to be able to monitor transfers etc.
  + New spice_display_change_preferred_compression() API.
  + Better authentication error reports.
  + usbredir: drop isoc packets on low bandwidth (rh#1264156).
  + usbredir: add counter of free channels (rh#1298772).
  + Add a toplevel include header spice-client-gtk.h.
  + Grab keyboard based on session focus (rh#1275231).
  + Don't print error message on successful file transfer
    (rh#1265562).
  + Allow simultaneous support for Pulse and GStreamer audio.
  + Remove GSlice usage.
  + Some BE endianness fixes.
  + Misc leak and use after-free fixes.
  + Documentation fixes.
- Drop pkgconfig(x11) and pkgconfig(xrandr) BuildRequires: no
  longer needed.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
</package>
<package pkgid="9a51dc407f176c629b58760caef0704a6297a3975ead3e0a38e153938d9cbf1e" name="libspice-client-gtk-3_0-5" arch="x86_64">
  <version epoch="0" ver="0.34" rel="lp150.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1365768000">- Update to version 0.19:
  + snappy has been renamed to spicy-screenshot.
  + Several file-xfer fixes and improvements.
  + Many win32 and USB redirection related fixes.
  + Compile and work again with RHEL6 and older glib releases.
  + misc fixes and improvements.</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 0.20:
  + Adaptive video streaming support (sync with PulseAudio
    backend only).
  + Add spice_usb_device_manager_get_devices_with_filter().
  + Add --spice-secure-channels to explicitely specify secure
    channels.
  + Multi-monitor, win32, USB redir fixes.
  + Add basic gtk+ wayland and broadway backend support.
  + Removed the GnomeRR code.</changelog>
  <changelog author="dimstar@opensuse.org" date="1376481600">- Add spice-gtk-mapfile.patch: Add spice_channel_string_to_type to
  map files (bnc#834896).</changelog>
  <changelog author="dimstar@opensuse.org" date="1379678400">- Update to version 0.21:
  + Improve inverted cursor support.
  + Win32 usb redirected device uninstall fix.
  + Add support for libusb hotplug API.
  + Smartcard initialization fixes.
  + C&amp;p converts line-endings if necessary.
  + Rendering and overall performance improvements.
  + Build and bindings fixes.
- Drop spice-gtk-mapfile.patch: fixed upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1404302400">- Release 0.25:
  + Fix SPICE_GTK_MICRO_VERSION define for default value
  + Make "phodav", the webdav server, an external dependency rather
  than a submodule.
- Changes from 0.24:
  + support folder sharing, via WebDAV channel
  + add HTTPS proxy support (requires glib 2.28), and Basic auth
  + add SPICE_GTK_CHECK_VERSION macro
  + advertise SASL capability early (to help fips-enabled servers)
  + fix crash when releasing primary surface
  + fix a few memory leaks with SASL
  + fix spice_display_get_pixbuf() with offset area
- Changes from 0.23:
  + support Opus codec for audio channels
  + ssl: use tls 1.0 or better
  + support gdbus instead of dbus-glib when available
- Changes from 0.22:
  + improve inverted cursor support
  + use system-wide trust certificate store
  + make sasl support work with other method than MD5
  + fix some clipboard crasher, limit clipboard size
  + fix various regressions:
    usbredir, alt-tab on win32, palette crash, agent notification,
    old protocol support, sasl ending crash, gthread coroutine
    crash, close  sockets on migration, pulse backend crash
  + fix a few memory leaks
- Add pkgconfig(libsoup-2.4) and pkgconfig(usbutils) BuildRequires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1418990400">- Update to version 0.27:
  + Add GStreamer 1.0 audio support.
  + Add LZ4 compression algorithm support.
  + Learn to release the keyboard grab on release keys pressed
    (ctrl+alt by default), to let alt+f4/alt-tab and others for
    client side.
  + Session and channels life-cycle changes: a channel will no
    longer hold a reference after session disconnection.
  + Migration fixes, fail early on client provided fds (this is
    left to solve in the future).
  + Fix support for Gtk+ 3.0 on Windows.
  + Clipboard size fixes.
  + Server-side pointer drawing on grab.
  + Build-sys improvements.
  + New APIs:
  - spice_usb_device_get_libusb_device()
  - spice_session_is_for_migration()</changelog>
  <changelog author="zaitor@opensuse.org" date="1427371200">- Update to version 0.28:
  + webdav improvements:
  - No longer spawn a server thread
  - No longer use local TCP sockets &amp; port
  - Provides read-only mode with SpiceSession:share-dir-ro
  - Requires libphodav-2.0 glib-2.0 &gt;= 2.43.90 libsoup-2.4 &gt;=
    2.49.91
  + Drop gstreamer 0.10 in favour of 1.0
  + Add spice+unix://path connection support
  + Accept URI with empty parameters value, such as
    spice://localhost?port=5900&amp;tls-port=
  + Fixed lz4 support
  + Silence some harmless warnings
  + Misc API documentation improvements
  + Switch-host migration fixes
  + Learn to build --without-gtk
  + Bugs and regressions fixes
- Add pkgconfig(liblz4) BuildRequires and pass --enable-lz4 to
  configure.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1433505600">- Check for passwords longer than what spice protocol allows to
  help reporting the error to the user.
  password-length-check.patch. boo#931044</changelog>
  <changelog author="cbosdonnat@suse.com" date="1435665600">- Update to version 0.29:
  + sync guest audio volume with client volume
  + use stream volume for PulseAudio source
  + on Windows, fail early during initialization if the usbclerk service
    can't be reached
  + fix audio and usb managers to work with client provided fds
  + check for too long passwords, boo#931044
  + many crasher and bug fixes, (boo#898383)
- Drop now useless patch: password-length-check.patch
- bnc#894069: disable smart card support for SLE</changelog>
  <changelog author="zaitor@opensuse.org" date="1443700800">- Update to version 0.30:
  + spice-protocol is no longer bundled with spice-gtk. Requires
    spice-protocol &gt;= 0.12.10
  + Handle single headed monitors that have a non-zero x, y config
  + Various small improvements to 'spicy' test application
  + Fix build with automake &lt; 1.13
  + various bug fixes and improvements (boo#958306)
  + New API:
  - spice_main_update_display_enabled()
  - Add SpiceSession::preferred-compression property and
  - -spice-preferred-compression commandline switch (requires a
    yet-to-be-released version of spice server)
  + Ability to set the SpiceDisplay::keypress-delay property via a
    new SPICE_KEYPRESS_DELAY environment variable
- Add python-six BuildRequires: New dependency, that configure
  fails to look for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458302400">- Update to version 0.31:
  + NOTE: this is the last release to support gtk+ 2.0.
  + Add local GL scanout support for virtio-gpu/virgl guests.
  + New file-transfer API, to be able to monitor transfers etc.
  + New spice_display_change_preferred_compression() API.
  + Better authentication error reports.
  + usbredir: drop isoc packets on low bandwidth (rh#1264156).
  + usbredir: add counter of free channels (rh#1298772).
  + Add a toplevel include header spice-client-gtk.h.
  + Grab keyboard based on session focus (rh#1275231).
  + Don't print error message on successful file transfer
    (rh#1265562).
  + Allow simultaneous support for Pulse and GStreamer audio.
  + Remove GSlice usage.
  + Some BE endianness fixes.
  + Misc leak and use after-free fixes.
  + Documentation fixes.
- Drop pkgconfig(x11) and pkgconfig(xrandr) BuildRequires: no
  longer needed.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
</package>
<package pkgid="ae767fab7acb5eac3f286f59c260c157658425e70a87466edd0151e77c7c6088" name="libspice-controller0" arch="x86_64">
  <version epoch="0" ver="0.34" rel="lp150.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1365768000">- Update to version 0.19:
  + snappy has been renamed to spicy-screenshot.
  + Several file-xfer fixes and improvements.
  + Many win32 and USB redirection related fixes.
  + Compile and work again with RHEL6 and older glib releases.
  + misc fixes and improvements.</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 0.20:
  + Adaptive video streaming support (sync with PulseAudio
    backend only).
  + Add spice_usb_device_manager_get_devices_with_filter().
  + Add --spice-secure-channels to explicitely specify secure
    channels.
  + Multi-monitor, win32, USB redir fixes.
  + Add basic gtk+ wayland and broadway backend support.
  + Removed the GnomeRR code.</changelog>
  <changelog author="dimstar@opensuse.org" date="1376481600">- Add spice-gtk-mapfile.patch: Add spice_channel_string_to_type to
  map files (bnc#834896).</changelog>
  <changelog author="dimstar@opensuse.org" date="1379678400">- Update to version 0.21:
  + Improve inverted cursor support.
  + Win32 usb redirected device uninstall fix.
  + Add support for libusb hotplug API.
  + Smartcard initialization fixes.
  + C&amp;p converts line-endings if necessary.
  + Rendering and overall performance improvements.
  + Build and bindings fixes.
- Drop spice-gtk-mapfile.patch: fixed upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1404302400">- Release 0.25:
  + Fix SPICE_GTK_MICRO_VERSION define for default value
  + Make "phodav", the webdav server, an external dependency rather
  than a submodule.
- Changes from 0.24:
  + support folder sharing, via WebDAV channel
  + add HTTPS proxy support (requires glib 2.28), and Basic auth
  + add SPICE_GTK_CHECK_VERSION macro
  + advertise SASL capability early (to help fips-enabled servers)
  + fix crash when releasing primary surface
  + fix a few memory leaks with SASL
  + fix spice_display_get_pixbuf() with offset area
- Changes from 0.23:
  + support Opus codec for audio channels
  + ssl: use tls 1.0 or better
  + support gdbus instead of dbus-glib when available
- Changes from 0.22:
  + improve inverted cursor support
  + use system-wide trust certificate store
  + make sasl support work with other method than MD5
  + fix some clipboard crasher, limit clipboard size
  + fix various regressions:
    usbredir, alt-tab on win32, palette crash, agent notification,
    old protocol support, sasl ending crash, gthread coroutine
    crash, close  sockets on migration, pulse backend crash
  + fix a few memory leaks
- Add pkgconfig(libsoup-2.4) and pkgconfig(usbutils) BuildRequires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1418990400">- Update to version 0.27:
  + Add GStreamer 1.0 audio support.
  + Add LZ4 compression algorithm support.
  + Learn to release the keyboard grab on release keys pressed
    (ctrl+alt by default), to let alt+f4/alt-tab and others for
    client side.
  + Session and channels life-cycle changes: a channel will no
    longer hold a reference after session disconnection.
  + Migration fixes, fail early on client provided fds (this is
    left to solve in the future).
  + Fix support for Gtk+ 3.0 on Windows.
  + Clipboard size fixes.
  + Server-side pointer drawing on grab.
  + Build-sys improvements.
  + New APIs:
  - spice_usb_device_get_libusb_device()
  - spice_session_is_for_migration()</changelog>
  <changelog author="zaitor@opensuse.org" date="1427371200">- Update to version 0.28:
  + webdav improvements:
  - No longer spawn a server thread
  - No longer use local TCP sockets &amp; port
  - Provides read-only mode with SpiceSession:share-dir-ro
  - Requires libphodav-2.0 glib-2.0 &gt;= 2.43.90 libsoup-2.4 &gt;=
    2.49.91
  + Drop gstreamer 0.10 in favour of 1.0
  + Add spice+unix://path connection support
  + Accept URI with empty parameters value, such as
    spice://localhost?port=5900&amp;tls-port=
  + Fixed lz4 support
  + Silence some harmless warnings
  + Misc API documentation improvements
  + Switch-host migration fixes
  + Learn to build --without-gtk
  + Bugs and regressions fixes
- Add pkgconfig(liblz4) BuildRequires and pass --enable-lz4 to
  configure.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1433505600">- Check for passwords longer than what spice protocol allows to
  help reporting the error to the user.
  password-length-check.patch. boo#931044</changelog>
  <changelog author="cbosdonnat@suse.com" date="1435665600">- Update to version 0.29:
  + sync guest audio volume with client volume
  + use stream volume for PulseAudio source
  + on Windows, fail early during initialization if the usbclerk service
    can't be reached
  + fix audio and usb managers to work with client provided fds
  + check for too long passwords, boo#931044
  + many crasher and bug fixes, (boo#898383)
- Drop now useless patch: password-length-check.patch
- bnc#894069: disable smart card support for SLE</changelog>
  <changelog author="zaitor@opensuse.org" date="1443700800">- Update to version 0.30:
  + spice-protocol is no longer bundled with spice-gtk. Requires
    spice-protocol &gt;= 0.12.10
  + Handle single headed monitors that have a non-zero x, y config
  + Various small improvements to 'spicy' test application
  + Fix build with automake &lt; 1.13
  + various bug fixes and improvements (boo#958306)
  + New API:
  - spice_main_update_display_enabled()
  - Add SpiceSession::preferred-compression property and
  - -spice-preferred-compression commandline switch (requires a
    yet-to-be-released version of spice server)
  + Ability to set the SpiceDisplay::keypress-delay property via a
    new SPICE_KEYPRESS_DELAY environment variable
- Add python-six BuildRequires: New dependency, that configure
  fails to look for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458302400">- Update to version 0.31:
  + NOTE: this is the last release to support gtk+ 2.0.
  + Add local GL scanout support for virtio-gpu/virgl guests.
  + New file-transfer API, to be able to monitor transfers etc.
  + New spice_display_change_preferred_compression() API.
  + Better authentication error reports.
  + usbredir: drop isoc packets on low bandwidth (rh#1264156).
  + usbredir: add counter of free channels (rh#1298772).
  + Add a toplevel include header spice-client-gtk.h.
  + Grab keyboard based on session focus (rh#1275231).
  + Don't print error message on successful file transfer
    (rh#1265562).
  + Allow simultaneous support for Pulse and GStreamer audio.
  + Remove GSlice usage.
  + Some BE endianness fixes.
  + Misc leak and use after-free fixes.
  + Documentation fixes.
- Drop pkgconfig(x11) and pkgconfig(xrandr) BuildRequires: no
  longer needed.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
</package>
<package pkgid="78ce988c8e675c20f362da5f88b39919c5d31e45f573a650e35faae56350301b" name="libspice-server-devel" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 0.12.2:
  + Skipped 0.12.1, it existed in git but was never released.
  + spice-server now requires glib2 (like qemu does).
  + More robust ssl error and certificate handling.
  + Added support for websockets.
  + Tons of seamless migration bugfixes.
  + Also some none seamless migration bugfixes.
- Clean spec file using spec-cleaner.
- Rebase spice-glibc217.patch.
- Add pkgconfig(glib-2.0) BuildRequires: new dependency.
- Pass --enable-client and --enable-smartcard to configure in
  order to ensure the client and smartcard support are built (SC
  only on openSUSE &gt;= 12.2).</changelog>
  <changelog author="aevseev@gmail.com" date="1375099200">- Update to version 0.12.4:
  + log actual address spice-server binds to
  + main_channel: fix double release of migration target data (rhbz#859027)
  + red_channel: replace an assert upon threads mismatch with a warning (rhbz#823472)
  + support for filtering out agent file-xfer msgs (rhbz#961848)
  ++ new library export spice_server_set_agent_file_xfer
  + mjpeg encoder statistics (mjpeg_encoder_get_stats)
  + improve stream stats readability and ease of parsing
  + fix for stuck display_channel over WAN (jpeg_enabled=true) (rhbz#977998)
  + Use RING_FOREACH_SAFE and other SAFE macros (rhbz#887775)
  + Some server/tests fixes.
- New features from 0.12.3:
  + monitor client bandwidth and latency.
  + dynamically adjust video stream quality based on client bandwidth &amp; latency.
  ++ new SPICE_MSGC_DISPLAY_STREAM_REPORT
  ++ can also set SPICE_BIT_RATE environment variable to override.
  + support arbitrary latency of audio stream wrt video stream:
  ++ new SPICE_MSG_PLAYBACK_LATENCY
  + notify agent on client disconnection
  ++ new VD_AGENT_CLIENT_DISCONNECTED message
  + better support for switching from qxl to vga mode
  ++ new library export spice_qxl_driver_unload
  + multiple monitor support in single channel fixes.
  + stop streams before migration.
  + don't send empty volume messages.
  + Bugs fixed: rhbz#891326, rhbz#958276, rhbz#956345
  + fixes to inputs, chardev, build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1413374400">- Update to version 0.12.5:
  + Added Opus support. Celt support will be obsoleted in a future
    release.
  + Addition of webdav channel.
  + Force use of TLS 1.0 or newer for TLS connections.
  + Reference manual.
  + Some optimizations improving CPU use.
  + Various bug fixes for race conditions, memory corruption, which
    could be triggered on client disconnections, migration, and
    cause spice-server to misbehave.
  + Portability fixes.
  + Code cleanups.
  + bsc#848279: fix CVE-2013-4282.
- Add pkconfig(opus) BuildRequires: Needed to build new opus
  support.
- Add spice-Don-t-use-48kHz-for-playback-recording-rates.patch:
  Fix advertised sound playback/recording rates in public headers
  (rh#1129961).
- Drop spice-glibc217.patch: No longer needed.
- Run spec-clean on spec file, remove conditionals for obsolete
  versions of openSUSE, enable parallel build and drop obsolete
  clean section.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel buildrequire by selected pkgconfig(xlibs..)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1433505600">- Don't allow setting password longer than what the spice protocol
  allows. password-length-check.patch. boo#931044</changelog>
  <changelog author="cbosdonnat@suse.com" date="1441627200">- bsc#944460: fix CVE-2015-3247.
  cve-2015-3247.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1444132800">- Update to version 0.12.6
  + Removed spicec client code, it has been superseded by remote-viewer
    and other spice-gtk based clients
  + Unix socket support
  + LZ4 support
  + Let clients specify their preferred image compression format
  + Allow to record and replay a spice-server session
  + Fixes for CVE-2015-3247 CVE-2015-5260 and CVE-2015-5261
    bsc#944787, bsc#948976
  + spice-protocol submodule has been removed, spice-protocol must
    now be installed when building spice-server
  + Remove write polling in chardevs to reduce wakeups
- Remove upstream merged patches:
  + spice-Don-t-use-48kHz-for-playback-recording-rates.patch
  + password-length-check.patch
  + cve-2015-3247.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1460721600">- Update to version 0.12.7 (fate#320079)
  + spice-server will now send TCP keepalive probes on the TCP connections it
    uses. This can prevent unwanted idle disconnections if proxies are used
    between the client and the host.
  + Fix important memory usage when the webdav channel is used
  + Do not disconnect when the client requests an unsupported compression type
  + Fix a few race conditions
  + Fix display glitch when using XSpice
  + Improve help string for 'replay -s'
  + Fix crashes in corner cases (buggy spice-html5 + win10, vnc + SPICE port
    configured, USB webcam redirection over a slow link)
  + Fix various compilation warning when building on 32 bit machines
  + Some fixes for big-endian machines, more work is likely to be needed
  + Do not build static libraries by default, this can be reenabled with --enable-static
  + Fix small leak in MJPEG code</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.12.8:
  + Fixes for bsc#982385 / CVE-2016-0749 and bsc#982386 / CVE-2016-2150.</changelog>
  <changelog author="msuchanek@suse.com" date="1478779200">- remove ExclusiveArch (boo#1009438)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Obsolete spice-client (bsc#1013916)</changelog>
  <changelog author="astieger@suse.com" date="1482408000">- restrict suppression of obsoletes-not-provided warning to
  spice-client bsc#1013916</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Synchronize with SLES (fate#322402):
  + bnc#894069: disable smartcard support for SLES
  + merge changelog</changelog>
  <changelog author="psimons@suse.com" date="1486036801">- Added patches to fix two security vulnerabilities.
  * CVE-2016-9577-buffer-overflow-in-main_channel_alloc_msg_rcv_buf.patch
    [CVE-2016-9577, bsc#1023078]
  * CVE-2016-9578-remote-dos-via-crafted-message.patch
    [CVE-2016-9578, bsc#1023079]</changelog>
  <changelog author="cbosdonnat@suse.com" date="1509019200">- Release 0.14.0
  * fix client mouse with virgl
  * fix frozen display after seamless migration
  * set human-readable name on spice threads
  * add sanity-checks for ORC library as it can abort spice-server
    when selinux is in use
  * Close TCP connection early when client did not send the correct
    SPICE magic bytes: this allows VNC clients to gracefully fail
    when connecting to a SPICE port
  * Add VP9 encoding support when GStreamer is being used and misc
    streaming/encoding improvements
  * Improvements to replay utility
  * Limit (deprecated/unusud) QXLMessage size to 100,000 characters
    for improved safety
  * Improve image quality in low bitrate situation when using the
    GStreamer backend
  * Added GStreamer support to the video streaming code
  * Fix old migration bug causing migration to never end in some cases
  * Added lz4 compression to the spicevmc channel
  * Ongoing code cleanups
  * add spice_qxl_gl_scanout() spice_qxl_gl_draw_async() for local
    virgl support
  * spice_server_set_keepalive_timeout() has been removed in favour of
    unconditionally sending keepalive probes every 10 minutes
  * Added public spice_server_set_keepalive_timeout() to make it possible
    to tweak keepalive on all SPICE connection. This can prevent unwanted
    idle disconnections if proxies are used between the client and the host.
  * Fix important memory usage when the webdav channel is used
  * Do not disconnect when the client requests an unsupported compression type
  * Fix potential race condition when using multiple QXL devices
  * Fix display glitch when using XSpice
  * Improve help string for 'replay -s'
  * Fix small leak in MJPEG code
- Removed patches:
  * CVE-2016-9577-buffer-overflow-in-main_channel_alloc_msg_rcv_buf.patch
  * CVE-2016-9578-remote-dos-via-crafted-message.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Enable smartcards on sle15 as the supportlib is available
  * Condition it using name everywhere instead of suse versions
    and join together with lz4
- Format with spec-cleaner
- Convert dependencies to pkgconfig style
- Install documentation and license file
- Add configure arguments to most of the options to not rely on
  autotools automatic behavior
  * Also enable gstreamer and lz4 options
- Drop the not needed python dependencies, they are needed only
  when building from git snapshot</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Split the sle condition again for exact features to allow their
  override</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
</package>
<package pkgid="aeace29d8e4f736490a25d4e250d81bda6606f6d2477588179cfaa8e7113da3e" name="libspice-server1" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 0.12.2:
  + Skipped 0.12.1, it existed in git but was never released.
  + spice-server now requires glib2 (like qemu does).
  + More robust ssl error and certificate handling.
  + Added support for websockets.
  + Tons of seamless migration bugfixes.
  + Also some none seamless migration bugfixes.
- Clean spec file using spec-cleaner.
- Rebase spice-glibc217.patch.
- Add pkgconfig(glib-2.0) BuildRequires: new dependency.
- Pass --enable-client and --enable-smartcard to configure in
  order to ensure the client and smartcard support are built (SC
  only on openSUSE &gt;= 12.2).</changelog>
  <changelog author="aevseev@gmail.com" date="1375099200">- Update to version 0.12.4:
  + log actual address spice-server binds to
  + main_channel: fix double release of migration target data (rhbz#859027)
  + red_channel: replace an assert upon threads mismatch with a warning (rhbz#823472)
  + support for filtering out agent file-xfer msgs (rhbz#961848)
  ++ new library export spice_server_set_agent_file_xfer
  + mjpeg encoder statistics (mjpeg_encoder_get_stats)
  + improve stream stats readability and ease of parsing
  + fix for stuck display_channel over WAN (jpeg_enabled=true) (rhbz#977998)
  + Use RING_FOREACH_SAFE and other SAFE macros (rhbz#887775)
  + Some server/tests fixes.
- New features from 0.12.3:
  + monitor client bandwidth and latency.
  + dynamically adjust video stream quality based on client bandwidth &amp; latency.
  ++ new SPICE_MSGC_DISPLAY_STREAM_REPORT
  ++ can also set SPICE_BIT_RATE environment variable to override.
  + support arbitrary latency of audio stream wrt video stream:
  ++ new SPICE_MSG_PLAYBACK_LATENCY
  + notify agent on client disconnection
  ++ new VD_AGENT_CLIENT_DISCONNECTED message
  + better support for switching from qxl to vga mode
  ++ new library export spice_qxl_driver_unload
  + multiple monitor support in single channel fixes.
  + stop streams before migration.
  + don't send empty volume messages.
  + Bugs fixed: rhbz#891326, rhbz#958276, rhbz#956345
  + fixes to inputs, chardev, build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1413374400">- Update to version 0.12.5:
  + Added Opus support. Celt support will be obsoleted in a future
    release.
  + Addition of webdav channel.
  + Force use of TLS 1.0 or newer for TLS connections.
  + Reference manual.
  + Some optimizations improving CPU use.
  + Various bug fixes for race conditions, memory corruption, which
    could be triggered on client disconnections, migration, and
    cause spice-server to misbehave.
  + Portability fixes.
  + Code cleanups.
  + bsc#848279: fix CVE-2013-4282.
- Add pkconfig(opus) BuildRequires: Needed to build new opus
  support.
- Add spice-Don-t-use-48kHz-for-playback-recording-rates.patch:
  Fix advertised sound playback/recording rates in public headers
  (rh#1129961).
- Drop spice-glibc217.patch: No longer needed.
- Run spec-clean on spec file, remove conditionals for obsolete
  versions of openSUSE, enable parallel build and drop obsolete
  clean section.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel buildrequire by selected pkgconfig(xlibs..)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1433505600">- Don't allow setting password longer than what the spice protocol
  allows. password-length-check.patch. boo#931044</changelog>
  <changelog author="cbosdonnat@suse.com" date="1441627200">- bsc#944460: fix CVE-2015-3247.
  cve-2015-3247.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1444132800">- Update to version 0.12.6
  + Removed spicec client code, it has been superseded by remote-viewer
    and other spice-gtk based clients
  + Unix socket support
  + LZ4 support
  + Let clients specify their preferred image compression format
  + Allow to record and replay a spice-server session
  + Fixes for CVE-2015-3247 CVE-2015-5260 and CVE-2015-5261
    bsc#944787, bsc#948976
  + spice-protocol submodule has been removed, spice-protocol must
    now be installed when building spice-server
  + Remove write polling in chardevs to reduce wakeups
- Remove upstream merged patches:
  + spice-Don-t-use-48kHz-for-playback-recording-rates.patch
  + password-length-check.patch
  + cve-2015-3247.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1460721600">- Update to version 0.12.7 (fate#320079)
  + spice-server will now send TCP keepalive probes on the TCP connections it
    uses. This can prevent unwanted idle disconnections if proxies are used
    between the client and the host.
  + Fix important memory usage when the webdav channel is used
  + Do not disconnect when the client requests an unsupported compression type
  + Fix a few race conditions
  + Fix display glitch when using XSpice
  + Improve help string for 'replay -s'
  + Fix crashes in corner cases (buggy spice-html5 + win10, vnc + SPICE port
    configured, USB webcam redirection over a slow link)
  + Fix various compilation warning when building on 32 bit machines
  + Some fixes for big-endian machines, more work is likely to be needed
  + Do not build static libraries by default, this can be reenabled with --enable-static
  + Fix small leak in MJPEG code</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.12.8:
  + Fixes for bsc#982385 / CVE-2016-0749 and bsc#982386 / CVE-2016-2150.</changelog>
  <changelog author="msuchanek@suse.com" date="1478779200">- remove ExclusiveArch (boo#1009438)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Obsolete spice-client (bsc#1013916)</changelog>
  <changelog author="astieger@suse.com" date="1482408000">- restrict suppression of obsoletes-not-provided warning to
  spice-client bsc#1013916</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Synchronize with SLES (fate#322402):
  + bnc#894069: disable smartcard support for SLES
  + merge changelog</changelog>
  <changelog author="psimons@suse.com" date="1486036801">- Added patches to fix two security vulnerabilities.
  * CVE-2016-9577-buffer-overflow-in-main_channel_alloc_msg_rcv_buf.patch
    [CVE-2016-9577, bsc#1023078]
  * CVE-2016-9578-remote-dos-via-crafted-message.patch
    [CVE-2016-9578, bsc#1023079]</changelog>
  <changelog author="cbosdonnat@suse.com" date="1509019200">- Release 0.14.0
  * fix client mouse with virgl
  * fix frozen display after seamless migration
  * set human-readable name on spice threads
  * add sanity-checks for ORC library as it can abort spice-server
    when selinux is in use
  * Close TCP connection early when client did not send the correct
    SPICE magic bytes: this allows VNC clients to gracefully fail
    when connecting to a SPICE port
  * Add VP9 encoding support when GStreamer is being used and misc
    streaming/encoding improvements
  * Improvements to replay utility
  * Limit (deprecated/unusud) QXLMessage size to 100,000 characters
    for improved safety
  * Improve image quality in low bitrate situation when using the
    GStreamer backend
  * Added GStreamer support to the video streaming code
  * Fix old migration bug causing migration to never end in some cases
  * Added lz4 compression to the spicevmc channel
  * Ongoing code cleanups
  * add spice_qxl_gl_scanout() spice_qxl_gl_draw_async() for local
    virgl support
  * spice_server_set_keepalive_timeout() has been removed in favour of
    unconditionally sending keepalive probes every 10 minutes
  * Added public spice_server_set_keepalive_timeout() to make it possible
    to tweak keepalive on all SPICE connection. This can prevent unwanted
    idle disconnections if proxies are used between the client and the host.
  * Fix important memory usage when the webdav channel is used
  * Do not disconnect when the client requests an unsupported compression type
  * Fix potential race condition when using multiple QXL devices
  * Fix display glitch when using XSpice
  * Improve help string for 'replay -s'
  * Fix small leak in MJPEG code
- Removed patches:
  * CVE-2016-9577-buffer-overflow-in-main_channel_alloc_msg_rcv_buf.patch
  * CVE-2016-9578-remote-dos-via-crafted-message.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Enable smartcards on sle15 as the supportlib is available
  * Condition it using name everywhere instead of suse versions
    and join together with lz4
- Format with spec-cleaner
- Convert dependencies to pkgconfig style
- Install documentation and license file
- Add configure arguments to most of the options to not rely on
  autotools automatic behavior
  * Also enable gstreamer and lz4 options
- Drop the not needed python dependencies, they are needed only
  when building from git snapshot</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Split the sle condition again for exact features to allow their
  override</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
</package>
<package pkgid="157d2dadbb4b4f5238605fec384bd53b7b2783aafb54ebcbfd4b614f3f51dfd0" name="libssh" arch="src">
  <version epoch="0" ver="0.7.5" rel="lp150.5.3.1"/>
  <changelog author="kukuk@suse.de" date="1387454400">- Remove remove-pedantic-errors.diff, does not apply anymore and is
  not needed anymore.</changelog>
  <changelog author="asn@cryptomilk.org" date="1389182400">- Update to version 0.6.0
  * Added new publicy key API.
  * Added new userauth API.
  * Added ssh_get_publickey_hash() function.
  * Added ssh_get_poll_flags() function.
  * Added gssapi-mic userauth.
  * Added GSSAPIServerIdentity option.
  * Added GSSAPIClientIdentity option.
  * Added GSSAPIDelegateCredentials option.
  * Added new callback based server API.
  * Added Elliptic Curve DSA (ECDSA) support (with OpenSSL).
  * Added Elliptic Curve Diffie Hellman (ECDH) support.
  * Added Curve25519 for ECDH key exchange.
  * Added improved logging system.
  * Added SSH-agent forwarding.
  * Added key-reexchange.
  * Added more unit tests.
  * Improved documentation.
  * Fixed timeout handling.</changelog>
  <changelog author="asn@cryptomilk.org" date="1392033600">- Update to version 0.6.1
  * Added support for libgcrypt 1.6.
  * Added ssh_channel_accept_forward().
  * Added known_hosts heuristic during connection (#138).
  * Added getters for session cipher names.
  * Fixed decrypt of zero length buffer.
  * Fixed padding in RSA signature blobs.
  * Fixed DSA signature extraction.
  * Fixed some memory leaks.
  * Fixed read of non-connected socket.
  * Fixed thread dectection.</changelog>
  <changelog author="asn@cryptomilk.org" date="1393934400">- Update to version 0.6.3
  * Fix CVE-2014-0017.</changelog>
  <changelog author="asn@cryptomilk.org" date="1418990400">- Update to version 0.6.4
  * Fixed CVE-2014-8132.
  * Added SHA-2 for session ID signing with ECDSA keys.
  * Added support for ECDSA host keys.
  * Added support for more ECDSA hostkey algorithms.
  * Added ssh_pki_key_ecdsa_name() API.
  * Fixed setting the bindfd only after successful listen.
  * Fixed issues with user created sockets.
  * Fixed several issues in libssh C++ wrapper.
  * Fixed several documentation issues.
  * Fixed channel exit-signal request.
  * Fixed X11 request screen number in messages.
  * Fixed several memory leaks.</changelog>
  <changelog author="coolo@suse.com" date="1421928000">- removing argument from popd
- add baselibs.conf as source</changelog>
  <changelog author="asn@cryptomilk.org" date="1430395200">- Update to version 0.6.5
  * Fixed CVE-2015-3146
  * Fixed port handling in config file
  * Fixed the build with libgcrypt
  * Fixed SFTP endian issues (rlo #179)
  * Fixed uninitilized sig variable (rlo #167)
  * Fixed polling issues which could result in a hang
  * Fixed handling of EINTR in ssh_poll() (rlo #186)
  * Fixed C99 issues with __func__
  * Fixed some memory leaks
  * Improved macro detection on Windows</changelog>
  <changelog author="dmueller@suse.com" date="1430913600">- add gcc5-fixes.patch: Fix build against GCC 5.x</changelog>
  <changelog author="asn@cryptomilk.org" date="1431345600">- Update to version 0.7.0
  * Added support for ed25519 keys
  * Added SHA2 algorithms for HMAC
  * Added improved and more secure buffer handling code
  * Added callback for auth_none_function
  * Added support for ECDSA private key signing
  * Added more tests
  * Fixed a lot of bugs
  * Improved API documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1435665600">- Update to version 0.7.1
  * Fixed SSH_AUTH_PARTIAL auth with auto public key
  * Fixed memory leak in session options
  * Fixed allocation of ed25519 public keys
  * Fixed channel exit-status and exit-signal
  * Reintroduce ssh_forward_listen()</changelog>
  <changelog author="tchvatal@suse.com" date="1437393600">- Enable testsuite run to check the state of libssh itself
- Use SUSE macros to define environment clearly
- Enable gssapi by adding krb5 dependency</changelog>
  <changelog author="asn@cryptomilk.org" date="1444219200">- Update to version 0.7.2
  * Fixed OpenSSL detection on Windows
  * Fixed return status for ssh_userauth_agent()
  * Fixed KEX to prefer hmac-sha2-256
  * Fixed sftp packet handling
  * Fixed return values of ssh_key_is_(public|private)
  * Fixed bug in global success reply</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Update descriptions. Drop redundant pkgconfig require
  (it's autodetected).</changelog>
  <changelog author="asn@cryptomilk.org" date="1486555200">- Update to version 0.7.4
  * Added id_ed25519 to the default identity list
  * Fixed sftp EOF packet handling
  * Fixed ssh_send_banner() to confirm with RFC 4253
  * Fixed some memory leaks
- Removed patch gcc5-fixes.patch</changelog>
  <changelog author="asn@cryptomilk.org" date="1492084800">- Update to version 0.7.5
  * Fixed a memory allocation issue with buffers
  * Fixed PKI on Windows
  * Fixed some SSHv1 functions
  * Fixed config hostname expansion</changelog>
  <changelog author="astieger@suse.com" date="1501502400">- add package keyring and verify source signature</changelog>
  <changelog author="vcizek@suse.com" date="1505476800">- add support for building with OpenSSL 1.1 (bsc#1055266)
  * added patches:
  * 0001-cmake-Use-configure-check-for-CRYPTO_ctr128_encrypt.patch
  * 0001-libcrypto-Introduce-a-libcrypto-compat-file.patch
  * 0001-libcrypto-Remove-AES_ctr128_encrypt.patch
  * 0001-libcrypto-Use-a-pointer-for-EVP_MD_CTX.patch
  * 0001-libcrypto-Use-a-pointer-for-EVP_CIPHER_CTX.patch
  * 0001-libcrypto-Use-newer-API-for-HMAC.patch
  * 0001-pki_crypto-Use-getters-and-setters-for-opaque-keys-a.patch
  * 0001-threads-Use-new-API-call-for-OpenSSL-CRYPTO-THREADID.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514116800">- Add patch to fix parsing of config files (boo#1067782):
  * 0001-config-Bugfix-Dont-skip-unseen-opcodes.patch</changelog>
  <changelog author="jmcdonough@suse.com" date="1520596800">- Disable timeout testing on slow build systems (bsc#1084713)
  * 0001-disable-timeout-test-on-slow-buildsystems.patch</changelog>
  <changelog author="jmcdonough@suse.com" date="1539086400">- Fix server authentication bypass; (bsc#1108020); (CVE-2018-10933)
  * CVE-2018-10933.patch</changelog>
</package>
<package pkgid="7d53f336b6cc9314dff3701e052b0b5b1c0ebd42c9e498b47380a11cbb6bb942" name="libssh-devel" arch="x86_64">
  <version epoch="0" ver="0.7.5" rel="lp150.5.3.1"/>
  <changelog author="kukuk@suse.de" date="1387454400">- Remove remove-pedantic-errors.diff, does not apply anymore and is
  not needed anymore.</changelog>
  <changelog author="asn@cryptomilk.org" date="1389182400">- Update to version 0.6.0
  * Added new publicy key API.
  * Added new userauth API.
  * Added ssh_get_publickey_hash() function.
  * Added ssh_get_poll_flags() function.
  * Added gssapi-mic userauth.
  * Added GSSAPIServerIdentity option.
  * Added GSSAPIClientIdentity option.
  * Added GSSAPIDelegateCredentials option.
  * Added new callback based server API.
  * Added Elliptic Curve DSA (ECDSA) support (with OpenSSL).
  * Added Elliptic Curve Diffie Hellman (ECDH) support.
  * Added Curve25519 for ECDH key exchange.
  * Added improved logging system.
  * Added SSH-agent forwarding.
  * Added key-reexchange.
  * Added more unit tests.
  * Improved documentation.
  * Fixed timeout handling.</changelog>
  <changelog author="asn@cryptomilk.org" date="1392033600">- Update to version 0.6.1
  * Added support for libgcrypt 1.6.
  * Added ssh_channel_accept_forward().
  * Added known_hosts heuristic during connection (#138).
  * Added getters for session cipher names.
  * Fixed decrypt of zero length buffer.
  * Fixed padding in RSA signature blobs.
  * Fixed DSA signature extraction.
  * Fixed some memory leaks.
  * Fixed read of non-connected socket.
  * Fixed thread dectection.</changelog>
  <changelog author="asn@cryptomilk.org" date="1393934400">- Update to version 0.6.3
  * Fix CVE-2014-0017.</changelog>
  <changelog author="asn@cryptomilk.org" date="1418990400">- Update to version 0.6.4
  * Fixed CVE-2014-8132.
  * Added SHA-2 for session ID signing with ECDSA keys.
  * Added support for ECDSA host keys.
  * Added support for more ECDSA hostkey algorithms.
  * Added ssh_pki_key_ecdsa_name() API.
  * Fixed setting the bindfd only after successful listen.
  * Fixed issues with user created sockets.
  * Fixed several issues in libssh C++ wrapper.
  * Fixed several documentation issues.
  * Fixed channel exit-signal request.
  * Fixed X11 request screen number in messages.
  * Fixed several memory leaks.</changelog>
  <changelog author="coolo@suse.com" date="1421928000">- removing argument from popd
- add baselibs.conf as source</changelog>
  <changelog author="asn@cryptomilk.org" date="1430395200">- Update to version 0.6.5
  * Fixed CVE-2015-3146
  * Fixed port handling in config file
  * Fixed the build with libgcrypt
  * Fixed SFTP endian issues (rlo #179)
  * Fixed uninitilized sig variable (rlo #167)
  * Fixed polling issues which could result in a hang
  * Fixed handling of EINTR in ssh_poll() (rlo #186)
  * Fixed C99 issues with __func__
  * Fixed some memory leaks
  * Improved macro detection on Windows</changelog>
  <changelog author="dmueller@suse.com" date="1430913600">- add gcc5-fixes.patch: Fix build against GCC 5.x</changelog>
  <changelog author="asn@cryptomilk.org" date="1431345600">- Update to version 0.7.0
  * Added support for ed25519 keys
  * Added SHA2 algorithms for HMAC
  * Added improved and more secure buffer handling code
  * Added callback for auth_none_function
  * Added support for ECDSA private key signing
  * Added more tests
  * Fixed a lot of bugs
  * Improved API documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1435665600">- Update to version 0.7.1
  * Fixed SSH_AUTH_PARTIAL auth with auto public key
  * Fixed memory leak in session options
  * Fixed allocation of ed25519 public keys
  * Fixed channel exit-status and exit-signal
  * Reintroduce ssh_forward_listen()</changelog>
  <changelog author="tchvatal@suse.com" date="1437393600">- Enable testsuite run to check the state of libssh itself
- Use SUSE macros to define environment clearly
- Enable gssapi by adding krb5 dependency</changelog>
  <changelog author="asn@cryptomilk.org" date="1444219200">- Update to version 0.7.2
  * Fixed OpenSSL detection on Windows
  * Fixed return status for ssh_userauth_agent()
  * Fixed KEX to prefer hmac-sha2-256
  * Fixed sftp packet handling
  * Fixed return values of ssh_key_is_(public|private)
  * Fixed bug in global success reply</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Update descriptions. Drop redundant pkgconfig require
  (it's autodetected).</changelog>
  <changelog author="asn@cryptomilk.org" date="1486555200">- Update to version 0.7.4
  * Added id_ed25519 to the default identity list
  * Fixed sftp EOF packet handling
  * Fixed ssh_send_banner() to confirm with RFC 4253
  * Fixed some memory leaks
- Removed patch gcc5-fixes.patch</changelog>
  <changelog author="asn@cryptomilk.org" date="1492084800">- Update to version 0.7.5
  * Fixed a memory allocation issue with buffers
  * Fixed PKI on Windows
  * Fixed some SSHv1 functions
  * Fixed config hostname expansion</changelog>
  <changelog author="astieger@suse.com" date="1501502400">- add package keyring and verify source signature</changelog>
  <changelog author="vcizek@suse.com" date="1505476800">- add support for building with OpenSSL 1.1 (bsc#1055266)
  * added patches:
  * 0001-cmake-Use-configure-check-for-CRYPTO_ctr128_encrypt.patch
  * 0001-libcrypto-Introduce-a-libcrypto-compat-file.patch
  * 0001-libcrypto-Remove-AES_ctr128_encrypt.patch
  * 0001-libcrypto-Use-a-pointer-for-EVP_MD_CTX.patch
  * 0001-libcrypto-Use-a-pointer-for-EVP_CIPHER_CTX.patch
  * 0001-libcrypto-Use-newer-API-for-HMAC.patch
  * 0001-pki_crypto-Use-getters-and-setters-for-opaque-keys-a.patch
  * 0001-threads-Use-new-API-call-for-OpenSSL-CRYPTO-THREADID.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514116800">- Add patch to fix parsing of config files (boo#1067782):
  * 0001-config-Bugfix-Dont-skip-unseen-opcodes.patch</changelog>
  <changelog author="jmcdonough@suse.com" date="1520596800">- Disable timeout testing on slow build systems (bsc#1084713)
  * 0001-disable-timeout-test-on-slow-buildsystems.patch</changelog>
  <changelog author="jmcdonough@suse.com" date="1539086400">- Fix server authentication bypass; (bsc#1108020); (CVE-2018-10933)
  * CVE-2018-10933.patch</changelog>
</package>
<package pkgid="302b6a9bde174216a6ac9ece5a290ef86b34355bf665402a2b6b00e454f8f469" name="libssh-devel-doc" arch="x86_64">
  <version epoch="0" ver="0.7.5" rel="lp150.5.3.1"/>
  <changelog author="kukuk@suse.de" date="1387454400">- Remove remove-pedantic-errors.diff, does not apply anymore and is
  not needed anymore.</changelog>
  <changelog author="asn@cryptomilk.org" date="1389182400">- Update to version 0.6.0
  * Added new publicy key API.
  * Added new userauth API.
  * Added ssh_get_publickey_hash() function.
  * Added ssh_get_poll_flags() function.
  * Added gssapi-mic userauth.
  * Added GSSAPIServerIdentity option.
  * Added GSSAPIClientIdentity option.
  * Added GSSAPIDelegateCredentials option.
  * Added new callback based server API.
  * Added Elliptic Curve DSA (ECDSA) support (with OpenSSL).
  * Added Elliptic Curve Diffie Hellman (ECDH) support.
  * Added Curve25519 for ECDH key exchange.
  * Added improved logging system.
  * Added SSH-agent forwarding.
  * Added key-reexchange.
  * Added more unit tests.
  * Improved documentation.
  * Fixed timeout handling.</changelog>
  <changelog author="asn@cryptomilk.org" date="1392033600">- Update to version 0.6.1
  * Added support for libgcrypt 1.6.
  * Added ssh_channel_accept_forward().
  * Added known_hosts heuristic during connection (#138).
  * Added getters for session cipher names.
  * Fixed decrypt of zero length buffer.
  * Fixed padding in RSA signature blobs.
  * Fixed DSA signature extraction.
  * Fixed some memory leaks.
  * Fixed read of non-connected socket.
  * Fixed thread dectection.</changelog>
  <changelog author="asn@cryptomilk.org" date="1393934400">- Update to version 0.6.3
  * Fix CVE-2014-0017.</changelog>
  <changelog author="asn@cryptomilk.org" date="1418990400">- Update to version 0.6.4
  * Fixed CVE-2014-8132.
  * Added SHA-2 for session ID signing with ECDSA keys.
  * Added support for ECDSA host keys.
  * Added support for more ECDSA hostkey algorithms.
  * Added ssh_pki_key_ecdsa_name() API.
  * Fixed setting the bindfd only after successful listen.
  * Fixed issues with user created sockets.
  * Fixed several issues in libssh C++ wrapper.
  * Fixed several documentation issues.
  * Fixed channel exit-signal request.
  * Fixed X11 request screen number in messages.
  * Fixed several memory leaks.</changelog>
  <changelog author="coolo@suse.com" date="1421928000">- removing argument from popd
- add baselibs.conf as source</changelog>
  <changelog author="asn@cryptomilk.org" date="1430395200">- Update to version 0.6.5
  * Fixed CVE-2015-3146
  * Fixed port handling in config file
  * Fixed the build with libgcrypt
  * Fixed SFTP endian issues (rlo #179)
  * Fixed uninitilized sig variable (rlo #167)
  * Fixed polling issues which could result in a hang
  * Fixed handling of EINTR in ssh_poll() (rlo #186)
  * Fixed C99 issues with __func__
  * Fixed some memory leaks
  * Improved macro detection on Windows</changelog>
  <changelog author="dmueller@suse.com" date="1430913600">- add gcc5-fixes.patch: Fix build against GCC 5.x</changelog>
  <changelog author="asn@cryptomilk.org" date="1431345600">- Update to version 0.7.0
  * Added support for ed25519 keys
  * Added SHA2 algorithms for HMAC
  * Added improved and more secure buffer handling code
  * Added callback for auth_none_function
  * Added support for ECDSA private key signing
  * Added more tests
  * Fixed a lot of bugs
  * Improved API documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1435665600">- Update to version 0.7.1
  * Fixed SSH_AUTH_PARTIAL auth with auto public key
  * Fixed memory leak in session options
  * Fixed allocation of ed25519 public keys
  * Fixed channel exit-status and exit-signal
  * Reintroduce ssh_forward_listen()</changelog>
  <changelog author="tchvatal@suse.com" date="1437393600">- Enable testsuite run to check the state of libssh itself
- Use SUSE macros to define environment clearly
- Enable gssapi by adding krb5 dependency</changelog>
  <changelog author="asn@cryptomilk.org" date="1444219200">- Update to version 0.7.2
  * Fixed OpenSSL detection on Windows
  * Fixed return status for ssh_userauth_agent()
  * Fixed KEX to prefer hmac-sha2-256
  * Fixed sftp packet handling
  * Fixed return values of ssh_key_is_(public|private)
  * Fixed bug in global success reply</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Update descriptions. Drop redundant pkgconfig require
  (it's autodetected).</changelog>
  <changelog author="asn@cryptomilk.org" date="1486555200">- Update to version 0.7.4
  * Added id_ed25519 to the default identity list
  * Fixed sftp EOF packet handling
  * Fixed ssh_send_banner() to confirm with RFC 4253
  * Fixed some memory leaks
- Removed patch gcc5-fixes.patch</changelog>
  <changelog author="asn@cryptomilk.org" date="1492084800">- Update to version 0.7.5
  * Fixed a memory allocation issue with buffers
  * Fixed PKI on Windows
  * Fixed some SSHv1 functions
  * Fixed config hostname expansion</changelog>
  <changelog author="astieger@suse.com" date="1501502400">- add package keyring and verify source signature</changelog>
  <changelog author="vcizek@suse.com" date="1505476800">- add support for building with OpenSSL 1.1 (bsc#1055266)
  * added patches:
  * 0001-cmake-Use-configure-check-for-CRYPTO_ctr128_encrypt.patch
  * 0001-libcrypto-Introduce-a-libcrypto-compat-file.patch
  * 0001-libcrypto-Remove-AES_ctr128_encrypt.patch
  * 0001-libcrypto-Use-a-pointer-for-EVP_MD_CTX.patch
  * 0001-libcrypto-Use-a-pointer-for-EVP_CIPHER_CTX.patch
  * 0001-libcrypto-Use-newer-API-for-HMAC.patch
  * 0001-pki_crypto-Use-getters-and-setters-for-opaque-keys-a.patch
  * 0001-threads-Use-new-API-call-for-OpenSSL-CRYPTO-THREADID.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514116800">- Add patch to fix parsing of config files (boo#1067782):
  * 0001-config-Bugfix-Dont-skip-unseen-opcodes.patch</changelog>
  <changelog author="jmcdonough@suse.com" date="1520596800">- Disable timeout testing on slow build systems (bsc#1084713)
  * 0001-disable-timeout-test-on-slow-buildsystems.patch</changelog>
  <changelog author="jmcdonough@suse.com" date="1539086400">- Fix server authentication bypass; (bsc#1108020); (CVE-2018-10933)
  * CVE-2018-10933.patch</changelog>
</package>
<package pkgid="79584ae0eaaadae2d949bcf9595fb3c04d705575f1a33f522b8ed9001cf853b2" name="libssh4" arch="x86_64">
  <version epoch="0" ver="0.7.5" rel="lp150.5.3.1"/>
  <changelog author="kukuk@suse.de" date="1387454400">- Remove remove-pedantic-errors.diff, does not apply anymore and is
  not needed anymore.</changelog>
  <changelog author="asn@cryptomilk.org" date="1389182400">- Update to version 0.6.0
  * Added new publicy key API.
  * Added new userauth API.
  * Added ssh_get_publickey_hash() function.
  * Added ssh_get_poll_flags() function.
  * Added gssapi-mic userauth.
  * Added GSSAPIServerIdentity option.
  * Added GSSAPIClientIdentity option.
  * Added GSSAPIDelegateCredentials option.
  * Added new callback based server API.
  * Added Elliptic Curve DSA (ECDSA) support (with OpenSSL).
  * Added Elliptic Curve Diffie Hellman (ECDH) support.
  * Added Curve25519 for ECDH key exchange.
  * Added improved logging system.
  * Added SSH-agent forwarding.
  * Added key-reexchange.
  * Added more unit tests.
  * Improved documentation.
  * Fixed timeout handling.</changelog>
  <changelog author="asn@cryptomilk.org" date="1392033600">- Update to version 0.6.1
  * Added support for libgcrypt 1.6.
  * Added ssh_channel_accept_forward().
  * Added known_hosts heuristic during connection (#138).
  * Added getters for session cipher names.
  * Fixed decrypt of zero length buffer.
  * Fixed padding in RSA signature blobs.
  * Fixed DSA signature extraction.
  * Fixed some memory leaks.
  * Fixed read of non-connected socket.
  * Fixed thread dectection.</changelog>
  <changelog author="asn@cryptomilk.org" date="1393934400">- Update to version 0.6.3
  * Fix CVE-2014-0017.</changelog>
  <changelog author="asn@cryptomilk.org" date="1418990400">- Update to version 0.6.4
  * Fixed CVE-2014-8132.
  * Added SHA-2 for session ID signing with ECDSA keys.
  * Added support for ECDSA host keys.
  * Added support for more ECDSA hostkey algorithms.
  * Added ssh_pki_key_ecdsa_name() API.
  * Fixed setting the bindfd only after successful listen.
  * Fixed issues with user created sockets.
  * Fixed several issues in libssh C++ wrapper.
  * Fixed several documentation issues.
  * Fixed channel exit-signal request.
  * Fixed X11 request screen number in messages.
  * Fixed several memory leaks.</changelog>
  <changelog author="coolo@suse.com" date="1421928000">- removing argument from popd
- add baselibs.conf as source</changelog>
  <changelog author="asn@cryptomilk.org" date="1430395200">- Update to version 0.6.5
  * Fixed CVE-2015-3146
  * Fixed port handling in config file
  * Fixed the build with libgcrypt
  * Fixed SFTP endian issues (rlo #179)
  * Fixed uninitilized sig variable (rlo #167)
  * Fixed polling issues which could result in a hang
  * Fixed handling of EINTR in ssh_poll() (rlo #186)
  * Fixed C99 issues with __func__
  * Fixed some memory leaks
  * Improved macro detection on Windows</changelog>
  <changelog author="dmueller@suse.com" date="1430913600">- add gcc5-fixes.patch: Fix build against GCC 5.x</changelog>
  <changelog author="asn@cryptomilk.org" date="1431345600">- Update to version 0.7.0
  * Added support for ed25519 keys
  * Added SHA2 algorithms for HMAC
  * Added improved and more secure buffer handling code
  * Added callback for auth_none_function
  * Added support for ECDSA private key signing
  * Added more tests
  * Fixed a lot of bugs
  * Improved API documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1435665600">- Update to version 0.7.1
  * Fixed SSH_AUTH_PARTIAL auth with auto public key
  * Fixed memory leak in session options
  * Fixed allocation of ed25519 public keys
  * Fixed channel exit-status and exit-signal
  * Reintroduce ssh_forward_listen()</changelog>
  <changelog author="tchvatal@suse.com" date="1437393600">- Enable testsuite run to check the state of libssh itself
- Use SUSE macros to define environment clearly
- Enable gssapi by adding krb5 dependency</changelog>
  <changelog author="asn@cryptomilk.org" date="1444219200">- Update to version 0.7.2
  * Fixed OpenSSL detection on Windows
  * Fixed return status for ssh_userauth_agent()
  * Fixed KEX to prefer hmac-sha2-256
  * Fixed sftp packet handling
  * Fixed return values of ssh_key_is_(public|private)
  * Fixed bug in global success reply</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Update descriptions. Drop redundant pkgconfig require
  (it's autodetected).</changelog>
  <changelog author="asn@cryptomilk.org" date="1486555200">- Update to version 0.7.4
  * Added id_ed25519 to the default identity list
  * Fixed sftp EOF packet handling
  * Fixed ssh_send_banner() to confirm with RFC 4253
  * Fixed some memory leaks
- Removed patch gcc5-fixes.patch</changelog>
  <changelog author="asn@cryptomilk.org" date="1492084800">- Update to version 0.7.5
  * Fixed a memory allocation issue with buffers
  * Fixed PKI on Windows
  * Fixed some SSHv1 functions
  * Fixed config hostname expansion</changelog>
  <changelog author="astieger@suse.com" date="1501502400">- add package keyring and verify source signature</changelog>
  <changelog author="vcizek@suse.com" date="1505476800">- add support for building with OpenSSL 1.1 (bsc#1055266)
  * added patches:
  * 0001-cmake-Use-configure-check-for-CRYPTO_ctr128_encrypt.patch
  * 0001-libcrypto-Introduce-a-libcrypto-compat-file.patch
  * 0001-libcrypto-Remove-AES_ctr128_encrypt.patch
  * 0001-libcrypto-Use-a-pointer-for-EVP_MD_CTX.patch
  * 0001-libcrypto-Use-a-pointer-for-EVP_CIPHER_CTX.patch
  * 0001-libcrypto-Use-newer-API-for-HMAC.patch
  * 0001-pki_crypto-Use-getters-and-setters-for-opaque-keys-a.patch
  * 0001-threads-Use-new-API-call-for-OpenSSL-CRYPTO-THREADID.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514116800">- Add patch to fix parsing of config files (boo#1067782):
  * 0001-config-Bugfix-Dont-skip-unseen-opcodes.patch</changelog>
  <changelog author="jmcdonough@suse.com" date="1520596800">- Disable timeout testing on slow build systems (bsc#1084713)
  * 0001-disable-timeout-test-on-slow-buildsystems.patch</changelog>
  <changelog author="jmcdonough@suse.com" date="1539086400">- Fix server authentication bypass; (bsc#1108020); (CVE-2018-10933)
  * CVE-2018-10933.patch</changelog>
</package>
<package pkgid="7a3dc46fe79cd916a74978230fa80e81253e2deb56c9d86f238d2603e22a8c45" name="libssh4-32bit" arch="x86_64">
  <version epoch="0" ver="0.7.5" rel="lp150.5.3.1"/>
  <changelog author="kukuk@suse.de" date="1387454400">- Remove remove-pedantic-errors.diff, does not apply anymore and is
  not needed anymore.</changelog>
  <changelog author="asn@cryptomilk.org" date="1389182400">- Update to version 0.6.0
  * Added new publicy key API.
  * Added new userauth API.
  * Added ssh_get_publickey_hash() function.
  * Added ssh_get_poll_flags() function.
  * Added gssapi-mic userauth.
  * Added GSSAPIServerIdentity option.
  * Added GSSAPIClientIdentity option.
  * Added GSSAPIDelegateCredentials option.
  * Added new callback based server API.
  * Added Elliptic Curve DSA (ECDSA) support (with OpenSSL).
  * Added Elliptic Curve Diffie Hellman (ECDH) support.
  * Added Curve25519 for ECDH key exchange.
  * Added improved logging system.
  * Added SSH-agent forwarding.
  * Added key-reexchange.
  * Added more unit tests.
  * Improved documentation.
  * Fixed timeout handling.</changelog>
  <changelog author="asn@cryptomilk.org" date="1392033600">- Update to version 0.6.1
  * Added support for libgcrypt 1.6.
  * Added ssh_channel_accept_forward().
  * Added known_hosts heuristic during connection (#138).
  * Added getters for session cipher names.
  * Fixed decrypt of zero length buffer.
  * Fixed padding in RSA signature blobs.
  * Fixed DSA signature extraction.
  * Fixed some memory leaks.
  * Fixed read of non-connected socket.
  * Fixed thread dectection.</changelog>
  <changelog author="asn@cryptomilk.org" date="1393934400">- Update to version 0.6.3
  * Fix CVE-2014-0017.</changelog>
  <changelog author="asn@cryptomilk.org" date="1418990400">- Update to version 0.6.4
  * Fixed CVE-2014-8132.
  * Added SHA-2 for session ID signing with ECDSA keys.
  * Added support for ECDSA host keys.
  * Added support for more ECDSA hostkey algorithms.
  * Added ssh_pki_key_ecdsa_name() API.
  * Fixed setting the bindfd only after successful listen.
  * Fixed issues with user created sockets.
  * Fixed several issues in libssh C++ wrapper.
  * Fixed several documentation issues.
  * Fixed channel exit-signal request.
  * Fixed X11 request screen number in messages.
  * Fixed several memory leaks.</changelog>
  <changelog author="coolo@suse.com" date="1421928000">- removing argument from popd
- add baselibs.conf as source</changelog>
  <changelog author="asn@cryptomilk.org" date="1430395200">- Update to version 0.6.5
  * Fixed CVE-2015-3146
  * Fixed port handling in config file
  * Fixed the build with libgcrypt
  * Fixed SFTP endian issues (rlo #179)
  * Fixed uninitilized sig variable (rlo #167)
  * Fixed polling issues which could result in a hang
  * Fixed handling of EINTR in ssh_poll() (rlo #186)
  * Fixed C99 issues with __func__
  * Fixed some memory leaks
  * Improved macro detection on Windows</changelog>
  <changelog author="dmueller@suse.com" date="1430913600">- add gcc5-fixes.patch: Fix build against GCC 5.x</changelog>
  <changelog author="asn@cryptomilk.org" date="1431345600">- Update to version 0.7.0
  * Added support for ed25519 keys
  * Added SHA2 algorithms for HMAC
  * Added improved and more secure buffer handling code
  * Added callback for auth_none_function
  * Added support for ECDSA private key signing
  * Added more tests
  * Fixed a lot of bugs
  * Improved API documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1435665600">- Update to version 0.7.1
  * Fixed SSH_AUTH_PARTIAL auth with auto public key
  * Fixed memory leak in session options
  * Fixed allocation of ed25519 public keys
  * Fixed channel exit-status and exit-signal
  * Reintroduce ssh_forward_listen()</changelog>
  <changelog author="tchvatal@suse.com" date="1437393600">- Enable testsuite run to check the state of libssh itself
- Use SUSE macros to define environment clearly
- Enable gssapi by adding krb5 dependency</changelog>
  <changelog author="asn@cryptomilk.org" date="1444219200">- Update to version 0.7.2
  * Fixed OpenSSL detection on Windows
  * Fixed return status for ssh_userauth_agent()
  * Fixed KEX to prefer hmac-sha2-256
  * Fixed sftp packet handling
  * Fixed return values of ssh_key_is_(public|private)
  * Fixed bug in global success reply</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Update descriptions. Drop redundant pkgconfig require
  (it's autodetected).</changelog>
  <changelog author="asn@cryptomilk.org" date="1486555200">- Update to version 0.7.4
  * Added id_ed25519 to the default identity list
  * Fixed sftp EOF packet handling
  * Fixed ssh_send_banner() to confirm with RFC 4253
  * Fixed some memory leaks
- Removed patch gcc5-fixes.patch</changelog>
  <changelog author="asn@cryptomilk.org" date="1492084800">- Update to version 0.7.5
  * Fixed a memory allocation issue with buffers
  * Fixed PKI on Windows
  * Fixed some SSHv1 functions
  * Fixed config hostname expansion</changelog>
  <changelog author="astieger@suse.com" date="1501502400">- add package keyring and verify source signature</changelog>
  <changelog author="vcizek@suse.com" date="1505476800">- add support for building with OpenSSL 1.1 (bsc#1055266)
  * added patches:
  * 0001-cmake-Use-configure-check-for-CRYPTO_ctr128_encrypt.patch
  * 0001-libcrypto-Introduce-a-libcrypto-compat-file.patch
  * 0001-libcrypto-Remove-AES_ctr128_encrypt.patch
  * 0001-libcrypto-Use-a-pointer-for-EVP_MD_CTX.patch
  * 0001-libcrypto-Use-a-pointer-for-EVP_CIPHER_CTX.patch
  * 0001-libcrypto-Use-newer-API-for-HMAC.patch
  * 0001-pki_crypto-Use-getters-and-setters-for-opaque-keys-a.patch
  * 0001-threads-Use-new-API-call-for-OpenSSL-CRYPTO-THREADID.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514116800">- Add patch to fix parsing of config files (boo#1067782):
  * 0001-config-Bugfix-Dont-skip-unseen-opcodes.patch</changelog>
  <changelog author="jmcdonough@suse.com" date="1520596800">- Disable timeout testing on slow build systems (bsc#1084713)
  * 0001-disable-timeout-test-on-slow-buildsystems.patch</changelog>
  <changelog author="jmcdonough@suse.com" date="1539086400">- Fix server authentication bypass; (bsc#1108020); (CVE-2018-10933)
  * CVE-2018-10933.patch</changelog>
</package>
<package pkgid="12ed8bac029699425de6eba005bf8346a1b9cee5c93e2eeac8af799ddeb2e339" name="libssl45" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
  <changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
  <changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
  <changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
  <changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1493899200">- Update to new upstream release 2.5.4
  * Reverted a previous change that forced consistency between
    return value and error code when specifing a certificate
    verification callback, since this breaks the documented API.
  * Switched Linux getrandom() usage to non-blocking mode,
    continuing to use fallback mechanims if unsuccessful.
  * Fixed a bug caused by the return value being set early to
    signal successful DTLS cookie validation.</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict for split openssl packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494331200">- Add conflict between libressl and the main versioned packages too</changelog>
  <changelog author="jengelh@inai.de" date="1503576000">- Update to new upstream release 2.5.5
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.</changelog>
  <changelog author="jengelh@inai.de" date="1504267200">- Update to new upstream release 2.6.0
  * Added support for providing CRLs to libtls. Once a CRL is
    provided, we enable CRL checking for the full certificate
    chain.
  * Allow non-compliant clients using IP literal addresses with
    SNI to connect to a server using libtls.
  * Avoid a potential NULL pointer dereference in
    d2i_ECPrivateKey().
  * Added definitions for three OIDs used in EV certificates.
  * Plugged a memory leak in tls_ocsp_free.
  * Added tls_peer_cert_chain_pem, tls_cert_hash, and
    tls_hex_string to libtls, useful in private certificate
    validation callbacks.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Added tls_keypair_clear_key for clearing key material.
  * Removed inconsistent IPv6 handling from
    BIO_get_accept_socket, simplified BIO_get_host_ip and
    BIO_accept.
  * Fixed the openssl(1) ca command so that is generates
    certificates with RFC 5280-conformant time.
  * Added ASN1_TIME_set_tm to set an asn1 from a struct tm *.
  * Added SSL{,_CTX}_set_{min,max}_proto_version() functions.
  * Added HKDF (HMAC Key Derivation Function) from BoringSSL
  * Providea a tls_unload_file() function that frees the memory
    returned from a tls_load_file() call, ensuring that it the
    contents become inaccessible. This is specifically needed on
    platforms where the library allocators may be different from
    the application allocator.
  * Perform reference counting for tls_config. This allows
    tls_config_free() to be called as soon as it has been passed
    to the final tls_configure() call, simplifying lifetime
    tracking for the application.
  * Moved internal state of SSL and other structures to be
    opaque.
  * Dropped cipher suites with DSS authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update to new upstream release 2.6.2
  * Provide a useful error with libtls if there are no OCSP URLs
    in a peer certificate.
  * Keep track of which keypair is in use by a TLS context,
    fixing a bug where a TLS server with SNI would only return
    the OCSP staple for the default keypair.
- Update to new upstream release 2.6.1
  * Added tls_config_set_ecdhecurves() to libtls, which allows
    the names of the eliptical curves that may be used during
    client and server key exchange to be specified.
  * Removed support for DSS/DSA, since we removed the cipher
    suites a while back.
  * Removed NPN support. NPN was never standardised and the last
    draft expired in October 2012. ALPN was standardised.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS
    termintation.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Implemented the SSL_CTX_set_min_proto_version(3) API.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.</changelog>
  <changelog author="jengelh@inai.de" date="1510056000">- Update to new upstream release 2.6.3
  * Added support for providing CRLs to libtls - once a CRL is
    provided via tls_config_set_crl_file(3) or
    tls_config_set_crl_mem(3), CRL checking is enabled and
    required for the full certificate chain.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Relaxed SNI validation to allow non-RFC-compliant clients
    using literal IP addresses with SNI to connect to a
    libtls-based TLS server.
  * Added tls_peer_cert_chain_pem() to libtls, useful in private
    certificate validation callbacks such as those in relayd.
  * Added SSL{,_CTX}_set_{min,max}_proto_version(3) functions.
  * Imported HKDF (HMAC Key Derivation Function) from BoringSSL.
  * Dropped cipher suites using DSS authentication.
  * Removed support for DSS/DSA from libssl.
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.
  * Removed NPN support - NPN was never standardised and the last
    draft expired in October 2012.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS termination.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.
- Add des-fcrypt.diff [boo#1065363]</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Add extra-symver.diff</changelog>
  <changelog author="jengelh@inai.de" date="1513857600">- Update to new upstream release 2.6.4
  * Make tls_config_parse_protocols() work correctly when passed
    a NULL pointer for a protocol string.
  * Correct TLS extensions handling when no extensions are
    present.</changelog>
  <changelog author="jengelh@inai.de" date="1521806400">- Update to new upstream release 2.7.0
  * Added support for many OpenSSL 1.0.2 and 1.1 APIs.
  * Added support for automatic library initialization in
    libcrypto, libssl, and libtls.
  * Converted more packet handling methods to CBB, which improves
    resiliency when generating TLS messages.
  * Completed TLS extension handling rewrite, improving consistency
    of checks for malformed and duplicate extensions.
  * Rewrote ASN1_TYPE_ get,set _octetstring() using templated
    ASN.1. This removes the last remaining use of the old M_ASN1_
    macros (asn1_mac.h) from API that needs to continue to exist.
  * Added support for client-side session resumption in libtls.
  * A libtls client can specify a session file descriptor (a
    regular file with appropriate ownership and permissions) and
    libtls will manage reading and writing of session data across
    TLS handshakes.
  * Merged more DTLS support into the regular TLS code path.</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Update to new upstream release 2.7.1
  * Fixed a bug in int_x509_param_set_hosts, calling strlen() if
    name length provided is 0 to match the OpenSSL behaviour.
    [CVE-2018-8970, boo#1086778]</changelog>
  <changelog author="jengelh@inai.de" date="1522670400">- Update to new upstream release 2.7.2
  * Updated and added extensive new HISTORY sections to
    the API manuals.</changelog>
  <changelog author="jengelh@inai.de" date="1525694400">- Update to new upstream release 2.7.3
  * Removed incorrect NULL checks in DH_set0_key().
  * Limited tls_config_clear_keys() to only clear private keys.</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Update to new upstream release 2.8.0
  * Fixed a pair of 20+ year-old bugs in X509_NAME_add_entry.
  * Tighten up checks for various X509_VERIFY_PARAM functions,
    'poisoning' parameters so that an unverified certificate
    cannot be used if it fails verification.
  * Fixed a potential memory leak on failure in ASN1_item_digest.
  * Fixed a potential memory alignment crash in
    asn1_item_combine_free.
  * Removed unused SSL3_FLAGS_DELAY_CLIENT_FINISHED and
    SSL3_FLAGS_POP_BUFFER flags in write path, simplifying IO
    paths.
  * Removed SSL_OP_TLS_ROLLBACK_BUG buggy client workarounds.
  * Added const annotations to many existing APIs from OpenSSL,
    making interoperability easier for downstream applications.
  * Added a missing bounds check in c2i_ASN1_BIT_STRING.
  * Removed three remaining single DES cipher suites.
  * Fixed a potential leak/incorrect return value in DSA
    signature generation.
  * Added a blinding value when generating DSA and ECDSA
    signatures, in order to reduce the possibility of a
    side-channel attack leaking the private key.
  * Added ECC constant time scalar multiplication support.
  * Revised the implementation of RSASSA-PKCS1-v1_5 to match the
    specification in RFC 8017.
  * Changes from 2.7.4:
  * Avoid a timing side-channel leak when generating DSA and ECDSA
    signatures. [CVE-2018-12434, boo#1097779]
  * Reject excessively large primes in DH key generation.</changelog>
</package>
<package pkgid="f4196a995352c354a84e887352aadfc7ba0c3ba3ac3cefac1369bdc9a9064756" name="libssl45-32bit" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
  <changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
  <changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
  <changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
  <changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1493899200">- Update to new upstream release 2.5.4
  * Reverted a previous change that forced consistency between
    return value and error code when specifing a certificate
    verification callback, since this breaks the documented API.
  * Switched Linux getrandom() usage to non-blocking mode,
    continuing to use fallback mechanims if unsuccessful.
  * Fixed a bug caused by the return value being set early to
    signal successful DTLS cookie validation.</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict for split openssl packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494331200">- Add conflict between libressl and the main versioned packages too</changelog>
  <changelog author="jengelh@inai.de" date="1503576000">- Update to new upstream release 2.5.5
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.</changelog>
  <changelog author="jengelh@inai.de" date="1504267200">- Update to new upstream release 2.6.0
  * Added support for providing CRLs to libtls. Once a CRL is
    provided, we enable CRL checking for the full certificate
    chain.
  * Allow non-compliant clients using IP literal addresses with
    SNI to connect to a server using libtls.
  * Avoid a potential NULL pointer dereference in
    d2i_ECPrivateKey().
  * Added definitions for three OIDs used in EV certificates.
  * Plugged a memory leak in tls_ocsp_free.
  * Added tls_peer_cert_chain_pem, tls_cert_hash, and
    tls_hex_string to libtls, useful in private certificate
    validation callbacks.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Added tls_keypair_clear_key for clearing key material.
  * Removed inconsistent IPv6 handling from
    BIO_get_accept_socket, simplified BIO_get_host_ip and
    BIO_accept.
  * Fixed the openssl(1) ca command so that is generates
    certificates with RFC 5280-conformant time.
  * Added ASN1_TIME_set_tm to set an asn1 from a struct tm *.
  * Added SSL{,_CTX}_set_{min,max}_proto_version() functions.
  * Added HKDF (HMAC Key Derivation Function) from BoringSSL
  * Providea a tls_unload_file() function that frees the memory
    returned from a tls_load_file() call, ensuring that it the
    contents become inaccessible. This is specifically needed on
    platforms where the library allocators may be different from
    the application allocator.
  * Perform reference counting for tls_config. This allows
    tls_config_free() to be called as soon as it has been passed
    to the final tls_configure() call, simplifying lifetime
    tracking for the application.
  * Moved internal state of SSL and other structures to be
    opaque.
  * Dropped cipher suites with DSS authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update to new upstream release 2.6.2
  * Provide a useful error with libtls if there are no OCSP URLs
    in a peer certificate.
  * Keep track of which keypair is in use by a TLS context,
    fixing a bug where a TLS server with SNI would only return
    the OCSP staple for the default keypair.
- Update to new upstream release 2.6.1
  * Added tls_config_set_ecdhecurves() to libtls, which allows
    the names of the eliptical curves that may be used during
    client and server key exchange to be specified.
  * Removed support for DSS/DSA, since we removed the cipher
    suites a while back.
  * Removed NPN support. NPN was never standardised and the last
    draft expired in October 2012. ALPN was standardised.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS
    termintation.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Implemented the SSL_CTX_set_min_proto_version(3) API.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.</changelog>
  <changelog author="jengelh@inai.de" date="1510056000">- Update to new upstream release 2.6.3
  * Added support for providing CRLs to libtls - once a CRL is
    provided via tls_config_set_crl_file(3) or
    tls_config_set_crl_mem(3), CRL checking is enabled and
    required for the full certificate chain.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Relaxed SNI validation to allow non-RFC-compliant clients
    using literal IP addresses with SNI to connect to a
    libtls-based TLS server.
  * Added tls_peer_cert_chain_pem() to libtls, useful in private
    certificate validation callbacks such as those in relayd.
  * Added SSL{,_CTX}_set_{min,max}_proto_version(3) functions.
  * Imported HKDF (HMAC Key Derivation Function) from BoringSSL.
  * Dropped cipher suites using DSS authentication.
  * Removed support for DSS/DSA from libssl.
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.
  * Removed NPN support - NPN was never standardised and the last
    draft expired in October 2012.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS termination.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.
- Add des-fcrypt.diff [boo#1065363]</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Add extra-symver.diff</changelog>
  <changelog author="jengelh@inai.de" date="1513857600">- Update to new upstream release 2.6.4
  * Make tls_config_parse_protocols() work correctly when passed
    a NULL pointer for a protocol string.
  * Correct TLS extensions handling when no extensions are
    present.</changelog>
  <changelog author="jengelh@inai.de" date="1521806400">- Update to new upstream release 2.7.0
  * Added support for many OpenSSL 1.0.2 and 1.1 APIs.
  * Added support for automatic library initialization in
    libcrypto, libssl, and libtls.
  * Converted more packet handling methods to CBB, which improves
    resiliency when generating TLS messages.
  * Completed TLS extension handling rewrite, improving consistency
    of checks for malformed and duplicate extensions.
  * Rewrote ASN1_TYPE_ get,set _octetstring() using templated
    ASN.1. This removes the last remaining use of the old M_ASN1_
    macros (asn1_mac.h) from API that needs to continue to exist.
  * Added support for client-side session resumption in libtls.
  * A libtls client can specify a session file descriptor (a
    regular file with appropriate ownership and permissions) and
    libtls will manage reading and writing of session data across
    TLS handshakes.
  * Merged more DTLS support into the regular TLS code path.</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Update to new upstream release 2.7.1
  * Fixed a bug in int_x509_param_set_hosts, calling strlen() if
    name length provided is 0 to match the OpenSSL behaviour.
    [CVE-2018-8970, boo#1086778]</changelog>
  <changelog author="jengelh@inai.de" date="1522670400">- Update to new upstream release 2.7.2
  * Updated and added extensive new HISTORY sections to
    the API manuals.</changelog>
  <changelog author="jengelh@inai.de" date="1525694400">- Update to new upstream release 2.7.3
  * Removed incorrect NULL checks in DH_set0_key().
  * Limited tls_config_clear_keys() to only clear private keys.</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Update to new upstream release 2.8.0
  * Fixed a pair of 20+ year-old bugs in X509_NAME_add_entry.
  * Tighten up checks for various X509_VERIFY_PARAM functions,
    'poisoning' parameters so that an unverified certificate
    cannot be used if it fails verification.
  * Fixed a potential memory leak on failure in ASN1_item_digest.
  * Fixed a potential memory alignment crash in
    asn1_item_combine_free.
  * Removed unused SSL3_FLAGS_DELAY_CLIENT_FINISHED and
    SSL3_FLAGS_POP_BUFFER flags in write path, simplifying IO
    paths.
  * Removed SSL_OP_TLS_ROLLBACK_BUG buggy client workarounds.
  * Added const annotations to many existing APIs from OpenSSL,
    making interoperability easier for downstream applications.
  * Added a missing bounds check in c2i_ASN1_BIT_STRING.
  * Removed three remaining single DES cipher suites.
  * Fixed a potential leak/incorrect return value in DSA
    signature generation.
  * Added a blinding value when generating DSA and ECDSA
    signatures, in order to reduce the possibility of a
    side-channel attack leaking the private key.
  * Added ECC constant time scalar multiplication support.
  * Revised the implementation of RSASSA-PKCS1-v1_5 to match the
    specification in RFC 8017.
  * Changes from 2.7.4:
  * Avoid a timing side-channel leak when generating DSA and ECDSA
    signatures. [CVE-2018-12434, boo#1097779]
  * Reject excessively large primes in DH key generation.</changelog>
</package>
<package pkgid="712fb8b9aa107d4126f70b8f823b5b318048e7c56744e67c7cd12561ce578086" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="f927897699fc360a04e095dd155f386142ff7318404b29882e94695d012ab8aa" name="libsss_certmap0" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="b492e5c51a75b6301bf2b0781a783dd8409fe8bbb78408587a80c0adde08e27d" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="d55d1fafa4abea85668abeaedba3dde3fb123a09a4da5dc474778e8f7acb8026" name="libsss_idmap0" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="f07b23395df1869bcd727138c4a7c8062aed8ac54a06bcdd8e53cf718150aed3" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="23f814e47f378a4f651735a8c43daa09d7f04fd0527cf5288e4740318d33d358" name="libsss_nss_idmap0" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="34f81184dbd77decb62cd2962cc15b45e18eb409a8b8f7bad44ed84e3ec63883" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="ab6512087a93abb63d7c2033b4038fef22ecd5e38537b935de3e8be8996fb851" name="libsss_simpleifp0" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="9bf5f90353109e4e8a54590967a13062250e128c54a69d4b7d14e4bf4e0e5e16" name="libstaroffice" arch="src">
  <version epoch="0" ver="0.0.6" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1458820800">- Initial package used by writerperfect</changelog>
  <changelog author="tchvatal@suse.com" date="1480766400">- Version update to version 0.0.2 as needed by libreoffice</changelog>
  <changelog author="tchvatal@suse.com" date="1488196800">- Version update to 0.0.3:
  * add conversion of .sdd file for files created by StarImpress,
  * try to retrieve the table's formatting in .sdw file,
  * try to retrieve more pictures (native format, ...),
  * try to read more attributes, text frames' rotations, text rotation in cell, line spacings, ...</changelog>
  <changelog author="tchvatal@suse.com" date="1498737600">- Add patch CVE-2017-9432.patch fixing bsc#1042829 CVE-2017-9432</changelog>
  <changelog author="tchvatal@suse.com" date="1511956800">- Version update to 0.0.5:
  * Various bugs found by fuzzing
  * Switched to C++11
  * Remove merged patch CVE-2017-9432.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527595200">- Update to 0.0.6:
  * retrieve some StarMath's formula,
  * retrieve some charts as graphic,
  * retrieve some fields in sda/sdc/sdp text-boxes,
  * .sdw: retrieve more attachments.</changelog>
</package>
<package pkgid="694e87f2e55e8ff306567dc7ac8a04127d9710bf13c3f07a15ca965c250e8ab8" name="libstaroffice-0_0-0" arch="x86_64">
  <version epoch="0" ver="0.0.6" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1458820800">- Initial package used by writerperfect</changelog>
  <changelog author="tchvatal@suse.com" date="1480766400">- Version update to version 0.0.2 as needed by libreoffice</changelog>
  <changelog author="tchvatal@suse.com" date="1488196800">- Version update to 0.0.3:
  * add conversion of .sdd file for files created by StarImpress,
  * try to retrieve the table's formatting in .sdw file,
  * try to retrieve more pictures (native format, ...),
  * try to read more attributes, text frames' rotations, text rotation in cell, line spacings, ...</changelog>
  <changelog author="tchvatal@suse.com" date="1498737600">- Add patch CVE-2017-9432.patch fixing bsc#1042829 CVE-2017-9432</changelog>
  <changelog author="tchvatal@suse.com" date="1511956800">- Version update to 0.0.5:
  * Various bugs found by fuzzing
  * Switched to C++11
  * Remove merged patch CVE-2017-9432.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527595200">- Update to 0.0.6:
  * retrieve some StarMath's formula,
  * retrieve some charts as graphic,
  * retrieve some fields in sda/sdc/sdp text-boxes,
  * .sdw: retrieve more attachments.</changelog>
</package>
<package pkgid="6cb4851cacb17563263d9561734111494ea89010676f6c93cf9df5860a59e36a" name="libstaroffice-devel" arch="x86_64">
  <version epoch="0" ver="0.0.6" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1458820800">- Initial package used by writerperfect</changelog>
  <changelog author="tchvatal@suse.com" date="1480766400">- Version update to version 0.0.2 as needed by libreoffice</changelog>
  <changelog author="tchvatal@suse.com" date="1488196800">- Version update to 0.0.3:
  * add conversion of .sdd file for files created by StarImpress,
  * try to retrieve the table's formatting in .sdw file,
  * try to retrieve more pictures (native format, ...),
  * try to read more attributes, text frames' rotations, text rotation in cell, line spacings, ...</changelog>
  <changelog author="tchvatal@suse.com" date="1498737600">- Add patch CVE-2017-9432.patch fixing bsc#1042829 CVE-2017-9432</changelog>
  <changelog author="tchvatal@suse.com" date="1511956800">- Version update to 0.0.5:
  * Various bugs found by fuzzing
  * Switched to C++11
  * Remove merged patch CVE-2017-9432.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527595200">- Update to 0.0.6:
  * retrieve some StarMath's formula,
  * retrieve some charts as graphic,
  * retrieve some fields in sda/sdc/sdp text-boxes,
  * .sdw: retrieve more attachments.</changelog>
</package>
<package pkgid="ad6a439c3822286ea64aa3dbfdfa5362203575eff256bc4b54ee37e32368fb29" name="libstaroffice-devel-doc" arch="noarch">
  <version epoch="0" ver="0.0.6" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1458820800">- Initial package used by writerperfect</changelog>
  <changelog author="tchvatal@suse.com" date="1480766400">- Version update to version 0.0.2 as needed by libreoffice</changelog>
  <changelog author="tchvatal@suse.com" date="1488196800">- Version update to 0.0.3:
  * add conversion of .sdd file for files created by StarImpress,
  * try to retrieve the table's formatting in .sdw file,
  * try to retrieve more pictures (native format, ...),
  * try to read more attributes, text frames' rotations, text rotation in cell, line spacings, ...</changelog>
  <changelog author="tchvatal@suse.com" date="1498737600">- Add patch CVE-2017-9432.patch fixing bsc#1042829 CVE-2017-9432</changelog>
  <changelog author="tchvatal@suse.com" date="1511956800">- Version update to 0.0.5:
  * Various bugs found by fuzzing
  * Switched to C++11
  * Remove merged patch CVE-2017-9432.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527595200">- Update to 0.0.6:
  * retrieve some StarMath's formula,
  * retrieve some charts as graphic,
  * retrieve some fields in sda/sdc/sdp text-boxes,
  * .sdw: retrieve more attachments.</changelog>
</package>
<package pkgid="cbb2e93d28ee4033aa6c1e5e6a1ec28fc4deaebde0be0da4975b1170dc55c8ac" name="libstaroffice-tools" arch="x86_64">
  <version epoch="0" ver="0.0.6" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1458820800">- Initial package used by writerperfect</changelog>
  <changelog author="tchvatal@suse.com" date="1480766400">- Version update to version 0.0.2 as needed by libreoffice</changelog>
  <changelog author="tchvatal@suse.com" date="1488196800">- Version update to 0.0.3:
  * add conversion of .sdd file for files created by StarImpress,
  * try to retrieve the table's formatting in .sdw file,
  * try to retrieve more pictures (native format, ...),
  * try to read more attributes, text frames' rotations, text rotation in cell, line spacings, ...</changelog>
  <changelog author="tchvatal@suse.com" date="1498737600">- Add patch CVE-2017-9432.patch fixing bsc#1042829 CVE-2017-9432</changelog>
  <changelog author="tchvatal@suse.com" date="1511956800">- Version update to 0.0.5:
  * Various bugs found by fuzzing
  * Switched to C++11
  * Remove merged patch CVE-2017-9432.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527595200">- Update to 0.0.6:
  * retrieve some StarMath's formula,
  * retrieve some charts as graphic,
  * retrieve some fields in sda/sdc/sdp text-boxes,
  * .sdw: retrieve more attachments.</changelog>
</package>
<package pkgid="d82c509b6b2fcfa46bcdf993b4c5f2246d521609d0cf052bd80248eb0d865576" name="libstorage-ng" arch="src">
  <version epoch="0" ver="3.3.300" rel="lp150.2.3.2"/>
  <changelog author="freek@opensuse.org" date="1526558400">- Translated using Weblate (Dutch)
- 3.3.281</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1526558401">- Translated using Weblate (Czech)
- 3.3.282</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558402">- Translated using Weblate (Italian)
- 3.3.283</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558403">- Translated using Weblate (French)
- 3.3.284</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558404">- Translated using Weblate (Portuguese (Brazil))
- 3.3.285</changelog>
  <changelog author="aschnell@suse.de" date="1526644800">- merge gh#openSUSE/libstorage-ng#529
- fix probing of certain nvme systems (bsc#1093684)
- 3.3.286</changelog>
  <changelog author="jlopez@suse.com" date="1526644801">- merge gh#openSUSE/libstorage-ng#530
- Add conflict with old libdmraid (bsc#1088570)
- 3.3.287</changelog>
  <changelog author="aschnell@suse.de" date="1526644802">- merge gh#openSUSE/libstorage-ng#531
- added helper functions
- place repair action before partition actions
- insert action to repair GPTs if needed (bsc#1092193)
- added unit test
- 3.3.288</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817600">- Translated using Weblate (Chinese (Taiwan))
- 3.3.289</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817601">- Translated using Weblate (Chinese (Taiwan))
- 3.3.290</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526990400">- Translated using Weblate (Spanish)
- 3.3.291</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527076800">- Translated using Weblate (Slovak)
- 3.3.292</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527163200">- Translated using Weblate (Slovak)
- 3.3.293</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527249600">- Translated using Weblate (Russian)
- 3.3.294</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527854400">- Translated using Weblate (Italian)
- 3.3.295</changelog>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#532
- improved error handling during probing partitions (see
  bsc#1095168)
- 3.3.296</changelog>
  <changelog author="aschnell@suse.de" date="1528113601">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113602">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113603">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113604">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
</package>
<package pkgid="ac11dacf227dcda387fcd04c78ce6dbfa79ac70649f5bb4e8f46c110e679658e" name="libstorage-ng" arch="src">
  <version epoch="0" ver="3.3.312" rel="lp150.2.6.1"/>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113601">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113602">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113603">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113604">- Translated using Weblate (Catalan)
- 3.3.301</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113605">- Translated using Weblate (Italian)
- 3.3.302</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1528113606">- Translated using Weblate (Czech)
- 3.3.303</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113607">- Translated using Weblate (Slovak)
- 3.3.304</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113608">- Translated using Weblate (Spanish)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113609">- Translated using Weblate (Portuguese (Brazil))</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- merge gh#openSUSE/libstorage-ng#535
- Return better exception (related to bsc#1094963)
- Fix project name</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372801">- Translated using Weblate (Chinese (Taiwan))</changelog>
  <changelog author="ancor@suse.de" date="1528372802">- merge gh#openSUSE/libstorage-ng#536
- Expose Device#devicegraph (needed for bsc#1094157)
- Encryption#set_dm_table_name adjusts #name (for bsc#1094157 and
  bsc#1094963)
- Code improvement from code review
- More code improvements from code review
- 3.3.305</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372803">- Translated using Weblate (French)
- 3.3.306</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372804">- Translated using Weblate (Russian)
- 3.3.307</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528804800">- Translated using Weblate (Indonesian)
- 3.3.308</changelog>
  <changelog author="aschnell@suse.de" date="1528804801">- merge gh#openSUSE/libstorage-ng#537
- updated unit test
- extended unit test
- fixed exception logging
- 3.3.309</changelog>
  <changelog author="jlopez@suse.com" date="1529323200">- merge gh#openSUSE/libstorage-ng#538
- Add method BlkDevice#is_active
- 3.3.310</changelog>
  <changelog author="aschnell@suse.de" date="1529496000">- merge gh#openSUSE/libstorage-ng#539
- handle device type attribute of udevadm info output
- removed unused and obsolete file
- do not try to activate LUKS on devices used by multipath (bsc#1089699)
- improved explanation
- 3.3.311</changelog>
  <changelog author="wfeldt@opensuse.org" date="1532347200">- merge gh#openSUSE/libstorage-ng#547
- document package version scheme
- 3.3.312</changelog>
</package>
<package pkgid="3d1b8040d2eb70c5844bb1abf3f770b2da81cff57829603f56e2805c1235df6f" name="libstorage-ng" arch="src">
  <version epoch="0" ver="3.3.315" rel="lp150.2.9.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113600">- Translated using Weblate (Slovak)
- 3.3.304</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113601">- Translated using Weblate (Spanish)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113602">- Translated using Weblate (Portuguese (Brazil))</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- merge gh#openSUSE/libstorage-ng#535
- Return better exception (related to bsc#1094963)
- Fix project name</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372801">- Translated using Weblate (Chinese (Taiwan))</changelog>
  <changelog author="ancor@suse.de" date="1528372802">- merge gh#openSUSE/libstorage-ng#536
- Expose Device#devicegraph (needed for bsc#1094157)
- Encryption#set_dm_table_name adjusts #name (for bsc#1094157 and
  bsc#1094963)
- Code improvement from code review
- More code improvements from code review
- 3.3.305</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372803">- Translated using Weblate (French)
- 3.3.306</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372804">- Translated using Weblate (Russian)
- 3.3.307</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528804800">- Translated using Weblate (Indonesian)
- 3.3.308</changelog>
  <changelog author="aschnell@suse.de" date="1528804801">- merge gh#openSUSE/libstorage-ng#537
- updated unit test
- extended unit test
- fixed exception logging
- 3.3.309</changelog>
  <changelog author="jlopez@suse.com" date="1529323200">- merge gh#openSUSE/libstorage-ng#538
- Add method BlkDevice#is_active
- 3.3.310</changelog>
  <changelog author="aschnell@suse.de" date="1529496000">- merge gh#openSUSE/libstorage-ng#539
- handle device type attribute of udevadm info output
- removed unused and obsolete file
- do not try to activate LUKS on devices used by multipath (bsc#1089699)
- improved explanation
- 3.3.311</changelog>
  <changelog author="wfeldt@opensuse.org" date="1532347200">- merge gh#openSUSE/libstorage-ng#547
- document package version scheme
- 3.3.312</changelog>
  <changelog author="aschnell@suse.de" date="1532952000">- merge gh#openSUSE/libstorage-ng#549
- added special handling when creating udev ids starting with
  dm-uuid for partitions on multipath (bsc#1099394)
- use strlen</changelog>
  <changelog author="lslezak@suse.cz" date="1533297600">- merge gh#openSUSE/libstorage-ng#552
- Update the "build_dependencies:*" tasks to read the alternative
  spec file
- README.md: libjson-c-devel is needed as well
- Added pkgconfig check for the libjson-c library
- Do not crash when displaying summary for an encrypted but not
  mounted disk (bsc#1099181)
- Added unit test
- Fixed a typo</changelog>
  <changelog author="aschnell@suse.de" date="1533556800">- merge gh#openSUSE/libstorage-ng#551
- extended NameSchema class
- added StrayBlkDevice class (bsc#1085134)
- extended unit tests
- added unit test for probing xen xvd devices
- cleanup
- updated pot and po files
- extended documentation
- 3.3.313</changelog>
  <changelog author="snwint@suse.de" date="1535112000">- merge gh#openSUSE/libstorage-ng#564
- merge gh#openSUSE/libstorage-ng#562
- detect correctly whether a file system is currently mounted
  (bsc#1105227)</changelog>
  <changelog author="snwint@suse.de" date="1535112001">- merge gh#openSUSE/libstorage-ng#565
- merge gh#openSUSE/libstorage-ng#560
- adjust multipath parser to accept nvme related output
  (bsc#1089353)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1535112002">- merge gh#openSUSE/libstorage-ng#554
- Added some class descriptions
- MdLinks: make it work also when even /dev/md does not exist
- Avoid exceptions for inactive RAIDs (bsc#1090010)
- Fixed the existing tests
- test inactive noncontainer
- detect raid containers differently
- Mark inactive RAID in the BlkDevice attribute
- A common way to configure the indentation style
- Inactive raid
- 3.3.314</changelog>
  <changelog author="aschnell@suse.com" date="1536580800">- merge gh#openSUSE/libstorage-ng#569
- fixed variable scope to fix temporary mounting (bsc#1099144)
- added unit test
- 3.3.315</changelog>
</package>
<package pkgid="663dd63ac7442a7e39cb80b6416a17d02c276cf14c7312875d171c0415bc21ad" name="libstorage-ng-devel" arch="x86_64">
  <version epoch="0" ver="3.3.300" rel="lp150.2.3.2"/>
  <changelog author="freek@opensuse.org" date="1526558400">- Translated using Weblate (Dutch)
- 3.3.281</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1526558401">- Translated using Weblate (Czech)
- 3.3.282</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558402">- Translated using Weblate (Italian)
- 3.3.283</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558403">- Translated using Weblate (French)
- 3.3.284</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558404">- Translated using Weblate (Portuguese (Brazil))
- 3.3.285</changelog>
  <changelog author="aschnell@suse.de" date="1526644800">- merge gh#openSUSE/libstorage-ng#529
- fix probing of certain nvme systems (bsc#1093684)
- 3.3.286</changelog>
  <changelog author="jlopez@suse.com" date="1526644801">- merge gh#openSUSE/libstorage-ng#530
- Add conflict with old libdmraid (bsc#1088570)
- 3.3.287</changelog>
  <changelog author="aschnell@suse.de" date="1526644802">- merge gh#openSUSE/libstorage-ng#531
- added helper functions
- place repair action before partition actions
- insert action to repair GPTs if needed (bsc#1092193)
- added unit test
- 3.3.288</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817600">- Translated using Weblate (Chinese (Taiwan))
- 3.3.289</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817601">- Translated using Weblate (Chinese (Taiwan))
- 3.3.290</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526990400">- Translated using Weblate (Spanish)
- 3.3.291</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527076800">- Translated using Weblate (Slovak)
- 3.3.292</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527163200">- Translated using Weblate (Slovak)
- 3.3.293</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527249600">- Translated using Weblate (Russian)
- 3.3.294</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527854400">- Translated using Weblate (Italian)
- 3.3.295</changelog>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#532
- improved error handling during probing partitions (see
  bsc#1095168)
- 3.3.296</changelog>
  <changelog author="aschnell@suse.de" date="1528113601">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113602">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113603">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113604">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
</package>
<package pkgid="03e4187d358b328150ddebd2378203077cee99ee146d6aa338ac1feb215f973d" name="libstorage-ng-devel" arch="x86_64">
  <version epoch="0" ver="3.3.312" rel="lp150.2.6.1"/>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113601">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113602">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113603">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113604">- Translated using Weblate (Catalan)
- 3.3.301</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113605">- Translated using Weblate (Italian)
- 3.3.302</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1528113606">- Translated using Weblate (Czech)
- 3.3.303</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113607">- Translated using Weblate (Slovak)
- 3.3.304</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113608">- Translated using Weblate (Spanish)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113609">- Translated using Weblate (Portuguese (Brazil))</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- merge gh#openSUSE/libstorage-ng#535
- Return better exception (related to bsc#1094963)
- Fix project name</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372801">- Translated using Weblate (Chinese (Taiwan))</changelog>
  <changelog author="ancor@suse.de" date="1528372802">- merge gh#openSUSE/libstorage-ng#536
- Expose Device#devicegraph (needed for bsc#1094157)
- Encryption#set_dm_table_name adjusts #name (for bsc#1094157 and
  bsc#1094963)
- Code improvement from code review
- More code improvements from code review
- 3.3.305</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372803">- Translated using Weblate (French)
- 3.3.306</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372804">- Translated using Weblate (Russian)
- 3.3.307</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528804800">- Translated using Weblate (Indonesian)
- 3.3.308</changelog>
  <changelog author="aschnell@suse.de" date="1528804801">- merge gh#openSUSE/libstorage-ng#537
- updated unit test
- extended unit test
- fixed exception logging
- 3.3.309</changelog>
  <changelog author="jlopez@suse.com" date="1529323200">- merge gh#openSUSE/libstorage-ng#538
- Add method BlkDevice#is_active
- 3.3.310</changelog>
  <changelog author="aschnell@suse.de" date="1529496000">- merge gh#openSUSE/libstorage-ng#539
- handle device type attribute of udevadm info output
- removed unused and obsolete file
- do not try to activate LUKS on devices used by multipath (bsc#1089699)
- improved explanation
- 3.3.311</changelog>
  <changelog author="wfeldt@opensuse.org" date="1532347200">- merge gh#openSUSE/libstorage-ng#547
- document package version scheme
- 3.3.312</changelog>
</package>
<package pkgid="4f91843a283903b487404a0bbb4e01bfac940f086332c13044997e7dc5bbd88c" name="libstorage-ng-devel" arch="x86_64">
  <version epoch="0" ver="3.3.315" rel="lp150.2.9.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113600">- Translated using Weblate (Slovak)
- 3.3.304</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113601">- Translated using Weblate (Spanish)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113602">- Translated using Weblate (Portuguese (Brazil))</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- merge gh#openSUSE/libstorage-ng#535
- Return better exception (related to bsc#1094963)
- Fix project name</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372801">- Translated using Weblate (Chinese (Taiwan))</changelog>
  <changelog author="ancor@suse.de" date="1528372802">- merge gh#openSUSE/libstorage-ng#536
- Expose Device#devicegraph (needed for bsc#1094157)
- Encryption#set_dm_table_name adjusts #name (for bsc#1094157 and
  bsc#1094963)
- Code improvement from code review
- More code improvements from code review
- 3.3.305</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372803">- Translated using Weblate (French)
- 3.3.306</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372804">- Translated using Weblate (Russian)
- 3.3.307</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528804800">- Translated using Weblate (Indonesian)
- 3.3.308</changelog>
  <changelog author="aschnell@suse.de" date="1528804801">- merge gh#openSUSE/libstorage-ng#537
- updated unit test
- extended unit test
- fixed exception logging
- 3.3.309</changelog>
  <changelog author="jlopez@suse.com" date="1529323200">- merge gh#openSUSE/libstorage-ng#538
- Add method BlkDevice#is_active
- 3.3.310</changelog>
  <changelog author="aschnell@suse.de" date="1529496000">- merge gh#openSUSE/libstorage-ng#539
- handle device type attribute of udevadm info output
- removed unused and obsolete file
- do not try to activate LUKS on devices used by multipath (bsc#1089699)
- improved explanation
- 3.3.311</changelog>
  <changelog author="wfeldt@opensuse.org" date="1532347200">- merge gh#openSUSE/libstorage-ng#547
- document package version scheme
- 3.3.312</changelog>
  <changelog author="aschnell@suse.de" date="1532952000">- merge gh#openSUSE/libstorage-ng#549
- added special handling when creating udev ids starting with
  dm-uuid for partitions on multipath (bsc#1099394)
- use strlen</changelog>
  <changelog author="lslezak@suse.cz" date="1533297600">- merge gh#openSUSE/libstorage-ng#552
- Update the "build_dependencies:*" tasks to read the alternative
  spec file
- README.md: libjson-c-devel is needed as well
- Added pkgconfig check for the libjson-c library
- Do not crash when displaying summary for an encrypted but not
  mounted disk (bsc#1099181)
- Added unit test
- Fixed a typo</changelog>
  <changelog author="aschnell@suse.de" date="1533556800">- merge gh#openSUSE/libstorage-ng#551
- extended NameSchema class
- added StrayBlkDevice class (bsc#1085134)
- extended unit tests
- added unit test for probing xen xvd devices
- cleanup
- updated pot and po files
- extended documentation
- 3.3.313</changelog>
  <changelog author="snwint@suse.de" date="1535112000">- merge gh#openSUSE/libstorage-ng#564
- merge gh#openSUSE/libstorage-ng#562
- detect correctly whether a file system is currently mounted
  (bsc#1105227)</changelog>
  <changelog author="snwint@suse.de" date="1535112001">- merge gh#openSUSE/libstorage-ng#565
- merge gh#openSUSE/libstorage-ng#560
- adjust multipath parser to accept nvme related output
  (bsc#1089353)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1535112002">- merge gh#openSUSE/libstorage-ng#554
- Added some class descriptions
- MdLinks: make it work also when even /dev/md does not exist
- Avoid exceptions for inactive RAIDs (bsc#1090010)
- Fixed the existing tests
- test inactive noncontainer
- detect raid containers differently
- Mark inactive RAID in the BlkDevice attribute
- A common way to configure the indentation style
- Inactive raid
- 3.3.314</changelog>
  <changelog author="aschnell@suse.com" date="1536580800">- merge gh#openSUSE/libstorage-ng#569
- fixed variable scope to fix temporary mounting (bsc#1099144)
- added unit test
- 3.3.315</changelog>
</package>
<package pkgid="0740108f9d7dc8818d5c00b09045a44776db67926fc01fcc51ed2149e14f6bc7" name="libstorage-ng-integration-tests" arch="x86_64">
  <version epoch="0" ver="3.3.300" rel="lp150.2.3.2"/>
  <changelog author="freek@opensuse.org" date="1526558400">- Translated using Weblate (Dutch)
- 3.3.281</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1526558401">- Translated using Weblate (Czech)
- 3.3.282</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558402">- Translated using Weblate (Italian)
- 3.3.283</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558403">- Translated using Weblate (French)
- 3.3.284</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558404">- Translated using Weblate (Portuguese (Brazil))
- 3.3.285</changelog>
  <changelog author="aschnell@suse.de" date="1526644800">- merge gh#openSUSE/libstorage-ng#529
- fix probing of certain nvme systems (bsc#1093684)
- 3.3.286</changelog>
  <changelog author="jlopez@suse.com" date="1526644801">- merge gh#openSUSE/libstorage-ng#530
- Add conflict with old libdmraid (bsc#1088570)
- 3.3.287</changelog>
  <changelog author="aschnell@suse.de" date="1526644802">- merge gh#openSUSE/libstorage-ng#531
- added helper functions
- place repair action before partition actions
- insert action to repair GPTs if needed (bsc#1092193)
- added unit test
- 3.3.288</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817600">- Translated using Weblate (Chinese (Taiwan))
- 3.3.289</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817601">- Translated using Weblate (Chinese (Taiwan))
- 3.3.290</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526990400">- Translated using Weblate (Spanish)
- 3.3.291</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527076800">- Translated using Weblate (Slovak)
- 3.3.292</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527163200">- Translated using Weblate (Slovak)
- 3.3.293</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527249600">- Translated using Weblate (Russian)
- 3.3.294</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527854400">- Translated using Weblate (Italian)
- 3.3.295</changelog>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#532
- improved error handling during probing partitions (see
  bsc#1095168)
- 3.3.296</changelog>
  <changelog author="aschnell@suse.de" date="1528113601">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113602">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113603">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113604">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
</package>
<package pkgid="945686b961cc98c475c201caa92dae22a0bcffa17b1dbc279decb19770375a4e" name="libstorage-ng-integration-tests" arch="x86_64">
  <version epoch="0" ver="3.3.312" rel="lp150.2.6.1"/>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113601">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113602">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113603">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113604">- Translated using Weblate (Catalan)
- 3.3.301</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113605">- Translated using Weblate (Italian)
- 3.3.302</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1528113606">- Translated using Weblate (Czech)
- 3.3.303</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113607">- Translated using Weblate (Slovak)
- 3.3.304</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113608">- Translated using Weblate (Spanish)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113609">- Translated using Weblate (Portuguese (Brazil))</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- merge gh#openSUSE/libstorage-ng#535
- Return better exception (related to bsc#1094963)
- Fix project name</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372801">- Translated using Weblate (Chinese (Taiwan))</changelog>
  <changelog author="ancor@suse.de" date="1528372802">- merge gh#openSUSE/libstorage-ng#536
- Expose Device#devicegraph (needed for bsc#1094157)
- Encryption#set_dm_table_name adjusts #name (for bsc#1094157 and
  bsc#1094963)
- Code improvement from code review
- More code improvements from code review
- 3.3.305</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372803">- Translated using Weblate (French)
- 3.3.306</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372804">- Translated using Weblate (Russian)
- 3.3.307</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528804800">- Translated using Weblate (Indonesian)
- 3.3.308</changelog>
  <changelog author="aschnell@suse.de" date="1528804801">- merge gh#openSUSE/libstorage-ng#537
- updated unit test
- extended unit test
- fixed exception logging
- 3.3.309</changelog>
  <changelog author="jlopez@suse.com" date="1529323200">- merge gh#openSUSE/libstorage-ng#538
- Add method BlkDevice#is_active
- 3.3.310</changelog>
  <changelog author="aschnell@suse.de" date="1529496000">- merge gh#openSUSE/libstorage-ng#539
- handle device type attribute of udevadm info output
- removed unused and obsolete file
- do not try to activate LUKS on devices used by multipath (bsc#1089699)
- improved explanation
- 3.3.311</changelog>
  <changelog author="wfeldt@opensuse.org" date="1532347200">- merge gh#openSUSE/libstorage-ng#547
- document package version scheme
- 3.3.312</changelog>
</package>
<package pkgid="2c67659dce56f3a1bf7a1140e6376733d6c04153949c37c9e4a7370703d4276b" name="libstorage-ng-integration-tests" arch="x86_64">
  <version epoch="0" ver="3.3.315" rel="lp150.2.9.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113600">- Translated using Weblate (Slovak)
- 3.3.304</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113601">- Translated using Weblate (Spanish)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113602">- Translated using Weblate (Portuguese (Brazil))</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- merge gh#openSUSE/libstorage-ng#535
- Return better exception (related to bsc#1094963)
- Fix project name</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372801">- Translated using Weblate (Chinese (Taiwan))</changelog>
  <changelog author="ancor@suse.de" date="1528372802">- merge gh#openSUSE/libstorage-ng#536
- Expose Device#devicegraph (needed for bsc#1094157)
- Encryption#set_dm_table_name adjusts #name (for bsc#1094157 and
  bsc#1094963)
- Code improvement from code review
- More code improvements from code review
- 3.3.305</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372803">- Translated using Weblate (French)
- 3.3.306</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372804">- Translated using Weblate (Russian)
- 3.3.307</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528804800">- Translated using Weblate (Indonesian)
- 3.3.308</changelog>
  <changelog author="aschnell@suse.de" date="1528804801">- merge gh#openSUSE/libstorage-ng#537
- updated unit test
- extended unit test
- fixed exception logging
- 3.3.309</changelog>
  <changelog author="jlopez@suse.com" date="1529323200">- merge gh#openSUSE/libstorage-ng#538
- Add method BlkDevice#is_active
- 3.3.310</changelog>
  <changelog author="aschnell@suse.de" date="1529496000">- merge gh#openSUSE/libstorage-ng#539
- handle device type attribute of udevadm info output
- removed unused and obsolete file
- do not try to activate LUKS on devices used by multipath (bsc#1089699)
- improved explanation
- 3.3.311</changelog>
  <changelog author="wfeldt@opensuse.org" date="1532347200">- merge gh#openSUSE/libstorage-ng#547
- document package version scheme
- 3.3.312</changelog>
  <changelog author="aschnell@suse.de" date="1532952000">- merge gh#openSUSE/libstorage-ng#549
- added special handling when creating udev ids starting with
  dm-uuid for partitions on multipath (bsc#1099394)
- use strlen</changelog>
  <changelog author="lslezak@suse.cz" date="1533297600">- merge gh#openSUSE/libstorage-ng#552
- Update the "build_dependencies:*" tasks to read the alternative
  spec file
- README.md: libjson-c-devel is needed as well
- Added pkgconfig check for the libjson-c library
- Do not crash when displaying summary for an encrypted but not
  mounted disk (bsc#1099181)
- Added unit test
- Fixed a typo</changelog>
  <changelog author="aschnell@suse.de" date="1533556800">- merge gh#openSUSE/libstorage-ng#551
- extended NameSchema class
- added StrayBlkDevice class (bsc#1085134)
- extended unit tests
- added unit test for probing xen xvd devices
- cleanup
- updated pot and po files
- extended documentation
- 3.3.313</changelog>
  <changelog author="snwint@suse.de" date="1535112000">- merge gh#openSUSE/libstorage-ng#564
- merge gh#openSUSE/libstorage-ng#562
- detect correctly whether a file system is currently mounted
  (bsc#1105227)</changelog>
  <changelog author="snwint@suse.de" date="1535112001">- merge gh#openSUSE/libstorage-ng#565
- merge gh#openSUSE/libstorage-ng#560
- adjust multipath parser to accept nvme related output
  (bsc#1089353)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1535112002">- merge gh#openSUSE/libstorage-ng#554
- Added some class descriptions
- MdLinks: make it work also when even /dev/md does not exist
- Avoid exceptions for inactive RAIDs (bsc#1090010)
- Fixed the existing tests
- test inactive noncontainer
- detect raid containers differently
- Mark inactive RAID in the BlkDevice attribute
- A common way to configure the indentation style
- Inactive raid
- 3.3.314</changelog>
  <changelog author="aschnell@suse.com" date="1536580800">- merge gh#openSUSE/libstorage-ng#569
- fixed variable scope to fix temporary mounting (bsc#1099144)
- added unit test
- 3.3.315</changelog>
</package>
<package pkgid="39e4618e2555c294ed604db46404bbaaca3ef7b77097ce1b7d978ac42db11d9a" name="libstorage-ng-lang" arch="noarch">
  <version epoch="0" ver="3.3.300" rel="lp150.2.3.2"/>
  <changelog author="freek@opensuse.org" date="1526558400">- Translated using Weblate (Dutch)
- 3.3.281</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1526558401">- Translated using Weblate (Czech)
- 3.3.282</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558402">- Translated using Weblate (Italian)
- 3.3.283</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558403">- Translated using Weblate (French)
- 3.3.284</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558404">- Translated using Weblate (Portuguese (Brazil))
- 3.3.285</changelog>
  <changelog author="aschnell@suse.de" date="1526644800">- merge gh#openSUSE/libstorage-ng#529
- fix probing of certain nvme systems (bsc#1093684)
- 3.3.286</changelog>
  <changelog author="jlopez@suse.com" date="1526644801">- merge gh#openSUSE/libstorage-ng#530
- Add conflict with old libdmraid (bsc#1088570)
- 3.3.287</changelog>
  <changelog author="aschnell@suse.de" date="1526644802">- merge gh#openSUSE/libstorage-ng#531
- added helper functions
- place repair action before partition actions
- insert action to repair GPTs if needed (bsc#1092193)
- added unit test
- 3.3.288</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817600">- Translated using Weblate (Chinese (Taiwan))
- 3.3.289</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817601">- Translated using Weblate (Chinese (Taiwan))
- 3.3.290</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526990400">- Translated using Weblate (Spanish)
- 3.3.291</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527076800">- Translated using Weblate (Slovak)
- 3.3.292</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527163200">- Translated using Weblate (Slovak)
- 3.3.293</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527249600">- Translated using Weblate (Russian)
- 3.3.294</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527854400">- Translated using Weblate (Italian)
- 3.3.295</changelog>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#532
- improved error handling during probing partitions (see
  bsc#1095168)
- 3.3.296</changelog>
  <changelog author="aschnell@suse.de" date="1528113601">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113602">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113603">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113604">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
</package>
<package pkgid="524de9a53b546dc600b85bfb2b183e4f8aadb0a9b34aa1892fcd9e70e5259d65" name="libstorage-ng-lang" arch="noarch">
  <version epoch="0" ver="3.3.312" rel="lp150.2.6.1"/>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113601">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113602">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113603">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113604">- Translated using Weblate (Catalan)
- 3.3.301</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113605">- Translated using Weblate (Italian)
- 3.3.302</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1528113606">- Translated using Weblate (Czech)
- 3.3.303</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113607">- Translated using Weblate (Slovak)
- 3.3.304</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113608">- Translated using Weblate (Spanish)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113609">- Translated using Weblate (Portuguese (Brazil))</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- merge gh#openSUSE/libstorage-ng#535
- Return better exception (related to bsc#1094963)
- Fix project name</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372801">- Translated using Weblate (Chinese (Taiwan))</changelog>
  <changelog author="ancor@suse.de" date="1528372802">- merge gh#openSUSE/libstorage-ng#536
- Expose Device#devicegraph (needed for bsc#1094157)
- Encryption#set_dm_table_name adjusts #name (for bsc#1094157 and
  bsc#1094963)
- Code improvement from code review
- More code improvements from code review
- 3.3.305</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372803">- Translated using Weblate (French)
- 3.3.306</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372804">- Translated using Weblate (Russian)
- 3.3.307</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528804800">- Translated using Weblate (Indonesian)
- 3.3.308</changelog>
  <changelog author="aschnell@suse.de" date="1528804801">- merge gh#openSUSE/libstorage-ng#537
- updated unit test
- extended unit test
- fixed exception logging
- 3.3.309</changelog>
  <changelog author="jlopez@suse.com" date="1529323200">- merge gh#openSUSE/libstorage-ng#538
- Add method BlkDevice#is_active
- 3.3.310</changelog>
  <changelog author="aschnell@suse.de" date="1529496000">- merge gh#openSUSE/libstorage-ng#539
- handle device type attribute of udevadm info output
- removed unused and obsolete file
- do not try to activate LUKS on devices used by multipath (bsc#1089699)
- improved explanation
- 3.3.311</changelog>
  <changelog author="wfeldt@opensuse.org" date="1532347200">- merge gh#openSUSE/libstorage-ng#547
- document package version scheme
- 3.3.312</changelog>
</package>
<package pkgid="99b2c2d5ccdb78ae5c137d9f36352f35eca8451e198db240b8da22fbc3ec976c" name="libstorage-ng-lang" arch="noarch">
  <version epoch="0" ver="3.3.315" rel="lp150.2.9.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113600">- Translated using Weblate (Slovak)
- 3.3.304</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113601">- Translated using Weblate (Spanish)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113602">- Translated using Weblate (Portuguese (Brazil))</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- merge gh#openSUSE/libstorage-ng#535
- Return better exception (related to bsc#1094963)
- Fix project name</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372801">- Translated using Weblate (Chinese (Taiwan))</changelog>
  <changelog author="ancor@suse.de" date="1528372802">- merge gh#openSUSE/libstorage-ng#536
- Expose Device#devicegraph (needed for bsc#1094157)
- Encryption#set_dm_table_name adjusts #name (for bsc#1094157 and
  bsc#1094963)
- Code improvement from code review
- More code improvements from code review
- 3.3.305</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372803">- Translated using Weblate (French)
- 3.3.306</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372804">- Translated using Weblate (Russian)
- 3.3.307</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528804800">- Translated using Weblate (Indonesian)
- 3.3.308</changelog>
  <changelog author="aschnell@suse.de" date="1528804801">- merge gh#openSUSE/libstorage-ng#537
- updated unit test
- extended unit test
- fixed exception logging
- 3.3.309</changelog>
  <changelog author="jlopez@suse.com" date="1529323200">- merge gh#openSUSE/libstorage-ng#538
- Add method BlkDevice#is_active
- 3.3.310</changelog>
  <changelog author="aschnell@suse.de" date="1529496000">- merge gh#openSUSE/libstorage-ng#539
- handle device type attribute of udevadm info output
- removed unused and obsolete file
- do not try to activate LUKS on devices used by multipath (bsc#1089699)
- improved explanation
- 3.3.311</changelog>
  <changelog author="wfeldt@opensuse.org" date="1532347200">- merge gh#openSUSE/libstorage-ng#547
- document package version scheme
- 3.3.312</changelog>
  <changelog author="aschnell@suse.de" date="1532952000">- merge gh#openSUSE/libstorage-ng#549
- added special handling when creating udev ids starting with
  dm-uuid for partitions on multipath (bsc#1099394)
- use strlen</changelog>
  <changelog author="lslezak@suse.cz" date="1533297600">- merge gh#openSUSE/libstorage-ng#552
- Update the "build_dependencies:*" tasks to read the alternative
  spec file
- README.md: libjson-c-devel is needed as well
- Added pkgconfig check for the libjson-c library
- Do not crash when displaying summary for an encrypted but not
  mounted disk (bsc#1099181)
- Added unit test
- Fixed a typo</changelog>
  <changelog author="aschnell@suse.de" date="1533556800">- merge gh#openSUSE/libstorage-ng#551
- extended NameSchema class
- added StrayBlkDevice class (bsc#1085134)
- extended unit tests
- added unit test for probing xen xvd devices
- cleanup
- updated pot and po files
- extended documentation
- 3.3.313</changelog>
  <changelog author="snwint@suse.de" date="1535112000">- merge gh#openSUSE/libstorage-ng#564
- merge gh#openSUSE/libstorage-ng#562
- detect correctly whether a file system is currently mounted
  (bsc#1105227)</changelog>
  <changelog author="snwint@suse.de" date="1535112001">- merge gh#openSUSE/libstorage-ng#565
- merge gh#openSUSE/libstorage-ng#560
- adjust multipath parser to accept nvme related output
  (bsc#1089353)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1535112002">- merge gh#openSUSE/libstorage-ng#554
- Added some class descriptions
- MdLinks: make it work also when even /dev/md does not exist
- Avoid exceptions for inactive RAIDs (bsc#1090010)
- Fixed the existing tests
- test inactive noncontainer
- detect raid containers differently
- Mark inactive RAID in the BlkDevice attribute
- A common way to configure the indentation style
- Inactive raid
- 3.3.314</changelog>
  <changelog author="aschnell@suse.com" date="1536580800">- merge gh#openSUSE/libstorage-ng#569
- fixed variable scope to fix temporary mounting (bsc#1099144)
- added unit test
- 3.3.315</changelog>
</package>
<package pkgid="d5cb7a70632a252aae83a3efb8a07fbfbf27d877ee93d7bd0425023338ea52df" name="libstorage-ng-python3" arch="x86_64">
  <version epoch="0" ver="3.3.300" rel="lp150.2.3.2"/>
  <changelog author="freek@opensuse.org" date="1526558400">- Translated using Weblate (Dutch)
- 3.3.281</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1526558401">- Translated using Weblate (Czech)
- 3.3.282</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558402">- Translated using Weblate (Italian)
- 3.3.283</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558403">- Translated using Weblate (French)
- 3.3.284</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558404">- Translated using Weblate (Portuguese (Brazil))
- 3.3.285</changelog>
  <changelog author="aschnell@suse.de" date="1526644800">- merge gh#openSUSE/libstorage-ng#529
- fix probing of certain nvme systems (bsc#1093684)
- 3.3.286</changelog>
  <changelog author="jlopez@suse.com" date="1526644801">- merge gh#openSUSE/libstorage-ng#530
- Add conflict with old libdmraid (bsc#1088570)
- 3.3.287</changelog>
  <changelog author="aschnell@suse.de" date="1526644802">- merge gh#openSUSE/libstorage-ng#531
- added helper functions
- place repair action before partition actions
- insert action to repair GPTs if needed (bsc#1092193)
- added unit test
- 3.3.288</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817600">- Translated using Weblate (Chinese (Taiwan))
- 3.3.289</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817601">- Translated using Weblate (Chinese (Taiwan))
- 3.3.290</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526990400">- Translated using Weblate (Spanish)
- 3.3.291</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527076800">- Translated using Weblate (Slovak)
- 3.3.292</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527163200">- Translated using Weblate (Slovak)
- 3.3.293</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527249600">- Translated using Weblate (Russian)
- 3.3.294</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527854400">- Translated using Weblate (Italian)
- 3.3.295</changelog>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#532
- improved error handling during probing partitions (see
  bsc#1095168)
- 3.3.296</changelog>
  <changelog author="aschnell@suse.de" date="1528113601">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113602">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113603">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113604">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
</package>
<package pkgid="a5f09a731c867b8e7e6086a1d2d7b93d740d21a341464298f9df3ea86d69aec4" name="libstorage-ng-python3" arch="x86_64">
  <version epoch="0" ver="3.3.312" rel="lp150.2.6.1"/>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113601">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113602">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113603">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113604">- Translated using Weblate (Catalan)
- 3.3.301</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113605">- Translated using Weblate (Italian)
- 3.3.302</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1528113606">- Translated using Weblate (Czech)
- 3.3.303</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113607">- Translated using Weblate (Slovak)
- 3.3.304</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113608">- Translated using Weblate (Spanish)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113609">- Translated using Weblate (Portuguese (Brazil))</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- merge gh#openSUSE/libstorage-ng#535
- Return better exception (related to bsc#1094963)
- Fix project name</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372801">- Translated using Weblate (Chinese (Taiwan))</changelog>
  <changelog author="ancor@suse.de" date="1528372802">- merge gh#openSUSE/libstorage-ng#536
- Expose Device#devicegraph (needed for bsc#1094157)
- Encryption#set_dm_table_name adjusts #name (for bsc#1094157 and
  bsc#1094963)
- Code improvement from code review
- More code improvements from code review
- 3.3.305</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372803">- Translated using Weblate (French)
- 3.3.306</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372804">- Translated using Weblate (Russian)
- 3.3.307</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528804800">- Translated using Weblate (Indonesian)
- 3.3.308</changelog>
  <changelog author="aschnell@suse.de" date="1528804801">- merge gh#openSUSE/libstorage-ng#537
- updated unit test
- extended unit test
- fixed exception logging
- 3.3.309</changelog>
  <changelog author="jlopez@suse.com" date="1529323200">- merge gh#openSUSE/libstorage-ng#538
- Add method BlkDevice#is_active
- 3.3.310</changelog>
  <changelog author="aschnell@suse.de" date="1529496000">- merge gh#openSUSE/libstorage-ng#539
- handle device type attribute of udevadm info output
- removed unused and obsolete file
- do not try to activate LUKS on devices used by multipath (bsc#1089699)
- improved explanation
- 3.3.311</changelog>
  <changelog author="wfeldt@opensuse.org" date="1532347200">- merge gh#openSUSE/libstorage-ng#547
- document package version scheme
- 3.3.312</changelog>
</package>
<package pkgid="dbe9147c1fd5e628aa64264f35efe5995046897d0b0e307cbff3e0102b5bcfbd" name="libstorage-ng-python3" arch="x86_64">
  <version epoch="0" ver="3.3.315" rel="lp150.2.9.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113600">- Translated using Weblate (Slovak)
- 3.3.304</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113601">- Translated using Weblate (Spanish)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113602">- Translated using Weblate (Portuguese (Brazil))</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- merge gh#openSUSE/libstorage-ng#535
- Return better exception (related to bsc#1094963)
- Fix project name</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372801">- Translated using Weblate (Chinese (Taiwan))</changelog>
  <changelog author="ancor@suse.de" date="1528372802">- merge gh#openSUSE/libstorage-ng#536
- Expose Device#devicegraph (needed for bsc#1094157)
- Encryption#set_dm_table_name adjusts #name (for bsc#1094157 and
  bsc#1094963)
- Code improvement from code review
- More code improvements from code review
- 3.3.305</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372803">- Translated using Weblate (French)
- 3.3.306</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372804">- Translated using Weblate (Russian)
- 3.3.307</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528804800">- Translated using Weblate (Indonesian)
- 3.3.308</changelog>
  <changelog author="aschnell@suse.de" date="1528804801">- merge gh#openSUSE/libstorage-ng#537
- updated unit test
- extended unit test
- fixed exception logging
- 3.3.309</changelog>
  <changelog author="jlopez@suse.com" date="1529323200">- merge gh#openSUSE/libstorage-ng#538
- Add method BlkDevice#is_active
- 3.3.310</changelog>
  <changelog author="aschnell@suse.de" date="1529496000">- merge gh#openSUSE/libstorage-ng#539
- handle device type attribute of udevadm info output
- removed unused and obsolete file
- do not try to activate LUKS on devices used by multipath (bsc#1089699)
- improved explanation
- 3.3.311</changelog>
  <changelog author="wfeldt@opensuse.org" date="1532347200">- merge gh#openSUSE/libstorage-ng#547
- document package version scheme
- 3.3.312</changelog>
  <changelog author="aschnell@suse.de" date="1532952000">- merge gh#openSUSE/libstorage-ng#549
- added special handling when creating udev ids starting with
  dm-uuid for partitions on multipath (bsc#1099394)
- use strlen</changelog>
  <changelog author="lslezak@suse.cz" date="1533297600">- merge gh#openSUSE/libstorage-ng#552
- Update the "build_dependencies:*" tasks to read the alternative
  spec file
- README.md: libjson-c-devel is needed as well
- Added pkgconfig check for the libjson-c library
- Do not crash when displaying summary for an encrypted but not
  mounted disk (bsc#1099181)
- Added unit test
- Fixed a typo</changelog>
  <changelog author="aschnell@suse.de" date="1533556800">- merge gh#openSUSE/libstorage-ng#551
- extended NameSchema class
- added StrayBlkDevice class (bsc#1085134)
- extended unit tests
- added unit test for probing xen xvd devices
- cleanup
- updated pot and po files
- extended documentation
- 3.3.313</changelog>
  <changelog author="snwint@suse.de" date="1535112000">- merge gh#openSUSE/libstorage-ng#564
- merge gh#openSUSE/libstorage-ng#562
- detect correctly whether a file system is currently mounted
  (bsc#1105227)</changelog>
  <changelog author="snwint@suse.de" date="1535112001">- merge gh#openSUSE/libstorage-ng#565
- merge gh#openSUSE/libstorage-ng#560
- adjust multipath parser to accept nvme related output
  (bsc#1089353)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1535112002">- merge gh#openSUSE/libstorage-ng#554
- Added some class descriptions
- MdLinks: make it work also when even /dev/md does not exist
- Avoid exceptions for inactive RAIDs (bsc#1090010)
- Fixed the existing tests
- test inactive noncontainer
- detect raid containers differently
- Mark inactive RAID in the BlkDevice attribute
- A common way to configure the indentation style
- Inactive raid
- 3.3.314</changelog>
  <changelog author="aschnell@suse.com" date="1536580800">- merge gh#openSUSE/libstorage-ng#569
- fixed variable scope to fix temporary mounting (bsc#1099144)
- added unit test
- 3.3.315</changelog>
</package>
<package pkgid="cbe7159200eae77e64f97290739d4157857cbfd44ca40d1df4ead6b70a8d23ac" name="libstorage-ng-ruby" arch="x86_64">
  <version epoch="0" ver="3.3.300" rel="lp150.2.3.2"/>
  <changelog author="freek@opensuse.org" date="1526558400">- Translated using Weblate (Dutch)
- 3.3.281</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1526558401">- Translated using Weblate (Czech)
- 3.3.282</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558402">- Translated using Weblate (Italian)
- 3.3.283</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558403">- Translated using Weblate (French)
- 3.3.284</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558404">- Translated using Weblate (Portuguese (Brazil))
- 3.3.285</changelog>
  <changelog author="aschnell@suse.de" date="1526644800">- merge gh#openSUSE/libstorage-ng#529
- fix probing of certain nvme systems (bsc#1093684)
- 3.3.286</changelog>
  <changelog author="jlopez@suse.com" date="1526644801">- merge gh#openSUSE/libstorage-ng#530
- Add conflict with old libdmraid (bsc#1088570)
- 3.3.287</changelog>
  <changelog author="aschnell@suse.de" date="1526644802">- merge gh#openSUSE/libstorage-ng#531
- added helper functions
- place repair action before partition actions
- insert action to repair GPTs if needed (bsc#1092193)
- added unit test
- 3.3.288</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817600">- Translated using Weblate (Chinese (Taiwan))
- 3.3.289</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817601">- Translated using Weblate (Chinese (Taiwan))
- 3.3.290</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526990400">- Translated using Weblate (Spanish)
- 3.3.291</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527076800">- Translated using Weblate (Slovak)
- 3.3.292</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527163200">- Translated using Weblate (Slovak)
- 3.3.293</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527249600">- Translated using Weblate (Russian)
- 3.3.294</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527854400">- Translated using Weblate (Italian)
- 3.3.295</changelog>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#532
- improved error handling during probing partitions (see
  bsc#1095168)
- 3.3.296</changelog>
  <changelog author="aschnell@suse.de" date="1528113601">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113602">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113603">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113604">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
</package>
<package pkgid="8a61c70a4e6beb66de1367f4e4b76f7864597211db3c66802c47d3de2070eebd" name="libstorage-ng-ruby" arch="x86_64">
  <version epoch="0" ver="3.3.312" rel="lp150.2.6.1"/>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113601">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113602">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113603">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113604">- Translated using Weblate (Catalan)
- 3.3.301</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113605">- Translated using Weblate (Italian)
- 3.3.302</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1528113606">- Translated using Weblate (Czech)
- 3.3.303</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113607">- Translated using Weblate (Slovak)
- 3.3.304</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113608">- Translated using Weblate (Spanish)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113609">- Translated using Weblate (Portuguese (Brazil))</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- merge gh#openSUSE/libstorage-ng#535
- Return better exception (related to bsc#1094963)
- Fix project name</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372801">- Translated using Weblate (Chinese (Taiwan))</changelog>
  <changelog author="ancor@suse.de" date="1528372802">- merge gh#openSUSE/libstorage-ng#536
- Expose Device#devicegraph (needed for bsc#1094157)
- Encryption#set_dm_table_name adjusts #name (for bsc#1094157 and
  bsc#1094963)
- Code improvement from code review
- More code improvements from code review
- 3.3.305</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372803">- Translated using Weblate (French)
- 3.3.306</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372804">- Translated using Weblate (Russian)
- 3.3.307</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528804800">- Translated using Weblate (Indonesian)
- 3.3.308</changelog>
  <changelog author="aschnell@suse.de" date="1528804801">- merge gh#openSUSE/libstorage-ng#537
- updated unit test
- extended unit test
- fixed exception logging
- 3.3.309</changelog>
  <changelog author="jlopez@suse.com" date="1529323200">- merge gh#openSUSE/libstorage-ng#538
- Add method BlkDevice#is_active
- 3.3.310</changelog>
  <changelog author="aschnell@suse.de" date="1529496000">- merge gh#openSUSE/libstorage-ng#539
- handle device type attribute of udevadm info output
- removed unused and obsolete file
- do not try to activate LUKS on devices used by multipath (bsc#1089699)
- improved explanation
- 3.3.311</changelog>
  <changelog author="wfeldt@opensuse.org" date="1532347200">- merge gh#openSUSE/libstorage-ng#547
- document package version scheme
- 3.3.312</changelog>
</package>
<package pkgid="59b2ba49c00c72212e416d748e6987761b3c23fbc2aef1bef3e27094374ac6bc" name="libstorage-ng-ruby" arch="x86_64">
  <version epoch="0" ver="3.3.315" rel="lp150.2.9.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113600">- Translated using Weblate (Slovak)
- 3.3.304</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113601">- Translated using Weblate (Spanish)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113602">- Translated using Weblate (Portuguese (Brazil))</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- merge gh#openSUSE/libstorage-ng#535
- Return better exception (related to bsc#1094963)
- Fix project name</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372801">- Translated using Weblate (Chinese (Taiwan))</changelog>
  <changelog author="ancor@suse.de" date="1528372802">- merge gh#openSUSE/libstorage-ng#536
- Expose Device#devicegraph (needed for bsc#1094157)
- Encryption#set_dm_table_name adjusts #name (for bsc#1094157 and
  bsc#1094963)
- Code improvement from code review
- More code improvements from code review
- 3.3.305</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372803">- Translated using Weblate (French)
- 3.3.306</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372804">- Translated using Weblate (Russian)
- 3.3.307</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528804800">- Translated using Weblate (Indonesian)
- 3.3.308</changelog>
  <changelog author="aschnell@suse.de" date="1528804801">- merge gh#openSUSE/libstorage-ng#537
- updated unit test
- extended unit test
- fixed exception logging
- 3.3.309</changelog>
  <changelog author="jlopez@suse.com" date="1529323200">- merge gh#openSUSE/libstorage-ng#538
- Add method BlkDevice#is_active
- 3.3.310</changelog>
  <changelog author="aschnell@suse.de" date="1529496000">- merge gh#openSUSE/libstorage-ng#539
- handle device type attribute of udevadm info output
- removed unused and obsolete file
- do not try to activate LUKS on devices used by multipath (bsc#1089699)
- improved explanation
- 3.3.311</changelog>
  <changelog author="wfeldt@opensuse.org" date="1532347200">- merge gh#openSUSE/libstorage-ng#547
- document package version scheme
- 3.3.312</changelog>
  <changelog author="aschnell@suse.de" date="1532952000">- merge gh#openSUSE/libstorage-ng#549
- added special handling when creating udev ids starting with
  dm-uuid for partitions on multipath (bsc#1099394)
- use strlen</changelog>
  <changelog author="lslezak@suse.cz" date="1533297600">- merge gh#openSUSE/libstorage-ng#552
- Update the "build_dependencies:*" tasks to read the alternative
  spec file
- README.md: libjson-c-devel is needed as well
- Added pkgconfig check for the libjson-c library
- Do not crash when displaying summary for an encrypted but not
  mounted disk (bsc#1099181)
- Added unit test
- Fixed a typo</changelog>
  <changelog author="aschnell@suse.de" date="1533556800">- merge gh#openSUSE/libstorage-ng#551
- extended NameSchema class
- added StrayBlkDevice class (bsc#1085134)
- extended unit tests
- added unit test for probing xen xvd devices
- cleanup
- updated pot and po files
- extended documentation
- 3.3.313</changelog>
  <changelog author="snwint@suse.de" date="1535112000">- merge gh#openSUSE/libstorage-ng#564
- merge gh#openSUSE/libstorage-ng#562
- detect correctly whether a file system is currently mounted
  (bsc#1105227)</changelog>
  <changelog author="snwint@suse.de" date="1535112001">- merge gh#openSUSE/libstorage-ng#565
- merge gh#openSUSE/libstorage-ng#560
- adjust multipath parser to accept nvme related output
  (bsc#1089353)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1535112002">- merge gh#openSUSE/libstorage-ng#554
- Added some class descriptions
- MdLinks: make it work also when even /dev/md does not exist
- Avoid exceptions for inactive RAIDs (bsc#1090010)
- Fixed the existing tests
- test inactive noncontainer
- detect raid containers differently
- Mark inactive RAID in the BlkDevice attribute
- A common way to configure the indentation style
- Inactive raid
- 3.3.314</changelog>
  <changelog author="aschnell@suse.com" date="1536580800">- merge gh#openSUSE/libstorage-ng#569
- fixed variable scope to fix temporary mounting (bsc#1099144)
- added unit test
- 3.3.315</changelog>
</package>
<package pkgid="e1c4f62ea9e16828c5b9b72cbf01e6ba82caed974b58574f392588dd7a7cbf65" name="libstorage-ng-utils" arch="x86_64">
  <version epoch="0" ver="3.3.300" rel="lp150.2.3.2"/>
  <changelog author="freek@opensuse.org" date="1526558400">- Translated using Weblate (Dutch)
- 3.3.281</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1526558401">- Translated using Weblate (Czech)
- 3.3.282</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558402">- Translated using Weblate (Italian)
- 3.3.283</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558403">- Translated using Weblate (French)
- 3.3.284</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558404">- Translated using Weblate (Portuguese (Brazil))
- 3.3.285</changelog>
  <changelog author="aschnell@suse.de" date="1526644800">- merge gh#openSUSE/libstorage-ng#529
- fix probing of certain nvme systems (bsc#1093684)
- 3.3.286</changelog>
  <changelog author="jlopez@suse.com" date="1526644801">- merge gh#openSUSE/libstorage-ng#530
- Add conflict with old libdmraid (bsc#1088570)
- 3.3.287</changelog>
  <changelog author="aschnell@suse.de" date="1526644802">- merge gh#openSUSE/libstorage-ng#531
- added helper functions
- place repair action before partition actions
- insert action to repair GPTs if needed (bsc#1092193)
- added unit test
- 3.3.288</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817600">- Translated using Weblate (Chinese (Taiwan))
- 3.3.289</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817601">- Translated using Weblate (Chinese (Taiwan))
- 3.3.290</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526990400">- Translated using Weblate (Spanish)
- 3.3.291</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527076800">- Translated using Weblate (Slovak)
- 3.3.292</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527163200">- Translated using Weblate (Slovak)
- 3.3.293</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527249600">- Translated using Weblate (Russian)
- 3.3.294</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527854400">- Translated using Weblate (Italian)
- 3.3.295</changelog>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#532
- improved error handling during probing partitions (see
  bsc#1095168)
- 3.3.296</changelog>
  <changelog author="aschnell@suse.de" date="1528113601">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113602">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113603">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113604">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
</package>
<package pkgid="a06d40b0e12afb5b49bb592e49a111ee2234e19d06704bd542852bade58327fd" name="libstorage-ng-utils" arch="x86_64">
  <version epoch="0" ver="3.3.312" rel="lp150.2.6.1"/>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113601">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113602">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113603">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113604">- Translated using Weblate (Catalan)
- 3.3.301</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113605">- Translated using Weblate (Italian)
- 3.3.302</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1528113606">- Translated using Weblate (Czech)
- 3.3.303</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113607">- Translated using Weblate (Slovak)
- 3.3.304</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113608">- Translated using Weblate (Spanish)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113609">- Translated using Weblate (Portuguese (Brazil))</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- merge gh#openSUSE/libstorage-ng#535
- Return better exception (related to bsc#1094963)
- Fix project name</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372801">- Translated using Weblate (Chinese (Taiwan))</changelog>
  <changelog author="ancor@suse.de" date="1528372802">- merge gh#openSUSE/libstorage-ng#536
- Expose Device#devicegraph (needed for bsc#1094157)
- Encryption#set_dm_table_name adjusts #name (for bsc#1094157 and
  bsc#1094963)
- Code improvement from code review
- More code improvements from code review
- 3.3.305</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372803">- Translated using Weblate (French)
- 3.3.306</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372804">- Translated using Weblate (Russian)
- 3.3.307</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528804800">- Translated using Weblate (Indonesian)
- 3.3.308</changelog>
  <changelog author="aschnell@suse.de" date="1528804801">- merge gh#openSUSE/libstorage-ng#537
- updated unit test
- extended unit test
- fixed exception logging
- 3.3.309</changelog>
  <changelog author="jlopez@suse.com" date="1529323200">- merge gh#openSUSE/libstorage-ng#538
- Add method BlkDevice#is_active
- 3.3.310</changelog>
  <changelog author="aschnell@suse.de" date="1529496000">- merge gh#openSUSE/libstorage-ng#539
- handle device type attribute of udevadm info output
- removed unused and obsolete file
- do not try to activate LUKS on devices used by multipath (bsc#1089699)
- improved explanation
- 3.3.311</changelog>
  <changelog author="wfeldt@opensuse.org" date="1532347200">- merge gh#openSUSE/libstorage-ng#547
- document package version scheme
- 3.3.312</changelog>
</package>
<package pkgid="66a83a585f6c6d0baebf903a9c256cb5c5c82b2de5aebe31d2828b8ddc1041e6" name="libstorage-ng-utils" arch="x86_64">
  <version epoch="0" ver="3.3.315" rel="lp150.2.9.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113600">- Translated using Weblate (Slovak)
- 3.3.304</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113601">- Translated using Weblate (Spanish)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113602">- Translated using Weblate (Portuguese (Brazil))</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- merge gh#openSUSE/libstorage-ng#535
- Return better exception (related to bsc#1094963)
- Fix project name</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372801">- Translated using Weblate (Chinese (Taiwan))</changelog>
  <changelog author="ancor@suse.de" date="1528372802">- merge gh#openSUSE/libstorage-ng#536
- Expose Device#devicegraph (needed for bsc#1094157)
- Encryption#set_dm_table_name adjusts #name (for bsc#1094157 and
  bsc#1094963)
- Code improvement from code review
- More code improvements from code review
- 3.3.305</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372803">- Translated using Weblate (French)
- 3.3.306</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372804">- Translated using Weblate (Russian)
- 3.3.307</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528804800">- Translated using Weblate (Indonesian)
- 3.3.308</changelog>
  <changelog author="aschnell@suse.de" date="1528804801">- merge gh#openSUSE/libstorage-ng#537
- updated unit test
- extended unit test
- fixed exception logging
- 3.3.309</changelog>
  <changelog author="jlopez@suse.com" date="1529323200">- merge gh#openSUSE/libstorage-ng#538
- Add method BlkDevice#is_active
- 3.3.310</changelog>
  <changelog author="aschnell@suse.de" date="1529496000">- merge gh#openSUSE/libstorage-ng#539
- handle device type attribute of udevadm info output
- removed unused and obsolete file
- do not try to activate LUKS on devices used by multipath (bsc#1089699)
- improved explanation
- 3.3.311</changelog>
  <changelog author="wfeldt@opensuse.org" date="1532347200">- merge gh#openSUSE/libstorage-ng#547
- document package version scheme
- 3.3.312</changelog>
  <changelog author="aschnell@suse.de" date="1532952000">- merge gh#openSUSE/libstorage-ng#549
- added special handling when creating udev ids starting with
  dm-uuid for partitions on multipath (bsc#1099394)
- use strlen</changelog>
  <changelog author="lslezak@suse.cz" date="1533297600">- merge gh#openSUSE/libstorage-ng#552
- Update the "build_dependencies:*" tasks to read the alternative
  spec file
- README.md: libjson-c-devel is needed as well
- Added pkgconfig check for the libjson-c library
- Do not crash when displaying summary for an encrypted but not
  mounted disk (bsc#1099181)
- Added unit test
- Fixed a typo</changelog>
  <changelog author="aschnell@suse.de" date="1533556800">- merge gh#openSUSE/libstorage-ng#551
- extended NameSchema class
- added StrayBlkDevice class (bsc#1085134)
- extended unit tests
- added unit test for probing xen xvd devices
- cleanup
- updated pot and po files
- extended documentation
- 3.3.313</changelog>
  <changelog author="snwint@suse.de" date="1535112000">- merge gh#openSUSE/libstorage-ng#564
- merge gh#openSUSE/libstorage-ng#562
- detect correctly whether a file system is currently mounted
  (bsc#1105227)</changelog>
  <changelog author="snwint@suse.de" date="1535112001">- merge gh#openSUSE/libstorage-ng#565
- merge gh#openSUSE/libstorage-ng#560
- adjust multipath parser to accept nvme related output
  (bsc#1089353)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1535112002">- merge gh#openSUSE/libstorage-ng#554
- Added some class descriptions
- MdLinks: make it work also when even /dev/md does not exist
- Avoid exceptions for inactive RAIDs (bsc#1090010)
- Fixed the existing tests
- test inactive noncontainer
- detect raid containers differently
- Mark inactive RAID in the BlkDevice attribute
- A common way to configure the indentation style
- Inactive raid
- 3.3.314</changelog>
  <changelog author="aschnell@suse.com" date="1536580800">- merge gh#openSUSE/libstorage-ng#569
- fixed variable scope to fix temporary mounting (bsc#1099144)
- added unit test
- 3.3.315</changelog>
</package>
<package pkgid="9cda7debbaf434c4768ed274ffd8ca1e26e8cafaea913ccea2ee91424ad36d40" name="libstorage-ng1" arch="x86_64">
  <version epoch="0" ver="3.3.300" rel="lp150.2.3.2"/>
  <changelog author="freek@opensuse.org" date="1526558400">- Translated using Weblate (Dutch)
- 3.3.281</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1526558401">- Translated using Weblate (Czech)
- 3.3.282</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558402">- Translated using Weblate (Italian)
- 3.3.283</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558403">- Translated using Weblate (French)
- 3.3.284</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558404">- Translated using Weblate (Portuguese (Brazil))
- 3.3.285</changelog>
  <changelog author="aschnell@suse.de" date="1526644800">- merge gh#openSUSE/libstorage-ng#529
- fix probing of certain nvme systems (bsc#1093684)
- 3.3.286</changelog>
  <changelog author="jlopez@suse.com" date="1526644801">- merge gh#openSUSE/libstorage-ng#530
- Add conflict with old libdmraid (bsc#1088570)
- 3.3.287</changelog>
  <changelog author="aschnell@suse.de" date="1526644802">- merge gh#openSUSE/libstorage-ng#531
- added helper functions
- place repair action before partition actions
- insert action to repair GPTs if needed (bsc#1092193)
- added unit test
- 3.3.288</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817600">- Translated using Weblate (Chinese (Taiwan))
- 3.3.289</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817601">- Translated using Weblate (Chinese (Taiwan))
- 3.3.290</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526990400">- Translated using Weblate (Spanish)
- 3.3.291</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527076800">- Translated using Weblate (Slovak)
- 3.3.292</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527163200">- Translated using Weblate (Slovak)
- 3.3.293</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527249600">- Translated using Weblate (Russian)
- 3.3.294</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527854400">- Translated using Weblate (Italian)
- 3.3.295</changelog>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#532
- improved error handling during probing partitions (see
  bsc#1095168)
- 3.3.296</changelog>
  <changelog author="aschnell@suse.de" date="1528113601">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113602">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113603">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113604">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
</package>
<package pkgid="9ae9fe1062c7434659cdc4632567d5fc63a56e3b82b4484d37dc4376034b0bdb" name="libstorage-ng1" arch="x86_64">
  <version epoch="0" ver="3.3.312" rel="lp150.2.6.1"/>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113601">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113602">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113603">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113604">- Translated using Weblate (Catalan)
- 3.3.301</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113605">- Translated using Weblate (Italian)
- 3.3.302</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1528113606">- Translated using Weblate (Czech)
- 3.3.303</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113607">- Translated using Weblate (Slovak)
- 3.3.304</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113608">- Translated using Weblate (Spanish)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113609">- Translated using Weblate (Portuguese (Brazil))</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- merge gh#openSUSE/libstorage-ng#535
- Return better exception (related to bsc#1094963)
- Fix project name</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372801">- Translated using Weblate (Chinese (Taiwan))</changelog>
  <changelog author="ancor@suse.de" date="1528372802">- merge gh#openSUSE/libstorage-ng#536
- Expose Device#devicegraph (needed for bsc#1094157)
- Encryption#set_dm_table_name adjusts #name (for bsc#1094157 and
  bsc#1094963)
- Code improvement from code review
- More code improvements from code review
- 3.3.305</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372803">- Translated using Weblate (French)
- 3.3.306</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372804">- Translated using Weblate (Russian)
- 3.3.307</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528804800">- Translated using Weblate (Indonesian)
- 3.3.308</changelog>
  <changelog author="aschnell@suse.de" date="1528804801">- merge gh#openSUSE/libstorage-ng#537
- updated unit test
- extended unit test
- fixed exception logging
- 3.3.309</changelog>
  <changelog author="jlopez@suse.com" date="1529323200">- merge gh#openSUSE/libstorage-ng#538
- Add method BlkDevice#is_active
- 3.3.310</changelog>
  <changelog author="aschnell@suse.de" date="1529496000">- merge gh#openSUSE/libstorage-ng#539
- handle device type attribute of udevadm info output
- removed unused and obsolete file
- do not try to activate LUKS on devices used by multipath (bsc#1089699)
- improved explanation
- 3.3.311</changelog>
  <changelog author="wfeldt@opensuse.org" date="1532347200">- merge gh#openSUSE/libstorage-ng#547
- document package version scheme
- 3.3.312</changelog>
</package>
<package pkgid="3a62404281c997b827493d8cfb82a0eb2f08640921d3ca3fc721e60530ecc2a5" name="libstorage-ng1" arch="x86_64">
  <version epoch="0" ver="3.3.315" rel="lp150.2.9.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113600">- Translated using Weblate (Slovak)
- 3.3.304</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113601">- Translated using Weblate (Spanish)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113602">- Translated using Weblate (Portuguese (Brazil))</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- merge gh#openSUSE/libstorage-ng#535
- Return better exception (related to bsc#1094963)
- Fix project name</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372801">- Translated using Weblate (Chinese (Taiwan))</changelog>
  <changelog author="ancor@suse.de" date="1528372802">- merge gh#openSUSE/libstorage-ng#536
- Expose Device#devicegraph (needed for bsc#1094157)
- Encryption#set_dm_table_name adjusts #name (for bsc#1094157 and
  bsc#1094963)
- Code improvement from code review
- More code improvements from code review
- 3.3.305</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372803">- Translated using Weblate (French)
- 3.3.306</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372804">- Translated using Weblate (Russian)
- 3.3.307</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528804800">- Translated using Weblate (Indonesian)
- 3.3.308</changelog>
  <changelog author="aschnell@suse.de" date="1528804801">- merge gh#openSUSE/libstorage-ng#537
- updated unit test
- extended unit test
- fixed exception logging
- 3.3.309</changelog>
  <changelog author="jlopez@suse.com" date="1529323200">- merge gh#openSUSE/libstorage-ng#538
- Add method BlkDevice#is_active
- 3.3.310</changelog>
  <changelog author="aschnell@suse.de" date="1529496000">- merge gh#openSUSE/libstorage-ng#539
- handle device type attribute of udevadm info output
- removed unused and obsolete file
- do not try to activate LUKS on devices used by multipath (bsc#1089699)
- improved explanation
- 3.3.311</changelog>
  <changelog author="wfeldt@opensuse.org" date="1532347200">- merge gh#openSUSE/libstorage-ng#547
- document package version scheme
- 3.3.312</changelog>
  <changelog author="aschnell@suse.de" date="1532952000">- merge gh#openSUSE/libstorage-ng#549
- added special handling when creating udev ids starting with
  dm-uuid for partitions on multipath (bsc#1099394)
- use strlen</changelog>
  <changelog author="lslezak@suse.cz" date="1533297600">- merge gh#openSUSE/libstorage-ng#552
- Update the "build_dependencies:*" tasks to read the alternative
  spec file
- README.md: libjson-c-devel is needed as well
- Added pkgconfig check for the libjson-c library
- Do not crash when displaying summary for an encrypted but not
  mounted disk (bsc#1099181)
- Added unit test
- Fixed a typo</changelog>
  <changelog author="aschnell@suse.de" date="1533556800">- merge gh#openSUSE/libstorage-ng#551
- extended NameSchema class
- added StrayBlkDevice class (bsc#1085134)
- extended unit tests
- added unit test for probing xen xvd devices
- cleanup
- updated pot and po files
- extended documentation
- 3.3.313</changelog>
  <changelog author="snwint@suse.de" date="1535112000">- merge gh#openSUSE/libstorage-ng#564
- merge gh#openSUSE/libstorage-ng#562
- detect correctly whether a file system is currently mounted
  (bsc#1105227)</changelog>
  <changelog author="snwint@suse.de" date="1535112001">- merge gh#openSUSE/libstorage-ng#565
- merge gh#openSUSE/libstorage-ng#560
- adjust multipath parser to accept nvme related output
  (bsc#1089353)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1535112002">- merge gh#openSUSE/libstorage-ng#554
- Added some class descriptions
- MdLinks: make it work also when even /dev/md does not exist
- Avoid exceptions for inactive RAIDs (bsc#1090010)
- Fixed the existing tests
- test inactive noncontainer
- detect raid containers differently
- Mark inactive RAID in the BlkDevice attribute
- A common way to configure the indentation style
- Inactive raid
- 3.3.314</changelog>
  <changelog author="aschnell@suse.com" date="1536580800">- merge gh#openSUSE/libstorage-ng#569
- fixed variable scope to fix temporary mounting (bsc#1099144)
- added unit test
- 3.3.315</changelog>
</package>
<package pkgid="2fbbcbef7ce7f3d7b603179f592d98a5c1e42db31d36bc17334effa8bd12523c" name="libswresample2" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="9773ad574cd0f94132ea2840f84f4c7672c624fccf8b313b48611252db149587" name="libswresample2" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="bd0128e416b4879d289a080b9d9d2d3bd44e546f2f0a4cd6e01270d85a24ee23" name="libswresample3" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="7db071d886716a3d356902379ebdcc8e17affb373a80afe4ca61f9494039aea5" name="libswresample3" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="01df34f4f23e84d5164d53544549ead90277eb2344e7441ff3f795719cd611ee" name="libswresample3" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="0fe6279d413ba11c78666a9ee7023668f85fb404bc31db7d850709fcb9d61336" name="libswresample3" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="1a58541845155b5b13088b94cc043bc9672e876658579652d87818e82fa1b61d" name="libswscale4" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="9282f57c970c21412bd0d5ed9103a82d32f25d3a2ad58cc91517b8b3742919ef" name="libswscale4" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="e1e276cce1c0a74912162067b310b65a2505bc7691c9d92a6f4e413298c6a1b1" name="libswscale5" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="3da38eb980cfbe0d506a244cde31e4c5eacf73df0531cf294720e7a646fad822" name="libswscale5" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="69941ad3139b342639fcb885c1cb52d899a24d3fbb8a8ee00fcf668d03a47852" name="libswscale5" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="85d7c9fecd47c82f8c83815950c1c7e1dc36ff89d285f9d48fd3f6c494710082" name="libswscale5" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="55a08f93626072acbddda73d7f577fbcf8b7005b01edca4836a356e1d1456737" name="libsynctex1" arch="x86_64">
  <version epoch="0" ver="1.18" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="4d05b19dce80f15b9eed1d8678487673c65b19c42fd557109132f9876fb9382b" name="libsynctex1" arch="x86_64">
  <version epoch="0" ver="1.18" rel="lp150.9.6.1"/>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537963200">- Add patch source-bsc1109673.dif to fix bsc#1109673 for CVE-2018-17407
  which is about buffer overflow in the handling of Type 1 fonts
  allowing arbitrary code execution</changelog>
</package>
<package pkgid="d52125e02b0e61d94dafb03b01530687fc1fb3b93a8dedd335be54671765d9a6" name="libsystemd0" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="63a6abf78e9c318ac06c6ef9301ac611881fc73cb07c48539c11173d7070f815" name="libsystemd0" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="4b17e1e48aaf3a449fef9373044e320ea242e39c1021f1d7b35964c80275d933" name="libsystemd0" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.9.1"/>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
  <changelog author="fbui@suse.com" date="1535025600">- Add 0002-udev-optionally-disable-the-generation-of-the-partla.patch (bsc#1089761)
  This patch adds "udev.no-partlabel-links" kernel command-line option
  that can be used to disable the generation of the by-partlabel
  symlinks regardless of the name used. This might be useful to
  prevent the generation of such symlinks on big setups where it could
  have a bad impact on the performance of the boot process.
  This will allow user to workaround bsc#1089761 whatever the
  partlabel used for disks (previous patch was only dealing with
  "primary" and "logical" names).
  DISCLAIMER: this new option must be used to workaround the previous
  bug *only* as it will be dropped as soon as the udev perf issue will
  be addressed.</changelog>
  <changelog author="fbui@suse.com" date="1535716800">- Import commit f26a4b03baf10f479951bdffa0f70eff6b5451c1
  5af898dfe core/service: rework the hold-off time over message
  a4aa80162 systemctl: load unit if needed in "systemctl is-active" (bsc#1102908)
  72f8ae153 core: don't freeze OnCalendar= timer units when the clock goes back a lot (bsc#1090944)
  ed49f225e man: SystemMaxUse= clarification in journald.conf(5) (bnc#1101040)
  c47c1fd5e core: in --user mode, report READY=1 as soon as basic.target is reached (#7102)
  ee9d1567c sd-bus: extend D-Bus authentication timeout considerably (#6813)</changelog>
  <changelog author="fbui@suse.com" date="1536926400">- Enable or disable machines.target according to the presets (bsc#1107941)
  Enable or disable machines.target according to the distro's presets.</changelog>
  <changelog author="fbui@suse.com" date="1537185600">- Import commit 5da416950ebe9c4d834ffb8382b0dcaee1941aa8
  9d0d3c2bb tmpfiles: don't adjust qgroups on existing subvolumes (bsc#1093753)
  828198433 socket-util: attempt SO_RCVBUFFORCE/SO_SNDBUFFORCE only if SO_RCVBUF/SO_SNDBUF fails (bsc#991901)
  043f75c0d user@.service: don't kill user manager at runlevel switch (bsc#1091677)
  21eae45f7 units: make sure user@.service runs with dbus still up
  27f607ce7 fix race between daemon-reload and other commands (v234) (bsc#1105031)
  83126307c nspawn: always use mode 555 for /sys (bsc#1107640)
  8a77eed0a cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990)
  7ebb0643c cryptsetup: add support for sector-size= option (#9936) (fate#325697)</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1539691200">- Ship systemd-sysv-install helper via the main package
  This script was part of systemd-sysvinit sub-package but it was
  wrong since systemd-sysv-install is a script used to redirect
  enable/disable operations to chkconfig when the unit targets are
  sysv init scripts. Therefore it's never been a SySV init tool.</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1540987200">- Import commit ceefdbf8afbc95dc2728999ce0cd7493411357e4
  43b790123 dhcp6: make sure we have enough space for the DHCP6 option header (bsc#1113632 CVE-2018-15688)
  96eba195c dhcp6: split assert_return() to be more debuggable when hit
  38c94b4bf core: skip unit deserialization and move to the next one when unit_deserialize() fails
  ef058a4f9 core: when deserializing state always use read_line(?, LONG_LINE_MAX, ?) (bsc#1113665 CVE-2018-15686)
  5581cd610 core: properly handle deserialization of unknown unit types (#6476)
  e2933aa92 core: don't create Requires for workdir if "missing ok" (bsc#1113083)
  794443b1c logind: use manager_get_user_by_pid() where appropriate
  986d63b00 logind: rework manager_get_{user|session}_by_pid() a bit
  83d0f831e login: fix user@.service case, so we don't allow nested sessions (#8051) (bsc#1112024)
  f2a73744c core: be more defensive if we can't determine per-connection socket peer (#7329)
  fc9172ff8 core: introduce systemd.early_core_pattern= kernel cmdline option
  cd2ed8f59 core: add missing 'continue' statement
  c6c6cc19c core/mount: fstype may be NULL
  1da4c5dd4 journald: don't ship systemd-journald-audit.socket (bsc#1109252)
  7bb6768b3 core: make "tmpfs" dependencies on swapfs a "default" dep, not an "implicit" (bsc#1110445)
  5aa2ccd69 mount: make sure we unmount tmpfs mounts before we deactivate swaps (#7076)
  57cc22fef detect-virt: do not try to read all of /proc/cpuinfo (bsc#1109197)
  3c4503ec6 emergency: make sure console password agents don't interfere with the emergency shell
  7a1eb19d7 man: document that 'nofail' also has an effect on ordering
  e0326fc41 journald: take leading spaces into account in syslog_parse_identifier
  a09b1acab journal: do not remove multiple spaces after identifier in syslog message
  e7a85abe6 syslog: fix segfault in syslog_parse_priority()
  6d66aca0f journal: fix syslog_parse_identifier()
  be15909f3 install: drop left-over debug message (#6913)</changelog>
</package>
<package pkgid="e65297bf6e11013dd257132bf21689ad37f302355ebae7182eae0a277450b2fe" name="libsystemd0-32bit" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="4cc9591159e17157310d1f11d74670c490b007a49a116941e1c6e60fcb5a6438" name="libsystemd0-32bit" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="cd10d7136cea5f37b90b88d688db8895400287fa5e7fbfb9a23bd2a3c2893679" name="libsystemd0-32bit" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.9.1"/>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
  <changelog author="fbui@suse.com" date="1535025600">- Add 0002-udev-optionally-disable-the-generation-of-the-partla.patch (bsc#1089761)
  This patch adds "udev.no-partlabel-links" kernel command-line option
  that can be used to disable the generation of the by-partlabel
  symlinks regardless of the name used. This might be useful to
  prevent the generation of such symlinks on big setups where it could
  have a bad impact on the performance of the boot process.
  This will allow user to workaround bsc#1089761 whatever the
  partlabel used for disks (previous patch was only dealing with
  "primary" and "logical" names).
  DISCLAIMER: this new option must be used to workaround the previous
  bug *only* as it will be dropped as soon as the udev perf issue will
  be addressed.</changelog>
  <changelog author="fbui@suse.com" date="1535716800">- Import commit f26a4b03baf10f479951bdffa0f70eff6b5451c1
  5af898dfe core/service: rework the hold-off time over message
  a4aa80162 systemctl: load unit if needed in "systemctl is-active" (bsc#1102908)
  72f8ae153 core: don't freeze OnCalendar= timer units when the clock goes back a lot (bsc#1090944)
  ed49f225e man: SystemMaxUse= clarification in journald.conf(5) (bnc#1101040)
  c47c1fd5e core: in --user mode, report READY=1 as soon as basic.target is reached (#7102)
  ee9d1567c sd-bus: extend D-Bus authentication timeout considerably (#6813)</changelog>
  <changelog author="fbui@suse.com" date="1536926400">- Enable or disable machines.target according to the presets (bsc#1107941)
  Enable or disable machines.target according to the distro's presets.</changelog>
  <changelog author="fbui@suse.com" date="1537185600">- Import commit 5da416950ebe9c4d834ffb8382b0dcaee1941aa8
  9d0d3c2bb tmpfiles: don't adjust qgroups on existing subvolumes (bsc#1093753)
  828198433 socket-util: attempt SO_RCVBUFFORCE/SO_SNDBUFFORCE only if SO_RCVBUF/SO_SNDBUF fails (bsc#991901)
  043f75c0d user@.service: don't kill user manager at runlevel switch (bsc#1091677)
  21eae45f7 units: make sure user@.service runs with dbus still up
  27f607ce7 fix race between daemon-reload and other commands (v234) (bsc#1105031)
  83126307c nspawn: always use mode 555 for /sys (bsc#1107640)
  8a77eed0a cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990)
  7ebb0643c cryptsetup: add support for sector-size= option (#9936) (fate#325697)</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1539691200">- Ship systemd-sysv-install helper via the main package
  This script was part of systemd-sysvinit sub-package but it was
  wrong since systemd-sysv-install is a script used to redirect
  enable/disable operations to chkconfig when the unit targets are
  sysv init scripts. Therefore it's never been a SySV init tool.</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1540987200">- Import commit ceefdbf8afbc95dc2728999ce0cd7493411357e4
  43b790123 dhcp6: make sure we have enough space for the DHCP6 option header (bsc#1113632 CVE-2018-15688)
  96eba195c dhcp6: split assert_return() to be more debuggable when hit
  38c94b4bf core: skip unit deserialization and move to the next one when unit_deserialize() fails
  ef058a4f9 core: when deserializing state always use read_line(?, LONG_LINE_MAX, ?) (bsc#1113665 CVE-2018-15686)
  5581cd610 core: properly handle deserialization of unknown unit types (#6476)
  e2933aa92 core: don't create Requires for workdir if "missing ok" (bsc#1113083)
  794443b1c logind: use manager_get_user_by_pid() where appropriate
  986d63b00 logind: rework manager_get_{user|session}_by_pid() a bit
  83d0f831e login: fix user@.service case, so we don't allow nested sessions (#8051) (bsc#1112024)
  f2a73744c core: be more defensive if we can't determine per-connection socket peer (#7329)
  fc9172ff8 core: introduce systemd.early_core_pattern= kernel cmdline option
  cd2ed8f59 core: add missing 'continue' statement
  c6c6cc19c core/mount: fstype may be NULL
  1da4c5dd4 journald: don't ship systemd-journald-audit.socket (bsc#1109252)
  7bb6768b3 core: make "tmpfs" dependencies on swapfs a "default" dep, not an "implicit" (bsc#1110445)
  5aa2ccd69 mount: make sure we unmount tmpfs mounts before we deactivate swaps (#7076)
  57cc22fef detect-virt: do not try to read all of /proc/cpuinfo (bsc#1109197)
  3c4503ec6 emergency: make sure console password agents don't interfere with the emergency shell
  7a1eb19d7 man: document that 'nofail' also has an effect on ordering
  e0326fc41 journald: take leading spaces into account in syslog_parse_identifier
  a09b1acab journal: do not remove multiple spaces after identifier in syslog message
  e7a85abe6 syslog: fix segfault in syslog_parse_priority()
  6d66aca0f journal: fix syslog_parse_identifier()
  be15909f3 install: drop left-over debug message (#6913)</changelog>
</package>
<package pkgid="7c045ccd651be82ba9670980ef92db727a33c04471b73aa0ecee11332b575642" name="libsystemd0-mini" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="771ea621e1b253358e156f3176ad66ea545e80fbcaff8de985e5961c6612b1a7" name="libsystemd0-mini" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="8970875ec4650adc334870e92edb59bfbbf69b2233ce5d2c6b7ddc5af199a64c" name="libsystemd0-mini" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.9.1"/>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
  <changelog author="fbui@suse.com" date="1535025600">- Add 0002-udev-optionally-disable-the-generation-of-the-partla.patch (bsc#1089761)
  This patch adds "udev.no-partlabel-links" kernel command-line option
  that can be used to disable the generation of the by-partlabel
  symlinks regardless of the name used. This might be useful to
  prevent the generation of such symlinks on big setups where it could
  have a bad impact on the performance of the boot process.
  This will allow user to workaround bsc#1089761 whatever the
  partlabel used for disks (previous patch was only dealing with
  "primary" and "logical" names).
  DISCLAIMER: this new option must be used to workaround the previous
  bug *only* as it will be dropped as soon as the udev perf issue will
  be addressed.</changelog>
  <changelog author="fbui@suse.com" date="1535716800">- Import commit f26a4b03baf10f479951bdffa0f70eff6b5451c1
  5af898dfe core/service: rework the hold-off time over message
  a4aa80162 systemctl: load unit if needed in "systemctl is-active" (bsc#1102908)
  72f8ae153 core: don't freeze OnCalendar= timer units when the clock goes back a lot (bsc#1090944)
  ed49f225e man: SystemMaxUse= clarification in journald.conf(5) (bnc#1101040)
  c47c1fd5e core: in --user mode, report READY=1 as soon as basic.target is reached (#7102)
  ee9d1567c sd-bus: extend D-Bus authentication timeout considerably (#6813)</changelog>
  <changelog author="fbui@suse.com" date="1536926400">- Enable or disable machines.target according to the presets (bsc#1107941)
  Enable or disable machines.target according to the distro's presets.</changelog>
  <changelog author="fbui@suse.com" date="1537185600">- Import commit 5da416950ebe9c4d834ffb8382b0dcaee1941aa8
  9d0d3c2bb tmpfiles: don't adjust qgroups on existing subvolumes (bsc#1093753)
  828198433 socket-util: attempt SO_RCVBUFFORCE/SO_SNDBUFFORCE only if SO_RCVBUF/SO_SNDBUF fails (bsc#991901)
  043f75c0d user@.service: don't kill user manager at runlevel switch (bsc#1091677)
  21eae45f7 units: make sure user@.service runs with dbus still up
  27f607ce7 fix race between daemon-reload and other commands (v234) (bsc#1105031)
  83126307c nspawn: always use mode 555 for /sys (bsc#1107640)
  8a77eed0a cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990)
  7ebb0643c cryptsetup: add support for sector-size= option (#9936) (fate#325697)</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1539691200">- Ship systemd-sysv-install helper via the main package
  This script was part of systemd-sysvinit sub-package but it was
  wrong since systemd-sysv-install is a script used to redirect
  enable/disable operations to chkconfig when the unit targets are
  sysv init scripts. Therefore it's never been a SySV init tool.</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1540987200">- Import commit ceefdbf8afbc95dc2728999ce0cd7493411357e4
  43b790123 dhcp6: make sure we have enough space for the DHCP6 option header (bsc#1113632 CVE-2018-15688)
  96eba195c dhcp6: split assert_return() to be more debuggable when hit
  38c94b4bf core: skip unit deserialization and move to the next one when unit_deserialize() fails
  ef058a4f9 core: when deserializing state always use read_line(?, LONG_LINE_MAX, ?) (bsc#1113665 CVE-2018-15686)
  5581cd610 core: properly handle deserialization of unknown unit types (#6476)
  e2933aa92 core: don't create Requires for workdir if "missing ok" (bsc#1113083)
  794443b1c logind: use manager_get_user_by_pid() where appropriate
  986d63b00 logind: rework manager_get_{user|session}_by_pid() a bit
  83d0f831e login: fix user@.service case, so we don't allow nested sessions (#8051) (bsc#1112024)
  f2a73744c core: be more defensive if we can't determine per-connection socket peer (#7329)
  fc9172ff8 core: introduce systemd.early_core_pattern= kernel cmdline option
  cd2ed8f59 core: add missing 'continue' statement
  c6c6cc19c core/mount: fstype may be NULL
  1da4c5dd4 journald: don't ship systemd-journald-audit.socket (bsc#1109252)
  7bb6768b3 core: make "tmpfs" dependencies on swapfs a "default" dep, not an "implicit" (bsc#1110445)
  5aa2ccd69 mount: make sure we unmount tmpfs mounts before we deactivate swaps (#7076)
  57cc22fef detect-virt: do not try to read all of /proc/cpuinfo (bsc#1109197)
  3c4503ec6 emergency: make sure console password agents don't interfere with the emergency shell
  7a1eb19d7 man: document that 'nofail' also has an effect on ordering
  e0326fc41 journald: take leading spaces into account in syslog_parse_identifier
  a09b1acab journal: do not remove multiple spaces after identifier in syslog message
  e7a85abe6 syslog: fix segfault in syslog_parse_priority()
  6d66aca0f journal: fix syslog_parse_identifier()
  be15909f3 install: drop left-over debug message (#6913)</changelog>
</package>
<package pkgid="88f5e15fa043527891833818ad810670eabb2237234badf27a873b01f4218fbf" name="libtag-devel" arch="x86_64">
  <version epoch="0" ver="1.11.1" rel="lp150.3.3.1"/>
  <changelog author="cgiboudeaux@gmx.com" date="1347537600">- Update to 1.8
  * Added support for OWNE ID3 frames.
  * Changed key validation in the new PropertyMap API.
  * ID3v1::Tag::setStringHandler will no londer delete the previous handler, the caller is responsible for this.
  * File objects will also no longer delete the passed IOStream objects. It should be done in the caller code after the File object is no longer used.
  * Added ID3v2::Tag::setLatin1StringHandler for custom handling of latin1-encoded text in ID3v2 frames.
  * Fixed validation of ID3v2 frame IDs (IDs with ?0? were ignored).
  * New API for accessing tags by name.
  * New abstract I/O stream layer to allow custom I/O handlers.
  * Support for writing ID3v2.3 tags.
  * Support for various module file formats (MOD, S3M, IT, XM).
  * Support for MP4 and ASF is now enabled by default.
  * Started using atomic int operations for reference counting.
  * Added methods for checking if WMA and MP4 files are DRM-protected.
  * Added taglib_free to the C bindings.
  * New method to allow removing pictures from FLAC files.
  * Support for reading audio properties from ALAC and Musepack SV8 files.
  * Added replay-gain information to Musepack audio properties.
  * Support for APEv2 binary tags.
  * Many AudioProperties subclasses now provide information about the total number of samples.
  * Various small bug fixes.
- Drop taglib-noansiflags.patch (no longer relevant)</changelog>
  <changelog author="klaussfreire@gmail.com" date="1352376000">- Add patch taglib-1.8-version_fix.patch: fix version defines
  in taglib.h</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="hessijames@gmail.com" date="1359979200">- Update rusxmms patch to version taglib-1.8-ds-rusxmms-r2 in order to fix bnc#780256</changelog>
  <changelog author="hessijames@gmail.com" date="1359979201">- Replace taglib-1.6-ds-rusxmms.patch with
  taglib-1.8-ds-rusxmms-r2.patch: Update rusxmms patch to also work
  with non-Russian locale (bnc#780256).</changelog>
  <changelog author="davejplater@gmail.com" date="1366891200">- Incorporated updated taglib-1.8-ds-rusxmms-r4.patch see bnc#814814
- Added built binary examples which manipulate tags from the command line
  to enable easier testing of libtag. These are in the taglib rpm.
- Created taglib-1.8-strip-rpath.patch to remove rpath from binaries.</changelog>
  <changelog author="davejplater@gmail.com" date="1366977600">- Added taglib-1.8-ds-rusxmms-r8.patch which fixes bnc#814814
- Removed old taglib-1.8-ds-rusxmms-r4.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1369310400">- Added taglib-1.8-ds-rusxmms-r9.patch and deleted
  taglib-1.8-ds-rusxmms-r8.patch to fix the reopened bnc#814814</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1370779200">- JUst like the rest of the system, taglib has to be built
  with LFS support/ 64bit off_t in 32 bit archs.</changelog>
  <changelog author="jslaby@suse.com" date="1371816000">- Added-check-if-file-is-open-before-attempting-to-rea.patch: Added
  check if file is open before attempting to read tags (bnc#826228)
- Fixed Urls in .spec</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1381060800">- Update to 1.9
  * Added support for the Ogg Opus file format.
  * Added support for INFO tags in WAV files.
  * Changed FileStream to use Windows file API.
  * Included taglib-config.cmd script for Windows.
  * New ID3v1::Tag methods for working directly with
    genre numbers.
  * New MPEG::File methods for checking which tags are saved in
    the file.
  * Added support for the PropertyMap API to ASF and MP4 files.
  * Added MusicBrainz identifiers to the PropertyMap API.
  * Allowed reading of MP4 cover art without an explicitly
    specified format.
  * Better parsing of corrupted FLAC files.
  * Fixed saving of PropertyMap comments without description
    into ID3v2 tags.
  * Fixed crash when parsing certain XM files.
  * Fixed compilation of unit test with clang.
  * Better handling of files that can't be open or have
    read-only permissions.
  * Improved atomic reference counting.
  * New hookable API for debug messages.
  * More complete Windows install instructions.
  * Many smaller bug fixes and performance improvements.
- Dropped taglib-1.8-ds-rusxmms-r9.patch, not required anymore
- Dropped Added-check-if-file-is-open-before-attempting-to-rea.patch
  and taglib-1.8-version_fix.patch, merged upstream</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1381320000">- Update to 1.9.1
  * Fixed binary incompatible change in TagLib::Map and TagLib::List.
  * Fixed constructing String from ByteVector.
  * Fixed compilation on MSVC with the /Zc:wchar_t- option.
  * Fixed detecting of RIFF files with invalid chunk sizes.
  * Added TagLib::MP4::PropertyMap::codec().</changelog>
  <changelog author="olaf@aepfle.de" date="1397563200">- Fix build error in 11.4
  taglib-1.9.1.uint.patch</changelog>
  <changelog author="ohering@suse.de" date="1400241600">- BuildRequire cmake &gt;= 2.8</changelog>
  <changelog author="mpluskal@suse.com" date="1451736000">- Cleanup spec file with spec-cleaner
- Use cmake macros
- Update to 1.10
  * New API for the audio length in milliseconds.
  * Added new options to the tagwriter example.
  * Added support for ID3v2 ETCO and SYLT frames.
  * Added support for album artist in PropertyMap API of MP4 files.
  * Added support for embedded frames in ID3v2 CHAP and CTOC
    frames.
  * Added support for AIFF-C files.
  * Better handling of duplicate ID3v2 tags in MPEG files.
  * Allowed generating taglib.pc on Windows.
  * Added ZLIB_SOURCE build option.
  * Fixed backwards-incompatible change in TagLib::String when
    constructing UTF16 strings.
  * Fixed crash when parsing certain FLAC files.
  * Fixed crash when encoding empty strings.
  * Fixed saving of certain XM files on OS X.
  * Changed Xiph and APE generic getters to return
    space-concatenated values.
  * Fixed possible file corruptions when removing tags from WAV
    files.
  * Added support for MP4 files with 64-bit atoms in certain 64-bit
    environments.
  * Prevented ID3v2 padding from being too large.
  * Fixed crash when parsing corrupted APE files.
  * Fixed crash when parsing corrupted WAV files.
  * Fixed crash when parsing corrupted Ogg FLAC files.
  * Fixed crash when parsing corrupted MPEG files.
  * Fixed saving empty tags in WAV files.
  * Fixed crash when parsing corrupted Musepack files.
  * Fixed possible memory leaks when parsing AIFF and WAV files.
  * Fixed crash when parsing corrupted MP4 files.
  * Stopped writing empty ID3v2 frames.
  * Fixed possible file corruptions when saving WMA files.
  * Added TagLib::MP4::Tag::isEmpty().
  * Added accessors to manipulate MP4 tags.
  * Fixed crash when parsing corrupted WavPack files.
  * Fixed seeking MPEG frames.
  * Fixed reading FLAC files with zero-sized padding blocks.
  * Added support for reading the encoder information of WMA files.
  * Added support for reading the codec of WAV files.
  * Added support for multi channel WavPack files.
  * Added support for reading the nominal bitrate of Ogg Speex
    files.
  * Added support for VBR headers in MPEG files.
  * Marked FLAC::File::streamInfoData() deprecated. It returns an
    empty ByteVector.
  * Marked FLAC::File::streamLength() deprecated. It returns zero.
  * Fixed possible file corruptions when adding an ID3v1 tag to
    FLAC files.
  * Fixed self-assignment operator in some types.
  * Fixed extraction of MP4 tag keys with an empty list.
  * Many smaller bug fixes and performance improvements.
- Drop no longer needed patches:
  * taglib-1.7.2-doxygen.patch
  * taglib-1.8-strip-rpath.patch
  * taglib-1.9.1.uint.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1451908800">- Fix build in SLE_11 by disabling post-install</changelog>
  <changelog author="aloisio@gmx.com" date="1462190400">- Update to 1.11
  * Fixed reading APE items with long keys.
  * Fixed reading ID3v2 SYLT frames when description is empty.
  1.11 BETA 2:
  * Better handling of PCM WAV files with a 'fact' chunk.
  * Better handling of corrupted APE tags.
  * Efficient decoding of unsynchronized ID3v2 frames.
  * Fixed text encoding when saving certain frames in ID3v2.3
    tags.
  * Fixed updating the size of RIFF files when removing chunks.
  * Several smaller bug fixes and performance improvements.
  1.11 BETA:
  * New API for creating FileRef from IOStream.
  * Added support for ID3v2 PCST and WFED frames.
  * Added support for pictures in XiphComment.
  * Added String::clear().
  * Added FLAC::File::strip() for removing non-standard tags.
  * Added alternative functions to XiphComment::removeField().
  * Added BUILD_BINDINGS build option.
  * Added ENABLE_CCACHE build option.
  * Replaced ENABLE_STATIC build option with BUILD_SHARED_LIBS.
  * Better handling of duplicate ID3v2 tags in all kinds of
    files.
  * Better handling of duplicate tag chunks in WAV files.
  * Better handling of duplicate tag chunks in AIFF files.
  * Better handling of duplicate Vorbis comment blocks in FLAC
    files.
  * Better handling of broken MPEG audio frames.
  * Fixed crash when calling File::properties() after strip().
  * Fixed crash when parsing certain MPEG files.
  * Fixed crash when saving Ogg files.
  * Fixed possible file corruptions when saving ASF files.
  * Fixed possible file corruptions when saving FLAC files.
  * Fixed possible file corruptions when saving MP4 files.
  * Fixed possible file corruptions when saving MPEG files.
  * Fixed possible file corruptions when saving APE files.
  * Fixed possible file corruptions when saving Musepack files.
  * Fixed possible file corruptions when saving WavPack files.
  * Fixed updating the comment field of Vorbis comments.
  * Fixed reading date and time in ID3v2.3 tags.
  * Marked ByteVector::null and ByteVector::isNull()
    deprecated.
  * Marked String::null and String::isNull() deprecated.
  * Marked XiphComment::removeField() deprecated.
  * Marked Ogg::Page::getCopyWithNewPageSequenceNumber()
    deprecated. It returns null.
  * Marked custom integer types deprecated.
  * Many smaller bug fixes and performance improvements.</changelog>
  <changelog author="sbrabec@suse.com" date="1502193600">- Update to versio 1.11.1:
  * Fixed binary incompatible change in TagLib::String.
  * Fixed reading ID3v2 CTOC frames with a lot of entries.
  * Fixed seeking ByteVectorStream from the end.
- Prevent denial of service (bsc#1052699, CVE-2017-12678,
  taglib-CVE-2017-12678.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Cleanup bit with spec-cleaner
- Drop librcc dependency as there is no actual code dependency in taglib</changelog>
  <changelog author="kbabioch@suse.com" date="1528286400">- Added taglib-CVE-2018-11439.patch: Fix an out-of-bounds read when loading
  invalid ogg flac files (CVE-2018-11439, bsc#1096180).
- Applied spec-cleaner to specfile</changelog>
</package>
<package pkgid="dbdc2361f234429f74b4cfbf3662e2fe32bd93993111cdd3413f1240c169d5b3" name="libtag1" arch="x86_64">
  <version epoch="0" ver="1.11.1" rel="lp150.3.3.1"/>
  <changelog author="cgiboudeaux@gmx.com" date="1347537600">- Update to 1.8
  * Added support for OWNE ID3 frames.
  * Changed key validation in the new PropertyMap API.
  * ID3v1::Tag::setStringHandler will no londer delete the previous handler, the caller is responsible for this.
  * File objects will also no longer delete the passed IOStream objects. It should be done in the caller code after the File object is no longer used.
  * Added ID3v2::Tag::setLatin1StringHandler for custom handling of latin1-encoded text in ID3v2 frames.
  * Fixed validation of ID3v2 frame IDs (IDs with ?0? were ignored).
  * New API for accessing tags by name.
  * New abstract I/O stream layer to allow custom I/O handlers.
  * Support for writing ID3v2.3 tags.
  * Support for various module file formats (MOD, S3M, IT, XM).
  * Support for MP4 and ASF is now enabled by default.
  * Started using atomic int operations for reference counting.
  * Added methods for checking if WMA and MP4 files are DRM-protected.
  * Added taglib_free to the C bindings.
  * New method to allow removing pictures from FLAC files.
  * Support for reading audio properties from ALAC and Musepack SV8 files.
  * Added replay-gain information to Musepack audio properties.
  * Support for APEv2 binary tags.
  * Many AudioProperties subclasses now provide information about the total number of samples.
  * Various small bug fixes.
- Drop taglib-noansiflags.patch (no longer relevant)</changelog>
  <changelog author="klaussfreire@gmail.com" date="1352376000">- Add patch taglib-1.8-version_fix.patch: fix version defines
  in taglib.h</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="hessijames@gmail.com" date="1359979200">- Update rusxmms patch to version taglib-1.8-ds-rusxmms-r2 in order to fix bnc#780256</changelog>
  <changelog author="hessijames@gmail.com" date="1359979201">- Replace taglib-1.6-ds-rusxmms.patch with
  taglib-1.8-ds-rusxmms-r2.patch: Update rusxmms patch to also work
  with non-Russian locale (bnc#780256).</changelog>
  <changelog author="davejplater@gmail.com" date="1366891200">- Incorporated updated taglib-1.8-ds-rusxmms-r4.patch see bnc#814814
- Added built binary examples which manipulate tags from the command line
  to enable easier testing of libtag. These are in the taglib rpm.
- Created taglib-1.8-strip-rpath.patch to remove rpath from binaries.</changelog>
  <changelog author="davejplater@gmail.com" date="1366977600">- Added taglib-1.8-ds-rusxmms-r8.patch which fixes bnc#814814
- Removed old taglib-1.8-ds-rusxmms-r4.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1369310400">- Added taglib-1.8-ds-rusxmms-r9.patch and deleted
  taglib-1.8-ds-rusxmms-r8.patch to fix the reopened bnc#814814</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1370779200">- JUst like the rest of the system, taglib has to be built
  with LFS support/ 64bit off_t in 32 bit archs.</changelog>
  <changelog author="jslaby@suse.com" date="1371816000">- Added-check-if-file-is-open-before-attempting-to-rea.patch: Added
  check if file is open before attempting to read tags (bnc#826228)
- Fixed Urls in .spec</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1381060800">- Update to 1.9
  * Added support for the Ogg Opus file format.
  * Added support for INFO tags in WAV files.
  * Changed FileStream to use Windows file API.
  * Included taglib-config.cmd script for Windows.
  * New ID3v1::Tag methods for working directly with
    genre numbers.
  * New MPEG::File methods for checking which tags are saved in
    the file.
  * Added support for the PropertyMap API to ASF and MP4 files.
  * Added MusicBrainz identifiers to the PropertyMap API.
  * Allowed reading of MP4 cover art without an explicitly
    specified format.
  * Better parsing of corrupted FLAC files.
  * Fixed saving of PropertyMap comments without description
    into ID3v2 tags.
  * Fixed crash when parsing certain XM files.
  * Fixed compilation of unit test with clang.
  * Better handling of files that can't be open or have
    read-only permissions.
  * Improved atomic reference counting.
  * New hookable API for debug messages.
  * More complete Windows install instructions.
  * Many smaller bug fixes and performance improvements.
- Dropped taglib-1.8-ds-rusxmms-r9.patch, not required anymore
- Dropped Added-check-if-file-is-open-before-attempting-to-rea.patch
  and taglib-1.8-version_fix.patch, merged upstream</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1381320000">- Update to 1.9.1
  * Fixed binary incompatible change in TagLib::Map and TagLib::List.
  * Fixed constructing String from ByteVector.
  * Fixed compilation on MSVC with the /Zc:wchar_t- option.
  * Fixed detecting of RIFF files with invalid chunk sizes.
  * Added TagLib::MP4::PropertyMap::codec().</changelog>
  <changelog author="olaf@aepfle.de" date="1397563200">- Fix build error in 11.4
  taglib-1.9.1.uint.patch</changelog>
  <changelog author="ohering@suse.de" date="1400241600">- BuildRequire cmake &gt;= 2.8</changelog>
  <changelog author="mpluskal@suse.com" date="1451736000">- Cleanup spec file with spec-cleaner
- Use cmake macros
- Update to 1.10
  * New API for the audio length in milliseconds.
  * Added new options to the tagwriter example.
  * Added support for ID3v2 ETCO and SYLT frames.
  * Added support for album artist in PropertyMap API of MP4 files.
  * Added support for embedded frames in ID3v2 CHAP and CTOC
    frames.
  * Added support for AIFF-C files.
  * Better handling of duplicate ID3v2 tags in MPEG files.
  * Allowed generating taglib.pc on Windows.
  * Added ZLIB_SOURCE build option.
  * Fixed backwards-incompatible change in TagLib::String when
    constructing UTF16 strings.
  * Fixed crash when parsing certain FLAC files.
  * Fixed crash when encoding empty strings.
  * Fixed saving of certain XM files on OS X.
  * Changed Xiph and APE generic getters to return
    space-concatenated values.
  * Fixed possible file corruptions when removing tags from WAV
    files.
  * Added support for MP4 files with 64-bit atoms in certain 64-bit
    environments.
  * Prevented ID3v2 padding from being too large.
  * Fixed crash when parsing corrupted APE files.
  * Fixed crash when parsing corrupted WAV files.
  * Fixed crash when parsing corrupted Ogg FLAC files.
  * Fixed crash when parsing corrupted MPEG files.
  * Fixed saving empty tags in WAV files.
  * Fixed crash when parsing corrupted Musepack files.
  * Fixed possible memory leaks when parsing AIFF and WAV files.
  * Fixed crash when parsing corrupted MP4 files.
  * Stopped writing empty ID3v2 frames.
  * Fixed possible file corruptions when saving WMA files.
  * Added TagLib::MP4::Tag::isEmpty().
  * Added accessors to manipulate MP4 tags.
  * Fixed crash when parsing corrupted WavPack files.
  * Fixed seeking MPEG frames.
  * Fixed reading FLAC files with zero-sized padding blocks.
  * Added support for reading the encoder information of WMA files.
  * Added support for reading the codec of WAV files.
  * Added support for multi channel WavPack files.
  * Added support for reading the nominal bitrate of Ogg Speex
    files.
  * Added support for VBR headers in MPEG files.
  * Marked FLAC::File::streamInfoData() deprecated. It returns an
    empty ByteVector.
  * Marked FLAC::File::streamLength() deprecated. It returns zero.
  * Fixed possible file corruptions when adding an ID3v1 tag to
    FLAC files.
  * Fixed self-assignment operator in some types.
  * Fixed extraction of MP4 tag keys with an empty list.
  * Many smaller bug fixes and performance improvements.
- Drop no longer needed patches:
  * taglib-1.7.2-doxygen.patch
  * taglib-1.8-strip-rpath.patch
  * taglib-1.9.1.uint.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1451908800">- Fix build in SLE_11 by disabling post-install</changelog>
  <changelog author="aloisio@gmx.com" date="1462190400">- Update to 1.11
  * Fixed reading APE items with long keys.
  * Fixed reading ID3v2 SYLT frames when description is empty.
  1.11 BETA 2:
  * Better handling of PCM WAV files with a 'fact' chunk.
  * Better handling of corrupted APE tags.
  * Efficient decoding of unsynchronized ID3v2 frames.
  * Fixed text encoding when saving certain frames in ID3v2.3
    tags.
  * Fixed updating the size of RIFF files when removing chunks.
  * Several smaller bug fixes and performance improvements.
  1.11 BETA:
  * New API for creating FileRef from IOStream.
  * Added support for ID3v2 PCST and WFED frames.
  * Added support for pictures in XiphComment.
  * Added String::clear().
  * Added FLAC::File::strip() for removing non-standard tags.
  * Added alternative functions to XiphComment::removeField().
  * Added BUILD_BINDINGS build option.
  * Added ENABLE_CCACHE build option.
  * Replaced ENABLE_STATIC build option with BUILD_SHARED_LIBS.
  * Better handling of duplicate ID3v2 tags in all kinds of
    files.
  * Better handling of duplicate tag chunks in WAV files.
  * Better handling of duplicate tag chunks in AIFF files.
  * Better handling of duplicate Vorbis comment blocks in FLAC
    files.
  * Better handling of broken MPEG audio frames.
  * Fixed crash when calling File::properties() after strip().
  * Fixed crash when parsing certain MPEG files.
  * Fixed crash when saving Ogg files.
  * Fixed possible file corruptions when saving ASF files.
  * Fixed possible file corruptions when saving FLAC files.
  * Fixed possible file corruptions when saving MP4 files.
  * Fixed possible file corruptions when saving MPEG files.
  * Fixed possible file corruptions when saving APE files.
  * Fixed possible file corruptions when saving Musepack files.
  * Fixed possible file corruptions when saving WavPack files.
  * Fixed updating the comment field of Vorbis comments.
  * Fixed reading date and time in ID3v2.3 tags.
  * Marked ByteVector::null and ByteVector::isNull()
    deprecated.
  * Marked String::null and String::isNull() deprecated.
  * Marked XiphComment::removeField() deprecated.
  * Marked Ogg::Page::getCopyWithNewPageSequenceNumber()
    deprecated. It returns null.
  * Marked custom integer types deprecated.
  * Many smaller bug fixes and performance improvements.</changelog>
  <changelog author="sbrabec@suse.com" date="1502193600">- Update to versio 1.11.1:
  * Fixed binary incompatible change in TagLib::String.
  * Fixed reading ID3v2 CTOC frames with a lot of entries.
  * Fixed seeking ByteVectorStream from the end.
- Prevent denial of service (bsc#1052699, CVE-2017-12678,
  taglib-CVE-2017-12678.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Cleanup bit with spec-cleaner
- Drop librcc dependency as there is no actual code dependency in taglib</changelog>
  <changelog author="kbabioch@suse.com" date="1528286400">- Added taglib-CVE-2018-11439.patch: Fix an out-of-bounds read when loading
  invalid ogg flac files (CVE-2018-11439, bsc#1096180).
- Applied spec-cleaner to specfile</changelog>
</package>
<package pkgid="f22506a5c87af745f0cd8b4729a4e8b4ce04b38048f4893a6121168e4c094d22" name="libtag1-32bit" arch="x86_64">
  <version epoch="0" ver="1.11.1" rel="lp150.3.3.1"/>
  <changelog author="cgiboudeaux@gmx.com" date="1347537600">- Update to 1.8
  * Added support for OWNE ID3 frames.
  * Changed key validation in the new PropertyMap API.
  * ID3v1::Tag::setStringHandler will no londer delete the previous handler, the caller is responsible for this.
  * File objects will also no longer delete the passed IOStream objects. It should be done in the caller code after the File object is no longer used.
  * Added ID3v2::Tag::setLatin1StringHandler for custom handling of latin1-encoded text in ID3v2 frames.
  * Fixed validation of ID3v2 frame IDs (IDs with ?0? were ignored).
  * New API for accessing tags by name.
  * New abstract I/O stream layer to allow custom I/O handlers.
  * Support for writing ID3v2.3 tags.
  * Support for various module file formats (MOD, S3M, IT, XM).
  * Support for MP4 and ASF is now enabled by default.
  * Started using atomic int operations for reference counting.
  * Added methods for checking if WMA and MP4 files are DRM-protected.
  * Added taglib_free to the C bindings.
  * New method to allow removing pictures from FLAC files.
  * Support for reading audio properties from ALAC and Musepack SV8 files.
  * Added replay-gain information to Musepack audio properties.
  * Support for APEv2 binary tags.
  * Many AudioProperties subclasses now provide information about the total number of samples.
  * Various small bug fixes.
- Drop taglib-noansiflags.patch (no longer relevant)</changelog>
  <changelog author="klaussfreire@gmail.com" date="1352376000">- Add patch taglib-1.8-version_fix.patch: fix version defines
  in taglib.h</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="hessijames@gmail.com" date="1359979200">- Update rusxmms patch to version taglib-1.8-ds-rusxmms-r2 in order to fix bnc#780256</changelog>
  <changelog author="hessijames@gmail.com" date="1359979201">- Replace taglib-1.6-ds-rusxmms.patch with
  taglib-1.8-ds-rusxmms-r2.patch: Update rusxmms patch to also work
  with non-Russian locale (bnc#780256).</changelog>
  <changelog author="davejplater@gmail.com" date="1366891200">- Incorporated updated taglib-1.8-ds-rusxmms-r4.patch see bnc#814814
- Added built binary examples which manipulate tags from the command line
  to enable easier testing of libtag. These are in the taglib rpm.
- Created taglib-1.8-strip-rpath.patch to remove rpath from binaries.</changelog>
  <changelog author="davejplater@gmail.com" date="1366977600">- Added taglib-1.8-ds-rusxmms-r8.patch which fixes bnc#814814
- Removed old taglib-1.8-ds-rusxmms-r4.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1369310400">- Added taglib-1.8-ds-rusxmms-r9.patch and deleted
  taglib-1.8-ds-rusxmms-r8.patch to fix the reopened bnc#814814</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1370779200">- JUst like the rest of the system, taglib has to be built
  with LFS support/ 64bit off_t in 32 bit archs.</changelog>
  <changelog author="jslaby@suse.com" date="1371816000">- Added-check-if-file-is-open-before-attempting-to-rea.patch: Added
  check if file is open before attempting to read tags (bnc#826228)
- Fixed Urls in .spec</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1381060800">- Update to 1.9
  * Added support for the Ogg Opus file format.
  * Added support for INFO tags in WAV files.
  * Changed FileStream to use Windows file API.
  * Included taglib-config.cmd script for Windows.
  * New ID3v1::Tag methods for working directly with
    genre numbers.
  * New MPEG::File methods for checking which tags are saved in
    the file.
  * Added support for the PropertyMap API to ASF and MP4 files.
  * Added MusicBrainz identifiers to the PropertyMap API.
  * Allowed reading of MP4 cover art without an explicitly
    specified format.
  * Better parsing of corrupted FLAC files.
  * Fixed saving of PropertyMap comments without description
    into ID3v2 tags.
  * Fixed crash when parsing certain XM files.
  * Fixed compilation of unit test with clang.
  * Better handling of files that can't be open or have
    read-only permissions.
  * Improved atomic reference counting.
  * New hookable API for debug messages.
  * More complete Windows install instructions.
  * Many smaller bug fixes and performance improvements.
- Dropped taglib-1.8-ds-rusxmms-r9.patch, not required anymore
- Dropped Added-check-if-file-is-open-before-attempting-to-rea.patch
  and taglib-1.8-version_fix.patch, merged upstream</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1381320000">- Update to 1.9.1
  * Fixed binary incompatible change in TagLib::Map and TagLib::List.
  * Fixed constructing String from ByteVector.
  * Fixed compilation on MSVC with the /Zc:wchar_t- option.
  * Fixed detecting of RIFF files with invalid chunk sizes.
  * Added TagLib::MP4::PropertyMap::codec().</changelog>
  <changelog author="olaf@aepfle.de" date="1397563200">- Fix build error in 11.4
  taglib-1.9.1.uint.patch</changelog>
  <changelog author="ohering@suse.de" date="1400241600">- BuildRequire cmake &gt;= 2.8</changelog>
  <changelog author="mpluskal@suse.com" date="1451736000">- Cleanup spec file with spec-cleaner
- Use cmake macros
- Update to 1.10
  * New API for the audio length in milliseconds.
  * Added new options to the tagwriter example.
  * Added support for ID3v2 ETCO and SYLT frames.
  * Added support for album artist in PropertyMap API of MP4 files.
  * Added support for embedded frames in ID3v2 CHAP and CTOC
    frames.
  * Added support for AIFF-C files.
  * Better handling of duplicate ID3v2 tags in MPEG files.
  * Allowed generating taglib.pc on Windows.
  * Added ZLIB_SOURCE build option.
  * Fixed backwards-incompatible change in TagLib::String when
    constructing UTF16 strings.
  * Fixed crash when parsing certain FLAC files.
  * Fixed crash when encoding empty strings.
  * Fixed saving of certain XM files on OS X.
  * Changed Xiph and APE generic getters to return
    space-concatenated values.
  * Fixed possible file corruptions when removing tags from WAV
    files.
  * Added support for MP4 files with 64-bit atoms in certain 64-bit
    environments.
  * Prevented ID3v2 padding from being too large.
  * Fixed crash when parsing corrupted APE files.
  * Fixed crash when parsing corrupted WAV files.
  * Fixed crash when parsing corrupted Ogg FLAC files.
  * Fixed crash when parsing corrupted MPEG files.
  * Fixed saving empty tags in WAV files.
  * Fixed crash when parsing corrupted Musepack files.
  * Fixed possible memory leaks when parsing AIFF and WAV files.
  * Fixed crash when parsing corrupted MP4 files.
  * Stopped writing empty ID3v2 frames.
  * Fixed possible file corruptions when saving WMA files.
  * Added TagLib::MP4::Tag::isEmpty().
  * Added accessors to manipulate MP4 tags.
  * Fixed crash when parsing corrupted WavPack files.
  * Fixed seeking MPEG frames.
  * Fixed reading FLAC files with zero-sized padding blocks.
  * Added support for reading the encoder information of WMA files.
  * Added support for reading the codec of WAV files.
  * Added support for multi channel WavPack files.
  * Added support for reading the nominal bitrate of Ogg Speex
    files.
  * Added support for VBR headers in MPEG files.
  * Marked FLAC::File::streamInfoData() deprecated. It returns an
    empty ByteVector.
  * Marked FLAC::File::streamLength() deprecated. It returns zero.
  * Fixed possible file corruptions when adding an ID3v1 tag to
    FLAC files.
  * Fixed self-assignment operator in some types.
  * Fixed extraction of MP4 tag keys with an empty list.
  * Many smaller bug fixes and performance improvements.
- Drop no longer needed patches:
  * taglib-1.7.2-doxygen.patch
  * taglib-1.8-strip-rpath.patch
  * taglib-1.9.1.uint.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1451908800">- Fix build in SLE_11 by disabling post-install</changelog>
  <changelog author="aloisio@gmx.com" date="1462190400">- Update to 1.11
  * Fixed reading APE items with long keys.
  * Fixed reading ID3v2 SYLT frames when description is empty.
  1.11 BETA 2:
  * Better handling of PCM WAV files with a 'fact' chunk.
  * Better handling of corrupted APE tags.
  * Efficient decoding of unsynchronized ID3v2 frames.
  * Fixed text encoding when saving certain frames in ID3v2.3
    tags.
  * Fixed updating the size of RIFF files when removing chunks.
  * Several smaller bug fixes and performance improvements.
  1.11 BETA:
  * New API for creating FileRef from IOStream.
  * Added support for ID3v2 PCST and WFED frames.
  * Added support for pictures in XiphComment.
  * Added String::clear().
  * Added FLAC::File::strip() for removing non-standard tags.
  * Added alternative functions to XiphComment::removeField().
  * Added BUILD_BINDINGS build option.
  * Added ENABLE_CCACHE build option.
  * Replaced ENABLE_STATIC build option with BUILD_SHARED_LIBS.
  * Better handling of duplicate ID3v2 tags in all kinds of
    files.
  * Better handling of duplicate tag chunks in WAV files.
  * Better handling of duplicate tag chunks in AIFF files.
  * Better handling of duplicate Vorbis comment blocks in FLAC
    files.
  * Better handling of broken MPEG audio frames.
  * Fixed crash when calling File::properties() after strip().
  * Fixed crash when parsing certain MPEG files.
  * Fixed crash when saving Ogg files.
  * Fixed possible file corruptions when saving ASF files.
  * Fixed possible file corruptions when saving FLAC files.
  * Fixed possible file corruptions when saving MP4 files.
  * Fixed possible file corruptions when saving MPEG files.
  * Fixed possible file corruptions when saving APE files.
  * Fixed possible file corruptions when saving Musepack files.
  * Fixed possible file corruptions when saving WavPack files.
  * Fixed updating the comment field of Vorbis comments.
  * Fixed reading date and time in ID3v2.3 tags.
  * Marked ByteVector::null and ByteVector::isNull()
    deprecated.
  * Marked String::null and String::isNull() deprecated.
  * Marked XiphComment::removeField() deprecated.
  * Marked Ogg::Page::getCopyWithNewPageSequenceNumber()
    deprecated. It returns null.
  * Marked custom integer types deprecated.
  * Many smaller bug fixes and performance improvements.</changelog>
  <changelog author="sbrabec@suse.com" date="1502193600">- Update to versio 1.11.1:
  * Fixed binary incompatible change in TagLib::String.
  * Fixed reading ID3v2 CTOC frames with a lot of entries.
  * Fixed seeking ByteVectorStream from the end.
- Prevent denial of service (bsc#1052699, CVE-2017-12678,
  taglib-CVE-2017-12678.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Cleanup bit with spec-cleaner
- Drop librcc dependency as there is no actual code dependency in taglib</changelog>
  <changelog author="kbabioch@suse.com" date="1528286400">- Added taglib-CVE-2018-11439.patch: Fix an out-of-bounds read when loading
  invalid ogg flac files (CVE-2018-11439, bsc#1096180).
- Applied spec-cleaner to specfile</changelog>
</package>
<package pkgid="2cc178643bf5ecd1c78582b25acb882918759c1fd8d57e66580a0bbda4a963af" name="libtag_c0" arch="x86_64">
  <version epoch="0" ver="1.11.1" rel="lp150.3.3.1"/>
  <changelog author="cgiboudeaux@gmx.com" date="1347537600">- Update to 1.8
  * Added support for OWNE ID3 frames.
  * Changed key validation in the new PropertyMap API.
  * ID3v1::Tag::setStringHandler will no londer delete the previous handler, the caller is responsible for this.
  * File objects will also no longer delete the passed IOStream objects. It should be done in the caller code after the File object is no longer used.
  * Added ID3v2::Tag::setLatin1StringHandler for custom handling of latin1-encoded text in ID3v2 frames.
  * Fixed validation of ID3v2 frame IDs (IDs with ?0? were ignored).
  * New API for accessing tags by name.
  * New abstract I/O stream layer to allow custom I/O handlers.
  * Support for writing ID3v2.3 tags.
  * Support for various module file formats (MOD, S3M, IT, XM).
  * Support for MP4 and ASF is now enabled by default.
  * Started using atomic int operations for reference counting.
  * Added methods for checking if WMA and MP4 files are DRM-protected.
  * Added taglib_free to the C bindings.
  * New method to allow removing pictures from FLAC files.
  * Support for reading audio properties from ALAC and Musepack SV8 files.
  * Added replay-gain information to Musepack audio properties.
  * Support for APEv2 binary tags.
  * Many AudioProperties subclasses now provide information about the total number of samples.
  * Various small bug fixes.
- Drop taglib-noansiflags.patch (no longer relevant)</changelog>
  <changelog author="klaussfreire@gmail.com" date="1352376000">- Add patch taglib-1.8-version_fix.patch: fix version defines
  in taglib.h</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="hessijames@gmail.com" date="1359979200">- Update rusxmms patch to version taglib-1.8-ds-rusxmms-r2 in order to fix bnc#780256</changelog>
  <changelog author="hessijames@gmail.com" date="1359979201">- Replace taglib-1.6-ds-rusxmms.patch with
  taglib-1.8-ds-rusxmms-r2.patch: Update rusxmms patch to also work
  with non-Russian locale (bnc#780256).</changelog>
  <changelog author="davejplater@gmail.com" date="1366891200">- Incorporated updated taglib-1.8-ds-rusxmms-r4.patch see bnc#814814
- Added built binary examples which manipulate tags from the command line
  to enable easier testing of libtag. These are in the taglib rpm.
- Created taglib-1.8-strip-rpath.patch to remove rpath from binaries.</changelog>
  <changelog author="davejplater@gmail.com" date="1366977600">- Added taglib-1.8-ds-rusxmms-r8.patch which fixes bnc#814814
- Removed old taglib-1.8-ds-rusxmms-r4.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1369310400">- Added taglib-1.8-ds-rusxmms-r9.patch and deleted
  taglib-1.8-ds-rusxmms-r8.patch to fix the reopened bnc#814814</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1370779200">- JUst like the rest of the system, taglib has to be built
  with LFS support/ 64bit off_t in 32 bit archs.</changelog>
  <changelog author="jslaby@suse.com" date="1371816000">- Added-check-if-file-is-open-before-attempting-to-rea.patch: Added
  check if file is open before attempting to read tags (bnc#826228)
- Fixed Urls in .spec</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1381060800">- Update to 1.9
  * Added support for the Ogg Opus file format.
  * Added support for INFO tags in WAV files.
  * Changed FileStream to use Windows file API.
  * Included taglib-config.cmd script for Windows.
  * New ID3v1::Tag methods for working directly with
    genre numbers.
  * New MPEG::File methods for checking which tags are saved in
    the file.
  * Added support for the PropertyMap API to ASF and MP4 files.
  * Added MusicBrainz identifiers to the PropertyMap API.
  * Allowed reading of MP4 cover art without an explicitly
    specified format.
  * Better parsing of corrupted FLAC files.
  * Fixed saving of PropertyMap comments without description
    into ID3v2 tags.
  * Fixed crash when parsing certain XM files.
  * Fixed compilation of unit test with clang.
  * Better handling of files that can't be open or have
    read-only permissions.
  * Improved atomic reference counting.
  * New hookable API for debug messages.
  * More complete Windows install instructions.
  * Many smaller bug fixes and performance improvements.
- Dropped taglib-1.8-ds-rusxmms-r9.patch, not required anymore
- Dropped Added-check-if-file-is-open-before-attempting-to-rea.patch
  and taglib-1.8-version_fix.patch, merged upstream</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1381320000">- Update to 1.9.1
  * Fixed binary incompatible change in TagLib::Map and TagLib::List.
  * Fixed constructing String from ByteVector.
  * Fixed compilation on MSVC with the /Zc:wchar_t- option.
  * Fixed detecting of RIFF files with invalid chunk sizes.
  * Added TagLib::MP4::PropertyMap::codec().</changelog>
  <changelog author="olaf@aepfle.de" date="1397563200">- Fix build error in 11.4
  taglib-1.9.1.uint.patch</changelog>
  <changelog author="ohering@suse.de" date="1400241600">- BuildRequire cmake &gt;= 2.8</changelog>
  <changelog author="mpluskal@suse.com" date="1451736000">- Cleanup spec file with spec-cleaner
- Use cmake macros
- Update to 1.10
  * New API for the audio length in milliseconds.
  * Added new options to the tagwriter example.
  * Added support for ID3v2 ETCO and SYLT frames.
  * Added support for album artist in PropertyMap API of MP4 files.
  * Added support for embedded frames in ID3v2 CHAP and CTOC
    frames.
  * Added support for AIFF-C files.
  * Better handling of duplicate ID3v2 tags in MPEG files.
  * Allowed generating taglib.pc on Windows.
  * Added ZLIB_SOURCE build option.
  * Fixed backwards-incompatible change in TagLib::String when
    constructing UTF16 strings.
  * Fixed crash when parsing certain FLAC files.
  * Fixed crash when encoding empty strings.
  * Fixed saving of certain XM files on OS X.
  * Changed Xiph and APE generic getters to return
    space-concatenated values.
  * Fixed possible file corruptions when removing tags from WAV
    files.
  * Added support for MP4 files with 64-bit atoms in certain 64-bit
    environments.
  * Prevented ID3v2 padding from being too large.
  * Fixed crash when parsing corrupted APE files.
  * Fixed crash when parsing corrupted WAV files.
  * Fixed crash when parsing corrupted Ogg FLAC files.
  * Fixed crash when parsing corrupted MPEG files.
  * Fixed saving empty tags in WAV files.
  * Fixed crash when parsing corrupted Musepack files.
  * Fixed possible memory leaks when parsing AIFF and WAV files.
  * Fixed crash when parsing corrupted MP4 files.
  * Stopped writing empty ID3v2 frames.
  * Fixed possible file corruptions when saving WMA files.
  * Added TagLib::MP4::Tag::isEmpty().
  * Added accessors to manipulate MP4 tags.
  * Fixed crash when parsing corrupted WavPack files.
  * Fixed seeking MPEG frames.
  * Fixed reading FLAC files with zero-sized padding blocks.
  * Added support for reading the encoder information of WMA files.
  * Added support for reading the codec of WAV files.
  * Added support for multi channel WavPack files.
  * Added support for reading the nominal bitrate of Ogg Speex
    files.
  * Added support for VBR headers in MPEG files.
  * Marked FLAC::File::streamInfoData() deprecated. It returns an
    empty ByteVector.
  * Marked FLAC::File::streamLength() deprecated. It returns zero.
  * Fixed possible file corruptions when adding an ID3v1 tag to
    FLAC files.
  * Fixed self-assignment operator in some types.
  * Fixed extraction of MP4 tag keys with an empty list.
  * Many smaller bug fixes and performance improvements.
- Drop no longer needed patches:
  * taglib-1.7.2-doxygen.patch
  * taglib-1.8-strip-rpath.patch
  * taglib-1.9.1.uint.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1451908800">- Fix build in SLE_11 by disabling post-install</changelog>
  <changelog author="aloisio@gmx.com" date="1462190400">- Update to 1.11
  * Fixed reading APE items with long keys.
  * Fixed reading ID3v2 SYLT frames when description is empty.
  1.11 BETA 2:
  * Better handling of PCM WAV files with a 'fact' chunk.
  * Better handling of corrupted APE tags.
  * Efficient decoding of unsynchronized ID3v2 frames.
  * Fixed text encoding when saving certain frames in ID3v2.3
    tags.
  * Fixed updating the size of RIFF files when removing chunks.
  * Several smaller bug fixes and performance improvements.
  1.11 BETA:
  * New API for creating FileRef from IOStream.
  * Added support for ID3v2 PCST and WFED frames.
  * Added support for pictures in XiphComment.
  * Added String::clear().
  * Added FLAC::File::strip() for removing non-standard tags.
  * Added alternative functions to XiphComment::removeField().
  * Added BUILD_BINDINGS build option.
  * Added ENABLE_CCACHE build option.
  * Replaced ENABLE_STATIC build option with BUILD_SHARED_LIBS.
  * Better handling of duplicate ID3v2 tags in all kinds of
    files.
  * Better handling of duplicate tag chunks in WAV files.
  * Better handling of duplicate tag chunks in AIFF files.
  * Better handling of duplicate Vorbis comment blocks in FLAC
    files.
  * Better handling of broken MPEG audio frames.
  * Fixed crash when calling File::properties() after strip().
  * Fixed crash when parsing certain MPEG files.
  * Fixed crash when saving Ogg files.
  * Fixed possible file corruptions when saving ASF files.
  * Fixed possible file corruptions when saving FLAC files.
  * Fixed possible file corruptions when saving MP4 files.
  * Fixed possible file corruptions when saving MPEG files.
  * Fixed possible file corruptions when saving APE files.
  * Fixed possible file corruptions when saving Musepack files.
  * Fixed possible file corruptions when saving WavPack files.
  * Fixed updating the comment field of Vorbis comments.
  * Fixed reading date and time in ID3v2.3 tags.
  * Marked ByteVector::null and ByteVector::isNull()
    deprecated.
  * Marked String::null and String::isNull() deprecated.
  * Marked XiphComment::removeField() deprecated.
  * Marked Ogg::Page::getCopyWithNewPageSequenceNumber()
    deprecated. It returns null.
  * Marked custom integer types deprecated.
  * Many smaller bug fixes and performance improvements.</changelog>
  <changelog author="sbrabec@suse.com" date="1502193600">- Update to versio 1.11.1:
  * Fixed binary incompatible change in TagLib::String.
  * Fixed reading ID3v2 CTOC frames with a lot of entries.
  * Fixed seeking ByteVectorStream from the end.
- Prevent denial of service (bsc#1052699, CVE-2017-12678,
  taglib-CVE-2017-12678.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Cleanup bit with spec-cleaner
- Drop librcc dependency as there is no actual code dependency in taglib</changelog>
  <changelog author="kbabioch@suse.com" date="1528286400">- Added taglib-CVE-2018-11439.patch: Fix an out-of-bounds read when loading
  invalid ogg flac files (CVE-2018-11439, bsc#1096180).
- Applied spec-cleaner to specfile</changelog>
</package>
<package pkgid="183fa0b94c850b4cdb5e2781ceab7d8f8e02e5afa48f21be34f2918462a89c95" name="libtag_c0-32bit" arch="x86_64">
  <version epoch="0" ver="1.11.1" rel="lp150.3.3.1"/>
  <changelog author="cgiboudeaux@gmx.com" date="1347537600">- Update to 1.8
  * Added support for OWNE ID3 frames.
  * Changed key validation in the new PropertyMap API.
  * ID3v1::Tag::setStringHandler will no londer delete the previous handler, the caller is responsible for this.
  * File objects will also no longer delete the passed IOStream objects. It should be done in the caller code after the File object is no longer used.
  * Added ID3v2::Tag::setLatin1StringHandler for custom handling of latin1-encoded text in ID3v2 frames.
  * Fixed validation of ID3v2 frame IDs (IDs with ?0? were ignored).
  * New API for accessing tags by name.
  * New abstract I/O stream layer to allow custom I/O handlers.
  * Support for writing ID3v2.3 tags.
  * Support for various module file formats (MOD, S3M, IT, XM).
  * Support for MP4 and ASF is now enabled by default.
  * Started using atomic int operations for reference counting.
  * Added methods for checking if WMA and MP4 files are DRM-protected.
  * Added taglib_free to the C bindings.
  * New method to allow removing pictures from FLAC files.
  * Support for reading audio properties from ALAC and Musepack SV8 files.
  * Added replay-gain information to Musepack audio properties.
  * Support for APEv2 binary tags.
  * Many AudioProperties subclasses now provide information about the total number of samples.
  * Various small bug fixes.
- Drop taglib-noansiflags.patch (no longer relevant)</changelog>
  <changelog author="klaussfreire@gmail.com" date="1352376000">- Add patch taglib-1.8-version_fix.patch: fix version defines
  in taglib.h</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="hessijames@gmail.com" date="1359979200">- Update rusxmms patch to version taglib-1.8-ds-rusxmms-r2 in order to fix bnc#780256</changelog>
  <changelog author="hessijames@gmail.com" date="1359979201">- Replace taglib-1.6-ds-rusxmms.patch with
  taglib-1.8-ds-rusxmms-r2.patch: Update rusxmms patch to also work
  with non-Russian locale (bnc#780256).</changelog>
  <changelog author="davejplater@gmail.com" date="1366891200">- Incorporated updated taglib-1.8-ds-rusxmms-r4.patch see bnc#814814
- Added built binary examples which manipulate tags from the command line
  to enable easier testing of libtag. These are in the taglib rpm.
- Created taglib-1.8-strip-rpath.patch to remove rpath from binaries.</changelog>
  <changelog author="davejplater@gmail.com" date="1366977600">- Added taglib-1.8-ds-rusxmms-r8.patch which fixes bnc#814814
- Removed old taglib-1.8-ds-rusxmms-r4.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1369310400">- Added taglib-1.8-ds-rusxmms-r9.patch and deleted
  taglib-1.8-ds-rusxmms-r8.patch to fix the reopened bnc#814814</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1370779200">- JUst like the rest of the system, taglib has to be built
  with LFS support/ 64bit off_t in 32 bit archs.</changelog>
  <changelog author="jslaby@suse.com" date="1371816000">- Added-check-if-file-is-open-before-attempting-to-rea.patch: Added
  check if file is open before attempting to read tags (bnc#826228)
- Fixed Urls in .spec</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1381060800">- Update to 1.9
  * Added support for the Ogg Opus file format.
  * Added support for INFO tags in WAV files.
  * Changed FileStream to use Windows file API.
  * Included taglib-config.cmd script for Windows.
  * New ID3v1::Tag methods for working directly with
    genre numbers.
  * New MPEG::File methods for checking which tags are saved in
    the file.
  * Added support for the PropertyMap API to ASF and MP4 files.
  * Added MusicBrainz identifiers to the PropertyMap API.
  * Allowed reading of MP4 cover art without an explicitly
    specified format.
  * Better parsing of corrupted FLAC files.
  * Fixed saving of PropertyMap comments without description
    into ID3v2 tags.
  * Fixed crash when parsing certain XM files.
  * Fixed compilation of unit test with clang.
  * Better handling of files that can't be open or have
    read-only permissions.
  * Improved atomic reference counting.
  * New hookable API for debug messages.
  * More complete Windows install instructions.
  * Many smaller bug fixes and performance improvements.
- Dropped taglib-1.8-ds-rusxmms-r9.patch, not required anymore
- Dropped Added-check-if-file-is-open-before-attempting-to-rea.patch
  and taglib-1.8-version_fix.patch, merged upstream</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1381320000">- Update to 1.9.1
  * Fixed binary incompatible change in TagLib::Map and TagLib::List.
  * Fixed constructing String from ByteVector.
  * Fixed compilation on MSVC with the /Zc:wchar_t- option.
  * Fixed detecting of RIFF files with invalid chunk sizes.
  * Added TagLib::MP4::PropertyMap::codec().</changelog>
  <changelog author="olaf@aepfle.de" date="1397563200">- Fix build error in 11.4
  taglib-1.9.1.uint.patch</changelog>
  <changelog author="ohering@suse.de" date="1400241600">- BuildRequire cmake &gt;= 2.8</changelog>
  <changelog author="mpluskal@suse.com" date="1451736000">- Cleanup spec file with spec-cleaner
- Use cmake macros
- Update to 1.10
  * New API for the audio length in milliseconds.
  * Added new options to the tagwriter example.
  * Added support for ID3v2 ETCO and SYLT frames.
  * Added support for album artist in PropertyMap API of MP4 files.
  * Added support for embedded frames in ID3v2 CHAP and CTOC
    frames.
  * Added support for AIFF-C files.
  * Better handling of duplicate ID3v2 tags in MPEG files.
  * Allowed generating taglib.pc on Windows.
  * Added ZLIB_SOURCE build option.
  * Fixed backwards-incompatible change in TagLib::String when
    constructing UTF16 strings.
  * Fixed crash when parsing certain FLAC files.
  * Fixed crash when encoding empty strings.
  * Fixed saving of certain XM files on OS X.
  * Changed Xiph and APE generic getters to return
    space-concatenated values.
  * Fixed possible file corruptions when removing tags from WAV
    files.
  * Added support for MP4 files with 64-bit atoms in certain 64-bit
    environments.
  * Prevented ID3v2 padding from being too large.
  * Fixed crash when parsing corrupted APE files.
  * Fixed crash when parsing corrupted WAV files.
  * Fixed crash when parsing corrupted Ogg FLAC files.
  * Fixed crash when parsing corrupted MPEG files.
  * Fixed saving empty tags in WAV files.
  * Fixed crash when parsing corrupted Musepack files.
  * Fixed possible memory leaks when parsing AIFF and WAV files.
  * Fixed crash when parsing corrupted MP4 files.
  * Stopped writing empty ID3v2 frames.
  * Fixed possible file corruptions when saving WMA files.
  * Added TagLib::MP4::Tag::isEmpty().
  * Added accessors to manipulate MP4 tags.
  * Fixed crash when parsing corrupted WavPack files.
  * Fixed seeking MPEG frames.
  * Fixed reading FLAC files with zero-sized padding blocks.
  * Added support for reading the encoder information of WMA files.
  * Added support for reading the codec of WAV files.
  * Added support for multi channel WavPack files.
  * Added support for reading the nominal bitrate of Ogg Speex
    files.
  * Added support for VBR headers in MPEG files.
  * Marked FLAC::File::streamInfoData() deprecated. It returns an
    empty ByteVector.
  * Marked FLAC::File::streamLength() deprecated. It returns zero.
  * Fixed possible file corruptions when adding an ID3v1 tag to
    FLAC files.
  * Fixed self-assignment operator in some types.
  * Fixed extraction of MP4 tag keys with an empty list.
  * Many smaller bug fixes and performance improvements.
- Drop no longer needed patches:
  * taglib-1.7.2-doxygen.patch
  * taglib-1.8-strip-rpath.patch
  * taglib-1.9.1.uint.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1451908800">- Fix build in SLE_11 by disabling post-install</changelog>
  <changelog author="aloisio@gmx.com" date="1462190400">- Update to 1.11
  * Fixed reading APE items with long keys.
  * Fixed reading ID3v2 SYLT frames when description is empty.
  1.11 BETA 2:
  * Better handling of PCM WAV files with a 'fact' chunk.
  * Better handling of corrupted APE tags.
  * Efficient decoding of unsynchronized ID3v2 frames.
  * Fixed text encoding when saving certain frames in ID3v2.3
    tags.
  * Fixed updating the size of RIFF files when removing chunks.
  * Several smaller bug fixes and performance improvements.
  1.11 BETA:
  * New API for creating FileRef from IOStream.
  * Added support for ID3v2 PCST and WFED frames.
  * Added support for pictures in XiphComment.
  * Added String::clear().
  * Added FLAC::File::strip() for removing non-standard tags.
  * Added alternative functions to XiphComment::removeField().
  * Added BUILD_BINDINGS build option.
  * Added ENABLE_CCACHE build option.
  * Replaced ENABLE_STATIC build option with BUILD_SHARED_LIBS.
  * Better handling of duplicate ID3v2 tags in all kinds of
    files.
  * Better handling of duplicate tag chunks in WAV files.
  * Better handling of duplicate tag chunks in AIFF files.
  * Better handling of duplicate Vorbis comment blocks in FLAC
    files.
  * Better handling of broken MPEG audio frames.
  * Fixed crash when calling File::properties() after strip().
  * Fixed crash when parsing certain MPEG files.
  * Fixed crash when saving Ogg files.
  * Fixed possible file corruptions when saving ASF files.
  * Fixed possible file corruptions when saving FLAC files.
  * Fixed possible file corruptions when saving MP4 files.
  * Fixed possible file corruptions when saving MPEG files.
  * Fixed possible file corruptions when saving APE files.
  * Fixed possible file corruptions when saving Musepack files.
  * Fixed possible file corruptions when saving WavPack files.
  * Fixed updating the comment field of Vorbis comments.
  * Fixed reading date and time in ID3v2.3 tags.
  * Marked ByteVector::null and ByteVector::isNull()
    deprecated.
  * Marked String::null and String::isNull() deprecated.
  * Marked XiphComment::removeField() deprecated.
  * Marked Ogg::Page::getCopyWithNewPageSequenceNumber()
    deprecated. It returns null.
  * Marked custom integer types deprecated.
  * Many smaller bug fixes and performance improvements.</changelog>
  <changelog author="sbrabec@suse.com" date="1502193600">- Update to versio 1.11.1:
  * Fixed binary incompatible change in TagLib::String.
  * Fixed reading ID3v2 CTOC frames with a lot of entries.
  * Fixed seeking ByteVectorStream from the end.
- Prevent denial of service (bsc#1052699, CVE-2017-12678,
  taglib-CVE-2017-12678.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Cleanup bit with spec-cleaner
- Drop librcc dependency as there is no actual code dependency in taglib</changelog>
  <changelog author="kbabioch@suse.com" date="1528286400">- Added taglib-CVE-2018-11439.patch: Fix an out-of-bounds read when loading
  invalid ogg flac files (CVE-2018-11439, bsc#1096180).
- Applied spec-cleaner to specfile</changelog>
</package>
<package pkgid="238b286a5193c3ea409dd7a2438e7186cc163e9893ab93c958893fc3d9cd851e" name="libtalloc-devel" arch="x86_64">
  <version epoch="0" ver="2.1.11" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1429185600">- Update to 2.1.2.
  + Fix memory leak in SMB2 notify handling; (bso#11144).
  + fix _talloc_total_limit_size prototype
  + build: improve detection of srcdir</changelog>
  <changelog author="lmuelle@suse.com" date="1437566400">- Update to 2.1.3; (bsc#939051).
  + improved python3 bindings
  + documentation fixes regarding talloc_reference() and talloc_unlink()</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'talloc.keyring';
  (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1445515200">- Update to 2.1.4; (bsc#951660).
  + Test that talloc magic differs between processes.
  + Increment minor version due to added talloc_test_get_magic.
  + Provide tests access to talloc_magic.
  + Test magic protection measures.</changelog>
  <changelog author="lmuelle@suse.com" date="1445515201">- Rename pytalloc to python-talloc.</changelog>
  <changelog author="lmuelle@suse.com" date="1445688000">- Add python3-talloc and python3-talloc-devel; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Add doxygen at build time to add the development documentation.
- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1446984000">- Point LD_LIBRARY_PATH to the just-built libraries while calling make test.
- Create a 2nd talloc-man spec-file to avoid a build cycle.
- Recommend to install talloc-man from libtalloc-devel.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 2.1.5; (bsc#954658).
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1455278400">- Provide python-talloc and python-talloc-devel; (bsc#966523).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457352000">- Add talloc-python3.5-fix-soabi_name.patch: Do not change x86_64 to
  x86-64 when building with python 3.5.</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Update to 2.1.6; (bsc#954658).
  + pytalloc: Add new BaseObject
  + pytalloc: add a _pytalloc_get_type() helper function and generate
    PyExc_TypeError on mismatch
  + talloc: add _pytalloc_get_ptr/_pytalloc_get_mem_ctx helper functions
  + Improve testsuite by avoiding path issues
  + Only set public headers field when installing as a public library
  + Fix a documentation typo</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 2.1.8.
  + performance improvements
  + Fix memory leak when destructors reparent children; (bso#11901).</changelog>
  <changelog author="jmcdonough@suse.com" date="1490184000">- Update to version 2.1.9; (bsc#1032915).
  + fix some coverity defects
  + fix TALLOC_VERSION_MINOR and talloc_version_minor()
  + add new tests
  + add pytalloc_get_type()
  + add pytalloc_GenericObject_{steal,reference}[_ex]()</changelog>
  <changelog author="jmcdonough@suse.com" date="1490270400">- sle11-remove-unknown-compiler-options.patch: build SLE11 and earlier
  without -Wno-format-length.</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 2.1.10
  + build, documentation and python3 improvements
  + delete sle11-remove-unknown-compiler-options.patch, supported
    options are checked for in upstream code</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Remove %if guards for blocks that do not affect the build result.
  Fix RPM groups and summaries. Drop very old SUSE support.
  Replace old RPM macros by new constructs.</changelog>
  <changelog author="jmcdonough@suse.com" date="1507550400">- Reference library name directly instead of using variables to
  pass obs source validator.</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 2.1.11
  + disable-python - fix talloc wscript if bundling disabled
  + Do not disclose the random talloc magic in free()'ed memory
- Changes required for adding Python3 support to the samba package.</changelog>
</package>
<package pkgid="6fe8e2baf12551c8822a398e659130e02a2d7e27e0bdbbbc1f2f32526b15b3c8" name="libtalloc2" arch="x86_64">
  <version epoch="0" ver="2.1.11" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1429185600">- Update to 2.1.2.
  + Fix memory leak in SMB2 notify handling; (bso#11144).
  + fix _talloc_total_limit_size prototype
  + build: improve detection of srcdir</changelog>
  <changelog author="lmuelle@suse.com" date="1437566400">- Update to 2.1.3; (bsc#939051).
  + improved python3 bindings
  + documentation fixes regarding talloc_reference() and talloc_unlink()</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'talloc.keyring';
  (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1445515200">- Update to 2.1.4; (bsc#951660).
  + Test that talloc magic differs between processes.
  + Increment minor version due to added talloc_test_get_magic.
  + Provide tests access to talloc_magic.
  + Test magic protection measures.</changelog>
  <changelog author="lmuelle@suse.com" date="1445515201">- Rename pytalloc to python-talloc.</changelog>
  <changelog author="lmuelle@suse.com" date="1445688000">- Add python3-talloc and python3-talloc-devel; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Add doxygen at build time to add the development documentation.
- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1446984000">- Point LD_LIBRARY_PATH to the just-built libraries while calling make test.
- Create a 2nd talloc-man spec-file to avoid a build cycle.
- Recommend to install talloc-man from libtalloc-devel.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 2.1.5; (bsc#954658).
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1455278400">- Provide python-talloc and python-talloc-devel; (bsc#966523).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457352000">- Add talloc-python3.5-fix-soabi_name.patch: Do not change x86_64 to
  x86-64 when building with python 3.5.</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Update to 2.1.6; (bsc#954658).
  + pytalloc: Add new BaseObject
  + pytalloc: add a _pytalloc_get_type() helper function and generate
    PyExc_TypeError on mismatch
  + talloc: add _pytalloc_get_ptr/_pytalloc_get_mem_ctx helper functions
  + Improve testsuite by avoiding path issues
  + Only set public headers field when installing as a public library
  + Fix a documentation typo</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 2.1.8.
  + performance improvements
  + Fix memory leak when destructors reparent children; (bso#11901).</changelog>
  <changelog author="jmcdonough@suse.com" date="1490184000">- Update to version 2.1.9; (bsc#1032915).
  + fix some coverity defects
  + fix TALLOC_VERSION_MINOR and talloc_version_minor()
  + add new tests
  + add pytalloc_get_type()
  + add pytalloc_GenericObject_{steal,reference}[_ex]()</changelog>
  <changelog author="jmcdonough@suse.com" date="1490270400">- sle11-remove-unknown-compiler-options.patch: build SLE11 and earlier
  without -Wno-format-length.</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 2.1.10
  + build, documentation and python3 improvements
  + delete sle11-remove-unknown-compiler-options.patch, supported
    options are checked for in upstream code</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Remove %if guards for blocks that do not affect the build result.
  Fix RPM groups and summaries. Drop very old SUSE support.
  Replace old RPM macros by new constructs.</changelog>
  <changelog author="jmcdonough@suse.com" date="1507550400">- Reference library name directly instead of using variables to
  pass obs source validator.</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 2.1.11
  + disable-python - fix talloc wscript if bundling disabled
  + Do not disclose the random talloc magic in free()'ed memory
- Changes required for adding Python3 support to the samba package.</changelog>
</package>
<package pkgid="ee3e6e4bd6a5b049483e308414b3d46df3f58b8309962531bbf1fd62482e31c0" name="libtalloc2-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.11" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1429185600">- Update to 2.1.2.
  + Fix memory leak in SMB2 notify handling; (bso#11144).
  + fix _talloc_total_limit_size prototype
  + build: improve detection of srcdir</changelog>
  <changelog author="lmuelle@suse.com" date="1437566400">- Update to 2.1.3; (bsc#939051).
  + improved python3 bindings
  + documentation fixes regarding talloc_reference() and talloc_unlink()</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'talloc.keyring';
  (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1445515200">- Update to 2.1.4; (bsc#951660).
  + Test that talloc magic differs between processes.
  + Increment minor version due to added talloc_test_get_magic.
  + Provide tests access to talloc_magic.
  + Test magic protection measures.</changelog>
  <changelog author="lmuelle@suse.com" date="1445515201">- Rename pytalloc to python-talloc.</changelog>
  <changelog author="lmuelle@suse.com" date="1445688000">- Add python3-talloc and python3-talloc-devel; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Add doxygen at build time to add the development documentation.
- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1446984000">- Point LD_LIBRARY_PATH to the just-built libraries while calling make test.
- Create a 2nd talloc-man spec-file to avoid a build cycle.
- Recommend to install talloc-man from libtalloc-devel.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 2.1.5; (bsc#954658).
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1455278400">- Provide python-talloc and python-talloc-devel; (bsc#966523).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457352000">- Add talloc-python3.5-fix-soabi_name.patch: Do not change x86_64 to
  x86-64 when building with python 3.5.</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Update to 2.1.6; (bsc#954658).
  + pytalloc: Add new BaseObject
  + pytalloc: add a _pytalloc_get_type() helper function and generate
    PyExc_TypeError on mismatch
  + talloc: add _pytalloc_get_ptr/_pytalloc_get_mem_ctx helper functions
  + Improve testsuite by avoiding path issues
  + Only set public headers field when installing as a public library
  + Fix a documentation typo</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 2.1.8.
  + performance improvements
  + Fix memory leak when destructors reparent children; (bso#11901).</changelog>
  <changelog author="jmcdonough@suse.com" date="1490184000">- Update to version 2.1.9; (bsc#1032915).
  + fix some coverity defects
  + fix TALLOC_VERSION_MINOR and talloc_version_minor()
  + add new tests
  + add pytalloc_get_type()
  + add pytalloc_GenericObject_{steal,reference}[_ex]()</changelog>
  <changelog author="jmcdonough@suse.com" date="1490270400">- sle11-remove-unknown-compiler-options.patch: build SLE11 and earlier
  without -Wno-format-length.</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 2.1.10
  + build, documentation and python3 improvements
  + delete sle11-remove-unknown-compiler-options.patch, supported
    options are checked for in upstream code</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Remove %if guards for blocks that do not affect the build result.
  Fix RPM groups and summaries. Drop very old SUSE support.
  Replace old RPM macros by new constructs.</changelog>
  <changelog author="jmcdonough@suse.com" date="1507550400">- Reference library name directly instead of using variables to
  pass obs source validator.</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 2.1.11
  + disable-python - fix talloc wscript if bundling disabled
  + Do not disclose the random talloc magic in free()'ed memory
- Changes required for adding Python3 support to the samba package.</changelog>
</package>
<package pkgid="fabdfac5bd5c3c10a7381a5f97c9fcb8b5d3a527adf3293b6188951445e013e3" name="libtdb-devel" arch="x86_64">
  <version epoch="0" ver="1.3.15" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1411473600">- Update to version 1.3.1.
  + tools: fix a compiler warning
  + defragment the freelist in tdb_allocate_from_freelist()
  + add "freelist_size" sub-command to tdbtool
  + use tdb_freelist_merge_adjacent in tdb_freelist_size()
  + add tdb_freelist_merge_adjacent()
  + add utility function check_merge_ptr_with_left_record()
  + simplify tdb_free() using check_merge_with_left_record()
  + add utility function check_merge_with_left_record()
  + improve comments for tdb_free().
  + factor merge_with_left_record() out of tdb_free()
  + fix debug message in tdb_free()
  + reduce indentation in tdb_free() for merging left
  + increase readability of read_record_on_left()
  + factor read_record_on_left() out of tdb_free()
  + build: improve detection of srcdir.</changelog>
  <changelog author="lmuelle@suse.com" date="1414497600">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="lmuelle@suse.com" date="1415275200">- Use the upstream tar ball, as signature verification is now able to handle
  compressed archives.</changelog>
  <changelog author="lmuelle@suse.com" date="1419163200">- Update to version 1.3.3.
  + test: TDB_CLEAR_IF_FIRST | TDB_MUTEX_LOCKING, O_RDONLY is a valid
    combination
- Update to version 1.3.2.
  + allow tdb_open_ex() with O_RDONLY of TDB_FEATURE_FLAG_MUTEX tdbs.
  + Fix a comment
  + Fix tdb_runtime_check_for_robust_mutexes()
  + Improve wording in a comment
  + tdb.h needs bool type; obsoletes include_stdbool_bso10625.patch
  + tdb_wrap: Make mutexes easier to use
  + tdb_wrap: Only pull in samba-debug
  + tdb_wrap: Standalone compile without includes.h
  + tdb_wrap: tdb_wrap.h doesn't need struct loadparm_context</changelog>
  <changelog author="lmuelle@suse.com" date="1421150400">- Update to version 1.3.4.
  + toos: allow transactions with TDB_MUTEX_LOCKING
  + test: add tdb1-run-mutex-transaction1 test
  + allow transactions on on tdb's with TDB_MUTEX_LOCKING</changelog>
  <changelog author="lmuelle@suse.com" date="1435406400">- Update to version 1.3.6.
  + Fix runtime detection for robust mutexes in the standalone build;
    (bso#11326).
  + Possible fix for the build with robust mutexes on solaris 11; (bso#11319).
- Update to version 1.3.5.
  + ABI change: tdb_chainlock_read_nonblock() has been added, a nonblock
    variant of tdb_chainlock_read()
  + Do not build test binaries if it's not a standalone build
  + Fix CID 1034842 Resource leak
  + Fix CID 1034841 Resource leak
  + don't let tdb_wrap_open() segfault with name==NULL</changelog>
  <changelog author="lmuelle@suse.com" date="1437566400">- Update to version 1.3.7.
  + first fix deadlock in the interaction between fcntl and mutex locking;
    (bso#11381)
  + improved python3 bindings</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'tdb.keyring'; (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1445774400">- Add python3-tdb; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Add doxygen at build time to add the development documentation.
- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to version 1.3.8; (bsc#954658).
  + Fix broken build with --disable-python
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056001">- Add conflict between python-tdb and python3-tdb.</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 1.3.11.
  + performance improvements
  + make pthread mutex code more portable
  + avoid a race condition when checking for robust mutexes
    (bso#11808)
  + Remove use of strcpy in tdb test.
  + eliminate deprecation warnings in python tests
  + Only set public headers field when installing as a public library.</changelog>
  <changelog author="ddiss@suse.com" date="1485259200">- Update to version 1.3.12; (bsc#1032915).
  + Fix mutexes on FreeBSD
  + Only mmap the mutex area if not already mmap'ed
  + NULL out tdb-&gt;mutexes in tdb_mutex_munmap</changelog>
  <changelog author="scabrero@suse.com" date="1498824000">- Update to version 1.3.13.
  + documentation for the tdbbackup -n option
  + correctly upgrade F_RDLCK to F_WRLCK locks
  + tdbtool: Add "storehex" command
  + fix robust mutex detection in threaded applications
    (bug #12593)
  + improve debugging of transaction lock failures</changelog>
  <changelog author="scabrero@suse.com" date="1499256000">- Update to version 1.3.14.
  + allow tdb_traverse_read before tdb_transaction[_prepare]_commit()
  + Improve documentation for tdb_transaction_start()
  + Add new function tdb_transaction_active()</changelog>
  <changelog author="scabrero@suse.com" date="1506340800">- Update to 1.3.15.
  + Add protection against EINTR.
  + Truncate the file after expand failure, ENOSPC
  + Use posix_fallocate() to expand the file
  + Fix GCC compiler warnings</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Remove %if guards for blocks that do not affect the build result.
  Fix RPM groups and summaries. Ensure neutrality of descriptions.
  Drop very old SUSE support. Replace old RPM macros by new
  constructs. Remove some useless ldconfig calls.</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1537876800">- Update license to LGPL 3.0 or later; (bsc#1109571);</changelog>
</package>
<package pkgid="efc7c5be360dd407b841b591c4a80cfed22003667ca45e418a415af67793e563" name="libtdb1" arch="x86_64">
  <version epoch="0" ver="1.3.15" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1411473600">- Update to version 1.3.1.
  + tools: fix a compiler warning
  + defragment the freelist in tdb_allocate_from_freelist()
  + add "freelist_size" sub-command to tdbtool
  + use tdb_freelist_merge_adjacent in tdb_freelist_size()
  + add tdb_freelist_merge_adjacent()
  + add utility function check_merge_ptr_with_left_record()
  + simplify tdb_free() using check_merge_with_left_record()
  + add utility function check_merge_with_left_record()
  + improve comments for tdb_free().
  + factor merge_with_left_record() out of tdb_free()
  + fix debug message in tdb_free()
  + reduce indentation in tdb_free() for merging left
  + increase readability of read_record_on_left()
  + factor read_record_on_left() out of tdb_free()
  + build: improve detection of srcdir.</changelog>
  <changelog author="lmuelle@suse.com" date="1414497600">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="lmuelle@suse.com" date="1415275200">- Use the upstream tar ball, as signature verification is now able to handle
  compressed archives.</changelog>
  <changelog author="lmuelle@suse.com" date="1419163200">- Update to version 1.3.3.
  + test: TDB_CLEAR_IF_FIRST | TDB_MUTEX_LOCKING, O_RDONLY is a valid
    combination
- Update to version 1.3.2.
  + allow tdb_open_ex() with O_RDONLY of TDB_FEATURE_FLAG_MUTEX tdbs.
  + Fix a comment
  + Fix tdb_runtime_check_for_robust_mutexes()
  + Improve wording in a comment
  + tdb.h needs bool type; obsoletes include_stdbool_bso10625.patch
  + tdb_wrap: Make mutexes easier to use
  + tdb_wrap: Only pull in samba-debug
  + tdb_wrap: Standalone compile without includes.h
  + tdb_wrap: tdb_wrap.h doesn't need struct loadparm_context</changelog>
  <changelog author="lmuelle@suse.com" date="1421150400">- Update to version 1.3.4.
  + toos: allow transactions with TDB_MUTEX_LOCKING
  + test: add tdb1-run-mutex-transaction1 test
  + allow transactions on on tdb's with TDB_MUTEX_LOCKING</changelog>
  <changelog author="lmuelle@suse.com" date="1435406400">- Update to version 1.3.6.
  + Fix runtime detection for robust mutexes in the standalone build;
    (bso#11326).
  + Possible fix for the build with robust mutexes on solaris 11; (bso#11319).
- Update to version 1.3.5.
  + ABI change: tdb_chainlock_read_nonblock() has been added, a nonblock
    variant of tdb_chainlock_read()
  + Do not build test binaries if it's not a standalone build
  + Fix CID 1034842 Resource leak
  + Fix CID 1034841 Resource leak
  + don't let tdb_wrap_open() segfault with name==NULL</changelog>
  <changelog author="lmuelle@suse.com" date="1437566400">- Update to version 1.3.7.
  + first fix deadlock in the interaction between fcntl and mutex locking;
    (bso#11381)
  + improved python3 bindings</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'tdb.keyring'; (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1445774400">- Add python3-tdb; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Add doxygen at build time to add the development documentation.
- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to version 1.3.8; (bsc#954658).
  + Fix broken build with --disable-python
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056001">- Add conflict between python-tdb and python3-tdb.</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 1.3.11.
  + performance improvements
  + make pthread mutex code more portable
  + avoid a race condition when checking for robust mutexes
    (bso#11808)
  + Remove use of strcpy in tdb test.
  + eliminate deprecation warnings in python tests
  + Only set public headers field when installing as a public library.</changelog>
  <changelog author="ddiss@suse.com" date="1485259200">- Update to version 1.3.12; (bsc#1032915).
  + Fix mutexes on FreeBSD
  + Only mmap the mutex area if not already mmap'ed
  + NULL out tdb-&gt;mutexes in tdb_mutex_munmap</changelog>
  <changelog author="scabrero@suse.com" date="1498824000">- Update to version 1.3.13.
  + documentation for the tdbbackup -n option
  + correctly upgrade F_RDLCK to F_WRLCK locks
  + tdbtool: Add "storehex" command
  + fix robust mutex detection in threaded applications
    (bug #12593)
  + improve debugging of transaction lock failures</changelog>
  <changelog author="scabrero@suse.com" date="1499256000">- Update to version 1.3.14.
  + allow tdb_traverse_read before tdb_transaction[_prepare]_commit()
  + Improve documentation for tdb_transaction_start()
  + Add new function tdb_transaction_active()</changelog>
  <changelog author="scabrero@suse.com" date="1506340800">- Update to 1.3.15.
  + Add protection against EINTR.
  + Truncate the file after expand failure, ENOSPC
  + Use posix_fallocate() to expand the file
  + Fix GCC compiler warnings</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Remove %if guards for blocks that do not affect the build result.
  Fix RPM groups and summaries. Ensure neutrality of descriptions.
  Drop very old SUSE support. Replace old RPM macros by new
  constructs. Remove some useless ldconfig calls.</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1537876800">- Update license to LGPL 3.0 or later; (bsc#1109571);</changelog>
</package>
<package pkgid="b16a6912671db8384f8faf41ab603ba3d36585693ef9e0514620b460684ccb9c" name="libtdb1-32bit" arch="x86_64">
  <version epoch="0" ver="1.3.15" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1411473600">- Update to version 1.3.1.
  + tools: fix a compiler warning
  + defragment the freelist in tdb_allocate_from_freelist()
  + add "freelist_size" sub-command to tdbtool
  + use tdb_freelist_merge_adjacent in tdb_freelist_size()
  + add tdb_freelist_merge_adjacent()
  + add utility function check_merge_ptr_with_left_record()
  + simplify tdb_free() using check_merge_with_left_record()
  + add utility function check_merge_with_left_record()
  + improve comments for tdb_free().
  + factor merge_with_left_record() out of tdb_free()
  + fix debug message in tdb_free()
  + reduce indentation in tdb_free() for merging left
  + increase readability of read_record_on_left()
  + factor read_record_on_left() out of tdb_free()
  + build: improve detection of srcdir.</changelog>
  <changelog author="lmuelle@suse.com" date="1414497600">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="lmuelle@suse.com" date="1415275200">- Use the upstream tar ball, as signature verification is now able to handle
  compressed archives.</changelog>
  <changelog author="lmuelle@suse.com" date="1419163200">- Update to version 1.3.3.
  + test: TDB_CLEAR_IF_FIRST | TDB_MUTEX_LOCKING, O_RDONLY is a valid
    combination
- Update to version 1.3.2.
  + allow tdb_open_ex() with O_RDONLY of TDB_FEATURE_FLAG_MUTEX tdbs.
  + Fix a comment
  + Fix tdb_runtime_check_for_robust_mutexes()
  + Improve wording in a comment
  + tdb.h needs bool type; obsoletes include_stdbool_bso10625.patch
  + tdb_wrap: Make mutexes easier to use
  + tdb_wrap: Only pull in samba-debug
  + tdb_wrap: Standalone compile without includes.h
  + tdb_wrap: tdb_wrap.h doesn't need struct loadparm_context</changelog>
  <changelog author="lmuelle@suse.com" date="1421150400">- Update to version 1.3.4.
  + toos: allow transactions with TDB_MUTEX_LOCKING
  + test: add tdb1-run-mutex-transaction1 test
  + allow transactions on on tdb's with TDB_MUTEX_LOCKING</changelog>
  <changelog author="lmuelle@suse.com" date="1435406400">- Update to version 1.3.6.
  + Fix runtime detection for robust mutexes in the standalone build;
    (bso#11326).
  + Possible fix for the build with robust mutexes on solaris 11; (bso#11319).
- Update to version 1.3.5.
  + ABI change: tdb_chainlock_read_nonblock() has been added, a nonblock
    variant of tdb_chainlock_read()
  + Do not build test binaries if it's not a standalone build
  + Fix CID 1034842 Resource leak
  + Fix CID 1034841 Resource leak
  + don't let tdb_wrap_open() segfault with name==NULL</changelog>
  <changelog author="lmuelle@suse.com" date="1437566400">- Update to version 1.3.7.
  + first fix deadlock in the interaction between fcntl and mutex locking;
    (bso#11381)
  + improved python3 bindings</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'tdb.keyring'; (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1445774400">- Add python3-tdb; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Add doxygen at build time to add the development documentation.
- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to version 1.3.8; (bsc#954658).
  + Fix broken build with --disable-python
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056001">- Add conflict between python-tdb and python3-tdb.</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 1.3.11.
  + performance improvements
  + make pthread mutex code more portable
  + avoid a race condition when checking for robust mutexes
    (bso#11808)
  + Remove use of strcpy in tdb test.
  + eliminate deprecation warnings in python tests
  + Only set public headers field when installing as a public library.</changelog>
  <changelog author="ddiss@suse.com" date="1485259200">- Update to version 1.3.12; (bsc#1032915).
  + Fix mutexes on FreeBSD
  + Only mmap the mutex area if not already mmap'ed
  + NULL out tdb-&gt;mutexes in tdb_mutex_munmap</changelog>
  <changelog author="scabrero@suse.com" date="1498824000">- Update to version 1.3.13.
  + documentation for the tdbbackup -n option
  + correctly upgrade F_RDLCK to F_WRLCK locks
  + tdbtool: Add "storehex" command
  + fix robust mutex detection in threaded applications
    (bug #12593)
  + improve debugging of transaction lock failures</changelog>
  <changelog author="scabrero@suse.com" date="1499256000">- Update to version 1.3.14.
  + allow tdb_traverse_read before tdb_transaction[_prepare]_commit()
  + Improve documentation for tdb_transaction_start()
  + Add new function tdb_transaction_active()</changelog>
  <changelog author="scabrero@suse.com" date="1506340800">- Update to 1.3.15.
  + Add protection against EINTR.
  + Truncate the file after expand failure, ENOSPC
  + Use posix_fallocate() to expand the file
  + Fix GCC compiler warnings</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Remove %if guards for blocks that do not affect the build result.
  Fix RPM groups and summaries. Ensure neutrality of descriptions.
  Drop very old SUSE support. Replace old RPM macros by new
  constructs. Remove some useless ldconfig calls.</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1537876800">- Update license to LGPL 3.0 or later; (bsc#1109571);</changelog>
</package>
<package pkgid="e8720af6f9c6d15704f49b9cf05deec9e8207bce8dea8565d05b4cc795ae00d8" name="libtevent-devel" arch="x86_64">
  <version epoch="0" ver="0.9.36" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1435406400">- Update to 0.9.25.
  + Fix compile error in Solaris ports backend.
  + Fix access after free in tevent_common_check_signal(); (bso#11308).
  + Improve pytevent bindings.
  + Testsuite fixes.
  + Improve the documentation of the tevent_add_fd() assumtions. It must be
    talloc_free'ed before closing the fd! (bso##11141); (bso#11316).</changelog>
  <changelog author="dimstar@opensuse.org" date="1440072000">- Create 2nd spec-file tevent-man.spec: build the man pages in a
  separate cycle in order to avoid the follwing build cycle:
  doxygen -&gt; curl -&gt; krb5-mini -&gt; libverto -&gt; tevent -&gt; doxygen.
- Recommend tevent-man for installation.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'tevent.keyring';
  (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1441627201">- Remove superfluous _name define.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627202">- Recommend to install tevent-man from libtevent-devel on post-10.3 systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1445515200">- Require python-talloc-devel instead of pytalloc-devel.</changelog>
  <changelog author="lmuelle@suse.com" date="1445774400">- Add python3-tevent; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 0.9.26; (bsc#954658).
  + New tevent_thread_proxy API
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1455883200">- Update to 0.9.28; (bsc#954658).
  + Fix memory leak when old signal action restored (bso#11742).
- Update to 0.9.27.
  + Fix bug in poll backend - poll_event_loop_poll() exits the for loop on
    POLLNVAL instead of continuing to find an event that is ready.
  + Fix ETIME handling for Solaris event ports (bso#11728).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Require talloc 2.1.6 at build-time; (bsc#954658).</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 0.9.29.
  + performance improvements.</changelog>
  <changelog author="ddiss@suse.com" date="1485259200">- Update to version 0.9.31; (bsc#1032915).
  + Add tevent_req_reset_endtime
  + Make talloc_free safe when threaded_contexts exist
  + Add tevent_update_timer
  + Factor out tevent_common_insert_timer
  + Add threaded immediate activation</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="jengelh@inai.de" date="1486382400">- Drop redundant PreReq for ldconfig; this is autodetected.
  Set RPM group right.</changelog>
  <changelog author="scabrero@suse.com" date="1498824000">- Update to version 0.9.32
  + Fix mutex locking in tevent_threaded_context_destructor().
  + Fix a memleak on FreeBSD.
  + Re-init threading in tevent_re_initialise().
  + Include the finish location in tevent_req_default_print().</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 0.9.33
  + make tevent_req_print() more robust against crashes</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to version 0.9.34; (bsc#1069666);
  + Remove unused select backend
  + Fix a race condition in tevent_threaded_schedule_immediate();
    (bso#13130);</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 0.9.36; (bso#13291);
  + improve documentation of tevent_queue_add_optimize_empty()
  + add tevent_queue_entry_untrigger()
  + Minor cleanup. wakeup_fd can always be gotten from the event context.
  + Use smb_set_close_on_exec() in example code.
- Use tirpc on newer sytems</changelog>
</package>
<package pkgid="004f3f1e37617b3125108ea307b428d86d73f2aa0e57fe628c50e03d1a1ddd13" name="libtevent-devel" arch="x86_64">
  <version epoch="0" ver="0.9.36" rel="lp150.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1440072000">- Create 2nd spec-file tevent-man.spec: build the man pages in a
  separate cycle in order to avoid the follwing build cycle:
  doxygen -&gt; curl -&gt; krb5-mini -&gt; libverto -&gt; tevent -&gt; doxygen.
- Recommend tevent-man for installation.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'tevent.keyring';
  (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1441627201">- Remove superfluous _name define.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627202">- Recommend to install tevent-man from libtevent-devel on post-10.3 systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1445515200">- Require python-talloc-devel instead of pytalloc-devel.</changelog>
  <changelog author="lmuelle@suse.com" date="1445774400">- Add python3-tevent; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 0.9.26; (bsc#954658).
  + New tevent_thread_proxy API
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1455883200">- Update to 0.9.28; (bsc#954658).
  + Fix memory leak when old signal action restored (bso#11742).
- Update to 0.9.27.
  + Fix bug in poll backend - poll_event_loop_poll() exits the for loop on
    POLLNVAL instead of continuing to find an event that is ready.
  + Fix ETIME handling for Solaris event ports (bso#11728).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Require talloc 2.1.6 at build-time; (bsc#954658).</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 0.9.29.
  + performance improvements.</changelog>
  <changelog author="ddiss@suse.com" date="1485259200">- Update to version 0.9.31; (bsc#1032915).
  + Add tevent_req_reset_endtime
  + Make talloc_free safe when threaded_contexts exist
  + Add tevent_update_timer
  + Factor out tevent_common_insert_timer
  + Add threaded immediate activation</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="jengelh@inai.de" date="1486382400">- Drop redundant PreReq for ldconfig; this is autodetected.
  Set RPM group right.</changelog>
  <changelog author="scabrero@suse.com" date="1498824000">- Update to version 0.9.32
  + Fix mutex locking in tevent_threaded_context_destructor().
  + Fix a memleak on FreeBSD.
  + Re-init threading in tevent_re_initialise().
  + Include the finish location in tevent_req_default_print().</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 0.9.33
  + make tevent_req_print() more robust against crashes</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to version 0.9.34; (bsc#1069666);
  + Remove unused select backend
  + Fix a race condition in tevent_threaded_schedule_immediate();
    (bso#13130);</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 0.9.36; (bso#13291);
  + improve documentation of tevent_queue_add_optimize_empty()
  + add tevent_queue_entry_untrigger()
  + Minor cleanup. wakeup_fd can always be gotten from the event context.
  + Use smb_set_close_on_exec() in example code.
- Use tirpc on newer sytems</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1537876800">- Update license to LGPL 3.0 or later; (bsc#1109571);</changelog>
</package>
<package pkgid="e60e6b80981fb8321f8757966ea6e184c030d36bc9b6b2b6281cf5f31010b462" name="libtevent-util-devel" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="e09eff2ce5c8882c87e921fb06e149d1c781680fc9f6d20278a2780c7063f6dc" name="libtevent-util-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="39f86a7451ae98460aa344eb5065d57e27b416452dfa84b4bec76517f5fdcfec" name="libtevent-util-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="d068f9d743d7ba099ccb9aa292b9c25336474d323029b110660194559b5632bb" name="libtevent-util0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="87395db4f998067157286f4f8399e885e4f765fa1a75c0dda9d9df4b8eb14043" name="libtevent-util0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="626f7b03cb8ca48769461f0a0c133074b932657eb5a62f325e349388108f242a" name="libtevent-util0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="d0d52f01c915ef307c788224c8e3b5e238d0884fd006df063a07be2ca52e76bf" name="libtevent-util0" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="d1aa20bf56b3ce4ab37e965b77d32a58d0cd43dc7cf5aeb827eca04efeb5a45f" name="libtevent-util0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="46f91824d3dd252d98d08db4e82bf233736cb5c26817ed6d93beac6032d0c3bf" name="libtevent-util0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="e9f16d25350cb274e0ed1c4358bc064e198e92f8e5a086ea9e1f32be2668f704" name="libtevent0" arch="x86_64">
  <version epoch="0" ver="0.9.36" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1435406400">- Update to 0.9.25.
  + Fix compile error in Solaris ports backend.
  + Fix access after free in tevent_common_check_signal(); (bso#11308).
  + Improve pytevent bindings.
  + Testsuite fixes.
  + Improve the documentation of the tevent_add_fd() assumtions. It must be
    talloc_free'ed before closing the fd! (bso##11141); (bso#11316).</changelog>
  <changelog author="dimstar@opensuse.org" date="1440072000">- Create 2nd spec-file tevent-man.spec: build the man pages in a
  separate cycle in order to avoid the follwing build cycle:
  doxygen -&gt; curl -&gt; krb5-mini -&gt; libverto -&gt; tevent -&gt; doxygen.
- Recommend tevent-man for installation.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'tevent.keyring';
  (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1441627201">- Remove superfluous _name define.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627202">- Recommend to install tevent-man from libtevent-devel on post-10.3 systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1445515200">- Require python-talloc-devel instead of pytalloc-devel.</changelog>
  <changelog author="lmuelle@suse.com" date="1445774400">- Add python3-tevent; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 0.9.26; (bsc#954658).
  + New tevent_thread_proxy API
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1455883200">- Update to 0.9.28; (bsc#954658).
  + Fix memory leak when old signal action restored (bso#11742).
- Update to 0.9.27.
  + Fix bug in poll backend - poll_event_loop_poll() exits the for loop on
    POLLNVAL instead of continuing to find an event that is ready.
  + Fix ETIME handling for Solaris event ports (bso#11728).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Require talloc 2.1.6 at build-time; (bsc#954658).</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 0.9.29.
  + performance improvements.</changelog>
  <changelog author="ddiss@suse.com" date="1485259200">- Update to version 0.9.31; (bsc#1032915).
  + Add tevent_req_reset_endtime
  + Make talloc_free safe when threaded_contexts exist
  + Add tevent_update_timer
  + Factor out tevent_common_insert_timer
  + Add threaded immediate activation</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="jengelh@inai.de" date="1486382400">- Drop redundant PreReq for ldconfig; this is autodetected.
  Set RPM group right.</changelog>
  <changelog author="scabrero@suse.com" date="1498824000">- Update to version 0.9.32
  + Fix mutex locking in tevent_threaded_context_destructor().
  + Fix a memleak on FreeBSD.
  + Re-init threading in tevent_re_initialise().
  + Include the finish location in tevent_req_default_print().</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 0.9.33
  + make tevent_req_print() more robust against crashes</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to version 0.9.34; (bsc#1069666);
  + Remove unused select backend
  + Fix a race condition in tevent_threaded_schedule_immediate();
    (bso#13130);</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 0.9.36; (bso#13291);
  + improve documentation of tevent_queue_add_optimize_empty()
  + add tevent_queue_entry_untrigger()
  + Minor cleanup. wakeup_fd can always be gotten from the event context.
  + Use smb_set_close_on_exec() in example code.
- Use tirpc on newer sytems</changelog>
</package>
<package pkgid="72e38d70b5f6c3e4ac817d512d85f1e26a945546fbd14c44957f60f994329f20" name="libtevent0" arch="x86_64">
  <version epoch="0" ver="0.9.36" rel="lp150.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1440072000">- Create 2nd spec-file tevent-man.spec: build the man pages in a
  separate cycle in order to avoid the follwing build cycle:
  doxygen -&gt; curl -&gt; krb5-mini -&gt; libverto -&gt; tevent -&gt; doxygen.
- Recommend tevent-man for installation.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'tevent.keyring';
  (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1441627201">- Remove superfluous _name define.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627202">- Recommend to install tevent-man from libtevent-devel on post-10.3 systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1445515200">- Require python-talloc-devel instead of pytalloc-devel.</changelog>
  <changelog author="lmuelle@suse.com" date="1445774400">- Add python3-tevent; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 0.9.26; (bsc#954658).
  + New tevent_thread_proxy API
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1455883200">- Update to 0.9.28; (bsc#954658).
  + Fix memory leak when old signal action restored (bso#11742).
- Update to 0.9.27.
  + Fix bug in poll backend - poll_event_loop_poll() exits the for loop on
    POLLNVAL instead of continuing to find an event that is ready.
  + Fix ETIME handling for Solaris event ports (bso#11728).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Require talloc 2.1.6 at build-time; (bsc#954658).</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 0.9.29.
  + performance improvements.</changelog>
  <changelog author="ddiss@suse.com" date="1485259200">- Update to version 0.9.31; (bsc#1032915).
  + Add tevent_req_reset_endtime
  + Make talloc_free safe when threaded_contexts exist
  + Add tevent_update_timer
  + Factor out tevent_common_insert_timer
  + Add threaded immediate activation</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="jengelh@inai.de" date="1486382400">- Drop redundant PreReq for ldconfig; this is autodetected.
  Set RPM group right.</changelog>
  <changelog author="scabrero@suse.com" date="1498824000">- Update to version 0.9.32
  + Fix mutex locking in tevent_threaded_context_destructor().
  + Fix a memleak on FreeBSD.
  + Re-init threading in tevent_re_initialise().
  + Include the finish location in tevent_req_default_print().</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 0.9.33
  + make tevent_req_print() more robust against crashes</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to version 0.9.34; (bsc#1069666);
  + Remove unused select backend
  + Fix a race condition in tevent_threaded_schedule_immediate();
    (bso#13130);</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 0.9.36; (bso#13291);
  + improve documentation of tevent_queue_add_optimize_empty()
  + add tevent_queue_entry_untrigger()
  + Minor cleanup. wakeup_fd can always be gotten from the event context.
  + Use smb_set_close_on_exec() in example code.
- Use tirpc on newer sytems</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1537876800">- Update license to LGPL 3.0 or later; (bsc#1109571);</changelog>
</package>
<package pkgid="fbc4265663fd60ede604fd658b04319126aff5020b96b9e4fbffa495a008c293" name="libtevent0-32bit" arch="x86_64">
  <version epoch="0" ver="0.9.36" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1435406400">- Update to 0.9.25.
  + Fix compile error in Solaris ports backend.
  + Fix access after free in tevent_common_check_signal(); (bso#11308).
  + Improve pytevent bindings.
  + Testsuite fixes.
  + Improve the documentation of the tevent_add_fd() assumtions. It must be
    talloc_free'ed before closing the fd! (bso##11141); (bso#11316).</changelog>
  <changelog author="dimstar@opensuse.org" date="1440072000">- Create 2nd spec-file tevent-man.spec: build the man pages in a
  separate cycle in order to avoid the follwing build cycle:
  doxygen -&gt; curl -&gt; krb5-mini -&gt; libverto -&gt; tevent -&gt; doxygen.
- Recommend tevent-man for installation.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'tevent.keyring';
  (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1441627201">- Remove superfluous _name define.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627202">- Recommend to install tevent-man from libtevent-devel on post-10.3 systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1445515200">- Require python-talloc-devel instead of pytalloc-devel.</changelog>
  <changelog author="lmuelle@suse.com" date="1445774400">- Add python3-tevent; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 0.9.26; (bsc#954658).
  + New tevent_thread_proxy API
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1455883200">- Update to 0.9.28; (bsc#954658).
  + Fix memory leak when old signal action restored (bso#11742).
- Update to 0.9.27.
  + Fix bug in poll backend - poll_event_loop_poll() exits the for loop on
    POLLNVAL instead of continuing to find an event that is ready.
  + Fix ETIME handling for Solaris event ports (bso#11728).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Require talloc 2.1.6 at build-time; (bsc#954658).</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 0.9.29.
  + performance improvements.</changelog>
  <changelog author="ddiss@suse.com" date="1485259200">- Update to version 0.9.31; (bsc#1032915).
  + Add tevent_req_reset_endtime
  + Make talloc_free safe when threaded_contexts exist
  + Add tevent_update_timer
  + Factor out tevent_common_insert_timer
  + Add threaded immediate activation</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="jengelh@inai.de" date="1486382400">- Drop redundant PreReq for ldconfig; this is autodetected.
  Set RPM group right.</changelog>
  <changelog author="scabrero@suse.com" date="1498824000">- Update to version 0.9.32
  + Fix mutex locking in tevent_threaded_context_destructor().
  + Fix a memleak on FreeBSD.
  + Re-init threading in tevent_re_initialise().
  + Include the finish location in tevent_req_default_print().</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 0.9.33
  + make tevent_req_print() more robust against crashes</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to version 0.9.34; (bsc#1069666);
  + Remove unused select backend
  + Fix a race condition in tevent_threaded_schedule_immediate();
    (bso#13130);</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 0.9.36; (bso#13291);
  + improve documentation of tevent_queue_add_optimize_empty()
  + add tevent_queue_entry_untrigger()
  + Minor cleanup. wakeup_fd can always be gotten from the event context.
  + Use smb_set_close_on_exec() in example code.
- Use tirpc on newer sytems</changelog>
</package>
<package pkgid="f2a5a1d564c71f3a6c3d7dfe9ef3c0cdd84a2f470bfc1277cbd04512f5491e4a" name="libtevent0-32bit" arch="x86_64">
  <version epoch="0" ver="0.9.36" rel="lp150.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1440072000">- Create 2nd spec-file tevent-man.spec: build the man pages in a
  separate cycle in order to avoid the follwing build cycle:
  doxygen -&gt; curl -&gt; krb5-mini -&gt; libverto -&gt; tevent -&gt; doxygen.
- Recommend tevent-man for installation.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'tevent.keyring';
  (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1441627201">- Remove superfluous _name define.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627202">- Recommend to install tevent-man from libtevent-devel on post-10.3 systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1445515200">- Require python-talloc-devel instead of pytalloc-devel.</changelog>
  <changelog author="lmuelle@suse.com" date="1445774400">- Add python3-tevent; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 0.9.26; (bsc#954658).
  + New tevent_thread_proxy API
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1455883200">- Update to 0.9.28; (bsc#954658).
  + Fix memory leak when old signal action restored (bso#11742).
- Update to 0.9.27.
  + Fix bug in poll backend - poll_event_loop_poll() exits the for loop on
    POLLNVAL instead of continuing to find an event that is ready.
  + Fix ETIME handling for Solaris event ports (bso#11728).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Require talloc 2.1.6 at build-time; (bsc#954658).</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 0.9.29.
  + performance improvements.</changelog>
  <changelog author="ddiss@suse.com" date="1485259200">- Update to version 0.9.31; (bsc#1032915).
  + Add tevent_req_reset_endtime
  + Make talloc_free safe when threaded_contexts exist
  + Add tevent_update_timer
  + Factor out tevent_common_insert_timer
  + Add threaded immediate activation</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="jengelh@inai.de" date="1486382400">- Drop redundant PreReq for ldconfig; this is autodetected.
  Set RPM group right.</changelog>
  <changelog author="scabrero@suse.com" date="1498824000">- Update to version 0.9.32
  + Fix mutex locking in tevent_threaded_context_destructor().
  + Fix a memleak on FreeBSD.
  + Re-init threading in tevent_re_initialise().
  + Include the finish location in tevent_req_default_print().</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 0.9.33
  + make tevent_req_print() more robust against crashes</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to version 0.9.34; (bsc#1069666);
  + Remove unused select backend
  + Fix a race condition in tevent_threaded_schedule_immediate();
    (bso#13130);</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 0.9.36; (bso#13291);
  + improve documentation of tevent_queue_add_optimize_empty()
  + add tevent_queue_entry_untrigger()
  + Minor cleanup. wakeup_fd can always be gotten from the event context.
  + Use smb_set_close_on_exec() in example code.
- Use tirpc on newer sytems</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1537876800">- Update license to LGPL 3.0 or later; (bsc#1109571);</changelog>
</package>
<package pkgid="4649a6cc5387bddd303c3833dacf967a018237fedafdb2e9ad310475376cfff1" name="libtexlua52-5" arch="x86_64">
  <version epoch="0" ver="5.2.4" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="446865e2ac41602f49bb35d600dd7aa59ffdef8d55f54c42920c17a1dea20471" name="libtexlua52-5" arch="x86_64">
  <version epoch="0" ver="5.2.4" rel="lp150.9.6.1"/>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537963200">- Add patch source-bsc1109673.dif to fix bsc#1109673 for CVE-2018-17407
  which is about buffer overflow in the handling of Type 1 fonts
  allowing arbitrary code execution</changelog>
</package>
<package pkgid="43a8a43a39eca95a8df84f59622a08491fe83815a8bd90e569cdc7e3c652d793" name="libtexluajit2" arch="x86_64">
  <version epoch="0" ver="2.1.0beta2" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="fada13488b987bbe6149bdd4d600a070f6879d4c7a23a190af7a14fc4e155b3a" name="libtexluajit2" arch="x86_64">
  <version epoch="0" ver="2.1.0beta2" rel="lp150.9.6.1"/>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537963200">- Add patch source-bsc1109673.dif to fix bsc#1109673 for CVE-2018-17407
  which is about buffer overflow in the handling of Type 1 fonts
  allowing arbitrary code execution</changelog>
</package>
<package pkgid="6aafde7653d90ba310acb99e5d2f85b2611689cc6ed82c68880a18ff5a495634" name="libtiff-devel-32bit" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="lp150.4.3.1"/>
  <changelog author="fstrba@suse.com" date="1459944000">- Added patch:
  * tiff-4.0.6-CVE-2016-3186.patch
  - fix CVE-2016-3186: buffer overflow in gif2tiff [bsc#973340]</changelog>
  <changelog author="fstrba@suse.com" date="1468324800">- Added patches:
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  - Upstream commits to fix CVE-2016-5314 [bsc#984831],
    CVE-2016-5316 [bsc#984837], CVE-2016-5317 [bsc#984842],
    CVE-2016-5320 [bsc#984808] and CVE-2016-5875 [bsc#987351]</changelog>
  <changelog author="fstrba@suse.com" date="1472731200">- Added patches:
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  - Upstream commits to fix CVE-2016-3623 [bsc#974618],
    CVE-2016-3945 [bsc#974614], CVE-2016-3990 [bsc#975069],
    CVE-2016-3991 [bsc#975070]</changelog>
  <changelog author="fstrba@suse.com" date="1475755200">- Added patches:
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Upstream fixes for MSVR 35093, MSVR 35094, MSVR 35095,
    MSVR 35096, MSVR 35097, MSVR 35098.
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  - Enforce bits-per-sample requirements of floating point
    predictor. Fixes CVE-2016-3622 [bsc#974449]</changelog>
  <changelog author="fstrba@suse.com" date="1480420800">- Upgrade to upstream release 4.0.7
  * libtiff/tif_aux.c
    + Fix crash in TIFFVGetFieldDefaulted() when requesting
    Predictor tag and that the zip/lzw codec is not configured.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2591
  * libtiff/tif_compress.c
    + Make TIFFNoDecode() return 0 to indicate an error and make
    upper level read routines treat it accordingly. (linked to the
    test case of http://bugzilla.maptools.org/show_bug.cgi?id=2517)
  * libtiff/tif_dir.c
    + Discard values of SMinSampleValue and SMaxSampleValue when
    they have been read and the value of SamplesPerPixel is
    changed afterwards (like when reading a OJPEG compressed image
    with a missing SamplesPerPixel tag, and whose photometric is
    RGB or YCbCr, forcing SamplesPerPixel being 3). Otherwise when
    rewriting the directory (for example with tiffset, we will
    expect 3 values whereas the array had been allocated with just
    one), thus causing a out of bound read access. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658, bsc#974840)
  * libtiff/tif_dirread.c
    + In TIFFFetchNormalTag(), do not dereference NULL pointer when
    values of tags with TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII
    access are 0-byte arrays. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2593 (regression
    introduced by previous fix done on 2016-11-11 for
    CVE-2016-9297, bsc#1010161). Assigned as CVE-2016-9448,
    bsc#1011103
    + In TIFFFetchNormalTag(), make sure that values of tags with
    TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII access are null
    terminated, to avoid potential read outside buffer in
    _TIFFPrintField(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2590
    (CVE-2016-9297, bsc#1010161)
    + Initialize doubledata at line 3693 to NULL to please MSVC 2013
    + Prevent reading ColorMap or TransferFunction if
    BitsPerPixel &gt; 24, so as to avoid huge memory allocation and
    file read attempts
    + Reject images with OJPEG compression that have no
    TileOffsets/StripOffsets tag, when OJPEG compression is
    disabled. Prevent null pointer dereference in
    TIFFReadRawStrip1() and other functions that expect
    td_stripbytecount to be non NULL. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2585
    + When compiled with DEFER_STRILE_LOAD, fix regression, when
    reading a one-strip file without a StripByteCounts tag.
    + Workaround false positive warning of Clang Static Analyzer
    about null pointer dereference in TIFFCheckDirOffset().
  * libtiff/tif_dirwrite.c
    + Avoid null pointer dereference on td_stripoffset when writing
    directory, if FIELD_STRIPOFFSETS was artificially set for a
    hack case in OJPEG case. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658,
    bsc#974840)
    + Fix truncation to 32 bit of file offsets in TIFFLinkDirectory()
    and TIFFWriteDirectorySec() when aligning directory offsets on
    an even offset (affects BigTIFF).
  * libtiff/tif_dumpmode.c
    + DumpModeEncode() should return 0 in case of failure so that
    the above mentionned functions detect the error.
  * libtiff/tif_fax3.c
    + remove dead assignment in Fax3PutEOLgdal().
  * libtiff/tif_fax3.h
    + make Param member of TIFFFaxTabEnt structure a uint16 to
    reduce size of the binary.
  * libtiff/tif_getimage.c
    + Fix out-of-bound reads in TIFFRGBAImage interface in case of
    unsupported values of SamplesPerPixel/ExtraSamples for
    LogLUV/CIELab. Add explicit call to TIFFRGBAImageOK() in
    TIFFRGBAImageBegin(). Fix CVE-2015-8665 and CVE-2015-8683.
    + Fix some benign warnings which appear in 64-bit compilation
    under Microsoft Visual Studio of the form "Arithmetic
    overflow: 32-bit value is shifted, then cast to 64-bit value.
    Results might not be an expected value."
    + TIFFRGBAImageOK: Reject attempts to read floating point images.
  * libtiff/tif_luv.c
    + Fix potential out-of-bound writes in decode functions in non
    debug builds by replacing assert()s by regular if checks
    (http://bugzilla.maptools.org/show_bug.cgi?id=2522). Fix
    potential out-of-bound reads in case of short input data.
    + Validate that for COMPRESSION_SGILOG and PHOTOMETRIC_LOGL,
    there is only one sample per pixel. Avoid potential invalid
    memory write on corrupted/unexpected images when using the
    TIFFRGBAImageBegin() interface
  * libtiff/tif_next.c
    + Fix potential out-of-bound write in NeXTDecode()
    (http://bugzilla.maptools.org/show_bug.cgi?id=2508)
  * libtiff/tif_pixarlog.c
    + Avoid zlib error messages to pass a NULL string to %s
    formatter, which is undefined behaviour in sprintf().
    + Fix out-of-bounds write vulnerabilities in heap allocated
    buffers. Reported as MSVR 35094.
    + Fix potential buffer write overrun in PixarLogDecode() on
    corrupted/unexpected images (CVE-2016-5875, bsc#987351)
    + Fix write buffer overflow in PixarLogEncode if more input
    samples are provided than expected by PixarLogSetupEncode.
    Idea based on libtiff-CVE-2016-3990.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, but with different and simpler
    check. (http://bugzilla.maptools.org/show_bug.cgi?id=2544,
    bsc#975069)
  * libtiff/tif_predict.c
    + PredictorSetup: Enforce bits-per-sample requirements of
    floating point predictor (3). Fixes CVE-2016-3622 "Divide By
    Zero in the tiff2rgba tool." (bsc#974449)
  * libtiff/tif_predict.h, libtiff/tif_predict.c
    + Replace assertions by runtime checks to avoid assertions in
    debug mode, or buffer overflows in release mode. Can happen
    when dealing with unusual tile size like YCbCr with
    subsampling. Reported as MSVR 35105.
  * libtiff/tif_read.c
    + Fix out-of-bounds read on memory-mapped files in
    TIFFReadRawStrip1() and TIFFReadRawTile1() when stripoffset
    is beyond tmsize_t max value
    + Make TIFFReadEncodedStrip() and TIFFReadEncodedTile() directly
    use user provided buffer when no compression (and other
    conditions) to save a memcpy().
  * libtiff/tif_strip.c
    + Make TIFFNumberOfStrips() return the td-&gt;td_nstrips value when
    it is non-zero, instead of recomputing it. This is needed in
    TIFF_STRIPCHOP mode where td_nstrips is modified. Fixes a read
    outsize of array in tiffsplit (or other utilities using
    TIFFNumberOfStrips()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2587
    (CVE-2016-9273, bsc#1010163)
  * libtiff/tif_write.c
    + Fix issue in error code path of TIFFFlushData1() that didn't
    reset the tif_rawcc and tif_rawcp members. I'm not completely
    sure if that could happen in practice outside of the odd
    behaviour of t2p_seekproc() of tiff2pdf). The report points
    that a better fix could be to check the return value of
    TIFFFlushData1() in places where it isn't done currently, but
    it seems this patch is enough. Reported as MSVR 35095.
    + Make TIFFWriteEncodedStrip() and TIFFWriteEncodedTile()
    directly use user provided buffer when no compression to save
    a memcpy().
    + TIFFWriteEncodedStrip() and TIFFWriteEncodedTile() should
    return -1 in case of failure of tif_encodestrip() as documented
  * tools/fax2tiff.D    c
    + Fix segfault when specifying -r without argument. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2572
  * tools/Makefile.am
    + The libtiff tools bmp2tiff, gif2tiff, ras2tiff, sgi2tiff,
    sgisv, and ycbcr are completely removed from the distribution.
    The libtiff tools rgb2ycbcr and thumbnail are only built in
    the build tree for testing. Old files are put in new 'archive'
    subdirectory of the source repository, but not in
    distribution archives. These changes are made in order to
    lessen the maintenance burden.
  * tools/rgb2ycbcr.c
    + Validate values of -v and -h parameters to avoid potential
    divide by zero. Fixes CVE-2016-3623, bsc#974618
    (http://bugzilla.maptools.org/show_bug.cgi?id=2569)
  * tools/tiff2bw.c
    + Fix weight computation that could result of color value
    overflow (no security implication). Fix
    http://bugzilla.maptools.org/show_bug.cgi?id=2550.
  * tools/tiff2pdf.c
    + Avoid undefined behaviour related to overlapping of source and
    destination buffer in memcpy() call in
    t2p_sample_rgbaa_to_rgb() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2577
    + Fix out-of-bounds write vulnerabilities in heap allocate buffer
    in t2p_process_jpeg_strip(). Reported as MSVR 35098.
    + Fix potential integer overflows on 32 bit builds in
    t2p_read_tiff_size() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2576
    + Fix read -largely- outsize of buffer in
    t2p_readwrite_pdf_image_tile(), causing crash, when reading a
    JPEG compressed image with TIFFTAG_JPEGTABLES length being one.
    Reported as MSVR 35101. CVE-2016-9453, bsc#1011107
    + Fix write buffer overflow of 2 bytes on JPEG compressed images.
    Reported as TALOS-CAN-0187, CVE-2016-5652, bsc#1007280. Also
    prevents writing 2 extra uninitialized bytes to the file
    stream.
  * tools/tiff2rgba.c
    + Fix integer overflow in size of allocated buffer, when -b mode
    is enabled, that could result in out-of-bounds write. Based
    initially on patch tiff-CVE-2016-3945.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, with correction for invalid
    tests that rejected valid files.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2545, bsc#974614)
  * tools/tiffcp.c
    + Fix out-of-bounds write on tiled images with odd tile width vs
    image width. Reported as MSVR 35103. (bsc#1011841,
    CVE-2016-9538)
    + Fix read of undefined variable in case of missing required
    tags. Found on test case of MSVR 35100.
  * tools/tiffcrop.c
    + Avoid access outside of stack allocated array on a tiled
    separate TIFF with more than 8 samples per pixel.
    (CVE-2016-5321, CVE-2016-5323,
    http://bugzilla.maptools.org/show_bug.cgi?id=2558,
    http://bugzilla.maptools.org/show_bug.cgi?id=2559, bsc#984813,
    bsc#984815)
    + Fix memory leak in (recent) error code path. Fixes Coverity
    1394415.
    + Fix multiple uint32 overflows in writeBufferToSeparateStrips(),
    writeBufferToContigTiles() and writeBufferToSeparateTiles()
    that could cause heap buffer overflows. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2592
    + Fix out-of-bound read of up to 3 bytes in
    readContigTilesIntoBuffer(). Reported as MSVR 35092.
    + Fix out-of-bounds write in loadImage(). From patch
    libtiff-CVE-2016-3991.patch from
    libtiff-4.0.3-25.el7_2.src.rpm
    (http://bugzilla.maptools.org/show_bug.cgi?id=2543, bsc#975070)
    + Fix read of undefined buffer in readContigStripsIntoBuffer()
    due to uint16 overflow. Reported as MSVR 35100. (bsc#1011841,
    CVE-2016-9538)
    + Fix various out-of-bounds write vulnerabilities in heap or
    stack allocated buffers. Reported as MSVR 35093, MSVR 35096
    and MSVR 35097.
    + readContigTilesIntoBuffer: Fix signed/unsigned comparison
    warning.
  * tools/tiffdump.c
    + Fix a few misaligned 64-bit reads warned by -fsanitize
    + ReadDirectory: Remove uint32 cast to_TIFFmalloc() argument
    which resulted in Coverity report. Added more mutiplication
    overflow checks
  * tools/tiffinfo.c
    + Fix out-of-bound read on some tiled images.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2517)
    + TIFFReadContigTileData: Fix signed/unsigned comparison warning.
    + TIFFReadSeparateTileData: Fix signed/unsigned comparison
    warning.
- Removed patches:
  * tiff-4.0.4-uninitialized_mem_NeXTDecode.patch
  * tiff-4.0.6-CVE-2015-8782.patch
  * tiff-4.0.6-CVE-2016-3186.patch
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Fixed in the upsteam release
- Changed patch:
  * tiff-4.0.6-CVE-2015-7554.patch -&gt; tiff-4.0.7-CVE-2015-7554.patch
  - Rediffed to the changed context</changelog>
  <changelog author="idonmez@suse.com" date="1482148800">- Update homepage</changelog>
  <changelog author="jengelh@inai.de" date="1482148801">- Drop --with-pic, this is only for static libs (which are not built)
- Update descriptions</changelog>
  <changelog author="fstrba@suse.com" date="1484308800">- Added patch:
  * tiff-4.0.7-CVE-2017-5225.patch
  - Upstream fix for CVE-2017-5225, bsc#1019611: heap buffer
    overflow in tools/tiffcp via a crafted BitsPerSample value</changelog>
  <changelog author="fstrba@suse.com" date="1486036800">- Added patch:
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  - Fix a regression introduced in 4.0.7 (bsc#1022103)
  - http://bugzilla.maptools.org/show_bug.cgi?id=2636</changelog>
  <changelog author="fstrba@suse.com" date="1490788800">- Added patches:
  * tiff-CVE-2016-10266.patch
    + Upstream fix for CVE-2016-10266, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031263)
  * tiff-CVE-2016-10267.patch
    + Upstream fix for CVE-2016-10267, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031262)
  * tiff-CVE-2016-10268.patch
    + Upstream fix for CVE-2016-10268, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031255)
  * tiff-CVE-2016-10269.patch
    + Upstream fix for CVE-2016-10269, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031254)
  * tiff-CVE-2016-10270.patch
    + Upstream fix for CVE-2016-10270, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031250)
  * tiff-CVE-2016-10271.patch
    + Upstream fix for CVE-2016-10271, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read and buffer overflow) or possibly have unspecified
    other impact via a crafted TIFF image (bsc#1031249)
  * tiff-CVE-2016-10272.patch
    + Upstream fix for CVE-2016-10272, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    overflow) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031247)</changelog>
  <changelog author="fstrba@suse.com" date="1497960000">- Upgrade to upstream release 4.0.8
  * libtiff/tif_getimage.c, libtiff/tif_open.c
    + add parenthesis to fix cppcheck clarifyCalculation warnings
  * libtiff/tif_predict.c, libtiff/tif_print.c
    + fix printf unsigned vs signed formatting (cppcheck
    invalidPrintfArgType_uint warnings)
  * libtiff/tif_read.c, libtiff/tiffiop.h
    + fix uint32 overflow in TIFFReadEncodedStrip() that caused an
    integer division by zero. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2596
  * libtiff/tif_pixarlog.c, libtiff/tif_luv.c
    + fix heap-based buffer overflow on generation of PixarLog / LUV
    compressed files, with ColorMap, TransferFunction attached and
    nasty plays with bitspersample. The fix for LUV has not been
    tested, but suffers from the same kind of issue of PixarLog.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2604
  * libtiff/tif_strip.c
    + revert the change in TIFFNumberOfStrips() done for
    http://bugzilla.maptools.org/show_bug.cgi?id=2587 /
    CVE-2016-9273 since the above change is a better fix that
    makes it unnecessary.
  * libtiff/tif_dirread.c
    + modify ChopUpSingleUncompressedStrip() to instanciate compute
    ntrips as TIFFhowmany_32(td-&gt;td_imagelength, rowsperstrip),
    instead of a logic based on the total size of data. Which is
    faulty is the total size of data is not sufficient to fill the
    whole image, and thus results in reading outside of the
    StripByCounts/StripOffsets arrays when using
    TIFFReadScanline(). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2608.
  * libtiff/tif_ojpeg.c
    + make OJPEGDecode() early exit in case of failure in
    OJPEGPreDecode(). This will avoid a divide by zero, and
    potential other issues. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2611
  * libtiff/tif_write.c
    + fix misleading indentation as warned by GCC.
  * libtiff/tif_fax3.h
    + revert change done on 2016-01-09 that made Param member of
    TIFFFaxTabEnt structure a uint16 to reduce size of the
    binary. It happens that the Hylafax software uses the tables
    that follow this typedef (TIFFFaxMainTable, TIFFFaxWhiteTable,
    TIFFFaxBlackTable), although they are not in a public libtiff
    header. Raised by Lee Howard.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2636
  * libtiff/tiffio.h, libtiff/tif_getimage.c
    + add TIFFReadRGBAStripExt() and TIFFReadRGBATileExt() variants
    of the functions without ext, with an extra argument to control
    the stop_on_error behaviour.
  * libtiff/tif_getimage.c
    + fix potential memory leaks in error code path of
    TIFFRGBAImageBegin().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2627
  * libtiff/tif_jpeg.c
    + increase libjpeg max memory usable to 10 MB instead of libjpeg
    1MB default. This helps when creating files with "big" tile,
    without using libjpeg temporary files.
    Related to https://trac.osgeo.org/gdal/ticket/6757
  * libtiff/tif_jpeg.c
    + avoid integer division by zero in JPEGSetupEncode() when
    horizontal or vertical sampling is set to 0.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2653,
    bsc#1033127, CVE-2017-7595
  * libtiff/tif_dirwrite.c
    + in TIFFWriteDirectoryTagCheckedRational, replace assertion by
    runtime check to error out if passed value is strictly
    negative.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2535,
    bsc#1038438, CVE-2016-10371
  * libtiff/tif_dirread.c
    + avoid division by floating point 0 in
    TIFFReadDirEntryCheckedRational() and
    TIFFReadDirEntryCheckedSrational(), and return 0 in that case
    (instead of infinity as before presumably) Apparently some
    sanitizers do not like those divisions by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2644,
    bsc#1033118, CVE-2017-7598
  * libtiff/tif_dir.c, tif_dirread.c, tif_dirwrite.c
    + implement various clampings of double to other data types to
    avoid undefined behaviour if the output range isn't big enough
    to hold the input value.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2643
    http://bugzilla.maptools.org/show_bug.cgi?id=2642
    http://bugzilla.maptools.org/show_bug.cgi?id=2646
    http://bugzilla.maptools.org/show_bug.cgi?id=2647,
    bsc#1033126, CVE-2017-7596, bsc#1033120, CVE-2017-7597,
    bsc#1033113, CVE-2017-7599, bsc#1033112, CVE-2017-7600,
  * libtiff/tif_jpeg.c
    + validate BitsPerSample in JPEGSetupEncode() to avoid undefined
    behaviour caused by invalid shift exponent.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2648,
    bsc#1033111, CVE-2017-7601
  * libtiff/tif_read.c
    + avoid potential undefined behaviour on signed integer addition
    in TIFFReadRawStrip1() in isMapped() case.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2650,
    bsc#1033109, CVE-2017-7602
  * libtiff/tif_getimage.c
    + add explicit uint32 cast in putagreytile to avoid
    UndefinedBehaviorSanitizer warning. Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2658,
    bsc#1033131, CVE-2017-7592
  * libtiff/tif_read.c
    + TIFFReadBufferSetup(): use _TIFFcalloc() to zero initialize
    tif_rawdata.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2651,
    bsc#1033129, CVE-2017-7593
  * libtiff/tiffio.h, tif_unix.c, tif_win32.c, tif_vms.c
    + add _TIFFcalloc()
  * libtiff/tif_luv.c, tif_lzw.c, tif_packbits.c
    + return 0 in Encode functions instead of -1 when
    TIFFFlushData1() fails.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2130
  * libtiff/tif_ojpeg.c
    + fix leak in OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable when read fails. Patch by
    Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2659,
    bsc#1033128, CVE-2017-7594
  * libtiff/tif_jpeg.c
    + only run JPEGFixupTagsSubsampling() if the YCbCrSubsampling
    tag is not explicitly present. This helps a bit to reduce the
    I/O amount when the tag is present (especially on cloud hosted
    files).
  * libtiff/tif_lzw.c
    + in LZWPostEncode(), increase, if necessary, the code bit-width
    after flushing the remaining code and before emitting the EOI
    code. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=1982
  * libtiff/tif_pixarlog.c
    + fix memory leak in error code path of PixarLogSetupDecode().
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2665
  * libtiff/tif_fax3.c, tif_predict.c, tif_getimage.c
    + fix GCC 7 -Wimplicit-fallthrough warnings.
  * libtiff/tif_dirread.c
    + fix memory leak in non DEFER_STRILE_LOAD mode (ie default)
    when there is both a StripOffsets and TileOffsets tag, or a
    StripByteCounts and TileByteCounts
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2689,
    bsc#1042805, CVE-2017-9403)
  * libtiff/tif_ojpeg.c
    + fix potential memory leak in
    OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2670
  * libtiff/tif_fax3.c
    + avoid crash in Fax3Close() on empty file. Patch by Alan
    Coopersmith + complement by myself.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2673
  * libtiff/tif_read.c
    + TIFFFillStrip(): add limitation to the number of bytes read
    in case td_stripbytecount[strip] is bigger than reasonable,
    so as to avoid excessive memory allocation.
  * libtiff/tif_zip.c, tif_pixarlog.c, tif_predict.c
    + fix memory leak when the underlying codec (ZIP, PixarLog)
    succeeds its setupdecode() method, but PredictorSetup fails.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStrip() and TIFFFillTile(): avoid excessive memory
    allocation in case of shorten files. Only effective on 64 bit
    builds and non-mapped cases.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStripPartial() / TIFFSeek(), avoid potential integer
    overflows with read_ahead in CHUNKY_STRIP_READ_SUPPORT mode.
    Should especially occur on 32 bit platforms.
  * libtiff/tif_read.c
    + TIFFFillStripPartial()
    + avoid excessive memory allocation in case of shorten files.
    Only effective on 64 bit builds.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + update tif_rawcc in CHUNKY_STRIP_READ_SUPPORT mode with
    tif_rawdataloaded when calling TIFFStartStrip() or
    TIFFFillStripPartial(). This avoids reading beyond tif_rawdata
    when bytecount &gt; tif_rawdatasize. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1545.
    Credit to OSS-Fuzz
  * libtiff/tif_color.c
    + avoid potential int32 overflow in TIFFYCbCrToRGBInit() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1533
    Credit to OSS-Fuzz
  * libtiff/tif_pixarlog.c, tif_luv.c
    + avoid potential int32 overflows in multiply_ms() and add_ms().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1558
    Credit to OSS-Fuzz
  * libtiff/tif_packbits.c
    + fix out-of-buffer read in PackBitsDecode() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1563
    Credit to OSS-Fuzz
  * libtiff/tif_luv.c
    + LogL16InitState(): avoid excessive memory allocation when
    RowsPerStrip tag is missing.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_lzw.c
    + update dec_bitsleft at beginning of LZWDecode(), and update
    tif_rawcc at end of LZWDecode(). This is needed to properly
    work with the latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode.
  * libtiff/tif_pixarlog.c
    + PixarLogDecode(): resync tif_rawcp with next_in and tif_rawcc
    with avail_in at beginning and end of function, similarly to
    what is done in LZWDecode(). Likely needed so that it works
    properly with latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode. But untested...
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): add basic validation of luma and
    refBlackWhite coefficients (just check they are not NaN for
    now), to avoid potential float to int overflows. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1663
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): stricter validation for refBlackWhite
    coefficients values. To avoid invalid float-&gt;int32 conversion.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1718
    Credit to OSS Fuzz
  * tools/fax2tiff.c (main)
    + Applied patch by Joerg Ahrens to fix passing client data for
    Win32 builds using tif_win32.c (USE_WIN32_FILEIO defined) for
    file I/O. Patch was provided via email on November 20, 2016.
  * tools/tiffcp.c
    + avoid uint32 underflow in cpDecodedStrips that can cause
    various issues, such as buffer overflows in the library.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2598
  * tools/tiffcrop.c
    + fix readContigStripsIntoBuffer() in -i (ignore) mode so that
    the output buffer is correctly incremented to avoid write
    outside bounds. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2620
  * tools/tiffcrop.c
    + add 3 extra bytes at end of strip buffer in
    readSeparateStripsIntoBuffer() to avoid read outside of heap
    allocated buffer. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2621
  * tools/tiffcrop.c
    + fix integer division by zero when BitsPerSample is missing.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2619
  * tools/tiffinfo.c
    + fix null pointer dereference in -r mode when the image has no
    StripByteCount tag. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2594
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2597
  * tools/tif_dir.c
    + when TIFFGetField(, TIFFTAG_NUMBEROFINKS, ) is called, limit
    the return number of inks to SamplesPerPixel, so that code
    that parses ink names doesn't go past the end of the buffer.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2599
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2607
  * tools/tiffcp.c
    + fix uint32 underflow/overflow that can cause heap-based buffer
    overflow. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2610
  * tools/tiffcp.c
    + replace assert( (bps % 8) == 0 ) by a non assert check.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2605
  * tools/tiff2ps.c
    + fix 2 heap-based buffer overflows (in PSDataBW and
    PSDataColorContig). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2633 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2634.
  * tools/tiff2pdf.c
    + prevent heap-based buffer overflow in -j mode on a paletted
    image. Note: this fix errors out before the overflow happens.
    There could probably be a better fix.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2635
  * tools/tiff2pdf.c
    + fix wrong usage of memcpy() that can trigger unspecified behaviour.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2638
  * tools/tiff2pdf.c
    + avoid potential invalid memory read in t2p_writeproc.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2639
  * tools/tiff2pdf.c
    + avoid potential heap-based overflow in t2p_readwrite_pdf_image_tile().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2640
  * tools/tiffcrop.c
    + remove extraneous TIFFClose() in error code path, that caused
    double free.
    Related to http://bugzilla.maptools.org/show_bug.cgi?id=2535
  * tools/tiffcp.c
    + error out cleanly in cpContig2SeparateByRow and
    cpSeparate2ContigByRow if BitsPerSample != 8 to avoid heap
    based overflow.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2656 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2657
  * tools/raw2tiff.c
    + avoid integer division by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2631
  * tools/tiff2ps.c
    + call TIFFClose() in error code paths.
  * tools/fax2tiff.c
    + emit appropriate message if the input file is empty. Patch by
    Alan Coopersmith.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2672
  * tools/tiff2bw.c
    + close TIFF handle in error code path.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2677
  * Other issues fixed:
    + bsc#1042804, CVE-2017-9404
- Removed patches:
  * tiff-4.0.7-CVE-2015-7554.patch
  * tiff-4.0.7-CVE-2017-5225.patch
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  * tiff-CVE-2016-10266.patch
  * tiff-CVE-2016-10267.patch
  * tiff-CVE-2016-10268.patch
  * tiff-CVE-2016-10269.patch
  * tiff-CVE-2016-10270.patch
  * tiff-CVE-2016-10271.patch
  * tiff-CVE-2016-10272.patch
    + Fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1511956800">- Upgrade to upstream release 4.0.9
  * Changes in the software configuration:
    + test/Makefile.am: Add some tests for tiff2bw.
    + .appveyor.yml, .travis.yml, build/travis-ci: apply patches
    0001-ci-Travis-script-improvements.patch and
    0002-ci-Invoke-helper-script-via-shell.patch by Roger Leigh
    + .travis.yml, build/travis-ci: new files from
    0001-ci-Add-Travis-support-for-Linux-builds-with-Autoconf.patch
    by Roger Leigh. This patch adds support for the Travis-CI
    service.
    + .appveyor.yml: new file from
    0002-ci-Add-AppVeyor-support.patch by Roger Leigh (sent to
    mailing list on 2017-06-08) This patch adds a .appveyor.yml
    file to the top-level. This allows one to opt in to having a
    branch built on Windows with Cygwin, MinGW and MSVC
    automatically when a branch is pushed to GitHub, GitLab,
    BitBucket or any other supported git hosting service.
    + CMakeLists.txt, test/CMakeLists.txt,
    test/TiffTestCommon.cmake: apply patch
    0001-cmake-Improve-Cygwin-and-MingGW-test-support.patch from
    Roger Leigh. This patch makes the CMake build system support
    running the tests with MinGW or  Cygwin.
    + test/tiffcp-lzw-compat.sh, test/images/quad-lzw-compat.tiff:
    new files to test old-style LZW decompression
    + test/common.sh, Makefile.am, CMakeList.txt: updated with above
    + test/Makefile.am: add missing reference to
    images/quad-lzw-compat.tiff to fix "make distcheck". Patch by
    Roger Leigh
    + nmake.opt: support a DEBUG=1 option, so as to adjust OPTFLAGS
    and use /MDd runtime in debug mode.
  * Changes in libtiff:
    + libtiff/tif_color.c: TIFFYCbCrToRGBInit(): stricter clamping
    to avoid int32 overflow in TIFFYCbCrtoRGB(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1844
    + libtiff/tif_getimage.c: initYCbCrConversion(): stricter
    validation for refBlackWhite coefficients values. To avoid
    invalid float-&gt;int32 conversion (when refBlackWhite[0] ==
    2147483648.f) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1907
    + libtiff/tif_dirinfo.c, tif_dirread.c: add
    _TIFFCheckFieldIsValidForCodec(), and use it in
    TIFFReadDirectory() so as to ignore fields whose tag is a
    codec-specified tag but this codec is not enabled. This avoids
    TIFFGetField() to behave differently depending on whether the
    codec is enabled or not, and thus can avoid stack based buffer
    overflows in a number of TIFF utilities such as tiffsplit,
    tiffcmp, thumbnail, etc. Patch derived from
    0063-Handle-properly-CODEC-specific-tags.patch
    (http://bugzilla.maptools.org/show_bug.cgi?id=2580) by Raphaël
    Hertzog.
    Fixes: http://bugzilla.maptools.org/show_bug.cgi?id=2580
    http://bugzilla.maptools.org/show_bug.cgi?id=2693
    http://bugzilla.maptools.org/show_bug.cgi?id=2625
    (CVE-2016-10095, bsc#1017690)
    http://bugzilla.maptools.org/show_bug.cgi?id=2564
    (CVE-2015-7554, bsc#960341)
    http://bugzilla.maptools.org/show_bug.cgi?id=2561
    (CVE-2016-5318, bsc#983436)
    http://bugzilla.maptools.org/show_bug.cgi?id=2499
    (CVE-2014-8128, bsc#969783)
    http://bugzilla.maptools.org/show_bug.cgi?id=2441
    http://bugzilla.maptools.org/show_bug.cgi?id=2433
    + libtiff/tif_swab.c: if DISABLE_CHECK_TIFFSWABMACROS is
    defined, do not do the #ifdef TIFFSwabXXX checks. Make it
    easier for GDAL to rename the symbols of its internal libtiff
    copy.
    + libtiff/tif_dirread.c: fix regression of libtiff 4.0.8 in
    ChopUpSingleUncompressedStrip() regarding update of newly
    single-strip uncompressed files whose bytecount is 0. Before
    the change of 2016-12-03, the condition bytecount==0 used to
    trigger an early exit/disabling of strip chop. Re-introduce
    that in update mode. Otherwise this cause later incorrect
    setting for the value of StripByCounts/StripOffsets.
    (https://trac.osgeo.org/gdal/ticket/6924)
    + libtiff/tif_dirread.c: TIFFFetchStripThing(): limit the
    number of items read in StripOffsets/StripByteCounts tags to
    the number of strips to avoid excessive memory allocation.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2215
    + libtiff/tif_getimage.c: avoid many (harmless) unsigned int
    overflows.
    + libtiff/tif_fax3.c: avoid unsigned int overflow in
    Fax3Encode2DRow(). Could potentially be a bug with huge rows.
    + libtiff/tif_jpeg.c: avoid (harmless) unsigned int overflow on
    tiled images.
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts() and BYTECOUNTLOOKSBAD when file is
    too short.
    + libtiff/tif_predict.c: decorate legitimate functions where
    unsigned int overflow occur with
    TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts()
    + libtiff/tiffiop.h: add TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    macro to disable CLang warnings raised by
  - fsanitize=undefined,unsigned-integer-overflow
    + libtiff/tif_jpeg.c: add anti-denial of service measure to
    avoid excessive CPU consumption on progressive JPEGs with a
    huge number of scans. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    Note: only affects libtiff since 2014-12-29 where support of
    non-baseline JPEG was added.
    + libtiff/tif_jpeg.c: error out at decoding time if anticipated
    libjpeg memory allocation is above 100 MB. libjpeg in case of
    multiple scans, which is allowed even in baseline JPEG, if
    components are spread over several scans and not
    interleavedin a single one, needs to allocate memory (or
    backing store) for the whole strip/tile. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    This limitation may be overriden by setting the
    LIBTIFF_ALLOW_LARGE_LIBJPEG_MEM_ALLOC environment variable, or
    recompiling libtiff with a custom value of
    TIFF_LIBJPEG_LARGEST_MEM_ALLOC macro.
    + libtiff/tif_jbig.c: fix memory leak in error code path of
    JBIGDecode()
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2706
    (CVE-2017-9936, bsc#1046073)
    + libtiff/tif_dirread.c: in TIFFReadDirEntryFloat(), check that
    a double value can fit in a float before casting.
    + libtiff/tiffiop.h, libtiff/tif_jpeg.c, libtiff/tif_jpeg_12.c,
    libtiff/tif_read.c: make TIFFReadScanline() works in
    CHUNKY_STRIP_READ_SUPPORT mode with JPEG stream with multiple
    scans. Also make configurable through a
    LIBTIFF_JPEG_MAX_ALLOWED_SCAN_NUMBER environment variable the
    maximum number of scans allowed. Defaults to 100.
    + libtiff/tif_read.c: TIFFFillTile(): add limitation to the
    number of bytes read in case td_stripbytecount[strip] is
    bigger than reasonable, so as to avoid excessive memory
    allocation (similarly to what was done for TIFFFileStrip() on
    2017-05-10)
    + libtiff/tif_getimage.c: use
    _TIFFReadEncodedStripAndAllocBuffer(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2433
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedStripAndAllocBuffer() function, variant of
    TIFFReadEncodedStrip() that allocates the decoded buffer only
    after a first successful TIFFFillStrip(). This avoids
    excessive memory allocation on corrupted files.
    + libtiff/tif_dirwrite.c: in TIFFWriteDirectoryTagCheckedXXXX()
    functions associated with LONG8/SLONG8 data type, replace
    assertion that the file is BigTIFF, by a non-fatal error.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2712
    + libtiff/tif_read.c: TIFFStartTile(): set tif_rawcc to
    tif_rawdataloaded when it is set. Similarly to
    TIFFStartStrip(). This issue was revealed by the change of
    2017-06-30 in TIFFFileTile(), limiting the number of bytes
    read. But it could probably have been hit too in
    CHUNKY_STRIP_READ_SUPPORT mode previously. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2454
    + libtiff/tif_error.c, tif_warning.c: correctly use va_list
    when both an old-style and new-style warning/error handlers
    are installed. Patch by Paavo Helde (sent on the mailing list)
    + libtiff/tif_getimage.c: use _TIFFReadTileAndAllocBuffer().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2470
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedTileAndAllocBuffer() and
    _TIFFReadTileAndAllocBuffer() variants of
    TIFFReadEncodedTile() and TIFFReadTile() that allocates the
    decoded buffer only after a first successful TIFFFillTile().
    This avoids excessive memory allocation on corrupted files.
    + libtiff/tif_pixarlog.c: avoid excessive memory allocation on
    decoding when RowsPerStrip tag is not defined (and thus
    td_rowsperstrip == UINT_MAX) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2554
    + libtiff/tif_lzw.c: fix 4.0.8 regression in the decoding of
    old-style LZW compressed files.
    + libtiff/tif_lzw.c: fix potential out-of-buffer read on 1-byte
    LZW strips. Crashing issue only on memory mapped files, where
    the strip offset is the last byte of the file, and the file
    size is a multiple of one page size on the CPU architecture
    (typically 4096)
    + libtiff/tif_dir.c: avoid potential null pointer dereference
    in _TIFFVGetField() on corrupted TIFFTAG_NUMBEROFINKS tag
    instance.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2713
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + libtiff/tif_read.c: TIFFFillStrip() / TIFFFillTile().
    Complementary fix for
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 in the
    isMapped() case, so as to avoid excessive memory allocation
    when we need a temporary buffer but the file is truncated.
    + libtiff/tif_read.c: in TIFFFetchStripThing(), only grow the
    arrays that hold StripOffsets/StripByteCounts, when they are
    smaller than the expected number of striles, up to 1 million
    striles, and error out beyond. Can be tweaked by setting the
    environment variable LIBTIFF_STRILE_ARRAY_MAX_RESIZE_COUNT.
    This partially goes against a change added on 2002-12-17 to
    accept those arrays of wrong sizes, but is needed to avoid
    denial of services. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2350
    + libtiff/tif_read.c: add protection against excessive memory
    allocation attempts in TIFFReadDirEntryArray() on short files.
    Effective for mmap'ed case. And non-mmap'ed case, but
    restricted to 64bit builds. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2675
    + libtiff/tif_luv.c: LogLuvInitState(): avoid excessive memory
    allocation when RowsPerStrip tag is missing. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2683
    + libtiff/tif_getimage.c: gtTileContig() and gtTileSeparate():
    properly break from loops on error when stoponerr is set,
    instead of going on iterating on row based loop.
    + libtiff/tif_getimage.c: fix fromskew computation when
    to-be-skipped pixel number is not a multiple of the horizontal
    subsampling, and also in some other cases. Impact
    putcontig8bitYCbCr44tile, putcontig8bitYCbCr42tile,
    putcontig8bitYCbCr41tile, putcontig8bitYCbCr21tile and
    putcontig8bitYCbCr12tile Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2637 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2691
    + libtiff/tif_luv.c: further reduce memory requirements for
    temporary buffer when RowsPerStrip &gt;= image_length in
    LogLuvInitState() and LogL16InitState(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2700
    + libtiff/tif_dirwrite.c: replace assertion related to not
    finding the SubIFD tag by runtime check (in
    TIFFWriteDirectorySec()) Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2727
    + libtiff/tif_dirwrite.c: replace assertion to tag value not
    fitting on uint32 when selecting the value of SubIFD tag by
    runtime check (in TIFFWriteDirectoryTagSubifd()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2728
    + libtiff/tif_jpeg.c: accept reading the last strip of a JPEG
    compressed file if the codestream height is larger than the
    truncated height of the strip. Emit a warning in this
    situation since this is non compliant.
    + libtiff/tiffiop.h, tif_aux.c: redirect SeekOK() macro to a
    _TIFFSeekoK() function that checks if the offset is not
    bigger than INT64_MAX, so as to avoid a -1 error return code
    of TIFFSeekFile() to match a required seek to UINT64_MAX/-1.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2726
    + libtiff/tif_dirread.c: add NULL check to avoid likely false
    positive null-pointer dereference warning by CLang Static
    Analyzer.
    + libtiff/libtiff.def: add TIFFReadRGBAStripExt and
    TIFFReadRGBATileExt Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2735
    + libtiff/tif_jpeg.c: add compatibility with libjpeg-turbo
    1.5.2 that honours max_memory_to_use &gt; 0. Cf
    https://github.com/libjpeg-turbo/libjpeg-turbo/issues/162
    + libtiff/tif_getimage.c: avoid floating point division by zero
    in initCIELabConversion() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3733
  * Changes in the tools:
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + tools/tiffset.c: fix setting a single value for the
    ExtraSamples tag (and other tags with variable number of
    values). So 'tiffset -s ExtraSamples 1 X'. This only worked
    when setting 2 or more values, but not just one.
    + tools/fax2tiff.c (_FAX_Client_Data): Pass FAX_Client_Data as
    the client data. This client data is not used at all at the
    moment, but it makes the most sense. Issue that the value of
    client_data.fd was passed where a pointer is expected.
    + tools/tiff2pdf.c (t2p_sample_realize_palette): Fix possible
    arithmetic overflow in bounds checking code and eliminate
    comparison between signed and unsigned type.
    + tools/tiff2bw.c (main): Free memory allocated in the tiff2bw
    program. This is in response to the report associated with
    CVE-2017-16232, bsc#1069213 but does not solve the extremely
    high memory usage with the associated POC file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Fix check section:
  + Make sure to get back to the right directory after chdir to
    'tools', or we can't run the 2nd test suite.
  + Fix typo: the tests are located in a directory called 'test',
    not 'tests'.</changelog>
  <changelog author="mvetter@suse.com" date="1518782400">- bsc#1046077: Add tiff-4.0.9-bsc1046077-CVE-2017-9935.patch
  Fix Heap-based buffer overflow in t2p_write_pdf</changelog>
  <changelog author="mvetter@suse.com" date="1519128000">- bsc#1081690: Add tiff-4.0.9-bsc1081690-CVE-2018-5784.patch
  Fix uncontrolled resource consumption in TIFFSetDirectory</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- security update
  * CVE-2018-10963 [bsc#1092949]
    + tiff-CVE-2018-10963.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526644800">- security update
  * CVE-2017-18013 [bsc#1074317]
    + tiff-CVE-2017-18013.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113600">- security update
  * CVE-2018-7456 [bsc#1082825]
    + tiff-CVE-2018-7456.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113601">- security update
  * CVE-2017-11613 [bsc#1082332]
    + tiff-CVE-2017-11613.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528200000">- security update
  * CVE-2018-8905 [bsc#1086408]
    + tiff-CVE-2018-8905.patch</changelog>
</package>
<package pkgid="ae2732653d396427091bf0206ba2f4f26afe425bed64d0dc18b15e201bcfe536" name="libtiff-devel-32bit" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="lp150.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1472731200">- Added patches:
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  - Upstream commits to fix CVE-2016-3623 [bsc#974618],
    CVE-2016-3945 [bsc#974614], CVE-2016-3990 [bsc#975069],
    CVE-2016-3991 [bsc#975070]</changelog>
  <changelog author="fstrba@suse.com" date="1475755200">- Added patches:
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Upstream fixes for MSVR 35093, MSVR 35094, MSVR 35095,
    MSVR 35096, MSVR 35097, MSVR 35098.
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  - Enforce bits-per-sample requirements of floating point
    predictor. Fixes CVE-2016-3622 [bsc#974449]</changelog>
  <changelog author="fstrba@suse.com" date="1480420800">- Upgrade to upstream release 4.0.7
  * libtiff/tif_aux.c
    + Fix crash in TIFFVGetFieldDefaulted() when requesting
    Predictor tag and that the zip/lzw codec is not configured.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2591
  * libtiff/tif_compress.c
    + Make TIFFNoDecode() return 0 to indicate an error and make
    upper level read routines treat it accordingly. (linked to the
    test case of http://bugzilla.maptools.org/show_bug.cgi?id=2517)
  * libtiff/tif_dir.c
    + Discard values of SMinSampleValue and SMaxSampleValue when
    they have been read and the value of SamplesPerPixel is
    changed afterwards (like when reading a OJPEG compressed image
    with a missing SamplesPerPixel tag, and whose photometric is
    RGB or YCbCr, forcing SamplesPerPixel being 3). Otherwise when
    rewriting the directory (for example with tiffset, we will
    expect 3 values whereas the array had been allocated with just
    one), thus causing a out of bound read access. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658, bsc#974840)
  * libtiff/tif_dirread.c
    + In TIFFFetchNormalTag(), do not dereference NULL pointer when
    values of tags with TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII
    access are 0-byte arrays. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2593 (regression
    introduced by previous fix done on 2016-11-11 for
    CVE-2016-9297, bsc#1010161). Assigned as CVE-2016-9448,
    bsc#1011103
    + In TIFFFetchNormalTag(), make sure that values of tags with
    TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII access are null
    terminated, to avoid potential read outside buffer in
    _TIFFPrintField(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2590
    (CVE-2016-9297, bsc#1010161)
    + Initialize doubledata at line 3693 to NULL to please MSVC 2013
    + Prevent reading ColorMap or TransferFunction if
    BitsPerPixel &gt; 24, so as to avoid huge memory allocation and
    file read attempts
    + Reject images with OJPEG compression that have no
    TileOffsets/StripOffsets tag, when OJPEG compression is
    disabled. Prevent null pointer dereference in
    TIFFReadRawStrip1() and other functions that expect
    td_stripbytecount to be non NULL. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2585
    + When compiled with DEFER_STRILE_LOAD, fix regression, when
    reading a one-strip file without a StripByteCounts tag.
    + Workaround false positive warning of Clang Static Analyzer
    about null pointer dereference in TIFFCheckDirOffset().
  * libtiff/tif_dirwrite.c
    + Avoid null pointer dereference on td_stripoffset when writing
    directory, if FIELD_STRIPOFFSETS was artificially set for a
    hack case in OJPEG case. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658,
    bsc#974840)
    + Fix truncation to 32 bit of file offsets in TIFFLinkDirectory()
    and TIFFWriteDirectorySec() when aligning directory offsets on
    an even offset (affects BigTIFF).
  * libtiff/tif_dumpmode.c
    + DumpModeEncode() should return 0 in case of failure so that
    the above mentionned functions detect the error.
  * libtiff/tif_fax3.c
    + remove dead assignment in Fax3PutEOLgdal().
  * libtiff/tif_fax3.h
    + make Param member of TIFFFaxTabEnt structure a uint16 to
    reduce size of the binary.
  * libtiff/tif_getimage.c
    + Fix out-of-bound reads in TIFFRGBAImage interface in case of
    unsupported values of SamplesPerPixel/ExtraSamples for
    LogLUV/CIELab. Add explicit call to TIFFRGBAImageOK() in
    TIFFRGBAImageBegin(). Fix CVE-2015-8665 and CVE-2015-8683.
    + Fix some benign warnings which appear in 64-bit compilation
    under Microsoft Visual Studio of the form "Arithmetic
    overflow: 32-bit value is shifted, then cast to 64-bit value.
    Results might not be an expected value."
    + TIFFRGBAImageOK: Reject attempts to read floating point images.
  * libtiff/tif_luv.c
    + Fix potential out-of-bound writes in decode functions in non
    debug builds by replacing assert()s by regular if checks
    (http://bugzilla.maptools.org/show_bug.cgi?id=2522). Fix
    potential out-of-bound reads in case of short input data.
    + Validate that for COMPRESSION_SGILOG and PHOTOMETRIC_LOGL,
    there is only one sample per pixel. Avoid potential invalid
    memory write on corrupted/unexpected images when using the
    TIFFRGBAImageBegin() interface
  * libtiff/tif_next.c
    + Fix potential out-of-bound write in NeXTDecode()
    (http://bugzilla.maptools.org/show_bug.cgi?id=2508)
  * libtiff/tif_pixarlog.c
    + Avoid zlib error messages to pass a NULL string to %s
    formatter, which is undefined behaviour in sprintf().
    + Fix out-of-bounds write vulnerabilities in heap allocated
    buffers. Reported as MSVR 35094.
    + Fix potential buffer write overrun in PixarLogDecode() on
    corrupted/unexpected images (CVE-2016-5875, bsc#987351)
    + Fix write buffer overflow in PixarLogEncode if more input
    samples are provided than expected by PixarLogSetupEncode.
    Idea based on libtiff-CVE-2016-3990.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, but with different and simpler
    check. (http://bugzilla.maptools.org/show_bug.cgi?id=2544,
    bsc#975069)
  * libtiff/tif_predict.c
    + PredictorSetup: Enforce bits-per-sample requirements of
    floating point predictor (3). Fixes CVE-2016-3622 "Divide By
    Zero in the tiff2rgba tool." (bsc#974449)
  * libtiff/tif_predict.h, libtiff/tif_predict.c
    + Replace assertions by runtime checks to avoid assertions in
    debug mode, or buffer overflows in release mode. Can happen
    when dealing with unusual tile size like YCbCr with
    subsampling. Reported as MSVR 35105.
  * libtiff/tif_read.c
    + Fix out-of-bounds read on memory-mapped files in
    TIFFReadRawStrip1() and TIFFReadRawTile1() when stripoffset
    is beyond tmsize_t max value
    + Make TIFFReadEncodedStrip() and TIFFReadEncodedTile() directly
    use user provided buffer when no compression (and other
    conditions) to save a memcpy().
  * libtiff/tif_strip.c
    + Make TIFFNumberOfStrips() return the td-&gt;td_nstrips value when
    it is non-zero, instead of recomputing it. This is needed in
    TIFF_STRIPCHOP mode where td_nstrips is modified. Fixes a read
    outsize of array in tiffsplit (or other utilities using
    TIFFNumberOfStrips()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2587
    (CVE-2016-9273, bsc#1010163)
  * libtiff/tif_write.c
    + Fix issue in error code path of TIFFFlushData1() that didn't
    reset the tif_rawcc and tif_rawcp members. I'm not completely
    sure if that could happen in practice outside of the odd
    behaviour of t2p_seekproc() of tiff2pdf). The report points
    that a better fix could be to check the return value of
    TIFFFlushData1() in places where it isn't done currently, but
    it seems this patch is enough. Reported as MSVR 35095.
    + Make TIFFWriteEncodedStrip() and TIFFWriteEncodedTile()
    directly use user provided buffer when no compression to save
    a memcpy().
    + TIFFWriteEncodedStrip() and TIFFWriteEncodedTile() should
    return -1 in case of failure of tif_encodestrip() as documented
  * tools/fax2tiff.D    c
    + Fix segfault when specifying -r without argument. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2572
  * tools/Makefile.am
    + The libtiff tools bmp2tiff, gif2tiff, ras2tiff, sgi2tiff,
    sgisv, and ycbcr are completely removed from the distribution.
    The libtiff tools rgb2ycbcr and thumbnail are only built in
    the build tree for testing. Old files are put in new 'archive'
    subdirectory of the source repository, but not in
    distribution archives. These changes are made in order to
    lessen the maintenance burden.
  * tools/rgb2ycbcr.c
    + Validate values of -v and -h parameters to avoid potential
    divide by zero. Fixes CVE-2016-3623, bsc#974618
    (http://bugzilla.maptools.org/show_bug.cgi?id=2569)
  * tools/tiff2bw.c
    + Fix weight computation that could result of color value
    overflow (no security implication). Fix
    http://bugzilla.maptools.org/show_bug.cgi?id=2550.
  * tools/tiff2pdf.c
    + Avoid undefined behaviour related to overlapping of source and
    destination buffer in memcpy() call in
    t2p_sample_rgbaa_to_rgb() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2577
    + Fix out-of-bounds write vulnerabilities in heap allocate buffer
    in t2p_process_jpeg_strip(). Reported as MSVR 35098.
    + Fix potential integer overflows on 32 bit builds in
    t2p_read_tiff_size() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2576
    + Fix read -largely- outsize of buffer in
    t2p_readwrite_pdf_image_tile(), causing crash, when reading a
    JPEG compressed image with TIFFTAG_JPEGTABLES length being one.
    Reported as MSVR 35101. CVE-2016-9453, bsc#1011107
    + Fix write buffer overflow of 2 bytes on JPEG compressed images.
    Reported as TALOS-CAN-0187, CVE-2016-5652, bsc#1007280. Also
    prevents writing 2 extra uninitialized bytes to the file
    stream.
  * tools/tiff2rgba.c
    + Fix integer overflow in size of allocated buffer, when -b mode
    is enabled, that could result in out-of-bounds write. Based
    initially on patch tiff-CVE-2016-3945.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, with correction for invalid
    tests that rejected valid files.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2545, bsc#974614)
  * tools/tiffcp.c
    + Fix out-of-bounds write on tiled images with odd tile width vs
    image width. Reported as MSVR 35103. (bsc#1011841,
    CVE-2016-9538)
    + Fix read of undefined variable in case of missing required
    tags. Found on test case of MSVR 35100.
  * tools/tiffcrop.c
    + Avoid access outside of stack allocated array on a tiled
    separate TIFF with more than 8 samples per pixel.
    (CVE-2016-5321, CVE-2016-5323,
    http://bugzilla.maptools.org/show_bug.cgi?id=2558,
    http://bugzilla.maptools.org/show_bug.cgi?id=2559, bsc#984813,
    bsc#984815)
    + Fix memory leak in (recent) error code path. Fixes Coverity
    1394415.
    + Fix multiple uint32 overflows in writeBufferToSeparateStrips(),
    writeBufferToContigTiles() and writeBufferToSeparateTiles()
    that could cause heap buffer overflows. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2592
    + Fix out-of-bound read of up to 3 bytes in
    readContigTilesIntoBuffer(). Reported as MSVR 35092.
    + Fix out-of-bounds write in loadImage(). From patch
    libtiff-CVE-2016-3991.patch from
    libtiff-4.0.3-25.el7_2.src.rpm
    (http://bugzilla.maptools.org/show_bug.cgi?id=2543, bsc#975070)
    + Fix read of undefined buffer in readContigStripsIntoBuffer()
    due to uint16 overflow. Reported as MSVR 35100. (bsc#1011841,
    CVE-2016-9538)
    + Fix various out-of-bounds write vulnerabilities in heap or
    stack allocated buffers. Reported as MSVR 35093, MSVR 35096
    and MSVR 35097.
    + readContigTilesIntoBuffer: Fix signed/unsigned comparison
    warning.
  * tools/tiffdump.c
    + Fix a few misaligned 64-bit reads warned by -fsanitize
    + ReadDirectory: Remove uint32 cast to_TIFFmalloc() argument
    which resulted in Coverity report. Added more mutiplication
    overflow checks
  * tools/tiffinfo.c
    + Fix out-of-bound read on some tiled images.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2517)
    + TIFFReadContigTileData: Fix signed/unsigned comparison warning.
    + TIFFReadSeparateTileData: Fix signed/unsigned comparison
    warning.
- Removed patches:
  * tiff-4.0.4-uninitialized_mem_NeXTDecode.patch
  * tiff-4.0.6-CVE-2015-8782.patch
  * tiff-4.0.6-CVE-2016-3186.patch
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Fixed in the upsteam release
- Changed patch:
  * tiff-4.0.6-CVE-2015-7554.patch -&gt; tiff-4.0.7-CVE-2015-7554.patch
  - Rediffed to the changed context</changelog>
  <changelog author="idonmez@suse.com" date="1482148800">- Update homepage</changelog>
  <changelog author="jengelh@inai.de" date="1482148801">- Drop --with-pic, this is only for static libs (which are not built)
- Update descriptions</changelog>
  <changelog author="fstrba@suse.com" date="1484308800">- Added patch:
  * tiff-4.0.7-CVE-2017-5225.patch
  - Upstream fix for CVE-2017-5225, bsc#1019611: heap buffer
    overflow in tools/tiffcp via a crafted BitsPerSample value</changelog>
  <changelog author="fstrba@suse.com" date="1486036800">- Added patch:
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  - Fix a regression introduced in 4.0.7 (bsc#1022103)
  - http://bugzilla.maptools.org/show_bug.cgi?id=2636</changelog>
  <changelog author="fstrba@suse.com" date="1490788800">- Added patches:
  * tiff-CVE-2016-10266.patch
    + Upstream fix for CVE-2016-10266, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031263)
  * tiff-CVE-2016-10267.patch
    + Upstream fix for CVE-2016-10267, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031262)
  * tiff-CVE-2016-10268.patch
    + Upstream fix for CVE-2016-10268, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031255)
  * tiff-CVE-2016-10269.patch
    + Upstream fix for CVE-2016-10269, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031254)
  * tiff-CVE-2016-10270.patch
    + Upstream fix for CVE-2016-10270, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031250)
  * tiff-CVE-2016-10271.patch
    + Upstream fix for CVE-2016-10271, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read and buffer overflow) or possibly have unspecified
    other impact via a crafted TIFF image (bsc#1031249)
  * tiff-CVE-2016-10272.patch
    + Upstream fix for CVE-2016-10272, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    overflow) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031247)</changelog>
  <changelog author="fstrba@suse.com" date="1497960000">- Upgrade to upstream release 4.0.8
  * libtiff/tif_getimage.c, libtiff/tif_open.c
    + add parenthesis to fix cppcheck clarifyCalculation warnings
  * libtiff/tif_predict.c, libtiff/tif_print.c
    + fix printf unsigned vs signed formatting (cppcheck
    invalidPrintfArgType_uint warnings)
  * libtiff/tif_read.c, libtiff/tiffiop.h
    + fix uint32 overflow in TIFFReadEncodedStrip() that caused an
    integer division by zero. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2596
  * libtiff/tif_pixarlog.c, libtiff/tif_luv.c
    + fix heap-based buffer overflow on generation of PixarLog / LUV
    compressed files, with ColorMap, TransferFunction attached and
    nasty plays with bitspersample. The fix for LUV has not been
    tested, but suffers from the same kind of issue of PixarLog.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2604
  * libtiff/tif_strip.c
    + revert the change in TIFFNumberOfStrips() done for
    http://bugzilla.maptools.org/show_bug.cgi?id=2587 /
    CVE-2016-9273 since the above change is a better fix that
    makes it unnecessary.
  * libtiff/tif_dirread.c
    + modify ChopUpSingleUncompressedStrip() to instanciate compute
    ntrips as TIFFhowmany_32(td-&gt;td_imagelength, rowsperstrip),
    instead of a logic based on the total size of data. Which is
    faulty is the total size of data is not sufficient to fill the
    whole image, and thus results in reading outside of the
    StripByCounts/StripOffsets arrays when using
    TIFFReadScanline(). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2608.
  * libtiff/tif_ojpeg.c
    + make OJPEGDecode() early exit in case of failure in
    OJPEGPreDecode(). This will avoid a divide by zero, and
    potential other issues. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2611
  * libtiff/tif_write.c
    + fix misleading indentation as warned by GCC.
  * libtiff/tif_fax3.h
    + revert change done on 2016-01-09 that made Param member of
    TIFFFaxTabEnt structure a uint16 to reduce size of the
    binary. It happens that the Hylafax software uses the tables
    that follow this typedef (TIFFFaxMainTable, TIFFFaxWhiteTable,
    TIFFFaxBlackTable), although they are not in a public libtiff
    header. Raised by Lee Howard.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2636
  * libtiff/tiffio.h, libtiff/tif_getimage.c
    + add TIFFReadRGBAStripExt() and TIFFReadRGBATileExt() variants
    of the functions without ext, with an extra argument to control
    the stop_on_error behaviour.
  * libtiff/tif_getimage.c
    + fix potential memory leaks in error code path of
    TIFFRGBAImageBegin().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2627
  * libtiff/tif_jpeg.c
    + increase libjpeg max memory usable to 10 MB instead of libjpeg
    1MB default. This helps when creating files with "big" tile,
    without using libjpeg temporary files.
    Related to https://trac.osgeo.org/gdal/ticket/6757
  * libtiff/tif_jpeg.c
    + avoid integer division by zero in JPEGSetupEncode() when
    horizontal or vertical sampling is set to 0.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2653,
    bsc#1033127, CVE-2017-7595
  * libtiff/tif_dirwrite.c
    + in TIFFWriteDirectoryTagCheckedRational, replace assertion by
    runtime check to error out if passed value is strictly
    negative.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2535,
    bsc#1038438, CVE-2016-10371
  * libtiff/tif_dirread.c
    + avoid division by floating point 0 in
    TIFFReadDirEntryCheckedRational() and
    TIFFReadDirEntryCheckedSrational(), and return 0 in that case
    (instead of infinity as before presumably) Apparently some
    sanitizers do not like those divisions by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2644,
    bsc#1033118, CVE-2017-7598
  * libtiff/tif_dir.c, tif_dirread.c, tif_dirwrite.c
    + implement various clampings of double to other data types to
    avoid undefined behaviour if the output range isn't big enough
    to hold the input value.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2643
    http://bugzilla.maptools.org/show_bug.cgi?id=2642
    http://bugzilla.maptools.org/show_bug.cgi?id=2646
    http://bugzilla.maptools.org/show_bug.cgi?id=2647,
    bsc#1033126, CVE-2017-7596, bsc#1033120, CVE-2017-7597,
    bsc#1033113, CVE-2017-7599, bsc#1033112, CVE-2017-7600,
  * libtiff/tif_jpeg.c
    + validate BitsPerSample in JPEGSetupEncode() to avoid undefined
    behaviour caused by invalid shift exponent.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2648,
    bsc#1033111, CVE-2017-7601
  * libtiff/tif_read.c
    + avoid potential undefined behaviour on signed integer addition
    in TIFFReadRawStrip1() in isMapped() case.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2650,
    bsc#1033109, CVE-2017-7602
  * libtiff/tif_getimage.c
    + add explicit uint32 cast in putagreytile to avoid
    UndefinedBehaviorSanitizer warning. Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2658,
    bsc#1033131, CVE-2017-7592
  * libtiff/tif_read.c
    + TIFFReadBufferSetup(): use _TIFFcalloc() to zero initialize
    tif_rawdata.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2651,
    bsc#1033129, CVE-2017-7593
  * libtiff/tiffio.h, tif_unix.c, tif_win32.c, tif_vms.c
    + add _TIFFcalloc()
  * libtiff/tif_luv.c, tif_lzw.c, tif_packbits.c
    + return 0 in Encode functions instead of -1 when
    TIFFFlushData1() fails.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2130
  * libtiff/tif_ojpeg.c
    + fix leak in OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable when read fails. Patch by
    Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2659,
    bsc#1033128, CVE-2017-7594
  * libtiff/tif_jpeg.c
    + only run JPEGFixupTagsSubsampling() if the YCbCrSubsampling
    tag is not explicitly present. This helps a bit to reduce the
    I/O amount when the tag is present (especially on cloud hosted
    files).
  * libtiff/tif_lzw.c
    + in LZWPostEncode(), increase, if necessary, the code bit-width
    after flushing the remaining code and before emitting the EOI
    code. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=1982
  * libtiff/tif_pixarlog.c
    + fix memory leak in error code path of PixarLogSetupDecode().
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2665
  * libtiff/tif_fax3.c, tif_predict.c, tif_getimage.c
    + fix GCC 7 -Wimplicit-fallthrough warnings.
  * libtiff/tif_dirread.c
    + fix memory leak in non DEFER_STRILE_LOAD mode (ie default)
    when there is both a StripOffsets and TileOffsets tag, or a
    StripByteCounts and TileByteCounts
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2689,
    bsc#1042805, CVE-2017-9403)
  * libtiff/tif_ojpeg.c
    + fix potential memory leak in
    OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2670
  * libtiff/tif_fax3.c
    + avoid crash in Fax3Close() on empty file. Patch by Alan
    Coopersmith + complement by myself.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2673
  * libtiff/tif_read.c
    + TIFFFillStrip(): add limitation to the number of bytes read
    in case td_stripbytecount[strip] is bigger than reasonable,
    so as to avoid excessive memory allocation.
  * libtiff/tif_zip.c, tif_pixarlog.c, tif_predict.c
    + fix memory leak when the underlying codec (ZIP, PixarLog)
    succeeds its setupdecode() method, but PredictorSetup fails.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStrip() and TIFFFillTile(): avoid excessive memory
    allocation in case of shorten files. Only effective on 64 bit
    builds and non-mapped cases.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStripPartial() / TIFFSeek(), avoid potential integer
    overflows with read_ahead in CHUNKY_STRIP_READ_SUPPORT mode.
    Should especially occur on 32 bit platforms.
  * libtiff/tif_read.c
    + TIFFFillStripPartial()
    + avoid excessive memory allocation in case of shorten files.
    Only effective on 64 bit builds.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + update tif_rawcc in CHUNKY_STRIP_READ_SUPPORT mode with
    tif_rawdataloaded when calling TIFFStartStrip() or
    TIFFFillStripPartial(). This avoids reading beyond tif_rawdata
    when bytecount &gt; tif_rawdatasize. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1545.
    Credit to OSS-Fuzz
  * libtiff/tif_color.c
    + avoid potential int32 overflow in TIFFYCbCrToRGBInit() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1533
    Credit to OSS-Fuzz
  * libtiff/tif_pixarlog.c, tif_luv.c
    + avoid potential int32 overflows in multiply_ms() and add_ms().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1558
    Credit to OSS-Fuzz
  * libtiff/tif_packbits.c
    + fix out-of-buffer read in PackBitsDecode() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1563
    Credit to OSS-Fuzz
  * libtiff/tif_luv.c
    + LogL16InitState(): avoid excessive memory allocation when
    RowsPerStrip tag is missing.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_lzw.c
    + update dec_bitsleft at beginning of LZWDecode(), and update
    tif_rawcc at end of LZWDecode(). This is needed to properly
    work with the latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode.
  * libtiff/tif_pixarlog.c
    + PixarLogDecode(): resync tif_rawcp with next_in and tif_rawcc
    with avail_in at beginning and end of function, similarly to
    what is done in LZWDecode(). Likely needed so that it works
    properly with latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode. But untested...
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): add basic validation of luma and
    refBlackWhite coefficients (just check they are not NaN for
    now), to avoid potential float to int overflows. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1663
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): stricter validation for refBlackWhite
    coefficients values. To avoid invalid float-&gt;int32 conversion.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1718
    Credit to OSS Fuzz
  * tools/fax2tiff.c (main)
    + Applied patch by Joerg Ahrens to fix passing client data for
    Win32 builds using tif_win32.c (USE_WIN32_FILEIO defined) for
    file I/O. Patch was provided via email on November 20, 2016.
  * tools/tiffcp.c
    + avoid uint32 underflow in cpDecodedStrips that can cause
    various issues, such as buffer overflows in the library.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2598
  * tools/tiffcrop.c
    + fix readContigStripsIntoBuffer() in -i (ignore) mode so that
    the output buffer is correctly incremented to avoid write
    outside bounds. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2620
  * tools/tiffcrop.c
    + add 3 extra bytes at end of strip buffer in
    readSeparateStripsIntoBuffer() to avoid read outside of heap
    allocated buffer. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2621
  * tools/tiffcrop.c
    + fix integer division by zero when BitsPerSample is missing.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2619
  * tools/tiffinfo.c
    + fix null pointer dereference in -r mode when the image has no
    StripByteCount tag. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2594
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2597
  * tools/tif_dir.c
    + when TIFFGetField(, TIFFTAG_NUMBEROFINKS, ) is called, limit
    the return number of inks to SamplesPerPixel, so that code
    that parses ink names doesn't go past the end of the buffer.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2599
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2607
  * tools/tiffcp.c
    + fix uint32 underflow/overflow that can cause heap-based buffer
    overflow. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2610
  * tools/tiffcp.c
    + replace assert( (bps % 8) == 0 ) by a non assert check.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2605
  * tools/tiff2ps.c
    + fix 2 heap-based buffer overflows (in PSDataBW and
    PSDataColorContig). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2633 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2634.
  * tools/tiff2pdf.c
    + prevent heap-based buffer overflow in -j mode on a paletted
    image. Note: this fix errors out before the overflow happens.
    There could probably be a better fix.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2635
  * tools/tiff2pdf.c
    + fix wrong usage of memcpy() that can trigger unspecified behaviour.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2638
  * tools/tiff2pdf.c
    + avoid potential invalid memory read in t2p_writeproc.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2639
  * tools/tiff2pdf.c
    + avoid potential heap-based overflow in t2p_readwrite_pdf_image_tile().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2640
  * tools/tiffcrop.c
    + remove extraneous TIFFClose() in error code path, that caused
    double free.
    Related to http://bugzilla.maptools.org/show_bug.cgi?id=2535
  * tools/tiffcp.c
    + error out cleanly in cpContig2SeparateByRow and
    cpSeparate2ContigByRow if BitsPerSample != 8 to avoid heap
    based overflow.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2656 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2657
  * tools/raw2tiff.c
    + avoid integer division by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2631
  * tools/tiff2ps.c
    + call TIFFClose() in error code paths.
  * tools/fax2tiff.c
    + emit appropriate message if the input file is empty. Patch by
    Alan Coopersmith.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2672
  * tools/tiff2bw.c
    + close TIFF handle in error code path.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2677
  * Other issues fixed:
    + bsc#1042804, CVE-2017-9404
- Removed patches:
  * tiff-4.0.7-CVE-2015-7554.patch
  * tiff-4.0.7-CVE-2017-5225.patch
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  * tiff-CVE-2016-10266.patch
  * tiff-CVE-2016-10267.patch
  * tiff-CVE-2016-10268.patch
  * tiff-CVE-2016-10269.patch
  * tiff-CVE-2016-10270.patch
  * tiff-CVE-2016-10271.patch
  * tiff-CVE-2016-10272.patch
    + Fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1511956800">- Upgrade to upstream release 4.0.9
  * Changes in the software configuration:
    + test/Makefile.am: Add some tests for tiff2bw.
    + .appveyor.yml, .travis.yml, build/travis-ci: apply patches
    0001-ci-Travis-script-improvements.patch and
    0002-ci-Invoke-helper-script-via-shell.patch by Roger Leigh
    + .travis.yml, build/travis-ci: new files from
    0001-ci-Add-Travis-support-for-Linux-builds-with-Autoconf.patch
    by Roger Leigh. This patch adds support for the Travis-CI
    service.
    + .appveyor.yml: new file from
    0002-ci-Add-AppVeyor-support.patch by Roger Leigh (sent to
    mailing list on 2017-06-08) This patch adds a .appveyor.yml
    file to the top-level. This allows one to opt in to having a
    branch built on Windows with Cygwin, MinGW and MSVC
    automatically when a branch is pushed to GitHub, GitLab,
    BitBucket or any other supported git hosting service.
    + CMakeLists.txt, test/CMakeLists.txt,
    test/TiffTestCommon.cmake: apply patch
    0001-cmake-Improve-Cygwin-and-MingGW-test-support.patch from
    Roger Leigh. This patch makes the CMake build system support
    running the tests with MinGW or  Cygwin.
    + test/tiffcp-lzw-compat.sh, test/images/quad-lzw-compat.tiff:
    new files to test old-style LZW decompression
    + test/common.sh, Makefile.am, CMakeList.txt: updated with above
    + test/Makefile.am: add missing reference to
    images/quad-lzw-compat.tiff to fix "make distcheck". Patch by
    Roger Leigh
    + nmake.opt: support a DEBUG=1 option, so as to adjust OPTFLAGS
    and use /MDd runtime in debug mode.
  * Changes in libtiff:
    + libtiff/tif_color.c: TIFFYCbCrToRGBInit(): stricter clamping
    to avoid int32 overflow in TIFFYCbCrtoRGB(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1844
    + libtiff/tif_getimage.c: initYCbCrConversion(): stricter
    validation for refBlackWhite coefficients values. To avoid
    invalid float-&gt;int32 conversion (when refBlackWhite[0] ==
    2147483648.f) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1907
    + libtiff/tif_dirinfo.c, tif_dirread.c: add
    _TIFFCheckFieldIsValidForCodec(), and use it in
    TIFFReadDirectory() so as to ignore fields whose tag is a
    codec-specified tag but this codec is not enabled. This avoids
    TIFFGetField() to behave differently depending on whether the
    codec is enabled or not, and thus can avoid stack based buffer
    overflows in a number of TIFF utilities such as tiffsplit,
    tiffcmp, thumbnail, etc. Patch derived from
    0063-Handle-properly-CODEC-specific-tags.patch
    (http://bugzilla.maptools.org/show_bug.cgi?id=2580) by Raphaël
    Hertzog.
    Fixes: http://bugzilla.maptools.org/show_bug.cgi?id=2580
    http://bugzilla.maptools.org/show_bug.cgi?id=2693
    http://bugzilla.maptools.org/show_bug.cgi?id=2625
    (CVE-2016-10095, bsc#1017690)
    http://bugzilla.maptools.org/show_bug.cgi?id=2564
    (CVE-2015-7554, bsc#960341)
    http://bugzilla.maptools.org/show_bug.cgi?id=2561
    (CVE-2016-5318, bsc#983436)
    http://bugzilla.maptools.org/show_bug.cgi?id=2499
    (CVE-2014-8128, bsc#969783)
    http://bugzilla.maptools.org/show_bug.cgi?id=2441
    http://bugzilla.maptools.org/show_bug.cgi?id=2433
    + libtiff/tif_swab.c: if DISABLE_CHECK_TIFFSWABMACROS is
    defined, do not do the #ifdef TIFFSwabXXX checks. Make it
    easier for GDAL to rename the symbols of its internal libtiff
    copy.
    + libtiff/tif_dirread.c: fix regression of libtiff 4.0.8 in
    ChopUpSingleUncompressedStrip() regarding update of newly
    single-strip uncompressed files whose bytecount is 0. Before
    the change of 2016-12-03, the condition bytecount==0 used to
    trigger an early exit/disabling of strip chop. Re-introduce
    that in update mode. Otherwise this cause later incorrect
    setting for the value of StripByCounts/StripOffsets.
    (https://trac.osgeo.org/gdal/ticket/6924)
    + libtiff/tif_dirread.c: TIFFFetchStripThing(): limit the
    number of items read in StripOffsets/StripByteCounts tags to
    the number of strips to avoid excessive memory allocation.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2215
    + libtiff/tif_getimage.c: avoid many (harmless) unsigned int
    overflows.
    + libtiff/tif_fax3.c: avoid unsigned int overflow in
    Fax3Encode2DRow(). Could potentially be a bug with huge rows.
    + libtiff/tif_jpeg.c: avoid (harmless) unsigned int overflow on
    tiled images.
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts() and BYTECOUNTLOOKSBAD when file is
    too short.
    + libtiff/tif_predict.c: decorate legitimate functions where
    unsigned int overflow occur with
    TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts()
    + libtiff/tiffiop.h: add TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    macro to disable CLang warnings raised by
  - fsanitize=undefined,unsigned-integer-overflow
    + libtiff/tif_jpeg.c: add anti-denial of service measure to
    avoid excessive CPU consumption on progressive JPEGs with a
    huge number of scans. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    Note: only affects libtiff since 2014-12-29 where support of
    non-baseline JPEG was added.
    + libtiff/tif_jpeg.c: error out at decoding time if anticipated
    libjpeg memory allocation is above 100 MB. libjpeg in case of
    multiple scans, which is allowed even in baseline JPEG, if
    components are spread over several scans and not
    interleavedin a single one, needs to allocate memory (or
    backing store) for the whole strip/tile. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    This limitation may be overriden by setting the
    LIBTIFF_ALLOW_LARGE_LIBJPEG_MEM_ALLOC environment variable, or
    recompiling libtiff with a custom value of
    TIFF_LIBJPEG_LARGEST_MEM_ALLOC macro.
    + libtiff/tif_jbig.c: fix memory leak in error code path of
    JBIGDecode()
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2706
    (CVE-2017-9936, bsc#1046073)
    + libtiff/tif_dirread.c: in TIFFReadDirEntryFloat(), check that
    a double value can fit in a float before casting.
    + libtiff/tiffiop.h, libtiff/tif_jpeg.c, libtiff/tif_jpeg_12.c,
    libtiff/tif_read.c: make TIFFReadScanline() works in
    CHUNKY_STRIP_READ_SUPPORT mode with JPEG stream with multiple
    scans. Also make configurable through a
    LIBTIFF_JPEG_MAX_ALLOWED_SCAN_NUMBER environment variable the
    maximum number of scans allowed. Defaults to 100.
    + libtiff/tif_read.c: TIFFFillTile(): add limitation to the
    number of bytes read in case td_stripbytecount[strip] is
    bigger than reasonable, so as to avoid excessive memory
    allocation (similarly to what was done for TIFFFileStrip() on
    2017-05-10)
    + libtiff/tif_getimage.c: use
    _TIFFReadEncodedStripAndAllocBuffer(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2433
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedStripAndAllocBuffer() function, variant of
    TIFFReadEncodedStrip() that allocates the decoded buffer only
    after a first successful TIFFFillStrip(). This avoids
    excessive memory allocation on corrupted files.
    + libtiff/tif_dirwrite.c: in TIFFWriteDirectoryTagCheckedXXXX()
    functions associated with LONG8/SLONG8 data type, replace
    assertion that the file is BigTIFF, by a non-fatal error.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2712
    + libtiff/tif_read.c: TIFFStartTile(): set tif_rawcc to
    tif_rawdataloaded when it is set. Similarly to
    TIFFStartStrip(). This issue was revealed by the change of
    2017-06-30 in TIFFFileTile(), limiting the number of bytes
    read. But it could probably have been hit too in
    CHUNKY_STRIP_READ_SUPPORT mode previously. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2454
    + libtiff/tif_error.c, tif_warning.c: correctly use va_list
    when both an old-style and new-style warning/error handlers
    are installed. Patch by Paavo Helde (sent on the mailing list)
    + libtiff/tif_getimage.c: use _TIFFReadTileAndAllocBuffer().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2470
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedTileAndAllocBuffer() and
    _TIFFReadTileAndAllocBuffer() variants of
    TIFFReadEncodedTile() and TIFFReadTile() that allocates the
    decoded buffer only after a first successful TIFFFillTile().
    This avoids excessive memory allocation on corrupted files.
    + libtiff/tif_pixarlog.c: avoid excessive memory allocation on
    decoding when RowsPerStrip tag is not defined (and thus
    td_rowsperstrip == UINT_MAX) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2554
    + libtiff/tif_lzw.c: fix 4.0.8 regression in the decoding of
    old-style LZW compressed files.
    + libtiff/tif_lzw.c: fix potential out-of-buffer read on 1-byte
    LZW strips. Crashing issue only on memory mapped files, where
    the strip offset is the last byte of the file, and the file
    size is a multiple of one page size on the CPU architecture
    (typically 4096)
    + libtiff/tif_dir.c: avoid potential null pointer dereference
    in _TIFFVGetField() on corrupted TIFFTAG_NUMBEROFINKS tag
    instance.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2713
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + libtiff/tif_read.c: TIFFFillStrip() / TIFFFillTile().
    Complementary fix for
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 in the
    isMapped() case, so as to avoid excessive memory allocation
    when we need a temporary buffer but the file is truncated.
    + libtiff/tif_read.c: in TIFFFetchStripThing(), only grow the
    arrays that hold StripOffsets/StripByteCounts, when they are
    smaller than the expected number of striles, up to 1 million
    striles, and error out beyond. Can be tweaked by setting the
    environment variable LIBTIFF_STRILE_ARRAY_MAX_RESIZE_COUNT.
    This partially goes against a change added on 2002-12-17 to
    accept those arrays of wrong sizes, but is needed to avoid
    denial of services. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2350
    + libtiff/tif_read.c: add protection against excessive memory
    allocation attempts in TIFFReadDirEntryArray() on short files.
    Effective for mmap'ed case. And non-mmap'ed case, but
    restricted to 64bit builds. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2675
    + libtiff/tif_luv.c: LogLuvInitState(): avoid excessive memory
    allocation when RowsPerStrip tag is missing. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2683
    + libtiff/tif_getimage.c: gtTileContig() and gtTileSeparate():
    properly break from loops on error when stoponerr is set,
    instead of going on iterating on row based loop.
    + libtiff/tif_getimage.c: fix fromskew computation when
    to-be-skipped pixel number is not a multiple of the horizontal
    subsampling, and also in some other cases. Impact
    putcontig8bitYCbCr44tile, putcontig8bitYCbCr42tile,
    putcontig8bitYCbCr41tile, putcontig8bitYCbCr21tile and
    putcontig8bitYCbCr12tile Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2637 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2691
    + libtiff/tif_luv.c: further reduce memory requirements for
    temporary buffer when RowsPerStrip &gt;= image_length in
    LogLuvInitState() and LogL16InitState(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2700
    + libtiff/tif_dirwrite.c: replace assertion related to not
    finding the SubIFD tag by runtime check (in
    TIFFWriteDirectorySec()) Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2727
    + libtiff/tif_dirwrite.c: replace assertion to tag value not
    fitting on uint32 when selecting the value of SubIFD tag by
    runtime check (in TIFFWriteDirectoryTagSubifd()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2728
    + libtiff/tif_jpeg.c: accept reading the last strip of a JPEG
    compressed file if the codestream height is larger than the
    truncated height of the strip. Emit a warning in this
    situation since this is non compliant.
    + libtiff/tiffiop.h, tif_aux.c: redirect SeekOK() macro to a
    _TIFFSeekoK() function that checks if the offset is not
    bigger than INT64_MAX, so as to avoid a -1 error return code
    of TIFFSeekFile() to match a required seek to UINT64_MAX/-1.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2726
    + libtiff/tif_dirread.c: add NULL check to avoid likely false
    positive null-pointer dereference warning by CLang Static
    Analyzer.
    + libtiff/libtiff.def: add TIFFReadRGBAStripExt and
    TIFFReadRGBATileExt Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2735
    + libtiff/tif_jpeg.c: add compatibility with libjpeg-turbo
    1.5.2 that honours max_memory_to_use &gt; 0. Cf
    https://github.com/libjpeg-turbo/libjpeg-turbo/issues/162
    + libtiff/tif_getimage.c: avoid floating point division by zero
    in initCIELabConversion() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3733
  * Changes in the tools:
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + tools/tiffset.c: fix setting a single value for the
    ExtraSamples tag (and other tags with variable number of
    values). So 'tiffset -s ExtraSamples 1 X'. This only worked
    when setting 2 or more values, but not just one.
    + tools/fax2tiff.c (_FAX_Client_Data): Pass FAX_Client_Data as
    the client data. This client data is not used at all at the
    moment, but it makes the most sense. Issue that the value of
    client_data.fd was passed where a pointer is expected.
    + tools/tiff2pdf.c (t2p_sample_realize_palette): Fix possible
    arithmetic overflow in bounds checking code and eliminate
    comparison between signed and unsigned type.
    + tools/tiff2bw.c (main): Free memory allocated in the tiff2bw
    program. This is in response to the report associated with
    CVE-2017-16232, bsc#1069213 but does not solve the extremely
    high memory usage with the associated POC file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Fix check section:
  + Make sure to get back to the right directory after chdir to
    'tools', or we can't run the 2nd test suite.
  + Fix typo: the tests are located in a directory called 'test',
    not 'tests'.</changelog>
  <changelog author="mvetter@suse.com" date="1518782400">- bsc#1046077: Add tiff-4.0.9-bsc1046077-CVE-2017-9935.patch
  Fix Heap-based buffer overflow in t2p_write_pdf</changelog>
  <changelog author="mvetter@suse.com" date="1519128000">- bsc#1081690: Add tiff-4.0.9-bsc1081690-CVE-2018-5784.patch
  Fix uncontrolled resource consumption in TIFFSetDirectory</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- security update
  * CVE-2018-10963 [bsc#1092949]
    + tiff-CVE-2018-10963.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526644800">- security update
  * CVE-2017-18013 [bsc#1074317]
    + tiff-CVE-2017-18013.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113600">- security update
  * CVE-2018-7456 [bsc#1082825]
    + tiff-CVE-2018-7456.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113601">- security update
  * CVE-2017-11613 [bsc#1082332]
    + tiff-CVE-2017-11613.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528200000">- security update
  * CVE-2018-8905 [bsc#1086408]
    + tiff-CVE-2018-8905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534334400">- security update
  * CVE-2018-10779 [bsc#1092480]
    + tiff-CVE-2018-10779.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
</package>
<package pkgid="59325e1606bb1ba55c063ecfd88914235f7b797dd509dddfdb92877af550eca2" name="libtiff-devel-32bit" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="lp150.4.9.1"/>
  <changelog author="fstrba@suse.com" date="1480420800">- Upgrade to upstream release 4.0.7
  * libtiff/tif_aux.c
    + Fix crash in TIFFVGetFieldDefaulted() when requesting
    Predictor tag and that the zip/lzw codec is not configured.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2591
  * libtiff/tif_compress.c
    + Make TIFFNoDecode() return 0 to indicate an error and make
    upper level read routines treat it accordingly. (linked to the
    test case of http://bugzilla.maptools.org/show_bug.cgi?id=2517)
  * libtiff/tif_dir.c
    + Discard values of SMinSampleValue and SMaxSampleValue when
    they have been read and the value of SamplesPerPixel is
    changed afterwards (like when reading a OJPEG compressed image
    with a missing SamplesPerPixel tag, and whose photometric is
    RGB or YCbCr, forcing SamplesPerPixel being 3). Otherwise when
    rewriting the directory (for example with tiffset, we will
    expect 3 values whereas the array had been allocated with just
    one), thus causing a out of bound read access. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658, bsc#974840)
  * libtiff/tif_dirread.c
    + In TIFFFetchNormalTag(), do not dereference NULL pointer when
    values of tags with TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII
    access are 0-byte arrays. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2593 (regression
    introduced by previous fix done on 2016-11-11 for
    CVE-2016-9297, bsc#1010161). Assigned as CVE-2016-9448,
    bsc#1011103
    + In TIFFFetchNormalTag(), make sure that values of tags with
    TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII access are null
    terminated, to avoid potential read outside buffer in
    _TIFFPrintField(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2590
    (CVE-2016-9297, bsc#1010161)
    + Initialize doubledata at line 3693 to NULL to please MSVC 2013
    + Prevent reading ColorMap or TransferFunction if
    BitsPerPixel &gt; 24, so as to avoid huge memory allocation and
    file read attempts
    + Reject images with OJPEG compression that have no
    TileOffsets/StripOffsets tag, when OJPEG compression is
    disabled. Prevent null pointer dereference in
    TIFFReadRawStrip1() and other functions that expect
    td_stripbytecount to be non NULL. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2585
    + When compiled with DEFER_STRILE_LOAD, fix regression, when
    reading a one-strip file without a StripByteCounts tag.
    + Workaround false positive warning of Clang Static Analyzer
    about null pointer dereference in TIFFCheckDirOffset().
  * libtiff/tif_dirwrite.c
    + Avoid null pointer dereference on td_stripoffset when writing
    directory, if FIELD_STRIPOFFSETS was artificially set for a
    hack case in OJPEG case. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658,
    bsc#974840)
    + Fix truncation to 32 bit of file offsets in TIFFLinkDirectory()
    and TIFFWriteDirectorySec() when aligning directory offsets on
    an even offset (affects BigTIFF).
  * libtiff/tif_dumpmode.c
    + DumpModeEncode() should return 0 in case of failure so that
    the above mentionned functions detect the error.
  * libtiff/tif_fax3.c
    + remove dead assignment in Fax3PutEOLgdal().
  * libtiff/tif_fax3.h
    + make Param member of TIFFFaxTabEnt structure a uint16 to
    reduce size of the binary.
  * libtiff/tif_getimage.c
    + Fix out-of-bound reads in TIFFRGBAImage interface in case of
    unsupported values of SamplesPerPixel/ExtraSamples for
    LogLUV/CIELab. Add explicit call to TIFFRGBAImageOK() in
    TIFFRGBAImageBegin(). Fix CVE-2015-8665 and CVE-2015-8683.
    + Fix some benign warnings which appear in 64-bit compilation
    under Microsoft Visual Studio of the form "Arithmetic
    overflow: 32-bit value is shifted, then cast to 64-bit value.
    Results might not be an expected value."
    + TIFFRGBAImageOK: Reject attempts to read floating point images.
  * libtiff/tif_luv.c
    + Fix potential out-of-bound writes in decode functions in non
    debug builds by replacing assert()s by regular if checks
    (http://bugzilla.maptools.org/show_bug.cgi?id=2522). Fix
    potential out-of-bound reads in case of short input data.
    + Validate that for COMPRESSION_SGILOG and PHOTOMETRIC_LOGL,
    there is only one sample per pixel. Avoid potential invalid
    memory write on corrupted/unexpected images when using the
    TIFFRGBAImageBegin() interface
  * libtiff/tif_next.c
    + Fix potential out-of-bound write in NeXTDecode()
    (http://bugzilla.maptools.org/show_bug.cgi?id=2508)
  * libtiff/tif_pixarlog.c
    + Avoid zlib error messages to pass a NULL string to %s
    formatter, which is undefined behaviour in sprintf().
    + Fix out-of-bounds write vulnerabilities in heap allocated
    buffers. Reported as MSVR 35094.
    + Fix potential buffer write overrun in PixarLogDecode() on
    corrupted/unexpected images (CVE-2016-5875, bsc#987351)
    + Fix write buffer overflow in PixarLogEncode if more input
    samples are provided than expected by PixarLogSetupEncode.
    Idea based on libtiff-CVE-2016-3990.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, but with different and simpler
    check. (http://bugzilla.maptools.org/show_bug.cgi?id=2544,
    bsc#975069)
  * libtiff/tif_predict.c
    + PredictorSetup: Enforce bits-per-sample requirements of
    floating point predictor (3). Fixes CVE-2016-3622 "Divide By
    Zero in the tiff2rgba tool." (bsc#974449)
  * libtiff/tif_predict.h, libtiff/tif_predict.c
    + Replace assertions by runtime checks to avoid assertions in
    debug mode, or buffer overflows in release mode. Can happen
    when dealing with unusual tile size like YCbCr with
    subsampling. Reported as MSVR 35105.
  * libtiff/tif_read.c
    + Fix out-of-bounds read on memory-mapped files in
    TIFFReadRawStrip1() and TIFFReadRawTile1() when stripoffset
    is beyond tmsize_t max value
    + Make TIFFReadEncodedStrip() and TIFFReadEncodedTile() directly
    use user provided buffer when no compression (and other
    conditions) to save a memcpy().
  * libtiff/tif_strip.c
    + Make TIFFNumberOfStrips() return the td-&gt;td_nstrips value when
    it is non-zero, instead of recomputing it. This is needed in
    TIFF_STRIPCHOP mode where td_nstrips is modified. Fixes a read
    outsize of array in tiffsplit (or other utilities using
    TIFFNumberOfStrips()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2587
    (CVE-2016-9273, bsc#1010163)
  * libtiff/tif_write.c
    + Fix issue in error code path of TIFFFlushData1() that didn't
    reset the tif_rawcc and tif_rawcp members. I'm not completely
    sure if that could happen in practice outside of the odd
    behaviour of t2p_seekproc() of tiff2pdf). The report points
    that a better fix could be to check the return value of
    TIFFFlushData1() in places where it isn't done currently, but
    it seems this patch is enough. Reported as MSVR 35095.
    + Make TIFFWriteEncodedStrip() and TIFFWriteEncodedTile()
    directly use user provided buffer when no compression to save
    a memcpy().
    + TIFFWriteEncodedStrip() and TIFFWriteEncodedTile() should
    return -1 in case of failure of tif_encodestrip() as documented
  * tools/fax2tiff.D    c
    + Fix segfault when specifying -r without argument. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2572
  * tools/Makefile.am
    + The libtiff tools bmp2tiff, gif2tiff, ras2tiff, sgi2tiff,
    sgisv, and ycbcr are completely removed from the distribution.
    The libtiff tools rgb2ycbcr and thumbnail are only built in
    the build tree for testing. Old files are put in new 'archive'
    subdirectory of the source repository, but not in
    distribution archives. These changes are made in order to
    lessen the maintenance burden.
  * tools/rgb2ycbcr.c
    + Validate values of -v and -h parameters to avoid potential
    divide by zero. Fixes CVE-2016-3623, bsc#974618
    (http://bugzilla.maptools.org/show_bug.cgi?id=2569)
  * tools/tiff2bw.c
    + Fix weight computation that could result of color value
    overflow (no security implication). Fix
    http://bugzilla.maptools.org/show_bug.cgi?id=2550.
  * tools/tiff2pdf.c
    + Avoid undefined behaviour related to overlapping of source and
    destination buffer in memcpy() call in
    t2p_sample_rgbaa_to_rgb() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2577
    + Fix out-of-bounds write vulnerabilities in heap allocate buffer
    in t2p_process_jpeg_strip(). Reported as MSVR 35098.
    + Fix potential integer overflows on 32 bit builds in
    t2p_read_tiff_size() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2576
    + Fix read -largely- outsize of buffer in
    t2p_readwrite_pdf_image_tile(), causing crash, when reading a
    JPEG compressed image with TIFFTAG_JPEGTABLES length being one.
    Reported as MSVR 35101. CVE-2016-9453, bsc#1011107
    + Fix write buffer overflow of 2 bytes on JPEG compressed images.
    Reported as TALOS-CAN-0187, CVE-2016-5652, bsc#1007280. Also
    prevents writing 2 extra uninitialized bytes to the file
    stream.
  * tools/tiff2rgba.c
    + Fix integer overflow in size of allocated buffer, when -b mode
    is enabled, that could result in out-of-bounds write. Based
    initially on patch tiff-CVE-2016-3945.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, with correction for invalid
    tests that rejected valid files.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2545, bsc#974614)
  * tools/tiffcp.c
    + Fix out-of-bounds write on tiled images with odd tile width vs
    image width. Reported as MSVR 35103. (bsc#1011841,
    CVE-2016-9538)
    + Fix read of undefined variable in case of missing required
    tags. Found on test case of MSVR 35100.
  * tools/tiffcrop.c
    + Avoid access outside of stack allocated array on a tiled
    separate TIFF with more than 8 samples per pixel.
    (CVE-2016-5321, CVE-2016-5323,
    http://bugzilla.maptools.org/show_bug.cgi?id=2558,
    http://bugzilla.maptools.org/show_bug.cgi?id=2559, bsc#984813,
    bsc#984815)
    + Fix memory leak in (recent) error code path. Fixes Coverity
    1394415.
    + Fix multiple uint32 overflows in writeBufferToSeparateStrips(),
    writeBufferToContigTiles() and writeBufferToSeparateTiles()
    that could cause heap buffer overflows. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2592
    + Fix out-of-bound read of up to 3 bytes in
    readContigTilesIntoBuffer(). Reported as MSVR 35092.
    + Fix out-of-bounds write in loadImage(). From patch
    libtiff-CVE-2016-3991.patch from
    libtiff-4.0.3-25.el7_2.src.rpm
    (http://bugzilla.maptools.org/show_bug.cgi?id=2543, bsc#975070)
    + Fix read of undefined buffer in readContigStripsIntoBuffer()
    due to uint16 overflow. Reported as MSVR 35100. (bsc#1011841,
    CVE-2016-9538)
    + Fix various out-of-bounds write vulnerabilities in heap or
    stack allocated buffers. Reported as MSVR 35093, MSVR 35096
    and MSVR 35097.
    + readContigTilesIntoBuffer: Fix signed/unsigned comparison
    warning.
  * tools/tiffdump.c
    + Fix a few misaligned 64-bit reads warned by -fsanitize
    + ReadDirectory: Remove uint32 cast to_TIFFmalloc() argument
    which resulted in Coverity report. Added more mutiplication
    overflow checks
  * tools/tiffinfo.c
    + Fix out-of-bound read on some tiled images.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2517)
    + TIFFReadContigTileData: Fix signed/unsigned comparison warning.
    + TIFFReadSeparateTileData: Fix signed/unsigned comparison
    warning.
- Removed patches:
  * tiff-4.0.4-uninitialized_mem_NeXTDecode.patch
  * tiff-4.0.6-CVE-2015-8782.patch
  * tiff-4.0.6-CVE-2016-3186.patch
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Fixed in the upsteam release
- Changed patch:
  * tiff-4.0.6-CVE-2015-7554.patch -&gt; tiff-4.0.7-CVE-2015-7554.patch
  - Rediffed to the changed context</changelog>
  <changelog author="idonmez@suse.com" date="1482148800">- Update homepage</changelog>
  <changelog author="jengelh@inai.de" date="1482148801">- Drop --with-pic, this is only for static libs (which are not built)
- Update descriptions</changelog>
  <changelog author="fstrba@suse.com" date="1484308800">- Added patch:
  * tiff-4.0.7-CVE-2017-5225.patch
  - Upstream fix for CVE-2017-5225, bsc#1019611: heap buffer
    overflow in tools/tiffcp via a crafted BitsPerSample value</changelog>
  <changelog author="fstrba@suse.com" date="1486036800">- Added patch:
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  - Fix a regression introduced in 4.0.7 (bsc#1022103)
  - http://bugzilla.maptools.org/show_bug.cgi?id=2636</changelog>
  <changelog author="fstrba@suse.com" date="1490788800">- Added patches:
  * tiff-CVE-2016-10266.patch
    + Upstream fix for CVE-2016-10266, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031263)
  * tiff-CVE-2016-10267.patch
    + Upstream fix for CVE-2016-10267, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031262)
  * tiff-CVE-2016-10268.patch
    + Upstream fix for CVE-2016-10268, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031255)
  * tiff-CVE-2016-10269.patch
    + Upstream fix for CVE-2016-10269, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031254)
  * tiff-CVE-2016-10270.patch
    + Upstream fix for CVE-2016-10270, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031250)
  * tiff-CVE-2016-10271.patch
    + Upstream fix for CVE-2016-10271, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read and buffer overflow) or possibly have unspecified
    other impact via a crafted TIFF image (bsc#1031249)
  * tiff-CVE-2016-10272.patch
    + Upstream fix for CVE-2016-10272, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    overflow) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031247)</changelog>
  <changelog author="fstrba@suse.com" date="1497960000">- Upgrade to upstream release 4.0.8
  * libtiff/tif_getimage.c, libtiff/tif_open.c
    + add parenthesis to fix cppcheck clarifyCalculation warnings
  * libtiff/tif_predict.c, libtiff/tif_print.c
    + fix printf unsigned vs signed formatting (cppcheck
    invalidPrintfArgType_uint warnings)
  * libtiff/tif_read.c, libtiff/tiffiop.h
    + fix uint32 overflow in TIFFReadEncodedStrip() that caused an
    integer division by zero. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2596
  * libtiff/tif_pixarlog.c, libtiff/tif_luv.c
    + fix heap-based buffer overflow on generation of PixarLog / LUV
    compressed files, with ColorMap, TransferFunction attached and
    nasty plays with bitspersample. The fix for LUV has not been
    tested, but suffers from the same kind of issue of PixarLog.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2604
  * libtiff/tif_strip.c
    + revert the change in TIFFNumberOfStrips() done for
    http://bugzilla.maptools.org/show_bug.cgi?id=2587 /
    CVE-2016-9273 since the above change is a better fix that
    makes it unnecessary.
  * libtiff/tif_dirread.c
    + modify ChopUpSingleUncompressedStrip() to instanciate compute
    ntrips as TIFFhowmany_32(td-&gt;td_imagelength, rowsperstrip),
    instead of a logic based on the total size of data. Which is
    faulty is the total size of data is not sufficient to fill the
    whole image, and thus results in reading outside of the
    StripByCounts/StripOffsets arrays when using
    TIFFReadScanline(). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2608.
  * libtiff/tif_ojpeg.c
    + make OJPEGDecode() early exit in case of failure in
    OJPEGPreDecode(). This will avoid a divide by zero, and
    potential other issues. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2611
  * libtiff/tif_write.c
    + fix misleading indentation as warned by GCC.
  * libtiff/tif_fax3.h
    + revert change done on 2016-01-09 that made Param member of
    TIFFFaxTabEnt structure a uint16 to reduce size of the
    binary. It happens that the Hylafax software uses the tables
    that follow this typedef (TIFFFaxMainTable, TIFFFaxWhiteTable,
    TIFFFaxBlackTable), although they are not in a public libtiff
    header. Raised by Lee Howard.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2636
  * libtiff/tiffio.h, libtiff/tif_getimage.c
    + add TIFFReadRGBAStripExt() and TIFFReadRGBATileExt() variants
    of the functions without ext, with an extra argument to control
    the stop_on_error behaviour.
  * libtiff/tif_getimage.c
    + fix potential memory leaks in error code path of
    TIFFRGBAImageBegin().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2627
  * libtiff/tif_jpeg.c
    + increase libjpeg max memory usable to 10 MB instead of libjpeg
    1MB default. This helps when creating files with "big" tile,
    without using libjpeg temporary files.
    Related to https://trac.osgeo.org/gdal/ticket/6757
  * libtiff/tif_jpeg.c
    + avoid integer division by zero in JPEGSetupEncode() when
    horizontal or vertical sampling is set to 0.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2653,
    bsc#1033127, CVE-2017-7595
  * libtiff/tif_dirwrite.c
    + in TIFFWriteDirectoryTagCheckedRational, replace assertion by
    runtime check to error out if passed value is strictly
    negative.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2535,
    bsc#1038438, CVE-2016-10371
  * libtiff/tif_dirread.c
    + avoid division by floating point 0 in
    TIFFReadDirEntryCheckedRational() and
    TIFFReadDirEntryCheckedSrational(), and return 0 in that case
    (instead of infinity as before presumably) Apparently some
    sanitizers do not like those divisions by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2644,
    bsc#1033118, CVE-2017-7598
  * libtiff/tif_dir.c, tif_dirread.c, tif_dirwrite.c
    + implement various clampings of double to other data types to
    avoid undefined behaviour if the output range isn't big enough
    to hold the input value.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2643
    http://bugzilla.maptools.org/show_bug.cgi?id=2642
    http://bugzilla.maptools.org/show_bug.cgi?id=2646
    http://bugzilla.maptools.org/show_bug.cgi?id=2647,
    bsc#1033126, CVE-2017-7596, bsc#1033120, CVE-2017-7597,
    bsc#1033113, CVE-2017-7599, bsc#1033112, CVE-2017-7600,
  * libtiff/tif_jpeg.c
    + validate BitsPerSample in JPEGSetupEncode() to avoid undefined
    behaviour caused by invalid shift exponent.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2648,
    bsc#1033111, CVE-2017-7601
  * libtiff/tif_read.c
    + avoid potential undefined behaviour on signed integer addition
    in TIFFReadRawStrip1() in isMapped() case.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2650,
    bsc#1033109, CVE-2017-7602
  * libtiff/tif_getimage.c
    + add explicit uint32 cast in putagreytile to avoid
    UndefinedBehaviorSanitizer warning. Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2658,
    bsc#1033131, CVE-2017-7592
  * libtiff/tif_read.c
    + TIFFReadBufferSetup(): use _TIFFcalloc() to zero initialize
    tif_rawdata.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2651,
    bsc#1033129, CVE-2017-7593
  * libtiff/tiffio.h, tif_unix.c, tif_win32.c, tif_vms.c
    + add _TIFFcalloc()
  * libtiff/tif_luv.c, tif_lzw.c, tif_packbits.c
    + return 0 in Encode functions instead of -1 when
    TIFFFlushData1() fails.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2130
  * libtiff/tif_ojpeg.c
    + fix leak in OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable when read fails. Patch by
    Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2659,
    bsc#1033128, CVE-2017-7594
  * libtiff/tif_jpeg.c
    + only run JPEGFixupTagsSubsampling() if the YCbCrSubsampling
    tag is not explicitly present. This helps a bit to reduce the
    I/O amount when the tag is present (especially on cloud hosted
    files).
  * libtiff/tif_lzw.c
    + in LZWPostEncode(), increase, if necessary, the code bit-width
    after flushing the remaining code and before emitting the EOI
    code. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=1982
  * libtiff/tif_pixarlog.c
    + fix memory leak in error code path of PixarLogSetupDecode().
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2665
  * libtiff/tif_fax3.c, tif_predict.c, tif_getimage.c
    + fix GCC 7 -Wimplicit-fallthrough warnings.
  * libtiff/tif_dirread.c
    + fix memory leak in non DEFER_STRILE_LOAD mode (ie default)
    when there is both a StripOffsets and TileOffsets tag, or a
    StripByteCounts and TileByteCounts
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2689,
    bsc#1042805, CVE-2017-9403)
  * libtiff/tif_ojpeg.c
    + fix potential memory leak in
    OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2670
  * libtiff/tif_fax3.c
    + avoid crash in Fax3Close() on empty file. Patch by Alan
    Coopersmith + complement by myself.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2673
  * libtiff/tif_read.c
    + TIFFFillStrip(): add limitation to the number of bytes read
    in case td_stripbytecount[strip] is bigger than reasonable,
    so as to avoid excessive memory allocation.
  * libtiff/tif_zip.c, tif_pixarlog.c, tif_predict.c
    + fix memory leak when the underlying codec (ZIP, PixarLog)
    succeeds its setupdecode() method, but PredictorSetup fails.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStrip() and TIFFFillTile(): avoid excessive memory
    allocation in case of shorten files. Only effective on 64 bit
    builds and non-mapped cases.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStripPartial() / TIFFSeek(), avoid potential integer
    overflows with read_ahead in CHUNKY_STRIP_READ_SUPPORT mode.
    Should especially occur on 32 bit platforms.
  * libtiff/tif_read.c
    + TIFFFillStripPartial()
    + avoid excessive memory allocation in case of shorten files.
    Only effective on 64 bit builds.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + update tif_rawcc in CHUNKY_STRIP_READ_SUPPORT mode with
    tif_rawdataloaded when calling TIFFStartStrip() or
    TIFFFillStripPartial(). This avoids reading beyond tif_rawdata
    when bytecount &gt; tif_rawdatasize. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1545.
    Credit to OSS-Fuzz
  * libtiff/tif_color.c
    + avoid potential int32 overflow in TIFFYCbCrToRGBInit() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1533
    Credit to OSS-Fuzz
  * libtiff/tif_pixarlog.c, tif_luv.c
    + avoid potential int32 overflows in multiply_ms() and add_ms().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1558
    Credit to OSS-Fuzz
  * libtiff/tif_packbits.c
    + fix out-of-buffer read in PackBitsDecode() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1563
    Credit to OSS-Fuzz
  * libtiff/tif_luv.c
    + LogL16InitState(): avoid excessive memory allocation when
    RowsPerStrip tag is missing.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_lzw.c
    + update dec_bitsleft at beginning of LZWDecode(), and update
    tif_rawcc at end of LZWDecode(). This is needed to properly
    work with the latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode.
  * libtiff/tif_pixarlog.c
    + PixarLogDecode(): resync tif_rawcp with next_in and tif_rawcc
    with avail_in at beginning and end of function, similarly to
    what is done in LZWDecode(). Likely needed so that it works
    properly with latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode. But untested...
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): add basic validation of luma and
    refBlackWhite coefficients (just check they are not NaN for
    now), to avoid potential float to int overflows. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1663
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): stricter validation for refBlackWhite
    coefficients values. To avoid invalid float-&gt;int32 conversion.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1718
    Credit to OSS Fuzz
  * tools/fax2tiff.c (main)
    + Applied patch by Joerg Ahrens to fix passing client data for
    Win32 builds using tif_win32.c (USE_WIN32_FILEIO defined) for
    file I/O. Patch was provided via email on November 20, 2016.
  * tools/tiffcp.c
    + avoid uint32 underflow in cpDecodedStrips that can cause
    various issues, such as buffer overflows in the library.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2598
  * tools/tiffcrop.c
    + fix readContigStripsIntoBuffer() in -i (ignore) mode so that
    the output buffer is correctly incremented to avoid write
    outside bounds. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2620
  * tools/tiffcrop.c
    + add 3 extra bytes at end of strip buffer in
    readSeparateStripsIntoBuffer() to avoid read outside of heap
    allocated buffer. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2621
  * tools/tiffcrop.c
    + fix integer division by zero when BitsPerSample is missing.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2619
  * tools/tiffinfo.c
    + fix null pointer dereference in -r mode when the image has no
    StripByteCount tag. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2594
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2597
  * tools/tif_dir.c
    + when TIFFGetField(, TIFFTAG_NUMBEROFINKS, ) is called, limit
    the return number of inks to SamplesPerPixel, so that code
    that parses ink names doesn't go past the end of the buffer.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2599
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2607
  * tools/tiffcp.c
    + fix uint32 underflow/overflow that can cause heap-based buffer
    overflow. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2610
  * tools/tiffcp.c
    + replace assert( (bps % 8) == 0 ) by a non assert check.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2605
  * tools/tiff2ps.c
    + fix 2 heap-based buffer overflows (in PSDataBW and
    PSDataColorContig). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2633 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2634.
  * tools/tiff2pdf.c
    + prevent heap-based buffer overflow in -j mode on a paletted
    image. Note: this fix errors out before the overflow happens.
    There could probably be a better fix.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2635
  * tools/tiff2pdf.c
    + fix wrong usage of memcpy() that can trigger unspecified behaviour.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2638
  * tools/tiff2pdf.c
    + avoid potential invalid memory read in t2p_writeproc.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2639
  * tools/tiff2pdf.c
    + avoid potential heap-based overflow in t2p_readwrite_pdf_image_tile().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2640
  * tools/tiffcrop.c
    + remove extraneous TIFFClose() in error code path, that caused
    double free.
    Related to http://bugzilla.maptools.org/show_bug.cgi?id=2535
  * tools/tiffcp.c
    + error out cleanly in cpContig2SeparateByRow and
    cpSeparate2ContigByRow if BitsPerSample != 8 to avoid heap
    based overflow.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2656 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2657
  * tools/raw2tiff.c
    + avoid integer division by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2631
  * tools/tiff2ps.c
    + call TIFFClose() in error code paths.
  * tools/fax2tiff.c
    + emit appropriate message if the input file is empty. Patch by
    Alan Coopersmith.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2672
  * tools/tiff2bw.c
    + close TIFF handle in error code path.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2677
  * Other issues fixed:
    + bsc#1042804, CVE-2017-9404
- Removed patches:
  * tiff-4.0.7-CVE-2015-7554.patch
  * tiff-4.0.7-CVE-2017-5225.patch
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  * tiff-CVE-2016-10266.patch
  * tiff-CVE-2016-10267.patch
  * tiff-CVE-2016-10268.patch
  * tiff-CVE-2016-10269.patch
  * tiff-CVE-2016-10270.patch
  * tiff-CVE-2016-10271.patch
  * tiff-CVE-2016-10272.patch
    + Fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1511956800">- Upgrade to upstream release 4.0.9
  * Changes in the software configuration:
    + test/Makefile.am: Add some tests for tiff2bw.
    + .appveyor.yml, .travis.yml, build/travis-ci: apply patches
    0001-ci-Travis-script-improvements.patch and
    0002-ci-Invoke-helper-script-via-shell.patch by Roger Leigh
    + .travis.yml, build/travis-ci: new files from
    0001-ci-Add-Travis-support-for-Linux-builds-with-Autoconf.patch
    by Roger Leigh. This patch adds support for the Travis-CI
    service.
    + .appveyor.yml: new file from
    0002-ci-Add-AppVeyor-support.patch by Roger Leigh (sent to
    mailing list on 2017-06-08) This patch adds a .appveyor.yml
    file to the top-level. This allows one to opt in to having a
    branch built on Windows with Cygwin, MinGW and MSVC
    automatically when a branch is pushed to GitHub, GitLab,
    BitBucket or any other supported git hosting service.
    + CMakeLists.txt, test/CMakeLists.txt,
    test/TiffTestCommon.cmake: apply patch
    0001-cmake-Improve-Cygwin-and-MingGW-test-support.patch from
    Roger Leigh. This patch makes the CMake build system support
    running the tests with MinGW or  Cygwin.
    + test/tiffcp-lzw-compat.sh, test/images/quad-lzw-compat.tiff:
    new files to test old-style LZW decompression
    + test/common.sh, Makefile.am, CMakeList.txt: updated with above
    + test/Makefile.am: add missing reference to
    images/quad-lzw-compat.tiff to fix "make distcheck". Patch by
    Roger Leigh
    + nmake.opt: support a DEBUG=1 option, so as to adjust OPTFLAGS
    and use /MDd runtime in debug mode.
  * Changes in libtiff:
    + libtiff/tif_color.c: TIFFYCbCrToRGBInit(): stricter clamping
    to avoid int32 overflow in TIFFYCbCrtoRGB(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1844
    + libtiff/tif_getimage.c: initYCbCrConversion(): stricter
    validation for refBlackWhite coefficients values. To avoid
    invalid float-&gt;int32 conversion (when refBlackWhite[0] ==
    2147483648.f) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1907
    + libtiff/tif_dirinfo.c, tif_dirread.c: add
    _TIFFCheckFieldIsValidForCodec(), and use it in
    TIFFReadDirectory() so as to ignore fields whose tag is a
    codec-specified tag but this codec is not enabled. This avoids
    TIFFGetField() to behave differently depending on whether the
    codec is enabled or not, and thus can avoid stack based buffer
    overflows in a number of TIFF utilities such as tiffsplit,
    tiffcmp, thumbnail, etc. Patch derived from
    0063-Handle-properly-CODEC-specific-tags.patch
    (http://bugzilla.maptools.org/show_bug.cgi?id=2580) by Raphaël
    Hertzog.
    Fixes: http://bugzilla.maptools.org/show_bug.cgi?id=2580
    http://bugzilla.maptools.org/show_bug.cgi?id=2693
    http://bugzilla.maptools.org/show_bug.cgi?id=2625
    (CVE-2016-10095, bsc#1017690)
    http://bugzilla.maptools.org/show_bug.cgi?id=2564
    (CVE-2015-7554, bsc#960341)
    http://bugzilla.maptools.org/show_bug.cgi?id=2561
    (CVE-2016-5318, bsc#983436)
    http://bugzilla.maptools.org/show_bug.cgi?id=2499
    (CVE-2014-8128, bsc#969783)
    http://bugzilla.maptools.org/show_bug.cgi?id=2441
    http://bugzilla.maptools.org/show_bug.cgi?id=2433
    + libtiff/tif_swab.c: if DISABLE_CHECK_TIFFSWABMACROS is
    defined, do not do the #ifdef TIFFSwabXXX checks. Make it
    easier for GDAL to rename the symbols of its internal libtiff
    copy.
    + libtiff/tif_dirread.c: fix regression of libtiff 4.0.8 in
    ChopUpSingleUncompressedStrip() regarding update of newly
    single-strip uncompressed files whose bytecount is 0. Before
    the change of 2016-12-03, the condition bytecount==0 used to
    trigger an early exit/disabling of strip chop. Re-introduce
    that in update mode. Otherwise this cause later incorrect
    setting for the value of StripByCounts/StripOffsets.
    (https://trac.osgeo.org/gdal/ticket/6924)
    + libtiff/tif_dirread.c: TIFFFetchStripThing(): limit the
    number of items read in StripOffsets/StripByteCounts tags to
    the number of strips to avoid excessive memory allocation.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2215
    + libtiff/tif_getimage.c: avoid many (harmless) unsigned int
    overflows.
    + libtiff/tif_fax3.c: avoid unsigned int overflow in
    Fax3Encode2DRow(). Could potentially be a bug with huge rows.
    + libtiff/tif_jpeg.c: avoid (harmless) unsigned int overflow on
    tiled images.
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts() and BYTECOUNTLOOKSBAD when file is
    too short.
    + libtiff/tif_predict.c: decorate legitimate functions where
    unsigned int overflow occur with
    TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts()
    + libtiff/tiffiop.h: add TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    macro to disable CLang warnings raised by
  - fsanitize=undefined,unsigned-integer-overflow
    + libtiff/tif_jpeg.c: add anti-denial of service measure to
    avoid excessive CPU consumption on progressive JPEGs with a
    huge number of scans. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    Note: only affects libtiff since 2014-12-29 where support of
    non-baseline JPEG was added.
    + libtiff/tif_jpeg.c: error out at decoding time if anticipated
    libjpeg memory allocation is above 100 MB. libjpeg in case of
    multiple scans, which is allowed even in baseline JPEG, if
    components are spread over several scans and not
    interleavedin a single one, needs to allocate memory (or
    backing store) for the whole strip/tile. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    This limitation may be overriden by setting the
    LIBTIFF_ALLOW_LARGE_LIBJPEG_MEM_ALLOC environment variable, or
    recompiling libtiff with a custom value of
    TIFF_LIBJPEG_LARGEST_MEM_ALLOC macro.
    + libtiff/tif_jbig.c: fix memory leak in error code path of
    JBIGDecode()
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2706
    (CVE-2017-9936, bsc#1046073)
    + libtiff/tif_dirread.c: in TIFFReadDirEntryFloat(), check that
    a double value can fit in a float before casting.
    + libtiff/tiffiop.h, libtiff/tif_jpeg.c, libtiff/tif_jpeg_12.c,
    libtiff/tif_read.c: make TIFFReadScanline() works in
    CHUNKY_STRIP_READ_SUPPORT mode with JPEG stream with multiple
    scans. Also make configurable through a
    LIBTIFF_JPEG_MAX_ALLOWED_SCAN_NUMBER environment variable the
    maximum number of scans allowed. Defaults to 100.
    + libtiff/tif_read.c: TIFFFillTile(): add limitation to the
    number of bytes read in case td_stripbytecount[strip] is
    bigger than reasonable, so as to avoid excessive memory
    allocation (similarly to what was done for TIFFFileStrip() on
    2017-05-10)
    + libtiff/tif_getimage.c: use
    _TIFFReadEncodedStripAndAllocBuffer(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2433
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedStripAndAllocBuffer() function, variant of
    TIFFReadEncodedStrip() that allocates the decoded buffer only
    after a first successful TIFFFillStrip(). This avoids
    excessive memory allocation on corrupted files.
    + libtiff/tif_dirwrite.c: in TIFFWriteDirectoryTagCheckedXXXX()
    functions associated with LONG8/SLONG8 data type, replace
    assertion that the file is BigTIFF, by a non-fatal error.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2712
    + libtiff/tif_read.c: TIFFStartTile(): set tif_rawcc to
    tif_rawdataloaded when it is set. Similarly to
    TIFFStartStrip(). This issue was revealed by the change of
    2017-06-30 in TIFFFileTile(), limiting the number of bytes
    read. But it could probably have been hit too in
    CHUNKY_STRIP_READ_SUPPORT mode previously. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2454
    + libtiff/tif_error.c, tif_warning.c: correctly use va_list
    when both an old-style and new-style warning/error handlers
    are installed. Patch by Paavo Helde (sent on the mailing list)
    + libtiff/tif_getimage.c: use _TIFFReadTileAndAllocBuffer().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2470
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedTileAndAllocBuffer() and
    _TIFFReadTileAndAllocBuffer() variants of
    TIFFReadEncodedTile() and TIFFReadTile() that allocates the
    decoded buffer only after a first successful TIFFFillTile().
    This avoids excessive memory allocation on corrupted files.
    + libtiff/tif_pixarlog.c: avoid excessive memory allocation on
    decoding when RowsPerStrip tag is not defined (and thus
    td_rowsperstrip == UINT_MAX) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2554
    + libtiff/tif_lzw.c: fix 4.0.8 regression in the decoding of
    old-style LZW compressed files.
    + libtiff/tif_lzw.c: fix potential out-of-buffer read on 1-byte
    LZW strips. Crashing issue only on memory mapped files, where
    the strip offset is the last byte of the file, and the file
    size is a multiple of one page size on the CPU architecture
    (typically 4096)
    + libtiff/tif_dir.c: avoid potential null pointer dereference
    in _TIFFVGetField() on corrupted TIFFTAG_NUMBEROFINKS tag
    instance.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2713
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + libtiff/tif_read.c: TIFFFillStrip() / TIFFFillTile().
    Complementary fix for
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 in the
    isMapped() case, so as to avoid excessive memory allocation
    when we need a temporary buffer but the file is truncated.
    + libtiff/tif_read.c: in TIFFFetchStripThing(), only grow the
    arrays that hold StripOffsets/StripByteCounts, when they are
    smaller than the expected number of striles, up to 1 million
    striles, and error out beyond. Can be tweaked by setting the
    environment variable LIBTIFF_STRILE_ARRAY_MAX_RESIZE_COUNT.
    This partially goes against a change added on 2002-12-17 to
    accept those arrays of wrong sizes, but is needed to avoid
    denial of services. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2350
    + libtiff/tif_read.c: add protection against excessive memory
    allocation attempts in TIFFReadDirEntryArray() on short files.
    Effective for mmap'ed case. And non-mmap'ed case, but
    restricted to 64bit builds. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2675
    + libtiff/tif_luv.c: LogLuvInitState(): avoid excessive memory
    allocation when RowsPerStrip tag is missing. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2683
    + libtiff/tif_getimage.c: gtTileContig() and gtTileSeparate():
    properly break from loops on error when stoponerr is set,
    instead of going on iterating on row based loop.
    + libtiff/tif_getimage.c: fix fromskew computation when
    to-be-skipped pixel number is not a multiple of the horizontal
    subsampling, and also in some other cases. Impact
    putcontig8bitYCbCr44tile, putcontig8bitYCbCr42tile,
    putcontig8bitYCbCr41tile, putcontig8bitYCbCr21tile and
    putcontig8bitYCbCr12tile Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2637 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2691
    + libtiff/tif_luv.c: further reduce memory requirements for
    temporary buffer when RowsPerStrip &gt;= image_length in
    LogLuvInitState() and LogL16InitState(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2700
    + libtiff/tif_dirwrite.c: replace assertion related to not
    finding the SubIFD tag by runtime check (in
    TIFFWriteDirectorySec()) Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2727
    + libtiff/tif_dirwrite.c: replace assertion to tag value not
    fitting on uint32 when selecting the value of SubIFD tag by
    runtime check (in TIFFWriteDirectoryTagSubifd()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2728
    + libtiff/tif_jpeg.c: accept reading the last strip of a JPEG
    compressed file if the codestream height is larger than the
    truncated height of the strip. Emit a warning in this
    situation since this is non compliant.
    + libtiff/tiffiop.h, tif_aux.c: redirect SeekOK() macro to a
    _TIFFSeekoK() function that checks if the offset is not
    bigger than INT64_MAX, so as to avoid a -1 error return code
    of TIFFSeekFile() to match a required seek to UINT64_MAX/-1.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2726
    + libtiff/tif_dirread.c: add NULL check to avoid likely false
    positive null-pointer dereference warning by CLang Static
    Analyzer.
    + libtiff/libtiff.def: add TIFFReadRGBAStripExt and
    TIFFReadRGBATileExt Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2735
    + libtiff/tif_jpeg.c: add compatibility with libjpeg-turbo
    1.5.2 that honours max_memory_to_use &gt; 0. Cf
    https://github.com/libjpeg-turbo/libjpeg-turbo/issues/162
    + libtiff/tif_getimage.c: avoid floating point division by zero
    in initCIELabConversion() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3733
  * Changes in the tools:
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + tools/tiffset.c: fix setting a single value for the
    ExtraSamples tag (and other tags with variable number of
    values). So 'tiffset -s ExtraSamples 1 X'. This only worked
    when setting 2 or more values, but not just one.
    + tools/fax2tiff.c (_FAX_Client_Data): Pass FAX_Client_Data as
    the client data. This client data is not used at all at the
    moment, but it makes the most sense. Issue that the value of
    client_data.fd was passed where a pointer is expected.
    + tools/tiff2pdf.c (t2p_sample_realize_palette): Fix possible
    arithmetic overflow in bounds checking code and eliminate
    comparison between signed and unsigned type.
    + tools/tiff2bw.c (main): Free memory allocated in the tiff2bw
    program. This is in response to the report associated with
    CVE-2017-16232, bsc#1069213 but does not solve the extremely
    high memory usage with the associated POC file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Fix check section:
  + Make sure to get back to the right directory after chdir to
    'tools', or we can't run the 2nd test suite.
  + Fix typo: the tests are located in a directory called 'test',
    not 'tests'.</changelog>
  <changelog author="mvetter@suse.com" date="1518782400">- bsc#1046077: Add tiff-4.0.9-bsc1046077-CVE-2017-9935.patch
  Fix Heap-based buffer overflow in t2p_write_pdf</changelog>
  <changelog author="mvetter@suse.com" date="1519128000">- bsc#1081690: Add tiff-4.0.9-bsc1081690-CVE-2018-5784.patch
  Fix uncontrolled resource consumption in TIFFSetDirectory</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- security update
  * CVE-2018-10963 [bsc#1092949]
    + tiff-CVE-2018-10963.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526644800">- security update
  * CVE-2017-18013 [bsc#1074317]
    + tiff-CVE-2017-18013.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113600">- security update
  * CVE-2018-7456 [bsc#1082825]
    + tiff-CVE-2018-7456.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113601">- security update
  * CVE-2017-11613 [bsc#1082332]
    + tiff-CVE-2017-11613.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528200000">- security update
  * CVE-2018-8905 [bsc#1086408]
    + tiff-CVE-2018-8905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534334400">- security update
  * CVE-2018-10779 [bsc#1092480]
    + tiff-CVE-2018-10779.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
</package>
<package pkgid="e6429c9a51d7f6c7334881f29e8beb5797f0be8abef501848370c5e10a844c4d" name="libtiff-devel" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="lp150.4.3.1"/>
  <changelog author="fstrba@suse.com" date="1459944000">- Added patch:
  * tiff-4.0.6-CVE-2016-3186.patch
  - fix CVE-2016-3186: buffer overflow in gif2tiff [bsc#973340]</changelog>
  <changelog author="fstrba@suse.com" date="1468324800">- Added patches:
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  - Upstream commits to fix CVE-2016-5314 [bsc#984831],
    CVE-2016-5316 [bsc#984837], CVE-2016-5317 [bsc#984842],
    CVE-2016-5320 [bsc#984808] and CVE-2016-5875 [bsc#987351]</changelog>
  <changelog author="fstrba@suse.com" date="1472731200">- Added patches:
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  - Upstream commits to fix CVE-2016-3623 [bsc#974618],
    CVE-2016-3945 [bsc#974614], CVE-2016-3990 [bsc#975069],
    CVE-2016-3991 [bsc#975070]</changelog>
  <changelog author="fstrba@suse.com" date="1475755200">- Added patches:
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Upstream fixes for MSVR 35093, MSVR 35094, MSVR 35095,
    MSVR 35096, MSVR 35097, MSVR 35098.
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  - Enforce bits-per-sample requirements of floating point
    predictor. Fixes CVE-2016-3622 [bsc#974449]</changelog>
  <changelog author="fstrba@suse.com" date="1480420800">- Upgrade to upstream release 4.0.7
  * libtiff/tif_aux.c
    + Fix crash in TIFFVGetFieldDefaulted() when requesting
    Predictor tag and that the zip/lzw codec is not configured.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2591
  * libtiff/tif_compress.c
    + Make TIFFNoDecode() return 0 to indicate an error and make
    upper level read routines treat it accordingly. (linked to the
    test case of http://bugzilla.maptools.org/show_bug.cgi?id=2517)
  * libtiff/tif_dir.c
    + Discard values of SMinSampleValue and SMaxSampleValue when
    they have been read and the value of SamplesPerPixel is
    changed afterwards (like when reading a OJPEG compressed image
    with a missing SamplesPerPixel tag, and whose photometric is
    RGB or YCbCr, forcing SamplesPerPixel being 3). Otherwise when
    rewriting the directory (for example with tiffset, we will
    expect 3 values whereas the array had been allocated with just
    one), thus causing a out of bound read access. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658, bsc#974840)
  * libtiff/tif_dirread.c
    + In TIFFFetchNormalTag(), do not dereference NULL pointer when
    values of tags with TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII
    access are 0-byte arrays. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2593 (regression
    introduced by previous fix done on 2016-11-11 for
    CVE-2016-9297, bsc#1010161). Assigned as CVE-2016-9448,
    bsc#1011103
    + In TIFFFetchNormalTag(), make sure that values of tags with
    TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII access are null
    terminated, to avoid potential read outside buffer in
    _TIFFPrintField(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2590
    (CVE-2016-9297, bsc#1010161)
    + Initialize doubledata at line 3693 to NULL to please MSVC 2013
    + Prevent reading ColorMap or TransferFunction if
    BitsPerPixel &gt; 24, so as to avoid huge memory allocation and
    file read attempts
    + Reject images with OJPEG compression that have no
    TileOffsets/StripOffsets tag, when OJPEG compression is
    disabled. Prevent null pointer dereference in
    TIFFReadRawStrip1() and other functions that expect
    td_stripbytecount to be non NULL. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2585
    + When compiled with DEFER_STRILE_LOAD, fix regression, when
    reading a one-strip file without a StripByteCounts tag.
    + Workaround false positive warning of Clang Static Analyzer
    about null pointer dereference in TIFFCheckDirOffset().
  * libtiff/tif_dirwrite.c
    + Avoid null pointer dereference on td_stripoffset when writing
    directory, if FIELD_STRIPOFFSETS was artificially set for a
    hack case in OJPEG case. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658,
    bsc#974840)
    + Fix truncation to 32 bit of file offsets in TIFFLinkDirectory()
    and TIFFWriteDirectorySec() when aligning directory offsets on
    an even offset (affects BigTIFF).
  * libtiff/tif_dumpmode.c
    + DumpModeEncode() should return 0 in case of failure so that
    the above mentionned functions detect the error.
  * libtiff/tif_fax3.c
    + remove dead assignment in Fax3PutEOLgdal().
  * libtiff/tif_fax3.h
    + make Param member of TIFFFaxTabEnt structure a uint16 to
    reduce size of the binary.
  * libtiff/tif_getimage.c
    + Fix out-of-bound reads in TIFFRGBAImage interface in case of
    unsupported values of SamplesPerPixel/ExtraSamples for
    LogLUV/CIELab. Add explicit call to TIFFRGBAImageOK() in
    TIFFRGBAImageBegin(). Fix CVE-2015-8665 and CVE-2015-8683.
    + Fix some benign warnings which appear in 64-bit compilation
    under Microsoft Visual Studio of the form "Arithmetic
    overflow: 32-bit value is shifted, then cast to 64-bit value.
    Results might not be an expected value."
    + TIFFRGBAImageOK: Reject attempts to read floating point images.
  * libtiff/tif_luv.c
    + Fix potential out-of-bound writes in decode functions in non
    debug builds by replacing assert()s by regular if checks
    (http://bugzilla.maptools.org/show_bug.cgi?id=2522). Fix
    potential out-of-bound reads in case of short input data.
    + Validate that for COMPRESSION_SGILOG and PHOTOMETRIC_LOGL,
    there is only one sample per pixel. Avoid potential invalid
    memory write on corrupted/unexpected images when using the
    TIFFRGBAImageBegin() interface
  * libtiff/tif_next.c
    + Fix potential out-of-bound write in NeXTDecode()
    (http://bugzilla.maptools.org/show_bug.cgi?id=2508)
  * libtiff/tif_pixarlog.c
    + Avoid zlib error messages to pass a NULL string to %s
    formatter, which is undefined behaviour in sprintf().
    + Fix out-of-bounds write vulnerabilities in heap allocated
    buffers. Reported as MSVR 35094.
    + Fix potential buffer write overrun in PixarLogDecode() on
    corrupted/unexpected images (CVE-2016-5875, bsc#987351)
    + Fix write buffer overflow in PixarLogEncode if more input
    samples are provided than expected by PixarLogSetupEncode.
    Idea based on libtiff-CVE-2016-3990.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, but with different and simpler
    check. (http://bugzilla.maptools.org/show_bug.cgi?id=2544,
    bsc#975069)
  * libtiff/tif_predict.c
    + PredictorSetup: Enforce bits-per-sample requirements of
    floating point predictor (3). Fixes CVE-2016-3622 "Divide By
    Zero in the tiff2rgba tool." (bsc#974449)
  * libtiff/tif_predict.h, libtiff/tif_predict.c
    + Replace assertions by runtime checks to avoid assertions in
    debug mode, or buffer overflows in release mode. Can happen
    when dealing with unusual tile size like YCbCr with
    subsampling. Reported as MSVR 35105.
  * libtiff/tif_read.c
    + Fix out-of-bounds read on memory-mapped files in
    TIFFReadRawStrip1() and TIFFReadRawTile1() when stripoffset
    is beyond tmsize_t max value
    + Make TIFFReadEncodedStrip() and TIFFReadEncodedTile() directly
    use user provided buffer when no compression (and other
    conditions) to save a memcpy().
  * libtiff/tif_strip.c
    + Make TIFFNumberOfStrips() return the td-&gt;td_nstrips value when
    it is non-zero, instead of recomputing it. This is needed in
    TIFF_STRIPCHOP mode where td_nstrips is modified. Fixes a read
    outsize of array in tiffsplit (or other utilities using
    TIFFNumberOfStrips()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2587
    (CVE-2016-9273, bsc#1010163)
  * libtiff/tif_write.c
    + Fix issue in error code path of TIFFFlushData1() that didn't
    reset the tif_rawcc and tif_rawcp members. I'm not completely
    sure if that could happen in practice outside of the odd
    behaviour of t2p_seekproc() of tiff2pdf). The report points
    that a better fix could be to check the return value of
    TIFFFlushData1() in places where it isn't done currently, but
    it seems this patch is enough. Reported as MSVR 35095.
    + Make TIFFWriteEncodedStrip() and TIFFWriteEncodedTile()
    directly use user provided buffer when no compression to save
    a memcpy().
    + TIFFWriteEncodedStrip() and TIFFWriteEncodedTile() should
    return -1 in case of failure of tif_encodestrip() as documented
  * tools/fax2tiff.D    c
    + Fix segfault when specifying -r without argument. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2572
  * tools/Makefile.am
    + The libtiff tools bmp2tiff, gif2tiff, ras2tiff, sgi2tiff,
    sgisv, and ycbcr are completely removed from the distribution.
    The libtiff tools rgb2ycbcr and thumbnail are only built in
    the build tree for testing. Old files are put in new 'archive'
    subdirectory of the source repository, but not in
    distribution archives. These changes are made in order to
    lessen the maintenance burden.
  * tools/rgb2ycbcr.c
    + Validate values of -v and -h parameters to avoid potential
    divide by zero. Fixes CVE-2016-3623, bsc#974618
    (http://bugzilla.maptools.org/show_bug.cgi?id=2569)
  * tools/tiff2bw.c
    + Fix weight computation that could result of color value
    overflow (no security implication). Fix
    http://bugzilla.maptools.org/show_bug.cgi?id=2550.
  * tools/tiff2pdf.c
    + Avoid undefined behaviour related to overlapping of source and
    destination buffer in memcpy() call in
    t2p_sample_rgbaa_to_rgb() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2577
    + Fix out-of-bounds write vulnerabilities in heap allocate buffer
    in t2p_process_jpeg_strip(). Reported as MSVR 35098.
    + Fix potential integer overflows on 32 bit builds in
    t2p_read_tiff_size() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2576
    + Fix read -largely- outsize of buffer in
    t2p_readwrite_pdf_image_tile(), causing crash, when reading a
    JPEG compressed image with TIFFTAG_JPEGTABLES length being one.
    Reported as MSVR 35101. CVE-2016-9453, bsc#1011107
    + Fix write buffer overflow of 2 bytes on JPEG compressed images.
    Reported as TALOS-CAN-0187, CVE-2016-5652, bsc#1007280. Also
    prevents writing 2 extra uninitialized bytes to the file
    stream.
  * tools/tiff2rgba.c
    + Fix integer overflow in size of allocated buffer, when -b mode
    is enabled, that could result in out-of-bounds write. Based
    initially on patch tiff-CVE-2016-3945.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, with correction for invalid
    tests that rejected valid files.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2545, bsc#974614)
  * tools/tiffcp.c
    + Fix out-of-bounds write on tiled images with odd tile width vs
    image width. Reported as MSVR 35103. (bsc#1011841,
    CVE-2016-9538)
    + Fix read of undefined variable in case of missing required
    tags. Found on test case of MSVR 35100.
  * tools/tiffcrop.c
    + Avoid access outside of stack allocated array on a tiled
    separate TIFF with more than 8 samples per pixel.
    (CVE-2016-5321, CVE-2016-5323,
    http://bugzilla.maptools.org/show_bug.cgi?id=2558,
    http://bugzilla.maptools.org/show_bug.cgi?id=2559, bsc#984813,
    bsc#984815)
    + Fix memory leak in (recent) error code path. Fixes Coverity
    1394415.
    + Fix multiple uint32 overflows in writeBufferToSeparateStrips(),
    writeBufferToContigTiles() and writeBufferToSeparateTiles()
    that could cause heap buffer overflows. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2592
    + Fix out-of-bound read of up to 3 bytes in
    readContigTilesIntoBuffer(). Reported as MSVR 35092.
    + Fix out-of-bounds write in loadImage(). From patch
    libtiff-CVE-2016-3991.patch from
    libtiff-4.0.3-25.el7_2.src.rpm
    (http://bugzilla.maptools.org/show_bug.cgi?id=2543, bsc#975070)
    + Fix read of undefined buffer in readContigStripsIntoBuffer()
    due to uint16 overflow. Reported as MSVR 35100. (bsc#1011841,
    CVE-2016-9538)
    + Fix various out-of-bounds write vulnerabilities in heap or
    stack allocated buffers. Reported as MSVR 35093, MSVR 35096
    and MSVR 35097.
    + readContigTilesIntoBuffer: Fix signed/unsigned comparison
    warning.
  * tools/tiffdump.c
    + Fix a few misaligned 64-bit reads warned by -fsanitize
    + ReadDirectory: Remove uint32 cast to_TIFFmalloc() argument
    which resulted in Coverity report. Added more mutiplication
    overflow checks
  * tools/tiffinfo.c
    + Fix out-of-bound read on some tiled images.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2517)
    + TIFFReadContigTileData: Fix signed/unsigned comparison warning.
    + TIFFReadSeparateTileData: Fix signed/unsigned comparison
    warning.
- Removed patches:
  * tiff-4.0.4-uninitialized_mem_NeXTDecode.patch
  * tiff-4.0.6-CVE-2015-8782.patch
  * tiff-4.0.6-CVE-2016-3186.patch
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Fixed in the upsteam release
- Changed patch:
  * tiff-4.0.6-CVE-2015-7554.patch -&gt; tiff-4.0.7-CVE-2015-7554.patch
  - Rediffed to the changed context</changelog>
  <changelog author="idonmez@suse.com" date="1482148800">- Update homepage</changelog>
  <changelog author="jengelh@inai.de" date="1482148801">- Drop --with-pic, this is only for static libs (which are not built)
- Update descriptions</changelog>
  <changelog author="fstrba@suse.com" date="1484308800">- Added patch:
  * tiff-4.0.7-CVE-2017-5225.patch
  - Upstream fix for CVE-2017-5225, bsc#1019611: heap buffer
    overflow in tools/tiffcp via a crafted BitsPerSample value</changelog>
  <changelog author="fstrba@suse.com" date="1486036800">- Added patch:
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  - Fix a regression introduced in 4.0.7 (bsc#1022103)
  - http://bugzilla.maptools.org/show_bug.cgi?id=2636</changelog>
  <changelog author="fstrba@suse.com" date="1490788800">- Added patches:
  * tiff-CVE-2016-10266.patch
    + Upstream fix for CVE-2016-10266, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031263)
  * tiff-CVE-2016-10267.patch
    + Upstream fix for CVE-2016-10267, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031262)
  * tiff-CVE-2016-10268.patch
    + Upstream fix for CVE-2016-10268, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031255)
  * tiff-CVE-2016-10269.patch
    + Upstream fix for CVE-2016-10269, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031254)
  * tiff-CVE-2016-10270.patch
    + Upstream fix for CVE-2016-10270, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031250)
  * tiff-CVE-2016-10271.patch
    + Upstream fix for CVE-2016-10271, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read and buffer overflow) or possibly have unspecified
    other impact via a crafted TIFF image (bsc#1031249)
  * tiff-CVE-2016-10272.patch
    + Upstream fix for CVE-2016-10272, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    overflow) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031247)</changelog>
  <changelog author="fstrba@suse.com" date="1497960000">- Upgrade to upstream release 4.0.8
  * libtiff/tif_getimage.c, libtiff/tif_open.c
    + add parenthesis to fix cppcheck clarifyCalculation warnings
  * libtiff/tif_predict.c, libtiff/tif_print.c
    + fix printf unsigned vs signed formatting (cppcheck
    invalidPrintfArgType_uint warnings)
  * libtiff/tif_read.c, libtiff/tiffiop.h
    + fix uint32 overflow in TIFFReadEncodedStrip() that caused an
    integer division by zero. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2596
  * libtiff/tif_pixarlog.c, libtiff/tif_luv.c
    + fix heap-based buffer overflow on generation of PixarLog / LUV
    compressed files, with ColorMap, TransferFunction attached and
    nasty plays with bitspersample. The fix for LUV has not been
    tested, but suffers from the same kind of issue of PixarLog.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2604
  * libtiff/tif_strip.c
    + revert the change in TIFFNumberOfStrips() done for
    http://bugzilla.maptools.org/show_bug.cgi?id=2587 /
    CVE-2016-9273 since the above change is a better fix that
    makes it unnecessary.
  * libtiff/tif_dirread.c
    + modify ChopUpSingleUncompressedStrip() to instanciate compute
    ntrips as TIFFhowmany_32(td-&gt;td_imagelength, rowsperstrip),
    instead of a logic based on the total size of data. Which is
    faulty is the total size of data is not sufficient to fill the
    whole image, and thus results in reading outside of the
    StripByCounts/StripOffsets arrays when using
    TIFFReadScanline(). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2608.
  * libtiff/tif_ojpeg.c
    + make OJPEGDecode() early exit in case of failure in
    OJPEGPreDecode(). This will avoid a divide by zero, and
    potential other issues. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2611
  * libtiff/tif_write.c
    + fix misleading indentation as warned by GCC.
  * libtiff/tif_fax3.h
    + revert change done on 2016-01-09 that made Param member of
    TIFFFaxTabEnt structure a uint16 to reduce size of the
    binary. It happens that the Hylafax software uses the tables
    that follow this typedef (TIFFFaxMainTable, TIFFFaxWhiteTable,
    TIFFFaxBlackTable), although they are not in a public libtiff
    header. Raised by Lee Howard.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2636
  * libtiff/tiffio.h, libtiff/tif_getimage.c
    + add TIFFReadRGBAStripExt() and TIFFReadRGBATileExt() variants
    of the functions without ext, with an extra argument to control
    the stop_on_error behaviour.
  * libtiff/tif_getimage.c
    + fix potential memory leaks in error code path of
    TIFFRGBAImageBegin().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2627
  * libtiff/tif_jpeg.c
    + increase libjpeg max memory usable to 10 MB instead of libjpeg
    1MB default. This helps when creating files with "big" tile,
    without using libjpeg temporary files.
    Related to https://trac.osgeo.org/gdal/ticket/6757
  * libtiff/tif_jpeg.c
    + avoid integer division by zero in JPEGSetupEncode() when
    horizontal or vertical sampling is set to 0.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2653,
    bsc#1033127, CVE-2017-7595
  * libtiff/tif_dirwrite.c
    + in TIFFWriteDirectoryTagCheckedRational, replace assertion by
    runtime check to error out if passed value is strictly
    negative.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2535,
    bsc#1038438, CVE-2016-10371
  * libtiff/tif_dirread.c
    + avoid division by floating point 0 in
    TIFFReadDirEntryCheckedRational() and
    TIFFReadDirEntryCheckedSrational(), and return 0 in that case
    (instead of infinity as before presumably) Apparently some
    sanitizers do not like those divisions by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2644,
    bsc#1033118, CVE-2017-7598
  * libtiff/tif_dir.c, tif_dirread.c, tif_dirwrite.c
    + implement various clampings of double to other data types to
    avoid undefined behaviour if the output range isn't big enough
    to hold the input value.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2643
    http://bugzilla.maptools.org/show_bug.cgi?id=2642
    http://bugzilla.maptools.org/show_bug.cgi?id=2646
    http://bugzilla.maptools.org/show_bug.cgi?id=2647,
    bsc#1033126, CVE-2017-7596, bsc#1033120, CVE-2017-7597,
    bsc#1033113, CVE-2017-7599, bsc#1033112, CVE-2017-7600,
  * libtiff/tif_jpeg.c
    + validate BitsPerSample in JPEGSetupEncode() to avoid undefined
    behaviour caused by invalid shift exponent.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2648,
    bsc#1033111, CVE-2017-7601
  * libtiff/tif_read.c
    + avoid potential undefined behaviour on signed integer addition
    in TIFFReadRawStrip1() in isMapped() case.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2650,
    bsc#1033109, CVE-2017-7602
  * libtiff/tif_getimage.c
    + add explicit uint32 cast in putagreytile to avoid
    UndefinedBehaviorSanitizer warning. Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2658,
    bsc#1033131, CVE-2017-7592
  * libtiff/tif_read.c
    + TIFFReadBufferSetup(): use _TIFFcalloc() to zero initialize
    tif_rawdata.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2651,
    bsc#1033129, CVE-2017-7593
  * libtiff/tiffio.h, tif_unix.c, tif_win32.c, tif_vms.c
    + add _TIFFcalloc()
  * libtiff/tif_luv.c, tif_lzw.c, tif_packbits.c
    + return 0 in Encode functions instead of -1 when
    TIFFFlushData1() fails.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2130
  * libtiff/tif_ojpeg.c
    + fix leak in OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable when read fails. Patch by
    Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2659,
    bsc#1033128, CVE-2017-7594
  * libtiff/tif_jpeg.c
    + only run JPEGFixupTagsSubsampling() if the YCbCrSubsampling
    tag is not explicitly present. This helps a bit to reduce the
    I/O amount when the tag is present (especially on cloud hosted
    files).
  * libtiff/tif_lzw.c
    + in LZWPostEncode(), increase, if necessary, the code bit-width
    after flushing the remaining code and before emitting the EOI
    code. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=1982
  * libtiff/tif_pixarlog.c
    + fix memory leak in error code path of PixarLogSetupDecode().
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2665
  * libtiff/tif_fax3.c, tif_predict.c, tif_getimage.c
    + fix GCC 7 -Wimplicit-fallthrough warnings.
  * libtiff/tif_dirread.c
    + fix memory leak in non DEFER_STRILE_LOAD mode (ie default)
    when there is both a StripOffsets and TileOffsets tag, or a
    StripByteCounts and TileByteCounts
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2689,
    bsc#1042805, CVE-2017-9403)
  * libtiff/tif_ojpeg.c
    + fix potential memory leak in
    OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2670
  * libtiff/tif_fax3.c
    + avoid crash in Fax3Close() on empty file. Patch by Alan
    Coopersmith + complement by myself.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2673
  * libtiff/tif_read.c
    + TIFFFillStrip(): add limitation to the number of bytes read
    in case td_stripbytecount[strip] is bigger than reasonable,
    so as to avoid excessive memory allocation.
  * libtiff/tif_zip.c, tif_pixarlog.c, tif_predict.c
    + fix memory leak when the underlying codec (ZIP, PixarLog)
    succeeds its setupdecode() method, but PredictorSetup fails.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStrip() and TIFFFillTile(): avoid excessive memory
    allocation in case of shorten files. Only effective on 64 bit
    builds and non-mapped cases.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStripPartial() / TIFFSeek(), avoid potential integer
    overflows with read_ahead in CHUNKY_STRIP_READ_SUPPORT mode.
    Should especially occur on 32 bit platforms.
  * libtiff/tif_read.c
    + TIFFFillStripPartial()
    + avoid excessive memory allocation in case of shorten files.
    Only effective on 64 bit builds.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + update tif_rawcc in CHUNKY_STRIP_READ_SUPPORT mode with
    tif_rawdataloaded when calling TIFFStartStrip() or
    TIFFFillStripPartial(). This avoids reading beyond tif_rawdata
    when bytecount &gt; tif_rawdatasize. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1545.
    Credit to OSS-Fuzz
  * libtiff/tif_color.c
    + avoid potential int32 overflow in TIFFYCbCrToRGBInit() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1533
    Credit to OSS-Fuzz
  * libtiff/tif_pixarlog.c, tif_luv.c
    + avoid potential int32 overflows in multiply_ms() and add_ms().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1558
    Credit to OSS-Fuzz
  * libtiff/tif_packbits.c
    + fix out-of-buffer read in PackBitsDecode() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1563
    Credit to OSS-Fuzz
  * libtiff/tif_luv.c
    + LogL16InitState(): avoid excessive memory allocation when
    RowsPerStrip tag is missing.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_lzw.c
    + update dec_bitsleft at beginning of LZWDecode(), and update
    tif_rawcc at end of LZWDecode(). This is needed to properly
    work with the latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode.
  * libtiff/tif_pixarlog.c
    + PixarLogDecode(): resync tif_rawcp with next_in and tif_rawcc
    with avail_in at beginning and end of function, similarly to
    what is done in LZWDecode(). Likely needed so that it works
    properly with latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode. But untested...
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): add basic validation of luma and
    refBlackWhite coefficients (just check they are not NaN for
    now), to avoid potential float to int overflows. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1663
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): stricter validation for refBlackWhite
    coefficients values. To avoid invalid float-&gt;int32 conversion.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1718
    Credit to OSS Fuzz
  * tools/fax2tiff.c (main)
    + Applied patch by Joerg Ahrens to fix passing client data for
    Win32 builds using tif_win32.c (USE_WIN32_FILEIO defined) for
    file I/O. Patch was provided via email on November 20, 2016.
  * tools/tiffcp.c
    + avoid uint32 underflow in cpDecodedStrips that can cause
    various issues, such as buffer overflows in the library.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2598
  * tools/tiffcrop.c
    + fix readContigStripsIntoBuffer() in -i (ignore) mode so that
    the output buffer is correctly incremented to avoid write
    outside bounds. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2620
  * tools/tiffcrop.c
    + add 3 extra bytes at end of strip buffer in
    readSeparateStripsIntoBuffer() to avoid read outside of heap
    allocated buffer. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2621
  * tools/tiffcrop.c
    + fix integer division by zero when BitsPerSample is missing.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2619
  * tools/tiffinfo.c
    + fix null pointer dereference in -r mode when the image has no
    StripByteCount tag. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2594
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2597
  * tools/tif_dir.c
    + when TIFFGetField(, TIFFTAG_NUMBEROFINKS, ) is called, limit
    the return number of inks to SamplesPerPixel, so that code
    that parses ink names doesn't go past the end of the buffer.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2599
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2607
  * tools/tiffcp.c
    + fix uint32 underflow/overflow that can cause heap-based buffer
    overflow. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2610
  * tools/tiffcp.c
    + replace assert( (bps % 8) == 0 ) by a non assert check.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2605
  * tools/tiff2ps.c
    + fix 2 heap-based buffer overflows (in PSDataBW and
    PSDataColorContig). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2633 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2634.
  * tools/tiff2pdf.c
    + prevent heap-based buffer overflow in -j mode on a paletted
    image. Note: this fix errors out before the overflow happens.
    There could probably be a better fix.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2635
  * tools/tiff2pdf.c
    + fix wrong usage of memcpy() that can trigger unspecified behaviour.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2638
  * tools/tiff2pdf.c
    + avoid potential invalid memory read in t2p_writeproc.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2639
  * tools/tiff2pdf.c
    + avoid potential heap-based overflow in t2p_readwrite_pdf_image_tile().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2640
  * tools/tiffcrop.c
    + remove extraneous TIFFClose() in error code path, that caused
    double free.
    Related to http://bugzilla.maptools.org/show_bug.cgi?id=2535
  * tools/tiffcp.c
    + error out cleanly in cpContig2SeparateByRow and
    cpSeparate2ContigByRow if BitsPerSample != 8 to avoid heap
    based overflow.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2656 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2657
  * tools/raw2tiff.c
    + avoid integer division by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2631
  * tools/tiff2ps.c
    + call TIFFClose() in error code paths.
  * tools/fax2tiff.c
    + emit appropriate message if the input file is empty. Patch by
    Alan Coopersmith.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2672
  * tools/tiff2bw.c
    + close TIFF handle in error code path.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2677
  * Other issues fixed:
    + bsc#1042804, CVE-2017-9404
- Removed patches:
  * tiff-4.0.7-CVE-2015-7554.patch
  * tiff-4.0.7-CVE-2017-5225.patch
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  * tiff-CVE-2016-10266.patch
  * tiff-CVE-2016-10267.patch
  * tiff-CVE-2016-10268.patch
  * tiff-CVE-2016-10269.patch
  * tiff-CVE-2016-10270.patch
  * tiff-CVE-2016-10271.patch
  * tiff-CVE-2016-10272.patch
    + Fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1511956800">- Upgrade to upstream release 4.0.9
  * Changes in the software configuration:
    + test/Makefile.am: Add some tests for tiff2bw.
    + .appveyor.yml, .travis.yml, build/travis-ci: apply patches
    0001-ci-Travis-script-improvements.patch and
    0002-ci-Invoke-helper-script-via-shell.patch by Roger Leigh
    + .travis.yml, build/travis-ci: new files from
    0001-ci-Add-Travis-support-for-Linux-builds-with-Autoconf.patch
    by Roger Leigh. This patch adds support for the Travis-CI
    service.
    + .appveyor.yml: new file from
    0002-ci-Add-AppVeyor-support.patch by Roger Leigh (sent to
    mailing list on 2017-06-08) This patch adds a .appveyor.yml
    file to the top-level. This allows one to opt in to having a
    branch built on Windows with Cygwin, MinGW and MSVC
    automatically when a branch is pushed to GitHub, GitLab,
    BitBucket or any other supported git hosting service.
    + CMakeLists.txt, test/CMakeLists.txt,
    test/TiffTestCommon.cmake: apply patch
    0001-cmake-Improve-Cygwin-and-MingGW-test-support.patch from
    Roger Leigh. This patch makes the CMake build system support
    running the tests with MinGW or  Cygwin.
    + test/tiffcp-lzw-compat.sh, test/images/quad-lzw-compat.tiff:
    new files to test old-style LZW decompression
    + test/common.sh, Makefile.am, CMakeList.txt: updated with above
    + test/Makefile.am: add missing reference to
    images/quad-lzw-compat.tiff to fix "make distcheck". Patch by
    Roger Leigh
    + nmake.opt: support a DEBUG=1 option, so as to adjust OPTFLAGS
    and use /MDd runtime in debug mode.
  * Changes in libtiff:
    + libtiff/tif_color.c: TIFFYCbCrToRGBInit(): stricter clamping
    to avoid int32 overflow in TIFFYCbCrtoRGB(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1844
    + libtiff/tif_getimage.c: initYCbCrConversion(): stricter
    validation for refBlackWhite coefficients values. To avoid
    invalid float-&gt;int32 conversion (when refBlackWhite[0] ==
    2147483648.f) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1907
    + libtiff/tif_dirinfo.c, tif_dirread.c: add
    _TIFFCheckFieldIsValidForCodec(), and use it in
    TIFFReadDirectory() so as to ignore fields whose tag is a
    codec-specified tag but this codec is not enabled. This avoids
    TIFFGetField() to behave differently depending on whether the
    codec is enabled or not, and thus can avoid stack based buffer
    overflows in a number of TIFF utilities such as tiffsplit,
    tiffcmp, thumbnail, etc. Patch derived from
    0063-Handle-properly-CODEC-specific-tags.patch
    (http://bugzilla.maptools.org/show_bug.cgi?id=2580) by Raphaël
    Hertzog.
    Fixes: http://bugzilla.maptools.org/show_bug.cgi?id=2580
    http://bugzilla.maptools.org/show_bug.cgi?id=2693
    http://bugzilla.maptools.org/show_bug.cgi?id=2625
    (CVE-2016-10095, bsc#1017690)
    http://bugzilla.maptools.org/show_bug.cgi?id=2564
    (CVE-2015-7554, bsc#960341)
    http://bugzilla.maptools.org/show_bug.cgi?id=2561
    (CVE-2016-5318, bsc#983436)
    http://bugzilla.maptools.org/show_bug.cgi?id=2499
    (CVE-2014-8128, bsc#969783)
    http://bugzilla.maptools.org/show_bug.cgi?id=2441
    http://bugzilla.maptools.org/show_bug.cgi?id=2433
    + libtiff/tif_swab.c: if DISABLE_CHECK_TIFFSWABMACROS is
    defined, do not do the #ifdef TIFFSwabXXX checks. Make it
    easier for GDAL to rename the symbols of its internal libtiff
    copy.
    + libtiff/tif_dirread.c: fix regression of libtiff 4.0.8 in
    ChopUpSingleUncompressedStrip() regarding update of newly
    single-strip uncompressed files whose bytecount is 0. Before
    the change of 2016-12-03, the condition bytecount==0 used to
    trigger an early exit/disabling of strip chop. Re-introduce
    that in update mode. Otherwise this cause later incorrect
    setting for the value of StripByCounts/StripOffsets.
    (https://trac.osgeo.org/gdal/ticket/6924)
    + libtiff/tif_dirread.c: TIFFFetchStripThing(): limit the
    number of items read in StripOffsets/StripByteCounts tags to
    the number of strips to avoid excessive memory allocation.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2215
    + libtiff/tif_getimage.c: avoid many (harmless) unsigned int
    overflows.
    + libtiff/tif_fax3.c: avoid unsigned int overflow in
    Fax3Encode2DRow(). Could potentially be a bug with huge rows.
    + libtiff/tif_jpeg.c: avoid (harmless) unsigned int overflow on
    tiled images.
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts() and BYTECOUNTLOOKSBAD when file is
    too short.
    + libtiff/tif_predict.c: decorate legitimate functions where
    unsigned int overflow occur with
    TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts()
    + libtiff/tiffiop.h: add TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    macro to disable CLang warnings raised by
  - fsanitize=undefined,unsigned-integer-overflow
    + libtiff/tif_jpeg.c: add anti-denial of service measure to
    avoid excessive CPU consumption on progressive JPEGs with a
    huge number of scans. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    Note: only affects libtiff since 2014-12-29 where support of
    non-baseline JPEG was added.
    + libtiff/tif_jpeg.c: error out at decoding time if anticipated
    libjpeg memory allocation is above 100 MB. libjpeg in case of
    multiple scans, which is allowed even in baseline JPEG, if
    components are spread over several scans and not
    interleavedin a single one, needs to allocate memory (or
    backing store) for the whole strip/tile. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    This limitation may be overriden by setting the
    LIBTIFF_ALLOW_LARGE_LIBJPEG_MEM_ALLOC environment variable, or
    recompiling libtiff with a custom value of
    TIFF_LIBJPEG_LARGEST_MEM_ALLOC macro.
    + libtiff/tif_jbig.c: fix memory leak in error code path of
    JBIGDecode()
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2706
    (CVE-2017-9936, bsc#1046073)
    + libtiff/tif_dirread.c: in TIFFReadDirEntryFloat(), check that
    a double value can fit in a float before casting.
    + libtiff/tiffiop.h, libtiff/tif_jpeg.c, libtiff/tif_jpeg_12.c,
    libtiff/tif_read.c: make TIFFReadScanline() works in
    CHUNKY_STRIP_READ_SUPPORT mode with JPEG stream with multiple
    scans. Also make configurable through a
    LIBTIFF_JPEG_MAX_ALLOWED_SCAN_NUMBER environment variable the
    maximum number of scans allowed. Defaults to 100.
    + libtiff/tif_read.c: TIFFFillTile(): add limitation to the
    number of bytes read in case td_stripbytecount[strip] is
    bigger than reasonable, so as to avoid excessive memory
    allocation (similarly to what was done for TIFFFileStrip() on
    2017-05-10)
    + libtiff/tif_getimage.c: use
    _TIFFReadEncodedStripAndAllocBuffer(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2433
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedStripAndAllocBuffer() function, variant of
    TIFFReadEncodedStrip() that allocates the decoded buffer only
    after a first successful TIFFFillStrip(). This avoids
    excessive memory allocation on corrupted files.
    + libtiff/tif_dirwrite.c: in TIFFWriteDirectoryTagCheckedXXXX()
    functions associated with LONG8/SLONG8 data type, replace
    assertion that the file is BigTIFF, by a non-fatal error.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2712
    + libtiff/tif_read.c: TIFFStartTile(): set tif_rawcc to
    tif_rawdataloaded when it is set. Similarly to
    TIFFStartStrip(). This issue was revealed by the change of
    2017-06-30 in TIFFFileTile(), limiting the number of bytes
    read. But it could probably have been hit too in
    CHUNKY_STRIP_READ_SUPPORT mode previously. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2454
    + libtiff/tif_error.c, tif_warning.c: correctly use va_list
    when both an old-style and new-style warning/error handlers
    are installed. Patch by Paavo Helde (sent on the mailing list)
    + libtiff/tif_getimage.c: use _TIFFReadTileAndAllocBuffer().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2470
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedTileAndAllocBuffer() and
    _TIFFReadTileAndAllocBuffer() variants of
    TIFFReadEncodedTile() and TIFFReadTile() that allocates the
    decoded buffer only after a first successful TIFFFillTile().
    This avoids excessive memory allocation on corrupted files.
    + libtiff/tif_pixarlog.c: avoid excessive memory allocation on
    decoding when RowsPerStrip tag is not defined (and thus
    td_rowsperstrip == UINT_MAX) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2554
    + libtiff/tif_lzw.c: fix 4.0.8 regression in the decoding of
    old-style LZW compressed files.
    + libtiff/tif_lzw.c: fix potential out-of-buffer read on 1-byte
    LZW strips. Crashing issue only on memory mapped files, where
    the strip offset is the last byte of the file, and the file
    size is a multiple of one page size on the CPU architecture
    (typically 4096)
    + libtiff/tif_dir.c: avoid potential null pointer dereference
    in _TIFFVGetField() on corrupted TIFFTAG_NUMBEROFINKS tag
    instance.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2713
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + libtiff/tif_read.c: TIFFFillStrip() / TIFFFillTile().
    Complementary fix for
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 in the
    isMapped() case, so as to avoid excessive memory allocation
    when we need a temporary buffer but the file is truncated.
    + libtiff/tif_read.c: in TIFFFetchStripThing(), only grow the
    arrays that hold StripOffsets/StripByteCounts, when they are
    smaller than the expected number of striles, up to 1 million
    striles, and error out beyond. Can be tweaked by setting the
    environment variable LIBTIFF_STRILE_ARRAY_MAX_RESIZE_COUNT.
    This partially goes against a change added on 2002-12-17 to
    accept those arrays of wrong sizes, but is needed to avoid
    denial of services. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2350
    + libtiff/tif_read.c: add protection against excessive memory
    allocation attempts in TIFFReadDirEntryArray() on short files.
    Effective for mmap'ed case. And non-mmap'ed case, but
    restricted to 64bit builds. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2675
    + libtiff/tif_luv.c: LogLuvInitState(): avoid excessive memory
    allocation when RowsPerStrip tag is missing. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2683
    + libtiff/tif_getimage.c: gtTileContig() and gtTileSeparate():
    properly break from loops on error when stoponerr is set,
    instead of going on iterating on row based loop.
    + libtiff/tif_getimage.c: fix fromskew computation when
    to-be-skipped pixel number is not a multiple of the horizontal
    subsampling, and also in some other cases. Impact
    putcontig8bitYCbCr44tile, putcontig8bitYCbCr42tile,
    putcontig8bitYCbCr41tile, putcontig8bitYCbCr21tile and
    putcontig8bitYCbCr12tile Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2637 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2691
    + libtiff/tif_luv.c: further reduce memory requirements for
    temporary buffer when RowsPerStrip &gt;= image_length in
    LogLuvInitState() and LogL16InitState(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2700
    + libtiff/tif_dirwrite.c: replace assertion related to not
    finding the SubIFD tag by runtime check (in
    TIFFWriteDirectorySec()) Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2727
    + libtiff/tif_dirwrite.c: replace assertion to tag value not
    fitting on uint32 when selecting the value of SubIFD tag by
    runtime check (in TIFFWriteDirectoryTagSubifd()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2728
    + libtiff/tif_jpeg.c: accept reading the last strip of a JPEG
    compressed file if the codestream height is larger than the
    truncated height of the strip. Emit a warning in this
    situation since this is non compliant.
    + libtiff/tiffiop.h, tif_aux.c: redirect SeekOK() macro to a
    _TIFFSeekoK() function that checks if the offset is not
    bigger than INT64_MAX, so as to avoid a -1 error return code
    of TIFFSeekFile() to match a required seek to UINT64_MAX/-1.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2726
    + libtiff/tif_dirread.c: add NULL check to avoid likely false
    positive null-pointer dereference warning by CLang Static
    Analyzer.
    + libtiff/libtiff.def: add TIFFReadRGBAStripExt and
    TIFFReadRGBATileExt Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2735
    + libtiff/tif_jpeg.c: add compatibility with libjpeg-turbo
    1.5.2 that honours max_memory_to_use &gt; 0. Cf
    https://github.com/libjpeg-turbo/libjpeg-turbo/issues/162
    + libtiff/tif_getimage.c: avoid floating point division by zero
    in initCIELabConversion() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3733
  * Changes in the tools:
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + tools/tiffset.c: fix setting a single value for the
    ExtraSamples tag (and other tags with variable number of
    values). So 'tiffset -s ExtraSamples 1 X'. This only worked
    when setting 2 or more values, but not just one.
    + tools/fax2tiff.c (_FAX_Client_Data): Pass FAX_Client_Data as
    the client data. This client data is not used at all at the
    moment, but it makes the most sense. Issue that the value of
    client_data.fd was passed where a pointer is expected.
    + tools/tiff2pdf.c (t2p_sample_realize_palette): Fix possible
    arithmetic overflow in bounds checking code and eliminate
    comparison between signed and unsigned type.
    + tools/tiff2bw.c (main): Free memory allocated in the tiff2bw
    program. This is in response to the report associated with
    CVE-2017-16232, bsc#1069213 but does not solve the extremely
    high memory usage with the associated POC file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Fix check section:
  + Make sure to get back to the right directory after chdir to
    'tools', or we can't run the 2nd test suite.
  + Fix typo: the tests are located in a directory called 'test',
    not 'tests'.</changelog>
  <changelog author="mvetter@suse.com" date="1518782400">- bsc#1046077: Add tiff-4.0.9-bsc1046077-CVE-2017-9935.patch
  Fix Heap-based buffer overflow in t2p_write_pdf</changelog>
  <changelog author="mvetter@suse.com" date="1519128000">- bsc#1081690: Add tiff-4.0.9-bsc1081690-CVE-2018-5784.patch
  Fix uncontrolled resource consumption in TIFFSetDirectory</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- security update
  * CVE-2018-10963 [bsc#1092949]
    + tiff-CVE-2018-10963.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526644800">- security update
  * CVE-2017-18013 [bsc#1074317]
    + tiff-CVE-2017-18013.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113600">- security update
  * CVE-2018-7456 [bsc#1082825]
    + tiff-CVE-2018-7456.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113601">- security update
  * CVE-2017-11613 [bsc#1082332]
    + tiff-CVE-2017-11613.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528200000">- security update
  * CVE-2018-8905 [bsc#1086408]
    + tiff-CVE-2018-8905.patch</changelog>
</package>
<package pkgid="fcabd269462691f0298aaeef870f3f8c3a41c9883a88f2a7204a2a98564de793" name="libtiff-devel" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="lp150.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1472731200">- Added patches:
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  - Upstream commits to fix CVE-2016-3623 [bsc#974618],
    CVE-2016-3945 [bsc#974614], CVE-2016-3990 [bsc#975069],
    CVE-2016-3991 [bsc#975070]</changelog>
  <changelog author="fstrba@suse.com" date="1475755200">- Added patches:
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Upstream fixes for MSVR 35093, MSVR 35094, MSVR 35095,
    MSVR 35096, MSVR 35097, MSVR 35098.
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  - Enforce bits-per-sample requirements of floating point
    predictor. Fixes CVE-2016-3622 [bsc#974449]</changelog>
  <changelog author="fstrba@suse.com" date="1480420800">- Upgrade to upstream release 4.0.7
  * libtiff/tif_aux.c
    + Fix crash in TIFFVGetFieldDefaulted() when requesting
    Predictor tag and that the zip/lzw codec is not configured.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2591
  * libtiff/tif_compress.c
    + Make TIFFNoDecode() return 0 to indicate an error and make
    upper level read routines treat it accordingly. (linked to the
    test case of http://bugzilla.maptools.org/show_bug.cgi?id=2517)
  * libtiff/tif_dir.c
    + Discard values of SMinSampleValue and SMaxSampleValue when
    they have been read and the value of SamplesPerPixel is
    changed afterwards (like when reading a OJPEG compressed image
    with a missing SamplesPerPixel tag, and whose photometric is
    RGB or YCbCr, forcing SamplesPerPixel being 3). Otherwise when
    rewriting the directory (for example with tiffset, we will
    expect 3 values whereas the array had been allocated with just
    one), thus causing a out of bound read access. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658, bsc#974840)
  * libtiff/tif_dirread.c
    + In TIFFFetchNormalTag(), do not dereference NULL pointer when
    values of tags with TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII
    access are 0-byte arrays. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2593 (regression
    introduced by previous fix done on 2016-11-11 for
    CVE-2016-9297, bsc#1010161). Assigned as CVE-2016-9448,
    bsc#1011103
    + In TIFFFetchNormalTag(), make sure that values of tags with
    TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII access are null
    terminated, to avoid potential read outside buffer in
    _TIFFPrintField(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2590
    (CVE-2016-9297, bsc#1010161)
    + Initialize doubledata at line 3693 to NULL to please MSVC 2013
    + Prevent reading ColorMap or TransferFunction if
    BitsPerPixel &gt; 24, so as to avoid huge memory allocation and
    file read attempts
    + Reject images with OJPEG compression that have no
    TileOffsets/StripOffsets tag, when OJPEG compression is
    disabled. Prevent null pointer dereference in
    TIFFReadRawStrip1() and other functions that expect
    td_stripbytecount to be non NULL. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2585
    + When compiled with DEFER_STRILE_LOAD, fix regression, when
    reading a one-strip file without a StripByteCounts tag.
    + Workaround false positive warning of Clang Static Analyzer
    about null pointer dereference in TIFFCheckDirOffset().
  * libtiff/tif_dirwrite.c
    + Avoid null pointer dereference on td_stripoffset when writing
    directory, if FIELD_STRIPOFFSETS was artificially set for a
    hack case in OJPEG case. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658,
    bsc#974840)
    + Fix truncation to 32 bit of file offsets in TIFFLinkDirectory()
    and TIFFWriteDirectorySec() when aligning directory offsets on
    an even offset (affects BigTIFF).
  * libtiff/tif_dumpmode.c
    + DumpModeEncode() should return 0 in case of failure so that
    the above mentionned functions detect the error.
  * libtiff/tif_fax3.c
    + remove dead assignment in Fax3PutEOLgdal().
  * libtiff/tif_fax3.h
    + make Param member of TIFFFaxTabEnt structure a uint16 to
    reduce size of the binary.
  * libtiff/tif_getimage.c
    + Fix out-of-bound reads in TIFFRGBAImage interface in case of
    unsupported values of SamplesPerPixel/ExtraSamples for
    LogLUV/CIELab. Add explicit call to TIFFRGBAImageOK() in
    TIFFRGBAImageBegin(). Fix CVE-2015-8665 and CVE-2015-8683.
    + Fix some benign warnings which appear in 64-bit compilation
    under Microsoft Visual Studio of the form "Arithmetic
    overflow: 32-bit value is shifted, then cast to 64-bit value.
    Results might not be an expected value."
    + TIFFRGBAImageOK: Reject attempts to read floating point images.
  * libtiff/tif_luv.c
    + Fix potential out-of-bound writes in decode functions in non
    debug builds by replacing assert()s by regular if checks
    (http://bugzilla.maptools.org/show_bug.cgi?id=2522). Fix
    potential out-of-bound reads in case of short input data.
    + Validate that for COMPRESSION_SGILOG and PHOTOMETRIC_LOGL,
    there is only one sample per pixel. Avoid potential invalid
    memory write on corrupted/unexpected images when using the
    TIFFRGBAImageBegin() interface
  * libtiff/tif_next.c
    + Fix potential out-of-bound write in NeXTDecode()
    (http://bugzilla.maptools.org/show_bug.cgi?id=2508)
  * libtiff/tif_pixarlog.c
    + Avoid zlib error messages to pass a NULL string to %s
    formatter, which is undefined behaviour in sprintf().
    + Fix out-of-bounds write vulnerabilities in heap allocated
    buffers. Reported as MSVR 35094.
    + Fix potential buffer write overrun in PixarLogDecode() on
    corrupted/unexpected images (CVE-2016-5875, bsc#987351)
    + Fix write buffer overflow in PixarLogEncode if more input
    samples are provided than expected by PixarLogSetupEncode.
    Idea based on libtiff-CVE-2016-3990.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, but with different and simpler
    check. (http://bugzilla.maptools.org/show_bug.cgi?id=2544,
    bsc#975069)
  * libtiff/tif_predict.c
    + PredictorSetup: Enforce bits-per-sample requirements of
    floating point predictor (3). Fixes CVE-2016-3622 "Divide By
    Zero in the tiff2rgba tool." (bsc#974449)
  * libtiff/tif_predict.h, libtiff/tif_predict.c
    + Replace assertions by runtime checks to avoid assertions in
    debug mode, or buffer overflows in release mode. Can happen
    when dealing with unusual tile size like YCbCr with
    subsampling. Reported as MSVR 35105.
  * libtiff/tif_read.c
    + Fix out-of-bounds read on memory-mapped files in
    TIFFReadRawStrip1() and TIFFReadRawTile1() when stripoffset
    is beyond tmsize_t max value
    + Make TIFFReadEncodedStrip() and TIFFReadEncodedTile() directly
    use user provided buffer when no compression (and other
    conditions) to save a memcpy().
  * libtiff/tif_strip.c
    + Make TIFFNumberOfStrips() return the td-&gt;td_nstrips value when
    it is non-zero, instead of recomputing it. This is needed in
    TIFF_STRIPCHOP mode where td_nstrips is modified. Fixes a read
    outsize of array in tiffsplit (or other utilities using
    TIFFNumberOfStrips()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2587
    (CVE-2016-9273, bsc#1010163)
  * libtiff/tif_write.c
    + Fix issue in error code path of TIFFFlushData1() that didn't
    reset the tif_rawcc and tif_rawcp members. I'm not completely
    sure if that could happen in practice outside of the odd
    behaviour of t2p_seekproc() of tiff2pdf). The report points
    that a better fix could be to check the return value of
    TIFFFlushData1() in places where it isn't done currently, but
    it seems this patch is enough. Reported as MSVR 35095.
    + Make TIFFWriteEncodedStrip() and TIFFWriteEncodedTile()
    directly use user provided buffer when no compression to save
    a memcpy().
    + TIFFWriteEncodedStrip() and TIFFWriteEncodedTile() should
    return -1 in case of failure of tif_encodestrip() as documented
  * tools/fax2tiff.D    c
    + Fix segfault when specifying -r without argument. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2572
  * tools/Makefile.am
    + The libtiff tools bmp2tiff, gif2tiff, ras2tiff, sgi2tiff,
    sgisv, and ycbcr are completely removed from the distribution.
    The libtiff tools rgb2ycbcr and thumbnail are only built in
    the build tree for testing. Old files are put in new 'archive'
    subdirectory of the source repository, but not in
    distribution archives. These changes are made in order to
    lessen the maintenance burden.
  * tools/rgb2ycbcr.c
    + Validate values of -v and -h parameters to avoid potential
    divide by zero. Fixes CVE-2016-3623, bsc#974618
    (http://bugzilla.maptools.org/show_bug.cgi?id=2569)
  * tools/tiff2bw.c
    + Fix weight computation that could result of color value
    overflow (no security implication). Fix
    http://bugzilla.maptools.org/show_bug.cgi?id=2550.
  * tools/tiff2pdf.c
    + Avoid undefined behaviour related to overlapping of source and
    destination buffer in memcpy() call in
    t2p_sample_rgbaa_to_rgb() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2577
    + Fix out-of-bounds write vulnerabilities in heap allocate buffer
    in t2p_process_jpeg_strip(). Reported as MSVR 35098.
    + Fix potential integer overflows on 32 bit builds in
    t2p_read_tiff_size() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2576
    + Fix read -largely- outsize of buffer in
    t2p_readwrite_pdf_image_tile(), causing crash, when reading a
    JPEG compressed image with TIFFTAG_JPEGTABLES length being one.
    Reported as MSVR 35101. CVE-2016-9453, bsc#1011107
    + Fix write buffer overflow of 2 bytes on JPEG compressed images.
    Reported as TALOS-CAN-0187, CVE-2016-5652, bsc#1007280. Also
    prevents writing 2 extra uninitialized bytes to the file
    stream.
  * tools/tiff2rgba.c
    + Fix integer overflow in size of allocated buffer, when -b mode
    is enabled, that could result in out-of-bounds write. Based
    initially on patch tiff-CVE-2016-3945.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, with correction for invalid
    tests that rejected valid files.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2545, bsc#974614)
  * tools/tiffcp.c
    + Fix out-of-bounds write on tiled images with odd tile width vs
    image width. Reported as MSVR 35103. (bsc#1011841,
    CVE-2016-9538)
    + Fix read of undefined variable in case of missing required
    tags. Found on test case of MSVR 35100.
  * tools/tiffcrop.c
    + Avoid access outside of stack allocated array on a tiled
    separate TIFF with more than 8 samples per pixel.
    (CVE-2016-5321, CVE-2016-5323,
    http://bugzilla.maptools.org/show_bug.cgi?id=2558,
    http://bugzilla.maptools.org/show_bug.cgi?id=2559, bsc#984813,
    bsc#984815)
    + Fix memory leak in (recent) error code path. Fixes Coverity
    1394415.
    + Fix multiple uint32 overflows in writeBufferToSeparateStrips(),
    writeBufferToContigTiles() and writeBufferToSeparateTiles()
    that could cause heap buffer overflows. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2592
    + Fix out-of-bound read of up to 3 bytes in
    readContigTilesIntoBuffer(). Reported as MSVR 35092.
    + Fix out-of-bounds write in loadImage(). From patch
    libtiff-CVE-2016-3991.patch from
    libtiff-4.0.3-25.el7_2.src.rpm
    (http://bugzilla.maptools.org/show_bug.cgi?id=2543, bsc#975070)
    + Fix read of undefined buffer in readContigStripsIntoBuffer()
    due to uint16 overflow. Reported as MSVR 35100. (bsc#1011841,
    CVE-2016-9538)
    + Fix various out-of-bounds write vulnerabilities in heap or
    stack allocated buffers. Reported as MSVR 35093, MSVR 35096
    and MSVR 35097.
    + readContigTilesIntoBuffer: Fix signed/unsigned comparison
    warning.
  * tools/tiffdump.c
    + Fix a few misaligned 64-bit reads warned by -fsanitize
    + ReadDirectory: Remove uint32 cast to_TIFFmalloc() argument
    which resulted in Coverity report. Added more mutiplication
    overflow checks
  * tools/tiffinfo.c
    + Fix out-of-bound read on some tiled images.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2517)
    + TIFFReadContigTileData: Fix signed/unsigned comparison warning.
    + TIFFReadSeparateTileData: Fix signed/unsigned comparison
    warning.
- Removed patches:
  * tiff-4.0.4-uninitialized_mem_NeXTDecode.patch
  * tiff-4.0.6-CVE-2015-8782.patch
  * tiff-4.0.6-CVE-2016-3186.patch
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Fixed in the upsteam release
- Changed patch:
  * tiff-4.0.6-CVE-2015-7554.patch -&gt; tiff-4.0.7-CVE-2015-7554.patch
  - Rediffed to the changed context</changelog>
  <changelog author="idonmez@suse.com" date="1482148800">- Update homepage</changelog>
  <changelog author="jengelh@inai.de" date="1482148801">- Drop --with-pic, this is only for static libs (which are not built)
- Update descriptions</changelog>
  <changelog author="fstrba@suse.com" date="1484308800">- Added patch:
  * tiff-4.0.7-CVE-2017-5225.patch
  - Upstream fix for CVE-2017-5225, bsc#1019611: heap buffer
    overflow in tools/tiffcp via a crafted BitsPerSample value</changelog>
  <changelog author="fstrba@suse.com" date="1486036800">- Added patch:
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  - Fix a regression introduced in 4.0.7 (bsc#1022103)
  - http://bugzilla.maptools.org/show_bug.cgi?id=2636</changelog>
  <changelog author="fstrba@suse.com" date="1490788800">- Added patches:
  * tiff-CVE-2016-10266.patch
    + Upstream fix for CVE-2016-10266, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031263)
  * tiff-CVE-2016-10267.patch
    + Upstream fix for CVE-2016-10267, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031262)
  * tiff-CVE-2016-10268.patch
    + Upstream fix for CVE-2016-10268, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031255)
  * tiff-CVE-2016-10269.patch
    + Upstream fix for CVE-2016-10269, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031254)
  * tiff-CVE-2016-10270.patch
    + Upstream fix for CVE-2016-10270, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031250)
  * tiff-CVE-2016-10271.patch
    + Upstream fix for CVE-2016-10271, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read and buffer overflow) or possibly have unspecified
    other impact via a crafted TIFF image (bsc#1031249)
  * tiff-CVE-2016-10272.patch
    + Upstream fix for CVE-2016-10272, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    overflow) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031247)</changelog>
  <changelog author="fstrba@suse.com" date="1497960000">- Upgrade to upstream release 4.0.8
  * libtiff/tif_getimage.c, libtiff/tif_open.c
    + add parenthesis to fix cppcheck clarifyCalculation warnings
  * libtiff/tif_predict.c, libtiff/tif_print.c
    + fix printf unsigned vs signed formatting (cppcheck
    invalidPrintfArgType_uint warnings)
  * libtiff/tif_read.c, libtiff/tiffiop.h
    + fix uint32 overflow in TIFFReadEncodedStrip() that caused an
    integer division by zero. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2596
  * libtiff/tif_pixarlog.c, libtiff/tif_luv.c
    + fix heap-based buffer overflow on generation of PixarLog / LUV
    compressed files, with ColorMap, TransferFunction attached and
    nasty plays with bitspersample. The fix for LUV has not been
    tested, but suffers from the same kind of issue of PixarLog.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2604
  * libtiff/tif_strip.c
    + revert the change in TIFFNumberOfStrips() done for
    http://bugzilla.maptools.org/show_bug.cgi?id=2587 /
    CVE-2016-9273 since the above change is a better fix that
    makes it unnecessary.
  * libtiff/tif_dirread.c
    + modify ChopUpSingleUncompressedStrip() to instanciate compute
    ntrips as TIFFhowmany_32(td-&gt;td_imagelength, rowsperstrip),
    instead of a logic based on the total size of data. Which is
    faulty is the total size of data is not sufficient to fill the
    whole image, and thus results in reading outside of the
    StripByCounts/StripOffsets arrays when using
    TIFFReadScanline(). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2608.
  * libtiff/tif_ojpeg.c
    + make OJPEGDecode() early exit in case of failure in
    OJPEGPreDecode(). This will avoid a divide by zero, and
    potential other issues. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2611
  * libtiff/tif_write.c
    + fix misleading indentation as warned by GCC.
  * libtiff/tif_fax3.h
    + revert change done on 2016-01-09 that made Param member of
    TIFFFaxTabEnt structure a uint16 to reduce size of the
    binary. It happens that the Hylafax software uses the tables
    that follow this typedef (TIFFFaxMainTable, TIFFFaxWhiteTable,
    TIFFFaxBlackTable), although they are not in a public libtiff
    header. Raised by Lee Howard.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2636
  * libtiff/tiffio.h, libtiff/tif_getimage.c
    + add TIFFReadRGBAStripExt() and TIFFReadRGBATileExt() variants
    of the functions without ext, with an extra argument to control
    the stop_on_error behaviour.
  * libtiff/tif_getimage.c
    + fix potential memory leaks in error code path of
    TIFFRGBAImageBegin().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2627
  * libtiff/tif_jpeg.c
    + increase libjpeg max memory usable to 10 MB instead of libjpeg
    1MB default. This helps when creating files with "big" tile,
    without using libjpeg temporary files.
    Related to https://trac.osgeo.org/gdal/ticket/6757
  * libtiff/tif_jpeg.c
    + avoid integer division by zero in JPEGSetupEncode() when
    horizontal or vertical sampling is set to 0.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2653,
    bsc#1033127, CVE-2017-7595
  * libtiff/tif_dirwrite.c
    + in TIFFWriteDirectoryTagCheckedRational, replace assertion by
    runtime check to error out if passed value is strictly
    negative.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2535,
    bsc#1038438, CVE-2016-10371
  * libtiff/tif_dirread.c
    + avoid division by floating point 0 in
    TIFFReadDirEntryCheckedRational() and
    TIFFReadDirEntryCheckedSrational(), and return 0 in that case
    (instead of infinity as before presumably) Apparently some
    sanitizers do not like those divisions by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2644,
    bsc#1033118, CVE-2017-7598
  * libtiff/tif_dir.c, tif_dirread.c, tif_dirwrite.c
    + implement various clampings of double to other data types to
    avoid undefined behaviour if the output range isn't big enough
    to hold the input value.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2643
    http://bugzilla.maptools.org/show_bug.cgi?id=2642
    http://bugzilla.maptools.org/show_bug.cgi?id=2646
    http://bugzilla.maptools.org/show_bug.cgi?id=2647,
    bsc#1033126, CVE-2017-7596, bsc#1033120, CVE-2017-7597,
    bsc#1033113, CVE-2017-7599, bsc#1033112, CVE-2017-7600,
  * libtiff/tif_jpeg.c
    + validate BitsPerSample in JPEGSetupEncode() to avoid undefined
    behaviour caused by invalid shift exponent.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2648,
    bsc#1033111, CVE-2017-7601
  * libtiff/tif_read.c
    + avoid potential undefined behaviour on signed integer addition
    in TIFFReadRawStrip1() in isMapped() case.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2650,
    bsc#1033109, CVE-2017-7602
  * libtiff/tif_getimage.c
    + add explicit uint32 cast in putagreytile to avoid
    UndefinedBehaviorSanitizer warning. Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2658,
    bsc#1033131, CVE-2017-7592
  * libtiff/tif_read.c
    + TIFFReadBufferSetup(): use _TIFFcalloc() to zero initialize
    tif_rawdata.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2651,
    bsc#1033129, CVE-2017-7593
  * libtiff/tiffio.h, tif_unix.c, tif_win32.c, tif_vms.c
    + add _TIFFcalloc()
  * libtiff/tif_luv.c, tif_lzw.c, tif_packbits.c
    + return 0 in Encode functions instead of -1 when
    TIFFFlushData1() fails.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2130
  * libtiff/tif_ojpeg.c
    + fix leak in OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable when read fails. Patch by
    Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2659,
    bsc#1033128, CVE-2017-7594
  * libtiff/tif_jpeg.c
    + only run JPEGFixupTagsSubsampling() if the YCbCrSubsampling
    tag is not explicitly present. This helps a bit to reduce the
    I/O amount when the tag is present (especially on cloud hosted
    files).
  * libtiff/tif_lzw.c
    + in LZWPostEncode(), increase, if necessary, the code bit-width
    after flushing the remaining code and before emitting the EOI
    code. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=1982
  * libtiff/tif_pixarlog.c
    + fix memory leak in error code path of PixarLogSetupDecode().
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2665
  * libtiff/tif_fax3.c, tif_predict.c, tif_getimage.c
    + fix GCC 7 -Wimplicit-fallthrough warnings.
  * libtiff/tif_dirread.c
    + fix memory leak in non DEFER_STRILE_LOAD mode (ie default)
    when there is both a StripOffsets and TileOffsets tag, or a
    StripByteCounts and TileByteCounts
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2689,
    bsc#1042805, CVE-2017-9403)
  * libtiff/tif_ojpeg.c
    + fix potential memory leak in
    OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2670
  * libtiff/tif_fax3.c
    + avoid crash in Fax3Close() on empty file. Patch by Alan
    Coopersmith + complement by myself.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2673
  * libtiff/tif_read.c
    + TIFFFillStrip(): add limitation to the number of bytes read
    in case td_stripbytecount[strip] is bigger than reasonable,
    so as to avoid excessive memory allocation.
  * libtiff/tif_zip.c, tif_pixarlog.c, tif_predict.c
    + fix memory leak when the underlying codec (ZIP, PixarLog)
    succeeds its setupdecode() method, but PredictorSetup fails.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStrip() and TIFFFillTile(): avoid excessive memory
    allocation in case of shorten files. Only effective on 64 bit
    builds and non-mapped cases.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStripPartial() / TIFFSeek(), avoid potential integer
    overflows with read_ahead in CHUNKY_STRIP_READ_SUPPORT mode.
    Should especially occur on 32 bit platforms.
  * libtiff/tif_read.c
    + TIFFFillStripPartial()
    + avoid excessive memory allocation in case of shorten files.
    Only effective on 64 bit builds.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + update tif_rawcc in CHUNKY_STRIP_READ_SUPPORT mode with
    tif_rawdataloaded when calling TIFFStartStrip() or
    TIFFFillStripPartial(). This avoids reading beyond tif_rawdata
    when bytecount &gt; tif_rawdatasize. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1545.
    Credit to OSS-Fuzz
  * libtiff/tif_color.c
    + avoid potential int32 overflow in TIFFYCbCrToRGBInit() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1533
    Credit to OSS-Fuzz
  * libtiff/tif_pixarlog.c, tif_luv.c
    + avoid potential int32 overflows in multiply_ms() and add_ms().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1558
    Credit to OSS-Fuzz
  * libtiff/tif_packbits.c
    + fix out-of-buffer read in PackBitsDecode() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1563
    Credit to OSS-Fuzz
  * libtiff/tif_luv.c
    + LogL16InitState(): avoid excessive memory allocation when
    RowsPerStrip tag is missing.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_lzw.c
    + update dec_bitsleft at beginning of LZWDecode(), and update
    tif_rawcc at end of LZWDecode(). This is needed to properly
    work with the latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode.
  * libtiff/tif_pixarlog.c
    + PixarLogDecode(): resync tif_rawcp with next_in and tif_rawcc
    with avail_in at beginning and end of function, similarly to
    what is done in LZWDecode(). Likely needed so that it works
    properly with latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode. But untested...
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): add basic validation of luma and
    refBlackWhite coefficients (just check they are not NaN for
    now), to avoid potential float to int overflows. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1663
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): stricter validation for refBlackWhite
    coefficients values. To avoid invalid float-&gt;int32 conversion.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1718
    Credit to OSS Fuzz
  * tools/fax2tiff.c (main)
    + Applied patch by Joerg Ahrens to fix passing client data for
    Win32 builds using tif_win32.c (USE_WIN32_FILEIO defined) for
    file I/O. Patch was provided via email on November 20, 2016.
  * tools/tiffcp.c
    + avoid uint32 underflow in cpDecodedStrips that can cause
    various issues, such as buffer overflows in the library.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2598
  * tools/tiffcrop.c
    + fix readContigStripsIntoBuffer() in -i (ignore) mode so that
    the output buffer is correctly incremented to avoid write
    outside bounds. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2620
  * tools/tiffcrop.c
    + add 3 extra bytes at end of strip buffer in
    readSeparateStripsIntoBuffer() to avoid read outside of heap
    allocated buffer. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2621
  * tools/tiffcrop.c
    + fix integer division by zero when BitsPerSample is missing.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2619
  * tools/tiffinfo.c
    + fix null pointer dereference in -r mode when the image has no
    StripByteCount tag. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2594
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2597
  * tools/tif_dir.c
    + when TIFFGetField(, TIFFTAG_NUMBEROFINKS, ) is called, limit
    the return number of inks to SamplesPerPixel, so that code
    that parses ink names doesn't go past the end of the buffer.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2599
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2607
  * tools/tiffcp.c
    + fix uint32 underflow/overflow that can cause heap-based buffer
    overflow. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2610
  * tools/tiffcp.c
    + replace assert( (bps % 8) == 0 ) by a non assert check.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2605
  * tools/tiff2ps.c
    + fix 2 heap-based buffer overflows (in PSDataBW and
    PSDataColorContig). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2633 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2634.
  * tools/tiff2pdf.c
    + prevent heap-based buffer overflow in -j mode on a paletted
    image. Note: this fix errors out before the overflow happens.
    There could probably be a better fix.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2635
  * tools/tiff2pdf.c
    + fix wrong usage of memcpy() that can trigger unspecified behaviour.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2638
  * tools/tiff2pdf.c
    + avoid potential invalid memory read in t2p_writeproc.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2639
  * tools/tiff2pdf.c
    + avoid potential heap-based overflow in t2p_readwrite_pdf_image_tile().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2640
  * tools/tiffcrop.c
    + remove extraneous TIFFClose() in error code path, that caused
    double free.
    Related to http://bugzilla.maptools.org/show_bug.cgi?id=2535
  * tools/tiffcp.c
    + error out cleanly in cpContig2SeparateByRow and
    cpSeparate2ContigByRow if BitsPerSample != 8 to avoid heap
    based overflow.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2656 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2657
  * tools/raw2tiff.c
    + avoid integer division by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2631
  * tools/tiff2ps.c
    + call TIFFClose() in error code paths.
  * tools/fax2tiff.c
    + emit appropriate message if the input file is empty. Patch by
    Alan Coopersmith.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2672
  * tools/tiff2bw.c
    + close TIFF handle in error code path.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2677
  * Other issues fixed:
    + bsc#1042804, CVE-2017-9404
- Removed patches:
  * tiff-4.0.7-CVE-2015-7554.patch
  * tiff-4.0.7-CVE-2017-5225.patch
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  * tiff-CVE-2016-10266.patch
  * tiff-CVE-2016-10267.patch
  * tiff-CVE-2016-10268.patch
  * tiff-CVE-2016-10269.patch
  * tiff-CVE-2016-10270.patch
  * tiff-CVE-2016-10271.patch
  * tiff-CVE-2016-10272.patch
    + Fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1511956800">- Upgrade to upstream release 4.0.9
  * Changes in the software configuration:
    + test/Makefile.am: Add some tests for tiff2bw.
    + .appveyor.yml, .travis.yml, build/travis-ci: apply patches
    0001-ci-Travis-script-improvements.patch and
    0002-ci-Invoke-helper-script-via-shell.patch by Roger Leigh
    + .travis.yml, build/travis-ci: new files from
    0001-ci-Add-Travis-support-for-Linux-builds-with-Autoconf.patch
    by Roger Leigh. This patch adds support for the Travis-CI
    service.
    + .appveyor.yml: new file from
    0002-ci-Add-AppVeyor-support.patch by Roger Leigh (sent to
    mailing list on 2017-06-08) This patch adds a .appveyor.yml
    file to the top-level. This allows one to opt in to having a
    branch built on Windows with Cygwin, MinGW and MSVC
    automatically when a branch is pushed to GitHub, GitLab,
    BitBucket or any other supported git hosting service.
    + CMakeLists.txt, test/CMakeLists.txt,
    test/TiffTestCommon.cmake: apply patch
    0001-cmake-Improve-Cygwin-and-MingGW-test-support.patch from
    Roger Leigh. This patch makes the CMake build system support
    running the tests with MinGW or  Cygwin.
    + test/tiffcp-lzw-compat.sh, test/images/quad-lzw-compat.tiff:
    new files to test old-style LZW decompression
    + test/common.sh, Makefile.am, CMakeList.txt: updated with above
    + test/Makefile.am: add missing reference to
    images/quad-lzw-compat.tiff to fix "make distcheck". Patch by
    Roger Leigh
    + nmake.opt: support a DEBUG=1 option, so as to adjust OPTFLAGS
    and use /MDd runtime in debug mode.
  * Changes in libtiff:
    + libtiff/tif_color.c: TIFFYCbCrToRGBInit(): stricter clamping
    to avoid int32 overflow in TIFFYCbCrtoRGB(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1844
    + libtiff/tif_getimage.c: initYCbCrConversion(): stricter
    validation for refBlackWhite coefficients values. To avoid
    invalid float-&gt;int32 conversion (when refBlackWhite[0] ==
    2147483648.f) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1907
    + libtiff/tif_dirinfo.c, tif_dirread.c: add
    _TIFFCheckFieldIsValidForCodec(), and use it in
    TIFFReadDirectory() so as to ignore fields whose tag is a
    codec-specified tag but this codec is not enabled. This avoids
    TIFFGetField() to behave differently depending on whether the
    codec is enabled or not, and thus can avoid stack based buffer
    overflows in a number of TIFF utilities such as tiffsplit,
    tiffcmp, thumbnail, etc. Patch derived from
    0063-Handle-properly-CODEC-specific-tags.patch
    (http://bugzilla.maptools.org/show_bug.cgi?id=2580) by Raphaël
    Hertzog.
    Fixes: http://bugzilla.maptools.org/show_bug.cgi?id=2580
    http://bugzilla.maptools.org/show_bug.cgi?id=2693
    http://bugzilla.maptools.org/show_bug.cgi?id=2625
    (CVE-2016-10095, bsc#1017690)
    http://bugzilla.maptools.org/show_bug.cgi?id=2564
    (CVE-2015-7554, bsc#960341)
    http://bugzilla.maptools.org/show_bug.cgi?id=2561
    (CVE-2016-5318, bsc#983436)
    http://bugzilla.maptools.org/show_bug.cgi?id=2499
    (CVE-2014-8128, bsc#969783)
    http://bugzilla.maptools.org/show_bug.cgi?id=2441
    http://bugzilla.maptools.org/show_bug.cgi?id=2433
    + libtiff/tif_swab.c: if DISABLE_CHECK_TIFFSWABMACROS is
    defined, do not do the #ifdef TIFFSwabXXX checks. Make it
    easier for GDAL to rename the symbols of its internal libtiff
    copy.
    + libtiff/tif_dirread.c: fix regression of libtiff 4.0.8 in
    ChopUpSingleUncompressedStrip() regarding update of newly
    single-strip uncompressed files whose bytecount is 0. Before
    the change of 2016-12-03, the condition bytecount==0 used to
    trigger an early exit/disabling of strip chop. Re-introduce
    that in update mode. Otherwise this cause later incorrect
    setting for the value of StripByCounts/StripOffsets.
    (https://trac.osgeo.org/gdal/ticket/6924)
    + libtiff/tif_dirread.c: TIFFFetchStripThing(): limit the
    number of items read in StripOffsets/StripByteCounts tags to
    the number of strips to avoid excessive memory allocation.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2215
    + libtiff/tif_getimage.c: avoid many (harmless) unsigned int
    overflows.
    + libtiff/tif_fax3.c: avoid unsigned int overflow in
    Fax3Encode2DRow(). Could potentially be a bug with huge rows.
    + libtiff/tif_jpeg.c: avoid (harmless) unsigned int overflow on
    tiled images.
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts() and BYTECOUNTLOOKSBAD when file is
    too short.
    + libtiff/tif_predict.c: decorate legitimate functions where
    unsigned int overflow occur with
    TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts()
    + libtiff/tiffiop.h: add TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    macro to disable CLang warnings raised by
  - fsanitize=undefined,unsigned-integer-overflow
    + libtiff/tif_jpeg.c: add anti-denial of service measure to
    avoid excessive CPU consumption on progressive JPEGs with a
    huge number of scans. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    Note: only affects libtiff since 2014-12-29 where support of
    non-baseline JPEG was added.
    + libtiff/tif_jpeg.c: error out at decoding time if anticipated
    libjpeg memory allocation is above 100 MB. libjpeg in case of
    multiple scans, which is allowed even in baseline JPEG, if
    components are spread over several scans and not
    interleavedin a single one, needs to allocate memory (or
    backing store) for the whole strip/tile. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    This limitation may be overriden by setting the
    LIBTIFF_ALLOW_LARGE_LIBJPEG_MEM_ALLOC environment variable, or
    recompiling libtiff with a custom value of
    TIFF_LIBJPEG_LARGEST_MEM_ALLOC macro.
    + libtiff/tif_jbig.c: fix memory leak in error code path of
    JBIGDecode()
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2706
    (CVE-2017-9936, bsc#1046073)
    + libtiff/tif_dirread.c: in TIFFReadDirEntryFloat(), check that
    a double value can fit in a float before casting.
    + libtiff/tiffiop.h, libtiff/tif_jpeg.c, libtiff/tif_jpeg_12.c,
    libtiff/tif_read.c: make TIFFReadScanline() works in
    CHUNKY_STRIP_READ_SUPPORT mode with JPEG stream with multiple
    scans. Also make configurable through a
    LIBTIFF_JPEG_MAX_ALLOWED_SCAN_NUMBER environment variable the
    maximum number of scans allowed. Defaults to 100.
    + libtiff/tif_read.c: TIFFFillTile(): add limitation to the
    number of bytes read in case td_stripbytecount[strip] is
    bigger than reasonable, so as to avoid excessive memory
    allocation (similarly to what was done for TIFFFileStrip() on
    2017-05-10)
    + libtiff/tif_getimage.c: use
    _TIFFReadEncodedStripAndAllocBuffer(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2433
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedStripAndAllocBuffer() function, variant of
    TIFFReadEncodedStrip() that allocates the decoded buffer only
    after a first successful TIFFFillStrip(). This avoids
    excessive memory allocation on corrupted files.
    + libtiff/tif_dirwrite.c: in TIFFWriteDirectoryTagCheckedXXXX()
    functions associated with LONG8/SLONG8 data type, replace
    assertion that the file is BigTIFF, by a non-fatal error.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2712
    + libtiff/tif_read.c: TIFFStartTile(): set tif_rawcc to
    tif_rawdataloaded when it is set. Similarly to
    TIFFStartStrip(). This issue was revealed by the change of
    2017-06-30 in TIFFFileTile(), limiting the number of bytes
    read. But it could probably have been hit too in
    CHUNKY_STRIP_READ_SUPPORT mode previously. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2454
    + libtiff/tif_error.c, tif_warning.c: correctly use va_list
    when both an old-style and new-style warning/error handlers
    are installed. Patch by Paavo Helde (sent on the mailing list)
    + libtiff/tif_getimage.c: use _TIFFReadTileAndAllocBuffer().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2470
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedTileAndAllocBuffer() and
    _TIFFReadTileAndAllocBuffer() variants of
    TIFFReadEncodedTile() and TIFFReadTile() that allocates the
    decoded buffer only after a first successful TIFFFillTile().
    This avoids excessive memory allocation on corrupted files.
    + libtiff/tif_pixarlog.c: avoid excessive memory allocation on
    decoding when RowsPerStrip tag is not defined (and thus
    td_rowsperstrip == UINT_MAX) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2554
    + libtiff/tif_lzw.c: fix 4.0.8 regression in the decoding of
    old-style LZW compressed files.
    + libtiff/tif_lzw.c: fix potential out-of-buffer read on 1-byte
    LZW strips. Crashing issue only on memory mapped files, where
    the strip offset is the last byte of the file, and the file
    size is a multiple of one page size on the CPU architecture
    (typically 4096)
    + libtiff/tif_dir.c: avoid potential null pointer dereference
    in _TIFFVGetField() on corrupted TIFFTAG_NUMBEROFINKS tag
    instance.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2713
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + libtiff/tif_read.c: TIFFFillStrip() / TIFFFillTile().
    Complementary fix for
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 in the
    isMapped() case, so as to avoid excessive memory allocation
    when we need a temporary buffer but the file is truncated.
    + libtiff/tif_read.c: in TIFFFetchStripThing(), only grow the
    arrays that hold StripOffsets/StripByteCounts, when they are
    smaller than the expected number of striles, up to 1 million
    striles, and error out beyond. Can be tweaked by setting the
    environment variable LIBTIFF_STRILE_ARRAY_MAX_RESIZE_COUNT.
    This partially goes against a change added on 2002-12-17 to
    accept those arrays of wrong sizes, but is needed to avoid
    denial of services. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2350
    + libtiff/tif_read.c: add protection against excessive memory
    allocation attempts in TIFFReadDirEntryArray() on short files.
    Effective for mmap'ed case. And non-mmap'ed case, but
    restricted to 64bit builds. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2675
    + libtiff/tif_luv.c: LogLuvInitState(): avoid excessive memory
    allocation when RowsPerStrip tag is missing. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2683
    + libtiff/tif_getimage.c: gtTileContig() and gtTileSeparate():
    properly break from loops on error when stoponerr is set,
    instead of going on iterating on row based loop.
    + libtiff/tif_getimage.c: fix fromskew computation when
    to-be-skipped pixel number is not a multiple of the horizontal
    subsampling, and also in some other cases. Impact
    putcontig8bitYCbCr44tile, putcontig8bitYCbCr42tile,
    putcontig8bitYCbCr41tile, putcontig8bitYCbCr21tile and
    putcontig8bitYCbCr12tile Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2637 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2691
    + libtiff/tif_luv.c: further reduce memory requirements for
    temporary buffer when RowsPerStrip &gt;= image_length in
    LogLuvInitState() and LogL16InitState(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2700
    + libtiff/tif_dirwrite.c: replace assertion related to not
    finding the SubIFD tag by runtime check (in
    TIFFWriteDirectorySec()) Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2727
    + libtiff/tif_dirwrite.c: replace assertion to tag value not
    fitting on uint32 when selecting the value of SubIFD tag by
    runtime check (in TIFFWriteDirectoryTagSubifd()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2728
    + libtiff/tif_jpeg.c: accept reading the last strip of a JPEG
    compressed file if the codestream height is larger than the
    truncated height of the strip. Emit a warning in this
    situation since this is non compliant.
    + libtiff/tiffiop.h, tif_aux.c: redirect SeekOK() macro to a
    _TIFFSeekoK() function that checks if the offset is not
    bigger than INT64_MAX, so as to avoid a -1 error return code
    of TIFFSeekFile() to match a required seek to UINT64_MAX/-1.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2726
    + libtiff/tif_dirread.c: add NULL check to avoid likely false
    positive null-pointer dereference warning by CLang Static
    Analyzer.
    + libtiff/libtiff.def: add TIFFReadRGBAStripExt and
    TIFFReadRGBATileExt Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2735
    + libtiff/tif_jpeg.c: add compatibility with libjpeg-turbo
    1.5.2 that honours max_memory_to_use &gt; 0. Cf
    https://github.com/libjpeg-turbo/libjpeg-turbo/issues/162
    + libtiff/tif_getimage.c: avoid floating point division by zero
    in initCIELabConversion() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3733
  * Changes in the tools:
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + tools/tiffset.c: fix setting a single value for the
    ExtraSamples tag (and other tags with variable number of
    values). So 'tiffset -s ExtraSamples 1 X'. This only worked
    when setting 2 or more values, but not just one.
    + tools/fax2tiff.c (_FAX_Client_Data): Pass FAX_Client_Data as
    the client data. This client data is not used at all at the
    moment, but it makes the most sense. Issue that the value of
    client_data.fd was passed where a pointer is expected.
    + tools/tiff2pdf.c (t2p_sample_realize_palette): Fix possible
    arithmetic overflow in bounds checking code and eliminate
    comparison between signed and unsigned type.
    + tools/tiff2bw.c (main): Free memory allocated in the tiff2bw
    program. This is in response to the report associated with
    CVE-2017-16232, bsc#1069213 but does not solve the extremely
    high memory usage with the associated POC file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Fix check section:
  + Make sure to get back to the right directory after chdir to
    'tools', or we can't run the 2nd test suite.
  + Fix typo: the tests are located in a directory called 'test',
    not 'tests'.</changelog>
  <changelog author="mvetter@suse.com" date="1518782400">- bsc#1046077: Add tiff-4.0.9-bsc1046077-CVE-2017-9935.patch
  Fix Heap-based buffer overflow in t2p_write_pdf</changelog>
  <changelog author="mvetter@suse.com" date="1519128000">- bsc#1081690: Add tiff-4.0.9-bsc1081690-CVE-2018-5784.patch
  Fix uncontrolled resource consumption in TIFFSetDirectory</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- security update
  * CVE-2018-10963 [bsc#1092949]
    + tiff-CVE-2018-10963.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526644800">- security update
  * CVE-2017-18013 [bsc#1074317]
    + tiff-CVE-2017-18013.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113600">- security update
  * CVE-2018-7456 [bsc#1082825]
    + tiff-CVE-2018-7456.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113601">- security update
  * CVE-2017-11613 [bsc#1082332]
    + tiff-CVE-2017-11613.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528200000">- security update
  * CVE-2018-8905 [bsc#1086408]
    + tiff-CVE-2018-8905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534334400">- security update
  * CVE-2018-10779 [bsc#1092480]
    + tiff-CVE-2018-10779.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
</package>
<package pkgid="c63eafb94aeb21097a7c946cdb36536ed0a3a717deb15aba30844ad7869d3036" name="libtiff-devel" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="lp150.4.9.1"/>
  <changelog author="fstrba@suse.com" date="1480420800">- Upgrade to upstream release 4.0.7
  * libtiff/tif_aux.c
    + Fix crash in TIFFVGetFieldDefaulted() when requesting
    Predictor tag and that the zip/lzw codec is not configured.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2591
  * libtiff/tif_compress.c
    + Make TIFFNoDecode() return 0 to indicate an error and make
    upper level read routines treat it accordingly. (linked to the
    test case of http://bugzilla.maptools.org/show_bug.cgi?id=2517)
  * libtiff/tif_dir.c
    + Discard values of SMinSampleValue and SMaxSampleValue when
    they have been read and the value of SamplesPerPixel is
    changed afterwards (like when reading a OJPEG compressed image
    with a missing SamplesPerPixel tag, and whose photometric is
    RGB or YCbCr, forcing SamplesPerPixel being 3). Otherwise when
    rewriting the directory (for example with tiffset, we will
    expect 3 values whereas the array had been allocated with just
    one), thus causing a out of bound read access. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658, bsc#974840)
  * libtiff/tif_dirread.c
    + In TIFFFetchNormalTag(), do not dereference NULL pointer when
    values of tags with TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII
    access are 0-byte arrays. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2593 (regression
    introduced by previous fix done on 2016-11-11 for
    CVE-2016-9297, bsc#1010161). Assigned as CVE-2016-9448,
    bsc#1011103
    + In TIFFFetchNormalTag(), make sure that values of tags with
    TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII access are null
    terminated, to avoid potential read outside buffer in
    _TIFFPrintField(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2590
    (CVE-2016-9297, bsc#1010161)
    + Initialize doubledata at line 3693 to NULL to please MSVC 2013
    + Prevent reading ColorMap or TransferFunction if
    BitsPerPixel &gt; 24, so as to avoid huge memory allocation and
    file read attempts
    + Reject images with OJPEG compression that have no
    TileOffsets/StripOffsets tag, when OJPEG compression is
    disabled. Prevent null pointer dereference in
    TIFFReadRawStrip1() and other functions that expect
    td_stripbytecount to be non NULL. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2585
    + When compiled with DEFER_STRILE_LOAD, fix regression, when
    reading a one-strip file without a StripByteCounts tag.
    + Workaround false positive warning of Clang Static Analyzer
    about null pointer dereference in TIFFCheckDirOffset().
  * libtiff/tif_dirwrite.c
    + Avoid null pointer dereference on td_stripoffset when writing
    directory, if FIELD_STRIPOFFSETS was artificially set for a
    hack case in OJPEG case. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658,
    bsc#974840)
    + Fix truncation to 32 bit of file offsets in TIFFLinkDirectory()
    and TIFFWriteDirectorySec() when aligning directory offsets on
    an even offset (affects BigTIFF).
  * libtiff/tif_dumpmode.c
    + DumpModeEncode() should return 0 in case of failure so that
    the above mentionned functions detect the error.
  * libtiff/tif_fax3.c
    + remove dead assignment in Fax3PutEOLgdal().
  * libtiff/tif_fax3.h
    + make Param member of TIFFFaxTabEnt structure a uint16 to
    reduce size of the binary.
  * libtiff/tif_getimage.c
    + Fix out-of-bound reads in TIFFRGBAImage interface in case of
    unsupported values of SamplesPerPixel/ExtraSamples for
    LogLUV/CIELab. Add explicit call to TIFFRGBAImageOK() in
    TIFFRGBAImageBegin(). Fix CVE-2015-8665 and CVE-2015-8683.
    + Fix some benign warnings which appear in 64-bit compilation
    under Microsoft Visual Studio of the form "Arithmetic
    overflow: 32-bit value is shifted, then cast to 64-bit value.
    Results might not be an expected value."
    + TIFFRGBAImageOK: Reject attempts to read floating point images.
  * libtiff/tif_luv.c
    + Fix potential out-of-bound writes in decode functions in non
    debug builds by replacing assert()s by regular if checks
    (http://bugzilla.maptools.org/show_bug.cgi?id=2522). Fix
    potential out-of-bound reads in case of short input data.
    + Validate that for COMPRESSION_SGILOG and PHOTOMETRIC_LOGL,
    there is only one sample per pixel. Avoid potential invalid
    memory write on corrupted/unexpected images when using the
    TIFFRGBAImageBegin() interface
  * libtiff/tif_next.c
    + Fix potential out-of-bound write in NeXTDecode()
    (http://bugzilla.maptools.org/show_bug.cgi?id=2508)
  * libtiff/tif_pixarlog.c
    + Avoid zlib error messages to pass a NULL string to %s
    formatter, which is undefined behaviour in sprintf().
    + Fix out-of-bounds write vulnerabilities in heap allocated
    buffers. Reported as MSVR 35094.
    + Fix potential buffer write overrun in PixarLogDecode() on
    corrupted/unexpected images (CVE-2016-5875, bsc#987351)
    + Fix write buffer overflow in PixarLogEncode if more input
    samples are provided than expected by PixarLogSetupEncode.
    Idea based on libtiff-CVE-2016-3990.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, but with different and simpler
    check. (http://bugzilla.maptools.org/show_bug.cgi?id=2544,
    bsc#975069)
  * libtiff/tif_predict.c
    + PredictorSetup: Enforce bits-per-sample requirements of
    floating point predictor (3). Fixes CVE-2016-3622 "Divide By
    Zero in the tiff2rgba tool." (bsc#974449)
  * libtiff/tif_predict.h, libtiff/tif_predict.c
    + Replace assertions by runtime checks to avoid assertions in
    debug mode, or buffer overflows in release mode. Can happen
    when dealing with unusual tile size like YCbCr with
    subsampling. Reported as MSVR 35105.
  * libtiff/tif_read.c
    + Fix out-of-bounds read on memory-mapped files in
    TIFFReadRawStrip1() and TIFFReadRawTile1() when stripoffset
    is beyond tmsize_t max value
    + Make TIFFReadEncodedStrip() and TIFFReadEncodedTile() directly
    use user provided buffer when no compression (and other
    conditions) to save a memcpy().
  * libtiff/tif_strip.c
    + Make TIFFNumberOfStrips() return the td-&gt;td_nstrips value when
    it is non-zero, instead of recomputing it. This is needed in
    TIFF_STRIPCHOP mode where td_nstrips is modified. Fixes a read
    outsize of array in tiffsplit (or other utilities using
    TIFFNumberOfStrips()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2587
    (CVE-2016-9273, bsc#1010163)
  * libtiff/tif_write.c
    + Fix issue in error code path of TIFFFlushData1() that didn't
    reset the tif_rawcc and tif_rawcp members. I'm not completely
    sure if that could happen in practice outside of the odd
    behaviour of t2p_seekproc() of tiff2pdf). The report points
    that a better fix could be to check the return value of
    TIFFFlushData1() in places where it isn't done currently, but
    it seems this patch is enough. Reported as MSVR 35095.
    + Make TIFFWriteEncodedStrip() and TIFFWriteEncodedTile()
    directly use user provided buffer when no compression to save
    a memcpy().
    + TIFFWriteEncodedStrip() and TIFFWriteEncodedTile() should
    return -1 in case of failure of tif_encodestrip() as documented
  * tools/fax2tiff.D    c
    + Fix segfault when specifying -r without argument. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2572
  * tools/Makefile.am
    + The libtiff tools bmp2tiff, gif2tiff, ras2tiff, sgi2tiff,
    sgisv, and ycbcr are completely removed from the distribution.
    The libtiff tools rgb2ycbcr and thumbnail are only built in
    the build tree for testing. Old files are put in new 'archive'
    subdirectory of the source repository, but not in
    distribution archives. These changes are made in order to
    lessen the maintenance burden.
  * tools/rgb2ycbcr.c
    + Validate values of -v and -h parameters to avoid potential
    divide by zero. Fixes CVE-2016-3623, bsc#974618
    (http://bugzilla.maptools.org/show_bug.cgi?id=2569)
  * tools/tiff2bw.c
    + Fix weight computation that could result of color value
    overflow (no security implication). Fix
    http://bugzilla.maptools.org/show_bug.cgi?id=2550.
  * tools/tiff2pdf.c
    + Avoid undefined behaviour related to overlapping of source and
    destination buffer in memcpy() call in
    t2p_sample_rgbaa_to_rgb() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2577
    + Fix out-of-bounds write vulnerabilities in heap allocate buffer
    in t2p_process_jpeg_strip(). Reported as MSVR 35098.
    + Fix potential integer overflows on 32 bit builds in
    t2p_read_tiff_size() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2576
    + Fix read -largely- outsize of buffer in
    t2p_readwrite_pdf_image_tile(), causing crash, when reading a
    JPEG compressed image with TIFFTAG_JPEGTABLES length being one.
    Reported as MSVR 35101. CVE-2016-9453, bsc#1011107
    + Fix write buffer overflow of 2 bytes on JPEG compressed images.
    Reported as TALOS-CAN-0187, CVE-2016-5652, bsc#1007280. Also
    prevents writing 2 extra uninitialized bytes to the file
    stream.
  * tools/tiff2rgba.c
    + Fix integer overflow in size of allocated buffer, when -b mode
    is enabled, that could result in out-of-bounds write. Based
    initially on patch tiff-CVE-2016-3945.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, with correction for invalid
    tests that rejected valid files.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2545, bsc#974614)
  * tools/tiffcp.c
    + Fix out-of-bounds write on tiled images with odd tile width vs
    image width. Reported as MSVR 35103. (bsc#1011841,
    CVE-2016-9538)
    + Fix read of undefined variable in case of missing required
    tags. Found on test case of MSVR 35100.
  * tools/tiffcrop.c
    + Avoid access outside of stack allocated array on a tiled
    separate TIFF with more than 8 samples per pixel.
    (CVE-2016-5321, CVE-2016-5323,
    http://bugzilla.maptools.org/show_bug.cgi?id=2558,
    http://bugzilla.maptools.org/show_bug.cgi?id=2559, bsc#984813,
    bsc#984815)
    + Fix memory leak in (recent) error code path. Fixes Coverity
    1394415.
    + Fix multiple uint32 overflows in writeBufferToSeparateStrips(),
    writeBufferToContigTiles() and writeBufferToSeparateTiles()
    that could cause heap buffer overflows. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2592
    + Fix out-of-bound read of up to 3 bytes in
    readContigTilesIntoBuffer(). Reported as MSVR 35092.
    + Fix out-of-bounds write in loadImage(). From patch
    libtiff-CVE-2016-3991.patch from
    libtiff-4.0.3-25.el7_2.src.rpm
    (http://bugzilla.maptools.org/show_bug.cgi?id=2543, bsc#975070)
    + Fix read of undefined buffer in readContigStripsIntoBuffer()
    due to uint16 overflow. Reported as MSVR 35100. (bsc#1011841,
    CVE-2016-9538)
    + Fix various out-of-bounds write vulnerabilities in heap or
    stack allocated buffers. Reported as MSVR 35093, MSVR 35096
    and MSVR 35097.
    + readContigTilesIntoBuffer: Fix signed/unsigned comparison
    warning.
  * tools/tiffdump.c
    + Fix a few misaligned 64-bit reads warned by -fsanitize
    + ReadDirectory: Remove uint32 cast to_TIFFmalloc() argument
    which resulted in Coverity report. Added more mutiplication
    overflow checks
  * tools/tiffinfo.c
    + Fix out-of-bound read on some tiled images.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2517)
    + TIFFReadContigTileData: Fix signed/unsigned comparison warning.
    + TIFFReadSeparateTileData: Fix signed/unsigned comparison
    warning.
- Removed patches:
  * tiff-4.0.4-uninitialized_mem_NeXTDecode.patch
  * tiff-4.0.6-CVE-2015-8782.patch
  * tiff-4.0.6-CVE-2016-3186.patch
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Fixed in the upsteam release
- Changed patch:
  * tiff-4.0.6-CVE-2015-7554.patch -&gt; tiff-4.0.7-CVE-2015-7554.patch
  - Rediffed to the changed context</changelog>
  <changelog author="idonmez@suse.com" date="1482148800">- Update homepage</changelog>
  <changelog author="jengelh@inai.de" date="1482148801">- Drop --with-pic, this is only for static libs (which are not built)
- Update descriptions</changelog>
  <changelog author="fstrba@suse.com" date="1484308800">- Added patch:
  * tiff-4.0.7-CVE-2017-5225.patch
  - Upstream fix for CVE-2017-5225, bsc#1019611: heap buffer
    overflow in tools/tiffcp via a crafted BitsPerSample value</changelog>
  <changelog author="fstrba@suse.com" date="1486036800">- Added patch:
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  - Fix a regression introduced in 4.0.7 (bsc#1022103)
  - http://bugzilla.maptools.org/show_bug.cgi?id=2636</changelog>
  <changelog author="fstrba@suse.com" date="1490788800">- Added patches:
  * tiff-CVE-2016-10266.patch
    + Upstream fix for CVE-2016-10266, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031263)
  * tiff-CVE-2016-10267.patch
    + Upstream fix for CVE-2016-10267, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031262)
  * tiff-CVE-2016-10268.patch
    + Upstream fix for CVE-2016-10268, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031255)
  * tiff-CVE-2016-10269.patch
    + Upstream fix for CVE-2016-10269, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031254)
  * tiff-CVE-2016-10270.patch
    + Upstream fix for CVE-2016-10270, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031250)
  * tiff-CVE-2016-10271.patch
    + Upstream fix for CVE-2016-10271, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read and buffer overflow) or possibly have unspecified
    other impact via a crafted TIFF image (bsc#1031249)
  * tiff-CVE-2016-10272.patch
    + Upstream fix for CVE-2016-10272, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    overflow) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031247)</changelog>
  <changelog author="fstrba@suse.com" date="1497960000">- Upgrade to upstream release 4.0.8
  * libtiff/tif_getimage.c, libtiff/tif_open.c
    + add parenthesis to fix cppcheck clarifyCalculation warnings
  * libtiff/tif_predict.c, libtiff/tif_print.c
    + fix printf unsigned vs signed formatting (cppcheck
    invalidPrintfArgType_uint warnings)
  * libtiff/tif_read.c, libtiff/tiffiop.h
    + fix uint32 overflow in TIFFReadEncodedStrip() that caused an
    integer division by zero. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2596
  * libtiff/tif_pixarlog.c, libtiff/tif_luv.c
    + fix heap-based buffer overflow on generation of PixarLog / LUV
    compressed files, with ColorMap, TransferFunction attached and
    nasty plays with bitspersample. The fix for LUV has not been
    tested, but suffers from the same kind of issue of PixarLog.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2604
  * libtiff/tif_strip.c
    + revert the change in TIFFNumberOfStrips() done for
    http://bugzilla.maptools.org/show_bug.cgi?id=2587 /
    CVE-2016-9273 since the above change is a better fix that
    makes it unnecessary.
  * libtiff/tif_dirread.c
    + modify ChopUpSingleUncompressedStrip() to instanciate compute
    ntrips as TIFFhowmany_32(td-&gt;td_imagelength, rowsperstrip),
    instead of a logic based on the total size of data. Which is
    faulty is the total size of data is not sufficient to fill the
    whole image, and thus results in reading outside of the
    StripByCounts/StripOffsets arrays when using
    TIFFReadScanline(). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2608.
  * libtiff/tif_ojpeg.c
    + make OJPEGDecode() early exit in case of failure in
    OJPEGPreDecode(). This will avoid a divide by zero, and
    potential other issues. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2611
  * libtiff/tif_write.c
    + fix misleading indentation as warned by GCC.
  * libtiff/tif_fax3.h
    + revert change done on 2016-01-09 that made Param member of
    TIFFFaxTabEnt structure a uint16 to reduce size of the
    binary. It happens that the Hylafax software uses the tables
    that follow this typedef (TIFFFaxMainTable, TIFFFaxWhiteTable,
    TIFFFaxBlackTable), although they are not in a public libtiff
    header. Raised by Lee Howard.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2636
  * libtiff/tiffio.h, libtiff/tif_getimage.c
    + add TIFFReadRGBAStripExt() and TIFFReadRGBATileExt() variants
    of the functions without ext, with an extra argument to control
    the stop_on_error behaviour.
  * libtiff/tif_getimage.c
    + fix potential memory leaks in error code path of
    TIFFRGBAImageBegin().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2627
  * libtiff/tif_jpeg.c
    + increase libjpeg max memory usable to 10 MB instead of libjpeg
    1MB default. This helps when creating files with "big" tile,
    without using libjpeg temporary files.
    Related to https://trac.osgeo.org/gdal/ticket/6757
  * libtiff/tif_jpeg.c
    + avoid integer division by zero in JPEGSetupEncode() when
    horizontal or vertical sampling is set to 0.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2653,
    bsc#1033127, CVE-2017-7595
  * libtiff/tif_dirwrite.c
    + in TIFFWriteDirectoryTagCheckedRational, replace assertion by
    runtime check to error out if passed value is strictly
    negative.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2535,
    bsc#1038438, CVE-2016-10371
  * libtiff/tif_dirread.c
    + avoid division by floating point 0 in
    TIFFReadDirEntryCheckedRational() and
    TIFFReadDirEntryCheckedSrational(), and return 0 in that case
    (instead of infinity as before presumably) Apparently some
    sanitizers do not like those divisions by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2644,
    bsc#1033118, CVE-2017-7598
  * libtiff/tif_dir.c, tif_dirread.c, tif_dirwrite.c
    + implement various clampings of double to other data types to
    avoid undefined behaviour if the output range isn't big enough
    to hold the input value.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2643
    http://bugzilla.maptools.org/show_bug.cgi?id=2642
    http://bugzilla.maptools.org/show_bug.cgi?id=2646
    http://bugzilla.maptools.org/show_bug.cgi?id=2647,
    bsc#1033126, CVE-2017-7596, bsc#1033120, CVE-2017-7597,
    bsc#1033113, CVE-2017-7599, bsc#1033112, CVE-2017-7600,
  * libtiff/tif_jpeg.c
    + validate BitsPerSample in JPEGSetupEncode() to avoid undefined
    behaviour caused by invalid shift exponent.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2648,
    bsc#1033111, CVE-2017-7601
  * libtiff/tif_read.c
    + avoid potential undefined behaviour on signed integer addition
    in TIFFReadRawStrip1() in isMapped() case.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2650,
    bsc#1033109, CVE-2017-7602
  * libtiff/tif_getimage.c
    + add explicit uint32 cast in putagreytile to avoid
    UndefinedBehaviorSanitizer warning. Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2658,
    bsc#1033131, CVE-2017-7592
  * libtiff/tif_read.c
    + TIFFReadBufferSetup(): use _TIFFcalloc() to zero initialize
    tif_rawdata.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2651,
    bsc#1033129, CVE-2017-7593
  * libtiff/tiffio.h, tif_unix.c, tif_win32.c, tif_vms.c
    + add _TIFFcalloc()
  * libtiff/tif_luv.c, tif_lzw.c, tif_packbits.c
    + return 0 in Encode functions instead of -1 when
    TIFFFlushData1() fails.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2130
  * libtiff/tif_ojpeg.c
    + fix leak in OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable when read fails. Patch by
    Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2659,
    bsc#1033128, CVE-2017-7594
  * libtiff/tif_jpeg.c
    + only run JPEGFixupTagsSubsampling() if the YCbCrSubsampling
    tag is not explicitly present. This helps a bit to reduce the
    I/O amount when the tag is present (especially on cloud hosted
    files).
  * libtiff/tif_lzw.c
    + in LZWPostEncode(), increase, if necessary, the code bit-width
    after flushing the remaining code and before emitting the EOI
    code. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=1982
  * libtiff/tif_pixarlog.c
    + fix memory leak in error code path of PixarLogSetupDecode().
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2665
  * libtiff/tif_fax3.c, tif_predict.c, tif_getimage.c
    + fix GCC 7 -Wimplicit-fallthrough warnings.
  * libtiff/tif_dirread.c
    + fix memory leak in non DEFER_STRILE_LOAD mode (ie default)
    when there is both a StripOffsets and TileOffsets tag, or a
    StripByteCounts and TileByteCounts
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2689,
    bsc#1042805, CVE-2017-9403)
  * libtiff/tif_ojpeg.c
    + fix potential memory leak in
    OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2670
  * libtiff/tif_fax3.c
    + avoid crash in Fax3Close() on empty file. Patch by Alan
    Coopersmith + complement by myself.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2673
  * libtiff/tif_read.c
    + TIFFFillStrip(): add limitation to the number of bytes read
    in case td_stripbytecount[strip] is bigger than reasonable,
    so as to avoid excessive memory allocation.
  * libtiff/tif_zip.c, tif_pixarlog.c, tif_predict.c
    + fix memory leak when the underlying codec (ZIP, PixarLog)
    succeeds its setupdecode() method, but PredictorSetup fails.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStrip() and TIFFFillTile(): avoid excessive memory
    allocation in case of shorten files. Only effective on 64 bit
    builds and non-mapped cases.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStripPartial() / TIFFSeek(), avoid potential integer
    overflows with read_ahead in CHUNKY_STRIP_READ_SUPPORT mode.
    Should especially occur on 32 bit platforms.
  * libtiff/tif_read.c
    + TIFFFillStripPartial()
    + avoid excessive memory allocation in case of shorten files.
    Only effective on 64 bit builds.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + update tif_rawcc in CHUNKY_STRIP_READ_SUPPORT mode with
    tif_rawdataloaded when calling TIFFStartStrip() or
    TIFFFillStripPartial(). This avoids reading beyond tif_rawdata
    when bytecount &gt; tif_rawdatasize. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1545.
    Credit to OSS-Fuzz
  * libtiff/tif_color.c
    + avoid potential int32 overflow in TIFFYCbCrToRGBInit() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1533
    Credit to OSS-Fuzz
  * libtiff/tif_pixarlog.c, tif_luv.c
    + avoid potential int32 overflows in multiply_ms() and add_ms().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1558
    Credit to OSS-Fuzz
  * libtiff/tif_packbits.c
    + fix out-of-buffer read in PackBitsDecode() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1563
    Credit to OSS-Fuzz
  * libtiff/tif_luv.c
    + LogL16InitState(): avoid excessive memory allocation when
    RowsPerStrip tag is missing.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_lzw.c
    + update dec_bitsleft at beginning of LZWDecode(), and update
    tif_rawcc at end of LZWDecode(). This is needed to properly
    work with the latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode.
  * libtiff/tif_pixarlog.c
    + PixarLogDecode(): resync tif_rawcp with next_in and tif_rawcc
    with avail_in at beginning and end of function, similarly to
    what is done in LZWDecode(). Likely needed so that it works
    properly with latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode. But untested...
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): add basic validation of luma and
    refBlackWhite coefficients (just check they are not NaN for
    now), to avoid potential float to int overflows. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1663
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): stricter validation for refBlackWhite
    coefficients values. To avoid invalid float-&gt;int32 conversion.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1718
    Credit to OSS Fuzz
  * tools/fax2tiff.c (main)
    + Applied patch by Joerg Ahrens to fix passing client data for
    Win32 builds using tif_win32.c (USE_WIN32_FILEIO defined) for
    file I/O. Patch was provided via email on November 20, 2016.
  * tools/tiffcp.c
    + avoid uint32 underflow in cpDecodedStrips that can cause
    various issues, such as buffer overflows in the library.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2598
  * tools/tiffcrop.c
    + fix readContigStripsIntoBuffer() in -i (ignore) mode so that
    the output buffer is correctly incremented to avoid write
    outside bounds. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2620
  * tools/tiffcrop.c
    + add 3 extra bytes at end of strip buffer in
    readSeparateStripsIntoBuffer() to avoid read outside of heap
    allocated buffer. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2621
  * tools/tiffcrop.c
    + fix integer division by zero when BitsPerSample is missing.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2619
  * tools/tiffinfo.c
    + fix null pointer dereference in -r mode when the image has no
    StripByteCount tag. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2594
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2597
  * tools/tif_dir.c
    + when TIFFGetField(, TIFFTAG_NUMBEROFINKS, ) is called, limit
    the return number of inks to SamplesPerPixel, so that code
    that parses ink names doesn't go past the end of the buffer.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2599
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2607
  * tools/tiffcp.c
    + fix uint32 underflow/overflow that can cause heap-based buffer
    overflow. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2610
  * tools/tiffcp.c
    + replace assert( (bps % 8) == 0 ) by a non assert check.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2605
  * tools/tiff2ps.c
    + fix 2 heap-based buffer overflows (in PSDataBW and
    PSDataColorContig). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2633 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2634.
  * tools/tiff2pdf.c
    + prevent heap-based buffer overflow in -j mode on a paletted
    image. Note: this fix errors out before the overflow happens.
    There could probably be a better fix.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2635
  * tools/tiff2pdf.c
    + fix wrong usage of memcpy() that can trigger unspecified behaviour.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2638
  * tools/tiff2pdf.c
    + avoid potential invalid memory read in t2p_writeproc.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2639
  * tools/tiff2pdf.c
    + avoid potential heap-based overflow in t2p_readwrite_pdf_image_tile().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2640
  * tools/tiffcrop.c
    + remove extraneous TIFFClose() in error code path, that caused
    double free.
    Related to http://bugzilla.maptools.org/show_bug.cgi?id=2535
  * tools/tiffcp.c
    + error out cleanly in cpContig2SeparateByRow and
    cpSeparate2ContigByRow if BitsPerSample != 8 to avoid heap
    based overflow.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2656 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2657
  * tools/raw2tiff.c
    + avoid integer division by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2631
  * tools/tiff2ps.c
    + call TIFFClose() in error code paths.
  * tools/fax2tiff.c
    + emit appropriate message if the input file is empty. Patch by
    Alan Coopersmith.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2672
  * tools/tiff2bw.c
    + close TIFF handle in error code path.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2677
  * Other issues fixed:
    + bsc#1042804, CVE-2017-9404
- Removed patches:
  * tiff-4.0.7-CVE-2015-7554.patch
  * tiff-4.0.7-CVE-2017-5225.patch
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  * tiff-CVE-2016-10266.patch
  * tiff-CVE-2016-10267.patch
  * tiff-CVE-2016-10268.patch
  * tiff-CVE-2016-10269.patch
  * tiff-CVE-2016-10270.patch
  * tiff-CVE-2016-10271.patch
  * tiff-CVE-2016-10272.patch
    + Fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1511956800">- Upgrade to upstream release 4.0.9
  * Changes in the software configuration:
    + test/Makefile.am: Add some tests for tiff2bw.
    + .appveyor.yml, .travis.yml, build/travis-ci: apply patches
    0001-ci-Travis-script-improvements.patch and
    0002-ci-Invoke-helper-script-via-shell.patch by Roger Leigh
    + .travis.yml, build/travis-ci: new files from
    0001-ci-Add-Travis-support-for-Linux-builds-with-Autoconf.patch
    by Roger Leigh. This patch adds support for the Travis-CI
    service.
    + .appveyor.yml: new file from
    0002-ci-Add-AppVeyor-support.patch by Roger Leigh (sent to
    mailing list on 2017-06-08) This patch adds a .appveyor.yml
    file to the top-level. This allows one to opt in to having a
    branch built on Windows with Cygwin, MinGW and MSVC
    automatically when a branch is pushed to GitHub, GitLab,
    BitBucket or any other supported git hosting service.
    + CMakeLists.txt, test/CMakeLists.txt,
    test/TiffTestCommon.cmake: apply patch
    0001-cmake-Improve-Cygwin-and-MingGW-test-support.patch from
    Roger Leigh. This patch makes the CMake build system support
    running the tests with MinGW or  Cygwin.
    + test/tiffcp-lzw-compat.sh, test/images/quad-lzw-compat.tiff:
    new files to test old-style LZW decompression
    + test/common.sh, Makefile.am, CMakeList.txt: updated with above
    + test/Makefile.am: add missing reference to
    images/quad-lzw-compat.tiff to fix "make distcheck". Patch by
    Roger Leigh
    + nmake.opt: support a DEBUG=1 option, so as to adjust OPTFLAGS
    and use /MDd runtime in debug mode.
  * Changes in libtiff:
    + libtiff/tif_color.c: TIFFYCbCrToRGBInit(): stricter clamping
    to avoid int32 overflow in TIFFYCbCrtoRGB(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1844
    + libtiff/tif_getimage.c: initYCbCrConversion(): stricter
    validation for refBlackWhite coefficients values. To avoid
    invalid float-&gt;int32 conversion (when refBlackWhite[0] ==
    2147483648.f) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1907
    + libtiff/tif_dirinfo.c, tif_dirread.c: add
    _TIFFCheckFieldIsValidForCodec(), and use it in
    TIFFReadDirectory() so as to ignore fields whose tag is a
    codec-specified tag but this codec is not enabled. This avoids
    TIFFGetField() to behave differently depending on whether the
    codec is enabled or not, and thus can avoid stack based buffer
    overflows in a number of TIFF utilities such as tiffsplit,
    tiffcmp, thumbnail, etc. Patch derived from
    0063-Handle-properly-CODEC-specific-tags.patch
    (http://bugzilla.maptools.org/show_bug.cgi?id=2580) by Raphaël
    Hertzog.
    Fixes: http://bugzilla.maptools.org/show_bug.cgi?id=2580
    http://bugzilla.maptools.org/show_bug.cgi?id=2693
    http://bugzilla.maptools.org/show_bug.cgi?id=2625
    (CVE-2016-10095, bsc#1017690)
    http://bugzilla.maptools.org/show_bug.cgi?id=2564
    (CVE-2015-7554, bsc#960341)
    http://bugzilla.maptools.org/show_bug.cgi?id=2561
    (CVE-2016-5318, bsc#983436)
    http://bugzilla.maptools.org/show_bug.cgi?id=2499
    (CVE-2014-8128, bsc#969783)
    http://bugzilla.maptools.org/show_bug.cgi?id=2441
    http://bugzilla.maptools.org/show_bug.cgi?id=2433
    + libtiff/tif_swab.c: if DISABLE_CHECK_TIFFSWABMACROS is
    defined, do not do the #ifdef TIFFSwabXXX checks. Make it
    easier for GDAL to rename the symbols of its internal libtiff
    copy.
    + libtiff/tif_dirread.c: fix regression of libtiff 4.0.8 in
    ChopUpSingleUncompressedStrip() regarding update of newly
    single-strip uncompressed files whose bytecount is 0. Before
    the change of 2016-12-03, the condition bytecount==0 used to
    trigger an early exit/disabling of strip chop. Re-introduce
    that in update mode. Otherwise this cause later incorrect
    setting for the value of StripByCounts/StripOffsets.
    (https://trac.osgeo.org/gdal/ticket/6924)
    + libtiff/tif_dirread.c: TIFFFetchStripThing(): limit the
    number of items read in StripOffsets/StripByteCounts tags to
    the number of strips to avoid excessive memory allocation.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2215
    + libtiff/tif_getimage.c: avoid many (harmless) unsigned int
    overflows.
    + libtiff/tif_fax3.c: avoid unsigned int overflow in
    Fax3Encode2DRow(). Could potentially be a bug with huge rows.
    + libtiff/tif_jpeg.c: avoid (harmless) unsigned int overflow on
    tiled images.
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts() and BYTECOUNTLOOKSBAD when file is
    too short.
    + libtiff/tif_predict.c: decorate legitimate functions where
    unsigned int overflow occur with
    TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts()
    + libtiff/tiffiop.h: add TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    macro to disable CLang warnings raised by
  - fsanitize=undefined,unsigned-integer-overflow
    + libtiff/tif_jpeg.c: add anti-denial of service measure to
    avoid excessive CPU consumption on progressive JPEGs with a
    huge number of scans. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    Note: only affects libtiff since 2014-12-29 where support of
    non-baseline JPEG was added.
    + libtiff/tif_jpeg.c: error out at decoding time if anticipated
    libjpeg memory allocation is above 100 MB. libjpeg in case of
    multiple scans, which is allowed even in baseline JPEG, if
    components are spread over several scans and not
    interleavedin a single one, needs to allocate memory (or
    backing store) for the whole strip/tile. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    This limitation may be overriden by setting the
    LIBTIFF_ALLOW_LARGE_LIBJPEG_MEM_ALLOC environment variable, or
    recompiling libtiff with a custom value of
    TIFF_LIBJPEG_LARGEST_MEM_ALLOC macro.
    + libtiff/tif_jbig.c: fix memory leak in error code path of
    JBIGDecode()
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2706
    (CVE-2017-9936, bsc#1046073)
    + libtiff/tif_dirread.c: in TIFFReadDirEntryFloat(), check that
    a double value can fit in a float before casting.
    + libtiff/tiffiop.h, libtiff/tif_jpeg.c, libtiff/tif_jpeg_12.c,
    libtiff/tif_read.c: make TIFFReadScanline() works in
    CHUNKY_STRIP_READ_SUPPORT mode with JPEG stream with multiple
    scans. Also make configurable through a
    LIBTIFF_JPEG_MAX_ALLOWED_SCAN_NUMBER environment variable the
    maximum number of scans allowed. Defaults to 100.
    + libtiff/tif_read.c: TIFFFillTile(): add limitation to the
    number of bytes read in case td_stripbytecount[strip] is
    bigger than reasonable, so as to avoid excessive memory
    allocation (similarly to what was done for TIFFFileStrip() on
    2017-05-10)
    + libtiff/tif_getimage.c: use
    _TIFFReadEncodedStripAndAllocBuffer(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2433
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedStripAndAllocBuffer() function, variant of
    TIFFReadEncodedStrip() that allocates the decoded buffer only
    after a first successful TIFFFillStrip(). This avoids
    excessive memory allocation on corrupted files.
    + libtiff/tif_dirwrite.c: in TIFFWriteDirectoryTagCheckedXXXX()
    functions associated with LONG8/SLONG8 data type, replace
    assertion that the file is BigTIFF, by a non-fatal error.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2712
    + libtiff/tif_read.c: TIFFStartTile(): set tif_rawcc to
    tif_rawdataloaded when it is set. Similarly to
    TIFFStartStrip(). This issue was revealed by the change of
    2017-06-30 in TIFFFileTile(), limiting the number of bytes
    read. But it could probably have been hit too in
    CHUNKY_STRIP_READ_SUPPORT mode previously. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2454
    + libtiff/tif_error.c, tif_warning.c: correctly use va_list
    when both an old-style and new-style warning/error handlers
    are installed. Patch by Paavo Helde (sent on the mailing list)
    + libtiff/tif_getimage.c: use _TIFFReadTileAndAllocBuffer().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2470
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedTileAndAllocBuffer() and
    _TIFFReadTileAndAllocBuffer() variants of
    TIFFReadEncodedTile() and TIFFReadTile() that allocates the
    decoded buffer only after a first successful TIFFFillTile().
    This avoids excessive memory allocation on corrupted files.
    + libtiff/tif_pixarlog.c: avoid excessive memory allocation on
    decoding when RowsPerStrip tag is not defined (and thus
    td_rowsperstrip == UINT_MAX) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2554
    + libtiff/tif_lzw.c: fix 4.0.8 regression in the decoding of
    old-style LZW compressed files.
    + libtiff/tif_lzw.c: fix potential out-of-buffer read on 1-byte
    LZW strips. Crashing issue only on memory mapped files, where
    the strip offset is the last byte of the file, and the file
    size is a multiple of one page size on the CPU architecture
    (typically 4096)
    + libtiff/tif_dir.c: avoid potential null pointer dereference
    in _TIFFVGetField() on corrupted TIFFTAG_NUMBEROFINKS tag
    instance.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2713
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + libtiff/tif_read.c: TIFFFillStrip() / TIFFFillTile().
    Complementary fix for
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 in the
    isMapped() case, so as to avoid excessive memory allocation
    when we need a temporary buffer but the file is truncated.
    + libtiff/tif_read.c: in TIFFFetchStripThing(), only grow the
    arrays that hold StripOffsets/StripByteCounts, when they are
    smaller than the expected number of striles, up to 1 million
    striles, and error out beyond. Can be tweaked by setting the
    environment variable LIBTIFF_STRILE_ARRAY_MAX_RESIZE_COUNT.
    This partially goes against a change added on 2002-12-17 to
    accept those arrays of wrong sizes, but is needed to avoid
    denial of services. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2350
    + libtiff/tif_read.c: add protection against excessive memory
    allocation attempts in TIFFReadDirEntryArray() on short files.
    Effective for mmap'ed case. And non-mmap'ed case, but
    restricted to 64bit builds. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2675
    + libtiff/tif_luv.c: LogLuvInitState(): avoid excessive memory
    allocation when RowsPerStrip tag is missing. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2683
    + libtiff/tif_getimage.c: gtTileContig() and gtTileSeparate():
    properly break from loops on error when stoponerr is set,
    instead of going on iterating on row based loop.
    + libtiff/tif_getimage.c: fix fromskew computation when
    to-be-skipped pixel number is not a multiple of the horizontal
    subsampling, and also in some other cases. Impact
    putcontig8bitYCbCr44tile, putcontig8bitYCbCr42tile,
    putcontig8bitYCbCr41tile, putcontig8bitYCbCr21tile and
    putcontig8bitYCbCr12tile Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2637 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2691
    + libtiff/tif_luv.c: further reduce memory requirements for
    temporary buffer when RowsPerStrip &gt;= image_length in
    LogLuvInitState() and LogL16InitState(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2700
    + libtiff/tif_dirwrite.c: replace assertion related to not
    finding the SubIFD tag by runtime check (in
    TIFFWriteDirectorySec()) Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2727
    + libtiff/tif_dirwrite.c: replace assertion to tag value not
    fitting on uint32 when selecting the value of SubIFD tag by
    runtime check (in TIFFWriteDirectoryTagSubifd()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2728
    + libtiff/tif_jpeg.c: accept reading the last strip of a JPEG
    compressed file if the codestream height is larger than the
    truncated height of the strip. Emit a warning in this
    situation since this is non compliant.
    + libtiff/tiffiop.h, tif_aux.c: redirect SeekOK() macro to a
    _TIFFSeekoK() function that checks if the offset is not
    bigger than INT64_MAX, so as to avoid a -1 error return code
    of TIFFSeekFile() to match a required seek to UINT64_MAX/-1.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2726
    + libtiff/tif_dirread.c: add NULL check to avoid likely false
    positive null-pointer dereference warning by CLang Static
    Analyzer.
    + libtiff/libtiff.def: add TIFFReadRGBAStripExt and
    TIFFReadRGBATileExt Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2735
    + libtiff/tif_jpeg.c: add compatibility with libjpeg-turbo
    1.5.2 that honours max_memory_to_use &gt; 0. Cf
    https://github.com/libjpeg-turbo/libjpeg-turbo/issues/162
    + libtiff/tif_getimage.c: avoid floating point division by zero
    in initCIELabConversion() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3733
  * Changes in the tools:
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + tools/tiffset.c: fix setting a single value for the
    ExtraSamples tag (and other tags with variable number of
    values). So 'tiffset -s ExtraSamples 1 X'. This only worked
    when setting 2 or more values, but not just one.
    + tools/fax2tiff.c (_FAX_Client_Data): Pass FAX_Client_Data as
    the client data. This client data is not used at all at the
    moment, but it makes the most sense. Issue that the value of
    client_data.fd was passed where a pointer is expected.
    + tools/tiff2pdf.c (t2p_sample_realize_palette): Fix possible
    arithmetic overflow in bounds checking code and eliminate
    comparison between signed and unsigned type.
    + tools/tiff2bw.c (main): Free memory allocated in the tiff2bw
    program. This is in response to the report associated with
    CVE-2017-16232, bsc#1069213 but does not solve the extremely
    high memory usage with the associated POC file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Fix check section:
  + Make sure to get back to the right directory after chdir to
    'tools', or we can't run the 2nd test suite.
  + Fix typo: the tests are located in a directory called 'test',
    not 'tests'.</changelog>
  <changelog author="mvetter@suse.com" date="1518782400">- bsc#1046077: Add tiff-4.0.9-bsc1046077-CVE-2017-9935.patch
  Fix Heap-based buffer overflow in t2p_write_pdf</changelog>
  <changelog author="mvetter@suse.com" date="1519128000">- bsc#1081690: Add tiff-4.0.9-bsc1081690-CVE-2018-5784.patch
  Fix uncontrolled resource consumption in TIFFSetDirectory</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- security update
  * CVE-2018-10963 [bsc#1092949]
    + tiff-CVE-2018-10963.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526644800">- security update
  * CVE-2017-18013 [bsc#1074317]
    + tiff-CVE-2017-18013.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113600">- security update
  * CVE-2018-7456 [bsc#1082825]
    + tiff-CVE-2018-7456.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113601">- security update
  * CVE-2017-11613 [bsc#1082332]
    + tiff-CVE-2017-11613.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528200000">- security update
  * CVE-2018-8905 [bsc#1086408]
    + tiff-CVE-2018-8905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534334400">- security update
  * CVE-2018-10779 [bsc#1092480]
    + tiff-CVE-2018-10779.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
</package>
<package pkgid="8fadc384a2079208df21bac651d3964cbf5bf7b1bcab5f1291bd04acb9b4b157" name="libtiff5-32bit" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="lp150.4.3.1"/>
  <changelog author="fstrba@suse.com" date="1459944000">- Added patch:
  * tiff-4.0.6-CVE-2016-3186.patch
  - fix CVE-2016-3186: buffer overflow in gif2tiff [bsc#973340]</changelog>
  <changelog author="fstrba@suse.com" date="1468324800">- Added patches:
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  - Upstream commits to fix CVE-2016-5314 [bsc#984831],
    CVE-2016-5316 [bsc#984837], CVE-2016-5317 [bsc#984842],
    CVE-2016-5320 [bsc#984808] and CVE-2016-5875 [bsc#987351]</changelog>
  <changelog author="fstrba@suse.com" date="1472731200">- Added patches:
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  - Upstream commits to fix CVE-2016-3623 [bsc#974618],
    CVE-2016-3945 [bsc#974614], CVE-2016-3990 [bsc#975069],
    CVE-2016-3991 [bsc#975070]</changelog>
  <changelog author="fstrba@suse.com" date="1475755200">- Added patches:
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Upstream fixes for MSVR 35093, MSVR 35094, MSVR 35095,
    MSVR 35096, MSVR 35097, MSVR 35098.
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  - Enforce bits-per-sample requirements of floating point
    predictor. Fixes CVE-2016-3622 [bsc#974449]</changelog>
  <changelog author="fstrba@suse.com" date="1480420800">- Upgrade to upstream release 4.0.7
  * libtiff/tif_aux.c
    + Fix crash in TIFFVGetFieldDefaulted() when requesting
    Predictor tag and that the zip/lzw codec is not configured.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2591
  * libtiff/tif_compress.c
    + Make TIFFNoDecode() return 0 to indicate an error and make
    upper level read routines treat it accordingly. (linked to the
    test case of http://bugzilla.maptools.org/show_bug.cgi?id=2517)
  * libtiff/tif_dir.c
    + Discard values of SMinSampleValue and SMaxSampleValue when
    they have been read and the value of SamplesPerPixel is
    changed afterwards (like when reading a OJPEG compressed image
    with a missing SamplesPerPixel tag, and whose photometric is
    RGB or YCbCr, forcing SamplesPerPixel being 3). Otherwise when
    rewriting the directory (for example with tiffset, we will
    expect 3 values whereas the array had been allocated with just
    one), thus causing a out of bound read access. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658, bsc#974840)
  * libtiff/tif_dirread.c
    + In TIFFFetchNormalTag(), do not dereference NULL pointer when
    values of tags with TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII
    access are 0-byte arrays. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2593 (regression
    introduced by previous fix done on 2016-11-11 for
    CVE-2016-9297, bsc#1010161). Assigned as CVE-2016-9448,
    bsc#1011103
    + In TIFFFetchNormalTag(), make sure that values of tags with
    TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII access are null
    terminated, to avoid potential read outside buffer in
    _TIFFPrintField(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2590
    (CVE-2016-9297, bsc#1010161)
    + Initialize doubledata at line 3693 to NULL to please MSVC 2013
    + Prevent reading ColorMap or TransferFunction if
    BitsPerPixel &gt; 24, so as to avoid huge memory allocation and
    file read attempts
    + Reject images with OJPEG compression that have no
    TileOffsets/StripOffsets tag, when OJPEG compression is
    disabled. Prevent null pointer dereference in
    TIFFReadRawStrip1() and other functions that expect
    td_stripbytecount to be non NULL. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2585
    + When compiled with DEFER_STRILE_LOAD, fix regression, when
    reading a one-strip file without a StripByteCounts tag.
    + Workaround false positive warning of Clang Static Analyzer
    about null pointer dereference in TIFFCheckDirOffset().
  * libtiff/tif_dirwrite.c
    + Avoid null pointer dereference on td_stripoffset when writing
    directory, if FIELD_STRIPOFFSETS was artificially set for a
    hack case in OJPEG case. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658,
    bsc#974840)
    + Fix truncation to 32 bit of file offsets in TIFFLinkDirectory()
    and TIFFWriteDirectorySec() when aligning directory offsets on
    an even offset (affects BigTIFF).
  * libtiff/tif_dumpmode.c
    + DumpModeEncode() should return 0 in case of failure so that
    the above mentionned functions detect the error.
  * libtiff/tif_fax3.c
    + remove dead assignment in Fax3PutEOLgdal().
  * libtiff/tif_fax3.h
    + make Param member of TIFFFaxTabEnt structure a uint16 to
    reduce size of the binary.
  * libtiff/tif_getimage.c
    + Fix out-of-bound reads in TIFFRGBAImage interface in case of
    unsupported values of SamplesPerPixel/ExtraSamples for
    LogLUV/CIELab. Add explicit call to TIFFRGBAImageOK() in
    TIFFRGBAImageBegin(). Fix CVE-2015-8665 and CVE-2015-8683.
    + Fix some benign warnings which appear in 64-bit compilation
    under Microsoft Visual Studio of the form "Arithmetic
    overflow: 32-bit value is shifted, then cast to 64-bit value.
    Results might not be an expected value."
    + TIFFRGBAImageOK: Reject attempts to read floating point images.
  * libtiff/tif_luv.c
    + Fix potential out-of-bound writes in decode functions in non
    debug builds by replacing assert()s by regular if checks
    (http://bugzilla.maptools.org/show_bug.cgi?id=2522). Fix
    potential out-of-bound reads in case of short input data.
    + Validate that for COMPRESSION_SGILOG and PHOTOMETRIC_LOGL,
    there is only one sample per pixel. Avoid potential invalid
    memory write on corrupted/unexpected images when using the
    TIFFRGBAImageBegin() interface
  * libtiff/tif_next.c
    + Fix potential out-of-bound write in NeXTDecode()
    (http://bugzilla.maptools.org/show_bug.cgi?id=2508)
  * libtiff/tif_pixarlog.c
    + Avoid zlib error messages to pass a NULL string to %s
    formatter, which is undefined behaviour in sprintf().
    + Fix out-of-bounds write vulnerabilities in heap allocated
    buffers. Reported as MSVR 35094.
    + Fix potential buffer write overrun in PixarLogDecode() on
    corrupted/unexpected images (CVE-2016-5875, bsc#987351)
    + Fix write buffer overflow in PixarLogEncode if more input
    samples are provided than expected by PixarLogSetupEncode.
    Idea based on libtiff-CVE-2016-3990.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, but with different and simpler
    check. (http://bugzilla.maptools.org/show_bug.cgi?id=2544,
    bsc#975069)
  * libtiff/tif_predict.c
    + PredictorSetup: Enforce bits-per-sample requirements of
    floating point predictor (3). Fixes CVE-2016-3622 "Divide By
    Zero in the tiff2rgba tool." (bsc#974449)
  * libtiff/tif_predict.h, libtiff/tif_predict.c
    + Replace assertions by runtime checks to avoid assertions in
    debug mode, or buffer overflows in release mode. Can happen
    when dealing with unusual tile size like YCbCr with
    subsampling. Reported as MSVR 35105.
  * libtiff/tif_read.c
    + Fix out-of-bounds read on memory-mapped files in
    TIFFReadRawStrip1() and TIFFReadRawTile1() when stripoffset
    is beyond tmsize_t max value
    + Make TIFFReadEncodedStrip() and TIFFReadEncodedTile() directly
    use user provided buffer when no compression (and other
    conditions) to save a memcpy().
  * libtiff/tif_strip.c
    + Make TIFFNumberOfStrips() return the td-&gt;td_nstrips value when
    it is non-zero, instead of recomputing it. This is needed in
    TIFF_STRIPCHOP mode where td_nstrips is modified. Fixes a read
    outsize of array in tiffsplit (or other utilities using
    TIFFNumberOfStrips()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2587
    (CVE-2016-9273, bsc#1010163)
  * libtiff/tif_write.c
    + Fix issue in error code path of TIFFFlushData1() that didn't
    reset the tif_rawcc and tif_rawcp members. I'm not completely
    sure if that could happen in practice outside of the odd
    behaviour of t2p_seekproc() of tiff2pdf). The report points
    that a better fix could be to check the return value of
    TIFFFlushData1() in places where it isn't done currently, but
    it seems this patch is enough. Reported as MSVR 35095.
    + Make TIFFWriteEncodedStrip() and TIFFWriteEncodedTile()
    directly use user provided buffer when no compression to save
    a memcpy().
    + TIFFWriteEncodedStrip() and TIFFWriteEncodedTile() should
    return -1 in case of failure of tif_encodestrip() as documented
  * tools/fax2tiff.D    c
    + Fix segfault when specifying -r without argument. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2572
  * tools/Makefile.am
    + The libtiff tools bmp2tiff, gif2tiff, ras2tiff, sgi2tiff,
    sgisv, and ycbcr are completely removed from the distribution.
    The libtiff tools rgb2ycbcr and thumbnail are only built in
    the build tree for testing. Old files are put in new 'archive'
    subdirectory of the source repository, but not in
    distribution archives. These changes are made in order to
    lessen the maintenance burden.
  * tools/rgb2ycbcr.c
    + Validate values of -v and -h parameters to avoid potential
    divide by zero. Fixes CVE-2016-3623, bsc#974618
    (http://bugzilla.maptools.org/show_bug.cgi?id=2569)
  * tools/tiff2bw.c
    + Fix weight computation that could result of color value
    overflow (no security implication). Fix
    http://bugzilla.maptools.org/show_bug.cgi?id=2550.
  * tools/tiff2pdf.c
    + Avoid undefined behaviour related to overlapping of source and
    destination buffer in memcpy() call in
    t2p_sample_rgbaa_to_rgb() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2577
    + Fix out-of-bounds write vulnerabilities in heap allocate buffer
    in t2p_process_jpeg_strip(). Reported as MSVR 35098.
    + Fix potential integer overflows on 32 bit builds in
    t2p_read_tiff_size() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2576
    + Fix read -largely- outsize of buffer in
    t2p_readwrite_pdf_image_tile(), causing crash, when reading a
    JPEG compressed image with TIFFTAG_JPEGTABLES length being one.
    Reported as MSVR 35101. CVE-2016-9453, bsc#1011107
    + Fix write buffer overflow of 2 bytes on JPEG compressed images.
    Reported as TALOS-CAN-0187, CVE-2016-5652, bsc#1007280. Also
    prevents writing 2 extra uninitialized bytes to the file
    stream.
  * tools/tiff2rgba.c
    + Fix integer overflow in size of allocated buffer, when -b mode
    is enabled, that could result in out-of-bounds write. Based
    initially on patch tiff-CVE-2016-3945.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, with correction for invalid
    tests that rejected valid files.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2545, bsc#974614)
  * tools/tiffcp.c
    + Fix out-of-bounds write on tiled images with odd tile width vs
    image width. Reported as MSVR 35103. (bsc#1011841,
    CVE-2016-9538)
    + Fix read of undefined variable in case of missing required
    tags. Found on test case of MSVR 35100.
  * tools/tiffcrop.c
    + Avoid access outside of stack allocated array on a tiled
    separate TIFF with more than 8 samples per pixel.
    (CVE-2016-5321, CVE-2016-5323,
    http://bugzilla.maptools.org/show_bug.cgi?id=2558,
    http://bugzilla.maptools.org/show_bug.cgi?id=2559, bsc#984813,
    bsc#984815)
    + Fix memory leak in (recent) error code path. Fixes Coverity
    1394415.
    + Fix multiple uint32 overflows in writeBufferToSeparateStrips(),
    writeBufferToContigTiles() and writeBufferToSeparateTiles()
    that could cause heap buffer overflows. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2592
    + Fix out-of-bound read of up to 3 bytes in
    readContigTilesIntoBuffer(). Reported as MSVR 35092.
    + Fix out-of-bounds write in loadImage(). From patch
    libtiff-CVE-2016-3991.patch from
    libtiff-4.0.3-25.el7_2.src.rpm
    (http://bugzilla.maptools.org/show_bug.cgi?id=2543, bsc#975070)
    + Fix read of undefined buffer in readContigStripsIntoBuffer()
    due to uint16 overflow. Reported as MSVR 35100. (bsc#1011841,
    CVE-2016-9538)
    + Fix various out-of-bounds write vulnerabilities in heap or
    stack allocated buffers. Reported as MSVR 35093, MSVR 35096
    and MSVR 35097.
    + readContigTilesIntoBuffer: Fix signed/unsigned comparison
    warning.
  * tools/tiffdump.c
    + Fix a few misaligned 64-bit reads warned by -fsanitize
    + ReadDirectory: Remove uint32 cast to_TIFFmalloc() argument
    which resulted in Coverity report. Added more mutiplication
    overflow checks
  * tools/tiffinfo.c
    + Fix out-of-bound read on some tiled images.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2517)
    + TIFFReadContigTileData: Fix signed/unsigned comparison warning.
    + TIFFReadSeparateTileData: Fix signed/unsigned comparison
    warning.
- Removed patches:
  * tiff-4.0.4-uninitialized_mem_NeXTDecode.patch
  * tiff-4.0.6-CVE-2015-8782.patch
  * tiff-4.0.6-CVE-2016-3186.patch
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Fixed in the upsteam release
- Changed patch:
  * tiff-4.0.6-CVE-2015-7554.patch -&gt; tiff-4.0.7-CVE-2015-7554.patch
  - Rediffed to the changed context</changelog>
  <changelog author="idonmez@suse.com" date="1482148800">- Update homepage</changelog>
  <changelog author="jengelh@inai.de" date="1482148801">- Drop --with-pic, this is only for static libs (which are not built)
- Update descriptions</changelog>
  <changelog author="fstrba@suse.com" date="1484308800">- Added patch:
  * tiff-4.0.7-CVE-2017-5225.patch
  - Upstream fix for CVE-2017-5225, bsc#1019611: heap buffer
    overflow in tools/tiffcp via a crafted BitsPerSample value</changelog>
  <changelog author="fstrba@suse.com" date="1486036800">- Added patch:
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  - Fix a regression introduced in 4.0.7 (bsc#1022103)
  - http://bugzilla.maptools.org/show_bug.cgi?id=2636</changelog>
  <changelog author="fstrba@suse.com" date="1490788800">- Added patches:
  * tiff-CVE-2016-10266.patch
    + Upstream fix for CVE-2016-10266, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031263)
  * tiff-CVE-2016-10267.patch
    + Upstream fix for CVE-2016-10267, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031262)
  * tiff-CVE-2016-10268.patch
    + Upstream fix for CVE-2016-10268, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031255)
  * tiff-CVE-2016-10269.patch
    + Upstream fix for CVE-2016-10269, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031254)
  * tiff-CVE-2016-10270.patch
    + Upstream fix for CVE-2016-10270, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031250)
  * tiff-CVE-2016-10271.patch
    + Upstream fix for CVE-2016-10271, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read and buffer overflow) or possibly have unspecified
    other impact via a crafted TIFF image (bsc#1031249)
  * tiff-CVE-2016-10272.patch
    + Upstream fix for CVE-2016-10272, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    overflow) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031247)</changelog>
  <changelog author="fstrba@suse.com" date="1497960000">- Upgrade to upstream release 4.0.8
  * libtiff/tif_getimage.c, libtiff/tif_open.c
    + add parenthesis to fix cppcheck clarifyCalculation warnings
  * libtiff/tif_predict.c, libtiff/tif_print.c
    + fix printf unsigned vs signed formatting (cppcheck
    invalidPrintfArgType_uint warnings)
  * libtiff/tif_read.c, libtiff/tiffiop.h
    + fix uint32 overflow in TIFFReadEncodedStrip() that caused an
    integer division by zero. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2596
  * libtiff/tif_pixarlog.c, libtiff/tif_luv.c
    + fix heap-based buffer overflow on generation of PixarLog / LUV
    compressed files, with ColorMap, TransferFunction attached and
    nasty plays with bitspersample. The fix for LUV has not been
    tested, but suffers from the same kind of issue of PixarLog.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2604
  * libtiff/tif_strip.c
    + revert the change in TIFFNumberOfStrips() done for
    http://bugzilla.maptools.org/show_bug.cgi?id=2587 /
    CVE-2016-9273 since the above change is a better fix that
    makes it unnecessary.
  * libtiff/tif_dirread.c
    + modify ChopUpSingleUncompressedStrip() to instanciate compute
    ntrips as TIFFhowmany_32(td-&gt;td_imagelength, rowsperstrip),
    instead of a logic based on the total size of data. Which is
    faulty is the total size of data is not sufficient to fill the
    whole image, and thus results in reading outside of the
    StripByCounts/StripOffsets arrays when using
    TIFFReadScanline(). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2608.
  * libtiff/tif_ojpeg.c
    + make OJPEGDecode() early exit in case of failure in
    OJPEGPreDecode(). This will avoid a divide by zero, and
    potential other issues. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2611
  * libtiff/tif_write.c
    + fix misleading indentation as warned by GCC.
  * libtiff/tif_fax3.h
    + revert change done on 2016-01-09 that made Param member of
    TIFFFaxTabEnt structure a uint16 to reduce size of the
    binary. It happens that the Hylafax software uses the tables
    that follow this typedef (TIFFFaxMainTable, TIFFFaxWhiteTable,
    TIFFFaxBlackTable), although they are not in a public libtiff
    header. Raised by Lee Howard.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2636
  * libtiff/tiffio.h, libtiff/tif_getimage.c
    + add TIFFReadRGBAStripExt() and TIFFReadRGBATileExt() variants
    of the functions without ext, with an extra argument to control
    the stop_on_error behaviour.
  * libtiff/tif_getimage.c
    + fix potential memory leaks in error code path of
    TIFFRGBAImageBegin().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2627
  * libtiff/tif_jpeg.c
    + increase libjpeg max memory usable to 10 MB instead of libjpeg
    1MB default. This helps when creating files with "big" tile,
    without using libjpeg temporary files.
    Related to https://trac.osgeo.org/gdal/ticket/6757
  * libtiff/tif_jpeg.c
    + avoid integer division by zero in JPEGSetupEncode() when
    horizontal or vertical sampling is set to 0.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2653,
    bsc#1033127, CVE-2017-7595
  * libtiff/tif_dirwrite.c
    + in TIFFWriteDirectoryTagCheckedRational, replace assertion by
    runtime check to error out if passed value is strictly
    negative.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2535,
    bsc#1038438, CVE-2016-10371
  * libtiff/tif_dirread.c
    + avoid division by floating point 0 in
    TIFFReadDirEntryCheckedRational() and
    TIFFReadDirEntryCheckedSrational(), and return 0 in that case
    (instead of infinity as before presumably) Apparently some
    sanitizers do not like those divisions by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2644,
    bsc#1033118, CVE-2017-7598
  * libtiff/tif_dir.c, tif_dirread.c, tif_dirwrite.c
    + implement various clampings of double to other data types to
    avoid undefined behaviour if the output range isn't big enough
    to hold the input value.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2643
    http://bugzilla.maptools.org/show_bug.cgi?id=2642
    http://bugzilla.maptools.org/show_bug.cgi?id=2646
    http://bugzilla.maptools.org/show_bug.cgi?id=2647,
    bsc#1033126, CVE-2017-7596, bsc#1033120, CVE-2017-7597,
    bsc#1033113, CVE-2017-7599, bsc#1033112, CVE-2017-7600,
  * libtiff/tif_jpeg.c
    + validate BitsPerSample in JPEGSetupEncode() to avoid undefined
    behaviour caused by invalid shift exponent.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2648,
    bsc#1033111, CVE-2017-7601
  * libtiff/tif_read.c
    + avoid potential undefined behaviour on signed integer addition
    in TIFFReadRawStrip1() in isMapped() case.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2650,
    bsc#1033109, CVE-2017-7602
  * libtiff/tif_getimage.c
    + add explicit uint32 cast in putagreytile to avoid
    UndefinedBehaviorSanitizer warning. Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2658,
    bsc#1033131, CVE-2017-7592
  * libtiff/tif_read.c
    + TIFFReadBufferSetup(): use _TIFFcalloc() to zero initialize
    tif_rawdata.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2651,
    bsc#1033129, CVE-2017-7593
  * libtiff/tiffio.h, tif_unix.c, tif_win32.c, tif_vms.c
    + add _TIFFcalloc()
  * libtiff/tif_luv.c, tif_lzw.c, tif_packbits.c
    + return 0 in Encode functions instead of -1 when
    TIFFFlushData1() fails.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2130
  * libtiff/tif_ojpeg.c
    + fix leak in OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable when read fails. Patch by
    Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2659,
    bsc#1033128, CVE-2017-7594
  * libtiff/tif_jpeg.c
    + only run JPEGFixupTagsSubsampling() if the YCbCrSubsampling
    tag is not explicitly present. This helps a bit to reduce the
    I/O amount when the tag is present (especially on cloud hosted
    files).
  * libtiff/tif_lzw.c
    + in LZWPostEncode(), increase, if necessary, the code bit-width
    after flushing the remaining code and before emitting the EOI
    code. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=1982
  * libtiff/tif_pixarlog.c
    + fix memory leak in error code path of PixarLogSetupDecode().
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2665
  * libtiff/tif_fax3.c, tif_predict.c, tif_getimage.c
    + fix GCC 7 -Wimplicit-fallthrough warnings.
  * libtiff/tif_dirread.c
    + fix memory leak in non DEFER_STRILE_LOAD mode (ie default)
    when there is both a StripOffsets and TileOffsets tag, or a
    StripByteCounts and TileByteCounts
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2689,
    bsc#1042805, CVE-2017-9403)
  * libtiff/tif_ojpeg.c
    + fix potential memory leak in
    OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2670
  * libtiff/tif_fax3.c
    + avoid crash in Fax3Close() on empty file. Patch by Alan
    Coopersmith + complement by myself.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2673
  * libtiff/tif_read.c
    + TIFFFillStrip(): add limitation to the number of bytes read
    in case td_stripbytecount[strip] is bigger than reasonable,
    so as to avoid excessive memory allocation.
  * libtiff/tif_zip.c, tif_pixarlog.c, tif_predict.c
    + fix memory leak when the underlying codec (ZIP, PixarLog)
    succeeds its setupdecode() method, but PredictorSetup fails.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStrip() and TIFFFillTile(): avoid excessive memory
    allocation in case of shorten files. Only effective on 64 bit
    builds and non-mapped cases.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStripPartial() / TIFFSeek(), avoid potential integer
    overflows with read_ahead in CHUNKY_STRIP_READ_SUPPORT mode.
    Should especially occur on 32 bit platforms.
  * libtiff/tif_read.c
    + TIFFFillStripPartial()
    + avoid excessive memory allocation in case of shorten files.
    Only effective on 64 bit builds.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + update tif_rawcc in CHUNKY_STRIP_READ_SUPPORT mode with
    tif_rawdataloaded when calling TIFFStartStrip() or
    TIFFFillStripPartial(). This avoids reading beyond tif_rawdata
    when bytecount &gt; tif_rawdatasize. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1545.
    Credit to OSS-Fuzz
  * libtiff/tif_color.c
    + avoid potential int32 overflow in TIFFYCbCrToRGBInit() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1533
    Credit to OSS-Fuzz
  * libtiff/tif_pixarlog.c, tif_luv.c
    + avoid potential int32 overflows in multiply_ms() and add_ms().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1558
    Credit to OSS-Fuzz
  * libtiff/tif_packbits.c
    + fix out-of-buffer read in PackBitsDecode() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1563
    Credit to OSS-Fuzz
  * libtiff/tif_luv.c
    + LogL16InitState(): avoid excessive memory allocation when
    RowsPerStrip tag is missing.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_lzw.c
    + update dec_bitsleft at beginning of LZWDecode(), and update
    tif_rawcc at end of LZWDecode(). This is needed to properly
    work with the latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode.
  * libtiff/tif_pixarlog.c
    + PixarLogDecode(): resync tif_rawcp with next_in and tif_rawcc
    with avail_in at beginning and end of function, similarly to
    what is done in LZWDecode(). Likely needed so that it works
    properly with latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode. But untested...
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): add basic validation of luma and
    refBlackWhite coefficients (just check they are not NaN for
    now), to avoid potential float to int overflows. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1663
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): stricter validation for refBlackWhite
    coefficients values. To avoid invalid float-&gt;int32 conversion.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1718
    Credit to OSS Fuzz
  * tools/fax2tiff.c (main)
    + Applied patch by Joerg Ahrens to fix passing client data for
    Win32 builds using tif_win32.c (USE_WIN32_FILEIO defined) for
    file I/O. Patch was provided via email on November 20, 2016.
  * tools/tiffcp.c
    + avoid uint32 underflow in cpDecodedStrips that can cause
    various issues, such as buffer overflows in the library.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2598
  * tools/tiffcrop.c
    + fix readContigStripsIntoBuffer() in -i (ignore) mode so that
    the output buffer is correctly incremented to avoid write
    outside bounds. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2620
  * tools/tiffcrop.c
    + add 3 extra bytes at end of strip buffer in
    readSeparateStripsIntoBuffer() to avoid read outside of heap
    allocated buffer. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2621
  * tools/tiffcrop.c
    + fix integer division by zero when BitsPerSample is missing.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2619
  * tools/tiffinfo.c
    + fix null pointer dereference in -r mode when the image has no
    StripByteCount tag. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2594
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2597
  * tools/tif_dir.c
    + when TIFFGetField(, TIFFTAG_NUMBEROFINKS, ) is called, limit
    the return number of inks to SamplesPerPixel, so that code
    that parses ink names doesn't go past the end of the buffer.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2599
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2607
  * tools/tiffcp.c
    + fix uint32 underflow/overflow that can cause heap-based buffer
    overflow. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2610
  * tools/tiffcp.c
    + replace assert( (bps % 8) == 0 ) by a non assert check.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2605
  * tools/tiff2ps.c
    + fix 2 heap-based buffer overflows (in PSDataBW and
    PSDataColorContig). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2633 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2634.
  * tools/tiff2pdf.c
    + prevent heap-based buffer overflow in -j mode on a paletted
    image. Note: this fix errors out before the overflow happens.
    There could probably be a better fix.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2635
  * tools/tiff2pdf.c
    + fix wrong usage of memcpy() that can trigger unspecified behaviour.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2638
  * tools/tiff2pdf.c
    + avoid potential invalid memory read in t2p_writeproc.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2639
  * tools/tiff2pdf.c
    + avoid potential heap-based overflow in t2p_readwrite_pdf_image_tile().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2640
  * tools/tiffcrop.c
    + remove extraneous TIFFClose() in error code path, that caused
    double free.
    Related to http://bugzilla.maptools.org/show_bug.cgi?id=2535
  * tools/tiffcp.c
    + error out cleanly in cpContig2SeparateByRow and
    cpSeparate2ContigByRow if BitsPerSample != 8 to avoid heap
    based overflow.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2656 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2657
  * tools/raw2tiff.c
    + avoid integer division by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2631
  * tools/tiff2ps.c
    + call TIFFClose() in error code paths.
  * tools/fax2tiff.c
    + emit appropriate message if the input file is empty. Patch by
    Alan Coopersmith.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2672
  * tools/tiff2bw.c
    + close TIFF handle in error code path.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2677
  * Other issues fixed:
    + bsc#1042804, CVE-2017-9404
- Removed patches:
  * tiff-4.0.7-CVE-2015-7554.patch
  * tiff-4.0.7-CVE-2017-5225.patch
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  * tiff-CVE-2016-10266.patch
  * tiff-CVE-2016-10267.patch
  * tiff-CVE-2016-10268.patch
  * tiff-CVE-2016-10269.patch
  * tiff-CVE-2016-10270.patch
  * tiff-CVE-2016-10271.patch
  * tiff-CVE-2016-10272.patch
    + Fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1511956800">- Upgrade to upstream release 4.0.9
  * Changes in the software configuration:
    + test/Makefile.am: Add some tests for tiff2bw.
    + .appveyor.yml, .travis.yml, build/travis-ci: apply patches
    0001-ci-Travis-script-improvements.patch and
    0002-ci-Invoke-helper-script-via-shell.patch by Roger Leigh
    + .travis.yml, build/travis-ci: new files from
    0001-ci-Add-Travis-support-for-Linux-builds-with-Autoconf.patch
    by Roger Leigh. This patch adds support for the Travis-CI
    service.
    + .appveyor.yml: new file from
    0002-ci-Add-AppVeyor-support.patch by Roger Leigh (sent to
    mailing list on 2017-06-08) This patch adds a .appveyor.yml
    file to the top-level. This allows one to opt in to having a
    branch built on Windows with Cygwin, MinGW and MSVC
    automatically when a branch is pushed to GitHub, GitLab,
    BitBucket or any other supported git hosting service.
    + CMakeLists.txt, test/CMakeLists.txt,
    test/TiffTestCommon.cmake: apply patch
    0001-cmake-Improve-Cygwin-and-MingGW-test-support.patch from
    Roger Leigh. This patch makes the CMake build system support
    running the tests with MinGW or  Cygwin.
    + test/tiffcp-lzw-compat.sh, test/images/quad-lzw-compat.tiff:
    new files to test old-style LZW decompression
    + test/common.sh, Makefile.am, CMakeList.txt: updated with above
    + test/Makefile.am: add missing reference to
    images/quad-lzw-compat.tiff to fix "make distcheck". Patch by
    Roger Leigh
    + nmake.opt: support a DEBUG=1 option, so as to adjust OPTFLAGS
    and use /MDd runtime in debug mode.
  * Changes in libtiff:
    + libtiff/tif_color.c: TIFFYCbCrToRGBInit(): stricter clamping
    to avoid int32 overflow in TIFFYCbCrtoRGB(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1844
    + libtiff/tif_getimage.c: initYCbCrConversion(): stricter
    validation for refBlackWhite coefficients values. To avoid
    invalid float-&gt;int32 conversion (when refBlackWhite[0] ==
    2147483648.f) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1907
    + libtiff/tif_dirinfo.c, tif_dirread.c: add
    _TIFFCheckFieldIsValidForCodec(), and use it in
    TIFFReadDirectory() so as to ignore fields whose tag is a
    codec-specified tag but this codec is not enabled. This avoids
    TIFFGetField() to behave differently depending on whether the
    codec is enabled or not, and thus can avoid stack based buffer
    overflows in a number of TIFF utilities such as tiffsplit,
    tiffcmp, thumbnail, etc. Patch derived from
    0063-Handle-properly-CODEC-specific-tags.patch
    (http://bugzilla.maptools.org/show_bug.cgi?id=2580) by Raphaël
    Hertzog.
    Fixes: http://bugzilla.maptools.org/show_bug.cgi?id=2580
    http://bugzilla.maptools.org/show_bug.cgi?id=2693
    http://bugzilla.maptools.org/show_bug.cgi?id=2625
    (CVE-2016-10095, bsc#1017690)
    http://bugzilla.maptools.org/show_bug.cgi?id=2564
    (CVE-2015-7554, bsc#960341)
    http://bugzilla.maptools.org/show_bug.cgi?id=2561
    (CVE-2016-5318, bsc#983436)
    http://bugzilla.maptools.org/show_bug.cgi?id=2499
    (CVE-2014-8128, bsc#969783)
    http://bugzilla.maptools.org/show_bug.cgi?id=2441
    http://bugzilla.maptools.org/show_bug.cgi?id=2433
    + libtiff/tif_swab.c: if DISABLE_CHECK_TIFFSWABMACROS is
    defined, do not do the #ifdef TIFFSwabXXX checks. Make it
    easier for GDAL to rename the symbols of its internal libtiff
    copy.
    + libtiff/tif_dirread.c: fix regression of libtiff 4.0.8 in
    ChopUpSingleUncompressedStrip() regarding update of newly
    single-strip uncompressed files whose bytecount is 0. Before
    the change of 2016-12-03, the condition bytecount==0 used to
    trigger an early exit/disabling of strip chop. Re-introduce
    that in update mode. Otherwise this cause later incorrect
    setting for the value of StripByCounts/StripOffsets.
    (https://trac.osgeo.org/gdal/ticket/6924)
    + libtiff/tif_dirread.c: TIFFFetchStripThing(): limit the
    number of items read in StripOffsets/StripByteCounts tags to
    the number of strips to avoid excessive memory allocation.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2215
    + libtiff/tif_getimage.c: avoid many (harmless) unsigned int
    overflows.
    + libtiff/tif_fax3.c: avoid unsigned int overflow in
    Fax3Encode2DRow(). Could potentially be a bug with huge rows.
    + libtiff/tif_jpeg.c: avoid (harmless) unsigned int overflow on
    tiled images.
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts() and BYTECOUNTLOOKSBAD when file is
    too short.
    + libtiff/tif_predict.c: decorate legitimate functions where
    unsigned int overflow occur with
    TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts()
    + libtiff/tiffiop.h: add TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    macro to disable CLang warnings raised by
  - fsanitize=undefined,unsigned-integer-overflow
    + libtiff/tif_jpeg.c: add anti-denial of service measure to
    avoid excessive CPU consumption on progressive JPEGs with a
    huge number of scans. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    Note: only affects libtiff since 2014-12-29 where support of
    non-baseline JPEG was added.
    + libtiff/tif_jpeg.c: error out at decoding time if anticipated
    libjpeg memory allocation is above 100 MB. libjpeg in case of
    multiple scans, which is allowed even in baseline JPEG, if
    components are spread over several scans and not
    interleavedin a single one, needs to allocate memory (or
    backing store) for the whole strip/tile. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    This limitation may be overriden by setting the
    LIBTIFF_ALLOW_LARGE_LIBJPEG_MEM_ALLOC environment variable, or
    recompiling libtiff with a custom value of
    TIFF_LIBJPEG_LARGEST_MEM_ALLOC macro.
    + libtiff/tif_jbig.c: fix memory leak in error code path of
    JBIGDecode()
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2706
    (CVE-2017-9936, bsc#1046073)
    + libtiff/tif_dirread.c: in TIFFReadDirEntryFloat(), check that
    a double value can fit in a float before casting.
    + libtiff/tiffiop.h, libtiff/tif_jpeg.c, libtiff/tif_jpeg_12.c,
    libtiff/tif_read.c: make TIFFReadScanline() works in
    CHUNKY_STRIP_READ_SUPPORT mode with JPEG stream with multiple
    scans. Also make configurable through a
    LIBTIFF_JPEG_MAX_ALLOWED_SCAN_NUMBER environment variable the
    maximum number of scans allowed. Defaults to 100.
    + libtiff/tif_read.c: TIFFFillTile(): add limitation to the
    number of bytes read in case td_stripbytecount[strip] is
    bigger than reasonable, so as to avoid excessive memory
    allocation (similarly to what was done for TIFFFileStrip() on
    2017-05-10)
    + libtiff/tif_getimage.c: use
    _TIFFReadEncodedStripAndAllocBuffer(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2433
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedStripAndAllocBuffer() function, variant of
    TIFFReadEncodedStrip() that allocates the decoded buffer only
    after a first successful TIFFFillStrip(). This avoids
    excessive memory allocation on corrupted files.
    + libtiff/tif_dirwrite.c: in TIFFWriteDirectoryTagCheckedXXXX()
    functions associated with LONG8/SLONG8 data type, replace
    assertion that the file is BigTIFF, by a non-fatal error.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2712
    + libtiff/tif_read.c: TIFFStartTile(): set tif_rawcc to
    tif_rawdataloaded when it is set. Similarly to
    TIFFStartStrip(). This issue was revealed by the change of
    2017-06-30 in TIFFFileTile(), limiting the number of bytes
    read. But it could probably have been hit too in
    CHUNKY_STRIP_READ_SUPPORT mode previously. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2454
    + libtiff/tif_error.c, tif_warning.c: correctly use va_list
    when both an old-style and new-style warning/error handlers
    are installed. Patch by Paavo Helde (sent on the mailing list)
    + libtiff/tif_getimage.c: use _TIFFReadTileAndAllocBuffer().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2470
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedTileAndAllocBuffer() and
    _TIFFReadTileAndAllocBuffer() variants of
    TIFFReadEncodedTile() and TIFFReadTile() that allocates the
    decoded buffer only after a first successful TIFFFillTile().
    This avoids excessive memory allocation on corrupted files.
    + libtiff/tif_pixarlog.c: avoid excessive memory allocation on
    decoding when RowsPerStrip tag is not defined (and thus
    td_rowsperstrip == UINT_MAX) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2554
    + libtiff/tif_lzw.c: fix 4.0.8 regression in the decoding of
    old-style LZW compressed files.
    + libtiff/tif_lzw.c: fix potential out-of-buffer read on 1-byte
    LZW strips. Crashing issue only on memory mapped files, where
    the strip offset is the last byte of the file, and the file
    size is a multiple of one page size on the CPU architecture
    (typically 4096)
    + libtiff/tif_dir.c: avoid potential null pointer dereference
    in _TIFFVGetField() on corrupted TIFFTAG_NUMBEROFINKS tag
    instance.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2713
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + libtiff/tif_read.c: TIFFFillStrip() / TIFFFillTile().
    Complementary fix for
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 in the
    isMapped() case, so as to avoid excessive memory allocation
    when we need a temporary buffer but the file is truncated.
    + libtiff/tif_read.c: in TIFFFetchStripThing(), only grow the
    arrays that hold StripOffsets/StripByteCounts, when they are
    smaller than the expected number of striles, up to 1 million
    striles, and error out beyond. Can be tweaked by setting the
    environment variable LIBTIFF_STRILE_ARRAY_MAX_RESIZE_COUNT.
    This partially goes against a change added on 2002-12-17 to
    accept those arrays of wrong sizes, but is needed to avoid
    denial of services. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2350
    + libtiff/tif_read.c: add protection against excessive memory
    allocation attempts in TIFFReadDirEntryArray() on short files.
    Effective for mmap'ed case. And non-mmap'ed case, but
    restricted to 64bit builds. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2675
    + libtiff/tif_luv.c: LogLuvInitState(): avoid excessive memory
    allocation when RowsPerStrip tag is missing. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2683
    + libtiff/tif_getimage.c: gtTileContig() and gtTileSeparate():
    properly break from loops on error when stoponerr is set,
    instead of going on iterating on row based loop.
    + libtiff/tif_getimage.c: fix fromskew computation when
    to-be-skipped pixel number is not a multiple of the horizontal
    subsampling, and also in some other cases. Impact
    putcontig8bitYCbCr44tile, putcontig8bitYCbCr42tile,
    putcontig8bitYCbCr41tile, putcontig8bitYCbCr21tile and
    putcontig8bitYCbCr12tile Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2637 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2691
    + libtiff/tif_luv.c: further reduce memory requirements for
    temporary buffer when RowsPerStrip &gt;= image_length in
    LogLuvInitState() and LogL16InitState(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2700
    + libtiff/tif_dirwrite.c: replace assertion related to not
    finding the SubIFD tag by runtime check (in
    TIFFWriteDirectorySec()) Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2727
    + libtiff/tif_dirwrite.c: replace assertion to tag value not
    fitting on uint32 when selecting the value of SubIFD tag by
    runtime check (in TIFFWriteDirectoryTagSubifd()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2728
    + libtiff/tif_jpeg.c: accept reading the last strip of a JPEG
    compressed file if the codestream height is larger than the
    truncated height of the strip. Emit a warning in this
    situation since this is non compliant.
    + libtiff/tiffiop.h, tif_aux.c: redirect SeekOK() macro to a
    _TIFFSeekoK() function that checks if the offset is not
    bigger than INT64_MAX, so as to avoid a -1 error return code
    of TIFFSeekFile() to match a required seek to UINT64_MAX/-1.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2726
    + libtiff/tif_dirread.c: add NULL check to avoid likely false
    positive null-pointer dereference warning by CLang Static
    Analyzer.
    + libtiff/libtiff.def: add TIFFReadRGBAStripExt and
    TIFFReadRGBATileExt Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2735
    + libtiff/tif_jpeg.c: add compatibility with libjpeg-turbo
    1.5.2 that honours max_memory_to_use &gt; 0. Cf
    https://github.com/libjpeg-turbo/libjpeg-turbo/issues/162
    + libtiff/tif_getimage.c: avoid floating point division by zero
    in initCIELabConversion() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3733
  * Changes in the tools:
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + tools/tiffset.c: fix setting a single value for the
    ExtraSamples tag (and other tags with variable number of
    values). So 'tiffset -s ExtraSamples 1 X'. This only worked
    when setting 2 or more values, but not just one.
    + tools/fax2tiff.c (_FAX_Client_Data): Pass FAX_Client_Data as
    the client data. This client data is not used at all at the
    moment, but it makes the most sense. Issue that the value of
    client_data.fd was passed where a pointer is expected.
    + tools/tiff2pdf.c (t2p_sample_realize_palette): Fix possible
    arithmetic overflow in bounds checking code and eliminate
    comparison between signed and unsigned type.
    + tools/tiff2bw.c (main): Free memory allocated in the tiff2bw
    program. This is in response to the report associated with
    CVE-2017-16232, bsc#1069213 but does not solve the extremely
    high memory usage with the associated POC file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Fix check section:
  + Make sure to get back to the right directory after chdir to
    'tools', or we can't run the 2nd test suite.
  + Fix typo: the tests are located in a directory called 'test',
    not 'tests'.</changelog>
  <changelog author="mvetter@suse.com" date="1518782400">- bsc#1046077: Add tiff-4.0.9-bsc1046077-CVE-2017-9935.patch
  Fix Heap-based buffer overflow in t2p_write_pdf</changelog>
  <changelog author="mvetter@suse.com" date="1519128000">- bsc#1081690: Add tiff-4.0.9-bsc1081690-CVE-2018-5784.patch
  Fix uncontrolled resource consumption in TIFFSetDirectory</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- security update
  * CVE-2018-10963 [bsc#1092949]
    + tiff-CVE-2018-10963.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526644800">- security update
  * CVE-2017-18013 [bsc#1074317]
    + tiff-CVE-2017-18013.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113600">- security update
  * CVE-2018-7456 [bsc#1082825]
    + tiff-CVE-2018-7456.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113601">- security update
  * CVE-2017-11613 [bsc#1082332]
    + tiff-CVE-2017-11613.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528200000">- security update
  * CVE-2018-8905 [bsc#1086408]
    + tiff-CVE-2018-8905.patch</changelog>
</package>
<package pkgid="cb9f20011436a04e38636af3e475ddaa8b4e1e56f8b561615cce1d69e4083042" name="libtiff5-32bit" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="lp150.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1472731200">- Added patches:
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  - Upstream commits to fix CVE-2016-3623 [bsc#974618],
    CVE-2016-3945 [bsc#974614], CVE-2016-3990 [bsc#975069],
    CVE-2016-3991 [bsc#975070]</changelog>
  <changelog author="fstrba@suse.com" date="1475755200">- Added patches:
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Upstream fixes for MSVR 35093, MSVR 35094, MSVR 35095,
    MSVR 35096, MSVR 35097, MSVR 35098.
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  - Enforce bits-per-sample requirements of floating point
    predictor. Fixes CVE-2016-3622 [bsc#974449]</changelog>
  <changelog author="fstrba@suse.com" date="1480420800">- Upgrade to upstream release 4.0.7
  * libtiff/tif_aux.c
    + Fix crash in TIFFVGetFieldDefaulted() when requesting
    Predictor tag and that the zip/lzw codec is not configured.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2591
  * libtiff/tif_compress.c
    + Make TIFFNoDecode() return 0 to indicate an error and make
    upper level read routines treat it accordingly. (linked to the
    test case of http://bugzilla.maptools.org/show_bug.cgi?id=2517)
  * libtiff/tif_dir.c
    + Discard values of SMinSampleValue and SMaxSampleValue when
    they have been read and the value of SamplesPerPixel is
    changed afterwards (like when reading a OJPEG compressed image
    with a missing SamplesPerPixel tag, and whose photometric is
    RGB or YCbCr, forcing SamplesPerPixel being 3). Otherwise when
    rewriting the directory (for example with tiffset, we will
    expect 3 values whereas the array had been allocated with just
    one), thus causing a out of bound read access. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658, bsc#974840)
  * libtiff/tif_dirread.c
    + In TIFFFetchNormalTag(), do not dereference NULL pointer when
    values of tags with TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII
    access are 0-byte arrays. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2593 (regression
    introduced by previous fix done on 2016-11-11 for
    CVE-2016-9297, bsc#1010161). Assigned as CVE-2016-9448,
    bsc#1011103
    + In TIFFFetchNormalTag(), make sure that values of tags with
    TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII access are null
    terminated, to avoid potential read outside buffer in
    _TIFFPrintField(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2590
    (CVE-2016-9297, bsc#1010161)
    + Initialize doubledata at line 3693 to NULL to please MSVC 2013
    + Prevent reading ColorMap or TransferFunction if
    BitsPerPixel &gt; 24, so as to avoid huge memory allocation and
    file read attempts
    + Reject images with OJPEG compression that have no
    TileOffsets/StripOffsets tag, when OJPEG compression is
    disabled. Prevent null pointer dereference in
    TIFFReadRawStrip1() and other functions that expect
    td_stripbytecount to be non NULL. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2585
    + When compiled with DEFER_STRILE_LOAD, fix regression, when
    reading a one-strip file without a StripByteCounts tag.
    + Workaround false positive warning of Clang Static Analyzer
    about null pointer dereference in TIFFCheckDirOffset().
  * libtiff/tif_dirwrite.c
    + Avoid null pointer dereference on td_stripoffset when writing
    directory, if FIELD_STRIPOFFSETS was artificially set for a
    hack case in OJPEG case. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658,
    bsc#974840)
    + Fix truncation to 32 bit of file offsets in TIFFLinkDirectory()
    and TIFFWriteDirectorySec() when aligning directory offsets on
    an even offset (affects BigTIFF).
  * libtiff/tif_dumpmode.c
    + DumpModeEncode() should return 0 in case of failure so that
    the above mentionned functions detect the error.
  * libtiff/tif_fax3.c
    + remove dead assignment in Fax3PutEOLgdal().
  * libtiff/tif_fax3.h
    + make Param member of TIFFFaxTabEnt structure a uint16 to
    reduce size of the binary.
  * libtiff/tif_getimage.c
    + Fix out-of-bound reads in TIFFRGBAImage interface in case of
    unsupported values of SamplesPerPixel/ExtraSamples for
    LogLUV/CIELab. Add explicit call to TIFFRGBAImageOK() in
    TIFFRGBAImageBegin(). Fix CVE-2015-8665 and CVE-2015-8683.
    + Fix some benign warnings which appear in 64-bit compilation
    under Microsoft Visual Studio of the form "Arithmetic
    overflow: 32-bit value is shifted, then cast to 64-bit value.
    Results might not be an expected value."
    + TIFFRGBAImageOK: Reject attempts to read floating point images.
  * libtiff/tif_luv.c
    + Fix potential out-of-bound writes in decode functions in non
    debug builds by replacing assert()s by regular if checks
    (http://bugzilla.maptools.org/show_bug.cgi?id=2522). Fix
    potential out-of-bound reads in case of short input data.
    + Validate that for COMPRESSION_SGILOG and PHOTOMETRIC_LOGL,
    there is only one sample per pixel. Avoid potential invalid
    memory write on corrupted/unexpected images when using the
    TIFFRGBAImageBegin() interface
  * libtiff/tif_next.c
    + Fix potential out-of-bound write in NeXTDecode()
    (http://bugzilla.maptools.org/show_bug.cgi?id=2508)
  * libtiff/tif_pixarlog.c
    + Avoid zlib error messages to pass a NULL string to %s
    formatter, which is undefined behaviour in sprintf().
    + Fix out-of-bounds write vulnerabilities in heap allocated
    buffers. Reported as MSVR 35094.
    + Fix potential buffer write overrun in PixarLogDecode() on
    corrupted/unexpected images (CVE-2016-5875, bsc#987351)
    + Fix write buffer overflow in PixarLogEncode if more input
    samples are provided than expected by PixarLogSetupEncode.
    Idea based on libtiff-CVE-2016-3990.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, but with different and simpler
    check. (http://bugzilla.maptools.org/show_bug.cgi?id=2544,
    bsc#975069)
  * libtiff/tif_predict.c
    + PredictorSetup: Enforce bits-per-sample requirements of
    floating point predictor (3). Fixes CVE-2016-3622 "Divide By
    Zero in the tiff2rgba tool." (bsc#974449)
  * libtiff/tif_predict.h, libtiff/tif_predict.c
    + Replace assertions by runtime checks to avoid assertions in
    debug mode, or buffer overflows in release mode. Can happen
    when dealing with unusual tile size like YCbCr with
    subsampling. Reported as MSVR 35105.
  * libtiff/tif_read.c
    + Fix out-of-bounds read on memory-mapped files in
    TIFFReadRawStrip1() and TIFFReadRawTile1() when stripoffset
    is beyond tmsize_t max value
    + Make TIFFReadEncodedStrip() and TIFFReadEncodedTile() directly
    use user provided buffer when no compression (and other
    conditions) to save a memcpy().
  * libtiff/tif_strip.c
    + Make TIFFNumberOfStrips() return the td-&gt;td_nstrips value when
    it is non-zero, instead of recomputing it. This is needed in
    TIFF_STRIPCHOP mode where td_nstrips is modified. Fixes a read
    outsize of array in tiffsplit (or other utilities using
    TIFFNumberOfStrips()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2587
    (CVE-2016-9273, bsc#1010163)
  * libtiff/tif_write.c
    + Fix issue in error code path of TIFFFlushData1() that didn't
    reset the tif_rawcc and tif_rawcp members. I'm not completely
    sure if that could happen in practice outside of the odd
    behaviour of t2p_seekproc() of tiff2pdf). The report points
    that a better fix could be to check the return value of
    TIFFFlushData1() in places where it isn't done currently, but
    it seems this patch is enough. Reported as MSVR 35095.
    + Make TIFFWriteEncodedStrip() and TIFFWriteEncodedTile()
    directly use user provided buffer when no compression to save
    a memcpy().
    + TIFFWriteEncodedStrip() and TIFFWriteEncodedTile() should
    return -1 in case of failure of tif_encodestrip() as documented
  * tools/fax2tiff.D    c
    + Fix segfault when specifying -r without argument. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2572
  * tools/Makefile.am
    + The libtiff tools bmp2tiff, gif2tiff, ras2tiff, sgi2tiff,
    sgisv, and ycbcr are completely removed from the distribution.
    The libtiff tools rgb2ycbcr and thumbnail are only built in
    the build tree for testing. Old files are put in new 'archive'
    subdirectory of the source repository, but not in
    distribution archives. These changes are made in order to
    lessen the maintenance burden.
  * tools/rgb2ycbcr.c
    + Validate values of -v and -h parameters to avoid potential
    divide by zero. Fixes CVE-2016-3623, bsc#974618
    (http://bugzilla.maptools.org/show_bug.cgi?id=2569)
  * tools/tiff2bw.c
    + Fix weight computation that could result of color value
    overflow (no security implication). Fix
    http://bugzilla.maptools.org/show_bug.cgi?id=2550.
  * tools/tiff2pdf.c
    + Avoid undefined behaviour related to overlapping of source and
    destination buffer in memcpy() call in
    t2p_sample_rgbaa_to_rgb() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2577
    + Fix out-of-bounds write vulnerabilities in heap allocate buffer
    in t2p_process_jpeg_strip(). Reported as MSVR 35098.
    + Fix potential integer overflows on 32 bit builds in
    t2p_read_tiff_size() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2576
    + Fix read -largely- outsize of buffer in
    t2p_readwrite_pdf_image_tile(), causing crash, when reading a
    JPEG compressed image with TIFFTAG_JPEGTABLES length being one.
    Reported as MSVR 35101. CVE-2016-9453, bsc#1011107
    + Fix write buffer overflow of 2 bytes on JPEG compressed images.
    Reported as TALOS-CAN-0187, CVE-2016-5652, bsc#1007280. Also
    prevents writing 2 extra uninitialized bytes to the file
    stream.
  * tools/tiff2rgba.c
    + Fix integer overflow in size of allocated buffer, when -b mode
    is enabled, that could result in out-of-bounds write. Based
    initially on patch tiff-CVE-2016-3945.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, with correction for invalid
    tests that rejected valid files.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2545, bsc#974614)
  * tools/tiffcp.c
    + Fix out-of-bounds write on tiled images with odd tile width vs
    image width. Reported as MSVR 35103. (bsc#1011841,
    CVE-2016-9538)
    + Fix read of undefined variable in case of missing required
    tags. Found on test case of MSVR 35100.
  * tools/tiffcrop.c
    + Avoid access outside of stack allocated array on a tiled
    separate TIFF with more than 8 samples per pixel.
    (CVE-2016-5321, CVE-2016-5323,
    http://bugzilla.maptools.org/show_bug.cgi?id=2558,
    http://bugzilla.maptools.org/show_bug.cgi?id=2559, bsc#984813,
    bsc#984815)
    + Fix memory leak in (recent) error code path. Fixes Coverity
    1394415.
    + Fix multiple uint32 overflows in writeBufferToSeparateStrips(),
    writeBufferToContigTiles() and writeBufferToSeparateTiles()
    that could cause heap buffer overflows. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2592
    + Fix out-of-bound read of up to 3 bytes in
    readContigTilesIntoBuffer(). Reported as MSVR 35092.
    + Fix out-of-bounds write in loadImage(). From patch
    libtiff-CVE-2016-3991.patch from
    libtiff-4.0.3-25.el7_2.src.rpm
    (http://bugzilla.maptools.org/show_bug.cgi?id=2543, bsc#975070)
    + Fix read of undefined buffer in readContigStripsIntoBuffer()
    due to uint16 overflow. Reported as MSVR 35100. (bsc#1011841,
    CVE-2016-9538)
    + Fix various out-of-bounds write vulnerabilities in heap or
    stack allocated buffers. Reported as MSVR 35093, MSVR 35096
    and MSVR 35097.
    + readContigTilesIntoBuffer: Fix signed/unsigned comparison
    warning.
  * tools/tiffdump.c
    + Fix a few misaligned 64-bit reads warned by -fsanitize
    + ReadDirectory: Remove uint32 cast to_TIFFmalloc() argument
    which resulted in Coverity report. Added more mutiplication
    overflow checks
  * tools/tiffinfo.c
    + Fix out-of-bound read on some tiled images.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2517)
    + TIFFReadContigTileData: Fix signed/unsigned comparison warning.
    + TIFFReadSeparateTileData: Fix signed/unsigned comparison
    warning.
- Removed patches:
  * tiff-4.0.4-uninitialized_mem_NeXTDecode.patch
  * tiff-4.0.6-CVE-2015-8782.patch
  * tiff-4.0.6-CVE-2016-3186.patch
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Fixed in the upsteam release
- Changed patch:
  * tiff-4.0.6-CVE-2015-7554.patch -&gt; tiff-4.0.7-CVE-2015-7554.patch
  - Rediffed to the changed context</changelog>
  <changelog author="idonmez@suse.com" date="1482148800">- Update homepage</changelog>
  <changelog author="jengelh@inai.de" date="1482148801">- Drop --with-pic, this is only for static libs (which are not built)
- Update descriptions</changelog>
  <changelog author="fstrba@suse.com" date="1484308800">- Added patch:
  * tiff-4.0.7-CVE-2017-5225.patch
  - Upstream fix for CVE-2017-5225, bsc#1019611: heap buffer
    overflow in tools/tiffcp via a crafted BitsPerSample value</changelog>
  <changelog author="fstrba@suse.com" date="1486036800">- Added patch:
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  - Fix a regression introduced in 4.0.7 (bsc#1022103)
  - http://bugzilla.maptools.org/show_bug.cgi?id=2636</changelog>
  <changelog author="fstrba@suse.com" date="1490788800">- Added patches:
  * tiff-CVE-2016-10266.patch
    + Upstream fix for CVE-2016-10266, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031263)
  * tiff-CVE-2016-10267.patch
    + Upstream fix for CVE-2016-10267, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031262)
  * tiff-CVE-2016-10268.patch
    + Upstream fix for CVE-2016-10268, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031255)
  * tiff-CVE-2016-10269.patch
    + Upstream fix for CVE-2016-10269, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031254)
  * tiff-CVE-2016-10270.patch
    + Upstream fix for CVE-2016-10270, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031250)
  * tiff-CVE-2016-10271.patch
    + Upstream fix for CVE-2016-10271, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read and buffer overflow) or possibly have unspecified
    other impact via a crafted TIFF image (bsc#1031249)
  * tiff-CVE-2016-10272.patch
    + Upstream fix for CVE-2016-10272, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    overflow) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031247)</changelog>
  <changelog author="fstrba@suse.com" date="1497960000">- Upgrade to upstream release 4.0.8
  * libtiff/tif_getimage.c, libtiff/tif_open.c
    + add parenthesis to fix cppcheck clarifyCalculation warnings
  * libtiff/tif_predict.c, libtiff/tif_print.c
    + fix printf unsigned vs signed formatting (cppcheck
    invalidPrintfArgType_uint warnings)
  * libtiff/tif_read.c, libtiff/tiffiop.h
    + fix uint32 overflow in TIFFReadEncodedStrip() that caused an
    integer division by zero. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2596
  * libtiff/tif_pixarlog.c, libtiff/tif_luv.c
    + fix heap-based buffer overflow on generation of PixarLog / LUV
    compressed files, with ColorMap, TransferFunction attached and
    nasty plays with bitspersample. The fix for LUV has not been
    tested, but suffers from the same kind of issue of PixarLog.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2604
  * libtiff/tif_strip.c
    + revert the change in TIFFNumberOfStrips() done for
    http://bugzilla.maptools.org/show_bug.cgi?id=2587 /
    CVE-2016-9273 since the above change is a better fix that
    makes it unnecessary.
  * libtiff/tif_dirread.c
    + modify ChopUpSingleUncompressedStrip() to instanciate compute
    ntrips as TIFFhowmany_32(td-&gt;td_imagelength, rowsperstrip),
    instead of a logic based on the total size of data. Which is
    faulty is the total size of data is not sufficient to fill the
    whole image, and thus results in reading outside of the
    StripByCounts/StripOffsets arrays when using
    TIFFReadScanline(). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2608.
  * libtiff/tif_ojpeg.c
    + make OJPEGDecode() early exit in case of failure in
    OJPEGPreDecode(). This will avoid a divide by zero, and
    potential other issues. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2611
  * libtiff/tif_write.c
    + fix misleading indentation as warned by GCC.
  * libtiff/tif_fax3.h
    + revert change done on 2016-01-09 that made Param member of
    TIFFFaxTabEnt structure a uint16 to reduce size of the
    binary. It happens that the Hylafax software uses the tables
    that follow this typedef (TIFFFaxMainTable, TIFFFaxWhiteTable,
    TIFFFaxBlackTable), although they are not in a public libtiff
    header. Raised by Lee Howard.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2636
  * libtiff/tiffio.h, libtiff/tif_getimage.c
    + add TIFFReadRGBAStripExt() and TIFFReadRGBATileExt() variants
    of the functions without ext, with an extra argument to control
    the stop_on_error behaviour.
  * libtiff/tif_getimage.c
    + fix potential memory leaks in error code path of
    TIFFRGBAImageBegin().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2627
  * libtiff/tif_jpeg.c
    + increase libjpeg max memory usable to 10 MB instead of libjpeg
    1MB default. This helps when creating files with "big" tile,
    without using libjpeg temporary files.
    Related to https://trac.osgeo.org/gdal/ticket/6757
  * libtiff/tif_jpeg.c
    + avoid integer division by zero in JPEGSetupEncode() when
    horizontal or vertical sampling is set to 0.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2653,
    bsc#1033127, CVE-2017-7595
  * libtiff/tif_dirwrite.c
    + in TIFFWriteDirectoryTagCheckedRational, replace assertion by
    runtime check to error out if passed value is strictly
    negative.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2535,
    bsc#1038438, CVE-2016-10371
  * libtiff/tif_dirread.c
    + avoid division by floating point 0 in
    TIFFReadDirEntryCheckedRational() and
    TIFFReadDirEntryCheckedSrational(), and return 0 in that case
    (instead of infinity as before presumably) Apparently some
    sanitizers do not like those divisions by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2644,
    bsc#1033118, CVE-2017-7598
  * libtiff/tif_dir.c, tif_dirread.c, tif_dirwrite.c
    + implement various clampings of double to other data types to
    avoid undefined behaviour if the output range isn't big enough
    to hold the input value.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2643
    http://bugzilla.maptools.org/show_bug.cgi?id=2642
    http://bugzilla.maptools.org/show_bug.cgi?id=2646
    http://bugzilla.maptools.org/show_bug.cgi?id=2647,
    bsc#1033126, CVE-2017-7596, bsc#1033120, CVE-2017-7597,
    bsc#1033113, CVE-2017-7599, bsc#1033112, CVE-2017-7600,
  * libtiff/tif_jpeg.c
    + validate BitsPerSample in JPEGSetupEncode() to avoid undefined
    behaviour caused by invalid shift exponent.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2648,
    bsc#1033111, CVE-2017-7601
  * libtiff/tif_read.c
    + avoid potential undefined behaviour on signed integer addition
    in TIFFReadRawStrip1() in isMapped() case.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2650,
    bsc#1033109, CVE-2017-7602
  * libtiff/tif_getimage.c
    + add explicit uint32 cast in putagreytile to avoid
    UndefinedBehaviorSanitizer warning. Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2658,
    bsc#1033131, CVE-2017-7592
  * libtiff/tif_read.c
    + TIFFReadBufferSetup(): use _TIFFcalloc() to zero initialize
    tif_rawdata.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2651,
    bsc#1033129, CVE-2017-7593
  * libtiff/tiffio.h, tif_unix.c, tif_win32.c, tif_vms.c
    + add _TIFFcalloc()
  * libtiff/tif_luv.c, tif_lzw.c, tif_packbits.c
    + return 0 in Encode functions instead of -1 when
    TIFFFlushData1() fails.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2130
  * libtiff/tif_ojpeg.c
    + fix leak in OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable when read fails. Patch by
    Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2659,
    bsc#1033128, CVE-2017-7594
  * libtiff/tif_jpeg.c
    + only run JPEGFixupTagsSubsampling() if the YCbCrSubsampling
    tag is not explicitly present. This helps a bit to reduce the
    I/O amount when the tag is present (especially on cloud hosted
    files).
  * libtiff/tif_lzw.c
    + in LZWPostEncode(), increase, if necessary, the code bit-width
    after flushing the remaining code and before emitting the EOI
    code. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=1982
  * libtiff/tif_pixarlog.c
    + fix memory leak in error code path of PixarLogSetupDecode().
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2665
  * libtiff/tif_fax3.c, tif_predict.c, tif_getimage.c
    + fix GCC 7 -Wimplicit-fallthrough warnings.
  * libtiff/tif_dirread.c
    + fix memory leak in non DEFER_STRILE_LOAD mode (ie default)
    when there is both a StripOffsets and TileOffsets tag, or a
    StripByteCounts and TileByteCounts
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2689,
    bsc#1042805, CVE-2017-9403)
  * libtiff/tif_ojpeg.c
    + fix potential memory leak in
    OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2670
  * libtiff/tif_fax3.c
    + avoid crash in Fax3Close() on empty file. Patch by Alan
    Coopersmith + complement by myself.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2673
  * libtiff/tif_read.c
    + TIFFFillStrip(): add limitation to the number of bytes read
    in case td_stripbytecount[strip] is bigger than reasonable,
    so as to avoid excessive memory allocation.
  * libtiff/tif_zip.c, tif_pixarlog.c, tif_predict.c
    + fix memory leak when the underlying codec (ZIP, PixarLog)
    succeeds its setupdecode() method, but PredictorSetup fails.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStrip() and TIFFFillTile(): avoid excessive memory
    allocation in case of shorten files. Only effective on 64 bit
    builds and non-mapped cases.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStripPartial() / TIFFSeek(), avoid potential integer
    overflows with read_ahead in CHUNKY_STRIP_READ_SUPPORT mode.
    Should especially occur on 32 bit platforms.
  * libtiff/tif_read.c
    + TIFFFillStripPartial()
    + avoid excessive memory allocation in case of shorten files.
    Only effective on 64 bit builds.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + update tif_rawcc in CHUNKY_STRIP_READ_SUPPORT mode with
    tif_rawdataloaded when calling TIFFStartStrip() or
    TIFFFillStripPartial(). This avoids reading beyond tif_rawdata
    when bytecount &gt; tif_rawdatasize. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1545.
    Credit to OSS-Fuzz
  * libtiff/tif_color.c
    + avoid potential int32 overflow in TIFFYCbCrToRGBInit() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1533
    Credit to OSS-Fuzz
  * libtiff/tif_pixarlog.c, tif_luv.c
    + avoid potential int32 overflows in multiply_ms() and add_ms().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1558
    Credit to OSS-Fuzz
  * libtiff/tif_packbits.c
    + fix out-of-buffer read in PackBitsDecode() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1563
    Credit to OSS-Fuzz
  * libtiff/tif_luv.c
    + LogL16InitState(): avoid excessive memory allocation when
    RowsPerStrip tag is missing.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_lzw.c
    + update dec_bitsleft at beginning of LZWDecode(), and update
    tif_rawcc at end of LZWDecode(). This is needed to properly
    work with the latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode.
  * libtiff/tif_pixarlog.c
    + PixarLogDecode(): resync tif_rawcp with next_in and tif_rawcc
    with avail_in at beginning and end of function, similarly to
    what is done in LZWDecode(). Likely needed so that it works
    properly with latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode. But untested...
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): add basic validation of luma and
    refBlackWhite coefficients (just check they are not NaN for
    now), to avoid potential float to int overflows. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1663
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): stricter validation for refBlackWhite
    coefficients values. To avoid invalid float-&gt;int32 conversion.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1718
    Credit to OSS Fuzz
  * tools/fax2tiff.c (main)
    + Applied patch by Joerg Ahrens to fix passing client data for
    Win32 builds using tif_win32.c (USE_WIN32_FILEIO defined) for
    file I/O. Patch was provided via email on November 20, 2016.
  * tools/tiffcp.c
    + avoid uint32 underflow in cpDecodedStrips that can cause
    various issues, such as buffer overflows in the library.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2598
  * tools/tiffcrop.c
    + fix readContigStripsIntoBuffer() in -i (ignore) mode so that
    the output buffer is correctly incremented to avoid write
    outside bounds. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2620
  * tools/tiffcrop.c
    + add 3 extra bytes at end of strip buffer in
    readSeparateStripsIntoBuffer() to avoid read outside of heap
    allocated buffer. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2621
  * tools/tiffcrop.c
    + fix integer division by zero when BitsPerSample is missing.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2619
  * tools/tiffinfo.c
    + fix null pointer dereference in -r mode when the image has no
    StripByteCount tag. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2594
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2597
  * tools/tif_dir.c
    + when TIFFGetField(, TIFFTAG_NUMBEROFINKS, ) is called, limit
    the return number of inks to SamplesPerPixel, so that code
    that parses ink names doesn't go past the end of the buffer.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2599
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2607
  * tools/tiffcp.c
    + fix uint32 underflow/overflow that can cause heap-based buffer
    overflow. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2610
  * tools/tiffcp.c
    + replace assert( (bps % 8) == 0 ) by a non assert check.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2605
  * tools/tiff2ps.c
    + fix 2 heap-based buffer overflows (in PSDataBW and
    PSDataColorContig). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2633 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2634.
  * tools/tiff2pdf.c
    + prevent heap-based buffer overflow in -j mode on a paletted
    image. Note: this fix errors out before the overflow happens.
    There could probably be a better fix.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2635
  * tools/tiff2pdf.c
    + fix wrong usage of memcpy() that can trigger unspecified behaviour.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2638
  * tools/tiff2pdf.c
    + avoid potential invalid memory read in t2p_writeproc.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2639
  * tools/tiff2pdf.c
    + avoid potential heap-based overflow in t2p_readwrite_pdf_image_tile().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2640
  * tools/tiffcrop.c
    + remove extraneous TIFFClose() in error code path, that caused
    double free.
    Related to http://bugzilla.maptools.org/show_bug.cgi?id=2535
  * tools/tiffcp.c
    + error out cleanly in cpContig2SeparateByRow and
    cpSeparate2ContigByRow if BitsPerSample != 8 to avoid heap
    based overflow.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2656 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2657
  * tools/raw2tiff.c
    + avoid integer division by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2631
  * tools/tiff2ps.c
    + call TIFFClose() in error code paths.
  * tools/fax2tiff.c
    + emit appropriate message if the input file is empty. Patch by
    Alan Coopersmith.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2672
  * tools/tiff2bw.c
    + close TIFF handle in error code path.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2677
  * Other issues fixed:
    + bsc#1042804, CVE-2017-9404
- Removed patches:
  * tiff-4.0.7-CVE-2015-7554.patch
  * tiff-4.0.7-CVE-2017-5225.patch
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  * tiff-CVE-2016-10266.patch
  * tiff-CVE-2016-10267.patch
  * tiff-CVE-2016-10268.patch
  * tiff-CVE-2016-10269.patch
  * tiff-CVE-2016-10270.patch
  * tiff-CVE-2016-10271.patch
  * tiff-CVE-2016-10272.patch
    + Fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1511956800">- Upgrade to upstream release 4.0.9
  * Changes in the software configuration:
    + test/Makefile.am: Add some tests for tiff2bw.
    + .appveyor.yml, .travis.yml, build/travis-ci: apply patches
    0001-ci-Travis-script-improvements.patch and
    0002-ci-Invoke-helper-script-via-shell.patch by Roger Leigh
    + .travis.yml, build/travis-ci: new files from
    0001-ci-Add-Travis-support-for-Linux-builds-with-Autoconf.patch
    by Roger Leigh. This patch adds support for the Travis-CI
    service.
    + .appveyor.yml: new file from
    0002-ci-Add-AppVeyor-support.patch by Roger Leigh (sent to
    mailing list on 2017-06-08) This patch adds a .appveyor.yml
    file to the top-level. This allows one to opt in to having a
    branch built on Windows with Cygwin, MinGW and MSVC
    automatically when a branch is pushed to GitHub, GitLab,
    BitBucket or any other supported git hosting service.
    + CMakeLists.txt, test/CMakeLists.txt,
    test/TiffTestCommon.cmake: apply patch
    0001-cmake-Improve-Cygwin-and-MingGW-test-support.patch from
    Roger Leigh. This patch makes the CMake build system support
    running the tests with MinGW or  Cygwin.
    + test/tiffcp-lzw-compat.sh, test/images/quad-lzw-compat.tiff:
    new files to test old-style LZW decompression
    + test/common.sh, Makefile.am, CMakeList.txt: updated with above
    + test/Makefile.am: add missing reference to
    images/quad-lzw-compat.tiff to fix "make distcheck". Patch by
    Roger Leigh
    + nmake.opt: support a DEBUG=1 option, so as to adjust OPTFLAGS
    and use /MDd runtime in debug mode.
  * Changes in libtiff:
    + libtiff/tif_color.c: TIFFYCbCrToRGBInit(): stricter clamping
    to avoid int32 overflow in TIFFYCbCrtoRGB(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1844
    + libtiff/tif_getimage.c: initYCbCrConversion(): stricter
    validation for refBlackWhite coefficients values. To avoid
    invalid float-&gt;int32 conversion (when refBlackWhite[0] ==
    2147483648.f) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1907
    + libtiff/tif_dirinfo.c, tif_dirread.c: add
    _TIFFCheckFieldIsValidForCodec(), and use it in
    TIFFReadDirectory() so as to ignore fields whose tag is a
    codec-specified tag but this codec is not enabled. This avoids
    TIFFGetField() to behave differently depending on whether the
    codec is enabled or not, and thus can avoid stack based buffer
    overflows in a number of TIFF utilities such as tiffsplit,
    tiffcmp, thumbnail, etc. Patch derived from
    0063-Handle-properly-CODEC-specific-tags.patch
    (http://bugzilla.maptools.org/show_bug.cgi?id=2580) by Raphaël
    Hertzog.
    Fixes: http://bugzilla.maptools.org/show_bug.cgi?id=2580
    http://bugzilla.maptools.org/show_bug.cgi?id=2693
    http://bugzilla.maptools.org/show_bug.cgi?id=2625
    (CVE-2016-10095, bsc#1017690)
    http://bugzilla.maptools.org/show_bug.cgi?id=2564
    (CVE-2015-7554, bsc#960341)
    http://bugzilla.maptools.org/show_bug.cgi?id=2561
    (CVE-2016-5318, bsc#983436)
    http://bugzilla.maptools.org/show_bug.cgi?id=2499
    (CVE-2014-8128, bsc#969783)
    http://bugzilla.maptools.org/show_bug.cgi?id=2441
    http://bugzilla.maptools.org/show_bug.cgi?id=2433
    + libtiff/tif_swab.c: if DISABLE_CHECK_TIFFSWABMACROS is
    defined, do not do the #ifdef TIFFSwabXXX checks. Make it
    easier for GDAL to rename the symbols of its internal libtiff
    copy.
    + libtiff/tif_dirread.c: fix regression of libtiff 4.0.8 in
    ChopUpSingleUncompressedStrip() regarding update of newly
    single-strip uncompressed files whose bytecount is 0. Before
    the change of 2016-12-03, the condition bytecount==0 used to
    trigger an early exit/disabling of strip chop. Re-introduce
    that in update mode. Otherwise this cause later incorrect
    setting for the value of StripByCounts/StripOffsets.
    (https://trac.osgeo.org/gdal/ticket/6924)
    + libtiff/tif_dirread.c: TIFFFetchStripThing(): limit the
    number of items read in StripOffsets/StripByteCounts tags to
    the number of strips to avoid excessive memory allocation.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2215
    + libtiff/tif_getimage.c: avoid many (harmless) unsigned int
    overflows.
    + libtiff/tif_fax3.c: avoid unsigned int overflow in
    Fax3Encode2DRow(). Could potentially be a bug with huge rows.
    + libtiff/tif_jpeg.c: avoid (harmless) unsigned int overflow on
    tiled images.
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts() and BYTECOUNTLOOKSBAD when file is
    too short.
    + libtiff/tif_predict.c: decorate legitimate functions where
    unsigned int overflow occur with
    TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts()
    + libtiff/tiffiop.h: add TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    macro to disable CLang warnings raised by
  - fsanitize=undefined,unsigned-integer-overflow
    + libtiff/tif_jpeg.c: add anti-denial of service measure to
    avoid excessive CPU consumption on progressive JPEGs with a
    huge number of scans. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    Note: only affects libtiff since 2014-12-29 where support of
    non-baseline JPEG was added.
    + libtiff/tif_jpeg.c: error out at decoding time if anticipated
    libjpeg memory allocation is above 100 MB. libjpeg in case of
    multiple scans, which is allowed even in baseline JPEG, if
    components are spread over several scans and not
    interleavedin a single one, needs to allocate memory (or
    backing store) for the whole strip/tile. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    This limitation may be overriden by setting the
    LIBTIFF_ALLOW_LARGE_LIBJPEG_MEM_ALLOC environment variable, or
    recompiling libtiff with a custom value of
    TIFF_LIBJPEG_LARGEST_MEM_ALLOC macro.
    + libtiff/tif_jbig.c: fix memory leak in error code path of
    JBIGDecode()
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2706
    (CVE-2017-9936, bsc#1046073)
    + libtiff/tif_dirread.c: in TIFFReadDirEntryFloat(), check that
    a double value can fit in a float before casting.
    + libtiff/tiffiop.h, libtiff/tif_jpeg.c, libtiff/tif_jpeg_12.c,
    libtiff/tif_read.c: make TIFFReadScanline() works in
    CHUNKY_STRIP_READ_SUPPORT mode with JPEG stream with multiple
    scans. Also make configurable through a
    LIBTIFF_JPEG_MAX_ALLOWED_SCAN_NUMBER environment variable the
    maximum number of scans allowed. Defaults to 100.
    + libtiff/tif_read.c: TIFFFillTile(): add limitation to the
    number of bytes read in case td_stripbytecount[strip] is
    bigger than reasonable, so as to avoid excessive memory
    allocation (similarly to what was done for TIFFFileStrip() on
    2017-05-10)
    + libtiff/tif_getimage.c: use
    _TIFFReadEncodedStripAndAllocBuffer(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2433
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedStripAndAllocBuffer() function, variant of
    TIFFReadEncodedStrip() that allocates the decoded buffer only
    after a first successful TIFFFillStrip(). This avoids
    excessive memory allocation on corrupted files.
    + libtiff/tif_dirwrite.c: in TIFFWriteDirectoryTagCheckedXXXX()
    functions associated with LONG8/SLONG8 data type, replace
    assertion that the file is BigTIFF, by a non-fatal error.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2712
    + libtiff/tif_read.c: TIFFStartTile(): set tif_rawcc to
    tif_rawdataloaded when it is set. Similarly to
    TIFFStartStrip(). This issue was revealed by the change of
    2017-06-30 in TIFFFileTile(), limiting the number of bytes
    read. But it could probably have been hit too in
    CHUNKY_STRIP_READ_SUPPORT mode previously. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2454
    + libtiff/tif_error.c, tif_warning.c: correctly use va_list
    when both an old-style and new-style warning/error handlers
    are installed. Patch by Paavo Helde (sent on the mailing list)
    + libtiff/tif_getimage.c: use _TIFFReadTileAndAllocBuffer().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2470
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedTileAndAllocBuffer() and
    _TIFFReadTileAndAllocBuffer() variants of
    TIFFReadEncodedTile() and TIFFReadTile() that allocates the
    decoded buffer only after a first successful TIFFFillTile().
    This avoids excessive memory allocation on corrupted files.
    + libtiff/tif_pixarlog.c: avoid excessive memory allocation on
    decoding when RowsPerStrip tag is not defined (and thus
    td_rowsperstrip == UINT_MAX) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2554
    + libtiff/tif_lzw.c: fix 4.0.8 regression in the decoding of
    old-style LZW compressed files.
    + libtiff/tif_lzw.c: fix potential out-of-buffer read on 1-byte
    LZW strips. Crashing issue only on memory mapped files, where
    the strip offset is the last byte of the file, and the file
    size is a multiple of one page size on the CPU architecture
    (typically 4096)
    + libtiff/tif_dir.c: avoid potential null pointer dereference
    in _TIFFVGetField() on corrupted TIFFTAG_NUMBEROFINKS tag
    instance.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2713
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + libtiff/tif_read.c: TIFFFillStrip() / TIFFFillTile().
    Complementary fix for
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 in the
    isMapped() case, so as to avoid excessive memory allocation
    when we need a temporary buffer but the file is truncated.
    + libtiff/tif_read.c: in TIFFFetchStripThing(), only grow the
    arrays that hold StripOffsets/StripByteCounts, when they are
    smaller than the expected number of striles, up to 1 million
    striles, and error out beyond. Can be tweaked by setting the
    environment variable LIBTIFF_STRILE_ARRAY_MAX_RESIZE_COUNT.
    This partially goes against a change added on 2002-12-17 to
    accept those arrays of wrong sizes, but is needed to avoid
    denial of services. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2350
    + libtiff/tif_read.c: add protection against excessive memory
    allocation attempts in TIFFReadDirEntryArray() on short files.
    Effective for mmap'ed case. And non-mmap'ed case, but
    restricted to 64bit builds. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2675
    + libtiff/tif_luv.c: LogLuvInitState(): avoid excessive memory
    allocation when RowsPerStrip tag is missing. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2683
    + libtiff/tif_getimage.c: gtTileContig() and gtTileSeparate():
    properly break from loops on error when stoponerr is set,
    instead of going on iterating on row based loop.
    + libtiff/tif_getimage.c: fix fromskew computation when
    to-be-skipped pixel number is not a multiple of the horizontal
    subsampling, and also in some other cases. Impact
    putcontig8bitYCbCr44tile, putcontig8bitYCbCr42tile,
    putcontig8bitYCbCr41tile, putcontig8bitYCbCr21tile and
    putcontig8bitYCbCr12tile Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2637 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2691
    + libtiff/tif_luv.c: further reduce memory requirements for
    temporary buffer when RowsPerStrip &gt;= image_length in
    LogLuvInitState() and LogL16InitState(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2700
    + libtiff/tif_dirwrite.c: replace assertion related to not
    finding the SubIFD tag by runtime check (in
    TIFFWriteDirectorySec()) Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2727
    + libtiff/tif_dirwrite.c: replace assertion to tag value not
    fitting on uint32 when selecting the value of SubIFD tag by
    runtime check (in TIFFWriteDirectoryTagSubifd()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2728
    + libtiff/tif_jpeg.c: accept reading the last strip of a JPEG
    compressed file if the codestream height is larger than the
    truncated height of the strip. Emit a warning in this
    situation since this is non compliant.
    + libtiff/tiffiop.h, tif_aux.c: redirect SeekOK() macro to a
    _TIFFSeekoK() function that checks if the offset is not
    bigger than INT64_MAX, so as to avoid a -1 error return code
    of TIFFSeekFile() to match a required seek to UINT64_MAX/-1.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2726
    + libtiff/tif_dirread.c: add NULL check to avoid likely false
    positive null-pointer dereference warning by CLang Static
    Analyzer.
    + libtiff/libtiff.def: add TIFFReadRGBAStripExt and
    TIFFReadRGBATileExt Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2735
    + libtiff/tif_jpeg.c: add compatibility with libjpeg-turbo
    1.5.2 that honours max_memory_to_use &gt; 0. Cf
    https://github.com/libjpeg-turbo/libjpeg-turbo/issues/162
    + libtiff/tif_getimage.c: avoid floating point division by zero
    in initCIELabConversion() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3733
  * Changes in the tools:
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + tools/tiffset.c: fix setting a single value for the
    ExtraSamples tag (and other tags with variable number of
    values). So 'tiffset -s ExtraSamples 1 X'. This only worked
    when setting 2 or more values, but not just one.
    + tools/fax2tiff.c (_FAX_Client_Data): Pass FAX_Client_Data as
    the client data. This client data is not used at all at the
    moment, but it makes the most sense. Issue that the value of
    client_data.fd was passed where a pointer is expected.
    + tools/tiff2pdf.c (t2p_sample_realize_palette): Fix possible
    arithmetic overflow in bounds checking code and eliminate
    comparison between signed and unsigned type.
    + tools/tiff2bw.c (main): Free memory allocated in the tiff2bw
    program. This is in response to the report associated with
    CVE-2017-16232, bsc#1069213 but does not solve the extremely
    high memory usage with the associated POC file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Fix check section:
  + Make sure to get back to the right directory after chdir to
    'tools', or we can't run the 2nd test suite.
  + Fix typo: the tests are located in a directory called 'test',
    not 'tests'.</changelog>
  <changelog author="mvetter@suse.com" date="1518782400">- bsc#1046077: Add tiff-4.0.9-bsc1046077-CVE-2017-9935.patch
  Fix Heap-based buffer overflow in t2p_write_pdf</changelog>
  <changelog author="mvetter@suse.com" date="1519128000">- bsc#1081690: Add tiff-4.0.9-bsc1081690-CVE-2018-5784.patch
  Fix uncontrolled resource consumption in TIFFSetDirectory</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- security update
  * CVE-2018-10963 [bsc#1092949]
    + tiff-CVE-2018-10963.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526644800">- security update
  * CVE-2017-18013 [bsc#1074317]
    + tiff-CVE-2017-18013.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113600">- security update
  * CVE-2018-7456 [bsc#1082825]
    + tiff-CVE-2018-7456.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113601">- security update
  * CVE-2017-11613 [bsc#1082332]
    + tiff-CVE-2017-11613.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528200000">- security update
  * CVE-2018-8905 [bsc#1086408]
    + tiff-CVE-2018-8905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534334400">- security update
  * CVE-2018-10779 [bsc#1092480]
    + tiff-CVE-2018-10779.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
</package>
<package pkgid="c74d4141510dce727fe04a66d886e19d0a275ee8898b7488f742887058610d84" name="libtiff5-32bit" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="lp150.4.9.1"/>
  <changelog author="fstrba@suse.com" date="1480420800">- Upgrade to upstream release 4.0.7
  * libtiff/tif_aux.c
    + Fix crash in TIFFVGetFieldDefaulted() when requesting
    Predictor tag and that the zip/lzw codec is not configured.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2591
  * libtiff/tif_compress.c
    + Make TIFFNoDecode() return 0 to indicate an error and make
    upper level read routines treat it accordingly. (linked to the
    test case of http://bugzilla.maptools.org/show_bug.cgi?id=2517)
  * libtiff/tif_dir.c
    + Discard values of SMinSampleValue and SMaxSampleValue when
    they have been read and the value of SamplesPerPixel is
    changed afterwards (like when reading a OJPEG compressed image
    with a missing SamplesPerPixel tag, and whose photometric is
    RGB or YCbCr, forcing SamplesPerPixel being 3). Otherwise when
    rewriting the directory (for example with tiffset, we will
    expect 3 values whereas the array had been allocated with just
    one), thus causing a out of bound read access. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658, bsc#974840)
  * libtiff/tif_dirread.c
    + In TIFFFetchNormalTag(), do not dereference NULL pointer when
    values of tags with TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII
    access are 0-byte arrays. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2593 (regression
    introduced by previous fix done on 2016-11-11 for
    CVE-2016-9297, bsc#1010161). Assigned as CVE-2016-9448,
    bsc#1011103
    + In TIFFFetchNormalTag(), make sure that values of tags with
    TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII access are null
    terminated, to avoid potential read outside buffer in
    _TIFFPrintField(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2590
    (CVE-2016-9297, bsc#1010161)
    + Initialize doubledata at line 3693 to NULL to please MSVC 2013
    + Prevent reading ColorMap or TransferFunction if
    BitsPerPixel &gt; 24, so as to avoid huge memory allocation and
    file read attempts
    + Reject images with OJPEG compression that have no
    TileOffsets/StripOffsets tag, when OJPEG compression is
    disabled. Prevent null pointer dereference in
    TIFFReadRawStrip1() and other functions that expect
    td_stripbytecount to be non NULL. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2585
    + When compiled with DEFER_STRILE_LOAD, fix regression, when
    reading a one-strip file without a StripByteCounts tag.
    + Workaround false positive warning of Clang Static Analyzer
    about null pointer dereference in TIFFCheckDirOffset().
  * libtiff/tif_dirwrite.c
    + Avoid null pointer dereference on td_stripoffset when writing
    directory, if FIELD_STRIPOFFSETS was artificially set for a
    hack case in OJPEG case. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658,
    bsc#974840)
    + Fix truncation to 32 bit of file offsets in TIFFLinkDirectory()
    and TIFFWriteDirectorySec() when aligning directory offsets on
    an even offset (affects BigTIFF).
  * libtiff/tif_dumpmode.c
    + DumpModeEncode() should return 0 in case of failure so that
    the above mentionned functions detect the error.
  * libtiff/tif_fax3.c
    + remove dead assignment in Fax3PutEOLgdal().
  * libtiff/tif_fax3.h
    + make Param member of TIFFFaxTabEnt structure a uint16 to
    reduce size of the binary.
  * libtiff/tif_getimage.c
    + Fix out-of-bound reads in TIFFRGBAImage interface in case of
    unsupported values of SamplesPerPixel/ExtraSamples for
    LogLUV/CIELab. Add explicit call to TIFFRGBAImageOK() in
    TIFFRGBAImageBegin(). Fix CVE-2015-8665 and CVE-2015-8683.
    + Fix some benign warnings which appear in 64-bit compilation
    under Microsoft Visual Studio of the form "Arithmetic
    overflow: 32-bit value is shifted, then cast to 64-bit value.
    Results might not be an expected value."
    + TIFFRGBAImageOK: Reject attempts to read floating point images.
  * libtiff/tif_luv.c
    + Fix potential out-of-bound writes in decode functions in non
    debug builds by replacing assert()s by regular if checks
    (http://bugzilla.maptools.org/show_bug.cgi?id=2522). Fix
    potential out-of-bound reads in case of short input data.
    + Validate that for COMPRESSION_SGILOG and PHOTOMETRIC_LOGL,
    there is only one sample per pixel. Avoid potential invalid
    memory write on corrupted/unexpected images when using the
    TIFFRGBAImageBegin() interface
  * libtiff/tif_next.c
    + Fix potential out-of-bound write in NeXTDecode()
    (http://bugzilla.maptools.org/show_bug.cgi?id=2508)
  * libtiff/tif_pixarlog.c
    + Avoid zlib error messages to pass a NULL string to %s
    formatter, which is undefined behaviour in sprintf().
    + Fix out-of-bounds write vulnerabilities in heap allocated
    buffers. Reported as MSVR 35094.
    + Fix potential buffer write overrun in PixarLogDecode() on
    corrupted/unexpected images (CVE-2016-5875, bsc#987351)
    + Fix write buffer overflow in PixarLogEncode if more input
    samples are provided than expected by PixarLogSetupEncode.
    Idea based on libtiff-CVE-2016-3990.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, but with different and simpler
    check. (http://bugzilla.maptools.org/show_bug.cgi?id=2544,
    bsc#975069)
  * libtiff/tif_predict.c
    + PredictorSetup: Enforce bits-per-sample requirements of
    floating point predictor (3). Fixes CVE-2016-3622 "Divide By
    Zero in the tiff2rgba tool." (bsc#974449)
  * libtiff/tif_predict.h, libtiff/tif_predict.c
    + Replace assertions by runtime checks to avoid assertions in
    debug mode, or buffer overflows in release mode. Can happen
    when dealing with unusual tile size like YCbCr with
    subsampling. Reported as MSVR 35105.
  * libtiff/tif_read.c
    + Fix out-of-bounds read on memory-mapped files in
    TIFFReadRawStrip1() and TIFFReadRawTile1() when stripoffset
    is beyond tmsize_t max value
    + Make TIFFReadEncodedStrip() and TIFFReadEncodedTile() directly
    use user provided buffer when no compression (and other
    conditions) to save a memcpy().
  * libtiff/tif_strip.c
    + Make TIFFNumberOfStrips() return the td-&gt;td_nstrips value when
    it is non-zero, instead of recomputing it. This is needed in
    TIFF_STRIPCHOP mode where td_nstrips is modified. Fixes a read
    outsize of array in tiffsplit (or other utilities using
    TIFFNumberOfStrips()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2587
    (CVE-2016-9273, bsc#1010163)
  * libtiff/tif_write.c
    + Fix issue in error code path of TIFFFlushData1() that didn't
    reset the tif_rawcc and tif_rawcp members. I'm not completely
    sure if that could happen in practice outside of the odd
    behaviour of t2p_seekproc() of tiff2pdf). The report points
    that a better fix could be to check the return value of
    TIFFFlushData1() in places where it isn't done currently, but
    it seems this patch is enough. Reported as MSVR 35095.
    + Make TIFFWriteEncodedStrip() and TIFFWriteEncodedTile()
    directly use user provided buffer when no compression to save
    a memcpy().
    + TIFFWriteEncodedStrip() and TIFFWriteEncodedTile() should
    return -1 in case of failure of tif_encodestrip() as documented
  * tools/fax2tiff.D    c
    + Fix segfault when specifying -r without argument. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2572
  * tools/Makefile.am
    + The libtiff tools bmp2tiff, gif2tiff, ras2tiff, sgi2tiff,
    sgisv, and ycbcr are completely removed from the distribution.
    The libtiff tools rgb2ycbcr and thumbnail are only built in
    the build tree for testing. Old files are put in new 'archive'
    subdirectory of the source repository, but not in
    distribution archives. These changes are made in order to
    lessen the maintenance burden.
  * tools/rgb2ycbcr.c
    + Validate values of -v and -h parameters to avoid potential
    divide by zero. Fixes CVE-2016-3623, bsc#974618
    (http://bugzilla.maptools.org/show_bug.cgi?id=2569)
  * tools/tiff2bw.c
    + Fix weight computation that could result of color value
    overflow (no security implication). Fix
    http://bugzilla.maptools.org/show_bug.cgi?id=2550.
  * tools/tiff2pdf.c
    + Avoid undefined behaviour related to overlapping of source and
    destination buffer in memcpy() call in
    t2p_sample_rgbaa_to_rgb() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2577
    + Fix out-of-bounds write vulnerabilities in heap allocate buffer
    in t2p_process_jpeg_strip(). Reported as MSVR 35098.
    + Fix potential integer overflows on 32 bit builds in
    t2p_read_tiff_size() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2576
    + Fix read -largely- outsize of buffer in
    t2p_readwrite_pdf_image_tile(), causing crash, when reading a
    JPEG compressed image with TIFFTAG_JPEGTABLES length being one.
    Reported as MSVR 35101. CVE-2016-9453, bsc#1011107
    + Fix write buffer overflow of 2 bytes on JPEG compressed images.
    Reported as TALOS-CAN-0187, CVE-2016-5652, bsc#1007280. Also
    prevents writing 2 extra uninitialized bytes to the file
    stream.
  * tools/tiff2rgba.c
    + Fix integer overflow in size of allocated buffer, when -b mode
    is enabled, that could result in out-of-bounds write. Based
    initially on patch tiff-CVE-2016-3945.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, with correction for invalid
    tests that rejected valid files.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2545, bsc#974614)
  * tools/tiffcp.c
    + Fix out-of-bounds write on tiled images with odd tile width vs
    image width. Reported as MSVR 35103. (bsc#1011841,
    CVE-2016-9538)
    + Fix read of undefined variable in case of missing required
    tags. Found on test case of MSVR 35100.
  * tools/tiffcrop.c
    + Avoid access outside of stack allocated array on a tiled
    separate TIFF with more than 8 samples per pixel.
    (CVE-2016-5321, CVE-2016-5323,
    http://bugzilla.maptools.org/show_bug.cgi?id=2558,
    http://bugzilla.maptools.org/show_bug.cgi?id=2559, bsc#984813,
    bsc#984815)
    + Fix memory leak in (recent) error code path. Fixes Coverity
    1394415.
    + Fix multiple uint32 overflows in writeBufferToSeparateStrips(),
    writeBufferToContigTiles() and writeBufferToSeparateTiles()
    that could cause heap buffer overflows. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2592
    + Fix out-of-bound read of up to 3 bytes in
    readContigTilesIntoBuffer(). Reported as MSVR 35092.
    + Fix out-of-bounds write in loadImage(). From patch
    libtiff-CVE-2016-3991.patch from
    libtiff-4.0.3-25.el7_2.src.rpm
    (http://bugzilla.maptools.org/show_bug.cgi?id=2543, bsc#975070)
    + Fix read of undefined buffer in readContigStripsIntoBuffer()
    due to uint16 overflow. Reported as MSVR 35100. (bsc#1011841,
    CVE-2016-9538)
    + Fix various out-of-bounds write vulnerabilities in heap or
    stack allocated buffers. Reported as MSVR 35093, MSVR 35096
    and MSVR 35097.
    + readContigTilesIntoBuffer: Fix signed/unsigned comparison
    warning.
  * tools/tiffdump.c
    + Fix a few misaligned 64-bit reads warned by -fsanitize
    + ReadDirectory: Remove uint32 cast to_TIFFmalloc() argument
    which resulted in Coverity report. Added more mutiplication
    overflow checks
  * tools/tiffinfo.c
    + Fix out-of-bound read on some tiled images.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2517)
    + TIFFReadContigTileData: Fix signed/unsigned comparison warning.
    + TIFFReadSeparateTileData: Fix signed/unsigned comparison
    warning.
- Removed patches:
  * tiff-4.0.4-uninitialized_mem_NeXTDecode.patch
  * tiff-4.0.6-CVE-2015-8782.patch
  * tiff-4.0.6-CVE-2016-3186.patch
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Fixed in the upsteam release
- Changed patch:
  * tiff-4.0.6-CVE-2015-7554.patch -&gt; tiff-4.0.7-CVE-2015-7554.patch
  - Rediffed to the changed context</changelog>
  <changelog author="idonmez@suse.com" date="1482148800">- Update homepage</changelog>
  <changelog author="jengelh@inai.de" date="1482148801">- Drop --with-pic, this is only for static libs (which are not built)
- Update descriptions</changelog>
  <changelog author="fstrba@suse.com" date="1484308800">- Added patch:
  * tiff-4.0.7-CVE-2017-5225.patch
  - Upstream fix for CVE-2017-5225, bsc#1019611: heap buffer
    overflow in tools/tiffcp via a crafted BitsPerSample value</changelog>
  <changelog author="fstrba@suse.com" date="1486036800">- Added patch:
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  - Fix a regression introduced in 4.0.7 (bsc#1022103)
  - http://bugzilla.maptools.org/show_bug.cgi?id=2636</changelog>
  <changelog author="fstrba@suse.com" date="1490788800">- Added patches:
  * tiff-CVE-2016-10266.patch
    + Upstream fix for CVE-2016-10266, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031263)
  * tiff-CVE-2016-10267.patch
    + Upstream fix for CVE-2016-10267, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031262)
  * tiff-CVE-2016-10268.patch
    + Upstream fix for CVE-2016-10268, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031255)
  * tiff-CVE-2016-10269.patch
    + Upstream fix for CVE-2016-10269, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031254)
  * tiff-CVE-2016-10270.patch
    + Upstream fix for CVE-2016-10270, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031250)
  * tiff-CVE-2016-10271.patch
    + Upstream fix for CVE-2016-10271, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read and buffer overflow) or possibly have unspecified
    other impact via a crafted TIFF image (bsc#1031249)
  * tiff-CVE-2016-10272.patch
    + Upstream fix for CVE-2016-10272, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    overflow) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031247)</changelog>
  <changelog author="fstrba@suse.com" date="1497960000">- Upgrade to upstream release 4.0.8
  * libtiff/tif_getimage.c, libtiff/tif_open.c
    + add parenthesis to fix cppcheck clarifyCalculation warnings
  * libtiff/tif_predict.c, libtiff/tif_print.c
    + fix printf unsigned vs signed formatting (cppcheck
    invalidPrintfArgType_uint warnings)
  * libtiff/tif_read.c, libtiff/tiffiop.h
    + fix uint32 overflow in TIFFReadEncodedStrip() that caused an
    integer division by zero. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2596
  * libtiff/tif_pixarlog.c, libtiff/tif_luv.c
    + fix heap-based buffer overflow on generation of PixarLog / LUV
    compressed files, with ColorMap, TransferFunction attached and
    nasty plays with bitspersample. The fix for LUV has not been
    tested, but suffers from the same kind of issue of PixarLog.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2604
  * libtiff/tif_strip.c
    + revert the change in TIFFNumberOfStrips() done for
    http://bugzilla.maptools.org/show_bug.cgi?id=2587 /
    CVE-2016-9273 since the above change is a better fix that
    makes it unnecessary.
  * libtiff/tif_dirread.c
    + modify ChopUpSingleUncompressedStrip() to instanciate compute
    ntrips as TIFFhowmany_32(td-&gt;td_imagelength, rowsperstrip),
    instead of a logic based on the total size of data. Which is
    faulty is the total size of data is not sufficient to fill the
    whole image, and thus results in reading outside of the
    StripByCounts/StripOffsets arrays when using
    TIFFReadScanline(). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2608.
  * libtiff/tif_ojpeg.c
    + make OJPEGDecode() early exit in case of failure in
    OJPEGPreDecode(). This will avoid a divide by zero, and
    potential other issues. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2611
  * libtiff/tif_write.c
    + fix misleading indentation as warned by GCC.
  * libtiff/tif_fax3.h
    + revert change done on 2016-01-09 that made Param member of
    TIFFFaxTabEnt structure a uint16 to reduce size of the
    binary. It happens that the Hylafax software uses the tables
    that follow this typedef (TIFFFaxMainTable, TIFFFaxWhiteTable,
    TIFFFaxBlackTable), although they are not in a public libtiff
    header. Raised by Lee Howard.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2636
  * libtiff/tiffio.h, libtiff/tif_getimage.c
    + add TIFFReadRGBAStripExt() and TIFFReadRGBATileExt() variants
    of the functions without ext, with an extra argument to control
    the stop_on_error behaviour.
  * libtiff/tif_getimage.c
    + fix potential memory leaks in error code path of
    TIFFRGBAImageBegin().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2627
  * libtiff/tif_jpeg.c
    + increase libjpeg max memory usable to 10 MB instead of libjpeg
    1MB default. This helps when creating files with "big" tile,
    without using libjpeg temporary files.
    Related to https://trac.osgeo.org/gdal/ticket/6757
  * libtiff/tif_jpeg.c
    + avoid integer division by zero in JPEGSetupEncode() when
    horizontal or vertical sampling is set to 0.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2653,
    bsc#1033127, CVE-2017-7595
  * libtiff/tif_dirwrite.c
    + in TIFFWriteDirectoryTagCheckedRational, replace assertion by
    runtime check to error out if passed value is strictly
    negative.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2535,
    bsc#1038438, CVE-2016-10371
  * libtiff/tif_dirread.c
    + avoid division by floating point 0 in
    TIFFReadDirEntryCheckedRational() and
    TIFFReadDirEntryCheckedSrational(), and return 0 in that case
    (instead of infinity as before presumably) Apparently some
    sanitizers do not like those divisions by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2644,
    bsc#1033118, CVE-2017-7598
  * libtiff/tif_dir.c, tif_dirread.c, tif_dirwrite.c
    + implement various clampings of double to other data types to
    avoid undefined behaviour if the output range isn't big enough
    to hold the input value.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2643
    http://bugzilla.maptools.org/show_bug.cgi?id=2642
    http://bugzilla.maptools.org/show_bug.cgi?id=2646
    http://bugzilla.maptools.org/show_bug.cgi?id=2647,
    bsc#1033126, CVE-2017-7596, bsc#1033120, CVE-2017-7597,
    bsc#1033113, CVE-2017-7599, bsc#1033112, CVE-2017-7600,
  * libtiff/tif_jpeg.c
    + validate BitsPerSample in JPEGSetupEncode() to avoid undefined
    behaviour caused by invalid shift exponent.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2648,
    bsc#1033111, CVE-2017-7601
  * libtiff/tif_read.c
    + avoid potential undefined behaviour on signed integer addition
    in TIFFReadRawStrip1() in isMapped() case.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2650,
    bsc#1033109, CVE-2017-7602
  * libtiff/tif_getimage.c
    + add explicit uint32 cast in putagreytile to avoid
    UndefinedBehaviorSanitizer warning. Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2658,
    bsc#1033131, CVE-2017-7592
  * libtiff/tif_read.c
    + TIFFReadBufferSetup(): use _TIFFcalloc() to zero initialize
    tif_rawdata.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2651,
    bsc#1033129, CVE-2017-7593
  * libtiff/tiffio.h, tif_unix.c, tif_win32.c, tif_vms.c
    + add _TIFFcalloc()
  * libtiff/tif_luv.c, tif_lzw.c, tif_packbits.c
    + return 0 in Encode functions instead of -1 when
    TIFFFlushData1() fails.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2130
  * libtiff/tif_ojpeg.c
    + fix leak in OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable when read fails. Patch by
    Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2659,
    bsc#1033128, CVE-2017-7594
  * libtiff/tif_jpeg.c
    + only run JPEGFixupTagsSubsampling() if the YCbCrSubsampling
    tag is not explicitly present. This helps a bit to reduce the
    I/O amount when the tag is present (especially on cloud hosted
    files).
  * libtiff/tif_lzw.c
    + in LZWPostEncode(), increase, if necessary, the code bit-width
    after flushing the remaining code and before emitting the EOI
    code. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=1982
  * libtiff/tif_pixarlog.c
    + fix memory leak in error code path of PixarLogSetupDecode().
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2665
  * libtiff/tif_fax3.c, tif_predict.c, tif_getimage.c
    + fix GCC 7 -Wimplicit-fallthrough warnings.
  * libtiff/tif_dirread.c
    + fix memory leak in non DEFER_STRILE_LOAD mode (ie default)
    when there is both a StripOffsets and TileOffsets tag, or a
    StripByteCounts and TileByteCounts
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2689,
    bsc#1042805, CVE-2017-9403)
  * libtiff/tif_ojpeg.c
    + fix potential memory leak in
    OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2670
  * libtiff/tif_fax3.c
    + avoid crash in Fax3Close() on empty file. Patch by Alan
    Coopersmith + complement by myself.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2673
  * libtiff/tif_read.c
    + TIFFFillStrip(): add limitation to the number of bytes read
    in case td_stripbytecount[strip] is bigger than reasonable,
    so as to avoid excessive memory allocation.
  * libtiff/tif_zip.c, tif_pixarlog.c, tif_predict.c
    + fix memory leak when the underlying codec (ZIP, PixarLog)
    succeeds its setupdecode() method, but PredictorSetup fails.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStrip() and TIFFFillTile(): avoid excessive memory
    allocation in case of shorten files. Only effective on 64 bit
    builds and non-mapped cases.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStripPartial() / TIFFSeek(), avoid potential integer
    overflows with read_ahead in CHUNKY_STRIP_READ_SUPPORT mode.
    Should especially occur on 32 bit platforms.
  * libtiff/tif_read.c
    + TIFFFillStripPartial()
    + avoid excessive memory allocation in case of shorten files.
    Only effective on 64 bit builds.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + update tif_rawcc in CHUNKY_STRIP_READ_SUPPORT mode with
    tif_rawdataloaded when calling TIFFStartStrip() or
    TIFFFillStripPartial(). This avoids reading beyond tif_rawdata
    when bytecount &gt; tif_rawdatasize. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1545.
    Credit to OSS-Fuzz
  * libtiff/tif_color.c
    + avoid potential int32 overflow in TIFFYCbCrToRGBInit() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1533
    Credit to OSS-Fuzz
  * libtiff/tif_pixarlog.c, tif_luv.c
    + avoid potential int32 overflows in multiply_ms() and add_ms().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1558
    Credit to OSS-Fuzz
  * libtiff/tif_packbits.c
    + fix out-of-buffer read in PackBitsDecode() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1563
    Credit to OSS-Fuzz
  * libtiff/tif_luv.c
    + LogL16InitState(): avoid excessive memory allocation when
    RowsPerStrip tag is missing.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_lzw.c
    + update dec_bitsleft at beginning of LZWDecode(), and update
    tif_rawcc at end of LZWDecode(). This is needed to properly
    work with the latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode.
  * libtiff/tif_pixarlog.c
    + PixarLogDecode(): resync tif_rawcp with next_in and tif_rawcc
    with avail_in at beginning and end of function, similarly to
    what is done in LZWDecode(). Likely needed so that it works
    properly with latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode. But untested...
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): add basic validation of luma and
    refBlackWhite coefficients (just check they are not NaN for
    now), to avoid potential float to int overflows. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1663
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): stricter validation for refBlackWhite
    coefficients values. To avoid invalid float-&gt;int32 conversion.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1718
    Credit to OSS Fuzz
  * tools/fax2tiff.c (main)
    + Applied patch by Joerg Ahrens to fix passing client data for
    Win32 builds using tif_win32.c (USE_WIN32_FILEIO defined) for
    file I/O. Patch was provided via email on November 20, 2016.
  * tools/tiffcp.c
    + avoid uint32 underflow in cpDecodedStrips that can cause
    various issues, such as buffer overflows in the library.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2598
  * tools/tiffcrop.c
    + fix readContigStripsIntoBuffer() in -i (ignore) mode so that
    the output buffer is correctly incremented to avoid write
    outside bounds. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2620
  * tools/tiffcrop.c
    + add 3 extra bytes at end of strip buffer in
    readSeparateStripsIntoBuffer() to avoid read outside of heap
    allocated buffer. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2621
  * tools/tiffcrop.c
    + fix integer division by zero when BitsPerSample is missing.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2619
  * tools/tiffinfo.c
    + fix null pointer dereference in -r mode when the image has no
    StripByteCount tag. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2594
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2597
  * tools/tif_dir.c
    + when TIFFGetField(, TIFFTAG_NUMBEROFINKS, ) is called, limit
    the return number of inks to SamplesPerPixel, so that code
    that parses ink names doesn't go past the end of the buffer.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2599
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2607
  * tools/tiffcp.c
    + fix uint32 underflow/overflow that can cause heap-based buffer
    overflow. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2610
  * tools/tiffcp.c
    + replace assert( (bps % 8) == 0 ) by a non assert check.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2605
  * tools/tiff2ps.c
    + fix 2 heap-based buffer overflows (in PSDataBW and
    PSDataColorContig). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2633 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2634.
  * tools/tiff2pdf.c
    + prevent heap-based buffer overflow in -j mode on a paletted
    image. Note: this fix errors out before the overflow happens.
    There could probably be a better fix.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2635
  * tools/tiff2pdf.c
    + fix wrong usage of memcpy() that can trigger unspecified behaviour.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2638
  * tools/tiff2pdf.c
    + avoid potential invalid memory read in t2p_writeproc.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2639
  * tools/tiff2pdf.c
    + avoid potential heap-based overflow in t2p_readwrite_pdf_image_tile().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2640
  * tools/tiffcrop.c
    + remove extraneous TIFFClose() in error code path, that caused
    double free.
    Related to http://bugzilla.maptools.org/show_bug.cgi?id=2535
  * tools/tiffcp.c
    + error out cleanly in cpContig2SeparateByRow and
    cpSeparate2ContigByRow if BitsPerSample != 8 to avoid heap
    based overflow.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2656 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2657
  * tools/raw2tiff.c
    + avoid integer division by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2631
  * tools/tiff2ps.c
    + call TIFFClose() in error code paths.
  * tools/fax2tiff.c
    + emit appropriate message if the input file is empty. Patch by
    Alan Coopersmith.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2672
  * tools/tiff2bw.c
    + close TIFF handle in error code path.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2677
  * Other issues fixed:
    + bsc#1042804, CVE-2017-9404
- Removed patches:
  * tiff-4.0.7-CVE-2015-7554.patch
  * tiff-4.0.7-CVE-2017-5225.patch
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  * tiff-CVE-2016-10266.patch
  * tiff-CVE-2016-10267.patch
  * tiff-CVE-2016-10268.patch
  * tiff-CVE-2016-10269.patch
  * tiff-CVE-2016-10270.patch
  * tiff-CVE-2016-10271.patch
  * tiff-CVE-2016-10272.patch
    + Fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1511956800">- Upgrade to upstream release 4.0.9
  * Changes in the software configuration:
    + test/Makefile.am: Add some tests for tiff2bw.
    + .appveyor.yml, .travis.yml, build/travis-ci: apply patches
    0001-ci-Travis-script-improvements.patch and
    0002-ci-Invoke-helper-script-via-shell.patch by Roger Leigh
    + .travis.yml, build/travis-ci: new files from
    0001-ci-Add-Travis-support-for-Linux-builds-with-Autoconf.patch
    by Roger Leigh. This patch adds support for the Travis-CI
    service.
    + .appveyor.yml: new file from
    0002-ci-Add-AppVeyor-support.patch by Roger Leigh (sent to
    mailing list on 2017-06-08) This patch adds a .appveyor.yml
    file to the top-level. This allows one to opt in to having a
    branch built on Windows with Cygwin, MinGW and MSVC
    automatically when a branch is pushed to GitHub, GitLab,
    BitBucket or any other supported git hosting service.
    + CMakeLists.txt, test/CMakeLists.txt,
    test/TiffTestCommon.cmake: apply patch
    0001-cmake-Improve-Cygwin-and-MingGW-test-support.patch from
    Roger Leigh. This patch makes the CMake build system support
    running the tests with MinGW or  Cygwin.
    + test/tiffcp-lzw-compat.sh, test/images/quad-lzw-compat.tiff:
    new files to test old-style LZW decompression
    + test/common.sh, Makefile.am, CMakeList.txt: updated with above
    + test/Makefile.am: add missing reference to
    images/quad-lzw-compat.tiff to fix "make distcheck". Patch by
    Roger Leigh
    + nmake.opt: support a DEBUG=1 option, so as to adjust OPTFLAGS
    and use /MDd runtime in debug mode.
  * Changes in libtiff:
    + libtiff/tif_color.c: TIFFYCbCrToRGBInit(): stricter clamping
    to avoid int32 overflow in TIFFYCbCrtoRGB(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1844
    + libtiff/tif_getimage.c: initYCbCrConversion(): stricter
    validation for refBlackWhite coefficients values. To avoid
    invalid float-&gt;int32 conversion (when refBlackWhite[0] ==
    2147483648.f) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1907
    + libtiff/tif_dirinfo.c, tif_dirread.c: add
    _TIFFCheckFieldIsValidForCodec(), and use it in
    TIFFReadDirectory() so as to ignore fields whose tag is a
    codec-specified tag but this codec is not enabled. This avoids
    TIFFGetField() to behave differently depending on whether the
    codec is enabled or not, and thus can avoid stack based buffer
    overflows in a number of TIFF utilities such as tiffsplit,
    tiffcmp, thumbnail, etc. Patch derived from
    0063-Handle-properly-CODEC-specific-tags.patch
    (http://bugzilla.maptools.org/show_bug.cgi?id=2580) by Raphaël
    Hertzog.
    Fixes: http://bugzilla.maptools.org/show_bug.cgi?id=2580
    http://bugzilla.maptools.org/show_bug.cgi?id=2693
    http://bugzilla.maptools.org/show_bug.cgi?id=2625
    (CVE-2016-10095, bsc#1017690)
    http://bugzilla.maptools.org/show_bug.cgi?id=2564
    (CVE-2015-7554, bsc#960341)
    http://bugzilla.maptools.org/show_bug.cgi?id=2561
    (CVE-2016-5318, bsc#983436)
    http://bugzilla.maptools.org/show_bug.cgi?id=2499
    (CVE-2014-8128, bsc#969783)
    http://bugzilla.maptools.org/show_bug.cgi?id=2441
    http://bugzilla.maptools.org/show_bug.cgi?id=2433
    + libtiff/tif_swab.c: if DISABLE_CHECK_TIFFSWABMACROS is
    defined, do not do the #ifdef TIFFSwabXXX checks. Make it
    easier for GDAL to rename the symbols of its internal libtiff
    copy.
    + libtiff/tif_dirread.c: fix regression of libtiff 4.0.8 in
    ChopUpSingleUncompressedStrip() regarding update of newly
    single-strip uncompressed files whose bytecount is 0. Before
    the change of 2016-12-03, the condition bytecount==0 used to
    trigger an early exit/disabling of strip chop. Re-introduce
    that in update mode. Otherwise this cause later incorrect
    setting for the value of StripByCounts/StripOffsets.
    (https://trac.osgeo.org/gdal/ticket/6924)
    + libtiff/tif_dirread.c: TIFFFetchStripThing(): limit the
    number of items read in StripOffsets/StripByteCounts tags to
    the number of strips to avoid excessive memory allocation.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2215
    + libtiff/tif_getimage.c: avoid many (harmless) unsigned int
    overflows.
    + libtiff/tif_fax3.c: avoid unsigned int overflow in
    Fax3Encode2DRow(). Could potentially be a bug with huge rows.
    + libtiff/tif_jpeg.c: avoid (harmless) unsigned int overflow on
    tiled images.
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts() and BYTECOUNTLOOKSBAD when file is
    too short.
    + libtiff/tif_predict.c: decorate legitimate functions where
    unsigned int overflow occur with
    TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts()
    + libtiff/tiffiop.h: add TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    macro to disable CLang warnings raised by
  - fsanitize=undefined,unsigned-integer-overflow
    + libtiff/tif_jpeg.c: add anti-denial of service measure to
    avoid excessive CPU consumption on progressive JPEGs with a
    huge number of scans. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    Note: only affects libtiff since 2014-12-29 where support of
    non-baseline JPEG was added.
    + libtiff/tif_jpeg.c: error out at decoding time if anticipated
    libjpeg memory allocation is above 100 MB. libjpeg in case of
    multiple scans, which is allowed even in baseline JPEG, if
    components are spread over several scans and not
    interleavedin a single one, needs to allocate memory (or
    backing store) for the whole strip/tile. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    This limitation may be overriden by setting the
    LIBTIFF_ALLOW_LARGE_LIBJPEG_MEM_ALLOC environment variable, or
    recompiling libtiff with a custom value of
    TIFF_LIBJPEG_LARGEST_MEM_ALLOC macro.
    + libtiff/tif_jbig.c: fix memory leak in error code path of
    JBIGDecode()
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2706
    (CVE-2017-9936, bsc#1046073)
    + libtiff/tif_dirread.c: in TIFFReadDirEntryFloat(), check that
    a double value can fit in a float before casting.
    + libtiff/tiffiop.h, libtiff/tif_jpeg.c, libtiff/tif_jpeg_12.c,
    libtiff/tif_read.c: make TIFFReadScanline() works in
    CHUNKY_STRIP_READ_SUPPORT mode with JPEG stream with multiple
    scans. Also make configurable through a
    LIBTIFF_JPEG_MAX_ALLOWED_SCAN_NUMBER environment variable the
    maximum number of scans allowed. Defaults to 100.
    + libtiff/tif_read.c: TIFFFillTile(): add limitation to the
    number of bytes read in case td_stripbytecount[strip] is
    bigger than reasonable, so as to avoid excessive memory
    allocation (similarly to what was done for TIFFFileStrip() on
    2017-05-10)
    + libtiff/tif_getimage.c: use
    _TIFFReadEncodedStripAndAllocBuffer(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2433
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedStripAndAllocBuffer() function, variant of
    TIFFReadEncodedStrip() that allocates the decoded buffer only
    after a first successful TIFFFillStrip(). This avoids
    excessive memory allocation on corrupted files.
    + libtiff/tif_dirwrite.c: in TIFFWriteDirectoryTagCheckedXXXX()
    functions associated with LONG8/SLONG8 data type, replace
    assertion that the file is BigTIFF, by a non-fatal error.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2712
    + libtiff/tif_read.c: TIFFStartTile(): set tif_rawcc to
    tif_rawdataloaded when it is set. Similarly to
    TIFFStartStrip(). This issue was revealed by the change of
    2017-06-30 in TIFFFileTile(), limiting the number of bytes
    read. But it could probably have been hit too in
    CHUNKY_STRIP_READ_SUPPORT mode previously. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2454
    + libtiff/tif_error.c, tif_warning.c: correctly use va_list
    when both an old-style and new-style warning/error handlers
    are installed. Patch by Paavo Helde (sent on the mailing list)
    + libtiff/tif_getimage.c: use _TIFFReadTileAndAllocBuffer().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2470
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedTileAndAllocBuffer() and
    _TIFFReadTileAndAllocBuffer() variants of
    TIFFReadEncodedTile() and TIFFReadTile() that allocates the
    decoded buffer only after a first successful TIFFFillTile().
    This avoids excessive memory allocation on corrupted files.
    + libtiff/tif_pixarlog.c: avoid excessive memory allocation on
    decoding when RowsPerStrip tag is not defined (and thus
    td_rowsperstrip == UINT_MAX) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2554
    + libtiff/tif_lzw.c: fix 4.0.8 regression in the decoding of
    old-style LZW compressed files.
    + libtiff/tif_lzw.c: fix potential out-of-buffer read on 1-byte
    LZW strips. Crashing issue only on memory mapped files, where
    the strip offset is the last byte of the file, and the file
    size is a multiple of one page size on the CPU architecture
    (typically 4096)
    + libtiff/tif_dir.c: avoid potential null pointer dereference
    in _TIFFVGetField() on corrupted TIFFTAG_NUMBEROFINKS tag
    instance.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2713
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + libtiff/tif_read.c: TIFFFillStrip() / TIFFFillTile().
    Complementary fix for
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 in the
    isMapped() case, so as to avoid excessive memory allocation
    when we need a temporary buffer but the file is truncated.
    + libtiff/tif_read.c: in TIFFFetchStripThing(), only grow the
    arrays that hold StripOffsets/StripByteCounts, when they are
    smaller than the expected number of striles, up to 1 million
    striles, and error out beyond. Can be tweaked by setting the
    environment variable LIBTIFF_STRILE_ARRAY_MAX_RESIZE_COUNT.
    This partially goes against a change added on 2002-12-17 to
    accept those arrays of wrong sizes, but is needed to avoid
    denial of services. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2350
    + libtiff/tif_read.c: add protection against excessive memory
    allocation attempts in TIFFReadDirEntryArray() on short files.
    Effective for mmap'ed case. And non-mmap'ed case, but
    restricted to 64bit builds. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2675
    + libtiff/tif_luv.c: LogLuvInitState(): avoid excessive memory
    allocation when RowsPerStrip tag is missing. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2683
    + libtiff/tif_getimage.c: gtTileContig() and gtTileSeparate():
    properly break from loops on error when stoponerr is set,
    instead of going on iterating on row based loop.
    + libtiff/tif_getimage.c: fix fromskew computation when
    to-be-skipped pixel number is not a multiple of the horizontal
    subsampling, and also in some other cases. Impact
    putcontig8bitYCbCr44tile, putcontig8bitYCbCr42tile,
    putcontig8bitYCbCr41tile, putcontig8bitYCbCr21tile and
    putcontig8bitYCbCr12tile Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2637 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2691
    + libtiff/tif_luv.c: further reduce memory requirements for
    temporary buffer when RowsPerStrip &gt;= image_length in
    LogLuvInitState() and LogL16InitState(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2700
    + libtiff/tif_dirwrite.c: replace assertion related to not
    finding the SubIFD tag by runtime check (in
    TIFFWriteDirectorySec()) Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2727
    + libtiff/tif_dirwrite.c: replace assertion to tag value not
    fitting on uint32 when selecting the value of SubIFD tag by
    runtime check (in TIFFWriteDirectoryTagSubifd()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2728
    + libtiff/tif_jpeg.c: accept reading the last strip of a JPEG
    compressed file if the codestream height is larger than the
    truncated height of the strip. Emit a warning in this
    situation since this is non compliant.
    + libtiff/tiffiop.h, tif_aux.c: redirect SeekOK() macro to a
    _TIFFSeekoK() function that checks if the offset is not
    bigger than INT64_MAX, so as to avoid a -1 error return code
    of TIFFSeekFile() to match a required seek to UINT64_MAX/-1.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2726
    + libtiff/tif_dirread.c: add NULL check to avoid likely false
    positive null-pointer dereference warning by CLang Static
    Analyzer.
    + libtiff/libtiff.def: add TIFFReadRGBAStripExt and
    TIFFReadRGBATileExt Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2735
    + libtiff/tif_jpeg.c: add compatibility with libjpeg-turbo
    1.5.2 that honours max_memory_to_use &gt; 0. Cf
    https://github.com/libjpeg-turbo/libjpeg-turbo/issues/162
    + libtiff/tif_getimage.c: avoid floating point division by zero
    in initCIELabConversion() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3733
  * Changes in the tools:
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + tools/tiffset.c: fix setting a single value for the
    ExtraSamples tag (and other tags with variable number of
    values). So 'tiffset -s ExtraSamples 1 X'. This only worked
    when setting 2 or more values, but not just one.
    + tools/fax2tiff.c (_FAX_Client_Data): Pass FAX_Client_Data as
    the client data. This client data is not used at all at the
    moment, but it makes the most sense. Issue that the value of
    client_data.fd was passed where a pointer is expected.
    + tools/tiff2pdf.c (t2p_sample_realize_palette): Fix possible
    arithmetic overflow in bounds checking code and eliminate
    comparison between signed and unsigned type.
    + tools/tiff2bw.c (main): Free memory allocated in the tiff2bw
    program. This is in response to the report associated with
    CVE-2017-16232, bsc#1069213 but does not solve the extremely
    high memory usage with the associated POC file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Fix check section:
  + Make sure to get back to the right directory after chdir to
    'tools', or we can't run the 2nd test suite.
  + Fix typo: the tests are located in a directory called 'test',
    not 'tests'.</changelog>
  <changelog author="mvetter@suse.com" date="1518782400">- bsc#1046077: Add tiff-4.0.9-bsc1046077-CVE-2017-9935.patch
  Fix Heap-based buffer overflow in t2p_write_pdf</changelog>
  <changelog author="mvetter@suse.com" date="1519128000">- bsc#1081690: Add tiff-4.0.9-bsc1081690-CVE-2018-5784.patch
  Fix uncontrolled resource consumption in TIFFSetDirectory</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- security update
  * CVE-2018-10963 [bsc#1092949]
    + tiff-CVE-2018-10963.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526644800">- security update
  * CVE-2017-18013 [bsc#1074317]
    + tiff-CVE-2017-18013.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113600">- security update
  * CVE-2018-7456 [bsc#1082825]
    + tiff-CVE-2018-7456.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113601">- security update
  * CVE-2017-11613 [bsc#1082332]
    + tiff-CVE-2017-11613.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528200000">- security update
  * CVE-2018-8905 [bsc#1086408]
    + tiff-CVE-2018-8905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534334400">- security update
  * CVE-2018-10779 [bsc#1092480]
    + tiff-CVE-2018-10779.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
</package>
<package pkgid="7bde6da53c6b1e266b16a93a32533b47168a42584d74b7e5ef9e0d121a177d58" name="libtiff5" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="lp150.4.3.1"/>
  <changelog author="fstrba@suse.com" date="1459944000">- Added patch:
  * tiff-4.0.6-CVE-2016-3186.patch
  - fix CVE-2016-3186: buffer overflow in gif2tiff [bsc#973340]</changelog>
  <changelog author="fstrba@suse.com" date="1468324800">- Added patches:
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  - Upstream commits to fix CVE-2016-5314 [bsc#984831],
    CVE-2016-5316 [bsc#984837], CVE-2016-5317 [bsc#984842],
    CVE-2016-5320 [bsc#984808] and CVE-2016-5875 [bsc#987351]</changelog>
  <changelog author="fstrba@suse.com" date="1472731200">- Added patches:
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  - Upstream commits to fix CVE-2016-3623 [bsc#974618],
    CVE-2016-3945 [bsc#974614], CVE-2016-3990 [bsc#975069],
    CVE-2016-3991 [bsc#975070]</changelog>
  <changelog author="fstrba@suse.com" date="1475755200">- Added patches:
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Upstream fixes for MSVR 35093, MSVR 35094, MSVR 35095,
    MSVR 35096, MSVR 35097, MSVR 35098.
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  - Enforce bits-per-sample requirements of floating point
    predictor. Fixes CVE-2016-3622 [bsc#974449]</changelog>
  <changelog author="fstrba@suse.com" date="1480420800">- Upgrade to upstream release 4.0.7
  * libtiff/tif_aux.c
    + Fix crash in TIFFVGetFieldDefaulted() when requesting
    Predictor tag and that the zip/lzw codec is not configured.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2591
  * libtiff/tif_compress.c
    + Make TIFFNoDecode() return 0 to indicate an error and make
    upper level read routines treat it accordingly. (linked to the
    test case of http://bugzilla.maptools.org/show_bug.cgi?id=2517)
  * libtiff/tif_dir.c
    + Discard values of SMinSampleValue and SMaxSampleValue when
    they have been read and the value of SamplesPerPixel is
    changed afterwards (like when reading a OJPEG compressed image
    with a missing SamplesPerPixel tag, and whose photometric is
    RGB or YCbCr, forcing SamplesPerPixel being 3). Otherwise when
    rewriting the directory (for example with tiffset, we will
    expect 3 values whereas the array had been allocated with just
    one), thus causing a out of bound read access. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658, bsc#974840)
  * libtiff/tif_dirread.c
    + In TIFFFetchNormalTag(), do not dereference NULL pointer when
    values of tags with TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII
    access are 0-byte arrays. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2593 (regression
    introduced by previous fix done on 2016-11-11 for
    CVE-2016-9297, bsc#1010161). Assigned as CVE-2016-9448,
    bsc#1011103
    + In TIFFFetchNormalTag(), make sure that values of tags with
    TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII access are null
    terminated, to avoid potential read outside buffer in
    _TIFFPrintField(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2590
    (CVE-2016-9297, bsc#1010161)
    + Initialize doubledata at line 3693 to NULL to please MSVC 2013
    + Prevent reading ColorMap or TransferFunction if
    BitsPerPixel &gt; 24, so as to avoid huge memory allocation and
    file read attempts
    + Reject images with OJPEG compression that have no
    TileOffsets/StripOffsets tag, when OJPEG compression is
    disabled. Prevent null pointer dereference in
    TIFFReadRawStrip1() and other functions that expect
    td_stripbytecount to be non NULL. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2585
    + When compiled with DEFER_STRILE_LOAD, fix regression, when
    reading a one-strip file without a StripByteCounts tag.
    + Workaround false positive warning of Clang Static Analyzer
    about null pointer dereference in TIFFCheckDirOffset().
  * libtiff/tif_dirwrite.c
    + Avoid null pointer dereference on td_stripoffset when writing
    directory, if FIELD_STRIPOFFSETS was artificially set for a
    hack case in OJPEG case. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658,
    bsc#974840)
    + Fix truncation to 32 bit of file offsets in TIFFLinkDirectory()
    and TIFFWriteDirectorySec() when aligning directory offsets on
    an even offset (affects BigTIFF).
  * libtiff/tif_dumpmode.c
    + DumpModeEncode() should return 0 in case of failure so that
    the above mentionned functions detect the error.
  * libtiff/tif_fax3.c
    + remove dead assignment in Fax3PutEOLgdal().
  * libtiff/tif_fax3.h
    + make Param member of TIFFFaxTabEnt structure a uint16 to
    reduce size of the binary.
  * libtiff/tif_getimage.c
    + Fix out-of-bound reads in TIFFRGBAImage interface in case of
    unsupported values of SamplesPerPixel/ExtraSamples for
    LogLUV/CIELab. Add explicit call to TIFFRGBAImageOK() in
    TIFFRGBAImageBegin(). Fix CVE-2015-8665 and CVE-2015-8683.
    + Fix some benign warnings which appear in 64-bit compilation
    under Microsoft Visual Studio of the form "Arithmetic
    overflow: 32-bit value is shifted, then cast to 64-bit value.
    Results might not be an expected value."
    + TIFFRGBAImageOK: Reject attempts to read floating point images.
  * libtiff/tif_luv.c
    + Fix potential out-of-bound writes in decode functions in non
    debug builds by replacing assert()s by regular if checks
    (http://bugzilla.maptools.org/show_bug.cgi?id=2522). Fix
    potential out-of-bound reads in case of short input data.
    + Validate that for COMPRESSION_SGILOG and PHOTOMETRIC_LOGL,
    there is only one sample per pixel. Avoid potential invalid
    memory write on corrupted/unexpected images when using the
    TIFFRGBAImageBegin() interface
  * libtiff/tif_next.c
    + Fix potential out-of-bound write in NeXTDecode()
    (http://bugzilla.maptools.org/show_bug.cgi?id=2508)
  * libtiff/tif_pixarlog.c
    + Avoid zlib error messages to pass a NULL string to %s
    formatter, which is undefined behaviour in sprintf().
    + Fix out-of-bounds write vulnerabilities in heap allocated
    buffers. Reported as MSVR 35094.
    + Fix potential buffer write overrun in PixarLogDecode() on
    corrupted/unexpected images (CVE-2016-5875, bsc#987351)
    + Fix write buffer overflow in PixarLogEncode if more input
    samples are provided than expected by PixarLogSetupEncode.
    Idea based on libtiff-CVE-2016-3990.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, but with different and simpler
    check. (http://bugzilla.maptools.org/show_bug.cgi?id=2544,
    bsc#975069)
  * libtiff/tif_predict.c
    + PredictorSetup: Enforce bits-per-sample requirements of
    floating point predictor (3). Fixes CVE-2016-3622 "Divide By
    Zero in the tiff2rgba tool." (bsc#974449)
  * libtiff/tif_predict.h, libtiff/tif_predict.c
    + Replace assertions by runtime checks to avoid assertions in
    debug mode, or buffer overflows in release mode. Can happen
    when dealing with unusual tile size like YCbCr with
    subsampling. Reported as MSVR 35105.
  * libtiff/tif_read.c
    + Fix out-of-bounds read on memory-mapped files in
    TIFFReadRawStrip1() and TIFFReadRawTile1() when stripoffset
    is beyond tmsize_t max value
    + Make TIFFReadEncodedStrip() and TIFFReadEncodedTile() directly
    use user provided buffer when no compression (and other
    conditions) to save a memcpy().
  * libtiff/tif_strip.c
    + Make TIFFNumberOfStrips() return the td-&gt;td_nstrips value when
    it is non-zero, instead of recomputing it. This is needed in
    TIFF_STRIPCHOP mode where td_nstrips is modified. Fixes a read
    outsize of array in tiffsplit (or other utilities using
    TIFFNumberOfStrips()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2587
    (CVE-2016-9273, bsc#1010163)
  * libtiff/tif_write.c
    + Fix issue in error code path of TIFFFlushData1() that didn't
    reset the tif_rawcc and tif_rawcp members. I'm not completely
    sure if that could happen in practice outside of the odd
    behaviour of t2p_seekproc() of tiff2pdf). The report points
    that a better fix could be to check the return value of
    TIFFFlushData1() in places where it isn't done currently, but
    it seems this patch is enough. Reported as MSVR 35095.
    + Make TIFFWriteEncodedStrip() and TIFFWriteEncodedTile()
    directly use user provided buffer when no compression to save
    a memcpy().
    + TIFFWriteEncodedStrip() and TIFFWriteEncodedTile() should
    return -1 in case of failure of tif_encodestrip() as documented
  * tools/fax2tiff.D    c
    + Fix segfault when specifying -r without argument. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2572
  * tools/Makefile.am
    + The libtiff tools bmp2tiff, gif2tiff, ras2tiff, sgi2tiff,
    sgisv, and ycbcr are completely removed from the distribution.
    The libtiff tools rgb2ycbcr and thumbnail are only built in
    the build tree for testing. Old files are put in new 'archive'
    subdirectory of the source repository, but not in
    distribution archives. These changes are made in order to
    lessen the maintenance burden.
  * tools/rgb2ycbcr.c
    + Validate values of -v and -h parameters to avoid potential
    divide by zero. Fixes CVE-2016-3623, bsc#974618
    (http://bugzilla.maptools.org/show_bug.cgi?id=2569)
  * tools/tiff2bw.c
    + Fix weight computation that could result of color value
    overflow (no security implication). Fix
    http://bugzilla.maptools.org/show_bug.cgi?id=2550.
  * tools/tiff2pdf.c
    + Avoid undefined behaviour related to overlapping of source and
    destination buffer in memcpy() call in
    t2p_sample_rgbaa_to_rgb() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2577
    + Fix out-of-bounds write vulnerabilities in heap allocate buffer
    in t2p_process_jpeg_strip(). Reported as MSVR 35098.
    + Fix potential integer overflows on 32 bit builds in
    t2p_read_tiff_size() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2576
    + Fix read -largely- outsize of buffer in
    t2p_readwrite_pdf_image_tile(), causing crash, when reading a
    JPEG compressed image with TIFFTAG_JPEGTABLES length being one.
    Reported as MSVR 35101. CVE-2016-9453, bsc#1011107
    + Fix write buffer overflow of 2 bytes on JPEG compressed images.
    Reported as TALOS-CAN-0187, CVE-2016-5652, bsc#1007280. Also
    prevents writing 2 extra uninitialized bytes to the file
    stream.
  * tools/tiff2rgba.c
    + Fix integer overflow in size of allocated buffer, when -b mode
    is enabled, that could result in out-of-bounds write. Based
    initially on patch tiff-CVE-2016-3945.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, with correction for invalid
    tests that rejected valid files.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2545, bsc#974614)
  * tools/tiffcp.c
    + Fix out-of-bounds write on tiled images with odd tile width vs
    image width. Reported as MSVR 35103. (bsc#1011841,
    CVE-2016-9538)
    + Fix read of undefined variable in case of missing required
    tags. Found on test case of MSVR 35100.
  * tools/tiffcrop.c
    + Avoid access outside of stack allocated array on a tiled
    separate TIFF with more than 8 samples per pixel.
    (CVE-2016-5321, CVE-2016-5323,
    http://bugzilla.maptools.org/show_bug.cgi?id=2558,
    http://bugzilla.maptools.org/show_bug.cgi?id=2559, bsc#984813,
    bsc#984815)
    + Fix memory leak in (recent) error code path. Fixes Coverity
    1394415.
    + Fix multiple uint32 overflows in writeBufferToSeparateStrips(),
    writeBufferToContigTiles() and writeBufferToSeparateTiles()
    that could cause heap buffer overflows. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2592
    + Fix out-of-bound read of up to 3 bytes in
    readContigTilesIntoBuffer(). Reported as MSVR 35092.
    + Fix out-of-bounds write in loadImage(). From patch
    libtiff-CVE-2016-3991.patch from
    libtiff-4.0.3-25.el7_2.src.rpm
    (http://bugzilla.maptools.org/show_bug.cgi?id=2543, bsc#975070)
    + Fix read of undefined buffer in readContigStripsIntoBuffer()
    due to uint16 overflow. Reported as MSVR 35100. (bsc#1011841,
    CVE-2016-9538)
    + Fix various out-of-bounds write vulnerabilities in heap or
    stack allocated buffers. Reported as MSVR 35093, MSVR 35096
    and MSVR 35097.
    + readContigTilesIntoBuffer: Fix signed/unsigned comparison
    warning.
  * tools/tiffdump.c
    + Fix a few misaligned 64-bit reads warned by -fsanitize
    + ReadDirectory: Remove uint32 cast to_TIFFmalloc() argument
    which resulted in Coverity report. Added more mutiplication
    overflow checks
  * tools/tiffinfo.c
    + Fix out-of-bound read on some tiled images.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2517)
    + TIFFReadContigTileData: Fix signed/unsigned comparison warning.
    + TIFFReadSeparateTileData: Fix signed/unsigned comparison
    warning.
- Removed patches:
  * tiff-4.0.4-uninitialized_mem_NeXTDecode.patch
  * tiff-4.0.6-CVE-2015-8782.patch
  * tiff-4.0.6-CVE-2016-3186.patch
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Fixed in the upsteam release
- Changed patch:
  * tiff-4.0.6-CVE-2015-7554.patch -&gt; tiff-4.0.7-CVE-2015-7554.patch
  - Rediffed to the changed context</changelog>
  <changelog author="idonmez@suse.com" date="1482148800">- Update homepage</changelog>
  <changelog author="jengelh@inai.de" date="1482148801">- Drop --with-pic, this is only for static libs (which are not built)
- Update descriptions</changelog>
  <changelog author="fstrba@suse.com" date="1484308800">- Added patch:
  * tiff-4.0.7-CVE-2017-5225.patch
  - Upstream fix for CVE-2017-5225, bsc#1019611: heap buffer
    overflow in tools/tiffcp via a crafted BitsPerSample value</changelog>
  <changelog author="fstrba@suse.com" date="1486036800">- Added patch:
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  - Fix a regression introduced in 4.0.7 (bsc#1022103)
  - http://bugzilla.maptools.org/show_bug.cgi?id=2636</changelog>
  <changelog author="fstrba@suse.com" date="1490788800">- Added patches:
  * tiff-CVE-2016-10266.patch
    + Upstream fix for CVE-2016-10266, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031263)
  * tiff-CVE-2016-10267.patch
    + Upstream fix for CVE-2016-10267, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031262)
  * tiff-CVE-2016-10268.patch
    + Upstream fix for CVE-2016-10268, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031255)
  * tiff-CVE-2016-10269.patch
    + Upstream fix for CVE-2016-10269, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031254)
  * tiff-CVE-2016-10270.patch
    + Upstream fix for CVE-2016-10270, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031250)
  * tiff-CVE-2016-10271.patch
    + Upstream fix for CVE-2016-10271, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read and buffer overflow) or possibly have unspecified
    other impact via a crafted TIFF image (bsc#1031249)
  * tiff-CVE-2016-10272.patch
    + Upstream fix for CVE-2016-10272, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    overflow) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031247)</changelog>
  <changelog author="fstrba@suse.com" date="1497960000">- Upgrade to upstream release 4.0.8
  * libtiff/tif_getimage.c, libtiff/tif_open.c
    + add parenthesis to fix cppcheck clarifyCalculation warnings
  * libtiff/tif_predict.c, libtiff/tif_print.c
    + fix printf unsigned vs signed formatting (cppcheck
    invalidPrintfArgType_uint warnings)
  * libtiff/tif_read.c, libtiff/tiffiop.h
    + fix uint32 overflow in TIFFReadEncodedStrip() that caused an
    integer division by zero. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2596
  * libtiff/tif_pixarlog.c, libtiff/tif_luv.c
    + fix heap-based buffer overflow on generation of PixarLog / LUV
    compressed files, with ColorMap, TransferFunction attached and
    nasty plays with bitspersample. The fix for LUV has not been
    tested, but suffers from the same kind of issue of PixarLog.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2604
  * libtiff/tif_strip.c
    + revert the change in TIFFNumberOfStrips() done for
    http://bugzilla.maptools.org/show_bug.cgi?id=2587 /
    CVE-2016-9273 since the above change is a better fix that
    makes it unnecessary.
  * libtiff/tif_dirread.c
    + modify ChopUpSingleUncompressedStrip() to instanciate compute
    ntrips as TIFFhowmany_32(td-&gt;td_imagelength, rowsperstrip),
    instead of a logic based on the total size of data. Which is
    faulty is the total size of data is not sufficient to fill the
    whole image, and thus results in reading outside of the
    StripByCounts/StripOffsets arrays when using
    TIFFReadScanline(). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2608.
  * libtiff/tif_ojpeg.c
    + make OJPEGDecode() early exit in case of failure in
    OJPEGPreDecode(). This will avoid a divide by zero, and
    potential other issues. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2611
  * libtiff/tif_write.c
    + fix misleading indentation as warned by GCC.
  * libtiff/tif_fax3.h
    + revert change done on 2016-01-09 that made Param member of
    TIFFFaxTabEnt structure a uint16 to reduce size of the
    binary. It happens that the Hylafax software uses the tables
    that follow this typedef (TIFFFaxMainTable, TIFFFaxWhiteTable,
    TIFFFaxBlackTable), although they are not in a public libtiff
    header. Raised by Lee Howard.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2636
  * libtiff/tiffio.h, libtiff/tif_getimage.c
    + add TIFFReadRGBAStripExt() and TIFFReadRGBATileExt() variants
    of the functions without ext, with an extra argument to control
    the stop_on_error behaviour.
  * libtiff/tif_getimage.c
    + fix potential memory leaks in error code path of
    TIFFRGBAImageBegin().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2627
  * libtiff/tif_jpeg.c
    + increase libjpeg max memory usable to 10 MB instead of libjpeg
    1MB default. This helps when creating files with "big" tile,
    without using libjpeg temporary files.
    Related to https://trac.osgeo.org/gdal/ticket/6757
  * libtiff/tif_jpeg.c
    + avoid integer division by zero in JPEGSetupEncode() when
    horizontal or vertical sampling is set to 0.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2653,
    bsc#1033127, CVE-2017-7595
  * libtiff/tif_dirwrite.c
    + in TIFFWriteDirectoryTagCheckedRational, replace assertion by
    runtime check to error out if passed value is strictly
    negative.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2535,
    bsc#1038438, CVE-2016-10371
  * libtiff/tif_dirread.c
    + avoid division by floating point 0 in
    TIFFReadDirEntryCheckedRational() and
    TIFFReadDirEntryCheckedSrational(), and return 0 in that case
    (instead of infinity as before presumably) Apparently some
    sanitizers do not like those divisions by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2644,
    bsc#1033118, CVE-2017-7598
  * libtiff/tif_dir.c, tif_dirread.c, tif_dirwrite.c
    + implement various clampings of double to other data types to
    avoid undefined behaviour if the output range isn't big enough
    to hold the input value.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2643
    http://bugzilla.maptools.org/show_bug.cgi?id=2642
    http://bugzilla.maptools.org/show_bug.cgi?id=2646
    http://bugzilla.maptools.org/show_bug.cgi?id=2647,
    bsc#1033126, CVE-2017-7596, bsc#1033120, CVE-2017-7597,
    bsc#1033113, CVE-2017-7599, bsc#1033112, CVE-2017-7600,
  * libtiff/tif_jpeg.c
    + validate BitsPerSample in JPEGSetupEncode() to avoid undefined
    behaviour caused by invalid shift exponent.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2648,
    bsc#1033111, CVE-2017-7601
  * libtiff/tif_read.c
    + avoid potential undefined behaviour on signed integer addition
    in TIFFReadRawStrip1() in isMapped() case.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2650,
    bsc#1033109, CVE-2017-7602
  * libtiff/tif_getimage.c
    + add explicit uint32 cast in putagreytile to avoid
    UndefinedBehaviorSanitizer warning. Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2658,
    bsc#1033131, CVE-2017-7592
  * libtiff/tif_read.c
    + TIFFReadBufferSetup(): use _TIFFcalloc() to zero initialize
    tif_rawdata.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2651,
    bsc#1033129, CVE-2017-7593
  * libtiff/tiffio.h, tif_unix.c, tif_win32.c, tif_vms.c
    + add _TIFFcalloc()
  * libtiff/tif_luv.c, tif_lzw.c, tif_packbits.c
    + return 0 in Encode functions instead of -1 when
    TIFFFlushData1() fails.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2130
  * libtiff/tif_ojpeg.c
    + fix leak in OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable when read fails. Patch by
    Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2659,
    bsc#1033128, CVE-2017-7594
  * libtiff/tif_jpeg.c
    + only run JPEGFixupTagsSubsampling() if the YCbCrSubsampling
    tag is not explicitly present. This helps a bit to reduce the
    I/O amount when the tag is present (especially on cloud hosted
    files).
  * libtiff/tif_lzw.c
    + in LZWPostEncode(), increase, if necessary, the code bit-width
    after flushing the remaining code and before emitting the EOI
    code. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=1982
  * libtiff/tif_pixarlog.c
    + fix memory leak in error code path of PixarLogSetupDecode().
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2665
  * libtiff/tif_fax3.c, tif_predict.c, tif_getimage.c
    + fix GCC 7 -Wimplicit-fallthrough warnings.
  * libtiff/tif_dirread.c
    + fix memory leak in non DEFER_STRILE_LOAD mode (ie default)
    when there is both a StripOffsets and TileOffsets tag, or a
    StripByteCounts and TileByteCounts
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2689,
    bsc#1042805, CVE-2017-9403)
  * libtiff/tif_ojpeg.c
    + fix potential memory leak in
    OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2670
  * libtiff/tif_fax3.c
    + avoid crash in Fax3Close() on empty file. Patch by Alan
    Coopersmith + complement by myself.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2673
  * libtiff/tif_read.c
    + TIFFFillStrip(): add limitation to the number of bytes read
    in case td_stripbytecount[strip] is bigger than reasonable,
    so as to avoid excessive memory allocation.
  * libtiff/tif_zip.c, tif_pixarlog.c, tif_predict.c
    + fix memory leak when the underlying codec (ZIP, PixarLog)
    succeeds its setupdecode() method, but PredictorSetup fails.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStrip() and TIFFFillTile(): avoid excessive memory
    allocation in case of shorten files. Only effective on 64 bit
    builds and non-mapped cases.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStripPartial() / TIFFSeek(), avoid potential integer
    overflows with read_ahead in CHUNKY_STRIP_READ_SUPPORT mode.
    Should especially occur on 32 bit platforms.
  * libtiff/tif_read.c
    + TIFFFillStripPartial()
    + avoid excessive memory allocation in case of shorten files.
    Only effective on 64 bit builds.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + update tif_rawcc in CHUNKY_STRIP_READ_SUPPORT mode with
    tif_rawdataloaded when calling TIFFStartStrip() or
    TIFFFillStripPartial(). This avoids reading beyond tif_rawdata
    when bytecount &gt; tif_rawdatasize. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1545.
    Credit to OSS-Fuzz
  * libtiff/tif_color.c
    + avoid potential int32 overflow in TIFFYCbCrToRGBInit() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1533
    Credit to OSS-Fuzz
  * libtiff/tif_pixarlog.c, tif_luv.c
    + avoid potential int32 overflows in multiply_ms() and add_ms().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1558
    Credit to OSS-Fuzz
  * libtiff/tif_packbits.c
    + fix out-of-buffer read in PackBitsDecode() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1563
    Credit to OSS-Fuzz
  * libtiff/tif_luv.c
    + LogL16InitState(): avoid excessive memory allocation when
    RowsPerStrip tag is missing.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_lzw.c
    + update dec_bitsleft at beginning of LZWDecode(), and update
    tif_rawcc at end of LZWDecode(). This is needed to properly
    work with the latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode.
  * libtiff/tif_pixarlog.c
    + PixarLogDecode(): resync tif_rawcp with next_in and tif_rawcc
    with avail_in at beginning and end of function, similarly to
    what is done in LZWDecode(). Likely needed so that it works
    properly with latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode. But untested...
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): add basic validation of luma and
    refBlackWhite coefficients (just check they are not NaN for
    now), to avoid potential float to int overflows. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1663
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): stricter validation for refBlackWhite
    coefficients values. To avoid invalid float-&gt;int32 conversion.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1718
    Credit to OSS Fuzz
  * tools/fax2tiff.c (main)
    + Applied patch by Joerg Ahrens to fix passing client data for
    Win32 builds using tif_win32.c (USE_WIN32_FILEIO defined) for
    file I/O. Patch was provided via email on November 20, 2016.
  * tools/tiffcp.c
    + avoid uint32 underflow in cpDecodedStrips that can cause
    various issues, such as buffer overflows in the library.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2598
  * tools/tiffcrop.c
    + fix readContigStripsIntoBuffer() in -i (ignore) mode so that
    the output buffer is correctly incremented to avoid write
    outside bounds. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2620
  * tools/tiffcrop.c
    + add 3 extra bytes at end of strip buffer in
    readSeparateStripsIntoBuffer() to avoid read outside of heap
    allocated buffer. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2621
  * tools/tiffcrop.c
    + fix integer division by zero when BitsPerSample is missing.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2619
  * tools/tiffinfo.c
    + fix null pointer dereference in -r mode when the image has no
    StripByteCount tag. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2594
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2597
  * tools/tif_dir.c
    + when TIFFGetField(, TIFFTAG_NUMBEROFINKS, ) is called, limit
    the return number of inks to SamplesPerPixel, so that code
    that parses ink names doesn't go past the end of the buffer.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2599
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2607
  * tools/tiffcp.c
    + fix uint32 underflow/overflow that can cause heap-based buffer
    overflow. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2610
  * tools/tiffcp.c
    + replace assert( (bps % 8) == 0 ) by a non assert check.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2605
  * tools/tiff2ps.c
    + fix 2 heap-based buffer overflows (in PSDataBW and
    PSDataColorContig). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2633 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2634.
  * tools/tiff2pdf.c
    + prevent heap-based buffer overflow in -j mode on a paletted
    image. Note: this fix errors out before the overflow happens.
    There could probably be a better fix.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2635
  * tools/tiff2pdf.c
    + fix wrong usage of memcpy() that can trigger unspecified behaviour.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2638
  * tools/tiff2pdf.c
    + avoid potential invalid memory read in t2p_writeproc.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2639
  * tools/tiff2pdf.c
    + avoid potential heap-based overflow in t2p_readwrite_pdf_image_tile().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2640
  * tools/tiffcrop.c
    + remove extraneous TIFFClose() in error code path, that caused
    double free.
    Related to http://bugzilla.maptools.org/show_bug.cgi?id=2535
  * tools/tiffcp.c
    + error out cleanly in cpContig2SeparateByRow and
    cpSeparate2ContigByRow if BitsPerSample != 8 to avoid heap
    based overflow.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2656 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2657
  * tools/raw2tiff.c
    + avoid integer division by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2631
  * tools/tiff2ps.c
    + call TIFFClose() in error code paths.
  * tools/fax2tiff.c
    + emit appropriate message if the input file is empty. Patch by
    Alan Coopersmith.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2672
  * tools/tiff2bw.c
    + close TIFF handle in error code path.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2677
  * Other issues fixed:
    + bsc#1042804, CVE-2017-9404
- Removed patches:
  * tiff-4.0.7-CVE-2015-7554.patch
  * tiff-4.0.7-CVE-2017-5225.patch
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  * tiff-CVE-2016-10266.patch
  * tiff-CVE-2016-10267.patch
  * tiff-CVE-2016-10268.patch
  * tiff-CVE-2016-10269.patch
  * tiff-CVE-2016-10270.patch
  * tiff-CVE-2016-10271.patch
  * tiff-CVE-2016-10272.patch
    + Fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1511956800">- Upgrade to upstream release 4.0.9
  * Changes in the software configuration:
    + test/Makefile.am: Add some tests for tiff2bw.
    + .appveyor.yml, .travis.yml, build/travis-ci: apply patches
    0001-ci-Travis-script-improvements.patch and
    0002-ci-Invoke-helper-script-via-shell.patch by Roger Leigh
    + .travis.yml, build/travis-ci: new files from
    0001-ci-Add-Travis-support-for-Linux-builds-with-Autoconf.patch
    by Roger Leigh. This patch adds support for the Travis-CI
    service.
    + .appveyor.yml: new file from
    0002-ci-Add-AppVeyor-support.patch by Roger Leigh (sent to
    mailing list on 2017-06-08) This patch adds a .appveyor.yml
    file to the top-level. This allows one to opt in to having a
    branch built on Windows with Cygwin, MinGW and MSVC
    automatically when a branch is pushed to GitHub, GitLab,
    BitBucket or any other supported git hosting service.
    + CMakeLists.txt, test/CMakeLists.txt,
    test/TiffTestCommon.cmake: apply patch
    0001-cmake-Improve-Cygwin-and-MingGW-test-support.patch from
    Roger Leigh. This patch makes the CMake build system support
    running the tests with MinGW or  Cygwin.
    + test/tiffcp-lzw-compat.sh, test/images/quad-lzw-compat.tiff:
    new files to test old-style LZW decompression
    + test/common.sh, Makefile.am, CMakeList.txt: updated with above
    + test/Makefile.am: add missing reference to
    images/quad-lzw-compat.tiff to fix "make distcheck". Patch by
    Roger Leigh
    + nmake.opt: support a DEBUG=1 option, so as to adjust OPTFLAGS
    and use /MDd runtime in debug mode.
  * Changes in libtiff:
    + libtiff/tif_color.c: TIFFYCbCrToRGBInit(): stricter clamping
    to avoid int32 overflow in TIFFYCbCrtoRGB(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1844
    + libtiff/tif_getimage.c: initYCbCrConversion(): stricter
    validation for refBlackWhite coefficients values. To avoid
    invalid float-&gt;int32 conversion (when refBlackWhite[0] ==
    2147483648.f) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1907
    + libtiff/tif_dirinfo.c, tif_dirread.c: add
    _TIFFCheckFieldIsValidForCodec(), and use it in
    TIFFReadDirectory() so as to ignore fields whose tag is a
    codec-specified tag but this codec is not enabled. This avoids
    TIFFGetField() to behave differently depending on whether the
    codec is enabled or not, and thus can avoid stack based buffer
    overflows in a number of TIFF utilities such as tiffsplit,
    tiffcmp, thumbnail, etc. Patch derived from
    0063-Handle-properly-CODEC-specific-tags.patch
    (http://bugzilla.maptools.org/show_bug.cgi?id=2580) by Raphaël
    Hertzog.
    Fixes: http://bugzilla.maptools.org/show_bug.cgi?id=2580
    http://bugzilla.maptools.org/show_bug.cgi?id=2693
    http://bugzilla.maptools.org/show_bug.cgi?id=2625
    (CVE-2016-10095, bsc#1017690)
    http://bugzilla.maptools.org/show_bug.cgi?id=2564
    (CVE-2015-7554, bsc#960341)
    http://bugzilla.maptools.org/show_bug.cgi?id=2561
    (CVE-2016-5318, bsc#983436)
    http://bugzilla.maptools.org/show_bug.cgi?id=2499
    (CVE-2014-8128, bsc#969783)
    http://bugzilla.maptools.org/show_bug.cgi?id=2441
    http://bugzilla.maptools.org/show_bug.cgi?id=2433
    + libtiff/tif_swab.c: if DISABLE_CHECK_TIFFSWABMACROS is
    defined, do not do the #ifdef TIFFSwabXXX checks. Make it
    easier for GDAL to rename the symbols of its internal libtiff
    copy.
    + libtiff/tif_dirread.c: fix regression of libtiff 4.0.8 in
    ChopUpSingleUncompressedStrip() regarding update of newly
    single-strip uncompressed files whose bytecount is 0. Before
    the change of 2016-12-03, the condition bytecount==0 used to
    trigger an early exit/disabling of strip chop. Re-introduce
    that in update mode. Otherwise this cause later incorrect
    setting for the value of StripByCounts/StripOffsets.
    (https://trac.osgeo.org/gdal/ticket/6924)
    + libtiff/tif_dirread.c: TIFFFetchStripThing(): limit the
    number of items read in StripOffsets/StripByteCounts tags to
    the number of strips to avoid excessive memory allocation.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2215
    + libtiff/tif_getimage.c: avoid many (harmless) unsigned int
    overflows.
    + libtiff/tif_fax3.c: avoid unsigned int overflow in
    Fax3Encode2DRow(). Could potentially be a bug with huge rows.
    + libtiff/tif_jpeg.c: avoid (harmless) unsigned int overflow on
    tiled images.
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts() and BYTECOUNTLOOKSBAD when file is
    too short.
    + libtiff/tif_predict.c: decorate legitimate functions where
    unsigned int overflow occur with
    TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts()
    + libtiff/tiffiop.h: add TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    macro to disable CLang warnings raised by
  - fsanitize=undefined,unsigned-integer-overflow
    + libtiff/tif_jpeg.c: add anti-denial of service measure to
    avoid excessive CPU consumption on progressive JPEGs with a
    huge number of scans. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    Note: only affects libtiff since 2014-12-29 where support of
    non-baseline JPEG was added.
    + libtiff/tif_jpeg.c: error out at decoding time if anticipated
    libjpeg memory allocation is above 100 MB. libjpeg in case of
    multiple scans, which is allowed even in baseline JPEG, if
    components are spread over several scans and not
    interleavedin a single one, needs to allocate memory (or
    backing store) for the whole strip/tile. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    This limitation may be overriden by setting the
    LIBTIFF_ALLOW_LARGE_LIBJPEG_MEM_ALLOC environment variable, or
    recompiling libtiff with a custom value of
    TIFF_LIBJPEG_LARGEST_MEM_ALLOC macro.
    + libtiff/tif_jbig.c: fix memory leak in error code path of
    JBIGDecode()
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2706
    (CVE-2017-9936, bsc#1046073)
    + libtiff/tif_dirread.c: in TIFFReadDirEntryFloat(), check that
    a double value can fit in a float before casting.
    + libtiff/tiffiop.h, libtiff/tif_jpeg.c, libtiff/tif_jpeg_12.c,
    libtiff/tif_read.c: make TIFFReadScanline() works in
    CHUNKY_STRIP_READ_SUPPORT mode with JPEG stream with multiple
    scans. Also make configurable through a
    LIBTIFF_JPEG_MAX_ALLOWED_SCAN_NUMBER environment variable the
    maximum number of scans allowed. Defaults to 100.
    + libtiff/tif_read.c: TIFFFillTile(): add limitation to the
    number of bytes read in case td_stripbytecount[strip] is
    bigger than reasonable, so as to avoid excessive memory
    allocation (similarly to what was done for TIFFFileStrip() on
    2017-05-10)
    + libtiff/tif_getimage.c: use
    _TIFFReadEncodedStripAndAllocBuffer(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2433
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedStripAndAllocBuffer() function, variant of
    TIFFReadEncodedStrip() that allocates the decoded buffer only
    after a first successful TIFFFillStrip(). This avoids
    excessive memory allocation on corrupted files.
    + libtiff/tif_dirwrite.c: in TIFFWriteDirectoryTagCheckedXXXX()
    functions associated with LONG8/SLONG8 data type, replace
    assertion that the file is BigTIFF, by a non-fatal error.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2712
    + libtiff/tif_read.c: TIFFStartTile(): set tif_rawcc to
    tif_rawdataloaded when it is set. Similarly to
    TIFFStartStrip(). This issue was revealed by the change of
    2017-06-30 in TIFFFileTile(), limiting the number of bytes
    read. But it could probably have been hit too in
    CHUNKY_STRIP_READ_SUPPORT mode previously. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2454
    + libtiff/tif_error.c, tif_warning.c: correctly use va_list
    when both an old-style and new-style warning/error handlers
    are installed. Patch by Paavo Helde (sent on the mailing list)
    + libtiff/tif_getimage.c: use _TIFFReadTileAndAllocBuffer().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2470
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedTileAndAllocBuffer() and
    _TIFFReadTileAndAllocBuffer() variants of
    TIFFReadEncodedTile() and TIFFReadTile() that allocates the
    decoded buffer only after a first successful TIFFFillTile().
    This avoids excessive memory allocation on corrupted files.
    + libtiff/tif_pixarlog.c: avoid excessive memory allocation on
    decoding when RowsPerStrip tag is not defined (and thus
    td_rowsperstrip == UINT_MAX) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2554
    + libtiff/tif_lzw.c: fix 4.0.8 regression in the decoding of
    old-style LZW compressed files.
    + libtiff/tif_lzw.c: fix potential out-of-buffer read on 1-byte
    LZW strips. Crashing issue only on memory mapped files, where
    the strip offset is the last byte of the file, and the file
    size is a multiple of one page size on the CPU architecture
    (typically 4096)
    + libtiff/tif_dir.c: avoid potential null pointer dereference
    in _TIFFVGetField() on corrupted TIFFTAG_NUMBEROFINKS tag
    instance.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2713
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + libtiff/tif_read.c: TIFFFillStrip() / TIFFFillTile().
    Complementary fix for
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 in the
    isMapped() case, so as to avoid excessive memory allocation
    when we need a temporary buffer but the file is truncated.
    + libtiff/tif_read.c: in TIFFFetchStripThing(), only grow the
    arrays that hold StripOffsets/StripByteCounts, when they are
    smaller than the expected number of striles, up to 1 million
    striles, and error out beyond. Can be tweaked by setting the
    environment variable LIBTIFF_STRILE_ARRAY_MAX_RESIZE_COUNT.
    This partially goes against a change added on 2002-12-17 to
    accept those arrays of wrong sizes, but is needed to avoid
    denial of services. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2350
    + libtiff/tif_read.c: add protection against excessive memory
    allocation attempts in TIFFReadDirEntryArray() on short files.
    Effective for mmap'ed case. And non-mmap'ed case, but
    restricted to 64bit builds. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2675
    + libtiff/tif_luv.c: LogLuvInitState(): avoid excessive memory
    allocation when RowsPerStrip tag is missing. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2683
    + libtiff/tif_getimage.c: gtTileContig() and gtTileSeparate():
    properly break from loops on error when stoponerr is set,
    instead of going on iterating on row based loop.
    + libtiff/tif_getimage.c: fix fromskew computation when
    to-be-skipped pixel number is not a multiple of the horizontal
    subsampling, and also in some other cases. Impact
    putcontig8bitYCbCr44tile, putcontig8bitYCbCr42tile,
    putcontig8bitYCbCr41tile, putcontig8bitYCbCr21tile and
    putcontig8bitYCbCr12tile Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2637 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2691
    + libtiff/tif_luv.c: further reduce memory requirements for
    temporary buffer when RowsPerStrip &gt;= image_length in
    LogLuvInitState() and LogL16InitState(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2700
    + libtiff/tif_dirwrite.c: replace assertion related to not
    finding the SubIFD tag by runtime check (in
    TIFFWriteDirectorySec()) Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2727
    + libtiff/tif_dirwrite.c: replace assertion to tag value not
    fitting on uint32 when selecting the value of SubIFD tag by
    runtime check (in TIFFWriteDirectoryTagSubifd()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2728
    + libtiff/tif_jpeg.c: accept reading the last strip of a JPEG
    compressed file if the codestream height is larger than the
    truncated height of the strip. Emit a warning in this
    situation since this is non compliant.
    + libtiff/tiffiop.h, tif_aux.c: redirect SeekOK() macro to a
    _TIFFSeekoK() function that checks if the offset is not
    bigger than INT64_MAX, so as to avoid a -1 error return code
    of TIFFSeekFile() to match a required seek to UINT64_MAX/-1.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2726
    + libtiff/tif_dirread.c: add NULL check to avoid likely false
    positive null-pointer dereference warning by CLang Static
    Analyzer.
    + libtiff/libtiff.def: add TIFFReadRGBAStripExt and
    TIFFReadRGBATileExt Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2735
    + libtiff/tif_jpeg.c: add compatibility with libjpeg-turbo
    1.5.2 that honours max_memory_to_use &gt; 0. Cf
    https://github.com/libjpeg-turbo/libjpeg-turbo/issues/162
    + libtiff/tif_getimage.c: avoid floating point division by zero
    in initCIELabConversion() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3733
  * Changes in the tools:
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + tools/tiffset.c: fix setting a single value for the
    ExtraSamples tag (and other tags with variable number of
    values). So 'tiffset -s ExtraSamples 1 X'. This only worked
    when setting 2 or more values, but not just one.
    + tools/fax2tiff.c (_FAX_Client_Data): Pass FAX_Client_Data as
    the client data. This client data is not used at all at the
    moment, but it makes the most sense. Issue that the value of
    client_data.fd was passed where a pointer is expected.
    + tools/tiff2pdf.c (t2p_sample_realize_palette): Fix possible
    arithmetic overflow in bounds checking code and eliminate
    comparison between signed and unsigned type.
    + tools/tiff2bw.c (main): Free memory allocated in the tiff2bw
    program. This is in response to the report associated with
    CVE-2017-16232, bsc#1069213 but does not solve the extremely
    high memory usage with the associated POC file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Fix check section:
  + Make sure to get back to the right directory after chdir to
    'tools', or we can't run the 2nd test suite.
  + Fix typo: the tests are located in a directory called 'test',
    not 'tests'.</changelog>
  <changelog author="mvetter@suse.com" date="1518782400">- bsc#1046077: Add tiff-4.0.9-bsc1046077-CVE-2017-9935.patch
  Fix Heap-based buffer overflow in t2p_write_pdf</changelog>
  <changelog author="mvetter@suse.com" date="1519128000">- bsc#1081690: Add tiff-4.0.9-bsc1081690-CVE-2018-5784.patch
  Fix uncontrolled resource consumption in TIFFSetDirectory</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- security update
  * CVE-2018-10963 [bsc#1092949]
    + tiff-CVE-2018-10963.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526644800">- security update
  * CVE-2017-18013 [bsc#1074317]
    + tiff-CVE-2017-18013.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113600">- security update
  * CVE-2018-7456 [bsc#1082825]
    + tiff-CVE-2018-7456.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113601">- security update
  * CVE-2017-11613 [bsc#1082332]
    + tiff-CVE-2017-11613.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528200000">- security update
  * CVE-2018-8905 [bsc#1086408]
    + tiff-CVE-2018-8905.patch</changelog>
</package>
<package pkgid="10f3171c9e4d6c464892cd272e60fa1bd1b5818c9c5dd3970e8cffa3d614bd2a" name="libtiff5" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="lp150.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1472731200">- Added patches:
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  - Upstream commits to fix CVE-2016-3623 [bsc#974618],
    CVE-2016-3945 [bsc#974614], CVE-2016-3990 [bsc#975069],
    CVE-2016-3991 [bsc#975070]</changelog>
  <changelog author="fstrba@suse.com" date="1475755200">- Added patches:
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Upstream fixes for MSVR 35093, MSVR 35094, MSVR 35095,
    MSVR 35096, MSVR 35097, MSVR 35098.
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  - Enforce bits-per-sample requirements of floating point
    predictor. Fixes CVE-2016-3622 [bsc#974449]</changelog>
  <changelog author="fstrba@suse.com" date="1480420800">- Upgrade to upstream release 4.0.7
  * libtiff/tif_aux.c
    + Fix crash in TIFFVGetFieldDefaulted() when requesting
    Predictor tag and that the zip/lzw codec is not configured.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2591
  * libtiff/tif_compress.c
    + Make TIFFNoDecode() return 0 to indicate an error and make
    upper level read routines treat it accordingly. (linked to the
    test case of http://bugzilla.maptools.org/show_bug.cgi?id=2517)
  * libtiff/tif_dir.c
    + Discard values of SMinSampleValue and SMaxSampleValue when
    they have been read and the value of SamplesPerPixel is
    changed afterwards (like when reading a OJPEG compressed image
    with a missing SamplesPerPixel tag, and whose photometric is
    RGB or YCbCr, forcing SamplesPerPixel being 3). Otherwise when
    rewriting the directory (for example with tiffset, we will
    expect 3 values whereas the array had been allocated with just
    one), thus causing a out of bound read access. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658, bsc#974840)
  * libtiff/tif_dirread.c
    + In TIFFFetchNormalTag(), do not dereference NULL pointer when
    values of tags with TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII
    access are 0-byte arrays. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2593 (regression
    introduced by previous fix done on 2016-11-11 for
    CVE-2016-9297, bsc#1010161). Assigned as CVE-2016-9448,
    bsc#1011103
    + In TIFFFetchNormalTag(), make sure that values of tags with
    TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII access are null
    terminated, to avoid potential read outside buffer in
    _TIFFPrintField(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2590
    (CVE-2016-9297, bsc#1010161)
    + Initialize doubledata at line 3693 to NULL to please MSVC 2013
    + Prevent reading ColorMap or TransferFunction if
    BitsPerPixel &gt; 24, so as to avoid huge memory allocation and
    file read attempts
    + Reject images with OJPEG compression that have no
    TileOffsets/StripOffsets tag, when OJPEG compression is
    disabled. Prevent null pointer dereference in
    TIFFReadRawStrip1() and other functions that expect
    td_stripbytecount to be non NULL. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2585
    + When compiled with DEFER_STRILE_LOAD, fix regression, when
    reading a one-strip file without a StripByteCounts tag.
    + Workaround false positive warning of Clang Static Analyzer
    about null pointer dereference in TIFFCheckDirOffset().
  * libtiff/tif_dirwrite.c
    + Avoid null pointer dereference on td_stripoffset when writing
    directory, if FIELD_STRIPOFFSETS was artificially set for a
    hack case in OJPEG case. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658,
    bsc#974840)
    + Fix truncation to 32 bit of file offsets in TIFFLinkDirectory()
    and TIFFWriteDirectorySec() when aligning directory offsets on
    an even offset (affects BigTIFF).
  * libtiff/tif_dumpmode.c
    + DumpModeEncode() should return 0 in case of failure so that
    the above mentionned functions detect the error.
  * libtiff/tif_fax3.c
    + remove dead assignment in Fax3PutEOLgdal().
  * libtiff/tif_fax3.h
    + make Param member of TIFFFaxTabEnt structure a uint16 to
    reduce size of the binary.
  * libtiff/tif_getimage.c
    + Fix out-of-bound reads in TIFFRGBAImage interface in case of
    unsupported values of SamplesPerPixel/ExtraSamples for
    LogLUV/CIELab. Add explicit call to TIFFRGBAImageOK() in
    TIFFRGBAImageBegin(). Fix CVE-2015-8665 and CVE-2015-8683.
    + Fix some benign warnings which appear in 64-bit compilation
    under Microsoft Visual Studio of the form "Arithmetic
    overflow: 32-bit value is shifted, then cast to 64-bit value.
    Results might not be an expected value."
    + TIFFRGBAImageOK: Reject attempts to read floating point images.
  * libtiff/tif_luv.c
    + Fix potential out-of-bound writes in decode functions in non
    debug builds by replacing assert()s by regular if checks
    (http://bugzilla.maptools.org/show_bug.cgi?id=2522). Fix
    potential out-of-bound reads in case of short input data.
    + Validate that for COMPRESSION_SGILOG and PHOTOMETRIC_LOGL,
    there is only one sample per pixel. Avoid potential invalid
    memory write on corrupted/unexpected images when using the
    TIFFRGBAImageBegin() interface
  * libtiff/tif_next.c
    + Fix potential out-of-bound write in NeXTDecode()
    (http://bugzilla.maptools.org/show_bug.cgi?id=2508)
  * libtiff/tif_pixarlog.c
    + Avoid zlib error messages to pass a NULL string to %s
    formatter, which is undefined behaviour in sprintf().
    + Fix out-of-bounds write vulnerabilities in heap allocated
    buffers. Reported as MSVR 35094.
    + Fix potential buffer write overrun in PixarLogDecode() on
    corrupted/unexpected images (CVE-2016-5875, bsc#987351)
    + Fix write buffer overflow in PixarLogEncode if more input
    samples are provided than expected by PixarLogSetupEncode.
    Idea based on libtiff-CVE-2016-3990.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, but with different and simpler
    check. (http://bugzilla.maptools.org/show_bug.cgi?id=2544,
    bsc#975069)
  * libtiff/tif_predict.c
    + PredictorSetup: Enforce bits-per-sample requirements of
    floating point predictor (3). Fixes CVE-2016-3622 "Divide By
    Zero in the tiff2rgba tool." (bsc#974449)
  * libtiff/tif_predict.h, libtiff/tif_predict.c
    + Replace assertions by runtime checks to avoid assertions in
    debug mode, or buffer overflows in release mode. Can happen
    when dealing with unusual tile size like YCbCr with
    subsampling. Reported as MSVR 35105.
  * libtiff/tif_read.c
    + Fix out-of-bounds read on memory-mapped files in
    TIFFReadRawStrip1() and TIFFReadRawTile1() when stripoffset
    is beyond tmsize_t max value
    + Make TIFFReadEncodedStrip() and TIFFReadEncodedTile() directly
    use user provided buffer when no compression (and other
    conditions) to save a memcpy().
  * libtiff/tif_strip.c
    + Make TIFFNumberOfStrips() return the td-&gt;td_nstrips value when
    it is non-zero, instead of recomputing it. This is needed in
    TIFF_STRIPCHOP mode where td_nstrips is modified. Fixes a read
    outsize of array in tiffsplit (or other utilities using
    TIFFNumberOfStrips()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2587
    (CVE-2016-9273, bsc#1010163)
  * libtiff/tif_write.c
    + Fix issue in error code path of TIFFFlushData1() that didn't
    reset the tif_rawcc and tif_rawcp members. I'm not completely
    sure if that could happen in practice outside of the odd
    behaviour of t2p_seekproc() of tiff2pdf). The report points
    that a better fix could be to check the return value of
    TIFFFlushData1() in places where it isn't done currently, but
    it seems this patch is enough. Reported as MSVR 35095.
    + Make TIFFWriteEncodedStrip() and TIFFWriteEncodedTile()
    directly use user provided buffer when no compression to save
    a memcpy().
    + TIFFWriteEncodedStrip() and TIFFWriteEncodedTile() should
    return -1 in case of failure of tif_encodestrip() as documented
  * tools/fax2tiff.D    c
    + Fix segfault when specifying -r without argument. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2572
  * tools/Makefile.am
    + The libtiff tools bmp2tiff, gif2tiff, ras2tiff, sgi2tiff,
    sgisv, and ycbcr are completely removed from the distribution.
    The libtiff tools rgb2ycbcr and thumbnail are only built in
    the build tree for testing. Old files are put in new 'archive'
    subdirectory of the source repository, but not in
    distribution archives. These changes are made in order to
    lessen the maintenance burden.
  * tools/rgb2ycbcr.c
    + Validate values of -v and -h parameters to avoid potential
    divide by zero. Fixes CVE-2016-3623, bsc#974618
    (http://bugzilla.maptools.org/show_bug.cgi?id=2569)
  * tools/tiff2bw.c
    + Fix weight computation that could result of color value
    overflow (no security implication). Fix
    http://bugzilla.maptools.org/show_bug.cgi?id=2550.
  * tools/tiff2pdf.c
    + Avoid undefined behaviour related to overlapping of source and
    destination buffer in memcpy() call in
    t2p_sample_rgbaa_to_rgb() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2577
    + Fix out-of-bounds write vulnerabilities in heap allocate buffer
    in t2p_process_jpeg_strip(). Reported as MSVR 35098.
    + Fix potential integer overflows on 32 bit builds in
    t2p_read_tiff_size() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2576
    + Fix read -largely- outsize of buffer in
    t2p_readwrite_pdf_image_tile(), causing crash, when reading a
    JPEG compressed image with TIFFTAG_JPEGTABLES length being one.
    Reported as MSVR 35101. CVE-2016-9453, bsc#1011107
    + Fix write buffer overflow of 2 bytes on JPEG compressed images.
    Reported as TALOS-CAN-0187, CVE-2016-5652, bsc#1007280. Also
    prevents writing 2 extra uninitialized bytes to the file
    stream.
  * tools/tiff2rgba.c
    + Fix integer overflow in size of allocated buffer, when -b mode
    is enabled, that could result in out-of-bounds write. Based
    initially on patch tiff-CVE-2016-3945.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, with correction for invalid
    tests that rejected valid files.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2545, bsc#974614)
  * tools/tiffcp.c
    + Fix out-of-bounds write on tiled images with odd tile width vs
    image width. Reported as MSVR 35103. (bsc#1011841,
    CVE-2016-9538)
    + Fix read of undefined variable in case of missing required
    tags. Found on test case of MSVR 35100.
  * tools/tiffcrop.c
    + Avoid access outside of stack allocated array on a tiled
    separate TIFF with more than 8 samples per pixel.
    (CVE-2016-5321, CVE-2016-5323,
    http://bugzilla.maptools.org/show_bug.cgi?id=2558,
    http://bugzilla.maptools.org/show_bug.cgi?id=2559, bsc#984813,
    bsc#984815)
    + Fix memory leak in (recent) error code path. Fixes Coverity
    1394415.
    + Fix multiple uint32 overflows in writeBufferToSeparateStrips(),
    writeBufferToContigTiles() and writeBufferToSeparateTiles()
    that could cause heap buffer overflows. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2592
    + Fix out-of-bound read of up to 3 bytes in
    readContigTilesIntoBuffer(). Reported as MSVR 35092.
    + Fix out-of-bounds write in loadImage(). From patch
    libtiff-CVE-2016-3991.patch from
    libtiff-4.0.3-25.el7_2.src.rpm
    (http://bugzilla.maptools.org/show_bug.cgi?id=2543, bsc#975070)
    + Fix read of undefined buffer in readContigStripsIntoBuffer()
    due to uint16 overflow. Reported as MSVR 35100. (bsc#1011841,
    CVE-2016-9538)
    + Fix various out-of-bounds write vulnerabilities in heap or
    stack allocated buffers. Reported as MSVR 35093, MSVR 35096
    and MSVR 35097.
    + readContigTilesIntoBuffer: Fix signed/unsigned comparison
    warning.
  * tools/tiffdump.c
    + Fix a few misaligned 64-bit reads warned by -fsanitize
    + ReadDirectory: Remove uint32 cast to_TIFFmalloc() argument
    which resulted in Coverity report. Added more mutiplication
    overflow checks
  * tools/tiffinfo.c
    + Fix out-of-bound read on some tiled images.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2517)
    + TIFFReadContigTileData: Fix signed/unsigned comparison warning.
    + TIFFReadSeparateTileData: Fix signed/unsigned comparison
    warning.
- Removed patches:
  * tiff-4.0.4-uninitialized_mem_NeXTDecode.patch
  * tiff-4.0.6-CVE-2015-8782.patch
  * tiff-4.0.6-CVE-2016-3186.patch
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Fixed in the upsteam release
- Changed patch:
  * tiff-4.0.6-CVE-2015-7554.patch -&gt; tiff-4.0.7-CVE-2015-7554.patch
  - Rediffed to the changed context</changelog>
  <changelog author="idonmez@suse.com" date="1482148800">- Update homepage</changelog>
  <changelog author="jengelh@inai.de" date="1482148801">- Drop --with-pic, this is only for static libs (which are not built)
- Update descriptions</changelog>
  <changelog author="fstrba@suse.com" date="1484308800">- Added patch:
  * tiff-4.0.7-CVE-2017-5225.patch
  - Upstream fix for CVE-2017-5225, bsc#1019611: heap buffer
    overflow in tools/tiffcp via a crafted BitsPerSample value</changelog>
  <changelog author="fstrba@suse.com" date="1486036800">- Added patch:
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  - Fix a regression introduced in 4.0.7 (bsc#1022103)
  - http://bugzilla.maptools.org/show_bug.cgi?id=2636</changelog>
  <changelog author="fstrba@suse.com" date="1490788800">- Added patches:
  * tiff-CVE-2016-10266.patch
    + Upstream fix for CVE-2016-10266, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031263)
  * tiff-CVE-2016-10267.patch
    + Upstream fix for CVE-2016-10267, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031262)
  * tiff-CVE-2016-10268.patch
    + Upstream fix for CVE-2016-10268, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031255)
  * tiff-CVE-2016-10269.patch
    + Upstream fix for CVE-2016-10269, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031254)
  * tiff-CVE-2016-10270.patch
    + Upstream fix for CVE-2016-10270, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031250)
  * tiff-CVE-2016-10271.patch
    + Upstream fix for CVE-2016-10271, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read and buffer overflow) or possibly have unspecified
    other impact via a crafted TIFF image (bsc#1031249)
  * tiff-CVE-2016-10272.patch
    + Upstream fix for CVE-2016-10272, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    overflow) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031247)</changelog>
  <changelog author="fstrba@suse.com" date="1497960000">- Upgrade to upstream release 4.0.8
  * libtiff/tif_getimage.c, libtiff/tif_open.c
    + add parenthesis to fix cppcheck clarifyCalculation warnings
  * libtiff/tif_predict.c, libtiff/tif_print.c
    + fix printf unsigned vs signed formatting (cppcheck
    invalidPrintfArgType_uint warnings)
  * libtiff/tif_read.c, libtiff/tiffiop.h
    + fix uint32 overflow in TIFFReadEncodedStrip() that caused an
    integer division by zero. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2596
  * libtiff/tif_pixarlog.c, libtiff/tif_luv.c
    + fix heap-based buffer overflow on generation of PixarLog / LUV
    compressed files, with ColorMap, TransferFunction attached and
    nasty plays with bitspersample. The fix for LUV has not been
    tested, but suffers from the same kind of issue of PixarLog.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2604
  * libtiff/tif_strip.c
    + revert the change in TIFFNumberOfStrips() done for
    http://bugzilla.maptools.org/show_bug.cgi?id=2587 /
    CVE-2016-9273 since the above change is a better fix that
    makes it unnecessary.
  * libtiff/tif_dirread.c
    + modify ChopUpSingleUncompressedStrip() to instanciate compute
    ntrips as TIFFhowmany_32(td-&gt;td_imagelength, rowsperstrip),
    instead of a logic based on the total size of data. Which is
    faulty is the total size of data is not sufficient to fill the
    whole image, and thus results in reading outside of the
    StripByCounts/StripOffsets arrays when using
    TIFFReadScanline(). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2608.
  * libtiff/tif_ojpeg.c
    + make OJPEGDecode() early exit in case of failure in
    OJPEGPreDecode(). This will avoid a divide by zero, and
    potential other issues. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2611
  * libtiff/tif_write.c
    + fix misleading indentation as warned by GCC.
  * libtiff/tif_fax3.h
    + revert change done on 2016-01-09 that made Param member of
    TIFFFaxTabEnt structure a uint16 to reduce size of the
    binary. It happens that the Hylafax software uses the tables
    that follow this typedef (TIFFFaxMainTable, TIFFFaxWhiteTable,
    TIFFFaxBlackTable), although they are not in a public libtiff
    header. Raised by Lee Howard.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2636
  * libtiff/tiffio.h, libtiff/tif_getimage.c
    + add TIFFReadRGBAStripExt() and TIFFReadRGBATileExt() variants
    of the functions without ext, with an extra argument to control
    the stop_on_error behaviour.
  * libtiff/tif_getimage.c
    + fix potential memory leaks in error code path of
    TIFFRGBAImageBegin().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2627
  * libtiff/tif_jpeg.c
    + increase libjpeg max memory usable to 10 MB instead of libjpeg
    1MB default. This helps when creating files with "big" tile,
    without using libjpeg temporary files.
    Related to https://trac.osgeo.org/gdal/ticket/6757
  * libtiff/tif_jpeg.c
    + avoid integer division by zero in JPEGSetupEncode() when
    horizontal or vertical sampling is set to 0.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2653,
    bsc#1033127, CVE-2017-7595
  * libtiff/tif_dirwrite.c
    + in TIFFWriteDirectoryTagCheckedRational, replace assertion by
    runtime check to error out if passed value is strictly
    negative.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2535,
    bsc#1038438, CVE-2016-10371
  * libtiff/tif_dirread.c
    + avoid division by floating point 0 in
    TIFFReadDirEntryCheckedRational() and
    TIFFReadDirEntryCheckedSrational(), and return 0 in that case
    (instead of infinity as before presumably) Apparently some
    sanitizers do not like those divisions by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2644,
    bsc#1033118, CVE-2017-7598
  * libtiff/tif_dir.c, tif_dirread.c, tif_dirwrite.c
    + implement various clampings of double to other data types to
    avoid undefined behaviour if the output range isn't big enough
    to hold the input value.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2643
    http://bugzilla.maptools.org/show_bug.cgi?id=2642
    http://bugzilla.maptools.org/show_bug.cgi?id=2646
    http://bugzilla.maptools.org/show_bug.cgi?id=2647,
    bsc#1033126, CVE-2017-7596, bsc#1033120, CVE-2017-7597,
    bsc#1033113, CVE-2017-7599, bsc#1033112, CVE-2017-7600,
  * libtiff/tif_jpeg.c
    + validate BitsPerSample in JPEGSetupEncode() to avoid undefined
    behaviour caused by invalid shift exponent.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2648,
    bsc#1033111, CVE-2017-7601
  * libtiff/tif_read.c
    + avoid potential undefined behaviour on signed integer addition
    in TIFFReadRawStrip1() in isMapped() case.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2650,
    bsc#1033109, CVE-2017-7602
  * libtiff/tif_getimage.c
    + add explicit uint32 cast in putagreytile to avoid
    UndefinedBehaviorSanitizer warning. Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2658,
    bsc#1033131, CVE-2017-7592
  * libtiff/tif_read.c
    + TIFFReadBufferSetup(): use _TIFFcalloc() to zero initialize
    tif_rawdata.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2651,
    bsc#1033129, CVE-2017-7593
  * libtiff/tiffio.h, tif_unix.c, tif_win32.c, tif_vms.c
    + add _TIFFcalloc()
  * libtiff/tif_luv.c, tif_lzw.c, tif_packbits.c
    + return 0 in Encode functions instead of -1 when
    TIFFFlushData1() fails.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2130
  * libtiff/tif_ojpeg.c
    + fix leak in OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable when read fails. Patch by
    Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2659,
    bsc#1033128, CVE-2017-7594
  * libtiff/tif_jpeg.c
    + only run JPEGFixupTagsSubsampling() if the YCbCrSubsampling
    tag is not explicitly present. This helps a bit to reduce the
    I/O amount when the tag is present (especially on cloud hosted
    files).
  * libtiff/tif_lzw.c
    + in LZWPostEncode(), increase, if necessary, the code bit-width
    after flushing the remaining code and before emitting the EOI
    code. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=1982
  * libtiff/tif_pixarlog.c
    + fix memory leak in error code path of PixarLogSetupDecode().
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2665
  * libtiff/tif_fax3.c, tif_predict.c, tif_getimage.c
    + fix GCC 7 -Wimplicit-fallthrough warnings.
  * libtiff/tif_dirread.c
    + fix memory leak in non DEFER_STRILE_LOAD mode (ie default)
    when there is both a StripOffsets and TileOffsets tag, or a
    StripByteCounts and TileByteCounts
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2689,
    bsc#1042805, CVE-2017-9403)
  * libtiff/tif_ojpeg.c
    + fix potential memory leak in
    OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2670
  * libtiff/tif_fax3.c
    + avoid crash in Fax3Close() on empty file. Patch by Alan
    Coopersmith + complement by myself.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2673
  * libtiff/tif_read.c
    + TIFFFillStrip(): add limitation to the number of bytes read
    in case td_stripbytecount[strip] is bigger than reasonable,
    so as to avoid excessive memory allocation.
  * libtiff/tif_zip.c, tif_pixarlog.c, tif_predict.c
    + fix memory leak when the underlying codec (ZIP, PixarLog)
    succeeds its setupdecode() method, but PredictorSetup fails.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStrip() and TIFFFillTile(): avoid excessive memory
    allocation in case of shorten files. Only effective on 64 bit
    builds and non-mapped cases.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStripPartial() / TIFFSeek(), avoid potential integer
    overflows with read_ahead in CHUNKY_STRIP_READ_SUPPORT mode.
    Should especially occur on 32 bit platforms.
  * libtiff/tif_read.c
    + TIFFFillStripPartial()
    + avoid excessive memory allocation in case of shorten files.
    Only effective on 64 bit builds.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + update tif_rawcc in CHUNKY_STRIP_READ_SUPPORT mode with
    tif_rawdataloaded when calling TIFFStartStrip() or
    TIFFFillStripPartial(). This avoids reading beyond tif_rawdata
    when bytecount &gt; tif_rawdatasize. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1545.
    Credit to OSS-Fuzz
  * libtiff/tif_color.c
    + avoid potential int32 overflow in TIFFYCbCrToRGBInit() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1533
    Credit to OSS-Fuzz
  * libtiff/tif_pixarlog.c, tif_luv.c
    + avoid potential int32 overflows in multiply_ms() and add_ms().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1558
    Credit to OSS-Fuzz
  * libtiff/tif_packbits.c
    + fix out-of-buffer read in PackBitsDecode() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1563
    Credit to OSS-Fuzz
  * libtiff/tif_luv.c
    + LogL16InitState(): avoid excessive memory allocation when
    RowsPerStrip tag is missing.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_lzw.c
    + update dec_bitsleft at beginning of LZWDecode(), and update
    tif_rawcc at end of LZWDecode(). This is needed to properly
    work with the latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode.
  * libtiff/tif_pixarlog.c
    + PixarLogDecode(): resync tif_rawcp with next_in and tif_rawcc
    with avail_in at beginning and end of function, similarly to
    what is done in LZWDecode(). Likely needed so that it works
    properly with latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode. But untested...
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): add basic validation of luma and
    refBlackWhite coefficients (just check they are not NaN for
    now), to avoid potential float to int overflows. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1663
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): stricter validation for refBlackWhite
    coefficients values. To avoid invalid float-&gt;int32 conversion.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1718
    Credit to OSS Fuzz
  * tools/fax2tiff.c (main)
    + Applied patch by Joerg Ahrens to fix passing client data for
    Win32 builds using tif_win32.c (USE_WIN32_FILEIO defined) for
    file I/O. Patch was provided via email on November 20, 2016.
  * tools/tiffcp.c
    + avoid uint32 underflow in cpDecodedStrips that can cause
    various issues, such as buffer overflows in the library.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2598
  * tools/tiffcrop.c
    + fix readContigStripsIntoBuffer() in -i (ignore) mode so that
    the output buffer is correctly incremented to avoid write
    outside bounds. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2620
  * tools/tiffcrop.c
    + add 3 extra bytes at end of strip buffer in
    readSeparateStripsIntoBuffer() to avoid read outside of heap
    allocated buffer. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2621
  * tools/tiffcrop.c
    + fix integer division by zero when BitsPerSample is missing.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2619
  * tools/tiffinfo.c
    + fix null pointer dereference in -r mode when the image has no
    StripByteCount tag. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2594
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2597
  * tools/tif_dir.c
    + when TIFFGetField(, TIFFTAG_NUMBEROFINKS, ) is called, limit
    the return number of inks to SamplesPerPixel, so that code
    that parses ink names doesn't go past the end of the buffer.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2599
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2607
  * tools/tiffcp.c
    + fix uint32 underflow/overflow that can cause heap-based buffer
    overflow. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2610
  * tools/tiffcp.c
    + replace assert( (bps % 8) == 0 ) by a non assert check.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2605
  * tools/tiff2ps.c
    + fix 2 heap-based buffer overflows (in PSDataBW and
    PSDataColorContig). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2633 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2634.
  * tools/tiff2pdf.c
    + prevent heap-based buffer overflow in -j mode on a paletted
    image. Note: this fix errors out before the overflow happens.
    There could probably be a better fix.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2635
  * tools/tiff2pdf.c
    + fix wrong usage of memcpy() that can trigger unspecified behaviour.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2638
  * tools/tiff2pdf.c
    + avoid potential invalid memory read in t2p_writeproc.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2639
  * tools/tiff2pdf.c
    + avoid potential heap-based overflow in t2p_readwrite_pdf_image_tile().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2640
  * tools/tiffcrop.c
    + remove extraneous TIFFClose() in error code path, that caused
    double free.
    Related to http://bugzilla.maptools.org/show_bug.cgi?id=2535
  * tools/tiffcp.c
    + error out cleanly in cpContig2SeparateByRow and
    cpSeparate2ContigByRow if BitsPerSample != 8 to avoid heap
    based overflow.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2656 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2657
  * tools/raw2tiff.c
    + avoid integer division by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2631
  * tools/tiff2ps.c
    + call TIFFClose() in error code paths.
  * tools/fax2tiff.c
    + emit appropriate message if the input file is empty. Patch by
    Alan Coopersmith.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2672
  * tools/tiff2bw.c
    + close TIFF handle in error code path.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2677
  * Other issues fixed:
    + bsc#1042804, CVE-2017-9404
- Removed patches:
  * tiff-4.0.7-CVE-2015-7554.patch
  * tiff-4.0.7-CVE-2017-5225.patch
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  * tiff-CVE-2016-10266.patch
  * tiff-CVE-2016-10267.patch
  * tiff-CVE-2016-10268.patch
  * tiff-CVE-2016-10269.patch
  * tiff-CVE-2016-10270.patch
  * tiff-CVE-2016-10271.patch
  * tiff-CVE-2016-10272.patch
    + Fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1511956800">- Upgrade to upstream release 4.0.9
  * Changes in the software configuration:
    + test/Makefile.am: Add some tests for tiff2bw.
    + .appveyor.yml, .travis.yml, build/travis-ci: apply patches
    0001-ci-Travis-script-improvements.patch and
    0002-ci-Invoke-helper-script-via-shell.patch by Roger Leigh
    + .travis.yml, build/travis-ci: new files from
    0001-ci-Add-Travis-support-for-Linux-builds-with-Autoconf.patch
    by Roger Leigh. This patch adds support for the Travis-CI
    service.
    + .appveyor.yml: new file from
    0002-ci-Add-AppVeyor-support.patch by Roger Leigh (sent to
    mailing list on 2017-06-08) This patch adds a .appveyor.yml
    file to the top-level. This allows one to opt in to having a
    branch built on Windows with Cygwin, MinGW and MSVC
    automatically when a branch is pushed to GitHub, GitLab,
    BitBucket or any other supported git hosting service.
    + CMakeLists.txt, test/CMakeLists.txt,
    test/TiffTestCommon.cmake: apply patch
    0001-cmake-Improve-Cygwin-and-MingGW-test-support.patch from
    Roger Leigh. This patch makes the CMake build system support
    running the tests with MinGW or  Cygwin.
    + test/tiffcp-lzw-compat.sh, test/images/quad-lzw-compat.tiff:
    new files to test old-style LZW decompression
    + test/common.sh, Makefile.am, CMakeList.txt: updated with above
    + test/Makefile.am: add missing reference to
    images/quad-lzw-compat.tiff to fix "make distcheck". Patch by
    Roger Leigh
    + nmake.opt: support a DEBUG=1 option, so as to adjust OPTFLAGS
    and use /MDd runtime in debug mode.
  * Changes in libtiff:
    + libtiff/tif_color.c: TIFFYCbCrToRGBInit(): stricter clamping
    to avoid int32 overflow in TIFFYCbCrtoRGB(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1844
    + libtiff/tif_getimage.c: initYCbCrConversion(): stricter
    validation for refBlackWhite coefficients values. To avoid
    invalid float-&gt;int32 conversion (when refBlackWhite[0] ==
    2147483648.f) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1907
    + libtiff/tif_dirinfo.c, tif_dirread.c: add
    _TIFFCheckFieldIsValidForCodec(), and use it in
    TIFFReadDirectory() so as to ignore fields whose tag is a
    codec-specified tag but this codec is not enabled. This avoids
    TIFFGetField() to behave differently depending on whether the
    codec is enabled or not, and thus can avoid stack based buffer
    overflows in a number of TIFF utilities such as tiffsplit,
    tiffcmp, thumbnail, etc. Patch derived from
    0063-Handle-properly-CODEC-specific-tags.patch
    (http://bugzilla.maptools.org/show_bug.cgi?id=2580) by Raphaël
    Hertzog.
    Fixes: http://bugzilla.maptools.org/show_bug.cgi?id=2580
    http://bugzilla.maptools.org/show_bug.cgi?id=2693
    http://bugzilla.maptools.org/show_bug.cgi?id=2625
    (CVE-2016-10095, bsc#1017690)
    http://bugzilla.maptools.org/show_bug.cgi?id=2564
    (CVE-2015-7554, bsc#960341)
    http://bugzilla.maptools.org/show_bug.cgi?id=2561
    (CVE-2016-5318, bsc#983436)
    http://bugzilla.maptools.org/show_bug.cgi?id=2499
    (CVE-2014-8128, bsc#969783)
    http://bugzilla.maptools.org/show_bug.cgi?id=2441
    http://bugzilla.maptools.org/show_bug.cgi?id=2433
    + libtiff/tif_swab.c: if DISABLE_CHECK_TIFFSWABMACROS is
    defined, do not do the #ifdef TIFFSwabXXX checks. Make it
    easier for GDAL to rename the symbols of its internal libtiff
    copy.
    + libtiff/tif_dirread.c: fix regression of libtiff 4.0.8 in
    ChopUpSingleUncompressedStrip() regarding update of newly
    single-strip uncompressed files whose bytecount is 0. Before
    the change of 2016-12-03, the condition bytecount==0 used to
    trigger an early exit/disabling of strip chop. Re-introduce
    that in update mode. Otherwise this cause later incorrect
    setting for the value of StripByCounts/StripOffsets.
    (https://trac.osgeo.org/gdal/ticket/6924)
    + libtiff/tif_dirread.c: TIFFFetchStripThing(): limit the
    number of items read in StripOffsets/StripByteCounts tags to
    the number of strips to avoid excessive memory allocation.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2215
    + libtiff/tif_getimage.c: avoid many (harmless) unsigned int
    overflows.
    + libtiff/tif_fax3.c: avoid unsigned int overflow in
    Fax3Encode2DRow(). Could potentially be a bug with huge rows.
    + libtiff/tif_jpeg.c: avoid (harmless) unsigned int overflow on
    tiled images.
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts() and BYTECOUNTLOOKSBAD when file is
    too short.
    + libtiff/tif_predict.c: decorate legitimate functions where
    unsigned int overflow occur with
    TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts()
    + libtiff/tiffiop.h: add TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    macro to disable CLang warnings raised by
  - fsanitize=undefined,unsigned-integer-overflow
    + libtiff/tif_jpeg.c: add anti-denial of service measure to
    avoid excessive CPU consumption on progressive JPEGs with a
    huge number of scans. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    Note: only affects libtiff since 2014-12-29 where support of
    non-baseline JPEG was added.
    + libtiff/tif_jpeg.c: error out at decoding time if anticipated
    libjpeg memory allocation is above 100 MB. libjpeg in case of
    multiple scans, which is allowed even in baseline JPEG, if
    components are spread over several scans and not
    interleavedin a single one, needs to allocate memory (or
    backing store) for the whole strip/tile. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    This limitation may be overriden by setting the
    LIBTIFF_ALLOW_LARGE_LIBJPEG_MEM_ALLOC environment variable, or
    recompiling libtiff with a custom value of
    TIFF_LIBJPEG_LARGEST_MEM_ALLOC macro.
    + libtiff/tif_jbig.c: fix memory leak in error code path of
    JBIGDecode()
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2706
    (CVE-2017-9936, bsc#1046073)
    + libtiff/tif_dirread.c: in TIFFReadDirEntryFloat(), check that
    a double value can fit in a float before casting.
    + libtiff/tiffiop.h, libtiff/tif_jpeg.c, libtiff/tif_jpeg_12.c,
    libtiff/tif_read.c: make TIFFReadScanline() works in
    CHUNKY_STRIP_READ_SUPPORT mode with JPEG stream with multiple
    scans. Also make configurable through a
    LIBTIFF_JPEG_MAX_ALLOWED_SCAN_NUMBER environment variable the
    maximum number of scans allowed. Defaults to 100.
    + libtiff/tif_read.c: TIFFFillTile(): add limitation to the
    number of bytes read in case td_stripbytecount[strip] is
    bigger than reasonable, so as to avoid excessive memory
    allocation (similarly to what was done for TIFFFileStrip() on
    2017-05-10)
    + libtiff/tif_getimage.c: use
    _TIFFReadEncodedStripAndAllocBuffer(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2433
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedStripAndAllocBuffer() function, variant of
    TIFFReadEncodedStrip() that allocates the decoded buffer only
    after a first successful TIFFFillStrip(). This avoids
    excessive memory allocation on corrupted files.
    + libtiff/tif_dirwrite.c: in TIFFWriteDirectoryTagCheckedXXXX()
    functions associated with LONG8/SLONG8 data type, replace
    assertion that the file is BigTIFF, by a non-fatal error.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2712
    + libtiff/tif_read.c: TIFFStartTile(): set tif_rawcc to
    tif_rawdataloaded when it is set. Similarly to
    TIFFStartStrip(). This issue was revealed by the change of
    2017-06-30 in TIFFFileTile(), limiting the number of bytes
    read. But it could probably have been hit too in
    CHUNKY_STRIP_READ_SUPPORT mode previously. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2454
    + libtiff/tif_error.c, tif_warning.c: correctly use va_list
    when both an old-style and new-style warning/error handlers
    are installed. Patch by Paavo Helde (sent on the mailing list)
    + libtiff/tif_getimage.c: use _TIFFReadTileAndAllocBuffer().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2470
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedTileAndAllocBuffer() and
    _TIFFReadTileAndAllocBuffer() variants of
    TIFFReadEncodedTile() and TIFFReadTile() that allocates the
    decoded buffer only after a first successful TIFFFillTile().
    This avoids excessive memory allocation on corrupted files.
    + libtiff/tif_pixarlog.c: avoid excessive memory allocation on
    decoding when RowsPerStrip tag is not defined (and thus
    td_rowsperstrip == UINT_MAX) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2554
    + libtiff/tif_lzw.c: fix 4.0.8 regression in the decoding of
    old-style LZW compressed files.
    + libtiff/tif_lzw.c: fix potential out-of-buffer read on 1-byte
    LZW strips. Crashing issue only on memory mapped files, where
    the strip offset is the last byte of the file, and the file
    size is a multiple of one page size on the CPU architecture
    (typically 4096)
    + libtiff/tif_dir.c: avoid potential null pointer dereference
    in _TIFFVGetField() on corrupted TIFFTAG_NUMBEROFINKS tag
    instance.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2713
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + libtiff/tif_read.c: TIFFFillStrip() / TIFFFillTile().
    Complementary fix for
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 in the
    isMapped() case, so as to avoid excessive memory allocation
    when we need a temporary buffer but the file is truncated.
    + libtiff/tif_read.c: in TIFFFetchStripThing(), only grow the
    arrays that hold StripOffsets/StripByteCounts, when they are
    smaller than the expected number of striles, up to 1 million
    striles, and error out beyond. Can be tweaked by setting the
    environment variable LIBTIFF_STRILE_ARRAY_MAX_RESIZE_COUNT.
    This partially goes against a change added on 2002-12-17 to
    accept those arrays of wrong sizes, but is needed to avoid
    denial of services. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2350
    + libtiff/tif_read.c: add protection against excessive memory
    allocation attempts in TIFFReadDirEntryArray() on short files.
    Effective for mmap'ed case. And non-mmap'ed case, but
    restricted to 64bit builds. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2675
    + libtiff/tif_luv.c: LogLuvInitState(): avoid excessive memory
    allocation when RowsPerStrip tag is missing. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2683
    + libtiff/tif_getimage.c: gtTileContig() and gtTileSeparate():
    properly break from loops on error when stoponerr is set,
    instead of going on iterating on row based loop.
    + libtiff/tif_getimage.c: fix fromskew computation when
    to-be-skipped pixel number is not a multiple of the horizontal
    subsampling, and also in some other cases. Impact
    putcontig8bitYCbCr44tile, putcontig8bitYCbCr42tile,
    putcontig8bitYCbCr41tile, putcontig8bitYCbCr21tile and
    putcontig8bitYCbCr12tile Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2637 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2691
    + libtiff/tif_luv.c: further reduce memory requirements for
    temporary buffer when RowsPerStrip &gt;= image_length in
    LogLuvInitState() and LogL16InitState(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2700
    + libtiff/tif_dirwrite.c: replace assertion related to not
    finding the SubIFD tag by runtime check (in
    TIFFWriteDirectorySec()) Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2727
    + libtiff/tif_dirwrite.c: replace assertion to tag value not
    fitting on uint32 when selecting the value of SubIFD tag by
    runtime check (in TIFFWriteDirectoryTagSubifd()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2728
    + libtiff/tif_jpeg.c: accept reading the last strip of a JPEG
    compressed file if the codestream height is larger than the
    truncated height of the strip. Emit a warning in this
    situation since this is non compliant.
    + libtiff/tiffiop.h, tif_aux.c: redirect SeekOK() macro to a
    _TIFFSeekoK() function that checks if the offset is not
    bigger than INT64_MAX, so as to avoid a -1 error return code
    of TIFFSeekFile() to match a required seek to UINT64_MAX/-1.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2726
    + libtiff/tif_dirread.c: add NULL check to avoid likely false
    positive null-pointer dereference warning by CLang Static
    Analyzer.
    + libtiff/libtiff.def: add TIFFReadRGBAStripExt and
    TIFFReadRGBATileExt Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2735
    + libtiff/tif_jpeg.c: add compatibility with libjpeg-turbo
    1.5.2 that honours max_memory_to_use &gt; 0. Cf
    https://github.com/libjpeg-turbo/libjpeg-turbo/issues/162
    + libtiff/tif_getimage.c: avoid floating point division by zero
    in initCIELabConversion() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3733
  * Changes in the tools:
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + tools/tiffset.c: fix setting a single value for the
    ExtraSamples tag (and other tags with variable number of
    values). So 'tiffset -s ExtraSamples 1 X'. This only worked
    when setting 2 or more values, but not just one.
    + tools/fax2tiff.c (_FAX_Client_Data): Pass FAX_Client_Data as
    the client data. This client data is not used at all at the
    moment, but it makes the most sense. Issue that the value of
    client_data.fd was passed where a pointer is expected.
    + tools/tiff2pdf.c (t2p_sample_realize_palette): Fix possible
    arithmetic overflow in bounds checking code and eliminate
    comparison between signed and unsigned type.
    + tools/tiff2bw.c (main): Free memory allocated in the tiff2bw
    program. This is in response to the report associated with
    CVE-2017-16232, bsc#1069213 but does not solve the extremely
    high memory usage with the associated POC file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Fix check section:
  + Make sure to get back to the right directory after chdir to
    'tools', or we can't run the 2nd test suite.
  + Fix typo: the tests are located in a directory called 'test',
    not 'tests'.</changelog>
  <changelog author="mvetter@suse.com" date="1518782400">- bsc#1046077: Add tiff-4.0.9-bsc1046077-CVE-2017-9935.patch
  Fix Heap-based buffer overflow in t2p_write_pdf</changelog>
  <changelog author="mvetter@suse.com" date="1519128000">- bsc#1081690: Add tiff-4.0.9-bsc1081690-CVE-2018-5784.patch
  Fix uncontrolled resource consumption in TIFFSetDirectory</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- security update
  * CVE-2018-10963 [bsc#1092949]
    + tiff-CVE-2018-10963.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526644800">- security update
  * CVE-2017-18013 [bsc#1074317]
    + tiff-CVE-2017-18013.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113600">- security update
  * CVE-2018-7456 [bsc#1082825]
    + tiff-CVE-2018-7456.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113601">- security update
  * CVE-2017-11613 [bsc#1082332]
    + tiff-CVE-2017-11613.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528200000">- security update
  * CVE-2018-8905 [bsc#1086408]
    + tiff-CVE-2018-8905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534334400">- security update
  * CVE-2018-10779 [bsc#1092480]
    + tiff-CVE-2018-10779.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
</package>
<package pkgid="d1acc500c00a1590adb496ae720f06bb5d826031bb5d806b02cb5b169cb65226" name="libtiff5" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="lp150.4.9.1"/>
  <changelog author="fstrba@suse.com" date="1480420800">- Upgrade to upstream release 4.0.7
  * libtiff/tif_aux.c
    + Fix crash in TIFFVGetFieldDefaulted() when requesting
    Predictor tag and that the zip/lzw codec is not configured.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2591
  * libtiff/tif_compress.c
    + Make TIFFNoDecode() return 0 to indicate an error and make
    upper level read routines treat it accordingly. (linked to the
    test case of http://bugzilla.maptools.org/show_bug.cgi?id=2517)
  * libtiff/tif_dir.c
    + Discard values of SMinSampleValue and SMaxSampleValue when
    they have been read and the value of SamplesPerPixel is
    changed afterwards (like when reading a OJPEG compressed image
    with a missing SamplesPerPixel tag, and whose photometric is
    RGB or YCbCr, forcing SamplesPerPixel being 3). Otherwise when
    rewriting the directory (for example with tiffset, we will
    expect 3 values whereas the array had been allocated with just
    one), thus causing a out of bound read access. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658, bsc#974840)
  * libtiff/tif_dirread.c
    + In TIFFFetchNormalTag(), do not dereference NULL pointer when
    values of tags with TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII
    access are 0-byte arrays. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2593 (regression
    introduced by previous fix done on 2016-11-11 for
    CVE-2016-9297, bsc#1010161). Assigned as CVE-2016-9448,
    bsc#1011103
    + In TIFFFetchNormalTag(), make sure that values of tags with
    TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII access are null
    terminated, to avoid potential read outside buffer in
    _TIFFPrintField(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2590
    (CVE-2016-9297, bsc#1010161)
    + Initialize doubledata at line 3693 to NULL to please MSVC 2013
    + Prevent reading ColorMap or TransferFunction if
    BitsPerPixel &gt; 24, so as to avoid huge memory allocation and
    file read attempts
    + Reject images with OJPEG compression that have no
    TileOffsets/StripOffsets tag, when OJPEG compression is
    disabled. Prevent null pointer dereference in
    TIFFReadRawStrip1() and other functions that expect
    td_stripbytecount to be non NULL. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2585
    + When compiled with DEFER_STRILE_LOAD, fix regression, when
    reading a one-strip file without a StripByteCounts tag.
    + Workaround false positive warning of Clang Static Analyzer
    about null pointer dereference in TIFFCheckDirOffset().
  * libtiff/tif_dirwrite.c
    + Avoid null pointer dereference on td_stripoffset when writing
    directory, if FIELD_STRIPOFFSETS was artificially set for a
    hack case in OJPEG case. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658,
    bsc#974840)
    + Fix truncation to 32 bit of file offsets in TIFFLinkDirectory()
    and TIFFWriteDirectorySec() when aligning directory offsets on
    an even offset (affects BigTIFF).
  * libtiff/tif_dumpmode.c
    + DumpModeEncode() should return 0 in case of failure so that
    the above mentionned functions detect the error.
  * libtiff/tif_fax3.c
    + remove dead assignment in Fax3PutEOLgdal().
  * libtiff/tif_fax3.h
    + make Param member of TIFFFaxTabEnt structure a uint16 to
    reduce size of the binary.
  * libtiff/tif_getimage.c
    + Fix out-of-bound reads in TIFFRGBAImage interface in case of
    unsupported values of SamplesPerPixel/ExtraSamples for
    LogLUV/CIELab. Add explicit call to TIFFRGBAImageOK() in
    TIFFRGBAImageBegin(). Fix CVE-2015-8665 and CVE-2015-8683.
    + Fix some benign warnings which appear in 64-bit compilation
    under Microsoft Visual Studio of the form "Arithmetic
    overflow: 32-bit value is shifted, then cast to 64-bit value.
    Results might not be an expected value."
    + TIFFRGBAImageOK: Reject attempts to read floating point images.
  * libtiff/tif_luv.c
    + Fix potential out-of-bound writes in decode functions in non
    debug builds by replacing assert()s by regular if checks
    (http://bugzilla.maptools.org/show_bug.cgi?id=2522). Fix
    potential out-of-bound reads in case of short input data.
    + Validate that for COMPRESSION_SGILOG and PHOTOMETRIC_LOGL,
    there is only one sample per pixel. Avoid potential invalid
    memory write on corrupted/unexpected images when using the
    TIFFRGBAImageBegin() interface
  * libtiff/tif_next.c
    + Fix potential out-of-bound write in NeXTDecode()
    (http://bugzilla.maptools.org/show_bug.cgi?id=2508)
  * libtiff/tif_pixarlog.c
    + Avoid zlib error messages to pass a NULL string to %s
    formatter, which is undefined behaviour in sprintf().
    + Fix out-of-bounds write vulnerabilities in heap allocated
    buffers. Reported as MSVR 35094.
    + Fix potential buffer write overrun in PixarLogDecode() on
    corrupted/unexpected images (CVE-2016-5875, bsc#987351)
    + Fix write buffer overflow in PixarLogEncode if more input
    samples are provided than expected by PixarLogSetupEncode.
    Idea based on libtiff-CVE-2016-3990.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, but with different and simpler
    check. (http://bugzilla.maptools.org/show_bug.cgi?id=2544,
    bsc#975069)
  * libtiff/tif_predict.c
    + PredictorSetup: Enforce bits-per-sample requirements of
    floating point predictor (3). Fixes CVE-2016-3622 "Divide By
    Zero in the tiff2rgba tool." (bsc#974449)
  * libtiff/tif_predict.h, libtiff/tif_predict.c
    + Replace assertions by runtime checks to avoid assertions in
    debug mode, or buffer overflows in release mode. Can happen
    when dealing with unusual tile size like YCbCr with
    subsampling. Reported as MSVR 35105.
  * libtiff/tif_read.c
    + Fix out-of-bounds read on memory-mapped files in
    TIFFReadRawStrip1() and TIFFReadRawTile1() when stripoffset
    is beyond tmsize_t max value
    + Make TIFFReadEncodedStrip() and TIFFReadEncodedTile() directly
    use user provided buffer when no compression (and other
    conditions) to save a memcpy().
  * libtiff/tif_strip.c
    + Make TIFFNumberOfStrips() return the td-&gt;td_nstrips value when
    it is non-zero, instead of recomputing it. This is needed in
    TIFF_STRIPCHOP mode where td_nstrips is modified. Fixes a read
    outsize of array in tiffsplit (or other utilities using
    TIFFNumberOfStrips()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2587
    (CVE-2016-9273, bsc#1010163)
  * libtiff/tif_write.c
    + Fix issue in error code path of TIFFFlushData1() that didn't
    reset the tif_rawcc and tif_rawcp members. I'm not completely
    sure if that could happen in practice outside of the odd
    behaviour of t2p_seekproc() of tiff2pdf). The report points
    that a better fix could be to check the return value of
    TIFFFlushData1() in places where it isn't done currently, but
    it seems this patch is enough. Reported as MSVR 35095.
    + Make TIFFWriteEncodedStrip() and TIFFWriteEncodedTile()
    directly use user provided buffer when no compression to save
    a memcpy().
    + TIFFWriteEncodedStrip() and TIFFWriteEncodedTile() should
    return -1 in case of failure of tif_encodestrip() as documented
  * tools/fax2tiff.D    c
    + Fix segfault when specifying -r without argument. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2572
  * tools/Makefile.am
    + The libtiff tools bmp2tiff, gif2tiff, ras2tiff, sgi2tiff,
    sgisv, and ycbcr are completely removed from the distribution.
    The libtiff tools rgb2ycbcr and thumbnail are only built in
    the build tree for testing. Old files are put in new 'archive'
    subdirectory of the source repository, but not in
    distribution archives. These changes are made in order to
    lessen the maintenance burden.
  * tools/rgb2ycbcr.c
    + Validate values of -v and -h parameters to avoid potential
    divide by zero. Fixes CVE-2016-3623, bsc#974618
    (http://bugzilla.maptools.org/show_bug.cgi?id=2569)
  * tools/tiff2bw.c
    + Fix weight computation that could result of color value
    overflow (no security implication). Fix
    http://bugzilla.maptools.org/show_bug.cgi?id=2550.
  * tools/tiff2pdf.c
    + Avoid undefined behaviour related to overlapping of source and
    destination buffer in memcpy() call in
    t2p_sample_rgbaa_to_rgb() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2577
    + Fix out-of-bounds write vulnerabilities in heap allocate buffer
    in t2p_process_jpeg_strip(). Reported as MSVR 35098.
    + Fix potential integer overflows on 32 bit builds in
    t2p_read_tiff_size() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2576
    + Fix read -largely- outsize of buffer in
    t2p_readwrite_pdf_image_tile(), causing crash, when reading a
    JPEG compressed image with TIFFTAG_JPEGTABLES length being one.
    Reported as MSVR 35101. CVE-2016-9453, bsc#1011107
    + Fix write buffer overflow of 2 bytes on JPEG compressed images.
    Reported as TALOS-CAN-0187, CVE-2016-5652, bsc#1007280. Also
    prevents writing 2 extra uninitialized bytes to the file
    stream.
  * tools/tiff2rgba.c
    + Fix integer overflow in size of allocated buffer, when -b mode
    is enabled, that could result in out-of-bounds write. Based
    initially on patch tiff-CVE-2016-3945.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, with correction for invalid
    tests that rejected valid files.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2545, bsc#974614)
  * tools/tiffcp.c
    + Fix out-of-bounds write on tiled images with odd tile width vs
    image width. Reported as MSVR 35103. (bsc#1011841,
    CVE-2016-9538)
    + Fix read of undefined variable in case of missing required
    tags. Found on test case of MSVR 35100.
  * tools/tiffcrop.c
    + Avoid access outside of stack allocated array on a tiled
    separate TIFF with more than 8 samples per pixel.
    (CVE-2016-5321, CVE-2016-5323,
    http://bugzilla.maptools.org/show_bug.cgi?id=2558,
    http://bugzilla.maptools.org/show_bug.cgi?id=2559, bsc#984813,
    bsc#984815)
    + Fix memory leak in (recent) error code path. Fixes Coverity
    1394415.
    + Fix multiple uint32 overflows in writeBufferToSeparateStrips(),
    writeBufferToContigTiles() and writeBufferToSeparateTiles()
    that could cause heap buffer overflows. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2592
    + Fix out-of-bound read of up to 3 bytes in
    readContigTilesIntoBuffer(). Reported as MSVR 35092.
    + Fix out-of-bounds write in loadImage(). From patch
    libtiff-CVE-2016-3991.patch from
    libtiff-4.0.3-25.el7_2.src.rpm
    (http://bugzilla.maptools.org/show_bug.cgi?id=2543, bsc#975070)
    + Fix read of undefined buffer in readContigStripsIntoBuffer()
    due to uint16 overflow. Reported as MSVR 35100. (bsc#1011841,
    CVE-2016-9538)
    + Fix various out-of-bounds write vulnerabilities in heap or
    stack allocated buffers. Reported as MSVR 35093, MSVR 35096
    and MSVR 35097.
    + readContigTilesIntoBuffer: Fix signed/unsigned comparison
    warning.
  * tools/tiffdump.c
    + Fix a few misaligned 64-bit reads warned by -fsanitize
    + ReadDirectory: Remove uint32 cast to_TIFFmalloc() argument
    which resulted in Coverity report. Added more mutiplication
    overflow checks
  * tools/tiffinfo.c
    + Fix out-of-bound read on some tiled images.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2517)
    + TIFFReadContigTileData: Fix signed/unsigned comparison warning.
    + TIFFReadSeparateTileData: Fix signed/unsigned comparison
    warning.
- Removed patches:
  * tiff-4.0.4-uninitialized_mem_NeXTDecode.patch
  * tiff-4.0.6-CVE-2015-8782.patch
  * tiff-4.0.6-CVE-2016-3186.patch
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Fixed in the upsteam release
- Changed patch:
  * tiff-4.0.6-CVE-2015-7554.patch -&gt; tiff-4.0.7-CVE-2015-7554.patch
  - Rediffed to the changed context</changelog>
  <changelog author="idonmez@suse.com" date="1482148800">- Update homepage</changelog>
  <changelog author="jengelh@inai.de" date="1482148801">- Drop --with-pic, this is only for static libs (which are not built)
- Update descriptions</changelog>
  <changelog author="fstrba@suse.com" date="1484308800">- Added patch:
  * tiff-4.0.7-CVE-2017-5225.patch
  - Upstream fix for CVE-2017-5225, bsc#1019611: heap buffer
    overflow in tools/tiffcp via a crafted BitsPerSample value</changelog>
  <changelog author="fstrba@suse.com" date="1486036800">- Added patch:
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  - Fix a regression introduced in 4.0.7 (bsc#1022103)
  - http://bugzilla.maptools.org/show_bug.cgi?id=2636</changelog>
  <changelog author="fstrba@suse.com" date="1490788800">- Added patches:
  * tiff-CVE-2016-10266.patch
    + Upstream fix for CVE-2016-10266, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031263)
  * tiff-CVE-2016-10267.patch
    + Upstream fix for CVE-2016-10267, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031262)
  * tiff-CVE-2016-10268.patch
    + Upstream fix for CVE-2016-10268, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031255)
  * tiff-CVE-2016-10269.patch
    + Upstream fix for CVE-2016-10269, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031254)
  * tiff-CVE-2016-10270.patch
    + Upstream fix for CVE-2016-10270, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031250)
  * tiff-CVE-2016-10271.patch
    + Upstream fix for CVE-2016-10271, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read and buffer overflow) or possibly have unspecified
    other impact via a crafted TIFF image (bsc#1031249)
  * tiff-CVE-2016-10272.patch
    + Upstream fix for CVE-2016-10272, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    overflow) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031247)</changelog>
  <changelog author="fstrba@suse.com" date="1497960000">- Upgrade to upstream release 4.0.8
  * libtiff/tif_getimage.c, libtiff/tif_open.c
    + add parenthesis to fix cppcheck clarifyCalculation warnings
  * libtiff/tif_predict.c, libtiff/tif_print.c
    + fix printf unsigned vs signed formatting (cppcheck
    invalidPrintfArgType_uint warnings)
  * libtiff/tif_read.c, libtiff/tiffiop.h
    + fix uint32 overflow in TIFFReadEncodedStrip() that caused an
    integer division by zero. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2596
  * libtiff/tif_pixarlog.c, libtiff/tif_luv.c
    + fix heap-based buffer overflow on generation of PixarLog / LUV
    compressed files, with ColorMap, TransferFunction attached and
    nasty plays with bitspersample. The fix for LUV has not been
    tested, but suffers from the same kind of issue of PixarLog.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2604
  * libtiff/tif_strip.c
    + revert the change in TIFFNumberOfStrips() done for
    http://bugzilla.maptools.org/show_bug.cgi?id=2587 /
    CVE-2016-9273 since the above change is a better fix that
    makes it unnecessary.
  * libtiff/tif_dirread.c
    + modify ChopUpSingleUncompressedStrip() to instanciate compute
    ntrips as TIFFhowmany_32(td-&gt;td_imagelength, rowsperstrip),
    instead of a logic based on the total size of data. Which is
    faulty is the total size of data is not sufficient to fill the
    whole image, and thus results in reading outside of the
    StripByCounts/StripOffsets arrays when using
    TIFFReadScanline(). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2608.
  * libtiff/tif_ojpeg.c
    + make OJPEGDecode() early exit in case of failure in
    OJPEGPreDecode(). This will avoid a divide by zero, and
    potential other issues. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2611
  * libtiff/tif_write.c
    + fix misleading indentation as warned by GCC.
  * libtiff/tif_fax3.h
    + revert change done on 2016-01-09 that made Param member of
    TIFFFaxTabEnt structure a uint16 to reduce size of the
    binary. It happens that the Hylafax software uses the tables
    that follow this typedef (TIFFFaxMainTable, TIFFFaxWhiteTable,
    TIFFFaxBlackTable), although they are not in a public libtiff
    header. Raised by Lee Howard.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2636
  * libtiff/tiffio.h, libtiff/tif_getimage.c
    + add TIFFReadRGBAStripExt() and TIFFReadRGBATileExt() variants
    of the functions without ext, with an extra argument to control
    the stop_on_error behaviour.
  * libtiff/tif_getimage.c
    + fix potential memory leaks in error code path of
    TIFFRGBAImageBegin().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2627
  * libtiff/tif_jpeg.c
    + increase libjpeg max memory usable to 10 MB instead of libjpeg
    1MB default. This helps when creating files with "big" tile,
    without using libjpeg temporary files.
    Related to https://trac.osgeo.org/gdal/ticket/6757
  * libtiff/tif_jpeg.c
    + avoid integer division by zero in JPEGSetupEncode() when
    horizontal or vertical sampling is set to 0.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2653,
    bsc#1033127, CVE-2017-7595
  * libtiff/tif_dirwrite.c
    + in TIFFWriteDirectoryTagCheckedRational, replace assertion by
    runtime check to error out if passed value is strictly
    negative.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2535,
    bsc#1038438, CVE-2016-10371
  * libtiff/tif_dirread.c
    + avoid division by floating point 0 in
    TIFFReadDirEntryCheckedRational() and
    TIFFReadDirEntryCheckedSrational(), and return 0 in that case
    (instead of infinity as before presumably) Apparently some
    sanitizers do not like those divisions by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2644,
    bsc#1033118, CVE-2017-7598
  * libtiff/tif_dir.c, tif_dirread.c, tif_dirwrite.c
    + implement various clampings of double to other data types to
    avoid undefined behaviour if the output range isn't big enough
    to hold the input value.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2643
    http://bugzilla.maptools.org/show_bug.cgi?id=2642
    http://bugzilla.maptools.org/show_bug.cgi?id=2646
    http://bugzilla.maptools.org/show_bug.cgi?id=2647,
    bsc#1033126, CVE-2017-7596, bsc#1033120, CVE-2017-7597,
    bsc#1033113, CVE-2017-7599, bsc#1033112, CVE-2017-7600,
  * libtiff/tif_jpeg.c
    + validate BitsPerSample in JPEGSetupEncode() to avoid undefined
    behaviour caused by invalid shift exponent.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2648,
    bsc#1033111, CVE-2017-7601
  * libtiff/tif_read.c
    + avoid potential undefined behaviour on signed integer addition
    in TIFFReadRawStrip1() in isMapped() case.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2650,
    bsc#1033109, CVE-2017-7602
  * libtiff/tif_getimage.c
    + add explicit uint32 cast in putagreytile to avoid
    UndefinedBehaviorSanitizer warning. Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2658,
    bsc#1033131, CVE-2017-7592
  * libtiff/tif_read.c
    + TIFFReadBufferSetup(): use _TIFFcalloc() to zero initialize
    tif_rawdata.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2651,
    bsc#1033129, CVE-2017-7593
  * libtiff/tiffio.h, tif_unix.c, tif_win32.c, tif_vms.c
    + add _TIFFcalloc()
  * libtiff/tif_luv.c, tif_lzw.c, tif_packbits.c
    + return 0 in Encode functions instead of -1 when
    TIFFFlushData1() fails.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2130
  * libtiff/tif_ojpeg.c
    + fix leak in OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable when read fails. Patch by
    Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2659,
    bsc#1033128, CVE-2017-7594
  * libtiff/tif_jpeg.c
    + only run JPEGFixupTagsSubsampling() if the YCbCrSubsampling
    tag is not explicitly present. This helps a bit to reduce the
    I/O amount when the tag is present (especially on cloud hosted
    files).
  * libtiff/tif_lzw.c
    + in LZWPostEncode(), increase, if necessary, the code bit-width
    after flushing the remaining code and before emitting the EOI
    code. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=1982
  * libtiff/tif_pixarlog.c
    + fix memory leak in error code path of PixarLogSetupDecode().
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2665
  * libtiff/tif_fax3.c, tif_predict.c, tif_getimage.c
    + fix GCC 7 -Wimplicit-fallthrough warnings.
  * libtiff/tif_dirread.c
    + fix memory leak in non DEFER_STRILE_LOAD mode (ie default)
    when there is both a StripOffsets and TileOffsets tag, or a
    StripByteCounts and TileByteCounts
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2689,
    bsc#1042805, CVE-2017-9403)
  * libtiff/tif_ojpeg.c
    + fix potential memory leak in
    OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2670
  * libtiff/tif_fax3.c
    + avoid crash in Fax3Close() on empty file. Patch by Alan
    Coopersmith + complement by myself.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2673
  * libtiff/tif_read.c
    + TIFFFillStrip(): add limitation to the number of bytes read
    in case td_stripbytecount[strip] is bigger than reasonable,
    so as to avoid excessive memory allocation.
  * libtiff/tif_zip.c, tif_pixarlog.c, tif_predict.c
    + fix memory leak when the underlying codec (ZIP, PixarLog)
    succeeds its setupdecode() method, but PredictorSetup fails.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStrip() and TIFFFillTile(): avoid excessive memory
    allocation in case of shorten files. Only effective on 64 bit
    builds and non-mapped cases.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStripPartial() / TIFFSeek(), avoid potential integer
    overflows with read_ahead in CHUNKY_STRIP_READ_SUPPORT mode.
    Should especially occur on 32 bit platforms.
  * libtiff/tif_read.c
    + TIFFFillStripPartial()
    + avoid excessive memory allocation in case of shorten files.
    Only effective on 64 bit builds.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + update tif_rawcc in CHUNKY_STRIP_READ_SUPPORT mode with
    tif_rawdataloaded when calling TIFFStartStrip() or
    TIFFFillStripPartial(). This avoids reading beyond tif_rawdata
    when bytecount &gt; tif_rawdatasize. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1545.
    Credit to OSS-Fuzz
  * libtiff/tif_color.c
    + avoid potential int32 overflow in TIFFYCbCrToRGBInit() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1533
    Credit to OSS-Fuzz
  * libtiff/tif_pixarlog.c, tif_luv.c
    + avoid potential int32 overflows in multiply_ms() and add_ms().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1558
    Credit to OSS-Fuzz
  * libtiff/tif_packbits.c
    + fix out-of-buffer read in PackBitsDecode() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1563
    Credit to OSS-Fuzz
  * libtiff/tif_luv.c
    + LogL16InitState(): avoid excessive memory allocation when
    RowsPerStrip tag is missing.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_lzw.c
    + update dec_bitsleft at beginning of LZWDecode(), and update
    tif_rawcc at end of LZWDecode(). This is needed to properly
    work with the latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode.
  * libtiff/tif_pixarlog.c
    + PixarLogDecode(): resync tif_rawcp with next_in and tif_rawcc
    with avail_in at beginning and end of function, similarly to
    what is done in LZWDecode(). Likely needed so that it works
    properly with latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode. But untested...
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): add basic validation of luma and
    refBlackWhite coefficients (just check they are not NaN for
    now), to avoid potential float to int overflows. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1663
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): stricter validation for refBlackWhite
    coefficients values. To avoid invalid float-&gt;int32 conversion.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1718
    Credit to OSS Fuzz
  * tools/fax2tiff.c (main)
    + Applied patch by Joerg Ahrens to fix passing client data for
    Win32 builds using tif_win32.c (USE_WIN32_FILEIO defined) for
    file I/O. Patch was provided via email on November 20, 2016.
  * tools/tiffcp.c
    + avoid uint32 underflow in cpDecodedStrips that can cause
    various issues, such as buffer overflows in the library.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2598
  * tools/tiffcrop.c
    + fix readContigStripsIntoBuffer() in -i (ignore) mode so that
    the output buffer is correctly incremented to avoid write
    outside bounds. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2620
  * tools/tiffcrop.c
    + add 3 extra bytes at end of strip buffer in
    readSeparateStripsIntoBuffer() to avoid read outside of heap
    allocated buffer. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2621
  * tools/tiffcrop.c
    + fix integer division by zero when BitsPerSample is missing.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2619
  * tools/tiffinfo.c
    + fix null pointer dereference in -r mode when the image has no
    StripByteCount tag. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2594
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2597
  * tools/tif_dir.c
    + when TIFFGetField(, TIFFTAG_NUMBEROFINKS, ) is called, limit
    the return number of inks to SamplesPerPixel, so that code
    that parses ink names doesn't go past the end of the buffer.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2599
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2607
  * tools/tiffcp.c
    + fix uint32 underflow/overflow that can cause heap-based buffer
    overflow. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2610
  * tools/tiffcp.c
    + replace assert( (bps % 8) == 0 ) by a non assert check.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2605
  * tools/tiff2ps.c
    + fix 2 heap-based buffer overflows (in PSDataBW and
    PSDataColorContig). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2633 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2634.
  * tools/tiff2pdf.c
    + prevent heap-based buffer overflow in -j mode on a paletted
    image. Note: this fix errors out before the overflow happens.
    There could probably be a better fix.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2635
  * tools/tiff2pdf.c
    + fix wrong usage of memcpy() that can trigger unspecified behaviour.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2638
  * tools/tiff2pdf.c
    + avoid potential invalid memory read in t2p_writeproc.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2639
  * tools/tiff2pdf.c
    + avoid potential heap-based overflow in t2p_readwrite_pdf_image_tile().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2640
  * tools/tiffcrop.c
    + remove extraneous TIFFClose() in error code path, that caused
    double free.
    Related to http://bugzilla.maptools.org/show_bug.cgi?id=2535
  * tools/tiffcp.c
    + error out cleanly in cpContig2SeparateByRow and
    cpSeparate2ContigByRow if BitsPerSample != 8 to avoid heap
    based overflow.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2656 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2657
  * tools/raw2tiff.c
    + avoid integer division by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2631
  * tools/tiff2ps.c
    + call TIFFClose() in error code paths.
  * tools/fax2tiff.c
    + emit appropriate message if the input file is empty. Patch by
    Alan Coopersmith.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2672
  * tools/tiff2bw.c
    + close TIFF handle in error code path.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2677
  * Other issues fixed:
    + bsc#1042804, CVE-2017-9404
- Removed patches:
  * tiff-4.0.7-CVE-2015-7554.patch
  * tiff-4.0.7-CVE-2017-5225.patch
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  * tiff-CVE-2016-10266.patch
  * tiff-CVE-2016-10267.patch
  * tiff-CVE-2016-10268.patch
  * tiff-CVE-2016-10269.patch
  * tiff-CVE-2016-10270.patch
  * tiff-CVE-2016-10271.patch
  * tiff-CVE-2016-10272.patch
    + Fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1511956800">- Upgrade to upstream release 4.0.9
  * Changes in the software configuration:
    + test/Makefile.am: Add some tests for tiff2bw.
    + .appveyor.yml, .travis.yml, build/travis-ci: apply patches
    0001-ci-Travis-script-improvements.patch and
    0002-ci-Invoke-helper-script-via-shell.patch by Roger Leigh
    + .travis.yml, build/travis-ci: new files from
    0001-ci-Add-Travis-support-for-Linux-builds-with-Autoconf.patch
    by Roger Leigh. This patch adds support for the Travis-CI
    service.
    + .appveyor.yml: new file from
    0002-ci-Add-AppVeyor-support.patch by Roger Leigh (sent to
    mailing list on 2017-06-08) This patch adds a .appveyor.yml
    file to the top-level. This allows one to opt in to having a
    branch built on Windows with Cygwin, MinGW and MSVC
    automatically when a branch is pushed to GitHub, GitLab,
    BitBucket or any other supported git hosting service.
    + CMakeLists.txt, test/CMakeLists.txt,
    test/TiffTestCommon.cmake: apply patch
    0001-cmake-Improve-Cygwin-and-MingGW-test-support.patch from
    Roger Leigh. This patch makes the CMake build system support
    running the tests with MinGW or  Cygwin.
    + test/tiffcp-lzw-compat.sh, test/images/quad-lzw-compat.tiff:
    new files to test old-style LZW decompression
    + test/common.sh, Makefile.am, CMakeList.txt: updated with above
    + test/Makefile.am: add missing reference to
    images/quad-lzw-compat.tiff to fix "make distcheck". Patch by
    Roger Leigh
    + nmake.opt: support a DEBUG=1 option, so as to adjust OPTFLAGS
    and use /MDd runtime in debug mode.
  * Changes in libtiff:
    + libtiff/tif_color.c: TIFFYCbCrToRGBInit(): stricter clamping
    to avoid int32 overflow in TIFFYCbCrtoRGB(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1844
    + libtiff/tif_getimage.c: initYCbCrConversion(): stricter
    validation for refBlackWhite coefficients values. To avoid
    invalid float-&gt;int32 conversion (when refBlackWhite[0] ==
    2147483648.f) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1907
    + libtiff/tif_dirinfo.c, tif_dirread.c: add
    _TIFFCheckFieldIsValidForCodec(), and use it in
    TIFFReadDirectory() so as to ignore fields whose tag is a
    codec-specified tag but this codec is not enabled. This avoids
    TIFFGetField() to behave differently depending on whether the
    codec is enabled or not, and thus can avoid stack based buffer
    overflows in a number of TIFF utilities such as tiffsplit,
    tiffcmp, thumbnail, etc. Patch derived from
    0063-Handle-properly-CODEC-specific-tags.patch
    (http://bugzilla.maptools.org/show_bug.cgi?id=2580) by Raphaël
    Hertzog.
    Fixes: http://bugzilla.maptools.org/show_bug.cgi?id=2580
    http://bugzilla.maptools.org/show_bug.cgi?id=2693
    http://bugzilla.maptools.org/show_bug.cgi?id=2625
    (CVE-2016-10095, bsc#1017690)
    http://bugzilla.maptools.org/show_bug.cgi?id=2564
    (CVE-2015-7554, bsc#960341)
    http://bugzilla.maptools.org/show_bug.cgi?id=2561
    (CVE-2016-5318, bsc#983436)
    http://bugzilla.maptools.org/show_bug.cgi?id=2499
    (CVE-2014-8128, bsc#969783)
    http://bugzilla.maptools.org/show_bug.cgi?id=2441
    http://bugzilla.maptools.org/show_bug.cgi?id=2433
    + libtiff/tif_swab.c: if DISABLE_CHECK_TIFFSWABMACROS is
    defined, do not do the #ifdef TIFFSwabXXX checks. Make it
    easier for GDAL to rename the symbols of its internal libtiff
    copy.
    + libtiff/tif_dirread.c: fix regression of libtiff 4.0.8 in
    ChopUpSingleUncompressedStrip() regarding update of newly
    single-strip uncompressed files whose bytecount is 0. Before
    the change of 2016-12-03, the condition bytecount==0 used to
    trigger an early exit/disabling of strip chop. Re-introduce
    that in update mode. Otherwise this cause later incorrect
    setting for the value of StripByCounts/StripOffsets.
    (https://trac.osgeo.org/gdal/ticket/6924)
    + libtiff/tif_dirread.c: TIFFFetchStripThing(): limit the
    number of items read in StripOffsets/StripByteCounts tags to
    the number of strips to avoid excessive memory allocation.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2215
    + libtiff/tif_getimage.c: avoid many (harmless) unsigned int
    overflows.
    + libtiff/tif_fax3.c: avoid unsigned int overflow in
    Fax3Encode2DRow(). Could potentially be a bug with huge rows.
    + libtiff/tif_jpeg.c: avoid (harmless) unsigned int overflow on
    tiled images.
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts() and BYTECOUNTLOOKSBAD when file is
    too short.
    + libtiff/tif_predict.c: decorate legitimate functions where
    unsigned int overflow occur with
    TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts()
    + libtiff/tiffiop.h: add TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    macro to disable CLang warnings raised by
  - fsanitize=undefined,unsigned-integer-overflow
    + libtiff/tif_jpeg.c: add anti-denial of service measure to
    avoid excessive CPU consumption on progressive JPEGs with a
    huge number of scans. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    Note: only affects libtiff since 2014-12-29 where support of
    non-baseline JPEG was added.
    + libtiff/tif_jpeg.c: error out at decoding time if anticipated
    libjpeg memory allocation is above 100 MB. libjpeg in case of
    multiple scans, which is allowed even in baseline JPEG, if
    components are spread over several scans and not
    interleavedin a single one, needs to allocate memory (or
    backing store) for the whole strip/tile. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    This limitation may be overriden by setting the
    LIBTIFF_ALLOW_LARGE_LIBJPEG_MEM_ALLOC environment variable, or
    recompiling libtiff with a custom value of
    TIFF_LIBJPEG_LARGEST_MEM_ALLOC macro.
    + libtiff/tif_jbig.c: fix memory leak in error code path of
    JBIGDecode()
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2706
    (CVE-2017-9936, bsc#1046073)
    + libtiff/tif_dirread.c: in TIFFReadDirEntryFloat(), check that
    a double value can fit in a float before casting.
    + libtiff/tiffiop.h, libtiff/tif_jpeg.c, libtiff/tif_jpeg_12.c,
    libtiff/tif_read.c: make TIFFReadScanline() works in
    CHUNKY_STRIP_READ_SUPPORT mode with JPEG stream with multiple
    scans. Also make configurable through a
    LIBTIFF_JPEG_MAX_ALLOWED_SCAN_NUMBER environment variable the
    maximum number of scans allowed. Defaults to 100.
    + libtiff/tif_read.c: TIFFFillTile(): add limitation to the
    number of bytes read in case td_stripbytecount[strip] is
    bigger than reasonable, so as to avoid excessive memory
    allocation (similarly to what was done for TIFFFileStrip() on
    2017-05-10)
    + libtiff/tif_getimage.c: use
    _TIFFReadEncodedStripAndAllocBuffer(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2433
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedStripAndAllocBuffer() function, variant of
    TIFFReadEncodedStrip() that allocates the decoded buffer only
    after a first successful TIFFFillStrip(). This avoids
    excessive memory allocation on corrupted files.
    + libtiff/tif_dirwrite.c: in TIFFWriteDirectoryTagCheckedXXXX()
    functions associated with LONG8/SLONG8 data type, replace
    assertion that the file is BigTIFF, by a non-fatal error.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2712
    + libtiff/tif_read.c: TIFFStartTile(): set tif_rawcc to
    tif_rawdataloaded when it is set. Similarly to
    TIFFStartStrip(). This issue was revealed by the change of
    2017-06-30 in TIFFFileTile(), limiting the number of bytes
    read. But it could probably have been hit too in
    CHUNKY_STRIP_READ_SUPPORT mode previously. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2454
    + libtiff/tif_error.c, tif_warning.c: correctly use va_list
    when both an old-style and new-style warning/error handlers
    are installed. Patch by Paavo Helde (sent on the mailing list)
    + libtiff/tif_getimage.c: use _TIFFReadTileAndAllocBuffer().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2470
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedTileAndAllocBuffer() and
    _TIFFReadTileAndAllocBuffer() variants of
    TIFFReadEncodedTile() and TIFFReadTile() that allocates the
    decoded buffer only after a first successful TIFFFillTile().
    This avoids excessive memory allocation on corrupted files.
    + libtiff/tif_pixarlog.c: avoid excessive memory allocation on
    decoding when RowsPerStrip tag is not defined (and thus
    td_rowsperstrip == UINT_MAX) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2554
    + libtiff/tif_lzw.c: fix 4.0.8 regression in the decoding of
    old-style LZW compressed files.
    + libtiff/tif_lzw.c: fix potential out-of-buffer read on 1-byte
    LZW strips. Crashing issue only on memory mapped files, where
    the strip offset is the last byte of the file, and the file
    size is a multiple of one page size on the CPU architecture
    (typically 4096)
    + libtiff/tif_dir.c: avoid potential null pointer dereference
    in _TIFFVGetField() on corrupted TIFFTAG_NUMBEROFINKS tag
    instance.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2713
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + libtiff/tif_read.c: TIFFFillStrip() / TIFFFillTile().
    Complementary fix for
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 in the
    isMapped() case, so as to avoid excessive memory allocation
    when we need a temporary buffer but the file is truncated.
    + libtiff/tif_read.c: in TIFFFetchStripThing(), only grow the
    arrays that hold StripOffsets/StripByteCounts, when they are
    smaller than the expected number of striles, up to 1 million
    striles, and error out beyond. Can be tweaked by setting the
    environment variable LIBTIFF_STRILE_ARRAY_MAX_RESIZE_COUNT.
    This partially goes against a change added on 2002-12-17 to
    accept those arrays of wrong sizes, but is needed to avoid
    denial of services. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2350
    + libtiff/tif_read.c: add protection against excessive memory
    allocation attempts in TIFFReadDirEntryArray() on short files.
    Effective for mmap'ed case. And non-mmap'ed case, but
    restricted to 64bit builds. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2675
    + libtiff/tif_luv.c: LogLuvInitState(): avoid excessive memory
    allocation when RowsPerStrip tag is missing. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2683
    + libtiff/tif_getimage.c: gtTileContig() and gtTileSeparate():
    properly break from loops on error when stoponerr is set,
    instead of going on iterating on row based loop.
    + libtiff/tif_getimage.c: fix fromskew computation when
    to-be-skipped pixel number is not a multiple of the horizontal
    subsampling, and also in some other cases. Impact
    putcontig8bitYCbCr44tile, putcontig8bitYCbCr42tile,
    putcontig8bitYCbCr41tile, putcontig8bitYCbCr21tile and
    putcontig8bitYCbCr12tile Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2637 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2691
    + libtiff/tif_luv.c: further reduce memory requirements for
    temporary buffer when RowsPerStrip &gt;= image_length in
    LogLuvInitState() and LogL16InitState(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2700
    + libtiff/tif_dirwrite.c: replace assertion related to not
    finding the SubIFD tag by runtime check (in
    TIFFWriteDirectorySec()) Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2727
    + libtiff/tif_dirwrite.c: replace assertion to tag value not
    fitting on uint32 when selecting the value of SubIFD tag by
    runtime check (in TIFFWriteDirectoryTagSubifd()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2728
    + libtiff/tif_jpeg.c: accept reading the last strip of a JPEG
    compressed file if the codestream height is larger than the
    truncated height of the strip. Emit a warning in this
    situation since this is non compliant.
    + libtiff/tiffiop.h, tif_aux.c: redirect SeekOK() macro to a
    _TIFFSeekoK() function that checks if the offset is not
    bigger than INT64_MAX, so as to avoid a -1 error return code
    of TIFFSeekFile() to match a required seek to UINT64_MAX/-1.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2726
    + libtiff/tif_dirread.c: add NULL check to avoid likely false
    positive null-pointer dereference warning by CLang Static
    Analyzer.
    + libtiff/libtiff.def: add TIFFReadRGBAStripExt and
    TIFFReadRGBATileExt Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2735
    + libtiff/tif_jpeg.c: add compatibility with libjpeg-turbo
    1.5.2 that honours max_memory_to_use &gt; 0. Cf
    https://github.com/libjpeg-turbo/libjpeg-turbo/issues/162
    + libtiff/tif_getimage.c: avoid floating point division by zero
    in initCIELabConversion() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3733
  * Changes in the tools:
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + tools/tiffset.c: fix setting a single value for the
    ExtraSamples tag (and other tags with variable number of
    values). So 'tiffset -s ExtraSamples 1 X'. This only worked
    when setting 2 or more values, but not just one.
    + tools/fax2tiff.c (_FAX_Client_Data): Pass FAX_Client_Data as
    the client data. This client data is not used at all at the
    moment, but it makes the most sense. Issue that the value of
    client_data.fd was passed where a pointer is expected.
    + tools/tiff2pdf.c (t2p_sample_realize_palette): Fix possible
    arithmetic overflow in bounds checking code and eliminate
    comparison between signed and unsigned type.
    + tools/tiff2bw.c (main): Free memory allocated in the tiff2bw
    program. This is in response to the report associated with
    CVE-2017-16232, bsc#1069213 but does not solve the extremely
    high memory usage with the associated POC file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Fix check section:
  + Make sure to get back to the right directory after chdir to
    'tools', or we can't run the 2nd test suite.
  + Fix typo: the tests are located in a directory called 'test',
    not 'tests'.</changelog>
  <changelog author="mvetter@suse.com" date="1518782400">- bsc#1046077: Add tiff-4.0.9-bsc1046077-CVE-2017-9935.patch
  Fix Heap-based buffer overflow in t2p_write_pdf</changelog>
  <changelog author="mvetter@suse.com" date="1519128000">- bsc#1081690: Add tiff-4.0.9-bsc1081690-CVE-2018-5784.patch
  Fix uncontrolled resource consumption in TIFFSetDirectory</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- security update
  * CVE-2018-10963 [bsc#1092949]
    + tiff-CVE-2018-10963.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526644800">- security update
  * CVE-2017-18013 [bsc#1074317]
    + tiff-CVE-2017-18013.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113600">- security update
  * CVE-2018-7456 [bsc#1082825]
    + tiff-CVE-2018-7456.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113601">- security update
  * CVE-2017-11613 [bsc#1082332]
    + tiff-CVE-2017-11613.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528200000">- security update
  * CVE-2018-8905 [bsc#1086408]
    + tiff-CVE-2018-8905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534334400">- security update
  * CVE-2018-10779 [bsc#1092480]
    + tiff-CVE-2018-10779.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
</package>
<package pkgid="e6d01f4d6e92b7341e777b43abd2f78903b56d8f1a216b5fc48d5fa9e78eb517" name="libtirpc" arch="src">
  <version epoch="0" ver="1.0.2" rel="lp150.2.3.1"/>
  <changelog author="kukuk@suse.com" date="1435320000">- Add 009-authdes_pk_create.patch (missing SunRPC compat function)</changelog>
  <changelog author="kukuk@suse.com" date="1435406400">- Add 010-xdr_sizeof.patch (enable xdr_sizeof)</changelog>
  <changelog author="kukuk@suse.de" date="1435838400">- Update 009-authdes_pk_create.patch (fix syncaddr handling)
- Add 011-authdes_create.patch (fix syncaddr handling)</changelog>
  <changelog author="kukuk@suse.de" date="1436443200">- Add 012-xp_sock.patch: add sunrpc compatibility define</changelog>
  <changelog author="kukuk@suse.de" date="1436529600">- Add 099-poll.patch: change svc_run from select() to poll().</changelog>
  <changelog author="kukuk@suse.de" date="1437048000">- Update 099-poll.patch with newest version send upstream.</changelog>
  <changelog author="okir@suse.com" date="1437652800">- Fix public xdr.h header - xdr_rpcvers() were broken (bsc#902439)
  Added: libtirpc-xdr-header.patch</changelog>
  <changelog author="kukuk@suse.de" date="1447761600">- Update to libtirpc-1.0.1
  - new major soname
  - Adjust auth code to match other RPC implementations
  - Implement more gss auth stuff
  - use poll() instead of select() in svc_run()
  - Add more sunrpc compat functions
  - Sync compat headers with real functions
- Drop 005-missing-symvers.patch (upstream)
- Drop 006-memleak1.patch (upstream)
- Drop 007-memleak2.patch (upstream)
- Drop 008-fix-undef-ref.patch (upstream)
- Drop 009-authdes_pk_create.patch (upstream)
- Drop 010-xdr_sizeof.patch (upstream)
- Drop 011-authdes_create.patch (upstream)
- Drop 012-xp_sock.patch (upstream)
- Drop 099-poll.patch (upstream)
- Drop libtirpc-xdr-header.patch (was backport)
- Add 005-libtirpc-1.0.2-rc1.patch (fixes deadlock)</changelog>
  <changelog author="kukuk@suse.de" date="1453291200">- Split the netconfig configuration file and manual page off into
  an own RPM. Else it is not possible to install the old and new
  libtirpc libraries in parallel.</changelog>
  <changelog author="kukuk@suse.de" date="1453377600">- Remove 004-netconfig-prefer-IPv6.patch for SLES12.
- Remove libtirpc-getnetconfig-races.patch (was backport).
  [FATE#320393]</changelog>
  <changelog author="kukuk@suse.de" date="1456401600">- Add the following patches to fix some bugs from the poll()
  port and an endless loop:
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch</changelog>
  <changelog author="kukuk@suse.de" date="1457956800">- Add 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  (fix export of key_secretkey_is_set)</changelog>
  <changelog author="kukuk@suse.de" date="1457956801">- Add some patches to get libtirpc compiled without needing glibc
  deprecated functions:
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch
- Add 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch
  to allow bootstrapping of libtirpc without glibc sunrpc code or
  libnsl NIS+ code.</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations
- explicit_bzero.patch: use explicit_bzero if available</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Rectify RPM groups and summaries,
  and update old macro/variable constructs.</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- 003-rpc-types.patch: Add some typedefs to rpc/types.h to allow
  applications be compiled with -std=iso9899:1990</changelog>
  <changelog author="kukuk@suse.de" date="1510574401">- Update to version 1.0.2
  - 002-old-automake.patch: not needed anymore
  - 005-libtirpc-1.0.2-rc1.patch: dropped
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch:
    removed, merged upstream
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch:
    removed, merged upstream
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch:
    removed, merged upstream
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch:
    removed, merged upstream
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch:
    removed, merged upstream
  - 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch:
    removed, merged upstream
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch:
    removed, merged upstream
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch:
    removed, merged upstream
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch:
    removed, merged upstream
  - patch6_7.diff: obsolete
  - Replace explicit_bzero.patch with
    004-replace-bzero-with-memset.patch from git
  - Rename libtirpc-new-path-rpcbindsock.patch to
    001-new-rpcbindsock-path.patch</changelog>
  <changelog author="kukuk@suse.de" date="1510660800">- 005-missing-includes.patch: add missing includes to make headers
  compatible to sunrpc.</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add COPYING.GPLv2 and install Licenses for GPLv2 code.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1529928000">- rpcinfo: send RPC getport call as specified via parameter (bsc#1072183)
  - Add upstream patches:
    0003-rpcb_clnt.c-pass-the-version-argument-to-__try_proto.patch
    0002-Fix-regression-introduced-by-change-rpc-version-orde.patch
    0001-rpcinfo-change-order-of-version-to-be-tried-to-4-3-2.patch</changelog>
</package>
<package pkgid="a5494cb8347181a569a6ff1935be864f867f474742ec203207f94b41979d7717" name="libtirpc-devel" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="lp150.2.3.1"/>
  <changelog author="kukuk@suse.com" date="1435320000">- Add 009-authdes_pk_create.patch (missing SunRPC compat function)</changelog>
  <changelog author="kukuk@suse.com" date="1435406400">- Add 010-xdr_sizeof.patch (enable xdr_sizeof)</changelog>
  <changelog author="kukuk@suse.de" date="1435838400">- Update 009-authdes_pk_create.patch (fix syncaddr handling)
- Add 011-authdes_create.patch (fix syncaddr handling)</changelog>
  <changelog author="kukuk@suse.de" date="1436443200">- Add 012-xp_sock.patch: add sunrpc compatibility define</changelog>
  <changelog author="kukuk@suse.de" date="1436529600">- Add 099-poll.patch: change svc_run from select() to poll().</changelog>
  <changelog author="kukuk@suse.de" date="1437048000">- Update 099-poll.patch with newest version send upstream.</changelog>
  <changelog author="okir@suse.com" date="1437652800">- Fix public xdr.h header - xdr_rpcvers() were broken (bsc#902439)
  Added: libtirpc-xdr-header.patch</changelog>
  <changelog author="kukuk@suse.de" date="1447761600">- Update to libtirpc-1.0.1
  - new major soname
  - Adjust auth code to match other RPC implementations
  - Implement more gss auth stuff
  - use poll() instead of select() in svc_run()
  - Add more sunrpc compat functions
  - Sync compat headers with real functions
- Drop 005-missing-symvers.patch (upstream)
- Drop 006-memleak1.patch (upstream)
- Drop 007-memleak2.patch (upstream)
- Drop 008-fix-undef-ref.patch (upstream)
- Drop 009-authdes_pk_create.patch (upstream)
- Drop 010-xdr_sizeof.patch (upstream)
- Drop 011-authdes_create.patch (upstream)
- Drop 012-xp_sock.patch (upstream)
- Drop 099-poll.patch (upstream)
- Drop libtirpc-xdr-header.patch (was backport)
- Add 005-libtirpc-1.0.2-rc1.patch (fixes deadlock)</changelog>
  <changelog author="kukuk@suse.de" date="1453291200">- Split the netconfig configuration file and manual page off into
  an own RPM. Else it is not possible to install the old and new
  libtirpc libraries in parallel.</changelog>
  <changelog author="kukuk@suse.de" date="1453377600">- Remove 004-netconfig-prefer-IPv6.patch for SLES12.
- Remove libtirpc-getnetconfig-races.patch (was backport).
  [FATE#320393]</changelog>
  <changelog author="kukuk@suse.de" date="1456401600">- Add the following patches to fix some bugs from the poll()
  port and an endless loop:
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch</changelog>
  <changelog author="kukuk@suse.de" date="1457956800">- Add 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  (fix export of key_secretkey_is_set)</changelog>
  <changelog author="kukuk@suse.de" date="1457956801">- Add some patches to get libtirpc compiled without needing glibc
  deprecated functions:
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch
- Add 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch
  to allow bootstrapping of libtirpc without glibc sunrpc code or
  libnsl NIS+ code.</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations
- explicit_bzero.patch: use explicit_bzero if available</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Rectify RPM groups and summaries,
  and update old macro/variable constructs.</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- 003-rpc-types.patch: Add some typedefs to rpc/types.h to allow
  applications be compiled with -std=iso9899:1990</changelog>
  <changelog author="kukuk@suse.de" date="1510574401">- Update to version 1.0.2
  - 002-old-automake.patch: not needed anymore
  - 005-libtirpc-1.0.2-rc1.patch: dropped
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch:
    removed, merged upstream
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch:
    removed, merged upstream
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch:
    removed, merged upstream
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch:
    removed, merged upstream
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch:
    removed, merged upstream
  - 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch:
    removed, merged upstream
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch:
    removed, merged upstream
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch:
    removed, merged upstream
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch:
    removed, merged upstream
  - patch6_7.diff: obsolete
  - Replace explicit_bzero.patch with
    004-replace-bzero-with-memset.patch from git
  - Rename libtirpc-new-path-rpcbindsock.patch to
    001-new-rpcbindsock-path.patch</changelog>
  <changelog author="kukuk@suse.de" date="1510660800">- 005-missing-includes.patch: add missing includes to make headers
  compatible to sunrpc.</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add COPYING.GPLv2 and install Licenses for GPLv2 code.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1529928000">- rpcinfo: send RPC getport call as specified via parameter (bsc#1072183)
  - Add upstream patches:
    0003-rpcb_clnt.c-pass-the-version-argument-to-__try_proto.patch
    0002-Fix-regression-introduced-by-change-rpc-version-orde.patch
    0001-rpcinfo-change-order-of-version-to-be-tried-to-4-3-2.patch</changelog>
</package>
<package pkgid="4c0eaa5e031b83efeb317b077ee581da94becd85eb693819f7a1e8acdd9d5b81" name="libtirpc-netconfig" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="lp150.2.3.1"/>
  <changelog author="kukuk@suse.com" date="1435320000">- Add 009-authdes_pk_create.patch (missing SunRPC compat function)</changelog>
  <changelog author="kukuk@suse.com" date="1435406400">- Add 010-xdr_sizeof.patch (enable xdr_sizeof)</changelog>
  <changelog author="kukuk@suse.de" date="1435838400">- Update 009-authdes_pk_create.patch (fix syncaddr handling)
- Add 011-authdes_create.patch (fix syncaddr handling)</changelog>
  <changelog author="kukuk@suse.de" date="1436443200">- Add 012-xp_sock.patch: add sunrpc compatibility define</changelog>
  <changelog author="kukuk@suse.de" date="1436529600">- Add 099-poll.patch: change svc_run from select() to poll().</changelog>
  <changelog author="kukuk@suse.de" date="1437048000">- Update 099-poll.patch with newest version send upstream.</changelog>
  <changelog author="okir@suse.com" date="1437652800">- Fix public xdr.h header - xdr_rpcvers() were broken (bsc#902439)
  Added: libtirpc-xdr-header.patch</changelog>
  <changelog author="kukuk@suse.de" date="1447761600">- Update to libtirpc-1.0.1
  - new major soname
  - Adjust auth code to match other RPC implementations
  - Implement more gss auth stuff
  - use poll() instead of select() in svc_run()
  - Add more sunrpc compat functions
  - Sync compat headers with real functions
- Drop 005-missing-symvers.patch (upstream)
- Drop 006-memleak1.patch (upstream)
- Drop 007-memleak2.patch (upstream)
- Drop 008-fix-undef-ref.patch (upstream)
- Drop 009-authdes_pk_create.patch (upstream)
- Drop 010-xdr_sizeof.patch (upstream)
- Drop 011-authdes_create.patch (upstream)
- Drop 012-xp_sock.patch (upstream)
- Drop 099-poll.patch (upstream)
- Drop libtirpc-xdr-header.patch (was backport)
- Add 005-libtirpc-1.0.2-rc1.patch (fixes deadlock)</changelog>
  <changelog author="kukuk@suse.de" date="1453291200">- Split the netconfig configuration file and manual page off into
  an own RPM. Else it is not possible to install the old and new
  libtirpc libraries in parallel.</changelog>
  <changelog author="kukuk@suse.de" date="1453377600">- Remove 004-netconfig-prefer-IPv6.patch for SLES12.
- Remove libtirpc-getnetconfig-races.patch (was backport).
  [FATE#320393]</changelog>
  <changelog author="kukuk@suse.de" date="1456401600">- Add the following patches to fix some bugs from the poll()
  port and an endless loop:
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch</changelog>
  <changelog author="kukuk@suse.de" date="1457956800">- Add 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  (fix export of key_secretkey_is_set)</changelog>
  <changelog author="kukuk@suse.de" date="1457956801">- Add some patches to get libtirpc compiled without needing glibc
  deprecated functions:
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch
- Add 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch
  to allow bootstrapping of libtirpc without glibc sunrpc code or
  libnsl NIS+ code.</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations
- explicit_bzero.patch: use explicit_bzero if available</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Rectify RPM groups and summaries,
  and update old macro/variable constructs.</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- 003-rpc-types.patch: Add some typedefs to rpc/types.h to allow
  applications be compiled with -std=iso9899:1990</changelog>
  <changelog author="kukuk@suse.de" date="1510574401">- Update to version 1.0.2
  - 002-old-automake.patch: not needed anymore
  - 005-libtirpc-1.0.2-rc1.patch: dropped
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch:
    removed, merged upstream
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch:
    removed, merged upstream
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch:
    removed, merged upstream
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch:
    removed, merged upstream
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch:
    removed, merged upstream
  - 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch:
    removed, merged upstream
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch:
    removed, merged upstream
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch:
    removed, merged upstream
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch:
    removed, merged upstream
  - patch6_7.diff: obsolete
  - Replace explicit_bzero.patch with
    004-replace-bzero-with-memset.patch from git
  - Rename libtirpc-new-path-rpcbindsock.patch to
    001-new-rpcbindsock-path.patch</changelog>
  <changelog author="kukuk@suse.de" date="1510660800">- 005-missing-includes.patch: add missing includes to make headers
  compatible to sunrpc.</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add COPYING.GPLv2 and install Licenses for GPLv2 code.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1529928000">- rpcinfo: send RPC getport call as specified via parameter (bsc#1072183)
  - Add upstream patches:
    0003-rpcb_clnt.c-pass-the-version-argument-to-__try_proto.patch
    0002-Fix-regression-introduced-by-change-rpc-version-orde.patch
    0001-rpcinfo-change-order-of-version-to-be-tried-to-4-3-2.patch</changelog>
</package>
<package pkgid="ba26eba6ba95e274b865cbe6276ae8014a64df7256a3050210220d13e0590101" name="libtirpc3" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="lp150.2.3.1"/>
  <changelog author="kukuk@suse.com" date="1435320000">- Add 009-authdes_pk_create.patch (missing SunRPC compat function)</changelog>
  <changelog author="kukuk@suse.com" date="1435406400">- Add 010-xdr_sizeof.patch (enable xdr_sizeof)</changelog>
  <changelog author="kukuk@suse.de" date="1435838400">- Update 009-authdes_pk_create.patch (fix syncaddr handling)
- Add 011-authdes_create.patch (fix syncaddr handling)</changelog>
  <changelog author="kukuk@suse.de" date="1436443200">- Add 012-xp_sock.patch: add sunrpc compatibility define</changelog>
  <changelog author="kukuk@suse.de" date="1436529600">- Add 099-poll.patch: change svc_run from select() to poll().</changelog>
  <changelog author="kukuk@suse.de" date="1437048000">- Update 099-poll.patch with newest version send upstream.</changelog>
  <changelog author="okir@suse.com" date="1437652800">- Fix public xdr.h header - xdr_rpcvers() were broken (bsc#902439)
  Added: libtirpc-xdr-header.patch</changelog>
  <changelog author="kukuk@suse.de" date="1447761600">- Update to libtirpc-1.0.1
  - new major soname
  - Adjust auth code to match other RPC implementations
  - Implement more gss auth stuff
  - use poll() instead of select() in svc_run()
  - Add more sunrpc compat functions
  - Sync compat headers with real functions
- Drop 005-missing-symvers.patch (upstream)
- Drop 006-memleak1.patch (upstream)
- Drop 007-memleak2.patch (upstream)
- Drop 008-fix-undef-ref.patch (upstream)
- Drop 009-authdes_pk_create.patch (upstream)
- Drop 010-xdr_sizeof.patch (upstream)
- Drop 011-authdes_create.patch (upstream)
- Drop 012-xp_sock.patch (upstream)
- Drop 099-poll.patch (upstream)
- Drop libtirpc-xdr-header.patch (was backport)
- Add 005-libtirpc-1.0.2-rc1.patch (fixes deadlock)</changelog>
  <changelog author="kukuk@suse.de" date="1453291200">- Split the netconfig configuration file and manual page off into
  an own RPM. Else it is not possible to install the old and new
  libtirpc libraries in parallel.</changelog>
  <changelog author="kukuk@suse.de" date="1453377600">- Remove 004-netconfig-prefer-IPv6.patch for SLES12.
- Remove libtirpc-getnetconfig-races.patch (was backport).
  [FATE#320393]</changelog>
  <changelog author="kukuk@suse.de" date="1456401600">- Add the following patches to fix some bugs from the poll()
  port and an endless loop:
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch</changelog>
  <changelog author="kukuk@suse.de" date="1457956800">- Add 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  (fix export of key_secretkey_is_set)</changelog>
  <changelog author="kukuk@suse.de" date="1457956801">- Add some patches to get libtirpc compiled without needing glibc
  deprecated functions:
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch
- Add 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch
  to allow bootstrapping of libtirpc without glibc sunrpc code or
  libnsl NIS+ code.</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations
- explicit_bzero.patch: use explicit_bzero if available</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Rectify RPM groups and summaries,
  and update old macro/variable constructs.</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- 003-rpc-types.patch: Add some typedefs to rpc/types.h to allow
  applications be compiled with -std=iso9899:1990</changelog>
  <changelog author="kukuk@suse.de" date="1510574401">- Update to version 1.0.2
  - 002-old-automake.patch: not needed anymore
  - 005-libtirpc-1.0.2-rc1.patch: dropped
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch:
    removed, merged upstream
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch:
    removed, merged upstream
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch:
    removed, merged upstream
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch:
    removed, merged upstream
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch:
    removed, merged upstream
  - 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch:
    removed, merged upstream
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch:
    removed, merged upstream
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch:
    removed, merged upstream
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch:
    removed, merged upstream
  - patch6_7.diff: obsolete
  - Replace explicit_bzero.patch with
    004-replace-bzero-with-memset.patch from git
  - Rename libtirpc-new-path-rpcbindsock.patch to
    001-new-rpcbindsock-path.patch</changelog>
  <changelog author="kukuk@suse.de" date="1510660800">- 005-missing-includes.patch: add missing includes to make headers
  compatible to sunrpc.</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add COPYING.GPLv2 and install Licenses for GPLv2 code.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1529928000">- rpcinfo: send RPC getport call as specified via parameter (bsc#1072183)
  - Add upstream patches:
    0003-rpcb_clnt.c-pass-the-version-argument-to-__try_proto.patch
    0002-Fix-regression-introduced-by-change-rpc-version-orde.patch
    0001-rpcinfo-change-order-of-version-to-be-tried-to-4-3-2.patch</changelog>
</package>
<package pkgid="721d35549e699190e04d19f750a216456a109ee1c8d216bf4b7621992056a148" name="libtirpc3-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="lp150.2.3.1"/>
  <changelog author="kukuk@suse.com" date="1435320000">- Add 009-authdes_pk_create.patch (missing SunRPC compat function)</changelog>
  <changelog author="kukuk@suse.com" date="1435406400">- Add 010-xdr_sizeof.patch (enable xdr_sizeof)</changelog>
  <changelog author="kukuk@suse.de" date="1435838400">- Update 009-authdes_pk_create.patch (fix syncaddr handling)
- Add 011-authdes_create.patch (fix syncaddr handling)</changelog>
  <changelog author="kukuk@suse.de" date="1436443200">- Add 012-xp_sock.patch: add sunrpc compatibility define</changelog>
  <changelog author="kukuk@suse.de" date="1436529600">- Add 099-poll.patch: change svc_run from select() to poll().</changelog>
  <changelog author="kukuk@suse.de" date="1437048000">- Update 099-poll.patch with newest version send upstream.</changelog>
  <changelog author="okir@suse.com" date="1437652800">- Fix public xdr.h header - xdr_rpcvers() were broken (bsc#902439)
  Added: libtirpc-xdr-header.patch</changelog>
  <changelog author="kukuk@suse.de" date="1447761600">- Update to libtirpc-1.0.1
  - new major soname
  - Adjust auth code to match other RPC implementations
  - Implement more gss auth stuff
  - use poll() instead of select() in svc_run()
  - Add more sunrpc compat functions
  - Sync compat headers with real functions
- Drop 005-missing-symvers.patch (upstream)
- Drop 006-memleak1.patch (upstream)
- Drop 007-memleak2.patch (upstream)
- Drop 008-fix-undef-ref.patch (upstream)
- Drop 009-authdes_pk_create.patch (upstream)
- Drop 010-xdr_sizeof.patch (upstream)
- Drop 011-authdes_create.patch (upstream)
- Drop 012-xp_sock.patch (upstream)
- Drop 099-poll.patch (upstream)
- Drop libtirpc-xdr-header.patch (was backport)
- Add 005-libtirpc-1.0.2-rc1.patch (fixes deadlock)</changelog>
  <changelog author="kukuk@suse.de" date="1453291200">- Split the netconfig configuration file and manual page off into
  an own RPM. Else it is not possible to install the old and new
  libtirpc libraries in parallel.</changelog>
  <changelog author="kukuk@suse.de" date="1453377600">- Remove 004-netconfig-prefer-IPv6.patch for SLES12.
- Remove libtirpc-getnetconfig-races.patch (was backport).
  [FATE#320393]</changelog>
  <changelog author="kukuk@suse.de" date="1456401600">- Add the following patches to fix some bugs from the poll()
  port and an endless loop:
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch</changelog>
  <changelog author="kukuk@suse.de" date="1457956800">- Add 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  (fix export of key_secretkey_is_set)</changelog>
  <changelog author="kukuk@suse.de" date="1457956801">- Add some patches to get libtirpc compiled without needing glibc
  deprecated functions:
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch
- Add 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch
  to allow bootstrapping of libtirpc without glibc sunrpc code or
  libnsl NIS+ code.</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations
- explicit_bzero.patch: use explicit_bzero if available</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Rectify RPM groups and summaries,
  and update old macro/variable constructs.</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- 003-rpc-types.patch: Add some typedefs to rpc/types.h to allow
  applications be compiled with -std=iso9899:1990</changelog>
  <changelog author="kukuk@suse.de" date="1510574401">- Update to version 1.0.2
  - 002-old-automake.patch: not needed anymore
  - 005-libtirpc-1.0.2-rc1.patch: dropped
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch:
    removed, merged upstream
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch:
    removed, merged upstream
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch:
    removed, merged upstream
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch:
    removed, merged upstream
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch:
    removed, merged upstream
  - 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch:
    removed, merged upstream
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch:
    removed, merged upstream
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch:
    removed, merged upstream
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch:
    removed, merged upstream
  - patch6_7.diff: obsolete
  - Replace explicit_bzero.patch with
    004-replace-bzero-with-memset.patch from git
  - Rename libtirpc-new-path-rpcbindsock.patch to
    001-new-rpcbindsock-path.patch</changelog>
  <changelog author="kukuk@suse.de" date="1510660800">- 005-missing-includes.patch: add missing includes to make headers
  compatible to sunrpc.</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add COPYING.GPLv2 and install Licenses for GPLv2 code.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1529928000">- rpcinfo: send RPC getport call as specified via parameter (bsc#1072183)
  - Add upstream patches:
    0003-rpcb_clnt.c-pass-the-version-argument-to-__try_proto.patch
    0002-Fix-regression-introduced-by-change-rpc-version-orde.patch
    0001-rpcinfo-change-order-of-version-to-be-tried-to-4-3-2.patch</changelog>
</package>
<package pkgid="0edfc0bc4cda0bb26e715b77efd8fee0e749a99f2b59bc529a7face239184ddf" name="libtls17" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
  <changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
  <changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
  <changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
  <changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1493899200">- Update to new upstream release 2.5.4
  * Reverted a previous change that forced consistency between
    return value and error code when specifing a certificate
    verification callback, since this breaks the documented API.
  * Switched Linux getrandom() usage to non-blocking mode,
    continuing to use fallback mechanims if unsuccessful.
  * Fixed a bug caused by the return value being set early to
    signal successful DTLS cookie validation.</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict for split openssl packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494331200">- Add conflict between libressl and the main versioned packages too</changelog>
  <changelog author="jengelh@inai.de" date="1503576000">- Update to new upstream release 2.5.5
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.</changelog>
  <changelog author="jengelh@inai.de" date="1504267200">- Update to new upstream release 2.6.0
  * Added support for providing CRLs to libtls. Once a CRL is
    provided, we enable CRL checking for the full certificate
    chain.
  * Allow non-compliant clients using IP literal addresses with
    SNI to connect to a server using libtls.
  * Avoid a potential NULL pointer dereference in
    d2i_ECPrivateKey().
  * Added definitions for three OIDs used in EV certificates.
  * Plugged a memory leak in tls_ocsp_free.
  * Added tls_peer_cert_chain_pem, tls_cert_hash, and
    tls_hex_string to libtls, useful in private certificate
    validation callbacks.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Added tls_keypair_clear_key for clearing key material.
  * Removed inconsistent IPv6 handling from
    BIO_get_accept_socket, simplified BIO_get_host_ip and
    BIO_accept.
  * Fixed the openssl(1) ca command so that is generates
    certificates with RFC 5280-conformant time.
  * Added ASN1_TIME_set_tm to set an asn1 from a struct tm *.
  * Added SSL{,_CTX}_set_{min,max}_proto_version() functions.
  * Added HKDF (HMAC Key Derivation Function) from BoringSSL
  * Providea a tls_unload_file() function that frees the memory
    returned from a tls_load_file() call, ensuring that it the
    contents become inaccessible. This is specifically needed on
    platforms where the library allocators may be different from
    the application allocator.
  * Perform reference counting for tls_config. This allows
    tls_config_free() to be called as soon as it has been passed
    to the final tls_configure() call, simplifying lifetime
    tracking for the application.
  * Moved internal state of SSL and other structures to be
    opaque.
  * Dropped cipher suites with DSS authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update to new upstream release 2.6.2
  * Provide a useful error with libtls if there are no OCSP URLs
    in a peer certificate.
  * Keep track of which keypair is in use by a TLS context,
    fixing a bug where a TLS server with SNI would only return
    the OCSP staple for the default keypair.
- Update to new upstream release 2.6.1
  * Added tls_config_set_ecdhecurves() to libtls, which allows
    the names of the eliptical curves that may be used during
    client and server key exchange to be specified.
  * Removed support for DSS/DSA, since we removed the cipher
    suites a while back.
  * Removed NPN support. NPN was never standardised and the last
    draft expired in October 2012. ALPN was standardised.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS
    termintation.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Implemented the SSL_CTX_set_min_proto_version(3) API.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.</changelog>
  <changelog author="jengelh@inai.de" date="1510056000">- Update to new upstream release 2.6.3
  * Added support for providing CRLs to libtls - once a CRL is
    provided via tls_config_set_crl_file(3) or
    tls_config_set_crl_mem(3), CRL checking is enabled and
    required for the full certificate chain.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Relaxed SNI validation to allow non-RFC-compliant clients
    using literal IP addresses with SNI to connect to a
    libtls-based TLS server.
  * Added tls_peer_cert_chain_pem() to libtls, useful in private
    certificate validation callbacks such as those in relayd.
  * Added SSL{,_CTX}_set_{min,max}_proto_version(3) functions.
  * Imported HKDF (HMAC Key Derivation Function) from BoringSSL.
  * Dropped cipher suites using DSS authentication.
  * Removed support for DSS/DSA from libssl.
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.
  * Removed NPN support - NPN was never standardised and the last
    draft expired in October 2012.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS termination.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.
- Add des-fcrypt.diff [boo#1065363]</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Add extra-symver.diff</changelog>
  <changelog author="jengelh@inai.de" date="1513857600">- Update to new upstream release 2.6.4
  * Make tls_config_parse_protocols() work correctly when passed
    a NULL pointer for a protocol string.
  * Correct TLS extensions handling when no extensions are
    present.</changelog>
  <changelog author="jengelh@inai.de" date="1521806400">- Update to new upstream release 2.7.0
  * Added support for many OpenSSL 1.0.2 and 1.1 APIs.
  * Added support for automatic library initialization in
    libcrypto, libssl, and libtls.
  * Converted more packet handling methods to CBB, which improves
    resiliency when generating TLS messages.
  * Completed TLS extension handling rewrite, improving consistency
    of checks for malformed and duplicate extensions.
  * Rewrote ASN1_TYPE_ get,set _octetstring() using templated
    ASN.1. This removes the last remaining use of the old M_ASN1_
    macros (asn1_mac.h) from API that needs to continue to exist.
  * Added support for client-side session resumption in libtls.
  * A libtls client can specify a session file descriptor (a
    regular file with appropriate ownership and permissions) and
    libtls will manage reading and writing of session data across
    TLS handshakes.
  * Merged more DTLS support into the regular TLS code path.</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Update to new upstream release 2.7.1
  * Fixed a bug in int_x509_param_set_hosts, calling strlen() if
    name length provided is 0 to match the OpenSSL behaviour.
    [CVE-2018-8970, boo#1086778]</changelog>
  <changelog author="jengelh@inai.de" date="1522670400">- Update to new upstream release 2.7.2
  * Updated and added extensive new HISTORY sections to
    the API manuals.</changelog>
  <changelog author="jengelh@inai.de" date="1525694400">- Update to new upstream release 2.7.3
  * Removed incorrect NULL checks in DH_set0_key().
  * Limited tls_config_clear_keys() to only clear private keys.</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Update to new upstream release 2.8.0
  * Fixed a pair of 20+ year-old bugs in X509_NAME_add_entry.
  * Tighten up checks for various X509_VERIFY_PARAM functions,
    'poisoning' parameters so that an unverified certificate
    cannot be used if it fails verification.
  * Fixed a potential memory leak on failure in ASN1_item_digest.
  * Fixed a potential memory alignment crash in
    asn1_item_combine_free.
  * Removed unused SSL3_FLAGS_DELAY_CLIENT_FINISHED and
    SSL3_FLAGS_POP_BUFFER flags in write path, simplifying IO
    paths.
  * Removed SSL_OP_TLS_ROLLBACK_BUG buggy client workarounds.
  * Added const annotations to many existing APIs from OpenSSL,
    making interoperability easier for downstream applications.
  * Added a missing bounds check in c2i_ASN1_BIT_STRING.
  * Removed three remaining single DES cipher suites.
  * Fixed a potential leak/incorrect return value in DSA
    signature generation.
  * Added a blinding value when generating DSA and ECDSA
    signatures, in order to reduce the possibility of a
    side-channel attack leaking the private key.
  * Added ECC constant time scalar multiplication support.
  * Revised the implementation of RSASSA-PKCS1-v1_5 to match the
    specification in RFC 8017.
  * Changes from 2.7.4:
  * Avoid a timing side-channel leak when generating DSA and ECDSA
    signatures. [CVE-2018-12434, boo#1097779]
  * Reject excessively large primes in DH key generation.</changelog>
</package>
<package pkgid="9e1fa472a472b366c7a8e62f6232ee4564853a8d8acaad5c62c99daa4aa846f5" name="libtls17-32bit" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
  <changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
  <changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
  <changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
  <changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1493899200">- Update to new upstream release 2.5.4
  * Reverted a previous change that forced consistency between
    return value and error code when specifing a certificate
    verification callback, since this breaks the documented API.
  * Switched Linux getrandom() usage to non-blocking mode,
    continuing to use fallback mechanims if unsuccessful.
  * Fixed a bug caused by the return value being set early to
    signal successful DTLS cookie validation.</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict for split openssl packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494331200">- Add conflict between libressl and the main versioned packages too</changelog>
  <changelog author="jengelh@inai.de" date="1503576000">- Update to new upstream release 2.5.5
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.</changelog>
  <changelog author="jengelh@inai.de" date="1504267200">- Update to new upstream release 2.6.0
  * Added support for providing CRLs to libtls. Once a CRL is
    provided, we enable CRL checking for the full certificate
    chain.
  * Allow non-compliant clients using IP literal addresses with
    SNI to connect to a server using libtls.
  * Avoid a potential NULL pointer dereference in
    d2i_ECPrivateKey().
  * Added definitions for three OIDs used in EV certificates.
  * Plugged a memory leak in tls_ocsp_free.
  * Added tls_peer_cert_chain_pem, tls_cert_hash, and
    tls_hex_string to libtls, useful in private certificate
    validation callbacks.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Added tls_keypair_clear_key for clearing key material.
  * Removed inconsistent IPv6 handling from
    BIO_get_accept_socket, simplified BIO_get_host_ip and
    BIO_accept.
  * Fixed the openssl(1) ca command so that is generates
    certificates with RFC 5280-conformant time.
  * Added ASN1_TIME_set_tm to set an asn1 from a struct tm *.
  * Added SSL{,_CTX}_set_{min,max}_proto_version() functions.
  * Added HKDF (HMAC Key Derivation Function) from BoringSSL
  * Providea a tls_unload_file() function that frees the memory
    returned from a tls_load_file() call, ensuring that it the
    contents become inaccessible. This is specifically needed on
    platforms where the library allocators may be different from
    the application allocator.
  * Perform reference counting for tls_config. This allows
    tls_config_free() to be called as soon as it has been passed
    to the final tls_configure() call, simplifying lifetime
    tracking for the application.
  * Moved internal state of SSL and other structures to be
    opaque.
  * Dropped cipher suites with DSS authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update to new upstream release 2.6.2
  * Provide a useful error with libtls if there are no OCSP URLs
    in a peer certificate.
  * Keep track of which keypair is in use by a TLS context,
    fixing a bug where a TLS server with SNI would only return
    the OCSP staple for the default keypair.
- Update to new upstream release 2.6.1
  * Added tls_config_set_ecdhecurves() to libtls, which allows
    the names of the eliptical curves that may be used during
    client and server key exchange to be specified.
  * Removed support for DSS/DSA, since we removed the cipher
    suites a while back.
  * Removed NPN support. NPN was never standardised and the last
    draft expired in October 2012. ALPN was standardised.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS
    termintation.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Implemented the SSL_CTX_set_min_proto_version(3) API.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.</changelog>
  <changelog author="jengelh@inai.de" date="1510056000">- Update to new upstream release 2.6.3
  * Added support for providing CRLs to libtls - once a CRL is
    provided via tls_config_set_crl_file(3) or
    tls_config_set_crl_mem(3), CRL checking is enabled and
    required for the full certificate chain.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Relaxed SNI validation to allow non-RFC-compliant clients
    using literal IP addresses with SNI to connect to a
    libtls-based TLS server.
  * Added tls_peer_cert_chain_pem() to libtls, useful in private
    certificate validation callbacks such as those in relayd.
  * Added SSL{,_CTX}_set_{min,max}_proto_version(3) functions.
  * Imported HKDF (HMAC Key Derivation Function) from BoringSSL.
  * Dropped cipher suites using DSS authentication.
  * Removed support for DSS/DSA from libssl.
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.
  * Removed NPN support - NPN was never standardised and the last
    draft expired in October 2012.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS termination.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.
- Add des-fcrypt.diff [boo#1065363]</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Add extra-symver.diff</changelog>
  <changelog author="jengelh@inai.de" date="1513857600">- Update to new upstream release 2.6.4
  * Make tls_config_parse_protocols() work correctly when passed
    a NULL pointer for a protocol string.
  * Correct TLS extensions handling when no extensions are
    present.</changelog>
  <changelog author="jengelh@inai.de" date="1521806400">- Update to new upstream release 2.7.0
  * Added support for many OpenSSL 1.0.2 and 1.1 APIs.
  * Added support for automatic library initialization in
    libcrypto, libssl, and libtls.
  * Converted more packet handling methods to CBB, which improves
    resiliency when generating TLS messages.
  * Completed TLS extension handling rewrite, improving consistency
    of checks for malformed and duplicate extensions.
  * Rewrote ASN1_TYPE_ get,set _octetstring() using templated
    ASN.1. This removes the last remaining use of the old M_ASN1_
    macros (asn1_mac.h) from API that needs to continue to exist.
  * Added support for client-side session resumption in libtls.
  * A libtls client can specify a session file descriptor (a
    regular file with appropriate ownership and permissions) and
    libtls will manage reading and writing of session data across
    TLS handshakes.
  * Merged more DTLS support into the regular TLS code path.</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Update to new upstream release 2.7.1
  * Fixed a bug in int_x509_param_set_hosts, calling strlen() if
    name length provided is 0 to match the OpenSSL behaviour.
    [CVE-2018-8970, boo#1086778]</changelog>
  <changelog author="jengelh@inai.de" date="1522670400">- Update to new upstream release 2.7.2
  * Updated and added extensive new HISTORY sections to
    the API manuals.</changelog>
  <changelog author="jengelh@inai.de" date="1525694400">- Update to new upstream release 2.7.3
  * Removed incorrect NULL checks in DH_set0_key().
  * Limited tls_config_clear_keys() to only clear private keys.</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Update to new upstream release 2.8.0
  * Fixed a pair of 20+ year-old bugs in X509_NAME_add_entry.
  * Tighten up checks for various X509_VERIFY_PARAM functions,
    'poisoning' parameters so that an unverified certificate
    cannot be used if it fails verification.
  * Fixed a potential memory leak on failure in ASN1_item_digest.
  * Fixed a potential memory alignment crash in
    asn1_item_combine_free.
  * Removed unused SSL3_FLAGS_DELAY_CLIENT_FINISHED and
    SSL3_FLAGS_POP_BUFFER flags in write path, simplifying IO
    paths.
  * Removed SSL_OP_TLS_ROLLBACK_BUG buggy client workarounds.
  * Added const annotations to many existing APIs from OpenSSL,
    making interoperability easier for downstream applications.
  * Added a missing bounds check in c2i_ASN1_BIT_STRING.
  * Removed three remaining single DES cipher suites.
  * Fixed a potential leak/incorrect return value in DSA
    signature generation.
  * Added a blinding value when generating DSA and ECDSA
    signatures, in order to reduce the possibility of a
    side-channel attack leaking the private key.
  * Added ECC constant time scalar multiplication support.
  * Revised the implementation of RSASSA-PKCS1-v1_5 to match the
    specification in RFC 8017.
  * Changes from 2.7.4:
  * Avoid a timing side-channel leak when generating DSA and ECDSA
    signatures. [CVE-2018-12434, boo#1097779]
  * Reject excessively large primes in DH key generation.</changelog>
</package>
<package pkgid="97fdd7fe162872cb13061f68df7e7de5019d39abd0f131df61e3079d18e3b3e3" name="libtss0" arch="x86_64">
  <version epoch="0" ver="1045" rel="lp150.3.3.1"/>
  <changelog author="msuchanek@suse.com" date="1485518400">- Import v713 (FATE#321601)
- Move to libdir and add wrapper script.
- repack source without makefile-beam which has incompatible
  license and is not used in build anyway</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- Wrap description and spell out TSS.
- Move package description up before any build recipes,
  this is the more usual layout.
- Drop unusable "return" command; %build already executes with
  sh -e.</changelog>
  <changelog author="meissner@suse.com" date="1488369600">- update to v755 (FATE#321601)
  - This is the version prefered by IBM.</changelog>
  <changelog author="msuchanek@suse.com" date="1488456000">- fix description of -devel package</changelog>
  <changelog author="msuchanek@suse.com" date="1510142400">- Update to upstream version 1045 - works with OpenSSL 1.1 (bsc#1066914)</changelog>
  <changelog author="msuchanek@suse.com" date="1516276800">- Enable test on BE</changelog>
  <changelog author="msuchanek@suse.com" date="1526558400">- Split off library, spec-clean (bsc#1093612)</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Fix RPM groups</changelog>
  <changelog author="msuchanek@suse.com" date="1526990400">- Add post/postun ldconfig call</changelog>
</package>
<package pkgid="e56bcffa57f43e01fdeb951c7a9dae208c182c1c6ce4e216f7a34b924788e20a" name="libu2f-host" arch="src">
  <version epoch="0" ver="1.1.6" rel="lp150.2.3.1"/>
  <changelog author="t.gruner@katodev.de" date="1414497600">- Version 0.0 (released 2014-09-16)
  - Initial release.</changelog>
  <changelog author="t.gruner@katodev.de" date="1418126400">- Version 0.0.2 (released 2014-11-28)
  - Add more devices to udev.</changelog>
  <changelog author="t.gruner@katodev.de" date="1420718400">- Version 0.0.3 (released 2015-01-08)
  - Change license to LGPLv2+ for the library.
  - Some improvements to internal communication code.
  - Some debug mode improvements, from Bram Vandoren.</changelog>
  <changelog author="t.gruner@katodev.de" date="1422014400">- Version 0.0.4 (released 2015-01-22)
  - Add an exponential growing timeout for slow devices (PlugUp).</changelog>
  <changelog author="t.gruner@katodev.de" date="1441108800">- Version 1.0.0 (released 2015-08-27)
  - Add udev rules for older version of udev.
  - Add pam:// as an allowed protocol.
  - Stop using sleep(), use Sleep() on windows and usleep() on others.
  - Fixup tool name in help and manpage.
  - Add a timeout to the register and authenticate actions.</changelog>
  <changelog author="t.gruner@katodev.de" date="1441368000">- Fix path in u2f-host/u2f-host.h</changelog>
  <changelog author="t.gruner@katodev.de" date="1444132800">- Remove fix in u2f-host/u2f-host.h
- Cleanup .spec file</changelog>
  <changelog author="t.gruner@katodev.de" date="1455796800">- Version 1.1.0 (released 2016-02-15)
  - Add udev rules for more devices.
  - Don?t return success when no data is received.
  - Fix typos.
  - Make send_apdu send data like chrome does.
  - Don?t release json object that we don?t own no more.
  - Don?t do memcmp on uninitialized memory.
  - Add u2fh_authenticate2() and u2fh_register2().
  - Remove base64 padding (required by spec).
  - Use unsigned ints to prevent buffer overflows.</changelog>
  <changelog author="t.gruner@katodev.de" date="1458561600">- Version 1.1.1 (released 2016-03-14)
  - Use correct index in u2fh_devs_discover()
  - Fix an issue where we left the authenticate loop early.
  - Fix an issue where authenticate remembered which devices to skip.
  - Stop validating the scheme of the origin.
  - Fixup a crash in u2fh_devs_discover() with closing unplugged devices.
  - Documentation fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1458734400">- Avoid undesired blank lines at start of descriptions.
  Expand description. Trim filelist.</changelog>
  <changelog author="t.gruner@katodev.de" date="1463659200">- Add buildrequirement for libudev to select the rule for udev.
- Add udev directories in %files
- Add udev rule for Feitian ePass FIDO (udev.patch)
- Change License for the library</changelog>
  <changelog author="t.gruner@katodev.de" date="1476273600">- Version 1.1.3 (released 2016-10-04)
  - Added more u2f devices to the udev rulesets.
  - Fixup mac builds.
- Version 1.1.2 (released 2016-06-22)
  - Make authenticate return U2FH_OK if touch is set to not needed. Also minor fixes to error output of authenticate.
  - Documentation fixes.
  - Compilation fixes on visual studio.
  - Add udev rules for Feitian devices.
  - Add optional cmake build.
  - Change license of the commandline tool to LGPL 2.1+
- remove udev.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
</package>
<package pkgid="8f922aba4f3439a8052f6fc8f4604ef61238aaa8b5917521b765c640622fa1d6" name="libu2f-host-devel" arch="x86_64">
  <version epoch="0" ver="1.1.6" rel="lp150.2.3.1"/>
  <changelog author="t.gruner@katodev.de" date="1414497600">- Version 0.0 (released 2014-09-16)
  - Initial release.</changelog>
  <changelog author="t.gruner@katodev.de" date="1418126400">- Version 0.0.2 (released 2014-11-28)
  - Add more devices to udev.</changelog>
  <changelog author="t.gruner@katodev.de" date="1420718400">- Version 0.0.3 (released 2015-01-08)
  - Change license to LGPLv2+ for the library.
  - Some improvements to internal communication code.
  - Some debug mode improvements, from Bram Vandoren.</changelog>
  <changelog author="t.gruner@katodev.de" date="1422014400">- Version 0.0.4 (released 2015-01-22)
  - Add an exponential growing timeout for slow devices (PlugUp).</changelog>
  <changelog author="t.gruner@katodev.de" date="1441108800">- Version 1.0.0 (released 2015-08-27)
  - Add udev rules for older version of udev.
  - Add pam:// as an allowed protocol.
  - Stop using sleep(), use Sleep() on windows and usleep() on others.
  - Fixup tool name in help and manpage.
  - Add a timeout to the register and authenticate actions.</changelog>
  <changelog author="t.gruner@katodev.de" date="1441368000">- Fix path in u2f-host/u2f-host.h</changelog>
  <changelog author="t.gruner@katodev.de" date="1444132800">- Remove fix in u2f-host/u2f-host.h
- Cleanup .spec file</changelog>
  <changelog author="t.gruner@katodev.de" date="1455796800">- Version 1.1.0 (released 2016-02-15)
  - Add udev rules for more devices.
  - Don?t return success when no data is received.
  - Fix typos.
  - Make send_apdu send data like chrome does.
  - Don?t release json object that we don?t own no more.
  - Don?t do memcmp on uninitialized memory.
  - Add u2fh_authenticate2() and u2fh_register2().
  - Remove base64 padding (required by spec).
  - Use unsigned ints to prevent buffer overflows.</changelog>
  <changelog author="t.gruner@katodev.de" date="1458561600">- Version 1.1.1 (released 2016-03-14)
  - Use correct index in u2fh_devs_discover()
  - Fix an issue where we left the authenticate loop early.
  - Fix an issue where authenticate remembered which devices to skip.
  - Stop validating the scheme of the origin.
  - Fixup a crash in u2fh_devs_discover() with closing unplugged devices.
  - Documentation fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1458734400">- Avoid undesired blank lines at start of descriptions.
  Expand description. Trim filelist.</changelog>
  <changelog author="t.gruner@katodev.de" date="1463659200">- Add buildrequirement for libudev to select the rule for udev.
- Add udev directories in %files
- Add udev rule for Feitian ePass FIDO (udev.patch)
- Change License for the library</changelog>
  <changelog author="t.gruner@katodev.de" date="1476273600">- Version 1.1.3 (released 2016-10-04)
  - Added more u2f devices to the udev rulesets.
  - Fixup mac builds.
- Version 1.1.2 (released 2016-06-22)
  - Make authenticate return U2FH_OK if touch is set to not needed. Also minor fixes to error output of authenticate.
  - Documentation fixes.
  - Compilation fixes on visual studio.
  - Add udev rules for Feitian devices.
  - Add optional cmake build.
  - Change license of the commandline tool to LGPL 2.1+
- remove udev.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
</package>
<package pkgid="ae6c019504b5535f52d11a0bed67fe234bf6673a27418c54c7792006f4abd1b3" name="libu2f-host-doc" arch="x86_64">
  <version epoch="0" ver="1.1.6" rel="lp150.2.3.1"/>
  <changelog author="t.gruner@katodev.de" date="1414497600">- Version 0.0 (released 2014-09-16)
  - Initial release.</changelog>
  <changelog author="t.gruner@katodev.de" date="1418126400">- Version 0.0.2 (released 2014-11-28)
  - Add more devices to udev.</changelog>
  <changelog author="t.gruner@katodev.de" date="1420718400">- Version 0.0.3 (released 2015-01-08)
  - Change license to LGPLv2+ for the library.
  - Some improvements to internal communication code.
  - Some debug mode improvements, from Bram Vandoren.</changelog>
  <changelog author="t.gruner@katodev.de" date="1422014400">- Version 0.0.4 (released 2015-01-22)
  - Add an exponential growing timeout for slow devices (PlugUp).</changelog>
  <changelog author="t.gruner@katodev.de" date="1441108800">- Version 1.0.0 (released 2015-08-27)
  - Add udev rules for older version of udev.
  - Add pam:// as an allowed protocol.
  - Stop using sleep(), use Sleep() on windows and usleep() on others.
  - Fixup tool name in help and manpage.
  - Add a timeout to the register and authenticate actions.</changelog>
  <changelog author="t.gruner@katodev.de" date="1441368000">- Fix path in u2f-host/u2f-host.h</changelog>
  <changelog author="t.gruner@katodev.de" date="1444132800">- Remove fix in u2f-host/u2f-host.h
- Cleanup .spec file</changelog>
  <changelog author="t.gruner@katodev.de" date="1455796800">- Version 1.1.0 (released 2016-02-15)
  - Add udev rules for more devices.
  - Don?t return success when no data is received.
  - Fix typos.
  - Make send_apdu send data like chrome does.
  - Don?t release json object that we don?t own no more.
  - Don?t do memcmp on uninitialized memory.
  - Add u2fh_authenticate2() and u2fh_register2().
  - Remove base64 padding (required by spec).
  - Use unsigned ints to prevent buffer overflows.</changelog>
  <changelog author="t.gruner@katodev.de" date="1458561600">- Version 1.1.1 (released 2016-03-14)
  - Use correct index in u2fh_devs_discover()
  - Fix an issue where we left the authenticate loop early.
  - Fix an issue where authenticate remembered which devices to skip.
  - Stop validating the scheme of the origin.
  - Fixup a crash in u2fh_devs_discover() with closing unplugged devices.
  - Documentation fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1458734400">- Avoid undesired blank lines at start of descriptions.
  Expand description. Trim filelist.</changelog>
  <changelog author="t.gruner@katodev.de" date="1463659200">- Add buildrequirement for libudev to select the rule for udev.
- Add udev directories in %files
- Add udev rule for Feitian ePass FIDO (udev.patch)
- Change License for the library</changelog>
  <changelog author="t.gruner@katodev.de" date="1476273600">- Version 1.1.3 (released 2016-10-04)
  - Added more u2f devices to the udev rulesets.
  - Fixup mac builds.
- Version 1.1.2 (released 2016-06-22)
  - Make authenticate return U2FH_OK if touch is set to not needed. Also minor fixes to error output of authenticate.
  - Documentation fixes.
  - Compilation fixes on visual studio.
  - Add udev rules for Feitian devices.
  - Add optional cmake build.
  - Change license of the commandline tool to LGPL 2.1+
- remove udev.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
</package>
<package pkgid="43fa37e0e7aa3068dfc0ce0c26b2d151725ae7ac0a7d08cd737816cc4fb6c67a" name="libu2f-host0" arch="x86_64">
  <version epoch="0" ver="1.1.6" rel="lp150.2.3.1"/>
  <changelog author="t.gruner@katodev.de" date="1414497600">- Version 0.0 (released 2014-09-16)
  - Initial release.</changelog>
  <changelog author="t.gruner@katodev.de" date="1418126400">- Version 0.0.2 (released 2014-11-28)
  - Add more devices to udev.</changelog>
  <changelog author="t.gruner@katodev.de" date="1420718400">- Version 0.0.3 (released 2015-01-08)
  - Change license to LGPLv2+ for the library.
  - Some improvements to internal communication code.
  - Some debug mode improvements, from Bram Vandoren.</changelog>
  <changelog author="t.gruner@katodev.de" date="1422014400">- Version 0.0.4 (released 2015-01-22)
  - Add an exponential growing timeout for slow devices (PlugUp).</changelog>
  <changelog author="t.gruner@katodev.de" date="1441108800">- Version 1.0.0 (released 2015-08-27)
  - Add udev rules for older version of udev.
  - Add pam:// as an allowed protocol.
  - Stop using sleep(), use Sleep() on windows and usleep() on others.
  - Fixup tool name in help and manpage.
  - Add a timeout to the register and authenticate actions.</changelog>
  <changelog author="t.gruner@katodev.de" date="1441368000">- Fix path in u2f-host/u2f-host.h</changelog>
  <changelog author="t.gruner@katodev.de" date="1444132800">- Remove fix in u2f-host/u2f-host.h
- Cleanup .spec file</changelog>
  <changelog author="t.gruner@katodev.de" date="1455796800">- Version 1.1.0 (released 2016-02-15)
  - Add udev rules for more devices.
  - Don?t return success when no data is received.
  - Fix typos.
  - Make send_apdu send data like chrome does.
  - Don?t release json object that we don?t own no more.
  - Don?t do memcmp on uninitialized memory.
  - Add u2fh_authenticate2() and u2fh_register2().
  - Remove base64 padding (required by spec).
  - Use unsigned ints to prevent buffer overflows.</changelog>
  <changelog author="t.gruner@katodev.de" date="1458561600">- Version 1.1.1 (released 2016-03-14)
  - Use correct index in u2fh_devs_discover()
  - Fix an issue where we left the authenticate loop early.
  - Fix an issue where authenticate remembered which devices to skip.
  - Stop validating the scheme of the origin.
  - Fixup a crash in u2fh_devs_discover() with closing unplugged devices.
  - Documentation fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1458734400">- Avoid undesired blank lines at start of descriptions.
  Expand description. Trim filelist.</changelog>
  <changelog author="t.gruner@katodev.de" date="1463659200">- Add buildrequirement for libudev to select the rule for udev.
- Add udev directories in %files
- Add udev rule for Feitian ePass FIDO (udev.patch)
- Change License for the library</changelog>
  <changelog author="t.gruner@katodev.de" date="1476273600">- Version 1.1.3 (released 2016-10-04)
  - Added more u2f devices to the udev rulesets.
  - Fixup mac builds.
- Version 1.1.2 (released 2016-06-22)
  - Make authenticate return U2FH_OK if touch is set to not needed. Also minor fixes to error output of authenticate.
  - Documentation fixes.
  - Compilation fixes on visual studio.
  - Add udev rules for Feitian devices.
  - Add optional cmake build.
  - Change license of the commandline tool to LGPL 2.1+
- remove udev.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
</package>
<package pkgid="97c35e5be31851e5185d35fced209d38df1342411ff3c41b8f1818e280687861" name="libu2f-server" arch="src">
  <version epoch="0" ver="1.0.1" rel="lp150.2.3.1"/>
  <changelog author="t.gruner@katodev.de" date="1420545600">- Version 0.0.0 (released 2014-11-25)
  - Initial release.</changelog>
  <changelog author="t.gruner@katodev.de" date="1436356800">- update to Version 1.0.0 (released 2015-07-01)
  - Improved compatibility for other architectures.</changelog>
  <changelog author="t.gruner@katodev.de" date="1437134400">- Version 1.0.1 (released 2015-07-09)
  - General fixes and improvements.
  - Changed pkg-config settings to accommodate changes in OpenSSL.</changelog>
  <changelog author="t.gruner@katodev.de" date="1444305600">- Change license to BSD-2-Clause
- Cleanup .spec file</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1530187200">- 0001-valgrind-shows-memory-errors-around-this-code-becaus.patch: fix memory
  corruption resulting in SEGFAULT, SIGBUS or an assertion in users of
  libu2f-server, most prominently in pam_u2f (bnc#1099232)</changelog>
</package>
<package pkgid="a8ce0c51944680790339ba75b8e7c2b43bbb28e0f1fd64bab4a8fb69a14a04e3" name="libu2f-server-devel" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="lp150.2.3.1"/>
  <changelog author="t.gruner@katodev.de" date="1420545600">- Version 0.0.0 (released 2014-11-25)
  - Initial release.</changelog>
  <changelog author="t.gruner@katodev.de" date="1436356800">- update to Version 1.0.0 (released 2015-07-01)
  - Improved compatibility for other architectures.</changelog>
  <changelog author="t.gruner@katodev.de" date="1437134400">- Version 1.0.1 (released 2015-07-09)
  - General fixes and improvements.
  - Changed pkg-config settings to accommodate changes in OpenSSL.</changelog>
  <changelog author="t.gruner@katodev.de" date="1444305600">- Change license to BSD-2-Clause
- Cleanup .spec file</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1530187200">- 0001-valgrind-shows-memory-errors-around-this-code-becaus.patch: fix memory
  corruption resulting in SEGFAULT, SIGBUS or an assertion in users of
  libu2f-server, most prominently in pam_u2f (bnc#1099232)</changelog>
</package>
<package pkgid="e65990dc6b024b9fce74a749c27dc4f6101b0196fbef2e5453ca1c76058d8b92" name="libu2f-server-doc" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="lp150.2.3.1"/>
  <changelog author="t.gruner@katodev.de" date="1420545600">- Version 0.0.0 (released 2014-11-25)
  - Initial release.</changelog>
  <changelog author="t.gruner@katodev.de" date="1436356800">- update to Version 1.0.0 (released 2015-07-01)
  - Improved compatibility for other architectures.</changelog>
  <changelog author="t.gruner@katodev.de" date="1437134400">- Version 1.0.1 (released 2015-07-09)
  - General fixes and improvements.
  - Changed pkg-config settings to accommodate changes in OpenSSL.</changelog>
  <changelog author="t.gruner@katodev.de" date="1444305600">- Change license to BSD-2-Clause
- Cleanup .spec file</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1530187200">- 0001-valgrind-shows-memory-errors-around-this-code-becaus.patch: fix memory
  corruption resulting in SEGFAULT, SIGBUS or an assertion in users of
  libu2f-server, most prominently in pam_u2f (bnc#1099232)</changelog>
</package>
<package pkgid="5cea3f3b95cf2e9c36a9878305ef1b86cc1e23de3a9269da1598f1c777a3dfb9" name="libu2f-server0" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="lp150.2.3.1"/>
  <changelog author="t.gruner@katodev.de" date="1420545600">- Version 0.0.0 (released 2014-11-25)
  - Initial release.</changelog>
  <changelog author="t.gruner@katodev.de" date="1436356800">- update to Version 1.0.0 (released 2015-07-01)
  - Improved compatibility for other architectures.</changelog>
  <changelog author="t.gruner@katodev.de" date="1437134400">- Version 1.0.1 (released 2015-07-09)
  - General fixes and improvements.
  - Changed pkg-config settings to accommodate changes in OpenSSL.</changelog>
  <changelog author="t.gruner@katodev.de" date="1444305600">- Change license to BSD-2-Clause
- Cleanup .spec file</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1530187200">- 0001-valgrind-shows-memory-errors-around-this-code-becaus.patch: fix memory
  corruption resulting in SEGFAULT, SIGBUS or an assertion in users of
  libu2f-server, most prominently in pam_u2f (bnc#1099232)</changelog>
</package>
<package pkgid="6968a5a463f4cb65e34970a6e202e8b0042d086f275ccc71a9453a77e674aab0" name="libudev-devel" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="b5d7b74c1ce964c91721ec85d1ddfec8aec4f6f5eb868742f616aa7f29fba9c6" name="libudev-devel" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="98aad45011397075d600b9a03a59029a1a0256051baa0b3020ceeb1b57535095" name="libudev-devel" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.9.1"/>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
  <changelog author="fbui@suse.com" date="1535025600">- Add 0002-udev-optionally-disable-the-generation-of-the-partla.patch (bsc#1089761)
  This patch adds "udev.no-partlabel-links" kernel command-line option
  that can be used to disable the generation of the by-partlabel
  symlinks regardless of the name used. This might be useful to
  prevent the generation of such symlinks on big setups where it could
  have a bad impact on the performance of the boot process.
  This will allow user to workaround bsc#1089761 whatever the
  partlabel used for disks (previous patch was only dealing with
  "primary" and "logical" names).
  DISCLAIMER: this new option must be used to workaround the previous
  bug *only* as it will be dropped as soon as the udev perf issue will
  be addressed.</changelog>
  <changelog author="fbui@suse.com" date="1535716800">- Import commit f26a4b03baf10f479951bdffa0f70eff6b5451c1
  5af898dfe core/service: rework the hold-off time over message
  a4aa80162 systemctl: load unit if needed in "systemctl is-active" (bsc#1102908)
  72f8ae153 core: don't freeze OnCalendar= timer units when the clock goes back a lot (bsc#1090944)
  ed49f225e man: SystemMaxUse= clarification in journald.conf(5) (bnc#1101040)
  c47c1fd5e core: in --user mode, report READY=1 as soon as basic.target is reached (#7102)
  ee9d1567c sd-bus: extend D-Bus authentication timeout considerably (#6813)</changelog>
  <changelog author="fbui@suse.com" date="1536926400">- Enable or disable machines.target according to the presets (bsc#1107941)
  Enable or disable machines.target according to the distro's presets.</changelog>
  <changelog author="fbui@suse.com" date="1537185600">- Import commit 5da416950ebe9c4d834ffb8382b0dcaee1941aa8
  9d0d3c2bb tmpfiles: don't adjust qgroups on existing subvolumes (bsc#1093753)
  828198433 socket-util: attempt SO_RCVBUFFORCE/SO_SNDBUFFORCE only if SO_RCVBUF/SO_SNDBUF fails (bsc#991901)
  043f75c0d user@.service: don't kill user manager at runlevel switch (bsc#1091677)
  21eae45f7 units: make sure user@.service runs with dbus still up
  27f607ce7 fix race between daemon-reload and other commands (v234) (bsc#1105031)
  83126307c nspawn: always use mode 555 for /sys (bsc#1107640)
  8a77eed0a cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990)
  7ebb0643c cryptsetup: add support for sector-size= option (#9936) (fate#325697)</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1539691200">- Ship systemd-sysv-install helper via the main package
  This script was part of systemd-sysvinit sub-package but it was
  wrong since systemd-sysv-install is a script used to redirect
  enable/disable operations to chkconfig when the unit targets are
  sysv init scripts. Therefore it's never been a SySV init tool.</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1540987200">- Import commit ceefdbf8afbc95dc2728999ce0cd7493411357e4
  43b790123 dhcp6: make sure we have enough space for the DHCP6 option header (bsc#1113632 CVE-2018-15688)
  96eba195c dhcp6: split assert_return() to be more debuggable when hit
  38c94b4bf core: skip unit deserialization and move to the next one when unit_deserialize() fails
  ef058a4f9 core: when deserializing state always use read_line(?, LONG_LINE_MAX, ?) (bsc#1113665 CVE-2018-15686)
  5581cd610 core: properly handle deserialization of unknown unit types (#6476)
  e2933aa92 core: don't create Requires for workdir if "missing ok" (bsc#1113083)
  794443b1c logind: use manager_get_user_by_pid() where appropriate
  986d63b00 logind: rework manager_get_{user|session}_by_pid() a bit
  83d0f831e login: fix user@.service case, so we don't allow nested sessions (#8051) (bsc#1112024)
  f2a73744c core: be more defensive if we can't determine per-connection socket peer (#7329)
  fc9172ff8 core: introduce systemd.early_core_pattern= kernel cmdline option
  cd2ed8f59 core: add missing 'continue' statement
  c6c6cc19c core/mount: fstype may be NULL
  1da4c5dd4 journald: don't ship systemd-journald-audit.socket (bsc#1109252)
  7bb6768b3 core: make "tmpfs" dependencies on swapfs a "default" dep, not an "implicit" (bsc#1110445)
  5aa2ccd69 mount: make sure we unmount tmpfs mounts before we deactivate swaps (#7076)
  57cc22fef detect-virt: do not try to read all of /proc/cpuinfo (bsc#1109197)
  3c4503ec6 emergency: make sure console password agents don't interfere with the emergency shell
  7a1eb19d7 man: document that 'nofail' also has an effect on ordering
  e0326fc41 journald: take leading spaces into account in syslog_parse_identifier
  a09b1acab journal: do not remove multiple spaces after identifier in syslog message
  e7a85abe6 syslog: fix segfault in syslog_parse_priority()
  6d66aca0f journal: fix syslog_parse_identifier()
  be15909f3 install: drop left-over debug message (#6913)</changelog>
</package>
<package pkgid="2fddbdc6e3c7765e9111fe9769e64d544b76b0b05161a28f5c76bb3f93344c86" name="libudev-devel-32bit" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="a68b7280e6fa7f393a716664d04ec0a5d77ab40f17ad6f0e818e668b8952fcba" name="libudev-devel-32bit" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="5ceb5d41c704dc090188d645bcc422cf6946c186f43cdf8b2caf5969af18162c" name="libudev-devel-32bit" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.9.1"/>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
  <changelog author="fbui@suse.com" date="1535025600">- Add 0002-udev-optionally-disable-the-generation-of-the-partla.patch (bsc#1089761)
  This patch adds "udev.no-partlabel-links" kernel command-line option
  that can be used to disable the generation of the by-partlabel
  symlinks regardless of the name used. This might be useful to
  prevent the generation of such symlinks on big setups where it could
  have a bad impact on the performance of the boot process.
  This will allow user to workaround bsc#1089761 whatever the
  partlabel used for disks (previous patch was only dealing with
  "primary" and "logical" names).
  DISCLAIMER: this new option must be used to workaround the previous
  bug *only* as it will be dropped as soon as the udev perf issue will
  be addressed.</changelog>
  <changelog author="fbui@suse.com" date="1535716800">- Import commit f26a4b03baf10f479951bdffa0f70eff6b5451c1
  5af898dfe core/service: rework the hold-off time over message
  a4aa80162 systemctl: load unit if needed in "systemctl is-active" (bsc#1102908)
  72f8ae153 core: don't freeze OnCalendar= timer units when the clock goes back a lot (bsc#1090944)
  ed49f225e man: SystemMaxUse= clarification in journald.conf(5) (bnc#1101040)
  c47c1fd5e core: in --user mode, report READY=1 as soon as basic.target is reached (#7102)
  ee9d1567c sd-bus: extend D-Bus authentication timeout considerably (#6813)</changelog>
  <changelog author="fbui@suse.com" date="1536926400">- Enable or disable machines.target according to the presets (bsc#1107941)
  Enable or disable machines.target according to the distro's presets.</changelog>
  <changelog author="fbui@suse.com" date="1537185600">- Import commit 5da416950ebe9c4d834ffb8382b0dcaee1941aa8
  9d0d3c2bb tmpfiles: don't adjust qgroups on existing subvolumes (bsc#1093753)
  828198433 socket-util: attempt SO_RCVBUFFORCE/SO_SNDBUFFORCE only if SO_RCVBUF/SO_SNDBUF fails (bsc#991901)
  043f75c0d user@.service: don't kill user manager at runlevel switch (bsc#1091677)
  21eae45f7 units: make sure user@.service runs with dbus still up
  27f607ce7 fix race between daemon-reload and other commands (v234) (bsc#1105031)
  83126307c nspawn: always use mode 555 for /sys (bsc#1107640)
  8a77eed0a cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990)
  7ebb0643c cryptsetup: add support for sector-size= option (#9936) (fate#325697)</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1539691200">- Ship systemd-sysv-install helper via the main package
  This script was part of systemd-sysvinit sub-package but it was
  wrong since systemd-sysv-install is a script used to redirect
  enable/disable operations to chkconfig when the unit targets are
  sysv init scripts. Therefore it's never been a SySV init tool.</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1540987200">- Import commit ceefdbf8afbc95dc2728999ce0cd7493411357e4
  43b790123 dhcp6: make sure we have enough space for the DHCP6 option header (bsc#1113632 CVE-2018-15688)
  96eba195c dhcp6: split assert_return() to be more debuggable when hit
  38c94b4bf core: skip unit deserialization and move to the next one when unit_deserialize() fails
  ef058a4f9 core: when deserializing state always use read_line(?, LONG_LINE_MAX, ?) (bsc#1113665 CVE-2018-15686)
  5581cd610 core: properly handle deserialization of unknown unit types (#6476)
  e2933aa92 core: don't create Requires for workdir if "missing ok" (bsc#1113083)
  794443b1c logind: use manager_get_user_by_pid() where appropriate
  986d63b00 logind: rework manager_get_{user|session}_by_pid() a bit
  83d0f831e login: fix user@.service case, so we don't allow nested sessions (#8051) (bsc#1112024)
  f2a73744c core: be more defensive if we can't determine per-connection socket peer (#7329)
  fc9172ff8 core: introduce systemd.early_core_pattern= kernel cmdline option
  cd2ed8f59 core: add missing 'continue' statement
  c6c6cc19c core/mount: fstype may be NULL
  1da4c5dd4 journald: don't ship systemd-journald-audit.socket (bsc#1109252)
  7bb6768b3 core: make "tmpfs" dependencies on swapfs a "default" dep, not an "implicit" (bsc#1110445)
  5aa2ccd69 mount: make sure we unmount tmpfs mounts before we deactivate swaps (#7076)
  57cc22fef detect-virt: do not try to read all of /proc/cpuinfo (bsc#1109197)
  3c4503ec6 emergency: make sure console password agents don't interfere with the emergency shell
  7a1eb19d7 man: document that 'nofail' also has an effect on ordering
  e0326fc41 journald: take leading spaces into account in syslog_parse_identifier
  a09b1acab journal: do not remove multiple spaces after identifier in syslog message
  e7a85abe6 syslog: fix segfault in syslog_parse_priority()
  6d66aca0f journal: fix syslog_parse_identifier()
  be15909f3 install: drop left-over debug message (#6913)</changelog>
</package>
<package pkgid="d8b067f337db8be9279655e23bce7fcca1c2c6c12a8ab296deb8460a7123ebb0" name="libudev-mini-devel" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="5d228f19bd26887ab077f41ce4984e72c4b28c1d226950fb6c5b57ef28d60c28" name="libudev-mini-devel" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="5fef9128511c8cb4317dec2c7c3eed28815215ef69e16dd1652e00417c6f71d0" name="libudev-mini-devel" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.9.1"/>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
  <changelog author="fbui@suse.com" date="1535025600">- Add 0002-udev-optionally-disable-the-generation-of-the-partla.patch (bsc#1089761)
  This patch adds "udev.no-partlabel-links" kernel command-line option
  that can be used to disable the generation of the by-partlabel
  symlinks regardless of the name used. This might be useful to
  prevent the generation of such symlinks on big setups where it could
  have a bad impact on the performance of the boot process.
  This will allow user to workaround bsc#1089761 whatever the
  partlabel used for disks (previous patch was only dealing with
  "primary" and "logical" names).
  DISCLAIMER: this new option must be used to workaround the previous
  bug *only* as it will be dropped as soon as the udev perf issue will
  be addressed.</changelog>
  <changelog author="fbui@suse.com" date="1535716800">- Import commit f26a4b03baf10f479951bdffa0f70eff6b5451c1
  5af898dfe core/service: rework the hold-off time over message
  a4aa80162 systemctl: load unit if needed in "systemctl is-active" (bsc#1102908)
  72f8ae153 core: don't freeze OnCalendar= timer units when the clock goes back a lot (bsc#1090944)
  ed49f225e man: SystemMaxUse= clarification in journald.conf(5) (bnc#1101040)
  c47c1fd5e core: in --user mode, report READY=1 as soon as basic.target is reached (#7102)
  ee9d1567c sd-bus: extend D-Bus authentication timeout considerably (#6813)</changelog>
  <changelog author="fbui@suse.com" date="1536926400">- Enable or disable machines.target according to the presets (bsc#1107941)
  Enable or disable machines.target according to the distro's presets.</changelog>
  <changelog author="fbui@suse.com" date="1537185600">- Import commit 5da416950ebe9c4d834ffb8382b0dcaee1941aa8
  9d0d3c2bb tmpfiles: don't adjust qgroups on existing subvolumes (bsc#1093753)
  828198433 socket-util: attempt SO_RCVBUFFORCE/SO_SNDBUFFORCE only if SO_RCVBUF/SO_SNDBUF fails (bsc#991901)
  043f75c0d user@.service: don't kill user manager at runlevel switch (bsc#1091677)
  21eae45f7 units: make sure user@.service runs with dbus still up
  27f607ce7 fix race between daemon-reload and other commands (v234) (bsc#1105031)
  83126307c nspawn: always use mode 555 for /sys (bsc#1107640)
  8a77eed0a cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990)
  7ebb0643c cryptsetup: add support for sector-size= option (#9936) (fate#325697)</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1539691200">- Ship systemd-sysv-install helper via the main package
  This script was part of systemd-sysvinit sub-package but it was
  wrong since systemd-sysv-install is a script used to redirect
  enable/disable operations to chkconfig when the unit targets are
  sysv init scripts. Therefore it's never been a SySV init tool.</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1540987200">- Import commit ceefdbf8afbc95dc2728999ce0cd7493411357e4
  43b790123 dhcp6: make sure we have enough space for the DHCP6 option header (bsc#1113632 CVE-2018-15688)
  96eba195c dhcp6: split assert_return() to be more debuggable when hit
  38c94b4bf core: skip unit deserialization and move to the next one when unit_deserialize() fails
  ef058a4f9 core: when deserializing state always use read_line(?, LONG_LINE_MAX, ?) (bsc#1113665 CVE-2018-15686)
  5581cd610 core: properly handle deserialization of unknown unit types (#6476)
  e2933aa92 core: don't create Requires for workdir if "missing ok" (bsc#1113083)
  794443b1c logind: use manager_get_user_by_pid() where appropriate
  986d63b00 logind: rework manager_get_{user|session}_by_pid() a bit
  83d0f831e login: fix user@.service case, so we don't allow nested sessions (#8051) (bsc#1112024)
  f2a73744c core: be more defensive if we can't determine per-connection socket peer (#7329)
  fc9172ff8 core: introduce systemd.early_core_pattern= kernel cmdline option
  cd2ed8f59 core: add missing 'continue' statement
  c6c6cc19c core/mount: fstype may be NULL
  1da4c5dd4 journald: don't ship systemd-journald-audit.socket (bsc#1109252)
  7bb6768b3 core: make "tmpfs" dependencies on swapfs a "default" dep, not an "implicit" (bsc#1110445)
  5aa2ccd69 mount: make sure we unmount tmpfs mounts before we deactivate swaps (#7076)
  57cc22fef detect-virt: do not try to read all of /proc/cpuinfo (bsc#1109197)
  3c4503ec6 emergency: make sure console password agents don't interfere with the emergency shell
  7a1eb19d7 man: document that 'nofail' also has an effect on ordering
  e0326fc41 journald: take leading spaces into account in syslog_parse_identifier
  a09b1acab journal: do not remove multiple spaces after identifier in syslog message
  e7a85abe6 syslog: fix segfault in syslog_parse_priority()
  6d66aca0f journal: fix syslog_parse_identifier()
  be15909f3 install: drop left-over debug message (#6913)</changelog>
</package>
<package pkgid="492f7cd3f16a88bdd61176c3268071fbcff2849583cc2b2881af620b876ff5a7" name="libudev-mini1" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="dc1daf77ae99f2439cf1226a24df140ccbaf7e206d7266ee3ced13d8432f4563" name="libudev-mini1" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="d3719a22e1d9452a7d65d697d42d0ab1c77e30fe4e80e0a676d0cf7bafbf8aea" name="libudev-mini1" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.9.1"/>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
  <changelog author="fbui@suse.com" date="1535025600">- Add 0002-udev-optionally-disable-the-generation-of-the-partla.patch (bsc#1089761)
  This patch adds "udev.no-partlabel-links" kernel command-line option
  that can be used to disable the generation of the by-partlabel
  symlinks regardless of the name used. This might be useful to
  prevent the generation of such symlinks on big setups where it could
  have a bad impact on the performance of the boot process.
  This will allow user to workaround bsc#1089761 whatever the
  partlabel used for disks (previous patch was only dealing with
  "primary" and "logical" names).
  DISCLAIMER: this new option must be used to workaround the previous
  bug *only* as it will be dropped as soon as the udev perf issue will
  be addressed.</changelog>
  <changelog author="fbui@suse.com" date="1535716800">- Import commit f26a4b03baf10f479951bdffa0f70eff6b5451c1
  5af898dfe core/service: rework the hold-off time over message
  a4aa80162 systemctl: load unit if needed in "systemctl is-active" (bsc#1102908)
  72f8ae153 core: don't freeze OnCalendar= timer units when the clock goes back a lot (bsc#1090944)
  ed49f225e man: SystemMaxUse= clarification in journald.conf(5) (bnc#1101040)
  c47c1fd5e core: in --user mode, report READY=1 as soon as basic.target is reached (#7102)
  ee9d1567c sd-bus: extend D-Bus authentication timeout considerably (#6813)</changelog>
  <changelog author="fbui@suse.com" date="1536926400">- Enable or disable machines.target according to the presets (bsc#1107941)
  Enable or disable machines.target according to the distro's presets.</changelog>
  <changelog author="fbui@suse.com" date="1537185600">- Import commit 5da416950ebe9c4d834ffb8382b0dcaee1941aa8
  9d0d3c2bb tmpfiles: don't adjust qgroups on existing subvolumes (bsc#1093753)
  828198433 socket-util: attempt SO_RCVBUFFORCE/SO_SNDBUFFORCE only if SO_RCVBUF/SO_SNDBUF fails (bsc#991901)
  043f75c0d user@.service: don't kill user manager at runlevel switch (bsc#1091677)
  21eae45f7 units: make sure user@.service runs with dbus still up
  27f607ce7 fix race between daemon-reload and other commands (v234) (bsc#1105031)
  83126307c nspawn: always use mode 555 for /sys (bsc#1107640)
  8a77eed0a cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990)
  7ebb0643c cryptsetup: add support for sector-size= option (#9936) (fate#325697)</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1539691200">- Ship systemd-sysv-install helper via the main package
  This script was part of systemd-sysvinit sub-package but it was
  wrong since systemd-sysv-install is a script used to redirect
  enable/disable operations to chkconfig when the unit targets are
  sysv init scripts. Therefore it's never been a SySV init tool.</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1540987200">- Import commit ceefdbf8afbc95dc2728999ce0cd7493411357e4
  43b790123 dhcp6: make sure we have enough space for the DHCP6 option header (bsc#1113632 CVE-2018-15688)
  96eba195c dhcp6: split assert_return() to be more debuggable when hit
  38c94b4bf core: skip unit deserialization and move to the next one when unit_deserialize() fails
  ef058a4f9 core: when deserializing state always use read_line(?, LONG_LINE_MAX, ?) (bsc#1113665 CVE-2018-15686)
  5581cd610 core: properly handle deserialization of unknown unit types (#6476)
  e2933aa92 core: don't create Requires for workdir if "missing ok" (bsc#1113083)
  794443b1c logind: use manager_get_user_by_pid() where appropriate
  986d63b00 logind: rework manager_get_{user|session}_by_pid() a bit
  83d0f831e login: fix user@.service case, so we don't allow nested sessions (#8051) (bsc#1112024)
  f2a73744c core: be more defensive if we can't determine per-connection socket peer (#7329)
  fc9172ff8 core: introduce systemd.early_core_pattern= kernel cmdline option
  cd2ed8f59 core: add missing 'continue' statement
  c6c6cc19c core/mount: fstype may be NULL
  1da4c5dd4 journald: don't ship systemd-journald-audit.socket (bsc#1109252)
  7bb6768b3 core: make "tmpfs" dependencies on swapfs a "default" dep, not an "implicit" (bsc#1110445)
  5aa2ccd69 mount: make sure we unmount tmpfs mounts before we deactivate swaps (#7076)
  57cc22fef detect-virt: do not try to read all of /proc/cpuinfo (bsc#1109197)
  3c4503ec6 emergency: make sure console password agents don't interfere with the emergency shell
  7a1eb19d7 man: document that 'nofail' also has an effect on ordering
  e0326fc41 journald: take leading spaces into account in syslog_parse_identifier
  a09b1acab journal: do not remove multiple spaces after identifier in syslog message
  e7a85abe6 syslog: fix segfault in syslog_parse_priority()
  6d66aca0f journal: fix syslog_parse_identifier()
  be15909f3 install: drop left-over debug message (#6913)</changelog>
</package>
<package pkgid="3244817a48692cf85bc3d392e96124acbdeb82775b23feb1582309dc7788df86" name="libudev1" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="53d42ebca20feec5f206adfc8375e08d249828487a1d81957d10c9dd848e0850" name="libudev1" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="ac1e8ae82201300c7d3051c7624dc90cf0cbf915335cd078f0e32a57c1399053" name="libudev1" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.9.1"/>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
  <changelog author="fbui@suse.com" date="1535025600">- Add 0002-udev-optionally-disable-the-generation-of-the-partla.patch (bsc#1089761)
  This patch adds "udev.no-partlabel-links" kernel command-line option
  that can be used to disable the generation of the by-partlabel
  symlinks regardless of the name used. This might be useful to
  prevent the generation of such symlinks on big setups where it could
  have a bad impact on the performance of the boot process.
  This will allow user to workaround bsc#1089761 whatever the
  partlabel used for disks (previous patch was only dealing with
  "primary" and "logical" names).
  DISCLAIMER: this new option must be used to workaround the previous
  bug *only* as it will be dropped as soon as the udev perf issue will
  be addressed.</changelog>
  <changelog author="fbui@suse.com" date="1535716800">- Import commit f26a4b03baf10f479951bdffa0f70eff6b5451c1
  5af898dfe core/service: rework the hold-off time over message
  a4aa80162 systemctl: load unit if needed in "systemctl is-active" (bsc#1102908)
  72f8ae153 core: don't freeze OnCalendar= timer units when the clock goes back a lot (bsc#1090944)
  ed49f225e man: SystemMaxUse= clarification in journald.conf(5) (bnc#1101040)
  c47c1fd5e core: in --user mode, report READY=1 as soon as basic.target is reached (#7102)
  ee9d1567c sd-bus: extend D-Bus authentication timeout considerably (#6813)</changelog>
  <changelog author="fbui@suse.com" date="1536926400">- Enable or disable machines.target according to the presets (bsc#1107941)
  Enable or disable machines.target according to the distro's presets.</changelog>
  <changelog author="fbui@suse.com" date="1537185600">- Import commit 5da416950ebe9c4d834ffb8382b0dcaee1941aa8
  9d0d3c2bb tmpfiles: don't adjust qgroups on existing subvolumes (bsc#1093753)
  828198433 socket-util: attempt SO_RCVBUFFORCE/SO_SNDBUFFORCE only if SO_RCVBUF/SO_SNDBUF fails (bsc#991901)
  043f75c0d user@.service: don't kill user manager at runlevel switch (bsc#1091677)
  21eae45f7 units: make sure user@.service runs with dbus still up
  27f607ce7 fix race between daemon-reload and other commands (v234) (bsc#1105031)
  83126307c nspawn: always use mode 555 for /sys (bsc#1107640)
  8a77eed0a cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990)
  7ebb0643c cryptsetup: add support for sector-size= option (#9936) (fate#325697)</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1539691200">- Ship systemd-sysv-install helper via the main package
  This script was part of systemd-sysvinit sub-package but it was
  wrong since systemd-sysv-install is a script used to redirect
  enable/disable operations to chkconfig when the unit targets are
  sysv init scripts. Therefore it's never been a SySV init tool.</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1540987200">- Import commit ceefdbf8afbc95dc2728999ce0cd7493411357e4
  43b790123 dhcp6: make sure we have enough space for the DHCP6 option header (bsc#1113632 CVE-2018-15688)
  96eba195c dhcp6: split assert_return() to be more debuggable when hit
  38c94b4bf core: skip unit deserialization and move to the next one when unit_deserialize() fails
  ef058a4f9 core: when deserializing state always use read_line(?, LONG_LINE_MAX, ?) (bsc#1113665 CVE-2018-15686)
  5581cd610 core: properly handle deserialization of unknown unit types (#6476)
  e2933aa92 core: don't create Requires for workdir if "missing ok" (bsc#1113083)
  794443b1c logind: use manager_get_user_by_pid() where appropriate
  986d63b00 logind: rework manager_get_{user|session}_by_pid() a bit
  83d0f831e login: fix user@.service case, so we don't allow nested sessions (#8051) (bsc#1112024)
  f2a73744c core: be more defensive if we can't determine per-connection socket peer (#7329)
  fc9172ff8 core: introduce systemd.early_core_pattern= kernel cmdline option
  cd2ed8f59 core: add missing 'continue' statement
  c6c6cc19c core/mount: fstype may be NULL
  1da4c5dd4 journald: don't ship systemd-journald-audit.socket (bsc#1109252)
  7bb6768b3 core: make "tmpfs" dependencies on swapfs a "default" dep, not an "implicit" (bsc#1110445)
  5aa2ccd69 mount: make sure we unmount tmpfs mounts before we deactivate swaps (#7076)
  57cc22fef detect-virt: do not try to read all of /proc/cpuinfo (bsc#1109197)
  3c4503ec6 emergency: make sure console password agents don't interfere with the emergency shell
  7a1eb19d7 man: document that 'nofail' also has an effect on ordering
  e0326fc41 journald: take leading spaces into account in syslog_parse_identifier
  a09b1acab journal: do not remove multiple spaces after identifier in syslog message
  e7a85abe6 syslog: fix segfault in syslog_parse_priority()
  6d66aca0f journal: fix syslog_parse_identifier()
  be15909f3 install: drop left-over debug message (#6913)</changelog>
</package>
<package pkgid="4eb4f5a5f6a8d302e6cafe8c9175de5ed8b11f0657ac7b2d161be2890a039d83" name="libudev1-32bit" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="a42f0ce91693b6ea6938907982feca7e971322509b76cc0966fae42f90b7447e" name="libudev1-32bit" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="d8a7dd71975fb576c7babf352d5bf93cfc48f947d85c8a93660f49d707c6a358" name="libudev1-32bit" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.9.1"/>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
  <changelog author="fbui@suse.com" date="1535025600">- Add 0002-udev-optionally-disable-the-generation-of-the-partla.patch (bsc#1089761)
  This patch adds "udev.no-partlabel-links" kernel command-line option
  that can be used to disable the generation of the by-partlabel
  symlinks regardless of the name used. This might be useful to
  prevent the generation of such symlinks on big setups where it could
  have a bad impact on the performance of the boot process.
  This will allow user to workaround bsc#1089761 whatever the
  partlabel used for disks (previous patch was only dealing with
  "primary" and "logical" names).
  DISCLAIMER: this new option must be used to workaround the previous
  bug *only* as it will be dropped as soon as the udev perf issue will
  be addressed.</changelog>
  <changelog author="fbui@suse.com" date="1535716800">- Import commit f26a4b03baf10f479951bdffa0f70eff6b5451c1
  5af898dfe core/service: rework the hold-off time over message
  a4aa80162 systemctl: load unit if needed in "systemctl is-active" (bsc#1102908)
  72f8ae153 core: don't freeze OnCalendar= timer units when the clock goes back a lot (bsc#1090944)
  ed49f225e man: SystemMaxUse= clarification in journald.conf(5) (bnc#1101040)
  c47c1fd5e core: in --user mode, report READY=1 as soon as basic.target is reached (#7102)
  ee9d1567c sd-bus: extend D-Bus authentication timeout considerably (#6813)</changelog>
  <changelog author="fbui@suse.com" date="1536926400">- Enable or disable machines.target according to the presets (bsc#1107941)
  Enable or disable machines.target according to the distro's presets.</changelog>
  <changelog author="fbui@suse.com" date="1537185600">- Import commit 5da416950ebe9c4d834ffb8382b0dcaee1941aa8
  9d0d3c2bb tmpfiles: don't adjust qgroups on existing subvolumes (bsc#1093753)
  828198433 socket-util: attempt SO_RCVBUFFORCE/SO_SNDBUFFORCE only if SO_RCVBUF/SO_SNDBUF fails (bsc#991901)
  043f75c0d user@.service: don't kill user manager at runlevel switch (bsc#1091677)
  21eae45f7 units: make sure user@.service runs with dbus still up
  27f607ce7 fix race between daemon-reload and other commands (v234) (bsc#1105031)
  83126307c nspawn: always use mode 555 for /sys (bsc#1107640)
  8a77eed0a cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990)
  7ebb0643c cryptsetup: add support for sector-size= option (#9936) (fate#325697)</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1539691200">- Ship systemd-sysv-install helper via the main package
  This script was part of systemd-sysvinit sub-package but it was
  wrong since systemd-sysv-install is a script used to redirect
  enable/disable operations to chkconfig when the unit targets are
  sysv init scripts. Therefore it's never been a SySV init tool.</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1540987200">- Import commit ceefdbf8afbc95dc2728999ce0cd7493411357e4
  43b790123 dhcp6: make sure we have enough space for the DHCP6 option header (bsc#1113632 CVE-2018-15688)
  96eba195c dhcp6: split assert_return() to be more debuggable when hit
  38c94b4bf core: skip unit deserialization and move to the next one when unit_deserialize() fails
  ef058a4f9 core: when deserializing state always use read_line(?, LONG_LINE_MAX, ?) (bsc#1113665 CVE-2018-15686)
  5581cd610 core: properly handle deserialization of unknown unit types (#6476)
  e2933aa92 core: don't create Requires for workdir if "missing ok" (bsc#1113083)
  794443b1c logind: use manager_get_user_by_pid() where appropriate
  986d63b00 logind: rework manager_get_{user|session}_by_pid() a bit
  83d0f831e login: fix user@.service case, so we don't allow nested sessions (#8051) (bsc#1112024)
  f2a73744c core: be more defensive if we can't determine per-connection socket peer (#7329)
  fc9172ff8 core: introduce systemd.early_core_pattern= kernel cmdline option
  cd2ed8f59 core: add missing 'continue' statement
  c6c6cc19c core/mount: fstype may be NULL
  1da4c5dd4 journald: don't ship systemd-journald-audit.socket (bsc#1109252)
  7bb6768b3 core: make "tmpfs" dependencies on swapfs a "default" dep, not an "implicit" (bsc#1110445)
  5aa2ccd69 mount: make sure we unmount tmpfs mounts before we deactivate swaps (#7076)
  57cc22fef detect-virt: do not try to read all of /proc/cpuinfo (bsc#1109197)
  3c4503ec6 emergency: make sure console password agents don't interfere with the emergency shell
  7a1eb19d7 man: document that 'nofail' also has an effect on ordering
  e0326fc41 journald: take leading spaces into account in syslog_parse_identifier
  a09b1acab journal: do not remove multiple spaces after identifier in syslog message
  e7a85abe6 syslog: fix segfault in syslog_parse_priority()
  6d66aca0f journal: fix syslog_parse_identifier()
  be15909f3 install: drop left-over debug message (#6913)</changelog>
</package>
<package pkgid="eefa35bbfd00e0457d36e405ce0424684470a511d226bed42a2f93db28ffc6f0" name="libudf0" arch="x86_64">
  <version epoch="0" ver="0.94" rel="lp150.5.3.1"/>
  <changelog author="sagiben@gmail.com" date="1296388800">- Updated to version 0.82
- Upstream changes :
  * Remove all uses of CDIO_MIN_DRIVER,
  CDIO_MAX_DRIVER, CDIO_MIN_DEVICE_DRIVER or CDIO_MAX_DEVICE_DRIVER.
  * FreeBSD get_media_changed fixes
  * MingGW/Msys compilation issues
  * Add OS/2 driver
  * Cross compilations fixes and uclinix is like GNU/Linux
  * Numerous other bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1297166400">- Rename Shared Object package to libcdio12, conforming the
  libraries name.
- Adjust rpmlintrc to only ignore shared lib names of the -mini
  packages. This avoids missing shlib renames for the 'main'
  package.</changelog>
  <changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- one less _service file for factory</changelog>
  <changelog author="coolo@suse.com" date="1321185601">- add libtool as buildrequire</changelog>
  <changelog author="davejplater@gmail.com" date="1333713600">- Update to libcdio-0.83, removed need for libcdio-mini by adding
  linker library paths to sources in the spec file build section.
- Upstream changes:
  * Add retrieval SCSI sense reply from the most-recent MMC command.
  * Add exclusive read/write access for devices which is used for
  experimental writing/burning. Currently only on GNU/Linux and FreeBSD.
  * MMC bug fixes
  * FreeBSD drive list now shows empty drives.
  * Add ability to retrieve SCSI tuple for a name and/or fake one up for
  programs that wanto to cd-record compatible.
  * Tolerance for OS's without timezone in their struct tm (e.g. Solaris)
  added iso9660_set_{d,l}time_with_timezone
  * Add mmc_get_disk_erasable
  * Update MMC Feature Profile list, DVD Book types
  * Reduce range of seek in paranoia_seek to be int32_t
  * Remove some potential flaws found by Coverty's static analysis tool
  * Add ISRC track info to cd-info output.
  * Don't wrap-around volume adjustment for cdda-player.
  * Handle double-byte strings in CD-text
  * --no-header on cd-info omits copyright and warranty</changelog>
  <changelog author="davejplater@gmail.com" date="1334491200">- Update to 0.83.git from 14/04/2012 git head.
- libcdio-paranoia separated from libcdio due to license issues
  see bnc#756564</changelog>
  <changelog author="davejplater@gmail.com" date="1337342400">- Split cdio-utils to a linked package to prevent cycles due to
  utils dependancy on libvcdinfo and vcdimagers dependency on
  libcdio.</changelog>
  <changelog author="coolo@suse.com" date="1337947200">- enable rock support - for some bizzare reason it's not default
  (the help is saying otherwise, but it's obvious if you try to
  read from kiwi live cds)</changelog>
  <changelog author="coolo@suse.com" date="1347019200">- add makeinfo as explicit buildrequires</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="davejplater@gmail.com" date="1364904000">- Add url to spec source field to enable local source service.</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
</package>
<package pkgid="cf809b3066d048e1e2cfbde957716f2753a9d88da86bba028521ccd36f3d03ea" name="libudf0-32bit" arch="x86_64">
  <version epoch="0" ver="0.94" rel="lp150.5.3.1"/>
  <changelog author="sagiben@gmail.com" date="1296388800">- Updated to version 0.82
- Upstream changes :
  * Remove all uses of CDIO_MIN_DRIVER,
  CDIO_MAX_DRIVER, CDIO_MIN_DEVICE_DRIVER or CDIO_MAX_DEVICE_DRIVER.
  * FreeBSD get_media_changed fixes
  * MingGW/Msys compilation issues
  * Add OS/2 driver
  * Cross compilations fixes and uclinix is like GNU/Linux
  * Numerous other bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1297166400">- Rename Shared Object package to libcdio12, conforming the
  libraries name.
- Adjust rpmlintrc to only ignore shared lib names of the -mini
  packages. This avoids missing shlib renames for the 'main'
  package.</changelog>
  <changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- one less _service file for factory</changelog>
  <changelog author="coolo@suse.com" date="1321185601">- add libtool as buildrequire</changelog>
  <changelog author="davejplater@gmail.com" date="1333713600">- Update to libcdio-0.83, removed need for libcdio-mini by adding
  linker library paths to sources in the spec file build section.
- Upstream changes:
  * Add retrieval SCSI sense reply from the most-recent MMC command.
  * Add exclusive read/write access for devices which is used for
  experimental writing/burning. Currently only on GNU/Linux and FreeBSD.
  * MMC bug fixes
  * FreeBSD drive list now shows empty drives.
  * Add ability to retrieve SCSI tuple for a name and/or fake one up for
  programs that wanto to cd-record compatible.
  * Tolerance for OS's without timezone in their struct tm (e.g. Solaris)
  added iso9660_set_{d,l}time_with_timezone
  * Add mmc_get_disk_erasable
  * Update MMC Feature Profile list, DVD Book types
  * Reduce range of seek in paranoia_seek to be int32_t
  * Remove some potential flaws found by Coverty's static analysis tool
  * Add ISRC track info to cd-info output.
  * Don't wrap-around volume adjustment for cdda-player.
  * Handle double-byte strings in CD-text
  * --no-header on cd-info omits copyright and warranty</changelog>
  <changelog author="davejplater@gmail.com" date="1334491200">- Update to 0.83.git from 14/04/2012 git head.
- libcdio-paranoia separated from libcdio due to license issues
  see bnc#756564</changelog>
  <changelog author="davejplater@gmail.com" date="1337342400">- Split cdio-utils to a linked package to prevent cycles due to
  utils dependancy on libvcdinfo and vcdimagers dependency on
  libcdio.</changelog>
  <changelog author="coolo@suse.com" date="1337947200">- enable rock support - for some bizzare reason it's not default
  (the help is saying otherwise, but it's obvious if you try to
  read from kiwi live cds)</changelog>
  <changelog author="coolo@suse.com" date="1347019200">- add makeinfo as explicit buildrequires</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="davejplater@gmail.com" date="1364904000">- Add url to spec source field to enable local source service.</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
</package>
<package pkgid="ca6b66be49684647949825af18b1d05a02ed927871f59361df2e57d38df9e374" name="libudisks2-0" arch="x86_64">
  <version epoch="0" ver="2.6.5" rel="lp150.2.3.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1357560000">- Fix name of polkit action (fdo#58629):
  modify-device-system-other-seat -&gt; modify-device-other-seat</changelog>
  <changelog author="vuntz@opensuse.org" date="1358424000">- Really apply fix_polkit_action_name.diff.</changelog>
  <changelog author="dimstar@opensuse.org" date="1358424001">- Update to version 2.0.91:
  + Don't bail in MD-RAID file monitor event handler.
  + Add MDRaid:RequestSyncAction() method.
  + Add MDRaid:SyncRate and MDRaid:SyncRemainingTime properties.
  + Get the MD-RAID sync rate from the right file.
  + Pull new translations from Transifex.
  + Use correct polkit action.
  + Fix up comments in polkit policy file.
- Changes from version 2.0.90:
  + Initial MD-RAID support.
- Drop fix_polkit_action_name.diff: it's not applied anyway.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1362312000">- Update to version 2.0.92:
  + Fix out of source build - set xsltproc path.
  + Fold UDisksPersistentStore class into UDisksCleanup.
  + Rename UDisksCleanup to UDisksState.
  + Don't leak UDisksLinuxDevice when handling uevent.
  + Check for NULL pointer when creating MD-RAID array.
  + Use own udev namespace for MD-RAID properties.
  + Introduce UDISKS_FILESYSTEM_SHARED=1 to use /media for
    mounting.
  + Don't wipe extended partitions.
  + Make sure logical partitions stay within the extended
    partition.</changelog>
  <changelog author="dimstar@opensuse.org" date="1363608000">- Update to version 2.1.0:
  + mdraid: Remove spurious argument for the format.
  + Support broken setups where ID_SERIAL is available but
    ID_SERIAL_SHORT is not.
  + Call the right D-Bus completion routines.
  + integration-test: Update for mkntfs.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1377086400">- Update to version 2.1.1:
  + Properly identify firewire devices as non-system devices.
  + Identify Lexar Dual Slot USB 3.0 Reader Professional as a card
    reader.
  + Identify Transcend USB 3.0 Multi-Card reader as such.
  + Promote ZFS partition type to generic.
  + UDisksClient: Make it possible to get part desc based on the
    part table subtype.
  + Add ChromeOS partition types.
  + Use new SSD icon from g-i-t-e.
  + Identify Patriot Memory USB sticks as thumb drives.
  + Fix test for logind availability.
  + Fix hiding of "WD SmartWare" partitions.
  + integration-test: Fix for nonexisting /run/udev/rules.d/.
  + integration-test: For VFAT, ignore case for label comparison.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1385294400">- define _udevrulesdir only if not already defined
- run %udev_rules_update, if defined.</changelog>
  <changelog author="pwieczorkiewicz@suse.com" date="1386676800">- Added udisks2-20131026-removable-devices-polkit-auth.patch.
  It adds polkit authorization variables for removable media, which
  allow restricting or granting access to removable media based on
  its type using polkit authorization rules (fate#312966 fdo#72122).</changelog>
  <changelog author="zaitor@opensuse.org" date="1392552000">- Update to version 2.1.2:
  + Add exfat mount options.
  + Hide more rescue partitions.
  + Build fails due to missing IT_PROG_INTLTOOL macro (fdo#67679).
  + Add exfat FS integration test.
  + Drop "david" user name from publish make rules.
  + Use dosfstools instead of mtools.
  + Add polkit authorization variables for removable media.
  + Fix crash when waiting for loop device.
- Drop udisks2-20131026-removable-devices-polkit-auth.patch: fixed
  upstream.</changelog>
  <changelog author="pwieczorkiewicz@suse.com" date="1394452800">- Update to version 2.1.3:
  + Identify SD Card Reader in ChromeBook Pixel
  + Send SCSI START STOP UNIT when powering down a drive
  + udisksctl: add power-off verb to power off drives
  + udisksctl: fix grammar
  + Prefer /dev/VG/LV for LVM2 volumes.
  + Fix buffer overflow in mount path parsing. If users have
    the possibility to create very long mount points, such as
    with FUSE, they could cause udisksd to crash, or even to
    run arbitrary code as root with specially crafted mount paths.
    (bnc#865854, CVE-2014-0004)
  + Use SECTOR_COUNT=1 when issuing ATA IDENTIFY COMMAND
  + Use reentrant version of getpwuid() for thread safety
  + udisks_daemon_util_get_caller_uid_sync(): Add missing goto
  + Fix crash when loop-deleting non-loop device</changelog>
  <changelog author="zaitor@opensuse.org" date="1418990400">- Update to version 2.1.4:
  + Add GPT partition types from the Discoverable Partitions
    Specification.
  + Remove newly-added "Auto-enabled swap" GTP partition type.
  + Fine-tune GTP partitions some more.
  + Send SCSI SYNCHRONIZE CACHE before powering down a drive.
  + Fix buffer overflow in pick_word_at().
  + Add Intel Fast Flash Standby partition GPT type.
  + Skip password strength checks when changing LUKS passphrase.
  + Fix build with clang.
  + Revert "Fix standby timers".
  + integration-test:
  - Update for logind.
  - Fix code formatting.
  - sync file systems in sync().
  - integration-test: Drop sync_workaround, fix property testing.
  - integration-test: Better failure messages.
  - integration-test: Fix btrfs test.
  + Fix display ID for generic FAT.
  + Update obsolete gnome-common and automake macros.
  + build:
  - Use config-aux/ directory.
  - Enable gcc colors.
  + Drop obsolete g_type_init().
  + Drop obsolete polkit_unix_process_new().
  + Fix docs for SmartUpdate().
  + Hide Microsoft reserved partition.
  + Identify JetFlash Transcend drives as thumb drives.
  + Fix sorting of mount points.
  + Fix fallback media icons for nonremovable media.
  + Fix polkit auth string.
  + Hide DIAGS and IntelRST partitions.
  + Add a man page for umount.udisks2.
  + Support building against libsystemd library.
  + udisks: Change name for Intel SW RAID.
  + Use internal pm check for smart poll.
  + Fix standby timers.
  + Fix TOCTOU race when making directories.
  + Add missing #include.
  + Properly initialize all used variables.
  + udiskslinuxmanager.c: Don't use uninitialized wait_data struct.
  + Remove useless assignments.
  + udisks_linux_drive_object_uevent(): Handle null device.
  + Hide Windows Recovery Environment partitions.
  + Updated translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1425643200">- Update to 2.1.5:
  * configure: stop using tmpl files for docs.
  * docs: include the annotation glossary.
  * Drop default [df]mask for VFAT and NTFS.
  * Drop unused goto label.
  * Fix crash in udisks_client_finalize().
  * Fix format string signedness warnings.
  * integration-tests: Don't assume ordering in mount-points
    property.
  * integration-test: Skip double mount check for NTFS.
  * integration-test: Stop requiring the build dependencies.
  * integration-test: Test fstab parsing.
  * Make UdisksClient.get_size_for_display() units translatable.
  * Provide fallback for systems without ACL support.
  * Recognize PARTUUID and PARTLABEL in fstab.
  * Support mounting in /media for FHS compatibility.
  * Update translations.
- Add recommended /usr/sbin/rcudisks2 service alias.
- Remove obsolete definitions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1436443200">- Update to version 2.1.6:
  + udev rules: Stop hardcoding sed path.
  + Fix crash on inaccessible RAID member "state" attribute.
  + UDF: Drop umask=0077 default.
  + Install udisksd into a libexecdir.
  + Fail before formatting if partition contains a partition table.
  + Fix udisks_daemon_util_file_set_contents() return value
    handling.
  + Remove deprecated g_io_scheduler_* calls.
  + integration-tests:
  - Settle while waiting for property change.
  - Don't fail if a SMART test was aborted.
  - Add a wrapper to write and flush stderr.
  + Don't ignore isohybrid udf filesystems.
  + Add support for creating f2fs filesystems.
  + Decide whether devices are on the same seat by uid, not pid.
  + UDisksSpawnedJob: Retrieve uid/gid info before forking.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1457092800">- Update to 2.1.7:
  + Allow disabling ACL.
  + udisksctl: Properly redirect stdout.
  + Catch bogus UUID changes of MDRAIDs.
  + Fix udiskctl help for glib 2.45.
  + udisks2.service.in: Add [Install] section.
  + Fix translator comments in udisksobjectinfo.c.
  + integration-test: Explicitly require UDisks 2.0 typelib.
  + integration-test: Fix wait_timeout/busy error messages.
  + integration-test: PEP-8 fixes.
  + integration-test: Fix Polkit.test_removable_fs.
  + test_polkitd.py: Fix race condition in waiting for test
    polkitd.
  + integration-test: Fix race condition in fake CD drive creation.
  + integration-test: Add timeout to readd_device().
  + Add support for read look-ahead ATA settings (fdo#92488).
- Add tarball signing.
- Change group to System/Daemons.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460721600">- Add udisks2-Reread-partition-table-before-wiping.patch: Reread
  partition table before wiping when creating new partitions
  (fdo#85477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1481284800">- Update to version 2.1.8:
  + Allow NTFS mount option "big_writes".
  + Don't coldplug uninitilized udev devices.
  + Detect old (non-Pro) MemoryStick cards.
  + Lock the partition table while creating a new partition.
  + exfat: Drop umask=0077 default.
  + udisks2.service: Add KillSignal=SIGINT.
  + btrfs: Add support for changing label.
  + Updated translations.
- Replace pkgconfig(libsystemd-login) BuildRequires with
  pkgconfig(libsystemd): the two have been merged since
  systemd 209.
- Drop udisks2-Reread-partition-table-before-wiping.patch: fixed
  upstream.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1499256000">- Update to version 2.6.5 (fate#323354)
  * switch to new maintained codestream at
    https://github.com/storaged-project/udisks
  * Detailed changelog in /usr/share/doc/packages/udisks2/NEWS</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1528113600">- fix watcher error for non-redundant raid devices  (bsc#1091274)
  + add 0001-Do-not-try-to-create-file-watchers-for-RAIDs-without.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1537790400">-  CVE-2018-17336: udisks2: format string vulnerability in udisks_log
  in udiskslogging.c (bsc#1109406)
  + add 0001-Fix-string-format-vulnerability.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1539172800">- strip trailing newline from sysfs raid level information (bsc#1091274)
  + add 0001-Remove-leading-trailing-white-space-in-read_sysfs_at.patch</changelog>
</package>
<package pkgid="bc4530120134146559ea6254140aef5d989e6f44e8a3ba5fde58fea0bbc4ecbe" name="libulockmgr1" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="lp150.2.3.1"/>
  <changelog author="mszeredi@suse.cz" date="1327492800">- use %set_permissions instead of %run_permissions in specfile</changelog>
  <changelog author="puzel@suse.com" date="1335096000">- update to 2.9.0
  - Add "zero copy" support for kernel 2.6.35 or newer
  - Make maximum background requests tunable on kernel 2.6.32 or
    newer
  - Require --no-canonicalize in (u)mount (util-linux version 2.18
    or newer) to fix security problems with fusermount
  - Use dynamically sized hash tables in high level library
  - Memory use of filesystem daemon can shrink more easily
  - Add "auto_unmount" option
  - Add "remember" option
  - Add man pages for fusermount, mount.fuse and ulockmgr_server
  - API changes:
  - Introduce "store" and "retrieve" for accessing kernel
    buffers on kernel 2.6.36 or newer
  - Introduce abstract buffer for zero copy operations
  - Allow path calculation to be omitted on certain operations
  - Allow batching forget requests
  - Add "flock" method
  - Add support for ioctl on directories
  - Add delete notification
- drop fuse-pc-remove-libdir-from-Libs.diff (upstream)</changelog>
  <changelog author="rschweikert@suse.com" date="1335441600">- place binaries in /usr tree (UsrMerge project)</changelog>
  <changelog author="mszeredi@suse.cz" date="1337169600">- Fix -pthread in fuse.pc [bnc#761117]</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Trim list of FUSE fses from description (it's literally endless)
  and text inappropraite for subpackages</changelog>
  <changelog author="coolo@suse.com" date="1341230400">- avoid autoreconf to avoid breaking on updates of auto* tools</changelog>
  <changelog author="coolo@suse.com" date="1359806400">- update license to new format</changelog>
  <changelog author="archie@dellroad.org" date="1362398400">- Update to version 2.9.2
  - Add support for fallocate() (kernel &gt;= 3.5)
  - Bug fixes
- Remove fix-pthread-in-fuse.pc.patch; now included in upstream
- Don't patch generated files such as configure and Makefile.in;
  instead, regenerate them using makeconf.sh from SVN repository</changelog>
  <changelog author="idonmez@suse.com" date="1362744000">- Use autoreconf directly instead of makeconf.sh</changelog>
  <changelog author="dmueller@suse.com" date="1364299200">- fix build for SLE_11</changelog>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1371384000">- add aarch64-build-fix.patch</changelog>
  <changelog author="mszeredi@suse.cz" date="1374667200">- Update to version 2.9.3
  - Bug fixes
- Remove fuse-gnu_source.patch (fixed upstream)</changelog>
  <changelog author="bwiedemann@suse.com" date="1418212800">- include commented default fuse.conf (bnc#908292)</changelog>
  <changelog author="mszeredi@suse.cz" date="1432296000">- Update to version 2.9.4
  - fix exec environment for mount and umount (bsc#931452,
    CVE-2015-3202)
  - properly restore the default signal handler
  - fix directory file handle passed to	ioctl() method.
  - fix for uids/gids larger than 2147483647
  - initialize stat buffer passed to -&gt;getattr() and -&gt;fgetattr()</changelog>
  <changelog author="astieger@suse.com" date="1453464000">- fuse 2.9.5:
  * fix warning in mount.c:receive_fd().
  * fix possible memory leak.
  * new upstream project and source URL
  * add new maintainer keyring and verify source signature</changelog>
  <changelog author="fcrozat@suse.com" date="1501502400">- Ensure trusted group is available on Tumbleweed.</changelog>
  <changelog author="admorgan@morgancomputers.net" date="1507291200">- fuse 2.9.7
  * Shared-object version has now been bumped correctly.
  * Added SELinux support.
  * Fixed race-condition when session is terminated right after
    starting a FUSE file system.</changelog>
  <changelog author="admorgan@morgancomputers.net" date="1508155200">- Fix download link in fuse.spec</changelog>
  <changelog author="rgoldwyn@suse.com" date="1536667200">- user_allow_other restriction may be bypassed (bsc#1101797, CVE-2018-10906)
  - fusermount-prevent-silent-truncation-of-mount-options.patch
  - fusermount-dont-feed-escaped-commans-into-mount-options.patch
  - fusermount-bail-out-on-transient-config-read-failure.patch
  - fusermount-refuse-unknown-options.patch
  - fusermount-whitelist-known-good-filesystems-for-mountpoints.patch</changelog>
</package>
<package pkgid="10bde88c51877243bbc75cd6a256570197f5c8303c3192967bf42e0d9026e1d6" name="libunbound-devel-mini" arch="src">
  <version epoch="0" ver="1.6.8" rel="lp150.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1444478400">- ignore absence of the systemd-tmpfiles command</changelog>
  <changelog author="michael@stroeder.com" date="1444910400">- update to 1.5.6
  Features
  - Default for ssl-port is port 853, the temporary port assignment for
    secure domain name system traffic. If you used to rely on the older
    default of port 443, you have to put a clause in unbound.conf for
    that. The new value is likely going to be the standardised port number
    for this traffic.
  - ANY responses include DNAME records if present, as per Evan Hunt's
    remark in dnsop.
  Bug Fixes
  - Fix segfault in the dns64 module in the formaterror error path.
  - Fix manpage to suggest using SIGTERM to terminate the server.
  - iana portlist update.</changelog>
  <changelog author="michael@stroeder.com" date="1449748800">- update to 1.5.7
  Features
  * Fix #594. libunbound: optionally use libnettle for crypto.
  Contributed by Luca Bruno.  Added --with-nettle for use with
  - -with-libunbound-only.
  * Implemented qname minimisation
  Bug Fixes
  * Fix #712: unbound-anchor appears to not fsync root.key.
  * Fix #714: Document config to block private-address for IPv4
    mapped IPv6 addresses.
  * portability, replace snprintf if return value broken
  * portability fixes.
  * detect libexpat without xml_StopParser function.
  * isblank() compat implementation.
  * patch from Doug Hogan for SSL_OP_NO_SSLvx options.
  * Fix #716: nodata proof with empty non-terminals and wildcards.
  * Fix #718: Fix unbound-control-setup with support for env
    without HEREDOC bash support.
  * ACX_SSL_CHECKS no longer adds -ldl needlessly.
  * Change example.conf: ftp.internic.net to https://www.internic.net
  * Fix for lenient accept of reverse order DNAME and CNAME.
  * spelling fixes from Igor Sobrado Delgado.
  * Fix that malformed EDNS query gets a response without malformed EDNS.
  * Added assert on rrset cache correctness.
  * Fix #720: add windows scripts to zip bundle,
    and fix unbound-control-setup windows batch file.
  * Fix for #724: conf syntax to read files from run dir (on Windows).
    And fix PCA prompt for unbound-service-install.exe.
    And add Changelog to windows binary dist.
  * .gitignore for git users.
  * iana portlist update.
  * Removed unneeded whitespace from example.conf.
  * Do not minimise forwarded requests.</changelog>
  <changelog author="meissner@suse.com" date="1454587200">- split off a libunbound package with less buildrequires to
  allow shorter buildcycles when built by gnutls. bsc#964346</changelog>
  <changelog author="mrueckert@suse.de" date="1455710400">- revert the previous change which would not solve the problem as
  the library package requires the unbound-anchor package
  instead introduce a libunbound-devel-mini package which holds the
  shared library and devel files with a minimal build requires.</changelog>
  <changelog author="mrueckert@suse.de" date="1456142400">- add libunbound-devel-mini-rpmlintrc as source</changelog>
  <changelog author="mrueckert@suse.de" date="1456228800">- also conflict the shlib package</changelog>
  <changelog author="michael@stroeder.com" date="1456401600">- update to 1.5.8
  Features
  * ip-transparent option for FreeBSD with IP_BINDANY socket option.
  * insecure-lan-zones: yesno config option, patch from Dag-Erling
    Smørgrav.
  * RR Type CSYNC support RFC 7477, in debug printout and config input.
  * RR Type OPENPGPKEY support (draft-ietf-dane-openpgpkey-07).
  * [bugzilla: 731 ] tcp-mss, outgoing-tcp-mss options for unbound.conf,
    patch from Daisuke Higashi.
  * Support RFC7686: handle ".onion" Special-Use Domain. It is blocked
    by default, and can be unblocked with "nodefault" localzone config.
  * ub_ctx_set_stub() function for libunbound to config stub zones.
  Bug Fixes
  * Fix that NSEC3 negative cache is used when there is no salt.
  * sorted ubsyms.def file with exported libunbound functions.
  * Print understandable debug log when unusable DS record is seen.
  * load gost algorithm if digest is seen before key algorithm.
  * Fix that "make install" fails due to "text file busy" error.
  * Set IPPROTO_IP6 for ipv6 sockets otherwise invalid argument error.
  * wait for sendto to drain socket buffers when they are full.
  * Neater cmdline_verbose increment patch from Edgar Pettijohn.
  * Made netbsd sendmsg test nonfatal, in case of false positives.
  * [bugzilla: 741 ] Fix: log message for dnstap socket connection is
    more clear.
  * [bugzilla: 734 ] Fix: chown the pidfile if it resides inside the
    chroot.
  * Fix cmsg alignment for argument to sendmsg on NetBSD.
  * Fix that unbound complains about unimplemented IP_PKTINFO for
    sendmsg on NetBSD (for interface-automatic).
  * [bugzilla: 738 ] Fix: Swig should not be invoked with CPPFLAGS.
  * Squelch 'cannot assign requested address' log messages unless
    verbosity is high, it was spammed after network down.
  * Fix to simplify empty string checking from Michael McConville.
  * [bugzilla: 734 ] Fix: Do not log an error when the PID file cannot
    be chown'ed. Patch from Simon Deziel.
  * Fix test if -pthreads unused to use better grep for portability.
  * Fix mingw crosscompile for recent mingw.
  * Update aclocal, autoconf output with new versions (1.15, 2.4.6).
  * Define DEFAULT_SOURCE together with BSD_SOURCE when that is defined,
    for Linux glibc 2.20.
  * Fixup contrib/aaaa-filter-iterator.patch for moved contents in the
    source code, so it applies cleanly again. Removed unused variable
    warnings.
  * [bugzilla: 729 ] Fix: omit use of escape sequences in echo since
    they are not portable (unbound-control-setup).
  * remove NULL-checks before free, patch from Michael McConville.
  * updated ax_pthread.m4 to version 21 with clang support, this removes
    a warning from compilation.
  * OSX portability, detect if sbrk is deprecated.
  * OSX clang, stop -pthread unused during link stage warnings.
  * OSX clang new flto check.
  * iana portlist update.</changelog>
  <changelog author="michael@stroeder.com" date="1465041600">- update to 1.5.9
  Features
  * generic edns option parse and store code.
  * Updated L root IPv6 address.
  * User defined pluggable event API for libunbound
  * ip_freebind: yesno option in unbound.conf sets IP_FREEBIND for binding
    to an IP address while the interface or address is down.
  * OpenSSL 1.1.0 portability, --disable-dsa configure option.
  * disable-dnssec-lame-check config option from Charles Walker.
  Bug Fixes
  * [bugzilla: 745 ]
  * Fix unbound.py - idn2dname throws UnicodeError when idnname contains
    trailing dot.
  * configure tests for the weak attribute support by the compiler.
  * [bugzilla: 747 ]
  * Fix assert in outnet_serviced_query_stop.
  * Updated configure and ltmain.sh.
  * Fixup of compile fix for pluggable event API from P.Y. Adi Prasaja.
  * Fixup backend2str for libev.
  * Fix libev usage of dispatch return value.
  * No side effects in tolower() call, in case it is a macro.
  * Fix warnings in ifdef corner case, older or unknown libevent.
  * Fix ip-transparent for ipv6 on FreeBSD, thanks to Nick Hibma.
  * Fix ip-transparent for tcp on freebsd.
  * [bugzilla: 746 ]
  * Fix unbound sets CD bit on all forwards. If no trust anchors, it'll not
    set CD bit when forwarding to another server. If a trust anchor, no CD
    bit on the first attempt to a forwarder, but CD bit thereafter on
    repeated attempts to get DNSSEC.
  * Limit number of QNAME minimisation iterations.
  * Validate QNAME minimised NXDOMAIN responses.
  * If QNAME minimisation is enabled, do cache lookup for QTYPE NS in
    harden-below-nxdomain.
  * Fix compile of getentropy_linux for SLES11 servicepack 4.
  * Fix dnstap-log-resolver-response-messages, from Nikolay Edigaryev.
  * Fix test for openssl to use HMAC_Update for 1.1.0.
  * ERR_remove_state deprecated since openssl 1.0.0.
  * OPENSSL_config is deprecated, removing.
  * Document permit-small-holddown for 5011 debug.
  * [bugzilla: 749 ]
  * Fix unbound-checkconf gets SIGSEGV when use against a malformatted
    conf file.
  * [bugzilla: 753 ]
  * Fix document dump_requestlist is for first thread.
  * Fix some malformed reponses to edns queries get fallback to nonedns.
  * [bugzilla: 759 ]
  * Fix 0x20 capsforid no longer checks type PTR, for compatibility with
    cisco dns guard. This lowers false positives.
  * Fix sldns with static checking fixes copied from getdns.
  * Fix memory leak in out-of-memory conditions of local zone add.
  * [bugzilla: 761 ]
  * Fix DNSSEC LAME false positive resolving nic.club.
  * [bugzilla: 766 ]
  * Fix dns64 should synthesize results on timeout/errors.
  * No QNAME minimisation fall-back for NXDOMAIN answers from
    DNSSEC signed zones.
  * [bugzilla: 767 ]
  * Fix Reference to an expired Internet-Draft in harden-below-nxdomain
    documentation.
  * remove memory leak from lame-check patch.
  * [bugzilla: 770 ]
  * Fix Small subgroup attack on DH used in unix pipe on localhost if
    unbound control uses a unix local named pipe.
  * Document write permission to directory of trust anchor needed.
  * [bugzilla: 768 ]
  * Fix Unbound Service Sometimes Can Not Shutdown Completely, WER Report
    Shown Up. Close handle before closing WSA.
  * Fix time in case answer comes from cache in ub_resolve_event().
  * Fix windows service to be created run with limited rights, as a network
    service account, from Mario Turschmann.
  * [bugzilla: 752 ]
  * Fix retry resource temporarily unavailable on control pipe.
  * iana ports fetched via https.
  * iana portlist update.</changelog>
  <changelog author="michael@stroeder.com" date="1474977600">- update to 1.5.10
  Features
  * Create a pkg-config file for libunbound in contrib.
  * TCP Fast open patch from Sara Dickinson.
  * Finegrained localzone control with define-tag, access-control-tag,
    access-control-tag-action, access-control-tag-data, local-zone-tag, and
    local-zone-override. And added types always_transparent, always_refuse,
    always_nxdomain with that.
  * If more than half of tcp connections are in use, a shorter timeout
    is used (200 msec, vs 2 minutes) to pressure tcp for new connects.
  * [bugzilla: 787 ] Fix #787: outgoing-interface netblock/64 ipv6
    option to use linux freebind to use 64bits of entropy for every query
    with random local part.
  * For #787: prefer-ip6 option for unbound.conf prefers to send
    upstream queries to ipv6 servers.
  * Add default root hints for IPv6 E.ROOT-SERVERS.NET, 2001:500:a8::e.
  * keep debug symbols in windows build.
  Bug Fixes
  * [bugzilla: 778 ] Fix unbound 1.5.9: -h segfault (null deref).
  * Fix unbound-anchor.exe file location defaults to Program Files with
    (x86) appended.
  * Fix to not ignore return value of chown() in daemon startup.
  * Better help text from -h (from Ray Griffith).
  * [bugzilla: 773 ] Fix Non-standard Python location build failure with
    pyunbound.
  * Improve threadsafety for openssl 0.9.8 ecdsa dnssec signatures.
  * Revert fix for NetworkService account on windows due to breakage it
    causes.
  * Fix that windows install will not overwrite existing service.conf
    file (and ignore gui config choices if it exists).
  * And delete service.conf.shipped on uninstall.
  * In unbound.conf directory: dir immediately changes to that
    directory, so that include: file below that is relative to that
    directory. With chroot, make the directory an absolute path inside chroot.
  * do not delete service.conf on windows uninstall.
  * document directory immediate fix and allow EXECUTABLE syntax in it
    on windows.
  * Fix directory: fix for unbound-checkconf, it restores cwd.
  * Use QTYPE=A for QNAME minimisation.
  * Keep track of number of time-outs when performing QNAME
    minimisation. Stop minimising when number of time-outs for a QNAME/QTYPE
    pair is more than three.
  * [bugzilla: 775 ] Fix unbound-host and unbound-anchor crash on
    windows, ignore null delete for wsaevent.
  * Fix spelling in freebind option man page text.
  * Fix windows link of ssl with crypt32.
  * [bugzilla: 779 ] Fix Union casting is non-portable.
  * [bugzilla: 780 ] Fix MAP_ANON not defined in HP-UX 11.31.
  * [bugzilla: 781 ] Fix prealloc() is an HP-UX system library call.
  * Decrease dp attempts at each QNAME minimisation iteration
  * [bugzilla: 784 ] Fix Build configure assumess that having getpwnam
    means there is endpwent function available.
  * Updated repository with newer flex and bison output.
  * Fix static compile on windows missing gdi32.
  * Fix dynamic link of anchor-update.exe on windows.
  * Fix detect of mingw for MXE package build.
  * Fixes for 64bit windows compile.
  * [bugzilla: 788 ] Fix for nettle 3.0: Failed to build with Nettle &gt;=
    3.0 and --with-libunbound-only --with-nettle.
  * Fixed unbound.doxygen for 1.8.11.
  * [bugzilla: 798 ] Fix Client-side TCP fast open fails (Linux).
  * [bugzilla: 801 ] Fix missing error condition handling in
    daemon_create_workers().
  * [bugzilla: 802 ] Fix workaround for function parameters that are
    "unused" without log_assert.
  * [bugzilla: 803 ] Fix confusing (and incorrect) code comment in
    daemon_cleanup().
  * [bugzilla: 806 ] Fix wrong comment removed.
  * use sendmsg instead of sendto for TFO.
  * [bugzilla: 807 ] Fix workaround for possible some "unused" function
    parameters in test code, from Jinmei Tatuya.
  * Note that OPENPGPKEY type is RFC 7929.
  * [bugzilla: 804 ] Fix #804: unbound stops responding after outage.
    Fixes queries that attempt to wait for an empty list of subqueries.
  * Fix for #804: lower num_target_queries for iterator also for failed
    lookups.
  * [bugzilla: 820 ] Fix set sldns_str2wire_rr_buf() dual meaning len
    parameter in each iteration in find_tag_datas().
  * [bugzilla: 777 ] Fix OpenSSL 1.1.0 compatibility, patch from
    Sebastian A. Siewior.
  * RFC 7958 is now out, updated docs for unbound-anchor.
  * Fix for compile without warnings with openssl 1.1.0.
  * [bugzilla: 826 ] Fix refuse_non_local could result in a broken response.
  * iana portlist update.
  * Fix compile with openssl 1.1.0 with api=1.1.0.
  * [bugzilla: 829 ] Fix doc of sldns_wire2str_rdata_buf() return value
    has an off-by-one typo, from Jinmei Tatuya (Infoblox).
  * Fix incomplete prototypes reported by Dag-Erling Smørgrav.
  * [bugzilla: 828 ] Fix missing type in access-control-tag-action
    redirect results in NXDOMAIN.
  * Take configured minimum TTL into consideration when reducing TTL to
    original TTL from RRSIG.
  * [bugzilla: 831 ] Fix workaround for spurious fread_chk warning
    against petal.c
  * Silenced flex-generated sign-unsigned warning print with gcc
    diagnostic pragma.
  * Fix for new splint on FreeBSD. Fix cast for sockaddr_un.sun_len.
  * fix potential memory leak in daemon/remote.c and nullpointer
    dereference in validator/autotrust.
  * [bugzilla: 883 ] Fix error for duplicate local zone entry.
  * [bugzilla: 835 ] Fix --disable-dsa with nettle verify.</changelog>
  <changelog author="michael@stroeder.com" date="1481803200">- update to 1.6.0
  Features
  * Added generic EDNS code for registering known EDNS option codes,
    bypassing the cache response stage and uniquifying mesh states. Four
    EDNS option lists were added to module_qstate
    (module_qstate.edns_opts_*) to store EDNS options from/to front/back side.
  * Added two flags to module_qstate (no_cache_lookup, no_cache_store)
    that control the modules' cache interactions.
  * Added code for registering inplace callback functions. The registered
    functions can be called just before replying with local data or Chaos,
    replying from cache, replying with SERVFAIL, replying with a resolved
    query, sending a query to a nameserver. The functions can inspect the
    available data and maybe change response/query related data (i.e. append
    EDNS options).
  * Updated Python module for the above.
  * Updated Python documentation.
  * Added views functionality.
  * Added qname-minimisation-strict config option.
  * Patch that resolves CNAMEs entered in local-data conf statements that
    point to data on the internet, from Jinmei Tatuya (Infoblox).
  * serve-expired config option: serve expired responses with TTL 0.
  * .gitattributes line for githubs code language display.
  * log-identity: config option to set sys log identity, patch from "Robin
    H. Johnson" (robbat2@gentoo.org).
  * Added stub-ssl-upstream and forward-ssl-upstream options.
  * Added local-zones and local-data bulk addition and removal
    functionality in unbound-control (local_zones, local_zones_remove,
    local_datas and local_datas_remove).
  * g.root-servers.net has AAAA address.
  Bug Fixes
  * Fix #836: unbound could echo back EDNS options in an error response.
  * Fix #838: 1.5.10 cannot be built on Solaris, undefined PATH_MAX.
  * Fix #839: Memory grows unexpectedly with large RPZ files.
  * Fix #840: infinite loop in unbound_munin_ plugin on unowned lockfile.
  * Fix #841: big local-zone's make it consume large amounts of memory.
  * Fix dnstap relaying "random" messages instead of resolver/forwarder
    responses, from Nikolay Edigaryev.
  * Fix Nits for 1.5.10 reported by Dag-Erling Smorgrav.
  * Fix #1117: spelling errors, from Robert Edmonds.
  * iana portlist update.
  * fix memoryleak logfile when in debug mode.
  * Re-fix #839 from view commit overwrite.
  * Fixup const void cast warning.
  * Removed patch comments from acllist.c and msgencode.c
  * Added documentation doc/CNAME-basedRedirectionDesignNotes.pdf, from
    Jinmei Tatuya (Infoblox).
  * Fix #1125: unbound could reuse an answer packet incorrectly for
    clients with different EDNS parameters, from Jinmei Tatuya.
  * Fix #1118: libunbound.pc sets strange Libs, Libs.private values.
  * Added Requires line to libunbound.pc
  * Fix #1130: whitespace in example.conf.in more consistent.
  * suppress compile warning in lex files.
  * init lzt variable, for older gcc compiler warnings.
  * fix --enable-dsa to work, instead of copying ecdsa enable.
  * Fix DNSSEC validation of query type ANY with DNAME answers.
  * Fixup query_info local_alias init.
  * Ported tests for local_cname unit test to testbound framework.
  * Fix #1134: unbound-control set_option -- val-override-date: -1 works
    immediately to ignore datetime, or back to 0 to enable it again. The --
    is to ignore the '-1' as an option flag.
  * Patch for server.num.zero_ttl stats for count of expired replies, from
    Pavel Odintsov.
  * Fix failure to build on arm64 with no sbrk.
  * Set OpenSSL security level to 0 when using aNULL ciphers.
  * configure detects ssl security level API function in the autoconf
    manner. Every function on its own, so that other libraries (eg.
    LibreSSL) can develop their API without hindrance.
  * Fix #1154: segfault when reading config with duplicate zones.
  * Note that for harden-below-nxdomain the nxdomain must be secure, this
    means nsec3 with optout is insufficient.
  * Fix #1155: test status code of unbound-control in 04-checkconf, not
    the status code from the tee command.
  * Fix #1158: reference RFC 8020 "NXDOMAIN: There Really Is Nothing
    Underneath" for the harden-below-nxdomain option.
  * patch from Dag-Erling Smorgrav that removes code that relies on sbrk().
  * Make access-control-tag-data RDATA absolute. This makes the RDATA
    origin consistent between local-data and access-control-tag-data.
  * Fix NSEC ENT wildcard check. Matching wildcard does not have to be a
    subdomain of the NSEC owner.
  * QNAME minimisation uses QTYPE=A, therefore always check cache for this
    type in harden-below-nxdomain functionality.
  * Added unit test for QNAME minimisation + harden below nxdomain synergy.
  * Fix that with openssl 1.1 control-use-cert: no uses less cpu, by using
    no encryption over the unix socket.
  * hyphen as minus fix, by Andreas Schulze
  * Fix #1170: document that 'inform' local-zone uses local-data.
  * Fix #1173: differ local-zone type deny from unset tag_actions element.
  * Add DSA support for OpenSSL 1.1.0
  * Fix remote control without cert for LibreSSL
  * Fix downcast warnings from visual studio in sldns code.</changelog>
  <changelog author="michael@stroeder.com" date="1487678400">- update to 1.6.1
  Features
  * configure --enable-systemd and lets unbound use systemd sockets if you
    enable use-systemd: yes in unbound.conf. Also there are
    contrib/unbound.socket and contrib/unbound.service: systemd files for
    unbound, install them in /usr/lib/systemd/system. Contributed by Sami
    Kerola and Pavel Odintsov.
  * [bugzilla: 1185 ]
    Source IP rate limiting, patch from Larissa Feng.
  * [bugzilla: 1184 ]
    Log DNS replies. This includes the same logging information that DNS
    queries and response code and response size, patch from Larissa Feng.
  * Include root trust anchor id 20326 in unbound-anchor.
  * 64bit is default for windows builds.
  Bug Fixes
  * [bugzilla: 1176 ]
    Fix stack size too small for Alpine Linux.
  * Fix unbound-control and ipv6 only.
    [bugzilla: 1182 ]
  * Fix Resource leak (socket), at startup.
    [bugzilla: 1178 ]
  * Fix attempt to fix setup error at end, pop result values at end of
    install.
  * iana portlist update
  * Fix inet_ntop and inet_pton warnings in windows compile.
  * [bugzilla: 1191 ]
    Fix remove comment about view deletion.
  * [bugzilla: 1188 ]
    Fix unresolved symbol 'fake_dsa' in libunbound.so when built with Nettle
  * [bugzilla: 1190 ]
    Fix to not echo back EDNS options in local-zone error response.
  * [bugzilla: 1194 ]
    Fix if cross build fails when $host isn't `uname` for getentropy.
  * Fix reload chdir failure when also chrooted to that directory.
  * Fix to return formerr for queries for meta-types, to avoid packet
    amplification if this meta-type is sent on to upstream.
  * [bugzilla: 1201 ]
    Fix missing unlock in answer_from_cache error condition.
  * [bugzilla: 1202 ]
    Fix code comment that packed_rrset_data is not always 'packed'.
  * Fix to also block meta types 128 through to 248 with formerr.
  * [bugzilla: 1206 ]
    Fix that some view-related commands are missing from 'unbound-control -h'
  * Fix to rename ub_callback_t to ub_callback_type, because POSIX
    reserves _t typedefs.
  * Fix to rename internally used types from _t to _type, because _t type
    names are reserved by POSIX.
  * Increase MAX_MODULE to 16.
  * [bugzilla: 1211 ]
    Fix can't enable interface-automatic if no IPv6 with more helpful
    error message.
  * fix root_anchor test for updated icannbundle.pem lower certificates.
  * Fix compile on solaris of the fix to use $host detect.
  * Fix for type name change and fix warning on windows compile.
  * Fix pythonmod for typedef changes.
  * Fix dnstap for warning of set but not used.
  * Fix autoconf of systemd check for lack of pkg-config.</changelog>
  <changelog author="michael@stroeder.com" date="1493035200">- update to 1.6.2
  Features
- Add trustanchor.unbound CH TXT that gets a response with a number
  of TXT RRs with a string like "example.com. 2345 1234" with
  the trust anchors and their keytags.
- Patch for view functionality for local-data-ptr from Björn Ketelaars.
- Response actions based on IP address from Jinmei Tatuya (Infoblox).
- Patch from Luiz Fernando Softov for Stats Shared Memory.
- unbound-control stats_shm command prints stats using shared memory,
  which uses less cpu.
- --disable-sha1 disables SHA1 support in RRSIG, so from DNSKEY and
  DS records.  NSEC3 is not disabled.
- #1217. DNSCrypt support, with --enable-dnscrypt, libsodium and then
  enabled in the config file from Manu Bretelle.
- Merge EDNS Client subnet implementation from feature branch into main
  branch, using new EDNS processing framework.
- harden-algo-downgrade: no also makes unbound more lenient about
  digest algorithms in DS records.
  Bug fixes
- sldns has ED25519 and ED448 algorithm number and name for display.
- sldns updated for vfixed and buffer resize indication from getdns.
- iana portlist update
- Fix #1224: Fix that defaults should not fall back to "Program Files
  (x86) if Unbound is 64bit by default on windows.
- Fix doc/CNAME-basedRedirectionDesignNotes.pdf zone static to
  redirect.
- make depend, autoconf, doxygen and lint fixed up.
- include sys/time.h for new shm code on NetBSD.
- Fix #1227: Fix that Unbound control allows weak ciphersuits.
- Fix #1226: provide official 32bit binary for windows.
- For #1227: if we have sha256, set the cipher list to have no
  known vulns.
- Fix testpkts.c, check if DO bit is set, not only if there is an OPT
  record.
- Fix #1229: Systemd service sandboxing in contrib/unbound.service.
- Fix #1230: swig version 2.0.1 is required for pythonmod, with
  1.3.40 it crashes when running repeatly unbound-control reload.
- fix enum conversion warnings
- fake-sha1 test option; print warning if used.  To make unit tests.
- unbound-control list local zone and data commands listed in the
  help output.
- Fix #1234: shortening DNAME loop produces duplicate DNAME records
  in ANSWER section.
- testbound understands Deckard MATCH rcode question answer commands.
- Fix #1235: Fix too long DNAME expansion produces SERVFAIL instead
  of YXDOMAIN + query loop, reported by Petr Spacek.
- Fix that SHM is not inited if not enabled.
- Fix that looped DNAMEs do not cause unbound to spend effort.
- trustanchor tags are sorted.  reusable routine to fetch taglist.
- Fix #1237 - Wrong resolving in chain, for norec queries that get
  SERVFAIL returned.
- make depend, autoconf, remove warnings about statement before var.
- lru_demote and lruhash_insert_or_retrieve functions for getdns.
- fixup for lruhash (whitespace and header file comment).
- dnscrypt tests.
- Fix doxygen for dnscrypt files.
- Fix #1238: segmentation fault when adding through the remote
  interface a per-view local zone to a view with no previous
  (configured) local zones.
- Fix #1229: Systemd service sandboxing, options in wrong sections.
- Fix #1239: configure fails to find python distutils if python
  prints warning.
- Fix to prevent non-referal query from being cached as referal when the
  no_cache_store flag was set.
- Remove (now unused) event2 include from dnscrypt code.
- Fix #1217: Add metrics to unbound-control interface showing
  crypted, cert request, plaintext and malformed queries (from
  Manu Bretelle).
- Do not add current time twice to TTL before ECS cache store.
- Do not touch rrset cache after ECS cache message generation.
- Use LDNS_EDNS_CLIENT_SUBNET as default ECS opcode.
- Fix #1244: document that use of chroot requires trust anchor file to
  be under chroot.
- Small fixup for documentation.
- Fix respip for braces when locks arent used.
- Fix pythonmod for cb changes.
- Generalise inplace callback (de)registration
- (de)register inplace callbacks for module id
- No unbound-control set_option for ECS options
- Deprecated client-subnet-opcode config option
- Introduced client-subnet-always-forward config option
- Changed max-client-subnet-ipv6 default to 56 (as in RFC)
- Removed extern ECS config options
- module_restart_next now calls clear on all following modules
- Also create ECS module qstate on module_event_pass event
- remove malloc from inplace_cb_register
- Unlock view in respip unit test
- Some whitespace fixup.
- Remove ECS option after REFUSED answer.
- Fix small memory leak in edns_opt_copy_alloc.
- Respip dereference after NULL check.
- Zero initialize addrtree allocation.
- Use correct identifier for SHM destroy.
- Display ECS module memory usage.
- Fix #1247: unbound does not shorten source prefix length when
  forwarding ECS.
- Properly check for allocation failure in local_data_find_tag_datas.
- Fix #1249: unbound doesn't return FORMERR to bogus ECS.
- Set SHM ECS memory usage to 0 when module not loaded.
- subnet mem value is available in shm, also when not enabled,
  to make the struct easier to memmap by other applications,
  independent of the configuration of unbound.
- Fix #1250: inconsistent indentation in services/listen_dnsport.c.</changelog>
  <changelog author="michael@stroeder.com" date="1497441600">- update to 1.6.3
  Bug Fixes
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname. When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.</changelog>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
</package>
<package pkgid="ff89d2bcbc6eec22509f9de9e7004818f8976344303f6d496b4122e8de1b3d02" name="libunbound-devel-mini" arch="x86_64">
  <version epoch="0" ver="1.6.8" rel="lp150.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1444478400">- ignore absence of the systemd-tmpfiles command</changelog>
  <changelog author="michael@stroeder.com" date="1444910400">- update to 1.5.6
  Features
  - Default for ssl-port is port 853, the temporary port assignment for
    secure domain name system traffic. If you used to rely on the older
    default of port 443, you have to put a clause in unbound.conf for
    that. The new value is likely going to be the standardised port number
    for this traffic.
  - ANY responses include DNAME records if present, as per Evan Hunt's
    remark in dnsop.
  Bug Fixes
  - Fix segfault in the dns64 module in the formaterror error path.
  - Fix manpage to suggest using SIGTERM to terminate the server.
  - iana portlist update.</changelog>
  <changelog author="michael@stroeder.com" date="1449748800">- update to 1.5.7
  Features
  * Fix #594. libunbound: optionally use libnettle for crypto.
  Contributed by Luca Bruno.  Added --with-nettle for use with
  - -with-libunbound-only.
  * Implemented qname minimisation
  Bug Fixes
  * Fix #712: unbound-anchor appears to not fsync root.key.
  * Fix #714: Document config to block private-address for IPv4
    mapped IPv6 addresses.
  * portability, replace snprintf if return value broken
  * portability fixes.
  * detect libexpat without xml_StopParser function.
  * isblank() compat implementation.
  * patch from Doug Hogan for SSL_OP_NO_SSLvx options.
  * Fix #716: nodata proof with empty non-terminals and wildcards.
  * Fix #718: Fix unbound-control-setup with support for env
    without HEREDOC bash support.
  * ACX_SSL_CHECKS no longer adds -ldl needlessly.
  * Change example.conf: ftp.internic.net to https://www.internic.net
  * Fix for lenient accept of reverse order DNAME and CNAME.
  * spelling fixes from Igor Sobrado Delgado.
  * Fix that malformed EDNS query gets a response without malformed EDNS.
  * Added assert on rrset cache correctness.
  * Fix #720: add windows scripts to zip bundle,
    and fix unbound-control-setup windows batch file.
  * Fix for #724: conf syntax to read files from run dir (on Windows).
    And fix PCA prompt for unbound-service-install.exe.
    And add Changelog to windows binary dist.
  * .gitignore for git users.
  * iana portlist update.
  * Removed unneeded whitespace from example.conf.
  * Do not minimise forwarded requests.</changelog>
  <changelog author="meissner@suse.com" date="1454587200">- split off a libunbound package with less buildrequires to
  allow shorter buildcycles when built by gnutls. bsc#964346</changelog>
  <changelog author="mrueckert@suse.de" date="1455710400">- revert the previous change which would not solve the problem as
  the library package requires the unbound-anchor package
  instead introduce a libunbound-devel-mini package which holds the
  shared library and devel files with a minimal build requires.</changelog>
  <changelog author="mrueckert@suse.de" date="1456142400">- add libunbound-devel-mini-rpmlintrc as source</changelog>
  <changelog author="mrueckert@suse.de" date="1456228800">- also conflict the shlib package</changelog>
  <changelog author="michael@stroeder.com" date="1456401600">- update to 1.5.8
  Features
  * ip-transparent option for FreeBSD with IP_BINDANY socket option.
  * insecure-lan-zones: yesno config option, patch from Dag-Erling
    Smørgrav.
  * RR Type CSYNC support RFC 7477, in debug printout and config input.
  * RR Type OPENPGPKEY support (draft-ietf-dane-openpgpkey-07).
  * [bugzilla: 731 ] tcp-mss, outgoing-tcp-mss options for unbound.conf,
    patch from Daisuke Higashi.
  * Support RFC7686: handle ".onion" Special-Use Domain. It is blocked
    by default, and can be unblocked with "nodefault" localzone config.
  * ub_ctx_set_stub() function for libunbound to config stub zones.
  Bug Fixes
  * Fix that NSEC3 negative cache is used when there is no salt.
  * sorted ubsyms.def file with exported libunbound functions.
  * Print understandable debug log when unusable DS record is seen.
  * load gost algorithm if digest is seen before key algorithm.
  * Fix that "make install" fails due to "text file busy" error.
  * Set IPPROTO_IP6 for ipv6 sockets otherwise invalid argument error.
  * wait for sendto to drain socket buffers when they are full.
  * Neater cmdline_verbose increment patch from Edgar Pettijohn.
  * Made netbsd sendmsg test nonfatal, in case of false positives.
  * [bugzilla: 741 ] Fix: log message for dnstap socket connection is
    more clear.
  * [bugzilla: 734 ] Fix: chown the pidfile if it resides inside the
    chroot.
  * Fix cmsg alignment for argument to sendmsg on NetBSD.
  * Fix that unbound complains about unimplemented IP_PKTINFO for
    sendmsg on NetBSD (for interface-automatic).
  * [bugzilla: 738 ] Fix: Swig should not be invoked with CPPFLAGS.
  * Squelch 'cannot assign requested address' log messages unless
    verbosity is high, it was spammed after network down.
  * Fix to simplify empty string checking from Michael McConville.
  * [bugzilla: 734 ] Fix: Do not log an error when the PID file cannot
    be chown'ed. Patch from Simon Deziel.
  * Fix test if -pthreads unused to use better grep for portability.
  * Fix mingw crosscompile for recent mingw.
  * Update aclocal, autoconf output with new versions (1.15, 2.4.6).
  * Define DEFAULT_SOURCE together with BSD_SOURCE when that is defined,
    for Linux glibc 2.20.
  * Fixup contrib/aaaa-filter-iterator.patch for moved contents in the
    source code, so it applies cleanly again. Removed unused variable
    warnings.
  * [bugzilla: 729 ] Fix: omit use of escape sequences in echo since
    they are not portable (unbound-control-setup).
  * remove NULL-checks before free, patch from Michael McConville.
  * updated ax_pthread.m4 to version 21 with clang support, this removes
    a warning from compilation.
  * OSX portability, detect if sbrk is deprecated.
  * OSX clang, stop -pthread unused during link stage warnings.
  * OSX clang new flto check.
  * iana portlist update.</changelog>
  <changelog author="michael@stroeder.com" date="1465041600">- update to 1.5.9
  Features
  * generic edns option parse and store code.
  * Updated L root IPv6 address.
  * User defined pluggable event API for libunbound
  * ip_freebind: yesno option in unbound.conf sets IP_FREEBIND for binding
    to an IP address while the interface or address is down.
  * OpenSSL 1.1.0 portability, --disable-dsa configure option.
  * disable-dnssec-lame-check config option from Charles Walker.
  Bug Fixes
  * [bugzilla: 745 ]
  * Fix unbound.py - idn2dname throws UnicodeError when idnname contains
    trailing dot.
  * configure tests for the weak attribute support by the compiler.
  * [bugzilla: 747 ]
  * Fix assert in outnet_serviced_query_stop.
  * Updated configure and ltmain.sh.
  * Fixup of compile fix for pluggable event API from P.Y. Adi Prasaja.
  * Fixup backend2str for libev.
  * Fix libev usage of dispatch return value.
  * No side effects in tolower() call, in case it is a macro.
  * Fix warnings in ifdef corner case, older or unknown libevent.
  * Fix ip-transparent for ipv6 on FreeBSD, thanks to Nick Hibma.
  * Fix ip-transparent for tcp on freebsd.
  * [bugzilla: 746 ]
  * Fix unbound sets CD bit on all forwards. If no trust anchors, it'll not
    set CD bit when forwarding to another server. If a trust anchor, no CD
    bit on the first attempt to a forwarder, but CD bit thereafter on
    repeated attempts to get DNSSEC.
  * Limit number of QNAME minimisation iterations.
  * Validate QNAME minimised NXDOMAIN responses.
  * If QNAME minimisation is enabled, do cache lookup for QTYPE NS in
    harden-below-nxdomain.
  * Fix compile of getentropy_linux for SLES11 servicepack 4.
  * Fix dnstap-log-resolver-response-messages, from Nikolay Edigaryev.
  * Fix test for openssl to use HMAC_Update for 1.1.0.
  * ERR_remove_state deprecated since openssl 1.0.0.
  * OPENSSL_config is deprecated, removing.
  * Document permit-small-holddown for 5011 debug.
  * [bugzilla: 749 ]
  * Fix unbound-checkconf gets SIGSEGV when use against a malformatted
    conf file.
  * [bugzilla: 753 ]
  * Fix document dump_requestlist is for first thread.
  * Fix some malformed reponses to edns queries get fallback to nonedns.
  * [bugzilla: 759 ]
  * Fix 0x20 capsforid no longer checks type PTR, for compatibility with
    cisco dns guard. This lowers false positives.
  * Fix sldns with static checking fixes copied from getdns.
  * Fix memory leak in out-of-memory conditions of local zone add.
  * [bugzilla: 761 ]
  * Fix DNSSEC LAME false positive resolving nic.club.
  * [bugzilla: 766 ]
  * Fix dns64 should synthesize results on timeout/errors.
  * No QNAME minimisation fall-back for NXDOMAIN answers from
    DNSSEC signed zones.
  * [bugzilla: 767 ]
  * Fix Reference to an expired Internet-Draft in harden-below-nxdomain
    documentation.
  * remove memory leak from lame-check patch.
  * [bugzilla: 770 ]
  * Fix Small subgroup attack on DH used in unix pipe on localhost if
    unbound control uses a unix local named pipe.
  * Document write permission to directory of trust anchor needed.
  * [bugzilla: 768 ]
  * Fix Unbound Service Sometimes Can Not Shutdown Completely, WER Report
    Shown Up. Close handle before closing WSA.
  * Fix time in case answer comes from cache in ub_resolve_event().
  * Fix windows service to be created run with limited rights, as a network
    service account, from Mario Turschmann.
  * [bugzilla: 752 ]
  * Fix retry resource temporarily unavailable on control pipe.
  * iana ports fetched via https.
  * iana portlist update.</changelog>
  <changelog author="michael@stroeder.com" date="1474977600">- update to 1.5.10
  Features
  * Create a pkg-config file for libunbound in contrib.
  * TCP Fast open patch from Sara Dickinson.
  * Finegrained localzone control with define-tag, access-control-tag,
    access-control-tag-action, access-control-tag-data, local-zone-tag, and
    local-zone-override. And added types always_transparent, always_refuse,
    always_nxdomain with that.
  * If more than half of tcp connections are in use, a shorter timeout
    is used (200 msec, vs 2 minutes) to pressure tcp for new connects.
  * [bugzilla: 787 ] Fix #787: outgoing-interface netblock/64 ipv6
    option to use linux freebind to use 64bits of entropy for every query
    with random local part.
  * For #787: prefer-ip6 option for unbound.conf prefers to send
    upstream queries to ipv6 servers.
  * Add default root hints for IPv6 E.ROOT-SERVERS.NET, 2001:500:a8::e.
  * keep debug symbols in windows build.
  Bug Fixes
  * [bugzilla: 778 ] Fix unbound 1.5.9: -h segfault (null deref).
  * Fix unbound-anchor.exe file location defaults to Program Files with
    (x86) appended.
  * Fix to not ignore return value of chown() in daemon startup.
  * Better help text from -h (from Ray Griffith).
  * [bugzilla: 773 ] Fix Non-standard Python location build failure with
    pyunbound.
  * Improve threadsafety for openssl 0.9.8 ecdsa dnssec signatures.
  * Revert fix for NetworkService account on windows due to breakage it
    causes.
  * Fix that windows install will not overwrite existing service.conf
    file (and ignore gui config choices if it exists).
  * And delete service.conf.shipped on uninstall.
  * In unbound.conf directory: dir immediately changes to that
    directory, so that include: file below that is relative to that
    directory. With chroot, make the directory an absolute path inside chroot.
  * do not delete service.conf on windows uninstall.
  * document directory immediate fix and allow EXECUTABLE syntax in it
    on windows.
  * Fix directory: fix for unbound-checkconf, it restores cwd.
  * Use QTYPE=A for QNAME minimisation.
  * Keep track of number of time-outs when performing QNAME
    minimisation. Stop minimising when number of time-outs for a QNAME/QTYPE
    pair is more than three.
  * [bugzilla: 775 ] Fix unbound-host and unbound-anchor crash on
    windows, ignore null delete for wsaevent.
  * Fix spelling in freebind option man page text.
  * Fix windows link of ssl with crypt32.
  * [bugzilla: 779 ] Fix Union casting is non-portable.
  * [bugzilla: 780 ] Fix MAP_ANON not defined in HP-UX 11.31.
  * [bugzilla: 781 ] Fix prealloc() is an HP-UX system library call.
  * Decrease dp attempts at each QNAME minimisation iteration
  * [bugzilla: 784 ] Fix Build configure assumess that having getpwnam
    means there is endpwent function available.
  * Updated repository with newer flex and bison output.
  * Fix static compile on windows missing gdi32.
  * Fix dynamic link of anchor-update.exe on windows.
  * Fix detect of mingw for MXE package build.
  * Fixes for 64bit windows compile.
  * [bugzilla: 788 ] Fix for nettle 3.0: Failed to build with Nettle &gt;=
    3.0 and --with-libunbound-only --with-nettle.
  * Fixed unbound.doxygen for 1.8.11.
  * [bugzilla: 798 ] Fix Client-side TCP fast open fails (Linux).
  * [bugzilla: 801 ] Fix missing error condition handling in
    daemon_create_workers().
  * [bugzilla: 802 ] Fix workaround for function parameters that are
    "unused" without log_assert.
  * [bugzilla: 803 ] Fix confusing (and incorrect) code comment in
    daemon_cleanup().
  * [bugzilla: 806 ] Fix wrong comment removed.
  * use sendmsg instead of sendto for TFO.
  * [bugzilla: 807 ] Fix workaround for possible some "unused" function
    parameters in test code, from Jinmei Tatuya.
  * Note that OPENPGPKEY type is RFC 7929.
  * [bugzilla: 804 ] Fix #804: unbound stops responding after outage.
    Fixes queries that attempt to wait for an empty list of subqueries.
  * Fix for #804: lower num_target_queries for iterator also for failed
    lookups.
  * [bugzilla: 820 ] Fix set sldns_str2wire_rr_buf() dual meaning len
    parameter in each iteration in find_tag_datas().
  * [bugzilla: 777 ] Fix OpenSSL 1.1.0 compatibility, patch from
    Sebastian A. Siewior.
  * RFC 7958 is now out, updated docs for unbound-anchor.
  * Fix for compile without warnings with openssl 1.1.0.
  * [bugzilla: 826 ] Fix refuse_non_local could result in a broken response.
  * iana portlist update.
  * Fix compile with openssl 1.1.0 with api=1.1.0.
  * [bugzilla: 829 ] Fix doc of sldns_wire2str_rdata_buf() return value
    has an off-by-one typo, from Jinmei Tatuya (Infoblox).
  * Fix incomplete prototypes reported by Dag-Erling Smørgrav.
  * [bugzilla: 828 ] Fix missing type in access-control-tag-action
    redirect results in NXDOMAIN.
  * Take configured minimum TTL into consideration when reducing TTL to
    original TTL from RRSIG.
  * [bugzilla: 831 ] Fix workaround for spurious fread_chk warning
    against petal.c
  * Silenced flex-generated sign-unsigned warning print with gcc
    diagnostic pragma.
  * Fix for new splint on FreeBSD. Fix cast for sockaddr_un.sun_len.
  * fix potential memory leak in daemon/remote.c and nullpointer
    dereference in validator/autotrust.
  * [bugzilla: 883 ] Fix error for duplicate local zone entry.
  * [bugzilla: 835 ] Fix --disable-dsa with nettle verify.</changelog>
  <changelog author="michael@stroeder.com" date="1481803200">- update to 1.6.0
  Features
  * Added generic EDNS code for registering known EDNS option codes,
    bypassing the cache response stage and uniquifying mesh states. Four
    EDNS option lists were added to module_qstate
    (module_qstate.edns_opts_*) to store EDNS options from/to front/back side.
  * Added two flags to module_qstate (no_cache_lookup, no_cache_store)
    that control the modules' cache interactions.
  * Added code for registering inplace callback functions. The registered
    functions can be called just before replying with local data or Chaos,
    replying from cache, replying with SERVFAIL, replying with a resolved
    query, sending a query to a nameserver. The functions can inspect the
    available data and maybe change response/query related data (i.e. append
    EDNS options).
  * Updated Python module for the above.
  * Updated Python documentation.
  * Added views functionality.
  * Added qname-minimisation-strict config option.
  * Patch that resolves CNAMEs entered in local-data conf statements that
    point to data on the internet, from Jinmei Tatuya (Infoblox).
  * serve-expired config option: serve expired responses with TTL 0.
  * .gitattributes line for githubs code language display.
  * log-identity: config option to set sys log identity, patch from "Robin
    H. Johnson" (robbat2@gentoo.org).
  * Added stub-ssl-upstream and forward-ssl-upstream options.
  * Added local-zones and local-data bulk addition and removal
    functionality in unbound-control (local_zones, local_zones_remove,
    local_datas and local_datas_remove).
  * g.root-servers.net has AAAA address.
  Bug Fixes
  * Fix #836: unbound could echo back EDNS options in an error response.
  * Fix #838: 1.5.10 cannot be built on Solaris, undefined PATH_MAX.
  * Fix #839: Memory grows unexpectedly with large RPZ files.
  * Fix #840: infinite loop in unbound_munin_ plugin on unowned lockfile.
  * Fix #841: big local-zone's make it consume large amounts of memory.
  * Fix dnstap relaying "random" messages instead of resolver/forwarder
    responses, from Nikolay Edigaryev.
  * Fix Nits for 1.5.10 reported by Dag-Erling Smorgrav.
  * Fix #1117: spelling errors, from Robert Edmonds.
  * iana portlist update.
  * fix memoryleak logfile when in debug mode.
  * Re-fix #839 from view commit overwrite.
  * Fixup const void cast warning.
  * Removed patch comments from acllist.c and msgencode.c
  * Added documentation doc/CNAME-basedRedirectionDesignNotes.pdf, from
    Jinmei Tatuya (Infoblox).
  * Fix #1125: unbound could reuse an answer packet incorrectly for
    clients with different EDNS parameters, from Jinmei Tatuya.
  * Fix #1118: libunbound.pc sets strange Libs, Libs.private values.
  * Added Requires line to libunbound.pc
  * Fix #1130: whitespace in example.conf.in more consistent.
  * suppress compile warning in lex files.
  * init lzt variable, for older gcc compiler warnings.
  * fix --enable-dsa to work, instead of copying ecdsa enable.
  * Fix DNSSEC validation of query type ANY with DNAME answers.
  * Fixup query_info local_alias init.
  * Ported tests for local_cname unit test to testbound framework.
  * Fix #1134: unbound-control set_option -- val-override-date: -1 works
    immediately to ignore datetime, or back to 0 to enable it again. The --
    is to ignore the '-1' as an option flag.
  * Patch for server.num.zero_ttl stats for count of expired replies, from
    Pavel Odintsov.
  * Fix failure to build on arm64 with no sbrk.
  * Set OpenSSL security level to 0 when using aNULL ciphers.
  * configure detects ssl security level API function in the autoconf
    manner. Every function on its own, so that other libraries (eg.
    LibreSSL) can develop their API without hindrance.
  * Fix #1154: segfault when reading config with duplicate zones.
  * Note that for harden-below-nxdomain the nxdomain must be secure, this
    means nsec3 with optout is insufficient.
  * Fix #1155: test status code of unbound-control in 04-checkconf, not
    the status code from the tee command.
  * Fix #1158: reference RFC 8020 "NXDOMAIN: There Really Is Nothing
    Underneath" for the harden-below-nxdomain option.
  * patch from Dag-Erling Smorgrav that removes code that relies on sbrk().
  * Make access-control-tag-data RDATA absolute. This makes the RDATA
    origin consistent between local-data and access-control-tag-data.
  * Fix NSEC ENT wildcard check. Matching wildcard does not have to be a
    subdomain of the NSEC owner.
  * QNAME minimisation uses QTYPE=A, therefore always check cache for this
    type in harden-below-nxdomain functionality.
  * Added unit test for QNAME minimisation + harden below nxdomain synergy.
  * Fix that with openssl 1.1 control-use-cert: no uses less cpu, by using
    no encryption over the unix socket.
  * hyphen as minus fix, by Andreas Schulze
  * Fix #1170: document that 'inform' local-zone uses local-data.
  * Fix #1173: differ local-zone type deny from unset tag_actions element.
  * Add DSA support for OpenSSL 1.1.0
  * Fix remote control without cert for LibreSSL
  * Fix downcast warnings from visual studio in sldns code.</changelog>
  <changelog author="michael@stroeder.com" date="1487678400">- update to 1.6.1
  Features
  * configure --enable-systemd and lets unbound use systemd sockets if you
    enable use-systemd: yes in unbound.conf. Also there are
    contrib/unbound.socket and contrib/unbound.service: systemd files for
    unbound, install them in /usr/lib/systemd/system. Contributed by Sami
    Kerola and Pavel Odintsov.
  * [bugzilla: 1185 ]
    Source IP rate limiting, patch from Larissa Feng.
  * [bugzilla: 1184 ]
    Log DNS replies. This includes the same logging information that DNS
    queries and response code and response size, patch from Larissa Feng.
  * Include root trust anchor id 20326 in unbound-anchor.
  * 64bit is default for windows builds.
  Bug Fixes
  * [bugzilla: 1176 ]
    Fix stack size too small for Alpine Linux.
  * Fix unbound-control and ipv6 only.
    [bugzilla: 1182 ]
  * Fix Resource leak (socket), at startup.
    [bugzilla: 1178 ]
  * Fix attempt to fix setup error at end, pop result values at end of
    install.
  * iana portlist update
  * Fix inet_ntop and inet_pton warnings in windows compile.
  * [bugzilla: 1191 ]
    Fix remove comment about view deletion.
  * [bugzilla: 1188 ]
    Fix unresolved symbol 'fake_dsa' in libunbound.so when built with Nettle
  * [bugzilla: 1190 ]
    Fix to not echo back EDNS options in local-zone error response.
  * [bugzilla: 1194 ]
    Fix if cross build fails when $host isn't `uname` for getentropy.
  * Fix reload chdir failure when also chrooted to that directory.
  * Fix to return formerr for queries for meta-types, to avoid packet
    amplification if this meta-type is sent on to upstream.
  * [bugzilla: 1201 ]
    Fix missing unlock in answer_from_cache error condition.
  * [bugzilla: 1202 ]
    Fix code comment that packed_rrset_data is not always 'packed'.
  * Fix to also block meta types 128 through to 248 with formerr.
  * [bugzilla: 1206 ]
    Fix that some view-related commands are missing from 'unbound-control -h'
  * Fix to rename ub_callback_t to ub_callback_type, because POSIX
    reserves _t typedefs.
  * Fix to rename internally used types from _t to _type, because _t type
    names are reserved by POSIX.
  * Increase MAX_MODULE to 16.
  * [bugzilla: 1211 ]
    Fix can't enable interface-automatic if no IPv6 with more helpful
    error message.
  * fix root_anchor test for updated icannbundle.pem lower certificates.
  * Fix compile on solaris of the fix to use $host detect.
  * Fix for type name change and fix warning on windows compile.
  * Fix pythonmod for typedef changes.
  * Fix dnstap for warning of set but not used.
  * Fix autoconf of systemd check for lack of pkg-config.</changelog>
  <changelog author="michael@stroeder.com" date="1493035200">- update to 1.6.2
  Features
- Add trustanchor.unbound CH TXT that gets a response with a number
  of TXT RRs with a string like "example.com. 2345 1234" with
  the trust anchors and their keytags.
- Patch for view functionality for local-data-ptr from Björn Ketelaars.
- Response actions based on IP address from Jinmei Tatuya (Infoblox).
- Patch from Luiz Fernando Softov for Stats Shared Memory.
- unbound-control stats_shm command prints stats using shared memory,
  which uses less cpu.
- --disable-sha1 disables SHA1 support in RRSIG, so from DNSKEY and
  DS records.  NSEC3 is not disabled.
- #1217. DNSCrypt support, with --enable-dnscrypt, libsodium and then
  enabled in the config file from Manu Bretelle.
- Merge EDNS Client subnet implementation from feature branch into main
  branch, using new EDNS processing framework.
- harden-algo-downgrade: no also makes unbound more lenient about
  digest algorithms in DS records.
  Bug fixes
- sldns has ED25519 and ED448 algorithm number and name for display.
- sldns updated for vfixed and buffer resize indication from getdns.
- iana portlist update
- Fix #1224: Fix that defaults should not fall back to "Program Files
  (x86) if Unbound is 64bit by default on windows.
- Fix doc/CNAME-basedRedirectionDesignNotes.pdf zone static to
  redirect.
- make depend, autoconf, doxygen and lint fixed up.
- include sys/time.h for new shm code on NetBSD.
- Fix #1227: Fix that Unbound control allows weak ciphersuits.
- Fix #1226: provide official 32bit binary for windows.
- For #1227: if we have sha256, set the cipher list to have no
  known vulns.
- Fix testpkts.c, check if DO bit is set, not only if there is an OPT
  record.
- Fix #1229: Systemd service sandboxing in contrib/unbound.service.
- Fix #1230: swig version 2.0.1 is required for pythonmod, with
  1.3.40 it crashes when running repeatly unbound-control reload.
- fix enum conversion warnings
- fake-sha1 test option; print warning if used.  To make unit tests.
- unbound-control list local zone and data commands listed in the
  help output.
- Fix #1234: shortening DNAME loop produces duplicate DNAME records
  in ANSWER section.
- testbound understands Deckard MATCH rcode question answer commands.
- Fix #1235: Fix too long DNAME expansion produces SERVFAIL instead
  of YXDOMAIN + query loop, reported by Petr Spacek.
- Fix that SHM is not inited if not enabled.
- Fix that looped DNAMEs do not cause unbound to spend effort.
- trustanchor tags are sorted.  reusable routine to fetch taglist.
- Fix #1237 - Wrong resolving in chain, for norec queries that get
  SERVFAIL returned.
- make depend, autoconf, remove warnings about statement before var.
- lru_demote and lruhash_insert_or_retrieve functions for getdns.
- fixup for lruhash (whitespace and header file comment).
- dnscrypt tests.
- Fix doxygen for dnscrypt files.
- Fix #1238: segmentation fault when adding through the remote
  interface a per-view local zone to a view with no previous
  (configured) local zones.
- Fix #1229: Systemd service sandboxing, options in wrong sections.
- Fix #1239: configure fails to find python distutils if python
  prints warning.
- Fix to prevent non-referal query from being cached as referal when the
  no_cache_store flag was set.
- Remove (now unused) event2 include from dnscrypt code.
- Fix #1217: Add metrics to unbound-control interface showing
  crypted, cert request, plaintext and malformed queries (from
  Manu Bretelle).
- Do not add current time twice to TTL before ECS cache store.
- Do not touch rrset cache after ECS cache message generation.
- Use LDNS_EDNS_CLIENT_SUBNET as default ECS opcode.
- Fix #1244: document that use of chroot requires trust anchor file to
  be under chroot.
- Small fixup for documentation.
- Fix respip for braces when locks arent used.
- Fix pythonmod for cb changes.
- Generalise inplace callback (de)registration
- (de)register inplace callbacks for module id
- No unbound-control set_option for ECS options
- Deprecated client-subnet-opcode config option
- Introduced client-subnet-always-forward config option
- Changed max-client-subnet-ipv6 default to 56 (as in RFC)
- Removed extern ECS config options
- module_restart_next now calls clear on all following modules
- Also create ECS module qstate on module_event_pass event
- remove malloc from inplace_cb_register
- Unlock view in respip unit test
- Some whitespace fixup.
- Remove ECS option after REFUSED answer.
- Fix small memory leak in edns_opt_copy_alloc.
- Respip dereference after NULL check.
- Zero initialize addrtree allocation.
- Use correct identifier for SHM destroy.
- Display ECS module memory usage.
- Fix #1247: unbound does not shorten source prefix length when
  forwarding ECS.
- Properly check for allocation failure in local_data_find_tag_datas.
- Fix #1249: unbound doesn't return FORMERR to bogus ECS.
- Set SHM ECS memory usage to 0 when module not loaded.
- subnet mem value is available in shm, also when not enabled,
  to make the struct easier to memmap by other applications,
  independent of the configuration of unbound.
- Fix #1250: inconsistent indentation in services/listen_dnsport.c.</changelog>
  <changelog author="michael@stroeder.com" date="1497441600">- update to 1.6.3
  Bug Fixes
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname. When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.</changelog>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
</package>
<package pkgid="8143dd1d710064e77db6e36c3be46ebe010af25c99aca1d2ec298d5b01df0f79" name="libunbound-devel-mini" arch="src">
  <version epoch="0" ver="1.6.8" rel="lp150.2.6.1"/>
  <changelog author="michael@stroeder.com" date="1444910400">- update to 1.5.6
  Features
  - Default for ssl-port is port 853, the temporary port assignment for
    secure domain name system traffic. If you used to rely on the older
    default of port 443, you have to put a clause in unbound.conf for
    that. The new value is likely going to be the standardised port number
    for this traffic.
  - ANY responses include DNAME records if present, as per Evan Hunt's
    remark in dnsop.
  Bug Fixes
  - Fix segfault in the dns64 module in the formaterror error path.
  - Fix manpage to suggest using SIGTERM to terminate the server.
  - iana portlist update.</changelog>
  <changelog author="michael@stroeder.com" date="1449748800">- update to 1.5.7
  Features
  * Fix #594. libunbound: optionally use libnettle for crypto.
  Contributed by Luca Bruno.  Added --with-nettle for use with
  - -with-libunbound-only.
  * Implemented qname minimisation
  Bug Fixes
  * Fix #712: unbound-anchor appears to not fsync root.key.
  * Fix #714: Document config to block private-address for IPv4
    mapped IPv6 addresses.
  * portability, replace snprintf if return value broken
  * portability fixes.
  * detect libexpat without xml_StopParser function.
  * isblank() compat implementation.
  * patch from Doug Hogan for SSL_OP_NO_SSLvx options.
  * Fix #716: nodata proof with empty non-terminals and wildcards.
  * Fix #718: Fix unbound-control-setup with support for env
    without HEREDOC bash support.
  * ACX_SSL_CHECKS no longer adds -ldl needlessly.
  * Change example.conf: ftp.internic.net to https://www.internic.net
  * Fix for lenient accept of reverse order DNAME and CNAME.
  * spelling fixes from Igor Sobrado Delgado.
  * Fix that malformed EDNS query gets a response without malformed EDNS.
  * Added assert on rrset cache correctness.
  * Fix #720: add windows scripts to zip bundle,
    and fix unbound-control-setup windows batch file.
  * Fix for #724: conf syntax to read files from run dir (on Windows).
    And fix PCA prompt for unbound-service-install.exe.
    And add Changelog to windows binary dist.
  * .gitignore for git users.
  * iana portlist update.
  * Removed unneeded whitespace from example.conf.
  * Do not minimise forwarded requests.</changelog>
  <changelog author="meissner@suse.com" date="1454587200">- split off a libunbound package with less buildrequires to
  allow shorter buildcycles when built by gnutls. bsc#964346</changelog>
  <changelog author="mrueckert@suse.de" date="1455710400">- revert the previous change which would not solve the problem as
  the library package requires the unbound-anchor package
  instead introduce a libunbound-devel-mini package which holds the
  shared library and devel files with a minimal build requires.</changelog>
  <changelog author="mrueckert@suse.de" date="1456142400">- add libunbound-devel-mini-rpmlintrc as source</changelog>
  <changelog author="mrueckert@suse.de" date="1456228800">- also conflict the shlib package</changelog>
  <changelog author="michael@stroeder.com" date="1456401600">- update to 1.5.8
  Features
  * ip-transparent option for FreeBSD with IP_BINDANY socket option.
  * insecure-lan-zones: yesno config option, patch from Dag-Erling
    Smørgrav.
  * RR Type CSYNC support RFC 7477, in debug printout and config input.
  * RR Type OPENPGPKEY support (draft-ietf-dane-openpgpkey-07).
  * [bugzilla: 731 ] tcp-mss, outgoing-tcp-mss options for unbound.conf,
    patch from Daisuke Higashi.
  * Support RFC7686: handle ".onion" Special-Use Domain. It is blocked
    by default, and can be unblocked with "nodefault" localzone config.
  * ub_ctx_set_stub() function for libunbound to config stub zones.
  Bug Fixes
  * Fix that NSEC3 negative cache is used when there is no salt.
  * sorted ubsyms.def file with exported libunbound functions.
  * Print understandable debug log when unusable DS record is seen.
  * load gost algorithm if digest is seen before key algorithm.
  * Fix that "make install" fails due to "text file busy" error.
  * Set IPPROTO_IP6 for ipv6 sockets otherwise invalid argument error.
  * wait for sendto to drain socket buffers when they are full.
  * Neater cmdline_verbose increment patch from Edgar Pettijohn.
  * Made netbsd sendmsg test nonfatal, in case of false positives.
  * [bugzilla: 741 ] Fix: log message for dnstap socket connection is
    more clear.
  * [bugzilla: 734 ] Fix: chown the pidfile if it resides inside the
    chroot.
  * Fix cmsg alignment for argument to sendmsg on NetBSD.
  * Fix that unbound complains about unimplemented IP_PKTINFO for
    sendmsg on NetBSD (for interface-automatic).
  * [bugzilla: 738 ] Fix: Swig should not be invoked with CPPFLAGS.
  * Squelch 'cannot assign requested address' log messages unless
    verbosity is high, it was spammed after network down.
  * Fix to simplify empty string checking from Michael McConville.
  * [bugzilla: 734 ] Fix: Do not log an error when the PID file cannot
    be chown'ed. Patch from Simon Deziel.
  * Fix test if -pthreads unused to use better grep for portability.
  * Fix mingw crosscompile for recent mingw.
  * Update aclocal, autoconf output with new versions (1.15, 2.4.6).
  * Define DEFAULT_SOURCE together with BSD_SOURCE when that is defined,
    for Linux glibc 2.20.
  * Fixup contrib/aaaa-filter-iterator.patch for moved contents in the
    source code, so it applies cleanly again. Removed unused variable
    warnings.
  * [bugzilla: 729 ] Fix: omit use of escape sequences in echo since
    they are not portable (unbound-control-setup).
  * remove NULL-checks before free, patch from Michael McConville.
  * updated ax_pthread.m4 to version 21 with clang support, this removes
    a warning from compilation.
  * OSX portability, detect if sbrk is deprecated.
  * OSX clang, stop -pthread unused during link stage warnings.
  * OSX clang new flto check.
  * iana portlist update.</changelog>
  <changelog author="michael@stroeder.com" date="1465041600">- update to 1.5.9
  Features
  * generic edns option parse and store code.
  * Updated L root IPv6 address.
  * User defined pluggable event API for libunbound
  * ip_freebind: yesno option in unbound.conf sets IP_FREEBIND for binding
    to an IP address while the interface or address is down.
  * OpenSSL 1.1.0 portability, --disable-dsa configure option.
  * disable-dnssec-lame-check config option from Charles Walker.
  Bug Fixes
  * [bugzilla: 745 ]
  * Fix unbound.py - idn2dname throws UnicodeError when idnname contains
    trailing dot.
  * configure tests for the weak attribute support by the compiler.
  * [bugzilla: 747 ]
  * Fix assert in outnet_serviced_query_stop.
  * Updated configure and ltmain.sh.
  * Fixup of compile fix for pluggable event API from P.Y. Adi Prasaja.
  * Fixup backend2str for libev.
  * Fix libev usage of dispatch return value.
  * No side effects in tolower() call, in case it is a macro.
  * Fix warnings in ifdef corner case, older or unknown libevent.
  * Fix ip-transparent for ipv6 on FreeBSD, thanks to Nick Hibma.
  * Fix ip-transparent for tcp on freebsd.
  * [bugzilla: 746 ]
  * Fix unbound sets CD bit on all forwards. If no trust anchors, it'll not
    set CD bit when forwarding to another server. If a trust anchor, no CD
    bit on the first attempt to a forwarder, but CD bit thereafter on
    repeated attempts to get DNSSEC.
  * Limit number of QNAME minimisation iterations.
  * Validate QNAME minimised NXDOMAIN responses.
  * If QNAME minimisation is enabled, do cache lookup for QTYPE NS in
    harden-below-nxdomain.
  * Fix compile of getentropy_linux for SLES11 servicepack 4.
  * Fix dnstap-log-resolver-response-messages, from Nikolay Edigaryev.
  * Fix test for openssl to use HMAC_Update for 1.1.0.
  * ERR_remove_state deprecated since openssl 1.0.0.
  * OPENSSL_config is deprecated, removing.
  * Document permit-small-holddown for 5011 debug.
  * [bugzilla: 749 ]
  * Fix unbound-checkconf gets SIGSEGV when use against a malformatted
    conf file.
  * [bugzilla: 753 ]
  * Fix document dump_requestlist is for first thread.
  * Fix some malformed reponses to edns queries get fallback to nonedns.
  * [bugzilla: 759 ]
  * Fix 0x20 capsforid no longer checks type PTR, for compatibility with
    cisco dns guard. This lowers false positives.
  * Fix sldns with static checking fixes copied from getdns.
  * Fix memory leak in out-of-memory conditions of local zone add.
  * [bugzilla: 761 ]
  * Fix DNSSEC LAME false positive resolving nic.club.
  * [bugzilla: 766 ]
  * Fix dns64 should synthesize results on timeout/errors.
  * No QNAME minimisation fall-back for NXDOMAIN answers from
    DNSSEC signed zones.
  * [bugzilla: 767 ]
  * Fix Reference to an expired Internet-Draft in harden-below-nxdomain
    documentation.
  * remove memory leak from lame-check patch.
  * [bugzilla: 770 ]
  * Fix Small subgroup attack on DH used in unix pipe on localhost if
    unbound control uses a unix local named pipe.
  * Document write permission to directory of trust anchor needed.
  * [bugzilla: 768 ]
  * Fix Unbound Service Sometimes Can Not Shutdown Completely, WER Report
    Shown Up. Close handle before closing WSA.
  * Fix time in case answer comes from cache in ub_resolve_event().
  * Fix windows service to be created run with limited rights, as a network
    service account, from Mario Turschmann.
  * [bugzilla: 752 ]
  * Fix retry resource temporarily unavailable on control pipe.
  * iana ports fetched via https.
  * iana portlist update.</changelog>
  <changelog author="michael@stroeder.com" date="1474977600">- update to 1.5.10
  Features
  * Create a pkg-config file for libunbound in contrib.
  * TCP Fast open patch from Sara Dickinson.
  * Finegrained localzone control with define-tag, access-control-tag,
    access-control-tag-action, access-control-tag-data, local-zone-tag, and
    local-zone-override. And added types always_transparent, always_refuse,
    always_nxdomain with that.
  * If more than half of tcp connections are in use, a shorter timeout
    is used (200 msec, vs 2 minutes) to pressure tcp for new connects.
  * [bugzilla: 787 ] Fix #787: outgoing-interface netblock/64 ipv6
    option to use linux freebind to use 64bits of entropy for every query
    with random local part.
  * For #787: prefer-ip6 option for unbound.conf prefers to send
    upstream queries to ipv6 servers.
  * Add default root hints for IPv6 E.ROOT-SERVERS.NET, 2001:500:a8::e.
  * keep debug symbols in windows build.
  Bug Fixes
  * [bugzilla: 778 ] Fix unbound 1.5.9: -h segfault (null deref).
  * Fix unbound-anchor.exe file location defaults to Program Files with
    (x86) appended.
  * Fix to not ignore return value of chown() in daemon startup.
  * Better help text from -h (from Ray Griffith).
  * [bugzilla: 773 ] Fix Non-standard Python location build failure with
    pyunbound.
  * Improve threadsafety for openssl 0.9.8 ecdsa dnssec signatures.
  * Revert fix for NetworkService account on windows due to breakage it
    causes.
  * Fix that windows install will not overwrite existing service.conf
    file (and ignore gui config choices if it exists).
  * And delete service.conf.shipped on uninstall.
  * In unbound.conf directory: dir immediately changes to that
    directory, so that include: file below that is relative to that
    directory. With chroot, make the directory an absolute path inside chroot.
  * do not delete service.conf on windows uninstall.
  * document directory immediate fix and allow EXECUTABLE syntax in it
    on windows.
  * Fix directory: fix for unbound-checkconf, it restores cwd.
  * Use QTYPE=A for QNAME minimisation.
  * Keep track of number of time-outs when performing QNAME
    minimisation. Stop minimising when number of time-outs for a QNAME/QTYPE
    pair is more than three.
  * [bugzilla: 775 ] Fix unbound-host and unbound-anchor crash on
    windows, ignore null delete for wsaevent.
  * Fix spelling in freebind option man page text.
  * Fix windows link of ssl with crypt32.
  * [bugzilla: 779 ] Fix Union casting is non-portable.
  * [bugzilla: 780 ] Fix MAP_ANON not defined in HP-UX 11.31.
  * [bugzilla: 781 ] Fix prealloc() is an HP-UX system library call.
  * Decrease dp attempts at each QNAME minimisation iteration
  * [bugzilla: 784 ] Fix Build configure assumess that having getpwnam
    means there is endpwent function available.
  * Updated repository with newer flex and bison output.
  * Fix static compile on windows missing gdi32.
  * Fix dynamic link of anchor-update.exe on windows.
  * Fix detect of mingw for MXE package build.
  * Fixes for 64bit windows compile.
  * [bugzilla: 788 ] Fix for nettle 3.0: Failed to build with Nettle &gt;=
    3.0 and --with-libunbound-only --with-nettle.
  * Fixed unbound.doxygen for 1.8.11.
  * [bugzilla: 798 ] Fix Client-side TCP fast open fails (Linux).
  * [bugzilla: 801 ] Fix missing error condition handling in
    daemon_create_workers().
  * [bugzilla: 802 ] Fix workaround for function parameters that are
    "unused" without log_assert.
  * [bugzilla: 803 ] Fix confusing (and incorrect) code comment in
    daemon_cleanup().
  * [bugzilla: 806 ] Fix wrong comment removed.
  * use sendmsg instead of sendto for TFO.
  * [bugzilla: 807 ] Fix workaround for possible some "unused" function
    parameters in test code, from Jinmei Tatuya.
  * Note that OPENPGPKEY type is RFC 7929.
  * [bugzilla: 804 ] Fix #804: unbound stops responding after outage.
    Fixes queries that attempt to wait for an empty list of subqueries.
  * Fix for #804: lower num_target_queries for iterator also for failed
    lookups.
  * [bugzilla: 820 ] Fix set sldns_str2wire_rr_buf() dual meaning len
    parameter in each iteration in find_tag_datas().
  * [bugzilla: 777 ] Fix OpenSSL 1.1.0 compatibility, patch from
    Sebastian A. Siewior.
  * RFC 7958 is now out, updated docs for unbound-anchor.
  * Fix for compile without warnings with openssl 1.1.0.
  * [bugzilla: 826 ] Fix refuse_non_local could result in a broken response.
  * iana portlist update.
  * Fix compile with openssl 1.1.0 with api=1.1.0.
  * [bugzilla: 829 ] Fix doc of sldns_wire2str_rdata_buf() return value
    has an off-by-one typo, from Jinmei Tatuya (Infoblox).
  * Fix incomplete prototypes reported by Dag-Erling Smørgrav.
  * [bugzilla: 828 ] Fix missing type in access-control-tag-action
    redirect results in NXDOMAIN.
  * Take configured minimum TTL into consideration when reducing TTL to
    original TTL from RRSIG.
  * [bugzilla: 831 ] Fix workaround for spurious fread_chk warning
    against petal.c
  * Silenced flex-generated sign-unsigned warning print with gcc
    diagnostic pragma.
  * Fix for new splint on FreeBSD. Fix cast for sockaddr_un.sun_len.
  * fix potential memory leak in daemon/remote.c and nullpointer
    dereference in validator/autotrust.
  * [bugzilla: 883 ] Fix error for duplicate local zone entry.
  * [bugzilla: 835 ] Fix --disable-dsa with nettle verify.</changelog>
  <changelog author="michael@stroeder.com" date="1481803200">- update to 1.6.0
  Features
  * Added generic EDNS code for registering known EDNS option codes,
    bypassing the cache response stage and uniquifying mesh states. Four
    EDNS option lists were added to module_qstate
    (module_qstate.edns_opts_*) to store EDNS options from/to front/back side.
  * Added two flags to module_qstate (no_cache_lookup, no_cache_store)
    that control the modules' cache interactions.
  * Added code for registering inplace callback functions. The registered
    functions can be called just before replying with local data or Chaos,
    replying from cache, replying with SERVFAIL, replying with a resolved
    query, sending a query to a nameserver. The functions can inspect the
    available data and maybe change response/query related data (i.e. append
    EDNS options).
  * Updated Python module for the above.
  * Updated Python documentation.
  * Added views functionality.
  * Added qname-minimisation-strict config option.
  * Patch that resolves CNAMEs entered in local-data conf statements that
    point to data on the internet, from Jinmei Tatuya (Infoblox).
  * serve-expired config option: serve expired responses with TTL 0.
  * .gitattributes line for githubs code language display.
  * log-identity: config option to set sys log identity, patch from "Robin
    H. Johnson" (robbat2@gentoo.org).
  * Added stub-ssl-upstream and forward-ssl-upstream options.
  * Added local-zones and local-data bulk addition and removal
    functionality in unbound-control (local_zones, local_zones_remove,
    local_datas and local_datas_remove).
  * g.root-servers.net has AAAA address.
  Bug Fixes
  * Fix #836: unbound could echo back EDNS options in an error response.
  * Fix #838: 1.5.10 cannot be built on Solaris, undefined PATH_MAX.
  * Fix #839: Memory grows unexpectedly with large RPZ files.
  * Fix #840: infinite loop in unbound_munin_ plugin on unowned lockfile.
  * Fix #841: big local-zone's make it consume large amounts of memory.
  * Fix dnstap relaying "random" messages instead of resolver/forwarder
    responses, from Nikolay Edigaryev.
  * Fix Nits for 1.5.10 reported by Dag-Erling Smorgrav.
  * Fix #1117: spelling errors, from Robert Edmonds.
  * iana portlist update.
  * fix memoryleak logfile when in debug mode.
  * Re-fix #839 from view commit overwrite.
  * Fixup const void cast warning.
  * Removed patch comments from acllist.c and msgencode.c
  * Added documentation doc/CNAME-basedRedirectionDesignNotes.pdf, from
    Jinmei Tatuya (Infoblox).
  * Fix #1125: unbound could reuse an answer packet incorrectly for
    clients with different EDNS parameters, from Jinmei Tatuya.
  * Fix #1118: libunbound.pc sets strange Libs, Libs.private values.
  * Added Requires line to libunbound.pc
  * Fix #1130: whitespace in example.conf.in more consistent.
  * suppress compile warning in lex files.
  * init lzt variable, for older gcc compiler warnings.
  * fix --enable-dsa to work, instead of copying ecdsa enable.
  * Fix DNSSEC validation of query type ANY with DNAME answers.
  * Fixup query_info local_alias init.
  * Ported tests for local_cname unit test to testbound framework.
  * Fix #1134: unbound-control set_option -- val-override-date: -1 works
    immediately to ignore datetime, or back to 0 to enable it again. The --
    is to ignore the '-1' as an option flag.
  * Patch for server.num.zero_ttl stats for count of expired replies, from
    Pavel Odintsov.
  * Fix failure to build on arm64 with no sbrk.
  * Set OpenSSL security level to 0 when using aNULL ciphers.
  * configure detects ssl security level API function in the autoconf
    manner. Every function on its own, so that other libraries (eg.
    LibreSSL) can develop their API without hindrance.
  * Fix #1154: segfault when reading config with duplicate zones.
  * Note that for harden-below-nxdomain the nxdomain must be secure, this
    means nsec3 with optout is insufficient.
  * Fix #1155: test status code of unbound-control in 04-checkconf, not
    the status code from the tee command.
  * Fix #1158: reference RFC 8020 "NXDOMAIN: There Really Is Nothing
    Underneath" for the harden-below-nxdomain option.
  * patch from Dag-Erling Smorgrav that removes code that relies on sbrk().
  * Make access-control-tag-data RDATA absolute. This makes the RDATA
    origin consistent between local-data and access-control-tag-data.
  * Fix NSEC ENT wildcard check. Matching wildcard does not have to be a
    subdomain of the NSEC owner.
  * QNAME minimisation uses QTYPE=A, therefore always check cache for this
    type in harden-below-nxdomain functionality.
  * Added unit test for QNAME minimisation + harden below nxdomain synergy.
  * Fix that with openssl 1.1 control-use-cert: no uses less cpu, by using
    no encryption over the unix socket.
  * hyphen as minus fix, by Andreas Schulze
  * Fix #1170: document that 'inform' local-zone uses local-data.
  * Fix #1173: differ local-zone type deny from unset tag_actions element.
  * Add DSA support for OpenSSL 1.1.0
  * Fix remote control without cert for LibreSSL
  * Fix downcast warnings from visual studio in sldns code.</changelog>
  <changelog author="michael@stroeder.com" date="1487678400">- update to 1.6.1
  Features
  * configure --enable-systemd and lets unbound use systemd sockets if you
    enable use-systemd: yes in unbound.conf. Also there are
    contrib/unbound.socket and contrib/unbound.service: systemd files for
    unbound, install them in /usr/lib/systemd/system. Contributed by Sami
    Kerola and Pavel Odintsov.
  * [bugzilla: 1185 ]
    Source IP rate limiting, patch from Larissa Feng.
  * [bugzilla: 1184 ]
    Log DNS replies. This includes the same logging information that DNS
    queries and response code and response size, patch from Larissa Feng.
  * Include root trust anchor id 20326 in unbound-anchor.
  * 64bit is default for windows builds.
  Bug Fixes
  * [bugzilla: 1176 ]
    Fix stack size too small for Alpine Linux.
  * Fix unbound-control and ipv6 only.
    [bugzilla: 1182 ]
  * Fix Resource leak (socket), at startup.
    [bugzilla: 1178 ]
  * Fix attempt to fix setup error at end, pop result values at end of
    install.
  * iana portlist update
  * Fix inet_ntop and inet_pton warnings in windows compile.
  * [bugzilla: 1191 ]
    Fix remove comment about view deletion.
  * [bugzilla: 1188 ]
    Fix unresolved symbol 'fake_dsa' in libunbound.so when built with Nettle
  * [bugzilla: 1190 ]
    Fix to not echo back EDNS options in local-zone error response.
  * [bugzilla: 1194 ]
    Fix if cross build fails when $host isn't `uname` for getentropy.
  * Fix reload chdir failure when also chrooted to that directory.
  * Fix to return formerr for queries for meta-types, to avoid packet
    amplification if this meta-type is sent on to upstream.
  * [bugzilla: 1201 ]
    Fix missing unlock in answer_from_cache error condition.
  * [bugzilla: 1202 ]
    Fix code comment that packed_rrset_data is not always 'packed'.
  * Fix to also block meta types 128 through to 248 with formerr.
  * [bugzilla: 1206 ]
    Fix that some view-related commands are missing from 'unbound-control -h'
  * Fix to rename ub_callback_t to ub_callback_type, because POSIX
    reserves _t typedefs.
  * Fix to rename internally used types from _t to _type, because _t type
    names are reserved by POSIX.
  * Increase MAX_MODULE to 16.
  * [bugzilla: 1211 ]
    Fix can't enable interface-automatic if no IPv6 with more helpful
    error message.
  * fix root_anchor test for updated icannbundle.pem lower certificates.
  * Fix compile on solaris of the fix to use $host detect.
  * Fix for type name change and fix warning on windows compile.
  * Fix pythonmod for typedef changes.
  * Fix dnstap for warning of set but not used.
  * Fix autoconf of systemd check for lack of pkg-config.</changelog>
  <changelog author="michael@stroeder.com" date="1493035200">- update to 1.6.2
  Features
- Add trustanchor.unbound CH TXT that gets a response with a number
  of TXT RRs with a string like "example.com. 2345 1234" with
  the trust anchors and their keytags.
- Patch for view functionality for local-data-ptr from Björn Ketelaars.
- Response actions based on IP address from Jinmei Tatuya (Infoblox).
- Patch from Luiz Fernando Softov for Stats Shared Memory.
- unbound-control stats_shm command prints stats using shared memory,
  which uses less cpu.
- --disable-sha1 disables SHA1 support in RRSIG, so from DNSKEY and
  DS records.  NSEC3 is not disabled.
- #1217. DNSCrypt support, with --enable-dnscrypt, libsodium and then
  enabled in the config file from Manu Bretelle.
- Merge EDNS Client subnet implementation from feature branch into main
  branch, using new EDNS processing framework.
- harden-algo-downgrade: no also makes unbound more lenient about
  digest algorithms in DS records.
  Bug fixes
- sldns has ED25519 and ED448 algorithm number and name for display.
- sldns updated for vfixed and buffer resize indication from getdns.
- iana portlist update
- Fix #1224: Fix that defaults should not fall back to "Program Files
  (x86) if Unbound is 64bit by default on windows.
- Fix doc/CNAME-basedRedirectionDesignNotes.pdf zone static to
  redirect.
- make depend, autoconf, doxygen and lint fixed up.
- include sys/time.h for new shm code on NetBSD.
- Fix #1227: Fix that Unbound control allows weak ciphersuits.
- Fix #1226: provide official 32bit binary for windows.
- For #1227: if we have sha256, set the cipher list to have no
  known vulns.
- Fix testpkts.c, check if DO bit is set, not only if there is an OPT
  record.
- Fix #1229: Systemd service sandboxing in contrib/unbound.service.
- Fix #1230: swig version 2.0.1 is required for pythonmod, with
  1.3.40 it crashes when running repeatly unbound-control reload.
- fix enum conversion warnings
- fake-sha1 test option; print warning if used.  To make unit tests.
- unbound-control list local zone and data commands listed in the
  help output.
- Fix #1234: shortening DNAME loop produces duplicate DNAME records
  in ANSWER section.
- testbound understands Deckard MATCH rcode question answer commands.
- Fix #1235: Fix too long DNAME expansion produces SERVFAIL instead
  of YXDOMAIN + query loop, reported by Petr Spacek.
- Fix that SHM is not inited if not enabled.
- Fix that looped DNAMEs do not cause unbound to spend effort.
- trustanchor tags are sorted.  reusable routine to fetch taglist.
- Fix #1237 - Wrong resolving in chain, for norec queries that get
  SERVFAIL returned.
- make depend, autoconf, remove warnings about statement before var.
- lru_demote and lruhash_insert_or_retrieve functions for getdns.
- fixup for lruhash (whitespace and header file comment).
- dnscrypt tests.
- Fix doxygen for dnscrypt files.
- Fix #1238: segmentation fault when adding through the remote
  interface a per-view local zone to a view with no previous
  (configured) local zones.
- Fix #1229: Systemd service sandboxing, options in wrong sections.
- Fix #1239: configure fails to find python distutils if python
  prints warning.
- Fix to prevent non-referal query from being cached as referal when the
  no_cache_store flag was set.
- Remove (now unused) event2 include from dnscrypt code.
- Fix #1217: Add metrics to unbound-control interface showing
  crypted, cert request, plaintext and malformed queries (from
  Manu Bretelle).
- Do not add current time twice to TTL before ECS cache store.
- Do not touch rrset cache after ECS cache message generation.
- Use LDNS_EDNS_CLIENT_SUBNET as default ECS opcode.
- Fix #1244: document that use of chroot requires trust anchor file to
  be under chroot.
- Small fixup for documentation.
- Fix respip for braces when locks arent used.
- Fix pythonmod for cb changes.
- Generalise inplace callback (de)registration
- (de)register inplace callbacks for module id
- No unbound-control set_option for ECS options
- Deprecated client-subnet-opcode config option
- Introduced client-subnet-always-forward config option
- Changed max-client-subnet-ipv6 default to 56 (as in RFC)
- Removed extern ECS config options
- module_restart_next now calls clear on all following modules
- Also create ECS module qstate on module_event_pass event
- remove malloc from inplace_cb_register
- Unlock view in respip unit test
- Some whitespace fixup.
- Remove ECS option after REFUSED answer.
- Fix small memory leak in edns_opt_copy_alloc.
- Respip dereference after NULL check.
- Zero initialize addrtree allocation.
- Use correct identifier for SHM destroy.
- Display ECS module memory usage.
- Fix #1247: unbound does not shorten source prefix length when
  forwarding ECS.
- Properly check for allocation failure in local_data_find_tag_datas.
- Fix #1249: unbound doesn't return FORMERR to bogus ECS.
- Set SHM ECS memory usage to 0 when module not loaded.
- subnet mem value is available in shm, also when not enabled,
  to make the struct easier to memmap by other applications,
  independent of the configuration of unbound.
- Fix #1250: inconsistent indentation in services/listen_dnsport.c.</changelog>
  <changelog author="michael@stroeder.com" date="1497441600">- update to 1.6.3
  Bug Fixes
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname. When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.</changelog>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1539691200">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
</package>
<package pkgid="6aa55db916857c0bf3ca509805e8ba91b882fc5a8b80cfe7f3cd632380b4fde2" name="libunbound-devel-mini" arch="x86_64">
  <version epoch="0" ver="1.6.8" rel="lp150.2.6.1"/>
  <changelog author="michael@stroeder.com" date="1444910400">- update to 1.5.6
  Features
  - Default for ssl-port is port 853, the temporary port assignment for
    secure domain name system traffic. If you used to rely on the older
    default of port 443, you have to put a clause in unbound.conf for
    that. The new value is likely going to be the standardised port number
    for this traffic.
  - ANY responses include DNAME records if present, as per Evan Hunt's
    remark in dnsop.
  Bug Fixes
  - Fix segfault in the dns64 module in the formaterror error path.
  - Fix manpage to suggest using SIGTERM to terminate the server.
  - iana portlist update.</changelog>
  <changelog author="michael@stroeder.com" date="1449748800">- update to 1.5.7
  Features
  * Fix #594. libunbound: optionally use libnettle for crypto.
  Contributed by Luca Bruno.  Added --with-nettle for use with
  - -with-libunbound-only.
  * Implemented qname minimisation
  Bug Fixes
  * Fix #712: unbound-anchor appears to not fsync root.key.
  * Fix #714: Document config to block private-address for IPv4
    mapped IPv6 addresses.
  * portability, replace snprintf if return value broken
  * portability fixes.
  * detect libexpat without xml_StopParser function.
  * isblank() compat implementation.
  * patch from Doug Hogan for SSL_OP_NO_SSLvx options.
  * Fix #716: nodata proof with empty non-terminals and wildcards.
  * Fix #718: Fix unbound-control-setup with support for env
    without HEREDOC bash support.
  * ACX_SSL_CHECKS no longer adds -ldl needlessly.
  * Change example.conf: ftp.internic.net to https://www.internic.net
  * Fix for lenient accept of reverse order DNAME and CNAME.
  * spelling fixes from Igor Sobrado Delgado.
  * Fix that malformed EDNS query gets a response without malformed EDNS.
  * Added assert on rrset cache correctness.
  * Fix #720: add windows scripts to zip bundle,
    and fix unbound-control-setup windows batch file.
  * Fix for #724: conf syntax to read files from run dir (on Windows).
    And fix PCA prompt for unbound-service-install.exe.
    And add Changelog to windows binary dist.
  * .gitignore for git users.
  * iana portlist update.
  * Removed unneeded whitespace from example.conf.
  * Do not minimise forwarded requests.</changelog>
  <changelog author="meissner@suse.com" date="1454587200">- split off a libunbound package with less buildrequires to
  allow shorter buildcycles when built by gnutls. bsc#964346</changelog>
  <changelog author="mrueckert@suse.de" date="1455710400">- revert the previous change which would not solve the problem as
  the library package requires the unbound-anchor package
  instead introduce a libunbound-devel-mini package which holds the
  shared library and devel files with a minimal build requires.</changelog>
  <changelog author="mrueckert@suse.de" date="1456142400">- add libunbound-devel-mini-rpmlintrc as source</changelog>
  <changelog author="mrueckert@suse.de" date="1456228800">- also conflict the shlib package</changelog>
  <changelog author="michael@stroeder.com" date="1456401600">- update to 1.5.8
  Features
  * ip-transparent option for FreeBSD with IP_BINDANY socket option.
  * insecure-lan-zones: yesno config option, patch from Dag-Erling
    Smørgrav.
  * RR Type CSYNC support RFC 7477, in debug printout and config input.
  * RR Type OPENPGPKEY support (draft-ietf-dane-openpgpkey-07).
  * [bugzilla: 731 ] tcp-mss, outgoing-tcp-mss options for unbound.conf,
    patch from Daisuke Higashi.
  * Support RFC7686: handle ".onion" Special-Use Domain. It is blocked
    by default, and can be unblocked with "nodefault" localzone config.
  * ub_ctx_set_stub() function for libunbound to config stub zones.
  Bug Fixes
  * Fix that NSEC3 negative cache is used when there is no salt.
  * sorted ubsyms.def file with exported libunbound functions.
  * Print understandable debug log when unusable DS record is seen.
  * load gost algorithm if digest is seen before key algorithm.
  * Fix that "make install" fails due to "text file busy" error.
  * Set IPPROTO_IP6 for ipv6 sockets otherwise invalid argument error.
  * wait for sendto to drain socket buffers when they are full.
  * Neater cmdline_verbose increment patch from Edgar Pettijohn.
  * Made netbsd sendmsg test nonfatal, in case of false positives.
  * [bugzilla: 741 ] Fix: log message for dnstap socket connection is
    more clear.
  * [bugzilla: 734 ] Fix: chown the pidfile if it resides inside the
    chroot.
  * Fix cmsg alignment for argument to sendmsg on NetBSD.
  * Fix that unbound complains about unimplemented IP_PKTINFO for
    sendmsg on NetBSD (for interface-automatic).
  * [bugzilla: 738 ] Fix: Swig should not be invoked with CPPFLAGS.
  * Squelch 'cannot assign requested address' log messages unless
    verbosity is high, it was spammed after network down.
  * Fix to simplify empty string checking from Michael McConville.
  * [bugzilla: 734 ] Fix: Do not log an error when the PID file cannot
    be chown'ed. Patch from Simon Deziel.
  * Fix test if -pthreads unused to use better grep for portability.
  * Fix mingw crosscompile for recent mingw.
  * Update aclocal, autoconf output with new versions (1.15, 2.4.6).
  * Define DEFAULT_SOURCE together with BSD_SOURCE when that is defined,
    for Linux glibc 2.20.
  * Fixup contrib/aaaa-filter-iterator.patch for moved contents in the
    source code, so it applies cleanly again. Removed unused variable
    warnings.
  * [bugzilla: 729 ] Fix: omit use of escape sequences in echo since
    they are not portable (unbound-control-setup).
  * remove NULL-checks before free, patch from Michael McConville.
  * updated ax_pthread.m4 to version 21 with clang support, this removes
    a warning from compilation.
  * OSX portability, detect if sbrk is deprecated.
  * OSX clang, stop -pthread unused during link stage warnings.
  * OSX clang new flto check.
  * iana portlist update.</changelog>
  <changelog author="michael@stroeder.com" date="1465041600">- update to 1.5.9
  Features
  * generic edns option parse and store code.
  * Updated L root IPv6 address.
  * User defined pluggable event API for libunbound
  * ip_freebind: yesno option in unbound.conf sets IP_FREEBIND for binding
    to an IP address while the interface or address is down.
  * OpenSSL 1.1.0 portability, --disable-dsa configure option.
  * disable-dnssec-lame-check config option from Charles Walker.
  Bug Fixes
  * [bugzilla: 745 ]
  * Fix unbound.py - idn2dname throws UnicodeError when idnname contains
    trailing dot.
  * configure tests for the weak attribute support by the compiler.
  * [bugzilla: 747 ]
  * Fix assert in outnet_serviced_query_stop.
  * Updated configure and ltmain.sh.
  * Fixup of compile fix for pluggable event API from P.Y. Adi Prasaja.
  * Fixup backend2str for libev.
  * Fix libev usage of dispatch return value.
  * No side effects in tolower() call, in case it is a macro.
  * Fix warnings in ifdef corner case, older or unknown libevent.
  * Fix ip-transparent for ipv6 on FreeBSD, thanks to Nick Hibma.
  * Fix ip-transparent for tcp on freebsd.
  * [bugzilla: 746 ]
  * Fix unbound sets CD bit on all forwards. If no trust anchors, it'll not
    set CD bit when forwarding to another server. If a trust anchor, no CD
    bit on the first attempt to a forwarder, but CD bit thereafter on
    repeated attempts to get DNSSEC.
  * Limit number of QNAME minimisation iterations.
  * Validate QNAME minimised NXDOMAIN responses.
  * If QNAME minimisation is enabled, do cache lookup for QTYPE NS in
    harden-below-nxdomain.
  * Fix compile of getentropy_linux for SLES11 servicepack 4.
  * Fix dnstap-log-resolver-response-messages, from Nikolay Edigaryev.
  * Fix test for openssl to use HMAC_Update for 1.1.0.
  * ERR_remove_state deprecated since openssl 1.0.0.
  * OPENSSL_config is deprecated, removing.
  * Document permit-small-holddown for 5011 debug.
  * [bugzilla: 749 ]
  * Fix unbound-checkconf gets SIGSEGV when use against a malformatted
    conf file.
  * [bugzilla: 753 ]
  * Fix document dump_requestlist is for first thread.
  * Fix some malformed reponses to edns queries get fallback to nonedns.
  * [bugzilla: 759 ]
  * Fix 0x20 capsforid no longer checks type PTR, for compatibility with
    cisco dns guard. This lowers false positives.
  * Fix sldns with static checking fixes copied from getdns.
  * Fix memory leak in out-of-memory conditions of local zone add.
  * [bugzilla: 761 ]
  * Fix DNSSEC LAME false positive resolving nic.club.
  * [bugzilla: 766 ]
  * Fix dns64 should synthesize results on timeout/errors.
  * No QNAME minimisation fall-back for NXDOMAIN answers from
    DNSSEC signed zones.
  * [bugzilla: 767 ]
  * Fix Reference to an expired Internet-Draft in harden-below-nxdomain
    documentation.
  * remove memory leak from lame-check patch.
  * [bugzilla: 770 ]
  * Fix Small subgroup attack on DH used in unix pipe on localhost if
    unbound control uses a unix local named pipe.
  * Document write permission to directory of trust anchor needed.
  * [bugzilla: 768 ]
  * Fix Unbound Service Sometimes Can Not Shutdown Completely, WER Report
    Shown Up. Close handle before closing WSA.
  * Fix time in case answer comes from cache in ub_resolve_event().
  * Fix windows service to be created run with limited rights, as a network
    service account, from Mario Turschmann.
  * [bugzilla: 752 ]
  * Fix retry resource temporarily unavailable on control pipe.
  * iana ports fetched via https.
  * iana portlist update.</changelog>
  <changelog author="michael@stroeder.com" date="1474977600">- update to 1.5.10
  Features
  * Create a pkg-config file for libunbound in contrib.
  * TCP Fast open patch from Sara Dickinson.
  * Finegrained localzone control with define-tag, access-control-tag,
    access-control-tag-action, access-control-tag-data, local-zone-tag, and
    local-zone-override. And added types always_transparent, always_refuse,
    always_nxdomain with that.
  * If more than half of tcp connections are in use, a shorter timeout
    is used (200 msec, vs 2 minutes) to pressure tcp for new connects.
  * [bugzilla: 787 ] Fix #787: outgoing-interface netblock/64 ipv6
    option to use linux freebind to use 64bits of entropy for every query
    with random local part.
  * For #787: prefer-ip6 option for unbound.conf prefers to send
    upstream queries to ipv6 servers.
  * Add default root hints for IPv6 E.ROOT-SERVERS.NET, 2001:500:a8::e.
  * keep debug symbols in windows build.
  Bug Fixes
  * [bugzilla: 778 ] Fix unbound 1.5.9: -h segfault (null deref).
  * Fix unbound-anchor.exe file location defaults to Program Files with
    (x86) appended.
  * Fix to not ignore return value of chown() in daemon startup.
  * Better help text from -h (from Ray Griffith).
  * [bugzilla: 773 ] Fix Non-standard Python location build failure with
    pyunbound.
  * Improve threadsafety for openssl 0.9.8 ecdsa dnssec signatures.
  * Revert fix for NetworkService account on windows due to breakage it
    causes.
  * Fix that windows install will not overwrite existing service.conf
    file (and ignore gui config choices if it exists).
  * And delete service.conf.shipped on uninstall.
  * In unbound.conf directory: dir immediately changes to that
    directory, so that include: file below that is relative to that
    directory. With chroot, make the directory an absolute path inside chroot.
  * do not delete service.conf on windows uninstall.
  * document directory immediate fix and allow EXECUTABLE syntax in it
    on windows.
  * Fix directory: fix for unbound-checkconf, it restores cwd.
  * Use QTYPE=A for QNAME minimisation.
  * Keep track of number of time-outs when performing QNAME
    minimisation. Stop minimising when number of time-outs for a QNAME/QTYPE
    pair is more than three.
  * [bugzilla: 775 ] Fix unbound-host and unbound-anchor crash on
    windows, ignore null delete for wsaevent.
  * Fix spelling in freebind option man page text.
  * Fix windows link of ssl with crypt32.
  * [bugzilla: 779 ] Fix Union casting is non-portable.
  * [bugzilla: 780 ] Fix MAP_ANON not defined in HP-UX 11.31.
  * [bugzilla: 781 ] Fix prealloc() is an HP-UX system library call.
  * Decrease dp attempts at each QNAME minimisation iteration
  * [bugzilla: 784 ] Fix Build configure assumess that having getpwnam
    means there is endpwent function available.
  * Updated repository with newer flex and bison output.
  * Fix static compile on windows missing gdi32.
  * Fix dynamic link of anchor-update.exe on windows.
  * Fix detect of mingw for MXE package build.
  * Fixes for 64bit windows compile.
  * [bugzilla: 788 ] Fix for nettle 3.0: Failed to build with Nettle &gt;=
    3.0 and --with-libunbound-only --with-nettle.
  * Fixed unbound.doxygen for 1.8.11.
  * [bugzilla: 798 ] Fix Client-side TCP fast open fails (Linux).
  * [bugzilla: 801 ] Fix missing error condition handling in
    daemon_create_workers().
  * [bugzilla: 802 ] Fix workaround for function parameters that are
    "unused" without log_assert.
  * [bugzilla: 803 ] Fix confusing (and incorrect) code comment in
    daemon_cleanup().
  * [bugzilla: 806 ] Fix wrong comment removed.
  * use sendmsg instead of sendto for TFO.
  * [bugzilla: 807 ] Fix workaround for possible some "unused" function
    parameters in test code, from Jinmei Tatuya.
  * Note that OPENPGPKEY type is RFC 7929.
  * [bugzilla: 804 ] Fix #804: unbound stops responding after outage.
    Fixes queries that attempt to wait for an empty list of subqueries.
  * Fix for #804: lower num_target_queries for iterator also for failed
    lookups.
  * [bugzilla: 820 ] Fix set sldns_str2wire_rr_buf() dual meaning len
    parameter in each iteration in find_tag_datas().
  * [bugzilla: 777 ] Fix OpenSSL 1.1.0 compatibility, patch from
    Sebastian A. Siewior.
  * RFC 7958 is now out, updated docs for unbound-anchor.
  * Fix for compile without warnings with openssl 1.1.0.
  * [bugzilla: 826 ] Fix refuse_non_local could result in a broken response.
  * iana portlist update.
  * Fix compile with openssl 1.1.0 with api=1.1.0.
  * [bugzilla: 829 ] Fix doc of sldns_wire2str_rdata_buf() return value
    has an off-by-one typo, from Jinmei Tatuya (Infoblox).
  * Fix incomplete prototypes reported by Dag-Erling Smørgrav.
  * [bugzilla: 828 ] Fix missing type in access-control-tag-action
    redirect results in NXDOMAIN.
  * Take configured minimum TTL into consideration when reducing TTL to
    original TTL from RRSIG.
  * [bugzilla: 831 ] Fix workaround for spurious fread_chk warning
    against petal.c
  * Silenced flex-generated sign-unsigned warning print with gcc
    diagnostic pragma.
  * Fix for new splint on FreeBSD. Fix cast for sockaddr_un.sun_len.
  * fix potential memory leak in daemon/remote.c and nullpointer
    dereference in validator/autotrust.
  * [bugzilla: 883 ] Fix error for duplicate local zone entry.
  * [bugzilla: 835 ] Fix --disable-dsa with nettle verify.</changelog>
  <changelog author="michael@stroeder.com" date="1481803200">- update to 1.6.0
  Features
  * Added generic EDNS code for registering known EDNS option codes,
    bypassing the cache response stage and uniquifying mesh states. Four
    EDNS option lists were added to module_qstate
    (module_qstate.edns_opts_*) to store EDNS options from/to front/back side.
  * Added two flags to module_qstate (no_cache_lookup, no_cache_store)
    that control the modules' cache interactions.
  * Added code for registering inplace callback functions. The registered
    functions can be called just before replying with local data or Chaos,
    replying from cache, replying with SERVFAIL, replying with a resolved
    query, sending a query to a nameserver. The functions can inspect the
    available data and maybe change response/query related data (i.e. append
    EDNS options).
  * Updated Python module for the above.
  * Updated Python documentation.
  * Added views functionality.
  * Added qname-minimisation-strict config option.
  * Patch that resolves CNAMEs entered in local-data conf statements that
    point to data on the internet, from Jinmei Tatuya (Infoblox).
  * serve-expired config option: serve expired responses with TTL 0.
  * .gitattributes line for githubs code language display.
  * log-identity: config option to set sys log identity, patch from "Robin
    H. Johnson" (robbat2@gentoo.org).
  * Added stub-ssl-upstream and forward-ssl-upstream options.
  * Added local-zones and local-data bulk addition and removal
    functionality in unbound-control (local_zones, local_zones_remove,
    local_datas and local_datas_remove).
  * g.root-servers.net has AAAA address.
  Bug Fixes
  * Fix #836: unbound could echo back EDNS options in an error response.
  * Fix #838: 1.5.10 cannot be built on Solaris, undefined PATH_MAX.
  * Fix #839: Memory grows unexpectedly with large RPZ files.
  * Fix #840: infinite loop in unbound_munin_ plugin on unowned lockfile.
  * Fix #841: big local-zone's make it consume large amounts of memory.
  * Fix dnstap relaying "random" messages instead of resolver/forwarder
    responses, from Nikolay Edigaryev.
  * Fix Nits for 1.5.10 reported by Dag-Erling Smorgrav.
  * Fix #1117: spelling errors, from Robert Edmonds.
  * iana portlist update.
  * fix memoryleak logfile when in debug mode.
  * Re-fix #839 from view commit overwrite.
  * Fixup const void cast warning.
  * Removed patch comments from acllist.c and msgencode.c
  * Added documentation doc/CNAME-basedRedirectionDesignNotes.pdf, from
    Jinmei Tatuya (Infoblox).
  * Fix #1125: unbound could reuse an answer packet incorrectly for
    clients with different EDNS parameters, from Jinmei Tatuya.
  * Fix #1118: libunbound.pc sets strange Libs, Libs.private values.
  * Added Requires line to libunbound.pc
  * Fix #1130: whitespace in example.conf.in more consistent.
  * suppress compile warning in lex files.
  * init lzt variable, for older gcc compiler warnings.
  * fix --enable-dsa to work, instead of copying ecdsa enable.
  * Fix DNSSEC validation of query type ANY with DNAME answers.
  * Fixup query_info local_alias init.
  * Ported tests for local_cname unit test to testbound framework.
  * Fix #1134: unbound-control set_option -- val-override-date: -1 works
    immediately to ignore datetime, or back to 0 to enable it again. The --
    is to ignore the '-1' as an option flag.
  * Patch for server.num.zero_ttl stats for count of expired replies, from
    Pavel Odintsov.
  * Fix failure to build on arm64 with no sbrk.
  * Set OpenSSL security level to 0 when using aNULL ciphers.
  * configure detects ssl security level API function in the autoconf
    manner. Every function on its own, so that other libraries (eg.
    LibreSSL) can develop their API without hindrance.
  * Fix #1154: segfault when reading config with duplicate zones.
  * Note that for harden-below-nxdomain the nxdomain must be secure, this
    means nsec3 with optout is insufficient.
  * Fix #1155: test status code of unbound-control in 04-checkconf, not
    the status code from the tee command.
  * Fix #1158: reference RFC 8020 "NXDOMAIN: There Really Is Nothing
    Underneath" for the harden-below-nxdomain option.
  * patch from Dag-Erling Smorgrav that removes code that relies on sbrk().
  * Make access-control-tag-data RDATA absolute. This makes the RDATA
    origin consistent between local-data and access-control-tag-data.
  * Fix NSEC ENT wildcard check. Matching wildcard does not have to be a
    subdomain of the NSEC owner.
  * QNAME minimisation uses QTYPE=A, therefore always check cache for this
    type in harden-below-nxdomain functionality.
  * Added unit test for QNAME minimisation + harden below nxdomain synergy.
  * Fix that with openssl 1.1 control-use-cert: no uses less cpu, by using
    no encryption over the unix socket.
  * hyphen as minus fix, by Andreas Schulze
  * Fix #1170: document that 'inform' local-zone uses local-data.
  * Fix #1173: differ local-zone type deny from unset tag_actions element.
  * Add DSA support for OpenSSL 1.1.0
  * Fix remote control without cert for LibreSSL
  * Fix downcast warnings from visual studio in sldns code.</changelog>
  <changelog author="michael@stroeder.com" date="1487678400">- update to 1.6.1
  Features
  * configure --enable-systemd and lets unbound use systemd sockets if you
    enable use-systemd: yes in unbound.conf. Also there are
    contrib/unbound.socket and contrib/unbound.service: systemd files for
    unbound, install them in /usr/lib/systemd/system. Contributed by Sami
    Kerola and Pavel Odintsov.
  * [bugzilla: 1185 ]
    Source IP rate limiting, patch from Larissa Feng.
  * [bugzilla: 1184 ]
    Log DNS replies. This includes the same logging information that DNS
    queries and response code and response size, patch from Larissa Feng.
  * Include root trust anchor id 20326 in unbound-anchor.
  * 64bit is default for windows builds.
  Bug Fixes
  * [bugzilla: 1176 ]
    Fix stack size too small for Alpine Linux.
  * Fix unbound-control and ipv6 only.
    [bugzilla: 1182 ]
  * Fix Resource leak (socket), at startup.
    [bugzilla: 1178 ]
  * Fix attempt to fix setup error at end, pop result values at end of
    install.
  * iana portlist update
  * Fix inet_ntop and inet_pton warnings in windows compile.
  * [bugzilla: 1191 ]
    Fix remove comment about view deletion.
  * [bugzilla: 1188 ]
    Fix unresolved symbol 'fake_dsa' in libunbound.so when built with Nettle
  * [bugzilla: 1190 ]
    Fix to not echo back EDNS options in local-zone error response.
  * [bugzilla: 1194 ]
    Fix if cross build fails when $host isn't `uname` for getentropy.
  * Fix reload chdir failure when also chrooted to that directory.
  * Fix to return formerr for queries for meta-types, to avoid packet
    amplification if this meta-type is sent on to upstream.
  * [bugzilla: 1201 ]
    Fix missing unlock in answer_from_cache error condition.
  * [bugzilla: 1202 ]
    Fix code comment that packed_rrset_data is not always 'packed'.
  * Fix to also block meta types 128 through to 248 with formerr.
  * [bugzilla: 1206 ]
    Fix that some view-related commands are missing from 'unbound-control -h'
  * Fix to rename ub_callback_t to ub_callback_type, because POSIX
    reserves _t typedefs.
  * Fix to rename internally used types from _t to _type, because _t type
    names are reserved by POSIX.
  * Increase MAX_MODULE to 16.
  * [bugzilla: 1211 ]
    Fix can't enable interface-automatic if no IPv6 with more helpful
    error message.
  * fix root_anchor test for updated icannbundle.pem lower certificates.
  * Fix compile on solaris of the fix to use $host detect.
  * Fix for type name change and fix warning on windows compile.
  * Fix pythonmod for typedef changes.
  * Fix dnstap for warning of set but not used.
  * Fix autoconf of systemd check for lack of pkg-config.</changelog>
  <changelog author="michael@stroeder.com" date="1493035200">- update to 1.6.2
  Features
- Add trustanchor.unbound CH TXT that gets a response with a number
  of TXT RRs with a string like "example.com. 2345 1234" with
  the trust anchors and their keytags.
- Patch for view functionality for local-data-ptr from Björn Ketelaars.
- Response actions based on IP address from Jinmei Tatuya (Infoblox).
- Patch from Luiz Fernando Softov for Stats Shared Memory.
- unbound-control stats_shm command prints stats using shared memory,
  which uses less cpu.
- --disable-sha1 disables SHA1 support in RRSIG, so from DNSKEY and
  DS records.  NSEC3 is not disabled.
- #1217. DNSCrypt support, with --enable-dnscrypt, libsodium and then
  enabled in the config file from Manu Bretelle.
- Merge EDNS Client subnet implementation from feature branch into main
  branch, using new EDNS processing framework.
- harden-algo-downgrade: no also makes unbound more lenient about
  digest algorithms in DS records.
  Bug fixes
- sldns has ED25519 and ED448 algorithm number and name for display.
- sldns updated for vfixed and buffer resize indication from getdns.
- iana portlist update
- Fix #1224: Fix that defaults should not fall back to "Program Files
  (x86) if Unbound is 64bit by default on windows.
- Fix doc/CNAME-basedRedirectionDesignNotes.pdf zone static to
  redirect.
- make depend, autoconf, doxygen and lint fixed up.
- include sys/time.h for new shm code on NetBSD.
- Fix #1227: Fix that Unbound control allows weak ciphersuits.
- Fix #1226: provide official 32bit binary for windows.
- For #1227: if we have sha256, set the cipher list to have no
  known vulns.
- Fix testpkts.c, check if DO bit is set, not only if there is an OPT
  record.
- Fix #1229: Systemd service sandboxing in contrib/unbound.service.
- Fix #1230: swig version 2.0.1 is required for pythonmod, with
  1.3.40 it crashes when running repeatly unbound-control reload.
- fix enum conversion warnings
- fake-sha1 test option; print warning if used.  To make unit tests.
- unbound-control list local zone and data commands listed in the
  help output.
- Fix #1234: shortening DNAME loop produces duplicate DNAME records
  in ANSWER section.
- testbound understands Deckard MATCH rcode question answer commands.
- Fix #1235: Fix too long DNAME expansion produces SERVFAIL instead
  of YXDOMAIN + query loop, reported by Petr Spacek.
- Fix that SHM is not inited if not enabled.
- Fix that looped DNAMEs do not cause unbound to spend effort.
- trustanchor tags are sorted.  reusable routine to fetch taglist.
- Fix #1237 - Wrong resolving in chain, for norec queries that get
  SERVFAIL returned.
- make depend, autoconf, remove warnings about statement before var.
- lru_demote and lruhash_insert_or_retrieve functions for getdns.
- fixup for lruhash (whitespace and header file comment).
- dnscrypt tests.
- Fix doxygen for dnscrypt files.
- Fix #1238: segmentation fault when adding through the remote
  interface a per-view local zone to a view with no previous
  (configured) local zones.
- Fix #1229: Systemd service sandboxing, options in wrong sections.
- Fix #1239: configure fails to find python distutils if python
  prints warning.
- Fix to prevent non-referal query from being cached as referal when the
  no_cache_store flag was set.
- Remove (now unused) event2 include from dnscrypt code.
- Fix #1217: Add metrics to unbound-control interface showing
  crypted, cert request, plaintext and malformed queries (from
  Manu Bretelle).
- Do not add current time twice to TTL before ECS cache store.
- Do not touch rrset cache after ECS cache message generation.
- Use LDNS_EDNS_CLIENT_SUBNET as default ECS opcode.
- Fix #1244: document that use of chroot requires trust anchor file to
  be under chroot.
- Small fixup for documentation.
- Fix respip for braces when locks arent used.
- Fix pythonmod for cb changes.
- Generalise inplace callback (de)registration
- (de)register inplace callbacks for module id
- No unbound-control set_option for ECS options
- Deprecated client-subnet-opcode config option
- Introduced client-subnet-always-forward config option
- Changed max-client-subnet-ipv6 default to 56 (as in RFC)
- Removed extern ECS config options
- module_restart_next now calls clear on all following modules
- Also create ECS module qstate on module_event_pass event
- remove malloc from inplace_cb_register
- Unlock view in respip unit test
- Some whitespace fixup.
- Remove ECS option after REFUSED answer.
- Fix small memory leak in edns_opt_copy_alloc.
- Respip dereference after NULL check.
- Zero initialize addrtree allocation.
- Use correct identifier for SHM destroy.
- Display ECS module memory usage.
- Fix #1247: unbound does not shorten source prefix length when
  forwarding ECS.
- Properly check for allocation failure in local_data_find_tag_datas.
- Fix #1249: unbound doesn't return FORMERR to bogus ECS.
- Set SHM ECS memory usage to 0 when module not loaded.
- subnet mem value is available in shm, also when not enabled,
  to make the struct easier to memmap by other applications,
  independent of the configuration of unbound.
- Fix #1250: inconsistent indentation in services/listen_dnsport.c.</changelog>
  <changelog author="michael@stroeder.com" date="1497441600">- update to 1.6.3
  Bug Fixes
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname. When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.</changelog>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1539691200">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
</package>
<package pkgid="67accc2a9fd3f8cb881dd805171e23233edc514c210bb176868591ed1d52eba3" name="libunbound2" arch="x86_64">
  <version epoch="0" ver="1.6.8" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.com" date="1454587200">- split off a libunbound package with less buildrequires to
  allow shorter buildcycles when built by gnutls. bsc#964346</changelog>
  <changelog author="mrueckert@suse.de" date="1455710400">- revert the previous change which would not solve the problem as
  the library package requires the unbound-anchor package
  instead introduce a libunbound-devel-mini package which holds the
  shared library and devel files with a minimal build requires.</changelog>
  <changelog author="mrueckert@suse.de" date="1456142400">- add libunbound-devel-mini-rpmlintrc as source</changelog>
  <changelog author="mrueckert@suse.de" date="1456228800">- also conflict the shlib package</changelog>
  <changelog author="michael@stroeder.com" date="1456401600">- update to 1.5.8
  Features
  * ip-transparent option for FreeBSD with IP_BINDANY socket option.
  * insecure-lan-zones: yesno config option, patch from Dag-Erling
    Smørgrav.
  * RR Type CSYNC support RFC 7477, in debug printout and config input.
  * RR Type OPENPGPKEY support (draft-ietf-dane-openpgpkey-07).
  * [bugzilla: 731 ] tcp-mss, outgoing-tcp-mss options for unbound.conf,
    patch from Daisuke Higashi.
  * Support RFC7686: handle ".onion" Special-Use Domain. It is blocked
    by default, and can be unblocked with "nodefault" localzone config.
  * ub_ctx_set_stub() function for libunbound to config stub zones.
  Bug Fixes
  * Fix that NSEC3 negative cache is used when there is no salt.
  * sorted ubsyms.def file with exported libunbound functions.
  * Print understandable debug log when unusable DS record is seen.
  * load gost algorithm if digest is seen before key algorithm.
  * Fix that "make install" fails due to "text file busy" error.
  * Set IPPROTO_IP6 for ipv6 sockets otherwise invalid argument error.
  * wait for sendto to drain socket buffers when they are full.
  * Neater cmdline_verbose increment patch from Edgar Pettijohn.
  * Made netbsd sendmsg test nonfatal, in case of false positives.
  * [bugzilla: 741 ] Fix: log message for dnstap socket connection is
    more clear.
  * [bugzilla: 734 ] Fix: chown the pidfile if it resides inside the
    chroot.
  * Fix cmsg alignment for argument to sendmsg on NetBSD.
  * Fix that unbound complains about unimplemented IP_PKTINFO for
    sendmsg on NetBSD (for interface-automatic).
  * [bugzilla: 738 ] Fix: Swig should not be invoked with CPPFLAGS.
  * Squelch 'cannot assign requested address' log messages unless
    verbosity is high, it was spammed after network down.
  * Fix to simplify empty string checking from Michael McConville.
  * [bugzilla: 734 ] Fix: Do not log an error when the PID file cannot
    be chown'ed. Patch from Simon Deziel.
  * Fix test if -pthreads unused to use better grep for portability.
  * Fix mingw crosscompile for recent mingw.
  * Update aclocal, autoconf output with new versions (1.15, 2.4.6).
  * Define DEFAULT_SOURCE together with BSD_SOURCE when that is defined,
    for Linux glibc 2.20.
  * Fixup contrib/aaaa-filter-iterator.patch for moved contents in the
    source code, so it applies cleanly again. Removed unused variable
    warnings.
  * [bugzilla: 729 ] Fix: omit use of escape sequences in echo since
    they are not portable (unbound-control-setup).
  * remove NULL-checks before free, patch from Michael McConville.
  * updated ax_pthread.m4 to version 21 with clang support, this removes
    a warning from compilation.
  * OSX portability, detect if sbrk is deprecated.
  * OSX clang, stop -pthread unused during link stage warnings.
  * OSX clang new flto check.
  * iana portlist update.</changelog>
  <changelog author="michael@stroeder.com" date="1465041600">- update to 1.5.9
  Features
  * generic edns option parse and store code.
  * Updated L root IPv6 address.
  * User defined pluggable event API for libunbound
  * ip_freebind: yesno option in unbound.conf sets IP_FREEBIND for binding
    to an IP address while the interface or address is down.
  * OpenSSL 1.1.0 portability, --disable-dsa configure option.
  * disable-dnssec-lame-check config option from Charles Walker.
  Bug Fixes
  * [bugzilla: 745 ]
  * Fix unbound.py - idn2dname throws UnicodeError when idnname contains
    trailing dot.
  * configure tests for the weak attribute support by the compiler.
  * [bugzilla: 747 ]
  * Fix assert in outnet_serviced_query_stop.
  * Updated configure and ltmain.sh.
  * Fixup of compile fix for pluggable event API from P.Y. Adi Prasaja.
  * Fixup backend2str for libev.
  * Fix libev usage of dispatch return value.
  * No side effects in tolower() call, in case it is a macro.
  * Fix warnings in ifdef corner case, older or unknown libevent.
  * Fix ip-transparent for ipv6 on FreeBSD, thanks to Nick Hibma.
  * Fix ip-transparent for tcp on freebsd.
  * [bugzilla: 746 ]
  * Fix unbound sets CD bit on all forwards. If no trust anchors, it'll not
    set CD bit when forwarding to another server. If a trust anchor, no CD
    bit on the first attempt to a forwarder, but CD bit thereafter on
    repeated attempts to get DNSSEC.
  * Limit number of QNAME minimisation iterations.
  * Validate QNAME minimised NXDOMAIN responses.
  * If QNAME minimisation is enabled, do cache lookup for QTYPE NS in
    harden-below-nxdomain.
  * Fix compile of getentropy_linux for SLES11 servicepack 4.
  * Fix dnstap-log-resolver-response-messages, from Nikolay Edigaryev.
  * Fix test for openssl to use HMAC_Update for 1.1.0.
  * ERR_remove_state deprecated since openssl 1.0.0.
  * OPENSSL_config is deprecated, removing.
  * Document permit-small-holddown for 5011 debug.
  * [bugzilla: 749 ]
  * Fix unbound-checkconf gets SIGSEGV when use against a malformatted
    conf file.
  * [bugzilla: 753 ]
  * Fix document dump_requestlist is for first thread.
  * Fix some malformed reponses to edns queries get fallback to nonedns.
  * [bugzilla: 759 ]
  * Fix 0x20 capsforid no longer checks type PTR, for compatibility with
    cisco dns guard. This lowers false positives.
  * Fix sldns with static checking fixes copied from getdns.
  * Fix memory leak in out-of-memory conditions of local zone add.
  * [bugzilla: 761 ]
  * Fix DNSSEC LAME false positive resolving nic.club.
  * [bugzilla: 766 ]
  * Fix dns64 should synthesize results on timeout/errors.
  * No QNAME minimisation fall-back for NXDOMAIN answers from
    DNSSEC signed zones.
  * [bugzilla: 767 ]
  * Fix Reference to an expired Internet-Draft in harden-below-nxdomain
    documentation.
  * remove memory leak from lame-check patch.
  * [bugzilla: 770 ]
  * Fix Small subgroup attack on DH used in unix pipe on localhost if
    unbound control uses a unix local named pipe.
  * Document write permission to directory of trust anchor needed.
  * [bugzilla: 768 ]
  * Fix Unbound Service Sometimes Can Not Shutdown Completely, WER Report
    Shown Up. Close handle before closing WSA.
  * Fix time in case answer comes from cache in ub_resolve_event().
  * Fix windows service to be created run with limited rights, as a network
    service account, from Mario Turschmann.
  * [bugzilla: 752 ]
  * Fix retry resource temporarily unavailable on control pipe.
  * iana ports fetched via https.
  * iana portlist update.</changelog>
  <changelog author="michael@stroeder.com" date="1474977600">- update to 1.5.10
  Features
  * Create a pkg-config file for libunbound in contrib.
  * TCP Fast open patch from Sara Dickinson.
  * Finegrained localzone control with define-tag, access-control-tag,
    access-control-tag-action, access-control-tag-data, local-zone-tag, and
    local-zone-override. And added types always_transparent, always_refuse,
    always_nxdomain with that.
  * If more than half of tcp connections are in use, a shorter timeout
    is used (200 msec, vs 2 minutes) to pressure tcp for new connects.
  * [bugzilla: 787 ] Fix #787: outgoing-interface netblock/64 ipv6
    option to use linux freebind to use 64bits of entropy for every query
    with random local part.
  * For #787: prefer-ip6 option for unbound.conf prefers to send
    upstream queries to ipv6 servers.
  * Add default root hints for IPv6 E.ROOT-SERVERS.NET, 2001:500:a8::e.
  * keep debug symbols in windows build.
  Bug Fixes
  * [bugzilla: 778 ] Fix unbound 1.5.9: -h segfault (null deref).
  * Fix unbound-anchor.exe file location defaults to Program Files with
    (x86) appended.
  * Fix to not ignore return value of chown() in daemon startup.
  * Better help text from -h (from Ray Griffith).
  * [bugzilla: 773 ] Fix Non-standard Python location build failure with
    pyunbound.
  * Improve threadsafety for openssl 0.9.8 ecdsa dnssec signatures.
  * Revert fix for NetworkService account on windows due to breakage it
    causes.
  * Fix that windows install will not overwrite existing service.conf
    file (and ignore gui config choices if it exists).
  * And delete service.conf.shipped on uninstall.
  * In unbound.conf directory: dir immediately changes to that
    directory, so that include: file below that is relative to that
    directory. With chroot, make the directory an absolute path inside chroot.
  * do not delete service.conf on windows uninstall.
  * document directory immediate fix and allow EXECUTABLE syntax in it
    on windows.
  * Fix directory: fix for unbound-checkconf, it restores cwd.
  * Use QTYPE=A for QNAME minimisation.
  * Keep track of number of time-outs when performing QNAME
    minimisation. Stop minimising when number of time-outs for a QNAME/QTYPE
    pair is more than three.
  * [bugzilla: 775 ] Fix unbound-host and unbound-anchor crash on
    windows, ignore null delete for wsaevent.
  * Fix spelling in freebind option man page text.
  * Fix windows link of ssl with crypt32.
  * [bugzilla: 779 ] Fix Union casting is non-portable.
  * [bugzilla: 780 ] Fix MAP_ANON not defined in HP-UX 11.31.
  * [bugzilla: 781 ] Fix prealloc() is an HP-UX system library call.
  * Decrease dp attempts at each QNAME minimisation iteration
  * [bugzilla: 784 ] Fix Build configure assumess that having getpwnam
    means there is endpwent function available.
  * Updated repository with newer flex and bison output.
  * Fix static compile on windows missing gdi32.
  * Fix dynamic link of anchor-update.exe on windows.
  * Fix detect of mingw for MXE package build.
  * Fixes for 64bit windows compile.
  * [bugzilla: 788 ] Fix for nettle 3.0: Failed to build with Nettle &gt;=
    3.0 and --with-libunbound-only --with-nettle.
  * Fixed unbound.doxygen for 1.8.11.
  * [bugzilla: 798 ] Fix Client-side TCP fast open fails (Linux).
  * [bugzilla: 801 ] Fix missing error condition handling in
    daemon_create_workers().
  * [bugzilla: 802 ] Fix workaround for function parameters that are
    "unused" without log_assert.
  * [bugzilla: 803 ] Fix confusing (and incorrect) code comment in
    daemon_cleanup().
  * [bugzilla: 806 ] Fix wrong comment removed.
  * use sendmsg instead of sendto for TFO.
  * [bugzilla: 807 ] Fix workaround for possible some "unused" function
    parameters in test code, from Jinmei Tatuya.
  * Note that OPENPGPKEY type is RFC 7929.
  * [bugzilla: 804 ] Fix #804: unbound stops responding after outage.
    Fixes queries that attempt to wait for an empty list of subqueries.
  * Fix for #804: lower num_target_queries for iterator also for failed
    lookups.
  * [bugzilla: 820 ] Fix set sldns_str2wire_rr_buf() dual meaning len
    parameter in each iteration in find_tag_datas().
  * [bugzilla: 777 ] Fix OpenSSL 1.1.0 compatibility, patch from
    Sebastian A. Siewior.
  * RFC 7958 is now out, updated docs for unbound-anchor.
  * Fix for compile without warnings with openssl 1.1.0.
  * [bugzilla: 826 ] Fix refuse_non_local could result in a broken response.
  * iana portlist update.
  * Fix compile with openssl 1.1.0 with api=1.1.0.
  * [bugzilla: 829 ] Fix doc of sldns_wire2str_rdata_buf() return value
    has an off-by-one typo, from Jinmei Tatuya (Infoblox).
  * Fix incomplete prototypes reported by Dag-Erling Smørgrav.
  * [bugzilla: 828 ] Fix missing type in access-control-tag-action
    redirect results in NXDOMAIN.
  * Take configured minimum TTL into consideration when reducing TTL to
    original TTL from RRSIG.
  * [bugzilla: 831 ] Fix workaround for spurious fread_chk warning
    against petal.c
  * Silenced flex-generated sign-unsigned warning print with gcc
    diagnostic pragma.
  * Fix for new splint on FreeBSD. Fix cast for sockaddr_un.sun_len.
  * fix potential memory leak in daemon/remote.c and nullpointer
    dereference in validator/autotrust.
  * [bugzilla: 883 ] Fix error for duplicate local zone entry.
  * [bugzilla: 835 ] Fix --disable-dsa with nettle verify.</changelog>
  <changelog author="michael@stroeder.com" date="1481803200">- update to 1.6.0
  Features
  * Added generic EDNS code for registering known EDNS option codes,
    bypassing the cache response stage and uniquifying mesh states. Four
    EDNS option lists were added to module_qstate
    (module_qstate.edns_opts_*) to store EDNS options from/to front/back side.
  * Added two flags to module_qstate (no_cache_lookup, no_cache_store)
    that control the modules' cache interactions.
  * Added code for registering inplace callback functions. The registered
    functions can be called just before replying with local data or Chaos,
    replying from cache, replying with SERVFAIL, replying with a resolved
    query, sending a query to a nameserver. The functions can inspect the
    available data and maybe change response/query related data (i.e. append
    EDNS options).
  * Updated Python module for the above.
  * Updated Python documentation.
  * Added views functionality.
  * Added qname-minimisation-strict config option.
  * Patch that resolves CNAMEs entered in local-data conf statements that
    point to data on the internet, from Jinmei Tatuya (Infoblox).
  * serve-expired config option: serve expired responses with TTL 0.
  * .gitattributes line for githubs code language display.
  * log-identity: config option to set sys log identity, patch from "Robin
    H. Johnson" (robbat2@gentoo.org).
  * Added stub-ssl-upstream and forward-ssl-upstream options.
  * Added local-zones and local-data bulk addition and removal
    functionality in unbound-control (local_zones, local_zones_remove,
    local_datas and local_datas_remove).
  * g.root-servers.net has AAAA address.
  Bug Fixes
  * Fix #836: unbound could echo back EDNS options in an error response.
  * Fix #838: 1.5.10 cannot be built on Solaris, undefined PATH_MAX.
  * Fix #839: Memory grows unexpectedly with large RPZ files.
  * Fix #840: infinite loop in unbound_munin_ plugin on unowned lockfile.
  * Fix #841: big local-zone's make it consume large amounts of memory.
  * Fix dnstap relaying "random" messages instead of resolver/forwarder
    responses, from Nikolay Edigaryev.
  * Fix Nits for 1.5.10 reported by Dag-Erling Smorgrav.
  * Fix #1117: spelling errors, from Robert Edmonds.
  * iana portlist update.
  * fix memoryleak logfile when in debug mode.
  * Re-fix #839 from view commit overwrite.
  * Fixup const void cast warning.
  * Removed patch comments from acllist.c and msgencode.c
  * Added documentation doc/CNAME-basedRedirectionDesignNotes.pdf, from
    Jinmei Tatuya (Infoblox).
  * Fix #1125: unbound could reuse an answer packet incorrectly for
    clients with different EDNS parameters, from Jinmei Tatuya.
  * Fix #1118: libunbound.pc sets strange Libs, Libs.private values.
  * Added Requires line to libunbound.pc
  * Fix #1130: whitespace in example.conf.in more consistent.
  * suppress compile warning in lex files.
  * init lzt variable, for older gcc compiler warnings.
  * fix --enable-dsa to work, instead of copying ecdsa enable.
  * Fix DNSSEC validation of query type ANY with DNAME answers.
  * Fixup query_info local_alias init.
  * Ported tests for local_cname unit test to testbound framework.
  * Fix #1134: unbound-control set_option -- val-override-date: -1 works
    immediately to ignore datetime, or back to 0 to enable it again. The --
    is to ignore the '-1' as an option flag.
  * Patch for server.num.zero_ttl stats for count of expired replies, from
    Pavel Odintsov.
  * Fix failure to build on arm64 with no sbrk.
  * Set OpenSSL security level to 0 when using aNULL ciphers.
  * configure detects ssl security level API function in the autoconf
    manner. Every function on its own, so that other libraries (eg.
    LibreSSL) can develop their API without hindrance.
  * Fix #1154: segfault when reading config with duplicate zones.
  * Note that for harden-below-nxdomain the nxdomain must be secure, this
    means nsec3 with optout is insufficient.
  * Fix #1155: test status code of unbound-control in 04-checkconf, not
    the status code from the tee command.
  * Fix #1158: reference RFC 8020 "NXDOMAIN: There Really Is Nothing
    Underneath" for the harden-below-nxdomain option.
  * patch from Dag-Erling Smorgrav that removes code that relies on sbrk().
  * Make access-control-tag-data RDATA absolute. This makes the RDATA
    origin consistent between local-data and access-control-tag-data.
  * Fix NSEC ENT wildcard check. Matching wildcard does not have to be a
    subdomain of the NSEC owner.
  * QNAME minimisation uses QTYPE=A, therefore always check cache for this
    type in harden-below-nxdomain functionality.
  * Added unit test for QNAME minimisation + harden below nxdomain synergy.
  * Fix that with openssl 1.1 control-use-cert: no uses less cpu, by using
    no encryption over the unix socket.
  * hyphen as minus fix, by Andreas Schulze
  * Fix #1170: document that 'inform' local-zone uses local-data.
  * Fix #1173: differ local-zone type deny from unset tag_actions element.
  * Add DSA support for OpenSSL 1.1.0
  * Fix remote control without cert for LibreSSL
  * Fix downcast warnings from visual studio in sldns code.</changelog>
  <changelog author="michael@stroeder.com" date="1487678400">- update to 1.6.1
  Features
  * configure --enable-systemd and lets unbound use systemd sockets if you
    enable use-systemd: yes in unbound.conf. Also there are
    contrib/unbound.socket and contrib/unbound.service: systemd files for
    unbound, install them in /usr/lib/systemd/system. Contributed by Sami
    Kerola and Pavel Odintsov.
  * [bugzilla: 1185 ]
    Source IP rate limiting, patch from Larissa Feng.
  * [bugzilla: 1184 ]
    Log DNS replies. This includes the same logging information that DNS
    queries and response code and response size, patch from Larissa Feng.
  * Include root trust anchor id 20326 in unbound-anchor.
  * 64bit is default for windows builds.
  Bug Fixes
  * [bugzilla: 1176 ]
    Fix stack size too small for Alpine Linux.
  * Fix unbound-control and ipv6 only.
    [bugzilla: 1182 ]
  * Fix Resource leak (socket), at startup.
    [bugzilla: 1178 ]
  * Fix attempt to fix setup error at end, pop result values at end of
    install.
  * iana portlist update
  * Fix inet_ntop and inet_pton warnings in windows compile.
  * [bugzilla: 1191 ]
    Fix remove comment about view deletion.
  * [bugzilla: 1188 ]
    Fix unresolved symbol 'fake_dsa' in libunbound.so when built with Nettle
  * [bugzilla: 1190 ]
    Fix to not echo back EDNS options in local-zone error response.
  * [bugzilla: 1194 ]
    Fix if cross build fails when $host isn't `uname` for getentropy.
  * Fix reload chdir failure when also chrooted to that directory.
  * Fix to return formerr for queries for meta-types, to avoid packet
    amplification if this meta-type is sent on to upstream.
  * [bugzilla: 1201 ]
    Fix missing unlock in answer_from_cache error condition.
  * [bugzilla: 1202 ]
    Fix code comment that packed_rrset_data is not always 'packed'.
  * Fix to also block meta types 128 through to 248 with formerr.
  * [bugzilla: 1206 ]
    Fix that some view-related commands are missing from 'unbound-control -h'
  * Fix to rename ub_callback_t to ub_callback_type, because POSIX
    reserves _t typedefs.
  * Fix to rename internally used types from _t to _type, because _t type
    names are reserved by POSIX.
  * Increase MAX_MODULE to 16.
  * [bugzilla: 1211 ]
    Fix can't enable interface-automatic if no IPv6 with more helpful
    error message.
  * fix root_anchor test for updated icannbundle.pem lower certificates.
  * Fix compile on solaris of the fix to use $host detect.
  * Fix for type name change and fix warning on windows compile.
  * Fix pythonmod for typedef changes.
  * Fix dnstap for warning of set but not used.
  * Fix autoconf of systemd check for lack of pkg-config.</changelog>
  <changelog author="michael@stroeder.com" date="1493035200">- update to 1.6.2
  Features
- Add trustanchor.unbound CH TXT that gets a response with a number
  of TXT RRs with a string like "example.com. 2345 1234" with
  the trust anchors and their keytags.
- Patch for view functionality for local-data-ptr from Björn Ketelaars.
- Response actions based on IP address from Jinmei Tatuya (Infoblox).
- Patch from Luiz Fernando Softov for Stats Shared Memory.
- unbound-control stats_shm command prints stats using shared memory,
  which uses less cpu.
- --disable-sha1 disables SHA1 support in RRSIG, so from DNSKEY and
  DS records.  NSEC3 is not disabled.
- #1217. DNSCrypt support, with --enable-dnscrypt, libsodium and then
  enabled in the config file from Manu Bretelle.
- Merge EDNS Client subnet implementation from feature branch into main
  branch, using new EDNS processing framework.
- harden-algo-downgrade: no also makes unbound more lenient about
  digest algorithms in DS records.
  Bug fixes
- sldns has ED25519 and ED448 algorithm number and name for display.
- sldns updated for vfixed and buffer resize indication from getdns.
- iana portlist update
- Fix #1224: Fix that defaults should not fall back to "Program Files
  (x86) if Unbound is 64bit by default on windows.
- Fix doc/CNAME-basedRedirectionDesignNotes.pdf zone static to
  redirect.
- make depend, autoconf, doxygen and lint fixed up.
- include sys/time.h for new shm code on NetBSD.
- Fix #1227: Fix that Unbound control allows weak ciphersuits.
- Fix #1226: provide official 32bit binary for windows.
- For #1227: if we have sha256, set the cipher list to have no
  known vulns.
- Fix testpkts.c, check if DO bit is set, not only if there is an OPT
  record.
- Fix #1229: Systemd service sandboxing in contrib/unbound.service.
- Fix #1230: swig version 2.0.1 is required for pythonmod, with
  1.3.40 it crashes when running repeatly unbound-control reload.
- fix enum conversion warnings
- fake-sha1 test option; print warning if used.  To make unit tests.
- unbound-control list local zone and data commands listed in the
  help output.
- Fix #1234: shortening DNAME loop produces duplicate DNAME records
  in ANSWER section.
- testbound understands Deckard MATCH rcode question answer commands.
- Fix #1235: Fix too long DNAME expansion produces SERVFAIL instead
  of YXDOMAIN + query loop, reported by Petr Spacek.
- Fix that SHM is not inited if not enabled.
- Fix that looped DNAMEs do not cause unbound to spend effort.
- trustanchor tags are sorted.  reusable routine to fetch taglist.
- Fix #1237 - Wrong resolving in chain, for norec queries that get
  SERVFAIL returned.
- make depend, autoconf, remove warnings about statement before var.
- lru_demote and lruhash_insert_or_retrieve functions for getdns.
- fixup for lruhash (whitespace and header file comment).
- dnscrypt tests.
- Fix doxygen for dnscrypt files.
- Fix #1238: segmentation fault when adding through the remote
  interface a per-view local zone to a view with no previous
  (configured) local zones.
- Fix #1229: Systemd service sandboxing, options in wrong sections.
- Fix #1239: configure fails to find python distutils if python
  prints warning.
- Fix to prevent non-referal query from being cached as referal when the
  no_cache_store flag was set.
- Remove (now unused) event2 include from dnscrypt code.
- Fix #1217: Add metrics to unbound-control interface showing
  crypted, cert request, plaintext and malformed queries (from
  Manu Bretelle).
- Do not add current time twice to TTL before ECS cache store.
- Do not touch rrset cache after ECS cache message generation.
- Use LDNS_EDNS_CLIENT_SUBNET as default ECS opcode.
- Fix #1244: document that use of chroot requires trust anchor file to
  be under chroot.
- Small fixup for documentation.
- Fix respip for braces when locks arent used.
- Fix pythonmod for cb changes.
- Generalise inplace callback (de)registration
- (de)register inplace callbacks for module id
- No unbound-control set_option for ECS options
- Deprecated client-subnet-opcode config option
- Introduced client-subnet-always-forward config option
- Changed max-client-subnet-ipv6 default to 56 (as in RFC)
- Removed extern ECS config options
- module_restart_next now calls clear on all following modules
- Also create ECS module qstate on module_event_pass event
- remove malloc from inplace_cb_register
- Unlock view in respip unit test
- Some whitespace fixup.
- Remove ECS option after REFUSED answer.
- Fix small memory leak in edns_opt_copy_alloc.
- Respip dereference after NULL check.
- Zero initialize addrtree allocation.
- Use correct identifier for SHM destroy.
- Display ECS module memory usage.
- Fix #1247: unbound does not shorten source prefix length when
  forwarding ECS.
- Properly check for allocation failure in local_data_find_tag_datas.
- Fix #1249: unbound doesn't return FORMERR to bogus ECS.
- Set SHM ECS memory usage to 0 when module not loaded.
- subnet mem value is available in shm, also when not enabled,
  to make the struct easier to memmap by other applications,
  independent of the configuration of unbound.
- Fix #1250: inconsistent indentation in services/listen_dnsport.c.</changelog>
  <changelog author="michael@stroeder.com" date="1497441600">- update to 1.6.3
  Bug Fixes
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname. When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.</changelog>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
</package>
<package pkgid="abd8ef0a1b24fe9d52393fece82de2e2d39b6f539974bce81f43849fc8253456" name="libunbound2" arch="x86_64">
  <version epoch="0" ver="1.6.8" rel="lp150.2.6.1"/>
  <changelog author="meissner@suse.com" date="1454587200">- split off a libunbound package with less buildrequires to
  allow shorter buildcycles when built by gnutls. bsc#964346</changelog>
  <changelog author="mrueckert@suse.de" date="1455710400">- revert the previous change which would not solve the problem as
  the library package requires the unbound-anchor package
  instead introduce a libunbound-devel-mini package which holds the
  shared library and devel files with a minimal build requires.</changelog>
  <changelog author="mrueckert@suse.de" date="1456142400">- add libunbound-devel-mini-rpmlintrc as source</changelog>
  <changelog author="mrueckert@suse.de" date="1456228800">- also conflict the shlib package</changelog>
  <changelog author="michael@stroeder.com" date="1456401600">- update to 1.5.8
  Features
  * ip-transparent option for FreeBSD with IP_BINDANY socket option.
  * insecure-lan-zones: yesno config option, patch from Dag-Erling
    Smørgrav.
  * RR Type CSYNC support RFC 7477, in debug printout and config input.
  * RR Type OPENPGPKEY support (draft-ietf-dane-openpgpkey-07).
  * [bugzilla: 731 ] tcp-mss, outgoing-tcp-mss options for unbound.conf,
    patch from Daisuke Higashi.
  * Support RFC7686: handle ".onion" Special-Use Domain. It is blocked
    by default, and can be unblocked with "nodefault" localzone config.
  * ub_ctx_set_stub() function for libunbound to config stub zones.
  Bug Fixes
  * Fix that NSEC3 negative cache is used when there is no salt.
  * sorted ubsyms.def file with exported libunbound functions.
  * Print understandable debug log when unusable DS record is seen.
  * load gost algorithm if digest is seen before key algorithm.
  * Fix that "make install" fails due to "text file busy" error.
  * Set IPPROTO_IP6 for ipv6 sockets otherwise invalid argument error.
  * wait for sendto to drain socket buffers when they are full.
  * Neater cmdline_verbose increment patch from Edgar Pettijohn.
  * Made netbsd sendmsg test nonfatal, in case of false positives.
  * [bugzilla: 741 ] Fix: log message for dnstap socket connection is
    more clear.
  * [bugzilla: 734 ] Fix: chown the pidfile if it resides inside the
    chroot.
  * Fix cmsg alignment for argument to sendmsg on NetBSD.
  * Fix that unbound complains about unimplemented IP_PKTINFO for
    sendmsg on NetBSD (for interface-automatic).
  * [bugzilla: 738 ] Fix: Swig should not be invoked with CPPFLAGS.
  * Squelch 'cannot assign requested address' log messages unless
    verbosity is high, it was spammed after network down.
  * Fix to simplify empty string checking from Michael McConville.
  * [bugzilla: 734 ] Fix: Do not log an error when the PID file cannot
    be chown'ed. Patch from Simon Deziel.
  * Fix test if -pthreads unused to use better grep for portability.
  * Fix mingw crosscompile for recent mingw.
  * Update aclocal, autoconf output with new versions (1.15, 2.4.6).
  * Define DEFAULT_SOURCE together with BSD_SOURCE when that is defined,
    for Linux glibc 2.20.
  * Fixup contrib/aaaa-filter-iterator.patch for moved contents in the
    source code, so it applies cleanly again. Removed unused variable
    warnings.
  * [bugzilla: 729 ] Fix: omit use of escape sequences in echo since
    they are not portable (unbound-control-setup).
  * remove NULL-checks before free, patch from Michael McConville.
  * updated ax_pthread.m4 to version 21 with clang support, this removes
    a warning from compilation.
  * OSX portability, detect if sbrk is deprecated.
  * OSX clang, stop -pthread unused during link stage warnings.
  * OSX clang new flto check.
  * iana portlist update.</changelog>
  <changelog author="michael@stroeder.com" date="1465041600">- update to 1.5.9
  Features
  * generic edns option parse and store code.
  * Updated L root IPv6 address.
  * User defined pluggable event API for libunbound
  * ip_freebind: yesno option in unbound.conf sets IP_FREEBIND for binding
    to an IP address while the interface or address is down.
  * OpenSSL 1.1.0 portability, --disable-dsa configure option.
  * disable-dnssec-lame-check config option from Charles Walker.
  Bug Fixes
  * [bugzilla: 745 ]
  * Fix unbound.py - idn2dname throws UnicodeError when idnname contains
    trailing dot.
  * configure tests for the weak attribute support by the compiler.
  * [bugzilla: 747 ]
  * Fix assert in outnet_serviced_query_stop.
  * Updated configure and ltmain.sh.
  * Fixup of compile fix for pluggable event API from P.Y. Adi Prasaja.
  * Fixup backend2str for libev.
  * Fix libev usage of dispatch return value.
  * No side effects in tolower() call, in case it is a macro.
  * Fix warnings in ifdef corner case, older or unknown libevent.
  * Fix ip-transparent for ipv6 on FreeBSD, thanks to Nick Hibma.
  * Fix ip-transparent for tcp on freebsd.
  * [bugzilla: 746 ]
  * Fix unbound sets CD bit on all forwards. If no trust anchors, it'll not
    set CD bit when forwarding to another server. If a trust anchor, no CD
    bit on the first attempt to a forwarder, but CD bit thereafter on
    repeated attempts to get DNSSEC.
  * Limit number of QNAME minimisation iterations.
  * Validate QNAME minimised NXDOMAIN responses.
  * If QNAME minimisation is enabled, do cache lookup for QTYPE NS in
    harden-below-nxdomain.
  * Fix compile of getentropy_linux for SLES11 servicepack 4.
  * Fix dnstap-log-resolver-response-messages, from Nikolay Edigaryev.
  * Fix test for openssl to use HMAC_Update for 1.1.0.
  * ERR_remove_state deprecated since openssl 1.0.0.
  * OPENSSL_config is deprecated, removing.
  * Document permit-small-holddown for 5011 debug.
  * [bugzilla: 749 ]
  * Fix unbound-checkconf gets SIGSEGV when use against a malformatted
    conf file.
  * [bugzilla: 753 ]
  * Fix document dump_requestlist is for first thread.
  * Fix some malformed reponses to edns queries get fallback to nonedns.
  * [bugzilla: 759 ]
  * Fix 0x20 capsforid no longer checks type PTR, for compatibility with
    cisco dns guard. This lowers false positives.
  * Fix sldns with static checking fixes copied from getdns.
  * Fix memory leak in out-of-memory conditions of local zone add.
  * [bugzilla: 761 ]
  * Fix DNSSEC LAME false positive resolving nic.club.
  * [bugzilla: 766 ]
  * Fix dns64 should synthesize results on timeout/errors.
  * No QNAME minimisation fall-back for NXDOMAIN answers from
    DNSSEC signed zones.
  * [bugzilla: 767 ]
  * Fix Reference to an expired Internet-Draft in harden-below-nxdomain
    documentation.
  * remove memory leak from lame-check patch.
  * [bugzilla: 770 ]
  * Fix Small subgroup attack on DH used in unix pipe on localhost if
    unbound control uses a unix local named pipe.
  * Document write permission to directory of trust anchor needed.
  * [bugzilla: 768 ]
  * Fix Unbound Service Sometimes Can Not Shutdown Completely, WER Report
    Shown Up. Close handle before closing WSA.
  * Fix time in case answer comes from cache in ub_resolve_event().
  * Fix windows service to be created run with limited rights, as a network
    service account, from Mario Turschmann.
  * [bugzilla: 752 ]
  * Fix retry resource temporarily unavailable on control pipe.
  * iana ports fetched via https.
  * iana portlist update.</changelog>
  <changelog author="michael@stroeder.com" date="1474977600">- update to 1.5.10
  Features
  * Create a pkg-config file for libunbound in contrib.
  * TCP Fast open patch from Sara Dickinson.
  * Finegrained localzone control with define-tag, access-control-tag,
    access-control-tag-action, access-control-tag-data, local-zone-tag, and
    local-zone-override. And added types always_transparent, always_refuse,
    always_nxdomain with that.
  * If more than half of tcp connections are in use, a shorter timeout
    is used (200 msec, vs 2 minutes) to pressure tcp for new connects.
  * [bugzilla: 787 ] Fix #787: outgoing-interface netblock/64 ipv6
    option to use linux freebind to use 64bits of entropy for every query
    with random local part.
  * For #787: prefer-ip6 option for unbound.conf prefers to send
    upstream queries to ipv6 servers.
  * Add default root hints for IPv6 E.ROOT-SERVERS.NET, 2001:500:a8::e.
  * keep debug symbols in windows build.
  Bug Fixes
  * [bugzilla: 778 ] Fix unbound 1.5.9: -h segfault (null deref).
  * Fix unbound-anchor.exe file location defaults to Program Files with
    (x86) appended.
  * Fix to not ignore return value of chown() in daemon startup.
  * Better help text from -h (from Ray Griffith).
  * [bugzilla: 773 ] Fix Non-standard Python location build failure with
    pyunbound.
  * Improve threadsafety for openssl 0.9.8 ecdsa dnssec signatures.
  * Revert fix for NetworkService account on windows due to breakage it
    causes.
  * Fix that windows install will not overwrite existing service.conf
    file (and ignore gui config choices if it exists).
  * And delete service.conf.shipped on uninstall.
  * In unbound.conf directory: dir immediately changes to that
    directory, so that include: file below that is relative to that
    directory. With chroot, make the directory an absolute path inside chroot.
  * do not delete service.conf on windows uninstall.
  * document directory immediate fix and allow EXECUTABLE syntax in it
    on windows.
  * Fix directory: fix for unbound-checkconf, it restores cwd.
  * Use QTYPE=A for QNAME minimisation.
  * Keep track of number of time-outs when performing QNAME
    minimisation. Stop minimising when number of time-outs for a QNAME/QTYPE
    pair is more than three.
  * [bugzilla: 775 ] Fix unbound-host and unbound-anchor crash on
    windows, ignore null delete for wsaevent.
  * Fix spelling in freebind option man page text.
  * Fix windows link of ssl with crypt32.
  * [bugzilla: 779 ] Fix Union casting is non-portable.
  * [bugzilla: 780 ] Fix MAP_ANON not defined in HP-UX 11.31.
  * [bugzilla: 781 ] Fix prealloc() is an HP-UX system library call.
  * Decrease dp attempts at each QNAME minimisation iteration
  * [bugzilla: 784 ] Fix Build configure assumess that having getpwnam
    means there is endpwent function available.
  * Updated repository with newer flex and bison output.
  * Fix static compile on windows missing gdi32.
  * Fix dynamic link of anchor-update.exe on windows.
  * Fix detect of mingw for MXE package build.
  * Fixes for 64bit windows compile.
  * [bugzilla: 788 ] Fix for nettle 3.0: Failed to build with Nettle &gt;=
    3.0 and --with-libunbound-only --with-nettle.
  * Fixed unbound.doxygen for 1.8.11.
  * [bugzilla: 798 ] Fix Client-side TCP fast open fails (Linux).
  * [bugzilla: 801 ] Fix missing error condition handling in
    daemon_create_workers().
  * [bugzilla: 802 ] Fix workaround for function parameters that are
    "unused" without log_assert.
  * [bugzilla: 803 ] Fix confusing (and incorrect) code comment in
    daemon_cleanup().
  * [bugzilla: 806 ] Fix wrong comment removed.
  * use sendmsg instead of sendto for TFO.
  * [bugzilla: 807 ] Fix workaround for possible some "unused" function
    parameters in test code, from Jinmei Tatuya.
  * Note that OPENPGPKEY type is RFC 7929.
  * [bugzilla: 804 ] Fix #804: unbound stops responding after outage.
    Fixes queries that attempt to wait for an empty list of subqueries.
  * Fix for #804: lower num_target_queries for iterator also for failed
    lookups.
  * [bugzilla: 820 ] Fix set sldns_str2wire_rr_buf() dual meaning len
    parameter in each iteration in find_tag_datas().
  * [bugzilla: 777 ] Fix OpenSSL 1.1.0 compatibility, patch from
    Sebastian A. Siewior.
  * RFC 7958 is now out, updated docs for unbound-anchor.
  * Fix for compile without warnings with openssl 1.1.0.
  * [bugzilla: 826 ] Fix refuse_non_local could result in a broken response.
  * iana portlist update.
  * Fix compile with openssl 1.1.0 with api=1.1.0.
  * [bugzilla: 829 ] Fix doc of sldns_wire2str_rdata_buf() return value
    has an off-by-one typo, from Jinmei Tatuya (Infoblox).
  * Fix incomplete prototypes reported by Dag-Erling Smørgrav.
  * [bugzilla: 828 ] Fix missing type in access-control-tag-action
    redirect results in NXDOMAIN.
  * Take configured minimum TTL into consideration when reducing TTL to
    original TTL from RRSIG.
  * [bugzilla: 831 ] Fix workaround for spurious fread_chk warning
    against petal.c
  * Silenced flex-generated sign-unsigned warning print with gcc
    diagnostic pragma.
  * Fix for new splint on FreeBSD. Fix cast for sockaddr_un.sun_len.
  * fix potential memory leak in daemon/remote.c and nullpointer
    dereference in validator/autotrust.
  * [bugzilla: 883 ] Fix error for duplicate local zone entry.
  * [bugzilla: 835 ] Fix --disable-dsa with nettle verify.</changelog>
  <changelog author="michael@stroeder.com" date="1481803200">- update to 1.6.0
  Features
  * Added generic EDNS code for registering known EDNS option codes,
    bypassing the cache response stage and uniquifying mesh states. Four
    EDNS option lists were added to module_qstate
    (module_qstate.edns_opts_*) to store EDNS options from/to front/back side.
  * Added two flags to module_qstate (no_cache_lookup, no_cache_store)
    that control the modules' cache interactions.
  * Added code for registering inplace callback functions. The registered
    functions can be called just before replying with local data or Chaos,
    replying from cache, replying with SERVFAIL, replying with a resolved
    query, sending a query to a nameserver. The functions can inspect the
    available data and maybe change response/query related data (i.e. append
    EDNS options).
  * Updated Python module for the above.
  * Updated Python documentation.
  * Added views functionality.
  * Added qname-minimisation-strict config option.
  * Patch that resolves CNAMEs entered in local-data conf statements that
    point to data on the internet, from Jinmei Tatuya (Infoblox).
  * serve-expired config option: serve expired responses with TTL 0.
  * .gitattributes line for githubs code language display.
  * log-identity: config option to set sys log identity, patch from "Robin
    H. Johnson" (robbat2@gentoo.org).
  * Added stub-ssl-upstream and forward-ssl-upstream options.
  * Added local-zones and local-data bulk addition and removal
    functionality in unbound-control (local_zones, local_zones_remove,
    local_datas and local_datas_remove).
  * g.root-servers.net has AAAA address.
  Bug Fixes
  * Fix #836: unbound could echo back EDNS options in an error response.
  * Fix #838: 1.5.10 cannot be built on Solaris, undefined PATH_MAX.
  * Fix #839: Memory grows unexpectedly with large RPZ files.
  * Fix #840: infinite loop in unbound_munin_ plugin on unowned lockfile.
  * Fix #841: big local-zone's make it consume large amounts of memory.
  * Fix dnstap relaying "random" messages instead of resolver/forwarder
    responses, from Nikolay Edigaryev.
  * Fix Nits for 1.5.10 reported by Dag-Erling Smorgrav.
  * Fix #1117: spelling errors, from Robert Edmonds.
  * iana portlist update.
  * fix memoryleak logfile when in debug mode.
  * Re-fix #839 from view commit overwrite.
  * Fixup const void cast warning.
  * Removed patch comments from acllist.c and msgencode.c
  * Added documentation doc/CNAME-basedRedirectionDesignNotes.pdf, from
    Jinmei Tatuya (Infoblox).
  * Fix #1125: unbound could reuse an answer packet incorrectly for
    clients with different EDNS parameters, from Jinmei Tatuya.
  * Fix #1118: libunbound.pc sets strange Libs, Libs.private values.
  * Added Requires line to libunbound.pc
  * Fix #1130: whitespace in example.conf.in more consistent.
  * suppress compile warning in lex files.
  * init lzt variable, for older gcc compiler warnings.
  * fix --enable-dsa to work, instead of copying ecdsa enable.
  * Fix DNSSEC validation of query type ANY with DNAME answers.
  * Fixup query_info local_alias init.
  * Ported tests for local_cname unit test to testbound framework.
  * Fix #1134: unbound-control set_option -- val-override-date: -1 works
    immediately to ignore datetime, or back to 0 to enable it again. The --
    is to ignore the '-1' as an option flag.
  * Patch for server.num.zero_ttl stats for count of expired replies, from
    Pavel Odintsov.
  * Fix failure to build on arm64 with no sbrk.
  * Set OpenSSL security level to 0 when using aNULL ciphers.
  * configure detects ssl security level API function in the autoconf
    manner. Every function on its own, so that other libraries (eg.
    LibreSSL) can develop their API without hindrance.
  * Fix #1154: segfault when reading config with duplicate zones.
  * Note that for harden-below-nxdomain the nxdomain must be secure, this
    means nsec3 with optout is insufficient.
  * Fix #1155: test status code of unbound-control in 04-checkconf, not
    the status code from the tee command.
  * Fix #1158: reference RFC 8020 "NXDOMAIN: There Really Is Nothing
    Underneath" for the harden-below-nxdomain option.
  * patch from Dag-Erling Smorgrav that removes code that relies on sbrk().
  * Make access-control-tag-data RDATA absolute. This makes the RDATA
    origin consistent between local-data and access-control-tag-data.
  * Fix NSEC ENT wildcard check. Matching wildcard does not have to be a
    subdomain of the NSEC owner.
  * QNAME minimisation uses QTYPE=A, therefore always check cache for this
    type in harden-below-nxdomain functionality.
  * Added unit test for QNAME minimisation + harden below nxdomain synergy.
  * Fix that with openssl 1.1 control-use-cert: no uses less cpu, by using
    no encryption over the unix socket.
  * hyphen as minus fix, by Andreas Schulze
  * Fix #1170: document that 'inform' local-zone uses local-data.
  * Fix #1173: differ local-zone type deny from unset tag_actions element.
  * Add DSA support for OpenSSL 1.1.0
  * Fix remote control without cert for LibreSSL
  * Fix downcast warnings from visual studio in sldns code.</changelog>
  <changelog author="michael@stroeder.com" date="1487678400">- update to 1.6.1
  Features
  * configure --enable-systemd and lets unbound use systemd sockets if you
    enable use-systemd: yes in unbound.conf. Also there are
    contrib/unbound.socket and contrib/unbound.service: systemd files for
    unbound, install them in /usr/lib/systemd/system. Contributed by Sami
    Kerola and Pavel Odintsov.
  * [bugzilla: 1185 ]
    Source IP rate limiting, patch from Larissa Feng.
  * [bugzilla: 1184 ]
    Log DNS replies. This includes the same logging information that DNS
    queries and response code and response size, patch from Larissa Feng.
  * Include root trust anchor id 20326 in unbound-anchor.
  * 64bit is default for windows builds.
  Bug Fixes
  * [bugzilla: 1176 ]
    Fix stack size too small for Alpine Linux.
  * Fix unbound-control and ipv6 only.
    [bugzilla: 1182 ]
  * Fix Resource leak (socket), at startup.
    [bugzilla: 1178 ]
  * Fix attempt to fix setup error at end, pop result values at end of
    install.
  * iana portlist update
  * Fix inet_ntop and inet_pton warnings in windows compile.
  * [bugzilla: 1191 ]
    Fix remove comment about view deletion.
  * [bugzilla: 1188 ]
    Fix unresolved symbol 'fake_dsa' in libunbound.so when built with Nettle
  * [bugzilla: 1190 ]
    Fix to not echo back EDNS options in local-zone error response.
  * [bugzilla: 1194 ]
    Fix if cross build fails when $host isn't `uname` for getentropy.
  * Fix reload chdir failure when also chrooted to that directory.
  * Fix to return formerr for queries for meta-types, to avoid packet
    amplification if this meta-type is sent on to upstream.
  * [bugzilla: 1201 ]
    Fix missing unlock in answer_from_cache error condition.
  * [bugzilla: 1202 ]
    Fix code comment that packed_rrset_data is not always 'packed'.
  * Fix to also block meta types 128 through to 248 with formerr.
  * [bugzilla: 1206 ]
    Fix that some view-related commands are missing from 'unbound-control -h'
  * Fix to rename ub_callback_t to ub_callback_type, because POSIX
    reserves _t typedefs.
  * Fix to rename internally used types from _t to _type, because _t type
    names are reserved by POSIX.
  * Increase MAX_MODULE to 16.
  * [bugzilla: 1211 ]
    Fix can't enable interface-automatic if no IPv6 with more helpful
    error message.
  * fix root_anchor test for updated icannbundle.pem lower certificates.
  * Fix compile on solaris of the fix to use $host detect.
  * Fix for type name change and fix warning on windows compile.
  * Fix pythonmod for typedef changes.
  * Fix dnstap for warning of set but not used.
  * Fix autoconf of systemd check for lack of pkg-config.</changelog>
  <changelog author="michael@stroeder.com" date="1493035200">- update to 1.6.2
  Features
- Add trustanchor.unbound CH TXT that gets a response with a number
  of TXT RRs with a string like "example.com. 2345 1234" with
  the trust anchors and their keytags.
- Patch for view functionality for local-data-ptr from Björn Ketelaars.
- Response actions based on IP address from Jinmei Tatuya (Infoblox).
- Patch from Luiz Fernando Softov for Stats Shared Memory.
- unbound-control stats_shm command prints stats using shared memory,
  which uses less cpu.
- --disable-sha1 disables SHA1 support in RRSIG, so from DNSKEY and
  DS records.  NSEC3 is not disabled.
- #1217. DNSCrypt support, with --enable-dnscrypt, libsodium and then
  enabled in the config file from Manu Bretelle.
- Merge EDNS Client subnet implementation from feature branch into main
  branch, using new EDNS processing framework.
- harden-algo-downgrade: no also makes unbound more lenient about
  digest algorithms in DS records.
  Bug fixes
- sldns has ED25519 and ED448 algorithm number and name for display.
- sldns updated for vfixed and buffer resize indication from getdns.
- iana portlist update
- Fix #1224: Fix that defaults should not fall back to "Program Files
  (x86) if Unbound is 64bit by default on windows.
- Fix doc/CNAME-basedRedirectionDesignNotes.pdf zone static to
  redirect.
- make depend, autoconf, doxygen and lint fixed up.
- include sys/time.h for new shm code on NetBSD.
- Fix #1227: Fix that Unbound control allows weak ciphersuits.
- Fix #1226: provide official 32bit binary for windows.
- For #1227: if we have sha256, set the cipher list to have no
  known vulns.
- Fix testpkts.c, check if DO bit is set, not only if there is an OPT
  record.
- Fix #1229: Systemd service sandboxing in contrib/unbound.service.
- Fix #1230: swig version 2.0.1 is required for pythonmod, with
  1.3.40 it crashes when running repeatly unbound-control reload.
- fix enum conversion warnings
- fake-sha1 test option; print warning if used.  To make unit tests.
- unbound-control list local zone and data commands listed in the
  help output.
- Fix #1234: shortening DNAME loop produces duplicate DNAME records
  in ANSWER section.
- testbound understands Deckard MATCH rcode question answer commands.
- Fix #1235: Fix too long DNAME expansion produces SERVFAIL instead
  of YXDOMAIN + query loop, reported by Petr Spacek.
- Fix that SHM is not inited if not enabled.
- Fix that looped DNAMEs do not cause unbound to spend effort.
- trustanchor tags are sorted.  reusable routine to fetch taglist.
- Fix #1237 - Wrong resolving in chain, for norec queries that get
  SERVFAIL returned.
- make depend, autoconf, remove warnings about statement before var.
- lru_demote and lruhash_insert_or_retrieve functions for getdns.
- fixup for lruhash (whitespace and header file comment).
- dnscrypt tests.
- Fix doxygen for dnscrypt files.
- Fix #1238: segmentation fault when adding through the remote
  interface a per-view local zone to a view with no previous
  (configured) local zones.
- Fix #1229: Systemd service sandboxing, options in wrong sections.
- Fix #1239: configure fails to find python distutils if python
  prints warning.
- Fix to prevent non-referal query from being cached as referal when the
  no_cache_store flag was set.
- Remove (now unused) event2 include from dnscrypt code.
- Fix #1217: Add metrics to unbound-control interface showing
  crypted, cert request, plaintext and malformed queries (from
  Manu Bretelle).
- Do not add current time twice to TTL before ECS cache store.
- Do not touch rrset cache after ECS cache message generation.
- Use LDNS_EDNS_CLIENT_SUBNET as default ECS opcode.
- Fix #1244: document that use of chroot requires trust anchor file to
  be under chroot.
- Small fixup for documentation.
- Fix respip for braces when locks arent used.
- Fix pythonmod for cb changes.
- Generalise inplace callback (de)registration
- (de)register inplace callbacks for module id
- No unbound-control set_option for ECS options
- Deprecated client-subnet-opcode config option
- Introduced client-subnet-always-forward config option
- Changed max-client-subnet-ipv6 default to 56 (as in RFC)
- Removed extern ECS config options
- module_restart_next now calls clear on all following modules
- Also create ECS module qstate on module_event_pass event
- remove malloc from inplace_cb_register
- Unlock view in respip unit test
- Some whitespace fixup.
- Remove ECS option after REFUSED answer.
- Fix small memory leak in edns_opt_copy_alloc.
- Respip dereference after NULL check.
- Zero initialize addrtree allocation.
- Use correct identifier for SHM destroy.
- Display ECS module memory usage.
- Fix #1247: unbound does not shorten source prefix length when
  forwarding ECS.
- Properly check for allocation failure in local_data_find_tag_datas.
- Fix #1249: unbound doesn't return FORMERR to bogus ECS.
- Set SHM ECS memory usage to 0 when module not loaded.
- subnet mem value is available in shm, also when not enabled,
  to make the struct easier to memmap by other applications,
  independent of the configuration of unbound.
- Fix #1250: inconsistent indentation in services/listen_dnsport.c.</changelog>
  <changelog author="michael@stroeder.com" date="1497441600">- update to 1.6.3
  Bug Fixes
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname. When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.</changelog>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1539691200">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
</package>
<package pkgid="1813f51c43c3bedd83080eee09a0c1a535dab4857efed4bbfa062a1a2e911d7a" name="libuuid-devel" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="4a6951144f7de18a988750a257c0c5db72126483d82775cfb5cba5ddfe54832d" name="libuuid-devel" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="04c234073d9557515470c77e2d41f39e7f8053aacbd2213b08198b5f537b23e7" name="libuuid-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="5265d44bc42be720b51d8b9ad7fefd9a569b4eb2f4139fa662c46070b9aa27e4" name="libuuid-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="82c5bc07e75d32a90005606cc6c59283acb49b4afd59ed7e4f1437cfd4f23823" name="libuuid-devel-static" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="78ae89df210bf2457bb96ec986809dd77734db217c023d0eaee135858c7ed4d4" name="libuuid-devel-static" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="179f75a2141f391cdd8185e61f7c0f51e5e19e8a4d3b6db1873b78500d23af81" name="libuuid1" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="4093cab647440cfda991dcfa2040d2bc1cbd5e9880084ee8e045055a6d0029df" name="libuuid1" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="9141165055bdba863f21ddedf4de35f1ed2c41bb30464337e7f6da100d43d3b8" name="libuuid1-32bit" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="f2d0b4adee1517bcdfc2fb91d5c1170f279d39980a3deb678473a1747f6ac8ee" name="libuuid1-32bit" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="40d6049373bf6e50ef9fe64c594e211f3f2b2c7caf4b8397c65bed7c1d5bd48c" name="libvdpau_nouveau" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="01cd19b061f949f2288fcf25370737e51b42939fe68e11da4728f765e77039d0" name="libvdpau_nouveau-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="bbb6cd2a11f98147679e2d9f3e83401c0c47313e4bd505fbfbea28a71f5fbd45" name="libvdpau_r300" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="7bb2b21187d6b55d56ec0fbb457b88fd55404c232bd4ec6be14a390a2df722d4" name="libvdpau_r300-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="e6f0b077b482cef4711ed949ff77275782c72547ac02175e847e4e6423444826" name="libvdpau_r600" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="e960a6d6d1811e68e328ad5a7b869f5e9fcbd31fb73b7d8f2b4e507551c143ca" name="libvdpau_r600-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="960225f7ed8dd6200d7432d157cdc80cf21de952ab303f5c6775a9e6e131814c" name="libvdpau_radeonsi" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="16b500bf40baaca37319815e0a8761f109be161498babed817b735db72429292" name="libvdpau_radeonsi-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="c276e9a2a190614299209173c77880b5cdefddd9ac48dc3f2e83dd7d1c2d0191" name="libvirt" arch="src">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="e891dc7adb39890b118b82b0d25cd692997af555e28f91b3fcac8fb5fe05b360" name="libvirt" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="2927c4e941bac7e82269b7b95f5475e970a865e984b0e6932059efcda09a397a" name="libvirt" arch="src">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="900318980ecf9dc4d1962d67f17bf1916abf34fba49e33f2c9fd46229dbce465" name="libvirt" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="e60bc59be4244b837a62b20c6ccc5a3a94ab67894c110e4083facd9c6c0c2be6" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="b6d2b157f2edada02701692de4c65d2d6491bec6b5c6055870315f66faaeb5f5" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="8be05f5bdcd43f8f0fb19ae9590134331d94314b733bdb01efa42eeec60e3b91" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="68a5bd3e85b4bdbbc6c31054330f6cf35e4bd7d23e6c900630ebf6f3d4626c4f" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="94ae3e33e86afce2ccf0165fcc83cb7099d2806624e0f66124cc6ca1f95301d0" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="c9a972abe8cb629cea54d711993df9f2a684df38ed5e769024114b531947e4ed" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="6f2a9e7a7e1cd0cefcf9ecf8a0680d48d83edee86a98b457bb88189fc8f7a5bc" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="31d90e3a1351975573696c63edc68c89dac5b06463f6586314aec64741a96831" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="69b9feeceedaeebaea45f26a896db7e00e13beead274c7f3953c7fc975cf1e1e" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="4bdc8a8f98e88ff5988b871b4de989f2dad13c171a95c815ed43c75a71944b1b" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="9f460e99590a2dd883238463903f71c0554b99a6b1490aed63ac0fec68176386" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="681604c2ec663709d953938c3fa5a5fbbbd2b24c6247eb514542ca892beeec49" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="c63bd18b6e5726f4a34615800ce19089b90a58c65667f3c837310c68820f3107" name="libvirt-daemon-driver-libxl" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="ee325dbb6258eab451bf01d94831ca51872e70a36bfd3743628392e30c88634f" name="libvirt-daemon-driver-libxl" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="cb78db8ff640a5fc52045a734b4afe24a56870fffae013be0d97cb15be6aced8" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="a7ce85f77a2135a84c5db899496eedecc7a6be57ac5eae7b8c0afd95c0402e21" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="82d3f4418dbaab1c64881bd43ed8cf723a45c859c7fda2f8df20ee770b6e572a" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="b6dc44cfde9d804708c7181be2bdfb81fc5cb214334712627370b6e1dfdf6d4a" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="4e57f03ef2746aa3350d52f2da7082df7b69f846a08e91656fdb2de1afd936bf" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="c9b7d6aa10295ef4e764ab51e4548a3577fc834e1c94f4fed3a39a684cb9d039" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="598e5b1326a805cb926ccbe0d09410b371d4229c292648bb26625ed94bd81ca8" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="5c13420ceb521cc774aad0549c9b511b8602da04ae76cb65cba8d22bbbc8fdef" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="71306474cfbd527274505fc7b1c0ad6c8be536bd84a4b519a1215fa5b6db32fd" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="a6f675246c2a9a8a5f59c337580887b85f2194eea004bc248253bad8badaf516" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="3f99cffb127b7203e051701d74daddffd8630f551400aee3f584d0b7549f47c4" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="cac119bc2700ef32444d31a2bfa8afb2626ad0f8ed3f8d0b1ed65adb6d123ef8" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="54bd2d818f8dbc41fa0b6fea7cdf88a1eb86ab9d83a7f97593291406e0a7b9b5" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="9a91da6ca4e13dad4f150d370804286ed8da5b5daf580b204757c1dd8251a20f" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="30a4c0a6af33e9015b40ad75bfc18c81ab7d4988ddf9e9ed5b3ed64cecd6bf7e" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="aa14d31df61c730684db174eea157048997b72fcbbfd689f901afd73b0ae27a1" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="8314a0f7fce0d4fafec94e078a7f42a363c86a97bbea66b62fa8bd190c8c7a4f" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="e8e73ab3caf382d7e994f5812c48820e0ecb564b396b4066870aa52ef74013b1" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="a5eba931cf8fedacd662556a50864be12ad0ab16c87db4f1f0d3f4b106669af2" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="54ef1aa652d4025fb6b4586736a03e65fdc3764f8f5965f0959601e92279d517" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="04ce6078e9aa48c46e398231fb3923cfae966346af532868de4977d67c7f597a" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="c588d535ff71e23ea3185ff529d1be8e67b174770f665ab4b5356946d556ce7b" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="092cfddd890c31cefdc96f60607feaac12bd029472bc98af26a50107ff499e79" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="8ae5edbe1e5b1e09ad7e366e66c656048f264387a63590842ae1af96a223dc85" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="104326ee973695b2633af8a8db5c2f78f0c14acc692e93bb6078a4c90cdbe96d" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="51af5f98eb60fa831d988e0ea278546381cf3fba2d0d542f8a18bffcdb121fa0" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="2a149582857490602c52e167b0062112f77697bdb05c388989166d86c45aba98" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="3afc50c24cb842ffdb76f349b7fe8c81bcba7ad83444589ed5afc025a10b8c8f" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="51fb56631680ce393d6cb09286847faee4c08a3d74e9499095784f06f72a666b" name="libvirt-daemon-driver-uml" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="66cce69d24d6400b8c3f019498b7996e5bb451419e94d38b64e87aecf0116d05" name="libvirt-daemon-driver-uml" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="d81854c5d88edd65a478a948d70934580ceecbfb850c1e8990c37334518895d3" name="libvirt-daemon-driver-vbox" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="73dca8bfcf693cd24380f7f7df57591eacb49efbe105a287c1b37401963ff690" name="libvirt-daemon-driver-vbox" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="121e3b0b9967a325fb1f98c3b4707f6495bfefdb28af2adb18921eaca28fe210" name="libvirt-daemon-hooks" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="48c2ddf196743066e217a0a192efd8ce8c9ea412979aea3af97f51a4348659d4" name="libvirt-daemon-hooks" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="c55f7be9ee88286b9f495941c7bdb337b09fe362c876b7bfd6ad63584dc24859" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="9c28322361cad0842e1d617496667af21c5322842df7e13614ec11c3194e4a41" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="7ccb1f8bbc7da5501140b5f3a74fa0b407f30a711cf0bd67807468bf3c7beeab" name="libvirt-daemon-qemu" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="4f4e2b74e3ea5a6bab7f3a50b38965c644479d844a10c29b5452f28d6d5849f0" name="libvirt-daemon-qemu" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="70a2eca29fb8cfd9bb7115e435e75b4e26da6a324722fd353057177bd9c9644f" name="libvirt-daemon-uml" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="3cf25f9578c8059dad0e42bd67acf7171f0b09b9cc0635e1cc17e0cdb72595b9" name="libvirt-daemon-uml" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="1d8e010b4cbb110b5479e8bb54d1b9c56b09008e124f6db3604032f72d752f14" name="libvirt-daemon-vbox" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="20fb76126a24c65fa350daaf5530e053f45b12f90eb6c11cce1e97ae65c21cb9" name="libvirt-daemon-vbox" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="5015c878f68f07781c120eb02c07c4fb4f8894e6a7d6fd4684af37c82ca14492" name="libvirt-daemon-xen" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="b308b5473018509e1f7a4d2e8c8b0e45bf71cbd1c0d628d57e1e05fd0a02f7f5" name="libvirt-daemon-xen" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="b25ad5286a23d2d129d9205b146e6c1f9a8ef7e9a87581585f9077e2c6126562" name="libvirt-devel-32bit" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="2d1352ee966716c2febe2ab276e11e56ea40cb7c4bc96d7f880f74e815c3c1dc" name="libvirt-devel-32bit" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="ef49851d37f37baf48588443bf6bd795010d58b3cac066055256aff2a166d7cf" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="ad24fe4b98d7fee0061a5b656856eb03977fb91aa19566a1e3c748399f1fb179" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="b105f2552470bb6085eddf5211f8c72cf2455136e2070830f489e47f12f922bc" name="libvirt-doc" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="c28901a0047348c1f6d209304d37c28ce9146610fbb763269333a895636f03ee" name="libvirt-doc" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="d4c7389adc6921d682b30cc5cd6ef60fd63e47341c770a50bfc8eaeee1b6a131" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="59c0b9165724aa3b7c219a2fe2caeef1c3fbce505a9f3bcc07e8f9c63bb11a95" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="bcdb3c1ee019302a95b509fd2bb46977d29851d5b56df21650133cbb74858db8" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="5bcc4620ec7c343c2ddfc8cb0e6c83af53195226161de149e9fd52bae77698a5" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="654631bc8daf25644be2d89ed1eb7b766f3b6171ba6d29e740cef6ba3647ac35" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="a2d75848d8577ba82f467aa3c9925fbb749f07a37deca5e453c8be31f1ab52b9" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="743f8b28e0d5d6d346cf10078d3280b197bada20efcba2b90269e8432b95695f" name="libvmtools-devel" arch="x86_64">
  <version epoch="0" ver="10.3.0" rel="lp150.2.3.1"/>
  <changelog author="ken@suse.com" date="1478952000">- Updated to 10.1.0 stable release (boo#1011057)
  + vmware-namespace-cmd command line utility.
  + gtk3 support
  + Common Agent Framework (CAF)
  + guest authentication with xmlsec1
  + FreeBSD support
  + sub-command to push updated network information to the host on demand
  + udev rules for configuring SCSI timeouts in the guest
  + fixes for Ubuntu 16.10
  + Fix for quiesced snapshot failure leaving guest file system
    quiesced (bsc#1006796)
  + Fix for CVE-2015-5191 (bsc#1007600)
- Dropped upstream patches included (or not necessary) in 10.1.0:
  + vmw-bitmask-gcc6.patch
  + no-unused-const.patch
  + enable-gcc46+.patch</changelog>
  <changelog author="ken@suse.com" date="1480593600">- Remove building KMP modules. No longer needed or wanted for
  current releases. User space tool vmhgfs-fuse has replaced the
  need for vmhgfs kernel module.</changelog>
  <changelog author="sparschauer@suse.de" date="1481716800">- Report SLES12-SAP guest OS as SLES12 (bsc#1013496)
  + Report-SLES12-SAP-guest-OS-as-SLES12.patch</changelog>
  <changelog author="ken@suse.com" date="1486468800">- Sumbitting update for SLE11SP4, SLE12SP1, SLE12SP2
  see fate#322214 &amp; fate#322218</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
  <changelog author="ken@suse.com" date="1489060800">- Updated to 10.1.5 stable release (boo#1027987)
  + Authentication failure is reported as unknown general system error.
  + Unable to backup virtual machines with active Docker containers.</changelog>
  <changelog author="ken@suse.com" date="1490616000">- fix build failure caused by upstream glibc change requiring
  explicit include of sys/sysmacros.h
  + glibc-sysmacros.patch</changelog>
  <changelog author="ken@suse.com" date="1490961600">- Fix unowned /var/lib/vmware directory. (bsc#1028866)
- Fix package dependency for open-vm-tools on libvmtools0 (bsc#1031968)</changelog>
  <changelog author="mlatimer@suse.com" date="1502798400">- Update to 10.1.10 stable release (boo#1051977, bsc#1052129)
  + Map certain PAM errors to VGAUTH_E_AUTHENTICATION_DENIED.
  + Exclude non-directory and non-existing paths during quiescing.
  + Fix timesync state to be uncalibrated when adjustment is large
    (&gt;60ms).
  + Fix an invalid class pointer access when the VSS provider is
    not installed.
  + Add support for the new selection target name "text/rtf" for
    copy/paste.
  + VMCI: reset datagram buffer pointer on dealloc
  + randomly generate tmp directory name
  + Previously Common Agent Framework (CAF) builds were linking against
    specific versions of PCRE and libiconv.  That restriction has been
    removed.
  + Reverts commit 7023998ba5594871a658c5ef1be4dbda6c0158eb to prevent
    intermittent hangs during soft reboots of RHEL 6.8 Linux VM.
  + Includes fix for VMs freezing during snapshots (bsc#1051627)
    (Thaw filesystems if the snapshot commit message to VMX fails.
    Commit b443e6456ffda66c0279032ab932ef271f8e1ae6)
- Drop unnecessary patch:
  + glibc-sysmacros.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1503316800">- open-vm-tools fails to correctly set screen resolution under
  Wayland environments (boo#1054800)
  + resolutionKMS-wayland.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1507291200">- Update to 10.1.15 stable release
  + Tools Hgfs Plugin: refresh Hgfs drives on client start
  + Report version data via guestinfo vars
  + Add entries for MacOS 10.13 (High Sierra) to guest_os_tables.h</changelog>
  <changelog author="mlatimer@suse.com" date="1507896000">- Build deploypackage plugin for SLES11 (bsc#1062837)
  (The VMware provided open-vm-tools-deploypkg is now obsolete.)
- Enable building with ssl capabilities for SLES11.
  +fix_discards_qualifiers_warning.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1513339200">- Update to 10.2.0 (build 7253323) (boo#1073174)
  + Fix memory leak in vmtoolsd.
  + Add SUSE Server for SAP Applications to hostinfoPosix.c
  + Fix crash issue when stopping vmtoolsd(vmuser).
  + Add new GOS definitions (e.g. SLES 15) for virtual hardware version 14.
  + Add /usr/bin/vmware-user symlink to vmware-user-suid-wrapper.
  + Provide vmware-vgauth-smoketest, for VGAUthservice validation.
- Modify udev rules to only adjust timeout on disk devices (bsc#1063320)
  + udev_rules-disk-devs-only.patch
- Due to a hard dependency on glibc 2.12, open-vm-tools 10.2.0 no longer
  builds for SLES11. Remove all SLES11 specific options in spec file.
- Drop unnecessary patches
  - Report-SLES12-SAP-guest-OS-as-SLES12.patch
  - resolutionKMS-wayland.patch
  - fix_discards_qualifiers_warning.patch  (only applicable to SLES11)</changelog>
  <changelog author="mlatimer@suse.com" date="1513857600">- The VMware provided open-vm-tools-deploypkg is now obsoleted.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Stop depending on the meta-package xorg-x11-devel as
  BuildRequires, but use the explicit module names configure is
  looking for: pkgconfig(sm), pkgconfig(xcomposite),
  pkgconfig(xext), pkgconfig(xi), pkgconfig(xinerama),
  pkgconfig(xrandr), pkgconfig(xrender) and pkgconfig(xtst).</changelog>
  <changelog author="mlatimer@suse.com" date="1523016000">- Update to 10.2.5 (build 8068406) (boo#1089181)
  + Compatible with supported versions of VMware vSphere ESXi 5.5 and later,
    VMware Workstation 14.0 and VMware Fusion 10.0.0.
  + Quiesced snapshot: Ability to exclude specific file systems from
    quiesced snapshots on Linux guest operating systems. For more details,
    see [Documentation](https://docs.vmware.com/en/VMware-Tools/index.html)
  + Disable display mode setting: A configuration option is introduced to
    disable normal display mode setting functionality using open-vm-tools.
    For more details, see [KB 53572](https://kb.vmware.com/s/article/53572).
- Drop unnecessary patches
  - udev_rules-disk-devs-only.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1526558400">- Switch from sunrpc to libtirpc to enable building under
  glibc 2.27 in openSUSE Factory.
  (commit 375d4463c68be3a133e4377655b68cc090cd9511)
  + 100-libtirpc.patch</changelog>
  <changelog author="kallan@suse.com" date="1533556800">- Update to 10.3.0 (build 8931395)
  + Starting with 10.3.0, open-vm-tools builds with xmlsec1 by default (instead
    of building with xml-security). To revert to the old behavior and build
    with xml-security, use the option '--enable-xmlsecurity' for the
    ./configure command.
  + Add BuildRequires:  libxml2-devel
  + Add BuildRequires:  pkgconfig(xmlsec1) for all openSUSE builds
  + Use --enable-xmlsecurity when building for SLE
- Drop unnecessary patches
  - 100-libtirpc.patch</changelog>
  <changelog author="kallan@suse.com" date="1533902400">-  Remove vgauthd.service from the %pre and %post section in the spec file.
  This allows vmtoolsd.service to enable vgauthd if needed which creates
  the vmtoolsd.service.requires/vgauthd.service symlink. (bsc#1103868)
- Add Requires: libxmlsec1-openssl1 to the spec file.  This is needed when
  using xmlsec1 rather than xml-ssecurity-c.</changelog>
  <changelog author="kallan@suse.com" date="1534334400">- After updating the project to include openSUSE_Leap_15.0 and SLE_15, the
  builds for these two projects fail because of unresolved dependencies.
  Some Factory configuration settings were being used for them.  Need to adjust
  the spec file to not use Factory configuration settings for
  openSUSE_Leap_15.0 and SLE_15.</changelog>
</package>
<package pkgid="3537647a0a495d828129dd1673a8ac7ba15d30bb2a9680204f1f6c60112fee4b" name="libvmtools-devel" arch="x86_64">
  <version epoch="0" ver="10.3.0" rel="lp150.2.6.1"/>
  <changelog author="ken@suse.com" date="1480593600">- Remove building KMP modules. No longer needed or wanted for
  current releases. User space tool vmhgfs-fuse has replaced the
  need for vmhgfs kernel module.</changelog>
  <changelog author="sparschauer@suse.de" date="1481716800">- Report SLES12-SAP guest OS as SLES12 (bsc#1013496)
  + Report-SLES12-SAP-guest-OS-as-SLES12.patch</changelog>
  <changelog author="ken@suse.com" date="1486468800">- Sumbitting update for SLE11SP4, SLE12SP1, SLE12SP2
  see fate#322214 &amp; fate#322218</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
  <changelog author="ken@suse.com" date="1489060800">- Updated to 10.1.5 stable release (boo#1027987)
  + Authentication failure is reported as unknown general system error.
  + Unable to backup virtual machines with active Docker containers.</changelog>
  <changelog author="ken@suse.com" date="1490616000">- fix build failure caused by upstream glibc change requiring
  explicit include of sys/sysmacros.h
  + glibc-sysmacros.patch</changelog>
  <changelog author="ken@suse.com" date="1490961600">- Fix unowned /var/lib/vmware directory. (bsc#1028866)
- Fix package dependency for open-vm-tools on libvmtools0 (bsc#1031968)</changelog>
  <changelog author="mlatimer@suse.com" date="1502798400">- Update to 10.1.10 stable release (boo#1051977, bsc#1052129)
  + Map certain PAM errors to VGAUTH_E_AUTHENTICATION_DENIED.
  + Exclude non-directory and non-existing paths during quiescing.
  + Fix timesync state to be uncalibrated when adjustment is large
    (&gt;60ms).
  + Fix an invalid class pointer access when the VSS provider is
    not installed.
  + Add support for the new selection target name "text/rtf" for
    copy/paste.
  + VMCI: reset datagram buffer pointer on dealloc
  + randomly generate tmp directory name
  + Previously Common Agent Framework (CAF) builds were linking against
    specific versions of PCRE and libiconv.  That restriction has been
    removed.
  + Reverts commit 7023998ba5594871a658c5ef1be4dbda6c0158eb to prevent
    intermittent hangs during soft reboots of RHEL 6.8 Linux VM.
  + Includes fix for VMs freezing during snapshots (bsc#1051627)
    (Thaw filesystems if the snapshot commit message to VMX fails.
    Commit b443e6456ffda66c0279032ab932ef271f8e1ae6)
- Drop unnecessary patch:
  + glibc-sysmacros.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1503316800">- open-vm-tools fails to correctly set screen resolution under
  Wayland environments (boo#1054800)
  + resolutionKMS-wayland.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1507291200">- Update to 10.1.15 stable release
  + Tools Hgfs Plugin: refresh Hgfs drives on client start
  + Report version data via guestinfo vars
  + Add entries for MacOS 10.13 (High Sierra) to guest_os_tables.h</changelog>
  <changelog author="mlatimer@suse.com" date="1507896000">- Build deploypackage plugin for SLES11 (bsc#1062837)
  (The VMware provided open-vm-tools-deploypkg is now obsolete.)
- Enable building with ssl capabilities for SLES11.
  +fix_discards_qualifiers_warning.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1513339200">- Update to 10.2.0 (build 7253323) (boo#1073174)
  + Fix memory leak in vmtoolsd.
  + Add SUSE Server for SAP Applications to hostinfoPosix.c
  + Fix crash issue when stopping vmtoolsd(vmuser).
  + Add new GOS definitions (e.g. SLES 15) for virtual hardware version 14.
  + Add /usr/bin/vmware-user symlink to vmware-user-suid-wrapper.
  + Provide vmware-vgauth-smoketest, for VGAUthservice validation.
- Modify udev rules to only adjust timeout on disk devices (bsc#1063320)
  + udev_rules-disk-devs-only.patch
- Due to a hard dependency on glibc 2.12, open-vm-tools 10.2.0 no longer
  builds for SLES11. Remove all SLES11 specific options in spec file.
- Drop unnecessary patches
  - Report-SLES12-SAP-guest-OS-as-SLES12.patch
  - resolutionKMS-wayland.patch
  - fix_discards_qualifiers_warning.patch  (only applicable to SLES11)</changelog>
  <changelog author="mlatimer@suse.com" date="1513857600">- The VMware provided open-vm-tools-deploypkg is now obsoleted.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Stop depending on the meta-package xorg-x11-devel as
  BuildRequires, but use the explicit module names configure is
  looking for: pkgconfig(sm), pkgconfig(xcomposite),
  pkgconfig(xext), pkgconfig(xi), pkgconfig(xinerama),
  pkgconfig(xrandr), pkgconfig(xrender) and pkgconfig(xtst).</changelog>
  <changelog author="mlatimer@suse.com" date="1523016000">- Update to 10.2.5 (build 8068406) (boo#1089181)
  + Compatible with supported versions of VMware vSphere ESXi 5.5 and later,
    VMware Workstation 14.0 and VMware Fusion 10.0.0.
  + Quiesced snapshot: Ability to exclude specific file systems from
    quiesced snapshots on Linux guest operating systems. For more details,
    see [Documentation](https://docs.vmware.com/en/VMware-Tools/index.html)
  + Disable display mode setting: A configuration option is introduced to
    disable normal display mode setting functionality using open-vm-tools.
    For more details, see [KB 53572](https://kb.vmware.com/s/article/53572).
- Drop unnecessary patches
  - udev_rules-disk-devs-only.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1526558400">- Switch from sunrpc to libtirpc to enable building under
  glibc 2.27 in openSUSE Factory.
  (commit 375d4463c68be3a133e4377655b68cc090cd9511)
  + 100-libtirpc.patch</changelog>
  <changelog author="kallan@suse.com" date="1533556800">- Update to 10.3.0 (build 8931395)
  + Starting with 10.3.0, open-vm-tools builds with xmlsec1 by default (instead
    of building with xml-security). To revert to the old behavior and build
    with xml-security, use the option '--enable-xmlsecurity' for the
    ./configure command.
  + Add BuildRequires:  libxml2-devel
  + Add BuildRequires:  pkgconfig(xmlsec1) for all openSUSE builds
  + Use --enable-xmlsecurity when building for SLE
- Drop unnecessary patches
  - 100-libtirpc.patch</changelog>
  <changelog author="kallan@suse.com" date="1533902400">-  Remove vgauthd.service from the %pre and %post section in the spec file.
  This allows vmtoolsd.service to enable vgauthd if needed which creates
  the vmtoolsd.service.requires/vgauthd.service symlink. (bsc#1103868)
- Add Requires: libxmlsec1-openssl1 to the spec file.  This is needed when
  using xmlsec1 rather than xml-ssecurity-c.</changelog>
  <changelog author="kallan@suse.com" date="1534334400">- After updating the project to include openSUSE_Leap_15.0 and SLE_15, the
  builds for these two projects fail because of unresolved dependencies.
  Some Factory configuration settings were being used for them.  Need to adjust
  the spec file to not use Factory configuration settings for
  openSUSE_Leap_15.0 and SLE_15.</changelog>
  <changelog author="kallan@suse.com" date="1539345600">- Added Handle Linux kernel /proc FS uint32 type stat overflow when calculating
  (bsc#1110793).
  + handle-linux-kernel-stat-overflow.patch
    On both 32-bit and 64-bit Linux, tools always parses Linux kernel /proc
    FS stats as uint64 values.  For rate stats, current - previous can handle
    uint64 type stat overflow, but not uint32 type.
- Added patch for Optional override for short and long OS names sent from Tools
  (bsc#1047469).
  + optional-override-os-name.patch
    Added support for customers to override the returned long and short OS
    names through the tools config file. If the setting is present, then names
    gathered by hostinfo will be ignored. The user is responsible for setting
    the appropriate names.
- Added patch for Workaround for false negative result when detecting
  cloud-init existance (bsc#1111619)
  + false-negative-cloud-init.patch
    "cloud-init -v" cmd is used to detect if cloud-init is properly configured
    and it works on most linux distros. However in some linux distro like
    Amazon Linux 2, "cloud-init -v" will print result to stderr instead of
    stdout and it makes "forkExecAndWaitCommand" give false negative result.
    1. added a new bool switch in  "ForkExecAndWaitCommand" to choose
    if we should ignore the stderr output when the return code is 0
    2. removed unnecessary reference for "ForkExecAndWaitCommand" in
    linuxDeploymentUtilities.c
    3. trivial change for some formatting</changelog>
</package>
<package pkgid="ce1eeaf6fec1b5bc925b5c12bf68488fdaad96adfa2c84b8a37db52fc7133a9c" name="libvmtools0" arch="x86_64">
  <version epoch="0" ver="10.3.0" rel="lp150.2.3.1"/>
  <changelog author="ken@suse.com" date="1478952000">- Updated to 10.1.0 stable release (boo#1011057)
  + vmware-namespace-cmd command line utility.
  + gtk3 support
  + Common Agent Framework (CAF)
  + guest authentication with xmlsec1
  + FreeBSD support
  + sub-command to push updated network information to the host on demand
  + udev rules for configuring SCSI timeouts in the guest
  + fixes for Ubuntu 16.10
  + Fix for quiesced snapshot failure leaving guest file system
    quiesced (bsc#1006796)
  + Fix for CVE-2015-5191 (bsc#1007600)
- Dropped upstream patches included (or not necessary) in 10.1.0:
  + vmw-bitmask-gcc6.patch
  + no-unused-const.patch
  + enable-gcc46+.patch</changelog>
  <changelog author="ken@suse.com" date="1480593600">- Remove building KMP modules. No longer needed or wanted for
  current releases. User space tool vmhgfs-fuse has replaced the
  need for vmhgfs kernel module.</changelog>
  <changelog author="sparschauer@suse.de" date="1481716800">- Report SLES12-SAP guest OS as SLES12 (bsc#1013496)
  + Report-SLES12-SAP-guest-OS-as-SLES12.patch</changelog>
  <changelog author="ken@suse.com" date="1486468800">- Sumbitting update for SLE11SP4, SLE12SP1, SLE12SP2
  see fate#322214 &amp; fate#322218</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
  <changelog author="ken@suse.com" date="1489060800">- Updated to 10.1.5 stable release (boo#1027987)
  + Authentication failure is reported as unknown general system error.
  + Unable to backup virtual machines with active Docker containers.</changelog>
  <changelog author="ken@suse.com" date="1490616000">- fix build failure caused by upstream glibc change requiring
  explicit include of sys/sysmacros.h
  + glibc-sysmacros.patch</changelog>
  <changelog author="ken@suse.com" date="1490961600">- Fix unowned /var/lib/vmware directory. (bsc#1028866)
- Fix package dependency for open-vm-tools on libvmtools0 (bsc#1031968)</changelog>
  <changelog author="mlatimer@suse.com" date="1502798400">- Update to 10.1.10 stable release (boo#1051977, bsc#1052129)
  + Map certain PAM errors to VGAUTH_E_AUTHENTICATION_DENIED.
  + Exclude non-directory and non-existing paths during quiescing.
  + Fix timesync state to be uncalibrated when adjustment is large
    (&gt;60ms).
  + Fix an invalid class pointer access when the VSS provider is
    not installed.
  + Add support for the new selection target name "text/rtf" for
    copy/paste.
  + VMCI: reset datagram buffer pointer on dealloc
  + randomly generate tmp directory name
  + Previously Common Agent Framework (CAF) builds were linking against
    specific versions of PCRE and libiconv.  That restriction has been
    removed.
  + Reverts commit 7023998ba5594871a658c5ef1be4dbda6c0158eb to prevent
    intermittent hangs during soft reboots of RHEL 6.8 Linux VM.
  + Includes fix for VMs freezing during snapshots (bsc#1051627)
    (Thaw filesystems if the snapshot commit message to VMX fails.
    Commit b443e6456ffda66c0279032ab932ef271f8e1ae6)
- Drop unnecessary patch:
  + glibc-sysmacros.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1503316800">- open-vm-tools fails to correctly set screen resolution under
  Wayland environments (boo#1054800)
  + resolutionKMS-wayland.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1507291200">- Update to 10.1.15 stable release
  + Tools Hgfs Plugin: refresh Hgfs drives on client start
  + Report version data via guestinfo vars
  + Add entries for MacOS 10.13 (High Sierra) to guest_os_tables.h</changelog>
  <changelog author="mlatimer@suse.com" date="1507896000">- Build deploypackage plugin for SLES11 (bsc#1062837)
  (The VMware provided open-vm-tools-deploypkg is now obsolete.)
- Enable building with ssl capabilities for SLES11.
  +fix_discards_qualifiers_warning.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1513339200">- Update to 10.2.0 (build 7253323) (boo#1073174)
  + Fix memory leak in vmtoolsd.
  + Add SUSE Server for SAP Applications to hostinfoPosix.c
  + Fix crash issue when stopping vmtoolsd(vmuser).
  + Add new GOS definitions (e.g. SLES 15) for virtual hardware version 14.
  + Add /usr/bin/vmware-user symlink to vmware-user-suid-wrapper.
  + Provide vmware-vgauth-smoketest, for VGAUthservice validation.
- Modify udev rules to only adjust timeout on disk devices (bsc#1063320)
  + udev_rules-disk-devs-only.patch
- Due to a hard dependency on glibc 2.12, open-vm-tools 10.2.0 no longer
  builds for SLES11. Remove all SLES11 specific options in spec file.
- Drop unnecessary patches
  - Report-SLES12-SAP-guest-OS-as-SLES12.patch
  - resolutionKMS-wayland.patch
  - fix_discards_qualifiers_warning.patch  (only applicable to SLES11)</changelog>
  <changelog author="mlatimer@suse.com" date="1513857600">- The VMware provided open-vm-tools-deploypkg is now obsoleted.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Stop depending on the meta-package xorg-x11-devel as
  BuildRequires, but use the explicit module names configure is
  looking for: pkgconfig(sm), pkgconfig(xcomposite),
  pkgconfig(xext), pkgconfig(xi), pkgconfig(xinerama),
  pkgconfig(xrandr), pkgconfig(xrender) and pkgconfig(xtst).</changelog>
  <changelog author="mlatimer@suse.com" date="1523016000">- Update to 10.2.5 (build 8068406) (boo#1089181)
  + Compatible with supported versions of VMware vSphere ESXi 5.5 and later,
    VMware Workstation 14.0 and VMware Fusion 10.0.0.
  + Quiesced snapshot: Ability to exclude specific file systems from
    quiesced snapshots on Linux guest operating systems. For more details,
    see [Documentation](https://docs.vmware.com/en/VMware-Tools/index.html)
  + Disable display mode setting: A configuration option is introduced to
    disable normal display mode setting functionality using open-vm-tools.
    For more details, see [KB 53572](https://kb.vmware.com/s/article/53572).
- Drop unnecessary patches
  - udev_rules-disk-devs-only.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1526558400">- Switch from sunrpc to libtirpc to enable building under
  glibc 2.27 in openSUSE Factory.
  (commit 375d4463c68be3a133e4377655b68cc090cd9511)
  + 100-libtirpc.patch</changelog>
  <changelog author="kallan@suse.com" date="1533556800">- Update to 10.3.0 (build 8931395)
  + Starting with 10.3.0, open-vm-tools builds with xmlsec1 by default (instead
    of building with xml-security). To revert to the old behavior and build
    with xml-security, use the option '--enable-xmlsecurity' for the
    ./configure command.
  + Add BuildRequires:  libxml2-devel
  + Add BuildRequires:  pkgconfig(xmlsec1) for all openSUSE builds
  + Use --enable-xmlsecurity when building for SLE
- Drop unnecessary patches
  - 100-libtirpc.patch</changelog>
  <changelog author="kallan@suse.com" date="1533902400">-  Remove vgauthd.service from the %pre and %post section in the spec file.
  This allows vmtoolsd.service to enable vgauthd if needed which creates
  the vmtoolsd.service.requires/vgauthd.service symlink. (bsc#1103868)
- Add Requires: libxmlsec1-openssl1 to the spec file.  This is needed when
  using xmlsec1 rather than xml-ssecurity-c.</changelog>
  <changelog author="kallan@suse.com" date="1534334400">- After updating the project to include openSUSE_Leap_15.0 and SLE_15, the
  builds for these two projects fail because of unresolved dependencies.
  Some Factory configuration settings were being used for them.  Need to adjust
  the spec file to not use Factory configuration settings for
  openSUSE_Leap_15.0 and SLE_15.</changelog>
</package>
<package pkgid="fb2b533f32fa68bde2ab622c820533a09e870b639a8a79246555d304f7bbf5d5" name="libvmtools0" arch="x86_64">
  <version epoch="0" ver="10.3.0" rel="lp150.2.6.1"/>
  <changelog author="ken@suse.com" date="1480593600">- Remove building KMP modules. No longer needed or wanted for
  current releases. User space tool vmhgfs-fuse has replaced the
  need for vmhgfs kernel module.</changelog>
  <changelog author="sparschauer@suse.de" date="1481716800">- Report SLES12-SAP guest OS as SLES12 (bsc#1013496)
  + Report-SLES12-SAP-guest-OS-as-SLES12.patch</changelog>
  <changelog author="ken@suse.com" date="1486468800">- Sumbitting update for SLE11SP4, SLE12SP1, SLE12SP2
  see fate#322214 &amp; fate#322218</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
  <changelog author="ken@suse.com" date="1489060800">- Updated to 10.1.5 stable release (boo#1027987)
  + Authentication failure is reported as unknown general system error.
  + Unable to backup virtual machines with active Docker containers.</changelog>
  <changelog author="ken@suse.com" date="1490616000">- fix build failure caused by upstream glibc change requiring
  explicit include of sys/sysmacros.h
  + glibc-sysmacros.patch</changelog>
  <changelog author="ken@suse.com" date="1490961600">- Fix unowned /var/lib/vmware directory. (bsc#1028866)
- Fix package dependency for open-vm-tools on libvmtools0 (bsc#1031968)</changelog>
  <changelog author="mlatimer@suse.com" date="1502798400">- Update to 10.1.10 stable release (boo#1051977, bsc#1052129)
  + Map certain PAM errors to VGAUTH_E_AUTHENTICATION_DENIED.
  + Exclude non-directory and non-existing paths during quiescing.
  + Fix timesync state to be uncalibrated when adjustment is large
    (&gt;60ms).
  + Fix an invalid class pointer access when the VSS provider is
    not installed.
  + Add support for the new selection target name "text/rtf" for
    copy/paste.
  + VMCI: reset datagram buffer pointer on dealloc
  + randomly generate tmp directory name
  + Previously Common Agent Framework (CAF) builds were linking against
    specific versions of PCRE and libiconv.  That restriction has been
    removed.
  + Reverts commit 7023998ba5594871a658c5ef1be4dbda6c0158eb to prevent
    intermittent hangs during soft reboots of RHEL 6.8 Linux VM.
  + Includes fix for VMs freezing during snapshots (bsc#1051627)
    (Thaw filesystems if the snapshot commit message to VMX fails.
    Commit b443e6456ffda66c0279032ab932ef271f8e1ae6)
- Drop unnecessary patch:
  + glibc-sysmacros.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1503316800">- open-vm-tools fails to correctly set screen resolution under
  Wayland environments (boo#1054800)
  + resolutionKMS-wayland.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1507291200">- Update to 10.1.15 stable release
  + Tools Hgfs Plugin: refresh Hgfs drives on client start
  + Report version data via guestinfo vars
  + Add entries for MacOS 10.13 (High Sierra) to guest_os_tables.h</changelog>
  <changelog author="mlatimer@suse.com" date="1507896000">- Build deploypackage plugin for SLES11 (bsc#1062837)
  (The VMware provided open-vm-tools-deploypkg is now obsolete.)
- Enable building with ssl capabilities for SLES11.
  +fix_discards_qualifiers_warning.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1513339200">- Update to 10.2.0 (build 7253323) (boo#1073174)
  + Fix memory leak in vmtoolsd.
  + Add SUSE Server for SAP Applications to hostinfoPosix.c
  + Fix crash issue when stopping vmtoolsd(vmuser).
  + Add new GOS definitions (e.g. SLES 15) for virtual hardware version 14.
  + Add /usr/bin/vmware-user symlink to vmware-user-suid-wrapper.
  + Provide vmware-vgauth-smoketest, for VGAUthservice validation.
- Modify udev rules to only adjust timeout on disk devices (bsc#1063320)
  + udev_rules-disk-devs-only.patch
- Due to a hard dependency on glibc 2.12, open-vm-tools 10.2.0 no longer
  builds for SLES11. Remove all SLES11 specific options in spec file.
- Drop unnecessary patches
  - Report-SLES12-SAP-guest-OS-as-SLES12.patch
  - resolutionKMS-wayland.patch
  - fix_discards_qualifiers_warning.patch  (only applicable to SLES11)</changelog>
  <changelog author="mlatimer@suse.com" date="1513857600">- The VMware provided open-vm-tools-deploypkg is now obsoleted.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Stop depending on the meta-package xorg-x11-devel as
  BuildRequires, but use the explicit module names configure is
  looking for: pkgconfig(sm), pkgconfig(xcomposite),
  pkgconfig(xext), pkgconfig(xi), pkgconfig(xinerama),
  pkgconfig(xrandr), pkgconfig(xrender) and pkgconfig(xtst).</changelog>
  <changelog author="mlatimer@suse.com" date="1523016000">- Update to 10.2.5 (build 8068406) (boo#1089181)
  + Compatible with supported versions of VMware vSphere ESXi 5.5 and later,
    VMware Workstation 14.0 and VMware Fusion 10.0.0.
  + Quiesced snapshot: Ability to exclude specific file systems from
    quiesced snapshots on Linux guest operating systems. For more details,
    see [Documentation](https://docs.vmware.com/en/VMware-Tools/index.html)
  + Disable display mode setting: A configuration option is introduced to
    disable normal display mode setting functionality using open-vm-tools.
    For more details, see [KB 53572](https://kb.vmware.com/s/article/53572).
- Drop unnecessary patches
  - udev_rules-disk-devs-only.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1526558400">- Switch from sunrpc to libtirpc to enable building under
  glibc 2.27 in openSUSE Factory.
  (commit 375d4463c68be3a133e4377655b68cc090cd9511)
  + 100-libtirpc.patch</changelog>
  <changelog author="kallan@suse.com" date="1533556800">- Update to 10.3.0 (build 8931395)
  + Starting with 10.3.0, open-vm-tools builds with xmlsec1 by default (instead
    of building with xml-security). To revert to the old behavior and build
    with xml-security, use the option '--enable-xmlsecurity' for the
    ./configure command.
  + Add BuildRequires:  libxml2-devel
  + Add BuildRequires:  pkgconfig(xmlsec1) for all openSUSE builds
  + Use --enable-xmlsecurity when building for SLE
- Drop unnecessary patches
  - 100-libtirpc.patch</changelog>
  <changelog author="kallan@suse.com" date="1533902400">-  Remove vgauthd.service from the %pre and %post section in the spec file.
  This allows vmtoolsd.service to enable vgauthd if needed which creates
  the vmtoolsd.service.requires/vgauthd.service symlink. (bsc#1103868)
- Add Requires: libxmlsec1-openssl1 to the spec file.  This is needed when
  using xmlsec1 rather than xml-ssecurity-c.</changelog>
  <changelog author="kallan@suse.com" date="1534334400">- After updating the project to include openSUSE_Leap_15.0 and SLE_15, the
  builds for these two projects fail because of unresolved dependencies.
  Some Factory configuration settings were being used for them.  Need to adjust
  the spec file to not use Factory configuration settings for
  openSUSE_Leap_15.0 and SLE_15.</changelog>
  <changelog author="kallan@suse.com" date="1539345600">- Added Handle Linux kernel /proc FS uint32 type stat overflow when calculating
  (bsc#1110793).
  + handle-linux-kernel-stat-overflow.patch
    On both 32-bit and 64-bit Linux, tools always parses Linux kernel /proc
    FS stats as uint64 values.  For rate stats, current - previous can handle
    uint64 type stat overflow, but not uint32 type.
- Added patch for Optional override for short and long OS names sent from Tools
  (bsc#1047469).
  + optional-override-os-name.patch
    Added support for customers to override the returned long and short OS
    names through the tools config file. If the setting is present, then names
    gathered by hostinfo will be ignored. The user is responsible for setting
    the appropriate names.
- Added patch for Workaround for false negative result when detecting
  cloud-init existance (bsc#1111619)
  + false-negative-cloud-init.patch
    "cloud-init -v" cmd is used to detect if cloud-init is properly configured
    and it works on most linux distros. However in some linux distro like
    Amazon Linux 2, "cloud-init -v" will print result to stderr instead of
    stdout and it makes "forkExecAndWaitCommand" give false negative result.
    1. added a new bool switch in  "ForkExecAndWaitCommand" to choose
    if we should ignore the stderr output when the return code is 0
    2. removed unnecessary reference for "ForkExecAndWaitCommand" in
    linuxDeploymentUtilities.c
    3. trivial change for some formatting</changelog>
</package>
<package pkgid="db459a4e94a2961cde47ca18e33b9c1f1bb39e105195ef19db8ee3f362a853f9" name="libvorbis" arch="src">
  <version epoch="0" ver="1.3.6" rel="lp150.3.3.1"/>
  <changelog author="davejplater@gmail.com" date="1291982400">- Split libvorbisenc2 and libvorbisfile3 from libvorbis0
- Removed services.</changelog>
  <changelog author="dmueller@suse.de" date="1304596800">- fix provides/obsoletes in baselibs</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- Fix build with no-add-needed</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322222400">- open files with O_CLOEXEC, in order to avoid fd leaks
  when calling applications fork() ..execve()...
  This patch does not cover the executable tools since
  it is not critical for them.</changelog>
  <changelog author="idonmez@suse.com" date="1324814400">- -O20 optimization level doesn't exist, use -O3</changelog>
  <changelog author="tiwai@suse.de" date="1329825600">- VUL-0: CVE-2012-0444: libvorbis: heap-based buffer overflow
  (bnc#747912)</changelog>
  <changelog author="ftake@geeko.jp" date="1340193600">- updated to 1.3.3
  * vorbis: additional proofing against invalid/malicious
  streams in decode (see SVN for details).
  * vorbis: fix a memory leak in vorbis_commentheader_out().
  * updates, corrections and clarifications in the Vorbis I
  specification document
  * build warning fixes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362225600">- fix build with automake-1.13.1</changelog>
  <changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1393156800">- Xiph libvorbis 1.3.4
  * reduced static data size in libvorbisenc
  * associated minor changes required to libvorbis and libvorbisfile
  * minor build fixes and build system updates
  * no functional changes over the previous 1.3.3 release
- removed libvorbis-pkgconfig.patch, in upstream
- updated vorbis-fix-linking.patch for context changes</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Fix obsoletes and provides in baselibs.conf.</changelog>
  <changelog author="mpluskal@suse.com" date="1425643200">- Cleanup spec file with spec-cleaner
- Update to 1.3.5
  * Tolerate single-entry codebooks.
  * Fix decoder crash with invalid input.
  * Fix encoder crash with non-positive sample rates.
  * Fix issues in vorbisfile's seek bisection code.
  * Spec errata.
  * Reject multiple headers of the same type.
  * Various build fixes and code cleanup.</changelog>
  <changelog author="aloisio@gmx.com" date="1480420800">- Added 32bit libvorbis-devel in baselibs.conf</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: out-of-bounds array read vulnerability exists in
  function mapping0_forward() (CVE-2017-14633, bsc#1059811):
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
- Fix VUL-0: Remote Code Execution upon freeing uninitialized
  memory in function vorbis_analysis_headerout(CVE-2017-14632,
  bsc#1059809):
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201600">- Fix VUL-0: libvorbis: Out of bounds memory write while processing
  Vorbis audio data (CVE-2018-5146, bsc#1085687):
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201601">- Update to version 1.3.6:
  * Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
  * Fix CVE-2017-14632 - free() on unitialized data
  * Fix CVE-2017-14633 - out-of-bounds read
  * Fix bitrate metadata parsing.
  * Fix out-of-bounds read in codebook parsing.
  * Fix residue vector size in Vorbis I spec.
  * Appveyor support
  * Travis CI support
  * Add secondary CMake build system.
  * Build system fixes
- Build documents with doxygen, and many tex stuff;
  this requires to disable parallel builds partially
- Move COPYING to license directory
- Drop obsoleted patches:
  vorbis-fix-linking.patch
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521288000">- Split libvorbis-doc subpackage to a separate spec file for
  reducing the dependencies</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix out-of-bounds access inside bark_noise_hybridmp function
  (CVE-2017-14160, bsc#1059812):
  downstream fix: vorbis-CVE-2017-14160.patch
- Fix stack-basedbuffer over-read in bark_noise_hybridm
  (CVE-2018-10393, bsc#1091072):
  downstream fix: vorbis-CVE-2018-10393.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528200000">- Replace vorbis-CVE-2017-14160.patch with the upstream fix
  (commit 018ca26dece6), refresh vorbis-CVE-2018-10393.patch
- Fix the validation of channels in mapping0_forward()
  (CVE-2018-10392, bsc#1091070):
  vorbis-CVE-2018-10392.patch</changelog>
</package>
<package pkgid="5f8d3bc8a3a01a025f39beb260be654cc263cdb58309a8bcad6963901f6f004a" name="libvorbis-devel" arch="x86_64">
  <version epoch="0" ver="1.3.6" rel="lp150.3.3.1"/>
  <changelog author="davejplater@gmail.com" date="1291982400">- Split libvorbisenc2 and libvorbisfile3 from libvorbis0
- Removed services.</changelog>
  <changelog author="dmueller@suse.de" date="1304596800">- fix provides/obsoletes in baselibs</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- Fix build with no-add-needed</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322222400">- open files with O_CLOEXEC, in order to avoid fd leaks
  when calling applications fork() ..execve()...
  This patch does not cover the executable tools since
  it is not critical for them.</changelog>
  <changelog author="idonmez@suse.com" date="1324814400">- -O20 optimization level doesn't exist, use -O3</changelog>
  <changelog author="tiwai@suse.de" date="1329825600">- VUL-0: CVE-2012-0444: libvorbis: heap-based buffer overflow
  (bnc#747912)</changelog>
  <changelog author="ftake@geeko.jp" date="1340193600">- updated to 1.3.3
  * vorbis: additional proofing against invalid/malicious
  streams in decode (see SVN for details).
  * vorbis: fix a memory leak in vorbis_commentheader_out().
  * updates, corrections and clarifications in the Vorbis I
  specification document
  * build warning fixes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362225600">- fix build with automake-1.13.1</changelog>
  <changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1393156800">- Xiph libvorbis 1.3.4
  * reduced static data size in libvorbisenc
  * associated minor changes required to libvorbis and libvorbisfile
  * minor build fixes and build system updates
  * no functional changes over the previous 1.3.3 release
- removed libvorbis-pkgconfig.patch, in upstream
- updated vorbis-fix-linking.patch for context changes</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Fix obsoletes and provides in baselibs.conf.</changelog>
  <changelog author="mpluskal@suse.com" date="1425643200">- Cleanup spec file with spec-cleaner
- Update to 1.3.5
  * Tolerate single-entry codebooks.
  * Fix decoder crash with invalid input.
  * Fix encoder crash with non-positive sample rates.
  * Fix issues in vorbisfile's seek bisection code.
  * Spec errata.
  * Reject multiple headers of the same type.
  * Various build fixes and code cleanup.</changelog>
  <changelog author="aloisio@gmx.com" date="1480420800">- Added 32bit libvorbis-devel in baselibs.conf</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: out-of-bounds array read vulnerability exists in
  function mapping0_forward() (CVE-2017-14633, bsc#1059811):
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
- Fix VUL-0: Remote Code Execution upon freeing uninitialized
  memory in function vorbis_analysis_headerout(CVE-2017-14632,
  bsc#1059809):
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201600">- Fix VUL-0: libvorbis: Out of bounds memory write while processing
  Vorbis audio data (CVE-2018-5146, bsc#1085687):
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201601">- Update to version 1.3.6:
  * Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
  * Fix CVE-2017-14632 - free() on unitialized data
  * Fix CVE-2017-14633 - out-of-bounds read
  * Fix bitrate metadata parsing.
  * Fix out-of-bounds read in codebook parsing.
  * Fix residue vector size in Vorbis I spec.
  * Appveyor support
  * Travis CI support
  * Add secondary CMake build system.
  * Build system fixes
- Build documents with doxygen, and many tex stuff;
  this requires to disable parallel builds partially
- Move COPYING to license directory
- Drop obsoleted patches:
  vorbis-fix-linking.patch
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521288000">- Split libvorbis-doc subpackage to a separate spec file for
  reducing the dependencies</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix out-of-bounds access inside bark_noise_hybridmp function
  (CVE-2017-14160, bsc#1059812):
  downstream fix: vorbis-CVE-2017-14160.patch
- Fix stack-basedbuffer over-read in bark_noise_hybridm
  (CVE-2018-10393, bsc#1091072):
  downstream fix: vorbis-CVE-2018-10393.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528200000">- Replace vorbis-CVE-2017-14160.patch with the upstream fix
  (commit 018ca26dece6), refresh vorbis-CVE-2018-10393.patch
- Fix the validation of channels in mapping0_forward()
  (CVE-2018-10392, bsc#1091070):
  vorbis-CVE-2018-10392.patch</changelog>
</package>
<package pkgid="ab437a50376012b3c3c02e406b0daa402914e607167e53113b1d66519efa652b" name="libvorbis-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.3.6" rel="lp150.3.3.1"/>
  <changelog author="davejplater@gmail.com" date="1291982400">- Split libvorbisenc2 and libvorbisfile3 from libvorbis0
- Removed services.</changelog>
  <changelog author="dmueller@suse.de" date="1304596800">- fix provides/obsoletes in baselibs</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- Fix build with no-add-needed</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322222400">- open files with O_CLOEXEC, in order to avoid fd leaks
  when calling applications fork() ..execve()...
  This patch does not cover the executable tools since
  it is not critical for them.</changelog>
  <changelog author="idonmez@suse.com" date="1324814400">- -O20 optimization level doesn't exist, use -O3</changelog>
  <changelog author="tiwai@suse.de" date="1329825600">- VUL-0: CVE-2012-0444: libvorbis: heap-based buffer overflow
  (bnc#747912)</changelog>
  <changelog author="ftake@geeko.jp" date="1340193600">- updated to 1.3.3
  * vorbis: additional proofing against invalid/malicious
  streams in decode (see SVN for details).
  * vorbis: fix a memory leak in vorbis_commentheader_out().
  * updates, corrections and clarifications in the Vorbis I
  specification document
  * build warning fixes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362225600">- fix build with automake-1.13.1</changelog>
  <changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1393156800">- Xiph libvorbis 1.3.4
  * reduced static data size in libvorbisenc
  * associated minor changes required to libvorbis and libvorbisfile
  * minor build fixes and build system updates
  * no functional changes over the previous 1.3.3 release
- removed libvorbis-pkgconfig.patch, in upstream
- updated vorbis-fix-linking.patch for context changes</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Fix obsoletes and provides in baselibs.conf.</changelog>
  <changelog author="mpluskal@suse.com" date="1425643200">- Cleanup spec file with spec-cleaner
- Update to 1.3.5
  * Tolerate single-entry codebooks.
  * Fix decoder crash with invalid input.
  * Fix encoder crash with non-positive sample rates.
  * Fix issues in vorbisfile's seek bisection code.
  * Spec errata.
  * Reject multiple headers of the same type.
  * Various build fixes and code cleanup.</changelog>
  <changelog author="aloisio@gmx.com" date="1480420800">- Added 32bit libvorbis-devel in baselibs.conf</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: out-of-bounds array read vulnerability exists in
  function mapping0_forward() (CVE-2017-14633, bsc#1059811):
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
- Fix VUL-0: Remote Code Execution upon freeing uninitialized
  memory in function vorbis_analysis_headerout(CVE-2017-14632,
  bsc#1059809):
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201600">- Fix VUL-0: libvorbis: Out of bounds memory write while processing
  Vorbis audio data (CVE-2018-5146, bsc#1085687):
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201601">- Update to version 1.3.6:
  * Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
  * Fix CVE-2017-14632 - free() on unitialized data
  * Fix CVE-2017-14633 - out-of-bounds read
  * Fix bitrate metadata parsing.
  * Fix out-of-bounds read in codebook parsing.
  * Fix residue vector size in Vorbis I spec.
  * Appveyor support
  * Travis CI support
  * Add secondary CMake build system.
  * Build system fixes
- Build documents with doxygen, and many tex stuff;
  this requires to disable parallel builds partially
- Move COPYING to license directory
- Drop obsoleted patches:
  vorbis-fix-linking.patch
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521288000">- Split libvorbis-doc subpackage to a separate spec file for
  reducing the dependencies</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix out-of-bounds access inside bark_noise_hybridmp function
  (CVE-2017-14160, bsc#1059812):
  downstream fix: vorbis-CVE-2017-14160.patch
- Fix stack-basedbuffer over-read in bark_noise_hybridm
  (CVE-2018-10393, bsc#1091072):
  downstream fix: vorbis-CVE-2018-10393.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528200000">- Replace vorbis-CVE-2017-14160.patch with the upstream fix
  (commit 018ca26dece6), refresh vorbis-CVE-2018-10393.patch
- Fix the validation of channels in mapping0_forward()
  (CVE-2018-10392, bsc#1091070):
  vorbis-CVE-2018-10392.patch</changelog>
</package>
<package pkgid="4bd78cdbbc49ca899ca392214afb1b940c54a8975aa20f703ba0fcf1fb33b894" name="libvorbis-doc" arch="noarch">
  <version epoch="0" ver="1.3.6" rel="lp150.3.3.1"/>
  <changelog author="tiwai@suse.de" date="1521288000">- Split from libvorbis.spec to reduce the build dependencies</changelog>
</package>
<package pkgid="f21447a292c9deb6dd754d87b25df1b45ef9627522023e21df9cf327e067c0b7" name="libvorbis-doc" arch="src">
  <version epoch="0" ver="1.3.6" rel="lp150.3.3.1"/>
  <changelog author="tiwai@suse.de" date="1521288000">- Split from libvorbis.spec to reduce the build dependencies</changelog>
</package>
<package pkgid="a68d32c1dab22acb6a40cc70b81e5535ff52f970f2d75a10bc1768e29fc629a0" name="libvorbis0" arch="x86_64">
  <version epoch="0" ver="1.3.6" rel="lp150.3.3.1"/>
  <changelog author="davejplater@gmail.com" date="1291982400">- Split libvorbisenc2 and libvorbisfile3 from libvorbis0
- Removed services.</changelog>
  <changelog author="dmueller@suse.de" date="1304596800">- fix provides/obsoletes in baselibs</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- Fix build with no-add-needed</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322222400">- open files with O_CLOEXEC, in order to avoid fd leaks
  when calling applications fork() ..execve()...
  This patch does not cover the executable tools since
  it is not critical for them.</changelog>
  <changelog author="idonmez@suse.com" date="1324814400">- -O20 optimization level doesn't exist, use -O3</changelog>
  <changelog author="tiwai@suse.de" date="1329825600">- VUL-0: CVE-2012-0444: libvorbis: heap-based buffer overflow
  (bnc#747912)</changelog>
  <changelog author="ftake@geeko.jp" date="1340193600">- updated to 1.3.3
  * vorbis: additional proofing against invalid/malicious
  streams in decode (see SVN for details).
  * vorbis: fix a memory leak in vorbis_commentheader_out().
  * updates, corrections and clarifications in the Vorbis I
  specification document
  * build warning fixes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362225600">- fix build with automake-1.13.1</changelog>
  <changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1393156800">- Xiph libvorbis 1.3.4
  * reduced static data size in libvorbisenc
  * associated minor changes required to libvorbis and libvorbisfile
  * minor build fixes and build system updates
  * no functional changes over the previous 1.3.3 release
- removed libvorbis-pkgconfig.patch, in upstream
- updated vorbis-fix-linking.patch for context changes</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Fix obsoletes and provides in baselibs.conf.</changelog>
  <changelog author="mpluskal@suse.com" date="1425643200">- Cleanup spec file with spec-cleaner
- Update to 1.3.5
  * Tolerate single-entry codebooks.
  * Fix decoder crash with invalid input.
  * Fix encoder crash with non-positive sample rates.
  * Fix issues in vorbisfile's seek bisection code.
  * Spec errata.
  * Reject multiple headers of the same type.
  * Various build fixes and code cleanup.</changelog>
  <changelog author="aloisio@gmx.com" date="1480420800">- Added 32bit libvorbis-devel in baselibs.conf</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: out-of-bounds array read vulnerability exists in
  function mapping0_forward() (CVE-2017-14633, bsc#1059811):
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
- Fix VUL-0: Remote Code Execution upon freeing uninitialized
  memory in function vorbis_analysis_headerout(CVE-2017-14632,
  bsc#1059809):
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201600">- Fix VUL-0: libvorbis: Out of bounds memory write while processing
  Vorbis audio data (CVE-2018-5146, bsc#1085687):
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201601">- Update to version 1.3.6:
  * Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
  * Fix CVE-2017-14632 - free() on unitialized data
  * Fix CVE-2017-14633 - out-of-bounds read
  * Fix bitrate metadata parsing.
  * Fix out-of-bounds read in codebook parsing.
  * Fix residue vector size in Vorbis I spec.
  * Appveyor support
  * Travis CI support
  * Add secondary CMake build system.
  * Build system fixes
- Build documents with doxygen, and many tex stuff;
  this requires to disable parallel builds partially
- Move COPYING to license directory
- Drop obsoleted patches:
  vorbis-fix-linking.patch
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521288000">- Split libvorbis-doc subpackage to a separate spec file for
  reducing the dependencies</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix out-of-bounds access inside bark_noise_hybridmp function
  (CVE-2017-14160, bsc#1059812):
  downstream fix: vorbis-CVE-2017-14160.patch
- Fix stack-basedbuffer over-read in bark_noise_hybridm
  (CVE-2018-10393, bsc#1091072):
  downstream fix: vorbis-CVE-2018-10393.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528200000">- Replace vorbis-CVE-2017-14160.patch with the upstream fix
  (commit 018ca26dece6), refresh vorbis-CVE-2018-10393.patch
- Fix the validation of channels in mapping0_forward()
  (CVE-2018-10392, bsc#1091070):
  vorbis-CVE-2018-10392.patch</changelog>
</package>
<package pkgid="afbd6ca346fec9665c593db3562b6dd00360158d1c28936c22daeb1c10143d17" name="libvorbis0-32bit" arch="x86_64">
  <version epoch="0" ver="1.3.6" rel="lp150.3.3.1"/>
  <changelog author="davejplater@gmail.com" date="1291982400">- Split libvorbisenc2 and libvorbisfile3 from libvorbis0
- Removed services.</changelog>
  <changelog author="dmueller@suse.de" date="1304596800">- fix provides/obsoletes in baselibs</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- Fix build with no-add-needed</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322222400">- open files with O_CLOEXEC, in order to avoid fd leaks
  when calling applications fork() ..execve()...
  This patch does not cover the executable tools since
  it is not critical for them.</changelog>
  <changelog author="idonmez@suse.com" date="1324814400">- -O20 optimization level doesn't exist, use -O3</changelog>
  <changelog author="tiwai@suse.de" date="1329825600">- VUL-0: CVE-2012-0444: libvorbis: heap-based buffer overflow
  (bnc#747912)</changelog>
  <changelog author="ftake@geeko.jp" date="1340193600">- updated to 1.3.3
  * vorbis: additional proofing against invalid/malicious
  streams in decode (see SVN for details).
  * vorbis: fix a memory leak in vorbis_commentheader_out().
  * updates, corrections and clarifications in the Vorbis I
  specification document
  * build warning fixes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362225600">- fix build with automake-1.13.1</changelog>
  <changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1393156800">- Xiph libvorbis 1.3.4
  * reduced static data size in libvorbisenc
  * associated minor changes required to libvorbis and libvorbisfile
  * minor build fixes and build system updates
  * no functional changes over the previous 1.3.3 release
- removed libvorbis-pkgconfig.patch, in upstream
- updated vorbis-fix-linking.patch for context changes</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Fix obsoletes and provides in baselibs.conf.</changelog>
  <changelog author="mpluskal@suse.com" date="1425643200">- Cleanup spec file with spec-cleaner
- Update to 1.3.5
  * Tolerate single-entry codebooks.
  * Fix decoder crash with invalid input.
  * Fix encoder crash with non-positive sample rates.
  * Fix issues in vorbisfile's seek bisection code.
  * Spec errata.
  * Reject multiple headers of the same type.
  * Various build fixes and code cleanup.</changelog>
  <changelog author="aloisio@gmx.com" date="1480420800">- Added 32bit libvorbis-devel in baselibs.conf</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: out-of-bounds array read vulnerability exists in
  function mapping0_forward() (CVE-2017-14633, bsc#1059811):
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
- Fix VUL-0: Remote Code Execution upon freeing uninitialized
  memory in function vorbis_analysis_headerout(CVE-2017-14632,
  bsc#1059809):
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201600">- Fix VUL-0: libvorbis: Out of bounds memory write while processing
  Vorbis audio data (CVE-2018-5146, bsc#1085687):
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201601">- Update to version 1.3.6:
  * Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
  * Fix CVE-2017-14632 - free() on unitialized data
  * Fix CVE-2017-14633 - out-of-bounds read
  * Fix bitrate metadata parsing.
  * Fix out-of-bounds read in codebook parsing.
  * Fix residue vector size in Vorbis I spec.
  * Appveyor support
  * Travis CI support
  * Add secondary CMake build system.
  * Build system fixes
- Build documents with doxygen, and many tex stuff;
  this requires to disable parallel builds partially
- Move COPYING to license directory
- Drop obsoleted patches:
  vorbis-fix-linking.patch
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521288000">- Split libvorbis-doc subpackage to a separate spec file for
  reducing the dependencies</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix out-of-bounds access inside bark_noise_hybridmp function
  (CVE-2017-14160, bsc#1059812):
  downstream fix: vorbis-CVE-2017-14160.patch
- Fix stack-basedbuffer over-read in bark_noise_hybridm
  (CVE-2018-10393, bsc#1091072):
  downstream fix: vorbis-CVE-2018-10393.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528200000">- Replace vorbis-CVE-2017-14160.patch with the upstream fix
  (commit 018ca26dece6), refresh vorbis-CVE-2018-10393.patch
- Fix the validation of channels in mapping0_forward()
  (CVE-2018-10392, bsc#1091070):
  vorbis-CVE-2018-10392.patch</changelog>
</package>
<package pkgid="07cc65191f5ac706a3397b64fde80decde291b91ae4fb8c8bebc8a183833dfe9" name="libvorbisenc2" arch="x86_64">
  <version epoch="0" ver="1.3.6" rel="lp150.3.3.1"/>
  <changelog author="davejplater@gmail.com" date="1291982400">- Split libvorbisenc2 and libvorbisfile3 from libvorbis0
- Removed services.</changelog>
  <changelog author="dmueller@suse.de" date="1304596800">- fix provides/obsoletes in baselibs</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- Fix build with no-add-needed</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322222400">- open files with O_CLOEXEC, in order to avoid fd leaks
  when calling applications fork() ..execve()...
  This patch does not cover the executable tools since
  it is not critical for them.</changelog>
  <changelog author="idonmez@suse.com" date="1324814400">- -O20 optimization level doesn't exist, use -O3</changelog>
  <changelog author="tiwai@suse.de" date="1329825600">- VUL-0: CVE-2012-0444: libvorbis: heap-based buffer overflow
  (bnc#747912)</changelog>
  <changelog author="ftake@geeko.jp" date="1340193600">- updated to 1.3.3
  * vorbis: additional proofing against invalid/malicious
  streams in decode (see SVN for details).
  * vorbis: fix a memory leak in vorbis_commentheader_out().
  * updates, corrections and clarifications in the Vorbis I
  specification document
  * build warning fixes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362225600">- fix build with automake-1.13.1</changelog>
  <changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1393156800">- Xiph libvorbis 1.3.4
  * reduced static data size in libvorbisenc
  * associated minor changes required to libvorbis and libvorbisfile
  * minor build fixes and build system updates
  * no functional changes over the previous 1.3.3 release
- removed libvorbis-pkgconfig.patch, in upstream
- updated vorbis-fix-linking.patch for context changes</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Fix obsoletes and provides in baselibs.conf.</changelog>
  <changelog author="mpluskal@suse.com" date="1425643200">- Cleanup spec file with spec-cleaner
- Update to 1.3.5
  * Tolerate single-entry codebooks.
  * Fix decoder crash with invalid input.
  * Fix encoder crash with non-positive sample rates.
  * Fix issues in vorbisfile's seek bisection code.
  * Spec errata.
  * Reject multiple headers of the same type.
  * Various build fixes and code cleanup.</changelog>
  <changelog author="aloisio@gmx.com" date="1480420800">- Added 32bit libvorbis-devel in baselibs.conf</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: out-of-bounds array read vulnerability exists in
  function mapping0_forward() (CVE-2017-14633, bsc#1059811):
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
- Fix VUL-0: Remote Code Execution upon freeing uninitialized
  memory in function vorbis_analysis_headerout(CVE-2017-14632,
  bsc#1059809):
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201600">- Fix VUL-0: libvorbis: Out of bounds memory write while processing
  Vorbis audio data (CVE-2018-5146, bsc#1085687):
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201601">- Update to version 1.3.6:
  * Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
  * Fix CVE-2017-14632 - free() on unitialized data
  * Fix CVE-2017-14633 - out-of-bounds read
  * Fix bitrate metadata parsing.
  * Fix out-of-bounds read in codebook parsing.
  * Fix residue vector size in Vorbis I spec.
  * Appveyor support
  * Travis CI support
  * Add secondary CMake build system.
  * Build system fixes
- Build documents with doxygen, and many tex stuff;
  this requires to disable parallel builds partially
- Move COPYING to license directory
- Drop obsoleted patches:
  vorbis-fix-linking.patch
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521288000">- Split libvorbis-doc subpackage to a separate spec file for
  reducing the dependencies</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix out-of-bounds access inside bark_noise_hybridmp function
  (CVE-2017-14160, bsc#1059812):
  downstream fix: vorbis-CVE-2017-14160.patch
- Fix stack-basedbuffer over-read in bark_noise_hybridm
  (CVE-2018-10393, bsc#1091072):
  downstream fix: vorbis-CVE-2018-10393.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528200000">- Replace vorbis-CVE-2017-14160.patch with the upstream fix
  (commit 018ca26dece6), refresh vorbis-CVE-2018-10393.patch
- Fix the validation of channels in mapping0_forward()
  (CVE-2018-10392, bsc#1091070):
  vorbis-CVE-2018-10392.patch</changelog>
</package>
<package pkgid="df1638af578aaec3ac350ff05ac13787424a27010d121b09c93c355a673c7ff1" name="libvorbisenc2-32bit" arch="x86_64">
  <version epoch="0" ver="1.3.6" rel="lp150.3.3.1"/>
  <changelog author="davejplater@gmail.com" date="1291982400">- Split libvorbisenc2 and libvorbisfile3 from libvorbis0
- Removed services.</changelog>
  <changelog author="dmueller@suse.de" date="1304596800">- fix provides/obsoletes in baselibs</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- Fix build with no-add-needed</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322222400">- open files with O_CLOEXEC, in order to avoid fd leaks
  when calling applications fork() ..execve()...
  This patch does not cover the executable tools since
  it is not critical for them.</changelog>
  <changelog author="idonmez@suse.com" date="1324814400">- -O20 optimization level doesn't exist, use -O3</changelog>
  <changelog author="tiwai@suse.de" date="1329825600">- VUL-0: CVE-2012-0444: libvorbis: heap-based buffer overflow
  (bnc#747912)</changelog>
  <changelog author="ftake@geeko.jp" date="1340193600">- updated to 1.3.3
  * vorbis: additional proofing against invalid/malicious
  streams in decode (see SVN for details).
  * vorbis: fix a memory leak in vorbis_commentheader_out().
  * updates, corrections and clarifications in the Vorbis I
  specification document
  * build warning fixes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362225600">- fix build with automake-1.13.1</changelog>
  <changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1393156800">- Xiph libvorbis 1.3.4
  * reduced static data size in libvorbisenc
  * associated minor changes required to libvorbis and libvorbisfile
  * minor build fixes and build system updates
  * no functional changes over the previous 1.3.3 release
- removed libvorbis-pkgconfig.patch, in upstream
- updated vorbis-fix-linking.patch for context changes</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Fix obsoletes and provides in baselibs.conf.</changelog>
  <changelog author="mpluskal@suse.com" date="1425643200">- Cleanup spec file with spec-cleaner
- Update to 1.3.5
  * Tolerate single-entry codebooks.
  * Fix decoder crash with invalid input.
  * Fix encoder crash with non-positive sample rates.
  * Fix issues in vorbisfile's seek bisection code.
  * Spec errata.
  * Reject multiple headers of the same type.
  * Various build fixes and code cleanup.</changelog>
  <changelog author="aloisio@gmx.com" date="1480420800">- Added 32bit libvorbis-devel in baselibs.conf</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: out-of-bounds array read vulnerability exists in
  function mapping0_forward() (CVE-2017-14633, bsc#1059811):
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
- Fix VUL-0: Remote Code Execution upon freeing uninitialized
  memory in function vorbis_analysis_headerout(CVE-2017-14632,
  bsc#1059809):
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201600">- Fix VUL-0: libvorbis: Out of bounds memory write while processing
  Vorbis audio data (CVE-2018-5146, bsc#1085687):
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201601">- Update to version 1.3.6:
  * Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
  * Fix CVE-2017-14632 - free() on unitialized data
  * Fix CVE-2017-14633 - out-of-bounds read
  * Fix bitrate metadata parsing.
  * Fix out-of-bounds read in codebook parsing.
  * Fix residue vector size in Vorbis I spec.
  * Appveyor support
  * Travis CI support
  * Add secondary CMake build system.
  * Build system fixes
- Build documents with doxygen, and many tex stuff;
  this requires to disable parallel builds partially
- Move COPYING to license directory
- Drop obsoleted patches:
  vorbis-fix-linking.patch
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521288000">- Split libvorbis-doc subpackage to a separate spec file for
  reducing the dependencies</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix out-of-bounds access inside bark_noise_hybridmp function
  (CVE-2017-14160, bsc#1059812):
  downstream fix: vorbis-CVE-2017-14160.patch
- Fix stack-basedbuffer over-read in bark_noise_hybridm
  (CVE-2018-10393, bsc#1091072):
  downstream fix: vorbis-CVE-2018-10393.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528200000">- Replace vorbis-CVE-2017-14160.patch with the upstream fix
  (commit 018ca26dece6), refresh vorbis-CVE-2018-10393.patch
- Fix the validation of channels in mapping0_forward()
  (CVE-2018-10392, bsc#1091070):
  vorbis-CVE-2018-10392.patch</changelog>
</package>
<package pkgid="901cb466164915028d9cf842b5375ea89099452bcf627ac1d866bcaefe91b8a5" name="libvorbisfile3" arch="x86_64">
  <version epoch="0" ver="1.3.6" rel="lp150.3.3.1"/>
  <changelog author="davejplater@gmail.com" date="1291982400">- Split libvorbisenc2 and libvorbisfile3 from libvorbis0
- Removed services.</changelog>
  <changelog author="dmueller@suse.de" date="1304596800">- fix provides/obsoletes in baselibs</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- Fix build with no-add-needed</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322222400">- open files with O_CLOEXEC, in order to avoid fd leaks
  when calling applications fork() ..execve()...
  This patch does not cover the executable tools since
  it is not critical for them.</changelog>
  <changelog author="idonmez@suse.com" date="1324814400">- -O20 optimization level doesn't exist, use -O3</changelog>
  <changelog author="tiwai@suse.de" date="1329825600">- VUL-0: CVE-2012-0444: libvorbis: heap-based buffer overflow
  (bnc#747912)</changelog>
  <changelog author="ftake@geeko.jp" date="1340193600">- updated to 1.3.3
  * vorbis: additional proofing against invalid/malicious
  streams in decode (see SVN for details).
  * vorbis: fix a memory leak in vorbis_commentheader_out().
  * updates, corrections and clarifications in the Vorbis I
  specification document
  * build warning fixes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362225600">- fix build with automake-1.13.1</changelog>
  <changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1393156800">- Xiph libvorbis 1.3.4
  * reduced static data size in libvorbisenc
  * associated minor changes required to libvorbis and libvorbisfile
  * minor build fixes and build system updates
  * no functional changes over the previous 1.3.3 release
- removed libvorbis-pkgconfig.patch, in upstream
- updated vorbis-fix-linking.patch for context changes</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Fix obsoletes and provides in baselibs.conf.</changelog>
  <changelog author="mpluskal@suse.com" date="1425643200">- Cleanup spec file with spec-cleaner
- Update to 1.3.5
  * Tolerate single-entry codebooks.
  * Fix decoder crash with invalid input.
  * Fix encoder crash with non-positive sample rates.
  * Fix issues in vorbisfile's seek bisection code.
  * Spec errata.
  * Reject multiple headers of the same type.
  * Various build fixes and code cleanup.</changelog>
  <changelog author="aloisio@gmx.com" date="1480420800">- Added 32bit libvorbis-devel in baselibs.conf</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: out-of-bounds array read vulnerability exists in
  function mapping0_forward() (CVE-2017-14633, bsc#1059811):
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
- Fix VUL-0: Remote Code Execution upon freeing uninitialized
  memory in function vorbis_analysis_headerout(CVE-2017-14632,
  bsc#1059809):
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201600">- Fix VUL-0: libvorbis: Out of bounds memory write while processing
  Vorbis audio data (CVE-2018-5146, bsc#1085687):
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201601">- Update to version 1.3.6:
  * Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
  * Fix CVE-2017-14632 - free() on unitialized data
  * Fix CVE-2017-14633 - out-of-bounds read
  * Fix bitrate metadata parsing.
  * Fix out-of-bounds read in codebook parsing.
  * Fix residue vector size in Vorbis I spec.
  * Appveyor support
  * Travis CI support
  * Add secondary CMake build system.
  * Build system fixes
- Build documents with doxygen, and many tex stuff;
  this requires to disable parallel builds partially
- Move COPYING to license directory
- Drop obsoleted patches:
  vorbis-fix-linking.patch
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521288000">- Split libvorbis-doc subpackage to a separate spec file for
  reducing the dependencies</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix out-of-bounds access inside bark_noise_hybridmp function
  (CVE-2017-14160, bsc#1059812):
  downstream fix: vorbis-CVE-2017-14160.patch
- Fix stack-basedbuffer over-read in bark_noise_hybridm
  (CVE-2018-10393, bsc#1091072):
  downstream fix: vorbis-CVE-2018-10393.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528200000">- Replace vorbis-CVE-2017-14160.patch with the upstream fix
  (commit 018ca26dece6), refresh vorbis-CVE-2018-10393.patch
- Fix the validation of channels in mapping0_forward()
  (CVE-2018-10392, bsc#1091070):
  vorbis-CVE-2018-10392.patch</changelog>
</package>
<package pkgid="331d79544f41fba8746e4ffba94bfab7cdfd89ff17a84691812dec5153041bb7" name="libvorbisfile3-32bit" arch="x86_64">
  <version epoch="0" ver="1.3.6" rel="lp150.3.3.1"/>
  <changelog author="davejplater@gmail.com" date="1291982400">- Split libvorbisenc2 and libvorbisfile3 from libvorbis0
- Removed services.</changelog>
  <changelog author="dmueller@suse.de" date="1304596800">- fix provides/obsoletes in baselibs</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- Fix build with no-add-needed</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322222400">- open files with O_CLOEXEC, in order to avoid fd leaks
  when calling applications fork() ..execve()...
  This patch does not cover the executable tools since
  it is not critical for them.</changelog>
  <changelog author="idonmez@suse.com" date="1324814400">- -O20 optimization level doesn't exist, use -O3</changelog>
  <changelog author="tiwai@suse.de" date="1329825600">- VUL-0: CVE-2012-0444: libvorbis: heap-based buffer overflow
  (bnc#747912)</changelog>
  <changelog author="ftake@geeko.jp" date="1340193600">- updated to 1.3.3
  * vorbis: additional proofing against invalid/malicious
  streams in decode (see SVN for details).
  * vorbis: fix a memory leak in vorbis_commentheader_out().
  * updates, corrections and clarifications in the Vorbis I
  specification document
  * build warning fixes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362225600">- fix build with automake-1.13.1</changelog>
  <changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1393156800">- Xiph libvorbis 1.3.4
  * reduced static data size in libvorbisenc
  * associated minor changes required to libvorbis and libvorbisfile
  * minor build fixes and build system updates
  * no functional changes over the previous 1.3.3 release
- removed libvorbis-pkgconfig.patch, in upstream
- updated vorbis-fix-linking.patch for context changes</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Fix obsoletes and provides in baselibs.conf.</changelog>
  <changelog author="mpluskal@suse.com" date="1425643200">- Cleanup spec file with spec-cleaner
- Update to 1.3.5
  * Tolerate single-entry codebooks.
  * Fix decoder crash with invalid input.
  * Fix encoder crash with non-positive sample rates.
  * Fix issues in vorbisfile's seek bisection code.
  * Spec errata.
  * Reject multiple headers of the same type.
  * Various build fixes and code cleanup.</changelog>
  <changelog author="aloisio@gmx.com" date="1480420800">- Added 32bit libvorbis-devel in baselibs.conf</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: out-of-bounds array read vulnerability exists in
  function mapping0_forward() (CVE-2017-14633, bsc#1059811):
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
- Fix VUL-0: Remote Code Execution upon freeing uninitialized
  memory in function vorbis_analysis_headerout(CVE-2017-14632,
  bsc#1059809):
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201600">- Fix VUL-0: libvorbis: Out of bounds memory write while processing
  Vorbis audio data (CVE-2018-5146, bsc#1085687):
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201601">- Update to version 1.3.6:
  * Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
  * Fix CVE-2017-14632 - free() on unitialized data
  * Fix CVE-2017-14633 - out-of-bounds read
  * Fix bitrate metadata parsing.
  * Fix out-of-bounds read in codebook parsing.
  * Fix residue vector size in Vorbis I spec.
  * Appveyor support
  * Travis CI support
  * Add secondary CMake build system.
  * Build system fixes
- Build documents with doxygen, and many tex stuff;
  this requires to disable parallel builds partially
- Move COPYING to license directory
- Drop obsoleted patches:
  vorbis-fix-linking.patch
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521288000">- Split libvorbis-doc subpackage to a separate spec file for
  reducing the dependencies</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix out-of-bounds access inside bark_noise_hybridmp function
  (CVE-2017-14160, bsc#1059812):
  downstream fix: vorbis-CVE-2017-14160.patch
- Fix stack-basedbuffer over-read in bark_noise_hybridm
  (CVE-2018-10393, bsc#1091072):
  downstream fix: vorbis-CVE-2018-10393.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528200000">- Replace vorbis-CVE-2017-14160.patch with the upstream fix
  (commit 018ca26dece6), refresh vorbis-CVE-2018-10393.patch
- Fix the validation of channels in mapping0_forward()
  (CVE-2018-10392, bsc#1091070):
  vorbis-CVE-2018-10392.patch</changelog>
</package>
<package pkgid="80da77bc241ca2622549b08f1b2c519268df53b4dc523a48b6cb61a188151fba" name="libvpp0" arch="x86_64">
  <version epoch="0" ver="18.01" rel="lp150.4.3.1"/>
  <changelog author="marco.varlese@suse.com" date="1496836800">- Added 0003-startup-conf.patch to fix the default configuration</changelog>
  <changelog author="marco.varlese@suse.com" date="1496923200">- Updated to latest upstream containing the patches for gcc-7</changelog>
  <changelog author="marco.varlese@suse.com" date="1497873600">- Updated to latest master vpp-17.07-rc0~396-g7f4d577d
- Fixed provides/conflicts/requires</changelog>
  <changelog author="marco.varlese@suse.com" date="1500897600">- Upgraded to latest stable release 17.07</changelog>
  <changelog author="marco.varlese@suse.com" date="1503489600">- Split binaries and libs into sub-packages
- Fixed packages dependencies</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled DPDK 17.08 integration
- Removed patch to exclude AESNI since managed upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1506340800">- Updated VPP version
- Removed aarch64 patch since merged upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1506686400">- Removed 0002-aarch64.patch since change incorporated upstream
- Updated tarball to vpp-17.10-rc0~374-gba3c4e88.tar.xz</changelog>
  <changelog author="marco.varlese@suse.com" date="1507550400">- Updated tarball to 17.10-RC1 (vpp-17.10-rc1.tar.xz)</changelog>
  <changelog author="marco.varlese@suse.com" date="1509019200">- Updated to 17.10-release tarball
- Infrastructure
  * DPDK 17.08
  * IP reassembly
  * Bounded-index extensible hash bucket-level LRU cache
  * Templated timer wheel improvements
- API
  * C/C++ language binding
  * API stats
- Host stack
  * VPP TCP stack scale/congestion improvements
  * VPP Comms Library (VCL)
  * Overall performance, scale and hardening
- Network features
  * IPSec rework - utilize new FIB
  * VPLS and VPWS implementation
  - NAT
  * Renamed SNAT to NAT
  * Performance / Scale
  * Destination NAT44 with load-balancing
  * In2out translation as an output feature on the outside interface
  * Fullback to 3-tuple key for non TCP/UDP/ICMP sessions
  - Security Groups/ACLs
  * "Replace" semantics for adding a new MacIP acl
  * Test suite tests for MacIP ACLs
  - ONE-LISP
  * Map-server fallback support
  * Preemptive re-fetch of active mappings that are about to expire
  * ND termination
  - PPPoE
  * PPPoE Control Plane packet dispatch
  * PPPoE decapsulation
  * PPPoE encapsulation</changelog>
  <changelog author="fstrba@suse.com" date="1509364800">- Added patch:
  * vpp-17.10-java9.patch
  - Specify java source and target level 8 in order to make the
    java code buildable with jdk9
- Don't require java-1_8_0-openjdk-devel, but java-devel &gt;= 1.8</changelog>
  <changelog author="marco.varlese@suse.de" date="1512475200">- Updated to vpp-18.01-rc0~365-g8b9a5d19
  * Support for OpenSSL1.1.0
  * GENEVE tunnel
  * Various bug-fixes</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Replace boost-devel BuildRequires with libboost_headers-devel and libboost_thread-devel ([boo#1062583](https://bugzilla.opensuse.org/show_bug.cgi?id=1062583))</changelog>
  <changelog author="fstrba@suse.com" date="1515412800">- Added patch:
  * vpp-18.01-nojavah.patch
  - Replace javah invocation with javac's -h option
  - Fixes build with jdk10</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Updated to -RC1 release (v18.01-rc1); some of the fixes include:
  * NAT64: free port when dynamic BIB deleted (VPP-1107)
  * VOM: NAT updates
  * tcp: add builtin server/client transfer test
  * fib: make deag entries urpf extempt
  * VPP-1109 Fix loop for some CLI (code review)
  * L2 Emulation
  * Translate matching packets using NAT (VPP-1069)
  * Fix MPLS local-label CLI help string
  * VPP-1083 "ip punt redirect add" crashed if not mentioned any other parameter
  * FIB memory leak during recursive loop detection
  * Fix passing bad context for callback function
  * NAT: Twice NAT44 (VPP-969)
  * NAT: Add performance testing TRex scripts and config (VPP-832)
  * Provide useful output when installed vpp-dpdk version is incorrect
  * Support kube-proxy data plane
  * SR-MPLS: binary API and automated steering
  * GRE tunnel key includes the FIB table
  * Use crc32 wrapper (VPP-1086)
  * dpdk: unset ETH_TXQ_FLAGS_NOXSUMS only for selected PMDs
  * apps: refactor uri and update build infra
  * Fix icmp/udp/tcp punt/drop paths
  * implement clib_smp_pause() for arm and aarch64 platform
  * fib: fix show fib path-list and path
  * pci: auto-detect right vfio/uio driver
  * vom: acl: Extend constructor for l3 rule
  * vom: acl-list: Add comparison operator - for UT
  * vppinfra: add AVX512 variant of clib_memcpy
  * tap_v2: include host-side parameters in the dump binary API
  * Enable AWS ENA PMD
  * session: fix proxy removal
  * session: generalize handling of network transports</changelog>
  <changelog author="marco.varlese@suse.de" date="1516622400">- Latest update to DPDK 17.11 required rdma-core-devel to enable Mellanox NIC. Being VPP dependant on DPDK, it required the same build-dependency to be added.</changelog>
  <changelog author="marco.varlese@suse.de" date="1516795200">- Update to the stable version of 18.01 release. More than 560 commits since the 17.10 release:
  * Features
  - Infrastructure
  * DPDK 17.11
  * TCP Checksum Offload
  * Arm64/Arm-v8 support
  * SUSE packaging
  * bihash_vec8_8 variant
  * PCI rework to support VFIO
  * chi-squared test calculator
  - SNAT / NAT
  * One armed NAT
  * Twice NAT44
  * NAT hairpinning rework
  * NAT64 multi-thread
  * NAT64 IPFix
  * NAT64 Fragmentation
  * NAT: DS-Lite
  * Remove old SNAT API
  * ACL-based NAT
  - VNET
  * DNS name resolver
  * BIER
  * GENEVE Tunnel
  * IPSec Openssl 1.1.0 api support
  * FIB improvements
  * tap v2
  - API
  * VPP stats (Broadcast &amp; Multicast support)
  * SR MPLS
  * VPP Object Model (VOM)
  - Host Stack
  * VPP TCP Stack scale / congestion improvements
  * Refactor UDP
  * Namespace support
  * VPP Comms Library (VCL) improvements
  - ACL
  * ACL stats
  - Plugins
  * Kube-proxy
  * L2 Emulation
  * Memif
  * Known issues
  - For the full list of issues please refer to fd.io [JIRA](https://jira.fd.io).
  * Issues fixed
  - For the full list of fixed issues please refer to: fd.io [JIRA](https://jira.fd.io)</changelog>
  <changelog author="marco.varlese@suse.de" date="1520251200">- Added memfd-create.patch to fix the memfd_create issue caused by the upgrade to glibc 2.27</changelog>
  <changelog author="marco.varlese@suse.com" date="1521633600">- Added runtime dependency on -devel package since all -api packages
  require header/json files at runtime</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1540209600">- Do not install 80-vpp.conf; it modifies system-wide settings and
  it is not needed since VPP 17.08 (boo#1112540)</changelog>
</package>
<package pkgid="4c0954f0c93f286733271a6cd0df3d85f25a2db49b777dc08793b8734d2a4193" name="libvulkan_intel" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="ade3a09eaf804bb9d00a4e54b831d66a2f9068d144af18c1716fd43418d57c77" name="libvulkan_intel-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="027bbccfb71fda12f7c1fe7c2717738b0e20031e85313561da9dfdcee2d021b4" name="libvulkan_radeon" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="8c7948907e74d48953346cae4400146b56c38288d43ec24ccdd65cd5f5a3a451" name="libvulkan_radeon-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="a99cab1295f00891bd629cd08dd68661a4d029eabb3965688c0f62ce1c96b569" name="libwayland-egl-devel" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="ee0c656aa7d0df7ff32e252cefe9d7cb1b13f8aa987116f40b222a05a79d8a21" name="libwayland-egl-devel-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="ae62ea13027f66df82ccac6e70cee0a9e693d046fc537366a895d57710e77c6a" name="libwayland-egl1" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="f266111a9cb05215ae4a660c1e0a7a262b54282a226991e46cf8c04d11b09412" name="libwayland-egl1-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="30cdc52f57fcf66f0b4ddf227b7651441831669d3f1ecce465b111a563c403c0" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="36b08959c5d1abc40cc7439a07e0a275b83d5a93ee98afcb2f2c8656d3d6350f" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="735728d6e97a27828a9eeb848e999e8bc4c70e5c497093e1a5406cca6bf7325e" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="2d881390efe618dba296acc563e845362dea9fbe6d805a240c6088f79595680b" name="libwbclient0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="c2cb0a68a322008c695419d9db16a72dddd9777a63b0544dbad1351e659cd409" name="libwbclient0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="784a7c106cf791b3b39016060298b699ac7c452ddeaafa1c9a4965b05b42f7cc" name="libwbclient0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="723291b96c232e3443952a2829eb847eefb592d1a77661567025a235f7d39eaa" name="libwbclient0" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="021fc2c3e53012b5f9aecc10fd3299b93997f6a9256d37857587bf4b7d8bfa88" name="libwbclient0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="60baba21c7383c6558638fb5a35c673f7a0da50e21e51ee12999ecd5d0edddc6" name="libwbclient0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="00bdcc6bd00f3db0edf11a22ed2b12b882872dabe58589dfcfa9a8729cd16417" name="libwebkit2gtk-4_0-37" arch="x86_64">
  <version epoch="0" ver="2.20.3" rel="lp150.2.3.1"/>
  <changelog author="ro@suse.de" date="1517313600">- even on recent codestreams there is no binutils gold on s390
  only on s390x.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519905600">- Add missing dependencies from the -devel package to the build
  typelib-1_0-*: just like libraries, a consumer of the devel
  package can assume the typelibs to be present:
  + typelib-1_0-WebKit2-%{_sonameverpkg}.
  + typelib-1_0-WebKit2WebExtension-%{_sonameverpkg}.</changelog>
  <changelog author="fcrozat@suse.com" date="1519992000">- Add webkit2gtk3-fix-wayland-crash.patch: fix crash when using
  Wayland with QXL/virtio (bsc#1079512, webkit#182490).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
</package>
<package pkgid="f745b0b72834a44867353440f6bbccad38e996470f49af4337af5bf9012ff5a6" name="libwebkit2gtk-4_0-37" arch="x86_64">
  <version epoch="0" ver="2.20.5" rel="lp150.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
  <changelog author="mgorse@suse.com" date="1532088000">- Add webkit2gtk3-boo1101999-off-by-one.patch: fix off-by-one in
  xdg_mime_get_simple_globs (boo#1101999 CVE-2018-12911).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Update to version 2.20.4 (boo#1104169):
  + Fix a crash when leaving accelerated compositing mode.
  + Fix non-deterministic build failure due to missing
    JavaScriptCore/JSContextRef.h.
  + Security fixes: CVE-2018-4261, CVE-2018-4262, CVE-2018-4263,
    CVE-2018-4264, CVE-2018-4265, CVE-2018-4266, CVE-2018-4267,
    CVE-2018-4270, CVE-2018-4272, CVE-2018-4273, CVE-2018-4278,
    CVE-2018-4284.
- Drop webkit2gtk3-boo1101999-off-by-one.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 2.20.5:
  + Fix rendering artifacts in some web sites due to a bug
    introduced in 2.20.4.</changelog>
</package>
<package pkgid="9218e3d030ea2e577ae599d088273d3526209f00a7a2823d414554290100eb66" name="libwebkit2gtk-4_0-37-32bit" arch="x86_64">
  <version epoch="0" ver="2.20.3" rel="lp150.2.3.1"/>
  <changelog author="ro@suse.de" date="1517313600">- even on recent codestreams there is no binutils gold on s390
  only on s390x.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519905600">- Add missing dependencies from the -devel package to the build
  typelib-1_0-*: just like libraries, a consumer of the devel
  package can assume the typelibs to be present:
  + typelib-1_0-WebKit2-%{_sonameverpkg}.
  + typelib-1_0-WebKit2WebExtension-%{_sonameverpkg}.</changelog>
  <changelog author="fcrozat@suse.com" date="1519992000">- Add webkit2gtk3-fix-wayland-crash.patch: fix crash when using
  Wayland with QXL/virtio (bsc#1079512, webkit#182490).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
</package>
<package pkgid="90f0ce37b1fa44b96dc1b227ac08554422bec5eb9e034c6b24a83181959cd916" name="libwebkit2gtk-4_0-37-32bit" arch="x86_64">
  <version epoch="0" ver="2.20.5" rel="lp150.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
  <changelog author="mgorse@suse.com" date="1532088000">- Add webkit2gtk3-boo1101999-off-by-one.patch: fix off-by-one in
  xdg_mime_get_simple_globs (boo#1101999 CVE-2018-12911).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Update to version 2.20.4 (boo#1104169):
  + Fix a crash when leaving accelerated compositing mode.
  + Fix non-deterministic build failure due to missing
    JavaScriptCore/JSContextRef.h.
  + Security fixes: CVE-2018-4261, CVE-2018-4262, CVE-2018-4263,
    CVE-2018-4264, CVE-2018-4265, CVE-2018-4266, CVE-2018-4267,
    CVE-2018-4270, CVE-2018-4272, CVE-2018-4273, CVE-2018-4278,
    CVE-2018-4284.
- Drop webkit2gtk3-boo1101999-off-by-one.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 2.20.5:
  + Fix rendering artifacts in some web sites due to a bug
    introduced in 2.20.4.</changelog>
</package>
<package pkgid="6d40b832a981246471f725729b06ec956aba1d0ba429c7dc146d5e8a0c3a9d9d" name="libwebkit2gtk3-lang" arch="noarch">
  <version epoch="0" ver="2.20.3" rel="lp150.2.3.1"/>
  <changelog author="ro@suse.de" date="1517313600">- even on recent codestreams there is no binutils gold on s390
  only on s390x.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519905600">- Add missing dependencies from the -devel package to the build
  typelib-1_0-*: just like libraries, a consumer of the devel
  package can assume the typelibs to be present:
  + typelib-1_0-WebKit2-%{_sonameverpkg}.
  + typelib-1_0-WebKit2WebExtension-%{_sonameverpkg}.</changelog>
  <changelog author="fcrozat@suse.com" date="1519992000">- Add webkit2gtk3-fix-wayland-crash.patch: fix crash when using
  Wayland with QXL/virtio (bsc#1079512, webkit#182490).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
</package>
<package pkgid="bed5c2391dcb2f09d7dabf0bb55dc69cacf91f36c60c4a030c52aa7b918a7474" name="libwebkit2gtk3-lang" arch="noarch">
  <version epoch="0" ver="2.20.5" rel="lp150.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
  <changelog author="mgorse@suse.com" date="1532088000">- Add webkit2gtk3-boo1101999-off-by-one.patch: fix off-by-one in
  xdg_mime_get_simple_globs (boo#1101999 CVE-2018-12911).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Update to version 2.20.4 (boo#1104169):
  + Fix a crash when leaving accelerated compositing mode.
  + Fix non-deterministic build failure due to missing
    JavaScriptCore/JSContextRef.h.
  + Security fixes: CVE-2018-4261, CVE-2018-4262, CVE-2018-4263,
    CVE-2018-4264, CVE-2018-4265, CVE-2018-4266, CVE-2018-4267,
    CVE-2018-4270, CVE-2018-4272, CVE-2018-4273, CVE-2018-4278,
    CVE-2018-4284.
- Drop webkit2gtk3-boo1101999-off-by-one.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 2.20.5:
  + Fix rendering artifacts in some web sites due to a bug
    introduced in 2.20.4.</changelog>
</package>
<package pkgid="32aa29c853a200aeb1893cc27a7f789744fcc6aca4154c281d0a736ec8cf217f" name="libwireshark9" arch="x86_64">
  <version epoch="0" ver="2.4.10" rel="lp150.2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
  <changelog author="astieger@suse.com" date="1535544000">- Update to 2.4.9 (bsc#1106514):
  * CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
  * CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
  * CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
- packaging change: temporarily disable upstream tarball signature
  verification, use hashes from signed release announcement e-mail</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- Wireshark 2.4.10 (bsc#1111647):
  * CVE-2018-18227: MS-WSP dissector crash (wnpa-sec-2018-47)
  * CVE-2018-12086: OpcUA dissector crash (wnpa-sec-2018-50)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.10.html</changelog>
</package>
<package pkgid="45c45aa2bb58bb0fed898e2b763c837dc645f50390ddefd60a4d9c95097e2e55" name="libwireshark9" arch="x86_64">
  <version epoch="0" ver="2.4.7" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1482840000">- Cleanup a bit with spec-cleaner
- Properly set ethereal symlink based on UI and set it to proper subpkg
- Update conditionals on wireshark to only build Qt or GTK depending
  on the interface, because upstream now only supports Qt5
- Update the caps code in spec but keep it disabled
- Enable geoip only on platforms that support it
- Enable libnl only on newer releases
- Update desktop file and icon caches
- Drop not really needed patch wireshark-1.10.0-authors-pod2man.patch
- Use full commands for icon/desktop cache for gtk mode as on sle11 it
  was not present yet as a macro
- Split shared libraries properly to subpackages</changelog>
  <changelog author="tchvatal@suse.com" date="1483531200">- Obsolete the ui-gtk in the ui-qt to ensure clean non-conflicted install</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
</package>
<package pkgid="afc8f7c2df8fed3a36511e6a50ee3e1a6bc32f043b8006906c3f5c5368922cf6" name="libwireshark9" arch="x86_64">
  <version epoch="0" ver="2.4.8" rel="lp150.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1483531200">- Obsolete the ui-gtk in the ui-qt to ensure clean non-conflicted install</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
</package>
<package pkgid="9c8ec80fc3abcf8abdd77834251666486bc76361c68e645a7d1d359043def080" name="libwireshark9" arch="x86_64">
  <version epoch="0" ver="2.4.9" rel="lp150.2.10.1"/>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
  <changelog author="astieger@suse.com" date="1535544000">- Update to 2.4.9 (bsc#1106514):
  * CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
  * CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
  * CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
- packaging change: temporarily disable upstream tarball signature
  verification, use hashes from signed release announcement e-mail</changelog>
</package>
<package pkgid="0d1e87474f3f81377275badaa0fcfee66a52d6b8a491fbd07ff7d0912365faf6" name="libwiretap7" arch="x86_64">
  <version epoch="0" ver="2.4.10" rel="lp150.2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
  <changelog author="astieger@suse.com" date="1535544000">- Update to 2.4.9 (bsc#1106514):
  * CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
  * CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
  * CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
- packaging change: temporarily disable upstream tarball signature
  verification, use hashes from signed release announcement e-mail</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- Wireshark 2.4.10 (bsc#1111647):
  * CVE-2018-18227: MS-WSP dissector crash (wnpa-sec-2018-47)
  * CVE-2018-12086: OpcUA dissector crash (wnpa-sec-2018-50)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.10.html</changelog>
</package>
<package pkgid="fe638b3b2d9758994578f747d61951c0db9c13a6de4d1367689c34d19cd3ed17" name="libwiretap7" arch="x86_64">
  <version epoch="0" ver="2.4.7" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1482840000">- Cleanup a bit with spec-cleaner
- Properly set ethereal symlink based on UI and set it to proper subpkg
- Update conditionals on wireshark to only build Qt or GTK depending
  on the interface, because upstream now only supports Qt5
- Update the caps code in spec but keep it disabled
- Enable geoip only on platforms that support it
- Enable libnl only on newer releases
- Update desktop file and icon caches
- Drop not really needed patch wireshark-1.10.0-authors-pod2man.patch
- Use full commands for icon/desktop cache for gtk mode as on sle11 it
  was not present yet as a macro
- Split shared libraries properly to subpackages</changelog>
  <changelog author="tchvatal@suse.com" date="1483531200">- Obsolete the ui-gtk in the ui-qt to ensure clean non-conflicted install</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
</package>
<package pkgid="2128715a48edc747c717f230ae14567dcf7bb2ab70ac553a5a490e282fc553e8" name="libwiretap7" arch="x86_64">
  <version epoch="0" ver="2.4.8" rel="lp150.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1483531200">- Obsolete the ui-gtk in the ui-qt to ensure clean non-conflicted install</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
</package>
<package pkgid="6cf1aee7661ceda3eeecf7b85fa57a60001c8eabbe9d48e4798214093c257f91" name="libwiretap7" arch="x86_64">
  <version epoch="0" ver="2.4.9" rel="lp150.2.10.1"/>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
  <changelog author="astieger@suse.com" date="1535544000">- Update to 2.4.9 (bsc#1106514):
  * CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
  * CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
  * CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
- packaging change: temporarily disable upstream tarball signature
  verification, use hashes from signed release announcement e-mail</changelog>
</package>
<package pkgid="d7d5260a4538816954f23175bc27cfa95bd5b00cdec6dec4723ebe16fee06c4d" name="libwpd" arch="src">
  <version epoch="0" ver="0.10.2" rel="lp150.2.3.1"/>
  <changelog author="fstrba@novell.com" date="1291723200">- upgrade to version 0.9.0:
  - Conversion of page-numbering (William)
  - Conversion of embedded images and text boxes in WP1, WP3, WP5 and WP6
    documents (Fridrich)
  - Conversion of password protected WP1, WP3, WP42 and WP5 documents
    (Fridrich)
  - Conversion of annotations/comments in WP6 parser (Fridrich)
  - Fix some Greek characters so that Text written in WP5.1 with Printer
    Polyglott convert correct.
  - Fix Unicode mappings of some older Symbol and Dingbats fonts (Fridrich)
  - Drop the libgsf dependency in favour of pure C++ implementation of the
    WPXInputStream interface (Fridrich, Ariya)
  - Fix the footnote/endnote/comment/annotation/textbox writing in wpd2html
    converter
  - Improve metadata parsing (David Hislop)</changelog>
  <changelog author="ismail@namtrac.org" date="1300276800">- Add missing includes to fix compilation with gcc 4.6</changelog>
  <changelog author="fstrba@novell.com" date="1304510400">- upgrade to version 0.9.2:
  - Fix build with gcc 4.6.x (Caolan McNamara)
  - Handle graciously corrupted WP6 prefix data (Fridrich)
  - Initial conversion of Mac double byte script characters (Fridrich)
  - Internally use UCS4 instead of UCS2 (Fridrich)
  - Add Arabic character conversion for WP5 parser (Fridrich)
  - Allow conversion of one WP character to a sequence of unicode
    characters (Fridrich)
  - Miscellaneous conversion fixes (Edward Mendelson, Fridrich)
  - Parse correctly WP 2 for Mac documents without resource fork (Fridrich)
  - Improvements in parsing of pictures in WP1 parser (Fridrich)
  - Fix wrong sizes of some functions in WP1 and WP42 parsers (Fridrich)
  - Fix handling of character attributes (Fridrich)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1306152000">- Do not include build dates in docs, messes up build-compare</changelog>
  <changelog author="fridrich.strba@suse.com" date="1314878400">- upgrade to version 0.9.3:
- Improvement of arabic charset mapping (Smokey Ardisson)
- Build system rewrite and improvement (Tomas Chvatal)
- Cleanup of return values (Thomas Klausner)
- Fix crashes with WP 2.1 for Mac documents (Fridrich)
- Fix bug in WPXPropertyList::operator= (Fridrich)
- Fix memory issues in some WPXProperty's derived classes (Fridrich)
- Conversion of extended characters in WP 42 parser (Fridrich)
- Various fixes for building inside LibreOffice (Tor Lillqvist, Jan Holesovky)</changelog>
  <changelog author="fridrich.strba@suse.com" date="1322568000">- upgrade to version 0.9.4:
  - Remove autopackage packaging that nobody uses (Fridrich)
  - Don't output points as integer. This solves some rounding
    issues along with the possibility of writing 10.5 point
    font size (Fridrich)
  - General improvement of code quality by buiding
    with -Weffc++ option (Fridrich)
  - Improvement of textbox code (Laurent Alonso)
  - Fixes of autotools Windows build (Fridrich)
- remove obsolete unnecessary patch</changelog>
  <changelog author="jengelh@medozas.de" date="1322568001">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building
- Set proper group on subpackages</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1327320000">- Build with fvisibility-inlines-hidden, saves around
  600 entries in the exported symbol table.</changelog>
  <changelog author="jengelh@medozas.de" date="1327406400">- Use SPDX-style license field</changelog>
  <changelog author="fridrich.strba@suse.com" date="1348747200">- upgrade to version 0.9.6:
  - Experimental support of Zip storage along with Ole.
  - Add WPX_SEEK_END enum member in order to speed up the Zip
    operations.
  - Numerous fixes of coverity and cppcheck warnings and errors.
- upstream patch to really enable Zip stream.
- package build depends on zlib-devel.</changelog>
  <changelog author="fridrich.strba@suse.com" date="1366372800">- upgrade to version 0.9.7:
  - Added MPL 2.0+ as license
  - Improvement of OLE stream classes
- remove integrated patch</changelog>
  <changelog author="tchvatal@suse.com" date="1366459200">- Add URL download path.</changelog>
  <changelog author="fridrich.strba@suse.com" date="1368619200">- upgrade to version 0.9.8
  - Fix buffer allocation in WPXString::sprintf that can lead
    to crash
  - Fix crash reading invalid OLE stream
  - Change source code layout so that public headers be in inc/
    and its subdirectories
  - libwpd.h and libwpd-stream.h are not generated headers anymore
  - Change the way we get version from libwpd build
- Fix some rpmlint warnings</changelog>
  <changelog author="fstrba@suse.com" date="1376913600">- upgrade to version 0.9.8
  - implement WPX_SEEK_END for WPXMemoryStream: fixes an infinite
    loop in libmwaw when using WPXBinaryData over its stream
    interface.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651200">- Cleanup with spec-cleaner and noarch the documentation.</changelog>
  <changelog author="fstrba@suse.com" date="1401105600">- Upgrade to version 0.10.0
  * ABI change
  * Depend on librevenge-devel</changelog>
  <changelog author="fstrba@suse.com" date="1451476800">- Upgrade to version 0.10.1
  * Fix crash when NULL is passed as input stream.
  * Use symbol visibility on Linux. The library only exports public
    functions now.
  * Avoid infinite loop. (libwpd#3)
  * Remove bashism. (libwpd#5)
  * Fix various crashes and hangs when reading broken files found
    with the help of american-fuzzy-lop.
  * Make --help output of all command line tools more
    help2man-friendly.
  * Miscellaneous fixes and cleanups.
- Generate manpages for the libwpd-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1455192000">- Disable silent rules</changelog>
  <changelog author="tchvatal@suse.com" date="1505304000">- Upgrade to 0.10.2 bsc#1058025 CVE-2017-14226:
  * Require C++11 for build.
  * Fix various crashes, leaks and hangs when reading damaged files found
    by oss-fuzz.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542110400">- Add patch to fix rh#1643752 bsc#1115713 CVE-2018-19208:
  * 0001-Resolves-rhbz-1643752-bounds-check-m_currentTable-ac.patch</changelog>
</package>
<package pkgid="ab30cdbc0605db75b14cd373dfb3c62e70170d22abb2d5b7a56fe448586a7ab3" name="libwpd-0_10-10" arch="x86_64">
  <version epoch="0" ver="0.10.2" rel="lp150.2.3.1"/>
  <changelog author="fstrba@novell.com" date="1291723200">- upgrade to version 0.9.0:
  - Conversion of page-numbering (William)
  - Conversion of embedded images and text boxes in WP1, WP3, WP5 and WP6
    documents (Fridrich)
  - Conversion of password protected WP1, WP3, WP42 and WP5 documents
    (Fridrich)
  - Conversion of annotations/comments in WP6 parser (Fridrich)
  - Fix some Greek characters so that Text written in WP5.1 with Printer
    Polyglott convert correct.
  - Fix Unicode mappings of some older Symbol and Dingbats fonts (Fridrich)
  - Drop the libgsf dependency in favour of pure C++ implementation of the
    WPXInputStream interface (Fridrich, Ariya)
  - Fix the footnote/endnote/comment/annotation/textbox writing in wpd2html
    converter
  - Improve metadata parsing (David Hislop)</changelog>
  <changelog author="ismail@namtrac.org" date="1300276800">- Add missing includes to fix compilation with gcc 4.6</changelog>
  <changelog author="fstrba@novell.com" date="1304510400">- upgrade to version 0.9.2:
  - Fix build with gcc 4.6.x (Caolan McNamara)
  - Handle graciously corrupted WP6 prefix data (Fridrich)
  - Initial conversion of Mac double byte script characters (Fridrich)
  - Internally use UCS4 instead of UCS2 (Fridrich)
  - Add Arabic character conversion for WP5 parser (Fridrich)
  - Allow conversion of one WP character to a sequence of unicode
    characters (Fridrich)
  - Miscellaneous conversion fixes (Edward Mendelson, Fridrich)
  - Parse correctly WP 2 for Mac documents without resource fork (Fridrich)
  - Improvements in parsing of pictures in WP1 parser (Fridrich)
  - Fix wrong sizes of some functions in WP1 and WP42 parsers (Fridrich)
  - Fix handling of character attributes (Fridrich)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1306152000">- Do not include build dates in docs, messes up build-compare</changelog>
  <changelog author="fridrich.strba@suse.com" date="1314878400">- upgrade to version 0.9.3:
- Improvement of arabic charset mapping (Smokey Ardisson)
- Build system rewrite and improvement (Tomas Chvatal)
- Cleanup of return values (Thomas Klausner)
- Fix crashes with WP 2.1 for Mac documents (Fridrich)
- Fix bug in WPXPropertyList::operator= (Fridrich)
- Fix memory issues in some WPXProperty's derived classes (Fridrich)
- Conversion of extended characters in WP 42 parser (Fridrich)
- Various fixes for building inside LibreOffice (Tor Lillqvist, Jan Holesovky)</changelog>
  <changelog author="fridrich.strba@suse.com" date="1322568000">- upgrade to version 0.9.4:
  - Remove autopackage packaging that nobody uses (Fridrich)
  - Don't output points as integer. This solves some rounding
    issues along with the possibility of writing 10.5 point
    font size (Fridrich)
  - General improvement of code quality by buiding
    with -Weffc++ option (Fridrich)
  - Improvement of textbox code (Laurent Alonso)
  - Fixes of autotools Windows build (Fridrich)
- remove obsolete unnecessary patch</changelog>
  <changelog author="jengelh@medozas.de" date="1322568001">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building
- Set proper group on subpackages</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1327320000">- Build with fvisibility-inlines-hidden, saves around
  600 entries in the exported symbol table.</changelog>
  <changelog author="jengelh@medozas.de" date="1327406400">- Use SPDX-style license field</changelog>
  <changelog author="fridrich.strba@suse.com" date="1348747200">- upgrade to version 0.9.6:
  - Experimental support of Zip storage along with Ole.
  - Add WPX_SEEK_END enum member in order to speed up the Zip
    operations.
  - Numerous fixes of coverity and cppcheck warnings and errors.
- upstream patch to really enable Zip stream.
- package build depends on zlib-devel.</changelog>
  <changelog author="fridrich.strba@suse.com" date="1366372800">- upgrade to version 0.9.7:
  - Added MPL 2.0+ as license
  - Improvement of OLE stream classes
- remove integrated patch</changelog>
  <changelog author="tchvatal@suse.com" date="1366459200">- Add URL download path.</changelog>
  <changelog author="fridrich.strba@suse.com" date="1368619200">- upgrade to version 0.9.8
  - Fix buffer allocation in WPXString::sprintf that can lead
    to crash
  - Fix crash reading invalid OLE stream
  - Change source code layout so that public headers be in inc/
    and its subdirectories
  - libwpd.h and libwpd-stream.h are not generated headers anymore
  - Change the way we get version from libwpd build
- Fix some rpmlint warnings</changelog>
  <changelog author="fstrba@suse.com" date="1376913600">- upgrade to version 0.9.8
  - implement WPX_SEEK_END for WPXMemoryStream: fixes an infinite
    loop in libmwaw when using WPXBinaryData over its stream
    interface.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651200">- Cleanup with spec-cleaner and noarch the documentation.</changelog>
  <changelog author="fstrba@suse.com" date="1401105600">- Upgrade to version 0.10.0
  * ABI change
  * Depend on librevenge-devel</changelog>
  <changelog author="fstrba@suse.com" date="1451476800">- Upgrade to version 0.10.1
  * Fix crash when NULL is passed as input stream.
  * Use symbol visibility on Linux. The library only exports public
    functions now.
  * Avoid infinite loop. (libwpd#3)
  * Remove bashism. (libwpd#5)
  * Fix various crashes and hangs when reading broken files found
    with the help of american-fuzzy-lop.
  * Make --help output of all command line tools more
    help2man-friendly.
  * Miscellaneous fixes and cleanups.
- Generate manpages for the libwpd-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1455192000">- Disable silent rules</changelog>
  <changelog author="tchvatal@suse.com" date="1505304000">- Upgrade to 0.10.2 bsc#1058025 CVE-2017-14226:
  * Require C++11 for build.
  * Fix various crashes, leaks and hangs when reading damaged files found
    by oss-fuzz.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542110400">- Add patch to fix rh#1643752 bsc#1115713 CVE-2018-19208:
  * 0001-Resolves-rhbz-1643752-bounds-check-m_currentTable-ac.patch</changelog>
</package>
<package pkgid="322b6f01c91a77fbb8f2a17fec2030fcc881211bb340ad0c2ac47861f9a2477c" name="libwpd-devel" arch="x86_64">
  <version epoch="0" ver="0.10.2" rel="lp150.2.3.1"/>
  <changelog author="fstrba@novell.com" date="1291723200">- upgrade to version 0.9.0:
  - Conversion of page-numbering (William)
  - Conversion of embedded images and text boxes in WP1, WP3, WP5 and WP6
    documents (Fridrich)
  - Conversion of password protected WP1, WP3, WP42 and WP5 documents
    (Fridrich)
  - Conversion of annotations/comments in WP6 parser (Fridrich)
  - Fix some Greek characters so that Text written in WP5.1 with Printer
    Polyglott convert correct.
  - Fix Unicode mappings of some older Symbol and Dingbats fonts (Fridrich)
  - Drop the libgsf dependency in favour of pure C++ implementation of the
    WPXInputStream interface (Fridrich, Ariya)
  - Fix the footnote/endnote/comment/annotation/textbox writing in wpd2html
    converter
  - Improve metadata parsing (David Hislop)</changelog>
  <changelog author="ismail@namtrac.org" date="1300276800">- Add missing includes to fix compilation with gcc 4.6</changelog>
  <changelog author="fstrba@novell.com" date="1304510400">- upgrade to version 0.9.2:
  - Fix build with gcc 4.6.x (Caolan McNamara)
  - Handle graciously corrupted WP6 prefix data (Fridrich)
  - Initial conversion of Mac double byte script characters (Fridrich)
  - Internally use UCS4 instead of UCS2 (Fridrich)
  - Add Arabic character conversion for WP5 parser (Fridrich)
  - Allow conversion of one WP character to a sequence of unicode
    characters (Fridrich)
  - Miscellaneous conversion fixes (Edward Mendelson, Fridrich)
  - Parse correctly WP 2 for Mac documents without resource fork (Fridrich)
  - Improvements in parsing of pictures in WP1 parser (Fridrich)
  - Fix wrong sizes of some functions in WP1 and WP42 parsers (Fridrich)
  - Fix handling of character attributes (Fridrich)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1306152000">- Do not include build dates in docs, messes up build-compare</changelog>
  <changelog author="fridrich.strba@suse.com" date="1314878400">- upgrade to version 0.9.3:
- Improvement of arabic charset mapping (Smokey Ardisson)
- Build system rewrite and improvement (Tomas Chvatal)
- Cleanup of return values (Thomas Klausner)
- Fix crashes with WP 2.1 for Mac documents (Fridrich)
- Fix bug in WPXPropertyList::operator= (Fridrich)
- Fix memory issues in some WPXProperty's derived classes (Fridrich)
- Conversion of extended characters in WP 42 parser (Fridrich)
- Various fixes for building inside LibreOffice (Tor Lillqvist, Jan Holesovky)</changelog>
  <changelog author="fridrich.strba@suse.com" date="1322568000">- upgrade to version 0.9.4:
  - Remove autopackage packaging that nobody uses (Fridrich)
  - Don't output points as integer. This solves some rounding
    issues along with the possibility of writing 10.5 point
    font size (Fridrich)
  - General improvement of code quality by buiding
    with -Weffc++ option (Fridrich)
  - Improvement of textbox code (Laurent Alonso)
  - Fixes of autotools Windows build (Fridrich)
- remove obsolete unnecessary patch</changelog>
  <changelog author="jengelh@medozas.de" date="1322568001">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building
- Set proper group on subpackages</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1327320000">- Build with fvisibility-inlines-hidden, saves around
  600 entries in the exported symbol table.</changelog>
  <changelog author="jengelh@medozas.de" date="1327406400">- Use SPDX-style license field</changelog>
  <changelog author="fridrich.strba@suse.com" date="1348747200">- upgrade to version 0.9.6:
  - Experimental support of Zip storage along with Ole.
  - Add WPX_SEEK_END enum member in order to speed up the Zip
    operations.
  - Numerous fixes of coverity and cppcheck warnings and errors.
- upstream patch to really enable Zip stream.
- package build depends on zlib-devel.</changelog>
  <changelog author="fridrich.strba@suse.com" date="1366372800">- upgrade to version 0.9.7:
  - Added MPL 2.0+ as license
  - Improvement of OLE stream classes
- remove integrated patch</changelog>
  <changelog author="tchvatal@suse.com" date="1366459200">- Add URL download path.</changelog>
  <changelog author="fridrich.strba@suse.com" date="1368619200">- upgrade to version 0.9.8
  - Fix buffer allocation in WPXString::sprintf that can lead
    to crash
  - Fix crash reading invalid OLE stream
  - Change source code layout so that public headers be in inc/
    and its subdirectories
  - libwpd.h and libwpd-stream.h are not generated headers anymore
  - Change the way we get version from libwpd build
- Fix some rpmlint warnings</changelog>
  <changelog author="fstrba@suse.com" date="1376913600">- upgrade to version 0.9.8
  - implement WPX_SEEK_END for WPXMemoryStream: fixes an infinite
    loop in libmwaw when using WPXBinaryData over its stream
    interface.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651200">- Cleanup with spec-cleaner and noarch the documentation.</changelog>
  <changelog author="fstrba@suse.com" date="1401105600">- Upgrade to version 0.10.0
  * ABI change
  * Depend on librevenge-devel</changelog>
  <changelog author="fstrba@suse.com" date="1451476800">- Upgrade to version 0.10.1
  * Fix crash when NULL is passed as input stream.
  * Use symbol visibility on Linux. The library only exports public
    functions now.
  * Avoid infinite loop. (libwpd#3)
  * Remove bashism. (libwpd#5)
  * Fix various crashes and hangs when reading broken files found
    with the help of american-fuzzy-lop.
  * Make --help output of all command line tools more
    help2man-friendly.
  * Miscellaneous fixes and cleanups.
- Generate manpages for the libwpd-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1455192000">- Disable silent rules</changelog>
  <changelog author="tchvatal@suse.com" date="1505304000">- Upgrade to 0.10.2 bsc#1058025 CVE-2017-14226:
  * Require C++11 for build.
  * Fix various crashes, leaks and hangs when reading damaged files found
    by oss-fuzz.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542110400">- Add patch to fix rh#1643752 bsc#1115713 CVE-2018-19208:
  * 0001-Resolves-rhbz-1643752-bounds-check-m_currentTable-ac.patch</changelog>
</package>
<package pkgid="e1c2afd5f9f875923ed83353aade7109d28ef7e4fff9c3f1bc11f83287c0378d" name="libwpd-devel-doc" arch="noarch">
  <version epoch="0" ver="0.10.2" rel="lp150.2.3.1"/>
  <changelog author="fstrba@novell.com" date="1291723200">- upgrade to version 0.9.0:
  - Conversion of page-numbering (William)
  - Conversion of embedded images and text boxes in WP1, WP3, WP5 and WP6
    documents (Fridrich)
  - Conversion of password protected WP1, WP3, WP42 and WP5 documents
    (Fridrich)
  - Conversion of annotations/comments in WP6 parser (Fridrich)
  - Fix some Greek characters so that Text written in WP5.1 with Printer
    Polyglott convert correct.
  - Fix Unicode mappings of some older Symbol and Dingbats fonts (Fridrich)
  - Drop the libgsf dependency in favour of pure C++ implementation of the
    WPXInputStream interface (Fridrich, Ariya)
  - Fix the footnote/endnote/comment/annotation/textbox writing in wpd2html
    converter
  - Improve metadata parsing (David Hislop)</changelog>
  <changelog author="ismail@namtrac.org" date="1300276800">- Add missing includes to fix compilation with gcc 4.6</changelog>
  <changelog author="fstrba@novell.com" date="1304510400">- upgrade to version 0.9.2:
  - Fix build with gcc 4.6.x (Caolan McNamara)
  - Handle graciously corrupted WP6 prefix data (Fridrich)
  - Initial conversion of Mac double byte script characters (Fridrich)
  - Internally use UCS4 instead of UCS2 (Fridrich)
  - Add Arabic character conversion for WP5 parser (Fridrich)
  - Allow conversion of one WP character to a sequence of unicode
    characters (Fridrich)
  - Miscellaneous conversion fixes (Edward Mendelson, Fridrich)
  - Parse correctly WP 2 for Mac documents without resource fork (Fridrich)
  - Improvements in parsing of pictures in WP1 parser (Fridrich)
  - Fix wrong sizes of some functions in WP1 and WP42 parsers (Fridrich)
  - Fix handling of character attributes (Fridrich)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1306152000">- Do not include build dates in docs, messes up build-compare</changelog>
  <changelog author="fridrich.strba@suse.com" date="1314878400">- upgrade to version 0.9.3:
- Improvement of arabic charset mapping (Smokey Ardisson)
- Build system rewrite and improvement (Tomas Chvatal)
- Cleanup of return values (Thomas Klausner)
- Fix crashes with WP 2.1 for Mac documents (Fridrich)
- Fix bug in WPXPropertyList::operator= (Fridrich)
- Fix memory issues in some WPXProperty's derived classes (Fridrich)
- Conversion of extended characters in WP 42 parser (Fridrich)
- Various fixes for building inside LibreOffice (Tor Lillqvist, Jan Holesovky)</changelog>
  <changelog author="fridrich.strba@suse.com" date="1322568000">- upgrade to version 0.9.4:
  - Remove autopackage packaging that nobody uses (Fridrich)
  - Don't output points as integer. This solves some rounding
    issues along with the possibility of writing 10.5 point
    font size (Fridrich)
  - General improvement of code quality by buiding
    with -Weffc++ option (Fridrich)
  - Improvement of textbox code (Laurent Alonso)
  - Fixes of autotools Windows build (Fridrich)
- remove obsolete unnecessary patch</changelog>
  <changelog author="jengelh@medozas.de" date="1322568001">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building
- Set proper group on subpackages</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1327320000">- Build with fvisibility-inlines-hidden, saves around
  600 entries in the exported symbol table.</changelog>
  <changelog author="jengelh@medozas.de" date="1327406400">- Use SPDX-style license field</changelog>
  <changelog author="fridrich.strba@suse.com" date="1348747200">- upgrade to version 0.9.6:
  - Experimental support of Zip storage along with Ole.
  - Add WPX_SEEK_END enum member in order to speed up the Zip
    operations.
  - Numerous fixes of coverity and cppcheck warnings and errors.
- upstream patch to really enable Zip stream.
- package build depends on zlib-devel.</changelog>
  <changelog author="fridrich.strba@suse.com" date="1366372800">- upgrade to version 0.9.7:
  - Added MPL 2.0+ as license
  - Improvement of OLE stream classes
- remove integrated patch</changelog>
  <changelog author="tchvatal@suse.com" date="1366459200">- Add URL download path.</changelog>
  <changelog author="fridrich.strba@suse.com" date="1368619200">- upgrade to version 0.9.8
  - Fix buffer allocation in WPXString::sprintf that can lead
    to crash
  - Fix crash reading invalid OLE stream
  - Change source code layout so that public headers be in inc/
    and its subdirectories
  - libwpd.h and libwpd-stream.h are not generated headers anymore
  - Change the way we get version from libwpd build
- Fix some rpmlint warnings</changelog>
  <changelog author="fstrba@suse.com" date="1376913600">- upgrade to version 0.9.8
  - implement WPX_SEEK_END for WPXMemoryStream: fixes an infinite
    loop in libmwaw when using WPXBinaryData over its stream
    interface.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651200">- Cleanup with spec-cleaner and noarch the documentation.</changelog>
  <changelog author="fstrba@suse.com" date="1401105600">- Upgrade to version 0.10.0
  * ABI change
  * Depend on librevenge-devel</changelog>
  <changelog author="fstrba@suse.com" date="1451476800">- Upgrade to version 0.10.1
  * Fix crash when NULL is passed as input stream.
  * Use symbol visibility on Linux. The library only exports public
    functions now.
  * Avoid infinite loop. (libwpd#3)
  * Remove bashism. (libwpd#5)
  * Fix various crashes and hangs when reading broken files found
    with the help of american-fuzzy-lop.
  * Make --help output of all command line tools more
    help2man-friendly.
  * Miscellaneous fixes and cleanups.
- Generate manpages for the libwpd-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1455192000">- Disable silent rules</changelog>
  <changelog author="tchvatal@suse.com" date="1505304000">- Upgrade to 0.10.2 bsc#1058025 CVE-2017-14226:
  * Require C++11 for build.
  * Fix various crashes, leaks and hangs when reading damaged files found
    by oss-fuzz.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542110400">- Add patch to fix rh#1643752 bsc#1115713 CVE-2018-19208:
  * 0001-Resolves-rhbz-1643752-bounds-check-m_currentTable-ac.patch</changelog>
</package>
<package pkgid="925595527f00e146ec94721e321745a76ed6d428c34f8bbeae0169020fb94294" name="libwpd-tools" arch="x86_64">
  <version epoch="0" ver="0.10.2" rel="lp150.2.3.1"/>
  <changelog author="fstrba@novell.com" date="1291723200">- upgrade to version 0.9.0:
  - Conversion of page-numbering (William)
  - Conversion of embedded images and text boxes in WP1, WP3, WP5 and WP6
    documents (Fridrich)
  - Conversion of password protected WP1, WP3, WP42 and WP5 documents
    (Fridrich)
  - Conversion of annotations/comments in WP6 parser (Fridrich)
  - Fix some Greek characters so that Text written in WP5.1 with Printer
    Polyglott convert correct.
  - Fix Unicode mappings of some older Symbol and Dingbats fonts (Fridrich)
  - Drop the libgsf dependency in favour of pure C++ implementation of the
    WPXInputStream interface (Fridrich, Ariya)
  - Fix the footnote/endnote/comment/annotation/textbox writing in wpd2html
    converter
  - Improve metadata parsing (David Hislop)</changelog>
  <changelog author="ismail@namtrac.org" date="1300276800">- Add missing includes to fix compilation with gcc 4.6</changelog>
  <changelog author="fstrba@novell.com" date="1304510400">- upgrade to version 0.9.2:
  - Fix build with gcc 4.6.x (Caolan McNamara)
  - Handle graciously corrupted WP6 prefix data (Fridrich)
  - Initial conversion of Mac double byte script characters (Fridrich)
  - Internally use UCS4 instead of UCS2 (Fridrich)
  - Add Arabic character conversion for WP5 parser (Fridrich)
  - Allow conversion of one WP character to a sequence of unicode
    characters (Fridrich)
  - Miscellaneous conversion fixes (Edward Mendelson, Fridrich)
  - Parse correctly WP 2 for Mac documents without resource fork (Fridrich)
  - Improvements in parsing of pictures in WP1 parser (Fridrich)
  - Fix wrong sizes of some functions in WP1 and WP42 parsers (Fridrich)
  - Fix handling of character attributes (Fridrich)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1306152000">- Do not include build dates in docs, messes up build-compare</changelog>
  <changelog author="fridrich.strba@suse.com" date="1314878400">- upgrade to version 0.9.3:
- Improvement of arabic charset mapping (Smokey Ardisson)
- Build system rewrite and improvement (Tomas Chvatal)
- Cleanup of return values (Thomas Klausner)
- Fix crashes with WP 2.1 for Mac documents (Fridrich)
- Fix bug in WPXPropertyList::operator= (Fridrich)
- Fix memory issues in some WPXProperty's derived classes (Fridrich)
- Conversion of extended characters in WP 42 parser (Fridrich)
- Various fixes for building inside LibreOffice (Tor Lillqvist, Jan Holesovky)</changelog>
  <changelog author="fridrich.strba@suse.com" date="1322568000">- upgrade to version 0.9.4:
  - Remove autopackage packaging that nobody uses (Fridrich)
  - Don't output points as integer. This solves some rounding
    issues along with the possibility of writing 10.5 point
    font size (Fridrich)
  - General improvement of code quality by buiding
    with -Weffc++ option (Fridrich)
  - Improvement of textbox code (Laurent Alonso)
  - Fixes of autotools Windows build (Fridrich)
- remove obsolete unnecessary patch</changelog>
  <changelog author="jengelh@medozas.de" date="1322568001">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building
- Set proper group on subpackages</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1327320000">- Build with fvisibility-inlines-hidden, saves around
  600 entries in the exported symbol table.</changelog>
  <changelog author="jengelh@medozas.de" date="1327406400">- Use SPDX-style license field</changelog>
  <changelog author="fridrich.strba@suse.com" date="1348747200">- upgrade to version 0.9.6:
  - Experimental support of Zip storage along with Ole.
  - Add WPX_SEEK_END enum member in order to speed up the Zip
    operations.
  - Numerous fixes of coverity and cppcheck warnings and errors.
- upstream patch to really enable Zip stream.
- package build depends on zlib-devel.</changelog>
  <changelog author="fridrich.strba@suse.com" date="1366372800">- upgrade to version 0.9.7:
  - Added MPL 2.0+ as license
  - Improvement of OLE stream classes
- remove integrated patch</changelog>
  <changelog author="tchvatal@suse.com" date="1366459200">- Add URL download path.</changelog>
  <changelog author="fridrich.strba@suse.com" date="1368619200">- upgrade to version 0.9.8
  - Fix buffer allocation in WPXString::sprintf that can lead
    to crash
  - Fix crash reading invalid OLE stream
  - Change source code layout so that public headers be in inc/
    and its subdirectories
  - libwpd.h and libwpd-stream.h are not generated headers anymore
  - Change the way we get version from libwpd build
- Fix some rpmlint warnings</changelog>
  <changelog author="fstrba@suse.com" date="1376913600">- upgrade to version 0.9.8
  - implement WPX_SEEK_END for WPXMemoryStream: fixes an infinite
    loop in libmwaw when using WPXBinaryData over its stream
    interface.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651200">- Cleanup with spec-cleaner and noarch the documentation.</changelog>
  <changelog author="fstrba@suse.com" date="1401105600">- Upgrade to version 0.10.0
  * ABI change
  * Depend on librevenge-devel</changelog>
  <changelog author="fstrba@suse.com" date="1451476800">- Upgrade to version 0.10.1
  * Fix crash when NULL is passed as input stream.
  * Use symbol visibility on Linux. The library only exports public
    functions now.
  * Avoid infinite loop. (libwpd#3)
  * Remove bashism. (libwpd#5)
  * Fix various crashes and hangs when reading broken files found
    with the help of american-fuzzy-lop.
  * Make --help output of all command line tools more
    help2man-friendly.
  * Miscellaneous fixes and cleanups.
- Generate manpages for the libwpd-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1455192000">- Disable silent rules</changelog>
  <changelog author="tchvatal@suse.com" date="1505304000">- Upgrade to 0.10.2 bsc#1058025 CVE-2017-14226:
  * Require C++11 for build.
  * Fix various crashes, leaks and hangs when reading damaged files found
    by oss-fuzz.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542110400">- Add patch to fix rh#1643752 bsc#1115713 CVE-2018-19208:
  * 0001-Resolves-rhbz-1643752-bounds-check-m_currentTable-ac.patch</changelog>
</package>
<package pkgid="3d87b69e4be68fb23c1da665f32c8b37a253b084d4a6e63e528d5c3cc2471f7e" name="libwps" arch="src">
  <version epoch="0" ver="0.4.9" rel="lp150.2.3.1"/>
  <changelog author="fridrich.strba@suse.com" date="1338465600">- upgrade to 0.2.6
  - Boost dependency for shared_ptr
  - Miscellaneous upstream bug fixes and enhancements</changelog>
  <changelog author="tchvatal@suse.com" date="1352203200">- update to 0.2.7
  - Disable werror explicitely</changelog>
  <changelog author="fridrich.strba@suse.com" date="1366372800">- update to 0.2.8
  - Add MPL 2.0+ as license
  - Miscellaneous coverity fixes
  - Add support of text frames and pictures
  - Improvements in table code
  - Read the page orientation</changelog>
  <changelog author="tchvatal@suse.com" date="1366459200">- Use url download path.</changelog>
  <changelog author="tchvatal@suse.com" date="1369656000">- update to 0.2.9
  - Various coverity and style fixes
  - Add provides line to make rpmlint happy</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1390046400">- build with -fvisibility-inlines-hidden
- Enable verbose build.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651200">- Cleanup with spec-cleaner</changelog>
  <changelog author="fstrba@suse.com" date="1401105600">- Upgrade to upstream version 0.3.0
  * ABI change
  * Remove dependency on libwpd-devel
  * Add dependency on librevenge-devel
- Added support of Microsoft Works spreadsheets</changelog>
  <changelog author="tchvatal@suse.com" date="1420200000">- Version bump to 0.3.1:
  - Fix parsing of floating-point numbers in specific cases.
  - Fix several minor issues reported by Coverity and Clang.
  - Check arguments of public functions. Passing NULL no longer causes
    a crash.
  - Use symbol visibility on Linux. The library only exports the public
    functions now.
  - Import @TERM and @CTERM functions (fdo#86241).
  - Handle LICS character encoding in spreadsheets (fdo#87222).
  - Fix a crash when reading a broken file, found with the help of
    american-fuzzy-lop.</changelog>
  <changelog author="tchvatal@suse.com" date="1434196800">- Version bump to 0.4.0:
  - add support for unknown encoding files (ie. DOS file)
  - add potential support for converting Lotus, ... documents,
  - accept to convert all Lotus Wk1 files and Symphony Wk1 files,
  - add support for Lotus Wk3 and Wk4 documents,
  - add support for Quattro Pro Wq1 and Wq2 documents,
  - only in debug mode, add pre-support for Lotus Wk5..., must allow to
    retrieve the main sheets content's with no formatting,
  - add potential support for asking the document's password ( but do nothing )
  - correct some compiler warnings when compiling in debug mode.</changelog>
  <changelog author="tchvatal@suse.com" date="1440763200">- Version bump to 0.4.1:
  - QuattroPro: correct a mistake when reading negative cell's position.
  - Fix some Windows build problems.
  - Fix more than 10 hangs when reading damaged files, found with the help
    of american-fuzzy-lop.
  - Performance: improve the sheet's output generation.</changelog>
  <changelog author="tchvatal@suse.com" date="1444219200">- Version update to 0.4.2:
  * Add support for microsoft write files</changelog>
  <changelog author="tchvatal@suse.com" date="1463054400">- Version update to 0.4.3:
  * Few small fixes, see upstream news for detailed info</changelog>
  <changelog author="tchvatal@suse.com" date="1476792000">- Version update to 0.4.4:
  * Few lotus fixes</changelog>
  <changelog author="jengelh@inai.de" date="1477137600">- Remove redundant pkgconfig requires</changelog>
  <changelog author="tchvatal@suse.com" date="1484308800">- Version update to to 0.4.5:
  * Additional lotus wk4 support</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1494849600">- Version update to 0.4.6:
  * Small bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1511956800">- Version update to 0.4.7:
  * Many fixes found by fuzzing</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Version update to 0.4.9:
  * QuattroPro: add parser to .wb3 files
  * Multiplan: add parser to DOS v1-v3 files
  * charts: try to retrieve charts in .wk*, .wq* files
  * QuattroPro: add parser to .wb[12] files
  * switch to c++11
  * fuzzing: correct many problems</changelog>
</package>
<package pkgid="cf219c505e3d0aa84ec8d4fede00d2fff25b70d35f93135fd78594f7c3051a8a" name="libwps-0_4-4" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="lp150.2.3.1"/>
  <changelog author="fridrich.strba@suse.com" date="1338465600">- upgrade to 0.2.6
  - Boost dependency for shared_ptr
  - Miscellaneous upstream bug fixes and enhancements</changelog>
  <changelog author="tchvatal@suse.com" date="1352203200">- update to 0.2.7
  - Disable werror explicitely</changelog>
  <changelog author="fridrich.strba@suse.com" date="1366372800">- update to 0.2.8
  - Add MPL 2.0+ as license
  - Miscellaneous coverity fixes
  - Add support of text frames and pictures
  - Improvements in table code
  - Read the page orientation</changelog>
  <changelog author="tchvatal@suse.com" date="1366459200">- Use url download path.</changelog>
  <changelog author="tchvatal@suse.com" date="1369656000">- update to 0.2.9
  - Various coverity and style fixes
  - Add provides line to make rpmlint happy</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1390046400">- build with -fvisibility-inlines-hidden
- Enable verbose build.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651200">- Cleanup with spec-cleaner</changelog>
  <changelog author="fstrba@suse.com" date="1401105600">- Upgrade to upstream version 0.3.0
  * ABI change
  * Remove dependency on libwpd-devel
  * Add dependency on librevenge-devel
- Added support of Microsoft Works spreadsheets</changelog>
  <changelog author="tchvatal@suse.com" date="1420200000">- Version bump to 0.3.1:
  - Fix parsing of floating-point numbers in specific cases.
  - Fix several minor issues reported by Coverity and Clang.
  - Check arguments of public functions. Passing NULL no longer causes
    a crash.
  - Use symbol visibility on Linux. The library only exports the public
    functions now.
  - Import @TERM and @CTERM functions (fdo#86241).
  - Handle LICS character encoding in spreadsheets (fdo#87222).
  - Fix a crash when reading a broken file, found with the help of
    american-fuzzy-lop.</changelog>
  <changelog author="tchvatal@suse.com" date="1434196800">- Version bump to 0.4.0:
  - add support for unknown encoding files (ie. DOS file)
  - add potential support for converting Lotus, ... documents,
  - accept to convert all Lotus Wk1 files and Symphony Wk1 files,
  - add support for Lotus Wk3 and Wk4 documents,
  - add support for Quattro Pro Wq1 and Wq2 documents,
  - only in debug mode, add pre-support for Lotus Wk5..., must allow to
    retrieve the main sheets content's with no formatting,
  - add potential support for asking the document's password ( but do nothing )
  - correct some compiler warnings when compiling in debug mode.</changelog>
  <changelog author="tchvatal@suse.com" date="1440763200">- Version bump to 0.4.1:
  - QuattroPro: correct a mistake when reading negative cell's position.
  - Fix some Windows build problems.
  - Fix more than 10 hangs when reading damaged files, found with the help
    of american-fuzzy-lop.
  - Performance: improve the sheet's output generation.</changelog>
  <changelog author="tchvatal@suse.com" date="1444219200">- Version update to 0.4.2:
  * Add support for microsoft write files</changelog>
  <changelog author="tchvatal@suse.com" date="1463054400">- Version update to 0.4.3:
  * Few small fixes, see upstream news for detailed info</changelog>
  <changelog author="tchvatal@suse.com" date="1476792000">- Version update to 0.4.4:
  * Few lotus fixes</changelog>
  <changelog author="jengelh@inai.de" date="1477137600">- Remove redundant pkgconfig requires</changelog>
  <changelog author="tchvatal@suse.com" date="1484308800">- Version update to to 0.4.5:
  * Additional lotus wk4 support</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1494849600">- Version update to 0.4.6:
  * Small bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1511956800">- Version update to 0.4.7:
  * Many fixes found by fuzzing</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Version update to 0.4.9:
  * QuattroPro: add parser to .wb3 files
  * Multiplan: add parser to DOS v1-v3 files
  * charts: try to retrieve charts in .wk*, .wq* files
  * QuattroPro: add parser to .wb[12] files
  * switch to c++11
  * fuzzing: correct many problems</changelog>
</package>
<package pkgid="97e9df291176b90a0a2061fe9c17c5e334fdbce4c3e70d095f544749e2924ee3" name="libwps-devel" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="lp150.2.3.1"/>
  <changelog author="fridrich.strba@suse.com" date="1338465600">- upgrade to 0.2.6
  - Boost dependency for shared_ptr
  - Miscellaneous upstream bug fixes and enhancements</changelog>
  <changelog author="tchvatal@suse.com" date="1352203200">- update to 0.2.7
  - Disable werror explicitely</changelog>
  <changelog author="fridrich.strba@suse.com" date="1366372800">- update to 0.2.8
  - Add MPL 2.0+ as license
  - Miscellaneous coverity fixes
  - Add support of text frames and pictures
  - Improvements in table code
  - Read the page orientation</changelog>
  <changelog author="tchvatal@suse.com" date="1366459200">- Use url download path.</changelog>
  <changelog author="tchvatal@suse.com" date="1369656000">- update to 0.2.9
  - Various coverity and style fixes
  - Add provides line to make rpmlint happy</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1390046400">- build with -fvisibility-inlines-hidden
- Enable verbose build.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651200">- Cleanup with spec-cleaner</changelog>
  <changelog author="fstrba@suse.com" date="1401105600">- Upgrade to upstream version 0.3.0
  * ABI change
  * Remove dependency on libwpd-devel
  * Add dependency on librevenge-devel
- Added support of Microsoft Works spreadsheets</changelog>
  <changelog author="tchvatal@suse.com" date="1420200000">- Version bump to 0.3.1:
  - Fix parsing of floating-point numbers in specific cases.
  - Fix several minor issues reported by Coverity and Clang.
  - Check arguments of public functions. Passing NULL no longer causes
    a crash.
  - Use symbol visibility on Linux. The library only exports the public
    functions now.
  - Import @TERM and @CTERM functions (fdo#86241).
  - Handle LICS character encoding in spreadsheets (fdo#87222).
  - Fix a crash when reading a broken file, found with the help of
    american-fuzzy-lop.</changelog>
  <changelog author="tchvatal@suse.com" date="1434196800">- Version bump to 0.4.0:
  - add support for unknown encoding files (ie. DOS file)
  - add potential support for converting Lotus, ... documents,
  - accept to convert all Lotus Wk1 files and Symphony Wk1 files,
  - add support for Lotus Wk3 and Wk4 documents,
  - add support for Quattro Pro Wq1 and Wq2 documents,
  - only in debug mode, add pre-support for Lotus Wk5..., must allow to
    retrieve the main sheets content's with no formatting,
  - add potential support for asking the document's password ( but do nothing )
  - correct some compiler warnings when compiling in debug mode.</changelog>
  <changelog author="tchvatal@suse.com" date="1440763200">- Version bump to 0.4.1:
  - QuattroPro: correct a mistake when reading negative cell's position.
  - Fix some Windows build problems.
  - Fix more than 10 hangs when reading damaged files, found with the help
    of american-fuzzy-lop.
  - Performance: improve the sheet's output generation.</changelog>
  <changelog author="tchvatal@suse.com" date="1444219200">- Version update to 0.4.2:
  * Add support for microsoft write files</changelog>
  <changelog author="tchvatal@suse.com" date="1463054400">- Version update to 0.4.3:
  * Few small fixes, see upstream news for detailed info</changelog>
  <changelog author="tchvatal@suse.com" date="1476792000">- Version update to 0.4.4:
  * Few lotus fixes</changelog>
  <changelog author="jengelh@inai.de" date="1477137600">- Remove redundant pkgconfig requires</changelog>
  <changelog author="tchvatal@suse.com" date="1484308800">- Version update to to 0.4.5:
  * Additional lotus wk4 support</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1494849600">- Version update to 0.4.6:
  * Small bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1511956800">- Version update to 0.4.7:
  * Many fixes found by fuzzing</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Version update to 0.4.9:
  * QuattroPro: add parser to .wb3 files
  * Multiplan: add parser to DOS v1-v3 files
  * charts: try to retrieve charts in .wk*, .wq* files
  * QuattroPro: add parser to .wb[12] files
  * switch to c++11
  * fuzzing: correct many problems</changelog>
</package>
<package pkgid="4d7a3cc5549050a1ccf13ae9245b406d54ccfc26e0a29b509fbb2539f490f1a3" name="libwps-tools" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="lp150.2.3.1"/>
  <changelog author="fridrich.strba@suse.com" date="1338465600">- upgrade to 0.2.6
  - Boost dependency for shared_ptr
  - Miscellaneous upstream bug fixes and enhancements</changelog>
  <changelog author="tchvatal@suse.com" date="1352203200">- update to 0.2.7
  - Disable werror explicitely</changelog>
  <changelog author="fridrich.strba@suse.com" date="1366372800">- update to 0.2.8
  - Add MPL 2.0+ as license
  - Miscellaneous coverity fixes
  - Add support of text frames and pictures
  - Improvements in table code
  - Read the page orientation</changelog>
  <changelog author="tchvatal@suse.com" date="1366459200">- Use url download path.</changelog>
  <changelog author="tchvatal@suse.com" date="1369656000">- update to 0.2.9
  - Various coverity and style fixes
  - Add provides line to make rpmlint happy</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1390046400">- build with -fvisibility-inlines-hidden
- Enable verbose build.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651200">- Cleanup with spec-cleaner</changelog>
  <changelog author="fstrba@suse.com" date="1401105600">- Upgrade to upstream version 0.3.0
  * ABI change
  * Remove dependency on libwpd-devel
  * Add dependency on librevenge-devel
- Added support of Microsoft Works spreadsheets</changelog>
  <changelog author="tchvatal@suse.com" date="1420200000">- Version bump to 0.3.1:
  - Fix parsing of floating-point numbers in specific cases.
  - Fix several minor issues reported by Coverity and Clang.
  - Check arguments of public functions. Passing NULL no longer causes
    a crash.
  - Use symbol visibility on Linux. The library only exports the public
    functions now.
  - Import @TERM and @CTERM functions (fdo#86241).
  - Handle LICS character encoding in spreadsheets (fdo#87222).
  - Fix a crash when reading a broken file, found with the help of
    american-fuzzy-lop.</changelog>
  <changelog author="tchvatal@suse.com" date="1434196800">- Version bump to 0.4.0:
  - add support for unknown encoding files (ie. DOS file)
  - add potential support for converting Lotus, ... documents,
  - accept to convert all Lotus Wk1 files and Symphony Wk1 files,
  - add support for Lotus Wk3 and Wk4 documents,
  - add support for Quattro Pro Wq1 and Wq2 documents,
  - only in debug mode, add pre-support for Lotus Wk5..., must allow to
    retrieve the main sheets content's with no formatting,
  - add potential support for asking the document's password ( but do nothing )
  - correct some compiler warnings when compiling in debug mode.</changelog>
  <changelog author="tchvatal@suse.com" date="1440763200">- Version bump to 0.4.1:
  - QuattroPro: correct a mistake when reading negative cell's position.
  - Fix some Windows build problems.
  - Fix more than 10 hangs when reading damaged files, found with the help
    of american-fuzzy-lop.
  - Performance: improve the sheet's output generation.</changelog>
  <changelog author="tchvatal@suse.com" date="1444219200">- Version update to 0.4.2:
  * Add support for microsoft write files</changelog>
  <changelog author="tchvatal@suse.com" date="1463054400">- Version update to 0.4.3:
  * Few small fixes, see upstream news for detailed info</changelog>
  <changelog author="tchvatal@suse.com" date="1476792000">- Version update to 0.4.4:
  * Few lotus fixes</changelog>
  <changelog author="jengelh@inai.de" date="1477137600">- Remove redundant pkgconfig requires</changelog>
  <changelog author="tchvatal@suse.com" date="1484308800">- Version update to to 0.4.5:
  * Additional lotus wk4 support</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1494849600">- Version update to 0.4.6:
  * Small bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1511956800">- Version update to 0.4.7:
  * Many fixes found by fuzzing</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Version update to 0.4.9:
  * QuattroPro: add parser to .wb3 files
  * Multiplan: add parser to DOS v1-v3 files
  * charts: try to retrieve charts in .wk*, .wq* files
  * QuattroPro: add parser to .wb[12] files
  * switch to c++11
  * fuzzing: correct many problems</changelog>
</package>
<package pkgid="0465dcb05e5b133948feb56de345b74ccc936a89d028926c7fc5361000f83358" name="libwscodecs1" arch="x86_64">
  <version epoch="0" ver="2.4.10" rel="lp150.2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
  <changelog author="astieger@suse.com" date="1535544000">- Update to 2.4.9 (bsc#1106514):
  * CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
  * CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
  * CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
- packaging change: temporarily disable upstream tarball signature
  verification, use hashes from signed release announcement e-mail</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- Wireshark 2.4.10 (bsc#1111647):
  * CVE-2018-18227: MS-WSP dissector crash (wnpa-sec-2018-47)
  * CVE-2018-12086: OpcUA dissector crash (wnpa-sec-2018-50)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.10.html</changelog>
</package>
<package pkgid="5672535bfc656f34bbef618b9cf3789bd37e7baa8eb053f9b387179482219446" name="libwscodecs1" arch="x86_64">
  <version epoch="0" ver="2.4.7" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1482840000">- Cleanup a bit with spec-cleaner
- Properly set ethereal symlink based on UI and set it to proper subpkg
- Update conditionals on wireshark to only build Qt or GTK depending
  on the interface, because upstream now only supports Qt5
- Update the caps code in spec but keep it disabled
- Enable geoip only on platforms that support it
- Enable libnl only on newer releases
- Update desktop file and icon caches
- Drop not really needed patch wireshark-1.10.0-authors-pod2man.patch
- Use full commands for icon/desktop cache for gtk mode as on sle11 it
  was not present yet as a macro
- Split shared libraries properly to subpackages</changelog>
  <changelog author="tchvatal@suse.com" date="1483531200">- Obsolete the ui-gtk in the ui-qt to ensure clean non-conflicted install</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
</package>
<package pkgid="f48d65fd4ef33766ab033acf9918ecf528c37b9ce42869dc8b6baecfb76705f8" name="libwscodecs1" arch="x86_64">
  <version epoch="0" ver="2.4.8" rel="lp150.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1483531200">- Obsolete the ui-gtk in the ui-qt to ensure clean non-conflicted install</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
</package>
<package pkgid="5f41ffceff6258deb4d8e1b43a96512258f318761fe9ae9b9e688b89661cd826" name="libwscodecs1" arch="x86_64">
  <version epoch="0" ver="2.4.9" rel="lp150.2.10.1"/>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
  <changelog author="astieger@suse.com" date="1535544000">- Update to 2.4.9 (bsc#1106514):
  * CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
  * CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
  * CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
- packaging change: temporarily disable upstream tarball signature
  verification, use hashes from signed release announcement e-mail</changelog>
</package>
<package pkgid="d8bbb968a0942655c3a523621e530e96731a66b01b7df0b5fb736241cc082ac7" name="libwsutil8" arch="x86_64">
  <version epoch="0" ver="2.4.10" rel="lp150.2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
  <changelog author="astieger@suse.com" date="1535544000">- Update to 2.4.9 (bsc#1106514):
  * CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
  * CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
  * CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
- packaging change: temporarily disable upstream tarball signature
  verification, use hashes from signed release announcement e-mail</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- Wireshark 2.4.10 (bsc#1111647):
  * CVE-2018-18227: MS-WSP dissector crash (wnpa-sec-2018-47)
  * CVE-2018-12086: OpcUA dissector crash (wnpa-sec-2018-50)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.10.html</changelog>
</package>
<package pkgid="4efc6caa843443bc2928812506c8fbfb7f784bf62de5b9d156111adc495c871c" name="libwsutil8" arch="x86_64">
  <version epoch="0" ver="2.4.7" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1482840000">- Cleanup a bit with spec-cleaner
- Properly set ethereal symlink based on UI and set it to proper subpkg
- Update conditionals on wireshark to only build Qt or GTK depending
  on the interface, because upstream now only supports Qt5
- Update the caps code in spec but keep it disabled
- Enable geoip only on platforms that support it
- Enable libnl only on newer releases
- Update desktop file and icon caches
- Drop not really needed patch wireshark-1.10.0-authors-pod2man.patch
- Use full commands for icon/desktop cache for gtk mode as on sle11 it
  was not present yet as a macro
- Split shared libraries properly to subpackages</changelog>
  <changelog author="tchvatal@suse.com" date="1483531200">- Obsolete the ui-gtk in the ui-qt to ensure clean non-conflicted install</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
</package>
<package pkgid="2b7f1684a7698a0088e233cddb03131b7a8fccfbb6f479bf6e31a860c88d5e5e" name="libwsutil8" arch="x86_64">
  <version epoch="0" ver="2.4.8" rel="lp150.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1483531200">- Obsolete the ui-gtk in the ui-qt to ensure clean non-conflicted install</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
</package>
<package pkgid="27651a54e4c289d08968db876803ff7a29b78bdf24f28488f30b2627d786c5d0" name="libwsutil8" arch="x86_64">
  <version epoch="0" ver="2.4.9" rel="lp150.2.10.1"/>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
  <changelog author="astieger@suse.com" date="1535544000">- Update to 2.4.9 (bsc#1106514):
  * CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
  * CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
  * CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
- packaging change: temporarily disable upstream tarball signature
  verification, use hashes from signed release announcement e-mail</changelog>
</package>
<package pkgid="ca9d4fa9c274f5cdecb2b05e379f02b62c9b108273240cd5dbe4db20cbe84a38" name="libxatracker-devel" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="3e59039cbd115c478ee2efe3a16289d7898fe48ca67f043cbc5b8849e2071f61" name="libxatracker2" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="e499c46faf01389cdb74904577e2867afc061e227cc87945eb4709f5c7b6d08a" name="libxcb" arch="src">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="7e80ed3feff99f6b0f387141f38d2c30956e88162cef531e6c18b661c6465d7e" name="libxcb-composite0" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="0da01e10b44f550eae2665a6e42a64b90ad9ae7bc8115eedfe8cafc203f1c84b" name="libxcb-composite0-32bit" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="43a1a398bda4b1a4937d90b454743606525a40a3766687881ca254ce3bab77aa" name="libxcb-damage0" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="4583a770a142beff2925b1e4ba0c551220899e024233247e1a6c8b752a268b1c" name="libxcb-damage0-32bit" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="2ba2cbd5182f48638b9a90ef1cffb3c6797f2c0be08044dae4afb5c7e28f95ee" name="libxcb-devel" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="cc4a4e18b876046aa25a77da5df6aa72ab5259b567071b6fe5ee7fabe75d3b3f" name="libxcb-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="d1fc201f7fb02467d25660d27aac6bc1f47294b057136d5135f49ff37de54fc7" name="libxcb-devel-doc" arch="noarch">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="73b0d1f24b60c536d44fe327418e1abada8c2f5f2924d3aa50c45f290cbac721" name="libxcb-dpms0" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="e09d97ca5bb6b50cb22995f4839438fce6cbedc2b065fe8f75c3e2a4beddb561" name="libxcb-dpms0-32bit" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="e469419217f6e9ab9c3aed14bb336e4a4d6c5dc6dd035d04c5eda135b3a0f2a6" name="libxcb-dri2-0" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="9f9b4308100183451b6681410edfc9df9a8c23f86fea903faf4297cb39a05769" name="libxcb-dri2-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="716ecb42565bf3bcb01ff0555b81eefcc67e62e1e14dfe85550ed4729dc52211" name="libxcb-dri3-0" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="fecb6706c372fd117f5dc116acd7da36958763a726cbef82e6074e9d9dfba25f" name="libxcb-dri3-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="421b094270f354eb28f68734300b9f80992500bdafab43b884c8f12057101f48" name="libxcb-glx0" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="ef96c449508b61eabc3edd0dc200eb411f43b85cf71e57f0cfc0e1cadf00975b" name="libxcb-glx0-32bit" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="862edc09e40c5478f2b8c0c88d093356d0d3969f2ab916ce3e0eb4729e2443ad" name="libxcb-present0" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="a29a34e942f3e6d7b6a314ead011af1dea8dce738c49408a79b97f062c13ad5e" name="libxcb-present0-32bit" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="3c2f71944363d00d3b4eb0021c3c489d8aff714eeaa11ad78cc38f564f5ce591" name="libxcb-randr0" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="2a0cd0241b498f5e1525d13d0d8e0245fe543364d326f5293fc330e50ca4df26" name="libxcb-randr0-32bit" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="60c15882d9a837422e115d5e028d7b6bc8e19d3b6efd6c932fff4f7634c2ddb2" name="libxcb-record0" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="f173cf23a640c533fc816ffcc9e8a4becdcc0fb6bbf4aa2bc1d627afc42a0bc1" name="libxcb-record0-32bit" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="5277ecf812c79f2b9fa1b8b63b7ab49b19e0c3383b4ceaba1d77ebd3f8dcbc9f" name="libxcb-render0" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="474cccbbb47ee7fb1989ce88d6f4fd334109979b82a3168a899c9389c56efb06" name="libxcb-render0-32bit" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="15c57a185f2cf2c99bb5f1c01a81d2ec184fcdcf5ee534467ca8ccc969eac655" name="libxcb-res0" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="d53132b5abff3fb691c89585f094ae48deddc592c2385e3ab08b7c2f84d55009" name="libxcb-res0-32bit" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="8ec7a4f54c806a8b05ba4b3abaffc85bd8cd58727f3e7d9fa252329b2d5aceab" name="libxcb-screensaver0" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="f4af44740882b5f7b6f6f438f7e825d0f9d951270c77c7bdc61cb746a594c416" name="libxcb-screensaver0-32bit" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="1171288e7f93e59e9a2d7e744136833a0a2778206b5486793e832d9725bb7419" name="libxcb-shape0" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="1de3ff7599c12f3171e9464087b9254dd666012659f269e08db791dd4f686379" name="libxcb-shape0-32bit" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="eeed9c5a2b9813556a067fd76e5e4d426a3a6d60db55701054b6525b267ba691" name="libxcb-shm0" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="69b5da7d518b82759f7e066fa984a070c91504c071f7328c112fab98c7adc021" name="libxcb-shm0-32bit" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="800e53341ea8f4d05ac16f17422a777a5319427f2b3a2e90ef536f1f678a5f60" name="libxcb-sync1" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="3902e52d73ba619016379e71062c289bd36884dd2a87f90a599a376b194a91d9" name="libxcb-sync1-32bit" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="3a46b100a0d7ac9bdba26c001a1beda3e1f42981d752472a64e19180446630d6" name="libxcb-xf86dri0" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="6264f8f0a62c759c6280a54ed80d0189e4f1dcf69dd8f222588480478dc52f17" name="libxcb-xf86dri0-32bit" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="434253c0d33dece34b5633bd2b974ea36319036e7eee4f34500d790ec4566543" name="libxcb-xfixes0" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="2a241f9f4a01756c11b67d73b724cd7eccb4b1a708a81d8452ec557a1f53aa64" name="libxcb-xfixes0-32bit" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="afa9a2684bd28c9545a92b680e9a7122f46ee5d1c9e897dcb32c4c6f71ee5176" name="libxcb-xinerama0" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="412282f1b9a96549a4f2b41f5b1a2533cc19fd83e21bc61793ec67123bab035d" name="libxcb-xinerama0-32bit" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="8f404f41caf657a2e7a053cfcf059fbd73a669c6c0c26f6ce545eeebfb881f3f" name="libxcb-xinput0" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="7e27045b9eca7b33d52266fc9c4c767058e45f4f9767904569e472c6dc8f340b" name="libxcb-xinput0-32bit" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="ce01b12dbeab93148e4fc4288c24d85dc1c782a8f1a7201d3eee6054a25d1b71" name="libxcb-xkb1" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="6b51af3e0355004dd3dfcf517c2810ce94be42885d71261e45e5fc31232ee435" name="libxcb-xkb1-32bit" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="0430393e88c5822c89e2b37bfca04b4820829b807e3eac4e24d5efdba4ba66fe" name="libxcb-xtest0" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="ed1c04c8a52b823a5b8f01bf51d4a973a62ca3aa1bb3b164389604dcc9089fa1" name="libxcb-xtest0-32bit" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="cb55d283891649410f2359ea4c3c7a6be40ad407847931eb180d97706f686aa6" name="libxcb-xv0" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="1a794339555e1223efd86c807b32dfc5fa974ef69f73c3199a4870a29790ec1f" name="libxcb-xv0-32bit" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="01398cba610471b1486b4186a3b408f2dc186fe56a033fe33302dcffbc2e04f6" name="libxcb-xvmc0" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="c02f21078eb314b44db96790a244fd099cbd6543b707704297761f984da0bb43" name="libxcb-xvmc0-32bit" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="71c6c84a859a2fdc9e0ecb4da0b8a53b75e710a14835ecb9e8c7c833d02ad744" name="libxcb1" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="049a5643a137ccab641a39e8df8613a96655ea261eb87c6748408ff1279fabaa" name="libxcb1-32bit" arch="x86_64">
  <version epoch="0" ver="1.13" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="7361d6564929903f758dfb0e83e3b5ac5ac6ee1e438c39b4efb10ffa49116d89" name="libxfce4ui-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="4.12.0" rel="lp150.5.3.1"/>
  <changelog author="gber@opensuse.org" date="1362916800">- support openSUSE 13.1</changelog>
  <changelog author="gber@opensuse.org" date="1367496000">- follow the exo package changes and rename exo-branding-openSUSE
  to libexo-1-0-branding-openSUSE and move helpers.rc in an
  API-versioned subdirectory</changelog>
  <changelog author="gber@opensuse.org" date="1380974400">- add support for 13.2, drop support for &lt; 12.2</changelog>
  <changelog author="gber@opensuse.org" date="1383048000">- improve suse_version overlay system
- add xfce4-power-manager-branding-openSUSE with default actions
  for button press events and critical battery levels</changelog>
  <changelog author="gber@opensuse.org" date="1398600000">- remove support for openSUSE &lt; 12.3
- add custom theme for xfce4-notifyd</changelog>
  <changelog author="gber@opensuse.org" date="1398945600">- adjust to GTK 3 variant of libxfce4ui</changelog>
  <changelog author="gber@opensuse.org" date="1401710400">- adapt xfce4-power-manager branding to version 1.3.0
- fix typo
- rename source tarball removing the meaningless version</changelog>
  <changelog author="gber@opensuse.org" date="1401796800">- fix critical power action and hdd spindown settings</changelog>
  <changelog author="gber@opensuse.org" date="1406635200">- recommend xfce4-panel-plugin-xfce4battery which is in the panel
  branding</changelog>
  <changelog author="gber@opensuse.org" date="1408622400">- xfce4-panel-plugin-xfce4battery was renamed to
  power-manager-plugin</changelog>
  <changelog author="gber@opensuse.org" date="1425211200">- bump version to 4.12
- lock screen on suspen/hibernate</changelog>
  <changelog author="gber@opensuse.org" date="1427544000">- on &gt;= 13.2 package-manager.desktop was renamed to
  yast2-packager.desktop (boo#892936)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480161600">- adapt to changes in exo package (exo-1 subdir patch removed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480248000">- fix exo-branding provides / obsoletes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507464000">- replace application-menu with whiskermenu
- brand whiskermenu suse style
- require whiskermenu from panel-branding-openSUSE
- fix obsoletes of exo-branding-openSUSE</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507723200">- use plugin-pulseaudio instead of plugin-mixer
- recommend pavucontrol and plugin-pulseaudio instead of xfe4-mixer</changelog>
  <changelog author="florian.koch1981@gmail.com" date="1514462400">- use adwaita-icon-theme instead of gnome-icon-theme
  as fallback icon theme
  The reasons for this change are that Upstream gnome no
  longer uses gnome-icon-theme, and to save space on te Thumbleweed
  rescue CD, requested by DimStar
  https://lists.opensuse.org/opensuse-xfce/2017-05/msg00000.html
- fix /etc/xfce_defaults.conf not declared as %conf</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514894400">- fix spelling of "Adwaita" in index.theme (boo#1074269)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1517745600">- fix openSUSE splash screen</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520424000">- revert last change, branding package has been fixed</changelog>
</package>
<package pkgid="c318ffbb771cc6af154d9e21f9d463712f47501feae80a3dee96c6fbec9015c5" name="libxkbcommon" arch="src">
  <version epoch="0" ver="0.8.2" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1350993600">- Update to first tarball release 0.2.0</changelog>
  <changelog author="jengelh@inai.de" date="1366200000">- Update to new upstream release 0.3.0
  * This introduces the xkb_keymap_new_from_buffer API, relaxes
  restrictions on the xkb_keymap_new_from_names API, introduces
  support for setting default keymaps from the environment, and
  includes several new bugfixes, as well as swathes of testing
  improvements.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1394280000">- Update to new upstream release 0.4.0
  * Add a new add-on library, xkbcommon-x11, to support creating
  keymaps with the XKB X11 protocol, by querying the X server
  directly. See the xkbcommon/xkbcommon-x11.h header file for
  more details. This library requires libxcb-xkb &gt;= 1.10, and
  is enabled by default. It can be disabled with the --disable-x11
  configure switch. Distributions are encouraged to split the
  necessary files for this library (libxkbcommon-x11.so,
  xkbcommon-x11.pc, xkbcommon/xkbcommon-x11.h) to a separate
  package, such that the main package does not depend on
  X11 libraries.
  * Fix the keysym &lt;-&gt; name lookup table to not require huge
  amounts of relocations.
  * Fix a bug in the keysym &lt;-&gt; name lookup, whereby lookup
  might fail in some rare cases.
  * Reduce memory usage during keymap compilation.
  * New API:
  New keysyms from xproto 7.0.25 (German T3 layout keysyms).
  XKB_MOD_NAME_NUM for the usual NumLock modifier.
  xkb_x11_* types and functions, XKB_X11_* constants.
- Add and build new libxkbcommon-x11-0 and libxkbcommon-x11-devel
  packages for openSUSE 13.2 and newer</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1396612800">- Update to new upstream release 0.4.1
  * Added two new functions, xkb_state_key_get_utf{8,32}(). They
  combine the operations of xkb_state_key_get_syms() and
  xkb_keysym_to_utf{8,32}(), and provide a nicer interface for it
  (espcially for multiple-keysyms-per-level).
  * The xkb_state_key_get_utf{8,32}() functions now apply Control
  transformation: when the Control modifier is active, the string
  is converted to an appropriate control character.
  This matches the behavior of libX11's XLookupString(3), and
  required by the XKB specification:
  http://www.x.org/releases/current/doc/kbproto/xkbproto.html#Interpreting_the_Control_Modifier
  fdo#75892
  * The consumed modifiers for a key are now calculated similarly
  to libX11. The previous behavior caused a bug where Shift would
  not cancel an active Caps Lock.
  * Make xkbcommon-x11 work with the keymap reported by the XQuartz
  X server. fdo#75798
  * Reduce memory usage during keymap compilation some more.
  * New API:
  xkb_state_key_get_consumed_mods()
  xkb_state_key_get_utf8()
  xkb_state_key_get_utf32()
  * Deprecated API:
  XKB_MAP_COMPILE_PLACEHOLDER, XKB_MAP_NO_FLAGS
  use XKB_KEYMAP_NO_FLAGS instead.
- Temporary ommit passing --enable-x11 flag, this release has a bug
  that actually disables x11 if explicitly enabled (fixed upstream,
  but used this approach instead of cherry-picking the patch, for
  the sake of avoiding three new BuildRequires &amp; autoreconf)</changelog>
  <changelog author="mlin@suse.com" date="1396958400">- Replace %suse_version &gt;= 1320 to 1315 in order to build -x11 package
  for SLE12</changelog>
  <changelog author="mlin@suse.com" date="1397044800">- Add COPYING and NEWS to files list</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1400673600">- Update to new upstream release 0.4.2
  * Fixed a bug where explicitly passing "--enable-x11" to ./configure
  would in fact disable it (regressed in 0.4.1).
  * Added @since version annotations to the API documentation for everything
  introduced after the initial stable release (0.2.0).
  * Added a section to the documentation about keysym transformations, and
  clarified which functions perform a given transformation.
  * XKB files which fail to compile during keymap construction can no longer
  have any effect on the resulting keymap: changes are only applied when
  the entire compilation succeeds.
  Note: this was a minor correctness issue inherited from xkbcomp.
  * Fix an out-of-bounds array access in src/x11/util.c:adopt_atoms()
  error-handling code.
  Note: it seems impossible to trigger in the current code since the input
  size cannot exceed the required size.
- Add back -enable-x11 flag for 1315+</changelog>
  <changelog author="jengelh@inai.de" date="1406203200">- Add symbol versioning to xkbcommon</changelog>
  <changelog author="dimstar@opensuse.org" date="1408622400">- Update to version 0.4.3:
  + Fixed a bug which caused xkb_x11_keymap_new_from_device() to
    misrepresent  modifiers for some keymaps.
    https://github.com/xkbcommon/libxkbcommon/issues/9
  + Fixed a bug which caused xkb_x11_keymap_new_from_device() to
    ignore XKB PrivateAction's.
  + Modifiers are now always fully resolved after
    xkb_state_update_mask(). Previously the given state components
    were used as-is, without considering virtual modifier mappings.
    Note: this only affects non-standard uses of
    xkb_state_update_mask().
  + Added a test for xkbcommon-x11, "x11comp". The test uses the
    system's Xvfb server and xkbcomp. If they do not exist or fail,
    the test is skipped.
  + Fixed memory leaks after parse errors in the XKB yacc parser.
  + The fix required changes which are currently incompatible with
    byacc.</changelog>
  <changelog author="jengelh@inai.de" date="1410264000">- Switch to library versioning as described in Shared Library
  Packaging guidelines. This permits installation of multiple
  libxkbcommons.</changelog>
  <changelog author="jengelh@inai.de" date="1410436800">- Add commentary about upcoming symbol version support to
  .spec file.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1415016000">- Update to version 0.5.0:
  * Added support for Compose/dead keys in a new module (included in
  libxkbcommon). See the documentation or the
  xkbcommon/xkbcommon-compose.h header file for more details.
  * Improved and reordered some sections of the documentation.
  * The doxygen HTML pages were made nicer to read.
  * Most tests now run also on non-linux platforms.
  * A warning is emitted by default about RMLVO values which are not
  used during keymap compilation, which are most often a user
  misconfiguration. For example, "terminate:ctrl_alt_backspace"
  instead of "terminate:ctrl_alt_bksp".
  * Added symbol versioning for libxkbcommon and libxkbcommon-x11.
  Note: binaries compiled against this and future versions will not
  be able to link against the previous versions of the library.
  * Removed several compatablity symbols from the binary (the API
  isn't affected). This affects binaries which:
  1. Were compiled against a pre-stable (&lt;0.2.0) version of
  libxkbcommon, and
  2. Are linked against the this or later version of libxkbcommon.
  Such a scenario is likely to fail already.
  * If Xvfb is not available, the x11comp test is now correctly
  skipped instead of hanging.
  * Benchmarks were moved to a separate bench/ directory.
  * Build fixes from OpenBSD.
  * Fixed a bug where key type entries such as "map[None] = Level2;"
  were ignored.
  * New API:
  XKB_COMPOSE_*
  xkb_compose_*</changelog>
  <changelog author="mlin@suse.com" date="1446465600">- Requires xkeyboard-config, bsc#952403
  * libxkbcommon should brings xkeyboard-config together always as
    libxkbcommon does not distribute xkb data itself, and especially
    requires xkeyboard-config for any rely on libxkbcommon in the
    minimal system.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460116800">- Update to version 0.6.1:
  * Add LICENSE to distributed files in tarball releases.
  * Minor typo fix in xkb_keymap_get_as_string() documentation.
- Changes from version 0.6.0:
  * If the XKB_CONFIG_ROOT environment variable is set, it is used
    as the XKB configuration root instead of the path determined at
    build time.
  * Tests and benchmarks now build correctly on OSX.
  * An XKB keymap provides a name for each key it defines.
    Traditionally these names are limited to at most 4 characters,
    and are thus somewhat obscure, but might still be useful
    (xkbcommon lifts the 4 character limit).
  * The new functions xkb_keymap_key_get_name() and
    xkb_keymap_key_by_name() can be used to get the name of a key
    or find a key by name. Note that a key may have aliases.
  * Documentation improvements.
  * New API:
    + xkb_keymap_key_by_name().
    + xkb_keymap_key_get_name().</changelog>
  <changelog author="jengelh@inai.de" date="1478865600">- Update to new upstream release 0.7.0
  * Added support for different "modes" of calculating consumed
    modifiers. The existing mode, based on the XKB standard, has
    proven to be unintuitive in various shortcut implementations.
  * A new mode, based on the calculation used by the GTK toolkit,
    is added. This mode is less eager to declare a modifier as
    consumed.</changelog>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
</package>
<package pkgid="45b885fd2a808962d216aa00f57257c78b34872bc36a84be9c7ca023d99e2359" name="libxkbcommon-devel" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1350993600">- Update to first tarball release 0.2.0</changelog>
  <changelog author="jengelh@inai.de" date="1366200000">- Update to new upstream release 0.3.0
  * This introduces the xkb_keymap_new_from_buffer API, relaxes
  restrictions on the xkb_keymap_new_from_names API, introduces
  support for setting default keymaps from the environment, and
  includes several new bugfixes, as well as swathes of testing
  improvements.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1394280000">- Update to new upstream release 0.4.0
  * Add a new add-on library, xkbcommon-x11, to support creating
  keymaps with the XKB X11 protocol, by querying the X server
  directly. See the xkbcommon/xkbcommon-x11.h header file for
  more details. This library requires libxcb-xkb &gt;= 1.10, and
  is enabled by default. It can be disabled with the --disable-x11
  configure switch. Distributions are encouraged to split the
  necessary files for this library (libxkbcommon-x11.so,
  xkbcommon-x11.pc, xkbcommon/xkbcommon-x11.h) to a separate
  package, such that the main package does not depend on
  X11 libraries.
  * Fix the keysym &lt;-&gt; name lookup table to not require huge
  amounts of relocations.
  * Fix a bug in the keysym &lt;-&gt; name lookup, whereby lookup
  might fail in some rare cases.
  * Reduce memory usage during keymap compilation.
  * New API:
  New keysyms from xproto 7.0.25 (German T3 layout keysyms).
  XKB_MOD_NAME_NUM for the usual NumLock modifier.
  xkb_x11_* types and functions, XKB_X11_* constants.
- Add and build new libxkbcommon-x11-0 and libxkbcommon-x11-devel
  packages for openSUSE 13.2 and newer</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1396612800">- Update to new upstream release 0.4.1
  * Added two new functions, xkb_state_key_get_utf{8,32}(). They
  combine the operations of xkb_state_key_get_syms() and
  xkb_keysym_to_utf{8,32}(), and provide a nicer interface for it
  (espcially for multiple-keysyms-per-level).
  * The xkb_state_key_get_utf{8,32}() functions now apply Control
  transformation: when the Control modifier is active, the string
  is converted to an appropriate control character.
  This matches the behavior of libX11's XLookupString(3), and
  required by the XKB specification:
  http://www.x.org/releases/current/doc/kbproto/xkbproto.html#Interpreting_the_Control_Modifier
  fdo#75892
  * The consumed modifiers for a key are now calculated similarly
  to libX11. The previous behavior caused a bug where Shift would
  not cancel an active Caps Lock.
  * Make xkbcommon-x11 work with the keymap reported by the XQuartz
  X server. fdo#75798
  * Reduce memory usage during keymap compilation some more.
  * New API:
  xkb_state_key_get_consumed_mods()
  xkb_state_key_get_utf8()
  xkb_state_key_get_utf32()
  * Deprecated API:
  XKB_MAP_COMPILE_PLACEHOLDER, XKB_MAP_NO_FLAGS
  use XKB_KEYMAP_NO_FLAGS instead.
- Temporary ommit passing --enable-x11 flag, this release has a bug
  that actually disables x11 if explicitly enabled (fixed upstream,
  but used this approach instead of cherry-picking the patch, for
  the sake of avoiding three new BuildRequires &amp; autoreconf)</changelog>
  <changelog author="mlin@suse.com" date="1396958400">- Replace %suse_version &gt;= 1320 to 1315 in order to build -x11 package
  for SLE12</changelog>
  <changelog author="mlin@suse.com" date="1397044800">- Add COPYING and NEWS to files list</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1400673600">- Update to new upstream release 0.4.2
  * Fixed a bug where explicitly passing "--enable-x11" to ./configure
  would in fact disable it (regressed in 0.4.1).
  * Added @since version annotations to the API documentation for everything
  introduced after the initial stable release (0.2.0).
  * Added a section to the documentation about keysym transformations, and
  clarified which functions perform a given transformation.
  * XKB files which fail to compile during keymap construction can no longer
  have any effect on the resulting keymap: changes are only applied when
  the entire compilation succeeds.
  Note: this was a minor correctness issue inherited from xkbcomp.
  * Fix an out-of-bounds array access in src/x11/util.c:adopt_atoms()
  error-handling code.
  Note: it seems impossible to trigger in the current code since the input
  size cannot exceed the required size.
- Add back -enable-x11 flag for 1315+</changelog>
  <changelog author="jengelh@inai.de" date="1406203200">- Add symbol versioning to xkbcommon</changelog>
  <changelog author="dimstar@opensuse.org" date="1408622400">- Update to version 0.4.3:
  + Fixed a bug which caused xkb_x11_keymap_new_from_device() to
    misrepresent  modifiers for some keymaps.
    https://github.com/xkbcommon/libxkbcommon/issues/9
  + Fixed a bug which caused xkb_x11_keymap_new_from_device() to
    ignore XKB PrivateAction's.
  + Modifiers are now always fully resolved after
    xkb_state_update_mask(). Previously the given state components
    were used as-is, without considering virtual modifier mappings.
    Note: this only affects non-standard uses of
    xkb_state_update_mask().
  + Added a test for xkbcommon-x11, "x11comp". The test uses the
    system's Xvfb server and xkbcomp. If they do not exist or fail,
    the test is skipped.
  + Fixed memory leaks after parse errors in the XKB yacc parser.
  + The fix required changes which are currently incompatible with
    byacc.</changelog>
  <changelog author="jengelh@inai.de" date="1410264000">- Switch to library versioning as described in Shared Library
  Packaging guidelines. This permits installation of multiple
  libxkbcommons.</changelog>
  <changelog author="jengelh@inai.de" date="1410436800">- Add commentary about upcoming symbol version support to
  .spec file.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1415016000">- Update to version 0.5.0:
  * Added support for Compose/dead keys in a new module (included in
  libxkbcommon). See the documentation or the
  xkbcommon/xkbcommon-compose.h header file for more details.
  * Improved and reordered some sections of the documentation.
  * The doxygen HTML pages were made nicer to read.
  * Most tests now run also on non-linux platforms.
  * A warning is emitted by default about RMLVO values which are not
  used during keymap compilation, which are most often a user
  misconfiguration. For example, "terminate:ctrl_alt_backspace"
  instead of "terminate:ctrl_alt_bksp".
  * Added symbol versioning for libxkbcommon and libxkbcommon-x11.
  Note: binaries compiled against this and future versions will not
  be able to link against the previous versions of the library.
  * Removed several compatablity symbols from the binary (the API
  isn't affected). This affects binaries which:
  1. Were compiled against a pre-stable (&lt;0.2.0) version of
  libxkbcommon, and
  2. Are linked against the this or later version of libxkbcommon.
  Such a scenario is likely to fail already.
  * If Xvfb is not available, the x11comp test is now correctly
  skipped instead of hanging.
  * Benchmarks were moved to a separate bench/ directory.
  * Build fixes from OpenBSD.
  * Fixed a bug where key type entries such as "map[None] = Level2;"
  were ignored.
  * New API:
  XKB_COMPOSE_*
  xkb_compose_*</changelog>
  <changelog author="mlin@suse.com" date="1446465600">- Requires xkeyboard-config, bsc#952403
  * libxkbcommon should brings xkeyboard-config together always as
    libxkbcommon does not distribute xkb data itself, and especially
    requires xkeyboard-config for any rely on libxkbcommon in the
    minimal system.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460116800">- Update to version 0.6.1:
  * Add LICENSE to distributed files in tarball releases.
  * Minor typo fix in xkb_keymap_get_as_string() documentation.
- Changes from version 0.6.0:
  * If the XKB_CONFIG_ROOT environment variable is set, it is used
    as the XKB configuration root instead of the path determined at
    build time.
  * Tests and benchmarks now build correctly on OSX.
  * An XKB keymap provides a name for each key it defines.
    Traditionally these names are limited to at most 4 characters,
    and are thus somewhat obscure, but might still be useful
    (xkbcommon lifts the 4 character limit).
  * The new functions xkb_keymap_key_get_name() and
    xkb_keymap_key_by_name() can be used to get the name of a key
    or find a key by name. Note that a key may have aliases.
  * Documentation improvements.
  * New API:
    + xkb_keymap_key_by_name().
    + xkb_keymap_key_get_name().</changelog>
  <changelog author="jengelh@inai.de" date="1478865600">- Update to new upstream release 0.7.0
  * Added support for different "modes" of calculating consumed
    modifiers. The existing mode, based on the XKB standard, has
    proven to be unintuitive in various shortcut implementations.
  * A new mode, based on the calculation used by the GTK toolkit,
    is added. This mode is less eager to declare a modifier as
    consumed.</changelog>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
</package>
<package pkgid="ee1f623f483e29731bdf81f4eef5a739cda5421a7ddae22fc8c79d389fb079ee" name="libxkbcommon-devel-32bit" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1350993600">- Update to first tarball release 0.2.0</changelog>
  <changelog author="jengelh@inai.de" date="1366200000">- Update to new upstream release 0.3.0
  * This introduces the xkb_keymap_new_from_buffer API, relaxes
  restrictions on the xkb_keymap_new_from_names API, introduces
  support for setting default keymaps from the environment, and
  includes several new bugfixes, as well as swathes of testing
  improvements.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1394280000">- Update to new upstream release 0.4.0
  * Add a new add-on library, xkbcommon-x11, to support creating
  keymaps with the XKB X11 protocol, by querying the X server
  directly. See the xkbcommon/xkbcommon-x11.h header file for
  more details. This library requires libxcb-xkb &gt;= 1.10, and
  is enabled by default. It can be disabled with the --disable-x11
  configure switch. Distributions are encouraged to split the
  necessary files for this library (libxkbcommon-x11.so,
  xkbcommon-x11.pc, xkbcommon/xkbcommon-x11.h) to a separate
  package, such that the main package does not depend on
  X11 libraries.
  * Fix the keysym &lt;-&gt; name lookup table to not require huge
  amounts of relocations.
  * Fix a bug in the keysym &lt;-&gt; name lookup, whereby lookup
  might fail in some rare cases.
  * Reduce memory usage during keymap compilation.
  * New API:
  New keysyms from xproto 7.0.25 (German T3 layout keysyms).
  XKB_MOD_NAME_NUM for the usual NumLock modifier.
  xkb_x11_* types and functions, XKB_X11_* constants.
- Add and build new libxkbcommon-x11-0 and libxkbcommon-x11-devel
  packages for openSUSE 13.2 and newer</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1396612800">- Update to new upstream release 0.4.1
  * Added two new functions, xkb_state_key_get_utf{8,32}(). They
  combine the operations of xkb_state_key_get_syms() and
  xkb_keysym_to_utf{8,32}(), and provide a nicer interface for it
  (espcially for multiple-keysyms-per-level).
  * The xkb_state_key_get_utf{8,32}() functions now apply Control
  transformation: when the Control modifier is active, the string
  is converted to an appropriate control character.
  This matches the behavior of libX11's XLookupString(3), and
  required by the XKB specification:
  http://www.x.org/releases/current/doc/kbproto/xkbproto.html#Interpreting_the_Control_Modifier
  fdo#75892
  * The consumed modifiers for a key are now calculated similarly
  to libX11. The previous behavior caused a bug where Shift would
  not cancel an active Caps Lock.
  * Make xkbcommon-x11 work with the keymap reported by the XQuartz
  X server. fdo#75798
  * Reduce memory usage during keymap compilation some more.
  * New API:
  xkb_state_key_get_consumed_mods()
  xkb_state_key_get_utf8()
  xkb_state_key_get_utf32()
  * Deprecated API:
  XKB_MAP_COMPILE_PLACEHOLDER, XKB_MAP_NO_FLAGS
  use XKB_KEYMAP_NO_FLAGS instead.
- Temporary ommit passing --enable-x11 flag, this release has a bug
  that actually disables x11 if explicitly enabled (fixed upstream,
  but used this approach instead of cherry-picking the patch, for
  the sake of avoiding three new BuildRequires &amp; autoreconf)</changelog>
  <changelog author="mlin@suse.com" date="1396958400">- Replace %suse_version &gt;= 1320 to 1315 in order to build -x11 package
  for SLE12</changelog>
  <changelog author="mlin@suse.com" date="1397044800">- Add COPYING and NEWS to files list</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1400673600">- Update to new upstream release 0.4.2
  * Fixed a bug where explicitly passing "--enable-x11" to ./configure
  would in fact disable it (regressed in 0.4.1).
  * Added @since version annotations to the API documentation for everything
  introduced after the initial stable release (0.2.0).
  * Added a section to the documentation about keysym transformations, and
  clarified which functions perform a given transformation.
  * XKB files which fail to compile during keymap construction can no longer
  have any effect on the resulting keymap: changes are only applied when
  the entire compilation succeeds.
  Note: this was a minor correctness issue inherited from xkbcomp.
  * Fix an out-of-bounds array access in src/x11/util.c:adopt_atoms()
  error-handling code.
  Note: it seems impossible to trigger in the current code since the input
  size cannot exceed the required size.
- Add back -enable-x11 flag for 1315+</changelog>
  <changelog author="jengelh@inai.de" date="1406203200">- Add symbol versioning to xkbcommon</changelog>
  <changelog author="dimstar@opensuse.org" date="1408622400">- Update to version 0.4.3:
  + Fixed a bug which caused xkb_x11_keymap_new_from_device() to
    misrepresent  modifiers for some keymaps.
    https://github.com/xkbcommon/libxkbcommon/issues/9
  + Fixed a bug which caused xkb_x11_keymap_new_from_device() to
    ignore XKB PrivateAction's.
  + Modifiers are now always fully resolved after
    xkb_state_update_mask(). Previously the given state components
    were used as-is, without considering virtual modifier mappings.
    Note: this only affects non-standard uses of
    xkb_state_update_mask().
  + Added a test for xkbcommon-x11, "x11comp". The test uses the
    system's Xvfb server and xkbcomp. If they do not exist or fail,
    the test is skipped.
  + Fixed memory leaks after parse errors in the XKB yacc parser.
  + The fix required changes which are currently incompatible with
    byacc.</changelog>
  <changelog author="jengelh@inai.de" date="1410264000">- Switch to library versioning as described in Shared Library
  Packaging guidelines. This permits installation of multiple
  libxkbcommons.</changelog>
  <changelog author="jengelh@inai.de" date="1410436800">- Add commentary about upcoming symbol version support to
  .spec file.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1415016000">- Update to version 0.5.0:
  * Added support for Compose/dead keys in a new module (included in
  libxkbcommon). See the documentation or the
  xkbcommon/xkbcommon-compose.h header file for more details.
  * Improved and reordered some sections of the documentation.
  * The doxygen HTML pages were made nicer to read.
  * Most tests now run also on non-linux platforms.
  * A warning is emitted by default about RMLVO values which are not
  used during keymap compilation, which are most often a user
  misconfiguration. For example, "terminate:ctrl_alt_backspace"
  instead of "terminate:ctrl_alt_bksp".
  * Added symbol versioning for libxkbcommon and libxkbcommon-x11.
  Note: binaries compiled against this and future versions will not
  be able to link against the previous versions of the library.
  * Removed several compatablity symbols from the binary (the API
  isn't affected). This affects binaries which:
  1. Were compiled against a pre-stable (&lt;0.2.0) version of
  libxkbcommon, and
  2. Are linked against the this or later version of libxkbcommon.
  Such a scenario is likely to fail already.
  * If Xvfb is not available, the x11comp test is now correctly
  skipped instead of hanging.
  * Benchmarks were moved to a separate bench/ directory.
  * Build fixes from OpenBSD.
  * Fixed a bug where key type entries such as "map[None] = Level2;"
  were ignored.
  * New API:
  XKB_COMPOSE_*
  xkb_compose_*</changelog>
  <changelog author="mlin@suse.com" date="1446465600">- Requires xkeyboard-config, bsc#952403
  * libxkbcommon should brings xkeyboard-config together always as
    libxkbcommon does not distribute xkb data itself, and especially
    requires xkeyboard-config for any rely on libxkbcommon in the
    minimal system.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460116800">- Update to version 0.6.1:
  * Add LICENSE to distributed files in tarball releases.
  * Minor typo fix in xkb_keymap_get_as_string() documentation.
- Changes from version 0.6.0:
  * If the XKB_CONFIG_ROOT environment variable is set, it is used
    as the XKB configuration root instead of the path determined at
    build time.
  * Tests and benchmarks now build correctly on OSX.
  * An XKB keymap provides a name for each key it defines.
    Traditionally these names are limited to at most 4 characters,
    and are thus somewhat obscure, but might still be useful
    (xkbcommon lifts the 4 character limit).
  * The new functions xkb_keymap_key_get_name() and
    xkb_keymap_key_by_name() can be used to get the name of a key
    or find a key by name. Note that a key may have aliases.
  * Documentation improvements.
  * New API:
    + xkb_keymap_key_by_name().
    + xkb_keymap_key_get_name().</changelog>
  <changelog author="jengelh@inai.de" date="1478865600">- Update to new upstream release 0.7.0
  * Added support for different "modes" of calculating consumed
    modifiers. The existing mode, based on the XKB standard, has
    proven to be unintuitive in various shortcut implementations.
  * A new mode, based on the calculation used by the GTK toolkit,
    is added. This mode is less eager to declare a modifier as
    consumed.</changelog>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
</package>
<package pkgid="13bb8a470200c4b7ae7a56980c92d7a3f5ae523273eb7d8efae36f32c759d57b" name="libxkbcommon-x11-0" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1350993600">- Update to first tarball release 0.2.0</changelog>
  <changelog author="jengelh@inai.de" date="1366200000">- Update to new upstream release 0.3.0
  * This introduces the xkb_keymap_new_from_buffer API, relaxes
  restrictions on the xkb_keymap_new_from_names API, introduces
  support for setting default keymaps from the environment, and
  includes several new bugfixes, as well as swathes of testing
  improvements.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1394280000">- Update to new upstream release 0.4.0
  * Add a new add-on library, xkbcommon-x11, to support creating
  keymaps with the XKB X11 protocol, by querying the X server
  directly. See the xkbcommon/xkbcommon-x11.h header file for
  more details. This library requires libxcb-xkb &gt;= 1.10, and
  is enabled by default. It can be disabled with the --disable-x11
  configure switch. Distributions are encouraged to split the
  necessary files for this library (libxkbcommon-x11.so,
  xkbcommon-x11.pc, xkbcommon/xkbcommon-x11.h) to a separate
  package, such that the main package does not depend on
  X11 libraries.
  * Fix the keysym &lt;-&gt; name lookup table to not require huge
  amounts of relocations.
  * Fix a bug in the keysym &lt;-&gt; name lookup, whereby lookup
  might fail in some rare cases.
  * Reduce memory usage during keymap compilation.
  * New API:
  New keysyms from xproto 7.0.25 (German T3 layout keysyms).
  XKB_MOD_NAME_NUM for the usual NumLock modifier.
  xkb_x11_* types and functions, XKB_X11_* constants.
- Add and build new libxkbcommon-x11-0 and libxkbcommon-x11-devel
  packages for openSUSE 13.2 and newer</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1396612800">- Update to new upstream release 0.4.1
  * Added two new functions, xkb_state_key_get_utf{8,32}(). They
  combine the operations of xkb_state_key_get_syms() and
  xkb_keysym_to_utf{8,32}(), and provide a nicer interface for it
  (espcially for multiple-keysyms-per-level).
  * The xkb_state_key_get_utf{8,32}() functions now apply Control
  transformation: when the Control modifier is active, the string
  is converted to an appropriate control character.
  This matches the behavior of libX11's XLookupString(3), and
  required by the XKB specification:
  http://www.x.org/releases/current/doc/kbproto/xkbproto.html#Interpreting_the_Control_Modifier
  fdo#75892
  * The consumed modifiers for a key are now calculated similarly
  to libX11. The previous behavior caused a bug where Shift would
  not cancel an active Caps Lock.
  * Make xkbcommon-x11 work with the keymap reported by the XQuartz
  X server. fdo#75798
  * Reduce memory usage during keymap compilation some more.
  * New API:
  xkb_state_key_get_consumed_mods()
  xkb_state_key_get_utf8()
  xkb_state_key_get_utf32()
  * Deprecated API:
  XKB_MAP_COMPILE_PLACEHOLDER, XKB_MAP_NO_FLAGS
  use XKB_KEYMAP_NO_FLAGS instead.
- Temporary ommit passing --enable-x11 flag, this release has a bug
  that actually disables x11 if explicitly enabled (fixed upstream,
  but used this approach instead of cherry-picking the patch, for
  the sake of avoiding three new BuildRequires &amp; autoreconf)</changelog>
  <changelog author="mlin@suse.com" date="1396958400">- Replace %suse_version &gt;= 1320 to 1315 in order to build -x11 package
  for SLE12</changelog>
  <changelog author="mlin@suse.com" date="1397044800">- Add COPYING and NEWS to files list</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1400673600">- Update to new upstream release 0.4.2
  * Fixed a bug where explicitly passing "--enable-x11" to ./configure
  would in fact disable it (regressed in 0.4.1).
  * Added @since version annotations to the API documentation for everything
  introduced after the initial stable release (0.2.0).
  * Added a section to the documentation about keysym transformations, and
  clarified which functions perform a given transformation.
  * XKB files which fail to compile during keymap construction can no longer
  have any effect on the resulting keymap: changes are only applied when
  the entire compilation succeeds.
  Note: this was a minor correctness issue inherited from xkbcomp.
  * Fix an out-of-bounds array access in src/x11/util.c:adopt_atoms()
  error-handling code.
  Note: it seems impossible to trigger in the current code since the input
  size cannot exceed the required size.
- Add back -enable-x11 flag for 1315+</changelog>
  <changelog author="jengelh@inai.de" date="1406203200">- Add symbol versioning to xkbcommon</changelog>
  <changelog author="dimstar@opensuse.org" date="1408622400">- Update to version 0.4.3:
  + Fixed a bug which caused xkb_x11_keymap_new_from_device() to
    misrepresent  modifiers for some keymaps.
    https://github.com/xkbcommon/libxkbcommon/issues/9
  + Fixed a bug which caused xkb_x11_keymap_new_from_device() to
    ignore XKB PrivateAction's.
  + Modifiers are now always fully resolved after
    xkb_state_update_mask(). Previously the given state components
    were used as-is, without considering virtual modifier mappings.
    Note: this only affects non-standard uses of
    xkb_state_update_mask().
  + Added a test for xkbcommon-x11, "x11comp". The test uses the
    system's Xvfb server and xkbcomp. If they do not exist or fail,
    the test is skipped.
  + Fixed memory leaks after parse errors in the XKB yacc parser.
  + The fix required changes which are currently incompatible with
    byacc.</changelog>
  <changelog author="jengelh@inai.de" date="1410264000">- Switch to library versioning as described in Shared Library
  Packaging guidelines. This permits installation of multiple
  libxkbcommons.</changelog>
  <changelog author="jengelh@inai.de" date="1410436800">- Add commentary about upcoming symbol version support to
  .spec file.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1415016000">- Update to version 0.5.0:
  * Added support for Compose/dead keys in a new module (included in
  libxkbcommon). See the documentation or the
  xkbcommon/xkbcommon-compose.h header file for more details.
  * Improved and reordered some sections of the documentation.
  * The doxygen HTML pages were made nicer to read.
  * Most tests now run also on non-linux platforms.
  * A warning is emitted by default about RMLVO values which are not
  used during keymap compilation, which are most often a user
  misconfiguration. For example, "terminate:ctrl_alt_backspace"
  instead of "terminate:ctrl_alt_bksp".
  * Added symbol versioning for libxkbcommon and libxkbcommon-x11.
  Note: binaries compiled against this and future versions will not
  be able to link against the previous versions of the library.
  * Removed several compatablity symbols from the binary (the API
  isn't affected). This affects binaries which:
  1. Were compiled against a pre-stable (&lt;0.2.0) version of
  libxkbcommon, and
  2. Are linked against the this or later version of libxkbcommon.
  Such a scenario is likely to fail already.
  * If Xvfb is not available, the x11comp test is now correctly
  skipped instead of hanging.
  * Benchmarks were moved to a separate bench/ directory.
  * Build fixes from OpenBSD.
  * Fixed a bug where key type entries such as "map[None] = Level2;"
  were ignored.
  * New API:
  XKB_COMPOSE_*
  xkb_compose_*</changelog>
  <changelog author="mlin@suse.com" date="1446465600">- Requires xkeyboard-config, bsc#952403
  * libxkbcommon should brings xkeyboard-config together always as
    libxkbcommon does not distribute xkb data itself, and especially
    requires xkeyboard-config for any rely on libxkbcommon in the
    minimal system.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460116800">- Update to version 0.6.1:
  * Add LICENSE to distributed files in tarball releases.
  * Minor typo fix in xkb_keymap_get_as_string() documentation.
- Changes from version 0.6.0:
  * If the XKB_CONFIG_ROOT environment variable is set, it is used
    as the XKB configuration root instead of the path determined at
    build time.
  * Tests and benchmarks now build correctly on OSX.
  * An XKB keymap provides a name for each key it defines.
    Traditionally these names are limited to at most 4 characters,
    and are thus somewhat obscure, but might still be useful
    (xkbcommon lifts the 4 character limit).
  * The new functions xkb_keymap_key_get_name() and
    xkb_keymap_key_by_name() can be used to get the name of a key
    or find a key by name. Note that a key may have aliases.
  * Documentation improvements.
  * New API:
    + xkb_keymap_key_by_name().
    + xkb_keymap_key_get_name().</changelog>
  <changelog author="jengelh@inai.de" date="1478865600">- Update to new upstream release 0.7.0
  * Added support for different "modes" of calculating consumed
    modifiers. The existing mode, based on the XKB standard, has
    proven to be unintuitive in various shortcut implementations.
  * A new mode, based on the calculation used by the GTK toolkit,
    is added. This mode is less eager to declare a modifier as
    consumed.</changelog>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
</package>
<package pkgid="b5a3a909be216d68a0865a8db48b5c6536d1198b1aa956572451b57307e158f3" name="libxkbcommon-x11-0-32bit" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1350993600">- Update to first tarball release 0.2.0</changelog>
  <changelog author="jengelh@inai.de" date="1366200000">- Update to new upstream release 0.3.0
  * This introduces the xkb_keymap_new_from_buffer API, relaxes
  restrictions on the xkb_keymap_new_from_names API, introduces
  support for setting default keymaps from the environment, and
  includes several new bugfixes, as well as swathes of testing
  improvements.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1394280000">- Update to new upstream release 0.4.0
  * Add a new add-on library, xkbcommon-x11, to support creating
  keymaps with the XKB X11 protocol, by querying the X server
  directly. See the xkbcommon/xkbcommon-x11.h header file for
  more details. This library requires libxcb-xkb &gt;= 1.10, and
  is enabled by default. It can be disabled with the --disable-x11
  configure switch. Distributions are encouraged to split the
  necessary files for this library (libxkbcommon-x11.so,
  xkbcommon-x11.pc, xkbcommon/xkbcommon-x11.h) to a separate
  package, such that the main package does not depend on
  X11 libraries.
  * Fix the keysym &lt;-&gt; name lookup table to not require huge
  amounts of relocations.
  * Fix a bug in the keysym &lt;-&gt; name lookup, whereby lookup
  might fail in some rare cases.
  * Reduce memory usage during keymap compilation.
  * New API:
  New keysyms from xproto 7.0.25 (German T3 layout keysyms).
  XKB_MOD_NAME_NUM for the usual NumLock modifier.
  xkb_x11_* types and functions, XKB_X11_* constants.
- Add and build new libxkbcommon-x11-0 and libxkbcommon-x11-devel
  packages for openSUSE 13.2 and newer</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1396612800">- Update to new upstream release 0.4.1
  * Added two new functions, xkb_state_key_get_utf{8,32}(). They
  combine the operations of xkb_state_key_get_syms() and
  xkb_keysym_to_utf{8,32}(), and provide a nicer interface for it
  (espcially for multiple-keysyms-per-level).
  * The xkb_state_key_get_utf{8,32}() functions now apply Control
  transformation: when the Control modifier is active, the string
  is converted to an appropriate control character.
  This matches the behavior of libX11's XLookupString(3), and
  required by the XKB specification:
  http://www.x.org/releases/current/doc/kbproto/xkbproto.html#Interpreting_the_Control_Modifier
  fdo#75892
  * The consumed modifiers for a key are now calculated similarly
  to libX11. The previous behavior caused a bug where Shift would
  not cancel an active Caps Lock.
  * Make xkbcommon-x11 work with the keymap reported by the XQuartz
  X server. fdo#75798
  * Reduce memory usage during keymap compilation some more.
  * New API:
  xkb_state_key_get_consumed_mods()
  xkb_state_key_get_utf8()
  xkb_state_key_get_utf32()
  * Deprecated API:
  XKB_MAP_COMPILE_PLACEHOLDER, XKB_MAP_NO_FLAGS
  use XKB_KEYMAP_NO_FLAGS instead.
- Temporary ommit passing --enable-x11 flag, this release has a bug
  that actually disables x11 if explicitly enabled (fixed upstream,
  but used this approach instead of cherry-picking the patch, for
  the sake of avoiding three new BuildRequires &amp; autoreconf)</changelog>
  <changelog author="mlin@suse.com" date="1396958400">- Replace %suse_version &gt;= 1320 to 1315 in order to build -x11 package
  for SLE12</changelog>
  <changelog author="mlin@suse.com" date="1397044800">- Add COPYING and NEWS to files list</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1400673600">- Update to new upstream release 0.4.2
  * Fixed a bug where explicitly passing "--enable-x11" to ./configure
  would in fact disable it (regressed in 0.4.1).
  * Added @since version annotations to the API documentation for everything
  introduced after the initial stable release (0.2.0).
  * Added a section to the documentation about keysym transformations, and
  clarified which functions perform a given transformation.
  * XKB files which fail to compile during keymap construction can no longer
  have any effect on the resulting keymap: changes are only applied when
  the entire compilation succeeds.
  Note: this was a minor correctness issue inherited from xkbcomp.
  * Fix an out-of-bounds array access in src/x11/util.c:adopt_atoms()
  error-handling code.
  Note: it seems impossible to trigger in the current code since the input
  size cannot exceed the required size.
- Add back -enable-x11 flag for 1315+</changelog>
  <changelog author="jengelh@inai.de" date="1406203200">- Add symbol versioning to xkbcommon</changelog>
  <changelog author="dimstar@opensuse.org" date="1408622400">- Update to version 0.4.3:
  + Fixed a bug which caused xkb_x11_keymap_new_from_device() to
    misrepresent  modifiers for some keymaps.
    https://github.com/xkbcommon/libxkbcommon/issues/9
  + Fixed a bug which caused xkb_x11_keymap_new_from_device() to
    ignore XKB PrivateAction's.
  + Modifiers are now always fully resolved after
    xkb_state_update_mask(). Previously the given state components
    were used as-is, without considering virtual modifier mappings.
    Note: this only affects non-standard uses of
    xkb_state_update_mask().
  + Added a test for xkbcommon-x11, "x11comp". The test uses the
    system's Xvfb server and xkbcomp. If they do not exist or fail,
    the test is skipped.
  + Fixed memory leaks after parse errors in the XKB yacc parser.
  + The fix required changes which are currently incompatible with
    byacc.</changelog>
  <changelog author="jengelh@inai.de" date="1410264000">- Switch to library versioning as described in Shared Library
  Packaging guidelines. This permits installation of multiple
  libxkbcommons.</changelog>
  <changelog author="jengelh@inai.de" date="1410436800">- Add commentary about upcoming symbol version support to
  .spec file.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1415016000">- Update to version 0.5.0:
  * Added support for Compose/dead keys in a new module (included in
  libxkbcommon). See the documentation or the
  xkbcommon/xkbcommon-compose.h header file for more details.
  * Improved and reordered some sections of the documentation.
  * The doxygen HTML pages were made nicer to read.
  * Most tests now run also on non-linux platforms.
  * A warning is emitted by default about RMLVO values which are not
  used during keymap compilation, which are most often a user
  misconfiguration. For example, "terminate:ctrl_alt_backspace"
  instead of "terminate:ctrl_alt_bksp".
  * Added symbol versioning for libxkbcommon and libxkbcommon-x11.
  Note: binaries compiled against this and future versions will not
  be able to link against the previous versions of the library.
  * Removed several compatablity symbols from the binary (the API
  isn't affected). This affects binaries which:
  1. Were compiled against a pre-stable (&lt;0.2.0) version of
  libxkbcommon, and
  2. Are linked against the this or later version of libxkbcommon.
  Such a scenario is likely to fail already.
  * If Xvfb is not available, the x11comp test is now correctly
  skipped instead of hanging.
  * Benchmarks were moved to a separate bench/ directory.
  * Build fixes from OpenBSD.
  * Fixed a bug where key type entries such as "map[None] = Level2;"
  were ignored.
  * New API:
  XKB_COMPOSE_*
  xkb_compose_*</changelog>
  <changelog author="mlin@suse.com" date="1446465600">- Requires xkeyboard-config, bsc#952403
  * libxkbcommon should brings xkeyboard-config together always as
    libxkbcommon does not distribute xkb data itself, and especially
    requires xkeyboard-config for any rely on libxkbcommon in the
    minimal system.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460116800">- Update to version 0.6.1:
  * Add LICENSE to distributed files in tarball releases.
  * Minor typo fix in xkb_keymap_get_as_string() documentation.
- Changes from version 0.6.0:
  * If the XKB_CONFIG_ROOT environment variable is set, it is used
    as the XKB configuration root instead of the path determined at
    build time.
  * Tests and benchmarks now build correctly on OSX.
  * An XKB keymap provides a name for each key it defines.
    Traditionally these names are limited to at most 4 characters,
    and are thus somewhat obscure, but might still be useful
    (xkbcommon lifts the 4 character limit).
  * The new functions xkb_keymap_key_get_name() and
    xkb_keymap_key_by_name() can be used to get the name of a key
    or find a key by name. Note that a key may have aliases.
  * Documentation improvements.
  * New API:
    + xkb_keymap_key_by_name().
    + xkb_keymap_key_get_name().</changelog>
  <changelog author="jengelh@inai.de" date="1478865600">- Update to new upstream release 0.7.0
  * Added support for different "modes" of calculating consumed
    modifiers. The existing mode, based on the XKB standard, has
    proven to be unintuitive in various shortcut implementations.
  * A new mode, based on the calculation used by the GTK toolkit,
    is added. This mode is less eager to declare a modifier as
    consumed.</changelog>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
</package>
<package pkgid="0d7cfad4e46cc1fd586252006e28390d1f586b34764dd2ebcd837cb0a395df74" name="libxkbcommon-x11-devel" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1350993600">- Update to first tarball release 0.2.0</changelog>
  <changelog author="jengelh@inai.de" date="1366200000">- Update to new upstream release 0.3.0
  * This introduces the xkb_keymap_new_from_buffer API, relaxes
  restrictions on the xkb_keymap_new_from_names API, introduces
  support for setting default keymaps from the environment, and
  includes several new bugfixes, as well as swathes of testing
  improvements.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1394280000">- Update to new upstream release 0.4.0
  * Add a new add-on library, xkbcommon-x11, to support creating
  keymaps with the XKB X11 protocol, by querying the X server
  directly. See the xkbcommon/xkbcommon-x11.h header file for
  more details. This library requires libxcb-xkb &gt;= 1.10, and
  is enabled by default. It can be disabled with the --disable-x11
  configure switch. Distributions are encouraged to split the
  necessary files for this library (libxkbcommon-x11.so,
  xkbcommon-x11.pc, xkbcommon/xkbcommon-x11.h) to a separate
  package, such that the main package does not depend on
  X11 libraries.
  * Fix the keysym &lt;-&gt; name lookup table to not require huge
  amounts of relocations.
  * Fix a bug in the keysym &lt;-&gt; name lookup, whereby lookup
  might fail in some rare cases.
  * Reduce memory usage during keymap compilation.
  * New API:
  New keysyms from xproto 7.0.25 (German T3 layout keysyms).
  XKB_MOD_NAME_NUM for the usual NumLock modifier.
  xkb_x11_* types and functions, XKB_X11_* constants.
- Add and build new libxkbcommon-x11-0 and libxkbcommon-x11-devel
  packages for openSUSE 13.2 and newer</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1396612800">- Update to new upstream release 0.4.1
  * Added two new functions, xkb_state_key_get_utf{8,32}(). They
  combine the operations of xkb_state_key_get_syms() and
  xkb_keysym_to_utf{8,32}(), and provide a nicer interface for it
  (espcially for multiple-keysyms-per-level).
  * The xkb_state_key_get_utf{8,32}() functions now apply Control
  transformation: when the Control modifier is active, the string
  is converted to an appropriate control character.
  This matches the behavior of libX11's XLookupString(3), and
  required by the XKB specification:
  http://www.x.org/releases/current/doc/kbproto/xkbproto.html#Interpreting_the_Control_Modifier
  fdo#75892
  * The consumed modifiers for a key are now calculated similarly
  to libX11. The previous behavior caused a bug where Shift would
  not cancel an active Caps Lock.
  * Make xkbcommon-x11 work with the keymap reported by the XQuartz
  X server. fdo#75798
  * Reduce memory usage during keymap compilation some more.
  * New API:
  xkb_state_key_get_consumed_mods()
  xkb_state_key_get_utf8()
  xkb_state_key_get_utf32()
  * Deprecated API:
  XKB_MAP_COMPILE_PLACEHOLDER, XKB_MAP_NO_FLAGS
  use XKB_KEYMAP_NO_FLAGS instead.
- Temporary ommit passing --enable-x11 flag, this release has a bug
  that actually disables x11 if explicitly enabled (fixed upstream,
  but used this approach instead of cherry-picking the patch, for
  the sake of avoiding three new BuildRequires &amp; autoreconf)</changelog>
  <changelog author="mlin@suse.com" date="1396958400">- Replace %suse_version &gt;= 1320 to 1315 in order to build -x11 package
  for SLE12</changelog>
  <changelog author="mlin@suse.com" date="1397044800">- Add COPYING and NEWS to files list</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1400673600">- Update to new upstream release 0.4.2
  * Fixed a bug where explicitly passing "--enable-x11" to ./configure
  would in fact disable it (regressed in 0.4.1).
  * Added @since version annotations to the API documentation for everything
  introduced after the initial stable release (0.2.0).
  * Added a section to the documentation about keysym transformations, and
  clarified which functions perform a given transformation.
  * XKB files which fail to compile during keymap construction can no longer
  have any effect on the resulting keymap: changes are only applied when
  the entire compilation succeeds.
  Note: this was a minor correctness issue inherited from xkbcomp.
  * Fix an out-of-bounds array access in src/x11/util.c:adopt_atoms()
  error-handling code.
  Note: it seems impossible to trigger in the current code since the input
  size cannot exceed the required size.
- Add back -enable-x11 flag for 1315+</changelog>
  <changelog author="jengelh@inai.de" date="1406203200">- Add symbol versioning to xkbcommon</changelog>
  <changelog author="dimstar@opensuse.org" date="1408622400">- Update to version 0.4.3:
  + Fixed a bug which caused xkb_x11_keymap_new_from_device() to
    misrepresent  modifiers for some keymaps.
    https://github.com/xkbcommon/libxkbcommon/issues/9
  + Fixed a bug which caused xkb_x11_keymap_new_from_device() to
    ignore XKB PrivateAction's.
  + Modifiers are now always fully resolved after
    xkb_state_update_mask(). Previously the given state components
    were used as-is, without considering virtual modifier mappings.
    Note: this only affects non-standard uses of
    xkb_state_update_mask().
  + Added a test for xkbcommon-x11, "x11comp". The test uses the
    system's Xvfb server and xkbcomp. If they do not exist or fail,
    the test is skipped.
  + Fixed memory leaks after parse errors in the XKB yacc parser.
  + The fix required changes which are currently incompatible with
    byacc.</changelog>
  <changelog author="jengelh@inai.de" date="1410264000">- Switch to library versioning as described in Shared Library
  Packaging guidelines. This permits installation of multiple
  libxkbcommons.</changelog>
  <changelog author="jengelh@inai.de" date="1410436800">- Add commentary about upcoming symbol version support to
  .spec file.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1415016000">- Update to version 0.5.0:
  * Added support for Compose/dead keys in a new module (included in
  libxkbcommon). See the documentation or the
  xkbcommon/xkbcommon-compose.h header file for more details.
  * Improved and reordered some sections of the documentation.
  * The doxygen HTML pages were made nicer to read.
  * Most tests now run also on non-linux platforms.
  * A warning is emitted by default about RMLVO values which are not
  used during keymap compilation, which are most often a user
  misconfiguration. For example, "terminate:ctrl_alt_backspace"
  instead of "terminate:ctrl_alt_bksp".
  * Added symbol versioning for libxkbcommon and libxkbcommon-x11.
  Note: binaries compiled against this and future versions will not
  be able to link against the previous versions of the library.
  * Removed several compatablity symbols from the binary (the API
  isn't affected). This affects binaries which:
  1. Were compiled against a pre-stable (&lt;0.2.0) version of
  libxkbcommon, and
  2. Are linked against the this or later version of libxkbcommon.
  Such a scenario is likely to fail already.
  * If Xvfb is not available, the x11comp test is now correctly
  skipped instead of hanging.
  * Benchmarks were moved to a separate bench/ directory.
  * Build fixes from OpenBSD.
  * Fixed a bug where key type entries such as "map[None] = Level2;"
  were ignored.
  * New API:
  XKB_COMPOSE_*
  xkb_compose_*</changelog>
  <changelog author="mlin@suse.com" date="1446465600">- Requires xkeyboard-config, bsc#952403
  * libxkbcommon should brings xkeyboard-config together always as
    libxkbcommon does not distribute xkb data itself, and especially
    requires xkeyboard-config for any rely on libxkbcommon in the
    minimal system.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460116800">- Update to version 0.6.1:
  * Add LICENSE to distributed files in tarball releases.
  * Minor typo fix in xkb_keymap_get_as_string() documentation.
- Changes from version 0.6.0:
  * If the XKB_CONFIG_ROOT environment variable is set, it is used
    as the XKB configuration root instead of the path determined at
    build time.
  * Tests and benchmarks now build correctly on OSX.
  * An XKB keymap provides a name for each key it defines.
    Traditionally these names are limited to at most 4 characters,
    and are thus somewhat obscure, but might still be useful
    (xkbcommon lifts the 4 character limit).
  * The new functions xkb_keymap_key_get_name() and
    xkb_keymap_key_by_name() can be used to get the name of a key
    or find a key by name. Note that a key may have aliases.
  * Documentation improvements.
  * New API:
    + xkb_keymap_key_by_name().
    + xkb_keymap_key_get_name().</changelog>
  <changelog author="jengelh@inai.de" date="1478865600">- Update to new upstream release 0.7.0
  * Added support for different "modes" of calculating consumed
    modifiers. The existing mode, based on the XKB standard, has
    proven to be unintuitive in various shortcut implementations.
  * A new mode, based on the calculation used by the GTK toolkit,
    is added. This mode is less eager to declare a modifier as
    consumed.</changelog>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
</package>
<package pkgid="ed7fad7f28d903e2a73c0f600f50198300d5001d0e81b4d0c0f038dff56dc84c" name="libxkbcommon-x11-devel-32bit" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1350993600">- Update to first tarball release 0.2.0</changelog>
  <changelog author="jengelh@inai.de" date="1366200000">- Update to new upstream release 0.3.0
  * This introduces the xkb_keymap_new_from_buffer API, relaxes
  restrictions on the xkb_keymap_new_from_names API, introduces
  support for setting default keymaps from the environment, and
  includes several new bugfixes, as well as swathes of testing
  improvements.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1394280000">- Update to new upstream release 0.4.0
  * Add a new add-on library, xkbcommon-x11, to support creating
  keymaps with the XKB X11 protocol, by querying the X server
  directly. See the xkbcommon/xkbcommon-x11.h header file for
  more details. This library requires libxcb-xkb &gt;= 1.10, and
  is enabled by default. It can be disabled with the --disable-x11
  configure switch. Distributions are encouraged to split the
  necessary files for this library (libxkbcommon-x11.so,
  xkbcommon-x11.pc, xkbcommon/xkbcommon-x11.h) to a separate
  package, such that the main package does not depend on
  X11 libraries.
  * Fix the keysym &lt;-&gt; name lookup table to not require huge
  amounts of relocations.
  * Fix a bug in the keysym &lt;-&gt; name lookup, whereby lookup
  might fail in some rare cases.
  * Reduce memory usage during keymap compilation.
  * New API:
  New keysyms from xproto 7.0.25 (German T3 layout keysyms).
  XKB_MOD_NAME_NUM for the usual NumLock modifier.
  xkb_x11_* types and functions, XKB_X11_* constants.
- Add and build new libxkbcommon-x11-0 and libxkbcommon-x11-devel
  packages for openSUSE 13.2 and newer</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1396612800">- Update to new upstream release 0.4.1
  * Added two new functions, xkb_state_key_get_utf{8,32}(). They
  combine the operations of xkb_state_key_get_syms() and
  xkb_keysym_to_utf{8,32}(), and provide a nicer interface for it
  (espcially for multiple-keysyms-per-level).
  * The xkb_state_key_get_utf{8,32}() functions now apply Control
  transformation: when the Control modifier is active, the string
  is converted to an appropriate control character.
  This matches the behavior of libX11's XLookupString(3), and
  required by the XKB specification:
  http://www.x.org/releases/current/doc/kbproto/xkbproto.html#Interpreting_the_Control_Modifier
  fdo#75892
  * The consumed modifiers for a key are now calculated similarly
  to libX11. The previous behavior caused a bug where Shift would
  not cancel an active Caps Lock.
  * Make xkbcommon-x11 work with the keymap reported by the XQuartz
  X server. fdo#75798
  * Reduce memory usage during keymap compilation some more.
  * New API:
  xkb_state_key_get_consumed_mods()
  xkb_state_key_get_utf8()
  xkb_state_key_get_utf32()
  * Deprecated API:
  XKB_MAP_COMPILE_PLACEHOLDER, XKB_MAP_NO_FLAGS
  use XKB_KEYMAP_NO_FLAGS instead.
- Temporary ommit passing --enable-x11 flag, this release has a bug
  that actually disables x11 if explicitly enabled (fixed upstream,
  but used this approach instead of cherry-picking the patch, for
  the sake of avoiding three new BuildRequires &amp; autoreconf)</changelog>
  <changelog author="mlin@suse.com" date="1396958400">- Replace %suse_version &gt;= 1320 to 1315 in order to build -x11 package
  for SLE12</changelog>
  <changelog author="mlin@suse.com" date="1397044800">- Add COPYING and NEWS to files list</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1400673600">- Update to new upstream release 0.4.2
  * Fixed a bug where explicitly passing "--enable-x11" to ./configure
  would in fact disable it (regressed in 0.4.1).
  * Added @since version annotations to the API documentation for everything
  introduced after the initial stable release (0.2.0).
  * Added a section to the documentation about keysym transformations, and
  clarified which functions perform a given transformation.
  * XKB files which fail to compile during keymap construction can no longer
  have any effect on the resulting keymap: changes are only applied when
  the entire compilation succeeds.
  Note: this was a minor correctness issue inherited from xkbcomp.
  * Fix an out-of-bounds array access in src/x11/util.c:adopt_atoms()
  error-handling code.
  Note: it seems impossible to trigger in the current code since the input
  size cannot exceed the required size.
- Add back -enable-x11 flag for 1315+</changelog>
  <changelog author="jengelh@inai.de" date="1406203200">- Add symbol versioning to xkbcommon</changelog>
  <changelog author="dimstar@opensuse.org" date="1408622400">- Update to version 0.4.3:
  + Fixed a bug which caused xkb_x11_keymap_new_from_device() to
    misrepresent  modifiers for some keymaps.
    https://github.com/xkbcommon/libxkbcommon/issues/9
  + Fixed a bug which caused xkb_x11_keymap_new_from_device() to
    ignore XKB PrivateAction's.
  + Modifiers are now always fully resolved after
    xkb_state_update_mask(). Previously the given state components
    were used as-is, without considering virtual modifier mappings.
    Note: this only affects non-standard uses of
    xkb_state_update_mask().
  + Added a test for xkbcommon-x11, "x11comp". The test uses the
    system's Xvfb server and xkbcomp. If they do not exist or fail,
    the test is skipped.
  + Fixed memory leaks after parse errors in the XKB yacc parser.
  + The fix required changes which are currently incompatible with
    byacc.</changelog>
  <changelog author="jengelh@inai.de" date="1410264000">- Switch to library versioning as described in Shared Library
  Packaging guidelines. This permits installation of multiple
  libxkbcommons.</changelog>
  <changelog author="jengelh@inai.de" date="1410436800">- Add commentary about upcoming symbol version support to
  .spec file.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1415016000">- Update to version 0.5.0:
  * Added support for Compose/dead keys in a new module (included in
  libxkbcommon). See the documentation or the
  xkbcommon/xkbcommon-compose.h header file for more details.
  * Improved and reordered some sections of the documentation.
  * The doxygen HTML pages were made nicer to read.
  * Most tests now run also on non-linux platforms.
  * A warning is emitted by default about RMLVO values which are not
  used during keymap compilation, which are most often a user
  misconfiguration. For example, "terminate:ctrl_alt_backspace"
  instead of "terminate:ctrl_alt_bksp".
  * Added symbol versioning for libxkbcommon and libxkbcommon-x11.
  Note: binaries compiled against this and future versions will not
  be able to link against the previous versions of the library.
  * Removed several compatablity symbols from the binary (the API
  isn't affected). This affects binaries which:
  1. Were compiled against a pre-stable (&lt;0.2.0) version of
  libxkbcommon, and
  2. Are linked against the this or later version of libxkbcommon.
  Such a scenario is likely to fail already.
  * If Xvfb is not available, the x11comp test is now correctly
  skipped instead of hanging.
  * Benchmarks were moved to a separate bench/ directory.
  * Build fixes from OpenBSD.
  * Fixed a bug where key type entries such as "map[None] = Level2;"
  were ignored.
  * New API:
  XKB_COMPOSE_*
  xkb_compose_*</changelog>
  <changelog author="mlin@suse.com" date="1446465600">- Requires xkeyboard-config, bsc#952403
  * libxkbcommon should brings xkeyboard-config together always as
    libxkbcommon does not distribute xkb data itself, and especially
    requires xkeyboard-config for any rely on libxkbcommon in the
    minimal system.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460116800">- Update to version 0.6.1:
  * Add LICENSE to distributed files in tarball releases.
  * Minor typo fix in xkb_keymap_get_as_string() documentation.
- Changes from version 0.6.0:
  * If the XKB_CONFIG_ROOT environment variable is set, it is used
    as the XKB configuration root instead of the path determined at
    build time.
  * Tests and benchmarks now build correctly on OSX.
  * An XKB keymap provides a name for each key it defines.
    Traditionally these names are limited to at most 4 characters,
    and are thus somewhat obscure, but might still be useful
    (xkbcommon lifts the 4 character limit).
  * The new functions xkb_keymap_key_get_name() and
    xkb_keymap_key_by_name() can be used to get the name of a key
    or find a key by name. Note that a key may have aliases.
  * Documentation improvements.
  * New API:
    + xkb_keymap_key_by_name().
    + xkb_keymap_key_get_name().</changelog>
  <changelog author="jengelh@inai.de" date="1478865600">- Update to new upstream release 0.7.0
  * Added support for different "modes" of calculating consumed
    modifiers. The existing mode, based on the XKB standard, has
    proven to be unintuitive in various shortcut implementations.
  * A new mode, based on the calculation used by the GTK toolkit,
    is added. This mode is less eager to declare a modifier as
    consumed.</changelog>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
</package>
<package pkgid="d6a79fe2cacb400b3f52ca72a3da0aa16533e7c626ef70438218314c48731a3f" name="libxkbcommon0" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1350993600">- Update to first tarball release 0.2.0</changelog>
  <changelog author="jengelh@inai.de" date="1366200000">- Update to new upstream release 0.3.0
  * This introduces the xkb_keymap_new_from_buffer API, relaxes
  restrictions on the xkb_keymap_new_from_names API, introduces
  support for setting default keymaps from the environment, and
  includes several new bugfixes, as well as swathes of testing
  improvements.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1394280000">- Update to new upstream release 0.4.0
  * Add a new add-on library, xkbcommon-x11, to support creating
  keymaps with the XKB X11 protocol, by querying the X server
  directly. See the xkbcommon/xkbcommon-x11.h header file for
  more details. This library requires libxcb-xkb &gt;= 1.10, and
  is enabled by default. It can be disabled with the --disable-x11
  configure switch. Distributions are encouraged to split the
  necessary files for this library (libxkbcommon-x11.so,
  xkbcommon-x11.pc, xkbcommon/xkbcommon-x11.h) to a separate
  package, such that the main package does not depend on
  X11 libraries.
  * Fix the keysym &lt;-&gt; name lookup table to not require huge
  amounts of relocations.
  * Fix a bug in the keysym &lt;-&gt; name lookup, whereby lookup
  might fail in some rare cases.
  * Reduce memory usage during keymap compilation.
  * New API:
  New keysyms from xproto 7.0.25 (German T3 layout keysyms).
  XKB_MOD_NAME_NUM for the usual NumLock modifier.
  xkb_x11_* types and functions, XKB_X11_* constants.
- Add and build new libxkbcommon-x11-0 and libxkbcommon-x11-devel
  packages for openSUSE 13.2 and newer</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1396612800">- Update to new upstream release 0.4.1
  * Added two new functions, xkb_state_key_get_utf{8,32}(). They
  combine the operations of xkb_state_key_get_syms() and
  xkb_keysym_to_utf{8,32}(), and provide a nicer interface for it
  (espcially for multiple-keysyms-per-level).
  * The xkb_state_key_get_utf{8,32}() functions now apply Control
  transformation: when the Control modifier is active, the string
  is converted to an appropriate control character.
  This matches the behavior of libX11's XLookupString(3), and
  required by the XKB specification:
  http://www.x.org/releases/current/doc/kbproto/xkbproto.html#Interpreting_the_Control_Modifier
  fdo#75892
  * The consumed modifiers for a key are now calculated similarly
  to libX11. The previous behavior caused a bug where Shift would
  not cancel an active Caps Lock.
  * Make xkbcommon-x11 work with the keymap reported by the XQuartz
  X server. fdo#75798
  * Reduce memory usage during keymap compilation some more.
  * New API:
  xkb_state_key_get_consumed_mods()
  xkb_state_key_get_utf8()
  xkb_state_key_get_utf32()
  * Deprecated API:
  XKB_MAP_COMPILE_PLACEHOLDER, XKB_MAP_NO_FLAGS
  use XKB_KEYMAP_NO_FLAGS instead.
- Temporary ommit passing --enable-x11 flag, this release has a bug
  that actually disables x11 if explicitly enabled (fixed upstream,
  but used this approach instead of cherry-picking the patch, for
  the sake of avoiding three new BuildRequires &amp; autoreconf)</changelog>
  <changelog author="mlin@suse.com" date="1396958400">- Replace %suse_version &gt;= 1320 to 1315 in order to build -x11 package
  for SLE12</changelog>
  <changelog author="mlin@suse.com" date="1397044800">- Add COPYING and NEWS to files list</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1400673600">- Update to new upstream release 0.4.2
  * Fixed a bug where explicitly passing "--enable-x11" to ./configure
  would in fact disable it (regressed in 0.4.1).
  * Added @since version annotations to the API documentation for everything
  introduced after the initial stable release (0.2.0).
  * Added a section to the documentation about keysym transformations, and
  clarified which functions perform a given transformation.
  * XKB files which fail to compile during keymap construction can no longer
  have any effect on the resulting keymap: changes are only applied when
  the entire compilation succeeds.
  Note: this was a minor correctness issue inherited from xkbcomp.
  * Fix an out-of-bounds array access in src/x11/util.c:adopt_atoms()
  error-handling code.
  Note: it seems impossible to trigger in the current code since the input
  size cannot exceed the required size.
- Add back -enable-x11 flag for 1315+</changelog>
  <changelog author="jengelh@inai.de" date="1406203200">- Add symbol versioning to xkbcommon</changelog>
  <changelog author="dimstar@opensuse.org" date="1408622400">- Update to version 0.4.3:
  + Fixed a bug which caused xkb_x11_keymap_new_from_device() to
    misrepresent  modifiers for some keymaps.
    https://github.com/xkbcommon/libxkbcommon/issues/9
  + Fixed a bug which caused xkb_x11_keymap_new_from_device() to
    ignore XKB PrivateAction's.
  + Modifiers are now always fully resolved after
    xkb_state_update_mask(). Previously the given state components
    were used as-is, without considering virtual modifier mappings.
    Note: this only affects non-standard uses of
    xkb_state_update_mask().
  + Added a test for xkbcommon-x11, "x11comp". The test uses the
    system's Xvfb server and xkbcomp. If they do not exist or fail,
    the test is skipped.
  + Fixed memory leaks after parse errors in the XKB yacc parser.
  + The fix required changes which are currently incompatible with
    byacc.</changelog>
  <changelog author="jengelh@inai.de" date="1410264000">- Switch to library versioning as described in Shared Library
  Packaging guidelines. This permits installation of multiple
  libxkbcommons.</changelog>
  <changelog author="jengelh@inai.de" date="1410436800">- Add commentary about upcoming symbol version support to
  .spec file.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1415016000">- Update to version 0.5.0:
  * Added support for Compose/dead keys in a new module (included in
  libxkbcommon). See the documentation or the
  xkbcommon/xkbcommon-compose.h header file for more details.
  * Improved and reordered some sections of the documentation.
  * The doxygen HTML pages were made nicer to read.
  * Most tests now run also on non-linux platforms.
  * A warning is emitted by default about RMLVO values which are not
  used during keymap compilation, which are most often a user
  misconfiguration. For example, "terminate:ctrl_alt_backspace"
  instead of "terminate:ctrl_alt_bksp".
  * Added symbol versioning for libxkbcommon and libxkbcommon-x11.
  Note: binaries compiled against this and future versions will not
  be able to link against the previous versions of the library.
  * Removed several compatablity symbols from the binary (the API
  isn't affected). This affects binaries which:
  1. Were compiled against a pre-stable (&lt;0.2.0) version of
  libxkbcommon, and
  2. Are linked against the this or later version of libxkbcommon.
  Such a scenario is likely to fail already.
  * If Xvfb is not available, the x11comp test is now correctly
  skipped instead of hanging.
  * Benchmarks were moved to a separate bench/ directory.
  * Build fixes from OpenBSD.
  * Fixed a bug where key type entries such as "map[None] = Level2;"
  were ignored.
  * New API:
  XKB_COMPOSE_*
  xkb_compose_*</changelog>
  <changelog author="mlin@suse.com" date="1446465600">- Requires xkeyboard-config, bsc#952403
  * libxkbcommon should brings xkeyboard-config together always as
    libxkbcommon does not distribute xkb data itself, and especially
    requires xkeyboard-config for any rely on libxkbcommon in the
    minimal system.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460116800">- Update to version 0.6.1:
  * Add LICENSE to distributed files in tarball releases.
  * Minor typo fix in xkb_keymap_get_as_string() documentation.
- Changes from version 0.6.0:
  * If the XKB_CONFIG_ROOT environment variable is set, it is used
    as the XKB configuration root instead of the path determined at
    build time.
  * Tests and benchmarks now build correctly on OSX.
  * An XKB keymap provides a name for each key it defines.
    Traditionally these names are limited to at most 4 characters,
    and are thus somewhat obscure, but might still be useful
    (xkbcommon lifts the 4 character limit).
  * The new functions xkb_keymap_key_get_name() and
    xkb_keymap_key_by_name() can be used to get the name of a key
    or find a key by name. Note that a key may have aliases.
  * Documentation improvements.
  * New API:
    + xkb_keymap_key_by_name().
    + xkb_keymap_key_get_name().</changelog>
  <changelog author="jengelh@inai.de" date="1478865600">- Update to new upstream release 0.7.0
  * Added support for different "modes" of calculating consumed
    modifiers. The existing mode, based on the XKB standard, has
    proven to be unintuitive in various shortcut implementations.
  * A new mode, based on the calculation used by the GTK toolkit,
    is added. This mode is less eager to declare a modifier as
    consumed.</changelog>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
</package>
<package pkgid="bab7b8683b0b368e0b6398c08d07165f48af9a79b6edd0954d9841903db8a98c" name="libxkbcommon0-32bit" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1350993600">- Update to first tarball release 0.2.0</changelog>
  <changelog author="jengelh@inai.de" date="1366200000">- Update to new upstream release 0.3.0
  * This introduces the xkb_keymap_new_from_buffer API, relaxes
  restrictions on the xkb_keymap_new_from_names API, introduces
  support for setting default keymaps from the environment, and
  includes several new bugfixes, as well as swathes of testing
  improvements.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1394280000">- Update to new upstream release 0.4.0
  * Add a new add-on library, xkbcommon-x11, to support creating
  keymaps with the XKB X11 protocol, by querying the X server
  directly. See the xkbcommon/xkbcommon-x11.h header file for
  more details. This library requires libxcb-xkb &gt;= 1.10, and
  is enabled by default. It can be disabled with the --disable-x11
  configure switch. Distributions are encouraged to split the
  necessary files for this library (libxkbcommon-x11.so,
  xkbcommon-x11.pc, xkbcommon/xkbcommon-x11.h) to a separate
  package, such that the main package does not depend on
  X11 libraries.
  * Fix the keysym &lt;-&gt; name lookup table to not require huge
  amounts of relocations.
  * Fix a bug in the keysym &lt;-&gt; name lookup, whereby lookup
  might fail in some rare cases.
  * Reduce memory usage during keymap compilation.
  * New API:
  New keysyms from xproto 7.0.25 (German T3 layout keysyms).
  XKB_MOD_NAME_NUM for the usual NumLock modifier.
  xkb_x11_* types and functions, XKB_X11_* constants.
- Add and build new libxkbcommon-x11-0 and libxkbcommon-x11-devel
  packages for openSUSE 13.2 and newer</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1396612800">- Update to new upstream release 0.4.1
  * Added two new functions, xkb_state_key_get_utf{8,32}(). They
  combine the operations of xkb_state_key_get_syms() and
  xkb_keysym_to_utf{8,32}(), and provide a nicer interface for it
  (espcially for multiple-keysyms-per-level).
  * The xkb_state_key_get_utf{8,32}() functions now apply Control
  transformation: when the Control modifier is active, the string
  is converted to an appropriate control character.
  This matches the behavior of libX11's XLookupString(3), and
  required by the XKB specification:
  http://www.x.org/releases/current/doc/kbproto/xkbproto.html#Interpreting_the_Control_Modifier
  fdo#75892
  * The consumed modifiers for a key are now calculated similarly
  to libX11. The previous behavior caused a bug where Shift would
  not cancel an active Caps Lock.
  * Make xkbcommon-x11 work with the keymap reported by the XQuartz
  X server. fdo#75798
  * Reduce memory usage during keymap compilation some more.
  * New API:
  xkb_state_key_get_consumed_mods()
  xkb_state_key_get_utf8()
  xkb_state_key_get_utf32()
  * Deprecated API:
  XKB_MAP_COMPILE_PLACEHOLDER, XKB_MAP_NO_FLAGS
  use XKB_KEYMAP_NO_FLAGS instead.
- Temporary ommit passing --enable-x11 flag, this release has a bug
  that actually disables x11 if explicitly enabled (fixed upstream,
  but used this approach instead of cherry-picking the patch, for
  the sake of avoiding three new BuildRequires &amp; autoreconf)</changelog>
  <changelog author="mlin@suse.com" date="1396958400">- Replace %suse_version &gt;= 1320 to 1315 in order to build -x11 package
  for SLE12</changelog>
  <changelog author="mlin@suse.com" date="1397044800">- Add COPYING and NEWS to files list</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1400673600">- Update to new upstream release 0.4.2
  * Fixed a bug where explicitly passing "--enable-x11" to ./configure
  would in fact disable it (regressed in 0.4.1).
  * Added @since version annotations to the API documentation for everything
  introduced after the initial stable release (0.2.0).
  * Added a section to the documentation about keysym transformations, and
  clarified which functions perform a given transformation.
  * XKB files which fail to compile during keymap construction can no longer
  have any effect on the resulting keymap: changes are only applied when
  the entire compilation succeeds.
  Note: this was a minor correctness issue inherited from xkbcomp.
  * Fix an out-of-bounds array access in src/x11/util.c:adopt_atoms()
  error-handling code.
  Note: it seems impossible to trigger in the current code since the input
  size cannot exceed the required size.
- Add back -enable-x11 flag for 1315+</changelog>
  <changelog author="jengelh@inai.de" date="1406203200">- Add symbol versioning to xkbcommon</changelog>
  <changelog author="dimstar@opensuse.org" date="1408622400">- Update to version 0.4.3:
  + Fixed a bug which caused xkb_x11_keymap_new_from_device() to
    misrepresent  modifiers for some keymaps.
    https://github.com/xkbcommon/libxkbcommon/issues/9
  + Fixed a bug which caused xkb_x11_keymap_new_from_device() to
    ignore XKB PrivateAction's.
  + Modifiers are now always fully resolved after
    xkb_state_update_mask(). Previously the given state components
    were used as-is, without considering virtual modifier mappings.
    Note: this only affects non-standard uses of
    xkb_state_update_mask().
  + Added a test for xkbcommon-x11, "x11comp". The test uses the
    system's Xvfb server and xkbcomp. If they do not exist or fail,
    the test is skipped.
  + Fixed memory leaks after parse errors in the XKB yacc parser.
  + The fix required changes which are currently incompatible with
    byacc.</changelog>
  <changelog author="jengelh@inai.de" date="1410264000">- Switch to library versioning as described in Shared Library
  Packaging guidelines. This permits installation of multiple
  libxkbcommons.</changelog>
  <changelog author="jengelh@inai.de" date="1410436800">- Add commentary about upcoming symbol version support to
  .spec file.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1415016000">- Update to version 0.5.0:
  * Added support for Compose/dead keys in a new module (included in
  libxkbcommon). See the documentation or the
  xkbcommon/xkbcommon-compose.h header file for more details.
  * Improved and reordered some sections of the documentation.
  * The doxygen HTML pages were made nicer to read.
  * Most tests now run also on non-linux platforms.
  * A warning is emitted by default about RMLVO values which are not
  used during keymap compilation, which are most often a user
  misconfiguration. For example, "terminate:ctrl_alt_backspace"
  instead of "terminate:ctrl_alt_bksp".
  * Added symbol versioning for libxkbcommon and libxkbcommon-x11.
  Note: binaries compiled against this and future versions will not
  be able to link against the previous versions of the library.
  * Removed several compatablity symbols from the binary (the API
  isn't affected). This affects binaries which:
  1. Were compiled against a pre-stable (&lt;0.2.0) version of
  libxkbcommon, and
  2. Are linked against the this or later version of libxkbcommon.
  Such a scenario is likely to fail already.
  * If Xvfb is not available, the x11comp test is now correctly
  skipped instead of hanging.
  * Benchmarks were moved to a separate bench/ directory.
  * Build fixes from OpenBSD.
  * Fixed a bug where key type entries such as "map[None] = Level2;"
  were ignored.
  * New API:
  XKB_COMPOSE_*
  xkb_compose_*</changelog>
  <changelog author="mlin@suse.com" date="1446465600">- Requires xkeyboard-config, bsc#952403
  * libxkbcommon should brings xkeyboard-config together always as
    libxkbcommon does not distribute xkb data itself, and especially
    requires xkeyboard-config for any rely on libxkbcommon in the
    minimal system.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460116800">- Update to version 0.6.1:
  * Add LICENSE to distributed files in tarball releases.
  * Minor typo fix in xkb_keymap_get_as_string() documentation.
- Changes from version 0.6.0:
  * If the XKB_CONFIG_ROOT environment variable is set, it is used
    as the XKB configuration root instead of the path determined at
    build time.
  * Tests and benchmarks now build correctly on OSX.
  * An XKB keymap provides a name for each key it defines.
    Traditionally these names are limited to at most 4 characters,
    and are thus somewhat obscure, but might still be useful
    (xkbcommon lifts the 4 character limit).
  * The new functions xkb_keymap_key_get_name() and
    xkb_keymap_key_by_name() can be used to get the name of a key
    or find a key by name. Note that a key may have aliases.
  * Documentation improvements.
  * New API:
    + xkb_keymap_key_by_name().
    + xkb_keymap_key_get_name().</changelog>
  <changelog author="jengelh@inai.de" date="1478865600">- Update to new upstream release 0.7.0
  * Added support for different "modes" of calculating consumed
    modifiers. The existing mode, based on the XKB standard, has
    proven to be unintuitive in various shortcut implementations.
  * A new mode, based on the calculation used by the GTK toolkit,
    is added. This mode is less eager to declare a modifier as
    consumed.</changelog>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
</package>
<package pkgid="064b3533639df5b3e8a698c1e48085681260f636066041b6d25fa163c62291ee" name="libxml2-2" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="lp150.2.3.1"/>
  <changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes/provides to baselibs.conf.</changelog>
  <changelog author="vcizek@suse.com" date="1413547200">- fix for CVE-2014-3660 (bnc#901546)
  * denial of service via recursive entity expansion
    (related to billion laughs)
  * added libxml2-CVE-2014-3660.patch</changelog>
  <changelog author="vcizek@suse.com" date="1414756800">- update to 2.9.2
  * drop libxml2-CVE-2014-3660.patch (upstream)
  * add keyring to verify tarball
  Security:
  Fix for CVE-2014-3660 billion laugh variant
  CVE-2014-0191 Do not fetch external parameter entities
  Improvements:
  win32/libxml2.def.src after rebuild in doc
  elfgcchack.h: more legacy needs xmlSAX2StartElement() and xmlSAX2EndElement()
  elfgcchack.h: add xmlXPathNodeEval and xmlXPathSetContextNode
  Provide cmake module
  Fix a couple of issues raised by make dist
  Fix and add const qualifiers
  Preparing for upcoming release of 2.9.2
  Fix zlib and lzma libraries check via command line
  wrong error column in structured error when parsing end tag
  doc/news.html: small update to avoid line join while generating NEWS.
  Add methods for python3 iterator
  Support element node traversal in document fragments
  xmlNodeSetName: Allow setting the name to a substring of the currently set name
  Added macros for argument casts
  adding init calls to xml and html Read parsing entry points
  Get rid of 'REPLACEMENT CHARACTER' Unicode chars in xmlschemas.c
  Implement choice for name classes on attributes
  Two small namespace tweaks
  xmllint --memory should fail on empty files
  Cast encoding name to char pointer to match arg type</changelog>
  <changelog author="vcizek@suse.com" date="1415016000">- fix a regression in libxml2 2.9.2
  * https://bugzilla.redhat.com/show_bug.cgi?id=1153753
- add libxml2-dont_initialize_catalog.patch</changelog>
  <changelog author="vcizek@suse.com" date="1415016001">- fix a missing entities after CVE-2014-3660 fix
  (https://bugzilla.gnome.org/show_bug.cgi?id=738805)
  * added patches:
    0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
    0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1448366400">- Update to new upstream release 2.9.3 (bsc#954429):
  * Fixes for CVE-2015-8035, CVE-2015-7942, CVE-2015-7941,
    CVE-2015-1819, CVE-2015-7497, CVE-2015-7498, CVE-2015-5312,
    CVE-2015-7499, CVE-2015-7500 and CVE-2015-8242
  * And other bugfixes
- Removed upstream fixed patches:
  * libxml2-dont_initialize_catalog.patch
  * 0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
  * 0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
  <changelog author="sflees@suse.de" date="1462276800">- Add libxml2-2.9.1-CVE-2016-3627.patch to fix stack exhaustion
  while parsing certain XML files in recovery mode (CVE-2016-3627,
  bnc#972335).
- Add 0001-Add-missing-increments-of-recursion-depth-counter-to.patch
  to improve protection against Billion Laughs Attack (bnc#975947).</changelog>
  <changelog author="kstreitova@suse.com" date="1463745600">- add libxml2-2.9.3-bogus_UTF-8_encoding_error.patch to fix XML
  push parser that fails with bogus UTF-8 encoding error when
  multi-byte character in large CDATA section is split across
  buffer [bnc#962796]</changelog>
  <changelog author="psimons@suse.com" date="1464350400">- Update libxml2 to version libxml2-2.9.4. The new version is
  resistant against CVE-2016-3627, CVE-2016-1833, CVE-2016-1835,
  CVE-2016-1837, CVE-2016-1836, CVE-2016-1839, CVE-2016-1838,
  CVE-2016-1840, CVE-2016-4483, CVE-2016-1834, CVE-2016-3705, and
  CVE-2016-1762.
- Remove obsolete patches libxml2-2.9.1-CVE-2016-3627.patch,
  0001-Add-missing-increments-of-recursion-depth-counter-to.patch,
  and libxml2-2.9.3-bogus_UTF-8_encoding_error.patch.</changelog>
  <changelog author="kstreitova@suse.com" date="1465387200">- add libxml2-2.9.4-fix_attribute_decoding.patch to fix attribute
  decoding during XML schema validation [bnc#983288]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1488888000">- Added libxml2-CVE-2016-4658.patch: Disallow namespace nodes in
  XPointer ranges. Namespace nodes must be copied to avoid
  use-after-free errors. But they don't necessarily have a physical
  representation in a document, so simply disallow them in XPointer
  ranges [bsc#1005544] [CVE-2016-4658]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1495454400">- Security fixes:
  * libxml2-CVE-2017-9049.patch [bsc#1039066]
  * heap-based buffer overflow (xmlDictComputeFastKey func)
  * libxml2-CVE-2017-9048.patch [bsc#1039063]
  * stack overflow vulnerability (xmlSnprintfElementContent func)
  * libxml2-CVE-2017-9047.patch [bsc#1039064]
  * stack overflow vulnerability (xmlSnprintfElementContent func)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1497441600">- Security fix:
  * libxml2-CVE-2017-5969.patch [bsc#1024989, CVE-2017-5969]
  * Fix NULL pointer deref in xmlDumpElementContent</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1497528000">- Security fix:
  * libxml2-CVE-2017-0663.patch [bsc#1044337, CVE-2017-0663]
  * Fix Heap buffer overflow in xmlAddID</changelog>
  <changelog author="tchvatal@suse.com" date="1505044800">- Version update to 2.9.5 release:
  * Merged all the previous cve fixes that were patched in
  * Few small tweaks
- Remove merged patches:
  * libxml2-CVE-2016-4658.patch
  * libxml2-CVE-2017-0663.patch
  * libxml2-CVE-2017-5969.patch
  * libxml2-CVE-2017-9047.patch
  * libxml2-CVE-2017-9048.patch
  * libxml2-CVE-2017-9049.patch
  * libxml2-2.9.4-fix_attribute_decoding.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1505995200">- Add patch to fix TW integration:
  * libxml2-bug787941.patch</changelog>
  <changelog author="jengelh@inai.de" date="1505995201">- Update package summaries and RPM groups. Trim descriptions for
  size on secondary subpackages. Replace install call by a
  commonly-used macro.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Version update to 2.9.7 release:
  * Bug Fixes:
    + xmlcatalog: restore ability to query system catalog easily
    + Fix comparison of nodesets to strings
  * Improvements:
    + Add Makefile rules to rebuild HTML man pages
    + Remove generated file python/setup.py from version control
    + Fix mixed decls and code in timsort.h
    + Rework handling of return values in thread tests
    + Fix unused variable warnings in testrecurse
    + Fix -Wimplicit-fallthrough warnings
    + Upgrade timsort.h to latest revision
    + Fix a couple of warnings in dict.c and threads.c
    + Fix unused variable warnings in nanohttp.c
    + Don't include winsock2.h in xmllint.c
    + Use __linux__ macro in generated code
  * Portability:
    + Add declaration for DllMain
    + Fix preprocessor conditional in threads.h
    + Fix macro redefinition warning
    + many Windows specific improvements
  * Documentation:
    + xmlcatalog: refresh man page wrt. quering system catalog easily
- Includes bug fixes from 2.9.6:
  * Fix XPath stack frame logic
  * Report undefined XPath variable error message
  * Fix regression with librsvg
  * Handle more invalid entity values in recovery mode
  * Fix structured validation errors
  * Fix memory leak in LZMA decompressor
  * Set memory limit for LZMA decompression
  * Handle illegal entity values in recovery mode
  * Fix debug dump of streaming XPath expressions
  * Fix memory leak in nanoftp
  * Fix memory leaks in SAX1 parser
- Drop libxml2-bug787941.patch
  * upstreamed in 3157cf4e53c03bc3da604472c015c63141907db8</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [bsc#1102046, CVE-2018-14404]
  * NULL pointer dereference in xpath.c:xmlXPathCompOpEval() can
    allow attackers to cause a denial of service
  * Added libxml2-CVE-2018-14404.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148801">- Security fix:
  [bsc#1088279, CVE-2018-9251][bsc#1105166, CVE-2018-14567]
  * Infinite loop in LZMA decompression
  * Fixes CVE-2018-9251 introduced by CVE-2017-18258
  * Added libxml2-CVE-2018-14567.patch</changelog>
</package>
<package pkgid="20fdae62bdf6219930e1c2aa6011281ac0c0cba352ad034453b9532139bb34b2" name="libxml2-2-32bit" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="lp150.2.3.1"/>
  <changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes/provides to baselibs.conf.</changelog>
  <changelog author="vcizek@suse.com" date="1413547200">- fix for CVE-2014-3660 (bnc#901546)
  * denial of service via recursive entity expansion
    (related to billion laughs)
  * added libxml2-CVE-2014-3660.patch</changelog>
  <changelog author="vcizek@suse.com" date="1414756800">- update to 2.9.2
  * drop libxml2-CVE-2014-3660.patch (upstream)
  * add keyring to verify tarball
  Security:
  Fix for CVE-2014-3660 billion laugh variant
  CVE-2014-0191 Do not fetch external parameter entities
  Improvements:
  win32/libxml2.def.src after rebuild in doc
  elfgcchack.h: more legacy needs xmlSAX2StartElement() and xmlSAX2EndElement()
  elfgcchack.h: add xmlXPathNodeEval and xmlXPathSetContextNode
  Provide cmake module
  Fix a couple of issues raised by make dist
  Fix and add const qualifiers
  Preparing for upcoming release of 2.9.2
  Fix zlib and lzma libraries check via command line
  wrong error column in structured error when parsing end tag
  doc/news.html: small update to avoid line join while generating NEWS.
  Add methods for python3 iterator
  Support element node traversal in document fragments
  xmlNodeSetName: Allow setting the name to a substring of the currently set name
  Added macros for argument casts
  adding init calls to xml and html Read parsing entry points
  Get rid of 'REPLACEMENT CHARACTER' Unicode chars in xmlschemas.c
  Implement choice for name classes on attributes
  Two small namespace tweaks
  xmllint --memory should fail on empty files
  Cast encoding name to char pointer to match arg type</changelog>
  <changelog author="vcizek@suse.com" date="1415016000">- fix a regression in libxml2 2.9.2
  * https://bugzilla.redhat.com/show_bug.cgi?id=1153753
- add libxml2-dont_initialize_catalog.patch</changelog>
  <changelog author="vcizek@suse.com" date="1415016001">- fix a missing entities after CVE-2014-3660 fix
  (https://bugzilla.gnome.org/show_bug.cgi?id=738805)
  * added patches:
    0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
    0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1448366400">- Update to new upstream release 2.9.3 (bsc#954429):
  * Fixes for CVE-2015-8035, CVE-2015-7942, CVE-2015-7941,
    CVE-2015-1819, CVE-2015-7497, CVE-2015-7498, CVE-2015-5312,
    CVE-2015-7499, CVE-2015-7500 and CVE-2015-8242
  * And other bugfixes
- Removed upstream fixed patches:
  * libxml2-dont_initialize_catalog.patch
  * 0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
  * 0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
  <changelog author="sflees@suse.de" date="1462276800">- Add libxml2-2.9.1-CVE-2016-3627.patch to fix stack exhaustion
  while parsing certain XML files in recovery mode (CVE-2016-3627,
  bnc#972335).
- Add 0001-Add-missing-increments-of-recursion-depth-counter-to.patch
  to improve protection against Billion Laughs Attack (bnc#975947).</changelog>
  <changelog author="kstreitova@suse.com" date="1463745600">- add libxml2-2.9.3-bogus_UTF-8_encoding_error.patch to fix XML
  push parser that fails with bogus UTF-8 encoding error when
  multi-byte character in large CDATA section is split across
  buffer [bnc#962796]</changelog>
  <changelog author="psimons@suse.com" date="1464350400">- Update libxml2 to version libxml2-2.9.4. The new version is
  resistant against CVE-2016-3627, CVE-2016-1833, CVE-2016-1835,
  CVE-2016-1837, CVE-2016-1836, CVE-2016-1839, CVE-2016-1838,
  CVE-2016-1840, CVE-2016-4483, CVE-2016-1834, CVE-2016-3705, and
  CVE-2016-1762.
- Remove obsolete patches libxml2-2.9.1-CVE-2016-3627.patch,
  0001-Add-missing-increments-of-recursion-depth-counter-to.patch,
  and libxml2-2.9.3-bogus_UTF-8_encoding_error.patch.</changelog>
  <changelog author="kstreitova@suse.com" date="1465387200">- add libxml2-2.9.4-fix_attribute_decoding.patch to fix attribute
  decoding during XML schema validation [bnc#983288]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1488888000">- Added libxml2-CVE-2016-4658.patch: Disallow namespace nodes in
  XPointer ranges. Namespace nodes must be copied to avoid
  use-after-free errors. But they don't necessarily have a physical
  representation in a document, so simply disallow them in XPointer
  ranges [bsc#1005544] [CVE-2016-4658]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1495454400">- Security fixes:
  * libxml2-CVE-2017-9049.patch [bsc#1039066]
  * heap-based buffer overflow (xmlDictComputeFastKey func)
  * libxml2-CVE-2017-9048.patch [bsc#1039063]
  * stack overflow vulnerability (xmlSnprintfElementContent func)
  * libxml2-CVE-2017-9047.patch [bsc#1039064]
  * stack overflow vulnerability (xmlSnprintfElementContent func)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1497441600">- Security fix:
  * libxml2-CVE-2017-5969.patch [bsc#1024989, CVE-2017-5969]
  * Fix NULL pointer deref in xmlDumpElementContent</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1497528000">- Security fix:
  * libxml2-CVE-2017-0663.patch [bsc#1044337, CVE-2017-0663]
  * Fix Heap buffer overflow in xmlAddID</changelog>
  <changelog author="tchvatal@suse.com" date="1505044800">- Version update to 2.9.5 release:
  * Merged all the previous cve fixes that were patched in
  * Few small tweaks
- Remove merged patches:
  * libxml2-CVE-2016-4658.patch
  * libxml2-CVE-2017-0663.patch
  * libxml2-CVE-2017-5969.patch
  * libxml2-CVE-2017-9047.patch
  * libxml2-CVE-2017-9048.patch
  * libxml2-CVE-2017-9049.patch
  * libxml2-2.9.4-fix_attribute_decoding.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1505995200">- Add patch to fix TW integration:
  * libxml2-bug787941.patch</changelog>
  <changelog author="jengelh@inai.de" date="1505995201">- Update package summaries and RPM groups. Trim descriptions for
  size on secondary subpackages. Replace install call by a
  commonly-used macro.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Version update to 2.9.7 release:
  * Bug Fixes:
    + xmlcatalog: restore ability to query system catalog easily
    + Fix comparison of nodesets to strings
  * Improvements:
    + Add Makefile rules to rebuild HTML man pages
    + Remove generated file python/setup.py from version control
    + Fix mixed decls and code in timsort.h
    + Rework handling of return values in thread tests
    + Fix unused variable warnings in testrecurse
    + Fix -Wimplicit-fallthrough warnings
    + Upgrade timsort.h to latest revision
    + Fix a couple of warnings in dict.c and threads.c
    + Fix unused variable warnings in nanohttp.c
    + Don't include winsock2.h in xmllint.c
    + Use __linux__ macro in generated code
  * Portability:
    + Add declaration for DllMain
    + Fix preprocessor conditional in threads.h
    + Fix macro redefinition warning
    + many Windows specific improvements
  * Documentation:
    + xmlcatalog: refresh man page wrt. quering system catalog easily
- Includes bug fixes from 2.9.6:
  * Fix XPath stack frame logic
  * Report undefined XPath variable error message
  * Fix regression with librsvg
  * Handle more invalid entity values in recovery mode
  * Fix structured validation errors
  * Fix memory leak in LZMA decompressor
  * Set memory limit for LZMA decompression
  * Handle illegal entity values in recovery mode
  * Fix debug dump of streaming XPath expressions
  * Fix memory leak in nanoftp
  * Fix memory leaks in SAX1 parser
- Drop libxml2-bug787941.patch
  * upstreamed in 3157cf4e53c03bc3da604472c015c63141907db8</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [bsc#1102046, CVE-2018-14404]
  * NULL pointer dereference in xpath.c:xmlXPathCompOpEval() can
    allow attackers to cause a denial of service
  * Added libxml2-CVE-2018-14404.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148801">- Security fix:
  [bsc#1088279, CVE-2018-9251][bsc#1105166, CVE-2018-14567]
  * Infinite loop in LZMA decompression
  * Fixes CVE-2018-9251 introduced by CVE-2017-18258
  * Added libxml2-CVE-2018-14567.patch</changelog>
</package>
<package pkgid="000f883c1bfd1caed37924481724c6211ace730c6afe3e7a4796ed4190f2a2fd" name="libxml2" arch="src">
  <version epoch="0" ver="2.9.7" rel="lp150.2.3.1"/>
  <changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes/provides to baselibs.conf.</changelog>
  <changelog author="vcizek@suse.com" date="1413547200">- fix for CVE-2014-3660 (bnc#901546)
  * denial of service via recursive entity expansion
    (related to billion laughs)
  * added libxml2-CVE-2014-3660.patch</changelog>
  <changelog author="vcizek@suse.com" date="1414756800">- update to 2.9.2
  * drop libxml2-CVE-2014-3660.patch (upstream)
  * add keyring to verify tarball
  Security:
  Fix for CVE-2014-3660 billion laugh variant
  CVE-2014-0191 Do not fetch external parameter entities
  Improvements:
  win32/libxml2.def.src after rebuild in doc
  elfgcchack.h: more legacy needs xmlSAX2StartElement() and xmlSAX2EndElement()
  elfgcchack.h: add xmlXPathNodeEval and xmlXPathSetContextNode
  Provide cmake module
  Fix a couple of issues raised by make dist
  Fix and add const qualifiers
  Preparing for upcoming release of 2.9.2
  Fix zlib and lzma libraries check via command line
  wrong error column in structured error when parsing end tag
  doc/news.html: small update to avoid line join while generating NEWS.
  Add methods for python3 iterator
  Support element node traversal in document fragments
  xmlNodeSetName: Allow setting the name to a substring of the currently set name
  Added macros for argument casts
  adding init calls to xml and html Read parsing entry points
  Get rid of 'REPLACEMENT CHARACTER' Unicode chars in xmlschemas.c
  Implement choice for name classes on attributes
  Two small namespace tweaks
  xmllint --memory should fail on empty files
  Cast encoding name to char pointer to match arg type</changelog>
  <changelog author="vcizek@suse.com" date="1415016000">- fix a regression in libxml2 2.9.2
  * https://bugzilla.redhat.com/show_bug.cgi?id=1153753
- add libxml2-dont_initialize_catalog.patch</changelog>
  <changelog author="vcizek@suse.com" date="1415016001">- fix a missing entities after CVE-2014-3660 fix
  (https://bugzilla.gnome.org/show_bug.cgi?id=738805)
  * added patches:
    0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
    0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1448366400">- Update to new upstream release 2.9.3 (bsc#954429):
  * Fixes for CVE-2015-8035, CVE-2015-7942, CVE-2015-7941,
    CVE-2015-1819, CVE-2015-7497, CVE-2015-7498, CVE-2015-5312,
    CVE-2015-7499, CVE-2015-7500 and CVE-2015-8242
  * And other bugfixes
- Removed upstream fixed patches:
  * libxml2-dont_initialize_catalog.patch
  * 0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
  * 0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
  <changelog author="sflees@suse.de" date="1462276800">- Add libxml2-2.9.1-CVE-2016-3627.patch to fix stack exhaustion
  while parsing certain XML files in recovery mode (CVE-2016-3627,
  bnc#972335).
- Add 0001-Add-missing-increments-of-recursion-depth-counter-to.patch
  to improve protection against Billion Laughs Attack (bnc#975947).</changelog>
  <changelog author="kstreitova@suse.com" date="1463745600">- add libxml2-2.9.3-bogus_UTF-8_encoding_error.patch to fix XML
  push parser that fails with bogus UTF-8 encoding error when
  multi-byte character in large CDATA section is split across
  buffer [bnc#962796]</changelog>
  <changelog author="psimons@suse.com" date="1464350400">- Update libxml2 to version libxml2-2.9.4. The new version is
  resistant against CVE-2016-3627, CVE-2016-1833, CVE-2016-1835,
  CVE-2016-1837, CVE-2016-1836, CVE-2016-1839, CVE-2016-1838,
  CVE-2016-1840, CVE-2016-4483, CVE-2016-1834, CVE-2016-3705, and
  CVE-2016-1762.
- Remove obsolete patches libxml2-2.9.1-CVE-2016-3627.patch,
  0001-Add-missing-increments-of-recursion-depth-counter-to.patch,
  and libxml2-2.9.3-bogus_UTF-8_encoding_error.patch.</changelog>
  <changelog author="kstreitova@suse.com" date="1465387200">- add libxml2-2.9.4-fix_attribute_decoding.patch to fix attribute
  decoding during XML schema validation [bnc#983288]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1488888000">- Added libxml2-CVE-2016-4658.patch: Disallow namespace nodes in
  XPointer ranges. Namespace nodes must be copied to avoid
  use-after-free errors. But they don't necessarily have a physical
  representation in a document, so simply disallow them in XPointer
  ranges [bsc#1005544] [CVE-2016-4658]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1495454400">- Security fixes:
  * libxml2-CVE-2017-9049.patch [bsc#1039066]
  * heap-based buffer overflow (xmlDictComputeFastKey func)
  * libxml2-CVE-2017-9048.patch [bsc#1039063]
  * stack overflow vulnerability (xmlSnprintfElementContent func)
  * libxml2-CVE-2017-9047.patch [bsc#1039064]
  * stack overflow vulnerability (xmlSnprintfElementContent func)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1497441600">- Security fix:
  * libxml2-CVE-2017-5969.patch [bsc#1024989, CVE-2017-5969]
  * Fix NULL pointer deref in xmlDumpElementContent</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1497528000">- Security fix:
  * libxml2-CVE-2017-0663.patch [bsc#1044337, CVE-2017-0663]
  * Fix Heap buffer overflow in xmlAddID</changelog>
  <changelog author="tchvatal@suse.com" date="1505044800">- Version update to 2.9.5 release:
  * Merged all the previous cve fixes that were patched in
  * Few small tweaks
- Remove merged patches:
  * libxml2-CVE-2016-4658.patch
  * libxml2-CVE-2017-0663.patch
  * libxml2-CVE-2017-5969.patch
  * libxml2-CVE-2017-9047.patch
  * libxml2-CVE-2017-9048.patch
  * libxml2-CVE-2017-9049.patch
  * libxml2-2.9.4-fix_attribute_decoding.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1505995200">- Add patch to fix TW integration:
  * libxml2-bug787941.patch</changelog>
  <changelog author="jengelh@inai.de" date="1505995201">- Update package summaries and RPM groups. Trim descriptions for
  size on secondary subpackages. Replace install call by a
  commonly-used macro.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Version update to 2.9.7 release:
  * Bug Fixes:
    + xmlcatalog: restore ability to query system catalog easily
    + Fix comparison of nodesets to strings
  * Improvements:
    + Add Makefile rules to rebuild HTML man pages
    + Remove generated file python/setup.py from version control
    + Fix mixed decls and code in timsort.h
    + Rework handling of return values in thread tests
    + Fix unused variable warnings in testrecurse
    + Fix -Wimplicit-fallthrough warnings
    + Upgrade timsort.h to latest revision
    + Fix a couple of warnings in dict.c and threads.c
    + Fix unused variable warnings in nanohttp.c
    + Don't include winsock2.h in xmllint.c
    + Use __linux__ macro in generated code
  * Portability:
    + Add declaration for DllMain
    + Fix preprocessor conditional in threads.h
    + Fix macro redefinition warning
    + many Windows specific improvements
  * Documentation:
    + xmlcatalog: refresh man page wrt. quering system catalog easily
- Includes bug fixes from 2.9.6:
  * Fix XPath stack frame logic
  * Report undefined XPath variable error message
  * Fix regression with librsvg
  * Handle more invalid entity values in recovery mode
  * Fix structured validation errors
  * Fix memory leak in LZMA decompressor
  * Set memory limit for LZMA decompression
  * Handle illegal entity values in recovery mode
  * Fix debug dump of streaming XPath expressions
  * Fix memory leak in nanoftp
  * Fix memory leaks in SAX1 parser
- Drop libxml2-bug787941.patch
  * upstreamed in 3157cf4e53c03bc3da604472c015c63141907db8</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [bsc#1102046, CVE-2018-14404]
  * NULL pointer dereference in xpath.c:xmlXPathCompOpEval() can
    allow attackers to cause a denial of service
  * Added libxml2-CVE-2018-14404.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148801">- Security fix:
  [bsc#1088279, CVE-2018-9251][bsc#1105166, CVE-2018-14567]
  * Infinite loop in LZMA decompression
  * Fixes CVE-2018-9251 introduced by CVE-2017-18258
  * Added libxml2-CVE-2018-14567.patch</changelog>
</package>
<package pkgid="84ec728b40d8eda4585040e2e7535f4ecdd45386b33fb54be05527185797e0e4" name="libxml2-devel" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="lp150.2.3.1"/>
  <changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes/provides to baselibs.conf.</changelog>
  <changelog author="vcizek@suse.com" date="1413547200">- fix for CVE-2014-3660 (bnc#901546)
  * denial of service via recursive entity expansion
    (related to billion laughs)
  * added libxml2-CVE-2014-3660.patch</changelog>
  <changelog author="vcizek@suse.com" date="1414756800">- update to 2.9.2
  * drop libxml2-CVE-2014-3660.patch (upstream)
  * add keyring to verify tarball
  Security:
  Fix for CVE-2014-3660 billion laugh variant
  CVE-2014-0191 Do not fetch external parameter entities
  Improvements:
  win32/libxml2.def.src after rebuild in doc
  elfgcchack.h: more legacy needs xmlSAX2StartElement() and xmlSAX2EndElement()
  elfgcchack.h: add xmlXPathNodeEval and xmlXPathSetContextNode
  Provide cmake module
  Fix a couple of issues raised by make dist
  Fix and add const qualifiers
  Preparing for upcoming release of 2.9.2
  Fix zlib and lzma libraries check via command line
  wrong error column in structured error when parsing end tag
  doc/news.html: small update to avoid line join while generating NEWS.
  Add methods for python3 iterator
  Support element node traversal in document fragments
  xmlNodeSetName: Allow setting the name to a substring of the currently set name
  Added macros for argument casts
  adding init calls to xml and html Read parsing entry points
  Get rid of 'REPLACEMENT CHARACTER' Unicode chars in xmlschemas.c
  Implement choice for name classes on attributes
  Two small namespace tweaks
  xmllint --memory should fail on empty files
  Cast encoding name to char pointer to match arg type</changelog>
  <changelog author="vcizek@suse.com" date="1415016000">- fix a regression in libxml2 2.9.2
  * https://bugzilla.redhat.com/show_bug.cgi?id=1153753
- add libxml2-dont_initialize_catalog.patch</changelog>
  <changelog author="vcizek@suse.com" date="1415016001">- fix a missing entities after CVE-2014-3660 fix
  (https://bugzilla.gnome.org/show_bug.cgi?id=738805)
  * added patches:
    0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
    0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1448366400">- Update to new upstream release 2.9.3 (bsc#954429):
  * Fixes for CVE-2015-8035, CVE-2015-7942, CVE-2015-7941,
    CVE-2015-1819, CVE-2015-7497, CVE-2015-7498, CVE-2015-5312,
    CVE-2015-7499, CVE-2015-7500 and CVE-2015-8242
  * And other bugfixes
- Removed upstream fixed patches:
  * libxml2-dont_initialize_catalog.patch
  * 0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
  * 0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
  <changelog author="sflees@suse.de" date="1462276800">- Add libxml2-2.9.1-CVE-2016-3627.patch to fix stack exhaustion
  while parsing certain XML files in recovery mode (CVE-2016-3627,
  bnc#972335).
- Add 0001-Add-missing-increments-of-recursion-depth-counter-to.patch
  to improve protection against Billion Laughs Attack (bnc#975947).</changelog>
  <changelog author="kstreitova@suse.com" date="1463745600">- add libxml2-2.9.3-bogus_UTF-8_encoding_error.patch to fix XML
  push parser that fails with bogus UTF-8 encoding error when
  multi-byte character in large CDATA section is split across
  buffer [bnc#962796]</changelog>
  <changelog author="psimons@suse.com" date="1464350400">- Update libxml2 to version libxml2-2.9.4. The new version is
  resistant against CVE-2016-3627, CVE-2016-1833, CVE-2016-1835,
  CVE-2016-1837, CVE-2016-1836, CVE-2016-1839, CVE-2016-1838,
  CVE-2016-1840, CVE-2016-4483, CVE-2016-1834, CVE-2016-3705, and
  CVE-2016-1762.
- Remove obsolete patches libxml2-2.9.1-CVE-2016-3627.patch,
  0001-Add-missing-increments-of-recursion-depth-counter-to.patch,
  and libxml2-2.9.3-bogus_UTF-8_encoding_error.patch.</changelog>
  <changelog author="kstreitova@suse.com" date="1465387200">- add libxml2-2.9.4-fix_attribute_decoding.patch to fix attribute
  decoding during XML schema validation [bnc#983288]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1488888000">- Added libxml2-CVE-2016-4658.patch: Disallow namespace nodes in
  XPointer ranges. Namespace nodes must be copied to avoid
  use-after-free errors. But they don't necessarily have a physical
  representation in a document, so simply disallow them in XPointer
  ranges [bsc#1005544] [CVE-2016-4658]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1495454400">- Security fixes:
  * libxml2-CVE-2017-9049.patch [bsc#1039066]
  * heap-based buffer overflow (xmlDictComputeFastKey func)
  * libxml2-CVE-2017-9048.patch [bsc#1039063]
  * stack overflow vulnerability (xmlSnprintfElementContent func)
  * libxml2-CVE-2017-9047.patch [bsc#1039064]
  * stack overflow vulnerability (xmlSnprintfElementContent func)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1497441600">- Security fix:
  * libxml2-CVE-2017-5969.patch [bsc#1024989, CVE-2017-5969]
  * Fix NULL pointer deref in xmlDumpElementContent</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1497528000">- Security fix:
  * libxml2-CVE-2017-0663.patch [bsc#1044337, CVE-2017-0663]
  * Fix Heap buffer overflow in xmlAddID</changelog>
  <changelog author="tchvatal@suse.com" date="1505044800">- Version update to 2.9.5 release:
  * Merged all the previous cve fixes that were patched in
  * Few small tweaks
- Remove merged patches:
  * libxml2-CVE-2016-4658.patch
  * libxml2-CVE-2017-0663.patch
  * libxml2-CVE-2017-5969.patch
  * libxml2-CVE-2017-9047.patch
  * libxml2-CVE-2017-9048.patch
  * libxml2-CVE-2017-9049.patch
  * libxml2-2.9.4-fix_attribute_decoding.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1505995200">- Add patch to fix TW integration:
  * libxml2-bug787941.patch</changelog>
  <changelog author="jengelh@inai.de" date="1505995201">- Update package summaries and RPM groups. Trim descriptions for
  size on secondary subpackages. Replace install call by a
  commonly-used macro.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Version update to 2.9.7 release:
  * Bug Fixes:
    + xmlcatalog: restore ability to query system catalog easily
    + Fix comparison of nodesets to strings
  * Improvements:
    + Add Makefile rules to rebuild HTML man pages
    + Remove generated file python/setup.py from version control
    + Fix mixed decls and code in timsort.h
    + Rework handling of return values in thread tests
    + Fix unused variable warnings in testrecurse
    + Fix -Wimplicit-fallthrough warnings
    + Upgrade timsort.h to latest revision
    + Fix a couple of warnings in dict.c and threads.c
    + Fix unused variable warnings in nanohttp.c
    + Don't include winsock2.h in xmllint.c
    + Use __linux__ macro in generated code
  * Portability:
    + Add declaration for DllMain
    + Fix preprocessor conditional in threads.h
    + Fix macro redefinition warning
    + many Windows specific improvements
  * Documentation:
    + xmlcatalog: refresh man page wrt. quering system catalog easily
- Includes bug fixes from 2.9.6:
  * Fix XPath stack frame logic
  * Report undefined XPath variable error message
  * Fix regression with librsvg
  * Handle more invalid entity values in recovery mode
  * Fix structured validation errors
  * Fix memory leak in LZMA decompressor
  * Set memory limit for LZMA decompression
  * Handle illegal entity values in recovery mode
  * Fix debug dump of streaming XPath expressions
  * Fix memory leak in nanoftp
  * Fix memory leaks in SAX1 parser
- Drop libxml2-bug787941.patch
  * upstreamed in 3157cf4e53c03bc3da604472c015c63141907db8</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [bsc#1102046, CVE-2018-14404]
  * NULL pointer dereference in xpath.c:xmlXPathCompOpEval() can
    allow attackers to cause a denial of service
  * Added libxml2-CVE-2018-14404.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148801">- Security fix:
  [bsc#1088279, CVE-2018-9251][bsc#1105166, CVE-2018-14567]
  * Infinite loop in LZMA decompression
  * Fixes CVE-2018-9251 introduced by CVE-2017-18258
  * Added libxml2-CVE-2018-14567.patch</changelog>
</package>
<package pkgid="20497f8abbd12a03dd4c3fe87c50e2a4fc2169b0949bcd86786ceb25eda11fee" name="libxml2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="lp150.2.3.1"/>
  <changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes/provides to baselibs.conf.</changelog>
  <changelog author="vcizek@suse.com" date="1413547200">- fix for CVE-2014-3660 (bnc#901546)
  * denial of service via recursive entity expansion
    (related to billion laughs)
  * added libxml2-CVE-2014-3660.patch</changelog>
  <changelog author="vcizek@suse.com" date="1414756800">- update to 2.9.2
  * drop libxml2-CVE-2014-3660.patch (upstream)
  * add keyring to verify tarball
  Security:
  Fix for CVE-2014-3660 billion laugh variant
  CVE-2014-0191 Do not fetch external parameter entities
  Improvements:
  win32/libxml2.def.src after rebuild in doc
  elfgcchack.h: more legacy needs xmlSAX2StartElement() and xmlSAX2EndElement()
  elfgcchack.h: add xmlXPathNodeEval and xmlXPathSetContextNode
  Provide cmake module
  Fix a couple of issues raised by make dist
  Fix and add const qualifiers
  Preparing for upcoming release of 2.9.2
  Fix zlib and lzma libraries check via command line
  wrong error column in structured error when parsing end tag
  doc/news.html: small update to avoid line join while generating NEWS.
  Add methods for python3 iterator
  Support element node traversal in document fragments
  xmlNodeSetName: Allow setting the name to a substring of the currently set name
  Added macros for argument casts
  adding init calls to xml and html Read parsing entry points
  Get rid of 'REPLACEMENT CHARACTER' Unicode chars in xmlschemas.c
  Implement choice for name classes on attributes
  Two small namespace tweaks
  xmllint --memory should fail on empty files
  Cast encoding name to char pointer to match arg type</changelog>
  <changelog author="vcizek@suse.com" date="1415016000">- fix a regression in libxml2 2.9.2
  * https://bugzilla.redhat.com/show_bug.cgi?id=1153753
- add libxml2-dont_initialize_catalog.patch</changelog>
  <changelog author="vcizek@suse.com" date="1415016001">- fix a missing entities after CVE-2014-3660 fix
  (https://bugzilla.gnome.org/show_bug.cgi?id=738805)
  * added patches:
    0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
    0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1448366400">- Update to new upstream release 2.9.3 (bsc#954429):
  * Fixes for CVE-2015-8035, CVE-2015-7942, CVE-2015-7941,
    CVE-2015-1819, CVE-2015-7497, CVE-2015-7498, CVE-2015-5312,
    CVE-2015-7499, CVE-2015-7500 and CVE-2015-8242
  * And other bugfixes
- Removed upstream fixed patches:
  * libxml2-dont_initialize_catalog.patch
  * 0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
  * 0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
  <changelog author="sflees@suse.de" date="1462276800">- Add libxml2-2.9.1-CVE-2016-3627.patch to fix stack exhaustion
  while parsing certain XML files in recovery mode (CVE-2016-3627,
  bnc#972335).
- Add 0001-Add-missing-increments-of-recursion-depth-counter-to.patch
  to improve protection against Billion Laughs Attack (bnc#975947).</changelog>
  <changelog author="kstreitova@suse.com" date="1463745600">- add libxml2-2.9.3-bogus_UTF-8_encoding_error.patch to fix XML
  push parser that fails with bogus UTF-8 encoding error when
  multi-byte character in large CDATA section is split across
  buffer [bnc#962796]</changelog>
  <changelog author="psimons@suse.com" date="1464350400">- Update libxml2 to version libxml2-2.9.4. The new version is
  resistant against CVE-2016-3627, CVE-2016-1833, CVE-2016-1835,
  CVE-2016-1837, CVE-2016-1836, CVE-2016-1839, CVE-2016-1838,
  CVE-2016-1840, CVE-2016-4483, CVE-2016-1834, CVE-2016-3705, and
  CVE-2016-1762.
- Remove obsolete patches libxml2-2.9.1-CVE-2016-3627.patch,
  0001-Add-missing-increments-of-recursion-depth-counter-to.patch,
  and libxml2-2.9.3-bogus_UTF-8_encoding_error.patch.</changelog>
  <changelog author="kstreitova@suse.com" date="1465387200">- add libxml2-2.9.4-fix_attribute_decoding.patch to fix attribute
  decoding during XML schema validation [bnc#983288]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1488888000">- Added libxml2-CVE-2016-4658.patch: Disallow namespace nodes in
  XPointer ranges. Namespace nodes must be copied to avoid
  use-after-free errors. But they don't necessarily have a physical
  representation in a document, so simply disallow them in XPointer
  ranges [bsc#1005544] [CVE-2016-4658]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1495454400">- Security fixes:
  * libxml2-CVE-2017-9049.patch [bsc#1039066]
  * heap-based buffer overflow (xmlDictComputeFastKey func)
  * libxml2-CVE-2017-9048.patch [bsc#1039063]
  * stack overflow vulnerability (xmlSnprintfElementContent func)
  * libxml2-CVE-2017-9047.patch [bsc#1039064]
  * stack overflow vulnerability (xmlSnprintfElementContent func)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1497441600">- Security fix:
  * libxml2-CVE-2017-5969.patch [bsc#1024989, CVE-2017-5969]
  * Fix NULL pointer deref in xmlDumpElementContent</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1497528000">- Security fix:
  * libxml2-CVE-2017-0663.patch [bsc#1044337, CVE-2017-0663]
  * Fix Heap buffer overflow in xmlAddID</changelog>
  <changelog author="tchvatal@suse.com" date="1505044800">- Version update to 2.9.5 release:
  * Merged all the previous cve fixes that were patched in
  * Few small tweaks
- Remove merged patches:
  * libxml2-CVE-2016-4658.patch
  * libxml2-CVE-2017-0663.patch
  * libxml2-CVE-2017-5969.patch
  * libxml2-CVE-2017-9047.patch
  * libxml2-CVE-2017-9048.patch
  * libxml2-CVE-2017-9049.patch
  * libxml2-2.9.4-fix_attribute_decoding.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1505995200">- Add patch to fix TW integration:
  * libxml2-bug787941.patch</changelog>
  <changelog author="jengelh@inai.de" date="1505995201">- Update package summaries and RPM groups. Trim descriptions for
  size on secondary subpackages. Replace install call by a
  commonly-used macro.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Version update to 2.9.7 release:
  * Bug Fixes:
    + xmlcatalog: restore ability to query system catalog easily
    + Fix comparison of nodesets to strings
  * Improvements:
    + Add Makefile rules to rebuild HTML man pages
    + Remove generated file python/setup.py from version control
    + Fix mixed decls and code in timsort.h
    + Rework handling of return values in thread tests
    + Fix unused variable warnings in testrecurse
    + Fix -Wimplicit-fallthrough warnings
    + Upgrade timsort.h to latest revision
    + Fix a couple of warnings in dict.c and threads.c
    + Fix unused variable warnings in nanohttp.c
    + Don't include winsock2.h in xmllint.c
    + Use __linux__ macro in generated code
  * Portability:
    + Add declaration for DllMain
    + Fix preprocessor conditional in threads.h
    + Fix macro redefinition warning
    + many Windows specific improvements
  * Documentation:
    + xmlcatalog: refresh man page wrt. quering system catalog easily
- Includes bug fixes from 2.9.6:
  * Fix XPath stack frame logic
  * Report undefined XPath variable error message
  * Fix regression with librsvg
  * Handle more invalid entity values in recovery mode
  * Fix structured validation errors
  * Fix memory leak in LZMA decompressor
  * Set memory limit for LZMA decompression
  * Handle illegal entity values in recovery mode
  * Fix debug dump of streaming XPath expressions
  * Fix memory leak in nanoftp
  * Fix memory leaks in SAX1 parser
- Drop libxml2-bug787941.patch
  * upstreamed in 3157cf4e53c03bc3da604472c015c63141907db8</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [bsc#1102046, CVE-2018-14404]
  * NULL pointer dereference in xpath.c:xmlXPathCompOpEval() can
    allow attackers to cause a denial of service
  * Added libxml2-CVE-2018-14404.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148801">- Security fix:
  [bsc#1088279, CVE-2018-9251][bsc#1105166, CVE-2018-14567]
  * Infinite loop in LZMA decompression
  * Fixes CVE-2018-9251 introduced by CVE-2017-18258
  * Added libxml2-CVE-2018-14567.patch</changelog>
</package>
<package pkgid="dbc5d0f3cd9800d6f66f6418af27a27fe6caa9c8750c6face4f01b5539b53bc8" name="libxml2-doc" arch="noarch">
  <version epoch="0" ver="2.9.7" rel="lp150.2.3.1"/>
  <changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes/provides to baselibs.conf.</changelog>
  <changelog author="vcizek@suse.com" date="1413547200">- fix for CVE-2014-3660 (bnc#901546)
  * denial of service via recursive entity expansion
    (related to billion laughs)
  * added libxml2-CVE-2014-3660.patch</changelog>
  <changelog author="vcizek@suse.com" date="1414756800">- update to 2.9.2
  * drop libxml2-CVE-2014-3660.patch (upstream)
  * add keyring to verify tarball
  Security:
  Fix for CVE-2014-3660 billion laugh variant
  CVE-2014-0191 Do not fetch external parameter entities
  Improvements:
  win32/libxml2.def.src after rebuild in doc
  elfgcchack.h: more legacy needs xmlSAX2StartElement() and xmlSAX2EndElement()
  elfgcchack.h: add xmlXPathNodeEval and xmlXPathSetContextNode
  Provide cmake module
  Fix a couple of issues raised by make dist
  Fix and add const qualifiers
  Preparing for upcoming release of 2.9.2
  Fix zlib and lzma libraries check via command line
  wrong error column in structured error when parsing end tag
  doc/news.html: small update to avoid line join while generating NEWS.
  Add methods for python3 iterator
  Support element node traversal in document fragments
  xmlNodeSetName: Allow setting the name to a substring of the currently set name
  Added macros for argument casts
  adding init calls to xml and html Read parsing entry points
  Get rid of 'REPLACEMENT CHARACTER' Unicode chars in xmlschemas.c
  Implement choice for name classes on attributes
  Two small namespace tweaks
  xmllint --memory should fail on empty files
  Cast encoding name to char pointer to match arg type</changelog>
  <changelog author="vcizek@suse.com" date="1415016000">- fix a regression in libxml2 2.9.2
  * https://bugzilla.redhat.com/show_bug.cgi?id=1153753
- add libxml2-dont_initialize_catalog.patch</changelog>
  <changelog author="vcizek@suse.com" date="1415016001">- fix a missing entities after CVE-2014-3660 fix
  (https://bugzilla.gnome.org/show_bug.cgi?id=738805)
  * added patches:
    0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
    0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1448366400">- Update to new upstream release 2.9.3 (bsc#954429):
  * Fixes for CVE-2015-8035, CVE-2015-7942, CVE-2015-7941,
    CVE-2015-1819, CVE-2015-7497, CVE-2015-7498, CVE-2015-5312,
    CVE-2015-7499, CVE-2015-7500 and CVE-2015-8242
  * And other bugfixes
- Removed upstream fixed patches:
  * libxml2-dont_initialize_catalog.patch
  * 0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
  * 0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
  <changelog author="sflees@suse.de" date="1462276800">- Add libxml2-2.9.1-CVE-2016-3627.patch to fix stack exhaustion
  while parsing certain XML files in recovery mode (CVE-2016-3627,
  bnc#972335).
- Add 0001-Add-missing-increments-of-recursion-depth-counter-to.patch
  to improve protection against Billion Laughs Attack (bnc#975947).</changelog>
  <changelog author="kstreitova@suse.com" date="1463745600">- add libxml2-2.9.3-bogus_UTF-8_encoding_error.patch to fix XML
  push parser that fails with bogus UTF-8 encoding error when
  multi-byte character in large CDATA section is split across
  buffer [bnc#962796]</changelog>
  <changelog author="psimons@suse.com" date="1464350400">- Update libxml2 to version libxml2-2.9.4. The new version is
  resistant against CVE-2016-3627, CVE-2016-1833, CVE-2016-1835,
  CVE-2016-1837, CVE-2016-1836, CVE-2016-1839, CVE-2016-1838,
  CVE-2016-1840, CVE-2016-4483, CVE-2016-1834, CVE-2016-3705, and
  CVE-2016-1762.
- Remove obsolete patches libxml2-2.9.1-CVE-2016-3627.patch,
  0001-Add-missing-increments-of-recursion-depth-counter-to.patch,
  and libxml2-2.9.3-bogus_UTF-8_encoding_error.patch.</changelog>
  <changelog author="kstreitova@suse.com" date="1465387200">- add libxml2-2.9.4-fix_attribute_decoding.patch to fix attribute
  decoding during XML schema validation [bnc#983288]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1488888000">- Added libxml2-CVE-2016-4658.patch: Disallow namespace nodes in
  XPointer ranges. Namespace nodes must be copied to avoid
  use-after-free errors. But they don't necessarily have a physical
  representation in a document, so simply disallow them in XPointer
  ranges [bsc#1005544] [CVE-2016-4658]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1495454400">- Security fixes:
  * libxml2-CVE-2017-9049.patch [bsc#1039066]
  * heap-based buffer overflow (xmlDictComputeFastKey func)
  * libxml2-CVE-2017-9048.patch [bsc#1039063]
  * stack overflow vulnerability (xmlSnprintfElementContent func)
  * libxml2-CVE-2017-9047.patch [bsc#1039064]
  * stack overflow vulnerability (xmlSnprintfElementContent func)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1497441600">- Security fix:
  * libxml2-CVE-2017-5969.patch [bsc#1024989, CVE-2017-5969]
  * Fix NULL pointer deref in xmlDumpElementContent</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1497528000">- Security fix:
  * libxml2-CVE-2017-0663.patch [bsc#1044337, CVE-2017-0663]
  * Fix Heap buffer overflow in xmlAddID</changelog>
  <changelog author="tchvatal@suse.com" date="1505044800">- Version update to 2.9.5 release:
  * Merged all the previous cve fixes that were patched in
  * Few small tweaks
- Remove merged patches:
  * libxml2-CVE-2016-4658.patch
  * libxml2-CVE-2017-0663.patch
  * libxml2-CVE-2017-5969.patch
  * libxml2-CVE-2017-9047.patch
  * libxml2-CVE-2017-9048.patch
  * libxml2-CVE-2017-9049.patch
  * libxml2-2.9.4-fix_attribute_decoding.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1505995200">- Add patch to fix TW integration:
  * libxml2-bug787941.patch</changelog>
  <changelog author="jengelh@inai.de" date="1505995201">- Update package summaries and RPM groups. Trim descriptions for
  size on secondary subpackages. Replace install call by a
  commonly-used macro.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Version update to 2.9.7 release:
  * Bug Fixes:
    + xmlcatalog: restore ability to query system catalog easily
    + Fix comparison of nodesets to strings
  * Improvements:
    + Add Makefile rules to rebuild HTML man pages
    + Remove generated file python/setup.py from version control
    + Fix mixed decls and code in timsort.h
    + Rework handling of return values in thread tests
    + Fix unused variable warnings in testrecurse
    + Fix -Wimplicit-fallthrough warnings
    + Upgrade timsort.h to latest revision
    + Fix a couple of warnings in dict.c and threads.c
    + Fix unused variable warnings in nanohttp.c
    + Don't include winsock2.h in xmllint.c
    + Use __linux__ macro in generated code
  * Portability:
    + Add declaration for DllMain
    + Fix preprocessor conditional in threads.h
    + Fix macro redefinition warning
    + many Windows specific improvements
  * Documentation:
    + xmlcatalog: refresh man page wrt. quering system catalog easily
- Includes bug fixes from 2.9.6:
  * Fix XPath stack frame logic
  * Report undefined XPath variable error message
  * Fix regression with librsvg
  * Handle more invalid entity values in recovery mode
  * Fix structured validation errors
  * Fix memory leak in LZMA decompressor
  * Set memory limit for LZMA decompression
  * Handle illegal entity values in recovery mode
  * Fix debug dump of streaming XPath expressions
  * Fix memory leak in nanoftp
  * Fix memory leaks in SAX1 parser
- Drop libxml2-bug787941.patch
  * upstreamed in 3157cf4e53c03bc3da604472c015c63141907db8</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [bsc#1102046, CVE-2018-14404]
  * NULL pointer dereference in xpath.c:xmlXPathCompOpEval() can
    allow attackers to cause a denial of service
  * Added libxml2-CVE-2018-14404.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148801">- Security fix:
  [bsc#1088279, CVE-2018-9251][bsc#1105166, CVE-2018-14567]
  * Infinite loop in LZMA decompression
  * Fixes CVE-2018-9251 introduced by CVE-2017-18258
  * Added libxml2-CVE-2018-14567.patch</changelog>
</package>
<package pkgid="fe0bf20345cd4088f7477e333ea6384d36a82bcbe34149f727895c06cc9e5e7f" name="libxml2-tools" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="lp150.2.3.1"/>
  <changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes/provides to baselibs.conf.</changelog>
  <changelog author="vcizek@suse.com" date="1413547200">- fix for CVE-2014-3660 (bnc#901546)
  * denial of service via recursive entity expansion
    (related to billion laughs)
  * added libxml2-CVE-2014-3660.patch</changelog>
  <changelog author="vcizek@suse.com" date="1414756800">- update to 2.9.2
  * drop libxml2-CVE-2014-3660.patch (upstream)
  * add keyring to verify tarball
  Security:
  Fix for CVE-2014-3660 billion laugh variant
  CVE-2014-0191 Do not fetch external parameter entities
  Improvements:
  win32/libxml2.def.src after rebuild in doc
  elfgcchack.h: more legacy needs xmlSAX2StartElement() and xmlSAX2EndElement()
  elfgcchack.h: add xmlXPathNodeEval and xmlXPathSetContextNode
  Provide cmake module
  Fix a couple of issues raised by make dist
  Fix and add const qualifiers
  Preparing for upcoming release of 2.9.2
  Fix zlib and lzma libraries check via command line
  wrong error column in structured error when parsing end tag
  doc/news.html: small update to avoid line join while generating NEWS.
  Add methods for python3 iterator
  Support element node traversal in document fragments
  xmlNodeSetName: Allow setting the name to a substring of the currently set name
  Added macros for argument casts
  adding init calls to xml and html Read parsing entry points
  Get rid of 'REPLACEMENT CHARACTER' Unicode chars in xmlschemas.c
  Implement choice for name classes on attributes
  Two small namespace tweaks
  xmllint --memory should fail on empty files
  Cast encoding name to char pointer to match arg type</changelog>
  <changelog author="vcizek@suse.com" date="1415016000">- fix a regression in libxml2 2.9.2
  * https://bugzilla.redhat.com/show_bug.cgi?id=1153753
- add libxml2-dont_initialize_catalog.patch</changelog>
  <changelog author="vcizek@suse.com" date="1415016001">- fix a missing entities after CVE-2014-3660 fix
  (https://bugzilla.gnome.org/show_bug.cgi?id=738805)
  * added patches:
    0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
    0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1448366400">- Update to new upstream release 2.9.3 (bsc#954429):
  * Fixes for CVE-2015-8035, CVE-2015-7942, CVE-2015-7941,
    CVE-2015-1819, CVE-2015-7497, CVE-2015-7498, CVE-2015-5312,
    CVE-2015-7499, CVE-2015-7500 and CVE-2015-8242
  * And other bugfixes
- Removed upstream fixed patches:
  * libxml2-dont_initialize_catalog.patch
  * 0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
  * 0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
  <changelog author="sflees@suse.de" date="1462276800">- Add libxml2-2.9.1-CVE-2016-3627.patch to fix stack exhaustion
  while parsing certain XML files in recovery mode (CVE-2016-3627,
  bnc#972335).
- Add 0001-Add-missing-increments-of-recursion-depth-counter-to.patch
  to improve protection against Billion Laughs Attack (bnc#975947).</changelog>
  <changelog author="kstreitova@suse.com" date="1463745600">- add libxml2-2.9.3-bogus_UTF-8_encoding_error.patch to fix XML
  push parser that fails with bogus UTF-8 encoding error when
  multi-byte character in large CDATA section is split across
  buffer [bnc#962796]</changelog>
  <changelog author="psimons@suse.com" date="1464350400">- Update libxml2 to version libxml2-2.9.4. The new version is
  resistant against CVE-2016-3627, CVE-2016-1833, CVE-2016-1835,
  CVE-2016-1837, CVE-2016-1836, CVE-2016-1839, CVE-2016-1838,
  CVE-2016-1840, CVE-2016-4483, CVE-2016-1834, CVE-2016-3705, and
  CVE-2016-1762.
- Remove obsolete patches libxml2-2.9.1-CVE-2016-3627.patch,
  0001-Add-missing-increments-of-recursion-depth-counter-to.patch,
  and libxml2-2.9.3-bogus_UTF-8_encoding_error.patch.</changelog>
  <changelog author="kstreitova@suse.com" date="1465387200">- add libxml2-2.9.4-fix_attribute_decoding.patch to fix attribute
  decoding during XML schema validation [bnc#983288]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1488888000">- Added libxml2-CVE-2016-4658.patch: Disallow namespace nodes in
  XPointer ranges. Namespace nodes must be copied to avoid
  use-after-free errors. But they don't necessarily have a physical
  representation in a document, so simply disallow them in XPointer
  ranges [bsc#1005544] [CVE-2016-4658]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1495454400">- Security fixes:
  * libxml2-CVE-2017-9049.patch [bsc#1039066]
  * heap-based buffer overflow (xmlDictComputeFastKey func)
  * libxml2-CVE-2017-9048.patch [bsc#1039063]
  * stack overflow vulnerability (xmlSnprintfElementContent func)
  * libxml2-CVE-2017-9047.patch [bsc#1039064]
  * stack overflow vulnerability (xmlSnprintfElementContent func)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1497441600">- Security fix:
  * libxml2-CVE-2017-5969.patch [bsc#1024989, CVE-2017-5969]
  * Fix NULL pointer deref in xmlDumpElementContent</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1497528000">- Security fix:
  * libxml2-CVE-2017-0663.patch [bsc#1044337, CVE-2017-0663]
  * Fix Heap buffer overflow in xmlAddID</changelog>
  <changelog author="tchvatal@suse.com" date="1505044800">- Version update to 2.9.5 release:
  * Merged all the previous cve fixes that were patched in
  * Few small tweaks
- Remove merged patches:
  * libxml2-CVE-2016-4658.patch
  * libxml2-CVE-2017-0663.patch
  * libxml2-CVE-2017-5969.patch
  * libxml2-CVE-2017-9047.patch
  * libxml2-CVE-2017-9048.patch
  * libxml2-CVE-2017-9049.patch
  * libxml2-2.9.4-fix_attribute_decoding.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1505995200">- Add patch to fix TW integration:
  * libxml2-bug787941.patch</changelog>
  <changelog author="jengelh@inai.de" date="1505995201">- Update package summaries and RPM groups. Trim descriptions for
  size on secondary subpackages. Replace install call by a
  commonly-used macro.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Version update to 2.9.7 release:
  * Bug Fixes:
    + xmlcatalog: restore ability to query system catalog easily
    + Fix comparison of nodesets to strings
  * Improvements:
    + Add Makefile rules to rebuild HTML man pages
    + Remove generated file python/setup.py from version control
    + Fix mixed decls and code in timsort.h
    + Rework handling of return values in thread tests
    + Fix unused variable warnings in testrecurse
    + Fix -Wimplicit-fallthrough warnings
    + Upgrade timsort.h to latest revision
    + Fix a couple of warnings in dict.c and threads.c
    + Fix unused variable warnings in nanohttp.c
    + Don't include winsock2.h in xmllint.c
    + Use __linux__ macro in generated code
  * Portability:
    + Add declaration for DllMain
    + Fix preprocessor conditional in threads.h
    + Fix macro redefinition warning
    + many Windows specific improvements
  * Documentation:
    + xmlcatalog: refresh man page wrt. quering system catalog easily
- Includes bug fixes from 2.9.6:
  * Fix XPath stack frame logic
  * Report undefined XPath variable error message
  * Fix regression with librsvg
  * Handle more invalid entity values in recovery mode
  * Fix structured validation errors
  * Fix memory leak in LZMA decompressor
  * Set memory limit for LZMA decompression
  * Handle illegal entity values in recovery mode
  * Fix debug dump of streaming XPath expressions
  * Fix memory leak in nanoftp
  * Fix memory leaks in SAX1 parser
- Drop libxml2-bug787941.patch
  * upstreamed in 3157cf4e53c03bc3da604472c015c63141907db8</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [bsc#1102046, CVE-2018-14404]
  * NULL pointer dereference in xpath.c:xmlXPathCompOpEval() can
    allow attackers to cause a denial of service
  * Added libxml2-CVE-2018-14404.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148801">- Security fix:
  [bsc#1088279, CVE-2018-9251][bsc#1105166, CVE-2018-14567]
  * Infinite loop in LZMA decompression
  * Fixes CVE-2018-9251 introduced by CVE-2017-18258
  * Added libxml2-CVE-2018-14567.patch</changelog>
</package>
<package pkgid="a8ed6b4e795c8420e1bb1fda592ba15ec3caa2cd9854e0cb8d6a5e88bbc22b57" name="libxmlsec1-1" arch="x86_64">
  <version epoch="0" ver="1.2.26" rel="lp150.2.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1389096000">- Initial packaging of xmlsec1 for SUSE</changelog>
  <changelog author="astieger@suse.com" date="1441281600">- update to 1.2.20:
  * fix a number of miscellaneous bugs
  * update expired or soon-to-be-expired certificates in test suite</changelog>
  <changelog author="tchvatal@suse.com" date="1464177600">- Version update to 1.2.22 (fate#320861):
  * see the ChangeLog for most detailed output
  * openssl 1.1 support
  * Few features from libreoffice for integrated
  * Run the testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1480334400">- Version update to 1.2.23:
  * Full support for OpenSSL 1.1.0
  * Several other small fixes</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490270400">- Fixed dependencies with libraries (bsc#1012246):
  * libxmlsec1-openssl.so
  * libxmlsec1-gcrypt.so
  * libxmlsec1-gnutls.so
  * libxmlsec1-nss.so</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1492689600">- Version update to 1.2.24:
  * Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support
  for xmlsec-nss.
  * Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS
  handling.
  * Disabled external entities loading by xmlsec utility app by
  default to prevent XXE attacks.
  * Improved OpenSSL version and features detection.
  * Cleaned up, simplified, and standardized internal error
  reporting.
  * Fixed a few Coverity-discovered bugs.
  * Marked as deprecated all the functions in xmlsec/soap.h file
  and a couple other functions no longer required by xmlsec.
  These functions will be removed in the future releases.
  * Several other small fixes (see commit log for more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1512043200">- Version update to 1.2.25:
  * Various small fixes
  * Coverity cleanups
  * Removed support for old openssl</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1528200000">- Version update to 1.2.26:
  * Added xmlsec-mscng module based on Microsoft Cryptography API: Next
    Generation
  * Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R
    34.10-2001 in xmlsec-mscrypto
  * Added LibreSSL 2.7 support
  * Upgraded documentation build process to support the latest gtk-doc</changelog>
  <changelog author="kallan@suse.com" date="1534248000">- Fixed (bsc#1104876).  Added: Requires: %{libname} = %{version} to each module
  in the spec file. This will ensure that when one of the modules is installed
  the corresponding version of libxmlsec1-1 will also be installed/upgraded.</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Add rplintrc to avoid bogus errors:
  * xmlsec1-rpmlintrc</changelog>
</package>
<package pkgid="a94d24bd9afbc165e6f1f99200cf035ff41d2a9004ec9d21c2feb9697366956e" name="libxmlsec1-gcrypt1" arch="x86_64">
  <version epoch="0" ver="1.2.26" rel="lp150.2.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1389096000">- Initial packaging of xmlsec1 for SUSE</changelog>
  <changelog author="astieger@suse.com" date="1441281600">- update to 1.2.20:
  * fix a number of miscellaneous bugs
  * update expired or soon-to-be-expired certificates in test suite</changelog>
  <changelog author="tchvatal@suse.com" date="1464177600">- Version update to 1.2.22 (fate#320861):
  * see the ChangeLog for most detailed output
  * openssl 1.1 support
  * Few features from libreoffice for integrated
  * Run the testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1480334400">- Version update to 1.2.23:
  * Full support for OpenSSL 1.1.0
  * Several other small fixes</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490270400">- Fixed dependencies with libraries (bsc#1012246):
  * libxmlsec1-openssl.so
  * libxmlsec1-gcrypt.so
  * libxmlsec1-gnutls.so
  * libxmlsec1-nss.so</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1492689600">- Version update to 1.2.24:
  * Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support
  for xmlsec-nss.
  * Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS
  handling.
  * Disabled external entities loading by xmlsec utility app by
  default to prevent XXE attacks.
  * Improved OpenSSL version and features detection.
  * Cleaned up, simplified, and standardized internal error
  reporting.
  * Fixed a few Coverity-discovered bugs.
  * Marked as deprecated all the functions in xmlsec/soap.h file
  and a couple other functions no longer required by xmlsec.
  These functions will be removed in the future releases.
  * Several other small fixes (see commit log for more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1512043200">- Version update to 1.2.25:
  * Various small fixes
  * Coverity cleanups
  * Removed support for old openssl</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1528200000">- Version update to 1.2.26:
  * Added xmlsec-mscng module based on Microsoft Cryptography API: Next
    Generation
  * Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R
    34.10-2001 in xmlsec-mscrypto
  * Added LibreSSL 2.7 support
  * Upgraded documentation build process to support the latest gtk-doc</changelog>
  <changelog author="kallan@suse.com" date="1534248000">- Fixed (bsc#1104876).  Added: Requires: %{libname} = %{version} to each module
  in the spec file. This will ensure that when one of the modules is installed
  the corresponding version of libxmlsec1-1 will also be installed/upgraded.</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Add rplintrc to avoid bogus errors:
  * xmlsec1-rpmlintrc</changelog>
</package>
<package pkgid="df9f9a690fc19abaeeea54b47c0c150fd6f1c62aec819a8aeff4be2fcc742ded" name="libxmlsec1-gnutls1" arch="x86_64">
  <version epoch="0" ver="1.2.26" rel="lp150.2.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1389096000">- Initial packaging of xmlsec1 for SUSE</changelog>
  <changelog author="astieger@suse.com" date="1441281600">- update to 1.2.20:
  * fix a number of miscellaneous bugs
  * update expired or soon-to-be-expired certificates in test suite</changelog>
  <changelog author="tchvatal@suse.com" date="1464177600">- Version update to 1.2.22 (fate#320861):
  * see the ChangeLog for most detailed output
  * openssl 1.1 support
  * Few features from libreoffice for integrated
  * Run the testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1480334400">- Version update to 1.2.23:
  * Full support for OpenSSL 1.1.0
  * Several other small fixes</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490270400">- Fixed dependencies with libraries (bsc#1012246):
  * libxmlsec1-openssl.so
  * libxmlsec1-gcrypt.so
  * libxmlsec1-gnutls.so
  * libxmlsec1-nss.so</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1492689600">- Version update to 1.2.24:
  * Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support
  for xmlsec-nss.
  * Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS
  handling.
  * Disabled external entities loading by xmlsec utility app by
  default to prevent XXE attacks.
  * Improved OpenSSL version and features detection.
  * Cleaned up, simplified, and standardized internal error
  reporting.
  * Fixed a few Coverity-discovered bugs.
  * Marked as deprecated all the functions in xmlsec/soap.h file
  and a couple other functions no longer required by xmlsec.
  These functions will be removed in the future releases.
  * Several other small fixes (see commit log for more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1512043200">- Version update to 1.2.25:
  * Various small fixes
  * Coverity cleanups
  * Removed support for old openssl</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1528200000">- Version update to 1.2.26:
  * Added xmlsec-mscng module based on Microsoft Cryptography API: Next
    Generation
  * Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R
    34.10-2001 in xmlsec-mscrypto
  * Added LibreSSL 2.7 support
  * Upgraded documentation build process to support the latest gtk-doc</changelog>
  <changelog author="kallan@suse.com" date="1534248000">- Fixed (bsc#1104876).  Added: Requires: %{libname} = %{version} to each module
  in the spec file. This will ensure that when one of the modules is installed
  the corresponding version of libxmlsec1-1 will also be installed/upgraded.</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Add rplintrc to avoid bogus errors:
  * xmlsec1-rpmlintrc</changelog>
</package>
<package pkgid="4d0a21ca2a7ca09126ba161c0bc0d0621cf8ff726ad410f7e91b998184fe1b9b" name="libxmlsec1-nss1" arch="x86_64">
  <version epoch="0" ver="1.2.26" rel="lp150.2.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1389096000">- Initial packaging of xmlsec1 for SUSE</changelog>
  <changelog author="astieger@suse.com" date="1441281600">- update to 1.2.20:
  * fix a number of miscellaneous bugs
  * update expired or soon-to-be-expired certificates in test suite</changelog>
  <changelog author="tchvatal@suse.com" date="1464177600">- Version update to 1.2.22 (fate#320861):
  * see the ChangeLog for most detailed output
  * openssl 1.1 support
  * Few features from libreoffice for integrated
  * Run the testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1480334400">- Version update to 1.2.23:
  * Full support for OpenSSL 1.1.0
  * Several other small fixes</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490270400">- Fixed dependencies with libraries (bsc#1012246):
  * libxmlsec1-openssl.so
  * libxmlsec1-gcrypt.so
  * libxmlsec1-gnutls.so
  * libxmlsec1-nss.so</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1492689600">- Version update to 1.2.24:
  * Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support
  for xmlsec-nss.
  * Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS
  handling.
  * Disabled external entities loading by xmlsec utility app by
  default to prevent XXE attacks.
  * Improved OpenSSL version and features detection.
  * Cleaned up, simplified, and standardized internal error
  reporting.
  * Fixed a few Coverity-discovered bugs.
  * Marked as deprecated all the functions in xmlsec/soap.h file
  and a couple other functions no longer required by xmlsec.
  These functions will be removed in the future releases.
  * Several other small fixes (see commit log for more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1512043200">- Version update to 1.2.25:
  * Various small fixes
  * Coverity cleanups
  * Removed support for old openssl</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1528200000">- Version update to 1.2.26:
  * Added xmlsec-mscng module based on Microsoft Cryptography API: Next
    Generation
  * Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R
    34.10-2001 in xmlsec-mscrypto
  * Added LibreSSL 2.7 support
  * Upgraded documentation build process to support the latest gtk-doc</changelog>
  <changelog author="kallan@suse.com" date="1534248000">- Fixed (bsc#1104876).  Added: Requires: %{libname} = %{version} to each module
  in the spec file. This will ensure that when one of the modules is installed
  the corresponding version of libxmlsec1-1 will also be installed/upgraded.</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Add rplintrc to avoid bogus errors:
  * xmlsec1-rpmlintrc</changelog>
</package>
<package pkgid="7dfc684d677588d3177446259d3fc5b374069d578f50ae3a1a2feee4849e0630" name="libxmlsec1-openssl1" arch="x86_64">
  <version epoch="0" ver="1.2.26" rel="lp150.2.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1389096000">- Initial packaging of xmlsec1 for SUSE</changelog>
  <changelog author="astieger@suse.com" date="1441281600">- update to 1.2.20:
  * fix a number of miscellaneous bugs
  * update expired or soon-to-be-expired certificates in test suite</changelog>
  <changelog author="tchvatal@suse.com" date="1464177600">- Version update to 1.2.22 (fate#320861):
  * see the ChangeLog for most detailed output
  * openssl 1.1 support
  * Few features from libreoffice for integrated
  * Run the testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1480334400">- Version update to 1.2.23:
  * Full support for OpenSSL 1.1.0
  * Several other small fixes</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490270400">- Fixed dependencies with libraries (bsc#1012246):
  * libxmlsec1-openssl.so
  * libxmlsec1-gcrypt.so
  * libxmlsec1-gnutls.so
  * libxmlsec1-nss.so</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1492689600">- Version update to 1.2.24:
  * Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support
  for xmlsec-nss.
  * Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS
  handling.
  * Disabled external entities loading by xmlsec utility app by
  default to prevent XXE attacks.
  * Improved OpenSSL version and features detection.
  * Cleaned up, simplified, and standardized internal error
  reporting.
  * Fixed a few Coverity-discovered bugs.
  * Marked as deprecated all the functions in xmlsec/soap.h file
  and a couple other functions no longer required by xmlsec.
  These functions will be removed in the future releases.
  * Several other small fixes (see commit log for more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1512043200">- Version update to 1.2.25:
  * Various small fixes
  * Coverity cleanups
  * Removed support for old openssl</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1528200000">- Version update to 1.2.26:
  * Added xmlsec-mscng module based on Microsoft Cryptography API: Next
    Generation
  * Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R
    34.10-2001 in xmlsec-mscrypto
  * Added LibreSSL 2.7 support
  * Upgraded documentation build process to support the latest gtk-doc</changelog>
  <changelog author="kallan@suse.com" date="1534248000">- Fixed (bsc#1104876).  Added: Requires: %{libname} = %{version} to each module
  in the spec file. This will ensure that when one of the modules is installed
  the corresponding version of libxmlsec1-1 will also be installed/upgraded.</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Add rplintrc to avoid bogus errors:
  * xmlsec1-rpmlintrc</changelog>
</package>
<package pkgid="1d57d271b55bf9886ce9f450c118e7a810b304c394fd7fff57cb719fe2c69388" name="libyui-ncurses-pkg" arch="src">
  <version epoch="0" ver="2.48.5.2" rel="lp150.2.3.1"/>
  <changelog author="gs@suse.de" date="1367928000">- Cast return of setCandidate() to bool (due to libzypp changes)</changelog>
  <changelog author="bjoern.esser@gmail.com" date="1368187200">- use a common toplevel CMakeLists.txt
- fix building *-doc pkgs
- introduce bootstrap.sh
- Version 2.43.6</changelog>
  <changelog author="gs@suse.de" date="1372334400">- Show and handle multiple versions of packages correctly
  (bnc #822962)
- Version 2.44.0</changelog>
  <changelog author="gs@suse.de" date="1372852800">- remove webpin search from configuration menu (bnc#821866),
  catch exception of sysconfig write (bnc #827608)
- Version 2.44.1</changelog>
  <changelog author="gs@suse.de" date="1373544000">- Online Update: show irrelevant patches only in list 'All Patches',
  improve handling of the patch status, enhance help text
- Version 2.44.2</changelog>
  <changelog author="gs@suse.de" date="1374667200">- Online Update: improve help, show column 'Kind' beside 'Name',
  Package Selector: get lists of orphaned, suggested, recommended
  and unneeded packages correctly
- Version 2.44.3</changelog>
  <changelog author="gs@suse.de" date="1375272000">- Online Update: show multi version packages correctly
- Version 2.44.4</changelog>
  <changelog author="gs@suse.de" date="1384948800">- Fixed typos in help text, rephrase text (bnc #839689)
- Version 2.45.0</changelog>
  <changelog author="mvidner@suse.com" date="1389182400">- adjusted to libyui so version 6
- 2.46.0</changelog>
  <changelog author="mvidner@suse.com" date="1406548800">- Recommend this package when yast2-packager and libyui-ncurses are
  installed (bnc#888300)
- 2.46.1</changelog>
  <changelog author="mvidner@suse.com" date="1421755200">- Fixed building with cmake 3.1 (PREFIX in spec, boo#911875).
- 2.46.2</changelog>
  <changelog author="mvidner@suse.com" date="1436356800">- Added option "Dependencies/Install Recommended Packages",
  (PKGMGR_RECOMMENDED) (boo#900853).
- Changed "Dependencies/Install Recommeded Packages for Already
  Installed Packages" from an option to a command (boo#902394).
- 2.47.0</changelog>
  <changelog author="schubi@suse.com" date="1441886400">- Handle mixed multiversion packages (fate#318778)
- Allow to delete single versions of multiversion packages.
  (bsc#943870)
- 2.48.0</changelog>
  <changelog author="mvidner@suse.com" date="1442404800">- Reorganized git for easier tarball creation:
  - RPM spec files are kept in git verbatim, not as templates
  - no longer call PREP_SPEC_FILES in CMakeLists.common
- No functional change but version bumped to push the package
  down the pipeline (boo#946079).</changelog>
  <changelog author="jreidinger@suse.com" date="1444219200">- Fix unselecting patterns for installation (unify behavior with
  qt packager) (bnc#916568)
- 2.48.2</changelog>
  <changelog author="shundhammer@suse.de" date="1480420800">- Made menu hotkey unique for QA (bsc#1012604)
- 2.48.3</changelog>
  <changelog author="cwh@suse.com" date="1481025600">- Sort pkg list case-insensitively (bsc#1012294)
- Prevent double sorting (widget sorts by itself)
- 2.48.4</changelog>
  <changelog author="mvidner@suse.com" date="1502107200">- Adjusted to increased so version of the base library (bsc#1052217)
- Reduce build dependencies: Use individual libboost-*-devel
  packages instead of boost-devel (amajer)
- 2.48.5</changelog>
  <changelog author="mvidner@suse.com" date="1530273600">- Added new "Services" filter, displayed only when at least one
  repository service is present (FATE#321043)
- 2.48.5.1</changelog>
  <changelog author="lslezak@suse.cz" date="1530619200">- Fixes for file systems &gt;8EiB (bsc#991090):
  - Do not display "out of disk space" error at start when such
    a large disk is present in the system
  - Fixed displaying negative disk sizes in the disk usage dialog
- 2.48.5.2</changelog>
</package>
<package pkgid="5c8605c84b59f3fe273578b2c9668d4d2c86174543ff76e7f2778ffa6850db70" name="libyui-ncurses-pkg-devel" arch="x86_64">
  <version epoch="0" ver="2.48.5.2" rel="lp150.2.3.1"/>
  <changelog author="gs@suse.de" date="1367928000">- Cast return of setCandidate() to bool (due to libzypp changes)</changelog>
  <changelog author="bjoern.esser@gmail.com" date="1368187200">- use a common toplevel CMakeLists.txt
- fix building *-doc pkgs
- introduce bootstrap.sh
- Version 2.43.6</changelog>
  <changelog author="gs@suse.de" date="1372334400">- Show and handle multiple versions of packages correctly
  (bnc #822962)
- Version 2.44.0</changelog>
  <changelog author="gs@suse.de" date="1372852800">- remove webpin search from configuration menu (bnc#821866),
  catch exception of sysconfig write (bnc #827608)
- Version 2.44.1</changelog>
  <changelog author="gs@suse.de" date="1373544000">- Online Update: show irrelevant patches only in list 'All Patches',
  improve handling of the patch status, enhance help text
- Version 2.44.2</changelog>
  <changelog author="gs@suse.de" date="1374667200">- Online Update: improve help, show column 'Kind' beside 'Name',
  Package Selector: get lists of orphaned, suggested, recommended
  and unneeded packages correctly
- Version 2.44.3</changelog>
  <changelog author="gs@suse.de" date="1375272000">- Online Update: show multi version packages correctly
- Version 2.44.4</changelog>
  <changelog author="gs@suse.de" date="1384948800">- Fixed typos in help text, rephrase text (bnc #839689)
- Version 2.45.0</changelog>
  <changelog author="mvidner@suse.com" date="1389182400">- adjusted to libyui so version 6
- 2.46.0</changelog>
  <changelog author="mvidner@suse.com" date="1406548800">- Recommend this package when yast2-packager and libyui-ncurses are
  installed (bnc#888300)
- 2.46.1</changelog>
  <changelog author="mvidner@suse.com" date="1421755200">- Fixed building with cmake 3.1 (PREFIX in spec, boo#911875).
- 2.46.2</changelog>
  <changelog author="mvidner@suse.com" date="1436356800">- Added option "Dependencies/Install Recommended Packages",
  (PKGMGR_RECOMMENDED) (boo#900853).
- Changed "Dependencies/Install Recommeded Packages for Already
  Installed Packages" from an option to a command (boo#902394).
- 2.47.0</changelog>
  <changelog author="schubi@suse.com" date="1441886400">- Handle mixed multiversion packages (fate#318778)
- Allow to delete single versions of multiversion packages.
  (bsc#943870)
- 2.48.0</changelog>
  <changelog author="mvidner@suse.com" date="1442404800">- Reorganized git for easier tarball creation:
  - RPM spec files are kept in git verbatim, not as templates
  - no longer call PREP_SPEC_FILES in CMakeLists.common
- No functional change but version bumped to push the package
  down the pipeline (boo#946079).</changelog>
  <changelog author="jreidinger@suse.com" date="1444219200">- Fix unselecting patterns for installation (unify behavior with
  qt packager) (bnc#916568)
- 2.48.2</changelog>
  <changelog author="shundhammer@suse.de" date="1480420800">- Made menu hotkey unique for QA (bsc#1012604)
- 2.48.3</changelog>
  <changelog author="cwh@suse.com" date="1481025600">- Sort pkg list case-insensitively (bsc#1012294)
- Prevent double sorting (widget sorts by itself)
- 2.48.4</changelog>
  <changelog author="mvidner@suse.com" date="1502107200">- Adjusted to increased so version of the base library (bsc#1052217)
- Reduce build dependencies: Use individual libboost-*-devel
  packages instead of boost-devel (amajer)
- 2.48.5</changelog>
  <changelog author="mvidner@suse.com" date="1530273600">- Added new "Services" filter, displayed only when at least one
  repository service is present (FATE#321043)
- 2.48.5.1</changelog>
  <changelog author="lslezak@suse.cz" date="1530619200">- Fixes for file systems &gt;8EiB (bsc#991090):
  - Do not display "out of disk space" error at start when such
    a large disk is present in the system
  - Fixed displaying negative disk sizes in the disk usage dialog
- 2.48.5.2</changelog>
</package>
<package pkgid="a7c443aa2795895b80f200ef9541781d80189a4cf261a57c8977d2b9cd062473" name="libyui-ncurses-pkg-doc" arch="noarch">
  <version epoch="0" ver="2.48.5.2" rel="lp150.2.3.1"/>
  <changelog author="bjoern.esser@gmail.com" date="1339502400">- initial package</changelog>
</package>
<package pkgid="54cf3142df2e1baf00efba2c6597f4a694b4aa2d5dfe967370a8f17f0a700009" name="libyui-ncurses-pkg-doc" arch="src">
  <version epoch="0" ver="2.48.5.2" rel="lp150.2.3.1"/>
  <changelog author="bjoern.esser@gmail.com" date="1339502400">- initial package</changelog>
</package>
<package pkgid="f9a54402296cc3cf6957f7bc2cef4e2927c0a5862be52e097f19d267ce537bd1" name="libyui-ncurses-pkg8" arch="x86_64">
  <version epoch="0" ver="2.48.5.2" rel="lp150.2.3.1"/>
  <changelog author="gs@suse.de" date="1367928000">- Cast return of setCandidate() to bool (due to libzypp changes)</changelog>
  <changelog author="bjoern.esser@gmail.com" date="1368187200">- use a common toplevel CMakeLists.txt
- fix building *-doc pkgs
- introduce bootstrap.sh
- Version 2.43.6</changelog>
  <changelog author="gs@suse.de" date="1372334400">- Show and handle multiple versions of packages correctly
  (bnc #822962)
- Version 2.44.0</changelog>
  <changelog author="gs@suse.de" date="1372852800">- remove webpin search from configuration menu (bnc#821866),
  catch exception of sysconfig write (bnc #827608)
- Version 2.44.1</changelog>
  <changelog author="gs@suse.de" date="1373544000">- Online Update: show irrelevant patches only in list 'All Patches',
  improve handling of the patch status, enhance help text
- Version 2.44.2</changelog>
  <changelog author="gs@suse.de" date="1374667200">- Online Update: improve help, show column 'Kind' beside 'Name',
  Package Selector: get lists of orphaned, suggested, recommended
  and unneeded packages correctly
- Version 2.44.3</changelog>
  <changelog author="gs@suse.de" date="1375272000">- Online Update: show multi version packages correctly
- Version 2.44.4</changelog>
  <changelog author="gs@suse.de" date="1384948800">- Fixed typos in help text, rephrase text (bnc #839689)
- Version 2.45.0</changelog>
  <changelog author="mvidner@suse.com" date="1389182400">- adjusted to libyui so version 6
- 2.46.0</changelog>
  <changelog author="mvidner@suse.com" date="1406548800">- Recommend this package when yast2-packager and libyui-ncurses are
  installed (bnc#888300)
- 2.46.1</changelog>
  <changelog author="mvidner@suse.com" date="1421755200">- Fixed building with cmake 3.1 (PREFIX in spec, boo#911875).
- 2.46.2</changelog>
  <changelog author="mvidner@suse.com" date="1436356800">- Added option "Dependencies/Install Recommended Packages",
  (PKGMGR_RECOMMENDED) (boo#900853).
- Changed "Dependencies/Install Recommeded Packages for Already
  Installed Packages" from an option to a command (boo#902394).
- 2.47.0</changelog>
  <changelog author="schubi@suse.com" date="1441886400">- Handle mixed multiversion packages (fate#318778)
- Allow to delete single versions of multiversion packages.
  (bsc#943870)
- 2.48.0</changelog>
  <changelog author="mvidner@suse.com" date="1442404800">- Reorganized git for easier tarball creation:
  - RPM spec files are kept in git verbatim, not as templates
  - no longer call PREP_SPEC_FILES in CMakeLists.common
- No functional change but version bumped to push the package
  down the pipeline (boo#946079).</changelog>
  <changelog author="jreidinger@suse.com" date="1444219200">- Fix unselecting patterns for installation (unify behavior with
  qt packager) (bnc#916568)
- 2.48.2</changelog>
  <changelog author="shundhammer@suse.de" date="1480420800">- Made menu hotkey unique for QA (bsc#1012604)
- 2.48.3</changelog>
  <changelog author="cwh@suse.com" date="1481025600">- Sort pkg list case-insensitively (bsc#1012294)
- Prevent double sorting (widget sorts by itself)
- 2.48.4</changelog>
  <changelog author="mvidner@suse.com" date="1502107200">- Adjusted to increased so version of the base library (bsc#1052217)
- Reduce build dependencies: Use individual libboost-*-devel
  packages instead of boost-devel (amajer)
- 2.48.5</changelog>
  <changelog author="mvidner@suse.com" date="1530273600">- Added new "Services" filter, displayed only when at least one
  repository service is present (FATE#321043)
- 2.48.5.1</changelog>
  <changelog author="lslezak@suse.cz" date="1530619200">- Fixes for file systems &gt;8EiB (bsc#991090):
  - Do not display "out of disk space" error at start when such
    a large disk is present in the system
  - Fixed displaying negative disk sizes in the disk usage dialog
- 2.48.5.2</changelog>
</package>
<package pkgid="08cd59c377d4bf6ccfd9f95562741a95b146f79114c3c9c8dd3797419789559a" name="libyui-qt-pkg" arch="src">
  <version epoch="0" ver="2.45.15.2" rel="lp150.2.3.1"/>
  <changelog author="mvidner@suse.com" date="1421323200">- Fixed building with cmake 3.1 (-fPIC, PREFIX, boo#911875).
- 2.44.8</changelog>
  <changelog author="mvidner@suse.com" date="1421755200">- Fix cmake also in the spec file, duh.</changelog>
  <changelog author="mvidner@suse.com" date="1434974400">- Unified option handling with NCurses (FATE#318099)
  - "System verification mode" and "Dependencies/Autocheck"
    moved to /etc/sysconfig/yast2 (PKGMGR_VERIFY_SYSTEM,
    PKGMGR_AUTO_CHECK).
  - made "Cleanup when deleting packages" and "Allow vendor
    change" not persistent.
- Added option Dependencies/Install Recommended Packages,
  (PKGMGR_RECOMMENDED) (boo#900853).
- Changed "Options/Ignore Recommended Packages for Already
  Installed Packages" from an option to a command
  "Extras/Install All Matching Recommended Packages" (boo#902394).
- 2.45.0</changelog>
  <changelog author="shundhammer@suse.de" date="1439380800">- Handle mixed multiversion packages (fate#318778)
- Fixed libzypp deprecated warning
- 2.45.1</changelog>
  <changelog author="shundhammer@suse.de" date="1440590400">- Fixed crash in conflict resolver dialog:
  No longer call libzypp function that always returns null pointer
  (bsc#941398)
- 2.45.2</changelog>
  <changelog author="shundhammer@suse.de" date="1441713600">- Allow to delete single versions of multiversion packages
  (bsc#943870)
- 2.45.3</changelog>
  <changelog author="mvidner@suse.com" date="1442404800">- Reorganized git for easier tarball creation:
  - RPM spec files are kept in git verbatim, not as templates
  - no longer call PREP_SPEC_FILES in CMakeLists.common
- No functional change but version bumped to push the package
  down the pipeline (boo#946079).</changelog>
  <changelog author="ancor@suse.com" date="1442923200">- Better handling of secondary repository filters when there is
  no enough screen space (bnc#876540)
- 2.45.5</changelog>
  <changelog author="gs@suse.de" date="1448452800">- Respect /etc/zypp/zypp.conf settings for options "Allow vendor
  change" and "Cleanup when deleting packages" (bsc#954117)
- 2.45.6</changelog>
  <changelog author="jreidinger@suse.com" date="1476100800">- Improve message shown when user want to quit without saving
  changes (bsc#849084)
- 2.45.7</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1476187200">- Use the new QY2Styler usingHighContrastStyleSheet instead of
  the old usingVisionImpairedPalette (related to bsc#780621)
- 2.45.8</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1476360000">- Adapt to the latest API change regarding QY2Styler,
  renaming usingHighContrastStyleSheet to usingAlternateStyleSheet
  (related to bsc#780621)
- 2.45.9</changelog>
  <changelog author="jreidinger@suse.com" date="1477310400">- install qt-pkg if graphical control center and yast2-packager is
  used to prevent crash (bsc#999031)
- 2.45.10</changelog>
  <changelog author="jreidinger@suse.com" date="1478001600">- avoid duplicate entries in package groups view (bnc#852073)
- 2.45.11</changelog>
  <changelog author="shundhammer@suse.de" date="1480420800">- Sort pkg list case-insensitively (bsc#1012294)
- 2.45.12</changelog>
  <changelog author="lslezak@suse.cz" date="1498219200">- Limit the number of displayed changes (the last 512 entries),
  rendering a huge change log might cause a freeze for long time
  (bsc#1044777)
- 2.45.13</changelog>
  <changelog author="mvidner@suse.com" date="1502193600">- Adjusted to increased so version of the base library (bsc#1052217)
- Reduce build dependencies: Use individual libboost-*-devel
  packages instead of boost-devel (amajer)
- 2.45.14</changelog>
  <changelog author="letcp@protonmail.com" date="1519214400">- Contribution by LelCP: Add support for icon themes (boo#1081517)
- 2.45.15</changelog>
  <changelog author="lslezak@suse.cz" date="1530273600">- Added new "Services" view, displayed only when at least one
  repository service is present (FATE#321043)
- Display the busy cursor while package filtering is in progress
- 2.45.15.1</changelog>
  <changelog author="lslezak@suse.cz" date="1530619200">- Fixes for file systems &gt;8EiB (bsc#991090):
  - Do not display "out of disk space" error at start when such
    a large disk is present in the system
  - Fixed displaying negative disk sizes in the disk usage dialog
- 2.45.15.2</changelog>
</package>
<package pkgid="c672164e06fc3fbbd0f412150b6fbebb480ef540e04bb380a906f0866ca8b29b" name="libyui-qt-pkg-devel" arch="x86_64">
  <version epoch="0" ver="2.45.15.2" rel="lp150.2.3.1"/>
  <changelog author="mvidner@suse.com" date="1421323200">- Fixed building with cmake 3.1 (-fPIC, PREFIX, boo#911875).
- 2.44.8</changelog>
  <changelog author="mvidner@suse.com" date="1421755200">- Fix cmake also in the spec file, duh.</changelog>
  <changelog author="mvidner@suse.com" date="1434974400">- Unified option handling with NCurses (FATE#318099)
  - "System verification mode" and "Dependencies/Autocheck"
    moved to /etc/sysconfig/yast2 (PKGMGR_VERIFY_SYSTEM,
    PKGMGR_AUTO_CHECK).
  - made "Cleanup when deleting packages" and "Allow vendor
    change" not persistent.
- Added option Dependencies/Install Recommended Packages,
  (PKGMGR_RECOMMENDED) (boo#900853).
- Changed "Options/Ignore Recommended Packages for Already
  Installed Packages" from an option to a command
  "Extras/Install All Matching Recommended Packages" (boo#902394).
- 2.45.0</changelog>
  <changelog author="shundhammer@suse.de" date="1439380800">- Handle mixed multiversion packages (fate#318778)
- Fixed libzypp deprecated warning
- 2.45.1</changelog>
  <changelog author="shundhammer@suse.de" date="1440590400">- Fixed crash in conflict resolver dialog:
  No longer call libzypp function that always returns null pointer
  (bsc#941398)
- 2.45.2</changelog>
  <changelog author="shundhammer@suse.de" date="1441713600">- Allow to delete single versions of multiversion packages
  (bsc#943870)
- 2.45.3</changelog>
  <changelog author="mvidner@suse.com" date="1442404800">- Reorganized git for easier tarball creation:
  - RPM spec files are kept in git verbatim, not as templates
  - no longer call PREP_SPEC_FILES in CMakeLists.common
- No functional change but version bumped to push the package
  down the pipeline (boo#946079).</changelog>
  <changelog author="ancor@suse.com" date="1442923200">- Better handling of secondary repository filters when there is
  no enough screen space (bnc#876540)
- 2.45.5</changelog>
  <changelog author="gs@suse.de" date="1448452800">- Respect /etc/zypp/zypp.conf settings for options "Allow vendor
  change" and "Cleanup when deleting packages" (bsc#954117)
- 2.45.6</changelog>
  <changelog author="jreidinger@suse.com" date="1476100800">- Improve message shown when user want to quit without saving
  changes (bsc#849084)
- 2.45.7</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1476187200">- Use the new QY2Styler usingHighContrastStyleSheet instead of
  the old usingVisionImpairedPalette (related to bsc#780621)
- 2.45.8</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1476360000">- Adapt to the latest API change regarding QY2Styler,
  renaming usingHighContrastStyleSheet to usingAlternateStyleSheet
  (related to bsc#780621)
- 2.45.9</changelog>
  <changelog author="jreidinger@suse.com" date="1477310400">- install qt-pkg if graphical control center and yast2-packager is
  used to prevent crash (bsc#999031)
- 2.45.10</changelog>
  <changelog author="jreidinger@suse.com" date="1478001600">- avoid duplicate entries in package groups view (bnc#852073)
- 2.45.11</changelog>
  <changelog author="shundhammer@suse.de" date="1480420800">- Sort pkg list case-insensitively (bsc#1012294)
- 2.45.12</changelog>
  <changelog author="lslezak@suse.cz" date="1498219200">- Limit the number of displayed changes (the last 512 entries),
  rendering a huge change log might cause a freeze for long time
  (bsc#1044777)
- 2.45.13</changelog>
  <changelog author="mvidner@suse.com" date="1502193600">- Adjusted to increased so version of the base library (bsc#1052217)
- Reduce build dependencies: Use individual libboost-*-devel
  packages instead of boost-devel (amajer)
- 2.45.14</changelog>
  <changelog author="letcp@protonmail.com" date="1519214400">- Contribution by LelCP: Add support for icon themes (boo#1081517)
- 2.45.15</changelog>
  <changelog author="lslezak@suse.cz" date="1530273600">- Added new "Services" view, displayed only when at least one
  repository service is present (FATE#321043)
- Display the busy cursor while package filtering is in progress
- 2.45.15.1</changelog>
  <changelog author="lslezak@suse.cz" date="1530619200">- Fixes for file systems &gt;8EiB (bsc#991090):
  - Do not display "out of disk space" error at start when such
    a large disk is present in the system
  - Fixed displaying negative disk sizes in the disk usage dialog
- 2.45.15.2</changelog>
</package>
<package pkgid="ece106b9a142e752dee02ebd3a12cfe09eee5a31068b74cdcc5633d025fc895b" name="libyui-qt-pkg-doc" arch="noarch">
  <version epoch="0" ver="2.45.15.2" rel="lp150.2.3.1"/>
  <changelog author="ma@suse.de" date="1339675200">- initial package</changelog>
</package>
<package pkgid="db56d2cce79a07447bb3d24e2479bef04d228d65647fd1cf087a5d52757833ba" name="libyui-qt-pkg-doc" arch="src">
  <version epoch="0" ver="2.45.15.2" rel="lp150.2.3.1"/>
  <changelog author="ma@suse.de" date="1339675200">- initial package</changelog>
</package>
<package pkgid="a6891b55bb8b1ba0f833f586c3ce97effcc7ba4ef383d58d3a7bcd11c7a3d366" name="libyui-qt-pkg8" arch="x86_64">
  <version epoch="0" ver="2.45.15.2" rel="lp150.2.3.1"/>
  <changelog author="mvidner@suse.com" date="1421323200">- Fixed building with cmake 3.1 (-fPIC, PREFIX, boo#911875).
- 2.44.8</changelog>
  <changelog author="mvidner@suse.com" date="1421755200">- Fix cmake also in the spec file, duh.</changelog>
  <changelog author="mvidner@suse.com" date="1434974400">- Unified option handling with NCurses (FATE#318099)
  - "System verification mode" and "Dependencies/Autocheck"
    moved to /etc/sysconfig/yast2 (PKGMGR_VERIFY_SYSTEM,
    PKGMGR_AUTO_CHECK).
  - made "Cleanup when deleting packages" and "Allow vendor
    change" not persistent.
- Added option Dependencies/Install Recommended Packages,
  (PKGMGR_RECOMMENDED) (boo#900853).
- Changed "Options/Ignore Recommended Packages for Already
  Installed Packages" from an option to a command
  "Extras/Install All Matching Recommended Packages" (boo#902394).
- 2.45.0</changelog>
  <changelog author="shundhammer@suse.de" date="1439380800">- Handle mixed multiversion packages (fate#318778)
- Fixed libzypp deprecated warning
- 2.45.1</changelog>
  <changelog author="shundhammer@suse.de" date="1440590400">- Fixed crash in conflict resolver dialog:
  No longer call libzypp function that always returns null pointer
  (bsc#941398)
- 2.45.2</changelog>
  <changelog author="shundhammer@suse.de" date="1441713600">- Allow to delete single versions of multiversion packages
  (bsc#943870)
- 2.45.3</changelog>
  <changelog author="mvidner@suse.com" date="1442404800">- Reorganized git for easier tarball creation:
  - RPM spec files are kept in git verbatim, not as templates
  - no longer call PREP_SPEC_FILES in CMakeLists.common
- No functional change but version bumped to push the package
  down the pipeline (boo#946079).</changelog>
  <changelog author="ancor@suse.com" date="1442923200">- Better handling of secondary repository filters when there is
  no enough screen space (bnc#876540)
- 2.45.5</changelog>
  <changelog author="gs@suse.de" date="1448452800">- Respect /etc/zypp/zypp.conf settings for options "Allow vendor
  change" and "Cleanup when deleting packages" (bsc#954117)
- 2.45.6</changelog>
  <changelog author="jreidinger@suse.com" date="1476100800">- Improve message shown when user want to quit without saving
  changes (bsc#849084)
- 2.45.7</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1476187200">- Use the new QY2Styler usingHighContrastStyleSheet instead of
  the old usingVisionImpairedPalette (related to bsc#780621)
- 2.45.8</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1476360000">- Adapt to the latest API change regarding QY2Styler,
  renaming usingHighContrastStyleSheet to usingAlternateStyleSheet
  (related to bsc#780621)
- 2.45.9</changelog>
  <changelog author="jreidinger@suse.com" date="1477310400">- install qt-pkg if graphical control center and yast2-packager is
  used to prevent crash (bsc#999031)
- 2.45.10</changelog>
  <changelog author="jreidinger@suse.com" date="1478001600">- avoid duplicate entries in package groups view (bnc#852073)
- 2.45.11</changelog>
  <changelog author="shundhammer@suse.de" date="1480420800">- Sort pkg list case-insensitively (bsc#1012294)
- 2.45.12</changelog>
  <changelog author="lslezak@suse.cz" date="1498219200">- Limit the number of displayed changes (the last 512 entries),
  rendering a huge change log might cause a freeze for long time
  (bsc#1044777)
- 2.45.13</changelog>
  <changelog author="mvidner@suse.com" date="1502193600">- Adjusted to increased so version of the base library (bsc#1052217)
- Reduce build dependencies: Use individual libboost-*-devel
  packages instead of boost-devel (amajer)
- 2.45.14</changelog>
  <changelog author="letcp@protonmail.com" date="1519214400">- Contribution by LelCP: Add support for icon themes (boo#1081517)
- 2.45.15</changelog>
  <changelog author="lslezak@suse.cz" date="1530273600">- Added new "Services" view, displayed only when at least one
  repository service is present (FATE#321043)
- Display the busy cursor while package filtering is in progress
- 2.45.15.1</changelog>
  <changelog author="lslezak@suse.cz" date="1530619200">- Fixes for file systems &gt;8EiB (bsc#991090):
  - Do not display "out of disk space" error at start when such
    a large disk is present in the system
  - Fixed displaying negative disk sizes in the disk usage dialog
- 2.45.15.2</changelog>
</package>
<package pkgid="349da135774d2e5b4bc75727a40d0b57bd0f5a1c4db22376336a24e73a4df889" name="libz1" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1353585600">- Replace %make_install by normal make install;
  the former is a constant source of agony in older or non-SUSE.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1355572800">- Add zlib-devel-static to baselibs.conf, needed for binutils testsuite
- Migrate zlib-&lt;targettype&gt; to libz1-&lt;targettype&gt;</changelog>
  <changelog author="mvyskocil@suse.com" date="1362484800">- libz1-32bit obsoletes zlib-32bit &lt;= 1.2.7 (fixes bnc#806310)</changelog>
  <changelog author="idonmez@suse.com" date="1368273600">- Update to version 1.2.8
  * Add new inflateGetDictionary() function
  * Fix bug where gzopen() immediately followed by gzclose()
    would write an empty file instead of an empty gzip stream.
  * Fix bug in gzclose() when gzwrite() runs out of memory</changelog>
  <changelog author="mvyskocil@suse.com" date="1375099200">- zlib-format.patch, backport missing sle11 feature back to openSUSE
  bnc#831880</changelog>
  <changelog author="tchvatal@suse.com" date="1411646400">- Install examples to cover another angle from bnc#890228
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1435147200">- Remove zlib-devel-static, nothing should use libz.a anyway.
- Package minizip library, everything using it should now pull
  minizip-devel and unbundle it bnc#935864</changelog>
  <changelog author="tchvatal@suse.com" date="1435665600">- Bring back zlib-devel-static. Needed by binutils</changelog>
  <changelog author="tchvatal@suse.com" date="1436788800">- Require zlib-devel in zlib-devel-static to fix previous change</changelog>
  <changelog author="jengelh@inai.de" date="1443096000">- Trim descriptions to fit target audience. Update RPM group
  classification.</changelog>
  <changelog author="tchvatal@suse.com" date="1480852800">- Include fixes for bnc#1003580 bnc#1003579 bnc#1003577 bnc#1013882:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch refreshed
  * zlib-bnc1013882.patch CVE-2016-9843</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update to version 1.2.9:
  * Improve compress() and uncompress() to support large lengths
  * Allow building zlib outside of the source directory
  * Fix bug when level 0 used with Z_HUFFMAN or Z_RLE
  * Fix bugs in creating a very large gzip header
  * Add uncompress2() function, which returns the input size used
  * Dramatically speed up deflation for level 0 (storing)
  * Add gzfread() and gzfwrite(), duplicating the interfaces of fread() and fwrite()
  * Add crc32_z() and adler32_z() functions with size_t lengths
  * Many portability improvements
- Drop patches included in upstream:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch
  * zlib-bnc1013882.patch
- Drop zlib-1.2.7-improve-longest_match-performance.patch
  * not accepted by upstream for two releases
  * rebasing no longer possible</changelog>
  <changelog author="mpluskal@suse.com" date="1483444800">- Update to version 1.2.10:
  * Avoid warnings on snprintf() return value
  * Fix bug in deflate_stored() for zero-length input
  * Fix bug in gzwrite.c that produced corrupt gzip files
  * Remove files to be installed before copying them in Makefile.in
  * Add warnings when compiling with assembler code</changelog>
  <changelog author="mpluskal@suse.com" date="1484568000">- Update to version 1.2.11:
  * Fix deflate stored bug when pulling last block from window
  * Permit immediate deflateParams changes before any deflate input</changelog>
  <changelog author="schwab@suse.de" date="1491307200">- baselibs.conf: add missing dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Add s390 performance patch (fate#314093):
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1496318400">- Add gpg signature
- Re-enable profiling</changelog>
  <changelog author="kah0922@gmail.com" date="1497268800">- Added 32bit minizip support</changelog>
  <changelog author="tchvatal@suse.com" date="1526385600">- Add patch to safeguard against negative values in uInt bsc#1071321:
  * 0001-Do-not-try-to-store-negative-values-in-unsigned-int.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1529496000">- Add patch for fate#325307 zlib speedup on power8:
  * zlib-power8-fate325307.patch</changelog>
</package>
<package pkgid="be1008cb2fafc32f68cb9bb7f5831caefbef8858715dea80f40db33b92382d4b" name="libz1-32bit" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1353585600">- Replace %make_install by normal make install;
  the former is a constant source of agony in older or non-SUSE.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1355572800">- Add zlib-devel-static to baselibs.conf, needed for binutils testsuite
- Migrate zlib-&lt;targettype&gt; to libz1-&lt;targettype&gt;</changelog>
  <changelog author="mvyskocil@suse.com" date="1362484800">- libz1-32bit obsoletes zlib-32bit &lt;= 1.2.7 (fixes bnc#806310)</changelog>
  <changelog author="idonmez@suse.com" date="1368273600">- Update to version 1.2.8
  * Add new inflateGetDictionary() function
  * Fix bug where gzopen() immediately followed by gzclose()
    would write an empty file instead of an empty gzip stream.
  * Fix bug in gzclose() when gzwrite() runs out of memory</changelog>
  <changelog author="mvyskocil@suse.com" date="1375099200">- zlib-format.patch, backport missing sle11 feature back to openSUSE
  bnc#831880</changelog>
  <changelog author="tchvatal@suse.com" date="1411646400">- Install examples to cover another angle from bnc#890228
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1435147200">- Remove zlib-devel-static, nothing should use libz.a anyway.
- Package minizip library, everything using it should now pull
  minizip-devel and unbundle it bnc#935864</changelog>
  <changelog author="tchvatal@suse.com" date="1435665600">- Bring back zlib-devel-static. Needed by binutils</changelog>
  <changelog author="tchvatal@suse.com" date="1436788800">- Require zlib-devel in zlib-devel-static to fix previous change</changelog>
  <changelog author="jengelh@inai.de" date="1443096000">- Trim descriptions to fit target audience. Update RPM group
  classification.</changelog>
  <changelog author="tchvatal@suse.com" date="1480852800">- Include fixes for bnc#1003580 bnc#1003579 bnc#1003577 bnc#1013882:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch refreshed
  * zlib-bnc1013882.patch CVE-2016-9843</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update to version 1.2.9:
  * Improve compress() and uncompress() to support large lengths
  * Allow building zlib outside of the source directory
  * Fix bug when level 0 used with Z_HUFFMAN or Z_RLE
  * Fix bugs in creating a very large gzip header
  * Add uncompress2() function, which returns the input size used
  * Dramatically speed up deflation for level 0 (storing)
  * Add gzfread() and gzfwrite(), duplicating the interfaces of fread() and fwrite()
  * Add crc32_z() and adler32_z() functions with size_t lengths
  * Many portability improvements
- Drop patches included in upstream:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch
  * zlib-bnc1013882.patch
- Drop zlib-1.2.7-improve-longest_match-performance.patch
  * not accepted by upstream for two releases
  * rebasing no longer possible</changelog>
  <changelog author="mpluskal@suse.com" date="1483444800">- Update to version 1.2.10:
  * Avoid warnings on snprintf() return value
  * Fix bug in deflate_stored() for zero-length input
  * Fix bug in gzwrite.c that produced corrupt gzip files
  * Remove files to be installed before copying them in Makefile.in
  * Add warnings when compiling with assembler code</changelog>
  <changelog author="mpluskal@suse.com" date="1484568000">- Update to version 1.2.11:
  * Fix deflate stored bug when pulling last block from window
  * Permit immediate deflateParams changes before any deflate input</changelog>
  <changelog author="schwab@suse.de" date="1491307200">- baselibs.conf: add missing dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Add s390 performance patch (fate#314093):
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1496318400">- Add gpg signature
- Re-enable profiling</changelog>
  <changelog author="kah0922@gmail.com" date="1497268800">- Added 32bit minizip support</changelog>
  <changelog author="tchvatal@suse.com" date="1526385600">- Add patch to safeguard against negative values in uInt bsc#1071321:
  * 0001-Do-not-try-to-store-negative-values-in-unsigned-int.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1529496000">- Add patch for fate#325307 zlib speedup on power8:
  * zlib-power8-fate325307.patch</changelog>
</package>
<package pkgid="e6af9f5a2b8d141685ac24571d5f9d2f1069298c689b8052a9e27bd7b17791ee" name="libzmq5" arch="x86_64">
  <version epoch="0" ver="4.2.3" rel="lp150.2.5.2"/>
  <changelog author="mvyskocil@opensuse.org" date="1434456000">- Add pkgconfig(libsodium) as mandatory build dependency
- Change libuuid-devel to pkgconfig style</changelog>
  <changelog author="tchvatal@suse.com" date="1436875200">- Version bump to 4.1.2 bnc#937912:
  * Added explicit reference to static link exception in every source file.
  * Bumped ABI version to 5:0:0 since 4.1.x changed the ABI.
  * Fixed STDINT event interface macros to work with CZMQ 3.0.
  * Fixed installation of man pages when BUILD_DOC is not set.
  * Fixed #1428 - regression on single-socket proxies.</changelog>
  <changelog author="tampakrap@opensuse.org" date="1442923200">- Conditionally use the pkgconfig style, to support SLE11</changelog>
  <changelog author="tampakrap@opensuse.org" date="1442923201">- Fix the conditionals on the previous commit</changelog>
  <changelog author="stephan.barth@suse.com" date="1443441600">- update to version 4.1.3.
  Changes from upstream:
  * Fixed #1532 - getsockopt ZMQ_RCVMORE now resets all bits instead of only
    32
  * Fixed #1445 - zmq::socket_base_t::connect fails on tcp ipv6 address</changelog>
  <changelog author="idonmez@suse.com" date="1444132800">- Re-enable %check</changelog>
  <changelog author="idonmez@suse.com" date="1446724800">- Add libsodium-init.patch to handle sodium_init() error.</changelog>
  <changelog author="adam.majer@suse.de" date="1464609600">- Update to 4.1.4
  * fixed build failure with latest libsodium
  * handle IPv6 link local addresses
  * fixed assertion failure in msg.cpp:390 on STREAM sockets
  * fixed assertion failure in tcp.cpp after network reconnect
  * fixed socket monitor hang
- Remove libsodium-init.patch - upstreamed
- Run %check rule sequentially to prevent assert failures</changelog>
  <changelog author="adam.majer@suse.de" date="1464609601">- Append test_log in build output if there are failures</changelog>
  <changelog author="adam.majer@suse.de" date="1464609602">- Added patch 3ad076.patch
  * based on https://github.com/zeromq/zeromq4-1/commit/3ad076.patch
  * refreshed and removed NEWS section
  * fixes unbinding when IPv6 is available
- Add '--disable-dependency-tracking' since we are not rebuilding
- Re-enable concurrent check target, but fall back to sequential on
  failure. This allows quick test building, while allows
  sequential unit test run. Run tests 3x before 'official' failure as
  some are a little flaky (upstream acknowledges this)</changelog>
  <changelog author="adam.majer@suse.de" date="1466164800">- New upstream version 4.1.5
  * Fixed #1806 - uninitialised read in curve getsockopt.
  * Fixed #1807 - build broken with GCC 6.
  * Fixed #1831 - potential assertion failure with latest libsodium.
  * Fixed #1850 - detection issues with tweetnacl/libsodium.
  * Fixed #1877 - Avoid terminating connections prematurely
  * fixes some IPv6 related issues
- Removed 3ad076.patch, upstreamed</changelog>
  <changelog author="dmueller@suse.com" date="1467115200">- skip testsuite on qemu-linux-user</changelog>
  <changelog author="jengelh@inai.de" date="1467201600">- Remove useless --with-pic, it's only for (non-built) static libs</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1478347200">- New upstream version 4.2.0
  * For Pieter. Thanks for making all of this possible.
  * This release introduces new APIs, but it is ABI compatible with
    libzmq 4.1.2 and up.
  * Fixed alignment problem on arm and sparc, need to rebuild
    against 4.2.0
  * New Context option ZMQ_MAX_MSGSZ
  * New Socket options:
  - ZMQ_HANDSHAKE_IVL
  - ZMQ_SOCKS_PROXY
  - ZMQ_XPUB_NODROP
  - ZMQ_BLOCKY
  - ZMQ_XPUB_MANUAL
  - ZMQ_XPUB_WELCOME_MSG
  - ZMQ_STREAM_NOTIFY
  - ZMQ_INVERT_MATCHING
  - ZMQ_HEARTBEAT_IVL
  - ZMQ_HEARTBEAT_TTL
  - ZMQ_HEARTBEAT_TIMEOUT
    ....
  * see NEWS for all changes
- Packaging
  * add --with-libsodium to link against libsodium and not internal
    tweetnacl
  * remove disable-silent-rules
  * add --enable-curve to build curve_keygen tool
    https://github.com/zeromq/libzmq/pull/2195
  * add libunwind to build dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1483185600">- New upstream version 4.2.1
  * Bugfix release. For complete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.1</changelog>
  <changelog author="jengelh@inai.de" date="1486123200">- Compact the descriptions.</changelog>
  <changelog author="adam.majer@suse.de" date="1490097600">- New upstream version 4.2.2
  * fix SO_NOSIGPIPE and connection closing by peer race condition
  * fix IPv4-in-IPv6 mapped addresses parsing error
  * zmq_z85_decode did validate its input. The function has been
  fixed to correctly follow RFC32 and return NULL if the input is
  invalid.
  * for complete changelog see
  https://github.com/zeromq/libzmq/releases/tag/v4.2.2</changelog>
  <changelog author="adam.majer@suse.de" date="1496318400">- remove_werror.patch: don't use -Werror in compiler flags
- disable silent compilation flags</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- New upstream version 4.2.3
  * API change: previously ZMQ_POLLOUT on a ZMQ_ROUTER socket
    returned always true due to how the type works. When
    ZMQ_ROUTER_MANDATORY is set, sending fails when the peer is
    not available, but ZMQ_POLLOUT always returns true anyway,
    which does not make sense. Now when ZMQ_ROUTER_MANDATORY is
    set, ZMQ_POLLOUT on a ZMQ_ROUTER will return true only if
    at least one peer is available.
    Given ZMQ_POLLOUT with ZMQ_ROUTER was not usable at all
    previously, we do not consider this a breakage warranting a
    major or minor version increase.
  * ZMQ_IDENTITY has been renamed to ZMQ_ROUTING_ID and
    ZMQ_CONNECT_RID has been renamed to ZMQ_CONNTECT_ROUTING_ID
    to disambiguate. ZMQ_IDENTITY and ZMQ_CONNECT_RID are still
    available to keep backward compatibility, and will be
    removed in a future release after further advance notice.
  * DRAFT API change: zmq_poller_wait, zmq_poller_wait_all and
    zmq_poller_poll have been changed to be inline with other
    existing APIs that have a timeout to return EAGAIN instead
    of ETIMEDOUT as the errno value.
  * Existing non-DRAFT socket types ZMQ_REP/REQ, ZMQ_ROUTER/DEALER
    and ZMQPUB/SUB, that were previously declared deprecated, have
    been reinstated as stable and supported
  * Curve: all remaining traces of debug output to console are now
    removed, and new DRAFT events are available to properly debug
    CURVE, PLAIN, GSSAPI and ZAP events and failures.
  * for compelete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.3
- drop remove_werror.patch: can now be disabled at configure time,
  if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1531224000">- Add baselibs.conf: build libzmq5-32bit, as it is a required
  dependency to libavfilter7-32bit (i.e ffmpeg 4).</changelog>
</package>
<package pkgid="490edba181f5c9967e5ee95a5af21bf2f4fc92134c93cf213a43589342caeee7" name="libzypp" arch="src">
  <version epoch="0" ver="17.6.4" rel="lp150.2.3.1"/>
  <changelog author="ma@suse.de" date="1512388800">- Stop BuildRequire dropped boost-devel (bsc#1062782)
- version 17.0.4 (0)</changelog>
  <changelog author="ma@suse.de" date="1512561600">- Fix default for solver.allowNameChange (bsc#1071466)
- version 17.0.5 (0)</changelog>
  <changelog author="ma@suse.de" date="1515067200">- plugin: don't reject header values containing a ':' (bsc#1074687)
- Locks: Don't store duplicate locks (bsc#969569)
- version 17.1.0 (0)</changelog>
  <changelog author="ma@suse.de" date="1516017600">- Adapt rpm package verification to changes in rpm-4.14 (bsc#1076018)
- version 17.1.1 (0)</changelog>
  <changelog author="ma@suse.de" date="1517572800">- Fix crash when installing broken rpm packages (bsc#1078284)
- Testcase: Minor fix writing update testcases
- version 17.1.2 (0)</changelog>
  <changelog author="ma@suse.de" date="1519128000">- RpmDb::checkPackage: fix parsing localized rpm output (bsc#1076415)
- Replace libexpat with libxml
- Fix libzypp tests failing with `-Wp,-D_GLIBCXX_ASSERTIONS`
  compiler flag (fixes #84)
- BuildRequire gpg2 as testcases need it (fixes #84)
- version 17.1.3 (0)</changelog>
  <changelog author="bzeller@suse.de" date="1519905600">- Add /var/lib/gdm to CheckAccessDeleted blacklist (bsc#1079991)
- Use gpgme instead of calling gpg2 binary directly
- Fix leak in Digest.cc (bsc#1075978)
- version 17.2.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1520424000">- PoolQuery::addDependency add overload to define an individual
  Match::Mode (bsc#1043166)
- version 17.2.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1520942400">- Protect code against broken translations (bsc#1082711)
- Fix broken translated format strings
- Deprecate the use of asciidoc for new releases
- version 17.2.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1523275200">- Show progressbar when running posttrans scripts
- Execute service plugin script chrooted to the RepoManagers root
  (bsc#1080693)
- Make sure the product file comes from /etc/products.d for the
  fallback product search (bsc#1086602)
- Introduce ZConfig::repoManagerRoot to support having diverging
  target and repomanager root paths
- Rename `stderr` as it can be a macro (fixes #102)
- version 17.3.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1524744000">- Avoid zombie tar processes (bsc#1076192)
- Replace the terminology 'uninstallable' with 'not installable'
  (bsc#1029392)
- version 17.3.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1529928000">- Flags: make it std=c++14 ready
- Replace 'redhat-release' with generic 'system-release' (#120)
- Ignore /var, /tmp and /proc in zypper ps (bsc#1096617)
- Show GPGME version in log
- version 17.4.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531137600">- HardLocksFile: Prevent against empty commit without Target having
  been been loaded (bsc#1096803)
- lsof: use '-K i' if lsof supports it (bsc#1099847)
- PackageProvider: Validate deta rpms before caching (bsc#1091624,
  bsc#1088705, CVE-2018-7685)
- PackageProvider: Validate downloaded rpm package signatures
  before caching (bsc#1091624, bsc#1088705, CVE-2018-7685)
- version 17.5.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531915200">- libzypp-devel should not require cmake (bsc#1101349)
- Avoid zombies from ExternalProgram
- Update ApiConfig
- fix typo
- version 17.5.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1532001600">- Prevent the system from sleeping during a commit
  (fixes openSUSE/zypper#135)
- RepoManager: Explicitly request repo2solv to generate application
  pseudo packages.
- version 17.5.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1533297600">- RepoInfo::provideKey: add report telling where we look for missing
  keys.
- Support listing gpgkey URLs in repo files (bsc#1088037)
- Add new report to request user approval for importing a package key
- Handle http error 502 Bad Gateway in curl backend (bsc #1070851)
  (fixes openSUSE/zypper#177)
- Add filesize check for downloads with known size (bsc#408814)
- Removed superfluous space in translation (bsc#1102019)
- version 17.6.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1534507200">- Adapt to changes in libgpgme11-11.1.0 breaking the signature
  verification (bsc#1100427)
- Use %license (bsc#1082318)
- BuildRequires:  libsolv-devel &gt;= 0.6.35 (for bsc#1100095)
- changes: add CVE numbers
- version 17.6.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1534852800">- fixup! Add filesize check for downloads with known size (bsc#408814)
  Fix detetction of metalink downloads and prevent aborting if
  a metalink file is larger than the expected data file.
- version 17.6.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1535630400">- Check for not imported keys after multi key import from rpmdb
  (bsc#1096217)
- version 17.6.3 (2)</changelog>
  <changelog author="ma@suse.de" date="1536235200">- Automatically fetch repository signing key from gpgkey url
  (bsc#1088037)
- lsof: use '-K i' if lsof supports it (bsc#1099847,bsc#1036304)
- version 17.6.4 (2)</changelog>
</package>
<package pkgid="1d6e480e2645c6cbf9c52fa531e2c4b19d70883ac03a40f681055b59c73bc219" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.6.4" rel="lp150.2.3.1"/>
  <changelog author="ma@suse.de" date="1512388800">- Stop BuildRequire dropped boost-devel (bsc#1062782)
- version 17.0.4 (0)</changelog>
  <changelog author="ma@suse.de" date="1512561600">- Fix default for solver.allowNameChange (bsc#1071466)
- version 17.0.5 (0)</changelog>
  <changelog author="ma@suse.de" date="1515067200">- plugin: don't reject header values containing a ':' (bsc#1074687)
- Locks: Don't store duplicate locks (bsc#969569)
- version 17.1.0 (0)</changelog>
  <changelog author="ma@suse.de" date="1516017600">- Adapt rpm package verification to changes in rpm-4.14 (bsc#1076018)
- version 17.1.1 (0)</changelog>
  <changelog author="ma@suse.de" date="1517572800">- Fix crash when installing broken rpm packages (bsc#1078284)
- Testcase: Minor fix writing update testcases
- version 17.1.2 (0)</changelog>
  <changelog author="ma@suse.de" date="1519128000">- RpmDb::checkPackage: fix parsing localized rpm output (bsc#1076415)
- Replace libexpat with libxml
- Fix libzypp tests failing with `-Wp,-D_GLIBCXX_ASSERTIONS`
  compiler flag (fixes #84)
- BuildRequire gpg2 as testcases need it (fixes #84)
- version 17.1.3 (0)</changelog>
  <changelog author="bzeller@suse.de" date="1519905600">- Add /var/lib/gdm to CheckAccessDeleted blacklist (bsc#1079991)
- Use gpgme instead of calling gpg2 binary directly
- Fix leak in Digest.cc (bsc#1075978)
- version 17.2.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1520424000">- PoolQuery::addDependency add overload to define an individual
  Match::Mode (bsc#1043166)
- version 17.2.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1520942400">- Protect code against broken translations (bsc#1082711)
- Fix broken translated format strings
- Deprecate the use of asciidoc for new releases
- version 17.2.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1523275200">- Show progressbar when running posttrans scripts
- Execute service plugin script chrooted to the RepoManagers root
  (bsc#1080693)
- Make sure the product file comes from /etc/products.d for the
  fallback product search (bsc#1086602)
- Introduce ZConfig::repoManagerRoot to support having diverging
  target and repomanager root paths
- Rename `stderr` as it can be a macro (fixes #102)
- version 17.3.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1524744000">- Avoid zombie tar processes (bsc#1076192)
- Replace the terminology 'uninstallable' with 'not installable'
  (bsc#1029392)
- version 17.3.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1529928000">- Flags: make it std=c++14 ready
- Replace 'redhat-release' with generic 'system-release' (#120)
- Ignore /var, /tmp and /proc in zypper ps (bsc#1096617)
- Show GPGME version in log
- version 17.4.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531137600">- HardLocksFile: Prevent against empty commit without Target having
  been been loaded (bsc#1096803)
- lsof: use '-K i' if lsof supports it (bsc#1099847)
- PackageProvider: Validate deta rpms before caching (bsc#1091624,
  bsc#1088705, CVE-2018-7685)
- PackageProvider: Validate downloaded rpm package signatures
  before caching (bsc#1091624, bsc#1088705, CVE-2018-7685)
- version 17.5.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531915200">- libzypp-devel should not require cmake (bsc#1101349)
- Avoid zombies from ExternalProgram
- Update ApiConfig
- fix typo
- version 17.5.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1532001600">- Prevent the system from sleeping during a commit
  (fixes openSUSE/zypper#135)
- RepoManager: Explicitly request repo2solv to generate application
  pseudo packages.
- version 17.5.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1533297600">- RepoInfo::provideKey: add report telling where we look for missing
  keys.
- Support listing gpgkey URLs in repo files (bsc#1088037)
- Add new report to request user approval for importing a package key
- Handle http error 502 Bad Gateway in curl backend (bsc #1070851)
  (fixes openSUSE/zypper#177)
- Add filesize check for downloads with known size (bsc#408814)
- Removed superfluous space in translation (bsc#1102019)
- version 17.6.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1534507200">- Adapt to changes in libgpgme11-11.1.0 breaking the signature
  verification (bsc#1100427)
- Use %license (bsc#1082318)
- BuildRequires:  libsolv-devel &gt;= 0.6.35 (for bsc#1100095)
- changes: add CVE numbers
- version 17.6.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1534852800">- fixup! Add filesize check for downloads with known size (bsc#408814)
  Fix detetction of metalink downloads and prevent aborting if
  a metalink file is larger than the expected data file.
- version 17.6.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1535630400">- Check for not imported keys after multi key import from rpmdb
  (bsc#1096217)
- version 17.6.3 (2)</changelog>
  <changelog author="ma@suse.de" date="1536235200">- Automatically fetch repository signing key from gpgkey url
  (bsc#1088037)
- lsof: use '-K i' if lsof supports it (bsc#1099847,bsc#1036304)
- version 17.6.4 (2)</changelog>
</package>
<package pkgid="bab36d616822f3da752d27977c700dc2eb9bb538d92f7c1d5e9c2ae607625e03" name="libzypp" arch="src">
  <version epoch="0" ver="17.7.0" rel="lp150.2.6.1"/>
  <changelog author="ma@suse.de" date="1512561600">- Fix default for solver.allowNameChange (bsc#1071466)
- version 17.0.5 (0)</changelog>
  <changelog author="ma@suse.de" date="1515067200">- plugin: don't reject header values containing a ':' (bsc#1074687)
- Locks: Don't store duplicate locks (bsc#969569)
- version 17.1.0 (0)</changelog>
  <changelog author="ma@suse.de" date="1516017600">- Adapt rpm package verification to changes in rpm-4.14 (bsc#1076018)
- version 17.1.1 (0)</changelog>
  <changelog author="ma@suse.de" date="1517572800">- Fix crash when installing broken rpm packages (bsc#1078284)
- Testcase: Minor fix writing update testcases
- version 17.1.2 (0)</changelog>
  <changelog author="ma@suse.de" date="1519128000">- RpmDb::checkPackage: fix parsing localized rpm output (bsc#1076415)
- Replace libexpat with libxml
- Fix libzypp tests failing with `-Wp,-D_GLIBCXX_ASSERTIONS`
  compiler flag (fixes #84)
- BuildRequire gpg2 as testcases need it (fixes #84)
- version 17.1.3 (0)</changelog>
  <changelog author="bzeller@suse.de" date="1519905600">- Add /var/lib/gdm to CheckAccessDeleted blacklist (bsc#1079991)
- Use gpgme instead of calling gpg2 binary directly
- Fix leak in Digest.cc (bsc#1075978)
- version 17.2.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1520424000">- PoolQuery::addDependency add overload to define an individual
  Match::Mode (bsc#1043166)
- version 17.2.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1520942400">- Protect code against broken translations (bsc#1082711)
- Fix broken translated format strings
- Deprecate the use of asciidoc for new releases
- version 17.2.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1523275200">- Show progressbar when running posttrans scripts
- Execute service plugin script chrooted to the RepoManagers root
  (bsc#1080693)
- Make sure the product file comes from /etc/products.d for the
  fallback product search (bsc#1086602)
- Introduce ZConfig::repoManagerRoot to support having diverging
  target and repomanager root paths
- Rename `stderr` as it can be a macro (fixes #102)
- version 17.3.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1524744000">- Avoid zombie tar processes (bsc#1076192)
- Replace the terminology 'uninstallable' with 'not installable'
  (bsc#1029392)
- version 17.3.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1529928000">- Flags: make it std=c++14 ready
- Replace 'redhat-release' with generic 'system-release' (#120)
- Ignore /var, /tmp and /proc in zypper ps (bsc#1096617)
- Show GPGME version in log
- version 17.4.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531137600">- HardLocksFile: Prevent against empty commit without Target having
  been been loaded (bsc#1096803)
- lsof: use '-K i' if lsof supports it (bsc#1099847)
- PackageProvider: Validate deta rpms before caching (bsc#1091624,
  bsc#1088705, CVE-2018-7685)
- PackageProvider: Validate downloaded rpm package signatures
  before caching (bsc#1091624, bsc#1088705, CVE-2018-7685)
- version 17.5.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531915200">- libzypp-devel should not require cmake (bsc#1101349)
- Avoid zombies from ExternalProgram
- Update ApiConfig
- fix typo
- version 17.5.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1532001600">- Prevent the system from sleeping during a commit
  (fixes openSUSE/zypper#135)
- RepoManager: Explicitly request repo2solv to generate application
  pseudo packages.
- version 17.5.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1533297600">- RepoInfo::provideKey: add report telling where we look for missing
  keys.
- Support listing gpgkey URLs in repo files (bsc#1088037)
- Add new report to request user approval for importing a package key
- Handle http error 502 Bad Gateway in curl backend (bsc #1070851)
  (fixes openSUSE/zypper#177)
- Add filesize check for downloads with known size (bsc#408814)
- Removed superfluous space in translation (bsc#1102019)
- version 17.6.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1534507200">- Adapt to changes in libgpgme11-11.1.0 breaking the signature
  verification (bsc#1100427)
- Use %license (bsc#1082318)
- BuildRequires:  libsolv-devel &gt;= 0.6.35 (for bsc#1100095)
- changes: add CVE numbers
- version 17.6.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1534852800">- fixup! Add filesize check for downloads with known size (bsc#408814)
  Fix detetction of metalink downloads and prevent aborting if
  a metalink file is larger than the expected data file.
- version 17.6.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1535630400">- Check for not imported keys after multi key import from rpmdb
  (bsc#1096217)
- version 17.6.3 (2)</changelog>
  <changelog author="ma@suse.de" date="1536235200">- Automatically fetch repository signing key from gpgkey url
  (bsc#1088037)
- lsof: use '-K i' if lsof supports it (bsc#1099847,bsc#1036304)
- version 17.6.4 (2)</changelog>
  <changelog author="ma@suse.de" date="1536321600">- Drop type application due to poor metadata support (bsc#1100095,
  bsc#1104415)
- version 17.7.0 (2)</changelog>
</package>
<package pkgid="bbff8462eef5d9e06a72adf3df01832c497d6ea64bde9c1c06768603e2b984ef" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.7.0" rel="lp150.2.6.1"/>
  <changelog author="ma@suse.de" date="1512561600">- Fix default for solver.allowNameChange (bsc#1071466)
- version 17.0.5 (0)</changelog>
  <changelog author="ma@suse.de" date="1515067200">- plugin: don't reject header values containing a ':' (bsc#1074687)
- Locks: Don't store duplicate locks (bsc#969569)
- version 17.1.0 (0)</changelog>
  <changelog author="ma@suse.de" date="1516017600">- Adapt rpm package verification to changes in rpm-4.14 (bsc#1076018)
- version 17.1.1 (0)</changelog>
  <changelog author="ma@suse.de" date="1517572800">- Fix crash when installing broken rpm packages (bsc#1078284)
- Testcase: Minor fix writing update testcases
- version 17.1.2 (0)</changelog>
  <changelog author="ma@suse.de" date="1519128000">- RpmDb::checkPackage: fix parsing localized rpm output (bsc#1076415)
- Replace libexpat with libxml
- Fix libzypp tests failing with `-Wp,-D_GLIBCXX_ASSERTIONS`
  compiler flag (fixes #84)
- BuildRequire gpg2 as testcases need it (fixes #84)
- version 17.1.3 (0)</changelog>
  <changelog author="bzeller@suse.de" date="1519905600">- Add /var/lib/gdm to CheckAccessDeleted blacklist (bsc#1079991)
- Use gpgme instead of calling gpg2 binary directly
- Fix leak in Digest.cc (bsc#1075978)
- version 17.2.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1520424000">- PoolQuery::addDependency add overload to define an individual
  Match::Mode (bsc#1043166)
- version 17.2.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1520942400">- Protect code against broken translations (bsc#1082711)
- Fix broken translated format strings
- Deprecate the use of asciidoc for new releases
- version 17.2.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1523275200">- Show progressbar when running posttrans scripts
- Execute service plugin script chrooted to the RepoManagers root
  (bsc#1080693)
- Make sure the product file comes from /etc/products.d for the
  fallback product search (bsc#1086602)
- Introduce ZConfig::repoManagerRoot to support having diverging
  target and repomanager root paths
- Rename `stderr` as it can be a macro (fixes #102)
- version 17.3.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1524744000">- Avoid zombie tar processes (bsc#1076192)
- Replace the terminology 'uninstallable' with 'not installable'
  (bsc#1029392)
- version 17.3.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1529928000">- Flags: make it std=c++14 ready
- Replace 'redhat-release' with generic 'system-release' (#120)
- Ignore /var, /tmp and /proc in zypper ps (bsc#1096617)
- Show GPGME version in log
- version 17.4.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531137600">- HardLocksFile: Prevent against empty commit without Target having
  been been loaded (bsc#1096803)
- lsof: use '-K i' if lsof supports it (bsc#1099847)
- PackageProvider: Validate deta rpms before caching (bsc#1091624,
  bsc#1088705, CVE-2018-7685)
- PackageProvider: Validate downloaded rpm package signatures
  before caching (bsc#1091624, bsc#1088705, CVE-2018-7685)
- version 17.5.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531915200">- libzypp-devel should not require cmake (bsc#1101349)
- Avoid zombies from ExternalProgram
- Update ApiConfig
- fix typo
- version 17.5.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1532001600">- Prevent the system from sleeping during a commit
  (fixes openSUSE/zypper#135)
- RepoManager: Explicitly request repo2solv to generate application
  pseudo packages.
- version 17.5.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1533297600">- RepoInfo::provideKey: add report telling where we look for missing
  keys.
- Support listing gpgkey URLs in repo files (bsc#1088037)
- Add new report to request user approval for importing a package key
- Handle http error 502 Bad Gateway in curl backend (bsc #1070851)
  (fixes openSUSE/zypper#177)
- Add filesize check for downloads with known size (bsc#408814)
- Removed superfluous space in translation (bsc#1102019)
- version 17.6.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1534507200">- Adapt to changes in libgpgme11-11.1.0 breaking the signature
  verification (bsc#1100427)
- Use %license (bsc#1082318)
- BuildRequires:  libsolv-devel &gt;= 0.6.35 (for bsc#1100095)
- changes: add CVE numbers
- version 17.6.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1534852800">- fixup! Add filesize check for downloads with known size (bsc#408814)
  Fix detetction of metalink downloads and prevent aborting if
  a metalink file is larger than the expected data file.
- version 17.6.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1535630400">- Check for not imported keys after multi key import from rpmdb
  (bsc#1096217)
- version 17.6.3 (2)</changelog>
  <changelog author="ma@suse.de" date="1536235200">- Automatically fetch repository signing key from gpgkey url
  (bsc#1088037)
- lsof: use '-K i' if lsof supports it (bsc#1099847,bsc#1036304)
- version 17.6.4 (2)</changelog>
  <changelog author="ma@suse.de" date="1536321600">- Drop type application due to poor metadata support (bsc#1100095,
  bsc#1104415)
- version 17.7.0 (2)</changelog>
</package>
<package pkgid="34832cd17e838f0f70bfd4ab9f37dc0ae05940d53a7a109c7987461989065686" name="libzypp" arch="src">
  <version epoch="0" ver="17.7.2" rel="lp150.2.9.1"/>
  <changelog author="ma@suse.de" date="1516017600">- Adapt rpm package verification to changes in rpm-4.14 (bsc#1076018)
- version 17.1.1 (0)</changelog>
  <changelog author="ma@suse.de" date="1517572800">- Fix crash when installing broken rpm packages (bsc#1078284)
- Testcase: Minor fix writing update testcases
- version 17.1.2 (0)</changelog>
  <changelog author="ma@suse.de" date="1519128000">- RpmDb::checkPackage: fix parsing localized rpm output (bsc#1076415)
- Replace libexpat with libxml
- Fix libzypp tests failing with `-Wp,-D_GLIBCXX_ASSERTIONS`
  compiler flag (fixes #84)
- BuildRequire gpg2 as testcases need it (fixes #84)
- version 17.1.3 (0)</changelog>
  <changelog author="bzeller@suse.de" date="1519905600">- Add /var/lib/gdm to CheckAccessDeleted blacklist (bsc#1079991)
- Use gpgme instead of calling gpg2 binary directly
- Fix leak in Digest.cc (bsc#1075978)
- version 17.2.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1520424000">- PoolQuery::addDependency add overload to define an individual
  Match::Mode (bsc#1043166)
- version 17.2.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1520942400">- Protect code against broken translations (bsc#1082711)
- Fix broken translated format strings
- Deprecate the use of asciidoc for new releases
- version 17.2.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1523275200">- Show progressbar when running posttrans scripts
- Execute service plugin script chrooted to the RepoManagers root
  (bsc#1080693)
- Make sure the product file comes from /etc/products.d for the
  fallback product search (bsc#1086602)
- Introduce ZConfig::repoManagerRoot to support having diverging
  target and repomanager root paths
- Rename `stderr` as it can be a macro (fixes #102)
- version 17.3.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1524744000">- Avoid zombie tar processes (bsc#1076192)
- Replace the terminology 'uninstallable' with 'not installable'
  (bsc#1029392)
- version 17.3.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1529928000">- Flags: make it std=c++14 ready
- Replace 'redhat-release' with generic 'system-release' (#120)
- Ignore /var, /tmp and /proc in zypper ps (bsc#1096617)
- Show GPGME version in log
- version 17.4.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531137600">- HardLocksFile: Prevent against empty commit without Target having
  been been loaded (bsc#1096803)
- lsof: use '-K i' if lsof supports it (bsc#1099847)
- PackageProvider: Validate deta rpms before caching (bsc#1091624,
  bsc#1088705, CVE-2018-7685)
- PackageProvider: Validate downloaded rpm package signatures
  before caching (bsc#1091624, bsc#1088705, CVE-2018-7685)
- version 17.5.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531915200">- libzypp-devel should not require cmake (bsc#1101349)
- Avoid zombies from ExternalProgram
- Update ApiConfig
- fix typo
- version 17.5.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1532001600">- Prevent the system from sleeping during a commit
  (fixes openSUSE/zypper#135)
- RepoManager: Explicitly request repo2solv to generate application
  pseudo packages.
- version 17.5.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1533297600">- RepoInfo::provideKey: add report telling where we look for missing
  keys.
- Support listing gpgkey URLs in repo files (bsc#1088037)
- Add new report to request user approval for importing a package key
- Handle http error 502 Bad Gateway in curl backend (bsc #1070851)
  (fixes openSUSE/zypper#177)
- Add filesize check for downloads with known size (bsc#408814)
- Removed superfluous space in translation (bsc#1102019)
- version 17.6.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1534507200">- Adapt to changes in libgpgme11-11.1.0 breaking the signature
  verification (bsc#1100427)
- Use %license (bsc#1082318)
- BuildRequires:  libsolv-devel &gt;= 0.6.35 (for bsc#1100095)
- changes: add CVE numbers
- version 17.6.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1534852800">- fixup! Add filesize check for downloads with known size (bsc#408814)
  Fix detetction of metalink downloads and prevent aborting if
  a metalink file is larger than the expected data file.
- version 17.6.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1535630400">- Check for not imported keys after multi key import from rpmdb
  (bsc#1096217)
- version 17.6.3 (2)</changelog>
  <changelog author="ma@suse.de" date="1536235200">- Automatically fetch repository signing key from gpgkey url
  (bsc#1088037)
- lsof: use '-K i' if lsof supports it (bsc#1099847,bsc#1036304)
- version 17.6.4 (2)</changelog>
  <changelog author="ma@suse.de" date="1536321600">- Drop type application due to poor metadata support (bsc#1100095,
  bsc#1104415)
- version 17.7.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1538136000">- Fix conversion of string and glob to regex when compiling queries
  (bsc#1099982, bsc#939392, bsc#556664)
- version 17.7.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1538395200">- Fix blocking wait for finished child process (bsc#1109877)
- version 17.7.2 (2)</changelog>
</package>
<package pkgid="ff9c63f8ffabfddf5e3a6bd5bb59971550cb7bada9fb5b974398d1cdb944b654" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.7.2" rel="lp150.2.9.1"/>
  <changelog author="ma@suse.de" date="1516017600">- Adapt rpm package verification to changes in rpm-4.14 (bsc#1076018)
- version 17.1.1 (0)</changelog>
  <changelog author="ma@suse.de" date="1517572800">- Fix crash when installing broken rpm packages (bsc#1078284)
- Testcase: Minor fix writing update testcases
- version 17.1.2 (0)</changelog>
  <changelog author="ma@suse.de" date="1519128000">- RpmDb::checkPackage: fix parsing localized rpm output (bsc#1076415)
- Replace libexpat with libxml
- Fix libzypp tests failing with `-Wp,-D_GLIBCXX_ASSERTIONS`
  compiler flag (fixes #84)
- BuildRequire gpg2 as testcases need it (fixes #84)
- version 17.1.3 (0)</changelog>
  <changelog author="bzeller@suse.de" date="1519905600">- Add /var/lib/gdm to CheckAccessDeleted blacklist (bsc#1079991)
- Use gpgme instead of calling gpg2 binary directly
- Fix leak in Digest.cc (bsc#1075978)
- version 17.2.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1520424000">- PoolQuery::addDependency add overload to define an individual
  Match::Mode (bsc#1043166)
- version 17.2.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1520942400">- Protect code against broken translations (bsc#1082711)
- Fix broken translated format strings
- Deprecate the use of asciidoc for new releases
- version 17.2.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1523275200">- Show progressbar when running posttrans scripts
- Execute service plugin script chrooted to the RepoManagers root
  (bsc#1080693)
- Make sure the product file comes from /etc/products.d for the
  fallback product search (bsc#1086602)
- Introduce ZConfig::repoManagerRoot to support having diverging
  target and repomanager root paths
- Rename `stderr` as it can be a macro (fixes #102)
- version 17.3.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1524744000">- Avoid zombie tar processes (bsc#1076192)
- Replace the terminology 'uninstallable' with 'not installable'
  (bsc#1029392)
- version 17.3.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1529928000">- Flags: make it std=c++14 ready
- Replace 'redhat-release' with generic 'system-release' (#120)
- Ignore /var, /tmp and /proc in zypper ps (bsc#1096617)
- Show GPGME version in log
- version 17.4.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531137600">- HardLocksFile: Prevent against empty commit without Target having
  been been loaded (bsc#1096803)
- lsof: use '-K i' if lsof supports it (bsc#1099847)
- PackageProvider: Validate deta rpms before caching (bsc#1091624,
  bsc#1088705, CVE-2018-7685)
- PackageProvider: Validate downloaded rpm package signatures
  before caching (bsc#1091624, bsc#1088705, CVE-2018-7685)
- version 17.5.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531915200">- libzypp-devel should not require cmake (bsc#1101349)
- Avoid zombies from ExternalProgram
- Update ApiConfig
- fix typo
- version 17.5.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1532001600">- Prevent the system from sleeping during a commit
  (fixes openSUSE/zypper#135)
- RepoManager: Explicitly request repo2solv to generate application
  pseudo packages.
- version 17.5.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1533297600">- RepoInfo::provideKey: add report telling where we look for missing
  keys.
- Support listing gpgkey URLs in repo files (bsc#1088037)
- Add new report to request user approval for importing a package key
- Handle http error 502 Bad Gateway in curl backend (bsc #1070851)
  (fixes openSUSE/zypper#177)
- Add filesize check for downloads with known size (bsc#408814)
- Removed superfluous space in translation (bsc#1102019)
- version 17.6.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1534507200">- Adapt to changes in libgpgme11-11.1.0 breaking the signature
  verification (bsc#1100427)
- Use %license (bsc#1082318)
- BuildRequires:  libsolv-devel &gt;= 0.6.35 (for bsc#1100095)
- changes: add CVE numbers
- version 17.6.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1534852800">- fixup! Add filesize check for downloads with known size (bsc#408814)
  Fix detetction of metalink downloads and prevent aborting if
  a metalink file is larger than the expected data file.
- version 17.6.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1535630400">- Check for not imported keys after multi key import from rpmdb
  (bsc#1096217)
- version 17.6.3 (2)</changelog>
  <changelog author="ma@suse.de" date="1536235200">- Automatically fetch repository signing key from gpgkey url
  (bsc#1088037)
- lsof: use '-K i' if lsof supports it (bsc#1099847,bsc#1036304)
- version 17.6.4 (2)</changelog>
  <changelog author="ma@suse.de" date="1536321600">- Drop type application due to poor metadata support (bsc#1100095,
  bsc#1104415)
- version 17.7.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1538136000">- Fix conversion of string and glob to regex when compiling queries
  (bsc#1099982, bsc#939392, bsc#556664)
- version 17.7.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1538395200">- Fix blocking wait for finished child process (bsc#1109877)
- version 17.7.2 (2)</changelog>
</package>
<package pkgid="4d4c62f98682b481013000f2c479097c6858ff529a439881cd72562a7da3909a" name="libzypp-devel" arch="x86_64">
  <version epoch="0" ver="17.6.4" rel="lp150.2.3.1"/>
  <changelog author="ma@suse.de" date="1512388800">- Stop BuildRequire dropped boost-devel (bsc#1062782)
- version 17.0.4 (0)</changelog>
  <changelog author="ma@suse.de" date="1512561600">- Fix default for solver.allowNameChange (bsc#1071466)
- version 17.0.5 (0)</changelog>
  <changelog author="ma@suse.de" date="1515067200">- plugin: don't reject header values containing a ':' (bsc#1074687)
- Locks: Don't store duplicate locks (bsc#969569)
- version 17.1.0 (0)</changelog>
  <changelog author="ma@suse.de" date="1516017600">- Adapt rpm package verification to changes in rpm-4.14 (bsc#1076018)
- version 17.1.1 (0)</changelog>
  <changelog author="ma@suse.de" date="1517572800">- Fix crash when installing broken rpm packages (bsc#1078284)
- Testcase: Minor fix writing update testcases
- version 17.1.2 (0)</changelog>
  <changelog author="ma@suse.de" date="1519128000">- RpmDb::checkPackage: fix parsing localized rpm output (bsc#1076415)
- Replace libexpat with libxml
- Fix libzypp tests failing with `-Wp,-D_GLIBCXX_ASSERTIONS`
  compiler flag (fixes #84)
- BuildRequire gpg2 as testcases need it (fixes #84)
- version 17.1.3 (0)</changelog>
  <changelog author="bzeller@suse.de" date="1519905600">- Add /var/lib/gdm to CheckAccessDeleted blacklist (bsc#1079991)
- Use gpgme instead of calling gpg2 binary directly
- Fix leak in Digest.cc (bsc#1075978)
- version 17.2.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1520424000">- PoolQuery::addDependency add overload to define an individual
  Match::Mode (bsc#1043166)
- version 17.2.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1520942400">- Protect code against broken translations (bsc#1082711)
- Fix broken translated format strings
- Deprecate the use of asciidoc for new releases
- version 17.2.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1523275200">- Show progressbar when running posttrans scripts
- Execute service plugin script chrooted to the RepoManagers root
  (bsc#1080693)
- Make sure the product file comes from /etc/products.d for the
  fallback product search (bsc#1086602)
- Introduce ZConfig::repoManagerRoot to support having diverging
  target and repomanager root paths
- Rename `stderr` as it can be a macro (fixes #102)
- version 17.3.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1524744000">- Avoid zombie tar processes (bsc#1076192)
- Replace the terminology 'uninstallable' with 'not installable'
  (bsc#1029392)
- version 17.3.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1529928000">- Flags: make it std=c++14 ready
- Replace 'redhat-release' with generic 'system-release' (#120)
- Ignore /var, /tmp and /proc in zypper ps (bsc#1096617)
- Show GPGME version in log
- version 17.4.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531137600">- HardLocksFile: Prevent against empty commit without Target having
  been been loaded (bsc#1096803)
- lsof: use '-K i' if lsof supports it (bsc#1099847)
- PackageProvider: Validate deta rpms before caching (bsc#1091624,
  bsc#1088705, CVE-2018-7685)
- PackageProvider: Validate downloaded rpm package signatures
  before caching (bsc#1091624, bsc#1088705, CVE-2018-7685)
- version 17.5.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531915200">- libzypp-devel should not require cmake (bsc#1101349)
- Avoid zombies from ExternalProgram
- Update ApiConfig
- fix typo
- version 17.5.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1532001600">- Prevent the system from sleeping during a commit
  (fixes openSUSE/zypper#135)
- RepoManager: Explicitly request repo2solv to generate application
  pseudo packages.
- version 17.5.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1533297600">- RepoInfo::provideKey: add report telling where we look for missing
  keys.
- Support listing gpgkey URLs in repo files (bsc#1088037)
- Add new report to request user approval for importing a package key
- Handle http error 502 Bad Gateway in curl backend (bsc #1070851)
  (fixes openSUSE/zypper#177)
- Add filesize check for downloads with known size (bsc#408814)
- Removed superfluous space in translation (bsc#1102019)
- version 17.6.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1534507200">- Adapt to changes in libgpgme11-11.1.0 breaking the signature
  verification (bsc#1100427)
- Use %license (bsc#1082318)
- BuildRequires:  libsolv-devel &gt;= 0.6.35 (for bsc#1100095)
- changes: add CVE numbers
- version 17.6.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1534852800">- fixup! Add filesize check for downloads with known size (bsc#408814)
  Fix detetction of metalink downloads and prevent aborting if
  a metalink file is larger than the expected data file.
- version 17.6.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1535630400">- Check for not imported keys after multi key import from rpmdb
  (bsc#1096217)
- version 17.6.3 (2)</changelog>
  <changelog author="ma@suse.de" date="1536235200">- Automatically fetch repository signing key from gpgkey url
  (bsc#1088037)
- lsof: use '-K i' if lsof supports it (bsc#1099847,bsc#1036304)
- version 17.6.4 (2)</changelog>
</package>
<package pkgid="a015d97b8a3356f135ee98004f1eeb81a58263c8e36c5b134080803677a4d189" name="libzypp-devel" arch="x86_64">
  <version epoch="0" ver="17.7.0" rel="lp150.2.6.1"/>
  <changelog author="ma@suse.de" date="1512561600">- Fix default for solver.allowNameChange (bsc#1071466)
- version 17.0.5 (0)</changelog>
  <changelog author="ma@suse.de" date="1515067200">- plugin: don't reject header values containing a ':' (bsc#1074687)
- Locks: Don't store duplicate locks (bsc#969569)
- version 17.1.0 (0)</changelog>
  <changelog author="ma@suse.de" date="1516017600">- Adapt rpm package verification to changes in rpm-4.14 (bsc#1076018)
- version 17.1.1 (0)</changelog>
  <changelog author="ma@suse.de" date="1517572800">- Fix crash when installing broken rpm packages (bsc#1078284)
- Testcase: Minor fix writing update testcases
- version 17.1.2 (0)</changelog>
  <changelog author="ma@suse.de" date="1519128000">- RpmDb::checkPackage: fix parsing localized rpm output (bsc#1076415)
- Replace libexpat with libxml
- Fix libzypp tests failing with `-Wp,-D_GLIBCXX_ASSERTIONS`
  compiler flag (fixes #84)
- BuildRequire gpg2 as testcases need it (fixes #84)
- version 17.1.3 (0)</changelog>
  <changelog author="bzeller@suse.de" date="1519905600">- Add /var/lib/gdm to CheckAccessDeleted blacklist (bsc#1079991)
- Use gpgme instead of calling gpg2 binary directly
- Fix leak in Digest.cc (bsc#1075978)
- version 17.2.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1520424000">- PoolQuery::addDependency add overload to define an individual
  Match::Mode (bsc#1043166)
- version 17.2.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1520942400">- Protect code against broken translations (bsc#1082711)
- Fix broken translated format strings
- Deprecate the use of asciidoc for new releases
- version 17.2.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1523275200">- Show progressbar when running posttrans scripts
- Execute service plugin script chrooted to the RepoManagers root
  (bsc#1080693)
- Make sure the product file comes from /etc/products.d for the
  fallback product search (bsc#1086602)
- Introduce ZConfig::repoManagerRoot to support having diverging
  target and repomanager root paths
- Rename `stderr` as it can be a macro (fixes #102)
- version 17.3.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1524744000">- Avoid zombie tar processes (bsc#1076192)
- Replace the terminology 'uninstallable' with 'not installable'
  (bsc#1029392)
- version 17.3.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1529928000">- Flags: make it std=c++14 ready
- Replace 'redhat-release' with generic 'system-release' (#120)
- Ignore /var, /tmp and /proc in zypper ps (bsc#1096617)
- Show GPGME version in log
- version 17.4.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531137600">- HardLocksFile: Prevent against empty commit without Target having
  been been loaded (bsc#1096803)
- lsof: use '-K i' if lsof supports it (bsc#1099847)
- PackageProvider: Validate deta rpms before caching (bsc#1091624,
  bsc#1088705, CVE-2018-7685)
- PackageProvider: Validate downloaded rpm package signatures
  before caching (bsc#1091624, bsc#1088705, CVE-2018-7685)
- version 17.5.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531915200">- libzypp-devel should not require cmake (bsc#1101349)
- Avoid zombies from ExternalProgram
- Update ApiConfig
- fix typo
- version 17.5.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1532001600">- Prevent the system from sleeping during a commit
  (fixes openSUSE/zypper#135)
- RepoManager: Explicitly request repo2solv to generate application
  pseudo packages.
- version 17.5.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1533297600">- RepoInfo::provideKey: add report telling where we look for missing
  keys.
- Support listing gpgkey URLs in repo files (bsc#1088037)
- Add new report to request user approval for importing a package key
- Handle http error 502 Bad Gateway in curl backend (bsc #1070851)
  (fixes openSUSE/zypper#177)
- Add filesize check for downloads with known size (bsc#408814)
- Removed superfluous space in translation (bsc#1102019)
- version 17.6.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1534507200">- Adapt to changes in libgpgme11-11.1.0 breaking the signature
  verification (bsc#1100427)
- Use %license (bsc#1082318)
- BuildRequires:  libsolv-devel &gt;= 0.6.35 (for bsc#1100095)
- changes: add CVE numbers
- version 17.6.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1534852800">- fixup! Add filesize check for downloads with known size (bsc#408814)
  Fix detetction of metalink downloads and prevent aborting if
  a metalink file is larger than the expected data file.
- version 17.6.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1535630400">- Check for not imported keys after multi key import from rpmdb
  (bsc#1096217)
- version 17.6.3 (2)</changelog>
  <changelog author="ma@suse.de" date="1536235200">- Automatically fetch repository signing key from gpgkey url
  (bsc#1088037)
- lsof: use '-K i' if lsof supports it (bsc#1099847,bsc#1036304)
- version 17.6.4 (2)</changelog>
  <changelog author="ma@suse.de" date="1536321600">- Drop type application due to poor metadata support (bsc#1100095,
  bsc#1104415)
- version 17.7.0 (2)</changelog>
</package>
<package pkgid="5a157ff373e595f6480d52388a77241141984b4275ec1a818d4e9ff3043a82d4" name="libzypp-devel" arch="x86_64">
  <version epoch="0" ver="17.7.2" rel="lp150.2.9.1"/>
  <changelog author="ma@suse.de" date="1516017600">- Adapt rpm package verification to changes in rpm-4.14 (bsc#1076018)
- version 17.1.1 (0)</changelog>
  <changelog author="ma@suse.de" date="1517572800">- Fix crash when installing broken rpm packages (bsc#1078284)
- Testcase: Minor fix writing update testcases
- version 17.1.2 (0)</changelog>
  <changelog author="ma@suse.de" date="1519128000">- RpmDb::checkPackage: fix parsing localized rpm output (bsc#1076415)
- Replace libexpat with libxml
- Fix libzypp tests failing with `-Wp,-D_GLIBCXX_ASSERTIONS`
  compiler flag (fixes #84)
- BuildRequire gpg2 as testcases need it (fixes #84)
- version 17.1.3 (0)</changelog>
  <changelog author="bzeller@suse.de" date="1519905600">- Add /var/lib/gdm to CheckAccessDeleted blacklist (bsc#1079991)
- Use gpgme instead of calling gpg2 binary directly
- Fix leak in Digest.cc (bsc#1075978)
- version 17.2.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1520424000">- PoolQuery::addDependency add overload to define an individual
  Match::Mode (bsc#1043166)
- version 17.2.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1520942400">- Protect code against broken translations (bsc#1082711)
- Fix broken translated format strings
- Deprecate the use of asciidoc for new releases
- version 17.2.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1523275200">- Show progressbar when running posttrans scripts
- Execute service plugin script chrooted to the RepoManagers root
  (bsc#1080693)
- Make sure the product file comes from /etc/products.d for the
  fallback product search (bsc#1086602)
- Introduce ZConfig::repoManagerRoot to support having diverging
  target and repomanager root paths
- Rename `stderr` as it can be a macro (fixes #102)
- version 17.3.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1524744000">- Avoid zombie tar processes (bsc#1076192)
- Replace the terminology 'uninstallable' with 'not installable'
  (bsc#1029392)
- version 17.3.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1529928000">- Flags: make it std=c++14 ready
- Replace 'redhat-release' with generic 'system-release' (#120)
- Ignore /var, /tmp and /proc in zypper ps (bsc#1096617)
- Show GPGME version in log
- version 17.4.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531137600">- HardLocksFile: Prevent against empty commit without Target having
  been been loaded (bsc#1096803)
- lsof: use '-K i' if lsof supports it (bsc#1099847)
- PackageProvider: Validate deta rpms before caching (bsc#1091624,
  bsc#1088705, CVE-2018-7685)
- PackageProvider: Validate downloaded rpm package signatures
  before caching (bsc#1091624, bsc#1088705, CVE-2018-7685)
- version 17.5.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531915200">- libzypp-devel should not require cmake (bsc#1101349)
- Avoid zombies from ExternalProgram
- Update ApiConfig
- fix typo
- version 17.5.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1532001600">- Prevent the system from sleeping during a commit
  (fixes openSUSE/zypper#135)
- RepoManager: Explicitly request repo2solv to generate application
  pseudo packages.
- version 17.5.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1533297600">- RepoInfo::provideKey: add report telling where we look for missing
  keys.
- Support listing gpgkey URLs in repo files (bsc#1088037)
- Add new report to request user approval for importing a package key
- Handle http error 502 Bad Gateway in curl backend (bsc #1070851)
  (fixes openSUSE/zypper#177)
- Add filesize check for downloads with known size (bsc#408814)
- Removed superfluous space in translation (bsc#1102019)
- version 17.6.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1534507200">- Adapt to changes in libgpgme11-11.1.0 breaking the signature
  verification (bsc#1100427)
- Use %license (bsc#1082318)
- BuildRequires:  libsolv-devel &gt;= 0.6.35 (for bsc#1100095)
- changes: add CVE numbers
- version 17.6.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1534852800">- fixup! Add filesize check for downloads with known size (bsc#408814)
  Fix detetction of metalink downloads and prevent aborting if
  a metalink file is larger than the expected data file.
- version 17.6.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1535630400">- Check for not imported keys after multi key import from rpmdb
  (bsc#1096217)
- version 17.6.3 (2)</changelog>
  <changelog author="ma@suse.de" date="1536235200">- Automatically fetch repository signing key from gpgkey url
  (bsc#1088037)
- lsof: use '-K i' if lsof supports it (bsc#1099847,bsc#1036304)
- version 17.6.4 (2)</changelog>
  <changelog author="ma@suse.de" date="1536321600">- Drop type application due to poor metadata support (bsc#1100095,
  bsc#1104415)
- version 17.7.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1538136000">- Fix conversion of string and glob to regex when compiling queries
  (bsc#1099982, bsc#939392, bsc#556664)
- version 17.7.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1538395200">- Fix blocking wait for finished child process (bsc#1109877)
- version 17.7.2 (2)</changelog>
</package>
<package pkgid="67a3778e826dbea2d97bc085a939fd9ff84eed4dbb22a98056de2d3383972776" name="libzypp-devel-doc" arch="x86_64">
  <version epoch="0" ver="17.6.4" rel="lp150.2.3.1"/>
  <changelog author="ma@suse.de" date="1512388800">- Stop BuildRequire dropped boost-devel (bsc#1062782)
- version 17.0.4 (0)</changelog>
  <changelog author="ma@suse.de" date="1512561600">- Fix default for solver.allowNameChange (bsc#1071466)
- version 17.0.5 (0)</changelog>
  <changelog author="ma@suse.de" date="1515067200">- plugin: don't reject header values containing a ':' (bsc#1074687)
- Locks: Don't store duplicate locks (bsc#969569)
- version 17.1.0 (0)</changelog>
  <changelog author="ma@suse.de" date="1516017600">- Adapt rpm package verification to changes in rpm-4.14 (bsc#1076018)
- version 17.1.1 (0)</changelog>
  <changelog author="ma@suse.de" date="1517572800">- Fix crash when installing broken rpm packages (bsc#1078284)
- Testcase: Minor fix writing update testcases
- version 17.1.2 (0)</changelog>
  <changelog author="ma@suse.de" date="1519128000">- RpmDb::checkPackage: fix parsing localized rpm output (bsc#1076415)
- Replace libexpat with libxml
- Fix libzypp tests failing with `-Wp,-D_GLIBCXX_ASSERTIONS`
  compiler flag (fixes #84)
- BuildRequire gpg2 as testcases need it (fixes #84)
- version 17.1.3 (0)</changelog>
  <changelog author="bzeller@suse.de" date="1519905600">- Add /var/lib/gdm to CheckAccessDeleted blacklist (bsc#1079991)
- Use gpgme instead of calling gpg2 binary directly
- Fix leak in Digest.cc (bsc#1075978)
- version 17.2.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1520424000">- PoolQuery::addDependency add overload to define an individual
  Match::Mode (bsc#1043166)
- version 17.2.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1520942400">- Protect code against broken translations (bsc#1082711)
- Fix broken translated format strings
- Deprecate the use of asciidoc for new releases
- version 17.2.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1523275200">- Show progressbar when running posttrans scripts
- Execute service plugin script chrooted to the RepoManagers root
  (bsc#1080693)
- Make sure the product file comes from /etc/products.d for the
  fallback product search (bsc#1086602)
- Introduce ZConfig::repoManagerRoot to support having diverging
  target and repomanager root paths
- Rename `stderr` as it can be a macro (fixes #102)
- version 17.3.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1524744000">- Avoid zombie tar processes (bsc#1076192)
- Replace the terminology 'uninstallable' with 'not installable'
  (bsc#1029392)
- version 17.3.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1529928000">- Flags: make it std=c++14 ready
- Replace 'redhat-release' with generic 'system-release' (#120)
- Ignore /var, /tmp and /proc in zypper ps (bsc#1096617)
- Show GPGME version in log
- version 17.4.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531137600">- HardLocksFile: Prevent against empty commit without Target having
  been been loaded (bsc#1096803)
- lsof: use '-K i' if lsof supports it (bsc#1099847)
- PackageProvider: Validate deta rpms before caching (bsc#1091624,
  bsc#1088705, CVE-2018-7685)
- PackageProvider: Validate downloaded rpm package signatures
  before caching (bsc#1091624, bsc#1088705, CVE-2018-7685)
- version 17.5.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531915200">- libzypp-devel should not require cmake (bsc#1101349)
- Avoid zombies from ExternalProgram
- Update ApiConfig
- fix typo
- version 17.5.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1532001600">- Prevent the system from sleeping during a commit
  (fixes openSUSE/zypper#135)
- RepoManager: Explicitly request repo2solv to generate application
  pseudo packages.
- version 17.5.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1533297600">- RepoInfo::provideKey: add report telling where we look for missing
  keys.
- Support listing gpgkey URLs in repo files (bsc#1088037)
- Add new report to request user approval for importing a package key
- Handle http error 502 Bad Gateway in curl backend (bsc #1070851)
  (fixes openSUSE/zypper#177)
- Add filesize check for downloads with known size (bsc#408814)
- Removed superfluous space in translation (bsc#1102019)
- version 17.6.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1534507200">- Adapt to changes in libgpgme11-11.1.0 breaking the signature
  verification (bsc#1100427)
- Use %license (bsc#1082318)
- BuildRequires:  libsolv-devel &gt;= 0.6.35 (for bsc#1100095)
- changes: add CVE numbers
- version 17.6.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1534852800">- fixup! Add filesize check for downloads with known size (bsc#408814)
  Fix detetction of metalink downloads and prevent aborting if
  a metalink file is larger than the expected data file.
- version 17.6.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1535630400">- Check for not imported keys after multi key import from rpmdb
  (bsc#1096217)
- version 17.6.3 (2)</changelog>
  <changelog author="ma@suse.de" date="1536235200">- Automatically fetch repository signing key from gpgkey url
  (bsc#1088037)
- lsof: use '-K i' if lsof supports it (bsc#1099847,bsc#1036304)
- version 17.6.4 (2)</changelog>
</package>
<package pkgid="582d857750d68f08eb2519a0d314b4a17e4c9dbf1d67960f4202b8519df10d39" name="libzypp-devel-doc" arch="x86_64">
  <version epoch="0" ver="17.7.0" rel="lp150.2.6.1"/>
  <changelog author="ma@suse.de" date="1512561600">- Fix default for solver.allowNameChange (bsc#1071466)
- version 17.0.5 (0)</changelog>
  <changelog author="ma@suse.de" date="1515067200">- plugin: don't reject header values containing a ':' (bsc#1074687)
- Locks: Don't store duplicate locks (bsc#969569)
- version 17.1.0 (0)</changelog>
  <changelog author="ma@suse.de" date="1516017600">- Adapt rpm package verification to changes in rpm-4.14 (bsc#1076018)
- version 17.1.1 (0)</changelog>
  <changelog author="ma@suse.de" date="1517572800">- Fix crash when installing broken rpm packages (bsc#1078284)
- Testcase: Minor fix writing update testcases
- version 17.1.2 (0)</changelog>
  <changelog author="ma@suse.de" date="1519128000">- RpmDb::checkPackage: fix parsing localized rpm output (bsc#1076415)
- Replace libexpat with libxml
- Fix libzypp tests failing with `-Wp,-D_GLIBCXX_ASSERTIONS`
  compiler flag (fixes #84)
- BuildRequire gpg2 as testcases need it (fixes #84)
- version 17.1.3 (0)</changelog>
  <changelog author="bzeller@suse.de" date="1519905600">- Add /var/lib/gdm to CheckAccessDeleted blacklist (bsc#1079991)
- Use gpgme instead of calling gpg2 binary directly
- Fix leak in Digest.cc (bsc#1075978)
- version 17.2.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1520424000">- PoolQuery::addDependency add overload to define an individual
  Match::Mode (bsc#1043166)
- version 17.2.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1520942400">- Protect code against broken translations (bsc#1082711)
- Fix broken translated format strings
- Deprecate the use of asciidoc for new releases
- version 17.2.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1523275200">- Show progressbar when running posttrans scripts
- Execute service plugin script chrooted to the RepoManagers root
  (bsc#1080693)
- Make sure the product file comes from /etc/products.d for the
  fallback product search (bsc#1086602)
- Introduce ZConfig::repoManagerRoot to support having diverging
  target and repomanager root paths
- Rename `stderr` as it can be a macro (fixes #102)
- version 17.3.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1524744000">- Avoid zombie tar processes (bsc#1076192)
- Replace the terminology 'uninstallable' with 'not installable'
  (bsc#1029392)
- version 17.3.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1529928000">- Flags: make it std=c++14 ready
- Replace 'redhat-release' with generic 'system-release' (#120)
- Ignore /var, /tmp and /proc in zypper ps (bsc#1096617)
- Show GPGME version in log
- version 17.4.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531137600">- HardLocksFile: Prevent against empty commit without Target having
  been been loaded (bsc#1096803)
- lsof: use '-K i' if lsof supports it (bsc#1099847)
- PackageProvider: Validate deta rpms before caching (bsc#1091624,
  bsc#1088705, CVE-2018-7685)
- PackageProvider: Validate downloaded rpm package signatures
  before caching (bsc#1091624, bsc#1088705, CVE-2018-7685)
- version 17.5.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531915200">- libzypp-devel should not require cmake (bsc#1101349)
- Avoid zombies from ExternalProgram
- Update ApiConfig
- fix typo
- version 17.5.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1532001600">- Prevent the system from sleeping during a commit
  (fixes openSUSE/zypper#135)
- RepoManager: Explicitly request repo2solv to generate application
  pseudo packages.
- version 17.5.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1533297600">- RepoInfo::provideKey: add report telling where we look for missing
  keys.
- Support listing gpgkey URLs in repo files (bsc#1088037)
- Add new report to request user approval for importing a package key
- Handle http error 502 Bad Gateway in curl backend (bsc #1070851)
  (fixes openSUSE/zypper#177)
- Add filesize check for downloads with known size (bsc#408814)
- Removed superfluous space in translation (bsc#1102019)
- version 17.6.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1534507200">- Adapt to changes in libgpgme11-11.1.0 breaking the signature
  verification (bsc#1100427)
- Use %license (bsc#1082318)
- BuildRequires:  libsolv-devel &gt;= 0.6.35 (for bsc#1100095)
- changes: add CVE numbers
- version 17.6.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1534852800">- fixup! Add filesize check for downloads with known size (bsc#408814)
  Fix detetction of metalink downloads and prevent aborting if
  a metalink file is larger than the expected data file.
- version 17.6.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1535630400">- Check for not imported keys after multi key import from rpmdb
  (bsc#1096217)
- version 17.6.3 (2)</changelog>
  <changelog author="ma@suse.de" date="1536235200">- Automatically fetch repository signing key from gpgkey url
  (bsc#1088037)
- lsof: use '-K i' if lsof supports it (bsc#1099847,bsc#1036304)
- version 17.6.4 (2)</changelog>
  <changelog author="ma@suse.de" date="1536321600">- Drop type application due to poor metadata support (bsc#1100095,
  bsc#1104415)
- version 17.7.0 (2)</changelog>
</package>
<package pkgid="06209d1cc02d070e6c4c1c2d2b7a27d35a078410784dc0daf233bdd477550446" name="libzypp-devel-doc" arch="x86_64">
  <version epoch="0" ver="17.7.2" rel="lp150.2.9.1"/>
  <changelog author="ma@suse.de" date="1516017600">- Adapt rpm package verification to changes in rpm-4.14 (bsc#1076018)
- version 17.1.1 (0)</changelog>
  <changelog author="ma@suse.de" date="1517572800">- Fix crash when installing broken rpm packages (bsc#1078284)
- Testcase: Minor fix writing update testcases
- version 17.1.2 (0)</changelog>
  <changelog author="ma@suse.de" date="1519128000">- RpmDb::checkPackage: fix parsing localized rpm output (bsc#1076415)
- Replace libexpat with libxml
- Fix libzypp tests failing with `-Wp,-D_GLIBCXX_ASSERTIONS`
  compiler flag (fixes #84)
- BuildRequire gpg2 as testcases need it (fixes #84)
- version 17.1.3 (0)</changelog>
  <changelog author="bzeller@suse.de" date="1519905600">- Add /var/lib/gdm to CheckAccessDeleted blacklist (bsc#1079991)
- Use gpgme instead of calling gpg2 binary directly
- Fix leak in Digest.cc (bsc#1075978)
- version 17.2.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1520424000">- PoolQuery::addDependency add overload to define an individual
  Match::Mode (bsc#1043166)
- version 17.2.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1520942400">- Protect code against broken translations (bsc#1082711)
- Fix broken translated format strings
- Deprecate the use of asciidoc for new releases
- version 17.2.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1523275200">- Show progressbar when running posttrans scripts
- Execute service plugin script chrooted to the RepoManagers root
  (bsc#1080693)
- Make sure the product file comes from /etc/products.d for the
  fallback product search (bsc#1086602)
- Introduce ZConfig::repoManagerRoot to support having diverging
  target and repomanager root paths
- Rename `stderr` as it can be a macro (fixes #102)
- version 17.3.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1524744000">- Avoid zombie tar processes (bsc#1076192)
- Replace the terminology 'uninstallable' with 'not installable'
  (bsc#1029392)
- version 17.3.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1529928000">- Flags: make it std=c++14 ready
- Replace 'redhat-release' with generic 'system-release' (#120)
- Ignore /var, /tmp and /proc in zypper ps (bsc#1096617)
- Show GPGME version in log
- version 17.4.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531137600">- HardLocksFile: Prevent against empty commit without Target having
  been been loaded (bsc#1096803)
- lsof: use '-K i' if lsof supports it (bsc#1099847)
- PackageProvider: Validate deta rpms before caching (bsc#1091624,
  bsc#1088705, CVE-2018-7685)
- PackageProvider: Validate downloaded rpm package signatures
  before caching (bsc#1091624, bsc#1088705, CVE-2018-7685)
- version 17.5.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531915200">- libzypp-devel should not require cmake (bsc#1101349)
- Avoid zombies from ExternalProgram
- Update ApiConfig
- fix typo
- version 17.5.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1532001600">- Prevent the system from sleeping during a commit
  (fixes openSUSE/zypper#135)
- RepoManager: Explicitly request repo2solv to generate application
  pseudo packages.
- version 17.5.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1533297600">- RepoInfo::provideKey: add report telling where we look for missing
  keys.
- Support listing gpgkey URLs in repo files (bsc#1088037)
- Add new report to request user approval for importing a package key
- Handle http error 502 Bad Gateway in curl backend (bsc #1070851)
  (fixes openSUSE/zypper#177)
- Add filesize check for downloads with known size (bsc#408814)
- Removed superfluous space in translation (bsc#1102019)
- version 17.6.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1534507200">- Adapt to changes in libgpgme11-11.1.0 breaking the signature
  verification (bsc#1100427)
- Use %license (bsc#1082318)
- BuildRequires:  libsolv-devel &gt;= 0.6.35 (for bsc#1100095)
- changes: add CVE numbers
- version 17.6.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1534852800">- fixup! Add filesize check for downloads with known size (bsc#408814)
  Fix detetction of metalink downloads and prevent aborting if
  a metalink file is larger than the expected data file.
- version 17.6.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1535630400">- Check for not imported keys after multi key import from rpmdb
  (bsc#1096217)
- version 17.6.3 (2)</changelog>
  <changelog author="ma@suse.de" date="1536235200">- Automatically fetch repository signing key from gpgkey url
  (bsc#1088037)
- lsof: use '-K i' if lsof supports it (bsc#1099847,bsc#1036304)
- version 17.6.4 (2)</changelog>
  <changelog author="ma@suse.de" date="1536321600">- Drop type application due to poor metadata support (bsc#1100095,
  bsc#1104415)
- version 17.7.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1538136000">- Fix conversion of string and glob to regex when compiling queries
  (bsc#1099982, bsc#939392, bsc#556664)
- version 17.7.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1538395200">- Fix blocking wait for finished child process (bsc#1109877)
- version 17.7.2 (2)</changelog>
</package>
<package pkgid="e7ebb8b1c9b4365d43936ee3fcd793590f424e1cd122ffb2cdf2b774a7715e42" name="libzzip-0-13" arch="x86_64">
  <version epoch="0" ver="0.13.69" rel="lp150.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1304164800">- Fix build with gcc 4.6</changelog>
  <changelog author="jengelh@medozas.de" date="1316174400">- Implement shlib policy/packaging for package, add baselibs.conf
  and resolve redundant constructs</changelog>
  <changelog author="coolo@suse.com" date="1321704000">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="p.drouand@gmail.com" date="1355572800">- Update to 0.13.62 version:
  * configure.ac: fallback to libtool -export-dynamic unless being sure to
    use gnu-ld --export-dynamic. The darwin case is a bit special here
  as the c-compiler and linker might be from different worlds.
  * Makefile.am: allow nonstaic build
  * wrap fd.open like in the Fedora patch
- Remove the package name on summary
- Add dos2unix as build dependencie to fix a wrong file encoding</changelog>
  <changelog author="schwab@linux-m68k.org" date="1363435200">- zziplib-largefile.patch: Enable largefile support
- Enable debug information</changelog>
  <changelog author="josef.moellers@suse.com" date="1490270400">- Several bugs fixed:
  * heap-based buffer overflows
    (bsc#1024517, CVE-2017-5974, zziplib-CVE-2017-5974.patch)
  * check if "relative offset of local header" in "central
    directory header" really points to a local header
    (ZZIP_FILE_HEADER_MAGIC)
    (bsc#1024528, CVE-2017-5975, zziplib-CVE-2017-5975.patch)
  * protect against bad formatted data in extra blocks
    (bsc#1024531, CVE-2017-5976, zziplib-CVE-2017-5976.patch)
  * NULL pointer dereference in main (unzzipcat-mem.c)
    (bsc#1024532, bsc#1024536, CVE-2017-5975,
    zziplib-CVE-2017-5975.patch)
  * protect against huge values of "extra field length"
    in local file header and central file header
    (bsc#1024533, CVE-2017-5978, zziplib-CVE-2017-5978.patch)
  * clear ZZIP_ENTRY record before use.
    (bsc#1024534, bsc#1024535, CVE-2017-5979, CVE-2017-5977,
    zziplib-CVE-2017-5979.patch)
  * prevent unzzipcat.c from trying to print a NULL name
    (bsc#1024537, zziplib-unzipcat-NULL-name.patch)
  * Replace assert() by going to error exit.
    (bsc#1034539, CVE-2017-5981, zziplib-CVE-2017-5981.patch)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Packaking changes:
  * Depend on python2 explicitly
  * Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version update to 0.13.67:
  * Various fixes found by fuzzing
  * Merged bellow patches
- Remove merged patches:
  * zziplib-CVE-2017-5974.patch
  * zziplib-CVE-2017-5975.patch
  * zziplib-CVE-2017-5976.patch
  * zziplib-CVE-2017-5978.patch
  * zziplib-CVE-2017-5979.patch
  * zziplib-CVE-2017-5981.patch
- Switch to github tarball as upstream seem no longer pull it to
  sourceforge
- Remove no longer applying patch zziplib-unzipcat-NULL-name.patch
  * The sourcecode was quite changed for this to work this way
    anymore, lets hope this is fixed too</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop tests as they fail completely anyway, not finding lib needing
  zip command, this should allow us to kill python dependency
- Also drop docs subdir avoiding python dependency for it
  * The generated xmls were used for mans too but we shipped those
    only in devel pkg and as such we will live without them</changelog>
  <changelog author="josef.moellers@suse.com" date="1517486400">- If a file is uncompressed, compressed and uncompressed sizes
  should be identical.
  [CVE-2018-6381, bsc#1078497, CVE-2018-6381.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1517572800">- Reject the ZIP file and report it as corrupt if the size of the
  central directory and/or the offset of start of central directory
  point beyond the end of the ZIP file.
  [CVE-2018-6484, boo#1078701, CVE-2018-6484.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1517918400">- If an extension block is too small to hold an extension,
  do not use the information therein.
- If the End of central directory record (EOCD) contains an
  Offset of start of central directory which is beyond the end of
  the file, reject the file.
  [CVE-2018-6540, bsc#1079096, CVE-2018-6540.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1518436800">- If the size of the central directory is too big, reject
  the file.
  Then, if loading the ZIP file fails, display an error message.
  [CVE-2018-6542.patch, CVE-2018-6542, bsc#1079094]</changelog>
  <changelog author="josef.moellers@suse.com" date="1518609600">- Changed %license to %doc in SPEC file.</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Update to 0.13.68:
  * fix a number of CVEs reported with special *.zip files
  * minor doc updates referencing GitHub instead of sf.net
- drop CVE-2018-6381.patch
  * merged in a803559fa9194be895422ba3684cf6309b6bb598
- drop CVE-2018-6484.patch
  * merged in 0c0c9256b0903f664bca25dd8d924211f81e01d3
- drop CVE-2018-6540.patch
  * merged in 15b8c969df962a444dfa07b3d5bd4b27dc0dbba7
- drop CVE-2018-6542.patch
  * merged in 938011cd60f5a8a2a16a49e5f317aca640cf4110</changelog>
  <changelog author="jengelh@inai.de" date="1519041600">- Fix RPM groups. Remove ineffective --with-pic.
  Trim redundancies from description.
  Do not let fdupes run across partitions.</changelog>
  <changelog author="adam.majer@suse.de" date="1519041601">- Drop BR: fdupes since it does nothing.</changelog>
  <changelog author="avindra@opensuse.org" date="1521288000">- Update to 0.13.69:
  * fix a number of CVEs reported with special *.zip PoC files
  * completing some doc strings while checking the new man-pages to
    look good
  * update refs to point to github instead of sf.net
  * man-pages are generated with new dbk2man.py - docbook xmlto is
    optional now
  * a zip-program is still required for testing, but some errors
    are gone when not present
- run spec-cleaner
- don't ship Windows only file, README.MSVC6</changelog>
  <changelog author="josef.moellers@suse.com" date="1521460800">- Check if data from End of central directory record makes sense.
  Especially the Offset of start of central directory must not
  a) be negative or
  b) point behind the end-of-file.
- Check if compressed size in Central directory file header
  makes sense, i.e. the file's data does not extend beyond the
  end of the file.
  [bsc#1084517, CVE-2018-7726, CVE-2018-7726.patch,
  bsc#1084519, CVE-2018-7725, CVE-2018-7725.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1538654400">- Remove any "../" components from pathnames of extracted files.
  [bsc#1110687, CVE-2018-17828, CVE-2018-17828.patch]</changelog>
</package>
<package pkgid="8ef8c0b5e8ea4f28e9efbfd49f8df11ba570ece2e43ab3e4580936c1d3ed3fc6" name="libzzip-0-13-32bit" arch="x86_64">
  <version epoch="0" ver="0.13.69" rel="lp150.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1304164800">- Fix build with gcc 4.6</changelog>
  <changelog author="jengelh@medozas.de" date="1316174400">- Implement shlib policy/packaging for package, add baselibs.conf
  and resolve redundant constructs</changelog>
  <changelog author="coolo@suse.com" date="1321704000">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="p.drouand@gmail.com" date="1355572800">- Update to 0.13.62 version:
  * configure.ac: fallback to libtool -export-dynamic unless being sure to
    use gnu-ld --export-dynamic. The darwin case is a bit special here
  as the c-compiler and linker might be from different worlds.
  * Makefile.am: allow nonstaic build
  * wrap fd.open like in the Fedora patch
- Remove the package name on summary
- Add dos2unix as build dependencie to fix a wrong file encoding</changelog>
  <changelog author="schwab@linux-m68k.org" date="1363435200">- zziplib-largefile.patch: Enable largefile support
- Enable debug information</changelog>
  <changelog author="josef.moellers@suse.com" date="1490270400">- Several bugs fixed:
  * heap-based buffer overflows
    (bsc#1024517, CVE-2017-5974, zziplib-CVE-2017-5974.patch)
  * check if "relative offset of local header" in "central
    directory header" really points to a local header
    (ZZIP_FILE_HEADER_MAGIC)
    (bsc#1024528, CVE-2017-5975, zziplib-CVE-2017-5975.patch)
  * protect against bad formatted data in extra blocks
    (bsc#1024531, CVE-2017-5976, zziplib-CVE-2017-5976.patch)
  * NULL pointer dereference in main (unzzipcat-mem.c)
    (bsc#1024532, bsc#1024536, CVE-2017-5975,
    zziplib-CVE-2017-5975.patch)
  * protect against huge values of "extra field length"
    in local file header and central file header
    (bsc#1024533, CVE-2017-5978, zziplib-CVE-2017-5978.patch)
  * clear ZZIP_ENTRY record before use.
    (bsc#1024534, bsc#1024535, CVE-2017-5979, CVE-2017-5977,
    zziplib-CVE-2017-5979.patch)
  * prevent unzzipcat.c from trying to print a NULL name
    (bsc#1024537, zziplib-unzipcat-NULL-name.patch)
  * Replace assert() by going to error exit.
    (bsc#1034539, CVE-2017-5981, zziplib-CVE-2017-5981.patch)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Packaking changes:
  * Depend on python2 explicitly
  * Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version update to 0.13.67:
  * Various fixes found by fuzzing
  * Merged bellow patches
- Remove merged patches:
  * zziplib-CVE-2017-5974.patch
  * zziplib-CVE-2017-5975.patch
  * zziplib-CVE-2017-5976.patch
  * zziplib-CVE-2017-5978.patch
  * zziplib-CVE-2017-5979.patch
  * zziplib-CVE-2017-5981.patch
- Switch to github tarball as upstream seem no longer pull it to
  sourceforge
- Remove no longer applying patch zziplib-unzipcat-NULL-name.patch
  * The sourcecode was quite changed for this to work this way
    anymore, lets hope this is fixed too</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop tests as they fail completely anyway, not finding lib needing
  zip command, this should allow us to kill python dependency
- Also drop docs subdir avoiding python dependency for it
  * The generated xmls were used for mans too but we shipped those
    only in devel pkg and as such we will live without them</changelog>
  <changelog author="josef.moellers@suse.com" date="1517486400">- If a file is uncompressed, compressed and uncompressed sizes
  should be identical.
  [CVE-2018-6381, bsc#1078497, CVE-2018-6381.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1517572800">- Reject the ZIP file and report it as corrupt if the size of the
  central directory and/or the offset of start of central directory
  point beyond the end of the ZIP file.
  [CVE-2018-6484, boo#1078701, CVE-2018-6484.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1517918400">- If an extension block is too small to hold an extension,
  do not use the information therein.
- If the End of central directory record (EOCD) contains an
  Offset of start of central directory which is beyond the end of
  the file, reject the file.
  [CVE-2018-6540, bsc#1079096, CVE-2018-6540.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1518436800">- If the size of the central directory is too big, reject
  the file.
  Then, if loading the ZIP file fails, display an error message.
  [CVE-2018-6542.patch, CVE-2018-6542, bsc#1079094]</changelog>
  <changelog author="josef.moellers@suse.com" date="1518609600">- Changed %license to %doc in SPEC file.</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Update to 0.13.68:
  * fix a number of CVEs reported with special *.zip files
  * minor doc updates referencing GitHub instead of sf.net
- drop CVE-2018-6381.patch
  * merged in a803559fa9194be895422ba3684cf6309b6bb598
- drop CVE-2018-6484.patch
  * merged in 0c0c9256b0903f664bca25dd8d924211f81e01d3
- drop CVE-2018-6540.patch
  * merged in 15b8c969df962a444dfa07b3d5bd4b27dc0dbba7
- drop CVE-2018-6542.patch
  * merged in 938011cd60f5a8a2a16a49e5f317aca640cf4110</changelog>
  <changelog author="jengelh@inai.de" date="1519041600">- Fix RPM groups. Remove ineffective --with-pic.
  Trim redundancies from description.
  Do not let fdupes run across partitions.</changelog>
  <changelog author="adam.majer@suse.de" date="1519041601">- Drop BR: fdupes since it does nothing.</changelog>
  <changelog author="avindra@opensuse.org" date="1521288000">- Update to 0.13.69:
  * fix a number of CVEs reported with special *.zip PoC files
  * completing some doc strings while checking the new man-pages to
    look good
  * update refs to point to github instead of sf.net
  * man-pages are generated with new dbk2man.py - docbook xmlto is
    optional now
  * a zip-program is still required for testing, but some errors
    are gone when not present
- run spec-cleaner
- don't ship Windows only file, README.MSVC6</changelog>
  <changelog author="josef.moellers@suse.com" date="1521460800">- Check if data from End of central directory record makes sense.
  Especially the Offset of start of central directory must not
  a) be negative or
  b) point behind the end-of-file.
- Check if compressed size in Central directory file header
  makes sense, i.e. the file's data does not extend beyond the
  end of the file.
  [bsc#1084517, CVE-2018-7726, CVE-2018-7726.patch,
  bsc#1084519, CVE-2018-7725, CVE-2018-7725.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1538654400">- Remove any "../" components from pathnames of extracted files.
  [bsc#1110687, CVE-2018-17828, CVE-2018-17828.patch]</changelog>
</package>
<package pkgid="599b1ff24841caed4635a3b92dc2b273190fcd0f55f3ab2973be427d246ee67a" name="linphone" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="lp150.3.5.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1500638400">- Initial package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1505044800">- Add linphoneqt-fix-cmake-i18n.patch: Support new CMake versions
  for translations (commit e70c077).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1505044801">- Add the missing libqt5-qtquickcontrols dependency (boo#1065173).
- Install the appstream file to the /usr/share/metainfo/ directory
  on openSUSE Leap 15.x or newer.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520510400">- Add linphoneqt-fix-qt-5.10.patch: Rename the icon property of
  TabButton to iconName (an issue with Qt 5.10 and the new icon
  property, commit ecaab0f, boo#1083654).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533211200">- Replace linphoneqt-fix-qt-5.10.patch with
  linphoneqt-fix-qt-5.11.patch, adding more fixes:
  * Try to support menu bar on Qt 5.10 (commit 5dd0161).
  * Fix ComboBox by importing named QtQuick.Controls (commit
    7f62ae9).
  * Do not use SignalSpy as click is emitted twice instead of one
    in Qt 5.11 (commit 8720931),
  * Avoid a crash in Calls with a bad binding (Qt 5.11) on
    ConferenceControls (commit 4f908ef).
- Do not bother installing the appstream file to
  /usr/share/appdata/ on openSUSE Leap 42.x or older.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533384000">- Add linphoneqt-qt-5.9-fix-buttons.patch: Fix button invisibility
  with Qt 5.9 (boo#1095273).
- Improve linphoneqt-fix-qt-5.11.patch: Add a fix for
  DefaultTranslator dealing with Qt 5.9 (commit d95f523).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1534075200">- Add linphoneqt-force-default-style.patch: Force default theme
  style (commit 313aa68).
  This fixes issues with tabs reported in boo#1095273.</changelog>
</package>
<package pkgid="52fab36b14aeeb3118be397f4aa46d8a92cb519fe1b530f51a7c4354852156a9" name="linphoneqt" arch="src">
  <version epoch="0" ver="4.1.1" rel="lp150.3.5.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1500638400">- Initial package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1505044800">- Add linphoneqt-fix-cmake-i18n.patch: Support new CMake versions
  for translations (commit e70c077).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1505044801">- Add the missing libqt5-qtquickcontrols dependency (boo#1065173).
- Install the appstream file to the /usr/share/metainfo/ directory
  on openSUSE Leap 15.x or newer.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520510400">- Add linphoneqt-fix-qt-5.10.patch: Rename the icon property of
  TabButton to iconName (an issue with Qt 5.10 and the new icon
  property, commit ecaab0f, boo#1083654).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533211200">- Replace linphoneqt-fix-qt-5.10.patch with
  linphoneqt-fix-qt-5.11.patch, adding more fixes:
  * Try to support menu bar on Qt 5.10 (commit 5dd0161).
  * Fix ComboBox by importing named QtQuick.Controls (commit
    7f62ae9).
  * Do not use SignalSpy as click is emitted twice instead of one
    in Qt 5.11 (commit 8720931),
  * Avoid a crash in Calls with a bad binding (Qt 5.11) on
    ConferenceControls (commit 4f908ef).
- Do not bother installing the appstream file to
  /usr/share/appdata/ on openSUSE Leap 42.x or older.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533384000">- Add linphoneqt-qt-5.9-fix-buttons.patch: Fix button invisibility
  with Qt 5.9 (boo#1095273).
- Improve linphoneqt-fix-qt-5.11.patch: Add a fix for
  DefaultTranslator dealing with Qt 5.9 (commit d95f523).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1534075200">- Add linphoneqt-force-default-style.patch: Force default theme
  style (commit 313aa68).
  This fixes issues with tabs reported in boo#1095273.</changelog>
</package>
<package pkgid="deac102ed42817ddb54f54554f496184db077b553eb6f775ee8889a0cafadbc6" name="live-net-installer" arch="noarch">
  <version epoch="0" ver="1.0" rel="lp150.3.3.1"/>
  <changelog author="fvogt@suse.com" date="1502193600">- Initial package, separated from kiwi-config-openSUSE</changelog>
  <changelog author="fvogt@suse.com" date="1506600000">- Change cmdline entry generation in start-install.sh:
  * No useless use of cat ~(=^?^)
  * Strip parameters that the dracut-based boot injects to prevent
    them from getting added to the installed system (boo#1059298)</changelog>
  <changelog author="fvogt@suse.com" date="1515672000">- Support Leap 15.0 by detecting the OS and setting the RepoUrl
  appropriately</changelog>
  <changelog author="fvogt@suse.com" date="1525348800">- Move start-install.sh to /usr/sbin
- Add extend script to fake extension rpm loading (boo#1013206)</changelog>
  <changelog author="fvogt@suse.com" date="1527508800">- Add /sbin:/usr/sbin to $PATH to workaround boo#1094842</changelog>
</package>
<package pkgid="2ee594707bbffb39a975154b94cbe9194a02fbf9de77e5ee95ec1c810f240914" name="live-net-installer" arch="src">
  <version epoch="0" ver="1.0" rel="lp150.3.3.1"/>
  <changelog author="fvogt@suse.com" date="1502193600">- Initial package, separated from kiwi-config-openSUSE</changelog>
  <changelog author="fvogt@suse.com" date="1506600000">- Change cmdline entry generation in start-install.sh:
  * No useless use of cat ~(=^?^)
  * Strip parameters that the dracut-based boot injects to prevent
    them from getting added to the installed system (boo#1059298)</changelog>
  <changelog author="fvogt@suse.com" date="1515672000">- Support Leap 15.0 by detecting the OS and setting the RepoUrl
  appropriately</changelog>
  <changelog author="fvogt@suse.com" date="1525348800">- Move start-install.sh to /usr/sbin
- Add extend script to fake extension rpm loading (boo#1013206)</changelog>
  <changelog author="fvogt@suse.com" date="1527508800">- Add /sbin:/usr/sbin to $PATH to workaround boo#1094842</changelog>
</package>
<package pkgid="fcbd17c75272fae0a355584685c9b0cb66202106d0df49a3d89811529dcbac0e" name="lld" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.4.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1469707200">- for ppc64le set memory to 4GB in _constraints file
  (failure in Factory:PowerPC)</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Start conversion to use cmake macros with now introduced
  compatibility for ninja
- Reduce number of threads if we don't have enough memory
- Add patch for the nonvoid returns:
  * llvm-nonvoid-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1472644800">- Update to llvm 3.8.1
  * See http://llvm.org/releases/3.8.1/docs/ReleaseNotes.html and
    http://llvm.org/releases/3.8.1/tools/docs/ReleaseNotes.html
- Use versioned libLLVM (to libLLVM3_8) and libclang (to libclang3_8)
- Change versioning of liblldb3_8 to liblldb-3_8 and use a variable
  to control the name instead of hard-coding it.
- Use bcond_with and bcond_without to enable/disable build options
  instead of hard-coding them.
- Put buildrequires as requires in -devel packages to avoid linker errors
  when building packages against the -devel packages.
- Add ffi support (disabled by default).
- Add oprofile support (disabled by default).
- Add valgrind support (disabled by default).
- Link cmake files to the normal cmake file directory to allow autodetection
  of cmake interfaces.
- Remove unused lldb components from main spec file.
- Split llvm python bindings into own subpackage.
- Split emacs plugin into own subpackage
- Move additional vim plugins into vim plugins package
- Split libc++, libLTO, LLVMgold, libomp, clang-chekers into own subpackages
- Make python-clang, llvm-vim-plugins, and llvm-emacs-plugins noarch since
  they aren't architecture-specific.
- Make packages besides llvm, llvm-clang, and the shared libraries conflict
  with other versions.  This will be important when multiple LLVM versions
  are supported.
- Various spec file cleanups
- Rebase patches:
  * arm_suse_support.diff
  * assume-opensuse.patch
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * glibc-2.23-libcxx.patch
  * glibc-2.24-libcxx.patch
  * lldb-add-pthread-dl-libs.patch
  * lldb-cmake.patch
  * llvm-fix-find-gcc5-install.patch
  * llvm-nonvoid-return.patch
  * llvm-remove-clang-only-flags.patch
  * revert-cmake-soname.patch
  * set-revision.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Sort a bit with spec-cleaner
- Remove the latest switch for now, things should be either coinstallable
  or not, we don't need to bother around with compilation like this</changelog>
  <changelog author="toddrme2178@gmail.com" date="1473422400">- Split out llvm and lldb into a version-specific package.
- Turn this package into a wrapper around the version-specific
  packages.
- Remove patches:
  * default-to-i586.patch
  * assume-opensuse.patch
  * glibc-2.23-libcxx.patch
  * arm_suse_support.diff
  * llvm-remove-clang-only-flags.patch
  * clang-resourcedirs.patch
  * lldb-add-pthread-dl-libs.patch
  * llvm-nonvoid-return.patch
  * glibc-2.24-libcxx.patch
  * revert-cmake-soname.patch
  * set-revision.patch
  * lldb-cmake.patch
  * D15067.id41365.diff
  * llvm-fix-find-gcc5-install.patch</changelog>
  <changelog author="idonmez@suse.com" date="1475668800">- BuildIgnore emacs and vim to avoid cycles.</changelog>
  <changelog author="idonmez@suse.com" date="1475755200">- Remove unneeded emacs-nox dependency.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475841600">- Improve README.packaging.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1480680000">- Update to version 3.9.0
  * See:
    + http://llvm.org/releases/3.9.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  * Fix the following patches:
    + arm_suse_support.diff
    + assume-opensuse.patch
    + clang-resourcedirs.patch
    + default-to-i586.patch
    + glibc-2.23-libcxx.patch
    + glibc-2.24-libcxx.patch
    + lldb-add-pthread-dl-libs.patch
    + lldb-cmake.patch
    + llvm-fix-find-gcc5-install.patch
    + llvm-remove-clang-only-flags.patch
    + revert-cmake-soname.patch
    + set-revision.patch
  * Remove upstream-included patch:
    + llvm-nonvoid-return.patch
  * Remove patch for removed files:
    + glibc-2.23-libcxx.patch
- Backport upstream patches:
  * clang-fix-substitutions-abi_tag.patch
  * clang-incomplete-field-types.patch
  * llvm-install-CheckAtomic.patch
- Add clang%{_sonum}-include-fixer subpackage and associated
  libfindAllSymbols%{_sonum} and libfindAllSymbols%{_sonum}-devel
  subpackages.
- Add sanstats to llvm binary list.</changelog>
  <changelog author="idonmez@suse.com" date="1482321600">- Update to version 3.9.1
  * See:
    + http://llvm.org/releases/3.9.1/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1490788800">- Update to version 4.0.0
  * See:
    + http://llvm.org/releases/4.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1498564800">- Update to version 4.0.1
  * Minor bugfixes</changelog>
  <changelog author="msrb@suse.com" date="1507550400">- Add clang-devel-static package.
  * Requires clang4-devel-static that was added to llvm4 package.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Update to version 5.0.0
  * See:
    + http://llvm.org/releases/5.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="msrb@suse.com" date="1513166401">- Rename python-lldb to python3-lldb to match the renamed package
  in llvm4 and llvm5 after switch to python3. Fix its dependency.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Add lld package.
  * LLD is new since llvm5.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Update to version 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Add missing %files for lld.</changelog>
  <changelog author="msrb@suse.com" date="1516795200">- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1531915200">- Add ExcludeArch mirroring the ones in llvm5. (bnc#1101598)</changelog>
</package>
<package pkgid="1a668b1483dbfcd150d641232447430113658e94361af2e11b2a15e313196cac" name="lld5" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="91c38f17d8c5525c831161a7b251a0e8141a0bd5ffcf3d467f7ba8265bba10bc" name="lldb" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.4.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1469707200">- for ppc64le set memory to 4GB in _constraints file
  (failure in Factory:PowerPC)</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Start conversion to use cmake macros with now introduced
  compatibility for ninja
- Reduce number of threads if we don't have enough memory
- Add patch for the nonvoid returns:
  * llvm-nonvoid-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1472644800">- Update to llvm 3.8.1
  * See http://llvm.org/releases/3.8.1/docs/ReleaseNotes.html and
    http://llvm.org/releases/3.8.1/tools/docs/ReleaseNotes.html
- Use versioned libLLVM (to libLLVM3_8) and libclang (to libclang3_8)
- Change versioning of liblldb3_8 to liblldb-3_8 and use a variable
  to control the name instead of hard-coding it.
- Use bcond_with and bcond_without to enable/disable build options
  instead of hard-coding them.
- Put buildrequires as requires in -devel packages to avoid linker errors
  when building packages against the -devel packages.
- Add ffi support (disabled by default).
- Add oprofile support (disabled by default).
- Add valgrind support (disabled by default).
- Link cmake files to the normal cmake file directory to allow autodetection
  of cmake interfaces.
- Remove unused lldb components from main spec file.
- Split llvm python bindings into own subpackage.
- Split emacs plugin into own subpackage
- Move additional vim plugins into vim plugins package
- Split libc++, libLTO, LLVMgold, libomp, clang-chekers into own subpackages
- Make python-clang, llvm-vim-plugins, and llvm-emacs-plugins noarch since
  they aren't architecture-specific.
- Make packages besides llvm, llvm-clang, and the shared libraries conflict
  with other versions.  This will be important when multiple LLVM versions
  are supported.
- Various spec file cleanups
- Rebase patches:
  * arm_suse_support.diff
  * assume-opensuse.patch
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * glibc-2.23-libcxx.patch
  * glibc-2.24-libcxx.patch
  * lldb-add-pthread-dl-libs.patch
  * lldb-cmake.patch
  * llvm-fix-find-gcc5-install.patch
  * llvm-nonvoid-return.patch
  * llvm-remove-clang-only-flags.patch
  * revert-cmake-soname.patch
  * set-revision.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Sort a bit with spec-cleaner
- Remove the latest switch for now, things should be either coinstallable
  or not, we don't need to bother around with compilation like this</changelog>
  <changelog author="toddrme2178@gmail.com" date="1473422400">- Split out llvm and lldb into a version-specific package.
- Turn this package into a wrapper around the version-specific
  packages.
- Remove patches:
  * default-to-i586.patch
  * assume-opensuse.patch
  * glibc-2.23-libcxx.patch
  * arm_suse_support.diff
  * llvm-remove-clang-only-flags.patch
  * clang-resourcedirs.patch
  * lldb-add-pthread-dl-libs.patch
  * llvm-nonvoid-return.patch
  * glibc-2.24-libcxx.patch
  * revert-cmake-soname.patch
  * set-revision.patch
  * lldb-cmake.patch
  * D15067.id41365.diff
  * llvm-fix-find-gcc5-install.patch</changelog>
  <changelog author="idonmez@suse.com" date="1475668800">- BuildIgnore emacs and vim to avoid cycles.</changelog>
  <changelog author="idonmez@suse.com" date="1475755200">- Remove unneeded emacs-nox dependency.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475841600">- Improve README.packaging.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1480680000">- Update to version 3.9.0
  * See:
    + http://llvm.org/releases/3.9.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  * Fix the following patches:
    + arm_suse_support.diff
    + assume-opensuse.patch
    + clang-resourcedirs.patch
    + default-to-i586.patch
    + glibc-2.23-libcxx.patch
    + glibc-2.24-libcxx.patch
    + lldb-add-pthread-dl-libs.patch
    + lldb-cmake.patch
    + llvm-fix-find-gcc5-install.patch
    + llvm-remove-clang-only-flags.patch
    + revert-cmake-soname.patch
    + set-revision.patch
  * Remove upstream-included patch:
    + llvm-nonvoid-return.patch
  * Remove patch for removed files:
    + glibc-2.23-libcxx.patch
- Backport upstream patches:
  * clang-fix-substitutions-abi_tag.patch
  * clang-incomplete-field-types.patch
  * llvm-install-CheckAtomic.patch
- Add clang%{_sonum}-include-fixer subpackage and associated
  libfindAllSymbols%{_sonum} and libfindAllSymbols%{_sonum}-devel
  subpackages.
- Add sanstats to llvm binary list.</changelog>
  <changelog author="idonmez@suse.com" date="1482321600">- Update to version 3.9.1
  * See:
    + http://llvm.org/releases/3.9.1/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1490788800">- Update to version 4.0.0
  * See:
    + http://llvm.org/releases/4.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1498564800">- Update to version 4.0.1
  * Minor bugfixes</changelog>
  <changelog author="msrb@suse.com" date="1507550400">- Add clang-devel-static package.
  * Requires clang4-devel-static that was added to llvm4 package.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Update to version 5.0.0
  * See:
    + http://llvm.org/releases/5.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="msrb@suse.com" date="1513166401">- Rename python-lldb to python3-lldb to match the renamed package
  in llvm4 and llvm5 after switch to python3. Fix its dependency.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Add lld package.
  * LLD is new since llvm5.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Update to version 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Add missing %files for lld.</changelog>
  <changelog author="msrb@suse.com" date="1516795200">- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1531915200">- Add ExcludeArch mirroring the ones in llvm5. (bnc#1101598)</changelog>
</package>
<package pkgid="54a459dbf9c73442d1f1167dc78b947160136562ab5d0b5c6a661a9a79765b42" name="lldb-devel" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.4.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1469707200">- for ppc64le set memory to 4GB in _constraints file
  (failure in Factory:PowerPC)</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Start conversion to use cmake macros with now introduced
  compatibility for ninja
- Reduce number of threads if we don't have enough memory
- Add patch for the nonvoid returns:
  * llvm-nonvoid-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1472644800">- Update to llvm 3.8.1
  * See http://llvm.org/releases/3.8.1/docs/ReleaseNotes.html and
    http://llvm.org/releases/3.8.1/tools/docs/ReleaseNotes.html
- Use versioned libLLVM (to libLLVM3_8) and libclang (to libclang3_8)
- Change versioning of liblldb3_8 to liblldb-3_8 and use a variable
  to control the name instead of hard-coding it.
- Use bcond_with and bcond_without to enable/disable build options
  instead of hard-coding them.
- Put buildrequires as requires in -devel packages to avoid linker errors
  when building packages against the -devel packages.
- Add ffi support (disabled by default).
- Add oprofile support (disabled by default).
- Add valgrind support (disabled by default).
- Link cmake files to the normal cmake file directory to allow autodetection
  of cmake interfaces.
- Remove unused lldb components from main spec file.
- Split llvm python bindings into own subpackage.
- Split emacs plugin into own subpackage
- Move additional vim plugins into vim plugins package
- Split libc++, libLTO, LLVMgold, libomp, clang-chekers into own subpackages
- Make python-clang, llvm-vim-plugins, and llvm-emacs-plugins noarch since
  they aren't architecture-specific.
- Make packages besides llvm, llvm-clang, and the shared libraries conflict
  with other versions.  This will be important when multiple LLVM versions
  are supported.
- Various spec file cleanups
- Rebase patches:
  * arm_suse_support.diff
  * assume-opensuse.patch
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * glibc-2.23-libcxx.patch
  * glibc-2.24-libcxx.patch
  * lldb-add-pthread-dl-libs.patch
  * lldb-cmake.patch
  * llvm-fix-find-gcc5-install.patch
  * llvm-nonvoid-return.patch
  * llvm-remove-clang-only-flags.patch
  * revert-cmake-soname.patch
  * set-revision.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Sort a bit with spec-cleaner
- Remove the latest switch for now, things should be either coinstallable
  or not, we don't need to bother around with compilation like this</changelog>
  <changelog author="toddrme2178@gmail.com" date="1473422400">- Split out llvm and lldb into a version-specific package.
- Turn this package into a wrapper around the version-specific
  packages.
- Remove patches:
  * default-to-i586.patch
  * assume-opensuse.patch
  * glibc-2.23-libcxx.patch
  * arm_suse_support.diff
  * llvm-remove-clang-only-flags.patch
  * clang-resourcedirs.patch
  * lldb-add-pthread-dl-libs.patch
  * llvm-nonvoid-return.patch
  * glibc-2.24-libcxx.patch
  * revert-cmake-soname.patch
  * set-revision.patch
  * lldb-cmake.patch
  * D15067.id41365.diff
  * llvm-fix-find-gcc5-install.patch</changelog>
  <changelog author="idonmez@suse.com" date="1475668800">- BuildIgnore emacs and vim to avoid cycles.</changelog>
  <changelog author="idonmez@suse.com" date="1475755200">- Remove unneeded emacs-nox dependency.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475841600">- Improve README.packaging.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1480680000">- Update to version 3.9.0
  * See:
    + http://llvm.org/releases/3.9.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  * Fix the following patches:
    + arm_suse_support.diff
    + assume-opensuse.patch
    + clang-resourcedirs.patch
    + default-to-i586.patch
    + glibc-2.23-libcxx.patch
    + glibc-2.24-libcxx.patch
    + lldb-add-pthread-dl-libs.patch
    + lldb-cmake.patch
    + llvm-fix-find-gcc5-install.patch
    + llvm-remove-clang-only-flags.patch
    + revert-cmake-soname.patch
    + set-revision.patch
  * Remove upstream-included patch:
    + llvm-nonvoid-return.patch
  * Remove patch for removed files:
    + glibc-2.23-libcxx.patch
- Backport upstream patches:
  * clang-fix-substitutions-abi_tag.patch
  * clang-incomplete-field-types.patch
  * llvm-install-CheckAtomic.patch
- Add clang%{_sonum}-include-fixer subpackage and associated
  libfindAllSymbols%{_sonum} and libfindAllSymbols%{_sonum}-devel
  subpackages.
- Add sanstats to llvm binary list.</changelog>
  <changelog author="idonmez@suse.com" date="1482321600">- Update to version 3.9.1
  * See:
    + http://llvm.org/releases/3.9.1/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1490788800">- Update to version 4.0.0
  * See:
    + http://llvm.org/releases/4.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1498564800">- Update to version 4.0.1
  * Minor bugfixes</changelog>
  <changelog author="msrb@suse.com" date="1507550400">- Add clang-devel-static package.
  * Requires clang4-devel-static that was added to llvm4 package.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Update to version 5.0.0
  * See:
    + http://llvm.org/releases/5.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="msrb@suse.com" date="1513166401">- Rename python-lldb to python3-lldb to match the renamed package
  in llvm4 and llvm5 after switch to python3. Fix its dependency.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Add lld package.
  * LLD is new since llvm5.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Update to version 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Add missing %files for lld.</changelog>
  <changelog author="msrb@suse.com" date="1516795200">- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1531915200">- Add ExcludeArch mirroring the ones in llvm5. (bnc#1101598)</changelog>
</package>
<package pkgid="e428fd481c41006321522e52b7ac1cc0e7ae73f89bc4d442d38c44a48a1a9d93" name="lldb5" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="677f35873a01b43c30e72d37e902a452c917cc8e5e442d14c169258c05d3d62b" name="lldb5-devel" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="eb7edcd63c84601e1ffa67732d90592b1993df80beaa94240ce17c5b473c57c9" name="llvm" arch="src">
  <version epoch="0" ver="5.0.1" rel="lp150.4.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1469707200">- for ppc64le set memory to 4GB in _constraints file
  (failure in Factory:PowerPC)</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Start conversion to use cmake macros with now introduced
  compatibility for ninja
- Reduce number of threads if we don't have enough memory
- Add patch for the nonvoid returns:
  * llvm-nonvoid-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1472644800">- Update to llvm 3.8.1
  * See http://llvm.org/releases/3.8.1/docs/ReleaseNotes.html and
    http://llvm.org/releases/3.8.1/tools/docs/ReleaseNotes.html
- Use versioned libLLVM (to libLLVM3_8) and libclang (to libclang3_8)
- Change versioning of liblldb3_8 to liblldb-3_8 and use a variable
  to control the name instead of hard-coding it.
- Use bcond_with and bcond_without to enable/disable build options
  instead of hard-coding them.
- Put buildrequires as requires in -devel packages to avoid linker errors
  when building packages against the -devel packages.
- Add ffi support (disabled by default).
- Add oprofile support (disabled by default).
- Add valgrind support (disabled by default).
- Link cmake files to the normal cmake file directory to allow autodetection
  of cmake interfaces.
- Remove unused lldb components from main spec file.
- Split llvm python bindings into own subpackage.
- Split emacs plugin into own subpackage
- Move additional vim plugins into vim plugins package
- Split libc++, libLTO, LLVMgold, libomp, clang-chekers into own subpackages
- Make python-clang, llvm-vim-plugins, and llvm-emacs-plugins noarch since
  they aren't architecture-specific.
- Make packages besides llvm, llvm-clang, and the shared libraries conflict
  with other versions.  This will be important when multiple LLVM versions
  are supported.
- Various spec file cleanups
- Rebase patches:
  * arm_suse_support.diff
  * assume-opensuse.patch
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * glibc-2.23-libcxx.patch
  * glibc-2.24-libcxx.patch
  * lldb-add-pthread-dl-libs.patch
  * lldb-cmake.patch
  * llvm-fix-find-gcc5-install.patch
  * llvm-nonvoid-return.patch
  * llvm-remove-clang-only-flags.patch
  * revert-cmake-soname.patch
  * set-revision.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Sort a bit with spec-cleaner
- Remove the latest switch for now, things should be either coinstallable
  or not, we don't need to bother around with compilation like this</changelog>
  <changelog author="toddrme2178@gmail.com" date="1473422400">- Split out llvm and lldb into a version-specific package.
- Turn this package into a wrapper around the version-specific
  packages.
- Remove patches:
  * default-to-i586.patch
  * assume-opensuse.patch
  * glibc-2.23-libcxx.patch
  * arm_suse_support.diff
  * llvm-remove-clang-only-flags.patch
  * clang-resourcedirs.patch
  * lldb-add-pthread-dl-libs.patch
  * llvm-nonvoid-return.patch
  * glibc-2.24-libcxx.patch
  * revert-cmake-soname.patch
  * set-revision.patch
  * lldb-cmake.patch
  * D15067.id41365.diff
  * llvm-fix-find-gcc5-install.patch</changelog>
  <changelog author="idonmez@suse.com" date="1475668800">- BuildIgnore emacs and vim to avoid cycles.</changelog>
  <changelog author="idonmez@suse.com" date="1475755200">- Remove unneeded emacs-nox dependency.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475841600">- Improve README.packaging.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1480680000">- Update to version 3.9.0
  * See:
    + http://llvm.org/releases/3.9.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  * Fix the following patches:
    + arm_suse_support.diff
    + assume-opensuse.patch
    + clang-resourcedirs.patch
    + default-to-i586.patch
    + glibc-2.23-libcxx.patch
    + glibc-2.24-libcxx.patch
    + lldb-add-pthread-dl-libs.patch
    + lldb-cmake.patch
    + llvm-fix-find-gcc5-install.patch
    + llvm-remove-clang-only-flags.patch
    + revert-cmake-soname.patch
    + set-revision.patch
  * Remove upstream-included patch:
    + llvm-nonvoid-return.patch
  * Remove patch for removed files:
    + glibc-2.23-libcxx.patch
- Backport upstream patches:
  * clang-fix-substitutions-abi_tag.patch
  * clang-incomplete-field-types.patch
  * llvm-install-CheckAtomic.patch
- Add clang%{_sonum}-include-fixer subpackage and associated
  libfindAllSymbols%{_sonum} and libfindAllSymbols%{_sonum}-devel
  subpackages.
- Add sanstats to llvm binary list.</changelog>
  <changelog author="idonmez@suse.com" date="1482321600">- Update to version 3.9.1
  * See:
    + http://llvm.org/releases/3.9.1/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1490788800">- Update to version 4.0.0
  * See:
    + http://llvm.org/releases/4.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1498564800">- Update to version 4.0.1
  * Minor bugfixes</changelog>
  <changelog author="msrb@suse.com" date="1507550400">- Add clang-devel-static package.
  * Requires clang4-devel-static that was added to llvm4 package.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Update to version 5.0.0
  * See:
    + http://llvm.org/releases/5.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="msrb@suse.com" date="1513166401">- Rename python-lldb to python3-lldb to match the renamed package
  in llvm4 and llvm5 after switch to python3. Fix its dependency.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Add lld package.
  * LLD is new since llvm5.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Update to version 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Add missing %files for lld.</changelog>
  <changelog author="msrb@suse.com" date="1516795200">- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1531915200">- Add ExcludeArch mirroring the ones in llvm5. (bnc#1101598)</changelog>
</package>
<package pkgid="ed9a285a8b62fb95ff6f73afe6d9d61b72d3c842b3c7bd1c3ab6fa0badfe6348" name="llvm" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.4.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1469707200">- for ppc64le set memory to 4GB in _constraints file
  (failure in Factory:PowerPC)</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Start conversion to use cmake macros with now introduced
  compatibility for ninja
- Reduce number of threads if we don't have enough memory
- Add patch for the nonvoid returns:
  * llvm-nonvoid-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1472644800">- Update to llvm 3.8.1
  * See http://llvm.org/releases/3.8.1/docs/ReleaseNotes.html and
    http://llvm.org/releases/3.8.1/tools/docs/ReleaseNotes.html
- Use versioned libLLVM (to libLLVM3_8) and libclang (to libclang3_8)
- Change versioning of liblldb3_8 to liblldb-3_8 and use a variable
  to control the name instead of hard-coding it.
- Use bcond_with and bcond_without to enable/disable build options
  instead of hard-coding them.
- Put buildrequires as requires in -devel packages to avoid linker errors
  when building packages against the -devel packages.
- Add ffi support (disabled by default).
- Add oprofile support (disabled by default).
- Add valgrind support (disabled by default).
- Link cmake files to the normal cmake file directory to allow autodetection
  of cmake interfaces.
- Remove unused lldb components from main spec file.
- Split llvm python bindings into own subpackage.
- Split emacs plugin into own subpackage
- Move additional vim plugins into vim plugins package
- Split libc++, libLTO, LLVMgold, libomp, clang-chekers into own subpackages
- Make python-clang, llvm-vim-plugins, and llvm-emacs-plugins noarch since
  they aren't architecture-specific.
- Make packages besides llvm, llvm-clang, and the shared libraries conflict
  with other versions.  This will be important when multiple LLVM versions
  are supported.
- Various spec file cleanups
- Rebase patches:
  * arm_suse_support.diff
  * assume-opensuse.patch
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * glibc-2.23-libcxx.patch
  * glibc-2.24-libcxx.patch
  * lldb-add-pthread-dl-libs.patch
  * lldb-cmake.patch
  * llvm-fix-find-gcc5-install.patch
  * llvm-nonvoid-return.patch
  * llvm-remove-clang-only-flags.patch
  * revert-cmake-soname.patch
  * set-revision.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Sort a bit with spec-cleaner
- Remove the latest switch for now, things should be either coinstallable
  or not, we don't need to bother around with compilation like this</changelog>
  <changelog author="toddrme2178@gmail.com" date="1473422400">- Split out llvm and lldb into a version-specific package.
- Turn this package into a wrapper around the version-specific
  packages.
- Remove patches:
  * default-to-i586.patch
  * assume-opensuse.patch
  * glibc-2.23-libcxx.patch
  * arm_suse_support.diff
  * llvm-remove-clang-only-flags.patch
  * clang-resourcedirs.patch
  * lldb-add-pthread-dl-libs.patch
  * llvm-nonvoid-return.patch
  * glibc-2.24-libcxx.patch
  * revert-cmake-soname.patch
  * set-revision.patch
  * lldb-cmake.patch
  * D15067.id41365.diff
  * llvm-fix-find-gcc5-install.patch</changelog>
  <changelog author="idonmez@suse.com" date="1475668800">- BuildIgnore emacs and vim to avoid cycles.</changelog>
  <changelog author="idonmez@suse.com" date="1475755200">- Remove unneeded emacs-nox dependency.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475841600">- Improve README.packaging.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1480680000">- Update to version 3.9.0
  * See:
    + http://llvm.org/releases/3.9.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  * Fix the following patches:
    + arm_suse_support.diff
    + assume-opensuse.patch
    + clang-resourcedirs.patch
    + default-to-i586.patch
    + glibc-2.23-libcxx.patch
    + glibc-2.24-libcxx.patch
    + lldb-add-pthread-dl-libs.patch
    + lldb-cmake.patch
    + llvm-fix-find-gcc5-install.patch
    + llvm-remove-clang-only-flags.patch
    + revert-cmake-soname.patch
    + set-revision.patch
  * Remove upstream-included patch:
    + llvm-nonvoid-return.patch
  * Remove patch for removed files:
    + glibc-2.23-libcxx.patch
- Backport upstream patches:
  * clang-fix-substitutions-abi_tag.patch
  * clang-incomplete-field-types.patch
  * llvm-install-CheckAtomic.patch
- Add clang%{_sonum}-include-fixer subpackage and associated
  libfindAllSymbols%{_sonum} and libfindAllSymbols%{_sonum}-devel
  subpackages.
- Add sanstats to llvm binary list.</changelog>
  <changelog author="idonmez@suse.com" date="1482321600">- Update to version 3.9.1
  * See:
    + http://llvm.org/releases/3.9.1/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1490788800">- Update to version 4.0.0
  * See:
    + http://llvm.org/releases/4.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1498564800">- Update to version 4.0.1
  * Minor bugfixes</changelog>
  <changelog author="msrb@suse.com" date="1507550400">- Add clang-devel-static package.
  * Requires clang4-devel-static that was added to llvm4 package.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Update to version 5.0.0
  * See:
    + http://llvm.org/releases/5.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="msrb@suse.com" date="1513166401">- Rename python-lldb to python3-lldb to match the renamed package
  in llvm4 and llvm5 after switch to python3. Fix its dependency.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Add lld package.
  * LLD is new since llvm5.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Update to version 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Add missing %files for lld.</changelog>
  <changelog author="msrb@suse.com" date="1516795200">- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1531915200">- Add ExcludeArch mirroring the ones in llvm5. (bnc#1101598)</changelog>
</package>
<package pkgid="26d230f4ccb0ab56bd962191d3b1e009a7945acbe53cfd49a7620b40f86af24e" name="llvm-LTO-devel" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.4.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1469707200">- for ppc64le set memory to 4GB in _constraints file
  (failure in Factory:PowerPC)</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Start conversion to use cmake macros with now introduced
  compatibility for ninja
- Reduce number of threads if we don't have enough memory
- Add patch for the nonvoid returns:
  * llvm-nonvoid-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1472644800">- Update to llvm 3.8.1
  * See http://llvm.org/releases/3.8.1/docs/ReleaseNotes.html and
    http://llvm.org/releases/3.8.1/tools/docs/ReleaseNotes.html
- Use versioned libLLVM (to libLLVM3_8) and libclang (to libclang3_8)
- Change versioning of liblldb3_8 to liblldb-3_8 and use a variable
  to control the name instead of hard-coding it.
- Use bcond_with and bcond_without to enable/disable build options
  instead of hard-coding them.
- Put buildrequires as requires in -devel packages to avoid linker errors
  when building packages against the -devel packages.
- Add ffi support (disabled by default).
- Add oprofile support (disabled by default).
- Add valgrind support (disabled by default).
- Link cmake files to the normal cmake file directory to allow autodetection
  of cmake interfaces.
- Remove unused lldb components from main spec file.
- Split llvm python bindings into own subpackage.
- Split emacs plugin into own subpackage
- Move additional vim plugins into vim plugins package
- Split libc++, libLTO, LLVMgold, libomp, clang-chekers into own subpackages
- Make python-clang, llvm-vim-plugins, and llvm-emacs-plugins noarch since
  they aren't architecture-specific.
- Make packages besides llvm, llvm-clang, and the shared libraries conflict
  with other versions.  This will be important when multiple LLVM versions
  are supported.
- Various spec file cleanups
- Rebase patches:
  * arm_suse_support.diff
  * assume-opensuse.patch
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * glibc-2.23-libcxx.patch
  * glibc-2.24-libcxx.patch
  * lldb-add-pthread-dl-libs.patch
  * lldb-cmake.patch
  * llvm-fix-find-gcc5-install.patch
  * llvm-nonvoid-return.patch
  * llvm-remove-clang-only-flags.patch
  * revert-cmake-soname.patch
  * set-revision.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Sort a bit with spec-cleaner
- Remove the latest switch for now, things should be either coinstallable
  or not, we don't need to bother around with compilation like this</changelog>
  <changelog author="toddrme2178@gmail.com" date="1473422400">- Split out llvm and lldb into a version-specific package.
- Turn this package into a wrapper around the version-specific
  packages.
- Remove patches:
  * default-to-i586.patch
  * assume-opensuse.patch
  * glibc-2.23-libcxx.patch
  * arm_suse_support.diff
  * llvm-remove-clang-only-flags.patch
  * clang-resourcedirs.patch
  * lldb-add-pthread-dl-libs.patch
  * llvm-nonvoid-return.patch
  * glibc-2.24-libcxx.patch
  * revert-cmake-soname.patch
  * set-revision.patch
  * lldb-cmake.patch
  * D15067.id41365.diff
  * llvm-fix-find-gcc5-install.patch</changelog>
  <changelog author="idonmez@suse.com" date="1475668800">- BuildIgnore emacs and vim to avoid cycles.</changelog>
  <changelog author="idonmez@suse.com" date="1475755200">- Remove unneeded emacs-nox dependency.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475841600">- Improve README.packaging.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1480680000">- Update to version 3.9.0
  * See:
    + http://llvm.org/releases/3.9.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  * Fix the following patches:
    + arm_suse_support.diff
    + assume-opensuse.patch
    + clang-resourcedirs.patch
    + default-to-i586.patch
    + glibc-2.23-libcxx.patch
    + glibc-2.24-libcxx.patch
    + lldb-add-pthread-dl-libs.patch
    + lldb-cmake.patch
    + llvm-fix-find-gcc5-install.patch
    + llvm-remove-clang-only-flags.patch
    + revert-cmake-soname.patch
    + set-revision.patch
  * Remove upstream-included patch:
    + llvm-nonvoid-return.patch
  * Remove patch for removed files:
    + glibc-2.23-libcxx.patch
- Backport upstream patches:
  * clang-fix-substitutions-abi_tag.patch
  * clang-incomplete-field-types.patch
  * llvm-install-CheckAtomic.patch
- Add clang%{_sonum}-include-fixer subpackage and associated
  libfindAllSymbols%{_sonum} and libfindAllSymbols%{_sonum}-devel
  subpackages.
- Add sanstats to llvm binary list.</changelog>
  <changelog author="idonmez@suse.com" date="1482321600">- Update to version 3.9.1
  * See:
    + http://llvm.org/releases/3.9.1/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1490788800">- Update to version 4.0.0
  * See:
    + http://llvm.org/releases/4.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1498564800">- Update to version 4.0.1
  * Minor bugfixes</changelog>
  <changelog author="msrb@suse.com" date="1507550400">- Add clang-devel-static package.
  * Requires clang4-devel-static that was added to llvm4 package.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Update to version 5.0.0
  * See:
    + http://llvm.org/releases/5.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="msrb@suse.com" date="1513166401">- Rename python-lldb to python3-lldb to match the renamed package
  in llvm4 and llvm5 after switch to python3. Fix its dependency.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Add lld package.
  * LLD is new since llvm5.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Update to version 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Add missing %files for lld.</changelog>
  <changelog author="msrb@suse.com" date="1516795200">- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1531915200">- Add ExcludeArch mirroring the ones in llvm5. (bnc#1101598)</changelog>
</package>
<package pkgid="96729f163ab834a70ec54984bb394bfef69a2e7267e63917ffaea79a520bbe17" name="llvm-devel" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.4.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1469707200">- for ppc64le set memory to 4GB in _constraints file
  (failure in Factory:PowerPC)</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Start conversion to use cmake macros with now introduced
  compatibility for ninja
- Reduce number of threads if we don't have enough memory
- Add patch for the nonvoid returns:
  * llvm-nonvoid-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1472644800">- Update to llvm 3.8.1
  * See http://llvm.org/releases/3.8.1/docs/ReleaseNotes.html and
    http://llvm.org/releases/3.8.1/tools/docs/ReleaseNotes.html
- Use versioned libLLVM (to libLLVM3_8) and libclang (to libclang3_8)
- Change versioning of liblldb3_8 to liblldb-3_8 and use a variable
  to control the name instead of hard-coding it.
- Use bcond_with and bcond_without to enable/disable build options
  instead of hard-coding them.
- Put buildrequires as requires in -devel packages to avoid linker errors
  when building packages against the -devel packages.
- Add ffi support (disabled by default).
- Add oprofile support (disabled by default).
- Add valgrind support (disabled by default).
- Link cmake files to the normal cmake file directory to allow autodetection
  of cmake interfaces.
- Remove unused lldb components from main spec file.
- Split llvm python bindings into own subpackage.
- Split emacs plugin into own subpackage
- Move additional vim plugins into vim plugins package
- Split libc++, libLTO, LLVMgold, libomp, clang-chekers into own subpackages
- Make python-clang, llvm-vim-plugins, and llvm-emacs-plugins noarch since
  they aren't architecture-specific.
- Make packages besides llvm, llvm-clang, and the shared libraries conflict
  with other versions.  This will be important when multiple LLVM versions
  are supported.
- Various spec file cleanups
- Rebase patches:
  * arm_suse_support.diff
  * assume-opensuse.patch
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * glibc-2.23-libcxx.patch
  * glibc-2.24-libcxx.patch
  * lldb-add-pthread-dl-libs.patch
  * lldb-cmake.patch
  * llvm-fix-find-gcc5-install.patch
  * llvm-nonvoid-return.patch
  * llvm-remove-clang-only-flags.patch
  * revert-cmake-soname.patch
  * set-revision.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Sort a bit with spec-cleaner
- Remove the latest switch for now, things should be either coinstallable
  or not, we don't need to bother around with compilation like this</changelog>
  <changelog author="toddrme2178@gmail.com" date="1473422400">- Split out llvm and lldb into a version-specific package.
- Turn this package into a wrapper around the version-specific
  packages.
- Remove patches:
  * default-to-i586.patch
  * assume-opensuse.patch
  * glibc-2.23-libcxx.patch
  * arm_suse_support.diff
  * llvm-remove-clang-only-flags.patch
  * clang-resourcedirs.patch
  * lldb-add-pthread-dl-libs.patch
  * llvm-nonvoid-return.patch
  * glibc-2.24-libcxx.patch
  * revert-cmake-soname.patch
  * set-revision.patch
  * lldb-cmake.patch
  * D15067.id41365.diff
  * llvm-fix-find-gcc5-install.patch</changelog>
  <changelog author="idonmez@suse.com" date="1475668800">- BuildIgnore emacs and vim to avoid cycles.</changelog>
  <changelog author="idonmez@suse.com" date="1475755200">- Remove unneeded emacs-nox dependency.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475841600">- Improve README.packaging.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1480680000">- Update to version 3.9.0
  * See:
    + http://llvm.org/releases/3.9.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  * Fix the following patches:
    + arm_suse_support.diff
    + assume-opensuse.patch
    + clang-resourcedirs.patch
    + default-to-i586.patch
    + glibc-2.23-libcxx.patch
    + glibc-2.24-libcxx.patch
    + lldb-add-pthread-dl-libs.patch
    + lldb-cmake.patch
    + llvm-fix-find-gcc5-install.patch
    + llvm-remove-clang-only-flags.patch
    + revert-cmake-soname.patch
    + set-revision.patch
  * Remove upstream-included patch:
    + llvm-nonvoid-return.patch
  * Remove patch for removed files:
    + glibc-2.23-libcxx.patch
- Backport upstream patches:
  * clang-fix-substitutions-abi_tag.patch
  * clang-incomplete-field-types.patch
  * llvm-install-CheckAtomic.patch
- Add clang%{_sonum}-include-fixer subpackage and associated
  libfindAllSymbols%{_sonum} and libfindAllSymbols%{_sonum}-devel
  subpackages.
- Add sanstats to llvm binary list.</changelog>
  <changelog author="idonmez@suse.com" date="1482321600">- Update to version 3.9.1
  * See:
    + http://llvm.org/releases/3.9.1/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1490788800">- Update to version 4.0.0
  * See:
    + http://llvm.org/releases/4.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1498564800">- Update to version 4.0.1
  * Minor bugfixes</changelog>
  <changelog author="msrb@suse.com" date="1507550400">- Add clang-devel-static package.
  * Requires clang4-devel-static that was added to llvm4 package.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Update to version 5.0.0
  * See:
    + http://llvm.org/releases/5.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="msrb@suse.com" date="1513166401">- Rename python-lldb to python3-lldb to match the renamed package
  in llvm4 and llvm5 after switch to python3. Fix its dependency.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Add lld package.
  * LLD is new since llvm5.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Update to version 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Add missing %files for lld.</changelog>
  <changelog author="msrb@suse.com" date="1516795200">- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1531915200">- Add ExcludeArch mirroring the ones in llvm5. (bnc#1101598)</changelog>
</package>
<package pkgid="de5bdee24aa1e4402065679d3b112e95b1878bc93835ed5689434d6a900a079d" name="llvm-emacs-plugins" arch="noarch">
  <version epoch="0" ver="5.0.1" rel="lp150.4.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1469707200">- for ppc64le set memory to 4GB in _constraints file
  (failure in Factory:PowerPC)</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Start conversion to use cmake macros with now introduced
  compatibility for ninja
- Reduce number of threads if we don't have enough memory
- Add patch for the nonvoid returns:
  * llvm-nonvoid-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1472644800">- Update to llvm 3.8.1
  * See http://llvm.org/releases/3.8.1/docs/ReleaseNotes.html and
    http://llvm.org/releases/3.8.1/tools/docs/ReleaseNotes.html
- Use versioned libLLVM (to libLLVM3_8) and libclang (to libclang3_8)
- Change versioning of liblldb3_8 to liblldb-3_8 and use a variable
  to control the name instead of hard-coding it.
- Use bcond_with and bcond_without to enable/disable build options
  instead of hard-coding them.
- Put buildrequires as requires in -devel packages to avoid linker errors
  when building packages against the -devel packages.
- Add ffi support (disabled by default).
- Add oprofile support (disabled by default).
- Add valgrind support (disabled by default).
- Link cmake files to the normal cmake file directory to allow autodetection
  of cmake interfaces.
- Remove unused lldb components from main spec file.
- Split llvm python bindings into own subpackage.
- Split emacs plugin into own subpackage
- Move additional vim plugins into vim plugins package
- Split libc++, libLTO, LLVMgold, libomp, clang-chekers into own subpackages
- Make python-clang, llvm-vim-plugins, and llvm-emacs-plugins noarch since
  they aren't architecture-specific.
- Make packages besides llvm, llvm-clang, and the shared libraries conflict
  with other versions.  This will be important when multiple LLVM versions
  are supported.
- Various spec file cleanups
- Rebase patches:
  * arm_suse_support.diff
  * assume-opensuse.patch
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * glibc-2.23-libcxx.patch
  * glibc-2.24-libcxx.patch
  * lldb-add-pthread-dl-libs.patch
  * lldb-cmake.patch
  * llvm-fix-find-gcc5-install.patch
  * llvm-nonvoid-return.patch
  * llvm-remove-clang-only-flags.patch
  * revert-cmake-soname.patch
  * set-revision.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Sort a bit with spec-cleaner
- Remove the latest switch for now, things should be either coinstallable
  or not, we don't need to bother around with compilation like this</changelog>
  <changelog author="toddrme2178@gmail.com" date="1473422400">- Split out llvm and lldb into a version-specific package.
- Turn this package into a wrapper around the version-specific
  packages.
- Remove patches:
  * default-to-i586.patch
  * assume-opensuse.patch
  * glibc-2.23-libcxx.patch
  * arm_suse_support.diff
  * llvm-remove-clang-only-flags.patch
  * clang-resourcedirs.patch
  * lldb-add-pthread-dl-libs.patch
  * llvm-nonvoid-return.patch
  * glibc-2.24-libcxx.patch
  * revert-cmake-soname.patch
  * set-revision.patch
  * lldb-cmake.patch
  * D15067.id41365.diff
  * llvm-fix-find-gcc5-install.patch</changelog>
  <changelog author="idonmez@suse.com" date="1475668800">- BuildIgnore emacs and vim to avoid cycles.</changelog>
  <changelog author="idonmez@suse.com" date="1475755200">- Remove unneeded emacs-nox dependency.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475841600">- Improve README.packaging.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1480680000">- Update to version 3.9.0
  * See:
    + http://llvm.org/releases/3.9.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  * Fix the following patches:
    + arm_suse_support.diff
    + assume-opensuse.patch
    + clang-resourcedirs.patch
    + default-to-i586.patch
    + glibc-2.23-libcxx.patch
    + glibc-2.24-libcxx.patch
    + lldb-add-pthread-dl-libs.patch
    + lldb-cmake.patch
    + llvm-fix-find-gcc5-install.patch
    + llvm-remove-clang-only-flags.patch
    + revert-cmake-soname.patch
    + set-revision.patch
  * Remove upstream-included patch:
    + llvm-nonvoid-return.patch
  * Remove patch for removed files:
    + glibc-2.23-libcxx.patch
- Backport upstream patches:
  * clang-fix-substitutions-abi_tag.patch
  * clang-incomplete-field-types.patch
  * llvm-install-CheckAtomic.patch
- Add clang%{_sonum}-include-fixer subpackage and associated
  libfindAllSymbols%{_sonum} and libfindAllSymbols%{_sonum}-devel
  subpackages.
- Add sanstats to llvm binary list.</changelog>
  <changelog author="idonmez@suse.com" date="1482321600">- Update to version 3.9.1
  * See:
    + http://llvm.org/releases/3.9.1/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1490788800">- Update to version 4.0.0
  * See:
    + http://llvm.org/releases/4.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1498564800">- Update to version 4.0.1
  * Minor bugfixes</changelog>
  <changelog author="msrb@suse.com" date="1507550400">- Add clang-devel-static package.
  * Requires clang4-devel-static that was added to llvm4 package.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Update to version 5.0.0
  * See:
    + http://llvm.org/releases/5.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="msrb@suse.com" date="1513166401">- Rename python-lldb to python3-lldb to match the renamed package
  in llvm4 and llvm5 after switch to python3. Fix its dependency.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Add lld package.
  * LLD is new since llvm5.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Update to version 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Add missing %files for lld.</changelog>
  <changelog author="msrb@suse.com" date="1516795200">- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1531915200">- Add ExcludeArch mirroring the ones in llvm5. (bnc#1101598)</changelog>
</package>
<package pkgid="a57101d9a69af3185a60107d7ef2a5d23b2d9a0e266c6f73f4ec04cae78cd64b" name="llvm-gold" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.4.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1469707200">- for ppc64le set memory to 4GB in _constraints file
  (failure in Factory:PowerPC)</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Start conversion to use cmake macros with now introduced
  compatibility for ninja
- Reduce number of threads if we don't have enough memory
- Add patch for the nonvoid returns:
  * llvm-nonvoid-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1472644800">- Update to llvm 3.8.1
  * See http://llvm.org/releases/3.8.1/docs/ReleaseNotes.html and
    http://llvm.org/releases/3.8.1/tools/docs/ReleaseNotes.html
- Use versioned libLLVM (to libLLVM3_8) and libclang (to libclang3_8)
- Change versioning of liblldb3_8 to liblldb-3_8 and use a variable
  to control the name instead of hard-coding it.
- Use bcond_with and bcond_without to enable/disable build options
  instead of hard-coding them.
- Put buildrequires as requires in -devel packages to avoid linker errors
  when building packages against the -devel packages.
- Add ffi support (disabled by default).
- Add oprofile support (disabled by default).
- Add valgrind support (disabled by default).
- Link cmake files to the normal cmake file directory to allow autodetection
  of cmake interfaces.
- Remove unused lldb components from main spec file.
- Split llvm python bindings into own subpackage.
- Split emacs plugin into own subpackage
- Move additional vim plugins into vim plugins package
- Split libc++, libLTO, LLVMgold, libomp, clang-chekers into own subpackages
- Make python-clang, llvm-vim-plugins, and llvm-emacs-plugins noarch since
  they aren't architecture-specific.
- Make packages besides llvm, llvm-clang, and the shared libraries conflict
  with other versions.  This will be important when multiple LLVM versions
  are supported.
- Various spec file cleanups
- Rebase patches:
  * arm_suse_support.diff
  * assume-opensuse.patch
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * glibc-2.23-libcxx.patch
  * glibc-2.24-libcxx.patch
  * lldb-add-pthread-dl-libs.patch
  * lldb-cmake.patch
  * llvm-fix-find-gcc5-install.patch
  * llvm-nonvoid-return.patch
  * llvm-remove-clang-only-flags.patch
  * revert-cmake-soname.patch
  * set-revision.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Sort a bit with spec-cleaner
- Remove the latest switch for now, things should be either coinstallable
  or not, we don't need to bother around with compilation like this</changelog>
  <changelog author="toddrme2178@gmail.com" date="1473422400">- Split out llvm and lldb into a version-specific package.
- Turn this package into a wrapper around the version-specific
  packages.
- Remove patches:
  * default-to-i586.patch
  * assume-opensuse.patch
  * glibc-2.23-libcxx.patch
  * arm_suse_support.diff
  * llvm-remove-clang-only-flags.patch
  * clang-resourcedirs.patch
  * lldb-add-pthread-dl-libs.patch
  * llvm-nonvoid-return.patch
  * glibc-2.24-libcxx.patch
  * revert-cmake-soname.patch
  * set-revision.patch
  * lldb-cmake.patch
  * D15067.id41365.diff
  * llvm-fix-find-gcc5-install.patch</changelog>
  <changelog author="idonmez@suse.com" date="1475668800">- BuildIgnore emacs and vim to avoid cycles.</changelog>
  <changelog author="idonmez@suse.com" date="1475755200">- Remove unneeded emacs-nox dependency.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475841600">- Improve README.packaging.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1480680000">- Update to version 3.9.0
  * See:
    + http://llvm.org/releases/3.9.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  * Fix the following patches:
    + arm_suse_support.diff
    + assume-opensuse.patch
    + clang-resourcedirs.patch
    + default-to-i586.patch
    + glibc-2.23-libcxx.patch
    + glibc-2.24-libcxx.patch
    + lldb-add-pthread-dl-libs.patch
    + lldb-cmake.patch
    + llvm-fix-find-gcc5-install.patch
    + llvm-remove-clang-only-flags.patch
    + revert-cmake-soname.patch
    + set-revision.patch
  * Remove upstream-included patch:
    + llvm-nonvoid-return.patch
  * Remove patch for removed files:
    + glibc-2.23-libcxx.patch
- Backport upstream patches:
  * clang-fix-substitutions-abi_tag.patch
  * clang-incomplete-field-types.patch
  * llvm-install-CheckAtomic.patch
- Add clang%{_sonum}-include-fixer subpackage and associated
  libfindAllSymbols%{_sonum} and libfindAllSymbols%{_sonum}-devel
  subpackages.
- Add sanstats to llvm binary list.</changelog>
  <changelog author="idonmez@suse.com" date="1482321600">- Update to version 3.9.1
  * See:
    + http://llvm.org/releases/3.9.1/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1490788800">- Update to version 4.0.0
  * See:
    + http://llvm.org/releases/4.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1498564800">- Update to version 4.0.1
  * Minor bugfixes</changelog>
  <changelog author="msrb@suse.com" date="1507550400">- Add clang-devel-static package.
  * Requires clang4-devel-static that was added to llvm4 package.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Update to version 5.0.0
  * See:
    + http://llvm.org/releases/5.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="msrb@suse.com" date="1513166401">- Rename python-lldb to python3-lldb to match the renamed package
  in llvm4 and llvm5 after switch to python3. Fix its dependency.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Add lld package.
  * LLD is new since llvm5.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Update to version 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Add missing %files for lld.</changelog>
  <changelog author="msrb@suse.com" date="1516795200">- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1531915200">- Add ExcludeArch mirroring the ones in llvm5. (bnc#1101598)</changelog>
</package>
<package pkgid="e69701664fa0adc2d969ef0d212f8b1b8d76f1d549165f93b30a8a6bc956c64b" name="llvm-vim-plugins" arch="noarch">
  <version epoch="0" ver="5.0.1" rel="lp150.4.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1469707200">- for ppc64le set memory to 4GB in _constraints file
  (failure in Factory:PowerPC)</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Start conversion to use cmake macros with now introduced
  compatibility for ninja
- Reduce number of threads if we don't have enough memory
- Add patch for the nonvoid returns:
  * llvm-nonvoid-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1472644800">- Update to llvm 3.8.1
  * See http://llvm.org/releases/3.8.1/docs/ReleaseNotes.html and
    http://llvm.org/releases/3.8.1/tools/docs/ReleaseNotes.html
- Use versioned libLLVM (to libLLVM3_8) and libclang (to libclang3_8)
- Change versioning of liblldb3_8 to liblldb-3_8 and use a variable
  to control the name instead of hard-coding it.
- Use bcond_with and bcond_without to enable/disable build options
  instead of hard-coding them.
- Put buildrequires as requires in -devel packages to avoid linker errors
  when building packages against the -devel packages.
- Add ffi support (disabled by default).
- Add oprofile support (disabled by default).
- Add valgrind support (disabled by default).
- Link cmake files to the normal cmake file directory to allow autodetection
  of cmake interfaces.
- Remove unused lldb components from main spec file.
- Split llvm python bindings into own subpackage.
- Split emacs plugin into own subpackage
- Move additional vim plugins into vim plugins package
- Split libc++, libLTO, LLVMgold, libomp, clang-chekers into own subpackages
- Make python-clang, llvm-vim-plugins, and llvm-emacs-plugins noarch since
  they aren't architecture-specific.
- Make packages besides llvm, llvm-clang, and the shared libraries conflict
  with other versions.  This will be important when multiple LLVM versions
  are supported.
- Various spec file cleanups
- Rebase patches:
  * arm_suse_support.diff
  * assume-opensuse.patch
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * glibc-2.23-libcxx.patch
  * glibc-2.24-libcxx.patch
  * lldb-add-pthread-dl-libs.patch
  * lldb-cmake.patch
  * llvm-fix-find-gcc5-install.patch
  * llvm-nonvoid-return.patch
  * llvm-remove-clang-only-flags.patch
  * revert-cmake-soname.patch
  * set-revision.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Sort a bit with spec-cleaner
- Remove the latest switch for now, things should be either coinstallable
  or not, we don't need to bother around with compilation like this</changelog>
  <changelog author="toddrme2178@gmail.com" date="1473422400">- Split out llvm and lldb into a version-specific package.
- Turn this package into a wrapper around the version-specific
  packages.
- Remove patches:
  * default-to-i586.patch
  * assume-opensuse.patch
  * glibc-2.23-libcxx.patch
  * arm_suse_support.diff
  * llvm-remove-clang-only-flags.patch
  * clang-resourcedirs.patch
  * lldb-add-pthread-dl-libs.patch
  * llvm-nonvoid-return.patch
  * glibc-2.24-libcxx.patch
  * revert-cmake-soname.patch
  * set-revision.patch
  * lldb-cmake.patch
  * D15067.id41365.diff
  * llvm-fix-find-gcc5-install.patch</changelog>
  <changelog author="idonmez@suse.com" date="1475668800">- BuildIgnore emacs and vim to avoid cycles.</changelog>
  <changelog author="idonmez@suse.com" date="1475755200">- Remove unneeded emacs-nox dependency.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475841600">- Improve README.packaging.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1480680000">- Update to version 3.9.0
  * See:
    + http://llvm.org/releases/3.9.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  * Fix the following patches:
    + arm_suse_support.diff
    + assume-opensuse.patch
    + clang-resourcedirs.patch
    + default-to-i586.patch
    + glibc-2.23-libcxx.patch
    + glibc-2.24-libcxx.patch
    + lldb-add-pthread-dl-libs.patch
    + lldb-cmake.patch
    + llvm-fix-find-gcc5-install.patch
    + llvm-remove-clang-only-flags.patch
    + revert-cmake-soname.patch
    + set-revision.patch
  * Remove upstream-included patch:
    + llvm-nonvoid-return.patch
  * Remove patch for removed files:
    + glibc-2.23-libcxx.patch
- Backport upstream patches:
  * clang-fix-substitutions-abi_tag.patch
  * clang-incomplete-field-types.patch
  * llvm-install-CheckAtomic.patch
- Add clang%{_sonum}-include-fixer subpackage and associated
  libfindAllSymbols%{_sonum} and libfindAllSymbols%{_sonum}-devel
  subpackages.
- Add sanstats to llvm binary list.</changelog>
  <changelog author="idonmez@suse.com" date="1482321600">- Update to version 3.9.1
  * See:
    + http://llvm.org/releases/3.9.1/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1490788800">- Update to version 4.0.0
  * See:
    + http://llvm.org/releases/4.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1498564800">- Update to version 4.0.1
  * Minor bugfixes</changelog>
  <changelog author="msrb@suse.com" date="1507550400">- Add clang-devel-static package.
  * Requires clang4-devel-static that was added to llvm4 package.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Update to version 5.0.0
  * See:
    + http://llvm.org/releases/5.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="msrb@suse.com" date="1513166401">- Rename python-lldb to python3-lldb to match the renamed package
  in llvm4 and llvm5 after switch to python3. Fix its dependency.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Add lld package.
  * LLD is new since llvm5.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Update to version 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Add missing %files for lld.</changelog>
  <changelog author="msrb@suse.com" date="1516795200">- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1531915200">- Add ExcludeArch mirroring the ones in llvm5. (bnc#1101598)</changelog>
</package>
<package pkgid="eed03e0bdde7963b9dd272c0f80d74296e2b3da141726c1dec71464021d77bbc" name="llvm5" arch="src">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="d52888d6b54a38e1a34c0de1246a980e5d1c6bcf05a9c5d81901cab04f0040ea" name="llvm5" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="47fba6b682d9bef8db44cb975cabd1d172ae3faff59ffb736f213aa02d21cd4e" name="llvm5-LTO-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="7f5ff282257cb2b7d166b130095f7f29e78fc454c5674daca70ab4535705a4e4" name="llvm5-LTO-devel" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="c0091475b71bca2bd98a9c3f61d0820639f1d6ee4452a351753586938a393fba" name="llvm5-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="620685118ad5932bed105bf4ec12526afeeba13d5ae43033ee20fb23cb435ba6" name="llvm5-devel" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="5726ccd1724d2b3da75d23252941f1a373eaa2a5078904b39fae093166d8b6ac" name="llvm5-emacs-plugins" arch="noarch">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="95ec576d7cb1f679b678a56e8abc7061b248bb8d09b993a7036e7825e33c730f" name="llvm5-gold" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="a297468618d9691cf92de8a2596c4522a9a9b8d9bd099cdd4d2b96cd9af5e97c" name="llvm5-opt-viewer" arch="noarch">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="44f96e3e5b3342985f1c76a8f2169a42da9bbdc00c7b586f81bd282078390219" name="llvm5-vim-plugins" arch="noarch">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="661c30cc59e847c5d1d952e3c267d7042d47a5a5dbeaac765dc764b17f62e065" name="logrotate" arch="src">
  <version epoch="0" ver="3.13.0" rel="lp150.3.3.1"/>
  <changelog author="sweet_f_a@gmx.de" date="1383825600">- update to 3.8.7, fix bnc#849436
- Changelog 3.8.7:
  * Fixed --force/-f option handling together with "size" directive
    (3.8.5 regression).
  * Use "logrotate_tmp_t" context for SELinux tests and if this
    context does not exist, skip SELinux related tests.
- Changelog 3.8.6
  * Fixed memory corruption caused by rotation directory which
    does not exist with "sharedscripts" together with "prerotate"
    script.</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1383825601">- enable acl support to preserve ACLs during rotation</changelog>
  <changelog author="vcizek@suse.com" date="1396353600">- return error when nomissingok is specified and the log path
  doesn't exist (bnc#871217)
  * added logrotate-fail_if_ENOENT_and_nomissingok.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1396440000">- Migrate from cron to systemd timer units, this is overall
  the most important package to migrate since it is one
  of the very few base components that hard-require cron.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1396526400">- BuildRequire systemd 197 or later.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1396526401">- Also, avoid logrotate unit activation when the system is
  on battery power.</changelog>
  <changelog author="vcizek@suse.com" date="1403784000">- temporarily remove the 'Persistent' option from logrotate.timer
  * our current systemd doesn't support it yet (bnc#884338)</changelog>
  <changelog author="p.drouand@gmail.com" date="1424433600">- Update to version 3.8.9
  * Add new directive "createolddir" and "nocreateolddir". These directives
    can be used to create the directory specified by olddir with particular
  "mode", "owner" and "group".
  * Continue with rotation even when first log from logset is removed
  during the rotation.
  * Fix crash on BSD systems introduced in 3.8.8 caused by different qsort_r
  function. Function qsort is now used instead.
  * Fix potential buffer overflow in usage of strncat function.
  * Fix compilation with musl-libc.
  * Add experimental 'renamecopy' directive to allow 'olddir' on different
    physical device. See the "man logrotate" for more information.
- Remove logrotate-fail_if_ENOENT_and_nomissingok.patch; merged on
  upstream release
- Updated patches
  * logrotate-3.7.8-addextension.patch &gt; logrotate-addextension.patch
  * logrotate-3.7.8-autoext.patch &gt; logrotate-autoext.patch
  * logrotate-3.7.8-conf.patch &gt; logrotate-conf.patch
  * logrotate-manpage_config_clarification.patch
- Remove redunant %clean section</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1432036800">- Enable Persistent timer since we are now in systemd 219.</changelog>
  <changelog author="kstreitova@suse.com" date="1434974400">- update to 3.9.1
  * 3.9.1
  - Fix off-by-one error which can lead to crash when copytruncate
    is used.
  * 3.9.0
  - Fix crash when using long dateformat. [nmerdan]
  - Add support for %H dateformat. [czchen]
  - Fix regression introduced in 3.8.9 when when rotating multiple
    logs when one of them is missing.
  - In the debug mode, do not skip the code-path which handles the
    case when the last rotation does not exist. [Sergey Vidishev]
  - Show more precise description when "log does not need rotating".
  - Add new -l option to log verbose output to file. The file is
    overwritten on every logrotate execution.
  - Allow rotation of sparse files with copytruncate.
  * update logrotate-addextension.patch
- use spec-cleaner
- remove unused PreReq tags</changelog>
  <changelog author="dimstar@opensuse.org" date="1475496000">- Add logrotate-fix-test62_with_bash-4.4.patch: Fix the test suite
  when running with bash 4.4 (gh#logrotate/logrotate#66).</changelog>
  <changelog author="tchvatal@suse.com" date="1475668800">- Version update to 3.10.0 fate#322037:
  * Update url to point to github
- Remove upstreamed patch:
  * logrotate-3.7.8-mess_err.patch
- Rebase patches:
  * logrotate-3.7.8-suse.patch
  * logrotate-addextension.patch
  * logrotate-autoext.patch
  * logrotate-fix-test62_with_bash-4.4.patch</changelog>
  <changelog author="kukuk@suse.de" date="1478952000">- Move logrotate.status to /var/lib/misc following FHS/LSB and
  making implementing read-only root filesystem much easier.
  [FATE#322036]
- Add patch:
  * logrotate-var-lib-misc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1479729600">- Fix post scriptlet condition bnc#1011120</changelog>
  <changelog author="tchvatal@suse.com" date="1482926400">- Version update to 3.11.0:
  * Merges from distribution patchsets and small fixes around
- Remove all patches merged upstream:
  * logrotate-addextension.patch
  * logrotate-autoext.patch
  * logrotate-conf.patch
  * logrotate-fix-test62_with_bash-4.4.patch
  * logrotate-manpage_config_clarification.patch
  * logrotate-var-lib-misc.patch
  * logrotate-3.7.8-suse.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Remove aaa_base compat setting that is from 2003, we do not
  support such migration anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1499428801">- Version update to 3.12.3:
  * Fixed accident removal of rotated files with dateext. (#118)
  * Line comments inside globs in config files are now skipped. (#109)
  * logrotate now recovers from a corrupted state file. (#45)
  * createolddir now creates old directory as unprivileged user. (#114)
  * weekly rotations are now predictable and configurable. (#93)
  * Errors in config files are no longer treated as fatal errors. (#81)
  * configure --with-default-mail-command specifies default mail command. (#100)
  * Fixed heap buffer overflow when parsing crafted config file. (#33)
  * build fixes related to -Werror (#119) and -Werror=format= (#108)
  * configure --enable-werror now controls use of the -Werror flag (#123)
  * copy and copytruncate directives now work together again
  * unlink() is no longer preceded by open() unless shred is enabled (#124)
  * compress and uncompress now take commands from $PATH, too (#122)
- By default disable werror while building</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1515153600">- Version update to 3.13.0:
  * make distribution tarballs report logrotate version properly
  * make (un)compress work even if stdin and/or stdout are closed (#154)
  * remove -s from DEFAULT_MAIL_COMMAND and improve its documenation (#152)
  * uncompress logs before mailing them even if delaycompress is enabled (#151)
  * handle unlink of a non-existing log file as a warning only (#144)
  * include compile-time options in the output of logrotate --version (#145)
  * make logrotate --version print to stdout instead of stderr (#145)
  * flush write buffers before syncing state file (#148)
  * specify (un)compress utility explicitly in tests (#137)
  * enable running tests in parallel (#132)
  * explicitly map root UID/GID to 0 on Cygwin (#133)
  * add .dpkg-bak and .dpkg-del to default tabooext list (#134)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1528372800">- Add "Environment=HOME=/root" to logrotate.service file in order
  to allow mariadb to rotate its logs when the database has a root
  password defined [bsc#1093617]
- Added patch:
  * logrotate-3.13.0-systemd_add_home_env.patch</changelog>
</package>
<package pkgid="1815d4e39aae826b018c29fa7213ed2d571170ce6b691d9aa4555a1bf80e30c4" name="logrotate" arch="x86_64">
  <version epoch="0" ver="3.13.0" rel="lp150.3.3.1"/>
  <changelog author="sweet_f_a@gmx.de" date="1383825600">- update to 3.8.7, fix bnc#849436
- Changelog 3.8.7:
  * Fixed --force/-f option handling together with "size" directive
    (3.8.5 regression).
  * Use "logrotate_tmp_t" context for SELinux tests and if this
    context does not exist, skip SELinux related tests.
- Changelog 3.8.6
  * Fixed memory corruption caused by rotation directory which
    does not exist with "sharedscripts" together with "prerotate"
    script.</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1383825601">- enable acl support to preserve ACLs during rotation</changelog>
  <changelog author="vcizek@suse.com" date="1396353600">- return error when nomissingok is specified and the log path
  doesn't exist (bnc#871217)
  * added logrotate-fail_if_ENOENT_and_nomissingok.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1396440000">- Migrate from cron to systemd timer units, this is overall
  the most important package to migrate since it is one
  of the very few base components that hard-require cron.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1396526400">- BuildRequire systemd 197 or later.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1396526401">- Also, avoid logrotate unit activation when the system is
  on battery power.</changelog>
  <changelog author="vcizek@suse.com" date="1403784000">- temporarily remove the 'Persistent' option from logrotate.timer
  * our current systemd doesn't support it yet (bnc#884338)</changelog>
  <changelog author="p.drouand@gmail.com" date="1424433600">- Update to version 3.8.9
  * Add new directive "createolddir" and "nocreateolddir". These directives
    can be used to create the directory specified by olddir with particular
  "mode", "owner" and "group".
  * Continue with rotation even when first log from logset is removed
  during the rotation.
  * Fix crash on BSD systems introduced in 3.8.8 caused by different qsort_r
  function. Function qsort is now used instead.
  * Fix potential buffer overflow in usage of strncat function.
  * Fix compilation with musl-libc.
  * Add experimental 'renamecopy' directive to allow 'olddir' on different
    physical device. See the "man logrotate" for more information.
- Remove logrotate-fail_if_ENOENT_and_nomissingok.patch; merged on
  upstream release
- Updated patches
  * logrotate-3.7.8-addextension.patch &gt; logrotate-addextension.patch
  * logrotate-3.7.8-autoext.patch &gt; logrotate-autoext.patch
  * logrotate-3.7.8-conf.patch &gt; logrotate-conf.patch
  * logrotate-manpage_config_clarification.patch
- Remove redunant %clean section</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1432036800">- Enable Persistent timer since we are now in systemd 219.</changelog>
  <changelog author="kstreitova@suse.com" date="1434974400">- update to 3.9.1
  * 3.9.1
  - Fix off-by-one error which can lead to crash when copytruncate
    is used.
  * 3.9.0
  - Fix crash when using long dateformat. [nmerdan]
  - Add support for %H dateformat. [czchen]
  - Fix regression introduced in 3.8.9 when when rotating multiple
    logs when one of them is missing.
  - In the debug mode, do not skip the code-path which handles the
    case when the last rotation does not exist. [Sergey Vidishev]
  - Show more precise description when "log does not need rotating".
  - Add new -l option to log verbose output to file. The file is
    overwritten on every logrotate execution.
  - Allow rotation of sparse files with copytruncate.
  * update logrotate-addextension.patch
- use spec-cleaner
- remove unused PreReq tags</changelog>
  <changelog author="dimstar@opensuse.org" date="1475496000">- Add logrotate-fix-test62_with_bash-4.4.patch: Fix the test suite
  when running with bash 4.4 (gh#logrotate/logrotate#66).</changelog>
  <changelog author="tchvatal@suse.com" date="1475668800">- Version update to 3.10.0 fate#322037:
  * Update url to point to github
- Remove upstreamed patch:
  * logrotate-3.7.8-mess_err.patch
- Rebase patches:
  * logrotate-3.7.8-suse.patch
  * logrotate-addextension.patch
  * logrotate-autoext.patch
  * logrotate-fix-test62_with_bash-4.4.patch</changelog>
  <changelog author="kukuk@suse.de" date="1478952000">- Move logrotate.status to /var/lib/misc following FHS/LSB and
  making implementing read-only root filesystem much easier.
  [FATE#322036]
- Add patch:
  * logrotate-var-lib-misc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1479729600">- Fix post scriptlet condition bnc#1011120</changelog>
  <changelog author="tchvatal@suse.com" date="1482926400">- Version update to 3.11.0:
  * Merges from distribution patchsets and small fixes around
- Remove all patches merged upstream:
  * logrotate-addextension.patch
  * logrotate-autoext.patch
  * logrotate-conf.patch
  * logrotate-fix-test62_with_bash-4.4.patch
  * logrotate-manpage_config_clarification.patch
  * logrotate-var-lib-misc.patch
  * logrotate-3.7.8-suse.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Remove aaa_base compat setting that is from 2003, we do not
  support such migration anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1499428801">- Version update to 3.12.3:
  * Fixed accident removal of rotated files with dateext. (#118)
  * Line comments inside globs in config files are now skipped. (#109)
  * logrotate now recovers from a corrupted state file. (#45)
  * createolddir now creates old directory as unprivileged user. (#114)
  * weekly rotations are now predictable and configurable. (#93)
  * Errors in config files are no longer treated as fatal errors. (#81)
  * configure --with-default-mail-command specifies default mail command. (#100)
  * Fixed heap buffer overflow when parsing crafted config file. (#33)
  * build fixes related to -Werror (#119) and -Werror=format= (#108)
  * configure --enable-werror now controls use of the -Werror flag (#123)
  * copy and copytruncate directives now work together again
  * unlink() is no longer preceded by open() unless shred is enabled (#124)
  * compress and uncompress now take commands from $PATH, too (#122)
- By default disable werror while building</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1515153600">- Version update to 3.13.0:
  * make distribution tarballs report logrotate version properly
  * make (un)compress work even if stdin and/or stdout are closed (#154)
  * remove -s from DEFAULT_MAIL_COMMAND and improve its documenation (#152)
  * uncompress logs before mailing them even if delaycompress is enabled (#151)
  * handle unlink of a non-existing log file as a warning only (#144)
  * include compile-time options in the output of logrotate --version (#145)
  * make logrotate --version print to stdout instead of stderr (#145)
  * flush write buffers before syncing state file (#148)
  * specify (un)compress utility explicitly in tests (#137)
  * enable running tests in parallel (#132)
  * explicitly map root UID/GID to 0 on Cygwin (#133)
  * add .dpkg-bak and .dpkg-del to default tabooext list (#134)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1528372800">- Add "Environment=HOME=/root" to logrotate.service file in order
  to allow mariadb to rotate its logs when the database has a root
  password defined [bsc#1093617]
- Added patch:
  * logrotate-3.13.0-systemd_add_home_env.patch</changelog>
</package>
<package pkgid="7ecdd175083ccc9b3972d79d6a5da9701e41f27fc5d89129e521d2e945961a3c" name="lttng-modules" arch="src">
  <version epoch="0" ver="2.10.0" rel="lp150.4.2.1"/>
  <changelog author="tonyj@suse.com" date="1397563200">- Update to version 2.4.1
  Changelog:
  * Fix: rcu instrumentation: add const qualifier to char pointers
  * Fix: add missing module version information
  * Fix: block instrumentation: &lt; 3.14 don't have bi_iter
  * Fix: update btrfs instrumentation to kernel 3.14
  * Fix: update block layer instrumentation to kernel 3.14
  * Fix file permissions for lttng-statedump-impl.c
- Correct supported module paths (bnc#872683)</changelog>
  <changelog author="tonyj@suse.com" date="1400587200">- Update mm_compaction_migratepages trace-event to reflect kernel commit
  ddc38a292 (mm/compaction: do not count migratepages when unnecessary)</changelog>
  <changelog author="tonyj@suse.com" date="1401883200">- Fix build errors resulting from block_rq_complete trace event changes
  (3.12.21 stable kernel update)
- Previous fix (update mm_compaction_migratepages) generated build warnings
  as code-change introduced was dead,  correct via static function called
  from input parameter.
- Build against full kernel sources thus enabling kvm, btrfs and ext4 probes.</changelog>
  <changelog author="ro@suse.de" date="1409659200">- sanitize release line in specfile</changelog>
  <changelog author="meissner@suse.com" date="1423483200">- rebuild to follow the kabi change in bsc#916842</changelog>
  <changelog author="tonyj@suse.com" date="1438084800">- Update to version 2.7.0-rc1 (FATE#319273)
  Drop patch: fix-mm_compaction_migratepages-tp.diff
  Drop patch: fix-update-block-instrumentation-to-3.15-kernel.patch
  Changelog for differences between 2.4.0 and this point may be found at:
    http://git.lttng.org/?p=lttng-modules.git;a=blob_plain;f=ChangeLog;hb=c103647d3a1a5090737a4339c584ac294b4ab676</changelog>
  <changelog author="tonyj@suse.com" date="1444046400">- Upgrade to release version 2.7.0 (FATE#319273)
  See http://git.lttng.org/?p=lttng-modules.git;a=blob_plain;f=ChangeLog;hb=v2.7.0
  for changelog from v2.7.0-rc1 to v2.7.0</changelog>
  <changelog author="jcheung@suse.com" date="1444305600">- Enable RT KMP build (bsc#948840)</changelog>
  <changelog author="tonyj@suse.com" date="1453377600">- Upgrade to 2.7.1 bugfix release to correct v4.4 build failures (bsc#962719)
- Add preventative fix for cve-2016-0728
  new patch: cve-2016-0728-check-reference-counts-for-overflow.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1453464000">- Disable RT KMP build (bsc#962719)</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="tonyj@suse.com" date="1488974400">- Resolve build errors in staging due to kernel block layer API FATE.
  (bsc#1020989,fate#322379) currently applying only to !RT kernels.
  new patch: tracepoint-event-add-tp_code_post.patch
  new patch: update-block-instrumentation-to-compile-on-4.8-kernels.patch</changelog>
  <changelog author="tonyj@suse.com" date="1489492800">- Make previous change (bsc#1020989,fate#322379) apply to RT kernels</changelog>
  <changelog author="tonyj@suse.com" date="1493294400">- Update lttng for btrfs_sync_fs change (bsc#1036276)
  New patch: fix-btrfs-instrumentation-for-4.8-kernel.patch</changelog>
  <changelog author="lnussel@suse.de" date="1494244800">- Don't build for rt flavor on openSUSE. Doesn't exist there. (bsc#1013845)</changelog>
  <changelog author="tonyj@suse.com" date="1497960000">- Constify btrfs tracepoints to resolve build failures (bsc#1044912)
  New patch: btrfs-constify-tracepoint-arguments.patch</changelog>
  <changelog author="tonyj@suse.com" date="1504180800">- Update to version 3.10 for SLE15 (bsc#1055683)
  Temp disable RT builds
  Drop patch: cve-2016-0728-check-reference-counts-for-overflow.patch
  Drop patch: fix-btrfs-instrumentation-for-4.8-kernel.patch
  Drop patch: tracepoint-event-add-tp_code_post.patch
  Drop patch: update-block-instrumentation-to-compile-on-4.8-kernels.patch
  Modify patch: btrfs-constify-tracepoint-arguments.patch</changelog>
  <changelog author="tonyj@suse.com" date="1512388800">- Remove cold parameter from mm_page_free_batched (bsc#1070529)
  New patch: mm_remove_cold_parameter_from_free_hot_cold_page.patch</changelog>
  <changelog author="tonyj@suse.com" date="1513684800">- Update block instrumentation for kernel 4.14. Change is already
  upstream in 2.10.3 but we are not taking updates into SLE at this
  point in beta cycle.. Also fix needs rework to map to SLE15 (v4.12.x)
  New patch: fix-update-block-instrumentation-for-4.14-kernel.patch</changelog>
  <changelog author="tonyj@suse.com" date="1517659200">- Update for kvm build errors
  New patch: update-kvm-instrumentation-for-4.15.patch
  New patch: fix-kvm-instrumentation-for-4.15.patch</changelog>
</package>
<package pkgid="084e5c8715f457910a18f83954c086c8b18a6775924a3199926e5c021a28d73c" name="lttng-modules" arch="x86_64">
  <version epoch="0" ver="2.10.0" rel="lp150.4.2.1"/>
  <changelog author="tonyj@suse.com" date="1397563200">- Update to version 2.4.1
  Changelog:
  * Fix: rcu instrumentation: add const qualifier to char pointers
  * Fix: add missing module version information
  * Fix: block instrumentation: &lt; 3.14 don't have bi_iter
  * Fix: update btrfs instrumentation to kernel 3.14
  * Fix: update block layer instrumentation to kernel 3.14
  * Fix file permissions for lttng-statedump-impl.c
- Correct supported module paths (bnc#872683)</changelog>
  <changelog author="tonyj@suse.com" date="1400587200">- Update mm_compaction_migratepages trace-event to reflect kernel commit
  ddc38a292 (mm/compaction: do not count migratepages when unnecessary)</changelog>
  <changelog author="tonyj@suse.com" date="1401883200">- Fix build errors resulting from block_rq_complete trace event changes
  (3.12.21 stable kernel update)
- Previous fix (update mm_compaction_migratepages) generated build warnings
  as code-change introduced was dead,  correct via static function called
  from input parameter.
- Build against full kernel sources thus enabling kvm, btrfs and ext4 probes.</changelog>
  <changelog author="ro@suse.de" date="1409659200">- sanitize release line in specfile</changelog>
  <changelog author="meissner@suse.com" date="1423483200">- rebuild to follow the kabi change in bsc#916842</changelog>
  <changelog author="tonyj@suse.com" date="1438084800">- Update to version 2.7.0-rc1 (FATE#319273)
  Drop patch: fix-mm_compaction_migratepages-tp.diff
  Drop patch: fix-update-block-instrumentation-to-3.15-kernel.patch
  Changelog for differences between 2.4.0 and this point may be found at:
    http://git.lttng.org/?p=lttng-modules.git;a=blob_plain;f=ChangeLog;hb=c103647d3a1a5090737a4339c584ac294b4ab676</changelog>
  <changelog author="tonyj@suse.com" date="1444046400">- Upgrade to release version 2.7.0 (FATE#319273)
  See http://git.lttng.org/?p=lttng-modules.git;a=blob_plain;f=ChangeLog;hb=v2.7.0
  for changelog from v2.7.0-rc1 to v2.7.0</changelog>
  <changelog author="jcheung@suse.com" date="1444305600">- Enable RT KMP build (bsc#948840)</changelog>
  <changelog author="tonyj@suse.com" date="1453377600">- Upgrade to 2.7.1 bugfix release to correct v4.4 build failures (bsc#962719)
- Add preventative fix for cve-2016-0728
  new patch: cve-2016-0728-check-reference-counts-for-overflow.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1453464000">- Disable RT KMP build (bsc#962719)</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="tonyj@suse.com" date="1488974400">- Resolve build errors in staging due to kernel block layer API FATE.
  (bsc#1020989,fate#322379) currently applying only to !RT kernels.
  new patch: tracepoint-event-add-tp_code_post.patch
  new patch: update-block-instrumentation-to-compile-on-4.8-kernels.patch</changelog>
  <changelog author="tonyj@suse.com" date="1489492800">- Make previous change (bsc#1020989,fate#322379) apply to RT kernels</changelog>
  <changelog author="tonyj@suse.com" date="1493294400">- Update lttng for btrfs_sync_fs change (bsc#1036276)
  New patch: fix-btrfs-instrumentation-for-4.8-kernel.patch</changelog>
  <changelog author="lnussel@suse.de" date="1494244800">- Don't build for rt flavor on openSUSE. Doesn't exist there. (bsc#1013845)</changelog>
  <changelog author="tonyj@suse.com" date="1497960000">- Constify btrfs tracepoints to resolve build failures (bsc#1044912)
  New patch: btrfs-constify-tracepoint-arguments.patch</changelog>
  <changelog author="tonyj@suse.com" date="1504180800">- Update to version 3.10 for SLE15 (bsc#1055683)
  Temp disable RT builds
  Drop patch: cve-2016-0728-check-reference-counts-for-overflow.patch
  Drop patch: fix-btrfs-instrumentation-for-4.8-kernel.patch
  Drop patch: tracepoint-event-add-tp_code_post.patch
  Drop patch: update-block-instrumentation-to-compile-on-4.8-kernels.patch
  Modify patch: btrfs-constify-tracepoint-arguments.patch</changelog>
  <changelog author="tonyj@suse.com" date="1512388800">- Remove cold parameter from mm_page_free_batched (bsc#1070529)
  New patch: mm_remove_cold_parameter_from_free_hot_cold_page.patch</changelog>
  <changelog author="tonyj@suse.com" date="1513684800">- Update block instrumentation for kernel 4.14. Change is already
  upstream in 2.10.3 but we are not taking updates into SLE at this
  point in beta cycle.. Also fix needs rework to map to SLE15 (v4.12.x)
  New patch: fix-update-block-instrumentation-for-4.14-kernel.patch</changelog>
  <changelog author="tonyj@suse.com" date="1517659200">- Update for kvm build errors
  New patch: update-kvm-instrumentation-for-4.15.patch
  New patch: fix-kvm-instrumentation-for-4.15.patch</changelog>
</package>
<package pkgid="be6cb24d2009f51fca0e5311e3e321be40be38b8057c462cf36fdd5fc0ddf9fc" name="lttng-modules-kmp-default" arch="x86_64">
  <version epoch="0" ver="2.10.0_k4.12.14_lp150.12.13" rel="lp150.4.2.1"/>
  <changelog author="tonyj@suse.com" date="1397563200">- Update to version 2.4.1
  Changelog:
  * Fix: rcu instrumentation: add const qualifier to char pointers
  * Fix: add missing module version information
  * Fix: block instrumentation: &lt; 3.14 don't have bi_iter
  * Fix: update btrfs instrumentation to kernel 3.14
  * Fix: update block layer instrumentation to kernel 3.14
  * Fix file permissions for lttng-statedump-impl.c
- Correct supported module paths (bnc#872683)</changelog>
  <changelog author="tonyj@suse.com" date="1400587200">- Update mm_compaction_migratepages trace-event to reflect kernel commit
  ddc38a292 (mm/compaction: do not count migratepages when unnecessary)</changelog>
  <changelog author="tonyj@suse.com" date="1401883200">- Fix build errors resulting from block_rq_complete trace event changes
  (3.12.21 stable kernel update)
- Previous fix (update mm_compaction_migratepages) generated build warnings
  as code-change introduced was dead,  correct via static function called
  from input parameter.
- Build against full kernel sources thus enabling kvm, btrfs and ext4 probes.</changelog>
  <changelog author="ro@suse.de" date="1409659200">- sanitize release line in specfile</changelog>
  <changelog author="meissner@suse.com" date="1423483200">- rebuild to follow the kabi change in bsc#916842</changelog>
  <changelog author="tonyj@suse.com" date="1438084800">- Update to version 2.7.0-rc1 (FATE#319273)
  Drop patch: fix-mm_compaction_migratepages-tp.diff
  Drop patch: fix-update-block-instrumentation-to-3.15-kernel.patch
  Changelog for differences between 2.4.0 and this point may be found at:
    http://git.lttng.org/?p=lttng-modules.git;a=blob_plain;f=ChangeLog;hb=c103647d3a1a5090737a4339c584ac294b4ab676</changelog>
  <changelog author="tonyj@suse.com" date="1444046400">- Upgrade to release version 2.7.0 (FATE#319273)
  See http://git.lttng.org/?p=lttng-modules.git;a=blob_plain;f=ChangeLog;hb=v2.7.0
  for changelog from v2.7.0-rc1 to v2.7.0</changelog>
  <changelog author="jcheung@suse.com" date="1444305600">- Enable RT KMP build (bsc#948840)</changelog>
  <changelog author="tonyj@suse.com" date="1453377600">- Upgrade to 2.7.1 bugfix release to correct v4.4 build failures (bsc#962719)
- Add preventative fix for cve-2016-0728
  new patch: cve-2016-0728-check-reference-counts-for-overflow.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1453464000">- Disable RT KMP build (bsc#962719)</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="tonyj@suse.com" date="1488974400">- Resolve build errors in staging due to kernel block layer API FATE.
  (bsc#1020989,fate#322379) currently applying only to !RT kernels.
  new patch: tracepoint-event-add-tp_code_post.patch
  new patch: update-block-instrumentation-to-compile-on-4.8-kernels.patch</changelog>
  <changelog author="tonyj@suse.com" date="1489492800">- Make previous change (bsc#1020989,fate#322379) apply to RT kernels</changelog>
  <changelog author="tonyj@suse.com" date="1493294400">- Update lttng for btrfs_sync_fs change (bsc#1036276)
  New patch: fix-btrfs-instrumentation-for-4.8-kernel.patch</changelog>
  <changelog author="lnussel@suse.de" date="1494244800">- Don't build for rt flavor on openSUSE. Doesn't exist there. (bsc#1013845)</changelog>
  <changelog author="tonyj@suse.com" date="1497960000">- Constify btrfs tracepoints to resolve build failures (bsc#1044912)
  New patch: btrfs-constify-tracepoint-arguments.patch</changelog>
  <changelog author="tonyj@suse.com" date="1504180800">- Update to version 3.10 for SLE15 (bsc#1055683)
  Temp disable RT builds
  Drop patch: cve-2016-0728-check-reference-counts-for-overflow.patch
  Drop patch: fix-btrfs-instrumentation-for-4.8-kernel.patch
  Drop patch: tracepoint-event-add-tp_code_post.patch
  Drop patch: update-block-instrumentation-to-compile-on-4.8-kernels.patch
  Modify patch: btrfs-constify-tracepoint-arguments.patch</changelog>
  <changelog author="tonyj@suse.com" date="1512388800">- Remove cold parameter from mm_page_free_batched (bsc#1070529)
  New patch: mm_remove_cold_parameter_from_free_hot_cold_page.patch</changelog>
  <changelog author="tonyj@suse.com" date="1513684800">- Update block instrumentation for kernel 4.14. Change is already
  upstream in 2.10.3 but we are not taking updates into SLE at this
  point in beta cycle.. Also fix needs rework to map to SLE15 (v4.12.x)
  New patch: fix-update-block-instrumentation-for-4.14-kernel.patch</changelog>
  <changelog author="tonyj@suse.com" date="1517659200">- Update for kvm build errors
  New patch: update-kvm-instrumentation-for-4.15.patch
  New patch: fix-kvm-instrumentation-for-4.15.patch</changelog>
</package>
<package pkgid="edf9e2595ad0412936ec3fe53ea9b139c79161bd24bbac85c0e77c2743a369f1" name="lxc" arch="src">
  <version epoch="0" ver="2.0.9" rel="lp150.2.3.1"/>
  <changelog author="cbrauner@suse.de" date="1468065600">- Split into packages to follow best practice.
  * lxc
  * liblxc1
  * liblxc-devel
  Also, we need liblxc1 to be separately installable from LXC for LXD.
- Tweak descriptions.</changelog>
  <changelog author="cbrauner@suse.de" date="1468065601">- add lxcfs dependency: lxc relies on lxcfs for a long time now to provide
  container aware /proc files. The /sys/fs/cgroup part is slowly phased out
  because we now have cgroup namespaces.</changelog>
  <changelog author="jengelh@inai.de" date="1469275200">- Abolish old macro use. Remove ancient %clean section.
  Avoid sh invocation for simple ldconfig calls.</changelog>
  <changelog author="cbrauner@suse.de" date="1472644800">- update lxc to 2.0.4
- add 0001-bdev-use-correct-overlay-module-name.patch
- add 0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
- add 0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
- add 0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
- add 0005-tools-move-rcfile-to-the-common-options-list.patch
- add 0006-tools-set-configfile-after-load_config.patch
- add 0007-doc-add-rcfile-to-common-opts.patch
- add 0008-doc-Update-Korean-lxc-attach-1.patch
- add 0009-doc-Add-rcfile-to-Korean-common-opts.patch
- add 0010-doc-Add-rcfile-to-Japanese-common-opts.patch
- add 0011-tools-use-exit-EXIT_-everywhere.patch
- add 0012-tools-unify-exit-calls-outside-of-main.patch
- add 0013-utils-Add-mips-signalfd-syscall-numbers.patch
- add 0014-seccomp-Implement-MIPS-seccomp-handling.patch
- add 0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
- add 0016-seccomp-fix-strerror.patch
- add 0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
- add 0018-seccomp-add-support-for-s390x.patch
- add 0019-seccomp-remove-double-include-and-order-includes.patch
- add 0020-seccomp-non-functional-changes.patch
- add 0021-templates-use-fd-9-instead-of-200.patch
- add 0022-templates-fedora-requires-openssl-binary.patch
- add 0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
- add 0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
- add 0025-c-r-Fix-pid_t-on-some-arches.patch
- add 0026-templates-Add-mips-hostarch-detection-to-debian.patch
- add 0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch</changelog>
  <changelog author="schwab@suse.de" date="1474286400">- setcap has been moved to /usr/sbin (boo#998326).</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481025600">- CVE-2016-8649: lxc: guest escape via ptrace of lxc-attach (bsc#1010933).
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485259200">- update to version 2.0.7
  This is the seventh bugfix release for LXC 2.0. The main bugfixes in this release are:
  - attach: Close lsm label file descriptor
  - attach: Non-functional changes
  - attach: Simplify lsm_openat()
  - caps: Add lxc_cap_is_set()
  - conf: attach: Save errno across call to close
  - conf: Clearly report to either use drop or keep
  - conf: criu: Add make_anonymous_mount_file()
  - conf: Fix suggest_default_idmap()
  - configure: Add --enable-gnutls option
  - configure: Check for memfd_create()
  - configure: Check whether gettid() is declared
  - configure: Do not allow variable length arrays
  - configure: Remove -Werror=vla
  - configure: Use AC_HEADER_MAJOR to detect major()/minor()/makedev()
  - conf: Non-functional changes
  - conf: Remove thread-unsafe strsignal + improve log
  - init: Add cgroupfs-mount to Should-Start/Stop sysvinit LSB headers
  - log: Add lxc_unix_epoch_to_utc()
  - log: Annotate lxc_unix_epoch_to_utc()
  - log: Drop all timezone conversion functions
  - log: Make sure that date is correctly formatted
  - log: Use lxc_unix_epoch_to_utc()
  - log: Use N/A if getpid() != gettid() when threaded
  - log: Use thread-safe localtime_r()
  - lvm: Supress warnings about leaked files
  - lxccontainer: Log failure to send sig to init pid
  - monitor: Add more logging
  - monitor: Close mainloop on exit if we opened it
  - monitor: Improve log + set log level to DEBUG
  - monitor: Log which pipe fd is currently used
  - monitor: Make lxc-monitord async signal safe
  - monitor: Non-functional changes
  - python3-lxc: Fix api_test.py on s390x
  - start: Check for CAP_SETGID before setgroups()
  - start: Fix execute and improve setgroups() calls
  - state: Use async signal safe fun in lxc_wait()
  - templates: lxc-debian: Don't try to get stuff from /usr/lib/systemd on the host
  - templates: lxc-debian: Fix getty service startup
  - templates: lxc-debian: Fix typo in calling dpkg with --print-foreign-architectures option
  - templates: lxc-debian: Handle ppc hostarch -&gt; powerpc
  - templates: lxc-opensuse: Change openSUSE default release to Leap 42.2
  - templates: lxc-opensuse: Remove libgcc_s1
  - templates: lxc-opensuse: Remove poweroff.target -&gt; sigpwr.target copy
  - templates: lxc-opensuse: Set to be unconfined by AppArmor
  - templates: lxc-opensuse: Update for Leap 42.2
  - tests; Don't cause test failures on cleanup errors
  - tests: Skip unpriv tests on broken overlay module
  - tools: Improve logging
  - tools: lxc-start: Remove c-&gt;is_defined(c) check
  - tools: lxc-start: Set configfile after load_config
  - tools: Only check for O_RDONLY
  - tree-wide: Random macro cleanups
  - tree-wide: Remove any variable length arrays
  - tree-wide: Sic semper assertis!
  - utils: Add macro __LXC_NUMSTRLEN
  - utils: Add uid, gid, group convenience wrappers
- commented out the patches, as they no longer apply cleanly</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485518400">- all patches (00*.patch) are upstream already, thus deleted; patch lxc-aa_allow_incomplete-default.patch is now reworked and added as a drop-in file in /usr/share/lxc/config/common.conf.d/
  0001-bdev-use-correct-overlay-module-name.patch
  0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
  0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
  0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
  0005-tools-move-rcfile-to-the-common-options-list.patch
  0006-tools-set-configfile-after-load_config.patch
  0007-doc-add-rcfile-to-common-opts.patch
  0008-doc-Update-Korean-lxc-attach-1.patch
  0009-doc-Add-rcfile-to-Korean-common-opts.patch
  0010-doc-Add-rcfile-to-Japanese-common-opts.patch
  0011-tools-use-exit-EXIT_-everywhere.patch
  0012-tools-unify-exit-calls-outside-of-main.patch
  0013-utils-Add-mips-signalfd-syscall-numbers.patch
  0014-seccomp-Implement-MIPS-seccomp-handling.patch
  0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
  0016-seccomp-fix-strerror.patch
  0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
  0018-seccomp-add-support-for-s390x.patch
  0019-seccomp-remove-double-include-and-order-includes.patch
  0020-seccomp-non-functional-changes.patch
  0021-templates-use-fd-9-instead-of-200.patch
  0022-templates-fedora-requires-openssl-binary.patch
  0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
  0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
  0025-c-r-Fix-pid_t-on-some-arches.patch
  0026-templates-Add-mips-hostarch-detection-to-debian.patch
  0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch
  lxc-aa_allow_incomplete-default.patch
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490788800">- backported two patches to get the package to build again for Tumbleweed
  (applied only on tumbleweed aka suse_version &gt;1315)
  0001-tree-wide-include-sys-sysmacros.h-directly.patch
  0002-tree-wide-include-sys-sysmacros.h-directly.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490875200">- fix for boo#1028264
  added patch 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Replace %__cp by cp</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1494936000">- Update to version 2.0.8
  * Security fix for CVE-2017-5985
  * All templates have been updated to not set default passwords anymore, instead requiring lxc-attach be used to configure users.
  * This may affect some automated environments that were relying on our default (very much insecure) users.
  Bugfixes:
    Make lxc-start-ephemeral Python 3.2-compatible
    Fix typo
    Allow build without sys/capability.h
    lxc-opensuse: fix default value for release code
    util: always malloc for setproctitle
    util: update setproctitle comments
    confile: clear lxc.network..ipv{4,6} when empty
    lxc_setup_tios(): Ignore SIGTTOU and SIGTTIN signals
    Make lxc-net return non-zero on failure
    seccomp: allow x32 guests on amd64 hosts.
    Add HAVE_LIBCAP
    c/r: only supply --ext-mount-map for bind mounts
    Added 'mkdir -p' functionality in create_or_remove_cgroup
    Use LXC_ROOTFS_MOUNT in clonehostname hook
    squeeze is not a supported release anymore, drop the key
    start: dumb down SIGCHLD from WARN() to NOTICE()
    log: fix lxc_unix_epoch_to_utc()
    cgfsng: make trim() safer
    seccomp: set SCMP_FLTATR_ATL_TSKIP if available
    lxc-user-nic: re-order #includes
    lxc-user-nic: improve + bugfix
    lxc-user-nic: delete link on failure
    conf: only try to delete veth when privileged
    Fix lxc-containers to support multiple bridges
    Fix mixed tab/spaces in previous patch
    lxc-alpine: use dl-cdn.a.o as default mirror instead of random one
    lxc-checkconfig: verify new[ug]idmap are setuid-root
    [templates] archlinux: resolve conflicting files
    [templates] archlinux: noneed default_timezone variable
    python3: Deal with potential NULL char*
    lxc-download.in / allow setting keyserver from env
    lxc-download.in / Document keyserver change in help
    Change variable check to match existing style
    tree-wide: include directly
    conf/ile: make sure buffer is large enough
    tree-wide: include directly
    tests: Support running on IPv6 networks
    tests: Kill containers (don't wait for shutdown)
    Fix opening wrong file in suggest_default_idmap
    do not set the root password in the debian template
    do not set insecure passwords
    don't set a default password for altlinux, gentoo, openmandriva and pld
    tools: exit with return code of lxc_execute()
    Keep veth.pair.name on network shutdown
    Makefile: fix static clang init.lxc build
    Avoid waiting for bridge interface if disabled in sysconfig/lxc | lxc-net via USE_LXC_BRIDGE
    Increased buffer length in print_stats()
    avoid assigning to a variable which is not POSIX shell proof (bug #1498)
    remove obsolete note about api stability
    conf: less error prone pointer access
    conf: lxc_map_ids() non-functional changes
    caps: add lxc_{proc,file}_cap_is_set()
    conf: check for {filecaps,setuid} on new{g,u}idmap
    conf: improve log when mounting rootfs
    ls: simplify the judgment condition when list active containers
    fix typo introduced in #1509
    attach|unshare: fix the wrong comment
    caps: skip file capability checks on android
    autotools: check for cap_get_file
    caps: return false if caps are not supported
    conf: non-functional changes to setup_pts()
    conf: use bind-mount for /dev/ptmx
    conf: non-functional changes
    utils: use loop device helpers from LXD
    create ISSUE_TEMPLATE.md
    cgroups: improve cgfsng debugging
    issue template: fix typo
    conf: close fd in lxc_setup_devpts()
    conf: non-functional changes
    utils: tweak lxc_mount_proc_if_needed()
    Change sshd template to work with Ubuntu 17.04
    conf: order mount options
    conf: add MS_LAZYTIME to mount options
    monitor: report errno on exec() error
    af unix: allow for maximum socket name
    commands: avoid NULL pointer dereference
    commands: non-functional changes
    lxccontainer: avoid NULL pointer dereference
    monitor: simplify abstract socket logic
    precise is not the latest LTS, let's use xenial instead
    fix the wrong exit status
    conf: non-functional changes lxc_fill_autodev()
    conf: remove /dev/console from lxc_fill_autodev()
    conf: non-functional changes lxc_setup()
    conf: non-functional changes to console functions
    conf: improve lxc_setup_dev_console()
    conf: lxc_setup_ttydir_console()
    config: remove /dev/console bind mount
    doc: document console behavior
    utils: add lxc_unstack_mountpoint()
    conf: unstack all mounts atop /dev/console
    console: fail when we cannot allocate peer tty
    start: remove umount2()
    conf: non-functional changes
    utils: handle &gt; 2^31 in lxc_unstack_mountpoint()
    Install systemd units for CentOS
    Merge ubuntu and debiancase
    start: add crucial details about lxc_spawn()
- Deleted patches that have been backported before:
  - 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch
  - 0001-tree-wide-include-sys-sysmacros.h-directly.patch
  - 0002-tree-wide-include-sys-sysmacros.h-directly.patch
- added signature verification</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1499169600">- added workaround for #bsc1041291 to allow builds on Tumbleweed with gcc7, until this bug in gcc7 is fixed...</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094400">- added correct reload of apparmor to %post</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094401">- added Requires for apparmor-abstractions and BuildRequires for apparmor-rpm-macros to apply the fix for boo#1036360</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094402">- removed apparmor-rpm-macros again, as it is not needed for the current %post solution</changelog>
  <changelog author="mchandras@suse.de" date="1504267200">- Fix libcap-progs dependency. The 'setcap' binary is located in /sbin
  instead of /usr/sbin but it's best to depend on the actual package
  instead since the location might change in the future.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1505217600">- removed ldconfig from lxc %post section</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1509451200">- update to version 2.0.9
  Bugfixes:
  * apparmor: Allow containers to start in AppArmor namespaces
  * apparmor: Drop useless apparmor denies
  * caps: Move ifndef/define to the top
  * cgfsng: Fail when limits fail to apply
  * cgfsng: Log when we defer to cgfsng
  * cgfsng: Only output debug info when we set cgroup data
  * cgroups: Handle hybrid cgroup layouts
  * cgroups: Use tight scoping
  * cgroups: Workaround gcc-7 bug
  * commands: Abstract cmd socket handling + logging
  * commands: Add missing translation
  * commands: Delete meaningless comments
  * commands: Handle EINTR
  * commands: Make state server interface flexible
  * commands: Move lxc_make_abstract_socket_name()
  * commands: Rename to lxc_cmd_add_state_client()
  * commonds: Fix typo
  * conf: Adapt to lxc-user-nic usage
  * conf: Add lxc_get_idmaps()
  * conf: Add userns_exec_full()
  * conf: Allow to clear all config items
  * conf: Allow to get lxc.autodev
  * conf: Allow to get lxc.haltsignal
  * conf: Allow to get lxc.kmsg
  * conf: Allow to get lxc.rebootsignal
  * conf: Allow to get lxc.stopsignal
  * conf: Allow writing uid mappings with euid != 0
  * conf: Avoid double-frees in userns_exec_1()
  * conf: Clear lxc.include
  * conf: Do not check for empty value twice
  * conf: Do not check union on wrong net type
  * conf: Do not deref null pointer
  * conf: Do not free static memory
  * conf: Do not log uninitialized memory
  * conf: Do not write out trailing spaces
  * conf: Don't send ttys when none are configured
  * conf: Dump lxc_get_config_item()
  * conf: Error out on too many mappings
  * conf: Fix bionic builds
  * conf: Fix build without libcap
  * conf: Fix tty creation
  * conf: Fix userns_exec_1()
  * conf: Free netdev-&gt;downscript
  * conf: Implement config item clear callback
  * conf: Improve lxc_map_ids()
  * conf: Improve tty shifting function
  * conf: Improve write_id_mapping()
  * conf: Increase lxc-user-nic buffer
  * conf: Log lxc-user-nic output
  * conf: lxc_listconfigs -&gt; lxc_list_config_items
  * conf: Move clearing config items into one place
  * conf: Non-functional changes
  * conf: NOTICE() on mounts on container's /dev
  * conf: Performance tweaks
  * conf: Preserve newlines
  * conf: Properly parse lxc.idmap entries
  * conf: Record idmap that gets written
  * conf: Refactoring of most config parsing code
  * conf: Refactor network deletion
  * conf: Remove dead assignments in parse_idmaps()
  * conf: Remove dead mount code
  * conf: Rework lxc_map_ids()
  * conf: Rework userns_exec_1()
  * conf: Send ttys in batches of 2
  * conf: Switch API to new callback system
  * conf: Use a minimal {g,u}id map
  * conf: Use correct check on char array
  * conf: Use run_command for lxc-usernsexec
  * console: Clean tty state + return 0 on peer exit
  * console: DO NOT add the handles of adjust winsize when the 'stdin' is not a tty
  * console: Fix memory leak of 'lxc_tty_state'
  * console: Remove dead assignments
  * core: Do remount with the MS_REMOUNT flag when mounts with MS_RDONLY
  * core: Fix a format string build failure on x32
  * core: Fix includes for Android
  * core: Fix memory and resource leak
  * core: Fix some cppcheck warnings
  * core: Fix the bug of 'ts-&gt;stdoutfd' did not fill with parameters 'stdoutfd'
  * core: Include custom mntent for Android
  * core: Log function called in userns_exec_1()
  * core: Remove the __func__ macro
  * core: Remove the unused macro
  * core: Replace "priority" with "level"
  * core: Revert "Add a prefix to the lxc.pc"
  * core: root -&gt; am_root
  * core: struct bdev -&gt; struct lxc_storage
  * core: Update .gitignore
  * core: Use strerror(errno) instead of %m
  * criu: Add cmp_version()
  * criu: Use correct check initialization check
  * doc: Add CII Best Practices badge to README
  * doc: Add console behavior to Japanese lxc.container.conf(5)
  * doc: Document missing env variables
  * doc: Fix regex-typo in Japanese and Korean lxc-monitor(1)
  * doc: Fix regex-typo in lxc-monitor.sgml.in
  * doc: Reword id mapping restrictions when unpriv
  * doc: Rework README
  * doc: Tweak Japanese lxc.container.conf(5)
  * doc: Tweak lxc.container.conf a little
  * doc: Untabify Japanese lxc.container.conf(5)
  * doc: Update API documentation for get_config_item
  * execute: Enable console &amp; standard /dev symlinks
  * init: Add comment for exclude 32 and 33 signals
  * init: Adjust include statements
  * init: Become session leader
  * init: Move initialization of act to outside of the loop
  * init: Report exec*() failure
  * init: Use lxc-stop to stop systemd service
  * liblxc: Make sure memory is free()ed
  * liblxc: Only spawn monitord on demand
  * liblxc: Remove 5s timeout on error
  * liblxc: Use snprintf()
  * liblxc: Use userns_exec_full()
  * lock: Non-functional changes
  * lock: Return the right error when open lock file failed
  * log: Prevent stack smashing
  * log: Switch to a new lxc_log_init function
  * monitor: Abstract lxc_abstract_unix_{send,recv}_fd for af_unix
  * monitor: Add lxc_cmd_state_server()
  * monitor: Add TRACE()ers
  * monitor: Delete unneccessory include file
  * monitor: Remove dead assignments
  * monitor: Remove the workaround-code for lxc_abstract_unix_connect
  * monitor: Remove unlink operation for af_unix
  * network: Add arg to config clear method
  * network: Add data arg to set callback
  * network: Add ifindex field for host veth device
  * network: Add lxc_log_configured_netdevs()
  * network: Add missing checks for empty links
  * network: Add network counter
  * network: Add warning when ignoring MTU
  * network: Clear ifindeces
  * network: Delete ovs for unprivileged networks
  * network: Document all fields in struct lxc_netdev
  * network: Don't delete net devs we didn't create
  * network: Fix grammar
  * network: Implement lxc_get_netdev_by_idx()
  * network: Log cleanup thread pid for openswitch
  * network: Log ifindex
  * network: Log ifindex for host side veth device
  * network: Log veth_attr.pair and veth_attr.veth1
  * network: Move config_value_empty() to confile_utils
  * network: Perform network validation at creation time
  * network: Remove allocation from lxc_mkifname()
  * network: Remove dead assignments
  * network: Remove netpipe
  * network: Retrieve correct names and ifindices
  * network: Retrieve the host's veth device ifindex
  * network: Rework network creation
  * network: Send ifindex for unpriv networks
  * network: Stop recording saved physical net devices
  * network: Use correct network device name
  * network: Use send()/recv()
  * network: Use single helper to delete networks
  * network: Use static memory for net device names
  * openvswitch: Delete ports intelligently
  * seccomp: Export the seccomp filter after load it into kernel successful
  * seccomp: Print action name in log
  * seccomp: s/n-new-privs/no-new-privs/g
  * seccomp: Update comment for function parse_config
  * start: Add lxc_free_handler()
  * start: Add lxc_init_handler()
  * start: Document all handler fields
  * start: Don't call lxc_map_ids() without id map
  * start: Don't close inherited namespace fds
  * start: Don't let data_sock users close the fd
  * start: Dup std{in,out,err} to pty slave
  * start: Ensure cgroups are cleaned up
  * start: Generalize lxc_check_inherited()
  * start: Log sending and receiving of tty fds
  * start: lxc_setup() after unshare(CLONE_NEWCGROUP)
  * start: Move env setup before container setup
  * start: Pass LXC_LOG_LEVEL to hooks
  * start: Pin rootfs when privileged
  * start: Remove dead variable
  * start: Send state to legacy lxc-monitord state server even if no state clients registered
  * start: Set environment variables correctly
  * start: Switch from SOCK_DGRAM to SOCK_STREAM
  * start: Switch ids at last possible instance
  * start: Use separate socket on daemonized start
  * start: Use userns_exec_full()
  * state: Remove lxc_rmstate declaration
  * storage: Add storage_utils.{c.h}
  * storage: Avoid segfault
  * storage: Default to orig type on identical paths
  * storage: Record output from mkfs.*
  * storage: Rename files "bdev" -&gt; "storage"
  * storage: Use userns_exec_full()
  * storage/dir: Using 'add-required_remount_flags' function to add required flags
  * storage/loop: Detect loop file
  * storage/overlayfs: Fix wrong path
  * storage/overlay: Handle overlay for stable 2.0
  * template: Remove obsolete bind-mounts from userns.conf
  * template: Use "rsync -SHaAX" to copy the cached rootfs into place
  * template/alpine: Add support for ppc64le
  * template/alpine: Change file check to also check file size (-f =&gt; -s)
  * template/archlinux: Change locale "en-US.UTF-8" to "en_US.UTF-8"
  * template/centos: Add cronie to the pkg list
  * template/centos: Use altarch mirror for CentOS on arches other than i386 and x86_64
  * template/debian: Add aarch64 -&gt; arm64 mapping
  * template/debian: Add buster as a valid release
  * template/debian: Don't force getty@ configuration
  * template/debian: Use deb.debian.org as the default Debian mirror
  * template/download: Fix syntax error
  * template/download: Sanitize script with shellcheck
  * template/opensuse: Add Tumbleweed as supported release
  * template/opensuse: Fix tumbleweed software selection
  * template/opensuse: getty.target.wants does not always exists
  * template/opensuse: Support leap 42.3
  * template/opensuse: Tumbleweed has no update repo
  * template/plamo: Delete unnecessary process during container shutdown
  * template/ubuntu: Check that there is netplan binary, rather than just just a config directory
  * template/ubuntu: Conditionally move upstart ssh job, as it is now optional
  * template/ubuntu: Support netplan in newer releases by default
  * tests: Adapt lxc-user-nic tests to new syntax
  * tests: Add corner-case tests for lxc_safe_{u}int()
  * tests: Add item clear and config file tests
  * tests: Add test script to test the ro option of lxc.rootfs.options
  * tests: Add unit tests for idmap parser
  * tests: Avoid NULL pointer dereference
  * tests: Compare return value to expected value whenever we can
  * tests: Define a network before checks
  * tests: Don't fail when no processes for the user exist
  * tests: Enforce all methods for config items
  * tests: Remove dead assignments
  * tests: Remove the temp container directory
  * tests: Shortlived daemonized containers
  * tests: Support systemd hybrid cgroups
  * tools: Add additional cgroup checks
  * tools: Print "-devel" when LXC_DEVEL is true
  * tools: Use "which"
  * tools/lxc-attach: Allow for situations without /dev/tty
  * tools/lxc-checkconfig: Add CONFIG_NETFILTER_XT_MATCH_COMMENT
  * tools/lxc-checkconfig: Add probe status checking
  * tools/lxc-execute: Print error message when failed
  * tools/lxc-ls: Return all containers by default
  * tools/lxc-monitord: Exit when receiving a quit command
  * tools/lxc-unshare: Do not pass NULL pointer
  * tools/lxc-user-nic: Add new {create,delete} subcommands
  * tools/lxc-user-nic: Check db before trying to delete
  * tools/lxc-user-nic: Fix adding database entries
  * tools/lxc-user-nic: Fix memleak
  * tools/lxc-user-nic: Free memory and check for error
  * tools/lxc-user-nic: Initialize vars to silence gcc-7
  * tools/lxc-user-nic: Keep lines from other {users,links}
  * tools/lxc-user-nic: Remove delta between master + stable
  * tools/lxc-user-nic: Remove double initialization
  * tools/lxc-user-nic: Rework renaming net devices
  * tools/lxc-user-nic: Simplify logic
  * tools/lxc-user-nic: Test privilege over netns on delete
  * tools/lxc-usernsexec: Remove dead assignments
  * travis: Fix builds
  * utils: Add has_fs_type() + is_fs_type()
  * utils: Add lxc_nic_exists()
  * utils: Add lxc_safe_ulong()
  * utils: Add run_command
  * utils: Close parent end in child process after fork
  * utils: Do not write to 0 sized buffer
  * utils: Duplicate stderr as well in lxc_popen()
  * utils: Fix lxc_mount_proc_if_needed()
  * utils: Fix lxc_popen()/lxc_pclose()
  * utils: Fix mem leak with realpath
  * utils: Fix num parsing functions
  * utils: Fix ppc64le builds
  * utils: Fix the way to detect blocking signal
  * utils: lxc_popen() remove dead assignments
  * utils: Move helpers from cgfsng.c to utils.{c,h}
  * utils: Rework lxc_deslashify()
  * utils: Switch to has_fs_type()
  * utils: Use 1LU otherwise we overflow
  * utils: Use access instead of stat</changelog>
  <changelog author="mchandras@suse.de" date="1532001600">- Add upstream patch to fix container start up problems when AppArmor
  is enabled (boo#1099239)
  * 0001-apparmor-Allow-usr-lib-paths-for-mount-and-pivot_roo.patch</changelog>
</package>
<package pkgid="3ca500c3fbe1b72b8d065cbf9c13da83cb501d3fcc671c79fc51e759f24b6c70" name="lxc" arch="x86_64">
  <version epoch="0" ver="2.0.9" rel="lp150.2.3.1"/>
  <changelog author="cbrauner@suse.de" date="1468065600">- Split into packages to follow best practice.
  * lxc
  * liblxc1
  * liblxc-devel
  Also, we need liblxc1 to be separately installable from LXC for LXD.
- Tweak descriptions.</changelog>
  <changelog author="cbrauner@suse.de" date="1468065601">- add lxcfs dependency: lxc relies on lxcfs for a long time now to provide
  container aware /proc files. The /sys/fs/cgroup part is slowly phased out
  because we now have cgroup namespaces.</changelog>
  <changelog author="jengelh@inai.de" date="1469275200">- Abolish old macro use. Remove ancient %clean section.
  Avoid sh invocation for simple ldconfig calls.</changelog>
  <changelog author="cbrauner@suse.de" date="1472644800">- update lxc to 2.0.4
- add 0001-bdev-use-correct-overlay-module-name.patch
- add 0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
- add 0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
- add 0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
- add 0005-tools-move-rcfile-to-the-common-options-list.patch
- add 0006-tools-set-configfile-after-load_config.patch
- add 0007-doc-add-rcfile-to-common-opts.patch
- add 0008-doc-Update-Korean-lxc-attach-1.patch
- add 0009-doc-Add-rcfile-to-Korean-common-opts.patch
- add 0010-doc-Add-rcfile-to-Japanese-common-opts.patch
- add 0011-tools-use-exit-EXIT_-everywhere.patch
- add 0012-tools-unify-exit-calls-outside-of-main.patch
- add 0013-utils-Add-mips-signalfd-syscall-numbers.patch
- add 0014-seccomp-Implement-MIPS-seccomp-handling.patch
- add 0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
- add 0016-seccomp-fix-strerror.patch
- add 0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
- add 0018-seccomp-add-support-for-s390x.patch
- add 0019-seccomp-remove-double-include-and-order-includes.patch
- add 0020-seccomp-non-functional-changes.patch
- add 0021-templates-use-fd-9-instead-of-200.patch
- add 0022-templates-fedora-requires-openssl-binary.patch
- add 0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
- add 0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
- add 0025-c-r-Fix-pid_t-on-some-arches.patch
- add 0026-templates-Add-mips-hostarch-detection-to-debian.patch
- add 0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch</changelog>
  <changelog author="schwab@suse.de" date="1474286400">- setcap has been moved to /usr/sbin (boo#998326).</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481025600">- CVE-2016-8649: lxc: guest escape via ptrace of lxc-attach (bsc#1010933).
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485259200">- update to version 2.0.7
  This is the seventh bugfix release for LXC 2.0. The main bugfixes in this release are:
  - attach: Close lsm label file descriptor
  - attach: Non-functional changes
  - attach: Simplify lsm_openat()
  - caps: Add lxc_cap_is_set()
  - conf: attach: Save errno across call to close
  - conf: Clearly report to either use drop or keep
  - conf: criu: Add make_anonymous_mount_file()
  - conf: Fix suggest_default_idmap()
  - configure: Add --enable-gnutls option
  - configure: Check for memfd_create()
  - configure: Check whether gettid() is declared
  - configure: Do not allow variable length arrays
  - configure: Remove -Werror=vla
  - configure: Use AC_HEADER_MAJOR to detect major()/minor()/makedev()
  - conf: Non-functional changes
  - conf: Remove thread-unsafe strsignal + improve log
  - init: Add cgroupfs-mount to Should-Start/Stop sysvinit LSB headers
  - log: Add lxc_unix_epoch_to_utc()
  - log: Annotate lxc_unix_epoch_to_utc()
  - log: Drop all timezone conversion functions
  - log: Make sure that date is correctly formatted
  - log: Use lxc_unix_epoch_to_utc()
  - log: Use N/A if getpid() != gettid() when threaded
  - log: Use thread-safe localtime_r()
  - lvm: Supress warnings about leaked files
  - lxccontainer: Log failure to send sig to init pid
  - monitor: Add more logging
  - monitor: Close mainloop on exit if we opened it
  - monitor: Improve log + set log level to DEBUG
  - monitor: Log which pipe fd is currently used
  - monitor: Make lxc-monitord async signal safe
  - monitor: Non-functional changes
  - python3-lxc: Fix api_test.py on s390x
  - start: Check for CAP_SETGID before setgroups()
  - start: Fix execute and improve setgroups() calls
  - state: Use async signal safe fun in lxc_wait()
  - templates: lxc-debian: Don't try to get stuff from /usr/lib/systemd on the host
  - templates: lxc-debian: Fix getty service startup
  - templates: lxc-debian: Fix typo in calling dpkg with --print-foreign-architectures option
  - templates: lxc-debian: Handle ppc hostarch -&gt; powerpc
  - templates: lxc-opensuse: Change openSUSE default release to Leap 42.2
  - templates: lxc-opensuse: Remove libgcc_s1
  - templates: lxc-opensuse: Remove poweroff.target -&gt; sigpwr.target copy
  - templates: lxc-opensuse: Set to be unconfined by AppArmor
  - templates: lxc-opensuse: Update for Leap 42.2
  - tests; Don't cause test failures on cleanup errors
  - tests: Skip unpriv tests on broken overlay module
  - tools: Improve logging
  - tools: lxc-start: Remove c-&gt;is_defined(c) check
  - tools: lxc-start: Set configfile after load_config
  - tools: Only check for O_RDONLY
  - tree-wide: Random macro cleanups
  - tree-wide: Remove any variable length arrays
  - tree-wide: Sic semper assertis!
  - utils: Add macro __LXC_NUMSTRLEN
  - utils: Add uid, gid, group convenience wrappers
- commented out the patches, as they no longer apply cleanly</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485518400">- all patches (00*.patch) are upstream already, thus deleted; patch lxc-aa_allow_incomplete-default.patch is now reworked and added as a drop-in file in /usr/share/lxc/config/common.conf.d/
  0001-bdev-use-correct-overlay-module-name.patch
  0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
  0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
  0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
  0005-tools-move-rcfile-to-the-common-options-list.patch
  0006-tools-set-configfile-after-load_config.patch
  0007-doc-add-rcfile-to-common-opts.patch
  0008-doc-Update-Korean-lxc-attach-1.patch
  0009-doc-Add-rcfile-to-Korean-common-opts.patch
  0010-doc-Add-rcfile-to-Japanese-common-opts.patch
  0011-tools-use-exit-EXIT_-everywhere.patch
  0012-tools-unify-exit-calls-outside-of-main.patch
  0013-utils-Add-mips-signalfd-syscall-numbers.patch
  0014-seccomp-Implement-MIPS-seccomp-handling.patch
  0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
  0016-seccomp-fix-strerror.patch
  0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
  0018-seccomp-add-support-for-s390x.patch
  0019-seccomp-remove-double-include-and-order-includes.patch
  0020-seccomp-non-functional-changes.patch
  0021-templates-use-fd-9-instead-of-200.patch
  0022-templates-fedora-requires-openssl-binary.patch
  0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
  0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
  0025-c-r-Fix-pid_t-on-some-arches.patch
  0026-templates-Add-mips-hostarch-detection-to-debian.patch
  0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch
  lxc-aa_allow_incomplete-default.patch
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490788800">- backported two patches to get the package to build again for Tumbleweed
  (applied only on tumbleweed aka suse_version &gt;1315)
  0001-tree-wide-include-sys-sysmacros.h-directly.patch
  0002-tree-wide-include-sys-sysmacros.h-directly.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490875200">- fix for boo#1028264
  added patch 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Replace %__cp by cp</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1494936000">- Update to version 2.0.8
  * Security fix for CVE-2017-5985
  * All templates have been updated to not set default passwords anymore, instead requiring lxc-attach be used to configure users.
  * This may affect some automated environments that were relying on our default (very much insecure) users.
  Bugfixes:
    Make lxc-start-ephemeral Python 3.2-compatible
    Fix typo
    Allow build without sys/capability.h
    lxc-opensuse: fix default value for release code
    util: always malloc for setproctitle
    util: update setproctitle comments
    confile: clear lxc.network..ipv{4,6} when empty
    lxc_setup_tios(): Ignore SIGTTOU and SIGTTIN signals
    Make lxc-net return non-zero on failure
    seccomp: allow x32 guests on amd64 hosts.
    Add HAVE_LIBCAP
    c/r: only supply --ext-mount-map for bind mounts
    Added 'mkdir -p' functionality in create_or_remove_cgroup
    Use LXC_ROOTFS_MOUNT in clonehostname hook
    squeeze is not a supported release anymore, drop the key
    start: dumb down SIGCHLD from WARN() to NOTICE()
    log: fix lxc_unix_epoch_to_utc()
    cgfsng: make trim() safer
    seccomp: set SCMP_FLTATR_ATL_TSKIP if available
    lxc-user-nic: re-order #includes
    lxc-user-nic: improve + bugfix
    lxc-user-nic: delete link on failure
    conf: only try to delete veth when privileged
    Fix lxc-containers to support multiple bridges
    Fix mixed tab/spaces in previous patch
    lxc-alpine: use dl-cdn.a.o as default mirror instead of random one
    lxc-checkconfig: verify new[ug]idmap are setuid-root
    [templates] archlinux: resolve conflicting files
    [templates] archlinux: noneed default_timezone variable
    python3: Deal with potential NULL char*
    lxc-download.in / allow setting keyserver from env
    lxc-download.in / Document keyserver change in help
    Change variable check to match existing style
    tree-wide: include directly
    conf/ile: make sure buffer is large enough
    tree-wide: include directly
    tests: Support running on IPv6 networks
    tests: Kill containers (don't wait for shutdown)
    Fix opening wrong file in suggest_default_idmap
    do not set the root password in the debian template
    do not set insecure passwords
    don't set a default password for altlinux, gentoo, openmandriva and pld
    tools: exit with return code of lxc_execute()
    Keep veth.pair.name on network shutdown
    Makefile: fix static clang init.lxc build
    Avoid waiting for bridge interface if disabled in sysconfig/lxc | lxc-net via USE_LXC_BRIDGE
    Increased buffer length in print_stats()
    avoid assigning to a variable which is not POSIX shell proof (bug #1498)
    remove obsolete note about api stability
    conf: less error prone pointer access
    conf: lxc_map_ids() non-functional changes
    caps: add lxc_{proc,file}_cap_is_set()
    conf: check for {filecaps,setuid} on new{g,u}idmap
    conf: improve log when mounting rootfs
    ls: simplify the judgment condition when list active containers
    fix typo introduced in #1509
    attach|unshare: fix the wrong comment
    caps: skip file capability checks on android
    autotools: check for cap_get_file
    caps: return false if caps are not supported
    conf: non-functional changes to setup_pts()
    conf: use bind-mount for /dev/ptmx
    conf: non-functional changes
    utils: use loop device helpers from LXD
    create ISSUE_TEMPLATE.md
    cgroups: improve cgfsng debugging
    issue template: fix typo
    conf: close fd in lxc_setup_devpts()
    conf: non-functional changes
    utils: tweak lxc_mount_proc_if_needed()
    Change sshd template to work with Ubuntu 17.04
    conf: order mount options
    conf: add MS_LAZYTIME to mount options
    monitor: report errno on exec() error
    af unix: allow for maximum socket name
    commands: avoid NULL pointer dereference
    commands: non-functional changes
    lxccontainer: avoid NULL pointer dereference
    monitor: simplify abstract socket logic
    precise is not the latest LTS, let's use xenial instead
    fix the wrong exit status
    conf: non-functional changes lxc_fill_autodev()
    conf: remove /dev/console from lxc_fill_autodev()
    conf: non-functional changes lxc_setup()
    conf: non-functional changes to console functions
    conf: improve lxc_setup_dev_console()
    conf: lxc_setup_ttydir_console()
    config: remove /dev/console bind mount
    doc: document console behavior
    utils: add lxc_unstack_mountpoint()
    conf: unstack all mounts atop /dev/console
    console: fail when we cannot allocate peer tty
    start: remove umount2()
    conf: non-functional changes
    utils: handle &gt; 2^31 in lxc_unstack_mountpoint()
    Install systemd units for CentOS
    Merge ubuntu and debiancase
    start: add crucial details about lxc_spawn()
- Deleted patches that have been backported before:
  - 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch
  - 0001-tree-wide-include-sys-sysmacros.h-directly.patch
  - 0002-tree-wide-include-sys-sysmacros.h-directly.patch
- added signature verification</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1499169600">- added workaround for #bsc1041291 to allow builds on Tumbleweed with gcc7, until this bug in gcc7 is fixed...</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094400">- added correct reload of apparmor to %post</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094401">- added Requires for apparmor-abstractions and BuildRequires for apparmor-rpm-macros to apply the fix for boo#1036360</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094402">- removed apparmor-rpm-macros again, as it is not needed for the current %post solution</changelog>
  <changelog author="mchandras@suse.de" date="1504267200">- Fix libcap-progs dependency. The 'setcap' binary is located in /sbin
  instead of /usr/sbin but it's best to depend on the actual package
  instead since the location might change in the future.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1505217600">- removed ldconfig from lxc %post section</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1509451200">- update to version 2.0.9
  Bugfixes:
  * apparmor: Allow containers to start in AppArmor namespaces
  * apparmor: Drop useless apparmor denies
  * caps: Move ifndef/define to the top
  * cgfsng: Fail when limits fail to apply
  * cgfsng: Log when we defer to cgfsng
  * cgfsng: Only output debug info when we set cgroup data
  * cgroups: Handle hybrid cgroup layouts
  * cgroups: Use tight scoping
  * cgroups: Workaround gcc-7 bug
  * commands: Abstract cmd socket handling + logging
  * commands: Add missing translation
  * commands: Delete meaningless comments
  * commands: Handle EINTR
  * commands: Make state server interface flexible
  * commands: Move lxc_make_abstract_socket_name()
  * commands: Rename to lxc_cmd_add_state_client()
  * commonds: Fix typo
  * conf: Adapt to lxc-user-nic usage
  * conf: Add lxc_get_idmaps()
  * conf: Add userns_exec_full()
  * conf: Allow to clear all config items
  * conf: Allow to get lxc.autodev
  * conf: Allow to get lxc.haltsignal
  * conf: Allow to get lxc.kmsg
  * conf: Allow to get lxc.rebootsignal
  * conf: Allow to get lxc.stopsignal
  * conf: Allow writing uid mappings with euid != 0
  * conf: Avoid double-frees in userns_exec_1()
  * conf: Clear lxc.include
  * conf: Do not check for empty value twice
  * conf: Do not check union on wrong net type
  * conf: Do not deref null pointer
  * conf: Do not free static memory
  * conf: Do not log uninitialized memory
  * conf: Do not write out trailing spaces
  * conf: Don't send ttys when none are configured
  * conf: Dump lxc_get_config_item()
  * conf: Error out on too many mappings
  * conf: Fix bionic builds
  * conf: Fix build without libcap
  * conf: Fix tty creation
  * conf: Fix userns_exec_1()
  * conf: Free netdev-&gt;downscript
  * conf: Implement config item clear callback
  * conf: Improve lxc_map_ids()
  * conf: Improve tty shifting function
  * conf: Improve write_id_mapping()
  * conf: Increase lxc-user-nic buffer
  * conf: Log lxc-user-nic output
  * conf: lxc_listconfigs -&gt; lxc_list_config_items
  * conf: Move clearing config items into one place
  * conf: Non-functional changes
  * conf: NOTICE() on mounts on container's /dev
  * conf: Performance tweaks
  * conf: Preserve newlines
  * conf: Properly parse lxc.idmap entries
  * conf: Record idmap that gets written
  * conf: Refactoring of most config parsing code
  * conf: Refactor network deletion
  * conf: Remove dead assignments in parse_idmaps()
  * conf: Remove dead mount code
  * conf: Rework lxc_map_ids()
  * conf: Rework userns_exec_1()
  * conf: Send ttys in batches of 2
  * conf: Switch API to new callback system
  * conf: Use a minimal {g,u}id map
  * conf: Use correct check on char array
  * conf: Use run_command for lxc-usernsexec
  * console: Clean tty state + return 0 on peer exit
  * console: DO NOT add the handles of adjust winsize when the 'stdin' is not a tty
  * console: Fix memory leak of 'lxc_tty_state'
  * console: Remove dead assignments
  * core: Do remount with the MS_REMOUNT flag when mounts with MS_RDONLY
  * core: Fix a format string build failure on x32
  * core: Fix includes for Android
  * core: Fix memory and resource leak
  * core: Fix some cppcheck warnings
  * core: Fix the bug of 'ts-&gt;stdoutfd' did not fill with parameters 'stdoutfd'
  * core: Include custom mntent for Android
  * core: Log function called in userns_exec_1()
  * core: Remove the __func__ macro
  * core: Remove the unused macro
  * core: Replace "priority" with "level"
  * core: Revert "Add a prefix to the lxc.pc"
  * core: root -&gt; am_root
  * core: struct bdev -&gt; struct lxc_storage
  * core: Update .gitignore
  * core: Use strerror(errno) instead of %m
  * criu: Add cmp_version()
  * criu: Use correct check initialization check
  * doc: Add CII Best Practices badge to README
  * doc: Add console behavior to Japanese lxc.container.conf(5)
  * doc: Document missing env variables
  * doc: Fix regex-typo in Japanese and Korean lxc-monitor(1)
  * doc: Fix regex-typo in lxc-monitor.sgml.in
  * doc: Reword id mapping restrictions when unpriv
  * doc: Rework README
  * doc: Tweak Japanese lxc.container.conf(5)
  * doc: Tweak lxc.container.conf a little
  * doc: Untabify Japanese lxc.container.conf(5)
  * doc: Update API documentation for get_config_item
  * execute: Enable console &amp; standard /dev symlinks
  * init: Add comment for exclude 32 and 33 signals
  * init: Adjust include statements
  * init: Become session leader
  * init: Move initialization of act to outside of the loop
  * init: Report exec*() failure
  * init: Use lxc-stop to stop systemd service
  * liblxc: Make sure memory is free()ed
  * liblxc: Only spawn monitord on demand
  * liblxc: Remove 5s timeout on error
  * liblxc: Use snprintf()
  * liblxc: Use userns_exec_full()
  * lock: Non-functional changes
  * lock: Return the right error when open lock file failed
  * log: Prevent stack smashing
  * log: Switch to a new lxc_log_init function
  * monitor: Abstract lxc_abstract_unix_{send,recv}_fd for af_unix
  * monitor: Add lxc_cmd_state_server()
  * monitor: Add TRACE()ers
  * monitor: Delete unneccessory include file
  * monitor: Remove dead assignments
  * monitor: Remove the workaround-code for lxc_abstract_unix_connect
  * monitor: Remove unlink operation for af_unix
  * network: Add arg to config clear method
  * network: Add data arg to set callback
  * network: Add ifindex field for host veth device
  * network: Add lxc_log_configured_netdevs()
  * network: Add missing checks for empty links
  * network: Add network counter
  * network: Add warning when ignoring MTU
  * network: Clear ifindeces
  * network: Delete ovs for unprivileged networks
  * network: Document all fields in struct lxc_netdev
  * network: Don't delete net devs we didn't create
  * network: Fix grammar
  * network: Implement lxc_get_netdev_by_idx()
  * network: Log cleanup thread pid for openswitch
  * network: Log ifindex
  * network: Log ifindex for host side veth device
  * network: Log veth_attr.pair and veth_attr.veth1
  * network: Move config_value_empty() to confile_utils
  * network: Perform network validation at creation time
  * network: Remove allocation from lxc_mkifname()
  * network: Remove dead assignments
  * network: Remove netpipe
  * network: Retrieve correct names and ifindices
  * network: Retrieve the host's veth device ifindex
  * network: Rework network creation
  * network: Send ifindex for unpriv networks
  * network: Stop recording saved physical net devices
  * network: Use correct network device name
  * network: Use send()/recv()
  * network: Use single helper to delete networks
  * network: Use static memory for net device names
  * openvswitch: Delete ports intelligently
  * seccomp: Export the seccomp filter after load it into kernel successful
  * seccomp: Print action name in log
  * seccomp: s/n-new-privs/no-new-privs/g
  * seccomp: Update comment for function parse_config
  * start: Add lxc_free_handler()
  * start: Add lxc_init_handler()
  * start: Document all handler fields
  * start: Don't call lxc_map_ids() without id map
  * start: Don't close inherited namespace fds
  * start: Don't let data_sock users close the fd
  * start: Dup std{in,out,err} to pty slave
  * start: Ensure cgroups are cleaned up
  * start: Generalize lxc_check_inherited()
  * start: Log sending and receiving of tty fds
  * start: lxc_setup() after unshare(CLONE_NEWCGROUP)
  * start: Move env setup before container setup
  * start: Pass LXC_LOG_LEVEL to hooks
  * start: Pin rootfs when privileged
  * start: Remove dead variable
  * start: Send state to legacy lxc-monitord state server even if no state clients registered
  * start: Set environment variables correctly
  * start: Switch from SOCK_DGRAM to SOCK_STREAM
  * start: Switch ids at last possible instance
  * start: Use separate socket on daemonized start
  * start: Use userns_exec_full()
  * state: Remove lxc_rmstate declaration
  * storage: Add storage_utils.{c.h}
  * storage: Avoid segfault
  * storage: Default to orig type on identical paths
  * storage: Record output from mkfs.*
  * storage: Rename files "bdev" -&gt; "storage"
  * storage: Use userns_exec_full()
  * storage/dir: Using 'add-required_remount_flags' function to add required flags
  * storage/loop: Detect loop file
  * storage/overlayfs: Fix wrong path
  * storage/overlay: Handle overlay for stable 2.0
  * template: Remove obsolete bind-mounts from userns.conf
  * template: Use "rsync -SHaAX" to copy the cached rootfs into place
  * template/alpine: Add support for ppc64le
  * template/alpine: Change file check to also check file size (-f =&gt; -s)
  * template/archlinux: Change locale "en-US.UTF-8" to "en_US.UTF-8"
  * template/centos: Add cronie to the pkg list
  * template/centos: Use altarch mirror for CentOS on arches other than i386 and x86_64
  * template/debian: Add aarch64 -&gt; arm64 mapping
  * template/debian: Add buster as a valid release
  * template/debian: Don't force getty@ configuration
  * template/debian: Use deb.debian.org as the default Debian mirror
  * template/download: Fix syntax error
  * template/download: Sanitize script with shellcheck
  * template/opensuse: Add Tumbleweed as supported release
  * template/opensuse: Fix tumbleweed software selection
  * template/opensuse: getty.target.wants does not always exists
  * template/opensuse: Support leap 42.3
  * template/opensuse: Tumbleweed has no update repo
  * template/plamo: Delete unnecessary process during container shutdown
  * template/ubuntu: Check that there is netplan binary, rather than just just a config directory
  * template/ubuntu: Conditionally move upstart ssh job, as it is now optional
  * template/ubuntu: Support netplan in newer releases by default
  * tests: Adapt lxc-user-nic tests to new syntax
  * tests: Add corner-case tests for lxc_safe_{u}int()
  * tests: Add item clear and config file tests
  * tests: Add test script to test the ro option of lxc.rootfs.options
  * tests: Add unit tests for idmap parser
  * tests: Avoid NULL pointer dereference
  * tests: Compare return value to expected value whenever we can
  * tests: Define a network before checks
  * tests: Don't fail when no processes for the user exist
  * tests: Enforce all methods for config items
  * tests: Remove dead assignments
  * tests: Remove the temp container directory
  * tests: Shortlived daemonized containers
  * tests: Support systemd hybrid cgroups
  * tools: Add additional cgroup checks
  * tools: Print "-devel" when LXC_DEVEL is true
  * tools: Use "which"
  * tools/lxc-attach: Allow for situations without /dev/tty
  * tools/lxc-checkconfig: Add CONFIG_NETFILTER_XT_MATCH_COMMENT
  * tools/lxc-checkconfig: Add probe status checking
  * tools/lxc-execute: Print error message when failed
  * tools/lxc-ls: Return all containers by default
  * tools/lxc-monitord: Exit when receiving a quit command
  * tools/lxc-unshare: Do not pass NULL pointer
  * tools/lxc-user-nic: Add new {create,delete} subcommands
  * tools/lxc-user-nic: Check db before trying to delete
  * tools/lxc-user-nic: Fix adding database entries
  * tools/lxc-user-nic: Fix memleak
  * tools/lxc-user-nic: Free memory and check for error
  * tools/lxc-user-nic: Initialize vars to silence gcc-7
  * tools/lxc-user-nic: Keep lines from other {users,links}
  * tools/lxc-user-nic: Remove delta between master + stable
  * tools/lxc-user-nic: Remove double initialization
  * tools/lxc-user-nic: Rework renaming net devices
  * tools/lxc-user-nic: Simplify logic
  * tools/lxc-user-nic: Test privilege over netns on delete
  * tools/lxc-usernsexec: Remove dead assignments
  * travis: Fix builds
  * utils: Add has_fs_type() + is_fs_type()
  * utils: Add lxc_nic_exists()
  * utils: Add lxc_safe_ulong()
  * utils: Add run_command
  * utils: Close parent end in child process after fork
  * utils: Do not write to 0 sized buffer
  * utils: Duplicate stderr as well in lxc_popen()
  * utils: Fix lxc_mount_proc_if_needed()
  * utils: Fix lxc_popen()/lxc_pclose()
  * utils: Fix mem leak with realpath
  * utils: Fix num parsing functions
  * utils: Fix ppc64le builds
  * utils: Fix the way to detect blocking signal
  * utils: lxc_popen() remove dead assignments
  * utils: Move helpers from cgfsng.c to utils.{c,h}
  * utils: Rework lxc_deslashify()
  * utils: Switch to has_fs_type()
  * utils: Use 1LU otherwise we overflow
  * utils: Use access instead of stat</changelog>
  <changelog author="mchandras@suse.de" date="1532001600">- Add upstream patch to fix container start up problems when AppArmor
  is enabled (boo#1099239)
  * 0001-apparmor-Allow-usr-lib-paths-for-mount-and-pivot_roo.patch</changelog>
</package>
<package pkgid="baf95f29fd7e67fae6e985e7ab51e15585cca372c29a8bc891158488e9cce6a4" name="lxc" arch="src">
  <version epoch="0" ver="2.0.9" rel="lp150.2.6.1"/>
  <changelog author="cbrauner@suse.de" date="1468065600">- add lxcfs dependency: lxc relies on lxcfs for a long time now to provide
  container aware /proc files. The /sys/fs/cgroup part is slowly phased out
  because we now have cgroup namespaces.</changelog>
  <changelog author="jengelh@inai.de" date="1469275200">- Abolish old macro use. Remove ancient %clean section.
  Avoid sh invocation for simple ldconfig calls.</changelog>
  <changelog author="cbrauner@suse.de" date="1472644800">- update lxc to 2.0.4
- add 0001-bdev-use-correct-overlay-module-name.patch
- add 0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
- add 0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
- add 0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
- add 0005-tools-move-rcfile-to-the-common-options-list.patch
- add 0006-tools-set-configfile-after-load_config.patch
- add 0007-doc-add-rcfile-to-common-opts.patch
- add 0008-doc-Update-Korean-lxc-attach-1.patch
- add 0009-doc-Add-rcfile-to-Korean-common-opts.patch
- add 0010-doc-Add-rcfile-to-Japanese-common-opts.patch
- add 0011-tools-use-exit-EXIT_-everywhere.patch
- add 0012-tools-unify-exit-calls-outside-of-main.patch
- add 0013-utils-Add-mips-signalfd-syscall-numbers.patch
- add 0014-seccomp-Implement-MIPS-seccomp-handling.patch
- add 0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
- add 0016-seccomp-fix-strerror.patch
- add 0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
- add 0018-seccomp-add-support-for-s390x.patch
- add 0019-seccomp-remove-double-include-and-order-includes.patch
- add 0020-seccomp-non-functional-changes.patch
- add 0021-templates-use-fd-9-instead-of-200.patch
- add 0022-templates-fedora-requires-openssl-binary.patch
- add 0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
- add 0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
- add 0025-c-r-Fix-pid_t-on-some-arches.patch
- add 0026-templates-Add-mips-hostarch-detection-to-debian.patch
- add 0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch</changelog>
  <changelog author="schwab@suse.de" date="1474286400">- setcap has been moved to /usr/sbin (boo#998326).</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481025600">- CVE-2016-8649: lxc: guest escape via ptrace of lxc-attach (bsc#1010933).
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485259200">- update to version 2.0.7
  This is the seventh bugfix release for LXC 2.0. The main bugfixes in this release are:
  - attach: Close lsm label file descriptor
  - attach: Non-functional changes
  - attach: Simplify lsm_openat()
  - caps: Add lxc_cap_is_set()
  - conf: attach: Save errno across call to close
  - conf: Clearly report to either use drop or keep
  - conf: criu: Add make_anonymous_mount_file()
  - conf: Fix suggest_default_idmap()
  - configure: Add --enable-gnutls option
  - configure: Check for memfd_create()
  - configure: Check whether gettid() is declared
  - configure: Do not allow variable length arrays
  - configure: Remove -Werror=vla
  - configure: Use AC_HEADER_MAJOR to detect major()/minor()/makedev()
  - conf: Non-functional changes
  - conf: Remove thread-unsafe strsignal + improve log
  - init: Add cgroupfs-mount to Should-Start/Stop sysvinit LSB headers
  - log: Add lxc_unix_epoch_to_utc()
  - log: Annotate lxc_unix_epoch_to_utc()
  - log: Drop all timezone conversion functions
  - log: Make sure that date is correctly formatted
  - log: Use lxc_unix_epoch_to_utc()
  - log: Use N/A if getpid() != gettid() when threaded
  - log: Use thread-safe localtime_r()
  - lvm: Supress warnings about leaked files
  - lxccontainer: Log failure to send sig to init pid
  - monitor: Add more logging
  - monitor: Close mainloop on exit if we opened it
  - monitor: Improve log + set log level to DEBUG
  - monitor: Log which pipe fd is currently used
  - monitor: Make lxc-monitord async signal safe
  - monitor: Non-functional changes
  - python3-lxc: Fix api_test.py on s390x
  - start: Check for CAP_SETGID before setgroups()
  - start: Fix execute and improve setgroups() calls
  - state: Use async signal safe fun in lxc_wait()
  - templates: lxc-debian: Don't try to get stuff from /usr/lib/systemd on the host
  - templates: lxc-debian: Fix getty service startup
  - templates: lxc-debian: Fix typo in calling dpkg with --print-foreign-architectures option
  - templates: lxc-debian: Handle ppc hostarch -&gt; powerpc
  - templates: lxc-opensuse: Change openSUSE default release to Leap 42.2
  - templates: lxc-opensuse: Remove libgcc_s1
  - templates: lxc-opensuse: Remove poweroff.target -&gt; sigpwr.target copy
  - templates: lxc-opensuse: Set to be unconfined by AppArmor
  - templates: lxc-opensuse: Update for Leap 42.2
  - tests; Don't cause test failures on cleanup errors
  - tests: Skip unpriv tests on broken overlay module
  - tools: Improve logging
  - tools: lxc-start: Remove c-&gt;is_defined(c) check
  - tools: lxc-start: Set configfile after load_config
  - tools: Only check for O_RDONLY
  - tree-wide: Random macro cleanups
  - tree-wide: Remove any variable length arrays
  - tree-wide: Sic semper assertis!
  - utils: Add macro __LXC_NUMSTRLEN
  - utils: Add uid, gid, group convenience wrappers
- commented out the patches, as they no longer apply cleanly</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485518400">- all patches (00*.patch) are upstream already, thus deleted; patch lxc-aa_allow_incomplete-default.patch is now reworked and added as a drop-in file in /usr/share/lxc/config/common.conf.d/
  0001-bdev-use-correct-overlay-module-name.patch
  0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
  0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
  0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
  0005-tools-move-rcfile-to-the-common-options-list.patch
  0006-tools-set-configfile-after-load_config.patch
  0007-doc-add-rcfile-to-common-opts.patch
  0008-doc-Update-Korean-lxc-attach-1.patch
  0009-doc-Add-rcfile-to-Korean-common-opts.patch
  0010-doc-Add-rcfile-to-Japanese-common-opts.patch
  0011-tools-use-exit-EXIT_-everywhere.patch
  0012-tools-unify-exit-calls-outside-of-main.patch
  0013-utils-Add-mips-signalfd-syscall-numbers.patch
  0014-seccomp-Implement-MIPS-seccomp-handling.patch
  0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
  0016-seccomp-fix-strerror.patch
  0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
  0018-seccomp-add-support-for-s390x.patch
  0019-seccomp-remove-double-include-and-order-includes.patch
  0020-seccomp-non-functional-changes.patch
  0021-templates-use-fd-9-instead-of-200.patch
  0022-templates-fedora-requires-openssl-binary.patch
  0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
  0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
  0025-c-r-Fix-pid_t-on-some-arches.patch
  0026-templates-Add-mips-hostarch-detection-to-debian.patch
  0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch
  lxc-aa_allow_incomplete-default.patch
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490788800">- backported two patches to get the package to build again for Tumbleweed
  (applied only on tumbleweed aka suse_version &gt;1315)
  0001-tree-wide-include-sys-sysmacros.h-directly.patch
  0002-tree-wide-include-sys-sysmacros.h-directly.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490875200">- fix for boo#1028264
  added patch 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Replace %__cp by cp</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1494936000">- Update to version 2.0.8
  * Security fix for CVE-2017-5985
  * All templates have been updated to not set default passwords anymore, instead requiring lxc-attach be used to configure users.
  * This may affect some automated environments that were relying on our default (very much insecure) users.
  Bugfixes:
    Make lxc-start-ephemeral Python 3.2-compatible
    Fix typo
    Allow build without sys/capability.h
    lxc-opensuse: fix default value for release code
    util: always malloc for setproctitle
    util: update setproctitle comments
    confile: clear lxc.network..ipv{4,6} when empty
    lxc_setup_tios(): Ignore SIGTTOU and SIGTTIN signals
    Make lxc-net return non-zero on failure
    seccomp: allow x32 guests on amd64 hosts.
    Add HAVE_LIBCAP
    c/r: only supply --ext-mount-map for bind mounts
    Added 'mkdir -p' functionality in create_or_remove_cgroup
    Use LXC_ROOTFS_MOUNT in clonehostname hook
    squeeze is not a supported release anymore, drop the key
    start: dumb down SIGCHLD from WARN() to NOTICE()
    log: fix lxc_unix_epoch_to_utc()
    cgfsng: make trim() safer
    seccomp: set SCMP_FLTATR_ATL_TSKIP if available
    lxc-user-nic: re-order #includes
    lxc-user-nic: improve + bugfix
    lxc-user-nic: delete link on failure
    conf: only try to delete veth when privileged
    Fix lxc-containers to support multiple bridges
    Fix mixed tab/spaces in previous patch
    lxc-alpine: use dl-cdn.a.o as default mirror instead of random one
    lxc-checkconfig: verify new[ug]idmap are setuid-root
    [templates] archlinux: resolve conflicting files
    [templates] archlinux: noneed default_timezone variable
    python3: Deal with potential NULL char*
    lxc-download.in / allow setting keyserver from env
    lxc-download.in / Document keyserver change in help
    Change variable check to match existing style
    tree-wide: include directly
    conf/ile: make sure buffer is large enough
    tree-wide: include directly
    tests: Support running on IPv6 networks
    tests: Kill containers (don't wait for shutdown)
    Fix opening wrong file in suggest_default_idmap
    do not set the root password in the debian template
    do not set insecure passwords
    don't set a default password for altlinux, gentoo, openmandriva and pld
    tools: exit with return code of lxc_execute()
    Keep veth.pair.name on network shutdown
    Makefile: fix static clang init.lxc build
    Avoid waiting for bridge interface if disabled in sysconfig/lxc | lxc-net via USE_LXC_BRIDGE
    Increased buffer length in print_stats()
    avoid assigning to a variable which is not POSIX shell proof (bug #1498)
    remove obsolete note about api stability
    conf: less error prone pointer access
    conf: lxc_map_ids() non-functional changes
    caps: add lxc_{proc,file}_cap_is_set()
    conf: check for {filecaps,setuid} on new{g,u}idmap
    conf: improve log when mounting rootfs
    ls: simplify the judgment condition when list active containers
    fix typo introduced in #1509
    attach|unshare: fix the wrong comment
    caps: skip file capability checks on android
    autotools: check for cap_get_file
    caps: return false if caps are not supported
    conf: non-functional changes to setup_pts()
    conf: use bind-mount for /dev/ptmx
    conf: non-functional changes
    utils: use loop device helpers from LXD
    create ISSUE_TEMPLATE.md
    cgroups: improve cgfsng debugging
    issue template: fix typo
    conf: close fd in lxc_setup_devpts()
    conf: non-functional changes
    utils: tweak lxc_mount_proc_if_needed()
    Change sshd template to work with Ubuntu 17.04
    conf: order mount options
    conf: add MS_LAZYTIME to mount options
    monitor: report errno on exec() error
    af unix: allow for maximum socket name
    commands: avoid NULL pointer dereference
    commands: non-functional changes
    lxccontainer: avoid NULL pointer dereference
    monitor: simplify abstract socket logic
    precise is not the latest LTS, let's use xenial instead
    fix the wrong exit status
    conf: non-functional changes lxc_fill_autodev()
    conf: remove /dev/console from lxc_fill_autodev()
    conf: non-functional changes lxc_setup()
    conf: non-functional changes to console functions
    conf: improve lxc_setup_dev_console()
    conf: lxc_setup_ttydir_console()
    config: remove /dev/console bind mount
    doc: document console behavior
    utils: add lxc_unstack_mountpoint()
    conf: unstack all mounts atop /dev/console
    console: fail when we cannot allocate peer tty
    start: remove umount2()
    conf: non-functional changes
    utils: handle &gt; 2^31 in lxc_unstack_mountpoint()
    Install systemd units for CentOS
    Merge ubuntu and debiancase
    start: add crucial details about lxc_spawn()
- Deleted patches that have been backported before:
  - 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch
  - 0001-tree-wide-include-sys-sysmacros.h-directly.patch
  - 0002-tree-wide-include-sys-sysmacros.h-directly.patch
- added signature verification</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1499169600">- added workaround for #bsc1041291 to allow builds on Tumbleweed with gcc7, until this bug in gcc7 is fixed...</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094400">- added correct reload of apparmor to %post</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094401">- added Requires for apparmor-abstractions and BuildRequires for apparmor-rpm-macros to apply the fix for boo#1036360</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094402">- removed apparmor-rpm-macros again, as it is not needed for the current %post solution</changelog>
  <changelog author="mchandras@suse.de" date="1504267200">- Fix libcap-progs dependency. The 'setcap' binary is located in /sbin
  instead of /usr/sbin but it's best to depend on the actual package
  instead since the location might change in the future.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1505217600">- removed ldconfig from lxc %post section</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1509451200">- update to version 2.0.9
  Bugfixes:
  * apparmor: Allow containers to start in AppArmor namespaces
  * apparmor: Drop useless apparmor denies
  * caps: Move ifndef/define to the top
  * cgfsng: Fail when limits fail to apply
  * cgfsng: Log when we defer to cgfsng
  * cgfsng: Only output debug info when we set cgroup data
  * cgroups: Handle hybrid cgroup layouts
  * cgroups: Use tight scoping
  * cgroups: Workaround gcc-7 bug
  * commands: Abstract cmd socket handling + logging
  * commands: Add missing translation
  * commands: Delete meaningless comments
  * commands: Handle EINTR
  * commands: Make state server interface flexible
  * commands: Move lxc_make_abstract_socket_name()
  * commands: Rename to lxc_cmd_add_state_client()
  * commonds: Fix typo
  * conf: Adapt to lxc-user-nic usage
  * conf: Add lxc_get_idmaps()
  * conf: Add userns_exec_full()
  * conf: Allow to clear all config items
  * conf: Allow to get lxc.autodev
  * conf: Allow to get lxc.haltsignal
  * conf: Allow to get lxc.kmsg
  * conf: Allow to get lxc.rebootsignal
  * conf: Allow to get lxc.stopsignal
  * conf: Allow writing uid mappings with euid != 0
  * conf: Avoid double-frees in userns_exec_1()
  * conf: Clear lxc.include
  * conf: Do not check for empty value twice
  * conf: Do not check union on wrong net type
  * conf: Do not deref null pointer
  * conf: Do not free static memory
  * conf: Do not log uninitialized memory
  * conf: Do not write out trailing spaces
  * conf: Don't send ttys when none are configured
  * conf: Dump lxc_get_config_item()
  * conf: Error out on too many mappings
  * conf: Fix bionic builds
  * conf: Fix build without libcap
  * conf: Fix tty creation
  * conf: Fix userns_exec_1()
  * conf: Free netdev-&gt;downscript
  * conf: Implement config item clear callback
  * conf: Improve lxc_map_ids()
  * conf: Improve tty shifting function
  * conf: Improve write_id_mapping()
  * conf: Increase lxc-user-nic buffer
  * conf: Log lxc-user-nic output
  * conf: lxc_listconfigs -&gt; lxc_list_config_items
  * conf: Move clearing config items into one place
  * conf: Non-functional changes
  * conf: NOTICE() on mounts on container's /dev
  * conf: Performance tweaks
  * conf: Preserve newlines
  * conf: Properly parse lxc.idmap entries
  * conf: Record idmap that gets written
  * conf: Refactoring of most config parsing code
  * conf: Refactor network deletion
  * conf: Remove dead assignments in parse_idmaps()
  * conf: Remove dead mount code
  * conf: Rework lxc_map_ids()
  * conf: Rework userns_exec_1()
  * conf: Send ttys in batches of 2
  * conf: Switch API to new callback system
  * conf: Use a minimal {g,u}id map
  * conf: Use correct check on char array
  * conf: Use run_command for lxc-usernsexec
  * console: Clean tty state + return 0 on peer exit
  * console: DO NOT add the handles of adjust winsize when the 'stdin' is not a tty
  * console: Fix memory leak of 'lxc_tty_state'
  * console: Remove dead assignments
  * core: Do remount with the MS_REMOUNT flag when mounts with MS_RDONLY
  * core: Fix a format string build failure on x32
  * core: Fix includes for Android
  * core: Fix memory and resource leak
  * core: Fix some cppcheck warnings
  * core: Fix the bug of 'ts-&gt;stdoutfd' did not fill with parameters 'stdoutfd'
  * core: Include custom mntent for Android
  * core: Log function called in userns_exec_1()
  * core: Remove the __func__ macro
  * core: Remove the unused macro
  * core: Replace "priority" with "level"
  * core: Revert "Add a prefix to the lxc.pc"
  * core: root -&gt; am_root
  * core: struct bdev -&gt; struct lxc_storage
  * core: Update .gitignore
  * core: Use strerror(errno) instead of %m
  * criu: Add cmp_version()
  * criu: Use correct check initialization check
  * doc: Add CII Best Practices badge to README
  * doc: Add console behavior to Japanese lxc.container.conf(5)
  * doc: Document missing env variables
  * doc: Fix regex-typo in Japanese and Korean lxc-monitor(1)
  * doc: Fix regex-typo in lxc-monitor.sgml.in
  * doc: Reword id mapping restrictions when unpriv
  * doc: Rework README
  * doc: Tweak Japanese lxc.container.conf(5)
  * doc: Tweak lxc.container.conf a little
  * doc: Untabify Japanese lxc.container.conf(5)
  * doc: Update API documentation for get_config_item
  * execute: Enable console &amp; standard /dev symlinks
  * init: Add comment for exclude 32 and 33 signals
  * init: Adjust include statements
  * init: Become session leader
  * init: Move initialization of act to outside of the loop
  * init: Report exec*() failure
  * init: Use lxc-stop to stop systemd service
  * liblxc: Make sure memory is free()ed
  * liblxc: Only spawn monitord on demand
  * liblxc: Remove 5s timeout on error
  * liblxc: Use snprintf()
  * liblxc: Use userns_exec_full()
  * lock: Non-functional changes
  * lock: Return the right error when open lock file failed
  * log: Prevent stack smashing
  * log: Switch to a new lxc_log_init function
  * monitor: Abstract lxc_abstract_unix_{send,recv}_fd for af_unix
  * monitor: Add lxc_cmd_state_server()
  * monitor: Add TRACE()ers
  * monitor: Delete unneccessory include file
  * monitor: Remove dead assignments
  * monitor: Remove the workaround-code for lxc_abstract_unix_connect
  * monitor: Remove unlink operation for af_unix
  * network: Add arg to config clear method
  * network: Add data arg to set callback
  * network: Add ifindex field for host veth device
  * network: Add lxc_log_configured_netdevs()
  * network: Add missing checks for empty links
  * network: Add network counter
  * network: Add warning when ignoring MTU
  * network: Clear ifindeces
  * network: Delete ovs for unprivileged networks
  * network: Document all fields in struct lxc_netdev
  * network: Don't delete net devs we didn't create
  * network: Fix grammar
  * network: Implement lxc_get_netdev_by_idx()
  * network: Log cleanup thread pid for openswitch
  * network: Log ifindex
  * network: Log ifindex for host side veth device
  * network: Log veth_attr.pair and veth_attr.veth1
  * network: Move config_value_empty() to confile_utils
  * network: Perform network validation at creation time
  * network: Remove allocation from lxc_mkifname()
  * network: Remove dead assignments
  * network: Remove netpipe
  * network: Retrieve correct names and ifindices
  * network: Retrieve the host's veth device ifindex
  * network: Rework network creation
  * network: Send ifindex for unpriv networks
  * network: Stop recording saved physical net devices
  * network: Use correct network device name
  * network: Use send()/recv()
  * network: Use single helper to delete networks
  * network: Use static memory for net device names
  * openvswitch: Delete ports intelligently
  * seccomp: Export the seccomp filter after load it into kernel successful
  * seccomp: Print action name in log
  * seccomp: s/n-new-privs/no-new-privs/g
  * seccomp: Update comment for function parse_config
  * start: Add lxc_free_handler()
  * start: Add lxc_init_handler()
  * start: Document all handler fields
  * start: Don't call lxc_map_ids() without id map
  * start: Don't close inherited namespace fds
  * start: Don't let data_sock users close the fd
  * start: Dup std{in,out,err} to pty slave
  * start: Ensure cgroups are cleaned up
  * start: Generalize lxc_check_inherited()
  * start: Log sending and receiving of tty fds
  * start: lxc_setup() after unshare(CLONE_NEWCGROUP)
  * start: Move env setup before container setup
  * start: Pass LXC_LOG_LEVEL to hooks
  * start: Pin rootfs when privileged
  * start: Remove dead variable
  * start: Send state to legacy lxc-monitord state server even if no state clients registered
  * start: Set environment variables correctly
  * start: Switch from SOCK_DGRAM to SOCK_STREAM
  * start: Switch ids at last possible instance
  * start: Use separate socket on daemonized start
  * start: Use userns_exec_full()
  * state: Remove lxc_rmstate declaration
  * storage: Add storage_utils.{c.h}
  * storage: Avoid segfault
  * storage: Default to orig type on identical paths
  * storage: Record output from mkfs.*
  * storage: Rename files "bdev" -&gt; "storage"
  * storage: Use userns_exec_full()
  * storage/dir: Using 'add-required_remount_flags' function to add required flags
  * storage/loop: Detect loop file
  * storage/overlayfs: Fix wrong path
  * storage/overlay: Handle overlay for stable 2.0
  * template: Remove obsolete bind-mounts from userns.conf
  * template: Use "rsync -SHaAX" to copy the cached rootfs into place
  * template/alpine: Add support for ppc64le
  * template/alpine: Change file check to also check file size (-f =&gt; -s)
  * template/archlinux: Change locale "en-US.UTF-8" to "en_US.UTF-8"
  * template/centos: Add cronie to the pkg list
  * template/centos: Use altarch mirror for CentOS on arches other than i386 and x86_64
  * template/debian: Add aarch64 -&gt; arm64 mapping
  * template/debian: Add buster as a valid release
  * template/debian: Don't force getty@ configuration
  * template/debian: Use deb.debian.org as the default Debian mirror
  * template/download: Fix syntax error
  * template/download: Sanitize script with shellcheck
  * template/opensuse: Add Tumbleweed as supported release
  * template/opensuse: Fix tumbleweed software selection
  * template/opensuse: getty.target.wants does not always exists
  * template/opensuse: Support leap 42.3
  * template/opensuse: Tumbleweed has no update repo
  * template/plamo: Delete unnecessary process during container shutdown
  * template/ubuntu: Check that there is netplan binary, rather than just just a config directory
  * template/ubuntu: Conditionally move upstart ssh job, as it is now optional
  * template/ubuntu: Support netplan in newer releases by default
  * tests: Adapt lxc-user-nic tests to new syntax
  * tests: Add corner-case tests for lxc_safe_{u}int()
  * tests: Add item clear and config file tests
  * tests: Add test script to test the ro option of lxc.rootfs.options
  * tests: Add unit tests for idmap parser
  * tests: Avoid NULL pointer dereference
  * tests: Compare return value to expected value whenever we can
  * tests: Define a network before checks
  * tests: Don't fail when no processes for the user exist
  * tests: Enforce all methods for config items
  * tests: Remove dead assignments
  * tests: Remove the temp container directory
  * tests: Shortlived daemonized containers
  * tests: Support systemd hybrid cgroups
  * tools: Add additional cgroup checks
  * tools: Print "-devel" when LXC_DEVEL is true
  * tools: Use "which"
  * tools/lxc-attach: Allow for situations without /dev/tty
  * tools/lxc-checkconfig: Add CONFIG_NETFILTER_XT_MATCH_COMMENT
  * tools/lxc-checkconfig: Add probe status checking
  * tools/lxc-execute: Print error message when failed
  * tools/lxc-ls: Return all containers by default
  * tools/lxc-monitord: Exit when receiving a quit command
  * tools/lxc-unshare: Do not pass NULL pointer
  * tools/lxc-user-nic: Add new {create,delete} subcommands
  * tools/lxc-user-nic: Check db before trying to delete
  * tools/lxc-user-nic: Fix adding database entries
  * tools/lxc-user-nic: Fix memleak
  * tools/lxc-user-nic: Free memory and check for error
  * tools/lxc-user-nic: Initialize vars to silence gcc-7
  * tools/lxc-user-nic: Keep lines from other {users,links}
  * tools/lxc-user-nic: Remove delta between master + stable
  * tools/lxc-user-nic: Remove double initialization
  * tools/lxc-user-nic: Rework renaming net devices
  * tools/lxc-user-nic: Simplify logic
  * tools/lxc-user-nic: Test privilege over netns on delete
  * tools/lxc-usernsexec: Remove dead assignments
  * travis: Fix builds
  * utils: Add has_fs_type() + is_fs_type()
  * utils: Add lxc_nic_exists()
  * utils: Add lxc_safe_ulong()
  * utils: Add run_command
  * utils: Close parent end in child process after fork
  * utils: Do not write to 0 sized buffer
  * utils: Duplicate stderr as well in lxc_popen()
  * utils: Fix lxc_mount_proc_if_needed()
  * utils: Fix lxc_popen()/lxc_pclose()
  * utils: Fix mem leak with realpath
  * utils: Fix num parsing functions
  * utils: Fix ppc64le builds
  * utils: Fix the way to detect blocking signal
  * utils: lxc_popen() remove dead assignments
  * utils: Move helpers from cgfsng.c to utils.{c,h}
  * utils: Rework lxc_deslashify()
  * utils: Switch to has_fs_type()
  * utils: Use 1LU otherwise we overflow
  * utils: Use access instead of stat</changelog>
  <changelog author="mchandras@suse.de" date="1532001600">- Add upstream patch to fix container start up problems when AppArmor
  is enabled (boo#1099239)
  * 0001-apparmor-Allow-usr-lib-paths-for-mount-and-pivot_roo.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1533556800">- 0001-utils-add-LXC_PROC_PID_FD_LEN.patch: prerequisite for applying the
  next patch
- 0001-lxc-user-nic-verify-file-descriptor-stable-2.0.patch: fix information
  leak and possible open() side effects accessible to regular users via
  lxc-user-nic (bsc#988348, CVE-2018-6556)</changelog>
</package>
<package pkgid="0e891f2e61a820cd8ff9b9a50fe4f66f39b43c70d212b41260824f05e0af08f3" name="lxc" arch="x86_64">
  <version epoch="0" ver="2.0.9" rel="lp150.2.6.1"/>
  <changelog author="cbrauner@suse.de" date="1468065600">- add lxcfs dependency: lxc relies on lxcfs for a long time now to provide
  container aware /proc files. The /sys/fs/cgroup part is slowly phased out
  because we now have cgroup namespaces.</changelog>
  <changelog author="jengelh@inai.de" date="1469275200">- Abolish old macro use. Remove ancient %clean section.
  Avoid sh invocation for simple ldconfig calls.</changelog>
  <changelog author="cbrauner@suse.de" date="1472644800">- update lxc to 2.0.4
- add 0001-bdev-use-correct-overlay-module-name.patch
- add 0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
- add 0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
- add 0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
- add 0005-tools-move-rcfile-to-the-common-options-list.patch
- add 0006-tools-set-configfile-after-load_config.patch
- add 0007-doc-add-rcfile-to-common-opts.patch
- add 0008-doc-Update-Korean-lxc-attach-1.patch
- add 0009-doc-Add-rcfile-to-Korean-common-opts.patch
- add 0010-doc-Add-rcfile-to-Japanese-common-opts.patch
- add 0011-tools-use-exit-EXIT_-everywhere.patch
- add 0012-tools-unify-exit-calls-outside-of-main.patch
- add 0013-utils-Add-mips-signalfd-syscall-numbers.patch
- add 0014-seccomp-Implement-MIPS-seccomp-handling.patch
- add 0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
- add 0016-seccomp-fix-strerror.patch
- add 0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
- add 0018-seccomp-add-support-for-s390x.patch
- add 0019-seccomp-remove-double-include-and-order-includes.patch
- add 0020-seccomp-non-functional-changes.patch
- add 0021-templates-use-fd-9-instead-of-200.patch
- add 0022-templates-fedora-requires-openssl-binary.patch
- add 0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
- add 0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
- add 0025-c-r-Fix-pid_t-on-some-arches.patch
- add 0026-templates-Add-mips-hostarch-detection-to-debian.patch
- add 0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch</changelog>
  <changelog author="schwab@suse.de" date="1474286400">- setcap has been moved to /usr/sbin (boo#998326).</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481025600">- CVE-2016-8649: lxc: guest escape via ptrace of lxc-attach (bsc#1010933).
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485259200">- update to version 2.0.7
  This is the seventh bugfix release for LXC 2.0. The main bugfixes in this release are:
  - attach: Close lsm label file descriptor
  - attach: Non-functional changes
  - attach: Simplify lsm_openat()
  - caps: Add lxc_cap_is_set()
  - conf: attach: Save errno across call to close
  - conf: Clearly report to either use drop or keep
  - conf: criu: Add make_anonymous_mount_file()
  - conf: Fix suggest_default_idmap()
  - configure: Add --enable-gnutls option
  - configure: Check for memfd_create()
  - configure: Check whether gettid() is declared
  - configure: Do not allow variable length arrays
  - configure: Remove -Werror=vla
  - configure: Use AC_HEADER_MAJOR to detect major()/minor()/makedev()
  - conf: Non-functional changes
  - conf: Remove thread-unsafe strsignal + improve log
  - init: Add cgroupfs-mount to Should-Start/Stop sysvinit LSB headers
  - log: Add lxc_unix_epoch_to_utc()
  - log: Annotate lxc_unix_epoch_to_utc()
  - log: Drop all timezone conversion functions
  - log: Make sure that date is correctly formatted
  - log: Use lxc_unix_epoch_to_utc()
  - log: Use N/A if getpid() != gettid() when threaded
  - log: Use thread-safe localtime_r()
  - lvm: Supress warnings about leaked files
  - lxccontainer: Log failure to send sig to init pid
  - monitor: Add more logging
  - monitor: Close mainloop on exit if we opened it
  - monitor: Improve log + set log level to DEBUG
  - monitor: Log which pipe fd is currently used
  - monitor: Make lxc-monitord async signal safe
  - monitor: Non-functional changes
  - python3-lxc: Fix api_test.py on s390x
  - start: Check for CAP_SETGID before setgroups()
  - start: Fix execute and improve setgroups() calls
  - state: Use async signal safe fun in lxc_wait()
  - templates: lxc-debian: Don't try to get stuff from /usr/lib/systemd on the host
  - templates: lxc-debian: Fix getty service startup
  - templates: lxc-debian: Fix typo in calling dpkg with --print-foreign-architectures option
  - templates: lxc-debian: Handle ppc hostarch -&gt; powerpc
  - templates: lxc-opensuse: Change openSUSE default release to Leap 42.2
  - templates: lxc-opensuse: Remove libgcc_s1
  - templates: lxc-opensuse: Remove poweroff.target -&gt; sigpwr.target copy
  - templates: lxc-opensuse: Set to be unconfined by AppArmor
  - templates: lxc-opensuse: Update for Leap 42.2
  - tests; Don't cause test failures on cleanup errors
  - tests: Skip unpriv tests on broken overlay module
  - tools: Improve logging
  - tools: lxc-start: Remove c-&gt;is_defined(c) check
  - tools: lxc-start: Set configfile after load_config
  - tools: Only check for O_RDONLY
  - tree-wide: Random macro cleanups
  - tree-wide: Remove any variable length arrays
  - tree-wide: Sic semper assertis!
  - utils: Add macro __LXC_NUMSTRLEN
  - utils: Add uid, gid, group convenience wrappers
- commented out the patches, as they no longer apply cleanly</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485518400">- all patches (00*.patch) are upstream already, thus deleted; patch lxc-aa_allow_incomplete-default.patch is now reworked and added as a drop-in file in /usr/share/lxc/config/common.conf.d/
  0001-bdev-use-correct-overlay-module-name.patch
  0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
  0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
  0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
  0005-tools-move-rcfile-to-the-common-options-list.patch
  0006-tools-set-configfile-after-load_config.patch
  0007-doc-add-rcfile-to-common-opts.patch
  0008-doc-Update-Korean-lxc-attach-1.patch
  0009-doc-Add-rcfile-to-Korean-common-opts.patch
  0010-doc-Add-rcfile-to-Japanese-common-opts.patch
  0011-tools-use-exit-EXIT_-everywhere.patch
  0012-tools-unify-exit-calls-outside-of-main.patch
  0013-utils-Add-mips-signalfd-syscall-numbers.patch
  0014-seccomp-Implement-MIPS-seccomp-handling.patch
  0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
  0016-seccomp-fix-strerror.patch
  0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
  0018-seccomp-add-support-for-s390x.patch
  0019-seccomp-remove-double-include-and-order-includes.patch
  0020-seccomp-non-functional-changes.patch
  0021-templates-use-fd-9-instead-of-200.patch
  0022-templates-fedora-requires-openssl-binary.patch
  0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
  0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
  0025-c-r-Fix-pid_t-on-some-arches.patch
  0026-templates-Add-mips-hostarch-detection-to-debian.patch
  0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch
  lxc-aa_allow_incomplete-default.patch
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490788800">- backported two patches to get the package to build again for Tumbleweed
  (applied only on tumbleweed aka suse_version &gt;1315)
  0001-tree-wide-include-sys-sysmacros.h-directly.patch
  0002-tree-wide-include-sys-sysmacros.h-directly.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490875200">- fix for boo#1028264
  added patch 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Replace %__cp by cp</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1494936000">- Update to version 2.0.8
  * Security fix for CVE-2017-5985
  * All templates have been updated to not set default passwords anymore, instead requiring lxc-attach be used to configure users.
  * This may affect some automated environments that were relying on our default (very much insecure) users.
  Bugfixes:
    Make lxc-start-ephemeral Python 3.2-compatible
    Fix typo
    Allow build without sys/capability.h
    lxc-opensuse: fix default value for release code
    util: always malloc for setproctitle
    util: update setproctitle comments
    confile: clear lxc.network..ipv{4,6} when empty
    lxc_setup_tios(): Ignore SIGTTOU and SIGTTIN signals
    Make lxc-net return non-zero on failure
    seccomp: allow x32 guests on amd64 hosts.
    Add HAVE_LIBCAP
    c/r: only supply --ext-mount-map for bind mounts
    Added 'mkdir -p' functionality in create_or_remove_cgroup
    Use LXC_ROOTFS_MOUNT in clonehostname hook
    squeeze is not a supported release anymore, drop the key
    start: dumb down SIGCHLD from WARN() to NOTICE()
    log: fix lxc_unix_epoch_to_utc()
    cgfsng: make trim() safer
    seccomp: set SCMP_FLTATR_ATL_TSKIP if available
    lxc-user-nic: re-order #includes
    lxc-user-nic: improve + bugfix
    lxc-user-nic: delete link on failure
    conf: only try to delete veth when privileged
    Fix lxc-containers to support multiple bridges
    Fix mixed tab/spaces in previous patch
    lxc-alpine: use dl-cdn.a.o as default mirror instead of random one
    lxc-checkconfig: verify new[ug]idmap are setuid-root
    [templates] archlinux: resolve conflicting files
    [templates] archlinux: noneed default_timezone variable
    python3: Deal with potential NULL char*
    lxc-download.in / allow setting keyserver from env
    lxc-download.in / Document keyserver change in help
    Change variable check to match existing style
    tree-wide: include directly
    conf/ile: make sure buffer is large enough
    tree-wide: include directly
    tests: Support running on IPv6 networks
    tests: Kill containers (don't wait for shutdown)
    Fix opening wrong file in suggest_default_idmap
    do not set the root password in the debian template
    do not set insecure passwords
    don't set a default password for altlinux, gentoo, openmandriva and pld
    tools: exit with return code of lxc_execute()
    Keep veth.pair.name on network shutdown
    Makefile: fix static clang init.lxc build
    Avoid waiting for bridge interface if disabled in sysconfig/lxc | lxc-net via USE_LXC_BRIDGE
    Increased buffer length in print_stats()
    avoid assigning to a variable which is not POSIX shell proof (bug #1498)
    remove obsolete note about api stability
    conf: less error prone pointer access
    conf: lxc_map_ids() non-functional changes
    caps: add lxc_{proc,file}_cap_is_set()
    conf: check for {filecaps,setuid} on new{g,u}idmap
    conf: improve log when mounting rootfs
    ls: simplify the judgment condition when list active containers
    fix typo introduced in #1509
    attach|unshare: fix the wrong comment
    caps: skip file capability checks on android
    autotools: check for cap_get_file
    caps: return false if caps are not supported
    conf: non-functional changes to setup_pts()
    conf: use bind-mount for /dev/ptmx
    conf: non-functional changes
    utils: use loop device helpers from LXD
    create ISSUE_TEMPLATE.md
    cgroups: improve cgfsng debugging
    issue template: fix typo
    conf: close fd in lxc_setup_devpts()
    conf: non-functional changes
    utils: tweak lxc_mount_proc_if_needed()
    Change sshd template to work with Ubuntu 17.04
    conf: order mount options
    conf: add MS_LAZYTIME to mount options
    monitor: report errno on exec() error
    af unix: allow for maximum socket name
    commands: avoid NULL pointer dereference
    commands: non-functional changes
    lxccontainer: avoid NULL pointer dereference
    monitor: simplify abstract socket logic
    precise is not the latest LTS, let's use xenial instead
    fix the wrong exit status
    conf: non-functional changes lxc_fill_autodev()
    conf: remove /dev/console from lxc_fill_autodev()
    conf: non-functional changes lxc_setup()
    conf: non-functional changes to console functions
    conf: improve lxc_setup_dev_console()
    conf: lxc_setup_ttydir_console()
    config: remove /dev/console bind mount
    doc: document console behavior
    utils: add lxc_unstack_mountpoint()
    conf: unstack all mounts atop /dev/console
    console: fail when we cannot allocate peer tty
    start: remove umount2()
    conf: non-functional changes
    utils: handle &gt; 2^31 in lxc_unstack_mountpoint()
    Install systemd units for CentOS
    Merge ubuntu and debiancase
    start: add crucial details about lxc_spawn()
- Deleted patches that have been backported before:
  - 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch
  - 0001-tree-wide-include-sys-sysmacros.h-directly.patch
  - 0002-tree-wide-include-sys-sysmacros.h-directly.patch
- added signature verification</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1499169600">- added workaround for #bsc1041291 to allow builds on Tumbleweed with gcc7, until this bug in gcc7 is fixed...</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094400">- added correct reload of apparmor to %post</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094401">- added Requires for apparmor-abstractions and BuildRequires for apparmor-rpm-macros to apply the fix for boo#1036360</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094402">- removed apparmor-rpm-macros again, as it is not needed for the current %post solution</changelog>
  <changelog author="mchandras@suse.de" date="1504267200">- Fix libcap-progs dependency. The 'setcap' binary is located in /sbin
  instead of /usr/sbin but it's best to depend on the actual package
  instead since the location might change in the future.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1505217600">- removed ldconfig from lxc %post section</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1509451200">- update to version 2.0.9
  Bugfixes:
  * apparmor: Allow containers to start in AppArmor namespaces
  * apparmor: Drop useless apparmor denies
  * caps: Move ifndef/define to the top
  * cgfsng: Fail when limits fail to apply
  * cgfsng: Log when we defer to cgfsng
  * cgfsng: Only output debug info when we set cgroup data
  * cgroups: Handle hybrid cgroup layouts
  * cgroups: Use tight scoping
  * cgroups: Workaround gcc-7 bug
  * commands: Abstract cmd socket handling + logging
  * commands: Add missing translation
  * commands: Delete meaningless comments
  * commands: Handle EINTR
  * commands: Make state server interface flexible
  * commands: Move lxc_make_abstract_socket_name()
  * commands: Rename to lxc_cmd_add_state_client()
  * commonds: Fix typo
  * conf: Adapt to lxc-user-nic usage
  * conf: Add lxc_get_idmaps()
  * conf: Add userns_exec_full()
  * conf: Allow to clear all config items
  * conf: Allow to get lxc.autodev
  * conf: Allow to get lxc.haltsignal
  * conf: Allow to get lxc.kmsg
  * conf: Allow to get lxc.rebootsignal
  * conf: Allow to get lxc.stopsignal
  * conf: Allow writing uid mappings with euid != 0
  * conf: Avoid double-frees in userns_exec_1()
  * conf: Clear lxc.include
  * conf: Do not check for empty value twice
  * conf: Do not check union on wrong net type
  * conf: Do not deref null pointer
  * conf: Do not free static memory
  * conf: Do not log uninitialized memory
  * conf: Do not write out trailing spaces
  * conf: Don't send ttys when none are configured
  * conf: Dump lxc_get_config_item()
  * conf: Error out on too many mappings
  * conf: Fix bionic builds
  * conf: Fix build without libcap
  * conf: Fix tty creation
  * conf: Fix userns_exec_1()
  * conf: Free netdev-&gt;downscript
  * conf: Implement config item clear callback
  * conf: Improve lxc_map_ids()
  * conf: Improve tty shifting function
  * conf: Improve write_id_mapping()
  * conf: Increase lxc-user-nic buffer
  * conf: Log lxc-user-nic output
  * conf: lxc_listconfigs -&gt; lxc_list_config_items
  * conf: Move clearing config items into one place
  * conf: Non-functional changes
  * conf: NOTICE() on mounts on container's /dev
  * conf: Performance tweaks
  * conf: Preserve newlines
  * conf: Properly parse lxc.idmap entries
  * conf: Record idmap that gets written
  * conf: Refactoring of most config parsing code
  * conf: Refactor network deletion
  * conf: Remove dead assignments in parse_idmaps()
  * conf: Remove dead mount code
  * conf: Rework lxc_map_ids()
  * conf: Rework userns_exec_1()
  * conf: Send ttys in batches of 2
  * conf: Switch API to new callback system
  * conf: Use a minimal {g,u}id map
  * conf: Use correct check on char array
  * conf: Use run_command for lxc-usernsexec
  * console: Clean tty state + return 0 on peer exit
  * console: DO NOT add the handles of adjust winsize when the 'stdin' is not a tty
  * console: Fix memory leak of 'lxc_tty_state'
  * console: Remove dead assignments
  * core: Do remount with the MS_REMOUNT flag when mounts with MS_RDONLY
  * core: Fix a format string build failure on x32
  * core: Fix includes for Android
  * core: Fix memory and resource leak
  * core: Fix some cppcheck warnings
  * core: Fix the bug of 'ts-&gt;stdoutfd' did not fill with parameters 'stdoutfd'
  * core: Include custom mntent for Android
  * core: Log function called in userns_exec_1()
  * core: Remove the __func__ macro
  * core: Remove the unused macro
  * core: Replace "priority" with "level"
  * core: Revert "Add a prefix to the lxc.pc"
  * core: root -&gt; am_root
  * core: struct bdev -&gt; struct lxc_storage
  * core: Update .gitignore
  * core: Use strerror(errno) instead of %m
  * criu: Add cmp_version()
  * criu: Use correct check initialization check
  * doc: Add CII Best Practices badge to README
  * doc: Add console behavior to Japanese lxc.container.conf(5)
  * doc: Document missing env variables
  * doc: Fix regex-typo in Japanese and Korean lxc-monitor(1)
  * doc: Fix regex-typo in lxc-monitor.sgml.in
  * doc: Reword id mapping restrictions when unpriv
  * doc: Rework README
  * doc: Tweak Japanese lxc.container.conf(5)
  * doc: Tweak lxc.container.conf a little
  * doc: Untabify Japanese lxc.container.conf(5)
  * doc: Update API documentation for get_config_item
  * execute: Enable console &amp; standard /dev symlinks
  * init: Add comment for exclude 32 and 33 signals
  * init: Adjust include statements
  * init: Become session leader
  * init: Move initialization of act to outside of the loop
  * init: Report exec*() failure
  * init: Use lxc-stop to stop systemd service
  * liblxc: Make sure memory is free()ed
  * liblxc: Only spawn monitord on demand
  * liblxc: Remove 5s timeout on error
  * liblxc: Use snprintf()
  * liblxc: Use userns_exec_full()
  * lock: Non-functional changes
  * lock: Return the right error when open lock file failed
  * log: Prevent stack smashing
  * log: Switch to a new lxc_log_init function
  * monitor: Abstract lxc_abstract_unix_{send,recv}_fd for af_unix
  * monitor: Add lxc_cmd_state_server()
  * monitor: Add TRACE()ers
  * monitor: Delete unneccessory include file
  * monitor: Remove dead assignments
  * monitor: Remove the workaround-code for lxc_abstract_unix_connect
  * monitor: Remove unlink operation for af_unix
  * network: Add arg to config clear method
  * network: Add data arg to set callback
  * network: Add ifindex field for host veth device
  * network: Add lxc_log_configured_netdevs()
  * network: Add missing checks for empty links
  * network: Add network counter
  * network: Add warning when ignoring MTU
  * network: Clear ifindeces
  * network: Delete ovs for unprivileged networks
  * network: Document all fields in struct lxc_netdev
  * network: Don't delete net devs we didn't create
  * network: Fix grammar
  * network: Implement lxc_get_netdev_by_idx()
  * network: Log cleanup thread pid for openswitch
  * network: Log ifindex
  * network: Log ifindex for host side veth device
  * network: Log veth_attr.pair and veth_attr.veth1
  * network: Move config_value_empty() to confile_utils
  * network: Perform network validation at creation time
  * network: Remove allocation from lxc_mkifname()
  * network: Remove dead assignments
  * network: Remove netpipe
  * network: Retrieve correct names and ifindices
  * network: Retrieve the host's veth device ifindex
  * network: Rework network creation
  * network: Send ifindex for unpriv networks
  * network: Stop recording saved physical net devices
  * network: Use correct network device name
  * network: Use send()/recv()
  * network: Use single helper to delete networks
  * network: Use static memory for net device names
  * openvswitch: Delete ports intelligently
  * seccomp: Export the seccomp filter after load it into kernel successful
  * seccomp: Print action name in log
  * seccomp: s/n-new-privs/no-new-privs/g
  * seccomp: Update comment for function parse_config
  * start: Add lxc_free_handler()
  * start: Add lxc_init_handler()
  * start: Document all handler fields
  * start: Don't call lxc_map_ids() without id map
  * start: Don't close inherited namespace fds
  * start: Don't let data_sock users close the fd
  * start: Dup std{in,out,err} to pty slave
  * start: Ensure cgroups are cleaned up
  * start: Generalize lxc_check_inherited()
  * start: Log sending and receiving of tty fds
  * start: lxc_setup() after unshare(CLONE_NEWCGROUP)
  * start: Move env setup before container setup
  * start: Pass LXC_LOG_LEVEL to hooks
  * start: Pin rootfs when privileged
  * start: Remove dead variable
  * start: Send state to legacy lxc-monitord state server even if no state clients registered
  * start: Set environment variables correctly
  * start: Switch from SOCK_DGRAM to SOCK_STREAM
  * start: Switch ids at last possible instance
  * start: Use separate socket on daemonized start
  * start: Use userns_exec_full()
  * state: Remove lxc_rmstate declaration
  * storage: Add storage_utils.{c.h}
  * storage: Avoid segfault
  * storage: Default to orig type on identical paths
  * storage: Record output from mkfs.*
  * storage: Rename files "bdev" -&gt; "storage"
  * storage: Use userns_exec_full()
  * storage/dir: Using 'add-required_remount_flags' function to add required flags
  * storage/loop: Detect loop file
  * storage/overlayfs: Fix wrong path
  * storage/overlay: Handle overlay for stable 2.0
  * template: Remove obsolete bind-mounts from userns.conf
  * template: Use "rsync -SHaAX" to copy the cached rootfs into place
  * template/alpine: Add support for ppc64le
  * template/alpine: Change file check to also check file size (-f =&gt; -s)
  * template/archlinux: Change locale "en-US.UTF-8" to "en_US.UTF-8"
  * template/centos: Add cronie to the pkg list
  * template/centos: Use altarch mirror for CentOS on arches other than i386 and x86_64
  * template/debian: Add aarch64 -&gt; arm64 mapping
  * template/debian: Add buster as a valid release
  * template/debian: Don't force getty@ configuration
  * template/debian: Use deb.debian.org as the default Debian mirror
  * template/download: Fix syntax error
  * template/download: Sanitize script with shellcheck
  * template/opensuse: Add Tumbleweed as supported release
  * template/opensuse: Fix tumbleweed software selection
  * template/opensuse: getty.target.wants does not always exists
  * template/opensuse: Support leap 42.3
  * template/opensuse: Tumbleweed has no update repo
  * template/plamo: Delete unnecessary process during container shutdown
  * template/ubuntu: Check that there is netplan binary, rather than just just a config directory
  * template/ubuntu: Conditionally move upstart ssh job, as it is now optional
  * template/ubuntu: Support netplan in newer releases by default
  * tests: Adapt lxc-user-nic tests to new syntax
  * tests: Add corner-case tests for lxc_safe_{u}int()
  * tests: Add item clear and config file tests
  * tests: Add test script to test the ro option of lxc.rootfs.options
  * tests: Add unit tests for idmap parser
  * tests: Avoid NULL pointer dereference
  * tests: Compare return value to expected value whenever we can
  * tests: Define a network before checks
  * tests: Don't fail when no processes for the user exist
  * tests: Enforce all methods for config items
  * tests: Remove dead assignments
  * tests: Remove the temp container directory
  * tests: Shortlived daemonized containers
  * tests: Support systemd hybrid cgroups
  * tools: Add additional cgroup checks
  * tools: Print "-devel" when LXC_DEVEL is true
  * tools: Use "which"
  * tools/lxc-attach: Allow for situations without /dev/tty
  * tools/lxc-checkconfig: Add CONFIG_NETFILTER_XT_MATCH_COMMENT
  * tools/lxc-checkconfig: Add probe status checking
  * tools/lxc-execute: Print error message when failed
  * tools/lxc-ls: Return all containers by default
  * tools/lxc-monitord: Exit when receiving a quit command
  * tools/lxc-unshare: Do not pass NULL pointer
  * tools/lxc-user-nic: Add new {create,delete} subcommands
  * tools/lxc-user-nic: Check db before trying to delete
  * tools/lxc-user-nic: Fix adding database entries
  * tools/lxc-user-nic: Fix memleak
  * tools/lxc-user-nic: Free memory and check for error
  * tools/lxc-user-nic: Initialize vars to silence gcc-7
  * tools/lxc-user-nic: Keep lines from other {users,links}
  * tools/lxc-user-nic: Remove delta between master + stable
  * tools/lxc-user-nic: Remove double initialization
  * tools/lxc-user-nic: Rework renaming net devices
  * tools/lxc-user-nic: Simplify logic
  * tools/lxc-user-nic: Test privilege over netns on delete
  * tools/lxc-usernsexec: Remove dead assignments
  * travis: Fix builds
  * utils: Add has_fs_type() + is_fs_type()
  * utils: Add lxc_nic_exists()
  * utils: Add lxc_safe_ulong()
  * utils: Add run_command
  * utils: Close parent end in child process after fork
  * utils: Do not write to 0 sized buffer
  * utils: Duplicate stderr as well in lxc_popen()
  * utils: Fix lxc_mount_proc_if_needed()
  * utils: Fix lxc_popen()/lxc_pclose()
  * utils: Fix mem leak with realpath
  * utils: Fix num parsing functions
  * utils: Fix ppc64le builds
  * utils: Fix the way to detect blocking signal
  * utils: lxc_popen() remove dead assignments
  * utils: Move helpers from cgfsng.c to utils.{c,h}
  * utils: Rework lxc_deslashify()
  * utils: Switch to has_fs_type()
  * utils: Use 1LU otherwise we overflow
  * utils: Use access instead of stat</changelog>
  <changelog author="mchandras@suse.de" date="1532001600">- Add upstream patch to fix container start up problems when AppArmor
  is enabled (boo#1099239)
  * 0001-apparmor-Allow-usr-lib-paths-for-mount-and-pivot_roo.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1533556800">- 0001-utils-add-LXC_PROC_PID_FD_LEN.patch: prerequisite for applying the
  next patch
- 0001-lxc-user-nic-verify-file-descriptor-stable-2.0.patch: fix information
  leak and possible open() side effects accessible to regular users via
  lxc-user-nic (bsc#988348, CVE-2018-6556)</changelog>
</package>
<package pkgid="a14a749974ee77d3a68a9def3e44eaa98e08c3de3b42dac66dac029917038fc8" name="lxqt-panel" arch="src">
  <version epoch="0" ver="0.12.0" rel="lp150.2.3.1"/>
  <changelog author="andrea@opensuse.org" date="1399982400">- spec file clean up for factoy</changelog>
  <changelog author="andrea@opensuse.org" date="1399982401">- Build all plugins adding sensors and libstatgrab to buildrequires</changelog>
  <changelog author="sfalken@opensuse.org" date="1412337600">- Added:
  * 0001-fix_plugin_mount.patch
  * 0002-fix_plugin_volume.patch
  * 0003-fix_plugin_worldclock.patch
  * 0004-fix_plugin_kbindicator.patch
  * 0005-fix_plugin_dom.patch
  * Patches added to fix buildfailure caused by undefined references, and new default build flags in cmake (gh#lxde/lxde-qt#288)</changelog>
  <changelog author="andrea@opensuse.org" date="1414238400">- new upstream version 0.8.0</changelog>
  <changelog author="andrea@opensuse.org" date="1415880000">- added lxmenu-data</changelog>
  <changelog author="andrea@opensuse.org" date="1416398400">- fixed license tag</changelog>
  <changelog author="sfalken@opensuse.org" date="1422273600">- Added conditionals to enable Fedora Builds</changelog>
  <changelog author="sfalken@opensuse.org" date="1423483200">- New upstream version 0.9.0
- Added -lang subpackage
- Dropped Patches:
  + lxqt-panel-0.8.0_fix_lxqt-mount_headers.patch
  + lxqt-panel-0.8.0_fix_undefined_reference.patch</changelog>
  <changelog author="sfalken@opensuse.org" date="1424433600">- Changed %build and %include to use cmake macros
- Added Patches:
  + lxqt-panel-0.9.0_fix_lxqtmount_include.patch
  + lxqt-panel-0.9.0_add_libxcb_to_cmakelist.patch</changelog>
  <changelog author="mvetter@suse.com" date="1436443200">- Use correct name "lxqt" instead of "lxde-qt"</changelog>
  <changelog author="mvetter@suse.com" date="1446811200">- Upstream release 0.10.0
  We have to compile it with -DKBINDICATOR_PLUGIN=No -DMOUNT_PLUGIN=No
  for now because we have problems otherwise.
  Deleted patches:
  - lxqt-panel-0.9.0_fix_lxqtmount_include.patch
  - lxqt-panel-0.9.0_add_libxcb_to_cmakelist.patch
  Not needed anymore</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1447070400">- Added no-undefined.patch: include sources which export used functions
- Added xkbcommon-includes.patch: explicitly add include path for
  xkbcommon headers, otherwise they are picked up accidentally
- Enable mount and kbindicator plugins</changelog>
  <changelog author="mvetter@suse.com" date="1450872000">- Use lxmenu-data to have a working panel menu (fonts etc).</changelog>
  <changelog author="mvetter@suse.com" date="1464091200">- Use pkgconfig to require libxkbcommon-x11-devel
- Require lxqt-mount to have mounter option working</changelog>
  <changelog author="dimstar@opensuse.org" date="1464782400">- Add lxqt-panel-xcb-1.12.patch: Fix linking with libxcb-1.12:
  we use xcb symbols by ourselves, so we are also responsible to
  link libxcb.</changelog>
  <changelog author="mvetter@suse.com" date="1474718400">- Update to 0.11.0:
  * Update README.md: Reflect changes introduced in 1c22479
  * CMakeLists: Fail for unmet dependencies
  * mainmenu: Remove setting base style in StyleChange
  * mainmenu: Workaround transparent search
  * mainmenu: Dispose old menu first when building new
  * Add README.md
  * sensors: Add default bar scale
  * sensors: Check for existence of the max value
  * sensors: Add minor code optimization
  * mainmenu: Handle QAction disposal correctly
  * panel: Don't use autoFillBackground
  * Plugin: Fix FTBFS for older Qt versions
  * mainmenu: Fix show/hide actions after menu rebuild
  * Statusnotifier: Remove setParent on StatusNotifierMenu.
  * Add XKB_COMMON_X11_INCLUDE_DIRS
  * panel: Remove/deprecate plugin-screensaver (#363)
  * Add and Update Arabic Translations for Desktop Files
  * Fix updating panel geometry on screen size change
  * panel: Fix screen number config change saving
  * Separate a String for I18N Enhancement
  * plugin: Force config dialog activation/raise
  * plugin: Fix crossreferencing of config dialogs
  * panel: Dispose unneeded menu
  * panel: Destroy panel's config dialog
  * showPopupMenu: Remove extraneous setParent() call (#359)
  * statusnotifier: fix popup position on right click
  * desktopswitch: Take layoutDirection into account
  * taskbar: Remove orientation specific logic for DnD
  * LXQtPanelLayout: Take layoutDirection into account
  * taskbar: Remove forgotten debug
  * taskbar: Consider layoutDirection for DnD
  * panel: Optimize search a bit
  * plugin-volume: Avoid an buffer overflow
  * Respect the OnlyShowIn property for menu entries when using menu-cache (#351)
  * kbindicator-plugin: fix linking with libxcb-1.12
  * plugin-volume: Handle errors when trying to determine the next card
  * Clean up CMakeLists.txt
  * plugin/directorymenu: Removes no use code (#350)
  * build: Forward translations parameters
  * ts-files removal (#346)
  * Fix memory leaks
  * Use const references with the foreach iterator
  * Small fix
  * statusnotifier: Fix showing icons in menu
  * kbindicator: (Re)Add .desktop translations
  * Update desktopswitchconfiguration.ui
  * panel: (Re)Add translations dir
  * Revert unintended *.desktop files removal
  * Remove translations (can be pulled in build time)
  * Use external translations
  * Update lxqt-panel_it.ts
  * Add documentation/comments for PanelPluginsModel.
  * Fix segfault on plugin initialization (#338)
  * translations: updated german translation (#323)
  * plugin-mainmenu: update mainmenu_it.ts (#337)
  * Russian translation update
  * mainmenu: Use style sheet to override icon
  * plugins: Change "repolish" logic
  * mainmenu: Reduce delay of popup when using shortcut
  * volume: Remove debug
  * plugins: Don't unload -&gt; avoid dangling resources
  * Added new translated strings.
  * Added missing context for lupdate.
  * Updated german translation.
  * Ask for confirmation when removing a panel
  * panel: Add "Lock Panel" functionality
  * fix updating panel geometry on screen changes
  * Try find a free position when adding a new panel
  * LXQtPanelApplication: Use D-Pointers
  * Animate auto-hiding panels.
  * Add QT_USE_QSTRINGBUILDER to the compile definitions
  * tray: Fix SEGFAULT on stop
  * mainmenu: Fix visual search problems
  * mainmenu: Remove duplicates from search
  * mainmenu: Add new configuration options for search
  * mainmenu: Workadound QLineEdit's wakups(QTBUG-52021)
  * mainmenu: Add configurable way of search
  * taskbar: separate adding from changing windows
  * plugins: Make buttons flat for cleaner look
  * mainmenu: Fix search interacion
  * mainmenu: Add search/hide possibility
  * taskbar: Add show icon by WindowClass to config
  * taskbar: Use icon from theme (based on windowClass)
  * panellayout: Do not allow oversized plugins
  * panellayout: Avoid plugin margins
  * PluginSettings: Make settings object/class public
  * Bump year Fix licenses: lxqt-panel is pure LGPL
  * worldclock: Fix possible SEGFAULT
  * Add comments for ILXQtPanel and LXQtPanel.
  * plugin-taskbar: fix German translation of configuration dialogue
  * panel: Correct PanelPluginsModel logic
  * volume: Avoid infinite cycle in config dialog
  * plugins: Use "cleaner" style logic
  * mainmenu: Remove unneeded includes
  * mainmenu: Fix freeze for some widget styles (e.g. breeze)
  * tray: Fix "BadDamage" warning message
  * tray: Postpone tray icon initialization
  * PluginSettings: Emit settingsChanged only for owned keys
  * taskbar: Fix (auto)hide after window menu is shown
  * mainmenu: Use directory of current icon for search
  * mainmenu: Fix showing icon path in configuration
  * plugin-taskbar: avoid icon-only style for groups
  * statusnotifier: fix position of context menus
  * plugin-quicklaunch: remove preset applications
  * plugin-tray: Fix native window sizes for high DPI devices
  * taskbar: Refactor/improove window handling logic
  * taskbar: Fix multiple groups when WindowClass changes
  * plugin settings: Publish PluginSettings symbols
  * Add support for nested groups in PluginSettings
  * Add PluginSettings::{read,set}Array for atomicity
  * Add PluginSettings for shared settings for plugins
  * plugins config: remove a lot of redundant code
  * LXQtPanelPluginConfigDialog: add ctor overload
  * Update lxqt-panel_fr_FR.ts
  * Create HR translations for panel and plugins
  * lxqt-panel: Update/format and install man page
  * plugin-kbindicator: remove ru_RU translations
  * plugin-kbindicator: add russian translations
  * Update Russian translations for the panel and plugins
  * Italian translation update
  * Updated german translation.
  * Adds comments for lxqtpanelapplication.h.
  * Correct some minor spelling mistakes.
  * panel-config: Fix background opacity slider
  * taskbar: Avoid "noop" button if window ID changes
  * mainmenu: Fix URL assembly for Drag&amp;Drop
  * panel: Fill background
  * mainmenu: Use configurable icon
  * worldclock: Fix update interval
  * panel: Add periodic hide checking
  * clock: Fix content update if transform/autorotate
  * quicklaunch: Fix panel hiding upon showing menu
  * worldclock: Decrease (unnecessary) wake-ups
  * panel: Remove periodic checking for hide
  * Prevent panel hiding in case any (standalone) window shown
  * plugins: Unify window popup-ing
  * directorymenu: Fix indentation (spaces)
  * panel: Use override for overriden virt func
  * hu translations fixed
  * plugin-sysstat: translations fix
  * desktop-switch: Hightlight only windows in taskbar
  * fix misspelled prefered
- Add keyring
- Remove xkbcommon-includes.patch: upstreamed
- Remove: lxqt-panel-xcb-1.12.patch upstreamed
- Remove: no-undefined.patch instead pass
  - DCMAKE_MODULE_LINKER_FLAGS="-Wl,--as-needed -Wl,-z,now" to
  cmake to not have the --no-undefined which doesnt make sense here
  since the symbol is in the binary and not in a library.</changelog>
  <changelog author="sfalken@opensuse.org" date="1487937600">- Update to 0.11.1:
  * Show Auto-Hiding Panels with Delay (#387)
  * Enabling testing on weston (#380)
  * Update *da.desktop files
  * plugin-showdesktop: Cleanup left behind XCB artifacts
  * plugin-kbindicator: Use FindXCB CMake module
  * plugin-tray: Use the FindXCB CMake module
  * Use the new lxqt-build-tools CMake modules (FindMenuCache)
  * plugin-desktopswitch: Add LABEL_TYPE_NONE
  * Add/Update Portugese translations
  * taskbar: Add "cycle on wheel" configuration
  * taskbar: Forward wheelEvent
  * Add/Update french desktop entries
  * taskbar: Set toolButtonStyle for popup correctly
  * Fix faulty link in README.md
  * Remove arbitrary limit of taskbar button width
  * Remove cpack (#371)
- Added 0001-lxqt_panel_override_explicit_keyword.patch
  * Fixes compile errors  https://github.com/lxde/lxqt/issues/1251
- Added CXXFLAGS change from X11:LXQT:git for libxkbcommon-x11</changelog>
  <changelog author="mvetter@suse.com" date="1508760000">- Update to 0.12.0:
  * Set patch version
  * quicklaunch: Show popup menu aligned to clicked button
  * quicklaunch: Add "Desktop Action" support
  * l10n: Update Polish translation
  * Fix Danish spelling
  * plugin-tray: Fix dupe icon display error
  * Don't export github templates
  * Use worldclock by default instead of clock.
  * clock: Show deprecation message on startup/add
  * Fix clock text update
  * Avoid calling text() in MatchAction on a QAction == 0
  * volume: Do check for OSS availability in run-time
  * Update Polish .desktop entry
  * Remove space from end of "Show popup on mouse hover " string
  * Updated Lithuanian translation
  * Add/update Lithuanian translation
  * Update directorymenu_it.desktop
  * mainmenu: Don't hold the references for menu-cache
  * mainmenu: Fix menu-cache usage
  * set Qt::AA_UseHighDpiPixmaps to true
  * l10n: Updated Polish translation
  * Improved lxqt-panel version display
  * Added default CMAKE_BUILD_TYPE and LXQT_PANEL_PATCH_VERSION
  * plugins: Make widgets/buttons use whole space
  * LXQtPanelLayout: Honor item's expanding size policy
  * mainmenu: Install eventFiler for all (sub)menus
  * volume: Add all changes notifications (configurable)
  * Fixes a FTBFS in superbuild mode
  * Added merged autostart and menu to CMakeLists.txt
  * Updated *_da.desktop files and removed *_da_DK.desktop files
  * translation: Add Portugese directories
  * Update desktop entries and Replace fr_FR by fr
  * Merge pull request #45 from lxde/menu-comment
  * lxqt-applications.menu: remove accidentally added topics from "System Tools"
  * Update Greek translation (el) Remove country variant from language code
  * Rename LxQt to LXQt everywhere
  * CMake: Adds Runtime and Devel install COMPONENTs
  * Coding style changes
  * Adds double quotes to everything that may break
  * Use GNUINnstallDirs
  * Updates the build system to use the Targets infrastructure
  * Place LXQt About over Preferences in the main menu
  * Added italian translation in menu
  * Added german translation for the settings directory.
  * Drops hardcoded /etc/xdg paths
  * menu: hungarian translations added
  * Add Russian translation
  * Restore the old preferences menu layout of razor-qt.
  * Updated german translation, replaced Qt4 by Qt in all xsession/translations
  * add lxqt-leave directory files
  * use LXQt-specific menu file
  * Updates translations infrastructure
  * Update the required minimum cmake version
  * remove dead template lines switch OnlyShowIn from Razor -&gt; LXQt stringchanges LxQt -&gt; LXQt
  * Support lxqt-session and add necessary xdg autostart desktop entry files.
  * Fit the task group to its contents
  * mainmenu: Add "true" translucency support
  * Show "unknown" when an icon is missing
  * volume: Force step for wheel over popup slider
  * volume: Always show tooltip over button
  * volume: Force configured step for wheel over button
  * volume: Use "override" keyword
  * Enable translucency for taskbar group popup
  * tray: Move tray icon window into correct place
  * taskbar: Elide texts of buttons when needed
  * volume: Fix calculating of alsa volume
  * volume: Remove duplicated code
  * volume: Fix reporting of pulse volume
  * sysstat: Fix saving of network maximum speed
  * mainmenu: Redesign config dialog
  * mainmenu: Clear search upon show (configurable)
  * plugin-kbindicator: Undef the "explicit" workaround
  * plugin-sysstat: Avoid "set but unused var" warning
  * panel: Make space reserve on display configurable
  * panel: Add wrong logic warning
  * panel: Hide correctly upon the DragLeave
  * plugin-mount: Fix firing the actions
  * plugin-mount: Notify just on "real" add/remove
  * plugin: Save settings before signal connect
  * taskbar: Add Meta+1..9 shortcuts to raise windows
  * Bump year
- Remove 0001-lxqt_panel_override_explicit_keyword.patch: upstreamed</changelog>
  <changelog author="mvetter@suse.com" date="1509969600">- Use pkg-config to determine cflags:
  SR#535177 changed the location of xkbcommon-x11.h.
  So far the path was hardcoded, now use pkg-config to determine
  the actual path.</changelog>
  <changelog author="mvetter@suse.com" date="1530619200">- bsc#1043608: lxqt-panel volume plugin should call pavucontrol-qt
  instead of pavucontrol
- Add lxqt-panel-0.11.0-pavucontrol.patch</changelog>
</package>
<package pkgid="b50a41d0f40ba8785447cbe700c4264fb53adef2a90f3077ce0c47ddd01718bf" name="lxqt-panel" arch="x86_64">
  <version epoch="0" ver="0.12.0" rel="lp150.2.3.1"/>
  <changelog author="andrea@opensuse.org" date="1399982400">- spec file clean up for factoy</changelog>
  <changelog author="andrea@opensuse.org" date="1399982401">- Build all plugins adding sensors and libstatgrab to buildrequires</changelog>
  <changelog author="sfalken@opensuse.org" date="1412337600">- Added:
  * 0001-fix_plugin_mount.patch
  * 0002-fix_plugin_volume.patch
  * 0003-fix_plugin_worldclock.patch
  * 0004-fix_plugin_kbindicator.patch
  * 0005-fix_plugin_dom.patch
  * Patches added to fix buildfailure caused by undefined references, and new default build flags in cmake (gh#lxde/lxde-qt#288)</changelog>
  <changelog author="andrea@opensuse.org" date="1414238400">- new upstream version 0.8.0</changelog>
  <changelog author="andrea@opensuse.org" date="1415880000">- added lxmenu-data</changelog>
  <changelog author="andrea@opensuse.org" date="1416398400">- fixed license tag</changelog>
  <changelog author="sfalken@opensuse.org" date="1422273600">- Added conditionals to enable Fedora Builds</changelog>
  <changelog author="sfalken@opensuse.org" date="1423483200">- New upstream version 0.9.0
- Added -lang subpackage
- Dropped Patches:
  + lxqt-panel-0.8.0_fix_lxqt-mount_headers.patch
  + lxqt-panel-0.8.0_fix_undefined_reference.patch</changelog>
  <changelog author="sfalken@opensuse.org" date="1424433600">- Changed %build and %include to use cmake macros
- Added Patches:
  + lxqt-panel-0.9.0_fix_lxqtmount_include.patch
  + lxqt-panel-0.9.0_add_libxcb_to_cmakelist.patch</changelog>
  <changelog author="mvetter@suse.com" date="1436443200">- Use correct name "lxqt" instead of "lxde-qt"</changelog>
  <changelog author="mvetter@suse.com" date="1446811200">- Upstream release 0.10.0
  We have to compile it with -DKBINDICATOR_PLUGIN=No -DMOUNT_PLUGIN=No
  for now because we have problems otherwise.
  Deleted patches:
  - lxqt-panel-0.9.0_fix_lxqtmount_include.patch
  - lxqt-panel-0.9.0_add_libxcb_to_cmakelist.patch
  Not needed anymore</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1447070400">- Added no-undefined.patch: include sources which export used functions
- Added xkbcommon-includes.patch: explicitly add include path for
  xkbcommon headers, otherwise they are picked up accidentally
- Enable mount and kbindicator plugins</changelog>
  <changelog author="mvetter@suse.com" date="1450872000">- Use lxmenu-data to have a working panel menu (fonts etc).</changelog>
  <changelog author="mvetter@suse.com" date="1464091200">- Use pkgconfig to require libxkbcommon-x11-devel
- Require lxqt-mount to have mounter option working</changelog>
  <changelog author="dimstar@opensuse.org" date="1464782400">- Add lxqt-panel-xcb-1.12.patch: Fix linking with libxcb-1.12:
  we use xcb symbols by ourselves, so we are also responsible to
  link libxcb.</changelog>
  <changelog author="mvetter@suse.com" date="1474718400">- Update to 0.11.0:
  * Update README.md: Reflect changes introduced in 1c22479
  * CMakeLists: Fail for unmet dependencies
  * mainmenu: Remove setting base style in StyleChange
  * mainmenu: Workaround transparent search
  * mainmenu: Dispose old menu first when building new
  * Add README.md
  * sensors: Add default bar scale
  * sensors: Check for existence of the max value
  * sensors: Add minor code optimization
  * mainmenu: Handle QAction disposal correctly
  * panel: Don't use autoFillBackground
  * Plugin: Fix FTBFS for older Qt versions
  * mainmenu: Fix show/hide actions after menu rebuild
  * Statusnotifier: Remove setParent on StatusNotifierMenu.
  * Add XKB_COMMON_X11_INCLUDE_DIRS
  * panel: Remove/deprecate plugin-screensaver (#363)
  * Add and Update Arabic Translations for Desktop Files
  * Fix updating panel geometry on screen size change
  * panel: Fix screen number config change saving
  * Separate a String for I18N Enhancement
  * plugin: Force config dialog activation/raise
  * plugin: Fix crossreferencing of config dialogs
  * panel: Dispose unneeded menu
  * panel: Destroy panel's config dialog
  * showPopupMenu: Remove extraneous setParent() call (#359)
  * statusnotifier: fix popup position on right click
  * desktopswitch: Take layoutDirection into account
  * taskbar: Remove orientation specific logic for DnD
  * LXQtPanelLayout: Take layoutDirection into account
  * taskbar: Remove forgotten debug
  * taskbar: Consider layoutDirection for DnD
  * panel: Optimize search a bit
  * plugin-volume: Avoid an buffer overflow
  * Respect the OnlyShowIn property for menu entries when using menu-cache (#351)
  * kbindicator-plugin: fix linking with libxcb-1.12
  * plugin-volume: Handle errors when trying to determine the next card
  * Clean up CMakeLists.txt
  * plugin/directorymenu: Removes no use code (#350)
  * build: Forward translations parameters
  * ts-files removal (#346)
  * Fix memory leaks
  * Use const references with the foreach iterator
  * Small fix
  * statusnotifier: Fix showing icons in menu
  * kbindicator: (Re)Add .desktop translations
  * Update desktopswitchconfiguration.ui
  * panel: (Re)Add translations dir
  * Revert unintended *.desktop files removal
  * Remove translations (can be pulled in build time)
  * Use external translations
  * Update lxqt-panel_it.ts
  * Add documentation/comments for PanelPluginsModel.
  * Fix segfault on plugin initialization (#338)
  * translations: updated german translation (#323)
  * plugin-mainmenu: update mainmenu_it.ts (#337)
  * Russian translation update
  * mainmenu: Use style sheet to override icon
  * plugins: Change "repolish" logic
  * mainmenu: Reduce delay of popup when using shortcut
  * volume: Remove debug
  * plugins: Don't unload -&gt; avoid dangling resources
  * Added new translated strings.
  * Added missing context for lupdate.
  * Updated german translation.
  * Ask for confirmation when removing a panel
  * panel: Add "Lock Panel" functionality
  * fix updating panel geometry on screen changes
  * Try find a free position when adding a new panel
  * LXQtPanelApplication: Use D-Pointers
  * Animate auto-hiding panels.
  * Add QT_USE_QSTRINGBUILDER to the compile definitions
  * tray: Fix SEGFAULT on stop
  * mainmenu: Fix visual search problems
  * mainmenu: Remove duplicates from search
  * mainmenu: Add new configuration options for search
  * mainmenu: Workadound QLineEdit's wakups(QTBUG-52021)
  * mainmenu: Add configurable way of search
  * taskbar: separate adding from changing windows
  * plugins: Make buttons flat for cleaner look
  * mainmenu: Fix search interacion
  * mainmenu: Add search/hide possibility
  * taskbar: Add show icon by WindowClass to config
  * taskbar: Use icon from theme (based on windowClass)
  * panellayout: Do not allow oversized plugins
  * panellayout: Avoid plugin margins
  * PluginSettings: Make settings object/class public
  * Bump year Fix licenses: lxqt-panel is pure LGPL
  * worldclock: Fix possible SEGFAULT
  * Add comments for ILXQtPanel and LXQtPanel.
  * plugin-taskbar: fix German translation of configuration dialogue
  * panel: Correct PanelPluginsModel logic
  * volume: Avoid infinite cycle in config dialog
  * plugins: Use "cleaner" style logic
  * mainmenu: Remove unneeded includes
  * mainmenu: Fix freeze for some widget styles (e.g. breeze)
  * tray: Fix "BadDamage" warning message
  * tray: Postpone tray icon initialization
  * PluginSettings: Emit settingsChanged only for owned keys
  * taskbar: Fix (auto)hide after window menu is shown
  * mainmenu: Use directory of current icon for search
  * mainmenu: Fix showing icon path in configuration
  * plugin-taskbar: avoid icon-only style for groups
  * statusnotifier: fix position of context menus
  * plugin-quicklaunch: remove preset applications
  * plugin-tray: Fix native window sizes for high DPI devices
  * taskbar: Refactor/improove window handling logic
  * taskbar: Fix multiple groups when WindowClass changes
  * plugin settings: Publish PluginSettings symbols
  * Add support for nested groups in PluginSettings
  * Add PluginSettings::{read,set}Array for atomicity
  * Add PluginSettings for shared settings for plugins
  * plugins config: remove a lot of redundant code
  * LXQtPanelPluginConfigDialog: add ctor overload
  * Update lxqt-panel_fr_FR.ts
  * Create HR translations for panel and plugins
  * lxqt-panel: Update/format and install man page
  * plugin-kbindicator: remove ru_RU translations
  * plugin-kbindicator: add russian translations
  * Update Russian translations for the panel and plugins
  * Italian translation update
  * Updated german translation.
  * Adds comments for lxqtpanelapplication.h.
  * Correct some minor spelling mistakes.
  * panel-config: Fix background opacity slider
  * taskbar: Avoid "noop" button if window ID changes
  * mainmenu: Fix URL assembly for Drag&amp;Drop
  * panel: Fill background
  * mainmenu: Use configurable icon
  * worldclock: Fix update interval
  * panel: Add periodic hide checking
  * clock: Fix content update if transform/autorotate
  * quicklaunch: Fix panel hiding upon showing menu
  * worldclock: Decrease (unnecessary) wake-ups
  * panel: Remove periodic checking for hide
  * Prevent panel hiding in case any (standalone) window shown
  * plugins: Unify window popup-ing
  * directorymenu: Fix indentation (spaces)
  * panel: Use override for overriden virt func
  * hu translations fixed
  * plugin-sysstat: translations fix
  * desktop-switch: Hightlight only windows in taskbar
  * fix misspelled prefered
- Add keyring
- Remove xkbcommon-includes.patch: upstreamed
- Remove: lxqt-panel-xcb-1.12.patch upstreamed
- Remove: no-undefined.patch instead pass
  - DCMAKE_MODULE_LINKER_FLAGS="-Wl,--as-needed -Wl,-z,now" to
  cmake to not have the --no-undefined which doesnt make sense here
  since the symbol is in the binary and not in a library.</changelog>
  <changelog author="sfalken@opensuse.org" date="1487937600">- Update to 0.11.1:
  * Show Auto-Hiding Panels with Delay (#387)
  * Enabling testing on weston (#380)
  * Update *da.desktop files
  * plugin-showdesktop: Cleanup left behind XCB artifacts
  * plugin-kbindicator: Use FindXCB CMake module
  * plugin-tray: Use the FindXCB CMake module
  * Use the new lxqt-build-tools CMake modules (FindMenuCache)
  * plugin-desktopswitch: Add LABEL_TYPE_NONE
  * Add/Update Portugese translations
  * taskbar: Add "cycle on wheel" configuration
  * taskbar: Forward wheelEvent
  * Add/Update french desktop entries
  * taskbar: Set toolButtonStyle for popup correctly
  * Fix faulty link in README.md
  * Remove arbitrary limit of taskbar button width
  * Remove cpack (#371)
- Added 0001-lxqt_panel_override_explicit_keyword.patch
  * Fixes compile errors  https://github.com/lxde/lxqt/issues/1251
- Added CXXFLAGS change from X11:LXQT:git for libxkbcommon-x11</changelog>
  <changelog author="mvetter@suse.com" date="1508760000">- Update to 0.12.0:
  * Set patch version
  * quicklaunch: Show popup menu aligned to clicked button
  * quicklaunch: Add "Desktop Action" support
  * l10n: Update Polish translation
  * Fix Danish spelling
  * plugin-tray: Fix dupe icon display error
  * Don't export github templates
  * Use worldclock by default instead of clock.
  * clock: Show deprecation message on startup/add
  * Fix clock text update
  * Avoid calling text() in MatchAction on a QAction == 0
  * volume: Do check for OSS availability in run-time
  * Update Polish .desktop entry
  * Remove space from end of "Show popup on mouse hover " string
  * Updated Lithuanian translation
  * Add/update Lithuanian translation
  * Update directorymenu_it.desktop
  * mainmenu: Don't hold the references for menu-cache
  * mainmenu: Fix menu-cache usage
  * set Qt::AA_UseHighDpiPixmaps to true
  * l10n: Updated Polish translation
  * Improved lxqt-panel version display
  * Added default CMAKE_BUILD_TYPE and LXQT_PANEL_PATCH_VERSION
  * plugins: Make widgets/buttons use whole space
  * LXQtPanelLayout: Honor item's expanding size policy
  * mainmenu: Install eventFiler for all (sub)menus
  * volume: Add all changes notifications (configurable)
  * Fixes a FTBFS in superbuild mode
  * Added merged autostart and menu to CMakeLists.txt
  * Updated *_da.desktop files and removed *_da_DK.desktop files
  * translation: Add Portugese directories
  * Update desktop entries and Replace fr_FR by fr
  * Merge pull request #45 from lxde/menu-comment
  * lxqt-applications.menu: remove accidentally added topics from "System Tools"
  * Update Greek translation (el) Remove country variant from language code
  * Rename LxQt to LXQt everywhere
  * CMake: Adds Runtime and Devel install COMPONENTs
  * Coding style changes
  * Adds double quotes to everything that may break
  * Use GNUINnstallDirs
  * Updates the build system to use the Targets infrastructure
  * Place LXQt About over Preferences in the main menu
  * Added italian translation in menu
  * Added german translation for the settings directory.
  * Drops hardcoded /etc/xdg paths
  * menu: hungarian translations added
  * Add Russian translation
  * Restore the old preferences menu layout of razor-qt.
  * Updated german translation, replaced Qt4 by Qt in all xsession/translations
  * add lxqt-leave directory files
  * use LXQt-specific menu file
  * Updates translations infrastructure
  * Update the required minimum cmake version
  * remove dead template lines switch OnlyShowIn from Razor -&gt; LXQt stringchanges LxQt -&gt; LXQt
  * Support lxqt-session and add necessary xdg autostart desktop entry files.
  * Fit the task group to its contents
  * mainmenu: Add "true" translucency support
  * Show "unknown" when an icon is missing
  * volume: Force step for wheel over popup slider
  * volume: Always show tooltip over button
  * volume: Force configured step for wheel over button
  * volume: Use "override" keyword
  * Enable translucency for taskbar group popup
  * tray: Move tray icon window into correct place
  * taskbar: Elide texts of buttons when needed
  * volume: Fix calculating of alsa volume
  * volume: Remove duplicated code
  * volume: Fix reporting of pulse volume
  * sysstat: Fix saving of network maximum speed
  * mainmenu: Redesign config dialog
  * mainmenu: Clear search upon show (configurable)
  * plugin-kbindicator: Undef the "explicit" workaround
  * plugin-sysstat: Avoid "set but unused var" warning
  * panel: Make space reserve on display configurable
  * panel: Add wrong logic warning
  * panel: Hide correctly upon the DragLeave
  * plugin-mount: Fix firing the actions
  * plugin-mount: Notify just on "real" add/remove
  * plugin: Save settings before signal connect
  * taskbar: Add Meta+1..9 shortcuts to raise windows
  * Bump year
- Remove 0001-lxqt_panel_override_explicit_keyword.patch: upstreamed</changelog>
  <changelog author="mvetter@suse.com" date="1509969600">- Use pkg-config to determine cflags:
  SR#535177 changed the location of xkbcommon-x11.h.
  So far the path was hardcoded, now use pkg-config to determine
  the actual path.</changelog>
  <changelog author="mvetter@suse.com" date="1530619200">- bsc#1043608: lxqt-panel volume plugin should call pavucontrol-qt
  instead of pavucontrol
- Add lxqt-panel-0.11.0-pavucontrol.patch</changelog>
</package>
<package pkgid="e3e3285ee7533c537bd049942ea62868e4cdc06968c08be7e120f5fe4426379e" name="lxqt-panel-devel" arch="x86_64">
  <version epoch="0" ver="0.12.0" rel="lp150.2.3.1"/>
  <changelog author="andrea@opensuse.org" date="1399982400">- spec file clean up for factoy</changelog>
  <changelog author="andrea@opensuse.org" date="1399982401">- Build all plugins adding sensors and libstatgrab to buildrequires</changelog>
  <changelog author="sfalken@opensuse.org" date="1412337600">- Added:
  * 0001-fix_plugin_mount.patch
  * 0002-fix_plugin_volume.patch
  * 0003-fix_plugin_worldclock.patch
  * 0004-fix_plugin_kbindicator.patch
  * 0005-fix_plugin_dom.patch
  * Patches added to fix buildfailure caused by undefined references, and new default build flags in cmake (gh#lxde/lxde-qt#288)</changelog>
  <changelog author="andrea@opensuse.org" date="1414238400">- new upstream version 0.8.0</changelog>
  <changelog author="andrea@opensuse.org" date="1415880000">- added lxmenu-data</changelog>
  <changelog author="andrea@opensuse.org" date="1416398400">- fixed license tag</changelog>
  <changelog author="sfalken@opensuse.org" date="1422273600">- Added conditionals to enable Fedora Builds</changelog>
  <changelog author="sfalken@opensuse.org" date="1423483200">- New upstream version 0.9.0
- Added -lang subpackage
- Dropped Patches:
  + lxqt-panel-0.8.0_fix_lxqt-mount_headers.patch
  + lxqt-panel-0.8.0_fix_undefined_reference.patch</changelog>
  <changelog author="sfalken@opensuse.org" date="1424433600">- Changed %build and %include to use cmake macros
- Added Patches:
  + lxqt-panel-0.9.0_fix_lxqtmount_include.patch
  + lxqt-panel-0.9.0_add_libxcb_to_cmakelist.patch</changelog>
  <changelog author="mvetter@suse.com" date="1436443200">- Use correct name "lxqt" instead of "lxde-qt"</changelog>
  <changelog author="mvetter@suse.com" date="1446811200">- Upstream release 0.10.0
  We have to compile it with -DKBINDICATOR_PLUGIN=No -DMOUNT_PLUGIN=No
  for now because we have problems otherwise.
  Deleted patches:
  - lxqt-panel-0.9.0_fix_lxqtmount_include.patch
  - lxqt-panel-0.9.0_add_libxcb_to_cmakelist.patch
  Not needed anymore</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1447070400">- Added no-undefined.patch: include sources which export used functions
- Added xkbcommon-includes.patch: explicitly add include path for
  xkbcommon headers, otherwise they are picked up accidentally
- Enable mount and kbindicator plugins</changelog>
  <changelog author="mvetter@suse.com" date="1450872000">- Use lxmenu-data to have a working panel menu (fonts etc).</changelog>
  <changelog author="mvetter@suse.com" date="1464091200">- Use pkgconfig to require libxkbcommon-x11-devel
- Require lxqt-mount to have mounter option working</changelog>
  <changelog author="dimstar@opensuse.org" date="1464782400">- Add lxqt-panel-xcb-1.12.patch: Fix linking with libxcb-1.12:
  we use xcb symbols by ourselves, so we are also responsible to
  link libxcb.</changelog>
  <changelog author="mvetter@suse.com" date="1474718400">- Update to 0.11.0:
  * Update README.md: Reflect changes introduced in 1c22479
  * CMakeLists: Fail for unmet dependencies
  * mainmenu: Remove setting base style in StyleChange
  * mainmenu: Workaround transparent search
  * mainmenu: Dispose old menu first when building new
  * Add README.md
  * sensors: Add default bar scale
  * sensors: Check for existence of the max value
  * sensors: Add minor code optimization
  * mainmenu: Handle QAction disposal correctly
  * panel: Don't use autoFillBackground
  * Plugin: Fix FTBFS for older Qt versions
  * mainmenu: Fix show/hide actions after menu rebuild
  * Statusnotifier: Remove setParent on StatusNotifierMenu.
  * Add XKB_COMMON_X11_INCLUDE_DIRS
  * panel: Remove/deprecate plugin-screensaver (#363)
  * Add and Update Arabic Translations for Desktop Files
  * Fix updating panel geometry on screen size change
  * panel: Fix screen number config change saving
  * Separate a String for I18N Enhancement
  * plugin: Force config dialog activation/raise
  * plugin: Fix crossreferencing of config dialogs
  * panel: Dispose unneeded menu
  * panel: Destroy panel's config dialog
  * showPopupMenu: Remove extraneous setParent() call (#359)
  * statusnotifier: fix popup position on right click
  * desktopswitch: Take layoutDirection into account
  * taskbar: Remove orientation specific logic for DnD
  * LXQtPanelLayout: Take layoutDirection into account
  * taskbar: Remove forgotten debug
  * taskbar: Consider layoutDirection for DnD
  * panel: Optimize search a bit
  * plugin-volume: Avoid an buffer overflow
  * Respect the OnlyShowIn property for menu entries when using menu-cache (#351)
  * kbindicator-plugin: fix linking with libxcb-1.12
  * plugin-volume: Handle errors when trying to determine the next card
  * Clean up CMakeLists.txt
  * plugin/directorymenu: Removes no use code (#350)
  * build: Forward translations parameters
  * ts-files removal (#346)
  * Fix memory leaks
  * Use const references with the foreach iterator
  * Small fix
  * statusnotifier: Fix showing icons in menu
  * kbindicator: (Re)Add .desktop translations
  * Update desktopswitchconfiguration.ui
  * panel: (Re)Add translations dir
  * Revert unintended *.desktop files removal
  * Remove translations (can be pulled in build time)
  * Use external translations
  * Update lxqt-panel_it.ts
  * Add documentation/comments for PanelPluginsModel.
  * Fix segfault on plugin initialization (#338)
  * translations: updated german translation (#323)
  * plugin-mainmenu: update mainmenu_it.ts (#337)
  * Russian translation update
  * mainmenu: Use style sheet to override icon
  * plugins: Change "repolish" logic
  * mainmenu: Reduce delay of popup when using shortcut
  * volume: Remove debug
  * plugins: Don't unload -&gt; avoid dangling resources
  * Added new translated strings.
  * Added missing context for lupdate.
  * Updated german translation.
  * Ask for confirmation when removing a panel
  * panel: Add "Lock Panel" functionality
  * fix updating panel geometry on screen changes
  * Try find a free position when adding a new panel
  * LXQtPanelApplication: Use D-Pointers
  * Animate auto-hiding panels.
  * Add QT_USE_QSTRINGBUILDER to the compile definitions
  * tray: Fix SEGFAULT on stop
  * mainmenu: Fix visual search problems
  * mainmenu: Remove duplicates from search
  * mainmenu: Add new configuration options for search
  * mainmenu: Workadound QLineEdit's wakups(QTBUG-52021)
  * mainmenu: Add configurable way of search
  * taskbar: separate adding from changing windows
  * plugins: Make buttons flat for cleaner look
  * mainmenu: Fix search interacion
  * mainmenu: Add search/hide possibility
  * taskbar: Add show icon by WindowClass to config
  * taskbar: Use icon from theme (based on windowClass)
  * panellayout: Do not allow oversized plugins
  * panellayout: Avoid plugin margins
  * PluginSettings: Make settings object/class public
  * Bump year Fix licenses: lxqt-panel is pure LGPL
  * worldclock: Fix possible SEGFAULT
  * Add comments for ILXQtPanel and LXQtPanel.
  * plugin-taskbar: fix German translation of configuration dialogue
  * panel: Correct PanelPluginsModel logic
  * volume: Avoid infinite cycle in config dialog
  * plugins: Use "cleaner" style logic
  * mainmenu: Remove unneeded includes
  * mainmenu: Fix freeze for some widget styles (e.g. breeze)
  * tray: Fix "BadDamage" warning message
  * tray: Postpone tray icon initialization
  * PluginSettings: Emit settingsChanged only for owned keys
  * taskbar: Fix (auto)hide after window menu is shown
  * mainmenu: Use directory of current icon for search
  * mainmenu: Fix showing icon path in configuration
  * plugin-taskbar: avoid icon-only style for groups
  * statusnotifier: fix position of context menus
  * plugin-quicklaunch: remove preset applications
  * plugin-tray: Fix native window sizes for high DPI devices
  * taskbar: Refactor/improove window handling logic
  * taskbar: Fix multiple groups when WindowClass changes
  * plugin settings: Publish PluginSettings symbols
  * Add support for nested groups in PluginSettings
  * Add PluginSettings::{read,set}Array for atomicity
  * Add PluginSettings for shared settings for plugins
  * plugins config: remove a lot of redundant code
  * LXQtPanelPluginConfigDialog: add ctor overload
  * Update lxqt-panel_fr_FR.ts
  * Create HR translations for panel and plugins
  * lxqt-panel: Update/format and install man page
  * plugin-kbindicator: remove ru_RU translations
  * plugin-kbindicator: add russian translations
  * Update Russian translations for the panel and plugins
  * Italian translation update
  * Updated german translation.
  * Adds comments for lxqtpanelapplication.h.
  * Correct some minor spelling mistakes.
  * panel-config: Fix background opacity slider
  * taskbar: Avoid "noop" button if window ID changes
  * mainmenu: Fix URL assembly for Drag&amp;Drop
  * panel: Fill background
  * mainmenu: Use configurable icon
  * worldclock: Fix update interval
  * panel: Add periodic hide checking
  * clock: Fix content update if transform/autorotate
  * quicklaunch: Fix panel hiding upon showing menu
  * worldclock: Decrease (unnecessary) wake-ups
  * panel: Remove periodic checking for hide
  * Prevent panel hiding in case any (standalone) window shown
  * plugins: Unify window popup-ing
  * directorymenu: Fix indentation (spaces)
  * panel: Use override for overriden virt func
  * hu translations fixed
  * plugin-sysstat: translations fix
  * desktop-switch: Hightlight only windows in taskbar
  * fix misspelled prefered
- Add keyring
- Remove xkbcommon-includes.patch: upstreamed
- Remove: lxqt-panel-xcb-1.12.patch upstreamed
- Remove: no-undefined.patch instead pass
  - DCMAKE_MODULE_LINKER_FLAGS="-Wl,--as-needed -Wl,-z,now" to
  cmake to not have the --no-undefined which doesnt make sense here
  since the symbol is in the binary and not in a library.</changelog>
  <changelog author="sfalken@opensuse.org" date="1487937600">- Update to 0.11.1:
  * Show Auto-Hiding Panels with Delay (#387)
  * Enabling testing on weston (#380)
  * Update *da.desktop files
  * plugin-showdesktop: Cleanup left behind XCB artifacts
  * plugin-kbindicator: Use FindXCB CMake module
  * plugin-tray: Use the FindXCB CMake module
  * Use the new lxqt-build-tools CMake modules (FindMenuCache)
  * plugin-desktopswitch: Add LABEL_TYPE_NONE
  * Add/Update Portugese translations
  * taskbar: Add "cycle on wheel" configuration
  * taskbar: Forward wheelEvent
  * Add/Update french desktop entries
  * taskbar: Set toolButtonStyle for popup correctly
  * Fix faulty link in README.md
  * Remove arbitrary limit of taskbar button width
  * Remove cpack (#371)
- Added 0001-lxqt_panel_override_explicit_keyword.patch
  * Fixes compile errors  https://github.com/lxde/lxqt/issues/1251
- Added CXXFLAGS change from X11:LXQT:git for libxkbcommon-x11</changelog>
  <changelog author="mvetter@suse.com" date="1508760000">- Update to 0.12.0:
  * Set patch version
  * quicklaunch: Show popup menu aligned to clicked button
  * quicklaunch: Add "Desktop Action" support
  * l10n: Update Polish translation
  * Fix Danish spelling
  * plugin-tray: Fix dupe icon display error
  * Don't export github templates
  * Use worldclock by default instead of clock.
  * clock: Show deprecation message on startup/add
  * Fix clock text update
  * Avoid calling text() in MatchAction on a QAction == 0
  * volume: Do check for OSS availability in run-time
  * Update Polish .desktop entry
  * Remove space from end of "Show popup on mouse hover " string
  * Updated Lithuanian translation
  * Add/update Lithuanian translation
  * Update directorymenu_it.desktop
  * mainmenu: Don't hold the references for menu-cache
  * mainmenu: Fix menu-cache usage
  * set Qt::AA_UseHighDpiPixmaps to true
  * l10n: Updated Polish translation
  * Improved lxqt-panel version display
  * Added default CMAKE_BUILD_TYPE and LXQT_PANEL_PATCH_VERSION
  * plugins: Make widgets/buttons use whole space
  * LXQtPanelLayout: Honor item's expanding size policy
  * mainmenu: Install eventFiler for all (sub)menus
  * volume: Add all changes notifications (configurable)
  * Fixes a FTBFS in superbuild mode
  * Added merged autostart and menu to CMakeLists.txt
  * Updated *_da.desktop files and removed *_da_DK.desktop files
  * translation: Add Portugese directories
  * Update desktop entries and Replace fr_FR by fr
  * Merge pull request #45 from lxde/menu-comment
  * lxqt-applications.menu: remove accidentally added topics from "System Tools"
  * Update Greek translation (el) Remove country variant from language code
  * Rename LxQt to LXQt everywhere
  * CMake: Adds Runtime and Devel install COMPONENTs
  * Coding style changes
  * Adds double quotes to everything that may break
  * Use GNUINnstallDirs
  * Updates the build system to use the Targets infrastructure
  * Place LXQt About over Preferences in the main menu
  * Added italian translation in menu
  * Added german translation for the settings directory.
  * Drops hardcoded /etc/xdg paths
  * menu: hungarian translations added
  * Add Russian translation
  * Restore the old preferences menu layout of razor-qt.
  * Updated german translation, replaced Qt4 by Qt in all xsession/translations
  * add lxqt-leave directory files
  * use LXQt-specific menu file
  * Updates translations infrastructure
  * Update the required minimum cmake version
  * remove dead template lines switch OnlyShowIn from Razor -&gt; LXQt stringchanges LxQt -&gt; LXQt
  * Support lxqt-session and add necessary xdg autostart desktop entry files.
  * Fit the task group to its contents
  * mainmenu: Add "true" translucency support
  * Show "unknown" when an icon is missing
  * volume: Force step for wheel over popup slider
  * volume: Always show tooltip over button
  * volume: Force configured step for wheel over button
  * volume: Use "override" keyword
  * Enable translucency for taskbar group popup
  * tray: Move tray icon window into correct place
  * taskbar: Elide texts of buttons when needed
  * volume: Fix calculating of alsa volume
  * volume: Remove duplicated code
  * volume: Fix reporting of pulse volume
  * sysstat: Fix saving of network maximum speed
  * mainmenu: Redesign config dialog
  * mainmenu: Clear search upon show (configurable)
  * plugin-kbindicator: Undef the "explicit" workaround
  * plugin-sysstat: Avoid "set but unused var" warning
  * panel: Make space reserve on display configurable
  * panel: Add wrong logic warning
  * panel: Hide correctly upon the DragLeave
  * plugin-mount: Fix firing the actions
  * plugin-mount: Notify just on "real" add/remove
  * plugin: Save settings before signal connect
  * taskbar: Add Meta+1..9 shortcuts to raise windows
  * Bump year
- Remove 0001-lxqt_panel_override_explicit_keyword.patch: upstreamed</changelog>
  <changelog author="mvetter@suse.com" date="1509969600">- Use pkg-config to determine cflags:
  SR#535177 changed the location of xkbcommon-x11.h.
  So far the path was hardcoded, now use pkg-config to determine
  the actual path.</changelog>
  <changelog author="mvetter@suse.com" date="1530619200">- bsc#1043608: lxqt-panel volume plugin should call pavucontrol-qt
  instead of pavucontrol
- Add lxqt-panel-0.11.0-pavucontrol.patch</changelog>
</package>
<package pkgid="fbca651306cb8993a6de821cf138ca6fd9b59fb54e9ceb3ad871e57697bfe8ca" name="lxqt-sudo" arch="src">
  <version epoch="0" ver="0.12.0" rel="lp150.2.3.1"/>
  <changelog author="and.november@opensuse.org" date="1440331200">- initial package for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1446638400">- Git build was done by aaz2011@mail.ru
- Setting minimum Cmake version</changelog>
  <changelog author="mvetter@suse.com" date="1474718400">- Update to 0.11.0:
  * Add README.md
  * build: Forward translations parameters
  * ts-files removal (#21)
  * Remove translations (will be pulled in build time)
  * Bump year
  * Italian translation update
  * Updated Russian translation Fix language and typos
  * Add Russian translation
- Add keyring</changelog>
  <changelog author="sfalken@opensuse.org" date="1487937600">- Update to 0.11.1:
  * Make CMakeLists.txt more uniform.</changelog>
  <changelog author="mvetter@suse.com" date="1508760000">- Update to 0.12.0:
  * Set informal patch version
  * Added basic .gitattributes
  * Drops Qt5Core_VERSION_STRING
  * set Qt::AA_UseHighDpiPixmaps to true
  * Bump year</changelog>
  <changelog author="mvetter@suse.com" date="1532606400">- bsc#1100871: Fix layout problem with CJK by setting the
  locale to C
- Add lxqt-sudo-0.13.0-locale-env.patch</changelog>
</package>
<package pkgid="7de77d7120c25942832cd5f811373f7f1f832cc386a94d861dab4cc079fd2d49" name="lxqt-sudo" arch="x86_64">
  <version epoch="0" ver="0.12.0" rel="lp150.2.3.1"/>
  <changelog author="and.november@opensuse.org" date="1440331200">- initial package for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1446638400">- Git build was done by aaz2011@mail.ru
- Setting minimum Cmake version</changelog>
  <changelog author="mvetter@suse.com" date="1474718400">- Update to 0.11.0:
  * Add README.md
  * build: Forward translations parameters
  * ts-files removal (#21)
  * Remove translations (will be pulled in build time)
  * Bump year
  * Italian translation update
  * Updated Russian translation Fix language and typos
  * Add Russian translation
- Add keyring</changelog>
  <changelog author="sfalken@opensuse.org" date="1487937600">- Update to 0.11.1:
  * Make CMakeLists.txt more uniform.</changelog>
  <changelog author="mvetter@suse.com" date="1508760000">- Update to 0.12.0:
  * Set informal patch version
  * Added basic .gitattributes
  * Drops Qt5Core_VERSION_STRING
  * set Qt::AA_UseHighDpiPixmaps to true
  * Bump year</changelog>
  <changelog author="mvetter@suse.com" date="1532606400">- bsc#1100871: Fix layout problem with CJK by setting the
  locale to C
- Add lxqt-sudo-0.13.0-locale-env.patch</changelog>
</package>
<package pkgid="83c7d34c6375678bb68d8f0442cc170f9df146ca64b77217880fc3065e86348b" name="mailman" arch="src">
  <version epoch="0" ver="2.1.27" rel="lp150.2.3.1"/>
  <changelog author="jmatejek@suse.com" date="1351080000">- update to 2.1.15
  * fixes CVE-2011-0707 - patch dropped
  * better CSRF protection
  * better e-mail address validation
  * password reminder button
  * new config options
  * updated translations
- dropped mailman-python24 patch as we no longer care
  about python2.4
- replaced %run_permissions in spec</changelog>
  <changelog author="dmueller@suse.com" date="1392120000">- do not abort post script if postalias fails</changelog>
  <changelog author="jmatejek@suse.com" date="1392379200">- rename README.SuSE
- update to 2.1.17
  * option to strip/keep non-standard headers in anonymous lists
  * option to make membership checks on mail-news gateway
  * UI improvements for admin interface
  * digest_size_threshold = 0 now means that *no* digest is sent
    based on size
  * option to CSRF-protect subscription form
  * admins can add members with mail delivery disabled
  * configurable name of master lock
  * updated translations
- updated list_lists patch because upstream list_lists now has
  an argument -p / --public-archive that does the same as SUSE-specific
  argument -u / --public-archives. Both spellings are supported
  and are synonymous.</changelog>
  <changelog author="hsk@imb-jena.de" date="1413547200">- update to 2.1.18
  * mailman now requires dnspython
  * new dmarc_moderation_action feature and corresponging list and default
    settings
  * bug fixes</changelog>
  <changelog author="hsk@imb-jena.de" date="1425297600">- update to 2.1.19
  * backports from 2.2 development branch
  - new list attribute 'subscribe_auto_approval'
  - added 'automate' option to bin/newlist
  - processing of Topics regular expressions has changed
  - added real name display to the web roster, controlled by new
    ROSTER_DISPLAY_REALNAME setting
  - bug fixes
  * new list attribute dmarc_wrapped_message_text and
    DEFAULT_DMARC_WRAPPED_MESSAGE_TEXT setting
  * new list attribute equivalent_domains and DEFAULT_EQUIVALENT_DOMAINS
    setting
  * new WEB_HEAD_ADD setting
  * new DEFAULT_SUBSCRIBE_OR_INVITE setting
  * new list attribute bounce_notify_owner_on_bounce_increment and
    DEFAULT_BOUNCE_NOTIFY_OWNER_ON_BOUNCE_INCREMENT setting
  * log files, request.pck files and heldmsg-* files are no longer created
    world readable
  * i18n updates
  * bug fixes</changelog>
  <changelog author="hsk@imb-jena.de" date="1427803200">- update to 2.1.20
  * fix for CVE-2015-2775 (path traversal vulnerability)
  * new Address Change sub-section in the web admin Membership
    Management section
  * translation updates and bug fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1454500800">- Use url for source
- Add gpg signature</changelog>
  <changelog author="hsk@imb-jena.de" date="1456747200">- update to 2.1.21
  * new dmarc_none_moderation_action list setting
  * new feature to automatically turn on moderation for single list
    members (spam prevention)
  * new mm_cfg.py setting GLOBAL_BAN_LIST
  * translation updates and bug fixes
  * for more details see NEWS and Mailman/Defaults.py
- mailman-2.1.4-dirmode.patch: adjusted to 2.1.21</changelog>
  <changelog author="hsk@imb-jena.de" date="1459252800">- updated mailman-apache2.conf to support "require" syntax of recent
  apache httpd</changelog>
  <changelog author="hsk@imb-jena.de" date="1460980800">- update to 2.1.22
  * bug fixes, i18n updates; for details see NEWS</changelog>
  <changelog author="hsk17@mail.de" date="1472472000">- update to 2.1.23
  * CSRF protection in user options page (CVE-2016-6893)
  * header_filter_rules matching: headers and patterns are all
    decoded to unicode
  * another possible REMOVE_DKIM_HEADERS setting
  * SMTPDirect.py can now do SASL authentication and STARTTLS
  * bug fixes, i18n updates
  * for further details see NEWS</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Require fillup and insserv if we call them</changelog>
  <changelog author="kukuk@suse.de" date="1490011200">- Require system user wwwrun</changelog>
  <changelog author="dimstar@opensuse.org" date="1498737600">- Fix pre script for usage with more recent postfix versions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dmueller@suse.com" date="1511784000">- remove distributable flag (which is always true):
  drops SuSEconfig.mailman-SuSE, mailman-SuSE.patch, mailman-SuSE2.patch</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1521115200">- update to 2.1.26
  * An XSS vulnerability in the user options CGI could allow a crafted
    URL to execute arbitrary javascript in a user's browser.  A
    related issue could expose information on a user's options page
    without requiring login. (CVE-2018-5950) bsc#1077358
  * Google reCAPTCHA v2
  * New bin/mailman-config command to display various information
    about this Mailman version and how it was configured.
  * bug fixes, i18n updates
  * for further details see NEWS
- updato to 2.1.25
  * The admindb held subscriptions listing now includes the date of the
    most recent request from the address.
  * bug fixes, i18n updates
  * for further details see NEWS
- update to 2.1.24
  * bug fixes, i18n updates
  * for further details see NEWS
- Rename and refresh patch:
  * mailman-2.1.2-list_lists.patch to mailman-2.1.26-list_lists.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1521201600">- Sort out with spec-cleaner
- Use direct paths in post scriptlets and properly state their deps
- Do not attempt user creation during build, fails anyway
- Use proper user creation code in scriptlets</changelog>
  <changelog author="tchvatal@suse.com" date="1521460800">- Fix install prefix for some of the files
- Install license file</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1530187200">- update to 2.1.27
  * Existing protections against malicious listowners injecting evil
    scripts into listinfo pages have had a few more checks added.
    JVN#00846677/JPCERT#97432283/CVE-2018-0618 (boo#1099510)
  * A few more error messages have had their values HTML escaped.
    JVN#00846677/JPCERT#97432283/CVE-2018-0618 (boo#1099510)
  * The hash generated when SUBSCRIBE_FORM_SECRET is set could have been
    the same as one generated at the same time for a different list and
    IP address.  While this is not thought to be exploitable in any way,
    the generation has been changed to avoid this.
  * An option has been added to bin/add_members to issue invitations
    instead of immediately adding members.
  * A new BLOCK_SPAMHAUS_LISTED_IP_SUBSCRIBE setting has been added to
    enable blocking web subscribes from IPv4 addresses listed in Spamhaus
    SBL, CSS or XBL.  It will work with IPv6 addresses if Python's
    py2-ipaddress module is installed.  The module can be installed via pip
    if not included in your Python.
  * Mailman has a new 'security' log and logs
    authentication failures to the various web CGI functions.  The logged
    data include the remote IP and can be used to automate blocking of IPs
    with something like fail2ban.  Since Mailman 2.1.14, these have returned
    an http 401 status and the information should be logged by the web
    server, but this new log makes that more convenient.  Also, the
    'mischief' log entries for 'hostile listname' noe include the remote IP
    if available.
  * admin notices of (un)subscribes now may give
    the source of the action.  This consists of a %(whence)s replacement
    that has been added to the admin(un)subscribeack.txt templates.  Thanks
    to Yasuhito FUTATSUKI for updating the non-English templates and help
    with internationalizing the reasons.
  * there is a new
    BLOCK_SPAMHAUS_LISTED_DBL_SUBSCRIBE setting to enable blocking web
    subscribes for addresses in domains listed in the Spamhaus DBL.
  * i18n &amp; Bugfixes
  * for further details see NEWS</changelog>
</package>
<package pkgid="df9e7ab802ea49f8239ac5d6c8cf43c161d69ff54a102ab81293dd275842f251" name="mailman" arch="x86_64">
  <version epoch="0" ver="2.1.27" rel="lp150.2.3.1"/>
  <changelog author="jmatejek@suse.com" date="1351080000">- update to 2.1.15
  * fixes CVE-2011-0707 - patch dropped
  * better CSRF protection
  * better e-mail address validation
  * password reminder button
  * new config options
  * updated translations
- dropped mailman-python24 patch as we no longer care
  about python2.4
- replaced %run_permissions in spec</changelog>
  <changelog author="dmueller@suse.com" date="1392120000">- do not abort post script if postalias fails</changelog>
  <changelog author="jmatejek@suse.com" date="1392379200">- rename README.SuSE
- update to 2.1.17
  * option to strip/keep non-standard headers in anonymous lists
  * option to make membership checks on mail-news gateway
  * UI improvements for admin interface
  * digest_size_threshold = 0 now means that *no* digest is sent
    based on size
  * option to CSRF-protect subscription form
  * admins can add members with mail delivery disabled
  * configurable name of master lock
  * updated translations
- updated list_lists patch because upstream list_lists now has
  an argument -p / --public-archive that does the same as SUSE-specific
  argument -u / --public-archives. Both spellings are supported
  and are synonymous.</changelog>
  <changelog author="hsk@imb-jena.de" date="1413547200">- update to 2.1.18
  * mailman now requires dnspython
  * new dmarc_moderation_action feature and corresponging list and default
    settings
  * bug fixes</changelog>
  <changelog author="hsk@imb-jena.de" date="1425297600">- update to 2.1.19
  * backports from 2.2 development branch
  - new list attribute 'subscribe_auto_approval'
  - added 'automate' option to bin/newlist
  - processing of Topics regular expressions has changed
  - added real name display to the web roster, controlled by new
    ROSTER_DISPLAY_REALNAME setting
  - bug fixes
  * new list attribute dmarc_wrapped_message_text and
    DEFAULT_DMARC_WRAPPED_MESSAGE_TEXT setting
  * new list attribute equivalent_domains and DEFAULT_EQUIVALENT_DOMAINS
    setting
  * new WEB_HEAD_ADD setting
  * new DEFAULT_SUBSCRIBE_OR_INVITE setting
  * new list attribute bounce_notify_owner_on_bounce_increment and
    DEFAULT_BOUNCE_NOTIFY_OWNER_ON_BOUNCE_INCREMENT setting
  * log files, request.pck files and heldmsg-* files are no longer created
    world readable
  * i18n updates
  * bug fixes</changelog>
  <changelog author="hsk@imb-jena.de" date="1427803200">- update to 2.1.20
  * fix for CVE-2015-2775 (path traversal vulnerability)
  * new Address Change sub-section in the web admin Membership
    Management section
  * translation updates and bug fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1454500800">- Use url for source
- Add gpg signature</changelog>
  <changelog author="hsk@imb-jena.de" date="1456747200">- update to 2.1.21
  * new dmarc_none_moderation_action list setting
  * new feature to automatically turn on moderation for single list
    members (spam prevention)
  * new mm_cfg.py setting GLOBAL_BAN_LIST
  * translation updates and bug fixes
  * for more details see NEWS and Mailman/Defaults.py
- mailman-2.1.4-dirmode.patch: adjusted to 2.1.21</changelog>
  <changelog author="hsk@imb-jena.de" date="1459252800">- updated mailman-apache2.conf to support "require" syntax of recent
  apache httpd</changelog>
  <changelog author="hsk@imb-jena.de" date="1460980800">- update to 2.1.22
  * bug fixes, i18n updates; for details see NEWS</changelog>
  <changelog author="hsk17@mail.de" date="1472472000">- update to 2.1.23
  * CSRF protection in user options page (CVE-2016-6893)
  * header_filter_rules matching: headers and patterns are all
    decoded to unicode
  * another possible REMOVE_DKIM_HEADERS setting
  * SMTPDirect.py can now do SASL authentication and STARTTLS
  * bug fixes, i18n updates
  * for further details see NEWS</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Require fillup and insserv if we call them</changelog>
  <changelog author="kukuk@suse.de" date="1490011200">- Require system user wwwrun</changelog>
  <changelog author="dimstar@opensuse.org" date="1498737600">- Fix pre script for usage with more recent postfix versions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dmueller@suse.com" date="1511784000">- remove distributable flag (which is always true):
  drops SuSEconfig.mailman-SuSE, mailman-SuSE.patch, mailman-SuSE2.patch</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1521115200">- update to 2.1.26
  * An XSS vulnerability in the user options CGI could allow a crafted
    URL to execute arbitrary javascript in a user's browser.  A
    related issue could expose information on a user's options page
    without requiring login. (CVE-2018-5950) bsc#1077358
  * Google reCAPTCHA v2
  * New bin/mailman-config command to display various information
    about this Mailman version and how it was configured.
  * bug fixes, i18n updates
  * for further details see NEWS
- updato to 2.1.25
  * The admindb held subscriptions listing now includes the date of the
    most recent request from the address.
  * bug fixes, i18n updates
  * for further details see NEWS
- update to 2.1.24
  * bug fixes, i18n updates
  * for further details see NEWS
- Rename and refresh patch:
  * mailman-2.1.2-list_lists.patch to mailman-2.1.26-list_lists.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1521201600">- Sort out with spec-cleaner
- Use direct paths in post scriptlets and properly state their deps
- Do not attempt user creation during build, fails anyway
- Use proper user creation code in scriptlets</changelog>
  <changelog author="tchvatal@suse.com" date="1521460800">- Fix install prefix for some of the files
- Install license file</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1530187200">- update to 2.1.27
  * Existing protections against malicious listowners injecting evil
    scripts into listinfo pages have had a few more checks added.
    JVN#00846677/JPCERT#97432283/CVE-2018-0618 (boo#1099510)
  * A few more error messages have had their values HTML escaped.
    JVN#00846677/JPCERT#97432283/CVE-2018-0618 (boo#1099510)
  * The hash generated when SUBSCRIBE_FORM_SECRET is set could have been
    the same as one generated at the same time for a different list and
    IP address.  While this is not thought to be exploitable in any way,
    the generation has been changed to avoid this.
  * An option has been added to bin/add_members to issue invitations
    instead of immediately adding members.
  * A new BLOCK_SPAMHAUS_LISTED_IP_SUBSCRIBE setting has been added to
    enable blocking web subscribes from IPv4 addresses listed in Spamhaus
    SBL, CSS or XBL.  It will work with IPv6 addresses if Python's
    py2-ipaddress module is installed.  The module can be installed via pip
    if not included in your Python.
  * Mailman has a new 'security' log and logs
    authentication failures to the various web CGI functions.  The logged
    data include the remote IP and can be used to automate blocking of IPs
    with something like fail2ban.  Since Mailman 2.1.14, these have returned
    an http 401 status and the information should be logged by the web
    server, but this new log makes that more convenient.  Also, the
    'mischief' log entries for 'hostile listname' noe include the remote IP
    if available.
  * admin notices of (un)subscribes now may give
    the source of the action.  This consists of a %(whence)s replacement
    that has been added to the admin(un)subscribeack.txt templates.  Thanks
    to Yasuhito FUTATSUKI for updating the non-English templates and help
    with internationalizing the reasons.
  * there is a new
    BLOCK_SPAMHAUS_LISTED_DBL_SUBSCRIBE setting to enable blocking web
    subscribes for addresses in domains listed in the Spamhaus DBL.
  * i18n &amp; Bugfixes
  * for further details see NEWS</changelog>
</package>
<package pkgid="2e2f4c1ada22c53fd2c56a9374155f546c8033690c2af687324a90f962b06649" name="mailman" arch="src">
  <version epoch="0" ver="2.1.29" rel="lp150.2.8.1"/>
  <changelog author="jmatejek@suse.com" date="1392379200">- rename README.SuSE
- update to 2.1.17
  * option to strip/keep non-standard headers in anonymous lists
  * option to make membership checks on mail-news gateway
  * UI improvements for admin interface
  * digest_size_threshold = 0 now means that *no* digest is sent
    based on size
  * option to CSRF-protect subscription form
  * admins can add members with mail delivery disabled
  * configurable name of master lock
  * updated translations
- updated list_lists patch because upstream list_lists now has
  an argument -p / --public-archive that does the same as SUSE-specific
  argument -u / --public-archives. Both spellings are supported
  and are synonymous.</changelog>
  <changelog author="hsk@imb-jena.de" date="1413547200">- update to 2.1.18
  * mailman now requires dnspython
  * new dmarc_moderation_action feature and corresponging list and default
    settings
  * bug fixes</changelog>
  <changelog author="hsk@imb-jena.de" date="1425297600">- update to 2.1.19
  * backports from 2.2 development branch
  - new list attribute 'subscribe_auto_approval'
  - added 'automate' option to bin/newlist
  - processing of Topics regular expressions has changed
  - added real name display to the web roster, controlled by new
    ROSTER_DISPLAY_REALNAME setting
  - bug fixes
  * new list attribute dmarc_wrapped_message_text and
    DEFAULT_DMARC_WRAPPED_MESSAGE_TEXT setting
  * new list attribute equivalent_domains and DEFAULT_EQUIVALENT_DOMAINS
    setting
  * new WEB_HEAD_ADD setting
  * new DEFAULT_SUBSCRIBE_OR_INVITE setting
  * new list attribute bounce_notify_owner_on_bounce_increment and
    DEFAULT_BOUNCE_NOTIFY_OWNER_ON_BOUNCE_INCREMENT setting
  * log files, request.pck files and heldmsg-* files are no longer created
    world readable
  * i18n updates
  * bug fixes</changelog>
  <changelog author="hsk@imb-jena.de" date="1427803200">- update to 2.1.20
  * fix for CVE-2015-2775 (path traversal vulnerability)
  * new Address Change sub-section in the web admin Membership
    Management section
  * translation updates and bug fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1454500800">- Use url for source
- Add gpg signature</changelog>
  <changelog author="hsk@imb-jena.de" date="1456747200">- update to 2.1.21
  * new dmarc_none_moderation_action list setting
  * new feature to automatically turn on moderation for single list
    members (spam prevention)
  * new mm_cfg.py setting GLOBAL_BAN_LIST
  * translation updates and bug fixes
  * for more details see NEWS and Mailman/Defaults.py
- mailman-2.1.4-dirmode.patch: adjusted to 2.1.21</changelog>
  <changelog author="hsk@imb-jena.de" date="1459252800">- updated mailman-apache2.conf to support "require" syntax of recent
  apache httpd</changelog>
  <changelog author="hsk@imb-jena.de" date="1460980800">- update to 2.1.22
  * bug fixes, i18n updates; for details see NEWS</changelog>
  <changelog author="hsk17@mail.de" date="1472472000">- update to 2.1.23
  * CSRF protection in user options page (CVE-2016-6893)
  * header_filter_rules matching: headers and patterns are all
    decoded to unicode
  * another possible REMOVE_DKIM_HEADERS setting
  * SMTPDirect.py can now do SASL authentication and STARTTLS
  * bug fixes, i18n updates
  * for further details see NEWS</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Require fillup and insserv if we call them</changelog>
  <changelog author="kukuk@suse.de" date="1490011200">- Require system user wwwrun</changelog>
  <changelog author="dimstar@opensuse.org" date="1498737600">- Fix pre script for usage with more recent postfix versions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dmueller@suse.com" date="1511784000">- remove distributable flag (which is always true):
  drops SuSEconfig.mailman-SuSE, mailman-SuSE.patch, mailman-SuSE2.patch</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1521115200">- update to 2.1.26
  * An XSS vulnerability in the user options CGI could allow a crafted
    URL to execute arbitrary javascript in a user's browser.  A
    related issue could expose information on a user's options page
    without requiring login. (CVE-2018-5950) bsc#1077358
  * Google reCAPTCHA v2
  * New bin/mailman-config command to display various information
    about this Mailman version and how it was configured.
  * bug fixes, i18n updates
  * for further details see NEWS
- updato to 2.1.25
  * The admindb held subscriptions listing now includes the date of the
    most recent request from the address.
  * bug fixes, i18n updates
  * for further details see NEWS
- update to 2.1.24
  * bug fixes, i18n updates
  * for further details see NEWS
- Rename and refresh patch:
  * mailman-2.1.2-list_lists.patch to mailman-2.1.26-list_lists.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1521201600">- Sort out with spec-cleaner
- Use direct paths in post scriptlets and properly state their deps
- Do not attempt user creation during build, fails anyway
- Use proper user creation code in scriptlets</changelog>
  <changelog author="tchvatal@suse.com" date="1521460800">- Fix install prefix for some of the files
- Install license file</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1530187200">- update to 2.1.27
  * Existing protections against malicious listowners injecting evil
    scripts into listinfo pages have had a few more checks added.
    JVN#00846677/JPCERT#97432283/CVE-2018-0618 (boo#1099510)
  * A few more error messages have had their values HTML escaped.
    JVN#00846677/JPCERT#97432283/CVE-2018-0618 (boo#1099510)
  * The hash generated when SUBSCRIBE_FORM_SECRET is set could have been
    the same as one generated at the same time for a different list and
    IP address.  While this is not thought to be exploitable in any way,
    the generation has been changed to avoid this.
  * An option has been added to bin/add_members to issue invitations
    instead of immediately adding members.
  * A new BLOCK_SPAMHAUS_LISTED_IP_SUBSCRIBE setting has been added to
    enable blocking web subscribes from IPv4 addresses listed in Spamhaus
    SBL, CSS or XBL.  It will work with IPv6 addresses if Python's
    py2-ipaddress module is installed.  The module can be installed via pip
    if not included in your Python.
  * Mailman has a new 'security' log and logs
    authentication failures to the various web CGI functions.  The logged
    data include the remote IP and can be used to automate blocking of IPs
    with something like fail2ban.  Since Mailman 2.1.14, these have returned
    an http 401 status and the information should be logged by the web
    server, but this new log makes that more convenient.  Also, the
    'mischief' log entries for 'hostile listname' noe include the remote IP
    if available.
  * admin notices of (un)subscribes now may give
    the source of the action.  This consists of a %(whence)s replacement
    that has been added to the admin(un)subscribeack.txt templates.  Thanks
    to Yasuhito FUTATSUKI for updating the non-English templates and help
    with internationalizing the reasons.
  * there is a new
    BLOCK_SPAMHAUS_LISTED_DBL_SUBSCRIBE setting to enable blocking web
    subscribes for addresses in domains listed in the Spamhaus DBL.
  * i18n &amp; Bugfixes
  * for further details see NEWS</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1532433600">- update to 2.1.28:
  * A content spoofing vulnerability with invalid list name messages in
    the web UI has been fixed.  CVE-2018-13796 bsc#1101288
  * It is now possible to edit HTML and text templates via the web admin
    UI in a supported language other than the list's preferred_language.
  * The Japanese translation has been updated
  * The German translation has been updated
  * The Esperanto translation has been updated
  * The BLOCK_SPAMHAUS_LISTED_DBL_SUBSCRIBE feature added in 2.1.27 was
    not working.  This is fixed.
  * Escaping of HTML entities for the web UI is now done more selectively.</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1533297600">- update to 2.1.29:
  * Fixed the listinfo and admin overview pages that were broken</changelog>
</package>
<package pkgid="43aa215abed2ccbc2f94ce06418ae6bb6c37947ec3bb02e2b5cca481fcd326cb" name="mailman" arch="x86_64">
  <version epoch="0" ver="2.1.29" rel="lp150.2.8.1"/>
  <changelog author="jmatejek@suse.com" date="1392379200">- rename README.SuSE
- update to 2.1.17
  * option to strip/keep non-standard headers in anonymous lists
  * option to make membership checks on mail-news gateway
  * UI improvements for admin interface
  * digest_size_threshold = 0 now means that *no* digest is sent
    based on size
  * option to CSRF-protect subscription form
  * admins can add members with mail delivery disabled
  * configurable name of master lock
  * updated translations
- updated list_lists patch because upstream list_lists now has
  an argument -p / --public-archive that does the same as SUSE-specific
  argument -u / --public-archives. Both spellings are supported
  and are synonymous.</changelog>
  <changelog author="hsk@imb-jena.de" date="1413547200">- update to 2.1.18
  * mailman now requires dnspython
  * new dmarc_moderation_action feature and corresponging list and default
    settings
  * bug fixes</changelog>
  <changelog author="hsk@imb-jena.de" date="1425297600">- update to 2.1.19
  * backports from 2.2 development branch
  - new list attribute 'subscribe_auto_approval'
  - added 'automate' option to bin/newlist
  - processing of Topics regular expressions has changed
  - added real name display to the web roster, controlled by new
    ROSTER_DISPLAY_REALNAME setting
  - bug fixes
  * new list attribute dmarc_wrapped_message_text and
    DEFAULT_DMARC_WRAPPED_MESSAGE_TEXT setting
  * new list attribute equivalent_domains and DEFAULT_EQUIVALENT_DOMAINS
    setting
  * new WEB_HEAD_ADD setting
  * new DEFAULT_SUBSCRIBE_OR_INVITE setting
  * new list attribute bounce_notify_owner_on_bounce_increment and
    DEFAULT_BOUNCE_NOTIFY_OWNER_ON_BOUNCE_INCREMENT setting
  * log files, request.pck files and heldmsg-* files are no longer created
    world readable
  * i18n updates
  * bug fixes</changelog>
  <changelog author="hsk@imb-jena.de" date="1427803200">- update to 2.1.20
  * fix for CVE-2015-2775 (path traversal vulnerability)
  * new Address Change sub-section in the web admin Membership
    Management section
  * translation updates and bug fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1454500800">- Use url for source
- Add gpg signature</changelog>
  <changelog author="hsk@imb-jena.de" date="1456747200">- update to 2.1.21
  * new dmarc_none_moderation_action list setting
  * new feature to automatically turn on moderation for single list
    members (spam prevention)
  * new mm_cfg.py setting GLOBAL_BAN_LIST
  * translation updates and bug fixes
  * for more details see NEWS and Mailman/Defaults.py
- mailman-2.1.4-dirmode.patch: adjusted to 2.1.21</changelog>
  <changelog author="hsk@imb-jena.de" date="1459252800">- updated mailman-apache2.conf to support "require" syntax of recent
  apache httpd</changelog>
  <changelog author="hsk@imb-jena.de" date="1460980800">- update to 2.1.22
  * bug fixes, i18n updates; for details see NEWS</changelog>
  <changelog author="hsk17@mail.de" date="1472472000">- update to 2.1.23
  * CSRF protection in user options page (CVE-2016-6893)
  * header_filter_rules matching: headers and patterns are all
    decoded to unicode
  * another possible REMOVE_DKIM_HEADERS setting
  * SMTPDirect.py can now do SASL authentication and STARTTLS
  * bug fixes, i18n updates
  * for further details see NEWS</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Require fillup and insserv if we call them</changelog>
  <changelog author="kukuk@suse.de" date="1490011200">- Require system user wwwrun</changelog>
  <changelog author="dimstar@opensuse.org" date="1498737600">- Fix pre script for usage with more recent postfix versions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dmueller@suse.com" date="1511784000">- remove distributable flag (which is always true):
  drops SuSEconfig.mailman-SuSE, mailman-SuSE.patch, mailman-SuSE2.patch</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1521115200">- update to 2.1.26
  * An XSS vulnerability in the user options CGI could allow a crafted
    URL to execute arbitrary javascript in a user's browser.  A
    related issue could expose information on a user's options page
    without requiring login. (CVE-2018-5950) bsc#1077358
  * Google reCAPTCHA v2
  * New bin/mailman-config command to display various information
    about this Mailman version and how it was configured.
  * bug fixes, i18n updates
  * for further details see NEWS
- updato to 2.1.25
  * The admindb held subscriptions listing now includes the date of the
    most recent request from the address.
  * bug fixes, i18n updates
  * for further details see NEWS
- update to 2.1.24
  * bug fixes, i18n updates
  * for further details see NEWS
- Rename and refresh patch:
  * mailman-2.1.2-list_lists.patch to mailman-2.1.26-list_lists.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1521201600">- Sort out with spec-cleaner
- Use direct paths in post scriptlets and properly state their deps
- Do not attempt user creation during build, fails anyway
- Use proper user creation code in scriptlets</changelog>
  <changelog author="tchvatal@suse.com" date="1521460800">- Fix install prefix for some of the files
- Install license file</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1530187200">- update to 2.1.27
  * Existing protections against malicious listowners injecting evil
    scripts into listinfo pages have had a few more checks added.
    JVN#00846677/JPCERT#97432283/CVE-2018-0618 (boo#1099510)
  * A few more error messages have had their values HTML escaped.
    JVN#00846677/JPCERT#97432283/CVE-2018-0618 (boo#1099510)
  * The hash generated when SUBSCRIBE_FORM_SECRET is set could have been
    the same as one generated at the same time for a different list and
    IP address.  While this is not thought to be exploitable in any way,
    the generation has been changed to avoid this.
  * An option has been added to bin/add_members to issue invitations
    instead of immediately adding members.
  * A new BLOCK_SPAMHAUS_LISTED_IP_SUBSCRIBE setting has been added to
    enable blocking web subscribes from IPv4 addresses listed in Spamhaus
    SBL, CSS or XBL.  It will work with IPv6 addresses if Python's
    py2-ipaddress module is installed.  The module can be installed via pip
    if not included in your Python.
  * Mailman has a new 'security' log and logs
    authentication failures to the various web CGI functions.  The logged
    data include the remote IP and can be used to automate blocking of IPs
    with something like fail2ban.  Since Mailman 2.1.14, these have returned
    an http 401 status and the information should be logged by the web
    server, but this new log makes that more convenient.  Also, the
    'mischief' log entries for 'hostile listname' noe include the remote IP
    if available.
  * admin notices of (un)subscribes now may give
    the source of the action.  This consists of a %(whence)s replacement
    that has been added to the admin(un)subscribeack.txt templates.  Thanks
    to Yasuhito FUTATSUKI for updating the non-English templates and help
    with internationalizing the reasons.
  * there is a new
    BLOCK_SPAMHAUS_LISTED_DBL_SUBSCRIBE setting to enable blocking web
    subscribes for addresses in domains listed in the Spamhaus DBL.
  * i18n &amp; Bugfixes
  * for further details see NEWS</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1532433600">- update to 2.1.28:
  * A content spoofing vulnerability with invalid list name messages in
    the web UI has been fixed.  CVE-2018-13796 bsc#1101288
  * It is now possible to edit HTML and text templates via the web admin
    UI in a supported language other than the list's preferred_language.
  * The Japanese translation has been updated
  * The German translation has been updated
  * The Esperanto translation has been updated
  * The BLOCK_SPAMHAUS_LISTED_DBL_SUBSCRIBE feature added in 2.1.27 was
    not working.  This is fixed.
  * Escaping of HTML entities for the web UI is now done more selectively.</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1533297600">- update to 2.1.29:
  * Fixed the listinfo and admin overview pages that were broken</changelog>
</package>
<package pkgid="b18c38ece75c718245d110dd8d7a4649ff008f63bce4e249c606915b39fa2b3f" name="make" arch="src">
  <version epoch="0" ver="4.2.1" rel="lp150.6.3.1"/>
  <changelog author="mhrusecky@suse.cz" date="1318334400">- reverting previous change (qemu binfmt was fixed)</changelog>
  <changelog author="meissner@suse.de" date="1334059200">- Faster globbing support from upstream to speed up
  some large make projects like libreoffice. bnc#753323</changelog>
  <changelog author="dimstar@opensuse.org" date="1344427200">- Add make-arglength.patch: fix the argument list limit of GNU make
- Add make-parallel-build.patch: Fix parallel build issues present
  in GNU make 3.82
- Both patches taken from http://trac.webkit.org/browser/trunk/Tools/gtk/patches/
  are known by upstream and are mandatory to be able to build
  libwebkit 1.9.6+.</changelog>
  <changelog author="dmueller@suse.com" date="1359806400">- Add config-guess-update.diff:
  update config.guess/sub to handle aarch64</changelog>
  <changelog author="schwab@suse.de" date="1360929600">- Fix missing definition of PAGE_SIZE</changelog>
  <changelog author="meissner@suse.com" date="1363867200">- use source urls
- gpg verification</changelog>
  <changelog author="coolo@suse.com" date="1371556800">- remove gpg verification from bootstrap packages</changelog>
  <changelog author="meissner@suse.com" date="1380456000">- fixed a make target issue with .a (x y) targets (bnc#841457)</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1385035200">- Update to 4.0
  * see details in NEWS and ChangeLog files
  * Bugfixes, a complete list of bugs fixed in this version is
    available here
    http://sv.gnu.org/bugs/index.php?group=make&amp;report_id=111&amp;fix_release_id=101&amp;set=custom
  * WARNING: Backward-incompatibility! backslash/newline handling
  * New feature: GNU Guile integration
  * New command line option: --output-sync (-O) enables grouping of
    output by target or by recursive make.
  * New command line option: --trace enables tracing of targets.
  * New command line option argument: --debug now accepts a "n"
    (none) flag which disables all debugging settings that are
    currently enabled.
  * New feature: The "job server" capability is now supported on
    Windows.
  * New feature: The .ONESHELL capability is now supported on
    Windows.
  * New feature: "!=" shell assignment operator as an alternative
    to the $(shell ...) function.  Implemented for compatibility
    with BSD makefiles.
  * New feature: "::=" simple assignment operator as defined by
    POSIX in 2012.
  * New feature: Loadable objects
  * New function: $(file ...) writes to a file.
  * New variable: $(GNUMAKEFLAGS) will be parsed for make flags,
    just like MAKEFLAGS is.  It can be set in the environment or
    the makefile, containing GNU make-specific flags to allow your
    makefile to be portable to other versions of make.
  * New variable: `MAKE_HOST' gives the name of the host
    architecture make was compiled for.
  * Behavior of MAKEFLAGS and MFLAGS is more rigorously defined.
  * Setting the -r and -R options in MAKEFLAGS inside a makefile
    now works as expected, removing all built-in rules and
    variables, respectively.
  * If a recipe fails, the makefile name and linenumber of the
    recipe are shown.
  * A .RECIPEPREFIX setting is remembered per-recipe and variables
    expanded in that recipe also use that recipe prefix setting.
  * In -p output, .RECIPEPREFIX settings are shown and all
    target-specific variables are output as if in a makefile,
    instead of as comments.
  * On MS-Windows, recipes that use ".." quoting will no longer force
    invocation of commands via temporary batch files.
- Removed following patches, applied by upstream or fixed otherwise
  * make-disable-broken-tests.diff
  * make-savannah-bug30723-expand_makeflags_before_reexec.diff
  * make-savannah-bug30612-handling_of_archives.diff
  * make-fix_whitespace_tokenization.diff
  * make-glob-faster.patch
  * make-parallel-build.patch
  * bug-841457_make-savannah-bug30612-handling_of_archives-part2.txt
  * config-guess-update.diff
- remove make-arglength.patch which was rejected by upstream. It
  was just a dirty hack to build a broken libwebkit version
- remove make-slowdown-parallelism.diff, haven't seen any timing
  problems of the test-suite anymore</changelog>
  <changelog author="draht@suse.de" date="1394539200">- make-testcases_timeout.diff: increase the timeout of test cases
  from 5 to 8 seconds. With some testcases using sleep with 2
  seconds or more, the tests can fail erroneously on a busy build
  system.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413374400">- make 4.1:
  * New variables: $(MAKE_TERMOUT) and $(MAKE_TERMERR) are set to
    non-empty values if stdout or stderr, respectively, are
    believed to be writing to a terminal.  These variables are
    exported by default.
  * Allow a no-text-argument form of the $(file ...) function.
  * Change the fatal error for mixed explicit and implicit rules
- refresh for contect changes:
  * make-library-search-path.diff
  * make-testcases_timeout.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1416225600">- Cleanup a bit with spec-cleaner
- Split lang stuff into subpackage and add recommends
- Add patch to work with non-mounted pts:
  * make-4.1-fix_null_returns_from_ttyname.patch</changelog>
  <changelog author="schwab@suse.de" date="1442404800">- undefine-variables.patch: Force recomputing .VARIABLES when a variable
  was made undefined (bsc#934131)</changelog>
  <changelog author="schwab@suse.de" date="1464004800">- Update to make 4.2
  * New variable: $(.SHELLSTATUS) is set to the exit status of the last != or
    $(shell ...) function invoked in this instance of make.
  * The $(file ...) function can now read from a file with $(file &lt;FILE).
  * The makefile line numbers shown by GNU make now point directly to the
    specific line in the recipe where the failure or warning occurred.
  * The interface to GNU make's "jobserver" is stable as documented in the
    manual, for tools which may want to access it.
  * The amount of parallelism can be determined by querying MAKEFLAGS
- undefine-variables.patch: Removed
- make-4.1-fix_null_returns_from_ttyname.patch: Removed
- 0001-SV-47995-Ensure-forced-double-colon-rules-work-with-.patch: Added
- 0002-main.c-main-SV-48009-Reset-stack-limit-for-make-re-e.patch: Added
- Move %install_info_delete to %preun</changelog>
  <changelog author="mpluskal@suse.com" date="1465732800">- Update to version 4.2.1:
  * bug-fix release
- Drop upstream patches:
  * 0001-SV-47995-Ensure-forced-double-colon-rules-work-with-.patch
  * 0002-main.c-main-SV-48009-Reset-stack-limit-for-make-re-e.patch
- Small spec file cleanup
  * man and info pages are implicitly marked as documentation</changelog>
  <changelog author="schwab@suse.de" date="1505217600">- Print out testsuite results after failure</changelog>
  <changelog author="bwiedemann@suse.com" date="1508328000">- Add make-sorted-glob.patch to make many other packages like dpdk
  build reproducibly without patching them individually (boo#1041090)</changelog>
  <changelog author="schwab@suse.de" date="1509969600">- glob-lstat.patch: Do not assume glibc glob internals</changelog>
  <changelog author="schwab@suse.de" date="1516708800">- test-driver.patch: let perl find test_driver.pl
- glob-interface.patch: Support GLIBC glob interface version 2</changelog>
  <changelog author="schwab@suse.de" date="1531742400">- pselect-non-blocking.patch: Use a non-blocking read with pselect to avoid
  hangs (bsc#1100504)</changelog>
</package>
<package pkgid="eda3b3fe8ce02a29c2f5207f4e45149d0c3cdc7c762c2ceb5eb26cb060c8199f" name="make" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="lp150.6.3.1"/>
  <changelog author="mhrusecky@suse.cz" date="1318334400">- reverting previous change (qemu binfmt was fixed)</changelog>
  <changelog author="meissner@suse.de" date="1334059200">- Faster globbing support from upstream to speed up
  some large make projects like libreoffice. bnc#753323</changelog>
  <changelog author="dimstar@opensuse.org" date="1344427200">- Add make-arglength.patch: fix the argument list limit of GNU make
- Add make-parallel-build.patch: Fix parallel build issues present
  in GNU make 3.82
- Both patches taken from http://trac.webkit.org/browser/trunk/Tools/gtk/patches/
  are known by upstream and are mandatory to be able to build
  libwebkit 1.9.6+.</changelog>
  <changelog author="dmueller@suse.com" date="1359806400">- Add config-guess-update.diff:
  update config.guess/sub to handle aarch64</changelog>
  <changelog author="schwab@suse.de" date="1360929600">- Fix missing definition of PAGE_SIZE</changelog>
  <changelog author="meissner@suse.com" date="1363867200">- use source urls
- gpg verification</changelog>
  <changelog author="coolo@suse.com" date="1371556800">- remove gpg verification from bootstrap packages</changelog>
  <changelog author="meissner@suse.com" date="1380456000">- fixed a make target issue with .a (x y) targets (bnc#841457)</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1385035200">- Update to 4.0
  * see details in NEWS and ChangeLog files
  * Bugfixes, a complete list of bugs fixed in this version is
    available here
    http://sv.gnu.org/bugs/index.php?group=make&amp;report_id=111&amp;fix_release_id=101&amp;set=custom
  * WARNING: Backward-incompatibility! backslash/newline handling
  * New feature: GNU Guile integration
  * New command line option: --output-sync (-O) enables grouping of
    output by target or by recursive make.
  * New command line option: --trace enables tracing of targets.
  * New command line option argument: --debug now accepts a "n"
    (none) flag which disables all debugging settings that are
    currently enabled.
  * New feature: The "job server" capability is now supported on
    Windows.
  * New feature: The .ONESHELL capability is now supported on
    Windows.
  * New feature: "!=" shell assignment operator as an alternative
    to the $(shell ...) function.  Implemented for compatibility
    with BSD makefiles.
  * New feature: "::=" simple assignment operator as defined by
    POSIX in 2012.
  * New feature: Loadable objects
  * New function: $(file ...) writes to a file.
  * New variable: $(GNUMAKEFLAGS) will be parsed for make flags,
    just like MAKEFLAGS is.  It can be set in the environment or
    the makefile, containing GNU make-specific flags to allow your
    makefile to be portable to other versions of make.
  * New variable: `MAKE_HOST' gives the name of the host
    architecture make was compiled for.
  * Behavior of MAKEFLAGS and MFLAGS is more rigorously defined.
  * Setting the -r and -R options in MAKEFLAGS inside a makefile
    now works as expected, removing all built-in rules and
    variables, respectively.
  * If a recipe fails, the makefile name and linenumber of the
    recipe are shown.
  * A .RECIPEPREFIX setting is remembered per-recipe and variables
    expanded in that recipe also use that recipe prefix setting.
  * In -p output, .RECIPEPREFIX settings are shown and all
    target-specific variables are output as if in a makefile,
    instead of as comments.
  * On MS-Windows, recipes that use ".." quoting will no longer force
    invocation of commands via temporary batch files.
- Removed following patches, applied by upstream or fixed otherwise
  * make-disable-broken-tests.diff
  * make-savannah-bug30723-expand_makeflags_before_reexec.diff
  * make-savannah-bug30612-handling_of_archives.diff
  * make-fix_whitespace_tokenization.diff
  * make-glob-faster.patch
  * make-parallel-build.patch
  * bug-841457_make-savannah-bug30612-handling_of_archives-part2.txt
  * config-guess-update.diff
- remove make-arglength.patch which was rejected by upstream. It
  was just a dirty hack to build a broken libwebkit version
- remove make-slowdown-parallelism.diff, haven't seen any timing
  problems of the test-suite anymore</changelog>
  <changelog author="draht@suse.de" date="1394539200">- make-testcases_timeout.diff: increase the timeout of test cases
  from 5 to 8 seconds. With some testcases using sleep with 2
  seconds or more, the tests can fail erroneously on a busy build
  system.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413374400">- make 4.1:
  * New variables: $(MAKE_TERMOUT) and $(MAKE_TERMERR) are set to
    non-empty values if stdout or stderr, respectively, are
    believed to be writing to a terminal.  These variables are
    exported by default.
  * Allow a no-text-argument form of the $(file ...) function.
  * Change the fatal error for mixed explicit and implicit rules
- refresh for contect changes:
  * make-library-search-path.diff
  * make-testcases_timeout.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1416225600">- Cleanup a bit with spec-cleaner
- Split lang stuff into subpackage and add recommends
- Add patch to work with non-mounted pts:
  * make-4.1-fix_null_returns_from_ttyname.patch</changelog>
  <changelog author="schwab@suse.de" date="1442404800">- undefine-variables.patch: Force recomputing .VARIABLES when a variable
  was made undefined (bsc#934131)</changelog>
  <changelog author="schwab@suse.de" date="1464004800">- Update to make 4.2
  * New variable: $(.SHELLSTATUS) is set to the exit status of the last != or
    $(shell ...) function invoked in this instance of make.
  * The $(file ...) function can now read from a file with $(file &lt;FILE).
  * The makefile line numbers shown by GNU make now point directly to the
    specific line in the recipe where the failure or warning occurred.
  * The interface to GNU make's "jobserver" is stable as documented in the
    manual, for tools which may want to access it.
  * The amount of parallelism can be determined by querying MAKEFLAGS
- undefine-variables.patch: Removed
- make-4.1-fix_null_returns_from_ttyname.patch: Removed
- 0001-SV-47995-Ensure-forced-double-colon-rules-work-with-.patch: Added
- 0002-main.c-main-SV-48009-Reset-stack-limit-for-make-re-e.patch: Added
- Move %install_info_delete to %preun</changelog>
  <changelog author="mpluskal@suse.com" date="1465732800">- Update to version 4.2.1:
  * bug-fix release
- Drop upstream patches:
  * 0001-SV-47995-Ensure-forced-double-colon-rules-work-with-.patch
  * 0002-main.c-main-SV-48009-Reset-stack-limit-for-make-re-e.patch
- Small spec file cleanup
  * man and info pages are implicitly marked as documentation</changelog>
  <changelog author="schwab@suse.de" date="1505217600">- Print out testsuite results after failure</changelog>
  <changelog author="bwiedemann@suse.com" date="1508328000">- Add make-sorted-glob.patch to make many other packages like dpdk
  build reproducibly without patching them individually (boo#1041090)</changelog>
  <changelog author="schwab@suse.de" date="1509969600">- glob-lstat.patch: Do not assume glibc glob internals</changelog>
  <changelog author="schwab@suse.de" date="1516708800">- test-driver.patch: let perl find test_driver.pl
- glob-interface.patch: Support GLIBC glob interface version 2</changelog>
  <changelog author="schwab@suse.de" date="1531742400">- pselect-non-blocking.patch: Use a non-blocking read with pselect to avoid
  hangs (bsc#1100504)</changelog>
</package>
<package pkgid="f511be58bdcc47ea625ad50332bf1d2a885af9d3051c8a1bcf4933d180c3052a" name="make-lang" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="lp150.6.3.1"/>
  <changelog author="mhrusecky@suse.cz" date="1318334400">- reverting previous change (qemu binfmt was fixed)</changelog>
  <changelog author="meissner@suse.de" date="1334059200">- Faster globbing support from upstream to speed up
  some large make projects like libreoffice. bnc#753323</changelog>
  <changelog author="dimstar@opensuse.org" date="1344427200">- Add make-arglength.patch: fix the argument list limit of GNU make
- Add make-parallel-build.patch: Fix parallel build issues present
  in GNU make 3.82
- Both patches taken from http://trac.webkit.org/browser/trunk/Tools/gtk/patches/
  are known by upstream and are mandatory to be able to build
  libwebkit 1.9.6+.</changelog>
  <changelog author="dmueller@suse.com" date="1359806400">- Add config-guess-update.diff:
  update config.guess/sub to handle aarch64</changelog>
  <changelog author="schwab@suse.de" date="1360929600">- Fix missing definition of PAGE_SIZE</changelog>
  <changelog author="meissner@suse.com" date="1363867200">- use source urls
- gpg verification</changelog>
  <changelog author="coolo@suse.com" date="1371556800">- remove gpg verification from bootstrap packages</changelog>
  <changelog author="meissner@suse.com" date="1380456000">- fixed a make target issue with .a (x y) targets (bnc#841457)</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1385035200">- Update to 4.0
  * see details in NEWS and ChangeLog files
  * Bugfixes, a complete list of bugs fixed in this version is
    available here
    http://sv.gnu.org/bugs/index.php?group=make&amp;report_id=111&amp;fix_release_id=101&amp;set=custom
  * WARNING: Backward-incompatibility! backslash/newline handling
  * New feature: GNU Guile integration
  * New command line option: --output-sync (-O) enables grouping of
    output by target or by recursive make.
  * New command line option: --trace enables tracing of targets.
  * New command line option argument: --debug now accepts a "n"
    (none) flag which disables all debugging settings that are
    currently enabled.
  * New feature: The "job server" capability is now supported on
    Windows.
  * New feature: The .ONESHELL capability is now supported on
    Windows.
  * New feature: "!=" shell assignment operator as an alternative
    to the $(shell ...) function.  Implemented for compatibility
    with BSD makefiles.
  * New feature: "::=" simple assignment operator as defined by
    POSIX in 2012.
  * New feature: Loadable objects
  * New function: $(file ...) writes to a file.
  * New variable: $(GNUMAKEFLAGS) will be parsed for make flags,
    just like MAKEFLAGS is.  It can be set in the environment or
    the makefile, containing GNU make-specific flags to allow your
    makefile to be portable to other versions of make.
  * New variable: `MAKE_HOST' gives the name of the host
    architecture make was compiled for.
  * Behavior of MAKEFLAGS and MFLAGS is more rigorously defined.
  * Setting the -r and -R options in MAKEFLAGS inside a makefile
    now works as expected, removing all built-in rules and
    variables, respectively.
  * If a recipe fails, the makefile name and linenumber of the
    recipe are shown.
  * A .RECIPEPREFIX setting is remembered per-recipe and variables
    expanded in that recipe also use that recipe prefix setting.
  * In -p output, .RECIPEPREFIX settings are shown and all
    target-specific variables are output as if in a makefile,
    instead of as comments.
  * On MS-Windows, recipes that use ".." quoting will no longer force
    invocation of commands via temporary batch files.
- Removed following patches, applied by upstream or fixed otherwise
  * make-disable-broken-tests.diff
  * make-savannah-bug30723-expand_makeflags_before_reexec.diff
  * make-savannah-bug30612-handling_of_archives.diff
  * make-fix_whitespace_tokenization.diff
  * make-glob-faster.patch
  * make-parallel-build.patch
  * bug-841457_make-savannah-bug30612-handling_of_archives-part2.txt
  * config-guess-update.diff
- remove make-arglength.patch which was rejected by upstream. It
  was just a dirty hack to build a broken libwebkit version
- remove make-slowdown-parallelism.diff, haven't seen any timing
  problems of the test-suite anymore</changelog>
  <changelog author="draht@suse.de" date="1394539200">- make-testcases_timeout.diff: increase the timeout of test cases
  from 5 to 8 seconds. With some testcases using sleep with 2
  seconds or more, the tests can fail erroneously on a busy build
  system.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413374400">- make 4.1:
  * New variables: $(MAKE_TERMOUT) and $(MAKE_TERMERR) are set to
    non-empty values if stdout or stderr, respectively, are
    believed to be writing to a terminal.  These variables are
    exported by default.
  * Allow a no-text-argument form of the $(file ...) function.
  * Change the fatal error for mixed explicit and implicit rules
- refresh for contect changes:
  * make-library-search-path.diff
  * make-testcases_timeout.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1416225600">- Cleanup a bit with spec-cleaner
- Split lang stuff into subpackage and add recommends
- Add patch to work with non-mounted pts:
  * make-4.1-fix_null_returns_from_ttyname.patch</changelog>
  <changelog author="schwab@suse.de" date="1442404800">- undefine-variables.patch: Force recomputing .VARIABLES when a variable
  was made undefined (bsc#934131)</changelog>
  <changelog author="schwab@suse.de" date="1464004800">- Update to make 4.2
  * New variable: $(.SHELLSTATUS) is set to the exit status of the last != or
    $(shell ...) function invoked in this instance of make.
  * The $(file ...) function can now read from a file with $(file &lt;FILE).
  * The makefile line numbers shown by GNU make now point directly to the
    specific line in the recipe where the failure or warning occurred.
  * The interface to GNU make's "jobserver" is stable as documented in the
    manual, for tools which may want to access it.
  * The amount of parallelism can be determined by querying MAKEFLAGS
- undefine-variables.patch: Removed
- make-4.1-fix_null_returns_from_ttyname.patch: Removed
- 0001-SV-47995-Ensure-forced-double-colon-rules-work-with-.patch: Added
- 0002-main.c-main-SV-48009-Reset-stack-limit-for-make-re-e.patch: Added
- Move %install_info_delete to %preun</changelog>
  <changelog author="mpluskal@suse.com" date="1465732800">- Update to version 4.2.1:
  * bug-fix release
- Drop upstream patches:
  * 0001-SV-47995-Ensure-forced-double-colon-rules-work-with-.patch
  * 0002-main.c-main-SV-48009-Reset-stack-limit-for-make-re-e.patch
- Small spec file cleanup
  * man and info pages are implicitly marked as documentation</changelog>
  <changelog author="schwab@suse.de" date="1505217600">- Print out testsuite results after failure</changelog>
  <changelog author="bwiedemann@suse.com" date="1508328000">- Add make-sorted-glob.patch to make many other packages like dpdk
  build reproducibly without patching them individually (boo#1041090)</changelog>
  <changelog author="schwab@suse.de" date="1509969600">- glob-lstat.patch: Do not assume glibc glob internals</changelog>
  <changelog author="schwab@suse.de" date="1516708800">- test-driver.patch: let perl find test_driver.pl
- glob-interface.patch: Support GLIBC glob interface version 2</changelog>
  <changelog author="schwab@suse.de" date="1531742400">- pselect-non-blocking.patch: Use a non-blocking read with pselect to avoid
  hangs (bsc#1100504)</changelog>
</package>
<package pkgid="5e0b432fe2ec75614a211706c394d8b88f2a1b2e521b6f9742136974b62318f0" name="mariadb" arch="src">
  <version epoch="0" ver="10.2.15" rel="lp150.2.3.2"/>
  <changelog author="kstreitova@suse.com" date="1499688000">- update to MariaDB 10.1.25 GA
  * notable changes
  * MariaDB can no longer be compiled with OpenSSL version 0.9.8
    and below. The last 0.9.8 release was in December 2015, it is
    out of support and is no longer getting security fixes.
  * MariaDB Backup is now beta
  * release notes and changelog:
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-release-notes
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-changelog
  * refresh mariadb-10.1.12-fortify-and-O.patch
  * remove mariadb-10.1.22-xtradb_null_checks.patch (MDEV-12358),
    a fix was merged upstream
  * update file lists for new man-pages and tools
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream</changelog>
  <changelog author="vcizek@suse.com" date="1505822400">- Explicitly require libopenssl-1_0_0-devel, to successfully build
  once we switch openssl to 1.1 (bsc#1042632)</changelog>
  <changelog author="bwiedemann@suse.com" date="1509019200">- Drop INFO_BIN from package because it is not needed
  and differs for every build (boo#1047218)</changelog>
  <changelog author="vcizek@suse.com" date="1509451200">- Also Require: libopenssl-1_0_0-devel from the libmysqlclient-devel package</changelog>
  <changelog author="kstreitova@suse.com" date="1509451201">- update to 10.2.10 GA
  * release notes and changelogs
    https://downloads.mariadb.org/mariadb/+releases/
  * fixes for the following security vulnerabilities
  * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365
  * 10.2.8:  CVE-2017-3636, CVE-2017-3641, CVE-2017-3653,
    CVE-2017-10320, CVE-2017-10365, CVE-2017-10379,
    CVE-2017-10384, CVE-2017-10286, CVE-2017-3257
  * 10.2.6:  CVE-2017-3308, CVE-2017-3309, CVE-2017-3453,
    CVE-2017-3456, CVE-2017-3464
  * 10.2.5:  CVE-2017-3313, CVE-2017-3302
  * [bsc#1042632], [bsc#1043328], [bsc#1019948], [fate#323738]
- refresh and rename the following patches:
  * mariadb-10.1.4-group.patch to
    mariadb-10.2.3-group.patch
  * mariadb-10.1.16-systemd-cmake.patch to
    mariadb-10.2.8-systemd-cmake.patch
  * mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
  * mariadb-10.1.12-fortify-and-O.patch to
    mariadb-10.2.4-fortify-and-O.patch
  * mysql-community-server-5.1.46-logrotate.patch to
    mariadb-10.2.4-logrotate.patch
- add mariadb-10.2.10.tar.gz.sig signature and mariadb.keyring files
- start building without client library part, use
  mariadb-connector-c for getting libmariadb libraries. Remove
  libmysclient* packages
- remove baselibs.conf because we no longer build client libraries
  here
- update %{soname} to 19 (libmysqld soname)
- change '=' to '&gt;=' in  Requires:mariadb-errormessages for
  libmysqld%{soname}. Versioned libraries shouldn't require regular
  packages with '='. It also causes problems during update (Problem:
  libmysqld18-10.1.25-3.1.x86_64 requires mariadb-errormessages = 10.1.25,
  but this requirement cannot be provided).
  Also add "Provides: mariadb-errormessages = 10.1.25" for errormessages
  subpackage that solves this problem for the current update.
- pack new files, remove mysql specific files
- remove README.SUSE as it was outdated
- package cleaning
  * run spec-cleaner
  * renumber sources
  * reorganize subpackages order and update summaries, descriptions
    and groups
  * tweak and add some comments to the specfile
  * remove warning about mysql-packaging repository that is no longer
    used for this package
  * remove checks whether we build mysql or mariadb (we build mariadb
    only)
- add galera subpackage
  * add missing "Requires:" (lsof, net-tools, rsync, socat,
    xtrabackup) for proper wsrep scripts functionality
  * add mariadb-10.2.9-galera_cnf.patch that enhances galera.cnf
    configuration file (add wsrep_on=OFF and set the location
    of the wsrep library)
  * rename README-wsrep to README.wsrep so it corresponds with the
    other README names
  * move galera_new_cluster, galera_recovery,
    use_galera_new_cluster.conf, wsrep_* scripts to the galera
    subpackage
- remove the following macros definitions:
  * %{_tmpfilesdir} - it's been defined in systemd macros since
    openSUSE 13.2
  * %{preferred} - we no longer need to distinguish between preferred
    and not preferred version (we build mariadb only)
  * %{with_mandatory_lz4} - mysql specific
  * %{build_extras}, %{pretty_name}, %{build_readline},
    %{builtin_plugins} and {libname} - they are no longer needed
- add the following macros
  * %{run_testsuite} macro that controls the run of the regression
    testsuite
  * %{ignore_testsuite_result} macro - when set to 1 it ignores
    results from the regression testsuite (debug purposes)
  * %{with_mroonga} macro (enable mroonga build for x86_64 archs only)
- rename %{with_jemalloc} to %{with_tokudb} and enable tokudb for
  x86_64 architectures for openSUSE and SLE15 [fate#323280]. Don't
  enable it for SLE12 (missing jemalloc dependency)
- add the following BuildRequires:
  * unixODBC-devel to allow ODBC support for Connect engine [bsc#1039034]
  * krb5-devel to build auth_gssapi.so plugin
  * libarchive-devel
  * use libboost_headers-devel instead of boost-devel for TW. Boost
    package has been split up and will migrate to using multibuild.
    This results in packages that unnecessarily build require
    boost-devel to cause major bottlenecks [bsc#1062583]
- do not use "BuildRequires: lzo-devel" for i586 and arm because
  it makes build fail
- add the following Requires:
  * hostname - as mariadb_install_db depends on this tool [bsc#1060110]
  * libaio-devel for libmysqld-devel because libmysqld depends
    on libaio
- tweak build options:
  * remove "DWITH_ASAN=OFF" - this option was added because of mysql
    and it's no longer needed
  * switch from "-DWITH_JEMALLOC=auto" to "-DWITH_JEMALLOC=system"
  * use "DCMAKE_SKIP_INSTALL_RPATH" - this allows to link with -rpath
    during build and fixes quite a few test suite failures. When
    installing the file -rpath is still disabled, so this should
    not have any effect on the installed binaries
  * add "-DWITH_LIBARCHIVE=ON" and "-DWITH_MARIABACKUP=ON"
  * remove -DWITH_BOOST=../boost/ as we use system boost now
- enable OQGRAPH to build (openSUSE only, SLE is missing Judy
  requirement)
- disable Cassandra storage engine build as it's no longer actively
  being developed (See MDEV-4695) [bsc#1055165]
  * Remove "BuildRequires: libthrift-devel" and %{with_cassandra}
    macros that are no longer needed now
- disable make test (Connector/C unit tests) as it requires a
  running server. These tests are part of mysql-test-run
  now (MDEV-12470)
- add suse_skipped_tests.list - the list of the tests that we want
  to skip (they fail correctly or the fix is in progress)
  * adjust mysql-test-run options to skip tests listed there
    [bsc#1041891]
- remove mytop utility that is packaged separately
- remove *.jar files from mysql-test
- remove python scripts remains from tokudb upstream
- remove generating of the MySQL NDB Cluster filelists
- remove removing of manpages for MySQL Carrier Grade Edition
- provide a symlink for the my_safe_process executable that was
  moved from its location to bindir
- update filename in /var/adm/update-messages to match
  documentation and build-compare pattern
- README is now README.md
- fix "file listed twice" build error</changelog>
  <changelog author="vcizek@suse.com" date="1511956800">- Disable openssl compatibility checking
  * the check uses CRYPTO_set_mem_functions() to set debugging
    memory allocation function. The setting only succeeds if no allocation
    was done before. Our fips self-tests, which are run from the library
    constructor, however, do allocate memory, so the subsequent call to
    CRYPTO_set_mem_functions causes the compatibility check to fail
  * add mariadb-10.2.10-disable_openssl_compatibility_check.patch</changelog>
  <changelog author="rhafer@suse.de" date="1511956801">- Added mariadb-10.2.10-wsrep_sst_common.patch (bsc#1069401).
  Upstream bug: https://jira.mariadb.org/browse/MDEV-14256</changelog>
  <changelog author="kstreitova@suse.com" date="1512043200">- update to 10.2.11 GA
  * release notes and changelog:
  * https://mariadb.com/kb/en/library/mariadb-10211-release-notes/
  * https://mariadb.com/kb/en/library/mariadb-10211-changelog/
- pack additional mroonga/groonga files
- change default charset to utf8mb4 for full Unicode support
  [fate#324329]
- remove mariadb-10.2.10-wsrep_sst_common.patch as it's no longer
  needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Do not manually delete
  %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release}-something:
  The file is listed as ghost and thus properly owned by the
  package.
- Use %tmpfiles_create which can cope with transactional updates.</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
</package>
<package pkgid="48d8d5165ca52d9fd8dbdd2b051cf48e73ce76dbc34108d690aaaa3aad5a1775" name="mariadb" arch="x86_64">
  <version epoch="0" ver="10.2.15" rel="lp150.2.3.2"/>
  <changelog author="kstreitova@suse.com" date="1499688000">- update to MariaDB 10.1.25 GA
  * notable changes
  * MariaDB can no longer be compiled with OpenSSL version 0.9.8
    and below. The last 0.9.8 release was in December 2015, it is
    out of support and is no longer getting security fixes.
  * MariaDB Backup is now beta
  * release notes and changelog:
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-release-notes
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-changelog
  * refresh mariadb-10.1.12-fortify-and-O.patch
  * remove mariadb-10.1.22-xtradb_null_checks.patch (MDEV-12358),
    a fix was merged upstream
  * update file lists for new man-pages and tools
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream</changelog>
  <changelog author="vcizek@suse.com" date="1505822400">- Explicitly require libopenssl-1_0_0-devel, to successfully build
  once we switch openssl to 1.1 (bsc#1042632)</changelog>
  <changelog author="bwiedemann@suse.com" date="1509019200">- Drop INFO_BIN from package because it is not needed
  and differs for every build (boo#1047218)</changelog>
  <changelog author="vcizek@suse.com" date="1509451200">- Also Require: libopenssl-1_0_0-devel from the libmysqlclient-devel package</changelog>
  <changelog author="kstreitova@suse.com" date="1509451201">- update to 10.2.10 GA
  * release notes and changelogs
    https://downloads.mariadb.org/mariadb/+releases/
  * fixes for the following security vulnerabilities
  * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365
  * 10.2.8:  CVE-2017-3636, CVE-2017-3641, CVE-2017-3653,
    CVE-2017-10320, CVE-2017-10365, CVE-2017-10379,
    CVE-2017-10384, CVE-2017-10286, CVE-2017-3257
  * 10.2.6:  CVE-2017-3308, CVE-2017-3309, CVE-2017-3453,
    CVE-2017-3456, CVE-2017-3464
  * 10.2.5:  CVE-2017-3313, CVE-2017-3302
  * [bsc#1042632], [bsc#1043328], [bsc#1019948], [fate#323738]
- refresh and rename the following patches:
  * mariadb-10.1.4-group.patch to
    mariadb-10.2.3-group.patch
  * mariadb-10.1.16-systemd-cmake.patch to
    mariadb-10.2.8-systemd-cmake.patch
  * mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
  * mariadb-10.1.12-fortify-and-O.patch to
    mariadb-10.2.4-fortify-and-O.patch
  * mysql-community-server-5.1.46-logrotate.patch to
    mariadb-10.2.4-logrotate.patch
- add mariadb-10.2.10.tar.gz.sig signature and mariadb.keyring files
- start building without client library part, use
  mariadb-connector-c for getting libmariadb libraries. Remove
  libmysclient* packages
- remove baselibs.conf because we no longer build client libraries
  here
- update %{soname} to 19 (libmysqld soname)
- change '=' to '&gt;=' in  Requires:mariadb-errormessages for
  libmysqld%{soname}. Versioned libraries shouldn't require regular
  packages with '='. It also causes problems during update (Problem:
  libmysqld18-10.1.25-3.1.x86_64 requires mariadb-errormessages = 10.1.25,
  but this requirement cannot be provided).
  Also add "Provides: mariadb-errormessages = 10.1.25" for errormessages
  subpackage that solves this problem for the current update.
- pack new files, remove mysql specific files
- remove README.SUSE as it was outdated
- package cleaning
  * run spec-cleaner
  * renumber sources
  * reorganize subpackages order and update summaries, descriptions
    and groups
  * tweak and add some comments to the specfile
  * remove warning about mysql-packaging repository that is no longer
    used for this package
  * remove checks whether we build mysql or mariadb (we build mariadb
    only)
- add galera subpackage
  * add missing "Requires:" (lsof, net-tools, rsync, socat,
    xtrabackup) for proper wsrep scripts functionality
  * add mariadb-10.2.9-galera_cnf.patch that enhances galera.cnf
    configuration file (add wsrep_on=OFF and set the location
    of the wsrep library)
  * rename README-wsrep to README.wsrep so it corresponds with the
    other README names
  * move galera_new_cluster, galera_recovery,
    use_galera_new_cluster.conf, wsrep_* scripts to the galera
    subpackage
- remove the following macros definitions:
  * %{_tmpfilesdir} - it's been defined in systemd macros since
    openSUSE 13.2
  * %{preferred} - we no longer need to distinguish between preferred
    and not preferred version (we build mariadb only)
  * %{with_mandatory_lz4} - mysql specific
  * %{build_extras}, %{pretty_name}, %{build_readline},
    %{builtin_plugins} and {libname} - they are no longer needed
- add the following macros
  * %{run_testsuite} macro that controls the run of the regression
    testsuite
  * %{ignore_testsuite_result} macro - when set to 1 it ignores
    results from the regression testsuite (debug purposes)
  * %{with_mroonga} macro (enable mroonga build for x86_64 archs only)
- rename %{with_jemalloc} to %{with_tokudb} and enable tokudb for
  x86_64 architectures for openSUSE and SLE15 [fate#323280]. Don't
  enable it for SLE12 (missing jemalloc dependency)
- add the following BuildRequires:
  * unixODBC-devel to allow ODBC support for Connect engine [bsc#1039034]
  * krb5-devel to build auth_gssapi.so plugin
  * libarchive-devel
  * use libboost_headers-devel instead of boost-devel for TW. Boost
    package has been split up and will migrate to using multibuild.
    This results in packages that unnecessarily build require
    boost-devel to cause major bottlenecks [bsc#1062583]
- do not use "BuildRequires: lzo-devel" for i586 and arm because
  it makes build fail
- add the following Requires:
  * hostname - as mariadb_install_db depends on this tool [bsc#1060110]
  * libaio-devel for libmysqld-devel because libmysqld depends
    on libaio
- tweak build options:
  * remove "DWITH_ASAN=OFF" - this option was added because of mysql
    and it's no longer needed
  * switch from "-DWITH_JEMALLOC=auto" to "-DWITH_JEMALLOC=system"
  * use "DCMAKE_SKIP_INSTALL_RPATH" - this allows to link with -rpath
    during build and fixes quite a few test suite failures. When
    installing the file -rpath is still disabled, so this should
    not have any effect on the installed binaries
  * add "-DWITH_LIBARCHIVE=ON" and "-DWITH_MARIABACKUP=ON"
  * remove -DWITH_BOOST=../boost/ as we use system boost now
- enable OQGRAPH to build (openSUSE only, SLE is missing Judy
  requirement)
- disable Cassandra storage engine build as it's no longer actively
  being developed (See MDEV-4695) [bsc#1055165]
  * Remove "BuildRequires: libthrift-devel" and %{with_cassandra}
    macros that are no longer needed now
- disable make test (Connector/C unit tests) as it requires a
  running server. These tests are part of mysql-test-run
  now (MDEV-12470)
- add suse_skipped_tests.list - the list of the tests that we want
  to skip (they fail correctly or the fix is in progress)
  * adjust mysql-test-run options to skip tests listed there
    [bsc#1041891]
- remove mytop utility that is packaged separately
- remove *.jar files from mysql-test
- remove python scripts remains from tokudb upstream
- remove generating of the MySQL NDB Cluster filelists
- remove removing of manpages for MySQL Carrier Grade Edition
- provide a symlink for the my_safe_process executable that was
  moved from its location to bindir
- update filename in /var/adm/update-messages to match
  documentation and build-compare pattern
- README is now README.md
- fix "file listed twice" build error</changelog>
  <changelog author="vcizek@suse.com" date="1511956800">- Disable openssl compatibility checking
  * the check uses CRYPTO_set_mem_functions() to set debugging
    memory allocation function. The setting only succeeds if no allocation
    was done before. Our fips self-tests, which are run from the library
    constructor, however, do allocate memory, so the subsequent call to
    CRYPTO_set_mem_functions causes the compatibility check to fail
  * add mariadb-10.2.10-disable_openssl_compatibility_check.patch</changelog>
  <changelog author="rhafer@suse.de" date="1511956801">- Added mariadb-10.2.10-wsrep_sst_common.patch (bsc#1069401).
  Upstream bug: https://jira.mariadb.org/browse/MDEV-14256</changelog>
  <changelog author="kstreitova@suse.com" date="1512043200">- update to 10.2.11 GA
  * release notes and changelog:
  * https://mariadb.com/kb/en/library/mariadb-10211-release-notes/
  * https://mariadb.com/kb/en/library/mariadb-10211-changelog/
- pack additional mroonga/groonga files
- change default charset to utf8mb4 for full Unicode support
  [fate#324329]
- remove mariadb-10.2.10-wsrep_sst_common.patch as it's no longer
  needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Do not manually delete
  %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release}-something:
  The file is listed as ghost and thus properly owned by the
  package.
- Use %tmpfiles_create which can cope with transactional updates.</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
</package>
<package pkgid="5353219b72fc3ae70b349d9d3c401274e26a7d8b97472c3ac3b237df67c087f8" name="mariadb" arch="src">
  <version epoch="0" ver="10.2.15" rel="lp150.2.6.1"/>
  <changelog author="vcizek@suse.com" date="1505822400">- Explicitly require libopenssl-1_0_0-devel, to successfully build
  once we switch openssl to 1.1 (bsc#1042632)</changelog>
  <changelog author="bwiedemann@suse.com" date="1509019200">- Drop INFO_BIN from package because it is not needed
  and differs for every build (boo#1047218)</changelog>
  <changelog author="vcizek@suse.com" date="1509451200">- Also Require: libopenssl-1_0_0-devel from the libmysqlclient-devel package</changelog>
  <changelog author="kstreitova@suse.com" date="1509451201">- update to 10.2.10 GA
  * release notes and changelogs
    https://downloads.mariadb.org/mariadb/+releases/
  * fixes for the following security vulnerabilities
  * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365
  * 10.2.8:  CVE-2017-3636, CVE-2017-3641, CVE-2017-3653,
    CVE-2017-10320, CVE-2017-10365, CVE-2017-10379,
    CVE-2017-10384, CVE-2017-10286, CVE-2017-3257
  * 10.2.6:  CVE-2017-3308, CVE-2017-3309, CVE-2017-3453,
    CVE-2017-3456, CVE-2017-3464
  * 10.2.5:  CVE-2017-3313, CVE-2017-3302
  * [bsc#1042632], [bsc#1043328], [bsc#1019948], [fate#323738]
- refresh and rename the following patches:
  * mariadb-10.1.4-group.patch to
    mariadb-10.2.3-group.patch
  * mariadb-10.1.16-systemd-cmake.patch to
    mariadb-10.2.8-systemd-cmake.patch
  * mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
  * mariadb-10.1.12-fortify-and-O.patch to
    mariadb-10.2.4-fortify-and-O.patch
  * mysql-community-server-5.1.46-logrotate.patch to
    mariadb-10.2.4-logrotate.patch
- add mariadb-10.2.10.tar.gz.sig signature and mariadb.keyring files
- start building without client library part, use
  mariadb-connector-c for getting libmariadb libraries. Remove
  libmysclient* packages
- remove baselibs.conf because we no longer build client libraries
  here
- update %{soname} to 19 (libmysqld soname)
- change '=' to '&gt;=' in  Requires:mariadb-errormessages for
  libmysqld%{soname}. Versioned libraries shouldn't require regular
  packages with '='. It also causes problems during update (Problem:
  libmysqld18-10.1.25-3.1.x86_64 requires mariadb-errormessages = 10.1.25,
  but this requirement cannot be provided).
  Also add "Provides: mariadb-errormessages = 10.1.25" for errormessages
  subpackage that solves this problem for the current update.
- pack new files, remove mysql specific files
- remove README.SUSE as it was outdated
- package cleaning
  * run spec-cleaner
  * renumber sources
  * reorganize subpackages order and update summaries, descriptions
    and groups
  * tweak and add some comments to the specfile
  * remove warning about mysql-packaging repository that is no longer
    used for this package
  * remove checks whether we build mysql or mariadb (we build mariadb
    only)
- add galera subpackage
  * add missing "Requires:" (lsof, net-tools, rsync, socat,
    xtrabackup) for proper wsrep scripts functionality
  * add mariadb-10.2.9-galera_cnf.patch that enhances galera.cnf
    configuration file (add wsrep_on=OFF and set the location
    of the wsrep library)
  * rename README-wsrep to README.wsrep so it corresponds with the
    other README names
  * move galera_new_cluster, galera_recovery,
    use_galera_new_cluster.conf, wsrep_* scripts to the galera
    subpackage
- remove the following macros definitions:
  * %{_tmpfilesdir} - it's been defined in systemd macros since
    openSUSE 13.2
  * %{preferred} - we no longer need to distinguish between preferred
    and not preferred version (we build mariadb only)
  * %{with_mandatory_lz4} - mysql specific
  * %{build_extras}, %{pretty_name}, %{build_readline},
    %{builtin_plugins} and {libname} - they are no longer needed
- add the following macros
  * %{run_testsuite} macro that controls the run of the regression
    testsuite
  * %{ignore_testsuite_result} macro - when set to 1 it ignores
    results from the regression testsuite (debug purposes)
  * %{with_mroonga} macro (enable mroonga build for x86_64 archs only)
- rename %{with_jemalloc} to %{with_tokudb} and enable tokudb for
  x86_64 architectures for openSUSE and SLE15 [fate#323280]. Don't
  enable it for SLE12 (missing jemalloc dependency)
- add the following BuildRequires:
  * unixODBC-devel to allow ODBC support for Connect engine [bsc#1039034]
  * krb5-devel to build auth_gssapi.so plugin
  * libarchive-devel
  * use libboost_headers-devel instead of boost-devel for TW. Boost
    package has been split up and will migrate to using multibuild.
    This results in packages that unnecessarily build require
    boost-devel to cause major bottlenecks [bsc#1062583]
- do not use "BuildRequires: lzo-devel" for i586 and arm because
  it makes build fail
- add the following Requires:
  * hostname - as mariadb_install_db depends on this tool [bsc#1060110]
  * libaio-devel for libmysqld-devel because libmysqld depends
    on libaio
- tweak build options:
  * remove "DWITH_ASAN=OFF" - this option was added because of mysql
    and it's no longer needed
  * switch from "-DWITH_JEMALLOC=auto" to "-DWITH_JEMALLOC=system"
  * use "DCMAKE_SKIP_INSTALL_RPATH" - this allows to link with -rpath
    during build and fixes quite a few test suite failures. When
    installing the file -rpath is still disabled, so this should
    not have any effect on the installed binaries
  * add "-DWITH_LIBARCHIVE=ON" and "-DWITH_MARIABACKUP=ON"
  * remove -DWITH_BOOST=../boost/ as we use system boost now
- enable OQGRAPH to build (openSUSE only, SLE is missing Judy
  requirement)
- disable Cassandra storage engine build as it's no longer actively
  being developed (See MDEV-4695) [bsc#1055165]
  * Remove "BuildRequires: libthrift-devel" and %{with_cassandra}
    macros that are no longer needed now
- disable make test (Connector/C unit tests) as it requires a
  running server. These tests are part of mysql-test-run
  now (MDEV-12470)
- add suse_skipped_tests.list - the list of the tests that we want
  to skip (they fail correctly or the fix is in progress)
  * adjust mysql-test-run options to skip tests listed there
    [bsc#1041891]
- remove mytop utility that is packaged separately
- remove *.jar files from mysql-test
- remove python scripts remains from tokudb upstream
- remove generating of the MySQL NDB Cluster filelists
- remove removing of manpages for MySQL Carrier Grade Edition
- provide a symlink for the my_safe_process executable that was
  moved from its location to bindir
- update filename in /var/adm/update-messages to match
  documentation and build-compare pattern
- README is now README.md
- fix "file listed twice" build error</changelog>
  <changelog author="vcizek@suse.com" date="1511956800">- Disable openssl compatibility checking
  * the check uses CRYPTO_set_mem_functions() to set debugging
    memory allocation function. The setting only succeeds if no allocation
    was done before. Our fips self-tests, which are run from the library
    constructor, however, do allocate memory, so the subsequent call to
    CRYPTO_set_mem_functions causes the compatibility check to fail
  * add mariadb-10.2.10-disable_openssl_compatibility_check.patch</changelog>
  <changelog author="rhafer@suse.de" date="1511956801">- Added mariadb-10.2.10-wsrep_sst_common.patch (bsc#1069401).
  Upstream bug: https://jira.mariadb.org/browse/MDEV-14256</changelog>
  <changelog author="kstreitova@suse.com" date="1512043200">- update to 10.2.11 GA
  * release notes and changelog:
  * https://mariadb.com/kb/en/library/mariadb-10211-release-notes/
  * https://mariadb.com/kb/en/library/mariadb-10211-changelog/
- pack additional mroonga/groonga files
- change default charset to utf8mb4 for full Unicode support
  [fate#324329]
- remove mariadb-10.2.10-wsrep_sst_common.patch as it's no longer
  needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Do not manually delete
  %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release}-something:
  The file is listed as ghost and thus properly owned by the
  package.
- Use %tmpfiles_create which can cope with transactional updates.</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
  <changelog author="kstreitova@suse.com" date="1532692800">- switch to libedit as control sequences were already fixed there
  so we don't have to avoid it [bsc#1098683]</changelog>
</package>
<package pkgid="709f7dc26fd226f2e271e4fce6939639eba3850b54dca28aedb2d33b38c5cc55" name="mariadb" arch="x86_64">
  <version epoch="0" ver="10.2.15" rel="lp150.2.6.1"/>
  <changelog author="vcizek@suse.com" date="1505822400">- Explicitly require libopenssl-1_0_0-devel, to successfully build
  once we switch openssl to 1.1 (bsc#1042632)</changelog>
  <changelog author="bwiedemann@suse.com" date="1509019200">- Drop INFO_BIN from package because it is not needed
  and differs for every build (boo#1047218)</changelog>
  <changelog author="vcizek@suse.com" date="1509451200">- Also Require: libopenssl-1_0_0-devel from the libmysqlclient-devel package</changelog>
  <changelog author="kstreitova@suse.com" date="1509451201">- update to 10.2.10 GA
  * release notes and changelogs
    https://downloads.mariadb.org/mariadb/+releases/
  * fixes for the following security vulnerabilities
  * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365
  * 10.2.8:  CVE-2017-3636, CVE-2017-3641, CVE-2017-3653,
    CVE-2017-10320, CVE-2017-10365, CVE-2017-10379,
    CVE-2017-10384, CVE-2017-10286, CVE-2017-3257
  * 10.2.6:  CVE-2017-3308, CVE-2017-3309, CVE-2017-3453,
    CVE-2017-3456, CVE-2017-3464
  * 10.2.5:  CVE-2017-3313, CVE-2017-3302
  * [bsc#1042632], [bsc#1043328], [bsc#1019948], [fate#323738]
- refresh and rename the following patches:
  * mariadb-10.1.4-group.patch to
    mariadb-10.2.3-group.patch
  * mariadb-10.1.16-systemd-cmake.patch to
    mariadb-10.2.8-systemd-cmake.patch
  * mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
  * mariadb-10.1.12-fortify-and-O.patch to
    mariadb-10.2.4-fortify-and-O.patch
  * mysql-community-server-5.1.46-logrotate.patch to
    mariadb-10.2.4-logrotate.patch
- add mariadb-10.2.10.tar.gz.sig signature and mariadb.keyring files
- start building without client library part, use
  mariadb-connector-c for getting libmariadb libraries. Remove
  libmysclient* packages
- remove baselibs.conf because we no longer build client libraries
  here
- update %{soname} to 19 (libmysqld soname)
- change '=' to '&gt;=' in  Requires:mariadb-errormessages for
  libmysqld%{soname}. Versioned libraries shouldn't require regular
  packages with '='. It also causes problems during update (Problem:
  libmysqld18-10.1.25-3.1.x86_64 requires mariadb-errormessages = 10.1.25,
  but this requirement cannot be provided).
  Also add "Provides: mariadb-errormessages = 10.1.25" for errormessages
  subpackage that solves this problem for the current update.
- pack new files, remove mysql specific files
- remove README.SUSE as it was outdated
- package cleaning
  * run spec-cleaner
  * renumber sources
  * reorganize subpackages order and update summaries, descriptions
    and groups
  * tweak and add some comments to the specfile
  * remove warning about mysql-packaging repository that is no longer
    used for this package
  * remove checks whether we build mysql or mariadb (we build mariadb
    only)
- add galera subpackage
  * add missing "Requires:" (lsof, net-tools, rsync, socat,
    xtrabackup) for proper wsrep scripts functionality
  * add mariadb-10.2.9-galera_cnf.patch that enhances galera.cnf
    configuration file (add wsrep_on=OFF and set the location
    of the wsrep library)
  * rename README-wsrep to README.wsrep so it corresponds with the
    other README names
  * move galera_new_cluster, galera_recovery,
    use_galera_new_cluster.conf, wsrep_* scripts to the galera
    subpackage
- remove the following macros definitions:
  * %{_tmpfilesdir} - it's been defined in systemd macros since
    openSUSE 13.2
  * %{preferred} - we no longer need to distinguish between preferred
    and not preferred version (we build mariadb only)
  * %{with_mandatory_lz4} - mysql specific
  * %{build_extras}, %{pretty_name}, %{build_readline},
    %{builtin_plugins} and {libname} - they are no longer needed
- add the following macros
  * %{run_testsuite} macro that controls the run of the regression
    testsuite
  * %{ignore_testsuite_result} macro - when set to 1 it ignores
    results from the regression testsuite (debug purposes)
  * %{with_mroonga} macro (enable mroonga build for x86_64 archs only)
- rename %{with_jemalloc} to %{with_tokudb} and enable tokudb for
  x86_64 architectures for openSUSE and SLE15 [fate#323280]. Don't
  enable it for SLE12 (missing jemalloc dependency)
- add the following BuildRequires:
  * unixODBC-devel to allow ODBC support for Connect engine [bsc#1039034]
  * krb5-devel to build auth_gssapi.so plugin
  * libarchive-devel
  * use libboost_headers-devel instead of boost-devel for TW. Boost
    package has been split up and will migrate to using multibuild.
    This results in packages that unnecessarily build require
    boost-devel to cause major bottlenecks [bsc#1062583]
- do not use "BuildRequires: lzo-devel" for i586 and arm because
  it makes build fail
- add the following Requires:
  * hostname - as mariadb_install_db depends on this tool [bsc#1060110]
  * libaio-devel for libmysqld-devel because libmysqld depends
    on libaio
- tweak build options:
  * remove "DWITH_ASAN=OFF" - this option was added because of mysql
    and it's no longer needed
  * switch from "-DWITH_JEMALLOC=auto" to "-DWITH_JEMALLOC=system"
  * use "DCMAKE_SKIP_INSTALL_RPATH" - this allows to link with -rpath
    during build and fixes quite a few test suite failures. When
    installing the file -rpath is still disabled, so this should
    not have any effect on the installed binaries
  * add "-DWITH_LIBARCHIVE=ON" and "-DWITH_MARIABACKUP=ON"
  * remove -DWITH_BOOST=../boost/ as we use system boost now
- enable OQGRAPH to build (openSUSE only, SLE is missing Judy
  requirement)
- disable Cassandra storage engine build as it's no longer actively
  being developed (See MDEV-4695) [bsc#1055165]
  * Remove "BuildRequires: libthrift-devel" and %{with_cassandra}
    macros that are no longer needed now
- disable make test (Connector/C unit tests) as it requires a
  running server. These tests are part of mysql-test-run
  now (MDEV-12470)
- add suse_skipped_tests.list - the list of the tests that we want
  to skip (they fail correctly or the fix is in progress)
  * adjust mysql-test-run options to skip tests listed there
    [bsc#1041891]
- remove mytop utility that is packaged separately
- remove *.jar files from mysql-test
- remove python scripts remains from tokudb upstream
- remove generating of the MySQL NDB Cluster filelists
- remove removing of manpages for MySQL Carrier Grade Edition
- provide a symlink for the my_safe_process executable that was
  moved from its location to bindir
- update filename in /var/adm/update-messages to match
  documentation and build-compare pattern
- README is now README.md
- fix "file listed twice" build error</changelog>
  <changelog author="vcizek@suse.com" date="1511956800">- Disable openssl compatibility checking
  * the check uses CRYPTO_set_mem_functions() to set debugging
    memory allocation function. The setting only succeeds if no allocation
    was done before. Our fips self-tests, which are run from the library
    constructor, however, do allocate memory, so the subsequent call to
    CRYPTO_set_mem_functions causes the compatibility check to fail
  * add mariadb-10.2.10-disable_openssl_compatibility_check.patch</changelog>
  <changelog author="rhafer@suse.de" date="1511956801">- Added mariadb-10.2.10-wsrep_sst_common.patch (bsc#1069401).
  Upstream bug: https://jira.mariadb.org/browse/MDEV-14256</changelog>
  <changelog author="kstreitova@suse.com" date="1512043200">- update to 10.2.11 GA
  * release notes and changelog:
  * https://mariadb.com/kb/en/library/mariadb-10211-release-notes/
  * https://mariadb.com/kb/en/library/mariadb-10211-changelog/
- pack additional mroonga/groonga files
- change default charset to utf8mb4 for full Unicode support
  [fate#324329]
- remove mariadb-10.2.10-wsrep_sst_common.patch as it's no longer
  needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Do not manually delete
  %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release}-something:
  The file is listed as ghost and thus properly owned by the
  package.
- Use %tmpfiles_create which can cope with transactional updates.</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
  <changelog author="kstreitova@suse.com" date="1532692800">- switch to libedit as control sequences were already fixed there
  so we don't have to avoid it [bsc#1098683]</changelog>
</package>
<package pkgid="3325560d92898fc7bf03c3febeeb11f9048e606b340d3b2da01e7dec81f226b2" name="mariadb-bench" arch="x86_64">
  <version epoch="0" ver="10.2.15" rel="lp150.2.3.2"/>
  <changelog author="kstreitova@suse.com" date="1499688000">- update to MariaDB 10.1.25 GA
  * notable changes
  * MariaDB can no longer be compiled with OpenSSL version 0.9.8
    and below. The last 0.9.8 release was in December 2015, it is
    out of support and is no longer getting security fixes.
  * MariaDB Backup is now beta
  * release notes and changelog:
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-release-notes
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-changelog
  * refresh mariadb-10.1.12-fortify-and-O.patch
  * remove mariadb-10.1.22-xtradb_null_checks.patch (MDEV-12358),
    a fix was merged upstream
  * update file lists for new man-pages and tools
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream</changelog>
  <changelog author="vcizek@suse.com" date="1505822400">- Explicitly require libopenssl-1_0_0-devel, to successfully build
  once we switch openssl to 1.1 (bsc#1042632)</changelog>
  <changelog author="bwiedemann@suse.com" date="1509019200">- Drop INFO_BIN from package because it is not needed
  and differs for every build (boo#1047218)</changelog>
  <changelog author="vcizek@suse.com" date="1509451200">- Also Require: libopenssl-1_0_0-devel from the libmysqlclient-devel package</changelog>
  <changelog author="kstreitova@suse.com" date="1509451201">- update to 10.2.10 GA
  * release notes and changelogs
    https://downloads.mariadb.org/mariadb/+releases/
  * fixes for the following security vulnerabilities
  * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365
  * 10.2.8:  CVE-2017-3636, CVE-2017-3641, CVE-2017-3653,
    CVE-2017-10320, CVE-2017-10365, CVE-2017-10379,
    CVE-2017-10384, CVE-2017-10286, CVE-2017-3257
  * 10.2.6:  CVE-2017-3308, CVE-2017-3309, CVE-2017-3453,
    CVE-2017-3456, CVE-2017-3464
  * 10.2.5:  CVE-2017-3313, CVE-2017-3302
  * [bsc#1042632], [bsc#1043328], [bsc#1019948], [fate#323738]
- refresh and rename the following patches:
  * mariadb-10.1.4-group.patch to
    mariadb-10.2.3-group.patch
  * mariadb-10.1.16-systemd-cmake.patch to
    mariadb-10.2.8-systemd-cmake.patch
  * mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
  * mariadb-10.1.12-fortify-and-O.patch to
    mariadb-10.2.4-fortify-and-O.patch
  * mysql-community-server-5.1.46-logrotate.patch to
    mariadb-10.2.4-logrotate.patch
- add mariadb-10.2.10.tar.gz.sig signature and mariadb.keyring files
- start building without client library part, use
  mariadb-connector-c for getting libmariadb libraries. Remove
  libmysclient* packages
- remove baselibs.conf because we no longer build client libraries
  here
- update %{soname} to 19 (libmysqld soname)
- change '=' to '&gt;=' in  Requires:mariadb-errormessages for
  libmysqld%{soname}. Versioned libraries shouldn't require regular
  packages with '='. It also causes problems during update (Problem:
  libmysqld18-10.1.25-3.1.x86_64 requires mariadb-errormessages = 10.1.25,
  but this requirement cannot be provided).
  Also add "Provides: mariadb-errormessages = 10.1.25" for errormessages
  subpackage that solves this problem for the current update.
- pack new files, remove mysql specific files
- remove README.SUSE as it was outdated
- package cleaning
  * run spec-cleaner
  * renumber sources
  * reorganize subpackages order and update summaries, descriptions
    and groups
  * tweak and add some comments to the specfile
  * remove warning about mysql-packaging repository that is no longer
    used for this package
  * remove checks whether we build mysql or mariadb (we build mariadb
    only)
- add galera subpackage
  * add missing "Requires:" (lsof, net-tools, rsync, socat,
    xtrabackup) for proper wsrep scripts functionality
  * add mariadb-10.2.9-galera_cnf.patch that enhances galera.cnf
    configuration file (add wsrep_on=OFF and set the location
    of the wsrep library)
  * rename README-wsrep to README.wsrep so it corresponds with the
    other README names
  * move galera_new_cluster, galera_recovery,
    use_galera_new_cluster.conf, wsrep_* scripts to the galera
    subpackage
- remove the following macros definitions:
  * %{_tmpfilesdir} - it's been defined in systemd macros since
    openSUSE 13.2
  * %{preferred} - we no longer need to distinguish between preferred
    and not preferred version (we build mariadb only)
  * %{with_mandatory_lz4} - mysql specific
  * %{build_extras}, %{pretty_name}, %{build_readline},
    %{builtin_plugins} and {libname} - they are no longer needed
- add the following macros
  * %{run_testsuite} macro that controls the run of the regression
    testsuite
  * %{ignore_testsuite_result} macro - when set to 1 it ignores
    results from the regression testsuite (debug purposes)
  * %{with_mroonga} macro (enable mroonga build for x86_64 archs only)
- rename %{with_jemalloc} to %{with_tokudb} and enable tokudb for
  x86_64 architectures for openSUSE and SLE15 [fate#323280]. Don't
  enable it for SLE12 (missing jemalloc dependency)
- add the following BuildRequires:
  * unixODBC-devel to allow ODBC support for Connect engine [bsc#1039034]
  * krb5-devel to build auth_gssapi.so plugin
  * libarchive-devel
  * use libboost_headers-devel instead of boost-devel for TW. Boost
    package has been split up and will migrate to using multibuild.
    This results in packages that unnecessarily build require
    boost-devel to cause major bottlenecks [bsc#1062583]
- do not use "BuildRequires: lzo-devel" for i586 and arm because
  it makes build fail
- add the following Requires:
  * hostname - as mariadb_install_db depends on this tool [bsc#1060110]
  * libaio-devel for libmysqld-devel because libmysqld depends
    on libaio
- tweak build options:
  * remove "DWITH_ASAN=OFF" - this option was added because of mysql
    and it's no longer needed
  * switch from "-DWITH_JEMALLOC=auto" to "-DWITH_JEMALLOC=system"
  * use "DCMAKE_SKIP_INSTALL_RPATH" - this allows to link with -rpath
    during build and fixes quite a few test suite failures. When
    installing the file -rpath is still disabled, so this should
    not have any effect on the installed binaries
  * add "-DWITH_LIBARCHIVE=ON" and "-DWITH_MARIABACKUP=ON"
  * remove -DWITH_BOOST=../boost/ as we use system boost now
- enable OQGRAPH to build (openSUSE only, SLE is missing Judy
  requirement)
- disable Cassandra storage engine build as it's no longer actively
  being developed (See MDEV-4695) [bsc#1055165]
  * Remove "BuildRequires: libthrift-devel" and %{with_cassandra}
    macros that are no longer needed now
- disable make test (Connector/C unit tests) as it requires a
  running server. These tests are part of mysql-test-run
  now (MDEV-12470)
- add suse_skipped_tests.list - the list of the tests that we want
  to skip (they fail correctly or the fix is in progress)
  * adjust mysql-test-run options to skip tests listed there
    [bsc#1041891]
- remove mytop utility that is packaged separately
- remove *.jar files from mysql-test
- remove python scripts remains from tokudb upstream
- remove generating of the MySQL NDB Cluster filelists
- remove removing of manpages for MySQL Carrier Grade Edition
- provide a symlink for the my_safe_process executable that was
  moved from its location to bindir
- update filename in /var/adm/update-messages to match
  documentation and build-compare pattern
- README is now README.md
- fix "file listed twice" build error</changelog>
  <changelog author="vcizek@suse.com" date="1511956800">- Disable openssl compatibility checking
  * the check uses CRYPTO_set_mem_functions() to set debugging
    memory allocation function. The setting only succeeds if no allocation
    was done before. Our fips self-tests, which are run from the library
    constructor, however, do allocate memory, so the subsequent call to
    CRYPTO_set_mem_functions causes the compatibility check to fail
  * add mariadb-10.2.10-disable_openssl_compatibility_check.patch</changelog>
  <changelog author="rhafer@suse.de" date="1511956801">- Added mariadb-10.2.10-wsrep_sst_common.patch (bsc#1069401).
  Upstream bug: https://jira.mariadb.org/browse/MDEV-14256</changelog>
  <changelog author="kstreitova@suse.com" date="1512043200">- update to 10.2.11 GA
  * release notes and changelog:
  * https://mariadb.com/kb/en/library/mariadb-10211-release-notes/
  * https://mariadb.com/kb/en/library/mariadb-10211-changelog/
- pack additional mroonga/groonga files
- change default charset to utf8mb4 for full Unicode support
  [fate#324329]
- remove mariadb-10.2.10-wsrep_sst_common.patch as it's no longer
  needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Do not manually delete
  %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release}-something:
  The file is listed as ghost and thus properly owned by the
  package.
- Use %tmpfiles_create which can cope with transactional updates.</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
</package>
<package pkgid="105703af080ae93b0c1f3a96dfb1342dbd3a02e2e9314bdf3d87deb58821db8c" name="mariadb-bench" arch="x86_64">
  <version epoch="0" ver="10.2.15" rel="lp150.2.6.1"/>
  <changelog author="vcizek@suse.com" date="1505822400">- Explicitly require libopenssl-1_0_0-devel, to successfully build
  once we switch openssl to 1.1 (bsc#1042632)</changelog>
  <changelog author="bwiedemann@suse.com" date="1509019200">- Drop INFO_BIN from package because it is not needed
  and differs for every build (boo#1047218)</changelog>
  <changelog author="vcizek@suse.com" date="1509451200">- Also Require: libopenssl-1_0_0-devel from the libmysqlclient-devel package</changelog>
  <changelog author="kstreitova@suse.com" date="1509451201">- update to 10.2.10 GA
  * release notes and changelogs
    https://downloads.mariadb.org/mariadb/+releases/
  * fixes for the following security vulnerabilities
  * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365
  * 10.2.8:  CVE-2017-3636, CVE-2017-3641, CVE-2017-3653,
    CVE-2017-10320, CVE-2017-10365, CVE-2017-10379,
    CVE-2017-10384, CVE-2017-10286, CVE-2017-3257
  * 10.2.6:  CVE-2017-3308, CVE-2017-3309, CVE-2017-3453,
    CVE-2017-3456, CVE-2017-3464
  * 10.2.5:  CVE-2017-3313, CVE-2017-3302
  * [bsc#1042632], [bsc#1043328], [bsc#1019948], [fate#323738]
- refresh and rename the following patches:
  * mariadb-10.1.4-group.patch to
    mariadb-10.2.3-group.patch
  * mariadb-10.1.16-systemd-cmake.patch to
    mariadb-10.2.8-systemd-cmake.patch
  * mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
  * mariadb-10.1.12-fortify-and-O.patch to
    mariadb-10.2.4-fortify-and-O.patch
  * mysql-community-server-5.1.46-logrotate.patch to
    mariadb-10.2.4-logrotate.patch
- add mariadb-10.2.10.tar.gz.sig signature and mariadb.keyring files
- start building without client library part, use
  mariadb-connector-c for getting libmariadb libraries. Remove
  libmysclient* packages
- remove baselibs.conf because we no longer build client libraries
  here
- update %{soname} to 19 (libmysqld soname)
- change '=' to '&gt;=' in  Requires:mariadb-errormessages for
  libmysqld%{soname}. Versioned libraries shouldn't require regular
  packages with '='. It also causes problems during update (Problem:
  libmysqld18-10.1.25-3.1.x86_64 requires mariadb-errormessages = 10.1.25,
  but this requirement cannot be provided).
  Also add "Provides: mariadb-errormessages = 10.1.25" for errormessages
  subpackage that solves this problem for the current update.
- pack new files, remove mysql specific files
- remove README.SUSE as it was outdated
- package cleaning
  * run spec-cleaner
  * renumber sources
  * reorganize subpackages order and update summaries, descriptions
    and groups
  * tweak and add some comments to the specfile
  * remove warning about mysql-packaging repository that is no longer
    used for this package
  * remove checks whether we build mysql or mariadb (we build mariadb
    only)
- add galera subpackage
  * add missing "Requires:" (lsof, net-tools, rsync, socat,
    xtrabackup) for proper wsrep scripts functionality
  * add mariadb-10.2.9-galera_cnf.patch that enhances galera.cnf
    configuration file (add wsrep_on=OFF and set the location
    of the wsrep library)
  * rename README-wsrep to README.wsrep so it corresponds with the
    other README names
  * move galera_new_cluster, galera_recovery,
    use_galera_new_cluster.conf, wsrep_* scripts to the galera
    subpackage
- remove the following macros definitions:
  * %{_tmpfilesdir} - it's been defined in systemd macros since
    openSUSE 13.2
  * %{preferred} - we no longer need to distinguish between preferred
    and not preferred version (we build mariadb only)
  * %{with_mandatory_lz4} - mysql specific
  * %{build_extras}, %{pretty_name}, %{build_readline},
    %{builtin_plugins} and {libname} - they are no longer needed
- add the following macros
  * %{run_testsuite} macro that controls the run of the regression
    testsuite
  * %{ignore_testsuite_result} macro - when set to 1 it ignores
    results from the regression testsuite (debug purposes)
  * %{with_mroonga} macro (enable mroonga build for x86_64 archs only)
- rename %{with_jemalloc} to %{with_tokudb} and enable tokudb for
  x86_64 architectures for openSUSE and SLE15 [fate#323280]. Don't
  enable it for SLE12 (missing jemalloc dependency)
- add the following BuildRequires:
  * unixODBC-devel to allow ODBC support for Connect engine [bsc#1039034]
  * krb5-devel to build auth_gssapi.so plugin
  * libarchive-devel
  * use libboost_headers-devel instead of boost-devel for TW. Boost
    package has been split up and will migrate to using multibuild.
    This results in packages that unnecessarily build require
    boost-devel to cause major bottlenecks [bsc#1062583]
- do not use "BuildRequires: lzo-devel" for i586 and arm because
  it makes build fail
- add the following Requires:
  * hostname - as mariadb_install_db depends on this tool [bsc#1060110]
  * libaio-devel for libmysqld-devel because libmysqld depends
    on libaio
- tweak build options:
  * remove "DWITH_ASAN=OFF" - this option was added because of mysql
    and it's no longer needed
  * switch from "-DWITH_JEMALLOC=auto" to "-DWITH_JEMALLOC=system"
  * use "DCMAKE_SKIP_INSTALL_RPATH" - this allows to link with -rpath
    during build and fixes quite a few test suite failures. When
    installing the file -rpath is still disabled, so this should
    not have any effect on the installed binaries
  * add "-DWITH_LIBARCHIVE=ON" and "-DWITH_MARIABACKUP=ON"
  * remove -DWITH_BOOST=../boost/ as we use system boost now
- enable OQGRAPH to build (openSUSE only, SLE is missing Judy
  requirement)
- disable Cassandra storage engine build as it's no longer actively
  being developed (See MDEV-4695) [bsc#1055165]
  * Remove "BuildRequires: libthrift-devel" and %{with_cassandra}
    macros that are no longer needed now
- disable make test (Connector/C unit tests) as it requires a
  running server. These tests are part of mysql-test-run
  now (MDEV-12470)
- add suse_skipped_tests.list - the list of the tests that we want
  to skip (they fail correctly or the fix is in progress)
  * adjust mysql-test-run options to skip tests listed there
    [bsc#1041891]
- remove mytop utility that is packaged separately
- remove *.jar files from mysql-test
- remove python scripts remains from tokudb upstream
- remove generating of the MySQL NDB Cluster filelists
- remove removing of manpages for MySQL Carrier Grade Edition
- provide a symlink for the my_safe_process executable that was
  moved from its location to bindir
- update filename in /var/adm/update-messages to match
  documentation and build-compare pattern
- README is now README.md
- fix "file listed twice" build error</changelog>
  <changelog author="vcizek@suse.com" date="1511956800">- Disable openssl compatibility checking
  * the check uses CRYPTO_set_mem_functions() to set debugging
    memory allocation function. The setting only succeeds if no allocation
    was done before. Our fips self-tests, which are run from the library
    constructor, however, do allocate memory, so the subsequent call to
    CRYPTO_set_mem_functions causes the compatibility check to fail
  * add mariadb-10.2.10-disable_openssl_compatibility_check.patch</changelog>
  <changelog author="rhafer@suse.de" date="1511956801">- Added mariadb-10.2.10-wsrep_sst_common.patch (bsc#1069401).
  Upstream bug: https://jira.mariadb.org/browse/MDEV-14256</changelog>
  <changelog author="kstreitova@suse.com" date="1512043200">- update to 10.2.11 GA
  * release notes and changelog:
  * https://mariadb.com/kb/en/library/mariadb-10211-release-notes/
  * https://mariadb.com/kb/en/library/mariadb-10211-changelog/
- pack additional mroonga/groonga files
- change default charset to utf8mb4 for full Unicode support
  [fate#324329]
- remove mariadb-10.2.10-wsrep_sst_common.patch as it's no longer
  needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Do not manually delete
  %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release}-something:
  The file is listed as ghost and thus properly owned by the
  package.
- Use %tmpfiles_create which can cope with transactional updates.</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
  <changelog author="kstreitova@suse.com" date="1532692800">- switch to libedit as control sequences were already fixed there
  so we don't have to avoid it [bsc#1098683]</changelog>
</package>
<package pkgid="43c6be2836f5c5359575063dd8af623bbb8f12430f34d82343e96c25a8f16a1b" name="mariadb-client" arch="x86_64">
  <version epoch="0" ver="10.2.15" rel="lp150.2.3.2"/>
  <changelog author="kstreitova@suse.com" date="1499688000">- update to MariaDB 10.1.25 GA
  * notable changes
  * MariaDB can no longer be compiled with OpenSSL version 0.9.8
    and below. The last 0.9.8 release was in December 2015, it is
    out of support and is no longer getting security fixes.
  * MariaDB Backup is now beta
  * release notes and changelog:
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-release-notes
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-changelog
  * refresh mariadb-10.1.12-fortify-and-O.patch
  * remove mariadb-10.1.22-xtradb_null_checks.patch (MDEV-12358),
    a fix was merged upstream
  * update file lists for new man-pages and tools
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream</changelog>
  <changelog author="vcizek@suse.com" date="1505822400">- Explicitly require libopenssl-1_0_0-devel, to successfully build
  once we switch openssl to 1.1 (bsc#1042632)</changelog>
  <changelog author="bwiedemann@suse.com" date="1509019200">- Drop INFO_BIN from package because it is not needed
  and differs for every build (boo#1047218)</changelog>
  <changelog author="vcizek@suse.com" date="1509451200">- Also Require: libopenssl-1_0_0-devel from the libmysqlclient-devel package</changelog>
  <changelog author="kstreitova@suse.com" date="1509451201">- update to 10.2.10 GA
  * release notes and changelogs
    https://downloads.mariadb.org/mariadb/+releases/
  * fixes for the following security vulnerabilities
  * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365
  * 10.2.8:  CVE-2017-3636, CVE-2017-3641, CVE-2017-3653,
    CVE-2017-10320, CVE-2017-10365, CVE-2017-10379,
    CVE-2017-10384, CVE-2017-10286, CVE-2017-3257
  * 10.2.6:  CVE-2017-3308, CVE-2017-3309, CVE-2017-3453,
    CVE-2017-3456, CVE-2017-3464
  * 10.2.5:  CVE-2017-3313, CVE-2017-3302
  * [bsc#1042632], [bsc#1043328], [bsc#1019948], [fate#323738]
- refresh and rename the following patches:
  * mariadb-10.1.4-group.patch to
    mariadb-10.2.3-group.patch
  * mariadb-10.1.16-systemd-cmake.patch to
    mariadb-10.2.8-systemd-cmake.patch
  * mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
  * mariadb-10.1.12-fortify-and-O.patch to
    mariadb-10.2.4-fortify-and-O.patch
  * mysql-community-server-5.1.46-logrotate.patch to
    mariadb-10.2.4-logrotate.patch
- add mariadb-10.2.10.tar.gz.sig signature and mariadb.keyring files
- start building without client library part, use
  mariadb-connector-c for getting libmariadb libraries. Remove
  libmysclient* packages
- remove baselibs.conf because we no longer build client libraries
  here
- update %{soname} to 19 (libmysqld soname)
- change '=' to '&gt;=' in  Requires:mariadb-errormessages for
  libmysqld%{soname}. Versioned libraries shouldn't require regular
  packages with '='. It also causes problems during update (Problem:
  libmysqld18-10.1.25-3.1.x86_64 requires mariadb-errormessages = 10.1.25,
  but this requirement cannot be provided).
  Also add "Provides: mariadb-errormessages = 10.1.25" for errormessages
  subpackage that solves this problem for the current update.
- pack new files, remove mysql specific files
- remove README.SUSE as it was outdated
- package cleaning
  * run spec-cleaner
  * renumber sources
  * reorganize subpackages order and update summaries, descriptions
    and groups
  * tweak and add some comments to the specfile
  * remove warning about mysql-packaging repository that is no longer
    used for this package
  * remove checks whether we build mysql or mariadb (we build mariadb
    only)
- add galera subpackage
  * add missing "Requires:" (lsof, net-tools, rsync, socat,
    xtrabackup) for proper wsrep scripts functionality
  * add mariadb-10.2.9-galera_cnf.patch that enhances galera.cnf
    configuration file (add wsrep_on=OFF and set the location
    of the wsrep library)
  * rename README-wsrep to README.wsrep so it corresponds with the
    other README names
  * move galera_new_cluster, galera_recovery,
    use_galera_new_cluster.conf, wsrep_* scripts to the galera
    subpackage
- remove the following macros definitions:
  * %{_tmpfilesdir} - it's been defined in systemd macros since
    openSUSE 13.2
  * %{preferred} - we no longer need to distinguish between preferred
    and not preferred version (we build mariadb only)
  * %{with_mandatory_lz4} - mysql specific
  * %{build_extras}, %{pretty_name}, %{build_readline},
    %{builtin_plugins} and {libname} - they are no longer needed
- add the following macros
  * %{run_testsuite} macro that controls the run of the regression
    testsuite
  * %{ignore_testsuite_result} macro - when set to 1 it ignores
    results from the regression testsuite (debug purposes)
  * %{with_mroonga} macro (enable mroonga build for x86_64 archs only)
- rename %{with_jemalloc} to %{with_tokudb} and enable tokudb for
  x86_64 architectures for openSUSE and SLE15 [fate#323280]. Don't
  enable it for SLE12 (missing jemalloc dependency)
- add the following BuildRequires:
  * unixODBC-devel to allow ODBC support for Connect engine [bsc#1039034]
  * krb5-devel to build auth_gssapi.so plugin
  * libarchive-devel
  * use libboost_headers-devel instead of boost-devel for TW. Boost
    package has been split up and will migrate to using multibuild.
    This results in packages that unnecessarily build require
    boost-devel to cause major bottlenecks [bsc#1062583]
- do not use "BuildRequires: lzo-devel" for i586 and arm because
  it makes build fail
- add the following Requires:
  * hostname - as mariadb_install_db depends on this tool [bsc#1060110]
  * libaio-devel for libmysqld-devel because libmysqld depends
    on libaio
- tweak build options:
  * remove "DWITH_ASAN=OFF" - this option was added because of mysql
    and it's no longer needed
  * switch from "-DWITH_JEMALLOC=auto" to "-DWITH_JEMALLOC=system"
  * use "DCMAKE_SKIP_INSTALL_RPATH" - this allows to link with -rpath
    during build and fixes quite a few test suite failures. When
    installing the file -rpath is still disabled, so this should
    not have any effect on the installed binaries
  * add "-DWITH_LIBARCHIVE=ON" and "-DWITH_MARIABACKUP=ON"
  * remove -DWITH_BOOST=../boost/ as we use system boost now
- enable OQGRAPH to build (openSUSE only, SLE is missing Judy
  requirement)
- disable Cassandra storage engine build as it's no longer actively
  being developed (See MDEV-4695) [bsc#1055165]
  * Remove "BuildRequires: libthrift-devel" and %{with_cassandra}
    macros that are no longer needed now
- disable make test (Connector/C unit tests) as it requires a
  running server. These tests are part of mysql-test-run
  now (MDEV-12470)
- add suse_skipped_tests.list - the list of the tests that we want
  to skip (they fail correctly or the fix is in progress)
  * adjust mysql-test-run options to skip tests listed there
    [bsc#1041891]
- remove mytop utility that is packaged separately
- remove *.jar files from mysql-test
- remove python scripts remains from tokudb upstream
- remove generating of the MySQL NDB Cluster filelists
- remove removing of manpages for MySQL Carrier Grade Edition
- provide a symlink for the my_safe_process executable that was
  moved from its location to bindir
- update filename in /var/adm/update-messages to match
  documentation and build-compare pattern
- README is now README.md
- fix "file listed twice" build error</changelog>
  <changelog author="vcizek@suse.com" date="1511956800">- Disable openssl compatibility checking
  * the check uses CRYPTO_set_mem_functions() to set debugging
    memory allocation function. The setting only succeeds if no allocation
    was done before. Our fips self-tests, which are run from the library
    constructor, however, do allocate memory, so the subsequent call to
    CRYPTO_set_mem_functions causes the compatibility check to fail
  * add mariadb-10.2.10-disable_openssl_compatibility_check.patch</changelog>
  <changelog author="rhafer@suse.de" date="1511956801">- Added mariadb-10.2.10-wsrep_sst_common.patch (bsc#1069401).
  Upstream bug: https://jira.mariadb.org/browse/MDEV-14256</changelog>
  <changelog author="kstreitova@suse.com" date="1512043200">- update to 10.2.11 GA
  * release notes and changelog:
  * https://mariadb.com/kb/en/library/mariadb-10211-release-notes/
  * https://mariadb.com/kb/en/library/mariadb-10211-changelog/
- pack additional mroonga/groonga files
- change default charset to utf8mb4 for full Unicode support
  [fate#324329]
- remove mariadb-10.2.10-wsrep_sst_common.patch as it's no longer
  needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Do not manually delete
  %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release}-something:
  The file is listed as ghost and thus properly owned by the
  package.
- Use %tmpfiles_create which can cope with transactional updates.</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
</package>
<package pkgid="008e31f7b43fde1327d608673e4f8c5437556fa9faf7119f9911bc233cdca339" name="mariadb-client" arch="x86_64">
  <version epoch="0" ver="10.2.15" rel="lp150.2.6.1"/>
  <changelog author="vcizek@suse.com" date="1505822400">- Explicitly require libopenssl-1_0_0-devel, to successfully build
  once we switch openssl to 1.1 (bsc#1042632)</changelog>
  <changelog author="bwiedemann@suse.com" date="1509019200">- Drop INFO_BIN from package because it is not needed
  and differs for every build (boo#1047218)</changelog>
  <changelog author="vcizek@suse.com" date="1509451200">- Also Require: libopenssl-1_0_0-devel from the libmysqlclient-devel package</changelog>
  <changelog author="kstreitova@suse.com" date="1509451201">- update to 10.2.10 GA
  * release notes and changelogs
    https://downloads.mariadb.org/mariadb/+releases/
  * fixes for the following security vulnerabilities
  * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365
  * 10.2.8:  CVE-2017-3636, CVE-2017-3641, CVE-2017-3653,
    CVE-2017-10320, CVE-2017-10365, CVE-2017-10379,
    CVE-2017-10384, CVE-2017-10286, CVE-2017-3257
  * 10.2.6:  CVE-2017-3308, CVE-2017-3309, CVE-2017-3453,
    CVE-2017-3456, CVE-2017-3464
  * 10.2.5:  CVE-2017-3313, CVE-2017-3302
  * [bsc#1042632], [bsc#1043328], [bsc#1019948], [fate#323738]
- refresh and rename the following patches:
  * mariadb-10.1.4-group.patch to
    mariadb-10.2.3-group.patch
  * mariadb-10.1.16-systemd-cmake.patch to
    mariadb-10.2.8-systemd-cmake.patch
  * mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
  * mariadb-10.1.12-fortify-and-O.patch to
    mariadb-10.2.4-fortify-and-O.patch
  * mysql-community-server-5.1.46-logrotate.patch to
    mariadb-10.2.4-logrotate.patch
- add mariadb-10.2.10.tar.gz.sig signature and mariadb.keyring files
- start building without client library part, use
  mariadb-connector-c for getting libmariadb libraries. Remove
  libmysclient* packages
- remove baselibs.conf because we no longer build client libraries
  here
- update %{soname} to 19 (libmysqld soname)
- change '=' to '&gt;=' in  Requires:mariadb-errormessages for
  libmysqld%{soname}. Versioned libraries shouldn't require regular
  packages with '='. It also causes problems during update (Problem:
  libmysqld18-10.1.25-3.1.x86_64 requires mariadb-errormessages = 10.1.25,
  but this requirement cannot be provided).
  Also add "Provides: mariadb-errormessages = 10.1.25" for errormessages
  subpackage that solves this problem for the current update.
- pack new files, remove mysql specific files
- remove README.SUSE as it was outdated
- package cleaning
  * run spec-cleaner
  * renumber sources
  * reorganize subpackages order and update summaries, descriptions
    and groups
  * tweak and add some comments to the specfile
  * remove warning about mysql-packaging repository that is no longer
    used for this package
  * remove checks whether we build mysql or mariadb (we build mariadb
    only)
- add galera subpackage
  * add missing "Requires:" (lsof, net-tools, rsync, socat,
    xtrabackup) for proper wsrep scripts functionality
  * add mariadb-10.2.9-galera_cnf.patch that enhances galera.cnf
    configuration file (add wsrep_on=OFF and set the location
    of the wsrep library)
  * rename README-wsrep to README.wsrep so it corresponds with the
    other README names
  * move galera_new_cluster, galera_recovery,
    use_galera_new_cluster.conf, wsrep_* scripts to the galera
    subpackage
- remove the following macros definitions:
  * %{_tmpfilesdir} - it's been defined in systemd macros since
    openSUSE 13.2
  * %{preferred} - we no longer need to distinguish between preferred
    and not preferred version (we build mariadb only)
  * %{with_mandatory_lz4} - mysql specific
  * %{build_extras}, %{pretty_name}, %{build_readline},
    %{builtin_plugins} and {libname} - they are no longer needed
- add the following macros
  * %{run_testsuite} macro that controls the run of the regression
    testsuite
  * %{ignore_testsuite_result} macro - when set to 1 it ignores
    results from the regression testsuite (debug purposes)
  * %{with_mroonga} macro (enable mroonga build for x86_64 archs only)
- rename %{with_jemalloc} to %{with_tokudb} and enable tokudb for
  x86_64 architectures for openSUSE and SLE15 [fate#323280]. Don't
  enable it for SLE12 (missing jemalloc dependency)
- add the following BuildRequires:
  * unixODBC-devel to allow ODBC support for Connect engine [bsc#1039034]
  * krb5-devel to build auth_gssapi.so plugin
  * libarchive-devel
  * use libboost_headers-devel instead of boost-devel for TW. Boost
    package has been split up and will migrate to using multibuild.
    This results in packages that unnecessarily build require
    boost-devel to cause major bottlenecks [bsc#1062583]
- do not use "BuildRequires: lzo-devel" for i586 and arm because
  it makes build fail
- add the following Requires:
  * hostname - as mariadb_install_db depends on this tool [bsc#1060110]
  * libaio-devel for libmysqld-devel because libmysqld depends
    on libaio
- tweak build options:
  * remove "DWITH_ASAN=OFF" - this option was added because of mysql
    and it's no longer needed
  * switch from "-DWITH_JEMALLOC=auto" to "-DWITH_JEMALLOC=system"
  * use "DCMAKE_SKIP_INSTALL_RPATH" - this allows to link with -rpath
    during build and fixes quite a few test suite failures. When
    installing the file -rpath is still disabled, so this should
    not have any effect on the installed binaries
  * add "-DWITH_LIBARCHIVE=ON" and "-DWITH_MARIABACKUP=ON"
  * remove -DWITH_BOOST=../boost/ as we use system boost now
- enable OQGRAPH to build (openSUSE only, SLE is missing Judy
  requirement)
- disable Cassandra storage engine build as it's no longer actively
  being developed (See MDEV-4695) [bsc#1055165]
  * Remove "BuildRequires: libthrift-devel" and %{with_cassandra}
    macros that are no longer needed now
- disable make test (Connector/C unit tests) as it requires a
  running server. These tests are part of mysql-test-run
  now (MDEV-12470)
- add suse_skipped_tests.list - the list of the tests that we want
  to skip (they fail correctly or the fix is in progress)
  * adjust mysql-test-run options to skip tests listed there
    [bsc#1041891]
- remove mytop utility that is packaged separately
- remove *.jar files from mysql-test
- remove python scripts remains from tokudb upstream
- remove generating of the MySQL NDB Cluster filelists
- remove removing of manpages for MySQL Carrier Grade Edition
- provide a symlink for the my_safe_process executable that was
  moved from its location to bindir
- update filename in /var/adm/update-messages to match
  documentation and build-compare pattern
- README is now README.md
- fix "file listed twice" build error</changelog>
  <changelog author="vcizek@suse.com" date="1511956800">- Disable openssl compatibility checking
  * the check uses CRYPTO_set_mem_functions() to set debugging
    memory allocation function. The setting only succeeds if no allocation
    was done before. Our fips self-tests, which are run from the library
    constructor, however, do allocate memory, so the subsequent call to
    CRYPTO_set_mem_functions causes the compatibility check to fail
  * add mariadb-10.2.10-disable_openssl_compatibility_check.patch</changelog>
  <changelog author="rhafer@suse.de" date="1511956801">- Added mariadb-10.2.10-wsrep_sst_common.patch (bsc#1069401).
  Upstream bug: https://jira.mariadb.org/browse/MDEV-14256</changelog>
  <changelog author="kstreitova@suse.com" date="1512043200">- update to 10.2.11 GA
  * release notes and changelog:
  * https://mariadb.com/kb/en/library/mariadb-10211-release-notes/
  * https://mariadb.com/kb/en/library/mariadb-10211-changelog/
- pack additional mroonga/groonga files
- change default charset to utf8mb4 for full Unicode support
  [fate#324329]
- remove mariadb-10.2.10-wsrep_sst_common.patch as it's no longer
  needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Do not manually delete
  %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release}-something:
  The file is listed as ghost and thus properly owned by the
  package.
- Use %tmpfiles_create which can cope with transactional updates.</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
  <changelog author="kstreitova@suse.com" date="1532692800">- switch to libedit as control sequences were already fixed there
  so we don't have to avoid it [bsc#1098683]</changelog>
</package>
<package pkgid="5d18797d2dc1f13b831988e078ca9aedb1a1ef060edc22bf6803777a5964b026" name="mariadb-errormessages" arch="noarch">
  <version epoch="0" ver="10.2.15" rel="lp150.2.3.2"/>
  <changelog author="kstreitova@suse.com" date="1499688000">- update to MariaDB 10.1.25 GA
  * notable changes
  * MariaDB can no longer be compiled with OpenSSL version 0.9.8
    and below. The last 0.9.8 release was in December 2015, it is
    out of support and is no longer getting security fixes.
  * MariaDB Backup is now beta
  * release notes and changelog:
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-release-notes
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-changelog
  * refresh mariadb-10.1.12-fortify-and-O.patch
  * remove mariadb-10.1.22-xtradb_null_checks.patch (MDEV-12358),
    a fix was merged upstream
  * update file lists for new man-pages and tools
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream</changelog>
  <changelog author="vcizek@suse.com" date="1505822400">- Explicitly require libopenssl-1_0_0-devel, to successfully build
  once we switch openssl to 1.1 (bsc#1042632)</changelog>
  <changelog author="bwiedemann@suse.com" date="1509019200">- Drop INFO_BIN from package because it is not needed
  and differs for every build (boo#1047218)</changelog>
  <changelog author="vcizek@suse.com" date="1509451200">- Also Require: libopenssl-1_0_0-devel from the libmysqlclient-devel package</changelog>
  <changelog author="kstreitova@suse.com" date="1509451201">- update to 10.2.10 GA
  * release notes and changelogs
    https://downloads.mariadb.org/mariadb/+releases/
  * fixes for the following security vulnerabilities
  * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365
  * 10.2.8:  CVE-2017-3636, CVE-2017-3641, CVE-2017-3653,
    CVE-2017-10320, CVE-2017-10365, CVE-2017-10379,
    CVE-2017-10384, CVE-2017-10286, CVE-2017-3257
  * 10.2.6:  CVE-2017-3308, CVE-2017-3309, CVE-2017-3453,
    CVE-2017-3456, CVE-2017-3464
  * 10.2.5:  CVE-2017-3313, CVE-2017-3302
  * [bsc#1042632], [bsc#1043328], [bsc#1019948], [fate#323738]
- refresh and rename the following patches:
  * mariadb-10.1.4-group.patch to
    mariadb-10.2.3-group.patch
  * mariadb-10.1.16-systemd-cmake.patch to
    mariadb-10.2.8-systemd-cmake.patch
  * mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
  * mariadb-10.1.12-fortify-and-O.patch to
    mariadb-10.2.4-fortify-and-O.patch
  * mysql-community-server-5.1.46-logrotate.patch to
    mariadb-10.2.4-logrotate.patch
- add mariadb-10.2.10.tar.gz.sig signature and mariadb.keyring files
- start building without client library part, use
  mariadb-connector-c for getting libmariadb libraries. Remove
  libmysclient* packages
- remove baselibs.conf because we no longer build client libraries
  here
- update %{soname} to 19 (libmysqld soname)
- change '=' to '&gt;=' in  Requires:mariadb-errormessages for
  libmysqld%{soname}. Versioned libraries shouldn't require regular
  packages with '='. It also causes problems during update (Problem:
  libmysqld18-10.1.25-3.1.x86_64 requires mariadb-errormessages = 10.1.25,
  but this requirement cannot be provided).
  Also add "Provides: mariadb-errormessages = 10.1.25" for errormessages
  subpackage that solves this problem for the current update.
- pack new files, remove mysql specific files
- remove README.SUSE as it was outdated
- package cleaning
  * run spec-cleaner
  * renumber sources
  * reorganize subpackages order and update summaries, descriptions
    and groups
  * tweak and add some comments to the specfile
  * remove warning about mysql-packaging repository that is no longer
    used for this package
  * remove checks whether we build mysql or mariadb (we build mariadb
    only)
- add galera subpackage
  * add missing "Requires:" (lsof, net-tools, rsync, socat,
    xtrabackup) for proper wsrep scripts functionality
  * add mariadb-10.2.9-galera_cnf.patch that enhances galera.cnf
    configuration file (add wsrep_on=OFF and set the location
    of the wsrep library)
  * rename README-wsrep to README.wsrep so it corresponds with the
    other README names
  * move galera_new_cluster, galera_recovery,
    use_galera_new_cluster.conf, wsrep_* scripts to the galera
    subpackage
- remove the following macros definitions:
  * %{_tmpfilesdir} - it's been defined in systemd macros since
    openSUSE 13.2
  * %{preferred} - we no longer need to distinguish between preferred
    and not preferred version (we build mariadb only)
  * %{with_mandatory_lz4} - mysql specific
  * %{build_extras}, %{pretty_name}, %{build_readline},
    %{builtin_plugins} and {libname} - they are no longer needed
- add the following macros
  * %{run_testsuite} macro that controls the run of the regression
    testsuite
  * %{ignore_testsuite_result} macro - when set to 1 it ignores
    results from the regression testsuite (debug purposes)
  * %{with_mroonga} macro (enable mroonga build for x86_64 archs only)
- rename %{with_jemalloc} to %{with_tokudb} and enable tokudb for
  x86_64 architectures for openSUSE and SLE15 [fate#323280]. Don't
  enable it for SLE12 (missing jemalloc dependency)
- add the following BuildRequires:
  * unixODBC-devel to allow ODBC support for Connect engine [bsc#1039034]
  * krb5-devel to build auth_gssapi.so plugin
  * libarchive-devel
  * use libboost_headers-devel instead of boost-devel for TW. Boost
    package has been split up and will migrate to using multibuild.
    This results in packages that unnecessarily build require
    boost-devel to cause major bottlenecks [bsc#1062583]
- do not use "BuildRequires: lzo-devel" for i586 and arm because
  it makes build fail
- add the following Requires:
  * hostname - as mariadb_install_db depends on this tool [bsc#1060110]
  * libaio-devel for libmysqld-devel because libmysqld depends
    on libaio
- tweak build options:
  * remove "DWITH_ASAN=OFF" - this option was added because of mysql
    and it's no longer needed
  * switch from "-DWITH_JEMALLOC=auto" to "-DWITH_JEMALLOC=system"
  * use "DCMAKE_SKIP_INSTALL_RPATH" - this allows to link with -rpath
    during build and fixes quite a few test suite failures. When
    installing the file -rpath is still disabled, so this should
    not have any effect on the installed binaries
  * add "-DWITH_LIBARCHIVE=ON" and "-DWITH_MARIABACKUP=ON"
  * remove -DWITH_BOOST=../boost/ as we use system boost now
- enable OQGRAPH to build (openSUSE only, SLE is missing Judy
  requirement)
- disable Cassandra storage engine build as it's no longer actively
  being developed (See MDEV-4695) [bsc#1055165]
  * Remove "BuildRequires: libthrift-devel" and %{with_cassandra}
    macros that are no longer needed now
- disable make test (Connector/C unit tests) as it requires a
  running server. These tests are part of mysql-test-run
  now (MDEV-12470)
- add suse_skipped_tests.list - the list of the tests that we want
  to skip (they fail correctly or the fix is in progress)
  * adjust mysql-test-run options to skip tests listed there
    [bsc#1041891]
- remove mytop utility that is packaged separately
- remove *.jar files from mysql-test
- remove python scripts remains from tokudb upstream
- remove generating of the MySQL NDB Cluster filelists
- remove removing of manpages for MySQL Carrier Grade Edition
- provide a symlink for the my_safe_process executable that was
  moved from its location to bindir
- update filename in /var/adm/update-messages to match
  documentation and build-compare pattern
- README is now README.md
- fix "file listed twice" build error</changelog>
  <changelog author="vcizek@suse.com" date="1511956800">- Disable openssl compatibility checking
  * the check uses CRYPTO_set_mem_functions() to set debugging
    memory allocation function. The setting only succeeds if no allocation
    was done before. Our fips self-tests, which are run from the library
    constructor, however, do allocate memory, so the subsequent call to
    CRYPTO_set_mem_functions causes the compatibility check to fail
  * add mariadb-10.2.10-disable_openssl_compatibility_check.patch</changelog>
  <changelog author="rhafer@suse.de" date="1511956801">- Added mariadb-10.2.10-wsrep_sst_common.patch (bsc#1069401).
  Upstream bug: https://jira.mariadb.org/browse/MDEV-14256</changelog>
  <changelog author="kstreitova@suse.com" date="1512043200">- update to 10.2.11 GA
  * release notes and changelog:
  * https://mariadb.com/kb/en/library/mariadb-10211-release-notes/
  * https://mariadb.com/kb/en/library/mariadb-10211-changelog/
- pack additional mroonga/groonga files
- change default charset to utf8mb4 for full Unicode support
  [fate#324329]
- remove mariadb-10.2.10-wsrep_sst_common.patch as it's no longer
  needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Do not manually delete
  %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release}-something:
  The file is listed as ghost and thus properly owned by the
  package.
- Use %tmpfiles_create which can cope with transactional updates.</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
</package>
<package pkgid="75b3b2e81ccba1bac61e37c7fda7632db335db6dbbc551041b2da78d2da38424" name="mariadb-errormessages" arch="noarch">
  <version epoch="0" ver="10.2.15" rel="lp150.2.6.1"/>
  <changelog author="vcizek@suse.com" date="1505822400">- Explicitly require libopenssl-1_0_0-devel, to successfully build
  once we switch openssl to 1.1 (bsc#1042632)</changelog>
  <changelog author="bwiedemann@suse.com" date="1509019200">- Drop INFO_BIN from package because it is not needed
  and differs for every build (boo#1047218)</changelog>
  <changelog author="vcizek@suse.com" date="1509451200">- Also Require: libopenssl-1_0_0-devel from the libmysqlclient-devel package</changelog>
  <changelog author="kstreitova@suse.com" date="1509451201">- update to 10.2.10 GA
  * release notes and changelogs
    https://downloads.mariadb.org/mariadb/+releases/
  * fixes for the following security vulnerabilities
  * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365
  * 10.2.8:  CVE-2017-3636, CVE-2017-3641, CVE-2017-3653,
    CVE-2017-10320, CVE-2017-10365, CVE-2017-10379,
    CVE-2017-10384, CVE-2017-10286, CVE-2017-3257
  * 10.2.6:  CVE-2017-3308, CVE-2017-3309, CVE-2017-3453,
    CVE-2017-3456, CVE-2017-3464
  * 10.2.5:  CVE-2017-3313, CVE-2017-3302
  * [bsc#1042632], [bsc#1043328], [bsc#1019948], [fate#323738]
- refresh and rename the following patches:
  * mariadb-10.1.4-group.patch to
    mariadb-10.2.3-group.patch
  * mariadb-10.1.16-systemd-cmake.patch to
    mariadb-10.2.8-systemd-cmake.patch
  * mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
  * mariadb-10.1.12-fortify-and-O.patch to
    mariadb-10.2.4-fortify-and-O.patch
  * mysql-community-server-5.1.46-logrotate.patch to
    mariadb-10.2.4-logrotate.patch
- add mariadb-10.2.10.tar.gz.sig signature and mariadb.keyring files
- start building without client library part, use
  mariadb-connector-c for getting libmariadb libraries. Remove
  libmysclient* packages
- remove baselibs.conf because we no longer build client libraries
  here
- update %{soname} to 19 (libmysqld soname)
- change '=' to '&gt;=' in  Requires:mariadb-errormessages for
  libmysqld%{soname}. Versioned libraries shouldn't require regular
  packages with '='. It also causes problems during update (Problem:
  libmysqld18-10.1.25-3.1.x86_64 requires mariadb-errormessages = 10.1.25,
  but this requirement cannot be provided).
  Also add "Provides: mariadb-errormessages = 10.1.25" for errormessages
  subpackage that solves this problem for the current update.
- pack new files, remove mysql specific files
- remove README.SUSE as it was outdated
- package cleaning
  * run spec-cleaner
  * renumber sources
  * reorganize subpackages order and update summaries, descriptions
    and groups
  * tweak and add some comments to the specfile
  * remove warning about mysql-packaging repository that is no longer
    used for this package
  * remove checks whether we build mysql or mariadb (we build mariadb
    only)
- add galera subpackage
  * add missing "Requires:" (lsof, net-tools, rsync, socat,
    xtrabackup) for proper wsrep scripts functionality
  * add mariadb-10.2.9-galera_cnf.patch that enhances galera.cnf
    configuration file (add wsrep_on=OFF and set the location
    of the wsrep library)
  * rename README-wsrep to README.wsrep so it corresponds with the
    other README names
  * move galera_new_cluster, galera_recovery,
    use_galera_new_cluster.conf, wsrep_* scripts to the galera
    subpackage
- remove the following macros definitions:
  * %{_tmpfilesdir} - it's been defined in systemd macros since
    openSUSE 13.2
  * %{preferred} - we no longer need to distinguish between preferred
    and not preferred version (we build mariadb only)
  * %{with_mandatory_lz4} - mysql specific
  * %{build_extras}, %{pretty_name}, %{build_readline},
    %{builtin_plugins} and {libname} - they are no longer needed
- add the following macros
  * %{run_testsuite} macro that controls the run of the regression
    testsuite
  * %{ignore_testsuite_result} macro - when set to 1 it ignores
    results from the regression testsuite (debug purposes)
  * %{with_mroonga} macro (enable mroonga build for x86_64 archs only)
- rename %{with_jemalloc} to %{with_tokudb} and enable tokudb for
  x86_64 architectures for openSUSE and SLE15 [fate#323280]. Don't
  enable it for SLE12 (missing jemalloc dependency)
- add the following BuildRequires:
  * unixODBC-devel to allow ODBC support for Connect engine [bsc#1039034]
  * krb5-devel to build auth_gssapi.so plugin
  * libarchive-devel
  * use libboost_headers-devel instead of boost-devel for TW. Boost
    package has been split up and will migrate to using multibuild.
    This results in packages that unnecessarily build require
    boost-devel to cause major bottlenecks [bsc#1062583]
- do not use "BuildRequires: lzo-devel" for i586 and arm because
  it makes build fail
- add the following Requires:
  * hostname - as mariadb_install_db depends on this tool [bsc#1060110]
  * libaio-devel for libmysqld-devel because libmysqld depends
    on libaio
- tweak build options:
  * remove "DWITH_ASAN=OFF" - this option was added because of mysql
    and it's no longer needed
  * switch from "-DWITH_JEMALLOC=auto" to "-DWITH_JEMALLOC=system"
  * use "DCMAKE_SKIP_INSTALL_RPATH" - this allows to link with -rpath
    during build and fixes quite a few test suite failures. When
    installing the file -rpath is still disabled, so this should
    not have any effect on the installed binaries
  * add "-DWITH_LIBARCHIVE=ON" and "-DWITH_MARIABACKUP=ON"
  * remove -DWITH_BOOST=../boost/ as we use system boost now
- enable OQGRAPH to build (openSUSE only, SLE is missing Judy
  requirement)
- disable Cassandra storage engine build as it's no longer actively
  being developed (See MDEV-4695) [bsc#1055165]
  * Remove "BuildRequires: libthrift-devel" and %{with_cassandra}
    macros that are no longer needed now
- disable make test (Connector/C unit tests) as it requires a
  running server. These tests are part of mysql-test-run
  now (MDEV-12470)
- add suse_skipped_tests.list - the list of the tests that we want
  to skip (they fail correctly or the fix is in progress)
  * adjust mysql-test-run options to skip tests listed there
    [bsc#1041891]
- remove mytop utility that is packaged separately
- remove *.jar files from mysql-test
- remove python scripts remains from tokudb upstream
- remove generating of the MySQL NDB Cluster filelists
- remove removing of manpages for MySQL Carrier Grade Edition
- provide a symlink for the my_safe_process executable that was
  moved from its location to bindir
- update filename in /var/adm/update-messages to match
  documentation and build-compare pattern
- README is now README.md
- fix "file listed twice" build error</changelog>
  <changelog author="vcizek@suse.com" date="1511956800">- Disable openssl compatibility checking
  * the check uses CRYPTO_set_mem_functions() to set debugging
    memory allocation function. The setting only succeeds if no allocation
    was done before. Our fips self-tests, which are run from the library
    constructor, however, do allocate memory, so the subsequent call to
    CRYPTO_set_mem_functions causes the compatibility check to fail
  * add mariadb-10.2.10-disable_openssl_compatibility_check.patch</changelog>
  <changelog author="rhafer@suse.de" date="1511956801">- Added mariadb-10.2.10-wsrep_sst_common.patch (bsc#1069401).
  Upstream bug: https://jira.mariadb.org/browse/MDEV-14256</changelog>
  <changelog author="kstreitova@suse.com" date="1512043200">- update to 10.2.11 GA
  * release notes and changelog:
  * https://mariadb.com/kb/en/library/mariadb-10211-release-notes/
  * https://mariadb.com/kb/en/library/mariadb-10211-changelog/
- pack additional mroonga/groonga files
- change default charset to utf8mb4 for full Unicode support
  [fate#324329]
- remove mariadb-10.2.10-wsrep_sst_common.patch as it's no longer
  needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Do not manually delete
  %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release}-something:
  The file is listed as ghost and thus properly owned by the
  package.
- Use %tmpfiles_create which can cope with transactional updates.</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
  <changelog author="kstreitova@suse.com" date="1532692800">- switch to libedit as control sequences were already fixed there
  so we don't have to avoid it [bsc#1098683]</changelog>
</package>
<package pkgid="9da8a8308dbc4301bc6be4c4e34f9652b2e2bc932628094a3f79e016c58bf965" name="mariadb-galera" arch="x86_64">
  <version epoch="0" ver="10.2.15" rel="lp150.2.3.2"/>
  <changelog author="kstreitova@suse.com" date="1499688000">- update to MariaDB 10.1.25 GA
  * notable changes
  * MariaDB can no longer be compiled with OpenSSL version 0.9.8
    and below. The last 0.9.8 release was in December 2015, it is
    out of support and is no longer getting security fixes.
  * MariaDB Backup is now beta
  * release notes and changelog:
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-release-notes
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-changelog
  * refresh mariadb-10.1.12-fortify-and-O.patch
  * remove mariadb-10.1.22-xtradb_null_checks.patch (MDEV-12358),
    a fix was merged upstream
  * update file lists for new man-pages and tools
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream</changelog>
  <changelog author="vcizek@suse.com" date="1505822400">- Explicitly require libopenssl-1_0_0-devel, to successfully build
  once we switch openssl to 1.1 (bsc#1042632)</changelog>
  <changelog author="bwiedemann@suse.com" date="1509019200">- Drop INFO_BIN from package because it is not needed
  and differs for every build (boo#1047218)</changelog>
  <changelog author="vcizek@suse.com" date="1509451200">- Also Require: libopenssl-1_0_0-devel from the libmysqlclient-devel package</changelog>
  <changelog author="kstreitova@suse.com" date="1509451201">- update to 10.2.10 GA
  * release notes and changelogs
    https://downloads.mariadb.org/mariadb/+releases/
  * fixes for the following security vulnerabilities
  * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365
  * 10.2.8:  CVE-2017-3636, CVE-2017-3641, CVE-2017-3653,
    CVE-2017-10320, CVE-2017-10365, CVE-2017-10379,
    CVE-2017-10384, CVE-2017-10286, CVE-2017-3257
  * 10.2.6:  CVE-2017-3308, CVE-2017-3309, CVE-2017-3453,
    CVE-2017-3456, CVE-2017-3464
  * 10.2.5:  CVE-2017-3313, CVE-2017-3302
  * [bsc#1042632], [bsc#1043328], [bsc#1019948], [fate#323738]
- refresh and rename the following patches:
  * mariadb-10.1.4-group.patch to
    mariadb-10.2.3-group.patch
  * mariadb-10.1.16-systemd-cmake.patch to
    mariadb-10.2.8-systemd-cmake.patch
  * mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
  * mariadb-10.1.12-fortify-and-O.patch to
    mariadb-10.2.4-fortify-and-O.patch
  * mysql-community-server-5.1.46-logrotate.patch to
    mariadb-10.2.4-logrotate.patch
- add mariadb-10.2.10.tar.gz.sig signature and mariadb.keyring files
- start building without client library part, use
  mariadb-connector-c for getting libmariadb libraries. Remove
  libmysclient* packages
- remove baselibs.conf because we no longer build client libraries
  here
- update %{soname} to 19 (libmysqld soname)
- change '=' to '&gt;=' in  Requires:mariadb-errormessages for
  libmysqld%{soname}. Versioned libraries shouldn't require regular
  packages with '='. It also causes problems during update (Problem:
  libmysqld18-10.1.25-3.1.x86_64 requires mariadb-errormessages = 10.1.25,
  but this requirement cannot be provided).
  Also add "Provides: mariadb-errormessages = 10.1.25" for errormessages
  subpackage that solves this problem for the current update.
- pack new files, remove mysql specific files
- remove README.SUSE as it was outdated
- package cleaning
  * run spec-cleaner
  * renumber sources
  * reorganize subpackages order and update summaries, descriptions
    and groups
  * tweak and add some comments to the specfile
  * remove warning about mysql-packaging repository that is no longer
    used for this package
  * remove checks whether we build mysql or mariadb (we build mariadb
    only)
- add galera subpackage
  * add missing "Requires:" (lsof, net-tools, rsync, socat,
    xtrabackup) for proper wsrep scripts functionality
  * add mariadb-10.2.9-galera_cnf.patch that enhances galera.cnf
    configuration file (add wsrep_on=OFF and set the location
    of the wsrep library)
  * rename README-wsrep to README.wsrep so it corresponds with the
    other README names
  * move galera_new_cluster, galera_recovery,
    use_galera_new_cluster.conf, wsrep_* scripts to the galera
    subpackage
- remove the following macros definitions:
  * %{_tmpfilesdir} - it's been defined in systemd macros since
    openSUSE 13.2
  * %{preferred} - we no longer need to distinguish between preferred
    and not preferred version (we build mariadb only)
  * %{with_mandatory_lz4} - mysql specific
  * %{build_extras}, %{pretty_name}, %{build_readline},
    %{builtin_plugins} and {libname} - they are no longer needed
- add the following macros
  * %{run_testsuite} macro that controls the run of the regression
    testsuite
  * %{ignore_testsuite_result} macro - when set to 1 it ignores
    results from the regression testsuite (debug purposes)
  * %{with_mroonga} macro (enable mroonga build for x86_64 archs only)
- rename %{with_jemalloc} to %{with_tokudb} and enable tokudb for
  x86_64 architectures for openSUSE and SLE15 [fate#323280]. Don't
  enable it for SLE12 (missing jemalloc dependency)
- add the following BuildRequires:
  * unixODBC-devel to allow ODBC support for Connect engine [bsc#1039034]
  * krb5-devel to build auth_gssapi.so plugin
  * libarchive-devel
  * use libboost_headers-devel instead of boost-devel for TW. Boost
    package has been split up and will migrate to using multibuild.
    This results in packages that unnecessarily build require
    boost-devel to cause major bottlenecks [bsc#1062583]
- do not use "BuildRequires: lzo-devel" for i586 and arm because
  it makes build fail
- add the following Requires:
  * hostname - as mariadb_install_db depends on this tool [bsc#1060110]
  * libaio-devel for libmysqld-devel because libmysqld depends
    on libaio
- tweak build options:
  * remove "DWITH_ASAN=OFF" - this option was added because of mysql
    and it's no longer needed
  * switch from "-DWITH_JEMALLOC=auto" to "-DWITH_JEMALLOC=system"
  * use "DCMAKE_SKIP_INSTALL_RPATH" - this allows to link with -rpath
    during build and fixes quite a few test suite failures. When
    installing the file -rpath is still disabled, so this should
    not have any effect on the installed binaries
  * add "-DWITH_LIBARCHIVE=ON" and "-DWITH_MARIABACKUP=ON"
  * remove -DWITH_BOOST=../boost/ as we use system boost now
- enable OQGRAPH to build (openSUSE only, SLE is missing Judy
  requirement)
- disable Cassandra storage engine build as it's no longer actively
  being developed (See MDEV-4695) [bsc#1055165]
  * Remove "BuildRequires: libthrift-devel" and %{with_cassandra}
    macros that are no longer needed now
- disable make test (Connector/C unit tests) as it requires a
  running server. These tests are part of mysql-test-run
  now (MDEV-12470)
- add suse_skipped_tests.list - the list of the tests that we want
  to skip (they fail correctly or the fix is in progress)
  * adjust mysql-test-run options to skip tests listed there
    [bsc#1041891]
- remove mytop utility that is packaged separately
- remove *.jar files from mysql-test
- remove python scripts remains from tokudb upstream
- remove generating of the MySQL NDB Cluster filelists
- remove removing of manpages for MySQL Carrier Grade Edition
- provide a symlink for the my_safe_process executable that was
  moved from its location to bindir
- update filename in /var/adm/update-messages to match
  documentation and build-compare pattern
- README is now README.md
- fix "file listed twice" build error</changelog>
  <changelog author="vcizek@suse.com" date="1511956800">- Disable openssl compatibility checking
  * the check uses CRYPTO_set_mem_functions() to set debugging
    memory allocation function. The setting only succeeds if no allocation
    was done before. Our fips self-tests, which are run from the library
    constructor, however, do allocate memory, so the subsequent call to
    CRYPTO_set_mem_functions causes the compatibility check to fail
  * add mariadb-10.2.10-disable_openssl_compatibility_check.patch</changelog>
  <changelog author="rhafer@suse.de" date="1511956801">- Added mariadb-10.2.10-wsrep_sst_common.patch (bsc#1069401).
  Upstream bug: https://jira.mariadb.org/browse/MDEV-14256</changelog>
  <changelog author="kstreitova@suse.com" date="1512043200">- update to 10.2.11 GA
  * release notes and changelog:
  * https://mariadb.com/kb/en/library/mariadb-10211-release-notes/
  * https://mariadb.com/kb/en/library/mariadb-10211-changelog/
- pack additional mroonga/groonga files
- change default charset to utf8mb4 for full Unicode support
  [fate#324329]
- remove mariadb-10.2.10-wsrep_sst_common.patch as it's no longer
  needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Do not manually delete
  %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release}-something:
  The file is listed as ghost and thus properly owned by the
  package.
- Use %tmpfiles_create which can cope with transactional updates.</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
</package>
<package pkgid="7fcf2b0f6e9219b5ecad361cdb85cb000fb973e7073f6b18a18f6386b3d5620b" name="mariadb-galera" arch="x86_64">
  <version epoch="0" ver="10.2.15" rel="lp150.2.6.1"/>
  <changelog author="vcizek@suse.com" date="1505822400">- Explicitly require libopenssl-1_0_0-devel, to successfully build
  once we switch openssl to 1.1 (bsc#1042632)</changelog>
  <changelog author="bwiedemann@suse.com" date="1509019200">- Drop INFO_BIN from package because it is not needed
  and differs for every build (boo#1047218)</changelog>
  <changelog author="vcizek@suse.com" date="1509451200">- Also Require: libopenssl-1_0_0-devel from the libmysqlclient-devel package</changelog>
  <changelog author="kstreitova@suse.com" date="1509451201">- update to 10.2.10 GA
  * release notes and changelogs
    https://downloads.mariadb.org/mariadb/+releases/
  * fixes for the following security vulnerabilities
  * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365
  * 10.2.8:  CVE-2017-3636, CVE-2017-3641, CVE-2017-3653,
    CVE-2017-10320, CVE-2017-10365, CVE-2017-10379,
    CVE-2017-10384, CVE-2017-10286, CVE-2017-3257
  * 10.2.6:  CVE-2017-3308, CVE-2017-3309, CVE-2017-3453,
    CVE-2017-3456, CVE-2017-3464
  * 10.2.5:  CVE-2017-3313, CVE-2017-3302
  * [bsc#1042632], [bsc#1043328], [bsc#1019948], [fate#323738]
- refresh and rename the following patches:
  * mariadb-10.1.4-group.patch to
    mariadb-10.2.3-group.patch
  * mariadb-10.1.16-systemd-cmake.patch to
    mariadb-10.2.8-systemd-cmake.patch
  * mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
  * mariadb-10.1.12-fortify-and-O.patch to
    mariadb-10.2.4-fortify-and-O.patch
  * mysql-community-server-5.1.46-logrotate.patch to
    mariadb-10.2.4-logrotate.patch
- add mariadb-10.2.10.tar.gz.sig signature and mariadb.keyring files
- start building without client library part, use
  mariadb-connector-c for getting libmariadb libraries. Remove
  libmysclient* packages
- remove baselibs.conf because we no longer build client libraries
  here
- update %{soname} to 19 (libmysqld soname)
- change '=' to '&gt;=' in  Requires:mariadb-errormessages for
  libmysqld%{soname}. Versioned libraries shouldn't require regular
  packages with '='. It also causes problems during update (Problem:
  libmysqld18-10.1.25-3.1.x86_64 requires mariadb-errormessages = 10.1.25,
  but this requirement cannot be provided).
  Also add "Provides: mariadb-errormessages = 10.1.25" for errormessages
  subpackage that solves this problem for the current update.
- pack new files, remove mysql specific files
- remove README.SUSE as it was outdated
- package cleaning
  * run spec-cleaner
  * renumber sources
  * reorganize subpackages order and update summaries, descriptions
    and groups
  * tweak and add some comments to the specfile
  * remove warning about mysql-packaging repository that is no longer
    used for this package
  * remove checks whether we build mysql or mariadb (we build mariadb
    only)
- add galera subpackage
  * add missing "Requires:" (lsof, net-tools, rsync, socat,
    xtrabackup) for proper wsrep scripts functionality
  * add mariadb-10.2.9-galera_cnf.patch that enhances galera.cnf
    configuration file (add wsrep_on=OFF and set the location
    of the wsrep library)
  * rename README-wsrep to README.wsrep so it corresponds with the
    other README names
  * move galera_new_cluster, galera_recovery,
    use_galera_new_cluster.conf, wsrep_* scripts to the galera
    subpackage
- remove the following macros definitions:
  * %{_tmpfilesdir} - it's been defined in systemd macros since
    openSUSE 13.2
  * %{preferred} - we no longer need to distinguish between preferred
    and not preferred version (we build mariadb only)
  * %{with_mandatory_lz4} - mysql specific
  * %{build_extras}, %{pretty_name}, %{build_readline},
    %{builtin_plugins} and {libname} - they are no longer needed
- add the following macros
  * %{run_testsuite} macro that controls the run of the regression
    testsuite
  * %{ignore_testsuite_result} macro - when set to 1 it ignores
    results from the regression testsuite (debug purposes)
  * %{with_mroonga} macro (enable mroonga build for x86_64 archs only)
- rename %{with_jemalloc} to %{with_tokudb} and enable tokudb for
  x86_64 architectures for openSUSE and SLE15 [fate#323280]. Don't
  enable it for SLE12 (missing jemalloc dependency)
- add the following BuildRequires:
  * unixODBC-devel to allow ODBC support for Connect engine [bsc#1039034]
  * krb5-devel to build auth_gssapi.so plugin
  * libarchive-devel
  * use libboost_headers-devel instead of boost-devel for TW. Boost
    package has been split up and will migrate to using multibuild.
    This results in packages that unnecessarily build require
    boost-devel to cause major bottlenecks [bsc#1062583]
- do not use "BuildRequires: lzo-devel" for i586 and arm because
  it makes build fail
- add the following Requires:
  * hostname - as mariadb_install_db depends on this tool [bsc#1060110]
  * libaio-devel for libmysqld-devel because libmysqld depends
    on libaio
- tweak build options:
  * remove "DWITH_ASAN=OFF" - this option was added because of mysql
    and it's no longer needed
  * switch from "-DWITH_JEMALLOC=auto" to "-DWITH_JEMALLOC=system"
  * use "DCMAKE_SKIP_INSTALL_RPATH" - this allows to link with -rpath
    during build and fixes quite a few test suite failures. When
    installing the file -rpath is still disabled, so this should
    not have any effect on the installed binaries
  * add "-DWITH_LIBARCHIVE=ON" and "-DWITH_MARIABACKUP=ON"
  * remove -DWITH_BOOST=../boost/ as we use system boost now
- enable OQGRAPH to build (openSUSE only, SLE is missing Judy
  requirement)
- disable Cassandra storage engine build as it's no longer actively
  being developed (See MDEV-4695) [bsc#1055165]
  * Remove "BuildRequires: libthrift-devel" and %{with_cassandra}
    macros that are no longer needed now
- disable make test (Connector/C unit tests) as it requires a
  running server. These tests are part of mysql-test-run
  now (MDEV-12470)
- add suse_skipped_tests.list - the list of the tests that we want
  to skip (they fail correctly or the fix is in progress)
  * adjust mysql-test-run options to skip tests listed there
    [bsc#1041891]
- remove mytop utility that is packaged separately
- remove *.jar files from mysql-test
- remove python scripts remains from tokudb upstream
- remove generating of the MySQL NDB Cluster filelists
- remove removing of manpages for MySQL Carrier Grade Edition
- provide a symlink for the my_safe_process executable that was
  moved from its location to bindir
- update filename in /var/adm/update-messages to match
  documentation and build-compare pattern
- README is now README.md
- fix "file listed twice" build error</changelog>
  <changelog author="vcizek@suse.com" date="1511956800">- Disable openssl compatibility checking
  * the check uses CRYPTO_set_mem_functions() to set debugging
    memory allocation function. The setting only succeeds if no allocation
    was done before. Our fips self-tests, which are run from the library
    constructor, however, do allocate memory, so the subsequent call to
    CRYPTO_set_mem_functions causes the compatibility check to fail
  * add mariadb-10.2.10-disable_openssl_compatibility_check.patch</changelog>
  <changelog author="rhafer@suse.de" date="1511956801">- Added mariadb-10.2.10-wsrep_sst_common.patch (bsc#1069401).
  Upstream bug: https://jira.mariadb.org/browse/MDEV-14256</changelog>
  <changelog author="kstreitova@suse.com" date="1512043200">- update to 10.2.11 GA
  * release notes and changelog:
  * https://mariadb.com/kb/en/library/mariadb-10211-release-notes/
  * https://mariadb.com/kb/en/library/mariadb-10211-changelog/
- pack additional mroonga/groonga files
- change default charset to utf8mb4 for full Unicode support
  [fate#324329]
- remove mariadb-10.2.10-wsrep_sst_common.patch as it's no longer
  needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Do not manually delete
  %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release}-something:
  The file is listed as ghost and thus properly owned by the
  package.
- Use %tmpfiles_create which can cope with transactional updates.</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
  <changelog author="kstreitova@suse.com" date="1532692800">- switch to libedit as control sequences were already fixed there
  so we don't have to avoid it [bsc#1098683]</changelog>
</package>
<package pkgid="72ac48505d187d9e2881909ec42bb72842b2c43247ca79a32204009def53572a" name="mariadb-test" arch="x86_64">
  <version epoch="0" ver="10.2.15" rel="lp150.2.3.2"/>
  <changelog author="kstreitova@suse.com" date="1499688000">- update to MariaDB 10.1.25 GA
  * notable changes
  * MariaDB can no longer be compiled with OpenSSL version 0.9.8
    and below. The last 0.9.8 release was in December 2015, it is
    out of support and is no longer getting security fixes.
  * MariaDB Backup is now beta
  * release notes and changelog:
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-release-notes
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-changelog
  * refresh mariadb-10.1.12-fortify-and-O.patch
  * remove mariadb-10.1.22-xtradb_null_checks.patch (MDEV-12358),
    a fix was merged upstream
  * update file lists for new man-pages and tools
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream</changelog>
  <changelog author="vcizek@suse.com" date="1505822400">- Explicitly require libopenssl-1_0_0-devel, to successfully build
  once we switch openssl to 1.1 (bsc#1042632)</changelog>
  <changelog author="bwiedemann@suse.com" date="1509019200">- Drop INFO_BIN from package because it is not needed
  and differs for every build (boo#1047218)</changelog>
  <changelog author="vcizek@suse.com" date="1509451200">- Also Require: libopenssl-1_0_0-devel from the libmysqlclient-devel package</changelog>
  <changelog author="kstreitova@suse.com" date="1509451201">- update to 10.2.10 GA
  * release notes and changelogs
    https://downloads.mariadb.org/mariadb/+releases/
  * fixes for the following security vulnerabilities
  * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365
  * 10.2.8:  CVE-2017-3636, CVE-2017-3641, CVE-2017-3653,
    CVE-2017-10320, CVE-2017-10365, CVE-2017-10379,
    CVE-2017-10384, CVE-2017-10286, CVE-2017-3257
  * 10.2.6:  CVE-2017-3308, CVE-2017-3309, CVE-2017-3453,
    CVE-2017-3456, CVE-2017-3464
  * 10.2.5:  CVE-2017-3313, CVE-2017-3302
  * [bsc#1042632], [bsc#1043328], [bsc#1019948], [fate#323738]
- refresh and rename the following patches:
  * mariadb-10.1.4-group.patch to
    mariadb-10.2.3-group.patch
  * mariadb-10.1.16-systemd-cmake.patch to
    mariadb-10.2.8-systemd-cmake.patch
  * mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
  * mariadb-10.1.12-fortify-and-O.patch to
    mariadb-10.2.4-fortify-and-O.patch
  * mysql-community-server-5.1.46-logrotate.patch to
    mariadb-10.2.4-logrotate.patch
- add mariadb-10.2.10.tar.gz.sig signature and mariadb.keyring files
- start building without client library part, use
  mariadb-connector-c for getting libmariadb libraries. Remove
  libmysclient* packages
- remove baselibs.conf because we no longer build client libraries
  here
- update %{soname} to 19 (libmysqld soname)
- change '=' to '&gt;=' in  Requires:mariadb-errormessages for
  libmysqld%{soname}. Versioned libraries shouldn't require regular
  packages with '='. It also causes problems during update (Problem:
  libmysqld18-10.1.25-3.1.x86_64 requires mariadb-errormessages = 10.1.25,
  but this requirement cannot be provided).
  Also add "Provides: mariadb-errormessages = 10.1.25" for errormessages
  subpackage that solves this problem for the current update.
- pack new files, remove mysql specific files
- remove README.SUSE as it was outdated
- package cleaning
  * run spec-cleaner
  * renumber sources
  * reorganize subpackages order and update summaries, descriptions
    and groups
  * tweak and add some comments to the specfile
  * remove warning about mysql-packaging repository that is no longer
    used for this package
  * remove checks whether we build mysql or mariadb (we build mariadb
    only)
- add galera subpackage
  * add missing "Requires:" (lsof, net-tools, rsync, socat,
    xtrabackup) for proper wsrep scripts functionality
  * add mariadb-10.2.9-galera_cnf.patch that enhances galera.cnf
    configuration file (add wsrep_on=OFF and set the location
    of the wsrep library)
  * rename README-wsrep to README.wsrep so it corresponds with the
    other README names
  * move galera_new_cluster, galera_recovery,
    use_galera_new_cluster.conf, wsrep_* scripts to the galera
    subpackage
- remove the following macros definitions:
  * %{_tmpfilesdir} - it's been defined in systemd macros since
    openSUSE 13.2
  * %{preferred} - we no longer need to distinguish between preferred
    and not preferred version (we build mariadb only)
  * %{with_mandatory_lz4} - mysql specific
  * %{build_extras}, %{pretty_name}, %{build_readline},
    %{builtin_plugins} and {libname} - they are no longer needed
- add the following macros
  * %{run_testsuite} macro that controls the run of the regression
    testsuite
  * %{ignore_testsuite_result} macro - when set to 1 it ignores
    results from the regression testsuite (debug purposes)
  * %{with_mroonga} macro (enable mroonga build for x86_64 archs only)
- rename %{with_jemalloc} to %{with_tokudb} and enable tokudb for
  x86_64 architectures for openSUSE and SLE15 [fate#323280]. Don't
  enable it for SLE12 (missing jemalloc dependency)
- add the following BuildRequires:
  * unixODBC-devel to allow ODBC support for Connect engine [bsc#1039034]
  * krb5-devel to build auth_gssapi.so plugin
  * libarchive-devel
  * use libboost_headers-devel instead of boost-devel for TW. Boost
    package has been split up and will migrate to using multibuild.
    This results in packages that unnecessarily build require
    boost-devel to cause major bottlenecks [bsc#1062583]
- do not use "BuildRequires: lzo-devel" for i586 and arm because
  it makes build fail
- add the following Requires:
  * hostname - as mariadb_install_db depends on this tool [bsc#1060110]
  * libaio-devel for libmysqld-devel because libmysqld depends
    on libaio
- tweak build options:
  * remove "DWITH_ASAN=OFF" - this option was added because of mysql
    and it's no longer needed
  * switch from "-DWITH_JEMALLOC=auto" to "-DWITH_JEMALLOC=system"
  * use "DCMAKE_SKIP_INSTALL_RPATH" - this allows to link with -rpath
    during build and fixes quite a few test suite failures. When
    installing the file -rpath is still disabled, so this should
    not have any effect on the installed binaries
  * add "-DWITH_LIBARCHIVE=ON" and "-DWITH_MARIABACKUP=ON"
  * remove -DWITH_BOOST=../boost/ as we use system boost now
- enable OQGRAPH to build (openSUSE only, SLE is missing Judy
  requirement)
- disable Cassandra storage engine build as it's no longer actively
  being developed (See MDEV-4695) [bsc#1055165]
  * Remove "BuildRequires: libthrift-devel" and %{with_cassandra}
    macros that are no longer needed now
- disable make test (Connector/C unit tests) as it requires a
  running server. These tests are part of mysql-test-run
  now (MDEV-12470)
- add suse_skipped_tests.list - the list of the tests that we want
  to skip (they fail correctly or the fix is in progress)
  * adjust mysql-test-run options to skip tests listed there
    [bsc#1041891]
- remove mytop utility that is packaged separately
- remove *.jar files from mysql-test
- remove python scripts remains from tokudb upstream
- remove generating of the MySQL NDB Cluster filelists
- remove removing of manpages for MySQL Carrier Grade Edition
- provide a symlink for the my_safe_process executable that was
  moved from its location to bindir
- update filename in /var/adm/update-messages to match
  documentation and build-compare pattern
- README is now README.md
- fix "file listed twice" build error</changelog>
  <changelog author="vcizek@suse.com" date="1511956800">- Disable openssl compatibility checking
  * the check uses CRYPTO_set_mem_functions() to set debugging
    memory allocation function. The setting only succeeds if no allocation
    was done before. Our fips self-tests, which are run from the library
    constructor, however, do allocate memory, so the subsequent call to
    CRYPTO_set_mem_functions causes the compatibility check to fail
  * add mariadb-10.2.10-disable_openssl_compatibility_check.patch</changelog>
  <changelog author="rhafer@suse.de" date="1511956801">- Added mariadb-10.2.10-wsrep_sst_common.patch (bsc#1069401).
  Upstream bug: https://jira.mariadb.org/browse/MDEV-14256</changelog>
  <changelog author="kstreitova@suse.com" date="1512043200">- update to 10.2.11 GA
  * release notes and changelog:
  * https://mariadb.com/kb/en/library/mariadb-10211-release-notes/
  * https://mariadb.com/kb/en/library/mariadb-10211-changelog/
- pack additional mroonga/groonga files
- change default charset to utf8mb4 for full Unicode support
  [fate#324329]
- remove mariadb-10.2.10-wsrep_sst_common.patch as it's no longer
  needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Do not manually delete
  %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release}-something:
  The file is listed as ghost and thus properly owned by the
  package.
- Use %tmpfiles_create which can cope with transactional updates.</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
</package>
<package pkgid="e2c1b4b260ffa268aa49a4808b2f61f8bec5f3235dfd20c6a883f1adf03357a7" name="mariadb-test" arch="x86_64">
  <version epoch="0" ver="10.2.15" rel="lp150.2.6.1"/>
  <changelog author="vcizek@suse.com" date="1505822400">- Explicitly require libopenssl-1_0_0-devel, to successfully build
  once we switch openssl to 1.1 (bsc#1042632)</changelog>
  <changelog author="bwiedemann@suse.com" date="1509019200">- Drop INFO_BIN from package because it is not needed
  and differs for every build (boo#1047218)</changelog>
  <changelog author="vcizek@suse.com" date="1509451200">- Also Require: libopenssl-1_0_0-devel from the libmysqlclient-devel package</changelog>
  <changelog author="kstreitova@suse.com" date="1509451201">- update to 10.2.10 GA
  * release notes and changelogs
    https://downloads.mariadb.org/mariadb/+releases/
  * fixes for the following security vulnerabilities
  * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365
  * 10.2.8:  CVE-2017-3636, CVE-2017-3641, CVE-2017-3653,
    CVE-2017-10320, CVE-2017-10365, CVE-2017-10379,
    CVE-2017-10384, CVE-2017-10286, CVE-2017-3257
  * 10.2.6:  CVE-2017-3308, CVE-2017-3309, CVE-2017-3453,
    CVE-2017-3456, CVE-2017-3464
  * 10.2.5:  CVE-2017-3313, CVE-2017-3302
  * [bsc#1042632], [bsc#1043328], [bsc#1019948], [fate#323738]
- refresh and rename the following patches:
  * mariadb-10.1.4-group.patch to
    mariadb-10.2.3-group.patch
  * mariadb-10.1.16-systemd-cmake.patch to
    mariadb-10.2.8-systemd-cmake.patch
  * mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
  * mariadb-10.1.12-fortify-and-O.patch to
    mariadb-10.2.4-fortify-and-O.patch
  * mysql-community-server-5.1.46-logrotate.patch to
    mariadb-10.2.4-logrotate.patch
- add mariadb-10.2.10.tar.gz.sig signature and mariadb.keyring files
- start building without client library part, use
  mariadb-connector-c for getting libmariadb libraries. Remove
  libmysclient* packages
- remove baselibs.conf because we no longer build client libraries
  here
- update %{soname} to 19 (libmysqld soname)
- change '=' to '&gt;=' in  Requires:mariadb-errormessages for
  libmysqld%{soname}. Versioned libraries shouldn't require regular
  packages with '='. It also causes problems during update (Problem:
  libmysqld18-10.1.25-3.1.x86_64 requires mariadb-errormessages = 10.1.25,
  but this requirement cannot be provided).
  Also add "Provides: mariadb-errormessages = 10.1.25" for errormessages
  subpackage that solves this problem for the current update.
- pack new files, remove mysql specific files
- remove README.SUSE as it was outdated
- package cleaning
  * run spec-cleaner
  * renumber sources
  * reorganize subpackages order and update summaries, descriptions
    and groups
  * tweak and add some comments to the specfile
  * remove warning about mysql-packaging repository that is no longer
    used for this package
  * remove checks whether we build mysql or mariadb (we build mariadb
    only)
- add galera subpackage
  * add missing "Requires:" (lsof, net-tools, rsync, socat,
    xtrabackup) for proper wsrep scripts functionality
  * add mariadb-10.2.9-galera_cnf.patch that enhances galera.cnf
    configuration file (add wsrep_on=OFF and set the location
    of the wsrep library)
  * rename README-wsrep to README.wsrep so it corresponds with the
    other README names
  * move galera_new_cluster, galera_recovery,
    use_galera_new_cluster.conf, wsrep_* scripts to the galera
    subpackage
- remove the following macros definitions:
  * %{_tmpfilesdir} - it's been defined in systemd macros since
    openSUSE 13.2
  * %{preferred} - we no longer need to distinguish between preferred
    and not preferred version (we build mariadb only)
  * %{with_mandatory_lz4} - mysql specific
  * %{build_extras}, %{pretty_name}, %{build_readline},
    %{builtin_plugins} and {libname} - they are no longer needed
- add the following macros
  * %{run_testsuite} macro that controls the run of the regression
    testsuite
  * %{ignore_testsuite_result} macro - when set to 1 it ignores
    results from the regression testsuite (debug purposes)
  * %{with_mroonga} macro (enable mroonga build for x86_64 archs only)
- rename %{with_jemalloc} to %{with_tokudb} and enable tokudb for
  x86_64 architectures for openSUSE and SLE15 [fate#323280]. Don't
  enable it for SLE12 (missing jemalloc dependency)
- add the following BuildRequires:
  * unixODBC-devel to allow ODBC support for Connect engine [bsc#1039034]
  * krb5-devel to build auth_gssapi.so plugin
  * libarchive-devel
  * use libboost_headers-devel instead of boost-devel for TW. Boost
    package has been split up and will migrate to using multibuild.
    This results in packages that unnecessarily build require
    boost-devel to cause major bottlenecks [bsc#1062583]
- do not use "BuildRequires: lzo-devel" for i586 and arm because
  it makes build fail
- add the following Requires:
  * hostname - as mariadb_install_db depends on this tool [bsc#1060110]
  * libaio-devel for libmysqld-devel because libmysqld depends
    on libaio
- tweak build options:
  * remove "DWITH_ASAN=OFF" - this option was added because of mysql
    and it's no longer needed
  * switch from "-DWITH_JEMALLOC=auto" to "-DWITH_JEMALLOC=system"
  * use "DCMAKE_SKIP_INSTALL_RPATH" - this allows to link with -rpath
    during build and fixes quite a few test suite failures. When
    installing the file -rpath is still disabled, so this should
    not have any effect on the installed binaries
  * add "-DWITH_LIBARCHIVE=ON" and "-DWITH_MARIABACKUP=ON"
  * remove -DWITH_BOOST=../boost/ as we use system boost now
- enable OQGRAPH to build (openSUSE only, SLE is missing Judy
  requirement)
- disable Cassandra storage engine build as it's no longer actively
  being developed (See MDEV-4695) [bsc#1055165]
  * Remove "BuildRequires: libthrift-devel" and %{with_cassandra}
    macros that are no longer needed now
- disable make test (Connector/C unit tests) as it requires a
  running server. These tests are part of mysql-test-run
  now (MDEV-12470)
- add suse_skipped_tests.list - the list of the tests that we want
  to skip (they fail correctly or the fix is in progress)
  * adjust mysql-test-run options to skip tests listed there
    [bsc#1041891]
- remove mytop utility that is packaged separately
- remove *.jar files from mysql-test
- remove python scripts remains from tokudb upstream
- remove generating of the MySQL NDB Cluster filelists
- remove removing of manpages for MySQL Carrier Grade Edition
- provide a symlink for the my_safe_process executable that was
  moved from its location to bindir
- update filename in /var/adm/update-messages to match
  documentation and build-compare pattern
- README is now README.md
- fix "file listed twice" build error</changelog>
  <changelog author="vcizek@suse.com" date="1511956800">- Disable openssl compatibility checking
  * the check uses CRYPTO_set_mem_functions() to set debugging
    memory allocation function. The setting only succeeds if no allocation
    was done before. Our fips self-tests, which are run from the library
    constructor, however, do allocate memory, so the subsequent call to
    CRYPTO_set_mem_functions causes the compatibility check to fail
  * add mariadb-10.2.10-disable_openssl_compatibility_check.patch</changelog>
  <changelog author="rhafer@suse.de" date="1511956801">- Added mariadb-10.2.10-wsrep_sst_common.patch (bsc#1069401).
  Upstream bug: https://jira.mariadb.org/browse/MDEV-14256</changelog>
  <changelog author="kstreitova@suse.com" date="1512043200">- update to 10.2.11 GA
  * release notes and changelog:
  * https://mariadb.com/kb/en/library/mariadb-10211-release-notes/
  * https://mariadb.com/kb/en/library/mariadb-10211-changelog/
- pack additional mroonga/groonga files
- change default charset to utf8mb4 for full Unicode support
  [fate#324329]
- remove mariadb-10.2.10-wsrep_sst_common.patch as it's no longer
  needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Do not manually delete
  %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release}-something:
  The file is listed as ghost and thus properly owned by the
  package.
- Use %tmpfiles_create which can cope with transactional updates.</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
  <changelog author="kstreitova@suse.com" date="1532692800">- switch to libedit as control sequences were already fixed there
  so we don't have to avoid it [bsc#1098683]</changelog>
</package>
<package pkgid="170dd63f1ccd7f1123f739b31615cfa9d1ca6607bd4ec65df3828151746a46eb" name="mariadb-tools" arch="x86_64">
  <version epoch="0" ver="10.2.15" rel="lp150.2.3.2"/>
  <changelog author="kstreitova@suse.com" date="1499688000">- update to MariaDB 10.1.25 GA
  * notable changes
  * MariaDB can no longer be compiled with OpenSSL version 0.9.8
    and below. The last 0.9.8 release was in December 2015, it is
    out of support and is no longer getting security fixes.
  * MariaDB Backup is now beta
  * release notes and changelog:
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-release-notes
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-changelog
  * refresh mariadb-10.1.12-fortify-and-O.patch
  * remove mariadb-10.1.22-xtradb_null_checks.patch (MDEV-12358),
    a fix was merged upstream
  * update file lists for new man-pages and tools
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream</changelog>
  <changelog author="vcizek@suse.com" date="1505822400">- Explicitly require libopenssl-1_0_0-devel, to successfully build
  once we switch openssl to 1.1 (bsc#1042632)</changelog>
  <changelog author="bwiedemann@suse.com" date="1509019200">- Drop INFO_BIN from package because it is not needed
  and differs for every build (boo#1047218)</changelog>
  <changelog author="vcizek@suse.com" date="1509451200">- Also Require: libopenssl-1_0_0-devel from the libmysqlclient-devel package</changelog>
  <changelog author="kstreitova@suse.com" date="1509451201">- update to 10.2.10 GA
  * release notes and changelogs
    https://downloads.mariadb.org/mariadb/+releases/
  * fixes for the following security vulnerabilities
  * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365
  * 10.2.8:  CVE-2017-3636, CVE-2017-3641, CVE-2017-3653,
    CVE-2017-10320, CVE-2017-10365, CVE-2017-10379,
    CVE-2017-10384, CVE-2017-10286, CVE-2017-3257
  * 10.2.6:  CVE-2017-3308, CVE-2017-3309, CVE-2017-3453,
    CVE-2017-3456, CVE-2017-3464
  * 10.2.5:  CVE-2017-3313, CVE-2017-3302
  * [bsc#1042632], [bsc#1043328], [bsc#1019948], [fate#323738]
- refresh and rename the following patches:
  * mariadb-10.1.4-group.patch to
    mariadb-10.2.3-group.patch
  * mariadb-10.1.16-systemd-cmake.patch to
    mariadb-10.2.8-systemd-cmake.patch
  * mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
  * mariadb-10.1.12-fortify-and-O.patch to
    mariadb-10.2.4-fortify-and-O.patch
  * mysql-community-server-5.1.46-logrotate.patch to
    mariadb-10.2.4-logrotate.patch
- add mariadb-10.2.10.tar.gz.sig signature and mariadb.keyring files
- start building without client library part, use
  mariadb-connector-c for getting libmariadb libraries. Remove
  libmysclient* packages
- remove baselibs.conf because we no longer build client libraries
  here
- update %{soname} to 19 (libmysqld soname)
- change '=' to '&gt;=' in  Requires:mariadb-errormessages for
  libmysqld%{soname}. Versioned libraries shouldn't require regular
  packages with '='. It also causes problems during update (Problem:
  libmysqld18-10.1.25-3.1.x86_64 requires mariadb-errormessages = 10.1.25,
  but this requirement cannot be provided).
  Also add "Provides: mariadb-errormessages = 10.1.25" for errormessages
  subpackage that solves this problem for the current update.
- pack new files, remove mysql specific files
- remove README.SUSE as it was outdated
- package cleaning
  * run spec-cleaner
  * renumber sources
  * reorganize subpackages order and update summaries, descriptions
    and groups
  * tweak and add some comments to the specfile
  * remove warning about mysql-packaging repository that is no longer
    used for this package
  * remove checks whether we build mysql or mariadb (we build mariadb
    only)
- add galera subpackage
  * add missing "Requires:" (lsof, net-tools, rsync, socat,
    xtrabackup) for proper wsrep scripts functionality
  * add mariadb-10.2.9-galera_cnf.patch that enhances galera.cnf
    configuration file (add wsrep_on=OFF and set the location
    of the wsrep library)
  * rename README-wsrep to README.wsrep so it corresponds with the
    other README names
  * move galera_new_cluster, galera_recovery,
    use_galera_new_cluster.conf, wsrep_* scripts to the galera
    subpackage
- remove the following macros definitions:
  * %{_tmpfilesdir} - it's been defined in systemd macros since
    openSUSE 13.2
  * %{preferred} - we no longer need to distinguish between preferred
    and not preferred version (we build mariadb only)
  * %{with_mandatory_lz4} - mysql specific
  * %{build_extras}, %{pretty_name}, %{build_readline},
    %{builtin_plugins} and {libname} - they are no longer needed
- add the following macros
  * %{run_testsuite} macro that controls the run of the regression
    testsuite
  * %{ignore_testsuite_result} macro - when set to 1 it ignores
    results from the regression testsuite (debug purposes)
  * %{with_mroonga} macro (enable mroonga build for x86_64 archs only)
- rename %{with_jemalloc} to %{with_tokudb} and enable tokudb for
  x86_64 architectures for openSUSE and SLE15 [fate#323280]. Don't
  enable it for SLE12 (missing jemalloc dependency)
- add the following BuildRequires:
  * unixODBC-devel to allow ODBC support for Connect engine [bsc#1039034]
  * krb5-devel to build auth_gssapi.so plugin
  * libarchive-devel
  * use libboost_headers-devel instead of boost-devel for TW. Boost
    package has been split up and will migrate to using multibuild.
    This results in packages that unnecessarily build require
    boost-devel to cause major bottlenecks [bsc#1062583]
- do not use "BuildRequires: lzo-devel" for i586 and arm because
  it makes build fail
- add the following Requires:
  * hostname - as mariadb_install_db depends on this tool [bsc#1060110]
  * libaio-devel for libmysqld-devel because libmysqld depends
    on libaio
- tweak build options:
  * remove "DWITH_ASAN=OFF" - this option was added because of mysql
    and it's no longer needed
  * switch from "-DWITH_JEMALLOC=auto" to "-DWITH_JEMALLOC=system"
  * use "DCMAKE_SKIP_INSTALL_RPATH" - this allows to link with -rpath
    during build and fixes quite a few test suite failures. When
    installing the file -rpath is still disabled, so this should
    not have any effect on the installed binaries
  * add "-DWITH_LIBARCHIVE=ON" and "-DWITH_MARIABACKUP=ON"
  * remove -DWITH_BOOST=../boost/ as we use system boost now
- enable OQGRAPH to build (openSUSE only, SLE is missing Judy
  requirement)
- disable Cassandra storage engine build as it's no longer actively
  being developed (See MDEV-4695) [bsc#1055165]
  * Remove "BuildRequires: libthrift-devel" and %{with_cassandra}
    macros that are no longer needed now
- disable make test (Connector/C unit tests) as it requires a
  running server. These tests are part of mysql-test-run
  now (MDEV-12470)
- add suse_skipped_tests.list - the list of the tests that we want
  to skip (they fail correctly or the fix is in progress)
  * adjust mysql-test-run options to skip tests listed there
    [bsc#1041891]
- remove mytop utility that is packaged separately
- remove *.jar files from mysql-test
- remove python scripts remains from tokudb upstream
- remove generating of the MySQL NDB Cluster filelists
- remove removing of manpages for MySQL Carrier Grade Edition
- provide a symlink for the my_safe_process executable that was
  moved from its location to bindir
- update filename in /var/adm/update-messages to match
  documentation and build-compare pattern
- README is now README.md
- fix "file listed twice" build error</changelog>
  <changelog author="vcizek@suse.com" date="1511956800">- Disable openssl compatibility checking
  * the check uses CRYPTO_set_mem_functions() to set debugging
    memory allocation function. The setting only succeeds if no allocation
    was done before. Our fips self-tests, which are run from the library
    constructor, however, do allocate memory, so the subsequent call to
    CRYPTO_set_mem_functions causes the compatibility check to fail
  * add mariadb-10.2.10-disable_openssl_compatibility_check.patch</changelog>
  <changelog author="rhafer@suse.de" date="1511956801">- Added mariadb-10.2.10-wsrep_sst_common.patch (bsc#1069401).
  Upstream bug: https://jira.mariadb.org/browse/MDEV-14256</changelog>
  <changelog author="kstreitova@suse.com" date="1512043200">- update to 10.2.11 GA
  * release notes and changelog:
  * https://mariadb.com/kb/en/library/mariadb-10211-release-notes/
  * https://mariadb.com/kb/en/library/mariadb-10211-changelog/
- pack additional mroonga/groonga files
- change default charset to utf8mb4 for full Unicode support
  [fate#324329]
- remove mariadb-10.2.10-wsrep_sst_common.patch as it's no longer
  needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Do not manually delete
  %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release}-something:
  The file is listed as ghost and thus properly owned by the
  package.
- Use %tmpfiles_create which can cope with transactional updates.</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
</package>
<package pkgid="3f7ea5bce6cc592b09022783c975f27110a8fea5e5ff8920e75fc903abfb3940" name="mariadb-tools" arch="x86_64">
  <version epoch="0" ver="10.2.15" rel="lp150.2.6.1"/>
  <changelog author="vcizek@suse.com" date="1505822400">- Explicitly require libopenssl-1_0_0-devel, to successfully build
  once we switch openssl to 1.1 (bsc#1042632)</changelog>
  <changelog author="bwiedemann@suse.com" date="1509019200">- Drop INFO_BIN from package because it is not needed
  and differs for every build (boo#1047218)</changelog>
  <changelog author="vcizek@suse.com" date="1509451200">- Also Require: libopenssl-1_0_0-devel from the libmysqlclient-devel package</changelog>
  <changelog author="kstreitova@suse.com" date="1509451201">- update to 10.2.10 GA
  * release notes and changelogs
    https://downloads.mariadb.org/mariadb/+releases/
  * fixes for the following security vulnerabilities
  * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365
  * 10.2.8:  CVE-2017-3636, CVE-2017-3641, CVE-2017-3653,
    CVE-2017-10320, CVE-2017-10365, CVE-2017-10379,
    CVE-2017-10384, CVE-2017-10286, CVE-2017-3257
  * 10.2.6:  CVE-2017-3308, CVE-2017-3309, CVE-2017-3453,
    CVE-2017-3456, CVE-2017-3464
  * 10.2.5:  CVE-2017-3313, CVE-2017-3302
  * [bsc#1042632], [bsc#1043328], [bsc#1019948], [fate#323738]
- refresh and rename the following patches:
  * mariadb-10.1.4-group.patch to
    mariadb-10.2.3-group.patch
  * mariadb-10.1.16-systemd-cmake.patch to
    mariadb-10.2.8-systemd-cmake.patch
  * mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
  * mariadb-10.1.12-fortify-and-O.patch to
    mariadb-10.2.4-fortify-and-O.patch
  * mysql-community-server-5.1.46-logrotate.patch to
    mariadb-10.2.4-logrotate.patch
- add mariadb-10.2.10.tar.gz.sig signature and mariadb.keyring files
- start building without client library part, use
  mariadb-connector-c for getting libmariadb libraries. Remove
  libmysclient* packages
- remove baselibs.conf because we no longer build client libraries
  here
- update %{soname} to 19 (libmysqld soname)
- change '=' to '&gt;=' in  Requires:mariadb-errormessages for
  libmysqld%{soname}. Versioned libraries shouldn't require regular
  packages with '='. It also causes problems during update (Problem:
  libmysqld18-10.1.25-3.1.x86_64 requires mariadb-errormessages = 10.1.25,
  but this requirement cannot be provided).
  Also add "Provides: mariadb-errormessages = 10.1.25" for errormessages
  subpackage that solves this problem for the current update.
- pack new files, remove mysql specific files
- remove README.SUSE as it was outdated
- package cleaning
  * run spec-cleaner
  * renumber sources
  * reorganize subpackages order and update summaries, descriptions
    and groups
  * tweak and add some comments to the specfile
  * remove warning about mysql-packaging repository that is no longer
    used for this package
  * remove checks whether we build mysql or mariadb (we build mariadb
    only)
- add galera subpackage
  * add missing "Requires:" (lsof, net-tools, rsync, socat,
    xtrabackup) for proper wsrep scripts functionality
  * add mariadb-10.2.9-galera_cnf.patch that enhances galera.cnf
    configuration file (add wsrep_on=OFF and set the location
    of the wsrep library)
  * rename README-wsrep to README.wsrep so it corresponds with the
    other README names
  * move galera_new_cluster, galera_recovery,
    use_galera_new_cluster.conf, wsrep_* scripts to the galera
    subpackage
- remove the following macros definitions:
  * %{_tmpfilesdir} - it's been defined in systemd macros since
    openSUSE 13.2
  * %{preferred} - we no longer need to distinguish between preferred
    and not preferred version (we build mariadb only)
  * %{with_mandatory_lz4} - mysql specific
  * %{build_extras}, %{pretty_name}, %{build_readline},
    %{builtin_plugins} and {libname} - they are no longer needed
- add the following macros
  * %{run_testsuite} macro that controls the run of the regression
    testsuite
  * %{ignore_testsuite_result} macro - when set to 1 it ignores
    results from the regression testsuite (debug purposes)
  * %{with_mroonga} macro (enable mroonga build for x86_64 archs only)
- rename %{with_jemalloc} to %{with_tokudb} and enable tokudb for
  x86_64 architectures for openSUSE and SLE15 [fate#323280]. Don't
  enable it for SLE12 (missing jemalloc dependency)
- add the following BuildRequires:
  * unixODBC-devel to allow ODBC support for Connect engine [bsc#1039034]
  * krb5-devel to build auth_gssapi.so plugin
  * libarchive-devel
  * use libboost_headers-devel instead of boost-devel for TW. Boost
    package has been split up and will migrate to using multibuild.
    This results in packages that unnecessarily build require
    boost-devel to cause major bottlenecks [bsc#1062583]
- do not use "BuildRequires: lzo-devel" for i586 and arm because
  it makes build fail
- add the following Requires:
  * hostname - as mariadb_install_db depends on this tool [bsc#1060110]
  * libaio-devel for libmysqld-devel because libmysqld depends
    on libaio
- tweak build options:
  * remove "DWITH_ASAN=OFF" - this option was added because of mysql
    and it's no longer needed
  * switch from "-DWITH_JEMALLOC=auto" to "-DWITH_JEMALLOC=system"
  * use "DCMAKE_SKIP_INSTALL_RPATH" - this allows to link with -rpath
    during build and fixes quite a few test suite failures. When
    installing the file -rpath is still disabled, so this should
    not have any effect on the installed binaries
  * add "-DWITH_LIBARCHIVE=ON" and "-DWITH_MARIABACKUP=ON"
  * remove -DWITH_BOOST=../boost/ as we use system boost now
- enable OQGRAPH to build (openSUSE only, SLE is missing Judy
  requirement)
- disable Cassandra storage engine build as it's no longer actively
  being developed (See MDEV-4695) [bsc#1055165]
  * Remove "BuildRequires: libthrift-devel" and %{with_cassandra}
    macros that are no longer needed now
- disable make test (Connector/C unit tests) as it requires a
  running server. These tests are part of mysql-test-run
  now (MDEV-12470)
- add suse_skipped_tests.list - the list of the tests that we want
  to skip (they fail correctly or the fix is in progress)
  * adjust mysql-test-run options to skip tests listed there
    [bsc#1041891]
- remove mytop utility that is packaged separately
- remove *.jar files from mysql-test
- remove python scripts remains from tokudb upstream
- remove generating of the MySQL NDB Cluster filelists
- remove removing of manpages for MySQL Carrier Grade Edition
- provide a symlink for the my_safe_process executable that was
  moved from its location to bindir
- update filename in /var/adm/update-messages to match
  documentation and build-compare pattern
- README is now README.md
- fix "file listed twice" build error</changelog>
  <changelog author="vcizek@suse.com" date="1511956800">- Disable openssl compatibility checking
  * the check uses CRYPTO_set_mem_functions() to set debugging
    memory allocation function. The setting only succeeds if no allocation
    was done before. Our fips self-tests, which are run from the library
    constructor, however, do allocate memory, so the subsequent call to
    CRYPTO_set_mem_functions causes the compatibility check to fail
  * add mariadb-10.2.10-disable_openssl_compatibility_check.patch</changelog>
  <changelog author="rhafer@suse.de" date="1511956801">- Added mariadb-10.2.10-wsrep_sst_common.patch (bsc#1069401).
  Upstream bug: https://jira.mariadb.org/browse/MDEV-14256</changelog>
  <changelog author="kstreitova@suse.com" date="1512043200">- update to 10.2.11 GA
  * release notes and changelog:
  * https://mariadb.com/kb/en/library/mariadb-10211-release-notes/
  * https://mariadb.com/kb/en/library/mariadb-10211-changelog/
- pack additional mroonga/groonga files
- change default charset to utf8mb4 for full Unicode support
  [fate#324329]
- remove mariadb-10.2.10-wsrep_sst_common.patch as it's no longer
  needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Do not manually delete
  %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release}-something:
  The file is listed as ghost and thus properly owned by the
  package.
- Use %tmpfiles_create which can cope with transactional updates.</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
  <changelog author="kstreitova@suse.com" date="1532692800">- switch to libedit as control sequences were already fixed there
  so we don't have to avoid it [bsc#1098683]</changelog>
</package>
<package pkgid="e48481cfd6c3d3711e8c985c798928a82cff2572be5193cddfb3c917fe2d2f1c" name="mate-screensaver" arch="src">
  <version epoch="0" ver="1.20.2" rel="lp150.2.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1434110400">- Update to 1.10.1:
  * Check for running display manager when user switching.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1436788800">- Update to 1.10.2:
  * Fix segfault due to wrong object being destroyed.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1444392000">- Update to 1.11.0:
  * Switch to org.gnome.SessionManager.
  * Do not fade to black when locking the screen.
  * manager: fade out explicitly locks more quickly.
  * More improvements.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445428800">- Update to 1.11.1:
  * Fix systemd event handling.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1446724800">- Update to 1.12.0:
  * Retrieve strings directly from gschema (requires intltool
    0.50.1).
  * Add support for libsystemd (in addition to libsystemd-login).
  * Some more fixes and cleanups.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1448280000">- Use authentication directly via PAM.
- Do not require xscreensaver-data but recommend.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1452513600">- Add missing mate-session-manager-gschemas dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1453809600">- Update to version 1.13.0:
  * Gtk3: fix several deprecations.
  * Some more fixes and cleanups.
  * Drop MateConf migration script.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460203200">- Update to version 1.14.0:
  * Update translations.
  * Add Changelog generation.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1463918400">- Update to version 1.14.1:
  * GTK+-3: Fix assertion 'GTK_IS_WIDGET (widget)' failed.
  * GTK+-3: Add style class lock-dialog.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1474372800">- Update to version 1.16.0:
  * Fix locking when screensaver is already active.
  * GTK+3: Fix background and locking in multi-monitor setup.
  * GTK+3: Fix several deprecations.
  * Some more fixes and cleanups.
  * Make distcheck use a currently selected GTK+ version
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1486296000">- Update to version 1.16.1:
  * Fix build breakage with GTK+ 3.14.
  * Fix "Blank screen" theme with GTK+ 3.22.
  * GTK+2: Fix switching to "Blank screen" theme in the full screen
    preview.
  * Properly restore the password dialogue position after a wrong
    password attempt.
  * Check for a gdm-binary process when switching the user.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489492800">- Update to version 1.18.0:
  * NEWS: Use consistent, project wide, markdown-like formatting to
    make generating release announcements easier.
  * Build: Require libmate-menu &gt;= 1.10.
  * Build: Require libmatekbd and libmate-desktop &gt;= 1.17.
  * Move to GTK+3 (require GTK+ &gt;= 3.14), drop the GTK+2 code and
  - -with-gtk build option.
  * Lock screen: Load user's background instead of the system one.
  * Preferences: Fix some GTK+ deprecations.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1492430400">- Update to version 1.18.1:
  * lock-dialog UI: Fix some deprecations.
  * g_get_real_name will never return NULL pointer.
  * screensaver and lock screen not correctly displayed in
    configurations with overlapping monitor geometries.
  * [GTK+3.20] Switch to GdkSeat.
  * Set input purpose for the password entry widget.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510142400">- Update to version 1.18.2:
  * Fix loop initial declarations.
  * Drop required max version of glib.
  * Fix idle slider display in all languages.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 1.20.0:
  * Require GTK+ 3.22 and GLib 2.50.
  * Avoid deprecated gdk_screen_get_width/height().
  * Don't use deprecated gtk_show_uri().
  * Implement OpenBSD authentication using bsd_auth(3).
  * copy theme dialogue: Fix the build warning about a wrong
    variable type.
  * An implementation of WidthOfScreen and HeightOfScreen.
  * Restore the correct mate-screensaver-command man page.
  * Add HiDPI support for the lock screen.
  * gs-lock-plug.c: Fix a build warning.
  * Update translations.
- Add mate-screensaver-gtk-3.20.patch: Restore GLib 2.48 and
  GTK+ 3.20 support.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove buildrequires on xorg-x11-devel, dependencies
  were adjusted according to what configure requests and
  what libraries are used by the final executable.</changelog>
  <changelog author="jengelh@inai.de" date="1521028801">- Remove future aims from description.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1529150400">- Update to version 1.20.1:
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1536408000">- Update to version 1.20.2:
  * Fix more GdkScreen related deprecations (fixes boo#1098985).
  * lock-plug: Only scale lock-screen widgets on older versions of
    GTK+.
  * Update translations.
- Rebase mate-screensaver-gtk-3.20.patch.</changelog>
</package>
<package pkgid="b8549bb6492e630f23288ab3e01ff09775f10360b109cf1bd96997b58aad9c65" name="mate-screensaver" arch="x86_64">
  <version epoch="0" ver="1.20.2" rel="lp150.2.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1434110400">- Update to 1.10.1:
  * Check for running display manager when user switching.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1436788800">- Update to 1.10.2:
  * Fix segfault due to wrong object being destroyed.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1444392000">- Update to 1.11.0:
  * Switch to org.gnome.SessionManager.
  * Do not fade to black when locking the screen.
  * manager: fade out explicitly locks more quickly.
  * More improvements.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445428800">- Update to 1.11.1:
  * Fix systemd event handling.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1446724800">- Update to 1.12.0:
  * Retrieve strings directly from gschema (requires intltool
    0.50.1).
  * Add support for libsystemd (in addition to libsystemd-login).
  * Some more fixes and cleanups.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1448280000">- Use authentication directly via PAM.
- Do not require xscreensaver-data but recommend.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1452513600">- Add missing mate-session-manager-gschemas dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1453809600">- Update to version 1.13.0:
  * Gtk3: fix several deprecations.
  * Some more fixes and cleanups.
  * Drop MateConf migration script.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460203200">- Update to version 1.14.0:
  * Update translations.
  * Add Changelog generation.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1463918400">- Update to version 1.14.1:
  * GTK+-3: Fix assertion 'GTK_IS_WIDGET (widget)' failed.
  * GTK+-3: Add style class lock-dialog.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1474372800">- Update to version 1.16.0:
  * Fix locking when screensaver is already active.
  * GTK+3: Fix background and locking in multi-monitor setup.
  * GTK+3: Fix several deprecations.
  * Some more fixes and cleanups.
  * Make distcheck use a currently selected GTK+ version
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1486296000">- Update to version 1.16.1:
  * Fix build breakage with GTK+ 3.14.
  * Fix "Blank screen" theme with GTK+ 3.22.
  * GTK+2: Fix switching to "Blank screen" theme in the full screen
    preview.
  * Properly restore the password dialogue position after a wrong
    password attempt.
  * Check for a gdm-binary process when switching the user.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489492800">- Update to version 1.18.0:
  * NEWS: Use consistent, project wide, markdown-like formatting to
    make generating release announcements easier.
  * Build: Require libmate-menu &gt;= 1.10.
  * Build: Require libmatekbd and libmate-desktop &gt;= 1.17.
  * Move to GTK+3 (require GTK+ &gt;= 3.14), drop the GTK+2 code and
  - -with-gtk build option.
  * Lock screen: Load user's background instead of the system one.
  * Preferences: Fix some GTK+ deprecations.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1492430400">- Update to version 1.18.1:
  * lock-dialog UI: Fix some deprecations.
  * g_get_real_name will never return NULL pointer.
  * screensaver and lock screen not correctly displayed in
    configurations with overlapping monitor geometries.
  * [GTK+3.20] Switch to GdkSeat.
  * Set input purpose for the password entry widget.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510142400">- Update to version 1.18.2:
  * Fix loop initial declarations.
  * Drop required max version of glib.
  * Fix idle slider display in all languages.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 1.20.0:
  * Require GTK+ 3.22 and GLib 2.50.
  * Avoid deprecated gdk_screen_get_width/height().
  * Don't use deprecated gtk_show_uri().
  * Implement OpenBSD authentication using bsd_auth(3).
  * copy theme dialogue: Fix the build warning about a wrong
    variable type.
  * An implementation of WidthOfScreen and HeightOfScreen.
  * Restore the correct mate-screensaver-command man page.
  * Add HiDPI support for the lock screen.
  * gs-lock-plug.c: Fix a build warning.
  * Update translations.
- Add mate-screensaver-gtk-3.20.patch: Restore GLib 2.48 and
  GTK+ 3.20 support.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove buildrequires on xorg-x11-devel, dependencies
  were adjusted according to what configure requests and
  what libraries are used by the final executable.</changelog>
  <changelog author="jengelh@inai.de" date="1521028801">- Remove future aims from description.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1529150400">- Update to version 1.20.1:
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1536408000">- Update to version 1.20.2:
  * Fix more GdkScreen related deprecations (fixes boo#1098985).
  * lock-plug: Only scale lock-screen widgets on older versions of
    GTK+.
  * Update translations.
- Rebase mate-screensaver-gtk-3.20.patch.</changelog>
</package>
<package pkgid="8f782a0de4f76f36fe292bfa38573785e301470428c3d5f1acfd0bbe1f0e5903" name="mate-screensaver-devel" arch="x86_64">
  <version epoch="0" ver="1.20.2" rel="lp150.2.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1434110400">- Update to 1.10.1:
  * Check for running display manager when user switching.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1436788800">- Update to 1.10.2:
  * Fix segfault due to wrong object being destroyed.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1444392000">- Update to 1.11.0:
  * Switch to org.gnome.SessionManager.
  * Do not fade to black when locking the screen.
  * manager: fade out explicitly locks more quickly.
  * More improvements.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445428800">- Update to 1.11.1:
  * Fix systemd event handling.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1446724800">- Update to 1.12.0:
  * Retrieve strings directly from gschema (requires intltool
    0.50.1).
  * Add support for libsystemd (in addition to libsystemd-login).
  * Some more fixes and cleanups.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1448280000">- Use authentication directly via PAM.
- Do not require xscreensaver-data but recommend.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1452513600">- Add missing mate-session-manager-gschemas dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1453809600">- Update to version 1.13.0:
  * Gtk3: fix several deprecations.
  * Some more fixes and cleanups.
  * Drop MateConf migration script.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460203200">- Update to version 1.14.0:
  * Update translations.
  * Add Changelog generation.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1463918400">- Update to version 1.14.1:
  * GTK+-3: Fix assertion 'GTK_IS_WIDGET (widget)' failed.
  * GTK+-3: Add style class lock-dialog.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1474372800">- Update to version 1.16.0:
  * Fix locking when screensaver is already active.
  * GTK+3: Fix background and locking in multi-monitor setup.
  * GTK+3: Fix several deprecations.
  * Some more fixes and cleanups.
  * Make distcheck use a currently selected GTK+ version
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1486296000">- Update to version 1.16.1:
  * Fix build breakage with GTK+ 3.14.
  * Fix "Blank screen" theme with GTK+ 3.22.
  * GTK+2: Fix switching to "Blank screen" theme in the full screen
    preview.
  * Properly restore the password dialogue position after a wrong
    password attempt.
  * Check for a gdm-binary process when switching the user.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489492800">- Update to version 1.18.0:
  * NEWS: Use consistent, project wide, markdown-like formatting to
    make generating release announcements easier.
  * Build: Require libmate-menu &gt;= 1.10.
  * Build: Require libmatekbd and libmate-desktop &gt;= 1.17.
  * Move to GTK+3 (require GTK+ &gt;= 3.14), drop the GTK+2 code and
  - -with-gtk build option.
  * Lock screen: Load user's background instead of the system one.
  * Preferences: Fix some GTK+ deprecations.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1492430400">- Update to version 1.18.1:
  * lock-dialog UI: Fix some deprecations.
  * g_get_real_name will never return NULL pointer.
  * screensaver and lock screen not correctly displayed in
    configurations with overlapping monitor geometries.
  * [GTK+3.20] Switch to GdkSeat.
  * Set input purpose for the password entry widget.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510142400">- Update to version 1.18.2:
  * Fix loop initial declarations.
  * Drop required max version of glib.
  * Fix idle slider display in all languages.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 1.20.0:
  * Require GTK+ 3.22 and GLib 2.50.
  * Avoid deprecated gdk_screen_get_width/height().
  * Don't use deprecated gtk_show_uri().
  * Implement OpenBSD authentication using bsd_auth(3).
  * copy theme dialogue: Fix the build warning about a wrong
    variable type.
  * An implementation of WidthOfScreen and HeightOfScreen.
  * Restore the correct mate-screensaver-command man page.
  * Add HiDPI support for the lock screen.
  * gs-lock-plug.c: Fix a build warning.
  * Update translations.
- Add mate-screensaver-gtk-3.20.patch: Restore GLib 2.48 and
  GTK+ 3.20 support.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove buildrequires on xorg-x11-devel, dependencies
  were adjusted according to what configure requests and
  what libraries are used by the final executable.</changelog>
  <changelog author="jengelh@inai.de" date="1521028801">- Remove future aims from description.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1529150400">- Update to version 1.20.1:
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1536408000">- Update to version 1.20.2:
  * Fix more GdkScreen related deprecations (fixes boo#1098985).
  * lock-plug: Only scale lock-screen widgets on older versions of
    GTK+.
  * Update translations.
- Rebase mate-screensaver-gtk-3.20.patch.</changelog>
</package>
<package pkgid="4636cac5e2573f0d9391b96cd9a7d3000d1c688a9091ada0f12dc9852b1028cb" name="mate-screensaver-lang" arch="noarch">
  <version epoch="0" ver="1.20.2" rel="lp150.2.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1434110400">- Update to 1.10.1:
  * Check for running display manager when user switching.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1436788800">- Update to 1.10.2:
  * Fix segfault due to wrong object being destroyed.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1444392000">- Update to 1.11.0:
  * Switch to org.gnome.SessionManager.
  * Do not fade to black when locking the screen.
  * manager: fade out explicitly locks more quickly.
  * More improvements.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445428800">- Update to 1.11.1:
  * Fix systemd event handling.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1446724800">- Update to 1.12.0:
  * Retrieve strings directly from gschema (requires intltool
    0.50.1).
  * Add support for libsystemd (in addition to libsystemd-login).
  * Some more fixes and cleanups.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1448280000">- Use authentication directly via PAM.
- Do not require xscreensaver-data but recommend.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1452513600">- Add missing mate-session-manager-gschemas dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1453809600">- Update to version 1.13.0:
  * Gtk3: fix several deprecations.
  * Some more fixes and cleanups.
  * Drop MateConf migration script.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460203200">- Update to version 1.14.0:
  * Update translations.
  * Add Changelog generation.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1463918400">- Update to version 1.14.1:
  * GTK+-3: Fix assertion 'GTK_IS_WIDGET (widget)' failed.
  * GTK+-3: Add style class lock-dialog.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1474372800">- Update to version 1.16.0:
  * Fix locking when screensaver is already active.
  * GTK+3: Fix background and locking in multi-monitor setup.
  * GTK+3: Fix several deprecations.
  * Some more fixes and cleanups.
  * Make distcheck use a currently selected GTK+ version
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1486296000">- Update to version 1.16.1:
  * Fix build breakage with GTK+ 3.14.
  * Fix "Blank screen" theme with GTK+ 3.22.
  * GTK+2: Fix switching to "Blank screen" theme in the full screen
    preview.
  * Properly restore the password dialogue position after a wrong
    password attempt.
  * Check for a gdm-binary process when switching the user.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489492800">- Update to version 1.18.0:
  * NEWS: Use consistent, project wide, markdown-like formatting to
    make generating release announcements easier.
  * Build: Require libmate-menu &gt;= 1.10.
  * Build: Require libmatekbd and libmate-desktop &gt;= 1.17.
  * Move to GTK+3 (require GTK+ &gt;= 3.14), drop the GTK+2 code and
  - -with-gtk build option.
  * Lock screen: Load user's background instead of the system one.
  * Preferences: Fix some GTK+ deprecations.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1492430400">- Update to version 1.18.1:
  * lock-dialog UI: Fix some deprecations.
  * g_get_real_name will never return NULL pointer.
  * screensaver and lock screen not correctly displayed in
    configurations with overlapping monitor geometries.
  * [GTK+3.20] Switch to GdkSeat.
  * Set input purpose for the password entry widget.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510142400">- Update to version 1.18.2:
  * Fix loop initial declarations.
  * Drop required max version of glib.
  * Fix idle slider display in all languages.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 1.20.0:
  * Require GTK+ 3.22 and GLib 2.50.
  * Avoid deprecated gdk_screen_get_width/height().
  * Don't use deprecated gtk_show_uri().
  * Implement OpenBSD authentication using bsd_auth(3).
  * copy theme dialogue: Fix the build warning about a wrong
    variable type.
  * An implementation of WidthOfScreen and HeightOfScreen.
  * Restore the correct mate-screensaver-command man page.
  * Add HiDPI support for the lock screen.
  * gs-lock-plug.c: Fix a build warning.
  * Update translations.
- Add mate-screensaver-gtk-3.20.patch: Restore GLib 2.48 and
  GTK+ 3.20 support.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove buildrequires on xorg-x11-devel, dependencies
  were adjusted according to what configure requests and
  what libraries are used by the final executable.</changelog>
  <changelog author="jengelh@inai.de" date="1521028801">- Remove future aims from description.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1529150400">- Update to version 1.20.1:
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1536408000">- Update to version 1.20.2:
  * Fix more GdkScreen related deprecations (fixes boo#1098985).
  * lock-plug: Only scale lock-screen widgets on older versions of
    GTK+.
  * Update translations.
- Rebase mate-screensaver-gtk-3.20.patch.</changelog>
</package>
<package pkgid="ef3e340a07efd8dc37519a2b1e3ef9a5873a4a3e39dee411709c4d8fc07757a5" name="matrix-synapse" arch="src">
  <version epoch="0" ver="0.28.1" rel="lp150.2.4.1"/>
  <changelog author="okurz@suse.com" date="1497787200">- Initial version of matrix-synapse version 0.19.2</changelog>
  <changelog author="okurz@suse.com" date="1498737600">- Prevent conflicts between python2/3 version of packages</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Do not suppress errors from useradd procedure.
- Trim description to the essence of the package. It is not
  supposed to be a manual or architectural document.
- Remove redundant %clean section. Replace %__-type macro
  indirections.</changelog>
  <changelog author="okurz@suse.com" date="1510660800">- Update to version v0.24.1+4.632baf79:
  * Disallow capital letters in userids
  * Allow = in mxids and groupids
  * Validate group ids when parsing
  * Fix a logcontext leak in the media repo
  * Correctly wire in update group profile over federation
  * replace 'except:' with 'except Exception:'
  * fix vars named `l`
  * Bump version and changelog
  * Add jitter to validity period of attestations
  * Revert "Add jitter to validity period of attestations"</changelog>
  <changelog author="okurz@suse.com" date="1510660801">- Update to version v0.24.1:
  * Bug fixes:
  * Fix updating group profiles over federation (PR #2567)
  * Fix handling SERVFAILs when doing AAAA lookups for federation (PR #2477)
  * Fix incompatibility with newer versions of ujson (PR #2483) Thanks to
    @jeremycline!
  * Fix notification keywords that start/end with non-word chars (PR #2500)
  * Fix stack overflow and logcontexts from linearizer (PR #2532)
  * Fix 500 error when fields missing from power_levels event (PR #2552)
  * Fix 500 error when we get an error handling a PDU (PR #2553)
  * Fix regression in performance of syncs (PR #2470)
  * Fix caching error in the push evaluator (PR #2332)
  * Fix bug where pusherpool didn't start and broke some rooms (PR #2342)
  * Fix port script for user directory tables (PR #2375)
  * Fix device lists notifications when user rejoins a room (PR #2443, #2449)
  * Fix sync to always send down current state events in timeline (PR #2451)
  * Fix bug where guest users were incorrectly kicked (PR #2453)
  * Fix bug talking to IPv6 only servers using SRV records (PR #2462)
  * Fix synapse_port_db failure. Thanks to Pneumaticat! (PR #1904)
  * Fix caching to not cache error responses (PR #1913)
  * Fix APIs to make kick &amp; ban reasons work (PR #1917)
  * Fix bugs in the /keys/changes api (PR #1921)
  * Fix bug where users couldn't forget rooms they were banned from (PR #1922)
  * Fix issue with long language values in pushers API (PR #1925)
  * Fix a race in transaction queue (PR #1930)
  * Fix dynamic thumbnailing to preserve aspect ratio. Thanks to jkolo! (PR
    [#1945])
  * Fix device list update to not constantly resync (PR #1964)
  * Fix potential for huge memory usage when getting device that have
    changed (PR #1969)
  * Fix bug where pusher pool didn't start and caused issues when
    interacting with some rooms (PR #2342)
  * Fix bug with storing registration sessions that caused frequent CPU churn
    (PR #2319)
  * Fix users not getting notifications when AS listened to that user_id (PR
    [#2216]) Thanks to @slipeer!
  * Fix users without push set up not getting notifications after joining rooms
    (PR #2236)
  * Fix preview url API to trim long descriptions (PR #2243)
  * Fix bug where we used cached but unpersisted state group as prev group,
    resulting in broken state of restart (PR #2263)
  * Fix removing of pushers when using workers (PR #2267)
  * Fix CORS headers to allow Authorization header (PR #2285) Thanks to @krombel!
  * Fix bug in anonymous usage statistic reporting (PR #2281)
  * Fix API to allow clients to upload one-time-keys with new sigs (PR #2206)
  * Fix bug where users got pushed for rooms they had muted (PR #2200)
  * Fix nuke-room script to work with current schema (PR #1927) Thanks
    @zuckschwerdt!
  * Fix db port script to not assume postgres tables are in the public schema
    (PR #2024) Thanks @jerrykan!
  * Fix getting latest device IP for user with no devices (PR #2118)
  * Fix rejection of invites to unreachable servers (PR #2145)
  * Fix code for reporting old verify keys in synapse (PR #2156)
  * Fix invite state to always include all events (PR #2163)
  * Fix bug where synapse would always fetch state for any missing event (PR #2170)
  * Fix a leak with timed out HTTP connections (PR #2180)
  * Fix bug where we didn't time out HTTP requests to ASes  (PR #2192)
  * Fix joining rooms over federation where not all servers in the room saw the
    new server had joined (PR #2094)
  * Fix bug where current_state_events renamed to current_state_ids (PR #1849)
  * Fix routing loop when fetching remote media (PR #1992)
  * Fix current_state_events table to not lie (PR #1996)
  * Fix CAS login to handle PartialDownloadError (PR #1997)
  * Fix assertion to stop transaction queue getting wedged (PR #2010)
  * Fix presence to fallback to last_active_ts if it beats the last sync time.
    Thanks @Half-Shot! (PR #2014)
  * Fix bug when federation received a PDU while a room join is in progress (PR
    [#2016])
  * Fix resetting state on rejected events (PR #2025)
  * Fix installation issues in readme. Thanks @ricco386 (PR #2037)
  * Fix caching of remote servers' signature keys (PR #2042)
  * Fix some leaking log context (PR #2048, #2049, #2057, #2058)
  * Fix rejection of invites not reaching sync (PR #2056)
  * Fix bug in handling of incoming device list updates over federation.
  * Features:
  * Add Group Server (PR #2352, #2363, #2374, #2377, #2378, #2382, #2410, #2426,
    [#2430], #2454, #2471, #2472, #2544)
  * Add support for channel notifications (PR #2501)
  * Add basic implementation of backup media store (PR #2538)
  * Add config option to auto-join new users to rooms (PR #2545)
  * Add a frontend proxy worker (PR #2344)
  * Add support for event_id_only push format (PR #2450)
  * Add a PoC for filtering spammy events (PR #2456)
  * Add a config option to block all room invites (PR #2457)
  * Add a user directory API (PR #2252, and many more)
  * Add shutdown room API to remove room from local server (PR #2291)
  * Add API to quarantine media (PR #2292)
  * Add new config option to not send event contents to push servers (PR #2301)
    Thanks to @cjdelisle!
  * Add per user rate-limiting overrides (PR #2208)
  * Add config option to limit maximum number of events requested by ``/sync``
    and ``/messages`` (PR #2221) Thanks to @psaavedra!
  * Add username availability checker API (PR #2183)
  * Add read marker API (PR #2120)
  * Add delete_devices API (PR #1993)
  * Add phone number registration/login support (PR #1994, #2055)
  * Add some administration functionalities. Thanks to morteza-araby! (PR #1784)
  * Changes:
  * Make the spam checker a module (PR #2474)
  * Delete expired url cache data (PR #2478)
  * Ignore incoming events for rooms that we have left (PR #2490)
  * Allow spam checker to reject invites too (PR #2492)
  * Add room creation checks to spam checker (PR #2495)
  * Spam checking: add the invitee to user_may_invite (PR #2502)
  * Process events from federation for different rooms in parallel (PR #2520)
  * Allow error strings from spam checker (PR #2531)
  * Improve error handling for missing files in config (PR #2551)
  * Make 'affinity' package optional, as it is not supported on some platforms
  * Use bcrypt module instead of py-bcrypt (PR #2288) Thanks to @kyrias!
  * Improve performance of generating push notifications (PR #2343, #2357, #2365,
    [#2366], #2371)
  * Improve DB performance for device list handling in sync (PR #2362)
  * Include a sample prometheus config (PR #2416)
  * Document known to work postgres version (PR #2433) Thanks to @ptman!
  * Improve performance of storing user IPs (PR #2307, #2308)
  * Slightly improve performance of verifying access tokens (PR #2320)
  * Slightly improve performance of event persistence (PR #2321)
  * Increase default cache factor size from 0.1 to 0.5 (PR #2330)
  * Various performance fixes (PR #2177, #2233, #2230, #2238, #2248, #2256,
    [#2274])
  * Deduplicate sync filters (PR #2219) Thanks to @krombel!
  * Correct a typo in UPGRADE.rst (PR #2231) Thanks to @aaronraimist!
  * Add count of one time keys to sync stream (PR #2237)
  * Only store event_auth for state events (PR #2247)
  * Store URL cache preview downloads separately (PR #2299)
  * Various small performance fixes (PR #2201, #2202, #2224, #2226, #2227, #2228,
    [#2229])
  * Update username availability checker API (PR #2209, #2213)
  * When purging, don't de-delta state groups we're about to delete (PR #2214)
  * Documentation to check synapse version (PR #2215) Thanks to @hamber-dick!
  * Add an index to event_search to speed up purge history API (PR #2218)
  * Always mark remotes as up if we receive a signed request from them (PR #2190)
  * Enable guest access for the 3pl/3pid APIs (PR #1986)
  * Add setting to support TURN for guests (PR #2011)
  * Various performance improvements (PR #2075, #2076, #2080, #2083, #2108,
    [#2158], #2176, #2185)
  * Make synctl a bit more user friendly (PR #2078, #2127) Thanks @APwhitehat!
  * Replace HTTP replication with TCP replication (PR #2082, #2097, #2098,
    [#2099], #2103, #2014, #2016, #2115, #2116, #2117)
  * Support authenticated SMTP (PR #2102) Thanks @DanielDent!
  * Add a counter metric for successfully-sent transactions (PR #2121)
  * Propagate errors sensibly from proxied IS requests (PR #2147)
  * Add more granular event send metrics (PR #2178)
  * Use JSONSchema for validation of filters. Thanks @pik! (PR #1783)
  * Reread log config on SIGHUP (PR #1982)
  * Speed up public room list (PR #1989)
  * Add helpful texts to logger config options (PR #1990)
  * Minor ``/sync`` performance improvements. (PR #2002, #2013, #2022)
  * Add some debug to help diagnose weird federation issue (PR #2035)
  * Correctly limit retries for all federation requests (PR #2050, #2061)
  * Don't lock table when persisting new one time keys (PR #2053)
  * Reduce some CPU work on DB threads (PR #2054)
  * Cache hosts in room (PR #2060)
  * Batch sending of device list pokes (PR #2063)
  * Speed up persist event path in certain edge cases (PR #2070)
  * Reduce database table sizes (PR #1873, #1916, #1923, #1963)
  * Update contrib/ to not use syutil. Thanks to andrewshadura! (PR #1907)
  * Don't fetch current state when sending an event in common case (PR #1955)</changelog>
  <changelog author="okurz@suse.com" date="1511179200">- Update to version v0.25.1:
  * Bug fixes:
  * Fix login with LDAP and other password provider modules (PR #2678). Thanks to @jkolo!
  * Fix port script (PR #2673)
  * Fix port script (PR #2577)
  * Fix error when running synapse with no logfile (PR #2581)
  * Fix UI auth when deleting devices (PR #2591)
  * Fix typo when checking if user is invited to group (PR #2599)
  * Fix the port script to drop NUL values in all tables (PR #2611)
  * Fix appservices being backlogged and not receiving new events due to a bug in
    notify_interested_services (PR #2631) Thanks to @xyzz!
  * Fix updating rooms avatar/display name when modified by admin (PR #2636)
  * Thanks to @farialima!
  * Fix bug in state group storage (PR #2649)
  * Fix 500 on invalid utf-8 in request (PR #2663)
  * Features:
  * Add is_public to groups table to allow for private groups (PR #2582)
  * Add a route for determining who you are (PR #2668) Thanks to @turt2live!
  * Add more features to the password providers (PR #2608, #2610, #2620,
    [#2622], #2623, #2624, #2626, #2628, #2629)
  * Add a hook for custom rest endpoints (PR #2627)
  * Add API to update group room visibility (PR #2651)
  * Changes:
  * Ignore tags when generating URL preview descriptions (PR #2576) Thanks to
    @maximevaillancourt!
  * Register some /unstable endpoints in /r0 as well (PR #2579) Thanks to @krombel!
  * Support /keys/upload on /r0 as well as /unstable (PR #2585)
  * Front-end proxy: pass through auth header (PR #2586)
  * Allow ASes to deactivate their own users (PR #2589)
  * Remove refresh tokens (PR #2613)
  * Automatically set default displayname on register (PR #2617)
  * Log login requests (PR #2618)
  * Always return is_public in the /groups/:group_id/rooms API (PR #2630)
  * Avoid no-op media deletes (PR #2637) Thanks to @spantaleev!
  * Fix various embarrassing typos around user_directory and add some doc. (PR #2643)
  * Return whether a user is an admin within a group (PR #2647)
  * Namespace visibility options for groups (PR #2657)
  * Downcase UserIDs on registration (PR #2662)
  * Cache failures when fetching URL previews (PR #2669)
  * Add patch synapse_python_dependencies_allow_higher_versions_of_pysaml2.patch</changelog>
  <changelog author="okurz@suse.com" date="1515326400">- Update to version v0.26.0:
  * Bug fixes:
  * Fix database port script (PR #2673)
  * Fix internal server error on login with ldap_auth_provider (PR #2678) Thanks
    to @jkolo!
  * Fix error on sqlite 3.7 (PR #2697)
  * Fix OPTIONS on preview_url (PR #2707)
  * Fix error handling on dns lookup (PR #2711)
  * Fix wrong avatars when inviting multiple users when creating room (PR #2717)
  * Fix 500 when joining matrix-dev (PR #2719)
  * Features:
  * Add ability for ASes to publicise groups for their users (PR #2686)
  * Add all local users to the user_directory and optionally search them (PR
  * #2723)
  * Add support for custom login types for validating users (PR #2729)
  * Changes:
  * Update example Prometheus config to new format (PR #2648) Thanks to
    @krombel!
  * Rename redact_content option to include_content in Push API (PR #2650)
  * Declare support for r0.3.0 (PR #2677)
  * Improve upserts (PR #2684, #2688, #2689, #2713)
  * Improve documentation of workers (PR #2700)
  * Improve tracebacks on exceptions (PR #2705)
  * Allow guest access to group APIs for reading (PR #2715)
  * Support for posting content in federation_client script (PR #2716)
  * Delete devices and pushers on logouts etc (PR #2722)</changelog>
  <changelog author="okurz@suse.com" date="1522324800">- Update to version v0.27.2:
  * Bug fixes:
  * Fix bug which broke TCP replication between workers (PR #3015)
  * Fix broken ldap_config config option (PR #2683) Thanks to @seckrv!
  * Fix error message when user is not allowed to unban (PR #2761) Thanks to
    @turt2live!
  * Fix publicised groups GET API (singular) over federation (PR #2772)
  * Fix user directory when using user_directory_search_all_users config
    option (PR #2803, #2831)
  * Fix error on /publicRooms when no rooms exist (PR #2827)
  * Fix bug in quarantine_media (PR #2837)
  * Fix url_previews when no Content-Type is returned from URL (PR #2845)
  * Fix rare race in sync API when joining room (PR #2944)
  * Fix slow event search, switch back from GIST to GIN indexes (PR #2769,
    [#2848])
  * Fix bug where an invalid event caused server to stop functioning
    correctly, due to parsing and serializing bugs in ujson library.
  * Features:
  * Add ability for ASes to override message send time (PR #2754)
  * Add support for custom storage providers for media repository (PR #2867,
    [#2777], #2783, #2789, #2791, #2804, #2812, #2814, #2857, #2868, #2767)
  * Add purge API features, see docs/admin_api/purge_history_api.rst for
    full details (PR #2858, #2867, #2882, #2946, #2962, #2943)
  * Add support for whitelisting 3PIDs that users can register. (PR #2813)
  * Add /room/{id}/event/{id} API (PR #2766)
  * Add an admin API to get all the media in a room (PR #2818) Thanks to
    @turt2live!
  * Add federation_domain_whitelist option (PR #2820, #2821)
  * Changes:
  * Continue to factor out processing from main process and into worker
    processes. See updated docs/workers.rst (PR #2892 - #2904, #2913, #2920
  - #2926, #2947, #2847, #2854, #2872, #2873, #2874, #2928, #2929, #2934,
    [#2856], #2976 - #2984, #2987 - #2989, #2991 - #2993, #2995, #2784)
  * Ensure state cache is used when persisting events (PR #2864, #2871,
    [#2802], #2835, #2836, #2841, #2842, #2849)
  * Change the default config to bind on both IPv4 and IPv6 on all platforms
    (PR #2435) Thanks to @silkeh!
  * No longer require a specific version of saml2 (PR #2695) Thanks to @okurz!
  * Remove verbosity/log_file from generated config (PR #2755)
  * Add and improve metrics and logging (PR #2770, #2778, #2785, #2786,
    [#2787], #2793, #2794, #2795, #2809, #2810, #2833, #2834, #2844, #2965,
    [#2927], #2975, #2790, #2796, #2838)
  * When using synctl with workers, don't start the main synapse
    automatically (PR #2774)
  * Minor performance improvements (PR #2773, #2792)
  * Use a connection pool for non-federation outbound connections (PR #2817)
  * Make it possible to run unit tests against postgres (PR #2829)
  * Update pynacl dependency to 1.2.1 or higher (PR #2888) Thanks to @bachp!
  * Remove ability for AS users to call /events and /sync (PR #2948)
  * Use bcrypt.checkpw (PR #2949) Thanks to @krombel!
- Change spec-file to use service downloaded and recompressed file directly
- Remove patch synapse_python_dependencies_allow_higher_versions_of_pysaml2.patch
  now included in upstream changes</changelog>
  <changelog author="okurz@suse.com" date="1523880000">- Update to version v0.27.4:
  * Bug fixes:
  * URL quote path segments over federation (#3082)
  * Add room_id to the response of rooms/{roomId}/join (PR #2986) Thanks to @jplatte!
  * Fix replication after switch to simplejson (PR #3015)
  * Fix replication after switch to simplejson (PR #3015)
  * 404 correctly on missing paths via NoResource (PR #3022)
  * Fix error when claiming e2e keys from offline servers (PR #3034)
  * fix tests/storage/test_user_directory.py (PR #3042)
  * use PUT instead of POST for federating groups/m.join_policy (PR #3070) Thanks to @krombel!
  * postgres port script: fix state_groups_pkey error (PR #3072)
  * Features:
  * Add joinability for groups (PR #3045)
  * Implement group join API (PR #3046)
  * Add counter metrics for calculating state delta (PR #3033)
  * R30 stats (PR #3041)
  * Measure time it takes to calculate state group ID (PR #3043)
  * Add basic performance statistics to phone home (PR #3044)
  * Add response size metrics (PR #3071)
  * phone home cache size configurations (PR #3063)
  * Changes:
  * Update canonicaljson dependency (#3095)
  * Add a blurb explaining the main synapse worker (PR #2886) Thanks to @turt2live!
  * Replace old style error catching with 'as' keyword (PR #3000) Thanks to @NotAFile!
  * Use .iter* to avoid copies in StateHandler (PR #3006)
  * Linearize calls to _generate_user_id (PR #3029)
  * Remove last usage of ujson (PR #3030)
  * Use simplejson throughout (PR #3048)
  * Use static JSONEncoders (PR #3049)
  * Remove uses of events.content (PR #3060)
  * Improve database cache performance (PR #3068)</changelog>
  <changelog author="okurz@suse.com" date="1524225600">- Introduce package self-test based on _multibuild</changelog>
  <changelog author="okurz@suse.com" date="1524830400">- Disable web-client for package self-test to get rid of unfulfilled dependency</changelog>
  <changelog author="okurz@suse.com" date="1525435200">- Update to version v0.28.1:
  * SECURITY UPDATE
    Clamp the allowed values of event depth received over federation to be
    [0, 2^63 - 1]. This mitigates an attack where malicious events
    injected with depth = 2^63 - 1 render rooms unusable. Depth is used to
    determine the cosmetic ordering of events within a room, and so the ordering
    of events in such a room will default to using stream_ordering rather than depth
    (topological_ordering).
    This is a temporary solution to mitigate abuse in the wild, whilst a long term solution
    is being implemented to improve how the depth parameter is used.
    Full details at
    https://docs.google.com/document/d/1I3fi2S-XnpO45qrpCsowZv8P8dHcNZ4fsBsbOW7KABI/edit#
    Pin Twisted to &lt;18.4 until we stop using the private _OpenSSLECCurve API.
  * Bug Fixes:
  * Return 401 for invalid access_token on logout (PR #2938) Thanks to @dklug!
  * Return a 404 rather than a 500 on rejoining empty rooms (PR #3080)
  * fix federation_domain_whitelist (PR #3099)
  * Avoid creating events with huge numbers of prev_events (PR #3113)
  * Reject events which have lots of prev_events (PR #3118)
  * Fix quarantine media admin API and search reindex (PR #3130)
  * Fix media admin APIs (PR #3134)
  * Features:
  * Add metrics for event processing lag (PR #3090)
  * Add metrics for ResponseCache (PR #3092)
  * Changes:
  * Synapse on PyPy (PR #2760) Thanks to @Valodim!
  * move handling of auto_join_rooms to RegisterHandler (PR #2996) Thanks to @krombel!
  * Improve handling of SRV records for federation connections (PR #3016) Thanks to @silkeh!
  * Document the behaviour of ResponseCache (PR #3059)
  * Preparation for py3 (PR #3061, #3073, #3074, #3075, #3103, #3104, #3106, #3107, #3109, #3110) Thanks to @NotAFile!
  * update prometheus dashboard to use new metric names (PR #3069) Thanks to @krombel!
  * use python3-compatible prints (PR #3074) Thanks to @NotAFile!
  * Send federation events concurrently (PR #3078)
  * Limit concurrent event sends for a room (PR #3079)
  * Improve R30 stat definition (PR #3086)
  * Send events to ASes concurrently (PR #3088)
  * Refactor ResponseCache usage (PR #3093)
  * Clarify that SRV may not point to a CNAME (PR #3100) Thanks to @silkeh!
  * Use str(e) instead of e.message (PR #3103) Thanks to @NotAFile!
  * Use six.itervalues in some places (PR #3106) Thanks to @NotAFile!
  * Refactor store.have_events (PR #3117)</changelog>
  <changelog author="okurz@suse.com" date="1528891200">- Fix security bug in the get_missing_events federation AP
  (CVE-2018-12291, boo#1096833)
- Add boo1096833_event_visibility_rules_not_applied_correctly.patch</changelog>
</package>
<package pkgid="a206cf1a197c796f4a080f05d981c837d4c13266fcd925f07cb1f704ff0f719c" name="matrix-synapse-test" arch="src">
  <version epoch="0" ver="0.28.1" rel="lp150.2.4.1"/>
  <changelog author="okurz@suse.com" date="1497787200">- Initial version of matrix-synapse version 0.19.2</changelog>
  <changelog author="okurz@suse.com" date="1498737600">- Prevent conflicts between python2/3 version of packages</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Do not suppress errors from useradd procedure.
- Trim description to the essence of the package. It is not
  supposed to be a manual or architectural document.
- Remove redundant %clean section. Replace %__-type macro
  indirections.</changelog>
  <changelog author="okurz@suse.com" date="1510660800">- Update to version v0.24.1+4.632baf79:
  * Disallow capital letters in userids
  * Allow = in mxids and groupids
  * Validate group ids when parsing
  * Fix a logcontext leak in the media repo
  * Correctly wire in update group profile over federation
  * replace 'except:' with 'except Exception:'
  * fix vars named `l`
  * Bump version and changelog
  * Add jitter to validity period of attestations
  * Revert "Add jitter to validity period of attestations"</changelog>
  <changelog author="okurz@suse.com" date="1510660801">- Update to version v0.24.1:
  * Bug fixes:
  * Fix updating group profiles over federation (PR #2567)
  * Fix handling SERVFAILs when doing AAAA lookups for federation (PR #2477)
  * Fix incompatibility with newer versions of ujson (PR #2483) Thanks to
    @jeremycline!
  * Fix notification keywords that start/end with non-word chars (PR #2500)
  * Fix stack overflow and logcontexts from linearizer (PR #2532)
  * Fix 500 error when fields missing from power_levels event (PR #2552)
  * Fix 500 error when we get an error handling a PDU (PR #2553)
  * Fix regression in performance of syncs (PR #2470)
  * Fix caching error in the push evaluator (PR #2332)
  * Fix bug where pusherpool didn't start and broke some rooms (PR #2342)
  * Fix port script for user directory tables (PR #2375)
  * Fix device lists notifications when user rejoins a room (PR #2443, #2449)
  * Fix sync to always send down current state events in timeline (PR #2451)
  * Fix bug where guest users were incorrectly kicked (PR #2453)
  * Fix bug talking to IPv6 only servers using SRV records (PR #2462)
  * Fix synapse_port_db failure. Thanks to Pneumaticat! (PR #1904)
  * Fix caching to not cache error responses (PR #1913)
  * Fix APIs to make kick &amp; ban reasons work (PR #1917)
  * Fix bugs in the /keys/changes api (PR #1921)
  * Fix bug where users couldn't forget rooms they were banned from (PR #1922)
  * Fix issue with long language values in pushers API (PR #1925)
  * Fix a race in transaction queue (PR #1930)
  * Fix dynamic thumbnailing to preserve aspect ratio. Thanks to jkolo! (PR
    [#1945])
  * Fix device list update to not constantly resync (PR #1964)
  * Fix potential for huge memory usage when getting device that have
    changed (PR #1969)
  * Fix bug where pusher pool didn't start and caused issues when
    interacting with some rooms (PR #2342)
  * Fix bug with storing registration sessions that caused frequent CPU churn
    (PR #2319)
  * Fix users not getting notifications when AS listened to that user_id (PR
    [#2216]) Thanks to @slipeer!
  * Fix users without push set up not getting notifications after joining rooms
    (PR #2236)
  * Fix preview url API to trim long descriptions (PR #2243)
  * Fix bug where we used cached but unpersisted state group as prev group,
    resulting in broken state of restart (PR #2263)
  * Fix removing of pushers when using workers (PR #2267)
  * Fix CORS headers to allow Authorization header (PR #2285) Thanks to @krombel!
  * Fix bug in anonymous usage statistic reporting (PR #2281)
  * Fix API to allow clients to upload one-time-keys with new sigs (PR #2206)
  * Fix bug where users got pushed for rooms they had muted (PR #2200)
  * Fix nuke-room script to work with current schema (PR #1927) Thanks
    @zuckschwerdt!
  * Fix db port script to not assume postgres tables are in the public schema
    (PR #2024) Thanks @jerrykan!
  * Fix getting latest device IP for user with no devices (PR #2118)
  * Fix rejection of invites to unreachable servers (PR #2145)
  * Fix code for reporting old verify keys in synapse (PR #2156)
  * Fix invite state to always include all events (PR #2163)
  * Fix bug where synapse would always fetch state for any missing event (PR #2170)
  * Fix a leak with timed out HTTP connections (PR #2180)
  * Fix bug where we didn't time out HTTP requests to ASes  (PR #2192)
  * Fix joining rooms over federation where not all servers in the room saw the
    new server had joined (PR #2094)
  * Fix bug where current_state_events renamed to current_state_ids (PR #1849)
  * Fix routing loop when fetching remote media (PR #1992)
  * Fix current_state_events table to not lie (PR #1996)
  * Fix CAS login to handle PartialDownloadError (PR #1997)
  * Fix assertion to stop transaction queue getting wedged (PR #2010)
  * Fix presence to fallback to last_active_ts if it beats the last sync time.
    Thanks @Half-Shot! (PR #2014)
  * Fix bug when federation received a PDU while a room join is in progress (PR
    [#2016])
  * Fix resetting state on rejected events (PR #2025)
  * Fix installation issues in readme. Thanks @ricco386 (PR #2037)
  * Fix caching of remote servers' signature keys (PR #2042)
  * Fix some leaking log context (PR #2048, #2049, #2057, #2058)
  * Fix rejection of invites not reaching sync (PR #2056)
  * Fix bug in handling of incoming device list updates over federation.
  * Features:
  * Add Group Server (PR #2352, #2363, #2374, #2377, #2378, #2382, #2410, #2426,
    [#2430], #2454, #2471, #2472, #2544)
  * Add support for channel notifications (PR #2501)
  * Add basic implementation of backup media store (PR #2538)
  * Add config option to auto-join new users to rooms (PR #2545)
  * Add a frontend proxy worker (PR #2344)
  * Add support for event_id_only push format (PR #2450)
  * Add a PoC for filtering spammy events (PR #2456)
  * Add a config option to block all room invites (PR #2457)
  * Add a user directory API (PR #2252, and many more)
  * Add shutdown room API to remove room from local server (PR #2291)
  * Add API to quarantine media (PR #2292)
  * Add new config option to not send event contents to push servers (PR #2301)
    Thanks to @cjdelisle!
  * Add per user rate-limiting overrides (PR #2208)
  * Add config option to limit maximum number of events requested by ``/sync``
    and ``/messages`` (PR #2221) Thanks to @psaavedra!
  * Add username availability checker API (PR #2183)
  * Add read marker API (PR #2120)
  * Add delete_devices API (PR #1993)
  * Add phone number registration/login support (PR #1994, #2055)
  * Add some administration functionalities. Thanks to morteza-araby! (PR #1784)
  * Changes:
  * Make the spam checker a module (PR #2474)
  * Delete expired url cache data (PR #2478)
  * Ignore incoming events for rooms that we have left (PR #2490)
  * Allow spam checker to reject invites too (PR #2492)
  * Add room creation checks to spam checker (PR #2495)
  * Spam checking: add the invitee to user_may_invite (PR #2502)
  * Process events from federation for different rooms in parallel (PR #2520)
  * Allow error strings from spam checker (PR #2531)
  * Improve error handling for missing files in config (PR #2551)
  * Make 'affinity' package optional, as it is not supported on some platforms
  * Use bcrypt module instead of py-bcrypt (PR #2288) Thanks to @kyrias!
  * Improve performance of generating push notifications (PR #2343, #2357, #2365,
    [#2366], #2371)
  * Improve DB performance for device list handling in sync (PR #2362)
  * Include a sample prometheus config (PR #2416)
  * Document known to work postgres version (PR #2433) Thanks to @ptman!
  * Improve performance of storing user IPs (PR #2307, #2308)
  * Slightly improve performance of verifying access tokens (PR #2320)
  * Slightly improve performance of event persistence (PR #2321)
  * Increase default cache factor size from 0.1 to 0.5 (PR #2330)
  * Various performance fixes (PR #2177, #2233, #2230, #2238, #2248, #2256,
    [#2274])
  * Deduplicate sync filters (PR #2219) Thanks to @krombel!
  * Correct a typo in UPGRADE.rst (PR #2231) Thanks to @aaronraimist!
  * Add count of one time keys to sync stream (PR #2237)
  * Only store event_auth for state events (PR #2247)
  * Store URL cache preview downloads separately (PR #2299)
  * Various small performance fixes (PR #2201, #2202, #2224, #2226, #2227, #2228,
    [#2229])
  * Update username availability checker API (PR #2209, #2213)
  * When purging, don't de-delta state groups we're about to delete (PR #2214)
  * Documentation to check synapse version (PR #2215) Thanks to @hamber-dick!
  * Add an index to event_search to speed up purge history API (PR #2218)
  * Always mark remotes as up if we receive a signed request from them (PR #2190)
  * Enable guest access for the 3pl/3pid APIs (PR #1986)
  * Add setting to support TURN for guests (PR #2011)
  * Various performance improvements (PR #2075, #2076, #2080, #2083, #2108,
    [#2158], #2176, #2185)
  * Make synctl a bit more user friendly (PR #2078, #2127) Thanks @APwhitehat!
  * Replace HTTP replication with TCP replication (PR #2082, #2097, #2098,
    [#2099], #2103, #2014, #2016, #2115, #2116, #2117)
  * Support authenticated SMTP (PR #2102) Thanks @DanielDent!
  * Add a counter metric for successfully-sent transactions (PR #2121)
  * Propagate errors sensibly from proxied IS requests (PR #2147)
  * Add more granular event send metrics (PR #2178)
  * Use JSONSchema for validation of filters. Thanks @pik! (PR #1783)
  * Reread log config on SIGHUP (PR #1982)
  * Speed up public room list (PR #1989)
  * Add helpful texts to logger config options (PR #1990)
  * Minor ``/sync`` performance improvements. (PR #2002, #2013, #2022)
  * Add some debug to help diagnose weird federation issue (PR #2035)
  * Correctly limit retries for all federation requests (PR #2050, #2061)
  * Don't lock table when persisting new one time keys (PR #2053)
  * Reduce some CPU work on DB threads (PR #2054)
  * Cache hosts in room (PR #2060)
  * Batch sending of device list pokes (PR #2063)
  * Speed up persist event path in certain edge cases (PR #2070)
  * Reduce database table sizes (PR #1873, #1916, #1923, #1963)
  * Update contrib/ to not use syutil. Thanks to andrewshadura! (PR #1907)
  * Don't fetch current state when sending an event in common case (PR #1955)</changelog>
  <changelog author="okurz@suse.com" date="1511179200">- Update to version v0.25.1:
  * Bug fixes:
  * Fix login with LDAP and other password provider modules (PR #2678). Thanks to @jkolo!
  * Fix port script (PR #2673)
  * Fix port script (PR #2577)
  * Fix error when running synapse with no logfile (PR #2581)
  * Fix UI auth when deleting devices (PR #2591)
  * Fix typo when checking if user is invited to group (PR #2599)
  * Fix the port script to drop NUL values in all tables (PR #2611)
  * Fix appservices being backlogged and not receiving new events due to a bug in
    notify_interested_services (PR #2631) Thanks to @xyzz!
  * Fix updating rooms avatar/display name when modified by admin (PR #2636)
  * Thanks to @farialima!
  * Fix bug in state group storage (PR #2649)
  * Fix 500 on invalid utf-8 in request (PR #2663)
  * Features:
  * Add is_public to groups table to allow for private groups (PR #2582)
  * Add a route for determining who you are (PR #2668) Thanks to @turt2live!
  * Add more features to the password providers (PR #2608, #2610, #2620,
    [#2622], #2623, #2624, #2626, #2628, #2629)
  * Add a hook for custom rest endpoints (PR #2627)
  * Add API to update group room visibility (PR #2651)
  * Changes:
  * Ignore tags when generating URL preview descriptions (PR #2576) Thanks to
    @maximevaillancourt!
  * Register some /unstable endpoints in /r0 as well (PR #2579) Thanks to @krombel!
  * Support /keys/upload on /r0 as well as /unstable (PR #2585)
  * Front-end proxy: pass through auth header (PR #2586)
  * Allow ASes to deactivate their own users (PR #2589)
  * Remove refresh tokens (PR #2613)
  * Automatically set default displayname on register (PR #2617)
  * Log login requests (PR #2618)
  * Always return is_public in the /groups/:group_id/rooms API (PR #2630)
  * Avoid no-op media deletes (PR #2637) Thanks to @spantaleev!
  * Fix various embarrassing typos around user_directory and add some doc. (PR #2643)
  * Return whether a user is an admin within a group (PR #2647)
  * Namespace visibility options for groups (PR #2657)
  * Downcase UserIDs on registration (PR #2662)
  * Cache failures when fetching URL previews (PR #2669)
  * Add patch synapse_python_dependencies_allow_higher_versions_of_pysaml2.patch</changelog>
  <changelog author="okurz@suse.com" date="1515326400">- Update to version v0.26.0:
  * Bug fixes:
  * Fix database port script (PR #2673)
  * Fix internal server error on login with ldap_auth_provider (PR #2678) Thanks
    to @jkolo!
  * Fix error on sqlite 3.7 (PR #2697)
  * Fix OPTIONS on preview_url (PR #2707)
  * Fix error handling on dns lookup (PR #2711)
  * Fix wrong avatars when inviting multiple users when creating room (PR #2717)
  * Fix 500 when joining matrix-dev (PR #2719)
  * Features:
  * Add ability for ASes to publicise groups for their users (PR #2686)
  * Add all local users to the user_directory and optionally search them (PR
  * #2723)
  * Add support for custom login types for validating users (PR #2729)
  * Changes:
  * Update example Prometheus config to new format (PR #2648) Thanks to
    @krombel!
  * Rename redact_content option to include_content in Push API (PR #2650)
  * Declare support for r0.3.0 (PR #2677)
  * Improve upserts (PR #2684, #2688, #2689, #2713)
  * Improve documentation of workers (PR #2700)
  * Improve tracebacks on exceptions (PR #2705)
  * Allow guest access to group APIs for reading (PR #2715)
  * Support for posting content in federation_client script (PR #2716)
  * Delete devices and pushers on logouts etc (PR #2722)</changelog>
  <changelog author="okurz@suse.com" date="1522324800">- Update to version v0.27.2:
  * Bug fixes:
  * Fix bug which broke TCP replication between workers (PR #3015)
  * Fix broken ldap_config config option (PR #2683) Thanks to @seckrv!
  * Fix error message when user is not allowed to unban (PR #2761) Thanks to
    @turt2live!
  * Fix publicised groups GET API (singular) over federation (PR #2772)
  * Fix user directory when using user_directory_search_all_users config
    option (PR #2803, #2831)
  * Fix error on /publicRooms when no rooms exist (PR #2827)
  * Fix bug in quarantine_media (PR #2837)
  * Fix url_previews when no Content-Type is returned from URL (PR #2845)
  * Fix rare race in sync API when joining room (PR #2944)
  * Fix slow event search, switch back from GIST to GIN indexes (PR #2769,
    [#2848])
  * Fix bug where an invalid event caused server to stop functioning
    correctly, due to parsing and serializing bugs in ujson library.
  * Features:
  * Add ability for ASes to override message send time (PR #2754)
  * Add support for custom storage providers for media repository (PR #2867,
    [#2777], #2783, #2789, #2791, #2804, #2812, #2814, #2857, #2868, #2767)
  * Add purge API features, see docs/admin_api/purge_history_api.rst for
    full details (PR #2858, #2867, #2882, #2946, #2962, #2943)
  * Add support for whitelisting 3PIDs that users can register. (PR #2813)
  * Add /room/{id}/event/{id} API (PR #2766)
  * Add an admin API to get all the media in a room (PR #2818) Thanks to
    @turt2live!
  * Add federation_domain_whitelist option (PR #2820, #2821)
  * Changes:
  * Continue to factor out processing from main process and into worker
    processes. See updated docs/workers.rst (PR #2892 - #2904, #2913, #2920
  - #2926, #2947, #2847, #2854, #2872, #2873, #2874, #2928, #2929, #2934,
    [#2856], #2976 - #2984, #2987 - #2989, #2991 - #2993, #2995, #2784)
  * Ensure state cache is used when persisting events (PR #2864, #2871,
    [#2802], #2835, #2836, #2841, #2842, #2849)
  * Change the default config to bind on both IPv4 and IPv6 on all platforms
    (PR #2435) Thanks to @silkeh!
  * No longer require a specific version of saml2 (PR #2695) Thanks to @okurz!
  * Remove verbosity/log_file from generated config (PR #2755)
  * Add and improve metrics and logging (PR #2770, #2778, #2785, #2786,
    [#2787], #2793, #2794, #2795, #2809, #2810, #2833, #2834, #2844, #2965,
    [#2927], #2975, #2790, #2796, #2838)
  * When using synctl with workers, don't start the main synapse
    automatically (PR #2774)
  * Minor performance improvements (PR #2773, #2792)
  * Use a connection pool for non-federation outbound connections (PR #2817)
  * Make it possible to run unit tests against postgres (PR #2829)
  * Update pynacl dependency to 1.2.1 or higher (PR #2888) Thanks to @bachp!
  * Remove ability for AS users to call /events and /sync (PR #2948)
  * Use bcrypt.checkpw (PR #2949) Thanks to @krombel!
- Change spec-file to use service downloaded and recompressed file directly
- Remove patch synapse_python_dependencies_allow_higher_versions_of_pysaml2.patch
  now included in upstream changes</changelog>
  <changelog author="okurz@suse.com" date="1523880000">- Update to version v0.27.4:
  * Bug fixes:
  * URL quote path segments over federation (#3082)
  * Add room_id to the response of rooms/{roomId}/join (PR #2986) Thanks to @jplatte!
  * Fix replication after switch to simplejson (PR #3015)
  * Fix replication after switch to simplejson (PR #3015)
  * 404 correctly on missing paths via NoResource (PR #3022)
  * Fix error when claiming e2e keys from offline servers (PR #3034)
  * fix tests/storage/test_user_directory.py (PR #3042)
  * use PUT instead of POST for federating groups/m.join_policy (PR #3070) Thanks to @krombel!
  * postgres port script: fix state_groups_pkey error (PR #3072)
  * Features:
  * Add joinability for groups (PR #3045)
  * Implement group join API (PR #3046)
  * Add counter metrics for calculating state delta (PR #3033)
  * R30 stats (PR #3041)
  * Measure time it takes to calculate state group ID (PR #3043)
  * Add basic performance statistics to phone home (PR #3044)
  * Add response size metrics (PR #3071)
  * phone home cache size configurations (PR #3063)
  * Changes:
  * Update canonicaljson dependency (#3095)
  * Add a blurb explaining the main synapse worker (PR #2886) Thanks to @turt2live!
  * Replace old style error catching with 'as' keyword (PR #3000) Thanks to @NotAFile!
  * Use .iter* to avoid copies in StateHandler (PR #3006)
  * Linearize calls to _generate_user_id (PR #3029)
  * Remove last usage of ujson (PR #3030)
  * Use simplejson throughout (PR #3048)
  * Use static JSONEncoders (PR #3049)
  * Remove uses of events.content (PR #3060)
  * Improve database cache performance (PR #3068)</changelog>
  <changelog author="okurz@suse.com" date="1524225600">- Introduce package self-test based on _multibuild</changelog>
  <changelog author="okurz@suse.com" date="1524830400">- Disable web-client for package self-test to get rid of unfulfilled dependency</changelog>
  <changelog author="okurz@suse.com" date="1525435200">- Update to version v0.28.1:
  * SECURITY UPDATE
    Clamp the allowed values of event depth received over federation to be
    [0, 2^63 - 1]. This mitigates an attack where malicious events
    injected with depth = 2^63 - 1 render rooms unusable. Depth is used to
    determine the cosmetic ordering of events within a room, and so the ordering
    of events in such a room will default to using stream_ordering rather than depth
    (topological_ordering).
    This is a temporary solution to mitigate abuse in the wild, whilst a long term solution
    is being implemented to improve how the depth parameter is used.
    Full details at
    https://docs.google.com/document/d/1I3fi2S-XnpO45qrpCsowZv8P8dHcNZ4fsBsbOW7KABI/edit#
    Pin Twisted to &lt;18.4 until we stop using the private _OpenSSLECCurve API.
  * Bug Fixes:
  * Return 401 for invalid access_token on logout (PR #2938) Thanks to @dklug!
  * Return a 404 rather than a 500 on rejoining empty rooms (PR #3080)
  * fix federation_domain_whitelist (PR #3099)
  * Avoid creating events with huge numbers of prev_events (PR #3113)
  * Reject events which have lots of prev_events (PR #3118)
  * Fix quarantine media admin API and search reindex (PR #3130)
  * Fix media admin APIs (PR #3134)
  * Features:
  * Add metrics for event processing lag (PR #3090)
  * Add metrics for ResponseCache (PR #3092)
  * Changes:
  * Synapse on PyPy (PR #2760) Thanks to @Valodim!
  * move handling of auto_join_rooms to RegisterHandler (PR #2996) Thanks to @krombel!
  * Improve handling of SRV records for federation connections (PR #3016) Thanks to @silkeh!
  * Document the behaviour of ResponseCache (PR #3059)
  * Preparation for py3 (PR #3061, #3073, #3074, #3075, #3103, #3104, #3106, #3107, #3109, #3110) Thanks to @NotAFile!
  * update prometheus dashboard to use new metric names (PR #3069) Thanks to @krombel!
  * use python3-compatible prints (PR #3074) Thanks to @NotAFile!
  * Send federation events concurrently (PR #3078)
  * Limit concurrent event sends for a room (PR #3079)
  * Improve R30 stat definition (PR #3086)
  * Send events to ASes concurrently (PR #3088)
  * Refactor ResponseCache usage (PR #3093)
  * Clarify that SRV may not point to a CNAME (PR #3100) Thanks to @silkeh!
  * Use str(e) instead of e.message (PR #3103) Thanks to @NotAFile!
  * Use six.itervalues in some places (PR #3106) Thanks to @NotAFile!
  * Refactor store.have_events (PR #3117)</changelog>
  <changelog author="okurz@suse.com" date="1528891200">- Fix security bug in the get_missing_events federation AP
  (CVE-2018-12291, boo#1096833)
- Add boo1096833_event_visibility_rules_not_applied_correctly.patch</changelog>
</package>
<package pkgid="c3627c49a91fd57018cd3c4c5593bdf991f54bea67ba36f4e30cac4afa2fb90b" name="mc" arch="src">
  <version epoch="0" ver="4.8.20" rel="lp150.3.3.1"/>
  <changelog author="dnh@opensuse.org" date="1389700800">- add preliminary patch by Sebastian Siebert
  mc-vfs-fish-deleted_source_file.patch
  bnc#856501 and http://www.midnight-commander.org/ticket/3128</changelog>
  <changelog author="jengelh@inai.de" date="1391083200">- Spec metadata update, remove redundant %clean section,
  do parallel build with %_smp_mflags</changelog>
  <changelog author="dnh@opensuse.org" date="1394884800">- add mc-vfs_fish_helpers_ls-formatstring.diff
  fixing possible format-string attack via filename
  http://www.midnight-commander.org/ticket/2983
  until http://www.midnight-commander.org/ticket/3128
  is fixed, fish should stay disabled though!</changelog>
  <changelog author="dnh@opensuse.org" date="1394884801">- fix bug ("%i" is not an appropriate format for off_t) in
  mc-vfs_fish_helpers_ls-formatstring.diff, thanks to andrew_b
  of upstream in mc-ticket:2983</changelog>
  <changelog author="dnh@opensuse.org" date="1396440000">- update to 4.8.12
- remove mc-vfs_fish_helpers_ls-formatstring.diff (fixed upstream)
- change mc-extfs-iso9660-xorriso.patch to work with upstream fix</changelog>
  <changelog author="dnh@opensuse.org" date="1409918400">- update to 4.8.13
  various bugfixes and minor improvements, see NEWS file for details
- comment out mc-Syntax.cmake.patch, fixed upstream, to be removed</changelog>
  <changelog author="dnh@opensuse.org" date="1410004800">- remove file mc-Syntax.cmake.patch / cmds in .spec
- remove file mc-vfs_fish_helpers_ls-formatstring.diff
  (extraneous patches seem to cause factory-auto to decline the submit)
  cf. e.g. https://build.opensuse.org/request/show/247789</changelog>
  <changelog author="astieger@suse.com" date="1427198400">- GNU Midnight Commander 4.8.14:
  * Core:
    + Minimal version of GLib is 2.14.0
    + Add new panel binding "SelectExt" to select/unselect files
    with the same extension as the current file
    + Speed up of directory size calculation
    + Support of italic text
  * Editor:
    + New syntax highlighting support: puppet
  * Viewer:
    + Rewrite mcview's rendering and scrolling
    + Use VIEW_SELECTED_COLOR in plain mode
    + In QuickView panel, don't pass any chars to command line to
    avoid unexpected command execution
  * Misc:
    + Code cleanup
    + Bind poedit to Edit action for .po files
    + Better grammar mcedit user menu
  * Various bug fixes</changelog>
  <changelog author="dnh@opensuse.org" date="1447070400">- Update to 4.8.15:
  * Core:
    Minimal version of GLib is 2.26.0
    Use the PATH environment variable to search for the executable when opening pipe (#3444)
    Support more than 2 (up to 9) columns in file panel in brief mode (#3212)
    Clarify file sorting in "Unsorted" mode (#3496)
    WGroupbox: respect dialog's colors (#3468)
    Highlight find file's result in internal viewer (#3530)
  * VFS:
    s3 extfs vfs: bugfixes and improvements (#3470, #3502)
  * Editor:
    Add hidden option to choose full or base file name in the status line (#3445)
    Improvements of syntax highlighting:
    Lua (#3471)
    PKGBUILD (#3484)
  * Misc:
    Text alignment in Info panel (#3155)
    Select of menu file edit: change default button to "User" (#3493)
    Recognize .gmo files as well as .mo ones (#3422)
    Fix mc.pot comment tripping up Transifex and unportable inplace sed (#3479)
    A lot of code clean up (#3420, #3424, #3426, #3427, #3428, #3429, #3430, #3431, #3434, #3435, #3437, #3463, #3464, #3465, #3466, #3467, #3494, #3495, #3539)
    Documentation updates:
    Spanish man and help: Diff Viewer section and minor fixes (#3477)
    VFS garbage collection (#3472)
  * Fixes:
    Various memory leaks (#3438, #3439, #3440, #3457, #3458, #3459, #3460, #3461, #3462, #3475, #3520, #3521, #3522)
    Linux kernel-specific segfault on startup (#3441)
    Lost of Panelize contents in some cases (#3032, #3489, #3498, #3507)
    Wrong highlight of search result in case of "Regular expression" and "Whole words" (#3524)
    "Whole words" search works only in Normal mode (#3525)
    SFTP VFS: segfault (#3456)
    Segfault in "Find file" due to invalid UTF-8 sequences (#3449)
    Bash variable 'PROMPT_COMMAND' in pantheon-terminal (#3534)
- rebased mc-extd-xdg.patch against upstream changes</changelog>
  <changelog author="pth@suse.de" date="1447070401">- Tag .sha256 file as source.</changelog>
  <changelog author="astieger@suse.com" date="1447070402">- verify the sha256 hash during build</changelog>
  <changelog author="dnh@opensuse.org" date="1457956800">- Update to 4.8.16:
  Core
    Support for ash + bugfixes for bash, fish (#2742)
    Find file: empty file name matches any file name (#3593)
    Find file: empty value of "Content" is used instead of "Search for content" checkbox to disable search for content (#3594)
    Listbox: don't wraparound on mouse scroll (#3554)
    Internals:
    Listbox: various fixups (#3569: #3562, #3563, #3565, #3161)
    Split MSG_ACTION into MSG_ACTION and MSG_NOTIFY (#3566)
  VFS
    Support lzip compression format (#2673, #1541)
    Support lz4 compression format (#3523)
    patchfs: support xz compression (#3443)
    Update uc1541 version (#3527)
    Add mc.ext patterns for initramfs / initrd (#3115)
  Editor
    Add golang syntax (MidnightCommander?/mc#84)
    Update Puppet syntax (MidnightCommander?/mc#86)
  Misc
    Code cleanup (#3555, #3547, #3587)
    Better subshell documentation (#3556)
    Fixes to the English man pages by Denys Vlasenko
  Fixes
    Insufficient quoting in mc.menu (#2947)
    Broken ./configure --without-internal-edit (#3601)
    Memory leaks (#3547, #3561, #3567, #3572)
    No preallocation if appending during file copy (#3577)
    Cannot set mini-format for "brief" listing type (#3588)
    Info panel: incorrect inode information in some cases (#3214)
    Info panel: wrong device name with symbolic link (#3412)
    Info panel: buffer overflow (#3582)
    Regression: match filename, not full path in mc.ext (#3578)
    Broken case insensitive search in non-unicode locale (#3491)
    Error message prefixed with no sense "0:" (#3269)
    mcedit: buffer overflow (#3579)
    mcedit: "Lower case selection" command in User Menu (#3586)
    mcedit: close on ctrl-g (#3557)
    mcview: "Not found" result isn't reported in some cases (#3543)
    VFS: isofs doesn't show .dotfiles (#3537)
    VFS: isofs: cannot copy file from iso when Joliet without RockRidge? is used (#2851)
    VFS: extfs/unzip: enter into zip file fails with "inconsistent extfs archive" (#3433)
    VFS: SFTP: various bugs (#3581)
    VFS: FISH: provide major/minor info for block/char devices (#3599)
    Bashism in gitfs+ extfs helper (#3379)
    Non-portable invocation of man (#3509)
    mc-wrapper leaves MC_USER set (#3550)
    Broken silent opening of files in background (#3574)
    Run identify on JPEGs even if exif is not installed (#3568)
- rebased a bunch of patches</changelog>
  <changelog author="dnh@opensuse.org" date="1459512000">- Add no-brainer patch mc-patchfs_lzip-syntax-error.patch from upstream
  that fixes a syntax error in the patchfs helper script (bsc#972789).</changelog>
  <changelog author="dnh@opensuse.org" date="1462795200">- Update to 4.8.17:
  === Core ===
  * Minimal version of Gettext is 0.18.1 (#1885)
  * Optimization of copy/move operations (use adaptive buffer as in coreutils) (#2193)
  * Recognize csh as tcsh (#2742)
  * ?entered scrolling of file panel (#3130)
  * Internals:
  * Switch to new high-level mouse API (#3571)
  === VFS ===
  * FISH helpers: remove executable bit (#3610)
  === Editor ===
  * Improvements of syntax highlighting:
  * F90 (#3618)
  * Java (MidnightCommander/mc#95)
  === Misc ===
  * Code cleanup (#3598, #3607)
  * Install mc.keymap as a symlink to mc.default.keymap (#3609)
  * File highlight: add more common file formats
  === Fixes ===
  * Segfault due to incorrect value of SHELL environment variable (#3606)
  * Segfault when copying files under FreeBSD 9.3 (#3617)
  * Segfault when entering into some cpio archives (#3621)
  * Subshell output lost on window resize under tmux, GNU screen (#3639)
  * Subshell cursor position lost after window resizing (#3640)
  * Listbox no longer scrolls when dragging outside widget (#3559)
  * VFS: extfs: incorrect date parsing in unzip (#3622)
  * VFS: extfs: buffer overflow (#3605)
  * VFS: patchfs: syntax error (#3620)
  * VFS: fish: mistakes in ls Perl helper (#3611)
- remove upstreamed Patch99: mc-patchfs_lzip-syntax-error.patch</changelog>
  <changelog author="dnh@opensuse.org" date="1475496000">- Update to Version 4.8.18
- Core
  * Alt-Enter, Ctrl-Enter and Ctrl-Shift-Enter shortcuts are bindable in file manager (#3075)
  * Internals:
  * Refactoring of widget subsystem (#2919, #3632)
- Editor
  * Add syntax highlighting:
  * GLSL (#3683)
  * CUDA (#3686)
- Misc
  * Code cleanup (#3641, #3652)
- Fixes
  * Build failure on FreeBSD (#3643)
  * Incompatibility with NetBSD curses (#3665)
  * Memory leaks (#3637)
  * Subshell output lost on window resize under tmux, GNU screen (#3639)
  * --with-subshell=optional does not work (#3642)
  * Backward search is not interruptible (#3648)
  * "Output lines" has no effect (#3655)
  * Wrong handling of mouse clicks in long listing mode (#3661)
  * Panelize resets marks on marked files in many cases (#3663)
  * Cannot change directory in the active panel in some cases (#3669)
  * Filtered View doesn't work (#3646, #3660)
  * mcedit: don't kill bookmarks when open file from "Find File" dialog (#3668)
  * man pages use "the MC" instead of "MC" (#3644)</changelog>
  <changelog author="dnh@opensuse.org" date="1488801600">- Update to Version 4.8.19
  * * Core
  * Replace $MC_HOME with $MC_PROFILE_ROOT (#3684)
  * Allow rebind TAB key to change panel (#3672)
  * Support for True Color (16 millions colors) (#3145)
  * Color aliases in skin files (#3711)
  * * VFS
  * Support timestamps with nanosecond precision for copy/move operations (#3575)
  * Introduce EXTFS helpers tester (#3730, #3744, #3752, #3753, #3751)
  * Teach u7z to parse archive listings w/o sizes and/or dates (#2707)
  * Teach rpm helper about transaction scripts (#3750)
  * Fix hp48, uace &amp; uarc extfs which used an obsolete date format (#3729, #3747)
  * * Editor
  * Syntax:
  - updates of HTML and ebuild highlighting
  - highlight *.t (Perl test) files as Perl scripts
  - disassociate .cl file extension from LISP syntax (#3691)
  * Add syntax highlighting:
  - OpenCL (#3690)
  - OpenShadingLanguage (#3762)
  - R
  - YAML (#3293)
  * * Misc
  * Code cleanup (#3693, #3703, #3721, #3763)
  * Add true color skins: 'Four seasons' (#3724)
  * Activate `--enable-tests` by default if `check` is found (#3708)
  * Added new skin: YADT (MidnightCommander/mc#115)
  * * Fixes
  * Segfault on switching left panel to Info (#3700)
  * Broken compatibility with ncurses (#3697)
  * Setting MC_HOME makes mc ignore ~/.bashrc (#3684)
  * mc_tmpdir() use a buffer of only 64 characters (#3736)
  * Some bugs in the parsing of hexadecimal search patterns (#3694)
  * Hexadecimal search fails on binary data (#3589)
  * Broken file list resorting on double click on panel header line (#3715)
  * Wrong dialog resizing and positioning (#3714, #3723)
  * Widget's 'disabled' status is not toggled immediately (#3716)
  * Last item of 'Options/Layout/Horizontal' radiobuttons remains highlighted (#3717)
  * 'Options/Layout/Equal split' checkbox gets reverted (#3718)
  * Panels: cannot show more than one "column" in user defined listing mode (#3757)
  * Mix of MSG_NOTIFY and MSG_FOCUS messages (#3731)
  * skins: 'window-state-char' and 'window-close-char' are parsed as colors (#3710)
  * Pressing &lt;right&gt; and &lt;left&gt; in the hotlist dialog doesn't refresh it (#3775)
  * mcview: an error message about bad regexp isn't shown (#3720)
  * mcedit: fix etags filenames parsing (#3698)
  * mcedit: fix mouse active area for maximize / close buttons (#3774)
  * mcedit: frames (MDI interface) don't reflect the focus state (#3766)
  * mcedit: frames (MDI interface) sometimes obscure the buttonbar (#3760)
  * mcedit doesn't show search error messages when searching backwards (#3735)
  * help viewer: tab characters handled incorrectly (#3754)
  * VFS: incorrect zoo archive listing (#3696)
  * VFS: segfault in VFSs not setting block size in stat (#3749)
- removed obsolete 02_ignore_ftp_chmod_error.patch
  if ignore_ftp_chattr_errors=true (the default?) in
  ~/.config/mc/ini, errors are ignored anyway, and if if set to false,
  the user get the error (e.g. permission denied). With the patch, the
  user never will see an error and wonder, why it's not working. It
  might have been, that this option has not worked in (much) older
  versions and the patch introduced because of this.
- removed obsolete 09_uzip_broken_528239.patch
  it is correctly detected during configure
- rebased mc-rpm.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1511870400">- Update to Version 4.8.20
  * * Core
  * Rename key bindings:
  - [main].PanelListingSwitch -&gt; [panel].CycleListingFormat
  - [main].PanelListingChange -&gt; [main].SetupListingFormat
  * Speed up of UTF-8 normalization for frequent cases (#3616)
  * * VFS
  * extfs helpers tester:
  - diff of failed tests is now included in output to ease bug reporting (#3784)
  * * Editor
  * Syntax:
  - ES2015 support (#3793)
  - TypeScript support (#3794)
  - Ada 95 updates (#3804)
  - Apache Hive QL support (#3828)
  - SQL &amp; PHP keyword updates (MidnightCommander/mc#129)
  - Simplification of case insensitive file name patterns in /usr/share/mc/syntax/Syntax file (#3829)
  - Markdown (initial support) (#3864)
  - Protocol Buffers and gRPC support (#3868)
  * Add %c (cursor offset from BOF) support for user menu macros (#3867)
  * * Viewer
  * * Diff viewer
  * * Misc
  * Unify curses initialization for various curses implementations (#3697)
  * Highlight txz extension as archive like tgz, etc. (#3782)
  * Add new media extensions to filehighlight.ini (#3834)
  * * Fixes
  * Wrong --help message for mcview, mcedit and mcdiff (#3805)
  * Compression from menu broken due to bad quoting (#3840)
  * --with-homedir gives "yes" as config directory (#3836)
  * External panelize: opening a file with an absolute path fails (#2942)
  * Filter isn't cleared when entering empty string (#3813)
  * Panelization is not kept while switching panel listing mode (#3810)
  * Cannot tab out of a QuickView panel (#3815)
  * Cannot use the F10 key in a QuickView panel (#3816)
  * Wromg INPUT_COMPLETE_CD flag handling in the QuickDialog? engine (#3870)
  * mcview: file interpreted as latin1 instead of utf8 (#3783)
  * mcview: incomplete read of filtering data (#3817)
  * mcview: search doesn't grow file as much as needed (#3819, #3855)
  * mcview: goto doesn't grow file as much as needed (#3826)
  * mcview: quick view panel: crash on slow startup while switching panel mode (#3846)
  * mcedit: fix broken encoding into UTF-8 for 8-bit displays (#3843)
  * mcedit: incorrect %f macro substitution in the user menu (#3861)
  * man pages: wrong paths of mc.hint and mc.hlp (#3806)
  * subshell: fix broken tcsh 6.20+ cd escaping (#3852)
  * VFS: incremental tar doesn't contain empty directories (#2297)
  * VFS: incremental tar: wrong directories owner for tar --numeric-owner -g (#3709)
  * VFS: timestamps not being preserved due to uninitialized struct stat st_[acm]tim.tv_nsec (#3821)
  * VFS: ftp: can't retrieve password from .netrc when user is in URL (#3869)
  * VFS: tests: locale issue causing helpers using 'sort' to fail (#3787)
  * VFS: tests: unportable 'echo' use causing one rpm helper test to fail (#3786)
  * Spelling errors in the manual page (#3839)</changelog>
  <changelog author="adam.majer@suse.de" date="1523361600">- xls2csv_update.patch: fix mc to call xls2csv correctly
  (bsc#1087708)</changelog>
  <changelog author="adam.majer@suse.de" date="1523620800">- Remove some unused BuildRequires, enabling building on SLE-15
- Drop fdupes usage as difference is only 1 file smaller than 1kB.</changelog>
  <changelog author="adam.majer@suse.de" date="1530014400">- sftp_interactive_password.patch: Fixes logins to remote SSH
  sessions where only Keyboard-Interactive password is available
  and tunneled password is disabled (bsc#1098235)</changelog>
</package>
<package pkgid="9ba66bf9bd37255e1ba4076c3fb01e2abe03258ad995a60c8b8743c05a60b6cf" name="mc" arch="x86_64">
  <version epoch="0" ver="4.8.20" rel="lp150.3.3.1"/>
  <changelog author="dnh@opensuse.org" date="1389700800">- add preliminary patch by Sebastian Siebert
  mc-vfs-fish-deleted_source_file.patch
  bnc#856501 and http://www.midnight-commander.org/ticket/3128</changelog>
  <changelog author="jengelh@inai.de" date="1391083200">- Spec metadata update, remove redundant %clean section,
  do parallel build with %_smp_mflags</changelog>
  <changelog author="dnh@opensuse.org" date="1394884800">- add mc-vfs_fish_helpers_ls-formatstring.diff
  fixing possible format-string attack via filename
  http://www.midnight-commander.org/ticket/2983
  until http://www.midnight-commander.org/ticket/3128
  is fixed, fish should stay disabled though!</changelog>
  <changelog author="dnh@opensuse.org" date="1394884801">- fix bug ("%i" is not an appropriate format for off_t) in
  mc-vfs_fish_helpers_ls-formatstring.diff, thanks to andrew_b
  of upstream in mc-ticket:2983</changelog>
  <changelog author="dnh@opensuse.org" date="1396440000">- update to 4.8.12
- remove mc-vfs_fish_helpers_ls-formatstring.diff (fixed upstream)
- change mc-extfs-iso9660-xorriso.patch to work with upstream fix</changelog>
  <changelog author="dnh@opensuse.org" date="1409918400">- update to 4.8.13
  various bugfixes and minor improvements, see NEWS file for details
- comment out mc-Syntax.cmake.patch, fixed upstream, to be removed</changelog>
  <changelog author="dnh@opensuse.org" date="1410004800">- remove file mc-Syntax.cmake.patch / cmds in .spec
- remove file mc-vfs_fish_helpers_ls-formatstring.diff
  (extraneous patches seem to cause factory-auto to decline the submit)
  cf. e.g. https://build.opensuse.org/request/show/247789</changelog>
  <changelog author="astieger@suse.com" date="1427198400">- GNU Midnight Commander 4.8.14:
  * Core:
    + Minimal version of GLib is 2.14.0
    + Add new panel binding "SelectExt" to select/unselect files
    with the same extension as the current file
    + Speed up of directory size calculation
    + Support of italic text
  * Editor:
    + New syntax highlighting support: puppet
  * Viewer:
    + Rewrite mcview's rendering and scrolling
    + Use VIEW_SELECTED_COLOR in plain mode
    + In QuickView panel, don't pass any chars to command line to
    avoid unexpected command execution
  * Misc:
    + Code cleanup
    + Bind poedit to Edit action for .po files
    + Better grammar mcedit user menu
  * Various bug fixes</changelog>
  <changelog author="dnh@opensuse.org" date="1447070400">- Update to 4.8.15:
  * Core:
    Minimal version of GLib is 2.26.0
    Use the PATH environment variable to search for the executable when opening pipe (#3444)
    Support more than 2 (up to 9) columns in file panel in brief mode (#3212)
    Clarify file sorting in "Unsorted" mode (#3496)
    WGroupbox: respect dialog's colors (#3468)
    Highlight find file's result in internal viewer (#3530)
  * VFS:
    s3 extfs vfs: bugfixes and improvements (#3470, #3502)
  * Editor:
    Add hidden option to choose full or base file name in the status line (#3445)
    Improvements of syntax highlighting:
    Lua (#3471)
    PKGBUILD (#3484)
  * Misc:
    Text alignment in Info panel (#3155)
    Select of menu file edit: change default button to "User" (#3493)
    Recognize .gmo files as well as .mo ones (#3422)
    Fix mc.pot comment tripping up Transifex and unportable inplace sed (#3479)
    A lot of code clean up (#3420, #3424, #3426, #3427, #3428, #3429, #3430, #3431, #3434, #3435, #3437, #3463, #3464, #3465, #3466, #3467, #3494, #3495, #3539)
    Documentation updates:
    Spanish man and help: Diff Viewer section and minor fixes (#3477)
    VFS garbage collection (#3472)
  * Fixes:
    Various memory leaks (#3438, #3439, #3440, #3457, #3458, #3459, #3460, #3461, #3462, #3475, #3520, #3521, #3522)
    Linux kernel-specific segfault on startup (#3441)
    Lost of Panelize contents in some cases (#3032, #3489, #3498, #3507)
    Wrong highlight of search result in case of "Regular expression" and "Whole words" (#3524)
    "Whole words" search works only in Normal mode (#3525)
    SFTP VFS: segfault (#3456)
    Segfault in "Find file" due to invalid UTF-8 sequences (#3449)
    Bash variable 'PROMPT_COMMAND' in pantheon-terminal (#3534)
- rebased mc-extd-xdg.patch against upstream changes</changelog>
  <changelog author="pth@suse.de" date="1447070401">- Tag .sha256 file as source.</changelog>
  <changelog author="astieger@suse.com" date="1447070402">- verify the sha256 hash during build</changelog>
  <changelog author="dnh@opensuse.org" date="1457956800">- Update to 4.8.16:
  Core
    Support for ash + bugfixes for bash, fish (#2742)
    Find file: empty file name matches any file name (#3593)
    Find file: empty value of "Content" is used instead of "Search for content" checkbox to disable search for content (#3594)
    Listbox: don't wraparound on mouse scroll (#3554)
    Internals:
    Listbox: various fixups (#3569: #3562, #3563, #3565, #3161)
    Split MSG_ACTION into MSG_ACTION and MSG_NOTIFY (#3566)
  VFS
    Support lzip compression format (#2673, #1541)
    Support lz4 compression format (#3523)
    patchfs: support xz compression (#3443)
    Update uc1541 version (#3527)
    Add mc.ext patterns for initramfs / initrd (#3115)
  Editor
    Add golang syntax (MidnightCommander?/mc#84)
    Update Puppet syntax (MidnightCommander?/mc#86)
  Misc
    Code cleanup (#3555, #3547, #3587)
    Better subshell documentation (#3556)
    Fixes to the English man pages by Denys Vlasenko
  Fixes
    Insufficient quoting in mc.menu (#2947)
    Broken ./configure --without-internal-edit (#3601)
    Memory leaks (#3547, #3561, #3567, #3572)
    No preallocation if appending during file copy (#3577)
    Cannot set mini-format for "brief" listing type (#3588)
    Info panel: incorrect inode information in some cases (#3214)
    Info panel: wrong device name with symbolic link (#3412)
    Info panel: buffer overflow (#3582)
    Regression: match filename, not full path in mc.ext (#3578)
    Broken case insensitive search in non-unicode locale (#3491)
    Error message prefixed with no sense "0:" (#3269)
    mcedit: buffer overflow (#3579)
    mcedit: "Lower case selection" command in User Menu (#3586)
    mcedit: close on ctrl-g (#3557)
    mcview: "Not found" result isn't reported in some cases (#3543)
    VFS: isofs doesn't show .dotfiles (#3537)
    VFS: isofs: cannot copy file from iso when Joliet without RockRidge? is used (#2851)
    VFS: extfs/unzip: enter into zip file fails with "inconsistent extfs archive" (#3433)
    VFS: SFTP: various bugs (#3581)
    VFS: FISH: provide major/minor info for block/char devices (#3599)
    Bashism in gitfs+ extfs helper (#3379)
    Non-portable invocation of man (#3509)
    mc-wrapper leaves MC_USER set (#3550)
    Broken silent opening of files in background (#3574)
    Run identify on JPEGs even if exif is not installed (#3568)
- rebased a bunch of patches</changelog>
  <changelog author="dnh@opensuse.org" date="1459512000">- Add no-brainer patch mc-patchfs_lzip-syntax-error.patch from upstream
  that fixes a syntax error in the patchfs helper script (bsc#972789).</changelog>
  <changelog author="dnh@opensuse.org" date="1462795200">- Update to 4.8.17:
  === Core ===
  * Minimal version of Gettext is 0.18.1 (#1885)
  * Optimization of copy/move operations (use adaptive buffer as in coreutils) (#2193)
  * Recognize csh as tcsh (#2742)
  * ?entered scrolling of file panel (#3130)
  * Internals:
  * Switch to new high-level mouse API (#3571)
  === VFS ===
  * FISH helpers: remove executable bit (#3610)
  === Editor ===
  * Improvements of syntax highlighting:
  * F90 (#3618)
  * Java (MidnightCommander/mc#95)
  === Misc ===
  * Code cleanup (#3598, #3607)
  * Install mc.keymap as a symlink to mc.default.keymap (#3609)
  * File highlight: add more common file formats
  === Fixes ===
  * Segfault due to incorrect value of SHELL environment variable (#3606)
  * Segfault when copying files under FreeBSD 9.3 (#3617)
  * Segfault when entering into some cpio archives (#3621)
  * Subshell output lost on window resize under tmux, GNU screen (#3639)
  * Subshell cursor position lost after window resizing (#3640)
  * Listbox no longer scrolls when dragging outside widget (#3559)
  * VFS: extfs: incorrect date parsing in unzip (#3622)
  * VFS: extfs: buffer overflow (#3605)
  * VFS: patchfs: syntax error (#3620)
  * VFS: fish: mistakes in ls Perl helper (#3611)
- remove upstreamed Patch99: mc-patchfs_lzip-syntax-error.patch</changelog>
  <changelog author="dnh@opensuse.org" date="1475496000">- Update to Version 4.8.18
- Core
  * Alt-Enter, Ctrl-Enter and Ctrl-Shift-Enter shortcuts are bindable in file manager (#3075)
  * Internals:
  * Refactoring of widget subsystem (#2919, #3632)
- Editor
  * Add syntax highlighting:
  * GLSL (#3683)
  * CUDA (#3686)
- Misc
  * Code cleanup (#3641, #3652)
- Fixes
  * Build failure on FreeBSD (#3643)
  * Incompatibility with NetBSD curses (#3665)
  * Memory leaks (#3637)
  * Subshell output lost on window resize under tmux, GNU screen (#3639)
  * --with-subshell=optional does not work (#3642)
  * Backward search is not interruptible (#3648)
  * "Output lines" has no effect (#3655)
  * Wrong handling of mouse clicks in long listing mode (#3661)
  * Panelize resets marks on marked files in many cases (#3663)
  * Cannot change directory in the active panel in some cases (#3669)
  * Filtered View doesn't work (#3646, #3660)
  * mcedit: don't kill bookmarks when open file from "Find File" dialog (#3668)
  * man pages use "the MC" instead of "MC" (#3644)</changelog>
  <changelog author="dnh@opensuse.org" date="1488801600">- Update to Version 4.8.19
  * * Core
  * Replace $MC_HOME with $MC_PROFILE_ROOT (#3684)
  * Allow rebind TAB key to change panel (#3672)
  * Support for True Color (16 millions colors) (#3145)
  * Color aliases in skin files (#3711)
  * * VFS
  * Support timestamps with nanosecond precision for copy/move operations (#3575)
  * Introduce EXTFS helpers tester (#3730, #3744, #3752, #3753, #3751)
  * Teach u7z to parse archive listings w/o sizes and/or dates (#2707)
  * Teach rpm helper about transaction scripts (#3750)
  * Fix hp48, uace &amp; uarc extfs which used an obsolete date format (#3729, #3747)
  * * Editor
  * Syntax:
  - updates of HTML and ebuild highlighting
  - highlight *.t (Perl test) files as Perl scripts
  - disassociate .cl file extension from LISP syntax (#3691)
  * Add syntax highlighting:
  - OpenCL (#3690)
  - OpenShadingLanguage (#3762)
  - R
  - YAML (#3293)
  * * Misc
  * Code cleanup (#3693, #3703, #3721, #3763)
  * Add true color skins: 'Four seasons' (#3724)
  * Activate `--enable-tests` by default if `check` is found (#3708)
  * Added new skin: YADT (MidnightCommander/mc#115)
  * * Fixes
  * Segfault on switching left panel to Info (#3700)
  * Broken compatibility with ncurses (#3697)
  * Setting MC_HOME makes mc ignore ~/.bashrc (#3684)
  * mc_tmpdir() use a buffer of only 64 characters (#3736)
  * Some bugs in the parsing of hexadecimal search patterns (#3694)
  * Hexadecimal search fails on binary data (#3589)
  * Broken file list resorting on double click on panel header line (#3715)
  * Wrong dialog resizing and positioning (#3714, #3723)
  * Widget's 'disabled' status is not toggled immediately (#3716)
  * Last item of 'Options/Layout/Horizontal' radiobuttons remains highlighted (#3717)
  * 'Options/Layout/Equal split' checkbox gets reverted (#3718)
  * Panels: cannot show more than one "column" in user defined listing mode (#3757)
  * Mix of MSG_NOTIFY and MSG_FOCUS messages (#3731)
  * skins: 'window-state-char' and 'window-close-char' are parsed as colors (#3710)
  * Pressing &lt;right&gt; and &lt;left&gt; in the hotlist dialog doesn't refresh it (#3775)
  * mcview: an error message about bad regexp isn't shown (#3720)
  * mcedit: fix etags filenames parsing (#3698)
  * mcedit: fix mouse active area for maximize / close buttons (#3774)
  * mcedit: frames (MDI interface) don't reflect the focus state (#3766)
  * mcedit: frames (MDI interface) sometimes obscure the buttonbar (#3760)
  * mcedit doesn't show search error messages when searching backwards (#3735)
  * help viewer: tab characters handled incorrectly (#3754)
  * VFS: incorrect zoo archive listing (#3696)
  * VFS: segfault in VFSs not setting block size in stat (#3749)
- removed obsolete 02_ignore_ftp_chmod_error.patch
  if ignore_ftp_chattr_errors=true (the default?) in
  ~/.config/mc/ini, errors are ignored anyway, and if if set to false,
  the user get the error (e.g. permission denied). With the patch, the
  user never will see an error and wonder, why it's not working. It
  might have been, that this option has not worked in (much) older
  versions and the patch introduced because of this.
- removed obsolete 09_uzip_broken_528239.patch
  it is correctly detected during configure
- rebased mc-rpm.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1511870400">- Update to Version 4.8.20
  * * Core
  * Rename key bindings:
  - [main].PanelListingSwitch -&gt; [panel].CycleListingFormat
  - [main].PanelListingChange -&gt; [main].SetupListingFormat
  * Speed up of UTF-8 normalization for frequent cases (#3616)
  * * VFS
  * extfs helpers tester:
  - diff of failed tests is now included in output to ease bug reporting (#3784)
  * * Editor
  * Syntax:
  - ES2015 support (#3793)
  - TypeScript support (#3794)
  - Ada 95 updates (#3804)
  - Apache Hive QL support (#3828)
  - SQL &amp; PHP keyword updates (MidnightCommander/mc#129)
  - Simplification of case insensitive file name patterns in /usr/share/mc/syntax/Syntax file (#3829)
  - Markdown (initial support) (#3864)
  - Protocol Buffers and gRPC support (#3868)
  * Add %c (cursor offset from BOF) support for user menu macros (#3867)
  * * Viewer
  * * Diff viewer
  * * Misc
  * Unify curses initialization for various curses implementations (#3697)
  * Highlight txz extension as archive like tgz, etc. (#3782)
  * Add new media extensions to filehighlight.ini (#3834)
  * * Fixes
  * Wrong --help message for mcview, mcedit and mcdiff (#3805)
  * Compression from menu broken due to bad quoting (#3840)
  * --with-homedir gives "yes" as config directory (#3836)
  * External panelize: opening a file with an absolute path fails (#2942)
  * Filter isn't cleared when entering empty string (#3813)
  * Panelization is not kept while switching panel listing mode (#3810)
  * Cannot tab out of a QuickView panel (#3815)
  * Cannot use the F10 key in a QuickView panel (#3816)
  * Wromg INPUT_COMPLETE_CD flag handling in the QuickDialog? engine (#3870)
  * mcview: file interpreted as latin1 instead of utf8 (#3783)
  * mcview: incomplete read of filtering data (#3817)
  * mcview: search doesn't grow file as much as needed (#3819, #3855)
  * mcview: goto doesn't grow file as much as needed (#3826)
  * mcview: quick view panel: crash on slow startup while switching panel mode (#3846)
  * mcedit: fix broken encoding into UTF-8 for 8-bit displays (#3843)
  * mcedit: incorrect %f macro substitution in the user menu (#3861)
  * man pages: wrong paths of mc.hint and mc.hlp (#3806)
  * subshell: fix broken tcsh 6.20+ cd escaping (#3852)
  * VFS: incremental tar doesn't contain empty directories (#2297)
  * VFS: incremental tar: wrong directories owner for tar --numeric-owner -g (#3709)
  * VFS: timestamps not being preserved due to uninitialized struct stat st_[acm]tim.tv_nsec (#3821)
  * VFS: ftp: can't retrieve password from .netrc when user is in URL (#3869)
  * VFS: tests: locale issue causing helpers using 'sort' to fail (#3787)
  * VFS: tests: unportable 'echo' use causing one rpm helper test to fail (#3786)
  * Spelling errors in the manual page (#3839)</changelog>
  <changelog author="adam.majer@suse.de" date="1523361600">- xls2csv_update.patch: fix mc to call xls2csv correctly
  (bsc#1087708)</changelog>
  <changelog author="adam.majer@suse.de" date="1523620800">- Remove some unused BuildRequires, enabling building on SLE-15
- Drop fdupes usage as difference is only 1 file smaller than 1kB.</changelog>
  <changelog author="adam.majer@suse.de" date="1530014400">- sftp_interactive_password.patch: Fixes logins to remote SSH
  sessions where only Keyboard-Interactive password is available
  and tunneled password is disabled (bsc#1098235)</changelog>
</package>
<package pkgid="ad69f3a0a56fa67f1aec7f20ffac0942b78a2ee203daab50849d9d84b373d9d6" name="mc-lang" arch="noarch">
  <version epoch="0" ver="4.8.20" rel="lp150.3.3.1"/>
  <changelog author="dnh@opensuse.org" date="1389700800">- add preliminary patch by Sebastian Siebert
  mc-vfs-fish-deleted_source_file.patch
  bnc#856501 and http://www.midnight-commander.org/ticket/3128</changelog>
  <changelog author="jengelh@inai.de" date="1391083200">- Spec metadata update, remove redundant %clean section,
  do parallel build with %_smp_mflags</changelog>
  <changelog author="dnh@opensuse.org" date="1394884800">- add mc-vfs_fish_helpers_ls-formatstring.diff
  fixing possible format-string attack via filename
  http://www.midnight-commander.org/ticket/2983
  until http://www.midnight-commander.org/ticket/3128
  is fixed, fish should stay disabled though!</changelog>
  <changelog author="dnh@opensuse.org" date="1394884801">- fix bug ("%i" is not an appropriate format for off_t) in
  mc-vfs_fish_helpers_ls-formatstring.diff, thanks to andrew_b
  of upstream in mc-ticket:2983</changelog>
  <changelog author="dnh@opensuse.org" date="1396440000">- update to 4.8.12
- remove mc-vfs_fish_helpers_ls-formatstring.diff (fixed upstream)
- change mc-extfs-iso9660-xorriso.patch to work with upstream fix</changelog>
  <changelog author="dnh@opensuse.org" date="1409918400">- update to 4.8.13
  various bugfixes and minor improvements, see NEWS file for details
- comment out mc-Syntax.cmake.patch, fixed upstream, to be removed</changelog>
  <changelog author="dnh@opensuse.org" date="1410004800">- remove file mc-Syntax.cmake.patch / cmds in .spec
- remove file mc-vfs_fish_helpers_ls-formatstring.diff
  (extraneous patches seem to cause factory-auto to decline the submit)
  cf. e.g. https://build.opensuse.org/request/show/247789</changelog>
  <changelog author="astieger@suse.com" date="1427198400">- GNU Midnight Commander 4.8.14:
  * Core:
    + Minimal version of GLib is 2.14.0
    + Add new panel binding "SelectExt" to select/unselect files
    with the same extension as the current file
    + Speed up of directory size calculation
    + Support of italic text
  * Editor:
    + New syntax highlighting support: puppet
  * Viewer:
    + Rewrite mcview's rendering and scrolling
    + Use VIEW_SELECTED_COLOR in plain mode
    + In QuickView panel, don't pass any chars to command line to
    avoid unexpected command execution
  * Misc:
    + Code cleanup
    + Bind poedit to Edit action for .po files
    + Better grammar mcedit user menu
  * Various bug fixes</changelog>
  <changelog author="dnh@opensuse.org" date="1447070400">- Update to 4.8.15:
  * Core:
    Minimal version of GLib is 2.26.0
    Use the PATH environment variable to search for the executable when opening pipe (#3444)
    Support more than 2 (up to 9) columns in file panel in brief mode (#3212)
    Clarify file sorting in "Unsorted" mode (#3496)
    WGroupbox: respect dialog's colors (#3468)
    Highlight find file's result in internal viewer (#3530)
  * VFS:
    s3 extfs vfs: bugfixes and improvements (#3470, #3502)
  * Editor:
    Add hidden option to choose full or base file name in the status line (#3445)
    Improvements of syntax highlighting:
    Lua (#3471)
    PKGBUILD (#3484)
  * Misc:
    Text alignment in Info panel (#3155)
    Select of menu file edit: change default button to "User" (#3493)
    Recognize .gmo files as well as .mo ones (#3422)
    Fix mc.pot comment tripping up Transifex and unportable inplace sed (#3479)
    A lot of code clean up (#3420, #3424, #3426, #3427, #3428, #3429, #3430, #3431, #3434, #3435, #3437, #3463, #3464, #3465, #3466, #3467, #3494, #3495, #3539)
    Documentation updates:
    Spanish man and help: Diff Viewer section and minor fixes (#3477)
    VFS garbage collection (#3472)
  * Fixes:
    Various memory leaks (#3438, #3439, #3440, #3457, #3458, #3459, #3460, #3461, #3462, #3475, #3520, #3521, #3522)
    Linux kernel-specific segfault on startup (#3441)
    Lost of Panelize contents in some cases (#3032, #3489, #3498, #3507)
    Wrong highlight of search result in case of "Regular expression" and "Whole words" (#3524)
    "Whole words" search works only in Normal mode (#3525)
    SFTP VFS: segfault (#3456)
    Segfault in "Find file" due to invalid UTF-8 sequences (#3449)
    Bash variable 'PROMPT_COMMAND' in pantheon-terminal (#3534)
- rebased mc-extd-xdg.patch against upstream changes</changelog>
  <changelog author="pth@suse.de" date="1447070401">- Tag .sha256 file as source.</changelog>
  <changelog author="astieger@suse.com" date="1447070402">- verify the sha256 hash during build</changelog>
  <changelog author="dnh@opensuse.org" date="1457956800">- Update to 4.8.16:
  Core
    Support for ash + bugfixes for bash, fish (#2742)
    Find file: empty file name matches any file name (#3593)
    Find file: empty value of "Content" is used instead of "Search for content" checkbox to disable search for content (#3594)
    Listbox: don't wraparound on mouse scroll (#3554)
    Internals:
    Listbox: various fixups (#3569: #3562, #3563, #3565, #3161)
    Split MSG_ACTION into MSG_ACTION and MSG_NOTIFY (#3566)
  VFS
    Support lzip compression format (#2673, #1541)
    Support lz4 compression format (#3523)
    patchfs: support xz compression (#3443)
    Update uc1541 version (#3527)
    Add mc.ext patterns for initramfs / initrd (#3115)
  Editor
    Add golang syntax (MidnightCommander?/mc#84)
    Update Puppet syntax (MidnightCommander?/mc#86)
  Misc
    Code cleanup (#3555, #3547, #3587)
    Better subshell documentation (#3556)
    Fixes to the English man pages by Denys Vlasenko
  Fixes
    Insufficient quoting in mc.menu (#2947)
    Broken ./configure --without-internal-edit (#3601)
    Memory leaks (#3547, #3561, #3567, #3572)
    No preallocation if appending during file copy (#3577)
    Cannot set mini-format for "brief" listing type (#3588)
    Info panel: incorrect inode information in some cases (#3214)
    Info panel: wrong device name with symbolic link (#3412)
    Info panel: buffer overflow (#3582)
    Regression: match filename, not full path in mc.ext (#3578)
    Broken case insensitive search in non-unicode locale (#3491)
    Error message prefixed with no sense "0:" (#3269)
    mcedit: buffer overflow (#3579)
    mcedit: "Lower case selection" command in User Menu (#3586)
    mcedit: close on ctrl-g (#3557)
    mcview: "Not found" result isn't reported in some cases (#3543)
    VFS: isofs doesn't show .dotfiles (#3537)
    VFS: isofs: cannot copy file from iso when Joliet without RockRidge? is used (#2851)
    VFS: extfs/unzip: enter into zip file fails with "inconsistent extfs archive" (#3433)
    VFS: SFTP: various bugs (#3581)
    VFS: FISH: provide major/minor info for block/char devices (#3599)
    Bashism in gitfs+ extfs helper (#3379)
    Non-portable invocation of man (#3509)
    mc-wrapper leaves MC_USER set (#3550)
    Broken silent opening of files in background (#3574)
    Run identify on JPEGs even if exif is not installed (#3568)
- rebased a bunch of patches</changelog>
  <changelog author="dnh@opensuse.org" date="1459512000">- Add no-brainer patch mc-patchfs_lzip-syntax-error.patch from upstream
  that fixes a syntax error in the patchfs helper script (bsc#972789).</changelog>
  <changelog author="dnh@opensuse.org" date="1462795200">- Update to 4.8.17:
  === Core ===
  * Minimal version of Gettext is 0.18.1 (#1885)
  * Optimization of copy/move operations (use adaptive buffer as in coreutils) (#2193)
  * Recognize csh as tcsh (#2742)
  * ?entered scrolling of file panel (#3130)
  * Internals:
  * Switch to new high-level mouse API (#3571)
  === VFS ===
  * FISH helpers: remove executable bit (#3610)
  === Editor ===
  * Improvements of syntax highlighting:
  * F90 (#3618)
  * Java (MidnightCommander/mc#95)
  === Misc ===
  * Code cleanup (#3598, #3607)
  * Install mc.keymap as a symlink to mc.default.keymap (#3609)
  * File highlight: add more common file formats
  === Fixes ===
  * Segfault due to incorrect value of SHELL environment variable (#3606)
  * Segfault when copying files under FreeBSD 9.3 (#3617)
  * Segfault when entering into some cpio archives (#3621)
  * Subshell output lost on window resize under tmux, GNU screen (#3639)
  * Subshell cursor position lost after window resizing (#3640)
  * Listbox no longer scrolls when dragging outside widget (#3559)
  * VFS: extfs: incorrect date parsing in unzip (#3622)
  * VFS: extfs: buffer overflow (#3605)
  * VFS: patchfs: syntax error (#3620)
  * VFS: fish: mistakes in ls Perl helper (#3611)
- remove upstreamed Patch99: mc-patchfs_lzip-syntax-error.patch</changelog>
  <changelog author="dnh@opensuse.org" date="1475496000">- Update to Version 4.8.18
- Core
  * Alt-Enter, Ctrl-Enter and Ctrl-Shift-Enter shortcuts are bindable in file manager (#3075)
  * Internals:
  * Refactoring of widget subsystem (#2919, #3632)
- Editor
  * Add syntax highlighting:
  * GLSL (#3683)
  * CUDA (#3686)
- Misc
  * Code cleanup (#3641, #3652)
- Fixes
  * Build failure on FreeBSD (#3643)
  * Incompatibility with NetBSD curses (#3665)
  * Memory leaks (#3637)
  * Subshell output lost on window resize under tmux, GNU screen (#3639)
  * --with-subshell=optional does not work (#3642)
  * Backward search is not interruptible (#3648)
  * "Output lines" has no effect (#3655)
  * Wrong handling of mouse clicks in long listing mode (#3661)
  * Panelize resets marks on marked files in many cases (#3663)
  * Cannot change directory in the active panel in some cases (#3669)
  * Filtered View doesn't work (#3646, #3660)
  * mcedit: don't kill bookmarks when open file from "Find File" dialog (#3668)
  * man pages use "the MC" instead of "MC" (#3644)</changelog>
  <changelog author="dnh@opensuse.org" date="1488801600">- Update to Version 4.8.19
  * * Core
  * Replace $MC_HOME with $MC_PROFILE_ROOT (#3684)
  * Allow rebind TAB key to change panel (#3672)
  * Support for True Color (16 millions colors) (#3145)
  * Color aliases in skin files (#3711)
  * * VFS
  * Support timestamps with nanosecond precision for copy/move operations (#3575)
  * Introduce EXTFS helpers tester (#3730, #3744, #3752, #3753, #3751)
  * Teach u7z to parse archive listings w/o sizes and/or dates (#2707)
  * Teach rpm helper about transaction scripts (#3750)
  * Fix hp48, uace &amp; uarc extfs which used an obsolete date format (#3729, #3747)
  * * Editor
  * Syntax:
  - updates of HTML and ebuild highlighting
  - highlight *.t (Perl test) files as Perl scripts
  - disassociate .cl file extension from LISP syntax (#3691)
  * Add syntax highlighting:
  - OpenCL (#3690)
  - OpenShadingLanguage (#3762)
  - R
  - YAML (#3293)
  * * Misc
  * Code cleanup (#3693, #3703, #3721, #3763)
  * Add true color skins: 'Four seasons' (#3724)
  * Activate `--enable-tests` by default if `check` is found (#3708)
  * Added new skin: YADT (MidnightCommander/mc#115)
  * * Fixes
  * Segfault on switching left panel to Info (#3700)
  * Broken compatibility with ncurses (#3697)
  * Setting MC_HOME makes mc ignore ~/.bashrc (#3684)
  * mc_tmpdir() use a buffer of only 64 characters (#3736)
  * Some bugs in the parsing of hexadecimal search patterns (#3694)
  * Hexadecimal search fails on binary data (#3589)
  * Broken file list resorting on double click on panel header line (#3715)
  * Wrong dialog resizing and positioning (#3714, #3723)
  * Widget's 'disabled' status is not toggled immediately (#3716)
  * Last item of 'Options/Layout/Horizontal' radiobuttons remains highlighted (#3717)
  * 'Options/Layout/Equal split' checkbox gets reverted (#3718)
  * Panels: cannot show more than one "column" in user defined listing mode (#3757)
  * Mix of MSG_NOTIFY and MSG_FOCUS messages (#3731)
  * skins: 'window-state-char' and 'window-close-char' are parsed as colors (#3710)
  * Pressing &lt;right&gt; and &lt;left&gt; in the hotlist dialog doesn't refresh it (#3775)
  * mcview: an error message about bad regexp isn't shown (#3720)
  * mcedit: fix etags filenames parsing (#3698)
  * mcedit: fix mouse active area for maximize / close buttons (#3774)
  * mcedit: frames (MDI interface) don't reflect the focus state (#3766)
  * mcedit: frames (MDI interface) sometimes obscure the buttonbar (#3760)
  * mcedit doesn't show search error messages when searching backwards (#3735)
  * help viewer: tab characters handled incorrectly (#3754)
  * VFS: incorrect zoo archive listing (#3696)
  * VFS: segfault in VFSs not setting block size in stat (#3749)
- removed obsolete 02_ignore_ftp_chmod_error.patch
  if ignore_ftp_chattr_errors=true (the default?) in
  ~/.config/mc/ini, errors are ignored anyway, and if if set to false,
  the user get the error (e.g. permission denied). With the patch, the
  user never will see an error and wonder, why it's not working. It
  might have been, that this option has not worked in (much) older
  versions and the patch introduced because of this.
- removed obsolete 09_uzip_broken_528239.patch
  it is correctly detected during configure
- rebased mc-rpm.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1511870400">- Update to Version 4.8.20
  * * Core
  * Rename key bindings:
  - [main].PanelListingSwitch -&gt; [panel].CycleListingFormat
  - [main].PanelListingChange -&gt; [main].SetupListingFormat
  * Speed up of UTF-8 normalization for frequent cases (#3616)
  * * VFS
  * extfs helpers tester:
  - diff of failed tests is now included in output to ease bug reporting (#3784)
  * * Editor
  * Syntax:
  - ES2015 support (#3793)
  - TypeScript support (#3794)
  - Ada 95 updates (#3804)
  - Apache Hive QL support (#3828)
  - SQL &amp; PHP keyword updates (MidnightCommander/mc#129)
  - Simplification of case insensitive file name patterns in /usr/share/mc/syntax/Syntax file (#3829)
  - Markdown (initial support) (#3864)
  - Protocol Buffers and gRPC support (#3868)
  * Add %c (cursor offset from BOF) support for user menu macros (#3867)
  * * Viewer
  * * Diff viewer
  * * Misc
  * Unify curses initialization for various curses implementations (#3697)
  * Highlight txz extension as archive like tgz, etc. (#3782)
  * Add new media extensions to filehighlight.ini (#3834)
  * * Fixes
  * Wrong --help message for mcview, mcedit and mcdiff (#3805)
  * Compression from menu broken due to bad quoting (#3840)
  * --with-homedir gives "yes" as config directory (#3836)
  * External panelize: opening a file with an absolute path fails (#2942)
  * Filter isn't cleared when entering empty string (#3813)
  * Panelization is not kept while switching panel listing mode (#3810)
  * Cannot tab out of a QuickView panel (#3815)
  * Cannot use the F10 key in a QuickView panel (#3816)
  * Wromg INPUT_COMPLETE_CD flag handling in the QuickDialog? engine (#3870)
  * mcview: file interpreted as latin1 instead of utf8 (#3783)
  * mcview: incomplete read of filtering data (#3817)
  * mcview: search doesn't grow file as much as needed (#3819, #3855)
  * mcview: goto doesn't grow file as much as needed (#3826)
  * mcview: quick view panel: crash on slow startup while switching panel mode (#3846)
  * mcedit: fix broken encoding into UTF-8 for 8-bit displays (#3843)
  * mcedit: incorrect %f macro substitution in the user menu (#3861)
  * man pages: wrong paths of mc.hint and mc.hlp (#3806)
  * subshell: fix broken tcsh 6.20+ cd escaping (#3852)
  * VFS: incremental tar doesn't contain empty directories (#2297)
  * VFS: incremental tar: wrong directories owner for tar --numeric-owner -g (#3709)
  * VFS: timestamps not being preserved due to uninitialized struct stat st_[acm]tim.tv_nsec (#3821)
  * VFS: ftp: can't retrieve password from .netrc when user is in URL (#3869)
  * VFS: tests: locale issue causing helpers using 'sort' to fail (#3787)
  * VFS: tests: unportable 'echo' use causing one rpm helper test to fail (#3786)
  * Spelling errors in the manual page (#3839)</changelog>
  <changelog author="adam.majer@suse.de" date="1523361600">- xls2csv_update.patch: fix mc to call xls2csv correctly
  (bsc#1087708)</changelog>
  <changelog author="adam.majer@suse.de" date="1523620800">- Remove some unused BuildRequires, enabling building on SLE-15
- Drop fdupes usage as difference is only 1 file smaller than 1kB.</changelog>
  <changelog author="adam.majer@suse.de" date="1530014400">- sftp_interactive_password.patch: Fixes logins to remote SSH
  sessions where only Keyboard-Interactive password is available
  and tunneled password is disabled (bsc#1098235)</changelog>
</package>
<package pkgid="c71fc1ea5d598271d986d43514733a967b57e612aab7ed421b1804d2ada3ae32" name="mercurial" arch="src">
  <version epoch="0" ver="4.5.2" rel="lp150.2.3.1"/>
  <changelog author="develop7@develop7.info" date="1462190400">- update to v3.8.1
  (3.8.1 was released immediately after 3.8 to fix a release oversight.)
  Regularly scheduled feature release. This release contains a low-priority security fix for:
  * CVE-2016-3105 Mercurial: arbitrary code execution when converting Git repos
  Features
  * `hg update` and other commands that can perform update (such as hg pull -u)
    now warn about other topological heads
  * cHg has been added
  * `hg update` now updates to the tip-most changeset on the same topological
    branch. Before, it would update to the tip-most changeset, possibly on a
    different topological head
  * Hints on how to continue interrupted commands are now printed
    (e.g. `hg resolve -m` will now tell you to run `hg rebase --continue` or
    `hg histedit --continue`)
  * The experimental automv extension has been added. This extension attempts
    to detect file copes and renames automatically.
  * The 3rd party hgwatchman extension has been imported as the fsmonitor
    extension. This extension uses filesystem watching to make commands like
    `hg status` significantly faster on large repositories.
  * `hg rebase` now chooses its default destination the same way `hg merge` does
  * `hg pull -u` now activates a bookmark if the has a bookmark
  * `hg pull -u` now deactivates a bookmark if the destination doesn't match
    the existing bookmark
  * Improved edge styles in graph log.
  * User template keywords and functions can be defined in `[templatealias]`
    section.
  * It's now possible to push the active bookmark using `hg push -B .`.
  Improvements
  This release includes many improvements, including (but not limited to):
  * performance of copy detection during rebases has been improved, potentially
    leading to faster rebase execution
  * performance of `hg log -f &lt;file&gt;` has been improved
  * syntax errors in loaded extensions are now handled better
  * `hg update` on Windows should now be up to 4x faster
  * JSON encoding should now be proper UTF-8 for all inputs
  * Performance of the - revset operator has been improved
  * The blackbox extension now logs more data
  * "hgext" is now a Python namespace package
  * revsets accessing changelog data (commit messages, authors, dates) are now
    10-15% faster
  * hg.exe built in MinGW will now link against the proper Python DLL</changelog>
  <changelog author="develop7@develop7.info" date="1462276800">- fix mercurial-locale-fix.patch</changelog>
  <changelog author="develop7@develop7.info" date="1463486400">- Mercurial v3.8.2
  This is an unscheduled bugfix release. 3.8.1 contained a noisy deprecation
  warning that was only intended for Mercurial developers, sorry.
  * bookmarks: properly invalidate volatile sets when writing bookmarks
  * builddeb: add distroseries to tagged versions
  * bundle2: properly request phases during getbundle
  * debian: add wish to suggests
  * debian: forgot to make debian/rules executable in 6b95a623ec90
  * deprecation: gate deprecation warning behind devel configuration
  * help: fix the display for hg help internals.revlogs (issue5227)
  * help: search section of help topic by translated section name correctly
  * hg-ssh: copy doc string to man page
  * patch: show lower-ed translated message correctly
  * progress: stop excessive clearing (issue4801)</changelog>
  <changelog author="astieger@suse.com" date="1465732800">- mercurial 3.8.3:
  * bookmarks: allow pushing active bookmark on new remote head
  * localrepo: prevent executable-bit only changes from being lost on amend
  * strip: invalidate phase cache after stripping changeset
- verify source signature</changelog>
  <changelog author="develop7@develop7.info" date="1470052800">- Mercurial v3.9
  + Features
  * ui.textwidth can now be set to define width of help text
  * separate() template function added
  * ui.rollback can be set to false to disable the hg rollback command
  * fail-&lt;command&gt; hooks now run when a command fails
  * experimental.graphstyle.* config options to control styling of graphs in
    console
  * experimental.histedit.autoverb allows histedit lines beginning with
    "verb!" to be interpreted as histedit actions
  * [hostsecurity] config section for defining advanced per-host security
    settings
  * ability to define the SHA-256 and SHA-512 hashes of pinned server
    certificates
  * ability to define CA certificates on a per-host basis
  * ability to define the minimum TLS protocol version on a global or
    per-host basis
  * sort() revset can now perform topological sorts using the topo option
  * hgweb can now render JSON for filelog, filerevision, summary, and search
    web commands
  * [paths] entries can now define a pushrev sub-option to control which
    revisions to push by default
  * The experimental 'journal' extension was added, allowing users to view
    the previous positions of bookmarks and the working copy
  + Improvements
    This release includes many improvements, including (but not limited to):
  * performance of `hg diff` has been improved
  * chg now detects more changes to the configuration and execution
    environment
  * SSL/TLS code has been significantly refactored and now is consistent
    across all consumers (HTTPS, SMTPS)
  * performance improvements to server communication (particularly for the
    largefiles and remotefilelog extensions)
  * connections to servers whose certificate authority (CA) is unknown are
    now refused even if no CA certificates are available (see SecureConnections for details)
  * fingerprints of server certificates are now printed using SHA-256
    instead of SHA-1
  * reads and writes to certain files is now robust and avoids more race
    conditions and edge cases (see ExactCacheValidationPlan)
  * performance improvements to certain revsets
  * cloning will no longer prompt for a password multiple times when cloning
    from a server that requires a password
  * annotate view in hgweb now groups lines into blocks depending on their
    revision and highlights lines for the current revision
  * hgweb now displays extra information and also navigation links in popups
    for each line in annotate view</changelog>
  <changelog author="develop7@develop7.info" date="1474286400">- Mercurial 3.9.1 (2016-9-1)
  This is a regularly-scheduled bugfix release.
  * bundle2: fail faster when interrupted
  * bundle2: localize handleoutput remote prompts
  * convert: move svn config initializer out of the module level
  * debian: update source URL in copyright file
  * exchange: correctly specify url to unbundle (issue5145)
  * help: add example of '[templates]' usage
  * help: update link to wiki/CommandServer
  * osx: update bugzilla link in readme
  * revset: fix keyword arguments to go through optimization process
  * win32: update link to mailing list in readme
  * win32: update wiki link in mercurial.ini</changelog>
  <changelog author="develop7@develop7.info" date="1478088000">- Mercurial 4.0
  This is a regularly-scheduled quarterly feature release. Unlike other
  4.0 software releases, this is simply 3.9 + .1, so it should be the usual
  pain-free upgrade.
  + Features
  * The following commands now also have experimental formatter support:
    'hg version', 'hg grep' and 'hg config'
  * New template keywords and functions: `termwidth`, `mod(a, b)`,
    `relpath(path)`
  * Basic arithmetic operations in template such as `termwidth - 10`
  * `follow()` revset takes new `startrev` parameter
  * Bash completion now allows skipping potentially expensive status call
    for completing 'hg status' arguments, using $HGCOMPLETE_NOSTATUS
    environment variable
  + Improvements
  * A number of changes were made to move and copy tracking, to make sure
    move and copy information is not lost during commands like 'hg graft'
  * Compound revset expression is now properly ordered
  * Python 3 support has received a lot of improvements (but will take a
    lot of additional work)
  * zlib performance in hgweb is improved, and it's possible to control zlib
    compression level using server.zliblevel option
- Refreshed mercurial-hgk-path-fix.diff and mercurial-locale-path-fix.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1483704000">- Update to version 4.0.2:
  * demandimport: do not raise ImportError for unknown item in
    fromlist
  * posix: make poll() restart on interruption by signal
  * hgweb: add missing slash to file log url in rss style
  * hgweb: cache fctx.parents() in annotate command
  * vfs, scmutil: ignore EPERM at os.utime, which avoids ambiguity
- Update package keyring</changelog>
  <changelog author="develop7@develop7.info" date="1485950400">- Mercurial 4.1
  This is a regularly-scheduled quarterly feature release.
  + Features
  * A new extensible "compression engines" API has been implemented. Support
    for a new compression format can now be implemented in extensions.
  * New compression formats are fully supported in bundles and the wire
    protocol. There is experimental support for different compression in
    revlogs.
  * zstd - a new and exciting compression engine - is now distributed with
    Mercurial and built by default
  * HTTP payloads for many commands will now use zstd by default (as opposed
    to zlib) when both client and server support it. This can reduce
    server-side CPU usage to ~60% of original for operations like serving
    bundles.
  * zstd compressed bundles can be produced by specifying the `zstd` bundle
    type. e.g. `hg bundle -a -t zstd-v2 zstd-bundle.hg`.
  * A new statistical profiler has been added and made the default profiler
    for `--profile`. This profiler gives more accurate results than Python's
    built-in cProfile (the previous default) because the profiler overhead is
    much smaller. The output from `--profile` now displays the code hot path
    by default. This allows Mercurial developers to more accurately identify
    performance problems.
  * New `followlines(file, from:to, startrev=.)` revset predicate to track a
    part of changes.
  * Experimental support for additional git-diff features.
  * Troubled changes (from ChangesetEvolution) are noted more prominently in a few places.
  * An experimental hg debugupgraderepo command allows in-place upgrading of
    repositories to the latest storage format.
  + Improvements
  * Performance of reading individual revlog entries has been greatly
    improved. This will be noticeable when performing changelog scans on
    large repositories (such as when executing certain revsets).
  * The low-level content diffing algorithm is now ~2x faster. Operations
    that write data to the repository (like commit) can be noticeably faster
    as a result.
  See complete changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.1_.282017-2-1.29
- refreshed mercurial-locale-path-fix.patch and mercurial-hgk-path-fix.diff
- refresh package keyring</changelog>
  <changelog author="develop7@develop7.info" date="1491307200">- Mercurial 4.1.2
  This is a regularly-scheduled bugfix release.
  + Mercurial should work inside IIS on Windows again. (issue5493)
  + zstd support now refuses to work on old bundle formats. (issue5506)
  + Merges involving subrepositories no longer crash in some cases. (issue5505)
  + Checking for new heads during push is no longer accidentally quadratic
- Mercurial 4.1.1
  This is a regularly-scheduled bugfix release.
  + Several incorrect mailing list addresses have been corrected.
  + Various error cases have been corrected during push and pull.
  + Minor issues that happened when Mercurial spawned worker processes have
    been fixed.</changelog>
  <changelog author="develop7@develop7.info" date="1494158400">- Mercurial 4.2
  This is a regularly-scheduled quarterly feature release.
  * Notable changes
    + Pager support has been moved into core and is now enabled by default.
    This is now controlled with the ui.paginate setting.
    Note that in 4.2-rc, the ui.paginate option was named pager.enable. The
    old name has been dropped in the final release. If you had turned
    pagination off using pager.enable=False, please update your config.
    + Color support has also been moved into core and is now enabled by default
    (the ui.color setting now defaults to 'auto').
    + The new experimental 'show' extension provides a way to view various
    information about your repository in an ergonomic way. It is deliberately
    designed for human consumption and not for scripting, so it doesn't carry
    the same backward compatibility guarantees as other commands. See
    'hg help -e show' for more information.
    + Mercurial now requires `setuptools` on Windows</changelog>
  <changelog author="develop7@develop7.info" date="1499256000">- Mercurial 4.2.2
  This is a regularly-scheduled bugfix release.
  * largefiles: avoid a crash when archiving a subrepo with largefiles disabled
  * rebase: also test abort from pretxnclose error
  * rebase: backed out changes 2519994d25ca and cf8ad0e6c0e4 (issue5610)
  * rebase: reinforce testing around precommit hook interrupting a rebase
- Mercurial 4.2.1
  This is a regularly-scheduled bugfix release.
  * `hg graft` now works when grafting across merges that were problematic
    before (b4e1e30528c7).
  * A race condition in `hg status` was partially fixed (issue5584).
  * The message about deprecated SHA-1 hashes in the [hostfingerprints] config
    section now references the correct syntax for replacing them with SHA-256
    hashes (issue5559).</changelog>
  <changelog author="tiwai@suse.de" date="1502366400">- mercurial 4.2.3: security fix updates for
  CVE-2017-1000115 and CVE-2017-1000116:
  * Mercurial's symlink auditing was incomplete prior to 4.3, and
    could be abused to write to files outside the repository
    (CVE-2017-1000115 bsc#1053344)
  * Mercurial was not sanitizing hostnames passed to ssh, allowing
    shell injection attacks by specifying a hostname starting with
  - oProxyCommand (CVE-2017-1000116, bsc#1052696)</changelog>
  <changelog author="tiwai@suse.de" date="1502798400">- Mercurial 4.3.1:
  This is a regularly-scheduled quarterly feature release,
  including the previous two security fixes (CVE-2017-1000115,
  CVE-2017-1000116)
  Notable changes:
  * experimental amend extension providing the amend command
  * experimental sparse extension
  * Support for Python 2.6 has been dropped.
  * Bundles created by the strip extension now store phase
    information. It will be restored when unbundling.
  * The strip extension now removes relevant obsmarkers.
    If a backup requested (the default), the obsmarkers are stored
    in the backup bundle and will be restored when unbundling.
  * hg show work (from the experimental show extension) now
    displays more info
  * hg show stack is a new view for the current, in-progress
    changeset and others around it
  * Mitigation for two security vulnerabilities</changelog>
  <changelog author="develop7@develop7.info" date="1509883200">- Mercurial 4.4
  Notable changes
    Control whitespace settings for annotation on hgweb
  * /annotate URLs on hgweb now accept query string arguments to influence how
    whitespace changes impact results.
  * The arguments "ignorews," "ignorewsamount," "ignorewseol," and
    "ignoreblanklines" now have the same meaning as their [annotate] config
    section counterparts. Any provided setting overrides the server default.
  * HTML checkboxes have been added to the paper and gitweb themes to expose
    current whitespace settings and to easily modify the current view.
    Fast, heuristic copy-tracing
    A new fast heuristic algorithm for copytracing which assumes that the
    files moves are either:
    1. renames in the same directory
    2. moves in other directories with same names
    You can use this algorithm by setting 'experimental.copytrace=heuristics'.
    This setting performs full copytracing if both source and destination
    branches contains non-public changesets only.
    Other changes
  * Estimated time is more accurate with non-linear progress
  * "hg status -v" can now show unfinished state. For example, when in an
    unfinished rebase state, "hg status -v" might show:
    [#] The repository is in an unfinished *rebase* state.
    [#] No unresolved merge conflicts.
    [#] To continue:                hg rebase --continue
    [#] To abort:                   hg rebase --abort
  * Added '--ignore-space-at-eol' diff option to ignore whitespace
    differences at line endings.
  * show: use consistent node length in views
  * show: decrease minimum displayed hash length from 5 to 4
  * A new uncommit extension which provides 'hg uncommit' using which one
    can uncommit part or all of the changeset. This command undoes the
    effect of a local commit, returning the affected files to their
    uncommitted state.
  * 'hg clone --uncompressed' uses clone bundles when possible
  * 'hg annotate --skip' now prints a '*' on lines with skipped revisions
  * New 'commands.update.check' feature to adjust constraints on when
    'hg update' will allow updates with a dirty working copy.
  * Add an experimental -L/--line-range FILE,FROMLINE:TOLINE option to
    'hg log' command to follow the history of files by line range. In
    combination with -p/--patch option, only diff hunks within specified
    line range will be displayed. Feedback, especially on UX aspects, is
    welcome.
  * Print warning when fsmonitor isn't being used on a large repository
  Read rest of the changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.4_.282017-11-01.29
- Mercurial 4.3.3
  * Prevent crashes when clearing progress bar. (issue5684)
  * rebase: move bookmarks with --keep (issue5682)
- Mercurial 4.3.2
  * restore compatibility with older versions of Python 2.7 by not using a
    bytearray with struct.unpack_from()
  * restore mingw compatibility for setup.py
  * hgwebdir: read 'web.template' untrusted (plugs potential security issue)
  * repair: preserve phase when not using generaldelta (issue5678)
  * ssh: fix flakey ssh errors on BSD systems
  * restore error handling behavior around certain I/O errors; the regressed
    behavior could result in transactions not being properly rolled back if
    stdio handles encountered errors (issue5658)
  * templatekw: choose {latesttag} by len(changes), not date (issue5659)
  * record: fix revert -i for lines without newline (issue5651)
  * mq: create non-lossy patches, also with custom global diff configuration
- Fixed README file name (now it's README.rst)</changelog>
  <changelog author="develop7@develop7.info" date="1510401600">- Mercurial 4.4.1
  1. Notable changes
  * Git and Subversion subrepos have been disabled by default to mitigate a
    potential security risk if files overlapping with a subrepo managed to be
    committed to a repository.
    bsc#1071715 CVE-2017-17458
  * Subrepos are now more paranoid about symlink traversal.
  * The share extension handles drive letters on Windows better.
  It is possible that a specially malformed repository can cause Git
  subrepositories to run arbitrary code in the form of a .git/hooks/post-update
  script checked in to the repository in Mercurial 4.4 and earlier. Typical use
  of Mercurial prevents construction of such repositories, but they can be
  created programmatically.</changelog>
  <changelog author="develop7@develop7.info" date="1517745600">- Mercurial 4.5
  See full changelog on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5-rc_.282018-01-22.29
  1. New Features
    1.1. revert --interactive
    The revert command now accepts the flag --interactive to allow reverting
    only some of the changes to the specified files.
    1.2. Accessing hidden changesets
    Set config option `experimental.directaccess = True` to access hidden
    changesets from read only commands.
    1.3. githelp extension
    The githelp extension provides the `hg githelp` command. This command
    attempts to convert a git command to its Mercurial equivalent. The
    extension can be useful to Git users new to Mercurial.
    1.4. Largefiles changes
    largefiles: add a 'debuglfput' command to put largefile into the store
    largefiles: add support for 'largefiles://' url scheme
    largefiles: allow to run 'debugupgraderepo' on repo with largefiles
    largefiles: convert EOL of hgrc before appending to bytes IO
    largefiles: explicitly set the source and sink types to 'hg' for lfconvert
    largefiles: modernize how capabilities are added to the wire protocol
  2. hgweb changes
    hgweb now shows more information about commits: phase (if it's not public),
    obsolescence status (with a short explanation and links to the successors)
    and instabilities (e.g. orphan, phase-divergent or content-divergent).
    Client-side graph code has been simplified by delegating more work to the
    backend, so /graph page is now more in sync with /log page, visually and
    feature-wise. Unfortunately, this code change means that 3rd-party themes
    for 4.5+ are required to have graphentry.tmpl template available (copy it
    from the base theme if you don't use %include and then reference it in map
    file) and render entries in graph.tmpl -- look at one of the core themes to
    see what it needs to look like. JS functions that create graph vertices and
    edges are now available in Graph.prototype, making it possible to call the
    original functions from custom theme-specific functions if needed.
    Graph now shows different symbols for normal, branch-closing, obsolete and
    unstable commits, and marks currently checked out commit with a circle
    around its graph node.
    There's also now json-graph API endpoint that can be used for rendering
    commit graph in 3rd-party applications.
  2.1. Other Changes
    When interactive revert is run against a revision other than the working
    directory parent, the diff shown is the diff to _apply_ to the working
    directory, rather than the diff to _discard_ from the working copy. This is
    in line with related user experiences with 'git' and appears to be less
    confusing with 'ui.interface=curses'.
    Let 'hg rebase' avoid content-divergence by skipping obsolete changesets
    (and their descendants) when they are present in the rebase set along with
    one of their successors but none of their successors is in destination.
    A new experimental config flag, `rebase.experimental.inmemory`, makes
    rebase perform an in-memory merge instead of doing it on-disk in the
    working copy.
    The `HGPLAINEXCEPT` environment variable can now include color to allow
    automatic output colorization in otherwise automated environments.
    A new `unamend` command in `uncommit` extension which undoes the effect of
    the amend command by creating a new changeset which was there before amend
    and moving the changes that were amended to the working directory.
    A '--abort' flag to merge command to abort the ongoing merge.
    An experimental flag '--rev' to 'hg branch' which can be used to change
    branch of changesets.
    bundle2 read I/O significantly improved
    bundle2 memory use significantly reduced during read
    clonebundle: it is now possible to serve the clonebundle using a git-lfs
    compatible server.
    templatefilters: add slashpath() to convert path separator to slash
    (issue5572)
    A new experimental config flag, 'inline-color-diff', adds within-line color
    diff capacity
    histedit: add support to output nodechanges using formatter to help with
    editor integrations
  3. Backwards Compatibility Changes
    `log --follow-first -rREV`, which is deprecated, now follows the first
    parent of merge revisions from the specified REV just like
    `log --follow -rREV`.
    `log --follow -rREV FILE..` now follows file history across copies and
    renames.
    transaction: register summary callbacks only at start of transaction
    hgweb's graph view no longer supports browsers that lack &lt;canvas&gt; support
    hgweb: only include graph-related data in jsdata variable on /graph pages
    graphlog: add another graph node type, unstable, using character *
    remove: print message for each file in verbose mode only while using '-A'</changelog>
  <changelog author="develop7@develop7.info" date="1520424000">- Mercurial 4.5.2
  (4.5.2 was released immediately after 4.5.1 to fix a release oversight.)
  1. Security Fixes (CVE-2018-1000132,bsc#1085211)
    All versions of Mercurial prior to 4.5.2 have vulnerabilities in the HTTP
    server that allow permissions bypass to:
  * Perform writes on repositories that should be read-only
  * Perform reads on repositories that shouldn't allow read access
  2. Backwards Compatibility Changes
    The "batch" wire protocol command now enforces permissions of each invoked
    sub-command. Wire protocol commands must define their operation type or the
    "batch" command will assume they can write data and will prevent their
    execution on HTTP servers unless the HTTP request method is POST, the
    server is configured to allow pushes, and the (possibly authenticated) HTTP
    user is authorized to perform a push.
    Wire protocol commands not defining their operation type in
    "wireproto.PERMISSIONS" are now assumed to be used for "push" operations
    and access control to run those commands is now enforced accordingly.
  3. Bug Fixes
    fileset: don't abort when running copied() on a revision with a removed file
    date: fix parsing months
    setup: only allow Python 3 from a source checkout (issue5804)
    annotate: do not poorly split lines at CR (issue5798)
    subrepo: don't attempt to share remote sources (issue5793)
    subrepo: activate clone pooling to enable sharing with remote URLs
    changegroup: do not delta lfs revisions
    revlog: do not use delta for lfs revisions
    revlog: resolve lfs rawtext to vanilla rawtext before applying delta
  See full cnahgelog on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5.1_.2F_4.5.2_.282018-03-06.29</changelog>
  <changelog author="develop7@develop7.info" date="1520683200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="tiwai@suse.de" date="1530878400">- Fix security issues in mpatch overflow and other misbehavior
  (CVE-2018-13346, bsc#1100354, CVE-2018-13347, bsc#1100355,
  CVE-2018-13348, bsc#1100353):
  hg-mpatch-fix01.patch
  hg-mpatch-fix02.patch
  hg-mpatch-fix03.patch
  hg-mpatch-fix04.patch
  hg-mpatch-fix05.patch
  hg-mpatch-fix06.patch
  hg-mpatch-fix07.patch
  hg-mpatch-fix08.patch
  hg-mpatch-fix09.patch</changelog>
</package>
<package pkgid="f3bbe2847f4fa24d5facec666848a641375d0528c37089e350663a5d369f1ad9" name="mercurial" arch="x86_64">
  <version epoch="0" ver="4.5.2" rel="lp150.2.3.1"/>
  <changelog author="develop7@develop7.info" date="1462190400">- update to v3.8.1
  (3.8.1 was released immediately after 3.8 to fix a release oversight.)
  Regularly scheduled feature release. This release contains a low-priority security fix for:
  * CVE-2016-3105 Mercurial: arbitrary code execution when converting Git repos
  Features
  * `hg update` and other commands that can perform update (such as hg pull -u)
    now warn about other topological heads
  * cHg has been added
  * `hg update` now updates to the tip-most changeset on the same topological
    branch. Before, it would update to the tip-most changeset, possibly on a
    different topological head
  * Hints on how to continue interrupted commands are now printed
    (e.g. `hg resolve -m` will now tell you to run `hg rebase --continue` or
    `hg histedit --continue`)
  * The experimental automv extension has been added. This extension attempts
    to detect file copes and renames automatically.
  * The 3rd party hgwatchman extension has been imported as the fsmonitor
    extension. This extension uses filesystem watching to make commands like
    `hg status` significantly faster on large repositories.
  * `hg rebase` now chooses its default destination the same way `hg merge` does
  * `hg pull -u` now activates a bookmark if the has a bookmark
  * `hg pull -u` now deactivates a bookmark if the destination doesn't match
    the existing bookmark
  * Improved edge styles in graph log.
  * User template keywords and functions can be defined in `[templatealias]`
    section.
  * It's now possible to push the active bookmark using `hg push -B .`.
  Improvements
  This release includes many improvements, including (but not limited to):
  * performance of copy detection during rebases has been improved, potentially
    leading to faster rebase execution
  * performance of `hg log -f &lt;file&gt;` has been improved
  * syntax errors in loaded extensions are now handled better
  * `hg update` on Windows should now be up to 4x faster
  * JSON encoding should now be proper UTF-8 for all inputs
  * Performance of the - revset operator has been improved
  * The blackbox extension now logs more data
  * "hgext" is now a Python namespace package
  * revsets accessing changelog data (commit messages, authors, dates) are now
    10-15% faster
  * hg.exe built in MinGW will now link against the proper Python DLL</changelog>
  <changelog author="develop7@develop7.info" date="1462276800">- fix mercurial-locale-fix.patch</changelog>
  <changelog author="develop7@develop7.info" date="1463486400">- Mercurial v3.8.2
  This is an unscheduled bugfix release. 3.8.1 contained a noisy deprecation
  warning that was only intended for Mercurial developers, sorry.
  * bookmarks: properly invalidate volatile sets when writing bookmarks
  * builddeb: add distroseries to tagged versions
  * bundle2: properly request phases during getbundle
  * debian: add wish to suggests
  * debian: forgot to make debian/rules executable in 6b95a623ec90
  * deprecation: gate deprecation warning behind devel configuration
  * help: fix the display for hg help internals.revlogs (issue5227)
  * help: search section of help topic by translated section name correctly
  * hg-ssh: copy doc string to man page
  * patch: show lower-ed translated message correctly
  * progress: stop excessive clearing (issue4801)</changelog>
  <changelog author="astieger@suse.com" date="1465732800">- mercurial 3.8.3:
  * bookmarks: allow pushing active bookmark on new remote head
  * localrepo: prevent executable-bit only changes from being lost on amend
  * strip: invalidate phase cache after stripping changeset
- verify source signature</changelog>
  <changelog author="develop7@develop7.info" date="1470052800">- Mercurial v3.9
  + Features
  * ui.textwidth can now be set to define width of help text
  * separate() template function added
  * ui.rollback can be set to false to disable the hg rollback command
  * fail-&lt;command&gt; hooks now run when a command fails
  * experimental.graphstyle.* config options to control styling of graphs in
    console
  * experimental.histedit.autoverb allows histedit lines beginning with
    "verb!" to be interpreted as histedit actions
  * [hostsecurity] config section for defining advanced per-host security
    settings
  * ability to define the SHA-256 and SHA-512 hashes of pinned server
    certificates
  * ability to define CA certificates on a per-host basis
  * ability to define the minimum TLS protocol version on a global or
    per-host basis
  * sort() revset can now perform topological sorts using the topo option
  * hgweb can now render JSON for filelog, filerevision, summary, and search
    web commands
  * [paths] entries can now define a pushrev sub-option to control which
    revisions to push by default
  * The experimental 'journal' extension was added, allowing users to view
    the previous positions of bookmarks and the working copy
  + Improvements
    This release includes many improvements, including (but not limited to):
  * performance of `hg diff` has been improved
  * chg now detects more changes to the configuration and execution
    environment
  * SSL/TLS code has been significantly refactored and now is consistent
    across all consumers (HTTPS, SMTPS)
  * performance improvements to server communication (particularly for the
    largefiles and remotefilelog extensions)
  * connections to servers whose certificate authority (CA) is unknown are
    now refused even if no CA certificates are available (see SecureConnections for details)
  * fingerprints of server certificates are now printed using SHA-256
    instead of SHA-1
  * reads and writes to certain files is now robust and avoids more race
    conditions and edge cases (see ExactCacheValidationPlan)
  * performance improvements to certain revsets
  * cloning will no longer prompt for a password multiple times when cloning
    from a server that requires a password
  * annotate view in hgweb now groups lines into blocks depending on their
    revision and highlights lines for the current revision
  * hgweb now displays extra information and also navigation links in popups
    for each line in annotate view</changelog>
  <changelog author="develop7@develop7.info" date="1474286400">- Mercurial 3.9.1 (2016-9-1)
  This is a regularly-scheduled bugfix release.
  * bundle2: fail faster when interrupted
  * bundle2: localize handleoutput remote prompts
  * convert: move svn config initializer out of the module level
  * debian: update source URL in copyright file
  * exchange: correctly specify url to unbundle (issue5145)
  * help: add example of '[templates]' usage
  * help: update link to wiki/CommandServer
  * osx: update bugzilla link in readme
  * revset: fix keyword arguments to go through optimization process
  * win32: update link to mailing list in readme
  * win32: update wiki link in mercurial.ini</changelog>
  <changelog author="develop7@develop7.info" date="1478088000">- Mercurial 4.0
  This is a regularly-scheduled quarterly feature release. Unlike other
  4.0 software releases, this is simply 3.9 + .1, so it should be the usual
  pain-free upgrade.
  + Features
  * The following commands now also have experimental formatter support:
    'hg version', 'hg grep' and 'hg config'
  * New template keywords and functions: `termwidth`, `mod(a, b)`,
    `relpath(path)`
  * Basic arithmetic operations in template such as `termwidth - 10`
  * `follow()` revset takes new `startrev` parameter
  * Bash completion now allows skipping potentially expensive status call
    for completing 'hg status' arguments, using $HGCOMPLETE_NOSTATUS
    environment variable
  + Improvements
  * A number of changes were made to move and copy tracking, to make sure
    move and copy information is not lost during commands like 'hg graft'
  * Compound revset expression is now properly ordered
  * Python 3 support has received a lot of improvements (but will take a
    lot of additional work)
  * zlib performance in hgweb is improved, and it's possible to control zlib
    compression level using server.zliblevel option
- Refreshed mercurial-hgk-path-fix.diff and mercurial-locale-path-fix.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1483704000">- Update to version 4.0.2:
  * demandimport: do not raise ImportError for unknown item in
    fromlist
  * posix: make poll() restart on interruption by signal
  * hgweb: add missing slash to file log url in rss style
  * hgweb: cache fctx.parents() in annotate command
  * vfs, scmutil: ignore EPERM at os.utime, which avoids ambiguity
- Update package keyring</changelog>
  <changelog author="develop7@develop7.info" date="1485950400">- Mercurial 4.1
  This is a regularly-scheduled quarterly feature release.
  + Features
  * A new extensible "compression engines" API has been implemented. Support
    for a new compression format can now be implemented in extensions.
  * New compression formats are fully supported in bundles and the wire
    protocol. There is experimental support for different compression in
    revlogs.
  * zstd - a new and exciting compression engine - is now distributed with
    Mercurial and built by default
  * HTTP payloads for many commands will now use zstd by default (as opposed
    to zlib) when both client and server support it. This can reduce
    server-side CPU usage to ~60% of original for operations like serving
    bundles.
  * zstd compressed bundles can be produced by specifying the `zstd` bundle
    type. e.g. `hg bundle -a -t zstd-v2 zstd-bundle.hg`.
  * A new statistical profiler has been added and made the default profiler
    for `--profile`. This profiler gives more accurate results than Python's
    built-in cProfile (the previous default) because the profiler overhead is
    much smaller. The output from `--profile` now displays the code hot path
    by default. This allows Mercurial developers to more accurately identify
    performance problems.
  * New `followlines(file, from:to, startrev=.)` revset predicate to track a
    part of changes.
  * Experimental support for additional git-diff features.
  * Troubled changes (from ChangesetEvolution) are noted more prominently in a few places.
  * An experimental hg debugupgraderepo command allows in-place upgrading of
    repositories to the latest storage format.
  + Improvements
  * Performance of reading individual revlog entries has been greatly
    improved. This will be noticeable when performing changelog scans on
    large repositories (such as when executing certain revsets).
  * The low-level content diffing algorithm is now ~2x faster. Operations
    that write data to the repository (like commit) can be noticeably faster
    as a result.
  See complete changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.1_.282017-2-1.29
- refreshed mercurial-locale-path-fix.patch and mercurial-hgk-path-fix.diff
- refresh package keyring</changelog>
  <changelog author="develop7@develop7.info" date="1491307200">- Mercurial 4.1.2
  This is a regularly-scheduled bugfix release.
  + Mercurial should work inside IIS on Windows again. (issue5493)
  + zstd support now refuses to work on old bundle formats. (issue5506)
  + Merges involving subrepositories no longer crash in some cases. (issue5505)
  + Checking for new heads during push is no longer accidentally quadratic
- Mercurial 4.1.1
  This is a regularly-scheduled bugfix release.
  + Several incorrect mailing list addresses have been corrected.
  + Various error cases have been corrected during push and pull.
  + Minor issues that happened when Mercurial spawned worker processes have
    been fixed.</changelog>
  <changelog author="develop7@develop7.info" date="1494158400">- Mercurial 4.2
  This is a regularly-scheduled quarterly feature release.
  * Notable changes
    + Pager support has been moved into core and is now enabled by default.
    This is now controlled with the ui.paginate setting.
    Note that in 4.2-rc, the ui.paginate option was named pager.enable. The
    old name has been dropped in the final release. If you had turned
    pagination off using pager.enable=False, please update your config.
    + Color support has also been moved into core and is now enabled by default
    (the ui.color setting now defaults to 'auto').
    + The new experimental 'show' extension provides a way to view various
    information about your repository in an ergonomic way. It is deliberately
    designed for human consumption and not for scripting, so it doesn't carry
    the same backward compatibility guarantees as other commands. See
    'hg help -e show' for more information.
    + Mercurial now requires `setuptools` on Windows</changelog>
  <changelog author="develop7@develop7.info" date="1499256000">- Mercurial 4.2.2
  This is a regularly-scheduled bugfix release.
  * largefiles: avoid a crash when archiving a subrepo with largefiles disabled
  * rebase: also test abort from pretxnclose error
  * rebase: backed out changes 2519994d25ca and cf8ad0e6c0e4 (issue5610)
  * rebase: reinforce testing around precommit hook interrupting a rebase
- Mercurial 4.2.1
  This is a regularly-scheduled bugfix release.
  * `hg graft` now works when grafting across merges that were problematic
    before (b4e1e30528c7).
  * A race condition in `hg status` was partially fixed (issue5584).
  * The message about deprecated SHA-1 hashes in the [hostfingerprints] config
    section now references the correct syntax for replacing them with SHA-256
    hashes (issue5559).</changelog>
  <changelog author="tiwai@suse.de" date="1502366400">- mercurial 4.2.3: security fix updates for
  CVE-2017-1000115 and CVE-2017-1000116:
  * Mercurial's symlink auditing was incomplete prior to 4.3, and
    could be abused to write to files outside the repository
    (CVE-2017-1000115 bsc#1053344)
  * Mercurial was not sanitizing hostnames passed to ssh, allowing
    shell injection attacks by specifying a hostname starting with
  - oProxyCommand (CVE-2017-1000116, bsc#1052696)</changelog>
  <changelog author="tiwai@suse.de" date="1502798400">- Mercurial 4.3.1:
  This is a regularly-scheduled quarterly feature release,
  including the previous two security fixes (CVE-2017-1000115,
  CVE-2017-1000116)
  Notable changes:
  * experimental amend extension providing the amend command
  * experimental sparse extension
  * Support for Python 2.6 has been dropped.
  * Bundles created by the strip extension now store phase
    information. It will be restored when unbundling.
  * The strip extension now removes relevant obsmarkers.
    If a backup requested (the default), the obsmarkers are stored
    in the backup bundle and will be restored when unbundling.
  * hg show work (from the experimental show extension) now
    displays more info
  * hg show stack is a new view for the current, in-progress
    changeset and others around it
  * Mitigation for two security vulnerabilities</changelog>
  <changelog author="develop7@develop7.info" date="1509883200">- Mercurial 4.4
  Notable changes
    Control whitespace settings for annotation on hgweb
  * /annotate URLs on hgweb now accept query string arguments to influence how
    whitespace changes impact results.
  * The arguments "ignorews," "ignorewsamount," "ignorewseol," and
    "ignoreblanklines" now have the same meaning as their [annotate] config
    section counterparts. Any provided setting overrides the server default.
  * HTML checkboxes have been added to the paper and gitweb themes to expose
    current whitespace settings and to easily modify the current view.
    Fast, heuristic copy-tracing
    A new fast heuristic algorithm for copytracing which assumes that the
    files moves are either:
    1. renames in the same directory
    2. moves in other directories with same names
    You can use this algorithm by setting 'experimental.copytrace=heuristics'.
    This setting performs full copytracing if both source and destination
    branches contains non-public changesets only.
    Other changes
  * Estimated time is more accurate with non-linear progress
  * "hg status -v" can now show unfinished state. For example, when in an
    unfinished rebase state, "hg status -v" might show:
    [#] The repository is in an unfinished *rebase* state.
    [#] No unresolved merge conflicts.
    [#] To continue:                hg rebase --continue
    [#] To abort:                   hg rebase --abort
  * Added '--ignore-space-at-eol' diff option to ignore whitespace
    differences at line endings.
  * show: use consistent node length in views
  * show: decrease minimum displayed hash length from 5 to 4
  * A new uncommit extension which provides 'hg uncommit' using which one
    can uncommit part or all of the changeset. This command undoes the
    effect of a local commit, returning the affected files to their
    uncommitted state.
  * 'hg clone --uncompressed' uses clone bundles when possible
  * 'hg annotate --skip' now prints a '*' on lines with skipped revisions
  * New 'commands.update.check' feature to adjust constraints on when
    'hg update' will allow updates with a dirty working copy.
  * Add an experimental -L/--line-range FILE,FROMLINE:TOLINE option to
    'hg log' command to follow the history of files by line range. In
    combination with -p/--patch option, only diff hunks within specified
    line range will be displayed. Feedback, especially on UX aspects, is
    welcome.
  * Print warning when fsmonitor isn't being used on a large repository
  Read rest of the changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.4_.282017-11-01.29
- Mercurial 4.3.3
  * Prevent crashes when clearing progress bar. (issue5684)
  * rebase: move bookmarks with --keep (issue5682)
- Mercurial 4.3.2
  * restore compatibility with older versions of Python 2.7 by not using a
    bytearray with struct.unpack_from()
  * restore mingw compatibility for setup.py
  * hgwebdir: read 'web.template' untrusted (plugs potential security issue)
  * repair: preserve phase when not using generaldelta (issue5678)
  * ssh: fix flakey ssh errors on BSD systems
  * restore error handling behavior around certain I/O errors; the regressed
    behavior could result in transactions not being properly rolled back if
    stdio handles encountered errors (issue5658)
  * templatekw: choose {latesttag} by len(changes), not date (issue5659)
  * record: fix revert -i for lines without newline (issue5651)
  * mq: create non-lossy patches, also with custom global diff configuration
- Fixed README file name (now it's README.rst)</changelog>
  <changelog author="develop7@develop7.info" date="1510401600">- Mercurial 4.4.1
  1. Notable changes
  * Git and Subversion subrepos have been disabled by default to mitigate a
    potential security risk if files overlapping with a subrepo managed to be
    committed to a repository.
    bsc#1071715 CVE-2017-17458
  * Subrepos are now more paranoid about symlink traversal.
  * The share extension handles drive letters on Windows better.
  It is possible that a specially malformed repository can cause Git
  subrepositories to run arbitrary code in the form of a .git/hooks/post-update
  script checked in to the repository in Mercurial 4.4 and earlier. Typical use
  of Mercurial prevents construction of such repositories, but they can be
  created programmatically.</changelog>
  <changelog author="develop7@develop7.info" date="1517745600">- Mercurial 4.5
  See full changelog on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5-rc_.282018-01-22.29
  1. New Features
    1.1. revert --interactive
    The revert command now accepts the flag --interactive to allow reverting
    only some of the changes to the specified files.
    1.2. Accessing hidden changesets
    Set config option `experimental.directaccess = True` to access hidden
    changesets from read only commands.
    1.3. githelp extension
    The githelp extension provides the `hg githelp` command. This command
    attempts to convert a git command to its Mercurial equivalent. The
    extension can be useful to Git users new to Mercurial.
    1.4. Largefiles changes
    largefiles: add a 'debuglfput' command to put largefile into the store
    largefiles: add support for 'largefiles://' url scheme
    largefiles: allow to run 'debugupgraderepo' on repo with largefiles
    largefiles: convert EOL of hgrc before appending to bytes IO
    largefiles: explicitly set the source and sink types to 'hg' for lfconvert
    largefiles: modernize how capabilities are added to the wire protocol
  2. hgweb changes
    hgweb now shows more information about commits: phase (if it's not public),
    obsolescence status (with a short explanation and links to the successors)
    and instabilities (e.g. orphan, phase-divergent or content-divergent).
    Client-side graph code has been simplified by delegating more work to the
    backend, so /graph page is now more in sync with /log page, visually and
    feature-wise. Unfortunately, this code change means that 3rd-party themes
    for 4.5+ are required to have graphentry.tmpl template available (copy it
    from the base theme if you don't use %include and then reference it in map
    file) and render entries in graph.tmpl -- look at one of the core themes to
    see what it needs to look like. JS functions that create graph vertices and
    edges are now available in Graph.prototype, making it possible to call the
    original functions from custom theme-specific functions if needed.
    Graph now shows different symbols for normal, branch-closing, obsolete and
    unstable commits, and marks currently checked out commit with a circle
    around its graph node.
    There's also now json-graph API endpoint that can be used for rendering
    commit graph in 3rd-party applications.
  2.1. Other Changes
    When interactive revert is run against a revision other than the working
    directory parent, the diff shown is the diff to _apply_ to the working
    directory, rather than the diff to _discard_ from the working copy. This is
    in line with related user experiences with 'git' and appears to be less
    confusing with 'ui.interface=curses'.
    Let 'hg rebase' avoid content-divergence by skipping obsolete changesets
    (and their descendants) when they are present in the rebase set along with
    one of their successors but none of their successors is in destination.
    A new experimental config flag, `rebase.experimental.inmemory`, makes
    rebase perform an in-memory merge instead of doing it on-disk in the
    working copy.
    The `HGPLAINEXCEPT` environment variable can now include color to allow
    automatic output colorization in otherwise automated environments.
    A new `unamend` command in `uncommit` extension which undoes the effect of
    the amend command by creating a new changeset which was there before amend
    and moving the changes that were amended to the working directory.
    A '--abort' flag to merge command to abort the ongoing merge.
    An experimental flag '--rev' to 'hg branch' which can be used to change
    branch of changesets.
    bundle2 read I/O significantly improved
    bundle2 memory use significantly reduced during read
    clonebundle: it is now possible to serve the clonebundle using a git-lfs
    compatible server.
    templatefilters: add slashpath() to convert path separator to slash
    (issue5572)
    A new experimental config flag, 'inline-color-diff', adds within-line color
    diff capacity
    histedit: add support to output nodechanges using formatter to help with
    editor integrations
  3. Backwards Compatibility Changes
    `log --follow-first -rREV`, which is deprecated, now follows the first
    parent of merge revisions from the specified REV just like
    `log --follow -rREV`.
    `log --follow -rREV FILE..` now follows file history across copies and
    renames.
    transaction: register summary callbacks only at start of transaction
    hgweb's graph view no longer supports browsers that lack &lt;canvas&gt; support
    hgweb: only include graph-related data in jsdata variable on /graph pages
    graphlog: add another graph node type, unstable, using character *
    remove: print message for each file in verbose mode only while using '-A'</changelog>
  <changelog author="develop7@develop7.info" date="1520424000">- Mercurial 4.5.2
  (4.5.2 was released immediately after 4.5.1 to fix a release oversight.)
  1. Security Fixes (CVE-2018-1000132,bsc#1085211)
    All versions of Mercurial prior to 4.5.2 have vulnerabilities in the HTTP
    server that allow permissions bypass to:
  * Perform writes on repositories that should be read-only
  * Perform reads on repositories that shouldn't allow read access
  2. Backwards Compatibility Changes
    The "batch" wire protocol command now enforces permissions of each invoked
    sub-command. Wire protocol commands must define their operation type or the
    "batch" command will assume they can write data and will prevent their
    execution on HTTP servers unless the HTTP request method is POST, the
    server is configured to allow pushes, and the (possibly authenticated) HTTP
    user is authorized to perform a push.
    Wire protocol commands not defining their operation type in
    "wireproto.PERMISSIONS" are now assumed to be used for "push" operations
    and access control to run those commands is now enforced accordingly.
  3. Bug Fixes
    fileset: don't abort when running copied() on a revision with a removed file
    date: fix parsing months
    setup: only allow Python 3 from a source checkout (issue5804)
    annotate: do not poorly split lines at CR (issue5798)
    subrepo: don't attempt to share remote sources (issue5793)
    subrepo: activate clone pooling to enable sharing with remote URLs
    changegroup: do not delta lfs revisions
    revlog: do not use delta for lfs revisions
    revlog: resolve lfs rawtext to vanilla rawtext before applying delta
  See full cnahgelog on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5.1_.2F_4.5.2_.282018-03-06.29</changelog>
  <changelog author="develop7@develop7.info" date="1520683200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="tiwai@suse.de" date="1530878400">- Fix security issues in mpatch overflow and other misbehavior
  (CVE-2018-13346, bsc#1100354, CVE-2018-13347, bsc#1100355,
  CVE-2018-13348, bsc#1100353):
  hg-mpatch-fix01.patch
  hg-mpatch-fix02.patch
  hg-mpatch-fix03.patch
  hg-mpatch-fix04.patch
  hg-mpatch-fix05.patch
  hg-mpatch-fix06.patch
  hg-mpatch-fix07.patch
  hg-mpatch-fix08.patch
  hg-mpatch-fix09.patch</changelog>
</package>
<package pkgid="d15ecbb7c186747a7b3956d8cab336a685f4a481a5b2a580ea70d0d13691d117" name="mercurial" arch="src">
  <version epoch="0" ver="4.5.2" rel="lp150.2.6.1"/>
  <changelog author="develop7@develop7.info" date="1462276800">- fix mercurial-locale-fix.patch</changelog>
  <changelog author="develop7@develop7.info" date="1463486400">- Mercurial v3.8.2
  This is an unscheduled bugfix release. 3.8.1 contained a noisy deprecation
  warning that was only intended for Mercurial developers, sorry.
  * bookmarks: properly invalidate volatile sets when writing bookmarks
  * builddeb: add distroseries to tagged versions
  * bundle2: properly request phases during getbundle
  * debian: add wish to suggests
  * debian: forgot to make debian/rules executable in 6b95a623ec90
  * deprecation: gate deprecation warning behind devel configuration
  * help: fix the display for hg help internals.revlogs (issue5227)
  * help: search section of help topic by translated section name correctly
  * hg-ssh: copy doc string to man page
  * patch: show lower-ed translated message correctly
  * progress: stop excessive clearing (issue4801)</changelog>
  <changelog author="astieger@suse.com" date="1465732800">- mercurial 3.8.3:
  * bookmarks: allow pushing active bookmark on new remote head
  * localrepo: prevent executable-bit only changes from being lost on amend
  * strip: invalidate phase cache after stripping changeset
- verify source signature</changelog>
  <changelog author="develop7@develop7.info" date="1470052800">- Mercurial v3.9
  + Features
  * ui.textwidth can now be set to define width of help text
  * separate() template function added
  * ui.rollback can be set to false to disable the hg rollback command
  * fail-&lt;command&gt; hooks now run when a command fails
  * experimental.graphstyle.* config options to control styling of graphs in
    console
  * experimental.histedit.autoverb allows histedit lines beginning with
    "verb!" to be interpreted as histedit actions
  * [hostsecurity] config section for defining advanced per-host security
    settings
  * ability to define the SHA-256 and SHA-512 hashes of pinned server
    certificates
  * ability to define CA certificates on a per-host basis
  * ability to define the minimum TLS protocol version on a global or
    per-host basis
  * sort() revset can now perform topological sorts using the topo option
  * hgweb can now render JSON for filelog, filerevision, summary, and search
    web commands
  * [paths] entries can now define a pushrev sub-option to control which
    revisions to push by default
  * The experimental 'journal' extension was added, allowing users to view
    the previous positions of bookmarks and the working copy
  + Improvements
    This release includes many improvements, including (but not limited to):
  * performance of `hg diff` has been improved
  * chg now detects more changes to the configuration and execution
    environment
  * SSL/TLS code has been significantly refactored and now is consistent
    across all consumers (HTTPS, SMTPS)
  * performance improvements to server communication (particularly for the
    largefiles and remotefilelog extensions)
  * connections to servers whose certificate authority (CA) is unknown are
    now refused even if no CA certificates are available (see SecureConnections for details)
  * fingerprints of server certificates are now printed using SHA-256
    instead of SHA-1
  * reads and writes to certain files is now robust and avoids more race
    conditions and edge cases (see ExactCacheValidationPlan)
  * performance improvements to certain revsets
  * cloning will no longer prompt for a password multiple times when cloning
    from a server that requires a password
  * annotate view in hgweb now groups lines into blocks depending on their
    revision and highlights lines for the current revision
  * hgweb now displays extra information and also navigation links in popups
    for each line in annotate view</changelog>
  <changelog author="develop7@develop7.info" date="1474286400">- Mercurial 3.9.1 (2016-9-1)
  This is a regularly-scheduled bugfix release.
  * bundle2: fail faster when interrupted
  * bundle2: localize handleoutput remote prompts
  * convert: move svn config initializer out of the module level
  * debian: update source URL in copyright file
  * exchange: correctly specify url to unbundle (issue5145)
  * help: add example of '[templates]' usage
  * help: update link to wiki/CommandServer
  * osx: update bugzilla link in readme
  * revset: fix keyword arguments to go through optimization process
  * win32: update link to mailing list in readme
  * win32: update wiki link in mercurial.ini</changelog>
  <changelog author="develop7@develop7.info" date="1478088000">- Mercurial 4.0
  This is a regularly-scheduled quarterly feature release. Unlike other
  4.0 software releases, this is simply 3.9 + .1, so it should be the usual
  pain-free upgrade.
  + Features
  * The following commands now also have experimental formatter support:
    'hg version', 'hg grep' and 'hg config'
  * New template keywords and functions: `termwidth`, `mod(a, b)`,
    `relpath(path)`
  * Basic arithmetic operations in template such as `termwidth - 10`
  * `follow()` revset takes new `startrev` parameter
  * Bash completion now allows skipping potentially expensive status call
    for completing 'hg status' arguments, using $HGCOMPLETE_NOSTATUS
    environment variable
  + Improvements
  * A number of changes were made to move and copy tracking, to make sure
    move and copy information is not lost during commands like 'hg graft'
  * Compound revset expression is now properly ordered
  * Python 3 support has received a lot of improvements (but will take a
    lot of additional work)
  * zlib performance in hgweb is improved, and it's possible to control zlib
    compression level using server.zliblevel option
- Refreshed mercurial-hgk-path-fix.diff and mercurial-locale-path-fix.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1483704000">- Update to version 4.0.2:
  * demandimport: do not raise ImportError for unknown item in
    fromlist
  * posix: make poll() restart on interruption by signal
  * hgweb: add missing slash to file log url in rss style
  * hgweb: cache fctx.parents() in annotate command
  * vfs, scmutil: ignore EPERM at os.utime, which avoids ambiguity
- Update package keyring</changelog>
  <changelog author="develop7@develop7.info" date="1485950400">- Mercurial 4.1
  This is a regularly-scheduled quarterly feature release.
  + Features
  * A new extensible "compression engines" API has been implemented. Support
    for a new compression format can now be implemented in extensions.
  * New compression formats are fully supported in bundles and the wire
    protocol. There is experimental support for different compression in
    revlogs.
  * zstd - a new and exciting compression engine - is now distributed with
    Mercurial and built by default
  * HTTP payloads for many commands will now use zstd by default (as opposed
    to zlib) when both client and server support it. This can reduce
    server-side CPU usage to ~60% of original for operations like serving
    bundles.
  * zstd compressed bundles can be produced by specifying the `zstd` bundle
    type. e.g. `hg bundle -a -t zstd-v2 zstd-bundle.hg`.
  * A new statistical profiler has been added and made the default profiler
    for `--profile`. This profiler gives more accurate results than Python's
    built-in cProfile (the previous default) because the profiler overhead is
    much smaller. The output from `--profile` now displays the code hot path
    by default. This allows Mercurial developers to more accurately identify
    performance problems.
  * New `followlines(file, from:to, startrev=.)` revset predicate to track a
    part of changes.
  * Experimental support for additional git-diff features.
  * Troubled changes (from ChangesetEvolution) are noted more prominently in a few places.
  * An experimental hg debugupgraderepo command allows in-place upgrading of
    repositories to the latest storage format.
  + Improvements
  * Performance of reading individual revlog entries has been greatly
    improved. This will be noticeable when performing changelog scans on
    large repositories (such as when executing certain revsets).
  * The low-level content diffing algorithm is now ~2x faster. Operations
    that write data to the repository (like commit) can be noticeably faster
    as a result.
  See complete changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.1_.282017-2-1.29
- refreshed mercurial-locale-path-fix.patch and mercurial-hgk-path-fix.diff
- refresh package keyring</changelog>
  <changelog author="develop7@develop7.info" date="1491307200">- Mercurial 4.1.2
  This is a regularly-scheduled bugfix release.
  + Mercurial should work inside IIS on Windows again. (issue5493)
  + zstd support now refuses to work on old bundle formats. (issue5506)
  + Merges involving subrepositories no longer crash in some cases. (issue5505)
  + Checking for new heads during push is no longer accidentally quadratic
- Mercurial 4.1.1
  This is a regularly-scheduled bugfix release.
  + Several incorrect mailing list addresses have been corrected.
  + Various error cases have been corrected during push and pull.
  + Minor issues that happened when Mercurial spawned worker processes have
    been fixed.</changelog>
  <changelog author="develop7@develop7.info" date="1494158400">- Mercurial 4.2
  This is a regularly-scheduled quarterly feature release.
  * Notable changes
    + Pager support has been moved into core and is now enabled by default.
    This is now controlled with the ui.paginate setting.
    Note that in 4.2-rc, the ui.paginate option was named pager.enable. The
    old name has been dropped in the final release. If you had turned
    pagination off using pager.enable=False, please update your config.
    + Color support has also been moved into core and is now enabled by default
    (the ui.color setting now defaults to 'auto').
    + The new experimental 'show' extension provides a way to view various
    information about your repository in an ergonomic way. It is deliberately
    designed for human consumption and not for scripting, so it doesn't carry
    the same backward compatibility guarantees as other commands. See
    'hg help -e show' for more information.
    + Mercurial now requires `setuptools` on Windows</changelog>
  <changelog author="develop7@develop7.info" date="1499256000">- Mercurial 4.2.2
  This is a regularly-scheduled bugfix release.
  * largefiles: avoid a crash when archiving a subrepo with largefiles disabled
  * rebase: also test abort from pretxnclose error
  * rebase: backed out changes 2519994d25ca and cf8ad0e6c0e4 (issue5610)
  * rebase: reinforce testing around precommit hook interrupting a rebase
- Mercurial 4.2.1
  This is a regularly-scheduled bugfix release.
  * `hg graft` now works when grafting across merges that were problematic
    before (b4e1e30528c7).
  * A race condition in `hg status` was partially fixed (issue5584).
  * The message about deprecated SHA-1 hashes in the [hostfingerprints] config
    section now references the correct syntax for replacing them with SHA-256
    hashes (issue5559).</changelog>
  <changelog author="tiwai@suse.de" date="1502366400">- mercurial 4.2.3: security fix updates for
  CVE-2017-1000115 and CVE-2017-1000116:
  * Mercurial's symlink auditing was incomplete prior to 4.3, and
    could be abused to write to files outside the repository
    (CVE-2017-1000115 bsc#1053344)
  * Mercurial was not sanitizing hostnames passed to ssh, allowing
    shell injection attacks by specifying a hostname starting with
  - oProxyCommand (CVE-2017-1000116, bsc#1052696)</changelog>
  <changelog author="tiwai@suse.de" date="1502798400">- Mercurial 4.3.1:
  This is a regularly-scheduled quarterly feature release,
  including the previous two security fixes (CVE-2017-1000115,
  CVE-2017-1000116)
  Notable changes:
  * experimental amend extension providing the amend command
  * experimental sparse extension
  * Support for Python 2.6 has been dropped.
  * Bundles created by the strip extension now store phase
    information. It will be restored when unbundling.
  * The strip extension now removes relevant obsmarkers.
    If a backup requested (the default), the obsmarkers are stored
    in the backup bundle and will be restored when unbundling.
  * hg show work (from the experimental show extension) now
    displays more info
  * hg show stack is a new view for the current, in-progress
    changeset and others around it
  * Mitigation for two security vulnerabilities</changelog>
  <changelog author="develop7@develop7.info" date="1509883200">- Mercurial 4.4
  Notable changes
    Control whitespace settings for annotation on hgweb
  * /annotate URLs on hgweb now accept query string arguments to influence how
    whitespace changes impact results.
  * The arguments "ignorews," "ignorewsamount," "ignorewseol," and
    "ignoreblanklines" now have the same meaning as their [annotate] config
    section counterparts. Any provided setting overrides the server default.
  * HTML checkboxes have been added to the paper and gitweb themes to expose
    current whitespace settings and to easily modify the current view.
    Fast, heuristic copy-tracing
    A new fast heuristic algorithm for copytracing which assumes that the
    files moves are either:
    1. renames in the same directory
    2. moves in other directories with same names
    You can use this algorithm by setting 'experimental.copytrace=heuristics'.
    This setting performs full copytracing if both source and destination
    branches contains non-public changesets only.
    Other changes
  * Estimated time is more accurate with non-linear progress
  * "hg status -v" can now show unfinished state. For example, when in an
    unfinished rebase state, "hg status -v" might show:
    [#] The repository is in an unfinished *rebase* state.
    [#] No unresolved merge conflicts.
    [#] To continue:                hg rebase --continue
    [#] To abort:                   hg rebase --abort
  * Added '--ignore-space-at-eol' diff option to ignore whitespace
    differences at line endings.
  * show: use consistent node length in views
  * show: decrease minimum displayed hash length from 5 to 4
  * A new uncommit extension which provides 'hg uncommit' using which one
    can uncommit part or all of the changeset. This command undoes the
    effect of a local commit, returning the affected files to their
    uncommitted state.
  * 'hg clone --uncompressed' uses clone bundles when possible
  * 'hg annotate --skip' now prints a '*' on lines with skipped revisions
  * New 'commands.update.check' feature to adjust constraints on when
    'hg update' will allow updates with a dirty working copy.
  * Add an experimental -L/--line-range FILE,FROMLINE:TOLINE option to
    'hg log' command to follow the history of files by line range. In
    combination with -p/--patch option, only diff hunks within specified
    line range will be displayed. Feedback, especially on UX aspects, is
    welcome.
  * Print warning when fsmonitor isn't being used on a large repository
  Read rest of the changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.4_.282017-11-01.29
- Mercurial 4.3.3
  * Prevent crashes when clearing progress bar. (issue5684)
  * rebase: move bookmarks with --keep (issue5682)
- Mercurial 4.3.2
  * restore compatibility with older versions of Python 2.7 by not using a
    bytearray with struct.unpack_from()
  * restore mingw compatibility for setup.py
  * hgwebdir: read 'web.template' untrusted (plugs potential security issue)
  * repair: preserve phase when not using generaldelta (issue5678)
  * ssh: fix flakey ssh errors on BSD systems
  * restore error handling behavior around certain I/O errors; the regressed
    behavior could result in transactions not being properly rolled back if
    stdio handles encountered errors (issue5658)
  * templatekw: choose {latesttag} by len(changes), not date (issue5659)
  * record: fix revert -i for lines without newline (issue5651)
  * mq: create non-lossy patches, also with custom global diff configuration
- Fixed README file name (now it's README.rst)</changelog>
  <changelog author="develop7@develop7.info" date="1510401600">- Mercurial 4.4.1
  1. Notable changes
  * Git and Subversion subrepos have been disabled by default to mitigate a
    potential security risk if files overlapping with a subrepo managed to be
    committed to a repository.
    bsc#1071715 CVE-2017-17458
  * Subrepos are now more paranoid about symlink traversal.
  * The share extension handles drive letters on Windows better.
  It is possible that a specially malformed repository can cause Git
  subrepositories to run arbitrary code in the form of a .git/hooks/post-update
  script checked in to the repository in Mercurial 4.4 and earlier. Typical use
  of Mercurial prevents construction of such repositories, but they can be
  created programmatically.</changelog>
  <changelog author="develop7@develop7.info" date="1517745600">- Mercurial 4.5
  See full changelog on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5-rc_.282018-01-22.29
  1. New Features
    1.1. revert --interactive
    The revert command now accepts the flag --interactive to allow reverting
    only some of the changes to the specified files.
    1.2. Accessing hidden changesets
    Set config option `experimental.directaccess = True` to access hidden
    changesets from read only commands.
    1.3. githelp extension
    The githelp extension provides the `hg githelp` command. This command
    attempts to convert a git command to its Mercurial equivalent. The
    extension can be useful to Git users new to Mercurial.
    1.4. Largefiles changes
    largefiles: add a 'debuglfput' command to put largefile into the store
    largefiles: add support for 'largefiles://' url scheme
    largefiles: allow to run 'debugupgraderepo' on repo with largefiles
    largefiles: convert EOL of hgrc before appending to bytes IO
    largefiles: explicitly set the source and sink types to 'hg' for lfconvert
    largefiles: modernize how capabilities are added to the wire protocol
  2. hgweb changes
    hgweb now shows more information about commits: phase (if it's not public),
    obsolescence status (with a short explanation and links to the successors)
    and instabilities (e.g. orphan, phase-divergent or content-divergent).
    Client-side graph code has been simplified by delegating more work to the
    backend, so /graph page is now more in sync with /log page, visually and
    feature-wise. Unfortunately, this code change means that 3rd-party themes
    for 4.5+ are required to have graphentry.tmpl template available (copy it
    from the base theme if you don't use %include and then reference it in map
    file) and render entries in graph.tmpl -- look at one of the core themes to
    see what it needs to look like. JS functions that create graph vertices and
    edges are now available in Graph.prototype, making it possible to call the
    original functions from custom theme-specific functions if needed.
    Graph now shows different symbols for normal, branch-closing, obsolete and
    unstable commits, and marks currently checked out commit with a circle
    around its graph node.
    There's also now json-graph API endpoint that can be used for rendering
    commit graph in 3rd-party applications.
  2.1. Other Changes
    When interactive revert is run against a revision other than the working
    directory parent, the diff shown is the diff to _apply_ to the working
    directory, rather than the diff to _discard_ from the working copy. This is
    in line with related user experiences with 'git' and appears to be less
    confusing with 'ui.interface=curses'.
    Let 'hg rebase' avoid content-divergence by skipping obsolete changesets
    (and their descendants) when they are present in the rebase set along with
    one of their successors but none of their successors is in destination.
    A new experimental config flag, `rebase.experimental.inmemory`, makes
    rebase perform an in-memory merge instead of doing it on-disk in the
    working copy.
    The `HGPLAINEXCEPT` environment variable can now include color to allow
    automatic output colorization in otherwise automated environments.
    A new `unamend` command in `uncommit` extension which undoes the effect of
    the amend command by creating a new changeset which was there before amend
    and moving the changes that were amended to the working directory.
    A '--abort' flag to merge command to abort the ongoing merge.
    An experimental flag '--rev' to 'hg branch' which can be used to change
    branch of changesets.
    bundle2 read I/O significantly improved
    bundle2 memory use significantly reduced during read
    clonebundle: it is now possible to serve the clonebundle using a git-lfs
    compatible server.
    templatefilters: add slashpath() to convert path separator to slash
    (issue5572)
    A new experimental config flag, 'inline-color-diff', adds within-line color
    diff capacity
    histedit: add support to output nodechanges using formatter to help with
    editor integrations
  3. Backwards Compatibility Changes
    `log --follow-first -rREV`, which is deprecated, now follows the first
    parent of merge revisions from the specified REV just like
    `log --follow -rREV`.
    `log --follow -rREV FILE..` now follows file history across copies and
    renames.
    transaction: register summary callbacks only at start of transaction
    hgweb's graph view no longer supports browsers that lack &lt;canvas&gt; support
    hgweb: only include graph-related data in jsdata variable on /graph pages
    graphlog: add another graph node type, unstable, using character *
    remove: print message for each file in verbose mode only while using '-A'</changelog>
  <changelog author="develop7@develop7.info" date="1520424000">- Mercurial 4.5.2
  (4.5.2 was released immediately after 4.5.1 to fix a release oversight.)
  1. Security Fixes (CVE-2018-1000132,bsc#1085211)
    All versions of Mercurial prior to 4.5.2 have vulnerabilities in the HTTP
    server that allow permissions bypass to:
  * Perform writes on repositories that should be read-only
  * Perform reads on repositories that shouldn't allow read access
  2. Backwards Compatibility Changes
    The "batch" wire protocol command now enforces permissions of each invoked
    sub-command. Wire protocol commands must define their operation type or the
    "batch" command will assume they can write data and will prevent their
    execution on HTTP servers unless the HTTP request method is POST, the
    server is configured to allow pushes, and the (possibly authenticated) HTTP
    user is authorized to perform a push.
    Wire protocol commands not defining their operation type in
    "wireproto.PERMISSIONS" are now assumed to be used for "push" operations
    and access control to run those commands is now enforced accordingly.
  3. Bug Fixes
    fileset: don't abort when running copied() on a revision with a removed file
    date: fix parsing months
    setup: only allow Python 3 from a source checkout (issue5804)
    annotate: do not poorly split lines at CR (issue5798)
    subrepo: don't attempt to share remote sources (issue5793)
    subrepo: activate clone pooling to enable sharing with remote URLs
    changegroup: do not delta lfs revisions
    revlog: do not use delta for lfs revisions
    revlog: resolve lfs rawtext to vanilla rawtext before applying delta
  See full cnahgelog on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5.1_.2F_4.5.2_.282018-03-06.29</changelog>
  <changelog author="develop7@develop7.info" date="1520683200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="tiwai@suse.de" date="1530878400">- Fix security issues in mpatch overflow and other misbehavior
  (CVE-2018-13346, bsc#1100354, CVE-2018-13347, bsc#1100355,
  CVE-2018-13348, bsc#1100353):
  hg-mpatch-fix01.patch
  hg-mpatch-fix02.patch
  hg-mpatch-fix03.patch
  hg-mpatch-fix04.patch
  hg-mpatch-fix05.patch
  hg-mpatch-fix06.patch
  hg-mpatch-fix07.patch
  hg-mpatch-fix08.patch
  hg-mpatch-fix09.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539086400">- Fix out-of-bounds read during parsing of a malformed manifest
  entry (CVE-2018-17983, bsc#1110899):
  hg-CVE-2018-17983.patch</changelog>
</package>
<package pkgid="a54de23a5abcf0f923709337524811b40a1a721689844003d84f72279d32a399" name="mercurial" arch="x86_64">
  <version epoch="0" ver="4.5.2" rel="lp150.2.6.1"/>
  <changelog author="develop7@develop7.info" date="1462276800">- fix mercurial-locale-fix.patch</changelog>
  <changelog author="develop7@develop7.info" date="1463486400">- Mercurial v3.8.2
  This is an unscheduled bugfix release. 3.8.1 contained a noisy deprecation
  warning that was only intended for Mercurial developers, sorry.
  * bookmarks: properly invalidate volatile sets when writing bookmarks
  * builddeb: add distroseries to tagged versions
  * bundle2: properly request phases during getbundle
  * debian: add wish to suggests
  * debian: forgot to make debian/rules executable in 6b95a623ec90
  * deprecation: gate deprecation warning behind devel configuration
  * help: fix the display for hg help internals.revlogs (issue5227)
  * help: search section of help topic by translated section name correctly
  * hg-ssh: copy doc string to man page
  * patch: show lower-ed translated message correctly
  * progress: stop excessive clearing (issue4801)</changelog>
  <changelog author="astieger@suse.com" date="1465732800">- mercurial 3.8.3:
  * bookmarks: allow pushing active bookmark on new remote head
  * localrepo: prevent executable-bit only changes from being lost on amend
  * strip: invalidate phase cache after stripping changeset
- verify source signature</changelog>
  <changelog author="develop7@develop7.info" date="1470052800">- Mercurial v3.9
  + Features
  * ui.textwidth can now be set to define width of help text
  * separate() template function added
  * ui.rollback can be set to false to disable the hg rollback command
  * fail-&lt;command&gt; hooks now run when a command fails
  * experimental.graphstyle.* config options to control styling of graphs in
    console
  * experimental.histedit.autoverb allows histedit lines beginning with
    "verb!" to be interpreted as histedit actions
  * [hostsecurity] config section for defining advanced per-host security
    settings
  * ability to define the SHA-256 and SHA-512 hashes of pinned server
    certificates
  * ability to define CA certificates on a per-host basis
  * ability to define the minimum TLS protocol version on a global or
    per-host basis
  * sort() revset can now perform topological sorts using the topo option
  * hgweb can now render JSON for filelog, filerevision, summary, and search
    web commands
  * [paths] entries can now define a pushrev sub-option to control which
    revisions to push by default
  * The experimental 'journal' extension was added, allowing users to view
    the previous positions of bookmarks and the working copy
  + Improvements
    This release includes many improvements, including (but not limited to):
  * performance of `hg diff` has been improved
  * chg now detects more changes to the configuration and execution
    environment
  * SSL/TLS code has been significantly refactored and now is consistent
    across all consumers (HTTPS, SMTPS)
  * performance improvements to server communication (particularly for the
    largefiles and remotefilelog extensions)
  * connections to servers whose certificate authority (CA) is unknown are
    now refused even if no CA certificates are available (see SecureConnections for details)
  * fingerprints of server certificates are now printed using SHA-256
    instead of SHA-1
  * reads and writes to certain files is now robust and avoids more race
    conditions and edge cases (see ExactCacheValidationPlan)
  * performance improvements to certain revsets
  * cloning will no longer prompt for a password multiple times when cloning
    from a server that requires a password
  * annotate view in hgweb now groups lines into blocks depending on their
    revision and highlights lines for the current revision
  * hgweb now displays extra information and also navigation links in popups
    for each line in annotate view</changelog>
  <changelog author="develop7@develop7.info" date="1474286400">- Mercurial 3.9.1 (2016-9-1)
  This is a regularly-scheduled bugfix release.
  * bundle2: fail faster when interrupted
  * bundle2: localize handleoutput remote prompts
  * convert: move svn config initializer out of the module level
  * debian: update source URL in copyright file
  * exchange: correctly specify url to unbundle (issue5145)
  * help: add example of '[templates]' usage
  * help: update link to wiki/CommandServer
  * osx: update bugzilla link in readme
  * revset: fix keyword arguments to go through optimization process
  * win32: update link to mailing list in readme
  * win32: update wiki link in mercurial.ini</changelog>
  <changelog author="develop7@develop7.info" date="1478088000">- Mercurial 4.0
  This is a regularly-scheduled quarterly feature release. Unlike other
  4.0 software releases, this is simply 3.9 + .1, so it should be the usual
  pain-free upgrade.
  + Features
  * The following commands now also have experimental formatter support:
    'hg version', 'hg grep' and 'hg config'
  * New template keywords and functions: `termwidth`, `mod(a, b)`,
    `relpath(path)`
  * Basic arithmetic operations in template such as `termwidth - 10`
  * `follow()` revset takes new `startrev` parameter
  * Bash completion now allows skipping potentially expensive status call
    for completing 'hg status' arguments, using $HGCOMPLETE_NOSTATUS
    environment variable
  + Improvements
  * A number of changes were made to move and copy tracking, to make sure
    move and copy information is not lost during commands like 'hg graft'
  * Compound revset expression is now properly ordered
  * Python 3 support has received a lot of improvements (but will take a
    lot of additional work)
  * zlib performance in hgweb is improved, and it's possible to control zlib
    compression level using server.zliblevel option
- Refreshed mercurial-hgk-path-fix.diff and mercurial-locale-path-fix.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1483704000">- Update to version 4.0.2:
  * demandimport: do not raise ImportError for unknown item in
    fromlist
  * posix: make poll() restart on interruption by signal
  * hgweb: add missing slash to file log url in rss style
  * hgweb: cache fctx.parents() in annotate command
  * vfs, scmutil: ignore EPERM at os.utime, which avoids ambiguity
- Update package keyring</changelog>
  <changelog author="develop7@develop7.info" date="1485950400">- Mercurial 4.1
  This is a regularly-scheduled quarterly feature release.
  + Features
  * A new extensible "compression engines" API has been implemented. Support
    for a new compression format can now be implemented in extensions.
  * New compression formats are fully supported in bundles and the wire
    protocol. There is experimental support for different compression in
    revlogs.
  * zstd - a new and exciting compression engine - is now distributed with
    Mercurial and built by default
  * HTTP payloads for many commands will now use zstd by default (as opposed
    to zlib) when both client and server support it. This can reduce
    server-side CPU usage to ~60% of original for operations like serving
    bundles.
  * zstd compressed bundles can be produced by specifying the `zstd` bundle
    type. e.g. `hg bundle -a -t zstd-v2 zstd-bundle.hg`.
  * A new statistical profiler has been added and made the default profiler
    for `--profile`. This profiler gives more accurate results than Python's
    built-in cProfile (the previous default) because the profiler overhead is
    much smaller. The output from `--profile` now displays the code hot path
    by default. This allows Mercurial developers to more accurately identify
    performance problems.
  * New `followlines(file, from:to, startrev=.)` revset predicate to track a
    part of changes.
  * Experimental support for additional git-diff features.
  * Troubled changes (from ChangesetEvolution) are noted more prominently in a few places.
  * An experimental hg debugupgraderepo command allows in-place upgrading of
    repositories to the latest storage format.
  + Improvements
  * Performance of reading individual revlog entries has been greatly
    improved. This will be noticeable when performing changelog scans on
    large repositories (such as when executing certain revsets).
  * The low-level content diffing algorithm is now ~2x faster. Operations
    that write data to the repository (like commit) can be noticeably faster
    as a result.
  See complete changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.1_.282017-2-1.29
- refreshed mercurial-locale-path-fix.patch and mercurial-hgk-path-fix.diff
- refresh package keyring</changelog>
  <changelog author="develop7@develop7.info" date="1491307200">- Mercurial 4.1.2
  This is a regularly-scheduled bugfix release.
  + Mercurial should work inside IIS on Windows again. (issue5493)
  + zstd support now refuses to work on old bundle formats. (issue5506)
  + Merges involving subrepositories no longer crash in some cases. (issue5505)
  + Checking for new heads during push is no longer accidentally quadratic
- Mercurial 4.1.1
  This is a regularly-scheduled bugfix release.
  + Several incorrect mailing list addresses have been corrected.
  + Various error cases have been corrected during push and pull.
  + Minor issues that happened when Mercurial spawned worker processes have
    been fixed.</changelog>
  <changelog author="develop7@develop7.info" date="1494158400">- Mercurial 4.2
  This is a regularly-scheduled quarterly feature release.
  * Notable changes
    + Pager support has been moved into core and is now enabled by default.
    This is now controlled with the ui.paginate setting.
    Note that in 4.2-rc, the ui.paginate option was named pager.enable. The
    old name has been dropped in the final release. If you had turned
    pagination off using pager.enable=False, please update your config.
    + Color support has also been moved into core and is now enabled by default
    (the ui.color setting now defaults to 'auto').
    + The new experimental 'show' extension provides a way to view various
    information about your repository in an ergonomic way. It is deliberately
    designed for human consumption and not for scripting, so it doesn't carry
    the same backward compatibility guarantees as other commands. See
    'hg help -e show' for more information.
    + Mercurial now requires `setuptools` on Windows</changelog>
  <changelog author="develop7@develop7.info" date="1499256000">- Mercurial 4.2.2
  This is a regularly-scheduled bugfix release.
  * largefiles: avoid a crash when archiving a subrepo with largefiles disabled
  * rebase: also test abort from pretxnclose error
  * rebase: backed out changes 2519994d25ca and cf8ad0e6c0e4 (issue5610)
  * rebase: reinforce testing around precommit hook interrupting a rebase
- Mercurial 4.2.1
  This is a regularly-scheduled bugfix release.
  * `hg graft` now works when grafting across merges that were problematic
    before (b4e1e30528c7).
  * A race condition in `hg status` was partially fixed (issue5584).
  * The message about deprecated SHA-1 hashes in the [hostfingerprints] config
    section now references the correct syntax for replacing them with SHA-256
    hashes (issue5559).</changelog>
  <changelog author="tiwai@suse.de" date="1502366400">- mercurial 4.2.3: security fix updates for
  CVE-2017-1000115 and CVE-2017-1000116:
  * Mercurial's symlink auditing was incomplete prior to 4.3, and
    could be abused to write to files outside the repository
    (CVE-2017-1000115 bsc#1053344)
  * Mercurial was not sanitizing hostnames passed to ssh, allowing
    shell injection attacks by specifying a hostname starting with
  - oProxyCommand (CVE-2017-1000116, bsc#1052696)</changelog>
  <changelog author="tiwai@suse.de" date="1502798400">- Mercurial 4.3.1:
  This is a regularly-scheduled quarterly feature release,
  including the previous two security fixes (CVE-2017-1000115,
  CVE-2017-1000116)
  Notable changes:
  * experimental amend extension providing the amend command
  * experimental sparse extension
  * Support for Python 2.6 has been dropped.
  * Bundles created by the strip extension now store phase
    information. It will be restored when unbundling.
  * The strip extension now removes relevant obsmarkers.
    If a backup requested (the default), the obsmarkers are stored
    in the backup bundle and will be restored when unbundling.
  * hg show work (from the experimental show extension) now
    displays more info
  * hg show stack is a new view for the current, in-progress
    changeset and others around it
  * Mitigation for two security vulnerabilities</changelog>
  <changelog author="develop7@develop7.info" date="1509883200">- Mercurial 4.4
  Notable changes
    Control whitespace settings for annotation on hgweb
  * /annotate URLs on hgweb now accept query string arguments to influence how
    whitespace changes impact results.
  * The arguments "ignorews," "ignorewsamount," "ignorewseol," and
    "ignoreblanklines" now have the same meaning as their [annotate] config
    section counterparts. Any provided setting overrides the server default.
  * HTML checkboxes have been added to the paper and gitweb themes to expose
    current whitespace settings and to easily modify the current view.
    Fast, heuristic copy-tracing
    A new fast heuristic algorithm for copytracing which assumes that the
    files moves are either:
    1. renames in the same directory
    2. moves in other directories with same names
    You can use this algorithm by setting 'experimental.copytrace=heuristics'.
    This setting performs full copytracing if both source and destination
    branches contains non-public changesets only.
    Other changes
  * Estimated time is more accurate with non-linear progress
  * "hg status -v" can now show unfinished state. For example, when in an
    unfinished rebase state, "hg status -v" might show:
    [#] The repository is in an unfinished *rebase* state.
    [#] No unresolved merge conflicts.
    [#] To continue:                hg rebase --continue
    [#] To abort:                   hg rebase --abort
  * Added '--ignore-space-at-eol' diff option to ignore whitespace
    differences at line endings.
  * show: use consistent node length in views
  * show: decrease minimum displayed hash length from 5 to 4
  * A new uncommit extension which provides 'hg uncommit' using which one
    can uncommit part or all of the changeset. This command undoes the
    effect of a local commit, returning the affected files to their
    uncommitted state.
  * 'hg clone --uncompressed' uses clone bundles when possible
  * 'hg annotate --skip' now prints a '*' on lines with skipped revisions
  * New 'commands.update.check' feature to adjust constraints on when
    'hg update' will allow updates with a dirty working copy.
  * Add an experimental -L/--line-range FILE,FROMLINE:TOLINE option to
    'hg log' command to follow the history of files by line range. In
    combination with -p/--patch option, only diff hunks within specified
    line range will be displayed. Feedback, especially on UX aspects, is
    welcome.
  * Print warning when fsmonitor isn't being used on a large repository
  Read rest of the changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.4_.282017-11-01.29
- Mercurial 4.3.3
  * Prevent crashes when clearing progress bar. (issue5684)
  * rebase: move bookmarks with --keep (issue5682)
- Mercurial 4.3.2
  * restore compatibility with older versions of Python 2.7 by not using a
    bytearray with struct.unpack_from()
  * restore mingw compatibility for setup.py
  * hgwebdir: read 'web.template' untrusted (plugs potential security issue)
  * repair: preserve phase when not using generaldelta (issue5678)
  * ssh: fix flakey ssh errors on BSD systems
  * restore error handling behavior around certain I/O errors; the regressed
    behavior could result in transactions not being properly rolled back if
    stdio handles encountered errors (issue5658)
  * templatekw: choose {latesttag} by len(changes), not date (issue5659)
  * record: fix revert -i for lines without newline (issue5651)
  * mq: create non-lossy patches, also with custom global diff configuration
- Fixed README file name (now it's README.rst)</changelog>
  <changelog author="develop7@develop7.info" date="1510401600">- Mercurial 4.4.1
  1. Notable changes
  * Git and Subversion subrepos have been disabled by default to mitigate a
    potential security risk if files overlapping with a subrepo managed to be
    committed to a repository.
    bsc#1071715 CVE-2017-17458
  * Subrepos are now more paranoid about symlink traversal.
  * The share extension handles drive letters on Windows better.
  It is possible that a specially malformed repository can cause Git
  subrepositories to run arbitrary code in the form of a .git/hooks/post-update
  script checked in to the repository in Mercurial 4.4 and earlier. Typical use
  of Mercurial prevents construction of such repositories, but they can be
  created programmatically.</changelog>
  <changelog author="develop7@develop7.info" date="1517745600">- Mercurial 4.5
  See full changelog on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5-rc_.282018-01-22.29
  1. New Features
    1.1. revert --interactive
    The revert command now accepts the flag --interactive to allow reverting
    only some of the changes to the specified files.
    1.2. Accessing hidden changesets
    Set config option `experimental.directaccess = True` to access hidden
    changesets from read only commands.
    1.3. githelp extension
    The githelp extension provides the `hg githelp` command. This command
    attempts to convert a git command to its Mercurial equivalent. The
    extension can be useful to Git users new to Mercurial.
    1.4. Largefiles changes
    largefiles: add a 'debuglfput' command to put largefile into the store
    largefiles: add support for 'largefiles://' url scheme
    largefiles: allow to run 'debugupgraderepo' on repo with largefiles
    largefiles: convert EOL of hgrc before appending to bytes IO
    largefiles: explicitly set the source and sink types to 'hg' for lfconvert
    largefiles: modernize how capabilities are added to the wire protocol
  2. hgweb changes
    hgweb now shows more information about commits: phase (if it's not public),
    obsolescence status (with a short explanation and links to the successors)
    and instabilities (e.g. orphan, phase-divergent or content-divergent).
    Client-side graph code has been simplified by delegating more work to the
    backend, so /graph page is now more in sync with /log page, visually and
    feature-wise. Unfortunately, this code change means that 3rd-party themes
    for 4.5+ are required to have graphentry.tmpl template available (copy it
    from the base theme if you don't use %include and then reference it in map
    file) and render entries in graph.tmpl -- look at one of the core themes to
    see what it needs to look like. JS functions that create graph vertices and
    edges are now available in Graph.prototype, making it possible to call the
    original functions from custom theme-specific functions if needed.
    Graph now shows different symbols for normal, branch-closing, obsolete and
    unstable commits, and marks currently checked out commit with a circle
    around its graph node.
    There's also now json-graph API endpoint that can be used for rendering
    commit graph in 3rd-party applications.
  2.1. Other Changes
    When interactive revert is run against a revision other than the working
    directory parent, the diff shown is the diff to _apply_ to the working
    directory, rather than the diff to _discard_ from the working copy. This is
    in line with related user experiences with 'git' and appears to be less
    confusing with 'ui.interface=curses'.
    Let 'hg rebase' avoid content-divergence by skipping obsolete changesets
    (and their descendants) when they are present in the rebase set along with
    one of their successors but none of their successors is in destination.
    A new experimental config flag, `rebase.experimental.inmemory`, makes
    rebase perform an in-memory merge instead of doing it on-disk in the
    working copy.
    The `HGPLAINEXCEPT` environment variable can now include color to allow
    automatic output colorization in otherwise automated environments.
    A new `unamend` command in `uncommit` extension which undoes the effect of
    the amend command by creating a new changeset which was there before amend
    and moving the changes that were amended to the working directory.
    A '--abort' flag to merge command to abort the ongoing merge.
    An experimental flag '--rev' to 'hg branch' which can be used to change
    branch of changesets.
    bundle2 read I/O significantly improved
    bundle2 memory use significantly reduced during read
    clonebundle: it is now possible to serve the clonebundle using a git-lfs
    compatible server.
    templatefilters: add slashpath() to convert path separator to slash
    (issue5572)
    A new experimental config flag, 'inline-color-diff', adds within-line color
    diff capacity
    histedit: add support to output nodechanges using formatter to help with
    editor integrations
  3. Backwards Compatibility Changes
    `log --follow-first -rREV`, which is deprecated, now follows the first
    parent of merge revisions from the specified REV just like
    `log --follow -rREV`.
    `log --follow -rREV FILE..` now follows file history across copies and
    renames.
    transaction: register summary callbacks only at start of transaction
    hgweb's graph view no longer supports browsers that lack &lt;canvas&gt; support
    hgweb: only include graph-related data in jsdata variable on /graph pages
    graphlog: add another graph node type, unstable, using character *
    remove: print message for each file in verbose mode only while using '-A'</changelog>
  <changelog author="develop7@develop7.info" date="1520424000">- Mercurial 4.5.2
  (4.5.2 was released immediately after 4.5.1 to fix a release oversight.)
  1. Security Fixes (CVE-2018-1000132,bsc#1085211)
    All versions of Mercurial prior to 4.5.2 have vulnerabilities in the HTTP
    server that allow permissions bypass to:
  * Perform writes on repositories that should be read-only
  * Perform reads on repositories that shouldn't allow read access
  2. Backwards Compatibility Changes
    The "batch" wire protocol command now enforces permissions of each invoked
    sub-command. Wire protocol commands must define their operation type or the
    "batch" command will assume they can write data and will prevent their
    execution on HTTP servers unless the HTTP request method is POST, the
    server is configured to allow pushes, and the (possibly authenticated) HTTP
    user is authorized to perform a push.
    Wire protocol commands not defining their operation type in
    "wireproto.PERMISSIONS" are now assumed to be used for "push" operations
    and access control to run those commands is now enforced accordingly.
  3. Bug Fixes
    fileset: don't abort when running copied() on a revision with a removed file
    date: fix parsing months
    setup: only allow Python 3 from a source checkout (issue5804)
    annotate: do not poorly split lines at CR (issue5798)
    subrepo: don't attempt to share remote sources (issue5793)
    subrepo: activate clone pooling to enable sharing with remote URLs
    changegroup: do not delta lfs revisions
    revlog: do not use delta for lfs revisions
    revlog: resolve lfs rawtext to vanilla rawtext before applying delta
  See full cnahgelog on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5.1_.2F_4.5.2_.282018-03-06.29</changelog>
  <changelog author="develop7@develop7.info" date="1520683200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="tiwai@suse.de" date="1530878400">- Fix security issues in mpatch overflow and other misbehavior
  (CVE-2018-13346, bsc#1100354, CVE-2018-13347, bsc#1100355,
  CVE-2018-13348, bsc#1100353):
  hg-mpatch-fix01.patch
  hg-mpatch-fix02.patch
  hg-mpatch-fix03.patch
  hg-mpatch-fix04.patch
  hg-mpatch-fix05.patch
  hg-mpatch-fix06.patch
  hg-mpatch-fix07.patch
  hg-mpatch-fix08.patch
  hg-mpatch-fix09.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539086400">- Fix out-of-bounds read during parsing of a malformed manifest
  entry (CVE-2018-17983, bsc#1110899):
  hg-CVE-2018-17983.patch</changelog>
</package>
<package pkgid="c50a3fe7ec034f8cccb8e084117edab9249126e404092e73f029e81e768cb375" name="mercurial-lang" arch="noarch">
  <version epoch="0" ver="4.5.2" rel="lp150.2.3.1"/>
  <changelog author="develop7@develop7.info" date="1462190400">- update to v3.8.1
  (3.8.1 was released immediately after 3.8 to fix a release oversight.)
  Regularly scheduled feature release. This release contains a low-priority security fix for:
  * CVE-2016-3105 Mercurial: arbitrary code execution when converting Git repos
  Features
  * `hg update` and other commands that can perform update (such as hg pull -u)
    now warn about other topological heads
  * cHg has been added
  * `hg update` now updates to the tip-most changeset on the same topological
    branch. Before, it would update to the tip-most changeset, possibly on a
    different topological head
  * Hints on how to continue interrupted commands are now printed
    (e.g. `hg resolve -m` will now tell you to run `hg rebase --continue` or
    `hg histedit --continue`)
  * The experimental automv extension has been added. This extension attempts
    to detect file copes and renames automatically.
  * The 3rd party hgwatchman extension has been imported as the fsmonitor
    extension. This extension uses filesystem watching to make commands like
    `hg status` significantly faster on large repositories.
  * `hg rebase` now chooses its default destination the same way `hg merge` does
  * `hg pull -u` now activates a bookmark if the has a bookmark
  * `hg pull -u` now deactivates a bookmark if the destination doesn't match
    the existing bookmark
  * Improved edge styles in graph log.
  * User template keywords and functions can be defined in `[templatealias]`
    section.
  * It's now possible to push the active bookmark using `hg push -B .`.
  Improvements
  This release includes many improvements, including (but not limited to):
  * performance of copy detection during rebases has been improved, potentially
    leading to faster rebase execution
  * performance of `hg log -f &lt;file&gt;` has been improved
  * syntax errors in loaded extensions are now handled better
  * `hg update` on Windows should now be up to 4x faster
  * JSON encoding should now be proper UTF-8 for all inputs
  * Performance of the - revset operator has been improved
  * The blackbox extension now logs more data
  * "hgext" is now a Python namespace package
  * revsets accessing changelog data (commit messages, authors, dates) are now
    10-15% faster
  * hg.exe built in MinGW will now link against the proper Python DLL</changelog>
  <changelog author="develop7@develop7.info" date="1462276800">- fix mercurial-locale-fix.patch</changelog>
  <changelog author="develop7@develop7.info" date="1463486400">- Mercurial v3.8.2
  This is an unscheduled bugfix release. 3.8.1 contained a noisy deprecation
  warning that was only intended for Mercurial developers, sorry.
  * bookmarks: properly invalidate volatile sets when writing bookmarks
  * builddeb: add distroseries to tagged versions
  * bundle2: properly request phases during getbundle
  * debian: add wish to suggests
  * debian: forgot to make debian/rules executable in 6b95a623ec90
  * deprecation: gate deprecation warning behind devel configuration
  * help: fix the display for hg help internals.revlogs (issue5227)
  * help: search section of help topic by translated section name correctly
  * hg-ssh: copy doc string to man page
  * patch: show lower-ed translated message correctly
  * progress: stop excessive clearing (issue4801)</changelog>
  <changelog author="astieger@suse.com" date="1465732800">- mercurial 3.8.3:
  * bookmarks: allow pushing active bookmark on new remote head
  * localrepo: prevent executable-bit only changes from being lost on amend
  * strip: invalidate phase cache after stripping changeset
- verify source signature</changelog>
  <changelog author="develop7@develop7.info" date="1470052800">- Mercurial v3.9
  + Features
  * ui.textwidth can now be set to define width of help text
  * separate() template function added
  * ui.rollback can be set to false to disable the hg rollback command
  * fail-&lt;command&gt; hooks now run when a command fails
  * experimental.graphstyle.* config options to control styling of graphs in
    console
  * experimental.histedit.autoverb allows histedit lines beginning with
    "verb!" to be interpreted as histedit actions
  * [hostsecurity] config section for defining advanced per-host security
    settings
  * ability to define the SHA-256 and SHA-512 hashes of pinned server
    certificates
  * ability to define CA certificates on a per-host basis
  * ability to define the minimum TLS protocol version on a global or
    per-host basis
  * sort() revset can now perform topological sorts using the topo option
  * hgweb can now render JSON for filelog, filerevision, summary, and search
    web commands
  * [paths] entries can now define a pushrev sub-option to control which
    revisions to push by default
  * The experimental 'journal' extension was added, allowing users to view
    the previous positions of bookmarks and the working copy
  + Improvements
    This release includes many improvements, including (but not limited to):
  * performance of `hg diff` has been improved
  * chg now detects more changes to the configuration and execution
    environment
  * SSL/TLS code has been significantly refactored and now is consistent
    across all consumers (HTTPS, SMTPS)
  * performance improvements to server communication (particularly for the
    largefiles and remotefilelog extensions)
  * connections to servers whose certificate authority (CA) is unknown are
    now refused even if no CA certificates are available (see SecureConnections for details)
  * fingerprints of server certificates are now printed using SHA-256
    instead of SHA-1
  * reads and writes to certain files is now robust and avoids more race
    conditions and edge cases (see ExactCacheValidationPlan)
  * performance improvements to certain revsets
  * cloning will no longer prompt for a password multiple times when cloning
    from a server that requires a password
  * annotate view in hgweb now groups lines into blocks depending on their
    revision and highlights lines for the current revision
  * hgweb now displays extra information and also navigation links in popups
    for each line in annotate view</changelog>
  <changelog author="develop7@develop7.info" date="1474286400">- Mercurial 3.9.1 (2016-9-1)
  This is a regularly-scheduled bugfix release.
  * bundle2: fail faster when interrupted
  * bundle2: localize handleoutput remote prompts
  * convert: move svn config initializer out of the module level
  * debian: update source URL in copyright file
  * exchange: correctly specify url to unbundle (issue5145)
  * help: add example of '[templates]' usage
  * help: update link to wiki/CommandServer
  * osx: update bugzilla link in readme
  * revset: fix keyword arguments to go through optimization process
  * win32: update link to mailing list in readme
  * win32: update wiki link in mercurial.ini</changelog>
  <changelog author="develop7@develop7.info" date="1478088000">- Mercurial 4.0
  This is a regularly-scheduled quarterly feature release. Unlike other
  4.0 software releases, this is simply 3.9 + .1, so it should be the usual
  pain-free upgrade.
  + Features
  * The following commands now also have experimental formatter support:
    'hg version', 'hg grep' and 'hg config'
  * New template keywords and functions: `termwidth`, `mod(a, b)`,
    `relpath(path)`
  * Basic arithmetic operations in template such as `termwidth - 10`
  * `follow()` revset takes new `startrev` parameter
  * Bash completion now allows skipping potentially expensive status call
    for completing 'hg status' arguments, using $HGCOMPLETE_NOSTATUS
    environment variable
  + Improvements
  * A number of changes were made to move and copy tracking, to make sure
    move and copy information is not lost during commands like 'hg graft'
  * Compound revset expression is now properly ordered
  * Python 3 support has received a lot of improvements (but will take a
    lot of additional work)
  * zlib performance in hgweb is improved, and it's possible to control zlib
    compression level using server.zliblevel option
- Refreshed mercurial-hgk-path-fix.diff and mercurial-locale-path-fix.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1483704000">- Update to version 4.0.2:
  * demandimport: do not raise ImportError for unknown item in
    fromlist
  * posix: make poll() restart on interruption by signal
  * hgweb: add missing slash to file log url in rss style
  * hgweb: cache fctx.parents() in annotate command
  * vfs, scmutil: ignore EPERM at os.utime, which avoids ambiguity
- Update package keyring</changelog>
  <changelog author="develop7@develop7.info" date="1485950400">- Mercurial 4.1
  This is a regularly-scheduled quarterly feature release.
  + Features
  * A new extensible "compression engines" API has been implemented. Support
    for a new compression format can now be implemented in extensions.
  * New compression formats are fully supported in bundles and the wire
    protocol. There is experimental support for different compression in
    revlogs.
  * zstd - a new and exciting compression engine - is now distributed with
    Mercurial and built by default
  * HTTP payloads for many commands will now use zstd by default (as opposed
    to zlib) when both client and server support it. This can reduce
    server-side CPU usage to ~60% of original for operations like serving
    bundles.
  * zstd compressed bundles can be produced by specifying the `zstd` bundle
    type. e.g. `hg bundle -a -t zstd-v2 zstd-bundle.hg`.
  * A new statistical profiler has been added and made the default profiler
    for `--profile`. This profiler gives more accurate results than Python's
    built-in cProfile (the previous default) because the profiler overhead is
    much smaller. The output from `--profile` now displays the code hot path
    by default. This allows Mercurial developers to more accurately identify
    performance problems.
  * New `followlines(file, from:to, startrev=.)` revset predicate to track a
    part of changes.
  * Experimental support for additional git-diff features.
  * Troubled changes (from ChangesetEvolution) are noted more prominently in a few places.
  * An experimental hg debugupgraderepo command allows in-place upgrading of
    repositories to the latest storage format.
  + Improvements
  * Performance of reading individual revlog entries has been greatly
    improved. This will be noticeable when performing changelog scans on
    large repositories (such as when executing certain revsets).
  * The low-level content diffing algorithm is now ~2x faster. Operations
    that write data to the repository (like commit) can be noticeably faster
    as a result.
  See complete changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.1_.282017-2-1.29
- refreshed mercurial-locale-path-fix.patch and mercurial-hgk-path-fix.diff
- refresh package keyring</changelog>
  <changelog author="develop7@develop7.info" date="1491307200">- Mercurial 4.1.2
  This is a regularly-scheduled bugfix release.
  + Mercurial should work inside IIS on Windows again. (issue5493)
  + zstd support now refuses to work on old bundle formats. (issue5506)
  + Merges involving subrepositories no longer crash in some cases. (issue5505)
  + Checking for new heads during push is no longer accidentally quadratic
- Mercurial 4.1.1
  This is a regularly-scheduled bugfix release.
  + Several incorrect mailing list addresses have been corrected.
  + Various error cases have been corrected during push and pull.
  + Minor issues that happened when Mercurial spawned worker processes have
    been fixed.</changelog>
  <changelog author="develop7@develop7.info" date="1494158400">- Mercurial 4.2
  This is a regularly-scheduled quarterly feature release.
  * Notable changes
    + Pager support has been moved into core and is now enabled by default.
    This is now controlled with the ui.paginate setting.
    Note that in 4.2-rc, the ui.paginate option was named pager.enable. The
    old name has been dropped in the final release. If you had turned
    pagination off using pager.enable=False, please update your config.
    + Color support has also been moved into core and is now enabled by default
    (the ui.color setting now defaults to 'auto').
    + The new experimental 'show' extension provides a way to view various
    information about your repository in an ergonomic way. It is deliberately
    designed for human consumption and not for scripting, so it doesn't carry
    the same backward compatibility guarantees as other commands. See
    'hg help -e show' for more information.
    + Mercurial now requires `setuptools` on Windows</changelog>
  <changelog author="develop7@develop7.info" date="1499256000">- Mercurial 4.2.2
  This is a regularly-scheduled bugfix release.
  * largefiles: avoid a crash when archiving a subrepo with largefiles disabled
  * rebase: also test abort from pretxnclose error
  * rebase: backed out changes 2519994d25ca and cf8ad0e6c0e4 (issue5610)
  * rebase: reinforce testing around precommit hook interrupting a rebase
- Mercurial 4.2.1
  This is a regularly-scheduled bugfix release.
  * `hg graft` now works when grafting across merges that were problematic
    before (b4e1e30528c7).
  * A race condition in `hg status` was partially fixed (issue5584).
  * The message about deprecated SHA-1 hashes in the [hostfingerprints] config
    section now references the correct syntax for replacing them with SHA-256
    hashes (issue5559).</changelog>
  <changelog author="tiwai@suse.de" date="1502366400">- mercurial 4.2.3: security fix updates for
  CVE-2017-1000115 and CVE-2017-1000116:
  * Mercurial's symlink auditing was incomplete prior to 4.3, and
    could be abused to write to files outside the repository
    (CVE-2017-1000115 bsc#1053344)
  * Mercurial was not sanitizing hostnames passed to ssh, allowing
    shell injection attacks by specifying a hostname starting with
  - oProxyCommand (CVE-2017-1000116, bsc#1052696)</changelog>
  <changelog author="tiwai@suse.de" date="1502798400">- Mercurial 4.3.1:
  This is a regularly-scheduled quarterly feature release,
  including the previous two security fixes (CVE-2017-1000115,
  CVE-2017-1000116)
  Notable changes:
  * experimental amend extension providing the amend command
  * experimental sparse extension
  * Support for Python 2.6 has been dropped.
  * Bundles created by the strip extension now store phase
    information. It will be restored when unbundling.
  * The strip extension now removes relevant obsmarkers.
    If a backup requested (the default), the obsmarkers are stored
    in the backup bundle and will be restored when unbundling.
  * hg show work (from the experimental show extension) now
    displays more info
  * hg show stack is a new view for the current, in-progress
    changeset and others around it
  * Mitigation for two security vulnerabilities</changelog>
  <changelog author="develop7@develop7.info" date="1509883200">- Mercurial 4.4
  Notable changes
    Control whitespace settings for annotation on hgweb
  * /annotate URLs on hgweb now accept query string arguments to influence how
    whitespace changes impact results.
  * The arguments "ignorews," "ignorewsamount," "ignorewseol," and
    "ignoreblanklines" now have the same meaning as their [annotate] config
    section counterparts. Any provided setting overrides the server default.
  * HTML checkboxes have been added to the paper and gitweb themes to expose
    current whitespace settings and to easily modify the current view.
    Fast, heuristic copy-tracing
    A new fast heuristic algorithm for copytracing which assumes that the
    files moves are either:
    1. renames in the same directory
    2. moves in other directories with same names
    You can use this algorithm by setting 'experimental.copytrace=heuristics'.
    This setting performs full copytracing if both source and destination
    branches contains non-public changesets only.
    Other changes
  * Estimated time is more accurate with non-linear progress
  * "hg status -v" can now show unfinished state. For example, when in an
    unfinished rebase state, "hg status -v" might show:
    [#] The repository is in an unfinished *rebase* state.
    [#] No unresolved merge conflicts.
    [#] To continue:                hg rebase --continue
    [#] To abort:                   hg rebase --abort
  * Added '--ignore-space-at-eol' diff option to ignore whitespace
    differences at line endings.
  * show: use consistent node length in views
  * show: decrease minimum displayed hash length from 5 to 4
  * A new uncommit extension which provides 'hg uncommit' using which one
    can uncommit part or all of the changeset. This command undoes the
    effect of a local commit, returning the affected files to their
    uncommitted state.
  * 'hg clone --uncompressed' uses clone bundles when possible
  * 'hg annotate --skip' now prints a '*' on lines with skipped revisions
  * New 'commands.update.check' feature to adjust constraints on when
    'hg update' will allow updates with a dirty working copy.
  * Add an experimental -L/--line-range FILE,FROMLINE:TOLINE option to
    'hg log' command to follow the history of files by line range. In
    combination with -p/--patch option, only diff hunks within specified
    line range will be displayed. Feedback, especially on UX aspects, is
    welcome.
  * Print warning when fsmonitor isn't being used on a large repository
  Read rest of the changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.4_.282017-11-01.29
- Mercurial 4.3.3
  * Prevent crashes when clearing progress bar. (issue5684)
  * rebase: move bookmarks with --keep (issue5682)
- Mercurial 4.3.2
  * restore compatibility with older versions of Python 2.7 by not using a
    bytearray with struct.unpack_from()
  * restore mingw compatibility for setup.py
  * hgwebdir: read 'web.template' untrusted (plugs potential security issue)
  * repair: preserve phase when not using generaldelta (issue5678)
  * ssh: fix flakey ssh errors on BSD systems
  * restore error handling behavior around certain I/O errors; the regressed
    behavior could result in transactions not being properly rolled back if
    stdio handles encountered errors (issue5658)
  * templatekw: choose {latesttag} by len(changes), not date (issue5659)
  * record: fix revert -i for lines without newline (issue5651)
  * mq: create non-lossy patches, also with custom global diff configuration
- Fixed README file name (now it's README.rst)</changelog>
  <changelog author="develop7@develop7.info" date="1510401600">- Mercurial 4.4.1
  1. Notable changes
  * Git and Subversion subrepos have been disabled by default to mitigate a
    potential security risk if files overlapping with a subrepo managed to be
    committed to a repository.
    bsc#1071715 CVE-2017-17458
  * Subrepos are now more paranoid about symlink traversal.
  * The share extension handles drive letters on Windows better.
  It is possible that a specially malformed repository can cause Git
  subrepositories to run arbitrary code in the form of a .git/hooks/post-update
  script checked in to the repository in Mercurial 4.4 and earlier. Typical use
  of Mercurial prevents construction of such repositories, but they can be
  created programmatically.</changelog>
  <changelog author="develop7@develop7.info" date="1517745600">- Mercurial 4.5
  See full changelog on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5-rc_.282018-01-22.29
  1. New Features
    1.1. revert --interactive
    The revert command now accepts the flag --interactive to allow reverting
    only some of the changes to the specified files.
    1.2. Accessing hidden changesets
    Set config option `experimental.directaccess = True` to access hidden
    changesets from read only commands.
    1.3. githelp extension
    The githelp extension provides the `hg githelp` command. This command
    attempts to convert a git command to its Mercurial equivalent. The
    extension can be useful to Git users new to Mercurial.
    1.4. Largefiles changes
    largefiles: add a 'debuglfput' command to put largefile into the store
    largefiles: add support for 'largefiles://' url scheme
    largefiles: allow to run 'debugupgraderepo' on repo with largefiles
    largefiles: convert EOL of hgrc before appending to bytes IO
    largefiles: explicitly set the source and sink types to 'hg' for lfconvert
    largefiles: modernize how capabilities are added to the wire protocol
  2. hgweb changes
    hgweb now shows more information about commits: phase (if it's not public),
    obsolescence status (with a short explanation and links to the successors)
    and instabilities (e.g. orphan, phase-divergent or content-divergent).
    Client-side graph code has been simplified by delegating more work to the
    backend, so /graph page is now more in sync with /log page, visually and
    feature-wise. Unfortunately, this code change means that 3rd-party themes
    for 4.5+ are required to have graphentry.tmpl template available (copy it
    from the base theme if you don't use %include and then reference it in map
    file) and render entries in graph.tmpl -- look at one of the core themes to
    see what it needs to look like. JS functions that create graph vertices and
    edges are now available in Graph.prototype, making it possible to call the
    original functions from custom theme-specific functions if needed.
    Graph now shows different symbols for normal, branch-closing, obsolete and
    unstable commits, and marks currently checked out commit with a circle
    around its graph node.
    There's also now json-graph API endpoint that can be used for rendering
    commit graph in 3rd-party applications.
  2.1. Other Changes
    When interactive revert is run against a revision other than the working
    directory parent, the diff shown is the diff to _apply_ to the working
    directory, rather than the diff to _discard_ from the working copy. This is
    in line with related user experiences with 'git' and appears to be less
    confusing with 'ui.interface=curses'.
    Let 'hg rebase' avoid content-divergence by skipping obsolete changesets
    (and their descendants) when they are present in the rebase set along with
    one of their successors but none of their successors is in destination.
    A new experimental config flag, `rebase.experimental.inmemory`, makes
    rebase perform an in-memory merge instead of doing it on-disk in the
    working copy.
    The `HGPLAINEXCEPT` environment variable can now include color to allow
    automatic output colorization in otherwise automated environments.
    A new `unamend` command in `uncommit` extension which undoes the effect of
    the amend command by creating a new changeset which was there before amend
    and moving the changes that were amended to the working directory.
    A '--abort' flag to merge command to abort the ongoing merge.
    An experimental flag '--rev' to 'hg branch' which can be used to change
    branch of changesets.
    bundle2 read I/O significantly improved
    bundle2 memory use significantly reduced during read
    clonebundle: it is now possible to serve the clonebundle using a git-lfs
    compatible server.
    templatefilters: add slashpath() to convert path separator to slash
    (issue5572)
    A new experimental config flag, 'inline-color-diff', adds within-line color
    diff capacity
    histedit: add support to output nodechanges using formatter to help with
    editor integrations
  3. Backwards Compatibility Changes
    `log --follow-first -rREV`, which is deprecated, now follows the first
    parent of merge revisions from the specified REV just like
    `log --follow -rREV`.
    `log --follow -rREV FILE..` now follows file history across copies and
    renames.
    transaction: register summary callbacks only at start of transaction
    hgweb's graph view no longer supports browsers that lack &lt;canvas&gt; support
    hgweb: only include graph-related data in jsdata variable on /graph pages
    graphlog: add another graph node type, unstable, using character *
    remove: print message for each file in verbose mode only while using '-A'</changelog>
  <changelog author="develop7@develop7.info" date="1520424000">- Mercurial 4.5.2
  (4.5.2 was released immediately after 4.5.1 to fix a release oversight.)
  1. Security Fixes (CVE-2018-1000132,bsc#1085211)
    All versions of Mercurial prior to 4.5.2 have vulnerabilities in the HTTP
    server that allow permissions bypass to:
  * Perform writes on repositories that should be read-only
  * Perform reads on repositories that shouldn't allow read access
  2. Backwards Compatibility Changes
    The "batch" wire protocol command now enforces permissions of each invoked
    sub-command. Wire protocol commands must define their operation type or the
    "batch" command will assume they can write data and will prevent their
    execution on HTTP servers unless the HTTP request method is POST, the
    server is configured to allow pushes, and the (possibly authenticated) HTTP
    user is authorized to perform a push.
    Wire protocol commands not defining their operation type in
    "wireproto.PERMISSIONS" are now assumed to be used for "push" operations
    and access control to run those commands is now enforced accordingly.
  3. Bug Fixes
    fileset: don't abort when running copied() on a revision with a removed file
    date: fix parsing months
    setup: only allow Python 3 from a source checkout (issue5804)
    annotate: do not poorly split lines at CR (issue5798)
    subrepo: don't attempt to share remote sources (issue5793)
    subrepo: activate clone pooling to enable sharing with remote URLs
    changegroup: do not delta lfs revisions
    revlog: do not use delta for lfs revisions
    revlog: resolve lfs rawtext to vanilla rawtext before applying delta
  See full cnahgelog on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5.1_.2F_4.5.2_.282018-03-06.29</changelog>
  <changelog author="develop7@develop7.info" date="1520683200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="tiwai@suse.de" date="1530878400">- Fix security issues in mpatch overflow and other misbehavior
  (CVE-2018-13346, bsc#1100354, CVE-2018-13347, bsc#1100355,
  CVE-2018-13348, bsc#1100353):
  hg-mpatch-fix01.patch
  hg-mpatch-fix02.patch
  hg-mpatch-fix03.patch
  hg-mpatch-fix04.patch
  hg-mpatch-fix05.patch
  hg-mpatch-fix06.patch
  hg-mpatch-fix07.patch
  hg-mpatch-fix08.patch
  hg-mpatch-fix09.patch</changelog>
</package>
<package pkgid="971034e1ce6861d57088c4267a136569672aa289df46fed6d282d94f5657b5f6" name="mercurial-lang" arch="noarch">
  <version epoch="0" ver="4.5.2" rel="lp150.2.6.1"/>
  <changelog author="develop7@develop7.info" date="1462276800">- fix mercurial-locale-fix.patch</changelog>
  <changelog author="develop7@develop7.info" date="1463486400">- Mercurial v3.8.2
  This is an unscheduled bugfix release. 3.8.1 contained a noisy deprecation
  warning that was only intended for Mercurial developers, sorry.
  * bookmarks: properly invalidate volatile sets when writing bookmarks
  * builddeb: add distroseries to tagged versions
  * bundle2: properly request phases during getbundle
  * debian: add wish to suggests
  * debian: forgot to make debian/rules executable in 6b95a623ec90
  * deprecation: gate deprecation warning behind devel configuration
  * help: fix the display for hg help internals.revlogs (issue5227)
  * help: search section of help topic by translated section name correctly
  * hg-ssh: copy doc string to man page
  * patch: show lower-ed translated message correctly
  * progress: stop excessive clearing (issue4801)</changelog>
  <changelog author="astieger@suse.com" date="1465732800">- mercurial 3.8.3:
  * bookmarks: allow pushing active bookmark on new remote head
  * localrepo: prevent executable-bit only changes from being lost on amend
  * strip: invalidate phase cache after stripping changeset
- verify source signature</changelog>
  <changelog author="develop7@develop7.info" date="1470052800">- Mercurial v3.9
  + Features
  * ui.textwidth can now be set to define width of help text
  * separate() template function added
  * ui.rollback can be set to false to disable the hg rollback command
  * fail-&lt;command&gt; hooks now run when a command fails
  * experimental.graphstyle.* config options to control styling of graphs in
    console
  * experimental.histedit.autoverb allows histedit lines beginning with
    "verb!" to be interpreted as histedit actions
  * [hostsecurity] config section for defining advanced per-host security
    settings
  * ability to define the SHA-256 and SHA-512 hashes of pinned server
    certificates
  * ability to define CA certificates on a per-host basis
  * ability to define the minimum TLS protocol version on a global or
    per-host basis
  * sort() revset can now perform topological sorts using the topo option
  * hgweb can now render JSON for filelog, filerevision, summary, and search
    web commands
  * [paths] entries can now define a pushrev sub-option to control which
    revisions to push by default
  * The experimental 'journal' extension was added, allowing users to view
    the previous positions of bookmarks and the working copy
  + Improvements
    This release includes many improvements, including (but not limited to):
  * performance of `hg diff` has been improved
  * chg now detects more changes to the configuration and execution
    environment
  * SSL/TLS code has been significantly refactored and now is consistent
    across all consumers (HTTPS, SMTPS)
  * performance improvements to server communication (particularly for the
    largefiles and remotefilelog extensions)
  * connections to servers whose certificate authority (CA) is unknown are
    now refused even if no CA certificates are available (see SecureConnections for details)
  * fingerprints of server certificates are now printed using SHA-256
    instead of SHA-1
  * reads and writes to certain files is now robust and avoids more race
    conditions and edge cases (see ExactCacheValidationPlan)
  * performance improvements to certain revsets
  * cloning will no longer prompt for a password multiple times when cloning
    from a server that requires a password
  * annotate view in hgweb now groups lines into blocks depending on their
    revision and highlights lines for the current revision
  * hgweb now displays extra information and also navigation links in popups
    for each line in annotate view</changelog>
  <changelog author="develop7@develop7.info" date="1474286400">- Mercurial 3.9.1 (2016-9-1)
  This is a regularly-scheduled bugfix release.
  * bundle2: fail faster when interrupted
  * bundle2: localize handleoutput remote prompts
  * convert: move svn config initializer out of the module level
  * debian: update source URL in copyright file
  * exchange: correctly specify url to unbundle (issue5145)
  * help: add example of '[templates]' usage
  * help: update link to wiki/CommandServer
  * osx: update bugzilla link in readme
  * revset: fix keyword arguments to go through optimization process
  * win32: update link to mailing list in readme
  * win32: update wiki link in mercurial.ini</changelog>
  <changelog author="develop7@develop7.info" date="1478088000">- Mercurial 4.0
  This is a regularly-scheduled quarterly feature release. Unlike other
  4.0 software releases, this is simply 3.9 + .1, so it should be the usual
  pain-free upgrade.
  + Features
  * The following commands now also have experimental formatter support:
    'hg version', 'hg grep' and 'hg config'
  * New template keywords and functions: `termwidth`, `mod(a, b)`,
    `relpath(path)`
  * Basic arithmetic operations in template such as `termwidth - 10`
  * `follow()` revset takes new `startrev` parameter
  * Bash completion now allows skipping potentially expensive status call
    for completing 'hg status' arguments, using $HGCOMPLETE_NOSTATUS
    environment variable
  + Improvements
  * A number of changes were made to move and copy tracking, to make sure
    move and copy information is not lost during commands like 'hg graft'
  * Compound revset expression is now properly ordered
  * Python 3 support has received a lot of improvements (but will take a
    lot of additional work)
  * zlib performance in hgweb is improved, and it's possible to control zlib
    compression level using server.zliblevel option
- Refreshed mercurial-hgk-path-fix.diff and mercurial-locale-path-fix.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1483704000">- Update to version 4.0.2:
  * demandimport: do not raise ImportError for unknown item in
    fromlist
  * posix: make poll() restart on interruption by signal
  * hgweb: add missing slash to file log url in rss style
  * hgweb: cache fctx.parents() in annotate command
  * vfs, scmutil: ignore EPERM at os.utime, which avoids ambiguity
- Update package keyring</changelog>
  <changelog author="develop7@develop7.info" date="1485950400">- Mercurial 4.1
  This is a regularly-scheduled quarterly feature release.
  + Features
  * A new extensible "compression engines" API has been implemented. Support
    for a new compression format can now be implemented in extensions.
  * New compression formats are fully supported in bundles and the wire
    protocol. There is experimental support for different compression in
    revlogs.
  * zstd - a new and exciting compression engine - is now distributed with
    Mercurial and built by default
  * HTTP payloads for many commands will now use zstd by default (as opposed
    to zlib) when both client and server support it. This can reduce
    server-side CPU usage to ~60% of original for operations like serving
    bundles.
  * zstd compressed bundles can be produced by specifying the `zstd` bundle
    type. e.g. `hg bundle -a -t zstd-v2 zstd-bundle.hg`.
  * A new statistical profiler has been added and made the default profiler
    for `--profile`. This profiler gives more accurate results than Python's
    built-in cProfile (the previous default) because the profiler overhead is
    much smaller. The output from `--profile` now displays the code hot path
    by default. This allows Mercurial developers to more accurately identify
    performance problems.
  * New `followlines(file, from:to, startrev=.)` revset predicate to track a
    part of changes.
  * Experimental support for additional git-diff features.
  * Troubled changes (from ChangesetEvolution) are noted more prominently in a few places.
  * An experimental hg debugupgraderepo command allows in-place upgrading of
    repositories to the latest storage format.
  + Improvements
  * Performance of reading individual revlog entries has been greatly
    improved. This will be noticeable when performing changelog scans on
    large repositories (such as when executing certain revsets).
  * The low-level content diffing algorithm is now ~2x faster. Operations
    that write data to the repository (like commit) can be noticeably faster
    as a result.
  See complete changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.1_.282017-2-1.29
- refreshed mercurial-locale-path-fix.patch and mercurial-hgk-path-fix.diff
- refresh package keyring</changelog>
  <changelog author="develop7@develop7.info" date="1491307200">- Mercurial 4.1.2
  This is a regularly-scheduled bugfix release.
  + Mercurial should work inside IIS on Windows again. (issue5493)
  + zstd support now refuses to work on old bundle formats. (issue5506)
  + Merges involving subrepositories no longer crash in some cases. (issue5505)
  + Checking for new heads during push is no longer accidentally quadratic
- Mercurial 4.1.1
  This is a regularly-scheduled bugfix release.
  + Several incorrect mailing list addresses have been corrected.
  + Various error cases have been corrected during push and pull.
  + Minor issues that happened when Mercurial spawned worker processes have
    been fixed.</changelog>
  <changelog author="develop7@develop7.info" date="1494158400">- Mercurial 4.2
  This is a regularly-scheduled quarterly feature release.
  * Notable changes
    + Pager support has been moved into core and is now enabled by default.
    This is now controlled with the ui.paginate setting.
    Note that in 4.2-rc, the ui.paginate option was named pager.enable. The
    old name has been dropped in the final release. If you had turned
    pagination off using pager.enable=False, please update your config.
    + Color support has also been moved into core and is now enabled by default
    (the ui.color setting now defaults to 'auto').
    + The new experimental 'show' extension provides a way to view various
    information about your repository in an ergonomic way. It is deliberately
    designed for human consumption and not for scripting, so it doesn't carry
    the same backward compatibility guarantees as other commands. See
    'hg help -e show' for more information.
    + Mercurial now requires `setuptools` on Windows</changelog>
  <changelog author="develop7@develop7.info" date="1499256000">- Mercurial 4.2.2
  This is a regularly-scheduled bugfix release.
  * largefiles: avoid a crash when archiving a subrepo with largefiles disabled
  * rebase: also test abort from pretxnclose error
  * rebase: backed out changes 2519994d25ca and cf8ad0e6c0e4 (issue5610)
  * rebase: reinforce testing around precommit hook interrupting a rebase
- Mercurial 4.2.1
  This is a regularly-scheduled bugfix release.
  * `hg graft` now works when grafting across merges that were problematic
    before (b4e1e30528c7).
  * A race condition in `hg status` was partially fixed (issue5584).
  * The message about deprecated SHA-1 hashes in the [hostfingerprints] config
    section now references the correct syntax for replacing them with SHA-256
    hashes (issue5559).</changelog>
  <changelog author="tiwai@suse.de" date="1502366400">- mercurial 4.2.3: security fix updates for
  CVE-2017-1000115 and CVE-2017-1000116:
  * Mercurial's symlink auditing was incomplete prior to 4.3, and
    could be abused to write to files outside the repository
    (CVE-2017-1000115 bsc#1053344)
  * Mercurial was not sanitizing hostnames passed to ssh, allowing
    shell injection attacks by specifying a hostname starting with
  - oProxyCommand (CVE-2017-1000116, bsc#1052696)</changelog>
  <changelog author="tiwai@suse.de" date="1502798400">- Mercurial 4.3.1:
  This is a regularly-scheduled quarterly feature release,
  including the previous two security fixes (CVE-2017-1000115,
  CVE-2017-1000116)
  Notable changes:
  * experimental amend extension providing the amend command
  * experimental sparse extension
  * Support for Python 2.6 has been dropped.
  * Bundles created by the strip extension now store phase
    information. It will be restored when unbundling.
  * The strip extension now removes relevant obsmarkers.
    If a backup requested (the default), the obsmarkers are stored
    in the backup bundle and will be restored when unbundling.
  * hg show work (from the experimental show extension) now
    displays more info
  * hg show stack is a new view for the current, in-progress
    changeset and others around it
  * Mitigation for two security vulnerabilities</changelog>
  <changelog author="develop7@develop7.info" date="1509883200">- Mercurial 4.4
  Notable changes
    Control whitespace settings for annotation on hgweb
  * /annotate URLs on hgweb now accept query string arguments to influence how
    whitespace changes impact results.
  * The arguments "ignorews," "ignorewsamount," "ignorewseol," and
    "ignoreblanklines" now have the same meaning as their [annotate] config
    section counterparts. Any provided setting overrides the server default.
  * HTML checkboxes have been added to the paper and gitweb themes to expose
    current whitespace settings and to easily modify the current view.
    Fast, heuristic copy-tracing
    A new fast heuristic algorithm for copytracing which assumes that the
    files moves are either:
    1. renames in the same directory
    2. moves in other directories with same names
    You can use this algorithm by setting 'experimental.copytrace=heuristics'.
    This setting performs full copytracing if both source and destination
    branches contains non-public changesets only.
    Other changes
  * Estimated time is more accurate with non-linear progress
  * "hg status -v" can now show unfinished state. For example, when in an
    unfinished rebase state, "hg status -v" might show:
    [#] The repository is in an unfinished *rebase* state.
    [#] No unresolved merge conflicts.
    [#] To continue:                hg rebase --continue
    [#] To abort:                   hg rebase --abort
  * Added '--ignore-space-at-eol' diff option to ignore whitespace
    differences at line endings.
  * show: use consistent node length in views
  * show: decrease minimum displayed hash length from 5 to 4
  * A new uncommit extension which provides 'hg uncommit' using which one
    can uncommit part or all of the changeset. This command undoes the
    effect of a local commit, returning the affected files to their
    uncommitted state.
  * 'hg clone --uncompressed' uses clone bundles when possible
  * 'hg annotate --skip' now prints a '*' on lines with skipped revisions
  * New 'commands.update.check' feature to adjust constraints on when
    'hg update' will allow updates with a dirty working copy.
  * Add an experimental -L/--line-range FILE,FROMLINE:TOLINE option to
    'hg log' command to follow the history of files by line range. In
    combination with -p/--patch option, only diff hunks within specified
    line range will be displayed. Feedback, especially on UX aspects, is
    welcome.
  * Print warning when fsmonitor isn't being used on a large repository
  Read rest of the changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.4_.282017-11-01.29
- Mercurial 4.3.3
  * Prevent crashes when clearing progress bar. (issue5684)
  * rebase: move bookmarks with --keep (issue5682)
- Mercurial 4.3.2
  * restore compatibility with older versions of Python 2.7 by not using a
    bytearray with struct.unpack_from()
  * restore mingw compatibility for setup.py
  * hgwebdir: read 'web.template' untrusted (plugs potential security issue)
  * repair: preserve phase when not using generaldelta (issue5678)
  * ssh: fix flakey ssh errors on BSD systems
  * restore error handling behavior around certain I/O errors; the regressed
    behavior could result in transactions not being properly rolled back if
    stdio handles encountered errors (issue5658)
  * templatekw: choose {latesttag} by len(changes), not date (issue5659)
  * record: fix revert -i for lines without newline (issue5651)
  * mq: create non-lossy patches, also with custom global diff configuration
- Fixed README file name (now it's README.rst)</changelog>
  <changelog author="develop7@develop7.info" date="1510401600">- Mercurial 4.4.1
  1. Notable changes
  * Git and Subversion subrepos have been disabled by default to mitigate a
    potential security risk if files overlapping with a subrepo managed to be
    committed to a repository.
    bsc#1071715 CVE-2017-17458
  * Subrepos are now more paranoid about symlink traversal.
  * The share extension handles drive letters on Windows better.
  It is possible that a specially malformed repository can cause Git
  subrepositories to run arbitrary code in the form of a .git/hooks/post-update
  script checked in to the repository in Mercurial 4.4 and earlier. Typical use
  of Mercurial prevents construction of such repositories, but they can be
  created programmatically.</changelog>
  <changelog author="develop7@develop7.info" date="1517745600">- Mercurial 4.5
  See full changelog on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5-rc_.282018-01-22.29
  1. New Features
    1.1. revert --interactive
    The revert command now accepts the flag --interactive to allow reverting
    only some of the changes to the specified files.
    1.2. Accessing hidden changesets
    Set config option `experimental.directaccess = True` to access hidden
    changesets from read only commands.
    1.3. githelp extension
    The githelp extension provides the `hg githelp` command. This command
    attempts to convert a git command to its Mercurial equivalent. The
    extension can be useful to Git users new to Mercurial.
    1.4. Largefiles changes
    largefiles: add a 'debuglfput' command to put largefile into the store
    largefiles: add support for 'largefiles://' url scheme
    largefiles: allow to run 'debugupgraderepo' on repo with largefiles
    largefiles: convert EOL of hgrc before appending to bytes IO
    largefiles: explicitly set the source and sink types to 'hg' for lfconvert
    largefiles: modernize how capabilities are added to the wire protocol
  2. hgweb changes
    hgweb now shows more information about commits: phase (if it's not public),
    obsolescence status (with a short explanation and links to the successors)
    and instabilities (e.g. orphan, phase-divergent or content-divergent).
    Client-side graph code has been simplified by delegating more work to the
    backend, so /graph page is now more in sync with /log page, visually and
    feature-wise. Unfortunately, this code change means that 3rd-party themes
    for 4.5+ are required to have graphentry.tmpl template available (copy it
    from the base theme if you don't use %include and then reference it in map
    file) and render entries in graph.tmpl -- look at one of the core themes to
    see what it needs to look like. JS functions that create graph vertices and
    edges are now available in Graph.prototype, making it possible to call the
    original functions from custom theme-specific functions if needed.
    Graph now shows different symbols for normal, branch-closing, obsolete and
    unstable commits, and marks currently checked out commit with a circle
    around its graph node.
    There's also now json-graph API endpoint that can be used for rendering
    commit graph in 3rd-party applications.
  2.1. Other Changes
    When interactive revert is run against a revision other than the working
    directory parent, the diff shown is the diff to _apply_ to the working
    directory, rather than the diff to _discard_ from the working copy. This is
    in line with related user experiences with 'git' and appears to be less
    confusing with 'ui.interface=curses'.
    Let 'hg rebase' avoid content-divergence by skipping obsolete changesets
    (and their descendants) when they are present in the rebase set along with
    one of their successors but none of their successors is in destination.
    A new experimental config flag, `rebase.experimental.inmemory`, makes
    rebase perform an in-memory merge instead of doing it on-disk in the
    working copy.
    The `HGPLAINEXCEPT` environment variable can now include color to allow
    automatic output colorization in otherwise automated environments.
    A new `unamend` command in `uncommit` extension which undoes the effect of
    the amend command by creating a new changeset which was there before amend
    and moving the changes that were amended to the working directory.
    A '--abort' flag to merge command to abort the ongoing merge.
    An experimental flag '--rev' to 'hg branch' which can be used to change
    branch of changesets.
    bundle2 read I/O significantly improved
    bundle2 memory use significantly reduced during read
    clonebundle: it is now possible to serve the clonebundle using a git-lfs
    compatible server.
    templatefilters: add slashpath() to convert path separator to slash
    (issue5572)
    A new experimental config flag, 'inline-color-diff', adds within-line color
    diff capacity
    histedit: add support to output nodechanges using formatter to help with
    editor integrations
  3. Backwards Compatibility Changes
    `log --follow-first -rREV`, which is deprecated, now follows the first
    parent of merge revisions from the specified REV just like
    `log --follow -rREV`.
    `log --follow -rREV FILE..` now follows file history across copies and
    renames.
    transaction: register summary callbacks only at start of transaction
    hgweb's graph view no longer supports browsers that lack &lt;canvas&gt; support
    hgweb: only include graph-related data in jsdata variable on /graph pages
    graphlog: add another graph node type, unstable, using character *
    remove: print message for each file in verbose mode only while using '-A'</changelog>
  <changelog author="develop7@develop7.info" date="1520424000">- Mercurial 4.5.2
  (4.5.2 was released immediately after 4.5.1 to fix a release oversight.)
  1. Security Fixes (CVE-2018-1000132,bsc#1085211)
    All versions of Mercurial prior to 4.5.2 have vulnerabilities in the HTTP
    server that allow permissions bypass to:
  * Perform writes on repositories that should be read-only
  * Perform reads on repositories that shouldn't allow read access
  2. Backwards Compatibility Changes
    The "batch" wire protocol command now enforces permissions of each invoked
    sub-command. Wire protocol commands must define their operation type or the
    "batch" command will assume they can write data and will prevent their
    execution on HTTP servers unless the HTTP request method is POST, the
    server is configured to allow pushes, and the (possibly authenticated) HTTP
    user is authorized to perform a push.
    Wire protocol commands not defining their operation type in
    "wireproto.PERMISSIONS" are now assumed to be used for "push" operations
    and access control to run those commands is now enforced accordingly.
  3. Bug Fixes
    fileset: don't abort when running copied() on a revision with a removed file
    date: fix parsing months
    setup: only allow Python 3 from a source checkout (issue5804)
    annotate: do not poorly split lines at CR (issue5798)
    subrepo: don't attempt to share remote sources (issue5793)
    subrepo: activate clone pooling to enable sharing with remote URLs
    changegroup: do not delta lfs revisions
    revlog: do not use delta for lfs revisions
    revlog: resolve lfs rawtext to vanilla rawtext before applying delta
  See full cnahgelog on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5.1_.2F_4.5.2_.282018-03-06.29</changelog>
  <changelog author="develop7@develop7.info" date="1520683200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="tiwai@suse.de" date="1530878400">- Fix security issues in mpatch overflow and other misbehavior
  (CVE-2018-13346, bsc#1100354, CVE-2018-13347, bsc#1100355,
  CVE-2018-13348, bsc#1100353):
  hg-mpatch-fix01.patch
  hg-mpatch-fix02.patch
  hg-mpatch-fix03.patch
  hg-mpatch-fix04.patch
  hg-mpatch-fix05.patch
  hg-mpatch-fix06.patch
  hg-mpatch-fix07.patch
  hg-mpatch-fix08.patch
  hg-mpatch-fix09.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539086400">- Fix out-of-bounds read during parsing of a malformed manifest
  entry (CVE-2018-17983, bsc#1110899):
  hg-CVE-2018-17983.patch</changelog>
</package>
<package pkgid="7c8e622da4b5526a0cf8ee0e9f8039a183b698d5e852dd1d7d36b25fb10b28e6" name="messagelib" arch="src">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * Minor optimization
  * Minor optimization
  * Fix html here too
  * Fix i18n(...) it's a "block" variable here.
  * Reduce number of toUpper calling
  * Fix gpgsm processes being leaked due to QGpgME::KeyListJob not being deleted
  * Add metainfo.yaml</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Port isScrolledToBottom from jQuery to standard DOM, so it works even when jQuery isn't loaded
  * Rework timing of script injection for showing attachments in message viewer.
  * Use QFileInfo::exists(...) static method here
  * [autotests] more work towards stable autotests
  * [autotests] Let's see if this fixes the flakiness of the test
  * [autotests] Enable test mode in QStandardPaths to avoid interference from user settings.
  * Avoid timeout
  * Don't continue when we have error during compression.
  * Use QByteArrayLiteral here
  * [autotest] avoid timeout due to waiting for klauncher to exit
  * Use the same name as filename and name. It's more logical as discussed with David
  * Const'ify here
  * Use QByteArrayLiteral here
  * Use nullptr
  * Fix typo as reported by David</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Use base64 encoding for all non-text attachments (kde#95733)
  * crypto unittests can't be run in parallel since they start/stop gpg-agent
  * Don't break i18n
  * Fix Bug 379066 - Bug in Grantlee template when viewing SMIME Msg: plain HTML code is shown (kde#379066)
  * Handle help:/ URLs through QDesktopServices
  * [autotests] repair mailwebenginescripttest after my changes in 37b99257</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Make sure to sign/encrypt message when we send later
  * Change encryption too
  * Fix potential crash as david reported
  * Workaround assert in QtWebEngine 5.9 (ASSERT: "m_updateHttpCache")
  * Fix runtime warning about application/x-pkcs7-signature.
  * Use QTemporaryDir as discussed with David
  * Fix Bug 378526 - KMail 5.4.3: Attachment displayed with wrong filename (kde#378526)</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * Don't create link when path is empty
  * Use floating point calculations for column sizes to avoid accumulating rounding errors
  * messagelist: fix horizontal scrollbar when applying column sizes
  * Fix Bug 380297 - Recipients counter miscounts number of message recipients (kde#380297)
  * Remove include</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
- Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * Hide "to:" if "to" is empty
  * Fix potential crash
  * Fix url
  * Fix setting custom header color in message list theme editor
  * Fix 'lambda-expression in unevaluated context' error
  * Allow to react when we click on url and other
  * Improve default color</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * Allow to show html source even if we have build as release
  * Add parent to qdialogbuttonbox</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * Fix Bug 386368 - Links in HTML emails broken by escaped ampersands (kde#386368)</changelog>
  <changelog author="lbeltrame@kde.org" date="1511265600">- Add fix-richtext-saving.patch: fix the state of rich text saving
  in KMail's composer (kde#386660)</changelog>
  <changelog author="lbeltrame@kde.org" date="1511265601">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Too many changes to list here
- Dropped patches, now upstream:
  * fix-richtext-saving.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * Fix crash when we delete attachment
  * fix x-kmail links with arguments</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Add patch to fix scrolling with Qt &gt;= 5.10 (boo#1074271):
  * 0001-Fix-Bug-388440-scrolling-in-KMail-page-down-only-wor.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * Repair Page Down with Qt 5.9, there documentElement.scrollTop doesn't work.
  * Fix Bug 388440 - scrolling in KMail: "page down" only works once (kde#388440)
  * Add the values of the Inotify find call to the appropriate lists
  * Not necessary to use private class here
  * Hide widget when we change message
- Dropped patches, now upstream:
  * 0001-Fix-Bug-388440-scrolling-in-KMail-page-down-only-wor.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Add normal text too. So we can switch from html to normal text too</changelog>
  <changelog author="wbauer@tmo.at" date="1518782400">- Add kde389592.patch to fix "Disable Emoticons" option not being
  remembered (boo#1078174, kde#389592)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * Reactivate code now
  * Reactivate scroll to
  * Remove some yellow style
  * Activate it
  * Fix add/remove yellow mark
  * Workaround bug found by David.
  * Patch from aleksejshilin</changelog>
  <changelog author="wbauer@tmo.at" date="1540382400">- Add 0001-Check-QtWebEngine-version-instead-of-Qt-s.patch to fix
  behavior of the PgUp/PgDown and Space keys in the messageviewer
  when QtWebEngine 5.10+ is used in combination with Qt 5.9 as in
  Leap 15 (boo#1105461, kde#397349)</changelog>
</package>
<package pkgid="e04d8ada04ae233315d28a32d8fe479f698abaf4159c5892c7ec3557bcbacd43" name="messagelib" arch="x86_64">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * Minor optimization
  * Minor optimization
  * Fix html here too
  * Fix i18n(...) it's a "block" variable here.
  * Reduce number of toUpper calling
  * Fix gpgsm processes being leaked due to QGpgME::KeyListJob not being deleted
  * Add metainfo.yaml</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Port isScrolledToBottom from jQuery to standard DOM, so it works even when jQuery isn't loaded
  * Rework timing of script injection for showing attachments in message viewer.
  * Use QFileInfo::exists(...) static method here
  * [autotests] more work towards stable autotests
  * [autotests] Let's see if this fixes the flakiness of the test
  * [autotests] Enable test mode in QStandardPaths to avoid interference from user settings.
  * Avoid timeout
  * Don't continue when we have error during compression.
  * Use QByteArrayLiteral here
  * [autotest] avoid timeout due to waiting for klauncher to exit
  * Use the same name as filename and name. It's more logical as discussed with David
  * Const'ify here
  * Use QByteArrayLiteral here
  * Use nullptr
  * Fix typo as reported by David</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Use base64 encoding for all non-text attachments (kde#95733)
  * crypto unittests can't be run in parallel since they start/stop gpg-agent
  * Don't break i18n
  * Fix Bug 379066 - Bug in Grantlee template when viewing SMIME Msg: plain HTML code is shown (kde#379066)
  * Handle help:/ URLs through QDesktopServices
  * [autotests] repair mailwebenginescripttest after my changes in 37b99257</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Make sure to sign/encrypt message when we send later
  * Change encryption too
  * Fix potential crash as david reported
  * Workaround assert in QtWebEngine 5.9 (ASSERT: "m_updateHttpCache")
  * Fix runtime warning about application/x-pkcs7-signature.
  * Use QTemporaryDir as discussed with David
  * Fix Bug 378526 - KMail 5.4.3: Attachment displayed with wrong filename (kde#378526)</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * Don't create link when path is empty
  * Use floating point calculations for column sizes to avoid accumulating rounding errors
  * messagelist: fix horizontal scrollbar when applying column sizes
  * Fix Bug 380297 - Recipients counter miscounts number of message recipients (kde#380297)
  * Remove include</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
- Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * Hide "to:" if "to" is empty
  * Fix potential crash
  * Fix url
  * Fix setting custom header color in message list theme editor
  * Fix 'lambda-expression in unevaluated context' error
  * Allow to react when we click on url and other
  * Improve default color</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * Allow to show html source even if we have build as release
  * Add parent to qdialogbuttonbox</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * Fix Bug 386368 - Links in HTML emails broken by escaped ampersands (kde#386368)</changelog>
  <changelog author="lbeltrame@kde.org" date="1511265600">- Add fix-richtext-saving.patch: fix the state of rich text saving
  in KMail's composer (kde#386660)</changelog>
  <changelog author="lbeltrame@kde.org" date="1511265601">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Too many changes to list here
- Dropped patches, now upstream:
  * fix-richtext-saving.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * Fix crash when we delete attachment
  * fix x-kmail links with arguments</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Add patch to fix scrolling with Qt &gt;= 5.10 (boo#1074271):
  * 0001-Fix-Bug-388440-scrolling-in-KMail-page-down-only-wor.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * Repair Page Down with Qt 5.9, there documentElement.scrollTop doesn't work.
  * Fix Bug 388440 - scrolling in KMail: "page down" only works once (kde#388440)
  * Add the values of the Inotify find call to the appropriate lists
  * Not necessary to use private class here
  * Hide widget when we change message
- Dropped patches, now upstream:
  * 0001-Fix-Bug-388440-scrolling-in-KMail-page-down-only-wor.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Add normal text too. So we can switch from html to normal text too</changelog>
  <changelog author="wbauer@tmo.at" date="1518782400">- Add kde389592.patch to fix "Disable Emoticons" option not being
  remembered (boo#1078174, kde#389592)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * Reactivate code now
  * Reactivate scroll to
  * Remove some yellow style
  * Activate it
  * Fix add/remove yellow mark
  * Workaround bug found by David.
  * Patch from aleksejshilin</changelog>
  <changelog author="wbauer@tmo.at" date="1540382400">- Add 0001-Check-QtWebEngine-version-instead-of-Qt-s.patch to fix
  behavior of the PgUp/PgDown and Space keys in the messageviewer
  when QtWebEngine 5.10+ is used in combination with Qt 5.9 as in
  Leap 15 (boo#1105461, kde#397349)</changelog>
</package>
<package pkgid="a14afe66aaa42e7aea5282a647e0433c70179dc10860551e0f0ccdc9abeadb9a" name="messagelib" arch="src">
  <version epoch="0" ver="17.12.3" rel="lp150.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Port isScrolledToBottom from jQuery to standard DOM, so it works even when jQuery isn't loaded
  * Rework timing of script injection for showing attachments in message viewer.
  * Use QFileInfo::exists(...) static method here
  * [autotests] more work towards stable autotests
  * [autotests] Let's see if this fixes the flakiness of the test
  * [autotests] Enable test mode in QStandardPaths to avoid interference from user settings.
  * Avoid timeout
  * Don't continue when we have error during compression.
  * Use QByteArrayLiteral here
  * [autotest] avoid timeout due to waiting for klauncher to exit
  * Use the same name as filename and name. It's more logical as discussed with David
  * Const'ify here
  * Use QByteArrayLiteral here
  * Use nullptr
  * Fix typo as reported by David</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Use base64 encoding for all non-text attachments (kde#95733)
  * crypto unittests can't be run in parallel since they start/stop gpg-agent
  * Don't break i18n
  * Fix Bug 379066 - Bug in Grantlee template when viewing SMIME Msg: plain HTML code is shown (kde#379066)
  * Handle help:/ URLs through QDesktopServices
  * [autotests] repair mailwebenginescripttest after my changes in 37b99257</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Make sure to sign/encrypt message when we send later
  * Change encryption too
  * Fix potential crash as david reported
  * Workaround assert in QtWebEngine 5.9 (ASSERT: "m_updateHttpCache")
  * Fix runtime warning about application/x-pkcs7-signature.
  * Use QTemporaryDir as discussed with David
  * Fix Bug 378526 - KMail 5.4.3: Attachment displayed with wrong filename (kde#378526)</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * Don't create link when path is empty
  * Use floating point calculations for column sizes to avoid accumulating rounding errors
  * messagelist: fix horizontal scrollbar when applying column sizes
  * Fix Bug 380297 - Recipients counter miscounts number of message recipients (kde#380297)
  * Remove include</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
- Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * Hide "to:" if "to" is empty
  * Fix potential crash
  * Fix url
  * Fix setting custom header color in message list theme editor
  * Fix 'lambda-expression in unevaluated context' error
  * Allow to react when we click on url and other
  * Improve default color</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * Allow to show html source even if we have build as release
  * Add parent to qdialogbuttonbox</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * Fix Bug 386368 - Links in HTML emails broken by escaped ampersands (kde#386368)</changelog>
  <changelog author="lbeltrame@kde.org" date="1511265600">- Add fix-richtext-saving.patch: fix the state of rich text saving
  in KMail's composer (kde#386660)</changelog>
  <changelog author="lbeltrame@kde.org" date="1511265601">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Too many changes to list here
- Dropped patches, now upstream:
  * fix-richtext-saving.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * Fix crash when we delete attachment
  * fix x-kmail links with arguments</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Add patch to fix scrolling with Qt &gt;= 5.10 (boo#1074271):
  * 0001-Fix-Bug-388440-scrolling-in-KMail-page-down-only-wor.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * Repair Page Down with Qt 5.9, there documentElement.scrollTop doesn't work.
  * Fix Bug 388440 - scrolling in KMail: "page down" only works once (kde#388440)
  * Add the values of the Inotify find call to the appropriate lists
  * Not necessary to use private class here
  * Hide widget when we change message
- Dropped patches, now upstream:
  * 0001-Fix-Bug-388440-scrolling-in-KMail-page-down-only-wor.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Add normal text too. So we can switch from html to normal text too</changelog>
  <changelog author="wbauer@tmo.at" date="1518782400">- Add kde389592.patch to fix "Disable Emoticons" option not being
  remembered (boo#1078174, kde#389592)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * Reactivate code now
  * Reactivate scroll to
  * Remove some yellow style
  * Activate it
  * Fix add/remove yellow mark
  * Workaround bug found by David.
  * Patch from aleksejshilin</changelog>
  <changelog author="wbauer@tmo.at" date="1540382400">- Add 0001-Check-QtWebEngine-version-instead-of-Qt-s.patch to fix
  behavior of the PgUp/PgDown and Space keys in the messageviewer
  when QtWebEngine 5.10+ is used in combination with Qt 5.9 as in
  Leap 15 (boo#1105461, kde#397349)</changelog>
  <changelog author="wbauer@tmo.at" date="1543838400">- Add Exclude-Refresh-from-MetaData.patch to fix a potentional
  security issue (boo#1117958, CVE-2018-19516)</changelog>
</package>
<package pkgid="595a29d594da9113b16d5c2291da4d9a40b0cff5ee6909b18a0f58332876f7cb" name="messagelib" arch="x86_64">
  <version epoch="0" ver="17.12.3" rel="lp150.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Port isScrolledToBottom from jQuery to standard DOM, so it works even when jQuery isn't loaded
  * Rework timing of script injection for showing attachments in message viewer.
  * Use QFileInfo::exists(...) static method here
  * [autotests] more work towards stable autotests
  * [autotests] Let's see if this fixes the flakiness of the test
  * [autotests] Enable test mode in QStandardPaths to avoid interference from user settings.
  * Avoid timeout
  * Don't continue when we have error during compression.
  * Use QByteArrayLiteral here
  * [autotest] avoid timeout due to waiting for klauncher to exit
  * Use the same name as filename and name. It's more logical as discussed with David
  * Const'ify here
  * Use QByteArrayLiteral here
  * Use nullptr
  * Fix typo as reported by David</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Use base64 encoding for all non-text attachments (kde#95733)
  * crypto unittests can't be run in parallel since they start/stop gpg-agent
  * Don't break i18n
  * Fix Bug 379066 - Bug in Grantlee template when viewing SMIME Msg: plain HTML code is shown (kde#379066)
  * Handle help:/ URLs through QDesktopServices
  * [autotests] repair mailwebenginescripttest after my changes in 37b99257</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Make sure to sign/encrypt message when we send later
  * Change encryption too
  * Fix potential crash as david reported
  * Workaround assert in QtWebEngine 5.9 (ASSERT: "m_updateHttpCache")
  * Fix runtime warning about application/x-pkcs7-signature.
  * Use QTemporaryDir as discussed with David
  * Fix Bug 378526 - KMail 5.4.3: Attachment displayed with wrong filename (kde#378526)</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * Don't create link when path is empty
  * Use floating point calculations for column sizes to avoid accumulating rounding errors
  * messagelist: fix horizontal scrollbar when applying column sizes
  * Fix Bug 380297 - Recipients counter miscounts number of message recipients (kde#380297)
  * Remove include</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
- Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * Hide "to:" if "to" is empty
  * Fix potential crash
  * Fix url
  * Fix setting custom header color in message list theme editor
  * Fix 'lambda-expression in unevaluated context' error
  * Allow to react when we click on url and other
  * Improve default color</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * Allow to show html source even if we have build as release
  * Add parent to qdialogbuttonbox</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * Fix Bug 386368 - Links in HTML emails broken by escaped ampersands (kde#386368)</changelog>
  <changelog author="lbeltrame@kde.org" date="1511265600">- Add fix-richtext-saving.patch: fix the state of rich text saving
  in KMail's composer (kde#386660)</changelog>
  <changelog author="lbeltrame@kde.org" date="1511265601">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Too many changes to list here
- Dropped patches, now upstream:
  * fix-richtext-saving.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * Fix crash when we delete attachment
  * fix x-kmail links with arguments</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Add patch to fix scrolling with Qt &gt;= 5.10 (boo#1074271):
  * 0001-Fix-Bug-388440-scrolling-in-KMail-page-down-only-wor.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * Repair Page Down with Qt 5.9, there documentElement.scrollTop doesn't work.
  * Fix Bug 388440 - scrolling in KMail: "page down" only works once (kde#388440)
  * Add the values of the Inotify find call to the appropriate lists
  * Not necessary to use private class here
  * Hide widget when we change message
- Dropped patches, now upstream:
  * 0001-Fix-Bug-388440-scrolling-in-KMail-page-down-only-wor.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Add normal text too. So we can switch from html to normal text too</changelog>
  <changelog author="wbauer@tmo.at" date="1518782400">- Add kde389592.patch to fix "Disable Emoticons" option not being
  remembered (boo#1078174, kde#389592)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * Reactivate code now
  * Reactivate scroll to
  * Remove some yellow style
  * Activate it
  * Fix add/remove yellow mark
  * Workaround bug found by David.
  * Patch from aleksejshilin</changelog>
  <changelog author="wbauer@tmo.at" date="1540382400">- Add 0001-Check-QtWebEngine-version-instead-of-Qt-s.patch to fix
  behavior of the PgUp/PgDown and Space keys in the messageviewer
  when QtWebEngine 5.10+ is used in combination with Qt 5.9 as in
  Leap 15 (boo#1105461, kde#397349)</changelog>
  <changelog author="wbauer@tmo.at" date="1543838400">- Add Exclude-Refresh-from-MetaData.patch to fix a potentional
  security issue (boo#1117958, CVE-2018-19516)</changelog>
</package>
<package pkgid="2d75da621ebef7992ce2ae1b5da71538de13f46abac350469ff70f14536e26d2" name="messagelib-devel" arch="x86_64">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * Minor optimization
  * Minor optimization
  * Fix html here too
  * Fix i18n(...) it's a "block" variable here.
  * Reduce number of toUpper calling
  * Fix gpgsm processes being leaked due to QGpgME::KeyListJob not being deleted
  * Add metainfo.yaml</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Port isScrolledToBottom from jQuery to standard DOM, so it works even when jQuery isn't loaded
  * Rework timing of script injection for showing attachments in message viewer.
  * Use QFileInfo::exists(...) static method here
  * [autotests] more work towards stable autotests
  * [autotests] Let's see if this fixes the flakiness of the test
  * [autotests] Enable test mode in QStandardPaths to avoid interference from user settings.
  * Avoid timeout
  * Don't continue when we have error during compression.
  * Use QByteArrayLiteral here
  * [autotest] avoid timeout due to waiting for klauncher to exit
  * Use the same name as filename and name. It's more logical as discussed with David
  * Const'ify here
  * Use QByteArrayLiteral here
  * Use nullptr
  * Fix typo as reported by David</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Use base64 encoding for all non-text attachments (kde#95733)
  * crypto unittests can't be run in parallel since they start/stop gpg-agent
  * Don't break i18n
  * Fix Bug 379066 - Bug in Grantlee template when viewing SMIME Msg: plain HTML code is shown (kde#379066)
  * Handle help:/ URLs through QDesktopServices
  * [autotests] repair mailwebenginescripttest after my changes in 37b99257</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Make sure to sign/encrypt message when we send later
  * Change encryption too
  * Fix potential crash as david reported
  * Workaround assert in QtWebEngine 5.9 (ASSERT: "m_updateHttpCache")
  * Fix runtime warning about application/x-pkcs7-signature.
  * Use QTemporaryDir as discussed with David
  * Fix Bug 378526 - KMail 5.4.3: Attachment displayed with wrong filename (kde#378526)</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * Don't create link when path is empty
  * Use floating point calculations for column sizes to avoid accumulating rounding errors
  * messagelist: fix horizontal scrollbar when applying column sizes
  * Fix Bug 380297 - Recipients counter miscounts number of message recipients (kde#380297)
  * Remove include</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
- Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * Hide "to:" if "to" is empty
  * Fix potential crash
  * Fix url
  * Fix setting custom header color in message list theme editor
  * Fix 'lambda-expression in unevaluated context' error
  * Allow to react when we click on url and other
  * Improve default color</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * Allow to show html source even if we have build as release
  * Add parent to qdialogbuttonbox</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * Fix Bug 386368 - Links in HTML emails broken by escaped ampersands (kde#386368)</changelog>
  <changelog author="lbeltrame@kde.org" date="1511265600">- Add fix-richtext-saving.patch: fix the state of rich text saving
  in KMail's composer (kde#386660)</changelog>
  <changelog author="lbeltrame@kde.org" date="1511265601">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Too many changes to list here
- Dropped patches, now upstream:
  * fix-richtext-saving.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * Fix crash when we delete attachment
  * fix x-kmail links with arguments</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Add patch to fix scrolling with Qt &gt;= 5.10 (boo#1074271):
  * 0001-Fix-Bug-388440-scrolling-in-KMail-page-down-only-wor.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * Repair Page Down with Qt 5.9, there documentElement.scrollTop doesn't work.
  * Fix Bug 388440 - scrolling in KMail: "page down" only works once (kde#388440)
  * Add the values of the Inotify find call to the appropriate lists
  * Not necessary to use private class here
  * Hide widget when we change message
- Dropped patches, now upstream:
  * 0001-Fix-Bug-388440-scrolling-in-KMail-page-down-only-wor.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Add normal text too. So we can switch from html to normal text too</changelog>
  <changelog author="wbauer@tmo.at" date="1518782400">- Add kde389592.patch to fix "Disable Emoticons" option not being
  remembered (boo#1078174, kde#389592)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * Reactivate code now
  * Reactivate scroll to
  * Remove some yellow style
  * Activate it
  * Fix add/remove yellow mark
  * Workaround bug found by David.
  * Patch from aleksejshilin</changelog>
  <changelog author="wbauer@tmo.at" date="1540382400">- Add 0001-Check-QtWebEngine-version-instead-of-Qt-s.patch to fix
  behavior of the PgUp/PgDown and Space keys in the messageviewer
  when QtWebEngine 5.10+ is used in combination with Qt 5.9 as in
  Leap 15 (boo#1105461, kde#397349)</changelog>
</package>
<package pkgid="cedf56cf8fd7fca4be50f48634e5e6f03d751e2a9f7e8f96b4fb16e41a142ea6" name="messagelib-devel" arch="x86_64">
  <version epoch="0" ver="17.12.3" rel="lp150.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Port isScrolledToBottom from jQuery to standard DOM, so it works even when jQuery isn't loaded
  * Rework timing of script injection for showing attachments in message viewer.
  * Use QFileInfo::exists(...) static method here
  * [autotests] more work towards stable autotests
  * [autotests] Let's see if this fixes the flakiness of the test
  * [autotests] Enable test mode in QStandardPaths to avoid interference from user settings.
  * Avoid timeout
  * Don't continue when we have error during compression.
  * Use QByteArrayLiteral here
  * [autotest] avoid timeout due to waiting for klauncher to exit
  * Use the same name as filename and name. It's more logical as discussed with David
  * Const'ify here
  * Use QByteArrayLiteral here
  * Use nullptr
  * Fix typo as reported by David</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Use base64 encoding for all non-text attachments (kde#95733)
  * crypto unittests can't be run in parallel since they start/stop gpg-agent
  * Don't break i18n
  * Fix Bug 379066 - Bug in Grantlee template when viewing SMIME Msg: plain HTML code is shown (kde#379066)
  * Handle help:/ URLs through QDesktopServices
  * [autotests] repair mailwebenginescripttest after my changes in 37b99257</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Make sure to sign/encrypt message when we send later
  * Change encryption too
  * Fix potential crash as david reported
  * Workaround assert in QtWebEngine 5.9 (ASSERT: "m_updateHttpCache")
  * Fix runtime warning about application/x-pkcs7-signature.
  * Use QTemporaryDir as discussed with David
  * Fix Bug 378526 - KMail 5.4.3: Attachment displayed with wrong filename (kde#378526)</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * Don't create link when path is empty
  * Use floating point calculations for column sizes to avoid accumulating rounding errors
  * messagelist: fix horizontal scrollbar when applying column sizes
  * Fix Bug 380297 - Recipients counter miscounts number of message recipients (kde#380297)
  * Remove include</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
- Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * Hide "to:" if "to" is empty
  * Fix potential crash
  * Fix url
  * Fix setting custom header color in message list theme editor
  * Fix 'lambda-expression in unevaluated context' error
  * Allow to react when we click on url and other
  * Improve default color</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * Allow to show html source even if we have build as release
  * Add parent to qdialogbuttonbox</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * Fix Bug 386368 - Links in HTML emails broken by escaped ampersands (kde#386368)</changelog>
  <changelog author="lbeltrame@kde.org" date="1511265600">- Add fix-richtext-saving.patch: fix the state of rich text saving
  in KMail's composer (kde#386660)</changelog>
  <changelog author="lbeltrame@kde.org" date="1511265601">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Too many changes to list here
- Dropped patches, now upstream:
  * fix-richtext-saving.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * Fix crash when we delete attachment
  * fix x-kmail links with arguments</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Add patch to fix scrolling with Qt &gt;= 5.10 (boo#1074271):
  * 0001-Fix-Bug-388440-scrolling-in-KMail-page-down-only-wor.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * Repair Page Down with Qt 5.9, there documentElement.scrollTop doesn't work.
  * Fix Bug 388440 - scrolling in KMail: "page down" only works once (kde#388440)
  * Add the values of the Inotify find call to the appropriate lists
  * Not necessary to use private class here
  * Hide widget when we change message
- Dropped patches, now upstream:
  * 0001-Fix-Bug-388440-scrolling-in-KMail-page-down-only-wor.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Add normal text too. So we can switch from html to normal text too</changelog>
  <changelog author="wbauer@tmo.at" date="1518782400">- Add kde389592.patch to fix "Disable Emoticons" option not being
  remembered (boo#1078174, kde#389592)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * Reactivate code now
  * Reactivate scroll to
  * Remove some yellow style
  * Activate it
  * Fix add/remove yellow mark
  * Workaround bug found by David.
  * Patch from aleksejshilin</changelog>
  <changelog author="wbauer@tmo.at" date="1540382400">- Add 0001-Check-QtWebEngine-version-instead-of-Qt-s.patch to fix
  behavior of the PgUp/PgDown and Space keys in the messageviewer
  when QtWebEngine 5.10+ is used in combination with Qt 5.9 as in
  Leap 15 (boo#1105461, kde#397349)</changelog>
  <changelog author="wbauer@tmo.at" date="1543838400">- Add Exclude-Refresh-from-MetaData.patch to fix a potentional
  security issue (boo#1117958, CVE-2018-19516)</changelog>
</package>
<package pkgid="ee751d50d3d9ae4cd24eef263efe1a4852eba8b28f618589fa68e9a11fa87a02" name="messagelib-lang" arch="noarch">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * Minor optimization
  * Minor optimization
  * Fix html here too
  * Fix i18n(...) it's a "block" variable here.
  * Reduce number of toUpper calling
  * Fix gpgsm processes being leaked due to QGpgME::KeyListJob not being deleted
  * Add metainfo.yaml</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Port isScrolledToBottom from jQuery to standard DOM, so it works even when jQuery isn't loaded
  * Rework timing of script injection for showing attachments in message viewer.
  * Use QFileInfo::exists(...) static method here
  * [autotests] more work towards stable autotests
  * [autotests] Let's see if this fixes the flakiness of the test
  * [autotests] Enable test mode in QStandardPaths to avoid interference from user settings.
  * Avoid timeout
  * Don't continue when we have error during compression.
  * Use QByteArrayLiteral here
  * [autotest] avoid timeout due to waiting for klauncher to exit
  * Use the same name as filename and name. It's more logical as discussed with David
  * Const'ify here
  * Use QByteArrayLiteral here
  * Use nullptr
  * Fix typo as reported by David</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Use base64 encoding for all non-text attachments (kde#95733)
  * crypto unittests can't be run in parallel since they start/stop gpg-agent
  * Don't break i18n
  * Fix Bug 379066 - Bug in Grantlee template when viewing SMIME Msg: plain HTML code is shown (kde#379066)
  * Handle help:/ URLs through QDesktopServices
  * [autotests] repair mailwebenginescripttest after my changes in 37b99257</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Make sure to sign/encrypt message when we send later
  * Change encryption too
  * Fix potential crash as david reported
  * Workaround assert in QtWebEngine 5.9 (ASSERT: "m_updateHttpCache")
  * Fix runtime warning about application/x-pkcs7-signature.
  * Use QTemporaryDir as discussed with David
  * Fix Bug 378526 - KMail 5.4.3: Attachment displayed with wrong filename (kde#378526)</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * Don't create link when path is empty
  * Use floating point calculations for column sizes to avoid accumulating rounding errors
  * messagelist: fix horizontal scrollbar when applying column sizes
  * Fix Bug 380297 - Recipients counter miscounts number of message recipients (kde#380297)
  * Remove include</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
- Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * Hide "to:" if "to" is empty
  * Fix potential crash
  * Fix url
  * Fix setting custom header color in message list theme editor
  * Fix 'lambda-expression in unevaluated context' error
  * Allow to react when we click on url and other
  * Improve default color</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * Allow to show html source even if we have build as release
  * Add parent to qdialogbuttonbox</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * Fix Bug 386368 - Links in HTML emails broken by escaped ampersands (kde#386368)</changelog>
  <changelog author="lbeltrame@kde.org" date="1511265600">- Add fix-richtext-saving.patch: fix the state of rich text saving
  in KMail's composer (kde#386660)</changelog>
  <changelog author="lbeltrame@kde.org" date="1511265601">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Too many changes to list here
- Dropped patches, now upstream:
  * fix-richtext-saving.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * Fix crash when we delete attachment
  * fix x-kmail links with arguments</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Add patch to fix scrolling with Qt &gt;= 5.10 (boo#1074271):
  * 0001-Fix-Bug-388440-scrolling-in-KMail-page-down-only-wor.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * Repair Page Down with Qt 5.9, there documentElement.scrollTop doesn't work.
  * Fix Bug 388440 - scrolling in KMail: "page down" only works once (kde#388440)
  * Add the values of the Inotify find call to the appropriate lists
  * Not necessary to use private class here
  * Hide widget when we change message
- Dropped patches, now upstream:
  * 0001-Fix-Bug-388440-scrolling-in-KMail-page-down-only-wor.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Add normal text too. So we can switch from html to normal text too</changelog>
  <changelog author="wbauer@tmo.at" date="1518782400">- Add kde389592.patch to fix "Disable Emoticons" option not being
  remembered (boo#1078174, kde#389592)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * Reactivate code now
  * Reactivate scroll to
  * Remove some yellow style
  * Activate it
  * Fix add/remove yellow mark
  * Workaround bug found by David.
  * Patch from aleksejshilin</changelog>
  <changelog author="wbauer@tmo.at" date="1540382400">- Add 0001-Check-QtWebEngine-version-instead-of-Qt-s.patch to fix
  behavior of the PgUp/PgDown and Space keys in the messageviewer
  when QtWebEngine 5.10+ is used in combination with Qt 5.9 as in
  Leap 15 (boo#1105461, kde#397349)</changelog>
</package>
<package pkgid="a179c4d67bcb099af85a2d122ca8960554a55eb5289ff1e53bdbf0ad8c6d399e" name="messagelib-lang" arch="noarch">
  <version epoch="0" ver="17.12.3" rel="lp150.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Port isScrolledToBottom from jQuery to standard DOM, so it works even when jQuery isn't loaded
  * Rework timing of script injection for showing attachments in message viewer.
  * Use QFileInfo::exists(...) static method here
  * [autotests] more work towards stable autotests
  * [autotests] Let's see if this fixes the flakiness of the test
  * [autotests] Enable test mode in QStandardPaths to avoid interference from user settings.
  * Avoid timeout
  * Don't continue when we have error during compression.
  * Use QByteArrayLiteral here
  * [autotest] avoid timeout due to waiting for klauncher to exit
  * Use the same name as filename and name. It's more logical as discussed with David
  * Const'ify here
  * Use QByteArrayLiteral here
  * Use nullptr
  * Fix typo as reported by David</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Use base64 encoding for all non-text attachments (kde#95733)
  * crypto unittests can't be run in parallel since they start/stop gpg-agent
  * Don't break i18n
  * Fix Bug 379066 - Bug in Grantlee template when viewing SMIME Msg: plain HTML code is shown (kde#379066)
  * Handle help:/ URLs through QDesktopServices
  * [autotests] repair mailwebenginescripttest after my changes in 37b99257</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Make sure to sign/encrypt message when we send later
  * Change encryption too
  * Fix potential crash as david reported
  * Workaround assert in QtWebEngine 5.9 (ASSERT: "m_updateHttpCache")
  * Fix runtime warning about application/x-pkcs7-signature.
  * Use QTemporaryDir as discussed with David
  * Fix Bug 378526 - KMail 5.4.3: Attachment displayed with wrong filename (kde#378526)</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * Don't create link when path is empty
  * Use floating point calculations for column sizes to avoid accumulating rounding errors
  * messagelist: fix horizontal scrollbar when applying column sizes
  * Fix Bug 380297 - Recipients counter miscounts number of message recipients (kde#380297)
  * Remove include</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
- Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * Hide "to:" if "to" is empty
  * Fix potential crash
  * Fix url
  * Fix setting custom header color in message list theme editor
  * Fix 'lambda-expression in unevaluated context' error
  * Allow to react when we click on url and other
  * Improve default color</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * Allow to show html source even if we have build as release
  * Add parent to qdialogbuttonbox</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * Fix Bug 386368 - Links in HTML emails broken by escaped ampersands (kde#386368)</changelog>
  <changelog author="lbeltrame@kde.org" date="1511265600">- Add fix-richtext-saving.patch: fix the state of rich text saving
  in KMail's composer (kde#386660)</changelog>
  <changelog author="lbeltrame@kde.org" date="1511265601">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Too many changes to list here
- Dropped patches, now upstream:
  * fix-richtext-saving.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * Fix crash when we delete attachment
  * fix x-kmail links with arguments</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Add patch to fix scrolling with Qt &gt;= 5.10 (boo#1074271):
  * 0001-Fix-Bug-388440-scrolling-in-KMail-page-down-only-wor.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * Repair Page Down with Qt 5.9, there documentElement.scrollTop doesn't work.
  * Fix Bug 388440 - scrolling in KMail: "page down" only works once (kde#388440)
  * Add the values of the Inotify find call to the appropriate lists
  * Not necessary to use private class here
  * Hide widget when we change message
- Dropped patches, now upstream:
  * 0001-Fix-Bug-388440-scrolling-in-KMail-page-down-only-wor.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Add normal text too. So we can switch from html to normal text too</changelog>
  <changelog author="wbauer@tmo.at" date="1518782400">- Add kde389592.patch to fix "Disable Emoticons" option not being
  remembered (boo#1078174, kde#389592)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * Reactivate code now
  * Reactivate scroll to
  * Remove some yellow style
  * Activate it
  * Fix add/remove yellow mark
  * Workaround bug found by David.
  * Patch from aleksejshilin</changelog>
  <changelog author="wbauer@tmo.at" date="1540382400">- Add 0001-Check-QtWebEngine-version-instead-of-Qt-s.patch to fix
  behavior of the PgUp/PgDown and Space keys in the messageviewer
  when QtWebEngine 5.10+ is used in combination with Qt 5.9 as in
  Leap 15 (boo#1105461, kde#397349)</changelog>
  <changelog author="wbauer@tmo.at" date="1543838400">- Add Exclude-Refresh-from-MetaData.patch to fix a potentional
  security issue (boo#1117958, CVE-2018-19516)</changelog>
</package>
<package pkgid="1d199110d2bdc5aff9ae0447c6bfe80ad0137feed5f20703806729b4127e2967" name="metatheme-breeze-common" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Adjusted Scrollbars so now they fit the Qt theme</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Fix background-image warning
  * Don't show scrollbar steppers</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Properly check for Breeze GTK 3 theme existence in kconf_update
  * Fixup install paths
  * Move the 3.0 directory to 3.18 to ensure builds will not fail (kde#388018)
  * Revert "Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally""
  * Revert "Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions"
  * Modify theme generator to match scrollbar updates
  * Add preliminary theme generation script for authoring assets
  * Add GTK 3.18 theme back to support LTS distributions
  * Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions
  * Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally" This commit causes the build to fail as gtk-3.18/ does not exist as a directory in the source tree
  * Apply text contrast changes to GTK 2 theme
  * Increase text contrast for consistency with default Breeze color scheme
  * Rename 3.20 theme to be used for all GTK 3 versions
  * Remove obsolete GTK versions' themes to improve maintainability
  * Update scrollbar assets (kde#385627)
  * Adjust client-side decorations to look correct in both CSD and forced SSD environments
  * Add support for gtk3 theme variant feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Add additional fixes:
  * 0001-kconf_update-Add-gtk-primary-button-warps-slider-0-t.patch (kde#379773</changelog>
</package>
<package pkgid="06a9c0562edb6b71e70fc48394dbadaaccee50f6278f18198577125a7b3e1769" name="metatheme-breeze-common" arch="x86_64">
  <version epoch="0" ver="5.12.7" rel="lp150.2.6.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Adjusted Scrollbars so now they fit the Qt theme</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Fix background-image warning
  * Don't show scrollbar steppers</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Properly check for Breeze GTK 3 theme existence in kconf_update
  * Fixup install paths
  * Move the 3.0 directory to 3.18 to ensure builds will not fail (kde#388018)
  * Revert "Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally""
  * Revert "Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions"
  * Modify theme generator to match scrollbar updates
  * Add preliminary theme generation script for authoring assets
  * Add GTK 3.18 theme back to support LTS distributions
  * Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions
  * Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally" This commit causes the build to fail as gtk-3.18/ does not exist as a directory in the source tree
  * Apply text contrast changes to GTK 2 theme
  * Increase text contrast for consistency with default Breeze color scheme
  * Rename 3.20 theme to be used for all GTK 3 versions
  * Remove obsolete GTK versions' themes to improve maintainability
  * Update scrollbar assets (kde#385627)
  * Adjust client-side decorations to look correct in both CSD and forced SSD environments
  * Add support for gtk3 theme variant feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Add additional fixes:
  * 0001-kconf_update-Add-gtk-primary-button-warps-slider-0-t.patch (kde#379773)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1537876800">- Update to 5.12.7
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.7.php
- Changes since 5.12.6:
  * Fix scrollbars in LibreOffice (kde#389709, boo#1116859)
  * [kconf_update] Add "gtk-primary-button-warps-slider=0" to generated GTK3 config (kde#379773)
- Remove patches, now upstream:
  * 0001-kconf_update-Add-gtk-primary-button-warps-slider-0-t.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1542801600">- Add patch to fix GTK treeviews:
  * 0001-GTK-theme-treeview-style-typo-bug-fix.patch</changelog>
</package>
<package pkgid="1d6f225c021b37aeba83e348e55da029b4408042761ba10ee057ed564d801db4" name="mgetty" arch="src">
  <version epoch="0" ver="1.1.37" rel="lp150.2.3.1"/>
  <changelog author="crrodriguez@suse.de" date="1223553600">- fix implicit-fortify-decl errors</changelog>
  <changelog author="prusnak@suse.cz" date="1226059200">- alter tempfile.patch to reuse spooldir (CVE-2008-4936) [bnc#442596]</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1283083200">- Do not include build date in binaries</changelog>
  <changelog author="gjhe@novell.com" date="1305288000">- fix bug [bnc#646280],adjust faxspool to process pdf file using
  gs directly, do not use acroreader.</changelog>
  <changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro</changelog>
  <changelog author="coolo@suse.com" date="1324900800">- don't package files twice</changelog>
  <changelog author="prusnak@opensuse.org" date="1327406400">- build with PIE [bnc#743151]</changelog>
  <changelog author="mweckbecker@suse.com" date="1331294400">- fixpie.patch: Use LDFLAGS instead of CFLAGS to make building with
  PIE work properly</changelog>
  <changelog author="coolo@suse.com" date="1347364800">- add makeinfo as explicit buildrequire</changelog>
  <changelog author="dmueller@suse.com" date="1357819200">- replace run_permissions call with set_permissions (bnc#764113)</changelog>
  <changelog author="schwab@suse.de" date="1362484800">- lp64.patch: Add support for future LP64 platforms</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1417089600">- fix bashisms in faxback.sh script
- add patches:
  * mgetty-1.1.36-fix-bashisms.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1422100800">- Add mgetty@.service and vgetty@.service (boo#914661)</changelog>
  <changelog author="mpluskal@suse.com" date="1422446400">- Require systemd-rpm-macros instead of systemd for building</changelog>
  <changelog author="mpluskal@suse.com" date="1456574400">- Use correct permissions for unit files (boo#968571)</changelog>
  <changelog author="kukuk@suse.de" date="1477483200">- Add PreReq for group uucp to sendfax package</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Cleanup a bit with spec-cleaner
- Remove few rpmlint warnings and reduce the deps to contain only
  what is needed
- Add patch to build with gcc7 0001-Fix-build-failure-with-gcc-7.patch
  bsc#1041290</changelog>
  <changelog author="sbrabec@suse.com" date="1496836800">- Update to version 1.1.37:
  * faxspool: implement "-t hh:mm-hh:mm" time-range syntax, add
  @DATE +&lt;format&gt;@ to faxheader processing
  * faxq: properly display queued jobs with time-range field
  * faxrunqd: correctly handle jobs running out of the end of their
  sent-time window.
  INCOMPATIBLE CHANGE: Changes handling of "-t hh:mm" to
  "from hh:mm to midnight"
  * microcom: improve read-from-device exception handling
  * sendfax: send NSF frame on reception,
  new option reset-after-fail
  * faxrunqd: enhance and clarify per-modem statistics
- New build fixes (mgetty-noroot.patch, mgetty-mkdir-p.patch).
- Update patches
  (mgetty-1.1.36-callback.patch -&gt; mgetty-1.1.37-callback.patch,
  mgetty-1.1.36-makefile.patch -&gt; mgetty-1.1.37-makefile.patch).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1537531200">- Added patches:
  * mgetty-fix-buffer-overflow.patch - upstream patch, sets maximum
  length of a string to prevent buffer overflow and thus possible
  command injection
  * mgetty-delete-obsolete.patch - upstream-based patch, deletes
  obsolete file contrib/scrts.c, which could cause buffer overflow
- Fixed bugs:
  * bsc#1108756 (CVE-2018-16745): Stack-based buffer overflow in
    fax_notify_mail() in faxrec.c
  * bsc#1108757 (CVE-2018-16744): Command injection in faxrec.c
  * bsc#1108762 (CVE-2018-16742): Stack-based buffer overflow in
    contrib/scrts.c triggered via command line parameter
  * bsc#1108761 (CVE-2018-16743): Stack-based buffer overflow with
    long username in contrib/next-login/login.c</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1537531201">- Added patch mgetty-fax-block-code-injection.patch to fix
  bsc#1108752 (CVE-2018-16741): command injection in fax/faxq-helper.c</changelog>
</package>
<package pkgid="d6149d03bc4af14cf2172664bc3034d6d52d3bfdba87dc68dc2a63b5fd82e435" name="mgetty" arch="x86_64">
  <version epoch="0" ver="1.1.37" rel="lp150.2.3.1"/>
  <changelog author="cristian.rodriguez@opensuse.org" date="1283083200">- Do not include build date in binaries</changelog>
  <changelog author="gjhe@novell.com" date="1305288000">- fix bug [bnc#646280],adjust faxspool to process pdf file using
  gs directly, do not use acroreader.</changelog>
  <changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro</changelog>
  <changelog author="coolo@suse.com" date="1324900800">- don't package files twice</changelog>
  <changelog author="prusnak@opensuse.org" date="1327406400">- build with PIE [bnc#743151]</changelog>
  <changelog author="mweckbecker@suse.com" date="1331294400">- fixpie.patch: Use LDFLAGS instead of CFLAGS to make building with
  PIE work properly</changelog>
  <changelog author="coolo@suse.com" date="1347364800">- add makeinfo as explicit buildrequire</changelog>
  <changelog author="dmueller@suse.com" date="1357819200">- replace run_permissions call with set_permissions (bnc#764113)</changelog>
  <changelog author="schwab@suse.de" date="1362484800">- lp64.patch: Add support for future LP64 platforms</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1417089600">- fix bashisms in faxback.sh script
- add patches:
  * mgetty-1.1.36-fix-bashisms.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1422100800">- Add mgetty@.service and vgetty@.service (boo#914661)</changelog>
  <changelog author="mpluskal@suse.com" date="1422446400">- Require systemd-rpm-macros instead of systemd for building</changelog>
  <changelog author="mpluskal@suse.com" date="1456574400">- Use correct permissions for unit files (boo#968571)</changelog>
  <changelog author="kukuk@suse.de" date="1477483200">- Add PreReq for group uucp to sendfax package</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Cleanup a bit with spec-cleaner
- Remove few rpmlint warnings and reduce the deps to contain only
  what is needed
- Add patch to build with gcc7 0001-Fix-build-failure-with-gcc-7.patch
  bsc#1041290</changelog>
  <changelog author="sbrabec@suse.com" date="1496836800">- Update to version 1.1.37:
  * faxspool: implement "-t hh:mm-hh:mm" time-range syntax, add
  @DATE +&lt;format&gt;@ to faxheader processing
  * faxq: properly display queued jobs with time-range field
  * faxrunqd: correctly handle jobs running out of the end of their
  sent-time window.
  INCOMPATIBLE CHANGE: Changes handling of "-t hh:mm" to
  "from hh:mm to midnight"
  * microcom: improve read-from-device exception handling
  * sendfax: send NSF frame on reception,
  new option reset-after-fail
  * faxrunqd: enhance and clarify per-modem statistics
- New build fixes (mgetty-noroot.patch, mgetty-mkdir-p.patch).
- Update patches
  (mgetty-1.1.36-callback.patch -&gt; mgetty-1.1.37-callback.patch,
  mgetty-1.1.36-makefile.patch -&gt; mgetty-1.1.37-makefile.patch).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1537531200">- Added patches:
  * mgetty-fix-buffer-overflow.patch - upstream patch, sets maximum
  length of a string to prevent buffer overflow and thus possible
  command injection
  * mgetty-delete-obsolete.patch - upstream-based patch, deletes
  obsolete file contrib/scrts.c, which could cause buffer overflow
- Fixed bugs:
  * bsc#1108756 (CVE-2018-16745): Stack-based buffer overflow in
    fax_notify_mail() in faxrec.c
  * bsc#1108757 (CVE-2018-16744): Command injection in faxrec.c
  * bsc#1108762 (CVE-2018-16742): Stack-based buffer overflow in
    contrib/scrts.c triggered via command line parameter
  * bsc#1108761 (CVE-2018-16743): Stack-based buffer overflow with
    long username in contrib/next-login/login.c</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1537531201">- Added patch mgetty-fax-block-code-injection.patch to fix
  bsc#1108752 (CVE-2018-16741): command injection in fax/faxq-helper.c</changelog>
</package>
<package pkgid="a712f2d133cc26d6830f9990c0cd2f853aedffe3915e214dbbb63166c57e8d8c" name="midori-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="4.12.0" rel="lp150.5.3.1"/>
  <changelog author="gber@opensuse.org" date="1362916800">- support openSUSE 13.1</changelog>
  <changelog author="gber@opensuse.org" date="1367496000">- follow the exo package changes and rename exo-branding-openSUSE
  to libexo-1-0-branding-openSUSE and move helpers.rc in an
  API-versioned subdirectory</changelog>
  <changelog author="gber@opensuse.org" date="1380974400">- add support for 13.2, drop support for &lt; 12.2</changelog>
  <changelog author="gber@opensuse.org" date="1383048000">- improve suse_version overlay system
- add xfce4-power-manager-branding-openSUSE with default actions
  for button press events and critical battery levels</changelog>
  <changelog author="gber@opensuse.org" date="1398600000">- remove support for openSUSE &lt; 12.3
- add custom theme for xfce4-notifyd</changelog>
  <changelog author="gber@opensuse.org" date="1398945600">- adjust to GTK 3 variant of libxfce4ui</changelog>
  <changelog author="gber@opensuse.org" date="1401710400">- adapt xfce4-power-manager branding to version 1.3.0
- fix typo
- rename source tarball removing the meaningless version</changelog>
  <changelog author="gber@opensuse.org" date="1401796800">- fix critical power action and hdd spindown settings</changelog>
  <changelog author="gber@opensuse.org" date="1406635200">- recommend xfce4-panel-plugin-xfce4battery which is in the panel
  branding</changelog>
  <changelog author="gber@opensuse.org" date="1408622400">- xfce4-panel-plugin-xfce4battery was renamed to
  power-manager-plugin</changelog>
  <changelog author="gber@opensuse.org" date="1425211200">- bump version to 4.12
- lock screen on suspen/hibernate</changelog>
  <changelog author="gber@opensuse.org" date="1427544000">- on &gt;= 13.2 package-manager.desktop was renamed to
  yast2-packager.desktop (boo#892936)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480161600">- adapt to changes in exo package (exo-1 subdir patch removed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480248000">- fix exo-branding provides / obsoletes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507464000">- replace application-menu with whiskermenu
- brand whiskermenu suse style
- require whiskermenu from panel-branding-openSUSE
- fix obsoletes of exo-branding-openSUSE</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507723200">- use plugin-pulseaudio instead of plugin-mixer
- recommend pavucontrol and plugin-pulseaudio instead of xfe4-mixer</changelog>
  <changelog author="florian.koch1981@gmail.com" date="1514462400">- use adwaita-icon-theme instead of gnome-icon-theme
  as fallback icon theme
  The reasons for this change are that Upstream gnome no
  longer uses gnome-icon-theme, and to save space on te Thumbleweed
  rescue CD, requested by DimStar
  https://lists.opensuse.org/opensuse-xfce/2017-05/msg00000.html
- fix /etc/xfce_defaults.conf not declared as %conf</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514894400">- fix spelling of "Adwaita" in index.theme (boo#1074269)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1517745600">- fix openSUSE splash screen</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520424000">- revert last change, branding package has been fixed</changelog>
</package>
<package pkgid="a6e1d2a38bddd41b92a06b1d1f002edcfc5e316622a3efcaa3d65933b54133aa" name="milou5" arch="src">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * make krunner accessible
  * spdx validation
  * Remove unused import
  * Remove unused import
  * [ResultDelegate] Enforce PlainText
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Fix i18ncd -&gt; i18ndc.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * [ResultDelegate] Silence i18n when ListView.section is empty
  * [ResultDelegate] Workaround subtextLabel leaking outside its container
  * [ResultDelegate] Get rid of Globals.js
  * adjust license to be readable by KAboutData</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Include ECMAddTests after KDECompilerSettings, for policy covering
  * Require KDE Frameworks 5.42 and Qt 5.9
  * Move cmake_minimum_required to top
  * Prevent cmake 3.10+ warning with automoc &amp; MILOU_EXPORT_PREVIEW</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * [SourcesModel] Check changed file name before reloading configuration</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Add additional fixes:
  * 0001-Support-both-QString-and-QIcon-for-dragHelper-pixmap.patch</changelog>
</package>
<package pkgid="793eaea95fda4579f2c06af0d51cd4875464bf8cbddbdd01181236e18c710e53" name="milou5" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * make krunner accessible
  * spdx validation
  * Remove unused import
  * Remove unused import
  * [ResultDelegate] Enforce PlainText
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Fix i18ncd -&gt; i18ndc.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * [ResultDelegate] Silence i18n when ListView.section is empty
  * [ResultDelegate] Workaround subtextLabel leaking outside its container
  * [ResultDelegate] Get rid of Globals.js
  * adjust license to be readable by KAboutData</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Include ECMAddTests after KDECompilerSettings, for policy covering
  * Require KDE Frameworks 5.42 and Qt 5.9
  * Move cmake_minimum_required to top
  * Prevent cmake 3.10+ warning with automoc &amp; MILOU_EXPORT_PREVIEW</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * [SourcesModel] Check changed file name before reloading configuration</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Add additional fixes:
  * 0001-Support-both-QString-and-QIcon-for-dragHelper-pixmap.patch</changelog>
</package>
<package pkgid="48e79ecf28fbe639d17e08ff218991cf561445bc716344e063030285af0e5ac9" name="milou5-lang" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * make krunner accessible
  * spdx validation
  * Remove unused import
  * Remove unused import
  * [ResultDelegate] Enforce PlainText
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Fix i18ncd -&gt; i18ndc.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * [ResultDelegate] Silence i18n when ListView.section is empty
  * [ResultDelegate] Workaround subtextLabel leaking outside its container
  * [ResultDelegate] Get rid of Globals.js
  * adjust license to be readable by KAboutData</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Include ECMAddTests after KDECompilerSettings, for policy covering
  * Require KDE Frameworks 5.42 and Qt 5.9
  * Move cmake_minimum_required to top
  * Prevent cmake 3.10+ warning with automoc &amp; MILOU_EXPORT_PREVIEW</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * [SourcesModel] Check changed file name before reloading configuration</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Add additional fixes:
  * 0001-Support-both-QString-and-QIcon-for-dragHelper-pixmap.patch</changelog>
</package>
<package pkgid="03b7d2ffbc30d1a1b9a9a50fcbbc29271b2d2e457a5faf10d71d36970753ecb9" name="minetest" arch="src">
  <version epoch="0" ver="0.4.17.1" rel="lp150.5.3.1"/>
  <changelog author="m407@mail.ru" date="1355054400">- Build version 0.4.4</changelog>
  <changelog author="mailaender@opensuse.org" date="1365768000">- update to version 0.4.6</changelog>
  <changelog author="opensuse@dstoecker.de" date="1375963200">- update to 0.4.7</changelog>
  <changelog author="mailaender@opensuse.org" date="1389096000">- update to 0.4.9
- use simpler GitHub release https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="khyota@redhyena.net" date="1417089600">- update title and description</changelog>
  <changelog author="ejobling248@gmail.com" date="1420632000">- update to 0.4.11</changelog>
  <changelog author="khyota@redhyena.net" date="1424347200">- update to 0.4.12</changelog>
  <changelog author="adam@mizerski.pl" date="1428840000">- Cleaned up spec file
  - Used spec-cleaner
  - sorted and revised BuildRequires
  - removed all "%if 0%{?suse_version}" - there's too many openSUSE
    specific things to keep it really multi-distro.
- Splitted compilation of minetest and minetestserver
  (idea borrowed from ArchLinux)
  - Splitted minetest package into minetest, minetestserver and
    minetest-data.
- Enabled support for translations.
  - Added minetest-lang subpackage.
- Enabled support for redis and leveldb to minetestsever
- Fixed support for opengl-game-wrapper.sh
- Made minetest use system jsoncpp and lua instead of bundled ones.
- Added files:
  - minetest@.service
  - minetest-rpmlintrc
  - supress warning aboud desktop file pointing to minetest-wrapper
- Added patches:
  - FindJson.cmake.patch - copied from Debian.
  - i18n.patch - copied from Debian.
  - minetest-0.4.8-shared-irrlicht.patch - copied from Fedora.
  - shared_mods.patch - copied from Debian and modified.
- Added "minetest" user and group for minetestserver.</changelog>
  <changelog author="rpm@fthiessen.de" date="1448366400">- Update to 0.4.13:
  * Added: fix-find-luajit.patch to detect systems luajit correctly
  * Removed upstream fixed FindJson.cmake.patch and
    minetest-0.4.8-shared-irrlicht.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1449057600">- Added fix-cguittfont.patch to fix missing library "libcguittfont".</changelog>
  <changelog author="rpm@fthiessen.de" date="1463400000">- Update to 0.4.14
- Removed upstream fixed fix-cguittfont.patch,
  i18n.patch and fix-find-luajit.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1469620800">- Replace fonts by system ones.
- Fixed license.</changelog>
  <changelog author="mailaender@opensuse.org" date="1482753600">- Update to 0.4.15</changelog>
  <changelog author="khyota@redhyena.net" date="1483617600">- Add use-pkg-config-to-find-luajit.patch https://github.com/minetest/minetest/issues/4483</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496664000">- Update to version 0.4.16:
  * Add 2D sheet animations for nodes ''(sfan5)''
  * Drop client side chat prediction. No more messages shown to chat
    when you talk and you are disconnected. ''(red-001)''
  * Add particle animation, glow ''(sfan5)
  * Server list: add ping indicators ''(kilbith)''
  * Server side occlusion culling ''(lhofhansl)''
  * New custom progress bar (you can customize it with texture packs)
    (kilbith)
  * Implement delayed shutdown for server owners: /shutdown 60 =&gt;
    shutdowns in 1 min /shutdown -1 cancels it
  * Add support for requesting a reconnect and changing the shutdown
    message to /shutdown
  * Add a mapblock cache in MeshUpdateQueue to improve client rendering
    performance ''(celeron55)''
  * Player data can now be into database. This is an important change,
    players to files are always supported for this release but deprecated.
    Files backend for players will be removed in a future release. See
    http://wiki.minetest.net/Database_backends for compat matrix and
    migration steps.
  * Sounds: add fading sounds
  * Save automatically window size when modified. This behaviour can
    be disabled in client settings
  * Add cancel button to password change formspec
  * Improve pause menu with more user friendly informations and update
    keys dynamicly depending on your configuration
  * Merge singleplayer &amp; server tab on desktop clients
  * Add /clearinv chat command
  * Add keyword-based search to server-list and advance settings
  * Add hardware-based itemstacks and node coloring
  * Undersampling which should make minetest run better on low end devices
  * Full changelog see http://dev.minetest.net/Changelog#0.4.15_.E2.86.92_0.4.16
- Minor spec cleanup.</changelog>
  <changelog author="opensuse@trummer.xyz" date="1516622400">- Recommend minetest-game to make server package more useful by default</changelog>
  <changelog author="opensuse@trummer.xyz" date="1516708800">- Added PostgreSQL database backend</changelog>
  <changelog author="werner@suse.de" date="1520596800">- Use pkg-config information to set PNG_PNG_INCLUDE_DIR for cmake</changelog>
  <changelog author="werner@suse.de" date="1520596801">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
</package>
<package pkgid="870f39c90e622e37da08918276ae97fba741a5398e4588aebfc6a5981fac48b3" name="minetest" arch="x86_64">
  <version epoch="0" ver="0.4.17.1" rel="lp150.5.3.1"/>
  <changelog author="m407@mail.ru" date="1355054400">- Build version 0.4.4</changelog>
  <changelog author="mailaender@opensuse.org" date="1365768000">- update to version 0.4.6</changelog>
  <changelog author="opensuse@dstoecker.de" date="1375963200">- update to 0.4.7</changelog>
  <changelog author="mailaender@opensuse.org" date="1389096000">- update to 0.4.9
- use simpler GitHub release https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="khyota@redhyena.net" date="1417089600">- update title and description</changelog>
  <changelog author="ejobling248@gmail.com" date="1420632000">- update to 0.4.11</changelog>
  <changelog author="khyota@redhyena.net" date="1424347200">- update to 0.4.12</changelog>
  <changelog author="adam@mizerski.pl" date="1428840000">- Cleaned up spec file
  - Used spec-cleaner
  - sorted and revised BuildRequires
  - removed all "%if 0%{?suse_version}" - there's too many openSUSE
    specific things to keep it really multi-distro.
- Splitted compilation of minetest and minetestserver
  (idea borrowed from ArchLinux)
  - Splitted minetest package into minetest, minetestserver and
    minetest-data.
- Enabled support for translations.
  - Added minetest-lang subpackage.
- Enabled support for redis and leveldb to minetestsever
- Fixed support for opengl-game-wrapper.sh
- Made minetest use system jsoncpp and lua instead of bundled ones.
- Added files:
  - minetest@.service
  - minetest-rpmlintrc
  - supress warning aboud desktop file pointing to minetest-wrapper
- Added patches:
  - FindJson.cmake.patch - copied from Debian.
  - i18n.patch - copied from Debian.
  - minetest-0.4.8-shared-irrlicht.patch - copied from Fedora.
  - shared_mods.patch - copied from Debian and modified.
- Added "minetest" user and group for minetestserver.</changelog>
  <changelog author="rpm@fthiessen.de" date="1448366400">- Update to 0.4.13:
  * Added: fix-find-luajit.patch to detect systems luajit correctly
  * Removed upstream fixed FindJson.cmake.patch and
    minetest-0.4.8-shared-irrlicht.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1449057600">- Added fix-cguittfont.patch to fix missing library "libcguittfont".</changelog>
  <changelog author="rpm@fthiessen.de" date="1463400000">- Update to 0.4.14
- Removed upstream fixed fix-cguittfont.patch,
  i18n.patch and fix-find-luajit.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1469620800">- Replace fonts by system ones.
- Fixed license.</changelog>
  <changelog author="mailaender@opensuse.org" date="1482753600">- Update to 0.4.15</changelog>
  <changelog author="khyota@redhyena.net" date="1483617600">- Add use-pkg-config-to-find-luajit.patch https://github.com/minetest/minetest/issues/4483</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496664000">- Update to version 0.4.16:
  * Add 2D sheet animations for nodes ''(sfan5)''
  * Drop client side chat prediction. No more messages shown to chat
    when you talk and you are disconnected. ''(red-001)''
  * Add particle animation, glow ''(sfan5)
  * Server list: add ping indicators ''(kilbith)''
  * Server side occlusion culling ''(lhofhansl)''
  * New custom progress bar (you can customize it with texture packs)
    (kilbith)
  * Implement delayed shutdown for server owners: /shutdown 60 =&gt;
    shutdowns in 1 min /shutdown -1 cancels it
  * Add support for requesting a reconnect and changing the shutdown
    message to /shutdown
  * Add a mapblock cache in MeshUpdateQueue to improve client rendering
    performance ''(celeron55)''
  * Player data can now be into database. This is an important change,
    players to files are always supported for this release but deprecated.
    Files backend for players will be removed in a future release. See
    http://wiki.minetest.net/Database_backends for compat matrix and
    migration steps.
  * Sounds: add fading sounds
  * Save automatically window size when modified. This behaviour can
    be disabled in client settings
  * Add cancel button to password change formspec
  * Improve pause menu with more user friendly informations and update
    keys dynamicly depending on your configuration
  * Merge singleplayer &amp; server tab on desktop clients
  * Add /clearinv chat command
  * Add keyword-based search to server-list and advance settings
  * Add hardware-based itemstacks and node coloring
  * Undersampling which should make minetest run better on low end devices
  * Full changelog see http://dev.minetest.net/Changelog#0.4.15_.E2.86.92_0.4.16
- Minor spec cleanup.</changelog>
  <changelog author="opensuse@trummer.xyz" date="1516622400">- Recommend minetest-game to make server package more useful by default</changelog>
  <changelog author="opensuse@trummer.xyz" date="1516708800">- Added PostgreSQL database backend</changelog>
  <changelog author="werner@suse.de" date="1520596800">- Use pkg-config information to set PNG_PNG_INCLUDE_DIR for cmake</changelog>
  <changelog author="werner@suse.de" date="1520596801">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
</package>
<package pkgid="6f6286d803d25fcc905f0cb612172baafd13733e1b8ca17995236dc7046c1afb" name="minetest-data" arch="noarch">
  <version epoch="0" ver="0.4.17.1" rel="lp150.5.3.1"/>
  <changelog author="m407@mail.ru" date="1355054400">- Build version 0.4.4</changelog>
  <changelog author="mailaender@opensuse.org" date="1365768000">- update to version 0.4.6</changelog>
  <changelog author="opensuse@dstoecker.de" date="1375963200">- update to 0.4.7</changelog>
  <changelog author="mailaender@opensuse.org" date="1389096000">- update to 0.4.9
- use simpler GitHub release https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="khyota@redhyena.net" date="1417089600">- update title and description</changelog>
  <changelog author="ejobling248@gmail.com" date="1420632000">- update to 0.4.11</changelog>
  <changelog author="khyota@redhyena.net" date="1424347200">- update to 0.4.12</changelog>
  <changelog author="adam@mizerski.pl" date="1428840000">- Cleaned up spec file
  - Used spec-cleaner
  - sorted and revised BuildRequires
  - removed all "%if 0%{?suse_version}" - there's too many openSUSE
    specific things to keep it really multi-distro.
- Splitted compilation of minetest and minetestserver
  (idea borrowed from ArchLinux)
  - Splitted minetest package into minetest, minetestserver and
    minetest-data.
- Enabled support for translations.
  - Added minetest-lang subpackage.
- Enabled support for redis and leveldb to minetestsever
- Fixed support for opengl-game-wrapper.sh
- Made minetest use system jsoncpp and lua instead of bundled ones.
- Added files:
  - minetest@.service
  - minetest-rpmlintrc
  - supress warning aboud desktop file pointing to minetest-wrapper
- Added patches:
  - FindJson.cmake.patch - copied from Debian.
  - i18n.patch - copied from Debian.
  - minetest-0.4.8-shared-irrlicht.patch - copied from Fedora.
  - shared_mods.patch - copied from Debian and modified.
- Added "minetest" user and group for minetestserver.</changelog>
  <changelog author="rpm@fthiessen.de" date="1448366400">- Update to 0.4.13:
  * Added: fix-find-luajit.patch to detect systems luajit correctly
  * Removed upstream fixed FindJson.cmake.patch and
    minetest-0.4.8-shared-irrlicht.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1449057600">- Added fix-cguittfont.patch to fix missing library "libcguittfont".</changelog>
  <changelog author="rpm@fthiessen.de" date="1463400000">- Update to 0.4.14
- Removed upstream fixed fix-cguittfont.patch,
  i18n.patch and fix-find-luajit.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1469620800">- Replace fonts by system ones.
- Fixed license.</changelog>
  <changelog author="mailaender@opensuse.org" date="1482753600">- Update to 0.4.15</changelog>
  <changelog author="khyota@redhyena.net" date="1483617600">- Add use-pkg-config-to-find-luajit.patch https://github.com/minetest/minetest/issues/4483</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496664000">- Update to version 0.4.16:
  * Add 2D sheet animations for nodes ''(sfan5)''
  * Drop client side chat prediction. No more messages shown to chat
    when you talk and you are disconnected. ''(red-001)''
  * Add particle animation, glow ''(sfan5)
  * Server list: add ping indicators ''(kilbith)''
  * Server side occlusion culling ''(lhofhansl)''
  * New custom progress bar (you can customize it with texture packs)
    (kilbith)
  * Implement delayed shutdown for server owners: /shutdown 60 =&gt;
    shutdowns in 1 min /shutdown -1 cancels it
  * Add support for requesting a reconnect and changing the shutdown
    message to /shutdown
  * Add a mapblock cache in MeshUpdateQueue to improve client rendering
    performance ''(celeron55)''
  * Player data can now be into database. This is an important change,
    players to files are always supported for this release but deprecated.
    Files backend for players will be removed in a future release. See
    http://wiki.minetest.net/Database_backends for compat matrix and
    migration steps.
  * Sounds: add fading sounds
  * Save automatically window size when modified. This behaviour can
    be disabled in client settings
  * Add cancel button to password change formspec
  * Improve pause menu with more user friendly informations and update
    keys dynamicly depending on your configuration
  * Merge singleplayer &amp; server tab on desktop clients
  * Add /clearinv chat command
  * Add keyword-based search to server-list and advance settings
  * Add hardware-based itemstacks and node coloring
  * Undersampling which should make minetest run better on low end devices
  * Full changelog see http://dev.minetest.net/Changelog#0.4.15_.E2.86.92_0.4.16
- Minor spec cleanup.</changelog>
  <changelog author="opensuse@trummer.xyz" date="1516622400">- Recommend minetest-game to make server package more useful by default</changelog>
  <changelog author="opensuse@trummer.xyz" date="1516708800">- Added PostgreSQL database backend</changelog>
  <changelog author="werner@suse.de" date="1520596800">- Use pkg-config information to set PNG_PNG_INCLUDE_DIR for cmake</changelog>
  <changelog author="werner@suse.de" date="1520596801">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
</package>
<package pkgid="4ed7c003e903efe3a57a764dd23cb2057ec291431015d470defe39b3eec23e5a" name="minetest-game" arch="noarch">
  <version epoch="0" ver="0.4.17" rel="lp150.3.3.1"/>
  <changelog author="m407@mail.ru" date="1344600000">- Initial package (version 0.4.1) for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1344600001">- Remove redundant tags/sections from specfile
- Always build for noarch</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1348315200">- Build version 0.4.3</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1348401600">- Renamed the spec and changes file to the correct name
- Removed the creative mod as it's currently broken
- Used fdupes to get link duplicate file</changelog>
  <changelog author="m407@mail.ru" date="1355054400">- Build version 0.4.4</changelog>
  <changelog author="mailaender@opensuse.org" date="1365768000">- update to version 0.4.6</changelog>
  <changelog author="opensuse@dstoecker.de" date="1375963200">- update to 0.4.7</changelog>
  <changelog author="mailaender@opensuse.org" date="1389096000">- update 0.4.9</changelog>
  <changelog author="mailaender@opensuse.org" date="1411300800">- update 0.4.10</changelog>
  <changelog author="khyota@redhyena.net" date="1424347200">- update 0.4.12</changelog>
  <changelog author="rpm@fthiessen.de" date="1448452800">- Update to 0.4.13</changelog>
  <changelog author="rpm@fthiessen.de" date="1463400000">- Update to 0.4.14</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Update License field</changelog>
  <changelog author="mailaender@opensuse.org" date="1482753600">- Update to version 0.4.15</changelog>
  <changelog author="rpm@fthiessen.de" date="1484049600">- Added minetest-game-rpmlintrc to fix build on openSUSE 13.1</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496664000">- Update to version 0.4.16:
  * See http://dev.minetest.net/Changelog#0.4.15_.E2.86.92_0.4.16</changelog>
  <changelog author="opensuse@trummer.xyz" date="1516622400">- Don't require minetest, to make headless installation possible</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17:
  * Fix boo#1103904
  * See https://dev.minetest.net/Changelog#0.4.16_.E2.86.92_0.4.17
- Add the licence file to the package.</changelog>
</package>
<package pkgid="f1adcc8637813caabd8579a0b1fc9c81303813c199d19a53b440d0d3330680ff" name="minetest-game" arch="src">
  <version epoch="0" ver="0.4.17" rel="lp150.3.3.1"/>
  <changelog author="m407@mail.ru" date="1344600000">- Initial package (version 0.4.1) for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1344600001">- Remove redundant tags/sections from specfile
- Always build for noarch</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1348315200">- Build version 0.4.3</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1348401600">- Renamed the spec and changes file to the correct name
- Removed the creative mod as it's currently broken
- Used fdupes to get link duplicate file</changelog>
  <changelog author="m407@mail.ru" date="1355054400">- Build version 0.4.4</changelog>
  <changelog author="mailaender@opensuse.org" date="1365768000">- update to version 0.4.6</changelog>
  <changelog author="opensuse@dstoecker.de" date="1375963200">- update to 0.4.7</changelog>
  <changelog author="mailaender@opensuse.org" date="1389096000">- update 0.4.9</changelog>
  <changelog author="mailaender@opensuse.org" date="1411300800">- update 0.4.10</changelog>
  <changelog author="khyota@redhyena.net" date="1424347200">- update 0.4.12</changelog>
  <changelog author="rpm@fthiessen.de" date="1448452800">- Update to 0.4.13</changelog>
  <changelog author="rpm@fthiessen.de" date="1463400000">- Update to 0.4.14</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Update License field</changelog>
  <changelog author="mailaender@opensuse.org" date="1482753600">- Update to version 0.4.15</changelog>
  <changelog author="rpm@fthiessen.de" date="1484049600">- Added minetest-game-rpmlintrc to fix build on openSUSE 13.1</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496664000">- Update to version 0.4.16:
  * See http://dev.minetest.net/Changelog#0.4.15_.E2.86.92_0.4.16</changelog>
  <changelog author="opensuse@trummer.xyz" date="1516622400">- Don't require minetest, to make headless installation possible</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17:
  * Fix boo#1103904
  * See https://dev.minetest.net/Changelog#0.4.16_.E2.86.92_0.4.17
- Add the licence file to the package.</changelog>
</package>
<package pkgid="473c1e6f4d4bc0b6721b627ffe18bba640cb5b4521968bbdb4e27185e463e358" name="minetest-lang" arch="noarch">
  <version epoch="0" ver="0.4.17.1" rel="lp150.5.3.1"/>
  <changelog author="m407@mail.ru" date="1355054400">- Build version 0.4.4</changelog>
  <changelog author="mailaender@opensuse.org" date="1365768000">- update to version 0.4.6</changelog>
  <changelog author="opensuse@dstoecker.de" date="1375963200">- update to 0.4.7</changelog>
  <changelog author="mailaender@opensuse.org" date="1389096000">- update to 0.4.9
- use simpler GitHub release https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="khyota@redhyena.net" date="1417089600">- update title and description</changelog>
  <changelog author="ejobling248@gmail.com" date="1420632000">- update to 0.4.11</changelog>
  <changelog author="khyota@redhyena.net" date="1424347200">- update to 0.4.12</changelog>
  <changelog author="adam@mizerski.pl" date="1428840000">- Cleaned up spec file
  - Used spec-cleaner
  - sorted and revised BuildRequires
  - removed all "%if 0%{?suse_version}" - there's too many openSUSE
    specific things to keep it really multi-distro.
- Splitted compilation of minetest and minetestserver
  (idea borrowed from ArchLinux)
  - Splitted minetest package into minetest, minetestserver and
    minetest-data.
- Enabled support for translations.
  - Added minetest-lang subpackage.
- Enabled support for redis and leveldb to minetestsever
- Fixed support for opengl-game-wrapper.sh
- Made minetest use system jsoncpp and lua instead of bundled ones.
- Added files:
  - minetest@.service
  - minetest-rpmlintrc
  - supress warning aboud desktop file pointing to minetest-wrapper
- Added patches:
  - FindJson.cmake.patch - copied from Debian.
  - i18n.patch - copied from Debian.
  - minetest-0.4.8-shared-irrlicht.patch - copied from Fedora.
  - shared_mods.patch - copied from Debian and modified.
- Added "minetest" user and group for minetestserver.</changelog>
  <changelog author="rpm@fthiessen.de" date="1448366400">- Update to 0.4.13:
  * Added: fix-find-luajit.patch to detect systems luajit correctly
  * Removed upstream fixed FindJson.cmake.patch and
    minetest-0.4.8-shared-irrlicht.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1449057600">- Added fix-cguittfont.patch to fix missing library "libcguittfont".</changelog>
  <changelog author="rpm@fthiessen.de" date="1463400000">- Update to 0.4.14
- Removed upstream fixed fix-cguittfont.patch,
  i18n.patch and fix-find-luajit.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1469620800">- Replace fonts by system ones.
- Fixed license.</changelog>
  <changelog author="mailaender@opensuse.org" date="1482753600">- Update to 0.4.15</changelog>
  <changelog author="khyota@redhyena.net" date="1483617600">- Add use-pkg-config-to-find-luajit.patch https://github.com/minetest/minetest/issues/4483</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496664000">- Update to version 0.4.16:
  * Add 2D sheet animations for nodes ''(sfan5)''
  * Drop client side chat prediction. No more messages shown to chat
    when you talk and you are disconnected. ''(red-001)''
  * Add particle animation, glow ''(sfan5)
  * Server list: add ping indicators ''(kilbith)''
  * Server side occlusion culling ''(lhofhansl)''
  * New custom progress bar (you can customize it with texture packs)
    (kilbith)
  * Implement delayed shutdown for server owners: /shutdown 60 =&gt;
    shutdowns in 1 min /shutdown -1 cancels it
  * Add support for requesting a reconnect and changing the shutdown
    message to /shutdown
  * Add a mapblock cache in MeshUpdateQueue to improve client rendering
    performance ''(celeron55)''
  * Player data can now be into database. This is an important change,
    players to files are always supported for this release but deprecated.
    Files backend for players will be removed in a future release. See
    http://wiki.minetest.net/Database_backends for compat matrix and
    migration steps.
  * Sounds: add fading sounds
  * Save automatically window size when modified. This behaviour can
    be disabled in client settings
  * Add cancel button to password change formspec
  * Improve pause menu with more user friendly informations and update
    keys dynamicly depending on your configuration
  * Merge singleplayer &amp; server tab on desktop clients
  * Add /clearinv chat command
  * Add keyword-based search to server-list and advance settings
  * Add hardware-based itemstacks and node coloring
  * Undersampling which should make minetest run better on low end devices
  * Full changelog see http://dev.minetest.net/Changelog#0.4.15_.E2.86.92_0.4.16
- Minor spec cleanup.</changelog>
  <changelog author="opensuse@trummer.xyz" date="1516622400">- Recommend minetest-game to make server package more useful by default</changelog>
  <changelog author="opensuse@trummer.xyz" date="1516708800">- Added PostgreSQL database backend</changelog>
  <changelog author="werner@suse.de" date="1520596800">- Use pkg-config information to set PNG_PNG_INCLUDE_DIR for cmake</changelog>
  <changelog author="werner@suse.de" date="1520596801">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
</package>
<package pkgid="92d5421af6bc0e5bb74b379462ae755af591ea6cc2332733c7de7d05c63284ab" name="minetestserver" arch="x86_64">
  <version epoch="0" ver="0.4.17.1" rel="lp150.5.3.1"/>
  <changelog author="m407@mail.ru" date="1355054400">- Build version 0.4.4</changelog>
  <changelog author="mailaender@opensuse.org" date="1365768000">- update to version 0.4.6</changelog>
  <changelog author="opensuse@dstoecker.de" date="1375963200">- update to 0.4.7</changelog>
  <changelog author="mailaender@opensuse.org" date="1389096000">- update to 0.4.9
- use simpler GitHub release https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="khyota@redhyena.net" date="1417089600">- update title and description</changelog>
  <changelog author="ejobling248@gmail.com" date="1420632000">- update to 0.4.11</changelog>
  <changelog author="khyota@redhyena.net" date="1424347200">- update to 0.4.12</changelog>
  <changelog author="adam@mizerski.pl" date="1428840000">- Cleaned up spec file
  - Used spec-cleaner
  - sorted and revised BuildRequires
  - removed all "%if 0%{?suse_version}" - there's too many openSUSE
    specific things to keep it really multi-distro.
- Splitted compilation of minetest and minetestserver
  (idea borrowed from ArchLinux)
  - Splitted minetest package into minetest, minetestserver and
    minetest-data.
- Enabled support for translations.
  - Added minetest-lang subpackage.
- Enabled support for redis and leveldb to minetestsever
- Fixed support for opengl-game-wrapper.sh
- Made minetest use system jsoncpp and lua instead of bundled ones.
- Added files:
  - minetest@.service
  - minetest-rpmlintrc
  - supress warning aboud desktop file pointing to minetest-wrapper
- Added patches:
  - FindJson.cmake.patch - copied from Debian.
  - i18n.patch - copied from Debian.
  - minetest-0.4.8-shared-irrlicht.patch - copied from Fedora.
  - shared_mods.patch - copied from Debian and modified.
- Added "minetest" user and group for minetestserver.</changelog>
  <changelog author="rpm@fthiessen.de" date="1448366400">- Update to 0.4.13:
  * Added: fix-find-luajit.patch to detect systems luajit correctly
  * Removed upstream fixed FindJson.cmake.patch and
    minetest-0.4.8-shared-irrlicht.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1449057600">- Added fix-cguittfont.patch to fix missing library "libcguittfont".</changelog>
  <changelog author="rpm@fthiessen.de" date="1463400000">- Update to 0.4.14
- Removed upstream fixed fix-cguittfont.patch,
  i18n.patch and fix-find-luajit.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1469620800">- Replace fonts by system ones.
- Fixed license.</changelog>
  <changelog author="mailaender@opensuse.org" date="1482753600">- Update to 0.4.15</changelog>
  <changelog author="khyota@redhyena.net" date="1483617600">- Add use-pkg-config-to-find-luajit.patch https://github.com/minetest/minetest/issues/4483</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496664000">- Update to version 0.4.16:
  * Add 2D sheet animations for nodes ''(sfan5)''
  * Drop client side chat prediction. No more messages shown to chat
    when you talk and you are disconnected. ''(red-001)''
  * Add particle animation, glow ''(sfan5)
  * Server list: add ping indicators ''(kilbith)''
  * Server side occlusion culling ''(lhofhansl)''
  * New custom progress bar (you can customize it with texture packs)
    (kilbith)
  * Implement delayed shutdown for server owners: /shutdown 60 =&gt;
    shutdowns in 1 min /shutdown -1 cancels it
  * Add support for requesting a reconnect and changing the shutdown
    message to /shutdown
  * Add a mapblock cache in MeshUpdateQueue to improve client rendering
    performance ''(celeron55)''
  * Player data can now be into database. This is an important change,
    players to files are always supported for this release but deprecated.
    Files backend for players will be removed in a future release. See
    http://wiki.minetest.net/Database_backends for compat matrix and
    migration steps.
  * Sounds: add fading sounds
  * Save automatically window size when modified. This behaviour can
    be disabled in client settings
  * Add cancel button to password change formspec
  * Improve pause menu with more user friendly informations and update
    keys dynamicly depending on your configuration
  * Merge singleplayer &amp; server tab on desktop clients
  * Add /clearinv chat command
  * Add keyword-based search to server-list and advance settings
  * Add hardware-based itemstacks and node coloring
  * Undersampling which should make minetest run better on low end devices
  * Full changelog see http://dev.minetest.net/Changelog#0.4.15_.E2.86.92_0.4.16
- Minor spec cleanup.</changelog>
  <changelog author="opensuse@trummer.xyz" date="1516622400">- Recommend minetest-game to make server package more useful by default</changelog>
  <changelog author="opensuse@trummer.xyz" date="1516708800">- Added PostgreSQL database backend</changelog>
  <changelog author="werner@suse.de" date="1520596800">- Use pkg-config information to set PNG_PNG_INCLUDE_DIR for cmake</changelog>
  <changelog author="werner@suse.de" date="1520596801">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
</package>
<package pkgid="1b040da9b19c4c811a641a4df07263bbe4627dac354f6fc4e066b353dda21e7f" name="minizip-devel" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1353585600">- Replace %make_install by normal make install;
  the former is a constant source of agony in older or non-SUSE.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1355572800">- Add zlib-devel-static to baselibs.conf, needed for binutils testsuite
- Migrate zlib-&lt;targettype&gt; to libz1-&lt;targettype&gt;</changelog>
  <changelog author="mvyskocil@suse.com" date="1362484800">- libz1-32bit obsoletes zlib-32bit &lt;= 1.2.7 (fixes bnc#806310)</changelog>
  <changelog author="idonmez@suse.com" date="1368273600">- Update to version 1.2.8
  * Add new inflateGetDictionary() function
  * Fix bug where gzopen() immediately followed by gzclose()
    would write an empty file instead of an empty gzip stream.
  * Fix bug in gzclose() when gzwrite() runs out of memory</changelog>
  <changelog author="mvyskocil@suse.com" date="1375099200">- zlib-format.patch, backport missing sle11 feature back to openSUSE
  bnc#831880</changelog>
  <changelog author="tchvatal@suse.com" date="1411646400">- Install examples to cover another angle from bnc#890228
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1435147200">- Remove zlib-devel-static, nothing should use libz.a anyway.
- Package minizip library, everything using it should now pull
  minizip-devel and unbundle it bnc#935864</changelog>
  <changelog author="tchvatal@suse.com" date="1435665600">- Bring back zlib-devel-static. Needed by binutils</changelog>
  <changelog author="tchvatal@suse.com" date="1436788800">- Require zlib-devel in zlib-devel-static to fix previous change</changelog>
  <changelog author="jengelh@inai.de" date="1443096000">- Trim descriptions to fit target audience. Update RPM group
  classification.</changelog>
  <changelog author="tchvatal@suse.com" date="1480852800">- Include fixes for bnc#1003580 bnc#1003579 bnc#1003577 bnc#1013882:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch refreshed
  * zlib-bnc1013882.patch CVE-2016-9843</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update to version 1.2.9:
  * Improve compress() and uncompress() to support large lengths
  * Allow building zlib outside of the source directory
  * Fix bug when level 0 used with Z_HUFFMAN or Z_RLE
  * Fix bugs in creating a very large gzip header
  * Add uncompress2() function, which returns the input size used
  * Dramatically speed up deflation for level 0 (storing)
  * Add gzfread() and gzfwrite(), duplicating the interfaces of fread() and fwrite()
  * Add crc32_z() and adler32_z() functions with size_t lengths
  * Many portability improvements
- Drop patches included in upstream:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch
  * zlib-bnc1013882.patch
- Drop zlib-1.2.7-improve-longest_match-performance.patch
  * not accepted by upstream for two releases
  * rebasing no longer possible</changelog>
  <changelog author="mpluskal@suse.com" date="1483444800">- Update to version 1.2.10:
  * Avoid warnings on snprintf() return value
  * Fix bug in deflate_stored() for zero-length input
  * Fix bug in gzwrite.c that produced corrupt gzip files
  * Remove files to be installed before copying them in Makefile.in
  * Add warnings when compiling with assembler code</changelog>
  <changelog author="mpluskal@suse.com" date="1484568000">- Update to version 1.2.11:
  * Fix deflate stored bug when pulling last block from window
  * Permit immediate deflateParams changes before any deflate input</changelog>
  <changelog author="schwab@suse.de" date="1491307200">- baselibs.conf: add missing dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Add s390 performance patch (fate#314093):
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1496318400">- Add gpg signature
- Re-enable profiling</changelog>
  <changelog author="kah0922@gmail.com" date="1497268800">- Added 32bit minizip support</changelog>
  <changelog author="tchvatal@suse.com" date="1526385600">- Add patch to safeguard against negative values in uInt bsc#1071321:
  * 0001-Do-not-try-to-store-negative-values-in-unsigned-int.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1529496000">- Add patch for fate#325307 zlib speedup on power8:
  * zlib-power8-fate325307.patch</changelog>
</package>
<package pkgid="ba4ed1a6ef19204ae29206fbd303d81a7061bbd5c05b1323b34a7d29fee95c68" name="mksusecd" arch="src">
  <version epoch="0" ver="1.59" rel="lp150.2.3.1"/>
  <changelog author="jenkins@suse.com" date="1489665600">- support old mksquashfs version
- 1.44</changelog>
  <changelog author="snwint@suse.com" date="1490011200">- fix typo
- add --rebuild-initrd option for smaller initrds
- 1.45</changelog>
  <changelog author="snwint@suse.com" date="1491220800">- isohybrid: add --size option to specify image size
- 1.46</changelog>
  <changelog author="snwint@suse.com" date="1491220801">- some small doc fixes
- add dvd/disk image layout description
- 1.47</changelog>
  <changelog author="snwint@suse.com" date="1491220802">- undo accidental mksusecd patch
- 1.48</changelog>
  <changelog author="snwint@suse.com" date="1491393600">- add support for disk images with FAT file system
- 1.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1491912000">- distinguish between repomd/classical repo types and allow to
  specify the default repo location (fate#322983)
- merge gh#openSUSE/mksusecd#21
- fix typo in help text
- 1.50</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493380800">- fix getopt config
- enhanced README.md
- merge gh#openSUSE/mksusecd#22
- document all functions
- 1.51</changelog>
  <changelog author="snwint@suse.de" date="1493899200">- include all documentation files</changelog>
  <changelog author="wfeldt@opensuse.org" date="1495454400">- merge gh#openSUSE/mksusecd#23
- remove iso9660 header when creating image for usb media
  (bsc#939456)
- clarify description of --fat option
- 1.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1507550400">- merge gh#openSUSE/mksusecd#24
- rework cpio parsing function to handle blobs added by our product
  creator
- ensure initrd has really been unpacked when --rebuild-initrd
  option is used
- beautify code
- 1.53</changelog>
  <changelog author="wfeldt@opensuse.org" date="1512043200">- merge gh#openSUSE/mksusecd#26
- manage (sle15-style modules) repomd repositories
- 1.54</changelog>
  <changelog author="wfeldt@opensuse.org" date="1512475200">- merge gh#openSUSE/mksusecd#28
- support new CHECKSUMS file
- 1.55</changelog>
  <changelog author="wfeldt@opensuse.org" date="1516363200">- merge gh#openSUSE/mksusecd#29
- allow building of encrypted installation media
- fix handling of repo-md repositories with encrypted media
- 1.56</changelog>
  <changelog author="snwint@suse.de" date="1519214400">- require createrepo-implementation (bsc#1075670)</changelog>
  <changelog author="snwint@suse.de" date="1519300800">- adjust Requires to work also with older dists (bsc#1082057)</changelog>
  <changelog author="adam.majer@suse.de" date="1520337600">- switch to using cdrtools for Factory and SLE15. wodim is to
  be removed (bnc#1081739)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1525694400">- merge gh#openSUSE/mksusecd#30
- fix cpio archive parser (bsc#1092147)
- 1.57</changelog>
  <changelog author="wfeldt@opensuse.org" date="1525780800">- merge gh#openSUSE/mksusecd#31
- added link to obs builds
- add links to related blog articles
- 1.58</changelog>
  <changelog author="wfeldt@opensuse.org" date="1527249600">- merge gh#openSUSE/mksusecd#32
- add -joliet-long to mkisofs call as some file names on our media
  are too long (bsc#1094687)
- 1.59</changelog>
</package>
<package pkgid="fd8ac1776a0f74a3dfa91f85f30d59717be7d95c0c8425f0a7b3379225347560" name="mksusecd" arch="x86_64">
  <version epoch="0" ver="1.59" rel="lp150.2.3.1"/>
  <changelog author="jenkins@suse.com" date="1489665600">- support old mksquashfs version
- 1.44</changelog>
  <changelog author="snwint@suse.com" date="1490011200">- fix typo
- add --rebuild-initrd option for smaller initrds
- 1.45</changelog>
  <changelog author="snwint@suse.com" date="1491220800">- isohybrid: add --size option to specify image size
- 1.46</changelog>
  <changelog author="snwint@suse.com" date="1491220801">- some small doc fixes
- add dvd/disk image layout description
- 1.47</changelog>
  <changelog author="snwint@suse.com" date="1491220802">- undo accidental mksusecd patch
- 1.48</changelog>
  <changelog author="snwint@suse.com" date="1491393600">- add support for disk images with FAT file system
- 1.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1491912000">- distinguish between repomd/classical repo types and allow to
  specify the default repo location (fate#322983)
- merge gh#openSUSE/mksusecd#21
- fix typo in help text
- 1.50</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493380800">- fix getopt config
- enhanced README.md
- merge gh#openSUSE/mksusecd#22
- document all functions
- 1.51</changelog>
  <changelog author="snwint@suse.de" date="1493899200">- include all documentation files</changelog>
  <changelog author="wfeldt@opensuse.org" date="1495454400">- merge gh#openSUSE/mksusecd#23
- remove iso9660 header when creating image for usb media
  (bsc#939456)
- clarify description of --fat option
- 1.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1507550400">- merge gh#openSUSE/mksusecd#24
- rework cpio parsing function to handle blobs added by our product
  creator
- ensure initrd has really been unpacked when --rebuild-initrd
  option is used
- beautify code
- 1.53</changelog>
  <changelog author="wfeldt@opensuse.org" date="1512043200">- merge gh#openSUSE/mksusecd#26
- manage (sle15-style modules) repomd repositories
- 1.54</changelog>
  <changelog author="wfeldt@opensuse.org" date="1512475200">- merge gh#openSUSE/mksusecd#28
- support new CHECKSUMS file
- 1.55</changelog>
  <changelog author="wfeldt@opensuse.org" date="1516363200">- merge gh#openSUSE/mksusecd#29
- allow building of encrypted installation media
- fix handling of repo-md repositories with encrypted media
- 1.56</changelog>
  <changelog author="snwint@suse.de" date="1519214400">- require createrepo-implementation (bsc#1075670)</changelog>
  <changelog author="snwint@suse.de" date="1519300800">- adjust Requires to work also with older dists (bsc#1082057)</changelog>
  <changelog author="adam.majer@suse.de" date="1520337600">- switch to using cdrtools for Factory and SLE15. wodim is to
  be removed (bnc#1081739)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1525694400">- merge gh#openSUSE/mksusecd#30
- fix cpio archive parser (bsc#1092147)
- 1.57</changelog>
  <changelog author="wfeldt@opensuse.org" date="1525780800">- merge gh#openSUSE/mksusecd#31
- added link to obs builds
- add links to related blog articles
- 1.58</changelog>
  <changelog author="wfeldt@opensuse.org" date="1527249600">- merge gh#openSUSE/mksusecd#32
- add -joliet-long to mkisofs call as some file names on our media
  are too long (bsc#1094687)
- 1.59</changelog>
</package>
<package pkgid="51d4ecd629701a0ffcd51e49cb508cd27ec32c599ab9d4580f3c26c7c342466b" name="mkvtoolnix" arch="src">
  <version epoch="0" ver="28.2.0" rel="lp150.2.3.1"/>
  <changelog author="rpm@fthiessen.de" date="1472731200">- Update to new upstream release 9.4.0:
  * MKVToolNix GUI: merge tool bug fix: the automatic adjustments
    to the output file name based on the track types selected for
    muxing and the mechanism for keeping output file names unique
    had been broken since release v9.3.0.
    chapter editor bug fix: overly long chapter names don't cause
    the GUI's window to become overly wide anymore.
  * mkvmerge: bug fix: mkvmerge does no longer emit a warning if no
    comment header packet is found when reading tracks from
    Ogg/OGM files.
    bug fix: VP8 in Ogg: fixed dropping the first frame and the
    timestamp calculation.
    bug fix: when appending files mkvmerge wasn't starting clusters
    on video key frame anymore for the first and all following
    appended files.
    DTS bug fix: if present mkvmerge will use an XLL extension's
    sample rate information as the sample rate to put into
    the track headers.
  * mkvpropedit: bug fix: mkvpropedit will no longer say that it's
    writing the changes if only attachment changes are specified
    and none of the specified attachments can be found.
  * Some enhancements, please refer to the changelog within the
    package.</changelog>
  <changelog author="rpm@fthiessen.de" date="1474027200">- Update to new release 9.4.2:
  * mkvmerge: bug fix: using very large --sync values with certain
    container formats was causing mkvmerge to abort muxing.
    bug fix: fixed an invalid memory access (use after free)
    during global destruction phase.
    bug fix: HEVC parser: fixed three invalid memory accesses.
    bug fix: MP4 reader: fixed an invalid memory access
    bug fix: AAC reader: fixed mkvmerge throwing an uncaught
    exception due to the sample rate being 0.
    bug fix: MP4 reader: an error message will be printed
    instead of an uncaught exception when an invalid atom chunk
    size is encountered during resync.
    bug fix: AVC &amp; HEVC readers: the readers will now refuse to
    handle files where the detected pixel width or height is
    equal to or less than 0.</changelog>
  <changelog author="rpm@fthiessen.de" date="1477569600">- Update to new release 9.5.0
  * mkvmerge: bug fix: The Ogg/OGM reader did not recognize Opus
    files with comment headers anymore.
    WAV reader bug fix: the track properties (channels, samplerate)
    for DTS and AC-3 in WAV will now be derived from the decoded
    bitstream headers instead of the WAV file header as the latter
    is often incorrect.
    WAV reader bug fix: fixed detection and merging of DTS in WAV
    that uses the 14-bytes-in-16-bytes packing method.
    MPEG transport stream reader bug fix: fixed mis-detection of
    certain h.264 files as MPEG transport streams.
    MPEG transport stream reader bug fix: fixed the handling of
    Blu-ray PCM audio with an odd number of channels by removing
    their alignment bytes.
    h.264 elementary stream handling bug fix: if mkvmerge ever
    encounters changing SPS or PPS NALUs (ones where their ID has
    been encountered before with different settings) in the h.264
    then it will prepend all following key frames with all
    currently active SPS and PPS NALUs. This enables playback from
    arbitrary key frames even if they require other SPS or PPS
    settings than the ones stored in the AVCC in CodecPrivate.
    VobSub handling bug fix: mkvmerge and mkvextract will now
    update the duration stored in the SPU bitsream with the
    duration from the container level if it differs at least 1ms.
  * mkvprpedit, MKVToolNix GUI: Added support for "field order"
    video track header element.
- Use GPG signature for verification.</changelog>
  <changelog author="rpm@fthiessen.de" date="1480507200">- Update to new release 9.6.0
  * mkvmerge: bug fix: mkvmerge was entering endless loops under
    certain conditions when appending files.
    MPLS parser bug fix: fixed reading the "in" &amp; "out"
    timestamps for "play items". This bug resulted in mkvmerge
    not reading the correct range from the referenced M2TS file
    under certain rare circumstances.
  * MKVToolNix GUI: job output tool bug fix: the button for
    acknowledging warnings &amp; errors wasn't properly disabled when
    the user used outside methods of acknowledging them
  * mkvextract: VobSub bug fix: mkvextract will add a "langidx"
    line to the .idx file upon extraction.
  * mkvmerge &amp; mkvextract: added support for HDMV TextST subtitles.</changelog>
  <changelog author="rpm@fthiessen.de" date="1485518400">- Update to new release 9.8.0
  * mkvmerge: MP4 reader: when an MP4 file contained fewer entries
  for timestamps than frames (which they never should), mkvmerge
  would use 0 as the timestamp for all the other frames. This
  resulted in effects such as the last frame of an output file
  having a timestamp of 0 and in split files having a much longer
  duration than they should have. Fixes #1847.
  bug fix: the MPEG transport stream reader was using an outdated
  format for the "CodecPrivate" element for HDMV TextST subtitles.
  This has been updated to the current format which only contains
  the "dialog style element". Existing Matroska files using this
  outdated scheme can be fixed by running them through mkvmerge.
  bug fix: files smaller than 4 bytes were wrongly identified as
  MPEG transport streams.
  bug fix: if a codec delay is set for a track in the input file,
  it is kept. Fixes #1849. bug fix: fixed that the error message
  "not enough space on disk" was shown twice on some operating systems.
  teletext subtitle bug fix: fixed the handling of DVB teletext subtitles
  signaled with data unit ID 0x02 and that contain pages from multiple magazines.
  bug fix: when using --track-order without specifying all tracks,
  the track numbers could end up in a way the user did not expect.
  Now mkvmerge will always assign track numbers for those tracks
  that are listed in --track-order first. The other tracks are
  assigned numbers afterwards. Fixes the second part of #1832.
  bug fix: when reading Matroska files the movie title was always
  taken from the first Matroska source file, even if that file
  didn't have a title set. Fixes one part of #1832.
  MP4: fixed detection of MP3 audio when the object type ID in the
  ESDS signals MP2 and the track headers have invalid values for
  number of channels or sampling frequency. Fixes #1844.
  The command line option "--check-for-updates" has been removed.
  * GUI: the cache cleanup process that's run automatically when
  the GUI starts no longer blocks file identification until it
  is finished. Additionally the process will only be run once
  per release of MKVToolNix. Fixes #1860.
  certain failures during file identification that can be
  traced to broken installations won't be stored in the cache
  anymore. Without this fix the GUI would still use the cached
  failed identification result even though the underlying
  might have already been fixed.
  multiplexer: changing default values in the preferences (e.g. the
  default track language to set) did not affect files whose
  identification results had already been cached.
  multiplex tool bug fix: under certain circumstances the GUI was
  creating invalid JSON files when starting to multiplex resulting
  in an error message ("JSON option files must contain a JSON
  array consisting solely of JSON strings").
  re-worked the startup code not to use lock files when trying to
  open a socket for communicating with an already-running instance.
  This aims to prevent situations with stale lock files not being
  cleaned up and the GUI not starting anymore as a result.
  This might fix or prevent issues like #1805.
  * A lot of new features and enhancements, please refer to NEWS.md
- Rebased disable-update-check.patch
- spec file cleanup
- Adjusted BuildRequires
  * Since 9.7.1 QT &gt;= 5.3 is required
  * Since 9.7.1 a c++ compiler with some c++14 features is required
    e.g. gcc &gt;= 4.9 or clang &gt;= 3.4</changelog>
  <changelog author="rpm@fthiessen.de" date="1487592000">- Update to new release 9.9.0
  * mkvmerge: AC-3 handling: some source files provide timestamps
    for audio tracks only once every n audio frames. In such
    situations mkvmerge was buffering too much data resulting in
    a single gap in the timestamps of one frame duration after frame
    number n - 1 (the second audio timestamp read from the source
    file was used one output frame too early).
  bugfix MP4 reader: mkvmerge was only reading a small part of MP4
    DASH files where the first "moov" "mdat" atoms occur before the
    first "moof" atom.
  bugfix MP4 reader: edit list ("edts" atoms) that are part of the
    "moof" atoms used in MP4 DASH files weren't parsed. Instead the
    edit lists from the main track headers inside the "moov" atom
    were used.
  bugfix MP4 reader: when an MP4 DASH file contained both normal
    chunk offset table in their regular "moov" atoms, a
    sample-to-chunk table ("stsc" atom) whose last entry had a
    "samples per chunk" count greater than 1 and DASH "trun" atoms,
    then mkvmerge was calculating wrong positions the frame content.
  bugfix MP4 reader: mkvmerge couldn't deal with the key frame index
    table having duplicate entries. The result was that only key
    frames up to and including the first duplicate entry were marked
    as key frames in the output file. All other frames weren't, even
    though some of them were referenced from the key frame table
    after the first duplicate entry.
  bufix MP4 reader: when an MP4 file contained more than one copy of
    the "moov" atom (the track headers etc.), mkvmerge was parsing
    them all adding tracks multiple times.
  bugfix MP4 reader: fixed an integer overflow during the timestamp
    calculation leading to files with wrong timestamps. Such files
    could not be played back properly by most players.
  bugfix MPEG TS reader: if the PMT lists a DVBSUB track, mkvmerge
    will now recognize it without having to find a packet for it
    within the probed range.
  bugfix splitting by parts (both the "timestamps" and the "frames"
    variants): fixed the calculation of track statistics tags. When
    calculating the duration the skipped portions weren't taken into
    account leading to a too-high duration. As a consequence the BPS
    tag (bits per second) was wrong, too.
  bugfix reading files with DVB/HDMV TextSV subtitle tracks with
    invalid CodecPrivate caused mkvmerge to abort with an error
    from boost::format about the format string not having enough
    arguments.
  bugfix: fixed misdetection of certain AC-3 files as MP3 files
    which led to an error message that
    "the demultiplexer could not be initialized".
  bugfix: fixed huge memory consumption when appending big Matroska
    files with sparse tracks (e.g. forced subtitle tracks).
    The Matroska reader will now queue at most 128 MB of data.
  bugfix MP4 reader: the timestamps of all multiplexed tracks will
    now be 0-based properly.
  bugfix MP4 reader: the DTS-to-PTS offsets given by the "ctts"
    atoms are now applied for all tracks containing a "ctts" atom,
    not just h.264 &amp; h.265 tracks.
  * Some new features and enhancements
- Now required for man pages:
  libxslt-tools, docbook-xsl-stylesheets  and po4a</changelog>
  <changelog author="rpm@fthiessen.de" date="1490702400">- Update to new release 10.0.0
  * mkvmerge: new feature AVC/h.264 and HEVC/h.265 parser: mkvmerge
    will now drop all frames before the first key frame as they
    cannot be decoded properly anyway.
  new feature HEVC/h.265 parser: added a workaround for invalid
    values for the "default display window" in the VUI parameters
    of sequence parameter sets.
  bugfix MP4 reader: fixed track offsets being wrong in certain
    situations regarding the presence or absence of edit lists
    ('elst' atoms) &amp; composition timestamps ('ctts' atoms).
  bugfix MP4 reader: offsets in "ctts" are now always treated
    as signed integers, even with version 0 atoms.
  bugfix Matroska reader: fixed handling BlockGroups and
    SimpleBlocks with negative timestamps.
  bugfix MP3 packetizer: the MP3 packetizer will no longer drop
    timestamps from source containers if they go backwards.
    This keeps A/V in sync for files where the source was in sync
    even though their timestamps aren't monotonic increasing.
  bugfix AVC/h.264 parser: mkvmerge will now drop timestamps
    from the source container if no frame is emitted for that
    timestamp.
  bugfix HEVC/h.265 parser: mkvmerge will now drop timestamps
    from the source container if no frame is emitted for that
    timestamp.
  * mkvinfo: the timestamps of SimpleBlocks with negative
  timestamps are now shown correctly.
  * mkvextract: SSA/ASS: fixed extraction when the "Format"
  line in the "[Events]" section contains less fields than the
  default for SSA/ASS would indicate.</changelog>
  <changelog author="rpm@fthiessen.de" date="1496145600">- Update to version 12.0.0
  * MKVToolNix GUI: new feature: the key combination
    Ctrl+Shift+Space will now toggle the selection of the current
    item in all tree views where multiple selections are allowed.
  new feature: chapter editor: added the extension `*.cue`
    to the "open chapter file" dialog.
  bugfix:preferences ? job actions, type "play audio file":
    the GUI will no longer clear the audio file name input if the
    user aborts the audio file selection dialog.
  bugfix: multiplexer tool: the "show command line" dialog will no
    longer include the mkvmerge executable's location as the first
    argument for the two "MKVToolNix option files" escape modes.
  bugfix: header editor: empty track language elements are now
    treated the same as those set to invalid ISO 639-2 codes:
    as if they were set to `und` = "undetermined".
  new feature: watch jobs: the user can now have the GUI execute
    an action once as soon as the current job or the whole queue
    finishes. The actions are the same ones that can be configured
    to be run automatically after job or queue completion.
  new feature: implemented several built-in actions that can be
    executed either on special events or once via the "watch jobs"
    tool. These are: playing an audio file; hibernating, sleeping
    and shutting down the computer.
  new feature: multiplex tool: added a new option for what to do
    after starting to multiplex/adding to the job queue:
    "close current settings" will close the current multiplex
    settings without opening new ones.
  * mkvmerge: New feature: cue sheet parser: if the cue sheet
    contains a non-empty `TITLE` entry and if no other segment title
    has been set yet, then the segment title will be set to the
    cue sheet's `TITLE` value.
  new feature: added an option `--no-date` that prevents the "date"
    field from being written to the segment information headers.
  new feature: FLAC reader: added support for handling embedded
    pictures as attachments.
  new feature: MP4 reader: Added support for parsing the "COLR"
    atom and including its values as track headers.
  bugfix: HEVC/h.265 parser: fixed the superfluous copying of the
    'bitstream_restriction_flag' and its dependent flags in the
    VUI parameters of the sequence parameter sets if the timing
    information is present, too.
  bugfix: MPEG TS reader, AAC parser: the MPEG TS reader will now
    force the AAC parser to use the multiplex mode that the MPEG TS
    reader has detected. This prevents the AAC packetizer from
    mis-detecting it in its own attempt to identify the mode.
  bugfix: MPEG TS reader: valid MPEG transport streams that start
    with an h.264/h.265 start code were not recognized as a
    supported file type.
  bugfix: MPEG TS reader: fixed a potential read access from
    invalid memory addresses in the code parsing the program
    map table (PMT).
  bugfix: MPEG TS reader: if packets are encountered that belong
    to a PID not listed in the program map table (PMT), mkvmerge
    will attempt to determine their type and codec from the content.
    This supported content types are AAC (ADTS only) and AC-3.
  bugfix: MP4 reader: fixed finding and parsing the `colr` atom if
    there are more than one video extension atoms and the `colr` atom
    is not the first one.
  bugfix: MP4 reader: the `nclx` colour type of the `colr` atom is
    now recognized, too.
  bugfix: AAC parser: fixed mis-detection of certain data as valid
    ADTS AAC headers resulting in memory allocation failures.
  bugfix: AVC/h.264 parser: mkvmerge will now ignore bogus timing
    information in the sequence parameter sets.
  bugfix: AVC/h.264 &amp; HEVC/h.265 parsers: all trailing zero bytes
    will now be removed from NALUs.
  bugfix: HEVC/h.265 parser: fixed copying the
    `bitstream_restriction_flag` and all dependent fields in the VUI
    parameters of the sequence parameter sets.
  bugfix: HEVC/h.265 parser: fixed the calculation of the number of
    parameter set arrays in the HEVCC data structure stored in
    CodecPrivate.
  * mkvpropedit: bugfix: header editor: added support for editing the
    "date" segment information field.</changelog>
  <changelog author="olaf@aepfle.de" date="1496750400">- Adjust usage of gccN-c++ for Leap42 and SLE12</changelog>
  <changelog author="rpm@fthiessen.de" date="1499947200">- Update to version 13.0.0
  * mkvmerge: new feature: MPEG TS reader: information about
    multiple programs will be output as container properties during
    verbose/JSON identification.
  bugfix: MP4 reader: MPEG-1/2 video read from MP4 files was written
    with an invalid codec ID (e.g. `V_MPEG7`) in certain cases.
  bugfix: MPEG PS reader: made the file type detection less strict
    so that garbage at the start of the file doesn't prevent detection.
  bugfix: MPEG PS reader: (E-)AC-3 tracks were not detected if the very
    first packet for that track didn't contain a full (E-)AC-3 frame.
  bugfix: MPEG TS reader: fixed mkvmerge not detecting all tracks in
    MPEG transport streams containing multiple programs.
  bugfix: MPEG TS reader: fixed track content being broken for some
    tracks read from MPEG transport streams containing multiple programs.
  bugfix: JSON identification: the `stream_id` and `sub_stream_id`
    track properties were output as hexadecimal strings instead
    of unsigned integers. As the `ts_pid` track property was only
    used for MPEG transport streams, its value is now output as
    `stream_id` instead, and the `ts_pid` property has been removed.
    The JSON schema version has been bumped to 8 due to this change.
  bugfix: fixed a crash when appending video tracks where one track
    has a CodecPrivate member and the other one doesn't.
  bugfix: track statistics tags: the `NUMBER_OF_BYTES` tag
    is supposed to contain the number of bytes in a track before any
    of the content encoding schemes such as lossless compression
    is applied; however, mkvmerge was wrongfully using the number of
    bytes after the schemes had been applied.
  bugfix: CLPI &amp; MPLS parsers: MPLS and CLPI files with version
    number `0300` as used on Ultra HD Blu-ray Discs are
    now accepted as well.
  * MKVToolNix GUI: new feature: multiplex tool: added a column
    "program" to the tracks list. Certain container types such
    as MPEG transport streams can contain multiple programs.
    The new column will contain the service name (think TV station
    names such as "arte HD") for such streams.
  bugfix: fixed computation of value of total progress bar for
    multiple jobs running.
  bugfix: multiplexer, adding new attachments: when the GUI checks
    if there's an attachment with the same name it will now
    disregard disabled attached files.
  new feature: multiplex tool: the dialog asking the user what to
    do with dropped files (add to current settings, add to new
    settings etc.) now remembers the previous decision and defaults
    to it the next time it's shown.
  new feature: tabs can now be closed by pressing the middle mouse
    button.
  * mkvpropedit: bugfix: fixed a crash when the selector used
    for `--tags` is invalid.</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Split boost-devel BuildRequires for Tumbleweed
- Update to version 14.0.0
  * mkvmerge, mkvpropedit, MKVToolNix GUI (chapter editor):
  new feature: added support for chapters in WebM files that is
    spec-compliant by removing all tag elements not supported
    by the WebM spec.
  * translations: added a Romanian translation of the programs.
  * mkvmerge: bugfix: AVC/h.264 and HEVC/h.265 parser: fixed wrong
    frame order &amp; timestamp calculation in certain situations when
    SPS (sequence parameter sets) or PPS (picture parameter sets)
    change mid-stream.
  bugfix: MPEG-1/-2 video: the "remove stuffing bytes" feature
    introduced in v5.8.0 was broken. In a lot of situations it
    did not detect the end of a slice correctly and removed 0 bytes
    that were actually part of the slice structure. Often there
    were no visual problems as decoders were able to ignore such
    errors, but in other cases there are visual artifacts upon
    decoding. As detecting the slice end properly requires parsing
    the whole slice structure, this feature has been removed again.
  bugfix: MPEG PS reader: fixed mkvmerge trying to handle an "end"
    code the same way as a "program stream map" code.
  bugfix: MPEG TS reader: mkvmerge won't emit warnings if the
    system's `iconv` library doesn't support the ISO 6937
    character set.
  bugfix: when appending fails the error message details (e.g.
    "the number of channels differs: 1 and 2") were often not output.
  new feature: AAC: implemented support for AAC with 960 samples per
    frame.
  new feature: identification: if the encoding/character set of a
    text subtitle track is known (e.g. because a byte order mark is
    present in the file), then it will be output during
    identification as the `encoding` property.
  new feature: WAV reader: added support for Wave64 files.
  * MKVToolNix GUI: bugfix: multiplex tool: implemented a workaround
    for a crash that could occur during drag &amp; drop if at least one
    of the columns is hidden.
  bugifx: multiplex tool: appended tracks can no longer be enabled
    (selected for multiplexing) if the track they're going to be
    appended to is not enabled.
  bugifx: multiplex tool: if the GUI is set to ensure unique output
    file names, it will now verify that right before starting to
    multiplex/adding the job to the queue, too.
  bugifx: fixed the total progress reverting to 0% instead of
    staying at 100% when all jobs have finished. This was introduced
    by the attempt at fixing the computation of the value of total
    progress bar for multiple jobs running.
  new feature: multiplexer: if the encoding/character set of a
    subtitle track cannot be changed, the GUI will deactivate the
    "subtitle character set" drop-down box and ignore changes to it
    when multiple tracks are selected. Additionally, if the track's
    encoding is known and cannot be changed (e.g. due to a
    byte order mark in the file), that encoding will be selected in
    the drop-down box automatically. Both changes signal to the user
    that she doesn't have to take care of the encoding herself.
  new feature: chapter editor: added a function to the "additional
    modifications" dialog for calculating and setting the end
    timestamps.
  new feature: changed the shortcuts for switching between the
    various tools from `Alt+number` (e.g. `Alt+1` for the multiplexer
    tool) to `Ctrl+Alt+number` in order to avoid clashing with
    Windows' input method for arbitrary characters (pressing and
    holding `Alt` and typing the codepoint on the number pad).
  new feature: added a "Window" menu and entries with shortcuts for
    selecting the next (`Ctrl+F6`) respectively previous tab
    (`Ctrl+Shift+F6`) in the current tool.</changelog>
  <changelog author="rpm@fthiessen.de" date="1504180800">- Update to 15.0.0:
  * Requires libebml &gt;= 1.3.5
  * Dropped disable-update-check.patch (upstream now provides
    configure option for disabling the update check).
  * mkvmerge, mkvpropedit, GUI's header and chapter editors: the
    programs will no longer add most missing Matroska elements that
    are mandatory but have a default value in the Matroska
    specification (e.g. the `TagLanguage` element with a value of
    `und` if it isn't present in its `SimpleTag` parent).
  * mkvmerge: the option `--colour-matrix` has been renamed to
    `--colour-matrix-coefficients` in order to match the
    specification more closely. The old option name will
    continue to be recognized as well.
  * all: bugfix: selecting the program's language (e.g. via the
    `--ui-language`command-line option or via the GUI's
    preferences) did not work on Linux &amp; Unix if the `LANGUAGE`
    environment variable was set and didn't include the desired
    language.
  * MKVToolNix GUI: new feature: multiplex tool: added a new entry
    to the "source files" context menu labeled "Set destination
    file name from selected file's name". It will force the GUI
    to consider the selected file to be the reference for
    automatically setting the file name, no matter which file was
    originally added as the first file. It will also force setting
    the destination file name once if automatic destination file
    name generation is turned off in the preferences.
  new feature: multiplex tool: added an option in the preferences
    on "Multiplexer" ? "Output" labeled "Only use the first source
    file that contains a video track". If enabled, only source
    files containing video tracks will be used for setting the
    destination file name. Other files that are added are ignore.
  new feature: header editor: added support for editing the video
    colour attributes.
  new feature: header editor: added support for the "video
    projection" track header attributes.
  new feature: job queue: selected jobs can now be move up and
    down by pressing the `Ctrl+Up` and `Ctrl+Down` keys.
    Additionally, push buttons to move them up &amp; down are shown
    if the corresponding option is enabled in the preferences.
  bugfix: removed the keyboard shortcuts for switching between
    the different tools (e.g. `Ctrl+Alt+1` for the multiplexer).
    They overlapped with basic functionality on keyboards that
    use an `AltGr` key, e.g. German ones, where `AltGr+7` emits
    `{`. As `AltGr+key` is implemented as `Ctrl+Alt+key` under the
    hood, this means that `AltGr+7` is really `Ctrl+Alt+7` which
    the GUI now took to mean "switch to the job queue" instead of
    "insert `{`".
  bugfix: header editor: after saving the file the GUI wasn't
    updating its internal file modification timestamp. That lead
    to the GUI wrongfully claiming that the file had been
    modified externally when the user wanted to save the file
    once more, requiring a reload of the file losing all
    modifications made since saving the first time.
  * mkvmerge: new feature: added support for the
    "video projection" track header attributes.
  bugfix: DTS handling: some source files provide timestamps for
    audio tracks only once every `n` audio frames.
    In such situations mkvmerge was buffering too much data
    resulting in a single gap in the timestamps of one frame
    duration after frame number `n - 1` (the second audio
    timestamp read from the source file was used one output
    frame too early).
  * mkvinfo: new feature: added support for the
    "video projection" track header attributes.
  bugfix: fixed a null pointer dereference if an `EbmlBinary`
    element's data pointer is a null pointer.
  * mkvpropedit: new feature: added support for editing the
    video colour attributes.
  new feature: added support for the "video projection"
    track header attributes.</changelog>
  <changelog author="rpm@fthiessen.de" date="1510142400">- Update to 17.0.0:
  * The word "timecode" has been changed to "timestamp" everywhere.
  This affects program output (including mkvinfo's), GUI controls,
  command line parameters (e.g. `mkvmerge --timestamp-scale ?`) and
  file formats.
  All programs remain backwards compatible insofar as they still
  accept "timecode" in all those places.
  * mkvextract's command line interface has been changed to allow
  extraction of multiple items at the same time.
  * mkvmerge: New feature: AC-3: during identification regular AC-3
    and E-AC-3 tracks will now be identified differently for most
    container formats (exception: AVI, Real Media, Ogg/OGM).
    The codec will be reported as `AC-3` for regular AC-3 and as
    `E-AC-3` for E-AC-3 tracks instead of the combined `AC-3/E-AC-3`.
  bugfix: AAC ADTS parser: mkvmerge will now parse the
    `program_config_element` if it is located at the start of an AAC
    frame in order to determine the actual number of channels.
    This overrides invalid channel configurations in the ADTS headers.
  bugfix: fixed AC-3 being misdetected as encrypted MPEG program
    streams under certain conditions.
  bugfix: Dirac: under certain conditions (e.g. only muxing a single
    Dirac track without any other tracks) mkvmerge was always setting
    the pixel width &amp; height to 123. The frame rate was wrong, too.
  bugfix: E-AC-3 in Matroska: if AC-3 cores and their corresponding
    E-AC-3 extension are located in two different Matroska blocks,
    then mkvmerge will now re-assemble them into a single block and
    only use the first block's timestamp.
  bugfix: SRT reader: fixed calculating the duration of entries
    starting with at a negative timestamp.
  bugfix: VC-1: under certain conditions (e.g. only muxing a single
    VC-1 track without any other tracks) mkvmerge was always setting
    the pixel width &amp; height to 123. The frame rate was wrong, too.
  bugfix: command line options: an error message will be output if
    the single-value-form of the `--sync` option is used and it
    isn't a number (e.g. `--sync 0:asd`).
  * mkvpropedit, GUI's header editor: bugfix: both programs will now
    show proper error messages instead of crashing when certain
    kinds of data corruption is found when reading a file.
- Update to 16.0.0:
  * mkvmerge: New feature MP4 reader: added support for Vorbis.
  bugfix: AAC reader: mkvmerge will now emit an error message for
    AAC files whose header fields imply a sampling frequency
    or number of channels of 0.
  bugfix: AVC/h.264 ES parser: fixed the calculation of reference
    information for P and B frames. This also fixes some P frames
    being marked as B frames and vice versa.
  bugfix: AVC/h.264 ES parser: only non-key frames that have the
    NALU header field `nal_ref_idc` set to 0 will be marked as
    "discardable" in `SimpleBlock` elements. Other half of the
    fix for #2047.
  bugfix: HEVC/h.265: the generation of the HEVCC structure
    stored in `CodecPrivate` was wrong in two places:
    1. the position of the number of sub-layers was swapped with
    reserved bits and 2. the VPS/SPS/PPS/SEI lists did not start
    with a reserved 1 bit.
  bugfix: output: the `doc type version` will be set at least
    to 2 if certain elements are written (`CodecState`,
    `CueCodecState`, `FlagInterlaced`).
  bugfix: output: the track header attributes `MinCache` and
    `MaxCache` will not be written anymore.
  bugfix: Matroska reader: the "key" and "discardable" flags of
    SimpleBlock elements will be kept as they are.
  bugfix: Matroska reader: if present in the file,
    the "white colour coordinate x" track header attribute was
    written to both "white colour coordinate x" and
    "white colour coordinate y" in the output file.
  bugfix: Opus output: mkvmerge will now put all frames with
    discard padding into their own block group.
  * MKVToolNix GUI: Bugfix: header editor: removed the check for
    external modification when saving the file.
  bugfix: job queue: fixed calculation of total progress when
    automatic removal of completed is enabled.</changelog>
  <changelog author="rpm@fthiessen.de" date="1513080000">-Update to 18.0.0:
  * mkvmerge: bugfix: AAC ADTS parser: fixed interpretation of the
    `channel_configuration` header element for ADTS files that do
    not contain a program configuration element: value 7 means
    7.1 channels.
  bugfix: Matroska identification: the `date_local` and
    `date_utc` attributes will only be output if the identified
    Matroska file actually contains the "date" header field.
  bugfix: WebVTT: mkvmerge did not recognize timestamp lines if
    the hours components were absent.
  enhancement: AVC &amp; HEVC ES parsers: performance improvements
    by copying much less memory around.
  enhancement: tags: reintroduced a workaround for non-compliant
    files with tags that do not contain the mandatory `SimpleTag`
    element. This workaround was removed during code refactoring
    in release v15.0.0.
  * mkvpropedit: bugfix: GUI's header editor: the `date` header
    field won't be added automatically anymore whenever the
    segment info section is edited and the `date` element is
    either deleted or not present in the first place.
  * GUI: multiplexer: the "AAC is SBR/HE-AAC/AAC+" checkbox in
    the "audio properties" section will be disabled if the
    functionality is not implemented for the selected track's
    codec &amp; container.
  enhancement: multiplexer: the "reduce to core" checkbox in
    the "audio properties" section will be disabled if the
    functionality is not implemented for the selected track's
    codec.</changelog>
  <changelog author="jengelh@inai.de" date="1514203200">- Update to new upstream release 19.0.0
  * mkvmerge: splitting by duration, by timestamps or by
    timestamp-based parts: mkvmerge will now consider the first
    key frame within 1ms of the requested value to be eligible
    for splitting.
  * mkvmerge: fixed reading text files encoded in UTF-16 order
    UTF-32 that have different forms of line endings (new lines,
    carriage returns or a mix of both).
  * MKVToolNix GUI: multiplexer: once a "subtitle/chapter
    character set" was set for a track it couldn't be changed
    back to the empty entry (= auto-detection) anymore.</changelog>
  <changelog author="rpm@fthiessen.de" date="1516536000">- Update to 20.0.0:
  * Feature removal: several deprecated features have been removed:
  mkvmerge: the deprecated options `--identify-verbose`,
    `--identify-for-gui`, `--identify-for-mmg` and
    `--identification-format verbose-text`
  all command line tools: support for the deprecated, old,
    proprietary format used for option files
  all command line tools: support for passing command line
    options via the deprecated environment variables
    `MKVTOOLNIX_OPTIONS`, `MKVEXTRACT_OPTIONS`, `MKVINFO_OPTIONS`,
    `MKVMERGE_OPTIONS` and `MKVPROPEDIT_OPTIONS`
  * mkvmerge: AVC/h.264 packetizer (framed): access unit delimiter
    NALUs will now be removed.
  bugfix: AVC/h.264 parser: when fixing the bitstream timing
    information mkvmerge will now use exact representations of
    the desired field duration if possible.
  bugfix: AVC/h.264 parser: mkvmerge no longer assumes that
    encountering sequence parameter set or picture parameter set
    NALUs signal the start of a new frame.
  bugfix: AVC/h.264 packetizer (framed): when mkvmerge is told
    to fix the bitstream timing information, it will now update
    all SPS NALUs, not just the ones in the AVCC.
  bugfix: MPEG TS reader: TS packet payloads will only be
    treated as PES packets if the payload actually starts with
    a PES start code. The prior behavior led to wrong timestamps
    and potentially broken frame data.
  bugfix: MPEG TS reader: mkvmerge will now drop incomplete PES
    packets as soon as an error is detected in the transport
    stream instead of passing the incomplete frame to the
    packetizer. An error is assumed either if the
    `transport_error_indicator` flag is set or if the value of
    the `continuity_counter` header field doesn't match the
    expected value.
  bugfix: Opus: when re-muxing Opus from Matroska mkvmerge will
    now write "block duration" elements for all block groups
    where a "discard padding" is set, too.
  bugfix: SRT reader: mkvmerge can now handle SRT files with
    timestamps without decimal places.
  bugfix: read buffer I/O class: the class could get out of sync
    regarding the file position of the underlying file I/O class
    causing wrong data to be returned on subsequent read
    operations. One result was that trying to identifying MPLS
    files that refer to very short M2TS files caused mkvmerge
    to segfault.
  bugfix: multiplexer core: if there's a gap in audio timestamps,
    a new block group/lace will be started for the first frame
    after each gap. Before the fix the frame after the gap was
    often stored in the previous block group causing the gap to
    be in the wrong place: at the end of that block group.
  * mkvextract: bugfix: AVC/h.264: if two consecutive IDR frames
    with the same `idr_pic_id` parameter and no access unit
    delimiters are found between them, mkvextract will insert an
    access unit delimiter in order to signal the start of a new
    access unit.
  * MKVToolNix GUI: bugfix: update check dialog: Markdown links will
    now be converted to clickable links.</changelog>
  <changelog author="rpm@fthiessen.de" date="1523275200">- Update to 22.0.0:
  * mkvmerge: New feature: AC-3, DTS, TrueHD: added an option for
    removing/minimizing the dialog normalization gain for all
    supported types of the mentioned codecs.
  New feature: AV1: added support for reading AV1 video from IVF,
    WebM and Matroska files.
  New feature: FLAC: mkvmerge can now ignore ID3 tags in FLAC
    files which would otherwise prevent mkvmerge from detecting the
    file type.
  Bugfix: MP4 reader: fixed reading the ESDS audio header atom if
    it is located inside a "wave" atom inside the "stsd" atom.
  Bugfix: MP4 reader: AAC audio tracks signalling eight channels
    in the track headers but only seven in the codec-specific
    configuration will be treated as having eight channels.
  Bugfix: MPEG TS reader: fixed wrong handling of the continuity
    counter for TS packets that signal that TS payload is present
    but where the adaptation field spans the whole TS packet.
  Bugfix: the 'document type version' and 'document type read version'
    header fields are now set depending on which elements are
    actually written, not on which features are active.
  Bugfix: the 'document type version' header field is now set
    to 4 correctly if any of the version 4 Matroska elements
    is written.
  * mkvinfo: New Feature: the size and positions of frames
    within "SimpleBlock" and "BlockGroup" elements are now shown
    the same way they're  shown for other elements.
  Bugfix: summary mode: the file positions reported for frames in
    `BlockGroup` elements did not take the bytes used for
    information such as timestamp, track number flags or lace sizes
    into account. They were therefore too low.
  * mkvpropedit, MKVToolNix GUI header editor: the
    'document type version' and 'document type read version' header
    fields are now updated if elements written by the changes require
    higher version numbers.
  Bugfix: mandatory elements can now be deleted if there's a default
    value for them in the specifications.
  * MKVToolNix GUI: multiplexer: added options for deriving the
    track languages from the file name by searching for
    ISO 639-1/639-2 language codes or language names enclosed in
    non-word, non-space characters.
  Bugfix: info tool: implemented reading all elements in the file
    after the first cluster. Only top-level elements are shown;
    child elements are only loaded on demand.
  Bugfix: info tool: added a context menu with the option to show a
    hex dump of the element with the bytes making up the EBML ID and
    the size portion highlighted in different colors.
    In-depth highlighting is done for the data in `SimpleBlock`
    and `Block` elements.
  Bugfix: chapter editor: added an option to remove all end
    timestamps to the "additional modifications" dialog.
- Update to 21.0.0:
  * mkvinfo: the GUI portion has been removed. mkvinfo is now a pure
    command-line program again.
  * mkvmerge: New feature: track statistics tags: the `TagDefault`
    element will not be written anymore as it was always set to the
    default value `1` anyway.
  New feature: JSON files can now contain C++-style line comments
    outside of strings. Such comments, even though not part of the
    official JSON specifications, are now ignored when reading JSON
    files.
  Bugfix: Appending files with additional parts at the same time
    was broken if more than one additional part was appended.
  Bugfix: FLV reader: a single invalid AAC frame was written for
    AAC audio tracks with codec initialization data longer than five
    bytes.
  Bugfix: FLV reader: timestamps will be normalized down to 0.
  Bugfix: MP4 reader: if an AAC track doesn't contain an
    AAC-specific decoder configuration in the ESDS portion,
    then a default decoder configuration will be generated based on
    the track's header data instead of skipping the track.
  Bugfix: MP4 reader: fixed reading HEVC/h.265 video tracks if
    they're stored as Annex B byte streams inside MP4.
  Bugfix: Ogg Opus reader: mkvmerge will now emit a warning
    instead of aborting when it encounters an Ogg Opus page with
    no data in the packet.
  Bugfix: Matroska parser: fixed a segmentation fault that
    occurred whenever the first level 1 element after resyncing
    after an error in the file structure isn't a cluster.
  Bugfix: fixed a crash during file type detection for
    attachments if MKVToolNix is installed in a path with
    non-ASCII characters (e.g. German Umlauts).
  * MKVToolNix GUI: New Feature: chapter editor: opening a
    Matroska file without chapters in it will now open the file
    in an empty chapter editor instead of showing an error message.
  New Feature: an "info" tool has been added, replacing the
    functionality of mkvinfo's GUI. The functionality is not on
    par yet but will be for release v22.
  Bugfix: MKVToolNix GUI: Bugfix: multiplexer: the subtitle
    character set can now be set for appended subtitle files, too.
  Bugfix: MKVToolNix GUI: multiplexer: when appending, all tracks
    appended to disabled tracks will start out disabled, too.
  * mkvinfo: the `--hex-positions` parameter did nothing in summary mode.
  Bugfix: mkvinfo: Windows: line endings will be written as `\r\n`
    again instead of just `\n`.
  * mkvpropedit: Bugfix: adding track statistics tags: for tracks
    with content encoding (compression) mkvpropedit is now
    accounting the uncompressed number of bytes, not the encoded
    (compressed) number of bytes.</changelog>
  <changelog author="rpm@fthiessen.de" date="1533729600">- Update to 25.0.0:
  * mkvextract: New feature: VobSub extraction: empty SPU packets
    will now be dropped during extraction as other tools such as
    MP4Box cannot handle them correctly.
  Bugfix: fixed a crash when mkvextract with a non-Matroska file as
    the source file.
  * MKVToolNix GUI: New feature:: multiplexer: added options to only
    enable tracks of certain types by default.
  New feature: multiplexer: added an option to enable dialog
    normalization gain removal by default for all audio tracks for
    which the operation is supported.
  New feature: multiplexer: when deriving track languages from the
    file names is active and the file name contains the usual
    season/episode pattern, then only the part after the
    season/episode pattern will be used for detecting the language.
  New feature: multiplexer: the regular expression used for deriving
    track languages from the file names can now be customized in
    the preferences.
  New feature: multiplexer: the user can now customize the list of
    track languages the GUI recognizes in file names. This list
    defaults to a handful of common languages instead of the full
    list of supported languages.
  Bugfix: multiplexer: when scanning playlists, all playlists were
    offered for selection regardless of the value of the "minimum
    playlist duration" setting.
  Bugfix: multiplexer: deriving track languages from file names:
    the regular sub-expressions for ISO 639-1 codes could match
    on empty strings, too, causing matches in wrong places and hence
    no language being recognized in certain situations.
  Bugfix: header editor: fixed a crash when saving the file fails
    (e.g. because it isn't writable).
  Bugfix: header editor: the editor was wrongfully claiming that
    mandatory elements with default values cannot be removed in
    the "status" text.
  Bugfix: preferences: on macOS &amp; Linux the setting "enable copying
    tracks by their type" wasn't restored on program start.
  Bugfix: the central area is now scrollable, allowing the GUI to be
    resized to almost arbitrary sizes.
  Bugfix: multiplexer: the "copy file title to destination file name"
    functionality will now replace everything in the destination file
    name up to the last period instead of only up to the first period.
  * mkvmerge: New feature: SRT/ASS/SSA text subtitles: for files for
    which no encoding has been specified, mkvmerge will try UTF-8
    first before falling back to the system's default encoding.
  New feature: SRT/ASS/SSA/WebVTT text subtitles: a warning is now
    emitted if invalid 8-bit characters are encountered outside valid
    multi-byte UTF-8 sequences.
  New Feature: Matroska &amp; MPEG transport stream readers: the encoding
    of text subtitles read from Matroska files can now be changed
    with the '--sub-charset' parameter.
  New feature: MP4 reader: improved the detection of edit lists
    consisting of two identical entries, each spanning the file's
    duration as given in the movie header atom. The second entry is
    ignored in such cases.
  New feature: JSON identification: the "display unit" video track
    property is now reported as `display_unit`. The JSON schema has
    been bumped to v11 for this change.
  New feature: AVC/h.264: empty NALUs will now be removed.
  New feature: input: format detection uses file-extension to improve
    performance and to give preference when several formats match.
  New feature: AV1: added support for reading AV1 video from
    Open Bitstream Unit files.
  New feature: AV1: adjusted the code for the AV1 bitstream format
    changes made up to 2018-05-02 (git revision d14e878).
  New feature: MP4 reader: if a track has an edit list with two
    identical entries, each spanning the file's duration as given in
    the movie header atom, then the second entry will now be ignored.
    Improves the handling of files with bogus data.
  Bugfix: AVC/h.264 and HEVC: fixed file identification failing
    for certain elementary streams due to internal buffers not
    being cleared properly.
  Bugfix: MLP code: fixed various issues preventing MLP from being
    parsed correctly.
  Bugfix: TrueHD/MLP packetizer; dialog volume normalization removal
    isn't attempted if the track is an MLP track as the operation is
    only supported for TrueHD, not MLP.
  Bugfix: MPEG TS reader: when reading MPLS mkvmerge will now
    compare the MPLS's start and end timestamps against the transport
    stream's PTS instead of its DTS. Otherwise the first key frame of
    a video track might be dropped if it isn't the first in
    presentation order.
  Bugfix: JSON identification: mkvmerge will ensure that all strings
    passed to the JSON output modules are valid UTF-8 encoded strings
    by replacing invalid bytes with placeholder characters. This avoids
    the JSON library throwing an exception and mkvmerge
    aborting on such data.
  Bugfix: audio packetizers: mkvmerge will now keep discard
    padding values if they're present for packets read
    from Matroska files.
  Bugfix:  Ogg Opus reader: packet timestamps aren't calculated by
    summing up the duration of all packets starting with
    timestamp 0 anymore. Instead the algorithm is based on the Ogg page's
    granule position and which packet number is currently timestamped
    (special handling for the first and last packets in the stream).
  Bugfix: E-AC-3 parser: fixed determining the number of channels for
    streams that contain an AC-3 core with dependent E-AC-3 frames.
  Bugfix:  Matroska reader: fixed mkvmerge buffering the whole file if a
    video track is multiplexed that consists of only one or a few frames.
  Bugfix: the "display unit" video track property will now be kept if
    it is set in the source file.
  Bugfix:  MP3 packetizer: removed a memory leak growing linearly with the
    track's size.
  Bugfix: VobSub packetizer: whenever a VobSub packet doesn't contain a
    duration on the container level, mkvmerge will now set it from
    the duration in the SPU packets. Before it was accidentally setting
    the SPU-level duration to 0 instead.
  Bugfix:  track statistics tags: if writing the `Date` element is
    deactivated via `--no-date`, the `_STATISTICS_WRITING_DATE_UTC`
    isn't written either anymore.
  Bugfix: removed several small, constant-size memory leaks.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1539864000">- Update to version 27.0.0:
  * mkvmerge: New feature: chapters: the timestamps of chapters
  read from containers or from chapter files can be adjusted
  (multiplication and addition) with the new
  `--chapter-sync` option or using the special track ID `-2`
  for the existing `--sync` option.
  Bugfix: AC-3: dialog normalization gain removal was corrupting
  E-AC-3 frames irreversibly by writing checksums in places where
  they didn't belong. Additionally only the first E-AC-3 frame in
  a Matroska was processed but not additional dependent frames in
  the same block.
  * MKVToolNix GUI: New feature: multiplexer: adjusted &amp; added
  controls for mkvmerge's new feature of being able to adjust
  chapter timestamps.
  New feature: multiplexer: the GUI can now ask for confirmation
  when the user is about to create a file that won't contain
  audio tracks. It does this by default if at least one source
  file contains an audio track.
  Bugfix: fixed a leak of Windows font resources leading to a
  general slowdown and subsequent crash.
- Update to version 26.0.0:
  * mkvmerge: New feature: chapter generation: if the name template
  given by `--generate-chapters-name-template` is empty, no names
  will be generated for the chapter atoms.
  New feature: chapters: chapter names generated from MPLS files
  will now use the name template if one is set via
  `--generate-chapters-name-template`.
  New feature: mkvmerge will no longer abort with an error message
  if no audio, video and subtitle tracks should be multiplexed.
  This allows copying of chapters from non-chapter source files.
  Bugfix: Matroska reader: fixed wrong timestamps when appending
  Matroska files where the second Matroska file's first timestamp
  is bigger than 0.
  Bugfix: MP4 reader: fixed division by zero errors during file
  identification if the timescale is 0 in the `MVHD` atom.
  Bugfix: Windows Television DVR files are now recognized as an
  unsupported file type. This prevents mis-detection as MPEG-2
  with an accompanying flood of error messages.
  * MKVToolNix GUI: New feature: the font size in the tool
  selector on the left will scale with the font size the
  user selects in the preferences.
  New feature: the GUI will no longer automatically resize the
  columns in tree and list views to match the content size.
  Instead it remembers and restores the widths set by the user.
  New feature: multiplexer: the chapter name template will now be
  set automatically to the name template in the preferences'
  "chapter editor" section. Additionally the option
  `--generate-chapters-name-template ?` will be passed to
  mkvmerge in situations when mkvmerge will generate chapters.
  New feature: chapter editor: if the chapter name template is empty,
  chapters will be generated without names.
  New feature: chapter editor: added an option to remove all chapter
  names to the "additional modifications" dialog.
  Bugfix: info tool: under certain circumstances "cues" were shown at
  the wrong level (inside the previous master element instead of on
  lvel 1).
  Bugfix: job queue: fixed invalid memory handling and consequent
  crashes when using the "edit in corresponding tool &amp; remove from
  job queue" option if one of the files in that job contained
  attached files.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1540900800">- Update to version 28.2.0
  * mkvmerge, mkvinfo, mkvextract, mkvpropedit, MKVToolNix GUI's info
  tool &amp; chapter editor: fixed a case of memory being accessed after
  it had been freed earlier. This can be triggered by specially
  crafted Matroska files and lead to arbitrary code execution. The
  vulnerability was reported as Cisco TALOS 2018-0694 on 2018-10-25
  (CVE-2018-4022). Fixes boo#1113709.
- Update to version 28.1.0
  * mkvmerge: bugfix: AV1 parser: fixed an error in the sequence
  header parser if neither the `reduced_still_picture_header` nor
  the `frame_id_numbers_present_flag` is set.
  bugfix: AV1 parser: when creating the `av1C` structure for the
  Codec Private element the sequence header OBU wasn't copied
  completely: its common data (type field &amp; OBU size among others)
  was missing.
  bugfix: Matroska reader, AV1: mkvmerge will try to re-create the
  `av1C` data stored in Codec Private when reading AV1 from
  Matroska or WebM files created by mkvmerge v28.0.0.
  * MKVToolNix GUI: bugfix info tool: the tool will no longer stop
  scanning elements when an EBML Void element is found after the
  first Cluster element.
- Update to version 28.0.0
  * mkvmerge: New feature: AV1 parser: updated the code for the
  finalized AV1 bitstream specification.
  New feature: AV1 packetizer: updated the code for the finalized
  AV1-in-Matroska &amp; WebM mapping specification.
  New feature: AV1 support: the `--engage enable_av1` option has
  been removed again.
  New feature: MP4 reader: added support for AV1.
  New feature: DTS: implemented dialog normalization gain removal
  for extension substreams.
  New feature: VP9: mkvmerge will now create codec private data
  according to the VP9 codec mapping described in the WebM
  specifications.
  bugfix: JSON identification: fixed a bug when removing invalid
  UTF-8 data from strings before they're output as JSON.
  bugfix: MP4/QuickTime reader: fixed handling of PCM audio with
  FourCC `in24`.
  bugfix: MPEG transport stream reader, teletext subtitles: the
  decision whether or not to keep frames around in order to
  potentially merge them with the following frame is made sooner.
  That avoids problems if there are large gaps between teletext
  subtitle frames which could lead to frames being interleaved
  too late.
  * mkvmerge, mkvextract: New feature: simple text subtitles:
  added a workaround for simple text subtitle tracks that don't
  contain a duration.
  * mkvextract: New feature: added support for extracting AV1 to IVF.
  New feature: IVF extractor (AV1, VP8, VP9): precise values will
  be used for the frame rate numerator &amp; denominator header fields
  for certain well-known values of the track's default duration.
  * MKVToolNix GUI: New feature: automatic scaling for high DPI
  displays is activated if the GUI is compiled with Qt ? 5.6.0.
  New feature: added a menu item ("Help" ? "System information") for
  displaying information about the system MKVToolNix is running on
  in order to make debugging easier.
  New feature: multiplexer, header editor: the user can enter a list
  of predefined track names in the preferences. She can later select
  from them in "track name" combo box.
  * mkvextract: bugfix: IVF extractor (AV1, VP8, VP8): the frame rate
  header fields weren't clamped to 16 bits properly causing wrong
  frame rates to be written in certain situations.
  * mkvpropedit, MKVToolNix GUI's header editor: bugfix: fixed file
  corruption when a one-byte space must be covered with a new EBML
  void element but all surrounding elements have a "size length"
  field that's eight bytes long already.</changelog>
</package>
<package pkgid="5e2c6076f95016814b65b90dbb0092a1f36e946f2c2f9c432257904f4fa22a9a" name="mkvtoolnix" arch="x86_64">
  <version epoch="0" ver="28.2.0" rel="lp150.2.3.1"/>
  <changelog author="rpm@fthiessen.de" date="1472731200">- Update to new upstream release 9.4.0:
  * MKVToolNix GUI: merge tool bug fix: the automatic adjustments
    to the output file name based on the track types selected for
    muxing and the mechanism for keeping output file names unique
    had been broken since release v9.3.0.
    chapter editor bug fix: overly long chapter names don't cause
    the GUI's window to become overly wide anymore.
  * mkvmerge: bug fix: mkvmerge does no longer emit a warning if no
    comment header packet is found when reading tracks from
    Ogg/OGM files.
    bug fix: VP8 in Ogg: fixed dropping the first frame and the
    timestamp calculation.
    bug fix: when appending files mkvmerge wasn't starting clusters
    on video key frame anymore for the first and all following
    appended files.
    DTS bug fix: if present mkvmerge will use an XLL extension's
    sample rate information as the sample rate to put into
    the track headers.
  * mkvpropedit: bug fix: mkvpropedit will no longer say that it's
    writing the changes if only attachment changes are specified
    and none of the specified attachments can be found.
  * Some enhancements, please refer to the changelog within the
    package.</changelog>
  <changelog author="rpm@fthiessen.de" date="1474027200">- Update to new release 9.4.2:
  * mkvmerge: bug fix: using very large --sync values with certain
    container formats was causing mkvmerge to abort muxing.
    bug fix: fixed an invalid memory access (use after free)
    during global destruction phase.
    bug fix: HEVC parser: fixed three invalid memory accesses.
    bug fix: MP4 reader: fixed an invalid memory access
    bug fix: AAC reader: fixed mkvmerge throwing an uncaught
    exception due to the sample rate being 0.
    bug fix: MP4 reader: an error message will be printed
    instead of an uncaught exception when an invalid atom chunk
    size is encountered during resync.
    bug fix: AVC &amp; HEVC readers: the readers will now refuse to
    handle files where the detected pixel width or height is
    equal to or less than 0.</changelog>
  <changelog author="rpm@fthiessen.de" date="1477569600">- Update to new release 9.5.0
  * mkvmerge: bug fix: The Ogg/OGM reader did not recognize Opus
    files with comment headers anymore.
    WAV reader bug fix: the track properties (channels, samplerate)
    for DTS and AC-3 in WAV will now be derived from the decoded
    bitstream headers instead of the WAV file header as the latter
    is often incorrect.
    WAV reader bug fix: fixed detection and merging of DTS in WAV
    that uses the 14-bytes-in-16-bytes packing method.
    MPEG transport stream reader bug fix: fixed mis-detection of
    certain h.264 files as MPEG transport streams.
    MPEG transport stream reader bug fix: fixed the handling of
    Blu-ray PCM audio with an odd number of channels by removing
    their alignment bytes.
    h.264 elementary stream handling bug fix: if mkvmerge ever
    encounters changing SPS or PPS NALUs (ones where their ID has
    been encountered before with different settings) in the h.264
    then it will prepend all following key frames with all
    currently active SPS and PPS NALUs. This enables playback from
    arbitrary key frames even if they require other SPS or PPS
    settings than the ones stored in the AVCC in CodecPrivate.
    VobSub handling bug fix: mkvmerge and mkvextract will now
    update the duration stored in the SPU bitsream with the
    duration from the container level if it differs at least 1ms.
  * mkvprpedit, MKVToolNix GUI: Added support for "field order"
    video track header element.
- Use GPG signature for verification.</changelog>
  <changelog author="rpm@fthiessen.de" date="1480507200">- Update to new release 9.6.0
  * mkvmerge: bug fix: mkvmerge was entering endless loops under
    certain conditions when appending files.
    MPLS parser bug fix: fixed reading the "in" &amp; "out"
    timestamps for "play items". This bug resulted in mkvmerge
    not reading the correct range from the referenced M2TS file
    under certain rare circumstances.
  * MKVToolNix GUI: job output tool bug fix: the button for
    acknowledging warnings &amp; errors wasn't properly disabled when
    the user used outside methods of acknowledging them
  * mkvextract: VobSub bug fix: mkvextract will add a "langidx"
    line to the .idx file upon extraction.
  * mkvmerge &amp; mkvextract: added support for HDMV TextST subtitles.</changelog>
  <changelog author="rpm@fthiessen.de" date="1485518400">- Update to new release 9.8.0
  * mkvmerge: MP4 reader: when an MP4 file contained fewer entries
  for timestamps than frames (which they never should), mkvmerge
  would use 0 as the timestamp for all the other frames. This
  resulted in effects such as the last frame of an output file
  having a timestamp of 0 and in split files having a much longer
  duration than they should have. Fixes #1847.
  bug fix: the MPEG transport stream reader was using an outdated
  format for the "CodecPrivate" element for HDMV TextST subtitles.
  This has been updated to the current format which only contains
  the "dialog style element". Existing Matroska files using this
  outdated scheme can be fixed by running them through mkvmerge.
  bug fix: files smaller than 4 bytes were wrongly identified as
  MPEG transport streams.
  bug fix: if a codec delay is set for a track in the input file,
  it is kept. Fixes #1849. bug fix: fixed that the error message
  "not enough space on disk" was shown twice on some operating systems.
  teletext subtitle bug fix: fixed the handling of DVB teletext subtitles
  signaled with data unit ID 0x02 and that contain pages from multiple magazines.
  bug fix: when using --track-order without specifying all tracks,
  the track numbers could end up in a way the user did not expect.
  Now mkvmerge will always assign track numbers for those tracks
  that are listed in --track-order first. The other tracks are
  assigned numbers afterwards. Fixes the second part of #1832.
  bug fix: when reading Matroska files the movie title was always
  taken from the first Matroska source file, even if that file
  didn't have a title set. Fixes one part of #1832.
  MP4: fixed detection of MP3 audio when the object type ID in the
  ESDS signals MP2 and the track headers have invalid values for
  number of channels or sampling frequency. Fixes #1844.
  The command line option "--check-for-updates" has been removed.
  * GUI: the cache cleanup process that's run automatically when
  the GUI starts no longer blocks file identification until it
  is finished. Additionally the process will only be run once
  per release of MKVToolNix. Fixes #1860.
  certain failures during file identification that can be
  traced to broken installations won't be stored in the cache
  anymore. Without this fix the GUI would still use the cached
  failed identification result even though the underlying
  might have already been fixed.
  multiplexer: changing default values in the preferences (e.g. the
  default track language to set) did not affect files whose
  identification results had already been cached.
  multiplex tool bug fix: under certain circumstances the GUI was
  creating invalid JSON files when starting to multiplex resulting
  in an error message ("JSON option files must contain a JSON
  array consisting solely of JSON strings").
  re-worked the startup code not to use lock files when trying to
  open a socket for communicating with an already-running instance.
  This aims to prevent situations with stale lock files not being
  cleaned up and the GUI not starting anymore as a result.
  This might fix or prevent issues like #1805.
  * A lot of new features and enhancements, please refer to NEWS.md
- Rebased disable-update-check.patch
- spec file cleanup
- Adjusted BuildRequires
  * Since 9.7.1 QT &gt;= 5.3 is required
  * Since 9.7.1 a c++ compiler with some c++14 features is required
    e.g. gcc &gt;= 4.9 or clang &gt;= 3.4</changelog>
  <changelog author="rpm@fthiessen.de" date="1487592000">- Update to new release 9.9.0
  * mkvmerge: AC-3 handling: some source files provide timestamps
    for audio tracks only once every n audio frames. In such
    situations mkvmerge was buffering too much data resulting in
    a single gap in the timestamps of one frame duration after frame
    number n - 1 (the second audio timestamp read from the source
    file was used one output frame too early).
  bugfix MP4 reader: mkvmerge was only reading a small part of MP4
    DASH files where the first "moov" "mdat" atoms occur before the
    first "moof" atom.
  bugfix MP4 reader: edit list ("edts" atoms) that are part of the
    "moof" atoms used in MP4 DASH files weren't parsed. Instead the
    edit lists from the main track headers inside the "moov" atom
    were used.
  bugfix MP4 reader: when an MP4 DASH file contained both normal
    chunk offset table in their regular "moov" atoms, a
    sample-to-chunk table ("stsc" atom) whose last entry had a
    "samples per chunk" count greater than 1 and DASH "trun" atoms,
    then mkvmerge was calculating wrong positions the frame content.
  bugfix MP4 reader: mkvmerge couldn't deal with the key frame index
    table having duplicate entries. The result was that only key
    frames up to and including the first duplicate entry were marked
    as key frames in the output file. All other frames weren't, even
    though some of them were referenced from the key frame table
    after the first duplicate entry.
  bufix MP4 reader: when an MP4 file contained more than one copy of
    the "moov" atom (the track headers etc.), mkvmerge was parsing
    them all adding tracks multiple times.
  bugfix MP4 reader: fixed an integer overflow during the timestamp
    calculation leading to files with wrong timestamps. Such files
    could not be played back properly by most players.
  bugfix MPEG TS reader: if the PMT lists a DVBSUB track, mkvmerge
    will now recognize it without having to find a packet for it
    within the probed range.
  bugfix splitting by parts (both the "timestamps" and the "frames"
    variants): fixed the calculation of track statistics tags. When
    calculating the duration the skipped portions weren't taken into
    account leading to a too-high duration. As a consequence the BPS
    tag (bits per second) was wrong, too.
  bugfix reading files with DVB/HDMV TextSV subtitle tracks with
    invalid CodecPrivate caused mkvmerge to abort with an error
    from boost::format about the format string not having enough
    arguments.
  bugfix: fixed misdetection of certain AC-3 files as MP3 files
    which led to an error message that
    "the demultiplexer could not be initialized".
  bugfix: fixed huge memory consumption when appending big Matroska
    files with sparse tracks (e.g. forced subtitle tracks).
    The Matroska reader will now queue at most 128 MB of data.
  bugfix MP4 reader: the timestamps of all multiplexed tracks will
    now be 0-based properly.
  bugfix MP4 reader: the DTS-to-PTS offsets given by the "ctts"
    atoms are now applied for all tracks containing a "ctts" atom,
    not just h.264 &amp; h.265 tracks.
  * Some new features and enhancements
- Now required for man pages:
  libxslt-tools, docbook-xsl-stylesheets  and po4a</changelog>
  <changelog author="rpm@fthiessen.de" date="1490702400">- Update to new release 10.0.0
  * mkvmerge: new feature AVC/h.264 and HEVC/h.265 parser: mkvmerge
    will now drop all frames before the first key frame as they
    cannot be decoded properly anyway.
  new feature HEVC/h.265 parser: added a workaround for invalid
    values for the "default display window" in the VUI parameters
    of sequence parameter sets.
  bugfix MP4 reader: fixed track offsets being wrong in certain
    situations regarding the presence or absence of edit lists
    ('elst' atoms) &amp; composition timestamps ('ctts' atoms).
  bugfix MP4 reader: offsets in "ctts" are now always treated
    as signed integers, even with version 0 atoms.
  bugfix Matroska reader: fixed handling BlockGroups and
    SimpleBlocks with negative timestamps.
  bugfix MP3 packetizer: the MP3 packetizer will no longer drop
    timestamps from source containers if they go backwards.
    This keeps A/V in sync for files where the source was in sync
    even though their timestamps aren't monotonic increasing.
  bugfix AVC/h.264 parser: mkvmerge will now drop timestamps
    from the source container if no frame is emitted for that
    timestamp.
  bugfix HEVC/h.265 parser: mkvmerge will now drop timestamps
    from the source container if no frame is emitted for that
    timestamp.
  * mkvinfo: the timestamps of SimpleBlocks with negative
  timestamps are now shown correctly.
  * mkvextract: SSA/ASS: fixed extraction when the "Format"
  line in the "[Events]" section contains less fields than the
  default for SSA/ASS would indicate.</changelog>
  <changelog author="rpm@fthiessen.de" date="1496145600">- Update to version 12.0.0
  * MKVToolNix GUI: new feature: the key combination
    Ctrl+Shift+Space will now toggle the selection of the current
    item in all tree views where multiple selections are allowed.
  new feature: chapter editor: added the extension `*.cue`
    to the "open chapter file" dialog.
  bugfix:preferences ? job actions, type "play audio file":
    the GUI will no longer clear the audio file name input if the
    user aborts the audio file selection dialog.
  bugfix: multiplexer tool: the "show command line" dialog will no
    longer include the mkvmerge executable's location as the first
    argument for the two "MKVToolNix option files" escape modes.
  bugfix: header editor: empty track language elements are now
    treated the same as those set to invalid ISO 639-2 codes:
    as if they were set to `und` = "undetermined".
  new feature: watch jobs: the user can now have the GUI execute
    an action once as soon as the current job or the whole queue
    finishes. The actions are the same ones that can be configured
    to be run automatically after job or queue completion.
  new feature: implemented several built-in actions that can be
    executed either on special events or once via the "watch jobs"
    tool. These are: playing an audio file; hibernating, sleeping
    and shutting down the computer.
  new feature: multiplex tool: added a new option for what to do
    after starting to multiplex/adding to the job queue:
    "close current settings" will close the current multiplex
    settings without opening new ones.
  * mkvmerge: New feature: cue sheet parser: if the cue sheet
    contains a non-empty `TITLE` entry and if no other segment title
    has been set yet, then the segment title will be set to the
    cue sheet's `TITLE` value.
  new feature: added an option `--no-date` that prevents the "date"
    field from being written to the segment information headers.
  new feature: FLAC reader: added support for handling embedded
    pictures as attachments.
  new feature: MP4 reader: Added support for parsing the "COLR"
    atom and including its values as track headers.
  bugfix: HEVC/h.265 parser: fixed the superfluous copying of the
    'bitstream_restriction_flag' and its dependent flags in the
    VUI parameters of the sequence parameter sets if the timing
    information is present, too.
  bugfix: MPEG TS reader, AAC parser: the MPEG TS reader will now
    force the AAC parser to use the multiplex mode that the MPEG TS
    reader has detected. This prevents the AAC packetizer from
    mis-detecting it in its own attempt to identify the mode.
  bugfix: MPEG TS reader: valid MPEG transport streams that start
    with an h.264/h.265 start code were not recognized as a
    supported file type.
  bugfix: MPEG TS reader: fixed a potential read access from
    invalid memory addresses in the code parsing the program
    map table (PMT).
  bugfix: MPEG TS reader: if packets are encountered that belong
    to a PID not listed in the program map table (PMT), mkvmerge
    will attempt to determine their type and codec from the content.
    This supported content types are AAC (ADTS only) and AC-3.
  bugfix: MP4 reader: fixed finding and parsing the `colr` atom if
    there are more than one video extension atoms and the `colr` atom
    is not the first one.
  bugfix: MP4 reader: the `nclx` colour type of the `colr` atom is
    now recognized, too.
  bugfix: AAC parser: fixed mis-detection of certain data as valid
    ADTS AAC headers resulting in memory allocation failures.
  bugfix: AVC/h.264 parser: mkvmerge will now ignore bogus timing
    information in the sequence parameter sets.
  bugfix: AVC/h.264 &amp; HEVC/h.265 parsers: all trailing zero bytes
    will now be removed from NALUs.
  bugfix: HEVC/h.265 parser: fixed copying the
    `bitstream_restriction_flag` and all dependent fields in the VUI
    parameters of the sequence parameter sets.
  bugfix: HEVC/h.265 parser: fixed the calculation of the number of
    parameter set arrays in the HEVCC data structure stored in
    CodecPrivate.
  * mkvpropedit: bugfix: header editor: added support for editing the
    "date" segment information field.</changelog>
  <changelog author="olaf@aepfle.de" date="1496750400">- Adjust usage of gccN-c++ for Leap42 and SLE12</changelog>
  <changelog author="rpm@fthiessen.de" date="1499947200">- Update to version 13.0.0
  * mkvmerge: new feature: MPEG TS reader: information about
    multiple programs will be output as container properties during
    verbose/JSON identification.
  bugfix: MP4 reader: MPEG-1/2 video read from MP4 files was written
    with an invalid codec ID (e.g. `V_MPEG7`) in certain cases.
  bugfix: MPEG PS reader: made the file type detection less strict
    so that garbage at the start of the file doesn't prevent detection.
  bugfix: MPEG PS reader: (E-)AC-3 tracks were not detected if the very
    first packet for that track didn't contain a full (E-)AC-3 frame.
  bugfix: MPEG TS reader: fixed mkvmerge not detecting all tracks in
    MPEG transport streams containing multiple programs.
  bugfix: MPEG TS reader: fixed track content being broken for some
    tracks read from MPEG transport streams containing multiple programs.
  bugfix: JSON identification: the `stream_id` and `sub_stream_id`
    track properties were output as hexadecimal strings instead
    of unsigned integers. As the `ts_pid` track property was only
    used for MPEG transport streams, its value is now output as
    `stream_id` instead, and the `ts_pid` property has been removed.
    The JSON schema version has been bumped to 8 due to this change.
  bugfix: fixed a crash when appending video tracks where one track
    has a CodecPrivate member and the other one doesn't.
  bugfix: track statistics tags: the `NUMBER_OF_BYTES` tag
    is supposed to contain the number of bytes in a track before any
    of the content encoding schemes such as lossless compression
    is applied; however, mkvmerge was wrongfully using the number of
    bytes after the schemes had been applied.
  bugfix: CLPI &amp; MPLS parsers: MPLS and CLPI files with version
    number `0300` as used on Ultra HD Blu-ray Discs are
    now accepted as well.
  * MKVToolNix GUI: new feature: multiplex tool: added a column
    "program" to the tracks list. Certain container types such
    as MPEG transport streams can contain multiple programs.
    The new column will contain the service name (think TV station
    names such as "arte HD") for such streams.
  bugfix: fixed computation of value of total progress bar for
    multiple jobs running.
  bugfix: multiplexer, adding new attachments: when the GUI checks
    if there's an attachment with the same name it will now
    disregard disabled attached files.
  new feature: multiplex tool: the dialog asking the user what to
    do with dropped files (add to current settings, add to new
    settings etc.) now remembers the previous decision and defaults
    to it the next time it's shown.
  new feature: tabs can now be closed by pressing the middle mouse
    button.
  * mkvpropedit: bugfix: fixed a crash when the selector used
    for `--tags` is invalid.</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Split boost-devel BuildRequires for Tumbleweed
- Update to version 14.0.0
  * mkvmerge, mkvpropedit, MKVToolNix GUI (chapter editor):
  new feature: added support for chapters in WebM files that is
    spec-compliant by removing all tag elements not supported
    by the WebM spec.
  * translations: added a Romanian translation of the programs.
  * mkvmerge: bugfix: AVC/h.264 and HEVC/h.265 parser: fixed wrong
    frame order &amp; timestamp calculation in certain situations when
    SPS (sequence parameter sets) or PPS (picture parameter sets)
    change mid-stream.
  bugfix: MPEG-1/-2 video: the "remove stuffing bytes" feature
    introduced in v5.8.0 was broken. In a lot of situations it
    did not detect the end of a slice correctly and removed 0 bytes
    that were actually part of the slice structure. Often there
    were no visual problems as decoders were able to ignore such
    errors, but in other cases there are visual artifacts upon
    decoding. As detecting the slice end properly requires parsing
    the whole slice structure, this feature has been removed again.
  bugfix: MPEG PS reader: fixed mkvmerge trying to handle an "end"
    code the same way as a "program stream map" code.
  bugfix: MPEG TS reader: mkvmerge won't emit warnings if the
    system's `iconv` library doesn't support the ISO 6937
    character set.
  bugfix: when appending fails the error message details (e.g.
    "the number of channels differs: 1 and 2") were often not output.
  new feature: AAC: implemented support for AAC with 960 samples per
    frame.
  new feature: identification: if the encoding/character set of a
    text subtitle track is known (e.g. because a byte order mark is
    present in the file), then it will be output during
    identification as the `encoding` property.
  new feature: WAV reader: added support for Wave64 files.
  * MKVToolNix GUI: bugfix: multiplex tool: implemented a workaround
    for a crash that could occur during drag &amp; drop if at least one
    of the columns is hidden.
  bugifx: multiplex tool: appended tracks can no longer be enabled
    (selected for multiplexing) if the track they're going to be
    appended to is not enabled.
  bugifx: multiplex tool: if the GUI is set to ensure unique output
    file names, it will now verify that right before starting to
    multiplex/adding the job to the queue, too.
  bugifx: fixed the total progress reverting to 0% instead of
    staying at 100% when all jobs have finished. This was introduced
    by the attempt at fixing the computation of the value of total
    progress bar for multiple jobs running.
  new feature: multiplexer: if the encoding/character set of a
    subtitle track cannot be changed, the GUI will deactivate the
    "subtitle character set" drop-down box and ignore changes to it
    when multiple tracks are selected. Additionally, if the track's
    encoding is known and cannot be changed (e.g. due to a
    byte order mark in the file), that encoding will be selected in
    the drop-down box automatically. Both changes signal to the user
    that she doesn't have to take care of the encoding herself.
  new feature: chapter editor: added a function to the "additional
    modifications" dialog for calculating and setting the end
    timestamps.
  new feature: changed the shortcuts for switching between the
    various tools from `Alt+number` (e.g. `Alt+1` for the multiplexer
    tool) to `Ctrl+Alt+number` in order to avoid clashing with
    Windows' input method for arbitrary characters (pressing and
    holding `Alt` and typing the codepoint on the number pad).
  new feature: added a "Window" menu and entries with shortcuts for
    selecting the next (`Ctrl+F6`) respectively previous tab
    (`Ctrl+Shift+F6`) in the current tool.</changelog>
  <changelog author="rpm@fthiessen.de" date="1504180800">- Update to 15.0.0:
  * Requires libebml &gt;= 1.3.5
  * Dropped disable-update-check.patch (upstream now provides
    configure option for disabling the update check).
  * mkvmerge, mkvpropedit, GUI's header and chapter editors: the
    programs will no longer add most missing Matroska elements that
    are mandatory but have a default value in the Matroska
    specification (e.g. the `TagLanguage` element with a value of
    `und` if it isn't present in its `SimpleTag` parent).
  * mkvmerge: the option `--colour-matrix` has been renamed to
    `--colour-matrix-coefficients` in order to match the
    specification more closely. The old option name will
    continue to be recognized as well.
  * all: bugfix: selecting the program's language (e.g. via the
    `--ui-language`command-line option or via the GUI's
    preferences) did not work on Linux &amp; Unix if the `LANGUAGE`
    environment variable was set and didn't include the desired
    language.
  * MKVToolNix GUI: new feature: multiplex tool: added a new entry
    to the "source files" context menu labeled "Set destination
    file name from selected file's name". It will force the GUI
    to consider the selected file to be the reference for
    automatically setting the file name, no matter which file was
    originally added as the first file. It will also force setting
    the destination file name once if automatic destination file
    name generation is turned off in the preferences.
  new feature: multiplex tool: added an option in the preferences
    on "Multiplexer" ? "Output" labeled "Only use the first source
    file that contains a video track". If enabled, only source
    files containing video tracks will be used for setting the
    destination file name. Other files that are added are ignore.
  new feature: header editor: added support for editing the video
    colour attributes.
  new feature: header editor: added support for the "video
    projection" track header attributes.
  new feature: job queue: selected jobs can now be move up and
    down by pressing the `Ctrl+Up` and `Ctrl+Down` keys.
    Additionally, push buttons to move them up &amp; down are shown
    if the corresponding option is enabled in the preferences.
  bugfix: removed the keyboard shortcuts for switching between
    the different tools (e.g. `Ctrl+Alt+1` for the multiplexer).
    They overlapped with basic functionality on keyboards that
    use an `AltGr` key, e.g. German ones, where `AltGr+7` emits
    `{`. As `AltGr+key` is implemented as `Ctrl+Alt+key` under the
    hood, this means that `AltGr+7` is really `Ctrl+Alt+7` which
    the GUI now took to mean "switch to the job queue" instead of
    "insert `{`".
  bugfix: header editor: after saving the file the GUI wasn't
    updating its internal file modification timestamp. That lead
    to the GUI wrongfully claiming that the file had been
    modified externally when the user wanted to save the file
    once more, requiring a reload of the file losing all
    modifications made since saving the first time.
  * mkvmerge: new feature: added support for the
    "video projection" track header attributes.
  bugfix: DTS handling: some source files provide timestamps for
    audio tracks only once every `n` audio frames.
    In such situations mkvmerge was buffering too much data
    resulting in a single gap in the timestamps of one frame
    duration after frame number `n - 1` (the second audio
    timestamp read from the source file was used one output
    frame too early).
  * mkvinfo: new feature: added support for the
    "video projection" track header attributes.
  bugfix: fixed a null pointer dereference if an `EbmlBinary`
    element's data pointer is a null pointer.
  * mkvpropedit: new feature: added support for editing the
    video colour attributes.
  new feature: added support for the "video projection"
    track header attributes.</changelog>
  <changelog author="rpm@fthiessen.de" date="1510142400">- Update to 17.0.0:
  * The word "timecode" has been changed to "timestamp" everywhere.
  This affects program output (including mkvinfo's), GUI controls,
  command line parameters (e.g. `mkvmerge --timestamp-scale ?`) and
  file formats.
  All programs remain backwards compatible insofar as they still
  accept "timecode" in all those places.
  * mkvextract's command line interface has been changed to allow
  extraction of multiple items at the same time.
  * mkvmerge: New feature: AC-3: during identification regular AC-3
    and E-AC-3 tracks will now be identified differently for most
    container formats (exception: AVI, Real Media, Ogg/OGM).
    The codec will be reported as `AC-3` for regular AC-3 and as
    `E-AC-3` for E-AC-3 tracks instead of the combined `AC-3/E-AC-3`.
  bugfix: AAC ADTS parser: mkvmerge will now parse the
    `program_config_element` if it is located at the start of an AAC
    frame in order to determine the actual number of channels.
    This overrides invalid channel configurations in the ADTS headers.
  bugfix: fixed AC-3 being misdetected as encrypted MPEG program
    streams under certain conditions.
  bugfix: Dirac: under certain conditions (e.g. only muxing a single
    Dirac track without any other tracks) mkvmerge was always setting
    the pixel width &amp; height to 123. The frame rate was wrong, too.
  bugfix: E-AC-3 in Matroska: if AC-3 cores and their corresponding
    E-AC-3 extension are located in two different Matroska blocks,
    then mkvmerge will now re-assemble them into a single block and
    only use the first block's timestamp.
  bugfix: SRT reader: fixed calculating the duration of entries
    starting with at a negative timestamp.
  bugfix: VC-1: under certain conditions (e.g. only muxing a single
    VC-1 track without any other tracks) mkvmerge was always setting
    the pixel width &amp; height to 123. The frame rate was wrong, too.
  bugfix: command line options: an error message will be output if
    the single-value-form of the `--sync` option is used and it
    isn't a number (e.g. `--sync 0:asd`).
  * mkvpropedit, GUI's header editor: bugfix: both programs will now
    show proper error messages instead of crashing when certain
    kinds of data corruption is found when reading a file.
- Update to 16.0.0:
  * mkvmerge: New feature MP4 reader: added support for Vorbis.
  bugfix: AAC reader: mkvmerge will now emit an error message for
    AAC files whose header fields imply a sampling frequency
    or number of channels of 0.
  bugfix: AVC/h.264 ES parser: fixed the calculation of reference
    information for P and B frames. This also fixes some P frames
    being marked as B frames and vice versa.
  bugfix: AVC/h.264 ES parser: only non-key frames that have the
    NALU header field `nal_ref_idc` set to 0 will be marked as
    "discardable" in `SimpleBlock` elements. Other half of the
    fix for #2047.
  bugfix: HEVC/h.265: the generation of the HEVCC structure
    stored in `CodecPrivate` was wrong in two places:
    1. the position of the number of sub-layers was swapped with
    reserved bits and 2. the VPS/SPS/PPS/SEI lists did not start
    with a reserved 1 bit.
  bugfix: output: the `doc type version` will be set at least
    to 2 if certain elements are written (`CodecState`,
    `CueCodecState`, `FlagInterlaced`).
  bugfix: output: the track header attributes `MinCache` and
    `MaxCache` will not be written anymore.
  bugfix: Matroska reader: the "key" and "discardable" flags of
    SimpleBlock elements will be kept as they are.
  bugfix: Matroska reader: if present in the file,
    the "white colour coordinate x" track header attribute was
    written to both "white colour coordinate x" and
    "white colour coordinate y" in the output file.
  bugfix: Opus output: mkvmerge will now put all frames with
    discard padding into their own block group.
  * MKVToolNix GUI: Bugfix: header editor: removed the check for
    external modification when saving the file.
  bugfix: job queue: fixed calculation of total progress when
    automatic removal of completed is enabled.</changelog>
  <changelog author="rpm@fthiessen.de" date="1513080000">-Update to 18.0.0:
  * mkvmerge: bugfix: AAC ADTS parser: fixed interpretation of the
    `channel_configuration` header element for ADTS files that do
    not contain a program configuration element: value 7 means
    7.1 channels.
  bugfix: Matroska identification: the `date_local` and
    `date_utc` attributes will only be output if the identified
    Matroska file actually contains the "date" header field.
  bugfix: WebVTT: mkvmerge did not recognize timestamp lines if
    the hours components were absent.
  enhancement: AVC &amp; HEVC ES parsers: performance improvements
    by copying much less memory around.
  enhancement: tags: reintroduced a workaround for non-compliant
    files with tags that do not contain the mandatory `SimpleTag`
    element. This workaround was removed during code refactoring
    in release v15.0.0.
  * mkvpropedit: bugfix: GUI's header editor: the `date` header
    field won't be added automatically anymore whenever the
    segment info section is edited and the `date` element is
    either deleted or not present in the first place.
  * GUI: multiplexer: the "AAC is SBR/HE-AAC/AAC+" checkbox in
    the "audio properties" section will be disabled if the
    functionality is not implemented for the selected track's
    codec &amp; container.
  enhancement: multiplexer: the "reduce to core" checkbox in
    the "audio properties" section will be disabled if the
    functionality is not implemented for the selected track's
    codec.</changelog>
  <changelog author="jengelh@inai.de" date="1514203200">- Update to new upstream release 19.0.0
  * mkvmerge: splitting by duration, by timestamps or by
    timestamp-based parts: mkvmerge will now consider the first
    key frame within 1ms of the requested value to be eligible
    for splitting.
  * mkvmerge: fixed reading text files encoded in UTF-16 order
    UTF-32 that have different forms of line endings (new lines,
    carriage returns or a mix of both).
  * MKVToolNix GUI: multiplexer: once a "subtitle/chapter
    character set" was set for a track it couldn't be changed
    back to the empty entry (= auto-detection) anymore.</changelog>
  <changelog author="rpm@fthiessen.de" date="1516536000">- Update to 20.0.0:
  * Feature removal: several deprecated features have been removed:
  mkvmerge: the deprecated options `--identify-verbose`,
    `--identify-for-gui`, `--identify-for-mmg` and
    `--identification-format verbose-text`
  all command line tools: support for the deprecated, old,
    proprietary format used for option files
  all command line tools: support for passing command line
    options via the deprecated environment variables
    `MKVTOOLNIX_OPTIONS`, `MKVEXTRACT_OPTIONS`, `MKVINFO_OPTIONS`,
    `MKVMERGE_OPTIONS` and `MKVPROPEDIT_OPTIONS`
  * mkvmerge: AVC/h.264 packetizer (framed): access unit delimiter
    NALUs will now be removed.
  bugfix: AVC/h.264 parser: when fixing the bitstream timing
    information mkvmerge will now use exact representations of
    the desired field duration if possible.
  bugfix: AVC/h.264 parser: mkvmerge no longer assumes that
    encountering sequence parameter set or picture parameter set
    NALUs signal the start of a new frame.
  bugfix: AVC/h.264 packetizer (framed): when mkvmerge is told
    to fix the bitstream timing information, it will now update
    all SPS NALUs, not just the ones in the AVCC.
  bugfix: MPEG TS reader: TS packet payloads will only be
    treated as PES packets if the payload actually starts with
    a PES start code. The prior behavior led to wrong timestamps
    and potentially broken frame data.
  bugfix: MPEG TS reader: mkvmerge will now drop incomplete PES
    packets as soon as an error is detected in the transport
    stream instead of passing the incomplete frame to the
    packetizer. An error is assumed either if the
    `transport_error_indicator` flag is set or if the value of
    the `continuity_counter` header field doesn't match the
    expected value.
  bugfix: Opus: when re-muxing Opus from Matroska mkvmerge will
    now write "block duration" elements for all block groups
    where a "discard padding" is set, too.
  bugfix: SRT reader: mkvmerge can now handle SRT files with
    timestamps without decimal places.
  bugfix: read buffer I/O class: the class could get out of sync
    regarding the file position of the underlying file I/O class
    causing wrong data to be returned on subsequent read
    operations. One result was that trying to identifying MPLS
    files that refer to very short M2TS files caused mkvmerge
    to segfault.
  bugfix: multiplexer core: if there's a gap in audio timestamps,
    a new block group/lace will be started for the first frame
    after each gap. Before the fix the frame after the gap was
    often stored in the previous block group causing the gap to
    be in the wrong place: at the end of that block group.
  * mkvextract: bugfix: AVC/h.264: if two consecutive IDR frames
    with the same `idr_pic_id` parameter and no access unit
    delimiters are found between them, mkvextract will insert an
    access unit delimiter in order to signal the start of a new
    access unit.
  * MKVToolNix GUI: bugfix: update check dialog: Markdown links will
    now be converted to clickable links.</changelog>
  <changelog author="rpm@fthiessen.de" date="1523275200">- Update to 22.0.0:
  * mkvmerge: New feature: AC-3, DTS, TrueHD: added an option for
    removing/minimizing the dialog normalization gain for all
    supported types of the mentioned codecs.
  New feature: AV1: added support for reading AV1 video from IVF,
    WebM and Matroska files.
  New feature: FLAC: mkvmerge can now ignore ID3 tags in FLAC
    files which would otherwise prevent mkvmerge from detecting the
    file type.
  Bugfix: MP4 reader: fixed reading the ESDS audio header atom if
    it is located inside a "wave" atom inside the "stsd" atom.
  Bugfix: MP4 reader: AAC audio tracks signalling eight channels
    in the track headers but only seven in the codec-specific
    configuration will be treated as having eight channels.
  Bugfix: MPEG TS reader: fixed wrong handling of the continuity
    counter for TS packets that signal that TS payload is present
    but where the adaptation field spans the whole TS packet.
  Bugfix: the 'document type version' and 'document type read version'
    header fields are now set depending on which elements are
    actually written, not on which features are active.
  Bugfix: the 'document type version' header field is now set
    to 4 correctly if any of the version 4 Matroska elements
    is written.
  * mkvinfo: New Feature: the size and positions of frames
    within "SimpleBlock" and "BlockGroup" elements are now shown
    the same way they're  shown for other elements.
  Bugfix: summary mode: the file positions reported for frames in
    `BlockGroup` elements did not take the bytes used for
    information such as timestamp, track number flags or lace sizes
    into account. They were therefore too low.
  * mkvpropedit, MKVToolNix GUI header editor: the
    'document type version' and 'document type read version' header
    fields are now updated if elements written by the changes require
    higher version numbers.
  Bugfix: mandatory elements can now be deleted if there's a default
    value for them in the specifications.
  * MKVToolNix GUI: multiplexer: added options for deriving the
    track languages from the file name by searching for
    ISO 639-1/639-2 language codes or language names enclosed in
    non-word, non-space characters.
  Bugfix: info tool: implemented reading all elements in the file
    after the first cluster. Only top-level elements are shown;
    child elements are only loaded on demand.
  Bugfix: info tool: added a context menu with the option to show a
    hex dump of the element with the bytes making up the EBML ID and
    the size portion highlighted in different colors.
    In-depth highlighting is done for the data in `SimpleBlock`
    and `Block` elements.
  Bugfix: chapter editor: added an option to remove all end
    timestamps to the "additional modifications" dialog.
- Update to 21.0.0:
  * mkvinfo: the GUI portion has been removed. mkvinfo is now a pure
    command-line program again.
  * mkvmerge: New feature: track statistics tags: the `TagDefault`
    element will not be written anymore as it was always set to the
    default value `1` anyway.
  New feature: JSON files can now contain C++-style line comments
    outside of strings. Such comments, even though not part of the
    official JSON specifications, are now ignored when reading JSON
    files.
  Bugfix: Appending files with additional parts at the same time
    was broken if more than one additional part was appended.
  Bugfix: FLV reader: a single invalid AAC frame was written for
    AAC audio tracks with codec initialization data longer than five
    bytes.
  Bugfix: FLV reader: timestamps will be normalized down to 0.
  Bugfix: MP4 reader: if an AAC track doesn't contain an
    AAC-specific decoder configuration in the ESDS portion,
    then a default decoder configuration will be generated based on
    the track's header data instead of skipping the track.
  Bugfix: MP4 reader: fixed reading HEVC/h.265 video tracks if
    they're stored as Annex B byte streams inside MP4.
  Bugfix: Ogg Opus reader: mkvmerge will now emit a warning
    instead of aborting when it encounters an Ogg Opus page with
    no data in the packet.
  Bugfix: Matroska parser: fixed a segmentation fault that
    occurred whenever the first level 1 element after resyncing
    after an error in the file structure isn't a cluster.
  Bugfix: fixed a crash during file type detection for
    attachments if MKVToolNix is installed in a path with
    non-ASCII characters (e.g. German Umlauts).
  * MKVToolNix GUI: New Feature: chapter editor: opening a
    Matroska file without chapters in it will now open the file
    in an empty chapter editor instead of showing an error message.
  New Feature: an "info" tool has been added, replacing the
    functionality of mkvinfo's GUI. The functionality is not on
    par yet but will be for release v22.
  Bugfix: MKVToolNix GUI: Bugfix: multiplexer: the subtitle
    character set can now be set for appended subtitle files, too.
  Bugfix: MKVToolNix GUI: multiplexer: when appending, all tracks
    appended to disabled tracks will start out disabled, too.
  * mkvinfo: the `--hex-positions` parameter did nothing in summary mode.
  Bugfix: mkvinfo: Windows: line endings will be written as `\r\n`
    again instead of just `\n`.
  * mkvpropedit: Bugfix: adding track statistics tags: for tracks
    with content encoding (compression) mkvpropedit is now
    accounting the uncompressed number of bytes, not the encoded
    (compressed) number of bytes.</changelog>
  <changelog author="rpm@fthiessen.de" date="1533729600">- Update to 25.0.0:
  * mkvextract: New feature: VobSub extraction: empty SPU packets
    will now be dropped during extraction as other tools such as
    MP4Box cannot handle them correctly.
  Bugfix: fixed a crash when mkvextract with a non-Matroska file as
    the source file.
  * MKVToolNix GUI: New feature:: multiplexer: added options to only
    enable tracks of certain types by default.
  New feature: multiplexer: added an option to enable dialog
    normalization gain removal by default for all audio tracks for
    which the operation is supported.
  New feature: multiplexer: when deriving track languages from the
    file names is active and the file name contains the usual
    season/episode pattern, then only the part after the
    season/episode pattern will be used for detecting the language.
  New feature: multiplexer: the regular expression used for deriving
    track languages from the file names can now be customized in
    the preferences.
  New feature: multiplexer: the user can now customize the list of
    track languages the GUI recognizes in file names. This list
    defaults to a handful of common languages instead of the full
    list of supported languages.
  Bugfix: multiplexer: when scanning playlists, all playlists were
    offered for selection regardless of the value of the "minimum
    playlist duration" setting.
  Bugfix: multiplexer: deriving track languages from file names:
    the regular sub-expressions for ISO 639-1 codes could match
    on empty strings, too, causing matches in wrong places and hence
    no language being recognized in certain situations.
  Bugfix: header editor: fixed a crash when saving the file fails
    (e.g. because it isn't writable).
  Bugfix: header editor: the editor was wrongfully claiming that
    mandatory elements with default values cannot be removed in
    the "status" text.
  Bugfix: preferences: on macOS &amp; Linux the setting "enable copying
    tracks by their type" wasn't restored on program start.
  Bugfix: the central area is now scrollable, allowing the GUI to be
    resized to almost arbitrary sizes.
  Bugfix: multiplexer: the "copy file title to destination file name"
    functionality will now replace everything in the destination file
    name up to the last period instead of only up to the first period.
  * mkvmerge: New feature: SRT/ASS/SSA text subtitles: for files for
    which no encoding has been specified, mkvmerge will try UTF-8
    first before falling back to the system's default encoding.
  New feature: SRT/ASS/SSA/WebVTT text subtitles: a warning is now
    emitted if invalid 8-bit characters are encountered outside valid
    multi-byte UTF-8 sequences.
  New Feature: Matroska &amp; MPEG transport stream readers: the encoding
    of text subtitles read from Matroska files can now be changed
    with the '--sub-charset' parameter.
  New feature: MP4 reader: improved the detection of edit lists
    consisting of two identical entries, each spanning the file's
    duration as given in the movie header atom. The second entry is
    ignored in such cases.
  New feature: JSON identification: the "display unit" video track
    property is now reported as `display_unit`. The JSON schema has
    been bumped to v11 for this change.
  New feature: AVC/h.264: empty NALUs will now be removed.
  New feature: input: format detection uses file-extension to improve
    performance and to give preference when several formats match.
  New feature: AV1: added support for reading AV1 video from
    Open Bitstream Unit files.
  New feature: AV1: adjusted the code for the AV1 bitstream format
    changes made up to 2018-05-02 (git revision d14e878).
  New feature: MP4 reader: if a track has an edit list with two
    identical entries, each spanning the file's duration as given in
    the movie header atom, then the second entry will now be ignored.
    Improves the handling of files with bogus data.
  Bugfix: AVC/h.264 and HEVC: fixed file identification failing
    for certain elementary streams due to internal buffers not
    being cleared properly.
  Bugfix: MLP code: fixed various issues preventing MLP from being
    parsed correctly.
  Bugfix: TrueHD/MLP packetizer; dialog volume normalization removal
    isn't attempted if the track is an MLP track as the operation is
    only supported for TrueHD, not MLP.
  Bugfix: MPEG TS reader: when reading MPLS mkvmerge will now
    compare the MPLS's start and end timestamps against the transport
    stream's PTS instead of its DTS. Otherwise the first key frame of
    a video track might be dropped if it isn't the first in
    presentation order.
  Bugfix: JSON identification: mkvmerge will ensure that all strings
    passed to the JSON output modules are valid UTF-8 encoded strings
    by replacing invalid bytes with placeholder characters. This avoids
    the JSON library throwing an exception and mkvmerge
    aborting on such data.
  Bugfix: audio packetizers: mkvmerge will now keep discard
    padding values if they're present for packets read
    from Matroska files.
  Bugfix:  Ogg Opus reader: packet timestamps aren't calculated by
    summing up the duration of all packets starting with
    timestamp 0 anymore. Instead the algorithm is based on the Ogg page's
    granule position and which packet number is currently timestamped
    (special handling for the first and last packets in the stream).
  Bugfix: E-AC-3 parser: fixed determining the number of channels for
    streams that contain an AC-3 core with dependent E-AC-3 frames.
  Bugfix:  Matroska reader: fixed mkvmerge buffering the whole file if a
    video track is multiplexed that consists of only one or a few frames.
  Bugfix: the "display unit" video track property will now be kept if
    it is set in the source file.
  Bugfix:  MP3 packetizer: removed a memory leak growing linearly with the
    track's size.
  Bugfix: VobSub packetizer: whenever a VobSub packet doesn't contain a
    duration on the container level, mkvmerge will now set it from
    the duration in the SPU packets. Before it was accidentally setting
    the SPU-level duration to 0 instead.
  Bugfix:  track statistics tags: if writing the `Date` element is
    deactivated via `--no-date`, the `_STATISTICS_WRITING_DATE_UTC`
    isn't written either anymore.
  Bugfix: removed several small, constant-size memory leaks.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1539864000">- Update to version 27.0.0:
  * mkvmerge: New feature: chapters: the timestamps of chapters
  read from containers or from chapter files can be adjusted
  (multiplication and addition) with the new
  `--chapter-sync` option or using the special track ID `-2`
  for the existing `--sync` option.
  Bugfix: AC-3: dialog normalization gain removal was corrupting
  E-AC-3 frames irreversibly by writing checksums in places where
  they didn't belong. Additionally only the first E-AC-3 frame in
  a Matroska was processed but not additional dependent frames in
  the same block.
  * MKVToolNix GUI: New feature: multiplexer: adjusted &amp; added
  controls for mkvmerge's new feature of being able to adjust
  chapter timestamps.
  New feature: multiplexer: the GUI can now ask for confirmation
  when the user is about to create a file that won't contain
  audio tracks. It does this by default if at least one source
  file contains an audio track.
  Bugfix: fixed a leak of Windows font resources leading to a
  general slowdown and subsequent crash.
- Update to version 26.0.0:
  * mkvmerge: New feature: chapter generation: if the name template
  given by `--generate-chapters-name-template` is empty, no names
  will be generated for the chapter atoms.
  New feature: chapters: chapter names generated from MPLS files
  will now use the name template if one is set via
  `--generate-chapters-name-template`.
  New feature: mkvmerge will no longer abort with an error message
  if no audio, video and subtitle tracks should be multiplexed.
  This allows copying of chapters from non-chapter source files.
  Bugfix: Matroska reader: fixed wrong timestamps when appending
  Matroska files where the second Matroska file's first timestamp
  is bigger than 0.
  Bugfix: MP4 reader: fixed division by zero errors during file
  identification if the timescale is 0 in the `MVHD` atom.
  Bugfix: Windows Television DVR files are now recognized as an
  unsupported file type. This prevents mis-detection as MPEG-2
  with an accompanying flood of error messages.
  * MKVToolNix GUI: New feature: the font size in the tool
  selector on the left will scale with the font size the
  user selects in the preferences.
  New feature: the GUI will no longer automatically resize the
  columns in tree and list views to match the content size.
  Instead it remembers and restores the widths set by the user.
  New feature: multiplexer: the chapter name template will now be
  set automatically to the name template in the preferences'
  "chapter editor" section. Additionally the option
  `--generate-chapters-name-template ?` will be passed to
  mkvmerge in situations when mkvmerge will generate chapters.
  New feature: chapter editor: if the chapter name template is empty,
  chapters will be generated without names.
  New feature: chapter editor: added an option to remove all chapter
  names to the "additional modifications" dialog.
  Bugfix: info tool: under certain circumstances "cues" were shown at
  the wrong level (inside the previous master element instead of on
  lvel 1).
  Bugfix: job queue: fixed invalid memory handling and consequent
  crashes when using the "edit in corresponding tool &amp; remove from
  job queue" option if one of the files in that job contained
  attached files.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1540900800">- Update to version 28.2.0
  * mkvmerge, mkvinfo, mkvextract, mkvpropedit, MKVToolNix GUI's info
  tool &amp; chapter editor: fixed a case of memory being accessed after
  it had been freed earlier. This can be triggered by specially
  crafted Matroska files and lead to arbitrary code execution. The
  vulnerability was reported as Cisco TALOS 2018-0694 on 2018-10-25
  (CVE-2018-4022). Fixes boo#1113709.
- Update to version 28.1.0
  * mkvmerge: bugfix: AV1 parser: fixed an error in the sequence
  header parser if neither the `reduced_still_picture_header` nor
  the `frame_id_numbers_present_flag` is set.
  bugfix: AV1 parser: when creating the `av1C` structure for the
  Codec Private element the sequence header OBU wasn't copied
  completely: its common data (type field &amp; OBU size among others)
  was missing.
  bugfix: Matroska reader, AV1: mkvmerge will try to re-create the
  `av1C` data stored in Codec Private when reading AV1 from
  Matroska or WebM files created by mkvmerge v28.0.0.
  * MKVToolNix GUI: bugfix info tool: the tool will no longer stop
  scanning elements when an EBML Void element is found after the
  first Cluster element.
- Update to version 28.0.0
  * mkvmerge: New feature: AV1 parser: updated the code for the
  finalized AV1 bitstream specification.
  New feature: AV1 packetizer: updated the code for the finalized
  AV1-in-Matroska &amp; WebM mapping specification.
  New feature: AV1 support: the `--engage enable_av1` option has
  been removed again.
  New feature: MP4 reader: added support for AV1.
  New feature: DTS: implemented dialog normalization gain removal
  for extension substreams.
  New feature: VP9: mkvmerge will now create codec private data
  according to the VP9 codec mapping described in the WebM
  specifications.
  bugfix: JSON identification: fixed a bug when removing invalid
  UTF-8 data from strings before they're output as JSON.
  bugfix: MP4/QuickTime reader: fixed handling of PCM audio with
  FourCC `in24`.
  bugfix: MPEG transport stream reader, teletext subtitles: the
  decision whether or not to keep frames around in order to
  potentially merge them with the following frame is made sooner.
  That avoids problems if there are large gaps between teletext
  subtitle frames which could lead to frames being interleaved
  too late.
  * mkvmerge, mkvextract: New feature: simple text subtitles:
  added a workaround for simple text subtitle tracks that don't
  contain a duration.
  * mkvextract: New feature: added support for extracting AV1 to IVF.
  New feature: IVF extractor (AV1, VP8, VP9): precise values will
  be used for the frame rate numerator &amp; denominator header fields
  for certain well-known values of the track's default duration.
  * MKVToolNix GUI: New feature: automatic scaling for high DPI
  displays is activated if the GUI is compiled with Qt ? 5.6.0.
  New feature: added a menu item ("Help" ? "System information") for
  displaying information about the system MKVToolNix is running on
  in order to make debugging easier.
  New feature: multiplexer, header editor: the user can enter a list
  of predefined track names in the preferences. She can later select
  from them in "track name" combo box.
  * mkvextract: bugfix: IVF extractor (AV1, VP8, VP8): the frame rate
  header fields weren't clamped to 16 bits properly causing wrong
  frame rates to be written in certain situations.
  * mkvpropedit, MKVToolNix GUI's header editor: bugfix: fixed file
  corruption when a one-byte space must be covered with a new EBML
  void element but all surrounding elements have a "size length"
  field that's eight bytes long already.</changelog>
</package>
<package pkgid="9239f60210d09c20fd620daeb2c361347414e5edfcfa9de7e003e84600342652" name="mkvtoolnix-gui" arch="x86_64">
  <version epoch="0" ver="28.2.0" rel="lp150.2.3.1"/>
  <changelog author="rpm@fthiessen.de" date="1472731200">- Update to new upstream release 9.4.0:
  * MKVToolNix GUI: merge tool bug fix: the automatic adjustments
    to the output file name based on the track types selected for
    muxing and the mechanism for keeping output file names unique
    had been broken since release v9.3.0.
    chapter editor bug fix: overly long chapter names don't cause
    the GUI's window to become overly wide anymore.
  * mkvmerge: bug fix: mkvmerge does no longer emit a warning if no
    comment header packet is found when reading tracks from
    Ogg/OGM files.
    bug fix: VP8 in Ogg: fixed dropping the first frame and the
    timestamp calculation.
    bug fix: when appending files mkvmerge wasn't starting clusters
    on video key frame anymore for the first and all following
    appended files.
    DTS bug fix: if present mkvmerge will use an XLL extension's
    sample rate information as the sample rate to put into
    the track headers.
  * mkvpropedit: bug fix: mkvpropedit will no longer say that it's
    writing the changes if only attachment changes are specified
    and none of the specified attachments can be found.
  * Some enhancements, please refer to the changelog within the
    package.</changelog>
  <changelog author="rpm@fthiessen.de" date="1474027200">- Update to new release 9.4.2:
  * mkvmerge: bug fix: using very large --sync values with certain
    container formats was causing mkvmerge to abort muxing.
    bug fix: fixed an invalid memory access (use after free)
    during global destruction phase.
    bug fix: HEVC parser: fixed three invalid memory accesses.
    bug fix: MP4 reader: fixed an invalid memory access
    bug fix: AAC reader: fixed mkvmerge throwing an uncaught
    exception due to the sample rate being 0.
    bug fix: MP4 reader: an error message will be printed
    instead of an uncaught exception when an invalid atom chunk
    size is encountered during resync.
    bug fix: AVC &amp; HEVC readers: the readers will now refuse to
    handle files where the detected pixel width or height is
    equal to or less than 0.</changelog>
  <changelog author="rpm@fthiessen.de" date="1477569600">- Update to new release 9.5.0
  * mkvmerge: bug fix: The Ogg/OGM reader did not recognize Opus
    files with comment headers anymore.
    WAV reader bug fix: the track properties (channels, samplerate)
    for DTS and AC-3 in WAV will now be derived from the decoded
    bitstream headers instead of the WAV file header as the latter
    is often incorrect.
    WAV reader bug fix: fixed detection and merging of DTS in WAV
    that uses the 14-bytes-in-16-bytes packing method.
    MPEG transport stream reader bug fix: fixed mis-detection of
    certain h.264 files as MPEG transport streams.
    MPEG transport stream reader bug fix: fixed the handling of
    Blu-ray PCM audio with an odd number of channels by removing
    their alignment bytes.
    h.264 elementary stream handling bug fix: if mkvmerge ever
    encounters changing SPS or PPS NALUs (ones where their ID has
    been encountered before with different settings) in the h.264
    then it will prepend all following key frames with all
    currently active SPS and PPS NALUs. This enables playback from
    arbitrary key frames even if they require other SPS or PPS
    settings than the ones stored in the AVCC in CodecPrivate.
    VobSub handling bug fix: mkvmerge and mkvextract will now
    update the duration stored in the SPU bitsream with the
    duration from the container level if it differs at least 1ms.
  * mkvprpedit, MKVToolNix GUI: Added support for "field order"
    video track header element.
- Use GPG signature for verification.</changelog>
  <changelog author="rpm@fthiessen.de" date="1480507200">- Update to new release 9.6.0
  * mkvmerge: bug fix: mkvmerge was entering endless loops under
    certain conditions when appending files.
    MPLS parser bug fix: fixed reading the "in" &amp; "out"
    timestamps for "play items". This bug resulted in mkvmerge
    not reading the correct range from the referenced M2TS file
    under certain rare circumstances.
  * MKVToolNix GUI: job output tool bug fix: the button for
    acknowledging warnings &amp; errors wasn't properly disabled when
    the user used outside methods of acknowledging them
  * mkvextract: VobSub bug fix: mkvextract will add a "langidx"
    line to the .idx file upon extraction.
  * mkvmerge &amp; mkvextract: added support for HDMV TextST subtitles.</changelog>
  <changelog author="rpm@fthiessen.de" date="1485518400">- Update to new release 9.8.0
  * mkvmerge: MP4 reader: when an MP4 file contained fewer entries
  for timestamps than frames (which they never should), mkvmerge
  would use 0 as the timestamp for all the other frames. This
  resulted in effects such as the last frame of an output file
  having a timestamp of 0 and in split files having a much longer
  duration than they should have. Fixes #1847.
  bug fix: the MPEG transport stream reader was using an outdated
  format for the "CodecPrivate" element for HDMV TextST subtitles.
  This has been updated to the current format which only contains
  the "dialog style element". Existing Matroska files using this
  outdated scheme can be fixed by running them through mkvmerge.
  bug fix: files smaller than 4 bytes were wrongly identified as
  MPEG transport streams.
  bug fix: if a codec delay is set for a track in the input file,
  it is kept. Fixes #1849. bug fix: fixed that the error message
  "not enough space on disk" was shown twice on some operating systems.
  teletext subtitle bug fix: fixed the handling of DVB teletext subtitles
  signaled with data unit ID 0x02 and that contain pages from multiple magazines.
  bug fix: when using --track-order without specifying all tracks,
  the track numbers could end up in a way the user did not expect.
  Now mkvmerge will always assign track numbers for those tracks
  that are listed in --track-order first. The other tracks are
  assigned numbers afterwards. Fixes the second part of #1832.
  bug fix: when reading Matroska files the movie title was always
  taken from the first Matroska source file, even if that file
  didn't have a title set. Fixes one part of #1832.
  MP4: fixed detection of MP3 audio when the object type ID in the
  ESDS signals MP2 and the track headers have invalid values for
  number of channels or sampling frequency. Fixes #1844.
  The command line option "--check-for-updates" has been removed.
  * GUI: the cache cleanup process that's run automatically when
  the GUI starts no longer blocks file identification until it
  is finished. Additionally the process will only be run once
  per release of MKVToolNix. Fixes #1860.
  certain failures during file identification that can be
  traced to broken installations won't be stored in the cache
  anymore. Without this fix the GUI would still use the cached
  failed identification result even though the underlying
  might have already been fixed.
  multiplexer: changing default values in the preferences (e.g. the
  default track language to set) did not affect files whose
  identification results had already been cached.
  multiplex tool bug fix: under certain circumstances the GUI was
  creating invalid JSON files when starting to multiplex resulting
  in an error message ("JSON option files must contain a JSON
  array consisting solely of JSON strings").
  re-worked the startup code not to use lock files when trying to
  open a socket for communicating with an already-running instance.
  This aims to prevent situations with stale lock files not being
  cleaned up and the GUI not starting anymore as a result.
  This might fix or prevent issues like #1805.
  * A lot of new features and enhancements, please refer to NEWS.md
- Rebased disable-update-check.patch
- spec file cleanup
- Adjusted BuildRequires
  * Since 9.7.1 QT &gt;= 5.3 is required
  * Since 9.7.1 a c++ compiler with some c++14 features is required
    e.g. gcc &gt;= 4.9 or clang &gt;= 3.4</changelog>
  <changelog author="rpm@fthiessen.de" date="1487592000">- Update to new release 9.9.0
  * mkvmerge: AC-3 handling: some source files provide timestamps
    for audio tracks only once every n audio frames. In such
    situations mkvmerge was buffering too much data resulting in
    a single gap in the timestamps of one frame duration after frame
    number n - 1 (the second audio timestamp read from the source
    file was used one output frame too early).
  bugfix MP4 reader: mkvmerge was only reading a small part of MP4
    DASH files where the first "moov" "mdat" atoms occur before the
    first "moof" atom.
  bugfix MP4 reader: edit list ("edts" atoms) that are part of the
    "moof" atoms used in MP4 DASH files weren't parsed. Instead the
    edit lists from the main track headers inside the "moov" atom
    were used.
  bugfix MP4 reader: when an MP4 DASH file contained both normal
    chunk offset table in their regular "moov" atoms, a
    sample-to-chunk table ("stsc" atom) whose last entry had a
    "samples per chunk" count greater than 1 and DASH "trun" atoms,
    then mkvmerge was calculating wrong positions the frame content.
  bugfix MP4 reader: mkvmerge couldn't deal with the key frame index
    table having duplicate entries. The result was that only key
    frames up to and including the first duplicate entry were marked
    as key frames in the output file. All other frames weren't, even
    though some of them were referenced from the key frame table
    after the first duplicate entry.
  bufix MP4 reader: when an MP4 file contained more than one copy of
    the "moov" atom (the track headers etc.), mkvmerge was parsing
    them all adding tracks multiple times.
  bugfix MP4 reader: fixed an integer overflow during the timestamp
    calculation leading to files with wrong timestamps. Such files
    could not be played back properly by most players.
  bugfix MPEG TS reader: if the PMT lists a DVBSUB track, mkvmerge
    will now recognize it without having to find a packet for it
    within the probed range.
  bugfix splitting by parts (both the "timestamps" and the "frames"
    variants): fixed the calculation of track statistics tags. When
    calculating the duration the skipped portions weren't taken into
    account leading to a too-high duration. As a consequence the BPS
    tag (bits per second) was wrong, too.
  bugfix reading files with DVB/HDMV TextSV subtitle tracks with
    invalid CodecPrivate caused mkvmerge to abort with an error
    from boost::format about the format string not having enough
    arguments.
  bugfix: fixed misdetection of certain AC-3 files as MP3 files
    which led to an error message that
    "the demultiplexer could not be initialized".
  bugfix: fixed huge memory consumption when appending big Matroska
    files with sparse tracks (e.g. forced subtitle tracks).
    The Matroska reader will now queue at most 128 MB of data.
  bugfix MP4 reader: the timestamps of all multiplexed tracks will
    now be 0-based properly.
  bugfix MP4 reader: the DTS-to-PTS offsets given by the "ctts"
    atoms are now applied for all tracks containing a "ctts" atom,
    not just h.264 &amp; h.265 tracks.
  * Some new features and enhancements
- Now required for man pages:
  libxslt-tools, docbook-xsl-stylesheets  and po4a</changelog>
  <changelog author="rpm@fthiessen.de" date="1490702400">- Update to new release 10.0.0
  * mkvmerge: new feature AVC/h.264 and HEVC/h.265 parser: mkvmerge
    will now drop all frames before the first key frame as they
    cannot be decoded properly anyway.
  new feature HEVC/h.265 parser: added a workaround for invalid
    values for the "default display window" in the VUI parameters
    of sequence parameter sets.
  bugfix MP4 reader: fixed track offsets being wrong in certain
    situations regarding the presence or absence of edit lists
    ('elst' atoms) &amp; composition timestamps ('ctts' atoms).
  bugfix MP4 reader: offsets in "ctts" are now always treated
    as signed integers, even with version 0 atoms.
  bugfix Matroska reader: fixed handling BlockGroups and
    SimpleBlocks with negative timestamps.
  bugfix MP3 packetizer: the MP3 packetizer will no longer drop
    timestamps from source containers if they go backwards.
    This keeps A/V in sync for files where the source was in sync
    even though their timestamps aren't monotonic increasing.
  bugfix AVC/h.264 parser: mkvmerge will now drop timestamps
    from the source container if no frame is emitted for that
    timestamp.
  bugfix HEVC/h.265 parser: mkvmerge will now drop timestamps
    from the source container if no frame is emitted for that
    timestamp.
  * mkvinfo: the timestamps of SimpleBlocks with negative
  timestamps are now shown correctly.
  * mkvextract: SSA/ASS: fixed extraction when the "Format"
  line in the "[Events]" section contains less fields than the
  default for SSA/ASS would indicate.</changelog>
  <changelog author="rpm@fthiessen.de" date="1496145600">- Update to version 12.0.0
  * MKVToolNix GUI: new feature: the key combination
    Ctrl+Shift+Space will now toggle the selection of the current
    item in all tree views where multiple selections are allowed.
  new feature: chapter editor: added the extension `*.cue`
    to the "open chapter file" dialog.
  bugfix:preferences ? job actions, type "play audio file":
    the GUI will no longer clear the audio file name input if the
    user aborts the audio file selection dialog.
  bugfix: multiplexer tool: the "show command line" dialog will no
    longer include the mkvmerge executable's location as the first
    argument for the two "MKVToolNix option files" escape modes.
  bugfix: header editor: empty track language elements are now
    treated the same as those set to invalid ISO 639-2 codes:
    as if they were set to `und` = "undetermined".
  new feature: watch jobs: the user can now have the GUI execute
    an action once as soon as the current job or the whole queue
    finishes. The actions are the same ones that can be configured
    to be run automatically after job or queue completion.
  new feature: implemented several built-in actions that can be
    executed either on special events or once via the "watch jobs"
    tool. These are: playing an audio file; hibernating, sleeping
    and shutting down the computer.
  new feature: multiplex tool: added a new option for what to do
    after starting to multiplex/adding to the job queue:
    "close current settings" will close the current multiplex
    settings without opening new ones.
  * mkvmerge: New feature: cue sheet parser: if the cue sheet
    contains a non-empty `TITLE` entry and if no other segment title
    has been set yet, then the segment title will be set to the
    cue sheet's `TITLE` value.
  new feature: added an option `--no-date` that prevents the "date"
    field from being written to the segment information headers.
  new feature: FLAC reader: added support for handling embedded
    pictures as attachments.
  new feature: MP4 reader: Added support for parsing the "COLR"
    atom and including its values as track headers.
  bugfix: HEVC/h.265 parser: fixed the superfluous copying of the
    'bitstream_restriction_flag' and its dependent flags in the
    VUI parameters of the sequence parameter sets if the timing
    information is present, too.
  bugfix: MPEG TS reader, AAC parser: the MPEG TS reader will now
    force the AAC parser to use the multiplex mode that the MPEG TS
    reader has detected. This prevents the AAC packetizer from
    mis-detecting it in its own attempt to identify the mode.
  bugfix: MPEG TS reader: valid MPEG transport streams that start
    with an h.264/h.265 start code were not recognized as a
    supported file type.
  bugfix: MPEG TS reader: fixed a potential read access from
    invalid memory addresses in the code parsing the program
    map table (PMT).
  bugfix: MPEG TS reader: if packets are encountered that belong
    to a PID not listed in the program map table (PMT), mkvmerge
    will attempt to determine their type and codec from the content.
    This supported content types are AAC (ADTS only) and AC-3.
  bugfix: MP4 reader: fixed finding and parsing the `colr` atom if
    there are more than one video extension atoms and the `colr` atom
    is not the first one.
  bugfix: MP4 reader: the `nclx` colour type of the `colr` atom is
    now recognized, too.
  bugfix: AAC parser: fixed mis-detection of certain data as valid
    ADTS AAC headers resulting in memory allocation failures.
  bugfix: AVC/h.264 parser: mkvmerge will now ignore bogus timing
    information in the sequence parameter sets.
  bugfix: AVC/h.264 &amp; HEVC/h.265 parsers: all trailing zero bytes
    will now be removed from NALUs.
  bugfix: HEVC/h.265 parser: fixed copying the
    `bitstream_restriction_flag` and all dependent fields in the VUI
    parameters of the sequence parameter sets.
  bugfix: HEVC/h.265 parser: fixed the calculation of the number of
    parameter set arrays in the HEVCC data structure stored in
    CodecPrivate.
  * mkvpropedit: bugfix: header editor: added support for editing the
    "date" segment information field.</changelog>
  <changelog author="olaf@aepfle.de" date="1496750400">- Adjust usage of gccN-c++ for Leap42 and SLE12</changelog>
  <changelog author="rpm@fthiessen.de" date="1499947200">- Update to version 13.0.0
  * mkvmerge: new feature: MPEG TS reader: information about
    multiple programs will be output as container properties during
    verbose/JSON identification.
  bugfix: MP4 reader: MPEG-1/2 video read from MP4 files was written
    with an invalid codec ID (e.g. `V_MPEG7`) in certain cases.
  bugfix: MPEG PS reader: made the file type detection less strict
    so that garbage at the start of the file doesn't prevent detection.
  bugfix: MPEG PS reader: (E-)AC-3 tracks were not detected if the very
    first packet for that track didn't contain a full (E-)AC-3 frame.
  bugfix: MPEG TS reader: fixed mkvmerge not detecting all tracks in
    MPEG transport streams containing multiple programs.
  bugfix: MPEG TS reader: fixed track content being broken for some
    tracks read from MPEG transport streams containing multiple programs.
  bugfix: JSON identification: the `stream_id` and `sub_stream_id`
    track properties were output as hexadecimal strings instead
    of unsigned integers. As the `ts_pid` track property was only
    used for MPEG transport streams, its value is now output as
    `stream_id` instead, and the `ts_pid` property has been removed.
    The JSON schema version has been bumped to 8 due to this change.
  bugfix: fixed a crash when appending video tracks where one track
    has a CodecPrivate member and the other one doesn't.
  bugfix: track statistics tags: the `NUMBER_OF_BYTES` tag
    is supposed to contain the number of bytes in a track before any
    of the content encoding schemes such as lossless compression
    is applied; however, mkvmerge was wrongfully using the number of
    bytes after the schemes had been applied.
  bugfix: CLPI &amp; MPLS parsers: MPLS and CLPI files with version
    number `0300` as used on Ultra HD Blu-ray Discs are
    now accepted as well.
  * MKVToolNix GUI: new feature: multiplex tool: added a column
    "program" to the tracks list. Certain container types such
    as MPEG transport streams can contain multiple programs.
    The new column will contain the service name (think TV station
    names such as "arte HD") for such streams.
  bugfix: fixed computation of value of total progress bar for
    multiple jobs running.
  bugfix: multiplexer, adding new attachments: when the GUI checks
    if there's an attachment with the same name it will now
    disregard disabled attached files.
  new feature: multiplex tool: the dialog asking the user what to
    do with dropped files (add to current settings, add to new
    settings etc.) now remembers the previous decision and defaults
    to it the next time it's shown.
  new feature: tabs can now be closed by pressing the middle mouse
    button.
  * mkvpropedit: bugfix: fixed a crash when the selector used
    for `--tags` is invalid.</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Split boost-devel BuildRequires for Tumbleweed
- Update to version 14.0.0
  * mkvmerge, mkvpropedit, MKVToolNix GUI (chapter editor):
  new feature: added support for chapters in WebM files that is
    spec-compliant by removing all tag elements not supported
    by the WebM spec.
  * translations: added a Romanian translation of the programs.
  * mkvmerge: bugfix: AVC/h.264 and HEVC/h.265 parser: fixed wrong
    frame order &amp; timestamp calculation in certain situations when
    SPS (sequence parameter sets) or PPS (picture parameter sets)
    change mid-stream.
  bugfix: MPEG-1/-2 video: the "remove stuffing bytes" feature
    introduced in v5.8.0 was broken. In a lot of situations it
    did not detect the end of a slice correctly and removed 0 bytes
    that were actually part of the slice structure. Often there
    were no visual problems as decoders were able to ignore such
    errors, but in other cases there are visual artifacts upon
    decoding. As detecting the slice end properly requires parsing
    the whole slice structure, this feature has been removed again.
  bugfix: MPEG PS reader: fixed mkvmerge trying to handle an "end"
    code the same way as a "program stream map" code.
  bugfix: MPEG TS reader: mkvmerge won't emit warnings if the
    system's `iconv` library doesn't support the ISO 6937
    character set.
  bugfix: when appending fails the error message details (e.g.
    "the number of channels differs: 1 and 2") were often not output.
  new feature: AAC: implemented support for AAC with 960 samples per
    frame.
  new feature: identification: if the encoding/character set of a
    text subtitle track is known (e.g. because a byte order mark is
    present in the file), then it will be output during
    identification as the `encoding` property.
  new feature: WAV reader: added support for Wave64 files.
  * MKVToolNix GUI: bugfix: multiplex tool: implemented a workaround
    for a crash that could occur during drag &amp; drop if at least one
    of the columns is hidden.
  bugifx: multiplex tool: appended tracks can no longer be enabled
    (selected for multiplexing) if the track they're going to be
    appended to is not enabled.
  bugifx: multiplex tool: if the GUI is set to ensure unique output
    file names, it will now verify that right before starting to
    multiplex/adding the job to the queue, too.
  bugifx: fixed the total progress reverting to 0% instead of
    staying at 100% when all jobs have finished. This was introduced
    by the attempt at fixing the computation of the value of total
    progress bar for multiple jobs running.
  new feature: multiplexer: if the encoding/character set of a
    subtitle track cannot be changed, the GUI will deactivate the
    "subtitle character set" drop-down box and ignore changes to it
    when multiple tracks are selected. Additionally, if the track's
    encoding is known and cannot be changed (e.g. due to a
    byte order mark in the file), that encoding will be selected in
    the drop-down box automatically. Both changes signal to the user
    that she doesn't have to take care of the encoding herself.
  new feature: chapter editor: added a function to the "additional
    modifications" dialog for calculating and setting the end
    timestamps.
  new feature: changed the shortcuts for switching between the
    various tools from `Alt+number` (e.g. `Alt+1` for the multiplexer
    tool) to `Ctrl+Alt+number` in order to avoid clashing with
    Windows' input method for arbitrary characters (pressing and
    holding `Alt` and typing the codepoint on the number pad).
  new feature: added a "Window" menu and entries with shortcuts for
    selecting the next (`Ctrl+F6`) respectively previous tab
    (`Ctrl+Shift+F6`) in the current tool.</changelog>
  <changelog author="rpm@fthiessen.de" date="1504180800">- Update to 15.0.0:
  * Requires libebml &gt;= 1.3.5
  * Dropped disable-update-check.patch (upstream now provides
    configure option for disabling the update check).
  * mkvmerge, mkvpropedit, GUI's header and chapter editors: the
    programs will no longer add most missing Matroska elements that
    are mandatory but have a default value in the Matroska
    specification (e.g. the `TagLanguage` element with a value of
    `und` if it isn't present in its `SimpleTag` parent).
  * mkvmerge: the option `--colour-matrix` has been renamed to
    `--colour-matrix-coefficients` in order to match the
    specification more closely. The old option name will
    continue to be recognized as well.
  * all: bugfix: selecting the program's language (e.g. via the
    `--ui-language`command-line option or via the GUI's
    preferences) did not work on Linux &amp; Unix if the `LANGUAGE`
    environment variable was set and didn't include the desired
    language.
  * MKVToolNix GUI: new feature: multiplex tool: added a new entry
    to the "source files" context menu labeled "Set destination
    file name from selected file's name". It will force the GUI
    to consider the selected file to be the reference for
    automatically setting the file name, no matter which file was
    originally added as the first file. It will also force setting
    the destination file name once if automatic destination file
    name generation is turned off in the preferences.
  new feature: multiplex tool: added an option in the preferences
    on "Multiplexer" ? "Output" labeled "Only use the first source
    file that contains a video track". If enabled, only source
    files containing video tracks will be used for setting the
    destination file name. Other files that are added are ignore.
  new feature: header editor: added support for editing the video
    colour attributes.
  new feature: header editor: added support for the "video
    projection" track header attributes.
  new feature: job queue: selected jobs can now be move up and
    down by pressing the `Ctrl+Up` and `Ctrl+Down` keys.
    Additionally, push buttons to move them up &amp; down are shown
    if the corresponding option is enabled in the preferences.
  bugfix: removed the keyboard shortcuts for switching between
    the different tools (e.g. `Ctrl+Alt+1` for the multiplexer).
    They overlapped with basic functionality on keyboards that
    use an `AltGr` key, e.g. German ones, where `AltGr+7` emits
    `{`. As `AltGr+key` is implemented as `Ctrl+Alt+key` under the
    hood, this means that `AltGr+7` is really `Ctrl+Alt+7` which
    the GUI now took to mean "switch to the job queue" instead of
    "insert `{`".
  bugfix: header editor: after saving the file the GUI wasn't
    updating its internal file modification timestamp. That lead
    to the GUI wrongfully claiming that the file had been
    modified externally when the user wanted to save the file
    once more, requiring a reload of the file losing all
    modifications made since saving the first time.
  * mkvmerge: new feature: added support for the
    "video projection" track header attributes.
  bugfix: DTS handling: some source files provide timestamps for
    audio tracks only once every `n` audio frames.
    In such situations mkvmerge was buffering too much data
    resulting in a single gap in the timestamps of one frame
    duration after frame number `n - 1` (the second audio
    timestamp read from the source file was used one output
    frame too early).
  * mkvinfo: new feature: added support for the
    "video projection" track header attributes.
  bugfix: fixed a null pointer dereference if an `EbmlBinary`
    element's data pointer is a null pointer.
  * mkvpropedit: new feature: added support for editing the
    video colour attributes.
  new feature: added support for the "video projection"
    track header attributes.</changelog>
  <changelog author="rpm@fthiessen.de" date="1510142400">- Update to 17.0.0:
  * The word "timecode" has been changed to "timestamp" everywhere.
  This affects program output (including mkvinfo's), GUI controls,
  command line parameters (e.g. `mkvmerge --timestamp-scale ?`) and
  file formats.
  All programs remain backwards compatible insofar as they still
  accept "timecode" in all those places.
  * mkvextract's command line interface has been changed to allow
  extraction of multiple items at the same time.
  * mkvmerge: New feature: AC-3: during identification regular AC-3
    and E-AC-3 tracks will now be identified differently for most
    container formats (exception: AVI, Real Media, Ogg/OGM).
    The codec will be reported as `AC-3` for regular AC-3 and as
    `E-AC-3` for E-AC-3 tracks instead of the combined `AC-3/E-AC-3`.
  bugfix: AAC ADTS parser: mkvmerge will now parse the
    `program_config_element` if it is located at the start of an AAC
    frame in order to determine the actual number of channels.
    This overrides invalid channel configurations in the ADTS headers.
  bugfix: fixed AC-3 being misdetected as encrypted MPEG program
    streams under certain conditions.
  bugfix: Dirac: under certain conditions (e.g. only muxing a single
    Dirac track without any other tracks) mkvmerge was always setting
    the pixel width &amp; height to 123. The frame rate was wrong, too.
  bugfix: E-AC-3 in Matroska: if AC-3 cores and their corresponding
    E-AC-3 extension are located in two different Matroska blocks,
    then mkvmerge will now re-assemble them into a single block and
    only use the first block's timestamp.
  bugfix: SRT reader: fixed calculating the duration of entries
    starting with at a negative timestamp.
  bugfix: VC-1: under certain conditions (e.g. only muxing a single
    VC-1 track without any other tracks) mkvmerge was always setting
    the pixel width &amp; height to 123. The frame rate was wrong, too.
  bugfix: command line options: an error message will be output if
    the single-value-form of the `--sync` option is used and it
    isn't a number (e.g. `--sync 0:asd`).
  * mkvpropedit, GUI's header editor: bugfix: both programs will now
    show proper error messages instead of crashing when certain
    kinds of data corruption is found when reading a file.
- Update to 16.0.0:
  * mkvmerge: New feature MP4 reader: added support for Vorbis.
  bugfix: AAC reader: mkvmerge will now emit an error message for
    AAC files whose header fields imply a sampling frequency
    or number of channels of 0.
  bugfix: AVC/h.264 ES parser: fixed the calculation of reference
    information for P and B frames. This also fixes some P frames
    being marked as B frames and vice versa.
  bugfix: AVC/h.264 ES parser: only non-key frames that have the
    NALU header field `nal_ref_idc` set to 0 will be marked as
    "discardable" in `SimpleBlock` elements. Other half of the
    fix for #2047.
  bugfix: HEVC/h.265: the generation of the HEVCC structure
    stored in `CodecPrivate` was wrong in two places:
    1. the position of the number of sub-layers was swapped with
    reserved bits and 2. the VPS/SPS/PPS/SEI lists did not start
    with a reserved 1 bit.
  bugfix: output: the `doc type version` will be set at least
    to 2 if certain elements are written (`CodecState`,
    `CueCodecState`, `FlagInterlaced`).
  bugfix: output: the track header attributes `MinCache` and
    `MaxCache` will not be written anymore.
  bugfix: Matroska reader: the "key" and "discardable" flags of
    SimpleBlock elements will be kept as they are.
  bugfix: Matroska reader: if present in the file,
    the "white colour coordinate x" track header attribute was
    written to both "white colour coordinate x" and
    "white colour coordinate y" in the output file.
  bugfix: Opus output: mkvmerge will now put all frames with
    discard padding into their own block group.
  * MKVToolNix GUI: Bugfix: header editor: removed the check for
    external modification when saving the file.
  bugfix: job queue: fixed calculation of total progress when
    automatic removal of completed is enabled.</changelog>
  <changelog author="rpm@fthiessen.de" date="1513080000">-Update to 18.0.0:
  * mkvmerge: bugfix: AAC ADTS parser: fixed interpretation of the
    `channel_configuration` header element for ADTS files that do
    not contain a program configuration element: value 7 means
    7.1 channels.
  bugfix: Matroska identification: the `date_local` and
    `date_utc` attributes will only be output if the identified
    Matroska file actually contains the "date" header field.
  bugfix: WebVTT: mkvmerge did not recognize timestamp lines if
    the hours components were absent.
  enhancement: AVC &amp; HEVC ES parsers: performance improvements
    by copying much less memory around.
  enhancement: tags: reintroduced a workaround for non-compliant
    files with tags that do not contain the mandatory `SimpleTag`
    element. This workaround was removed during code refactoring
    in release v15.0.0.
  * mkvpropedit: bugfix: GUI's header editor: the `date` header
    field won't be added automatically anymore whenever the
    segment info section is edited and the `date` element is
    either deleted or not present in the first place.
  * GUI: multiplexer: the "AAC is SBR/HE-AAC/AAC+" checkbox in
    the "audio properties" section will be disabled if the
    functionality is not implemented for the selected track's
    codec &amp; container.
  enhancement: multiplexer: the "reduce to core" checkbox in
    the "audio properties" section will be disabled if the
    functionality is not implemented for the selected track's
    codec.</changelog>
  <changelog author="jengelh@inai.de" date="1514203200">- Update to new upstream release 19.0.0
  * mkvmerge: splitting by duration, by timestamps or by
    timestamp-based parts: mkvmerge will now consider the first
    key frame within 1ms of the requested value to be eligible
    for splitting.
  * mkvmerge: fixed reading text files encoded in UTF-16 order
    UTF-32 that have different forms of line endings (new lines,
    carriage returns or a mix of both).
  * MKVToolNix GUI: multiplexer: once a "subtitle/chapter
    character set" was set for a track it couldn't be changed
    back to the empty entry (= auto-detection) anymore.</changelog>
  <changelog author="rpm@fthiessen.de" date="1516536000">- Update to 20.0.0:
  * Feature removal: several deprecated features have been removed:
  mkvmerge: the deprecated options `--identify-verbose`,
    `--identify-for-gui`, `--identify-for-mmg` and
    `--identification-format verbose-text`
  all command line tools: support for the deprecated, old,
    proprietary format used for option files
  all command line tools: support for passing command line
    options via the deprecated environment variables
    `MKVTOOLNIX_OPTIONS`, `MKVEXTRACT_OPTIONS`, `MKVINFO_OPTIONS`,
    `MKVMERGE_OPTIONS` and `MKVPROPEDIT_OPTIONS`
  * mkvmerge: AVC/h.264 packetizer (framed): access unit delimiter
    NALUs will now be removed.
  bugfix: AVC/h.264 parser: when fixing the bitstream timing
    information mkvmerge will now use exact representations of
    the desired field duration if possible.
  bugfix: AVC/h.264 parser: mkvmerge no longer assumes that
    encountering sequence parameter set or picture parameter set
    NALUs signal the start of a new frame.
  bugfix: AVC/h.264 packetizer (framed): when mkvmerge is told
    to fix the bitstream timing information, it will now update
    all SPS NALUs, not just the ones in the AVCC.
  bugfix: MPEG TS reader: TS packet payloads will only be
    treated as PES packets if the payload actually starts with
    a PES start code. The prior behavior led to wrong timestamps
    and potentially broken frame data.
  bugfix: MPEG TS reader: mkvmerge will now drop incomplete PES
    packets as soon as an error is detected in the transport
    stream instead of passing the incomplete frame to the
    packetizer. An error is assumed either if the
    `transport_error_indicator` flag is set or if the value of
    the `continuity_counter` header field doesn't match the
    expected value.
  bugfix: Opus: when re-muxing Opus from Matroska mkvmerge will
    now write "block duration" elements for all block groups
    where a "discard padding" is set, too.
  bugfix: SRT reader: mkvmerge can now handle SRT files with
    timestamps without decimal places.
  bugfix: read buffer I/O class: the class could get out of sync
    regarding the file position of the underlying file I/O class
    causing wrong data to be returned on subsequent read
    operations. One result was that trying to identifying MPLS
    files that refer to very short M2TS files caused mkvmerge
    to segfault.
  bugfix: multiplexer core: if there's a gap in audio timestamps,
    a new block group/lace will be started for the first frame
    after each gap. Before the fix the frame after the gap was
    often stored in the previous block group causing the gap to
    be in the wrong place: at the end of that block group.
  * mkvextract: bugfix: AVC/h.264: if two consecutive IDR frames
    with the same `idr_pic_id` parameter and no access unit
    delimiters are found between them, mkvextract will insert an
    access unit delimiter in order to signal the start of a new
    access unit.
  * MKVToolNix GUI: bugfix: update check dialog: Markdown links will
    now be converted to clickable links.</changelog>
  <changelog author="rpm@fthiessen.de" date="1523275200">- Update to 22.0.0:
  * mkvmerge: New feature: AC-3, DTS, TrueHD: added an option for
    removing/minimizing the dialog normalization gain for all
    supported types of the mentioned codecs.
  New feature: AV1: added support for reading AV1 video from IVF,
    WebM and Matroska files.
  New feature: FLAC: mkvmerge can now ignore ID3 tags in FLAC
    files which would otherwise prevent mkvmerge from detecting the
    file type.
  Bugfix: MP4 reader: fixed reading the ESDS audio header atom if
    it is located inside a "wave" atom inside the "stsd" atom.
  Bugfix: MP4 reader: AAC audio tracks signalling eight channels
    in the track headers but only seven in the codec-specific
    configuration will be treated as having eight channels.
  Bugfix: MPEG TS reader: fixed wrong handling of the continuity
    counter for TS packets that signal that TS payload is present
    but where the adaptation field spans the whole TS packet.
  Bugfix: the 'document type version' and 'document type read version'
    header fields are now set depending on which elements are
    actually written, not on which features are active.
  Bugfix: the 'document type version' header field is now set
    to 4 correctly if any of the version 4 Matroska elements
    is written.
  * mkvinfo: New Feature: the size and positions of frames
    within "SimpleBlock" and "BlockGroup" elements are now shown
    the same way they're  shown for other elements.
  Bugfix: summary mode: the file positions reported for frames in
    `BlockGroup` elements did not take the bytes used for
    information such as timestamp, track number flags or lace sizes
    into account. They were therefore too low.
  * mkvpropedit, MKVToolNix GUI header editor: the
    'document type version' and 'document type read version' header
    fields are now updated if elements written by the changes require
    higher version numbers.
  Bugfix: mandatory elements can now be deleted if there's a default
    value for them in the specifications.
  * MKVToolNix GUI: multiplexer: added options for deriving the
    track languages from the file name by searching for
    ISO 639-1/639-2 language codes or language names enclosed in
    non-word, non-space characters.
  Bugfix: info tool: implemented reading all elements in the file
    after the first cluster. Only top-level elements are shown;
    child elements are only loaded on demand.
  Bugfix: info tool: added a context menu with the option to show a
    hex dump of the element with the bytes making up the EBML ID and
    the size portion highlighted in different colors.
    In-depth highlighting is done for the data in `SimpleBlock`
    and `Block` elements.
  Bugfix: chapter editor: added an option to remove all end
    timestamps to the "additional modifications" dialog.
- Update to 21.0.0:
  * mkvinfo: the GUI portion has been removed. mkvinfo is now a pure
    command-line program again.
  * mkvmerge: New feature: track statistics tags: the `TagDefault`
    element will not be written anymore as it was always set to the
    default value `1` anyway.
  New feature: JSON files can now contain C++-style line comments
    outside of strings. Such comments, even though not part of the
    official JSON specifications, are now ignored when reading JSON
    files.
  Bugfix: Appending files with additional parts at the same time
    was broken if more than one additional part was appended.
  Bugfix: FLV reader: a single invalid AAC frame was written for
    AAC audio tracks with codec initialization data longer than five
    bytes.
  Bugfix: FLV reader: timestamps will be normalized down to 0.
  Bugfix: MP4 reader: if an AAC track doesn't contain an
    AAC-specific decoder configuration in the ESDS portion,
    then a default decoder configuration will be generated based on
    the track's header data instead of skipping the track.
  Bugfix: MP4 reader: fixed reading HEVC/h.265 video tracks if
    they're stored as Annex B byte streams inside MP4.
  Bugfix: Ogg Opus reader: mkvmerge will now emit a warning
    instead of aborting when it encounters an Ogg Opus page with
    no data in the packet.
  Bugfix: Matroska parser: fixed a segmentation fault that
    occurred whenever the first level 1 element after resyncing
    after an error in the file structure isn't a cluster.
  Bugfix: fixed a crash during file type detection for
    attachments if MKVToolNix is installed in a path with
    non-ASCII characters (e.g. German Umlauts).
  * MKVToolNix GUI: New Feature: chapter editor: opening a
    Matroska file without chapters in it will now open the file
    in an empty chapter editor instead of showing an error message.
  New Feature: an "info" tool has been added, replacing the
    functionality of mkvinfo's GUI. The functionality is not on
    par yet but will be for release v22.
  Bugfix: MKVToolNix GUI: Bugfix: multiplexer: the subtitle
    character set can now be set for appended subtitle files, too.
  Bugfix: MKVToolNix GUI: multiplexer: when appending, all tracks
    appended to disabled tracks will start out disabled, too.
  * mkvinfo: the `--hex-positions` parameter did nothing in summary mode.
  Bugfix: mkvinfo: Windows: line endings will be written as `\r\n`
    again instead of just `\n`.
  * mkvpropedit: Bugfix: adding track statistics tags: for tracks
    with content encoding (compression) mkvpropedit is now
    accounting the uncompressed number of bytes, not the encoded
    (compressed) number of bytes.</changelog>
  <changelog author="rpm@fthiessen.de" date="1533729600">- Update to 25.0.0:
  * mkvextract: New feature: VobSub extraction: empty SPU packets
    will now be dropped during extraction as other tools such as
    MP4Box cannot handle them correctly.
  Bugfix: fixed a crash when mkvextract with a non-Matroska file as
    the source file.
  * MKVToolNix GUI: New feature:: multiplexer: added options to only
    enable tracks of certain types by default.
  New feature: multiplexer: added an option to enable dialog
    normalization gain removal by default for all audio tracks for
    which the operation is supported.
  New feature: multiplexer: when deriving track languages from the
    file names is active and the file name contains the usual
    season/episode pattern, then only the part after the
    season/episode pattern will be used for detecting the language.
  New feature: multiplexer: the regular expression used for deriving
    track languages from the file names can now be customized in
    the preferences.
  New feature: multiplexer: the user can now customize the list of
    track languages the GUI recognizes in file names. This list
    defaults to a handful of common languages instead of the full
    list of supported languages.
  Bugfix: multiplexer: when scanning playlists, all playlists were
    offered for selection regardless of the value of the "minimum
    playlist duration" setting.
  Bugfix: multiplexer: deriving track languages from file names:
    the regular sub-expressions for ISO 639-1 codes could match
    on empty strings, too, causing matches in wrong places and hence
    no language being recognized in certain situations.
  Bugfix: header editor: fixed a crash when saving the file fails
    (e.g. because it isn't writable).
  Bugfix: header editor: the editor was wrongfully claiming that
    mandatory elements with default values cannot be removed in
    the "status" text.
  Bugfix: preferences: on macOS &amp; Linux the setting "enable copying
    tracks by their type" wasn't restored on program start.
  Bugfix: the central area is now scrollable, allowing the GUI to be
    resized to almost arbitrary sizes.
  Bugfix: multiplexer: the "copy file title to destination file name"
    functionality will now replace everything in the destination file
    name up to the last period instead of only up to the first period.
  * mkvmerge: New feature: SRT/ASS/SSA text subtitles: for files for
    which no encoding has been specified, mkvmerge will try UTF-8
    first before falling back to the system's default encoding.
  New feature: SRT/ASS/SSA/WebVTT text subtitles: a warning is now
    emitted if invalid 8-bit characters are encountered outside valid
    multi-byte UTF-8 sequences.
  New Feature: Matroska &amp; MPEG transport stream readers: the encoding
    of text subtitles read from Matroska files can now be changed
    with the '--sub-charset' parameter.
  New feature: MP4 reader: improved the detection of edit lists
    consisting of two identical entries, each spanning the file's
    duration as given in the movie header atom. The second entry is
    ignored in such cases.
  New feature: JSON identification: the "display unit" video track
    property is now reported as `display_unit`. The JSON schema has
    been bumped to v11 for this change.
  New feature: AVC/h.264: empty NALUs will now be removed.
  New feature: input: format detection uses file-extension to improve
    performance and to give preference when several formats match.
  New feature: AV1: added support for reading AV1 video from
    Open Bitstream Unit files.
  New feature: AV1: adjusted the code for the AV1 bitstream format
    changes made up to 2018-05-02 (git revision d14e878).
  New feature: MP4 reader: if a track has an edit list with two
    identical entries, each spanning the file's duration as given in
    the movie header atom, then the second entry will now be ignored.
    Improves the handling of files with bogus data.
  Bugfix: AVC/h.264 and HEVC: fixed file identification failing
    for certain elementary streams due to internal buffers not
    being cleared properly.
  Bugfix: MLP code: fixed various issues preventing MLP from being
    parsed correctly.
  Bugfix: TrueHD/MLP packetizer; dialog volume normalization removal
    isn't attempted if the track is an MLP track as the operation is
    only supported for TrueHD, not MLP.
  Bugfix: MPEG TS reader: when reading MPLS mkvmerge will now
    compare the MPLS's start and end timestamps against the transport
    stream's PTS instead of its DTS. Otherwise the first key frame of
    a video track might be dropped if it isn't the first in
    presentation order.
  Bugfix: JSON identification: mkvmerge will ensure that all strings
    passed to the JSON output modules are valid UTF-8 encoded strings
    by replacing invalid bytes with placeholder characters. This avoids
    the JSON library throwing an exception and mkvmerge
    aborting on such data.
  Bugfix: audio packetizers: mkvmerge will now keep discard
    padding values if they're present for packets read
    from Matroska files.
  Bugfix:  Ogg Opus reader: packet timestamps aren't calculated by
    summing up the duration of all packets starting with
    timestamp 0 anymore. Instead the algorithm is based on the Ogg page's
    granule position and which packet number is currently timestamped
    (special handling for the first and last packets in the stream).
  Bugfix: E-AC-3 parser: fixed determining the number of channels for
    streams that contain an AC-3 core with dependent E-AC-3 frames.
  Bugfix:  Matroska reader: fixed mkvmerge buffering the whole file if a
    video track is multiplexed that consists of only one or a few frames.
  Bugfix: the "display unit" video track property will now be kept if
    it is set in the source file.
  Bugfix:  MP3 packetizer: removed a memory leak growing linearly with the
    track's size.
  Bugfix: VobSub packetizer: whenever a VobSub packet doesn't contain a
    duration on the container level, mkvmerge will now set it from
    the duration in the SPU packets. Before it was accidentally setting
    the SPU-level duration to 0 instead.
  Bugfix:  track statistics tags: if writing the `Date` element is
    deactivated via `--no-date`, the `_STATISTICS_WRITING_DATE_UTC`
    isn't written either anymore.
  Bugfix: removed several small, constant-size memory leaks.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1539864000">- Update to version 27.0.0:
  * mkvmerge: New feature: chapters: the timestamps of chapters
  read from containers or from chapter files can be adjusted
  (multiplication and addition) with the new
  `--chapter-sync` option or using the special track ID `-2`
  for the existing `--sync` option.
  Bugfix: AC-3: dialog normalization gain removal was corrupting
  E-AC-3 frames irreversibly by writing checksums in places where
  they didn't belong. Additionally only the first E-AC-3 frame in
  a Matroska was processed but not additional dependent frames in
  the same block.
  * MKVToolNix GUI: New feature: multiplexer: adjusted &amp; added
  controls for mkvmerge's new feature of being able to adjust
  chapter timestamps.
  New feature: multiplexer: the GUI can now ask for confirmation
  when the user is about to create a file that won't contain
  audio tracks. It does this by default if at least one source
  file contains an audio track.
  Bugfix: fixed a leak of Windows font resources leading to a
  general slowdown and subsequent crash.
- Update to version 26.0.0:
  * mkvmerge: New feature: chapter generation: if the name template
  given by `--generate-chapters-name-template` is empty, no names
  will be generated for the chapter atoms.
  New feature: chapters: chapter names generated from MPLS files
  will now use the name template if one is set via
  `--generate-chapters-name-template`.
  New feature: mkvmerge will no longer abort with an error message
  if no audio, video and subtitle tracks should be multiplexed.
  This allows copying of chapters from non-chapter source files.
  Bugfix: Matroska reader: fixed wrong timestamps when appending
  Matroska files where the second Matroska file's first timestamp
  is bigger than 0.
  Bugfix: MP4 reader: fixed division by zero errors during file
  identification if the timescale is 0 in the `MVHD` atom.
  Bugfix: Windows Television DVR files are now recognized as an
  unsupported file type. This prevents mis-detection as MPEG-2
  with an accompanying flood of error messages.
  * MKVToolNix GUI: New feature: the font size in the tool
  selector on the left will scale with the font size the
  user selects in the preferences.
  New feature: the GUI will no longer automatically resize the
  columns in tree and list views to match the content size.
  Instead it remembers and restores the widths set by the user.
  New feature: multiplexer: the chapter name template will now be
  set automatically to the name template in the preferences'
  "chapter editor" section. Additionally the option
  `--generate-chapters-name-template ?` will be passed to
  mkvmerge in situations when mkvmerge will generate chapters.
  New feature: chapter editor: if the chapter name template is empty,
  chapters will be generated without names.
  New feature: chapter editor: added an option to remove all chapter
  names to the "additional modifications" dialog.
  Bugfix: info tool: under certain circumstances "cues" were shown at
  the wrong level (inside the previous master element instead of on
  lvel 1).
  Bugfix: job queue: fixed invalid memory handling and consequent
  crashes when using the "edit in corresponding tool &amp; remove from
  job queue" option if one of the files in that job contained
  attached files.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1540900800">- Update to version 28.2.0
  * mkvmerge, mkvinfo, mkvextract, mkvpropedit, MKVToolNix GUI's info
  tool &amp; chapter editor: fixed a case of memory being accessed after
  it had been freed earlier. This can be triggered by specially
  crafted Matroska files and lead to arbitrary code execution. The
  vulnerability was reported as Cisco TALOS 2018-0694 on 2018-10-25
  (CVE-2018-4022). Fixes boo#1113709.
- Update to version 28.1.0
  * mkvmerge: bugfix: AV1 parser: fixed an error in the sequence
  header parser if neither the `reduced_still_picture_header` nor
  the `frame_id_numbers_present_flag` is set.
  bugfix: AV1 parser: when creating the `av1C` structure for the
  Codec Private element the sequence header OBU wasn't copied
  completely: its common data (type field &amp; OBU size among others)
  was missing.
  bugfix: Matroska reader, AV1: mkvmerge will try to re-create the
  `av1C` data stored in Codec Private when reading AV1 from
  Matroska or WebM files created by mkvmerge v28.0.0.
  * MKVToolNix GUI: bugfix info tool: the tool will no longer stop
  scanning elements when an EBML Void element is found after the
  first Cluster element.
- Update to version 28.0.0
  * mkvmerge: New feature: AV1 parser: updated the code for the
  finalized AV1 bitstream specification.
  New feature: AV1 packetizer: updated the code for the finalized
  AV1-in-Matroska &amp; WebM mapping specification.
  New feature: AV1 support: the `--engage enable_av1` option has
  been removed again.
  New feature: MP4 reader: added support for AV1.
  New feature: DTS: implemented dialog normalization gain removal
  for extension substreams.
  New feature: VP9: mkvmerge will now create codec private data
  according to the VP9 codec mapping described in the WebM
  specifications.
  bugfix: JSON identification: fixed a bug when removing invalid
  UTF-8 data from strings before they're output as JSON.
  bugfix: MP4/QuickTime reader: fixed handling of PCM audio with
  FourCC `in24`.
  bugfix: MPEG transport stream reader, teletext subtitles: the
  decision whether or not to keep frames around in order to
  potentially merge them with the following frame is made sooner.
  That avoids problems if there are large gaps between teletext
  subtitle frames which could lead to frames being interleaved
  too late.
  * mkvmerge, mkvextract: New feature: simple text subtitles:
  added a workaround for simple text subtitle tracks that don't
  contain a duration.
  * mkvextract: New feature: added support for extracting AV1 to IVF.
  New feature: IVF extractor (AV1, VP8, VP9): precise values will
  be used for the frame rate numerator &amp; denominator header fields
  for certain well-known values of the track's default duration.
  * MKVToolNix GUI: New feature: automatic scaling for high DPI
  displays is activated if the GUI is compiled with Qt ? 5.6.0.
  New feature: added a menu item ("Help" ? "System information") for
  displaying information about the system MKVToolNix is running on
  in order to make debugging easier.
  New feature: multiplexer, header editor: the user can enter a list
  of predefined track names in the preferences. She can later select
  from them in "track name" combo box.
  * mkvextract: bugfix: IVF extractor (AV1, VP8, VP8): the frame rate
  header fields weren't clamped to 16 bits properly causing wrong
  frame rates to be written in certain situations.
  * mkvpropedit, MKVToolNix GUI's header editor: bugfix: fixed file
  corruption when a one-byte space must be covered with a new EBML
  void element but all surrounding elements have a "size length"
  field that's eight bytes long already.</changelog>
</package>
<package pkgid="7bf65fb245cf45be6e7d3af7d1dd1e5dfabec78780500be931fb368b22eabd92" name="mlocate" arch="src">
  <version epoch="0" ver="0.26" rel="lp150.3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1394798400">- Update comments in sysconfig.locate a bit to reflect reality.</changelog>
  <changelog author="tchvatal@suse.com" date="1394798401">- Cleanup with spec-cleaner.</changelog>
  <changelog author="tchvatal@suse.com" date="1394798402">- Include findutils-locate variables in updatedb.conf if user
  still have them specified. bnc#861955
  * This ensures we can still load the variables user can specified
    in the /etc/sysconfig/locate namely UPDATEDB_PRUNEPATHS and
    UPDATEDB_PRUNEFS</changelog>
  <changelog author="tchvatal@suse.com" date="1395057600">- Move the UPDATEDB_ variables parsing to cron service to have
  it working there as the upstream bash config is not exactly
  shell interpreted. bnc#861955.
- Sadly this way if user runs updatedb by hand it gets not
  properly populated, but at least the cron works with backcompat
  way.</changelog>
  <changelog author="tchvatal@suse.com" date="1395230400">- Also respect the UPDATEDB_ when not running as root in the
  cron job.</changelog>
  <changelog author="tchvatal@suse.com" date="1396526400">- Fix a bug where empty RUN_UPDATEDB_AS="" caused cron fail with
  unknown arguments if the compat values were empty.</changelog>
  <changelog author="tchvatal@suse.com" date="1397563200">- Update once more to always hit the same code and to avoid
  regressions that are hit only under some setup scenarios.</changelog>
  <changelog author="tchvatal@suse.com" date="1399291200">- Remove some duped fs from PRUNEFS variable.</changelog>
  <changelog author="tchvatal@suse.com" date="1402488000">- Enable testsuite.</changelog>
  <changelog author="tchvatal@suse.com" date="1414238400">- Remove mention of the locate group that was obsoleted.
  fixes bnc#902588</changelog>
  <changelog author="tchvatal@suse.com" date="1440158400">- Specify umask to allow user redefine the value in login.defs
  bnc#941296</changelog>
  <changelog author="tchvatal@suse.com" date="1453291200">- Add more mounts to exclude in updatedb.conf</changelog>
  <changelog author="tchvatal@suse.com" date="1453291201">- Cron file updates:
  - Remove the ac/battery detection that does not work
  - Exit with 1 when the updatedb is not executable</changelog>
  <changelog author="tchvatal@suse.com" date="1472472000">- Reduce dependencies a bit
- Update updatedb.conf wrt bnc#994663</changelog>
  <changelog author="tchvatal@suse.com" date="1487246400">- Update the umask also in su section where it could be nulled
  wrt bsc#1019440</changelog>
  <changelog author="tchvatal@suse.com" date="1499688000">- We moved locks to /run thus do not rely on symlinks</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Require user nobody wrt bsc#1055634</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tchvatal@suse.com" date="1525953600">- Add apparmor profile bsc#1089594</changelog>
  <changelog author="suse-beta@cboltz.de" date="1536321600">- add capability rules to updatedb AppArmor profile to allow running
  it as root (boo#1089594#c4)</changelog>
</package>
<package pkgid="3c693173e4c74fe4e54a3a09df80ec96f70fa5df19fb39a803c4f1f862b5e21f" name="mlocate" arch="x86_64">
  <version epoch="0" ver="0.26" rel="lp150.3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1394798400">- Update comments in sysconfig.locate a bit to reflect reality.</changelog>
  <changelog author="tchvatal@suse.com" date="1394798401">- Cleanup with spec-cleaner.</changelog>
  <changelog author="tchvatal@suse.com" date="1394798402">- Include findutils-locate variables in updatedb.conf if user
  still have them specified. bnc#861955
  * This ensures we can still load the variables user can specified
    in the /etc/sysconfig/locate namely UPDATEDB_PRUNEPATHS and
    UPDATEDB_PRUNEFS</changelog>
  <changelog author="tchvatal@suse.com" date="1395057600">- Move the UPDATEDB_ variables parsing to cron service to have
  it working there as the upstream bash config is not exactly
  shell interpreted. bnc#861955.
- Sadly this way if user runs updatedb by hand it gets not
  properly populated, but at least the cron works with backcompat
  way.</changelog>
  <changelog author="tchvatal@suse.com" date="1395230400">- Also respect the UPDATEDB_ when not running as root in the
  cron job.</changelog>
  <changelog author="tchvatal@suse.com" date="1396526400">- Fix a bug where empty RUN_UPDATEDB_AS="" caused cron fail with
  unknown arguments if the compat values were empty.</changelog>
  <changelog author="tchvatal@suse.com" date="1397563200">- Update once more to always hit the same code and to avoid
  regressions that are hit only under some setup scenarios.</changelog>
  <changelog author="tchvatal@suse.com" date="1399291200">- Remove some duped fs from PRUNEFS variable.</changelog>
  <changelog author="tchvatal@suse.com" date="1402488000">- Enable testsuite.</changelog>
  <changelog author="tchvatal@suse.com" date="1414238400">- Remove mention of the locate group that was obsoleted.
  fixes bnc#902588</changelog>
  <changelog author="tchvatal@suse.com" date="1440158400">- Specify umask to allow user redefine the value in login.defs
  bnc#941296</changelog>
  <changelog author="tchvatal@suse.com" date="1453291200">- Add more mounts to exclude in updatedb.conf</changelog>
  <changelog author="tchvatal@suse.com" date="1453291201">- Cron file updates:
  - Remove the ac/battery detection that does not work
  - Exit with 1 when the updatedb is not executable</changelog>
  <changelog author="tchvatal@suse.com" date="1472472000">- Reduce dependencies a bit
- Update updatedb.conf wrt bnc#994663</changelog>
  <changelog author="tchvatal@suse.com" date="1487246400">- Update the umask also in su section where it could be nulled
  wrt bsc#1019440</changelog>
  <changelog author="tchvatal@suse.com" date="1499688000">- We moved locks to /run thus do not rely on symlinks</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Require user nobody wrt bsc#1055634</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tchvatal@suse.com" date="1525953600">- Add apparmor profile bsc#1089594</changelog>
  <changelog author="suse-beta@cboltz.de" date="1536321600">- add capability rules to updatedb AppArmor profile to allow running
  it as root (boo#1089594#c4)</changelog>
</package>
<package pkgid="1b64659d978b25a4baa09c995d950b245418cb1387da308c06b58102a3c6060e" name="mlocate-lang" arch="noarch">
  <version epoch="0" ver="0.26" rel="lp150.3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1394798400">- Update comments in sysconfig.locate a bit to reflect reality.</changelog>
  <changelog author="tchvatal@suse.com" date="1394798401">- Cleanup with spec-cleaner.</changelog>
  <changelog author="tchvatal@suse.com" date="1394798402">- Include findutils-locate variables in updatedb.conf if user
  still have them specified. bnc#861955
  * This ensures we can still load the variables user can specified
    in the /etc/sysconfig/locate namely UPDATEDB_PRUNEPATHS and
    UPDATEDB_PRUNEFS</changelog>
  <changelog author="tchvatal@suse.com" date="1395057600">- Move the UPDATEDB_ variables parsing to cron service to have
  it working there as the upstream bash config is not exactly
  shell interpreted. bnc#861955.
- Sadly this way if user runs updatedb by hand it gets not
  properly populated, but at least the cron works with backcompat
  way.</changelog>
  <changelog author="tchvatal@suse.com" date="1395230400">- Also respect the UPDATEDB_ when not running as root in the
  cron job.</changelog>
  <changelog author="tchvatal@suse.com" date="1396526400">- Fix a bug where empty RUN_UPDATEDB_AS="" caused cron fail with
  unknown arguments if the compat values were empty.</changelog>
  <changelog author="tchvatal@suse.com" date="1397563200">- Update once more to always hit the same code and to avoid
  regressions that are hit only under some setup scenarios.</changelog>
  <changelog author="tchvatal@suse.com" date="1399291200">- Remove some duped fs from PRUNEFS variable.</changelog>
  <changelog author="tchvatal@suse.com" date="1402488000">- Enable testsuite.</changelog>
  <changelog author="tchvatal@suse.com" date="1414238400">- Remove mention of the locate group that was obsoleted.
  fixes bnc#902588</changelog>
  <changelog author="tchvatal@suse.com" date="1440158400">- Specify umask to allow user redefine the value in login.defs
  bnc#941296</changelog>
  <changelog author="tchvatal@suse.com" date="1453291200">- Add more mounts to exclude in updatedb.conf</changelog>
  <changelog author="tchvatal@suse.com" date="1453291201">- Cron file updates:
  - Remove the ac/battery detection that does not work
  - Exit with 1 when the updatedb is not executable</changelog>
  <changelog author="tchvatal@suse.com" date="1472472000">- Reduce dependencies a bit
- Update updatedb.conf wrt bnc#994663</changelog>
  <changelog author="tchvatal@suse.com" date="1487246400">- Update the umask also in su section where it could be nulled
  wrt bsc#1019440</changelog>
  <changelog author="tchvatal@suse.com" date="1499688000">- We moved locks to /run thus do not rely on symlinks</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Require user nobody wrt bsc#1055634</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tchvatal@suse.com" date="1525953600">- Add apparmor profile bsc#1089594</changelog>
  <changelog author="suse-beta@cboltz.de" date="1536321600">- add capability rules to updatedb AppArmor profile to allow running
  it as root (boo#1089594#c4)</changelog>
</package>
<package pkgid="9056bda876867571ccb3f83b373383b224b46815d2a2de2091132e0a6d892d29" name="moinmoin-wiki" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.4.1"/>
  <changelog author="seroton10@gmail.com" date="1408708800">- default configuration of Apache 2.4 for openSUSE 13.1 expects
  old-style directives for access control.</changelog>
  <changelog author="seroton10@gmail.com" date="1409140800">- Remove applet JARs from SLE build - bytecode level not accepted</changelog>
  <changelog author="seroton10@gmail.com" date="1409140801">- Reinstate applets - they are served to and executed in client
  browser, so bytecode level is irrelevant</changelog>
  <changelog author="seroton10@gmail.com" date="1409486400">- Rebuild Java applets for editing drawings from source.</changelog>
  <changelog author="seroton10@gmail.com" date="1409659200">- Added man pages
- Filter out spurious "non-executable-script" rpmlint warning</changelog>
  <changelog author="seroton10@gmail.com" date="1410264000">- Remove AnyWikiDraw from package (see bnc#895361)</changelog>
  <changelog author="seroton10@gmail.com" date="1410264001">- Rename moin-mkwiki to mkwiki.moin (like mkfs.*)</changelog>
  <changelog author="p.drouand@gmail.com" date="1410350400">- Fix build for SLE11SP3</changelog>
  <changelog author="seroton10@gmail.com" date="1410955200">- Reinstate AnyWikiDraw applet in the package (bnc#895361)
  + anywikidraw.patch allows it to run as an unsigned applet</changelog>
  <changelog author="seroton10@gmail.com" date="1414756800">- Upgrade to MoinMoin version 1.9.8:
  + surge protection for authentication requests
  + added abuse logging, and various other logging improvements
  + various changes to reduce load caused by bots
  + an XSS security fix, and other bugfixes
  + see the CHANGES file for the full list, and for more details</changelog>
  <changelog author="seroton10@gmail.com" date="1437307200">- anywikidraw-java8.patch: Fix compilation error on Java 8.</changelog>
  <changelog author="seroton10@gmail.com" date="1453550400">- Rename package to moinmoin-wiki</changelog>
  <changelog author="seroton10@gmail.com" date="1455019200">- Remove AnyWikiDraw applet due to non-GPL license (SR 356378)</changelog>
  <changelog author="seroton10@gmail.com" date="1455796800">- Reinstate AnyWikiDraw applet, with proof it's actually GPL.</changelog>
  <changelog author="seroton10@gmail.com" date="1500206400">- Always use python2 interpreter</changelog>
  <changelog author="seroton10@gmail.com" date="1505822400">- Adjust to Java9 as default compiler
  + added anywikidraw-java9.patch
  + added twikidraw-java9.patch</changelog>
  <changelog author="seroton10@gmail.com" date="1513598400">- Upgrade to version 1.9.9:
  + added raw#199.patch as specified by upstream
- Remove obsolete Java drawing Applets from package
  + removed anywikidraw-java8.patch
  + removed anywikidraw-java9.patch
  + removed anywikidraw.patch
  + removed twikidraw-java9.patch</changelog>
  <changelog author="jengelh@inai.de" date="1514289600">- Trim filler wording from description.</changelog>
  <changelog author="seroton10@gmail.com" date="1537185600">- Upgrade to version 1.9.10
  + security fix for CVE-2017-5934, XSS in GUI editor related code
    (boo#1111104)
  + removed raw#199.patch, is included in new version</changelog>
  <changelog author="astieger@suse.com" date="1539000000">- add upstream signing key and verify source signature</changelog>
</package>
<package pkgid="acc7926bca740d5143779f30c8bddb0f5506b3cfcd81e3a8a9bedd569eba486d" name="moinmoin-wiki" arch="src">
  <version epoch="0" ver="1.9.10" rel="lp150.2.4.1"/>
  <changelog author="seroton10@gmail.com" date="1408708800">- default configuration of Apache 2.4 for openSUSE 13.1 expects
  old-style directives for access control.</changelog>
  <changelog author="seroton10@gmail.com" date="1409140800">- Remove applet JARs from SLE build - bytecode level not accepted</changelog>
  <changelog author="seroton10@gmail.com" date="1409140801">- Reinstate applets - they are served to and executed in client
  browser, so bytecode level is irrelevant</changelog>
  <changelog author="seroton10@gmail.com" date="1409486400">- Rebuild Java applets for editing drawings from source.</changelog>
  <changelog author="seroton10@gmail.com" date="1409659200">- Added man pages
- Filter out spurious "non-executable-script" rpmlint warning</changelog>
  <changelog author="seroton10@gmail.com" date="1410264000">- Remove AnyWikiDraw from package (see bnc#895361)</changelog>
  <changelog author="seroton10@gmail.com" date="1410264001">- Rename moin-mkwiki to mkwiki.moin (like mkfs.*)</changelog>
  <changelog author="p.drouand@gmail.com" date="1410350400">- Fix build for SLE11SP3</changelog>
  <changelog author="seroton10@gmail.com" date="1410955200">- Reinstate AnyWikiDraw applet in the package (bnc#895361)
  + anywikidraw.patch allows it to run as an unsigned applet</changelog>
  <changelog author="seroton10@gmail.com" date="1414756800">- Upgrade to MoinMoin version 1.9.8:
  + surge protection for authentication requests
  + added abuse logging, and various other logging improvements
  + various changes to reduce load caused by bots
  + an XSS security fix, and other bugfixes
  + see the CHANGES file for the full list, and for more details</changelog>
  <changelog author="seroton10@gmail.com" date="1437307200">- anywikidraw-java8.patch: Fix compilation error on Java 8.</changelog>
  <changelog author="seroton10@gmail.com" date="1453550400">- Rename package to moinmoin-wiki</changelog>
  <changelog author="seroton10@gmail.com" date="1455019200">- Remove AnyWikiDraw applet due to non-GPL license (SR 356378)</changelog>
  <changelog author="seroton10@gmail.com" date="1455796800">- Reinstate AnyWikiDraw applet, with proof it's actually GPL.</changelog>
  <changelog author="seroton10@gmail.com" date="1500206400">- Always use python2 interpreter</changelog>
  <changelog author="seroton10@gmail.com" date="1505822400">- Adjust to Java9 as default compiler
  + added anywikidraw-java9.patch
  + added twikidraw-java9.patch</changelog>
  <changelog author="seroton10@gmail.com" date="1513598400">- Upgrade to version 1.9.9:
  + added raw#199.patch as specified by upstream
- Remove obsolete Java drawing Applets from package
  + removed anywikidraw-java8.patch
  + removed anywikidraw-java9.patch
  + removed anywikidraw.patch
  + removed twikidraw-java9.patch</changelog>
  <changelog author="jengelh@inai.de" date="1514289600">- Trim filler wording from description.</changelog>
  <changelog author="seroton10@gmail.com" date="1537185600">- Upgrade to version 1.9.10
  + security fix for CVE-2017-5934, XSS in GUI editor related code
    (boo#1111104)
  + removed raw#199.patch, is included in new version</changelog>
  <changelog author="astieger@suse.com" date="1539000000">- add upstream signing key and verify source signature</changelog>
</package>
<package pkgid="efbc5816bf6adc49995c48a4262f1d0330bb17784ebb0d1ccb0383e6e36429e6" name="monitoring-plugins-metadata" arch="noarch">
  <version epoch="0" ver="4.1.1+git0.5a1edf2b" rel="lp150.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.0+git.1485962683.3b5faae:
  * Also backup users permissions. Skip guest user permission for vhost /
  * Low: slapd: Change of the stop processing.
  * LVM: add error messages for partial_activation
  * Low: apache: Reduce log spam for success
  * Low: findif.sh: Correctly redirect output to /dev/null
  * Low: eDir88: Fix incorrect shell usage
  * Low: redis: Fix error in log output
  * Low: tomcat: Fix incorrect shell usage
  * Low: rabbitmq-cluster: Fix incorrect shell usage
  * Low: Filesystem: Fix incorrect shell usage
  * Low: nginx: Fix incorrect shell usage
  * Low: ServeRAID: Fix incorrect shell usage
  * Low: postfix: data_dir loop could only ever run once
  * Low: SysInfo: Convert test series to legal syntax
  * tomcat: fix systemd tomcat start script check
  * galera: make last commit parsing compatible with mariadb 10.1.18+
  * galera: prevent promote right after demote
  * ifcheck must not suppress stdout of "ip" command so that it can be printed out in case of an error (e.g., usage in findif_check_params).
  * Medium: IPaddr2: add option to enable sending refresh arp packets in monitor
  * Low: IPaddr2: Log refresh arp packets at debug level instead of info
  * pgsql: fix problem with creating replication slot names, when node count greather then 2
  * Low: Update outdated mailing list/wiki references
  * Enable dump/restore users from RabbitMQ ver. 3.6.x
  * Don't run scriptlets if Mnesia isn't available
  * Don't call erlang:halt/0 inside of the working node
  * Remove file only if successfully imported users
  * Dump users only if non-empty
  * Improve dump/restore ofusers' permissions
  * Restore users' permissions only if Mnesia is running
  * RabbitMQ: Reset Mnesia before joining existing cluster
  * portblock: Use -w (wait) to avoid "insufficient privileges" error
  * portblock: version check for -w
  * Double-quote value of synchronous_standby_names in rep_mode.conf
  * specfile: make requirements general and update comments
  * Filesystem: check if there are any mounts mounted under the mountpoint
  * IPaddr2: return success on stop with invalid IP
  * Fix typo in IPaddr2
  * Fix grammar and spelling in some resource agents
  * galera: allow names in wsrep_cluster_address to differ from pacemaker nodes' names
  * IPaddr2 detect duplicate IP
  * redis: use "CLIENT KILL type normal" to notify clients of master being demoted
  * specfile: Add metadata.rng to the file to be collected
  * Adds support for fstype=zfs on Filesystem resource agent
  * LVM: fix partial activation
  * galera: revert "long SST monitoring" PR #684 and #762
  * Medium: exportfs: Only strip brackets from edges of clientspec (bsc#1022223)
- Rebase patches:
  * Add 0001-LVM-Default-partial_activation-to-true-in-SLE-HAE.patch
  * Add 0002-nfsserver-fix-path-to-sm-notify.patch
  * Add 0003-ldirectord-don-t-create-subsys-lock.patch
  * Add 0004-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  * Add 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * Remove lvm-vg-partial-active.diff
  * Remove resource-agents-nfsserver-sle11.patch
  * Remove no-var-lock-subsys.patch
  * Remove 0006-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  * Remove 0001-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1495022400">- Update to version 4.0.1+git.1495055229.643177f1:
  * High: SAPInstance: Add IS_ERS parameter (bsc#1036486)
  * High: DB2: fix HADR support for DB2 V98+ (bsc#1035470)
  * Medium: iSCSILogicalUnit/iSCSITarget: protect targetcli invocations with locks
  * Medium: iSCSILogicalUnit: lio-t IPv6-support
  * Medium: LVM: add check_writethrough parameter
  * Medium: galera: fix permission of temporary log file for mariadb 10.1.21+
  * Medium: galera: fix the first bootstrap when cluster has no data
  * Medium: docker: fix to deal with the image name correctly.
  * Medium: named: Add support for rndc options in named resource agent.
  * Medium: NodeUtilization: Add NodeUtilization agent
  * Medium: rabbitmq-cluster: Allow the rabbitmq cluster to work on pacemaker remote nodes
  * Medium: galera: fix master target during promotion with cluster_host_map
  * Medium: IPaddr2: add option for specifying IPv6's preferred_lft
  * Medium: docker: Allow callers to specify a set of directories that should be created if the don't exist
  * Low: pgsql: fix regex in set async mode
  * Low: added kamctl parameter as it was missing, causing issues if kamctl is not in PATH
  * Low: clvm: remove reload action from metadata
  * Low: iSCSILogicalUnit: replace openssl call with md5sum
  * Low: nginx: fix return code for configfile err
  * Add 0006-Revert-ocf_log-use-same-log-format-as-pacemaker.patch</changelog>
  <changelog author="zlliu@suse.com" date="1500033600">- Medium: Raid1: Handle case when mddev is a symlink(bsc#1047991)
  0007-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1500206400">- High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Add 0009-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
- Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * Add 0008-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1502107200">- High: CTDB: Don't fail on empty directory (bsc#1052577)
  * Add 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.1+git.1503904762.b4582bdb:
  * Low: mysql: Fixed bug where crm_admin is never called, leaving master scores to -1 in certain conditions.
  * Low: exportfs: check fsid parameter for not containing a comma
  * Low: mysql: don't run ocf_is_ms check in a subshell
  * Low: redis: add check for redis-check-rdb
  * Low: redis: wait for pid file to appear after start
  * High: pgsql: Allow dynamic membership
  * Medium: CTDB: fix issue with --logfile being replace with --logging
  * Medium: oraasm: new resource agent for Oracle ASM Disk Groups
  * Medium: rabbitmq-cluster: Backup and restore policies
  * Low: Raid1: Clean up spelling and whitespace
  * Medium: LVM: use vgscan --cache to update metadata during start/relocate
  * Medium: LVM: warn when cache mode is not writethrough
  * Medium: iSCSILogicalUnit: add emulate parameters
  * Medium: mysql: Properly Detect read_only State
  * Medium: anything: Allow multiple instances of binfiles to be run (pidfile will be unique)
  * Medium: anything: Start should return OCF_RUNNING if monitor succeeds
  * Medium: anything: Attempt to fix missing PID directory before starting
  * Medium: kamailio fixes and enhancements for v5.0
  * Low: portblock: dont log dd "0+0 records in/out"
  * Medium: Raid1: Handle case when mddev is a symlink
  * Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * Medium: VirtualDomain: new attributes migrateuri, remoteuri, migration_user
  * Low: sapdb: Add hdbnameserver to monitor services
  * High: CTDB: Don't fail on empty directory (bsc#1052577)
  * High: minio: Resource agent for the minio storage server
  * High: ZFS: Add ZFS Resource Agent
  * High: awseip/awsvip: fixes and improvements
  * Medium: VirtualDomain: new configuration option shutdown_mode
  * Medium: Route: Resource key for the address family (ip4, ip6 or detect)
  * Low: aws-vpc-route53: Fix missing ocf_log in log message
- Remove patches merged upstream:
  * Remove 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * Remove 0008-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
  * Remove 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch
  * Remove 0009-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * Remove 0007-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504180800">- Update to version 4.0.1+git.1504170332.70fbcd8a:
  * Medium: ocf-shellfuncs: improve locking (ocf_take_lock)
  * Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
  * High: lvmlockd: add resource agent for lvmlockd daemon (fate#323822)
  * High: rkt: Add agent for managing rkt containers
  * Medium: varnish: Compatibility for version 4.0</changelog>
  <changelog author="kgronlund@suse.com" date="1504180801">- Update to version 4.0.1+git.1504207605.22ac330c: (bsc#1053207)
  * galera: Honor "safe_to_bootstrap" flag in grastate.dat (bsc#1055017)
  * galera: Fix instance name in master_exists() (bsc#1056635)</changelog>
  <changelog author="kgronlund@suse.com" date="1504526400">- Update to version 4.0.1+git.1504527822.722ffb5b:
  * High: ovsmonitor: Add OpenvSwitch monitor agent (fate#323276)</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.1+git.1508859013.2b3cb4a6:
  * Medium: aws-vpc-route53: Fix tempfile race (bsc#1059312)
  * High: pgsql: Support PG10: Following the change of the PostgreSQL function name.
  * High: pgsql: Support PG10: Following the change of the default action of "pg_ctl start" and "pg_ctl promote".</changelog>
  <changelog author="kgronlund@suse.com" date="1509710400">- Update to version 4.0.1+git.1509705432.020b5b34:
  * LVM-activate: add new RA for LVM activation (fate#323822)
  * nfsserver: allow stop to timeout
  * adding docker-native healthcheck query to docker</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version v4.1.0rc1~git8.2900c751:
  * Drop libnet dependency (bsc#1069596)
  * db2: fix HADR promote when master failed
  * Add resource agent for IPSEC tunnels
  * Mid: apache: Move the stop judgment last.
  * Mid: apache: Eliminate wasteful TERM transmission, correct the waiting time correctly.
  * galera: recover from empty gvwstate.dat
  * Revert "LVM: use vgscan --cache to update metadata during start/relocate"
  * Medium: IPaddr2: do not send Gratuitous ARPs in the Cluster IP configuration
  * Medium: IPaddr2: add send_arp_opts parameter
  * Medium: IPaddr2: allow to choose arping instead of send_arp binary
  * Low: send_arp.linux: print proper usage
  * Low: IPaddr2: document arp_interval as deprecated
  * Low: IPaddr2: remove metadata of an unused parameter arp_mac
  * Low: IPaddr2: always remove orphan pidfile
  * Low: IPaddr2: use ocf_log for an output from send_arp</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.1.0+git54.b264e401:
  * mpathpersist: New agent (fate#324044)
  * jira: New resource agent
  * azure-lb: New resource agent
  * lxc-info/machine-info: New agents for monitoring containers/machines
  * Low: redis: Check read bit on redis config
  * Low: IPsrcaddr: Only check for ifconfig on BSD/solaris
  * Medium: CTDB: Cope with deprecated "idmap backend" smb.conf option
  * Medium: oracle: Fix alter user syntax for set_mon_user_profile
  * Medium: db2: improve monitor and simplify STANDBY/.../DISCONNECTED
  * Medium: CTDB: fix initial probe
  * Medium: ethmonitor: add intel omnipath support
  * Medium: LVM-activate: avoid unnecessary validation in stop action
  * Medium: IPsrcaddr: match exact route to avoid failing</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.1.0+git59.a0452207:
  * lvmlockd: auto change lvm config to use lvmlockd (fate#323822)
  * LVM-activate: put all validations into lvm_validate (fate#323822)
  * mariadb: GTID/semi-sync based MariaDB Master/Slave resource-agent</changelog>
  <changelog author="kgronlund@suse.com" date="1516190400">- Use python3 (bsc#1076413)</changelog>
  <changelog author="kgronlund@suse.com" date="1516190401">- Drop python requirement (bsc#1076413)
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.1.0+git83.6c77ce7e:
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * redis: add support for tunneling replication traffic
  * Low: ovsmonitor: Generate man page for ovsmonitor (fate#323276)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Pacemaker 2.0 compatibility (fate#324508):
  * Low: Xen: Use "crm_attribute --name/-n" instead of deprecated "--attr-name"
  * Low: Xen,redis: Use "crm_attribute --query/-G" instead of deprecated "--get-value"
  * Low: db2,galera,NodeUtilization: Use "crm_attribute --quiet/-q" instead of deprecated "-Q"
  * Low: sfex_daemon: Use "crm_resource --node/-N" instead of deprecated "--host-uname/-H"
  * Low: Xen,NodeUtilization: Use "crm_attribute --node/-N" instead of deprecated "--node-uname/-U"
  * Low: vmware: Do not reference the dropped cluster property "default_action_timeout"
- Remove patch merged upstream:
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518004801">- Edits to description, and compact build commands.</changelog>
  <changelog author="kgronlund@suse.com" date="1520337600">- Update to version 4.1.1+git0.5a1edf2b:
  * High: mpathpersist: Fixed problem that character string could not be correctly parsed (bsc#1083896)
  * High: VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Medium: awseip/awsvip: improvements (incl multi NIC support)
  * Medium: awseip/awsvip: increase default "api_delay" to 3s to avoid failures
  * Low: pgsql: try to create stats_temp_directory
  * Low: Filesystem: Add support for cvfs
  * Low: pgsql: improve validations for replication mode</changelog>
  <changelog author="dakechi@suse.com" date="1533729600">- Implements the reload operation on the SAPInstance RA (bsc#1096744)
- Include the enq_server and enq_replicator on the default service list
  to be monitored for the new S/4 HANA Enq. Services 2. (bsc#1092384)
- Improved SAPInstance START profile detection, avoiding the need of
  setting the START_PROFILE parameter. (bsc#1096744)
- Included the following patches:
  * 0007-SAPInstance-implemeted-reload-method.patch
  * 0008-SAPInstance-Improved-indents.patch
  * 0009-Medium-SAPInstance-Add-monitored-services-for-ENSA2-.patch
  * 0010-SAPInstance-Improved-SAP-instance-profile-detection.patch</changelog>
</package>
<package pkgid="550fdc2a579fb0fa44acc1710bbbe2fc2df85677ae2624830f0ee3abe9e2e75e" name="monitoring-plugins-metadata" arch="noarch">
  <version epoch="0" ver="4.1.1+git0.5a1edf2b" rel="lp150.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1500206400">- High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Add 0009-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
- Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * Add 0008-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1502107200">- High: CTDB: Don't fail on empty directory (bsc#1052577)
  * Add 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.1+git.1503904762.b4582bdb:
  * Low: mysql: Fixed bug where crm_admin is never called, leaving master scores to -1 in certain conditions.
  * Low: exportfs: check fsid parameter for not containing a comma
  * Low: mysql: don't run ocf_is_ms check in a subshell
  * Low: redis: add check for redis-check-rdb
  * Low: redis: wait for pid file to appear after start
  * High: pgsql: Allow dynamic membership
  * Medium: CTDB: fix issue with --logfile being replace with --logging
  * Medium: oraasm: new resource agent for Oracle ASM Disk Groups
  * Medium: rabbitmq-cluster: Backup and restore policies
  * Low: Raid1: Clean up spelling and whitespace
  * Medium: LVM: use vgscan --cache to update metadata during start/relocate
  * Medium: LVM: warn when cache mode is not writethrough
  * Medium: iSCSILogicalUnit: add emulate parameters
  * Medium: mysql: Properly Detect read_only State
  * Medium: anything: Allow multiple instances of binfiles to be run (pidfile will be unique)
  * Medium: anything: Start should return OCF_RUNNING if monitor succeeds
  * Medium: anything: Attempt to fix missing PID directory before starting
  * Medium: kamailio fixes and enhancements for v5.0
  * Low: portblock: dont log dd "0+0 records in/out"
  * Medium: Raid1: Handle case when mddev is a symlink
  * Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * Medium: VirtualDomain: new attributes migrateuri, remoteuri, migration_user
  * Low: sapdb: Add hdbnameserver to monitor services
  * High: CTDB: Don't fail on empty directory (bsc#1052577)
  * High: minio: Resource agent for the minio storage server
  * High: ZFS: Add ZFS Resource Agent
  * High: awseip/awsvip: fixes and improvements
  * Medium: VirtualDomain: new configuration option shutdown_mode
  * Medium: Route: Resource key for the address family (ip4, ip6 or detect)
  * Low: aws-vpc-route53: Fix missing ocf_log in log message
- Remove patches merged upstream:
  * Remove 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * Remove 0008-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
  * Remove 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch
  * Remove 0009-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * Remove 0007-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504180800">- Update to version 4.0.1+git.1504170332.70fbcd8a:
  * Medium: ocf-shellfuncs: improve locking (ocf_take_lock)
  * Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
  * High: lvmlockd: add resource agent for lvmlockd daemon (fate#323822)
  * High: rkt: Add agent for managing rkt containers
  * Medium: varnish: Compatibility for version 4.0</changelog>
  <changelog author="kgronlund@suse.com" date="1504180801">- Update to version 4.0.1+git.1504207605.22ac330c: (bsc#1053207)
  * galera: Honor "safe_to_bootstrap" flag in grastate.dat (bsc#1055017)
  * galera: Fix instance name in master_exists() (bsc#1056635)</changelog>
  <changelog author="kgronlund@suse.com" date="1504526400">- Update to version 4.0.1+git.1504527822.722ffb5b:
  * High: ovsmonitor: Add OpenvSwitch monitor agent (fate#323276)</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.1+git.1508859013.2b3cb4a6:
  * Medium: aws-vpc-route53: Fix tempfile race (bsc#1059312)
  * High: pgsql: Support PG10: Following the change of the PostgreSQL function name.
  * High: pgsql: Support PG10: Following the change of the default action of "pg_ctl start" and "pg_ctl promote".</changelog>
  <changelog author="kgronlund@suse.com" date="1509710400">- Update to version 4.0.1+git.1509705432.020b5b34:
  * LVM-activate: add new RA for LVM activation (fate#323822)
  * nfsserver: allow stop to timeout
  * adding docker-native healthcheck query to docker</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version v4.1.0rc1~git8.2900c751:
  * Drop libnet dependency (bsc#1069596)
  * db2: fix HADR promote when master failed
  * Add resource agent for IPSEC tunnels
  * Mid: apache: Move the stop judgment last.
  * Mid: apache: Eliminate wasteful TERM transmission, correct the waiting time correctly.
  * galera: recover from empty gvwstate.dat
  * Revert "LVM: use vgscan --cache to update metadata during start/relocate"
  * Medium: IPaddr2: do not send Gratuitous ARPs in the Cluster IP configuration
  * Medium: IPaddr2: add send_arp_opts parameter
  * Medium: IPaddr2: allow to choose arping instead of send_arp binary
  * Low: send_arp.linux: print proper usage
  * Low: IPaddr2: document arp_interval as deprecated
  * Low: IPaddr2: remove metadata of an unused parameter arp_mac
  * Low: IPaddr2: always remove orphan pidfile
  * Low: IPaddr2: use ocf_log for an output from send_arp</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.1.0+git54.b264e401:
  * mpathpersist: New agent (fate#324044)
  * jira: New resource agent
  * azure-lb: New resource agent
  * lxc-info/machine-info: New agents for monitoring containers/machines
  * Low: redis: Check read bit on redis config
  * Low: IPsrcaddr: Only check for ifconfig on BSD/solaris
  * Medium: CTDB: Cope with deprecated "idmap backend" smb.conf option
  * Medium: oracle: Fix alter user syntax for set_mon_user_profile
  * Medium: db2: improve monitor and simplify STANDBY/.../DISCONNECTED
  * Medium: CTDB: fix initial probe
  * Medium: ethmonitor: add intel omnipath support
  * Medium: LVM-activate: avoid unnecessary validation in stop action
  * Medium: IPsrcaddr: match exact route to avoid failing</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.1.0+git59.a0452207:
  * lvmlockd: auto change lvm config to use lvmlockd (fate#323822)
  * LVM-activate: put all validations into lvm_validate (fate#323822)
  * mariadb: GTID/semi-sync based MariaDB Master/Slave resource-agent</changelog>
  <changelog author="kgronlund@suse.com" date="1516190400">- Use python3 (bsc#1076413)</changelog>
  <changelog author="kgronlund@suse.com" date="1516190401">- Drop python requirement (bsc#1076413)
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.1.0+git83.6c77ce7e:
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * redis: add support for tunneling replication traffic
  * Low: ovsmonitor: Generate man page for ovsmonitor (fate#323276)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Pacemaker 2.0 compatibility (fate#324508):
  * Low: Xen: Use "crm_attribute --name/-n" instead of deprecated "--attr-name"
  * Low: Xen,redis: Use "crm_attribute --query/-G" instead of deprecated "--get-value"
  * Low: db2,galera,NodeUtilization: Use "crm_attribute --quiet/-q" instead of deprecated "-Q"
  * Low: sfex_daemon: Use "crm_resource --node/-N" instead of deprecated "--host-uname/-H"
  * Low: Xen,NodeUtilization: Use "crm_attribute --node/-N" instead of deprecated "--node-uname/-U"
  * Low: vmware: Do not reference the dropped cluster property "default_action_timeout"
- Remove patch merged upstream:
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518004801">- Edits to description, and compact build commands.</changelog>
  <changelog author="kgronlund@suse.com" date="1520337600">- Update to version 4.1.1+git0.5a1edf2b:
  * High: mpathpersist: Fixed problem that character string could not be correctly parsed (bsc#1083896)
  * High: VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Medium: awseip/awsvip: improvements (incl multi NIC support)
  * Medium: awseip/awsvip: increase default "api_delay" to 3s to avoid failures
  * Low: pgsql: try to create stats_temp_directory
  * Low: Filesystem: Add support for cvfs
  * Low: pgsql: improve validations for replication mode</changelog>
  <changelog author="dakechi@suse.com" date="1533729600">- Implements the reload operation on the SAPInstance RA (bsc#1096744)
- Include the enq_server and enq_replicator on the default service list
  to be monitored for the new S/4 HANA Enq. Services 2. (bsc#1092384)
- Improved SAPInstance START profile detection, avoiding the need of
  setting the START_PROFILE parameter. (bsc#1096744)
- Included the following patches:
  * 0007-SAPInstance-implemeted-reload-method.patch
  * 0008-SAPInstance-Improved-indents.patch
  * 0009-Medium-SAPInstance-Add-monitored-services-for-ENSA2-.patch
  * 0010-SAPInstance-Improved-SAP-instance-profile-detection.patch</changelog>
  <changelog author="abriel@suse.com" date="1536235200">- CTDB: fix incorrect db corruption reports (bsc#1101668)
- CTDB: fix OCF_RESKEY_ctdb_recovery_lock validation (bsc#1097656)
- LVM: fix missing dash (bsc#1104900)
- Included the following patches:
  * 0011-CTDB-fix-incorrect-db-corruption-reports-bsc-1101668.patch
  * 0012-CTDB-fix-OCF_RESKEY_ctdb_recovery_lock-validation-bs.patch
  * 0013-LVM-fix-missing-dash.patch</changelog>
  <changelog author="dakechi@suse.com" date="1536321600">- pgsql: Avoid the change of /dev/null to postgres owner/group (bsc#1090882)
- Included the patch:
  * 0014-pgsql-Avoid-the-change-of-dev-null-to-postgres-owner.patch</changelog>
  <changelog author="abriel@suse.com" date="1539259200">- CTDB: fix --logging/--logfile version string comparison (bsc#1102935)
- Included the patch:
  * 0015-CTDB-fix-logging-logfile-version-string-comparison.patch</changelog>
</package>
<package pkgid="9b2fea219af1e6331faddb94a9ffb11b7657cf74946a308cc3aa889ea5a49c4d" name="mozilla-nss" arch="src">
  <version epoch="0" ver="3.36.4" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1471867200">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
  <changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
  <changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
  <changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
</package>
<package pkgid="2d2b19b1c46a58728f4b5b9138c6c563352a82361d2855e69be3090362a0f3ed" name="mozilla-nss" arch="x86_64">
  <version epoch="0" ver="3.36.4" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1471867200">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
  <changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
  <changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
  <changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
</package>
<package pkgid="d29b352913eff4db8f7a55c55cf2e0d639718311c0f5424908e36364db1a57b1" name="mozilla-nss-32bit" arch="x86_64">
  <version epoch="0" ver="3.36.4" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1471867200">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
  <changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
  <changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
  <changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
</package>
<package pkgid="4eb193341ef60b284f01751113861d011b8c8de33a072084d7c8a83ca202e408" name="mozilla-nss-certs" arch="x86_64">
  <version epoch="0" ver="3.36.4" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1471867200">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
  <changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
  <changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
  <changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
</package>
<package pkgid="fd99cdceba61ce9f401698606d3918f5621aa31e451ea88330fd93f40413ff26" name="mozilla-nss-certs-32bit" arch="x86_64">
  <version epoch="0" ver="3.36.4" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1471867200">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
  <changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
  <changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
  <changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
</package>
<package pkgid="f97007ab985c790ddd8975ab965ea6fe671c70b03b454a44332777c2116a63a2" name="mozilla-nss-devel" arch="x86_64">
  <version epoch="0" ver="3.36.4" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1471867200">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
  <changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
  <changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
  <changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
</package>
<package pkgid="33adeae469fb88b36caca98c43d4cb831ab8538f463a1165201b8f3ca4e8d489" name="mozilla-nss-sysinit" arch="x86_64">
  <version epoch="0" ver="3.36.4" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1471867200">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
  <changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
  <changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
  <changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
</package>
<package pkgid="da1edb054b0ce639c1cbe00d611205782e0e04107b4c5c9633cc0c3024282447" name="mozilla-nss-sysinit-32bit" arch="x86_64">
  <version epoch="0" ver="3.36.4" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1471867200">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
  <changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
  <changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
  <changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
</package>
<package pkgid="7b9503fb7404de48759e5946ac1ae1dad84ff47e0398b9b179409b07a7435dce" name="mozilla-nss-tools" arch="x86_64">
  <version epoch="0" ver="3.36.4" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1471867200">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
  <changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
  <changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
  <changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
</package>
<package pkgid="eac95fe80dd0af367031d4821539a842791e881765c5033d31ec5c76aacd4721" name="mozjs52" arch="src">
  <version epoch="0" ver="52.6.0" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1502798400">- initial mozjs52 package
  (roughly based on previous mozjs* packages)</changelog>
  <changelog author="wr@rosenauer.org" date="1503921600">- update to 52.3.0
- added bmo1176787.patch to disable MOZ_GLUE_IN_PROGRAM
- added bmo1379539.patch to remove NSPR dependency while
  - -enable-posix-nspr-emulation is used</changelog>
  <changelog author="wr@rosenauer.org" date="1504008000">- try to use ION everywhere
- removed obsolete NSPR build dependency</changelog>
  <changelog author="cgrobertson@suse.com" date="1507291200">- Added additional compiler flags on the condition
  of building for ppc64le using gcc7 or newer.
  (see bmo#1399248)</changelog>
  <changelog author="jones_ld@protonmail.com" date="1511006400">- Enable Internationalization required by GJS
- Disable running tests due to broken toLocaleDateString_timeZone test</changelog>
  <changelog author="cgrobertson@suse.com" date="1512129600">- Added support for ICU and data file.
- Added mozilla-s390-bigendian.patch to enable bigendian support
  for s390 machines.
- Added xulrunner-24.0-s390-inlines.patch for s390 builds.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517227200">- Update to 52.6.0
- Drop fix-64bit-archs.patch and bmo1379539.patch, fixed upstream
- Update Source url.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519905600">- Actually remove bundled zlib and use system zlib. Avoids potential
  problems when trying to use system zlib while mozjs52-devel is
  installed (two zlib.h instances with conflicting definitions).
  Likewise fix for boo#1082720.
- Drop unused zip BuildRequires.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1526990400">- Fix armv6 build by fixing armv6 detection:
  * fix_armv6_build.patch</changelog>
  <changelog author="schwab@suse.de" date="1527681600">- No JIT on ppc, don't run jit test</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1527681601">- for ppc64 (BE) use same patches as s390x
  (mozilla-s390-bigendian.patch xulrunner-24.0-s390-inlines.patch)
- This change is sufficient to solve boo#1093033</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1529323200">- update _constraints file for ppc64/ppc64le to avoid
  "Out of memory" build failure on some PowerPC workers.</changelog>
  <changelog author="msuchanek@suse.com" date="1532433600">- Remove trailing backslash (https://build.suse.de/request/show/168818)</changelog>
</package>
<package pkgid="7c027c359766ad424b8f8f853a2f1f93178759f3c11e01f2dbb4ee054a00a4fb" name="mozjs52" arch="x86_64">
  <version epoch="0" ver="52.6.0" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1502798400">- initial mozjs52 package
  (roughly based on previous mozjs* packages)</changelog>
  <changelog author="wr@rosenauer.org" date="1503921600">- update to 52.3.0
- added bmo1176787.patch to disable MOZ_GLUE_IN_PROGRAM
- added bmo1379539.patch to remove NSPR dependency while
  - -enable-posix-nspr-emulation is used</changelog>
  <changelog author="wr@rosenauer.org" date="1504008000">- try to use ION everywhere
- removed obsolete NSPR build dependency</changelog>
  <changelog author="cgrobertson@suse.com" date="1507291200">- Added additional compiler flags on the condition
  of building for ppc64le using gcc7 or newer.
  (see bmo#1399248)</changelog>
  <changelog author="jones_ld@protonmail.com" date="1511006400">- Enable Internationalization required by GJS
- Disable running tests due to broken toLocaleDateString_timeZone test</changelog>
  <changelog author="cgrobertson@suse.com" date="1512129600">- Added support for ICU and data file.
- Added mozilla-s390-bigendian.patch to enable bigendian support
  for s390 machines.
- Added xulrunner-24.0-s390-inlines.patch for s390 builds.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517227200">- Update to 52.6.0
- Drop fix-64bit-archs.patch and bmo1379539.patch, fixed upstream
- Update Source url.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519905600">- Actually remove bundled zlib and use system zlib. Avoids potential
  problems when trying to use system zlib while mozjs52-devel is
  installed (two zlib.h instances with conflicting definitions).
  Likewise fix for boo#1082720.
- Drop unused zip BuildRequires.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1526990400">- Fix armv6 build by fixing armv6 detection:
  * fix_armv6_build.patch</changelog>
  <changelog author="schwab@suse.de" date="1527681600">- No JIT on ppc, don't run jit test</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1527681601">- for ppc64 (BE) use same patches as s390x
  (mozilla-s390-bigendian.patch xulrunner-24.0-s390-inlines.patch)
- This change is sufficient to solve boo#1093033</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1529323200">- update _constraints file for ppc64/ppc64le to avoid
  "Out of memory" build failure on some PowerPC workers.</changelog>
  <changelog author="msuchanek@suse.com" date="1532433600">- Remove trailing backslash (https://build.suse.de/request/show/168818)</changelog>
</package>
<package pkgid="524917140f4545306dfa523cb3650953405b9e307255710b342c87149baee7a6" name="mozjs52-devel" arch="x86_64">
  <version epoch="0" ver="52.6.0" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1502798400">- initial mozjs52 package
  (roughly based on previous mozjs* packages)</changelog>
  <changelog author="wr@rosenauer.org" date="1503921600">- update to 52.3.0
- added bmo1176787.patch to disable MOZ_GLUE_IN_PROGRAM
- added bmo1379539.patch to remove NSPR dependency while
  - -enable-posix-nspr-emulation is used</changelog>
  <changelog author="wr@rosenauer.org" date="1504008000">- try to use ION everywhere
- removed obsolete NSPR build dependency</changelog>
  <changelog author="cgrobertson@suse.com" date="1507291200">- Added additional compiler flags on the condition
  of building for ppc64le using gcc7 or newer.
  (see bmo#1399248)</changelog>
  <changelog author="jones_ld@protonmail.com" date="1511006400">- Enable Internationalization required by GJS
- Disable running tests due to broken toLocaleDateString_timeZone test</changelog>
  <changelog author="cgrobertson@suse.com" date="1512129600">- Added support for ICU and data file.
- Added mozilla-s390-bigendian.patch to enable bigendian support
  for s390 machines.
- Added xulrunner-24.0-s390-inlines.patch for s390 builds.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517227200">- Update to 52.6.0
- Drop fix-64bit-archs.patch and bmo1379539.patch, fixed upstream
- Update Source url.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519905600">- Actually remove bundled zlib and use system zlib. Avoids potential
  problems when trying to use system zlib while mozjs52-devel is
  installed (two zlib.h instances with conflicting definitions).
  Likewise fix for boo#1082720.
- Drop unused zip BuildRequires.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1526990400">- Fix armv6 build by fixing armv6 detection:
  * fix_armv6_build.patch</changelog>
  <changelog author="schwab@suse.de" date="1527681600">- No JIT on ppc, don't run jit test</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1527681601">- for ppc64 (BE) use same patches as s390x
  (mozilla-s390-bigendian.patch xulrunner-24.0-s390-inlines.patch)
- This change is sufficient to solve boo#1093033</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1529323200">- update _constraints file for ppc64/ppc64le to avoid
  "Out of memory" build failure on some PowerPC workers.</changelog>
  <changelog author="msuchanek@suse.com" date="1532433600">- Remove trailing backslash (https://build.suse.de/request/show/168818)</changelog>
</package>
<package pkgid="f9e8b148025a8f2e2debd49bf00957a4bf4b06c3ef197de52930fe435fde7ce0" name="mpich" arch="src">
  <version epoch="0" ver="3.2.1" rel="lp150.5.3.1"/>
  <changelog author="ro@suse.de" date="1290600000">- compress manpages ourselves
  (Check is gone and brp-compress does not look under /opt)</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1330948800">- license update: SUSE-Permissive
  Use a license from http://is.gd/CIdCM7 - if there is no corresponding
  entry on spdx.org/licenses use the proprietary SUSE- prefix until the
  license is accepted upstream</changelog>
  <changelog author="mvyskocil@suse.com" date="1380888000">- Update to 3.0.4
  * too many changes to list, see CHANGES file
- Dropped pointless patches:
  * alog-bufferoverflow.patch
  * gcc4.dif
  * gfortran.patch
  * mpeinstall.patch
  * mpich-1.2.6.dif
  * mpich-1.2.6_implicit_declarations.diff
  * mpich-1.2.6-limits.patch
  * mpich-1.2.7_bsendutil2.c_uninitialized_variables.patch
  * mpich-1.2.7p1-iostream.dif
  * mpich-fix_headers.diff
  * mpich-hostent.patch
  * mpich-mpiman.patch
- Add mpich-modules.patch (from Fedora)
- Add package autoload installs mpich's profiles
- Moved documentation to doc subpackage
- Call make check during build</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1420718400">- Update to 3.1.3
  * see CHANGES file for all details, some pertinent changes are:
  - [3.1.2] MPI-3 support for Blue Gene/Q and ppc64le support.
  - [3.1.2] Fixes and testcases for Fortran 2008 bindings.
  - [3.1.1] Removal of the mpd process manager.
  - [3.1] MPICH now supports operations on very large datatypes (those that
    describe more than 32 bits of data).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499083200">- Fix compilation for aarch64
- Build multiple flavour of mpich (psm, psm2, tessuite)
- Update to mpich 3.2
  * see CHANGES file for all details, some pertinent changes are:
  - Added support for MPI-3.1 features including nonblocking collective I/O,
    address manipulation routines, thread-safety for MPI initialization,
    pre-init functionality, and new MPI_T routines to look up variables
    by name.
  - Fortran 2008 bindings are enabled by default and fully supported.
  - Completely revamped RMA infrastructure including several
    scalability improvements, performance improvements, and bug fixes.
  - Added experimental support for Open Fabrics Interfaces (OFI) version 1.0.0.
    https://github.com/ofiwg/libfabric (thanks to Intel for code contribution)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499256000">- Register mpich package to mpi-selector
- Remove redondant configure options already passed by %configure</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947200">- Disable rpath in pkgconfig files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947201">- Add LD_LIBRARY_PATH to mpivars.sh and mpivars.csh</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Drop unnecessary dependency to xorg-x11-devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1509019200">- Add HPC specific build targets using environment modules (Fate#323977).</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Fix mpich HPC installation path in spec file.
- Fix hpc macros: add %mpich_requires.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Update to mpich 3.2.1
  - Bug fixes
  - No release notes available</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="eich@suse.com" date="1524398400">- Remove 'BuildRequires: Modules' for HPC builds: it conflicts
  with lmod (boo#1089970).</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-mpich:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in postun scriptlet</changelog>
</package>
<package pkgid="6aa3c2999c139bd1a8ab8f58e4fcb41f7ac52054101c44bc3a8f4563e0878434" name="mpich" arch="x86_64">
  <version epoch="0" ver="3.2.1" rel="lp150.5.3.1"/>
  <changelog author="ro@suse.de" date="1290600000">- compress manpages ourselves
  (Check is gone and brp-compress does not look under /opt)</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1330948800">- license update: SUSE-Permissive
  Use a license from http://is.gd/CIdCM7 - if there is no corresponding
  entry on spdx.org/licenses use the proprietary SUSE- prefix until the
  license is accepted upstream</changelog>
  <changelog author="mvyskocil@suse.com" date="1380888000">- Update to 3.0.4
  * too many changes to list, see CHANGES file
- Dropped pointless patches:
  * alog-bufferoverflow.patch
  * gcc4.dif
  * gfortran.patch
  * mpeinstall.patch
  * mpich-1.2.6.dif
  * mpich-1.2.6_implicit_declarations.diff
  * mpich-1.2.6-limits.patch
  * mpich-1.2.7_bsendutil2.c_uninitialized_variables.patch
  * mpich-1.2.7p1-iostream.dif
  * mpich-fix_headers.diff
  * mpich-hostent.patch
  * mpich-mpiman.patch
- Add mpich-modules.patch (from Fedora)
- Add package autoload installs mpich's profiles
- Moved documentation to doc subpackage
- Call make check during build</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1420718400">- Update to 3.1.3
  * see CHANGES file for all details, some pertinent changes are:
  - [3.1.2] MPI-3 support for Blue Gene/Q and ppc64le support.
  - [3.1.2] Fixes and testcases for Fortran 2008 bindings.
  - [3.1.1] Removal of the mpd process manager.
  - [3.1] MPICH now supports operations on very large datatypes (those that
    describe more than 32 bits of data).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499083200">- Fix compilation for aarch64
- Build multiple flavour of mpich (psm, psm2, tessuite)
- Update to mpich 3.2
  * see CHANGES file for all details, some pertinent changes are:
  - Added support for MPI-3.1 features including nonblocking collective I/O,
    address manipulation routines, thread-safety for MPI initialization,
    pre-init functionality, and new MPI_T routines to look up variables
    by name.
  - Fortran 2008 bindings are enabled by default and fully supported.
  - Completely revamped RMA infrastructure including several
    scalability improvements, performance improvements, and bug fixes.
  - Added experimental support for Open Fabrics Interfaces (OFI) version 1.0.0.
    https://github.com/ofiwg/libfabric (thanks to Intel for code contribution)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499256000">- Register mpich package to mpi-selector
- Remove redondant configure options already passed by %configure</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947200">- Disable rpath in pkgconfig files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947201">- Add LD_LIBRARY_PATH to mpivars.sh and mpivars.csh</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Drop unnecessary dependency to xorg-x11-devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1509019200">- Add HPC specific build targets using environment modules (Fate#323977).</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Fix mpich HPC installation path in spec file.
- Fix hpc macros: add %mpich_requires.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Update to mpich 3.2.1
  - Bug fixes
  - No release notes available</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="eich@suse.com" date="1524398400">- Remove 'BuildRequires: Modules' for HPC builds: it conflicts
  with lmod (boo#1089970).</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-mpich:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in postun scriptlet</changelog>
</package>
<package pkgid="897adf1c422517b09e92fa01bce8eeae83687fc41ff9f943d4ee155b50187c37" name="mpich-devel" arch="x86_64">
  <version epoch="0" ver="3.2.1" rel="lp150.5.3.1"/>
  <changelog author="ro@suse.de" date="1290600000">- compress manpages ourselves
  (Check is gone and brp-compress does not look under /opt)</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1330948800">- license update: SUSE-Permissive
  Use a license from http://is.gd/CIdCM7 - if there is no corresponding
  entry on spdx.org/licenses use the proprietary SUSE- prefix until the
  license is accepted upstream</changelog>
  <changelog author="mvyskocil@suse.com" date="1380888000">- Update to 3.0.4
  * too many changes to list, see CHANGES file
- Dropped pointless patches:
  * alog-bufferoverflow.patch
  * gcc4.dif
  * gfortran.patch
  * mpeinstall.patch
  * mpich-1.2.6.dif
  * mpich-1.2.6_implicit_declarations.diff
  * mpich-1.2.6-limits.patch
  * mpich-1.2.7_bsendutil2.c_uninitialized_variables.patch
  * mpich-1.2.7p1-iostream.dif
  * mpich-fix_headers.diff
  * mpich-hostent.patch
  * mpich-mpiman.patch
- Add mpich-modules.patch (from Fedora)
- Add package autoload installs mpich's profiles
- Moved documentation to doc subpackage
- Call make check during build</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1420718400">- Update to 3.1.3
  * see CHANGES file for all details, some pertinent changes are:
  - [3.1.2] MPI-3 support for Blue Gene/Q and ppc64le support.
  - [3.1.2] Fixes and testcases for Fortran 2008 bindings.
  - [3.1.1] Removal of the mpd process manager.
  - [3.1] MPICH now supports operations on very large datatypes (those that
    describe more than 32 bits of data).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499083200">- Fix compilation for aarch64
- Build multiple flavour of mpich (psm, psm2, tessuite)
- Update to mpich 3.2
  * see CHANGES file for all details, some pertinent changes are:
  - Added support for MPI-3.1 features including nonblocking collective I/O,
    address manipulation routines, thread-safety for MPI initialization,
    pre-init functionality, and new MPI_T routines to look up variables
    by name.
  - Fortran 2008 bindings are enabled by default and fully supported.
  - Completely revamped RMA infrastructure including several
    scalability improvements, performance improvements, and bug fixes.
  - Added experimental support for Open Fabrics Interfaces (OFI) version 1.0.0.
    https://github.com/ofiwg/libfabric (thanks to Intel for code contribution)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499256000">- Register mpich package to mpi-selector
- Remove redondant configure options already passed by %configure</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947200">- Disable rpath in pkgconfig files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947201">- Add LD_LIBRARY_PATH to mpivars.sh and mpivars.csh</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Drop unnecessary dependency to xorg-x11-devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1509019200">- Add HPC specific build targets using environment modules (Fate#323977).</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Fix mpich HPC installation path in spec file.
- Fix hpc macros: add %mpich_requires.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Update to mpich 3.2.1
  - Bug fixes
  - No release notes available</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="eich@suse.com" date="1524398400">- Remove 'BuildRequires: Modules' for HPC builds: it conflicts
  with lmod (boo#1089970).</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-mpich:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in postun scriptlet</changelog>
</package>
<package pkgid="91478510dbe119882e5126bdc6a9d7c236393f05abbadd07672911c6f6c1cf1a" name="mpich-gnu-hpc" arch="x86_64">
  <version epoch="0" ver="3.2.1" rel="lp150.5.3.1"/>
  <changelog author="ro@suse.de" date="1290600000">- compress manpages ourselves
  (Check is gone and brp-compress does not look under /opt)</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1330948800">- license update: SUSE-Permissive
  Use a license from http://is.gd/CIdCM7 - if there is no corresponding
  entry on spdx.org/licenses use the proprietary SUSE- prefix until the
  license is accepted upstream</changelog>
  <changelog author="mvyskocil@suse.com" date="1380888000">- Update to 3.0.4
  * too many changes to list, see CHANGES file
- Dropped pointless patches:
  * alog-bufferoverflow.patch
  * gcc4.dif
  * gfortran.patch
  * mpeinstall.patch
  * mpich-1.2.6.dif
  * mpich-1.2.6_implicit_declarations.diff
  * mpich-1.2.6-limits.patch
  * mpich-1.2.7_bsendutil2.c_uninitialized_variables.patch
  * mpich-1.2.7p1-iostream.dif
  * mpich-fix_headers.diff
  * mpich-hostent.patch
  * mpich-mpiman.patch
- Add mpich-modules.patch (from Fedora)
- Add package autoload installs mpich's profiles
- Moved documentation to doc subpackage
- Call make check during build</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1420718400">- Update to 3.1.3
  * see CHANGES file for all details, some pertinent changes are:
  - [3.1.2] MPI-3 support for Blue Gene/Q and ppc64le support.
  - [3.1.2] Fixes and testcases for Fortran 2008 bindings.
  - [3.1.1] Removal of the mpd process manager.
  - [3.1] MPICH now supports operations on very large datatypes (those that
    describe more than 32 bits of data).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499083200">- Fix compilation for aarch64
- Build multiple flavour of mpich (psm, psm2, tessuite)
- Update to mpich 3.2
  * see CHANGES file for all details, some pertinent changes are:
  - Added support for MPI-3.1 features including nonblocking collective I/O,
    address manipulation routines, thread-safety for MPI initialization,
    pre-init functionality, and new MPI_T routines to look up variables
    by name.
  - Fortran 2008 bindings are enabled by default and fully supported.
  - Completely revamped RMA infrastructure including several
    scalability improvements, performance improvements, and bug fixes.
  - Added experimental support for Open Fabrics Interfaces (OFI) version 1.0.0.
    https://github.com/ofiwg/libfabric (thanks to Intel for code contribution)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499256000">- Register mpich package to mpi-selector
- Remove redondant configure options already passed by %configure</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947200">- Disable rpath in pkgconfig files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947201">- Add LD_LIBRARY_PATH to mpivars.sh and mpivars.csh</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Drop unnecessary dependency to xorg-x11-devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1509019200">- Add HPC specific build targets using environment modules (Fate#323977).</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Fix mpich HPC installation path in spec file.
- Fix hpc macros: add %mpich_requires.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Update to mpich 3.2.1
  - Bug fixes
  - No release notes available</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="eich@suse.com" date="1524398400">- Remove 'BuildRequires: Modules' for HPC builds: it conflicts
  with lmod (boo#1089970).</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-mpich:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in postun scriptlet</changelog>
</package>
<package pkgid="cdd09e55a4a86e44a4628b7ce2d70bab400b202ac988bbfb19857637362769a8" name="mpich-gnu-hpc-devel" arch="x86_64">
  <version epoch="0" ver="3.2.1" rel="lp150.5.3.1"/>
  <changelog author="ro@suse.de" date="1290600000">- compress manpages ourselves
  (Check is gone and brp-compress does not look under /opt)</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1330948800">- license update: SUSE-Permissive
  Use a license from http://is.gd/CIdCM7 - if there is no corresponding
  entry on spdx.org/licenses use the proprietary SUSE- prefix until the
  license is accepted upstream</changelog>
  <changelog author="mvyskocil@suse.com" date="1380888000">- Update to 3.0.4
  * too many changes to list, see CHANGES file
- Dropped pointless patches:
  * alog-bufferoverflow.patch
  * gcc4.dif
  * gfortran.patch
  * mpeinstall.patch
  * mpich-1.2.6.dif
  * mpich-1.2.6_implicit_declarations.diff
  * mpich-1.2.6-limits.patch
  * mpich-1.2.7_bsendutil2.c_uninitialized_variables.patch
  * mpich-1.2.7p1-iostream.dif
  * mpich-fix_headers.diff
  * mpich-hostent.patch
  * mpich-mpiman.patch
- Add mpich-modules.patch (from Fedora)
- Add package autoload installs mpich's profiles
- Moved documentation to doc subpackage
- Call make check during build</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1420718400">- Update to 3.1.3
  * see CHANGES file for all details, some pertinent changes are:
  - [3.1.2] MPI-3 support for Blue Gene/Q and ppc64le support.
  - [3.1.2] Fixes and testcases for Fortran 2008 bindings.
  - [3.1.1] Removal of the mpd process manager.
  - [3.1] MPICH now supports operations on very large datatypes (those that
    describe more than 32 bits of data).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499083200">- Fix compilation for aarch64
- Build multiple flavour of mpich (psm, psm2, tessuite)
- Update to mpich 3.2
  * see CHANGES file for all details, some pertinent changes are:
  - Added support for MPI-3.1 features including nonblocking collective I/O,
    address manipulation routines, thread-safety for MPI initialization,
    pre-init functionality, and new MPI_T routines to look up variables
    by name.
  - Fortran 2008 bindings are enabled by default and fully supported.
  - Completely revamped RMA infrastructure including several
    scalability improvements, performance improvements, and bug fixes.
  - Added experimental support for Open Fabrics Interfaces (OFI) version 1.0.0.
    https://github.com/ofiwg/libfabric (thanks to Intel for code contribution)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499256000">- Register mpich package to mpi-selector
- Remove redondant configure options already passed by %configure</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947200">- Disable rpath in pkgconfig files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947201">- Add LD_LIBRARY_PATH to mpivars.sh and mpivars.csh</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Drop unnecessary dependency to xorg-x11-devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1509019200">- Add HPC specific build targets using environment modules (Fate#323977).</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Fix mpich HPC installation path in spec file.
- Fix hpc macros: add %mpich_requires.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Update to mpich 3.2.1
  - Bug fixes
  - No release notes available</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="eich@suse.com" date="1524398400">- Remove 'BuildRequires: Modules' for HPC builds: it conflicts
  with lmod (boo#1089970).</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-mpich:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in postun scriptlet</changelog>
</package>
<package pkgid="5e14687dd229664c71874f68c1b0c9b88966097615f7d95a5012e1e27bd2e944" name="mpich-gnu-hpc-devel-static" arch="x86_64">
  <version epoch="0" ver="3.2.1" rel="lp150.5.3.1"/>
  <changelog author="ro@suse.de" date="1290600000">- compress manpages ourselves
  (Check is gone and brp-compress does not look under /opt)</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1330948800">- license update: SUSE-Permissive
  Use a license from http://is.gd/CIdCM7 - if there is no corresponding
  entry on spdx.org/licenses use the proprietary SUSE- prefix until the
  license is accepted upstream</changelog>
  <changelog author="mvyskocil@suse.com" date="1380888000">- Update to 3.0.4
  * too many changes to list, see CHANGES file
- Dropped pointless patches:
  * alog-bufferoverflow.patch
  * gcc4.dif
  * gfortran.patch
  * mpeinstall.patch
  * mpich-1.2.6.dif
  * mpich-1.2.6_implicit_declarations.diff
  * mpich-1.2.6-limits.patch
  * mpich-1.2.7_bsendutil2.c_uninitialized_variables.patch
  * mpich-1.2.7p1-iostream.dif
  * mpich-fix_headers.diff
  * mpich-hostent.patch
  * mpich-mpiman.patch
- Add mpich-modules.patch (from Fedora)
- Add package autoload installs mpich's profiles
- Moved documentation to doc subpackage
- Call make check during build</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1420718400">- Update to 3.1.3
  * see CHANGES file for all details, some pertinent changes are:
  - [3.1.2] MPI-3 support for Blue Gene/Q and ppc64le support.
  - [3.1.2] Fixes and testcases for Fortran 2008 bindings.
  - [3.1.1] Removal of the mpd process manager.
  - [3.1] MPICH now supports operations on very large datatypes (those that
    describe more than 32 bits of data).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499083200">- Fix compilation for aarch64
- Build multiple flavour of mpich (psm, psm2, tessuite)
- Update to mpich 3.2
  * see CHANGES file for all details, some pertinent changes are:
  - Added support for MPI-3.1 features including nonblocking collective I/O,
    address manipulation routines, thread-safety for MPI initialization,
    pre-init functionality, and new MPI_T routines to look up variables
    by name.
  - Fortran 2008 bindings are enabled by default and fully supported.
  - Completely revamped RMA infrastructure including several
    scalability improvements, performance improvements, and bug fixes.
  - Added experimental support for Open Fabrics Interfaces (OFI) version 1.0.0.
    https://github.com/ofiwg/libfabric (thanks to Intel for code contribution)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499256000">- Register mpich package to mpi-selector
- Remove redondant configure options already passed by %configure</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947200">- Disable rpath in pkgconfig files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947201">- Add LD_LIBRARY_PATH to mpivars.sh and mpivars.csh</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Drop unnecessary dependency to xorg-x11-devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1509019200">- Add HPC specific build targets using environment modules (Fate#323977).</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Fix mpich HPC installation path in spec file.
- Fix hpc macros: add %mpich_requires.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Update to mpich 3.2.1
  - Bug fixes
  - No release notes available</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="eich@suse.com" date="1524398400">- Remove 'BuildRequires: Modules' for HPC builds: it conflicts
  with lmod (boo#1089970).</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-mpich:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in postun scriptlet</changelog>
</package>
<package pkgid="5a2134908839e3a880c50ca8ef413c6be742c7cce99019bca8f3d30e995370d0" name="mpich-gnu-hpc-macros-devel" arch="noarch">
  <version epoch="0" ver="3.2.1" rel="lp150.5.3.1"/>
  <changelog author="ro@suse.de" date="1290600000">- compress manpages ourselves
  (Check is gone and brp-compress does not look under /opt)</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1330948800">- license update: SUSE-Permissive
  Use a license from http://is.gd/CIdCM7 - if there is no corresponding
  entry on spdx.org/licenses use the proprietary SUSE- prefix until the
  license is accepted upstream</changelog>
  <changelog author="mvyskocil@suse.com" date="1380888000">- Update to 3.0.4
  * too many changes to list, see CHANGES file
- Dropped pointless patches:
  * alog-bufferoverflow.patch
  * gcc4.dif
  * gfortran.patch
  * mpeinstall.patch
  * mpich-1.2.6.dif
  * mpich-1.2.6_implicit_declarations.diff
  * mpich-1.2.6-limits.patch
  * mpich-1.2.7_bsendutil2.c_uninitialized_variables.patch
  * mpich-1.2.7p1-iostream.dif
  * mpich-fix_headers.diff
  * mpich-hostent.patch
  * mpich-mpiman.patch
- Add mpich-modules.patch (from Fedora)
- Add package autoload installs mpich's profiles
- Moved documentation to doc subpackage
- Call make check during build</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1420718400">- Update to 3.1.3
  * see CHANGES file for all details, some pertinent changes are:
  - [3.1.2] MPI-3 support for Blue Gene/Q and ppc64le support.
  - [3.1.2] Fixes and testcases for Fortran 2008 bindings.
  - [3.1.1] Removal of the mpd process manager.
  - [3.1] MPICH now supports operations on very large datatypes (those that
    describe more than 32 bits of data).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499083200">- Fix compilation for aarch64
- Build multiple flavour of mpich (psm, psm2, tessuite)
- Update to mpich 3.2
  * see CHANGES file for all details, some pertinent changes are:
  - Added support for MPI-3.1 features including nonblocking collective I/O,
    address manipulation routines, thread-safety for MPI initialization,
    pre-init functionality, and new MPI_T routines to look up variables
    by name.
  - Fortran 2008 bindings are enabled by default and fully supported.
  - Completely revamped RMA infrastructure including several
    scalability improvements, performance improvements, and bug fixes.
  - Added experimental support for Open Fabrics Interfaces (OFI) version 1.0.0.
    https://github.com/ofiwg/libfabric (thanks to Intel for code contribution)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499256000">- Register mpich package to mpi-selector
- Remove redondant configure options already passed by %configure</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947200">- Disable rpath in pkgconfig files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947201">- Add LD_LIBRARY_PATH to mpivars.sh and mpivars.csh</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Drop unnecessary dependency to xorg-x11-devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1509019200">- Add HPC specific build targets using environment modules (Fate#323977).</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Fix mpich HPC installation path in spec file.
- Fix hpc macros: add %mpich_requires.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Update to mpich 3.2.1
  - Bug fixes
  - No release notes available</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="eich@suse.com" date="1524398400">- Remove 'BuildRequires: Modules' for HPC builds: it conflicts
  with lmod (boo#1089970).</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-mpich:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in postun scriptlet</changelog>
</package>
<package pkgid="01872431c903f68fbe150556ccf62a693051111572891cb019ee6cae42a693d6" name="mpich-ofi" arch="src">
  <version epoch="0" ver="3.2.1" rel="lp150.5.3.1"/>
  <changelog author="ro@suse.de" date="1290600000">- compress manpages ourselves
  (Check is gone and brp-compress does not look under /opt)</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1330948800">- license update: SUSE-Permissive
  Use a license from http://is.gd/CIdCM7 - if there is no corresponding
  entry on spdx.org/licenses use the proprietary SUSE- prefix until the
  license is accepted upstream</changelog>
  <changelog author="mvyskocil@suse.com" date="1380888000">- Update to 3.0.4
  * too many changes to list, see CHANGES file
- Dropped pointless patches:
  * alog-bufferoverflow.patch
  * gcc4.dif
  * gfortran.patch
  * mpeinstall.patch
  * mpich-1.2.6.dif
  * mpich-1.2.6_implicit_declarations.diff
  * mpich-1.2.6-limits.patch
  * mpich-1.2.7_bsendutil2.c_uninitialized_variables.patch
  * mpich-1.2.7p1-iostream.dif
  * mpich-fix_headers.diff
  * mpich-hostent.patch
  * mpich-mpiman.patch
- Add mpich-modules.patch (from Fedora)
- Add package autoload installs mpich's profiles
- Moved documentation to doc subpackage
- Call make check during build</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1420718400">- Update to 3.1.3
  * see CHANGES file for all details, some pertinent changes are:
  - [3.1.2] MPI-3 support for Blue Gene/Q and ppc64le support.
  - [3.1.2] Fixes and testcases for Fortran 2008 bindings.
  - [3.1.1] Removal of the mpd process manager.
  - [3.1] MPICH now supports operations on very large datatypes (those that
    describe more than 32 bits of data).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499083200">- Fix compilation for aarch64
- Build multiple flavour of mpich (psm, psm2, tessuite)
- Update to mpich 3.2
  * see CHANGES file for all details, some pertinent changes are:
  - Added support for MPI-3.1 features including nonblocking collective I/O,
    address manipulation routines, thread-safety for MPI initialization,
    pre-init functionality, and new MPI_T routines to look up variables
    by name.
  - Fortran 2008 bindings are enabled by default and fully supported.
  - Completely revamped RMA infrastructure including several
    scalability improvements, performance improvements, and bug fixes.
  - Added experimental support for Open Fabrics Interfaces (OFI) version 1.0.0.
    https://github.com/ofiwg/libfabric (thanks to Intel for code contribution)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499256000">- Register mpich package to mpi-selector
- Remove redondant configure options already passed by %configure</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947200">- Disable rpath in pkgconfig files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947201">- Add LD_LIBRARY_PATH to mpivars.sh and mpivars.csh</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Drop unnecessary dependency to xorg-x11-devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1509019200">- Add HPC specific build targets using environment modules (Fate#323977).</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Fix mpich HPC installation path in spec file.
- Fix hpc macros: add %mpich_requires.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Update to mpich 3.2.1
  - Bug fixes
  - No release notes available</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="eich@suse.com" date="1524398400">- Remove 'BuildRequires: Modules' for HPC builds: it conflicts
  with lmod (boo#1089970).</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-mpich:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in postun scriptlet</changelog>
</package>
<package pkgid="326f8c9dfbb07ca8b5330eb7b10ffd4357055279e1ccf65bf9f4a6a0f61409c4" name="mpich-ofi" arch="x86_64">
  <version epoch="0" ver="3.2.1" rel="lp150.5.3.1"/>
  <changelog author="ro@suse.de" date="1290600000">- compress manpages ourselves
  (Check is gone and brp-compress does not look under /opt)</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1330948800">- license update: SUSE-Permissive
  Use a license from http://is.gd/CIdCM7 - if there is no corresponding
  entry on spdx.org/licenses use the proprietary SUSE- prefix until the
  license is accepted upstream</changelog>
  <changelog author="mvyskocil@suse.com" date="1380888000">- Update to 3.0.4
  * too many changes to list, see CHANGES file
- Dropped pointless patches:
  * alog-bufferoverflow.patch
  * gcc4.dif
  * gfortran.patch
  * mpeinstall.patch
  * mpich-1.2.6.dif
  * mpich-1.2.6_implicit_declarations.diff
  * mpich-1.2.6-limits.patch
  * mpich-1.2.7_bsendutil2.c_uninitialized_variables.patch
  * mpich-1.2.7p1-iostream.dif
  * mpich-fix_headers.diff
  * mpich-hostent.patch
  * mpich-mpiman.patch
- Add mpich-modules.patch (from Fedora)
- Add package autoload installs mpich's profiles
- Moved documentation to doc subpackage
- Call make check during build</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1420718400">- Update to 3.1.3
  * see CHANGES file for all details, some pertinent changes are:
  - [3.1.2] MPI-3 support for Blue Gene/Q and ppc64le support.
  - [3.1.2] Fixes and testcases for Fortran 2008 bindings.
  - [3.1.1] Removal of the mpd process manager.
  - [3.1] MPICH now supports operations on very large datatypes (those that
    describe more than 32 bits of data).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499083200">- Fix compilation for aarch64
- Build multiple flavour of mpich (psm, psm2, tessuite)
- Update to mpich 3.2
  * see CHANGES file for all details, some pertinent changes are:
  - Added support for MPI-3.1 features including nonblocking collective I/O,
    address manipulation routines, thread-safety for MPI initialization,
    pre-init functionality, and new MPI_T routines to look up variables
    by name.
  - Fortran 2008 bindings are enabled by default and fully supported.
  - Completely revamped RMA infrastructure including several
    scalability improvements, performance improvements, and bug fixes.
  - Added experimental support for Open Fabrics Interfaces (OFI) version 1.0.0.
    https://github.com/ofiwg/libfabric (thanks to Intel for code contribution)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499256000">- Register mpich package to mpi-selector
- Remove redondant configure options already passed by %configure</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947200">- Disable rpath in pkgconfig files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947201">- Add LD_LIBRARY_PATH to mpivars.sh and mpivars.csh</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Drop unnecessary dependency to xorg-x11-devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1509019200">- Add HPC specific build targets using environment modules (Fate#323977).</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Fix mpich HPC installation path in spec file.
- Fix hpc macros: add %mpich_requires.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Update to mpich 3.2.1
  - Bug fixes
  - No release notes available</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="eich@suse.com" date="1524398400">- Remove 'BuildRequires: Modules' for HPC builds: it conflicts
  with lmod (boo#1089970).</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-mpich:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in postun scriptlet</changelog>
</package>
<package pkgid="8a7792225c68f53b450352cb4db0ffdbac5500b63c15c5bee972a6e632342c90" name="mpich-ofi-devel" arch="x86_64">
  <version epoch="0" ver="3.2.1" rel="lp150.5.3.1"/>
  <changelog author="ro@suse.de" date="1290600000">- compress manpages ourselves
  (Check is gone and brp-compress does not look under /opt)</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1330948800">- license update: SUSE-Permissive
  Use a license from http://is.gd/CIdCM7 - if there is no corresponding
  entry on spdx.org/licenses use the proprietary SUSE- prefix until the
  license is accepted upstream</changelog>
  <changelog author="mvyskocil@suse.com" date="1380888000">- Update to 3.0.4
  * too many changes to list, see CHANGES file
- Dropped pointless patches:
  * alog-bufferoverflow.patch
  * gcc4.dif
  * gfortran.patch
  * mpeinstall.patch
  * mpich-1.2.6.dif
  * mpich-1.2.6_implicit_declarations.diff
  * mpich-1.2.6-limits.patch
  * mpich-1.2.7_bsendutil2.c_uninitialized_variables.patch
  * mpich-1.2.7p1-iostream.dif
  * mpich-fix_headers.diff
  * mpich-hostent.patch
  * mpich-mpiman.patch
- Add mpich-modules.patch (from Fedora)
- Add package autoload installs mpich's profiles
- Moved documentation to doc subpackage
- Call make check during build</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1420718400">- Update to 3.1.3
  * see CHANGES file for all details, some pertinent changes are:
  - [3.1.2] MPI-3 support for Blue Gene/Q and ppc64le support.
  - [3.1.2] Fixes and testcases for Fortran 2008 bindings.
  - [3.1.1] Removal of the mpd process manager.
  - [3.1] MPICH now supports operations on very large datatypes (those that
    describe more than 32 bits of data).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499083200">- Fix compilation for aarch64
- Build multiple flavour of mpich (psm, psm2, tessuite)
- Update to mpich 3.2
  * see CHANGES file for all details, some pertinent changes are:
  - Added support for MPI-3.1 features including nonblocking collective I/O,
    address manipulation routines, thread-safety for MPI initialization,
    pre-init functionality, and new MPI_T routines to look up variables
    by name.
  - Fortran 2008 bindings are enabled by default and fully supported.
  - Completely revamped RMA infrastructure including several
    scalability improvements, performance improvements, and bug fixes.
  - Added experimental support for Open Fabrics Interfaces (OFI) version 1.0.0.
    https://github.com/ofiwg/libfabric (thanks to Intel for code contribution)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499256000">- Register mpich package to mpi-selector
- Remove redondant configure options already passed by %configure</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947200">- Disable rpath in pkgconfig files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947201">- Add LD_LIBRARY_PATH to mpivars.sh and mpivars.csh</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Drop unnecessary dependency to xorg-x11-devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1509019200">- Add HPC specific build targets using environment modules (Fate#323977).</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Fix mpich HPC installation path in spec file.
- Fix hpc macros: add %mpich_requires.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Update to mpich 3.2.1
  - Bug fixes
  - No release notes available</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="eich@suse.com" date="1524398400">- Remove 'BuildRequires: Modules' for HPC builds: it conflicts
  with lmod (boo#1089970).</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-mpich:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in postun scriptlet</changelog>
</package>
<package pkgid="24a4a3191354f3e5e2c479ccda7b2efc9741404cc91af4be7ce798a917c9a72d" name="mpich-ofi-gnu-hpc" arch="x86_64">
  <version epoch="0" ver="3.2.1" rel="lp150.5.3.1"/>
  <changelog author="ro@suse.de" date="1290600000">- compress manpages ourselves
  (Check is gone and brp-compress does not look under /opt)</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1330948800">- license update: SUSE-Permissive
  Use a license from http://is.gd/CIdCM7 - if there is no corresponding
  entry on spdx.org/licenses use the proprietary SUSE- prefix until the
  license is accepted upstream</changelog>
  <changelog author="mvyskocil@suse.com" date="1380888000">- Update to 3.0.4
  * too many changes to list, see CHANGES file
- Dropped pointless patches:
  * alog-bufferoverflow.patch
  * gcc4.dif
  * gfortran.patch
  * mpeinstall.patch
  * mpich-1.2.6.dif
  * mpich-1.2.6_implicit_declarations.diff
  * mpich-1.2.6-limits.patch
  * mpich-1.2.7_bsendutil2.c_uninitialized_variables.patch
  * mpich-1.2.7p1-iostream.dif
  * mpich-fix_headers.diff
  * mpich-hostent.patch
  * mpich-mpiman.patch
- Add mpich-modules.patch (from Fedora)
- Add package autoload installs mpich's profiles
- Moved documentation to doc subpackage
- Call make check during build</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1420718400">- Update to 3.1.3
  * see CHANGES file for all details, some pertinent changes are:
  - [3.1.2] MPI-3 support for Blue Gene/Q and ppc64le support.
  - [3.1.2] Fixes and testcases for Fortran 2008 bindings.
  - [3.1.1] Removal of the mpd process manager.
  - [3.1] MPICH now supports operations on very large datatypes (those that
    describe more than 32 bits of data).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499083200">- Fix compilation for aarch64
- Build multiple flavour of mpich (psm, psm2, tessuite)
- Update to mpich 3.2
  * see CHANGES file for all details, some pertinent changes are:
  - Added support for MPI-3.1 features including nonblocking collective I/O,
    address manipulation routines, thread-safety for MPI initialization,
    pre-init functionality, and new MPI_T routines to look up variables
    by name.
  - Fortran 2008 bindings are enabled by default and fully supported.
  - Completely revamped RMA infrastructure including several
    scalability improvements, performance improvements, and bug fixes.
  - Added experimental support for Open Fabrics Interfaces (OFI) version 1.0.0.
    https://github.com/ofiwg/libfabric (thanks to Intel for code contribution)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499256000">- Register mpich package to mpi-selector
- Remove redondant configure options already passed by %configure</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947200">- Disable rpath in pkgconfig files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947201">- Add LD_LIBRARY_PATH to mpivars.sh and mpivars.csh</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Drop unnecessary dependency to xorg-x11-devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1509019200">- Add HPC specific build targets using environment modules (Fate#323977).</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Fix mpich HPC installation path in spec file.
- Fix hpc macros: add %mpich_requires.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Update to mpich 3.2.1
  - Bug fixes
  - No release notes available</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="eich@suse.com" date="1524398400">- Remove 'BuildRequires: Modules' for HPC builds: it conflicts
  with lmod (boo#1089970).</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-mpich:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in postun scriptlet</changelog>
</package>
<package pkgid="667b265c868e7328018e7389cd5ee96096ac634a0b81af29c54f9b0b1a4ee2b1" name="mpich-ofi-gnu-hpc-devel" arch="x86_64">
  <version epoch="0" ver="3.2.1" rel="lp150.5.3.1"/>
  <changelog author="ro@suse.de" date="1290600000">- compress manpages ourselves
  (Check is gone and brp-compress does not look under /opt)</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1330948800">- license update: SUSE-Permissive
  Use a license from http://is.gd/CIdCM7 - if there is no corresponding
  entry on spdx.org/licenses use the proprietary SUSE- prefix until the
  license is accepted upstream</changelog>
  <changelog author="mvyskocil@suse.com" date="1380888000">- Update to 3.0.4
  * too many changes to list, see CHANGES file
- Dropped pointless patches:
  * alog-bufferoverflow.patch
  * gcc4.dif
  * gfortran.patch
  * mpeinstall.patch
  * mpich-1.2.6.dif
  * mpich-1.2.6_implicit_declarations.diff
  * mpich-1.2.6-limits.patch
  * mpich-1.2.7_bsendutil2.c_uninitialized_variables.patch
  * mpich-1.2.7p1-iostream.dif
  * mpich-fix_headers.diff
  * mpich-hostent.patch
  * mpich-mpiman.patch
- Add mpich-modules.patch (from Fedora)
- Add package autoload installs mpich's profiles
- Moved documentation to doc subpackage
- Call make check during build</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1420718400">- Update to 3.1.3
  * see CHANGES file for all details, some pertinent changes are:
  - [3.1.2] MPI-3 support for Blue Gene/Q and ppc64le support.
  - [3.1.2] Fixes and testcases for Fortran 2008 bindings.
  - [3.1.1] Removal of the mpd process manager.
  - [3.1] MPICH now supports operations on very large datatypes (those that
    describe more than 32 bits of data).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499083200">- Fix compilation for aarch64
- Build multiple flavour of mpich (psm, psm2, tessuite)
- Update to mpich 3.2
  * see CHANGES file for all details, some pertinent changes are:
  - Added support for MPI-3.1 features including nonblocking collective I/O,
    address manipulation routines, thread-safety for MPI initialization,
    pre-init functionality, and new MPI_T routines to look up variables
    by name.
  - Fortran 2008 bindings are enabled by default and fully supported.
  - Completely revamped RMA infrastructure including several
    scalability improvements, performance improvements, and bug fixes.
  - Added experimental support for Open Fabrics Interfaces (OFI) version 1.0.0.
    https://github.com/ofiwg/libfabric (thanks to Intel for code contribution)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499256000">- Register mpich package to mpi-selector
- Remove redondant configure options already passed by %configure</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947200">- Disable rpath in pkgconfig files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947201">- Add LD_LIBRARY_PATH to mpivars.sh and mpivars.csh</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Drop unnecessary dependency to xorg-x11-devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1509019200">- Add HPC specific build targets using environment modules (Fate#323977).</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Fix mpich HPC installation path in spec file.
- Fix hpc macros: add %mpich_requires.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Update to mpich 3.2.1
  - Bug fixes
  - No release notes available</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="eich@suse.com" date="1524398400">- Remove 'BuildRequires: Modules' for HPC builds: it conflicts
  with lmod (boo#1089970).</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-mpich:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in postun scriptlet</changelog>
</package>
<package pkgid="34ffd95fe01a4b5ac7392c3c2fd6a6b93f9ba3997e2000526dd8af79f905f6b3" name="mpich-ofi-gnu-hpc-devel-static" arch="x86_64">
  <version epoch="0" ver="3.2.1" rel="lp150.5.3.1"/>
  <changelog author="ro@suse.de" date="1290600000">- compress manpages ourselves
  (Check is gone and brp-compress does not look under /opt)</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1330948800">- license update: SUSE-Permissive
  Use a license from http://is.gd/CIdCM7 - if there is no corresponding
  entry on spdx.org/licenses use the proprietary SUSE- prefix until the
  license is accepted upstream</changelog>
  <changelog author="mvyskocil@suse.com" date="1380888000">- Update to 3.0.4
  * too many changes to list, see CHANGES file
- Dropped pointless patches:
  * alog-bufferoverflow.patch
  * gcc4.dif
  * gfortran.patch
  * mpeinstall.patch
  * mpich-1.2.6.dif
  * mpich-1.2.6_implicit_declarations.diff
  * mpich-1.2.6-limits.patch
  * mpich-1.2.7_bsendutil2.c_uninitialized_variables.patch
  * mpich-1.2.7p1-iostream.dif
  * mpich-fix_headers.diff
  * mpich-hostent.patch
  * mpich-mpiman.patch
- Add mpich-modules.patch (from Fedora)
- Add package autoload installs mpich's profiles
- Moved documentation to doc subpackage
- Call make check during build</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1420718400">- Update to 3.1.3
  * see CHANGES file for all details, some pertinent changes are:
  - [3.1.2] MPI-3 support for Blue Gene/Q and ppc64le support.
  - [3.1.2] Fixes and testcases for Fortran 2008 bindings.
  - [3.1.1] Removal of the mpd process manager.
  - [3.1] MPICH now supports operations on very large datatypes (those that
    describe more than 32 bits of data).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499083200">- Fix compilation for aarch64
- Build multiple flavour of mpich (psm, psm2, tessuite)
- Update to mpich 3.2
  * see CHANGES file for all details, some pertinent changes are:
  - Added support for MPI-3.1 features including nonblocking collective I/O,
    address manipulation routines, thread-safety for MPI initialization,
    pre-init functionality, and new MPI_T routines to look up variables
    by name.
  - Fortran 2008 bindings are enabled by default and fully supported.
  - Completely revamped RMA infrastructure including several
    scalability improvements, performance improvements, and bug fixes.
  - Added experimental support for Open Fabrics Interfaces (OFI) version 1.0.0.
    https://github.com/ofiwg/libfabric (thanks to Intel for code contribution)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499256000">- Register mpich package to mpi-selector
- Remove redondant configure options already passed by %configure</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947200">- Disable rpath in pkgconfig files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947201">- Add LD_LIBRARY_PATH to mpivars.sh and mpivars.csh</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Drop unnecessary dependency to xorg-x11-devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1509019200">- Add HPC specific build targets using environment modules (Fate#323977).</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Fix mpich HPC installation path in spec file.
- Fix hpc macros: add %mpich_requires.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Update to mpich 3.2.1
  - Bug fixes
  - No release notes available</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="eich@suse.com" date="1524398400">- Remove 'BuildRequires: Modules' for HPC builds: it conflicts
  with lmod (boo#1089970).</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-mpich:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in postun scriptlet</changelog>
</package>
<package pkgid="47221524dcd28c2d917809000a88f7ed983e497415f69ebde5ef67bcd7adba1a" name="mpich-ofi-gnu-hpc-macros-devel" arch="noarch">
  <version epoch="0" ver="3.2.1" rel="lp150.5.3.1"/>
  <changelog author="ro@suse.de" date="1290600000">- compress manpages ourselves
  (Check is gone and brp-compress does not look under /opt)</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1330948800">- license update: SUSE-Permissive
  Use a license from http://is.gd/CIdCM7 - if there is no corresponding
  entry on spdx.org/licenses use the proprietary SUSE- prefix until the
  license is accepted upstream</changelog>
  <changelog author="mvyskocil@suse.com" date="1380888000">- Update to 3.0.4
  * too many changes to list, see CHANGES file
- Dropped pointless patches:
  * alog-bufferoverflow.patch
  * gcc4.dif
  * gfortran.patch
  * mpeinstall.patch
  * mpich-1.2.6.dif
  * mpich-1.2.6_implicit_declarations.diff
  * mpich-1.2.6-limits.patch
  * mpich-1.2.7_bsendutil2.c_uninitialized_variables.patch
  * mpich-1.2.7p1-iostream.dif
  * mpich-fix_headers.diff
  * mpich-hostent.patch
  * mpich-mpiman.patch
- Add mpich-modules.patch (from Fedora)
- Add package autoload installs mpich's profiles
- Moved documentation to doc subpackage
- Call make check during build</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1420718400">- Update to 3.1.3
  * see CHANGES file for all details, some pertinent changes are:
  - [3.1.2] MPI-3 support for Blue Gene/Q and ppc64le support.
  - [3.1.2] Fixes and testcases for Fortran 2008 bindings.
  - [3.1.1] Removal of the mpd process manager.
  - [3.1] MPICH now supports operations on very large datatypes (those that
    describe more than 32 bits of data).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499083200">- Fix compilation for aarch64
- Build multiple flavour of mpich (psm, psm2, tessuite)
- Update to mpich 3.2
  * see CHANGES file for all details, some pertinent changes are:
  - Added support for MPI-3.1 features including nonblocking collective I/O,
    address manipulation routines, thread-safety for MPI initialization,
    pre-init functionality, and new MPI_T routines to look up variables
    by name.
  - Fortran 2008 bindings are enabled by default and fully supported.
  - Completely revamped RMA infrastructure including several
    scalability improvements, performance improvements, and bug fixes.
  - Added experimental support for Open Fabrics Interfaces (OFI) version 1.0.0.
    https://github.com/ofiwg/libfabric (thanks to Intel for code contribution)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499256000">- Register mpich package to mpi-selector
- Remove redondant configure options already passed by %configure</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947200">- Disable rpath in pkgconfig files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947201">- Add LD_LIBRARY_PATH to mpivars.sh and mpivars.csh</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Drop unnecessary dependency to xorg-x11-devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1509019200">- Add HPC specific build targets using environment modules (Fate#323977).</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Fix mpich HPC installation path in spec file.
- Fix hpc macros: add %mpich_requires.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Update to mpich 3.2.1
  - Bug fixes
  - No release notes available</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="eich@suse.com" date="1524398400">- Remove 'BuildRequires: Modules' for HPC builds: it conflicts
  with lmod (boo#1089970).</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-mpich:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in postun scriptlet</changelog>
</package>
<package pkgid="ba43ac114c4c036c71b193736880bf6da86bb7fc83c0363adbd4bf59930ff51f" name="mpich-ofi-testsuite" arch="src">
  <version epoch="0" ver="3.2.1" rel="lp150.5.3.1"/>
  <changelog author="ro@suse.de" date="1290600000">- compress manpages ourselves
  (Check is gone and brp-compress does not look under /opt)</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1330948800">- license update: SUSE-Permissive
  Use a license from http://is.gd/CIdCM7 - if there is no corresponding
  entry on spdx.org/licenses use the proprietary SUSE- prefix until the
  license is accepted upstream</changelog>
  <changelog author="mvyskocil@suse.com" date="1380888000">- Update to 3.0.4
  * too many changes to list, see CHANGES file
- Dropped pointless patches:
  * alog-bufferoverflow.patch
  * gcc4.dif
  * gfortran.patch
  * mpeinstall.patch
  * mpich-1.2.6.dif
  * mpich-1.2.6_implicit_declarations.diff
  * mpich-1.2.6-limits.patch
  * mpich-1.2.7_bsendutil2.c_uninitialized_variables.patch
  * mpich-1.2.7p1-iostream.dif
  * mpich-fix_headers.diff
  * mpich-hostent.patch
  * mpich-mpiman.patch
- Add mpich-modules.patch (from Fedora)
- Add package autoload installs mpich's profiles
- Moved documentation to doc subpackage
- Call make check during build</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1420718400">- Update to 3.1.3
  * see CHANGES file for all details, some pertinent changes are:
  - [3.1.2] MPI-3 support for Blue Gene/Q and ppc64le support.
  - [3.1.2] Fixes and testcases for Fortran 2008 bindings.
  - [3.1.1] Removal of the mpd process manager.
  - [3.1] MPICH now supports operations on very large datatypes (those that
    describe more than 32 bits of data).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499083200">- Fix compilation for aarch64
- Build multiple flavour of mpich (psm, psm2, tessuite)
- Update to mpich 3.2
  * see CHANGES file for all details, some pertinent changes are:
  - Added support for MPI-3.1 features including nonblocking collective I/O,
    address manipulation routines, thread-safety for MPI initialization,
    pre-init functionality, and new MPI_T routines to look up variables
    by name.
  - Fortran 2008 bindings are enabled by default and fully supported.
  - Completely revamped RMA infrastructure including several
    scalability improvements, performance improvements, and bug fixes.
  - Added experimental support for Open Fabrics Interfaces (OFI) version 1.0.0.
    https://github.com/ofiwg/libfabric (thanks to Intel for code contribution)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499256000">- Register mpich package to mpi-selector
- Remove redondant configure options already passed by %configure</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947200">- Disable rpath in pkgconfig files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947201">- Add LD_LIBRARY_PATH to mpivars.sh and mpivars.csh</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Drop unnecessary dependency to xorg-x11-devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1509019200">- Add HPC specific build targets using environment modules (Fate#323977).</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Fix mpich HPC installation path in spec file.
- Fix hpc macros: add %mpich_requires.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Update to mpich 3.2.1
  - Bug fixes
  - No release notes available</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="eich@suse.com" date="1524398400">- Remove 'BuildRequires: Modules' for HPC builds: it conflicts
  with lmod (boo#1089970).</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-mpich:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in postun scriptlet</changelog>
</package>
<package pkgid="135445472246f86bd7336b13bd9dade68b959d79e259af5aeeefa2384a8de6aa" name="mpich-ofi_3_2_1-gnu-hpc" arch="src">
  <version epoch="0" ver="3.2.1" rel="lp150.5.3.1"/>
  <changelog author="ro@suse.de" date="1290600000">- compress manpages ourselves
  (Check is gone and brp-compress does not look under /opt)</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1330948800">- license update: SUSE-Permissive
  Use a license from http://is.gd/CIdCM7 - if there is no corresponding
  entry on spdx.org/licenses use the proprietary SUSE- prefix until the
  license is accepted upstream</changelog>
  <changelog author="mvyskocil@suse.com" date="1380888000">- Update to 3.0.4
  * too many changes to list, see CHANGES file
- Dropped pointless patches:
  * alog-bufferoverflow.patch
  * gcc4.dif
  * gfortran.patch
  * mpeinstall.patch
  * mpich-1.2.6.dif
  * mpich-1.2.6_implicit_declarations.diff
  * mpich-1.2.6-limits.patch
  * mpich-1.2.7_bsendutil2.c_uninitialized_variables.patch
  * mpich-1.2.7p1-iostream.dif
  * mpich-fix_headers.diff
  * mpich-hostent.patch
  * mpich-mpiman.patch
- Add mpich-modules.patch (from Fedora)
- Add package autoload installs mpich's profiles
- Moved documentation to doc subpackage
- Call make check during build</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1420718400">- Update to 3.1.3
  * see CHANGES file for all details, some pertinent changes are:
  - [3.1.2] MPI-3 support for Blue Gene/Q and ppc64le support.
  - [3.1.2] Fixes and testcases for Fortran 2008 bindings.
  - [3.1.1] Removal of the mpd process manager.
  - [3.1] MPICH now supports operations on very large datatypes (those that
    describe more than 32 bits of data).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499083200">- Fix compilation for aarch64
- Build multiple flavour of mpich (psm, psm2, tessuite)
- Update to mpich 3.2
  * see CHANGES file for all details, some pertinent changes are:
  - Added support for MPI-3.1 features including nonblocking collective I/O,
    address manipulation routines, thread-safety for MPI initialization,
    pre-init functionality, and new MPI_T routines to look up variables
    by name.
  - Fortran 2008 bindings are enabled by default and fully supported.
  - Completely revamped RMA infrastructure including several
    scalability improvements, performance improvements, and bug fixes.
  - Added experimental support for Open Fabrics Interfaces (OFI) version 1.0.0.
    https://github.com/ofiwg/libfabric (thanks to Intel for code contribution)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499256000">- Register mpich package to mpi-selector
- Remove redondant configure options already passed by %configure</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947200">- Disable rpath in pkgconfig files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947201">- Add LD_LIBRARY_PATH to mpivars.sh and mpivars.csh</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Drop unnecessary dependency to xorg-x11-devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1509019200">- Add HPC specific build targets using environment modules (Fate#323977).</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Fix mpich HPC installation path in spec file.
- Fix hpc macros: add %mpich_requires.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Update to mpich 3.2.1
  - Bug fixes
  - No release notes available</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="eich@suse.com" date="1524398400">- Remove 'BuildRequires: Modules' for HPC builds: it conflicts
  with lmod (boo#1089970).</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-mpich:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in postun scriptlet</changelog>
</package>
<package pkgid="790468990b09a3b18ec5acba3482891641cd932cb94425c7377c79a9f27e406c" name="mpich-ofi_3_2_1-gnu-hpc" arch="x86_64">
  <version epoch="0" ver="3.2.1" rel="lp150.5.3.1"/>
  <changelog author="ro@suse.de" date="1290600000">- compress manpages ourselves
  (Check is gone and brp-compress does not look under /opt)</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1330948800">- license update: SUSE-Permissive
  Use a license from http://is.gd/CIdCM7 - if there is no corresponding
  entry on spdx.org/licenses use the proprietary SUSE- prefix until the
  license is accepted upstream</changelog>
  <changelog author="mvyskocil@suse.com" date="1380888000">- Update to 3.0.4
  * too many changes to list, see CHANGES file
- Dropped pointless patches:
  * alog-bufferoverflow.patch
  * gcc4.dif
  * gfortran.patch
  * mpeinstall.patch
  * mpich-1.2.6.dif
  * mpich-1.2.6_implicit_declarations.diff
  * mpich-1.2.6-limits.patch
  * mpich-1.2.7_bsendutil2.c_uninitialized_variables.patch
  * mpich-1.2.7p1-iostream.dif
  * mpich-fix_headers.diff
  * mpich-hostent.patch
  * mpich-mpiman.patch
- Add mpich-modules.patch (from Fedora)
- Add package autoload installs mpich's profiles
- Moved documentation to doc subpackage
- Call make check during build</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1420718400">- Update to 3.1.3
  * see CHANGES file for all details, some pertinent changes are:
  - [3.1.2] MPI-3 support for Blue Gene/Q and ppc64le support.
  - [3.1.2] Fixes and testcases for Fortran 2008 bindings.
  - [3.1.1] Removal of the mpd process manager.
  - [3.1] MPICH now supports operations on very large datatypes (those that
    describe more than 32 bits of data).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499083200">- Fix compilation for aarch64
- Build multiple flavour of mpich (psm, psm2, tessuite)
- Update to mpich 3.2
  * see CHANGES file for all details, some pertinent changes are:
  - Added support for MPI-3.1 features including nonblocking collective I/O,
    address manipulation routines, thread-safety for MPI initialization,
    pre-init functionality, and new MPI_T routines to look up variables
    by name.
  - Fortran 2008 bindings are enabled by default and fully supported.
  - Completely revamped RMA infrastructure including several
    scalability improvements, performance improvements, and bug fixes.
  - Added experimental support for Open Fabrics Interfaces (OFI) version 1.0.0.
    https://github.com/ofiwg/libfabric (thanks to Intel for code contribution)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499256000">- Register mpich package to mpi-selector
- Remove redondant configure options already passed by %configure</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947200">- Disable rpath in pkgconfig files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947201">- Add LD_LIBRARY_PATH to mpivars.sh and mpivars.csh</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Drop unnecessary dependency to xorg-x11-devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1509019200">- Add HPC specific build targets using environment modules (Fate#323977).</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Fix mpich HPC installation path in spec file.
- Fix hpc macros: add %mpich_requires.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Update to mpich 3.2.1
  - Bug fixes
  - No release notes available</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="eich@suse.com" date="1524398400">- Remove 'BuildRequires: Modules' for HPC builds: it conflicts
  with lmod (boo#1089970).</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-mpich:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in postun scriptlet</changelog>
</package>
<package pkgid="1e15826579dbb7a63e8107d7a142a19542cf49f31e462bb937f71528d7013ec3" name="mpich-ofi_3_2_1-gnu-hpc-devel" arch="x86_64">
  <version epoch="0" ver="3.2.1" rel="lp150.5.3.1"/>
  <changelog author="ro@suse.de" date="1290600000">- compress manpages ourselves
  (Check is gone and brp-compress does not look under /opt)</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1330948800">- license update: SUSE-Permissive
  Use a license from http://is.gd/CIdCM7 - if there is no corresponding
  entry on spdx.org/licenses use the proprietary SUSE- prefix until the
  license is accepted upstream</changelog>
  <changelog author="mvyskocil@suse.com" date="1380888000">- Update to 3.0.4
  * too many changes to list, see CHANGES file
- Dropped pointless patches:
  * alog-bufferoverflow.patch
  * gcc4.dif
  * gfortran.patch
  * mpeinstall.patch
  * mpich-1.2.6.dif
  * mpich-1.2.6_implicit_declarations.diff
  * mpich-1.2.6-limits.patch
  * mpich-1.2.7_bsendutil2.c_uninitialized_variables.patch
  * mpich-1.2.7p1-iostream.dif
  * mpich-fix_headers.diff
  * mpich-hostent.patch
  * mpich-mpiman.patch
- Add mpich-modules.patch (from Fedora)
- Add package autoload installs mpich's profiles
- Moved documentation to doc subpackage
- Call make check during build</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1420718400">- Update to 3.1.3
  * see CHANGES file for all details, some pertinent changes are:
  - [3.1.2] MPI-3 support for Blue Gene/Q and ppc64le support.
  - [3.1.2] Fixes and testcases for Fortran 2008 bindings.
  - [3.1.1] Removal of the mpd process manager.
  - [3.1] MPICH now supports operations on very large datatypes (those that
    describe more than 32 bits of data).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499083200">- Fix compilation for aarch64
- Build multiple flavour of mpich (psm, psm2, tessuite)
- Update to mpich 3.2
  * see CHANGES file for all details, some pertinent changes are:
  - Added support for MPI-3.1 features including nonblocking collective I/O,
    address manipulation routines, thread-safety for MPI initialization,
    pre-init functionality, and new MPI_T routines to look up variables
    by name.
  - Fortran 2008 bindings are enabled by default and fully supported.
  - Completely revamped RMA infrastructure including several
    scalability improvements, performance improvements, and bug fixes.
  - Added experimental support for Open Fabrics Interfaces (OFI) version 1.0.0.
    https://github.com/ofiwg/libfabric (thanks to Intel for code contribution)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499256000">- Register mpich package to mpi-selector
- Remove redondant configure options already passed by %configure</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947200">- Disable rpath in pkgconfig files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947201">- Add LD_LIBRARY_PATH to mpivars.sh and mpivars.csh</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Drop unnecessary dependency to xorg-x11-devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1509019200">- Add HPC specific build targets using environment modules (Fate#323977).</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Fix mpich HPC installation path in spec file.
- Fix hpc macros: add %mpich_requires.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Update to mpich 3.2.1
  - Bug fixes
  - No release notes available</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="eich@suse.com" date="1524398400">- Remove 'BuildRequires: Modules' for HPC builds: it conflicts
  with lmod (boo#1089970).</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-mpich:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in postun scriptlet</changelog>
</package>
<package pkgid="8e95352496a61edda5d59bdc7acdd54b01b4e718bb205d81de3628e06235d1c3" name="mpich-ofi_3_2_1-gnu-hpc-devel-static" arch="x86_64">
  <version epoch="0" ver="3.2.1" rel="lp150.5.3.1"/>
  <changelog author="ro@suse.de" date="1290600000">- compress manpages ourselves
  (Check is gone and brp-compress does not look under /opt)</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1330948800">- license update: SUSE-Permissive
  Use a license from http://is.gd/CIdCM7 - if there is no corresponding
  entry on spdx.org/licenses use the proprietary SUSE- prefix until the
  license is accepted upstream</changelog>
  <changelog author="mvyskocil@suse.com" date="1380888000">- Update to 3.0.4
  * too many changes to list, see CHANGES file
- Dropped pointless patches:
  * alog-bufferoverflow.patch
  * gcc4.dif
  * gfortran.patch
  * mpeinstall.patch
  * mpich-1.2.6.dif
  * mpich-1.2.6_implicit_declarations.diff
  * mpich-1.2.6-limits.patch
  * mpich-1.2.7_bsendutil2.c_uninitialized_variables.patch
  * mpich-1.2.7p1-iostream.dif
  * mpich-fix_headers.diff
  * mpich-hostent.patch
  * mpich-mpiman.patch
- Add mpich-modules.patch (from Fedora)
- Add package autoload installs mpich's profiles
- Moved documentation to doc subpackage
- Call make check during build</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1420718400">- Update to 3.1.3
  * see CHANGES file for all details, some pertinent changes are:
  - [3.1.2] MPI-3 support for Blue Gene/Q and ppc64le support.
  - [3.1.2] Fixes and testcases for Fortran 2008 bindings.
  - [3.1.1] Removal of the mpd process manager.
  - [3.1] MPICH now supports operations on very large datatypes (those that
    describe more than 32 bits of data).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499083200">- Fix compilation for aarch64
- Build multiple flavour of mpich (psm, psm2, tessuite)
- Update to mpich 3.2
  * see CHANGES file for all details, some pertinent changes are:
  - Added support for MPI-3.1 features including nonblocking collective I/O,
    address manipulation routines, thread-safety for MPI initialization,
    pre-init functionality, and new MPI_T routines to look up variables
    by name.
  - Fortran 2008 bindings are enabled by default and fully supported.
  - Completely revamped RMA infrastructure including several
    scalability improvements, performance improvements, and bug fixes.
  - Added experimental support for Open Fabrics Interfaces (OFI) version 1.0.0.
    https://github.com/ofiwg/libfabric (thanks to Intel for code contribution)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499256000">- Register mpich package to mpi-selector
- Remove redondant configure options already passed by %configure</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947200">- Disable rpath in pkgconfig files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947201">- Add LD_LIBRARY_PATH to mpivars.sh and mpivars.csh</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Drop unnecessary dependency to xorg-x11-devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1509019200">- Add HPC specific build targets using environment modules (Fate#323977).</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Fix mpich HPC installation path in spec file.
- Fix hpc macros: add %mpich_requires.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Update to mpich 3.2.1
  - Bug fixes
  - No release notes available</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="eich@suse.com" date="1524398400">- Remove 'BuildRequires: Modules' for HPC builds: it conflicts
  with lmod (boo#1089970).</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-mpich:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in postun scriptlet</changelog>
</package>
<package pkgid="27d51c3ee3652b206f7940450580531897ef6e34886ad841b03305cab6313113" name="mpich-ofi_3_2_1-gnu-hpc-macros-devel" arch="x86_64">
  <version epoch="0" ver="3.2.1" rel="lp150.5.3.1"/>
  <changelog author="ro@suse.de" date="1290600000">- compress manpages ourselves
  (Check is gone and brp-compress does not look under /opt)</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1330948800">- license update: SUSE-Permissive
  Use a license from http://is.gd/CIdCM7 - if there is no corresponding
  entry on spdx.org/licenses use the proprietary SUSE- prefix until the
  license is accepted upstream</changelog>
  <changelog author="mvyskocil@suse.com" date="1380888000">- Update to 3.0.4
  * too many changes to list, see CHANGES file
- Dropped pointless patches:
  * alog-bufferoverflow.patch
  * gcc4.dif
  * gfortran.patch
  * mpeinstall.patch
  * mpich-1.2.6.dif
  * mpich-1.2.6_implicit_declarations.diff
  * mpich-1.2.6-limits.patch
  * mpich-1.2.7_bsendutil2.c_uninitialized_variables.patch
  * mpich-1.2.7p1-iostream.dif
  * mpich-fix_headers.diff
  * mpich-hostent.patch
  * mpich-mpiman.patch
- Add mpich-modules.patch (from Fedora)
- Add package autoload installs mpich's profiles
- Moved documentation to doc subpackage
- Call make check during build</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1420718400">- Update to 3.1.3
  * see CHANGES file for all details, some pertinent changes are:
  - [3.1.2] MPI-3 support for Blue Gene/Q and ppc64le support.
  - [3.1.2] Fixes and testcases for Fortran 2008 bindings.
  - [3.1.1] Removal of the mpd process manager.
  - [3.1] MPICH now supports operations on very large datatypes (those that
    describe more than 32 bits of data).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499083200">- Fix compilation for aarch64
- Build multiple flavour of mpich (psm, psm2, tessuite)
- Update to mpich 3.2
  * see CHANGES file for all details, some pertinent changes are:
  - Added support for MPI-3.1 features including nonblocking collective I/O,
    address manipulation routines, thread-safety for MPI initialization,
    pre-init functionality, and new MPI_T routines to look up variables
    by name.
  - Fortran 2008 bindings are enabled by default and fully supported.
  - Completely revamped RMA infrastructure including several
    scalability improvements, performance improvements, and bug fixes.
  - Added experimental support for Open Fabrics Interfaces (OFI) version 1.0.0.
    https://github.com/ofiwg/libfabric (thanks to Intel for code contribution)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499256000">- Register mpich package to mpi-selector
- Remove redondant configure options already passed by %configure</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947200">- Disable rpath in pkgconfig files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947201">- Add LD_LIBRARY_PATH to mpivars.sh and mpivars.csh</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Drop unnecessary dependency to xorg-x11-devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1509019200">- Add HPC specific build targets using environment modules (Fate#323977).</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Fix mpich HPC installation path in spec file.
- Fix hpc macros: add %mpich_requires.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Update to mpich 3.2.1
  - Bug fixes
  - No release notes available</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="eich@suse.com" date="1524398400">- Remove 'BuildRequires: Modules' for HPC builds: it conflicts
  with lmod (boo#1089970).</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-mpich:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in postun scriptlet</changelog>
</package>
<package pkgid="bff7fffb92b04d6e3410b03dd262aad5317c393edd6b3de638a3ba1a37e6d5c0" name="mpich-ofi_3_2_1-gnu-hpc-testsuite" arch="src">
  <version epoch="0" ver="3.2.1" rel="lp150.5.3.1"/>
  <changelog author="ro@suse.de" date="1290600000">- compress manpages ourselves
  (Check is gone and brp-compress does not look under /opt)</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1330948800">- license update: SUSE-Permissive
  Use a license from http://is.gd/CIdCM7 - if there is no corresponding
  entry on spdx.org/licenses use the proprietary SUSE- prefix until the
  license is accepted upstream</changelog>
  <changelog author="mvyskocil@suse.com" date="1380888000">- Update to 3.0.4
  * too many changes to list, see CHANGES file
- Dropped pointless patches:
  * alog-bufferoverflow.patch
  * gcc4.dif
  * gfortran.patch
  * mpeinstall.patch
  * mpich-1.2.6.dif
  * mpich-1.2.6_implicit_declarations.diff
  * mpich-1.2.6-limits.patch
  * mpich-1.2.7_bsendutil2.c_uninitialized_variables.patch
  * mpich-1.2.7p1-iostream.dif
  * mpich-fix_headers.diff
  * mpich-hostent.patch
  * mpich-mpiman.patch
- Add mpich-modules.patch (from Fedora)
- Add package autoload installs mpich's profiles
- Moved documentation to doc subpackage
- Call make check during build</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1420718400">- Update to 3.1.3
  * see CHANGES file for all details, some pertinent changes are:
  - [3.1.2] MPI-3 support for Blue Gene/Q and ppc64le support.
  - [3.1.2] Fixes and testcases for Fortran 2008 bindings.
  - [3.1.1] Removal of the mpd process manager.
  - [3.1] MPICH now supports operations on very large datatypes (those that
    describe more than 32 bits of data).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499083200">- Fix compilation for aarch64
- Build multiple flavour of mpich (psm, psm2, tessuite)
- Update to mpich 3.2
  * see CHANGES file for all details, some pertinent changes are:
  - Added support for MPI-3.1 features including nonblocking collective I/O,
    address manipulation routines, thread-safety for MPI initialization,
    pre-init functionality, and new MPI_T routines to look up variables
    by name.
  - Fortran 2008 bindings are enabled by default and fully supported.
  - Completely revamped RMA infrastructure including several
    scalability improvements, performance improvements, and bug fixes.
  - Added experimental support for Open Fabrics Interfaces (OFI) version 1.0.0.
    https://github.com/ofiwg/libfabric (thanks to Intel for code contribution)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499256000">- Register mpich package to mpi-selector
- Remove redondant configure options already passed by %configure</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947200">- Disable rpath in pkgconfig files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947201">- Add LD_LIBRARY_PATH to mpivars.sh and mpivars.csh</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Drop unnecessary dependency to xorg-x11-devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1509019200">- Add HPC specific build targets using environment modules (Fate#323977).</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Fix mpich HPC installation path in spec file.
- Fix hpc macros: add %mpich_requires.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Update to mpich 3.2.1
  - Bug fixes
  - No release notes available</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="eich@suse.com" date="1524398400">- Remove 'BuildRequires: Modules' for HPC builds: it conflicts
  with lmod (boo#1089970).</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-mpich:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in postun scriptlet</changelog>
</package>
<package pkgid="e3ef75a4acf1c1a6e6ae63297fda7e8bc4785f72358e87ae53c062df5e83ce0e" name="mpich-testsuite" arch="src">
  <version epoch="0" ver="3.2.1" rel="lp150.5.3.1"/>
  <changelog author="ro@suse.de" date="1290600000">- compress manpages ourselves
  (Check is gone and brp-compress does not look under /opt)</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1330948800">- license update: SUSE-Permissive
  Use a license from http://is.gd/CIdCM7 - if there is no corresponding
  entry on spdx.org/licenses use the proprietary SUSE- prefix until the
  license is accepted upstream</changelog>
  <changelog author="mvyskocil@suse.com" date="1380888000">- Update to 3.0.4
  * too many changes to list, see CHANGES file
- Dropped pointless patches:
  * alog-bufferoverflow.patch
  * gcc4.dif
  * gfortran.patch
  * mpeinstall.patch
  * mpich-1.2.6.dif
  * mpich-1.2.6_implicit_declarations.diff
  * mpich-1.2.6-limits.patch
  * mpich-1.2.7_bsendutil2.c_uninitialized_variables.patch
  * mpich-1.2.7p1-iostream.dif
  * mpich-fix_headers.diff
  * mpich-hostent.patch
  * mpich-mpiman.patch
- Add mpich-modules.patch (from Fedora)
- Add package autoload installs mpich's profiles
- Moved documentation to doc subpackage
- Call make check during build</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1420718400">- Update to 3.1.3
  * see CHANGES file for all details, some pertinent changes are:
  - [3.1.2] MPI-3 support for Blue Gene/Q and ppc64le support.
  - [3.1.2] Fixes and testcases for Fortran 2008 bindings.
  - [3.1.1] Removal of the mpd process manager.
  - [3.1] MPICH now supports operations on very large datatypes (those that
    describe more than 32 bits of data).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499083200">- Fix compilation for aarch64
- Build multiple flavour of mpich (psm, psm2, tessuite)
- Update to mpich 3.2
  * see CHANGES file for all details, some pertinent changes are:
  - Added support for MPI-3.1 features including nonblocking collective I/O,
    address manipulation routines, thread-safety for MPI initialization,
    pre-init functionality, and new MPI_T routines to look up variables
    by name.
  - Fortran 2008 bindings are enabled by default and fully supported.
  - Completely revamped RMA infrastructure including several
    scalability improvements, performance improvements, and bug fixes.
  - Added experimental support for Open Fabrics Interfaces (OFI) version 1.0.0.
    https://github.com/ofiwg/libfabric (thanks to Intel for code contribution)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499256000">- Register mpich package to mpi-selector
- Remove redondant configure options already passed by %configure</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947200">- Disable rpath in pkgconfig files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947201">- Add LD_LIBRARY_PATH to mpivars.sh and mpivars.csh</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Drop unnecessary dependency to xorg-x11-devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1509019200">- Add HPC specific build targets using environment modules (Fate#323977).</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Fix mpich HPC installation path in spec file.
- Fix hpc macros: add %mpich_requires.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Update to mpich 3.2.1
  - Bug fixes
  - No release notes available</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="eich@suse.com" date="1524398400">- Remove 'BuildRequires: Modules' for HPC builds: it conflicts
  with lmod (boo#1089970).</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-mpich:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in postun scriptlet</changelog>
</package>
<package pkgid="2e0e206969bf2ef0303ee3cde0b039739fdfb5b49343ab3a110f730d42a935e6" name="mpich_3_2_1-gnu-hpc" arch="src">
  <version epoch="0" ver="3.2.1" rel="lp150.5.3.1"/>
  <changelog author="ro@suse.de" date="1290600000">- compress manpages ourselves
  (Check is gone and brp-compress does not look under /opt)</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1330948800">- license update: SUSE-Permissive
  Use a license from http://is.gd/CIdCM7 - if there is no corresponding
  entry on spdx.org/licenses use the proprietary SUSE- prefix until the
  license is accepted upstream</changelog>
  <changelog author="mvyskocil@suse.com" date="1380888000">- Update to 3.0.4
  * too many changes to list, see CHANGES file
- Dropped pointless patches:
  * alog-bufferoverflow.patch
  * gcc4.dif
  * gfortran.patch
  * mpeinstall.patch
  * mpich-1.2.6.dif
  * mpich-1.2.6_implicit_declarations.diff
  * mpich-1.2.6-limits.patch
  * mpich-1.2.7_bsendutil2.c_uninitialized_variables.patch
  * mpich-1.2.7p1-iostream.dif
  * mpich-fix_headers.diff
  * mpich-hostent.patch
  * mpich-mpiman.patch
- Add mpich-modules.patch (from Fedora)
- Add package autoload installs mpich's profiles
- Moved documentation to doc subpackage
- Call make check during build</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1420718400">- Update to 3.1.3
  * see CHANGES file for all details, some pertinent changes are:
  - [3.1.2] MPI-3 support for Blue Gene/Q and ppc64le support.
  - [3.1.2] Fixes and testcases for Fortran 2008 bindings.
  - [3.1.1] Removal of the mpd process manager.
  - [3.1] MPICH now supports operations on very large datatypes (those that
    describe more than 32 bits of data).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499083200">- Fix compilation for aarch64
- Build multiple flavour of mpich (psm, psm2, tessuite)
- Update to mpich 3.2
  * see CHANGES file for all details, some pertinent changes are:
  - Added support for MPI-3.1 features including nonblocking collective I/O,
    address manipulation routines, thread-safety for MPI initialization,
    pre-init functionality, and new MPI_T routines to look up variables
    by name.
  - Fortran 2008 bindings are enabled by default and fully supported.
  - Completely revamped RMA infrastructure including several
    scalability improvements, performance improvements, and bug fixes.
  - Added experimental support for Open Fabrics Interfaces (OFI) version 1.0.0.
    https://github.com/ofiwg/libfabric (thanks to Intel for code contribution)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499256000">- Register mpich package to mpi-selector
- Remove redondant configure options already passed by %configure</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947200">- Disable rpath in pkgconfig files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947201">- Add LD_LIBRARY_PATH to mpivars.sh and mpivars.csh</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Drop unnecessary dependency to xorg-x11-devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1509019200">- Add HPC specific build targets using environment modules (Fate#323977).</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Fix mpich HPC installation path in spec file.
- Fix hpc macros: add %mpich_requires.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Update to mpich 3.2.1
  - Bug fixes
  - No release notes available</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="eich@suse.com" date="1524398400">- Remove 'BuildRequires: Modules' for HPC builds: it conflicts
  with lmod (boo#1089970).</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-mpich:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in postun scriptlet</changelog>
</package>
<package pkgid="ede7878c9a564da2d57b4d483c76629bfb4b322df8528923e42217864350241f" name="mpich_3_2_1-gnu-hpc" arch="x86_64">
  <version epoch="0" ver="3.2.1" rel="lp150.5.3.1"/>
  <changelog author="ro@suse.de" date="1290600000">- compress manpages ourselves
  (Check is gone and brp-compress does not look under /opt)</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1330948800">- license update: SUSE-Permissive
  Use a license from http://is.gd/CIdCM7 - if there is no corresponding
  entry on spdx.org/licenses use the proprietary SUSE- prefix until the
  license is accepted upstream</changelog>
  <changelog author="mvyskocil@suse.com" date="1380888000">- Update to 3.0.4
  * too many changes to list, see CHANGES file
- Dropped pointless patches:
  * alog-bufferoverflow.patch
  * gcc4.dif
  * gfortran.patch
  * mpeinstall.patch
  * mpich-1.2.6.dif
  * mpich-1.2.6_implicit_declarations.diff
  * mpich-1.2.6-limits.patch
  * mpich-1.2.7_bsendutil2.c_uninitialized_variables.patch
  * mpich-1.2.7p1-iostream.dif
  * mpich-fix_headers.diff
  * mpich-hostent.patch
  * mpich-mpiman.patch
- Add mpich-modules.patch (from Fedora)
- Add package autoload installs mpich's profiles
- Moved documentation to doc subpackage
- Call make check during build</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1420718400">- Update to 3.1.3
  * see CHANGES file for all details, some pertinent changes are:
  - [3.1.2] MPI-3 support for Blue Gene/Q and ppc64le support.
  - [3.1.2] Fixes and testcases for Fortran 2008 bindings.
  - [3.1.1] Removal of the mpd process manager.
  - [3.1] MPICH now supports operations on very large datatypes (those that
    describe more than 32 bits of data).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499083200">- Fix compilation for aarch64
- Build multiple flavour of mpich (psm, psm2, tessuite)
- Update to mpich 3.2
  * see CHANGES file for all details, some pertinent changes are:
  - Added support for MPI-3.1 features including nonblocking collective I/O,
    address manipulation routines, thread-safety for MPI initialization,
    pre-init functionality, and new MPI_T routines to look up variables
    by name.
  - Fortran 2008 bindings are enabled by default and fully supported.
  - Completely revamped RMA infrastructure including several
    scalability improvements, performance improvements, and bug fixes.
  - Added experimental support for Open Fabrics Interfaces (OFI) version 1.0.0.
    https://github.com/ofiwg/libfabric (thanks to Intel for code contribution)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499256000">- Register mpich package to mpi-selector
- Remove redondant configure options already passed by %configure</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947200">- Disable rpath in pkgconfig files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947201">- Add LD_LIBRARY_PATH to mpivars.sh and mpivars.csh</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Drop unnecessary dependency to xorg-x11-devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1509019200">- Add HPC specific build targets using environment modules (Fate#323977).</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Fix mpich HPC installation path in spec file.
- Fix hpc macros: add %mpich_requires.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Update to mpich 3.2.1
  - Bug fixes
  - No release notes available</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="eich@suse.com" date="1524398400">- Remove 'BuildRequires: Modules' for HPC builds: it conflicts
  with lmod (boo#1089970).</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-mpich:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in postun scriptlet</changelog>
</package>
<package pkgid="71700ea990f74830dde7ffcd4f6f50d791f4f48ada9c4a71021b145e94215fef" name="mpich_3_2_1-gnu-hpc-devel" arch="x86_64">
  <version epoch="0" ver="3.2.1" rel="lp150.5.3.1"/>
  <changelog author="ro@suse.de" date="1290600000">- compress manpages ourselves
  (Check is gone and brp-compress does not look under /opt)</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1330948800">- license update: SUSE-Permissive
  Use a license from http://is.gd/CIdCM7 - if there is no corresponding
  entry on spdx.org/licenses use the proprietary SUSE- prefix until the
  license is accepted upstream</changelog>
  <changelog author="mvyskocil@suse.com" date="1380888000">- Update to 3.0.4
  * too many changes to list, see CHANGES file
- Dropped pointless patches:
  * alog-bufferoverflow.patch
  * gcc4.dif
  * gfortran.patch
  * mpeinstall.patch
  * mpich-1.2.6.dif
  * mpich-1.2.6_implicit_declarations.diff
  * mpich-1.2.6-limits.patch
  * mpich-1.2.7_bsendutil2.c_uninitialized_variables.patch
  * mpich-1.2.7p1-iostream.dif
  * mpich-fix_headers.diff
  * mpich-hostent.patch
  * mpich-mpiman.patch
- Add mpich-modules.patch (from Fedora)
- Add package autoload installs mpich's profiles
- Moved documentation to doc subpackage
- Call make check during build</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1420718400">- Update to 3.1.3
  * see CHANGES file for all details, some pertinent changes are:
  - [3.1.2] MPI-3 support for Blue Gene/Q and ppc64le support.
  - [3.1.2] Fixes and testcases for Fortran 2008 bindings.
  - [3.1.1] Removal of the mpd process manager.
  - [3.1] MPICH now supports operations on very large datatypes (those that
    describe more than 32 bits of data).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499083200">- Fix compilation for aarch64
- Build multiple flavour of mpich (psm, psm2, tessuite)
- Update to mpich 3.2
  * see CHANGES file for all details, some pertinent changes are:
  - Added support for MPI-3.1 features including nonblocking collective I/O,
    address manipulation routines, thread-safety for MPI initialization,
    pre-init functionality, and new MPI_T routines to look up variables
    by name.
  - Fortran 2008 bindings are enabled by default and fully supported.
  - Completely revamped RMA infrastructure including several
    scalability improvements, performance improvements, and bug fixes.
  - Added experimental support for Open Fabrics Interfaces (OFI) version 1.0.0.
    https://github.com/ofiwg/libfabric (thanks to Intel for code contribution)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499256000">- Register mpich package to mpi-selector
- Remove redondant configure options already passed by %configure</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947200">- Disable rpath in pkgconfig files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947201">- Add LD_LIBRARY_PATH to mpivars.sh and mpivars.csh</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Drop unnecessary dependency to xorg-x11-devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1509019200">- Add HPC specific build targets using environment modules (Fate#323977).</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Fix mpich HPC installation path in spec file.
- Fix hpc macros: add %mpich_requires.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Update to mpich 3.2.1
  - Bug fixes
  - No release notes available</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="eich@suse.com" date="1524398400">- Remove 'BuildRequires: Modules' for HPC builds: it conflicts
  with lmod (boo#1089970).</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-mpich:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in postun scriptlet</changelog>
</package>
<package pkgid="7d3a92f2ab9e8d71edeabf61c75af7aed27da272305186bfb0af6c6a06fbc11e" name="mpich_3_2_1-gnu-hpc-devel-static" arch="x86_64">
  <version epoch="0" ver="3.2.1" rel="lp150.5.3.1"/>
  <changelog author="ro@suse.de" date="1290600000">- compress manpages ourselves
  (Check is gone and brp-compress does not look under /opt)</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1330948800">- license update: SUSE-Permissive
  Use a license from http://is.gd/CIdCM7 - if there is no corresponding
  entry on spdx.org/licenses use the proprietary SUSE- prefix until the
  license is accepted upstream</changelog>
  <changelog author="mvyskocil@suse.com" date="1380888000">- Update to 3.0.4
  * too many changes to list, see CHANGES file
- Dropped pointless patches:
  * alog-bufferoverflow.patch
  * gcc4.dif
  * gfortran.patch
  * mpeinstall.patch
  * mpich-1.2.6.dif
  * mpich-1.2.6_implicit_declarations.diff
  * mpich-1.2.6-limits.patch
  * mpich-1.2.7_bsendutil2.c_uninitialized_variables.patch
  * mpich-1.2.7p1-iostream.dif
  * mpich-fix_headers.diff
  * mpich-hostent.patch
  * mpich-mpiman.patch
- Add mpich-modules.patch (from Fedora)
- Add package autoload installs mpich's profiles
- Moved documentation to doc subpackage
- Call make check during build</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1420718400">- Update to 3.1.3
  * see CHANGES file for all details, some pertinent changes are:
  - [3.1.2] MPI-3 support for Blue Gene/Q and ppc64le support.
  - [3.1.2] Fixes and testcases for Fortran 2008 bindings.
  - [3.1.1] Removal of the mpd process manager.
  - [3.1] MPICH now supports operations on very large datatypes (those that
    describe more than 32 bits of data).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499083200">- Fix compilation for aarch64
- Build multiple flavour of mpich (psm, psm2, tessuite)
- Update to mpich 3.2
  * see CHANGES file for all details, some pertinent changes are:
  - Added support for MPI-3.1 features including nonblocking collective I/O,
    address manipulation routines, thread-safety for MPI initialization,
    pre-init functionality, and new MPI_T routines to look up variables
    by name.
  - Fortran 2008 bindings are enabled by default and fully supported.
  - Completely revamped RMA infrastructure including several
    scalability improvements, performance improvements, and bug fixes.
  - Added experimental support for Open Fabrics Interfaces (OFI) version 1.0.0.
    https://github.com/ofiwg/libfabric (thanks to Intel for code contribution)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499256000">- Register mpich package to mpi-selector
- Remove redondant configure options already passed by %configure</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947200">- Disable rpath in pkgconfig files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947201">- Add LD_LIBRARY_PATH to mpivars.sh and mpivars.csh</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Drop unnecessary dependency to xorg-x11-devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1509019200">- Add HPC specific build targets using environment modules (Fate#323977).</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Fix mpich HPC installation path in spec file.
- Fix hpc macros: add %mpich_requires.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Update to mpich 3.2.1
  - Bug fixes
  - No release notes available</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="eich@suse.com" date="1524398400">- Remove 'BuildRequires: Modules' for HPC builds: it conflicts
  with lmod (boo#1089970).</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-mpich:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in postun scriptlet</changelog>
</package>
<package pkgid="a1528a92252028c6c1a8c234bcf8b79826f892ce1263a518eb0d0b0afdd4abae" name="mpich_3_2_1-gnu-hpc-macros-devel" arch="x86_64">
  <version epoch="0" ver="3.2.1" rel="lp150.5.3.1"/>
  <changelog author="ro@suse.de" date="1290600000">- compress manpages ourselves
  (Check is gone and brp-compress does not look under /opt)</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1330948800">- license update: SUSE-Permissive
  Use a license from http://is.gd/CIdCM7 - if there is no corresponding
  entry on spdx.org/licenses use the proprietary SUSE- prefix until the
  license is accepted upstream</changelog>
  <changelog author="mvyskocil@suse.com" date="1380888000">- Update to 3.0.4
  * too many changes to list, see CHANGES file
- Dropped pointless patches:
  * alog-bufferoverflow.patch
  * gcc4.dif
  * gfortran.patch
  * mpeinstall.patch
  * mpich-1.2.6.dif
  * mpich-1.2.6_implicit_declarations.diff
  * mpich-1.2.6-limits.patch
  * mpich-1.2.7_bsendutil2.c_uninitialized_variables.patch
  * mpich-1.2.7p1-iostream.dif
  * mpich-fix_headers.diff
  * mpich-hostent.patch
  * mpich-mpiman.patch
- Add mpich-modules.patch (from Fedora)
- Add package autoload installs mpich's profiles
- Moved documentation to doc subpackage
- Call make check during build</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1420718400">- Update to 3.1.3
  * see CHANGES file for all details, some pertinent changes are:
  - [3.1.2] MPI-3 support for Blue Gene/Q and ppc64le support.
  - [3.1.2] Fixes and testcases for Fortran 2008 bindings.
  - [3.1.1] Removal of the mpd process manager.
  - [3.1] MPICH now supports operations on very large datatypes (those that
    describe more than 32 bits of data).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499083200">- Fix compilation for aarch64
- Build multiple flavour of mpich (psm, psm2, tessuite)
- Update to mpich 3.2
  * see CHANGES file for all details, some pertinent changes are:
  - Added support for MPI-3.1 features including nonblocking collective I/O,
    address manipulation routines, thread-safety for MPI initialization,
    pre-init functionality, and new MPI_T routines to look up variables
    by name.
  - Fortran 2008 bindings are enabled by default and fully supported.
  - Completely revamped RMA infrastructure including several
    scalability improvements, performance improvements, and bug fixes.
  - Added experimental support for Open Fabrics Interfaces (OFI) version 1.0.0.
    https://github.com/ofiwg/libfabric (thanks to Intel for code contribution)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499256000">- Register mpich package to mpi-selector
- Remove redondant configure options already passed by %configure</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947200">- Disable rpath in pkgconfig files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947201">- Add LD_LIBRARY_PATH to mpivars.sh and mpivars.csh</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Drop unnecessary dependency to xorg-x11-devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1509019200">- Add HPC specific build targets using environment modules (Fate#323977).</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Fix mpich HPC installation path in spec file.
- Fix hpc macros: add %mpich_requires.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Update to mpich 3.2.1
  - Bug fixes
  - No release notes available</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="eich@suse.com" date="1524398400">- Remove 'BuildRequires: Modules' for HPC builds: it conflicts
  with lmod (boo#1089970).</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-mpich:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in postun scriptlet</changelog>
</package>
<package pkgid="09a314bc1034041a5462cb33953e44f3fb314557c0ba2c252618440d36bd9ea7" name="mpich_3_2_1-gnu-hpc-testsuite" arch="src">
  <version epoch="0" ver="3.2.1" rel="lp150.5.3.1"/>
  <changelog author="ro@suse.de" date="1290600000">- compress manpages ourselves
  (Check is gone and brp-compress does not look under /opt)</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1330948800">- license update: SUSE-Permissive
  Use a license from http://is.gd/CIdCM7 - if there is no corresponding
  entry on spdx.org/licenses use the proprietary SUSE- prefix until the
  license is accepted upstream</changelog>
  <changelog author="mvyskocil@suse.com" date="1380888000">- Update to 3.0.4
  * too many changes to list, see CHANGES file
- Dropped pointless patches:
  * alog-bufferoverflow.patch
  * gcc4.dif
  * gfortran.patch
  * mpeinstall.patch
  * mpich-1.2.6.dif
  * mpich-1.2.6_implicit_declarations.diff
  * mpich-1.2.6-limits.patch
  * mpich-1.2.7_bsendutil2.c_uninitialized_variables.patch
  * mpich-1.2.7p1-iostream.dif
  * mpich-fix_headers.diff
  * mpich-hostent.patch
  * mpich-mpiman.patch
- Add mpich-modules.patch (from Fedora)
- Add package autoload installs mpich's profiles
- Moved documentation to doc subpackage
- Call make check during build</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1420718400">- Update to 3.1.3
  * see CHANGES file for all details, some pertinent changes are:
  - [3.1.2] MPI-3 support for Blue Gene/Q and ppc64le support.
  - [3.1.2] Fixes and testcases for Fortran 2008 bindings.
  - [3.1.1] Removal of the mpd process manager.
  - [3.1] MPICH now supports operations on very large datatypes (those that
    describe more than 32 bits of data).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499083200">- Fix compilation for aarch64
- Build multiple flavour of mpich (psm, psm2, tessuite)
- Update to mpich 3.2
  * see CHANGES file for all details, some pertinent changes are:
  - Added support for MPI-3.1 features including nonblocking collective I/O,
    address manipulation routines, thread-safety for MPI initialization,
    pre-init functionality, and new MPI_T routines to look up variables
    by name.
  - Fortran 2008 bindings are enabled by default and fully supported.
  - Completely revamped RMA infrastructure including several
    scalability improvements, performance improvements, and bug fixes.
  - Added experimental support for Open Fabrics Interfaces (OFI) version 1.0.0.
    https://github.com/ofiwg/libfabric (thanks to Intel for code contribution)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499256000">- Register mpich package to mpi-selector
- Remove redondant configure options already passed by %configure</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947200">- Disable rpath in pkgconfig files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1499947201">- Add LD_LIBRARY_PATH to mpivars.sh and mpivars.csh</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Drop unnecessary dependency to xorg-x11-devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1509019200">- Add HPC specific build targets using environment modules (Fate#323977).</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Fix mpich HPC installation path in spec file.
- Fix hpc macros: add %mpich_requires.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Update to mpich 3.2.1
  - Bug fixes
  - No release notes available</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="eich@suse.com" date="1524398400">- Remove 'BuildRequires: Modules' for HPC builds: it conflicts
  with lmod (boo#1089970).</changelog>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-mpich:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in postun scriptlet</changelog>
</package>
<package pkgid="9dcee022851a2fb2f4e7d32af729b8a4fea0b1f81c3aee0e54a90ebfcc9565f7" name="multipath-tools" arch="src">
  <version epoch="0" ver="0.7.3+102+suse.be95116" rel="lp150.2.3.1"/>
  <changelog author="mwilck@suse.com" date="1516363200">- Update to version 0.7.3+30+suse.6b5ed839:
  * multipath.rules: temporary rule to obtain ID_WWN for NVMe
  (bsc#1076828)
  * libmultipath: ignore natively multipathed NVME devices
  (bsc#1076828)
  * multipath.rules: handle NVME devices (bsc#1076828)
  * FIX "libmultipath: hwtable: multibus for NetApp NVMe-FC"
  (bsc#1073319)
  * libmultipath: increase path product_id/rev field size for NVMe
  (bsc#1073319)</changelog>
  <changelog author="mwilck@suse.com" date="1516968000">- Update to version 0.7.3+31+suse.6804bb73f72d:
  * libmultipath: hwtable: no_path_retry="queue" for NetApp NVMe
  (bsc#1073319)</changelog>
  <changelog author="mwilck@suse.com" date="1517313600">- Update to version 0.7.3+38+suse.a16beed5280a:
  * kpartx: don't delete partitions from partitions (bsc#1078362)
  * hwtable: add latest updates (bsc#1078363)
  * multipathd.service: set TasksMax=infinity (bsc#1060616)</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- Fix whitespace in dracut conf file (bsc#1080562)</changelog>
  <changelog author="mwilck@suse.com" date="1519300800">- Update to version 0.7.3+52+suse.08a969b7fce0:
- Add limited support for displaying native NVMe multipath
  (bsc#1082419)
  * libmultipath: foreign/nvme: implement path display
  * multipathd: use foreign API
  * multipath: use foreign API
  * libmultipath/foreign: nvme foreign library
  * libmultipath/print: add "%G - foreign" wildcard
  * libmultipath: API for foreign multipath handling
  * libmultipath: print: use generic API for get_x_layout()
  * libmultipath: print: convert API to generic data type
  * libmultipath: "generic multipath" interface
  * libmultipath: add vector_convert()
  * libmultipath: add vector_free_const()
  * libmultipath: get rid of selector "hack" in print.c
- Fix locking errors detected by coverity check (bsc#1082418)
  * checkers/rbd: missing pthread_lock() on failure path
  * libmultipath: fix deadlock in tur.c</changelog>
  <changelog author="mwilck@suse.com" date="1519646400">- Update to version 0.7.3+53+suse.140f4937e9e7:
  * libmultipath: fix wrong output of "multipath -t" (bsc#1082835)</changelog>
  <changelog author="mwilck@suse.com" date="1521547200">- Update to version 0.7.3+57+suse.bb6be4c8b4ca:
  * multipathd: fix signal blocking logic (bsc#1086025)
  * multipath-tools: handle exit signal immediately (bsc#1086025)
  * multipath: fix DEF_TIMEOUT use (bsc#1086014)
  * multipath-tools: foreign/NVME implementation v2 (upstream accepted)
    (bsc#1082419)</changelog>
  <changelog author="mwilck@suse.com" date="1521633600">- Update to version 0.7.3+59+suse.1b6191c26774:
  * libmultipath: don't reject maps with undefined prio (bsc#1085212,
  bsc#1075129)
  * multipathd: handle errors in uxlsnr as fatal (bsc#1086025)</changelog>
  <changelog author="mwilck@suse.com" date="1522238400">- Update to version 0.7.3+60+suse.46ac839:
  * libmultipath/hwtable: don't hard-code ALUA for IBM IPR
  (bsc#1085212, bsc#1075129)</changelog>
  <changelog author="mwilck@suse.com" date="1522238401">- Fixed license tags in spec file
  * multipath tools / libmultipath is GPL-2.0-only
  * libmpathcmd is LGPL-2.0-or-later
  * libdmmp is GPL-3.0-or-later
  * adopt SPDX format.</changelog>
  <changelog author="mwilck@suse.com" date="1523016000">- Update to version 0.7.3+61+suse.d4d0494:
  * 11-dm-mpath.rules: dont't run "multipath -U" during coldplug
  (bsc#1084748)</changelog>
  <changelog author="mwilck@suse.com" date="1523361600">- No functional changes, just licenses
- Spec file: fix %license tags and info after closer inspection
  (bsc#1088801)
  * kpartx is under GPL-2.0-only
  * rbd is under LGPL-2.1-only
- Update to version 0.7.3+66+suse.dc5fe2d: Fix licensing info (bsc#1088801)
  * Added fossology assessment as README.licenses
  * multipath-tools: create LICENSES dir with the text of all used licences</changelog>
  <changelog author="mwilck@suse.com" date="1523361601">- No functional changes
  * fixed SPDX syntax (and -&gt; AND)
  * added /usr/share/licenses</changelog>
  <changelog author="mwilck@suse.com" date="1523361602">- No functional changes
- Fixed rpmlint warnings (bsc#1088946)
  * multipath-tools-devel: moved .so files to /usr/lib[64]
  * added version dependencies for -devel packages</changelog>
  <changelog author="mwilck@suse.com" date="1523534400">- Update to version 0.7.3+67+suse.8f0c27b:
  * disable nvme foreign library (bsc#1089353)</changelog>
  <changelog author="mwilck@suse.com" date="1530187200">- Update to version 0.7.3+79+suse.4b9f3ee:
  * multipath: don't start multipathd unnecessarily (bsc#1098177)
  * (lib)mpathpersist: use O_RDONLY file descriptors (bsc#1093220)
  * libmpathpersist: fix byte swapping for big endian systems (bsc#1099036)
  * libmultipath: add (get|put)_unaligned_be64 (bsc#1099036)
  * libmpathpersist: fix stack overflow in mpath_format_readfullstatus() (bsc#1099007)
  * libmpathpersist: fix typo in mpath_format_readfullstatus (bsc#1099007)
  * libmpathpersist: remove duplicate test in readfullstatus (bsc#1099007)
  * libmpathpersist: decrease log level of various messages (bsc#1099007)
  * Introduce the ibmultipath/unaligned.h header file (bsc#1099036)
  * libmultipath: Fix sgio_get_vpd() (bsc#1099484)
  * multipathd: fix reservation_key check (1099008)
  * libmultipath: avoid error messages from RDAC check (bsc#1075539)</changelog>
  <changelog author="mwilck@suse.com" date="1530187201">- Update to version 0.7.3+80+suse.6ccc1b0:
  * libmultipath: allow sysfs_pathinfo to return SKIPPED (bsc#1098458)</changelog>
  <changelog author="mwilck@suse.com" date="1538568000">- Update to version 0.7.3+99+suse.f3d8614:
  * multipathd: try SCSI persistent reservations for SCSI only
  (bsc#1108875)
  * libmultipath: allow sysfs_pathinfo to return SKIPPED (bsc#1098458)
  * multipathd: fix memory leak on error in configure (bsc#1110418)
  * multipathd: minor fixes (bsc#1110418)
  * multipathd: function return value tweaks (bsc#1110418)
  * libmutipath: don't use malformed uevents (bsc#1110418)
  * libmultipath: fix null dereference int alloc_path_group (bsc#1110418)
  * libmultipath: fix length issues in get_vpd_sgio (bsc#1110418)
  * libmultipath: fix gcc 8.1 "truncated output" warnings (bsc#1099007)
  * (lib)mpathpersist: use O_RDONLY file descriptors (bsc#1093220)
  * libmpathpersist: fix byte swapping for big endian systems (bsc#1099036)
  * libmultipath: add (get|put)_unaligned_be64 (bsc#1099036)
  * libmpathpersist: fix stack overflow in mpath_format_readfullstatus()
  (bsc#1099007)
  * libmpathpersist: fix typo in mpath_format_readfullstatus (bsc#1099007)
  * libmpathpersist: remove duplicate test in readfullstatus (bsc#1099007)
  * libmultipath: print correct default for delay_*_checks
  (bsc#1110418, bsc#1099026)
  * libmultipath: fix memory leak in process_config_dir() (bsc#1110352)
  * multipathd: register threads that use rcu calls (bsc#1110418)
  * multipathd: use nanosleep for strict timing (bsc#1110418)
  * libmultipath: fix log_pthread processing (bsc#1110418)
  * libmultipath: set dm_conf_verbosity (bsc#1110418)
  * libmultipath: fix basenamecpy (bsc#1110418)
  * libmultipath: get_uid: check VPD pages for SCSI only (bsc#1108728)
  * libmultipath: get_uid: don't quit prematurely without udev
  (bsc#1108728)
  * multipath: print sysfs state in fast list mode (bsc#1110354)
  * multipathd: release uxsocket and resource when cancel thread (bsc#1110355)
  * libmultipath: fix gcc 8.1 "truncated output" warnings (bsc#1099007)</changelog>
  <changelog author="mwilck@suse.com" date="1542196800">- Update to version 0.7.3+101+suse.beb7d7b:
  * multipathd: decrease log level of uevent messages (bsc#1110586)
  * libmultipath: pathinfo: skip hidden devices (bsc#1110586)</changelog>
  <changelog author="mwilck@suse.com" date="1543233600">- Update to version 0.7.3+102+suse.be95116:
  * libmpathpersist: fix off-by-one error in PRIN length check
  (bsc#1099007)</changelog>
</package>
<package pkgid="a9d967d5502ab4111567c32694e9e5056e5e3ad0dbf6629b7dbae89658174d4d" name="multipath-tools" arch="x86_64">
  <version epoch="0" ver="0.7.3+102+suse.be95116" rel="lp150.2.3.1"/>
  <changelog author="mwilck@suse.com" date="1516363200">- Update to version 0.7.3+30+suse.6b5ed839:
  * multipath.rules: temporary rule to obtain ID_WWN for NVMe
  (bsc#1076828)
  * libmultipath: ignore natively multipathed NVME devices
  (bsc#1076828)
  * multipath.rules: handle NVME devices (bsc#1076828)
  * FIX "libmultipath: hwtable: multibus for NetApp NVMe-FC"
  (bsc#1073319)
  * libmultipath: increase path product_id/rev field size for NVMe
  (bsc#1073319)</changelog>
  <changelog author="mwilck@suse.com" date="1516968000">- Update to version 0.7.3+31+suse.6804bb73f72d:
  * libmultipath: hwtable: no_path_retry="queue" for NetApp NVMe
  (bsc#1073319)</changelog>
  <changelog author="mwilck@suse.com" date="1517313600">- Update to version 0.7.3+38+suse.a16beed5280a:
  * kpartx: don't delete partitions from partitions (bsc#1078362)
  * hwtable: add latest updates (bsc#1078363)
  * multipathd.service: set TasksMax=infinity (bsc#1060616)</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- Fix whitespace in dracut conf file (bsc#1080562)</changelog>
  <changelog author="mwilck@suse.com" date="1519300800">- Update to version 0.7.3+52+suse.08a969b7fce0:
- Add limited support for displaying native NVMe multipath
  (bsc#1082419)
  * libmultipath: foreign/nvme: implement path display
  * multipathd: use foreign API
  * multipath: use foreign API
  * libmultipath/foreign: nvme foreign library
  * libmultipath/print: add "%G - foreign" wildcard
  * libmultipath: API for foreign multipath handling
  * libmultipath: print: use generic API for get_x_layout()
  * libmultipath: print: convert API to generic data type
  * libmultipath: "generic multipath" interface
  * libmultipath: add vector_convert()
  * libmultipath: add vector_free_const()
  * libmultipath: get rid of selector "hack" in print.c
- Fix locking errors detected by coverity check (bsc#1082418)
  * checkers/rbd: missing pthread_lock() on failure path
  * libmultipath: fix deadlock in tur.c</changelog>
  <changelog author="mwilck@suse.com" date="1519646400">- Update to version 0.7.3+53+suse.140f4937e9e7:
  * libmultipath: fix wrong output of "multipath -t" (bsc#1082835)</changelog>
  <changelog author="mwilck@suse.com" date="1521547200">- Update to version 0.7.3+57+suse.bb6be4c8b4ca:
  * multipathd: fix signal blocking logic (bsc#1086025)
  * multipath-tools: handle exit signal immediately (bsc#1086025)
  * multipath: fix DEF_TIMEOUT use (bsc#1086014)
  * multipath-tools: foreign/NVME implementation v2 (upstream accepted)
    (bsc#1082419)</changelog>
  <changelog author="mwilck@suse.com" date="1521633600">- Update to version 0.7.3+59+suse.1b6191c26774:
  * libmultipath: don't reject maps with undefined prio (bsc#1085212,
  bsc#1075129)
  * multipathd: handle errors in uxlsnr as fatal (bsc#1086025)</changelog>
  <changelog author="mwilck@suse.com" date="1522238400">- Update to version 0.7.3+60+suse.46ac839:
  * libmultipath/hwtable: don't hard-code ALUA for IBM IPR
  (bsc#1085212, bsc#1075129)</changelog>
  <changelog author="mwilck@suse.com" date="1522238401">- Fixed license tags in spec file
  * multipath tools / libmultipath is GPL-2.0-only
  * libmpathcmd is LGPL-2.0-or-later
  * libdmmp is GPL-3.0-or-later
  * adopt SPDX format.</changelog>
  <changelog author="mwilck@suse.com" date="1523016000">- Update to version 0.7.3+61+suse.d4d0494:
  * 11-dm-mpath.rules: dont't run "multipath -U" during coldplug
  (bsc#1084748)</changelog>
  <changelog author="mwilck@suse.com" date="1523361600">- No functional changes, just licenses
- Spec file: fix %license tags and info after closer inspection
  (bsc#1088801)
  * kpartx is under GPL-2.0-only
  * rbd is under LGPL-2.1-only
- Update to version 0.7.3+66+suse.dc5fe2d: Fix licensing info (bsc#1088801)
  * Added fossology assessment as README.licenses
  * multipath-tools: create LICENSES dir with the text of all used licences</changelog>
  <changelog author="mwilck@suse.com" date="1523361601">- No functional changes
  * fixed SPDX syntax (and -&gt; AND)
  * added /usr/share/licenses</changelog>
  <changelog author="mwilck@suse.com" date="1523361602">- No functional changes
- Fixed rpmlint warnings (bsc#1088946)
  * multipath-tools-devel: moved .so files to /usr/lib[64]
  * added version dependencies for -devel packages</changelog>
  <changelog author="mwilck@suse.com" date="1523534400">- Update to version 0.7.3+67+suse.8f0c27b:
  * disable nvme foreign library (bsc#1089353)</changelog>
  <changelog author="mwilck@suse.com" date="1530187200">- Update to version 0.7.3+79+suse.4b9f3ee:
  * multipath: don't start multipathd unnecessarily (bsc#1098177)
  * (lib)mpathpersist: use O_RDONLY file descriptors (bsc#1093220)
  * libmpathpersist: fix byte swapping for big endian systems (bsc#1099036)
  * libmultipath: add (get|put)_unaligned_be64 (bsc#1099036)
  * libmpathpersist: fix stack overflow in mpath_format_readfullstatus() (bsc#1099007)
  * libmpathpersist: fix typo in mpath_format_readfullstatus (bsc#1099007)
  * libmpathpersist: remove duplicate test in readfullstatus (bsc#1099007)
  * libmpathpersist: decrease log level of various messages (bsc#1099007)
  * Introduce the ibmultipath/unaligned.h header file (bsc#1099036)
  * libmultipath: Fix sgio_get_vpd() (bsc#1099484)
  * multipathd: fix reservation_key check (1099008)
  * libmultipath: avoid error messages from RDAC check (bsc#1075539)</changelog>
  <changelog author="mwilck@suse.com" date="1530187201">- Update to version 0.7.3+80+suse.6ccc1b0:
  * libmultipath: allow sysfs_pathinfo to return SKIPPED (bsc#1098458)</changelog>
  <changelog author="mwilck@suse.com" date="1538568000">- Update to version 0.7.3+99+suse.f3d8614:
  * multipathd: try SCSI persistent reservations for SCSI only
  (bsc#1108875)
  * libmultipath: allow sysfs_pathinfo to return SKIPPED (bsc#1098458)
  * multipathd: fix memory leak on error in configure (bsc#1110418)
  * multipathd: minor fixes (bsc#1110418)
  * multipathd: function return value tweaks (bsc#1110418)
  * libmutipath: don't use malformed uevents (bsc#1110418)
  * libmultipath: fix null dereference int alloc_path_group (bsc#1110418)
  * libmultipath: fix length issues in get_vpd_sgio (bsc#1110418)
  * libmultipath: fix gcc 8.1 "truncated output" warnings (bsc#1099007)
  * (lib)mpathpersist: use O_RDONLY file descriptors (bsc#1093220)
  * libmpathpersist: fix byte swapping for big endian systems (bsc#1099036)
  * libmultipath: add (get|put)_unaligned_be64 (bsc#1099036)
  * libmpathpersist: fix stack overflow in mpath_format_readfullstatus()
  (bsc#1099007)
  * libmpathpersist: fix typo in mpath_format_readfullstatus (bsc#1099007)
  * libmpathpersist: remove duplicate test in readfullstatus (bsc#1099007)
  * libmultipath: print correct default for delay_*_checks
  (bsc#1110418, bsc#1099026)
  * libmultipath: fix memory leak in process_config_dir() (bsc#1110352)
  * multipathd: register threads that use rcu calls (bsc#1110418)
  * multipathd: use nanosleep for strict timing (bsc#1110418)
  * libmultipath: fix log_pthread processing (bsc#1110418)
  * libmultipath: set dm_conf_verbosity (bsc#1110418)
  * libmultipath: fix basenamecpy (bsc#1110418)
  * libmultipath: get_uid: check VPD pages for SCSI only (bsc#1108728)
  * libmultipath: get_uid: don't quit prematurely without udev
  (bsc#1108728)
  * multipath: print sysfs state in fast list mode (bsc#1110354)
  * multipathd: release uxsocket and resource when cancel thread (bsc#1110355)
  * libmultipath: fix gcc 8.1 "truncated output" warnings (bsc#1099007)</changelog>
  <changelog author="mwilck@suse.com" date="1542196800">- Update to version 0.7.3+101+suse.beb7d7b:
  * multipathd: decrease log level of uevent messages (bsc#1110586)
  * libmultipath: pathinfo: skip hidden devices (bsc#1110586)</changelog>
  <changelog author="mwilck@suse.com" date="1543233600">- Update to version 0.7.3+102+suse.be95116:
  * libmpathpersist: fix off-by-one error in PRIN length check
  (bsc#1099007)</changelog>
</package>
<package pkgid="2dd7ee60d3d2cf49ab7f423960d2d874f32ace412cc32d929aaf574d31c04080" name="multipath-tools-devel" arch="x86_64">
  <version epoch="0" ver="0.7.3+102+suse.be95116" rel="lp150.2.3.1"/>
  <changelog author="mwilck@suse.com" date="1516363200">- Update to version 0.7.3+30+suse.6b5ed839:
  * multipath.rules: temporary rule to obtain ID_WWN for NVMe
  (bsc#1076828)
  * libmultipath: ignore natively multipathed NVME devices
  (bsc#1076828)
  * multipath.rules: handle NVME devices (bsc#1076828)
  * FIX "libmultipath: hwtable: multibus for NetApp NVMe-FC"
  (bsc#1073319)
  * libmultipath: increase path product_id/rev field size for NVMe
  (bsc#1073319)</changelog>
  <changelog author="mwilck@suse.com" date="1516968000">- Update to version 0.7.3+31+suse.6804bb73f72d:
  * libmultipath: hwtable: no_path_retry="queue" for NetApp NVMe
  (bsc#1073319)</changelog>
  <changelog author="mwilck@suse.com" date="1517313600">- Update to version 0.7.3+38+suse.a16beed5280a:
  * kpartx: don't delete partitions from partitions (bsc#1078362)
  * hwtable: add latest updates (bsc#1078363)
  * multipathd.service: set TasksMax=infinity (bsc#1060616)</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- Fix whitespace in dracut conf file (bsc#1080562)</changelog>
  <changelog author="mwilck@suse.com" date="1519300800">- Update to version 0.7.3+52+suse.08a969b7fce0:
- Add limited support for displaying native NVMe multipath
  (bsc#1082419)
  * libmultipath: foreign/nvme: implement path display
  * multipathd: use foreign API
  * multipath: use foreign API
  * libmultipath/foreign: nvme foreign library
  * libmultipath/print: add "%G - foreign" wildcard
  * libmultipath: API for foreign multipath handling
  * libmultipath: print: use generic API for get_x_layout()
  * libmultipath: print: convert API to generic data type
  * libmultipath: "generic multipath" interface
  * libmultipath: add vector_convert()
  * libmultipath: add vector_free_const()
  * libmultipath: get rid of selector "hack" in print.c
- Fix locking errors detected by coverity check (bsc#1082418)
  * checkers/rbd: missing pthread_lock() on failure path
  * libmultipath: fix deadlock in tur.c</changelog>
  <changelog author="mwilck@suse.com" date="1519646400">- Update to version 0.7.3+53+suse.140f4937e9e7:
  * libmultipath: fix wrong output of "multipath -t" (bsc#1082835)</changelog>
  <changelog author="mwilck@suse.com" date="1521547200">- Update to version 0.7.3+57+suse.bb6be4c8b4ca:
  * multipathd: fix signal blocking logic (bsc#1086025)
  * multipath-tools: handle exit signal immediately (bsc#1086025)
  * multipath: fix DEF_TIMEOUT use (bsc#1086014)
  * multipath-tools: foreign/NVME implementation v2 (upstream accepted)
    (bsc#1082419)</changelog>
  <changelog author="mwilck@suse.com" date="1521633600">- Update to version 0.7.3+59+suse.1b6191c26774:
  * libmultipath: don't reject maps with undefined prio (bsc#1085212,
  bsc#1075129)
  * multipathd: handle errors in uxlsnr as fatal (bsc#1086025)</changelog>
  <changelog author="mwilck@suse.com" date="1522238400">- Update to version 0.7.3+60+suse.46ac839:
  * libmultipath/hwtable: don't hard-code ALUA for IBM IPR
  (bsc#1085212, bsc#1075129)</changelog>
  <changelog author="mwilck@suse.com" date="1522238401">- Fixed license tags in spec file
  * multipath tools / libmultipath is GPL-2.0-only
  * libmpathcmd is LGPL-2.0-or-later
  * libdmmp is GPL-3.0-or-later
  * adopt SPDX format.</changelog>
  <changelog author="mwilck@suse.com" date="1523016000">- Update to version 0.7.3+61+suse.d4d0494:
  * 11-dm-mpath.rules: dont't run "multipath -U" during coldplug
  (bsc#1084748)</changelog>
  <changelog author="mwilck@suse.com" date="1523361600">- No functional changes, just licenses
- Spec file: fix %license tags and info after closer inspection
  (bsc#1088801)
  * kpartx is under GPL-2.0-only
  * rbd is under LGPL-2.1-only
- Update to version 0.7.3+66+suse.dc5fe2d: Fix licensing info (bsc#1088801)
  * Added fossology assessment as README.licenses
  * multipath-tools: create LICENSES dir with the text of all used licences</changelog>
  <changelog author="mwilck@suse.com" date="1523361601">- No functional changes
  * fixed SPDX syntax (and -&gt; AND)
  * added /usr/share/licenses</changelog>
  <changelog author="mwilck@suse.com" date="1523361602">- No functional changes
- Fixed rpmlint warnings (bsc#1088946)
  * multipath-tools-devel: moved .so files to /usr/lib[64]
  * added version dependencies for -devel packages</changelog>
  <changelog author="mwilck@suse.com" date="1523534400">- Update to version 0.7.3+67+suse.8f0c27b:
  * disable nvme foreign library (bsc#1089353)</changelog>
  <changelog author="mwilck@suse.com" date="1530187200">- Update to version 0.7.3+79+suse.4b9f3ee:
  * multipath: don't start multipathd unnecessarily (bsc#1098177)
  * (lib)mpathpersist: use O_RDONLY file descriptors (bsc#1093220)
  * libmpathpersist: fix byte swapping for big endian systems (bsc#1099036)
  * libmultipath: add (get|put)_unaligned_be64 (bsc#1099036)
  * libmpathpersist: fix stack overflow in mpath_format_readfullstatus() (bsc#1099007)
  * libmpathpersist: fix typo in mpath_format_readfullstatus (bsc#1099007)
  * libmpathpersist: remove duplicate test in readfullstatus (bsc#1099007)
  * libmpathpersist: decrease log level of various messages (bsc#1099007)
  * Introduce the ibmultipath/unaligned.h header file (bsc#1099036)
  * libmultipath: Fix sgio_get_vpd() (bsc#1099484)
  * multipathd: fix reservation_key check (1099008)
  * libmultipath: avoid error messages from RDAC check (bsc#1075539)</changelog>
  <changelog author="mwilck@suse.com" date="1530187201">- Update to version 0.7.3+80+suse.6ccc1b0:
  * libmultipath: allow sysfs_pathinfo to return SKIPPED (bsc#1098458)</changelog>
  <changelog author="mwilck@suse.com" date="1538568000">- Update to version 0.7.3+99+suse.f3d8614:
  * multipathd: try SCSI persistent reservations for SCSI only
  (bsc#1108875)
  * libmultipath: allow sysfs_pathinfo to return SKIPPED (bsc#1098458)
  * multipathd: fix memory leak on error in configure (bsc#1110418)
  * multipathd: minor fixes (bsc#1110418)
  * multipathd: function return value tweaks (bsc#1110418)
  * libmutipath: don't use malformed uevents (bsc#1110418)
  * libmultipath: fix null dereference int alloc_path_group (bsc#1110418)
  * libmultipath: fix length issues in get_vpd_sgio (bsc#1110418)
  * libmultipath: fix gcc 8.1 "truncated output" warnings (bsc#1099007)
  * (lib)mpathpersist: use O_RDONLY file descriptors (bsc#1093220)
  * libmpathpersist: fix byte swapping for big endian systems (bsc#1099036)
  * libmultipath: add (get|put)_unaligned_be64 (bsc#1099036)
  * libmpathpersist: fix stack overflow in mpath_format_readfullstatus()
  (bsc#1099007)
  * libmpathpersist: fix typo in mpath_format_readfullstatus (bsc#1099007)
  * libmpathpersist: remove duplicate test in readfullstatus (bsc#1099007)
  * libmultipath: print correct default for delay_*_checks
  (bsc#1110418, bsc#1099026)
  * libmultipath: fix memory leak in process_config_dir() (bsc#1110352)
  * multipathd: register threads that use rcu calls (bsc#1110418)
  * multipathd: use nanosleep for strict timing (bsc#1110418)
  * libmultipath: fix log_pthread processing (bsc#1110418)
  * libmultipath: set dm_conf_verbosity (bsc#1110418)
  * libmultipath: fix basenamecpy (bsc#1110418)
  * libmultipath: get_uid: check VPD pages for SCSI only (bsc#1108728)
  * libmultipath: get_uid: don't quit prematurely without udev
  (bsc#1108728)
  * multipath: print sysfs state in fast list mode (bsc#1110354)
  * multipathd: release uxsocket and resource when cancel thread (bsc#1110355)
  * libmultipath: fix gcc 8.1 "truncated output" warnings (bsc#1099007)</changelog>
  <changelog author="mwilck@suse.com" date="1542196800">- Update to version 0.7.3+101+suse.beb7d7b:
  * multipathd: decrease log level of uevent messages (bsc#1110586)
  * libmultipath: pathinfo: skip hidden devices (bsc#1110586)</changelog>
  <changelog author="mwilck@suse.com" date="1543233600">- Update to version 0.7.3+102+suse.be95116:
  * libmpathpersist: fix off-by-one error in PRIN length check
  (bsc#1099007)</changelog>
</package>
<package pkgid="48503cca94bd2cc562ac25aa0be78656b66b374e2f40e0e0a6ec024f89e4f5d5" name="multipath-tools-rbd" arch="x86_64">
  <version epoch="0" ver="0.7.3+102+suse.be95116" rel="lp150.2.3.1"/>
  <changelog author="mwilck@suse.com" date="1516363200">- Update to version 0.7.3+30+suse.6b5ed839:
  * multipath.rules: temporary rule to obtain ID_WWN for NVMe
  (bsc#1076828)
  * libmultipath: ignore natively multipathed NVME devices
  (bsc#1076828)
  * multipath.rules: handle NVME devices (bsc#1076828)
  * FIX "libmultipath: hwtable: multibus for NetApp NVMe-FC"
  (bsc#1073319)
  * libmultipath: increase path product_id/rev field size for NVMe
  (bsc#1073319)</changelog>
  <changelog author="mwilck@suse.com" date="1516968000">- Update to version 0.7.3+31+suse.6804bb73f72d:
  * libmultipath: hwtable: no_path_retry="queue" for NetApp NVMe
  (bsc#1073319)</changelog>
  <changelog author="mwilck@suse.com" date="1517313600">- Update to version 0.7.3+38+suse.a16beed5280a:
  * kpartx: don't delete partitions from partitions (bsc#1078362)
  * hwtable: add latest updates (bsc#1078363)
  * multipathd.service: set TasksMax=infinity (bsc#1060616)</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- Fix whitespace in dracut conf file (bsc#1080562)</changelog>
  <changelog author="mwilck@suse.com" date="1519300800">- Update to version 0.7.3+52+suse.08a969b7fce0:
- Add limited support for displaying native NVMe multipath
  (bsc#1082419)
  * libmultipath: foreign/nvme: implement path display
  * multipathd: use foreign API
  * multipath: use foreign API
  * libmultipath/foreign: nvme foreign library
  * libmultipath/print: add "%G - foreign" wildcard
  * libmultipath: API for foreign multipath handling
  * libmultipath: print: use generic API for get_x_layout()
  * libmultipath: print: convert API to generic data type
  * libmultipath: "generic multipath" interface
  * libmultipath: add vector_convert()
  * libmultipath: add vector_free_const()
  * libmultipath: get rid of selector "hack" in print.c
- Fix locking errors detected by coverity check (bsc#1082418)
  * checkers/rbd: missing pthread_lock() on failure path
  * libmultipath: fix deadlock in tur.c</changelog>
  <changelog author="mwilck@suse.com" date="1519646400">- Update to version 0.7.3+53+suse.140f4937e9e7:
  * libmultipath: fix wrong output of "multipath -t" (bsc#1082835)</changelog>
  <changelog author="mwilck@suse.com" date="1521547200">- Update to version 0.7.3+57+suse.bb6be4c8b4ca:
  * multipathd: fix signal blocking logic (bsc#1086025)
  * multipath-tools: handle exit signal immediately (bsc#1086025)
  * multipath: fix DEF_TIMEOUT use (bsc#1086014)
  * multipath-tools: foreign/NVME implementation v2 (upstream accepted)
    (bsc#1082419)</changelog>
  <changelog author="mwilck@suse.com" date="1521633600">- Update to version 0.7.3+59+suse.1b6191c26774:
  * libmultipath: don't reject maps with undefined prio (bsc#1085212,
  bsc#1075129)
  * multipathd: handle errors in uxlsnr as fatal (bsc#1086025)</changelog>
  <changelog author="mwilck@suse.com" date="1522238400">- Update to version 0.7.3+60+suse.46ac839:
  * libmultipath/hwtable: don't hard-code ALUA for IBM IPR
  (bsc#1085212, bsc#1075129)</changelog>
  <changelog author="mwilck@suse.com" date="1522238401">- Fixed license tags in spec file
  * multipath tools / libmultipath is GPL-2.0-only
  * libmpathcmd is LGPL-2.0-or-later
  * libdmmp is GPL-3.0-or-later
  * adopt SPDX format.</changelog>
  <changelog author="mwilck@suse.com" date="1523016000">- Update to version 0.7.3+61+suse.d4d0494:
  * 11-dm-mpath.rules: dont't run "multipath -U" during coldplug
  (bsc#1084748)</changelog>
  <changelog author="mwilck@suse.com" date="1523361600">- No functional changes, just licenses
- Spec file: fix %license tags and info after closer inspection
  (bsc#1088801)
  * kpartx is under GPL-2.0-only
  * rbd is under LGPL-2.1-only
- Update to version 0.7.3+66+suse.dc5fe2d: Fix licensing info (bsc#1088801)
  * Added fossology assessment as README.licenses
  * multipath-tools: create LICENSES dir with the text of all used licences</changelog>
  <changelog author="mwilck@suse.com" date="1523361601">- No functional changes
  * fixed SPDX syntax (and -&gt; AND)
  * added /usr/share/licenses</changelog>
  <changelog author="mwilck@suse.com" date="1523361602">- No functional changes
- Fixed rpmlint warnings (bsc#1088946)
  * multipath-tools-devel: moved .so files to /usr/lib[64]
  * added version dependencies for -devel packages</changelog>
  <changelog author="mwilck@suse.com" date="1523534400">- Update to version 0.7.3+67+suse.8f0c27b:
  * disable nvme foreign library (bsc#1089353)</changelog>
  <changelog author="mwilck@suse.com" date="1530187200">- Update to version 0.7.3+79+suse.4b9f3ee:
  * multipath: don't start multipathd unnecessarily (bsc#1098177)
  * (lib)mpathpersist: use O_RDONLY file descriptors (bsc#1093220)
  * libmpathpersist: fix byte swapping for big endian systems (bsc#1099036)
  * libmultipath: add (get|put)_unaligned_be64 (bsc#1099036)
  * libmpathpersist: fix stack overflow in mpath_format_readfullstatus() (bsc#1099007)
  * libmpathpersist: fix typo in mpath_format_readfullstatus (bsc#1099007)
  * libmpathpersist: remove duplicate test in readfullstatus (bsc#1099007)
  * libmpathpersist: decrease log level of various messages (bsc#1099007)
  * Introduce the ibmultipath/unaligned.h header file (bsc#1099036)
  * libmultipath: Fix sgio_get_vpd() (bsc#1099484)
  * multipathd: fix reservation_key check (1099008)
  * libmultipath: avoid error messages from RDAC check (bsc#1075539)</changelog>
  <changelog author="mwilck@suse.com" date="1530187201">- Update to version 0.7.3+80+suse.6ccc1b0:
  * libmultipath: allow sysfs_pathinfo to return SKIPPED (bsc#1098458)</changelog>
  <changelog author="mwilck@suse.com" date="1538568000">- Update to version 0.7.3+99+suse.f3d8614:
  * multipathd: try SCSI persistent reservations for SCSI only
  (bsc#1108875)
  * libmultipath: allow sysfs_pathinfo to return SKIPPED (bsc#1098458)
  * multipathd: fix memory leak on error in configure (bsc#1110418)
  * multipathd: minor fixes (bsc#1110418)
  * multipathd: function return value tweaks (bsc#1110418)
  * libmutipath: don't use malformed uevents (bsc#1110418)
  * libmultipath: fix null dereference int alloc_path_group (bsc#1110418)
  * libmultipath: fix length issues in get_vpd_sgio (bsc#1110418)
  * libmultipath: fix gcc 8.1 "truncated output" warnings (bsc#1099007)
  * (lib)mpathpersist: use O_RDONLY file descriptors (bsc#1093220)
  * libmpathpersist: fix byte swapping for big endian systems (bsc#1099036)
  * libmultipath: add (get|put)_unaligned_be64 (bsc#1099036)
  * libmpathpersist: fix stack overflow in mpath_format_readfullstatus()
  (bsc#1099007)
  * libmpathpersist: fix typo in mpath_format_readfullstatus (bsc#1099007)
  * libmpathpersist: remove duplicate test in readfullstatus (bsc#1099007)
  * libmultipath: print correct default for delay_*_checks
  (bsc#1110418, bsc#1099026)
  * libmultipath: fix memory leak in process_config_dir() (bsc#1110352)
  * multipathd: register threads that use rcu calls (bsc#1110418)
  * multipathd: use nanosleep for strict timing (bsc#1110418)
  * libmultipath: fix log_pthread processing (bsc#1110418)
  * libmultipath: set dm_conf_verbosity (bsc#1110418)
  * libmultipath: fix basenamecpy (bsc#1110418)
  * libmultipath: get_uid: check VPD pages for SCSI only (bsc#1108728)
  * libmultipath: get_uid: don't quit prematurely without udev
  (bsc#1108728)
  * multipath: print sysfs state in fast list mode (bsc#1110354)
  * multipathd: release uxsocket and resource when cancel thread (bsc#1110355)
  * libmultipath: fix gcc 8.1 "truncated output" warnings (bsc#1099007)</changelog>
  <changelog author="mwilck@suse.com" date="1542196800">- Update to version 0.7.3+101+suse.beb7d7b:
  * multipathd: decrease log level of uevent messages (bsc#1110586)
  * libmultipath: pathinfo: skip hidden devices (bsc#1110586)</changelog>
  <changelog author="mwilck@suse.com" date="1543233600">- Update to version 0.7.3+102+suse.be95116:
  * libmpathpersist: fix off-by-one error in PRIN length check
  (bsc#1099007)</changelog>
</package>
<package pkgid="3b9cb795beb2b2b55cf13f9e0c977b70c403c756a53b063867f6fa5c7a455bf9" name="mupdf" arch="src">
  <version epoch="0" ver="1.12.0" rel="lp150.3.3.1"/>
  <changelog author="idonmez@suse.com" date="1479988800">- Update to version 1.10
  * FictionBook (FB2) e-book support.
  * Simple SVG parser (a small subset of SVG only).
  * mutool convert: a new document conversion tool and interface.
  * Multi-threaded rendering in mudraw.
  * Updated base 14 fonts from URW.
  * New CJK font with language specific variants.
  * Hyperlink support in EPUB.
  * Alpha channel is now optional in pixmaps.
  * More aggressive purging of cached objects.
  * Partial image decoding for lower memory use when banding.
  * Reduced default set of built-in CMap tables to the minimum required.
  * FZ_ENABLE_PDF, _XPS, _JS, to disable features at compile time.
  * Function level linking.
  * Dropped pdf object generation numbers from public interfaces.
  * Simplified PDF page, xobject, and annotation internals.
  * Closing and freeing devices and writers are now separate steps.
  * Improved PDF annotation editing interface (still a work in progress).
  * Document writer interface.
  * Banded image writer interface.
- Drop CVE-2016-6265.patch and mupdf-fix-openjpeg2.patch,
  both are fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1482235200">- Update to version 1.10a
  * A bug with mutool and saving PDF files using the 'ascii'
    option has been fixed.
- Add fix-openjpeg-flags.patch to stop defining OPJ_STATIC,
  this is https://github.com/uclouvain/openjpeg/issues/802</changelog>
  <changelog author="idonmez@suse.com" date="1485259200">- Add CVE-2016-10132.patch, CVE-2016-10133.patch and
  CVE-2016-10141.patch to fix CVE-2016-10132, CVE-2016-10133 and
  CVE-2016-10141 bsc#1019877</changelog>
  <changelog author="idonmez@suse.com" date="1486382400">- Add CVE-2017-5627.patch and CVE-2017-5628.patch fixes
  CVE-2017-5627 and CVE-2017-5628 bsc#1022503 bsc#1022504</changelog>
  <changelog author="idonmez@suse.com" date="1486728000">- Add CVE-2017-5896.patch to fix a heap overflow
  CVE-2017-5896 bsc#1023761 bsc#1024679</changelog>
  <changelog author="idonmez@suse.com" date="1486728001">- Add bsc1023760.patch to fix writing svg output to stdout if no
  output specified bsc#1023760</changelog>
  <changelog author="idonmez@suse.com" date="1493294400">- mupdf is not a terminal app boo#1036637</changelog>
  <changelog author="bwiedemann@suse.com" date="1496059200">- Add reproducible.patch to sort input files to make build reproducible
  (boo#1041090)</changelog>
  <changelog author="idonmez@suse.com" date="1501761600">- Add CVE-2016-10221.patch, CVE-2016-8728.patch and
  CVE-2017-7976.patch to fix CVE-2016-10221, CVE-2016-8728,
  CVE-2016-8729 and CVE-2017-7976
  bsc#1032140 bsc#1039850 bsc#1052029</changelog>
  <changelog author="aloisio@gmx.com" date="1510315200">- Update to version 1.11
  * This is primarily a bug fix release.
  * PDF portfolio support with command line tool "mutool
    portfolio".
  * Add callbacks to load fallback fonts from the system.
  * Use system fonts in Android to reduce install size.
  * Flag to disable publisher styles in EPUB layout.
  * Improved SVG output.
- Refreshed fix-openjpeg-flags.patch and reproducible.patch
- Dropped CVE-2017-5896.patch, bsc1023760.patch,
  CVE-2016-10221.patch, CVE-2016-8728.patch, CVE-2017-7976.patch,
  CVE-2016-10132.patch, CVE-2016-10133.patch,
  CVE-2016-10141.patch, CVE-2017-5627.patch
  and CVE-2017-5628.patch (merged or adapted upstream)</changelog>
  <changelog author="avindra@opensuse.org" date="1515931200">- Update to version 1.12.0
  * Color Management:
    + LCMS2 library for color management
    + CMYK rendering with overprint simulation
    + Spot color rendering
    + Transparency rendering fixes
  * Structured text output improvements:
    + Reworked structured text API
    + Faster text searching
    + Highlight and copy text by selecting lines instead of by
    area
    + New semantic XHTML output format
    + New layout preserving HTML output format
  * Features and improvements:
    + Improved non-AA rendering with new scan converter
    + Improved LARGEFILE support
    + Improved TIFF support
    + Improved documentation
    + PCLm output.
    + PSD output.
    + New "mutool trace" tool.
    + New "mutool sign" tool (work in progress).
    + Text redaction (work in progress).
    + Lots of bug fixes.
- Strip "-source" from tarball name
- Switch to xz release (13mb smaller)
- rebase fix-openjpeg-flags.patch
- drop reproducible.patch
  * fixed upstream in 081d4c72430e3077a05499c783d9fbe24361b368
- Fixes CVE-2017-15369 (bsc#1063413), CVE-2017-15587 (bsc#1064027)</changelog>
  <changelog author="idonmez@suse.com" date="1516622400">- Add CVE-2018-5686.patch to fix an infinite loop
  CVE-2018-5686 bsc#1075936</changelog>
  <changelog author="kbabioch@suse.com" date="1516708800">- Add CVE-2017-17858.patch to fix an heap-based buffer overflow
  CVE-2017-17858 bsc#1077161</changelog>
  <changelog author="kbabioch@suse.com" date="1517572800">- Add CVE-2018-6187.patch to fix a heap buffer overflow in in pdf-write.c
  in the do_pdf_save_document function (CVE-2018-6187 boo#1077407)</changelog>
  <changelog author="kbabioch@suse.com" date="1517572801">- Add CVE-2018-6544.patch to fix a DoS in pdf_load_obj_stm within in
  pdf/pdf-xref.c (CVE-2018-6544 boo#1079100)
- Add CVE-2018-6192.patch to fix a DoS in pdf_read_new_xref within
  pdf/pdf-xref.c via crafted PDF file (CVE-2018-6192 boo#1077755)</changelog>
  <changelog author="kbabioch@suse.com" date="1517572802">- CVE-2018-6192.patch: Use official fix from usptream (CVE-2018-6192
  boo#1077755)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- use freetype2-devel explictily as buildrequires</changelog>
  <changelog author="kbabioch@suse.com" date="1518436800">- Add CVE-2018-1000051.patch: Fix a Use After Free vulnerability in
  fz_keep_key_storable that can potentially result in DoS / remote
  code execution (CVE-2018-1000051 bsc#1080531)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518609600">- Remove xorg-x11-devel from buildrequires</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518609601">-mupdf-no-strip.patch: fix debuginfo generation</changelog>
</package>
<package pkgid="d9c1eee7ba322c4abc20591e5b82084bb4073056bbd57b72ca1872a81a99ab78" name="mupdf" arch="x86_64">
  <version epoch="0" ver="1.12.0" rel="lp150.3.3.1"/>
  <changelog author="idonmez@suse.com" date="1479988800">- Update to version 1.10
  * FictionBook (FB2) e-book support.
  * Simple SVG parser (a small subset of SVG only).
  * mutool convert: a new document conversion tool and interface.
  * Multi-threaded rendering in mudraw.
  * Updated base 14 fonts from URW.
  * New CJK font with language specific variants.
  * Hyperlink support in EPUB.
  * Alpha channel is now optional in pixmaps.
  * More aggressive purging of cached objects.
  * Partial image decoding for lower memory use when banding.
  * Reduced default set of built-in CMap tables to the minimum required.
  * FZ_ENABLE_PDF, _XPS, _JS, to disable features at compile time.
  * Function level linking.
  * Dropped pdf object generation numbers from public interfaces.
  * Simplified PDF page, xobject, and annotation internals.
  * Closing and freeing devices and writers are now separate steps.
  * Improved PDF annotation editing interface (still a work in progress).
  * Document writer interface.
  * Banded image writer interface.
- Drop CVE-2016-6265.patch and mupdf-fix-openjpeg2.patch,
  both are fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1482235200">- Update to version 1.10a
  * A bug with mutool and saving PDF files using the 'ascii'
    option has been fixed.
- Add fix-openjpeg-flags.patch to stop defining OPJ_STATIC,
  this is https://github.com/uclouvain/openjpeg/issues/802</changelog>
  <changelog author="idonmez@suse.com" date="1485259200">- Add CVE-2016-10132.patch, CVE-2016-10133.patch and
  CVE-2016-10141.patch to fix CVE-2016-10132, CVE-2016-10133 and
  CVE-2016-10141 bsc#1019877</changelog>
  <changelog author="idonmez@suse.com" date="1486382400">- Add CVE-2017-5627.patch and CVE-2017-5628.patch fixes
  CVE-2017-5627 and CVE-2017-5628 bsc#1022503 bsc#1022504</changelog>
  <changelog author="idonmez@suse.com" date="1486728000">- Add CVE-2017-5896.patch to fix a heap overflow
  CVE-2017-5896 bsc#1023761 bsc#1024679</changelog>
  <changelog author="idonmez@suse.com" date="1486728001">- Add bsc1023760.patch to fix writing svg output to stdout if no
  output specified bsc#1023760</changelog>
  <changelog author="idonmez@suse.com" date="1493294400">- mupdf is not a terminal app boo#1036637</changelog>
  <changelog author="bwiedemann@suse.com" date="1496059200">- Add reproducible.patch to sort input files to make build reproducible
  (boo#1041090)</changelog>
  <changelog author="idonmez@suse.com" date="1501761600">- Add CVE-2016-10221.patch, CVE-2016-8728.patch and
  CVE-2017-7976.patch to fix CVE-2016-10221, CVE-2016-8728,
  CVE-2016-8729 and CVE-2017-7976
  bsc#1032140 bsc#1039850 bsc#1052029</changelog>
  <changelog author="aloisio@gmx.com" date="1510315200">- Update to version 1.11
  * This is primarily a bug fix release.
  * PDF portfolio support with command line tool "mutool
    portfolio".
  * Add callbacks to load fallback fonts from the system.
  * Use system fonts in Android to reduce install size.
  * Flag to disable publisher styles in EPUB layout.
  * Improved SVG output.
- Refreshed fix-openjpeg-flags.patch and reproducible.patch
- Dropped CVE-2017-5896.patch, bsc1023760.patch,
  CVE-2016-10221.patch, CVE-2016-8728.patch, CVE-2017-7976.patch,
  CVE-2016-10132.patch, CVE-2016-10133.patch,
  CVE-2016-10141.patch, CVE-2017-5627.patch
  and CVE-2017-5628.patch (merged or adapted upstream)</changelog>
  <changelog author="avindra@opensuse.org" date="1515931200">- Update to version 1.12.0
  * Color Management:
    + LCMS2 library for color management
    + CMYK rendering with overprint simulation
    + Spot color rendering
    + Transparency rendering fixes
  * Structured text output improvements:
    + Reworked structured text API
    + Faster text searching
    + Highlight and copy text by selecting lines instead of by
    area
    + New semantic XHTML output format
    + New layout preserving HTML output format
  * Features and improvements:
    + Improved non-AA rendering with new scan converter
    + Improved LARGEFILE support
    + Improved TIFF support
    + Improved documentation
    + PCLm output.
    + PSD output.
    + New "mutool trace" tool.
    + New "mutool sign" tool (work in progress).
    + Text redaction (work in progress).
    + Lots of bug fixes.
- Strip "-source" from tarball name
- Switch to xz release (13mb smaller)
- rebase fix-openjpeg-flags.patch
- drop reproducible.patch
  * fixed upstream in 081d4c72430e3077a05499c783d9fbe24361b368
- Fixes CVE-2017-15369 (bsc#1063413), CVE-2017-15587 (bsc#1064027)</changelog>
  <changelog author="idonmez@suse.com" date="1516622400">- Add CVE-2018-5686.patch to fix an infinite loop
  CVE-2018-5686 bsc#1075936</changelog>
  <changelog author="kbabioch@suse.com" date="1516708800">- Add CVE-2017-17858.patch to fix an heap-based buffer overflow
  CVE-2017-17858 bsc#1077161</changelog>
  <changelog author="kbabioch@suse.com" date="1517572800">- Add CVE-2018-6187.patch to fix a heap buffer overflow in in pdf-write.c
  in the do_pdf_save_document function (CVE-2018-6187 boo#1077407)</changelog>
  <changelog author="kbabioch@suse.com" date="1517572801">- Add CVE-2018-6544.patch to fix a DoS in pdf_load_obj_stm within in
  pdf/pdf-xref.c (CVE-2018-6544 boo#1079100)
- Add CVE-2018-6192.patch to fix a DoS in pdf_read_new_xref within
  pdf/pdf-xref.c via crafted PDF file (CVE-2018-6192 boo#1077755)</changelog>
  <changelog author="kbabioch@suse.com" date="1517572802">- CVE-2018-6192.patch: Use official fix from usptream (CVE-2018-6192
  boo#1077755)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- use freetype2-devel explictily as buildrequires</changelog>
  <changelog author="kbabioch@suse.com" date="1518436800">- Add CVE-2018-1000051.patch: Fix a Use After Free vulnerability in
  fz_keep_key_storable that can potentially result in DoS / remote
  code execution (CVE-2018-1000051 bsc#1080531)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518609600">- Remove xorg-x11-devel from buildrequires</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518609601">-mupdf-no-strip.patch: fix debuginfo generation</changelog>
</package>
<package pkgid="87ee96c5307d41cb8af538dbf46865ba0161ed503c95575b1d219d75fdbc844b" name="mupdf-devel-static" arch="x86_64">
  <version epoch="0" ver="1.12.0" rel="lp150.3.3.1"/>
  <changelog author="idonmez@suse.com" date="1479988800">- Update to version 1.10
  * FictionBook (FB2) e-book support.
  * Simple SVG parser (a small subset of SVG only).
  * mutool convert: a new document conversion tool and interface.
  * Multi-threaded rendering in mudraw.
  * Updated base 14 fonts from URW.
  * New CJK font with language specific variants.
  * Hyperlink support in EPUB.
  * Alpha channel is now optional in pixmaps.
  * More aggressive purging of cached objects.
  * Partial image decoding for lower memory use when banding.
  * Reduced default set of built-in CMap tables to the minimum required.
  * FZ_ENABLE_PDF, _XPS, _JS, to disable features at compile time.
  * Function level linking.
  * Dropped pdf object generation numbers from public interfaces.
  * Simplified PDF page, xobject, and annotation internals.
  * Closing and freeing devices and writers are now separate steps.
  * Improved PDF annotation editing interface (still a work in progress).
  * Document writer interface.
  * Banded image writer interface.
- Drop CVE-2016-6265.patch and mupdf-fix-openjpeg2.patch,
  both are fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1482235200">- Update to version 1.10a
  * A bug with mutool and saving PDF files using the 'ascii'
    option has been fixed.
- Add fix-openjpeg-flags.patch to stop defining OPJ_STATIC,
  this is https://github.com/uclouvain/openjpeg/issues/802</changelog>
  <changelog author="idonmez@suse.com" date="1485259200">- Add CVE-2016-10132.patch, CVE-2016-10133.patch and
  CVE-2016-10141.patch to fix CVE-2016-10132, CVE-2016-10133 and
  CVE-2016-10141 bsc#1019877</changelog>
  <changelog author="idonmez@suse.com" date="1486382400">- Add CVE-2017-5627.patch and CVE-2017-5628.patch fixes
  CVE-2017-5627 and CVE-2017-5628 bsc#1022503 bsc#1022504</changelog>
  <changelog author="idonmez@suse.com" date="1486728000">- Add CVE-2017-5896.patch to fix a heap overflow
  CVE-2017-5896 bsc#1023761 bsc#1024679</changelog>
  <changelog author="idonmez@suse.com" date="1486728001">- Add bsc1023760.patch to fix writing svg output to stdout if no
  output specified bsc#1023760</changelog>
  <changelog author="idonmez@suse.com" date="1493294400">- mupdf is not a terminal app boo#1036637</changelog>
  <changelog author="bwiedemann@suse.com" date="1496059200">- Add reproducible.patch to sort input files to make build reproducible
  (boo#1041090)</changelog>
  <changelog author="idonmez@suse.com" date="1501761600">- Add CVE-2016-10221.patch, CVE-2016-8728.patch and
  CVE-2017-7976.patch to fix CVE-2016-10221, CVE-2016-8728,
  CVE-2016-8729 and CVE-2017-7976
  bsc#1032140 bsc#1039850 bsc#1052029</changelog>
  <changelog author="aloisio@gmx.com" date="1510315200">- Update to version 1.11
  * This is primarily a bug fix release.
  * PDF portfolio support with command line tool "mutool
    portfolio".
  * Add callbacks to load fallback fonts from the system.
  * Use system fonts in Android to reduce install size.
  * Flag to disable publisher styles in EPUB layout.
  * Improved SVG output.
- Refreshed fix-openjpeg-flags.patch and reproducible.patch
- Dropped CVE-2017-5896.patch, bsc1023760.patch,
  CVE-2016-10221.patch, CVE-2016-8728.patch, CVE-2017-7976.patch,
  CVE-2016-10132.patch, CVE-2016-10133.patch,
  CVE-2016-10141.patch, CVE-2017-5627.patch
  and CVE-2017-5628.patch (merged or adapted upstream)</changelog>
  <changelog author="avindra@opensuse.org" date="1515931200">- Update to version 1.12.0
  * Color Management:
    + LCMS2 library for color management
    + CMYK rendering with overprint simulation
    + Spot color rendering
    + Transparency rendering fixes
  * Structured text output improvements:
    + Reworked structured text API
    + Faster text searching
    + Highlight and copy text by selecting lines instead of by
    area
    + New semantic XHTML output format
    + New layout preserving HTML output format
  * Features and improvements:
    + Improved non-AA rendering with new scan converter
    + Improved LARGEFILE support
    + Improved TIFF support
    + Improved documentation
    + PCLm output.
    + PSD output.
    + New "mutool trace" tool.
    + New "mutool sign" tool (work in progress).
    + Text redaction (work in progress).
    + Lots of bug
[file cut: first 33554432 bytes kept]
[document cut: first 31987934 of 33554018 characters kept]
